Deltree "\clients\client1" NT_STATUS_OK
Mkdir "\clients" NT_STATUS_OK
NTCreateX "\clients\client1" 0x1 0x2 16385 NT_STATUS_OK
Close 16385 NT_STATUS_OK
NTCreateX "\clients\client1\mixfile" 0x40 0x1 9935 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\FILLER.*" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp" 0x1 0x2 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\filler.000" 0x40 0x2 9938 NT_STATUS_OK
QUERY_FS_INFORMATION 1 NT_STATUS_OK
WriteX 9938 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9938 258 NT_STATUS_OK
WriteX 9938 0 65536 65536 NT_STATUS_OK
WriteX 9938 65536 65536 65536 NT_STATUS_OK
WriteX 9938 131072 65536 65536 NT_STATUS_OK
WriteX 9938 196608 65536 65536 NT_STATUS_OK
WriteX 9938 262144 65536 65536 NT_STATUS_OK
WriteX 9938 327680 65536 65536 NT_STATUS_OK
WriteX 9938 393216 65536 65536 NT_STATUS_OK
WriteX 9938 458752 65536 65536 NT_STATUS_OK
WriteX 9938 524288 65536 65536 NT_STATUS_OK
WriteX 9938 589824 65536 65536 NT_STATUS_OK
WriteX 9938 655360 65536 65536 NT_STATUS_OK
WriteX 9938 720896 65536 65536 NT_STATUS_OK
WriteX 9938 786432 65536 65536 NT_STATUS_OK
WriteX 9938 851968 65536 65536 NT_STATUS_OK
WriteX 9938 917504 65536 65536 NT_STATUS_OK
WriteX 9938 983040 65536 65536 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\filler.001" 0x40 0x2 9939 NT_STATUS_OK
WriteX 9939 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9939 258 NT_STATUS_OK
WriteX 9939 0 65536 65536 NT_STATUS_OK
WriteX 9939 65536 65536 65536 NT_STATUS_OK
WriteX 9939 131072 65536 65536 NT_STATUS_OK
WriteX 9939 196608 65536 65536 NT_STATUS_OK
WriteX 9939 262144 65536 65536 NT_STATUS_OK
WriteX 9939 327680 65536 65536 NT_STATUS_OK
WriteX 9939 393216 65536 65536 NT_STATUS_OK
WriteX 9939 458752 65536 65536 NT_STATUS_OK
WriteX 9939 524288 65536 65536 NT_STATUS_OK
WriteX 9939 589824 65536 65536 NT_STATUS_OK
WriteX 9939 655360 65536 65536 NT_STATUS_OK
WriteX 9939 720896 65536 65536 NT_STATUS_OK
WriteX 9939 786432 65536 65536 NT_STATUS_OK
WriteX 9939 851968 65536 65536 NT_STATUS_OK
WriteX 9939 917504 65536 65536 NT_STATUS_OK
WriteX 9939 983040 65536 65536 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\filler.002" 0x40 0x2 9940 NT_STATUS_OK
WriteX 9940 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 258 NT_STATUS_OK
WriteX 9940 0 65536 65536 NT_STATUS_OK
WriteX 9940 65536 65536 65536 NT_STATUS_OK
WriteX 9940 131072 65536 65536 NT_STATUS_OK
WriteX 9940 196608 65536 65536 NT_STATUS_OK
WriteX 9940 262144 65536 65536 NT_STATUS_OK
WriteX 9940 327680 65536 65536 NT_STATUS_OK
WriteX 9940 393216 65536 65536 NT_STATUS_OK
WriteX 9940 458752 65536 65536 NT_STATUS_OK
WriteX 9940 524288 65536 65536 NT_STATUS_OK
WriteX 9940 589824 65536 65536 NT_STATUS_OK
WriteX 9940 655360 65536 65536 NT_STATUS_OK
WriteX 9940 720896 65536 65536 NT_STATUS_OK
WriteX 9940 786432 65536 65536 NT_STATUS_OK
WriteX 9940 851968 65536 65536 NT_STATUS_OK
WriteX 9940 917504 65536 65536 NT_STATUS_OK
WriteX 9940 983040 65536 65536 NT_STATUS_OK
Close 9940 NT_STATUS_OK
NTCreateX "\clients\client1\filler.003" 0x40 0x2 9941 NT_STATUS_OK
WriteX 9941 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9941 258 NT_STATUS_OK
WriteX 9941 0 65536 65536 NT_STATUS_OK
WriteX 9941 65536 65536 65536 NT_STATUS_OK
WriteX 9941 131072 65536 65536 NT_STATUS_OK
WriteX 9941 196608 65536 65536 NT_STATUS_OK
WriteX 9941 262144 65536 65536 NT_STATUS_OK
WriteX 9941 327680 65536 65536 NT_STATUS_OK
WriteX 9941 393216 65536 65536 NT_STATUS_OK
WriteX 9941 458752 65536 65536 NT_STATUS_OK
WriteX 9941 524288 65536 65536 NT_STATUS_OK
WriteX 9941 589824 65536 65536 NT_STATUS_OK
WriteX 9941 655360 65536 65536 NT_STATUS_OK
WriteX 9941 720896 65536 65536 NT_STATUS_OK
WriteX 9941 786432 65536 65536 NT_STATUS_OK
WriteX 9941 851968 65536 65536 NT_STATUS_OK
WriteX 9941 917504 65536 65536 NT_STATUS_OK
WriteX 9941 983040 65536 65536 NT_STATUS_OK
Close 9941 NT_STATUS_OK
NTCreateX "\clients\client1\filler.004" 0x40 0x2 9942 NT_STATUS_OK
WriteX 9942 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9942 258 NT_STATUS_OK
WriteX 9942 0 65536 65536 NT_STATUS_OK
WriteX 9942 65536 65536 65536 NT_STATUS_OK
WriteX 9942 131072 65536 65536 NT_STATUS_OK
WriteX 9942 196608 65536 65536 NT_STATUS_OK
WriteX 9942 262144 65536 65536 NT_STATUS_OK
WriteX 9942 327680 65536 65536 NT_STATUS_OK
WriteX 9942 393216 65536 65536 NT_STATUS_OK
WriteX 9942 458752 65536 65536 NT_STATUS_OK
WriteX 9942 524288 65536 65536 NT_STATUS_OK
WriteX 9942 589824 65536 65536 NT_STATUS_OK
WriteX 9942 655360 65536 65536 NT_STATUS_OK
WriteX 9942 720896 65536 65536 NT_STATUS_OK
WriteX 9942 786432 65536 65536 NT_STATUS_OK
WriteX 9942 851968 65536 65536 NT_STATUS_OK
WriteX 9942 917504 65536 65536 NT_STATUS_OK
WriteX 9942 983040 65536 65536 NT_STATUS_OK
Close 9942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD" 0x1 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x2 9944 NT_STATUS_OK
WriteX 9944 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 258 NT_STATUS_OK
WriteX 9944 0 65536 65536 NT_STATUS_OK
WriteX 9944 65536 65536 65536 NT_STATUS_OK
WriteX 9944 131072 65536 65536 NT_STATUS_OK
WriteX 9944 196608 63488 63488 NT_STATUS_OK
Close 9944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x2 9945 NT_STATUS_OK
WriteX 9945 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9945 258 NT_STATUS_OK
WriteX 9945 0 65536 65536 NT_STATUS_OK
WriteX 9945 65536 65536 65536 NT_STATUS_OK
WriteX 9945 131072 65536 65536 NT_STATUS_OK
WriteX 9945 196608 63488 63488 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 65536 65536 NT_STATUS_OK
WriteX 9946 131072 65536 65536 NT_STATUS_OK
WriteX 9946 196608 63488 63488 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL" 0x1 0x2 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x2 9948 NT_STATUS_OK
WriteX 9948 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9948 258 NT_STATUS_OK
WriteX 9948 0 65536 65536 NT_STATUS_OK
WriteX 9948 65536 65536 65536 NT_STATUS_OK
WriteX 9948 131072 65536 65536 NT_STATUS_OK
WriteX 9948 196608 63488 63488 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x2 9949 NT_STATUS_OK
WriteX 9949 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9949 258 NT_STATUS_OK
WriteX 9949 0 65536 65536 NT_STATUS_OK
WriteX 9949 65536 65536 65536 NT_STATUS_OK
WriteX 9949 131072 65536 65536 NT_STATUS_OK
WriteX 9949 196608 63488 63488 NT_STATUS_OK
Close 9949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT" 0x1 0x2 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x2 9951 NT_STATUS_OK
WriteX 9951 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9951 258 NT_STATUS_OK
WriteX 9951 0 65536 65536 NT_STATUS_OK
WriteX 9951 65536 65536 65536 NT_STATUS_OK
WriteX 9951 131072 65536 65536 NT_STATUS_OK
WriteX 9951 196608 63488 63488 NT_STATUS_OK
Close 9951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x2 9952 NT_STATUS_OK
WriteX 9952 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9952 258 NT_STATUS_OK
WriteX 9952 0 65536 65536 NT_STATUS_OK
WriteX 9952 65536 65536 65536 NT_STATUS_OK
WriteX 9952 131072 65536 65536 NT_STATUS_OK
WriteX 9952 196608 63488 63488 NT_STATUS_OK
Close 9952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x2 9953 NT_STATUS_OK
WriteX 9953 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9953 258 NT_STATUS_OK
WriteX 9953 0 65536 65536 NT_STATUS_OK
WriteX 9953 65536 65536 65536 NT_STATUS_OK
WriteX 9953 131072 65536 65536 NT_STATUS_OK
WriteX 9953 196608 63488 63488 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x2 9954 NT_STATUS_OK
WriteX 9954 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9954 258 NT_STATUS_OK
WriteX 9954 0 65536 65536 NT_STATUS_OK
WriteX 9954 65536 65536 65536 NT_STATUS_OK
WriteX 9954 131072 65536 65536 NT_STATUS_OK
WriteX 9954 196608 63488 63488 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x2 9955 NT_STATUS_OK
WriteX 9955 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9955 258 NT_STATUS_OK
WriteX 9955 0 65536 65536 NT_STATUS_OK
WriteX 9955 65536 65536 65536 NT_STATUS_OK
WriteX 9955 131072 65536 65536 NT_STATUS_OK
WriteX 9955 196608 63488 63488 NT_STATUS_OK
Close 9955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL" 0x1 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x2 9957 NT_STATUS_OK
WriteX 9957 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9957 258 NT_STATUS_OK
WriteX 9957 0 65536 65536 NT_STATUS_OK
WriteX 9957 65536 65536 65536 NT_STATUS_OK
WriteX 9957 131072 65536 65536 NT_STATUS_OK
WriteX 9957 196608 63488 63488 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x2 9958 NT_STATUS_OK
WriteX 9958 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9958 258 NT_STATUS_OK
WriteX 9958 0 65536 65536 NT_STATUS_OK
WriteX 9958 65536 65536 65536 NT_STATUS_OK
WriteX 9958 131072 65536 65536 NT_STATUS_OK
WriteX 9958 196608 63488 63488 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x2 9959 NT_STATUS_OK
WriteX 9959 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9959 258 NT_STATUS_OK
WriteX 9959 0 65536 65536 NT_STATUS_OK
WriteX 9959 65536 65536 65536 NT_STATUS_OK
WriteX 9959 131072 65536 65536 NT_STATUS_OK
WriteX 9959 196608 63488 63488 NT_STATUS_OK
Close 9959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x2 9960 NT_STATUS_OK
WriteX 9960 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9960 258 NT_STATUS_OK
WriteX 9960 0 65536 65536 NT_STATUS_OK
WriteX 9960 65536 65536 65536 NT_STATUS_OK
WriteX 9960 131072 65536 65536 NT_STATUS_OK
WriteX 9960 196608 63488 63488 NT_STATUS_OK
Close 9960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 63488 63488 NT_STATUS_OK
Close 9961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x2 9962 NT_STATUS_OK
WriteX 9962 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 258 NT_STATUS_OK
WriteX 9962 0 65536 65536 NT_STATUS_OK
WriteX 9962 65536 65536 65536 NT_STATUS_OK
WriteX 9962 131072 65536 65536 NT_STATUS_OK
WriteX 9962 196608 63488 63488 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x2 9963 NT_STATUS_OK
WriteX 9963 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 65536 65536 NT_STATUS_OK
WriteX 9963 65536 65536 65536 NT_STATUS_OK
WriteX 9963 131072 65536 65536 NT_STATUS_OK
WriteX 9963 196608 63488 63488 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x2 9964 NT_STATUS_OK
WriteX 9964 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9964 258 NT_STATUS_OK
WriteX 9964 0 65536 65536 NT_STATUS_OK
WriteX 9964 65536 65536 65536 NT_STATUS_OK
WriteX 9964 131072 65536 65536 NT_STATUS_OK
WriteX 9964 196608 63488 63488 NT_STATUS_OK
Close 9964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x2 9965 NT_STATUS_OK
WriteX 9965 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9965 258 NT_STATUS_OK
WriteX 9965 0 65536 65536 NT_STATUS_OK
WriteX 9965 65536 65536 65536 NT_STATUS_OK
WriteX 9965 131072 65536 65536 NT_STATUS_OK
WriteX 9965 196608 63488 63488 NT_STATUS_OK
Close 9965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x2 9966 NT_STATUS_OK
WriteX 9966 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9966 258 NT_STATUS_OK
WriteX 9966 0 65536 65536 NT_STATUS_OK
WriteX 9966 65536 65536 65536 NT_STATUS_OK
WriteX 9966 131072 65536 65536 NT_STATUS_OK
WriteX 9966 196608 63488 63488 NT_STATUS_OK
Close 9966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x2 9967 NT_STATUS_OK
WriteX 9967 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9967 258 NT_STATUS_OK
WriteX 9967 0 65536 65536 NT_STATUS_OK
WriteX 9967 65536 65536 65536 NT_STATUS_OK
WriteX 9967 131072 65536 65536 NT_STATUS_OK
WriteX 9967 196608 63488 63488 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO" 0x1 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x2 9969 NT_STATUS_OK
WriteX 9969 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 258 NT_STATUS_OK
WriteX 9969 0 65536 65536 NT_STATUS_OK
WriteX 9969 65536 65536 65536 NT_STATUS_OK
WriteX 9969 131072 65536 65536 NT_STATUS_OK
WriteX 9969 196608 63488 63488 NT_STATUS_OK
Close 9969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 65536 65536 NT_STATUS_OK
WriteX 9970 131072 65536 65536 NT_STATUS_OK
WriteX 9970 196608 63488 63488 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x2 9971 NT_STATUS_OK
WriteX 9971 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 258 NT_STATUS_OK
WriteX 9971 0 65536 65536 NT_STATUS_OK
WriteX 9971 65536 65536 65536 NT_STATUS_OK
WriteX 9971 131072 65536 65536 NT_STATUS_OK
WriteX 9971 196608 63488 63488 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM" 0x1 0x2 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x2 9973 NT_STATUS_OK
WriteX 9973 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9973 258 NT_STATUS_OK
WriteX 9973 0 65536 65536 NT_STATUS_OK
WriteX 9973 65536 65536 65536 NT_STATUS_OK
WriteX 9973 131072 65536 65536 NT_STATUS_OK
WriteX 9973 196608 63488 63488 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x2 9974 NT_STATUS_OK
WriteX 9974 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9974 258 NT_STATUS_OK
WriteX 9974 0 65536 65536 NT_STATUS_OK
WriteX 9974 65536 65536 65536 NT_STATUS_OK
WriteX 9974 131072 65536 65536 NT_STATUS_OK
WriteX 9974 196608 63488 63488 NT_STATUS_OK
Close 9974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 65536 65536 NT_STATUS_OK
WriteX 9975 65536 65536 65536 NT_STATUS_OK
WriteX 9975 131072 65536 65536 NT_STATUS_OK
WriteX 9975 196608 63488 63488 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX" 0x1 0x2 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x2 9977 NT_STATUS_OK
WriteX 9977 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9977 258 NT_STATUS_OK
WriteX 9977 0 65536 65536 NT_STATUS_OK
WriteX 9977 65536 65536 65536 NT_STATUS_OK
WriteX 9977 131072 65536 65536 NT_STATUS_OK
WriteX 9977 196608 63488 63488 NT_STATUS_OK
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x2 9978 NT_STATUS_OK
WriteX 9978 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 258 NT_STATUS_OK
WriteX 9978 0 65536 65536 NT_STATUS_OK
WriteX 9978 65536 65536 65536 NT_STATUS_OK
WriteX 9978 131072 65536 65536 NT_STATUS_OK
WriteX 9978 196608 63488 63488 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x2 9979 NT_STATUS_OK
WriteX 9979 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 258 NT_STATUS_OK
WriteX 9979 0 65536 65536 NT_STATUS_OK
WriteX 9979 65536 65536 65536 NT_STATUS_OK
WriteX 9979 131072 65536 65536 NT_STATUS_OK
WriteX 9979 196608 63488 63488 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x2 9980 NT_STATUS_OK
WriteX 9980 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 258 NT_STATUS_OK
WriteX 9980 0 65536 65536 NT_STATUS_OK
WriteX 9980 65536 65536 65536 NT_STATUS_OK
WriteX 9980 131072 65536 65536 NT_STATUS_OK
WriteX 9980 196608 63488 63488 NT_STATUS_OK
Close 9980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x2 9981 NT_STATUS_OK
WriteX 9981 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9981 258 NT_STATUS_OK
WriteX 9981 0 65536 65536 NT_STATUS_OK
WriteX 9981 65536 65536 65536 NT_STATUS_OK
WriteX 9981 131072 65536 65536 NT_STATUS_OK
WriteX 9981 196608 63488 63488 NT_STATUS_OK
Close 9981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x2 9982 NT_STATUS_OK
WriteX 9982 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9982 258 NT_STATUS_OK
WriteX 9982 0 65536 65536 NT_STATUS_OK
WriteX 9982 65536 65536 65536 NT_STATUS_OK
WriteX 9982 131072 65536 65536 NT_STATUS_OK
WriteX 9982 196608 63488 63488 NT_STATUS_OK
Close 9982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x2 9983 NT_STATUS_OK
WriteX 9983 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9983 258 NT_STATUS_OK
WriteX 9983 0 65536 65536 NT_STATUS_OK
WriteX 9983 65536 65536 65536 NT_STATUS_OK
WriteX 9983 131072 65536 65536 NT_STATUS_OK
WriteX 9983 196608 63488 63488 NT_STATUS_OK
Close 9983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 65536 65536 NT_STATUS_OK
WriteX 9984 131072 65536 65536 NT_STATUS_OK
WriteX 9984 196608 63488 63488 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x2 9985 NT_STATUS_OK
WriteX 9985 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9985 258 NT_STATUS_OK
WriteX 9985 0 65536 65536 NT_STATUS_OK
WriteX 9985 65536 65536 65536 NT_STATUS_OK
WriteX 9985 131072 65536 65536 NT_STATUS_OK
WriteX 9985 196608 63488 63488 NT_STATUS_OK
Close 9985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 63488 63488 NT_STATUS_OK
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x2 9987 NT_STATUS_OK
WriteX 9987 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9987 258 NT_STATUS_OK
WriteX 9987 0 65536 65536 NT_STATUS_OK
WriteX 9987 65536 65536 65536 NT_STATUS_OK
WriteX 9987 131072 65536 65536 NT_STATUS_OK
WriteX 9987 196608 63488 63488 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x2 9988 NT_STATUS_OK
WriteX 9988 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9988 258 NT_STATUS_OK
WriteX 9988 0 65536 65536 NT_STATUS_OK
WriteX 9988 65536 65536 65536 NT_STATUS_OK
WriteX 9988 131072 65536 65536 NT_STATUS_OK
WriteX 9988 196608 63488 63488 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x2 9989 NT_STATUS_OK
WriteX 9989 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 258 NT_STATUS_OK
WriteX 9989 0 65536 65536 NT_STATUS_OK
WriteX 9989 65536 65536 65536 NT_STATUS_OK
WriteX 9989 131072 65536 65536 NT_STATUS_OK
WriteX 9989 196608 63488 63488 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x2 9990 NT_STATUS_OK
WriteX 9990 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9990 258 NT_STATUS_OK
WriteX 9990 0 65536 65536 NT_STATUS_OK
WriteX 9990 65536 65536 65536 NT_STATUS_OK
WriteX 9990 131072 65536 65536 NT_STATUS_OK
WriteX 9990 196608 63488 63488 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x2 9991 NT_STATUS_OK
WriteX 9991 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 65536 65536 NT_STATUS_OK
WriteX 9991 65536 65536 65536 NT_STATUS_OK
WriteX 9991 131072 65536 65536 NT_STATUS_OK
WriteX 9991 196608 63488 63488 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x2 9992 NT_STATUS_OK
WriteX 9992 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9992 258 NT_STATUS_OK
WriteX 9992 0 65536 65536 NT_STATUS_OK
WriteX 9992 65536 65536 65536 NT_STATUS_OK
WriteX 9992 131072 65536 65536 NT_STATUS_OK
WriteX 9992 196608 63488 63488 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x2 9993 NT_STATUS_OK
WriteX 9993 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9993 258 NT_STATUS_OK
WriteX 9993 0 65536 65536 NT_STATUS_OK
WriteX 9993 65536 65536 65536 NT_STATUS_OK
WriteX 9993 131072 65536 65536 NT_STATUS_OK
WriteX 9993 196608 63488 63488 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x2 9994 NT_STATUS_OK
WriteX 9994 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9994 258 NT_STATUS_OK
WriteX 9994 0 65536 65536 NT_STATUS_OK
WriteX 9994 65536 65536 65536 NT_STATUS_OK
WriteX 9994 131072 65536 65536 NT_STATUS_OK
WriteX 9994 196608 63488 63488 NT_STATUS_OK
Close 9994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x2 9995 NT_STATUS_OK
WriteX 9995 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9995 258 NT_STATUS_OK
WriteX 9995 0 65536 65536 NT_STATUS_OK
WriteX 9995 65536 65536 65536 NT_STATUS_OK
WriteX 9995 131072 65536 65536 NT_STATUS_OK
WriteX 9995 196608 63488 63488 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x2 9996 NT_STATUS_OK
WriteX 9996 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9996 258 NT_STATUS_OK
WriteX 9996 0 65536 65536 NT_STATUS_OK
WriteX 9996 65536 65536 65536 NT_STATUS_OK
WriteX 9996 131072 65536 65536 NT_STATUS_OK
WriteX 9996 196608 63488 63488 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS" 0x1 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x2 9998 NT_STATUS_OK
WriteX 9998 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9998 258 NT_STATUS_OK
WriteX 9998 0 65536 65536 NT_STATUS_OK
WriteX 9998 65536 65536 65536 NT_STATUS_OK
WriteX 9998 131072 65536 65536 NT_STATUS_OK
WriteX 9998 196608 63488 63488 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED" 0x1 0x2 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x2 10000 NT_STATUS_OK
WriteX 10000 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 258 NT_STATUS_OK
WriteX 10000 0 65536 65536 NT_STATUS_OK
WriteX 10000 65536 65536 65536 NT_STATUS_OK
WriteX 10000 131072 65536 65536 NT_STATUS_OK
WriteX 10000 196608 65536 65536 NT_STATUS_OK
WriteX 10000 262144 65536 65536 NT_STATUS_OK
Close 10000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x2 10001 NT_STATUS_OK
WriteX 10001 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10001 258 NT_STATUS_OK
WriteX 10001 0 65536 65536 NT_STATUS_OK
WriteX 10001 65536 65536 65536 NT_STATUS_OK
WriteX 10001 131072 65536 65536 NT_STATUS_OK
WriteX 10001 196608 65536 65536 NT_STATUS_OK
WriteX 10001 262144 65536 65536 NT_STATUS_OK
WriteX 10001 327680 65536 65536 NT_STATUS_OK
WriteX 10001 393216 65536 65536 NT_STATUS_OK
WriteX 10001 458752 65536 65536 NT_STATUS_OK
WriteX 10001 524288 65536 65536 NT_STATUS_OK
WriteX 10001 589824 65536 65536 NT_STATUS_OK
WriteX 10001 655360 65536 65536 NT_STATUS_OK
WriteX 10001 720896 65536 65536 NT_STATUS_OK
WriteX 10001 786432 65536 65536 NT_STATUS_OK
WriteX 10001 851968 65536 65536 NT_STATUS_OK
WriteX 10001 917504 65536 65536 NT_STATUS_OK
WriteX 10001 983040 65536 65536 NT_STATUS_OK
Close 10001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x2 10002 NT_STATUS_OK
WriteX 10002 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1114094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1179629 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1245164 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1310699 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1376234 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1441769 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1507304 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1572839 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1638374 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1703909 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1769444 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1834979 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1867775 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 0 65536 65536 NT_STATUS_OK
WriteX 10002 65536 65536 65536 NT_STATUS_OK
WriteX 10002 131072 65536 65536 NT_STATUS_OK
WriteX 10002 196608 65536 65536 NT_STATUS_OK
WriteX 10002 262144 65536 65536 NT_STATUS_OK
WriteX 10002 327680 65536 65536 NT_STATUS_OK
WriteX 10002 393216 65536 65536 NT_STATUS_OK
WriteX 10002 458752 65536 65536 NT_STATUS_OK
WriteX 10002 524288 65536 65536 NT_STATUS_OK
WriteX 10002 589824 65536 65536 NT_STATUS_OK
WriteX 10002 655360 65536 65536 NT_STATUS_OK
WriteX 10002 720896 65536 65536 NT_STATUS_OK
WriteX 10002 786432 65536 65536 NT_STATUS_OK
WriteX 10002 851968 65536 65536 NT_STATUS_OK
WriteX 10002 917504 65536 65536 NT_STATUS_OK
WriteX 10002 983040 65536 65536 NT_STATUS_OK
WriteX 10002 1048576 65536 65536 NT_STATUS_OK
WriteX 10002 1114112 65536 65536 NT_STATUS_OK
WriteX 10002 1179648 65536 65536 NT_STATUS_OK
WriteX 10002 1245184 65536 65536 NT_STATUS_OK
WriteX 10002 1310720 65536 65536 NT_STATUS_OK
WriteX 10002 1376256 65536 65536 NT_STATUS_OK
WriteX 10002 1441792 65536 65536 NT_STATUS_OK
WriteX 10002 1507328 65536 65536 NT_STATUS_OK
WriteX 10002 1572864 65536 65536 NT_STATUS_OK
WriteX 10002 1638400 65536 65536 NT_STATUS_OK
WriteX 10002 1703936 65536 65536 NT_STATUS_OK
WriteX 10002 1769472 65536 65536 NT_STATUS_OK
WriteX 10002 1835008 32768 32768 NT_STATUS_OK
Close 10002 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10003 0 4096 4096 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10005 NT_STATUS_OK
ReadX 10005 0 4096 4096 NT_STATUS_OK
ReadX 10005 4096 4096 4096 NT_STATUS_OK
ReadX 10005 8192 4096 4096 NT_STATUS_OK
ReadX 10005 12288 4096 4096 NT_STATUS_OK
ReadX 10005 16384 4096 4096 NT_STATUS_OK
ReadX 10005 20480 4096 4096 NT_STATUS_OK
ReadX 10005 24576 4096 4096 NT_STATUS_OK
ReadX 10005 28672 4096 4096 NT_STATUS_OK
ReadX 10005 32768 4096 4096 NT_STATUS_OK
ReadX 10005 36864 4096 4096 NT_STATUS_OK
ReadX 10005 40960 4096 4096 NT_STATUS_OK
ReadX 10005 45056 4096 4096 NT_STATUS_OK
ReadX 10005 49152 4096 4096 NT_STATUS_OK
ReadX 10005 53248 4096 4096 NT_STATUS_OK
ReadX 10005 57344 4096 4096 NT_STATUS_OK
ReadX 10005 61440 4096 4096 NT_STATUS_OK
ReadX 10005 65536 4096 4096 NT_STATUS_OK
ReadX 10005 69632 4096 4096 NT_STATUS_OK
ReadX 10005 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
WriteX 10005 0 4096 4096 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10006 NT_STATUS_OK
SET_FILE_INFORMATION 10006 1004 NT_STATUS_OK
Close 10006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10007 NT_STATUS_OK
ReadX 10007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 18432 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10011 NT_STATUS_OK
WriteX 10011 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 19979 19979 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
QUERY_FILE_INFORMATION 10012 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
SET_FILE_INFORMATION 10012 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 4096 4096 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
Close 10015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10016 NT_STATUS_OK
ReadX 10016 0 4096 4096 NT_STATUS_OK
Close 10016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
WriteX 10017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10023 NT_STATUS_OK
WriteX 10023 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10023 258 NT_STATUS_OK
WriteX 10023 0 65536 65536 NT_STATUS_OK
WriteX 10023 65536 17654 17654 NT_STATUS_OK
Close 10023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
QUERY_FILE_INFORMATION 10024 1004 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
SET_FILE_INFORMATION 10024 1004 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10025 NT_STATUS_OK
SET_FILE_INFORMATION 10025 1004 NT_STATUS_OK
Close 10025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
ReadX 10029 4096 4096 4096 NT_STATUS_OK
ReadX 10029 8192 4096 4096 NT_STATUS_OK
ReadX 10029 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10029 16384 4096 4096 NT_STATUS_OK
ReadX 10029 20480 4096 4096 NT_STATUS_OK
ReadX 10029 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
Close 10030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
Close 10031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10032 1004 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10033 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10038 NT_STATUS_OK
WriteX 10038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 19490 19490 NT_STATUS_OK
Close 10038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
QUERY_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
Close 10039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10040 NT_STATUS_OK
SET_FILE_INFORMATION 10040 1004 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10044 0 4096 4096 NT_STATUS_OK
Close 10044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10045 NT_STATUS_OK
ReadX 10045 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
ReadX 10046 4096 4096 4096 NT_STATUS_OK
ReadX 10046 8192 4096 4096 NT_STATUS_OK
ReadX 10046 12288 4096 4096 NT_STATUS_OK
ReadX 10046 16384 4096 4096 NT_STATUS_OK
ReadX 10046 20480 4096 4096 NT_STATUS_OK
ReadX 10046 24576 4096 4096 NT_STATUS_OK
ReadX 10046 28672 4096 4096 NT_STATUS_OK
ReadX 10046 32768 4096 4096 NT_STATUS_OK
ReadX 10046 36864 4096 4096 NT_STATUS_OK
ReadX 10046 40960 4096 4096 NT_STATUS_OK
ReadX 10046 45056 4096 4096 NT_STATUS_OK
ReadX 10046 49152 4096 4096 NT_STATUS_OK
ReadX 10046 53248 4096 4096 NT_STATUS_OK
ReadX 10046 57344 4096 4096 NT_STATUS_OK
ReadX 10046 61440 4096 4096 NT_STATUS_OK
ReadX 10046 65536 4096 4096 NT_STATUS_OK
ReadX 10046 69632 4096 4096 NT_STATUS_OK
ReadX 10046 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Close 10046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10047 NT_STATUS_OK
SET_FILE_INFORMATION 10047 1004 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10049 NT_STATUS_OK
Close 10049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 18432 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10052 NT_STATUS_OK
WriteX 10052 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10052 258 NT_STATUS_OK
WriteX 10052 0 65536 65536 NT_STATUS_OK
WriteX 10052 65536 8866 8866 NT_STATUS_OK
Close 10052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10054 NT_STATUS_OK
ReadX 10054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 0 4096 4096 NT_STATUS_OK
Close 10055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10056 NT_STATUS_OK
ReadX 10056 0 4096 4096 NT_STATUS_OK
Close 10056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10057 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10057 1004 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10048 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10063 NT_STATUS_OK
WriteX 10063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10063 258 NT_STATUS_OK
WriteX 10063 0 65536 65536 NT_STATUS_OK
WriteX 10063 65536 9298 9298 NT_STATUS_OK
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Flush 10064 NT_STATUS_OK
SET_FILE_INFORMATION 10064 1004 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Flush 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10065 NT_STATUS_OK
SET_FILE_INFORMATION 10065 1004 NT_STATUS_OK
Close 10065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10070 0 4096 4096 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10071 4096 4096 4096 NT_STATUS_OK
ReadX 10071 8192 4096 4096 NT_STATUS_OK
ReadX 10071 12288 4096 4096 NT_STATUS_OK
ReadX 10071 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 4096 4096 NT_STATUS_OK
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10074 1004 NT_STATUS_OK
WriteX 10074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10071 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10077 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10080 NT_STATUS_OK
WriteX 10080 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 65536 65536 NT_STATUS_OK
WriteX 10080 65536 11540 11540 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
Flush 10081 NT_STATUS_OK
SET_FILE_INFORMATION 10081 1004 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
Flush 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10082 NT_STATUS_OK
SET_FILE_INFORMATION 10082 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10084 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 61440 4096 4096 NT_STATUS_OK
ReadX 10086 126976 4096 4096 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 61440 4096 4096 NT_STATUS_OK
ReadX 10087 126976 4096 4096 NT_STATUS_OK
ReadX 10087 192512 4096 4096 NT_STATUS_OK
ReadX 10087 258048 4096 4096 NT_STATUS_OK
WriteX 10087 0 65536 65536 NT_STATUS_OK
WriteX 10087 65536 65536 65536 NT_STATUS_OK
WriteX 10087 131072 65536 65536 NT_STATUS_OK
WriteX 10087 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 61440 4096 4096 NT_STATUS_OK
ReadX 10088 126976 4096 4096 NT_STATUS_OK
ReadX 10088 192512 4096 4096 NT_STATUS_OK
ReadX 10088 258048 4096 4096 NT_STATUS_OK
ReadX 10088 323584 4096 4096 NT_STATUS_OK
ReadX 10088 389120 4096 4096 NT_STATUS_OK
ReadX 10088 454656 4096 4096 NT_STATUS_OK
ReadX 10088 520192 4096 4096 NT_STATUS_OK
WriteX 10088 0 65536 65536 NT_STATUS_OK
WriteX 10088 65536 65536 65536 NT_STATUS_OK
WriteX 10088 131072 65536 65536 NT_STATUS_OK
WriteX 10088 196608 65536 65536 NT_STATUS_OK
WriteX 10088 262144 65536 65536 NT_STATUS_OK
WriteX 10088 327680 65536 65536 NT_STATUS_OK
WriteX 10088 393216 65536 65536 NT_STATUS_OK
WriteX 10088 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
ReadX 10089 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10090 NT_STATUS_OK
WriteX 10090 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 258 NT_STATUS_OK
WriteX 10090 0 53 53 NT_STATUS_OK
Close 10090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10091 NT_STATUS_OK
Close 10091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
WriteX 10093 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10093 258 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
ReadX 10089 20480 4096 4096 NT_STATUS_OK
WriteX 10093 0 15360 15360 NT_STATUS_OK
Close 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10094 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10094 1004 NT_STATUS_OK
WriteX 10094 0 4096 4096 NT_STATUS_OK
Close 10094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10097 NT_STATUS_OK
ReadX 10097 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10098 NT_STATUS_OK
Close 10098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10097 4096 4096 4096 NT_STATUS_OK
ReadX 10097 8192 4096 4096 NT_STATUS_OK
ReadX 10097 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10100 NT_STATUS_OK
ReadX 10100 0 4096 4096 NT_STATUS_OK
ReadX 10100 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
ReadX 10101 4096 4096 4096 NT_STATUS_OK
ReadX 10101 8192 4096 4096 NT_STATUS_OK
Close 10100 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10102 NT_STATUS_OK
WriteX 10102 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10102 258 NT_STATUS_OK
WriteX 10102 0 15360 15360 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10103 NT_STATUS_OK
ReadX 10103 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10103 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10103 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10104 NT_STATUS_OK
Close 10104 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10107 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
Close 10107 NT_STATUS_OK
WriteX 10103 0 4096 4096 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10108 NT_STATUS_OK
Close 10108 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
ReadX 10110 4096 4096 4096 NT_STATUS_OK
ReadX 10110 8192 4096 4096 NT_STATUS_OK
ReadX 10110 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10110 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10110 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10112 NT_STATUS_OK
WriteX 10112 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10112 258 NT_STATUS_OK
WriteX 10112 0 53 53 NT_STATUS_OK
Close 10112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10111 4096 4096 4096 NT_STATUS_OK
ReadX 10111 8192 4096 4096 NT_STATUS_OK
ReadX 10111 12288 4096 4096 NT_STATUS_OK
WriteX 10115 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10115 258 NT_STATUS_OK
WriteX 10115 0 12006 12006 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
WriteX 10116 0 4096 4096 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10117 NT_STATUS_OK
Close 10117 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10120 NT_STATUS_OK
Close 10120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10119 4096 4096 4096 NT_STATUS_OK
ReadX 10119 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
WriteX 10122 0 11991 11991 NT_STATUS_OK
Close 10122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10123 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10123 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10127 NT_STATUS_OK
SET_FILE_INFORMATION 10127 1004 NT_STATUS_OK
Close 10127 NT_STATUS_OK
WriteX 10123 0 4096 4096 NT_STATUS_OK
Close 10123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10128 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10130 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
ReadX 10130 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
WriteX 10130 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
Close 10106 NT_STATUS_OK
WriteX 10110 0 19054 19054 NT_STATUS_OK
WriteX 10130 0 12288 12288 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10133 NT_STATUS_OK
Close 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 61440 61440 NT_STATUS_OK
ReadX 10137 61440 4096 4096 NT_STATUS_OK
ReadX 10137 65536 61440 61440 NT_STATUS_OK
ReadX 10137 126976 4096 4096 NT_STATUS_OK
ReadX 10137 131072 61440 61440 NT_STATUS_OK
ReadX 10137 192512 4096 4096 NT_STATUS_OK
ReadX 10137 196608 61440 61440 NT_STATUS_OK
ReadX 10137 258048 4096 4096 NT_STATUS_OK
ReadX 10137 262144 61440 61440 NT_STATUS_OK
ReadX 10137 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 61440 61440 NT_STATUS_OK
ReadX 10138 61440 4096 4096 NT_STATUS_OK
ReadX 10138 65536 61440 61440 NT_STATUS_OK
ReadX 10138 126976 4096 4096 NT_STATUS_OK
ReadX 10138 131072 61440 61440 NT_STATUS_OK
ReadX 10138 192512 4096 4096 NT_STATUS_OK
ReadX 10138 196608 61440 61440 NT_STATUS_OK
ReadX 10138 258048 4096 4096 NT_STATUS_OK
ReadX 10138 262144 61440 61440 NT_STATUS_OK
ReadX 10138 323584 4096 4096 NT_STATUS_OK
ReadX 10138 327680 61440 61440 NT_STATUS_OK
ReadX 10138 389120 4096 4096 NT_STATUS_OK
ReadX 10138 393216 61440 61440 NT_STATUS_OK
ReadX 10138 454656 4096 4096 NT_STATUS_OK
ReadX 10138 458752 61440 61440 NT_STATUS_OK
ReadX 10138 520192 4096 4096 NT_STATUS_OK
ReadX 10138 524288 61440 61440 NT_STATUS_OK
ReadX 10138 585728 4096 4096 NT_STATUS_OK
ReadX 10138 589824 61440 61440 NT_STATUS_OK
ReadX 10138 651264 4096 4096 NT_STATUS_OK
ReadX 10138 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 61440 61440 NT_STATUS_OK
ReadX 10139 61440 4096 4096 NT_STATUS_OK
ReadX 10139 65536 61440 61440 NT_STATUS_OK
ReadX 10139 126976 4096 4096 NT_STATUS_OK
ReadX 10139 131072 61440 61440 NT_STATUS_OK
ReadX 10139 192512 4096 4096 NT_STATUS_OK
ReadX 10139 196608 61440 61440 NT_STATUS_OK
ReadX 10139 258048 4096 4096 NT_STATUS_OK
ReadX 10139 262144 61440 61440 NT_STATUS_OK
ReadX 10139 323584 4096 4096 NT_STATUS_OK
ReadX 10139 327680 61440 61440 NT_STATUS_OK
ReadX 10139 389120 4096 4096 NT_STATUS_OK
ReadX 10139 393216 61440 61440 NT_STATUS_OK
ReadX 10139 454656 4096 4096 NT_STATUS_OK
ReadX 10139 458752 61440 61440 NT_STATUS_OK
ReadX 10139 520192 4096 4096 NT_STATUS_OK
ReadX 10139 524288 61440 61440 NT_STATUS_OK
ReadX 10139 585728 4096 4096 NT_STATUS_OK
ReadX 10139 589824 61440 61440 NT_STATUS_OK
ReadX 10139 651264 4096 4096 NT_STATUS_OK
ReadX 10139 655360 61440 61440 NT_STATUS_OK
ReadX 10139 716800 4096 4096 NT_STATUS_OK
ReadX 10139 720896 61440 61440 NT_STATUS_OK
ReadX 10139 782336 4096 4096 NT_STATUS_OK
ReadX 10139 786432 61440 61440 NT_STATUS_OK
ReadX 10139 847872 4096 4096 NT_STATUS_OK
ReadX 10139 851968 61440 61440 NT_STATUS_OK
ReadX 10139 913408 4096 4096 NT_STATUS_OK
ReadX 10139 917504 61440 61440 NT_STATUS_OK
ReadX 10139 978944 4096 4096 NT_STATUS_OK
ReadX 10139 983040 61440 61440 NT_STATUS_OK
ReadX 10139 1044480 4096 4096 NT_STATUS_OK
ReadX 10139 1048576 61440 61440 NT_STATUS_OK
ReadX 10139 1110016 4096 4096 NT_STATUS_OK
ReadX 10139 1114112 61440 61440 NT_STATUS_OK
ReadX 10139 1175552 4096 4096 NT_STATUS_OK
ReadX 10139 1179648 61440 61440 NT_STATUS_OK
ReadX 10139 1241088 4096 4096 NT_STATUS_OK
ReadX 10139 1245184 61440 61440 NT_STATUS_OK
ReadX 10139 1306624 4096 4096 NT_STATUS_OK
ReadX 10139 1310720 61440 61440 NT_STATUS_OK
ReadX 10139 1372160 4096 4096 NT_STATUS_OK
ReadX 10139 1376256 61440 61440 NT_STATUS_OK
ReadX 10139 1437696 4096 4096 NT_STATUS_OK
ReadX 10139 1441792 61440 61440 NT_STATUS_OK
ReadX 10139 1503232 4096 4096 NT_STATUS_OK
ReadX 10139 1507328 61440 61440 NT_STATUS_OK
ReadX 10139 1568768 4096 4096 NT_STATUS_OK
ReadX 10139 1572864 61440 61440 NT_STATUS_OK
ReadX 10139 1634304 4096 4096 NT_STATUS_OK
ReadX 10139 1638400 61440 61440 NT_STATUS_OK
ReadX 10139 1699840 4096 4096 NT_STATUS_OK
ReadX 10139 1703936 61440 61440 NT_STATUS_OK
ReadX 10139 1765376 4096 4096 NT_STATUS_OK
ReadX 10139 1769472 61440 61440 NT_STATUS_OK
ReadX 10139 1830912 4096 4096 NT_STATUS_OK
ReadX 10139 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10142 NT_STATUS_OK
ReadX 10142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10146 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 1004 NT_STATUS_OK
WriteX 10146 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 491 491 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10146 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10152 NT_STATUS_OK
WriteX 10152 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10152 258 NT_STATUS_OK
WriteX 10152 0 543 543 NT_STATUS_OK
Close 10152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Close 10141 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Close 10143 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10166 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 1004 NT_STATUS_OK
WriteX 10166 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 2048 2048 NT_STATUS_OK
Close 10166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
Flush 10167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 29816 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10172 NT_STATUS_OK
WriteX 10172 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10172 258 NT_STATUS_OK
WriteX 10172 0 2048 2048 NT_STATUS_OK
Close 10172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10178 NT_STATUS_OK
WriteX 10178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10178 258 NT_STATUS_OK
WriteX 10178 0 2048 2048 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 2048 2048 NT_STATUS_OK
ReadX 10157 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10173 0 4096 4096 NT_STATUS_OK
WriteX 10157 0 8192 8192 NT_STATUS_OK
WriteX 10158 0 4096 4096 NT_STATUS_OK
WriteX 10159 0 4096 4096 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10183 NT_STATUS_OK
QUERY_FILE_INFORMATION 10183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10182 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10196 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10203 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 1004 NT_STATUS_OK
WriteX 10203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
WriteX 10203 0 2048 2048 NT_STATUS_OK
Close 10203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10204 NT_STATUS_OK
ReadX 10204 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10211 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 1004 NT_STATUS_OK
WriteX 10211 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 258 NT_STATUS_OK
WriteX 10211 0 2048 2048 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10204 0 4096 4096 NT_STATUS_OK
Flush 10204 NT_STATUS_OK
WriteX 10212 0 4096 4096 NT_STATUS_OK
Flush 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10204 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10212 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10206 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10214 NT_STATUS_OK
WriteX 10214 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 258 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10216 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10217 NT_STATUS_OK
WriteX 10217 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 258 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10218 0 4096 4096 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10195 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10225 NT_STATUS_OK
WriteX 10225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 258 NT_STATUS_OK
WriteX 10225 0 2048 2048 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10240 NT_STATUS_OK
QUERY_FILE_INFORMATION 10240 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10248 NT_STATUS_OK
ReadX 10248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10262 NT_STATUS_OK
QUERY_FILE_INFORMATION 10262 1004 NT_STATUS_OK
WriteX 10262 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10262 258 NT_STATUS_OK
WriteX 10262 0 2048 2048 NT_STATUS_OK
Close 10262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
WriteX 10274 0 2048 2048 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10282 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 2048 2048 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
Flush 10263 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
Flush 10275 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
Flush 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10265 4096 16384 16384 NT_STATUS_OK
ReadX 10245 4096 16384 16384 NT_STATUS_OK
ReadX 10277 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10284 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 2048 2048 NT_STATUS_OK
WriteX 10285 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10286 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10249 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10277 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10288 NT_STATUS_OK
QUERY_FILE_INFORMATION 10288 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10290 NT_STATUS_OK
QUERY_FILE_INFORMATION 10290 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10293 4096 16384 16384 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
WriteX 10296 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 8192 8192 NT_STATUS_OK
ReadX 10299 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10313 0 4096 4096 NT_STATUS_OK
ReadX 10313 4096 4096 4096 NT_STATUS_OK
ReadX 10313 8192 4096 4096 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
ReadX 10314 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
WriteX 10296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10319 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 1004 NT_STATUS_OK
WriteX 10319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 2048 2048 NT_STATUS_OK
Close 10319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
ReadX 10322 4096 4096 4096 NT_STATUS_OK
WriteX 10322 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
ReadX 10324 4096 4096 4096 NT_STATUS_OK
WriteX 10324 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10325 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10305 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10304 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10327 0 4096 4096 NT_STATUS_OK
ReadX 10327 4096 4096 4096 NT_STATUS_OK
ReadX 10327 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
ReadX 10328 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10345 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 1004 NT_STATUS_OK
WriteX 10345 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 258 NT_STATUS_OK
WriteX 10345 0 2048 2048 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 2048 2048 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10335 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10353 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10355 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 61440 4096 4096 NT_STATUS_OK
ReadX 10357 126976 4096 4096 NT_STATUS_OK
WriteX 10357 0 65536 65536 NT_STATUS_OK
WriteX 10357 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 61440 4096 4096 NT_STATUS_OK
ReadX 10358 126976 4096 4096 NT_STATUS_OK
ReadX 10358 192512 4096 4096 NT_STATUS_OK
ReadX 10358 258048 4096 4096 NT_STATUS_OK
WriteX 10358 0 65536 65536 NT_STATUS_OK
WriteX 10358 65536 65536 65536 NT_STATUS_OK
WriteX 10358 131072 65536 65536 NT_STATUS_OK
WriteX 10358 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 61440 4096 4096 NT_STATUS_OK
ReadX 10359 126976 4096 4096 NT_STATUS_OK
ReadX 10359 192512 4096 4096 NT_STATUS_OK
ReadX 10359 258048 4096 4096 NT_STATUS_OK
ReadX 10359 323584 4096 4096 NT_STATUS_OK
ReadX 10359 389120 4096 4096 NT_STATUS_OK
ReadX 10359 454656 4096 4096 NT_STATUS_OK
ReadX 10359 520192 4096 4096 NT_STATUS_OK
WriteX 10359 0 65536 65536 NT_STATUS_OK
WriteX 10359 65536 65536 65536 NT_STATUS_OK
WriteX 10359 131072 65536 65536 NT_STATUS_OK
WriteX 10359 196608 65536 65536 NT_STATUS_OK
WriteX 10359 262144 65536 65536 NT_STATUS_OK
WriteX 10359 327680 65536 65536 NT_STATUS_OK
WriteX 10359 393216 65536 65536 NT_STATUS_OK
WriteX 10359 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10360 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10360 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10360 8192 4096 4096 NT_STATUS_OK
ReadX 10360 12288 4096 4096 NT_STATUS_OK
ReadX 10360 16384 4096 4096 NT_STATUS_OK
ReadX 10360 20480 4096 4096 NT_STATUS_OK
ReadX 10360 24576 4096 4096 NT_STATUS_OK
ReadX 10360 28672 4096 4096 NT_STATUS_OK
ReadX 10360 32768 4096 4096 NT_STATUS_OK
ReadX 10360 36864 4096 4096 NT_STATUS_OK
ReadX 10360 40960 4096 4096 NT_STATUS_OK
ReadX 10360 45056 4096 4096 NT_STATUS_OK
ReadX 10360 49152 4096 4096 NT_STATUS_OK
ReadX 10360 53248 4096 4096 NT_STATUS_OK
ReadX 10360 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10360 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10361 NT_STATUS_OK
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10363 NT_STATUS_OK
WriteX 10363 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10363 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 0 57088 57088 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
Flush 10363 NT_STATUS_OK
Close 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10364 NT_STATUS_OK
SET_FILE_INFORMATION 10364 1004 NT_STATUS_OK
Close 10364 NT_STATUS_OK
SET_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10367 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10368 NT_STATUS_OK
WriteX 10368 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
WriteX 10368 0 51456 51456 NT_STATUS_OK
WriteX 10368 0 4096 4096 NT_STATUS_OK
Flush 10368 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
WriteX 10368 0 4096 4096 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10372 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10377 NT_STATUS_OK
WriteX 10377 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10377 258 NT_STATUS_OK
WriteX 10377 0 53077 53077 NT_STATUS_OK
Close 10377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10378 NT_STATUS_OK
WriteX 10378 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10378 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 65536 65536 NT_STATUS_OK
WriteX 10378 65536 1856 1856 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Flush 10378 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10380 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10387 NT_STATUS_OK
WriteX 10387 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 7983 7983 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 65536 65536 NT_STATUS_OK
WriteX 10392 131072 65536 65536 NT_STATUS_OK
WriteX 10392 196608 65536 65536 NT_STATUS_OK
WriteX 10392 262144 65536 65536 NT_STATUS_OK
WriteX 10392 327680 65536 65536 NT_STATUS_OK
WriteX 10392 393216 65536 65536 NT_STATUS_OK
WriteX 10392 458752 46731 46731 NT_STATUS_OK
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10393 NT_STATUS_OK
WriteX 10393 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10382 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 65536 65536 NT_STATUS_OK
WriteX 10393 65536 22848 22848 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Flush 10393 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10395 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10397 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10398 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10398 1004 NT_STATUS_OK
ReadX 10398 8192 4096 4096 NT_STATUS_OK
ReadX 10398 12288 4096 4096 NT_STATUS_OK
ReadX 10398 16384 4096 4096 NT_STATUS_OK
ReadX 10398 20480 4096 4096 NT_STATUS_OK
ReadX 10398 24576 4096 4096 NT_STATUS_OK
ReadX 10398 28672 4096 4096 NT_STATUS_OK
ReadX 10398 32768 4096 4096 NT_STATUS_OK
ReadX 10398 36864 4096 4096 NT_STATUS_OK
ReadX 10398 40960 4096 4096 NT_STATUS_OK
ReadX 10398 45056 4096 4096 NT_STATUS_OK
ReadX 10398 49152 4096 4096 NT_STATUS_OK
ReadX 10398 53248 4096 4096 NT_STATUS_OK
ReadX 10398 57344 4096 4096 NT_STATUS_OK
ReadX 10398 61440 4096 4096 NT_STATUS_OK
ReadX 10398 65536 4096 4096 NT_STATUS_OK
ReadX 10398 69632 4096 4096 NT_STATUS_OK
ReadX 10398 73728 4096 4096 NT_STATUS_OK
ReadX 10398 77824 4096 4096 NT_STATUS_OK
ReadX 10398 81920 4096 4096 NT_STATUS_OK
ReadX 10398 86016 4096 4096 NT_STATUS_OK
ReadX 10398 90112 4096 4096 NT_STATUS_OK
ReadX 10398 94208 4096 4096 NT_STATUS_OK
ReadX 10398 98304 4096 4096 NT_STATUS_OK
ReadX 10398 102400 4096 4096 NT_STATUS_OK
ReadX 10398 106496 4096 4096 NT_STATUS_OK
ReadX 10398 110592 4096 4096 NT_STATUS_OK
ReadX 10398 114688 4096 4096 NT_STATUS_OK
ReadX 10398 118784 4096 4096 NT_STATUS_OK
ReadX 10398 122880 4096 4096 NT_STATUS_OK
ReadX 10398 126976 4096 4096 NT_STATUS_OK
ReadX 10398 131072 4096 4096 NT_STATUS_OK
ReadX 10398 135168 4096 4096 NT_STATUS_OK
ReadX 10398 139264 4096 4096 NT_STATUS_OK
ReadX 10398 143360 4096 4096 NT_STATUS_OK
ReadX 10398 147456 4096 4096 NT_STATUS_OK
ReadX 10398 151552 4096 4096 NT_STATUS_OK
ReadX 10398 155648 4096 4096 NT_STATUS_OK
ReadX 10398 159744 4096 4096 NT_STATUS_OK
ReadX 10398 163840 4096 4096 NT_STATUS_OK
ReadX 10398 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10398 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10401 NT_STATUS_OK
WriteX 10401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10401 258 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10402 NT_STATUS_OK
SET_FILE_INFORMATION 10402 1004 NT_STATUS_OK
Close 10402 NT_STATUS_OK
WriteX 10401 0 42388 42388 NT_STATUS_OK
Close 10401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
ReadX 10405 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10406 NT_STATUS_OK
WriteX 10406 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 42652 42652 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 4096 4096 NT_STATUS_OK
ReadX 10410 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10412 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10415 NT_STATUS_OK
WriteX 10415 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 258 NT_STATUS_OK
WriteX 10415 0 65536 65536 NT_STATUS_OK
WriteX 10415 65536 49 49 NT_STATUS_OK
Close 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 61440 61440 NT_STATUS_OK
ReadX 10416 61440 4096 4096 NT_STATUS_OK
ReadX 10416 65536 61440 61440 NT_STATUS_OK
ReadX 10416 126976 4096 4096 NT_STATUS_OK
ReadX 10416 131072 61440 61440 NT_STATUS_OK
ReadX 10416 192512 4096 4096 NT_STATUS_OK
ReadX 10416 196608 61440 61440 NT_STATUS_OK
ReadX 10416 258048 4096 4096 NT_STATUS_OK
ReadX 10416 262144 61440 61440 NT_STATUS_OK
ReadX 10416 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 61440 61440 NT_STATUS_OK
ReadX 10417 61440 4096 4096 NT_STATUS_OK
ReadX 10417 65536 61440 61440 NT_STATUS_OK
ReadX 10417 126976 4096 4096 NT_STATUS_OK
ReadX 10417 131072 61440 61440 NT_STATUS_OK
ReadX 10417 192512 4096 4096 NT_STATUS_OK
ReadX 10417 196608 61440 61440 NT_STATUS_OK
ReadX 10417 258048 4096 4096 NT_STATUS_OK
ReadX 10417 262144 61440 61440 NT_STATUS_OK
ReadX 10417 323584 4096 4096 NT_STATUS_OK
ReadX 10417 327680 61440 61440 NT_STATUS_OK
ReadX 10417 389120 4096 4096 NT_STATUS_OK
ReadX 10417 393216 61440 61440 NT_STATUS_OK
ReadX 10417 454656 4096 4096 NT_STATUS_OK
ReadX 10417 458752 61440 61440 NT_STATUS_OK
ReadX 10417 520192 4096 4096 NT_STATUS_OK
ReadX 10417 524288 61440 61440 NT_STATUS_OK
ReadX 10417 585728 4096 4096 NT_STATUS_OK
ReadX 10417 589824 61440 61440 NT_STATUS_OK
ReadX 10417 651264 4096 4096 NT_STATUS_OK
ReadX 10417 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 61440 61440 NT_STATUS_OK
ReadX 10418 61440 4096 4096 NT_STATUS_OK
ReadX 10418 65536 61440 61440 NT_STATUS_OK
ReadX 10418 126976 4096 4096 NT_STATUS_OK
ReadX 10418 131072 61440 61440 NT_STATUS_OK
ReadX 10418 192512 4096 4096 NT_STATUS_OK
ReadX 10418 196608 61440 61440 NT_STATUS_OK
ReadX 10418 258048 4096 4096 NT_STATUS_OK
ReadX 10418 262144 61440 61440 NT_STATUS_OK
ReadX 10418 323584 4096 4096 NT_STATUS_OK
ReadX 10418 327680 61440 61440 NT_STATUS_OK
ReadX 10418 389120 4096 4096 NT_STATUS_OK
ReadX 10418 393216 61440 61440 NT_STATUS_OK
ReadX 10418 454656 4096 4096 NT_STATUS_OK
ReadX 10418 458752 61440 61440 NT_STATUS_OK
ReadX 10418 520192 4096 4096 NT_STATUS_OK
ReadX 10418 524288 61440 61440 NT_STATUS_OK
ReadX 10418 585728 4096 4096 NT_STATUS_OK
ReadX 10418 589824 61440 61440 NT_STATUS_OK
ReadX 10418 651264 4096 4096 NT_STATUS_OK
ReadX 10418 655360 61440 61440 NT_STATUS_OK
ReadX 10418 716800 4096 4096 NT_STATUS_OK
ReadX 10418 720896 61440 61440 NT_STATUS_OK
ReadX 10418 782336 4096 4096 NT_STATUS_OK
ReadX 10418 786432 61440 61440 NT_STATUS_OK
ReadX 10418 847872 4096 4096 NT_STATUS_OK
ReadX 10418 851968 61440 61440 NT_STATUS_OK
ReadX 10418 913408 4096 4096 NT_STATUS_OK
ReadX 10418 917504 61440 61440 NT_STATUS_OK
ReadX 10418 978944 4096 4096 NT_STATUS_OK
ReadX 10418 983040 61440 61440 NT_STATUS_OK
ReadX 10418 1044480 4096 4096 NT_STATUS_OK
ReadX 10418 1048576 61440 61440 NT_STATUS_OK
ReadX 10418 1110016 4096 4096 NT_STATUS_OK
ReadX 10418 1114112 61440 61440 NT_STATUS_OK
ReadX 10418 1175552 4096 4096 NT_STATUS_OK
ReadX 10418 1179648 61440 61440 NT_STATUS_OK
ReadX 10418 1241088 4096 4096 NT_STATUS_OK
ReadX 10418 1245184 61440 61440 NT_STATUS_OK
ReadX 10418 1306624 4096 4096 NT_STATUS_OK
ReadX 10418 1310720 61440 61440 NT_STATUS_OK
ReadX 10418 1372160 4096 4096 NT_STATUS_OK
ReadX 10418 1376256 61440 61440 NT_STATUS_OK
ReadX 10418 1437696 4096 4096 NT_STATUS_OK
ReadX 10418 1441792 61440 61440 NT_STATUS_OK
ReadX 10418 1503232 4096 4096 NT_STATUS_OK
ReadX 10418 1507328 61440 61440 NT_STATUS_OK
ReadX 10418 1568768 4096 4096 NT_STATUS_OK
ReadX 10418 1572864 61440 61440 NT_STATUS_OK
ReadX 10418 1634304 4096 4096 NT_STATUS_OK
ReadX 10418 1638400 61440 61440 NT_STATUS_OK
ReadX 10418 1699840 4096 4096 NT_STATUS_OK
ReadX 10418 1703936 61440 61440 NT_STATUS_OK
ReadX 10418 1765376 4096 4096 NT_STATUS_OK
ReadX 10418 1769472 61440 61440 NT_STATUS_OK
ReadX 10418 1830912 4096 4096 NT_STATUS_OK
ReadX 10418 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10420 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
ReadX 10420 2156 24 24 NT_STATUS_OK
ReadX 10420 2139 276 276 NT_STATUS_OK
ReadX 10420 2136 14 14 NT_STATUS_OK
ReadX 10420 2136 7 7 NT_STATUS_OK
ReadX 10420 2138 12 12 NT_STATUS_OK
ReadX 10420 2137 8 8 NT_STATUS_OK
ReadX 10420 2135 15 15 NT_STATUS_OK
ReadX 10420 0 16 16 NT_STATUS_OK
ReadX 10420 16 2048 2048 NT_STATUS_OK
ReadX 10420 2064 2048 2048 NT_STATUS_OK
ReadX 10420 257 2048 2048 NT_STATUS_OK
ReadX 10420 385 2048 2048 NT_STATUS_OK
ReadX 10420 513 2048 2048 NT_STATUS_OK
ReadX 10420 641 2048 2048 NT_STATUS_OK
ReadX 10420 769 2048 2048 NT_STATUS_OK
ReadX 10420 897 2048 2048 NT_STATUS_OK
ReadX 10420 1025 2048 2048 NT_STATUS_OK
ReadX 10420 1153 2048 2048 NT_STATUS_OK
ReadX 10420 1281 2048 2048 NT_STATUS_OK
ReadX 10420 1409 2048 2048 NT_STATUS_OK
ReadX 10420 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10422 NT_STATUS_OK
Close 10422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10425 NT_STATUS_OK
WriteX 10425 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 258 NT_STATUS_OK
WriteX 10425 0 10575 10575 NT_STATUS_OK
Flush 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10426 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
Close 10420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10430 NT_STATUS_OK
LockX 10430 2147483538 1 NT_STATUS_OK
UnlockX 10430 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1005 NT_STATUS_OK
ReadX 10430 0 512 512 NT_STATUS_OK
ReadX 10430 512 512 512 NT_STATUS_OK
ReadX 10430 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1004 NT_STATUS_OK
Close 10430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10431 NT_STATUS_OK
QUERY_FILE_INFORMATION 10431 1005 NT_STATUS_OK
ReadX 10431 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10432 NT_STATUS_OK
LockX 10432 2147483538 1 NT_STATUS_OK
UnlockX 10432 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 1005 NT_STATUS_OK
ReadX 10432 0 512 512 NT_STATUS_OK
ReadX 10432 512 512 512 NT_STATUS_OK
ReadX 10432 1024 512 512 NT_STATUS_OK
ReadX 10432 288 20 20 NT_STATUS_OK
ReadX 10432 308 2084 2084 NT_STATUS_OK
ReadX 10432 388 2084 2084 NT_STATUS_OK
ReadX 10432 388 2084 2084 NT_STATUS_OK
ReadX 10419 2157 1386 1386 NT_STATUS_OK
ReadX 10432 2472 399 399 NT_STATUS_OK
ReadX 10432 3072 1536 1536 NT_STATUS_OK
ReadX 10432 544 149 149 NT_STATUS_OK
ReadX 10432 693 485 485 NT_STATUS_OK
Close 10432 NT_STATUS_OK
ReadX 10419 2157 4096 4096 NT_STATUS_OK
ReadX 10419 6253 4096 4096 NT_STATUS_OK
ReadX 10419 10349 4096 4096 NT_STATUS_OK
ReadX 10419 14445 4096 4096 NT_STATUS_OK
ReadX 10419 18541 4096 4096 NT_STATUS_OK
ReadX 10419 22637 256 256 NT_STATUS_OK
ReadX 10419 22893 4096 4096 NT_STATUS_OK
ReadX 10419 26989 4096 4096 NT_STATUS_OK
ReadX 10419 31085 4096 4096 NT_STATUS_OK
ReadX 10419 35181 4096 4096 NT_STATUS_OK
ReadX 10419 39277 4096 4096 NT_STATUS_OK
ReadX 10419 43373 4096 4096 NT_STATUS_OK
ReadX 10419 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10419 2157 1024 1024 NT_STATUS_OK
ReadX 10419 1667 4688 4688 NT_STATUS_OK
ReadX 10419 6355 3516 3516 NT_STATUS_OK
ReadX 10419 9871 16384 16384 NT_STATUS_OK
ReadX 10419 26255 3771 3771 NT_STATUS_OK
ReadX 10419 30026 2048 2048 NT_STATUS_OK
ReadX 10419 32074 1024 1024 NT_STATUS_OK
ReadX 10419 33098 6652 6652 NT_STATUS_OK
ReadX 10419 39750 16384 16384 NT_STATUS_OK
ReadX 10419 56134 10496 10496 NT_STATUS_OK
ReadX 10419 66630 1784 1784 NT_STATUS_OK
ReadX 10419 68414 90 90 NT_STATUS_OK
ReadX 10419 68504 273 273 NT_STATUS_OK
ReadX 10419 68777 1600 1600 NT_STATUS_OK
ReadX 10419 70377 640 640 NT_STATUS_OK
ReadX 10419 71017 1280 1280 NT_STATUS_OK
ReadX 10419 72297 8464 8464 NT_STATUS_OK
ReadX 10419 80761 158 158 NT_STATUS_OK
ReadX 10419 80919 912 912 NT_STATUS_OK
ReadX 10419 81831 1980 1980 NT_STATUS_OK
ReadX 10419 83811 2256 2256 NT_STATUS_OK
ReadX 10419 86067 400 400 NT_STATUS_OK
ReadX 10419 86467 252 252 NT_STATUS_OK
ReadX 10419 86719 42 42 NT_STATUS_OK
ReadX 10419 86761 725 725 NT_STATUS_OK
ReadX 10419 2009 512 512 NT_STATUS_OK
ReadX 10419 3895 9 9 NT_STATUS_OK
ReadX 10419 3781 46 46 NT_STATUS_OK
ReadX 10419 4059 92 92 NT_STATUS_OK
ReadX 10419 3781 92 92 NT_STATUS_OK
ReadX 10419 3986 184 184 NT_STATUS_OK
ReadX 10419 3987 16384 16384 NT_STATUS_OK
ReadX 10419 3902 16384 16384 NT_STATUS_OK
ReadX 10419 3781 10240 10240 NT_STATUS_OK
ReadX 10419 3821 16384 16384 NT_STATUS_OK
ReadX 10419 3891 935 935 NT_STATUS_OK
ReadX 10419 4060 10240 10240 NT_STATUS_OK
ReadX 10419 4059 184 184 NT_STATUS_OK
ReadX 10419 256 184 184 NT_STATUS_OK
ReadX 10419 256 1026 1026 NT_STATUS_OK
ReadX 10419 3901 326 326 NT_STATUS_OK
ReadX 10419 3899 652 652 NT_STATUS_OK
ReadX 10419 256 2 2 NT_STATUS_OK
ReadX 10419 258 4948 4948 NT_STATUS_OK
Close 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10437 NT_STATUS_OK
WriteX 10437 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10437 258 NT_STATUS_OK
WriteX 10437 0 65536 65536 NT_STATUS_OK
WriteX 10437 65536 65536 65536 NT_STATUS_OK
WriteX 10437 131072 65536 65536 NT_STATUS_OK
WriteX 10437 196608 65536 65536 NT_STATUS_OK
WriteX 10437 262144 65536 65536 NT_STATUS_OK
WriteX 10437 327680 65536 65536 NT_STATUS_OK
WriteX 10437 393216 65536 65536 NT_STATUS_OK
WriteX 10437 458752 65536 65536 NT_STATUS_OK
WriteX 10437 524288 65536 65536 NT_STATUS_OK
WriteX 10437 589824 35257 35257 NT_STATUS_OK
Close 10437 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10439 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10442 NT_STATUS_OK
WriteX 10442 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 258 NT_STATUS_OK
WriteX 10442 0 65536 65536 NT_STATUS_OK
WriteX 10442 65536 65536 65536 NT_STATUS_OK
WriteX 10442 131072 65536 65536 NT_STATUS_OK
WriteX 10442 196608 65536 65536 NT_STATUS_OK
WriteX 10442 262144 65536 65536 NT_STATUS_OK
WriteX 10442 327680 65536 65536 NT_STATUS_OK
WriteX 10442 393216 65536 65536 NT_STATUS_OK
WriteX 10442 458752 65536 65536 NT_STATUS_OK
WriteX 10442 524288 65536 65536 NT_STATUS_OK
WriteX 10442 589824 57598 57598 NT_STATUS_OK
Close 10442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 12543 12543 NT_STATUS_OK
Flush 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10450 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
ReadX 10450 1938 24 24 NT_STATUS_OK
ReadX 10450 1920 276 276 NT_STATUS_OK
ReadX 10450 1918 14 14 NT_STATUS_OK
ReadX 10450 1918 7 7 NT_STATUS_OK
ReadX 10450 1919 12 12 NT_STATUS_OK
ReadX 10450 1919 8 8 NT_STATUS_OK
ReadX 10450 1917 15 15 NT_STATUS_OK
ReadX 10450 0 16 16 NT_STATUS_OK
ReadX 10450 16 2048 2048 NT_STATUS_OK
ReadX 10450 2064 2048 2048 NT_STATUS_OK
ReadX 10450 257 2048 2048 NT_STATUS_OK
ReadX 10450 385 2048 2048 NT_STATUS_OK
ReadX 10450 513 2048 2048 NT_STATUS_OK
ReadX 10450 641 2048 2048 NT_STATUS_OK
ReadX 10450 769 2048 2048 NT_STATUS_OK
ReadX 10450 897 2048 2048 NT_STATUS_OK
ReadX 10450 1025 2048 2048 NT_STATUS_OK
ReadX 10450 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 11588 11588 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
Close 10450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 11615 11615 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 65536 65536 NT_STATUS_OK
WriteX 10469 65536 16050 16050 NT_STATUS_OK
Close 10469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10449 1939 64 64 NT_STATUS_OK
ReadX 10449 128 248 248 NT_STATUS_OK
ReadX 10449 128 568 568 NT_STATUS_OK
ReadX 10449 3872 1536 1536 NT_STATUS_OK
ReadX 10449 3456 2560 2560 NT_STATUS_OK
ReadX 10449 3136 512 512 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
ReadX 10449 3264 3072 3072 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 3616 4096 4096 NT_STATUS_OK
ReadX 10449 1939 64 64 NT_STATUS_OK
ReadX 10449 128 248 248 NT_STATUS_OK
ReadX 10449 128 608 608 NT_STATUS_OK
ReadX 10449 2858 1024 1024 NT_STATUS_OK
ReadX 10449 2810 4096 4096 NT_STATUS_OK
ReadX 10449 2826 4096 4096 NT_STATUS_OK
ReadX 10449 2580 2048 2048 NT_STATUS_OK
ReadX 10449 2800 2560 2560 NT_STATUS_OK
ReadX 10449 2100 4096 4096 NT_STATUS_OK
ReadX 10449 2084 4096 4096 NT_STATUS_OK
ReadX 10449 868 4096 4096 NT_STATUS_OK
ReadX 10449 2324 4096 4096 NT_STATUS_OK
ReadX 10449 884 4096 4096 NT_STATUS_OK
ReadX 10449 2604 1024 1024 NT_STATUS_OK
ReadX 10449 580 4096 4096 NT_STATUS_OK
ReadX 10449 596 4096 4096 NT_STATUS_OK
ReadX 10449 2752 4096 4096 NT_STATUS_OK
ReadX 10449 2842 1024 1024 NT_STATUS_OK
ReadX 10449 660 4096 4096 NT_STATUS_OK
ReadX 10449 2720 4096 4096 NT_STATUS_OK
ReadX 10449 2736 4096 4096 NT_STATUS_OK
ReadX 10449 628 4096 4096 NT_STATUS_OK
ReadX 10449 2704 4096 4096 NT_STATUS_OK
ReadX 10449 1556 4096 4096 NT_STATUS_OK
ReadX 10449 576 4096 4096 NT_STATUS_OK
ReadX 10449 3168 1536 1536 NT_STATUS_OK
ReadX 10449 832 4096 4096 NT_STATUS_OK
ReadX 10449 1088 4096 4096 NT_STATUS_OK
ReadX 10449 1344 4096 4096 NT_STATUS_OK
ReadX 10449 1600 4096 4096 NT_STATUS_OK
ReadX 10449 1856 4096 4096 NT_STATUS_OK
ReadX 10449 2112 4096 4096 NT_STATUS_OK
ReadX 10449 1892 4096 4096 NT_STATUS_OK
ReadX 10449 820 4096 4096 NT_STATUS_OK
ReadX 10449 788 4096 4096 NT_STATUS_OK
ReadX 10449 1604 4096 4096 NT_STATUS_OK
ReadX 10449 3648 4096 4096 NT_STATUS_OK
ReadX 10449 2608 4096 4096 NT_STATUS_OK
ReadX 10449 548 4096 4096 NT_STATUS_OK
ReadX 10449 740 4096 4096 NT_STATUS_OK
ReadX 10449 1344 4096 4096 NT_STATUS_OK
ReadX 10449 3392 4096 4096 NT_STATUS_OK
ReadX 10449 3904 4096 4096 NT_STATUS_OK
ReadX 10449 644 4096 4096 NT_STATUS_OK
ReadX 10449 676 4096 4096 NT_STATUS_OK
ReadX 10449 2688 4096 4096 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 900 4096 4096 NT_STATUS_OK
ReadX 10449 1908 4096 4096 NT_STATUS_OK
ReadX 10449 852 4096 4096 NT_STATUS_OK
ReadX 10449 724 4096 4096 NT_STATUS_OK
ReadX 10449 2292 4096 4096 NT_STATUS_OK
ReadX 10449 612 4096 4096 NT_STATUS_OK
ReadX 10449 388 4096 4096 NT_STATUS_OK
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 500 4096 4096 NT_STATUS_OK
ReadX 10449 356 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 576 4096 4096 NT_STATUS_OK
ReadX 10449 340 4096 4096 NT_STATUS_OK
ReadX 10449 420 4096 4096 NT_STATUS_OK
ReadX 10449 1600 4096 4096 NT_STATUS_OK
ReadX 10449 404 4096 4096 NT_STATUS_OK
ReadX 10449 1428 4096 4096 NT_STATUS_OK
ReadX 10449 2656 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 452 4096 4096 NT_STATUS_OK
ReadX 10449 692 4096 4096 NT_STATUS_OK
ReadX 10449 564 4096 4096 NT_STATUS_OK
ReadX 10449 372 4096 4096 NT_STATUS_OK
ReadX 10449 468 4096 4096 NT_STATUS_OK
ReadX 10449 484 4096 4096 NT_STATUS_OK
ReadX 10449 1088 4096 4096 NT_STATUS_OK
ReadX 10449 1924 4096 4096 NT_STATUS_OK
ReadX 10449 2768 4096 4096 NT_STATUS_OK
ReadX 10449 832 4096 4096 NT_STATUS_OK
ReadX 10449 836 4096 4096 NT_STATUS_OK
ReadX 10449 1856 4096 4096 NT_STATUS_OK
ReadX 10449 2640 4096 4096 NT_STATUS_OK
ReadX 10449 436 4096 4096 NT_STATUS_OK
ReadX 10449 1828 4096 4096 NT_STATUS_OK
ReadX 10449 804 4096 4096 NT_STATUS_OK
ReadX 10449 1860 4096 4096 NT_STATUS_OK
ReadX 10449 1812 4096 4096 NT_STATUS_OK
ReadX 10449 756 4096 4096 NT_STATUS_OK
ReadX 10449 1636 4096 4096 NT_STATUS_OK
ReadX 10449 772 4096 4096 NT_STATUS_OK
ReadX 10449 2036 4096 4096 NT_STATUS_OK
ReadX 10449 1220 4096 4096 NT_STATUS_OK
ReadX 10449 1652 4096 4096 NT_STATUS_OK
ReadX 10449 2588 4096 4096 NT_STATUS_OK
ReadX 10449 916 4096 4096 NT_STATUS_OK
ReadX 10449 260 4096 4096 NT_STATUS_OK
ReadX 10449 932 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 308 4096 4096 NT_STATUS_OK
ReadX 10449 292 4096 4096 NT_STATUS_OK
ReadX 10449 1140 4096 4096 NT_STATUS_OK
ReadX 10449 276 4096 4096 NT_STATUS_OK
ReadX 10449 2020 4096 4096 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
ReadX 10449 516 4096 4096 NT_STATUS_OK
ReadX 10449 1844 4096 4096 NT_STATUS_OK
ReadX 10449 1124 4096 4096 NT_STATUS_OK
ReadX 10449 3136 4096 4096 NT_STATUS_OK
ReadX 10449 324 4096 4096 NT_STATUS_OK
ReadX 10449 1156 4096 4096 NT_STATUS_OK
ReadX 10449 1172 4096 4096 NT_STATUS_OK
ReadX 10449 2112 4096 4096 NT_STATUS_OK
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 964 4096 4096 NT_STATUS_OK
ReadX 10449 980 4096 4096 NT_STATUS_OK
ReadX 10449 1012 4096 4096 NT_STATUS_OK
ReadX 10449 532 4096 4096 NT_STATUS_OK
ReadX 10449 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10449 1620 4096 4096 NT_STATUS_OK
ReadX 10449 1604 4096 4096 NT_STATUS_OK
ReadX 10449 2116 4096 4096 NT_STATUS_OK
ReadX 10449 2132 4096 4096 NT_STATUS_OK
ReadX 10449 2148 4096 4096 NT_STATUS_OK
ReadX 10449 2276 4096 4096 NT_STATUS_OK
ReadX 10449 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10471 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10474 NT_STATUS_OK
QUERY_FILE_INFORMATION 10429 1004 NT_STATUS_OK
Close 10429 NT_STATUS_OK
WriteX 10474 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10474 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10431 1004 NT_STATUS_OK
Close 10431 NT_STATUS_OK
WriteX 10474 0 65536 65536 NT_STATUS_OK
WriteX 10474 65536 64850 64850 NT_STATUS_OK
Close 10474 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10476 NT_STATUS_OK
WriteX 10476 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10476 258 NT_STATUS_OK
ReadX 10449 2068 4096 4096 NT_STATUS_OK
ReadX 10449 1588 4096 4096 NT_STATUS_OK
ReadX 10449 1572 4096 4096 NT_STATUS_OK
WriteX 10476 0 18630 18630 NT_STATUS_OK
Flush 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10449 612 4096 4096 NT_STATUS_OK
ReadX 10449 564 4096 4096 NT_STATUS_OK
ReadX 10449 1876 4096 4096 NT_STATUS_OK
ReadX 10449 628 4096 4096 NT_STATUS_OK
ReadX 10449 740 4096 4096 NT_STATUS_OK
ReadX 10449 724 4096 4096 NT_STATUS_OK
ReadX 10449 644 4096 4096 NT_STATUS_OK
ReadX 10449 2324 4096 4096 NT_STATUS_OK
ReadX 10449 660 4096 4096 NT_STATUS_OK
ReadX 10449 852 4096 4096 NT_STATUS_OK
ReadX 10449 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 580 4096 4096 NT_STATUS_OK
ReadX 10449 3136 512 512 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 61440 4096 4096 NT_STATUS_OK
ReadX 10481 126976 4096 4096 NT_STATUS_OK
WriteX 10481 0 65536 65536 NT_STATUS_OK
WriteX 10481 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 61440 4096 4096 NT_STATUS_OK
ReadX 10482 126976 4096 4096 NT_STATUS_OK
ReadX 10482 192512 4096 4096 NT_STATUS_OK
ReadX 10482 258048 4096 4096 NT_STATUS_OK
WriteX 10482 0 65536 65536 NT_STATUS_OK
WriteX 10482 65536 65536 65536 NT_STATUS_OK
WriteX 10482 131072 65536 65536 NT_STATUS_OK
WriteX 10482 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10483 NT_STATUS_OK
ReadX 10483 61440 4096 4096 NT_STATUS_OK
ReadX 10483 126976 4096 4096 NT_STATUS_OK
ReadX 10483 192512 4096 4096 NT_STATUS_OK
ReadX 10483 258048 4096 4096 NT_STATUS_OK
ReadX 10483 323584 4096 4096 NT_STATUS_OK
ReadX 10483 389120 4096 4096 NT_STATUS_OK
ReadX 10483 454656 4096 4096 NT_STATUS_OK
ReadX 10483 520192 4096 4096 NT_STATUS_OK
WriteX 10483 0 65536 65536 NT_STATUS_OK
WriteX 10483 65536 65536 65536 NT_STATUS_OK
WriteX 10483 131072 65536 65536 NT_STATUS_OK
WriteX 10483 196608 65536 65536 NT_STATUS_OK
WriteX 10483 262144 65536 65536 NT_STATUS_OK
WriteX 10483 327680 65536 65536 NT_STATUS_OK
WriteX 10483 393216 65536 65536 NT_STATUS_OK
WriteX 10483 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10486 NT_STATUS_OK
WriteX 10486 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10486 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10484 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10491 NT_STATUS_OK
WriteX 10491 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10491 258 NT_STATUS_OK
WriteX 10491 0 62591 62591 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10493 NT_STATUS_OK
Close 10493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10496 NT_STATUS_OK
WriteX 10496 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 258 NT_STATUS_OK
WriteX 10496 0 10845 10845 NT_STATUS_OK
Close 10496 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10501 NT_STATUS_OK
WriteX 10501 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10501 258 NT_STATUS_OK
WriteX 10501 0 30118 30118 NT_STATUS_OK
Close 10501 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
WriteX 10486 0 64 64 NT_STATUS_OK
Close 10486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 61440 61440 NT_STATUS_OK
ReadX 10503 61440 4096 4096 NT_STATUS_OK
ReadX 10503 65536 61440 61440 NT_STATUS_OK
ReadX 10503 126976 4096 4096 NT_STATUS_OK
ReadX 10503 131072 61440 61440 NT_STATUS_OK
ReadX 10503 192512 4096 4096 NT_STATUS_OK
ReadX 10503 196608 61440 61440 NT_STATUS_OK
ReadX 10503 258048 4096 4096 NT_STATUS_OK
ReadX 10503 262144 61440 61440 NT_STATUS_OK
ReadX 10503 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 61440 61440 NT_STATUS_OK
ReadX 10504 61440 4096 4096 NT_STATUS_OK
ReadX 10504 65536 61440 61440 NT_STATUS_OK
ReadX 10504 126976 4096 4096 NT_STATUS_OK
ReadX 10504 131072 61440 61440 NT_STATUS_OK
ReadX 10504 192512 4096 4096 NT_STATUS_OK
ReadX 10504 196608 61440 61440 NT_STATUS_OK
ReadX 10504 258048 4096 4096 NT_STATUS_OK
ReadX 10504 262144 61440 61440 NT_STATUS_OK
ReadX 10504 323584 4096 4096 NT_STATUS_OK
ReadX 10504 327680 61440 61440 NT_STATUS_OK
ReadX 10504 389120 4096 4096 NT_STATUS_OK
ReadX 10504 393216 61440 61440 NT_STATUS_OK
ReadX 10504 454656 4096 4096 NT_STATUS_OK
ReadX 10504 458752 61440 61440 NT_STATUS_OK
ReadX 10504 520192 4096 4096 NT_STATUS_OK
ReadX 10504 524288 61440 61440 NT_STATUS_OK
ReadX 10504 585728 4096 4096 NT_STATUS_OK
ReadX 10504 589824 61440 61440 NT_STATUS_OK
ReadX 10504 651264 4096 4096 NT_STATUS_OK
ReadX 10504 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 61440 61440 NT_STATUS_OK
ReadX 10505 61440 4096 4096 NT_STATUS_OK
ReadX 10505 65536 61440 61440 NT_STATUS_OK
ReadX 10505 126976 4096 4096 NT_STATUS_OK
ReadX 10505 131072 61440 61440 NT_STATUS_OK
ReadX 10505 192512 4096 4096 NT_STATUS_OK
ReadX 10505 196608 61440 61440 NT_STATUS_OK
ReadX 10505 258048 4096 4096 NT_STATUS_OK
ReadX 10505 262144 61440 61440 NT_STATUS_OK
ReadX 10505 323584 4096 4096 NT_STATUS_OK
ReadX 10505 327680 61440 61440 NT_STATUS_OK
ReadX 10505 389120 4096 4096 NT_STATUS_OK
ReadX 10505 393216 61440 61440 NT_STATUS_OK
ReadX 10505 454656 4096 4096 NT_STATUS_OK
ReadX 10505 458752 61440 61440 NT_STATUS_OK
ReadX 10505 520192 4096 4096 NT_STATUS_OK
ReadX 10505 524288 61440 61440 NT_STATUS_OK
ReadX 10505 585728 4096 4096 NT_STATUS_OK
ReadX 10505 589824 61440 61440 NT_STATUS_OK
ReadX 10505 651264 4096 4096 NT_STATUS_OK
ReadX 10505 655360 61440 61440 NT_STATUS_OK
ReadX 10505 716800 4096 4096 NT_STATUS_OK
ReadX 10505 720896 61440 61440 NT_STATUS_OK
ReadX 10505 782336 4096 4096 NT_STATUS_OK
ReadX 10505 786432 61440 61440 NT_STATUS_OK
ReadX 10505 847872 4096 4096 NT_STATUS_OK
ReadX 10505 851968 61440 61440 NT_STATUS_OK
ReadX 10505 913408 4096 4096 NT_STATUS_OK
ReadX 10505 917504 61440 61440 NT_STATUS_OK
ReadX 10505 978944 4096 4096 NT_STATUS_OK
ReadX 10505 983040 61440 61440 NT_STATUS_OK
ReadX 10505 1044480 4096 4096 NT_STATUS_OK
ReadX 10505 1048576 61440 61440 NT_STATUS_OK
ReadX 10505 1110016 4096 4096 NT_STATUS_OK
ReadX 10505 1114112 61440 61440 NT_STATUS_OK
ReadX 10505 1175552 4096 4096 NT_STATUS_OK
ReadX 10505 1179648 61440 61440 NT_STATUS_OK
ReadX 10505 1241088 4096 4096 NT_STATUS_OK
ReadX 10505 1245184 61440 61440 NT_STATUS_OK
ReadX 10505 1306624 4096 4096 NT_STATUS_OK
ReadX 10505 1310720 61440 61440 NT_STATUS_OK
ReadX 10505 1372160 4096 4096 NT_STATUS_OK
ReadX 10505 1376256 61440 61440 NT_STATUS_OK
ReadX 10505 1437696 4096 4096 NT_STATUS_OK
ReadX 10505 1441792 61440 61440 NT_STATUS_OK
ReadX 10505 1503232 4096 4096 NT_STATUS_OK
ReadX 10505 1507328 61440 61440 NT_STATUS_OK
ReadX 10505 1568768 4096 4096 NT_STATUS_OK
ReadX 10505 1572864 61440 61440 NT_STATUS_OK
ReadX 10505 1634304 4096 4096 NT_STATUS_OK
ReadX 10505 1638400 61440 61440 NT_STATUS_OK
ReadX 10505 1699840 4096 4096 NT_STATUS_OK
ReadX 10505 1703936 61440 61440 NT_STATUS_OK
ReadX 10505 1765376 4096 4096 NT_STATUS_OK
ReadX 10505 1769472 61440 61440 NT_STATUS_OK
ReadX 10505 1830912 4096 4096 NT_STATUS_OK
ReadX 10505 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Close 10504 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
ReadX 10510 4096 4096 4096 NT_STATUS_OK
ReadX 10510 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10511 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10514 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10515 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 8192 8192 NT_STATUS_OK
ReadX 10518 8192 8192 8192 NT_STATUS_OK
ReadX 10518 16384 8192 8192 NT_STATUS_OK
ReadX 10518 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10523 NT_STATUS_OK
WriteX 10523 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 258 NT_STATUS_OK
WriteX 10523 0 10438 10438 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10529 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
ReadX 10532 4096 4096 4096 NT_STATUS_OK
ReadX 10532 8192 4096 4096 NT_STATUS_OK
ReadX 10532 12288 8192 8192 NT_STATUS_OK
ReadX 10532 20480 8192 8192 NT_STATUS_OK
ReadX 10532 28672 8192 8192 NT_STATUS_OK
ReadX 10532 36864 8192 8192 NT_STATUS_OK
ReadX 10532 45056 8192 8192 NT_STATUS_OK
ReadX 10532 53248 8192 8192 NT_STATUS_OK
ReadX 10532 61440 8192 8192 NT_STATUS_OK
ReadX 10532 69632 8192 8192 NT_STATUS_OK
ReadX 10532 77824 8192 8192 NT_STATUS_OK
ReadX 10532 86016 8192 8192 NT_STATUS_OK
ReadX 10532 94208 8192 8192 NT_STATUS_OK
ReadX 10532 102400 8192 8192 NT_STATUS_OK
ReadX 10532 110592 8192 8192 NT_STATUS_OK
ReadX 10532 118784 8192 8192 NT_STATUS_OK
ReadX 10532 126976 8192 8192 NT_STATUS_OK
ReadX 10532 135168 8192 8192 NT_STATUS_OK
ReadX 10532 143360 8192 8192 NT_STATUS_OK
ReadX 10532 151552 8192 8192 NT_STATUS_OK
ReadX 10532 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10537 NT_STATUS_OK
WriteX 10537 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10537 258 NT_STATUS_OK
WriteX 10537 0 28489 28489 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10540 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 8192 8192 NT_STATUS_OK
ReadX 10544 8192 8192 8192 NT_STATUS_OK
ReadX 10544 16384 8192 8192 NT_STATUS_OK
ReadX 10544 24576 8192 8192 NT_STATUS_OK
ReadX 10544 32768 16384 16384 NT_STATUS_OK
ReadX 10544 49152 8192 8192 NT_STATUS_OK
ReadX 10544 57344 8192 8192 NT_STATUS_OK
ReadX 10544 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10549 NT_STATUS_OK
WriteX 10549 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10549 258 NT_STATUS_OK
WriteX 10549 0 29253 29253 NT_STATUS_OK
Close 10549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\ROSE.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10556 NT_STATUS_OK
WriteX 10556 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10556 258 NT_STATUS_OK
WriteX 10556 0 30183 30183 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10559 NT_STATUS_OK
WriteX 10559 0 510 510 NT_STATUS_OK
WriteX 10559 510 512 512 NT_STATUS_OK
WriteX 10559 1022 510 510 NT_STATUS_OK
WriteX 10559 1532 510 510 NT_STATUS_OK
WriteX 10559 2042 168 168 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
WriteX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 61440 4096 4096 NT_STATUS_OK
ReadX 10563 126976 4096 4096 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 61440 4096 4096 NT_STATUS_OK
ReadX 10564 126976 4096 4096 NT_STATUS_OK
ReadX 10564 192512 4096 4096 NT_STATUS_OK
ReadX 10564 258048 4096 4096 NT_STATUS_OK
WriteX 10564 0 65536 65536 NT_STATUS_OK
WriteX 10564 65536 65536 65536 NT_STATUS_OK
WriteX 10564 131072 65536 65536 NT_STATUS_OK
WriteX 10564 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 61440 4096 4096 NT_STATUS_OK
ReadX 10565 126976 4096 4096 NT_STATUS_OK
ReadX 10565 192512 4096 4096 NT_STATUS_OK
ReadX 10565 258048 4096 4096 NT_STATUS_OK
ReadX 10565 323584 4096 4096 NT_STATUS_OK
ReadX 10565 389120 4096 4096 NT_STATUS_OK
ReadX 10565 454656 4096 4096 NT_STATUS_OK
ReadX 10565 520192 4096 4096 NT_STATUS_OK
WriteX 10565 0 65536 65536 NT_STATUS_OK
WriteX 10565 65536 65536 65536 NT_STATUS_OK
WriteX 10565 131072 65536 65536 NT_STATUS_OK
WriteX 10565 196608 65536 65536 NT_STATUS_OK
WriteX 10565 262144 65536 65536 NT_STATUS_OK
WriteX 10565 327680 65536 65536 NT_STATUS_OK
WriteX 10565 393216 65536 65536 NT_STATUS_OK
WriteX 10565 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10577 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10581 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10586 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10628 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10634 NT_STATUS_OK
WriteX 10634 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10634 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10634 0 65536 65536 NT_STATUS_OK
WriteX 10634 65536 65536 65536 NT_STATUS_OK
WriteX 10634 131072 65536 65536 NT_STATUS_OK
WriteX 10634 196608 65536 65536 NT_STATUS_OK
WriteX 10634 262144 26634 26634 NT_STATUS_OK
Close 10634 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 28004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
Close 10641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
ReadX 10642 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10652 NT_STATUS_OK
Close 10652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10680 NT_STATUS_OK
Close 10680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10699 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
Close 10722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 28004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10766 0 4096 4096 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
ReadX 10768 4096 4096 4096 NT_STATUS_OK
ReadX 10768 8192 4096 4096 NT_STATUS_OK
ReadX 10768 12288 4096 4096 NT_STATUS_OK
ReadX 10768 16384 4096 4096 NT_STATUS_OK
ReadX 10768 20480 4096 4096 NT_STATUS_OK
ReadX 10768 24576 4096 4096 NT_STATUS_OK
ReadX 10768 28672 4096 4096 NT_STATUS_OK
ReadX 10768 32768 4096 4096 NT_STATUS_OK
ReadX 10768 36864 4096 4096 NT_STATUS_OK
ReadX 10768 40960 4096 4096 NT_STATUS_OK
ReadX 10768 45056 4096 4096 NT_STATUS_OK
ReadX 10768 49152 4096 4096 NT_STATUS_OK
ReadX 10768 53248 4096 4096 NT_STATUS_OK
ReadX 10768 57344 4096 4096 NT_STATUS_OK
ReadX 10768 61440 4096 4096 NT_STATUS_OK
ReadX 10768 65536 4096 4096 NT_STATUS_OK
ReadX 10768 69632 4096 4096 NT_STATUS_OK
ReadX 10768 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10769 NT_STATUS_OK
SET_FILE_INFORMATION 10769 1004 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 19979 19979 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
QUERY_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
SET_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
Close 10778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
Close 10779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
WriteX 10780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10786 NT_STATUS_OK
WriteX 10786 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10786 258 NT_STATUS_OK
WriteX 10786 0 65536 65536 NT_STATUS_OK
WriteX 10786 65536 17654 17654 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 1004 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
SET_FILE_INFORMATION 10787 1004 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10788 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
Close 10788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
ReadX 10792 4096 4096 4096 NT_STATUS_OK
ReadX 10792 8192 4096 4096 NT_STATUS_OK
ReadX 10792 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10792 16384 4096 4096 NT_STATUS_OK
ReadX 10792 20480 4096 4096 NT_STATUS_OK
ReadX 10792 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
Close 10793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10795 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10796 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10801 NT_STATUS_OK
WriteX 10801 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 19490 19490 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10803 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10807 0 4096 4096 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10808 NT_STATUS_OK
ReadX 10808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
ReadX 10809 4096 4096 4096 NT_STATUS_OK
ReadX 10809 8192 4096 4096 NT_STATUS_OK
ReadX 10809 12288 4096 4096 NT_STATUS_OK
ReadX 10809 16384 4096 4096 NT_STATUS_OK
ReadX 10809 20480 4096 4096 NT_STATUS_OK
ReadX 10809 24576 4096 4096 NT_STATUS_OK
ReadX 10809 28672 4096 4096 NT_STATUS_OK
ReadX 10809 32768 4096 4096 NT_STATUS_OK
ReadX 10809 36864 4096 4096 NT_STATUS_OK
ReadX 10809 40960 4096 4096 NT_STATUS_OK
ReadX 10809 45056 4096 4096 NT_STATUS_OK
ReadX 10809 49152 4096 4096 NT_STATUS_OK
ReadX 10809 53248 4096 4096 NT_STATUS_OK
ReadX 10809 57344 4096 4096 NT_STATUS_OK
ReadX 10809 61440 4096 4096 NT_STATUS_OK
ReadX 10809 65536 4096 4096 NT_STATUS_OK
ReadX 10809 69632 4096 4096 NT_STATUS_OK
ReadX 10809 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10810 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10815 NT_STATUS_OK
WriteX 10815 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10815 258 NT_STATUS_OK
WriteX 10815 0 65536 65536 NT_STATUS_OK
WriteX 10815 65536 8866 8866 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 0 4096 4096 NT_STATUS_OK
Close 10818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10819 NT_STATUS_OK
ReadX 10819 0 4096 4096 NT_STATUS_OK
Close 10819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10820 1004 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10826 NT_STATUS_OK
WriteX 10826 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10826 258 NT_STATUS_OK
WriteX 10826 0 65536 65536 NT_STATUS_OK
WriteX 10826 65536 9298 9298 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Flush 10827 NT_STATUS_OK
SET_FILE_INFORMATION 10827 1004 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Flush 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10828 NT_STATUS_OK
SET_FILE_INFORMATION 10828 1004 NT_STATUS_OK
Close 10828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10833 0 4096 4096 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10834 4096 4096 4096 NT_STATUS_OK
ReadX 10834 8192 4096 4096 NT_STATUS_OK
ReadX 10834 12288 4096 4096 NT_STATUS_OK
ReadX 10834 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10837 1004 NT_STATUS_OK
WriteX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10840 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10843 NT_STATUS_OK
WriteX 10843 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 65536 65536 NT_STATUS_OK
WriteX 10843 65536 11540 11540 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
Flush 10844 NT_STATUS_OK
SET_FILE_INFORMATION 10844 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
Flush 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10845 NT_STATUS_OK
SET_FILE_INFORMATION 10845 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 61440 4096 4096 NT_STATUS_OK
ReadX 10849 126976 4096 4096 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 61440 4096 4096 NT_STATUS_OK
ReadX 10850 126976 4096 4096 NT_STATUS_OK
ReadX 10850 192512 4096 4096 NT_STATUS_OK
ReadX 10850 258048 4096 4096 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 65536 65536 NT_STATUS_OK
WriteX 10850 131072 65536 65536 NT_STATUS_OK
WriteX 10850 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 61440 4096 4096 NT_STATUS_OK
ReadX 10851 126976 4096 4096 NT_STATUS_OK
ReadX 10851 192512 4096 4096 NT_STATUS_OK
ReadX 10851 258048 4096 4096 NT_STATUS_OK
ReadX 10851 323584 4096 4096 NT_STATUS_OK
ReadX 10851 389120 4096 4096 NT_STATUS_OK
ReadX 10851 454656 4096 4096 NT_STATUS_OK
ReadX 10851 520192 4096 4096 NT_STATUS_OK
WriteX 10851 0 65536 65536 NT_STATUS_OK
WriteX 10851 65536 65536 65536 NT_STATUS_OK
WriteX 10851 131072 65536 65536 NT_STATUS_OK
WriteX 10851 196608 65536 65536 NT_STATUS_OK
WriteX 10851 262144 65536 65536 NT_STATUS_OK
WriteX 10851 327680 65536 65536 NT_STATUS_OK
WriteX 10851 393216 65536 65536 NT_STATUS_OK
WriteX 10851 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
ReadX 10852 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10853 NT_STATUS_OK
WriteX 10853 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 258 NT_STATUS_OK
WriteX 10853 0 53 53 NT_STATUS_OK
Close 10853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10854 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
WriteX 10856 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10856 258 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
ReadX 10852 20480 4096 4096 NT_STATUS_OK
WriteX 10856 0 15360 15360 NT_STATUS_OK
Close 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10857 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10857 1004 NT_STATUS_OK
WriteX 10857 0 4096 4096 NT_STATUS_OK
Close 10857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10860 NT_STATUS_OK
ReadX 10860 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10861 NT_STATUS_OK
Close 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10860 4096 4096 4096 NT_STATUS_OK
ReadX 10860 8192 4096 4096 NT_STATUS_OK
ReadX 10860 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10863 NT_STATUS_OK
ReadX 10863 0 4096 4096 NT_STATUS_OK
ReadX 10863 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
ReadX 10864 4096 4096 4096 NT_STATUS_OK
ReadX 10864 8192 4096 4096 NT_STATUS_OK
Close 10863 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10865 NT_STATUS_OK
WriteX 10865 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 15360 15360 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10867 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10870 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
Close 10870 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10871 NT_STATUS_OK
Close 10871 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
ReadX 10873 4096 4096 4096 NT_STATUS_OK
ReadX 10873 8192 4096 4096 NT_STATUS_OK
ReadX 10873 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10875 NT_STATUS_OK
WriteX 10875 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10875 258 NT_STATUS_OK
WriteX 10875 0 53 53 NT_STATUS_OK
Close 10875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10874 4096 4096 4096 NT_STATUS_OK
ReadX 10874 8192 4096 4096 NT_STATUS_OK
ReadX 10874 12288 4096 4096 NT_STATUS_OK
WriteX 10878 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10878 258 NT_STATUS_OK
WriteX 10878 0 12006 12006 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
WriteX 10879 0 4096 4096 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10880 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10883 NT_STATUS_OK
Close 10883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10882 4096 4096 4096 NT_STATUS_OK
ReadX 10882 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
WriteX 10885 0 11991 11991 NT_STATUS_OK
Close 10885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10886 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10886 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10890 NT_STATUS_OK
SET_FILE_INFORMATION 10890 1004 NT_STATUS_OK
Close 10890 NT_STATUS_OK
WriteX 10886 0 4096 4096 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10893 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
ReadX 10893 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
WriteX 10893 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
Close 10869 NT_STATUS_OK
WriteX 10873 0 19054 19054 NT_STATUS_OK
WriteX 10893 0 12288 12288 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10896 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 61440 61440 NT_STATUS_OK
ReadX 10900 61440 4096 4096 NT_STATUS_OK
ReadX 10900 65536 61440 61440 NT_STATUS_OK
ReadX 10900 126976 4096 4096 NT_STATUS_OK
ReadX 10900 131072 61440 61440 NT_STATUS_OK
ReadX 10900 192512 4096 4096 NT_STATUS_OK
ReadX 10900 196608 61440 61440 NT_STATUS_OK
ReadX 10900 258048 4096 4096 NT_STATUS_OK
ReadX 10900 262144 61440 61440 NT_STATUS_OK
ReadX 10900 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 61440 61440 NT_STATUS_OK
ReadX 10901 61440 4096 4096 NT_STATUS_OK
ReadX 10901 65536 61440 61440 NT_STATUS_OK
ReadX 10901 126976 4096 4096 NT_STATUS_OK
ReadX 10901 131072 61440 61440 NT_STATUS_OK
ReadX 10901 192512 4096 4096 NT_STATUS_OK
ReadX 10901 196608 61440 61440 NT_STATUS_OK
ReadX 10901 258048 4096 4096 NT_STATUS_OK
ReadX 10901 262144 61440 61440 NT_STATUS_OK
ReadX 10901 323584 4096 4096 NT_STATUS_OK
ReadX 10901 327680 61440 61440 NT_STATUS_OK
ReadX 10901 389120 4096 4096 NT_STATUS_OK
ReadX 10901 393216 61440 61440 NT_STATUS_OK
ReadX 10901 454656 4096 4096 NT_STATUS_OK
ReadX 10901 458752 61440 61440 NT_STATUS_OK
ReadX 10901 520192 4096 4096 NT_STATUS_OK
ReadX 10901 524288 61440 61440 NT_STATUS_OK
ReadX 10901 585728 4096 4096 NT_STATUS_OK
ReadX 10901 589824 61440 61440 NT_STATUS_OK
ReadX 10901 651264 4096 4096 NT_STATUS_OK
ReadX 10901 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 61440 61440 NT_STATUS_OK
ReadX 10902 61440 4096 4096 NT_STATUS_OK
ReadX 10902 65536 61440 61440 NT_STATUS_OK
ReadX 10902 126976 4096 4096 NT_STATUS_OK
ReadX 10902 131072 61440 61440 NT_STATUS_OK
ReadX 10902 192512 4096 4096 NT_STATUS_OK
ReadX 10902 196608 61440 61440 NT_STATUS_OK
ReadX 10902 258048 4096 4096 NT_STATUS_OK
ReadX 10902 262144 61440 61440 NT_STATUS_OK
ReadX 10902 323584 4096 4096 NT_STATUS_OK
ReadX 10902 327680 61440 61440 NT_STATUS_OK
ReadX 10902 389120 4096 4096 NT_STATUS_OK
ReadX 10902 393216 61440 61440 NT_STATUS_OK
ReadX 10902 454656 4096 4096 NT_STATUS_OK
ReadX 10902 458752 61440 61440 NT_STATUS_OK
ReadX 10902 520192 4096 4096 NT_STATUS_OK
ReadX 10902 524288 61440 61440 NT_STATUS_OK
ReadX 10902 585728 4096 4096 NT_STATUS_OK
ReadX 10902 589824 61440 61440 NT_STATUS_OK
ReadX 10902 651264 4096 4096 NT_STATUS_OK
ReadX 10902 655360 61440 61440 NT_STATUS_OK
ReadX 10902 716800 4096 4096 NT_STATUS_OK
ReadX 10902 720896 61440 61440 NT_STATUS_OK
ReadX 10902 782336 4096 4096 NT_STATUS_OK
ReadX 10902 786432 61440 61440 NT_STATUS_OK
ReadX 10902 847872 4096 4096 NT_STATUS_OK
ReadX 10902 851968 61440 61440 NT_STATUS_OK
ReadX 10902 913408 4096 4096 NT_STATUS_OK
ReadX 10902 917504 61440 61440 NT_STATUS_OK
ReadX 10902 978944 4096 4096 NT_STATUS_OK
ReadX 10902 983040 61440 61440 NT_STATUS_OK
ReadX 10902 1044480 4096 4096 NT_STATUS_OK
ReadX 10902 1048576 61440 61440 NT_STATUS_OK
ReadX 10902 1110016 4096 4096 NT_STATUS_OK
ReadX 10902 1114112 61440 61440 NT_STATUS_OK
ReadX 10902 1175552 4096 4096 NT_STATUS_OK
ReadX 10902 1179648 61440 61440 NT_STATUS_OK
ReadX 10902 1241088 4096 4096 NT_STATUS_OK
ReadX 10902 1245184 61440 61440 NT_STATUS_OK
ReadX 10902 1306624 4096 4096 NT_STATUS_OK
ReadX 10902 1310720 61440 61440 NT_STATUS_OK
ReadX 10902 1372160 4096 4096 NT_STATUS_OK
ReadX 10902 1376256 61440 61440 NT_STATUS_OK
ReadX 10902 1437696 4096 4096 NT_STATUS_OK
ReadX 10902 1441792 61440 61440 NT_STATUS_OK
ReadX 10902 1503232 4096 4096 NT_STATUS_OK
ReadX 10902 1507328 61440 61440 NT_STATUS_OK
ReadX 10902 1568768 4096 4096 NT_STATUS_OK
ReadX 10902 1572864 61440 61440 NT_STATUS_OK
ReadX 10902 1634304 4096 4096 NT_STATUS_OK
ReadX 10902 1638400 61440 61440 NT_STATUS_OK
ReadX 10902 1699840 4096 4096 NT_STATUS_OK
ReadX 10902 1703936 61440 61440 NT_STATUS_OK
ReadX 10902 1765376 4096 4096 NT_STATUS_OK
ReadX 10902 1769472 61440 61440 NT_STATUS_OK
ReadX 10902 1830912 4096 4096 NT_STATUS_OK
ReadX 10902 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10909 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 1004 NT_STATUS_OK
WriteX 10909 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 491 491 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10909 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10915 NT_STATUS_OK
WriteX 10915 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10915 258 NT_STATUS_OK
WriteX 10915 0 543 543 NT_STATUS_OK
Close 10915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Close 10906 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10929 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 1004 NT_STATUS_OK
WriteX 10929 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 2048 2048 NT_STATUS_OK
Close 10929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
Flush 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10935 NT_STATUS_OK
WriteX 10935 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10935 258 NT_STATUS_OK
WriteX 10935 0 2048 2048 NT_STATUS_OK
Close 10935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10941 NT_STATUS_OK
WriteX 10941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10941 258 NT_STATUS_OK
WriteX 10941 0 2048 2048 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 2048 2048 NT_STATUS_OK
ReadX 10920 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 2088 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10936 0 4096 4096 NT_STATUS_OK
WriteX 10920 0 8192 8192 NT_STATUS_OK
WriteX 10921 0 4096 4096 NT_STATUS_OK
WriteX 10922 0 4096 4096 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10946 NT_STATUS_OK
QUERY_FILE_INFORMATION 10946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10945 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10959 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10966 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 1004 NT_STATUS_OK
WriteX 10966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
WriteX 10966 0 2048 2048 NT_STATUS_OK
Close 10966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10967 NT_STATUS_OK
ReadX 10967 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10974 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 1004 NT_STATUS_OK
WriteX 10974 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 258 NT_STATUS_OK
WriteX 10974 0 2048 2048 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10967 0 4096 4096 NT_STATUS_OK
Flush 10967 NT_STATUS_OK
WriteX 10975 0 4096 4096 NT_STATUS_OK
Flush 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10967 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10975 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10969 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10977 NT_STATUS_OK
WriteX 10977 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 258 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10979 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10980 NT_STATUS_OK
WriteX 10980 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 258 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10981 0 4096 4096 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10958 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10988 NT_STATUS_OK
WriteX 10988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 258 NT_STATUS_OK
WriteX 10988 0 2048 2048 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11003 NT_STATUS_OK
QUERY_FILE_INFORMATION 11003 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11011 NT_STATUS_OK
ReadX 11011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11025 NT_STATUS_OK
QUERY_FILE_INFORMATION 11025 1004 NT_STATUS_OK
WriteX 11025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11025 258 NT_STATUS_OK
WriteX 11025 0 2048 2048 NT_STATUS_OK
Close 11025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
WriteX 11037 0 2048 2048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11045 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 1004 NT_STATUS_OK
WriteX 11045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 2048 2048 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
Flush 11026 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
Flush 11038 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
Flush 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11028 4096 16384 16384 NT_STATUS_OK
ReadX 11008 4096 16384 16384 NT_STATUS_OK
ReadX 11040 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 2048 2048 NT_STATUS_OK
WriteX 11048 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11049 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11012 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11040 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11051 NT_STATUS_OK
QUERY_FILE_INFORMATION 11051 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11053 NT_STATUS_OK
QUERY_FILE_INFORMATION 11053 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11056 4096 16384 16384 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
WriteX 11059 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 8192 8192 NT_STATUS_OK
ReadX 11062 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11076 0 4096 4096 NT_STATUS_OK
ReadX 11076 4096 4096 4096 NT_STATUS_OK
ReadX 11076 8192 4096 4096 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
ReadX 11077 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
WriteX 11059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11082 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 1004 NT_STATUS_OK
WriteX 11082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 2048 2048 NT_STATUS_OK
Close 11082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 4096 4096 NT_STATUS_OK
ReadX 11085 4096 4096 4096 NT_STATUS_OK
WriteX 11085 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
ReadX 11087 4096 4096 4096 NT_STATUS_OK
WriteX 11087 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11088 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11067 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11090 0 4096 4096 NT_STATUS_OK
ReadX 11090 4096 4096 4096 NT_STATUS_OK
ReadX 11090 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
ReadX 11091 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11108 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 1004 NT_STATUS_OK
WriteX 11108 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 258 NT_STATUS_OK
WriteX 11108 0 2048 2048 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 2048 2048 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11098 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11116 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11118 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 61440 4096 4096 NT_STATUS_OK
ReadX 11120 126976 4096 4096 NT_STATUS_OK
WriteX 11120 0 65536 65536 NT_STATUS_OK
WriteX 11120 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 61440 4096 4096 NT_STATUS_OK
ReadX 11121 126976 4096 4096 NT_STATUS_OK
ReadX 11121 192512 4096 4096 NT_STATUS_OK
ReadX 11121 258048 4096 4096 NT_STATUS_OK
WriteX 11121 0 65536 65536 NT_STATUS_OK
WriteX 11121 65536 65536 65536 NT_STATUS_OK
WriteX 11121 131072 65536 65536 NT_STATUS_OK
WriteX 11121 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 61440 4096 4096 NT_STATUS_OK
ReadX 11122 126976 4096 4096 NT_STATUS_OK
ReadX 11122 192512 4096 4096 NT_STATUS_OK
ReadX 11122 258048 4096 4096 NT_STATUS_OK
ReadX 11122 323584 4096 4096 NT_STATUS_OK
ReadX 11122 389120 4096 4096 NT_STATUS_OK
ReadX 11122 454656 4096 4096 NT_STATUS_OK
ReadX 11122 520192 4096 4096 NT_STATUS_OK
WriteX 11122 0 65536 65536 NT_STATUS_OK
WriteX 11122 65536 65536 65536 NT_STATUS_OK
WriteX 11122 131072 65536 65536 NT_STATUS_OK
WriteX 11122 196608 65536 65536 NT_STATUS_OK
WriteX 11122 262144 65536 65536 NT_STATUS_OK
WriteX 11122 327680 65536 65536 NT_STATUS_OK
WriteX 11122 393216 65536 65536 NT_STATUS_OK
WriteX 11122 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11123 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11123 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11123 8192 4096 4096 NT_STATUS_OK
ReadX 11123 12288 4096 4096 NT_STATUS_OK
ReadX 11123 16384 4096 4096 NT_STATUS_OK
ReadX 11123 20480 4096 4096 NT_STATUS_OK
ReadX 11123 24576 4096 4096 NT_STATUS_OK
ReadX 11123 28672 4096 4096 NT_STATUS_OK
ReadX 11123 32768 4096 4096 NT_STATUS_OK
ReadX 11123 36864 4096 4096 NT_STATUS_OK
ReadX 11123 40960 4096 4096 NT_STATUS_OK
ReadX 11123 45056 4096 4096 NT_STATUS_OK
ReadX 11123 49152 4096 4096 NT_STATUS_OK
ReadX 11123 53248 4096 4096 NT_STATUS_OK
ReadX 11123 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11123 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11124 NT_STATUS_OK
Close 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11126 NT_STATUS_OK
WriteX 11126 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11126 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11126 1004 NT_STATUS_OK
WriteX 11126 0 57088 57088 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
Flush 11126 NT_STATUS_OK
Close 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11127 NT_STATUS_OK
SET_FILE_INFORMATION 11127 1004 NT_STATUS_OK
Close 11127 NT_STATUS_OK
SET_FILE_INFORMATION 11126 1004 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11130 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11131 NT_STATUS_OK
WriteX 11131 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11131 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
WriteX 11131 0 51456 51456 NT_STATUS_OK
WriteX 11131 0 4096 4096 NT_STATUS_OK
Flush 11131 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
WriteX 11131 0 4096 4096 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11135 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11140 NT_STATUS_OK
WriteX 11140 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11140 258 NT_STATUS_OK
WriteX 11140 0 53077 53077 NT_STATUS_OK
Close 11140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 65536 65536 NT_STATUS_OK
WriteX 11141 65536 1856 1856 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Flush 11141 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11143 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11150 NT_STATUS_OK
WriteX 11150 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 258 NT_STATUS_OK
WriteX 11150 0 7983 7983 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 65536 65536 NT_STATUS_OK
WriteX 11155 131072 65536 65536 NT_STATUS_OK
WriteX 11155 196608 65536 65536 NT_STATUS_OK
WriteX 11155 262144 65536 65536 NT_STATUS_OK
WriteX 11155 327680 65536 65536 NT_STATUS_OK
WriteX 11155 393216 65536 65536 NT_STATUS_OK
WriteX 11155 458752 46731 46731 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11156 NT_STATUS_OK
WriteX 11156 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11145 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 65536 65536 NT_STATUS_OK
WriteX 11156 65536 22848 22848 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Flush 11156 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11160 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11161 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11161 1004 NT_STATUS_OK
ReadX 11161 8192 4096 4096 NT_STATUS_OK
ReadX 11161 12288 4096 4096 NT_STATUS_OK
ReadX 11161 16384 4096 4096 NT_STATUS_OK
ReadX 11161 20480 4096 4096 NT_STATUS_OK
ReadX 11161 24576 4096 4096 NT_STATUS_OK
ReadX 11161 28672 4096 4096 NT_STATUS_OK
ReadX 11161 32768 4096 4096 NT_STATUS_OK
ReadX 11161 36864 4096 4096 NT_STATUS_OK
ReadX 11161 40960 4096 4096 NT_STATUS_OK
ReadX 11161 45056 4096 4096 NT_STATUS_OK
ReadX 11161 49152 4096 4096 NT_STATUS_OK
ReadX 11161 53248 4096 4096 NT_STATUS_OK
ReadX 11161 57344 4096 4096 NT_STATUS_OK
ReadX 11161 61440 4096 4096 NT_STATUS_OK
ReadX 11161 65536 4096 4096 NT_STATUS_OK
ReadX 11161 69632 4096 4096 NT_STATUS_OK
ReadX 11161 73728 4096 4096 NT_STATUS_OK
ReadX 11161 77824 4096 4096 NT_STATUS_OK
ReadX 11161 81920 4096 4096 NT_STATUS_OK
ReadX 11161 86016 4096 4096 NT_STATUS_OK
ReadX 11161 90112 4096 4096 NT_STATUS_OK
ReadX 11161 94208 4096 4096 NT_STATUS_OK
ReadX 11161 98304 4096 4096 NT_STATUS_OK
ReadX 11161 102400 4096 4096 NT_STATUS_OK
ReadX 11161 106496 4096 4096 NT_STATUS_OK
ReadX 11161 110592 4096 4096 NT_STATUS_OK
ReadX 11161 114688 4096 4096 NT_STATUS_OK
ReadX 11161 118784 4096 4096 NT_STATUS_OK
ReadX 11161 122880 4096 4096 NT_STATUS_OK
ReadX 11161 126976 4096 4096 NT_STATUS_OK
ReadX 11161 131072 4096 4096 NT_STATUS_OK
ReadX 11161 135168 4096 4096 NT_STATUS_OK
ReadX 11161 139264 4096 4096 NT_STATUS_OK
ReadX 11161 143360 4096 4096 NT_STATUS_OK
ReadX 11161 147456 4096 4096 NT_STATUS_OK
ReadX 11161 151552 4096 4096 NT_STATUS_OK
ReadX 11161 155648 4096 4096 NT_STATUS_OK
ReadX 11161 159744 4096 4096 NT_STATUS_OK
ReadX 11161 163840 4096 4096 NT_STATUS_OK
ReadX 11161 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11161 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11164 NT_STATUS_OK
WriteX 11164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11164 258 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11165 NT_STATUS_OK
SET_FILE_INFORMATION 11165 1004 NT_STATUS_OK
Close 11165 NT_STATUS_OK
WriteX 11164 0 42388 42388 NT_STATUS_OK
Close 11164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
ReadX 11168 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11169 NT_STATUS_OK
WriteX 11169 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 258 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 42652 42652 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
ReadX 11173 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11175 NT_STATUS_OK
Close 11175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11178 NT_STATUS_OK
WriteX 11178 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 258 NT_STATUS_OK
WriteX 11178 0 65536 65536 NT_STATUS_OK
WriteX 11178 65536 49 49 NT_STATUS_OK
Close 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 61440 61440 NT_STATUS_OK
ReadX 11179 61440 4096 4096 NT_STATUS_OK
ReadX 11179 65536 61440 61440 NT_STATUS_OK
ReadX 11179 126976 4096 4096 NT_STATUS_OK
ReadX 11179 131072 61440 61440 NT_STATUS_OK
ReadX 11179 192512 4096 4096 NT_STATUS_OK
ReadX 11179 196608 61440 61440 NT_STATUS_OK
ReadX 11179 258048 4096 4096 NT_STATUS_OK
ReadX 11179 262144 61440 61440 NT_STATUS_OK
ReadX 11179 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 61440 61440 NT_STATUS_OK
ReadX 11180 61440 4096 4096 NT_STATUS_OK
ReadX 11180 65536 61440 61440 NT_STATUS_OK
ReadX 11180 126976 4096 4096 NT_STATUS_OK
ReadX 11180 131072 61440 61440 NT_STATUS_OK
ReadX 11180 192512 4096 4096 NT_STATUS_OK
ReadX 11180 196608 61440 61440 NT_STATUS_OK
ReadX 11180 258048 4096 4096 NT_STATUS_OK
ReadX 11180 262144 61440 61440 NT_STATUS_OK
ReadX 11180 323584 4096 4096 NT_STATUS_OK
ReadX 11180 327680 61440 61440 NT_STATUS_OK
ReadX 11180 389120 4096 4096 NT_STATUS_OK
ReadX 11180 393216 61440 61440 NT_STATUS_OK
ReadX 11180 454656 4096 4096 NT_STATUS_OK
ReadX 11180 458752 61440 61440 NT_STATUS_OK
ReadX 11180 520192 4096 4096 NT_STATUS_OK
ReadX 11180 524288 61440 61440 NT_STATUS_OK
ReadX 11180 585728 4096 4096 NT_STATUS_OK
ReadX 11180 589824 61440 61440 NT_STATUS_OK
ReadX 11180 651264 4096 4096 NT_STATUS_OK
ReadX 11180 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 61440 61440 NT_STATUS_OK
ReadX 11181 61440 4096 4096 NT_STATUS_OK
ReadX 11181 65536 61440 61440 NT_STATUS_OK
ReadX 11181 126976 4096 4096 NT_STATUS_OK
ReadX 11181 131072 61440 61440 NT_STATUS_OK
ReadX 11181 192512 4096 4096 NT_STATUS_OK
ReadX 11181 196608 61440 61440 NT_STATUS_OK
ReadX 11181 258048 4096 4096 NT_STATUS_OK
ReadX 11181 262144 61440 61440 NT_STATUS_OK
ReadX 11181 323584 4096 4096 NT_STATUS_OK
ReadX 11181 327680 61440 61440 NT_STATUS_OK
ReadX 11181 389120 4096 4096 NT_STATUS_OK
ReadX 11181 393216 61440 61440 NT_STATUS_OK
ReadX 11181 454656 4096 4096 NT_STATUS_OK
ReadX 11181 458752 61440 61440 NT_STATUS_OK
ReadX 11181 520192 4096 4096 NT_STATUS_OK
ReadX 11181 524288 61440 61440 NT_STATUS_OK
ReadX 11181 585728 4096 4096 NT_STATUS_OK
ReadX 11181 589824 61440 61440 NT_STATUS_OK
ReadX 11181 651264 4096 4096 NT_STATUS_OK
ReadX 11181 655360 61440 61440 NT_STATUS_OK
ReadX 11181 716800 4096 4096 NT_STATUS_OK
ReadX 11181 720896 61440 61440 NT_STATUS_OK
ReadX 11181 782336 4096 4096 NT_STATUS_OK
ReadX 11181 786432 61440 61440 NT_STATUS_OK
ReadX 11181 847872 4096 4096 NT_STATUS_OK
ReadX 11181 851968 61440 61440 NT_STATUS_OK
ReadX 11181 913408 4096 4096 NT_STATUS_OK
ReadX 11181 917504 61440 61440 NT_STATUS_OK
ReadX 11181 978944 4096 4096 NT_STATUS_OK
ReadX 11181 983040 61440 61440 NT_STATUS_OK
ReadX 11181 1044480 4096 4096 NT_STATUS_OK
ReadX 11181 1048576 61440 61440 NT_STATUS_OK
ReadX 11181 1110016 4096 4096 NT_STATUS_OK
ReadX 11181 1114112 61440 61440 NT_STATUS_OK
ReadX 11181 1175552 4096 4096 NT_STATUS_OK
ReadX 11181 1179648 61440 61440 NT_STATUS_OK
ReadX 11181 1241088 4096 4096 NT_STATUS_OK
ReadX 11181 1245184 61440 61440 NT_STATUS_OK
ReadX 11181 1306624 4096 4096 NT_STATUS_OK
ReadX 11181 1310720 61440 61440 NT_STATUS_OK
ReadX 11181 1372160 4096 4096 NT_STATUS_OK
ReadX 11181 1376256 61440 61440 NT_STATUS_OK
ReadX 11181 1437696 4096 4096 NT_STATUS_OK
ReadX 11181 1441792 61440 61440 NT_STATUS_OK
ReadX 11181 1503232 4096 4096 NT_STATUS_OK
ReadX 11181 1507328 61440 61440 NT_STATUS_OK
ReadX 11181 1568768 4096 4096 NT_STATUS_OK
ReadX 11181 1572864 61440 61440 NT_STATUS_OK
ReadX 11181 1634304 4096 4096 NT_STATUS_OK
ReadX 11181 1638400 61440 61440 NT_STATUS_OK
ReadX 11181 1699840 4096 4096 NT_STATUS_OK
ReadX 11181 1703936 61440 61440 NT_STATUS_OK
ReadX 11181 1765376 4096 4096 NT_STATUS_OK
ReadX 11181 1769472 61440 61440 NT_STATUS_OK
ReadX 11181 1830912 4096 4096 NT_STATUS_OK
ReadX 11181 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11183 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
ReadX 11183 2156 24 24 NT_STATUS_OK
ReadX 11183 2139 276 276 NT_STATUS_OK
ReadX 11183 2136 14 14 NT_STATUS_OK
ReadX 11183 2136 7 7 NT_STATUS_OK
ReadX 11183 2138 12 12 NT_STATUS_OK
ReadX 11183 2137 8 8 NT_STATUS_OK
ReadX 11183 2135 15 15 NT_STATUS_OK
ReadX 11183 0 16 16 NT_STATUS_OK
ReadX 11183 16 2048 2048 NT_STATUS_OK
ReadX 11183 2064 2048 2048 NT_STATUS_OK
ReadX 11183 257 2048 2048 NT_STATUS_OK
ReadX 11183 385 2048 2048 NT_STATUS_OK
ReadX 11183 513 2048 2048 NT_STATUS_OK
ReadX 11183 641 2048 2048 NT_STATUS_OK
ReadX 11183 769 2048 2048 NT_STATUS_OK
ReadX 11183 897 2048 2048 NT_STATUS_OK
ReadX 11183 1025 2048 2048 NT_STATUS_OK
ReadX 11183 1153 2048 2048 NT_STATUS_OK
ReadX 11183 1281 2048 2048 NT_STATUS_OK
ReadX 11183 1409 2048 2048 NT_STATUS_OK
ReadX 11183 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11185 NT_STATUS_OK
Close 11185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11188 NT_STATUS_OK
WriteX 11188 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 258 NT_STATUS_OK
WriteX 11188 0 10575 10575 NT_STATUS_OK
Flush 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11189 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11193 NT_STATUS_OK
LockX 11193 2147483538 1 NT_STATUS_OK
UnlockX 11193 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1005 NT_STATUS_OK
ReadX 11193 0 512 512 NT_STATUS_OK
ReadX 11193 512 512 512 NT_STATUS_OK
ReadX 11193 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1004 NT_STATUS_OK
Close 11193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11194 NT_STATUS_OK
QUERY_FILE_INFORMATION 11194 1005 NT_STATUS_OK
ReadX 11194 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11195 NT_STATUS_OK
LockX 11195 2147483538 1 NT_STATUS_OK
UnlockX 11195 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 1005 NT_STATUS_OK
ReadX 11195 0 512 512 NT_STATUS_OK
ReadX 11195 512 512 512 NT_STATUS_OK
ReadX 11195 1024 512 512 NT_STATUS_OK
ReadX 11195 288 20 20 NT_STATUS_OK
ReadX 11195 308 2084 2084 NT_STATUS_OK
ReadX 11195 388 2084 2084 NT_STATUS_OK
ReadX 11195 388 2084 2084 NT_STATUS_OK
ReadX 11182 2157 1386 1386 NT_STATUS_OK
ReadX 11195 2472 399 399 NT_STATUS_OK
ReadX 11195 3072 1536 1536 NT_STATUS_OK
ReadX 11195 544 149 149 NT_STATUS_OK
ReadX 11195 693 485 485 NT_STATUS_OK
Close 11195 NT_STATUS_OK
ReadX 11182 2157 4096 4096 NT_STATUS_OK
ReadX 11182 6253 4096 4096 NT_STATUS_OK
ReadX 11182 10349 4096 4096 NT_STATUS_OK
ReadX 11182 14445 4096 4096 NT_STATUS_OK
ReadX 11182 18541 4096 4096 NT_STATUS_OK
ReadX 11182 22637 256 256 NT_STATUS_OK
ReadX 11182 22893 4096 4096 NT_STATUS_OK
ReadX 11182 26989 4096 4096 NT_STATUS_OK
ReadX 11182 31085 4096 4096 NT_STATUS_OK
ReadX 11182 35181 4096 4096 NT_STATUS_OK
ReadX 11182 39277 4096 4096 NT_STATUS_OK
ReadX 11182 43373 4096 4096 NT_STATUS_OK
ReadX 11182 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11182 2157 1024 1024 NT_STATUS_OK
ReadX 11182 1667 4688 4688 NT_STATUS_OK
ReadX 11182 6355 3516 3516 NT_STATUS_OK
ReadX 11182 9871 16384 16384 NT_STATUS_OK
ReadX 11182 26255 3771 3771 NT_STATUS_OK
ReadX 11182 30026 2048 2048 NT_STATUS_OK
ReadX 11182 32074 1024 1024 NT_STATUS_OK
ReadX 11182 33098 6652 6652 NT_STATUS_OK
ReadX 11182 39750 16384 16384 NT_STATUS_OK
ReadX 11182 56134 10496 10496 NT_STATUS_OK
ReadX 11182 66630 1784 1784 NT_STATUS_OK
ReadX 11182 68414 90 90 NT_STATUS_OK
ReadX 11182 68504 273 273 NT_STATUS_OK
ReadX 11182 68777 1600 1600 NT_STATUS_OK
ReadX 11182 70377 640 640 NT_STATUS_OK
ReadX 11182 71017 1280 1280 NT_STATUS_OK
ReadX 11182 72297 8464 8464 NT_STATUS_OK
ReadX 11182 80761 158 158 NT_STATUS_OK
ReadX 11182 80919 912 912 NT_STATUS_OK
ReadX 11182 81831 1980 1980 NT_STATUS_OK
ReadX 11182 83811 2256 2256 NT_STATUS_OK
ReadX 11182 86067 400 400 NT_STATUS_OK
ReadX 11182 86467 252 252 NT_STATUS_OK
ReadX 11182 86719 42 42 NT_STATUS_OK
ReadX 11182 86761 725 725 NT_STATUS_OK
ReadX 11182 2009 512 512 NT_STATUS_OK
ReadX 11182 3895 9 9 NT_STATUS_OK
ReadX 11182 3781 46 46 NT_STATUS_OK
ReadX 11182 4059 92 92 NT_STATUS_OK
ReadX 11182 3781 92 92 NT_STATUS_OK
ReadX 11182 3986 184 184 NT_STATUS_OK
ReadX 11182 3987 16384 16384 NT_STATUS_OK
ReadX 11182 3902 16384 16384 NT_STATUS_OK
ReadX 11182 3781 10240 10240 NT_STATUS_OK
ReadX 11182 3821 16384 16384 NT_STATUS_OK
ReadX 11182 3891 935 935 NT_STATUS_OK
ReadX 11182 4060 10240 10240 NT_STATUS_OK
ReadX 11182 4059 184 184 NT_STATUS_OK
ReadX 11182 256 184 184 NT_STATUS_OK
ReadX 11182 256 1026 1026 NT_STATUS_OK
ReadX 11182 3901 326 326 NT_STATUS_OK
ReadX 11182 3899 652 652 NT_STATUS_OK
ReadX 11182 256 2 2 NT_STATUS_OK
ReadX 11182 258 4948 4948 NT_STATUS_OK
Close 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11200 NT_STATUS_OK
WriteX 11200 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11200 258 NT_STATUS_OK
WriteX 11200 0 65536 65536 NT_STATUS_OK
WriteX 11200 65536 65536 65536 NT_STATUS_OK
WriteX 11200 131072 65536 65536 NT_STATUS_OK
WriteX 11200 196608 65536 65536 NT_STATUS_OK
WriteX 11200 262144 65536 65536 NT_STATUS_OK
WriteX 11200 327680 65536 65536 NT_STATUS_OK
WriteX 11200 393216 65536 65536 NT_STATUS_OK
WriteX 11200 458752 65536 65536 NT_STATUS_OK
WriteX 11200 524288 65536 65536 NT_STATUS_OK
WriteX 11200 589824 35257 35257 NT_STATUS_OK
Close 11200 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11205 NT_STATUS_OK
WriteX 11205 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
WriteX 11205 0 65536 65536 NT_STATUS_OK
WriteX 11205 65536 65536 65536 NT_STATUS_OK
WriteX 11205 131072 65536 65536 NT_STATUS_OK
WriteX 11205 196608 65536 65536 NT_STATUS_OK
WriteX 11205 262144 65536 65536 NT_STATUS_OK
WriteX 11205 327680 65536 65536 NT_STATUS_OK
WriteX 11205 393216 65536 65536 NT_STATUS_OK
WriteX 11205 458752 65536 65536 NT_STATUS_OK
WriteX 11205 524288 65536 65536 NT_STATUS_OK
WriteX 11205 589824 57598 57598 NT_STATUS_OK
Close 11205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
WriteX 11207 0 12543 12543 NT_STATUS_OK
Flush 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11213 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
ReadX 11213 1938 24 24 NT_STATUS_OK
ReadX 11213 1920 276 276 NT_STATUS_OK
ReadX 11213 1918 14 14 NT_STATUS_OK
ReadX 11213 1918 7 7 NT_STATUS_OK
ReadX 11213 1919 12 12 NT_STATUS_OK
ReadX 11213 1919 8 8 NT_STATUS_OK
ReadX 11213 1917 15 15 NT_STATUS_OK
ReadX 11213 0 16 16 NT_STATUS_OK
ReadX 11213 16 2048 2048 NT_STATUS_OK
ReadX 11213 2064 2048 2048 NT_STATUS_OK
ReadX 11213 257 2048 2048 NT_STATUS_OK
ReadX 11213 385 2048 2048 NT_STATUS_OK
ReadX 11213 513 2048 2048 NT_STATUS_OK
ReadX 11213 641 2048 2048 NT_STATUS_OK
ReadX 11213 769 2048 2048 NT_STATUS_OK
ReadX 11213 897 2048 2048 NT_STATUS_OK
ReadX 11213 1025 2048 2048 NT_STATUS_OK
ReadX 11213 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11218 NT_STATUS_OK
WriteX 11218 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 258 NT_STATUS_OK
WriteX 11218 0 11588 11588 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
Close 11213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11223 NT_STATUS_OK
WriteX 11223 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 11615 11615 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
WriteX 11232 0 65536 65536 NT_STATUS_OK
WriteX 11232 65536 16050 16050 NT_STATUS_OK
Close 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11212 1939 64 64 NT_STATUS_OK
ReadX 11212 128 248 248 NT_STATUS_OK
ReadX 11212 128 568 568 NT_STATUS_OK
ReadX 11212 3872 1536 1536 NT_STATUS_OK
ReadX 11212 3456 2560 2560 NT_STATUS_OK
ReadX 11212 3136 512 512 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
ReadX 11212 3264 3072 3072 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 3616 4096 4096 NT_STATUS_OK
ReadX 11212 1939 64 64 NT_STATUS_OK
ReadX 11212 128 248 248 NT_STATUS_OK
ReadX 11212 128 608 608 NT_STATUS_OK
ReadX 11212 2858 1024 1024 NT_STATUS_OK
ReadX 11212 2810 4096 4096 NT_STATUS_OK
ReadX 11212 2826 4096 4096 NT_STATUS_OK
ReadX 11212 2580 2048 2048 NT_STATUS_OK
ReadX 11212 2800 2560 2560 NT_STATUS_OK
ReadX 11212 2100 4096 4096 NT_STATUS_OK
ReadX 11212 2084 4096 4096 NT_STATUS_OK
ReadX 11212 868 4096 4096 NT_STATUS_OK
ReadX 11212 2324 4096 4096 NT_STATUS_OK
ReadX 11212 884 4096 4096 NT_STATUS_OK
ReadX 11212 2604 1024 1024 NT_STATUS_OK
ReadX 11212 580 4096 4096 NT_STATUS_OK
ReadX 11212 596 4096 4096 NT_STATUS_OK
ReadX 11212 2752 4096 4096 NT_STATUS_OK
ReadX 11212 2842 1024 1024 NT_STATUS_OK
ReadX 11212 660 4096 4096 NT_STATUS_OK
ReadX 11212 2720 4096 4096 NT_STATUS_OK
ReadX 11212 2736 4096 4096 NT_STATUS_OK
ReadX 11212 628 4096 4096 NT_STATUS_OK
ReadX 11212 2704 4096 4096 NT_STATUS_OK
ReadX 11212 1556 4096 4096 NT_STATUS_OK
ReadX 11212 576 4096 4096 NT_STATUS_OK
ReadX 11212 3168 1536 1536 NT_STATUS_OK
ReadX 11212 832 4096 4096 NT_STATUS_OK
ReadX 11212 1088 4096 4096 NT_STATUS_OK
ReadX 11212 1344 4096 4096 NT_STATUS_OK
ReadX 11212 1600 4096 4096 NT_STATUS_OK
ReadX 11212 1856 4096 4096 NT_STATUS_OK
ReadX 11212 2112 4096 4096 NT_STATUS_OK
ReadX 11212 1892 4096 4096 NT_STATUS_OK
ReadX 11212 820 4096 4096 NT_STATUS_OK
ReadX 11212 788 4096 4096 NT_STATUS_OK
ReadX 11212 1604 4096 4096 NT_STATUS_OK
ReadX 11212 3648 4096 4096 NT_STATUS_OK
ReadX 11212 2608 4096 4096 NT_STATUS_OK
ReadX 11212 548 4096 4096 NT_STATUS_OK
ReadX 11212 740 4096 4096 NT_STATUS_OK
ReadX 11212 1344 4096 4096 NT_STATUS_OK
ReadX 11212 3392 4096 4096 NT_STATUS_OK
ReadX 11212 3904 4096 4096 NT_STATUS_OK
ReadX 11212 644 4096 4096 NT_STATUS_OK
ReadX 11212 676 4096 4096 NT_STATUS_OK
ReadX 11212 2688 4096 4096 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 900 4096 4096 NT_STATUS_OK
ReadX 11212 1908 4096 4096 NT_STATUS_OK
ReadX 11212 852 4096 4096 NT_STATUS_OK
ReadX 11212 724 4096 4096 NT_STATUS_OK
ReadX 11212 2292 4096 4096 NT_STATUS_OK
ReadX 11212 612 4096 4096 NT_STATUS_OK
ReadX 11212 388 4096 4096 NT_STATUS_OK
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 500 4096 4096 NT_STATUS_OK
ReadX 11212 356 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 576 4096 4096 NT_STATUS_OK
ReadX 11212 340 4096 4096 NT_STATUS_OK
ReadX 11212 420 4096 4096 NT_STATUS_OK
ReadX 11212 1600 4096 4096 NT_STATUS_OK
ReadX 11212 404 4096 4096 NT_STATUS_OK
ReadX 11212 1428 4096 4096 NT_STATUS_OK
ReadX 11212 2656 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 452 4096 4096 NT_STATUS_OK
ReadX 11212 692 4096 4096 NT_STATUS_OK
ReadX 11212 564 4096 4096 NT_STATUS_OK
ReadX 11212 372 4096 4096 NT_STATUS_OK
ReadX 11212 468 4096 4096 NT_STATUS_OK
ReadX 11212 484 4096 4096 NT_STATUS_OK
ReadX 11212 1088 4096 4096 NT_STATUS_OK
ReadX 11212 1924 4096 4096 NT_STATUS_OK
ReadX 11212 2768 4096 4096 NT_STATUS_OK
ReadX 11212 832 4096 4096 NT_STATUS_OK
ReadX 11212 836 4096 4096 NT_STATUS_OK
ReadX 11212 1856 4096 4096 NT_STATUS_OK
ReadX 11212 2640 4096 4096 NT_STATUS_OK
ReadX 11212 436 4096 4096 NT_STATUS_OK
ReadX 11212 1828 4096 4096 NT_STATUS_OK
ReadX 11212 804 4096 4096 NT_STATUS_OK
ReadX 11212 1860 4096 4096 NT_STATUS_OK
ReadX 11212 1812 4096 4096 NT_STATUS_OK
ReadX 11212 756 4096 4096 NT_STATUS_OK
ReadX 11212 1636 4096 4096 NT_STATUS_OK
ReadX 11212 772 4096 4096 NT_STATUS_OK
ReadX 11212 2036 4096 4096 NT_STATUS_OK
ReadX 11212 1220 4096 4096 NT_STATUS_OK
ReadX 11212 1652 4096 4096 NT_STATUS_OK
ReadX 11212 2588 4096 4096 NT_STATUS_OK
ReadX 11212 916 4096 4096 NT_STATUS_OK
ReadX 11212 260 4096 4096 NT_STATUS_OK
ReadX 11212 932 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 308 4096 4096 NT_STATUS_OK
ReadX 11212 292 4096 4096 NT_STATUS_OK
ReadX 11212 1140 4096 4096 NT_STATUS_OK
ReadX 11212 276 4096 4096 NT_STATUS_OK
ReadX 11212 2020 4096 4096 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
ReadX 11212 516 4096 4096 NT_STATUS_OK
ReadX 11212 1844 4096 4096 NT_STATUS_OK
ReadX 11212 1124 4096 4096 NT_STATUS_OK
ReadX 11212 3136 4096 4096 NT_STATUS_OK
ReadX 11212 324 4096 4096 NT_STATUS_OK
ReadX 11212 1156 4096 4096 NT_STATUS_OK
ReadX 11212 1172 4096 4096 NT_STATUS_OK
ReadX 11212 2112 4096 4096 NT_STATUS_OK
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 964 4096 4096 NT_STATUS_OK
ReadX 11212 980 4096 4096 NT_STATUS_OK
ReadX 11212 1012 4096 4096 NT_STATUS_OK
ReadX 11212 532 4096 4096 NT_STATUS_OK
ReadX 11212 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11212 1620 4096 4096 NT_STATUS_OK
ReadX 11212 1604 4096 4096 NT_STATUS_OK
ReadX 11212 2116 4096 4096 NT_STATUS_OK
ReadX 11212 2132 4096 4096 NT_STATUS_OK
ReadX 11212 2148 4096 4096 NT_STATUS_OK
ReadX 11212 2276 4096 4096 NT_STATUS_OK
ReadX 11212 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11234 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11237 NT_STATUS_OK
QUERY_FILE_INFORMATION 11192 1004 NT_STATUS_OK
Close 11192 NT_STATUS_OK
WriteX 11237 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11237 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11194 1004 NT_STATUS_OK
Close 11194 NT_STATUS_OK
WriteX 11237 0 65536 65536 NT_STATUS_OK
WriteX 11237 65536 64850 64850 NT_STATUS_OK
Close 11237 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11239 NT_STATUS_OK
WriteX 11239 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11239 258 NT_STATUS_OK
ReadX 11212 2068 4096 4096 NT_STATUS_OK
ReadX 11212 1588 4096 4096 NT_STATUS_OK
ReadX 11212 1572 4096 4096 NT_STATUS_OK
WriteX 11239 0 18630 18630 NT_STATUS_OK
Flush 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11212 612 4096 4096 NT_STATUS_OK
ReadX 11212 564 4096 4096 NT_STATUS_OK
ReadX 11212 1876 4096 4096 NT_STATUS_OK
ReadX 11212 628 4096 4096 NT_STATUS_OK
ReadX 11212 740 4096 4096 NT_STATUS_OK
ReadX 11212 724 4096 4096 NT_STATUS_OK
ReadX 11212 644 4096 4096 NT_STATUS_OK
ReadX 11212 2324 4096 4096 NT_STATUS_OK
ReadX 11212 660 4096 4096 NT_STATUS_OK
ReadX 11212 852 4096 4096 NT_STATUS_OK
ReadX 11212 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 580 4096 4096 NT_STATUS_OK
ReadX 11212 3136 512 512 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 61440 4096 4096 NT_STATUS_OK
ReadX 11244 126976 4096 4096 NT_STATUS_OK
WriteX 11244 0 65536 65536 NT_STATUS_OK
WriteX 11244 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 61440 4096 4096 NT_STATUS_OK
ReadX 11245 126976 4096 4096 NT_STATUS_OK
ReadX 11245 192512 4096 4096 NT_STATUS_OK
ReadX 11245 258048 4096 4096 NT_STATUS_OK
WriteX 11245 0 65536 65536 NT_STATUS_OK
WriteX 11245 65536 65536 65536 NT_STATUS_OK
WriteX 11245 131072 65536 65536 NT_STATUS_OK
WriteX 11245 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 61440 4096 4096 NT_STATUS_OK
ReadX 11246 126976 4096 4096 NT_STATUS_OK
ReadX 11246 192512 4096 4096 NT_STATUS_OK
ReadX 11246 258048 4096 4096 NT_STATUS_OK
ReadX 11246 323584 4096 4096 NT_STATUS_OK
ReadX 11246 389120 4096 4096 NT_STATUS_OK
ReadX 11246 454656 4096 4096 NT_STATUS_OK
ReadX 11246 520192 4096 4096 NT_STATUS_OK
WriteX 11246 0 65536 65536 NT_STATUS_OK
WriteX 11246 65536 65536 65536 NT_STATUS_OK
WriteX 11246 131072 65536 65536 NT_STATUS_OK
WriteX 11246 196608 65536 65536 NT_STATUS_OK
WriteX 11246 262144 65536 65536 NT_STATUS_OK
WriteX 11246 327680 65536 65536 NT_STATUS_OK
WriteX 11246 393216 65536 65536 NT_STATUS_OK
WriteX 11246 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11249 NT_STATUS_OK
WriteX 11249 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11249 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11247 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11254 NT_STATUS_OK
WriteX 11254 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11254 258 NT_STATUS_OK
WriteX 11254 0 62591 62591 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11256 NT_STATUS_OK
Close 11256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11259 NT_STATUS_OK
WriteX 11259 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 258 NT_STATUS_OK
WriteX 11259 0 10845 10845 NT_STATUS_OK
Close 11259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11264 NT_STATUS_OK
WriteX 11264 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 258 NT_STATUS_OK
WriteX 11264 0 30118 30118 NT_STATUS_OK
Close 11264 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
WriteX 11249 0 64 64 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 0 61440 61440 NT_STATUS_OK
ReadX 11266 61440 4096 4096 NT_STATUS_OK
ReadX 11266 65536 61440 61440 NT_STATUS_OK
ReadX 11266 126976 4096 4096 NT_STATUS_OK
ReadX 11266 131072 61440 61440 NT_STATUS_OK
ReadX 11266 192512 4096 4096 NT_STATUS_OK
ReadX 11266 196608 61440 61440 NT_STATUS_OK
ReadX 11266 258048 4096 4096 NT_STATUS_OK
ReadX 11266 262144 61440 61440 NT_STATUS_OK
ReadX 11266 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 61440 61440 NT_STATUS_OK
ReadX 11267 61440 4096 4096 NT_STATUS_OK
ReadX 11267 65536 61440 61440 NT_STATUS_OK
ReadX 11267 126976 4096 4096 NT_STATUS_OK
ReadX 11267 131072 61440 61440 NT_STATUS_OK
ReadX 11267 192512 4096 4096 NT_STATUS_OK
ReadX 11267 196608 61440 61440 NT_STATUS_OK
ReadX 11267 258048 4096 4096 NT_STATUS_OK
ReadX 11267 262144 61440 61440 NT_STATUS_OK
ReadX 11267 323584 4096 4096 NT_STATUS_OK
ReadX 11267 327680 61440 61440 NT_STATUS_OK
ReadX 11267 389120 4096 4096 NT_STATUS_OK
ReadX 11267 393216 61440 61440 NT_STATUS_OK
ReadX 11267 454656 4096 4096 NT_STATUS_OK
ReadX 11267 458752 61440 61440 NT_STATUS_OK
ReadX 11267 520192 4096 4096 NT_STATUS_OK
ReadX 11267 524288 61440 61440 NT_STATUS_OK
ReadX 11267 585728 4096 4096 NT_STATUS_OK
ReadX 11267 589824 61440 61440 NT_STATUS_OK
ReadX 11267 651264 4096 4096 NT_STATUS_OK
ReadX 11267 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 61440 61440 NT_STATUS_OK
ReadX 11268 61440 4096 4096 NT_STATUS_OK
ReadX 11268 65536 61440 61440 NT_STATUS_OK
ReadX 11268 126976 4096 4096 NT_STATUS_OK
ReadX 11268 131072 61440 61440 NT_STATUS_OK
ReadX 11268 192512 4096 4096 NT_STATUS_OK
ReadX 11268 196608 61440 61440 NT_STATUS_OK
ReadX 11268 258048 4096 4096 NT_STATUS_OK
ReadX 11268 262144 61440 61440 NT_STATUS_OK
ReadX 11268 323584 4096 4096 NT_STATUS_OK
ReadX 11268 327680 61440 61440 NT_STATUS_OK
ReadX 11268 389120 4096 4096 NT_STATUS_OK
ReadX 11268 393216 61440 61440 NT_STATUS_OK
ReadX 11268 454656 4096 4096 NT_STATUS_OK
ReadX 11268 458752 61440 61440 NT_STATUS_OK
ReadX 11268 520192 4096 4096 NT_STATUS_OK
ReadX 11268 524288 61440 61440 NT_STATUS_OK
ReadX 11268 585728 4096 4096 NT_STATUS_OK
ReadX 11268 589824 61440 61440 NT_STATUS_OK
ReadX 11268 651264 4096 4096 NT_STATUS_OK
ReadX 11268 655360 61440 61440 NT_STATUS_OK
ReadX 11268 716800 4096 4096 NT_STATUS_OK
ReadX 11268 720896 61440 61440 NT_STATUS_OK
ReadX 11268 782336 4096 4096 NT_STATUS_OK
ReadX 11268 786432 61440 61440 NT_STATUS_OK
ReadX 11268 847872 4096 4096 NT_STATUS_OK
ReadX 11268 851968 61440 61440 NT_STATUS_OK
ReadX 11268 913408 4096 4096 NT_STATUS_OK
ReadX 11268 917504 61440 61440 NT_STATUS_OK
ReadX 11268 978944 4096 4096 NT_STATUS_OK
ReadX 11268 983040 61440 61440 NT_STATUS_OK
ReadX 11268 1044480 4096 4096 NT_STATUS_OK
ReadX 11268 1048576 61440 61440 NT_STATUS_OK
ReadX 11268 1110016 4096 4096 NT_STATUS_OK
ReadX 11268 1114112 61440 61440 NT_STATUS_OK
ReadX 11268 1175552 4096 4096 NT_STATUS_OK
ReadX 11268 1179648 61440 61440 NT_STATUS_OK
ReadX 11268 1241088 4096 4096 NT_STATUS_OK
ReadX 11268 1245184 61440 61440 NT_STATUS_OK
ReadX 11268 1306624 4096 4096 NT_STATUS_OK
ReadX 11268 1310720 61440 61440 NT_STATUS_OK
ReadX 11268 1372160 4096 4096 NT_STATUS_OK
ReadX 11268 1376256 61440 61440 NT_STATUS_OK
ReadX 11268 1437696 4096 4096 NT_STATUS_OK
ReadX 11268 1441792 61440 61440 NT_STATUS_OK
ReadX 11268 1503232 4096 4096 NT_STATUS_OK
ReadX 11268 1507328 61440 61440 NT_STATUS_OK
ReadX 11268 1568768 4096 4096 NT_STATUS_OK
ReadX 11268 1572864 61440 61440 NT_STATUS_OK
ReadX 11268 1634304 4096 4096 NT_STATUS_OK
ReadX 11268 1638400 61440 61440 NT_STATUS_OK
ReadX 11268 1699840 4096 4096 NT_STATUS_OK
ReadX 11268 1703936 61440 61440 NT_STATUS_OK
ReadX 11268 1765376 4096 4096 NT_STATUS_OK
ReadX 11268 1769472 61440 61440 NT_STATUS_OK
ReadX 11268 1830912 4096 4096 NT_STATUS_OK
ReadX 11268 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
ReadX 11273 4096 4096 4096 NT_STATUS_OK
ReadX 11273 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11274 NT_STATUS_OK
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11277 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11278 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 8192 8192 NT_STATUS_OK
ReadX 11281 8192 8192 8192 NT_STATUS_OK
ReadX 11281 16384 8192 8192 NT_STATUS_OK
ReadX 11281 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11286 NT_STATUS_OK
WriteX 11286 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 258 NT_STATUS_OK
WriteX 11286 0 10438 10438 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11290 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11292 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
ReadX 11295 4096 4096 4096 NT_STATUS_OK
ReadX 11295 8192 4096 4096 NT_STATUS_OK
ReadX 11295 12288 8192 8192 NT_STATUS_OK
ReadX 11295 20480 8192 8192 NT_STATUS_OK
ReadX 11295 28672 8192 8192 NT_STATUS_OK
ReadX 11295 36864 8192 8192 NT_STATUS_OK
ReadX 11295 45056 8192 8192 NT_STATUS_OK
ReadX 11295 53248 8192 8192 NT_STATUS_OK
ReadX 11295 61440 8192 8192 NT_STATUS_OK
ReadX 11295 69632 8192 8192 NT_STATUS_OK
ReadX 11295 77824 8192 8192 NT_STATUS_OK
ReadX 11295 86016 8192 8192 NT_STATUS_OK
ReadX 11295 94208 8192 8192 NT_STATUS_OK
ReadX 11295 102400 8192 8192 NT_STATUS_OK
ReadX 11295 110592 8192 8192 NT_STATUS_OK
ReadX 11295 118784 8192 8192 NT_STATUS_OK
ReadX 11295 126976 8192 8192 NT_STATUS_OK
ReadX 11295 135168 8192 8192 NT_STATUS_OK
ReadX 11295 143360 8192 8192 NT_STATUS_OK
ReadX 11295 151552 8192 8192 NT_STATUS_OK
ReadX 11295 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 25961 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11300 NT_STATUS_OK
WriteX 11300 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11300 258 NT_STATUS_OK
WriteX 11300 0 28489 28489 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11303 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 8192 8192 NT_STATUS_OK
ReadX 11307 8192 8192 8192 NT_STATUS_OK
ReadX 11307 16384 8192 8192 NT_STATUS_OK
ReadX 11307 24576 8192 8192 NT_STATUS_OK
ReadX 11307 32768 16384 16384 NT_STATUS_OK
ReadX 11307 49152 8192 8192 NT_STATUS_OK
ReadX 11307 57344 8192 8192 NT_STATUS_OK
ReadX 11307 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 67 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 67 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11312 NT_STATUS_OK
WriteX 11312 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
WriteX 11312 0 29253 29253 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 25961 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11319 NT_STATUS_OK
WriteX 11319 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11319 258 NT_STATUS_OK
WriteX 11319 0 30183 30183 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11322 NT_STATUS_OK
WriteX 11322 0 510 510 NT_STATUS_OK
WriteX 11322 510 512 512 NT_STATUS_OK
WriteX 11322 1022 510 510 NT_STATUS_OK
WriteX 11322 1532 510 510 NT_STATUS_OK
WriteX 11322 2042 168 168 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
WriteX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 61440 4096 4096 NT_STATUS_OK
ReadX 11326 126976 4096 4096 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 61440 4096 4096 NT_STATUS_OK
ReadX 11327 126976 4096 4096 NT_STATUS_OK
ReadX 11327 192512 4096 4096 NT_STATUS_OK
ReadX 11327 258048 4096 4096 NT_STATUS_OK
WriteX 11327 0 65536 65536 NT_STATUS_OK
WriteX 11327 65536 65536 65536 NT_STATUS_OK
WriteX 11327 131072 65536 65536 NT_STATUS_OK
WriteX 11327 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 61440 4096 4096 NT_STATUS_OK
ReadX 11328 126976 4096 4096 NT_STATUS_OK
ReadX 11328 192512 4096 4096 NT_STATUS_OK
ReadX 11328 258048 4096 4096 NT_STATUS_OK
ReadX 11328 323584 4096 4096 NT_STATUS_OK
ReadX 11328 389120 4096 4096 NT_STATUS_OK
ReadX 11328 454656 4096 4096 NT_STATUS_OK
ReadX 11328 520192 4096 4096 NT_STATUS_OK
WriteX 11328 0 65536 65536 NT_STATUS_OK
WriteX 11328 65536 65536 65536 NT_STATUS_OK
WriteX 11328 131072 65536 65536 NT_STATUS_OK
WriteX 11328 196608 65536 65536 NT_STATUS_OK
WriteX 11328 262144 65536 65536 NT_STATUS_OK
WriteX 11328 327680 65536 65536 NT_STATUS_OK
WriteX 11328 393216 65536 65536 NT_STATUS_OK
WriteX 11328 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11331 NT_STATUS_OK
Close 11331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11340 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11344 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11349 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11358 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11391 NT_STATUS_OK
Close 11391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11397 NT_STATUS_OK
WriteX 11397 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11397 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11397 0 65536 65536 NT_STATUS_OK
WriteX 11397 65536 65536 65536 NT_STATUS_OK
WriteX 11397 131072 65536 65536 NT_STATUS_OK
WriteX 11397 196608 65536 65536 NT_STATUS_OK
WriteX 11397 262144 26634 26634 NT_STATUS_OK
Close 11397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
Close 11404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
ReadX 11405 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11415 NT_STATUS_OK
Close 11415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11424 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11443 NT_STATUS_OK
Close 11443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11448 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11453 NT_STATUS_OK
Close 11453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
Close 11485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11529 0 4096 4096 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
ReadX 11531 4096 4096 4096 NT_STATUS_OK
ReadX 11531 8192 4096 4096 NT_STATUS_OK
ReadX 11531 12288 4096 4096 NT_STATUS_OK
ReadX 11531 16384 4096 4096 NT_STATUS_OK
ReadX 11531 20480 4096 4096 NT_STATUS_OK
ReadX 11531 24576 4096 4096 NT_STATUS_OK
ReadX 11531 28672 4096 4096 NT_STATUS_OK
ReadX 11531 32768 4096 4096 NT_STATUS_OK
ReadX 11531 36864 4096 4096 NT_STATUS_OK
ReadX 11531 40960 4096 4096 NT_STATUS_OK
ReadX 11531 45056 4096 4096 NT_STATUS_OK
ReadX 11531 49152 4096 4096 NT_STATUS_OK
ReadX 11531 53248 4096 4096 NT_STATUS_OK
ReadX 11531 57344 4096 4096 NT_STATUS_OK
ReadX 11531 61440 4096 4096 NT_STATUS_OK
ReadX 11531 65536 4096 4096 NT_STATUS_OK
ReadX 11531 69632 4096 4096 NT_STATUS_OK
ReadX 11531 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11532 NT_STATUS_OK
SET_FILE_INFORMATION 11532 1004 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 19979 19979 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
QUERY_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
SET_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
Close 11541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
Close 11542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
WriteX 11543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11549 NT_STATUS_OK
WriteX 11549 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11549 258 NT_STATUS_OK
WriteX 11549 0 65536 65536 NT_STATUS_OK
WriteX 11549 65536 17654 17654 NT_STATUS_OK
Close 11549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 1004 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
SET_FILE_INFORMATION 11550 1004 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11551 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
Close 11551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
ReadX 11555 4096 4096 4096 NT_STATUS_OK
ReadX 11555 8192 4096 4096 NT_STATUS_OK
ReadX 11555 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11555 16384 4096 4096 NT_STATUS_OK
ReadX 11555 20480 4096 4096 NT_STATUS_OK
ReadX 11555 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
Close 11556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
Close 11557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11558 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11564 NT_STATUS_OK
WriteX 11564 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 19490 19490 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11566 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11570 0 4096 4096 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11571 NT_STATUS_OK
ReadX 11571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
ReadX 11572 4096 4096 4096 NT_STATUS_OK
ReadX 11572 8192 4096 4096 NT_STATUS_OK
ReadX 11572 12288 4096 4096 NT_STATUS_OK
ReadX 11572 16384 4096 4096 NT_STATUS_OK
ReadX 11572 20480 4096 4096 NT_STATUS_OK
ReadX 11572 24576 4096 4096 NT_STATUS_OK
ReadX 11572 28672 4096 4096 NT_STATUS_OK
ReadX 11572 32768 4096 4096 NT_STATUS_OK
ReadX 11572 36864 4096 4096 NT_STATUS_OK
ReadX 11572 40960 4096 4096 NT_STATUS_OK
ReadX 11572 45056 4096 4096 NT_STATUS_OK
ReadX 11572 49152 4096 4096 NT_STATUS_OK
ReadX 11572 53248 4096 4096 NT_STATUS_OK
ReadX 11572 57344 4096 4096 NT_STATUS_OK
ReadX 11572 61440 4096 4096 NT_STATUS_OK
ReadX 11572 65536 4096 4096 NT_STATUS_OK
ReadX 11572 69632 4096 4096 NT_STATUS_OK
ReadX 11572 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11573 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11578 NT_STATUS_OK
WriteX 11578 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11578 258 NT_STATUS_OK
WriteX 11578 0 65536 65536 NT_STATUS_OK
WriteX 11578 65536 8866 8866 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
Close 11579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
Close 11581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11582 NT_STATUS_OK
ReadX 11582 0 4096 4096 NT_STATUS_OK
Close 11582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11583 1004 NT_STATUS_OK
WriteX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 27747 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11589 NT_STATUS_OK
WriteX 11589 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11589 258 NT_STATUS_OK
WriteX 11589 0 65536 65536 NT_STATUS_OK
WriteX 11589 65536 9298 9298 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
WriteX 11590 0 4096 4096 NT_STATUS_OK
Flush 11590 NT_STATUS_OK
SET_FILE_INFORMATION 11590 1004 NT_STATUS_OK
WriteX 11590 0 4096 4096 NT_STATUS_OK
Flush 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11591 NT_STATUS_OK
SET_FILE_INFORMATION 11591 1004 NT_STATUS_OK
Close 11591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11596 0 4096 4096 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11597 4096 4096 4096 NT_STATUS_OK
ReadX 11597 8192 4096 4096 NT_STATUS_OK
ReadX 11597 12288 4096 4096 NT_STATUS_OK
ReadX 11597 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11600 1004 NT_STATUS_OK
WriteX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11603 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 27747 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11606 NT_STATUS_OK
WriteX 11606 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 65536 65536 NT_STATUS_OK
WriteX 11606 65536 11540 11540 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
Flush 11607 NT_STATUS_OK
SET_FILE_INFORMATION 11607 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
Flush 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11608 NT_STATUS_OK
SET_FILE_INFORMATION 11608 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 61440 4096 4096 NT_STATUS_OK
ReadX 11612 126976 4096 4096 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 61440 4096 4096 NT_STATUS_OK
ReadX 11613 126976 4096 4096 NT_STATUS_OK
ReadX 11613 192512 4096 4096 NT_STATUS_OK
ReadX 11613 258048 4096 4096 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 65536 65536 NT_STATUS_OK
WriteX 11613 131072 65536 65536 NT_STATUS_OK
WriteX 11613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 61440 4096 4096 NT_STATUS_OK
ReadX 11614 126976 4096 4096 NT_STATUS_OK
ReadX 11614 192512 4096 4096 NT_STATUS_OK
ReadX 11614 258048 4096 4096 NT_STATUS_OK
ReadX 11614 323584 4096 4096 NT_STATUS_OK
ReadX 11614 389120 4096 4096 NT_STATUS_OK
ReadX 11614 454656 4096 4096 NT_STATUS_OK
ReadX 11614 520192 4096 4096 NT_STATUS_OK
WriteX 11614 0 65536 65536 NT_STATUS_OK
WriteX 11614 65536 65536 65536 NT_STATUS_OK
WriteX 11614 131072 65536 65536 NT_STATUS_OK
WriteX 11614 196608 65536 65536 NT_STATUS_OK
WriteX 11614 262144 65536 65536 NT_STATUS_OK
WriteX 11614 327680 65536 65536 NT_STATUS_OK
WriteX 11614 393216 65536 65536 NT_STATUS_OK
WriteX 11614 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
ReadX 11615 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11616 NT_STATUS_OK
WriteX 11616 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 258 NT_STATUS_OK
WriteX 11616 0 53 53 NT_STATUS_OK
Close 11616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11615 8192 4096 4096 NT_STATUS_OK
ReadX 11615 12288 4096 4096 NT_STATUS_OK
WriteX 11619 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11619 258 NT_STATUS_OK
ReadX 11615 16384 4096 4096 NT_STATUS_OK
ReadX 11615 20480 4096 4096 NT_STATUS_OK
WriteX 11619 0 15360 15360 NT_STATUS_OK
Close 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11620 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11620 1004 NT_STATUS_OK
WriteX 11620 0 4096 4096 NT_STATUS_OK
Close 11620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11623 NT_STATUS_OK
ReadX 11623 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11623 4096 4096 4096 NT_STATUS_OK
ReadX 11623 8192 4096 4096 NT_STATUS_OK
ReadX 11623 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11626 NT_STATUS_OK
ReadX 11626 0 4096 4096 NT_STATUS_OK
ReadX 11626 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
ReadX 11627 4096 4096 4096 NT_STATUS_OK
ReadX 11627 8192 4096 4096 NT_STATUS_OK
Close 11626 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11628 NT_STATUS_OK
WriteX 11628 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 15360 15360 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11630 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11632 NT_STATUS_OK
ReadX 11632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11633 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
Close 11633 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
ReadX 11636 4096 4096 4096 NT_STATUS_OK
ReadX 11636 8192 4096 4096 NT_STATUS_OK
ReadX 11636 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11638 NT_STATUS_OK
WriteX 11638 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11638 258 NT_STATUS_OK
WriteX 11638 0 53 53 NT_STATUS_OK
Close 11638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11637 4096 4096 4096 NT_STATUS_OK
ReadX 11637 8192 4096 4096 NT_STATUS_OK
ReadX 11637 12288 4096 4096 NT_STATUS_OK
WriteX 11641 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11641 258 NT_STATUS_OK
WriteX 11641 0 12006 12006 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
WriteX 11642 0 4096 4096 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11646 NT_STATUS_OK
Close 11646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11645 4096 4096 4096 NT_STATUS_OK
ReadX 11645 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
WriteX 11648 0 11991 11991 NT_STATUS_OK
Close 11648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11649 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11649 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11653 NT_STATUS_OK
SET_FILE_INFORMATION 11653 1004 NT_STATUS_OK
Close 11653 NT_STATUS_OK
WriteX 11649 0 4096 4096 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11656 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
ReadX 11656 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
WriteX 11656 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
Close 11632 NT_STATUS_OK
WriteX 11636 0 19054 19054 NT_STATUS_OK
WriteX 11656 0 12288 12288 NT_STATUS_OK
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11659 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 61440 61440 NT_STATUS_OK
ReadX 11663 61440 4096 4096 NT_STATUS_OK
ReadX 11663 65536 61440 61440 NT_STATUS_OK
ReadX 11663 126976 4096 4096 NT_STATUS_OK
ReadX 11663 131072 61440 61440 NT_STATUS_OK
ReadX 11663 192512 4096 4096 NT_STATUS_OK
ReadX 11663 196608 61440 61440 NT_STATUS_OK
ReadX 11663 258048 4096 4096 NT_STATUS_OK
ReadX 11663 262144 61440 61440 NT_STATUS_OK
ReadX 11663 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 61440 61440 NT_STATUS_OK
ReadX 11664 61440 4096 4096 NT_STATUS_OK
ReadX 11664 65536 61440 61440 NT_STATUS_OK
ReadX 11664 126976 4096 4096 NT_STATUS_OK
ReadX 11664 131072 61440 61440 NT_STATUS_OK
ReadX 11664 192512 4096 4096 NT_STATUS_OK
ReadX 11664 196608 61440 61440 NT_STATUS_OK
ReadX 11664 258048 4096 4096 NT_STATUS_OK
ReadX 11664 262144 61440 61440 NT_STATUS_OK
ReadX 11664 323584 4096 4096 NT_STATUS_OK
ReadX 11664 327680 61440 61440 NT_STATUS_OK
ReadX 11664 389120 4096 4096 NT_STATUS_OK
ReadX 11664 393216 61440 61440 NT_STATUS_OK
ReadX 11664 454656 4096 4096 NT_STATUS_OK
ReadX 11664 458752 61440 61440 NT_STATUS_OK
ReadX 11664 520192 4096 4096 NT_STATUS_OK
ReadX 11664 524288 61440 61440 NT_STATUS_OK
ReadX 11664 585728 4096 4096 NT_STATUS_OK
ReadX 11664 589824 61440 61440 NT_STATUS_OK
ReadX 11664 651264 4096 4096 NT_STATUS_OK
ReadX 11664 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 61440 61440 NT_STATUS_OK
ReadX 11665 61440 4096 4096 NT_STATUS_OK
ReadX 11665 65536 61440 61440 NT_STATUS_OK
ReadX 11665 126976 4096 4096 NT_STATUS_OK
ReadX 11665 131072 61440 61440 NT_STATUS_OK
ReadX 11665 192512 4096 4096 NT_STATUS_OK
ReadX 11665 196608 61440 61440 NT_STATUS_OK
ReadX 11665 258048 4096 4096 NT_STATUS_OK
ReadX 11665 262144 61440 61440 NT_STATUS_OK
ReadX 11665 323584 4096 4096 NT_STATUS_OK
ReadX 11665 327680 61440 61440 NT_STATUS_OK
ReadX 11665 389120 4096 4096 NT_STATUS_OK
ReadX 11665 393216 61440 61440 NT_STATUS_OK
ReadX 11665 454656 4096 4096 NT_STATUS_OK
ReadX 11665 458752 61440 61440 NT_STATUS_OK
ReadX 11665 520192 4096 4096 NT_STATUS_OK
ReadX 11665 524288 61440 61440 NT_STATUS_OK
ReadX 11665 585728 4096 4096 NT_STATUS_OK
ReadX 11665 589824 61440 61440 NT_STATUS_OK
ReadX 11665 651264 4096 4096 NT_STATUS_OK
ReadX 11665 655360 61440 61440 NT_STATUS_OK
ReadX 11665 716800 4096 4096 NT_STATUS_OK
ReadX 11665 720896 61440 61440 NT_STATUS_OK
ReadX 11665 782336 4096 4096 NT_STATUS_OK
ReadX 11665 786432 61440 61440 NT_STATUS_OK
ReadX 11665 847872 4096 4096 NT_STATUS_OK
ReadX 11665 851968 61440 61440 NT_STATUS_OK
ReadX 11665 913408 4096 4096 NT_STATUS_OK
ReadX 11665 917504 61440 61440 NT_STATUS_OK
ReadX 11665 978944 4096 4096 NT_STATUS_OK
ReadX 11665 983040 61440 61440 NT_STATUS_OK
ReadX 11665 1044480 4096 4096 NT_STATUS_OK
ReadX 11665 1048576 61440 61440 NT_STATUS_OK
ReadX 11665 1110016 4096 4096 NT_STATUS_OK
ReadX 11665 1114112 61440 61440 NT_STATUS_OK
ReadX 11665 1175552 4096 4096 NT_STATUS_OK
ReadX 11665 1179648 61440 61440 NT_STATUS_OK
ReadX 11665 1241088 4096 4096 NT_STATUS_OK
ReadX 11665 1245184 61440 61440 NT_STATUS_OK
ReadX 11665 1306624 4096 4096 NT_STATUS_OK
ReadX 11665 1310720 61440 61440 NT_STATUS_OK
ReadX 11665 1372160 4096 4096 NT_STATUS_OK
ReadX 11665 1376256 61440 61440 NT_STATUS_OK
ReadX 11665 1437696 4096 4096 NT_STATUS_OK
ReadX 11665 1441792 61440 61440 NT_STATUS_OK
ReadX 11665 1503232 4096 4096 NT_STATUS_OK
ReadX 11665 1507328 61440 61440 NT_STATUS_OK
ReadX 11665 1568768 4096 4096 NT_STATUS_OK
ReadX 11665 1572864 61440 61440 NT_STATUS_OK
ReadX 11665 1634304 4096 4096 NT_STATUS_OK
ReadX 11665 1638400 61440 61440 NT_STATUS_OK
ReadX 11665 1699840 4096 4096 NT_STATUS_OK
ReadX 11665 1703936 61440 61440 NT_STATUS_OK
ReadX 11665 1765376 4096 4096 NT_STATUS_OK
ReadX 11665 1769472 61440 61440 NT_STATUS_OK
ReadX 11665 1830912 4096 4096 NT_STATUS_OK
ReadX 11665 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11668 NT_STATUS_OK
ReadX 11668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11672 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 1004 NT_STATUS_OK
WriteX 11672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 491 491 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11672 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11678 NT_STATUS_OK
WriteX 11678 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11678 258 NT_STATUS_OK
WriteX 11678 0 543 543 NT_STATUS_OK
Close 11678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Close 11669 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11692 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 1004 NT_STATUS_OK
WriteX 11692 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 2048 2048 NT_STATUS_OK
Close 11692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
Flush 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11698 NT_STATUS_OK
WriteX 11698 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11698 258 NT_STATUS_OK
WriteX 11698 0 2048 2048 NT_STATUS_OK
Close 11698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11704 NT_STATUS_OK
WriteX 11704 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11704 258 NT_STATUS_OK
WriteX 11704 0 2048 2048 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 2048 2048 NT_STATUS_OK
ReadX 11683 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11699 0 4096 4096 NT_STATUS_OK
WriteX 11683 0 8192 8192 NT_STATUS_OK
WriteX 11684 0 4096 4096 NT_STATUS_OK
WriteX 11685 0 4096 4096 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11708 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11722 NT_STATUS_OK
ReadX 11722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11729 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
WriteX 11729 0 2048 2048 NT_STATUS_OK
Close 11729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11730 NT_STATUS_OK
ReadX 11730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11737 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 1004 NT_STATUS_OK
WriteX 11737 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 258 NT_STATUS_OK
WriteX 11737 0 2048 2048 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
Flush 11730 NT_STATUS_OK
WriteX 11738 0 4096 4096 NT_STATUS_OK
Flush 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11738 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11732 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11740 NT_STATUS_OK
WriteX 11740 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 258 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11742 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11743 NT_STATUS_OK
WriteX 11743 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 258 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11744 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11721 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11751 NT_STATUS_OK
WriteX 11751 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 258 NT_STATUS_OK
WriteX 11751 0 2048 2048 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11766 NT_STATUS_OK
QUERY_FILE_INFORMATION 11766 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11774 NT_STATUS_OK
ReadX 11774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11788 NT_STATUS_OK
QUERY_FILE_INFORMATION 11788 1004 NT_STATUS_OK
WriteX 11788 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11788 258 NT_STATUS_OK
WriteX 11788 0 2048 2048 NT_STATUS_OK
Close 11788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11791 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
WriteX 11800 0 2048 2048 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11808 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 1004 NT_STATUS_OK
WriteX 11808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 258 NT_STATUS_OK
WriteX 11808 0 2048 2048 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
Flush 11789 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
Flush 11801 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
Flush 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11791 4096 16384 16384 NT_STATUS_OK
ReadX 11771 4096 16384 16384 NT_STATUS_OK
ReadX 11803 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 2048 2048 NT_STATUS_OK
WriteX 11811 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11812 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11775 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11803 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11814 NT_STATUS_OK
QUERY_FILE_INFORMATION 11814 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11816 NT_STATUS_OK
QUERY_FILE_INFORMATION 11816 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11819 4096 16384 16384 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
WriteX 11822 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11824 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11838 NT_STATUS_OK
ReadX 11838 0 8192 8192 NT_STATUS_OK
ReadX 11825 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11839 0 4096 4096 NT_STATUS_OK
ReadX 11839 4096 4096 4096 NT_STATUS_OK
ReadX 11839 8192 4096 4096 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
ReadX 11840 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
WriteX 11822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11845 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 1004 NT_STATUS_OK
WriteX 11845 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 2048 2048 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11847 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11848 4096 4096 4096 NT_STATUS_OK
WriteX 11848 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
ReadX 11850 4096 4096 4096 NT_STATUS_OK
WriteX 11850 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11851 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11831 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Close 11833 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11830 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11840 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11853 0 4096 4096 NT_STATUS_OK
ReadX 11853 4096 4096 4096 NT_STATUS_OK
ReadX 11853 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
ReadX 11854 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11871 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 1004 NT_STATUS_OK
WriteX 11871 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 258 NT_STATUS_OK
WriteX 11871 0 2048 2048 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11872 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 2048 2048 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11861 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11879 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11881 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 61440 4096 4096 NT_STATUS_OK
ReadX 11883 126976 4096 4096 NT_STATUS_OK
WriteX 11883 0 65536 65536 NT_STATUS_OK
WriteX 11883 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 61440 4096 4096 NT_STATUS_OK
ReadX 11884 126976 4096 4096 NT_STATUS_OK
ReadX 11884 192512 4096 4096 NT_STATUS_OK
ReadX 11884 258048 4096 4096 NT_STATUS_OK
WriteX 11884 0 65536 65536 NT_STATUS_OK
WriteX 11884 65536 65536 65536 NT_STATUS_OK
WriteX 11884 131072 65536 65536 NT_STATUS_OK
WriteX 11884 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 61440 4096 4096 NT_STATUS_OK
ReadX 11885 126976 4096 4096 NT_STATUS_OK
ReadX 11885 192512 4096 4096 NT_STATUS_OK
ReadX 11885 258048 4096 4096 NT_STATUS_OK
ReadX 11885 323584 4096 4096 NT_STATUS_OK
ReadX 11885 389120 4096 4096 NT_STATUS_OK
ReadX 11885 454656 4096 4096 NT_STATUS_OK
ReadX 11885 520192 4096 4096 NT_STATUS_OK
WriteX 11885 0 65536 65536 NT_STATUS_OK
WriteX 11885 65536 65536 65536 NT_STATUS_OK
WriteX 11885 131072 65536 65536 NT_STATUS_OK
WriteX 11885 196608 65536 65536 NT_STATUS_OK
WriteX 11885 262144 65536 65536 NT_STATUS_OK
WriteX 11885 327680 65536 65536 NT_STATUS_OK
WriteX 11885 393216 65536 65536 NT_STATUS_OK
WriteX 11885 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11886 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11886 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11886 8192 4096 4096 NT_STATUS_OK
ReadX 11886 12288 4096 4096 NT_STATUS_OK
ReadX 11886 16384 4096 4096 NT_STATUS_OK
ReadX 11886 20480 4096 4096 NT_STATUS_OK
ReadX 11886 24576 4096 4096 NT_STATUS_OK
ReadX 11886 28672 4096 4096 NT_STATUS_OK
ReadX 11886 32768 4096 4096 NT_STATUS_OK
ReadX 11886 36864 4096 4096 NT_STATUS_OK
ReadX 11886 40960 4096 4096 NT_STATUS_OK
ReadX 11886 45056 4096 4096 NT_STATUS_OK
ReadX 11886 49152 4096 4096 NT_STATUS_OK
ReadX 11886 53248 4096 4096 NT_STATUS_OK
ReadX 11886 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11886 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11887 NT_STATUS_OK
Close 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11889 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 57088 57088 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Flush 11889 NT_STATUS_OK
Close 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11890 NT_STATUS_OK
SET_FILE_INFORMATION 11890 1004 NT_STATUS_OK
Close 11890 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11893 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11894 NT_STATUS_OK
WriteX 11894 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11894 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
WriteX 11894 0 51456 51456 NT_STATUS_OK
WriteX 11894 0 4096 4096 NT_STATUS_OK
Flush 11894 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
WriteX 11894 0 4096 4096 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11898 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11903 NT_STATUS_OK
WriteX 11903 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11903 258 NT_STATUS_OK
WriteX 11903 0 53077 53077 NT_STATUS_OK
Close 11903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 65536 65536 NT_STATUS_OK
WriteX 11904 65536 1856 1856 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Flush 11904 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11906 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11913 NT_STATUS_OK
WriteX 11913 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 258 NT_STATUS_OK
WriteX 11913 0 7983 7983 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 65536 65536 NT_STATUS_OK
WriteX 11918 131072 65536 65536 NT_STATUS_OK
WriteX 11918 196608 65536 65536 NT_STATUS_OK
WriteX 11918 262144 65536 65536 NT_STATUS_OK
WriteX 11918 327680 65536 65536 NT_STATUS_OK
WriteX 11918 393216 65536 65536 NT_STATUS_OK
WriteX 11918 458752 46731 46731 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11919 NT_STATUS_OK
WriteX 11919 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11919 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11908 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 65536 65536 NT_STATUS_OK
WriteX 11919 65536 22848 22848 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Flush 11919 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11923 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11924 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11924 1004 NT_STATUS_OK
ReadX 11924 8192 4096 4096 NT_STATUS_OK
ReadX 11924 12288 4096 4096 NT_STATUS_OK
ReadX 11924 16384 4096 4096 NT_STATUS_OK
ReadX 11924 20480 4096 4096 NT_STATUS_OK
ReadX 11924 24576 4096 4096 NT_STATUS_OK
ReadX 11924 28672 4096 4096 NT_STATUS_OK
ReadX 11924 32768 4096 4096 NT_STATUS_OK
ReadX 11924 36864 4096 4096 NT_STATUS_OK
ReadX 11924 40960 4096 4096 NT_STATUS_OK
ReadX 11924 45056 4096 4096 NT_STATUS_OK
ReadX 11924 49152 4096 4096 NT_STATUS_OK
ReadX 11924 53248 4096 4096 NT_STATUS_OK
ReadX 11924 57344 4096 4096 NT_STATUS_OK
ReadX 11924 61440 4096 4096 NT_STATUS_OK
ReadX 11924 65536 4096 4096 NT_STATUS_OK
ReadX 11924 69632 4096 4096 NT_STATUS_OK
ReadX 11924 73728 4096 4096 NT_STATUS_OK
ReadX 11924 77824 4096 4096 NT_STATUS_OK
ReadX 11924 81920 4096 4096 NT_STATUS_OK
ReadX 11924 86016 4096 4096 NT_STATUS_OK
ReadX 11924 90112 4096 4096 NT_STATUS_OK
ReadX 11924 94208 4096 4096 NT_STATUS_OK
ReadX 11924 98304 4096 4096 NT_STATUS_OK
ReadX 11924 102400 4096 4096 NT_STATUS_OK
ReadX 11924 106496 4096 4096 NT_STATUS_OK
ReadX 11924 110592 4096 4096 NT_STATUS_OK
ReadX 11924 114688 4096 4096 NT_STATUS_OK
ReadX 11924 118784 4096 4096 NT_STATUS_OK
ReadX 11924 122880 4096 4096 NT_STATUS_OK
ReadX 11924 126976 4096 4096 NT_STATUS_OK
ReadX 11924 131072 4096 4096 NT_STATUS_OK
ReadX 11924 135168 4096 4096 NT_STATUS_OK
ReadX 11924 139264 4096 4096 NT_STATUS_OK
ReadX 11924 143360 4096 4096 NT_STATUS_OK
ReadX 11924 147456 4096 4096 NT_STATUS_OK
ReadX 11924 151552 4096 4096 NT_STATUS_OK
ReadX 11924 155648 4096 4096 NT_STATUS_OK
ReadX 11924 159744 4096 4096 NT_STATUS_OK
ReadX 11924 163840 4096 4096 NT_STATUS_OK
ReadX 11924 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11924 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11927 NT_STATUS_OK
WriteX 11927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 258 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11928 NT_STATUS_OK
SET_FILE_INFORMATION 11928 1004 NT_STATUS_OK
Close 11928 NT_STATUS_OK
WriteX 11927 0 42388 42388 NT_STATUS_OK
Close 11927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
ReadX 11931 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11932 NT_STATUS_OK
WriteX 11932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 258 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 42652 42652 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
ReadX 11936 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11938 NT_STATUS_OK
Close 11938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11941 NT_STATUS_OK
WriteX 11941 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 258 NT_STATUS_OK
WriteX 11941 0 65536 65536 NT_STATUS_OK
WriteX 11941 65536 49 49 NT_STATUS_OK
Close 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 61440 61440 NT_STATUS_OK
ReadX 11942 61440 4096 4096 NT_STATUS_OK
ReadX 11942 65536 61440 61440 NT_STATUS_OK
ReadX 11942 126976 4096 4096 NT_STATUS_OK
ReadX 11942 131072 61440 61440 NT_STATUS_OK
ReadX 11942 192512 4096 4096 NT_STATUS_OK
ReadX 11942 196608 61440 61440 NT_STATUS_OK
ReadX 11942 258048 4096 4096 NT_STATUS_OK
ReadX 11942 262144 61440 61440 NT_STATUS_OK
ReadX 11942 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 61440 61440 NT_STATUS_OK
ReadX 11943 61440 4096 4096 NT_STATUS_OK
ReadX 11943 65536 61440 61440 NT_STATUS_OK
ReadX 11943 126976 4096 4096 NT_STATUS_OK
ReadX 11943 131072 61440 61440 NT_STATUS_OK
ReadX 11943 192512 4096 4096 NT_STATUS_OK
ReadX 11943 196608 61440 61440 NT_STATUS_OK
ReadX 11943 258048 4096 4096 NT_STATUS_OK
ReadX 11943 262144 61440 61440 NT_STATUS_OK
ReadX 11943 323584 4096 4096 NT_STATUS_OK
ReadX 11943 327680 61440 61440 NT_STATUS_OK
ReadX 11943 389120 4096 4096 NT_STATUS_OK
ReadX 11943 393216 61440 61440 NT_STATUS_OK
ReadX 11943 454656 4096 4096 NT_STATUS_OK
ReadX 11943 458752 61440 61440 NT_STATUS_OK
ReadX 11943 520192 4096 4096 NT_STATUS_OK
ReadX 11943 524288 61440 61440 NT_STATUS_OK
ReadX 11943 585728 4096 4096 NT_STATUS_OK
ReadX 11943 589824 61440 61440 NT_STATUS_OK
ReadX 11943 651264 4096 4096 NT_STATUS_OK
ReadX 11943 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 61440 61440 NT_STATUS_OK
ReadX 11944 61440 4096 4096 NT_STATUS_OK
ReadX 11944 65536 61440 61440 NT_STATUS_OK
ReadX 11944 126976 4096 4096 NT_STATUS_OK
ReadX 11944 131072 61440 61440 NT_STATUS_OK
ReadX 11944 192512 4096 4096 NT_STATUS_OK
ReadX 11944 196608 61440 61440 NT_STATUS_OK
ReadX 11944 258048 4096 4096 NT_STATUS_OK
ReadX 11944 262144 61440 61440 NT_STATUS_OK
ReadX 11944 323584 4096 4096 NT_STATUS_OK
ReadX 11944 327680 61440 61440 NT_STATUS_OK
ReadX 11944 389120 4096 4096 NT_STATUS_OK
ReadX 11944 393216 61440 61440 NT_STATUS_OK
ReadX 11944 454656 4096 4096 NT_STATUS_OK
ReadX 11944 458752 61440 61440 NT_STATUS_OK
ReadX 11944 520192 4096 4096 NT_STATUS_OK
ReadX 11944 524288 61440 61440 NT_STATUS_OK
ReadX 11944 585728 4096 4096 NT_STATUS_OK
ReadX 11944 589824 61440 61440 NT_STATUS_OK
ReadX 11944 651264 4096 4096 NT_STATUS_OK
ReadX 11944 655360 61440 61440 NT_STATUS_OK
ReadX 11944 716800 4096 4096 NT_STATUS_OK
ReadX 11944 720896 61440 61440 NT_STATUS_OK
ReadX 11944 782336 4096 4096 NT_STATUS_OK
ReadX 11944 786432 61440 61440 NT_STATUS_OK
ReadX 11944 847872 4096 4096 NT_STATUS_OK
ReadX 11944 851968 61440 61440 NT_STATUS_OK
ReadX 11944 913408 4096 4096 NT_STATUS_OK
ReadX 11944 917504 61440 61440 NT_STATUS_OK
ReadX 11944 978944 4096 4096 NT_STATUS_OK
ReadX 11944 983040 61440 61440 NT_STATUS_OK
ReadX 11944 1044480 4096 4096 NT_STATUS_OK
ReadX 11944 1048576 61440 61440 NT_STATUS_OK
ReadX 11944 1110016 4096 4096 NT_STATUS_OK
ReadX 11944 1114112 61440 61440 NT_STATUS_OK
ReadX 11944 1175552 4096 4096 NT_STATUS_OK
ReadX 11944 1179648 61440 61440 NT_STATUS_OK
ReadX 11944 1241088 4096 4096 NT_STATUS_OK
ReadX 11944 1245184 61440 61440 NT_STATUS_OK
ReadX 11944 1306624 4096 4096 NT_STATUS_OK
ReadX 11944 1310720 61440 61440 NT_STATUS_OK
ReadX 11944 1372160 4096 4096 NT_STATUS_OK
ReadX 11944 1376256 61440 61440 NT_STATUS_OK
ReadX 11944 1437696 4096 4096 NT_STATUS_OK
ReadX 11944 1441792 61440 61440 NT_STATUS_OK
ReadX 11944 1503232 4096 4096 NT_STATUS_OK
ReadX 11944 1507328 61440 61440 NT_STATUS_OK
ReadX 11944 1568768 4096 4096 NT_STATUS_OK
ReadX 11944 1572864 61440 61440 NT_STATUS_OK
ReadX 11944 1634304 4096 4096 NT_STATUS_OK
ReadX 11944 1638400 61440 61440 NT_STATUS_OK
ReadX 11944 1699840 4096 4096 NT_STATUS_OK
ReadX 11944 1703936 61440 61440 NT_STATUS_OK
ReadX 11944 1765376 4096 4096 NT_STATUS_OK
ReadX 11944 1769472 61440 61440 NT_STATUS_OK
ReadX 11944 1830912 4096 4096 NT_STATUS_OK
ReadX 11944 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11946 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
ReadX 11946 2156 24 24 NT_STATUS_OK
ReadX 11946 2139 276 276 NT_STATUS_OK
ReadX 11946 2136 14 14 NT_STATUS_OK
ReadX 11946 2136 7 7 NT_STATUS_OK
ReadX 11946 2138 12 12 NT_STATUS_OK
ReadX 11946 2137 8 8 NT_STATUS_OK
ReadX 11946 2135 15 15 NT_STATUS_OK
ReadX 11946 0 16 16 NT_STATUS_OK
ReadX 11946 16 2048 2048 NT_STATUS_OK
ReadX 11946 2064 2048 2048 NT_STATUS_OK
ReadX 11946 257 2048 2048 NT_STATUS_OK
ReadX 11946 385 2048 2048 NT_STATUS_OK
ReadX 11946 513 2048 2048 NT_STATUS_OK
ReadX 11946 641 2048 2048 NT_STATUS_OK
ReadX 11946 769 2048 2048 NT_STATUS_OK
ReadX 11946 897 2048 2048 NT_STATUS_OK
ReadX 11946 1025 2048 2048 NT_STATUS_OK
ReadX 11946 1153 2048 2048 NT_STATUS_OK
ReadX 11946 1281 2048 2048 NT_STATUS_OK
ReadX 11946 1409 2048 2048 NT_STATUS_OK
ReadX 11946 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11948 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11951 NT_STATUS_OK
WriteX 11951 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
WriteX 11951 0 10575 10575 NT_STATUS_OK
Flush 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11956 NT_STATUS_OK
LockX 11956 2147483538 1 NT_STATUS_OK
UnlockX 11956 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1005 NT_STATUS_OK
ReadX 11956 0 512 512 NT_STATUS_OK
ReadX 11956 512 512 512 NT_STATUS_OK
ReadX 11956 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1004 NT_STATUS_OK
Close 11956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11957 NT_STATUS_OK
QUERY_FILE_INFORMATION 11957 1005 NT_STATUS_OK
ReadX 11957 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11958 NT_STATUS_OK
LockX 11958 2147483538 1 NT_STATUS_OK
UnlockX 11958 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 1005 NT_STATUS_OK
ReadX 11958 0 512 512 NT_STATUS_OK
ReadX 11958 512 512 512 NT_STATUS_OK
ReadX 11958 1024 512 512 NT_STATUS_OK
ReadX 11958 288 20 20 NT_STATUS_OK
ReadX 11958 308 2084 2084 NT_STATUS_OK
ReadX 11958 388 2084 2084 NT_STATUS_OK
ReadX 11958 388 2084 2084 NT_STATUS_OK
ReadX 11945 2157 1386 1386 NT_STATUS_OK
ReadX 11958 2472 399 399 NT_STATUS_OK
ReadX 11958 3072 1536 1536 NT_STATUS_OK
ReadX 11958 544 149 149 NT_STATUS_OK
ReadX 11958 693 485 485 NT_STATUS_OK
Close 11958 NT_STATUS_OK
ReadX 11945 2157 4096 4096 NT_STATUS_OK
ReadX 11945 6253 4096 4096 NT_STATUS_OK
ReadX 11945 10349 4096 4096 NT_STATUS_OK
ReadX 11945 14445 4096 4096 NT_STATUS_OK
ReadX 11945 18541 4096 4096 NT_STATUS_OK
ReadX 11945 22637 256 256 NT_STATUS_OK
ReadX 11945 22893 4096 4096 NT_STATUS_OK
ReadX 11945 26989 4096 4096 NT_STATUS_OK
ReadX 11945 31085 4096 4096 NT_STATUS_OK
ReadX 11945 35181 4096 4096 NT_STATUS_OK
ReadX 11945 39277 4096 4096 NT_STATUS_OK
ReadX 11945 43373 4096 4096 NT_STATUS_OK
ReadX 11945 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11945 2157 1024 1024 NT_STATUS_OK
ReadX 11945 1667 4688 4688 NT_STATUS_OK
ReadX 11945 6355 3516 3516 NT_STATUS_OK
ReadX 11945 9871 16384 16384 NT_STATUS_OK
ReadX 11945 26255 3771 3771 NT_STATUS_OK
ReadX 11945 30026 2048 2048 NT_STATUS_OK
ReadX 11945 32074 1024 1024 NT_STATUS_OK
ReadX 11945 33098 6652 6652 NT_STATUS_OK
ReadX 11945 39750 16384 16384 NT_STATUS_OK
ReadX 11945 56134 10496 10496 NT_STATUS_OK
ReadX 11945 66630 1784 1784 NT_STATUS_OK
ReadX 11945 68414 90 90 NT_STATUS_OK
ReadX 11945 68504 273 273 NT_STATUS_OK
ReadX 11945 68777 1600 1600 NT_STATUS_OK
ReadX 11945 70377 640 640 NT_STATUS_OK
ReadX 11945 71017 1280 1280 NT_STATUS_OK
ReadX 11945 72297 8464 8464 NT_STATUS_OK
ReadX 11945 80761 158 158 NT_STATUS_OK
ReadX 11945 80919 912 912 NT_STATUS_OK
ReadX 11945 81831 1980 1980 NT_STATUS_OK
ReadX 11945 83811 2256 2256 NT_STATUS_OK
ReadX 11945 86067 400 400 NT_STATUS_OK
ReadX 11945 86467 252 252 NT_STATUS_OK
ReadX 11945 86719 42 42 NT_STATUS_OK
ReadX 11945 86761 725 725 NT_STATUS_OK
ReadX 11945 2009 512 512 NT_STATUS_OK
ReadX 11945 3895 9 9 NT_STATUS_OK
ReadX 11945 3781 46 46 NT_STATUS_OK
ReadX 11945 4059 92 92 NT_STATUS_OK
ReadX 11945 3781 92 92 NT_STATUS_OK
ReadX 11945 3986 184 184 NT_STATUS_OK
ReadX 11945 3987 16384 16384 NT_STATUS_OK
ReadX 11945 3902 16384 16384 NT_STATUS_OK
ReadX 11945 3781 10240 10240 NT_STATUS_OK
ReadX 11945 3821 16384 16384 NT_STATUS_OK
ReadX 11945 3891 935 935 NT_STATUS_OK
ReadX 11945 4060 10240 10240 NT_STATUS_OK
ReadX 11945 4059 184 184 NT_STATUS_OK
ReadX 11945 256 184 184 NT_STATUS_OK
ReadX 11945 256 1026 1026 NT_STATUS_OK
ReadX 11945 3901 326 326 NT_STATUS_OK
ReadX 11945 3899 652 652 NT_STATUS_OK
ReadX 11945 256 2 2 NT_STATUS_OK
ReadX 11945 258 4948 4948 NT_STATUS_OK
Close 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11963 NT_STATUS_OK
WriteX 11963 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11963 258 NT_STATUS_OK
WriteX 11963 0 65536 65536 NT_STATUS_OK
WriteX 11963 65536 65536 65536 NT_STATUS_OK
WriteX 11963 131072 65536 65536 NT_STATUS_OK
WriteX 11963 196608 65536 65536 NT_STATUS_OK
WriteX 11963 262144 65536 65536 NT_STATUS_OK
WriteX 11963 327680 65536 65536 NT_STATUS_OK
WriteX 11963 393216 65536 65536 NT_STATUS_OK
WriteX 11963 458752 65536 65536 NT_STATUS_OK
WriteX 11963 524288 65536 65536 NT_STATUS_OK
WriteX 11963 589824 35257 35257 NT_STATUS_OK
Close 11963 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11965 NT_STATUS_OK
Close 11965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11968 NT_STATUS_OK
WriteX 11968 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 258 NT_STATUS_OK
WriteX 11968 0 65536 65536 NT_STATUS_OK
WriteX 11968 65536 65536 65536 NT_STATUS_OK
WriteX 11968 131072 65536 65536 NT_STATUS_OK
WriteX 11968 196608 65536 65536 NT_STATUS_OK
WriteX 11968 262144 65536 65536 NT_STATUS_OK
WriteX 11968 327680 65536 65536 NT_STATUS_OK
WriteX 11968 393216 65536 65536 NT_STATUS_OK
WriteX 11968 458752 65536 65536 NT_STATUS_OK
WriteX 11968 524288 65536 65536 NT_STATUS_OK
WriteX 11968 589824 57598 57598 NT_STATUS_OK
Close 11968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11970 NT_STATUS_OK
WriteX 11970 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
WriteX 11970 0 12543 12543 NT_STATUS_OK
Flush 11970 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11976 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
ReadX 11976 1938 24 24 NT_STATUS_OK
ReadX 11976 1920 276 276 NT_STATUS_OK
ReadX 11976 1918 14 14 NT_STATUS_OK
ReadX 11976 1918 7 7 NT_STATUS_OK
ReadX 11976 1919 12 12 NT_STATUS_OK
ReadX 11976 1919 8 8 NT_STATUS_OK
ReadX 11976 1917 15 15 NT_STATUS_OK
ReadX 11976 0 16 16 NT_STATUS_OK
ReadX 11976 16 2048 2048 NT_STATUS_OK
ReadX 11976 2064 2048 2048 NT_STATUS_OK
ReadX 11976 257 2048 2048 NT_STATUS_OK
ReadX 11976 385 2048 2048 NT_STATUS_OK
ReadX 11976 513 2048 2048 NT_STATUS_OK
ReadX 11976 641 2048 2048 NT_STATUS_OK
ReadX 11976 769 2048 2048 NT_STATUS_OK
ReadX 11976 897 2048 2048 NT_STATUS_OK
ReadX 11976 1025 2048 2048 NT_STATUS_OK
ReadX 11976 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11981 NT_STATUS_OK
WriteX 11981 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 258 NT_STATUS_OK
WriteX 11981 0 11588 11588 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
Close 11976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11986 NT_STATUS_OK
WriteX 11986 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 11615 11615 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11995 NT_STATUS_OK
WriteX 11995 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 258 NT_STATUS_OK
WriteX 11995 0 65536 65536 NT_STATUS_OK
WriteX 11995 65536 16050 16050 NT_STATUS_OK
Close 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11975 1939 64 64 NT_STATUS_OK
ReadX 11975 128 248 248 NT_STATUS_OK
ReadX 11975 128 568 568 NT_STATUS_OK
ReadX 11975 3872 1536 1536 NT_STATUS_OK
ReadX 11975 3456 2560 2560 NT_STATUS_OK
ReadX 11975 3136 512 512 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
ReadX 11975 3264 3072 3072 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 3616 4096 4096 NT_STATUS_OK
ReadX 11975 1939 64 64 NT_STATUS_OK
ReadX 11975 128 248 248 NT_STATUS_OK
ReadX 11975 128 608 608 NT_STATUS_OK
ReadX 11975 2858 1024 1024 NT_STATUS_OK
ReadX 11975 2810 4096 4096 NT_STATUS_OK
ReadX 11975 2826 4096 4096 NT_STATUS_OK
ReadX 11975 2580 2048 2048 NT_STATUS_OK
ReadX 11975 2800 2560 2560 NT_STATUS_OK
ReadX 11975 2100 4096 4096 NT_STATUS_OK
ReadX 11975 2084 4096 4096 NT_STATUS_OK
ReadX 11975 868 4096 4096 NT_STATUS_OK
ReadX 11975 2324 4096 4096 NT_STATUS_OK
ReadX 11975 884 4096 4096 NT_STATUS_OK
ReadX 11975 2604 1024 1024 NT_STATUS_OK
ReadX 11975 580 4096 4096 NT_STATUS_OK
ReadX 11975 596 4096 4096 NT_STATUS_OK
ReadX 11975 2752 4096 4096 NT_STATUS_OK
ReadX 11975 2842 1024 1024 NT_STATUS_OK
ReadX 11975 660 4096 4096 NT_STATUS_OK
ReadX 11975 2720 4096 4096 NT_STATUS_OK
ReadX 11975 2736 4096 4096 NT_STATUS_OK
ReadX 11975 628 4096 4096 NT_STATUS_OK
ReadX 11975 2704 4096 4096 NT_STATUS_OK
ReadX 11975 1556 4096 4096 NT_STATUS_OK
ReadX 11975 576 4096 4096 NT_STATUS_OK
ReadX 11975 3168 1536 1536 NT_STATUS_OK
ReadX 11975 832 4096 4096 NT_STATUS_OK
ReadX 11975 1088 4096 4096 NT_STATUS_OK
ReadX 11975 1344 4096 4096 NT_STATUS_OK
ReadX 11975 1600 4096 4096 NT_STATUS_OK
ReadX 11975 1856 4096 4096 NT_STATUS_OK
ReadX 11975 2112 4096 4096 NT_STATUS_OK
ReadX 11975 1892 4096 4096 NT_STATUS_OK
ReadX 11975 820 4096 4096 NT_STATUS_OK
ReadX 11975 788 4096 4096 NT_STATUS_OK
ReadX 11975 1604 4096 4096 NT_STATUS_OK
ReadX 11975 3648 4096 4096 NT_STATUS_OK
ReadX 11975 2608 4096 4096 NT_STATUS_OK
ReadX 11975 548 4096 4096 NT_STATUS_OK
ReadX 11975 740 4096 4096 NT_STATUS_OK
ReadX 11975 1344 4096 4096 NT_STATUS_OK
ReadX 11975 3392 4096 4096 NT_STATUS_OK
ReadX 11975 3904 4096 4096 NT_STATUS_OK
ReadX 11975 644 4096 4096 NT_STATUS_OK
ReadX 11975 676 4096 4096 NT_STATUS_OK
ReadX 11975 2688 4096 4096 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 900 4096 4096 NT_STATUS_OK
ReadX 11975 1908 4096 4096 NT_STATUS_OK
ReadX 11975 852 4096 4096 NT_STATUS_OK
ReadX 11975 724 4096 4096 NT_STATUS_OK
ReadX 11975 2292 4096 4096 NT_STATUS_OK
ReadX 11975 612 4096 4096 NT_STATUS_OK
ReadX 11975 388 4096 4096 NT_STATUS_OK
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 500 4096 4096 NT_STATUS_OK
ReadX 11975 356 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 576 4096 4096 NT_STATUS_OK
ReadX 11975 340 4096 4096 NT_STATUS_OK
ReadX 11975 420 4096 4096 NT_STATUS_OK
ReadX 11975 1600 4096 4096 NT_STATUS_OK
ReadX 11975 404 4096 4096 NT_STATUS_OK
ReadX 11975 1428 4096 4096 NT_STATUS_OK
ReadX 11975 2656 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 452 4096 4096 NT_STATUS_OK
ReadX 11975 692 4096 4096 NT_STATUS_OK
ReadX 11975 564 4096 4096 NT_STATUS_OK
ReadX 11975 372 4096 4096 NT_STATUS_OK
ReadX 11975 468 4096 4096 NT_STATUS_OK
ReadX 11975 484 4096 4096 NT_STATUS_OK
ReadX 11975 1088 4096 4096 NT_STATUS_OK
ReadX 11975 1924 4096 4096 NT_STATUS_OK
ReadX 11975 2768 4096 4096 NT_STATUS_OK
ReadX 11975 832 4096 4096 NT_STATUS_OK
ReadX 11975 836 4096 4096 NT_STATUS_OK
ReadX 11975 1856 4096 4096 NT_STATUS_OK
ReadX 11975 2640 4096 4096 NT_STATUS_OK
ReadX 11975 436 4096 4096 NT_STATUS_OK
ReadX 11975 1828 4096 4096 NT_STATUS_OK
ReadX 11975 804 4096 4096 NT_STATUS_OK
ReadX 11975 1860 4096 4096 NT_STATUS_OK
ReadX 11975 1812 4096 4096 NT_STATUS_OK
ReadX 11975 756 4096 4096 NT_STATUS_OK
ReadX 11975 1636 4096 4096 NT_STATUS_OK
ReadX 11975 772 4096 4096 NT_STATUS_OK
ReadX 11975 2036 4096 4096 NT_STATUS_OK
ReadX 11975 1220 4096 4096 NT_STATUS_OK
ReadX 11975 1652 4096 4096 NT_STATUS_OK
ReadX 11975 2588 4096 4096 NT_STATUS_OK
ReadX 11975 916 4096 4096 NT_STATUS_OK
ReadX 11975 260 4096 4096 NT_STATUS_OK
ReadX 11975 932 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 308 4096 4096 NT_STATUS_OK
ReadX 11975 292 4096 4096 NT_STATUS_OK
ReadX 11975 1140 4096 4096 NT_STATUS_OK
ReadX 11975 276 4096 4096 NT_STATUS_OK
ReadX 11975 2020 4096 4096 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
ReadX 11975 516 4096 4096 NT_STATUS_OK
ReadX 11975 1844 4096 4096 NT_STATUS_OK
ReadX 11975 1124 4096 4096 NT_STATUS_OK
ReadX 11975 3136 4096 4096 NT_STATUS_OK
ReadX 11975 324 4096 4096 NT_STATUS_OK
ReadX 11975 1156 4096 4096 NT_STATUS_OK
ReadX 11975 1172 4096 4096 NT_STATUS_OK
ReadX 11975 2112 4096 4096 NT_STATUS_OK
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 964 4096 4096 NT_STATUS_OK
ReadX 11975 980 4096 4096 NT_STATUS_OK
ReadX 11975 1012 4096 4096 NT_STATUS_OK
ReadX 11975 532 4096 4096 NT_STATUS_OK
ReadX 11975 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11975 1620 4096 4096 NT_STATUS_OK
ReadX 11975 1604 4096 4096 NT_STATUS_OK
ReadX 11975 2116 4096 4096 NT_STATUS_OK
ReadX 11975 2132 4096 4096 NT_STATUS_OK
ReadX 11975 2148 4096 4096 NT_STATUS_OK
ReadX 11975 2276 4096 4096 NT_STATUS_OK
ReadX 11975 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11997 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12000 NT_STATUS_OK
QUERY_FILE_INFORMATION 11955 1004 NT_STATUS_OK
Close 11955 NT_STATUS_OK
WriteX 12000 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12000 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11957 1004 NT_STATUS_OK
Close 11957 NT_STATUS_OK
WriteX 12000 0 65536 65536 NT_STATUS_OK
WriteX 12000 65536 64850 64850 NT_STATUS_OK
Close 12000 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12002 NT_STATUS_OK
WriteX 12002 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12002 258 NT_STATUS_OK
ReadX 11975 2068 4096 4096 NT_STATUS_OK
ReadX 11975 1588 4096 4096 NT_STATUS_OK
ReadX 11975 1572 4096 4096 NT_STATUS_OK
WriteX 12002 0 18630 18630 NT_STATUS_OK
Flush 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11975 612 4096 4096 NT_STATUS_OK
ReadX 11975 564 4096 4096 NT_STATUS_OK
ReadX 11975 1876 4096 4096 NT_STATUS_OK
ReadX 11975 628 4096 4096 NT_STATUS_OK
ReadX 11975 740 4096 4096 NT_STATUS_OK
ReadX 11975 724 4096 4096 NT_STATUS_OK
ReadX 11975 644 4096 4096 NT_STATUS_OK
ReadX 11975 2324 4096 4096 NT_STATUS_OK
ReadX 11975 660 4096 4096 NT_STATUS_OK
ReadX 11975 852 4096 4096 NT_STATUS_OK
ReadX 11975 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 580 4096 4096 NT_STATUS_OK
ReadX 11975 3136 512 512 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 61440 4096 4096 NT_STATUS_OK
ReadX 12007 126976 4096 4096 NT_STATUS_OK
WriteX 12007 0 65536 65536 NT_STATUS_OK
WriteX 12007 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 61440 4096 4096 NT_STATUS_OK
ReadX 12008 126976 4096 4096 NT_STATUS_OK
ReadX 12008 192512 4096 4096 NT_STATUS_OK
ReadX 12008 258048 4096 4096 NT_STATUS_OK
WriteX 12008 0 65536 65536 NT_STATUS_OK
WriteX 12008 65536 65536 65536 NT_STATUS_OK
WriteX 12008 131072 65536 65536 NT_STATUS_OK
WriteX 12008 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 61440 4096 4096 NT_STATUS_OK
ReadX 12009 126976 4096 4096 NT_STATUS_OK
ReadX 12009 192512 4096 4096 NT_STATUS_OK
ReadX 12009 258048 4096 4096 NT_STATUS_OK
ReadX 12009 323584 4096 4096 NT_STATUS_OK
ReadX 12009 389120 4096 4096 NT_STATUS_OK
ReadX 12009 454656 4096 4096 NT_STATUS_OK
ReadX 12009 520192 4096 4096 NT_STATUS_OK
WriteX 12009 0 65536 65536 NT_STATUS_OK
WriteX 12009 65536 65536 65536 NT_STATUS_OK
WriteX 12009 131072 65536 65536 NT_STATUS_OK
WriteX 12009 196608 65536 65536 NT_STATUS_OK
WriteX 12009 262144 65536 65536 NT_STATUS_OK
WriteX 12009 327680 65536 65536 NT_STATUS_OK
WriteX 12009 393216 65536 65536 NT_STATUS_OK
WriteX 12009 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12012 NT_STATUS_OK
WriteX 12012 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12012 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12010 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12017 NT_STATUS_OK
WriteX 12017 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12017 258 NT_STATUS_OK
WriteX 12017 0 62591 62591 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12019 NT_STATUS_OK
Close 12019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12022 NT_STATUS_OK
WriteX 12022 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 258 NT_STATUS_OK
WriteX 12022 0 10845 10845 NT_STATUS_OK
Close 12022 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12027 NT_STATUS_OK
WriteX 12027 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 258 NT_STATUS_OK
WriteX 12027 0 30118 30118 NT_STATUS_OK
Close 12027 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
WriteX 12012 0 64 64 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 0 61440 61440 NT_STATUS_OK
ReadX 12029 61440 4096 4096 NT_STATUS_OK
ReadX 12029 65536 61440 61440 NT_STATUS_OK
ReadX 12029 126976 4096 4096 NT_STATUS_OK
ReadX 12029 131072 61440 61440 NT_STATUS_OK
ReadX 12029 192512 4096 4096 NT_STATUS_OK
ReadX 12029 196608 61440 61440 NT_STATUS_OK
ReadX 12029 258048 4096 4096 NT_STATUS_OK
ReadX 12029 262144 61440 61440 NT_STATUS_OK
ReadX 12029 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 61440 61440 NT_STATUS_OK
ReadX 12030 61440 4096 4096 NT_STATUS_OK
ReadX 12030 65536 61440 61440 NT_STATUS_OK
ReadX 12030 126976 4096 4096 NT_STATUS_OK
ReadX 12030 131072 61440 61440 NT_STATUS_OK
ReadX 12030 192512 4096 4096 NT_STATUS_OK
ReadX 12030 196608 61440 61440 NT_STATUS_OK
ReadX 12030 258048 4096 4096 NT_STATUS_OK
ReadX 12030 262144 61440 61440 NT_STATUS_OK
ReadX 12030 323584 4096 4096 NT_STATUS_OK
ReadX 12030 327680 61440 61440 NT_STATUS_OK
ReadX 12030 389120 4096 4096 NT_STATUS_OK
ReadX 12030 393216 61440 61440 NT_STATUS_OK
ReadX 12030 454656 4096 4096 NT_STATUS_OK
ReadX 12030 458752 61440 61440 NT_STATUS_OK
ReadX 12030 520192 4096 4096 NT_STATUS_OK
ReadX 12030 524288 61440 61440 NT_STATUS_OK
ReadX 12030 585728 4096 4096 NT_STATUS_OK
ReadX 12030 589824 61440 61440 NT_STATUS_OK
ReadX 12030 651264 4096 4096 NT_STATUS_OK
ReadX 12030 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 61440 61440 NT_STATUS_OK
ReadX 12031 61440 4096 4096 NT_STATUS_OK
ReadX 12031 65536 61440 61440 NT_STATUS_OK
ReadX 12031 126976 4096 4096 NT_STATUS_OK
ReadX 12031 131072 61440 61440 NT_STATUS_OK
ReadX 12031 192512 4096 4096 NT_STATUS_OK
ReadX 12031 196608 61440 61440 NT_STATUS_OK
ReadX 12031 258048 4096 4096 NT_STATUS_OK
ReadX 12031 262144 61440 61440 NT_STATUS_OK
ReadX 12031 323584 4096 4096 NT_STATUS_OK
ReadX 12031 327680 61440 61440 NT_STATUS_OK
ReadX 12031 389120 4096 4096 NT_STATUS_OK
ReadX 12031 393216 61440 61440 NT_STATUS_OK
ReadX 12031 454656 4096 4096 NT_STATUS_OK
ReadX 12031 458752 61440 61440 NT_STATUS_OK
ReadX 12031 520192 4096 4096 NT_STATUS_OK
ReadX 12031 524288 61440 61440 NT_STATUS_OK
ReadX 12031 585728 4096 4096 NT_STATUS_OK
ReadX 12031 589824 61440 61440 NT_STATUS_OK
ReadX 12031 651264 4096 4096 NT_STATUS_OK
ReadX 12031 655360 61440 61440 NT_STATUS_OK
ReadX 12031 716800 4096 4096 NT_STATUS_OK
ReadX 12031 720896 61440 61440 NT_STATUS_OK
ReadX 12031 782336 4096 4096 NT_STATUS_OK
ReadX 12031 786432 61440 61440 NT_STATUS_OK
ReadX 12031 847872 4096 4096 NT_STATUS_OK
ReadX 12031 851968 61440 61440 NT_STATUS_OK
ReadX 12031 913408 4096 4096 NT_STATUS_OK
ReadX 12031 917504 61440 61440 NT_STATUS_OK
ReadX 12031 978944 4096 4096 NT_STATUS_OK
ReadX 12031 983040 61440 61440 NT_STATUS_OK
ReadX 12031 1044480 4096 4096 NT_STATUS_OK
ReadX 12031 1048576 61440 61440 NT_STATUS_OK
ReadX 12031 1110016 4096 4096 NT_STATUS_OK
ReadX 12031 1114112 61440 61440 NT_STATUS_OK
ReadX 12031 1175552 4096 4096 NT_STATUS_OK
ReadX 12031 1179648 61440 61440 NT_STATUS_OK
ReadX 12031 1241088 4096 4096 NT_STATUS_OK
ReadX 12031 1245184 61440 61440 NT_STATUS_OK
ReadX 12031 1306624 4096 4096 NT_STATUS_OK
ReadX 12031 1310720 61440 61440 NT_STATUS_OK
ReadX 12031 1372160 4096 4096 NT_STATUS_OK
ReadX 12031 1376256 61440 61440 NT_STATUS_OK
ReadX 12031 1437696 4096 4096 NT_STATUS_OK
ReadX 12031 1441792 61440 61440 NT_STATUS_OK
ReadX 12031 1503232 4096 4096 NT_STATUS_OK
ReadX 12031 1507328 61440 61440 NT_STATUS_OK
ReadX 12031 1568768 4096 4096 NT_STATUS_OK
ReadX 12031 1572864 61440 61440 NT_STATUS_OK
ReadX 12031 1634304 4096 4096 NT_STATUS_OK
ReadX 12031 1638400 61440 61440 NT_STATUS_OK
ReadX 12031 1699840 4096 4096 NT_STATUS_OK
ReadX 12031 1703936 61440 61440 NT_STATUS_OK
ReadX 12031 1765376 4096 4096 NT_STATUS_OK
ReadX 12031 1769472 61440 61440 NT_STATUS_OK
ReadX 12031 1830912 4096 4096 NT_STATUS_OK
ReadX 12031 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12032 NT_STATUS_OK
Close 12032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
ReadX 12036 4096 4096 4096 NT_STATUS_OK
ReadX 12036 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12037 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12040 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12041 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 8192 8192 NT_STATUS_OK
ReadX 12044 8192 8192 8192 NT_STATUS_OK
ReadX 12044 16384 8192 8192 NT_STATUS_OK
ReadX 12044 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12049 NT_STATUS_OK
WriteX 12049 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 258 NT_STATUS_OK
WriteX 12049 0 10438 10438 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12055 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
ReadX 12058 4096 4096 4096 NT_STATUS_OK
ReadX 12058 8192 4096 4096 NT_STATUS_OK
ReadX 12058 12288 8192 8192 NT_STATUS_OK
ReadX 12058 20480 8192 8192 NT_STATUS_OK
ReadX 12058 28672 8192 8192 NT_STATUS_OK
ReadX 12058 36864 8192 8192 NT_STATUS_OK
ReadX 12058 45056 8192 8192 NT_STATUS_OK
ReadX 12058 53248 8192 8192 NT_STATUS_OK
ReadX 12058 61440 8192 8192 NT_STATUS_OK
ReadX 12058 69632 8192 8192 NT_STATUS_OK
ReadX 12058 77824 8192 8192 NT_STATUS_OK
ReadX 12058 86016 8192 8192 NT_STATUS_OK
ReadX 12058 94208 8192 8192 NT_STATUS_OK
ReadX 12058 102400 8192 8192 NT_STATUS_OK
ReadX 12058 110592 8192 8192 NT_STATUS_OK
ReadX 12058 118784 8192 8192 NT_STATUS_OK
ReadX 12058 126976 8192 8192 NT_STATUS_OK
ReadX 12058 135168 8192 8192 NT_STATUS_OK
ReadX 12058 143360 8192 8192 NT_STATUS_OK
ReadX 12058 151552 8192 8192 NT_STATUS_OK
ReadX 12058 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12063 NT_STATUS_OK
WriteX 12063 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12063 258 NT_STATUS_OK
WriteX 12063 0 28489 28489 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12066 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 8192 8192 NT_STATUS_OK
ReadX 12070 8192 8192 8192 NT_STATUS_OK
ReadX 12070 16384 8192 8192 NT_STATUS_OK
ReadX 12070 24576 8192 8192 NT_STATUS_OK
ReadX 12070 32768 16384 16384 NT_STATUS_OK
ReadX 12070 49152 8192 8192 NT_STATUS_OK
ReadX 12070 57344 8192 8192 NT_STATUS_OK
ReadX 12070 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12075 NT_STATUS_OK
WriteX 12075 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
WriteX 12075 0 29253 29253 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12082 NT_STATUS_OK
WriteX 12082 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12082 258 NT_STATUS_OK
WriteX 12082 0 30183 30183 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12085 NT_STATUS_OK
WriteX 12085 0 510 510 NT_STATUS_OK
WriteX 12085 510 512 512 NT_STATUS_OK
WriteX 12085 1022 510 510 NT_STATUS_OK
WriteX 12085 1532 510 510 NT_STATUS_OK
WriteX 12085 2042 168 168 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
WriteX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 61440 4096 4096 NT_STATUS_OK
ReadX 12089 126976 4096 4096 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 61440 4096 4096 NT_STATUS_OK
ReadX 12090 126976 4096 4096 NT_STATUS_OK
ReadX 12090 192512 4096 4096 NT_STATUS_OK
ReadX 12090 258048 4096 4096 NT_STATUS_OK
WriteX 12090 0 65536 65536 NT_STATUS_OK
WriteX 12090 65536 65536 65536 NT_STATUS_OK
WriteX 12090 131072 65536 65536 NT_STATUS_OK
WriteX 12090 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 61440 4096 4096 NT_STATUS_OK
ReadX 12091 126976 4096 4096 NT_STATUS_OK
ReadX 12091 192512 4096 4096 NT_STATUS_OK
ReadX 12091 258048 4096 4096 NT_STATUS_OK
ReadX 12091 323584 4096 4096 NT_STATUS_OK
ReadX 12091 389120 4096 4096 NT_STATUS_OK
ReadX 12091 454656 4096 4096 NT_STATUS_OK
ReadX 12091 520192 4096 4096 NT_STATUS_OK
WriteX 12091 0 65536 65536 NT_STATUS_OK
WriteX 12091 65536 65536 65536 NT_STATUS_OK
WriteX 12091 131072 65536 65536 NT_STATUS_OK
WriteX 12091 196608 65536 65536 NT_STATUS_OK
WriteX 12091 262144 65536 65536 NT_STATUS_OK
WriteX 12091 327680 65536 65536 NT_STATUS_OK
WriteX 12091 393216 65536 65536 NT_STATUS_OK
WriteX 12091 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12094 NT_STATUS_OK
Close 12094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12103 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12107 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12112 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12121 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12154 NT_STATUS_OK
Close 12154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12160 NT_STATUS_OK
WriteX 12160 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12160 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12160 0 65536 65536 NT_STATUS_OK
WriteX 12160 65536 65536 65536 NT_STATUS_OK
WriteX 12160 131072 65536 65536 NT_STATUS_OK
WriteX 12160 196608 65536 65536 NT_STATUS_OK
WriteX 12160 262144 26634 26634 NT_STATUS_OK
Close 12160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
Close 12167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
ReadX 12168 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12178 NT_STATUS_OK
Close 12178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12187 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12206 NT_STATUS_OK
Close 12206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12211 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12216 NT_STATUS_OK
Close 12216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
Close 12248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12292 0 4096 4096 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
ReadX 12294 4096 4096 4096 NT_STATUS_OK
ReadX 12294 8192 4096 4096 NT_STATUS_OK
ReadX 12294 12288 4096 4096 NT_STATUS_OK
ReadX 12294 16384 4096 4096 NT_STATUS_OK
ReadX 12294 20480 4096 4096 NT_STATUS_OK
ReadX 12294 24576 4096 4096 NT_STATUS_OK
ReadX 12294 28672 4096 4096 NT_STATUS_OK
ReadX 12294 32768 4096 4096 NT_STATUS_OK
ReadX 12294 36864 4096 4096 NT_STATUS_OK
ReadX 12294 40960 4096 4096 NT_STATUS_OK
ReadX 12294 45056 4096 4096 NT_STATUS_OK
ReadX 12294 49152 4096 4096 NT_STATUS_OK
ReadX 12294 53248 4096 4096 NT_STATUS_OK
ReadX 12294 57344 4096 4096 NT_STATUS_OK
ReadX 12294 61440 4096 4096 NT_STATUS_OK
ReadX 12294 65536 4096 4096 NT_STATUS_OK
ReadX 12294 69632 4096 4096 NT_STATUS_OK
ReadX 12294 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12295 NT_STATUS_OK
SET_FILE_INFORMATION 12295 1004 NT_STATUS_OK
Close 12295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 19979 19979 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
QUERY_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
SET_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
Close 12304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
Close 12305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
WriteX 12306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12312 NT_STATUS_OK
WriteX 12312 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12312 258 NT_STATUS_OK
WriteX 12312 0 65536 65536 NT_STATUS_OK
WriteX 12312 65536 17654 17654 NT_STATUS_OK
Close 12312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 1004 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
SET_FILE_INFORMATION 12313 1004 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12314 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
Close 12314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
ReadX 12318 4096 4096 4096 NT_STATUS_OK
ReadX 12318 8192 4096 4096 NT_STATUS_OK
ReadX 12318 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12318 16384 4096 4096 NT_STATUS_OK
ReadX 12318 20480 4096 4096 NT_STATUS_OK
ReadX 12318 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
Close 12319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
Close 12320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12321 1004 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12327 NT_STATUS_OK
WriteX 12327 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 19490 19490 NT_STATUS_OK
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12329 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12333 0 4096 4096 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12334 NT_STATUS_OK
ReadX 12334 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
ReadX 12335 4096 4096 4096 NT_STATUS_OK
ReadX 12335 8192 4096 4096 NT_STATUS_OK
ReadX 12335 12288 4096 4096 NT_STATUS_OK
ReadX 12335 16384 4096 4096 NT_STATUS_OK
ReadX 12335 20480 4096 4096 NT_STATUS_OK
ReadX 12335 24576 4096 4096 NT_STATUS_OK
ReadX 12335 28672 4096 4096 NT_STATUS_OK
ReadX 12335 32768 4096 4096 NT_STATUS_OK
ReadX 12335 36864 4096 4096 NT_STATUS_OK
ReadX 12335 40960 4096 4096 NT_STATUS_OK
ReadX 12335 45056 4096 4096 NT_STATUS_OK
ReadX 12335 49152 4096 4096 NT_STATUS_OK
ReadX 12335 53248 4096 4096 NT_STATUS_OK
ReadX 12335 57344 4096 4096 NT_STATUS_OK
ReadX 12335 61440 4096 4096 NT_STATUS_OK
ReadX 12335 65536 4096 4096 NT_STATUS_OK
ReadX 12335 69632 4096 4096 NT_STATUS_OK
ReadX 12335 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12336 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12341 NT_STATUS_OK
WriteX 12341 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12341 258 NT_STATUS_OK
WriteX 12341 0 65536 65536 NT_STATUS_OK
WriteX 12341 65536 8866 8866 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
Close 12342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
Close 12344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12345 NT_STATUS_OK
ReadX 12345 0 4096 4096 NT_STATUS_OK
Close 12345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12346 1004 NT_STATUS_OK
WriteX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12352 NT_STATUS_OK
WriteX 12352 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12352 258 NT_STATUS_OK
WriteX 12352 0 65536 65536 NT_STATUS_OK
WriteX 12352 65536 9298 9298 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Flush 12353 NT_STATUS_OK
SET_FILE_INFORMATION 12353 1004 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Flush 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12354 NT_STATUS_OK
SET_FILE_INFORMATION 12354 1004 NT_STATUS_OK
Close 12354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12359 0 4096 4096 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12360 4096 4096 4096 NT_STATUS_OK
ReadX 12360 8192 4096 4096 NT_STATUS_OK
ReadX 12360 12288 4096 4096 NT_STATUS_OK
ReadX 12360 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12363 1004 NT_STATUS_OK
WriteX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12366 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12369 NT_STATUS_OK
WriteX 12369 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 65536 65536 NT_STATUS_OK
WriteX 12369 65536 11540 11540 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
Flush 12370 NT_STATUS_OK
SET_FILE_INFORMATION 12370 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
Flush 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12371 NT_STATUS_OK
SET_FILE_INFORMATION 12371 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 61440 4096 4096 NT_STATUS_OK
ReadX 12375 126976 4096 4096 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 61440 4096 4096 NT_STATUS_OK
ReadX 12376 126976 4096 4096 NT_STATUS_OK
ReadX 12376 192512 4096 4096 NT_STATUS_OK
ReadX 12376 258048 4096 4096 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 65536 65536 NT_STATUS_OK
WriteX 12376 131072 65536 65536 NT_STATUS_OK
WriteX 12376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 61440 4096 4096 NT_STATUS_OK
ReadX 12377 126976 4096 4096 NT_STATUS_OK
ReadX 12377 192512 4096 4096 NT_STATUS_OK
ReadX 12377 258048 4096 4096 NT_STATUS_OK
ReadX 12377 323584 4096 4096 NT_STATUS_OK
ReadX 12377 389120 4096 4096 NT_STATUS_OK
ReadX 12377 454656 4096 4096 NT_STATUS_OK
ReadX 12377 520192 4096 4096 NT_STATUS_OK
WriteX 12377 0 65536 65536 NT_STATUS_OK
WriteX 12377 65536 65536 65536 NT_STATUS_OK
WriteX 12377 131072 65536 65536 NT_STATUS_OK
WriteX 12377 196608 65536 65536 NT_STATUS_OK
WriteX 12377 262144 65536 65536 NT_STATUS_OK
WriteX 12377 327680 65536 65536 NT_STATUS_OK
WriteX 12377 393216 65536 65536 NT_STATUS_OK
WriteX 12377 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
ReadX 12378 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12379 NT_STATUS_OK
WriteX 12379 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12379 258 NT_STATUS_OK
WriteX 12379 0 53 53 NT_STATUS_OK
Close 12379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12378 8192 4096 4096 NT_STATUS_OK
ReadX 12378 12288 4096 4096 NT_STATUS_OK
WriteX 12382 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12382 258 NT_STATUS_OK
ReadX 12378 16384 4096 4096 NT_STATUS_OK
ReadX 12378 20480 4096 4096 NT_STATUS_OK
WriteX 12382 0 15360 15360 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12383 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12383 1004 NT_STATUS_OK
WriteX 12383 0 4096 4096 NT_STATUS_OK
Close 12383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12386 NT_STATUS_OK
ReadX 12386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12386 4096 4096 4096 NT_STATUS_OK
ReadX 12386 8192 4096 4096 NT_STATUS_OK
ReadX 12386 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12389 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
ReadX 12389 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
ReadX 12390 4096 4096 4096 NT_STATUS_OK
ReadX 12390 8192 4096 4096 NT_STATUS_OK
Close 12389 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12391 NT_STATUS_OK
WriteX 12391 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 15360 15360 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12393 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12395 NT_STATUS_OK
ReadX 12395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12396 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
Close 12396 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
ReadX 12399 4096 4096 4096 NT_STATUS_OK
ReadX 12399 8192 4096 4096 NT_STATUS_OK
ReadX 12399 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12401 NT_STATUS_OK
WriteX 12401 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12401 258 NT_STATUS_OK
WriteX 12401 0 53 53 NT_STATUS_OK
Close 12401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12400 4096 4096 4096 NT_STATUS_OK
ReadX 12400 8192 4096 4096 NT_STATUS_OK
ReadX 12400 12288 4096 4096 NT_STATUS_OK
WriteX 12404 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12404 258 NT_STATUS_OK
WriteX 12404 0 12006 12006 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
WriteX 12405 0 4096 4096 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12409 NT_STATUS_OK
Close 12409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12408 4096 4096 4096 NT_STATUS_OK
ReadX 12408 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
WriteX 12411 0 11991 11991 NT_STATUS_OK
Close 12411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12412 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12412 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12416 NT_STATUS_OK
SET_FILE_INFORMATION 12416 1004 NT_STATUS_OK
Close 12416 NT_STATUS_OK
WriteX 12412 0 4096 4096 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12419 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
ReadX 12419 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
WriteX 12419 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
Close 12395 NT_STATUS_OK
WriteX 12399 0 19054 19054 NT_STATUS_OK
WriteX 12419 0 12288 12288 NT_STATUS_OK
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12422 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 61440 61440 NT_STATUS_OK
ReadX 12426 61440 4096 4096 NT_STATUS_OK
ReadX 12426 65536 61440 61440 NT_STATUS_OK
ReadX 12426 126976 4096 4096 NT_STATUS_OK
ReadX 12426 131072 61440 61440 NT_STATUS_OK
ReadX 12426 192512 4096 4096 NT_STATUS_OK
ReadX 12426 196608 61440 61440 NT_STATUS_OK
ReadX 12426 258048 4096 4096 NT_STATUS_OK
ReadX 12426 262144 61440 61440 NT_STATUS_OK
ReadX 12426 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 61440 61440 NT_STATUS_OK
ReadX 12427 61440 4096 4096 NT_STATUS_OK
ReadX 12427 65536 61440 61440 NT_STATUS_OK
ReadX 12427 126976 4096 4096 NT_STATUS_OK
ReadX 12427 131072 61440 61440 NT_STATUS_OK
ReadX 12427 192512 4096 4096 NT_STATUS_OK
ReadX 12427 196608 61440 61440 NT_STATUS_OK
ReadX 12427 258048 4096 4096 NT_STATUS_OK
ReadX 12427 262144 61440 61440 NT_STATUS_OK
ReadX 12427 323584 4096 4096 NT_STATUS_OK
ReadX 12427 327680 61440 61440 NT_STATUS_OK
ReadX 12427 389120 4096 4096 NT_STATUS_OK
ReadX 12427 393216 61440 61440 NT_STATUS_OK
ReadX 12427 454656 4096 4096 NT_STATUS_OK
ReadX 12427 458752 61440 61440 NT_STATUS_OK
ReadX 12427 520192 4096 4096 NT_STATUS_OK
ReadX 12427 524288 61440 61440 NT_STATUS_OK
ReadX 12427 585728 4096 4096 NT_STATUS_OK
ReadX 12427 589824 61440 61440 NT_STATUS_OK
ReadX 12427 651264 4096 4096 NT_STATUS_OK
ReadX 12427 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 61440 61440 NT_STATUS_OK
ReadX 12428 61440 4096 4096 NT_STATUS_OK
ReadX 12428 65536 61440 61440 NT_STATUS_OK
ReadX 12428 126976 4096 4096 NT_STATUS_OK
ReadX 12428 131072 61440 61440 NT_STATUS_OK
ReadX 12428 192512 4096 4096 NT_STATUS_OK
ReadX 12428 196608 61440 61440 NT_STATUS_OK
ReadX 12428 258048 4096 4096 NT_STATUS_OK
ReadX 12428 262144 61440 61440 NT_STATUS_OK
ReadX 12428 323584 4096 4096 NT_STATUS_OK
ReadX 12428 327680 61440 61440 NT_STATUS_OK
ReadX 12428 389120 4096 4096 NT_STATUS_OK
ReadX 12428 393216 61440 61440 NT_STATUS_OK
ReadX 12428 454656 4096 4096 NT_STATUS_OK
ReadX 12428 458752 61440 61440 NT_STATUS_OK
ReadX 12428 520192 4096 4096 NT_STATUS_OK
ReadX 12428 524288 61440 61440 NT_STATUS_OK
ReadX 12428 585728 4096 4096 NT_STATUS_OK
ReadX 12428 589824 61440 61440 NT_STATUS_OK
ReadX 12428 651264 4096 4096 NT_STATUS_OK
ReadX 12428 655360 61440 61440 NT_STATUS_OK
ReadX 12428 716800 4096 4096 NT_STATUS_OK
ReadX 12428 720896 61440 61440 NT_STATUS_OK
ReadX 12428 782336 4096 4096 NT_STATUS_OK
ReadX 12428 786432 61440 61440 NT_STATUS_OK
ReadX 12428 847872 4096 4096 NT_STATUS_OK
ReadX 12428 851968 61440 61440 NT_STATUS_OK
ReadX 12428 913408 4096 4096 NT_STATUS_OK
ReadX 12428 917504 61440 61440 NT_STATUS_OK
ReadX 12428 978944 4096 4096 NT_STATUS_OK
ReadX 12428 983040 61440 61440 NT_STATUS_OK
ReadX 12428 1044480 4096 4096 NT_STATUS_OK
ReadX 12428 1048576 61440 61440 NT_STATUS_OK
ReadX 12428 1110016 4096 4096 NT_STATUS_OK
ReadX 12428 1114112 61440 61440 NT_STATUS_OK
ReadX 12428 1175552 4096 4096 NT_STATUS_OK
ReadX 12428 1179648 61440 61440 NT_STATUS_OK
ReadX 12428 1241088 4096 4096 NT_STATUS_OK
ReadX 12428 1245184 61440 61440 NT_STATUS_OK
ReadX 12428 1306624 4096 4096 NT_STATUS_OK
ReadX 12428 1310720 61440 61440 NT_STATUS_OK
ReadX 12428 1372160 4096 4096 NT_STATUS_OK
ReadX 12428 1376256 61440 61440 NT_STATUS_OK
ReadX 12428 1437696 4096 4096 NT_STATUS_OK
ReadX 12428 1441792 61440 61440 NT_STATUS_OK
ReadX 12428 1503232 4096 4096 NT_STATUS_OK
ReadX 12428 1507328 61440 61440 NT_STATUS_OK
ReadX 12428 1568768 4096 4096 NT_STATUS_OK
ReadX 12428 1572864 61440 61440 NT_STATUS_OK
ReadX 12428 1634304 4096 4096 NT_STATUS_OK
ReadX 12428 1638400 61440 61440 NT_STATUS_OK
ReadX 12428 1699840 4096 4096 NT_STATUS_OK
ReadX 12428 1703936 61440 61440 NT_STATUS_OK
ReadX 12428 1765376 4096 4096 NT_STATUS_OK
ReadX 12428 1769472 61440 61440 NT_STATUS_OK
ReadX 12428 1830912 4096 4096 NT_STATUS_OK
ReadX 12428 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12431 NT_STATUS_OK
ReadX 12431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12435 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 1004 NT_STATUS_OK
WriteX 12435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 491 491 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12435 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12441 NT_STATUS_OK
WriteX 12441 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12441 258 NT_STATUS_OK
WriteX 12441 0 543 543 NT_STATUS_OK
Close 12441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Close 12432 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12455 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 1004 NT_STATUS_OK
WriteX 12455 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 2048 2048 NT_STATUS_OK
Close 12455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
Flush 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12461 NT_STATUS_OK
WriteX 12461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12461 258 NT_STATUS_OK
WriteX 12461 0 2048 2048 NT_STATUS_OK
Close 12461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12467 NT_STATUS_OK
WriteX 12467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12467 258 NT_STATUS_OK
WriteX 12467 0 2048 2048 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 2048 2048 NT_STATUS_OK
ReadX 12446 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12462 0 4096 4096 NT_STATUS_OK
WriteX 12446 0 8192 8192 NT_STATUS_OK
WriteX 12447 0 4096 4096 NT_STATUS_OK
WriteX 12448 0 4096 4096 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12471 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12485 NT_STATUS_OK
ReadX 12485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12492 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
WriteX 12492 0 2048 2048 NT_STATUS_OK
Close 12492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12493 NT_STATUS_OK
ReadX 12493 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12500 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 1004 NT_STATUS_OK
WriteX 12500 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 258 NT_STATUS_OK
WriteX 12500 0 2048 2048 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
Flush 12493 NT_STATUS_OK
WriteX 12501 0 4096 4096 NT_STATUS_OK
Flush 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12501 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12495 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12503 NT_STATUS_OK
WriteX 12503 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 258 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12505 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12506 NT_STATUS_OK
WriteX 12506 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 258 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12507 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12484 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12514 NT_STATUS_OK
WriteX 12514 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12514 258 NT_STATUS_OK
WriteX 12514 0 2048 2048 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12529 NT_STATUS_OK
QUERY_FILE_INFORMATION 12529 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12537 NT_STATUS_OK
ReadX 12537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12544 NT_STATUS_OK
Close 12538 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12551 NT_STATUS_OK
QUERY_FILE_INFORMATION 12551 1004 NT_STATUS_OK
WriteX 12551 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12551 258 NT_STATUS_OK
WriteX 12551 0 2048 2048 NT_STATUS_OK
Close 12551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12554 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
WriteX 12563 0 2048 2048 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12572 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 1004 NT_STATUS_OK
WriteX 12572 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 2048 2048 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
Flush 12552 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
Flush 12564 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
Flush 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12554 4096 16384 16384 NT_STATUS_OK
ReadX 12534 4096 16384 16384 NT_STATUS_OK
ReadX 12566 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 2048 2048 NT_STATUS_OK
WriteX 12575 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12576 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12567 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12566 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12578 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12580 NT_STATUS_OK
QUERY_FILE_INFORMATION 12580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12583 4096 16384 16384 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
WriteX 12585 0 4096 4096 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12601 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 8192 8192 NT_STATUS_OK
ReadX 12589 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12603 0 4096 4096 NT_STATUS_OK
ReadX 12603 4096 4096 4096 NT_STATUS_OK
ReadX 12603 8192 4096 4096 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
ReadX 12604 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
WriteX 12585 0 4096 4096 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12609 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 1004 NT_STATUS_OK
WriteX 12609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 258 NT_STATUS_OK
WriteX 12609 0 2048 2048 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 4096 4096 NT_STATUS_OK
ReadX 12612 4096 4096 4096 NT_STATUS_OK
WriteX 12612 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12614 NT_STATUS_OK
ReadX 12614 0 4096 4096 NT_STATUS_OK
ReadX 12614 4096 4096 4096 NT_STATUS_OK
WriteX 12614 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12615 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Close 12596 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12593 NT_STATUS_OK
Close 12594 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12614 NT_STATUS_OK
Close 12603 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12617 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12617 0 4096 4096 NT_STATUS_OK
ReadX 12617 4096 4096 4096 NT_STATUS_OK
ReadX 12617 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
ReadX 12618 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12635 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 1004 NT_STATUS_OK
WriteX 12635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 2048 2048 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
WriteX 12641 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 258 NT_STATUS_OK
WriteX 12641 0 2048 2048 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12642 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12625 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12645 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 61440 4096 4096 NT_STATUS_OK
ReadX 12647 126976 4096 4096 NT_STATUS_OK
WriteX 12647 0 65536 65536 NT_STATUS_OK
WriteX 12647 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 61440 4096 4096 NT_STATUS_OK
ReadX 12648 126976 4096 4096 NT_STATUS_OK
ReadX 12648 192512 4096 4096 NT_STATUS_OK
ReadX 12648 258048 4096 4096 NT_STATUS_OK
WriteX 12648 0 65536 65536 NT_STATUS_OK
WriteX 12648 65536 65536 65536 NT_STATUS_OK
WriteX 12648 131072 65536 65536 NT_STATUS_OK
WriteX 12648 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 61440 4096 4096 NT_STATUS_OK
ReadX 12649 126976 4096 4096 NT_STATUS_OK
ReadX 12649 192512 4096 4096 NT_STATUS_OK
ReadX 12649 258048 4096 4096 NT_STATUS_OK
ReadX 12649 323584 4096 4096 NT_STATUS_OK
ReadX 12649 389120 4096 4096 NT_STATUS_OK
ReadX 12649 454656 4096 4096 NT_STATUS_OK
ReadX 12649 520192 4096 4096 NT_STATUS_OK
WriteX 12649 0 65536 65536 NT_STATUS_OK
WriteX 12649 65536 65536 65536 NT_STATUS_OK
WriteX 12649 131072 65536 65536 NT_STATUS_OK
WriteX 12649 196608 65536 65536 NT_STATUS_OK
WriteX 12649 262144 65536 65536 NT_STATUS_OK
WriteX 12649 327680 65536 65536 NT_STATUS_OK
WriteX 12649 393216 65536 65536 NT_STATUS_OK
WriteX 12649 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12650 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12650 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12650 8192 4096 4096 NT_STATUS_OK
ReadX 12650 12288 4096 4096 NT_STATUS_OK
ReadX 12650 16384 4096 4096 NT_STATUS_OK
ReadX 12650 20480 4096 4096 NT_STATUS_OK
ReadX 12650 24576 4096 4096 NT_STATUS_OK
ReadX 12650 28672 4096 4096 NT_STATUS_OK
ReadX 12650 32768 4096 4096 NT_STATUS_OK
ReadX 12650 36864 4096 4096 NT_STATUS_OK
ReadX 12650 40960 4096 4096 NT_STATUS_OK
ReadX 12650 45056 4096 4096 NT_STATUS_OK
ReadX 12650 49152 4096 4096 NT_STATUS_OK
ReadX 12650 53248 4096 4096 NT_STATUS_OK
ReadX 12650 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12650 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12653 NT_STATUS_OK
WriteX 12653 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12653 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 57088 57088 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
Flush 12653 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12654 1004 NT_STATUS_OK
Close 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
Close 12653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12657 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12658 NT_STATUS_OK
WriteX 12658 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 51456 51456 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
Flush 12658 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12662 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 53077 53077 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12668 NT_STATUS_OK
WriteX 12668 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 0 65536 65536 NT_STATUS_OK
WriteX 12668 65536 1856 1856 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Flush 12668 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12677 NT_STATUS_OK
WriteX 12677 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 7983 7983 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12682 NT_STATUS_OK
WriteX 12682 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12682 258 NT_STATUS_OK
WriteX 12682 0 65536 65536 NT_STATUS_OK
WriteX 12682 65536 65536 65536 NT_STATUS_OK
WriteX 12682 131072 65536 65536 NT_STATUS_OK
WriteX 12682 196608 65536 65536 NT_STATUS_OK
WriteX 12682 262144 65536 65536 NT_STATUS_OK
WriteX 12682 327680 65536 65536 NT_STATUS_OK
WriteX 12682 393216 65536 65536 NT_STATUS_OK
WriteX 12682 458752 46731 46731 NT_STATUS_OK
Close 12682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12683 NT_STATUS_OK
WriteX 12683 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12683 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12672 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
WriteX 12683 0 65536 65536 NT_STATUS_OK
WriteX 12683 65536 22848 22848 NT_STATUS_OK
WriteX 12683 0 4096 4096 NT_STATUS_OK
Flush 12683 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
WriteX 12683 0 4096 4096 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12687 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12688 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12688 1004 NT_STATUS_OK
ReadX 12688 8192 4096 4096 NT_STATUS_OK
ReadX 12688 12288 4096 4096 NT_STATUS_OK
ReadX 12688 16384 4096 4096 NT_STATUS_OK
ReadX 12688 20480 4096 4096 NT_STATUS_OK
ReadX 12688 24576 4096 4096 NT_STATUS_OK
ReadX 12688 28672 4096 4096 NT_STATUS_OK
ReadX 12688 32768 4096 4096 NT_STATUS_OK
ReadX 12688 36864 4096 4096 NT_STATUS_OK
ReadX 12688 40960 4096 4096 NT_STATUS_OK
ReadX 12688 45056 4096 4096 NT_STATUS_OK
ReadX 12688 49152 4096 4096 NT_STATUS_OK
ReadX 12688 53248 4096 4096 NT_STATUS_OK
ReadX 12688 57344 4096 4096 NT_STATUS_OK
ReadX 12688 61440 4096 4096 NT_STATUS_OK
ReadX 12688 65536 4096 4096 NT_STATUS_OK
ReadX 12688 69632 4096 4096 NT_STATUS_OK
ReadX 12688 73728 4096 4096 NT_STATUS_OK
ReadX 12688 77824 4096 4096 NT_STATUS_OK
ReadX 12688 81920 4096 4096 NT_STATUS_OK
ReadX 12688 86016 4096 4096 NT_STATUS_OK
ReadX 12688 90112 4096 4096 NT_STATUS_OK
ReadX 12688 94208 4096 4096 NT_STATUS_OK
ReadX 12688 98304 4096 4096 NT_STATUS_OK
ReadX 12688 102400 4096 4096 NT_STATUS_OK
ReadX 12688 106496 4096 4096 NT_STATUS_OK
ReadX 12688 110592 4096 4096 NT_STATUS_OK
ReadX 12688 114688 4096 4096 NT_STATUS_OK
ReadX 12688 118784 4096 4096 NT_STATUS_OK
ReadX 12688 122880 4096 4096 NT_STATUS_OK
ReadX 12688 126976 4096 4096 NT_STATUS_OK
ReadX 12688 131072 4096 4096 NT_STATUS_OK
ReadX 12688 135168 4096 4096 NT_STATUS_OK
ReadX 12688 139264 4096 4096 NT_STATUS_OK
ReadX 12688 143360 4096 4096 NT_STATUS_OK
ReadX 12688 147456 4096 4096 NT_STATUS_OK
ReadX 12688 151552 4096 4096 NT_STATUS_OK
ReadX 12688 155648 4096 4096 NT_STATUS_OK
ReadX 12688 159744 4096 4096 NT_STATUS_OK
ReadX 12688 163840 4096 4096 NT_STATUS_OK
ReadX 12688 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12688 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12689 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12691 NT_STATUS_OK
WriteX 12691 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12692 NT_STATUS_OK
SET_FILE_INFORMATION 12692 1004 NT_STATUS_OK
Close 12692 NT_STATUS_OK
WriteX 12691 0 42388 42388 NT_STATUS_OK
Close 12691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
ReadX 12695 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12696 NT_STATUS_OK
WriteX 12696 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12696 258 NT_STATUS_OK
SET_FILE_INFORMATION 12696 1004 NT_STATUS_OK
WriteX 12696 0 42652 42652 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
ReadX 12700 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12705 NT_STATUS_OK
WriteX 12705 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12705 258 NT_STATUS_OK
WriteX 12705 0 65536 65536 NT_STATUS_OK
WriteX 12705 65536 49 49 NT_STATUS_OK
Close 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 61440 61440 NT_STATUS_OK
ReadX 12706 61440 4096 4096 NT_STATUS_OK
ReadX 12706 65536 61440 61440 NT_STATUS_OK
ReadX 12706 126976 4096 4096 NT_STATUS_OK
ReadX 12706 131072 61440 61440 NT_STATUS_OK
ReadX 12706 192512 4096 4096 NT_STATUS_OK
ReadX 12706 196608 61440 61440 NT_STATUS_OK
ReadX 12706 258048 4096 4096 NT_STATUS_OK
ReadX 12706 262144 61440 61440 NT_STATUS_OK
ReadX 12706 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 61440 61440 NT_STATUS_OK
ReadX 12707 61440 4096 4096 NT_STATUS_OK
ReadX 12707 65536 61440 61440 NT_STATUS_OK
ReadX 12707 126976 4096 4096 NT_STATUS_OK
ReadX 12707 131072 61440 61440 NT_STATUS_OK
ReadX 12707 192512 4096 4096 NT_STATUS_OK
ReadX 12707 196608 61440 61440 NT_STATUS_OK
ReadX 12707 258048 4096 4096 NT_STATUS_OK
ReadX 12707 262144 61440 61440 NT_STATUS_OK
ReadX 12707 323584 4096 4096 NT_STATUS_OK
ReadX 12707 327680 61440 61440 NT_STATUS_OK
ReadX 12707 389120 4096 4096 NT_STATUS_OK
ReadX 12707 393216 61440 61440 NT_STATUS_OK
ReadX 12707 454656 4096 4096 NT_STATUS_OK
ReadX 12707 458752 61440 61440 NT_STATUS_OK
ReadX 12707 520192 4096 4096 NT_STATUS_OK
ReadX 12707 524288 61440 61440 NT_STATUS_OK
ReadX 12707 585728 4096 4096 NT_STATUS_OK
ReadX 12707 589824 61440 61440 NT_STATUS_OK
ReadX 12707 651264 4096 4096 NT_STATUS_OK
ReadX 12707 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 61440 61440 NT_STATUS_OK
ReadX 12708 61440 4096 4096 NT_STATUS_OK
ReadX 12708 65536 61440 61440 NT_STATUS_OK
ReadX 12708 126976 4096 4096 NT_STATUS_OK
ReadX 12708 131072 61440 61440 NT_STATUS_OK
ReadX 12708 192512 4096 4096 NT_STATUS_OK
ReadX 12708 196608 61440 61440 NT_STATUS_OK
ReadX 12708 258048 4096 4096 NT_STATUS_OK
ReadX 12708 262144 61440 61440 NT_STATUS_OK
ReadX 12708 323584 4096 4096 NT_STATUS_OK
ReadX 12708 327680 61440 61440 NT_STATUS_OK
ReadX 12708 389120 4096 4096 NT_STATUS_OK
ReadX 12708 393216 61440 61440 NT_STATUS_OK
ReadX 12708 454656 4096 4096 NT_STATUS_OK
ReadX 12708 458752 61440 61440 NT_STATUS_OK
ReadX 12708 520192 4096 4096 NT_STATUS_OK
ReadX 12708 524288 61440 61440 NT_STATUS_OK
ReadX 12708 585728 4096 4096 NT_STATUS_OK
ReadX 12708 589824 61440 61440 NT_STATUS_OK
ReadX 12708 651264 4096 4096 NT_STATUS_OK
ReadX 12708 655360 61440 61440 NT_STATUS_OK
ReadX 12708 716800 4096 4096 NT_STATUS_OK
ReadX 12708 720896 61440 61440 NT_STATUS_OK
ReadX 12708 782336 4096 4096 NT_STATUS_OK
ReadX 12708 786432 61440 61440 NT_STATUS_OK
ReadX 12708 847872 4096 4096 NT_STATUS_OK
ReadX 12708 851968 61440 61440 NT_STATUS_OK
ReadX 12708 913408 4096 4096 NT_STATUS_OK
ReadX 12708 917504 61440 61440 NT_STATUS_OK
ReadX 12708 978944 4096 4096 NT_STATUS_OK
ReadX 12708 983040 61440 61440 NT_STATUS_OK
ReadX 12708 1044480 4096 4096 NT_STATUS_OK
ReadX 12708 1048576 61440 61440 NT_STATUS_OK
ReadX 12708 1110016 4096 4096 NT_STATUS_OK
ReadX 12708 1114112 61440 61440 NT_STATUS_OK
ReadX 12708 1175552 4096 4096 NT_STATUS_OK
ReadX 12708 1179648 61440 61440 NT_STATUS_OK
ReadX 12708 1241088 4096 4096 NT_STATUS_OK
ReadX 12708 1245184 61440 61440 NT_STATUS_OK
ReadX 12708 1306624 4096 4096 NT_STATUS_OK
ReadX 12708 1310720 61440 61440 NT_STATUS_OK
ReadX 12708 1372160 4096 4096 NT_STATUS_OK
ReadX 12708 1376256 61440 61440 NT_STATUS_OK
ReadX 12708 1437696 4096 4096 NT_STATUS_OK
ReadX 12708 1441792 61440 61440 NT_STATUS_OK
ReadX 12708 1503232 4096 4096 NT_STATUS_OK
ReadX 12708 1507328 61440 61440 NT_STATUS_OK
ReadX 12708 1568768 4096 4096 NT_STATUS_OK
ReadX 12708 1572864 61440 61440 NT_STATUS_OK
ReadX 12708 1634304 4096 4096 NT_STATUS_OK
ReadX 12708 1638400 61440 61440 NT_STATUS_OK
ReadX 12708 1699840 4096 4096 NT_STATUS_OK
ReadX 12708 1703936 61440 61440 NT_STATUS_OK
ReadX 12708 1765376 4096 4096 NT_STATUS_OK
ReadX 12708 1769472 61440 61440 NT_STATUS_OK
ReadX 12708 1830912 4096 4096 NT_STATUS_OK
ReadX 12708 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12710 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
ReadX 12710 2156 24 24 NT_STATUS_OK
ReadX 12710 2139 276 276 NT_STATUS_OK
ReadX 12710 2136 14 14 NT_STATUS_OK
ReadX 12710 2136 7 7 NT_STATUS_OK
ReadX 12710 2138 12 12 NT_STATUS_OK
ReadX 12710 2137 8 8 NT_STATUS_OK
ReadX 12710 2135 15 15 NT_STATUS_OK
ReadX 12710 0 16 16 NT_STATUS_OK
ReadX 12710 16 2048 2048 NT_STATUS_OK
ReadX 12710 2064 2048 2048 NT_STATUS_OK
ReadX 12710 257 2048 2048 NT_STATUS_OK
ReadX 12710 385 2048 2048 NT_STATUS_OK
ReadX 12710 513 2048 2048 NT_STATUS_OK
ReadX 12710 641 2048 2048 NT_STATUS_OK
ReadX 12710 769 2048 2048 NT_STATUS_OK
ReadX 12710 897 2048 2048 NT_STATUS_OK
ReadX 12710 1025 2048 2048 NT_STATUS_OK
ReadX 12710 1153 2048 2048 NT_STATUS_OK
ReadX 12710 1281 2048 2048 NT_STATUS_OK
ReadX 12710 1409 2048 2048 NT_STATUS_OK
ReadX 12710 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12715 NT_STATUS_OK
WriteX 12715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12715 258 NT_STATUS_OK
WriteX 12715 0 10575 10575 NT_STATUS_OK
Flush 12715 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12720 NT_STATUS_OK
LockX 12720 2147483538 1 NT_STATUS_OK
UnlockX 12720 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1005 NT_STATUS_OK
ReadX 12720 0 512 512 NT_STATUS_OK
ReadX 12720 512 512 512 NT_STATUS_OK
ReadX 12720 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1004 NT_STATUS_OK
Close 12720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12721 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1005 NT_STATUS_OK
ReadX 12721 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12722 NT_STATUS_OK
LockX 12722 2147483538 1 NT_STATUS_OK
UnlockX 12722 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 1005 NT_STATUS_OK
ReadX 12722 0 512 512 NT_STATUS_OK
ReadX 12722 512 512 512 NT_STATUS_OK
ReadX 12722 1024 512 512 NT_STATUS_OK
ReadX 12722 288 20 20 NT_STATUS_OK
ReadX 12722 308 2084 2084 NT_STATUS_OK
ReadX 12722 388 2084 2084 NT_STATUS_OK
ReadX 12722 388 2084 2084 NT_STATUS_OK
ReadX 12709 2157 1386 1386 NT_STATUS_OK
ReadX 12722 2472 399 399 NT_STATUS_OK
ReadX 12722 3072 1536 1536 NT_STATUS_OK
ReadX 12722 544 149 149 NT_STATUS_OK
ReadX 12722 693 485 485 NT_STATUS_OK
Close 12722 NT_STATUS_OK
ReadX 12709 2157 4096 4096 NT_STATUS_OK
ReadX 12709 6253 4096 4096 NT_STATUS_OK
ReadX 12709 10349 4096 4096 NT_STATUS_OK
ReadX 12709 14445 4096 4096 NT_STATUS_OK
ReadX 12709 18541 4096 4096 NT_STATUS_OK
ReadX 12709 22637 256 256 NT_STATUS_OK
ReadX 12709 22893 4096 4096 NT_STATUS_OK
ReadX 12709 26989 4096 4096 NT_STATUS_OK
ReadX 12709 31085 4096 4096 NT_STATUS_OK
ReadX 12709 35181 4096 4096 NT_STATUS_OK
ReadX 12709 39277 4096 4096 NT_STATUS_OK
ReadX 12709 43373 4096 4096 NT_STATUS_OK
ReadX 12709 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12709 2157 1024 1024 NT_STATUS_OK
ReadX 12709 1667 4688 4688 NT_STATUS_OK
ReadX 12709 6355 3516 3516 NT_STATUS_OK
ReadX 12709 9871 16384 16384 NT_STATUS_OK
ReadX 12709 26255 3771 3771 NT_STATUS_OK
ReadX 12709 30026 2048 2048 NT_STATUS_OK
ReadX 12709 32074 1024 1024 NT_STATUS_OK
ReadX 12709 33098 6652 6652 NT_STATUS_OK
ReadX 12709 39750 16384 16384 NT_STATUS_OK
ReadX 12709 56134 10496 10496 NT_STATUS_OK
ReadX 12709 66630 1784 1784 NT_STATUS_OK
ReadX 12709 68414 90 90 NT_STATUS_OK
ReadX 12709 68504 273 273 NT_STATUS_OK
ReadX 12709 68777 1600 1600 NT_STATUS_OK
ReadX 12709 70377 640 640 NT_STATUS_OK
ReadX 12709 71017 1280 1280 NT_STATUS_OK
ReadX 12709 72297 8464 8464 NT_STATUS_OK
ReadX 12709 80761 158 158 NT_STATUS_OK
ReadX 12709 80919 912 912 NT_STATUS_OK
ReadX 12709 81831 1980 1980 NT_STATUS_OK
ReadX 12709 83811 2256 2256 NT_STATUS_OK
ReadX 12709 86067 400 400 NT_STATUS_OK
ReadX 12709 86467 252 252 NT_STATUS_OK
ReadX 12709 86719 42 42 NT_STATUS_OK
ReadX 12709 86761 725 725 NT_STATUS_OK
ReadX 12709 2009 512 512 NT_STATUS_OK
ReadX 12709 3895 9 9 NT_STATUS_OK
ReadX 12709 3781 46 46 NT_STATUS_OK
ReadX 12709 4059 92 92 NT_STATUS_OK
ReadX 12709 3781 92 92 NT_STATUS_OK
ReadX 12709 3986 184 184 NT_STATUS_OK
ReadX 12709 3987 16384 16384 NT_STATUS_OK
ReadX 12709 3902 16384 16384 NT_STATUS_OK
ReadX 12709 3781 10240 10240 NT_STATUS_OK
ReadX 12709 3821 16384 16384 NT_STATUS_OK
ReadX 12709 3891 935 935 NT_STATUS_OK
ReadX 12709 4060 10240 10240 NT_STATUS_OK
ReadX 12709 4059 184 184 NT_STATUS_OK
ReadX 12709 256 184 184 NT_STATUS_OK
ReadX 12709 256 1026 1026 NT_STATUS_OK
ReadX 12709 3901 326 326 NT_STATUS_OK
ReadX 12709 3899 652 652 NT_STATUS_OK
ReadX 12709 256 2 2 NT_STATUS_OK
ReadX 12709 258 4948 4948 NT_STATUS_OK
Close 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12724 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12727 NT_STATUS_OK
WriteX 12727 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12727 258 NT_STATUS_OK
WriteX 12727 0 65536 65536 NT_STATUS_OK
WriteX 12727 65536 65536 65536 NT_STATUS_OK
WriteX 12727 131072 65536 65536 NT_STATUS_OK
WriteX 12727 196608 65536 65536 NT_STATUS_OK
WriteX 12727 262144 65536 65536 NT_STATUS_OK
WriteX 12727 327680 65536 65536 NT_STATUS_OK
WriteX 12727 393216 65536 65536 NT_STATUS_OK
WriteX 12727 458752 65536 65536 NT_STATUS_OK
WriteX 12727 524288 65536 65536 NT_STATUS_OK
WriteX 12727 589824 35257 35257 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12732 NT_STATUS_OK
WriteX 12732 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12732 258 NT_STATUS_OK
WriteX 12732 0 65536 65536 NT_STATUS_OK
WriteX 12732 65536 65536 65536 NT_STATUS_OK
WriteX 12732 131072 65536 65536 NT_STATUS_OK
WriteX 12732 196608 65536 65536 NT_STATUS_OK
WriteX 12732 262144 65536 65536 NT_STATUS_OK
WriteX 12732 327680 65536 65536 NT_STATUS_OK
WriteX 12732 393216 65536 65536 NT_STATUS_OK
WriteX 12732 458752 65536 65536 NT_STATUS_OK
WriteX 12732 524288 65536 65536 NT_STATUS_OK
WriteX 12732 589824 57598 57598 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12734 NT_STATUS_OK
WriteX 12734 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 258 NT_STATUS_OK
WriteX 12734 0 12543 12543 NT_STATUS_OK
Flush 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12740 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
ReadX 12740 1938 24 24 NT_STATUS_OK
ReadX 12740 1920 276 276 NT_STATUS_OK
ReadX 12740 1918 14 14 NT_STATUS_OK
ReadX 12740 1918 7 7 NT_STATUS_OK
ReadX 12740 1919 12 12 NT_STATUS_OK
ReadX 12740 1919 8 8 NT_STATUS_OK
ReadX 12740 1917 15 15 NT_STATUS_OK
ReadX 12740 0 16 16 NT_STATUS_OK
ReadX 12740 16 2048 2048 NT_STATUS_OK
ReadX 12740 2064 2048 2048 NT_STATUS_OK
ReadX 12740 257 2048 2048 NT_STATUS_OK
ReadX 12740 385 2048 2048 NT_STATUS_OK
ReadX 12740 513 2048 2048 NT_STATUS_OK
ReadX 12740 641 2048 2048 NT_STATUS_OK
ReadX 12740 769 2048 2048 NT_STATUS_OK
ReadX 12740 897 2048 2048 NT_STATUS_OK
ReadX 12740 1025 2048 2048 NT_STATUS_OK
ReadX 12740 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12745 NT_STATUS_OK
WriteX 12745 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12745 258 NT_STATUS_OK
WriteX 12745 0 11588 11588 NT_STATUS_OK
Flush 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12748 NT_STATUS_OK
ReadX 12748 0 4096 4096 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12750 NT_STATUS_OK
WriteX 12750 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12750 258 NT_STATUS_OK
WriteX 12750 0 11615 11615 NT_STATUS_OK
Flush 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12759 NT_STATUS_OK
WriteX 12759 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12759 258 NT_STATUS_OK
WriteX 12759 0 65536 65536 NT_STATUS_OK
WriteX 12759 65536 16050 16050 NT_STATUS_OK
Close 12759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 1939 64 64 NT_STATUS_OK
ReadX 12739 128 248 248 NT_STATUS_OK
ReadX 12739 128 568 568 NT_STATUS_OK
ReadX 12739 3872 1536 1536 NT_STATUS_OK
ReadX 12739 3456 2560 2560 NT_STATUS_OK
ReadX 12739 3136 512 512 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
ReadX 12739 3264 3072 3072 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 3616 4096 4096 NT_STATUS_OK
ReadX 12739 1939 64 64 NT_STATUS_OK
ReadX 12739 128 248 248 NT_STATUS_OK
ReadX 12739 128 608 608 NT_STATUS_OK
ReadX 12739 2858 1024 1024 NT_STATUS_OK
ReadX 12739 2810 4096 4096 NT_STATUS_OK
ReadX 12739 2826 4096 4096 NT_STATUS_OK
ReadX 12739 2580 2048 2048 NT_STATUS_OK
ReadX 12739 2800 2560 2560 NT_STATUS_OK
ReadX 12739 2100 4096 4096 NT_STATUS_OK
ReadX 12739 2084 4096 4096 NT_STATUS_OK
ReadX 12739 868 4096 4096 NT_STATUS_OK
ReadX 12739 2324 4096 4096 NT_STATUS_OK
ReadX 12739 884 4096 4096 NT_STATUS_OK
ReadX 12739 2604 1024 1024 NT_STATUS_OK
ReadX 12739 580 4096 4096 NT_STATUS_OK
ReadX 12739 596 4096 4096 NT_STATUS_OK
ReadX 12739 2752 4096 4096 NT_STATUS_OK
ReadX 12739 2842 1024 1024 NT_STATUS_OK
ReadX 12739 660 4096 4096 NT_STATUS_OK
ReadX 12739 2720 4096 4096 NT_STATUS_OK
ReadX 12739 2736 4096 4096 NT_STATUS_OK
ReadX 12739 628 4096 4096 NT_STATUS_OK
ReadX 12739 2704 4096 4096 NT_STATUS_OK
ReadX 12739 1556 4096 4096 NT_STATUS_OK
ReadX 12739 576 4096 4096 NT_STATUS_OK
ReadX 12739 3168 1536 1536 NT_STATUS_OK
ReadX 12739 832 4096 4096 NT_STATUS_OK
ReadX 12739 1088 4096 4096 NT_STATUS_OK
ReadX 12739 1344 4096 4096 NT_STATUS_OK
ReadX 12739 1600 4096 4096 NT_STATUS_OK
ReadX 12739 1856 4096 4096 NT_STATUS_OK
ReadX 12739 2112 4096 4096 NT_STATUS_OK
ReadX 12739 1892 4096 4096 NT_STATUS_OK
ReadX 12739 820 4096 4096 NT_STATUS_OK
ReadX 12739 788 4096 4096 NT_STATUS_OK
ReadX 12739 1604 4096 4096 NT_STATUS_OK
ReadX 12739 3648 4096 4096 NT_STATUS_OK
ReadX 12739 2608 4096 4096 NT_STATUS_OK
ReadX 12739 548 4096 4096 NT_STATUS_OK
ReadX 12739 740 4096 4096 NT_STATUS_OK
ReadX 12739 1344 4096 4096 NT_STATUS_OK
ReadX 12739 3392 4096 4096 NT_STATUS_OK
ReadX 12739 3904 4096 4096 NT_STATUS_OK
ReadX 12739 644 4096 4096 NT_STATUS_OK
ReadX 12739 676 4096 4096 NT_STATUS_OK
ReadX 12739 2688 4096 4096 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 900 4096 4096 NT_STATUS_OK
ReadX 12739 1908 4096 4096 NT_STATUS_OK
ReadX 12739 852 4096 4096 NT_STATUS_OK
ReadX 12739 724 4096 4096 NT_STATUS_OK
ReadX 12739 2292 4096 4096 NT_STATUS_OK
ReadX 12739 612 4096 4096 NT_STATUS_OK
ReadX 12739 388 4096 4096 NT_STATUS_OK
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 500 4096 4096 NT_STATUS_OK
ReadX 12739 356 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 576 4096 4096 NT_STATUS_OK
ReadX 12739 340 4096 4096 NT_STATUS_OK
ReadX 12739 420 4096 4096 NT_STATUS_OK
ReadX 12739 1600 4096 4096 NT_STATUS_OK
ReadX 12739 404 4096 4096 NT_STATUS_OK
ReadX 12739 1428 4096 4096 NT_STATUS_OK
ReadX 12739 2656 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 452 4096 4096 NT_STATUS_OK
ReadX 12739 692 4096 4096 NT_STATUS_OK
ReadX 12739 564 4096 4096 NT_STATUS_OK
ReadX 12739 372 4096 4096 NT_STATUS_OK
ReadX 12739 468 4096 4096 NT_STATUS_OK
ReadX 12739 484 4096 4096 NT_STATUS_OK
ReadX 12739 1088 4096 4096 NT_STATUS_OK
ReadX 12739 1924 4096 4096 NT_STATUS_OK
ReadX 12739 2768 4096 4096 NT_STATUS_OK
ReadX 12739 832 4096 4096 NT_STATUS_OK
ReadX 12739 836 4096 4096 NT_STATUS_OK
ReadX 12739 1856 4096 4096 NT_STATUS_OK
ReadX 12739 2640 4096 4096 NT_STATUS_OK
ReadX 12739 436 4096 4096 NT_STATUS_OK
ReadX 12739 1828 4096 4096 NT_STATUS_OK
ReadX 12739 804 4096 4096 NT_STATUS_OK
ReadX 12739 1860 4096 4096 NT_STATUS_OK
ReadX 12739 1812 4096 4096 NT_STATUS_OK
ReadX 12739 756 4096 4096 NT_STATUS_OK
ReadX 12739 1636 4096 4096 NT_STATUS_OK
ReadX 12739 772 4096 4096 NT_STATUS_OK
ReadX 12739 2036 4096 4096 NT_STATUS_OK
ReadX 12739 1220 4096 4096 NT_STATUS_OK
ReadX 12739 1652 4096 4096 NT_STATUS_OK
ReadX 12739 2588 4096 4096 NT_STATUS_OK
ReadX 12739 916 4096 4096 NT_STATUS_OK
ReadX 12739 260 4096 4096 NT_STATUS_OK
ReadX 12739 932 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 308 4096 4096 NT_STATUS_OK
ReadX 12739 292 4096 4096 NT_STATUS_OK
ReadX 12739 1140 4096 4096 NT_STATUS_OK
ReadX 12739 276 4096 4096 NT_STATUS_OK
ReadX 12739 2020 4096 4096 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
ReadX 12739 516 4096 4096 NT_STATUS_OK
ReadX 12739 1844 4096 4096 NT_STATUS_OK
ReadX 12739 1124 4096 4096 NT_STATUS_OK
ReadX 12739 3136 4096 4096 NT_STATUS_OK
ReadX 12739 324 4096 4096 NT_STATUS_OK
ReadX 12739 1156 4096 4096 NT_STATUS_OK
ReadX 12739 1172 4096 4096 NT_STATUS_OK
ReadX 12739 2112 4096 4096 NT_STATUS_OK
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 964 4096 4096 NT_STATUS_OK
ReadX 12739 980 4096 4096 NT_STATUS_OK
ReadX 12739 1012 4096 4096 NT_STATUS_OK
ReadX 12739 532 4096 4096 NT_STATUS_OK
ReadX 12739 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12739 1620 4096 4096 NT_STATUS_OK
ReadX 12739 1604 4096 4096 NT_STATUS_OK
ReadX 12739 2116 4096 4096 NT_STATUS_OK
ReadX 12739 2132 4096 4096 NT_STATUS_OK
ReadX 12739 2148 4096 4096 NT_STATUS_OK
ReadX 12739 2276 4096 4096 NT_STATUS_OK
ReadX 12739 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 1004 NT_STATUS_OK
Close 12719 NT_STATUS_OK
WriteX 12764 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1004 NT_STATUS_OK
Close 12721 NT_STATUS_OK
WriteX 12764 0 65536 65536 NT_STATUS_OK
WriteX 12764 65536 64850 64850 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12766 NT_STATUS_OK
WriteX 12766 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12766 258 NT_STATUS_OK
ReadX 12739 2068 4096 4096 NT_STATUS_OK
ReadX 12739 1588 4096 4096 NT_STATUS_OK
ReadX 12739 1572 4096 4096 NT_STATUS_OK
WriteX 12766 0 18630 18630 NT_STATUS_OK
Flush 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12739 612 4096 4096 NT_STATUS_OK
ReadX 12739 564 4096 4096 NT_STATUS_OK
ReadX 12739 1876 4096 4096 NT_STATUS_OK
ReadX 12739 628 4096 4096 NT_STATUS_OK
ReadX 12739 740 4096 4096 NT_STATUS_OK
ReadX 12739 724 4096 4096 NT_STATUS_OK
ReadX 12739 644 4096 4096 NT_STATUS_OK
ReadX 12739 2324 4096 4096 NT_STATUS_OK
ReadX 12739 660 4096 4096 NT_STATUS_OK
ReadX 12739 852 4096 4096 NT_STATUS_OK
ReadX 12739 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 580 4096 4096 NT_STATUS_OK
ReadX 12739 3136 512 512 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
Close 12739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 61440 4096 4096 NT_STATUS_OK
ReadX 12771 126976 4096 4096 NT_STATUS_OK
WriteX 12771 0 65536 65536 NT_STATUS_OK
WriteX 12771 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 61440 4096 4096 NT_STATUS_OK
ReadX 12772 126976 4096 4096 NT_STATUS_OK
ReadX 12772 192512 4096 4096 NT_STATUS_OK
ReadX 12772 258048 4096 4096 NT_STATUS_OK
WriteX 12772 0 65536 65536 NT_STATUS_OK
WriteX 12772 65536 65536 65536 NT_STATUS_OK
WriteX 12772 131072 65536 65536 NT_STATUS_OK
WriteX 12772 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 61440 4096 4096 NT_STATUS_OK
ReadX 12773 126976 4096 4096 NT_STATUS_OK
ReadX 12773 192512 4096 4096 NT_STATUS_OK
ReadX 12773 258048 4096 4096 NT_STATUS_OK
ReadX 12773 323584 4096 4096 NT_STATUS_OK
ReadX 12773 389120 4096 4096 NT_STATUS_OK
ReadX 12773 454656 4096 4096 NT_STATUS_OK
ReadX 12773 520192 4096 4096 NT_STATUS_OK
WriteX 12773 0 65536 65536 NT_STATUS_OK
WriteX 12773 65536 65536 65536 NT_STATUS_OK
WriteX 12773 131072 65536 65536 NT_STATUS_OK
WriteX 12773 196608 65536 65536 NT_STATUS_OK
WriteX 12773 262144 65536 65536 NT_STATUS_OK
WriteX 12773 327680 65536 65536 NT_STATUS_OK
WriteX 12773 393216 65536 65536 NT_STATUS_OK
WriteX 12773 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12775 NT_STATUS_OK
Close 12775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12776 NT_STATUS_OK
WriteX 12776 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12774 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12781 NT_STATUS_OK
WriteX 12781 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12781 258 NT_STATUS_OK
WriteX 12781 0 62591 62591 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12786 NT_STATUS_OK
WriteX 12786 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12786 258 NT_STATUS_OK
WriteX 12786 0 10845 10845 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12788 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12791 NT_STATUS_OK
WriteX 12791 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12791 258 NT_STATUS_OK
WriteX 12791 0 30118 30118 NT_STATUS_OK
Close 12791 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12776 0 64 64 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 61440 61440 NT_STATUS_OK
ReadX 12793 61440 4096 4096 NT_STATUS_OK
ReadX 12793 65536 61440 61440 NT_STATUS_OK
ReadX 12793 126976 4096 4096 NT_STATUS_OK
ReadX 12793 131072 61440 61440 NT_STATUS_OK
ReadX 12793 192512 4096 4096 NT_STATUS_OK
ReadX 12793 196608 61440 61440 NT_STATUS_OK
ReadX 12793 258048 4096 4096 NT_STATUS_OK
ReadX 12793 262144 61440 61440 NT_STATUS_OK
ReadX 12793 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 61440 61440 NT_STATUS_OK
ReadX 12794 61440 4096 4096 NT_STATUS_OK
ReadX 12794 65536 61440 61440 NT_STATUS_OK
ReadX 12794 126976 4096 4096 NT_STATUS_OK
ReadX 12794 131072 61440 61440 NT_STATUS_OK
ReadX 12794 192512 4096 4096 NT_STATUS_OK
ReadX 12794 196608 61440 61440 NT_STATUS_OK
ReadX 12794 258048 4096 4096 NT_STATUS_OK
ReadX 12794 262144 61440 61440 NT_STATUS_OK
ReadX 12794 323584 4096 4096 NT_STATUS_OK
ReadX 12794 327680 61440 61440 NT_STATUS_OK
ReadX 12794 389120 4096 4096 NT_STATUS_OK
ReadX 12794 393216 61440 61440 NT_STATUS_OK
ReadX 12794 454656 4096 4096 NT_STATUS_OK
ReadX 12794 458752 61440 61440 NT_STATUS_OK
ReadX 12794 520192 4096 4096 NT_STATUS_OK
ReadX 12794 524288 61440 61440 NT_STATUS_OK
ReadX 12794 585728 4096 4096 NT_STATUS_OK
ReadX 12794 589824 61440 61440 NT_STATUS_OK
ReadX 12794 651264 4096 4096 NT_STATUS_OK
ReadX 12794 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 61440 61440 NT_STATUS_OK
ReadX 12795 61440 4096 4096 NT_STATUS_OK
ReadX 12795 65536 61440 61440 NT_STATUS_OK
ReadX 12795 126976 4096 4096 NT_STATUS_OK
ReadX 12795 131072 61440 61440 NT_STATUS_OK
ReadX 12795 192512 4096 4096 NT_STATUS_OK
ReadX 12795 196608 61440 61440 NT_STATUS_OK
ReadX 12795 258048 4096 4096 NT_STATUS_OK
ReadX 12795 262144 61440 61440 NT_STATUS_OK
ReadX 12795 323584 4096 4096 NT_STATUS_OK
ReadX 12795 327680 61440 61440 NT_STATUS_OK
ReadX 12795 389120 4096 4096 NT_STATUS_OK
ReadX 12795 393216 61440 61440 NT_STATUS_OK
ReadX 12795 454656 4096 4096 NT_STATUS_OK
ReadX 12795 458752 61440 61440 NT_STATUS_OK
ReadX 12795 520192 4096 4096 NT_STATUS_OK
ReadX 12795 524288 61440 61440 NT_STATUS_OK
ReadX 12795 585728 4096 4096 NT_STATUS_OK
ReadX 12795 589824 61440 61440 NT_STATUS_OK
ReadX 12795 651264 4096 4096 NT_STATUS_OK
ReadX 12795 655360 61440 61440 NT_STATUS_OK
ReadX 12795 716800 4096 4096 NT_STATUS_OK
ReadX 12795 720896 61440 61440 NT_STATUS_OK
ReadX 12795 782336 4096 4096 NT_STATUS_OK
ReadX 12795 786432 61440 61440 NT_STATUS_OK
ReadX 12795 847872 4096 4096 NT_STATUS_OK
ReadX 12795 851968 61440 61440 NT_STATUS_OK
ReadX 12795 913408 4096 4096 NT_STATUS_OK
ReadX 12795 917504 61440 61440 NT_STATUS_OK
ReadX 12795 978944 4096 4096 NT_STATUS_OK
ReadX 12795 983040 61440 61440 NT_STATUS_OK
ReadX 12795 1044480 4096 4096 NT_STATUS_OK
ReadX 12795 1048576 61440 61440 NT_STATUS_OK
ReadX 12795 1110016 4096 4096 NT_STATUS_OK
ReadX 12795 1114112 61440 61440 NT_STATUS_OK
ReadX 12795 1175552 4096 4096 NT_STATUS_OK
ReadX 12795 1179648 61440 61440 NT_STATUS_OK
ReadX 12795 1241088 4096 4096 NT_STATUS_OK
ReadX 12795 1245184 61440 61440 NT_STATUS_OK
ReadX 12795 1306624 4096 4096 NT_STATUS_OK
ReadX 12795 1310720 61440 61440 NT_STATUS_OK
ReadX 12795 1372160 4096 4096 NT_STATUS_OK
ReadX 12795 1376256 61440 61440 NT_STATUS_OK
ReadX 12795 1437696 4096 4096 NT_STATUS_OK
ReadX 12795 1441792 61440 61440 NT_STATUS_OK
ReadX 12795 1503232 4096 4096 NT_STATUS_OK
ReadX 12795 1507328 61440 61440 NT_STATUS_OK
ReadX 12795 1568768 4096 4096 NT_STATUS_OK
ReadX 12795 1572864 61440 61440 NT_STATUS_OK
ReadX 12795 1634304 4096 4096 NT_STATUS_OK
ReadX 12795 1638400 61440 61440 NT_STATUS_OK
ReadX 12795 1699840 4096 4096 NT_STATUS_OK
ReadX 12795 1703936 61440 61440 NT_STATUS_OK
ReadX 12795 1765376 4096 4096 NT_STATUS_OK
ReadX 12795 1769472 61440 61440 NT_STATUS_OK
ReadX 12795 1830912 4096 4096 NT_STATUS_OK
ReadX 12795 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
ReadX 12800 4096 4096 4096 NT_STATUS_OK
ReadX 12800 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12800 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12804 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 8192 8192 NT_STATUS_OK
ReadX 12808 8192 8192 8192 NT_STATUS_OK
ReadX 12808 16384 8192 8192 NT_STATUS_OK
ReadX 12808 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12813 NT_STATUS_OK
WriteX 12813 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 258 NT_STATUS_OK
WriteX 12813 0 10438 10438 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12817 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12818 NT_STATUS_OK
Close 12818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
ReadX 12822 4096 4096 4096 NT_STATUS_OK
ReadX 12822 8192 4096 4096 NT_STATUS_OK
ReadX 12822 12288 8192 8192 NT_STATUS_OK
ReadX 12822 20480 8192 8192 NT_STATUS_OK
ReadX 12822 28672 8192 8192 NT_STATUS_OK
ReadX 12822 36864 8192 8192 NT_STATUS_OK
ReadX 12822 45056 8192 8192 NT_STATUS_OK
ReadX 12822 53248 8192 8192 NT_STATUS_OK
ReadX 12822 61440 8192 8192 NT_STATUS_OK
ReadX 12822 69632 8192 8192 NT_STATUS_OK
ReadX 12822 77824 8192 8192 NT_STATUS_OK
ReadX 12822 86016 8192 8192 NT_STATUS_OK
ReadX 12822 94208 8192 8192 NT_STATUS_OK
ReadX 12822 102400 8192 8192 NT_STATUS_OK
ReadX 12822 110592 8192 8192 NT_STATUS_OK
ReadX 12822 118784 8192 8192 NT_STATUS_OK
ReadX 12822 126976 8192 8192 NT_STATUS_OK
ReadX 12822 135168 8192 8192 NT_STATUS_OK
ReadX 12822 143360 8192 8192 NT_STATUS_OK
ReadX 12822 151552 8192 8192 NT_STATUS_OK
ReadX 12822 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12824 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12827 NT_STATUS_OK
WriteX 12827 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 258 NT_STATUS_OK
WriteX 12827 0 28489 28489 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12828 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12830 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 8192 8192 NT_STATUS_OK
ReadX 12834 8192 8192 8192 NT_STATUS_OK
ReadX 12834 16384 8192 8192 NT_STATUS_OK
ReadX 12834 24576 8192 8192 NT_STATUS_OK
ReadX 12834 32768 16384 16384 NT_STATUS_OK
ReadX 12834 49152 8192 8192 NT_STATUS_OK
ReadX 12834 57344 8192 8192 NT_STATUS_OK
ReadX 12834 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12839 NT_STATUS_OK
WriteX 12839 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
WriteX 12839 0 29253 29253 NT_STATUS_OK
Close 12839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 30183 30183 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12847 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12849 NT_STATUS_OK
WriteX 12849 0 510 510 NT_STATUS_OK
WriteX 12849 510 512 512 NT_STATUS_OK
WriteX 12849 1022 510 510 NT_STATUS_OK
WriteX 12849 1532 510 510 NT_STATUS_OK
WriteX 12849 2042 168 168 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
WriteX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 61440 4096 4096 NT_STATUS_OK
ReadX 12853 126976 4096 4096 NT_STATUS_OK
WriteX 12853 0 65536 65536 NT_STATUS_OK
WriteX 12853 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 61440 4096 4096 NT_STATUS_OK
ReadX 12854 126976 4096 4096 NT_STATUS_OK
ReadX 12854 192512 4096 4096 NT_STATUS_OK
ReadX 12854 258048 4096 4096 NT_STATUS_OK
WriteX 12854 0 65536 65536 NT_STATUS_OK
WriteX 12854 65536 65536 65536 NT_STATUS_OK
WriteX 12854 131072 65536 65536 NT_STATUS_OK
WriteX 12854 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 61440 4096 4096 NT_STATUS_OK
ReadX 12855 126976 4096 4096 NT_STATUS_OK
ReadX 12855 192512 4096 4096 NT_STATUS_OK
ReadX 12855 258048 4096 4096 NT_STATUS_OK
ReadX 12855 323584 4096 4096 NT_STATUS_OK
ReadX 12855 389120 4096 4096 NT_STATUS_OK
ReadX 12855 454656 4096 4096 NT_STATUS_OK
ReadX 12855 520192 4096 4096 NT_STATUS_OK
WriteX 12855 0 65536 65536 NT_STATUS_OK
WriteX 12855 65536 65536 65536 NT_STATUS_OK
WriteX 12855 131072 65536 65536 NT_STATUS_OK
WriteX 12855 196608 65536 65536 NT_STATUS_OK
WriteX 12855 262144 65536 65536 NT_STATUS_OK
WriteX 12855 327680 65536 65536 NT_STATUS_OK
WriteX 12855 393216 65536 65536 NT_STATUS_OK
WriteX 12855 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12890 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12918 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12924 NT_STATUS_OK
WriteX 12924 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12924 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12924 0 65536 65536 NT_STATUS_OK
WriteX 12924 65536 65536 65536 NT_STATUS_OK
WriteX 12924 131072 65536 65536 NT_STATUS_OK
WriteX 12924 196608 65536 65536 NT_STATUS_OK
WriteX 12924 262144 26634 26634 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
ReadX 12932 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12933 NT_STATUS_OK
Close 12933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12942 NT_STATUS_OK
Close 12942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12946 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12949 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12955 NT_STATUS_OK
Close 12955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12960 NT_STATUS_OK
Close 12960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12965 NT_STATUS_OK
Close 12965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12980 NT_STATUS_OK
Close 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12989 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12994 NT_STATUS_OK
Close 12994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
Close 13012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
Close 13026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
ReadX 13058 4096 4096 4096 NT_STATUS_OK
ReadX 13058 8192 4096 4096 NT_STATUS_OK
ReadX 13058 12288 4096 4096 NT_STATUS_OK
ReadX 13058 16384 4096 4096 NT_STATUS_OK
ReadX 13058 20480 4096 4096 NT_STATUS_OK
ReadX 13058 24576 4096 4096 NT_STATUS_OK
ReadX 13058 28672 4096 4096 NT_STATUS_OK
ReadX 13058 32768 4096 4096 NT_STATUS_OK
ReadX 13058 36864 4096 4096 NT_STATUS_OK
ReadX 13058 40960 4096 4096 NT_STATUS_OK
ReadX 13058 45056 4096 4096 NT_STATUS_OK
ReadX 13058 49152 4096 4096 NT_STATUS_OK
ReadX 13058 53248 4096 4096 NT_STATUS_OK
ReadX 13058 57344 4096 4096 NT_STATUS_OK
ReadX 13058 61440 4096 4096 NT_STATUS_OK
ReadX 13058 65536 4096 4096 NT_STATUS_OK
ReadX 13058 69632 4096 4096 NT_STATUS_OK
ReadX 13058 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13058 1004 NT_STATUS_OK
WriteX 13058 0 4096 4096 NT_STATUS_OK
Close 13058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13059 NT_STATUS_OK
SET_FILE_INFORMATION 13059 1004 NT_STATUS_OK
Close 13059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13060 NT_STATUS_OK
ReadX 13060 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13064 NT_STATUS_OK
WriteX 13064 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13064 258 NT_STATUS_OK
WriteX 13064 0 65536 65536 NT_STATUS_OK
WriteX 13064 65536 19979 19979 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
Close 13066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
Close 13068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
Close 13069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13070 1004 NT_STATUS_OK
WriteX 13070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 65536 65536 NT_STATUS_OK
WriteX 13076 65536 17654 17654 NT_STATUS_OK
Close 13076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13078 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
Close 13078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
ReadX 13082 4096 4096 4096 NT_STATUS_OK
ReadX 13082 8192 4096 4096 NT_STATUS_OK
ReadX 13082 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13082 16384 4096 4096 NT_STATUS_OK
ReadX 13082 20480 4096 4096 NT_STATUS_OK
ReadX 13082 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
Close 13083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
Close 13084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
WriteX 13085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13091 NT_STATUS_OK
WriteX 13091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 258 NT_STATUS_OK
WriteX 13091 0 65536 65536 NT_STATUS_OK
WriteX 13091 65536 19490 19490 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
QUERY_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13093 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
Close 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13097 0 4096 4096 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
ReadX 13099 4096 4096 4096 NT_STATUS_OK
ReadX 13099 8192 4096 4096 NT_STATUS_OK
ReadX 13099 12288 4096 4096 NT_STATUS_OK
ReadX 13099 16384 4096 4096 NT_STATUS_OK
ReadX 13099 20480 4096 4096 NT_STATUS_OK
ReadX 13099 24576 4096 4096 NT_STATUS_OK
ReadX 13099 28672 4096 4096 NT_STATUS_OK
ReadX 13099 32768 4096 4096 NT_STATUS_OK
ReadX 13099 36864 4096 4096 NT_STATUS_OK
ReadX 13099 40960 4096 4096 NT_STATUS_OK
ReadX 13099 45056 4096 4096 NT_STATUS_OK
ReadX 13099 49152 4096 4096 NT_STATUS_OK
ReadX 13099 53248 4096 4096 NT_STATUS_OK
ReadX 13099 57344 4096 4096 NT_STATUS_OK
ReadX 13099 61440 4096 4096 NT_STATUS_OK
ReadX 13099 65536 4096 4096 NT_STATUS_OK
ReadX 13099 69632 4096 4096 NT_STATUS_OK
ReadX 13099 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13100 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 65536 65536 NT_STATUS_OK
WriteX 13105 65536 8866 8866 NT_STATUS_OK
Close 13105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 4096 4096 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Flush 13106 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Flush 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13108 NT_STATUS_OK
ReadX 13108 0 4096 4096 NT_STATUS_OK
Close 13108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
Close 13109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13101 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13116 NT_STATUS_OK
WriteX 13116 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13116 258 NT_STATUS_OK
WriteX 13116 0 65536 65536 NT_STATUS_OK
WriteX 13116 65536 9298 9298 NT_STATUS_OK
Close 13116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
WriteX 13117 0 4096 4096 NT_STATUS_OK
Flush 13117 NT_STATUS_OK
SET_FILE_INFORMATION 13117 1004 NT_STATUS_OK
WriteX 13117 0 4096 4096 NT_STATUS_OK
Flush 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13118 NT_STATUS_OK
SET_FILE_INFORMATION 13118 1004 NT_STATUS_OK
Close 13118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13120 NT_STATUS_OK
Close 13120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13123 0 4096 4096 NT_STATUS_OK
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13124 4096 4096 4096 NT_STATUS_OK
ReadX 13124 8192 4096 4096 NT_STATUS_OK
ReadX 13124 12288 4096 4096 NT_STATUS_OK
ReadX 13124 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13127 1004 NT_STATUS_OK
WriteX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13133 NT_STATUS_OK
WriteX 13133 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13133 258 NT_STATUS_OK
WriteX 13133 0 65536 65536 NT_STATUS_OK
WriteX 13133 65536 11540 11540 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
Flush 13134 NT_STATUS_OK
SET_FILE_INFORMATION 13134 1004 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
Flush 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13135 NT_STATUS_OK
SET_FILE_INFORMATION 13135 1004 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 61440 4096 4096 NT_STATUS_OK
ReadX 13139 126976 4096 4096 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 61440 4096 4096 NT_STATUS_OK
ReadX 13140 126976 4096 4096 NT_STATUS_OK
ReadX 13140 192512 4096 4096 NT_STATUS_OK
ReadX 13140 258048 4096 4096 NT_STATUS_OK
WriteX 13140 0 65536 65536 NT_STATUS_OK
WriteX 13140 65536 65536 65536 NT_STATUS_OK
WriteX 13140 131072 65536 65536 NT_STATUS_OK
WriteX 13140 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 61440 4096 4096 NT_STATUS_OK
ReadX 13141 126976 4096 4096 NT_STATUS_OK
ReadX 13141 192512 4096 4096 NT_STATUS_OK
ReadX 13141 258048 4096 4096 NT_STATUS_OK
ReadX 13141 323584 4096 4096 NT_STATUS_OK
ReadX 13141 389120 4096 4096 NT_STATUS_OK
ReadX 13141 454656 4096 4096 NT_STATUS_OK
ReadX 13141 520192 4096 4096 NT_STATUS_OK
WriteX 13141 0 65536 65536 NT_STATUS_OK
WriteX 13141 65536 65536 65536 NT_STATUS_OK
WriteX 13141 131072 65536 65536 NT_STATUS_OK
WriteX 13141 196608 65536 65536 NT_STATUS_OK
WriteX 13141 262144 65536 65536 NT_STATUS_OK
WriteX 13141 327680 65536 65536 NT_STATUS_OK
WriteX 13141 393216 65536 65536 NT_STATUS_OK
WriteX 13141 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
ReadX 13142 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13143 NT_STATUS_OK
WriteX 13143 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13143 258 NT_STATUS_OK
WriteX 13143 0 53 53 NT_STATUS_OK
Close 13143 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13142 8192 4096 4096 NT_STATUS_OK
ReadX 13142 12288 4096 4096 NT_STATUS_OK
WriteX 13146 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13146 258 NT_STATUS_OK
ReadX 13142 16384 4096 4096 NT_STATUS_OK
ReadX 13142 20480 4096 4096 NT_STATUS_OK
WriteX 13146 0 15360 15360 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
WriteX 13147 0 4096 4096 NT_STATUS_OK
Close 13147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13148 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13150 4096 4096 4096 NT_STATUS_OK
ReadX 13150 8192 4096 4096 NT_STATUS_OK
ReadX 13150 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
ReadX 13153 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
ReadX 13154 4096 4096 4096 NT_STATUS_OK
ReadX 13154 8192 4096 4096 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13155 NT_STATUS_OK
WriteX 13155 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 258 NT_STATUS_OK
WriteX 13155 0 15360 15360 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13159 NT_STATUS_OK
ReadX 13159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13160 NT_STATUS_OK
SET_FILE_INFORMATION 13160 1004 NT_STATUS_OK
Close 13160 NT_STATUS_OK
WriteX 13156 0 4096 4096 NT_STATUS_OK
Close 13156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
ReadX 13163 4096 4096 4096 NT_STATUS_OK
ReadX 13163 8192 4096 4096 NT_STATUS_OK
ReadX 13163 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13165 NT_STATUS_OK
WriteX 13165 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13165 258 NT_STATUS_OK
WriteX 13165 0 53 53 NT_STATUS_OK
Close 13165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13166 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13164 4096 4096 4096 NT_STATUS_OK
ReadX 13164 8192 4096 4096 NT_STATUS_OK
ReadX 13164 12288 4096 4096 NT_STATUS_OK
WriteX 13168 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 12006 12006 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13173 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13172 4096 4096 4096 NT_STATUS_OK
ReadX 13172 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13175 NT_STATUS_OK
WriteX 13175 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13175 258 NT_STATUS_OK
WriteX 13175 0 11991 11991 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13176 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13176 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13180 NT_STATUS_OK
WriteX 13163 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
Close 13180 NT_STATUS_OK
WriteX 13176 0 4096 4096 NT_STATUS_OK
Close 13176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13183 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
ReadX 13183 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
WriteX 13183 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13183 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
Close 13159 NT_STATUS_OK
WriteX 13183 0 12288 12288 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13186 NT_STATUS_OK
Close 13186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13188 NT_STATUS_OK
Close 13188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 61440 61440 NT_STATUS_OK
ReadX 13190 61440 4096 4096 NT_STATUS_OK
ReadX 13190 65536 61440 61440 NT_STATUS_OK
ReadX 13190 126976 4096 4096 NT_STATUS_OK
ReadX 13190 131072 61440 61440 NT_STATUS_OK
ReadX 13190 192512 4096 4096 NT_STATUS_OK
ReadX 13190 196608 61440 61440 NT_STATUS_OK
ReadX 13190 258048 4096 4096 NT_STATUS_OK
ReadX 13190 262144 61440 61440 NT_STATUS_OK
ReadX 13190 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 61440 61440 NT_STATUS_OK
ReadX 13191 61440 4096 4096 NT_STATUS_OK
ReadX 13191 65536 61440 61440 NT_STATUS_OK
ReadX 13191 126976 4096 4096 NT_STATUS_OK
ReadX 13191 131072 61440 61440 NT_STATUS_OK
ReadX 13191 192512 4096 4096 NT_STATUS_OK
ReadX 13191 196608 61440 61440 NT_STATUS_OK
ReadX 13191 258048 4096 4096 NT_STATUS_OK
ReadX 13191 262144 61440 61440 NT_STATUS_OK
ReadX 13191 323584 4096 4096 NT_STATUS_OK
ReadX 13191 327680 61440 61440 NT_STATUS_OK
ReadX 13191 389120 4096 4096 NT_STATUS_OK
ReadX 13191 393216 61440 61440 NT_STATUS_OK
ReadX 13191 454656 4096 4096 NT_STATUS_OK
ReadX 13191 458752 61440 61440 NT_STATUS_OK
ReadX 13191 520192 4096 4096 NT_STATUS_OK
ReadX 13191 524288 61440 61440 NT_STATUS_OK
ReadX 13191 585728 4096 4096 NT_STATUS_OK
ReadX 13191 589824 61440 61440 NT_STATUS_OK
ReadX 13191 651264 4096 4096 NT_STATUS_OK
ReadX 13191 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 61440 61440 NT_STATUS_OK
ReadX 13192 61440 4096 4096 NT_STATUS_OK
ReadX 13192 65536 61440 61440 NT_STATUS_OK
ReadX 13192 126976 4096 4096 NT_STATUS_OK
ReadX 13192 131072 61440 61440 NT_STATUS_OK
ReadX 13192 192512 4096 4096 NT_STATUS_OK
ReadX 13192 196608 61440 61440 NT_STATUS_OK
ReadX 13192 258048 4096 4096 NT_STATUS_OK
ReadX 13192 262144 61440 61440 NT_STATUS_OK
ReadX 13192 323584 4096 4096 NT_STATUS_OK
ReadX 13192 327680 61440 61440 NT_STATUS_OK
ReadX 13192 389120 4096 4096 NT_STATUS_OK
ReadX 13192 393216 61440 61440 NT_STATUS_OK
ReadX 13192 454656 4096 4096 NT_STATUS_OK
ReadX 13192 458752 61440 61440 NT_STATUS_OK
ReadX 13192 520192 4096 4096 NT_STATUS_OK
ReadX 13192 524288 61440 61440 NT_STATUS_OK
ReadX 13192 585728 4096 4096 NT_STATUS_OK
ReadX 13192 589824 61440 61440 NT_STATUS_OK
ReadX 13192 651264 4096 4096 NT_STATUS_OK
ReadX 13192 655360 61440 61440 NT_STATUS_OK
ReadX 13192 716800 4096 4096 NT_STATUS_OK
ReadX 13192 720896 61440 61440 NT_STATUS_OK
ReadX 13192 782336 4096 4096 NT_STATUS_OK
ReadX 13192 786432 61440 61440 NT_STATUS_OK
ReadX 13192 847872 4096 4096 NT_STATUS_OK
ReadX 13192 851968 61440 61440 NT_STATUS_OK
ReadX 13192 913408 4096 4096 NT_STATUS_OK
ReadX 13192 917504 61440 61440 NT_STATUS_OK
ReadX 13192 978944 4096 4096 NT_STATUS_OK
ReadX 13192 983040 61440 61440 NT_STATUS_OK
ReadX 13192 1044480 4096 4096 NT_STATUS_OK
ReadX 13192 1048576 61440 61440 NT_STATUS_OK
ReadX 13192 1110016 4096 4096 NT_STATUS_OK
ReadX 13192 1114112 61440 61440 NT_STATUS_OK
ReadX 13192 1175552 4096 4096 NT_STATUS_OK
ReadX 13192 1179648 61440 61440 NT_STATUS_OK
ReadX 13192 1241088 4096 4096 NT_STATUS_OK
ReadX 13192 1245184 61440 61440 NT_STATUS_OK
ReadX 13192 1306624 4096 4096 NT_STATUS_OK
ReadX 13192 1310720 61440 61440 NT_STATUS_OK
ReadX 13192 1372160 4096 4096 NT_STATUS_OK
ReadX 13192 1376256 61440 61440 NT_STATUS_OK
ReadX 13192 1437696 4096 4096 NT_STATUS_OK
ReadX 13192 1441792 61440 61440 NT_STATUS_OK
ReadX 13192 1503232 4096 4096 NT_STATUS_OK
ReadX 13192 1507328 61440 61440 NT_STATUS_OK
ReadX 13192 1568768 4096 4096 NT_STATUS_OK
ReadX 13192 1572864 61440 61440 NT_STATUS_OK
ReadX 13192 1634304 4096 4096 NT_STATUS_OK
ReadX 13192 1638400 61440 61440 NT_STATUS_OK
ReadX 13192 1699840 4096 4096 NT_STATUS_OK
ReadX 13192 1703936 61440 61440 NT_STATUS_OK
ReadX 13192 1765376 4096 4096 NT_STATUS_OK
ReadX 13192 1769472 61440 61440 NT_STATUS_OK
ReadX 13192 1830912 4096 4096 NT_STATUS_OK
ReadX 13192 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13199 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 1004 NT_STATUS_OK
WriteX 13199 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13201 NT_STATUS_OK
WriteX 13201 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 491 491 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13199 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13205 NT_STATUS_OK
WriteX 13205 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13205 258 NT_STATUS_OK
WriteX 13205 0 543 543 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13192 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Close 13195 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13218 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13219 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 1004 NT_STATUS_OK
WriteX 13219 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 258 NT_STATUS_OK
WriteX 13219 0 2048 2048 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13225 NT_STATUS_OK
WriteX 13225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 2048 2048 NT_STATUS_OK
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13231 NT_STATUS_OK
WriteX 13231 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 258 NT_STATUS_OK
WriteX 13231 0 2048 2048 NT_STATUS_OK
Close 13231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 2048 2048 NT_STATUS_OK
ReadX 13210 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
WriteX 13210 0 8192 8192 NT_STATUS_OK
WriteX 13211 0 4096 4096 NT_STATUS_OK
WriteX 13212 0 4096 4096 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13236 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13238 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13248 NT_STATUS_OK
ReadX 13248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13256 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 1004 NT_STATUS_OK
WriteX 13256 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 258 NT_STATUS_OK
WriteX 13256 0 2048 2048 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13257 NT_STATUS_OK
ReadX 13257 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13263 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13264 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 1004 NT_STATUS_OK
WriteX 13264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 2048 2048 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
Flush 13257 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13259 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13267 NT_STATUS_OK
WriteX 13267 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13267 258 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13270 NT_STATUS_OK
WriteX 13270 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 258 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13271 0 4096 4096 NT_STATUS_OK
Close 13268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13278 NT_STATUS_OK
WriteX 13278 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13278 258 NT_STATUS_OK
WriteX 13278 0 2048 2048 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13293 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13295 NT_STATUS_OK
QUERY_FILE_INFORMATION 13295 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13300 NT_STATUS_OK
ReadX 13300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13315 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 1004 NT_STATUS_OK
WriteX 13315 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 258 NT_STATUS_OK
WriteX 13315 0 2048 2048 NT_STATUS_OK
Close 13315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13317 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13327 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 1004 NT_STATUS_OK
WriteX 13327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 258 NT_STATUS_OK
WriteX 13327 0 2048 2048 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13334 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13335 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 1004 NT_STATUS_OK
WriteX 13335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 2048 2048 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
Flush 13316 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
Flush 13328 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
Flush 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 4096 16384 16384 NT_STATUS_OK
ReadX 13298 4096 16384 16384 NT_STATUS_OK
ReadX 13330 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 2048 2048 NT_STATUS_OK
WriteX 13338 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13339 NT_STATUS_OK
QUERY_FILE_INFORMATION 13339 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13330 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Close 13301 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13341 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13343 NT_STATUS_OK
QUERY_FILE_INFORMATION 13343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13346 4096 16384 16384 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
WriteX 13348 0 4096 4096 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 8192 8192 NT_STATUS_OK
ReadX 13352 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13366 0 4096 4096 NT_STATUS_OK
ReadX 13366 4096 4096 4096 NT_STATUS_OK
ReadX 13366 8192 4096 4096 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
WriteX 13348 0 4096 4096 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13372 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 1004 NT_STATUS_OK
WriteX 13372 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 258 NT_STATUS_OK
WriteX 13372 0 2048 2048 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 4096 4096 NT_STATUS_OK
ReadX 13375 4096 4096 4096 NT_STATUS_OK
WriteX 13375 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13377 NT_STATUS_OK
ReadX 13377 0 4096 4096 NT_STATUS_OK
ReadX 13377 4096 4096 4096 NT_STATUS_OK
WriteX 13377 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13378 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13350 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Close 13359 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13377 NT_STATUS_OK
Close 13366 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13380 0 4096 4096 NT_STATUS_OK
ReadX 13380 4096 4096 4096 NT_STATUS_OK
ReadX 13380 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
ReadX 13381 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13398 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 1004 NT_STATUS_OK
WriteX 13398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 2048 2048 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
WriteX 13404 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 258 NT_STATUS_OK
WriteX 13404 0 2048 2048 NT_STATUS_OK
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13405 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13388 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13408 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 61440 4096 4096 NT_STATUS_OK
ReadX 13410 126976 4096 4096 NT_STATUS_OK
WriteX 13410 0 65536 65536 NT_STATUS_OK
WriteX 13410 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 61440 4096 4096 NT_STATUS_OK
ReadX 13411 126976 4096 4096 NT_STATUS_OK
ReadX 13411 192512 4096 4096 NT_STATUS_OK
ReadX 13411 258048 4096 4096 NT_STATUS_OK
WriteX 13411 0 65536 65536 NT_STATUS_OK
WriteX 13411 65536 65536 65536 NT_STATUS_OK
WriteX 13411 131072 65536 65536 NT_STATUS_OK
WriteX 13411 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 61440 4096 4096 NT_STATUS_OK
ReadX 13412 126976 4096 4096 NT_STATUS_OK
ReadX 13412 192512 4096 4096 NT_STATUS_OK
ReadX 13412 258048 4096 4096 NT_STATUS_OK
ReadX 13412 323584 4096 4096 NT_STATUS_OK
ReadX 13412 389120 4096 4096 NT_STATUS_OK
ReadX 13412 454656 4096 4096 NT_STATUS_OK
ReadX 13412 520192 4096 4096 NT_STATUS_OK
WriteX 13412 0 65536 65536 NT_STATUS_OK
WriteX 13412 65536 65536 65536 NT_STATUS_OK
WriteX 13412 131072 65536 65536 NT_STATUS_OK
WriteX 13412 196608 65536 65536 NT_STATUS_OK
WriteX 13412 262144 65536 65536 NT_STATUS_OK
WriteX 13412 327680 65536 65536 NT_STATUS_OK
WriteX 13412 393216 65536 65536 NT_STATUS_OK
WriteX 13412 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13413 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13413 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13413 8192 4096 4096 NT_STATUS_OK
ReadX 13413 12288 4096 4096 NT_STATUS_OK
ReadX 13413 16384 4096 4096 NT_STATUS_OK
ReadX 13413 20480 4096 4096 NT_STATUS_OK
ReadX 13413 24576 4096 4096 NT_STATUS_OK
ReadX 13413 28672 4096 4096 NT_STATUS_OK
ReadX 13413 32768 4096 4096 NT_STATUS_OK
ReadX 13413 36864 4096 4096 NT_STATUS_OK
ReadX 13413 40960 4096 4096 NT_STATUS_OK
ReadX 13413 45056 4096 4096 NT_STATUS_OK
ReadX 13413 49152 4096 4096 NT_STATUS_OK
ReadX 13413 53248 4096 4096 NT_STATUS_OK
ReadX 13413 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13413 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13416 NT_STATUS_OK
WriteX 13416 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13416 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 57088 57088 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
Flush 13416 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13417 1004 NT_STATUS_OK
Close 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
Close 13416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13420 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13421 NT_STATUS_OK
WriteX 13421 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13421 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 51456 51456 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
Flush 13421 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13425 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 53077 53077 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13431 NT_STATUS_OK
WriteX 13431 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 0 65536 65536 NT_STATUS_OK
WriteX 13431 65536 1856 1856 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Flush 13431 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13440 NT_STATUS_OK
WriteX 13440 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13440 258 NT_STATUS_OK
WriteX 13440 0 7983 7983 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13445 NT_STATUS_OK
WriteX 13445 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13445 258 NT_STATUS_OK
WriteX 13445 0 65536 65536 NT_STATUS_OK
WriteX 13445 65536 65536 65536 NT_STATUS_OK
WriteX 13445 131072 65536 65536 NT_STATUS_OK
WriteX 13445 196608 65536 65536 NT_STATUS_OK
WriteX 13445 262144 65536 65536 NT_STATUS_OK
WriteX 13445 327680 65536 65536 NT_STATUS_OK
WriteX 13445 393216 65536 65536 NT_STATUS_OK
WriteX 13445 458752 46731 46731 NT_STATUS_OK
Close 13445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13446 NT_STATUS_OK
WriteX 13446 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13446 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13435 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
WriteX 13446 0 65536 65536 NT_STATUS_OK
WriteX 13446 65536 22848 22848 NT_STATUS_OK
WriteX 13446 0 4096 4096 NT_STATUS_OK
Flush 13446 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
WriteX 13446 0 4096 4096 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13450 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13451 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13451 1004 NT_STATUS_OK
ReadX 13451 8192 4096 4096 NT_STATUS_OK
ReadX 13451 12288 4096 4096 NT_STATUS_OK
ReadX 13451 16384 4096 4096 NT_STATUS_OK
ReadX 13451 20480 4096 4096 NT_STATUS_OK
ReadX 13451 24576 4096 4096 NT_STATUS_OK
ReadX 13451 28672 4096 4096 NT_STATUS_OK
ReadX 13451 32768 4096 4096 NT_STATUS_OK
ReadX 13451 36864 4096 4096 NT_STATUS_OK
ReadX 13451 40960 4096 4096 NT_STATUS_OK
ReadX 13451 45056 4096 4096 NT_STATUS_OK
ReadX 13451 49152 4096 4096 NT_STATUS_OK
ReadX 13451 53248 4096 4096 NT_STATUS_OK
ReadX 13451 57344 4096 4096 NT_STATUS_OK
ReadX 13451 61440 4096 4096 NT_STATUS_OK
ReadX 13451 65536 4096 4096 NT_STATUS_OK
ReadX 13451 69632 4096 4096 NT_STATUS_OK
ReadX 13451 73728 4096 4096 NT_STATUS_OK
ReadX 13451 77824 4096 4096 NT_STATUS_OK
ReadX 13451 81920 4096 4096 NT_STATUS_OK
ReadX 13451 86016 4096 4096 NT_STATUS_OK
ReadX 13451 90112 4096 4096 NT_STATUS_OK
ReadX 13451 94208 4096 4096 NT_STATUS_OK
ReadX 13451 98304 4096 4096 NT_STATUS_OK
ReadX 13451 102400 4096 4096 NT_STATUS_OK
ReadX 13451 106496 4096 4096 NT_STATUS_OK
ReadX 13451 110592 4096 4096 NT_STATUS_OK
ReadX 13451 114688 4096 4096 NT_STATUS_OK
ReadX 13451 118784 4096 4096 NT_STATUS_OK
ReadX 13451 122880 4096 4096 NT_STATUS_OK
ReadX 13451 126976 4096 4096 NT_STATUS_OK
ReadX 13451 131072 4096 4096 NT_STATUS_OK
ReadX 13451 135168 4096 4096 NT_STATUS_OK
ReadX 13451 139264 4096 4096 NT_STATUS_OK
ReadX 13451 143360 4096 4096 NT_STATUS_OK
ReadX 13451 147456 4096 4096 NT_STATUS_OK
ReadX 13451 151552 4096 4096 NT_STATUS_OK
ReadX 13451 155648 4096 4096 NT_STATUS_OK
ReadX 13451 159744 4096 4096 NT_STATUS_OK
ReadX 13451 163840 4096 4096 NT_STATUS_OK
ReadX 13451 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13451 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13452 NT_STATUS_OK
Close 13452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13454 NT_STATUS_OK
WriteX 13454 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13454 258 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13455 NT_STATUS_OK
SET_FILE_INFORMATION 13455 1004 NT_STATUS_OK
Close 13455 NT_STATUS_OK
WriteX 13454 0 42388 42388 NT_STATUS_OK
Close 13454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
ReadX 13458 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13459 NT_STATUS_OK
WriteX 13459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
SET_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 0 42652 42652 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
ReadX 13463 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13468 NT_STATUS_OK
WriteX 13468 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13468 258 NT_STATUS_OK
WriteX 13468 0 65536 65536 NT_STATUS_OK
WriteX 13468 65536 49 49 NT_STATUS_OK
Close 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 61440 61440 NT_STATUS_OK
ReadX 13469 61440 4096 4096 NT_STATUS_OK
ReadX 13469 65536 61440 61440 NT_STATUS_OK
ReadX 13469 126976 4096 4096 NT_STATUS_OK
ReadX 13469 131072 61440 61440 NT_STATUS_OK
ReadX 13469 192512 4096 4096 NT_STATUS_OK
ReadX 13469 196608 61440 61440 NT_STATUS_OK
ReadX 13469 258048 4096 4096 NT_STATUS_OK
ReadX 13469 262144 61440 61440 NT_STATUS_OK
ReadX 13469 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 61440 61440 NT_STATUS_OK
ReadX 13470 61440 4096 4096 NT_STATUS_OK
ReadX 13470 65536 61440 61440 NT_STATUS_OK
ReadX 13470 126976 4096 4096 NT_STATUS_OK
ReadX 13470 131072 61440 61440 NT_STATUS_OK
ReadX 13470 192512 4096 4096 NT_STATUS_OK
ReadX 13470 196608 61440 61440 NT_STATUS_OK
ReadX 13470 258048 4096 4096 NT_STATUS_OK
ReadX 13470 262144 61440 61440 NT_STATUS_OK
ReadX 13470 323584 4096 4096 NT_STATUS_OK
ReadX 13470 327680 61440 61440 NT_STATUS_OK
ReadX 13470 389120 4096 4096 NT_STATUS_OK
ReadX 13470 393216 61440 61440 NT_STATUS_OK
ReadX 13470 454656 4096 4096 NT_STATUS_OK
ReadX 13470 458752 61440 61440 NT_STATUS_OK
ReadX 13470 520192 4096 4096 NT_STATUS_OK
ReadX 13470 524288 61440 61440 NT_STATUS_OK
ReadX 13470 585728 4096 4096 NT_STATUS_OK
ReadX 13470 589824 61440 61440 NT_STATUS_OK
ReadX 13470 651264 4096 4096 NT_STATUS_OK
ReadX 13470 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 61440 61440 NT_STATUS_OK
ReadX 13471 61440 4096 4096 NT_STATUS_OK
ReadX 13471 65536 61440 61440 NT_STATUS_OK
ReadX 13471 126976 4096 4096 NT_STATUS_OK
ReadX 13471 131072 61440 61440 NT_STATUS_OK
ReadX 13471 192512 4096 4096 NT_STATUS_OK
ReadX 13471 196608 61440 61440 NT_STATUS_OK
ReadX 13471 258048 4096 4096 NT_STATUS_OK
ReadX 13471 262144 61440 61440 NT_STATUS_OK
ReadX 13471 323584 4096 4096 NT_STATUS_OK
ReadX 13471 327680 61440 61440 NT_STATUS_OK
ReadX 13471 389120 4096 4096 NT_STATUS_OK
ReadX 13471 393216 61440 61440 NT_STATUS_OK
ReadX 13471 454656 4096 4096 NT_STATUS_OK
ReadX 13471 458752 61440 61440 NT_STATUS_OK
ReadX 13471 520192 4096 4096 NT_STATUS_OK
ReadX 13471 524288 61440 61440 NT_STATUS_OK
ReadX 13471 585728 4096 4096 NT_STATUS_OK
ReadX 13471 589824 61440 61440 NT_STATUS_OK
ReadX 13471 651264 4096 4096 NT_STATUS_OK
ReadX 13471 655360 61440 61440 NT_STATUS_OK
ReadX 13471 716800 4096 4096 NT_STATUS_OK
ReadX 13471 720896 61440 61440 NT_STATUS_OK
ReadX 13471 782336 4096 4096 NT_STATUS_OK
ReadX 13471 786432 61440 61440 NT_STATUS_OK
ReadX 13471 847872 4096 4096 NT_STATUS_OK
ReadX 13471 851968 61440 61440 NT_STATUS_OK
ReadX 13471 913408 4096 4096 NT_STATUS_OK
ReadX 13471 917504 61440 61440 NT_STATUS_OK
ReadX 13471 978944 4096 4096 NT_STATUS_OK
ReadX 13471 983040 61440 61440 NT_STATUS_OK
ReadX 13471 1044480 4096 4096 NT_STATUS_OK
ReadX 13471 1048576 61440 61440 NT_STATUS_OK
ReadX 13471 1110016 4096 4096 NT_STATUS_OK
ReadX 13471 1114112 61440 61440 NT_STATUS_OK
ReadX 13471 1175552 4096 4096 NT_STATUS_OK
ReadX 13471 1179648 61440 61440 NT_STATUS_OK
ReadX 13471 1241088 4096 4096 NT_STATUS_OK
ReadX 13471 1245184 61440 61440 NT_STATUS_OK
ReadX 13471 1306624 4096 4096 NT_STATUS_OK
ReadX 13471 1310720 61440 61440 NT_STATUS_OK
ReadX 13471 1372160 4096 4096 NT_STATUS_OK
ReadX 13471 1376256 61440 61440 NT_STATUS_OK
ReadX 13471 1437696 4096 4096 NT_STATUS_OK
ReadX 13471 1441792 61440 61440 NT_STATUS_OK
ReadX 13471 1503232 4096 4096 NT_STATUS_OK
ReadX 13471 1507328 61440 61440 NT_STATUS_OK
ReadX 13471 1568768 4096 4096 NT_STATUS_OK
ReadX 13471 1572864 61440 61440 NT_STATUS_OK
ReadX 13471 1634304 4096 4096 NT_STATUS_OK
ReadX 13471 1638400 61440 61440 NT_STATUS_OK
ReadX 13471 1699840 4096 4096 NT_STATUS_OK
ReadX 13471 1703936 61440 61440 NT_STATUS_OK
ReadX 13471 1765376 4096 4096 NT_STATUS_OK
ReadX 13471 1769472 61440 61440 NT_STATUS_OK
ReadX 13471 1830912 4096 4096 NT_STATUS_OK
ReadX 13471 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13473 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
ReadX 13473 2156 24 24 NT_STATUS_OK
ReadX 13473 2139 276 276 NT_STATUS_OK
ReadX 13473 2136 14 14 NT_STATUS_OK
ReadX 13473 2136 7 7 NT_STATUS_OK
ReadX 13473 2138 12 12 NT_STATUS_OK
ReadX 13473 2137 8 8 NT_STATUS_OK
ReadX 13473 2135 15 15 NT_STATUS_OK
ReadX 13473 0 16 16 NT_STATUS_OK
ReadX 13473 16 2048 2048 NT_STATUS_OK
ReadX 13473 2064 2048 2048 NT_STATUS_OK
ReadX 13473 257 2048 2048 NT_STATUS_OK
ReadX 13473 385 2048 2048 NT_STATUS_OK
ReadX 13473 513 2048 2048 NT_STATUS_OK
ReadX 13473 641 2048 2048 NT_STATUS_OK
ReadX 13473 769 2048 2048 NT_STATUS_OK
ReadX 13473 897 2048 2048 NT_STATUS_OK
ReadX 13473 1025 2048 2048 NT_STATUS_OK
ReadX 13473 1153 2048 2048 NT_STATUS_OK
ReadX 13473 1281 2048 2048 NT_STATUS_OK
ReadX 13473 1409 2048 2048 NT_STATUS_OK
ReadX 13473 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13478 NT_STATUS_OK
WriteX 13478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13478 258 NT_STATUS_OK
WriteX 13478 0 10575 10575 NT_STATUS_OK
Flush 13478 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13483 NT_STATUS_OK
LockX 13483 2147483538 1 NT_STATUS_OK
UnlockX 13483 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1005 NT_STATUS_OK
ReadX 13483 0 512 512 NT_STATUS_OK
ReadX 13483 512 512 512 NT_STATUS_OK
ReadX 13483 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1004 NT_STATUS_OK
Close 13483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13484 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1005 NT_STATUS_OK
ReadX 13484 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13485 NT_STATUS_OK
LockX 13485 2147483538 1 NT_STATUS_OK
UnlockX 13485 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 1005 NT_STATUS_OK
ReadX 13485 0 512 512 NT_STATUS_OK
ReadX 13485 512 512 512 NT_STATUS_OK
ReadX 13485 1024 512 512 NT_STATUS_OK
ReadX 13485 288 20 20 NT_STATUS_OK
ReadX 13485 308 2084 2084 NT_STATUS_OK
ReadX 13485 388 2084 2084 NT_STATUS_OK
ReadX 13485 388 2084 2084 NT_STATUS_OK
ReadX 13472 2157 1386 1386 NT_STATUS_OK
ReadX 13485 2472 399 399 NT_STATUS_OK
ReadX 13485 3072 1536 1536 NT_STATUS_OK
ReadX 13485 544 149 149 NT_STATUS_OK
ReadX 13485 693 485 485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
ReadX 13472 2157 4096 4096 NT_STATUS_OK
ReadX 13472 6253 4096 4096 NT_STATUS_OK
ReadX 13472 10349 4096 4096 NT_STATUS_OK
ReadX 13472 14445 4096 4096 NT_STATUS_OK
ReadX 13472 18541 4096 4096 NT_STATUS_OK
ReadX 13472 22637 256 256 NT_STATUS_OK
ReadX 13472 22893 4096 4096 NT_STATUS_OK
ReadX 13472 26989 4096 4096 NT_STATUS_OK
ReadX 13472 31085 4096 4096 NT_STATUS_OK
ReadX 13472 35181 4096 4096 NT_STATUS_OK
ReadX 13472 39277 4096 4096 NT_STATUS_OK
ReadX 13472 43373 4096 4096 NT_STATUS_OK
ReadX 13472 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13472 2157 1024 1024 NT_STATUS_OK
ReadX 13472 1667 4688 4688 NT_STATUS_OK
ReadX 13472 6355 3516 3516 NT_STATUS_OK
ReadX 13472 9871 16384 16384 NT_STATUS_OK
ReadX 13472 26255 3771 3771 NT_STATUS_OK
ReadX 13472 30026 2048 2048 NT_STATUS_OK
ReadX 13472 32074 1024 1024 NT_STATUS_OK
ReadX 13472 33098 6652 6652 NT_STATUS_OK
ReadX 13472 39750 16384 16384 NT_STATUS_OK
ReadX 13472 56134 10496 10496 NT_STATUS_OK
ReadX 13472 66630 1784 1784 NT_STATUS_OK
ReadX 13472 68414 90 90 NT_STATUS_OK
ReadX 13472 68504 273 273 NT_STATUS_OK
ReadX 13472 68777 1600 1600 NT_STATUS_OK
ReadX 13472 70377 640 640 NT_STATUS_OK
ReadX 13472 71017 1280 1280 NT_STATUS_OK
ReadX 13472 72297 8464 8464 NT_STATUS_OK
ReadX 13472 80761 158 158 NT_STATUS_OK
ReadX 13472 80919 912 912 NT_STATUS_OK
ReadX 13472 81831 1980 1980 NT_STATUS_OK
ReadX 13472 83811 2256 2256 NT_STATUS_OK
ReadX 13472 86067 400 400 NT_STATUS_OK
ReadX 13472 86467 252 252 NT_STATUS_OK
ReadX 13472 86719 42 42 NT_STATUS_OK
ReadX 13472 86761 725 725 NT_STATUS_OK
ReadX 13472 2009 512 512 NT_STATUS_OK
ReadX 13472 3895 9 9 NT_STATUS_OK
ReadX 13472 3781 46 46 NT_STATUS_OK
ReadX 13472 4059 92 92 NT_STATUS_OK
ReadX 13472 3781 92 92 NT_STATUS_OK
ReadX 13472 3986 184 184 NT_STATUS_OK
ReadX 13472 3987 16384 16384 NT_STATUS_OK
ReadX 13472 3902 16384 16384 NT_STATUS_OK
ReadX 13472 3781 10240 10240 NT_STATUS_OK
ReadX 13472 3821 16384 16384 NT_STATUS_OK
ReadX 13472 3891 935 935 NT_STATUS_OK
ReadX 13472 4060 10240 10240 NT_STATUS_OK
ReadX 13472 4059 184 184 NT_STATUS_OK
ReadX 13472 256 184 184 NT_STATUS_OK
ReadX 13472 256 1026 1026 NT_STATUS_OK
ReadX 13472 3901 326 326 NT_STATUS_OK
ReadX 13472 3899 652 652 NT_STATUS_OK
ReadX 13472 256 2 2 NT_STATUS_OK
ReadX 13472 258 4948 4948 NT_STATUS_OK
Close 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13487 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13490 NT_STATUS_OK
WriteX 13490 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 258 NT_STATUS_OK
WriteX 13490 0 65536 65536 NT_STATUS_OK
WriteX 13490 65536 65536 65536 NT_STATUS_OK
WriteX 13490 131072 65536 65536 NT_STATUS_OK
WriteX 13490 196608 65536 65536 NT_STATUS_OK
WriteX 13490 262144 65536 65536 NT_STATUS_OK
WriteX 13490 327680 65536 65536 NT_STATUS_OK
WriteX 13490 393216 65536 65536 NT_STATUS_OK
WriteX 13490 458752 65536 65536 NT_STATUS_OK
WriteX 13490 524288 65536 65536 NT_STATUS_OK
WriteX 13490 589824 35257 35257 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13495 NT_STATUS_OK
WriteX 13495 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13495 258 NT_STATUS_OK
WriteX 13495 0 65536 65536 NT_STATUS_OK
WriteX 13495 65536 65536 65536 NT_STATUS_OK
WriteX 13495 131072 65536 65536 NT_STATUS_OK
WriteX 13495 196608 65536 65536 NT_STATUS_OK
WriteX 13495 262144 65536 65536 NT_STATUS_OK
WriteX 13495 327680 65536 65536 NT_STATUS_OK
WriteX 13495 393216 65536 65536 NT_STATUS_OK
WriteX 13495 458752 65536 65536 NT_STATUS_OK
WriteX 13495 524288 65536 65536 NT_STATUS_OK
WriteX 13495 589824 57598 57598 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13497 NT_STATUS_OK
WriteX 13497 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 258 NT_STATUS_OK
WriteX 13497 0 12543 12543 NT_STATUS_OK
Flush 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13503 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
ReadX 13503 1938 24 24 NT_STATUS_OK
ReadX 13503 1920 276 276 NT_STATUS_OK
ReadX 13503 1918 14 14 NT_STATUS_OK
ReadX 13503 1918 7 7 NT_STATUS_OK
ReadX 13503 1919 12 12 NT_STATUS_OK
ReadX 13503 1919 8 8 NT_STATUS_OK
ReadX 13503 1917 15 15 NT_STATUS_OK
ReadX 13503 0 16 16 NT_STATUS_OK
ReadX 13503 16 2048 2048 NT_STATUS_OK
ReadX 13503 2064 2048 2048 NT_STATUS_OK
ReadX 13503 257 2048 2048 NT_STATUS_OK
ReadX 13503 385 2048 2048 NT_STATUS_OK
ReadX 13503 513 2048 2048 NT_STATUS_OK
ReadX 13503 641 2048 2048 NT_STATUS_OK
ReadX 13503 769 2048 2048 NT_STATUS_OK
ReadX 13503 897 2048 2048 NT_STATUS_OK
ReadX 13503 1025 2048 2048 NT_STATUS_OK
ReadX 13503 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13508 NT_STATUS_OK
WriteX 13508 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13508 258 NT_STATUS_OK
WriteX 13508 0 11588 11588 NT_STATUS_OK
Flush 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 4096 4096 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13513 NT_STATUS_OK
WriteX 13513 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13513 258 NT_STATUS_OK
WriteX 13513 0 11615 11615 NT_STATUS_OK
Flush 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13522 NT_STATUS_OK
WriteX 13522 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
WriteX 13522 0 65536 65536 NT_STATUS_OK
WriteX 13522 65536 16050 16050 NT_STATUS_OK
Close 13522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13502 1939 64 64 NT_STATUS_OK
ReadX 13502 128 248 248 NT_STATUS_OK
ReadX 13502 128 568 568 NT_STATUS_OK
ReadX 13502 3872 1536 1536 NT_STATUS_OK
ReadX 13502 3456 2560 2560 NT_STATUS_OK
ReadX 13502 3136 512 512 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
ReadX 13502 3264 3072 3072 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 3616 4096 4096 NT_STATUS_OK
ReadX 13502 1939 64 64 NT_STATUS_OK
ReadX 13502 128 248 248 NT_STATUS_OK
ReadX 13502 128 608 608 NT_STATUS_OK
ReadX 13502 2858 1024 1024 NT_STATUS_OK
ReadX 13502 2810 4096 4096 NT_STATUS_OK
ReadX 13502 2826 4096 4096 NT_STATUS_OK
ReadX 13502 2580 2048 2048 NT_STATUS_OK
ReadX 13502 2800 2560 2560 NT_STATUS_OK
ReadX 13502 2100 4096 4096 NT_STATUS_OK
ReadX 13502 2084 4096 4096 NT_STATUS_OK
ReadX 13502 868 4096 4096 NT_STATUS_OK
ReadX 13502 2324 4096 4096 NT_STATUS_OK
ReadX 13502 884 4096 4096 NT_STATUS_OK
ReadX 13502 2604 1024 1024 NT_STATUS_OK
ReadX 13502 580 4096 4096 NT_STATUS_OK
ReadX 13502 596 4096 4096 NT_STATUS_OK
ReadX 13502 2752 4096 4096 NT_STATUS_OK
ReadX 13502 2842 1024 1024 NT_STATUS_OK
ReadX 13502 660 4096 4096 NT_STATUS_OK
ReadX 13502 2720 4096 4096 NT_STATUS_OK
ReadX 13502 2736 4096 4096 NT_STATUS_OK
ReadX 13502 628 4096 4096 NT_STATUS_OK
ReadX 13502 2704 4096 4096 NT_STATUS_OK
ReadX 13502 1556 4096 4096 NT_STATUS_OK
ReadX 13502 576 4096 4096 NT_STATUS_OK
ReadX 13502 3168 1536 1536 NT_STATUS_OK
ReadX 13502 832 4096 4096 NT_STATUS_OK
ReadX 13502 1088 4096 4096 NT_STATUS_OK
ReadX 13502 1344 4096 4096 NT_STATUS_OK
ReadX 13502 1600 4096 4096 NT_STATUS_OK
ReadX 13502 1856 4096 4096 NT_STATUS_OK
ReadX 13502 2112 4096 4096 NT_STATUS_OK
ReadX 13502 1892 4096 4096 NT_STATUS_OK
ReadX 13502 820 4096 4096 NT_STATUS_OK
ReadX 13502 788 4096 4096 NT_STATUS_OK
ReadX 13502 1604 4096 4096 NT_STATUS_OK
ReadX 13502 3648 4096 4096 NT_STATUS_OK
ReadX 13502 2608 4096 4096 NT_STATUS_OK
ReadX 13502 548 4096 4096 NT_STATUS_OK
ReadX 13502 740 4096 4096 NT_STATUS_OK
ReadX 13502 1344 4096 4096 NT_STATUS_OK
ReadX 13502 3392 4096 4096 NT_STATUS_OK
ReadX 13502 3904 4096 4096 NT_STATUS_OK
ReadX 13502 644 4096 4096 NT_STATUS_OK
ReadX 13502 676 4096 4096 NT_STATUS_OK
ReadX 13502 2688 4096 4096 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 900 4096 4096 NT_STATUS_OK
ReadX 13502 1908 4096 4096 NT_STATUS_OK
ReadX 13502 852 4096 4096 NT_STATUS_OK
ReadX 13502 724 4096 4096 NT_STATUS_OK
ReadX 13502 2292 4096 4096 NT_STATUS_OK
ReadX 13502 612 4096 4096 NT_STATUS_OK
ReadX 13502 388 4096 4096 NT_STATUS_OK
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 500 4096 4096 NT_STATUS_OK
ReadX 13502 356 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 576 4096 4096 NT_STATUS_OK
ReadX 13502 340 4096 4096 NT_STATUS_OK
ReadX 13502 420 4096 4096 NT_STATUS_OK
ReadX 13502 1600 4096 4096 NT_STATUS_OK
ReadX 13502 404 4096 4096 NT_STATUS_OK
ReadX 13502 1428 4096 4096 NT_STATUS_OK
ReadX 13502 2656 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 452 4096 4096 NT_STATUS_OK
ReadX 13502 692 4096 4096 NT_STATUS_OK
ReadX 13502 564 4096 4096 NT_STATUS_OK
ReadX 13502 372 4096 4096 NT_STATUS_OK
ReadX 13502 468 4096 4096 NT_STATUS_OK
ReadX 13502 484 4096 4096 NT_STATUS_OK
ReadX 13502 1088 4096 4096 NT_STATUS_OK
ReadX 13502 1924 4096 4096 NT_STATUS_OK
ReadX 13502 2768 4096 4096 NT_STATUS_OK
ReadX 13502 832 4096 4096 NT_STATUS_OK
ReadX 13502 836 4096 4096 NT_STATUS_OK
ReadX 13502 1856 4096 4096 NT_STATUS_OK
ReadX 13502 2640 4096 4096 NT_STATUS_OK
ReadX 13502 436 4096 4096 NT_STATUS_OK
ReadX 13502 1828 4096 4096 NT_STATUS_OK
ReadX 13502 804 4096 4096 NT_STATUS_OK
ReadX 13502 1860 4096 4096 NT_STATUS_OK
ReadX 13502 1812 4096 4096 NT_STATUS_OK
ReadX 13502 756 4096 4096 NT_STATUS_OK
ReadX 13502 1636 4096 4096 NT_STATUS_OK
ReadX 13502 772 4096 4096 NT_STATUS_OK
ReadX 13502 2036 4096 4096 NT_STATUS_OK
ReadX 13502 1220 4096 4096 NT_STATUS_OK
ReadX 13502 1652 4096 4096 NT_STATUS_OK
ReadX 13502 2588 4096 4096 NT_STATUS_OK
ReadX 13502 916 4096 4096 NT_STATUS_OK
ReadX 13502 260 4096 4096 NT_STATUS_OK
ReadX 13502 932 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 308 4096 4096 NT_STATUS_OK
ReadX 13502 292 4096 4096 NT_STATUS_OK
ReadX 13502 1140 4096 4096 NT_STATUS_OK
ReadX 13502 276 4096 4096 NT_STATUS_OK
ReadX 13502 2020 4096 4096 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
ReadX 13502 516 4096 4096 NT_STATUS_OK
ReadX 13502 1844 4096 4096 NT_STATUS_OK
ReadX 13502 1124 4096 4096 NT_STATUS_OK
ReadX 13502 3136 4096 4096 NT_STATUS_OK
ReadX 13502 324 4096 4096 NT_STATUS_OK
ReadX 13502 1156 4096 4096 NT_STATUS_OK
ReadX 13502 1172 4096 4096 NT_STATUS_OK
ReadX 13502 2112 4096 4096 NT_STATUS_OK
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 964 4096 4096 NT_STATUS_OK
ReadX 13502 980 4096 4096 NT_STATUS_OK
ReadX 13502 1012 4096 4096 NT_STATUS_OK
ReadX 13502 532 4096 4096 NT_STATUS_OK
ReadX 13502 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13502 1620 4096 4096 NT_STATUS_OK
ReadX 13502 1604 4096 4096 NT_STATUS_OK
ReadX 13502 2116 4096 4096 NT_STATUS_OK
ReadX 13502 2132 4096 4096 NT_STATUS_OK
ReadX 13502 2148 4096 4096 NT_STATUS_OK
ReadX 13502 2276 4096 4096 NT_STATUS_OK
ReadX 13502 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13527 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 1004 NT_STATUS_OK
Close 13482 NT_STATUS_OK
WriteX 13527 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13527 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1004 NT_STATUS_OK
Close 13484 NT_STATUS_OK
WriteX 13527 0 65536 65536 NT_STATUS_OK
WriteX 13527 65536 64850 64850 NT_STATUS_OK
Close 13527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13529 NT_STATUS_OK
WriteX 13529 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13529 258 NT_STATUS_OK
ReadX 13502 2068 4096 4096 NT_STATUS_OK
ReadX 13502 1588 4096 4096 NT_STATUS_OK
ReadX 13502 1572 4096 4096 NT_STATUS_OK
WriteX 13529 0 18630 18630 NT_STATUS_OK
Flush 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13502 612 4096 4096 NT_STATUS_OK
ReadX 13502 564 4096 4096 NT_STATUS_OK
ReadX 13502 1876 4096 4096 NT_STATUS_OK
ReadX 13502 628 4096 4096 NT_STATUS_OK
ReadX 13502 740 4096 4096 NT_STATUS_OK
ReadX 13502 724 4096 4096 NT_STATUS_OK
ReadX 13502 644 4096 4096 NT_STATUS_OK
ReadX 13502 2324 4096 4096 NT_STATUS_OK
ReadX 13502 660 4096 4096 NT_STATUS_OK
ReadX 13502 852 4096 4096 NT_STATUS_OK
ReadX 13502 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 580 4096 4096 NT_STATUS_OK
ReadX 13502 3136 512 512 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
Close 13502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 61440 4096 4096 NT_STATUS_OK
ReadX 13534 126976 4096 4096 NT_STATUS_OK
WriteX 13534 0 65536 65536 NT_STATUS_OK
WriteX 13534 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 61440 4096 4096 NT_STATUS_OK
ReadX 13535 126976 4096 4096 NT_STATUS_OK
ReadX 13535 192512 4096 4096 NT_STATUS_OK
ReadX 13535 258048 4096 4096 NT_STATUS_OK
WriteX 13535 0 65536 65536 NT_STATUS_OK
WriteX 13535 65536 65536 65536 NT_STATUS_OK
WriteX 13535 131072 65536 65536 NT_STATUS_OK
WriteX 13535 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 61440 4096 4096 NT_STATUS_OK
ReadX 13536 126976 4096 4096 NT_STATUS_OK
ReadX 13536 192512 4096 4096 NT_STATUS_OK
ReadX 13536 258048 4096 4096 NT_STATUS_OK
ReadX 13536 323584 4096 4096 NT_STATUS_OK
ReadX 13536 389120 4096 4096 NT_STATUS_OK
ReadX 13536 454656 4096 4096 NT_STATUS_OK
ReadX 13536 520192 4096 4096 NT_STATUS_OK
WriteX 13536 0 65536 65536 NT_STATUS_OK
WriteX 13536 65536 65536 65536 NT_STATUS_OK
WriteX 13536 131072 65536 65536 NT_STATUS_OK
WriteX 13536 196608 65536 65536 NT_STATUS_OK
WriteX 13536 262144 65536 65536 NT_STATUS_OK
WriteX 13536 327680 65536 65536 NT_STATUS_OK
WriteX 13536 393216 65536 65536 NT_STATUS_OK
WriteX 13536 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13538 NT_STATUS_OK
Close 13538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13539 NT_STATUS_OK
WriteX 13539 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13537 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13544 NT_STATUS_OK
WriteX 13544 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13544 258 NT_STATUS_OK
WriteX 13544 0 62591 62591 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13549 NT_STATUS_OK
WriteX 13549 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13549 258 NT_STATUS_OK
WriteX 13549 0 10845 10845 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13551 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13554 NT_STATUS_OK
WriteX 13554 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13554 258 NT_STATUS_OK
WriteX 13554 0 30118 30118 NT_STATUS_OK
Close 13554 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13539 0 64 64 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 61440 61440 NT_STATUS_OK
ReadX 13556 61440 4096 4096 NT_STATUS_OK
ReadX 13556 65536 61440 61440 NT_STATUS_OK
ReadX 13556 126976 4096 4096 NT_STATUS_OK
ReadX 13556 131072 61440 61440 NT_STATUS_OK
ReadX 13556 192512 4096 4096 NT_STATUS_OK
ReadX 13556 196608 61440 61440 NT_STATUS_OK
ReadX 13556 258048 4096 4096 NT_STATUS_OK
ReadX 13556 262144 61440 61440 NT_STATUS_OK
ReadX 13556 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 61440 61440 NT_STATUS_OK
ReadX 13557 61440 4096 4096 NT_STATUS_OK
ReadX 13557 65536 61440 61440 NT_STATUS_OK
ReadX 13557 126976 4096 4096 NT_STATUS_OK
ReadX 13557 131072 61440 61440 NT_STATUS_OK
ReadX 13557 192512 4096 4096 NT_STATUS_OK
ReadX 13557 196608 61440 61440 NT_STATUS_OK
ReadX 13557 258048 4096 4096 NT_STATUS_OK
ReadX 13557 262144 61440 61440 NT_STATUS_OK
ReadX 13557 323584 4096 4096 NT_STATUS_OK
ReadX 13557 327680 61440 61440 NT_STATUS_OK
ReadX 13557 389120 4096 4096 NT_STATUS_OK
ReadX 13557 393216 61440 61440 NT_STATUS_OK
ReadX 13557 454656 4096 4096 NT_STATUS_OK
ReadX 13557 458752 61440 61440 NT_STATUS_OK
ReadX 13557 520192 4096 4096 NT_STATUS_OK
ReadX 13557 524288 61440 61440 NT_STATUS_OK
ReadX 13557 585728 4096 4096 NT_STATUS_OK
ReadX 13557 589824 61440 61440 NT_STATUS_OK
ReadX 13557 651264 4096 4096 NT_STATUS_OK
ReadX 13557 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 61440 61440 NT_STATUS_OK
ReadX 13558 61440 4096 4096 NT_STATUS_OK
ReadX 13558 65536 61440 61440 NT_STATUS_OK
ReadX 13558 126976 4096 4096 NT_STATUS_OK
ReadX 13558 131072 61440 61440 NT_STATUS_OK
ReadX 13558 192512 4096 4096 NT_STATUS_OK
ReadX 13558 196608 61440 61440 NT_STATUS_OK
ReadX 13558 258048 4096 4096 NT_STATUS_OK
ReadX 13558 262144 61440 61440 NT_STATUS_OK
ReadX 13558 323584 4096 4096 NT_STATUS_OK
ReadX 13558 327680 61440 61440 NT_STATUS_OK
ReadX 13558 389120 4096 4096 NT_STATUS_OK
ReadX 13558 393216 61440 61440 NT_STATUS_OK
ReadX 13558 454656 4096 4096 NT_STATUS_OK
ReadX 13558 458752 61440 61440 NT_STATUS_OK
ReadX 13558 520192 4096 4096 NT_STATUS_OK
ReadX 13558 524288 61440 61440 NT_STATUS_OK
ReadX 13558 585728 4096 4096 NT_STATUS_OK
ReadX 13558 589824 61440 61440 NT_STATUS_OK
ReadX 13558 651264 4096 4096 NT_STATUS_OK
ReadX 13558 655360 61440 61440 NT_STATUS_OK
ReadX 13558 716800 4096 4096 NT_STATUS_OK
ReadX 13558 720896 61440 61440 NT_STATUS_OK
ReadX 13558 782336 4096 4096 NT_STATUS_OK
ReadX 13558 786432 61440 61440 NT_STATUS_OK
ReadX 13558 847872 4096 4096 NT_STATUS_OK
ReadX 13558 851968 61440 61440 NT_STATUS_OK
ReadX 13558 913408 4096 4096 NT_STATUS_OK
ReadX 13558 917504 61440 61440 NT_STATUS_OK
ReadX 13558 978944 4096 4096 NT_STATUS_OK
ReadX 13558 983040 61440 61440 NT_STATUS_OK
ReadX 13558 1044480 4096 4096 NT_STATUS_OK
ReadX 13558 1048576 61440 61440 NT_STATUS_OK
ReadX 13558 1110016 4096 4096 NT_STATUS_OK
ReadX 13558 1114112 61440 61440 NT_STATUS_OK
ReadX 13558 1175552 4096 4096 NT_STATUS_OK
ReadX 13558 1179648 61440 61440 NT_STATUS_OK
ReadX 13558 1241088 4096 4096 NT_STATUS_OK
ReadX 13558 1245184 61440 61440 NT_STATUS_OK
ReadX 13558 1306624 4096 4096 NT_STATUS_OK
ReadX 13558 1310720 61440 61440 NT_STATUS_OK
ReadX 13558 1372160 4096 4096 NT_STATUS_OK
ReadX 13558 1376256 61440 61440 NT_STATUS_OK
ReadX 13558 1437696 4096 4096 NT_STATUS_OK
ReadX 13558 1441792 61440 61440 NT_STATUS_OK
ReadX 13558 1503232 4096 4096 NT_STATUS_OK
ReadX 13558 1507328 61440 61440 NT_STATUS_OK
ReadX 13558 1568768 4096 4096 NT_STATUS_OK
ReadX 13558 1572864 61440 61440 NT_STATUS_OK
ReadX 13558 1634304 4096 4096 NT_STATUS_OK
ReadX 13558 1638400 61440 61440 NT_STATUS_OK
ReadX 13558 1699840 4096 4096 NT_STATUS_OK
ReadX 13558 1703936 61440 61440 NT_STATUS_OK
ReadX 13558 1765376 4096 4096 NT_STATUS_OK
ReadX 13558 1769472 61440 61440 NT_STATUS_OK
ReadX 13558 1830912 4096 4096 NT_STATUS_OK
ReadX 13558 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
ReadX 13563 4096 4096 4096 NT_STATUS_OK
ReadX 13563 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13563 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13567 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 8192 8192 NT_STATUS_OK
ReadX 13571 8192 8192 8192 NT_STATUS_OK
ReadX 13571 16384 8192 8192 NT_STATUS_OK
ReadX 13571 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13576 NT_STATUS_OK
WriteX 13576 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 258 NT_STATUS_OK
WriteX 13576 0 10438 10438 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13580 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13581 NT_STATUS_OK
Close 13581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
ReadX 13585 4096 4096 4096 NT_STATUS_OK
ReadX 13585 8192 4096 4096 NT_STATUS_OK
ReadX 13585 12288 8192 8192 NT_STATUS_OK
ReadX 13585 20480 8192 8192 NT_STATUS_OK
ReadX 13585 28672 8192 8192 NT_STATUS_OK
ReadX 13585 36864 8192 8192 NT_STATUS_OK
ReadX 13585 45056 8192 8192 NT_STATUS_OK
ReadX 13585 53248 8192 8192 NT_STATUS_OK
ReadX 13585 61440 8192 8192 NT_STATUS_OK
ReadX 13585 69632 8192 8192 NT_STATUS_OK
ReadX 13585 77824 8192 8192 NT_STATUS_OK
ReadX 13585 86016 8192 8192 NT_STATUS_OK
ReadX 13585 94208 8192 8192 NT_STATUS_OK
ReadX 13585 102400 8192 8192 NT_STATUS_OK
ReadX 13585 110592 8192 8192 NT_STATUS_OK
ReadX 13585 118784 8192 8192 NT_STATUS_OK
ReadX 13585 126976 8192 8192 NT_STATUS_OK
ReadX 13585 135168 8192 8192 NT_STATUS_OK
ReadX 13585 143360 8192 8192 NT_STATUS_OK
ReadX 13585 151552 8192 8192 NT_STATUS_OK
ReadX 13585 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13587 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13590 NT_STATUS_OK
WriteX 13590 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 258 NT_STATUS_OK
WriteX 13590 0 28489 28489 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13591 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13593 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 8192 8192 NT_STATUS_OK
ReadX 13597 8192 8192 8192 NT_STATUS_OK
ReadX 13597 16384 8192 8192 NT_STATUS_OK
ReadX 13597 24576 8192 8192 NT_STATUS_OK
ReadX 13597 32768 16384 16384 NT_STATUS_OK
ReadX 13597 49152 8192 8192 NT_STATUS_OK
ReadX 13597 57344 8192 8192 NT_STATUS_OK
ReadX 13597 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13602 NT_STATUS_OK
WriteX 13602 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
WriteX 13602 0 29253 29253 NT_STATUS_OK
Close 13602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 30183 30183 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13610 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13612 NT_STATUS_OK
WriteX 13612 0 510 510 NT_STATUS_OK
WriteX 13612 510 512 512 NT_STATUS_OK
WriteX 13612 1022 510 510 NT_STATUS_OK
WriteX 13612 1532 510 510 NT_STATUS_OK
WriteX 13612 2042 168 168 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
WriteX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 61440 4096 4096 NT_STATUS_OK
ReadX 13616 126976 4096 4096 NT_STATUS_OK
WriteX 13616 0 65536 65536 NT_STATUS_OK
WriteX 13616 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 61440 4096 4096 NT_STATUS_OK
ReadX 13617 126976 4096 4096 NT_STATUS_OK
ReadX 13617 192512 4096 4096 NT_STATUS_OK
ReadX 13617 258048 4096 4096 NT_STATUS_OK
WriteX 13617 0 65536 65536 NT_STATUS_OK
WriteX 13617 65536 65536 65536 NT_STATUS_OK
WriteX 13617 131072 65536 65536 NT_STATUS_OK
WriteX 13617 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 61440 4096 4096 NT_STATUS_OK
ReadX 13618 126976 4096 4096 NT_STATUS_OK
ReadX 13618 192512 4096 4096 NT_STATUS_OK
ReadX 13618 258048 4096 4096 NT_STATUS_OK
ReadX 13618 323584 4096 4096 NT_STATUS_OK
ReadX 13618 389120 4096 4096 NT_STATUS_OK
ReadX 13618 454656 4096 4096 NT_STATUS_OK
ReadX 13618 520192 4096 4096 NT_STATUS_OK
WriteX 13618 0 65536 65536 NT_STATUS_OK
WriteX 13618 65536 65536 65536 NT_STATUS_OK
WriteX 13618 131072 65536 65536 NT_STATUS_OK
WriteX 13618 196608 65536 65536 NT_STATUS_OK
WriteX 13618 262144 65536 65536 NT_STATUS_OK
WriteX 13618 327680 65536 65536 NT_STATUS_OK
WriteX 13618 393216 65536 65536 NT_STATUS_OK
WriteX 13618 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13653 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13681 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13687 NT_STATUS_OK
WriteX 13687 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13687 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13687 0 65536 65536 NT_STATUS_OK
WriteX 13687 65536 65536 65536 NT_STATUS_OK
WriteX 13687 131072 65536 65536 NT_STATUS_OK
WriteX 13687 196608 65536 65536 NT_STATUS_OK
WriteX 13687 262144 26634 26634 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
ReadX 13695 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13696 NT_STATUS_OK
Close 13696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13705 NT_STATUS_OK
Close 13705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13709 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13712 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13718 NT_STATUS_OK
Close 13718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13723 NT_STATUS_OK
Close 13723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13728 NT_STATUS_OK
Close 13728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13743 NT_STATUS_OK
Close 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13752 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13757 NT_STATUS_OK
Close 13757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
Close 13775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
Close 13789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
ReadX 13821 4096 4096 4096 NT_STATUS_OK
ReadX 13821 8192 4096 4096 NT_STATUS_OK
ReadX 13821 12288 4096 4096 NT_STATUS_OK
ReadX 13821 16384 4096 4096 NT_STATUS_OK
ReadX 13821 20480 4096 4096 NT_STATUS_OK
ReadX 13821 24576 4096 4096 NT_STATUS_OK
ReadX 13821 28672 4096 4096 NT_STATUS_OK
ReadX 13821 32768 4096 4096 NT_STATUS_OK
ReadX 13821 36864 4096 4096 NT_STATUS_OK
ReadX 13821 40960 4096 4096 NT_STATUS_OK
ReadX 13821 45056 4096 4096 NT_STATUS_OK
ReadX 13821 49152 4096 4096 NT_STATUS_OK
ReadX 13821 53248 4096 4096 NT_STATUS_OK
ReadX 13821 57344 4096 4096 NT_STATUS_OK
ReadX 13821 61440 4096 4096 NT_STATUS_OK
ReadX 13821 65536 4096 4096 NT_STATUS_OK
ReadX 13821 69632 4096 4096 NT_STATUS_OK
ReadX 13821 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13821 1004 NT_STATUS_OK
WriteX 13821 0 4096 4096 NT_STATUS_OK
Close 13821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13822 NT_STATUS_OK
SET_FILE_INFORMATION 13822 1004 NT_STATUS_OK
Close 13822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13823 NT_STATUS_OK
ReadX 13823 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13827 NT_STATUS_OK
WriteX 13827 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13827 258 NT_STATUS_OK
WriteX 13827 0 65536 65536 NT_STATUS_OK
WriteX 13827 65536 19979 19979 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
Close 13829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
Close 13831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
Close 13832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13833 1004 NT_STATUS_OK
WriteX 13833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 65536 65536 NT_STATUS_OK
WriteX 13839 65536 17654 17654 NT_STATUS_OK
Close 13839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13841 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
Close 13841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
ReadX 13845 4096 4096 4096 NT_STATUS_OK
ReadX 13845 8192 4096 4096 NT_STATUS_OK
ReadX 13845 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13845 16384 4096 4096 NT_STATUS_OK
ReadX 13845 20480 4096 4096 NT_STATUS_OK
ReadX 13845 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
Close 13846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
Close 13847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
WriteX 13848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13854 NT_STATUS_OK
WriteX 13854 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 258 NT_STATUS_OK
WriteX 13854 0 65536 65536 NT_STATUS_OK
WriteX 13854 65536 19490 19490 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
QUERY_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13856 NT_STATUS_OK
SET_FILE_INFORMATION 13856 1004 NT_STATUS_OK
Close 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13860 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13860 0 4096 4096 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 4096 4096 NT_STATUS_OK
ReadX 13862 4096 4096 4096 NT_STATUS_OK
ReadX 13862 8192 4096 4096 NT_STATUS_OK
ReadX 13862 12288 4096 4096 NT_STATUS_OK
ReadX 13862 16384 4096 4096 NT_STATUS_OK
ReadX 13862 20480 4096 4096 NT_STATUS_OK
ReadX 13862 24576 4096 4096 NT_STATUS_OK
ReadX 13862 28672 4096 4096 NT_STATUS_OK
ReadX 13862 32768 4096 4096 NT_STATUS_OK
ReadX 13862 36864 4096 4096 NT_STATUS_OK
ReadX 13862 40960 4096 4096 NT_STATUS_OK
ReadX 13862 45056 4096 4096 NT_STATUS_OK
ReadX 13862 49152 4096 4096 NT_STATUS_OK
ReadX 13862 53248 4096 4096 NT_STATUS_OK
ReadX 13862 57344 4096 4096 NT_STATUS_OK
ReadX 13862 61440 4096 4096 NT_STATUS_OK
ReadX 13862 65536 4096 4096 NT_STATUS_OK
ReadX 13862 69632 4096 4096 NT_STATUS_OK
ReadX 13862 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13862 1004 NT_STATUS_OK
WriteX 13862 0 4096 4096 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13863 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13868 NT_STATUS_OK
WriteX 13868 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
WriteX 13868 0 65536 65536 NT_STATUS_OK
WriteX 13868 65536 8866 8866 NT_STATUS_OK
Close 13868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 4096 4096 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Flush 13869 NT_STATUS_OK
SET_FILE_INFORMATION 13869 1004 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Flush 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13871 NT_STATUS_OK
ReadX 13871 0 4096 4096 NT_STATUS_OK
Close 13871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
Close 13872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13879 NT_STATUS_OK
WriteX 13879 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13879 258 NT_STATUS_OK
WriteX 13879 0 65536 65536 NT_STATUS_OK
WriteX 13879 65536 9298 9298 NT_STATUS_OK
Close 13879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
WriteX 13880 0 4096 4096 NT_STATUS_OK
Flush 13880 NT_STATUS_OK
SET_FILE_INFORMATION 13880 1004 NT_STATUS_OK
WriteX 13880 0 4096 4096 NT_STATUS_OK
Flush 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13881 NT_STATUS_OK
SET_FILE_INFORMATION 13881 1004 NT_STATUS_OK
Close 13881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13883 NT_STATUS_OK
Close 13883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13886 0 4096 4096 NT_STATUS_OK
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13887 4096 4096 4096 NT_STATUS_OK
ReadX 13887 8192 4096 4096 NT_STATUS_OK
ReadX 13887 12288 4096 4096 NT_STATUS_OK
ReadX 13887 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13890 1004 NT_STATUS_OK
WriteX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13896 NT_STATUS_OK
WriteX 13896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13896 258 NT_STATUS_OK
WriteX 13896 0 65536 65536 NT_STATUS_OK
WriteX 13896 65536 11540 11540 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
Flush 13897 NT_STATUS_OK
SET_FILE_INFORMATION 13897 1004 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
Flush 13897 NT_STATUS_OK
Close 13897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13898 NT_STATUS_OK
SET_FILE_INFORMATION 13898 1004 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 61440 4096 4096 NT_STATUS_OK
ReadX 13902 126976 4096 4096 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 61440 4096 4096 NT_STATUS_OK
ReadX 13903 126976 4096 4096 NT_STATUS_OK
ReadX 13903 192512 4096 4096 NT_STATUS_OK
ReadX 13903 258048 4096 4096 NT_STATUS_OK
WriteX 13903 0 65536 65536 NT_STATUS_OK
WriteX 13903 65536 65536 65536 NT_STATUS_OK
WriteX 13903 131072 65536 65536 NT_STATUS_OK
WriteX 13903 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 61440 4096 4096 NT_STATUS_OK
ReadX 13904 126976 4096 4096 NT_STATUS_OK
ReadX 13904 192512 4096 4096 NT_STATUS_OK
ReadX 13904 258048 4096 4096 NT_STATUS_OK
ReadX 13904 323584 4096 4096 NT_STATUS_OK
ReadX 13904 389120 4096 4096 NT_STATUS_OK
ReadX 13904 454656 4096 4096 NT_STATUS_OK
ReadX 13904 520192 4096 4096 NT_STATUS_OK
WriteX 13904 0 65536 65536 NT_STATUS_OK
WriteX 13904 65536 65536 65536 NT_STATUS_OK
WriteX 13904 131072 65536 65536 NT_STATUS_OK
WriteX 13904 196608 65536 65536 NT_STATUS_OK
WriteX 13904 262144 65536 65536 NT_STATUS_OK
WriteX 13904 327680 65536 65536 NT_STATUS_OK
WriteX 13904 393216 65536 65536 NT_STATUS_OK
WriteX 13904 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
ReadX 13905 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13906 NT_STATUS_OK
WriteX 13906 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13906 258 NT_STATUS_OK
WriteX 13906 0 53 53 NT_STATUS_OK
Close 13906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13905 8192 4096 4096 NT_STATUS_OK
ReadX 13905 12288 4096 4096 NT_STATUS_OK
WriteX 13909 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13909 258 NT_STATUS_OK
ReadX 13905 16384 4096 4096 NT_STATUS_OK
ReadX 13905 20480 4096 4096 NT_STATUS_OK
WriteX 13909 0 15360 15360 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
WriteX 13910 0 4096 4096 NT_STATUS_OK
Close 13910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13911 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13913 4096 4096 4096 NT_STATUS_OK
ReadX 13913 8192 4096 4096 NT_STATUS_OK
ReadX 13913 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
ReadX 13916 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
ReadX 13917 4096 4096 4096 NT_STATUS_OK
ReadX 13917 8192 4096 4096 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13918 NT_STATUS_OK
WriteX 13918 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 258 NT_STATUS_OK
WriteX 13918 0 15360 15360 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13922 NT_STATUS_OK
ReadX 13922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13923 NT_STATUS_OK
SET_FILE_INFORMATION 13923 1004 NT_STATUS_OK
Close 13923 NT_STATUS_OK
WriteX 13919 0 4096 4096 NT_STATUS_OK
Close 13919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
ReadX 13926 4096 4096 4096 NT_STATUS_OK
ReadX 13926 8192 4096 4096 NT_STATUS_OK
ReadX 13926 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13928 NT_STATUS_OK
WriteX 13928 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13928 258 NT_STATUS_OK
WriteX 13928 0 53 53 NT_STATUS_OK
Close 13928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13929 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13927 4096 4096 4096 NT_STATUS_OK
ReadX 13927 8192 4096 4096 NT_STATUS_OK
ReadX 13927 12288 4096 4096 NT_STATUS_OK
WriteX 13931 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 12006 12006 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13936 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13935 4096 4096 4096 NT_STATUS_OK
ReadX 13935 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13938 NT_STATUS_OK
WriteX 13938 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13938 258 NT_STATUS_OK
WriteX 13938 0 11991 11991 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13939 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13939 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13943 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
Close 13943 NT_STATUS_OK
WriteX 13939 0 4096 4096 NT_STATUS_OK
Close 13939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13946 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
ReadX 13946 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
WriteX 13946 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13946 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
Close 13922 NT_STATUS_OK
WriteX 13926 0 19054 19054 NT_STATUS_OK
WriteX 13946 0 12288 12288 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13949 NT_STATUS_OK
Close 13949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13951 NT_STATUS_OK
Close 13951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 61440 61440 NT_STATUS_OK
ReadX 13953 61440 4096 4096 NT_STATUS_OK
ReadX 13953 65536 61440 61440 NT_STATUS_OK
ReadX 13953 126976 4096 4096 NT_STATUS_OK
ReadX 13953 131072 61440 61440 NT_STATUS_OK
ReadX 13953 192512 4096 4096 NT_STATUS_OK
ReadX 13953 196608 61440 61440 NT_STATUS_OK
ReadX 13953 258048 4096 4096 NT_STATUS_OK
ReadX 13953 262144 61440 61440 NT_STATUS_OK
ReadX 13953 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 61440 61440 NT_STATUS_OK
ReadX 13954 61440 4096 4096 NT_STATUS_OK
ReadX 13954 65536 61440 61440 NT_STATUS_OK
ReadX 13954 126976 4096 4096 NT_STATUS_OK
ReadX 13954 131072 61440 61440 NT_STATUS_OK
ReadX 13954 192512 4096 4096 NT_STATUS_OK
ReadX 13954 196608 61440 61440 NT_STATUS_OK
ReadX 13954 258048 4096 4096 NT_STATUS_OK
ReadX 13954 262144 61440 61440 NT_STATUS_OK
ReadX 13954 323584 4096 4096 NT_STATUS_OK
ReadX 13954 327680 61440 61440 NT_STATUS_OK
ReadX 13954 389120 4096 4096 NT_STATUS_OK
ReadX 13954 393216 61440 61440 NT_STATUS_OK
ReadX 13954 454656 4096 4096 NT_STATUS_OK
ReadX 13954 458752 61440 61440 NT_STATUS_OK
ReadX 13954 520192 4096 4096 NT_STATUS_OK
ReadX 13954 524288 61440 61440 NT_STATUS_OK
ReadX 13954 585728 4096 4096 NT_STATUS_OK
ReadX 13954 589824 61440 61440 NT_STATUS_OK
ReadX 13954 651264 4096 4096 NT_STATUS_OK
ReadX 13954 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 61440 61440 NT_STATUS_OK
ReadX 13955 61440 4096 4096 NT_STATUS_OK
ReadX 13955 65536 61440 61440 NT_STATUS_OK
ReadX 13955 126976 4096 4096 NT_STATUS_OK
ReadX 13955 131072 61440 61440 NT_STATUS_OK
ReadX 13955 192512 4096 4096 NT_STATUS_OK
ReadX 13955 196608 61440 61440 NT_STATUS_OK
ReadX 13955 258048 4096 4096 NT_STATUS_OK
ReadX 13955 262144 61440 61440 NT_STATUS_OK
ReadX 13955 323584 4096 4096 NT_STATUS_OK
ReadX 13955 327680 61440 61440 NT_STATUS_OK
ReadX 13955 389120 4096 4096 NT_STATUS_OK
ReadX 13955 393216 61440 61440 NT_STATUS_OK
ReadX 13955 454656 4096 4096 NT_STATUS_OK
ReadX 13955 458752 61440 61440 NT_STATUS_OK
ReadX 13955 520192 4096 4096 NT_STATUS_OK
ReadX 13955 524288 61440 61440 NT_STATUS_OK
ReadX 13955 585728 4096 4096 NT_STATUS_OK
ReadX 13955 589824 61440 61440 NT_STATUS_OK
ReadX 13955 651264 4096 4096 NT_STATUS_OK
ReadX 13955 655360 61440 61440 NT_STATUS_OK
ReadX 13955 716800 4096 4096 NT_STATUS_OK
ReadX 13955 720896 61440 61440 NT_STATUS_OK
ReadX 13955 782336 4096 4096 NT_STATUS_OK
ReadX 13955 786432 61440 61440 NT_STATUS_OK
ReadX 13955 847872 4096 4096 NT_STATUS_OK
ReadX 13955 851968 61440 61440 NT_STATUS_OK
ReadX 13955 913408 4096 4096 NT_STATUS_OK
ReadX 13955 917504 61440 61440 NT_STATUS_OK
ReadX 13955 978944 4096 4096 NT_STATUS_OK
ReadX 13955 983040 61440 61440 NT_STATUS_OK
ReadX 13955 1044480 4096 4096 NT_STATUS_OK
ReadX 13955 1048576 61440 61440 NT_STATUS_OK
ReadX 13955 1110016 4096 4096 NT_STATUS_OK
ReadX 13955 1114112 61440 61440 NT_STATUS_OK
ReadX 13955 1175552 4096 4096 NT_STATUS_OK
ReadX 13955 1179648 61440 61440 NT_STATUS_OK
ReadX 13955 1241088 4096 4096 NT_STATUS_OK
ReadX 13955 1245184 61440 61440 NT_STATUS_OK
ReadX 13955 1306624 4096 4096 NT_STATUS_OK
ReadX 13955 1310720 61440 61440 NT_STATUS_OK
ReadX 13955 1372160 4096 4096 NT_STATUS_OK
ReadX 13955 1376256 61440 61440 NT_STATUS_OK
ReadX 13955 1437696 4096 4096 NT_STATUS_OK
ReadX 13955 1441792 61440 61440 NT_STATUS_OK
ReadX 13955 1503232 4096 4096 NT_STATUS_OK
ReadX 13955 1507328 61440 61440 NT_STATUS_OK
ReadX 13955 1568768 4096 4096 NT_STATUS_OK
ReadX 13955 1572864 61440 61440 NT_STATUS_OK
ReadX 13955 1634304 4096 4096 NT_STATUS_OK
ReadX 13955 1638400 61440 61440 NT_STATUS_OK
ReadX 13955 1699840 4096 4096 NT_STATUS_OK
ReadX 13955 1703936 61440 61440 NT_STATUS_OK
ReadX 13955 1765376 4096 4096 NT_STATUS_OK
ReadX 13955 1769472 61440 61440 NT_STATUS_OK
ReadX 13955 1830912 4096 4096 NT_STATUS_OK
ReadX 13955 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13962 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 1004 NT_STATUS_OK
WriteX 13962 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13964 NT_STATUS_OK
WriteX 13964 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 491 491 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13962 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13968 NT_STATUS_OK
WriteX 13968 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13968 258 NT_STATUS_OK
WriteX 13968 0 543 543 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13955 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Close 13958 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13981 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13982 NT_STATUS_OK
QUERY_FILE_INFORMATION 13982 1004 NT_STATUS_OK
WriteX 13982 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13982 258 NT_STATUS_OK
WriteX 13982 0 2048 2048 NT_STATUS_OK
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
Flush 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13988 NT_STATUS_OK
WriteX 13988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 2048 2048 NT_STATUS_OK
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13994 NT_STATUS_OK
WriteX 13994 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 258 NT_STATUS_OK
WriteX 13994 0 2048 2048 NT_STATUS_OK
Close 13994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 2048 2048 NT_STATUS_OK
ReadX 13973 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
WriteX 13973 0 8192 8192 NT_STATUS_OK
WriteX 13974 0 4096 4096 NT_STATUS_OK
WriteX 13975 0 4096 4096 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13999 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14011 NT_STATUS_OK
ReadX 14011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14019 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 1004 NT_STATUS_OK
WriteX 14019 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 258 NT_STATUS_OK
WriteX 14019 0 2048 2048 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14020 NT_STATUS_OK
ReadX 14020 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14027 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 1004 NT_STATUS_OK
WriteX 14027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 2048 2048 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
Flush 14020 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14022 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14030 NT_STATUS_OK
WriteX 14030 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14030 258 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14033 NT_STATUS_OK
WriteX 14033 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 258 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 14034 0 4096 4096 NT_STATUS_OK
Close 14031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14041 NT_STATUS_OK
WriteX 14041 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14041 258 NT_STATUS_OK
WriteX 14041 0 2048 2048 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14056 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14058 NT_STATUS_OK
QUERY_FILE_INFORMATION 14058 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14063 NT_STATUS_OK
ReadX 14063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14078 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 1004 NT_STATUS_OK
WriteX 14078 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 258 NT_STATUS_OK
WriteX 14078 0 2048 2048 NT_STATUS_OK
Close 14078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14080 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14090 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 1004 NT_STATUS_OK
WriteX 14090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 258 NT_STATUS_OK
WriteX 14090 0 2048 2048 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9838 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1004 NT_STATUS_OK
WriteX 9838 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 258 NT_STATUS_OK
WriteX 9838 0 2048 2048 NT_STATUS_OK
Close 9838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
Flush 14079 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
Flush 14091 NT_STATUS_OK
WriteX 9839 0 4096 4096 NT_STATUS_OK
Flush 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9839 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 4096 16384 16384 NT_STATUS_OK
ReadX 14061 4096 16384 16384 NT_STATUS_OK
ReadX 14093 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9841 NT_STATUS_OK
ReadX 9841 0 2048 2048 NT_STATUS_OK
WriteX 9841 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9842 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9841 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14093 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14063 NT_STATUS_OK
Close 14064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9844 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9846 NT_STATUS_OK
QUERY_FILE_INFORMATION 9846 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9849 NT_STATUS_OK
ReadX 9849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9851 NT_STATUS_OK
ReadX 9851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9853 NT_STATUS_OK
ReadX 9853 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9849 4096 16384 16384 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
WriteX 9850 0 4096 4096 NT_STATUS_OK
WriteX 9851 0 4096 4096 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9856 NT_STATUS_OK
ReadX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9857 NT_STATUS_OK
ReadX 9857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9858 NT_STATUS_OK
ReadX 9858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9860 NT_STATUS_OK
ReadX 9860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9861 NT_STATUS_OK
ReadX 9861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9862 NT_STATUS_OK
ReadX 9862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9863 NT_STATUS_OK
ReadX 9863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9864 NT_STATUS_OK
ReadX 9864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 8192 8192 NT_STATUS_OK
ReadX 9855 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9869 0 4096 4096 NT_STATUS_OK
ReadX 9869 4096 4096 4096 NT_STATUS_OK
ReadX 9869 8192 4096 4096 NT_STATUS_OK
WriteX 9855 0 4096 4096 NT_STATUS_OK
WriteX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
ReadX 9870 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
WriteX 9850 0 4096 4096 NT_STATUS_OK
WriteX 9851 0 4096 4096 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9875 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 1004 NT_STATUS_OK
WriteX 9875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
WriteX 9875 0 2048 2048 NT_STATUS_OK
Close 9875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9876 NT_STATUS_OK
ReadX 9876 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
ReadX 9878 4096 4096 4096 NT_STATUS_OK
WriteX 9878 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
ReadX 9880 4096 4096 4096 NT_STATUS_OK
WriteX 9880 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9881 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Close 9849 NT_STATUS_OK
Close 9850 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9852 NT_STATUS_OK
Close 9861 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9862 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Close 9864 NT_STATUS_OK
Close 9865 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9855 NT_STATUS_OK
Close 9856 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Close 9860 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Close 9858 NT_STATUS_OK
Close 9880 NT_STATUS_OK
Close 9869 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9883 0 4096 4096 NT_STATUS_OK
ReadX 9883 4096 4096 4096 NT_STATUS_OK
ReadX 9883 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9885 NT_STATUS_OK
ReadX 9885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9892 NT_STATUS_OK
ReadX 9892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9893 NT_STATUS_OK
ReadX 9893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9894 NT_STATUS_OK
ReadX 9894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
ReadX 9884 4096 16384 16384 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9895 NT_STATUS_OK
Close 9892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9891 NT_STATUS_OK
Close 9893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9894 NT_STATUS_OK
Close 9896 NT_STATUS_OK
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9897 NT_STATUS_OK
Close 9888 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
Close 9889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9898 NT_STATUS_OK
Close 9886 NT_STATUS_OK
ReadX 9898 0 4096 4096 NT_STATUS_OK
Close 9887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9899 NT_STATUS_OK
ReadX 9899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9900 NT_STATUS_OK
ReadX 9900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9901 NT_STATUS_OK
ReadX 9901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9907 NT_STATUS_OK
ReadX 9907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9909 NT_STATUS_OK
ReadX 9909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9914 NT_STATUS_OK
QUERY_FILE_INFORMATION 9914 1004 NT_STATUS_OK
WriteX 9914 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9914 258 NT_STATUS_OK
WriteX 9914 0 2048 2048 NT_STATUS_OK
Close 9914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9919 NT_STATUS_OK
Close 9919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9920 NT_STATUS_OK
QUERY_FILE_INFORMATION 9920 1004 NT_STATUS_OK
WriteX 9920 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9920 258 NT_STATUS_OK
WriteX 9920 0 2048 2048 NT_STATUS_OK
Close 9920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9897 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9922 NT_STATUS_OK
QUERY_FILE_INFORMATION 9922 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9901 NT_STATUS_OK
Close 9909 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9903 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Close 9907 NT_STATUS_OK
Close 9904 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Close 9898 NT_STATUS_OK
Close 9899 NT_STATUS_OK
Close 9900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9924 NT_STATUS_OK
QUERY_FILE_INFORMATION 9924 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 61440 4096 4096 NT_STATUS_OK
ReadX 9926 126976 4096 4096 NT_STATUS_OK
WriteX 9926 0 65536 65536 NT_STATUS_OK
WriteX 9926 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 61440 4096 4096 NT_STATUS_OK
ReadX 9927 126976 4096 4096 NT_STATUS_OK
ReadX 9927 192512 4096 4096 NT_STATUS_OK
ReadX 9927 258048 4096 4096 NT_STATUS_OK
WriteX 9927 0 65536 65536 NT_STATUS_OK
WriteX 9927 65536 65536 65536 NT_STATUS_OK
WriteX 9927 131072 65536 65536 NT_STATUS_OK
WriteX 9927 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 61440 4096 4096 NT_STATUS_OK
ReadX 9928 126976 4096 4096 NT_STATUS_OK
ReadX 9928 192512 4096 4096 NT_STATUS_OK
ReadX 9928 258048 4096 4096 NT_STATUS_OK
ReadX 9928 323584 4096 4096 NT_STATUS_OK
ReadX 9928 389120 4096 4096 NT_STATUS_OK
ReadX 9928 454656 4096 4096 NT_STATUS_OK
ReadX 9928 520192 4096 4096 NT_STATUS_OK
WriteX 9928 0 65536 65536 NT_STATUS_OK
WriteX 9928 65536 65536 65536 NT_STATUS_OK
WriteX 9928 131072 65536 65536 NT_STATUS_OK
WriteX 9928 196608 65536 65536 NT_STATUS_OK
WriteX 9928 262144 65536 65536 NT_STATUS_OK
WriteX 9928 327680 65536 65536 NT_STATUS_OK
WriteX 9928 393216 65536 65536 NT_STATUS_OK
WriteX 9928 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9929 NT_STATUS_OK
ReadX 9929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9929 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9929 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9929 8192 4096 4096 NT_STATUS_OK
ReadX 9929 12288 4096 4096 NT_STATUS_OK
ReadX 9929 16384 4096 4096 NT_STATUS_OK
ReadX 9929 20480 4096 4096 NT_STATUS_OK
ReadX 9929 24576 4096 4096 NT_STATUS_OK
ReadX 9929 28672 4096 4096 NT_STATUS_OK
ReadX 9929 32768 4096 4096 NT_STATUS_OK
ReadX 9929 36864 4096 4096 NT_STATUS_OK
ReadX 9929 40960 4096 4096 NT_STATUS_OK
ReadX 9929 45056 4096 4096 NT_STATUS_OK
ReadX 9929 49152 4096 4096 NT_STATUS_OK
ReadX 9929 53248 4096 4096 NT_STATUS_OK
ReadX 9929 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9929 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9930 NT_STATUS_OK
Close 9930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9932 NT_STATUS_OK
WriteX 9932 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 0 57088 57088 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
Flush 9932 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9933 NT_STATUS_OK
SET_FILE_INFORMATION 9933 1004 NT_STATUS_OK
Close 9933 NT_STATUS_OK
SET_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
Close 9932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9934 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9936 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9937 NT_STATUS_OK
WriteX 9937 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9937 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 51456 51456 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Flush 9937 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Close 9937 NT_STATUS_OK
Close 9936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9939 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9941 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 53077 53077 NT_STATUS_OK
Close 9946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9947 NT_STATUS_OK
WriteX 9947 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9947 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 65536 65536 NT_STATUS_OK
WriteX 9947 65536 1856 1856 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9949 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9951 NT_STATUS_OK
ReadX 9951 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9956 NT_STATUS_OK
WriteX 9956 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 258 NT_STATUS_OK
WriteX 9956 0 7983 7983 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 65536 65536 NT_STATUS_OK
WriteX 9961 262144 65536 65536 NT_STATUS_OK
WriteX 9961 327680 65536 65536 NT_STATUS_OK
WriteX 9961 393216 65536 65536 NT_STATUS_OK
WriteX 9961 458752 46731 46731 NT_STATUS_OK
Close 9961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9962 NT_STATUS_OK
WriteX 9962 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9951 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 65536 65536 NT_STATUS_OK
WriteX 9962 65536 22848 22848 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Close 9951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9966 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9967 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9967 1004 NT_STATUS_OK
ReadX 9967 8192 4096 4096 NT_STATUS_OK
ReadX 9967 12288 4096 4096 NT_STATUS_OK
ReadX 9967 16384 4096 4096 NT_STATUS_OK
ReadX 9967 20480 4096 4096 NT_STATUS_OK
ReadX 9967 24576 4096 4096 NT_STATUS_OK
ReadX 9967 28672 4096 4096 NT_STATUS_OK
ReadX 9967 32768 4096 4096 NT_STATUS_OK
ReadX 9967 36864 4096 4096 NT_STATUS_OK
ReadX 9967 40960 4096 4096 NT_STATUS_OK
ReadX 9967 45056 4096 4096 NT_STATUS_OK
ReadX 9967 49152 4096 4096 NT_STATUS_OK
ReadX 9967 53248 4096 4096 NT_STATUS_OK
ReadX 9967 57344 4096 4096 NT_STATUS_OK
ReadX 9967 61440 4096 4096 NT_STATUS_OK
ReadX 9967 65536 4096 4096 NT_STATUS_OK
ReadX 9967 69632 4096 4096 NT_STATUS_OK
ReadX 9967 73728 4096 4096 NT_STATUS_OK
ReadX 9967 77824 4096 4096 NT_STATUS_OK
ReadX 9967 81920 4096 4096 NT_STATUS_OK
ReadX 9967 86016 4096 4096 NT_STATUS_OK
ReadX 9967 90112 4096 4096 NT_STATUS_OK
ReadX 9967 94208 4096 4096 NT_STATUS_OK
ReadX 9967 98304 4096 4096 NT_STATUS_OK
ReadX 9967 102400 4096 4096 NT_STATUS_OK
ReadX 9967 106496 4096 4096 NT_STATUS_OK
ReadX 9967 110592 4096 4096 NT_STATUS_OK
ReadX 9967 114688 4096 4096 NT_STATUS_OK
ReadX 9967 118784 4096 4096 NT_STATUS_OK
ReadX 9967 122880 4096 4096 NT_STATUS_OK
ReadX 9967 126976 4096 4096 NT_STATUS_OK
ReadX 9967 131072 4096 4096 NT_STATUS_OK
ReadX 9967 135168 4096 4096 NT_STATUS_OK
ReadX 9967 139264 4096 4096 NT_STATUS_OK
ReadX 9967 143360 4096 4096 NT_STATUS_OK
ReadX 9967 147456 4096 4096 NT_STATUS_OK
ReadX 9967 151552 4096 4096 NT_STATUS_OK
ReadX 9967 155648 4096 4096 NT_STATUS_OK
ReadX 9967 159744 4096 4096 NT_STATUS_OK
ReadX 9967 163840 4096 4096 NT_STATUS_OK
ReadX 9967 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9967 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9971 NT_STATUS_OK
SET_FILE_INFORMATION 9971 1004 NT_STATUS_OK
Close 9971 NT_STATUS_OK
WriteX 9970 0 42388 42388 NT_STATUS_OK
Close 9970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
ReadX 9974 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
SET_FILE_INFORMATION 9975 1004 NT_STATUS_OK
WriteX 9975 0 42652 42652 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9977 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
ReadX 9979 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 49 49 NT_STATUS_OK
Close 9984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 61440 61440 NT_STATUS_OK
ReadX 9985 61440 4096 4096 NT_STATUS_OK
ReadX 9985 65536 61440 61440 NT_STATUS_OK
ReadX 9985 126976 4096 4096 NT_STATUS_OK
ReadX 9985 131072 61440 61440 NT_STATUS_OK
ReadX 9985 192512 4096 4096 NT_STATUS_OK
ReadX 9985 196608 61440 61440 NT_STATUS_OK
ReadX 9985 258048 4096 4096 NT_STATUS_OK
ReadX 9985 262144 61440 61440 NT_STATUS_OK
ReadX 9985 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 61440 61440 NT_STATUS_OK
ReadX 9986 61440 4096 4096 NT_STATUS_OK
ReadX 9986 65536 61440 61440 NT_STATUS_OK
ReadX 9986 126976 4096 4096 NT_STATUS_OK
ReadX 9986 131072 61440 61440 NT_STATUS_OK
ReadX 9986 192512 4096 4096 NT_STATUS_OK
ReadX 9986 196608 61440 61440 NT_STATUS_OK
ReadX 9986 258048 4096 4096 NT_STATUS_OK
ReadX 9986 262144 61440 61440 NT_STATUS_OK
ReadX 9986 323584 4096 4096 NT_STATUS_OK
ReadX 9986 327680 61440 61440 NT_STATUS_OK
ReadX 9986 389120 4096 4096 NT_STATUS_OK
ReadX 9986 393216 61440 61440 NT_STATUS_OK
ReadX 9986 454656 4096 4096 NT_STATUS_OK
ReadX 9986 458752 61440 61440 NT_STATUS_OK
ReadX 9986 520192 4096 4096 NT_STATUS_OK
ReadX 9986 524288 61440 61440 NT_STATUS_OK
ReadX 9986 585728 4096 4096 NT_STATUS_OK
ReadX 9986 589824 61440 61440 NT_STATUS_OK
ReadX 9986 651264 4096 4096 NT_STATUS_OK
ReadX 9986 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 61440 61440 NT_STATUS_OK
ReadX 9987 61440 4096 4096 NT_STATUS_OK
ReadX 9987 65536 61440 61440 NT_STATUS_OK
ReadX 9987 126976 4096 4096 NT_STATUS_OK
ReadX 9987 131072 61440 61440 NT_STATUS_OK
ReadX 9987 192512 4096 4096 NT_STATUS_OK
ReadX 9987 196608 61440 61440 NT_STATUS_OK
ReadX 9987 258048 4096 4096 NT_STATUS_OK
ReadX 9987 262144 61440 61440 NT_STATUS_OK
ReadX 9987 323584 4096 4096 NT_STATUS_OK
ReadX 9987 327680 61440 61440 NT_STATUS_OK
ReadX 9987 389120 4096 4096 NT_STATUS_OK
ReadX 9987 393216 61440 61440 NT_STATUS_OK
ReadX 9987 454656 4096 4096 NT_STATUS_OK
ReadX 9987 458752 61440 61440 NT_STATUS_OK
ReadX 9987 520192 4096 4096 NT_STATUS_OK
ReadX 9987 524288 61440 61440 NT_STATUS_OK
ReadX 9987 585728 4096 4096 NT_STATUS_OK
ReadX 9987 589824 61440 61440 NT_STATUS_OK
ReadX 9987 651264 4096 4096 NT_STATUS_OK
ReadX 9987 655360 61440 61440 NT_STATUS_OK
ReadX 9987 716800 4096 4096 NT_STATUS_OK
ReadX 9987 720896 61440 61440 NT_STATUS_OK
ReadX 9987 782336 4096 4096 NT_STATUS_OK
ReadX 9987 786432 61440 61440 NT_STATUS_OK
ReadX 9987 847872 4096 4096 NT_STATUS_OK
ReadX 9987 851968 61440 61440 NT_STATUS_OK
ReadX 9987 913408 4096 4096 NT_STATUS_OK
ReadX 9987 917504 61440 61440 NT_STATUS_OK
ReadX 9987 978944 4096 4096 NT_STATUS_OK
ReadX 9987 983040 61440 61440 NT_STATUS_OK
ReadX 9987 1044480 4096 4096 NT_STATUS_OK
ReadX 9987 1048576 61440 61440 NT_STATUS_OK
ReadX 9987 1110016 4096 4096 NT_STATUS_OK
ReadX 9987 1114112 61440 61440 NT_STATUS_OK
ReadX 9987 1175552 4096 4096 NT_STATUS_OK
ReadX 9987 1179648 61440 61440 NT_STATUS_OK
ReadX 9987 1241088 4096 4096 NT_STATUS_OK
ReadX 9987 1245184 61440 61440 NT_STATUS_OK
ReadX 9987 1306624 4096 4096 NT_STATUS_OK
ReadX 9987 1310720 61440 61440 NT_STATUS_OK
ReadX 9987 1372160 4096 4096 NT_STATUS_OK
ReadX 9987 1376256 61440 61440 NT_STATUS_OK
ReadX 9987 1437696 4096 4096 NT_STATUS_OK
ReadX 9987 1441792 61440 61440 NT_STATUS_OK
ReadX 9987 1503232 4096 4096 NT_STATUS_OK
ReadX 9987 1507328 61440 61440 NT_STATUS_OK
ReadX 9987 1568768 4096 4096 NT_STATUS_OK
ReadX 9987 1572864 61440 61440 NT_STATUS_OK
ReadX 9987 1634304 4096 4096 NT_STATUS_OK
ReadX 9987 1638400 61440 61440 NT_STATUS_OK
ReadX 9987 1699840 4096 4096 NT_STATUS_OK
ReadX 9987 1703936 61440 61440 NT_STATUS_OK
ReadX 9987 1765376 4096 4096 NT_STATUS_OK
ReadX 9987 1769472 61440 61440 NT_STATUS_OK
ReadX 9987 1830912 4096 4096 NT_STATUS_OK
ReadX 9987 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9989 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
ReadX 9989 2156 24 24 NT_STATUS_OK
ReadX 9989 2139 276 276 NT_STATUS_OK
ReadX 9989 2136 14 14 NT_STATUS_OK
ReadX 9989 2136 7 7 NT_STATUS_OK
ReadX 9989 2138 12 12 NT_STATUS_OK
ReadX 9989 2137 8 8 NT_STATUS_OK
ReadX 9989 2135 15 15 NT_STATUS_OK
ReadX 9989 0 16 16 NT_STATUS_OK
ReadX 9989 16 2048 2048 NT_STATUS_OK
ReadX 9989 2064 2048 2048 NT_STATUS_OK
ReadX 9989 257 2048 2048 NT_STATUS_OK
ReadX 9989 385 2048 2048 NT_STATUS_OK
ReadX 9989 513 2048 2048 NT_STATUS_OK
ReadX 9989 641 2048 2048 NT_STATUS_OK
ReadX 9989 769 2048 2048 NT_STATUS_OK
ReadX 9989 897 2048 2048 NT_STATUS_OK
ReadX 9989 1025 2048 2048 NT_STATUS_OK
ReadX 9989 1153 2048 2048 NT_STATUS_OK
ReadX 9989 1281 2048 2048 NT_STATUS_OK
ReadX 9989 1409 2048 2048 NT_STATUS_OK
ReadX 9989 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9987 NT_STATUS_OK
Close 9979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9994 NT_STATUS_OK
WriteX 9994 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9994 258 NT_STATUS_OK
WriteX 9994 0 10575 10575 NT_STATUS_OK
Flush 9994 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9995 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
Close 9989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9999 NT_STATUS_OK
LockX 9999 2147483538 1 NT_STATUS_OK
UnlockX 9999 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
ReadX 9999 0 512 512 NT_STATUS_OK
ReadX 9999 512 512 512 NT_STATUS_OK
ReadX 9999 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1004 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10000 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 1005 NT_STATUS_OK
ReadX 10000 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10001 NT_STATUS_OK
LockX 10001 2147483538 1 NT_STATUS_OK
UnlockX 10001 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10001 1005 NT_STATUS_OK
ReadX 10001 0 512 512 NT_STATUS_OK
ReadX 10001 512 512 512 NT_STATUS_OK
ReadX 10001 1024 512 512 NT_STATUS_OK
ReadX 10001 288 20 20 NT_STATUS_OK
ReadX 10001 308 2084 2084 NT_STATUS_OK
ReadX 10001 388 2084 2084 NT_STATUS_OK
ReadX 10001 388 2084 2084 NT_STATUS_OK
ReadX 9988 2157 1386 1386 NT_STATUS_OK
ReadX 10001 2472 399 399 NT_STATUS_OK
ReadX 10001 3072 1536 1536 NT_STATUS_OK
ReadX 10001 544 149 149 NT_STATUS_OK
ReadX 10001 693 485 485 NT_STATUS_OK
Close 10001 NT_STATUS_OK
ReadX 9988 2157 4096 4096 NT_STATUS_OK
ReadX 9988 6253 4096 4096 NT_STATUS_OK
ReadX 9988 10349 4096 4096 NT_STATUS_OK
ReadX 9988 14445 4096 4096 NT_STATUS_OK
ReadX 9988 18541 4096 4096 NT_STATUS_OK
ReadX 9988 22637 256 256 NT_STATUS_OK
ReadX 9988 22893 4096 4096 NT_STATUS_OK
ReadX 9988 26989 4096 4096 NT_STATUS_OK
ReadX 9988 31085 4096 4096 NT_STATUS_OK
ReadX 9988 35181 4096 4096 NT_STATUS_OK
ReadX 9988 39277 4096 4096 NT_STATUS_OK
ReadX 9988 43373 4096 4096 NT_STATUS_OK
ReadX 9988 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9988 2157 1024 1024 NT_STATUS_OK
ReadX 9988 1667 4688 4688 NT_STATUS_OK
ReadX 9988 6355 3516 3516 NT_STATUS_OK
ReadX 9988 9871 16384 16384 NT_STATUS_OK
ReadX 9988 26255 3771 3771 NT_STATUS_OK
ReadX 9988 30026 2048 2048 NT_STATUS_OK
ReadX 9988 32074 1024 1024 NT_STATUS_OK
ReadX 9988 33098 6652 6652 NT_STATUS_OK
ReadX 9988 39750 16384 16384 NT_STATUS_OK
ReadX 9988 56134 10496 10496 NT_STATUS_OK
ReadX 9988 66630 1784 1784 NT_STATUS_OK
ReadX 9988 68414 90 90 NT_STATUS_OK
ReadX 9988 68504 273 273 NT_STATUS_OK
ReadX 9988 68777 1600 1600 NT_STATUS_OK
ReadX 9988 70377 640 640 NT_STATUS_OK
ReadX 9988 71017 1280 1280 NT_STATUS_OK
ReadX 9988 72297 8464 8464 NT_STATUS_OK
ReadX 9988 80761 158 158 NT_STATUS_OK
ReadX 9988 80919 912 912 NT_STATUS_OK
ReadX 9988 81831 1980 1980 NT_STATUS_OK
ReadX 9988 83811 2256 2256 NT_STATUS_OK
ReadX 9988 86067 400 400 NT_STATUS_OK
ReadX 9988 86467 252 252 NT_STATUS_OK
ReadX 9988 86719 42 42 NT_STATUS_OK
ReadX 9988 86761 725 725 NT_STATUS_OK
ReadX 9988 2009 512 512 NT_STATUS_OK
ReadX 9988 3895 9 9 NT_STATUS_OK
ReadX 9988 3781 46 46 NT_STATUS_OK
ReadX 9988 4059 92 92 NT_STATUS_OK
ReadX 9988 3781 92 92 NT_STATUS_OK
ReadX 9988 3986 184 184 NT_STATUS_OK
ReadX 9988 3987 16384 16384 NT_STATUS_OK
ReadX 9988 3902 16384 16384 NT_STATUS_OK
ReadX 9988 3781 10240 10240 NT_STATUS_OK
ReadX 9988 3821 16384 16384 NT_STATUS_OK
ReadX 9988 3891 935 935 NT_STATUS_OK
ReadX 9988 4060 10240 10240 NT_STATUS_OK
ReadX 9988 4059 184 184 NT_STATUS_OK
ReadX 9988 256 184 184 NT_STATUS_OK
ReadX 9988 256 1026 1026 NT_STATUS_OK
ReadX 9988 3901 326 326 NT_STATUS_OK
ReadX 9988 3899 652 652 NT_STATUS_OK
ReadX 9988 256 2 2 NT_STATUS_OK
ReadX 9988 258 4948 4948 NT_STATUS_OK
Close 9988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10006 NT_STATUS_OK
WriteX 10006 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10006 258 NT_STATUS_OK
WriteX 10006 0 65536 65536 NT_STATUS_OK
WriteX 10006 65536 65536 65536 NT_STATUS_OK
WriteX 10006 131072 65536 65536 NT_STATUS_OK
WriteX 10006 196608 65536 65536 NT_STATUS_OK
WriteX 10006 262144 65536 65536 NT_STATUS_OK
WriteX 10006 327680 65536 65536 NT_STATUS_OK
WriteX 10006 393216 65536 65536 NT_STATUS_OK
WriteX 10006 458752 65536 65536 NT_STATUS_OK
WriteX 10006 524288 65536 65536 NT_STATUS_OK
WriteX 10006 589824 35257 35257 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10011 NT_STATUS_OK
WriteX 10011 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
WriteX 10011 131072 65536 65536 NT_STATUS_OK
WriteX 10011 196608 65536 65536 NT_STATUS_OK
WriteX 10011 262144 65536 65536 NT_STATUS_OK
WriteX 10011 327680 65536 65536 NT_STATUS_OK
WriteX 10011 393216 65536 65536 NT_STATUS_OK
WriteX 10011 458752 65536 65536 NT_STATUS_OK
WriteX 10011 524288 65536 65536 NT_STATUS_OK
WriteX 10011 589824 57598 57598 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
WriteX 10013 0 12543 12543 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
Close 10013 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10015 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
ReadX 10019 1938 24 24 NT_STATUS_OK
ReadX 10019 1920 276 276 NT_STATUS_OK
ReadX 10019 1918 14 14 NT_STATUS_OK
ReadX 10019 1918 7 7 NT_STATUS_OK
ReadX 10019 1919 12 12 NT_STATUS_OK
ReadX 10019 1919 8 8 NT_STATUS_OK
ReadX 10019 1917 15 15 NT_STATUS_OK
ReadX 10019 0 16 16 NT_STATUS_OK
ReadX 10019 16 2048 2048 NT_STATUS_OK
ReadX 10019 2064 2048 2048 NT_STATUS_OK
ReadX 10019 257 2048 2048 NT_STATUS_OK
ReadX 10019 385 2048 2048 NT_STATUS_OK
ReadX 10019 513 2048 2048 NT_STATUS_OK
ReadX 10019 641 2048 2048 NT_STATUS_OK
ReadX 10019 769 2048 2048 NT_STATUS_OK
ReadX 10019 897 2048 2048 NT_STATUS_OK
ReadX 10019 1025 2048 2048 NT_STATUS_OK
ReadX 10019 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10024 NT_STATUS_OK
WriteX 10024 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10024 258 NT_STATUS_OK
WriteX 10024 0 11588 11588 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10025 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10027 NT_STATUS_OK
ReadX 10027 0 4096 4096 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10029 NT_STATUS_OK
WriteX 10029 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10029 258 NT_STATUS_OK
WriteX 10029 0 11615 11615 NT_STATUS_OK
Flush 10029 NT_STATUS_OK
Close 10029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10038 NT_STATUS_OK
WriteX 10038 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 16050 16050 NT_STATUS_OK
Close 10038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10018 1939 64 64 NT_STATUS_OK
ReadX 10018 128 248 248 NT_STATUS_OK
ReadX 10018 128 568 568 NT_STATUS_OK
ReadX 10018 3872 1536 1536 NT_STATUS_OK
ReadX 10018 3456 2560 2560 NT_STATUS_OK
ReadX 10018 3136 512 512 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
ReadX 10018 3264 3072 3072 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 3616 4096 4096 NT_STATUS_OK
ReadX 10018 1939 64 64 NT_STATUS_OK
ReadX 10018 128 248 248 NT_STATUS_OK
ReadX 10018 128 608 608 NT_STATUS_OK
ReadX 10018 2858 1024 1024 NT_STATUS_OK
ReadX 10018 2810 4096 4096 NT_STATUS_OK
ReadX 10018 2826 4096 4096 NT_STATUS_OK
ReadX 10018 2580 2048 2048 NT_STATUS_OK
ReadX 10018 2800 2560 2560 NT_STATUS_OK
ReadX 10018 2100 4096 4096 NT_STATUS_OK
ReadX 10018 2084 4096 4096 NT_STATUS_OK
ReadX 10018 868 4096 4096 NT_STATUS_OK
ReadX 10018 2324 4096 4096 NT_STATUS_OK
ReadX 10018 884 4096 4096 NT_STATUS_OK
ReadX 10018 2604 1024 1024 NT_STATUS_OK
ReadX 10018 580 4096 4096 NT_STATUS_OK
ReadX 10018 596 4096 4096 NT_STATUS_OK
ReadX 10018 2752 4096 4096 NT_STATUS_OK
ReadX 10018 2842 1024 1024 NT_STATUS_OK
ReadX 10018 660 4096 4096 NT_STATUS_OK
ReadX 10018 2720 4096 4096 NT_STATUS_OK
ReadX 10018 2736 4096 4096 NT_STATUS_OK
ReadX 10018 628 4096 4096 NT_STATUS_OK
ReadX 10018 2704 4096 4096 NT_STATUS_OK
ReadX 10018 1556 4096 4096 NT_STATUS_OK
ReadX 10018 576 4096 4096 NT_STATUS_OK
ReadX 10018 3168 1536 1536 NT_STATUS_OK
ReadX 10018 832 4096 4096 NT_STATUS_OK
ReadX 10018 1088 4096 4096 NT_STATUS_OK
ReadX 10018 1344 4096 4096 NT_STATUS_OK
ReadX 10018 1600 4096 4096 NT_STATUS_OK
ReadX 10018 1856 4096 4096 NT_STATUS_OK
ReadX 10018 2112 4096 4096 NT_STATUS_OK
ReadX 10018 1892 4096 4096 NT_STATUS_OK
ReadX 10018 820 4096 4096 NT_STATUS_OK
ReadX 10018 788 4096 4096 NT_STATUS_OK
ReadX 10018 1604 4096 4096 NT_STATUS_OK
ReadX 10018 3648 4096 4096 NT_STATUS_OK
ReadX 10018 2608 4096 4096 NT_STATUS_OK
ReadX 10018 548 4096 4096 NT_STATUS_OK
ReadX 10018 740 4096 4096 NT_STATUS_OK
ReadX 10018 1344 4096 4096 NT_STATUS_OK
ReadX 10018 3392 4096 4096 NT_STATUS_OK
ReadX 10018 3904 4096 4096 NT_STATUS_OK
ReadX 10018 644 4096 4096 NT_STATUS_OK
ReadX 10018 676 4096 4096 NT_STATUS_OK
ReadX 10018 2688 4096 4096 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 900 4096 4096 NT_STATUS_OK
ReadX 10018 1908 4096 4096 NT_STATUS_OK
ReadX 10018 852 4096 4096 NT_STATUS_OK
ReadX 10018 724 4096 4096 NT_STATUS_OK
ReadX 10018 2292 4096 4096 NT_STATUS_OK
ReadX 10018 612 4096 4096 NT_STATUS_OK
ReadX 10018 388 4096 4096 NT_STATUS_OK
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 500 4096 4096 NT_STATUS_OK
ReadX 10018 356 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 576 4096 4096 NT_STATUS_OK
ReadX 10018 340 4096 4096 NT_STATUS_OK
ReadX 10018 420 4096 4096 NT_STATUS_OK
ReadX 10018 1600 4096 4096 NT_STATUS_OK
ReadX 10018 404 4096 4096 NT_STATUS_OK
ReadX 10018 1428 4096 4096 NT_STATUS_OK
ReadX 10018 2656 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 452 4096 4096 NT_STATUS_OK
ReadX 10018 692 4096 4096 NT_STATUS_OK
ReadX 10018 564 4096 4096 NT_STATUS_OK
ReadX 10018 372 4096 4096 NT_STATUS_OK
ReadX 10018 468 4096 4096 NT_STATUS_OK
ReadX 10018 484 4096 4096 NT_STATUS_OK
ReadX 10018 1088 4096 4096 NT_STATUS_OK
ReadX 10018 1924 4096 4096 NT_STATUS_OK
ReadX 10018 2768 4096 4096 NT_STATUS_OK
ReadX 10018 832 4096 4096 NT_STATUS_OK
ReadX 10018 836 4096 4096 NT_STATUS_OK
ReadX 10018 1856 4096 4096 NT_STATUS_OK
ReadX 10018 2640 4096 4096 NT_STATUS_OK
ReadX 10018 436 4096 4096 NT_STATUS_OK
ReadX 10018 1828 4096 4096 NT_STATUS_OK
ReadX 10018 804 4096 4096 NT_STATUS_OK
ReadX 10018 1860 4096 4096 NT_STATUS_OK
ReadX 10018 1812 4096 4096 NT_STATUS_OK
ReadX 10018 756 4096 4096 NT_STATUS_OK
ReadX 10018 1636 4096 4096 NT_STATUS_OK
ReadX 10018 772 4096 4096 NT_STATUS_OK
ReadX 10018 2036 4096 4096 NT_STATUS_OK
ReadX 10018 1220 4096 4096 NT_STATUS_OK
ReadX 10018 1652 4096 4096 NT_STATUS_OK
ReadX 10018 2588 4096 4096 NT_STATUS_OK
ReadX 10018 916 4096 4096 NT_STATUS_OK
ReadX 10018 260 4096 4096 NT_STATUS_OK
ReadX 10018 932 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 308 4096 4096 NT_STATUS_OK
ReadX 10018 292 4096 4096 NT_STATUS_OK
ReadX 10018 1140 4096 4096 NT_STATUS_OK
ReadX 10018 276 4096 4096 NT_STATUS_OK
ReadX 10018 2020 4096 4096 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
ReadX 10018 516 4096 4096 NT_STATUS_OK
ReadX 10018 1844 4096 4096 NT_STATUS_OK
ReadX 10018 1124 4096 4096 NT_STATUS_OK
ReadX 10018 3136 4096 4096 NT_STATUS_OK
ReadX 10018 324 4096 4096 NT_STATUS_OK
ReadX 10018 1156 4096 4096 NT_STATUS_OK
ReadX 10018 1172 4096 4096 NT_STATUS_OK
ReadX 10018 2112 4096 4096 NT_STATUS_OK
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 964 4096 4096 NT_STATUS_OK
ReadX 10018 980 4096 4096 NT_STATUS_OK
ReadX 10018 1012 4096 4096 NT_STATUS_OK
ReadX 10018 532 4096 4096 NT_STATUS_OK
ReadX 10018 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10018 1620 4096 4096 NT_STATUS_OK
ReadX 10018 1604 4096 4096 NT_STATUS_OK
ReadX 10018 2116 4096 4096 NT_STATUS_OK
ReadX 10018 2132 4096 4096 NT_STATUS_OK
ReadX 10018 2148 4096 4096 NT_STATUS_OK
ReadX 10018 2276 4096 4096 NT_STATUS_OK
ReadX 10018 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10043 NT_STATUS_OK
QUERY_FILE_INFORMATION 9998 1004 NT_STATUS_OK
Close 9998 NT_STATUS_OK
WriteX 10043 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10043 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 1004 NT_STATUS_OK
Close 10000 NT_STATUS_OK
WriteX 10043 0 65536 65536 NT_STATUS_OK
WriteX 10043 65536 64850 64850 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
ReadX 10018 2068 4096 4096 NT_STATUS_OK
ReadX 10018 1588 4096 4096 NT_STATUS_OK
ReadX 10018 1572 4096 4096 NT_STATUS_OK
WriteX 10045 0 18630 18630 NT_STATUS_OK
Flush 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10018 612 4096 4096 NT_STATUS_OK
ReadX 10018 564 4096 4096 NT_STATUS_OK
ReadX 10018 1876 4096 4096 NT_STATUS_OK
ReadX 10018 628 4096 4096 NT_STATUS_OK
ReadX 10018 740 4096 4096 NT_STATUS_OK
ReadX 10018 724 4096 4096 NT_STATUS_OK
ReadX 10018 644 4096 4096 NT_STATUS_OK
ReadX 10018 2324 4096 4096 NT_STATUS_OK
ReadX 10018 660 4096 4096 NT_STATUS_OK
ReadX 10018 852 4096 4096 NT_STATUS_OK
ReadX 10018 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 580 4096 4096 NT_STATUS_OK
ReadX 10018 3136 512 512 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
Close 10018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10050 NT_STATUS_OK
ReadX 10050 61440 4096 4096 NT_STATUS_OK
ReadX 10050 126976 4096 4096 NT_STATUS_OK
WriteX 10050 0 65536 65536 NT_STATUS_OK
WriteX 10050 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 61440 4096 4096 NT_STATUS_OK
ReadX 10051 126976 4096 4096 NT_STATUS_OK
ReadX 10051 192512 4096 4096 NT_STATUS_OK
ReadX 10051 258048 4096 4096 NT_STATUS_OK
WriteX 10051 0 65536 65536 NT_STATUS_OK
WriteX 10051 65536 65536 65536 NT_STATUS_OK
WriteX 10051 131072 65536 65536 NT_STATUS_OK
WriteX 10051 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10052 NT_STATUS_OK
ReadX 10052 61440 4096 4096 NT_STATUS_OK
ReadX 10052 126976 4096 4096 NT_STATUS_OK
ReadX 10052 192512 4096 4096 NT_STATUS_OK
ReadX 10052 258048 4096 4096 NT_STATUS_OK
ReadX 10052 323584 4096 4096 NT_STATUS_OK
ReadX 10052 389120 4096 4096 NT_STATUS_OK
ReadX 10052 454656 4096 4096 NT_STATUS_OK
ReadX 10052 520192 4096 4096 NT_STATUS_OK
WriteX 10052 0 65536 65536 NT_STATUS_OK
WriteX 10052 65536 65536 65536 NT_STATUS_OK
WriteX 10052 131072 65536 65536 NT_STATUS_OK
WriteX 10052 196608 65536 65536 NT_STATUS_OK
WriteX 10052 262144 65536 65536 NT_STATUS_OK
WriteX 10052 327680 65536 65536 NT_STATUS_OK
WriteX 10052 393216 65536 65536 NT_STATUS_OK
WriteX 10052 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10055 NT_STATUS_OK
WriteX 10055 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10055 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10053 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10057 NT_STATUS_OK
Close 10057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10050 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Close 10052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10060 NT_STATUS_OK
WriteX 10060 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10060 258 NT_STATUS_OK
WriteX 10060 0 62591 62591 NT_STATUS_OK
Close 10060 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10062 NT_STATUS_OK
Close 10062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10065 NT_STATUS_OK
WriteX 10065 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10065 258 NT_STATUS_OK
WriteX 10065 0 10845 10845 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10070 NT_STATUS_OK
WriteX 10070 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10070 258 NT_STATUS_OK
WriteX 10070 0 30118 30118 NT_STATUS_OK
Close 10070 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
WriteX 10055 0 64 64 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 61440 61440 NT_STATUS_OK
ReadX 10072 61440 4096 4096 NT_STATUS_OK
ReadX 10072 65536 61440 61440 NT_STATUS_OK
ReadX 10072 126976 4096 4096 NT_STATUS_OK
ReadX 10072 131072 61440 61440 NT_STATUS_OK
ReadX 10072 192512 4096 4096 NT_STATUS_OK
ReadX 10072 196608 61440 61440 NT_STATUS_OK
ReadX 10072 258048 4096 4096 NT_STATUS_OK
ReadX 10072 262144 61440 61440 NT_STATUS_OK
ReadX 10072 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 61440 61440 NT_STATUS_OK
ReadX 10073 61440 4096 4096 NT_STATUS_OK
ReadX 10073 65536 61440 61440 NT_STATUS_OK
ReadX 10073 126976 4096 4096 NT_STATUS_OK
ReadX 10073 131072 61440 61440 NT_STATUS_OK
ReadX 10073 192512 4096 4096 NT_STATUS_OK
ReadX 10073 196608 61440 61440 NT_STATUS_OK
ReadX 10073 258048 4096 4096 NT_STATUS_OK
ReadX 10073 262144 61440 61440 NT_STATUS_OK
ReadX 10073 323584 4096 4096 NT_STATUS_OK
ReadX 10073 327680 61440 61440 NT_STATUS_OK
ReadX 10073 389120 4096 4096 NT_STATUS_OK
ReadX 10073 393216 61440 61440 NT_STATUS_OK
ReadX 10073 454656 4096 4096 NT_STATUS_OK
ReadX 10073 458752 61440 61440 NT_STATUS_OK
ReadX 10073 520192 4096 4096 NT_STATUS_OK
ReadX 10073 524288 61440 61440 NT_STATUS_OK
ReadX 10073 585728 4096 4096 NT_STATUS_OK
ReadX 10073 589824 61440 61440 NT_STATUS_OK
ReadX 10073 651264 4096 4096 NT_STATUS_OK
ReadX 10073 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 61440 61440 NT_STATUS_OK
ReadX 10074 61440 4096 4096 NT_STATUS_OK
ReadX 10074 65536 61440 61440 NT_STATUS_OK
ReadX 10074 126976 4096 4096 NT_STATUS_OK
ReadX 10074 131072 61440 61440 NT_STATUS_OK
ReadX 10074 192512 4096 4096 NT_STATUS_OK
ReadX 10074 196608 61440 61440 NT_STATUS_OK
ReadX 10074 258048 4096 4096 NT_STATUS_OK
ReadX 10074 262144 61440 61440 NT_STATUS_OK
ReadX 10074 323584 4096 4096 NT_STATUS_OK
ReadX 10074 327680 61440 61440 NT_STATUS_OK
ReadX 10074 389120 4096 4096 NT_STATUS_OK
ReadX 10074 393216 61440 61440 NT_STATUS_OK
ReadX 10074 454656 4096 4096 NT_STATUS_OK
ReadX 10074 458752 61440 61440 NT_STATUS_OK
ReadX 10074 520192 4096 4096 NT_STATUS_OK
ReadX 10074 524288 61440 61440 NT_STATUS_OK
ReadX 10074 585728 4096 4096 NT_STATUS_OK
ReadX 10074 589824 61440 61440 NT_STATUS_OK
ReadX 10074 651264 4096 4096 NT_STATUS_OK
ReadX 10074 655360 61440 61440 NT_STATUS_OK
ReadX 10074 716800 4096 4096 NT_STATUS_OK
ReadX 10074 720896 61440 61440 NT_STATUS_OK
ReadX 10074 782336 4096 4096 NT_STATUS_OK
ReadX 10074 786432 61440 61440 NT_STATUS_OK
ReadX 10074 847872 4096 4096 NT_STATUS_OK
ReadX 10074 851968 61440 61440 NT_STATUS_OK
ReadX 10074 913408 4096 4096 NT_STATUS_OK
ReadX 10074 917504 61440 61440 NT_STATUS_OK
ReadX 10074 978944 4096 4096 NT_STATUS_OK
ReadX 10074 983040 61440 61440 NT_STATUS_OK
ReadX 10074 1044480 4096 4096 NT_STATUS_OK
ReadX 10074 1048576 61440 61440 NT_STATUS_OK
ReadX 10074 1110016 4096 4096 NT_STATUS_OK
ReadX 10074 1114112 61440 61440 NT_STATUS_OK
ReadX 10074 1175552 4096 4096 NT_STATUS_OK
ReadX 10074 1179648 61440 61440 NT_STATUS_OK
ReadX 10074 1241088 4096 4096 NT_STATUS_OK
ReadX 10074 1245184 61440 61440 NT_STATUS_OK
ReadX 10074 1306624 4096 4096 NT_STATUS_OK
ReadX 10074 1310720 61440 61440 NT_STATUS_OK
ReadX 10074 1372160 4096 4096 NT_STATUS_OK
ReadX 10074 1376256 61440 61440 NT_STATUS_OK
ReadX 10074 1437696 4096 4096 NT_STATUS_OK
ReadX 10074 1441792 61440 61440 NT_STATUS_OK
ReadX 10074 1503232 4096 4096 NT_STATUS_OK
ReadX 10074 1507328 61440 61440 NT_STATUS_OK
ReadX 10074 1568768 4096 4096 NT_STATUS_OK
ReadX 10074 1572864 61440 61440 NT_STATUS_OK
ReadX 10074 1634304 4096 4096 NT_STATUS_OK
ReadX 10074 1638400 61440 61440 NT_STATUS_OK
ReadX 10074 1699840 4096 4096 NT_STATUS_OK
ReadX 10074 1703936 61440 61440 NT_STATUS_OK
ReadX 10074 1765376 4096 4096 NT_STATUS_OK
ReadX 10074 1769472 61440 61440 NT_STATUS_OK
ReadX 10074 1830912 4096 4096 NT_STATUS_OK
ReadX 10074 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10072 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10077 NT_STATUS_OK
ReadX 10077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10078 NT_STATUS_OK
ReadX 10078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10079 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
ReadX 10079 4096 4096 4096 NT_STATUS_OK
ReadX 10079 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10080 NT_STATUS_OK
Close 10080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Close 10078 NT_STATUS_OK
Close 10079 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10083 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10084 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 0 8192 8192 NT_STATUS_OK
ReadX 10087 8192 8192 8192 NT_STATUS_OK
ReadX 10087 16384 8192 8192 NT_STATUS_OK
ReadX 10087 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10089 NT_STATUS_OK
Close 10089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10092 NT_STATUS_OK
WriteX 10092 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10092 258 NT_STATUS_OK
WriteX 10092 0 10438 10438 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10093 NT_STATUS_OK
Close 10093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10098 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
ReadX 10101 4096 4096 4096 NT_STATUS_OK
ReadX 10101 8192 4096 4096 NT_STATUS_OK
ReadX 10101 12288 8192 8192 NT_STATUS_OK
ReadX 10101 20480 8192 8192 NT_STATUS_OK
ReadX 10101 28672 8192 8192 NT_STATUS_OK
ReadX 10101 36864 8192 8192 NT_STATUS_OK
ReadX 10101 45056 8192 8192 NT_STATUS_OK
ReadX 10101 53248 8192 8192 NT_STATUS_OK
ReadX 10101 61440 8192 8192 NT_STATUS_OK
ReadX 10101 69632 8192 8192 NT_STATUS_OK
ReadX 10101 77824 8192 8192 NT_STATUS_OK
ReadX 10101 86016 8192 8192 NT_STATUS_OK
ReadX 10101 94208 8192 8192 NT_STATUS_OK
ReadX 10101 102400 8192 8192 NT_STATUS_OK
ReadX 10101 110592 8192 8192 NT_STATUS_OK
ReadX 10101 118784 8192 8192 NT_STATUS_OK
ReadX 10101 126976 8192 8192 NT_STATUS_OK
ReadX 10101 135168 8192 8192 NT_STATUS_OK
ReadX 10101 143360 8192 8192 NT_STATUS_OK
ReadX 10101 151552 8192 8192 NT_STATUS_OK
ReadX 10101 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10101 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10106 NT_STATUS_OK
WriteX 10106 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 258 NT_STATUS_OK
WriteX 10106 0 28489 28489 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10109 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10110 NT_STATUS_OK
Close 10110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 8192 8192 NT_STATUS_OK
ReadX 10113 8192 8192 8192 NT_STATUS_OK
ReadX 10113 16384 8192 8192 NT_STATUS_OK
ReadX 10113 24576 8192 8192 NT_STATUS_OK
ReadX 10113 32768 16384 16384 NT_STATUS_OK
ReadX 10113 49152 8192 8192 NT_STATUS_OK
ReadX 10113 57344 8192 8192 NT_STATUS_OK
ReadX 10113 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10118 NT_STATUS_OK
WriteX 10118 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10118 258 NT_STATUS_OK
WriteX 10118 0 29253 29253 NT_STATUS_OK
Close 10118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10119 NT_STATUS_OK
Close 10119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10122 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10125 NT_STATUS_OK
WriteX 10125 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10125 258 NT_STATUS_OK
WriteX 10125 0 30183 30183 NT_STATUS_OK
Close 10125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10128 NT_STATUS_OK
WriteX 10128 0 510 510 NT_STATUS_OK
WriteX 10128 510 512 512 NT_STATUS_OK
WriteX 10128 1022 510 510 NT_STATUS_OK
WriteX 10128 1532 510 510 NT_STATUS_OK
WriteX 10128 2042 168 168 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10131 NT_STATUS_OK
ReadX 10131 0 4096 4096 NT_STATUS_OK
WriteX 10131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10132 NT_STATUS_OK
ReadX 10132 61440 4096 4096 NT_STATUS_OK
ReadX 10132 126976 4096 4096 NT_STATUS_OK
WriteX 10132 0 65536 65536 NT_STATUS_OK
WriteX 10132 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10133 NT_STATUS_OK
ReadX 10133 61440 4096 4096 NT_STATUS_OK
ReadX 10133 126976 4096 4096 NT_STATUS_OK
ReadX 10133 192512 4096 4096 NT_STATUS_OK
ReadX 10133 258048 4096 4096 NT_STATUS_OK
WriteX 10133 0 65536 65536 NT_STATUS_OK
WriteX 10133 65536 65536 65536 NT_STATUS_OK
WriteX 10133 131072 65536 65536 NT_STATUS_OK
WriteX 10133 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 61440 4096 4096 NT_STATUS_OK
ReadX 10134 126976 4096 4096 NT_STATUS_OK
ReadX 10134 192512 4096 4096 NT_STATUS_OK
ReadX 10134 258048 4096 4096 NT_STATUS_OK
ReadX 10134 323584 4096 4096 NT_STATUS_OK
ReadX 10134 389120 4096 4096 NT_STATUS_OK
ReadX 10134 454656 4096 4096 NT_STATUS_OK
ReadX 10134 520192 4096 4096 NT_STATUS_OK
WriteX 10134 0 65536 65536 NT_STATUS_OK
WriteX 10134 65536 65536 65536 NT_STATUS_OK
WriteX 10134 131072 65536 65536 NT_STATUS_OK
WriteX 10134 196608 65536 65536 NT_STATUS_OK
WriteX 10134 262144 65536 65536 NT_STATUS_OK
WriteX 10134 327680 65536 65536 NT_STATUS_OK
WriteX 10134 393216 65536 65536 NT_STATUS_OK
WriteX 10134 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10131 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Close 10133 NT_STATUS_OK
Close 10134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10137 NT_STATUS_OK
Close 10137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10146 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10150 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10159 NT_STATUS_OK
Close 10159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10164 NT_STATUS_OK
Close 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10174 NT_STATUS_OK
Close 10174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10179 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10194 NT_STATUS_OK
Close 10194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10203 NT_STATUS_OK
WriteX 10203 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10203 0 65536 65536 NT_STATUS_OK
WriteX 10203 65536 65536 65536 NT_STATUS_OK
WriteX 10203 131072 65536 65536 NT_STATUS_OK
WriteX 10203 196608 65536 65536 NT_STATUS_OK
WriteX 10203 262144 26634 26634 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
ReadX 10211 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10216 NT_STATUS_OK
Close 10216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10225 NT_STATUS_OK
Close 10225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10244 NT_STATUS_OK
Close 10244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10254 NT_STATUS_OK
Close 10254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10259 NT_STATUS_OK
Close 10259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
Close 10290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
Close 10304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
Close 10305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10335 0 4096 4096 NT_STATUS_OK
Close 10335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
ReadX 10337 4096 4096 4096 NT_STATUS_OK
ReadX 10337 8192 4096 4096 NT_STATUS_OK
ReadX 10337 12288 4096 4096 NT_STATUS_OK
ReadX 10337 16384 4096 4096 NT_STATUS_OK
ReadX 10337 20480 4096 4096 NT_STATUS_OK
ReadX 10337 24576 4096 4096 NT_STATUS_OK
ReadX 10337 28672 4096 4096 NT_STATUS_OK
ReadX 10337 32768 4096 4096 NT_STATUS_OK
ReadX 10337 36864 4096 4096 NT_STATUS_OK
ReadX 10337 40960 4096 4096 NT_STATUS_OK
ReadX 10337 45056 4096 4096 NT_STATUS_OK
ReadX 10337 49152 4096 4096 NT_STATUS_OK
ReadX 10337 53248 4096 4096 NT_STATUS_OK
ReadX 10337 57344 4096 4096 NT_STATUS_OK
ReadX 10337 61440 4096 4096 NT_STATUS_OK
ReadX 10337 65536 4096 4096 NT_STATUS_OK
ReadX 10337 69632 4096 4096 NT_STATUS_OK
ReadX 10337 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10337 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10338 NT_STATUS_OK
SET_FILE_INFORMATION 10338 1004 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10340 NT_STATUS_OK
Close 10340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10343 NT_STATUS_OK
WriteX 10343 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 258 NT_STATUS_OK
WriteX 10343 0 65536 65536 NT_STATUS_OK
WriteX 10343 65536 19979 19979 NT_STATUS_OK
Close 10343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
QUERY_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
SET_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 4096 4096 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10349 1004 NT_STATUS_OK
WriteX 10349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10352 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10355 NT_STATUS_OK
WriteX 10355 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 258 NT_STATUS_OK
WriteX 10355 0 65536 65536 NT_STATUS_OK
WriteX 10355 65536 17654 17654 NT_STATUS_OK
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
QUERY_FILE_INFORMATION 10356 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
SET_FILE_INFORMATION 10356 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10357 NT_STATUS_OK
SET_FILE_INFORMATION 10357 1004 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10359 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 4096 4096 NT_STATUS_OK
ReadX 10361 4096 4096 4096 NT_STATUS_OK
ReadX 10361 8192 4096 4096 NT_STATUS_OK
ReadX 10361 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10361 16384 4096 4096 NT_STATUS_OK
ReadX 10361 20480 4096 4096 NT_STATUS_OK
ReadX 10361 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10364 1004 NT_STATUS_OK
WriteX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10370 NT_STATUS_OK
WriteX 10370 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10370 258 NT_STATUS_OK
WriteX 10370 0 65536 65536 NT_STATUS_OK
WriteX 10370 65536 19490 19490 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
QUERY_FILE_INFORMATION 10371 1004 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
SET_FILE_INFORMATION 10371 1004 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10372 NT_STATUS_OK
SET_FILE_INFORMATION 10372 1004 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10376 0 4096 4096 NT_STATUS_OK
Close 10376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
ReadX 10378 4096 4096 4096 NT_STATUS_OK
ReadX 10378 8192 4096 4096 NT_STATUS_OK
ReadX 10378 12288 4096 4096 NT_STATUS_OK
ReadX 10378 16384 4096 4096 NT_STATUS_OK
ReadX 10378 20480 4096 4096 NT_STATUS_OK
ReadX 10378 24576 4096 4096 NT_STATUS_OK
ReadX 10378 28672 4096 4096 NT_STATUS_OK
ReadX 10378 32768 4096 4096 NT_STATUS_OK
ReadX 10378 36864 4096 4096 NT_STATUS_OK
ReadX 10378 40960 4096 4096 NT_STATUS_OK
ReadX 10378 45056 4096 4096 NT_STATUS_OK
ReadX 10378 49152 4096 4096 NT_STATUS_OK
ReadX 10378 53248 4096 4096 NT_STATUS_OK
ReadX 10378 57344 4096 4096 NT_STATUS_OK
ReadX 10378 61440 4096 4096 NT_STATUS_OK
ReadX 10378 65536 4096 4096 NT_STATUS_OK
ReadX 10378 69632 4096 4096 NT_STATUS_OK
ReadX 10378 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10379 NT_STATUS_OK
SET_FILE_INFORMATION 10379 1004 NT_STATUS_OK
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10384 NT_STATUS_OK
WriteX 10384 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 65536 65536 NT_STATUS_OK
WriteX 10384 65536 8866 8866 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
WriteX 10385 0 4096 4096 NT_STATUS_OK
Flush 10385 NT_STATUS_OK
SET_FILE_INFORMATION 10385 1004 NT_STATUS_OK
WriteX 10385 0 4096 4096 NT_STATUS_OK
Flush 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10389 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10389 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10395 NT_STATUS_OK
WriteX 10395 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 65536 65536 NT_STATUS_OK
WriteX 10395 65536 9298 9298 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
Close 10396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10397 NT_STATUS_OK
SET_FILE_INFORMATION 10397 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10403 4096 4096 4096 NT_STATUS_OK
ReadX 10403 8192 4096 4096 NT_STATUS_OK
ReadX 10403 12288 4096 4096 NT_STATUS_OK
ReadX 10403 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
Close 10404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
Close 10405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10412 NT_STATUS_OK
WriteX 10412 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 258 NT_STATUS_OK
WriteX 10412 0 65536 65536 NT_STATUS_OK
WriteX 10412 65536 11540 11540 NT_STATUS_OK
Close 10412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
WriteX 10413 0 4096 4096 NT_STATUS_OK
Flush 10413 NT_STATUS_OK
SET_FILE_INFORMATION 10413 1004 NT_STATUS_OK
WriteX 10413 0 4096 4096 NT_STATUS_OK
Flush 10413 NT_STATUS_OK
Close 10413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10414 NT_STATUS_OK
SET_FILE_INFORMATION 10414 1004 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 61440 4096 4096 NT_STATUS_OK
ReadX 10418 126976 4096 4096 NT_STATUS_OK
WriteX 10418 0 65536 65536 NT_STATUS_OK
WriteX 10418 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 61440 4096 4096 NT_STATUS_OK
ReadX 10419 126976 4096 4096 NT_STATUS_OK
ReadX 10419 192512 4096 4096 NT_STATUS_OK
ReadX 10419 258048 4096 4096 NT_STATUS_OK
WriteX 10419 0 65536 65536 NT_STATUS_OK
WriteX 10419 65536 65536 65536 NT_STATUS_OK
WriteX 10419 131072 65536 65536 NT_STATUS_OK
WriteX 10419 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 61440 4096 4096 NT_STATUS_OK
ReadX 10420 126976 4096 4096 NT_STATUS_OK
ReadX 10420 192512 4096 4096 NT_STATUS_OK
ReadX 10420 258048 4096 4096 NT_STATUS_OK
ReadX 10420 323584 4096 4096 NT_STATUS_OK
ReadX 10420 389120 4096 4096 NT_STATUS_OK
ReadX 10420 454656 4096 4096 NT_STATUS_OK
ReadX 10420 520192 4096 4096 NT_STATUS_OK
WriteX 10420 0 65536 65536 NT_STATUS_OK
WriteX 10420 65536 65536 65536 NT_STATUS_OK
WriteX 10420 131072 65536 65536 NT_STATUS_OK
WriteX 10420 196608 65536 65536 NT_STATUS_OK
WriteX 10420 262144 65536 65536 NT_STATUS_OK
WriteX 10420 327680 65536 65536 NT_STATUS_OK
WriteX 10420 393216 65536 65536 NT_STATUS_OK
WriteX 10420 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
ReadX 10421 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10422 NT_STATUS_OK
WriteX 10422 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 258 NT_STATUS_OK
WriteX 10422 0 53 53 NT_STATUS_OK
Close 10422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10421 8192 4096 4096 NT_STATUS_OK
ReadX 10421 12288 4096 4096 NT_STATUS_OK
WriteX 10425 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 258 NT_STATUS_OK
ReadX 10421 16384 4096 4096 NT_STATUS_OK
ReadX 10421 20480 4096 4096 NT_STATUS_OK
WriteX 10425 0 15360 15360 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10426 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10426 1004 NT_STATUS_OK
WriteX 10426 0 4096 4096 NT_STATUS_OK
Close 10426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10427 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10429 NT_STATUS_OK
ReadX 10429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10429 4096 4096 4096 NT_STATUS_OK
ReadX 10429 8192 4096 4096 NT_STATUS_OK
ReadX 10429 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
ReadX 10432 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
ReadX 10433 4096 4096 4096 NT_STATUS_OK
ReadX 10433 8192 4096 4096 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10434 NT_STATUS_OK
WriteX 10434 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10434 258 NT_STATUS_OK
WriteX 10434 0 15360 15360 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10439 NT_STATUS_OK
SET_FILE_INFORMATION 10439 1004 NT_STATUS_OK
Close 10439 NT_STATUS_OK
WriteX 10435 0 4096 4096 NT_STATUS_OK
Close 10435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
ReadX 10442 4096 4096 4096 NT_STATUS_OK
ReadX 10442 8192 4096 4096 NT_STATUS_OK
ReadX 10442 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10443 NT_STATUS_OK
ReadX 10443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 53 53 NT_STATUS_OK
Close 10444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10443 4096 4096 4096 NT_STATUS_OK
ReadX 10443 8192 4096 4096 NT_STATUS_OK
ReadX 10443 12288 4096 4096 NT_STATUS_OK
WriteX 10447 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 258 NT_STATUS_OK
WriteX 10447 0 12006 12006 NT_STATUS_OK
Close 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10451 4096 4096 4096 NT_STATUS_OK
ReadX 10451 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10454 NT_STATUS_OK
WriteX 10454 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
WriteX 10454 0 11991 11991 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10459 NT_STATUS_OK
SET_FILE_INFORMATION 10459 1004 NT_STATUS_OK
Close 10459 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10462 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
ReadX 10462 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
WriteX 10462 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10462 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
Close 10438 NT_STATUS_OK
WriteX 10442 0 19054 19054 NT_STATUS_OK
WriteX 10462 0 12288 12288 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10465 NT_STATUS_OK
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 61440 61440 NT_STATUS_OK
ReadX 10469 61440 4096 4096 NT_STATUS_OK
ReadX 10469 65536 61440 61440 NT_STATUS_OK
ReadX 10469 126976 4096 4096 NT_STATUS_OK
ReadX 10469 131072 61440 61440 NT_STATUS_OK
ReadX 10469 192512 4096 4096 NT_STATUS_OK
ReadX 10469 196608 61440 61440 NT_STATUS_OK
ReadX 10469 258048 4096 4096 NT_STATUS_OK
ReadX 10469 262144 61440 61440 NT_STATUS_OK
ReadX 10469 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 61440 61440 NT_STATUS_OK
ReadX 10470 61440 4096 4096 NT_STATUS_OK
ReadX 10470 65536 61440 61440 NT_STATUS_OK
ReadX 10470 126976 4096 4096 NT_STATUS_OK
ReadX 10470 131072 61440 61440 NT_STATUS_OK
ReadX 10470 192512 4096 4096 NT_STATUS_OK
ReadX 10470 196608 61440 61440 NT_STATUS_OK
ReadX 10470 258048 4096 4096 NT_STATUS_OK
ReadX 10470 262144 61440 61440 NT_STATUS_OK
ReadX 10470 323584 4096 4096 NT_STATUS_OK
ReadX 10470 327680 61440 61440 NT_STATUS_OK
ReadX 10470 389120 4096 4096 NT_STATUS_OK
ReadX 10470 393216 61440 61440 NT_STATUS_OK
ReadX 10470 454656 4096 4096 NT_STATUS_OK
ReadX 10470 458752 61440 61440 NT_STATUS_OK
ReadX 10470 520192 4096 4096 NT_STATUS_OK
ReadX 10470 524288 61440 61440 NT_STATUS_OK
ReadX 10470 585728 4096 4096 NT_STATUS_OK
ReadX 10470 589824 61440 61440 NT_STATUS_OK
ReadX 10470 651264 4096 4096 NT_STATUS_OK
ReadX 10470 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 61440 61440 NT_STATUS_OK
ReadX 10471 61440 4096 4096 NT_STATUS_OK
ReadX 10471 65536 61440 61440 NT_STATUS_OK
ReadX 10471 126976 4096 4096 NT_STATUS_OK
ReadX 10471 131072 61440 61440 NT_STATUS_OK
ReadX 10471 192512 4096 4096 NT_STATUS_OK
ReadX 10471 196608 61440 61440 NT_STATUS_OK
ReadX 10471 258048 4096 4096 NT_STATUS_OK
ReadX 10471 262144 61440 61440 NT_STATUS_OK
ReadX 10471 323584 4096 4096 NT_STATUS_OK
ReadX 10471 327680 61440 61440 NT_STATUS_OK
ReadX 10471 389120 4096 4096 NT_STATUS_OK
ReadX 10471 393216 61440 61440 NT_STATUS_OK
ReadX 10471 454656 4096 4096 NT_STATUS_OK
ReadX 10471 458752 61440 61440 NT_STATUS_OK
ReadX 10471 520192 4096 4096 NT_STATUS_OK
ReadX 10471 524288 61440 61440 NT_STATUS_OK
ReadX 10471 585728 4096 4096 NT_STATUS_OK
ReadX 10471 589824 61440 61440 NT_STATUS_OK
ReadX 10471 651264 4096 4096 NT_STATUS_OK
ReadX 10471 655360 61440 61440 NT_STATUS_OK
ReadX 10471 716800 4096 4096 NT_STATUS_OK
ReadX 10471 720896 61440 61440 NT_STATUS_OK
ReadX 10471 782336 4096 4096 NT_STATUS_OK
ReadX 10471 786432 61440 61440 NT_STATUS_OK
ReadX 10471 847872 4096 4096 NT_STATUS_OK
ReadX 10471 851968 61440 61440 NT_STATUS_OK
ReadX 10471 913408 4096 4096 NT_STATUS_OK
ReadX 10471 917504 61440 61440 NT_STATUS_OK
ReadX 10471 978944 4096 4096 NT_STATUS_OK
ReadX 10471 983040 61440 61440 NT_STATUS_OK
ReadX 10471 1044480 4096 4096 NT_STATUS_OK
ReadX 10471 1048576 61440 61440 NT_STATUS_OK
ReadX 10471 1110016 4096 4096 NT_STATUS_OK
ReadX 10471 1114112 61440 61440 NT_STATUS_OK
ReadX 10471 1175552 4096 4096 NT_STATUS_OK
ReadX 10471 1179648 61440 61440 NT_STATUS_OK
ReadX 10471 1241088 4096 4096 NT_STATUS_OK
ReadX 10471 1245184 61440 61440 NT_STATUS_OK
ReadX 10471 1306624 4096 4096 NT_STATUS_OK
ReadX 10471 1310720 61440 61440 NT_STATUS_OK
ReadX 10471 1372160 4096 4096 NT_STATUS_OK
ReadX 10471 1376256 61440 61440 NT_STATUS_OK
ReadX 10471 1437696 4096 4096 NT_STATUS_OK
ReadX 10471 1441792 61440 61440 NT_STATUS_OK
ReadX 10471 1503232 4096 4096 NT_STATUS_OK
ReadX 10471 1507328 61440 61440 NT_STATUS_OK
ReadX 10471 1568768 4096 4096 NT_STATUS_OK
ReadX 10471 1572864 61440 61440 NT_STATUS_OK
ReadX 10471 1634304 4096 4096 NT_STATUS_OK
ReadX 10471 1638400 61440 61440 NT_STATUS_OK
ReadX 10471 1699840 4096 4096 NT_STATUS_OK
ReadX 10471 1703936 61440 61440 NT_STATUS_OK
ReadX 10471 1765376 4096 4096 NT_STATUS_OK
ReadX 10471 1769472 61440 61440 NT_STATUS_OK
ReadX 10471 1830912 4096 4096 NT_STATUS_OK
ReadX 10471 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10478 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 1004 NT_STATUS_OK
WriteX 10478 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10479 NT_STATUS_OK
Close 10479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10480 NT_STATUS_OK
WriteX 10480 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10480 258 NT_STATUS_OK
WriteX 10480 0 491 491 NT_STATUS_OK
Close 10480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10478 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10484 NT_STATUS_OK
WriteX 10484 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 258 NT_STATUS_OK
WriteX 10484 0 543 543 NT_STATUS_OK
Close 10484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10498 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 1004 NT_STATUS_OK
WriteX 10498 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 258 NT_STATUS_OK
WriteX 10498 0 2048 2048 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10499 0 4096 4096 NT_STATUS_OK
Flush 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10504 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10510 NT_STATUS_OK
WriteX 10510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 258 NT_STATUS_OK
WriteX 10510 0 2048 2048 NT_STATUS_OK
Close 10510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 2048 2048 NT_STATUS_OK
ReadX 10489 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
WriteX 10489 0 8192 8192 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
WriteX 10491 0 4096 4096 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10515 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10535 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 1004 NT_STATUS_OK
WriteX 10535 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 258 NT_STATUS_OK
WriteX 10535 0 2048 2048 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10536 NT_STATUS_OK
ReadX 10536 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10542 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10543 NT_STATUS_OK
QUERY_FILE_INFORMATION 10543 1004 NT_STATUS_OK
WriteX 10543 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10543 258 NT_STATUS_OK
WriteX 10543 0 2048 2048 NT_STATUS_OK
Close 10543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10536 0 4096 4096 NT_STATUS_OK
Flush 10536 NT_STATUS_OK
WriteX 10544 0 4096 4096 NT_STATUS_OK
Flush 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10536 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10538 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10545 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10546 NT_STATUS_OK
WriteX 10546 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10546 258 NT_STATUS_OK
WriteX 10546 0 4096 4096 NT_STATUS_OK
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10549 NT_STATUS_OK
WriteX 10549 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10549 258 NT_STATUS_OK
WriteX 10549 0 4096 4096 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10550 0 4096 4096 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10530 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10555 NT_STATUS_OK
ReadX 10555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10557 NT_STATUS_OK
WriteX 10557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
WriteX 10557 0 2048 2048 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10560 NT_STATUS_OK
ReadX 10560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10572 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10574 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10584 NT_STATUS_OK
ReadX 10584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10585 NT_STATUS_OK
ReadX 10585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10594 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1004 NT_STATUS_OK
WriteX 10594 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 2048 2048 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10599 NT_STATUS_OK
ReadX 10599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10606 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 1004 NT_STATUS_OK
WriteX 10606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 258 NT_STATUS_OK
WriteX 10606 0 2048 2048 NT_STATUS_OK
Close 10606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10614 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 1004 NT_STATUS_OK
WriteX 10614 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 2048 2048 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Flush 10595 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
Flush 10607 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10597 4096 16384 16384 NT_STATUS_OK
ReadX 10577 4096 16384 16384 NT_STATUS_OK
ReadX 10609 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10617 NT_STATUS_OK
ReadX 10617 0 2048 2048 NT_STATUS_OK
WriteX 10617 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10618 NT_STATUS_OK
QUERY_FILE_INFORMATION 10618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10599 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10584 NT_STATUS_OK
Close 10585 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10620 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10622 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10625 4096 16384 16384 NT_STATUS_OK
WriteX 10625 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10637 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10638 NT_STATUS_OK
ReadX 10638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10640 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 8192 8192 NT_STATUS_OK
ReadX 10631 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10645 0 4096 4096 NT_STATUS_OK
ReadX 10645 4096 4096 4096 NT_STATUS_OK
ReadX 10645 8192 4096 4096 NT_STATUS_OK
WriteX 10631 0 4096 4096 NT_STATUS_OK
WriteX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
ReadX 10646 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10625 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10651 NT_STATUS_OK
QUERY_FILE_INFORMATION 10651 1004 NT_STATUS_OK
WriteX 10651 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10651 258 NT_STATUS_OK
WriteX 10651 0 2048 2048 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10653 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
ReadX 10654 4096 4096 4096 NT_STATUS_OK
WriteX 10654 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10656 NT_STATUS_OK
ReadX 10656 0 4096 4096 NT_STATUS_OK
ReadX 10656 4096 4096 4096 NT_STATUS_OK
WriteX 10656 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10657 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10637 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Close 10638 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10656 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10659 0 4096 4096 NT_STATUS_OK
ReadX 10659 4096 4096 4096 NT_STATUS_OK
ReadX 10659 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10663 NT_STATUS_OK
ReadX 10663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10670 NT_STATUS_OK
ReadX 10670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
ReadX 10660 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10677 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 1004 NT_STATUS_OK
WriteX 10677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 258 NT_STATUS_OK
WriteX 10677 0 2048 2048 NT_STATUS_OK
Close 10677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10683 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 1004 NT_STATUS_OK
WriteX 10683 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 258 NT_STATUS_OK
WriteX 10683 0 2048 2048 NT_STATUS_OK
Close 10683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10667 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10685 NT_STATUS_OK
QUERY_FILE_INFORMATION 10685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10672 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Close 10664 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10662 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10670 NT_STATUS_OK
Close 10659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10687 NT_STATUS_OK
QUERY_FILE_INFORMATION 10687 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 61440 4096 4096 NT_STATUS_OK
ReadX 10689 126976 4096 4096 NT_STATUS_OK
WriteX 10689 0 65536 65536 NT_STATUS_OK
WriteX 10689 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 61440 4096 4096 NT_STATUS_OK
ReadX 10690 126976 4096 4096 NT_STATUS_OK
ReadX 10690 192512 4096 4096 NT_STATUS_OK
ReadX 10690 258048 4096 4096 NT_STATUS_OK
WriteX 10690 0 65536 65536 NT_STATUS_OK
WriteX 10690 65536 65536 65536 NT_STATUS_OK
WriteX 10690 131072 65536 65536 NT_STATUS_OK
WriteX 10690 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 126976 4096 4096 NT_STATUS_OK
ReadX 10691 192512 4096 4096 NT_STATUS_OK
ReadX 10691 258048 4096 4096 NT_STATUS_OK
ReadX 10691 323584 4096 4096 NT_STATUS_OK
ReadX 10691 389120 4096 4096 NT_STATUS_OK
ReadX 10691 454656 4096 4096 NT_STATUS_OK
ReadX 10691 520192 4096 4096 NT_STATUS_OK
WriteX 10691 0 65536 65536 NT_STATUS_OK
WriteX 10691 65536 65536 65536 NT_STATUS_OK
WriteX 10691 131072 65536 65536 NT_STATUS_OK
WriteX 10691 196608 65536 65536 NT_STATUS_OK
WriteX 10691 262144 65536 65536 NT_STATUS_OK
WriteX 10691 327680 65536 65536 NT_STATUS_OK
WriteX 10691 393216 65536 65536 NT_STATUS_OK
WriteX 10691 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10692 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10692 8192 4096 4096 NT_STATUS_OK
ReadX 10692 12288 4096 4096 NT_STATUS_OK
ReadX 10692 16384 4096 4096 NT_STATUS_OK
ReadX 10692 20480 4096 4096 NT_STATUS_OK
ReadX 10692 24576 4096 4096 NT_STATUS_OK
ReadX 10692 28672 4096 4096 NT_STATUS_OK
ReadX 10692 32768 4096 4096 NT_STATUS_OK
ReadX 10692 36864 4096 4096 NT_STATUS_OK
ReadX 10692 40960 4096 4096 NT_STATUS_OK
ReadX 10692 45056 4096 4096 NT_STATUS_OK
ReadX 10692 49152 4096 4096 NT_STATUS_OK
ReadX 10692 53248 4096 4096 NT_STATUS_OK
ReadX 10692 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10692 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10693 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10695 NT_STATUS_OK
WriteX 10695 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 0 57088 57088 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
Flush 10695 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10696 NT_STATUS_OK
SET_FILE_INFORMATION 10696 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10697 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10699 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10700 NT_STATUS_OK
WriteX 10700 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 51456 51456 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Flush 10700 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10704 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 53077 53077 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10710 NT_STATUS_OK
WriteX 10710 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10710 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 65536 65536 NT_STATUS_OK
WriteX 10710 65536 1856 1856 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10719 NT_STATUS_OK
WriteX 10719 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 258 NT_STATUS_OK
WriteX 10719 0 7983 7983 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10724 NT_STATUS_OK
WriteX 10724 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 258 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 65536 65536 NT_STATUS_OK
WriteX 10724 131072 65536 65536 NT_STATUS_OK
WriteX 10724 196608 65536 65536 NT_STATUS_OK
WriteX 10724 262144 65536 65536 NT_STATUS_OK
WriteX 10724 327680 65536 65536 NT_STATUS_OK
WriteX 10724 393216 65536 65536 NT_STATUS_OK
WriteX 10724 458752 46731 46731 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10725 NT_STATUS_OK
WriteX 10725 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10714 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 65536 65536 NT_STATUS_OK
WriteX 10725 65536 22848 22848 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10729 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10730 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10730 1004 NT_STATUS_OK
ReadX 10730 8192 4096 4096 NT_STATUS_OK
ReadX 10730 12288 4096 4096 NT_STATUS_OK
ReadX 10730 16384 4096 4096 NT_STATUS_OK
ReadX 10730 20480 4096 4096 NT_STATUS_OK
ReadX 10730 24576 4096 4096 NT_STATUS_OK
ReadX 10730 28672 4096 4096 NT_STATUS_OK
ReadX 10730 32768 4096 4096 NT_STATUS_OK
ReadX 10730 36864 4096 4096 NT_STATUS_OK
ReadX 10730 40960 4096 4096 NT_STATUS_OK
ReadX 10730 45056 4096 4096 NT_STATUS_OK
ReadX 10730 49152 4096 4096 NT_STATUS_OK
ReadX 10730 53248 4096 4096 NT_STATUS_OK
ReadX 10730 57344 4096 4096 NT_STATUS_OK
ReadX 10730 61440 4096 4096 NT_STATUS_OK
ReadX 10730 65536 4096 4096 NT_STATUS_OK
ReadX 10730 69632 4096 4096 NT_STATUS_OK
ReadX 10730 73728 4096 4096 NT_STATUS_OK
ReadX 10730 77824 4096 4096 NT_STATUS_OK
ReadX 10730 81920 4096 4096 NT_STATUS_OK
ReadX 10730 86016 4096 4096 NT_STATUS_OK
ReadX 10730 90112 4096 4096 NT_STATUS_OK
ReadX 10730 94208 4096 4096 NT_STATUS_OK
ReadX 10730 98304 4096 4096 NT_STATUS_OK
ReadX 10730 102400 4096 4096 NT_STATUS_OK
ReadX 10730 106496 4096 4096 NT_STATUS_OK
ReadX 10730 110592 4096 4096 NT_STATUS_OK
ReadX 10730 114688 4096 4096 NT_STATUS_OK
ReadX 10730 118784 4096 4096 NT_STATUS_OK
ReadX 10730 122880 4096 4096 NT_STATUS_OK
ReadX 10730 126976 4096 4096 NT_STATUS_OK
ReadX 10730 131072 4096 4096 NT_STATUS_OK
ReadX 10730 135168 4096 4096 NT_STATUS_OK
ReadX 10730 139264 4096 4096 NT_STATUS_OK
ReadX 10730 143360 4096 4096 NT_STATUS_OK
ReadX 10730 147456 4096 4096 NT_STATUS_OK
ReadX 10730 151552 4096 4096 NT_STATUS_OK
ReadX 10730 155648 4096 4096 NT_STATUS_OK
ReadX 10730 159744 4096 4096 NT_STATUS_OK
ReadX 10730 163840 4096 4096 NT_STATUS_OK
ReadX 10730 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10730 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10733 NT_STATUS_OK
WriteX 10733 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 258 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
WriteX 10733 0 42388 42388 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
ReadX 10737 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 42652 42652 NT_STATUS_OK
SET_FILE_INFORMATION 10738 1004 NT_STATUS_OK
WriteX 10738 0 8192 8192 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10740 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
ReadX 10742 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10747 NT_STATUS_OK
WriteX 10747 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10747 258 NT_STATUS_OK
WriteX 10747 0 65536 65536 NT_STATUS_OK
WriteX 10747 65536 49 49 NT_STATUS_OK
Close 10747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 61440 61440 NT_STATUS_OK
ReadX 10748 61440 4096 4096 NT_STATUS_OK
ReadX 10748 65536 61440 61440 NT_STATUS_OK
ReadX 10748 126976 4096 4096 NT_STATUS_OK
ReadX 10748 131072 61440 61440 NT_STATUS_OK
ReadX 10748 192512 4096 4096 NT_STATUS_OK
ReadX 10748 196608 61440 61440 NT_STATUS_OK
ReadX 10748 258048 4096 4096 NT_STATUS_OK
ReadX 10748 262144 61440 61440 NT_STATUS_OK
ReadX 10748 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 61440 61440 NT_STATUS_OK
ReadX 10749 61440 4096 4096 NT_STATUS_OK
ReadX 10749 65536 61440 61440 NT_STATUS_OK
ReadX 10749 126976 4096 4096 NT_STATUS_OK
ReadX 10749 131072 61440 61440 NT_STATUS_OK
ReadX 10749 192512 4096 4096 NT_STATUS_OK
ReadX 10749 196608 61440 61440 NT_STATUS_OK
ReadX 10749 258048 4096 4096 NT_STATUS_OK
ReadX 10749 262144 61440 61440 NT_STATUS_OK
ReadX 10749 323584 4096 4096 NT_STATUS_OK
ReadX 10749 327680 61440 61440 NT_STATUS_OK
ReadX 10749 389120 4096 4096 NT_STATUS_OK
ReadX 10749 393216 61440 61440 NT_STATUS_OK
ReadX 10749 454656 4096 4096 NT_STATUS_OK
ReadX 10749 458752 61440 61440 NT_STATUS_OK
ReadX 10749 520192 4096 4096 NT_STATUS_OK
ReadX 10749 524288 61440 61440 NT_STATUS_OK
ReadX 10749 585728 4096 4096 NT_STATUS_OK
ReadX 10749 589824 61440 61440 NT_STATUS_OK
ReadX 10749 651264 4096 4096 NT_STATUS_OK
ReadX 10749 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 61440 61440 NT_STATUS_OK
ReadX 10750 61440 4096 4096 NT_STATUS_OK
ReadX 10750 65536 61440 61440 NT_STATUS_OK
ReadX 10750 126976 4096 4096 NT_STATUS_OK
ReadX 10750 131072 61440 61440 NT_STATUS_OK
ReadX 10750 192512 4096 4096 NT_STATUS_OK
ReadX 10750 196608 61440 61440 NT_STATUS_OK
ReadX 10750 258048 4096 4096 NT_STATUS_OK
ReadX 10750 262144 61440 61440 NT_STATUS_OK
ReadX 10750 323584 4096 4096 NT_STATUS_OK
ReadX 10750 327680 61440 61440 NT_STATUS_OK
ReadX 10750 389120 4096 4096 NT_STATUS_OK
ReadX 10750 393216 61440 61440 NT_STATUS_OK
ReadX 10750 454656 4096 4096 NT_STATUS_OK
ReadX 10750 458752 61440 61440 NT_STATUS_OK
ReadX 10750 520192 4096 4096 NT_STATUS_OK
ReadX 10750 524288 61440 61440 NT_STATUS_OK
ReadX 10750 585728 4096 4096 NT_STATUS_OK
ReadX 10750 589824 61440 61440 NT_STATUS_OK
ReadX 10750 651264 4096 4096 NT_STATUS_OK
ReadX 10750 655360 61440 61440 NT_STATUS_OK
ReadX 10750 716800 4096 4096 NT_STATUS_OK
ReadX 10750 720896 61440 61440 NT_STATUS_OK
ReadX 10750 782336 4096 4096 NT_STATUS_OK
ReadX 10750 786432 61440 61440 NT_STATUS_OK
ReadX 10750 847872 4096 4096 NT_STATUS_OK
ReadX 10750 851968 61440 61440 NT_STATUS_OK
ReadX 10750 913408 4096 4096 NT_STATUS_OK
ReadX 10750 917504 61440 61440 NT_STATUS_OK
ReadX 10750 978944 4096 4096 NT_STATUS_OK
ReadX 10750 983040 61440 61440 NT_STATUS_OK
ReadX 10750 1044480 4096 4096 NT_STATUS_OK
ReadX 10750 1048576 61440 61440 NT_STATUS_OK
ReadX 10750 1110016 4096 4096 NT_STATUS_OK
ReadX 10750 1114112 61440 61440 NT_STATUS_OK
ReadX 10750 1175552 4096 4096 NT_STATUS_OK
ReadX 10750 1179648 61440 61440 NT_STATUS_OK
ReadX 10750 1241088 4096 4096 NT_STATUS_OK
ReadX 10750 1245184 61440 61440 NT_STATUS_OK
ReadX 10750 1306624 4096 4096 NT_STATUS_OK
ReadX 10750 1310720 61440 61440 NT_STATUS_OK
ReadX 10750 1372160 4096 4096 NT_STATUS_OK
ReadX 10750 1376256 61440 61440 NT_STATUS_OK
ReadX 10750 1437696 4096 4096 NT_STATUS_OK
ReadX 10750 1441792 61440 61440 NT_STATUS_OK
ReadX 10750 1503232 4096 4096 NT_STATUS_OK
ReadX 10750 1507328 61440 61440 NT_STATUS_OK
ReadX 10750 1568768 4096 4096 NT_STATUS_OK
ReadX 10750 1572864 61440 61440 NT_STATUS_OK
ReadX 10750 1634304 4096 4096 NT_STATUS_OK
ReadX 10750 1638400 61440 61440 NT_STATUS_OK
ReadX 10750 1699840 4096 4096 NT_STATUS_OK
ReadX 10750 1703936 61440 61440 NT_STATUS_OK
ReadX 10750 1765376 4096 4096 NT_STATUS_OK
ReadX 10750 1769472 61440 61440 NT_STATUS_OK
ReadX 10750 1830912 4096 4096 NT_STATUS_OK
ReadX 10750 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10752 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
ReadX 10752 2156 24 24 NT_STATUS_OK
ReadX 10752 2139 276 276 NT_STATUS_OK
ReadX 10752 2136 14 14 NT_STATUS_OK
ReadX 10752 2136 7 7 NT_STATUS_OK
ReadX 10752 2138 12 12 NT_STATUS_OK
ReadX 10752 2137 8 8 NT_STATUS_OK
ReadX 10752 2135 15 15 NT_STATUS_OK
ReadX 10752 0 16 16 NT_STATUS_OK
ReadX 10752 16 2048 2048 NT_STATUS_OK
ReadX 10752 2064 2048 2048 NT_STATUS_OK
ReadX 10752 257 2048 2048 NT_STATUS_OK
ReadX 10752 385 2048 2048 NT_STATUS_OK
ReadX 10752 513 2048 2048 NT_STATUS_OK
ReadX 10752 641 2048 2048 NT_STATUS_OK
ReadX 10752 769 2048 2048 NT_STATUS_OK
ReadX 10752 897 2048 2048 NT_STATUS_OK
ReadX 10752 1025 2048 2048 NT_STATUS_OK
ReadX 10752 1153 2048 2048 NT_STATUS_OK
ReadX 10752 1281 2048 2048 NT_STATUS_OK
ReadX 10752 1409 2048 2048 NT_STATUS_OK
ReadX 10752 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10757 NT_STATUS_OK
WriteX 10757 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 258 NT_STATUS_OK
WriteX 10757 0 10575 10575 NT_STATUS_OK
Flush 10757 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10762 NT_STATUS_OK
LockX 10762 2147483538 1 NT_STATUS_OK
UnlockX 10762 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
ReadX 10762 0 512 512 NT_STATUS_OK
ReadX 10762 512 512 512 NT_STATUS_OK
ReadX 10762 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1004 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10763 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1005 NT_STATUS_OK
ReadX 10763 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10764 NT_STATUS_OK
LockX 10764 2147483538 1 NT_STATUS_OK
UnlockX 10764 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10764 1005 NT_STATUS_OK
ReadX 10764 0 512 512 NT_STATUS_OK
ReadX 10764 512 512 512 NT_STATUS_OK
ReadX 10764 1024 512 512 NT_STATUS_OK
ReadX 10764 288 20 20 NT_STATUS_OK
ReadX 10764 308 2084 2084 NT_STATUS_OK
ReadX 10764 388 2084 2084 NT_STATUS_OK
ReadX 10764 388 2084 2084 NT_STATUS_OK
ReadX 10751 2157 1386 1386 NT_STATUS_OK
ReadX 10764 2472 399 399 NT_STATUS_OK
ReadX 10764 3072 1536 1536 NT_STATUS_OK
ReadX 10764 544 149 149 NT_STATUS_OK
ReadX 10764 693 485 485 NT_STATUS_OK
Close 10764 NT_STATUS_OK
ReadX 10751 2157 4096 4096 NT_STATUS_OK
ReadX 10751 6253 4096 4096 NT_STATUS_OK
ReadX 10751 10349 4096 4096 NT_STATUS_OK
ReadX 10751 14445 4096 4096 NT_STATUS_OK
ReadX 10751 18541 4096 4096 NT_STATUS_OK
ReadX 10751 22637 256 256 NT_STATUS_OK
ReadX 10751 22893 4096 4096 NT_STATUS_OK
ReadX 10751 26989 4096 4096 NT_STATUS_OK
ReadX 10751 31085 4096 4096 NT_STATUS_OK
ReadX 10751 35181 4096 4096 NT_STATUS_OK
ReadX 10751 39277 4096 4096 NT_STATUS_OK
ReadX 10751 43373 4096 4096 NT_STATUS_OK
ReadX 10751 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10751 2157 1024 1024 NT_STATUS_OK
ReadX 10751 1667 4688 4688 NT_STATUS_OK
ReadX 10751 6355 3516 3516 NT_STATUS_OK
ReadX 10751 9871 16384 16384 NT_STATUS_OK
ReadX 10751 26255 3771 3771 NT_STATUS_OK
ReadX 10751 30026 2048 2048 NT_STATUS_OK
ReadX 10751 32074 1024 1024 NT_STATUS_OK
ReadX 10751 33098 6652 6652 NT_STATUS_OK
ReadX 10751 39750 16384 16384 NT_STATUS_OK
ReadX 10751 56134 10496 10496 NT_STATUS_OK
ReadX 10751 66630 1784 1784 NT_STATUS_OK
ReadX 10751 68414 90 90 NT_STATUS_OK
ReadX 10751 68504 273 273 NT_STATUS_OK
ReadX 10751 68777 1600 1600 NT_STATUS_OK
ReadX 10751 70377 640 640 NT_STATUS_OK
ReadX 10751 71017 1280 1280 NT_STATUS_OK
ReadX 10751 72297 8464 8464 NT_STATUS_OK
ReadX 10751 80761 158 158 NT_STATUS_OK
ReadX 10751 80919 912 912 NT_STATUS_OK
ReadX 10751 81831 1980 1980 NT_STATUS_OK
ReadX 10751 83811 2256 2256 NT_STATUS_OK
ReadX 10751 86067 400 400 NT_STATUS_OK
ReadX 10751 86467 252 252 NT_STATUS_OK
ReadX 10751 86719 42 42 NT_STATUS_OK
ReadX 10751 86761 725 725 NT_STATUS_OK
ReadX 10751 2009 512 512 NT_STATUS_OK
ReadX 10751 3895 9 9 NT_STATUS_OK
ReadX 10751 3781 46 46 NT_STATUS_OK
ReadX 10751 4059 92 92 NT_STATUS_OK
ReadX 10751 3781 92 92 NT_STATUS_OK
ReadX 10751 3986 184 184 NT_STATUS_OK
ReadX 10751 3987 16384 16384 NT_STATUS_OK
ReadX 10751 3902 16384 16384 NT_STATUS_OK
ReadX 10751 3781 10240 10240 NT_STATUS_OK
ReadX 10751 3821 16384 16384 NT_STATUS_OK
ReadX 10751 3891 935 935 NT_STATUS_OK
ReadX 10751 4060 10240 10240 NT_STATUS_OK
ReadX 10751 4059 184 184 NT_STATUS_OK
ReadX 10751 256 184 184 NT_STATUS_OK
ReadX 10751 256 1026 1026 NT_STATUS_OK
ReadX 10751 3901 326 326 NT_STATUS_OK
ReadX 10751 3899 652 652 NT_STATUS_OK
ReadX 10751 256 2 2 NT_STATUS_OK
ReadX 10751 258 4948 4948 NT_STATUS_OK
Close 10751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10769 NT_STATUS_OK
WriteX 10769 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
WriteX 10769 0 65536 65536 NT_STATUS_OK
WriteX 10769 65536 65536 65536 NT_STATUS_OK
WriteX 10769 131072 65536 65536 NT_STATUS_OK
WriteX 10769 196608 65536 65536 NT_STATUS_OK
WriteX 10769 262144 65536 65536 NT_STATUS_OK
WriteX 10769 327680 65536 65536 NT_STATUS_OK
WriteX 10769 393216 65536 65536 NT_STATUS_OK
WriteX 10769 458752 65536 65536 NT_STATUS_OK
WriteX 10769 524288 65536 65536 NT_STATUS_OK
WriteX 10769 589824 35257 35257 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
WriteX 10774 131072 65536 65536 NT_STATUS_OK
WriteX 10774 196608 65536 65536 NT_STATUS_OK
WriteX 10774 262144 65536 65536 NT_STATUS_OK
WriteX 10774 327680 65536 65536 NT_STATUS_OK
WriteX 10774 393216 65536 65536 NT_STATUS_OK
WriteX 10774 458752 65536 65536 NT_STATUS_OK
WriteX 10774 524288 65536 65536 NT_STATUS_OK
WriteX 10774 589824 57598 57598 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 12543 12543 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
Close 10776 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
ReadX 10782 1938 24 24 NT_STATUS_OK
ReadX 10782 1920 276 276 NT_STATUS_OK
ReadX 10782 1918 14 14 NT_STATUS_OK
ReadX 10782 1918 7 7 NT_STATUS_OK
ReadX 10782 1919 12 12 NT_STATUS_OK
ReadX 10782 1919 8 8 NT_STATUS_OK
ReadX 10782 1917 15 15 NT_STATUS_OK
ReadX 10782 0 16 16 NT_STATUS_OK
ReadX 10782 16 2048 2048 NT_STATUS_OK
ReadX 10782 2064 2048 2048 NT_STATUS_OK
ReadX 10782 257 2048 2048 NT_STATUS_OK
ReadX 10782 385 2048 2048 NT_STATUS_OK
ReadX 10782 513 2048 2048 NT_STATUS_OK
ReadX 10782 641 2048 2048 NT_STATUS_OK
ReadX 10782 769 2048 2048 NT_STATUS_OK
ReadX 10782 897 2048 2048 NT_STATUS_OK
ReadX 10782 1025 2048 2048 NT_STATUS_OK
ReadX 10782 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10787 NT_STATUS_OK
WriteX 10787 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 258 NT_STATUS_OK
WriteX 10787 0 11588 11588 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10788 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10790 NT_STATUS_OK
ReadX 10790 0 4096 4096 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10792 NT_STATUS_OK
WriteX 10792 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10792 258 NT_STATUS_OK
WriteX 10792 0 11615 11615 NT_STATUS_OK
Flush 10792 NT_STATUS_OK
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10801 NT_STATUS_OK
WriteX 10801 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 16050 16050 NT_STATUS_OK
Close 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10781 1939 64 64 NT_STATUS_OK
ReadX 10781 128 248 248 NT_STATUS_OK
ReadX 10781 128 568 568 NT_STATUS_OK
ReadX 10781 3872 1536 1536 NT_STATUS_OK
ReadX 10781 3456 2560 2560 NT_STATUS_OK
ReadX 10781 3136 512 512 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
ReadX 10781 3264 3072 3072 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 3616 4096 4096 NT_STATUS_OK
ReadX 10781 1939 64 64 NT_STATUS_OK
ReadX 10781 128 248 248 NT_STATUS_OK
ReadX 10781 128 608 608 NT_STATUS_OK
ReadX 10781 2858 1024 1024 NT_STATUS_OK
ReadX 10781 2810 4096 4096 NT_STATUS_OK
ReadX 10781 2826 4096 4096 NT_STATUS_OK
ReadX 10781 2580 2048 2048 NT_STATUS_OK
ReadX 10781 2800 2560 2560 NT_STATUS_OK
ReadX 10781 2100 4096 4096 NT_STATUS_OK
ReadX 10781 2084 4096 4096 NT_STATUS_OK
ReadX 10781 868 4096 4096 NT_STATUS_OK
ReadX 10781 2324 4096 4096 NT_STATUS_OK
ReadX 10781 884 4096 4096 NT_STATUS_OK
ReadX 10781 2604 1024 1024 NT_STATUS_OK
ReadX 10781 580 4096 4096 NT_STATUS_OK
ReadX 10781 596 4096 4096 NT_STATUS_OK
ReadX 10781 2752 4096 4096 NT_STATUS_OK
ReadX 10781 2842 1024 1024 NT_STATUS_OK
ReadX 10781 660 4096 4096 NT_STATUS_OK
ReadX 10781 2720 4096 4096 NT_STATUS_OK
ReadX 10781 2736 4096 4096 NT_STATUS_OK
ReadX 10781 628 4096 4096 NT_STATUS_OK
ReadX 10781 2704 4096 4096 NT_STATUS_OK
ReadX 10781 1556 4096 4096 NT_STATUS_OK
ReadX 10781 576 4096 4096 NT_STATUS_OK
ReadX 10781 3168 1536 1536 NT_STATUS_OK
ReadX 10781 832 4096 4096 NT_STATUS_OK
ReadX 10781 1088 4096 4096 NT_STATUS_OK
ReadX 10781 1344 4096 4096 NT_STATUS_OK
ReadX 10781 1600 4096 4096 NT_STATUS_OK
ReadX 10781 1856 4096 4096 NT_STATUS_OK
ReadX 10781 2112 4096 4096 NT_STATUS_OK
ReadX 10781 1892 4096 4096 NT_STATUS_OK
ReadX 10781 820 4096 4096 NT_STATUS_OK
ReadX 10781 788 4096 4096 NT_STATUS_OK
ReadX 10781 1604 4096 4096 NT_STATUS_OK
ReadX 10781 3648 4096 4096 NT_STATUS_OK
ReadX 10781 2608 4096 4096 NT_STATUS_OK
ReadX 10781 548 4096 4096 NT_STATUS_OK
ReadX 10781 740 4096 4096 NT_STATUS_OK
ReadX 10781 1344 4096 4096 NT_STATUS_OK
ReadX 10781 3392 4096 4096 NT_STATUS_OK
ReadX 10781 3904 4096 4096 NT_STATUS_OK
ReadX 10781 644 4096 4096 NT_STATUS_OK
ReadX 10781 676 4096 4096 NT_STATUS_OK
ReadX 10781 2688 4096 4096 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 900 4096 4096 NT_STATUS_OK
ReadX 10781 1908 4096 4096 NT_STATUS_OK
ReadX 10781 852 4096 4096 NT_STATUS_OK
ReadX 10781 724 4096 4096 NT_STATUS_OK
ReadX 10781 2292 4096 4096 NT_STATUS_OK
ReadX 10781 612 4096 4096 NT_STATUS_OK
ReadX 10781 388 4096 4096 NT_STATUS_OK
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 500 4096 4096 NT_STATUS_OK
ReadX 10781 356 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 576 4096 4096 NT_STATUS_OK
ReadX 10781 340 4096 4096 NT_STATUS_OK
ReadX 10781 420 4096 4096 NT_STATUS_OK
ReadX 10781 1600 4096 4096 NT_STATUS_OK
ReadX 10781 404 4096 4096 NT_STATUS_OK
ReadX 10781 1428 4096 4096 NT_STATUS_OK
ReadX 10781 2656 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 452 4096 4096 NT_STATUS_OK
ReadX 10781 692 4096 4096 NT_STATUS_OK
ReadX 10781 564 4096 4096 NT_STATUS_OK
ReadX 10781 372 4096 4096 NT_STATUS_OK
ReadX 10781 468 4096 4096 NT_STATUS_OK
ReadX 10781 484 4096 4096 NT_STATUS_OK
ReadX 10781 1088 4096 4096 NT_STATUS_OK
ReadX 10781 1924 4096 4096 NT_STATUS_OK
ReadX 10781 2768 4096 4096 NT_STATUS_OK
ReadX 10781 832 4096 4096 NT_STATUS_OK
ReadX 10781 836 4096 4096 NT_STATUS_OK
ReadX 10781 1856 4096 4096 NT_STATUS_OK
ReadX 10781 2640 4096 4096 NT_STATUS_OK
ReadX 10781 436 4096 4096 NT_STATUS_OK
ReadX 10781 1828 4096 4096 NT_STATUS_OK
ReadX 10781 804 4096 4096 NT_STATUS_OK
ReadX 10781 1860 4096 4096 NT_STATUS_OK
ReadX 10781 1812 4096 4096 NT_STATUS_OK
ReadX 10781 756 4096 4096 NT_STATUS_OK
ReadX 10781 1636 4096 4096 NT_STATUS_OK
ReadX 10781 772 4096 4096 NT_STATUS_OK
ReadX 10781 2036 4096 4096 NT_STATUS_OK
ReadX 10781 1220 4096 4096 NT_STATUS_OK
ReadX 10781 1652 4096 4096 NT_STATUS_OK
ReadX 10781 2588 4096 4096 NT_STATUS_OK
ReadX 10781 916 4096 4096 NT_STATUS_OK
ReadX 10781 260 4096 4096 NT_STATUS_OK
ReadX 10781 932 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 308 4096 4096 NT_STATUS_OK
ReadX 10781 292 4096 4096 NT_STATUS_OK
ReadX 10781 1140 4096 4096 NT_STATUS_OK
ReadX 10781 276 4096 4096 NT_STATUS_OK
ReadX 10781 2020 4096 4096 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
ReadX 10781 516 4096 4096 NT_STATUS_OK
ReadX 10781 1844 4096 4096 NT_STATUS_OK
ReadX 10781 1124 4096 4096 NT_STATUS_OK
ReadX 10781 3136 4096 4096 NT_STATUS_OK
ReadX 10781 324 4096 4096 NT_STATUS_OK
ReadX 10781 1156 4096 4096 NT_STATUS_OK
ReadX 10781 1172 4096 4096 NT_STATUS_OK
ReadX 10781 2112 4096 4096 NT_STATUS_OK
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 964 4096 4096 NT_STATUS_OK
ReadX 10781 980 4096 4096 NT_STATUS_OK
ReadX 10781 1012 4096 4096 NT_STATUS_OK
ReadX 10781 532 4096 4096 NT_STATUS_OK
ReadX 10781 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10781 1620 4096 4096 NT_STATUS_OK
ReadX 10781 1604 4096 4096 NT_STATUS_OK
ReadX 10781 2116 4096 4096 NT_STATUS_OK
ReadX 10781 2132 4096 4096 NT_STATUS_OK
ReadX 10781 2148 4096 4096 NT_STATUS_OK
ReadX 10781 2276 4096 4096 NT_STATUS_OK
ReadX 10781 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10806 NT_STATUS_OK
QUERY_FILE_INFORMATION 10761 1004 NT_STATUS_OK
Close 10761 NT_STATUS_OK
WriteX 10806 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1004 NT_STATUS_OK
Close 10763 NT_STATUS_OK
WriteX 10806 0 65536 65536 NT_STATUS_OK
WriteX 10806 65536 64850 64850 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
ReadX 10781 2068 4096 4096 NT_STATUS_OK
ReadX 10781 1588 4096 4096 NT_STATUS_OK
ReadX 10781 1572 4096 4096 NT_STATUS_OK
WriteX 10808 0 18630 18630 NT_STATUS_OK
Flush 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10781 612 4096 4096 NT_STATUS_OK
ReadX 10781 564 4096 4096 NT_STATUS_OK
ReadX 10781 1876 4096 4096 NT_STATUS_OK
ReadX 10781 628 4096 4096 NT_STATUS_OK
ReadX 10781 740 4096 4096 NT_STATUS_OK
ReadX 10781 724 4096 4096 NT_STATUS_OK
ReadX 10781 644 4096 4096 NT_STATUS_OK
ReadX 10781 2324 4096 4096 NT_STATUS_OK
ReadX 10781 660 4096 4096 NT_STATUS_OK
ReadX 10781 852 4096 4096 NT_STATUS_OK
ReadX 10781 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 580 4096 4096 NT_STATUS_OK
ReadX 10781 3136 512 512 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
Close 10781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 61440 4096 4096 NT_STATUS_OK
ReadX 10813 126976 4096 4096 NT_STATUS_OK
WriteX 10813 0 65536 65536 NT_STATUS_OK
WriteX 10813 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 61440 4096 4096 NT_STATUS_OK
ReadX 10814 126976 4096 4096 NT_STATUS_OK
ReadX 10814 192512 4096 4096 NT_STATUS_OK
ReadX 10814 258048 4096 4096 NT_STATUS_OK
WriteX 10814 0 65536 65536 NT_STATUS_OK
WriteX 10814 65536 65536 65536 NT_STATUS_OK
WriteX 10814 131072 65536 65536 NT_STATUS_OK
WriteX 10814 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 61440 4096 4096 NT_STATUS_OK
ReadX 10815 126976 4096 4096 NT_STATUS_OK
ReadX 10815 192512 4096 4096 NT_STATUS_OK
ReadX 10815 258048 4096 4096 NT_STATUS_OK
ReadX 10815 323584 4096 4096 NT_STATUS_OK
ReadX 10815 389120 4096 4096 NT_STATUS_OK
ReadX 10815 454656 4096 4096 NT_STATUS_OK
ReadX 10815 520192 4096 4096 NT_STATUS_OK
WriteX 10815 0 65536 65536 NT_STATUS_OK
WriteX 10815 65536 65536 65536 NT_STATUS_OK
WriteX 10815 131072 65536 65536 NT_STATUS_OK
WriteX 10815 196608 65536 65536 NT_STATUS_OK
WriteX 10815 262144 65536 65536 NT_STATUS_OK
WriteX 10815 327680 65536 65536 NT_STATUS_OK
WriteX 10815 393216 65536 65536 NT_STATUS_OK
WriteX 10815 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10818 NT_STATUS_OK
WriteX 10818 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10818 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10816 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10820 NT_STATUS_OK
Close 10820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10813 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Close 10815 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10823 NT_STATUS_OK
WriteX 10823 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10823 258 NT_STATUS_OK
WriteX 10823 0 62591 62591 NT_STATUS_OK
Close 10823 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10828 NT_STATUS_OK
WriteX 10828 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10828 258 NT_STATUS_OK
WriteX 10828 0 10845 10845 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10833 NT_STATUS_OK
WriteX 10833 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10833 258 NT_STATUS_OK
WriteX 10833 0 30118 30118 NT_STATUS_OK
Close 10833 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
WriteX 10818 0 64 64 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 61440 61440 NT_STATUS_OK
ReadX 10835 61440 4096 4096 NT_STATUS_OK
ReadX 10835 65536 61440 61440 NT_STATUS_OK
ReadX 10835 126976 4096 4096 NT_STATUS_OK
ReadX 10835 131072 61440 61440 NT_STATUS_OK
ReadX 10835 192512 4096 4096 NT_STATUS_OK
ReadX 10835 196608 61440 61440 NT_STATUS_OK
ReadX 10835 258048 4096 4096 NT_STATUS_OK
ReadX 10835 262144 61440 61440 NT_STATUS_OK
ReadX 10835 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 61440 61440 NT_STATUS_OK
ReadX 10836 61440 4096 4096 NT_STATUS_OK
ReadX 10836 65536 61440 61440 NT_STATUS_OK
ReadX 10836 126976 4096 4096 NT_STATUS_OK
ReadX 10836 131072 61440 61440 NT_STATUS_OK
ReadX 10836 192512 4096 4096 NT_STATUS_OK
ReadX 10836 196608 61440 61440 NT_STATUS_OK
ReadX 10836 258048 4096 4096 NT_STATUS_OK
ReadX 10836 262144 61440 61440 NT_STATUS_OK
ReadX 10836 323584 4096 4096 NT_STATUS_OK
ReadX 10836 327680 61440 61440 NT_STATUS_OK
ReadX 10836 389120 4096 4096 NT_STATUS_OK
ReadX 10836 393216 61440 61440 NT_STATUS_OK
ReadX 10836 454656 4096 4096 NT_STATUS_OK
ReadX 10836 458752 61440 61440 NT_STATUS_OK
ReadX 10836 520192 4096 4096 NT_STATUS_OK
ReadX 10836 524288 61440 61440 NT_STATUS_OK
ReadX 10836 585728 4096 4096 NT_STATUS_OK
ReadX 10836 589824 61440 61440 NT_STATUS_OK
ReadX 10836 651264 4096 4096 NT_STATUS_OK
ReadX 10836 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 61440 61440 NT_STATUS_OK
ReadX 10837 61440 4096 4096 NT_STATUS_OK
ReadX 10837 65536 61440 61440 NT_STATUS_OK
ReadX 10837 126976 4096 4096 NT_STATUS_OK
ReadX 10837 131072 61440 61440 NT_STATUS_OK
ReadX 10837 192512 4096 4096 NT_STATUS_OK
ReadX 10837 196608 61440 61440 NT_STATUS_OK
ReadX 10837 258048 4096 4096 NT_STATUS_OK
ReadX 10837 262144 61440 61440 NT_STATUS_OK
ReadX 10837 323584 4096 4096 NT_STATUS_OK
ReadX 10837 327680 61440 61440 NT_STATUS_OK
ReadX 10837 389120 4096 4096 NT_STATUS_OK
ReadX 10837 393216 61440 61440 NT_STATUS_OK
ReadX 10837 454656 4096 4096 NT_STATUS_OK
ReadX 10837 458752 61440 61440 NT_STATUS_OK
ReadX 10837 520192 4096 4096 NT_STATUS_OK
ReadX 10837 524288 61440 61440 NT_STATUS_OK
ReadX 10837 585728 4096 4096 NT_STATUS_OK
ReadX 10837 589824 61440 61440 NT_STATUS_OK
ReadX 10837 651264 4096 4096 NT_STATUS_OK
ReadX 10837 655360 61440 61440 NT_STATUS_OK
ReadX 10837 716800 4096 4096 NT_STATUS_OK
ReadX 10837 720896 61440 61440 NT_STATUS_OK
ReadX 10837 782336 4096 4096 NT_STATUS_OK
ReadX 10837 786432 61440 61440 NT_STATUS_OK
ReadX 10837 847872 4096 4096 NT_STATUS_OK
ReadX 10837 851968 61440 61440 NT_STATUS_OK
ReadX 10837 913408 4096 4096 NT_STATUS_OK
ReadX 10837 917504 61440 61440 NT_STATUS_OK
ReadX 10837 978944 4096 4096 NT_STATUS_OK
ReadX 10837 983040 61440 61440 NT_STATUS_OK
ReadX 10837 1044480 4096 4096 NT_STATUS_OK
ReadX 10837 1048576 61440 61440 NT_STATUS_OK
ReadX 10837 1110016 4096 4096 NT_STATUS_OK
ReadX 10837 1114112 61440 61440 NT_STATUS_OK
ReadX 10837 1175552 4096 4096 NT_STATUS_OK
ReadX 10837 1179648 61440 61440 NT_STATUS_OK
ReadX 10837 1241088 4096 4096 NT_STATUS_OK
ReadX 10837 1245184 61440 61440 NT_STATUS_OK
ReadX 10837 1306624 4096 4096 NT_STATUS_OK
ReadX 10837 1310720 61440 61440 NT_STATUS_OK
ReadX 10837 1372160 4096 4096 NT_STATUS_OK
ReadX 10837 1376256 61440 61440 NT_STATUS_OK
ReadX 10837 1437696 4096 4096 NT_STATUS_OK
ReadX 10837 1441792 61440 61440 NT_STATUS_OK
ReadX 10837 1503232 4096 4096 NT_STATUS_OK
ReadX 10837 1507328 61440 61440 NT_STATUS_OK
ReadX 10837 1568768 4096 4096 NT_STATUS_OK
ReadX 10837 1572864 61440 61440 NT_STATUS_OK
ReadX 10837 1634304 4096 4096 NT_STATUS_OK
ReadX 10837 1638400 61440 61440 NT_STATUS_OK
ReadX 10837 1699840 4096 4096 NT_STATUS_OK
ReadX 10837 1703936 61440 61440 NT_STATUS_OK
ReadX 10837 1765376 4096 4096 NT_STATUS_OK
ReadX 10837 1769472 61440 61440 NT_STATUS_OK
ReadX 10837 1830912 4096 4096 NT_STATUS_OK
ReadX 10837 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
ReadX 10842 4096 4096 4096 NT_STATUS_OK
ReadX 10842 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10843 NT_STATUS_OK
Close 10843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Close 10842 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10846 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 0 8192 8192 NT_STATUS_OK
ReadX 10850 8192 8192 8192 NT_STATUS_OK
ReadX 10850 16384 8192 8192 NT_STATUS_OK
ReadX 10850 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10852 NT_STATUS_OK
Close 10852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10855 NT_STATUS_OK
WriteX 10855 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10855 258 NT_STATUS_OK
WriteX 10855 0 10438 10438 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10856 NT_STATUS_OK
Close 10856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10861 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
ReadX 10864 4096 4096 4096 NT_STATUS_OK
ReadX 10864 8192 4096 4096 NT_STATUS_OK
ReadX 10864 12288 8192 8192 NT_STATUS_OK
ReadX 10864 20480 8192 8192 NT_STATUS_OK
ReadX 10864 28672 8192 8192 NT_STATUS_OK
ReadX 10864 36864 8192 8192 NT_STATUS_OK
ReadX 10864 45056 8192 8192 NT_STATUS_OK
ReadX 10864 53248 8192 8192 NT_STATUS_OK
ReadX 10864 61440 8192 8192 NT_STATUS_OK
ReadX 10864 69632 8192 8192 NT_STATUS_OK
ReadX 10864 77824 8192 8192 NT_STATUS_OK
ReadX 10864 86016 8192 8192 NT_STATUS_OK
ReadX 10864 94208 8192 8192 NT_STATUS_OK
ReadX 10864 102400 8192 8192 NT_STATUS_OK
ReadX 10864 110592 8192 8192 NT_STATUS_OK
ReadX 10864 118784 8192 8192 NT_STATUS_OK
ReadX 10864 126976 8192 8192 NT_STATUS_OK
ReadX 10864 135168 8192 8192 NT_STATUS_OK
ReadX 10864 143360 8192 8192 NT_STATUS_OK
ReadX 10864 151552 8192 8192 NT_STATUS_OK
ReadX 10864 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10864 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10869 NT_STATUS_OK
WriteX 10869 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 258 NT_STATUS_OK
WriteX 10869 0 28489 28489 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10872 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10873 NT_STATUS_OK
Close 10873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 8192 8192 NT_STATUS_OK
ReadX 10876 8192 8192 8192 NT_STATUS_OK
ReadX 10876 16384 8192 8192 NT_STATUS_OK
ReadX 10876 24576 8192 8192 NT_STATUS_OK
ReadX 10876 32768 16384 16384 NT_STATUS_OK
ReadX 10876 49152 8192 8192 NT_STATUS_OK
ReadX 10876 57344 8192 8192 NT_STATUS_OK
ReadX 10876 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10881 NT_STATUS_OK
WriteX 10881 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10881 258 NT_STATUS_OK
WriteX 10881 0 29253 29253 NT_STATUS_OK
Close 10881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10882 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10885 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10888 NT_STATUS_OK
WriteX 10888 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10888 258 NT_STATUS_OK
WriteX 10888 0 30183 30183 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10891 NT_STATUS_OK
WriteX 10891 0 510 510 NT_STATUS_OK
WriteX 10891 510 512 512 NT_STATUS_OK
WriteX 10891 1022 510 510 NT_STATUS_OK
WriteX 10891 1532 510 510 NT_STATUS_OK
WriteX 10891 2042 168 168 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 4096 4096 NT_STATUS_OK
WriteX 10894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10895 NT_STATUS_OK
ReadX 10895 61440 4096 4096 NT_STATUS_OK
ReadX 10895 126976 4096 4096 NT_STATUS_OK
WriteX 10895 0 65536 65536 NT_STATUS_OK
WriteX 10895 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10896 NT_STATUS_OK
ReadX 10896 61440 4096 4096 NT_STATUS_OK
ReadX 10896 126976 4096 4096 NT_STATUS_OK
ReadX 10896 192512 4096 4096 NT_STATUS_OK
ReadX 10896 258048 4096 4096 NT_STATUS_OK
WriteX 10896 0 65536 65536 NT_STATUS_OK
WriteX 10896 65536 65536 65536 NT_STATUS_OK
WriteX 10896 131072 65536 65536 NT_STATUS_OK
WriteX 10896 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 61440 4096 4096 NT_STATUS_OK
ReadX 10897 126976 4096 4096 NT_STATUS_OK
ReadX 10897 192512 4096 4096 NT_STATUS_OK
ReadX 10897 258048 4096 4096 NT_STATUS_OK
ReadX 10897 323584 4096 4096 NT_STATUS_OK
ReadX 10897 389120 4096 4096 NT_STATUS_OK
ReadX 10897 454656 4096 4096 NT_STATUS_OK
ReadX 10897 520192 4096 4096 NT_STATUS_OK
WriteX 10897 0 65536 65536 NT_STATUS_OK
WriteX 10897 65536 65536 65536 NT_STATUS_OK
WriteX 10897 131072 65536 65536 NT_STATUS_OK
WriteX 10897 196608 65536 65536 NT_STATUS_OK
WriteX 10897 262144 65536 65536 NT_STATUS_OK
WriteX 10897 327680 65536 65536 NT_STATUS_OK
WriteX 10897 393216 65536 65536 NT_STATUS_OK
WriteX 10897 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10894 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Close 10896 NT_STATUS_OK
Close 10897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10900 NT_STATUS_OK
Close 10900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10909 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10913 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10927 NT_STATUS_OK
Close 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10937 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10942 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10957 NT_STATUS_OK
Close 10957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10966 NT_STATUS_OK
WriteX 10966 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10966 0 65536 65536 NT_STATUS_OK
WriteX 10966 65536 65536 65536 NT_STATUS_OK
WriteX 10966 131072 65536 65536 NT_STATUS_OK
WriteX 10966 196608 65536 65536 NT_STATUS_OK
WriteX 10966 262144 26634 26634 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
ReadX 10974 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10979 NT_STATUS_OK
Close 10979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10988 NT_STATUS_OK
Close 10988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11007 NT_STATUS_OK
Close 11007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11017 NT_STATUS_OK
Close 11017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11022 NT_STATUS_OK
Close 11022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11041 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
Close 11053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
Close 11067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
Close 11068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11098 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11098 0 4096 4096 NT_STATUS_OK
Close 11098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
ReadX 11100 4096 4096 4096 NT_STATUS_OK
ReadX 11100 8192 4096 4096 NT_STATUS_OK
ReadX 11100 12288 4096 4096 NT_STATUS_OK
ReadX 11100 16384 4096 4096 NT_STATUS_OK
ReadX 11100 20480 4096 4096 NT_STATUS_OK
ReadX 11100 24576 4096 4096 NT_STATUS_OK
ReadX 11100 28672 4096 4096 NT_STATUS_OK
ReadX 11100 32768 4096 4096 NT_STATUS_OK
ReadX 11100 36864 4096 4096 NT_STATUS_OK
ReadX 11100 40960 4096 4096 NT_STATUS_OK
ReadX 11100 45056 4096 4096 NT_STATUS_OK
ReadX 11100 49152 4096 4096 NT_STATUS_OK
ReadX 11100 53248 4096 4096 NT_STATUS_OK
ReadX 11100 57344 4096 4096 NT_STATUS_OK
ReadX 11100 61440 4096 4096 NT_STATUS_OK
ReadX 11100 65536 4096 4096 NT_STATUS_OK
ReadX 11100 69632 4096 4096 NT_STATUS_OK
ReadX 11100 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11100 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11101 NT_STATUS_OK
SET_FILE_INFORMATION 11101 1004 NT_STATUS_OK
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11103 NT_STATUS_OK
Close 11103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11106 NT_STATUS_OK
WriteX 11106 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 258 NT_STATUS_OK
WriteX 11106 0 65536 65536 NT_STATUS_OK
WriteX 11106 65536 19979 19979 NT_STATUS_OK
Close 11106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
QUERY_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
SET_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 4096 4096 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 4096 4096 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11112 1004 NT_STATUS_OK
WriteX 11112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11115 NT_STATUS_OK
Close 11115 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11118 NT_STATUS_OK
WriteX 11118 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 258 NT_STATUS_OK
WriteX 11118 0 65536 65536 NT_STATUS_OK
WriteX 11118 65536 17654 17654 NT_STATUS_OK
Close 11118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 0 4096 4096 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
SET_FILE_INFORMATION 11119 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11120 NT_STATUS_OK
SET_FILE_INFORMATION 11120 1004 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11122 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 4096 4096 NT_STATUS_OK
ReadX 11124 4096 4096 4096 NT_STATUS_OK
ReadX 11124 8192 4096 4096 NT_STATUS_OK
ReadX 11124 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11124 16384 4096 4096 NT_STATUS_OK
ReadX 11124 20480 4096 4096 NT_STATUS_OK
ReadX 11124 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11127 1004 NT_STATUS_OK
WriteX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11133 NT_STATUS_OK
WriteX 11133 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11133 258 NT_STATUS_OK
WriteX 11133 0 65536 65536 NT_STATUS_OK
WriteX 11133 65536 19490 19490 NT_STATUS_OK
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
QUERY_FILE_INFORMATION 11134 1004 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
SET_FILE_INFORMATION 11134 1004 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11135 NT_STATUS_OK
SET_FILE_INFORMATION 11135 1004 NT_STATUS_OK
Close 11135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11139 0 4096 4096 NT_STATUS_OK
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
ReadX 11141 4096 4096 4096 NT_STATUS_OK
ReadX 11141 8192 4096 4096 NT_STATUS_OK
ReadX 11141 12288 4096 4096 NT_STATUS_OK
ReadX 11141 16384 4096 4096 NT_STATUS_OK
ReadX 11141 20480 4096 4096 NT_STATUS_OK
ReadX 11141 24576 4096 4096 NT_STATUS_OK
ReadX 11141 28672 4096 4096 NT_STATUS_OK
ReadX 11141 32768 4096 4096 NT_STATUS_OK
ReadX 11141 36864 4096 4096 NT_STATUS_OK
ReadX 11141 40960 4096 4096 NT_STATUS_OK
ReadX 11141 45056 4096 4096 NT_STATUS_OK
ReadX 11141 49152 4096 4096 NT_STATUS_OK
ReadX 11141 53248 4096 4096 NT_STATUS_OK
ReadX 11141 57344 4096 4096 NT_STATUS_OK
ReadX 11141 61440 4096 4096 NT_STATUS_OK
ReadX 11141 65536 4096 4096 NT_STATUS_OK
ReadX 11141 69632 4096 4096 NT_STATUS_OK
ReadX 11141 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11142 NT_STATUS_OK
SET_FILE_INFORMATION 11142 1004 NT_STATUS_OK
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11147 NT_STATUS_OK
WriteX 11147 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 258 NT_STATUS_OK
WriteX 11147 0 65536 65536 NT_STATUS_OK
WriteX 11147 65536 8866 8866 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11148 NT_STATUS_OK
ReadX 11148 0 4096 4096 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Flush 11148 NT_STATUS_OK
SET_FILE_INFORMATION 11148 1004 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Flush 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11152 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11158 NT_STATUS_OK
WriteX 11158 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11158 258 NT_STATUS_OK
WriteX 11158 0 65536 65536 NT_STATUS_OK
WriteX 11158 65536 9298 9298 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Flush 11159 NT_STATUS_OK
SET_FILE_INFORMATION 11159 1004 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Flush 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11160 NT_STATUS_OK
SET_FILE_INFORMATION 11160 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11166 4096 4096 4096 NT_STATUS_OK
ReadX 11166 8192 4096 4096 NT_STATUS_OK
ReadX 11166 12288 4096 4096 NT_STATUS_OK
ReadX 11166 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
Close 11167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
Close 11168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11175 NT_STATUS_OK
WriteX 11175 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11175 258 NT_STATUS_OK
WriteX 11175 0 65536 65536 NT_STATUS_OK
WriteX 11175 65536 11540 11540 NT_STATUS_OK
Close 11175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
WriteX 11176 0 4096 4096 NT_STATUS_OK
Flush 11176 NT_STATUS_OK
SET_FILE_INFORMATION 11176 1004 NT_STATUS_OK
WriteX 11176 0 4096 4096 NT_STATUS_OK
Flush 11176 NT_STATUS_OK
Close 11176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11177 NT_STATUS_OK
SET_FILE_INFORMATION 11177 1004 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 61440 4096 4096 NT_STATUS_OK
ReadX 11181 126976 4096 4096 NT_STATUS_OK
WriteX 11181 0 65536 65536 NT_STATUS_OK
WriteX 11181 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 61440 4096 4096 NT_STATUS_OK
ReadX 11182 126976 4096 4096 NT_STATUS_OK
ReadX 11182 192512 4096 4096 NT_STATUS_OK
ReadX 11182 258048 4096 4096 NT_STATUS_OK
WriteX 11182 0 65536 65536 NT_STATUS_OK
WriteX 11182 65536 65536 65536 NT_STATUS_OK
WriteX 11182 131072 65536 65536 NT_STATUS_OK
WriteX 11182 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 61440 4096 4096 NT_STATUS_OK
ReadX 11183 126976 4096 4096 NT_STATUS_OK
ReadX 11183 192512 4096 4096 NT_STATUS_OK
ReadX 11183 258048 4096 4096 NT_STATUS_OK
ReadX 11183 323584 4096 4096 NT_STATUS_OK
ReadX 11183 389120 4096 4096 NT_STATUS_OK
ReadX 11183 454656 4096 4096 NT_STATUS_OK
ReadX 11183 520192 4096 4096 NT_STATUS_OK
WriteX 11183 0 65536 65536 NT_STATUS_OK
WriteX 11183 65536 65536 65536 NT_STATUS_OK
WriteX 11183 131072 65536 65536 NT_STATUS_OK
WriteX 11183 196608 65536 65536 NT_STATUS_OK
WriteX 11183 262144 65536 65536 NT_STATUS_OK
WriteX 11183 327680 65536 65536 NT_STATUS_OK
WriteX 11183 393216 65536 65536 NT_STATUS_OK
WriteX 11183 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
ReadX 11184 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11185 NT_STATUS_OK
WriteX 11185 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
WriteX 11185 0 53 53 NT_STATUS_OK
Close 11185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11184 8192 4096 4096 NT_STATUS_OK
ReadX 11184 12288 4096 4096 NT_STATUS_OK
WriteX 11188 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 258 NT_STATUS_OK
ReadX 11184 16384 4096 4096 NT_STATUS_OK
ReadX 11184 20480 4096 4096 NT_STATUS_OK
WriteX 11188 0 15360 15360 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11189 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11189 1004 NT_STATUS_OK
WriteX 11189 0 4096 4096 NT_STATUS_OK
Close 11189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11190 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11192 4096 4096 4096 NT_STATUS_OK
ReadX 11192 8192 4096 4096 NT_STATUS_OK
ReadX 11192 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
ReadX 11195 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
ReadX 11196 4096 4096 4096 NT_STATUS_OK
ReadX 11196 8192 4096 4096 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11197 NT_STATUS_OK
WriteX 11197 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11197 258 NT_STATUS_OK
WriteX 11197 0 15360 15360 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11202 NT_STATUS_OK
SET_FILE_INFORMATION 11202 1004 NT_STATUS_OK
Close 11202 NT_STATUS_OK
WriteX 11198 0 4096 4096 NT_STATUS_OK
Close 11198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11203 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
ReadX 11205 4096 4096 4096 NT_STATUS_OK
ReadX 11205 8192 4096 4096 NT_STATUS_OK
ReadX 11205 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11206 NT_STATUS_OK
ReadX 11206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
WriteX 11207 0 53 53 NT_STATUS_OK
Close 11207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11206 4096 4096 4096 NT_STATUS_OK
ReadX 11206 8192 4096 4096 NT_STATUS_OK
ReadX 11206 12288 4096 4096 NT_STATUS_OK
WriteX 11210 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 258 NT_STATUS_OK
WriteX 11210 0 12006 12006 NT_STATUS_OK
Close 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11214 4096 4096 4096 NT_STATUS_OK
ReadX 11214 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11217 NT_STATUS_OK
WriteX 11217 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 11991 11991 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11222 NT_STATUS_OK
SET_FILE_INFORMATION 11222 1004 NT_STATUS_OK
Close 11222 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11225 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
ReadX 11225 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
WriteX 11225 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
Close 11201 NT_STATUS_OK
WriteX 11205 0 19054 19054 NT_STATUS_OK
WriteX 11225 0 12288 12288 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11228 NT_STATUS_OK
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 61440 61440 NT_STATUS_OK
ReadX 11232 61440 4096 4096 NT_STATUS_OK
ReadX 11232 65536 61440 61440 NT_STATUS_OK
ReadX 11232 126976 4096 4096 NT_STATUS_OK
ReadX 11232 131072 61440 61440 NT_STATUS_OK
ReadX 11232 192512 4096 4096 NT_STATUS_OK
ReadX 11232 196608 61440 61440 NT_STATUS_OK
ReadX 11232 258048 4096 4096 NT_STATUS_OK
ReadX 11232 262144 61440 61440 NT_STATUS_OK
ReadX 11232 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 61440 61440 NT_STATUS_OK
ReadX 11233 61440 4096 4096 NT_STATUS_OK
ReadX 11233 65536 61440 61440 NT_STATUS_OK
ReadX 11233 126976 4096 4096 NT_STATUS_OK
ReadX 11233 131072 61440 61440 NT_STATUS_OK
ReadX 11233 192512 4096 4096 NT_STATUS_OK
ReadX 11233 196608 61440 61440 NT_STATUS_OK
ReadX 11233 258048 4096 4096 NT_STATUS_OK
ReadX 11233 262144 61440 61440 NT_STATUS_OK
ReadX 11233 323584 4096 4096 NT_STATUS_OK
ReadX 11233 327680 61440 61440 NT_STATUS_OK
ReadX 11233 389120 4096 4096 NT_STATUS_OK
ReadX 11233 393216 61440 61440 NT_STATUS_OK
ReadX 11233 454656 4096 4096 NT_STATUS_OK
ReadX 11233 458752 61440 61440 NT_STATUS_OK
ReadX 11233 520192 4096 4096 NT_STATUS_OK
ReadX 11233 524288 61440 61440 NT_STATUS_OK
ReadX 11233 585728 4096 4096 NT_STATUS_OK
ReadX 11233 589824 61440 61440 NT_STATUS_OK
ReadX 11233 651264 4096 4096 NT_STATUS_OK
ReadX 11233 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 61440 61440 NT_STATUS_OK
ReadX 11234 61440 4096 4096 NT_STATUS_OK
ReadX 11234 65536 61440 61440 NT_STATUS_OK
ReadX 11234 126976 4096 4096 NT_STATUS_OK
ReadX 11234 131072 61440 61440 NT_STATUS_OK
ReadX 11234 192512 4096 4096 NT_STATUS_OK
ReadX 11234 196608 61440 61440 NT_STATUS_OK
ReadX 11234 258048 4096 4096 NT_STATUS_OK
ReadX 11234 262144 61440 61440 NT_STATUS_OK
ReadX 11234 323584 4096 4096 NT_STATUS_OK
ReadX 11234 327680 61440 61440 NT_STATUS_OK
ReadX 11234 389120 4096 4096 NT_STATUS_OK
ReadX 11234 393216 61440 61440 NT_STATUS_OK
ReadX 11234 454656 4096 4096 NT_STATUS_OK
ReadX 11234 458752 61440 61440 NT_STATUS_OK
ReadX 11234 520192 4096 4096 NT_STATUS_OK
ReadX 11234 524288 61440 61440 NT_STATUS_OK
ReadX 11234 585728 4096 4096 NT_STATUS_OK
ReadX 11234 589824 61440 61440 NT_STATUS_OK
ReadX 11234 651264 4096 4096 NT_STATUS_OK
ReadX 11234 655360 61440 61440 NT_STATUS_OK
ReadX 11234 716800 4096 4096 NT_STATUS_OK
ReadX 11234 720896 61440 61440 NT_STATUS_OK
ReadX 11234 782336 4096 4096 NT_STATUS_OK
ReadX 11234 786432 61440 61440 NT_STATUS_OK
ReadX 11234 847872 4096 4096 NT_STATUS_OK
ReadX 11234 851968 61440 61440 NT_STATUS_OK
ReadX 11234 913408 4096 4096 NT_STATUS_OK
ReadX 11234 917504 61440 61440 NT_STATUS_OK
ReadX 11234 978944 4096 4096 NT_STATUS_OK
ReadX 11234 983040 61440 61440 NT_STATUS_OK
ReadX 11234 1044480 4096 4096 NT_STATUS_OK
ReadX 11234 1048576 61440 61440 NT_STATUS_OK
ReadX 11234 1110016 4096 4096 NT_STATUS_OK
ReadX 11234 1114112 61440 61440 NT_STATUS_OK
ReadX 11234 1175552 4096 4096 NT_STATUS_OK
ReadX 11234 1179648 61440 61440 NT_STATUS_OK
ReadX 11234 1241088 4096 4096 NT_STATUS_OK
ReadX 11234 1245184 61440 61440 NT_STATUS_OK
ReadX 11234 1306624 4096 4096 NT_STATUS_OK
ReadX 11234 1310720 61440 61440 NT_STATUS_OK
ReadX 11234 1372160 4096 4096 NT_STATUS_OK
ReadX 11234 1376256 61440 61440 NT_STATUS_OK
ReadX 11234 1437696 4096 4096 NT_STATUS_OK
ReadX 11234 1441792 61440 61440 NT_STATUS_OK
ReadX 11234 1503232 4096 4096 NT_STATUS_OK
ReadX 11234 1507328 61440 61440 NT_STATUS_OK
ReadX 11234 1568768 4096 4096 NT_STATUS_OK
ReadX 11234 1572864 61440 61440 NT_STATUS_OK
ReadX 11234 1634304 4096 4096 NT_STATUS_OK
ReadX 11234 1638400 61440 61440 NT_STATUS_OK
ReadX 11234 1699840 4096 4096 NT_STATUS_OK
ReadX 11234 1703936 61440 61440 NT_STATUS_OK
ReadX 11234 1765376 4096 4096 NT_STATUS_OK
ReadX 11234 1769472 61440 61440 NT_STATUS_OK
ReadX 11234 1830912 4096 4096 NT_STATUS_OK
ReadX 11234 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11241 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 1004 NT_STATUS_OK
WriteX 11241 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11242 NT_STATUS_OK
Close 11242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11243 NT_STATUS_OK
WriteX 11243 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11243 258 NT_STATUS_OK
WriteX 11243 0 491 491 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11241 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11247 NT_STATUS_OK
WriteX 11247 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 258 NT_STATUS_OK
WriteX 11247 0 543 543 NT_STATUS_OK
Close 11247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11261 NT_STATUS_OK
QUERY_FILE_INFORMATION 11261 1004 NT_STATUS_OK
WriteX 11261 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11261 258 NT_STATUS_OK
WriteX 11261 0 2048 2048 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11262 0 4096 4096 NT_STATUS_OK
Flush 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11267 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11273 NT_STATUS_OK
WriteX 11273 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 258 NT_STATUS_OK
WriteX 11273 0 2048 2048 NT_STATUS_OK
Close 11273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 2048 2048 NT_STATUS_OK
ReadX 11252 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
WriteX 11252 0 8192 8192 NT_STATUS_OK
WriteX 11253 0 4096 4096 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11278 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11290 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11298 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 1004 NT_STATUS_OK
WriteX 11298 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 258 NT_STATUS_OK
WriteX 11298 0 2048 2048 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11299 NT_STATUS_OK
ReadX 11299 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11305 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11306 NT_STATUS_OK
QUERY_FILE_INFORMATION 11306 1004 NT_STATUS_OK
WriteX 11306 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11306 258 NT_STATUS_OK
WriteX 11306 0 2048 2048 NT_STATUS_OK
Close 11306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11299 0 4096 4096 NT_STATUS_OK
Flush 11299 NT_STATUS_OK
WriteX 11307 0 4096 4096 NT_STATUS_OK
Flush 11307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11299 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11307 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11301 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11309 NT_STATUS_OK
WriteX 11309 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11309 258 NT_STATUS_OK
WriteX 11309 0 4096 4096 NT_STATUS_OK
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11312 NT_STATUS_OK
WriteX 11312 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11313 0 4096 4096 NT_STATUS_OK
Close 11310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11318 NT_STATUS_OK
ReadX 11318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11320 NT_STATUS_OK
WriteX 11320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
WriteX 11320 0 2048 2048 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11323 NT_STATUS_OK
ReadX 11323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11335 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11318 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Close 11322 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11337 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11347 NT_STATUS_OK
ReadX 11347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11348 NT_STATUS_OK
ReadX 11348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11357 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1004 NT_STATUS_OK
WriteX 11357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 2048 2048 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11369 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 1004 NT_STATUS_OK
WriteX 11369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 258 NT_STATUS_OK
WriteX 11369 0 2048 2048 NT_STATUS_OK
Close 11369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11377 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 1004 NT_STATUS_OK
WriteX 11377 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 2048 2048 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Flush 11358 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
Flush 11370 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11360 4096 16384 16384 NT_STATUS_OK
ReadX 11340 4096 16384 16384 NT_STATUS_OK
ReadX 11372 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11380 NT_STATUS_OK
ReadX 11380 0 2048 2048 NT_STATUS_OK
WriteX 11380 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11381 NT_STATUS_OK
QUERY_FILE_INFORMATION 11381 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11362 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Close 11346 NT_STATUS_OK
Close 11349 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11347 NT_STATUS_OK
Close 11348 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11383 NT_STATUS_OK
QUERY_FILE_INFORMATION 11383 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11385 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11388 4096 16384 16384 NT_STATUS_OK
WriteX 11388 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11400 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11401 NT_STATUS_OK
ReadX 11401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11403 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 8192 8192 NT_STATUS_OK
ReadX 11394 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11408 0 4096 4096 NT_STATUS_OK
ReadX 11408 4096 4096 4096 NT_STATUS_OK
ReadX 11408 8192 4096 4096 NT_STATUS_OK
WriteX 11394 0 4096 4096 NT_STATUS_OK
WriteX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
ReadX 11409 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11388 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11414 NT_STATUS_OK
QUERY_FILE_INFORMATION 11414 1004 NT_STATUS_OK
WriteX 11414 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11414 258 NT_STATUS_OK
WriteX 11414 0 2048 2048 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
ReadX 11417 4096 4096 4096 NT_STATUS_OK
WriteX 11417 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11419 NT_STATUS_OK
ReadX 11419 0 4096 4096 NT_STATUS_OK
ReadX 11419 4096 4096 4096 NT_STATUS_OK
WriteX 11419 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11420 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11400 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Close 11401 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11419 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11422 0 4096 4096 NT_STATUS_OK
ReadX 11422 4096 4096 4096 NT_STATUS_OK
ReadX 11422 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11426 NT_STATUS_OK
ReadX 11426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11433 NT_STATUS_OK
ReadX 11433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
ReadX 11423 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11440 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 1004 NT_STATUS_OK
WriteX 11440 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 258 NT_STATUS_OK
WriteX 11440 0 2048 2048 NT_STATUS_OK
Close 11440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11441 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11446 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 1004 NT_STATUS_OK
WriteX 11446 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 258 NT_STATUS_OK
WriteX 11446 0 2048 2048 NT_STATUS_OK
Close 11446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11430 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11448 NT_STATUS_OK
QUERY_FILE_INFORMATION 11448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11435 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Close 11427 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11425 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11433 NT_STATUS_OK
Close 11422 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11450 NT_STATUS_OK
QUERY_FILE_INFORMATION 11450 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 61440 4096 4096 NT_STATUS_OK
ReadX 11452 126976 4096 4096 NT_STATUS_OK
WriteX 11452 0 65536 65536 NT_STATUS_OK
WriteX 11452 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 61440 4096 4096 NT_STATUS_OK
ReadX 11453 126976 4096 4096 NT_STATUS_OK
ReadX 11453 192512 4096 4096 NT_STATUS_OK
ReadX 11453 258048 4096 4096 NT_STATUS_OK
WriteX 11453 0 65536 65536 NT_STATUS_OK
WriteX 11453 65536 65536 65536 NT_STATUS_OK
WriteX 11453 131072 65536 65536 NT_STATUS_OK
WriteX 11453 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 126976 4096 4096 NT_STATUS_OK
ReadX 11454 192512 4096 4096 NT_STATUS_OK
ReadX 11454 258048 4096 4096 NT_STATUS_OK
ReadX 11454 323584 4096 4096 NT_STATUS_OK
ReadX 11454 389120 4096 4096 NT_STATUS_OK
ReadX 11454 454656 4096 4096 NT_STATUS_OK
ReadX 11454 520192 4096 4096 NT_STATUS_OK
WriteX 11454 0 65536 65536 NT_STATUS_OK
WriteX 11454 65536 65536 65536 NT_STATUS_OK
WriteX 11454 131072 65536 65536 NT_STATUS_OK
WriteX 11454 196608 65536 65536 NT_STATUS_OK
WriteX 11454 262144 65536 65536 NT_STATUS_OK
WriteX 11454 327680 65536 65536 NT_STATUS_OK
WriteX 11454 393216 65536 65536 NT_STATUS_OK
WriteX 11454 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11455 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11455 8192 4096 4096 NT_STATUS_OK
ReadX 11455 12288 4096 4096 NT_STATUS_OK
ReadX 11455 16384 4096 4096 NT_STATUS_OK
ReadX 11455 20480 4096 4096 NT_STATUS_OK
ReadX 11455 24576 4096 4096 NT_STATUS_OK
ReadX 11455 28672 4096 4096 NT_STATUS_OK
ReadX 11455 32768 4096 4096 NT_STATUS_OK
ReadX 11455 36864 4096 4096 NT_STATUS_OK
ReadX 11455 40960 4096 4096 NT_STATUS_OK
ReadX 11455 45056 4096 4096 NT_STATUS_OK
ReadX 11455 49152 4096 4096 NT_STATUS_OK
ReadX 11455 53248 4096 4096 NT_STATUS_OK
ReadX 11455 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11455 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11456 NT_STATUS_OK
Close 11456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11458 NT_STATUS_OK
WriteX 11458 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 0 57088 57088 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
Flush 11458 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11459 NT_STATUS_OK
SET_FILE_INFORMATION 11459 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11460 NT_STATUS_OK
Close 11460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11462 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11463 NT_STATUS_OK
WriteX 11463 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 51456 51456 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Flush 11463 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11467 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 53077 53077 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11473 NT_STATUS_OK
WriteX 11473 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 65536 65536 NT_STATUS_OK
WriteX 11473 65536 1856 1856 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11482 NT_STATUS_OK
WriteX 11482 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11482 258 NT_STATUS_OK
WriteX 11482 0 7983 7983 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11487 NT_STATUS_OK
WriteX 11487 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 258 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 65536 65536 NT_STATUS_OK
WriteX 11487 131072 65536 65536 NT_STATUS_OK
WriteX 11487 196608 65536 65536 NT_STATUS_OK
WriteX 11487 262144 65536 65536 NT_STATUS_OK
WriteX 11487 327680 65536 65536 NT_STATUS_OK
WriteX 11487 393216 65536 65536 NT_STATUS_OK
WriteX 11487 458752 46731 46731 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11488 NT_STATUS_OK
WriteX 11488 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11477 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 65536 65536 NT_STATUS_OK
WriteX 11488 65536 22848 22848 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11492 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11493 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11493 1004 NT_STATUS_OK
ReadX 11493 8192 4096 4096 NT_STATUS_OK
ReadX 11493 12288 4096 4096 NT_STATUS_OK
ReadX 11493 16384 4096 4096 NT_STATUS_OK
ReadX 11493 20480 4096 4096 NT_STATUS_OK
ReadX 11493 24576 4096 4096 NT_STATUS_OK
ReadX 11493 28672 4096 4096 NT_STATUS_OK
ReadX 11493 32768 4096 4096 NT_STATUS_OK
ReadX 11493 36864 4096 4096 NT_STATUS_OK
ReadX 11493 40960 4096 4096 NT_STATUS_OK
ReadX 11493 45056 4096 4096 NT_STATUS_OK
ReadX 11493 49152 4096 4096 NT_STATUS_OK
ReadX 11493 53248 4096 4096 NT_STATUS_OK
ReadX 11493 57344 4096 4096 NT_STATUS_OK
ReadX 11493 61440 4096 4096 NT_STATUS_OK
ReadX 11493 65536 4096 4096 NT_STATUS_OK
ReadX 11493 69632 4096 4096 NT_STATUS_OK
ReadX 11493 73728 4096 4096 NT_STATUS_OK
ReadX 11493 77824 4096 4096 NT_STATUS_OK
ReadX 11493 81920 4096 4096 NT_STATUS_OK
ReadX 11493 86016 4096 4096 NT_STATUS_OK
ReadX 11493 90112 4096 4096 NT_STATUS_OK
ReadX 11493 94208 4096 4096 NT_STATUS_OK
ReadX 11493 98304 4096 4096 NT_STATUS_OK
ReadX 11493 102400 4096 4096 NT_STATUS_OK
ReadX 11493 106496 4096 4096 NT_STATUS_OK
ReadX 11493 110592 4096 4096 NT_STATUS_OK
ReadX 11493 114688 4096 4096 NT_STATUS_OK
ReadX 11493 118784 4096 4096 NT_STATUS_OK
ReadX 11493 122880 4096 4096 NT_STATUS_OK
ReadX 11493 126976 4096 4096 NT_STATUS_OK
ReadX 11493 131072 4096 4096 NT_STATUS_OK
ReadX 11493 135168 4096 4096 NT_STATUS_OK
ReadX 11493 139264 4096 4096 NT_STATUS_OK
ReadX 11493 143360 4096 4096 NT_STATUS_OK
ReadX 11493 147456 4096 4096 NT_STATUS_OK
ReadX 11493 151552 4096 4096 NT_STATUS_OK
ReadX 11493 155648 4096 4096 NT_STATUS_OK
ReadX 11493 159744 4096 4096 NT_STATUS_OK
ReadX 11493 163840 4096 4096 NT_STATUS_OK
ReadX 11493 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11493 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11496 NT_STATUS_OK
WriteX 11496 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 258 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
WriteX 11496 0 42388 42388 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
ReadX 11500 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
SET_FILE_INFORMATION 11501 1004 NT_STATUS_OK
WriteX 11501 0 42652 42652 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11503 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
ReadX 11505 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11510 NT_STATUS_OK
WriteX 11510 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11510 258 NT_STATUS_OK
WriteX 11510 0 65536 65536 NT_STATUS_OK
WriteX 11510 65536 49 49 NT_STATUS_OK
Close 11510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 61440 61440 NT_STATUS_OK
ReadX 11511 61440 4096 4096 NT_STATUS_OK
ReadX 11511 65536 61440 61440 NT_STATUS_OK
ReadX 11511 126976 4096 4096 NT_STATUS_OK
ReadX 11511 131072 61440 61440 NT_STATUS_OK
ReadX 11511 192512 4096 4096 NT_STATUS_OK
ReadX 11511 196608 61440 61440 NT_STATUS_OK
ReadX 11511 258048 4096 4096 NT_STATUS_OK
ReadX 11511 262144 61440 61440 NT_STATUS_OK
ReadX 11511 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 61440 61440 NT_STATUS_OK
ReadX 11512 61440 4096 4096 NT_STATUS_OK
ReadX 11512 65536 61440 61440 NT_STATUS_OK
ReadX 11512 126976 4096 4096 NT_STATUS_OK
ReadX 11512 131072 61440 61440 NT_STATUS_OK
ReadX 11512 192512 4096 4096 NT_STATUS_OK
ReadX 11512 196608 61440 61440 NT_STATUS_OK
ReadX 11512 258048 4096 4096 NT_STATUS_OK
ReadX 11512 262144 61440 61440 NT_STATUS_OK
ReadX 11512 323584 4096 4096 NT_STATUS_OK
ReadX 11512 327680 61440 61440 NT_STATUS_OK
ReadX 11512 389120 4096 4096 NT_STATUS_OK
ReadX 11512 393216 61440 61440 NT_STATUS_OK
ReadX 11512 454656 4096 4096 NT_STATUS_OK
ReadX 11512 458752 61440 61440 NT_STATUS_OK
ReadX 11512 520192 4096 4096 NT_STATUS_OK
ReadX 11512 524288 61440 61440 NT_STATUS_OK
ReadX 11512 585728 4096 4096 NT_STATUS_OK
ReadX 11512 589824 61440 61440 NT_STATUS_OK
ReadX 11512 651264 4096 4096 NT_STATUS_OK
ReadX 11512 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 61440 61440 NT_STATUS_OK
ReadX 11513 61440 4096 4096 NT_STATUS_OK
ReadX 11513 65536 61440 61440 NT_STATUS_OK
ReadX 11513 126976 4096 4096 NT_STATUS_OK
ReadX 11513 131072 61440 61440 NT_STATUS_OK
ReadX 11513 192512 4096 4096 NT_STATUS_OK
ReadX 11513 196608 61440 61440 NT_STATUS_OK
ReadX 11513 258048 4096 4096 NT_STATUS_OK
ReadX 11513 262144 61440 61440 NT_STATUS_OK
ReadX 11513 323584 4096 4096 NT_STATUS_OK
ReadX 11513 327680 61440 61440 NT_STATUS_OK
ReadX 11513 389120 4096 4096 NT_STATUS_OK
ReadX 11513 393216 61440 61440 NT_STATUS_OK
ReadX 11513 454656 4096 4096 NT_STATUS_OK
ReadX 11513 458752 61440 61440 NT_STATUS_OK
ReadX 11513 520192 4096 4096 NT_STATUS_OK
ReadX 11513 524288 61440 61440 NT_STATUS_OK
ReadX 11513 585728 4096 4096 NT_STATUS_OK
ReadX 11513 589824 61440 61440 NT_STATUS_OK
ReadX 11513 651264 4096 4096 NT_STATUS_OK
ReadX 11513 655360 61440 61440 NT_STATUS_OK
ReadX 11513 716800 4096 4096 NT_STATUS_OK
ReadX 11513 720896 61440 61440 NT_STATUS_OK
ReadX 11513 782336 4096 4096 NT_STATUS_OK
ReadX 11513 786432 61440 61440 NT_STATUS_OK
ReadX 11513 847872 4096 4096 NT_STATUS_OK
ReadX 11513 851968 61440 61440 NT_STATUS_OK
ReadX 11513 913408 4096 4096 NT_STATUS_OK
ReadX 11513 917504 61440 61440 NT_STATUS_OK
ReadX 11513 978944 4096 4096 NT_STATUS_OK
ReadX 11513 983040 61440 61440 NT_STATUS_OK
ReadX 11513 1044480 4096 4096 NT_STATUS_OK
ReadX 11513 1048576 61440 61440 NT_STATUS_OK
ReadX 11513 1110016 4096 4096 NT_STATUS_OK
ReadX 11513 1114112 61440 61440 NT_STATUS_OK
ReadX 11513 1175552 4096 4096 NT_STATUS_OK
ReadX 11513 1179648 61440 61440 NT_STATUS_OK
ReadX 11513 1241088 4096 4096 NT_STATUS_OK
ReadX 11513 1245184 61440 61440 NT_STATUS_OK
ReadX 11513 1306624 4096 4096 NT_STATUS_OK
ReadX 11513 1310720 61440 61440 NT_STATUS_OK
ReadX 11513 1372160 4096 4096 NT_STATUS_OK
ReadX 11513 1376256 61440 61440 NT_STATUS_OK
ReadX 11513 1437696 4096 4096 NT_STATUS_OK
ReadX 11513 1441792 61440 61440 NT_STATUS_OK
ReadX 11513 1503232 4096 4096 NT_STATUS_OK
ReadX 11513 1507328 61440 61440 NT_STATUS_OK
ReadX 11513 1568768 4096 4096 NT_STATUS_OK
ReadX 11513 1572864 61440 61440 NT_STATUS_OK
ReadX 11513 1634304 4096 4096 NT_STATUS_OK
ReadX 11513 1638400 61440 61440 NT_STATUS_OK
ReadX 11513 1699840 4096 4096 NT_STATUS_OK
ReadX 11513 1703936 61440 61440 NT_STATUS_OK
ReadX 11513 1765376 4096 4096 NT_STATUS_OK
ReadX 11513 1769472 61440 61440 NT_STATUS_OK
ReadX 11513 1830912 4096 4096 NT_STATUS_OK
ReadX 11513 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11515 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
ReadX 11515 2156 24 24 NT_STATUS_OK
ReadX 11515 2139 276 276 NT_STATUS_OK
ReadX 11515 2136 14 14 NT_STATUS_OK
ReadX 11515 2136 7 7 NT_STATUS_OK
ReadX 11515 2138 12 12 NT_STATUS_OK
ReadX 11515 2137 8 8 NT_STATUS_OK
ReadX 11515 2135 15 15 NT_STATUS_OK
ReadX 11515 0 16 16 NT_STATUS_OK
ReadX 11515 16 2048 2048 NT_STATUS_OK
ReadX 11515 2064 2048 2048 NT_STATUS_OK
ReadX 11515 257 2048 2048 NT_STATUS_OK
ReadX 11515 385 2048 2048 NT_STATUS_OK
ReadX 11515 513 2048 2048 NT_STATUS_OK
ReadX 11515 641 2048 2048 NT_STATUS_OK
ReadX 11515 769 2048 2048 NT_STATUS_OK
ReadX 11515 897 2048 2048 NT_STATUS_OK
ReadX 11515 1025 2048 2048 NT_STATUS_OK
ReadX 11515 1153 2048 2048 NT_STATUS_OK
ReadX 11515 1281 2048 2048 NT_STATUS_OK
ReadX 11515 1409 2048 2048 NT_STATUS_OK
ReadX 11515 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11511 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11520 NT_STATUS_OK
WriteX 11520 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 258 NT_STATUS_OK
WriteX 11520 0 10575 10575 NT_STATUS_OK
Flush 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11525 NT_STATUS_OK
LockX 11525 2147483538 1 NT_STATUS_OK
UnlockX 11525 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
ReadX 11525 0 512 512 NT_STATUS_OK
ReadX 11525 512 512 512 NT_STATUS_OK
ReadX 11525 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1004 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11526 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1005 NT_STATUS_OK
ReadX 11526 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11527 NT_STATUS_OK
LockX 11527 2147483538 1 NT_STATUS_OK
UnlockX 11527 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11527 1005 NT_STATUS_OK
ReadX 11527 0 512 512 NT_STATUS_OK
ReadX 11527 512 512 512 NT_STATUS_OK
ReadX 11527 1024 512 512 NT_STATUS_OK
ReadX 11527 288 20 20 NT_STATUS_OK
ReadX 11527 308 2084 2084 NT_STATUS_OK
ReadX 11527 388 2084 2084 NT_STATUS_OK
ReadX 11527 388 2084 2084 NT_STATUS_OK
ReadX 11514 2157 1386 1386 NT_STATUS_OK
ReadX 11527 2472 399 399 NT_STATUS_OK
ReadX 11527 3072 1536 1536 NT_STATUS_OK
ReadX 11527 544 149 149 NT_STATUS_OK
ReadX 11527 693 485 485 NT_STATUS_OK
Close 11527 NT_STATUS_OK
ReadX 11514 2157 4096 4096 NT_STATUS_OK
ReadX 11514 6253 4096 4096 NT_STATUS_OK
ReadX 11514 10349 4096 4096 NT_STATUS_OK
ReadX 11514 14445 4096 4096 NT_STATUS_OK
ReadX 11514 18541 4096 4096 NT_STATUS_OK
ReadX 11514 22637 256 256 NT_STATUS_OK
ReadX 11514 22893 4096 4096 NT_STATUS_OK
ReadX 11514 26989 4096 4096 NT_STATUS_OK
ReadX 11514 31085 4096 4096 NT_STATUS_OK
ReadX 11514 35181 4096 4096 NT_STATUS_OK
ReadX 11514 39277 4096 4096 NT_STATUS_OK
ReadX 11514 43373 4096 4096 NT_STATUS_OK
ReadX 11514 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11514 2157 1024 1024 NT_STATUS_OK
ReadX 11514 1667 4688 4688 NT_STATUS_OK
ReadX 11514 6355 3516 3516 NT_STATUS_OK
ReadX 11514 9871 16384 16384 NT_STATUS_OK
ReadX 11514 26255 3771 3771 NT_STATUS_OK
ReadX 11514 30026 2048 2048 NT_STATUS_OK
ReadX 11514 32074 1024 1024 NT_STATUS_OK
ReadX 11514 33098 6652 6652 NT_STATUS_OK
ReadX 11514 39750 16384 16384 NT_STATUS_OK
ReadX 11514 56134 10496 10496 NT_STATUS_OK
ReadX 11514 66630 1784 1784 NT_STATUS_OK
ReadX 11514 68414 90 90 NT_STATUS_OK
ReadX 11514 68504 273 273 NT_STATUS_OK
ReadX 11514 68777 1600 1600 NT_STATUS_OK
ReadX 11514 70377 640 640 NT_STATUS_OK
ReadX 11514 71017 1280 1280 NT_STATUS_OK
ReadX 11514 72297 8464 8464 NT_STATUS_OK
ReadX 11514 80761 158 158 NT_STATUS_OK
ReadX 11514 80919 912 912 NT_STATUS_OK
ReadX 11514 81831 1980 1980 NT_STATUS_OK
ReadX 11514 83811 2256 2256 NT_STATUS_OK
ReadX 11514 86067 400 400 NT_STATUS_OK
ReadX 11514 86467 252 252 NT_STATUS_OK
ReadX 11514 86719 42 42 NT_STATUS_OK
ReadX 11514 86761 725 725 NT_STATUS_OK
ReadX 11514 2009 512 512 NT_STATUS_OK
ReadX 11514 3895 9 9 NT_STATUS_OK
ReadX 11514 3781 46 46 NT_STATUS_OK
ReadX 11514 4059 92 92 NT_STATUS_OK
ReadX 11514 3781 92 92 NT_STATUS_OK
ReadX 11514 3986 184 184 NT_STATUS_OK
ReadX 11514 3987 16384 16384 NT_STATUS_OK
ReadX 11514 3902 16384 16384 NT_STATUS_OK
ReadX 11514 3781 10240 10240 NT_STATUS_OK
ReadX 11514 3821 16384 16384 NT_STATUS_OK
ReadX 11514 3891 935 935 NT_STATUS_OK
ReadX 11514 4060 10240 10240 NT_STATUS_OK
ReadX 11514 4059 184 184 NT_STATUS_OK
ReadX 11514 256 184 184 NT_STATUS_OK
ReadX 11514 256 1026 1026 NT_STATUS_OK
ReadX 11514 3901 326 326 NT_STATUS_OK
ReadX 11514 3899 652 652 NT_STATUS_OK
ReadX 11514 256 2 2 NT_STATUS_OK
ReadX 11514 258 4948 4948 NT_STATUS_OK
Close 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11532 NT_STATUS_OK
WriteX 11532 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
WriteX 11532 0 65536 65536 NT_STATUS_OK
WriteX 11532 65536 65536 65536 NT_STATUS_OK
WriteX 11532 131072 65536 65536 NT_STATUS_OK
WriteX 11532 196608 65536 65536 NT_STATUS_OK
WriteX 11532 262144 65536 65536 NT_STATUS_OK
WriteX 11532 327680 65536 65536 NT_STATUS_OK
WriteX 11532 393216 65536 65536 NT_STATUS_OK
WriteX 11532 458752 65536 65536 NT_STATUS_OK
WriteX 11532 524288 65536 65536 NT_STATUS_OK
WriteX 11532 589824 35257 35257 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
WriteX 11537 131072 65536 65536 NT_STATUS_OK
WriteX 11537 196608 65536 65536 NT_STATUS_OK
WriteX 11537 262144 65536 65536 NT_STATUS_OK
WriteX 11537 327680 65536 65536 NT_STATUS_OK
WriteX 11537 393216 65536 65536 NT_STATUS_OK
WriteX 11537 458752 65536 65536 NT_STATUS_OK
WriteX 11537 524288 65536 65536 NT_STATUS_OK
WriteX 11537 589824 57598 57598 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 12543 12543 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
Close 11523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
ReadX 11545 1938 24 24 NT_STATUS_OK
ReadX 11545 1920 276 276 NT_STATUS_OK
ReadX 11545 1918 14 14 NT_STATUS_OK
ReadX 11545 1918 7 7 NT_STATUS_OK
ReadX 11545 1919 12 12 NT_STATUS_OK
ReadX 11545 1919 8 8 NT_STATUS_OK
ReadX 11545 1917 15 15 NT_STATUS_OK
ReadX 11545 0 16 16 NT_STATUS_OK
ReadX 11545 16 2048 2048 NT_STATUS_OK
ReadX 11545 2064 2048 2048 NT_STATUS_OK
ReadX 11545 257 2048 2048 NT_STATUS_OK
ReadX 11545 385 2048 2048 NT_STATUS_OK
ReadX 11545 513 2048 2048 NT_STATUS_OK
ReadX 11545 641 2048 2048 NT_STATUS_OK
ReadX 11545 769 2048 2048 NT_STATUS_OK
ReadX 11545 897 2048 2048 NT_STATUS_OK
ReadX 11545 1025 2048 2048 NT_STATUS_OK
ReadX 11545 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11550 NT_STATUS_OK
WriteX 11550 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 258 NT_STATUS_OK
WriteX 11550 0 11588 11588 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11551 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11553 NT_STATUS_OK
ReadX 11553 0 4096 4096 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11555 NT_STATUS_OK
WriteX 11555 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11555 258 NT_STATUS_OK
WriteX 11555 0 11615 11615 NT_STATUS_OK
Flush 11555 NT_STATUS_OK
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11564 NT_STATUS_OK
WriteX 11564 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 16050 16050 NT_STATUS_OK
Close 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11544 1939 64 64 NT_STATUS_OK
ReadX 11544 128 248 248 NT_STATUS_OK
ReadX 11544 128 568 568 NT_STATUS_OK
ReadX 11544 3872 1536 1536 NT_STATUS_OK
ReadX 11544 3456 2560 2560 NT_STATUS_OK
ReadX 11544 3136 512 512 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
ReadX 11544 3264 3072 3072 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 3616 4096 4096 NT_STATUS_OK
ReadX 11544 1939 64 64 NT_STATUS_OK
ReadX 11544 128 248 248 NT_STATUS_OK
ReadX 11544 128 608 608 NT_STATUS_OK
ReadX 11544 2858 1024 1024 NT_STATUS_OK
ReadX 11544 2810 4096 4096 NT_STATUS_OK
ReadX 11544 2826 4096 4096 NT_STATUS_OK
ReadX 11544 2580 2048 2048 NT_STATUS_OK
ReadX 11544 2800 2560 2560 NT_STATUS_OK
ReadX 11544 2100 4096 4096 NT_STATUS_OK
ReadX 11544 2084 4096 4096 NT_STATUS_OK
ReadX 11544 868 4096 4096 NT_STATUS_OK
ReadX 11544 2324 4096 4096 NT_STATUS_OK
ReadX 11544 884 4096 4096 NT_STATUS_OK
ReadX 11544 2604 1024 1024 NT_STATUS_OK
ReadX 11544 580 4096 4096 NT_STATUS_OK
ReadX 11544 596 4096 4096 NT_STATUS_OK
ReadX 11544 2752 4096 4096 NT_STATUS_OK
ReadX 11544 2842 1024 1024 NT_STATUS_OK
ReadX 11544 660 4096 4096 NT_STATUS_OK
ReadX 11544 2720 4096 4096 NT_STATUS_OK
ReadX 11544 2736 4096 4096 NT_STATUS_OK
ReadX 11544 628 4096 4096 NT_STATUS_OK
ReadX 11544 2704 4096 4096 NT_STATUS_OK
ReadX 11544 1556 4096 4096 NT_STATUS_OK
ReadX 11544 576 4096 4096 NT_STATUS_OK
ReadX 11544 3168 1536 1536 NT_STATUS_OK
ReadX 11544 832 4096 4096 NT_STATUS_OK
ReadX 11544 1088 4096 4096 NT_STATUS_OK
ReadX 11544 1344 4096 4096 NT_STATUS_OK
ReadX 11544 1600 4096 4096 NT_STATUS_OK
ReadX 11544 1856 4096 4096 NT_STATUS_OK
ReadX 11544 2112 4096 4096 NT_STATUS_OK
ReadX 11544 1892 4096 4096 NT_STATUS_OK
ReadX 11544 820 4096 4096 NT_STATUS_OK
ReadX 11544 788 4096 4096 NT_STATUS_OK
ReadX 11544 1604 4096 4096 NT_STATUS_OK
ReadX 11544 3648 4096 4096 NT_STATUS_OK
ReadX 11544 2608 4096 4096 NT_STATUS_OK
ReadX 11544 548 4096 4096 NT_STATUS_OK
ReadX 11544 740 4096 4096 NT_STATUS_OK
ReadX 11544 1344 4096 4096 NT_STATUS_OK
ReadX 11544 3392 4096 4096 NT_STATUS_OK
ReadX 11544 3904 4096 4096 NT_STATUS_OK
ReadX 11544 644 4096 4096 NT_STATUS_OK
ReadX 11544 676 4096 4096 NT_STATUS_OK
ReadX 11544 2688 4096 4096 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 900 4096 4096 NT_STATUS_OK
ReadX 11544 1908 4096 4096 NT_STATUS_OK
ReadX 11544 852 4096 4096 NT_STATUS_OK
ReadX 11544 724 4096 4096 NT_STATUS_OK
ReadX 11544 2292 4096 4096 NT_STATUS_OK
ReadX 11544 612 4096 4096 NT_STATUS_OK
ReadX 11544 388 4096 4096 NT_STATUS_OK
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 500 4096 4096 NT_STATUS_OK
ReadX 11544 356 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 576 4096 4096 NT_STATUS_OK
ReadX 11544 340 4096 4096 NT_STATUS_OK
ReadX 11544 420 4096 4096 NT_STATUS_OK
ReadX 11544 1600 4096 4096 NT_STATUS_OK
ReadX 11544 404 4096 4096 NT_STATUS_OK
ReadX 11544 1428 4096 4096 NT_STATUS_OK
ReadX 11544 2656 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 452 4096 4096 NT_STATUS_OK
ReadX 11544 692 4096 4096 NT_STATUS_OK
ReadX 11544 564 4096 4096 NT_STATUS_OK
ReadX 11544 372 4096 4096 NT_STATUS_OK
ReadX 11544 468 4096 4096 NT_STATUS_OK
ReadX 11544 484 4096 4096 NT_STATUS_OK
ReadX 11544 1088 4096 4096 NT_STATUS_OK
ReadX 11544 1924 4096 4096 NT_STATUS_OK
ReadX 11544 2768 4096 4096 NT_STATUS_OK
ReadX 11544 832 4096 4096 NT_STATUS_OK
ReadX 11544 836 4096 4096 NT_STATUS_OK
ReadX 11544 1856 4096 4096 NT_STATUS_OK
ReadX 11544 2640 4096 4096 NT_STATUS_OK
ReadX 11544 436 4096 4096 NT_STATUS_OK
ReadX 11544 1828 4096 4096 NT_STATUS_OK
ReadX 11544 804 4096 4096 NT_STATUS_OK
ReadX 11544 1860 4096 4096 NT_STATUS_OK
ReadX 11544 1812 4096 4096 NT_STATUS_OK
ReadX 11544 756 4096 4096 NT_STATUS_OK
ReadX 11544 1636 4096 4096 NT_STATUS_OK
ReadX 11544 772 4096 4096 NT_STATUS_OK
ReadX 11544 2036 4096 4096 NT_STATUS_OK
ReadX 11544 1220 4096 4096 NT_STATUS_OK
ReadX 11544 1652 4096 4096 NT_STATUS_OK
ReadX 11544 2588 4096 4096 NT_STATUS_OK
ReadX 11544 916 4096 4096 NT_STATUS_OK
ReadX 11544 260 4096 4096 NT_STATUS_OK
ReadX 11544 932 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 308 4096 4096 NT_STATUS_OK
ReadX 11544 292 4096 4096 NT_STATUS_OK
ReadX 11544 1140 4096 4096 NT_STATUS_OK
ReadX 11544 276 4096 4096 NT_STATUS_OK
ReadX 11544 2020 4096 4096 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
ReadX 11544 516 4096 4096 NT_STATUS_OK
ReadX 11544 1844 4096 4096 NT_STATUS_OK
ReadX 11544 1124 4096 4096 NT_STATUS_OK
ReadX 11544 3136 4096 4096 NT_STATUS_OK
ReadX 11544 324 4096 4096 NT_STATUS_OK
ReadX 11544 1156 4096 4096 NT_STATUS_OK
ReadX 11544 1172 4096 4096 NT_STATUS_OK
ReadX 11544 2112 4096 4096 NT_STATUS_OK
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 964 4096 4096 NT_STATUS_OK
ReadX 11544 980 4096 4096 NT_STATUS_OK
ReadX 11544 1012 4096 4096 NT_STATUS_OK
ReadX 11544 532 4096 4096 NT_STATUS_OK
ReadX 11544 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11544 1620 4096 4096 NT_STATUS_OK
ReadX 11544 1604 4096 4096 NT_STATUS_OK
ReadX 11544 2116 4096 4096 NT_STATUS_OK
ReadX 11544 2132 4096 4096 NT_STATUS_OK
ReadX 11544 2148 4096 4096 NT_STATUS_OK
ReadX 11544 2276 4096 4096 NT_STATUS_OK
ReadX 11544 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11569 NT_STATUS_OK
QUERY_FILE_INFORMATION 11524 1004 NT_STATUS_OK
Close 11524 NT_STATUS_OK
WriteX 11569 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1004 NT_STATUS_OK
Close 11526 NT_STATUS_OK
WriteX 11569 0 65536 65536 NT_STATUS_OK
WriteX 11569 65536 64850 64850 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
ReadX 11544 2068 4096 4096 NT_STATUS_OK
ReadX 11544 1588 4096 4096 NT_STATUS_OK
ReadX 11544 1572 4096 4096 NT_STATUS_OK
WriteX 11571 0 18630 18630 NT_STATUS_OK
Flush 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11544 612 4096 4096 NT_STATUS_OK
ReadX 11544 564 4096 4096 NT_STATUS_OK
ReadX 11544 1876 4096 4096 NT_STATUS_OK
ReadX 11544 628 4096 4096 NT_STATUS_OK
ReadX 11544 740 4096 4096 NT_STATUS_OK
ReadX 11544 724 4096 4096 NT_STATUS_OK
ReadX 11544 644 4096 4096 NT_STATUS_OK
ReadX 11544 2324 4096 4096 NT_STATUS_OK
ReadX 11544 660 4096 4096 NT_STATUS_OK
ReadX 11544 852 4096 4096 NT_STATUS_OK
ReadX 11544 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 580 4096 4096 NT_STATUS_OK
ReadX 11544 3136 512 512 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
Close 11544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 61440 4096 4096 NT_STATUS_OK
ReadX 11576 126976 4096 4096 NT_STATUS_OK
WriteX 11576 0 65536 65536 NT_STATUS_OK
WriteX 11576 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 61440 4096 4096 NT_STATUS_OK
ReadX 11577 126976 4096 4096 NT_STATUS_OK
ReadX 11577 192512 4096 4096 NT_STATUS_OK
ReadX 11577 258048 4096 4096 NT_STATUS_OK
WriteX 11577 0 65536 65536 NT_STATUS_OK
WriteX 11577 65536 65536 65536 NT_STATUS_OK
WriteX 11577 131072 65536 65536 NT_STATUS_OK
WriteX 11577 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 61440 4096 4096 NT_STATUS_OK
ReadX 11578 126976 4096 4096 NT_STATUS_OK
ReadX 11578 192512 4096 4096 NT_STATUS_OK
ReadX 11578 258048 4096 4096 NT_STATUS_OK
ReadX 11578 323584 4096 4096 NT_STATUS_OK
ReadX 11578 389120 4096 4096 NT_STATUS_OK
ReadX 11578 454656 4096 4096 NT_STATUS_OK
ReadX 11578 520192 4096 4096 NT_STATUS_OK
WriteX 11578 0 65536 65536 NT_STATUS_OK
WriteX 11578 65536 65536 65536 NT_STATUS_OK
WriteX 11578 131072 65536 65536 NT_STATUS_OK
WriteX 11578 196608 65536 65536 NT_STATUS_OK
WriteX 11578 262144 65536 65536 NT_STATUS_OK
WriteX 11578 327680 65536 65536 NT_STATUS_OK
WriteX 11578 393216 65536 65536 NT_STATUS_OK
WriteX 11578 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11581 NT_STATUS_OK
WriteX 11581 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11581 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11579 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11583 NT_STATUS_OK
Close 11583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11575 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Close 11578 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11586 NT_STATUS_OK
WriteX 11586 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11586 258 NT_STATUS_OK
WriteX 11586 0 62591 62591 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11591 NT_STATUS_OK
WriteX 11591 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11591 258 NT_STATUS_OK
WriteX 11591 0 10845 10845 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11596 NT_STATUS_OK
WriteX 11596 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11596 258 NT_STATUS_OK
WriteX 11596 0 30118 30118 NT_STATUS_OK
Close 11596 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
WriteX 11581 0 64 64 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 61440 61440 NT_STATUS_OK
ReadX 11598 61440 4096 4096 NT_STATUS_OK
ReadX 11598 65536 61440 61440 NT_STATUS_OK
ReadX 11598 126976 4096 4096 NT_STATUS_OK
ReadX 11598 131072 61440 61440 NT_STATUS_OK
ReadX 11598 192512 4096 4096 NT_STATUS_OK
ReadX 11598 196608 61440 61440 NT_STATUS_OK
ReadX 11598 258048 4096 4096 NT_STATUS_OK
ReadX 11598 262144 61440 61440 NT_STATUS_OK
ReadX 11598 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 61440 61440 NT_STATUS_OK
ReadX 11599 61440 4096 4096 NT_STATUS_OK
ReadX 11599 65536 61440 61440 NT_STATUS_OK
ReadX 11599 126976 4096 4096 NT_STATUS_OK
ReadX 11599 131072 61440 61440 NT_STATUS_OK
ReadX 11599 192512 4096 4096 NT_STATUS_OK
ReadX 11599 196608 61440 61440 NT_STATUS_OK
ReadX 11599 258048 4096 4096 NT_STATUS_OK
ReadX 11599 262144 61440 61440 NT_STATUS_OK
ReadX 11599 323584 4096 4096 NT_STATUS_OK
ReadX 11599 327680 61440 61440 NT_STATUS_OK
ReadX 11599 389120 4096 4096 NT_STATUS_OK
ReadX 11599 393216 61440 61440 NT_STATUS_OK
ReadX 11599 454656 4096 4096 NT_STATUS_OK
ReadX 11599 458752 61440 61440 NT_STATUS_OK
ReadX 11599 520192 4096 4096 NT_STATUS_OK
ReadX 11599 524288 61440 61440 NT_STATUS_OK
ReadX 11599 585728 4096 4096 NT_STATUS_OK
ReadX 11599 589824 61440 61440 NT_STATUS_OK
ReadX 11599 651264 4096 4096 NT_STATUS_OK
ReadX 11599 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 61440 61440 NT_STATUS_OK
ReadX 11600 61440 4096 4096 NT_STATUS_OK
ReadX 11600 65536 61440 61440 NT_STATUS_OK
ReadX 11600 126976 4096 4096 NT_STATUS_OK
ReadX 11600 131072 61440 61440 NT_STATUS_OK
ReadX 11600 192512 4096 4096 NT_STATUS_OK
ReadX 11600 196608 61440 61440 NT_STATUS_OK
ReadX 11600 258048 4096 4096 NT_STATUS_OK
ReadX 11600 262144 61440 61440 NT_STATUS_OK
ReadX 11600 323584 4096 4096 NT_STATUS_OK
ReadX 11600 327680 61440 61440 NT_STATUS_OK
ReadX 11600 389120 4096 4096 NT_STATUS_OK
ReadX 11600 393216 61440 61440 NT_STATUS_OK
ReadX 11600 454656 4096 4096 NT_STATUS_OK
ReadX 11600 458752 61440 61440 NT_STATUS_OK
ReadX 11600 520192 4096 4096 NT_STATUS_OK
ReadX 11600 524288 61440 61440 NT_STATUS_OK
ReadX 11600 585728 4096 4096 NT_STATUS_OK
ReadX 11600 589824 61440 61440 NT_STATUS_OK
ReadX 11600 651264 4096 4096 NT_STATUS_OK
ReadX 11600 655360 61440 61440 NT_STATUS_OK
ReadX 11600 716800 4096 4096 NT_STATUS_OK
ReadX 11600 720896 61440 61440 NT_STATUS_OK
ReadX 11600 782336 4096 4096 NT_STATUS_OK
ReadX 11600 786432 61440 61440 NT_STATUS_OK
ReadX 11600 847872 4096 4096 NT_STATUS_OK
ReadX 11600 851968 61440 61440 NT_STATUS_OK
ReadX 11600 913408 4096 4096 NT_STATUS_OK
ReadX 11600 917504 61440 61440 NT_STATUS_OK
ReadX 11600 978944 4096 4096 NT_STATUS_OK
ReadX 11600 983040 61440 61440 NT_STATUS_OK
ReadX 11600 1044480 4096 4096 NT_STATUS_OK
ReadX 11600 1048576 61440 61440 NT_STATUS_OK
ReadX 11600 1110016 4096 4096 NT_STATUS_OK
ReadX 11600 1114112 61440 61440 NT_STATUS_OK
ReadX 11600 1175552 4096 4096 NT_STATUS_OK
ReadX 11600 1179648 61440 61440 NT_STATUS_OK
ReadX 11600 1241088 4096 4096 NT_STATUS_OK
ReadX 11600 1245184 61440 61440 NT_STATUS_OK
ReadX 11600 1306624 4096 4096 NT_STATUS_OK
ReadX 11600 1310720 61440 61440 NT_STATUS_OK
ReadX 11600 1372160 4096 4096 NT_STATUS_OK
ReadX 11600 1376256 61440 61440 NT_STATUS_OK
ReadX 11600 1437696 4096 4096 NT_STATUS_OK
ReadX 11600 1441792 61440 61440 NT_STATUS_OK
ReadX 11600 1503232 4096 4096 NT_STATUS_OK
ReadX 11600 1507328 61440 61440 NT_STATUS_OK
ReadX 11600 1568768 4096 4096 NT_STATUS_OK
ReadX 11600 1572864 61440 61440 NT_STATUS_OK
ReadX 11600 1634304 4096 4096 NT_STATUS_OK
ReadX 11600 1638400 61440 61440 NT_STATUS_OK
ReadX 11600 1699840 4096 4096 NT_STATUS_OK
ReadX 11600 1703936 61440 61440 NT_STATUS_OK
ReadX 11600 1765376 4096 4096 NT_STATUS_OK
ReadX 11600 1769472 61440 61440 NT_STATUS_OK
ReadX 11600 1830912 4096 4096 NT_STATUS_OK
ReadX 11600 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
ReadX 11605 4096 4096 4096 NT_STATUS_OK
ReadX 11605 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Close 11605 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11609 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 8192 8192 NT_STATUS_OK
ReadX 11613 8192 8192 8192 NT_STATUS_OK
ReadX 11613 16384 8192 8192 NT_STATUS_OK
ReadX 11613 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11615 NT_STATUS_OK
Close 11615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11618 NT_STATUS_OK
WriteX 11618 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11618 258 NT_STATUS_OK
WriteX 11618 0 10438 10438 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11624 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
ReadX 11627 4096 4096 4096 NT_STATUS_OK
ReadX 11627 8192 4096 4096 NT_STATUS_OK
ReadX 11627 12288 8192 8192 NT_STATUS_OK
ReadX 11627 20480 8192 8192 NT_STATUS_OK
ReadX 11627 28672 8192 8192 NT_STATUS_OK
ReadX 11627 36864 8192 8192 NT_STATUS_OK
ReadX 11627 45056 8192 8192 NT_STATUS_OK
ReadX 11627 53248 8192 8192 NT_STATUS_OK
ReadX 11627 61440 8192 8192 NT_STATUS_OK
ReadX 11627 69632 8192 8192 NT_STATUS_OK
ReadX 11627 77824 8192 8192 NT_STATUS_OK
ReadX 11627 86016 8192 8192 NT_STATUS_OK
ReadX 11627 94208 8192 8192 NT_STATUS_OK
ReadX 11627 102400 8192 8192 NT_STATUS_OK
ReadX 11627 110592 8192 8192 NT_STATUS_OK
ReadX 11627 118784 8192 8192 NT_STATUS_OK
ReadX 11627 126976 8192 8192 NT_STATUS_OK
ReadX 11627 135168 8192 8192 NT_STATUS_OK
ReadX 11627 143360 8192 8192 NT_STATUS_OK
ReadX 11627 151552 8192 8192 NT_STATUS_OK
ReadX 11627 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11627 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11632 NT_STATUS_OK
WriteX 11632 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 258 NT_STATUS_OK
WriteX 11632 0 28489 28489 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11635 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11636 NT_STATUS_OK
Close 11636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 8192 8192 NT_STATUS_OK
ReadX 11639 8192 8192 8192 NT_STATUS_OK
ReadX 11639 16384 8192 8192 NT_STATUS_OK
ReadX 11639 24576 8192 8192 NT_STATUS_OK
ReadX 11639 32768 16384 16384 NT_STATUS_OK
ReadX 11639 49152 8192 8192 NT_STATUS_OK
ReadX 11639 57344 8192 8192 NT_STATUS_OK
ReadX 11639 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11644 NT_STATUS_OK
WriteX 11644 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11644 258 NT_STATUS_OK
WriteX 11644 0 29253 29253 NT_STATUS_OK
Close 11644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11645 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11648 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11651 NT_STATUS_OK
WriteX 11651 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11651 258 NT_STATUS_OK
WriteX 11651 0 30183 30183 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11654 NT_STATUS_OK
WriteX 11654 0 510 510 NT_STATUS_OK
WriteX 11654 510 512 512 NT_STATUS_OK
WriteX 11654 1022 510 510 NT_STATUS_OK
WriteX 11654 1532 510 510 NT_STATUS_OK
WriteX 11654 2042 168 168 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
WriteX 11657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11658 NT_STATUS_OK
ReadX 11658 61440 4096 4096 NT_STATUS_OK
ReadX 11658 126976 4096 4096 NT_STATUS_OK
WriteX 11658 0 65536 65536 NT_STATUS_OK
WriteX 11658 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11659 NT_STATUS_OK
ReadX 11659 61440 4096 4096 NT_STATUS_OK
ReadX 11659 126976 4096 4096 NT_STATUS_OK
ReadX 11659 192512 4096 4096 NT_STATUS_OK
ReadX 11659 258048 4096 4096 NT_STATUS_OK
WriteX 11659 0 65536 65536 NT_STATUS_OK
WriteX 11659 65536 65536 65536 NT_STATUS_OK
WriteX 11659 131072 65536 65536 NT_STATUS_OK
WriteX 11659 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 61440 4096 4096 NT_STATUS_OK
ReadX 11660 126976 4096 4096 NT_STATUS_OK
ReadX 11660 192512 4096 4096 NT_STATUS_OK
ReadX 11660 258048 4096 4096 NT_STATUS_OK
ReadX 11660 323584 4096 4096 NT_STATUS_OK
ReadX 11660 389120 4096 4096 NT_STATUS_OK
ReadX 11660 454656 4096 4096 NT_STATUS_OK
ReadX 11660 520192 4096 4096 NT_STATUS_OK
WriteX 11660 0 65536 65536 NT_STATUS_OK
WriteX 11660 65536 65536 65536 NT_STATUS_OK
WriteX 11660 131072 65536 65536 NT_STATUS_OK
WriteX 11660 196608 65536 65536 NT_STATUS_OK
WriteX 11660 262144 65536 65536 NT_STATUS_OK
WriteX 11660 327680 65536 65536 NT_STATUS_OK
WriteX 11660 393216 65536 65536 NT_STATUS_OK
WriteX 11660 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Close 11659 NT_STATUS_OK
Close 11660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11663 NT_STATUS_OK
Close 11663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11672 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11676 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11690 NT_STATUS_OK
Close 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11700 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11705 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11720 NT_STATUS_OK
Close 11720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11729 NT_STATUS_OK
WriteX 11729 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11729 0 65536 65536 NT_STATUS_OK
WriteX 11729 65536 65536 65536 NT_STATUS_OK
WriteX 11729 131072 65536 65536 NT_STATUS_OK
WriteX 11729 196608 65536 65536 NT_STATUS_OK
WriteX 11729 262144 26634 26634 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
ReadX 11737 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11742 NT_STATUS_OK
Close 11742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11751 NT_STATUS_OK
Close 11751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11754 NT_STATUS_OK
Close 11754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11756 NT_STATUS_OK
Close 11756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11765 NT_STATUS_OK
Close 11765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11770 NT_STATUS_OK
Close 11770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11780 NT_STATUS_OK
Close 11780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11785 NT_STATUS_OK
Close 11785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11804 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
Close 11816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
Close 11830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
Close 11831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11861 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11861 0 4096 4096 NT_STATUS_OK
Close 11861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
ReadX 11863 4096 4096 4096 NT_STATUS_OK
ReadX 11863 8192 4096 4096 NT_STATUS_OK
ReadX 11863 12288 4096 4096 NT_STATUS_OK
ReadX 11863 16384 4096 4096 NT_STATUS_OK
ReadX 11863 20480 4096 4096 NT_STATUS_OK
ReadX 11863 24576 4096 4096 NT_STATUS_OK
ReadX 11863 28672 4096 4096 NT_STATUS_OK
ReadX 11863 32768 4096 4096 NT_STATUS_OK
ReadX 11863 36864 4096 4096 NT_STATUS_OK
ReadX 11863 40960 4096 4096 NT_STATUS_OK
ReadX 11863 45056 4096 4096 NT_STATUS_OK
ReadX 11863 49152 4096 4096 NT_STATUS_OK
ReadX 11863 53248 4096 4096 NT_STATUS_OK
ReadX 11863 57344 4096 4096 NT_STATUS_OK
ReadX 11863 61440 4096 4096 NT_STATUS_OK
ReadX 11863 65536 4096 4096 NT_STATUS_OK
ReadX 11863 69632 4096 4096 NT_STATUS_OK
ReadX 11863 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 0 4096 4096 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11864 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11869 NT_STATUS_OK
WriteX 11869 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 258 NT_STATUS_OK
WriteX 11869 0 65536 65536 NT_STATUS_OK
WriteX 11869 65536 19979 19979 NT_STATUS_OK
Close 11869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
QUERY_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
SET_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 4096 4096 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 4096 4096 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11875 1004 NT_STATUS_OK
WriteX 11875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11878 NT_STATUS_OK
Close 11878 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11881 NT_STATUS_OK
WriteX 11881 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 258 NT_STATUS_OK
WriteX 11881 0 65536 65536 NT_STATUS_OK
WriteX 11881 65536 17654 17654 NT_STATUS_OK
Close 11881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 0 4096 4096 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
SET_FILE_INFORMATION 11882 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11883 NT_STATUS_OK
SET_FILE_INFORMATION 11883 1004 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11885 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 4096 4096 NT_STATUS_OK
ReadX 11887 4096 4096 4096 NT_STATUS_OK
ReadX 11887 8192 4096 4096 NT_STATUS_OK
ReadX 11887 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11887 16384 4096 4096 NT_STATUS_OK
ReadX 11887 20480 4096 4096 NT_STATUS_OK
ReadX 11887 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11890 1004 NT_STATUS_OK
WriteX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11896 NT_STATUS_OK
WriteX 11896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11896 258 NT_STATUS_OK
WriteX 11896 0 65536 65536 NT_STATUS_OK
WriteX 11896 65536 19490 19490 NT_STATUS_OK
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
QUERY_FILE_INFORMATION 11897 1004 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
SET_FILE_INFORMATION 11897 1004 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11898 NT_STATUS_OK
SET_FILE_INFORMATION 11898 1004 NT_STATUS_OK
Close 11898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11902 0 4096 4096 NT_STATUS_OK
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
ReadX 11904 4096 4096 4096 NT_STATUS_OK
ReadX 11904 8192 4096 4096 NT_STATUS_OK
ReadX 11904 12288 4096 4096 NT_STATUS_OK
ReadX 11904 16384 4096 4096 NT_STATUS_OK
ReadX 11904 20480 4096 4096 NT_STATUS_OK
ReadX 11904 24576 4096 4096 NT_STATUS_OK
ReadX 11904 28672 4096 4096 NT_STATUS_OK
ReadX 11904 32768 4096 4096 NT_STATUS_OK
ReadX 11904 36864 4096 4096 NT_STATUS_OK
ReadX 11904 40960 4096 4096 NT_STATUS_OK
ReadX 11904 45056 4096 4096 NT_STATUS_OK
ReadX 11904 49152 4096 4096 NT_STATUS_OK
ReadX 11904 53248 4096 4096 NT_STATUS_OK
ReadX 11904 57344 4096 4096 NT_STATUS_OK
ReadX 11904 61440 4096 4096 NT_STATUS_OK
ReadX 11904 65536 4096 4096 NT_STATUS_OK
ReadX 11904 69632 4096 4096 NT_STATUS_OK
ReadX 11904 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11905 NT_STATUS_OK
SET_FILE_INFORMATION 11905 1004 NT_STATUS_OK
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11910 NT_STATUS_OK
WriteX 11910 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 258 NT_STATUS_OK
WriteX 11910 0 65536 65536 NT_STATUS_OK
WriteX 11910 65536 8866 8866 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11911 NT_STATUS_OK
ReadX 11911 0 4096 4096 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Flush 11911 NT_STATUS_OK
SET_FILE_INFORMATION 11911 1004 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Flush 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 4096 4096 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11915 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11921 NT_STATUS_OK
WriteX 11921 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11921 258 NT_STATUS_OK
WriteX 11921 0 65536 65536 NT_STATUS_OK
WriteX 11921 65536 9298 9298 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Flush 11922 NT_STATUS_OK
SET_FILE_INFORMATION 11922 1004 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Flush 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11923 NT_STATUS_OK
SET_FILE_INFORMATION 11923 1004 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11929 4096 4096 4096 NT_STATUS_OK
ReadX 11929 8192 4096 4096 NT_STATUS_OK
ReadX 11929 12288 4096 4096 NT_STATUS_OK
ReadX 11929 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
Close 11930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
Close 11931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11938 NT_STATUS_OK
WriteX 11938 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11938 258 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 11540 11540 NT_STATUS_OK
Close 11938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
WriteX 11939 0 4096 4096 NT_STATUS_OK
Flush 11939 NT_STATUS_OK
SET_FILE_INFORMATION 11939 1004 NT_STATUS_OK
WriteX 11939 0 4096 4096 NT_STATUS_OK
Flush 11939 NT_STATUS_OK
Close 11939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11940 NT_STATUS_OK
SET_FILE_INFORMATION 11940 1004 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 61440 4096 4096 NT_STATUS_OK
ReadX 11944 126976 4096 4096 NT_STATUS_OK
WriteX 11944 0 65536 65536 NT_STATUS_OK
WriteX 11944 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 61440 4096 4096 NT_STATUS_OK
ReadX 11945 126976 4096 4096 NT_STATUS_OK
ReadX 11945 192512 4096 4096 NT_STATUS_OK
ReadX 11945 258048 4096 4096 NT_STATUS_OK
WriteX 11945 0 65536 65536 NT_STATUS_OK
WriteX 11945 65536 65536 65536 NT_STATUS_OK
WriteX 11945 131072 65536 65536 NT_STATUS_OK
WriteX 11945 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 61440 4096 4096 NT_STATUS_OK
ReadX 11946 126976 4096 4096 NT_STATUS_OK
ReadX 11946 192512 4096 4096 NT_STATUS_OK
ReadX 11946 258048 4096 4096 NT_STATUS_OK
ReadX 11946 323584 4096 4096 NT_STATUS_OK
ReadX 11946 389120 4096 4096 NT_STATUS_OK
ReadX 11946 454656 4096 4096 NT_STATUS_OK
ReadX 11946 520192 4096 4096 NT_STATUS_OK
WriteX 11946 0 65536 65536 NT_STATUS_OK
WriteX 11946 65536 65536 65536 NT_STATUS_OK
WriteX 11946 131072 65536 65536 NT_STATUS_OK
WriteX 11946 196608 65536 65536 NT_STATUS_OK
WriteX 11946 262144 65536 65536 NT_STATUS_OK
WriteX 11946 327680 65536 65536 NT_STATUS_OK
WriteX 11946 393216 65536 65536 NT_STATUS_OK
WriteX 11946 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
ReadX 11947 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11948 NT_STATUS_OK
WriteX 11948 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
WriteX 11948 0 53 53 NT_STATUS_OK
Close 11948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11947 8192 4096 4096 NT_STATUS_OK
ReadX 11947 12288 4096 4096 NT_STATUS_OK
WriteX 11951 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
ReadX 11947 16384 4096 4096 NT_STATUS_OK
ReadX 11947 20480 4096 4096 NT_STATUS_OK
WriteX 11951 0 15360 15360 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11952 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11952 1004 NT_STATUS_OK
WriteX 11952 0 4096 4096 NT_STATUS_OK
Close 11952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11953 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11955 4096 4096 4096 NT_STATUS_OK
ReadX 11955 8192 4096 4096 NT_STATUS_OK
ReadX 11955 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
ReadX 11958 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
ReadX 11959 4096 4096 4096 NT_STATUS_OK
ReadX 11959 8192 4096 4096 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11960 NT_STATUS_OK
WriteX 11960 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11960 258 NT_STATUS_OK
WriteX 11960 0 15360 15360 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11965 NT_STATUS_OK
SET_FILE_INFORMATION 11965 1004 NT_STATUS_OK
Close 11965 NT_STATUS_OK
WriteX 11961 0 4096 4096 NT_STATUS_OK
Close 11961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11966 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
ReadX 11968 4096 4096 4096 NT_STATUS_OK
ReadX 11968 8192 4096 4096 NT_STATUS_OK
ReadX 11968 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11969 NT_STATUS_OK
ReadX 11969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11970 NT_STATUS_OK
WriteX 11970 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
WriteX 11970 0 53 53 NT_STATUS_OK
Close 11970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11969 4096 4096 4096 NT_STATUS_OK
ReadX 11969 8192 4096 4096 NT_STATUS_OK
ReadX 11969 12288 4096 4096 NT_STATUS_OK
WriteX 11973 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 258 NT_STATUS_OK
WriteX 11973 0 12006 12006 NT_STATUS_OK
Close 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11977 4096 4096 4096 NT_STATUS_OK
ReadX 11977 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11980 NT_STATUS_OK
WriteX 11980 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 11991 11991 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11985 NT_STATUS_OK
SET_FILE_INFORMATION 11985 1004 NT_STATUS_OK
Close 11985 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11988 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
ReadX 11988 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
WriteX 11988 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
Close 11964 NT_STATUS_OK
WriteX 11968 0 19054 19054 NT_STATUS_OK
WriteX 11988 0 12288 12288 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11991 NT_STATUS_OK
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 61440 61440 NT_STATUS_OK
ReadX 11995 61440 4096 4096 NT_STATUS_OK
ReadX 11995 65536 61440 61440 NT_STATUS_OK
ReadX 11995 126976 4096 4096 NT_STATUS_OK
ReadX 11995 131072 61440 61440 NT_STATUS_OK
ReadX 11995 192512 4096 4096 NT_STATUS_OK
ReadX 11995 196608 61440 61440 NT_STATUS_OK
ReadX 11995 258048 4096 4096 NT_STATUS_OK
ReadX 11995 262144 61440 61440 NT_STATUS_OK
ReadX 11995 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 61440 61440 NT_STATUS_OK
ReadX 11996 61440 4096 4096 NT_STATUS_OK
ReadX 11996 65536 61440 61440 NT_STATUS_OK
ReadX 11996 126976 4096 4096 NT_STATUS_OK
ReadX 11996 131072 61440 61440 NT_STATUS_OK
ReadX 11996 192512 4096 4096 NT_STATUS_OK
ReadX 11996 196608 61440 61440 NT_STATUS_OK
ReadX 11996 258048 4096 4096 NT_STATUS_OK
ReadX 11996 262144 61440 61440 NT_STATUS_OK
ReadX 11996 323584 4096 4096 NT_STATUS_OK
ReadX 11996 327680 61440 61440 NT_STATUS_OK
ReadX 11996 389120 4096 4096 NT_STATUS_OK
ReadX 11996 393216 61440 61440 NT_STATUS_OK
ReadX 11996 454656 4096 4096 NT_STATUS_OK
ReadX 11996 458752 61440 61440 NT_STATUS_OK
ReadX 11996 520192 4096 4096 NT_STATUS_OK
ReadX 11996 524288 61440 61440 NT_STATUS_OK
ReadX 11996 585728 4096 4096 NT_STATUS_OK
ReadX 11996 589824 61440 61440 NT_STATUS_OK
ReadX 11996 651264 4096 4096 NT_STATUS_OK
ReadX 11996 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 61440 61440 NT_STATUS_OK
ReadX 11997 61440 4096 4096 NT_STATUS_OK
ReadX 11997 65536 61440 61440 NT_STATUS_OK
ReadX 11997 126976 4096 4096 NT_STATUS_OK
ReadX 11997 131072 61440 61440 NT_STATUS_OK
ReadX 11997 192512 4096 4096 NT_STATUS_OK
ReadX 11997 196608 61440 61440 NT_STATUS_OK
ReadX 11997 258048 4096 4096 NT_STATUS_OK
ReadX 11997 262144 61440 61440 NT_STATUS_OK
ReadX 11997 323584 4096 4096 NT_STATUS_OK
ReadX 11997 327680 61440 61440 NT_STATUS_OK
ReadX 11997 389120 4096 4096 NT_STATUS_OK
ReadX 11997 393216 61440 61440 NT_STATUS_OK
ReadX 11997 454656 4096 4096 NT_STATUS_OK
ReadX 11997 458752 61440 61440 NT_STATUS_OK
ReadX 11997 520192 4096 4096 NT_STATUS_OK
ReadX 11997 524288 61440 61440 NT_STATUS_OK
ReadX 11997 585728 4096 4096 NT_STATUS_OK
ReadX 11997 589824 61440 61440 NT_STATUS_OK
ReadX 11997 651264 4096 4096 NT_STATUS_OK
ReadX 11997 655360 61440 61440 NT_STATUS_OK
ReadX 11997 716800 4096 4096 NT_STATUS_OK
ReadX 11997 720896 61440 61440 NT_STATUS_OK
ReadX 11997 782336 4096 4096 NT_STATUS_OK
ReadX 11997 786432 61440 61440 NT_STATUS_OK
ReadX 11997 847872 4096 4096 NT_STATUS_OK
ReadX 11997 851968 61440 61440 NT_STATUS_OK
ReadX 11997 913408 4096 4096 NT_STATUS_OK
ReadX 11997 917504 61440 61440 NT_STATUS_OK
ReadX 11997 978944 4096 4096 NT_STATUS_OK
ReadX 11997 983040 61440 61440 NT_STATUS_OK
ReadX 11997 1044480 4096 4096 NT_STATUS_OK
ReadX 11997 1048576 61440 61440 NT_STATUS_OK
ReadX 11997 1110016 4096 4096 NT_STATUS_OK
ReadX 11997 1114112 61440 61440 NT_STATUS_OK
ReadX 11997 1175552 4096 4096 NT_STATUS_OK
ReadX 11997 1179648 61440 61440 NT_STATUS_OK
ReadX 11997 1241088 4096 4096 NT_STATUS_OK
ReadX 11997 1245184 61440 61440 NT_STATUS_OK
ReadX 11997 1306624 4096 4096 NT_STATUS_OK
ReadX 11997 1310720 61440 61440 NT_STATUS_OK
ReadX 11997 1372160 4096 4096 NT_STATUS_OK
ReadX 11997 1376256 61440 61440 NT_STATUS_OK
ReadX 11997 1437696 4096 4096 NT_STATUS_OK
ReadX 11997 1441792 61440 61440 NT_STATUS_OK
ReadX 11997 1503232 4096 4096 NT_STATUS_OK
ReadX 11997 1507328 61440 61440 NT_STATUS_OK
ReadX 11997 1568768 4096 4096 NT_STATUS_OK
ReadX 11997 1572864 61440 61440 NT_STATUS_OK
ReadX 11997 1634304 4096 4096 NT_STATUS_OK
ReadX 11997 1638400 61440 61440 NT_STATUS_OK
ReadX 11997 1699840 4096 4096 NT_STATUS_OK
ReadX 11997 1703936 61440 61440 NT_STATUS_OK
ReadX 11997 1765376 4096 4096 NT_STATUS_OK
ReadX 11997 1769472 61440 61440 NT_STATUS_OK
ReadX 11997 1830912 4096 4096 NT_STATUS_OK
ReadX 11997 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12004 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 1004 NT_STATUS_OK
WriteX 12004 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12005 NT_STATUS_OK
Close 12005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12006 NT_STATUS_OK
WriteX 12006 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12006 258 NT_STATUS_OK
WriteX 12006 0 491 491 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12004 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12010 NT_STATUS_OK
WriteX 12010 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 258 NT_STATUS_OK
WriteX 12010 0 543 543 NT_STATUS_OK
Close 12010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12024 NT_STATUS_OK
QUERY_FILE_INFORMATION 12024 1004 NT_STATUS_OK
WriteX 12024 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12024 258 NT_STATUS_OK
WriteX 12024 0 2048 2048 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12025 0 4096 4096 NT_STATUS_OK
Flush 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12030 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12036 NT_STATUS_OK
WriteX 12036 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 258 NT_STATUS_OK
WriteX 12036 0 2048 2048 NT_STATUS_OK
Close 12036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 2048 2048 NT_STATUS_OK
ReadX 12015 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
WriteX 12015 0 8192 8192 NT_STATUS_OK
WriteX 12016 0 4096 4096 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12041 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12053 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12061 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 1004 NT_STATUS_OK
WriteX 12061 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 258 NT_STATUS_OK
WriteX 12061 0 2048 2048 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12062 NT_STATUS_OK
ReadX 12062 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12069 NT_STATUS_OK
QUERY_FILE_INFORMATION 12069 1004 NT_STATUS_OK
WriteX 12069 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12069 258 NT_STATUS_OK
WriteX 12069 0 2048 2048 NT_STATUS_OK
Close 12069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12062 0 4096 4096 NT_STATUS_OK
Flush 12062 NT_STATUS_OK
WriteX 12070 0 4096 4096 NT_STATUS_OK
Flush 12070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12062 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12070 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12064 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12071 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12072 NT_STATUS_OK
WriteX 12072 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12072 258 NT_STATUS_OK
WriteX 12072 0 4096 4096 NT_STATUS_OK
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12075 NT_STATUS_OK
WriteX 12075 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12076 0 4096 4096 NT_STATUS_OK
Close 12073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12081 NT_STATUS_OK
ReadX 12081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12083 NT_STATUS_OK
WriteX 12083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
WriteX 12083 0 2048 2048 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12086 NT_STATUS_OK
ReadX 12086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12098 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12081 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Close 12085 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12100 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12110 NT_STATUS_OK
ReadX 12110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12111 NT_STATUS_OK
ReadX 12111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12120 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1004 NT_STATUS_OK
WriteX 12120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 2048 2048 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12122 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12132 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 1004 NT_STATUS_OK
WriteX 12132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 258 NT_STATUS_OK
WriteX 12132 0 2048 2048 NT_STATUS_OK
Close 12132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12135 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12140 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 1004 NT_STATUS_OK
WriteX 12140 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 2048 2048 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Flush 12121 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
Flush 12133 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12123 4096 16384 16384 NT_STATUS_OK
ReadX 12103 4096 16384 16384 NT_STATUS_OK
ReadX 12135 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12143 NT_STATUS_OK
ReadX 12143 0 2048 2048 NT_STATUS_OK
WriteX 12143 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12144 NT_STATUS_OK
QUERY_FILE_INFORMATION 12144 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12125 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Close 12109 NT_STATUS_OK
Close 12112 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12110 NT_STATUS_OK
Close 12111 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12146 NT_STATUS_OK
QUERY_FILE_INFORMATION 12146 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12148 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12151 4096 16384 16384 NT_STATUS_OK
WriteX 12151 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12163 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12164 NT_STATUS_OK
ReadX 12164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12166 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 8192 8192 NT_STATUS_OK
ReadX 12157 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12171 0 4096 4096 NT_STATUS_OK
ReadX 12171 4096 4096 4096 NT_STATUS_OK
ReadX 12171 8192 4096 4096 NT_STATUS_OK
WriteX 12157 0 4096 4096 NT_STATUS_OK
WriteX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
ReadX 12172 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12151 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12177 NT_STATUS_OK
QUERY_FILE_INFORMATION 12177 1004 NT_STATUS_OK
WriteX 12177 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12177 258 NT_STATUS_OK
WriteX 12177 0 2048 2048 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
ReadX 12180 4096 4096 4096 NT_STATUS_OK
WriteX 12180 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12182 NT_STATUS_OK
ReadX 12182 0 4096 4096 NT_STATUS_OK
ReadX 12182 4096 4096 4096 NT_STATUS_OK
WriteX 12182 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12183 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12163 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Close 12164 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12182 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12185 0 4096 4096 NT_STATUS_OK
ReadX 12185 4096 4096 4096 NT_STATUS_OK
ReadX 12185 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12189 NT_STATUS_OK
ReadX 12189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12196 NT_STATUS_OK
ReadX 12196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
ReadX 12186 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12203 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 1004 NT_STATUS_OK
WriteX 12203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 258 NT_STATUS_OK
WriteX 12203 0 2048 2048 NT_STATUS_OK
Close 12203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12204 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12209 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 1004 NT_STATUS_OK
WriteX 12209 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 258 NT_STATUS_OK
WriteX 12209 0 2048 2048 NT_STATUS_OK
Close 12209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12210 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12193 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12211 NT_STATUS_OK
QUERY_FILE_INFORMATION 12211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12198 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Close 12190 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12188 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12196 NT_STATUS_OK
Close 12185 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12213 NT_STATUS_OK
QUERY_FILE_INFORMATION 12213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 61440 4096 4096 NT_STATUS_OK
ReadX 12215 126976 4096 4096 NT_STATUS_OK
WriteX 12215 0 65536 65536 NT_STATUS_OK
WriteX 12215 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 61440 4096 4096 NT_STATUS_OK
ReadX 12216 126976 4096 4096 NT_STATUS_OK
ReadX 12216 192512 4096 4096 NT_STATUS_OK
ReadX 12216 258048 4096 4096 NT_STATUS_OK
WriteX 12216 0 65536 65536 NT_STATUS_OK
WriteX 12216 65536 65536 65536 NT_STATUS_OK
WriteX 12216 131072 65536 65536 NT_STATUS_OK
WriteX 12216 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 126976 4096 4096 NT_STATUS_OK
ReadX 12217 192512 4096 4096 NT_STATUS_OK
ReadX 12217 258048 4096 4096 NT_STATUS_OK
ReadX 12217 323584 4096 4096 NT_STATUS_OK
ReadX 12217 389120 4096 4096 NT_STATUS_OK
ReadX 12217 454656 4096 4096 NT_STATUS_OK
ReadX 12217 520192 4096 4096 NT_STATUS_OK
WriteX 12217 0 65536 65536 NT_STATUS_OK
WriteX 12217 65536 65536 65536 NT_STATUS_OK
WriteX 12217 131072 65536 65536 NT_STATUS_OK
WriteX 12217 196608 65536 65536 NT_STATUS_OK
WriteX 12217 262144 65536 65536 NT_STATUS_OK
WriteX 12217 327680 65536 65536 NT_STATUS_OK
WriteX 12217 393216 65536 65536 NT_STATUS_OK
WriteX 12217 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12218 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12218 8192 4096 4096 NT_STATUS_OK
ReadX 12218 12288 4096 4096 NT_STATUS_OK
ReadX 12218 16384 4096 4096 NT_STATUS_OK
ReadX 12218 20480 4096 4096 NT_STATUS_OK
ReadX 12218 24576 4096 4096 NT_STATUS_OK
ReadX 12218 28672 4096 4096 NT_STATUS_OK
ReadX 12218 32768 4096 4096 NT_STATUS_OK
ReadX 12218 36864 4096 4096 NT_STATUS_OK
ReadX 12218 40960 4096 4096 NT_STATUS_OK
ReadX 12218 45056 4096 4096 NT_STATUS_OK
ReadX 12218 49152 4096 4096 NT_STATUS_OK
ReadX 12218 53248 4096 4096 NT_STATUS_OK
ReadX 12218 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12218 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12219 NT_STATUS_OK
Close 12219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12221 NT_STATUS_OK
WriteX 12221 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12221 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 0 57088 57088 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
Flush 12221 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12222 NT_STATUS_OK
SET_FILE_INFORMATION 12222 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12223 NT_STATUS_OK
Close 12223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12225 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12226 NT_STATUS_OK
WriteX 12226 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 51456 51456 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Flush 12226 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Close 12226 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12230 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 53077 53077 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12236 NT_STATUS_OK
WriteX 12236 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 65536 65536 NT_STATUS_OK
WriteX 12236 65536 1856 1856 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12245 NT_STATUS_OK
WriteX 12245 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12245 258 NT_STATUS_OK
WriteX 12245 0 7983 7983 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12250 NT_STATUS_OK
WriteX 12250 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 258 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 65536 65536 NT_STATUS_OK
WriteX 12250 131072 65536 65536 NT_STATUS_OK
WriteX 12250 196608 65536 65536 NT_STATUS_OK
WriteX 12250 262144 65536 65536 NT_STATUS_OK
WriteX 12250 327680 65536 65536 NT_STATUS_OK
WriteX 12250 393216 65536 65536 NT_STATUS_OK
WriteX 12250 458752 46731 46731 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12251 NT_STATUS_OK
WriteX 12251 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12240 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 65536 65536 NT_STATUS_OK
WriteX 12251 65536 22848 22848 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12255 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12256 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12256 1004 NT_STATUS_OK
ReadX 12256 8192 4096 4096 NT_STATUS_OK
ReadX 12256 12288 4096 4096 NT_STATUS_OK
ReadX 12256 16384 4096 4096 NT_STATUS_OK
ReadX 12256 20480 4096 4096 NT_STATUS_OK
ReadX 12256 24576 4096 4096 NT_STATUS_OK
ReadX 12256 28672 4096 4096 NT_STATUS_OK
ReadX 12256 32768 4096 4096 NT_STATUS_OK
ReadX 12256 36864 4096 4096 NT_STATUS_OK
ReadX 12256 40960 4096 4096 NT_STATUS_OK
ReadX 12256 45056 4096 4096 NT_STATUS_OK
ReadX 12256 49152 4096 4096 NT_STATUS_OK
ReadX 12256 53248 4096 4096 NT_STATUS_OK
ReadX 12256 57344 4096 4096 NT_STATUS_OK
ReadX 12256 61440 4096 4096 NT_STATUS_OK
ReadX 12256 65536 4096 4096 NT_STATUS_OK
ReadX 12256 69632 4096 4096 NT_STATUS_OK
ReadX 12256 73728 4096 4096 NT_STATUS_OK
ReadX 12256 77824 4096 4096 NT_STATUS_OK
ReadX 12256 81920 4096 4096 NT_STATUS_OK
ReadX 12256 86016 4096 4096 NT_STATUS_OK
ReadX 12256 90112 4096 4096 NT_STATUS_OK
ReadX 12256 94208 4096 4096 NT_STATUS_OK
ReadX 12256 98304 4096 4096 NT_STATUS_OK
ReadX 12256 102400 4096 4096 NT_STATUS_OK
ReadX 12256 106496 4096 4096 NT_STATUS_OK
ReadX 12256 110592 4096 4096 NT_STATUS_OK
ReadX 12256 114688 4096 4096 NT_STATUS_OK
ReadX 12256 118784 4096 4096 NT_STATUS_OK
ReadX 12256 122880 4096 4096 NT_STATUS_OK
ReadX 12256 126976 4096 4096 NT_STATUS_OK
ReadX 12256 131072 4096 4096 NT_STATUS_OK
ReadX 12256 135168 4096 4096 NT_STATUS_OK
ReadX 12256 139264 4096 4096 NT_STATUS_OK
ReadX 12256 143360 4096 4096 NT_STATUS_OK
ReadX 12256 147456 4096 4096 NT_STATUS_OK
ReadX 12256 151552 4096 4096 NT_STATUS_OK
ReadX 12256 155648 4096 4096 NT_STATUS_OK
ReadX 12256 159744 4096 4096 NT_STATUS_OK
ReadX 12256 163840 4096 4096 NT_STATUS_OK
ReadX 12256 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12256 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12259 NT_STATUS_OK
WriteX 12259 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 258 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
WriteX 12259 0 42388 42388 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
ReadX 12263 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
SET_FILE_INFORMATION 12264 1004 NT_STATUS_OK
WriteX 12264 0 42652 42652 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12266 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
ReadX 12268 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12273 NT_STATUS_OK
WriteX 12273 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12273 258 NT_STATUS_OK
WriteX 12273 0 65536 65536 NT_STATUS_OK
WriteX 12273 65536 49 49 NT_STATUS_OK
Close 12273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 61440 61440 NT_STATUS_OK
ReadX 12274 61440 4096 4096 NT_STATUS_OK
ReadX 12274 65536 61440 61440 NT_STATUS_OK
ReadX 12274 126976 4096 4096 NT_STATUS_OK
ReadX 12274 131072 61440 61440 NT_STATUS_OK
ReadX 12274 192512 4096 4096 NT_STATUS_OK
ReadX 12274 196608 61440 61440 NT_STATUS_OK
ReadX 12274 258048 4096 4096 NT_STATUS_OK
ReadX 12274 262144 61440 61440 NT_STATUS_OK
ReadX 12274 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 61440 61440 NT_STATUS_OK
ReadX 12275 61440 4096 4096 NT_STATUS_OK
ReadX 12275 65536 61440 61440 NT_STATUS_OK
ReadX 12275 126976 4096 4096 NT_STATUS_OK
ReadX 12275 131072 61440 61440 NT_STATUS_OK
ReadX 12275 192512 4096 4096 NT_STATUS_OK
ReadX 12275 196608 61440 61440 NT_STATUS_OK
ReadX 12275 258048 4096 4096 NT_STATUS_OK
ReadX 12275 262144 61440 61440 NT_STATUS_OK
ReadX 12275 323584 4096 4096 NT_STATUS_OK
ReadX 12275 327680 61440 61440 NT_STATUS_OK
ReadX 12275 389120 4096 4096 NT_STATUS_OK
ReadX 12275 393216 61440 61440 NT_STATUS_OK
ReadX 12275 454656 4096 4096 NT_STATUS_OK
ReadX 12275 458752 61440 61440 NT_STATUS_OK
ReadX 12275 520192 4096 4096 NT_STATUS_OK
ReadX 12275 524288 61440 61440 NT_STATUS_OK
ReadX 12275 585728 4096 4096 NT_STATUS_OK
ReadX 12275 589824 61440 61440 NT_STATUS_OK
ReadX 12275 651264 4096 4096 NT_STATUS_OK
ReadX 12275 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 61440 61440 NT_STATUS_OK
ReadX 12276 61440 4096 4096 NT_STATUS_OK
ReadX 12276 65536 61440 61440 NT_STATUS_OK
ReadX 12276 126976 4096 4096 NT_STATUS_OK
ReadX 12276 131072 61440 61440 NT_STATUS_OK
ReadX 12276 192512 4096 4096 NT_STATUS_OK
ReadX 12276 196608 61440 61440 NT_STATUS_OK
ReadX 12276 258048 4096 4096 NT_STATUS_OK
ReadX 12276 262144 61440 61440 NT_STATUS_OK
ReadX 12276 323584 4096 4096 NT_STATUS_OK
ReadX 12276 327680 61440 61440 NT_STATUS_OK
ReadX 12276 389120 4096 4096 NT_STATUS_OK
ReadX 12276 393216 61440 61440 NT_STATUS_OK
ReadX 12276 454656 4096 4096 NT_STATUS_OK
ReadX 12276 458752 61440 61440 NT_STATUS_OK
ReadX 12276 520192 4096 4096 NT_STATUS_OK
ReadX 12276 524288 61440 61440 NT_STATUS_OK
ReadX 12276 585728 4096 4096 NT_STATUS_OK
ReadX 12276 589824 61440 61440 NT_STATUS_OK
ReadX 12276 651264 4096 4096 NT_STATUS_OK
ReadX 12276 655360 61440 61440 NT_STATUS_OK
ReadX 12276 716800 4096 4096 NT_STATUS_OK
ReadX 12276 720896 61440 61440 NT_STATUS_OK
ReadX 12276 782336 4096 4096 NT_STATUS_OK
ReadX 12276 786432 61440 61440 NT_STATUS_OK
ReadX 12276 847872 4096 4096 NT_STATUS_OK
ReadX 12276 851968 61440 61440 NT_STATUS_OK
ReadX 12276 913408 4096 4096 NT_STATUS_OK
ReadX 12276 917504 61440 61440 NT_STATUS_OK
ReadX 12276 978944 4096 4096 NT_STATUS_OK
ReadX 12276 983040 61440 61440 NT_STATUS_OK
ReadX 12276 1044480 4096 4096 NT_STATUS_OK
ReadX 12276 1048576 61440 61440 NT_STATUS_OK
ReadX 12276 1110016 4096 4096 NT_STATUS_OK
ReadX 12276 1114112 61440 61440 NT_STATUS_OK
ReadX 12276 1175552 4096 4096 NT_STATUS_OK
ReadX 12276 1179648 61440 61440 NT_STATUS_OK
ReadX 12276 1241088 4096 4096 NT_STATUS_OK
ReadX 12276 1245184 61440 61440 NT_STATUS_OK
ReadX 12276 1306624 4096 4096 NT_STATUS_OK
ReadX 12276 1310720 61440 61440 NT_STATUS_OK
ReadX 12276 1372160 4096 4096 NT_STATUS_OK
ReadX 12276 1376256 61440 61440 NT_STATUS_OK
ReadX 12276 1437696 4096 4096 NT_STATUS_OK
ReadX 12276 1441792 61440 61440 NT_STATUS_OK
ReadX 12276 1503232 4096 4096 NT_STATUS_OK
ReadX 12276 1507328 61440 61440 NT_STATUS_OK
ReadX 12276 1568768 4096 4096 NT_STATUS_OK
ReadX 12276 1572864 61440 61440 NT_STATUS_OK
ReadX 12276 1634304 4096 4096 NT_STATUS_OK
ReadX 12276 1638400 61440 61440 NT_STATUS_OK
ReadX 12276 1699840 4096 4096 NT_STATUS_OK
ReadX 12276 1703936 61440 61440 NT_STATUS_OK
ReadX 12276 1765376 4096 4096 NT_STATUS_OK
ReadX 12276 1769472 61440 61440 NT_STATUS_OK
ReadX 12276 1830912 4096 4096 NT_STATUS_OK
ReadX 12276 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12278 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
ReadX 12278 2156 24 24 NT_STATUS_OK
ReadX 12278 2139 276 276 NT_STATUS_OK
ReadX 12278 2136 14 14 NT_STATUS_OK
ReadX 12278 2136 7 7 NT_STATUS_OK
ReadX 12278 2138 12 12 NT_STATUS_OK
ReadX 12278 2137 8 8 NT_STATUS_OK
ReadX 12278 2135 15 15 NT_STATUS_OK
ReadX 12278 0 16 16 NT_STATUS_OK
ReadX 12278 16 2048 2048 NT_STATUS_OK
ReadX 12278 2064 2048 2048 NT_STATUS_OK
ReadX 12278 257 2048 2048 NT_STATUS_OK
ReadX 12278 385 2048 2048 NT_STATUS_OK
ReadX 12278 513 2048 2048 NT_STATUS_OK
ReadX 12278 641 2048 2048 NT_STATUS_OK
ReadX 12278 769 2048 2048 NT_STATUS_OK
ReadX 12278 897 2048 2048 NT_STATUS_OK
ReadX 12278 1025 2048 2048 NT_STATUS_OK
ReadX 12278 1153 2048 2048 NT_STATUS_OK
ReadX 12278 1281 2048 2048 NT_STATUS_OK
ReadX 12278 1409 2048 2048 NT_STATUS_OK
ReadX 12278 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12283 NT_STATUS_OK
WriteX 12283 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 258 NT_STATUS_OK
WriteX 12283 0 10575 10575 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12288 NT_STATUS_OK
LockX 12288 2147483538 1 NT_STATUS_OK
UnlockX 12288 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
ReadX 12288 0 512 512 NT_STATUS_OK
ReadX 12288 512 512 512 NT_STATUS_OK
ReadX 12288 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1004 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12289 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1005 NT_STATUS_OK
ReadX 12289 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12290 NT_STATUS_OK
LockX 12290 2147483538 1 NT_STATUS_OK
UnlockX 12290 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12290 1005 NT_STATUS_OK
ReadX 12290 0 512 512 NT_STATUS_OK
ReadX 12290 512 512 512 NT_STATUS_OK
ReadX 12290 1024 512 512 NT_STATUS_OK
ReadX 12290 288 20 20 NT_STATUS_OK
ReadX 12290 308 2084 2084 NT_STATUS_OK
ReadX 12290 388 2084 2084 NT_STATUS_OK
ReadX 12290 388 2084 2084 NT_STATUS_OK
ReadX 12277 2157 1386 1386 NT_STATUS_OK
ReadX 12290 2472 399 399 NT_STATUS_OK
ReadX 12290 3072 1536 1536 NT_STATUS_OK
ReadX 12290 544 149 149 NT_STATUS_OK
ReadX 12290 693 485 485 NT_STATUS_OK
Close 12290 NT_STATUS_OK
ReadX 12277 2157 4096 4096 NT_STATUS_OK
ReadX 12277 6253 4096 4096 NT_STATUS_OK
ReadX 12277 10349 4096 4096 NT_STATUS_OK
ReadX 12277 14445 4096 4096 NT_STATUS_OK
ReadX 12277 18541 4096 4096 NT_STATUS_OK
ReadX 12277 22637 256 256 NT_STATUS_OK
ReadX 12277 22893 4096 4096 NT_STATUS_OK
ReadX 12277 26989 4096 4096 NT_STATUS_OK
ReadX 12277 31085 4096 4096 NT_STATUS_OK
ReadX 12277 35181 4096 4096 NT_STATUS_OK
ReadX 12277 39277 4096 4096 NT_STATUS_OK
ReadX 12277 43373 4096 4096 NT_STATUS_OK
ReadX 12277 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12277 2157 1024 1024 NT_STATUS_OK
ReadX 12277 1667 4688 4688 NT_STATUS_OK
ReadX 12277 6355 3516 3516 NT_STATUS_OK
ReadX 12277 9871 16384 16384 NT_STATUS_OK
ReadX 12277 26255 3771 3771 NT_STATUS_OK
ReadX 12277 30026 2048 2048 NT_STATUS_OK
ReadX 12277 32074 1024 1024 NT_STATUS_OK
ReadX 12277 33098 6652 6652 NT_STATUS_OK
ReadX 12277 39750 16384 16384 NT_STATUS_OK
ReadX 12277 56134 10496 10496 NT_STATUS_OK
ReadX 12277 66630 1784 1784 NT_STATUS_OK
ReadX 12277 68414 90 90 NT_STATUS_OK
ReadX 12277 68504 273 273 NT_STATUS_OK
ReadX 12277 68777 1600 1600 NT_STATUS_OK
ReadX 12277 70377 640 640 NT_STATUS_OK
ReadX 12277 71017 1280 1280 NT_STATUS_OK
ReadX 12277 72297 8464 8464 NT_STATUS_OK
ReadX 12277 80761 158 158 NT_STATUS_OK
ReadX 12277 80919 912 912 NT_STATUS_OK
ReadX 12277 81831 1980 1980 NT_STATUS_OK
ReadX 12277 83811 2256 2256 NT_STATUS_OK
ReadX 12277 86067 400 400 NT_STATUS_OK
ReadX 12277 86467 252 252 NT_STATUS_OK
ReadX 12277 86719 42 42 NT_STATUS_OK
ReadX 12277 86761 725 725 NT_STATUS_OK
ReadX 12277 2009 512 512 NT_STATUS_OK
ReadX 12277 3895 9 9 NT_STATUS_OK
ReadX 12277 3781 46 46 NT_STATUS_OK
ReadX 12277 4059 92 92 NT_STATUS_OK
ReadX 12277 3781 92 92 NT_STATUS_OK
ReadX 12277 3986 184 184 NT_STATUS_OK
ReadX 12277 3987 16384 16384 NT_STATUS_OK
ReadX 12277 3902 16384 16384 NT_STATUS_OK
ReadX 12277 3781 10240 10240 NT_STATUS_OK
ReadX 12277 3821 16384 16384 NT_STATUS_OK
ReadX 12277 3891 935 935 NT_STATUS_OK
ReadX 12277 4060 10240 10240 NT_STATUS_OK
ReadX 12277 4059 184 184 NT_STATUS_OK
ReadX 12277 256 184 184 NT_STATUS_OK
ReadX 12277 256 1026 1026 NT_STATUS_OK
ReadX 12277 3901 326 326 NT_STATUS_OK
ReadX 12277 3899 652 652 NT_STATUS_OK
ReadX 12277 256 2 2 NT_STATUS_OK
ReadX 12277 258 4948 4948 NT_STATUS_OK
Close 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12295 NT_STATUS_OK
WriteX 12295 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12295 258 NT_STATUS_OK
WriteX 12295 0 65536 65536 NT_STATUS_OK
WriteX 12295 65536 65536 65536 NT_STATUS_OK
WriteX 12295 131072 65536 65536 NT_STATUS_OK
WriteX 12295 196608 65536 65536 NT_STATUS_OK
WriteX 12295 262144 65536 65536 NT_STATUS_OK
WriteX 12295 327680 65536 65536 NT_STATUS_OK
WriteX 12295 393216 65536 65536 NT_STATUS_OK
WriteX 12295 458752 65536 65536 NT_STATUS_OK
WriteX 12295 524288 65536 65536 NT_STATUS_OK
WriteX 12295 589824 35257 35257 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
WriteX 12300 131072 65536 65536 NT_STATUS_OK
WriteX 12300 196608 65536 65536 NT_STATUS_OK
WriteX 12300 262144 65536 65536 NT_STATUS_OK
WriteX 12300 327680 65536 65536 NT_STATUS_OK
WriteX 12300 393216 65536 65536 NT_STATUS_OK
WriteX 12300 458752 65536 65536 NT_STATUS_OK
WriteX 12300 524288 65536 65536 NT_STATUS_OK
WriteX 12300 589824 57598 57598 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 12543 12543 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
ReadX 12308 1938 24 24 NT_STATUS_OK
ReadX 12308 1920 276 276 NT_STATUS_OK
ReadX 12308 1918 14 14 NT_STATUS_OK
ReadX 12308 1918 7 7 NT_STATUS_OK
ReadX 12308 1919 12 12 NT_STATUS_OK
ReadX 12308 1919 8 8 NT_STATUS_OK
ReadX 12308 1917 15 15 NT_STATUS_OK
ReadX 12308 0 16 16 NT_STATUS_OK
ReadX 12308 16 2048 2048 NT_STATUS_OK
ReadX 12308 2064 2048 2048 NT_STATUS_OK
ReadX 12308 257 2048 2048 NT_STATUS_OK
ReadX 12308 385 2048 2048 NT_STATUS_OK
ReadX 12308 513 2048 2048 NT_STATUS_OK
ReadX 12308 641 2048 2048 NT_STATUS_OK
ReadX 12308 769 2048 2048 NT_STATUS_OK
ReadX 12308 897 2048 2048 NT_STATUS_OK
ReadX 12308 1025 2048 2048 NT_STATUS_OK
ReadX 12308 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12313 NT_STATUS_OK
WriteX 12313 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 258 NT_STATUS_OK
WriteX 12313 0 11588 11588 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12314 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12316 NT_STATUS_OK
ReadX 12316 0 4096 4096 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12318 NT_STATUS_OK
WriteX 12318 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12318 258 NT_STATUS_OK
WriteX 12318 0 11615 11615 NT_STATUS_OK
Flush 12318 NT_STATUS_OK
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12327 NT_STATUS_OK
WriteX 12327 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 16050 16050 NT_STATUS_OK
Close 12327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12307 1939 64 64 NT_STATUS_OK
ReadX 12307 128 248 248 NT_STATUS_OK
ReadX 12307 128 568 568 NT_STATUS_OK
ReadX 12307 3872 1536 1536 NT_STATUS_OK
ReadX 12307 3456 2560 2560 NT_STATUS_OK
ReadX 12307 3136 512 512 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
ReadX 12307 3264 3072 3072 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 3616 4096 4096 NT_STATUS_OK
ReadX 12307 1939 64 64 NT_STATUS_OK
ReadX 12307 128 248 248 NT_STATUS_OK
ReadX 12307 128 608 608 NT_STATUS_OK
ReadX 12307 2858 1024 1024 NT_STATUS_OK
ReadX 12307 2810 4096 4096 NT_STATUS_OK
ReadX 12307 2826 4096 4096 NT_STATUS_OK
ReadX 12307 2580 2048 2048 NT_STATUS_OK
ReadX 12307 2800 2560 2560 NT_STATUS_OK
ReadX 12307 2100 4096 4096 NT_STATUS_OK
ReadX 12307 2084 4096 4096 NT_STATUS_OK
ReadX 12307 868 4096 4096 NT_STATUS_OK
ReadX 12307 2324 4096 4096 NT_STATUS_OK
ReadX 12307 884 4096 4096 NT_STATUS_OK
ReadX 12307 2604 1024 1024 NT_STATUS_OK
ReadX 12307 580 4096 4096 NT_STATUS_OK
ReadX 12307 596 4096 4096 NT_STATUS_OK
ReadX 12307 2752 4096 4096 NT_STATUS_OK
ReadX 12307 2842 1024 1024 NT_STATUS_OK
ReadX 12307 660 4096 4096 NT_STATUS_OK
ReadX 12307 2720 4096 4096 NT_STATUS_OK
ReadX 12307 2736 4096 4096 NT_STATUS_OK
ReadX 12307 628 4096 4096 NT_STATUS_OK
ReadX 12307 2704 4096 4096 NT_STATUS_OK
ReadX 12307 1556 4096 4096 NT_STATUS_OK
ReadX 12307 576 4096 4096 NT_STATUS_OK
ReadX 12307 3168 1536 1536 NT_STATUS_OK
ReadX 12307 832 4096 4096 NT_STATUS_OK
ReadX 12307 1088 4096 4096 NT_STATUS_OK
ReadX 12307 1344 4096 4096 NT_STATUS_OK
ReadX 12307 1600 4096 4096 NT_STATUS_OK
ReadX 12307 1856 4096 4096 NT_STATUS_OK
ReadX 12307 2112 4096 4096 NT_STATUS_OK
ReadX 12307 1892 4096 4096 NT_STATUS_OK
ReadX 12307 820 4096 4096 NT_STATUS_OK
ReadX 12307 788 4096 4096 NT_STATUS_OK
ReadX 12307 1604 4096 4096 NT_STATUS_OK
ReadX 12307 3648 4096 4096 NT_STATUS_OK
ReadX 12307 2608 4096 4096 NT_STATUS_OK
ReadX 12307 548 4096 4096 NT_STATUS_OK
ReadX 12307 740 4096 4096 NT_STATUS_OK
ReadX 12307 1344 4096 4096 NT_STATUS_OK
ReadX 12307 3392 4096 4096 NT_STATUS_OK
ReadX 12307 3904 4096 4096 NT_STATUS_OK
ReadX 12307 644 4096 4096 NT_STATUS_OK
ReadX 12307 676 4096 4096 NT_STATUS_OK
ReadX 12307 2688 4096 4096 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 900 4096 4096 NT_STATUS_OK
ReadX 12307 1908 4096 4096 NT_STATUS_OK
ReadX 12307 852 4096 4096 NT_STATUS_OK
ReadX 12307 724 4096 4096 NT_STATUS_OK
ReadX 12307 2292 4096 4096 NT_STATUS_OK
ReadX 12307 612 4096 4096 NT_STATUS_OK
ReadX 12307 388 4096 4096 NT_STATUS_OK
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 500 4096 4096 NT_STATUS_OK
ReadX 12307 356 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 576 4096 4096 NT_STATUS_OK
ReadX 12307 340 4096 4096 NT_STATUS_OK
ReadX 12307 420 4096 4096 NT_STATUS_OK
ReadX 12307 1600 4096 4096 NT_STATUS_OK
ReadX 12307 404 4096 4096 NT_STATUS_OK
ReadX 12307 1428 4096 4096 NT_STATUS_OK
ReadX 12307 2656 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 452 4096 4096 NT_STATUS_OK
ReadX 12307 692 4096 4096 NT_STATUS_OK
ReadX 12307 564 4096 4096 NT_STATUS_OK
ReadX 12307 372 4096 4096 NT_STATUS_OK
ReadX 12307 468 4096 4096 NT_STATUS_OK
ReadX 12307 484 4096 4096 NT_STATUS_OK
ReadX 12307 1088 4096 4096 NT_STATUS_OK
ReadX 12307 1924 4096 4096 NT_STATUS_OK
ReadX 12307 2768 4096 4096 NT_STATUS_OK
ReadX 12307 832 4096 4096 NT_STATUS_OK
ReadX 12307 836 4096 4096 NT_STATUS_OK
ReadX 12307 1856 4096 4096 NT_STATUS_OK
ReadX 12307 2640 4096 4096 NT_STATUS_OK
ReadX 12307 436 4096 4096 NT_STATUS_OK
ReadX 12307 1828 4096 4096 NT_STATUS_OK
ReadX 12307 804 4096 4096 NT_STATUS_OK
ReadX 12307 1860 4096 4096 NT_STATUS_OK
ReadX 12307 1812 4096 4096 NT_STATUS_OK
ReadX 12307 756 4096 4096 NT_STATUS_OK
ReadX 12307 1636 4096 4096 NT_STATUS_OK
ReadX 12307 772 4096 4096 NT_STATUS_OK
ReadX 12307 2036 4096 4096 NT_STATUS_OK
ReadX 12307 1220 4096 4096 NT_STATUS_OK
ReadX 12307 1652 4096 4096 NT_STATUS_OK
ReadX 12307 2588 4096 4096 NT_STATUS_OK
ReadX 12307 916 4096 4096 NT_STATUS_OK
ReadX 12307 260 4096 4096 NT_STATUS_OK
ReadX 12307 932 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 308 4096 4096 NT_STATUS_OK
ReadX 12307 292 4096 4096 NT_STATUS_OK
ReadX 12307 1140 4096 4096 NT_STATUS_OK
ReadX 12307 276 4096 4096 NT_STATUS_OK
ReadX 12307 2020 4096 4096 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
ReadX 12307 516 4096 4096 NT_STATUS_OK
ReadX 12307 1844 4096 4096 NT_STATUS_OK
ReadX 12307 1124 4096 4096 NT_STATUS_OK
ReadX 12307 3136 4096 4096 NT_STATUS_OK
ReadX 12307 324 4096 4096 NT_STATUS_OK
ReadX 12307 1156 4096 4096 NT_STATUS_OK
ReadX 12307 1172 4096 4096 NT_STATUS_OK
ReadX 12307 2112 4096 4096 NT_STATUS_OK
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 964 4096 4096 NT_STATUS_OK
ReadX 12307 980 4096 4096 NT_STATUS_OK
ReadX 12307 1012 4096 4096 NT_STATUS_OK
ReadX 12307 532 4096 4096 NT_STATUS_OK
ReadX 12307 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12307 1620 4096 4096 NT_STATUS_OK
ReadX 12307 1604 4096 4096 NT_STATUS_OK
ReadX 12307 2116 4096 4096 NT_STATUS_OK
ReadX 12307 2132 4096 4096 NT_STATUS_OK
ReadX 12307 2148 4096 4096 NT_STATUS_OK
ReadX 12307 2276 4096 4096 NT_STATUS_OK
ReadX 12307 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12332 NT_STATUS_OK
QUERY_FILE_INFORMATION 12287 1004 NT_STATUS_OK
Close 12287 NT_STATUS_OK
WriteX 12332 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1004 NT_STATUS_OK
Close 12289 NT_STATUS_OK
WriteX 12332 0 65536 65536 NT_STATUS_OK
WriteX 12332 65536 64850 64850 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
ReadX 12307 2068 4096 4096 NT_STATUS_OK
ReadX 12307 1588 4096 4096 NT_STATUS_OK
ReadX 12307 1572 4096 4096 NT_STATUS_OK
WriteX 12334 0 18630 18630 NT_STATUS_OK
Flush 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12307 612 4096 4096 NT_STATUS_OK
ReadX 12307 564 4096 4096 NT_STATUS_OK
ReadX 12307 1876 4096 4096 NT_STATUS_OK
ReadX 12307 628 4096 4096 NT_STATUS_OK
ReadX 12307 740 4096 4096 NT_STATUS_OK
ReadX 12307 724 4096 4096 NT_STATUS_OK
ReadX 12307 644 4096 4096 NT_STATUS_OK
ReadX 12307 2324 4096 4096 NT_STATUS_OK
ReadX 12307 660 4096 4096 NT_STATUS_OK
ReadX 12307 852 4096 4096 NT_STATUS_OK
ReadX 12307 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 580 4096 4096 NT_STATUS_OK
ReadX 12307 3136 512 512 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
Close 12307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 61440 4096 4096 NT_STATUS_OK
ReadX 12339 126976 4096 4096 NT_STATUS_OK
WriteX 12339 0 65536 65536 NT_STATUS_OK
WriteX 12339 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 61440 4096 4096 NT_STATUS_OK
ReadX 12340 126976 4096 4096 NT_STATUS_OK
ReadX 12340 192512 4096 4096 NT_STATUS_OK
ReadX 12340 258048 4096 4096 NT_STATUS_OK
WriteX 12340 0 65536 65536 NT_STATUS_OK
WriteX 12340 65536 65536 65536 NT_STATUS_OK
WriteX 12340 131072 65536 65536 NT_STATUS_OK
WriteX 12340 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 61440 4096 4096 NT_STATUS_OK
ReadX 12341 126976 4096 4096 NT_STATUS_OK
ReadX 12341 192512 4096 4096 NT_STATUS_OK
ReadX 12341 258048 4096 4096 NT_STATUS_OK
ReadX 12341 323584 4096 4096 NT_STATUS_OK
ReadX 12341 389120 4096 4096 NT_STATUS_OK
ReadX 12341 454656 4096 4096 NT_STATUS_OK
ReadX 12341 520192 4096 4096 NT_STATUS_OK
WriteX 12341 0 65536 65536 NT_STATUS_OK
WriteX 12341 65536 65536 65536 NT_STATUS_OK
WriteX 12341 131072 65536 65536 NT_STATUS_OK
WriteX 12341 196608 65536 65536 NT_STATUS_OK
WriteX 12341 262144 65536 65536 NT_STATUS_OK
WriteX 12341 327680 65536 65536 NT_STATUS_OK
WriteX 12341 393216 65536 65536 NT_STATUS_OK
WriteX 12341 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12344 NT_STATUS_OK
WriteX 12344 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12344 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12342 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12346 NT_STATUS_OK
Close 12346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12338 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Close 12341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12349 NT_STATUS_OK
WriteX 12349 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12349 258 NT_STATUS_OK
WriteX 12349 0 62591 62591 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12354 NT_STATUS_OK
WriteX 12354 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12354 258 NT_STATUS_OK
WriteX 12354 0 10845 10845 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12359 NT_STATUS_OK
WriteX 12359 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12359 258 NT_STATUS_OK
WriteX 12359 0 30118 30118 NT_STATUS_OK
Close 12359 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
WriteX 12344 0 64 64 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 61440 61440 NT_STATUS_OK
ReadX 12361 61440 4096 4096 NT_STATUS_OK
ReadX 12361 65536 61440 61440 NT_STATUS_OK
ReadX 12361 126976 4096 4096 NT_STATUS_OK
ReadX 12361 131072 61440 61440 NT_STATUS_OK
ReadX 12361 192512 4096 4096 NT_STATUS_OK
ReadX 12361 196608 61440 61440 NT_STATUS_OK
ReadX 12361 258048 4096 4096 NT_STATUS_OK
ReadX 12361 262144 61440 61440 NT_STATUS_OK
ReadX 12361 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 61440 61440 NT_STATUS_OK
ReadX 12362 61440 4096 4096 NT_STATUS_OK
ReadX 12362 65536 61440 61440 NT_STATUS_OK
ReadX 12362 126976 4096 4096 NT_STATUS_OK
ReadX 12362 131072 61440 61440 NT_STATUS_OK
ReadX 12362 192512 4096 4096 NT_STATUS_OK
ReadX 12362 196608 61440 61440 NT_STATUS_OK
ReadX 12362 258048 4096 4096 NT_STATUS_OK
ReadX 12362 262144 61440 61440 NT_STATUS_OK
ReadX 12362 323584 4096 4096 NT_STATUS_OK
ReadX 12362 327680 61440 61440 NT_STATUS_OK
ReadX 12362 389120 4096 4096 NT_STATUS_OK
ReadX 12362 393216 61440 61440 NT_STATUS_OK
ReadX 12362 454656 4096 4096 NT_STATUS_OK
ReadX 12362 458752 61440 61440 NT_STATUS_OK
ReadX 12362 520192 4096 4096 NT_STATUS_OK
ReadX 12362 524288 61440 61440 NT_STATUS_OK
ReadX 12362 585728 4096 4096 NT_STATUS_OK
ReadX 12362 589824 61440 61440 NT_STATUS_OK
ReadX 12362 651264 4096 4096 NT_STATUS_OK
ReadX 12362 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 61440 61440 NT_STATUS_OK
ReadX 12363 61440 4096 4096 NT_STATUS_OK
ReadX 12363 65536 61440 61440 NT_STATUS_OK
ReadX 12363 126976 4096 4096 NT_STATUS_OK
ReadX 12363 131072 61440 61440 NT_STATUS_OK
ReadX 12363 192512 4096 4096 NT_STATUS_OK
ReadX 12363 196608 61440 61440 NT_STATUS_OK
ReadX 12363 258048 4096 4096 NT_STATUS_OK
ReadX 12363 262144 61440 61440 NT_STATUS_OK
ReadX 12363 323584 4096 4096 NT_STATUS_OK
ReadX 12363 327680 61440 61440 NT_STATUS_OK
ReadX 12363 389120 4096 4096 NT_STATUS_OK
ReadX 12363 393216 61440 61440 NT_STATUS_OK
ReadX 12363 454656 4096 4096 NT_STATUS_OK
ReadX 12363 458752 61440 61440 NT_STATUS_OK
ReadX 12363 520192 4096 4096 NT_STATUS_OK
ReadX 12363 524288 61440 61440 NT_STATUS_OK
ReadX 12363 585728 4096 4096 NT_STATUS_OK
ReadX 12363 589824 61440 61440 NT_STATUS_OK
ReadX 12363 651264 4096 4096 NT_STATUS_OK
ReadX 12363 655360 61440 61440 NT_STATUS_OK
ReadX 12363 716800 4096 4096 NT_STATUS_OK
ReadX 12363 720896 61440 61440 NT_STATUS_OK
ReadX 12363 782336 4096 4096 NT_STATUS_OK
ReadX 12363 786432 61440 61440 NT_STATUS_OK
ReadX 12363 847872 4096 4096 NT_STATUS_OK
ReadX 12363 851968 61440 61440 NT_STATUS_OK
ReadX 12363 913408 4096 4096 NT_STATUS_OK
ReadX 12363 917504 61440 61440 NT_STATUS_OK
ReadX 12363 978944 4096 4096 NT_STATUS_OK
ReadX 12363 983040 61440 61440 NT_STATUS_OK
ReadX 12363 1044480 4096 4096 NT_STATUS_OK
ReadX 12363 1048576 61440 61440 NT_STATUS_OK
ReadX 12363 1110016 4096 4096 NT_STATUS_OK
ReadX 12363 1114112 61440 61440 NT_STATUS_OK
ReadX 12363 1175552 4096 4096 NT_STATUS_OK
ReadX 12363 1179648 61440 61440 NT_STATUS_OK
ReadX 12363 1241088 4096 4096 NT_STATUS_OK
ReadX 12363 1245184 61440 61440 NT_STATUS_OK
ReadX 12363 1306624 4096 4096 NT_STATUS_OK
ReadX 12363 1310720 61440 61440 NT_STATUS_OK
ReadX 12363 1372160 4096 4096 NT_STATUS_OK
ReadX 12363 1376256 61440 61440 NT_STATUS_OK
ReadX 12363 1437696 4096 4096 NT_STATUS_OK
ReadX 12363 1441792 61440 61440 NT_STATUS_OK
ReadX 12363 1503232 4096 4096 NT_STATUS_OK
ReadX 12363 1507328 61440 61440 NT_STATUS_OK
ReadX 12363 1568768 4096 4096 NT_STATUS_OK
ReadX 12363 1572864 61440 61440 NT_STATUS_OK
ReadX 12363 1634304 4096 4096 NT_STATUS_OK
ReadX 12363 1638400 61440 61440 NT_STATUS_OK
ReadX 12363 1699840 4096 4096 NT_STATUS_OK
ReadX 12363 1703936 61440 61440 NT_STATUS_OK
ReadX 12363 1765376 4096 4096 NT_STATUS_OK
ReadX 12363 1769472 61440 61440 NT_STATUS_OK
ReadX 12363 1830912 4096 4096 NT_STATUS_OK
ReadX 12363 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
ReadX 12368 4096 4096 4096 NT_STATUS_OK
ReadX 12368 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Close 12368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12372 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 0 8192 8192 NT_STATUS_OK
ReadX 12376 8192 8192 8192 NT_STATUS_OK
ReadX 12376 16384 8192 8192 NT_STATUS_OK
ReadX 12376 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12378 NT_STATUS_OK
Close 12378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
WriteX 12381 0 10438 10438 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12387 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
ReadX 12390 4096 4096 4096 NT_STATUS_OK
ReadX 12390 8192 4096 4096 NT_STATUS_OK
ReadX 12390 12288 8192 8192 NT_STATUS_OK
ReadX 12390 20480 8192 8192 NT_STATUS_OK
ReadX 12390 28672 8192 8192 NT_STATUS_OK
ReadX 12390 36864 8192 8192 NT_STATUS_OK
ReadX 12390 45056 8192 8192 NT_STATUS_OK
ReadX 12390 53248 8192 8192 NT_STATUS_OK
ReadX 12390 61440 8192 8192 NT_STATUS_OK
ReadX 12390 69632 8192 8192 NT_STATUS_OK
ReadX 12390 77824 8192 8192 NT_STATUS_OK
ReadX 12390 86016 8192 8192 NT_STATUS_OK
ReadX 12390 94208 8192 8192 NT_STATUS_OK
ReadX 12390 102400 8192 8192 NT_STATUS_OK
ReadX 12390 110592 8192 8192 NT_STATUS_OK
ReadX 12390 118784 8192 8192 NT_STATUS_OK
ReadX 12390 126976 8192 8192 NT_STATUS_OK
ReadX 12390 135168 8192 8192 NT_STATUS_OK
ReadX 12390 143360 8192 8192 NT_STATUS_OK
ReadX 12390 151552 8192 8192 NT_STATUS_OK
ReadX 12390 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12390 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12395 NT_STATUS_OK
WriteX 12395 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 258 NT_STATUS_OK
WriteX 12395 0 28489 28489 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12398 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12399 NT_STATUS_OK
Close 12399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 8192 8192 NT_STATUS_OK
ReadX 12402 8192 8192 8192 NT_STATUS_OK
ReadX 12402 16384 8192 8192 NT_STATUS_OK
ReadX 12402 24576 8192 8192 NT_STATUS_OK
ReadX 12402 32768 16384 16384 NT_STATUS_OK
ReadX 12402 49152 8192 8192 NT_STATUS_OK
ReadX 12402 57344 8192 8192 NT_STATUS_OK
ReadX 12402 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12407 NT_STATUS_OK
WriteX 12407 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12407 258 NT_STATUS_OK
WriteX 12407 0 29253 29253 NT_STATUS_OK
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12408 NT_STATUS_OK
Close 12408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12411 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12414 NT_STATUS_OK
WriteX 12414 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12414 258 NT_STATUS_OK
WriteX 12414 0 30183 30183 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12417 NT_STATUS_OK
WriteX 12417 0 510 510 NT_STATUS_OK
WriteX 12417 510 512 512 NT_STATUS_OK
WriteX 12417 1022 510 510 NT_STATUS_OK
WriteX 12417 1532 510 510 NT_STATUS_OK
WriteX 12417 2042 168 168 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
WriteX 12420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12421 NT_STATUS_OK
ReadX 12421 61440 4096 4096 NT_STATUS_OK
ReadX 12421 126976 4096 4096 NT_STATUS_OK
WriteX 12421 0 65536 65536 NT_STATUS_OK
WriteX 12421 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12422 NT_STATUS_OK
ReadX 12422 61440 4096 4096 NT_STATUS_OK
ReadX 12422 126976 4096 4096 NT_STATUS_OK
ReadX 12422 192512 4096 4096 NT_STATUS_OK
ReadX 12422 258048 4096 4096 NT_STATUS_OK
WriteX 12422 0 65536 65536 NT_STATUS_OK
WriteX 12422 65536 65536 65536 NT_STATUS_OK
WriteX 12422 131072 65536 65536 NT_STATUS_OK
WriteX 12422 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 61440 4096 4096 NT_STATUS_OK
ReadX 12423 126976 4096 4096 NT_STATUS_OK
ReadX 12423 192512 4096 4096 NT_STATUS_OK
ReadX 12423 258048 4096 4096 NT_STATUS_OK
ReadX 12423 323584 4096 4096 NT_STATUS_OK
ReadX 12423 389120 4096 4096 NT_STATUS_OK
ReadX 12423 454656 4096 4096 NT_STATUS_OK
ReadX 12423 520192 4096 4096 NT_STATUS_OK
WriteX 12423 0 65536 65536 NT_STATUS_OK
WriteX 12423 65536 65536 65536 NT_STATUS_OK
WriteX 12423 131072 65536 65536 NT_STATUS_OK
WriteX 12423 196608 65536 65536 NT_STATUS_OK
WriteX 12423 262144 65536 65536 NT_STATUS_OK
WriteX 12423 327680 65536 65536 NT_STATUS_OK
WriteX 12423 393216 65536 65536 NT_STATUS_OK
WriteX 12423 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Close 12422 NT_STATUS_OK
Close 12423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12426 NT_STATUS_OK
Close 12426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12435 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12439 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12453 NT_STATUS_OK
Close 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12463 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12468 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12483 NT_STATUS_OK
Close 12483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12492 NT_STATUS_OK
WriteX 12492 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12492 0 65536 65536 NT_STATUS_OK
WriteX 12492 65536 65536 65536 NT_STATUS_OK
WriteX 12492 131072 65536 65536 NT_STATUS_OK
WriteX 12492 196608 65536 65536 NT_STATUS_OK
WriteX 12492 262144 26634 26634 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
ReadX 12500 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12505 NT_STATUS_OK
Close 12505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12514 NT_STATUS_OK
Close 12514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12517 NT_STATUS_OK
Close 12517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12519 NT_STATUS_OK
Close 12519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12528 NT_STATUS_OK
Close 12528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12533 NT_STATUS_OK
Close 12533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12543 NT_STATUS_OK
Close 12543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12548 NT_STATUS_OK
Close 12548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12552 NT_STATUS_OK
Close 12552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12567 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
Close 12579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
Close 12593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
Close 12594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12624 0 4096 4096 NT_STATUS_OK
Close 12624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
ReadX 12626 4096 4096 4096 NT_STATUS_OK
ReadX 12626 8192 4096 4096 NT_STATUS_OK
ReadX 12626 12288 4096 4096 NT_STATUS_OK
ReadX 12626 16384 4096 4096 NT_STATUS_OK
ReadX 12626 20480 4096 4096 NT_STATUS_OK
ReadX 12626 24576 4096 4096 NT_STATUS_OK
ReadX 12626 28672 4096 4096 NT_STATUS_OK
ReadX 12626 32768 4096 4096 NT_STATUS_OK
ReadX 12626 36864 4096 4096 NT_STATUS_OK
ReadX 12626 40960 4096 4096 NT_STATUS_OK
ReadX 12626 45056 4096 4096 NT_STATUS_OK
ReadX 12626 49152 4096 4096 NT_STATUS_OK
ReadX 12626 53248 4096 4096 NT_STATUS_OK
ReadX 12626 57344 4096 4096 NT_STATUS_OK
ReadX 12626 61440 4096 4096 NT_STATUS_OK
ReadX 12626 65536 4096 4096 NT_STATUS_OK
ReadX 12626 69632 4096 4096 NT_STATUS_OK
ReadX 12626 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 0 4096 4096 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12627 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12632 NT_STATUS_OK
WriteX 12632 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 258 NT_STATUS_OK
WriteX 12632 0 65536 65536 NT_STATUS_OK
WriteX 12632 65536 19979 19979 NT_STATUS_OK
Close 12632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
QUERY_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
SET_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 4096 4096 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 4096 4096 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12638 1004 NT_STATUS_OK
WriteX 12638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12639 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12641 NT_STATUS_OK
Close 12641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12644 NT_STATUS_OK
WriteX 12644 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 258 NT_STATUS_OK
WriteX 12644 0 65536 65536 NT_STATUS_OK
WriteX 12644 65536 17654 17654 NT_STATUS_OK
Close 12644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 0 4096 4096 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
SET_FILE_INFORMATION 12645 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12646 NT_STATUS_OK
SET_FILE_INFORMATION 12646 1004 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12648 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
ReadX 12650 4096 4096 4096 NT_STATUS_OK
ReadX 12650 8192 4096 4096 NT_STATUS_OK
ReadX 12650 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12650 16384 4096 4096 NT_STATUS_OK
ReadX 12650 20480 4096 4096 NT_STATUS_OK
ReadX 12650 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12659 NT_STATUS_OK
WriteX 12659 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12659 258 NT_STATUS_OK
WriteX 12659 0 65536 65536 NT_STATUS_OK
WriteX 12659 65536 19490 19490 NT_STATUS_OK
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
QUERY_FILE_INFORMATION 12660 1004 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
SET_FILE_INFORMATION 12660 1004 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12661 NT_STATUS_OK
SET_FILE_INFORMATION 12661 1004 NT_STATUS_OK
Close 12661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12665 0 4096 4096 NT_STATUS_OK
Close 12665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
ReadX 12667 4096 4096 4096 NT_STATUS_OK
ReadX 12667 8192 4096 4096 NT_STATUS_OK
ReadX 12667 12288 4096 4096 NT_STATUS_OK
ReadX 12667 16384 4096 4096 NT_STATUS_OK
ReadX 12667 20480 4096 4096 NT_STATUS_OK
ReadX 12667 24576 4096 4096 NT_STATUS_OK
ReadX 12667 28672 4096 4096 NT_STATUS_OK
ReadX 12667 32768 4096 4096 NT_STATUS_OK
ReadX 12667 36864 4096 4096 NT_STATUS_OK
ReadX 12667 40960 4096 4096 NT_STATUS_OK
ReadX 12667 45056 4096 4096 NT_STATUS_OK
ReadX 12667 49152 4096 4096 NT_STATUS_OK
ReadX 12667 53248 4096 4096 NT_STATUS_OK
ReadX 12667 57344 4096 4096 NT_STATUS_OK
ReadX 12667 61440 4096 4096 NT_STATUS_OK
ReadX 12667 65536 4096 4096 NT_STATUS_OK
ReadX 12667 69632 4096 4096 NT_STATUS_OK
ReadX 12667 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12667 1004 NT_STATUS_OK
WriteX 12667 0 4096 4096 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12668 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12673 NT_STATUS_OK
WriteX 12673 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12673 258 NT_STATUS_OK
WriteX 12673 0 65536 65536 NT_STATUS_OK
WriteX 12673 65536 8866 8866 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12674 NT_STATUS_OK
ReadX 12674 0 4096 4096 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Flush 12674 NT_STATUS_OK
SET_FILE_INFORMATION 12674 1004 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Flush 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 4096 4096 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12678 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12678 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12684 NT_STATUS_OK
WriteX 12684 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12684 258 NT_STATUS_OK
WriteX 12684 0 65536 65536 NT_STATUS_OK
WriteX 12684 65536 9298 9298 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Flush 12685 NT_STATUS_OK
SET_FILE_INFORMATION 12685 1004 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Flush 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12686 NT_STATUS_OK
SET_FILE_INFORMATION 12686 1004 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12692 4096 4096 4096 NT_STATUS_OK
ReadX 12692 8192 4096 4096 NT_STATUS_OK
ReadX 12692 12288 4096 4096 NT_STATUS_OK
ReadX 12692 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
Close 12693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
Close 12694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12701 NT_STATUS_OK
WriteX 12701 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12701 258 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 11540 11540 NT_STATUS_OK
Close 12701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
WriteX 12702 0 4096 4096 NT_STATUS_OK
Flush 12702 NT_STATUS_OK
SET_FILE_INFORMATION 12702 1004 NT_STATUS_OK
WriteX 12702 0 4096 4096 NT_STATUS_OK
Flush 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12703 NT_STATUS_OK
SET_FILE_INFORMATION 12703 1004 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 61440 4096 4096 NT_STATUS_OK
ReadX 12707 126976 4096 4096 NT_STATUS_OK
WriteX 12707 0 65536 65536 NT_STATUS_OK
WriteX 12707 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 61440 4096 4096 NT_STATUS_OK
ReadX 12708 126976 4096 4096 NT_STATUS_OK
ReadX 12708 192512 4096 4096 NT_STATUS_OK
ReadX 12708 258048 4096 4096 NT_STATUS_OK
WriteX 12708 0 65536 65536 NT_STATUS_OK
WriteX 12708 65536 65536 65536 NT_STATUS_OK
WriteX 12708 131072 65536 65536 NT_STATUS_OK
WriteX 12708 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 61440 4096 4096 NT_STATUS_OK
ReadX 12709 126976 4096 4096 NT_STATUS_OK
ReadX 12709 192512 4096 4096 NT_STATUS_OK
ReadX 12709 258048 4096 4096 NT_STATUS_OK
ReadX 12709 323584 4096 4096 NT_STATUS_OK
ReadX 12709 389120 4096 4096 NT_STATUS_OK
ReadX 12709 454656 4096 4096 NT_STATUS_OK
ReadX 12709 520192 4096 4096 NT_STATUS_OK
WriteX 12709 0 65536 65536 NT_STATUS_OK
WriteX 12709 65536 65536 65536 NT_STATUS_OK
WriteX 12709 131072 65536 65536 NT_STATUS_OK
WriteX 12709 196608 65536 65536 NT_STATUS_OK
WriteX 12709 262144 65536 65536 NT_STATUS_OK
WriteX 12709 327680 65536 65536 NT_STATUS_OK
WriteX 12709 393216 65536 65536 NT_STATUS_OK
WriteX 12709 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
ReadX 12710 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12711 NT_STATUS_OK
WriteX 12711 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
WriteX 12711 0 53 53 NT_STATUS_OK
Close 12711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12710 8192 4096 4096 NT_STATUS_OK
ReadX 12710 12288 4096 4096 NT_STATUS_OK
WriteX 12714 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 258 NT_STATUS_OK
ReadX 12710 16384 4096 4096 NT_STATUS_OK
ReadX 12710 20480 4096 4096 NT_STATUS_OK
WriteX 12714 0 15360 15360 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12715 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12715 1004 NT_STATUS_OK
WriteX 12715 0 4096 4096 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12718 4096 4096 4096 NT_STATUS_OK
ReadX 12718 8192 4096 4096 NT_STATUS_OK
ReadX 12718 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
ReadX 12721 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
ReadX 12722 4096 4096 4096 NT_STATUS_OK
ReadX 12722 8192 4096 4096 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12723 NT_STATUS_OK
WriteX 12723 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12723 258 NT_STATUS_OK
WriteX 12723 0 15360 15360 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12728 NT_STATUS_OK
SET_FILE_INFORMATION 12728 1004 NT_STATUS_OK
Close 12728 NT_STATUS_OK
WriteX 12724 0 4096 4096 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
ReadX 12731 4096 4096 4096 NT_STATUS_OK
ReadX 12731 8192 4096 4096 NT_STATUS_OK
ReadX 12731 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12733 NT_STATUS_OK
WriteX 12733 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12733 258 NT_STATUS_OK
WriteX 12733 0 53 53 NT_STATUS_OK
Close 12733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12732 4096 4096 4096 NT_STATUS_OK
ReadX 12732 8192 4096 4096 NT_STATUS_OK
ReadX 12732 12288 4096 4096 NT_STATUS_OK
WriteX 12736 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 258 NT_STATUS_OK
WriteX 12736 0 12006 12006 NT_STATUS_OK
Close 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12740 4096 4096 4096 NT_STATUS_OK
ReadX 12740 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12743 NT_STATUS_OK
WriteX 12743 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 11991 11991 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12748 NT_STATUS_OK
SET_FILE_INFORMATION 12748 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12751 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
ReadX 12751 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
WriteX 12751 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12751 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
Close 12727 NT_STATUS_OK
WriteX 12731 0 19054 19054 NT_STATUS_OK
WriteX 12751 0 12288 12288 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12754 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 61440 61440 NT_STATUS_OK
ReadX 12758 61440 4096 4096 NT_STATUS_OK
ReadX 12758 65536 61440 61440 NT_STATUS_OK
ReadX 12758 126976 4096 4096 NT_STATUS_OK
ReadX 12758 131072 61440 61440 NT_STATUS_OK
ReadX 12758 192512 4096 4096 NT_STATUS_OK
ReadX 12758 196608 61440 61440 NT_STATUS_OK
ReadX 12758 258048 4096 4096 NT_STATUS_OK
ReadX 12758 262144 61440 61440 NT_STATUS_OK
ReadX 12758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 61440 61440 NT_STATUS_OK
ReadX 12759 61440 4096 4096 NT_STATUS_OK
ReadX 12759 65536 61440 61440 NT_STATUS_OK
ReadX 12759 126976 4096 4096 NT_STATUS_OK
ReadX 12759 131072 61440 61440 NT_STATUS_OK
ReadX 12759 192512 4096 4096 NT_STATUS_OK
ReadX 12759 196608 61440 61440 NT_STATUS_OK
ReadX 12759 258048 4096 4096 NT_STATUS_OK
ReadX 12759 262144 61440 61440 NT_STATUS_OK
ReadX 12759 323584 4096 4096 NT_STATUS_OK
ReadX 12759 327680 61440 61440 NT_STATUS_OK
ReadX 12759 389120 4096 4096 NT_STATUS_OK
ReadX 12759 393216 61440 61440 NT_STATUS_OK
ReadX 12759 454656 4096 4096 NT_STATUS_OK
ReadX 12759 458752 61440 61440 NT_STATUS_OK
ReadX 12759 520192 4096 4096 NT_STATUS_OK
ReadX 12759 524288 61440 61440 NT_STATUS_OK
ReadX 12759 585728 4096 4096 NT_STATUS_OK
ReadX 12759 589824 61440 61440 NT_STATUS_OK
ReadX 12759 651264 4096 4096 NT_STATUS_OK
ReadX 12759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 61440 61440 NT_STATUS_OK
ReadX 12760 61440 4096 4096 NT_STATUS_OK
ReadX 12760 65536 61440 61440 NT_STATUS_OK
ReadX 12760 126976 4096 4096 NT_STATUS_OK
ReadX 12760 131072 61440 61440 NT_STATUS_OK
ReadX 12760 192512 4096 4096 NT_STATUS_OK
ReadX 12760 196608 61440 61440 NT_STATUS_OK
ReadX 12760 258048 4096 4096 NT_STATUS_OK
ReadX 12760 262144 61440 61440 NT_STATUS_OK
ReadX 12760 323584 4096 4096 NT_STATUS_OK
ReadX 12760 327680 61440 61440 NT_STATUS_OK
ReadX 12760 389120 4096 4096 NT_STATUS_OK
ReadX 12760 393216 61440 61440 NT_STATUS_OK
ReadX 12760 454656 4096 4096 NT_STATUS_OK
ReadX 12760 458752 61440 61440 NT_STATUS_OK
ReadX 12760 520192 4096 4096 NT_STATUS_OK
ReadX 12760 524288 61440 61440 NT_STATUS_OK
ReadX 12760 585728 4096 4096 NT_STATUS_OK
ReadX 12760 589824 61440 61440 NT_STATUS_OK
ReadX 12760 651264 4096 4096 NT_STATUS_OK
ReadX 12760 655360 61440 61440 NT_STATUS_OK
ReadX 12760 716800 4096 4096 NT_STATUS_OK
ReadX 12760 720896 61440 61440 NT_STATUS_OK
ReadX 12760 782336 4096 4096 NT_STATUS_OK
ReadX 12760 786432 61440 61440 NT_STATUS_OK
ReadX 12760 847872 4096 4096 NT_STATUS_OK
ReadX 12760 851968 61440 61440 NT_STATUS_OK
ReadX 12760 913408 4096 4096 NT_STATUS_OK
ReadX 12760 917504 61440 61440 NT_STATUS_OK
ReadX 12760 978944 4096 4096 NT_STATUS_OK
ReadX 12760 983040 61440 61440 NT_STATUS_OK
ReadX 12760 1044480 4096 4096 NT_STATUS_OK
ReadX 12760 1048576 61440 61440 NT_STATUS_OK
ReadX 12760 1110016 4096 4096 NT_STATUS_OK
ReadX 12760 1114112 61440 61440 NT_STATUS_OK
ReadX 12760 1175552 4096 4096 NT_STATUS_OK
ReadX 12760 1179648 61440 61440 NT_STATUS_OK
ReadX 12760 1241088 4096 4096 NT_STATUS_OK
ReadX 12760 1245184 61440 61440 NT_STATUS_OK
ReadX 12760 1306624 4096 4096 NT_STATUS_OK
ReadX 12760 1310720 61440 61440 NT_STATUS_OK
ReadX 12760 1372160 4096 4096 NT_STATUS_OK
ReadX 12760 1376256 61440 61440 NT_STATUS_OK
ReadX 12760 1437696 4096 4096 NT_STATUS_OK
ReadX 12760 1441792 61440 61440 NT_STATUS_OK
ReadX 12760 1503232 4096 4096 NT_STATUS_OK
ReadX 12760 1507328 61440 61440 NT_STATUS_OK
ReadX 12760 1568768 4096 4096 NT_STATUS_OK
ReadX 12760 1572864 61440 61440 NT_STATUS_OK
ReadX 12760 1634304 4096 4096 NT_STATUS_OK
ReadX 12760 1638400 61440 61440 NT_STATUS_OK
ReadX 12760 1699840 4096 4096 NT_STATUS_OK
ReadX 12760 1703936 61440 61440 NT_STATUS_OK
ReadX 12760 1765376 4096 4096 NT_STATUS_OK
ReadX 12760 1769472 61440 61440 NT_STATUS_OK
ReadX 12760 1830912 4096 4096 NT_STATUS_OK
ReadX 12760 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12767 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 1004 NT_STATUS_OK
WriteX 12767 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12769 NT_STATUS_OK
WriteX 12769 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12769 258 NT_STATUS_OK
WriteX 12769 0 491 491 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12767 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12773 NT_STATUS_OK
WriteX 12773 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 258 NT_STATUS_OK
WriteX 12773 0 543 543 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12787 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 1004 NT_STATUS_OK
WriteX 12787 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 258 NT_STATUS_OK
WriteX 12787 0 2048 2048 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12788 0 4096 4096 NT_STATUS_OK
Flush 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12793 NT_STATUS_OK
WriteX 12793 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 258 NT_STATUS_OK
WriteX 12793 0 2048 2048 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12799 NT_STATUS_OK
WriteX 12799 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12799 258 NT_STATUS_OK
WriteX 12799 0 2048 2048 NT_STATUS_OK
Close 12799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 2048 2048 NT_STATUS_OK
ReadX 12778 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12782 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12794 0 4096 4096 NT_STATUS_OK
WriteX 12778 0 8192 8192 NT_STATUS_OK
WriteX 12779 0 4096 4096 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12780 NT_STATUS_OK
Close 12781 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12824 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 1004 NT_STATUS_OK
WriteX 12824 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 258 NT_STATUS_OK
WriteX 12824 0 2048 2048 NT_STATUS_OK
Close 12824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12831 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12832 NT_STATUS_OK
QUERY_FILE_INFORMATION 12832 1004 NT_STATUS_OK
WriteX 12832 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12832 258 NT_STATUS_OK
WriteX 12832 0 2048 2048 NT_STATUS_OK
Close 12832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12825 0 4096 4096 NT_STATUS_OK
Flush 12825 NT_STATUS_OK
WriteX 12833 0 4096 4096 NT_STATUS_OK
Flush 12833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12825 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12833 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12827 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12835 NT_STATUS_OK
WriteX 12835 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12835 258 NT_STATUS_OK
WriteX 12835 0 4096 4096 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12838 NT_STATUS_OK
WriteX 12838 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 258 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12839 0 4096 4096 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12842 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12846 NT_STATUS_OK
WriteX 12846 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 2048 2048 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12849 NT_STATUS_OK
ReadX 12849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12861 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Close 12848 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12863 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12872 NT_STATUS_OK
ReadX 12872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12873 NT_STATUS_OK
ReadX 12873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12874 NT_STATUS_OK
ReadX 12874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12883 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1004 NT_STATUS_OK
WriteX 12883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 2048 2048 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12895 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 1004 NT_STATUS_OK
WriteX 12895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 258 NT_STATUS_OK
WriteX 12895 0 2048 2048 NT_STATUS_OK
Close 12895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12898 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12903 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 1004 NT_STATUS_OK
WriteX 12903 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
WriteX 12903 0 2048 2048 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
Flush 12884 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
Flush 12896 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12886 4096 16384 16384 NT_STATUS_OK
ReadX 12866 4096 16384 16384 NT_STATUS_OK
ReadX 12898 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12906 NT_STATUS_OK
ReadX 12906 0 2048 2048 NT_STATUS_OK
WriteX 12906 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12907 NT_STATUS_OK
QUERY_FILE_INFORMATION 12907 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Close 12872 NT_STATUS_OK
Close 12875 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12873 NT_STATUS_OK
Close 12874 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12909 NT_STATUS_OK
QUERY_FILE_INFORMATION 12909 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12911 NT_STATUS_OK
QUERY_FILE_INFORMATION 12911 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12914 4096 16384 16384 NT_STATUS_OK
WriteX 12914 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12926 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12927 NT_STATUS_OK
ReadX 12927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12929 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 8192 8192 NT_STATUS_OK
ReadX 12920 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 0 4096 4096 NT_STATUS_OK
ReadX 12934 4096 4096 4096 NT_STATUS_OK
ReadX 12934 8192 4096 4096 NT_STATUS_OK
WriteX 12920 0 4096 4096 NT_STATUS_OK
WriteX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
ReadX 12935 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12914 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12940 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 1004 NT_STATUS_OK
WriteX 12940 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 258 NT_STATUS_OK
WriteX 12940 0 2048 2048 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
ReadX 12943 4096 4096 4096 NT_STATUS_OK
WriteX 12943 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12945 NT_STATUS_OK
ReadX 12945 0 4096 4096 NT_STATUS_OK
ReadX 12945 4096 4096 4096 NT_STATUS_OK
WriteX 12945 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12946 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12926 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Close 12927 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12945 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12948 0 4096 4096 NT_STATUS_OK
ReadX 12948 4096 4096 4096 NT_STATUS_OK
ReadX 12948 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12952 NT_STATUS_OK
ReadX 12952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12959 NT_STATUS_OK
ReadX 12959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
ReadX 12949 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12966 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 1004 NT_STATUS_OK
WriteX 12966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 258 NT_STATUS_OK
WriteX 12966 0 2048 2048 NT_STATUS_OK
Close 12966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12967 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12972 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 1004 NT_STATUS_OK
WriteX 12972 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 258 NT_STATUS_OK
WriteX 12972 0 2048 2048 NT_STATUS_OK
Close 12972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12973 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12956 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12974 NT_STATUS_OK
QUERY_FILE_INFORMATION 12974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12955 NT_STATUS_OK
Close 12961 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Close 12953 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 12951 NT_STATUS_OK
Close 12952 NT_STATUS_OK
Close 12956 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12959 NT_STATUS_OK
Close 12948 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12976 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 61440 4096 4096 NT_STATUS_OK
ReadX 12978 126976 4096 4096 NT_STATUS_OK
WriteX 12978 0 65536 65536 NT_STATUS_OK
WriteX 12978 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 61440 4096 4096 NT_STATUS_OK
ReadX 12979 126976 4096 4096 NT_STATUS_OK
ReadX 12979 192512 4096 4096 NT_STATUS_OK
ReadX 12979 258048 4096 4096 NT_STATUS_OK
WriteX 12979 0 65536 65536 NT_STATUS_OK
WriteX 12979 65536 65536 65536 NT_STATUS_OK
WriteX 12979 131072 65536 65536 NT_STATUS_OK
WriteX 12979 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 126976 4096 4096 NT_STATUS_OK
ReadX 12980 192512 4096 4096 NT_STATUS_OK
ReadX 12980 258048 4096 4096 NT_STATUS_OK
ReadX 12980 323584 4096 4096 NT_STATUS_OK
ReadX 12980 389120 4096 4096 NT_STATUS_OK
ReadX 12980 454656 4096 4096 NT_STATUS_OK
ReadX 12980 520192 4096 4096 NT_STATUS_OK
WriteX 12980 0 65536 65536 NT_STATUS_OK
WriteX 12980 65536 65536 65536 NT_STATUS_OK
WriteX 12980 131072 65536 65536 NT_STATUS_OK
WriteX 12980 196608 65536 65536 NT_STATUS_OK
WriteX 12980 262144 65536 65536 NT_STATUS_OK
WriteX 12980 327680 65536 65536 NT_STATUS_OK
WriteX 12980 393216 65536 65536 NT_STATUS_OK
WriteX 12980 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12981 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12981 8192 4096 4096 NT_STATUS_OK
ReadX 12981 12288 4096 4096 NT_STATUS_OK
ReadX 12981 16384 4096 4096 NT_STATUS_OK
ReadX 12981 20480 4096 4096 NT_STATUS_OK
ReadX 12981 24576 4096 4096 NT_STATUS_OK
ReadX 12981 28672 4096 4096 NT_STATUS_OK
ReadX 12981 32768 4096 4096 NT_STATUS_OK
ReadX 12981 36864 4096 4096 NT_STATUS_OK
ReadX 12981 40960 4096 4096 NT_STATUS_OK
ReadX 12981 45056 4096 4096 NT_STATUS_OK
ReadX 12981 49152 4096 4096 NT_STATUS_OK
ReadX 12981 53248 4096 4096 NT_STATUS_OK
ReadX 12981 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12981 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12982 NT_STATUS_OK
Close 12982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12984 NT_STATUS_OK
WriteX 12984 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12984 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 0 57088 57088 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
Flush 12984 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12985 NT_STATUS_OK
SET_FILE_INFORMATION 12985 1004 NT_STATUS_OK
Close 12985 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12988 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12989 NT_STATUS_OK
WriteX 12989 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 51456 51456 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Flush 12989 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12993 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 53077 53077 NT_STATUS_OK
Close 12998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12999 NT_STATUS_OK
WriteX 12999 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 65536 65536 NT_STATUS_OK
WriteX 12999 65536 1856 1856 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13008 NT_STATUS_OK
WriteX 13008 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 258 NT_STATUS_OK
WriteX 13008 0 7983 7983 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13013 NT_STATUS_OK
WriteX 13013 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 258 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 65536 65536 NT_STATUS_OK
WriteX 13013 131072 65536 65536 NT_STATUS_OK
WriteX 13013 196608 65536 65536 NT_STATUS_OK
WriteX 13013 262144 65536 65536 NT_STATUS_OK
WriteX 13013 327680 65536 65536 NT_STATUS_OK
WriteX 13013 393216 65536 65536 NT_STATUS_OK
WriteX 13013 458752 46731 46731 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13014 NT_STATUS_OK
WriteX 13014 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13003 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 65536 65536 NT_STATUS_OK
WriteX 13014 65536 22848 22848 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13018 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13019 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13019 1004 NT_STATUS_OK
ReadX 13019 8192 4096 4096 NT_STATUS_OK
ReadX 13019 12288 4096 4096 NT_STATUS_OK
ReadX 13019 16384 4096 4096 NT_STATUS_OK
ReadX 13019 20480 4096 4096 NT_STATUS_OK
ReadX 13019 24576 4096 4096 NT_STATUS_OK
ReadX 13019 28672 4096 4096 NT_STATUS_OK
ReadX 13019 32768 4096 4096 NT_STATUS_OK
ReadX 13019 36864 4096 4096 NT_STATUS_OK
ReadX 13019 40960 4096 4096 NT_STATUS_OK
ReadX 13019 45056 4096 4096 NT_STATUS_OK
ReadX 13019 49152 4096 4096 NT_STATUS_OK
ReadX 13019 53248 4096 4096 NT_STATUS_OK
ReadX 13019 57344 4096 4096 NT_STATUS_OK
ReadX 13019 61440 4096 4096 NT_STATUS_OK
ReadX 13019 65536 4096 4096 NT_STATUS_OK
ReadX 13019 69632 4096 4096 NT_STATUS_OK
ReadX 13019 73728 4096 4096 NT_STATUS_OK
ReadX 13019 77824 4096 4096 NT_STATUS_OK
ReadX 13019 81920 4096 4096 NT_STATUS_OK
ReadX 13019 86016 4096 4096 NT_STATUS_OK
ReadX 13019 90112 4096 4096 NT_STATUS_OK
ReadX 13019 94208 4096 4096 NT_STATUS_OK
ReadX 13019 98304 4096 4096 NT_STATUS_OK
ReadX 13019 102400 4096 4096 NT_STATUS_OK
ReadX 13019 106496 4096 4096 NT_STATUS_OK
ReadX 13019 110592 4096 4096 NT_STATUS_OK
ReadX 13019 114688 4096 4096 NT_STATUS_OK
ReadX 13019 118784 4096 4096 NT_STATUS_OK
ReadX 13019 122880 4096 4096 NT_STATUS_OK
ReadX 13019 126976 4096 4096 NT_STATUS_OK
ReadX 13019 131072 4096 4096 NT_STATUS_OK
ReadX 13019 135168 4096 4096 NT_STATUS_OK
ReadX 13019 139264 4096 4096 NT_STATUS_OK
ReadX 13019 143360 4096 4096 NT_STATUS_OK
ReadX 13019 147456 4096 4096 NT_STATUS_OK
ReadX 13019 151552 4096 4096 NT_STATUS_OK
ReadX 13019 155648 4096 4096 NT_STATUS_OK
ReadX 13019 159744 4096 4096 NT_STATUS_OK
ReadX 13019 163840 4096 4096 NT_STATUS_OK
ReadX 13019 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13019 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
WriteX 13022 0 42388 42388 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13024 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
ReadX 13026 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
SET_FILE_INFORMATION 13027 1004 NT_STATUS_OK
WriteX 13027 0 42652 42652 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13029 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
ReadX 13031 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13036 NT_STATUS_OK
WriteX 13036 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13036 258 NT_STATUS_OK
WriteX 13036 0 65536 65536 NT_STATUS_OK
WriteX 13036 65536 49 49 NT_STATUS_OK
Close 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 61440 61440 NT_STATUS_OK
ReadX 13037 61440 4096 4096 NT_STATUS_OK
ReadX 13037 65536 61440 61440 NT_STATUS_OK
ReadX 13037 126976 4096 4096 NT_STATUS_OK
ReadX 13037 131072 61440 61440 NT_STATUS_OK
ReadX 13037 192512 4096 4096 NT_STATUS_OK
ReadX 13037 196608 61440 61440 NT_STATUS_OK
ReadX 13037 258048 4096 4096 NT_STATUS_OK
ReadX 13037 262144 61440 61440 NT_STATUS_OK
ReadX 13037 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 61440 61440 NT_STATUS_OK
ReadX 13038 61440 4096 4096 NT_STATUS_OK
ReadX 13038 65536 61440 61440 NT_STATUS_OK
ReadX 13038 126976 4096 4096 NT_STATUS_OK
ReadX 13038 131072 61440 61440 NT_STATUS_OK
ReadX 13038 192512 4096 4096 NT_STATUS_OK
ReadX 13038 196608 61440 61440 NT_STATUS_OK
ReadX 13038 258048 4096 4096 NT_STATUS_OK
ReadX 13038 262144 61440 61440 NT_STATUS_OK
ReadX 13038 323584 4096 4096 NT_STATUS_OK
ReadX 13038 327680 61440 61440 NT_STATUS_OK
ReadX 13038 389120 4096 4096 NT_STATUS_OK
ReadX 13038 393216 61440 61440 NT_STATUS_OK
ReadX 13038 454656 4096 4096 NT_STATUS_OK
ReadX 13038 458752 61440 61440 NT_STATUS_OK
ReadX 13038 520192 4096 4096 NT_STATUS_OK
ReadX 13038 524288 61440 61440 NT_STATUS_OK
ReadX 13038 585728 4096 4096 NT_STATUS_OK
ReadX 13038 589824 61440 61440 NT_STATUS_OK
ReadX 13038 651264 4096 4096 NT_STATUS_OK
ReadX 13038 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 61440 61440 NT_STATUS_OK
ReadX 13039 61440 4096 4096 NT_STATUS_OK
ReadX 13039 65536 61440 61440 NT_STATUS_OK
ReadX 13039 126976 4096 4096 NT_STATUS_OK
ReadX 13039 131072 61440 61440 NT_STATUS_OK
ReadX 13039 192512 4096 4096 NT_STATUS_OK
ReadX 13039 196608 61440 61440 NT_STATUS_OK
ReadX 13039 258048 4096 4096 NT_STATUS_OK
ReadX 13039 262144 61440 61440 NT_STATUS_OK
ReadX 13039 323584 4096 4096 NT_STATUS_OK
ReadX 13039 327680 61440 61440 NT_STATUS_OK
ReadX 13039 389120 4096 4096 NT_STATUS_OK
ReadX 13039 393216 61440 61440 NT_STATUS_OK
ReadX 13039 454656 4096 4096 NT_STATUS_OK
ReadX 13039 458752 61440 61440 NT_STATUS_OK
ReadX 13039 520192 4096 4096 NT_STATUS_OK
ReadX 13039 524288 61440 61440 NT_STATUS_OK
ReadX 13039 585728 4096 4096 NT_STATUS_OK
ReadX 13039 589824 61440 61440 NT_STATUS_OK
ReadX 13039 651264 4096 4096 NT_STATUS_OK
ReadX 13039 655360 61440 61440 NT_STATUS_OK
ReadX 13039 716800 4096 4096 NT_STATUS_OK
ReadX 13039 720896 61440 61440 NT_STATUS_OK
ReadX 13039 782336 4096 4096 NT_STATUS_OK
ReadX 13039 786432 61440 61440 NT_STATUS_OK
ReadX 13039 847872 4096 4096 NT_STATUS_OK
ReadX 13039 851968 61440 61440 NT_STATUS_OK
ReadX 13039 913408 4096 4096 NT_STATUS_OK
ReadX 13039 917504 61440 61440 NT_STATUS_OK
ReadX 13039 978944 4096 4096 NT_STATUS_OK
ReadX 13039 983040 61440 61440 NT_STATUS_OK
ReadX 13039 1044480 4096 4096 NT_STATUS_OK
ReadX 13039 1048576 61440 61440 NT_STATUS_OK
ReadX 13039 1110016 4096 4096 NT_STATUS_OK
ReadX 13039 1114112 61440 61440 NT_STATUS_OK
ReadX 13039 1175552 4096 4096 NT_STATUS_OK
ReadX 13039 1179648 61440 61440 NT_STATUS_OK
ReadX 13039 1241088 4096 4096 NT_STATUS_OK
ReadX 13039 1245184 61440 61440 NT_STATUS_OK
ReadX 13039 1306624 4096 4096 NT_STATUS_OK
ReadX 13039 1310720 61440 61440 NT_STATUS_OK
ReadX 13039 1372160 4096 4096 NT_STATUS_OK
ReadX 13039 1376256 61440 61440 NT_STATUS_OK
ReadX 13039 1437696 4096 4096 NT_STATUS_OK
ReadX 13039 1441792 61440 61440 NT_STATUS_OK
ReadX 13039 1503232 4096 4096 NT_STATUS_OK
ReadX 13039 1507328 61440 61440 NT_STATUS_OK
ReadX 13039 1568768 4096 4096 NT_STATUS_OK
ReadX 13039 1572864 61440 61440 NT_STATUS_OK
ReadX 13039 1634304 4096 4096 NT_STATUS_OK
ReadX 13039 1638400 61440 61440 NT_STATUS_OK
ReadX 13039 1699840 4096 4096 NT_STATUS_OK
ReadX 13039 1703936 61440 61440 NT_STATUS_OK
ReadX 13039 1765376 4096 4096 NT_STATUS_OK
ReadX 13039 1769472 61440 61440 NT_STATUS_OK
ReadX 13039 1830912 4096 4096 NT_STATUS_OK
ReadX 13039 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13041 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
ReadX 13041 2156 24 24 NT_STATUS_OK
ReadX 13041 2139 276 276 NT_STATUS_OK
ReadX 13041 2136 14 14 NT_STATUS_OK
ReadX 13041 2136 7 7 NT_STATUS_OK
ReadX 13041 2138 12 12 NT_STATUS_OK
ReadX 13041 2137 8 8 NT_STATUS_OK
ReadX 13041 2135 15 15 NT_STATUS_OK
ReadX 13041 0 16 16 NT_STATUS_OK
ReadX 13041 16 2048 2048 NT_STATUS_OK
ReadX 13041 2064 2048 2048 NT_STATUS_OK
ReadX 13041 257 2048 2048 NT_STATUS_OK
ReadX 13041 385 2048 2048 NT_STATUS_OK
ReadX 13041 513 2048 2048 NT_STATUS_OK
ReadX 13041 641 2048 2048 NT_STATUS_OK
ReadX 13041 769 2048 2048 NT_STATUS_OK
ReadX 13041 897 2048 2048 NT_STATUS_OK
ReadX 13041 1025 2048 2048 NT_STATUS_OK
ReadX 13041 1153 2048 2048 NT_STATUS_OK
ReadX 13041 1281 2048 2048 NT_STATUS_OK
ReadX 13041 1409 2048 2048 NT_STATUS_OK
ReadX 13041 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13046 NT_STATUS_OK
WriteX 13046 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 258 NT_STATUS_OK
WriteX 13046 0 10575 10575 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13051 NT_STATUS_OK
LockX 13051 2147483538 1 NT_STATUS_OK
UnlockX 13051 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
ReadX 13051 0 512 512 NT_STATUS_OK
ReadX 13051 512 512 512 NT_STATUS_OK
ReadX 13051 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1004 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13052 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1005 NT_STATUS_OK
ReadX 13052 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13053 NT_STATUS_OK
LockX 13053 2147483538 1 NT_STATUS_OK
UnlockX 13053 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13053 1005 NT_STATUS_OK
ReadX 13053 0 512 512 NT_STATUS_OK
ReadX 13053 512 512 512 NT_STATUS_OK
ReadX 13053 1024 512 512 NT_STATUS_OK
ReadX 13053 288 20 20 NT_STATUS_OK
ReadX 13053 308 2084 2084 NT_STATUS_OK
ReadX 13053 388 2084 2084 NT_STATUS_OK
ReadX 13053 388 2084 2084 NT_STATUS_OK
ReadX 13040 2157 1386 1386 NT_STATUS_OK
ReadX 13053 2472 399 399 NT_STATUS_OK
ReadX 13053 3072 1536 1536 NT_STATUS_OK
ReadX 13053 544 149 149 NT_STATUS_OK
ReadX 13053 693 485 485 NT_STATUS_OK
Close 13053 NT_STATUS_OK
ReadX 13040 2157 4096 4096 NT_STATUS_OK
ReadX 13040 6253 4096 4096 NT_STATUS_OK
ReadX 13040 10349 4096 4096 NT_STATUS_OK
ReadX 13040 14445 4096 4096 NT_STATUS_OK
ReadX 13040 18541 4096 4096 NT_STATUS_OK
ReadX 13040 22637 256 256 NT_STATUS_OK
ReadX 13040 22893 4096 4096 NT_STATUS_OK
ReadX 13040 26989 4096 4096 NT_STATUS_OK
ReadX 13040 31085 4096 4096 NT_STATUS_OK
ReadX 13040 35181 4096 4096 NT_STATUS_OK
ReadX 13040 39277 4096 4096 NT_STATUS_OK
ReadX 13040 43373 4096 4096 NT_STATUS_OK
ReadX 13040 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13040 2157 1024 1024 NT_STATUS_OK
ReadX 13040 1667 4688 4688 NT_STATUS_OK
ReadX 13040 6355 3516 3516 NT_STATUS_OK
ReadX 13040 9871 16384 16384 NT_STATUS_OK
ReadX 13040 26255 3771 3771 NT_STATUS_OK
ReadX 13040 30026 2048 2048 NT_STATUS_OK
ReadX 13040 32074 1024 1024 NT_STATUS_OK
ReadX 13040 33098 6652 6652 NT_STATUS_OK
ReadX 13040 39750 16384 16384 NT_STATUS_OK
ReadX 13040 56134 10496 10496 NT_STATUS_OK
ReadX 13040 66630 1784 1784 NT_STATUS_OK
ReadX 13040 68414 90 90 NT_STATUS_OK
ReadX 13040 68504 273 273 NT_STATUS_OK
ReadX 13040 68777 1600 1600 NT_STATUS_OK
ReadX 13040 70377 640 640 NT_STATUS_OK
ReadX 13040 71017 1280 1280 NT_STATUS_OK
ReadX 13040 72297 8464 8464 NT_STATUS_OK
ReadX 13040 80761 158 158 NT_STATUS_OK
ReadX 13040 80919 912 912 NT_STATUS_OK
ReadX 13040 81831 1980 1980 NT_STATUS_OK
ReadX 13040 83811 2256 2256 NT_STATUS_OK
ReadX 13040 86067 400 400 NT_STATUS_OK
ReadX 13040 86467 252 252 NT_STATUS_OK
ReadX 13040 86719 42 42 NT_STATUS_OK
ReadX 13040 86761 725 725 NT_STATUS_OK
ReadX 13040 2009 512 512 NT_STATUS_OK
ReadX 13040 3895 9 9 NT_STATUS_OK
ReadX 13040 3781 46 46 NT_STATUS_OK
ReadX 13040 4059 92 92 NT_STATUS_OK
ReadX 13040 3781 92 92 NT_STATUS_OK
ReadX 13040 3986 184 184 NT_STATUS_OK
ReadX 13040 3987 16384 16384 NT_STATUS_OK
ReadX 13040 3902 16384 16384 NT_STATUS_OK
ReadX 13040 3781 10240 10240 NT_STATUS_OK
ReadX 13040 3821 16384 16384 NT_STATUS_OK
ReadX 13040 3891 935 935 NT_STATUS_OK
ReadX 13040 4060 10240 10240 NT_STATUS_OK
ReadX 13040 4059 184 184 NT_STATUS_OK
ReadX 13040 256 184 184 NT_STATUS_OK
ReadX 13040 256 1026 1026 NT_STATUS_OK
ReadX 13040 3901 326 326 NT_STATUS_OK
ReadX 13040 3899 652 652 NT_STATUS_OK
ReadX 13040 256 2 2 NT_STATUS_OK
ReadX 13040 258 4948 4948 NT_STATUS_OK
Close 13040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13058 NT_STATUS_OK
WriteX 13058 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13058 258 NT_STATUS_OK
WriteX 13058 0 65536 65536 NT_STATUS_OK
WriteX 13058 65536 65536 65536 NT_STATUS_OK
WriteX 13058 131072 65536 65536 NT_STATUS_OK
WriteX 13058 196608 65536 65536 NT_STATUS_OK
WriteX 13058 262144 65536 65536 NT_STATUS_OK
WriteX 13058 327680 65536 65536 NT_STATUS_OK
WriteX 13058 393216 65536 65536 NT_STATUS_OK
WriteX 13058 458752 65536 65536 NT_STATUS_OK
WriteX 13058 524288 65536 65536 NT_STATUS_OK
WriteX 13058 589824 35257 35257 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13063 NT_STATUS_OK
WriteX 13063 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
WriteX 13063 131072 65536 65536 NT_STATUS_OK
WriteX 13063 196608 65536 65536 NT_STATUS_OK
WriteX 13063 262144 65536 65536 NT_STATUS_OK
WriteX 13063 327680 65536 65536 NT_STATUS_OK
WriteX 13063 393216 65536 65536 NT_STATUS_OK
WriteX 13063 458752 65536 65536 NT_STATUS_OK
WriteX 13063 524288 65536 65536 NT_STATUS_OK
WriteX 13063 589824 57598 57598 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 12543 12543 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
Close 13049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13071 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
ReadX 13071 1938 24 24 NT_STATUS_OK
ReadX 13071 1920 276 276 NT_STATUS_OK
ReadX 13071 1918 14 14 NT_STATUS_OK
ReadX 13071 1918 7 7 NT_STATUS_OK
ReadX 13071 1919 12 12 NT_STATUS_OK
ReadX 13071 1919 8 8 NT_STATUS_OK
ReadX 13071 1917 15 15 NT_STATUS_OK
ReadX 13071 0 16 16 NT_STATUS_OK
ReadX 13071 16 2048 2048 NT_STATUS_OK
ReadX 13071 2064 2048 2048 NT_STATUS_OK
ReadX 13071 257 2048 2048 NT_STATUS_OK
ReadX 13071 385 2048 2048 NT_STATUS_OK
ReadX 13071 513 2048 2048 NT_STATUS_OK
ReadX 13071 641 2048 2048 NT_STATUS_OK
ReadX 13071 769 2048 2048 NT_STATUS_OK
ReadX 13071 897 2048 2048 NT_STATUS_OK
ReadX 13071 1025 2048 2048 NT_STATUS_OK
ReadX 13071 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 11588 11588 NT_STATUS_OK
Flush 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13081 NT_STATUS_OK
WriteX 13081 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13081 258 NT_STATUS_OK
WriteX 13081 0 11615 11615 NT_STATUS_OK
Flush 13081 NT_STATUS_OK
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13087 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13090 NT_STATUS_OK
WriteX 13090 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 65536 65536 NT_STATUS_OK
WriteX 13090 65536 16050 16050 NT_STATUS_OK
Close 13090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13070 1939 64 64 NT_STATUS_OK
ReadX 13070 128 248 248 NT_STATUS_OK
ReadX 13070 128 568 568 NT_STATUS_OK
ReadX 13070 3872 1536 1536 NT_STATUS_OK
ReadX 13070 3456 2560 2560 NT_STATUS_OK
ReadX 13070 3136 512 512 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
ReadX 13070 3264 3072 3072 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 3616 4096 4096 NT_STATUS_OK
ReadX 13070 1939 64 64 NT_STATUS_OK
ReadX 13070 128 248 248 NT_STATUS_OK
ReadX 13070 128 608 608 NT_STATUS_OK
ReadX 13070 2858 1024 1024 NT_STATUS_OK
ReadX 13070 2810 4096 4096 NT_STATUS_OK
ReadX 13070 2826 4096 4096 NT_STATUS_OK
ReadX 13070 2580 2048 2048 NT_STATUS_OK
ReadX 13070 2800 2560 2560 NT_STATUS_OK
ReadX 13070 2100 4096 4096 NT_STATUS_OK
ReadX 13070 2084 4096 4096 NT_STATUS_OK
ReadX 13070 868 4096 4096 NT_STATUS_OK
ReadX 13070 2324 4096 4096 NT_STATUS_OK
ReadX 13070 884 4096 4096 NT_STATUS_OK
ReadX 13070 2604 1024 1024 NT_STATUS_OK
ReadX 13070 580 4096 4096 NT_STATUS_OK
ReadX 13070 596 4096 4096 NT_STATUS_OK
ReadX 13070 2752 4096 4096 NT_STATUS_OK
ReadX 13070 2842 1024 1024 NT_STATUS_OK
ReadX 13070 660 4096 4096 NT_STATUS_OK
ReadX 13070 2720 4096 4096 NT_STATUS_OK
ReadX 13070 2736 4096 4096 NT_STATUS_OK
ReadX 13070 628 4096 4096 NT_STATUS_OK
ReadX 13070 2704 4096 4096 NT_STATUS_OK
ReadX 13070 1556 4096 4096 NT_STATUS_OK
ReadX 13070 576 4096 4096 NT_STATUS_OK
ReadX 13070 3168 1536 1536 NT_STATUS_OK
ReadX 13070 832 4096 4096 NT_STATUS_OK
ReadX 13070 1088 4096 4096 NT_STATUS_OK
ReadX 13070 1344 4096 4096 NT_STATUS_OK
ReadX 13070 1600 4096 4096 NT_STATUS_OK
ReadX 13070 1856 4096 4096 NT_STATUS_OK
ReadX 13070 2112 4096 4096 NT_STATUS_OK
ReadX 13070 1892 4096 4096 NT_STATUS_OK
ReadX 13070 820 4096 4096 NT_STATUS_OK
ReadX 13070 788 4096 4096 NT_STATUS_OK
ReadX 13070 1604 4096 4096 NT_STATUS_OK
ReadX 13070 3648 4096 4096 NT_STATUS_OK
ReadX 13070 2608 4096 4096 NT_STATUS_OK
ReadX 13070 548 4096 4096 NT_STATUS_OK
ReadX 13070 740 4096 4096 NT_STATUS_OK
ReadX 13070 1344 4096 4096 NT_STATUS_OK
ReadX 13070 3392 4096 4096 NT_STATUS_OK
ReadX 13070 3904 4096 4096 NT_STATUS_OK
ReadX 13070 644 4096 4096 NT_STATUS_OK
ReadX 13070 676 4096 4096 NT_STATUS_OK
ReadX 13070 2688 4096 4096 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 900 4096 4096 NT_STATUS_OK
ReadX 13070 1908 4096 4096 NT_STATUS_OK
ReadX 13070 852 4096 4096 NT_STATUS_OK
ReadX 13070 724 4096 4096 NT_STATUS_OK
ReadX 13070 2292 4096 4096 NT_STATUS_OK
ReadX 13070 612 4096 4096 NT_STATUS_OK
ReadX 13070 388 4096 4096 NT_STATUS_OK
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 500 4096 4096 NT_STATUS_OK
ReadX 13070 356 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 576 4096 4096 NT_STATUS_OK
ReadX 13070 340 4096 4096 NT_STATUS_OK
ReadX 13070 420 4096 4096 NT_STATUS_OK
ReadX 13070 1600 4096 4096 NT_STATUS_OK
ReadX 13070 404 4096 4096 NT_STATUS_OK
ReadX 13070 1428 4096 4096 NT_STATUS_OK
ReadX 13070 2656 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 452 4096 4096 NT_STATUS_OK
ReadX 13070 692 4096 4096 NT_STATUS_OK
ReadX 13070 564 4096 4096 NT_STATUS_OK
ReadX 13070 372 4096 4096 NT_STATUS_OK
ReadX 13070 468 4096 4096 NT_STATUS_OK
ReadX 13070 484 4096 4096 NT_STATUS_OK
ReadX 13070 1088 4096 4096 NT_STATUS_OK
ReadX 13070 1924 4096 4096 NT_STATUS_OK
ReadX 13070 2768 4096 4096 NT_STATUS_OK
ReadX 13070 832 4096 4096 NT_STATUS_OK
ReadX 13070 836 4096 4096 NT_STATUS_OK
ReadX 13070 1856 4096 4096 NT_STATUS_OK
ReadX 13070 2640 4096 4096 NT_STATUS_OK
ReadX 13070 436 4096 4096 NT_STATUS_OK
ReadX 13070 1828 4096 4096 NT_STATUS_OK
ReadX 13070 804 4096 4096 NT_STATUS_OK
ReadX 13070 1860 4096 4096 NT_STATUS_OK
ReadX 13070 1812 4096 4096 NT_STATUS_OK
ReadX 13070 756 4096 4096 NT_STATUS_OK
ReadX 13070 1636 4096 4096 NT_STATUS_OK
ReadX 13070 772 4096 4096 NT_STATUS_OK
ReadX 13070 2036 4096 4096 NT_STATUS_OK
ReadX 13070 1220 4096 4096 NT_STATUS_OK
ReadX 13070 1652 4096 4096 NT_STATUS_OK
ReadX 13070 2588 4096 4096 NT_STATUS_OK
ReadX 13070 916 4096 4096 NT_STATUS_OK
ReadX 13070 260 4096 4096 NT_STATUS_OK
ReadX 13070 932 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 308 4096 4096 NT_STATUS_OK
ReadX 13070 292 4096 4096 NT_STATUS_OK
ReadX 13070 1140 4096 4096 NT_STATUS_OK
ReadX 13070 276 4096 4096 NT_STATUS_OK
ReadX 13070 2020 4096 4096 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
ReadX 13070 516 4096 4096 NT_STATUS_OK
ReadX 13070 1844 4096 4096 NT_STATUS_OK
ReadX 13070 1124 4096 4096 NT_STATUS_OK
ReadX 13070 3136 4096 4096 NT_STATUS_OK
ReadX 13070 324 4096 4096 NT_STATUS_OK
ReadX 13070 1156 4096 4096 NT_STATUS_OK
ReadX 13070 1172 4096 4096 NT_STATUS_OK
ReadX 13070 2112 4096 4096 NT_STATUS_OK
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 964 4096 4096 NT_STATUS_OK
ReadX 13070 980 4096 4096 NT_STATUS_OK
ReadX 13070 1012 4096 4096 NT_STATUS_OK
ReadX 13070 532 4096 4096 NT_STATUS_OK
ReadX 13070 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13070 1620 4096 4096 NT_STATUS_OK
ReadX 13070 1604 4096 4096 NT_STATUS_OK
ReadX 13070 2116 4096 4096 NT_STATUS_OK
ReadX 13070 2132 4096 4096 NT_STATUS_OK
ReadX 13070 2148 4096 4096 NT_STATUS_OK
ReadX 13070 2276 4096 4096 NT_STATUS_OK
ReadX 13070 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13095 NT_STATUS_OK
QUERY_FILE_INFORMATION 13050 1004 NT_STATUS_OK
Close 13050 NT_STATUS_OK
WriteX 13095 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1004 NT_STATUS_OK
Close 13052 NT_STATUS_OK
WriteX 13095 0 65536 65536 NT_STATUS_OK
WriteX 13095 65536 64850 64850 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
ReadX 13070 2068 4096 4096 NT_STATUS_OK
ReadX 13070 1588 4096 4096 NT_STATUS_OK
ReadX 13070 1572 4096 4096 NT_STATUS_OK
WriteX 13097 0 18630 18630 NT_STATUS_OK
Flush 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13070 612 4096 4096 NT_STATUS_OK
ReadX 13070 564 4096 4096 NT_STATUS_OK
ReadX 13070 1876 4096 4096 NT_STATUS_OK
ReadX 13070 628 4096 4096 NT_STATUS_OK
ReadX 13070 740 4096 4096 NT_STATUS_OK
ReadX 13070 724 4096 4096 NT_STATUS_OK
ReadX 13070 644 4096 4096 NT_STATUS_OK
ReadX 13070 2324 4096 4096 NT_STATUS_OK
ReadX 13070 660 4096 4096 NT_STATUS_OK
ReadX 13070 852 4096 4096 NT_STATUS_OK
ReadX 13070 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 580 4096 4096 NT_STATUS_OK
ReadX 13070 3136 512 512 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
Close 13070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 61440 4096 4096 NT_STATUS_OK
ReadX 13102 126976 4096 4096 NT_STATUS_OK
WriteX 13102 0 65536 65536 NT_STATUS_OK
WriteX 13102 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 61440 4096 4096 NT_STATUS_OK
ReadX 13103 126976 4096 4096 NT_STATUS_OK
ReadX 13103 192512 4096 4096 NT_STATUS_OK
ReadX 13103 258048 4096 4096 NT_STATUS_OK
WriteX 13103 0 65536 65536 NT_STATUS_OK
WriteX 13103 65536 65536 65536 NT_STATUS_OK
WriteX 13103 131072 65536 65536 NT_STATUS_OK
WriteX 13103 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 61440 4096 4096 NT_STATUS_OK
ReadX 13104 126976 4096 4096 NT_STATUS_OK
ReadX 13104 192512 4096 4096 NT_STATUS_OK
ReadX 13104 258048 4096 4096 NT_STATUS_OK
ReadX 13104 323584 4096 4096 NT_STATUS_OK
ReadX 13104 389120 4096 4096 NT_STATUS_OK
ReadX 13104 454656 4096 4096 NT_STATUS_OK
ReadX 13104 520192 4096 4096 NT_STATUS_OK
WriteX 13104 0 65536 65536 NT_STATUS_OK
WriteX 13104 65536 65536 65536 NT_STATUS_OK
WriteX 13104 131072 65536 65536 NT_STATUS_OK
WriteX 13104 196608 65536 65536 NT_STATUS_OK
WriteX 13104 262144 65536 65536 NT_STATUS_OK
WriteX 13104 327680 65536 65536 NT_STATUS_OK
WriteX 13104 393216 65536 65536 NT_STATUS_OK
WriteX 13104 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13107 NT_STATUS_OK
WriteX 13107 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13105 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13101 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13103 NT_STATUS_OK
Close 13104 NT_STATUS_OK
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13109 NT_STATUS_OK
Close 13109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13112 NT_STATUS_OK
WriteX 13112 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13112 258 NT_STATUS_OK
WriteX 13112 0 62591 62591 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13114 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13117 NT_STATUS_OK
WriteX 13117 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13117 258 NT_STATUS_OK
WriteX 13117 0 10845 10845 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13122 NT_STATUS_OK
WriteX 13122 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13122 258 NT_STATUS_OK
WriteX 13122 0 30118 30118 NT_STATUS_OK
Close 13122 NT_STATUS_OK
WriteX 13105 0 4096 4096 NT_STATUS_OK
WriteX 13107 0 64 64 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 61440 61440 NT_STATUS_OK
ReadX 13124 61440 4096 4096 NT_STATUS_OK
ReadX 13124 65536 61440 61440 NT_STATUS_OK
ReadX 13124 126976 4096 4096 NT_STATUS_OK
ReadX 13124 131072 61440 61440 NT_STATUS_OK
ReadX 13124 192512 4096 4096 NT_STATUS_OK
ReadX 13124 196608 61440 61440 NT_STATUS_OK
ReadX 13124 258048 4096 4096 NT_STATUS_OK
ReadX 13124 262144 61440 61440 NT_STATUS_OK
ReadX 13124 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 61440 61440 NT_STATUS_OK
ReadX 13125 61440 4096 4096 NT_STATUS_OK
ReadX 13125 65536 61440 61440 NT_STATUS_OK
ReadX 13125 126976 4096 4096 NT_STATUS_OK
ReadX 13125 131072 61440 61440 NT_STATUS_OK
ReadX 13125 192512 4096 4096 NT_STATUS_OK
ReadX 13125 196608 61440 61440 NT_STATUS_OK
ReadX 13125 258048 4096 4096 NT_STATUS_OK
ReadX 13125 262144 61440 61440 NT_STATUS_OK
ReadX 13125 323584 4096 4096 NT_STATUS_OK
ReadX 13125 327680 61440 61440 NT_STATUS_OK
ReadX 13125 389120 4096 4096 NT_STATUS_OK
ReadX 13125 393216 61440 61440 NT_STATUS_OK
ReadX 13125 454656 4096 4096 NT_STATUS_OK
ReadX 13125 458752 61440 61440 NT_STATUS_OK
ReadX 13125 520192 4096 4096 NT_STATUS_OK
ReadX 13125 524288 61440 61440 NT_STATUS_OK
ReadX 13125 585728 4096 4096 NT_STATUS_OK
ReadX 13125 589824 61440 61440 NT_STATUS_OK
ReadX 13125 651264 4096 4096 NT_STATUS_OK
ReadX 13125 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 61440 61440 NT_STATUS_OK
ReadX 13126 61440 4096 4096 NT_STATUS_OK
ReadX 13126 65536 61440 61440 NT_STATUS_OK
ReadX 13126 126976 4096 4096 NT_STATUS_OK
ReadX 13126 131072 61440 61440 NT_STATUS_OK
ReadX 13126 192512 4096 4096 NT_STATUS_OK
ReadX 13126 196608 61440 61440 NT_STATUS_OK
ReadX 13126 258048 4096 4096 NT_STATUS_OK
ReadX 13126 262144 61440 61440 NT_STATUS_OK
ReadX 13126 323584 4096 4096 NT_STATUS_OK
ReadX 13126 327680 61440 61440 NT_STATUS_OK
ReadX 13126 389120 4096 4096 NT_STATUS_OK
ReadX 13126 393216 61440 61440 NT_STATUS_OK
ReadX 13126 454656 4096 4096 NT_STATUS_OK
ReadX 13126 458752 61440 61440 NT_STATUS_OK
ReadX 13126 520192 4096 4096 NT_STATUS_OK
ReadX 13126 524288 61440 61440 NT_STATUS_OK
ReadX 13126 585728 4096 4096 NT_STATUS_OK
ReadX 13126 589824 61440 61440 NT_STATUS_OK
ReadX 13126 651264 4096 4096 NT_STATUS_OK
ReadX 13126 655360 61440 61440 NT_STATUS_OK
ReadX 13126 716800 4096 4096 NT_STATUS_OK
ReadX 13126 720896 61440 61440 NT_STATUS_OK
ReadX 13126 782336 4096 4096 NT_STATUS_OK
ReadX 13126 786432 61440 61440 NT_STATUS_OK
ReadX 13126 847872 4096 4096 NT_STATUS_OK
ReadX 13126 851968 61440 61440 NT_STATUS_OK
ReadX 13126 913408 4096 4096 NT_STATUS_OK
ReadX 13126 917504 61440 61440 NT_STATUS_OK
ReadX 13126 978944 4096 4096 NT_STATUS_OK
ReadX 13126 983040 61440 61440 NT_STATUS_OK
ReadX 13126 1044480 4096 4096 NT_STATUS_OK
ReadX 13126 1048576 61440 61440 NT_STATUS_OK
ReadX 13126 1110016 4096 4096 NT_STATUS_OK
ReadX 13126 1114112 61440 61440 NT_STATUS_OK
ReadX 13126 1175552 4096 4096 NT_STATUS_OK
ReadX 13126 1179648 61440 61440 NT_STATUS_OK
ReadX 13126 1241088 4096 4096 NT_STATUS_OK
ReadX 13126 1245184 61440 61440 NT_STATUS_OK
ReadX 13126 1306624 4096 4096 NT_STATUS_OK
ReadX 13126 1310720 61440 61440 NT_STATUS_OK
ReadX 13126 1372160 4096 4096 NT_STATUS_OK
ReadX 13126 1376256 61440 61440 NT_STATUS_OK
ReadX 13126 1437696 4096 4096 NT_STATUS_OK
ReadX 13126 1441792 61440 61440 NT_STATUS_OK
ReadX 13126 1503232 4096 4096 NT_STATUS_OK
ReadX 13126 1507328 61440 61440 NT_STATUS_OK
ReadX 13126 1568768 4096 4096 NT_STATUS_OK
ReadX 13126 1572864 61440 61440 NT_STATUS_OK
ReadX 13126 1634304 4096 4096 NT_STATUS_OK
ReadX 13126 1638400 61440 61440 NT_STATUS_OK
ReadX 13126 1699840 4096 4096 NT_STATUS_OK
ReadX 13126 1703936 61440 61440 NT_STATUS_OK
ReadX 13126 1765376 4096 4096 NT_STATUS_OK
ReadX 13126 1769472 61440 61440 NT_STATUS_OK
ReadX 13126 1830912 4096 4096 NT_STATUS_OK
ReadX 13126 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
ReadX 13131 4096 4096 4096 NT_STATUS_OK
ReadX 13131 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13129 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Close 13131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13135 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13136 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 0 8192 8192 NT_STATUS_OK
ReadX 13139 8192 8192 8192 NT_STATUS_OK
ReadX 13139 16384 8192 8192 NT_STATUS_OK
ReadX 13139 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13144 NT_STATUS_OK
WriteX 13144 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13144 258 NT_STATUS_OK
WriteX 13144 0 10438 10438 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13147 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13150 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
ReadX 13153 4096 4096 4096 NT_STATUS_OK
ReadX 13153 8192 4096 4096 NT_STATUS_OK
ReadX 13153 12288 8192 8192 NT_STATUS_OK
ReadX 13153 20480 8192 8192 NT_STATUS_OK
ReadX 13153 28672 8192 8192 NT_STATUS_OK
ReadX 13153 36864 8192 8192 NT_STATUS_OK
ReadX 13153 45056 8192 8192 NT_STATUS_OK
ReadX 13153 53248 8192 8192 NT_STATUS_OK
ReadX 13153 61440 8192 8192 NT_STATUS_OK
ReadX 13153 69632 8192 8192 NT_STATUS_OK
ReadX 13153 77824 8192 8192 NT_STATUS_OK
ReadX 13153 86016 8192 8192 NT_STATUS_OK
ReadX 13153 94208 8192 8192 NT_STATUS_OK
ReadX 13153 102400 8192 8192 NT_STATUS_OK
ReadX 13153 110592 8192 8192 NT_STATUS_OK
ReadX 13153 118784 8192 8192 NT_STATUS_OK
ReadX 13153 126976 8192 8192 NT_STATUS_OK
ReadX 13153 135168 8192 8192 NT_STATUS_OK
ReadX 13153 143360 8192 8192 NT_STATUS_OK
ReadX 13153 151552 8192 8192 NT_STATUS_OK
ReadX 13153 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13158 NT_STATUS_OK
WriteX 13158 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 258 NT_STATUS_OK
WriteX 13158 0 28489 28489 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13161 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13162 NT_STATUS_OK
Close 13162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 8192 8192 NT_STATUS_OK
ReadX 13165 8192 8192 8192 NT_STATUS_OK
ReadX 13165 16384 8192 8192 NT_STATUS_OK
ReadX 13165 24576 8192 8192 NT_STATUS_OK
ReadX 13165 32768 16384 16384 NT_STATUS_OK
ReadX 13165 49152 8192 8192 NT_STATUS_OK
ReadX 13165 57344 8192 8192 NT_STATUS_OK
ReadX 13165 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13170 NT_STATUS_OK
WriteX 13170 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13170 258 NT_STATUS_OK
WriteX 13170 0 29253 29253 NT_STATUS_OK
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13171 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13174 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13177 NT_STATUS_OK
WriteX 13177 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13177 258 NT_STATUS_OK
WriteX 13177 0 30183 30183 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13178 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13180 NT_STATUS_OK
WriteX 13180 0 510 510 NT_STATUS_OK
WriteX 13180 510 512 512 NT_STATUS_OK
WriteX 13180 1022 510 510 NT_STATUS_OK
WriteX 13180 1532 510 510 NT_STATUS_OK
WriteX 13180 2042 168 168 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
WriteX 13183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13184 NT_STATUS_OK
ReadX 13184 61440 4096 4096 NT_STATUS_OK
ReadX 13184 126976 4096 4096 NT_STATUS_OK
WriteX 13184 0 65536 65536 NT_STATUS_OK
WriteX 13184 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13185 NT_STATUS_OK
ReadX 13185 61440 4096 4096 NT_STATUS_OK
ReadX 13185 126976 4096 4096 NT_STATUS_OK
ReadX 13185 192512 4096 4096 NT_STATUS_OK
ReadX 13185 258048 4096 4096 NT_STATUS_OK
WriteX 13185 0 65536 65536 NT_STATUS_OK
WriteX 13185 65536 65536 65536 NT_STATUS_OK
WriteX 13185 131072 65536 65536 NT_STATUS_OK
WriteX 13185 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 61440 4096 4096 NT_STATUS_OK
ReadX 13186 126976 4096 4096 NT_STATUS_OK
ReadX 13186 192512 4096 4096 NT_STATUS_OK
ReadX 13186 258048 4096 4096 NT_STATUS_OK
ReadX 13186 323584 4096 4096 NT_STATUS_OK
ReadX 13186 389120 4096 4096 NT_STATUS_OK
ReadX 13186 454656 4096 4096 NT_STATUS_OK
ReadX 13186 520192 4096 4096 NT_STATUS_OK
WriteX 13186 0 65536 65536 NT_STATUS_OK
WriteX 13186 65536 65536 65536 NT_STATUS_OK
WriteX 13186 131072 65536 65536 NT_STATUS_OK
WriteX 13186 196608 65536 65536 NT_STATUS_OK
WriteX 13186 262144 65536 65536 NT_STATUS_OK
WriteX 13186 327680 65536 65536 NT_STATUS_OK
WriteX 13186 393216 65536 65536 NT_STATUS_OK
WriteX 13186 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Close 13185 NT_STATUS_OK
Close 13186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13198 NT_STATUS_OK
Close 13198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13202 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13216 NT_STATUS_OK
Close 13216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13226 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13231 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13246 NT_STATUS_OK
Close 13246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13255 NT_STATUS_OK
WriteX 13255 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13255 0 65536 65536 NT_STATUS_OK
WriteX 13255 65536 65536 65536 NT_STATUS_OK
WriteX 13255 131072 65536 65536 NT_STATUS_OK
WriteX 13255 196608 65536 65536 NT_STATUS_OK
WriteX 13255 262144 26634 26634 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13261 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
ReadX 13263 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13264 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13268 NT_STATUS_OK
Close 13268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13273 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13280 NT_STATUS_OK
Close 13280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13282 NT_STATUS_OK
Close 13282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13291 NT_STATUS_OK
Close 13291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13296 NT_STATUS_OK
Close 13296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13311 NT_STATUS_OK
Close 13311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13328 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13330 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
Close 13342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
Close 13356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
Close 13357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13387 0 4096 4096 NT_STATUS_OK
Close 13387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
ReadX 13389 4096 4096 4096 NT_STATUS_OK
ReadX 13389 8192 4096 4096 NT_STATUS_OK
ReadX 13389 12288 4096 4096 NT_STATUS_OK
ReadX 13389 16384 4096 4096 NT_STATUS_OK
ReadX 13389 20480 4096 4096 NT_STATUS_OK
ReadX 13389 24576 4096 4096 NT_STATUS_OK
ReadX 13389 28672 4096 4096 NT_STATUS_OK
ReadX 13389 32768 4096 4096 NT_STATUS_OK
ReadX 13389 36864 4096 4096 NT_STATUS_OK
ReadX 13389 40960 4096 4096 NT_STATUS_OK
ReadX 13389 45056 4096 4096 NT_STATUS_OK
ReadX 13389 49152 4096 4096 NT_STATUS_OK
ReadX 13389 53248 4096 4096 NT_STATUS_OK
ReadX 13389 57344 4096 4096 NT_STATUS_OK
ReadX 13389 61440 4096 4096 NT_STATUS_OK
ReadX 13389 65536 4096 4096 NT_STATUS_OK
ReadX 13389 69632 4096 4096 NT_STATUS_OK
ReadX 13389 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 0 4096 4096 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13390 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13395 NT_STATUS_OK
WriteX 13395 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 258 NT_STATUS_OK
WriteX 13395 0 65536 65536 NT_STATUS_OK
WriteX 13395 65536 19979 19979 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
QUERY_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
SET_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 4096 4096 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13401 1004 NT_STATUS_OK
WriteX 13401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13402 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13398 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13404 NT_STATUS_OK
Close 13404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13407 NT_STATUS_OK
WriteX 13407 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 258 NT_STATUS_OK
WriteX 13407 0 65536 65536 NT_STATUS_OK
WriteX 13407 65536 17654 17654 NT_STATUS_OK
Close 13407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
SET_FILE_INFORMATION 13408 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13409 NT_STATUS_OK
SET_FILE_INFORMATION 13409 1004 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13411 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
ReadX 13413 4096 4096 4096 NT_STATUS_OK
ReadX 13413 8192 4096 4096 NT_STATUS_OK
ReadX 13413 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13413 16384 4096 4096 NT_STATUS_OK
ReadX 13413 20480 4096 4096 NT_STATUS_OK
ReadX 13413 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13422 NT_STATUS_OK
WriteX 13422 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13422 258 NT_STATUS_OK
WriteX 13422 0 65536 65536 NT_STATUS_OK
WriteX 13422 65536 19490 19490 NT_STATUS_OK
Close 13422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
QUERY_FILE_INFORMATION 13423 1004 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
SET_FILE_INFORMATION 13423 1004 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13424 NT_STATUS_OK
SET_FILE_INFORMATION 13424 1004 NT_STATUS_OK
Close 13424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13428 0 4096 4096 NT_STATUS_OK
Close 13428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
ReadX 13430 4096 4096 4096 NT_STATUS_OK
ReadX 13430 8192 4096 4096 NT_STATUS_OK
ReadX 13430 12288 4096 4096 NT_STATUS_OK
ReadX 13430 16384 4096 4096 NT_STATUS_OK
ReadX 13430 20480 4096 4096 NT_STATUS_OK
ReadX 13430 24576 4096 4096 NT_STATUS_OK
ReadX 13430 28672 4096 4096 NT_STATUS_OK
ReadX 13430 32768 4096 4096 NT_STATUS_OK
ReadX 13430 36864 4096 4096 NT_STATUS_OK
ReadX 13430 40960 4096 4096 NT_STATUS_OK
ReadX 13430 45056 4096 4096 NT_STATUS_OK
ReadX 13430 49152 4096 4096 NT_STATUS_OK
ReadX 13430 53248 4096 4096 NT_STATUS_OK
ReadX 13430 57344 4096 4096 NT_STATUS_OK
ReadX 13430 61440 4096 4096 NT_STATUS_OK
ReadX 13430 65536 4096 4096 NT_STATUS_OK
ReadX 13430 69632 4096 4096 NT_STATUS_OK
ReadX 13430 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13430 1004 NT_STATUS_OK
WriteX 13430 0 4096 4096 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13431 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13436 NT_STATUS_OK
WriteX 13436 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13436 258 NT_STATUS_OK
WriteX 13436 0 65536 65536 NT_STATUS_OK
WriteX 13436 65536 8866 8866 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Flush 13437 NT_STATUS_OK
SET_FILE_INFORMATION 13437 1004 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Flush 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13441 1004 NT_STATUS_OK
WriteX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13447 NT_STATUS_OK
WriteX 13447 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13447 258 NT_STATUS_OK
WriteX 13447 0 65536 65536 NT_STATUS_OK
WriteX 13447 65536 9298 9298 NT_STATUS_OK
Close 13447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Flush 13448 NT_STATUS_OK
SET_FILE_INFORMATION 13448 1004 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Flush 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13449 NT_STATUS_OK
SET_FILE_INFORMATION 13449 1004 NT_STATUS_OK
Close 13449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13454 0 4096 4096 NT_STATUS_OK
Close 13454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13455 4096 4096 4096 NT_STATUS_OK
ReadX 13455 8192 4096 4096 NT_STATUS_OK
ReadX 13455 12288 4096 4096 NT_STATUS_OK
ReadX 13455 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
Close 13456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
Close 13457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13464 NT_STATUS_OK
WriteX 13464 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13464 258 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 11540 11540 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 0 4096 4096 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Flush 13465 NT_STATUS_OK
SET_FILE_INFORMATION 13465 1004 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Flush 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13466 NT_STATUS_OK
SET_FILE_INFORMATION 13466 1004 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 61440 4096 4096 NT_STATUS_OK
ReadX 13470 126976 4096 4096 NT_STATUS_OK
WriteX 13470 0 65536 65536 NT_STATUS_OK
WriteX 13470 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 61440 4096 4096 NT_STATUS_OK
ReadX 13471 126976 4096 4096 NT_STATUS_OK
ReadX 13471 192512 4096 4096 NT_STATUS_OK
ReadX 13471 258048 4096 4096 NT_STATUS_OK
WriteX 13471 0 65536 65536 NT_STATUS_OK
WriteX 13471 65536 65536 65536 NT_STATUS_OK
WriteX 13471 131072 65536 65536 NT_STATUS_OK
WriteX 13471 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 61440 4096 4096 NT_STATUS_OK
ReadX 13472 126976 4096 4096 NT_STATUS_OK
ReadX 13472 192512 4096 4096 NT_STATUS_OK
ReadX 13472 258048 4096 4096 NT_STATUS_OK
ReadX 13472 323584 4096 4096 NT_STATUS_OK
ReadX 13472 389120 4096 4096 NT_STATUS_OK
ReadX 13472 454656 4096 4096 NT_STATUS_OK
ReadX 13472 520192 4096 4096 NT_STATUS_OK
WriteX 13472 0 65536 65536 NT_STATUS_OK
WriteX 13472 65536 65536 65536 NT_STATUS_OK
WriteX 13472 131072 65536 65536 NT_STATUS_OK
WriteX 13472 196608 65536 65536 NT_STATUS_OK
WriteX 13472 262144 65536 65536 NT_STATUS_OK
WriteX 13472 327680 65536 65536 NT_STATUS_OK
WriteX 13472 393216 65536 65536 NT_STATUS_OK
WriteX 13472 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
ReadX 13473 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13474 NT_STATUS_OK
WriteX 13474 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
WriteX 13474 0 53 53 NT_STATUS_OK
Close 13474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13473 8192 4096 4096 NT_STATUS_OK
ReadX 13473 12288 4096 4096 NT_STATUS_OK
WriteX 13477 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13477 258 NT_STATUS_OK
ReadX 13473 16384 4096 4096 NT_STATUS_OK
ReadX 13473 20480 4096 4096 NT_STATUS_OK
WriteX 13477 0 15360 15360 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13478 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13478 1004 NT_STATUS_OK
WriteX 13478 0 4096 4096 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13481 4096 4096 4096 NT_STATUS_OK
ReadX 13481 8192 4096 4096 NT_STATUS_OK
ReadX 13481 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
ReadX 13484 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
ReadX 13485 4096 4096 4096 NT_STATUS_OK
ReadX 13485 8192 4096 4096 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13486 NT_STATUS_OK
WriteX 13486 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13486 258 NT_STATUS_OK
WriteX 13486 0 15360 15360 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13491 NT_STATUS_OK
SET_FILE_INFORMATION 13491 1004 NT_STATUS_OK
Close 13491 NT_STATUS_OK
WriteX 13487 0 4096 4096 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
ReadX 13494 4096 4096 4096 NT_STATUS_OK
ReadX 13494 8192 4096 4096 NT_STATUS_OK
ReadX 13494 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13496 NT_STATUS_OK
WriteX 13496 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13496 258 NT_STATUS_OK
WriteX 13496 0 53 53 NT_STATUS_OK
Close 13496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13495 4096 4096 4096 NT_STATUS_OK
ReadX 13495 8192 4096 4096 NT_STATUS_OK
ReadX 13495 12288 4096 4096 NT_STATUS_OK
WriteX 13499 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13499 258 NT_STATUS_OK
WriteX 13499 0 12006 12006 NT_STATUS_OK
Close 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
WriteX 13500 0 4096 4096 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13503 4096 4096 4096 NT_STATUS_OK
ReadX 13503 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13506 NT_STATUS_OK
WriteX 13506 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 11991 11991 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13511 NT_STATUS_OK
SET_FILE_INFORMATION 13511 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13514 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
ReadX 13514 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
WriteX 13514 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13514 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
Close 13490 NT_STATUS_OK
WriteX 13494 0 19054 19054 NT_STATUS_OK
WriteX 13514 0 12288 12288 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13517 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 61440 61440 NT_STATUS_OK
ReadX 13521 61440 4096 4096 NT_STATUS_OK
ReadX 13521 65536 61440 61440 NT_STATUS_OK
ReadX 13521 126976 4096 4096 NT_STATUS_OK
ReadX 13521 131072 61440 61440 NT_STATUS_OK
ReadX 13521 192512 4096 4096 NT_STATUS_OK
ReadX 13521 196608 61440 61440 NT_STATUS_OK
ReadX 13521 258048 4096 4096 NT_STATUS_OK
ReadX 13521 262144 61440 61440 NT_STATUS_OK
ReadX 13521 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 61440 61440 NT_STATUS_OK
ReadX 13522 61440 4096 4096 NT_STATUS_OK
ReadX 13522 65536 61440 61440 NT_STATUS_OK
ReadX 13522 126976 4096 4096 NT_STATUS_OK
ReadX 13522 131072 61440 61440 NT_STATUS_OK
ReadX 13522 192512 4096 4096 NT_STATUS_OK
ReadX 13522 196608 61440 61440 NT_STATUS_OK
ReadX 13522 258048 4096 4096 NT_STATUS_OK
ReadX 13522 262144 61440 61440 NT_STATUS_OK
ReadX 13522 323584 4096 4096 NT_STATUS_OK
ReadX 13522 327680 61440 61440 NT_STATUS_OK
ReadX 13522 389120 4096 4096 NT_STATUS_OK
ReadX 13522 393216 61440 61440 NT_STATUS_OK
ReadX 13522 454656 4096 4096 NT_STATUS_OK
ReadX 13522 458752 61440 61440 NT_STATUS_OK
ReadX 13522 520192 4096 4096 NT_STATUS_OK
ReadX 13522 524288 61440 61440 NT_STATUS_OK
ReadX 13522 585728 4096 4096 NT_STATUS_OK
ReadX 13522 589824 61440 61440 NT_STATUS_OK
ReadX 13522 651264 4096 4096 NT_STATUS_OK
ReadX 13522 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 61440 61440 NT_STATUS_OK
ReadX 13523 61440 4096 4096 NT_STATUS_OK
ReadX 13523 65536 61440 61440 NT_STATUS_OK
ReadX 13523 126976 4096 4096 NT_STATUS_OK
ReadX 13523 131072 61440 61440 NT_STATUS_OK
ReadX 13523 192512 4096 4096 NT_STATUS_OK
ReadX 13523 196608 61440 61440 NT_STATUS_OK
ReadX 13523 258048 4096 4096 NT_STATUS_OK
ReadX 13523 262144 61440 61440 NT_STATUS_OK
ReadX 13523 323584 4096 4096 NT_STATUS_OK
ReadX 13523 327680 61440 61440 NT_STATUS_OK
ReadX 13523 389120 4096 4096 NT_STATUS_OK
ReadX 13523 393216 61440 61440 NT_STATUS_OK
ReadX 13523 454656 4096 4096 NT_STATUS_OK
ReadX 13523 458752 61440 61440 NT_STATUS_OK
ReadX 13523 520192 4096 4096 NT_STATUS_OK
ReadX 13523 524288 61440 61440 NT_STATUS_OK
ReadX 13523 585728 4096 4096 NT_STATUS_OK
ReadX 13523 589824 61440 61440 NT_STATUS_OK
ReadX 13523 651264 4096 4096 NT_STATUS_OK
ReadX 13523 655360 61440 61440 NT_STATUS_OK
ReadX 13523 716800 4096 4096 NT_STATUS_OK
ReadX 13523 720896 61440 61440 NT_STATUS_OK
ReadX 13523 782336 4096 4096 NT_STATUS_OK
ReadX 13523 786432 61440 61440 NT_STATUS_OK
ReadX 13523 847872 4096 4096 NT_STATUS_OK
ReadX 13523 851968 61440 61440 NT_STATUS_OK
ReadX 13523 913408 4096 4096 NT_STATUS_OK
ReadX 13523 917504 61440 61440 NT_STATUS_OK
ReadX 13523 978944 4096 4096 NT_STATUS_OK
ReadX 13523 983040 61440 61440 NT_STATUS_OK
ReadX 13523 1044480 4096 4096 NT_STATUS_OK
ReadX 13523 1048576 61440 61440 NT_STATUS_OK
ReadX 13523 1110016 4096 4096 NT_STATUS_OK
ReadX 13523 1114112 61440 61440 NT_STATUS_OK
ReadX 13523 1175552 4096 4096 NT_STATUS_OK
ReadX 13523 1179648 61440 61440 NT_STATUS_OK
ReadX 13523 1241088 4096 4096 NT_STATUS_OK
ReadX 13523 1245184 61440 61440 NT_STATUS_OK
ReadX 13523 1306624 4096 4096 NT_STATUS_OK
ReadX 13523 1310720 61440 61440 NT_STATUS_OK
ReadX 13523 1372160 4096 4096 NT_STATUS_OK
ReadX 13523 1376256 61440 61440 NT_STATUS_OK
ReadX 13523 1437696 4096 4096 NT_STATUS_OK
ReadX 13523 1441792 61440 61440 NT_STATUS_OK
ReadX 13523 1503232 4096 4096 NT_STATUS_OK
ReadX 13523 1507328 61440 61440 NT_STATUS_OK
ReadX 13523 1568768 4096 4096 NT_STATUS_OK
ReadX 13523 1572864 61440 61440 NT_STATUS_OK
ReadX 13523 1634304 4096 4096 NT_STATUS_OK
ReadX 13523 1638400 61440 61440 NT_STATUS_OK
ReadX 13523 1699840 4096 4096 NT_STATUS_OK
ReadX 13523 1703936 61440 61440 NT_STATUS_OK
ReadX 13523 1765376 4096 4096 NT_STATUS_OK
ReadX 13523 1769472 61440 61440 NT_STATUS_OK
ReadX 13523 1830912 4096 4096 NT_STATUS_OK
ReadX 13523 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13532 NT_STATUS_OK
WriteX 13532 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13532 258 NT_STATUS_OK
WriteX 13532 0 491 491 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13536 NT_STATUS_OK
WriteX 13536 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 258 NT_STATUS_OK
WriteX 13536 0 543 543 NT_STATUS_OK
Close 13536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13550 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 1004 NT_STATUS_OK
WriteX 13550 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 258 NT_STATUS_OK
WriteX 13550 0 2048 2048 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13551 0 4096 4096 NT_STATUS_OK
Flush 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13556 NT_STATUS_OK
WriteX 13556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 258 NT_STATUS_OK
WriteX 13556 0 2048 2048 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13562 NT_STATUS_OK
WriteX 13562 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13562 258 NT_STATUS_OK
WriteX 13562 0 2048 2048 NT_STATUS_OK
Close 13562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 2048 2048 NT_STATUS_OK
ReadX 13541 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13557 0 4096 4096 NT_STATUS_OK
WriteX 13541 0 8192 8192 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13587 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 1004 NT_STATUS_OK
WriteX 13587 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 258 NT_STATUS_OK
WriteX 13587 0 2048 2048 NT_STATUS_OK
Close 13587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13595 NT_STATUS_OK
QUERY_FILE_INFORMATION 13595 1004 NT_STATUS_OK
WriteX 13595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13595 258 NT_STATUS_OK
WriteX 13595 0 2048 2048 NT_STATUS_OK
Close 13595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13588 0 4096 4096 NT_STATUS_OK
Flush 13588 NT_STATUS_OK
WriteX 13596 0 4096 4096 NT_STATUS_OK
Flush 13596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13588 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13596 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13590 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13598 NT_STATUS_OK
WriteX 13598 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13598 258 NT_STATUS_OK
WriteX 13598 0 4096 4096 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13601 NT_STATUS_OK
WriteX 13601 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 258 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13602 0 4096 4096 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13605 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13609 NT_STATUS_OK
WriteX 13609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 2048 2048 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13612 NT_STATUS_OK
ReadX 13612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13624 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Close 13611 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13626 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13635 NT_STATUS_OK
ReadX 13635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13636 NT_STATUS_OK
ReadX 13636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13637 NT_STATUS_OK
ReadX 13637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13646 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1004 NT_STATUS_OK
WriteX 13646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 2048 2048 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13649 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13658 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 1004 NT_STATUS_OK
WriteX 13658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 258 NT_STATUS_OK
WriteX 13658 0 2048 2048 NT_STATUS_OK
Close 13658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13661 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13666 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 1004 NT_STATUS_OK
WriteX 13666 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
WriteX 13666 0 2048 2048 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
Flush 13647 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
Flush 13659 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13649 4096 16384 16384 NT_STATUS_OK
ReadX 13629 4096 16384 16384 NT_STATUS_OK
ReadX 13661 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13669 NT_STATUS_OK
ReadX 13669 0 2048 2048 NT_STATUS_OK
WriteX 13669 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13670 NT_STATUS_OK
QUERY_FILE_INFORMATION 13670 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Close 13635 NT_STATUS_OK
Close 13638 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13636 NT_STATUS_OK
Close 13637 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13672 NT_STATUS_OK
QUERY_FILE_INFORMATION 13672 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13674 NT_STATUS_OK
QUERY_FILE_INFORMATION 13674 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13677 4096 16384 16384 NT_STATUS_OK
WriteX 13677 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13689 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13690 NT_STATUS_OK
ReadX 13690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13692 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 8192 8192 NT_STATUS_OK
ReadX 13683 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 0 4096 4096 NT_STATUS_OK
ReadX 13697 4096 4096 4096 NT_STATUS_OK
ReadX 13697 8192 4096 4096 NT_STATUS_OK
WriteX 13683 0 4096 4096 NT_STATUS_OK
WriteX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
ReadX 13698 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13677 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13703 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 1004 NT_STATUS_OK
WriteX 13703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 258 NT_STATUS_OK
WriteX 13703 0 2048 2048 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
ReadX 13706 4096 4096 4096 NT_STATUS_OK
WriteX 13706 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13708 NT_STATUS_OK
ReadX 13708 0 4096 4096 NT_STATUS_OK
ReadX 13708 4096 4096 4096 NT_STATUS_OK
WriteX 13708 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13709 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13689 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Close 13690 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13708 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13711 0 4096 4096 NT_STATUS_OK
ReadX 13711 4096 4096 4096 NT_STATUS_OK
ReadX 13711 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13715 NT_STATUS_OK
ReadX 13715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13722 NT_STATUS_OK
ReadX 13722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
ReadX 13712 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13729 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 1004 NT_STATUS_OK
WriteX 13729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 258 NT_STATUS_OK
WriteX 13729 0 2048 2048 NT_STATUS_OK
Close 13729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13735 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 1004 NT_STATUS_OK
WriteX 13735 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 258 NT_STATUS_OK
WriteX 13735 0 2048 2048 NT_STATUS_OK
Close 13735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13736 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13719 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13737 NT_STATUS_OK
QUERY_FILE_INFORMATION 13737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13718 NT_STATUS_OK
Close 13724 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Close 13716 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13714 NT_STATUS_OK
Close 13715 NT_STATUS_OK
Close 13719 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13722 NT_STATUS_OK
Close 13711 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13739 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 61440 4096 4096 NT_STATUS_OK
ReadX 13741 126976 4096 4096 NT_STATUS_OK
WriteX 13741 0 65536 65536 NT_STATUS_OK
WriteX 13741 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 61440 4096 4096 NT_STATUS_OK
ReadX 13742 126976 4096 4096 NT_STATUS_OK
ReadX 13742 192512 4096 4096 NT_STATUS_OK
ReadX 13742 258048 4096 4096 NT_STATUS_OK
WriteX 13742 0 65536 65536 NT_STATUS_OK
WriteX 13742 65536 65536 65536 NT_STATUS_OK
WriteX 13742 131072 65536 65536 NT_STATUS_OK
WriteX 13742 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 126976 4096 4096 NT_STATUS_OK
ReadX 13743 192512 4096 4096 NT_STATUS_OK
ReadX 13743 258048 4096 4096 NT_STATUS_OK
ReadX 13743 323584 4096 4096 NT_STATUS_OK
ReadX 13743 389120 4096 4096 NT_STATUS_OK
ReadX 13743 454656 4096 4096 NT_STATUS_OK
ReadX 13743 520192 4096 4096 NT_STATUS_OK
WriteX 13743 0 65536 65536 NT_STATUS_OK
WriteX 13743 65536 65536 65536 NT_STATUS_OK
WriteX 13743 131072 65536 65536 NT_STATUS_OK
WriteX 13743 196608 65536 65536 NT_STATUS_OK
WriteX 13743 262144 65536 65536 NT_STATUS_OK
WriteX 13743 327680 65536 65536 NT_STATUS_OK
WriteX 13743 393216 65536 65536 NT_STATUS_OK
WriteX 13743 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13744 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13744 8192 4096 4096 NT_STATUS_OK
ReadX 13744 12288 4096 4096 NT_STATUS_OK
ReadX 13744 16384 4096 4096 NT_STATUS_OK
ReadX 13744 20480 4096 4096 NT_STATUS_OK
ReadX 13744 24576 4096 4096 NT_STATUS_OK
ReadX 13744 28672 4096 4096 NT_STATUS_OK
ReadX 13744 32768 4096 4096 NT_STATUS_OK
ReadX 13744 36864 4096 4096 NT_STATUS_OK
ReadX 13744 40960 4096 4096 NT_STATUS_OK
ReadX 13744 45056 4096 4096 NT_STATUS_OK
ReadX 13744 49152 4096 4096 NT_STATUS_OK
ReadX 13744 53248 4096 4096 NT_STATUS_OK
ReadX 13744 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13744 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13745 NT_STATUS_OK
Close 13745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13747 NT_STATUS_OK
WriteX 13747 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13747 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 0 57088 57088 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
Flush 13747 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13748 NT_STATUS_OK
SET_FILE_INFORMATION 13748 1004 NT_STATUS_OK
Close 13748 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13751 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13752 NT_STATUS_OK
WriteX 13752 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 51456 51456 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Flush 13752 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13756 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 53077 53077 NT_STATUS_OK
Close 13761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13762 NT_STATUS_OK
WriteX 13762 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 65536 65536 NT_STATUS_OK
WriteX 13762 65536 1856 1856 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13771 NT_STATUS_OK
WriteX 13771 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 258 NT_STATUS_OK
WriteX 13771 0 7983 7983 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13776 NT_STATUS_OK
WriteX 13776 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 258 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 65536 65536 NT_STATUS_OK
WriteX 13776 131072 65536 65536 NT_STATUS_OK
WriteX 13776 196608 65536 65536 NT_STATUS_OK
WriteX 13776 262144 65536 65536 NT_STATUS_OK
WriteX 13776 327680 65536 65536 NT_STATUS_OK
WriteX 13776 393216 65536 65536 NT_STATUS_OK
WriteX 13776 458752 46731 46731 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13777 NT_STATUS_OK
WriteX 13777 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13766 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 65536 65536 NT_STATUS_OK
WriteX 13777 65536 22848 22848 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13781 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13782 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13782 1004 NT_STATUS_OK
ReadX 13782 8192 4096 4096 NT_STATUS_OK
ReadX 13782 12288 4096 4096 NT_STATUS_OK
ReadX 13782 16384 4096 4096 NT_STATUS_OK
ReadX 13782 20480 4096 4096 NT_STATUS_OK
ReadX 13782 24576 4096 4096 NT_STATUS_OK
ReadX 13782 28672 4096 4096 NT_STATUS_OK
ReadX 13782 32768 4096 4096 NT_STATUS_OK
ReadX 13782 36864 4096 4096 NT_STATUS_OK
ReadX 13782 40960 4096 4096 NT_STATUS_OK
ReadX 13782 45056 4096 4096 NT_STATUS_OK
ReadX 13782 49152 4096 4096 NT_STATUS_OK
ReadX 13782 53248 4096 4096 NT_STATUS_OK
ReadX 13782 57344 4096 4096 NT_STATUS_OK
ReadX 13782 61440 4096 4096 NT_STATUS_OK
ReadX 13782 65536 4096 4096 NT_STATUS_OK
ReadX 13782 69632 4096 4096 NT_STATUS_OK
ReadX 13782 73728 4096 4096 NT_STATUS_OK
ReadX 13782 77824 4096 4096 NT_STATUS_OK
ReadX 13782 81920 4096 4096 NT_STATUS_OK
ReadX 13782 86016 4096 4096 NT_STATUS_OK
ReadX 13782 90112 4096 4096 NT_STATUS_OK
ReadX 13782 94208 4096 4096 NT_STATUS_OK
ReadX 13782 98304 4096 4096 NT_STATUS_OK
ReadX 13782 102400 4096 4096 NT_STATUS_OK
ReadX 13782 106496 4096 4096 NT_STATUS_OK
ReadX 13782 110592 4096 4096 NT_STATUS_OK
ReadX 13782 114688 4096 4096 NT_STATUS_OK
ReadX 13782 118784 4096 4096 NT_STATUS_OK
ReadX 13782 122880 4096 4096 NT_STATUS_OK
ReadX 13782 126976 4096 4096 NT_STATUS_OK
ReadX 13782 131072 4096 4096 NT_STATUS_OK
ReadX 13782 135168 4096 4096 NT_STATUS_OK
ReadX 13782 139264 4096 4096 NT_STATUS_OK
ReadX 13782 143360 4096 4096 NT_STATUS_OK
ReadX 13782 147456 4096 4096 NT_STATUS_OK
ReadX 13782 151552 4096 4096 NT_STATUS_OK
ReadX 13782 155648 4096 4096 NT_STATUS_OK
ReadX 13782 159744 4096 4096 NT_STATUS_OK
ReadX 13782 163840 4096 4096 NT_STATUS_OK
ReadX 13782 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13782 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
WriteX 13785 0 42388 42388 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13787 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
ReadX 13789 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
SET_FILE_INFORMATION 13790 1004 NT_STATUS_OK
WriteX 13790 0 42652 42652 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13792 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
ReadX 13794 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13799 NT_STATUS_OK
WriteX 13799 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13799 258 NT_STATUS_OK
WriteX 13799 0 65536 65536 NT_STATUS_OK
WriteX 13799 65536 49 49 NT_STATUS_OK
Close 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 61440 61440 NT_STATUS_OK
ReadX 13800 61440 4096 4096 NT_STATUS_OK
ReadX 13800 65536 61440 61440 NT_STATUS_OK
ReadX 13800 126976 4096 4096 NT_STATUS_OK
ReadX 13800 131072 61440 61440 NT_STATUS_OK
ReadX 13800 192512 4096 4096 NT_STATUS_OK
ReadX 13800 196608 61440 61440 NT_STATUS_OK
ReadX 13800 258048 4096 4096 NT_STATUS_OK
ReadX 13800 262144 61440 61440 NT_STATUS_OK
ReadX 13800 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 61440 61440 NT_STATUS_OK
ReadX 13801 61440 4096 4096 NT_STATUS_OK
ReadX 13801 65536 61440 61440 NT_STATUS_OK
ReadX 13801 126976 4096 4096 NT_STATUS_OK
ReadX 13801 131072 61440 61440 NT_STATUS_OK
ReadX 13801 192512 4096 4096 NT_STATUS_OK
ReadX 13801 196608 61440 61440 NT_STATUS_OK
ReadX 13801 258048 4096 4096 NT_STATUS_OK
ReadX 13801 262144 61440 61440 NT_STATUS_OK
ReadX 13801 323584 4096 4096 NT_STATUS_OK
ReadX 13801 327680 61440 61440 NT_STATUS_OK
ReadX 13801 389120 4096 4096 NT_STATUS_OK
ReadX 13801 393216 61440 61440 NT_STATUS_OK
ReadX 13801 454656 4096 4096 NT_STATUS_OK
ReadX 13801 458752 61440 61440 NT_STATUS_OK
ReadX 13801 520192 4096 4096 NT_STATUS_OK
ReadX 13801 524288 61440 61440 NT_STATUS_OK
ReadX 13801 585728 4096 4096 NT_STATUS_OK
ReadX 13801 589824 61440 61440 NT_STATUS_OK
ReadX 13801 651264 4096 4096 NT_STATUS_OK
ReadX 13801 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 61440 61440 NT_STATUS_OK
ReadX 13802 61440 4096 4096 NT_STATUS_OK
ReadX 13802 65536 61440 61440 NT_STATUS_OK
ReadX 13802 126976 4096 4096 NT_STATUS_OK
ReadX 13802 131072 61440 61440 NT_STATUS_OK
ReadX 13802 192512 4096 4096 NT_STATUS_OK
ReadX 13802 196608 61440 61440 NT_STATUS_OK
ReadX 13802 258048 4096 4096 NT_STATUS_OK
ReadX 13802 262144 61440 61440 NT_STATUS_OK
ReadX 13802 323584 4096 4096 NT_STATUS_OK
ReadX 13802 327680 61440 61440 NT_STATUS_OK
ReadX 13802 389120 4096 4096 NT_STATUS_OK
ReadX 13802 393216 61440 61440 NT_STATUS_OK
ReadX 13802 454656 4096 4096 NT_STATUS_OK
ReadX 13802 458752 61440 61440 NT_STATUS_OK
ReadX 13802 520192 4096 4096 NT_STATUS_OK
ReadX 13802 524288 61440 61440 NT_STATUS_OK
ReadX 13802 585728 4096 4096 NT_STATUS_OK
ReadX 13802 589824 61440 61440 NT_STATUS_OK
ReadX 13802 651264 4096 4096 NT_STATUS_OK
ReadX 13802 655360 61440 61440 NT_STATUS_OK
ReadX 13802 716800 4096 4096 NT_STATUS_OK
ReadX 13802 720896 61440 61440 NT_STATUS_OK
ReadX 13802 782336 4096 4096 NT_STATUS_OK
ReadX 13802 786432 61440 61440 NT_STATUS_OK
ReadX 13802 847872 4096 4096 NT_STATUS_OK
ReadX 13802 851968 61440 61440 NT_STATUS_OK
ReadX 13802 913408 4096 4096 NT_STATUS_OK
ReadX 13802 917504 61440 61440 NT_STATUS_OK
ReadX 13802 978944 4096 4096 NT_STATUS_OK
ReadX 13802 983040 61440 61440 NT_STATUS_OK
ReadX 13802 1044480 4096 4096 NT_STATUS_OK
ReadX 13802 1048576 61440 61440 NT_STATUS_OK
ReadX 13802 1110016 4096 4096 NT_STATUS_OK
ReadX 13802 1114112 61440 61440 NT_STATUS_OK
ReadX 13802 1175552 4096 4096 NT_STATUS_OK
ReadX 13802 1179648 61440 61440 NT_STATUS_OK
ReadX 13802 1241088 4096 4096 NT_STATUS_OK
ReadX 13802 1245184 61440 61440 NT_STATUS_OK
ReadX 13802 1306624 4096 4096 NT_STATUS_OK
ReadX 13802 1310720 61440 61440 NT_STATUS_OK
ReadX 13802 1372160 4096 4096 NT_STATUS_OK
ReadX 13802 1376256 61440 61440 NT_STATUS_OK
ReadX 13802 1437696 4096 4096 NT_STATUS_OK
ReadX 13802 1441792 61440 61440 NT_STATUS_OK
ReadX 13802 1503232 4096 4096 NT_STATUS_OK
ReadX 13802 1507328 61440 61440 NT_STATUS_OK
ReadX 13802 1568768 4096 4096 NT_STATUS_OK
ReadX 13802 1572864 61440 61440 NT_STATUS_OK
ReadX 13802 1634304 4096 4096 NT_STATUS_OK
ReadX 13802 1638400 61440 61440 NT_STATUS_OK
ReadX 13802 1699840 4096 4096 NT_STATUS_OK
ReadX 13802 1703936 61440 61440 NT_STATUS_OK
ReadX 13802 1765376 4096 4096 NT_STATUS_OK
ReadX 13802 1769472 61440 61440 NT_STATUS_OK
ReadX 13802 1830912 4096 4096 NT_STATUS_OK
ReadX 13802 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13804 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
ReadX 13804 2156 24 24 NT_STATUS_OK
ReadX 13804 2139 276 276 NT_STATUS_OK
ReadX 13804 2136 14 14 NT_STATUS_OK
ReadX 13804 2136 7 7 NT_STATUS_OK
ReadX 13804 2138 12 12 NT_STATUS_OK
ReadX 13804 2137 8 8 NT_STATUS_OK
ReadX 13804 2135 15 15 NT_STATUS_OK
ReadX 13804 0 16 16 NT_STATUS_OK
ReadX 13804 16 2048 2048 NT_STATUS_OK
ReadX 13804 2064 2048 2048 NT_STATUS_OK
ReadX 13804 257 2048 2048 NT_STATUS_OK
ReadX 13804 385 2048 2048 NT_STATUS_OK
ReadX 13804 513 2048 2048 NT_STATUS_OK
ReadX 13804 641 2048 2048 NT_STATUS_OK
ReadX 13804 769 2048 2048 NT_STATUS_OK
ReadX 13804 897 2048 2048 NT_STATUS_OK
ReadX 13804 1025 2048 2048 NT_STATUS_OK
ReadX 13804 1153 2048 2048 NT_STATUS_OK
ReadX 13804 1281 2048 2048 NT_STATUS_OK
ReadX 13804 1409 2048 2048 NT_STATUS_OK
ReadX 13804 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13809 NT_STATUS_OK
WriteX 13809 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 258 NT_STATUS_OK
WriteX 13809 0 10575 10575 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13814 NT_STATUS_OK
LockX 13814 2147483538 1 NT_STATUS_OK
UnlockX 13814 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
ReadX 13814 0 512 512 NT_STATUS_OK
ReadX 13814 512 512 512 NT_STATUS_OK
ReadX 13814 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1004 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13815 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1005 NT_STATUS_OK
ReadX 13815 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13816 NT_STATUS_OK
LockX 13816 2147483538 1 NT_STATUS_OK
UnlockX 13816 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13816 1005 NT_STATUS_OK
ReadX 13816 0 512 512 NT_STATUS_OK
ReadX 13816 512 512 512 NT_STATUS_OK
ReadX 13816 1024 512 512 NT_STATUS_OK
ReadX 13816 288 20 20 NT_STATUS_OK
ReadX 13816 308 2084 2084 NT_STATUS_OK
ReadX 13816 388 2084 2084 NT_STATUS_OK
ReadX 13816 388 2084 2084 NT_STATUS_OK
ReadX 13803 2157 1386 1386 NT_STATUS_OK
ReadX 13816 2472 399 399 NT_STATUS_OK
ReadX 13816 3072 1536 1536 NT_STATUS_OK
ReadX 13816 544 149 149 NT_STATUS_OK
ReadX 13816 693 485 485 NT_STATUS_OK
Close 13816 NT_STATUS_OK
ReadX 13803 2157 4096 4096 NT_STATUS_OK
ReadX 13803 6253 4096 4096 NT_STATUS_OK
ReadX 13803 10349 4096 4096 NT_STATUS_OK
ReadX 13803 14445 4096 4096 NT_STATUS_OK
ReadX 13803 18541 4096 4096 NT_STATUS_OK
ReadX 13803 22637 256 256 NT_STATUS_OK
ReadX 13803 22893 4096 4096 NT_STATUS_OK
ReadX 13803 26989 4096 4096 NT_STATUS_OK
ReadX 13803 31085 4096 4096 NT_STATUS_OK
ReadX 13803 35181 4096 4096 NT_STATUS_OK
ReadX 13803 39277 4096 4096 NT_STATUS_OK
ReadX 13803 43373 4096 4096 NT_STATUS_OK
ReadX 13803 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13803 2157 1024 1024 NT_STATUS_OK
ReadX 13803 1667 4688 4688 NT_STATUS_OK
ReadX 13803 6355 3516 3516 NT_STATUS_OK
ReadX 13803 9871 16384 16384 NT_STATUS_OK
ReadX 13803 26255 3771 3771 NT_STATUS_OK
ReadX 13803 30026 2048 2048 NT_STATUS_OK
ReadX 13803 32074 1024 1024 NT_STATUS_OK
ReadX 13803 33098 6652 6652 NT_STATUS_OK
ReadX 13803 39750 16384 16384 NT_STATUS_OK
ReadX 13803 56134 10496 10496 NT_STATUS_OK
ReadX 13803 66630 1784 1784 NT_STATUS_OK
ReadX 13803 68414 90 90 NT_STATUS_OK
ReadX 13803 68504 273 273 NT_STATUS_OK
ReadX 13803 68777 1600 1600 NT_STATUS_OK
ReadX 13803 70377 640 640 NT_STATUS_OK
ReadX 13803 71017 1280 1280 NT_STATUS_OK
ReadX 13803 72297 8464 8464 NT_STATUS_OK
ReadX 13803 80761 158 158 NT_STATUS_OK
ReadX 13803 80919 912 912 NT_STATUS_OK
ReadX 13803 81831 1980 1980 NT_STATUS_OK
ReadX 13803 83811 2256 2256 NT_STATUS_OK
ReadX 13803 86067 400 400 NT_STATUS_OK
ReadX 13803 86467 252 252 NT_STATUS_OK
ReadX 13803 86719 42 42 NT_STATUS_OK
ReadX 13803 86761 725 725 NT_STATUS_OK
ReadX 13803 2009 512 512 NT_STATUS_OK
ReadX 13803 3895 9 9 NT_STATUS_OK
ReadX 13803 3781 46 46 NT_STATUS_OK
ReadX 13803 4059 92 92 NT_STATUS_OK
ReadX 13803 3781 92 92 NT_STATUS_OK
ReadX 13803 3986 184 184 NT_STATUS_OK
ReadX 13803 3987 16384 16384 NT_STATUS_OK
ReadX 13803 3902 16384 16384 NT_STATUS_OK
ReadX 13803 3781 10240 10240 NT_STATUS_OK
ReadX 13803 3821 16384 16384 NT_STATUS_OK
ReadX 13803 3891 935 935 NT_STATUS_OK
ReadX 13803 4060 10240 10240 NT_STATUS_OK
ReadX 13803 4059 184 184 NT_STATUS_OK
ReadX 13803 256 184 184 NT_STATUS_OK
ReadX 13803 256 1026 1026 NT_STATUS_OK
ReadX 13803 3901 326 326 NT_STATUS_OK
ReadX 13803 3899 652 652 NT_STATUS_OK
ReadX 13803 256 2 2 NT_STATUS_OK
ReadX 13803 258 4948 4948 NT_STATUS_OK
Close 13803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13821 NT_STATUS_OK
WriteX 13821 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13821 258 NT_STATUS_OK
WriteX 13821 0 65536 65536 NT_STATUS_OK
WriteX 13821 65536 65536 65536 NT_STATUS_OK
WriteX 13821 131072 65536 65536 NT_STATUS_OK
WriteX 13821 196608 65536 65536 NT_STATUS_OK
WriteX 13821 262144 65536 65536 NT_STATUS_OK
WriteX 13821 327680 65536 65536 NT_STATUS_OK
WriteX 13821 393216 65536 65536 NT_STATUS_OK
WriteX 13821 458752 65536 65536 NT_STATUS_OK
WriteX 13821 524288 65536 65536 NT_STATUS_OK
WriteX 13821 589824 35257 35257 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13826 NT_STATUS_OK
WriteX 13826 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
WriteX 13826 131072 65536 65536 NT_STATUS_OK
WriteX 13826 196608 65536 65536 NT_STATUS_OK
WriteX 13826 262144 65536 65536 NT_STATUS_OK
WriteX 13826 327680 65536 65536 NT_STATUS_OK
WriteX 13826 393216 65536 65536 NT_STATUS_OK
WriteX 13826 458752 65536 65536 NT_STATUS_OK
WriteX 13826 524288 65536 65536 NT_STATUS_OK
WriteX 13826 589824 57598 57598 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 12543 12543 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
Close 13812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13834 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
ReadX 13834 1938 24 24 NT_STATUS_OK
ReadX 13834 1920 276 276 NT_STATUS_OK
ReadX 13834 1918 14 14 NT_STATUS_OK
ReadX 13834 1918 7 7 NT_STATUS_OK
ReadX 13834 1919 12 12 NT_STATUS_OK
ReadX 13834 1919 8 8 NT_STATUS_OK
ReadX 13834 1917 15 15 NT_STATUS_OK
ReadX 13834 0 16 16 NT_STATUS_OK
ReadX 13834 16 2048 2048 NT_STATUS_OK
ReadX 13834 2064 2048 2048 NT_STATUS_OK
ReadX 13834 257 2048 2048 NT_STATUS_OK
ReadX 13834 385 2048 2048 NT_STATUS_OK
ReadX 13834 513 2048 2048 NT_STATUS_OK
ReadX 13834 641 2048 2048 NT_STATUS_OK
ReadX 13834 769 2048 2048 NT_STATUS_OK
ReadX 13834 897 2048 2048 NT_STATUS_OK
ReadX 13834 1025 2048 2048 NT_STATUS_OK
ReadX 13834 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 11588 11588 NT_STATUS_OK
Flush 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13844 NT_STATUS_OK
WriteX 13844 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13844 258 NT_STATUS_OK
WriteX 13844 0 11615 11615 NT_STATUS_OK
Flush 13844 NT_STATUS_OK
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13850 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13853 NT_STATUS_OK
WriteX 13853 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 65536 65536 NT_STATUS_OK
WriteX 13853 65536 16050 16050 NT_STATUS_OK
Close 13853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13833 1939 64 64 NT_STATUS_OK
ReadX 13833 128 248 248 NT_STATUS_OK
ReadX 13833 128 568 568 NT_STATUS_OK
ReadX 13833 3872 1536 1536 NT_STATUS_OK
ReadX 13833 3456 2560 2560 NT_STATUS_OK
ReadX 13833 3136 512 512 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
ReadX 13833 3264 3072 3072 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 3616 4096 4096 NT_STATUS_OK
ReadX 13833 1939 64 64 NT_STATUS_OK
ReadX 13833 128 248 248 NT_STATUS_OK
ReadX 13833 128 608 608 NT_STATUS_OK
ReadX 13833 2858 1024 1024 NT_STATUS_OK
ReadX 13833 2810 4096 4096 NT_STATUS_OK
ReadX 13833 2826 4096 4096 NT_STATUS_OK
ReadX 13833 2580 2048 2048 NT_STATUS_OK
ReadX 13833 2800 2560 2560 NT_STATUS_OK
ReadX 13833 2100 4096 4096 NT_STATUS_OK
ReadX 13833 2084 4096 4096 NT_STATUS_OK
ReadX 13833 868 4096 4096 NT_STATUS_OK
ReadX 13833 2324 4096 4096 NT_STATUS_OK
ReadX 13833 884 4096 4096 NT_STATUS_OK
ReadX 13833 2604 1024 1024 NT_STATUS_OK
ReadX 13833 580 4096 4096 NT_STATUS_OK
ReadX 13833 596 4096 4096 NT_STATUS_OK
ReadX 13833 2752 4096 4096 NT_STATUS_OK
ReadX 13833 2842 1024 1024 NT_STATUS_OK
ReadX 13833 660 4096 4096 NT_STATUS_OK
ReadX 13833 2720 4096 4096 NT_STATUS_OK
ReadX 13833 2736 4096 4096 NT_STATUS_OK
ReadX 13833 628 4096 4096 NT_STATUS_OK
ReadX 13833 2704 4096 4096 NT_STATUS_OK
ReadX 13833 1556 4096 4096 NT_STATUS_OK
ReadX 13833 576 4096 4096 NT_STATUS_OK
ReadX 13833 3168 1536 1536 NT_STATUS_OK
ReadX 13833 832 4096 4096 NT_STATUS_OK
ReadX 13833 1088 4096 4096 NT_STATUS_OK
ReadX 13833 1344 4096 4096 NT_STATUS_OK
ReadX 13833 1600 4096 4096 NT_STATUS_OK
ReadX 13833 1856 4096 4096 NT_STATUS_OK
ReadX 13833 2112 4096 4096 NT_STATUS_OK
ReadX 13833 1892 4096 4096 NT_STATUS_OK
ReadX 13833 820 4096 4096 NT_STATUS_OK
ReadX 13833 788 4096 4096 NT_STATUS_OK
ReadX 13833 1604 4096 4096 NT_STATUS_OK
ReadX 13833 3648 4096 4096 NT_STATUS_OK
ReadX 13833 2608 4096 4096 NT_STATUS_OK
ReadX 13833 548 4096 4096 NT_STATUS_OK
ReadX 13833 740 4096 4096 NT_STATUS_OK
ReadX 13833 1344 4096 4096 NT_STATUS_OK
ReadX 13833 3392 4096 4096 NT_STATUS_OK
ReadX 13833 3904 4096 4096 NT_STATUS_OK
ReadX 13833 644 4096 4096 NT_STATUS_OK
ReadX 13833 676 4096 4096 NT_STATUS_OK
ReadX 13833 2688 4096 4096 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 900 4096 4096 NT_STATUS_OK
ReadX 13833 1908 4096 4096 NT_STATUS_OK
ReadX 13833 852 4096 4096 NT_STATUS_OK
ReadX 13833 724 4096 4096 NT_STATUS_OK
ReadX 13833 2292 4096 4096 NT_STATUS_OK
ReadX 13833 612 4096 4096 NT_STATUS_OK
ReadX 13833 388 4096 4096 NT_STATUS_OK
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 500 4096 4096 NT_STATUS_OK
ReadX 13833 356 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 576 4096 4096 NT_STATUS_OK
ReadX 13833 340 4096 4096 NT_STATUS_OK
ReadX 13833 420 4096 4096 NT_STATUS_OK
ReadX 13833 1600 4096 4096 NT_STATUS_OK
ReadX 13833 404 4096 4096 NT_STATUS_OK
ReadX 13833 1428 4096 4096 NT_STATUS_OK
ReadX 13833 2656 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 452 4096 4096 NT_STATUS_OK
ReadX 13833 692 4096 4096 NT_STATUS_OK
ReadX 13833 564 4096 4096 NT_STATUS_OK
ReadX 13833 372 4096 4096 NT_STATUS_OK
ReadX 13833 468 4096 4096 NT_STATUS_OK
ReadX 13833 484 4096 4096 NT_STATUS_OK
ReadX 13833 1088 4096 4096 NT_STATUS_OK
ReadX 13833 1924 4096 4096 NT_STATUS_OK
ReadX 13833 2768 4096 4096 NT_STATUS_OK
ReadX 13833 832 4096 4096 NT_STATUS_OK
ReadX 13833 836 4096 4096 NT_STATUS_OK
ReadX 13833 1856 4096 4096 NT_STATUS_OK
ReadX 13833 2640 4096 4096 NT_STATUS_OK
ReadX 13833 436 4096 4096 NT_STATUS_OK
ReadX 13833 1828 4096 4096 NT_STATUS_OK
ReadX 13833 804 4096 4096 NT_STATUS_OK
ReadX 13833 1860 4096 4096 NT_STATUS_OK
ReadX 13833 1812 4096 4096 NT_STATUS_OK
ReadX 13833 756 4096 4096 NT_STATUS_OK
ReadX 13833 1636 4096 4096 NT_STATUS_OK
ReadX 13833 772 4096 4096 NT_STATUS_OK
ReadX 13833 2036 4096 4096 NT_STATUS_OK
ReadX 13833 1220 4096 4096 NT_STATUS_OK
ReadX 13833 1652 4096 4096 NT_STATUS_OK
ReadX 13833 2588 4096 4096 NT_STATUS_OK
ReadX 13833 916 4096 4096 NT_STATUS_OK
ReadX 13833 260 4096 4096 NT_STATUS_OK
ReadX 13833 932 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 308 4096 4096 NT_STATUS_OK
ReadX 13833 292 4096 4096 NT_STATUS_OK
ReadX 13833 1140 4096 4096 NT_STATUS_OK
ReadX 13833 276 4096 4096 NT_STATUS_OK
ReadX 13833 2020 4096 4096 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
ReadX 13833 516 4096 4096 NT_STATUS_OK
ReadX 13833 1844 4096 4096 NT_STATUS_OK
ReadX 13833 1124 4096 4096 NT_STATUS_OK
ReadX 13833 3136 4096 4096 NT_STATUS_OK
ReadX 13833 324 4096 4096 NT_STATUS_OK
ReadX 13833 1156 4096 4096 NT_STATUS_OK
ReadX 13833 1172 4096 4096 NT_STATUS_OK
ReadX 13833 2112 4096 4096 NT_STATUS_OK
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 964 4096 4096 NT_STATUS_OK
ReadX 13833 980 4096 4096 NT_STATUS_OK
ReadX 13833 1012 4096 4096 NT_STATUS_OK
ReadX 13833 532 4096 4096 NT_STATUS_OK
ReadX 13833 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13833 1620 4096 4096 NT_STATUS_OK
ReadX 13833 1604 4096 4096 NT_STATUS_OK
ReadX 13833 2116 4096 4096 NT_STATUS_OK
ReadX 13833 2132 4096 4096 NT_STATUS_OK
ReadX 13833 2148 4096 4096 NT_STATUS_OK
ReadX 13833 2276 4096 4096 NT_STATUS_OK
ReadX 13833 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13858 NT_STATUS_OK
QUERY_FILE_INFORMATION 13813 1004 NT_STATUS_OK
Close 13813 NT_STATUS_OK
WriteX 13858 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1004 NT_STATUS_OK
Close 13815 NT_STATUS_OK
WriteX 13858 0 65536 65536 NT_STATUS_OK
WriteX 13858 65536 64850 64850 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
ReadX 13833 2068 4096 4096 NT_STATUS_OK
ReadX 13833 1588 4096 4096 NT_STATUS_OK
ReadX 13833 1572 4096 4096 NT_STATUS_OK
WriteX 13860 0 18630 18630 NT_STATUS_OK
Flush 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13833 612 4096 4096 NT_STATUS_OK
ReadX 13833 564 4096 4096 NT_STATUS_OK
ReadX 13833 1876 4096 4096 NT_STATUS_OK
ReadX 13833 628 4096 4096 NT_STATUS_OK
ReadX 13833 740 4096 4096 NT_STATUS_OK
ReadX 13833 724 4096 4096 NT_STATUS_OK
ReadX 13833 644 4096 4096 NT_STATUS_OK
ReadX 13833 2324 4096 4096 NT_STATUS_OK
ReadX 13833 660 4096 4096 NT_STATUS_OK
ReadX 13833 852 4096 4096 NT_STATUS_OK
ReadX 13833 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 580 4096 4096 NT_STATUS_OK
ReadX 13833 3136 512 512 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
Close 13833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 61440 4096 4096 NT_STATUS_OK
ReadX 13865 126976 4096 4096 NT_STATUS_OK
WriteX 13865 0 65536 65536 NT_STATUS_OK
WriteX 13865 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 61440 4096 4096 NT_STATUS_OK
ReadX 13866 126976 4096 4096 NT_STATUS_OK
ReadX 13866 192512 4096 4096 NT_STATUS_OK
ReadX 13866 258048 4096 4096 NT_STATUS_OK
WriteX 13866 0 65536 65536 NT_STATUS_OK
WriteX 13866 65536 65536 65536 NT_STATUS_OK
WriteX 13866 131072 65536 65536 NT_STATUS_OK
WriteX 13866 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 61440 4096 4096 NT_STATUS_OK
ReadX 13867 126976 4096 4096 NT_STATUS_OK
ReadX 13867 192512 4096 4096 NT_STATUS_OK
ReadX 13867 258048 4096 4096 NT_STATUS_OK
ReadX 13867 323584 4096 4096 NT_STATUS_OK
ReadX 13867 389120 4096 4096 NT_STATUS_OK
ReadX 13867 454656 4096 4096 NT_STATUS_OK
ReadX 13867 520192 4096 4096 NT_STATUS_OK
WriteX 13867 0 65536 65536 NT_STATUS_OK
WriteX 13867 65536 65536 65536 NT_STATUS_OK
WriteX 13867 131072 65536 65536 NT_STATUS_OK
WriteX 13867 196608 65536 65536 NT_STATUS_OK
WriteX 13867 262144 65536 65536 NT_STATUS_OK
WriteX 13867 327680 65536 65536 NT_STATUS_OK
WriteX 13867 393216 65536 65536 NT_STATUS_OK
WriteX 13867 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13870 NT_STATUS_OK
WriteX 13870 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13868 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13872 NT_STATUS_OK
Close 13872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Close 13867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13875 NT_STATUS_OK
WriteX 13875 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13875 258 NT_STATUS_OK
WriteX 13875 0 62591 62591 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13877 NT_STATUS_OK
Close 13877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13880 NT_STATUS_OK
WriteX 13880 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13880 258 NT_STATUS_OK
WriteX 13880 0 10845 10845 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13885 NT_STATUS_OK
WriteX 13885 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13885 258 NT_STATUS_OK
WriteX 13885 0 30118 30118 NT_STATUS_OK
Close 13885 NT_STATUS_OK
WriteX 13868 0 4096 4096 NT_STATUS_OK
WriteX 13870 0 64 64 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 61440 61440 NT_STATUS_OK
ReadX 13887 61440 4096 4096 NT_STATUS_OK
ReadX 13887 65536 61440 61440 NT_STATUS_OK
ReadX 13887 126976 4096 4096 NT_STATUS_OK
ReadX 13887 131072 61440 61440 NT_STATUS_OK
ReadX 13887 192512 4096 4096 NT_STATUS_OK
ReadX 13887 196608 61440 61440 NT_STATUS_OK
ReadX 13887 258048 4096 4096 NT_STATUS_OK
ReadX 13887 262144 61440 61440 NT_STATUS_OK
ReadX 13887 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 61440 61440 NT_STATUS_OK
ReadX 13888 61440 4096 4096 NT_STATUS_OK
ReadX 13888 65536 61440 61440 NT_STATUS_OK
ReadX 13888 126976 4096 4096 NT_STATUS_OK
ReadX 13888 131072 61440 61440 NT_STATUS_OK
ReadX 13888 192512 4096 4096 NT_STATUS_OK
ReadX 13888 196608 61440 61440 NT_STATUS_OK
ReadX 13888 258048 4096 4096 NT_STATUS_OK
ReadX 13888 262144 61440 61440 NT_STATUS_OK
ReadX 13888 323584 4096 4096 NT_STATUS_OK
ReadX 13888 327680 61440 61440 NT_STATUS_OK
ReadX 13888 389120 4096 4096 NT_STATUS_OK
ReadX 13888 393216 61440 61440 NT_STATUS_OK
ReadX 13888 454656 4096 4096 NT_STATUS_OK
ReadX 13888 458752 61440 61440 NT_STATUS_OK
ReadX 13888 520192 4096 4096 NT_STATUS_OK
ReadX 13888 524288 61440 61440 NT_STATUS_OK
ReadX 13888 585728 4096 4096 NT_STATUS_OK
ReadX 13888 589824 61440 61440 NT_STATUS_OK
ReadX 13888 651264 4096 4096 NT_STATUS_OK
ReadX 13888 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 61440 61440 NT_STATUS_OK
ReadX 13889 61440 4096 4096 NT_STATUS_OK
ReadX 13889 65536 61440 61440 NT_STATUS_OK
ReadX 13889 126976 4096 4096 NT_STATUS_OK
ReadX 13889 131072 61440 61440 NT_STATUS_OK
ReadX 13889 192512 4096 4096 NT_STATUS_OK
ReadX 13889 196608 61440 61440 NT_STATUS_OK
ReadX 13889 258048 4096 4096 NT_STATUS_OK
ReadX 13889 262144 61440 61440 NT_STATUS_OK
ReadX 13889 323584 4096 4096 NT_STATUS_OK
ReadX 13889 327680 61440 61440 NT_STATUS_OK
ReadX 13889 389120 4096 4096 NT_STATUS_OK
ReadX 13889 393216 61440 61440 NT_STATUS_OK
ReadX 13889 454656 4096 4096 NT_STATUS_OK
ReadX 13889 458752 61440 61440 NT_STATUS_OK
ReadX 13889 520192 4096 4096 NT_STATUS_OK
ReadX 13889 524288 61440 61440 NT_STATUS_OK
ReadX 13889 585728 4096 4096 NT_STATUS_OK
ReadX 13889 589824 61440 61440 NT_STATUS_OK
ReadX 13889 651264 4096 4096 NT_STATUS_OK
ReadX 13889 655360 61440 61440 NT_STATUS_OK
ReadX 13889 716800 4096 4096 NT_STATUS_OK
ReadX 13889 720896 61440 61440 NT_STATUS_OK
ReadX 13889 782336 4096 4096 NT_STATUS_OK
ReadX 13889 786432 61440 61440 NT_STATUS_OK
ReadX 13889 847872 4096 4096 NT_STATUS_OK
ReadX 13889 851968 61440 61440 NT_STATUS_OK
ReadX 13889 913408 4096 4096 NT_STATUS_OK
ReadX 13889 917504 61440 61440 NT_STATUS_OK
ReadX 13889 978944 4096 4096 NT_STATUS_OK
ReadX 13889 983040 61440 61440 NT_STATUS_OK
ReadX 13889 1044480 4096 4096 NT_STATUS_OK
ReadX 13889 1048576 61440 61440 NT_STATUS_OK
ReadX 13889 1110016 4096 4096 NT_STATUS_OK
ReadX 13889 1114112 61440 61440 NT_STATUS_OK
ReadX 13889 1175552 4096 4096 NT_STATUS_OK
ReadX 13889 1179648 61440 61440 NT_STATUS_OK
ReadX 13889 1241088 4096 4096 NT_STATUS_OK
ReadX 13889 1245184 61440 61440 NT_STATUS_OK
ReadX 13889 1306624 4096 4096 NT_STATUS_OK
ReadX 13889 1310720 61440 61440 NT_STATUS_OK
ReadX 13889 1372160 4096 4096 NT_STATUS_OK
ReadX 13889 1376256 61440 61440 NT_STATUS_OK
ReadX 13889 1437696 4096 4096 NT_STATUS_OK
ReadX 13889 1441792 61440 61440 NT_STATUS_OK
ReadX 13889 1503232 4096 4096 NT_STATUS_OK
ReadX 13889 1507328 61440 61440 NT_STATUS_OK
ReadX 13889 1568768 4096 4096 NT_STATUS_OK
ReadX 13889 1572864 61440 61440 NT_STATUS_OK
ReadX 13889 1634304 4096 4096 NT_STATUS_OK
ReadX 13889 1638400 61440 61440 NT_STATUS_OK
ReadX 13889 1699840 4096 4096 NT_STATUS_OK
ReadX 13889 1703936 61440 61440 NT_STATUS_OK
ReadX 13889 1765376 4096 4096 NT_STATUS_OK
ReadX 13889 1769472 61440 61440 NT_STATUS_OK
ReadX 13889 1830912 4096 4096 NT_STATUS_OK
ReadX 13889 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
ReadX 13894 4096 4096 4096 NT_STATUS_OK
ReadX 13894 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13892 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Close 13894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13898 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13899 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 0 8192 8192 NT_STATUS_OK
ReadX 13902 8192 8192 8192 NT_STATUS_OK
ReadX 13902 16384 8192 8192 NT_STATUS_OK
ReadX 13902 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13907 NT_STATUS_OK
WriteX 13907 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13907 258 NT_STATUS_OK
WriteX 13907 0 10438 10438 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13910 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13911 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
ReadX 13916 4096 4096 4096 NT_STATUS_OK
ReadX 13916 8192 4096 4096 NT_STATUS_OK
ReadX 13916 12288 8192 8192 NT_STATUS_OK
ReadX 13916 20480 8192 8192 NT_STATUS_OK
ReadX 13916 28672 8192 8192 NT_STATUS_OK
ReadX 13916 36864 8192 8192 NT_STATUS_OK
ReadX 13916 45056 8192 8192 NT_STATUS_OK
ReadX 13916 53248 8192 8192 NT_STATUS_OK
ReadX 13916 61440 8192 8192 NT_STATUS_OK
ReadX 13916 69632 8192 8192 NT_STATUS_OK
ReadX 13916 77824 8192 8192 NT_STATUS_OK
ReadX 13916 86016 8192 8192 NT_STATUS_OK
ReadX 13916 94208 8192 8192 NT_STATUS_OK
ReadX 13916 102400 8192 8192 NT_STATUS_OK
ReadX 13916 110592 8192 8192 NT_STATUS_OK
ReadX 13916 118784 8192 8192 NT_STATUS_OK
ReadX 13916 126976 8192 8192 NT_STATUS_OK
ReadX 13916 135168 8192 8192 NT_STATUS_OK
ReadX 13916 143360 8192 8192 NT_STATUS_OK
ReadX 13916 151552 8192 8192 NT_STATUS_OK
ReadX 13916 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13921 NT_STATUS_OK
WriteX 13921 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 258 NT_STATUS_OK
WriteX 13921 0 28489 28489 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13924 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13925 NT_STATUS_OK
Close 13925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 8192 8192 NT_STATUS_OK
ReadX 13928 8192 8192 8192 NT_STATUS_OK
ReadX 13928 16384 8192 8192 NT_STATUS_OK
ReadX 13928 24576 8192 8192 NT_STATUS_OK
ReadX 13928 32768 16384 16384 NT_STATUS_OK
ReadX 13928 49152 8192 8192 NT_STATUS_OK
ReadX 13928 57344 8192 8192 NT_STATUS_OK
ReadX 13928 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13933 NT_STATUS_OK
WriteX 13933 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13933 258 NT_STATUS_OK
WriteX 13933 0 29253 29253 NT_STATUS_OK
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13934 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13937 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13940 NT_STATUS_OK
WriteX 13940 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13940 258 NT_STATUS_OK
WriteX 13940 0 30183 30183 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13941 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13943 NT_STATUS_OK
WriteX 13943 0 510 510 NT_STATUS_OK
WriteX 13943 510 512 512 NT_STATUS_OK
WriteX 13943 1022 510 510 NT_STATUS_OK
WriteX 13943 1532 510 510 NT_STATUS_OK
WriteX 13943 2042 168 168 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
WriteX 13946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13947 NT_STATUS_OK
ReadX 13947 61440 4096 4096 NT_STATUS_OK
ReadX 13947 126976 4096 4096 NT_STATUS_OK
WriteX 13947 0 65536 65536 NT_STATUS_OK
WriteX 13947 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13948 NT_STATUS_OK
ReadX 13948 61440 4096 4096 NT_STATUS_OK
ReadX 13948 126976 4096 4096 NT_STATUS_OK
ReadX 13948 192512 4096 4096 NT_STATUS_OK
ReadX 13948 258048 4096 4096 NT_STATUS_OK
WriteX 13948 0 65536 65536 NT_STATUS_OK
WriteX 13948 65536 65536 65536 NT_STATUS_OK
WriteX 13948 131072 65536 65536 NT_STATUS_OK
WriteX 13948 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 61440 4096 4096 NT_STATUS_OK
ReadX 13949 126976 4096 4096 NT_STATUS_OK
ReadX 13949 192512 4096 4096 NT_STATUS_OK
ReadX 13949 258048 4096 4096 NT_STATUS_OK
ReadX 13949 323584 4096 4096 NT_STATUS_OK
ReadX 13949 389120 4096 4096 NT_STATUS_OK
ReadX 13949 454656 4096 4096 NT_STATUS_OK
ReadX 13949 520192 4096 4096 NT_STATUS_OK
WriteX 13949 0 65536 65536 NT_STATUS_OK
WriteX 13949 65536 65536 65536 NT_STATUS_OK
WriteX 13949 131072 65536 65536 NT_STATUS_OK
WriteX 13949 196608 65536 65536 NT_STATUS_OK
WriteX 13949 262144 65536 65536 NT_STATUS_OK
WriteX 13949 327680 65536 65536 NT_STATUS_OK
WriteX 13949 393216 65536 65536 NT_STATUS_OK
WriteX 13949 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Close 13948 NT_STATUS_OK
Close 13949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13961 NT_STATUS_OK
Close 13961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13965 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13979 NT_STATUS_OK
Close 13979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13989 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13994 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 14009 NT_STATUS_OK
Close 14009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 14012 NT_STATUS_OK
Close 14012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14018 NT_STATUS_OK
WriteX 14018 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 14018 0 65536 65536 NT_STATUS_OK
WriteX 14018 65536 65536 65536 NT_STATUS_OK
WriteX 14018 131072 65536 65536 NT_STATUS_OK
WriteX 14018 196608 65536 65536 NT_STATUS_OK
WriteX 14018 262144 26634 26634 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14024 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
ReadX 14026 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14027 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14031 NT_STATUS_OK
Close 14031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14034 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14036 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14043 NT_STATUS_OK
Close 14043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14045 NT_STATUS_OK
Close 14045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14054 NT_STATUS_OK
Close 14054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14059 NT_STATUS_OK
Close 14059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14074 NT_STATUS_OK
Close 14074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14083 NT_STATUS_OK
Close 14083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 14091 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 14093 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9879 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9881 NT_STATUS_OK
ReadX 9881 0 4096 4096 NT_STATUS_OK
Close 9881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 4096 4096 NT_STATUS_OK
Close 9882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9883 NT_STATUS_OK
ReadX 9883 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 4096 4096 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9897 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9926 0 4096 4096 NT_STATUS_OK
Close 9926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 0 4096 4096 NT_STATUS_OK
ReadX 9928 4096 4096 4096 NT_STATUS_OK
ReadX 9928 8192 4096 4096 NT_STATUS_OK
ReadX 9928 12288 4096 4096 NT_STATUS_OK
ReadX 9928 16384 4096 4096 NT_STATUS_OK
ReadX 9928 20480 4096 4096 NT_STATUS_OK
ReadX 9928 24576 4096 4096 NT_STATUS_OK
ReadX 9928 28672 4096 4096 NT_STATUS_OK
ReadX 9928 32768 4096 4096 NT_STATUS_OK
ReadX 9928 36864 4096 4096 NT_STATUS_OK
ReadX 9928 40960 4096 4096 NT_STATUS_OK
ReadX 9928 45056 4096 4096 NT_STATUS_OK
ReadX 9928 49152 4096 4096 NT_STATUS_OK
ReadX 9928 53248 4096 4096 NT_STATUS_OK
ReadX 9928 57344 4096 4096 NT_STATUS_OK
ReadX 9928 61440 4096 4096 NT_STATUS_OK
ReadX 9928 65536 4096 4096 NT_STATUS_OK
ReadX 9928 69632 4096 4096 NT_STATUS_OK
ReadX 9928 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9928 1004 NT_STATUS_OK
WriteX 9928 0 4096 4096 NT_STATUS_OK
Close 9928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9929 NT_STATUS_OK
SET_FILE_INFORMATION 9929 1004 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9934 NT_STATUS_OK
WriteX 9934 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9934 258 NT_STATUS_OK
WriteX 9934 0 65536 65536 NT_STATUS_OK
WriteX 9934 65536 19979 19979 NT_STATUS_OK
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9935 NT_STATUS_OK
ReadX 9935 0 4096 4096 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
QUERY_FILE_INFORMATION 9935 1004 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
SET_FILE_INFORMATION 9935 1004 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9937 NT_STATUS_OK
ReadX 9937 0 4096 4096 NT_STATUS_OK
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9938 NT_STATUS_OK
ReadX 9938 0 4096 4096 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9940 NT_STATUS_OK
ReadX 9940 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9940 1004 NT_STATUS_OK
WriteX 9940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9941 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9937 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 17654 17654 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
QUERY_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9948 NT_STATUS_OK
SET_FILE_INFORMATION 9948 1004 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9949 NT_STATUS_OK
ReadX 9949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
ReadX 9952 4096 4096 4096 NT_STATUS_OK
ReadX 9952 8192 4096 4096 NT_STATUS_OK
ReadX 9952 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9952 16384 4096 4096 NT_STATUS_OK
ReadX 9952 20480 4096 4096 NT_STATUS_OK
ReadX 9952 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9953 NT_STATUS_OK
ReadX 9953 0 4096 4096 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9955 1004 NT_STATUS_OK
WriteX 9955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 19490 19490 NT_STATUS_OK
Close 9961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9963 NT_STATUS_OK
SET_FILE_INFORMATION 9963 1004 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9967 0 4096 4096 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9969 NT_STATUS_OK
ReadX 9969 0 4096 4096 NT_STATUS_OK
ReadX 9969 4096 4096 4096 NT_STATUS_OK
ReadX 9969 8192 4096 4096 NT_STATUS_OK
ReadX 9969 12288 4096 4096 NT_STATUS_OK
ReadX 9969 16384 4096 4096 NT_STATUS_OK
ReadX 9969 20480 4096 4096 NT_STATUS_OK
ReadX 9969 24576 4096 4096 NT_STATUS_OK
ReadX 9969 28672 4096 4096 NT_STATUS_OK
ReadX 9969 32768 4096 4096 NT_STATUS_OK
ReadX 9969 36864 4096 4096 NT_STATUS_OK
ReadX 9969 40960 4096 4096 NT_STATUS_OK
ReadX 9969 45056 4096 4096 NT_STATUS_OK
ReadX 9969 49152 4096 4096 NT_STATUS_OK
ReadX 9969 53248 4096 4096 NT_STATUS_OK
ReadX 9969 57344 4096 4096 NT_STATUS_OK
ReadX 9969 61440 4096 4096 NT_STATUS_OK
ReadX 9969 65536 4096 4096 NT_STATUS_OK
ReadX 9969 69632 4096 4096 NT_STATUS_OK
ReadX 9969 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9969 1004 NT_STATUS_OK
WriteX 9969 0 4096 4096 NT_STATUS_OK
Close 9969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9970 NT_STATUS_OK
SET_FILE_INFORMATION 9970 1004 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 65536 65536 NT_STATUS_OK
WriteX 9975 65536 8866 8866 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Flush 9976 NT_STATUS_OK
SET_FILE_INFORMATION 9976 1004 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Flush 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9983 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 9298 9298 NT_STATUS_OK
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 4096 4096 NT_STATUS_OK
WriteX 9987 0 4096 4096 NT_STATUS_OK
Flush 9987 NT_STATUS_OK
SET_FILE_INFORMATION 9987 1004 NT_STATUS_OK
WriteX 9987 0 4096 4096 NT_STATUS_OK
Flush 9987 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9988 NT_STATUS_OK
SET_FILE_INFORMATION 9988 1004 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9989 NT_STATUS_OK
ReadX 9989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9993 0 4096 4096 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9994 4096 4096 4096 NT_STATUS_OK
ReadX 9994 8192 4096 4096 NT_STATUS_OK
ReadX 9994 12288 4096 4096 NT_STATUS_OK
ReadX 9994 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9995 NT_STATUS_OK
ReadX 9995 0 4096 4096 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9997 1004 NT_STATUS_OK
WriteX 9997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9998 NT_STATUS_OK
Close 9998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10000 NT_STATUS_OK
Close 10000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10003 NT_STATUS_OK
WriteX 10003 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 258 NT_STATUS_OK
WriteX 10003 0 65536 65536 NT_STATUS_OK
WriteX 10003 65536 11540 11540 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
SET_FILE_INFORMATION 10004 1004 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10005 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10006 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10009 NT_STATUS_OK
ReadX 10009 61440 4096 4096 NT_STATUS_OK
ReadX 10009 126976 4096 4096 NT_STATUS_OK
WriteX 10009 0 65536 65536 NT_STATUS_OK
WriteX 10009 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 61440 4096 4096 NT_STATUS_OK
ReadX 10010 126976 4096 4096 NT_STATUS_OK
ReadX 10010 192512 4096 4096 NT_STATUS_OK
ReadX 10010 258048 4096 4096 NT_STATUS_OK
WriteX 10010 0 65536 65536 NT_STATUS_OK
WriteX 10010 65536 65536 65536 NT_STATUS_OK
WriteX 10010 131072 65536 65536 NT_STATUS_OK
WriteX 10010 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10011 NT_STATUS_OK
ReadX 10011 61440 4096 4096 NT_STATUS_OK
ReadX 10011 126976 4096 4096 NT_STATUS_OK
ReadX 10011 192512 4096 4096 NT_STATUS_OK
ReadX 10011 258048 4096 4096 NT_STATUS_OK
ReadX 10011 323584 4096 4096 NT_STATUS_OK
ReadX 10011 389120 4096 4096 NT_STATUS_OK
ReadX 10011 454656 4096 4096 NT_STATUS_OK
ReadX 10011 520192 4096 4096 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
WriteX 10011 131072 65536 65536 NT_STATUS_OK
WriteX 10011 196608 65536 65536 NT_STATUS_OK
WriteX 10011 262144 65536 65536 NT_STATUS_OK
WriteX 10011 327680 65536 65536 NT_STATUS_OK
WriteX 10011 393216 65536 65536 NT_STATUS_OK
WriteX 10011 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
ReadX 10012 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
WriteX 10013 0 53 53 NT_STATUS_OK
Close 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10014 NT_STATUS_OK
Close 10014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Close 10010 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10012 8192 4096 4096 NT_STATUS_OK
ReadX 10012 12288 4096 4096 NT_STATUS_OK
WriteX 10016 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10016 258 NT_STATUS_OK
ReadX 10012 16384 4096 4096 NT_STATUS_OK
ReadX 10012 20480 4096 4096 NT_STATUS_OK
WriteX 10016 0 15360 15360 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
WriteX 10017 0 4096 4096 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10020 NT_STATUS_OK
ReadX 10020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10020 4096 4096 4096 NT_STATUS_OK
ReadX 10020 8192 4096 4096 NT_STATUS_OK
ReadX 10020 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
ReadX 10023 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
ReadX 10024 4096 4096 4096 NT_STATUS_OK
ReadX 10024 8192 4096 4096 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10025 NT_STATUS_OK
WriteX 10025 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
WriteX 10025 0 15360 15360 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10030 NT_STATUS_OK
SET_FILE_INFORMATION 10030 1004 NT_STATUS_OK
Close 10030 NT_STATUS_OK
WriteX 10026 0 4096 4096 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
ReadX 10033 4096 4096 4096 NT_STATUS_OK
ReadX 10033 8192 4096 4096 NT_STATUS_OK
ReadX 10033 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10035 NT_STATUS_OK
WriteX 10035 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10035 258 NT_STATUS_OK
WriteX 10035 0 53 53 NT_STATUS_OK
Close 10035 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10034 4096 4096 4096 NT_STATUS_OK
ReadX 10034 8192 4096 4096 NT_STATUS_OK
ReadX 10034 12288 4096 4096 NT_STATUS_OK
WriteX 10038 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 12006 12006 NT_STATUS_OK
Close 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Close 10039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10043 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
WriteX 10045 0 11991 11991 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10050 NT_STATUS_OK
SET_FILE_INFORMATION 10050 1004 NT_STATUS_OK
Close 10050 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Close 10046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10051 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10053 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
ReadX 10053 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
WriteX 10053 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10053 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
Close 10029 NT_STATUS_OK
WriteX 10033 0 19054 19054 NT_STATUS_OK
WriteX 10053 0 12288 12288 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 61440 61440 NT_STATUS_OK
ReadX 10060 61440 4096 4096 NT_STATUS_OK
ReadX 10060 65536 61440 61440 NT_STATUS_OK
ReadX 10060 126976 4096 4096 NT_STATUS_OK
ReadX 10060 131072 61440 61440 NT_STATUS_OK
ReadX 10060 192512 4096 4096 NT_STATUS_OK
ReadX 10060 196608 61440 61440 NT_STATUS_OK
ReadX 10060 258048 4096 4096 NT_STATUS_OK
ReadX 10060 262144 61440 61440 NT_STATUS_OK
ReadX 10060 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 61440 61440 NT_STATUS_OK
ReadX 10061 61440 4096 4096 NT_STATUS_OK
ReadX 10061 65536 61440 61440 NT_STATUS_OK
ReadX 10061 126976 4096 4096 NT_STATUS_OK
ReadX 10061 131072 61440 61440 NT_STATUS_OK
ReadX 10061 192512 4096 4096 NT_STATUS_OK
ReadX 10061 196608 61440 61440 NT_STATUS_OK
ReadX 10061 258048 4096 4096 NT_STATUS_OK
ReadX 10061 262144 61440 61440 NT_STATUS_OK
ReadX 10061 323584 4096 4096 NT_STATUS_OK
ReadX 10061 327680 61440 61440 NT_STATUS_OK
ReadX 10061 389120 4096 4096 NT_STATUS_OK
ReadX 10061 393216 61440 61440 NT_STATUS_OK
ReadX 10061 454656 4096 4096 NT_STATUS_OK
ReadX 10061 458752 61440 61440 NT_STATUS_OK
ReadX 10061 520192 4096 4096 NT_STATUS_OK
ReadX 10061 524288 61440 61440 NT_STATUS_OK
ReadX 10061 585728 4096 4096 NT_STATUS_OK
ReadX 10061 589824 61440 61440 NT_STATUS_OK
ReadX 10061 651264 4096 4096 NT_STATUS_OK
ReadX 10061 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 61440 61440 NT_STATUS_OK
ReadX 10062 61440 4096 4096 NT_STATUS_OK
ReadX 10062 65536 61440 61440 NT_STATUS_OK
ReadX 10062 126976 4096 4096 NT_STATUS_OK
ReadX 10062 131072 61440 61440 NT_STATUS_OK
ReadX 10062 192512 4096 4096 NT_STATUS_OK
ReadX 10062 196608 61440 61440 NT_STATUS_OK
ReadX 10062 258048 4096 4096 NT_STATUS_OK
ReadX 10062 262144 61440 61440 NT_STATUS_OK
ReadX 10062 323584 4096 4096 NT_STATUS_OK
ReadX 10062 327680 61440 61440 NT_STATUS_OK
ReadX 10062 389120 4096 4096 NT_STATUS_OK
ReadX 10062 393216 61440 61440 NT_STATUS_OK
ReadX 10062 454656 4096 4096 NT_STATUS_OK
ReadX 10062 458752 61440 61440 NT_STATUS_OK
ReadX 10062 520192 4096 4096 NT_STATUS_OK
ReadX 10062 524288 61440 61440 NT_STATUS_OK
ReadX 10062 585728 4096 4096 NT_STATUS_OK
ReadX 10062 589824 61440 61440 NT_STATUS_OK
ReadX 10062 651264 4096 4096 NT_STATUS_OK
ReadX 10062 655360 61440 61440 NT_STATUS_OK
ReadX 10062 716800 4096 4096 NT_STATUS_OK
ReadX 10062 720896 61440 61440 NT_STATUS_OK
ReadX 10062 782336 4096 4096 NT_STATUS_OK
ReadX 10062 786432 61440 61440 NT_STATUS_OK
ReadX 10062 847872 4096 4096 NT_STATUS_OK
ReadX 10062 851968 61440 61440 NT_STATUS_OK
ReadX 10062 913408 4096 4096 NT_STATUS_OK
ReadX 10062 917504 61440 61440 NT_STATUS_OK
ReadX 10062 978944 4096 4096 NT_STATUS_OK
ReadX 10062 983040 61440 61440 NT_STATUS_OK
ReadX 10062 1044480 4096 4096 NT_STATUS_OK
ReadX 10062 1048576 61440 61440 NT_STATUS_OK
ReadX 10062 1110016 4096 4096 NT_STATUS_OK
ReadX 10062 1114112 61440 61440 NT_STATUS_OK
ReadX 10062 1175552 4096 4096 NT_STATUS_OK
ReadX 10062 1179648 61440 61440 NT_STATUS_OK
ReadX 10062 1241088 4096 4096 NT_STATUS_OK
ReadX 10062 1245184 61440 61440 NT_STATUS_OK
ReadX 10062 1306624 4096 4096 NT_STATUS_OK
ReadX 10062 1310720 61440 61440 NT_STATUS_OK
ReadX 10062 1372160 4096 4096 NT_STATUS_OK
ReadX 10062 1376256 61440 61440 NT_STATUS_OK
ReadX 10062 1437696 4096 4096 NT_STATUS_OK
ReadX 10062 1441792 61440 61440 NT_STATUS_OK
ReadX 10062 1503232 4096 4096 NT_STATUS_OK
ReadX 10062 1507328 61440 61440 NT_STATUS_OK
ReadX 10062 1568768 4096 4096 NT_STATUS_OK
ReadX 10062 1572864 61440 61440 NT_STATUS_OK
ReadX 10062 1634304 4096 4096 NT_STATUS_OK
ReadX 10062 1638400 61440 61440 NT_STATUS_OK
ReadX 10062 1699840 4096 4096 NT_STATUS_OK
ReadX 10062 1703936 61440 61440 NT_STATUS_OK
ReadX 10062 1765376 4096 4096 NT_STATUS_OK
ReadX 10062 1769472 61440 61440 NT_STATUS_OK
ReadX 10062 1830912 4096 4096 NT_STATUS_OK
ReadX 10062 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10069 NT_STATUS_OK
QUERY_FILE_INFORMATION 10069 1004 NT_STATUS_OK
WriteX 10069 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10069 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10070 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10071 NT_STATUS_OK
WriteX 10071 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10071 258 NT_STATUS_OK
WriteX 10071 0 491 491 NT_STATUS_OK
Close 10071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10069 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10075 NT_STATUS_OK
WriteX 10075 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10075 258 NT_STATUS_OK
WriteX 10075 0 543 543 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10080 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10084 NT_STATUS_OK
ReadX 10084 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10089 NT_STATUS_OK
QUERY_FILE_INFORMATION 10089 1004 NT_STATUS_OK
WriteX 10089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10089 258 NT_STATUS_OK
WriteX 10089 0 2048 2048 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
Flush 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10095 NT_STATUS_OK
WriteX 10095 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10095 258 NT_STATUS_OK
WriteX 10095 0 2048 2048 NT_STATUS_OK
Close 10095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10101 NT_STATUS_OK
WriteX 10101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10101 258 NT_STATUS_OK
WriteX 10101 0 2048 2048 NT_STATUS_OK
Close 10101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10102 NT_STATUS_OK
ReadX 10102 0 2048 2048 NT_STATUS_OK
ReadX 10080 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10084 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10096 0 4096 4096 NT_STATUS_OK
WriteX 10080 0 8192 8192 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
WriteX 10082 0 4096 4096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10106 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10081 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10080 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10109 NT_STATUS_OK
ReadX 10109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10114 NT_STATUS_OK
ReadX 10114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10115 NT_STATUS_OK
ReadX 10115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10126 NT_STATUS_OK
QUERY_FILE_INFORMATION 10126 1004 NT_STATUS_OK
WriteX 10126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10126 258 NT_STATUS_OK
WriteX 10126 0 2048 2048 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10134 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 1004 NT_STATUS_OK
WriteX 10134 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 258 NT_STATUS_OK
WriteX 10134 0 2048 2048 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10135 NT_STATUS_OK
ReadX 10135 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
Flush 10127 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
Flush 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10136 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10137 NT_STATUS_OK
WriteX 10137 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10137 258 NT_STATUS_OK
WriteX 10137 0 4096 4096 NT_STATUS_OK
Close 10137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10139 NT_STATUS_OK
Close 10139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10140 NT_STATUS_OK
WriteX 10140 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10140 258 NT_STATUS_OK
WriteX 10140 0 4096 4096 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10141 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10141 0 4096 4096 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10115 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10116 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10114 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10146 NT_STATUS_OK
ReadX 10146 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 2048 2048 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10151 NT_STATUS_OK
ReadX 10151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10152 NT_STATUS_OK
ReadX 10152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10154 NT_STATUS_OK
ReadX 10154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10163 NT_STATUS_OK
QUERY_FILE_INFORMATION 10163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Close 10149 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Close 10151 NT_STATUS_OK
Close 10154 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10165 NT_STATUS_OK
QUERY_FILE_INFORMATION 10165 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10167 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10185 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 1004 NT_STATUS_OK
WriteX 10185 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 258 NT_STATUS_OK
WriteX 10185 0 2048 2048 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10197 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 258 NT_STATUS_OK
WriteX 10197 0 2048 2048 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10205 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 1004 NT_STATUS_OK
WriteX 10205 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
WriteX 10205 0 2048 2048 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10186 0 4096 4096 NT_STATUS_OK
Flush 10186 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
Flush 10198 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Flush 10206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10186 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10188 4096 16384 16384 NT_STATUS_OK
ReadX 10168 4096 16384 16384 NT_STATUS_OK
ReadX 10200 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 2048 2048 NT_STATUS_OK
WriteX 10208 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10211 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10213 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10219 NT_STATUS_OK
ReadX 10219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10220 NT_STATUS_OK
ReadX 10220 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10216 4096 16384 16384 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 8192 8192 NT_STATUS_OK
ReadX 10222 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10236 0 4096 4096 NT_STATUS_OK
ReadX 10236 4096 4096 4096 NT_STATUS_OK
ReadX 10236 8192 4096 4096 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
ReadX 10237 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 258 NT_STATUS_OK
WriteX 10242 0 2048 2048 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
WriteX 10245 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
ReadX 10247 4096 4096 4096 NT_STATUS_OK
WriteX 10247 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10248 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Close 10219 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10250 0 4096 4096 NT_STATUS_OK
ReadX 10250 4096 4096 4096 NT_STATUS_OK
ReadX 10250 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
ReadX 10251 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10268 NT_STATUS_OK
QUERY_FILE_INFORMATION 10268 1004 NT_STATUS_OK
WriteX 10268 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10268 258 NT_STATUS_OK
WriteX 10268 0 2048 2048 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10269 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
WriteX 10274 0 2048 2048 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10258 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10276 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10250 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10278 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 61440 4096 4096 NT_STATUS_OK
ReadX 10280 126976 4096 4096 NT_STATUS_OK
WriteX 10280 0 65536 65536 NT_STATUS_OK
WriteX 10280 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 61440 4096 4096 NT_STATUS_OK
ReadX 10281 126976 4096 4096 NT_STATUS_OK
ReadX 10281 192512 4096 4096 NT_STATUS_OK
ReadX 10281 258048 4096 4096 NT_STATUS_OK
WriteX 10281 0 65536 65536 NT_STATUS_OK
WriteX 10281 65536 65536 65536 NT_STATUS_OK
WriteX 10281 131072 65536 65536 NT_STATUS_OK
WriteX 10281 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 61440 4096 4096 NT_STATUS_OK
ReadX 10282 126976 4096 4096 NT_STATUS_OK
ReadX 10282 192512 4096 4096 NT_STATUS_OK
ReadX 10282 258048 4096 4096 NT_STATUS_OK
ReadX 10282 323584 4096 4096 NT_STATUS_OK
ReadX 10282 389120 4096 4096 NT_STATUS_OK
ReadX 10282 454656 4096 4096 NT_STATUS_OK
ReadX 10282 520192 4096 4096 NT_STATUS_OK
WriteX 10282 0 65536 65536 NT_STATUS_OK
WriteX 10282 65536 65536 65536 NT_STATUS_OK
WriteX 10282 131072 65536 65536 NT_STATUS_OK
WriteX 10282 196608 65536 65536 NT_STATUS_OK
WriteX 10282 262144 65536 65536 NT_STATUS_OK
WriteX 10282 327680 65536 65536 NT_STATUS_OK
WriteX 10282 393216 65536 65536 NT_STATUS_OK
WriteX 10282 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10283 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 8192 4096 4096 NT_STATUS_OK
ReadX 10283 12288 4096 4096 NT_STATUS_OK
ReadX 10283 16384 4096 4096 NT_STATUS_OK
ReadX 10283 20480 4096 4096 NT_STATUS_OK
ReadX 10283 24576 4096 4096 NT_STATUS_OK
ReadX 10283 28672 4096 4096 NT_STATUS_OK
ReadX 10283 32768 4096 4096 NT_STATUS_OK
ReadX 10283 36864 4096 4096 NT_STATUS_OK
ReadX 10283 40960 4096 4096 NT_STATUS_OK
ReadX 10283 45056 4096 4096 NT_STATUS_OK
ReadX 10283 49152 4096 4096 NT_STATUS_OK
ReadX 10283 53248 4096 4096 NT_STATUS_OK
ReadX 10283 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10283 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10284 NT_STATUS_OK
Close 10284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10286 NT_STATUS_OK
WriteX 10286 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 57088 57088 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Flush 10286 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10287 NT_STATUS_OK
SET_FILE_INFORMATION 10287 1004 NT_STATUS_OK
Close 10287 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10290 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10291 NT_STATUS_OK
WriteX 10291 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10291 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10291 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
WriteX 10291 0 51456 51456 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
Flush 10291 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10295 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10300 NT_STATUS_OK
WriteX 10300 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 53077 53077 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10301 NT_STATUS_OK
WriteX 10301 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10301 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 65536 65536 NT_STATUS_OK
WriteX 10301 65536 1856 1856 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Flush 10301 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10303 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10307 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
WriteX 10310 0 7983 7983 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10315 NT_STATUS_OK
WriteX 10315 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 258 NT_STATUS_OK
WriteX 10315 0 65536 65536 NT_STATUS_OK
WriteX 10315 65536 65536 65536 NT_STATUS_OK
WriteX 10315 131072 65536 65536 NT_STATUS_OK
WriteX 10315 196608 65536 65536 NT_STATUS_OK
WriteX 10315 262144 65536 65536 NT_STATUS_OK
WriteX 10315 327680 65536 65536 NT_STATUS_OK
WriteX 10315 393216 65536 65536 NT_STATUS_OK
WriteX 10315 458752 46731 46731 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10316 NT_STATUS_OK
WriteX 10316 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10305 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 0 65536 65536 NT_STATUS_OK
WriteX 10316 65536 22848 22848 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Flush 10316 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Close 10316 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10320 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10321 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10321 1004 NT_STATUS_OK
ReadX 10321 8192 4096 4096 NT_STATUS_OK
ReadX 10321 12288 4096 4096 NT_STATUS_OK
ReadX 10321 16384 4096 4096 NT_STATUS_OK
ReadX 10321 20480 4096 4096 NT_STATUS_OK
ReadX 10321 24576 4096 4096 NT_STATUS_OK
ReadX 10321 28672 4096 4096 NT_STATUS_OK
ReadX 10321 32768 4096 4096 NT_STATUS_OK
ReadX 10321 36864 4096 4096 NT_STATUS_OK
ReadX 10321 40960 4096 4096 NT_STATUS_OK
ReadX 10321 45056 4096 4096 NT_STATUS_OK
ReadX 10321 49152 4096 4096 NT_STATUS_OK
ReadX 10321 53248 4096 4096 NT_STATUS_OK
ReadX 10321 57344 4096 4096 NT_STATUS_OK
ReadX 10321 61440 4096 4096 NT_STATUS_OK
ReadX 10321 65536 4096 4096 NT_STATUS_OK
ReadX 10321 69632 4096 4096 NT_STATUS_OK
ReadX 10321 73728 4096 4096 NT_STATUS_OK
ReadX 10321 77824 4096 4096 NT_STATUS_OK
ReadX 10321 81920 4096 4096 NT_STATUS_OK
ReadX 10321 86016 4096 4096 NT_STATUS_OK
ReadX 10321 90112 4096 4096 NT_STATUS_OK
ReadX 10321 94208 4096 4096 NT_STATUS_OK
ReadX 10321 98304 4096 4096 NT_STATUS_OK
ReadX 10321 102400 4096 4096 NT_STATUS_OK
ReadX 10321 106496 4096 4096 NT_STATUS_OK
ReadX 10321 110592 4096 4096 NT_STATUS_OK
ReadX 10321 114688 4096 4096 NT_STATUS_OK
ReadX 10321 118784 4096 4096 NT_STATUS_OK
ReadX 10321 122880 4096 4096 NT_STATUS_OK
ReadX 10321 126976 4096 4096 NT_STATUS_OK
ReadX 10321 131072 4096 4096 NT_STATUS_OK
ReadX 10321 135168 4096 4096 NT_STATUS_OK
ReadX 10321 139264 4096 4096 NT_STATUS_OK
ReadX 10321 143360 4096 4096 NT_STATUS_OK
ReadX 10321 147456 4096 4096 NT_STATUS_OK
ReadX 10321 151552 4096 4096 NT_STATUS_OK
ReadX 10321 155648 4096 4096 NT_STATUS_OK
ReadX 10321 159744 4096 4096 NT_STATUS_OK
ReadX 10321 163840 4096 4096 NT_STATUS_OK
ReadX 10321 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10321 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10322 NT_STATUS_OK
Close 10322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10320 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10325 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
Close 10325 NT_STATUS_OK
WriteX 10324 0 42388 42388 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
ReadX 10328 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10329 NT_STATUS_OK
WriteX 10329 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10329 258 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
WriteX 10329 0 42652 42652 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10331 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
ReadX 10333 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10338 NT_STATUS_OK
WriteX 10338 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
WriteX 10338 0 65536 65536 NT_STATUS_OK
WriteX 10338 65536 49 49 NT_STATUS_OK
Close 10338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 61440 61440 NT_STATUS_OK
ReadX 10339 61440 4096 4096 NT_STATUS_OK
ReadX 10339 65536 61440 61440 NT_STATUS_OK
ReadX 10339 126976 4096 4096 NT_STATUS_OK
ReadX 10339 131072 61440 61440 NT_STATUS_OK
ReadX 10339 192512 4096 4096 NT_STATUS_OK
ReadX 10339 196608 61440 61440 NT_STATUS_OK
ReadX 10339 258048 4096 4096 NT_STATUS_OK
ReadX 10339 262144 61440 61440 NT_STATUS_OK
ReadX 10339 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 61440 61440 NT_STATUS_OK
ReadX 10340 61440 4096 4096 NT_STATUS_OK
ReadX 10340 65536 61440 61440 NT_STATUS_OK
ReadX 10340 126976 4096 4096 NT_STATUS_OK
ReadX 10340 131072 61440 61440 NT_STATUS_OK
ReadX 10340 192512 4096 4096 NT_STATUS_OK
ReadX 10340 196608 61440 61440 NT_STATUS_OK
ReadX 10340 258048 4096 4096 NT_STATUS_OK
ReadX 10340 262144 61440 61440 NT_STATUS_OK
ReadX 10340 323584 4096 4096 NT_STATUS_OK
ReadX 10340 327680 61440 61440 NT_STATUS_OK
ReadX 10340 389120 4096 4096 NT_STATUS_OK
ReadX 10340 393216 61440 61440 NT_STATUS_OK
ReadX 10340 454656 4096 4096 NT_STATUS_OK
ReadX 10340 458752 61440 61440 NT_STATUS_OK
ReadX 10340 520192 4096 4096 NT_STATUS_OK
ReadX 10340 524288 61440 61440 NT_STATUS_OK
ReadX 10340 585728 4096 4096 NT_STATUS_OK
ReadX 10340 589824 61440 61440 NT_STATUS_OK
ReadX 10340 651264 4096 4096 NT_STATUS_OK
ReadX 10340 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 61440 61440 NT_STATUS_OK
ReadX 10341 61440 4096 4096 NT_STATUS_OK
ReadX 10341 65536 61440 61440 NT_STATUS_OK
ReadX 10341 126976 4096 4096 NT_STATUS_OK
ReadX 10341 131072 61440 61440 NT_STATUS_OK
ReadX 10341 192512 4096 4096 NT_STATUS_OK
ReadX 10341 196608 61440 61440 NT_STATUS_OK
ReadX 10341 258048 4096 4096 NT_STATUS_OK
ReadX 10341 262144 61440 61440 NT_STATUS_OK
ReadX 10341 323584 4096 4096 NT_STATUS_OK
ReadX 10341 327680 61440 61440 NT_STATUS_OK
ReadX 10341 389120 4096 4096 NT_STATUS_OK
ReadX 10341 393216 61440 61440 NT_STATUS_OK
ReadX 10341 454656 4096 4096 NT_STATUS_OK
ReadX 10341 458752 61440 61440 NT_STATUS_OK
ReadX 10341 520192 4096 4096 NT_STATUS_OK
ReadX 10341 524288 61440 61440 NT_STATUS_OK
ReadX 10341 585728 4096 4096 NT_STATUS_OK
ReadX 10341 589824 61440 61440 NT_STATUS_OK
ReadX 10341 651264 4096 4096 NT_STATUS_OK
ReadX 10341 655360 61440 61440 NT_STATUS_OK
ReadX 10341 716800 4096 4096 NT_STATUS_OK
ReadX 10341 720896 61440 61440 NT_STATUS_OK
ReadX 10341 782336 4096 4096 NT_STATUS_OK
ReadX 10341 786432 61440 61440 NT_STATUS_OK
ReadX 10341 847872 4096 4096 NT_STATUS_OK
ReadX 10341 851968 61440 61440 NT_STATUS_OK
ReadX 10341 913408 4096 4096 NT_STATUS_OK
ReadX 10341 917504 61440 61440 NT_STATUS_OK
ReadX 10341 978944 4096 4096 NT_STATUS_OK
ReadX 10341 983040 61440 61440 NT_STATUS_OK
ReadX 10341 1044480 4096 4096 NT_STATUS_OK
ReadX 10341 1048576 61440 61440 NT_STATUS_OK
ReadX 10341 1110016 4096 4096 NT_STATUS_OK
ReadX 10341 1114112 61440 61440 NT_STATUS_OK
ReadX 10341 1175552 4096 4096 NT_STATUS_OK
ReadX 10341 1179648 61440 61440 NT_STATUS_OK
ReadX 10341 1241088 4096 4096 NT_STATUS_OK
ReadX 10341 1245184 61440 61440 NT_STATUS_OK
ReadX 10341 1306624 4096 4096 NT_STATUS_OK
ReadX 10341 1310720 61440 61440 NT_STATUS_OK
ReadX 10341 1372160 4096 4096 NT_STATUS_OK
ReadX 10341 1376256 61440 61440 NT_STATUS_OK
ReadX 10341 1437696 4096 4096 NT_STATUS_OK
ReadX 10341 1441792 61440 61440 NT_STATUS_OK
ReadX 10341 1503232 4096 4096 NT_STATUS_OK
ReadX 10341 1507328 61440 61440 NT_STATUS_OK
ReadX 10341 1568768 4096 4096 NT_STATUS_OK
ReadX 10341 1572864 61440 61440 NT_STATUS_OK
ReadX 10341 1634304 4096 4096 NT_STATUS_OK
ReadX 10341 1638400 61440 61440 NT_STATUS_OK
ReadX 10341 1699840 4096 4096 NT_STATUS_OK
ReadX 10341 1703936 61440 61440 NT_STATUS_OK
ReadX 10341 1765376 4096 4096 NT_STATUS_OK
ReadX 10341 1769472 61440 61440 NT_STATUS_OK
ReadX 10341 1830912 4096 4096 NT_STATUS_OK
ReadX 10341 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10343 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
ReadX 10343 2156 24 24 NT_STATUS_OK
ReadX 10343 2139 276 276 NT_STATUS_OK
ReadX 10343 2136 14 14 NT_STATUS_OK
ReadX 10343 2136 7 7 NT_STATUS_OK
ReadX 10343 2138 12 12 NT_STATUS_OK
ReadX 10343 2137 8 8 NT_STATUS_OK
ReadX 10343 2135 15 15 NT_STATUS_OK
ReadX 10343 0 16 16 NT_STATUS_OK
ReadX 10343 16 2048 2048 NT_STATUS_OK
ReadX 10343 2064 2048 2048 NT_STATUS_OK
ReadX 10343 257 2048 2048 NT_STATUS_OK
ReadX 10343 385 2048 2048 NT_STATUS_OK
ReadX 10343 513 2048 2048 NT_STATUS_OK
ReadX 10343 641 2048 2048 NT_STATUS_OK
ReadX 10343 769 2048 2048 NT_STATUS_OK
ReadX 10343 897 2048 2048 NT_STATUS_OK
ReadX 10343 1025 2048 2048 NT_STATUS_OK
ReadX 10343 1153 2048 2048 NT_STATUS_OK
ReadX 10343 1281 2048 2048 NT_STATUS_OK
ReadX 10343 1409 2048 2048 NT_STATUS_OK
ReadX 10343 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10345 NT_STATUS_OK
Close 10345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10348 NT_STATUS_OK
WriteX 10348 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10348 258 NT_STATUS_OK
WriteX 10348 0 10575 10575 NT_STATUS_OK
Flush 10348 NT_STATUS_OK
Close 10348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10351 NT_STATUS_OK
ReadX 10351 0 4096 4096 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10353 NT_STATUS_OK
LockX 10353 2147483538 1 NT_STATUS_OK
UnlockX 10353 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1005 NT_STATUS_OK
ReadX 10353 0 512 512 NT_STATUS_OK
ReadX 10353 512 512 512 NT_STATUS_OK
ReadX 10353 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10354 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1005 NT_STATUS_OK
ReadX 10354 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10355 NT_STATUS_OK
LockX 10355 2147483538 1 NT_STATUS_OK
UnlockX 10355 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1005 NT_STATUS_OK
ReadX 10355 0 512 512 NT_STATUS_OK
ReadX 10355 512 512 512 NT_STATUS_OK
ReadX 10355 1024 512 512 NT_STATUS_OK
ReadX 10355 288 20 20 NT_STATUS_OK
ReadX 10355 308 2084 2084 NT_STATUS_OK
ReadX 10355 388 2084 2084 NT_STATUS_OK
ReadX 10355 388 2084 2084 NT_STATUS_OK
ReadX 10342 2157 1386 1386 NT_STATUS_OK
ReadX 10355 2472 399 399 NT_STATUS_OK
ReadX 10355 3072 1536 1536 NT_STATUS_OK
ReadX 10355 544 149 149 NT_STATUS_OK
ReadX 10355 693 485 485 NT_STATUS_OK
Close 10355 NT_STATUS_OK
ReadX 10342 2157 4096 4096 NT_STATUS_OK
ReadX 10342 6253 4096 4096 NT_STATUS_OK
ReadX 10342 10349 4096 4096 NT_STATUS_OK
ReadX 10342 14445 4096 4096 NT_STATUS_OK
ReadX 10342 18541 4096 4096 NT_STATUS_OK
ReadX 10342 22637 256 256 NT_STATUS_OK
ReadX 10342 22893 4096 4096 NT_STATUS_OK
ReadX 10342 26989 4096 4096 NT_STATUS_OK
ReadX 10342 31085 4096 4096 NT_STATUS_OK
ReadX 10342 35181 4096 4096 NT_STATUS_OK
ReadX 10342 39277 4096 4096 NT_STATUS_OK
ReadX 10342 43373 4096 4096 NT_STATUS_OK
ReadX 10342 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10342 2157 1024 1024 NT_STATUS_OK
ReadX 10342 1667 4688 4688 NT_STATUS_OK
ReadX 10342 6355 3516 3516 NT_STATUS_OK
ReadX 10342 9871 16384 16384 NT_STATUS_OK
ReadX 10342 26255 3771 3771 NT_STATUS_OK
ReadX 10342 30026 2048 2048 NT_STATUS_OK
ReadX 10342 32074 1024 1024 NT_STATUS_OK
ReadX 10342 33098 6652 6652 NT_STATUS_OK
ReadX 10342 39750 16384 16384 NT_STATUS_OK
ReadX 10342 56134 10496 10496 NT_STATUS_OK
ReadX 10342 66630 1784 1784 NT_STATUS_OK
ReadX 10342 68414 90 90 NT_STATUS_OK
ReadX 10342 68504 273 273 NT_STATUS_OK
ReadX 10342 68777 1600 1600 NT_STATUS_OK
ReadX 10342 70377 640 640 NT_STATUS_OK
ReadX 10342 71017 1280 1280 NT_STATUS_OK
ReadX 10342 72297 8464 8464 NT_STATUS_OK
ReadX 10342 80761 158 158 NT_STATUS_OK
ReadX 10342 80919 912 912 NT_STATUS_OK
ReadX 10342 81831 1980 1980 NT_STATUS_OK
ReadX 10342 83811 2256 2256 NT_STATUS_OK
ReadX 10342 86067 400 400 NT_STATUS_OK
ReadX 10342 86467 252 252 NT_STATUS_OK
ReadX 10342 86719 42 42 NT_STATUS_OK
ReadX 10342 86761 725 725 NT_STATUS_OK
ReadX 10342 2009 512 512 NT_STATUS_OK
ReadX 10342 3895 9 9 NT_STATUS_OK
ReadX 10342 3781 46 46 NT_STATUS_OK
ReadX 10342 4059 92 92 NT_STATUS_OK
ReadX 10342 3781 92 92 NT_STATUS_OK
ReadX 10342 3986 184 184 NT_STATUS_OK
ReadX 10342 3987 16384 16384 NT_STATUS_OK
ReadX 10342 3902 16384 16384 NT_STATUS_OK
ReadX 10342 3781 10240 10240 NT_STATUS_OK
ReadX 10342 3821 16384 16384 NT_STATUS_OK
ReadX 10342 3891 935 935 NT_STATUS_OK
ReadX 10342 4060 10240 10240 NT_STATUS_OK
ReadX 10342 4059 184 184 NT_STATUS_OK
ReadX 10342 256 184 184 NT_STATUS_OK
ReadX 10342 256 1026 1026 NT_STATUS_OK
ReadX 10342 3901 326 326 NT_STATUS_OK
ReadX 10342 3899 652 652 NT_STATUS_OK
ReadX 10342 256 2 2 NT_STATUS_OK
ReadX 10342 258 4948 4948 NT_STATUS_OK
Close 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10360 NT_STATUS_OK
WriteX 10360 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 258 NT_STATUS_OK
WriteX 10360 0 65536 65536 NT_STATUS_OK
WriteX 10360 65536 65536 65536 NT_STATUS_OK
WriteX 10360 131072 65536 65536 NT_STATUS_OK
WriteX 10360 196608 65536 65536 NT_STATUS_OK
WriteX 10360 262144 65536 65536 NT_STATUS_OK
WriteX 10360 327680 65536 65536 NT_STATUS_OK
WriteX 10360 393216 65536 65536 NT_STATUS_OK
WriteX 10360 458752 65536 65536 NT_STATUS_OK
WriteX 10360 524288 65536 65536 NT_STATUS_OK
WriteX 10360 589824 35257 35257 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10365 NT_STATUS_OK
WriteX 10365 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10365 258 NT_STATUS_OK
WriteX 10365 0 65536 65536 NT_STATUS_OK
WriteX 10365 65536 65536 65536 NT_STATUS_OK
WriteX 10365 131072 65536 65536 NT_STATUS_OK
WriteX 10365 196608 65536 65536 NT_STATUS_OK
WriteX 10365 262144 65536 65536 NT_STATUS_OK
WriteX 10365 327680 65536 65536 NT_STATUS_OK
WriteX 10365 393216 65536 65536 NT_STATUS_OK
WriteX 10365 458752 65536 65536 NT_STATUS_OK
WriteX 10365 524288 65536 65536 NT_STATUS_OK
WriteX 10365 589824 57598 57598 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10367 NT_STATUS_OK
WriteX 10367 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10367 258 NT_STATUS_OK
WriteX 10367 0 12543 12543 NT_STATUS_OK
Flush 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10373 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
ReadX 10373 1938 24 24 NT_STATUS_OK
ReadX 10373 1920 276 276 NT_STATUS_OK
ReadX 10373 1918 14 14 NT_STATUS_OK
ReadX 10373 1918 7 7 NT_STATUS_OK
ReadX 10373 1919 12 12 NT_STATUS_OK
ReadX 10373 1919 8 8 NT_STATUS_OK
ReadX 10373 1917 15 15 NT_STATUS_OK
ReadX 10373 0 16 16 NT_STATUS_OK
ReadX 10373 16 2048 2048 NT_STATUS_OK
ReadX 10373 2064 2048 2048 NT_STATUS_OK
ReadX 10373 257 2048 2048 NT_STATUS_OK
ReadX 10373 385 2048 2048 NT_STATUS_OK
ReadX 10373 513 2048 2048 NT_STATUS_OK
ReadX 10373 641 2048 2048 NT_STATUS_OK
ReadX 10373 769 2048 2048 NT_STATUS_OK
ReadX 10373 897 2048 2048 NT_STATUS_OK
ReadX 10373 1025 2048 2048 NT_STATUS_OK
ReadX 10373 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10375 NT_STATUS_OK
Close 10375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10378 NT_STATUS_OK
WriteX 10378 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10378 258 NT_STATUS_OK
WriteX 10378 0 11588 11588 NT_STATUS_OK
Flush 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
Close 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10383 NT_STATUS_OK
WriteX 10383 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 11615 11615 NT_STATUS_OK
Flush 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 16050 16050 NT_STATUS_OK
Close 10392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10372 1939 64 64 NT_STATUS_OK
ReadX 10372 128 248 248 NT_STATUS_OK
ReadX 10372 128 568 568 NT_STATUS_OK
ReadX 10372 3872 1536 1536 NT_STATUS_OK
ReadX 10372 3456 2560 2560 NT_STATUS_OK
ReadX 10372 3136 512 512 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
ReadX 10372 3264 3072 3072 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 3616 4096 4096 NT_STATUS_OK
ReadX 10372 1939 64 64 NT_STATUS_OK
ReadX 10372 128 248 248 NT_STATUS_OK
ReadX 10372 128 608 608 NT_STATUS_OK
ReadX 10372 2858 1024 1024 NT_STATUS_OK
ReadX 10372 2810 4096 4096 NT_STATUS_OK
ReadX 10372 2826 4096 4096 NT_STATUS_OK
ReadX 10372 2580 2048 2048 NT_STATUS_OK
ReadX 10372 2800 2560 2560 NT_STATUS_OK
ReadX 10372 2100 4096 4096 NT_STATUS_OK
ReadX 10372 2084 4096 4096 NT_STATUS_OK
ReadX 10372 868 4096 4096 NT_STATUS_OK
ReadX 10372 2324 4096 4096 NT_STATUS_OK
ReadX 10372 884 4096 4096 NT_STATUS_OK
ReadX 10372 2604 1024 1024 NT_STATUS_OK
ReadX 10372 580 4096 4096 NT_STATUS_OK
ReadX 10372 596 4096 4096 NT_STATUS_OK
ReadX 10372 2752 4096 4096 NT_STATUS_OK
ReadX 10372 2842 1024 1024 NT_STATUS_OK
ReadX 10372 660 4096 4096 NT_STATUS_OK
ReadX 10372 2720 4096 4096 NT_STATUS_OK
ReadX 10372 2736 4096 4096 NT_STATUS_OK
ReadX 10372 628 4096 4096 NT_STATUS_OK
ReadX 10372 2704 4096 4096 NT_STATUS_OK
ReadX 10372 1556 4096 4096 NT_STATUS_OK
ReadX 10372 576 4096 4096 NT_STATUS_OK
ReadX 10372 3168 1536 1536 NT_STATUS_OK
ReadX 10372 832 4096 4096 NT_STATUS_OK
ReadX 10372 1088 4096 4096 NT_STATUS_OK
ReadX 10372 1344 4096 4096 NT_STATUS_OK
ReadX 10372 1600 4096 4096 NT_STATUS_OK
ReadX 10372 1856 4096 4096 NT_STATUS_OK
ReadX 10372 2112 4096 4096 NT_STATUS_OK
ReadX 10372 1892 4096 4096 NT_STATUS_OK
ReadX 10372 820 4096 4096 NT_STATUS_OK
ReadX 10372 788 4096 4096 NT_STATUS_OK
ReadX 10372 1604 4096 4096 NT_STATUS_OK
ReadX 10372 3648 4096 4096 NT_STATUS_OK
ReadX 10372 2608 4096 4096 NT_STATUS_OK
ReadX 10372 548 4096 4096 NT_STATUS_OK
ReadX 10372 740 4096 4096 NT_STATUS_OK
ReadX 10372 1344 4096 4096 NT_STATUS_OK
ReadX 10372 3392 4096 4096 NT_STATUS_OK
ReadX 10372 3904 4096 4096 NT_STATUS_OK
ReadX 10372 644 4096 4096 NT_STATUS_OK
ReadX 10372 676 4096 4096 NT_STATUS_OK
ReadX 10372 2688 4096 4096 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 900 4096 4096 NT_STATUS_OK
ReadX 10372 1908 4096 4096 NT_STATUS_OK
ReadX 10372 852 4096 4096 NT_STATUS_OK
ReadX 10372 724 4096 4096 NT_STATUS_OK
ReadX 10372 2292 4096 4096 NT_STATUS_OK
ReadX 10372 612 4096 4096 NT_STATUS_OK
ReadX 10372 388 4096 4096 NT_STATUS_OK
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 500 4096 4096 NT_STATUS_OK
ReadX 10372 356 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 576 4096 4096 NT_STATUS_OK
ReadX 10372 340 4096 4096 NT_STATUS_OK
ReadX 10372 420 4096 4096 NT_STATUS_OK
ReadX 10372 1600 4096 4096 NT_STATUS_OK
ReadX 10372 404 4096 4096 NT_STATUS_OK
ReadX 10372 1428 4096 4096 NT_STATUS_OK
ReadX 10372 2656 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 452 4096 4096 NT_STATUS_OK
ReadX 10372 692 4096 4096 NT_STATUS_OK
ReadX 10372 564 4096 4096 NT_STATUS_OK
ReadX 10372 372 4096 4096 NT_STATUS_OK
ReadX 10372 468 4096 4096 NT_STATUS_OK
ReadX 10372 484 4096 4096 NT_STATUS_OK
ReadX 10372 1088 4096 4096 NT_STATUS_OK
ReadX 10372 1924 4096 4096 NT_STATUS_OK
ReadX 10372 2768 4096 4096 NT_STATUS_OK
ReadX 10372 832 4096 4096 NT_STATUS_OK
ReadX 10372 836 4096 4096 NT_STATUS_OK
ReadX 10372 1856 4096 4096 NT_STATUS_OK
ReadX 10372 2640 4096 4096 NT_STATUS_OK
ReadX 10372 436 4096 4096 NT_STATUS_OK
ReadX 10372 1828 4096 4096 NT_STATUS_OK
ReadX 10372 804 4096 4096 NT_STATUS_OK
ReadX 10372 1860 4096 4096 NT_STATUS_OK
ReadX 10372 1812 4096 4096 NT_STATUS_OK
ReadX 10372 756 4096 4096 NT_STATUS_OK
ReadX 10372 1636 4096 4096 NT_STATUS_OK
ReadX 10372 772 4096 4096 NT_STATUS_OK
ReadX 10372 2036 4096 4096 NT_STATUS_OK
ReadX 10372 1220 4096 4096 NT_STATUS_OK
ReadX 10372 1652 4096 4096 NT_STATUS_OK
ReadX 10372 2588 4096 4096 NT_STATUS_OK
ReadX 10372 916 4096 4096 NT_STATUS_OK
ReadX 10372 260 4096 4096 NT_STATUS_OK
ReadX 10372 932 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 308 4096 4096 NT_STATUS_OK
ReadX 10372 292 4096 4096 NT_STATUS_OK
ReadX 10372 1140 4096 4096 NT_STATUS_OK
ReadX 10372 276 4096 4096 NT_STATUS_OK
ReadX 10372 2020 4096 4096 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
ReadX 10372 516 4096 4096 NT_STATUS_OK
ReadX 10372 1844 4096 4096 NT_STATUS_OK
ReadX 10372 1124 4096 4096 NT_STATUS_OK
ReadX 10372 3136 4096 4096 NT_STATUS_OK
ReadX 10372 324 4096 4096 NT_STATUS_OK
ReadX 10372 1156 4096 4096 NT_STATUS_OK
ReadX 10372 1172 4096 4096 NT_STATUS_OK
ReadX 10372 2112 4096 4096 NT_STATUS_OK
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 964 4096 4096 NT_STATUS_OK
ReadX 10372 980 4096 4096 NT_STATUS_OK
ReadX 10372 1012 4096 4096 NT_STATUS_OK
ReadX 10372 532 4096 4096 NT_STATUS_OK
ReadX 10372 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10372 1620 4096 4096 NT_STATUS_OK
ReadX 10372 1604 4096 4096 NT_STATUS_OK
ReadX 10372 2116 4096 4096 NT_STATUS_OK
ReadX 10372 2132 4096 4096 NT_STATUS_OK
ReadX 10372 2148 4096 4096 NT_STATUS_OK
ReadX 10372 2276 4096 4096 NT_STATUS_OK
ReadX 10372 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10397 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
WriteX 10397 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10397 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1004 NT_STATUS_OK
Close 10354 NT_STATUS_OK
WriteX 10397 0 65536 65536 NT_STATUS_OK
WriteX 10397 65536 64850 64850 NT_STATUS_OK
Close 10397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10399 NT_STATUS_OK
WriteX 10399 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 258 NT_STATUS_OK
ReadX 10372 2068 4096 4096 NT_STATUS_OK
ReadX 10372 1588 4096 4096 NT_STATUS_OK
ReadX 10372 1572 4096 4096 NT_STATUS_OK
WriteX 10399 0 18630 18630 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10372 612 4096 4096 NT_STATUS_OK
ReadX 10372 564 4096 4096 NT_STATUS_OK
ReadX 10372 1876 4096 4096 NT_STATUS_OK
ReadX 10372 628 4096 4096 NT_STATUS_OK
ReadX 10372 740 4096 4096 NT_STATUS_OK
ReadX 10372 724 4096 4096 NT_STATUS_OK
ReadX 10372 644 4096 4096 NT_STATUS_OK
ReadX 10372 2324 4096 4096 NT_STATUS_OK
ReadX 10372 660 4096 4096 NT_STATUS_OK
ReadX 10372 852 4096 4096 NT_STATUS_OK
ReadX 10372 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 580 4096 4096 NT_STATUS_OK
ReadX 10372 3136 512 512 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 61440 4096 4096 NT_STATUS_OK
ReadX 10404 126976 4096 4096 NT_STATUS_OK
WriteX 10404 0 65536 65536 NT_STATUS_OK
WriteX 10404 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 61440 4096 4096 NT_STATUS_OK
ReadX 10405 126976 4096 4096 NT_STATUS_OK
ReadX 10405 192512 4096 4096 NT_STATUS_OK
ReadX 10405 258048 4096 4096 NT_STATUS_OK
WriteX 10405 0 65536 65536 NT_STATUS_OK
WriteX 10405 65536 65536 65536 NT_STATUS_OK
WriteX 10405 131072 65536 65536 NT_STATUS_OK
WriteX 10405 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 61440 4096 4096 NT_STATUS_OK
ReadX 10406 126976 4096 4096 NT_STATUS_OK
ReadX 10406 192512 4096 4096 NT_STATUS_OK
ReadX 10406 258048 4096 4096 NT_STATUS_OK
ReadX 10406 323584 4096 4096 NT_STATUS_OK
ReadX 10406 389120 4096 4096 NT_STATUS_OK
ReadX 10406 454656 4096 4096 NT_STATUS_OK
ReadX 10406 520192 4096 4096 NT_STATUS_OK
WriteX 10406 0 65536 65536 NT_STATUS_OK
WriteX 10406 65536 65536 65536 NT_STATUS_OK
WriteX 10406 131072 65536 65536 NT_STATUS_OK
WriteX 10406 196608 65536 65536 NT_STATUS_OK
WriteX 10406 262144 65536 65536 NT_STATUS_OK
WriteX 10406 327680 65536 65536 NT_STATUS_OK
WriteX 10406 393216 65536 65536 NT_STATUS_OK
WriteX 10406 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10409 NT_STATUS_OK
WriteX 10409 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10407 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10411 NT_STATUS_OK
Close 10411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10414 NT_STATUS_OK
WriteX 10414 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10414 258 NT_STATUS_OK
WriteX 10414 0 62591 62591 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10419 NT_STATUS_OK
WriteX 10419 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10419 258 NT_STATUS_OK
WriteX 10419 0 10845 10845 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10421 NT_STATUS_OK
Close 10421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10424 NT_STATUS_OK
WriteX 10424 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
WriteX 10424 0 30118 30118 NT_STATUS_OK
Close 10424 NT_STATUS_OK
WriteX 10407 0 4096 4096 NT_STATUS_OK
WriteX 10409 0 64 64 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 61440 61440 NT_STATUS_OK
ReadX 10426 61440 4096 4096 NT_STATUS_OK
ReadX 10426 65536 61440 61440 NT_STATUS_OK
ReadX 10426 126976 4096 4096 NT_STATUS_OK
ReadX 10426 131072 61440 61440 NT_STATUS_OK
ReadX 10426 192512 4096 4096 NT_STATUS_OK
ReadX 10426 196608 61440 61440 NT_STATUS_OK
ReadX 10426 258048 4096 4096 NT_STATUS_OK
ReadX 10426 262144 61440 61440 NT_STATUS_OK
ReadX 10426 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 61440 61440 NT_STATUS_OK
ReadX 10427 61440 4096 4096 NT_STATUS_OK
ReadX 10427 65536 61440 61440 NT_STATUS_OK
ReadX 10427 126976 4096 4096 NT_STATUS_OK
ReadX 10427 131072 61440 61440 NT_STATUS_OK
ReadX 10427 192512 4096 4096 NT_STATUS_OK
ReadX 10427 196608 61440 61440 NT_STATUS_OK
ReadX 10427 258048 4096 4096 NT_STATUS_OK
ReadX 10427 262144 61440 61440 NT_STATUS_OK
ReadX 10427 323584 4096 4096 NT_STATUS_OK
ReadX 10427 327680 61440 61440 NT_STATUS_OK
ReadX 10427 389120 4096 4096 NT_STATUS_OK
ReadX 10427 393216 61440 61440 NT_STATUS_OK
ReadX 10427 454656 4096 4096 NT_STATUS_OK
ReadX 10427 458752 61440 61440 NT_STATUS_OK
ReadX 10427 520192 4096 4096 NT_STATUS_OK
ReadX 10427 524288 61440 61440 NT_STATUS_OK
ReadX 10427 585728 4096 4096 NT_STATUS_OK
ReadX 10427 589824 61440 61440 NT_STATUS_OK
ReadX 10427 651264 4096 4096 NT_STATUS_OK
ReadX 10427 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 61440 61440 NT_STATUS_OK
ReadX 10428 61440 4096 4096 NT_STATUS_OK
ReadX 10428 65536 61440 61440 NT_STATUS_OK
ReadX 10428 126976 4096 4096 NT_STATUS_OK
ReadX 10428 131072 61440 61440 NT_STATUS_OK
ReadX 10428 192512 4096 4096 NT_STATUS_OK
ReadX 10428 196608 61440 61440 NT_STATUS_OK
ReadX 10428 258048 4096 4096 NT_STATUS_OK
ReadX 10428 262144 61440 61440 NT_STATUS_OK
ReadX 10428 323584 4096 4096 NT_STATUS_OK
ReadX 10428 327680 61440 61440 NT_STATUS_OK
ReadX 10428 389120 4096 4096 NT_STATUS_OK
ReadX 10428 393216 61440 61440 NT_STATUS_OK
ReadX 10428 454656 4096 4096 NT_STATUS_OK
ReadX 10428 458752 61440 61440 NT_STATUS_OK
ReadX 10428 520192 4096 4096 NT_STATUS_OK
ReadX 10428 524288 61440 61440 NT_STATUS_OK
ReadX 10428 585728 4096 4096 NT_STATUS_OK
ReadX 10428 589824 61440 61440 NT_STATUS_OK
ReadX 10428 651264 4096 4096 NT_STATUS_OK
ReadX 10428 655360 61440 61440 NT_STATUS_OK
ReadX 10428 716800 4096 4096 NT_STATUS_OK
ReadX 10428 720896 61440 61440 NT_STATUS_OK
ReadX 10428 782336 4096 4096 NT_STATUS_OK
ReadX 10428 786432 61440 61440 NT_STATUS_OK
ReadX 10428 847872 4096 4096 NT_STATUS_OK
ReadX 10428 851968 61440 61440 NT_STATUS_OK
ReadX 10428 913408 4096 4096 NT_STATUS_OK
ReadX 10428 917504 61440 61440 NT_STATUS_OK
ReadX 10428 978944 4096 4096 NT_STATUS_OK
ReadX 10428 983040 61440 61440 NT_STATUS_OK
ReadX 10428 1044480 4096 4096 NT_STATUS_OK
ReadX 10428 1048576 61440 61440 NT_STATUS_OK
ReadX 10428 1110016 4096 4096 NT_STATUS_OK
ReadX 10428 1114112 61440 61440 NT_STATUS_OK
ReadX 10428 1175552 4096 4096 NT_STATUS_OK
ReadX 10428 1179648 61440 61440 NT_STATUS_OK
ReadX 10428 1241088 4096 4096 NT_STATUS_OK
ReadX 10428 1245184 61440 61440 NT_STATUS_OK
ReadX 10428 1306624 4096 4096 NT_STATUS_OK
ReadX 10428 1310720 61440 61440 NT_STATUS_OK
ReadX 10428 1372160 4096 4096 NT_STATUS_OK
ReadX 10428 1376256 61440 61440 NT_STATUS_OK
ReadX 10428 1437696 4096 4096 NT_STATUS_OK
ReadX 10428 1441792 61440 61440 NT_STATUS_OK
ReadX 10428 1503232 4096 4096 NT_STATUS_OK
ReadX 10428 1507328 61440 61440 NT_STATUS_OK
ReadX 10428 1568768 4096 4096 NT_STATUS_OK
ReadX 10428 1572864 61440 61440 NT_STATUS_OK
ReadX 10428 1634304 4096 4096 NT_STATUS_OK
ReadX 10428 1638400 61440 61440 NT_STATUS_OK
ReadX 10428 1699840 4096 4096 NT_STATUS_OK
ReadX 10428 1703936 61440 61440 NT_STATUS_OK
ReadX 10428 1765376 4096 4096 NT_STATUS_OK
ReadX 10428 1769472 61440 61440 NT_STATUS_OK
ReadX 10428 1830912 4096 4096 NT_STATUS_OK
ReadX 10428 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
ReadX 10433 4096 4096 4096 NT_STATUS_OK
ReadX 10433 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10437 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 8192 8192 NT_STATUS_OK
ReadX 10441 8192 8192 8192 NT_STATUS_OK
ReadX 10441 16384 8192 8192 NT_STATUS_OK
ReadX 10441 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10446 NT_STATUS_OK
WriteX 10446 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10446 258 NT_STATUS_OK
WriteX 10446 0 10438 10438 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10447 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10450 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10451 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10452 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10454 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
ReadX 10455 4096 4096 4096 NT_STATUS_OK
ReadX 10455 8192 4096 4096 NT_STATUS_OK
ReadX 10455 12288 8192 8192 NT_STATUS_OK
ReadX 10455 20480 8192 8192 NT_STATUS_OK
ReadX 10455 28672 8192 8192 NT_STATUS_OK
ReadX 10455 36864 8192 8192 NT_STATUS_OK
ReadX 10455 45056 8192 8192 NT_STATUS_OK
ReadX 10455 53248 8192 8192 NT_STATUS_OK
ReadX 10455 61440 8192 8192 NT_STATUS_OK
ReadX 10455 69632 8192 8192 NT_STATUS_OK
ReadX 10455 77824 8192 8192 NT_STATUS_OK
ReadX 10455 86016 8192 8192 NT_STATUS_OK
ReadX 10455 94208 8192 8192 NT_STATUS_OK
ReadX 10455 102400 8192 8192 NT_STATUS_OK
ReadX 10455 110592 8192 8192 NT_STATUS_OK
ReadX 10455 118784 8192 8192 NT_STATUS_OK
ReadX 10455 126976 8192 8192 NT_STATUS_OK
ReadX 10455 135168 8192 8192 NT_STATUS_OK
ReadX 10455 143360 8192 8192 NT_STATUS_OK
ReadX 10455 151552 8192 8192 NT_STATUS_OK
ReadX 10455 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 28489 28489 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10461 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10463 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10464 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 8192 8192 NT_STATUS_OK
ReadX 10467 8192 8192 8192 NT_STATUS_OK
ReadX 10467 16384 8192 8192 NT_STATUS_OK
ReadX 10467 24576 8192 8192 NT_STATUS_OK
ReadX 10467 32768 16384 16384 NT_STATUS_OK
ReadX 10467 49152 8192 8192 NT_STATUS_OK
ReadX 10467 57344 8192 8192 NT_STATUS_OK
ReadX 10467 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10469 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10472 NT_STATUS_OK
WriteX 10472 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10472 258 NT_STATUS_OK
WriteX 10472 0 29253 29253 NT_STATUS_OK
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10479 NT_STATUS_OK
WriteX 10479 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10479 258 NT_STATUS_OK
WriteX 10479 0 30183 30183 NT_STATUS_OK
Close 10479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10480 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10482 NT_STATUS_OK
WriteX 10482 0 510 510 NT_STATUS_OK
WriteX 10482 510 512 512 NT_STATUS_OK
WriteX 10482 1022 510 510 NT_STATUS_OK
WriteX 10482 1532 510 510 NT_STATUS_OK
WriteX 10482 2042 168 168 NT_STATUS_OK
Close 10482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 61440 4096 4096 NT_STATUS_OK
ReadX 10486 126976 4096 4096 NT_STATUS_OK
WriteX 10486 0 65536 65536 NT_STATUS_OK
WriteX 10486 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 61440 4096 4096 NT_STATUS_OK
ReadX 10487 126976 4096 4096 NT_STATUS_OK
ReadX 10487 192512 4096 4096 NT_STATUS_OK
ReadX 10487 258048 4096 4096 NT_STATUS_OK
WriteX 10487 0 65536 65536 NT_STATUS_OK
WriteX 10487 65536 65536 65536 NT_STATUS_OK
WriteX 10487 131072 65536 65536 NT_STATUS_OK
WriteX 10487 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 61440 4096 4096 NT_STATUS_OK
ReadX 10488 126976 4096 4096 NT_STATUS_OK
ReadX 10488 192512 4096 4096 NT_STATUS_OK
ReadX 10488 258048 4096 4096 NT_STATUS_OK
ReadX 10488 323584 4096 4096 NT_STATUS_OK
ReadX 10488 389120 4096 4096 NT_STATUS_OK
ReadX 10488 454656 4096 4096 NT_STATUS_OK
ReadX 10488 520192 4096 4096 NT_STATUS_OK
WriteX 10488 0 65536 65536 NT_STATUS_OK
WriteX 10488 65536 65536 65536 NT_STATUS_OK
WriteX 10488 131072 65536 65536 NT_STATUS_OK
WriteX 10488 196608 65536 65536 NT_STATUS_OK
WriteX 10488 262144 65536 65536 NT_STATUS_OK
WriteX 10488 327680 65536 65536 NT_STATUS_OK
WriteX 10488 393216 65536 65536 NT_STATUS_OK
WriteX 10488 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10495 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10507 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10523 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10533 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10551 NT_STATUS_OK
Close 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10557 NT_STATUS_OK
WriteX 10557 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10557 0 65536 65536 NT_STATUS_OK
WriteX 10557 65536 65536 65536 NT_STATUS_OK
WriteX 10557 131072 65536 65536 NT_STATUS_OK
WriteX 10557 196608 65536 65536 NT_STATUS_OK
WriteX 10557 262144 26634 26634 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
ReadX 10565 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10598 NT_STATUS_OK
Close 10598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10603 NT_STATUS_OK
Close 10603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10608 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10613 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10642 NT_STATUS_OK
Close 10642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 4096 4096 NT_STATUS_OK
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 4096 4096 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 4096 4096 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10689 0 4096 4096 NT_STATUS_OK
Close 10689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
ReadX 10691 4096 4096 4096 NT_STATUS_OK
ReadX 10691 8192 4096 4096 NT_STATUS_OK
ReadX 10691 12288 4096 4096 NT_STATUS_OK
ReadX 10691 16384 4096 4096 NT_STATUS_OK
ReadX 10691 20480 4096 4096 NT_STATUS_OK
ReadX 10691 24576 4096 4096 NT_STATUS_OK
ReadX 10691 28672 4096 4096 NT_STATUS_OK
ReadX 10691 32768 4096 4096 NT_STATUS_OK
ReadX 10691 36864 4096 4096 NT_STATUS_OK
ReadX 10691 40960 4096 4096 NT_STATUS_OK
ReadX 10691 45056 4096 4096 NT_STATUS_OK
ReadX 10691 49152 4096 4096 NT_STATUS_OK
ReadX 10691 53248 4096 4096 NT_STATUS_OK
ReadX 10691 57344 4096 4096 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 65536 4096 4096 NT_STATUS_OK
ReadX 10691 69632 4096 4096 NT_STATUS_OK
ReadX 10691 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10691 1004 NT_STATUS_OK
WriteX 10691 0 4096 4096 NT_STATUS_OK
Close 10691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10692 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10697 NT_STATUS_OK
WriteX 10697 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10697 258 NT_STATUS_OK
WriteX 10697 0 65536 65536 NT_STATUS_OK
WriteX 10697 65536 19979 19979 NT_STATUS_OK
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
QUERY_FILE_INFORMATION 10698 1004 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
SET_FILE_INFORMATION 10698 1004 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10703 1004 NT_STATUS_OK
WriteX 10703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 65536 65536 NT_STATUS_OK
WriteX 10709 65536 17654 17654 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
SET_FILE_INFORMATION 10711 1004 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
ReadX 10715 4096 4096 4096 NT_STATUS_OK
ReadX 10715 8192 4096 4096 NT_STATUS_OK
ReadX 10715 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10715 16384 4096 4096 NT_STATUS_OK
ReadX 10715 20480 4096 4096 NT_STATUS_OK
ReadX 10715 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10716 NT_STATUS_OK
ReadX 10716 0 4096 4096 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10724 NT_STATUS_OK
WriteX 10724 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 258 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 19490 19490 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
SET_FILE_INFORMATION 10726 1004 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10730 0 4096 4096 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
ReadX 10732 4096 4096 4096 NT_STATUS_OK
ReadX 10732 8192 4096 4096 NT_STATUS_OK
ReadX 10732 12288 4096 4096 NT_STATUS_OK
ReadX 10732 16384 4096 4096 NT_STATUS_OK
ReadX 10732 20480 4096 4096 NT_STATUS_OK
ReadX 10732 24576 4096 4096 NT_STATUS_OK
ReadX 10732 28672 4096 4096 NT_STATUS_OK
ReadX 10732 32768 4096 4096 NT_STATUS_OK
ReadX 10732 36864 4096 4096 NT_STATUS_OK
ReadX 10732 40960 4096 4096 NT_STATUS_OK
ReadX 10732 45056 4096 4096 NT_STATUS_OK
ReadX 10732 49152 4096 4096 NT_STATUS_OK
ReadX 10732 53248 4096 4096 NT_STATUS_OK
ReadX 10732 57344 4096 4096 NT_STATUS_OK
ReadX 10732 61440 4096 4096 NT_STATUS_OK
ReadX 10732 65536 4096 4096 NT_STATUS_OK
ReadX 10732 69632 4096 4096 NT_STATUS_OK
ReadX 10732 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10732 1004 NT_STATUS_OK
WriteX 10732 0 4096 4096 NT_STATUS_OK
Close 10732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10733 NT_STATUS_OK
SET_FILE_INFORMATION 10733 1004 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 65536 65536 NT_STATUS_OK
WriteX 10738 65536 8866 8866 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Flush 10739 NT_STATUS_OK
SET_FILE_INFORMATION 10739 1004 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Flush 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10746 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10749 NT_STATUS_OK
WriteX 10749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10749 258 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 9298 9298 NT_STATUS_OK
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
Flush 10750 NT_STATUS_OK
SET_FILE_INFORMATION 10750 1004 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
Flush 10750 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
SET_FILE_INFORMATION 10751 1004 NT_STATUS_OK
Close 10751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10756 0 4096 4096 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10757 4096 4096 4096 NT_STATUS_OK
ReadX 10757 8192 4096 4096 NT_STATUS_OK
ReadX 10757 12288 4096 4096 NT_STATUS_OK
ReadX 10757 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10760 1004 NT_STATUS_OK
WriteX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10761 NT_STATUS_OK
Close 10761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10763 NT_STATUS_OK
Close 10763 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10766 NT_STATUS_OK
WriteX 10766 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 258 NT_STATUS_OK
WriteX 10766 0 65536 65536 NT_STATUS_OK
WriteX 10766 65536 11540 11540 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
SET_FILE_INFORMATION 10767 1004 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10772 NT_STATUS_OK
ReadX 10772 61440 4096 4096 NT_STATUS_OK
ReadX 10772 126976 4096 4096 NT_STATUS_OK
WriteX 10772 0 65536 65536 NT_STATUS_OK
WriteX 10772 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 61440 4096 4096 NT_STATUS_OK
ReadX 10773 126976 4096 4096 NT_STATUS_OK
ReadX 10773 192512 4096 4096 NT_STATUS_OK
ReadX 10773 258048 4096 4096 NT_STATUS_OK
WriteX 10773 0 65536 65536 NT_STATUS_OK
WriteX 10773 65536 65536 65536 NT_STATUS_OK
WriteX 10773 131072 65536 65536 NT_STATUS_OK
WriteX 10773 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10774 NT_STATUS_OK
ReadX 10774 61440 4096 4096 NT_STATUS_OK
ReadX 10774 126976 4096 4096 NT_STATUS_OK
ReadX 10774 192512 4096 4096 NT_STATUS_OK
ReadX 10774 258048 4096 4096 NT_STATUS_OK
ReadX 10774 323584 4096 4096 NT_STATUS_OK
ReadX 10774 389120 4096 4096 NT_STATUS_OK
ReadX 10774 454656 4096 4096 NT_STATUS_OK
ReadX 10774 520192 4096 4096 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
WriteX 10774 131072 65536 65536 NT_STATUS_OK
WriteX 10774 196608 65536 65536 NT_STATUS_OK
WriteX 10774 262144 65536 65536 NT_STATUS_OK
WriteX 10774 327680 65536 65536 NT_STATUS_OK
WriteX 10774 393216 65536 65536 NT_STATUS_OK
WriteX 10774 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
ReadX 10775 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 53 53 NT_STATUS_OK
Close 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10777 NT_STATUS_OK
Close 10777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10775 8192 4096 4096 NT_STATUS_OK
ReadX 10775 12288 4096 4096 NT_STATUS_OK
WriteX 10779 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10779 258 NT_STATUS_OK
ReadX 10775 16384 4096 4096 NT_STATUS_OK
ReadX 10775 20480 4096 4096 NT_STATUS_OK
WriteX 10779 0 15360 15360 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
WriteX 10780 0 4096 4096 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10783 4096 4096 4096 NT_STATUS_OK
ReadX 10783 8192 4096 4096 NT_STATUS_OK
ReadX 10783 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
ReadX 10786 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
ReadX 10787 4096 4096 4096 NT_STATUS_OK
ReadX 10787 8192 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10788 NT_STATUS_OK
WriteX 10788 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
WriteX 10788 0 15360 15360 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10793 NT_STATUS_OK
SET_FILE_INFORMATION 10793 1004 NT_STATUS_OK
Close 10793 NT_STATUS_OK
WriteX 10789 0 4096 4096 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
ReadX 10796 4096 4096 4096 NT_STATUS_OK
ReadX 10796 8192 4096 4096 NT_STATUS_OK
ReadX 10796 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10798 NT_STATUS_OK
WriteX 10798 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10798 258 NT_STATUS_OK
WriteX 10798 0 53 53 NT_STATUS_OK
Close 10798 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10797 4096 4096 4096 NT_STATUS_OK
ReadX 10797 8192 4096 4096 NT_STATUS_OK
ReadX 10797 12288 4096 4096 NT_STATUS_OK
WriteX 10801 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 12006 12006 NT_STATUS_OK
Close 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Close 10802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10806 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 11991 11991 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10813 NT_STATUS_OK
SET_FILE_INFORMATION 10813 1004 NT_STATUS_OK
Close 10813 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10816 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
ReadX 10816 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
Close 10792 NT_STATUS_OK
WriteX 10796 0 19054 19054 NT_STATUS_OK
WriteX 10816 0 12288 12288 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 61440 61440 NT_STATUS_OK
ReadX 10823 61440 4096 4096 NT_STATUS_OK
ReadX 10823 65536 61440 61440 NT_STATUS_OK
ReadX 10823 126976 4096 4096 NT_STATUS_OK
ReadX 10823 131072 61440 61440 NT_STATUS_OK
ReadX 10823 192512 4096 4096 NT_STATUS_OK
ReadX 10823 196608 61440 61440 NT_STATUS_OK
ReadX 10823 258048 4096 4096 NT_STATUS_OK
ReadX 10823 262144 61440 61440 NT_STATUS_OK
ReadX 10823 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 61440 61440 NT_STATUS_OK
ReadX 10824 61440 4096 4096 NT_STATUS_OK
ReadX 10824 65536 61440 61440 NT_STATUS_OK
ReadX 10824 126976 4096 4096 NT_STATUS_OK
ReadX 10824 131072 61440 61440 NT_STATUS_OK
ReadX 10824 192512 4096 4096 NT_STATUS_OK
ReadX 10824 196608 61440 61440 NT_STATUS_OK
ReadX 10824 258048 4096 4096 NT_STATUS_OK
ReadX 10824 262144 61440 61440 NT_STATUS_OK
ReadX 10824 323584 4096 4096 NT_STATUS_OK
ReadX 10824 327680 61440 61440 NT_STATUS_OK
ReadX 10824 389120 4096 4096 NT_STATUS_OK
ReadX 10824 393216 61440 61440 NT_STATUS_OK
ReadX 10824 454656 4096 4096 NT_STATUS_OK
ReadX 10824 458752 61440 61440 NT_STATUS_OK
ReadX 10824 520192 4096 4096 NT_STATUS_OK
ReadX 10824 524288 61440 61440 NT_STATUS_OK
ReadX 10824 585728 4096 4096 NT_STATUS_OK
ReadX 10824 589824 61440 61440 NT_STATUS_OK
ReadX 10824 651264 4096 4096 NT_STATUS_OK
ReadX 10824 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 61440 61440 NT_STATUS_OK
ReadX 10825 61440 4096 4096 NT_STATUS_OK
ReadX 10825 65536 61440 61440 NT_STATUS_OK
ReadX 10825 126976 4096 4096 NT_STATUS_OK
ReadX 10825 131072 61440 61440 NT_STATUS_OK
ReadX 10825 192512 4096 4096 NT_STATUS_OK
ReadX 10825 196608 61440 61440 NT_STATUS_OK
ReadX 10825 258048 4096 4096 NT_STATUS_OK
ReadX 10825 262144 61440 61440 NT_STATUS_OK
ReadX 10825 323584 4096 4096 NT_STATUS_OK
ReadX 10825 327680 61440 61440 NT_STATUS_OK
ReadX 10825 389120 4096 4096 NT_STATUS_OK
ReadX 10825 393216 61440 61440 NT_STATUS_OK
ReadX 10825 454656 4096 4096 NT_STATUS_OK
ReadX 10825 458752 61440 61440 NT_STATUS_OK
ReadX 10825 520192 4096 4096 NT_STATUS_OK
ReadX 10825 524288 61440 61440 NT_STATUS_OK
ReadX 10825 585728 4096 4096 NT_STATUS_OK
ReadX 10825 589824 61440 61440 NT_STATUS_OK
ReadX 10825 651264 4096 4096 NT_STATUS_OK
ReadX 10825 655360 61440 61440 NT_STATUS_OK
ReadX 10825 716800 4096 4096 NT_STATUS_OK
ReadX 10825 720896 61440 61440 NT_STATUS_OK
ReadX 10825 782336 4096 4096 NT_STATUS_OK
ReadX 10825 786432 61440 61440 NT_STATUS_OK
ReadX 10825 847872 4096 4096 NT_STATUS_OK
ReadX 10825 851968 61440 61440 NT_STATUS_OK
ReadX 10825 913408 4096 4096 NT_STATUS_OK
ReadX 10825 917504 61440 61440 NT_STATUS_OK
ReadX 10825 978944 4096 4096 NT_STATUS_OK
ReadX 10825 983040 61440 61440 NT_STATUS_OK
ReadX 10825 1044480 4096 4096 NT_STATUS_OK
ReadX 10825 1048576 61440 61440 NT_STATUS_OK
ReadX 10825 1110016 4096 4096 NT_STATUS_OK
ReadX 10825 1114112 61440 61440 NT_STATUS_OK
ReadX 10825 1175552 4096 4096 NT_STATUS_OK
ReadX 10825 1179648 61440 61440 NT_STATUS_OK
ReadX 10825 1241088 4096 4096 NT_STATUS_OK
ReadX 10825 1245184 61440 61440 NT_STATUS_OK
ReadX 10825 1306624 4096 4096 NT_STATUS_OK
ReadX 10825 1310720 61440 61440 NT_STATUS_OK
ReadX 10825 1372160 4096 4096 NT_STATUS_OK
ReadX 10825 1376256 61440 61440 NT_STATUS_OK
ReadX 10825 1437696 4096 4096 NT_STATUS_OK
ReadX 10825 1441792 61440 61440 NT_STATUS_OK
ReadX 10825 1503232 4096 4096 NT_STATUS_OK
ReadX 10825 1507328 61440 61440 NT_STATUS_OK
ReadX 10825 1568768 4096 4096 NT_STATUS_OK
ReadX 10825 1572864 61440 61440 NT_STATUS_OK
ReadX 10825 1634304 4096 4096 NT_STATUS_OK
ReadX 10825 1638400 61440 61440 NT_STATUS_OK
ReadX 10825 1699840 4096 4096 NT_STATUS_OK
ReadX 10825 1703936 61440 61440 NT_STATUS_OK
ReadX 10825 1765376 4096 4096 NT_STATUS_OK
ReadX 10825 1769472 61440 61440 NT_STATUS_OK
ReadX 10825 1830912 4096 4096 NT_STATUS_OK
ReadX 10825 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10831 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10832 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 1004 NT_STATUS_OK
WriteX 10832 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10833 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10834 NT_STATUS_OK
WriteX 10834 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10834 258 NT_STATUS_OK
WriteX 10834 0 491 491 NT_STATUS_OK
Close 10834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10832 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10838 NT_STATUS_OK
WriteX 10838 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10838 258 NT_STATUS_OK
WriteX 10838 0 543 543 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10852 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 1004 NT_STATUS_OK
WriteX 10852 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 258 NT_STATUS_OK
WriteX 10852 0 2048 2048 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
Flush 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10858 NT_STATUS_OK
WriteX 10858 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10858 258 NT_STATUS_OK
WriteX 10858 0 2048 2048 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10864 NT_STATUS_OK
WriteX 10864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10864 258 NT_STATUS_OK
WriteX 10864 0 2048 2048 NT_STATUS_OK
Close 10864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10865 NT_STATUS_OK
ReadX 10865 0 2048 2048 NT_STATUS_OK
ReadX 10843 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10859 0 4096 4096 NT_STATUS_OK
WriteX 10843 0 8192 8192 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
WriteX 10845 0 4096 4096 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10869 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10843 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10872 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10877 NT_STATUS_OK
ReadX 10877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10878 NT_STATUS_OK
ReadX 10878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10889 NT_STATUS_OK
QUERY_FILE_INFORMATION 10889 1004 NT_STATUS_OK
WriteX 10889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10889 258 NT_STATUS_OK
WriteX 10889 0 2048 2048 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10897 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 258 NT_STATUS_OK
WriteX 10897 0 2048 2048 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
Flush 10890 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10900 NT_STATUS_OK
WriteX 10900 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10900 258 NT_STATUS_OK
WriteX 10900 0 4096 4096 NT_STATUS_OK
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10902 NT_STATUS_OK
Close 10902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10903 NT_STATUS_OK
WriteX 10903 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10903 258 NT_STATUS_OK
WriteX 10903 0 4096 4096 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10904 0 4096 4096 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10878 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10879 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10877 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 2048 2048 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10926 NT_STATUS_OK
QUERY_FILE_INFORMATION 10926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10912 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Close 10917 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10928 NT_STATUS_OK
QUERY_FILE_INFORMATION 10928 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10930 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10948 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 1004 NT_STATUS_OK
WriteX 10948 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 258 NT_STATUS_OK
WriteX 10948 0 2048 2048 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10960 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 258 NT_STATUS_OK
WriteX 10960 0 2048 2048 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10968 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 1004 NT_STATUS_OK
WriteX 10968 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
WriteX 10968 0 2048 2048 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10949 0 4096 4096 NT_STATUS_OK
Flush 10949 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
Flush 10961 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Flush 10969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10949 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10951 4096 16384 16384 NT_STATUS_OK
ReadX 10931 4096 16384 16384 NT_STATUS_OK
ReadX 10963 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 2048 2048 NT_STATUS_OK
WriteX 10971 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10974 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10976 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10982 NT_STATUS_OK
ReadX 10982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10983 NT_STATUS_OK
ReadX 10983 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10979 4096 16384 16384 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 8192 8192 NT_STATUS_OK
ReadX 10985 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10999 0 4096 4096 NT_STATUS_OK
ReadX 10999 4096 4096 4096 NT_STATUS_OK
ReadX 10999 8192 4096 4096 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
ReadX 11000 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 258 NT_STATUS_OK
WriteX 11005 0 2048 2048 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
WriteX 11008 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
ReadX 11010 4096 4096 4096 NT_STATUS_OK
WriteX 11010 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11011 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Close 10982 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11013 0 4096 4096 NT_STATUS_OK
ReadX 11013 4096 4096 4096 NT_STATUS_OK
ReadX 11013 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
ReadX 11014 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11031 NT_STATUS_OK
QUERY_FILE_INFORMATION 11031 1004 NT_STATUS_OK
WriteX 11031 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11031 258 NT_STATUS_OK
WriteX 11031 0 2048 2048 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11032 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
WriteX 11037 0 2048 2048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11021 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11039 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11041 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 61440 4096 4096 NT_STATUS_OK
ReadX 11043 126976 4096 4096 NT_STATUS_OK
WriteX 11043 0 65536 65536 NT_STATUS_OK
WriteX 11043 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 61440 4096 4096 NT_STATUS_OK
ReadX 11044 126976 4096 4096 NT_STATUS_OK
ReadX 11044 192512 4096 4096 NT_STATUS_OK
ReadX 11044 258048 4096 4096 NT_STATUS_OK
WriteX 11044 0 65536 65536 NT_STATUS_OK
WriteX 11044 65536 65536 65536 NT_STATUS_OK
WriteX 11044 131072 65536 65536 NT_STATUS_OK
WriteX 11044 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 61440 4096 4096 NT_STATUS_OK
ReadX 11045 126976 4096 4096 NT_STATUS_OK
ReadX 11045 192512 4096 4096 NT_STATUS_OK
ReadX 11045 258048 4096 4096 NT_STATUS_OK
ReadX 11045 323584 4096 4096 NT_STATUS_OK
ReadX 11045 389120 4096 4096 NT_STATUS_OK
ReadX 11045 454656 4096 4096 NT_STATUS_OK
ReadX 11045 520192 4096 4096 NT_STATUS_OK
WriteX 11045 0 65536 65536 NT_STATUS_OK
WriteX 11045 65536 65536 65536 NT_STATUS_OK
WriteX 11045 131072 65536 65536 NT_STATUS_OK
WriteX 11045 196608 65536 65536 NT_STATUS_OK
WriteX 11045 262144 65536 65536 NT_STATUS_OK
WriteX 11045 327680 65536 65536 NT_STATUS_OK
WriteX 11045 393216 65536 65536 NT_STATUS_OK
WriteX 11045 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11046 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 8192 4096 4096 NT_STATUS_OK
ReadX 11046 12288 4096 4096 NT_STATUS_OK
ReadX 11046 16384 4096 4096 NT_STATUS_OK
ReadX 11046 20480 4096 4096 NT_STATUS_OK
ReadX 11046 24576 4096 4096 NT_STATUS_OK
ReadX 11046 28672 4096 4096 NT_STATUS_OK
ReadX 11046 32768 4096 4096 NT_STATUS_OK
ReadX 11046 36864 4096 4096 NT_STATUS_OK
ReadX 11046 40960 4096 4096 NT_STATUS_OK
ReadX 11046 45056 4096 4096 NT_STATUS_OK
ReadX 11046 49152 4096 4096 NT_STATUS_OK
ReadX 11046 53248 4096 4096 NT_STATUS_OK
ReadX 11046 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11046 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11047 NT_STATUS_OK
Close 11047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11049 NT_STATUS_OK
WriteX 11049 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 57088 57088 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Flush 11049 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11050 NT_STATUS_OK
SET_FILE_INFORMATION 11050 1004 NT_STATUS_OK
Close 11050 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11053 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11054 NT_STATUS_OK
WriteX 11054 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11054 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11054 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
WriteX 11054 0 51456 51456 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
Flush 11054 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11058 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11063 NT_STATUS_OK
WriteX 11063 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
WriteX 11063 0 53077 53077 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11064 NT_STATUS_OK
WriteX 11064 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11064 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 65536 65536 NT_STATUS_OK
WriteX 11064 65536 1856 1856 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Flush 11064 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11070 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11073 NT_STATUS_OK
WriteX 11073 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
WriteX 11073 0 7983 7983 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11078 NT_STATUS_OK
WriteX 11078 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 258 NT_STATUS_OK
WriteX 11078 0 65536 65536 NT_STATUS_OK
WriteX 11078 65536 65536 65536 NT_STATUS_OK
WriteX 11078 131072 65536 65536 NT_STATUS_OK
WriteX 11078 196608 65536 65536 NT_STATUS_OK
WriteX 11078 262144 65536 65536 NT_STATUS_OK
WriteX 11078 327680 65536 65536 NT_STATUS_OK
WriteX 11078 393216 65536 65536 NT_STATUS_OK
WriteX 11078 458752 46731 46731 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11079 NT_STATUS_OK
WriteX 11079 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11068 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 0 65536 65536 NT_STATUS_OK
WriteX 11079 65536 22848 22848 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Flush 11079 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11083 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11084 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11084 1004 NT_STATUS_OK
ReadX 11084 8192 4096 4096 NT_STATUS_OK
ReadX 11084 12288 4096 4096 NT_STATUS_OK
ReadX 11084 16384 4096 4096 NT_STATUS_OK
ReadX 11084 20480 4096 4096 NT_STATUS_OK
ReadX 11084 24576 4096 4096 NT_STATUS_OK
ReadX 11084 28672 4096 4096 NT_STATUS_OK
ReadX 11084 32768 4096 4096 NT_STATUS_OK
ReadX 11084 36864 4096 4096 NT_STATUS_OK
ReadX 11084 40960 4096 4096 NT_STATUS_OK
ReadX 11084 45056 4096 4096 NT_STATUS_OK
ReadX 11084 49152 4096 4096 NT_STATUS_OK
ReadX 11084 53248 4096 4096 NT_STATUS_OK
ReadX 11084 57344 4096 4096 NT_STATUS_OK
ReadX 11084 61440 4096 4096 NT_STATUS_OK
ReadX 11084 65536 4096 4096 NT_STATUS_OK
ReadX 11084 69632 4096 4096 NT_STATUS_OK
ReadX 11084 73728 4096 4096 NT_STATUS_OK
ReadX 11084 77824 4096 4096 NT_STATUS_OK
ReadX 11084 81920 4096 4096 NT_STATUS_OK
ReadX 11084 86016 4096 4096 NT_STATUS_OK
ReadX 11084 90112 4096 4096 NT_STATUS_OK
ReadX 11084 94208 4096 4096 NT_STATUS_OK
ReadX 11084 98304 4096 4096 NT_STATUS_OK
ReadX 11084 102400 4096 4096 NT_STATUS_OK
ReadX 11084 106496 4096 4096 NT_STATUS_OK
ReadX 11084 110592 4096 4096 NT_STATUS_OK
ReadX 11084 114688 4096 4096 NT_STATUS_OK
ReadX 11084 118784 4096 4096 NT_STATUS_OK
ReadX 11084 122880 4096 4096 NT_STATUS_OK
ReadX 11084 126976 4096 4096 NT_STATUS_OK
ReadX 11084 131072 4096 4096 NT_STATUS_OK
ReadX 11084 135168 4096 4096 NT_STATUS_OK
ReadX 11084 139264 4096 4096 NT_STATUS_OK
ReadX 11084 143360 4096 4096 NT_STATUS_OK
ReadX 11084 147456 4096 4096 NT_STATUS_OK
ReadX 11084 151552 4096 4096 NT_STATUS_OK
ReadX 11084 155648 4096 4096 NT_STATUS_OK
ReadX 11084 159744 4096 4096 NT_STATUS_OK
ReadX 11084 163840 4096 4096 NT_STATUS_OK
ReadX 11084 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11084 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11085 NT_STATUS_OK
Close 11085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11088 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
Close 11088 NT_STATUS_OK
WriteX 11087 0 42388 42388 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
ReadX 11091 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11092 NT_STATUS_OK
WriteX 11092 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11092 258 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
WriteX 11092 0 42652 42652 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11094 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
ReadX 11096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11101 NT_STATUS_OK
WriteX 11101 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
WriteX 11101 0 65536 65536 NT_STATUS_OK
WriteX 11101 65536 49 49 NT_STATUS_OK
Close 11101 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 61440 61440 NT_STATUS_OK
ReadX 11102 61440 4096 4096 NT_STATUS_OK
ReadX 11102 65536 61440 61440 NT_STATUS_OK
ReadX 11102 126976 4096 4096 NT_STATUS_OK
ReadX 11102 131072 61440 61440 NT_STATUS_OK
ReadX 11102 192512 4096 4096 NT_STATUS_OK
ReadX 11102 196608 61440 61440 NT_STATUS_OK
ReadX 11102 258048 4096 4096 NT_STATUS_OK
ReadX 11102 262144 61440 61440 NT_STATUS_OK
ReadX 11102 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 61440 61440 NT_STATUS_OK
ReadX 11103 61440 4096 4096 NT_STATUS_OK
ReadX 11103 65536 61440 61440 NT_STATUS_OK
ReadX 11103 126976 4096 4096 NT_STATUS_OK
ReadX 11103 131072 61440 61440 NT_STATUS_OK
ReadX 11103 192512 4096 4096 NT_STATUS_OK
ReadX 11103 196608 61440 61440 NT_STATUS_OK
ReadX 11103 258048 4096 4096 NT_STATUS_OK
ReadX 11103 262144 61440 61440 NT_STATUS_OK
ReadX 11103 323584 4096 4096 NT_STATUS_OK
ReadX 11103 327680 61440 61440 NT_STATUS_OK
ReadX 11103 389120 4096 4096 NT_STATUS_OK
ReadX 11103 393216 61440 61440 NT_STATUS_OK
ReadX 11103 454656 4096 4096 NT_STATUS_OK
ReadX 11103 458752 61440 61440 NT_STATUS_OK
ReadX 11103 520192 4096 4096 NT_STATUS_OK
ReadX 11103 524288 61440 61440 NT_STATUS_OK
ReadX 11103 585728 4096 4096 NT_STATUS_OK
ReadX 11103 589824 61440 61440 NT_STATUS_OK
ReadX 11103 651264 4096 4096 NT_STATUS_OK
ReadX 11103 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 61440 61440 NT_STATUS_OK
ReadX 11104 61440 4096 4096 NT_STATUS_OK
ReadX 11104 65536 61440 61440 NT_STATUS_OK
ReadX 11104 126976 4096 4096 NT_STATUS_OK
ReadX 11104 131072 61440 61440 NT_STATUS_OK
ReadX 11104 192512 4096 4096 NT_STATUS_OK
ReadX 11104 196608 61440 61440 NT_STATUS_OK
ReadX 11104 258048 4096 4096 NT_STATUS_OK
ReadX 11104 262144 61440 61440 NT_STATUS_OK
ReadX 11104 323584 4096 4096 NT_STATUS_OK
ReadX 11104 327680 61440 61440 NT_STATUS_OK
ReadX 11104 389120 4096 4096 NT_STATUS_OK
ReadX 11104 393216 61440 61440 NT_STATUS_OK
ReadX 11104 454656 4096 4096 NT_STATUS_OK
ReadX 11104 458752 61440 61440 NT_STATUS_OK
ReadX 11104 520192 4096 4096 NT_STATUS_OK
ReadX 11104 524288 61440 61440 NT_STATUS_OK
ReadX 11104 585728 4096 4096 NT_STATUS_OK
ReadX 11104 589824 61440 61440 NT_STATUS_OK
ReadX 11104 651264 4096 4096 NT_STATUS_OK
ReadX 11104 655360 61440 61440 NT_STATUS_OK
ReadX 11104 716800 4096 4096 NT_STATUS_OK
ReadX 11104 720896 61440 61440 NT_STATUS_OK
ReadX 11104 782336 4096 4096 NT_STATUS_OK
ReadX 11104 786432 61440 61440 NT_STATUS_OK
ReadX 11104 847872 4096 4096 NT_STATUS_OK
ReadX 11104 851968 61440 61440 NT_STATUS_OK
ReadX 11104 913408 4096 4096 NT_STATUS_OK
ReadX 11104 917504 61440 61440 NT_STATUS_OK
ReadX 11104 978944 4096 4096 NT_STATUS_OK
ReadX 11104 983040 61440 61440 NT_STATUS_OK
ReadX 11104 1044480 4096 4096 NT_STATUS_OK
ReadX 11104 1048576 61440 61440 NT_STATUS_OK
ReadX 11104 1110016 4096 4096 NT_STATUS_OK
ReadX 11104 1114112 61440 61440 NT_STATUS_OK
ReadX 11104 1175552 4096 4096 NT_STATUS_OK
ReadX 11104 1179648 61440 61440 NT_STATUS_OK
ReadX 11104 1241088 4096 4096 NT_STATUS_OK
ReadX 11104 1245184 61440 61440 NT_STATUS_OK
ReadX 11104 1306624 4096 4096 NT_STATUS_OK
ReadX 11104 1310720 61440 61440 NT_STATUS_OK
ReadX 11104 1372160 4096 4096 NT_STATUS_OK
ReadX 11104 1376256 61440 61440 NT_STATUS_OK
ReadX 11104 1437696 4096 4096 NT_STATUS_OK
ReadX 11104 1441792 61440 61440 NT_STATUS_OK
ReadX 11104 1503232 4096 4096 NT_STATUS_OK
ReadX 11104 1507328 61440 61440 NT_STATUS_OK
ReadX 11104 1568768 4096 4096 NT_STATUS_OK
ReadX 11104 1572864 61440 61440 NT_STATUS_OK
ReadX 11104 1634304 4096 4096 NT_STATUS_OK
ReadX 11104 1638400 61440 61440 NT_STATUS_OK
ReadX 11104 1699840 4096 4096 NT_STATUS_OK
ReadX 11104 1703936 61440 61440 NT_STATUS_OK
ReadX 11104 1765376 4096 4096 NT_STATUS_OK
ReadX 11104 1769472 61440 61440 NT_STATUS_OK
ReadX 11104 1830912 4096 4096 NT_STATUS_OK
ReadX 11104 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11106 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
ReadX 11106 2156 24 24 NT_STATUS_OK
ReadX 11106 2139 276 276 NT_STATUS_OK
ReadX 11106 2136 14 14 NT_STATUS_OK
ReadX 11106 2136 7 7 NT_STATUS_OK
ReadX 11106 2138 12 12 NT_STATUS_OK
ReadX 11106 2137 8 8 NT_STATUS_OK
ReadX 11106 2135 15 15 NT_STATUS_OK
ReadX 11106 0 16 16 NT_STATUS_OK
ReadX 11106 16 2048 2048 NT_STATUS_OK
ReadX 11106 2064 2048 2048 NT_STATUS_OK
ReadX 11106 257 2048 2048 NT_STATUS_OK
ReadX 11106 385 2048 2048 NT_STATUS_OK
ReadX 11106 513 2048 2048 NT_STATUS_OK
ReadX 11106 641 2048 2048 NT_STATUS_OK
ReadX 11106 769 2048 2048 NT_STATUS_OK
ReadX 11106 897 2048 2048 NT_STATUS_OK
ReadX 11106 1025 2048 2048 NT_STATUS_OK
ReadX 11106 1153 2048 2048 NT_STATUS_OK
ReadX 11106 1281 2048 2048 NT_STATUS_OK
ReadX 11106 1409 2048 2048 NT_STATUS_OK
ReadX 11106 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11108 NT_STATUS_OK
Close 11108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11111 NT_STATUS_OK
WriteX 11111 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11111 258 NT_STATUS_OK
WriteX 11111 0 10575 10575 NT_STATUS_OK
Flush 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11114 NT_STATUS_OK
ReadX 11114 0 4096 4096 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11116 NT_STATUS_OK
LockX 11116 2147483538 1 NT_STATUS_OK
UnlockX 11116 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1005 NT_STATUS_OK
ReadX 11116 0 512 512 NT_STATUS_OK
ReadX 11116 512 512 512 NT_STATUS_OK
ReadX 11116 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
Close 11116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1005 NT_STATUS_OK
ReadX 11117 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11118 NT_STATUS_OK
LockX 11118 2147483538 1 NT_STATUS_OK
UnlockX 11118 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1005 NT_STATUS_OK
ReadX 11118 0 512 512 NT_STATUS_OK
ReadX 11118 512 512 512 NT_STATUS_OK
ReadX 11118 1024 512 512 NT_STATUS_OK
ReadX 11118 288 20 20 NT_STATUS_OK
ReadX 11118 308 2084 2084 NT_STATUS_OK
ReadX 11118 388 2084 2084 NT_STATUS_OK
ReadX 11118 388 2084 2084 NT_STATUS_OK
ReadX 11105 2157 1386 1386 NT_STATUS_OK
ReadX 11118 2472 399 399 NT_STATUS_OK
ReadX 11118 3072 1536 1536 NT_STATUS_OK
ReadX 11118 544 149 149 NT_STATUS_OK
ReadX 11118 693 485 485 NT_STATUS_OK
Close 11118 NT_STATUS_OK
ReadX 11105 2157 4096 4096 NT_STATUS_OK
ReadX 11105 6253 4096 4096 NT_STATUS_OK
ReadX 11105 10349 4096 4096 NT_STATUS_OK
ReadX 11105 14445 4096 4096 NT_STATUS_OK
ReadX 11105 18541 4096 4096 NT_STATUS_OK
ReadX 11105 22637 256 256 NT_STATUS_OK
ReadX 11105 22893 4096 4096 NT_STATUS_OK
ReadX 11105 26989 4096 4096 NT_STATUS_OK
ReadX 11105 31085 4096 4096 NT_STATUS_OK
ReadX 11105 35181 4096 4096 NT_STATUS_OK
ReadX 11105 39277 4096 4096 NT_STATUS_OK
ReadX 11105 43373 4096 4096 NT_STATUS_OK
ReadX 11105 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11105 2157 1024 1024 NT_STATUS_OK
ReadX 11105 1667 4688 4688 NT_STATUS_OK
ReadX 11105 6355 3516 3516 NT_STATUS_OK
ReadX 11105 9871 16384 16384 NT_STATUS_OK
ReadX 11105 26255 3771 3771 NT_STATUS_OK
ReadX 11105 30026 2048 2048 NT_STATUS_OK
ReadX 11105 32074 1024 1024 NT_STATUS_OK
ReadX 11105 33098 6652 6652 NT_STATUS_OK
ReadX 11105 39750 16384 16384 NT_STATUS_OK
ReadX 11105 56134 10496 10496 NT_STATUS_OK
ReadX 11105 66630 1784 1784 NT_STATUS_OK
ReadX 11105 68414 90 90 NT_STATUS_OK
ReadX 11105 68504 273 273 NT_STATUS_OK
ReadX 11105 68777 1600 1600 NT_STATUS_OK
ReadX 11105 70377 640 640 NT_STATUS_OK
ReadX 11105 71017 1280 1280 NT_STATUS_OK
ReadX 11105 72297 8464 8464 NT_STATUS_OK
ReadX 11105 80761 158 158 NT_STATUS_OK
ReadX 11105 80919 912 912 NT_STATUS_OK
ReadX 11105 81831 1980 1980 NT_STATUS_OK
ReadX 11105 83811 2256 2256 NT_STATUS_OK
ReadX 11105 86067 400 400 NT_STATUS_OK
ReadX 11105 86467 252 252 NT_STATUS_OK
ReadX 11105 86719 42 42 NT_STATUS_OK
ReadX 11105 86761 725 725 NT_STATUS_OK
ReadX 11105 2009 512 512 NT_STATUS_OK
ReadX 11105 3895 9 9 NT_STATUS_OK
ReadX 11105 3781 46 46 NT_STATUS_OK
ReadX 11105 4059 92 92 NT_STATUS_OK
ReadX 11105 3781 92 92 NT_STATUS_OK
ReadX 11105 3986 184 184 NT_STATUS_OK
ReadX 11105 3987 16384 16384 NT_STATUS_OK
ReadX 11105 3902 16384 16384 NT_STATUS_OK
ReadX 11105 3781 10240 10240 NT_STATUS_OK
ReadX 11105 3821 16384 16384 NT_STATUS_OK
ReadX 11105 3891 935 935 NT_STATUS_OK
ReadX 11105 4060 10240 10240 NT_STATUS_OK
ReadX 11105 4059 184 184 NT_STATUS_OK
ReadX 11105 256 184 184 NT_STATUS_OK
ReadX 11105 256 1026 1026 NT_STATUS_OK
ReadX 11105 3901 326 326 NT_STATUS_OK
ReadX 11105 3899 652 652 NT_STATUS_OK
ReadX 11105 256 2 2 NT_STATUS_OK
ReadX 11105 258 4948 4948 NT_STATUS_OK
Close 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11123 NT_STATUS_OK
WriteX 11123 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11123 258 NT_STATUS_OK
WriteX 11123 0 65536 65536 NT_STATUS_OK
WriteX 11123 65536 65536 65536 NT_STATUS_OK
WriteX 11123 131072 65536 65536 NT_STATUS_OK
WriteX 11123 196608 65536 65536 NT_STATUS_OK
WriteX 11123 262144 65536 65536 NT_STATUS_OK
WriteX 11123 327680 65536 65536 NT_STATUS_OK
WriteX 11123 393216 65536 65536 NT_STATUS_OK
WriteX 11123 458752 65536 65536 NT_STATUS_OK
WriteX 11123 524288 65536 65536 NT_STATUS_OK
WriteX 11123 589824 35257 35257 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11128 NT_STATUS_OK
WriteX 11128 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11128 258 NT_STATUS_OK
WriteX 11128 0 65536 65536 NT_STATUS_OK
WriteX 11128 65536 65536 65536 NT_STATUS_OK
WriteX 11128 131072 65536 65536 NT_STATUS_OK
WriteX 11128 196608 65536 65536 NT_STATUS_OK
WriteX 11128 262144 65536 65536 NT_STATUS_OK
WriteX 11128 327680 65536 65536 NT_STATUS_OK
WriteX 11128 393216 65536 65536 NT_STATUS_OK
WriteX 11128 458752 65536 65536 NT_STATUS_OK
WriteX 11128 524288 65536 65536 NT_STATUS_OK
WriteX 11128 589824 57598 57598 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11130 NT_STATUS_OK
WriteX 11130 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11130 258 NT_STATUS_OK
WriteX 11130 0 12543 12543 NT_STATUS_OK
Flush 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11136 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
ReadX 11136 1938 24 24 NT_STATUS_OK
ReadX 11136 1920 276 276 NT_STATUS_OK
ReadX 11136 1918 14 14 NT_STATUS_OK
ReadX 11136 1918 7 7 NT_STATUS_OK
ReadX 11136 1919 12 12 NT_STATUS_OK
ReadX 11136 1919 8 8 NT_STATUS_OK
ReadX 11136 1917 15 15 NT_STATUS_OK
ReadX 11136 0 16 16 NT_STATUS_OK
ReadX 11136 16 2048 2048 NT_STATUS_OK
ReadX 11136 2064 2048 2048 NT_STATUS_OK
ReadX 11136 257 2048 2048 NT_STATUS_OK
ReadX 11136 385 2048 2048 NT_STATUS_OK
ReadX 11136 513 2048 2048 NT_STATUS_OK
ReadX 11136 641 2048 2048 NT_STATUS_OK
ReadX 11136 769 2048 2048 NT_STATUS_OK
ReadX 11136 897 2048 2048 NT_STATUS_OK
ReadX 11136 1025 2048 2048 NT_STATUS_OK
ReadX 11136 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11138 NT_STATUS_OK
Close 11138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
WriteX 11141 0 11588 11588 NT_STATUS_OK
Flush 11141 NT_STATUS_OK
Close 11141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
Close 11136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11146 NT_STATUS_OK
WriteX 11146 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 11615 11615 NT_STATUS_OK
Flush 11146 NT_STATUS_OK
Close 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 16050 16050 NT_STATUS_OK
Close 11155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11135 1939 64 64 NT_STATUS_OK
ReadX 11135 128 248 248 NT_STATUS_OK
ReadX 11135 128 568 568 NT_STATUS_OK
ReadX 11135 3872 1536 1536 NT_STATUS_OK
ReadX 11135 3456 2560 2560 NT_STATUS_OK
ReadX 11135 3136 512 512 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
ReadX 11135 3264 3072 3072 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 3616 4096 4096 NT_STATUS_OK
ReadX 11135 1939 64 64 NT_STATUS_OK
ReadX 11135 128 248 248 NT_STATUS_OK
ReadX 11135 128 608 608 NT_STATUS_OK
ReadX 11135 2858 1024 1024 NT_STATUS_OK
ReadX 11135 2810 4096 4096 NT_STATUS_OK
ReadX 11135 2826 4096 4096 NT_STATUS_OK
ReadX 11135 2580 2048 2048 NT_STATUS_OK
ReadX 11135 2800 2560 2560 NT_STATUS_OK
ReadX 11135 2100 4096 4096 NT_STATUS_OK
ReadX 11135 2084 4096 4096 NT_STATUS_OK
ReadX 11135 868 4096 4096 NT_STATUS_OK
ReadX 11135 2324 4096 4096 NT_STATUS_OK
ReadX 11135 884 4096 4096 NT_STATUS_OK
ReadX 11135 2604 1024 1024 NT_STATUS_OK
ReadX 11135 580 4096 4096 NT_STATUS_OK
ReadX 11135 596 4096 4096 NT_STATUS_OK
ReadX 11135 2752 4096 4096 NT_STATUS_OK
ReadX 11135 2842 1024 1024 NT_STATUS_OK
ReadX 11135 660 4096 4096 NT_STATUS_OK
ReadX 11135 2720 4096 4096 NT_STATUS_OK
ReadX 11135 2736 4096 4096 NT_STATUS_OK
ReadX 11135 628 4096 4096 NT_STATUS_OK
ReadX 11135 2704 4096 4096 NT_STATUS_OK
ReadX 11135 1556 4096 4096 NT_STATUS_OK
ReadX 11135 576 4096 4096 NT_STATUS_OK
ReadX 11135 3168 1536 1536 NT_STATUS_OK
ReadX 11135 832 4096 4096 NT_STATUS_OK
ReadX 11135 1088 4096 4096 NT_STATUS_OK
ReadX 11135 1344 4096 4096 NT_STATUS_OK
ReadX 11135 1600 4096 4096 NT_STATUS_OK
ReadX 11135 1856 4096 4096 NT_STATUS_OK
ReadX 11135 2112 4096 4096 NT_STATUS_OK
ReadX 11135 1892 4096 4096 NT_STATUS_OK
ReadX 11135 820 4096 4096 NT_STATUS_OK
ReadX 11135 788 4096 4096 NT_STATUS_OK
ReadX 11135 1604 4096 4096 NT_STATUS_OK
ReadX 11135 3648 4096 4096 NT_STATUS_OK
ReadX 11135 2608 4096 4096 NT_STATUS_OK
ReadX 11135 548 4096 4096 NT_STATUS_OK
ReadX 11135 740 4096 4096 NT_STATUS_OK
ReadX 11135 1344 4096 4096 NT_STATUS_OK
ReadX 11135 3392 4096 4096 NT_STATUS_OK
ReadX 11135 3904 4096 4096 NT_STATUS_OK
ReadX 11135 644 4096 4096 NT_STATUS_OK
ReadX 11135 676 4096 4096 NT_STATUS_OK
ReadX 11135 2688 4096 4096 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 900 4096 4096 NT_STATUS_OK
ReadX 11135 1908 4096 4096 NT_STATUS_OK
ReadX 11135 852 4096 4096 NT_STATUS_OK
ReadX 11135 724 4096 4096 NT_STATUS_OK
ReadX 11135 2292 4096 4096 NT_STATUS_OK
ReadX 11135 612 4096 4096 NT_STATUS_OK
ReadX 11135 388 4096 4096 NT_STATUS_OK
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 500 4096 4096 NT_STATUS_OK
ReadX 11135 356 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 576 4096 4096 NT_STATUS_OK
ReadX 11135 340 4096 4096 NT_STATUS_OK
ReadX 11135 420 4096 4096 NT_STATUS_OK
ReadX 11135 1600 4096 4096 NT_STATUS_OK
ReadX 11135 404 4096 4096 NT_STATUS_OK
ReadX 11135 1428 4096 4096 NT_STATUS_OK
ReadX 11135 2656 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 452 4096 4096 NT_STATUS_OK
ReadX 11135 692 4096 4096 NT_STATUS_OK
ReadX 11135 564 4096 4096 NT_STATUS_OK
ReadX 11135 372 4096 4096 NT_STATUS_OK
ReadX 11135 468 4096 4096 NT_STATUS_OK
ReadX 11135 484 4096 4096 NT_STATUS_OK
ReadX 11135 1088 4096 4096 NT_STATUS_OK
ReadX 11135 1924 4096 4096 NT_STATUS_OK
ReadX 11135 2768 4096 4096 NT_STATUS_OK
ReadX 11135 832 4096 4096 NT_STATUS_OK
ReadX 11135 836 4096 4096 NT_STATUS_OK
ReadX 11135 1856 4096 4096 NT_STATUS_OK
ReadX 11135 2640 4096 4096 NT_STATUS_OK
ReadX 11135 436 4096 4096 NT_STATUS_OK
ReadX 11135 1828 4096 4096 NT_STATUS_OK
ReadX 11135 804 4096 4096 NT_STATUS_OK
ReadX 11135 1860 4096 4096 NT_STATUS_OK
ReadX 11135 1812 4096 4096 NT_STATUS_OK
ReadX 11135 756 4096 4096 NT_STATUS_OK
ReadX 11135 1636 4096 4096 NT_STATUS_OK
ReadX 11135 772 4096 4096 NT_STATUS_OK
ReadX 11135 2036 4096 4096 NT_STATUS_OK
ReadX 11135 1220 4096 4096 NT_STATUS_OK
ReadX 11135 1652 4096 4096 NT_STATUS_OK
ReadX 11135 2588 4096 4096 NT_STATUS_OK
ReadX 11135 916 4096 4096 NT_STATUS_OK
ReadX 11135 260 4096 4096 NT_STATUS_OK
ReadX 11135 932 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 308 4096 4096 NT_STATUS_OK
ReadX 11135 292 4096 4096 NT_STATUS_OK
ReadX 11135 1140 4096 4096 NT_STATUS_OK
ReadX 11135 276 4096 4096 NT_STATUS_OK
ReadX 11135 2020 4096 4096 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
ReadX 11135 516 4096 4096 NT_STATUS_OK
ReadX 11135 1844 4096 4096 NT_STATUS_OK
ReadX 11135 1124 4096 4096 NT_STATUS_OK
ReadX 11135 3136 4096 4096 NT_STATUS_OK
ReadX 11135 324 4096 4096 NT_STATUS_OK
ReadX 11135 1156 4096 4096 NT_STATUS_OK
ReadX 11135 1172 4096 4096 NT_STATUS_OK
ReadX 11135 2112 4096 4096 NT_STATUS_OK
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 964 4096 4096 NT_STATUS_OK
ReadX 11135 980 4096 4096 NT_STATUS_OK
ReadX 11135 1012 4096 4096 NT_STATUS_OK
ReadX 11135 532 4096 4096 NT_STATUS_OK
ReadX 11135 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11135 1620 4096 4096 NT_STATUS_OK
ReadX 11135 1604 4096 4096 NT_STATUS_OK
ReadX 11135 2116 4096 4096 NT_STATUS_OK
ReadX 11135 2132 4096 4096 NT_STATUS_OK
ReadX 11135 2148 4096 4096 NT_STATUS_OK
ReadX 11135 2276 4096 4096 NT_STATUS_OK
ReadX 11135 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11160 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
WriteX 11160 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11160 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
WriteX 11160 0 65536 65536 NT_STATUS_OK
WriteX 11160 65536 64850 64850 NT_STATUS_OK
Close 11160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11162 NT_STATUS_OK
WriteX 11162 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
ReadX 11135 2068 4096 4096 NT_STATUS_OK
ReadX 11135 1588 4096 4096 NT_STATUS_OK
ReadX 11135 1572 4096 4096 NT_STATUS_OK
WriteX 11162 0 18630 18630 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11135 612 4096 4096 NT_STATUS_OK
ReadX 11135 564 4096 4096 NT_STATUS_OK
ReadX 11135 1876 4096 4096 NT_STATUS_OK
ReadX 11135 628 4096 4096 NT_STATUS_OK
ReadX 11135 740 4096 4096 NT_STATUS_OK
ReadX 11135 724 4096 4096 NT_STATUS_OK
ReadX 11135 644 4096 4096 NT_STATUS_OK
ReadX 11135 2324 4096 4096 NT_STATUS_OK
ReadX 11135 660 4096 4096 NT_STATUS_OK
ReadX 11135 852 4096 4096 NT_STATUS_OK
ReadX 11135 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 580 4096 4096 NT_STATUS_OK
ReadX 11135 3136 512 512 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
Close 11135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 61440 4096 4096 NT_STATUS_OK
ReadX 11167 126976 4096 4096 NT_STATUS_OK
WriteX 11167 0 65536 65536 NT_STATUS_OK
WriteX 11167 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 61440 4096 4096 NT_STATUS_OK
ReadX 11168 126976 4096 4096 NT_STATUS_OK
ReadX 11168 192512 4096 4096 NT_STATUS_OK
ReadX 11168 258048 4096 4096 NT_STATUS_OK
WriteX 11168 0 65536 65536 NT_STATUS_OK
WriteX 11168 65536 65536 65536 NT_STATUS_OK
WriteX 11168 131072 65536 65536 NT_STATUS_OK
WriteX 11168 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 61440 4096 4096 NT_STATUS_OK
ReadX 11169 126976 4096 4096 NT_STATUS_OK
ReadX 11169 192512 4096 4096 NT_STATUS_OK
ReadX 11169 258048 4096 4096 NT_STATUS_OK
ReadX 11169 323584 4096 4096 NT_STATUS_OK
ReadX 11169 389120 4096 4096 NT_STATUS_OK
ReadX 11169 454656 4096 4096 NT_STATUS_OK
ReadX 11169 520192 4096 4096 NT_STATUS_OK
WriteX 11169 0 65536 65536 NT_STATUS_OK
WriteX 11169 65536 65536 65536 NT_STATUS_OK
WriteX 11169 131072 65536 65536 NT_STATUS_OK
WriteX 11169 196608 65536 65536 NT_STATUS_OK
WriteX 11169 262144 65536 65536 NT_STATUS_OK
WriteX 11169 327680 65536 65536 NT_STATUS_OK
WriteX 11169 393216 65536 65536 NT_STATUS_OK
WriteX 11169 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11172 NT_STATUS_OK
WriteX 11172 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11170 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11174 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11177 NT_STATUS_OK
WriteX 11177 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11177 258 NT_STATUS_OK
WriteX 11177 0 62591 62591 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11182 NT_STATUS_OK
WriteX 11182 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11182 258 NT_STATUS_OK
WriteX 11182 0 10845 10845 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11184 NT_STATUS_OK
Close 11184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11187 NT_STATUS_OK
WriteX 11187 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
WriteX 11187 0 30118 30118 NT_STATUS_OK
Close 11187 NT_STATUS_OK
WriteX 11170 0 4096 4096 NT_STATUS_OK
WriteX 11172 0 64 64 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 61440 61440 NT_STATUS_OK
ReadX 11189 61440 4096 4096 NT_STATUS_OK
ReadX 11189 65536 61440 61440 NT_STATUS_OK
ReadX 11189 126976 4096 4096 NT_STATUS_OK
ReadX 11189 131072 61440 61440 NT_STATUS_OK
ReadX 11189 192512 4096 4096 NT_STATUS_OK
ReadX 11189 196608 61440 61440 NT_STATUS_OK
ReadX 11189 258048 4096 4096 NT_STATUS_OK
ReadX 11189 262144 61440 61440 NT_STATUS_OK
ReadX 11189 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 61440 61440 NT_STATUS_OK
ReadX 11190 61440 4096 4096 NT_STATUS_OK
ReadX 11190 65536 61440 61440 NT_STATUS_OK
ReadX 11190 126976 4096 4096 NT_STATUS_OK
ReadX 11190 131072 61440 61440 NT_STATUS_OK
ReadX 11190 192512 4096 4096 NT_STATUS_OK
ReadX 11190 196608 61440 61440 NT_STATUS_OK
ReadX 11190 258048 4096 4096 NT_STATUS_OK
ReadX 11190 262144 61440 61440 NT_STATUS_OK
ReadX 11190 323584 4096 4096 NT_STATUS_OK
ReadX 11190 327680 61440 61440 NT_STATUS_OK
ReadX 11190 389120 4096 4096 NT_STATUS_OK
ReadX 11190 393216 61440 61440 NT_STATUS_OK
ReadX 11190 454656 4096 4096 NT_STATUS_OK
ReadX 11190 458752 61440 61440 NT_STATUS_OK
ReadX 11190 520192 4096 4096 NT_STATUS_OK
ReadX 11190 524288 61440 61440 NT_STATUS_OK
ReadX 11190 585728 4096 4096 NT_STATUS_OK
ReadX 11190 589824 61440 61440 NT_STATUS_OK
ReadX 11190 651264 4096 4096 NT_STATUS_OK
ReadX 11190 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 61440 61440 NT_STATUS_OK
ReadX 11191 61440 4096 4096 NT_STATUS_OK
ReadX 11191 65536 61440 61440 NT_STATUS_OK
ReadX 11191 126976 4096 4096 NT_STATUS_OK
ReadX 11191 131072 61440 61440 NT_STATUS_OK
ReadX 11191 192512 4096 4096 NT_STATUS_OK
ReadX 11191 196608 61440 61440 NT_STATUS_OK
ReadX 11191 258048 4096 4096 NT_STATUS_OK
ReadX 11191 262144 61440 61440 NT_STATUS_OK
ReadX 11191 323584 4096 4096 NT_STATUS_OK
ReadX 11191 327680 61440 61440 NT_STATUS_OK
ReadX 11191 389120 4096 4096 NT_STATUS_OK
ReadX 11191 393216 61440 61440 NT_STATUS_OK
ReadX 11191 454656 4096 4096 NT_STATUS_OK
ReadX 11191 458752 61440 61440 NT_STATUS_OK
ReadX 11191 520192 4096 4096 NT_STATUS_OK
ReadX 11191 524288 61440 61440 NT_STATUS_OK
ReadX 11191 585728 4096 4096 NT_STATUS_OK
ReadX 11191 589824 61440 61440 NT_STATUS_OK
ReadX 11191 651264 4096 4096 NT_STATUS_OK
ReadX 11191 655360 61440 61440 NT_STATUS_OK
ReadX 11191 716800 4096 4096 NT_STATUS_OK
ReadX 11191 720896 61440 61440 NT_STATUS_OK
ReadX 11191 782336 4096 4096 NT_STATUS_OK
ReadX 11191 786432 61440 61440 NT_STATUS_OK
ReadX 11191 847872 4096 4096 NT_STATUS_OK
ReadX 11191 851968 61440 61440 NT_STATUS_OK
ReadX 11191 913408 4096 4096 NT_STATUS_OK
ReadX 11191 917504 61440 61440 NT_STATUS_OK
ReadX 11191 978944 4096 4096 NT_STATUS_OK
ReadX 11191 983040 61440 61440 NT_STATUS_OK
ReadX 11191 1044480 4096 4096 NT_STATUS_OK
ReadX 11191 1048576 61440 61440 NT_STATUS_OK
ReadX 11191 1110016 4096 4096 NT_STATUS_OK
ReadX 11191 1114112 61440 61440 NT_STATUS_OK
ReadX 11191 1175552 4096 4096 NT_STATUS_OK
ReadX 11191 1179648 61440 61440 NT_STATUS_OK
ReadX 11191 1241088 4096 4096 NT_STATUS_OK
ReadX 11191 1245184 61440 61440 NT_STATUS_OK
ReadX 11191 1306624 4096 4096 NT_STATUS_OK
ReadX 11191 1310720 61440 61440 NT_STATUS_OK
ReadX 11191 1372160 4096 4096 NT_STATUS_OK
ReadX 11191 1376256 61440 61440 NT_STATUS_OK
ReadX 11191 1437696 4096 4096 NT_STATUS_OK
ReadX 11191 1441792 61440 61440 NT_STATUS_OK
ReadX 11191 1503232 4096 4096 NT_STATUS_OK
ReadX 11191 1507328 61440 61440 NT_STATUS_OK
ReadX 11191 1568768 4096 4096 NT_STATUS_OK
ReadX 11191 1572864 61440 61440 NT_STATUS_OK
ReadX 11191 1634304 4096 4096 NT_STATUS_OK
ReadX 11191 1638400 61440 61440 NT_STATUS_OK
ReadX 11191 1699840 4096 4096 NT_STATUS_OK
ReadX 11191 1703936 61440 61440 NT_STATUS_OK
ReadX 11191 1765376 4096 4096 NT_STATUS_OK
ReadX 11191 1769472 61440 61440 NT_STATUS_OK
ReadX 11191 1830912 4096 4096 NT_STATUS_OK
ReadX 11191 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
ReadX 11196 4096 4096 4096 NT_STATUS_OK
ReadX 11196 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11200 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 8192 8192 NT_STATUS_OK
ReadX 11204 8192 8192 8192 NT_STATUS_OK
ReadX 11204 16384 8192 8192 NT_STATUS_OK
ReadX 11204 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11209 NT_STATUS_OK
WriteX 11209 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11209 258 NT_STATUS_OK
WriteX 11209 0 10438 10438 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11210 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11214 NT_STATUS_OK
Close 11214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11215 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11217 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
ReadX 11218 4096 4096 4096 NT_STATUS_OK
ReadX 11218 8192 4096 4096 NT_STATUS_OK
ReadX 11218 12288 8192 8192 NT_STATUS_OK
ReadX 11218 20480 8192 8192 NT_STATUS_OK
ReadX 11218 28672 8192 8192 NT_STATUS_OK
ReadX 11218 36864 8192 8192 NT_STATUS_OK
ReadX 11218 45056 8192 8192 NT_STATUS_OK
ReadX 11218 53248 8192 8192 NT_STATUS_OK
ReadX 11218 61440 8192 8192 NT_STATUS_OK
ReadX 11218 69632 8192 8192 NT_STATUS_OK
ReadX 11218 77824 8192 8192 NT_STATUS_OK
ReadX 11218 86016 8192 8192 NT_STATUS_OK
ReadX 11218 94208 8192 8192 NT_STATUS_OK
ReadX 11218 102400 8192 8192 NT_STATUS_OK
ReadX 11218 110592 8192 8192 NT_STATUS_OK
ReadX 11218 118784 8192 8192 NT_STATUS_OK
ReadX 11218 126976 8192 8192 NT_STATUS_OK
ReadX 11218 135168 8192 8192 NT_STATUS_OK
ReadX 11218 143360 8192 8192 NT_STATUS_OK
ReadX 11218 151552 8192 8192 NT_STATUS_OK
ReadX 11218 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11218 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11223 NT_STATUS_OK
WriteX 11223 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 28489 28489 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11224 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11226 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11227 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 8192 8192 NT_STATUS_OK
ReadX 11230 8192 8192 8192 NT_STATUS_OK
ReadX 11230 16384 8192 8192 NT_STATUS_OK
ReadX 11230 24576 8192 8192 NT_STATUS_OK
ReadX 11230 32768 16384 16384 NT_STATUS_OK
ReadX 11230 49152 8192 8192 NT_STATUS_OK
ReadX 11230 57344 8192 8192 NT_STATUS_OK
ReadX 11230 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11232 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11235 NT_STATUS_OK
WriteX 11235 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11235 258 NT_STATUS_OK
WriteX 11235 0 29253 29253 NT_STATUS_OK
Close 11235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11242 NT_STATUS_OK
WriteX 11242 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 258 NT_STATUS_OK
WriteX 11242 0 30183 30183 NT_STATUS_OK
Close 11242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11243 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11245 NT_STATUS_OK
WriteX 11245 0 510 510 NT_STATUS_OK
WriteX 11245 510 512 512 NT_STATUS_OK
WriteX 11245 1022 510 510 NT_STATUS_OK
WriteX 11245 1532 510 510 NT_STATUS_OK
WriteX 11245 2042 168 168 NT_STATUS_OK
Close 11245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 61440 4096 4096 NT_STATUS_OK
ReadX 11249 126976 4096 4096 NT_STATUS_OK
WriteX 11249 0 65536 65536 NT_STATUS_OK
WriteX 11249 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 61440 4096 4096 NT_STATUS_OK
ReadX 11250 126976 4096 4096 NT_STATUS_OK
ReadX 11250 192512 4096 4096 NT_STATUS_OK
ReadX 11250 258048 4096 4096 NT_STATUS_OK
WriteX 11250 0 65536 65536 NT_STATUS_OK
WriteX 11250 65536 65536 65536 NT_STATUS_OK
WriteX 11250 131072 65536 65536 NT_STATUS_OK
WriteX 11250 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 61440 4096 4096 NT_STATUS_OK
ReadX 11251 126976 4096 4096 NT_STATUS_OK
ReadX 11251 192512 4096 4096 NT_STATUS_OK
ReadX 11251 258048 4096 4096 NT_STATUS_OK
ReadX 11251 323584 4096 4096 NT_STATUS_OK
ReadX 11251 389120 4096 4096 NT_STATUS_OK
ReadX 11251 454656 4096 4096 NT_STATUS_OK
ReadX 11251 520192 4096 4096 NT_STATUS_OK
WriteX 11251 0 65536 65536 NT_STATUS_OK
WriteX 11251 65536 65536 65536 NT_STATUS_OK
WriteX 11251 131072 65536 65536 NT_STATUS_OK
WriteX 11251 196608 65536 65536 NT_STATUS_OK
WriteX 11251 262144 65536 65536 NT_STATUS_OK
WriteX 11251 327680 65536 65536 NT_STATUS_OK
WriteX 11251 393216 65536 65536 NT_STATUS_OK
WriteX 11251 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11258 NT_STATUS_OK
Close 11258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11286 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11296 NT_STATUS_OK
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11317 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11320 NT_STATUS_OK
WriteX 11320 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11320 0 65536 65536 NT_STATUS_OK
WriteX 11320 65536 65536 65536 NT_STATUS_OK
WriteX 11320 131072 65536 65536 NT_STATUS_OK
WriteX 11320 196608 65536 65536 NT_STATUS_OK
WriteX 11320 262144 26634 26634 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
ReadX 11328 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11345 NT_STATUS_OK
Close 11345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11361 NT_STATUS_OK
Close 11361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11366 NT_STATUS_OK
Close 11366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11371 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11376 NT_STATUS_OK
Close 11376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11395 NT_STATUS_OK
Close 11395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11405 NT_STATUS_OK
Close 11405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 4096 4096 NT_STATUS_OK
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 4096 4096 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 4096 4096 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11452 0 4096 4096 NT_STATUS_OK
Close 11452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
ReadX 11454 4096 4096 4096 NT_STATUS_OK
ReadX 11454 8192 4096 4096 NT_STATUS_OK
ReadX 11454 12288 4096 4096 NT_STATUS_OK
ReadX 11454 16384 4096 4096 NT_STATUS_OK
ReadX 11454 20480 4096 4096 NT_STATUS_OK
ReadX 11454 24576 4096 4096 NT_STATUS_OK
ReadX 11454 28672 4096 4096 NT_STATUS_OK
ReadX 11454 32768 4096 4096 NT_STATUS_OK
ReadX 11454 36864 4096 4096 NT_STATUS_OK
ReadX 11454 40960 4096 4096 NT_STATUS_OK
ReadX 11454 45056 4096 4096 NT_STATUS_OK
ReadX 11454 49152 4096 4096 NT_STATUS_OK
ReadX 11454 53248 4096 4096 NT_STATUS_OK
ReadX 11454 57344 4096 4096 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 65536 4096 4096 NT_STATUS_OK
ReadX 11454 69632 4096 4096 NT_STATUS_OK
ReadX 11454 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11454 1004 NT_STATUS_OK
WriteX 11454 0 4096 4096 NT_STATUS_OK
Close 11454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11455 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11460 NT_STATUS_OK
WriteX 11460 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11460 258 NT_STATUS_OK
WriteX 11460 0 65536 65536 NT_STATUS_OK
WriteX 11460 65536 19979 19979 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
QUERY_FILE_INFORMATION 11461 1004 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
SET_FILE_INFORMATION 11461 1004 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11466 1004 NT_STATUS_OK
WriteX 11466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 65536 65536 NT_STATUS_OK
WriteX 11472 65536 17654 17654 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
SET_FILE_INFORMATION 11474 1004 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
ReadX 11478 4096 4096 4096 NT_STATUS_OK
ReadX 11478 8192 4096 4096 NT_STATUS_OK
ReadX 11478 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11478 16384 4096 4096 NT_STATUS_OK
ReadX 11478 20480 4096 4096 NT_STATUS_OK
ReadX 11478 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11479 NT_STATUS_OK
ReadX 11479 0 4096 4096 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11487 NT_STATUS_OK
WriteX 11487 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 258 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 19490 19490 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
SET_FILE_INFORMATION 11489 1004 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11493 0 4096 4096 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11495 NT_STATUS_OK
ReadX 11495 0 4096 4096 NT_STATUS_OK
ReadX 11495 4096 4096 4096 NT_STATUS_OK
ReadX 11495 8192 4096 4096 NT_STATUS_OK
ReadX 11495 12288 4096 4096 NT_STATUS_OK
ReadX 11495 16384 4096 4096 NT_STATUS_OK
ReadX 11495 20480 4096 4096 NT_STATUS_OK
ReadX 11495 24576 4096 4096 NT_STATUS_OK
ReadX 11495 28672 4096 4096 NT_STATUS_OK
ReadX 11495 32768 4096 4096 NT_STATUS_OK
ReadX 11495 36864 4096 4096 NT_STATUS_OK
ReadX 11495 40960 4096 4096 NT_STATUS_OK
ReadX 11495 45056 4096 4096 NT_STATUS_OK
ReadX 11495 49152 4096 4096 NT_STATUS_OK
ReadX 11495 53248 4096 4096 NT_STATUS_OK
ReadX 11495 57344 4096 4096 NT_STATUS_OK
ReadX 11495 61440 4096 4096 NT_STATUS_OK
ReadX 11495 65536 4096 4096 NT_STATUS_OK
ReadX 11495 69632 4096 4096 NT_STATUS_OK
ReadX 11495 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11495 1004 NT_STATUS_OK
WriteX 11495 0 4096 4096 NT_STATUS_OK
Close 11495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11496 NT_STATUS_OK
SET_FILE_INFORMATION 11496 1004 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
WriteX 11501 0 65536 65536 NT_STATUS_OK
WriteX 11501 65536 8866 8866 NT_STATUS_OK
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Flush 11502 NT_STATUS_OK
SET_FILE_INFORMATION 11502 1004 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Flush 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11509 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11512 NT_STATUS_OK
WriteX 11512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11512 258 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 9298 9298 NT_STATUS_OK
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
Flush 11513 NT_STATUS_OK
SET_FILE_INFORMATION 11513 1004 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
Flush 11513 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
SET_FILE_INFORMATION 11514 1004 NT_STATUS_OK
Close 11514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11519 0 4096 4096 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11520 4096 4096 4096 NT_STATUS_OK
ReadX 11520 8192 4096 4096 NT_STATUS_OK
ReadX 11520 12288 4096 4096 NT_STATUS_OK
ReadX 11520 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11523 1004 NT_STATUS_OK
WriteX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11526 NT_STATUS_OK
Close 11526 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11529 NT_STATUS_OK
WriteX 11529 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 258 NT_STATUS_OK
WriteX 11529 0 65536 65536 NT_STATUS_OK
WriteX 11529 65536 11540 11540 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
SET_FILE_INFORMATION 11530 1004 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11535 NT_STATUS_OK
ReadX 11535 61440 4096 4096 NT_STATUS_OK
ReadX 11535 126976 4096 4096 NT_STATUS_OK
WriteX 11535 0 65536 65536 NT_STATUS_OK
WriteX 11535 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 61440 4096 4096 NT_STATUS_OK
ReadX 11536 126976 4096 4096 NT_STATUS_OK
ReadX 11536 192512 4096 4096 NT_STATUS_OK
ReadX 11536 258048 4096 4096 NT_STATUS_OK
WriteX 11536 0 65536 65536 NT_STATUS_OK
WriteX 11536 65536 65536 65536 NT_STATUS_OK
WriteX 11536 131072 65536 65536 NT_STATUS_OK
WriteX 11536 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11537 NT_STATUS_OK
ReadX 11537 61440 4096 4096 NT_STATUS_OK
ReadX 11537 126976 4096 4096 NT_STATUS_OK
ReadX 11537 192512 4096 4096 NT_STATUS_OK
ReadX 11537 258048 4096 4096 NT_STATUS_OK
ReadX 11537 323584 4096 4096 NT_STATUS_OK
ReadX 11537 389120 4096 4096 NT_STATUS_OK
ReadX 11537 454656 4096 4096 NT_STATUS_OK
ReadX 11537 520192 4096 4096 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
WriteX 11537 131072 65536 65536 NT_STATUS_OK
WriteX 11537 196608 65536 65536 NT_STATUS_OK
WriteX 11537 262144 65536 65536 NT_STATUS_OK
WriteX 11537 327680 65536 65536 NT_STATUS_OK
WriteX 11537 393216 65536 65536 NT_STATUS_OK
WriteX 11537 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
ReadX 11538 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 53 53 NT_STATUS_OK
Close 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11540 NT_STATUS_OK
Close 11540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11538 8192 4096 4096 NT_STATUS_OK
ReadX 11538 12288 4096 4096 NT_STATUS_OK
WriteX 11542 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11542 258 NT_STATUS_OK
ReadX 11538 16384 4096 4096 NT_STATUS_OK
ReadX 11538 20480 4096 4096 NT_STATUS_OK
WriteX 11542 0 15360 15360 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
WriteX 11543 0 4096 4096 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11546 4096 4096 4096 NT_STATUS_OK
ReadX 11546 8192 4096 4096 NT_STATUS_OK
ReadX 11546 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
ReadX 11549 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
ReadX 11550 4096 4096 4096 NT_STATUS_OK
ReadX 11550 8192 4096 4096 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11551 NT_STATUS_OK
WriteX 11551 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
WriteX 11551 0 15360 15360 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11556 NT_STATUS_OK
SET_FILE_INFORMATION 11556 1004 NT_STATUS_OK
Close 11556 NT_STATUS_OK
WriteX 11552 0 4096 4096 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
ReadX 11559 4096 4096 4096 NT_STATUS_OK
ReadX 11559 8192 4096 4096 NT_STATUS_OK
ReadX 11559 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11561 NT_STATUS_OK
WriteX 11561 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11561 258 NT_STATUS_OK
WriteX 11561 0 53 53 NT_STATUS_OK
Close 11561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11560 4096 4096 4096 NT_STATUS_OK
ReadX 11560 8192 4096 4096 NT_STATUS_OK
ReadX 11560 12288 4096 4096 NT_STATUS_OK
WriteX 11564 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 12006 12006 NT_STATUS_OK
Close 11564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11569 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 11991 11991 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11576 NT_STATUS_OK
SET_FILE_INFORMATION 11576 1004 NT_STATUS_OK
Close 11576 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11579 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
ReadX 11579 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
Close 11555 NT_STATUS_OK
WriteX 11559 0 19054 19054 NT_STATUS_OK
WriteX 11579 0 12288 12288 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 61440 61440 NT_STATUS_OK
ReadX 11586 61440 4096 4096 NT_STATUS_OK
ReadX 11586 65536 61440 61440 NT_STATUS_OK
ReadX 11586 126976 4096 4096 NT_STATUS_OK
ReadX 11586 131072 61440 61440 NT_STATUS_OK
ReadX 11586 192512 4096 4096 NT_STATUS_OK
ReadX 11586 196608 61440 61440 NT_STATUS_OK
ReadX 11586 258048 4096 4096 NT_STATUS_OK
ReadX 11586 262144 61440 61440 NT_STATUS_OK
ReadX 11586 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 61440 61440 NT_STATUS_OK
ReadX 11587 61440 4096 4096 NT_STATUS_OK
ReadX 11587 65536 61440 61440 NT_STATUS_OK
ReadX 11587 126976 4096 4096 NT_STATUS_OK
ReadX 11587 131072 61440 61440 NT_STATUS_OK
ReadX 11587 192512 4096 4096 NT_STATUS_OK
ReadX 11587 196608 61440 61440 NT_STATUS_OK
ReadX 11587 258048 4096 4096 NT_STATUS_OK
ReadX 11587 262144 61440 61440 NT_STATUS_OK
ReadX 11587 323584 4096 4096 NT_STATUS_OK
ReadX 11587 327680 61440 61440 NT_STATUS_OK
ReadX 11587 389120 4096 4096 NT_STATUS_OK
ReadX 11587 393216 61440 61440 NT_STATUS_OK
ReadX 11587 454656 4096 4096 NT_STATUS_OK
ReadX 11587 458752 61440 61440 NT_STATUS_OK
ReadX 11587 520192 4096 4096 NT_STATUS_OK
ReadX 11587 524288 61440 61440 NT_STATUS_OK
ReadX 11587 585728 4096 4096 NT_STATUS_OK
ReadX 11587 589824 61440 61440 NT_STATUS_OK
ReadX 11587 651264 4096 4096 NT_STATUS_OK
ReadX 11587 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 61440 61440 NT_STATUS_OK
ReadX 11588 61440 4096 4096 NT_STATUS_OK
ReadX 11588 65536 61440 61440 NT_STATUS_OK
ReadX 11588 126976 4096 4096 NT_STATUS_OK
ReadX 11588 131072 61440 61440 NT_STATUS_OK
ReadX 11588 192512 4096 4096 NT_STATUS_OK
ReadX 11588 196608 61440 61440 NT_STATUS_OK
ReadX 11588 258048 4096 4096 NT_STATUS_OK
ReadX 11588 262144 61440 61440 NT_STATUS_OK
ReadX 11588 323584 4096 4096 NT_STATUS_OK
ReadX 11588 327680 61440 61440 NT_STATUS_OK
ReadX 11588 389120 4096 4096 NT_STATUS_OK
ReadX 11588 393216 61440 61440 NT_STATUS_OK
ReadX 11588 454656 4096 4096 NT_STATUS_OK
ReadX 11588 458752 61440 61440 NT_STATUS_OK
ReadX 11588 520192 4096 4096 NT_STATUS_OK
ReadX 11588 524288 61440 61440 NT_STATUS_OK
ReadX 11588 585728 4096 4096 NT_STATUS_OK
ReadX 11588 589824 61440 61440 NT_STATUS_OK
ReadX 11588 651264 4096 4096 NT_STATUS_OK
ReadX 11588 655360 61440 61440 NT_STATUS_OK
ReadX 11588 716800 4096 4096 NT_STATUS_OK
ReadX 11588 720896 61440 61440 NT_STATUS_OK
ReadX 11588 782336 4096 4096 NT_STATUS_OK
ReadX 11588 786432 61440 61440 NT_STATUS_OK
ReadX 11588 847872 4096 4096 NT_STATUS_OK
ReadX 11588 851968 61440 61440 NT_STATUS_OK
ReadX 11588 913408 4096 4096 NT_STATUS_OK
ReadX 11588 917504 61440 61440 NT_STATUS_OK
ReadX 11588 978944 4096 4096 NT_STATUS_OK
ReadX 11588 983040 61440 61440 NT_STATUS_OK
ReadX 11588 1044480 4096 4096 NT_STATUS_OK
ReadX 11588 1048576 61440 61440 NT_STATUS_OK
ReadX 11588 1110016 4096 4096 NT_STATUS_OK
ReadX 11588 1114112 61440 61440 NT_STATUS_OK
ReadX 11588 1175552 4096 4096 NT_STATUS_OK
ReadX 11588 1179648 61440 61440 NT_STATUS_OK
ReadX 11588 1241088 4096 4096 NT_STATUS_OK
ReadX 11588 1245184 61440 61440 NT_STATUS_OK
ReadX 11588 1306624 4096 4096 NT_STATUS_OK
ReadX 11588 1310720 61440 61440 NT_STATUS_OK
ReadX 11588 1372160 4096 4096 NT_STATUS_OK
ReadX 11588 1376256 61440 61440 NT_STATUS_OK
ReadX 11588 1437696 4096 4096 NT_STATUS_OK
ReadX 11588 1441792 61440 61440 NT_STATUS_OK
ReadX 11588 1503232 4096 4096 NT_STATUS_OK
ReadX 11588 1507328 61440 61440 NT_STATUS_OK
ReadX 11588 1568768 4096 4096 NT_STATUS_OK
ReadX 11588 1572864 61440 61440 NT_STATUS_OK
ReadX 11588 1634304 4096 4096 NT_STATUS_OK
ReadX 11588 1638400 61440 61440 NT_STATUS_OK
ReadX 11588 1699840 4096 4096 NT_STATUS_OK
ReadX 11588 1703936 61440 61440 NT_STATUS_OK
ReadX 11588 1765376 4096 4096 NT_STATUS_OK
ReadX 11588 1769472 61440 61440 NT_STATUS_OK
ReadX 11588 1830912 4096 4096 NT_STATUS_OK
ReadX 11588 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11595 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 1004 NT_STATUS_OK
WriteX 11595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11596 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11597 NT_STATUS_OK
WriteX 11597 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11597 258 NT_STATUS_OK
WriteX 11597 0 491 491 NT_STATUS_OK
Close 11597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11601 NT_STATUS_OK
WriteX 11601 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11601 258 NT_STATUS_OK
WriteX 11601 0 543 543 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11615 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 1004 NT_STATUS_OK
WriteX 11615 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 258 NT_STATUS_OK
WriteX 11615 0 2048 2048 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
Flush 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11621 NT_STATUS_OK
WriteX 11621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11621 258 NT_STATUS_OK
WriteX 11621 0 2048 2048 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11627 NT_STATUS_OK
WriteX 11627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11627 258 NT_STATUS_OK
WriteX 11627 0 2048 2048 NT_STATUS_OK
Close 11627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 2048 2048 NT_STATUS_OK
ReadX 11606 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11622 0 4096 4096 NT_STATUS_OK
WriteX 11606 0 8192 8192 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
WriteX 11608 0 4096 4096 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11632 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11606 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11635 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11641 NT_STATUS_OK
ReadX 11641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11652 NT_STATUS_OK
QUERY_FILE_INFORMATION 11652 1004 NT_STATUS_OK
WriteX 11652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11652 258 NT_STATUS_OK
WriteX 11652 0 2048 2048 NT_STATUS_OK
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11660 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 1004 NT_STATUS_OK
WriteX 11660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 258 NT_STATUS_OK
WriteX 11660 0 2048 2048 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
Flush 11653 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11663 NT_STATUS_OK
WriteX 11663 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11663 258 NT_STATUS_OK
WriteX 11663 0 4096 4096 NT_STATUS_OK
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11666 NT_STATUS_OK
WriteX 11666 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11666 258 NT_STATUS_OK
WriteX 11666 0 4096 4096 NT_STATUS_OK
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11667 0 4096 4096 NT_STATUS_OK
Close 11664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11641 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11642 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 2048 2048 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11689 NT_STATUS_OK
QUERY_FILE_INFORMATION 11689 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11675 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Close 11680 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11691 NT_STATUS_OK
QUERY_FILE_INFORMATION 11691 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11693 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11711 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 1004 NT_STATUS_OK
WriteX 11711 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 258 NT_STATUS_OK
WriteX 11711 0 2048 2048 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 258 NT_STATUS_OK
WriteX 11723 0 2048 2048 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11731 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 1004 NT_STATUS_OK
WriteX 11731 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
WriteX 11731 0 2048 2048 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11712 0 4096 4096 NT_STATUS_OK
Flush 11712 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
Flush 11724 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Flush 11732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11712 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 4096 16384 16384 NT_STATUS_OK
ReadX 11694 4096 16384 16384 NT_STATUS_OK
ReadX 11726 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 2048 2048 NT_STATUS_OK
WriteX 11734 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11735 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11737 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11739 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11742 4096 16384 16384 NT_STATUS_OK
WriteX 11742 0 4096 4096 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 8192 8192 NT_STATUS_OK
ReadX 11748 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11762 0 4096 4096 NT_STATUS_OK
ReadX 11762 4096 4096 4096 NT_STATUS_OK
ReadX 11762 8192 4096 4096 NT_STATUS_OK
WriteX 11748 0 4096 4096 NT_STATUS_OK
WriteX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
ReadX 11763 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11742 0 4096 4096 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
WriteX 11771 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
ReadX 11773 4096 4096 4096 NT_STATUS_OK
WriteX 11773 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11774 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11744 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11776 0 4096 4096 NT_STATUS_OK
ReadX 11776 4096 4096 4096 NT_STATUS_OK
ReadX 11776 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
ReadX 11777 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11793 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11794 NT_STATUS_OK
QUERY_FILE_INFORMATION 11794 1004 NT_STATUS_OK
WriteX 11794 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11794 258 NT_STATUS_OK
WriteX 11794 0 2048 2048 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11795 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
WriteX 11800 0 2048 2048 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11784 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11802 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11804 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 61440 4096 4096 NT_STATUS_OK
ReadX 11806 126976 4096 4096 NT_STATUS_OK
WriteX 11806 0 65536 65536 NT_STATUS_OK
WriteX 11806 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 61440 4096 4096 NT_STATUS_OK
ReadX 11807 126976 4096 4096 NT_STATUS_OK
ReadX 11807 192512 4096 4096 NT_STATUS_OK
ReadX 11807 258048 4096 4096 NT_STATUS_OK
WriteX 11807 0 65536 65536 NT_STATUS_OK
WriteX 11807 65536 65536 65536 NT_STATUS_OK
WriteX 11807 131072 65536 65536 NT_STATUS_OK
WriteX 11807 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 61440 4096 4096 NT_STATUS_OK
ReadX 11808 126976 4096 4096 NT_STATUS_OK
ReadX 11808 192512 4096 4096 NT_STATUS_OK
ReadX 11808 258048 4096 4096 NT_STATUS_OK
ReadX 11808 323584 4096 4096 NT_STATUS_OK
ReadX 11808 389120 4096 4096 NT_STATUS_OK
ReadX 11808 454656 4096 4096 NT_STATUS_OK
ReadX 11808 520192 4096 4096 NT_STATUS_OK
WriteX 11808 0 65536 65536 NT_STATUS_OK
WriteX 11808 65536 65536 65536 NT_STATUS_OK
WriteX 11808 131072 65536 65536 NT_STATUS_OK
WriteX 11808 196608 65536 65536 NT_STATUS_OK
WriteX 11808 262144 65536 65536 NT_STATUS_OK
WriteX 11808 327680 65536 65536 NT_STATUS_OK
WriteX 11808 393216 65536 65536 NT_STATUS_OK
WriteX 11808 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11809 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 8192 4096 4096 NT_STATUS_OK
ReadX 11809 12288 4096 4096 NT_STATUS_OK
ReadX 11809 16384 4096 4096 NT_STATUS_OK
ReadX 11809 20480 4096 4096 NT_STATUS_OK
ReadX 11809 24576 4096 4096 NT_STATUS_OK
ReadX 11809 28672 4096 4096 NT_STATUS_OK
ReadX 11809 32768 4096 4096 NT_STATUS_OK
ReadX 11809 36864 4096 4096 NT_STATUS_OK
ReadX 11809 40960 4096 4096 NT_STATUS_OK
ReadX 11809 45056 4096 4096 NT_STATUS_OK
ReadX 11809 49152 4096 4096 NT_STATUS_OK
ReadX 11809 53248 4096 4096 NT_STATUS_OK
ReadX 11809 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11809 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11812 NT_STATUS_OK
WriteX 11812 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11812 1004 NT_STATUS_OK
WriteX 11812 0 57088 57088 NT_STATUS_OK
WriteX 11812 0 4096 4096 NT_STATUS_OK
Flush 11812 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11813 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
Close 11813 NT_STATUS_OK
SET_FILE_INFORMATION 11812 1004 NT_STATUS_OK
WriteX 11812 0 4096 4096 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11816 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11817 NT_STATUS_OK
WriteX 11817 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11817 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
WriteX 11817 0 51456 51456 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
Flush 11817 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11821 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11826 NT_STATUS_OK
WriteX 11826 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
WriteX 11826 0 53077 53077 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11827 NT_STATUS_OK
WriteX 11827 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11827 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 65536 65536 NT_STATUS_OK
WriteX 11827 65536 1856 1856 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Flush 11827 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11829 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11833 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11836 NT_STATUS_OK
WriteX 11836 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
WriteX 11836 0 7983 7983 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11841 NT_STATUS_OK
WriteX 11841 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 258 NT_STATUS_OK
WriteX 11841 0 65536 65536 NT_STATUS_OK
WriteX 11841 65536 65536 65536 NT_STATUS_OK
WriteX 11841 131072 65536 65536 NT_STATUS_OK
WriteX 11841 196608 65536 65536 NT_STATUS_OK
WriteX 11841 262144 65536 65536 NT_STATUS_OK
WriteX 11841 327680 65536 65536 NT_STATUS_OK
WriteX 11841 393216 65536 65536 NT_STATUS_OK
WriteX 11841 458752 46731 46731 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11842 NT_STATUS_OK
WriteX 11842 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11831 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 0 65536 65536 NT_STATUS_OK
WriteX 11842 65536 22848 22848 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Flush 11842 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11846 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11847 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11847 1004 NT_STATUS_OK
ReadX 11847 8192 4096 4096 NT_STATUS_OK
ReadX 11847 12288 4096 4096 NT_STATUS_OK
ReadX 11847 16384 4096 4096 NT_STATUS_OK
ReadX 11847 20480 4096 4096 NT_STATUS_OK
ReadX 11847 24576 4096 4096 NT_STATUS_OK
ReadX 11847 28672 4096 4096 NT_STATUS_OK
ReadX 11847 32768 4096 4096 NT_STATUS_OK
ReadX 11847 36864 4096 4096 NT_STATUS_OK
ReadX 11847 40960 4096 4096 NT_STATUS_OK
ReadX 11847 45056 4096 4096 NT_STATUS_OK
ReadX 11847 49152 4096 4096 NT_STATUS_OK
ReadX 11847 53248 4096 4096 NT_STATUS_OK
ReadX 11847 57344 4096 4096 NT_STATUS_OK
ReadX 11847 61440 4096 4096 NT_STATUS_OK
ReadX 11847 65536 4096 4096 NT_STATUS_OK
ReadX 11847 69632 4096 4096 NT_STATUS_OK
ReadX 11847 73728 4096 4096 NT_STATUS_OK
ReadX 11847 77824 4096 4096 NT_STATUS_OK
ReadX 11847 81920 4096 4096 NT_STATUS_OK
ReadX 11847 86016 4096 4096 NT_STATUS_OK
ReadX 11847 90112 4096 4096 NT_STATUS_OK
ReadX 11847 94208 4096 4096 NT_STATUS_OK
ReadX 11847 98304 4096 4096 NT_STATUS_OK
ReadX 11847 102400 4096 4096 NT_STATUS_OK
ReadX 11847 106496 4096 4096 NT_STATUS_OK
ReadX 11847 110592 4096 4096 NT_STATUS_OK
ReadX 11847 114688 4096 4096 NT_STATUS_OK
ReadX 11847 118784 4096 4096 NT_STATUS_OK
ReadX 11847 122880 4096 4096 NT_STATUS_OK
ReadX 11847 126976 4096 4096 NT_STATUS_OK
ReadX 11847 131072 4096 4096 NT_STATUS_OK
ReadX 11847 135168 4096 4096 NT_STATUS_OK
ReadX 11847 139264 4096 4096 NT_STATUS_OK
ReadX 11847 143360 4096 4096 NT_STATUS_OK
ReadX 11847 147456 4096 4096 NT_STATUS_OK
ReadX 11847 151552 4096 4096 NT_STATUS_OK
ReadX 11847 155648 4096 4096 NT_STATUS_OK
ReadX 11847 159744 4096 4096 NT_STATUS_OK
ReadX 11847 163840 4096 4096 NT_STATUS_OK
ReadX 11847 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11847 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11848 NT_STATUS_OK
Close 11848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11851 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
WriteX 11850 0 42388 42388 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
ReadX 11854 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11855 NT_STATUS_OK
WriteX 11855 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11855 258 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
WriteX 11855 0 42652 42652 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
ReadX 11859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11864 NT_STATUS_OK
WriteX 11864 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
WriteX 11864 0 65536 65536 NT_STATUS_OK
WriteX 11864 65536 49 49 NT_STATUS_OK
Close 11864 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 61440 61440 NT_STATUS_OK
ReadX 11865 61440 4096 4096 NT_STATUS_OK
ReadX 11865 65536 61440 61440 NT_STATUS_OK
ReadX 11865 126976 4096 4096 NT_STATUS_OK
ReadX 11865 131072 61440 61440 NT_STATUS_OK
ReadX 11865 192512 4096 4096 NT_STATUS_OK
ReadX 11865 196608 61440 61440 NT_STATUS_OK
ReadX 11865 258048 4096 4096 NT_STATUS_OK
ReadX 11865 262144 61440 61440 NT_STATUS_OK
ReadX 11865 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 61440 61440 NT_STATUS_OK
ReadX 11866 61440 4096 4096 NT_STATUS_OK
ReadX 11866 65536 61440 61440 NT_STATUS_OK
ReadX 11866 126976 4096 4096 NT_STATUS_OK
ReadX 11866 131072 61440 61440 NT_STATUS_OK
ReadX 11866 192512 4096 4096 NT_STATUS_OK
ReadX 11866 196608 61440 61440 NT_STATUS_OK
ReadX 11866 258048 4096 4096 NT_STATUS_OK
ReadX 11866 262144 61440 61440 NT_STATUS_OK
ReadX 11866 323584 4096 4096 NT_STATUS_OK
ReadX 11866 327680 61440 61440 NT_STATUS_OK
ReadX 11866 389120 4096 4096 NT_STATUS_OK
ReadX 11866 393216 61440 61440 NT_STATUS_OK
ReadX 11866 454656 4096 4096 NT_STATUS_OK
ReadX 11866 458752 61440 61440 NT_STATUS_OK
ReadX 11866 520192 4096 4096 NT_STATUS_OK
ReadX 11866 524288 61440 61440 NT_STATUS_OK
ReadX 11866 585728 4096 4096 NT_STATUS_OK
ReadX 11866 589824 61440 61440 NT_STATUS_OK
ReadX 11866 651264 4096 4096 NT_STATUS_OK
ReadX 11866 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 61440 61440 NT_STATUS_OK
ReadX 11867 61440 4096 4096 NT_STATUS_OK
ReadX 11867 65536 61440 61440 NT_STATUS_OK
ReadX 11867 126976 4096 4096 NT_STATUS_OK
ReadX 11867 131072 61440 61440 NT_STATUS_OK
ReadX 11867 192512 4096 4096 NT_STATUS_OK
ReadX 11867 196608 61440 61440 NT_STATUS_OK
ReadX 11867 258048 4096 4096 NT_STATUS_OK
ReadX 11867 262144 61440 61440 NT_STATUS_OK
ReadX 11867 323584 4096 4096 NT_STATUS_OK
ReadX 11867 327680 61440 61440 NT_STATUS_OK
ReadX 11867 389120 4096 4096 NT_STATUS_OK
ReadX 11867 393216 61440 61440 NT_STATUS_OK
ReadX 11867 454656 4096 4096 NT_STATUS_OK
ReadX 11867 458752 61440 61440 NT_STATUS_OK
ReadX 11867 520192 4096 4096 NT_STATUS_OK
ReadX 11867 524288 61440 61440 NT_STATUS_OK
ReadX 11867 585728 4096 4096 NT_STATUS_OK
ReadX 11867 589824 61440 61440 NT_STATUS_OK
ReadX 11867 651264 4096 4096 NT_STATUS_OK
ReadX 11867 655360 61440 61440 NT_STATUS_OK
ReadX 11867 716800 4096 4096 NT_STATUS_OK
ReadX 11867 720896 61440 61440 NT_STATUS_OK
ReadX 11867 782336 4096 4096 NT_STATUS_OK
ReadX 11867 786432 61440 61440 NT_STATUS_OK
ReadX 11867 847872 4096 4096 NT_STATUS_OK
ReadX 11867 851968 61440 61440 NT_STATUS_OK
ReadX 11867 913408 4096 4096 NT_STATUS_OK
ReadX 11867 917504 61440 61440 NT_STATUS_OK
ReadX 11867 978944 4096 4096 NT_STATUS_OK
ReadX 11867 983040 61440 61440 NT_STATUS_OK
ReadX 11867 1044480 4096 4096 NT_STATUS_OK
ReadX 11867 1048576 61440 61440 NT_STATUS_OK
ReadX 11867 1110016 4096 4096 NT_STATUS_OK
ReadX 11867 1114112 61440 61440 NT_STATUS_OK
ReadX 11867 1175552 4096 4096 NT_STATUS_OK
ReadX 11867 1179648 61440 61440 NT_STATUS_OK
ReadX 11867 1241088 4096 4096 NT_STATUS_OK
ReadX 11867 1245184 61440 61440 NT_STATUS_OK
ReadX 11867 1306624 4096 4096 NT_STATUS_OK
ReadX 11867 1310720 61440 61440 NT_STATUS_OK
ReadX 11867 1372160 4096 4096 NT_STATUS_OK
ReadX 11867 1376256 61440 61440 NT_STATUS_OK
ReadX 11867 1437696 4096 4096 NT_STATUS_OK
ReadX 11867 1441792 61440 61440 NT_STATUS_OK
ReadX 11867 1503232 4096 4096 NT_STATUS_OK
ReadX 11867 1507328 61440 61440 NT_STATUS_OK
ReadX 11867 1568768 4096 4096 NT_STATUS_OK
ReadX 11867 1572864 61440 61440 NT_STATUS_OK
ReadX 11867 1634304 4096 4096 NT_STATUS_OK
ReadX 11867 1638400 61440 61440 NT_STATUS_OK
ReadX 11867 1699840 4096 4096 NT_STATUS_OK
ReadX 11867 1703936 61440 61440 NT_STATUS_OK
ReadX 11867 1765376 4096 4096 NT_STATUS_OK
ReadX 11867 1769472 61440 61440 NT_STATUS_OK
ReadX 11867 1830912 4096 4096 NT_STATUS_OK
ReadX 11867 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11869 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
ReadX 11869 2156 24 24 NT_STATUS_OK
ReadX 11869 2139 276 276 NT_STATUS_OK
ReadX 11869 2136 14 14 NT_STATUS_OK
ReadX 11869 2136 7 7 NT_STATUS_OK
ReadX 11869 2138 12 12 NT_STATUS_OK
ReadX 11869 2137 8 8 NT_STATUS_OK
ReadX 11869 2135 15 15 NT_STATUS_OK
ReadX 11869 0 16 16 NT_STATUS_OK
ReadX 11869 16 2048 2048 NT_STATUS_OK
ReadX 11869 2064 2048 2048 NT_STATUS_OK
ReadX 11869 257 2048 2048 NT_STATUS_OK
ReadX 11869 385 2048 2048 NT_STATUS_OK
ReadX 11869 513 2048 2048 NT_STATUS_OK
ReadX 11869 641 2048 2048 NT_STATUS_OK
ReadX 11869 769 2048 2048 NT_STATUS_OK
ReadX 11869 897 2048 2048 NT_STATUS_OK
ReadX 11869 1025 2048 2048 NT_STATUS_OK
ReadX 11869 1153 2048 2048 NT_STATUS_OK
ReadX 11869 1281 2048 2048 NT_STATUS_OK
ReadX 11869 1409 2048 2048 NT_STATUS_OK
ReadX 11869 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11871 NT_STATUS_OK
Close 11871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11874 NT_STATUS_OK
WriteX 11874 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11874 258 NT_STATUS_OK
WriteX 11874 0 10575 10575 NT_STATUS_OK
Flush 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11877 NT_STATUS_OK
ReadX 11877 0 4096 4096 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11879 NT_STATUS_OK
LockX 11879 2147483538 1 NT_STATUS_OK
UnlockX 11879 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1005 NT_STATUS_OK
ReadX 11879 0 512 512 NT_STATUS_OK
ReadX 11879 512 512 512 NT_STATUS_OK
ReadX 11879 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
Close 11879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1005 NT_STATUS_OK
ReadX 11880 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11881 NT_STATUS_OK
LockX 11881 2147483538 1 NT_STATUS_OK
UnlockX 11881 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1005 NT_STATUS_OK
ReadX 11881 0 512 512 NT_STATUS_OK
ReadX 11881 512 512 512 NT_STATUS_OK
ReadX 11881 1024 512 512 NT_STATUS_OK
ReadX 11881 288 20 20 NT_STATUS_OK
ReadX 11881 308 2084 2084 NT_STATUS_OK
ReadX 11881 388 2084 2084 NT_STATUS_OK
ReadX 11881 388 2084 2084 NT_STATUS_OK
ReadX 11868 2157 1386 1386 NT_STATUS_OK
ReadX 11881 2472 399 399 NT_STATUS_OK
ReadX 11881 3072 1536 1536 NT_STATUS_OK
ReadX 11881 544 149 149 NT_STATUS_OK
ReadX 11881 693 485 485 NT_STATUS_OK
Close 11881 NT_STATUS_OK
ReadX 11868 2157 4096 4096 NT_STATUS_OK
ReadX 11868 6253 4096 4096 NT_STATUS_OK
ReadX 11868 10349 4096 4096 NT_STATUS_OK
ReadX 11868 14445 4096 4096 NT_STATUS_OK
ReadX 11868 18541 4096 4096 NT_STATUS_OK
ReadX 11868 22637 256 256 NT_STATUS_OK
ReadX 11868 22893 4096 4096 NT_STATUS_OK
ReadX 11868 26989 4096 4096 NT_STATUS_OK
ReadX 11868 31085 4096 4096 NT_STATUS_OK
ReadX 11868 35181 4096 4096 NT_STATUS_OK
ReadX 11868 39277 4096 4096 NT_STATUS_OK
ReadX 11868 43373 4096 4096 NT_STATUS_OK
ReadX 11868 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11868 2157 1024 1024 NT_STATUS_OK
ReadX 11868 1667 4688 4688 NT_STATUS_OK
ReadX 11868 6355 3516 3516 NT_STATUS_OK
ReadX 11868 9871 16384 16384 NT_STATUS_OK
ReadX 11868 26255 3771 3771 NT_STATUS_OK
ReadX 11868 30026 2048 2048 NT_STATUS_OK
ReadX 11868 32074 1024 1024 NT_STATUS_OK
ReadX 11868 33098 6652 6652 NT_STATUS_OK
ReadX 11868 39750 16384 16384 NT_STATUS_OK
ReadX 11868 56134 10496 10496 NT_STATUS_OK
ReadX 11868 66630 1784 1784 NT_STATUS_OK
ReadX 11868 68414 90 90 NT_STATUS_OK
ReadX 11868 68504 273 273 NT_STATUS_OK
ReadX 11868 68777 1600 1600 NT_STATUS_OK
ReadX 11868 70377 640 640 NT_STATUS_OK
ReadX 11868 71017 1280 1280 NT_STATUS_OK
ReadX 11868 72297 8464 8464 NT_STATUS_OK
ReadX 11868 80761 158 158 NT_STATUS_OK
ReadX 11868 80919 912 912 NT_STATUS_OK
ReadX 11868 81831 1980 1980 NT_STATUS_OK
ReadX 11868 83811 2256 2256 NT_STATUS_OK
ReadX 11868 86067 400 400 NT_STATUS_OK
ReadX 11868 86467 252 252 NT_STATUS_OK
ReadX 11868 86719 42 42 NT_STATUS_OK
ReadX 11868 86761 725 725 NT_STATUS_OK
ReadX 11868 2009 512 512 NT_STATUS_OK
ReadX 11868 3895 9 9 NT_STATUS_OK
ReadX 11868 3781 46 46 NT_STATUS_OK
ReadX 11868 4059 92 92 NT_STATUS_OK
ReadX 11868 3781 92 92 NT_STATUS_OK
ReadX 11868 3986 184 184 NT_STATUS_OK
ReadX 11868 3987 16384 16384 NT_STATUS_OK
ReadX 11868 3902 16384 16384 NT_STATUS_OK
ReadX 11868 3781 10240 10240 NT_STATUS_OK
ReadX 11868 3821 16384 16384 NT_STATUS_OK
ReadX 11868 3891 935 935 NT_STATUS_OK
ReadX 11868 4060 10240 10240 NT_STATUS_OK
ReadX 11868 4059 184 184 NT_STATUS_OK
ReadX 11868 256 184 184 NT_STATUS_OK
ReadX 11868 256 1026 1026 NT_STATUS_OK
ReadX 11868 3901 326 326 NT_STATUS_OK
ReadX 11868 3899 652 652 NT_STATUS_OK
ReadX 11868 256 2 2 NT_STATUS_OK
ReadX 11868 258 4948 4948 NT_STATUS_OK
Close 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11886 NT_STATUS_OK
WriteX 11886 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11886 258 NT_STATUS_OK
WriteX 11886 0 65536 65536 NT_STATUS_OK
WriteX 11886 65536 65536 65536 NT_STATUS_OK
WriteX 11886 131072 65536 65536 NT_STATUS_OK
WriteX 11886 196608 65536 65536 NT_STATUS_OK
WriteX 11886 262144 65536 65536 NT_STATUS_OK
WriteX 11886 327680 65536 65536 NT_STATUS_OK
WriteX 11886 393216 65536 65536 NT_STATUS_OK
WriteX 11886 458752 65536 65536 NT_STATUS_OK
WriteX 11886 524288 65536 65536 NT_STATUS_OK
WriteX 11886 589824 35257 35257 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11891 NT_STATUS_OK
WriteX 11891 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11891 258 NT_STATUS_OK
WriteX 11891 0 65536 65536 NT_STATUS_OK
WriteX 11891 65536 65536 65536 NT_STATUS_OK
WriteX 11891 131072 65536 65536 NT_STATUS_OK
WriteX 11891 196608 65536 65536 NT_STATUS_OK
WriteX 11891 262144 65536 65536 NT_STATUS_OK
WriteX 11891 327680 65536 65536 NT_STATUS_OK
WriteX 11891 393216 65536 65536 NT_STATUS_OK
WriteX 11891 458752 65536 65536 NT_STATUS_OK
WriteX 11891 524288 65536 65536 NT_STATUS_OK
WriteX 11891 589824 57598 57598 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11893 NT_STATUS_OK
WriteX 11893 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11893 258 NT_STATUS_OK
WriteX 11893 0 12543 12543 NT_STATUS_OK
Flush 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11899 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
ReadX 11899 1938 24 24 NT_STATUS_OK
ReadX 11899 1920 276 276 NT_STATUS_OK
ReadX 11899 1918 14 14 NT_STATUS_OK
ReadX 11899 1918 7 7 NT_STATUS_OK
ReadX 11899 1919 12 12 NT_STATUS_OK
ReadX 11899 1919 8 8 NT_STATUS_OK
ReadX 11899 1917 15 15 NT_STATUS_OK
ReadX 11899 0 16 16 NT_STATUS_OK
ReadX 11899 16 2048 2048 NT_STATUS_OK
ReadX 11899 2064 2048 2048 NT_STATUS_OK
ReadX 11899 257 2048 2048 NT_STATUS_OK
ReadX 11899 385 2048 2048 NT_STATUS_OK
ReadX 11899 513 2048 2048 NT_STATUS_OK
ReadX 11899 641 2048 2048 NT_STATUS_OK
ReadX 11899 769 2048 2048 NT_STATUS_OK
ReadX 11899 897 2048 2048 NT_STATUS_OK
ReadX 11899 1025 2048 2048 NT_STATUS_OK
ReadX 11899 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11901 NT_STATUS_OK
Close 11901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
WriteX 11904 0 11588 11588 NT_STATUS_OK
Flush 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
Close 11899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11909 NT_STATUS_OK
WriteX 11909 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 258 NT_STATUS_OK
WriteX 11909 0 11615 11615 NT_STATUS_OK
Flush 11909 NT_STATUS_OK
Close 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 16050 16050 NT_STATUS_OK
Close 11918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11898 1939 64 64 NT_STATUS_OK
ReadX 11898 128 248 248 NT_STATUS_OK
ReadX 11898 128 568 568 NT_STATUS_OK
ReadX 11898 3872 1536 1536 NT_STATUS_OK
ReadX 11898 3456 2560 2560 NT_STATUS_OK
ReadX 11898 3136 512 512 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
ReadX 11898 3264 3072 3072 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 3616 4096 4096 NT_STATUS_OK
ReadX 11898 1939 64 64 NT_STATUS_OK
ReadX 11898 128 248 248 NT_STATUS_OK
ReadX 11898 128 608 608 NT_STATUS_OK
ReadX 11898 2858 1024 1024 NT_STATUS_OK
ReadX 11898 2810 4096 4096 NT_STATUS_OK
ReadX 11898 2826 4096 4096 NT_STATUS_OK
ReadX 11898 2580 2048 2048 NT_STATUS_OK
ReadX 11898 2800 2560 2560 NT_STATUS_OK
ReadX 11898 2100 4096 4096 NT_STATUS_OK
ReadX 11898 2084 4096 4096 NT_STATUS_OK
ReadX 11898 868 4096 4096 NT_STATUS_OK
ReadX 11898 2324 4096 4096 NT_STATUS_OK
ReadX 11898 884 4096 4096 NT_STATUS_OK
ReadX 11898 2604 1024 1024 NT_STATUS_OK
ReadX 11898 580 4096 4096 NT_STATUS_OK
ReadX 11898 596 4096 4096 NT_STATUS_OK
ReadX 11898 2752 4096 4096 NT_STATUS_OK
ReadX 11898 2842 1024 1024 NT_STATUS_OK
ReadX 11898 660 4096 4096 NT_STATUS_OK
ReadX 11898 2720 4096 4096 NT_STATUS_OK
ReadX 11898 2736 4096 4096 NT_STATUS_OK
ReadX 11898 628 4096 4096 NT_STATUS_OK
ReadX 11898 2704 4096 4096 NT_STATUS_OK
ReadX 11898 1556 4096 4096 NT_STATUS_OK
ReadX 11898 576 4096 4096 NT_STATUS_OK
ReadX 11898 3168 1536 1536 NT_STATUS_OK
ReadX 11898 832 4096 4096 NT_STATUS_OK
ReadX 11898 1088 4096 4096 NT_STATUS_OK
ReadX 11898 1344 4096 4096 NT_STATUS_OK
ReadX 11898 1600 4096 4096 NT_STATUS_OK
ReadX 11898 1856 4096 4096 NT_STATUS_OK
ReadX 11898 2112 4096 4096 NT_STATUS_OK
ReadX 11898 1892 4096 4096 NT_STATUS_OK
ReadX 11898 820 4096 4096 NT_STATUS_OK
ReadX 11898 788 4096 4096 NT_STATUS_OK
ReadX 11898 1604 4096 4096 NT_STATUS_OK
ReadX 11898 3648 4096 4096 NT_STATUS_OK
ReadX 11898 2608 4096 4096 NT_STATUS_OK
ReadX 11898 548 4096 4096 NT_STATUS_OK
ReadX 11898 740 4096 4096 NT_STATUS_OK
ReadX 11898 1344 4096 4096 NT_STATUS_OK
ReadX 11898 3392 4096 4096 NT_STATUS_OK
ReadX 11898 3904 4096 4096 NT_STATUS_OK
ReadX 11898 644 4096 4096 NT_STATUS_OK
ReadX 11898 676 4096 4096 NT_STATUS_OK
ReadX 11898 2688 4096 4096 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 900 4096 4096 NT_STATUS_OK
ReadX 11898 1908 4096 4096 NT_STATUS_OK
ReadX 11898 852 4096 4096 NT_STATUS_OK
ReadX 11898 724 4096 4096 NT_STATUS_OK
ReadX 11898 2292 4096 4096 NT_STATUS_OK
ReadX 11898 612 4096 4096 NT_STATUS_OK
ReadX 11898 388 4096 4096 NT_STATUS_OK
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 500 4096 4096 NT_STATUS_OK
ReadX 11898 356 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 576 4096 4096 NT_STATUS_OK
ReadX 11898 340 4096 4096 NT_STATUS_OK
ReadX 11898 420 4096 4096 NT_STATUS_OK
ReadX 11898 1600 4096 4096 NT_STATUS_OK
ReadX 11898 404 4096 4096 NT_STATUS_OK
ReadX 11898 1428 4096 4096 NT_STATUS_OK
ReadX 11898 2656 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 452 4096 4096 NT_STATUS_OK
ReadX 11898 692 4096 4096 NT_STATUS_OK
ReadX 11898 564 4096 4096 NT_STATUS_OK
ReadX 11898 372 4096 4096 NT_STATUS_OK
ReadX 11898 468 4096 4096 NT_STATUS_OK
ReadX 11898 484 4096 4096 NT_STATUS_OK
ReadX 11898 1088 4096 4096 NT_STATUS_OK
ReadX 11898 1924 4096 4096 NT_STATUS_OK
ReadX 11898 2768 4096 4096 NT_STATUS_OK
ReadX 11898 832 4096 4096 NT_STATUS_OK
ReadX 11898 836 4096 4096 NT_STATUS_OK
ReadX 11898 1856 4096 4096 NT_STATUS_OK
ReadX 11898 2640 4096 4096 NT_STATUS_OK
ReadX 11898 436 4096 4096 NT_STATUS_OK
ReadX 11898 1828 4096 4096 NT_STATUS_OK
ReadX 11898 804 4096 4096 NT_STATUS_OK
ReadX 11898 1860 4096 4096 NT_STATUS_OK
ReadX 11898 1812 4096 4096 NT_STATUS_OK
ReadX 11898 756 4096 4096 NT_STATUS_OK
ReadX 11898 1636 4096 4096 NT_STATUS_OK
ReadX 11898 772 4096 4096 NT_STATUS_OK
ReadX 11898 2036 4096 4096 NT_STATUS_OK
ReadX 11898 1220 4096 4096 NT_STATUS_OK
ReadX 11898 1652 4096 4096 NT_STATUS_OK
ReadX 11898 2588 4096 4096 NT_STATUS_OK
ReadX 11898 916 4096 4096 NT_STATUS_OK
ReadX 11898 260 4096 4096 NT_STATUS_OK
ReadX 11898 932 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 308 4096 4096 NT_STATUS_OK
ReadX 11898 292 4096 4096 NT_STATUS_OK
ReadX 11898 1140 4096 4096 NT_STATUS_OK
ReadX 11898 276 4096 4096 NT_STATUS_OK
ReadX 11898 2020 4096 4096 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
ReadX 11898 516 4096 4096 NT_STATUS_OK
ReadX 11898 1844 4096 4096 NT_STATUS_OK
ReadX 11898 1124 4096 4096 NT_STATUS_OK
ReadX 11898 3136 4096 4096 NT_STATUS_OK
ReadX 11898 324 4096 4096 NT_STATUS_OK
ReadX 11898 1156 4096 4096 NT_STATUS_OK
ReadX 11898 1172 4096 4096 NT_STATUS_OK
ReadX 11898 2112 4096 4096 NT_STATUS_OK
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 964 4096 4096 NT_STATUS_OK
ReadX 11898 980 4096 4096 NT_STATUS_OK
ReadX 11898 1012 4096 4096 NT_STATUS_OK
ReadX 11898 532 4096 4096 NT_STATUS_OK
ReadX 11898 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11898 1620 4096 4096 NT_STATUS_OK
ReadX 11898 1604 4096 4096 NT_STATUS_OK
ReadX 11898 2116 4096 4096 NT_STATUS_OK
ReadX 11898 2132 4096 4096 NT_STATUS_OK
ReadX 11898 2148 4096 4096 NT_STATUS_OK
ReadX 11898 2276 4096 4096 NT_STATUS_OK
ReadX 11898 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11923 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
WriteX 11923 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11923 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
WriteX 11923 0 65536 65536 NT_STATUS_OK
WriteX 11923 65536 64850 64850 NT_STATUS_OK
Close 11923 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11925 NT_STATUS_OK
WriteX 11925 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
ReadX 11898 2068 4096 4096 NT_STATUS_OK
ReadX 11898 1588 4096 4096 NT_STATUS_OK
ReadX 11898 1572 4096 4096 NT_STATUS_OK
WriteX 11925 0 18630 18630 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11898 612 4096 4096 NT_STATUS_OK
ReadX 11898 564 4096 4096 NT_STATUS_OK
ReadX 11898 1876 4096 4096 NT_STATUS_OK
ReadX 11898 628 4096 4096 NT_STATUS_OK
ReadX 11898 740 4096 4096 NT_STATUS_OK
ReadX 11898 724 4096 4096 NT_STATUS_OK
ReadX 11898 644 4096 4096 NT_STATUS_OK
ReadX 11898 2324 4096 4096 NT_STATUS_OK
ReadX 11898 660 4096 4096 NT_STATUS_OK
ReadX 11898 852 4096 4096 NT_STATUS_OK
ReadX 11898 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 580 4096 4096 NT_STATUS_OK
ReadX 11898 3136 512 512 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
Close 11898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 61440 4096 4096 NT_STATUS_OK
ReadX 11930 126976 4096 4096 NT_STATUS_OK
WriteX 11930 0 65536 65536 NT_STATUS_OK
WriteX 11930 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 61440 4096 4096 NT_STATUS_OK
ReadX 11931 126976 4096 4096 NT_STATUS_OK
ReadX 11931 192512 4096 4096 NT_STATUS_OK
ReadX 11931 258048 4096 4096 NT_STATUS_OK
WriteX 11931 0 65536 65536 NT_STATUS_OK
WriteX 11931 65536 65536 65536 NT_STATUS_OK
WriteX 11931 131072 65536 65536 NT_STATUS_OK
WriteX 11931 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 61440 4096 4096 NT_STATUS_OK
ReadX 11932 126976 4096 4096 NT_STATUS_OK
ReadX 11932 192512 4096 4096 NT_STATUS_OK
ReadX 11932 258048 4096 4096 NT_STATUS_OK
ReadX 11932 323584 4096 4096 NT_STATUS_OK
ReadX 11932 389120 4096 4096 NT_STATUS_OK
ReadX 11932 454656 4096 4096 NT_STATUS_OK
ReadX 11932 520192 4096 4096 NT_STATUS_OK
WriteX 11932 0 65536 65536 NT_STATUS_OK
WriteX 11932 65536 65536 65536 NT_STATUS_OK
WriteX 11932 131072 65536 65536 NT_STATUS_OK
WriteX 11932 196608 65536 65536 NT_STATUS_OK
WriteX 11932 262144 65536 65536 NT_STATUS_OK
WriteX 11932 327680 65536 65536 NT_STATUS_OK
WriteX 11932 393216 65536 65536 NT_STATUS_OK
WriteX 11932 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11935 NT_STATUS_OK
WriteX 11935 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11933 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11937 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11940 NT_STATUS_OK
WriteX 11940 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11940 258 NT_STATUS_OK
WriteX 11940 0 62591 62591 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11945 NT_STATUS_OK
WriteX 11945 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11945 258 NT_STATUS_OK
WriteX 11945 0 10845 10845 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11947 NT_STATUS_OK
Close 11947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11950 NT_STATUS_OK
WriteX 11950 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
WriteX 11950 0 30118 30118 NT_STATUS_OK
Close 11950 NT_STATUS_OK
WriteX 11933 0 4096 4096 NT_STATUS_OK
WriteX 11935 0 64 64 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 61440 61440 NT_STATUS_OK
ReadX 11952 61440 4096 4096 NT_STATUS_OK
ReadX 11952 65536 61440 61440 NT_STATUS_OK
ReadX 11952 126976 4096 4096 NT_STATUS_OK
ReadX 11952 131072 61440 61440 NT_STATUS_OK
ReadX 11952 192512 4096 4096 NT_STATUS_OK
ReadX 11952 196608 61440 61440 NT_STATUS_OK
ReadX 11952 258048 4096 4096 NT_STATUS_OK
ReadX 11952 262144 61440 61440 NT_STATUS_OK
ReadX 11952 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 61440 61440 NT_STATUS_OK
ReadX 11953 61440 4096 4096 NT_STATUS_OK
ReadX 11953 65536 61440 61440 NT_STATUS_OK
ReadX 11953 126976 4096 4096 NT_STATUS_OK
ReadX 11953 131072 61440 61440 NT_STATUS_OK
ReadX 11953 192512 4096 4096 NT_STATUS_OK
ReadX 11953 196608 61440 61440 NT_STATUS_OK
ReadX 11953 258048 4096 4096 NT_STATUS_OK
ReadX 11953 262144 61440 61440 NT_STATUS_OK
ReadX 11953 323584 4096 4096 NT_STATUS_OK
ReadX 11953 327680 61440 61440 NT_STATUS_OK
ReadX 11953 389120 4096 4096 NT_STATUS_OK
ReadX 11953 393216 61440 61440 NT_STATUS_OK
ReadX 11953 454656 4096 4096 NT_STATUS_OK
ReadX 11953 458752 61440 61440 NT_STATUS_OK
ReadX 11953 520192 4096 4096 NT_STATUS_OK
ReadX 11953 524288 61440 61440 NT_STATUS_OK
ReadX 11953 585728 4096 4096 NT_STATUS_OK
ReadX 11953 589824 61440 61440 NT_STATUS_OK
ReadX 11953 651264 4096 4096 NT_STATUS_OK
ReadX 11953 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 61440 61440 NT_STATUS_OK
ReadX 11954 61440 4096 4096 NT_STATUS_OK
ReadX 11954 65536 61440 61440 NT_STATUS_OK
ReadX 11954 126976 4096 4096 NT_STATUS_OK
ReadX 11954 131072 61440 61440 NT_STATUS_OK
ReadX 11954 192512 4096 4096 NT_STATUS_OK
ReadX 11954 196608 61440 61440 NT_STATUS_OK
ReadX 11954 258048 4096 4096 NT_STATUS_OK
ReadX 11954 262144 61440 61440 NT_STATUS_OK
ReadX 11954 323584 4096 4096 NT_STATUS_OK
ReadX 11954 327680 61440 61440 NT_STATUS_OK
ReadX 11954 389120 4096 4096 NT_STATUS_OK
ReadX 11954 393216 61440 61440 NT_STATUS_OK
ReadX 11954 454656 4096 4096 NT_STATUS_OK
ReadX 11954 458752 61440 61440 NT_STATUS_OK
ReadX 11954 520192 4096 4096 NT_STATUS_OK
ReadX 11954 524288 61440 61440 NT_STATUS_OK
ReadX 11954 585728 4096 4096 NT_STATUS_OK
ReadX 11954 589824 61440 61440 NT_STATUS_OK
ReadX 11954 651264 4096 4096 NT_STATUS_OK
ReadX 11954 655360 61440 61440 NT_STATUS_OK
ReadX 11954 716800 4096 4096 NT_STATUS_OK
ReadX 11954 720896 61440 61440 NT_STATUS_OK
ReadX 11954 782336 4096 4096 NT_STATUS_OK
ReadX 11954 786432 61440 61440 NT_STATUS_OK
ReadX 11954 847872 4096 4096 NT_STATUS_OK
ReadX 11954 851968 61440 61440 NT_STATUS_OK
ReadX 11954 913408 4096 4096 NT_STATUS_OK
ReadX 11954 917504 61440 61440 NT_STATUS_OK
ReadX 11954 978944 4096 4096 NT_STATUS_OK
ReadX 11954 983040 61440 61440 NT_STATUS_OK
ReadX 11954 1044480 4096 4096 NT_STATUS_OK
ReadX 11954 1048576 61440 61440 NT_STATUS_OK
ReadX 11954 1110016 4096 4096 NT_STATUS_OK
ReadX 11954 1114112 61440 61440 NT_STATUS_OK
ReadX 11954 1175552 4096 4096 NT_STATUS_OK
ReadX 11954 1179648 61440 61440 NT_STATUS_OK
ReadX 11954 1241088 4096 4096 NT_STATUS_OK
ReadX 11954 1245184 61440 61440 NT_STATUS_OK
ReadX 11954 1306624 4096 4096 NT_STATUS_OK
ReadX 11954 1310720 61440 61440 NT_STATUS_OK
ReadX 11954 1372160 4096 4096 NT_STATUS_OK
ReadX 11954 1376256 61440 61440 NT_STATUS_OK
ReadX 11954 1437696 4096 4096 NT_STATUS_OK
ReadX 11954 1441792 61440 61440 NT_STATUS_OK
ReadX 11954 1503232 4096 4096 NT_STATUS_OK
ReadX 11954 1507328 61440 61440 NT_STATUS_OK
ReadX 11954 1568768 4096 4096 NT_STATUS_OK
ReadX 11954 1572864 61440 61440 NT_STATUS_OK
ReadX 11954 1634304 4096 4096 NT_STATUS_OK
ReadX 11954 1638400 61440 61440 NT_STATUS_OK
ReadX 11954 1699840 4096 4096 NT_STATUS_OK
ReadX 11954 1703936 61440 61440 NT_STATUS_OK
ReadX 11954 1765376 4096 4096 NT_STATUS_OK
ReadX 11954 1769472 61440 61440 NT_STATUS_OK
ReadX 11954 1830912 4096 4096 NT_STATUS_OK
ReadX 11954 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
ReadX 11959 4096 4096 4096 NT_STATUS_OK
ReadX 11959 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11963 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 8192 8192 NT_STATUS_OK
ReadX 11967 8192 8192 8192 NT_STATUS_OK
ReadX 11967 16384 8192 8192 NT_STATUS_OK
ReadX 11967 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11972 NT_STATUS_OK
WriteX 11972 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11972 258 NT_STATUS_OK
WriteX 11972 0 10438 10438 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11973 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11977 NT_STATUS_OK
Close 11977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11978 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11980 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
ReadX 11981 4096 4096 4096 NT_STATUS_OK
ReadX 11981 8192 4096 4096 NT_STATUS_OK
ReadX 11981 12288 8192 8192 NT_STATUS_OK
ReadX 11981 20480 8192 8192 NT_STATUS_OK
ReadX 11981 28672 8192 8192 NT_STATUS_OK
ReadX 11981 36864 8192 8192 NT_STATUS_OK
ReadX 11981 45056 8192 8192 NT_STATUS_OK
ReadX 11981 53248 8192 8192 NT_STATUS_OK
ReadX 11981 61440 8192 8192 NT_STATUS_OK
ReadX 11981 69632 8192 8192 NT_STATUS_OK
ReadX 11981 77824 8192 8192 NT_STATUS_OK
ReadX 11981 86016 8192 8192 NT_STATUS_OK
ReadX 11981 94208 8192 8192 NT_STATUS_OK
ReadX 11981 102400 8192 8192 NT_STATUS_OK
ReadX 11981 110592 8192 8192 NT_STATUS_OK
ReadX 11981 118784 8192 8192 NT_STATUS_OK
ReadX 11981 126976 8192 8192 NT_STATUS_OK
ReadX 11981 135168 8192 8192 NT_STATUS_OK
ReadX 11981 143360 8192 8192 NT_STATUS_OK
ReadX 11981 151552 8192 8192 NT_STATUS_OK
ReadX 11981 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11981 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11986 NT_STATUS_OK
WriteX 11986 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 28489 28489 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11987 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11989 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11990 NT_STATUS_OK
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 8192 8192 NT_STATUS_OK
ReadX 11993 8192 8192 8192 NT_STATUS_OK
ReadX 11993 16384 8192 8192 NT_STATUS_OK
ReadX 11993 24576 8192 8192 NT_STATUS_OK
ReadX 11993 32768 16384 16384 NT_STATUS_OK
ReadX 11993 49152 8192 8192 NT_STATUS_OK
ReadX 11993 57344 8192 8192 NT_STATUS_OK
ReadX 11993 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11995 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11998 NT_STATUS_OK
WriteX 11998 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11998 258 NT_STATUS_OK
WriteX 11998 0 29253 29253 NT_STATUS_OK
Close 11998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12005 NT_STATUS_OK
WriteX 12005 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 258 NT_STATUS_OK
WriteX 12005 0 30183 30183 NT_STATUS_OK
Close 12005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12006 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12008 NT_STATUS_OK
WriteX 12008 0 510 510 NT_STATUS_OK
WriteX 12008 510 512 512 NT_STATUS_OK
WriteX 12008 1022 510 510 NT_STATUS_OK
WriteX 12008 1532 510 510 NT_STATUS_OK
WriteX 12008 2042 168 168 NT_STATUS_OK
Close 12008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 61440 4096 4096 NT_STATUS_OK
ReadX 12012 126976 4096 4096 NT_STATUS_OK
WriteX 12012 0 65536 65536 NT_STATUS_OK
WriteX 12012 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 61440 4096 4096 NT_STATUS_OK
ReadX 12013 126976 4096 4096 NT_STATUS_OK
ReadX 12013 192512 4096 4096 NT_STATUS_OK
ReadX 12013 258048 4096 4096 NT_STATUS_OK
WriteX 12013 0 65536 65536 NT_STATUS_OK
WriteX 12013 65536 65536 65536 NT_STATUS_OK
WriteX 12013 131072 65536 65536 NT_STATUS_OK
WriteX 12013 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 61440 4096 4096 NT_STATUS_OK
ReadX 12014 126976 4096 4096 NT_STATUS_OK
ReadX 12014 192512 4096 4096 NT_STATUS_OK
ReadX 12014 258048 4096 4096 NT_STATUS_OK
ReadX 12014 323584 4096 4096 NT_STATUS_OK
ReadX 12014 389120 4096 4096 NT_STATUS_OK
ReadX 12014 454656 4096 4096 NT_STATUS_OK
ReadX 12014 520192 4096 4096 NT_STATUS_OK
WriteX 12014 0 65536 65536 NT_STATUS_OK
WriteX 12014 65536 65536 65536 NT_STATUS_OK
WriteX 12014 131072 65536 65536 NT_STATUS_OK
WriteX 12014 196608 65536 65536 NT_STATUS_OK
WriteX 12014 262144 65536 65536 NT_STATUS_OK
WriteX 12014 327680 65536 65536 NT_STATUS_OK
WriteX 12014 393216 65536 65536 NT_STATUS_OK
WriteX 12014 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12021 NT_STATUS_OK
Close 12021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12049 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12059 NT_STATUS_OK
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12069 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12080 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12083 NT_STATUS_OK
WriteX 12083 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12083 0 65536 65536 NT_STATUS_OK
WriteX 12083 65536 65536 65536 NT_STATUS_OK
WriteX 12083 131072 65536 65536 NT_STATUS_OK
WriteX 12083 196608 65536 65536 NT_STATUS_OK
WriteX 12083 262144 26634 26634 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
ReadX 12091 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12099 NT_STATUS_OK
Close 12099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12108 NT_STATUS_OK
Close 12108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12124 NT_STATUS_OK
Close 12124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12129 NT_STATUS_OK
Close 12129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12134 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12139 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12158 NT_STATUS_OK
Close 12158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12168 NT_STATUS_OK
Close 12168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12169 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 4096 4096 NT_STATUS_OK
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 4096 4096 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 4096 4096 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12215 0 4096 4096 NT_STATUS_OK
Close 12215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
ReadX 12217 4096 4096 4096 NT_STATUS_OK
ReadX 12217 8192 4096 4096 NT_STATUS_OK
ReadX 12217 12288 4096 4096 NT_STATUS_OK
ReadX 12217 16384 4096 4096 NT_STATUS_OK
ReadX 12217 20480 4096 4096 NT_STATUS_OK
ReadX 12217 24576 4096 4096 NT_STATUS_OK
ReadX 12217 28672 4096 4096 NT_STATUS_OK
ReadX 12217 32768 4096 4096 NT_STATUS_OK
ReadX 12217 36864 4096 4096 NT_STATUS_OK
ReadX 12217 40960 4096 4096 NT_STATUS_OK
ReadX 12217 45056 4096 4096 NT_STATUS_OK
ReadX 12217 49152 4096 4096 NT_STATUS_OK
ReadX 12217 53248 4096 4096 NT_STATUS_OK
ReadX 12217 57344 4096 4096 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 65536 4096 4096 NT_STATUS_OK
ReadX 12217 69632 4096 4096 NT_STATUS_OK
ReadX 12217 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12217 1004 NT_STATUS_OK
WriteX 12217 0 4096 4096 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12218 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12223 NT_STATUS_OK
WriteX 12223 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12223 258 NT_STATUS_OK
WriteX 12223 0 65536 65536 NT_STATUS_OK
WriteX 12223 65536 19979 19979 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
QUERY_FILE_INFORMATION 12224 1004 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
SET_FILE_INFORMATION 12224 1004 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12228 NT_STATUS_OK
Close 12226 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12229 1004 NT_STATUS_OK
WriteX 12229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 65536 65536 NT_STATUS_OK
WriteX 12235 65536 17654 17654 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
SET_FILE_INFORMATION 12237 1004 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
ReadX 12241 4096 4096 4096 NT_STATUS_OK
ReadX 12241 8192 4096 4096 NT_STATUS_OK
ReadX 12241 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12241 16384 4096 4096 NT_STATUS_OK
ReadX 12241 20480 4096 4096 NT_STATUS_OK
ReadX 12241 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12242 NT_STATUS_OK
ReadX 12242 0 4096 4096 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12250 NT_STATUS_OK
WriteX 12250 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 258 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 19490 19490 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
SET_FILE_INFORMATION 12252 1004 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12256 0 4096 4096 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12258 NT_STATUS_OK
ReadX 12258 0 4096 4096 NT_STATUS_OK
ReadX 12258 4096 4096 4096 NT_STATUS_OK
ReadX 12258 8192 4096 4096 NT_STATUS_OK
ReadX 12258 12288 4096 4096 NT_STATUS_OK
ReadX 12258 16384 4096 4096 NT_STATUS_OK
ReadX 12258 20480 4096 4096 NT_STATUS_OK
ReadX 12258 24576 4096 4096 NT_STATUS_OK
ReadX 12258 28672 4096 4096 NT_STATUS_OK
ReadX 12258 32768 4096 4096 NT_STATUS_OK
ReadX 12258 36864 4096 4096 NT_STATUS_OK
ReadX 12258 40960 4096 4096 NT_STATUS_OK
ReadX 12258 45056 4096 4096 NT_STATUS_OK
ReadX 12258 49152 4096 4096 NT_STATUS_OK
ReadX 12258 53248 4096 4096 NT_STATUS_OK
ReadX 12258 57344 4096 4096 NT_STATUS_OK
ReadX 12258 61440 4096 4096 NT_STATUS_OK
ReadX 12258 65536 4096 4096 NT_STATUS_OK
ReadX 12258 69632 4096 4096 NT_STATUS_OK
ReadX 12258 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12258 1004 NT_STATUS_OK
WriteX 12258 0 4096 4096 NT_STATUS_OK
Close 12258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12259 NT_STATUS_OK
SET_FILE_INFORMATION 12259 1004 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
WriteX 12264 0 65536 65536 NT_STATUS_OK
WriteX 12264 65536 8866 8866 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Flush 12265 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Flush 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
WriteX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12272 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12275 NT_STATUS_OK
WriteX 12275 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12275 258 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 9298 9298 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
Flush 12276 NT_STATUS_OK
SET_FILE_INFORMATION 12276 1004 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
Flush 12276 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
SET_FILE_INFORMATION 12277 1004 NT_STATUS_OK
Close 12277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12282 0 4096 4096 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12283 4096 4096 4096 NT_STATUS_OK
ReadX 12283 8192 4096 4096 NT_STATUS_OK
ReadX 12283 12288 4096 4096 NT_STATUS_OK
ReadX 12283 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12286 1004 NT_STATUS_OK
WriteX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12289 NT_STATUS_OK
Close 12289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12292 NT_STATUS_OK
WriteX 12292 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 258 NT_STATUS_OK
WriteX 12292 0 65536 65536 NT_STATUS_OK
WriteX 12292 65536 11540 11540 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
SET_FILE_INFORMATION 12293 1004 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12298 NT_STATUS_OK
ReadX 12298 61440 4096 4096 NT_STATUS_OK
ReadX 12298 126976 4096 4096 NT_STATUS_OK
WriteX 12298 0 65536 65536 NT_STATUS_OK
WriteX 12298 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 61440 4096 4096 NT_STATUS_OK
ReadX 12299 126976 4096 4096 NT_STATUS_OK
ReadX 12299 192512 4096 4096 NT_STATUS_OK
ReadX 12299 258048 4096 4096 NT_STATUS_OK
WriteX 12299 0 65536 65536 NT_STATUS_OK
WriteX 12299 65536 65536 65536 NT_STATUS_OK
WriteX 12299 131072 65536 65536 NT_STATUS_OK
WriteX 12299 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 61440 4096 4096 NT_STATUS_OK
ReadX 12300 126976 4096 4096 NT_STATUS_OK
ReadX 12300 192512 4096 4096 NT_STATUS_OK
ReadX 12300 258048 4096 4096 NT_STATUS_OK
ReadX 12300 323584 4096 4096 NT_STATUS_OK
ReadX 12300 389120 4096 4096 NT_STATUS_OK
ReadX 12300 454656 4096 4096 NT_STATUS_OK
ReadX 12300 520192 4096 4096 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
WriteX 12300 131072 65536 65536 NT_STATUS_OK
WriteX 12300 196608 65536 65536 NT_STATUS_OK
WriteX 12300 262144 65536 65536 NT_STATUS_OK
WriteX 12300 327680 65536 65536 NT_STATUS_OK
WriteX 12300 393216 65536 65536 NT_STATUS_OK
WriteX 12300 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
ReadX 12301 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 53 53 NT_STATUS_OK
Close 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12303 NT_STATUS_OK
Close 12303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12301 8192 4096 4096 NT_STATUS_OK
ReadX 12301 12288 4096 4096 NT_STATUS_OK
WriteX 12305 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12305 258 NT_STATUS_OK
ReadX 12301 16384 4096 4096 NT_STATUS_OK
ReadX 12301 20480 4096 4096 NT_STATUS_OK
WriteX 12305 0 15360 15360 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
WriteX 12306 0 4096 4096 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12309 4096 4096 4096 NT_STATUS_OK
ReadX 12309 8192 4096 4096 NT_STATUS_OK
ReadX 12309 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
ReadX 12312 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
ReadX 12313 4096 4096 4096 NT_STATUS_OK
ReadX 12313 8192 4096 4096 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12314 NT_STATUS_OK
WriteX 12314 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
WriteX 12314 0 15360 15360 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12319 NT_STATUS_OK
SET_FILE_INFORMATION 12319 1004 NT_STATUS_OK
Close 12319 NT_STATUS_OK
WriteX 12315 0 4096 4096 NT_STATUS_OK
Close 12315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
ReadX 12322 4096 4096 4096 NT_STATUS_OK
ReadX 12322 8192 4096 4096 NT_STATUS_OK
ReadX 12322 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12322 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12322 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12324 NT_STATUS_OK
WriteX 12324 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12324 258 NT_STATUS_OK
WriteX 12324 0 53 53 NT_STATUS_OK
Close 12324 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12323 4096 4096 4096 NT_STATUS_OK
ReadX 12323 8192 4096 4096 NT_STATUS_OK
ReadX 12323 12288 4096 4096 NT_STATUS_OK
WriteX 12327 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 12006 12006 NT_STATUS_OK
Close 12327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12332 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
WriteX 12322 0 19054 19054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 11991 11991 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12339 NT_STATUS_OK
SET_FILE_INFORMATION 12339 1004 NT_STATUS_OK
Close 12339 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12342 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
ReadX 12342 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
Close 12318 NT_STATUS_OK
WriteX 12342 0 12288 12288 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 61440 61440 NT_STATUS_OK
ReadX 12349 61440 4096 4096 NT_STATUS_OK
ReadX 12349 65536 61440 61440 NT_STATUS_OK
ReadX 12349 126976 4096 4096 NT_STATUS_OK
ReadX 12349 131072 61440 61440 NT_STATUS_OK
ReadX 12349 192512 4096 4096 NT_STATUS_OK
ReadX 12349 196608 61440 61440 NT_STATUS_OK
ReadX 12349 258048 4096 4096 NT_STATUS_OK
ReadX 12349 262144 61440 61440 NT_STATUS_OK
ReadX 12349 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 61440 61440 NT_STATUS_OK
ReadX 12350 61440 4096 4096 NT_STATUS_OK
ReadX 12350 65536 61440 61440 NT_STATUS_OK
ReadX 12350 126976 4096 4096 NT_STATUS_OK
ReadX 12350 131072 61440 61440 NT_STATUS_OK
ReadX 12350 192512 4096 4096 NT_STATUS_OK
ReadX 12350 196608 61440 61440 NT_STATUS_OK
ReadX 12350 258048 4096 4096 NT_STATUS_OK
ReadX 12350 262144 61440 61440 NT_STATUS_OK
ReadX 12350 323584 4096 4096 NT_STATUS_OK
ReadX 12350 327680 61440 61440 NT_STATUS_OK
ReadX 12350 389120 4096 4096 NT_STATUS_OK
ReadX 12350 393216 61440 61440 NT_STATUS_OK
ReadX 12350 454656 4096 4096 NT_STATUS_OK
ReadX 12350 458752 61440 61440 NT_STATUS_OK
ReadX 12350 520192 4096 4096 NT_STATUS_OK
ReadX 12350 524288 61440 61440 NT_STATUS_OK
ReadX 12350 585728 4096 4096 NT_STATUS_OK
ReadX 12350 589824 61440 61440 NT_STATUS_OK
ReadX 12350 651264 4096 4096 NT_STATUS_OK
ReadX 12350 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 61440 61440 NT_STATUS_OK
ReadX 12351 61440 4096 4096 NT_STATUS_OK
ReadX 12351 65536 61440 61440 NT_STATUS_OK
ReadX 12351 126976 4096 4096 NT_STATUS_OK
ReadX 12351 131072 61440 61440 NT_STATUS_OK
ReadX 12351 192512 4096 4096 NT_STATUS_OK
ReadX 12351 196608 61440 61440 NT_STATUS_OK
ReadX 12351 258048 4096 4096 NT_STATUS_OK
ReadX 12351 262144 61440 61440 NT_STATUS_OK
ReadX 12351 323584 4096 4096 NT_STATUS_OK
ReadX 12351 327680 61440 61440 NT_STATUS_OK
ReadX 12351 389120 4096 4096 NT_STATUS_OK
ReadX 12351 393216 61440 61440 NT_STATUS_OK
ReadX 12351 454656 4096 4096 NT_STATUS_OK
ReadX 12351 458752 61440 61440 NT_STATUS_OK
ReadX 12351 520192 4096 4096 NT_STATUS_OK
ReadX 12351 524288 61440 61440 NT_STATUS_OK
ReadX 12351 585728 4096 4096 NT_STATUS_OK
ReadX 12351 589824 61440 61440 NT_STATUS_OK
ReadX 12351 651264 4096 4096 NT_STATUS_OK
ReadX 12351 655360 61440 61440 NT_STATUS_OK
ReadX 12351 716800 4096 4096 NT_STATUS_OK
ReadX 12351 720896 61440 61440 NT_STATUS_OK
ReadX 12351 782336 4096 4096 NT_STATUS_OK
ReadX 12351 786432 61440 61440 NT_STATUS_OK
ReadX 12351 847872 4096 4096 NT_STATUS_OK
ReadX 12351 851968 61440 61440 NT_STATUS_OK
ReadX 12351 913408 4096 4096 NT_STATUS_OK
ReadX 12351 917504 61440 61440 NT_STATUS_OK
ReadX 12351 978944 4096 4096 NT_STATUS_OK
ReadX 12351 983040 61440 61440 NT_STATUS_OK
ReadX 12351 1044480 4096 4096 NT_STATUS_OK
ReadX 12351 1048576 61440 61440 NT_STATUS_OK
ReadX 12351 1110016 4096 4096 NT_STATUS_OK
ReadX 12351 1114112 61440 61440 NT_STATUS_OK
ReadX 12351 1175552 4096 4096 NT_STATUS_OK
ReadX 12351 1179648 61440 61440 NT_STATUS_OK
ReadX 12351 1241088 4096 4096 NT_STATUS_OK
ReadX 12351 1245184 61440 61440 NT_STATUS_OK
ReadX 12351 1306624 4096 4096 NT_STATUS_OK
ReadX 12351 1310720 61440 61440 NT_STATUS_OK
ReadX 12351 1372160 4096 4096 NT_STATUS_OK
ReadX 12351 1376256 61440 61440 NT_STATUS_OK
ReadX 12351 1437696 4096 4096 NT_STATUS_OK
ReadX 12351 1441792 61440 61440 NT_STATUS_OK
ReadX 12351 1503232 4096 4096 NT_STATUS_OK
ReadX 12351 1507328 61440 61440 NT_STATUS_OK
ReadX 12351 1568768 4096 4096 NT_STATUS_OK
ReadX 12351 1572864 61440 61440 NT_STATUS_OK
ReadX 12351 1634304 4096 4096 NT_STATUS_OK
ReadX 12351 1638400 61440 61440 NT_STATUS_OK
ReadX 12351 1699840 4096 4096 NT_STATUS_OK
ReadX 12351 1703936 61440 61440 NT_STATUS_OK
ReadX 12351 1765376 4096 4096 NT_STATUS_OK
ReadX 12351 1769472 61440 61440 NT_STATUS_OK
ReadX 12351 1830912 4096 4096 NT_STATUS_OK
ReadX 12351 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12358 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 1004 NT_STATUS_OK
WriteX 12358 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12359 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12360 NT_STATUS_OK
WriteX 12360 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12360 258 NT_STATUS_OK
WriteX 12360 0 491 491 NT_STATUS_OK
Close 12360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12364 NT_STATUS_OK
WriteX 12364 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12364 258 NT_STATUS_OK
WriteX 12364 0 543 543 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12378 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 1004 NT_STATUS_OK
WriteX 12378 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 258 NT_STATUS_OK
WriteX 12378 0 2048 2048 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
Flush 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12384 NT_STATUS_OK
WriteX 12384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12384 258 NT_STATUS_OK
WriteX 12384 0 2048 2048 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12390 NT_STATUS_OK
WriteX 12390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12390 258 NT_STATUS_OK
WriteX 12390 0 2048 2048 NT_STATUS_OK
Close 12390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 2048 2048 NT_STATUS_OK
ReadX 12369 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12385 0 4096 4096 NT_STATUS_OK
WriteX 12369 0 8192 8192 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
WriteX 12371 0 4096 4096 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12395 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12369 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12404 NT_STATUS_OK
ReadX 12404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12415 NT_STATUS_OK
QUERY_FILE_INFORMATION 12415 1004 NT_STATUS_OK
WriteX 12415 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12415 258 NT_STATUS_OK
WriteX 12415 0 2048 2048 NT_STATUS_OK
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12423 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 1004 NT_STATUS_OK
WriteX 12423 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 258 NT_STATUS_OK
WriteX 12423 0 2048 2048 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
Flush 12416 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
Flush 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12426 NT_STATUS_OK
WriteX 12426 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12426 258 NT_STATUS_OK
WriteX 12426 0 4096 4096 NT_STATUS_OK
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12429 NT_STATUS_OK
WriteX 12429 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12429 258 NT_STATUS_OK
WriteX 12429 0 4096 4096 NT_STATUS_OK
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12430 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12430 0 4096 4096 NT_STATUS_OK
Close 12427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12404 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12405 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 2048 2048 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12452 NT_STATUS_OK
QUERY_FILE_INFORMATION 12452 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12438 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Close 12443 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12454 NT_STATUS_OK
QUERY_FILE_INFORMATION 12454 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12456 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12474 NT_STATUS_OK
QUERY_FILE_INFORMATION 12474 1004 NT_STATUS_OK
WriteX 12474 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12474 258 NT_STATUS_OK
WriteX 12474 0 2048 2048 NT_STATUS_OK
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 258 NT_STATUS_OK
WriteX 12486 0 2048 2048 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12494 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 1004 NT_STATUS_OK
WriteX 12494 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
WriteX 12494 0 2048 2048 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12475 0 4096 4096 NT_STATUS_OK
Flush 12475 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
Flush 12487 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Flush 12495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12475 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 4096 16384 16384 NT_STATUS_OK
ReadX 12457 4096 16384 16384 NT_STATUS_OK
ReadX 12489 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 2048 2048 NT_STATUS_OK
WriteX 12497 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12498 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12500 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12502 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12505 4096 16384 16384 NT_STATUS_OK
WriteX 12505 0 4096 4096 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 8192 8192 NT_STATUS_OK
ReadX 12511 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12525 0 4096 4096 NT_STATUS_OK
ReadX 12525 4096 4096 4096 NT_STATUS_OK
ReadX 12525 8192 4096 4096 NT_STATUS_OK
WriteX 12511 0 4096 4096 NT_STATUS_OK
WriteX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
ReadX 12526 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12505 0 4096 4096 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 258 NT_STATUS_OK
WriteX 12531 0 2048 2048 NT_STATUS_OK
Close 12531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
WriteX 12534 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
ReadX 12536 4096 4096 4096 NT_STATUS_OK
WriteX 12536 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12537 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12539 0 4096 4096 NT_STATUS_OK
ReadX 12539 4096 4096 4096 NT_STATUS_OK
ReadX 12539 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
ReadX 12540 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12556 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12557 NT_STATUS_OK
QUERY_FILE_INFORMATION 12557 1004 NT_STATUS_OK
WriteX 12557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12557 258 NT_STATUS_OK
WriteX 12557 0 2048 2048 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12558 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
WriteX 12563 0 2048 2048 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12547 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12565 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12567 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 61440 4096 4096 NT_STATUS_OK
ReadX 12569 126976 4096 4096 NT_STATUS_OK
WriteX 12569 0 65536 65536 NT_STATUS_OK
WriteX 12569 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 61440 4096 4096 NT_STATUS_OK
ReadX 12570 126976 4096 4096 NT_STATUS_OK
ReadX 12570 192512 4096 4096 NT_STATUS_OK
ReadX 12570 258048 4096 4096 NT_STATUS_OK
WriteX 12570 0 65536 65536 NT_STATUS_OK
WriteX 12570 65536 65536 65536 NT_STATUS_OK
WriteX 12570 131072 65536 65536 NT_STATUS_OK
WriteX 12570 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 61440 4096 4096 NT_STATUS_OK
ReadX 12571 126976 4096 4096 NT_STATUS_OK
ReadX 12571 192512 4096 4096 NT_STATUS_OK
ReadX 12571 258048 4096 4096 NT_STATUS_OK
ReadX 12571 323584 4096 4096 NT_STATUS_OK
ReadX 12571 389120 4096 4096 NT_STATUS_OK
ReadX 12571 454656 4096 4096 NT_STATUS_OK
ReadX 12571 520192 4096 4096 NT_STATUS_OK
WriteX 12571 0 65536 65536 NT_STATUS_OK
WriteX 12571 65536 65536 65536 NT_STATUS_OK
WriteX 12571 131072 65536 65536 NT_STATUS_OK
WriteX 12571 196608 65536 65536 NT_STATUS_OK
WriteX 12571 262144 65536 65536 NT_STATUS_OK
WriteX 12571 327680 65536 65536 NT_STATUS_OK
WriteX 12571 393216 65536 65536 NT_STATUS_OK
WriteX 12571 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12572 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 8192 4096 4096 NT_STATUS_OK
ReadX 12572 12288 4096 4096 NT_STATUS_OK
ReadX 12572 16384 4096 4096 NT_STATUS_OK
ReadX 12572 20480 4096 4096 NT_STATUS_OK
ReadX 12572 24576 4096 4096 NT_STATUS_OK
ReadX 12572 28672 4096 4096 NT_STATUS_OK
ReadX 12572 32768 4096 4096 NT_STATUS_OK
ReadX 12572 36864 4096 4096 NT_STATUS_OK
ReadX 12572 40960 4096 4096 NT_STATUS_OK
ReadX 12572 45056 4096 4096 NT_STATUS_OK
ReadX 12572 49152 4096 4096 NT_STATUS_OK
ReadX 12572 53248 4096 4096 NT_STATUS_OK
ReadX 12572 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12572 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12575 NT_STATUS_OK
WriteX 12575 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12575 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12575 1004 NT_STATUS_OK
WriteX 12575 0 57088 57088 NT_STATUS_OK
WriteX 12575 0 4096 4096 NT_STATUS_OK
Flush 12575 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12576 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
SET_FILE_INFORMATION 12575 1004 NT_STATUS_OK
WriteX 12575 0 4096 4096 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12579 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12580 NT_STATUS_OK
WriteX 12580 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12580 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
WriteX 12580 0 51456 51456 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
Flush 12580 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12584 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12589 NT_STATUS_OK
WriteX 12589 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
WriteX 12589 0 53077 53077 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12590 NT_STATUS_OK
WriteX 12590 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12590 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 65536 65536 NT_STATUS_OK
WriteX 12590 65536 1856 1856 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Flush 12590 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12592 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12596 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12599 NT_STATUS_OK
WriteX 12599 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
WriteX 12599 0 7983 7983 NT_STATUS_OK
Close 12599 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12604 NT_STATUS_OK
WriteX 12604 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 258 NT_STATUS_OK
WriteX 12604 0 65536 65536 NT_STATUS_OK
WriteX 12604 65536 65536 65536 NT_STATUS_OK
WriteX 12604 131072 65536 65536 NT_STATUS_OK
WriteX 12604 196608 65536 65536 NT_STATUS_OK
WriteX 12604 262144 65536 65536 NT_STATUS_OK
WriteX 12604 327680 65536 65536 NT_STATUS_OK
WriteX 12604 393216 65536 65536 NT_STATUS_OK
WriteX 12604 458752 46731 46731 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12605 NT_STATUS_OK
WriteX 12605 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12594 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 0 65536 65536 NT_STATUS_OK
WriteX 12605 65536 22848 22848 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Flush 12605 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12609 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12610 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12610 1004 NT_STATUS_OK
ReadX 12610 8192 4096 4096 NT_STATUS_OK
ReadX 12610 12288 4096 4096 NT_STATUS_OK
ReadX 12610 16384 4096 4096 NT_STATUS_OK
ReadX 12610 20480 4096 4096 NT_STATUS_OK
ReadX 12610 24576 4096 4096 NT_STATUS_OK
ReadX 12610 28672 4096 4096 NT_STATUS_OK
ReadX 12610 32768 4096 4096 NT_STATUS_OK
ReadX 12610 36864 4096 4096 NT_STATUS_OK
ReadX 12610 40960 4096 4096 NT_STATUS_OK
ReadX 12610 45056 4096 4096 NT_STATUS_OK
ReadX 12610 49152 4096 4096 NT_STATUS_OK
ReadX 12610 53248 4096 4096 NT_STATUS_OK
ReadX 12610 57344 4096 4096 NT_STATUS_OK
ReadX 12610 61440 4096 4096 NT_STATUS_OK
ReadX 12610 65536 4096 4096 NT_STATUS_OK
ReadX 12610 69632 4096 4096 NT_STATUS_OK
ReadX 12610 73728 4096 4096 NT_STATUS_OK
ReadX 12610 77824 4096 4096 NT_STATUS_OK
ReadX 12610 81920 4096 4096 NT_STATUS_OK
ReadX 12610 86016 4096 4096 NT_STATUS_OK
ReadX 12610 90112 4096 4096 NT_STATUS_OK
ReadX 12610 94208 4096 4096 NT_STATUS_OK
ReadX 12610 98304 4096 4096 NT_STATUS_OK
ReadX 12610 102400 4096 4096 NT_STATUS_OK
ReadX 12610 106496 4096 4096 NT_STATUS_OK
ReadX 12610 110592 4096 4096 NT_STATUS_OK
ReadX 12610 114688 4096 4096 NT_STATUS_OK
ReadX 12610 118784 4096 4096 NT_STATUS_OK
ReadX 12610 122880 4096 4096 NT_STATUS_OK
ReadX 12610 126976 4096 4096 NT_STATUS_OK
ReadX 12610 131072 4096 4096 NT_STATUS_OK
ReadX 12610 135168 4096 4096 NT_STATUS_OK
ReadX 12610 139264 4096 4096 NT_STATUS_OK
ReadX 12610 143360 4096 4096 NT_STATUS_OK
ReadX 12610 147456 4096 4096 NT_STATUS_OK
ReadX 12610 151552 4096 4096 NT_STATUS_OK
ReadX 12610 155648 4096 4096 NT_STATUS_OK
ReadX 12610 159744 4096 4096 NT_STATUS_OK
ReadX 12610 163840 4096 4096 NT_STATUS_OK
ReadX 12610 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12610 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12611 NT_STATUS_OK
Close 12611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12614 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
Close 12614 NT_STATUS_OK
WriteX 12613 0 42388 42388 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
ReadX 12617 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12618 NT_STATUS_OK
WriteX 12618 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12618 258 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
WriteX 12618 0 42652 42652 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
ReadX 12622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12627 NT_STATUS_OK
WriteX 12627 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
WriteX 12627 0 65536 65536 NT_STATUS_OK
WriteX 12627 65536 49 49 NT_STATUS_OK
Close 12627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 61440 61440 NT_STATUS_OK
ReadX 12628 61440 4096 4096 NT_STATUS_OK
ReadX 12628 65536 61440 61440 NT_STATUS_OK
ReadX 12628 126976 4096 4096 NT_STATUS_OK
ReadX 12628 131072 61440 61440 NT_STATUS_OK
ReadX 12628 192512 4096 4096 NT_STATUS_OK
ReadX 12628 196608 61440 61440 NT_STATUS_OK
ReadX 12628 258048 4096 4096 NT_STATUS_OK
ReadX 12628 262144 61440 61440 NT_STATUS_OK
ReadX 12628 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 61440 61440 NT_STATUS_OK
ReadX 12629 61440 4096 4096 NT_STATUS_OK
ReadX 12629 65536 61440 61440 NT_STATUS_OK
ReadX 12629 126976 4096 4096 NT_STATUS_OK
ReadX 12629 131072 61440 61440 NT_STATUS_OK
ReadX 12629 192512 4096 4096 NT_STATUS_OK
ReadX 12629 196608 61440 61440 NT_STATUS_OK
ReadX 12629 258048 4096 4096 NT_STATUS_OK
ReadX 12629 262144 61440 61440 NT_STATUS_OK
ReadX 12629 323584 4096 4096 NT_STATUS_OK
ReadX 12629 327680 61440 61440 NT_STATUS_OK
ReadX 12629 389120 4096 4096 NT_STATUS_OK
ReadX 12629 393216 61440 61440 NT_STATUS_OK
ReadX 12629 454656 4096 4096 NT_STATUS_OK
ReadX 12629 458752 61440 61440 NT_STATUS_OK
ReadX 12629 520192 4096 4096 NT_STATUS_OK
ReadX 12629 524288 61440 61440 NT_STATUS_OK
ReadX 12629 585728 4096 4096 NT_STATUS_OK
ReadX 12629 589824 61440 61440 NT_STATUS_OK
ReadX 12629 651264 4096 4096 NT_STATUS_OK
ReadX 12629 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 61440 61440 NT_STATUS_OK
ReadX 12630 61440 4096 4096 NT_STATUS_OK
ReadX 12630 65536 61440 61440 NT_STATUS_OK
ReadX 12630 126976 4096 4096 NT_STATUS_OK
ReadX 12630 131072 61440 61440 NT_STATUS_OK
ReadX 12630 192512 4096 4096 NT_STATUS_OK
ReadX 12630 196608 61440 61440 NT_STATUS_OK
ReadX 12630 258048 4096 4096 NT_STATUS_OK
ReadX 12630 262144 61440 61440 NT_STATUS_OK
ReadX 12630 323584 4096 4096 NT_STATUS_OK
ReadX 12630 327680 61440 61440 NT_STATUS_OK
ReadX 12630 389120 4096 4096 NT_STATUS_OK
ReadX 12630 393216 61440 61440 NT_STATUS_OK
ReadX 12630 454656 4096 4096 NT_STATUS_OK
ReadX 12630 458752 61440 61440 NT_STATUS_OK
ReadX 12630 520192 4096 4096 NT_STATUS_OK
ReadX 12630 524288 61440 61440 NT_STATUS_OK
ReadX 12630 585728 4096 4096 NT_STATUS_OK
ReadX 12630 589824 61440 61440 NT_STATUS_OK
ReadX 12630 651264 4096 4096 NT_STATUS_OK
ReadX 12630 655360 61440 61440 NT_STATUS_OK
ReadX 12630 716800 4096 4096 NT_STATUS_OK
ReadX 12630 720896 61440 61440 NT_STATUS_OK
ReadX 12630 782336 4096 4096 NT_STATUS_OK
ReadX 12630 786432 61440 61440 NT_STATUS_OK
ReadX 12630 847872 4096 4096 NT_STATUS_OK
ReadX 12630 851968 61440 61440 NT_STATUS_OK
ReadX 12630 913408 4096 4096 NT_STATUS_OK
ReadX 12630 917504 61440 61440 NT_STATUS_OK
ReadX 12630 978944 4096 4096 NT_STATUS_OK
ReadX 12630 983040 61440 61440 NT_STATUS_OK
ReadX 12630 1044480 4096 4096 NT_STATUS_OK
ReadX 12630 1048576 61440 61440 NT_STATUS_OK
ReadX 12630 1110016 4096 4096 NT_STATUS_OK
ReadX 12630 1114112 61440 61440 NT_STATUS_OK
ReadX 12630 1175552 4096 4096 NT_STATUS_OK
ReadX 12630 1179648 61440 61440 NT_STATUS_OK
ReadX 12630 1241088 4096 4096 NT_STATUS_OK
ReadX 12630 1245184 61440 61440 NT_STATUS_OK
ReadX 12630 1306624 4096 4096 NT_STATUS_OK
ReadX 12630 1310720 61440 61440 NT_STATUS_OK
ReadX 12630 1372160 4096 4096 NT_STATUS_OK
ReadX 12630 1376256 61440 61440 NT_STATUS_OK
ReadX 12630 1437696 4096 4096 NT_STATUS_OK
ReadX 12630 1441792 61440 61440 NT_STATUS_OK
ReadX 12630 1503232 4096 4096 NT_STATUS_OK
ReadX 12630 1507328 61440 61440 NT_STATUS_OK
ReadX 12630 1568768 4096 4096 NT_STATUS_OK
ReadX 12630 1572864 61440 61440 NT_STATUS_OK
ReadX 12630 1634304 4096 4096 NT_STATUS_OK
ReadX 12630 1638400 61440 61440 NT_STATUS_OK
ReadX 12630 1699840 4096 4096 NT_STATUS_OK
ReadX 12630 1703936 61440 61440 NT_STATUS_OK
ReadX 12630 1765376 4096 4096 NT_STATUS_OK
ReadX 12630 1769472 61440 61440 NT_STATUS_OK
ReadX 12630 1830912 4096 4096 NT_STATUS_OK
ReadX 12630 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12632 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
ReadX 12632 2156 24 24 NT_STATUS_OK
ReadX 12632 2139 276 276 NT_STATUS_OK
ReadX 12632 2136 14 14 NT_STATUS_OK
ReadX 12632 2136 7 7 NT_STATUS_OK
ReadX 12632 2138 12 12 NT_STATUS_OK
ReadX 12632 2137 8 8 NT_STATUS_OK
ReadX 12632 2135 15 15 NT_STATUS_OK
ReadX 12632 0 16 16 NT_STATUS_OK
ReadX 12632 16 2048 2048 NT_STATUS_OK
ReadX 12632 2064 2048 2048 NT_STATUS_OK
ReadX 12632 257 2048 2048 NT_STATUS_OK
ReadX 12632 385 2048 2048 NT_STATUS_OK
ReadX 12632 513 2048 2048 NT_STATUS_OK
ReadX 12632 641 2048 2048 NT_STATUS_OK
ReadX 12632 769 2048 2048 NT_STATUS_OK
ReadX 12632 897 2048 2048 NT_STATUS_OK
ReadX 12632 1025 2048 2048 NT_STATUS_OK
ReadX 12632 1153 2048 2048 NT_STATUS_OK
ReadX 12632 1281 2048 2048 NT_STATUS_OK
ReadX 12632 1409 2048 2048 NT_STATUS_OK
ReadX 12632 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12634 NT_STATUS_OK
Close 12634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12637 NT_STATUS_OK
WriteX 12637 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12637 258 NT_STATUS_OK
WriteX 12637 0 10575 10575 NT_STATUS_OK
Flush 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12638 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12640 NT_STATUS_OK
ReadX 12640 0 4096 4096 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12642 NT_STATUS_OK
LockX 12642 2147483538 1 NT_STATUS_OK
UnlockX 12642 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1005 NT_STATUS_OK
ReadX 12642 0 512 512 NT_STATUS_OK
ReadX 12642 512 512 512 NT_STATUS_OK
ReadX 12642 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1004 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1005 NT_STATUS_OK
ReadX 12643 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12644 NT_STATUS_OK
LockX 12644 2147483538 1 NT_STATUS_OK
UnlockX 12644 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 1005 NT_STATUS_OK
ReadX 12644 0 512 512 NT_STATUS_OK
ReadX 12644 512 512 512 NT_STATUS_OK
ReadX 12644 1024 512 512 NT_STATUS_OK
ReadX 12644 288 20 20 NT_STATUS_OK
ReadX 12644 308 2084 2084 NT_STATUS_OK
ReadX 12644 388 2084 2084 NT_STATUS_OK
ReadX 12644 388 2084 2084 NT_STATUS_OK
ReadX 12631 2157 1386 1386 NT_STATUS_OK
ReadX 12644 2472 399 399 NT_STATUS_OK
ReadX 12644 3072 1536 1536 NT_STATUS_OK
ReadX 12644 544 149 149 NT_STATUS_OK
ReadX 12644 693 485 485 NT_STATUS_OK
Close 12644 NT_STATUS_OK
ReadX 12631 2157 4096 4096 NT_STATUS_OK
ReadX 12631 6253 4096 4096 NT_STATUS_OK
ReadX 12631 10349 4096 4096 NT_STATUS_OK
ReadX 12631 14445 4096 4096 NT_STATUS_OK
ReadX 12631 18541 4096 4096 NT_STATUS_OK
ReadX 12631 22637 256 256 NT_STATUS_OK
ReadX 12631 22893 4096 4096 NT_STATUS_OK
ReadX 12631 26989 4096 4096 NT_STATUS_OK
ReadX 12631 31085 4096 4096 NT_STATUS_OK
ReadX 12631 35181 4096 4096 NT_STATUS_OK
ReadX 12631 39277 4096 4096 NT_STATUS_OK
ReadX 12631 43373 4096 4096 NT_STATUS_OK
ReadX 12631 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12631 2157 1024 1024 NT_STATUS_OK
ReadX 12631 1667 4688 4688 NT_STATUS_OK
ReadX 12631 6355 3516 3516 NT_STATUS_OK
ReadX 12631 9871 16384 16384 NT_STATUS_OK
ReadX 12631 26255 3771 3771 NT_STATUS_OK
ReadX 12631 30026 2048 2048 NT_STATUS_OK
ReadX 12631 32074 1024 1024 NT_STATUS_OK
ReadX 12631 33098 6652 6652 NT_STATUS_OK
ReadX 12631 39750 16384 16384 NT_STATUS_OK
ReadX 12631 56134 10496 10496 NT_STATUS_OK
ReadX 12631 66630 1784 1784 NT_STATUS_OK
ReadX 12631 68414 90 90 NT_STATUS_OK
ReadX 12631 68504 273 273 NT_STATUS_OK
ReadX 12631 68777 1600 1600 NT_STATUS_OK
ReadX 12631 70377 640 640 NT_STATUS_OK
ReadX 12631 71017 1280 1280 NT_STATUS_OK
ReadX 12631 72297 8464 8464 NT_STATUS_OK
ReadX 12631 80761 158 158 NT_STATUS_OK
ReadX 12631 80919 912 912 NT_STATUS_OK
ReadX 12631 81831 1980 1980 NT_STATUS_OK
ReadX 12631 83811 2256 2256 NT_STATUS_OK
ReadX 12631 86067 400 400 NT_STATUS_OK
ReadX 12631 86467 252 252 NT_STATUS_OK
ReadX 12631 86719 42 42 NT_STATUS_OK
ReadX 12631 86761 725 725 NT_STATUS_OK
ReadX 12631 2009 512 512 NT_STATUS_OK
ReadX 12631 3895 9 9 NT_STATUS_OK
ReadX 12631 3781 46 46 NT_STATUS_OK
ReadX 12631 4059 92 92 NT_STATUS_OK
ReadX 12631 3781 92 92 NT_STATUS_OK
ReadX 12631 3986 184 184 NT_STATUS_OK
ReadX 12631 3987 16384 16384 NT_STATUS_OK
ReadX 12631 3902 16384 16384 NT_STATUS_OK
ReadX 12631 3781 10240 10240 NT_STATUS_OK
ReadX 12631 3821 16384 16384 NT_STATUS_OK
ReadX 12631 3891 935 935 NT_STATUS_OK
ReadX 12631 4060 10240 10240 NT_STATUS_OK
ReadX 12631 4059 184 184 NT_STATUS_OK
ReadX 12631 256 184 184 NT_STATUS_OK
ReadX 12631 256 1026 1026 NT_STATUS_OK
ReadX 12631 3901 326 326 NT_STATUS_OK
ReadX 12631 3899 652 652 NT_STATUS_OK
ReadX 12631 256 2 2 NT_STATUS_OK
ReadX 12631 258 4948 4948 NT_STATUS_OK
Close 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12649 NT_STATUS_OK
WriteX 12649 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12649 258 NT_STATUS_OK
WriteX 12649 0 65536 65536 NT_STATUS_OK
WriteX 12649 65536 65536 65536 NT_STATUS_OK
WriteX 12649 131072 65536 65536 NT_STATUS_OK
WriteX 12649 196608 65536 65536 NT_STATUS_OK
WriteX 12649 262144 65536 65536 NT_STATUS_OK
WriteX 12649 327680 65536 65536 NT_STATUS_OK
WriteX 12649 393216 65536 65536 NT_STATUS_OK
WriteX 12649 458752 65536 65536 NT_STATUS_OK
WriteX 12649 524288 65536 65536 NT_STATUS_OK
WriteX 12649 589824 35257 35257 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12654 NT_STATUS_OK
WriteX 12654 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12654 258 NT_STATUS_OK
WriteX 12654 0 65536 65536 NT_STATUS_OK
WriteX 12654 65536 65536 65536 NT_STATUS_OK
WriteX 12654 131072 65536 65536 NT_STATUS_OK
WriteX 12654 196608 65536 65536 NT_STATUS_OK
WriteX 12654 262144 65536 65536 NT_STATUS_OK
WriteX 12654 327680 65536 65536 NT_STATUS_OK
WriteX 12654 393216 65536 65536 NT_STATUS_OK
WriteX 12654 458752 65536 65536 NT_STATUS_OK
WriteX 12654 524288 65536 65536 NT_STATUS_OK
WriteX 12654 589824 57598 57598 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12656 NT_STATUS_OK
WriteX 12656 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12656 258 NT_STATUS_OK
WriteX 12656 0 12543 12543 NT_STATUS_OK
Flush 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12662 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
ReadX 12662 1938 24 24 NT_STATUS_OK
ReadX 12662 1920 276 276 NT_STATUS_OK
ReadX 12662 1918 14 14 NT_STATUS_OK
ReadX 12662 1918 7 7 NT_STATUS_OK
ReadX 12662 1919 12 12 NT_STATUS_OK
ReadX 12662 1919 8 8 NT_STATUS_OK
ReadX 12662 1917 15 15 NT_STATUS_OK
ReadX 12662 0 16 16 NT_STATUS_OK
ReadX 12662 16 2048 2048 NT_STATUS_OK
ReadX 12662 2064 2048 2048 NT_STATUS_OK
ReadX 12662 257 2048 2048 NT_STATUS_OK
ReadX 12662 385 2048 2048 NT_STATUS_OK
ReadX 12662 513 2048 2048 NT_STATUS_OK
ReadX 12662 641 2048 2048 NT_STATUS_OK
ReadX 12662 769 2048 2048 NT_STATUS_OK
ReadX 12662 897 2048 2048 NT_STATUS_OK
ReadX 12662 1025 2048 2048 NT_STATUS_OK
ReadX 12662 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 11588 11588 NT_STATUS_OK
Flush 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12672 NT_STATUS_OK
WriteX 12672 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 11615 11615 NT_STATUS_OK
Flush 12672 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12678 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12681 NT_STATUS_OK
WriteX 12681 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12681 258 NT_STATUS_OK
WriteX 12681 0 65536 65536 NT_STATUS_OK
WriteX 12681 65536 16050 16050 NT_STATUS_OK
Close 12681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12661 1939 64 64 NT_STATUS_OK
ReadX 12661 128 248 248 NT_STATUS_OK
ReadX 12661 128 568 568 NT_STATUS_OK
ReadX 12661 3872 1536 1536 NT_STATUS_OK
ReadX 12661 3456 2560 2560 NT_STATUS_OK
ReadX 12661 3136 512 512 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
ReadX 12661 3264 3072 3072 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 3616 4096 4096 NT_STATUS_OK
ReadX 12661 1939 64 64 NT_STATUS_OK
ReadX 12661 128 248 248 NT_STATUS_OK
ReadX 12661 128 608 608 NT_STATUS_OK
ReadX 12661 2858 1024 1024 NT_STATUS_OK
ReadX 12661 2810 4096 4096 NT_STATUS_OK
ReadX 12661 2826 4096 4096 NT_STATUS_OK
ReadX 12661 2580 2048 2048 NT_STATUS_OK
ReadX 12661 2800 2560 2560 NT_STATUS_OK
ReadX 12661 2100 4096 4096 NT_STATUS_OK
ReadX 12661 2084 4096 4096 NT_STATUS_OK
ReadX 12661 868 4096 4096 NT_STATUS_OK
ReadX 12661 2324 4096 4096 NT_STATUS_OK
ReadX 12661 884 4096 4096 NT_STATUS_OK
ReadX 12661 2604 1024 1024 NT_STATUS_OK
ReadX 12661 580 4096 4096 NT_STATUS_OK
ReadX 12661 596 4096 4096 NT_STATUS_OK
ReadX 12661 2752 4096 4096 NT_STATUS_OK
ReadX 12661 2842 1024 1024 NT_STATUS_OK
ReadX 12661 660 4096 4096 NT_STATUS_OK
ReadX 12661 2720 4096 4096 NT_STATUS_OK
ReadX 12661 2736 4096 4096 NT_STATUS_OK
ReadX 12661 628 4096 4096 NT_STATUS_OK
ReadX 12661 2704 4096 4096 NT_STATUS_OK
ReadX 12661 1556 4096 4096 NT_STATUS_OK
ReadX 12661 576 4096 4096 NT_STATUS_OK
ReadX 12661 3168 1536 1536 NT_STATUS_OK
ReadX 12661 832 4096 4096 NT_STATUS_OK
ReadX 12661 1088 4096 4096 NT_STATUS_OK
ReadX 12661 1344 4096 4096 NT_STATUS_OK
ReadX 12661 1600 4096 4096 NT_STATUS_OK
ReadX 12661 1856 4096 4096 NT_STATUS_OK
ReadX 12661 2112 4096 4096 NT_STATUS_OK
ReadX 12661 1892 4096 4096 NT_STATUS_OK
ReadX 12661 820 4096 4096 NT_STATUS_OK
ReadX 12661 788 4096 4096 NT_STATUS_OK
ReadX 12661 1604 4096 4096 NT_STATUS_OK
ReadX 12661 3648 4096 4096 NT_STATUS_OK
ReadX 12661 2608 4096 4096 NT_STATUS_OK
ReadX 12661 548 4096 4096 NT_STATUS_OK
ReadX 12661 740 4096 4096 NT_STATUS_OK
ReadX 12661 1344 4096 4096 NT_STATUS_OK
ReadX 12661 3392 4096 4096 NT_STATUS_OK
ReadX 12661 3904 4096 4096 NT_STATUS_OK
ReadX 12661 644 4096 4096 NT_STATUS_OK
ReadX 12661 676 4096 4096 NT_STATUS_OK
ReadX 12661 2688 4096 4096 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 900 4096 4096 NT_STATUS_OK
ReadX 12661 1908 4096 4096 NT_STATUS_OK
ReadX 12661 852 4096 4096 NT_STATUS_OK
ReadX 12661 724 4096 4096 NT_STATUS_OK
ReadX 12661 2292 4096 4096 NT_STATUS_OK
ReadX 12661 612 4096 4096 NT_STATUS_OK
ReadX 12661 388 4096 4096 NT_STATUS_OK
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 500 4096 4096 NT_STATUS_OK
ReadX 12661 356 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 576 4096 4096 NT_STATUS_OK
ReadX 12661 340 4096 4096 NT_STATUS_OK
ReadX 12661 420 4096 4096 NT_STATUS_OK
ReadX 12661 1600 4096 4096 NT_STATUS_OK
ReadX 12661 404 4096 4096 NT_STATUS_OK
ReadX 12661 1428 4096 4096 NT_STATUS_OK
ReadX 12661 2656 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 452 4096 4096 NT_STATUS_OK
ReadX 12661 692 4096 4096 NT_STATUS_OK
ReadX 12661 564 4096 4096 NT_STATUS_OK
ReadX 12661 372 4096 4096 NT_STATUS_OK
ReadX 12661 468 4096 4096 NT_STATUS_OK
ReadX 12661 484 4096 4096 NT_STATUS_OK
ReadX 12661 1088 4096 4096 NT_STATUS_OK
ReadX 12661 1924 4096 4096 NT_STATUS_OK
ReadX 12661 2768 4096 4096 NT_STATUS_OK
ReadX 12661 832 4096 4096 NT_STATUS_OK
ReadX 12661 836 4096 4096 NT_STATUS_OK
ReadX 12661 1856 4096 4096 NT_STATUS_OK
ReadX 12661 2640 4096 4096 NT_STATUS_OK
ReadX 12661 436 4096 4096 NT_STATUS_OK
ReadX 12661 1828 4096 4096 NT_STATUS_OK
ReadX 12661 804 4096 4096 NT_STATUS_OK
ReadX 12661 1860 4096 4096 NT_STATUS_OK
ReadX 12661 1812 4096 4096 NT_STATUS_OK
ReadX 12661 756 4096 4096 NT_STATUS_OK
ReadX 12661 1636 4096 4096 NT_STATUS_OK
ReadX 12661 772 4096 4096 NT_STATUS_OK
ReadX 12661 2036 4096 4096 NT_STATUS_OK
ReadX 12661 1220 4096 4096 NT_STATUS_OK
ReadX 12661 1652 4096 4096 NT_STATUS_OK
ReadX 12661 2588 4096 4096 NT_STATUS_OK
ReadX 12661 916 4096 4096 NT_STATUS_OK
ReadX 12661 260 4096 4096 NT_STATUS_OK
ReadX 12661 932 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 308 4096 4096 NT_STATUS_OK
ReadX 12661 292 4096 4096 NT_STATUS_OK
ReadX 12661 1140 4096 4096 NT_STATUS_OK
ReadX 12661 276 4096 4096 NT_STATUS_OK
ReadX 12661 2020 4096 4096 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
ReadX 12661 516 4096 4096 NT_STATUS_OK
ReadX 12661 1844 4096 4096 NT_STATUS_OK
ReadX 12661 1124 4096 4096 NT_STATUS_OK
ReadX 12661 3136 4096 4096 NT_STATUS_OK
ReadX 12661 324 4096 4096 NT_STATUS_OK
ReadX 12661 1156 4096 4096 NT_STATUS_OK
ReadX 12661 1172 4096 4096 NT_STATUS_OK
ReadX 12661 2112 4096 4096 NT_STATUS_OK
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 964 4096 4096 NT_STATUS_OK
ReadX 12661 980 4096 4096 NT_STATUS_OK
ReadX 12661 1012 4096 4096 NT_STATUS_OK
ReadX 12661 532 4096 4096 NT_STATUS_OK
ReadX 12661 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12661 1620 4096 4096 NT_STATUS_OK
ReadX 12661 1604 4096 4096 NT_STATUS_OK
ReadX 12661 2116 4096 4096 NT_STATUS_OK
ReadX 12661 2132 4096 4096 NT_STATUS_OK
ReadX 12661 2148 4096 4096 NT_STATUS_OK
ReadX 12661 2276 4096 4096 NT_STATUS_OK
ReadX 12661 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12686 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
WriteX 12686 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12686 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
WriteX 12686 0 65536 65536 NT_STATUS_OK
WriteX 12686 65536 64850 64850 NT_STATUS_OK
Close 12686 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12688 NT_STATUS_OK
WriteX 12688 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 258 NT_STATUS_OK
ReadX 12661 2068 4096 4096 NT_STATUS_OK
ReadX 12661 1588 4096 4096 NT_STATUS_OK
ReadX 12661 1572 4096 4096 NT_STATUS_OK
WriteX 12688 0 18630 18630 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12661 612 4096 4096 NT_STATUS_OK
ReadX 12661 564 4096 4096 NT_STATUS_OK
ReadX 12661 1876 4096 4096 NT_STATUS_OK
ReadX 12661 628 4096 4096 NT_STATUS_OK
ReadX 12661 740 4096 4096 NT_STATUS_OK
ReadX 12661 724 4096 4096 NT_STATUS_OK
ReadX 12661 644 4096 4096 NT_STATUS_OK
ReadX 12661 2324 4096 4096 NT_STATUS_OK
ReadX 12661 660 4096 4096 NT_STATUS_OK
ReadX 12661 852 4096 4096 NT_STATUS_OK
ReadX 12661 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 580 4096 4096 NT_STATUS_OK
ReadX 12661 3136 512 512 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
Close 12661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 61440 4096 4096 NT_STATUS_OK
ReadX 12693 126976 4096 4096 NT_STATUS_OK
WriteX 12693 0 65536 65536 NT_STATUS_OK
WriteX 12693 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 61440 4096 4096 NT_STATUS_OK
ReadX 12694 126976 4096 4096 NT_STATUS_OK
ReadX 12694 192512 4096 4096 NT_STATUS_OK
ReadX 12694 258048 4096 4096 NT_STATUS_OK
WriteX 12694 0 65536 65536 NT_STATUS_OK
WriteX 12694 65536 65536 65536 NT_STATUS_OK
WriteX 12694 131072 65536 65536 NT_STATUS_OK
WriteX 12694 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 61440 4096 4096 NT_STATUS_OK
ReadX 12695 126976 4096 4096 NT_STATUS_OK
ReadX 12695 192512 4096 4096 NT_STATUS_OK
ReadX 12695 258048 4096 4096 NT_STATUS_OK
ReadX 12695 323584 4096 4096 NT_STATUS_OK
ReadX 12695 389120 4096 4096 NT_STATUS_OK
ReadX 12695 454656 4096 4096 NT_STATUS_OK
ReadX 12695 520192 4096 4096 NT_STATUS_OK
WriteX 12695 0 65536 65536 NT_STATUS_OK
WriteX 12695 65536 65536 65536 NT_STATUS_OK
WriteX 12695 131072 65536 65536 NT_STATUS_OK
WriteX 12695 196608 65536 65536 NT_STATUS_OK
WriteX 12695 262144 65536 65536 NT_STATUS_OK
WriteX 12695 327680 65536 65536 NT_STATUS_OK
WriteX 12695 393216 65536 65536 NT_STATUS_OK
WriteX 12695 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12698 NT_STATUS_OK
WriteX 12698 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12696 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12700 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12703 NT_STATUS_OK
WriteX 12703 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12703 258 NT_STATUS_OK
WriteX 12703 0 62591 62591 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12708 NT_STATUS_OK
WriteX 12708 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12708 258 NT_STATUS_OK
WriteX 12708 0 10845 10845 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12710 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12713 NT_STATUS_OK
WriteX 12713 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 258 NT_STATUS_OK
WriteX 12713 0 30118 30118 NT_STATUS_OK
Close 12713 NT_STATUS_OK
WriteX 12696 0 4096 4096 NT_STATUS_OK
WriteX 12698 0 64 64 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 61440 61440 NT_STATUS_OK
ReadX 12715 61440 4096 4096 NT_STATUS_OK
ReadX 12715 65536 61440 61440 NT_STATUS_OK
ReadX 12715 126976 4096 4096 NT_STATUS_OK
ReadX 12715 131072 61440 61440 NT_STATUS_OK
ReadX 12715 192512 4096 4096 NT_STATUS_OK
ReadX 12715 196608 61440 61440 NT_STATUS_OK
ReadX 12715 258048 4096 4096 NT_STATUS_OK
ReadX 12715 262144 61440 61440 NT_STATUS_OK
ReadX 12715 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 61440 61440 NT_STATUS_OK
ReadX 12716 61440 4096 4096 NT_STATUS_OK
ReadX 12716 65536 61440 61440 NT_STATUS_OK
ReadX 12716 126976 4096 4096 NT_STATUS_OK
ReadX 12716 131072 61440 61440 NT_STATUS_OK
ReadX 12716 192512 4096 4096 NT_STATUS_OK
ReadX 12716 196608 61440 61440 NT_STATUS_OK
ReadX 12716 258048 4096 4096 NT_STATUS_OK
ReadX 12716 262144 61440 61440 NT_STATUS_OK
ReadX 12716 323584 4096 4096 NT_STATUS_OK
ReadX 12716 327680 61440 61440 NT_STATUS_OK
ReadX 12716 389120 4096 4096 NT_STATUS_OK
ReadX 12716 393216 61440 61440 NT_STATUS_OK
ReadX 12716 454656 4096 4096 NT_STATUS_OK
ReadX 12716 458752 61440 61440 NT_STATUS_OK
ReadX 12716 520192 4096 4096 NT_STATUS_OK
ReadX 12716 524288 61440 61440 NT_STATUS_OK
ReadX 12716 585728 4096 4096 NT_STATUS_OK
ReadX 12716 589824 61440 61440 NT_STATUS_OK
ReadX 12716 651264 4096 4096 NT_STATUS_OK
ReadX 12716 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 61440 61440 NT_STATUS_OK
ReadX 12717 61440 4096 4096 NT_STATUS_OK
ReadX 12717 65536 61440 61440 NT_STATUS_OK
ReadX 12717 126976 4096 4096 NT_STATUS_OK
ReadX 12717 131072 61440 61440 NT_STATUS_OK
ReadX 12717 192512 4096 4096 NT_STATUS_OK
ReadX 12717 196608 61440 61440 NT_STATUS_OK
ReadX 12717 258048 4096 4096 NT_STATUS_OK
ReadX 12717 262144 61440 61440 NT_STATUS_OK
ReadX 12717 323584 4096 4096 NT_STATUS_OK
ReadX 12717 327680 61440 61440 NT_STATUS_OK
ReadX 12717 389120 4096 4096 NT_STATUS_OK
ReadX 12717 393216 61440 61440 NT_STATUS_OK
ReadX 12717 454656 4096 4096 NT_STATUS_OK
ReadX 12717 458752 61440 61440 NT_STATUS_OK
ReadX 12717 520192 4096 4096 NT_STATUS_OK
ReadX 12717 524288 61440 61440 NT_STATUS_OK
ReadX 12717 585728 4096 4096 NT_STATUS_OK
ReadX 12717 589824 61440 61440 NT_STATUS_OK
ReadX 12717 651264 4096 4096 NT_STATUS_OK
ReadX 12717 655360 61440 61440 NT_STATUS_OK
ReadX 12717 716800 4096 4096 NT_STATUS_OK
ReadX 12717 720896 61440 61440 NT_STATUS_OK
ReadX 12717 782336 4096 4096 NT_STATUS_OK
ReadX 12717 786432 61440 61440 NT_STATUS_OK
ReadX 12717 847872 4096 4096 NT_STATUS_OK
ReadX 12717 851968 61440 61440 NT_STATUS_OK
ReadX 12717 913408 4096 4096 NT_STATUS_OK
ReadX 12717 917504 61440 61440 NT_STATUS_OK
ReadX 12717 978944 4096 4096 NT_STATUS_OK
ReadX 12717 983040 61440 61440 NT_STATUS_OK
ReadX 12717 1044480 4096 4096 NT_STATUS_OK
ReadX 12717 1048576 61440 61440 NT_STATUS_OK
ReadX 12717 1110016 4096 4096 NT_STATUS_OK
ReadX 12717 1114112 61440 61440 NT_STATUS_OK
ReadX 12717 1175552 4096 4096 NT_STATUS_OK
ReadX 12717 1179648 61440 61440 NT_STATUS_OK
ReadX 12717 1241088 4096 4096 NT_STATUS_OK
ReadX 12717 1245184 61440 61440 NT_STATUS_OK
ReadX 12717 1306624 4096 4096 NT_STATUS_OK
ReadX 12717 1310720 61440 61440 NT_STATUS_OK
ReadX 12717 1372160 4096 4096 NT_STATUS_OK
ReadX 12717 1376256 61440 61440 NT_STATUS_OK
ReadX 12717 1437696 4096 4096 NT_STATUS_OK
ReadX 12717 1441792 61440 61440 NT_STATUS_OK
ReadX 12717 1503232 4096 4096 NT_STATUS_OK
ReadX 12717 1507328 61440 61440 NT_STATUS_OK
ReadX 12717 1568768 4096 4096 NT_STATUS_OK
ReadX 12717 1572864 61440 61440 NT_STATUS_OK
ReadX 12717 1634304 4096 4096 NT_STATUS_OK
ReadX 12717 1638400 61440 61440 NT_STATUS_OK
ReadX 12717 1699840 4096 4096 NT_STATUS_OK
ReadX 12717 1703936 61440 61440 NT_STATUS_OK
ReadX 12717 1765376 4096 4096 NT_STATUS_OK
ReadX 12717 1769472 61440 61440 NT_STATUS_OK
ReadX 12717 1830912 4096 4096 NT_STATUS_OK
ReadX 12717 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12717 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
ReadX 12722 4096 4096 4096 NT_STATUS_OK
ReadX 12722 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12726 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 8192 8192 NT_STATUS_OK
ReadX 12730 8192 8192 8192 NT_STATUS_OK
ReadX 12730 16384 8192 8192 NT_STATUS_OK
ReadX 12730 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12735 NT_STATUS_OK
WriteX 12735 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12735 258 NT_STATUS_OK
WriteX 12735 0 10438 10438 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12740 NT_STATUS_OK
Close 12740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12741 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12743 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
ReadX 12744 4096 4096 4096 NT_STATUS_OK
ReadX 12744 8192 4096 4096 NT_STATUS_OK
ReadX 12744 12288 8192 8192 NT_STATUS_OK
ReadX 12744 20480 8192 8192 NT_STATUS_OK
ReadX 12744 28672 8192 8192 NT_STATUS_OK
ReadX 12744 36864 8192 8192 NT_STATUS_OK
ReadX 12744 45056 8192 8192 NT_STATUS_OK
ReadX 12744 53248 8192 8192 NT_STATUS_OK
ReadX 12744 61440 8192 8192 NT_STATUS_OK
ReadX 12744 69632 8192 8192 NT_STATUS_OK
ReadX 12744 77824 8192 8192 NT_STATUS_OK
ReadX 12744 86016 8192 8192 NT_STATUS_OK
ReadX 12744 94208 8192 8192 NT_STATUS_OK
ReadX 12744 102400 8192 8192 NT_STATUS_OK
ReadX 12744 110592 8192 8192 NT_STATUS_OK
ReadX 12744 118784 8192 8192 NT_STATUS_OK
ReadX 12744 126976 8192 8192 NT_STATUS_OK
ReadX 12744 135168 8192 8192 NT_STATUS_OK
ReadX 12744 143360 8192 8192 NT_STATUS_OK
ReadX 12744 151552 8192 8192 NT_STATUS_OK
ReadX 12744 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12744 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12749 NT_STATUS_OK
WriteX 12749 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12749 258 NT_STATUS_OK
WriteX 12749 0 28489 28489 NT_STATUS_OK
Close 12749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12752 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12753 NT_STATUS_OK
Close 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 8192 8192 NT_STATUS_OK
ReadX 12756 8192 8192 8192 NT_STATUS_OK
ReadX 12756 16384 8192 8192 NT_STATUS_OK
ReadX 12756 24576 8192 8192 NT_STATUS_OK
ReadX 12756 32768 16384 16384 NT_STATUS_OK
ReadX 12756 49152 8192 8192 NT_STATUS_OK
ReadX 12756 57344 8192 8192 NT_STATUS_OK
ReadX 12756 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12758 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12761 NT_STATUS_OK
WriteX 12761 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12761 258 NT_STATUS_OK
WriteX 12761 0 29253 29253 NT_STATUS_OK
Close 12761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12768 NT_STATUS_OK
WriteX 12768 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 258 NT_STATUS_OK
WriteX 12768 0 30183 30183 NT_STATUS_OK
Close 12768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12769 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12771 NT_STATUS_OK
WriteX 12771 0 510 510 NT_STATUS_OK
WriteX 12771 510 512 512 NT_STATUS_OK
WriteX 12771 1022 510 510 NT_STATUS_OK
WriteX 12771 1532 510 510 NT_STATUS_OK
WriteX 12771 2042 168 168 NT_STATUS_OK
Close 12771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 61440 4096 4096 NT_STATUS_OK
ReadX 12775 126976 4096 4096 NT_STATUS_OK
WriteX 12775 0 65536 65536 NT_STATUS_OK
WriteX 12775 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 61440 4096 4096 NT_STATUS_OK
ReadX 12776 126976 4096 4096 NT_STATUS_OK
ReadX 12776 192512 4096 4096 NT_STATUS_OK
ReadX 12776 258048 4096 4096 NT_STATUS_OK
WriteX 12776 0 65536 65536 NT_STATUS_OK
WriteX 12776 65536 65536 65536 NT_STATUS_OK
WriteX 12776 131072 65536 65536 NT_STATUS_OK
WriteX 12776 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 61440 4096 4096 NT_STATUS_OK
ReadX 12777 126976 4096 4096 NT_STATUS_OK
ReadX 12777 192512 4096 4096 NT_STATUS_OK
ReadX 12777 258048 4096 4096 NT_STATUS_OK
ReadX 12777 323584 4096 4096 NT_STATUS_OK
ReadX 12777 389120 4096 4096 NT_STATUS_OK
ReadX 12777 454656 4096 4096 NT_STATUS_OK
ReadX 12777 520192 4096 4096 NT_STATUS_OK
WriteX 12777 0 65536 65536 NT_STATUS_OK
WriteX 12777 65536 65536 65536 NT_STATUS_OK
WriteX 12777 131072 65536 65536 NT_STATUS_OK
WriteX 12777 196608 65536 65536 NT_STATUS_OK
WriteX 12777 262144 65536 65536 NT_STATUS_OK
WriteX 12777 327680 65536 65536 NT_STATUS_OK
WriteX 12777 393216 65536 65536 NT_STATUS_OK
WriteX 12777 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12784 NT_STATUS_OK
Close 12784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12817 NT_STATUS_OK
Close 12817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12822 NT_STATUS_OK
Close 12822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12832 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12846 0 65536 65536 NT_STATUS_OK
WriteX 12846 65536 65536 65536 NT_STATUS_OK
WriteX 12846 131072 65536 65536 NT_STATUS_OK
WriteX 12846 196608 65536 65536 NT_STATUS_OK
WriteX 12846 262144 26634 26634 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
ReadX 12854 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12892 NT_STATUS_OK
Close 12892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12902 NT_STATUS_OK
Close 12902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 4096 4096 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 4096 4096 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12948 NT_STATUS_OK
ReadX 12948 0 4096 4096 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12978 0 4096 4096 NT_STATUS_OK
Close 12978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
ReadX 12980 4096 4096 4096 NT_STATUS_OK
ReadX 12980 8192 4096 4096 NT_STATUS_OK
ReadX 12980 12288 4096 4096 NT_STATUS_OK
ReadX 12980 16384 4096 4096 NT_STATUS_OK
ReadX 12980 20480 4096 4096 NT_STATUS_OK
ReadX 12980 24576 4096 4096 NT_STATUS_OK
ReadX 12980 28672 4096 4096 NT_STATUS_OK
ReadX 12980 32768 4096 4096 NT_STATUS_OK
ReadX 12980 36864 4096 4096 NT_STATUS_OK
ReadX 12980 40960 4096 4096 NT_STATUS_OK
ReadX 12980 45056 4096 4096 NT_STATUS_OK
ReadX 12980 49152 4096 4096 NT_STATUS_OK
ReadX 12980 53248 4096 4096 NT_STATUS_OK
ReadX 12980 57344 4096 4096 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 65536 4096 4096 NT_STATUS_OK
ReadX 12980 69632 4096 4096 NT_STATUS_OK
ReadX 12980 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12980 1004 NT_STATUS_OK
WriteX 12980 0 4096 4096 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12981 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12986 NT_STATUS_OK
WriteX 12986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12986 258 NT_STATUS_OK
WriteX 12986 0 65536 65536 NT_STATUS_OK
WriteX 12986 65536 19979 19979 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
QUERY_FILE_INFORMATION 12987 1004 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
SET_FILE_INFORMATION 12987 1004 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12992 1004 NT_STATUS_OK
WriteX 12992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 65536 65536 NT_STATUS_OK
WriteX 12998 65536 17654 17654 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
SET_FILE_INFORMATION 13000 1004 NT_STATUS_OK
Close 13000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
ReadX 13004 4096 4096 4096 NT_STATUS_OK
ReadX 13004 8192 4096 4096 NT_STATUS_OK
ReadX 13004 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13004 16384 4096 4096 NT_STATUS_OK
ReadX 13004 20480 4096 4096 NT_STATUS_OK
ReadX 13004 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13005 NT_STATUS_OK
ReadX 13005 0 4096 4096 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13013 NT_STATUS_OK
WriteX 13013 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 258 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 19490 19490 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
SET_FILE_INFORMATION 13015 1004 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13019 0 4096 4096 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13020 NT_STATUS_OK
ReadX 13020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13021 NT_STATUS_OK
ReadX 13021 0 4096 4096 NT_STATUS_OK
ReadX 13021 4096 4096 4096 NT_STATUS_OK
ReadX 13021 8192 4096 4096 NT_STATUS_OK
ReadX 13021 12288 4096 4096 NT_STATUS_OK
ReadX 13021 16384 4096 4096 NT_STATUS_OK
ReadX 13021 20480 4096 4096 NT_STATUS_OK
ReadX 13021 24576 4096 4096 NT_STATUS_OK
ReadX 13021 28672 4096 4096 NT_STATUS_OK
ReadX 13021 32768 4096 4096 NT_STATUS_OK
ReadX 13021 36864 4096 4096 NT_STATUS_OK
ReadX 13021 40960 4096 4096 NT_STATUS_OK
ReadX 13021 45056 4096 4096 NT_STATUS_OK
ReadX 13021 49152 4096 4096 NT_STATUS_OK
ReadX 13021 53248 4096 4096 NT_STATUS_OK
ReadX 13021 57344 4096 4096 NT_STATUS_OK
ReadX 13021 61440 4096 4096 NT_STATUS_OK
ReadX 13021 65536 4096 4096 NT_STATUS_OK
ReadX 13021 69632 4096 4096 NT_STATUS_OK
ReadX 13021 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13021 1004 NT_STATUS_OK
WriteX 13021 0 4096 4096 NT_STATUS_OK
Close 13021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13022 NT_STATUS_OK
SET_FILE_INFORMATION 13022 1004 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13024 NT_STATUS_OK
Close 13024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
WriteX 13027 0 65536 65536 NT_STATUS_OK
WriteX 13027 65536 8866 8866 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Flush 13028 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Flush 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
WriteX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13038 NT_STATUS_OK
WriteX 13038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13038 258 NT_STATUS_OK
WriteX 13038 0 65536 65536 NT_STATUS_OK
WriteX 13038 65536 9298 9298 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
Flush 13039 NT_STATUS_OK
SET_FILE_INFORMATION 13039 1004 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
Flush 13039 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
SET_FILE_INFORMATION 13040 1004 NT_STATUS_OK
Close 13040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13045 0 4096 4096 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13046 4096 4096 4096 NT_STATUS_OK
ReadX 13046 8192 4096 4096 NT_STATUS_OK
ReadX 13046 12288 4096 4096 NT_STATUS_OK
ReadX 13046 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13049 1004 NT_STATUS_OK
WriteX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13052 NT_STATUS_OK
Close 13052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13055 NT_STATUS_OK
WriteX 13055 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 258 NT_STATUS_OK
WriteX 13055 0 65536 65536 NT_STATUS_OK
WriteX 13055 65536 11540 11540 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
SET_FILE_INFORMATION 13056 1004 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13061 NT_STATUS_OK
ReadX 13061 61440 4096 4096 NT_STATUS_OK
ReadX 13061 126976 4096 4096 NT_STATUS_OK
WriteX 13061 0 65536 65536 NT_STATUS_OK
WriteX 13061 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 61440 4096 4096 NT_STATUS_OK
ReadX 13062 126976 4096 4096 NT_STATUS_OK
ReadX 13062 192512 4096 4096 NT_STATUS_OK
ReadX 13062 258048 4096 4096 NT_STATUS_OK
WriteX 13062 0 65536 65536 NT_STATUS_OK
WriteX 13062 65536 65536 65536 NT_STATUS_OK
WriteX 13062 131072 65536 65536 NT_STATUS_OK
WriteX 13062 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 61440 4096 4096 NT_STATUS_OK
ReadX 13063 126976 4096 4096 NT_STATUS_OK
ReadX 13063 192512 4096 4096 NT_STATUS_OK
ReadX 13063 258048 4096 4096 NT_STATUS_OK
ReadX 13063 323584 4096 4096 NT_STATUS_OK
ReadX 13063 389120 4096 4096 NT_STATUS_OK
ReadX 13063 454656 4096 4096 NT_STATUS_OK
ReadX 13063 520192 4096 4096 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
WriteX 13063 131072 65536 65536 NT_STATUS_OK
WriteX 13063 196608 65536 65536 NT_STATUS_OK
WriteX 13063 262144 65536 65536 NT_STATUS_OK
WriteX 13063 327680 65536 65536 NT_STATUS_OK
WriteX 13063 393216 65536 65536 NT_STATUS_OK
WriteX 13063 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
ReadX 13064 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 53 53 NT_STATUS_OK
Close 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13066 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13064 8192 4096 4096 NT_STATUS_OK
ReadX 13064 12288 4096 4096 NT_STATUS_OK
WriteX 13068 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13068 258 NT_STATUS_OK
ReadX 13064 16384 4096 4096 NT_STATUS_OK
ReadX 13064 20480 4096 4096 NT_STATUS_OK
WriteX 13068 0 15360 15360 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
WriteX 13069 0 4096 4096 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13072 4096 4096 4096 NT_STATUS_OK
ReadX 13072 8192 4096 4096 NT_STATUS_OK
ReadX 13072 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
ReadX 13075 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
ReadX 13076 4096 4096 4096 NT_STATUS_OK
ReadX 13076 8192 4096 4096 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13077 NT_STATUS_OK
WriteX 13077 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
WriteX 13077 0 15360 15360 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13082 NT_STATUS_OK
SET_FILE_INFORMATION 13082 1004 NT_STATUS_OK
Close 13082 NT_STATUS_OK
WriteX 13078 0 4096 4096 NT_STATUS_OK
Close 13078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
ReadX 13085 4096 4096 4096 NT_STATUS_OK
ReadX 13085 8192 4096 4096 NT_STATUS_OK
ReadX 13085 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13087 NT_STATUS_OK
WriteX 13087 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13087 258 NT_STATUS_OK
WriteX 13087 0 53 53 NT_STATUS_OK
Close 13087 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 19054 19054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13086 4096 4096 4096 NT_STATUS_OK
ReadX 13086 8192 4096 4096 NT_STATUS_OK
ReadX 13086 12288 4096 4096 NT_STATUS_OK
WriteX 13090 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 12006 12006 NT_STATUS_OK
Close 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
WriteX 13091 0 4096 4096 NT_STATUS_OK
Close 13091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 11991 11991 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13102 NT_STATUS_OK
SET_FILE_INFORMATION 13102 1004 NT_STATUS_OK
Close 13102 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13105 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
ReadX 13105 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
WriteX 13105 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
Close 13081 NT_STATUS_OK
WriteX 13105 0 12288 12288 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 61440 61440 NT_STATUS_OK
ReadX 13112 61440 4096 4096 NT_STATUS_OK
ReadX 13112 65536 61440 61440 NT_STATUS_OK
ReadX 13112 126976 4096 4096 NT_STATUS_OK
ReadX 13112 131072 61440 61440 NT_STATUS_OK
ReadX 13112 192512 4096 4096 NT_STATUS_OK
ReadX 13112 196608 61440 61440 NT_STATUS_OK
ReadX 13112 258048 4096 4096 NT_STATUS_OK
ReadX 13112 262144 61440 61440 NT_STATUS_OK
ReadX 13112 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 61440 61440 NT_STATUS_OK
ReadX 13113 61440 4096 4096 NT_STATUS_OK
ReadX 13113 65536 61440 61440 NT_STATUS_OK
ReadX 13113 126976 4096 4096 NT_STATUS_OK
ReadX 13113 131072 61440 61440 NT_STATUS_OK
ReadX 13113 192512 4096 4096 NT_STATUS_OK
ReadX 13113 196608 61440 61440 NT_STATUS_OK
ReadX 13113 258048 4096 4096 NT_STATUS_OK
ReadX 13113 262144 61440 61440 NT_STATUS_OK
ReadX 13113 323584 4096 4096 NT_STATUS_OK
ReadX 13113 327680 61440 61440 NT_STATUS_OK
ReadX 13113 389120 4096 4096 NT_STATUS_OK
ReadX 13113 393216 61440 61440 NT_STATUS_OK
ReadX 13113 454656 4096 4096 NT_STATUS_OK
ReadX 13113 458752 61440 61440 NT_STATUS_OK
ReadX 13113 520192 4096 4096 NT_STATUS_OK
ReadX 13113 524288 61440 61440 NT_STATUS_OK
ReadX 13113 585728 4096 4096 NT_STATUS_OK
ReadX 13113 589824 61440 61440 NT_STATUS_OK
ReadX 13113 651264 4096 4096 NT_STATUS_OK
ReadX 13113 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 61440 61440 NT_STATUS_OK
ReadX 13114 61440 4096 4096 NT_STATUS_OK
ReadX 13114 65536 61440 61440 NT_STATUS_OK
ReadX 13114 126976 4096 4096 NT_STATUS_OK
ReadX 13114 131072 61440 61440 NT_STATUS_OK
ReadX 13114 192512 4096 4096 NT_STATUS_OK
ReadX 13114 196608 61440 61440 NT_STATUS_OK
ReadX 13114 258048 4096 4096 NT_STATUS_OK
ReadX 13114 262144 61440 61440 NT_STATUS_OK
ReadX 13114 323584 4096 4096 NT_STATUS_OK
ReadX 13114 327680 61440 61440 NT_STATUS_OK
ReadX 13114 389120 4096 4096 NT_STATUS_OK
ReadX 13114 393216 61440 61440 NT_STATUS_OK
ReadX 13114 454656 4096 4096 NT_STATUS_OK
ReadX 13114 458752 61440 61440 NT_STATUS_OK
ReadX 13114 520192 4096 4096 NT_STATUS_OK
ReadX 13114 524288 61440 61440 NT_STATUS_OK
ReadX 13114 585728 4096 4096 NT_STATUS_OK
ReadX 13114 589824 61440 61440 NT_STATUS_OK
ReadX 13114 651264 4096 4096 NT_STATUS_OK
ReadX 13114 655360 61440 61440 NT_STATUS_OK
ReadX 13114 716800 4096 4096 NT_STATUS_OK
ReadX 13114 720896 61440 61440 NT_STATUS_OK
ReadX 13114 782336 4096 4096 NT_STATUS_OK
ReadX 13114 786432 61440 61440 NT_STATUS_OK
ReadX 13114 847872 4096 4096 NT_STATUS_OK
ReadX 13114 851968 61440 61440 NT_STATUS_OK
ReadX 13114 913408 4096 4096 NT_STATUS_OK
ReadX 13114 917504 61440 61440 NT_STATUS_OK
ReadX 13114 978944 4096 4096 NT_STATUS_OK
ReadX 13114 983040 61440 61440 NT_STATUS_OK
ReadX 13114 1044480 4096 4096 NT_STATUS_OK
ReadX 13114 1048576 61440 61440 NT_STATUS_OK
ReadX 13114 1110016 4096 4096 NT_STATUS_OK
ReadX 13114 1114112 61440 61440 NT_STATUS_OK
ReadX 13114 1175552 4096 4096 NT_STATUS_OK
ReadX 13114 1179648 61440 61440 NT_STATUS_OK
ReadX 13114 1241088 4096 4096 NT_STATUS_OK
ReadX 13114 1245184 61440 61440 NT_STATUS_OK
ReadX 13114 1306624 4096 4096 NT_STATUS_OK
ReadX 13114 1310720 61440 61440 NT_STATUS_OK
ReadX 13114 1372160 4096 4096 NT_STATUS_OK
ReadX 13114 1376256 61440 61440 NT_STATUS_OK
ReadX 13114 1437696 4096 4096 NT_STATUS_OK
ReadX 13114 1441792 61440 61440 NT_STATUS_OK
ReadX 13114 1503232 4096 4096 NT_STATUS_OK
ReadX 13114 1507328 61440 61440 NT_STATUS_OK
ReadX 13114 1568768 4096 4096 NT_STATUS_OK
ReadX 13114 1572864 61440 61440 NT_STATUS_OK
ReadX 13114 1634304 4096 4096 NT_STATUS_OK
ReadX 13114 1638400 61440 61440 NT_STATUS_OK
ReadX 13114 1699840 4096 4096 NT_STATUS_OK
ReadX 13114 1703936 61440 61440 NT_STATUS_OK
ReadX 13114 1765376 4096 4096 NT_STATUS_OK
ReadX 13114 1769472 61440 61440 NT_STATUS_OK
ReadX 13114 1830912 4096 4096 NT_STATUS_OK
ReadX 13114 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13121 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 1004 NT_STATUS_OK
WriteX 13121 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13122 NT_STATUS_OK
Close 13122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13123 NT_STATUS_OK
WriteX 13123 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13123 258 NT_STATUS_OK
WriteX 13123 0 491 491 NT_STATUS_OK
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13126 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13127 NT_STATUS_OK
WriteX 13127 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13127 258 NT_STATUS_OK
WriteX 13127 0 543 543 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13135 NT_STATUS_OK
ReadX 13135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13141 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 1004 NT_STATUS_OK
WriteX 13141 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 258 NT_STATUS_OK
WriteX 13141 0 2048 2048 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
Flush 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13147 NT_STATUS_OK
WriteX 13147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13147 258 NT_STATUS_OK
WriteX 13147 0 2048 2048 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13153 NT_STATUS_OK
WriteX 13153 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13153 258 NT_STATUS_OK
WriteX 13153 0 2048 2048 NT_STATUS_OK
Close 13153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 2048 2048 NT_STATUS_OK
ReadX 13132 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13148 0 4096 4096 NT_STATUS_OK
WriteX 13132 0 8192 8192 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13158 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13132 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13167 NT_STATUS_OK
ReadX 13167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13168 NT_STATUS_OK
ReadX 13168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13178 NT_STATUS_OK
QUERY_FILE_INFORMATION 13178 1004 NT_STATUS_OK
WriteX 13178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13178 258 NT_STATUS_OK
WriteX 13178 0 2048 2048 NT_STATUS_OK
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13186 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 1004 NT_STATUS_OK
WriteX 13186 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 258 NT_STATUS_OK
WriteX 13186 0 2048 2048 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
Flush 13179 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
Flush 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13189 NT_STATUS_OK
WriteX 13189 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13189 258 NT_STATUS_OK
WriteX 13189 0 4096 4096 NT_STATUS_OK
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13191 NT_STATUS_OK
Close 13191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13192 NT_STATUS_OK
WriteX 13192 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13192 258 NT_STATUS_OK
WriteX 13192 0 4096 4096 NT_STATUS_OK
Close 13192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13193 NT_STATUS_OK
ReadX 13193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13193 0 4096 4096 NT_STATUS_OK
Close 13190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13167 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13168 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Close 13162 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13200 NT_STATUS_OK
WriteX 13200 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 2048 2048 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13205 NT_STATUS_OK
ReadX 13205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13215 NT_STATUS_OK
QUERY_FILE_INFORMATION 13215 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Close 13201 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Close 13205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13217 NT_STATUS_OK
QUERY_FILE_INFORMATION 13217 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13237 NT_STATUS_OK
QUERY_FILE_INFORMATION 13237 1004 NT_STATUS_OK
WriteX 13237 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13237 258 NT_STATUS_OK
WriteX 13237 0 2048 2048 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13239 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13249 NT_STATUS_OK
QUERY_FILE_INFORMATION 13249 1004 NT_STATUS_OK
WriteX 13249 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13249 258 NT_STATUS_OK
WriteX 13249 0 2048 2048 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13257 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 1004 NT_STATUS_OK
WriteX 13257 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
WriteX 13257 0 2048 2048 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13238 0 4096 4096 NT_STATUS_OK
Flush 13238 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
Flush 13250 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Flush 13258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13238 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13240 4096 16384 16384 NT_STATUS_OK
ReadX 13220 4096 16384 16384 NT_STATUS_OK
ReadX 13252 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 2048 2048 NT_STATUS_OK
WriteX 13260 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13261 NT_STATUS_OK
QUERY_FILE_INFORMATION 13261 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13263 NT_STATUS_OK
QUERY_FILE_INFORMATION 13263 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13265 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13270 NT_STATUS_OK
ReadX 13270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13268 4096 16384 16384 NT_STATUS_OK
WriteX 13268 0 4096 4096 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 8192 8192 NT_STATUS_OK
ReadX 13274 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13288 0 4096 4096 NT_STATUS_OK
ReadX 13288 4096 4096 4096 NT_STATUS_OK
ReadX 13288 8192 4096 4096 NT_STATUS_OK
WriteX 13274 0 4096 4096 NT_STATUS_OK
WriteX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
ReadX 13289 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13268 0 4096 4096 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13294 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 1004 NT_STATUS_OK
WriteX 13294 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 258 NT_STATUS_OK
WriteX 13294 0 2048 2048 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
WriteX 13297 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
ReadX 13299 4096 4096 4096 NT_STATUS_OK
WriteX 13299 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13300 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13270 NT_STATUS_OK
Close 13271 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13302 0 4096 4096 NT_STATUS_OK
ReadX 13302 4096 4096 4096 NT_STATUS_OK
ReadX 13302 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
ReadX 13303 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13320 NT_STATUS_OK
QUERY_FILE_INFORMATION 13320 1004 NT_STATUS_OK
WriteX 13320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13320 258 NT_STATUS_OK
WriteX 13320 0 2048 2048 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13326 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 1004 NT_STATUS_OK
WriteX 13326 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 258 NT_STATUS_OK
WriteX 13326 0 2048 2048 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13327 NT_STATUS_OK
ReadX 13327 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13327 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13310 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13328 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13330 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13332 NT_STATUS_OK
ReadX 13332 61440 4096 4096 NT_STATUS_OK
ReadX 13332 126976 4096 4096 NT_STATUS_OK
WriteX 13332 0 65536 65536 NT_STATUS_OK
WriteX 13332 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 61440 4096 4096 NT_STATUS_OK
ReadX 13333 126976 4096 4096 NT_STATUS_OK
ReadX 13333 192512 4096 4096 NT_STATUS_OK
ReadX 13333 258048 4096 4096 NT_STATUS_OK
WriteX 13333 0 65536 65536 NT_STATUS_OK
WriteX 13333 65536 65536 65536 NT_STATUS_OK
WriteX 13333 131072 65536 65536 NT_STATUS_OK
WriteX 13333 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
ReadX 13334 192512 4096 4096 NT_STATUS_OK
ReadX 13334 258048 4096 4096 NT_STATUS_OK
ReadX 13334 323584 4096 4096 NT_STATUS_OK
ReadX 13334 389120 4096 4096 NT_STATUS_OK
ReadX 13334 454656 4096 4096 NT_STATUS_OK
ReadX 13334 520192 4096 4096 NT_STATUS_OK
WriteX 13334 0 65536 65536 NT_STATUS_OK
WriteX 13334 65536 65536 65536 NT_STATUS_OK
WriteX 13334 131072 65536 65536 NT_STATUS_OK
WriteX 13334 196608 65536 65536 NT_STATUS_OK
WriteX 13334 262144 65536 65536 NT_STATUS_OK
WriteX 13334 327680 65536 65536 NT_STATUS_OK
WriteX 13334 393216 65536 65536 NT_STATUS_OK
WriteX 13334 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13335 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 8192 4096 4096 NT_STATUS_OK
ReadX 13335 12288 4096 4096 NT_STATUS_OK
ReadX 13335 16384 4096 4096 NT_STATUS_OK
ReadX 13335 20480 4096 4096 NT_STATUS_OK
ReadX 13335 24576 4096 4096 NT_STATUS_OK
ReadX 13335 28672 4096 4096 NT_STATUS_OK
ReadX 13335 32768 4096 4096 NT_STATUS_OK
ReadX 13335 36864 4096 4096 NT_STATUS_OK
ReadX 13335 40960 4096 4096 NT_STATUS_OK
ReadX 13335 45056 4096 4096 NT_STATUS_OK
ReadX 13335 49152 4096 4096 NT_STATUS_OK
ReadX 13335 53248 4096 4096 NT_STATUS_OK
ReadX 13335 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13335 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13332 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13338 NT_STATUS_OK
WriteX 13338 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13338 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13338 1004 NT_STATUS_OK
WriteX 13338 0 57088 57088 NT_STATUS_OK
WriteX 13338 0 4096 4096 NT_STATUS_OK
Flush 13338 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13339 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
SET_FILE_INFORMATION 13338 1004 NT_STATUS_OK
WriteX 13338 0 4096 4096 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13342 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13343 NT_STATUS_OK
WriteX 13343 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13343 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
WriteX 13343 0 51456 51456 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
Flush 13343 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13345 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13347 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13352 NT_STATUS_OK
WriteX 13352 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 258 NT_STATUS_OK
WriteX 13352 0 53077 53077 NT_STATUS_OK
Close 13352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13353 NT_STATUS_OK
WriteX 13353 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13353 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 65536 65536 NT_STATUS_OK
WriteX 13353 65536 1856 1856 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Flush 13353 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13355 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13359 NT_STATUS_OK
Close 13359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13362 NT_STATUS_OK
WriteX 13362 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
WriteX 13362 0 7983 7983 NT_STATUS_OK
Close 13362 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13367 NT_STATUS_OK
WriteX 13367 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 258 NT_STATUS_OK
WriteX 13367 0 65536 65536 NT_STATUS_OK
WriteX 13367 65536 65536 65536 NT_STATUS_OK
WriteX 13367 131072 65536 65536 NT_STATUS_OK
WriteX 13367 196608 65536 65536 NT_STATUS_OK
WriteX 13367 262144 65536 65536 NT_STATUS_OK
WriteX 13367 327680 65536 65536 NT_STATUS_OK
WriteX 13367 393216 65536 65536 NT_STATUS_OK
WriteX 13367 458752 46731 46731 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13368 NT_STATUS_OK
WriteX 13368 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13357 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 0 65536 65536 NT_STATUS_OK
WriteX 13368 65536 22848 22848 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Flush 13368 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Close 13368 NT_STATUS_OK
Close 13357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13370 NT_STATUS_OK
Close 13370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13372 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13373 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13373 1004 NT_STATUS_OK
ReadX 13373 8192 4096 4096 NT_STATUS_OK
ReadX 13373 12288 4096 4096 NT_STATUS_OK
ReadX 13373 16384 4096 4096 NT_STATUS_OK
ReadX 13373 20480 4096 4096 NT_STATUS_OK
ReadX 13373 24576 4096 4096 NT_STATUS_OK
ReadX 13373 28672 4096 4096 NT_STATUS_OK
ReadX 13373 32768 4096 4096 NT_STATUS_OK
ReadX 13373 36864 4096 4096 NT_STATUS_OK
ReadX 13373 40960 4096 4096 NT_STATUS_OK
ReadX 13373 45056 4096 4096 NT_STATUS_OK
ReadX 13373 49152 4096 4096 NT_STATUS_OK
ReadX 13373 53248 4096 4096 NT_STATUS_OK
ReadX 13373 57344 4096 4096 NT_STATUS_OK
ReadX 13373 61440 4096 4096 NT_STATUS_OK
ReadX 13373 65536 4096 4096 NT_STATUS_OK
ReadX 13373 69632 4096 4096 NT_STATUS_OK
ReadX 13373 73728 4096 4096 NT_STATUS_OK
ReadX 13373 77824 4096 4096 NT_STATUS_OK
ReadX 13373 81920 4096 4096 NT_STATUS_OK
ReadX 13373 86016 4096 4096 NT_STATUS_OK
ReadX 13373 90112 4096 4096 NT_STATUS_OK
ReadX 13373 94208 4096 4096 NT_STATUS_OK
ReadX 13373 98304 4096 4096 NT_STATUS_OK
ReadX 13373 102400 4096 4096 NT_STATUS_OK
ReadX 13373 106496 4096 4096 NT_STATUS_OK
ReadX 13373 110592 4096 4096 NT_STATUS_OK
ReadX 13373 114688 4096 4096 NT_STATUS_OK
ReadX 13373 118784 4096 4096 NT_STATUS_OK
ReadX 13373 122880 4096 4096 NT_STATUS_OK
ReadX 13373 126976 4096 4096 NT_STATUS_OK
ReadX 13373 131072 4096 4096 NT_STATUS_OK
ReadX 13373 135168 4096 4096 NT_STATUS_OK
ReadX 13373 139264 4096 4096 NT_STATUS_OK
ReadX 13373 143360 4096 4096 NT_STATUS_OK
ReadX 13373 147456 4096 4096 NT_STATUS_OK
ReadX 13373 151552 4096 4096 NT_STATUS_OK
ReadX 13373 155648 4096 4096 NT_STATUS_OK
ReadX 13373 159744 4096 4096 NT_STATUS_OK
ReadX 13373 163840 4096 4096 NT_STATUS_OK
ReadX 13373 167936 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13373 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13374 NT_STATUS_OK
Close 13374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13377 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
Close 13377 NT_STATUS_OK
WriteX 13376 0 42388 42388 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
ReadX 13380 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13381 NT_STATUS_OK
WriteX 13381 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13381 258 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
WriteX 13381 0 42652 42652 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
ReadX 13385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13390 NT_STATUS_OK
WriteX 13390 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
WriteX 13390 0 65536 65536 NT_STATUS_OK
WriteX 13390 65536 49 49 NT_STATUS_OK
Close 13390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 61440 61440 NT_STATUS_OK
ReadX 13391 61440 4096 4096 NT_STATUS_OK
ReadX 13391 65536 61440 61440 NT_STATUS_OK
ReadX 13391 126976 4096 4096 NT_STATUS_OK
ReadX 13391 131072 61440 61440 NT_STATUS_OK
ReadX 13391 192512 4096 4096 NT_STATUS_OK
ReadX 13391 196608 61440 61440 NT_STATUS_OK
ReadX 13391 258048 4096 4096 NT_STATUS_OK
ReadX 13391 262144 61440 61440 NT_STATUS_OK
ReadX 13391 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 61440 61440 NT_STATUS_OK
ReadX 13392 61440 4096 4096 NT_STATUS_OK
ReadX 13392 65536 61440 61440 NT_STATUS_OK
ReadX 13392 126976 4096 4096 NT_STATUS_OK
ReadX 13392 131072 61440 61440 NT_STATUS_OK
ReadX 13392 192512 4096 4096 NT_STATUS_OK
ReadX 13392 196608 61440 61440 NT_STATUS_OK
ReadX 13392 258048 4096 4096 NT_STATUS_OK
ReadX 13392 262144 61440 61440 NT_STATUS_OK
ReadX 13392 323584 4096 4096 NT_STATUS_OK
ReadX 13392 327680 61440 61440 NT_STATUS_OK
ReadX 13392 389120 4096 4096 NT_STATUS_OK
ReadX 13392 393216 61440 61440 NT_STATUS_OK
ReadX 13392 454656 4096 4096 NT_STATUS_OK
ReadX 13392 458752 61440 61440 NT_STATUS_OK
ReadX 13392 520192 4096 4096 NT_STATUS_OK
ReadX 13392 524288 61440 61440 NT_STATUS_OK
ReadX 13392 585728 4096 4096 NT_STATUS_OK
ReadX 13392 589824 61440 61440 NT_STATUS_OK
ReadX 13392 651264 4096 4096 NT_STATUS_OK
ReadX 13392 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 61440 61440 NT_STATUS_OK
ReadX 13393 61440 4096 4096 NT_STATUS_OK
ReadX 13393 65536 61440 61440 NT_STATUS_OK
ReadX 13393 126976 4096 4096 NT_STATUS_OK
ReadX 13393 131072 61440 61440 NT_STATUS_OK
ReadX 13393 192512 4096 4096 NT_STATUS_OK
ReadX 13393 196608 61440 61440 NT_STATUS_OK
ReadX 13393 258048 4096 4096 NT_STATUS_OK
ReadX 13393 262144 61440 61440 NT_STATUS_OK
ReadX 13393 323584 4096 4096 NT_STATUS_OK
ReadX 13393 327680 61440 61440 NT_STATUS_OK
ReadX 13393 389120 4096 4096 NT_STATUS_OK
ReadX 13393 393216 61440 61440 NT_STATUS_OK
ReadX 13393 454656 4096 4096 NT_STATUS_OK
ReadX 13393 458752 61440 61440 NT_STATUS_OK
ReadX 13393 520192 4096 4096 NT_STATUS_OK
ReadX 13393 524288 61440 61440 NT_STATUS_OK
ReadX 13393 585728 4096 4096 NT_STATUS_OK
ReadX 13393 589824 61440 61440 NT_STATUS_OK
ReadX 13393 651264 4096 4096 NT_STATUS_OK
ReadX 13393 655360 61440 61440 NT_STATUS_OK
ReadX 13393 716800 4096 4096 NT_STATUS_OK
ReadX 13393 720896 61440 61440 NT_STATUS_OK
ReadX 13393 782336 4096 4096 NT_STATUS_OK
ReadX 13393 786432 61440 61440 NT_STATUS_OK
ReadX 13393 847872 4096 4096 NT_STATUS_OK
ReadX 13393 851968 61440 61440 NT_STATUS_OK
ReadX 13393 913408 4096 4096 NT_STATUS_OK
ReadX 13393 917504 61440 61440 NT_STATUS_OK
ReadX 13393 978944 4096 4096 NT_STATUS_OK
ReadX 13393 983040 61440 61440 NT_STATUS_OK
ReadX 13393 1044480 4096 4096 NT_STATUS_OK
ReadX 13393 1048576 61440 61440 NT_STATUS_OK
ReadX 13393 1110016 4096 4096 NT_STATUS_OK
ReadX 13393 1114112 61440 61440 NT_STATUS_OK
ReadX 13393 1175552 4096 4096 NT_STATUS_OK
ReadX 13393 1179648 61440 61440 NT_STATUS_OK
ReadX 13393 1241088 4096 4096 NT_STATUS_OK
ReadX 13393 1245184 61440 61440 NT_STATUS_OK
ReadX 13393 1306624 4096 4096 NT_STATUS_OK
ReadX 13393 1310720 61440 61440 NT_STATUS_OK
ReadX 13393 1372160 4096 4096 NT_STATUS_OK
ReadX 13393 1376256 61440 61440 NT_STATUS_OK
ReadX 13393 1437696 4096 4096 NT_STATUS_OK
ReadX 13393 1441792 61440 61440 NT_STATUS_OK
ReadX 13393 1503232 4096 4096 NT_STATUS_OK
ReadX 13393 1507328 61440 61440 NT_STATUS_OK
ReadX 13393 1568768 4096 4096 NT_STATUS_OK
ReadX 13393 1572864 61440 61440 NT_STATUS_OK
ReadX 13393 1634304 4096 4096 NT_STATUS_OK
ReadX 13393 1638400 61440 61440 NT_STATUS_OK
ReadX 13393 1699840 4096 4096 NT_STATUS_OK
ReadX 13393 1703936 61440 61440 NT_STATUS_OK
ReadX 13393 1765376 4096 4096 NT_STATUS_OK
ReadX 13393 1769472 61440 61440 NT_STATUS_OK
ReadX 13393 1830912 4096 4096 NT_STATUS_OK
ReadX 13393 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13395 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
ReadX 13395 2156 24 24 NT_STATUS_OK
ReadX 13395 2139 276 276 NT_STATUS_OK
ReadX 13395 2136 14 14 NT_STATUS_OK
ReadX 13395 2136 7 7 NT_STATUS_OK
ReadX 13395 2138 12 12 NT_STATUS_OK
ReadX 13395 2137 8 8 NT_STATUS_OK
ReadX 13395 2135 15 15 NT_STATUS_OK
ReadX 13395 0 16 16 NT_STATUS_OK
ReadX 13395 16 2048 2048 NT_STATUS_OK
ReadX 13395 2064 2048 2048 NT_STATUS_OK
ReadX 13395 257 2048 2048 NT_STATUS_OK
ReadX 13395 385 2048 2048 NT_STATUS_OK
ReadX 13395 513 2048 2048 NT_STATUS_OK
ReadX 13395 641 2048 2048 NT_STATUS_OK
ReadX 13395 769 2048 2048 NT_STATUS_OK
ReadX 13395 897 2048 2048 NT_STATUS_OK
ReadX 13395 1025 2048 2048 NT_STATUS_OK
ReadX 13395 1153 2048 2048 NT_STATUS_OK
ReadX 13395 1281 2048 2048 NT_STATUS_OK
ReadX 13395 1409 2048 2048 NT_STATUS_OK
ReadX 13395 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13397 NT_STATUS_OK
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13400 NT_STATUS_OK
WriteX 13400 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
WriteX 13400 0 10575 10575 NT_STATUS_OK
Flush 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13401 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13403 NT_STATUS_OK
ReadX 13403 0 4096 4096 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13405 NT_STATUS_OK
LockX 13405 2147483538 1 NT_STATUS_OK
UnlockX 13405 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1005 NT_STATUS_OK
ReadX 13405 0 512 512 NT_STATUS_OK
ReadX 13405 512 512 512 NT_STATUS_OK
ReadX 13405 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1004 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1005 NT_STATUS_OK
ReadX 13406 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13407 NT_STATUS_OK
LockX 13407 2147483538 1 NT_STATUS_OK
UnlockX 13407 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 1005 NT_STATUS_OK
ReadX 13407 0 512 512 NT_STATUS_OK
ReadX 13407 512 512 512 NT_STATUS_OK
ReadX 13407 1024 512 512 NT_STATUS_OK
ReadX 13407 288 20 20 NT_STATUS_OK
ReadX 13407 308 2084 2084 NT_STATUS_OK
ReadX 13407 388 2084 2084 NT_STATUS_OK
ReadX 13407 388 2084 2084 NT_STATUS_OK
ReadX 13394 2157 1386 1386 NT_STATUS_OK
ReadX 13407 2472 399 399 NT_STATUS_OK
ReadX 13407 3072 1536 1536 NT_STATUS_OK
ReadX 13407 544 149 149 NT_STATUS_OK
ReadX 13407 693 485 485 NT_STATUS_OK
Close 13407 NT_STATUS_OK
ReadX 13394 2157 4096 4096 NT_STATUS_OK
ReadX 13394 6253 4096 4096 NT_STATUS_OK
ReadX 13394 10349 4096 4096 NT_STATUS_OK
ReadX 13394 14445 4096 4096 NT_STATUS_OK
ReadX 13394 18541 4096 4096 NT_STATUS_OK
ReadX 13394 22637 256 256 NT_STATUS_OK
ReadX 13394 22893 4096 4096 NT_STATUS_OK
ReadX 13394 26989 4096 4096 NT_STATUS_OK
ReadX 13394 31085 4096 4096 NT_STATUS_OK
ReadX 13394 35181 4096 4096 NT_STATUS_OK
ReadX 13394 39277 4096 4096 NT_STATUS_OK
ReadX 13394 43373 4096 4096 NT_STATUS_OK
ReadX 13394 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13394 2157 1024 1024 NT_STATUS_OK
ReadX 13394 1667 4688 4688 NT_STATUS_OK
ReadX 13394 6355 3516 3516 NT_STATUS_OK
ReadX 13394 9871 16384 16384 NT_STATUS_OK
ReadX 13394 26255 3771 3771 NT_STATUS_OK
ReadX 13394 30026 2048 2048 NT_STATUS_OK
ReadX 13394 32074 1024 1024 NT_STATUS_OK
ReadX 13394 33098 6652 6652 NT_STATUS_OK
ReadX 13394 39750 16384 16384 NT_STATUS_OK
ReadX 13394 56134 10496 10496 NT_STATUS_OK
ReadX 13394 66630 1784 1784 NT_STATUS_OK
ReadX 13394 68414 90 90 NT_STATUS_OK
ReadX 13394 68504 273 273 NT_STATUS_OK
ReadX 13394 68777 1600 1600 NT_STATUS_OK
ReadX 13394 70377 640 640 NT_STATUS_OK
ReadX 13394 71017 1280 1280 NT_STATUS_OK
ReadX 13394 72297 8464 8464 NT_STATUS_OK
ReadX 13394 80761 158 158 NT_STATUS_OK
ReadX 13394 80919 912 912 NT_STATUS_OK
ReadX 13394 81831 1980 1980 NT_STATUS_OK
ReadX 13394 83811 2256 2256 NT_STATUS_OK
ReadX 13394 86067 400 400 NT_STATUS_OK
ReadX 13394 86467 252 252 NT_STATUS_OK
ReadX 13394 86719 42 42 NT_STATUS_OK
ReadX 13394 86761 725 725 NT_STATUS_OK
ReadX 13394 2009 512 512 NT_STATUS_OK
ReadX 13394 3895 9 9 NT_STATUS_OK
ReadX 13394 3781 46 46 NT_STATUS_OK
ReadX 13394 4059 92 92 NT_STATUS_OK
ReadX 13394 3781 92 92 NT_STATUS_OK
ReadX 13394 3986 184 184 NT_STATUS_OK
ReadX 13394 3987 16384 16384 NT_STATUS_OK
ReadX 13394 3902 16384 16384 NT_STATUS_OK
ReadX 13394 3781 10240 10240 NT_STATUS_OK
ReadX 13394 3821 16384 16384 NT_STATUS_OK
ReadX 13394 3891 935 935 NT_STATUS_OK
ReadX 13394 4060 10240 10240 NT_STATUS_OK
ReadX 13394 4059 184 184 NT_STATUS_OK
ReadX 13394 256 184 184 NT_STATUS_OK
ReadX 13394 256 1026 1026 NT_STATUS_OK
ReadX 13394 3901 326 326 NT_STATUS_OK
ReadX 13394 3899 652 652 NT_STATUS_OK
ReadX 13394 256 2 2 NT_STATUS_OK
ReadX 13394 258 4948 4948 NT_STATUS_OK
Close 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13412 NT_STATUS_OK
WriteX 13412 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13412 258 NT_STATUS_OK
WriteX 13412 0 65536 65536 NT_STATUS_OK
WriteX 13412 65536 65536 65536 NT_STATUS_OK
WriteX 13412 131072 65536 65536 NT_STATUS_OK
WriteX 13412 196608 65536 65536 NT_STATUS_OK
WriteX 13412 262144 65536 65536 NT_STATUS_OK
WriteX 13412 327680 65536 65536 NT_STATUS_OK
WriteX 13412 393216 65536 65536 NT_STATUS_OK
WriteX 13412 458752 65536 65536 NT_STATUS_OK
WriteX 13412 524288 65536 65536 NT_STATUS_OK
WriteX 13412 589824 35257 35257 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13417 NT_STATUS_OK
WriteX 13417 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13417 258 NT_STATUS_OK
WriteX 13417 0 65536 65536 NT_STATUS_OK
WriteX 13417 65536 65536 65536 NT_STATUS_OK
WriteX 13417 131072 65536 65536 NT_STATUS_OK
WriteX 13417 196608 65536 65536 NT_STATUS_OK
WriteX 13417 262144 65536 65536 NT_STATUS_OK
WriteX 13417 327680 65536 65536 NT_STATUS_OK
WriteX 13417 393216 65536 65536 NT_STATUS_OK
WriteX 13417 458752 65536 65536 NT_STATUS_OK
WriteX 13417 524288 65536 65536 NT_STATUS_OK
WriteX 13417 589824 57598 57598 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13419 NT_STATUS_OK
WriteX 13419 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13419 258 NT_STATUS_OK
WriteX 13419 0 12543 12543 NT_STATUS_OK
Flush 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13425 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
ReadX 13425 1938 24 24 NT_STATUS_OK
ReadX 13425 1920 276 276 NT_STATUS_OK
ReadX 13425 1918 14 14 NT_STATUS_OK
ReadX 13425 1918 7 7 NT_STATUS_OK
ReadX 13425 1919 12 12 NT_STATUS_OK
ReadX 13425 1919 8 8 NT_STATUS_OK
ReadX 13425 1917 15 15 NT_STATUS_OK
ReadX 13425 0 16 16 NT_STATUS_OK
ReadX 13425 16 2048 2048 NT_STATUS_OK
ReadX 13425 2064 2048 2048 NT_STATUS_OK
ReadX 13425 257 2048 2048 NT_STATUS_OK
ReadX 13425 385 2048 2048 NT_STATUS_OK
ReadX 13425 513 2048 2048 NT_STATUS_OK
ReadX 13425 641 2048 2048 NT_STATUS_OK
ReadX 13425 769 2048 2048 NT_STATUS_OK
ReadX 13425 897 2048 2048 NT_STATUS_OK
ReadX 13425 1025 2048 2048 NT_STATUS_OK
ReadX 13425 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 11588 11588 NT_STATUS_OK
Flush 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13433 NT_STATUS_OK
ReadX 13433 0 4096 4096 NT_STATUS_OK
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13435 NT_STATUS_OK
WriteX 13435 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 11615 11615 NT_STATUS_OK
Flush 13435 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13441 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13444 NT_STATUS_OK
WriteX 13444 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13444 258 NT_STATUS_OK
WriteX 13444 0 65536 65536 NT_STATUS_OK
WriteX 13444 65536 16050 16050 NT_STATUS_OK
Close 13444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13424 1939 64 64 NT_STATUS_OK
ReadX 13424 128 248 248 NT_STATUS_OK
ReadX 13424 128 568 568 NT_STATUS_OK
ReadX 13424 3872 1536 1536 NT_STATUS_OK
ReadX 13424 3456 2560 2560 NT_STATUS_OK
ReadX 13424 3136 512 512 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
ReadX 13424 3264 3072 3072 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 3616 4096 4096 NT_STATUS_OK
ReadX 13424 1939 64 64 NT_STATUS_OK
ReadX 13424 128 248 248 NT_STATUS_OK
ReadX 13424 128 608 608 NT_STATUS_OK
ReadX 13424 2858 1024 1024 NT_STATUS_OK
ReadX 13424 2810 4096 4096 NT_STATUS_OK
ReadX 13424 2826 4096 4096 NT_STATUS_OK
ReadX 13424 2580 2048 2048 NT_STATUS_OK
ReadX 13424 2800 2560 2560 NT_STATUS_OK
ReadX 13424 2100 4096 4096 NT_STATUS_OK
ReadX 13424 2084 4096 4096 NT_STATUS_OK
ReadX 13424 868 4096 4096 NT_STATUS_OK
ReadX 13424 2324 4096 4096 NT_STATUS_OK
ReadX 13424 884 4096 4096 NT_STATUS_OK
ReadX 13424 2604 1024 1024 NT_STATUS_OK
ReadX 13424 580 4096 4096 NT_STATUS_OK
ReadX 13424 596 4096 4096 NT_STATUS_OK
ReadX 13424 2752 4096 4096 NT_STATUS_OK
ReadX 13424 2842 1024 1024 NT_STATUS_OK
ReadX 13424 660 4096 4096 NT_STATUS_OK
ReadX 13424 2720 4096 4096 NT_STATUS_OK
ReadX 13424 2736 4096 4096 NT_STATUS_OK
ReadX 13424 628 4096 4096 NT_STATUS_OK
ReadX 13424 2704 4096 4096 NT_STATUS_OK
ReadX 13424 1556 4096 4096 NT_STATUS_OK
ReadX 13424 576 4096 4096 NT_STATUS_OK
ReadX 13424 3168 1536 1536 NT_STATUS_OK
ReadX 13424 832 4096 4096 NT_STATUS_OK
ReadX 13424 1088 4096 4096 NT_STATUS_OK
ReadX 13424 1344 4096 4096 NT_STATUS_OK
ReadX 13424 1600 4096 4096 NT_STATUS_OK
ReadX 13424 1856 4096 4096 NT_STATUS_OK
ReadX 13424 2112 4096 4096 NT_STATUS_OK
ReadX 13424 1892 4096 4096 NT_STATUS_OK
ReadX 13424 820 4096 4096 NT_STATUS_OK
ReadX 13424 788 4096 4096 NT_STATUS_OK
ReadX 13424 1604 4096 4096 NT_STATUS_OK
ReadX 13424 3648 4096 4096 NT_STATUS_OK
ReadX 13424 2608 4096 4096 NT_STATUS_OK
ReadX 13424 548 4096 4096 NT_STATUS_OK
ReadX 13424 740 4096 4096 NT_STATUS_OK
ReadX 13424 1344 4096 4096 NT_STATUS_OK
ReadX 13424 3392 4096 4096 NT_STATUS_OK
ReadX 13424 3904 4096 4096 NT_STATUS_OK
ReadX 13424 644 4096 4096 NT_STATUS_OK
ReadX 13424 676 4096 4096 NT_STATUS_OK
ReadX 13424 2688 4096 4096 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 900 4096 4096 NT_STATUS_OK
ReadX 13424 1908 4096 4096 NT_STATUS_OK
ReadX 13424 852 4096 4096 NT_STATUS_OK
ReadX 13424 724 4096 4096 NT_STATUS_OK
ReadX 13424 2292 4096 4096 NT_STATUS_OK
ReadX 13424 612 4096 4096 NT_STATUS_OK
ReadX 13424 388 4096 4096 NT_STATUS_OK
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 500 4096 4096 NT_STATUS_OK
ReadX 13424 356 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 576 4096 4096 NT_STATUS_OK
ReadX 13424 340 4096 4096 NT_STATUS_OK
ReadX 13424 420 4096 4096 NT_STATUS_OK
ReadX 13424 1600 4096 4096 NT_STATUS_OK
ReadX 13424 404 4096 4096 NT_STATUS_OK
ReadX 13424 1428 4096 4096 NT_STATUS_OK
ReadX 13424 2656 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 452 4096 4096 NT_STATUS_OK
ReadX 13424 692 4096 4096 NT_STATUS_OK
ReadX 13424 564 4096 4096 NT_STATUS_OK
ReadX 13424 372 4096 4096 NT_STATUS_OK
ReadX 13424 468 4096 4096 NT_STATUS_OK
ReadX 13424 484 4096 4096 NT_STATUS_OK
ReadX 13424 1088 4096 4096 NT_STATUS_OK
ReadX 13424 1924 4096 4096 NT_STATUS_OK
ReadX 13424 2768 4096 4096 NT_STATUS_OK
ReadX 13424 832 4096 4096 NT_STATUS_OK
ReadX 13424 836 4096 4096 NT_STATUS_OK
ReadX 13424 1856 4096 4096 NT_STATUS_OK
ReadX 13424 2640 4096 4096 NT_STATUS_OK
ReadX 13424 436 4096 4096 NT_STATUS_OK
ReadX 13424 1828 4096 4096 NT_STATUS_OK
ReadX 13424 804 4096 4096 NT_STATUS_OK
ReadX 13424 1860 4096 4096 NT_STATUS_OK
ReadX 13424 1812 4096 4096 NT_STATUS_OK
ReadX 13424 756 4096 4096 NT_STATUS_OK
ReadX 13424 1636 4096 4096 NT_STATUS_OK
ReadX 13424 772 4096 4096 NT_STATUS_OK
ReadX 13424 2036 4096 4096 NT_STATUS_OK
ReadX 13424 1220 4096 4096 NT_STATUS_OK
ReadX 13424 1652 4096 4096 NT_STATUS_OK
ReadX 13424 2588 4096 4096 NT_STATUS_OK
ReadX 13424 916 4096 4096 NT_STATUS_OK
ReadX 13424 260 4096 4096 NT_STATUS_OK
ReadX 13424 932 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 308 4096 4096 NT_STATUS_OK
ReadX 13424 292 4096 4096 NT_STATUS_OK
ReadX 13424 1140 4096 4096 NT_STATUS_OK
ReadX 13424 276 4096 4096 NT_STATUS_OK
ReadX 13424 2020 4096 4096 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
ReadX 13424 516 4096 4096 NT_STATUS_OK
ReadX 13424 1844 4096 4096 NT_STATUS_OK
ReadX 13424 1124 4096 4096 NT_STATUS_OK
ReadX 13424 3136 4096 4096 NT_STATUS_OK
ReadX 13424 324 4096 4096 NT_STATUS_OK
ReadX 13424 1156 4096 4096 NT_STATUS_OK
ReadX 13424 1172 4096 4096 NT_STATUS_OK
ReadX 13424 2112 4096 4096 NT_STATUS_OK
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 964 4096 4096 NT_STATUS_OK
ReadX 13424 980 4096 4096 NT_STATUS_OK
ReadX 13424 1012 4096 4096 NT_STATUS_OK
ReadX 13424 532 4096 4096 NT_STATUS_OK
ReadX 13424 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13424 1620 4096 4096 NT_STATUS_OK
ReadX 13424 1604 4096 4096 NT_STATUS_OK
ReadX 13424 2116 4096 4096 NT_STATUS_OK
ReadX 13424 2132 4096 4096 NT_STATUS_OK
ReadX 13424 2148 4096 4096 NT_STATUS_OK
ReadX 13424 2276 4096 4096 NT_STATUS_OK
ReadX 13424 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13449 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
Close 13404 NT_STATUS_OK
WriteX 13449 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13449 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
WriteX 13449 0 65536 65536 NT_STATUS_OK
WriteX 13449 65536 64850 64850 NT_STATUS_OK
Close 13449 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13451 NT_STATUS_OK
WriteX 13451 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 258 NT_STATUS_OK
ReadX 13424 2068 4096 4096 NT_STATUS_OK
ReadX 13424 1588 4096 4096 NT_STATUS_OK
ReadX 13424 1572 4096 4096 NT_STATUS_OK
WriteX 13451 0 18630 18630 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13453 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13424 612 4096 4096 NT_STATUS_OK
ReadX 13424 564 4096 4096 NT_STATUS_OK
ReadX 13424 1876 4096 4096 NT_STATUS_OK
ReadX 13424 628 4096 4096 NT_STATUS_OK
ReadX 13424 740 4096 4096 NT_STATUS_OK
ReadX 13424 724 4096 4096 NT_STATUS_OK
ReadX 13424 644 4096 4096 NT_STATUS_OK
ReadX 13424 2324 4096 4096 NT_STATUS_OK
ReadX 13424 660 4096 4096 NT_STATUS_OK
ReadX 13424 852 4096 4096 NT_STATUS_OK
ReadX 13424 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 580 4096 4096 NT_STATUS_OK
ReadX 13424 3136 512 512 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
Close 13424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 61440 4096 4096 NT_STATUS_OK
ReadX 13456 126976 4096 4096 NT_STATUS_OK
WriteX 13456 0 65536 65536 NT_STATUS_OK
WriteX 13456 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 61440 4096 4096 NT_STATUS_OK
ReadX 13457 126976 4096 4096 NT_STATUS_OK
ReadX 13457 192512 4096 4096 NT_STATUS_OK
ReadX 13457 258048 4096 4096 NT_STATUS_OK
WriteX 13457 0 65536 65536 NT_STATUS_OK
WriteX 13457 65536 65536 65536 NT_STATUS_OK
WriteX 13457 131072 65536 65536 NT_STATUS_OK
WriteX 13457 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 61440 4096 4096 NT_STATUS_OK
ReadX 13458 126976 4096 4096 NT_STATUS_OK
ReadX 13458 192512 4096 4096 NT_STATUS_OK
ReadX 13458 258048 4096 4096 NT_STATUS_OK
ReadX 13458 323584 4096 4096 NT_STATUS_OK
ReadX 13458 389120 4096 4096 NT_STATUS_OK
ReadX 13458 454656 4096 4096 NT_STATUS_OK
ReadX 13458 520192 4096 4096 NT_STATUS_OK
WriteX 13458 0 65536 65536 NT_STATUS_OK
WriteX 13458 65536 65536 65536 NT_STATUS_OK
WriteX 13458 131072 65536 65536 NT_STATUS_OK
WriteX 13458 196608 65536 65536 NT_STATUS_OK
WriteX 13458 262144 65536 65536 NT_STATUS_OK
WriteX 13458 327680 65536 65536 NT_STATUS_OK
WriteX 13458 393216 65536 65536 NT_STATUS_OK
WriteX 13458 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13461 NT_STATUS_OK
WriteX 13461 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13459 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13463 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13466 NT_STATUS_OK
WriteX 13466 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13466 258 NT_STATUS_OK
WriteX 13466 0 62591 62591 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13471 NT_STATUS_OK
WriteX 13471 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13471 258 NT_STATUS_OK
WriteX 13471 0 10845 10845 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13473 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13476 NT_STATUS_OK
WriteX 13476 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 258 NT_STATUS_OK
WriteX 13476 0 30118 30118 NT_STATUS_OK
Close 13476 NT_STATUS_OK
WriteX 13459 0 4096 4096 NT_STATUS_OK
WriteX 13461 0 64 64 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 61440 61440 NT_STATUS_OK
ReadX 13478 61440 4096 4096 NT_STATUS_OK
ReadX 13478 65536 61440 61440 NT_STATUS_OK
ReadX 13478 126976 4096 4096 NT_STATUS_OK
ReadX 13478 131072 61440 61440 NT_STATUS_OK
ReadX 13478 192512 4096 4096 NT_STATUS_OK
ReadX 13478 196608 61440 61440 NT_STATUS_OK
ReadX 13478 258048 4096 4096 NT_STATUS_OK
ReadX 13478 262144 61440 61440 NT_STATUS_OK
ReadX 13478 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 61440 61440 NT_STATUS_OK
ReadX 13479 61440 4096 4096 NT_STATUS_OK
ReadX 13479 65536 61440 61440 NT_STATUS_OK
ReadX 13479 126976 4096 4096 NT_STATUS_OK
ReadX 13479 131072 61440 61440 NT_STATUS_OK
ReadX 13479 192512 4096 4096 NT_STATUS_OK
ReadX 13479 196608 61440 61440 NT_STATUS_OK
ReadX 13479 258048 4096 4096 NT_STATUS_OK
ReadX 13479 262144 61440 61440 NT_STATUS_OK
ReadX 13479 323584 4096 4096 NT_STATUS_OK
ReadX 13479 327680 61440 61440 NT_STATUS_OK
ReadX 13479 389120 4096 4096 NT_STATUS_OK
ReadX 13479 393216 61440 61440 NT_STATUS_OK
ReadX 13479 454656 4096 4096 NT_STATUS_OK
ReadX 13479 458752 61440 61440 NT_STATUS_OK
ReadX 13479 520192 4096 4096 NT_STATUS_OK
ReadX 13479 524288 61440 61440 NT_STATUS_OK
ReadX 13479 585728 4096 4096 NT_STATUS_OK
ReadX 13479 589824 61440 61440 NT_STATUS_OK
ReadX 13479 651264 4096 4096 NT_STATUS_OK
ReadX 13479 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 61440 61440 NT_STATUS_OK
ReadX 13480 61440 4096 4096 NT_STATUS_OK
ReadX 13480 65536 61440 61440 NT_STATUS_OK
ReadX 13480 126976 4096 4096 NT_STATUS_OK
ReadX 13480 131072 61440 61440 NT_STATUS_OK
ReadX 13480 192512 4096 4096 NT_STATUS_OK
ReadX 13480 196608 61440 61440 NT_STATUS_OK
ReadX 13480 258048 4096 4096 NT_STATUS_OK
ReadX 13480 262144 61440 61440 NT_STATUS_OK
ReadX 13480 323584 4096 4096 NT_STATUS_OK
ReadX 13480 327680 61440 61440 NT_STATUS_OK
ReadX 13480 389120 4096 4096 NT_STATUS_OK
ReadX 13480 393216 61440 61440 NT_STATUS_OK
ReadX 13480 454656 4096 4096 NT_STATUS_OK
ReadX 13480 458752 61440 61440 NT_STATUS_OK
ReadX 13480 520192 4096 4096 NT_STATUS_OK
ReadX 13480 524288 61440 61440 NT_STATUS_OK
ReadX 13480 585728 4096 4096 NT_STATUS_OK
ReadX 13480 589824 61440 61440 NT_STATUS_OK
ReadX 13480 651264 4096 4096 NT_STATUS_OK
ReadX 13480 655360 61440 61440 NT_STATUS_OK
ReadX 13480 716800 4096 4096 NT_STATUS_OK
ReadX 13480 720896 61440 61440 NT_STATUS_OK
ReadX 13480 782336 4096 4096 NT_STATUS_OK
ReadX 13480 786432 61440 61440 NT_STATUS_OK
ReadX 13480 847872 4096 4096 NT_STATUS_OK
ReadX 13480 851968 61440 61440 NT_STATUS_OK
ReadX 13480 913408 4096 4096 NT_STATUS_OK
ReadX 13480 917504 61440 61440 NT_STATUS_OK
ReadX 13480 978944 4096 4096 NT_STATUS_OK
ReadX 13480 983040 61440 61440 NT_STATUS_OK
ReadX 13480 1044480 4096 4096 NT_STATUS_OK
ReadX 13480 1048576 61440 61440 NT_STATUS_OK
ReadX 13480 1110016 4096 4096 NT_STATUS_OK
ReadX 13480 1114112 61440 61440 NT_STATUS_OK
ReadX 13480 1175552 4096 4096 NT_STATUS_OK
ReadX 13480 1179648 61440 61440 NT_STATUS_OK
ReadX 13480 1241088 4096 4096 NT_STATUS_OK
ReadX 13480 1245184 61440 61440 NT_STATUS_OK
ReadX 13480 1306624 4096 4096 NT_STATUS_OK
ReadX 13480 1310720 61440 61440 NT_STATUS_OK
ReadX 13480 1372160 4096 4096 NT_STATUS_OK
ReadX 13480 1376256 61440 61440 NT_STATUS_OK
ReadX 13480 1437696 4096 4096 NT_STATUS_OK
ReadX 13480 1441792 61440 61440 NT_STATUS_OK
ReadX 13480 1503232 4096 4096 NT_STATUS_OK
ReadX 13480 1507328 61440 61440 NT_STATUS_OK
ReadX 13480 1568768 4096 4096 NT_STATUS_OK
ReadX 13480 1572864 61440 61440 NT_STATUS_OK
ReadX 13480 1634304 4096 4096 NT_STATUS_OK
ReadX 13480 1638400 61440 61440 NT_STATUS_OK
ReadX 13480 1699840 4096 4096 NT_STATUS_OK
ReadX 13480 1703936 61440 61440 NT_STATUS_OK
ReadX 13480 1765376 4096 4096 NT_STATUS_OK
ReadX 13480 1769472 61440 61440 NT_STATUS_OK
ReadX 13480 1830912 4096 4096 NT_STATUS_OK
ReadX 13480 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
ReadX 13485 4096 4096 4096 NT_STATUS_OK
ReadX 13485 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13489 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 8192 8192 NT_STATUS_OK
ReadX 13493 8192 8192 8192 NT_STATUS_OK
ReadX 13493 16384 8192 8192 NT_STATUS_OK
ReadX 13493 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13498 NT_STATUS_OK
WriteX 13498 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13498 258 NT_STATUS_OK
WriteX 13498 0 10438 10438 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13502 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13503 NT_STATUS_OK
Close 13503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13504 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13506 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
ReadX 13507 4096 4096 4096 NT_STATUS_OK
ReadX 13507 8192 4096 4096 NT_STATUS_OK
ReadX 13507 12288 8192 8192 NT_STATUS_OK
ReadX 13507 20480 8192 8192 NT_STATUS_OK
ReadX 13507 28672 8192 8192 NT_STATUS_OK
ReadX 13507 36864 8192 8192 NT_STATUS_OK
ReadX 13507 45056 8192 8192 NT_STATUS_OK
ReadX 13507 53248 8192 8192 NT_STATUS_OK
ReadX 13507 61440 8192 8192 NT_STATUS_OK
ReadX 13507 69632 8192 8192 NT_STATUS_OK
ReadX 13507 77824 8192 8192 NT_STATUS_OK
ReadX 13507 86016 8192 8192 NT_STATUS_OK
ReadX 13507 94208 8192 8192 NT_STATUS_OK
ReadX 13507 102400 8192 8192 NT_STATUS_OK
ReadX 13507 110592 8192 8192 NT_STATUS_OK
ReadX 13507 118784 8192 8192 NT_STATUS_OK
ReadX 13507 126976 8192 8192 NT_STATUS_OK
ReadX 13507 135168 8192 8192 NT_STATUS_OK
ReadX 13507 143360 8192 8192 NT_STATUS_OK
ReadX 13507 151552 8192 8192 NT_STATUS_OK
ReadX 13507 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13507 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13512 NT_STATUS_OK
WriteX 13512 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13512 258 NT_STATUS_OK
WriteX 13512 0 28489 28489 NT_STATUS_OK
Close 13512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13515 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13516 NT_STATUS_OK
Close 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 8192 8192 NT_STATUS_OK
ReadX 13519 8192 8192 8192 NT_STATUS_OK
ReadX 13519 16384 8192 8192 NT_STATUS_OK
ReadX 13519 24576 8192 8192 NT_STATUS_OK
ReadX 13519 32768 16384 16384 NT_STATUS_OK
ReadX 13519 49152 8192 8192 NT_STATUS_OK
ReadX 13519 57344 8192 8192 NT_STATUS_OK
ReadX 13519 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13521 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13524 NT_STATUS_OK
WriteX 13524 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13524 258 NT_STATUS_OK
WriteX 13524 0 29253 29253 NT_STATUS_OK
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13531 NT_STATUS_OK
WriteX 13531 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 258 NT_STATUS_OK
WriteX 13531 0 30183 30183 NT_STATUS_OK
Close 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13532 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13534 NT_STATUS_OK
WriteX 13534 0 510 510 NT_STATUS_OK
WriteX 13534 510 512 512 NT_STATUS_OK
WriteX 13534 1022 510 510 NT_STATUS_OK
WriteX 13534 1532 510 510 NT_STATUS_OK
WriteX 13534 2042 168 168 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13538 NT_STATUS_OK
ReadX 13538 61440 4096 4096 NT_STATUS_OK
ReadX 13538 126976 4096 4096 NT_STATUS_OK
WriteX 13538 0 65536 65536 NT_STATUS_OK
WriteX 13538 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13539 NT_STATUS_OK
ReadX 13539 61440 4096 4096 NT_STATUS_OK
ReadX 13539 126976 4096 4096 NT_STATUS_OK
ReadX 13539 192512 4096 4096 NT_STATUS_OK
ReadX 13539 258048 4096 4096 NT_STATUS_OK
WriteX 13539 0 65536 65536 NT_STATUS_OK
WriteX 13539 65536 65536 65536 NT_STATUS_OK
WriteX 13539 131072 65536 65536 NT_STATUS_OK
WriteX 13539 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 61440 4096 4096 NT_STATUS_OK
ReadX 13540 126976 4096 4096 NT_STATUS_OK
ReadX 13540 192512 4096 4096 NT_STATUS_OK
ReadX 13540 258048 4096 4096 NT_STATUS_OK
ReadX 13540 323584 4096 4096 NT_STATUS_OK
ReadX 13540 389120 4096 4096 NT_STATUS_OK
ReadX 13540 454656 4096 4096 NT_STATUS_OK
ReadX 13540 520192 4096 4096 NT_STATUS_OK
WriteX 13540 0 65536 65536 NT_STATUS_OK
WriteX 13540 65536 65536 65536 NT_STATUS_OK
WriteX 13540 131072 65536 65536 NT_STATUS_OK
WriteX 13540 196608 65536 65536 NT_STATUS_OK
WriteX 13540 262144 65536 65536 NT_STATUS_OK
WriteX 13540 327680 65536 65536 NT_STATUS_OK
WriteX 13540 393216 65536 65536 NT_STATUS_OK
WriteX 13540 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13538 NT_STATUS_OK
Close 13539 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13547 NT_STATUS_OK
Close 13547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13580 NT_STATUS_OK
Close 13580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13585 NT_STATUS_OK
Close 13585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13595 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13609 0 65536 65536 NT_STATUS_OK
WriteX 13609 65536 65536 65536 NT_STATUS_OK
WriteX 13609 131072 65536 65536 NT_STATUS_OK
WriteX 13609 196608 65536 65536 NT_STATUS_OK
WriteX 13609 262144 26634 26634 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
ReadX 13617 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13655 NT_STATUS_OK
Close 13655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13665 NT_STATUS_OK
Close 13665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 4096 4096 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 4096 4096 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13711 NT_STATUS_OK
ReadX 13711 0 4096 4096 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13741 0 4096 4096 NT_STATUS_OK
Close 13741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
ReadX 13743 4096 4096 4096 NT_STATUS_OK
ReadX 13743 8192 4096 4096 NT_STATUS_OK
ReadX 13743 12288 4096 4096 NT_STATUS_OK
ReadX 13743 16384 4096 4096 NT_STATUS_OK
ReadX 13743 20480 4096 4096 NT_STATUS_OK
ReadX 13743 24576 4096 4096 NT_STATUS_OK
ReadX 13743 28672 4096 4096 NT_STATUS_OK
ReadX 13743 32768 4096 4096 NT_STATUS_OK
ReadX 13743 36864 4096 4096 NT_STATUS_OK
ReadX 13743 40960 4096 4096 NT_STATUS_OK
ReadX 13743 45056 4096 4096 NT_STATUS_OK
ReadX 13743 49152 4096 4096 NT_STATUS_OK
ReadX 13743 53248 4096 4096 NT_STATUS_OK
ReadX 13743 57344 4096 4096 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 65536 4096 4096 NT_STATUS_OK
ReadX 13743 69632 4096 4096 NT_STATUS_OK
ReadX 13743 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13743 1004 NT_STATUS_OK
WriteX 13743 0 4096 4096 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13744 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13749 NT_STATUS_OK
WriteX 13749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13749 258 NT_STATUS_OK
WriteX 13749 0 65536 65536 NT_STATUS_OK
WriteX 13749 65536 19979 19979 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
QUERY_FILE_INFORMATION 13750 1004 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
SET_FILE_INFORMATION 13750 1004 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13755 1004 NT_STATUS_OK
WriteX 13755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 65536 65536 NT_STATUS_OK
WriteX 13761 65536 17654 17654 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
SET_FILE_INFORMATION 13763 1004 NT_STATUS_OK
Close 13763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
ReadX 13767 4096 4096 4096 NT_STATUS_OK
ReadX 13767 8192 4096 4096 NT_STATUS_OK
ReadX 13767 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13767 16384 4096 4096 NT_STATUS_OK
ReadX 13767 20480 4096 4096 NT_STATUS_OK
ReadX 13767 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13768 NT_STATUS_OK
ReadX 13768 0 4096 4096 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13776 NT_STATUS_OK
WriteX 13776 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 258 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 19490 19490 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
SET_FILE_INFORMATION 13778 1004 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13782 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13782 0 4096 4096 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13783 NT_STATUS_OK
ReadX 13783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13784 NT_STATUS_OK
ReadX 13784 0 4096 4096 NT_STATUS_OK
ReadX 13784 4096 4096 4096 NT_STATUS_OK
ReadX 13784 8192 4096 4096 NT_STATUS_OK
ReadX 13784 12288 4096 4096 NT_STATUS_OK
ReadX 13784 16384 4096 4096 NT_STATUS_OK
ReadX 13784 20480 4096 4096 NT_STATUS_OK
ReadX 13784 24576 4096 4096 NT_STATUS_OK
ReadX 13784 28672 4096 4096 NT_STATUS_OK
ReadX 13784 32768 4096 4096 NT_STATUS_OK
ReadX 13784 36864 4096 4096 NT_STATUS_OK
ReadX 13784 40960 4096 4096 NT_STATUS_OK
ReadX 13784 45056 4096 4096 NT_STATUS_OK
ReadX 13784 49152 4096 4096 NT_STATUS_OK
ReadX 13784 53248 4096 4096 NT_STATUS_OK
ReadX 13784 57344 4096 4096 NT_STATUS_OK
ReadX 13784 61440 4096 4096 NT_STATUS_OK
ReadX 13784 65536 4096 4096 NT_STATUS_OK
ReadX 13784 69632 4096 4096 NT_STATUS_OK
ReadX 13784 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13784 1004 NT_STATUS_OK
WriteX 13784 0 4096 4096 NT_STATUS_OK
Close 13784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13785 NT_STATUS_OK
SET_FILE_INFORMATION 13785 1004 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13787 NT_STATUS_OK
Close 13787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
WriteX 13790 0 65536 65536 NT_STATUS_OK
WriteX 13790 65536 8866 8866 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Flush 13791 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Flush 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
WriteX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13801 NT_STATUS_OK
WriteX 13801 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13801 258 NT_STATUS_OK
WriteX 13801 0 65536 65536 NT_STATUS_OK
WriteX 13801 65536 9298 9298 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
Flush 13802 NT_STATUS_OK
SET_FILE_INFORMATION 13802 1004 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
Flush 13802 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
SET_FILE_INFORMATION 13803 1004 NT_STATUS_OK
Close 13803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13808 0 4096 4096 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13809 4096 4096 4096 NT_STATUS_OK
ReadX 13809 8192 4096 4096 NT_STATUS_OK
ReadX 13809 12288 4096 4096 NT_STATUS_OK
ReadX 13809 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13812 1004 NT_STATUS_OK
WriteX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13815 NT_STATUS_OK
Close 13815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13818 NT_STATUS_OK
WriteX 13818 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 258 NT_STATUS_OK
WriteX 13818 0 65536 65536 NT_STATUS_OK
WriteX 13818 65536 11540 11540 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
SET_FILE_INFORMATION 13819 1004 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13824 NT_STATUS_OK
ReadX 13824 61440 4096 4096 NT_STATUS_OK
ReadX 13824 126976 4096 4096 NT_STATUS_OK
WriteX 13824 0 65536 65536 NT_STATUS_OK
WriteX 13824 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 61440 4096 4096 NT_STATUS_OK
ReadX 13825 126976 4096 4096 NT_STATUS_OK
ReadX 13825 192512 4096 4096 NT_STATUS_OK
ReadX 13825 258048 4096 4096 NT_STATUS_OK
WriteX 13825 0 65536 65536 NT_STATUS_OK
WriteX 13825 65536 65536 65536 NT_STATUS_OK
WriteX 13825 131072 65536 65536 NT_STATUS_OK
WriteX 13825 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 61440 4096 4096 NT_STATUS_OK
ReadX 13826 126976 4096 4096 NT_STATUS_OK
ReadX 13826 192512 4096 4096 NT_STATUS_OK
ReadX 13826 258048 4096 4096 NT_STATUS_OK
ReadX 13826 323584 4096 4096 NT_STATUS_OK
ReadX 13826 389120 4096 4096 NT_STATUS_OK
ReadX 13826 454656 4096 4096 NT_STATUS_OK
ReadX 13826 520192 4096 4096 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
WriteX 13826 131072 65536 65536 NT_STATUS_OK
WriteX 13826 196608 65536 65536 NT_STATUS_OK
WriteX 13826 262144 65536 65536 NT_STATUS_OK
WriteX 13826 327680 65536 65536 NT_STATUS_OK
WriteX 13826 393216 65536 65536 NT_STATUS_OK
WriteX 13826 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
ReadX 13827 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 53 53 NT_STATUS_OK
Close 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13829 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13827 8192 4096 4096 NT_STATUS_OK
ReadX 13827 12288 4096 4096 NT_STATUS_OK
WriteX 13831 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13831 258 NT_STATUS_OK
ReadX 13827 16384 4096 4096 NT_STATUS_OK
ReadX 13827 20480 4096 4096 NT_STATUS_OK
WriteX 13831 0 15360 15360 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
WriteX 13832 0 4096 4096 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13835 4096 4096 4096 NT_STATUS_OK
ReadX 13835 8192 4096 4096 NT_STATUS_OK
ReadX 13835 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
ReadX 13838 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
ReadX 13839 4096 4096 4096 NT_STATUS_OK
ReadX 13839 8192 4096 4096 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13840 NT_STATUS_OK
WriteX 13840 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
WriteX 13840 0 15360 15360 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13845 NT_STATUS_OK
SET_FILE_INFORMATION 13845 1004 NT_STATUS_OK
Close 13845 NT_STATUS_OK
WriteX 13841 0 4096 4096 NT_STATUS_OK
Close 13841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
ReadX 13848 4096 4096 4096 NT_STATUS_OK
ReadX 13848 8192 4096 4096 NT_STATUS_OK
ReadX 13848 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13850 NT_STATUS_OK
WriteX 13850 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13850 258 NT_STATUS_OK
WriteX 13850 0 53 53 NT_STATUS_OK
Close 13850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13849 4096 4096 4096 NT_STATUS_OK
ReadX 13849 8192 4096 4096 NT_STATUS_OK
ReadX 13849 12288 4096 4096 NT_STATUS_OK
WriteX 13853 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 12006 12006 NT_STATUS_OK
Close 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
WriteX 13854 0 4096 4096 NT_STATUS_OK
Close 13854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 11991 11991 NT_STATUS_OK
Close 13860 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13865 NT_STATUS_OK
SET_FILE_INFORMATION 13865 1004 NT_STATUS_OK
Close 13865 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13868 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
ReadX 13868 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
WriteX 13868 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
Close 13844 NT_STATUS_OK
WriteX 13848 0 19054 19054 NT_STATUS_OK
WriteX 13868 0 12288 12288 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 61440 61440 NT_STATUS_OK
ReadX 13875 61440 4096 4096 NT_STATUS_OK
ReadX 13875 65536 61440 61440 NT_STATUS_OK
ReadX 13875 126976 4096 4096 NT_STATUS_OK
ReadX 13875 131072 61440 61440 NT_STATUS_OK
ReadX 13875 192512 4096 4096 NT_STATUS_OK
ReadX 13875 196608 61440 61440 NT_STATUS_OK
ReadX 13875 258048 4096 4096 NT_STATUS_OK
ReadX 13875 262144 61440 61440 NT_STATUS_OK
ReadX 13875 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 61440 61440 NT_STATUS_OK
ReadX 13876 61440 4096 4096 NT_STATUS_OK
ReadX 13876 65536 61440 61440 NT_STATUS_OK
ReadX 13876 126976 4096 4096 NT_STATUS_OK
ReadX 13876 131072 61440 61440 NT_STATUS_OK
ReadX 13876 192512 4096 4096 NT_STATUS_OK
ReadX 13876 196608 61440 61440 NT_STATUS_OK
ReadX 13876 258048 4096 4096 NT_STATUS_OK
ReadX 13876 262144 61440 61440 NT_STATUS_OK
ReadX 13876 323584 4096 4096 NT_STATUS_OK
ReadX 13876 327680 61440 61440 NT_STATUS_OK
ReadX 13876 389120 4096 4096 NT_STATUS_OK
ReadX 13876 393216 61440 61440 NT_STATUS_OK
ReadX 13876 454656 4096 4096 NT_STATUS_OK
ReadX 13876 458752 61440 61440 NT_STATUS_OK
ReadX 13876 520192 4096 4096 NT_STATUS_OK
ReadX 13876 524288 61440 61440 NT_STATUS_OK
ReadX 13876 585728 4096 4096 NT_STATUS_OK
ReadX 13876 589824 61440 61440 NT_STATUS_OK
ReadX 13876 651264 4096 4096 NT_STATUS_OK
ReadX 13876 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 61440 61440 NT_STATUS_OK
ReadX 13877 61440 4096 4096 NT_STATUS_OK
ReadX 13877 65536 61440 61440 NT_STATUS_OK
ReadX 13877 126976 4096 4096 NT_STATUS_OK
ReadX 13877 131072 61440 61440 NT_STATUS_OK
ReadX 13877 192512 4096 4096 NT_STATUS_OK
ReadX 13877 196608 61440 61440 NT_STATUS_OK
ReadX 13877 258048 4096 4096 NT_STATUS_OK
ReadX 13877 262144 61440 61440 NT_STATUS_OK
ReadX 13877 323584 4096 4096 NT_STATUS_OK
ReadX 13877 327680 61440 61440 NT_STATUS_OK
ReadX 13877 389120 4096 4096 NT_STATUS_OK
ReadX 13877 393216 61440 61440 NT_STATUS_OK
ReadX 13877 454656 4096 4096 NT_STATUS_OK
ReadX 13877 458752 61440 61440 NT_STATUS_OK
ReadX 13877 520192 4096 4096 NT_STATUS_OK
ReadX 13877 524288 61440 61440 NT_STATUS_OK
ReadX 13877 585728 4096 4096 NT_STATUS_OK
ReadX 13877 589824 61440 61440 NT_STATUS_OK
ReadX 13877 651264 4096 4096 NT_STATUS_OK
ReadX 13877 655360 61440 61440 NT_STATUS_OK
ReadX 13877 716800 4096 4096 NT_STATUS_OK
ReadX 13877 720896 61440 61440 NT_STATUS_OK
ReadX 13877 782336 4096 4096 NT_STATUS_OK
ReadX 13877 786432 61440 61440 NT_STATUS_OK
ReadX 13877 847872 4096 4096 NT_STATUS_OK
ReadX 13877 851968 61440 61440 NT_STATUS_OK
ReadX 13877 913408 4096 4096 NT_STATUS_OK
ReadX 13877 917504 61440 61440 NT_STATUS_OK
ReadX 13877 978944 4096 4096 NT_STATUS_OK
ReadX 13877 983040 61440 61440 NT_STATUS_OK
ReadX 13877 1044480 4096 4096 NT_STATUS_OK
ReadX 13877 1048576 61440 61440 NT_STATUS_OK
ReadX 13877 1110016 4096 4096 NT_STATUS_OK
ReadX 13877 1114112 61440 61440 NT_STATUS_OK
ReadX 13877 1175552 4096 4096 NT_STATUS_OK
ReadX 13877 1179648 61440 61440 NT_STATUS_OK
ReadX 13877 1241088 4096 4096 NT_STATUS_OK
ReadX 13877 1245184 61440 61440 NT_STATUS_OK
ReadX 13877 1306624 4096 4096 NT_STATUS_OK
ReadX 13877 1310720 61440 61440 NT_STATUS_OK
ReadX 13877 1372160 4096 4096 NT_STATUS_OK
ReadX 13877 1376256 61440 61440 NT_STATUS_OK
ReadX 13877 1437696 4096 4096 NT_STATUS_OK
ReadX 13877 1441792 61440 61440 NT_STATUS_OK
ReadX 13877 1503232 4096 4096 NT_STATUS_OK
ReadX 13877 1507328 61440 61440 NT_STATUS_OK
ReadX 13877 1568768 4096 4096 NT_STATUS_OK
ReadX 13877 1572864 61440 61440 NT_STATUS_OK
ReadX 13877 1634304 4096 4096 NT_STATUS_OK
ReadX 13877 1638400 61440 61440 NT_STATUS_OK
ReadX 13877 1699840 4096 4096 NT_STATUS_OK
ReadX 13877 1703936 61440 61440 NT_STATUS_OK
ReadX 13877 1765376 4096 4096 NT_STATUS_OK
ReadX 13877 1769472 61440 61440 NT_STATUS_OK
ReadX 13877 1830912 4096 4096 NT_STATUS_OK
ReadX 13877 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13884 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 1004 NT_STATUS_OK
WriteX 13884 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13885 NT_STATUS_OK
Close 13885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13886 NT_STATUS_OK
WriteX 13886 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13886 258 NT_STATUS_OK
WriteX 13886 0 491 491 NT_STATUS_OK
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13889 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13890 NT_STATUS_OK
WriteX 13890 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13890 258 NT_STATUS_OK
WriteX 13890 0 543 543 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13898 NT_STATUS_OK
ReadX 13898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13904 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 1004 NT_STATUS_OK
WriteX 13904 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 258 NT_STATUS_OK
WriteX 13904 0 2048 2048 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
Flush 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13910 NT_STATUS_OK
WriteX 13910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13910 258 NT_STATUS_OK
WriteX 13910 0 2048 2048 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13916 NT_STATUS_OK
WriteX 13916 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13916 258 NT_STATUS_OK
WriteX 13916 0 2048 2048 NT_STATUS_OK
Close 13916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 2048 2048 NT_STATUS_OK
ReadX 13895 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13911 0 4096 4096 NT_STATUS_OK
WriteX 13895 0 8192 8192 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13921 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13930 NT_STATUS_OK
ReadX 13930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13931 NT_STATUS_OK
ReadX 13931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13941 NT_STATUS_OK
QUERY_FILE_INFORMATION 13941 1004 NT_STATUS_OK
WriteX 13941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13941 258 NT_STATUS_OK
WriteX 13941 0 2048 2048 NT_STATUS_OK
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13949 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 1004 NT_STATUS_OK
WriteX 13949 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 258 NT_STATUS_OK
WriteX 13949 0 2048 2048 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
Flush 13942 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
Flush 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13952 NT_STATUS_OK
WriteX 13952 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13952 258 NT_STATUS_OK
WriteX 13952 0 4096 4096 NT_STATUS_OK
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13954 NT_STATUS_OK
Close 13954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13955 NT_STATUS_OK
WriteX 13955 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13955 258 NT_STATUS_OK
WriteX 13955 0 4096 4096 NT_STATUS_OK
Close 13955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13956 NT_STATUS_OK
ReadX 13956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13956 0 4096 4096 NT_STATUS_OK
Close 13953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13930 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13931 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Close 13925 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13962 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13963 NT_STATUS_OK
WriteX 13963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13963 258 NT_STATUS_OK
WriteX 13963 0 2048 2048 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13968 NT_STATUS_OK
ReadX 13968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13978 NT_STATUS_OK
QUERY_FILE_INFORMATION 13978 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Close 13964 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Close 13968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13980 NT_STATUS_OK
QUERY_FILE_INFORMATION 13980 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14000 NT_STATUS_OK
QUERY_FILE_INFORMATION 14000 1004 NT_STATUS_OK
WriteX 14000 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14000 258 NT_STATUS_OK
WriteX 14000 0 2048 2048 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14012 NT_STATUS_OK
QUERY_FILE_INFORMATION 14012 1004 NT_STATUS_OK
WriteX 14012 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14012 258 NT_STATUS_OK
WriteX 14012 0 2048 2048 NT_STATUS_OK
Close 14012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14020 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 1004 NT_STATUS_OK
WriteX 14020 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
WriteX 14020 0 2048 2048 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14001 0 4096 4096 NT_STATUS_OK
Flush 14001 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
Flush 14013 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
Flush 14021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14001 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14003 4096 16384 16384 NT_STATUS_OK
ReadX 13983 4096 16384 16384 NT_STATUS_OK
ReadX 14015 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 2048 2048 NT_STATUS_OK
WriteX 14023 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14024 NT_STATUS_OK
QUERY_FILE_INFORMATION 14024 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14026 NT_STATUS_OK
QUERY_FILE_INFORMATION 14026 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14028 NT_STATUS_OK
QUERY_FILE_INFORMATION 14028 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14033 NT_STATUS_OK
ReadX 14033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14031 4096 16384 16384 NT_STATUS_OK
WriteX 14031 0 4096 4096 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 8192 8192 NT_STATUS_OK
ReadX 14037 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14051 0 4096 4096 NT_STATUS_OK
ReadX 14051 4096 4096 4096 NT_STATUS_OK
ReadX 14051 8192 4096 4096 NT_STATUS_OK
WriteX 14037 0 4096 4096 NT_STATUS_OK
WriteX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
ReadX 14052 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14031 0 4096 4096 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14057 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 1004 NT_STATUS_OK
WriteX 14057 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 258 NT_STATUS_OK
WriteX 14057 0 2048 2048 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
WriteX 14060 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
ReadX 14062 4096 4096 4096 NT_STATUS_OK
WriteX 14062 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14063 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14033 NT_STATUS_OK
Close 14034 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14065 0 4096 4096 NT_STATUS_OK
ReadX 14065 4096 4096 4096 NT_STATUS_OK
ReadX 14065 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
ReadX 14066 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14083 NT_STATUS_OK
QUERY_FILE_INFORMATION 14083 1004 NT_STATUS_OK
WriteX 14083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14083 258 NT_STATUS_OK
WriteX 14083 0 2048 2048 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14089 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 1004 NT_STATUS_OK
WriteX 14089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 258 NT_STATUS_OK
WriteX 14089 0 2048 2048 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14090 NT_STATUS_OK
ReadX 14090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 14090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14073 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14091 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14093 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14095 NT_STATUS_OK
ReadX 14095 61440 4096 4096 NT_STATUS_OK
ReadX 14095 126976 4096 4096 NT_STATUS_OK
WriteX 14095 0 65536 65536 NT_STATUS_OK
WriteX 14095 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9780 NT_STATUS_OK
ReadX 9780 61440 4096 4096 NT_STATUS_OK
ReadX 9780 126976 4096 4096 NT_STATUS_OK
ReadX 9780 192512 4096 4096 NT_STATUS_OK
ReadX 9780 258048 4096 4096 NT_STATUS_OK
WriteX 9780 0 65536 65536 NT_STATUS_OK
WriteX 9780 65536 65536 65536 NT_STATUS_OK
WriteX 9780 131072 65536 65536 NT_STATUS_OK
WriteX 9780 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9781 NT_STATUS_OK
ReadX 9781 61440 4096 4096 NT_STATUS_OK
ReadX 9781 126976 4096 4096 NT_STATUS_OK
ReadX 9781 192512 4096 4096 NT_STATUS_OK
ReadX 9781 258048 4096 4096 NT_STATUS_OK
ReadX 9781 323584 4096 4096 NT_STATUS_OK
ReadX 9781 389120 4096 4096 NT_STATUS_OK
ReadX 9781 454656 4096 4096 NT_STATUS_OK
ReadX 9781 520192 4096 4096 NT_STATUS_OK
WriteX 9781 0 65536 65536 NT_STATUS_OK
WriteX 9781 65536 65536 65536 NT_STATUS_OK
WriteX 9781 131072 65536 65536 NT_STATUS_OK
WriteX 9781 196608 65536 65536 NT_STATUS_OK
WriteX 9781 262144 65536 65536 NT_STATUS_OK
WriteX 9781 327680 65536 65536 NT_STATUS_OK
WriteX 9781 393216 65536 65536 NT_STATUS_OK
WriteX 9781 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9782 NT_STATUS_OK
ReadX 9782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9782 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9782 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9782 8192 4096 4096 NT_STATUS_OK
ReadX 9782 12288 4096 4096 NT_STATUS_OK
ReadX 9782 16384 4096 4096 NT_STATUS_OK
ReadX 9782 20480 4096 4096 NT_STATUS_OK
ReadX 9782 24576 4096 4096 NT_STATUS_OK
ReadX 9782 28672 4096 4096 NT_STATUS_OK
ReadX 9782 32768 4096 4096 NT_STATUS_OK
ReadX 9782 36864 4096 4096 NT_STATUS_OK
ReadX 9782 40960 4096 4096 NT_STATUS_OK
ReadX 9782 45056 4096 4096 NT_STATUS_OK
ReadX 9782 49152 4096 4096 NT_STATUS_OK
ReadX 9782 53248 4096 4096 NT_STATUS_OK
ReadX 9782 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9782 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9783 NT_STATUS_OK
Close 9783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 14095 NT_STATUS_OK
Close 9780 NT_STATUS_OK
Close 9781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9785 NT_STATUS_OK
WriteX 9785 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9785 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 57088 57088 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Flush 9785 NT_STATUS_OK
Close 9782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9786 NT_STATUS_OK
SET_FILE_INFORMATION 9786 1004 NT_STATUS_OK
Close 9786 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Close 9785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9787 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9789 NT_STATUS_OK
ReadX 9789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9789 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9790 NT_STATUS_OK
WriteX 9790 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9790 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
WriteX 9790 0 51456 51456 NT_STATUS_OK
WriteX 9790 0 4096 4096 NT_STATUS_OK
Flush 9790 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
WriteX 9790 0 4096 4096 NT_STATUS_OK
Close 9790 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9792 NT_STATUS_OK
Close 9792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9794 NT_STATUS_OK
ReadX 9794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9794 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9796 NT_STATUS_OK
Close 9796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9799 NT_STATUS_OK
WriteX 9799 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9799 258 NT_STATUS_OK
WriteX 9799 0 53077 53077 NT_STATUS_OK
Close 9799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9800 NT_STATUS_OK
WriteX 9800 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 65536 65536 NT_STATUS_OK
WriteX 9800 65536 1856 1856 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Flush 9800 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9802 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9806 NT_STATUS_OK
Close 9806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9809 NT_STATUS_OK
WriteX 9809 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9809 258 NT_STATUS_OK
WriteX 9809 0 7983 7983 NT_STATUS_OK
Close 9809 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9811 NT_STATUS_OK
Close 9811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9814 NT_STATUS_OK
WriteX 9814 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9814 258 NT_STATUS_OK
WriteX 9814 0 65536 65536 NT_STATUS_OK
WriteX 9814 65536 65536 65536 NT_STATUS_OK
WriteX 9814 131072 65536 65536 NT_STATUS_OK
WriteX 9814 196608 65536 65536 NT_STATUS_OK
WriteX 9814 262144 65536 65536 NT_STATUS_OK
WriteX 9814 327680 65536 65536 NT_STATUS_OK
WriteX 9814 393216 65536 65536 NT_STATUS_OK
WriteX 9814 458752 46731 46731 NT_STATUS_OK
Close 9814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9815 NT_STATUS_OK
WriteX 9815 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9804 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 0 65536 65536 NT_STATUS_OK
WriteX 9815 65536 22848 22848 NT_STATUS_OK
WriteX 9815 0 4096 4096 NT_STATUS_OK
Flush 9815 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 0 4096 4096 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9817 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9819 NT_STATUS_OK
ReadX 9819 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9819 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9820 NT_STATUS_OK
ReadX 9820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9820 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9820 1004 NT_STATUS_OK
ReadX 9820 8192 4096 4096 NT_STATUS_OK
ReadX 9820 12288 4096 4096 NT_STATUS_OK
ReadX 9820 16384 4096 4096 NT_STATUS_OK
ReadX 9820 20480 4096 4096 NT_STATUS_OK
ReadX 9820 24576 4096 4096 NT_STATUS_OK
ReadX 9820 28672 4096 4096 NT_STATUS_OK
ReadX 9820 32768 4096 4096 NT_STATUS_OK
ReadX 9820 36864 4096 4096 NT_STATUS_OK
ReadX 9820 40960 4096 4096 NT_STATUS_OK
ReadX 9820 45056 4096 4096 NT_STATUS_OK
ReadX 9820 49152 4096 4096 NT_STATUS_OK
ReadX 9820 53248 4096 4096 NT_STATUS_OK
ReadX 9820 57344 4096 4096 NT_STATUS_OK
ReadX 9820 61440 4096 4096 NT_STATUS_OK
ReadX 9820 65536 4096 4096 NT_STATUS_OK
ReadX 9820 69632 4096 4096 NT_STATUS_OK
ReadX 9820 73728 4096 4096 NT_STATUS_OK
ReadX 9820 77824 4096 4096 NT_STATUS_OK
ReadX 9820 81920 4096 4096 NT_STATUS_OK
ReadX 9820 86016 4096 4096 NT_STATUS_OK
ReadX 9820 90112 4096 4096 NT_STATUS_OK
ReadX 9820 94208 4096 4096 NT_STATUS_OK
ReadX 9820 98304 4096 4096 NT_STATUS_OK
ReadX 9820 102400 4096 4096 NT_STATUS_OK
ReadX 9820 106496 4096 4096 NT_STATUS_OK
ReadX 9820 110592 4096 4096 NT_STATUS_OK
ReadX 9820 114688 4096 4096 NT_STATUS_OK
ReadX 9820 118784 4096 4096 NT_STATUS_OK
ReadX 9820 122880 4096 4096 NT_STATUS_OK
ReadX 9820 126976 4096 4096 NT_STATUS_OK
ReadX 9820 131072 4096 4096 NT_STATUS_OK
ReadX 9820 135168 4096 4096 NT_STATUS_OK
ReadX 9820 139264 4096 4096 NT_STATUS_OK
ReadX 9820 143360 4096 4096 NT_STATUS_OK
ReadX 9820 147456 4096 4096 NT_STATUS_OK
ReadX 9820 151552 4096 4096 NT_STATUS_OK
ReadX 9820 155648 4096 4096 NT_STATUS_OK
ReadX 9820 159744 4096 4096 NT_STATUS_OK
ReadX 9820 163840 4096 4096 NT_STATUS_OK
ReadX 9820 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9820 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9821 NT_STATUS_OK
Close 9821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9823 NT_STATUS_OK
WriteX 9823 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 258 NT_STATUS_OK
Close 9820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9824 NT_STATUS_OK
SET_FILE_INFORMATION 9824 1004 NT_STATUS_OK
Close 9824 NT_STATUS_OK
WriteX 9823 0 42388 42388 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9825 NT_STATUS_OK
Close 9825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9827 NT_STATUS_OK
ReadX 9827 0 4096 4096 NT_STATUS_OK
ReadX 9827 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9828 NT_STATUS_OK
WriteX 9828 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9828 258 NT_STATUS_OK
SET_FILE_INFORMATION 9828 1004 NT_STATUS_OK
WriteX 9828 0 42652 42652 NT_STATUS_OK
Close 9828 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
ReadX 9832 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9834 NT_STATUS_OK
Close 9834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9837 NT_STATUS_OK
WriteX 9837 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 258 NT_STATUS_OK
WriteX 9837 0 65536 65536 NT_STATUS_OK
WriteX 9837 65536 49 49 NT_STATUS_OK
Close 9837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9838 NT_STATUS_OK
ReadX 9838 0 61440 61440 NT_STATUS_OK
ReadX 9838 61440 4096 4096 NT_STATUS_OK
ReadX 9838 65536 61440 61440 NT_STATUS_OK
ReadX 9838 126976 4096 4096 NT_STATUS_OK
ReadX 9838 131072 61440 61440 NT_STATUS_OK
ReadX 9838 192512 4096 4096 NT_STATUS_OK
ReadX 9838 196608 61440 61440 NT_STATUS_OK
ReadX 9838 258048 4096 4096 NT_STATUS_OK
ReadX 9838 262144 61440 61440 NT_STATUS_OK
ReadX 9838 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 61440 61440 NT_STATUS_OK
ReadX 9839 61440 4096 4096 NT_STATUS_OK
ReadX 9839 65536 61440 61440 NT_STATUS_OK
ReadX 9839 126976 4096 4096 NT_STATUS_OK
ReadX 9839 131072 61440 61440 NT_STATUS_OK
ReadX 9839 192512 4096 4096 NT_STATUS_OK
ReadX 9839 196608 61440 61440 NT_STATUS_OK
ReadX 9839 258048 4096 4096 NT_STATUS_OK
ReadX 9839 262144 61440 61440 NT_STATUS_OK
ReadX 9839 323584 4096 4096 NT_STATUS_OK
ReadX 9839 327680 61440 61440 NT_STATUS_OK
ReadX 9839 389120 4096 4096 NT_STATUS_OK
ReadX 9839 393216 61440 61440 NT_STATUS_OK
ReadX 9839 454656 4096 4096 NT_STATUS_OK
ReadX 9839 458752 61440 61440 NT_STATUS_OK
ReadX 9839 520192 4096 4096 NT_STATUS_OK
ReadX 9839 524288 61440 61440 NT_STATUS_OK
ReadX 9839 585728 4096 4096 NT_STATUS_OK
ReadX 9839 589824 61440 61440 NT_STATUS_OK
ReadX 9839 651264 4096 4096 NT_STATUS_OK
ReadX 9839 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 61440 61440 NT_STATUS_OK
ReadX 9840 61440 4096 4096 NT_STATUS_OK
ReadX 9840 65536 61440 61440 NT_STATUS_OK
ReadX 9840 126976 4096 4096 NT_STATUS_OK
ReadX 9840 131072 61440 61440 NT_STATUS_OK
ReadX 9840 192512 4096 4096 NT_STATUS_OK
ReadX 9840 196608 61440 61440 NT_STATUS_OK
ReadX 9840 258048 4096 4096 NT_STATUS_OK
ReadX 9840 262144 61440 61440 NT_STATUS_OK
ReadX 9840 323584 4096 4096 NT_STATUS_OK
ReadX 9840 327680 61440 61440 NT_STATUS_OK
ReadX 9840 389120 4096 4096 NT_STATUS_OK
ReadX 9840 393216 61440 61440 NT_STATUS_OK
ReadX 9840 454656 4096 4096 NT_STATUS_OK
ReadX 9840 458752 61440 61440 NT_STATUS_OK
ReadX 9840 520192 4096 4096 NT_STATUS_OK
ReadX 9840 524288 61440 61440 NT_STATUS_OK
ReadX 9840 585728 4096 4096 NT_STATUS_OK
ReadX 9840 589824 61440 61440 NT_STATUS_OK
ReadX 9840 651264 4096 4096 NT_STATUS_OK
ReadX 9840 655360 61440 61440 NT_STATUS_OK
ReadX 9840 716800 4096 4096 NT_STATUS_OK
ReadX 9840 720896 61440 61440 NT_STATUS_OK
ReadX 9840 782336 4096 4096 NT_STATUS_OK
ReadX 9840 786432 61440 61440 NT_STATUS_OK
ReadX 9840 847872 4096 4096 NT_STATUS_OK
ReadX 9840 851968 61440 61440 NT_STATUS_OK
ReadX 9840 913408 4096 4096 NT_STATUS_OK
ReadX 9840 917504 61440 61440 NT_STATUS_OK
ReadX 9840 978944 4096 4096 NT_STATUS_OK
ReadX 9840 983040 61440 61440 NT_STATUS_OK
ReadX 9840 1044480 4096 4096 NT_STATUS_OK
ReadX 9840 1048576 61440 61440 NT_STATUS_OK
ReadX 9840 1110016 4096 4096 NT_STATUS_OK
ReadX 9840 1114112 61440 61440 NT_STATUS_OK
ReadX 9840 1175552 4096 4096 NT_STATUS_OK
ReadX 9840 1179648 61440 61440 NT_STATUS_OK
ReadX 9840 1241088 4096 4096 NT_STATUS_OK
ReadX 9840 1245184 61440 61440 NT_STATUS_OK
ReadX 9840 1306624 4096 4096 NT_STATUS_OK
ReadX 9840 1310720 61440 61440 NT_STATUS_OK
ReadX 9840 1372160 4096 4096 NT_STATUS_OK
ReadX 9840 1376256 61440 61440 NT_STATUS_OK
ReadX 9840 1437696 4096 4096 NT_STATUS_OK
ReadX 9840 1441792 61440 61440 NT_STATUS_OK
ReadX 9840 1503232 4096 4096 NT_STATUS_OK
ReadX 9840 1507328 61440 61440 NT_STATUS_OK
ReadX 9840 1568768 4096 4096 NT_STATUS_OK
ReadX 9840 1572864 61440 61440 NT_STATUS_OK
ReadX 9840 1634304 4096 4096 NT_STATUS_OK
ReadX 9840 1638400 61440 61440 NT_STATUS_OK
ReadX 9840 1699840 4096 4096 NT_STATUS_OK
ReadX 9840 1703936 61440 61440 NT_STATUS_OK
ReadX 9840 1765376 4096 4096 NT_STATUS_OK
ReadX 9840 1769472 61440 61440 NT_STATUS_OK
ReadX 9840 1830912 4096 4096 NT_STATUS_OK
ReadX 9840 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9842 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
ReadX 9842 2156 24 24 NT_STATUS_OK
ReadX 9842 2139 276 276 NT_STATUS_OK
ReadX 9842 2136 14 14 NT_STATUS_OK
ReadX 9842 2136 7 7 NT_STATUS_OK
ReadX 9842 2138 12 12 NT_STATUS_OK
ReadX 9842 2137 8 8 NT_STATUS_OK
ReadX 9842 2135 15 15 NT_STATUS_OK
ReadX 9842 0 16 16 NT_STATUS_OK
ReadX 9842 16 2048 2048 NT_STATUS_OK
ReadX 9842 2064 2048 2048 NT_STATUS_OK
ReadX 9842 257 2048 2048 NT_STATUS_OK
ReadX 9842 385 2048 2048 NT_STATUS_OK
ReadX 9842 513 2048 2048 NT_STATUS_OK
ReadX 9842 641 2048 2048 NT_STATUS_OK
ReadX 9842 769 2048 2048 NT_STATUS_OK
ReadX 9842 897 2048 2048 NT_STATUS_OK
ReadX 9842 1025 2048 2048 NT_STATUS_OK
ReadX 9842 1153 2048 2048 NT_STATUS_OK
ReadX 9842 1281 2048 2048 NT_STATUS_OK
ReadX 9842 1409 2048 2048 NT_STATUS_OK
ReadX 9842 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9844 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9838 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9840 NT_STATUS_OK
Close 9832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9847 NT_STATUS_OK
WriteX 9847 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9847 258 NT_STATUS_OK
WriteX 9847 0 10575 10575 NT_STATUS_OK
Flush 9847 NT_STATUS_OK
Close 9847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9848 NT_STATUS_OK
Close 9848 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9852 NT_STATUS_OK
LockX 9852 2147483538 1 NT_STATUS_OK
UnlockX 9852 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1005 NT_STATUS_OK
ReadX 9852 0 512 512 NT_STATUS_OK
ReadX 9852 512 512 512 NT_STATUS_OK
ReadX 9852 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1004 NT_STATUS_OK
Close 9852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9853 NT_STATUS_OK
QUERY_FILE_INFORMATION 9853 1005 NT_STATUS_OK
ReadX 9853 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9854 NT_STATUS_OK
LockX 9854 2147483538 1 NT_STATUS_OK
UnlockX 9854 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9854 1005 NT_STATUS_OK
ReadX 9854 0 512 512 NT_STATUS_OK
ReadX 9854 512 512 512 NT_STATUS_OK
ReadX 9854 1024 512 512 NT_STATUS_OK
ReadX 9854 288 20 20 NT_STATUS_OK
ReadX 9854 308 2084 2084 NT_STATUS_OK
ReadX 9854 388 2084 2084 NT_STATUS_OK
ReadX 9854 388 2084 2084 NT_STATUS_OK
ReadX 9841 2157 1386 1386 NT_STATUS_OK
ReadX 9854 2472 399 399 NT_STATUS_OK
ReadX 9854 3072 1536 1536 NT_STATUS_OK
ReadX 9854 544 149 149 NT_STATUS_OK
ReadX 9854 693 485 485 NT_STATUS_OK
Close 9854 NT_STATUS_OK
ReadX 9841 2157 4096 4096 NT_STATUS_OK
ReadX 9841 6253 4096 4096 NT_STATUS_OK
ReadX 9841 10349 4096 4096 NT_STATUS_OK
ReadX 9841 14445 4096 4096 NT_STATUS_OK
ReadX 9841 18541 4096 4096 NT_STATUS_OK
ReadX 9841 22637 256 256 NT_STATUS_OK
ReadX 9841 22893 4096 4096 NT_STATUS_OK
ReadX 9841 26989 4096 4096 NT_STATUS_OK
ReadX 9841 31085 4096 4096 NT_STATUS_OK
ReadX 9841 35181 4096 4096 NT_STATUS_OK
ReadX 9841 39277 4096 4096 NT_STATUS_OK
ReadX 9841 43373 4096 4096 NT_STATUS_OK
ReadX 9841 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9841 2157 1024 1024 NT_STATUS_OK
ReadX 9841 1667 4688 4688 NT_STATUS_OK
ReadX 9841 6355 3516 3516 NT_STATUS_OK
ReadX 9841 9871 16384 16384 NT_STATUS_OK
ReadX 9841 26255 3771 3771 NT_STATUS_OK
ReadX 9841 30026 2048 2048 NT_STATUS_OK
ReadX 9841 32074 1024 1024 NT_STATUS_OK
ReadX 9841 33098 6652 6652 NT_STATUS_OK
ReadX 9841 39750 16384 16384 NT_STATUS_OK
ReadX 9841 56134 10496 10496 NT_STATUS_OK
ReadX 9841 66630 1784 1784 NT_STATUS_OK
ReadX 9841 68414 90 90 NT_STATUS_OK
ReadX 9841 68504 273 273 NT_STATUS_OK
ReadX 9841 68777 1600 1600 NT_STATUS_OK
ReadX 9841 70377 640 640 NT_STATUS_OK
ReadX 9841 71017 1280 1280 NT_STATUS_OK
ReadX 9841 72297 8464 8464 NT_STATUS_OK
ReadX 9841 80761 158 158 NT_STATUS_OK
ReadX 9841 80919 912 912 NT_STATUS_OK
ReadX 9841 81831 1980 1980 NT_STATUS_OK
ReadX 9841 83811 2256 2256 NT_STATUS_OK
ReadX 9841 86067 400 400 NT_STATUS_OK
ReadX 9841 86467 252 252 NT_STATUS_OK
ReadX 9841 86719 42 42 NT_STATUS_OK
ReadX 9841 86761 725 725 NT_STATUS_OK
ReadX 9841 2009 512 512 NT_STATUS_OK
ReadX 9841 3895 9 9 NT_STATUS_OK
ReadX 9841 3781 46 46 NT_STATUS_OK
ReadX 9841 4059 92 92 NT_STATUS_OK
ReadX 9841 3781 92 92 NT_STATUS_OK
ReadX 9841 3986 184 184 NT_STATUS_OK
ReadX 9841 3987 16384 16384 NT_STATUS_OK
ReadX 9841 3902 16384 16384 NT_STATUS_OK
ReadX 9841 3781 10240 10240 NT_STATUS_OK
ReadX 9841 3821 16384 16384 NT_STATUS_OK
ReadX 9841 3891 935 935 NT_STATUS_OK
ReadX 9841 4060 10240 10240 NT_STATUS_OK
ReadX 9841 4059 184 184 NT_STATUS_OK
ReadX 9841 256 184 184 NT_STATUS_OK
ReadX 9841 256 1026 1026 NT_STATUS_OK
ReadX 9841 3901 326 326 NT_STATUS_OK
ReadX 9841 3899 652 652 NT_STATUS_OK
ReadX 9841 256 2 2 NT_STATUS_OK
ReadX 9841 258 4948 4948 NT_STATUS_OK
Close 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9856 NT_STATUS_OK
Close 9856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9859 NT_STATUS_OK
WriteX 9859 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9859 258 NT_STATUS_OK
WriteX 9859 0 65536 65536 NT_STATUS_OK
WriteX 9859 65536 65536 65536 NT_STATUS_OK
WriteX 9859 131072 65536 65536 NT_STATUS_OK
WriteX 9859 196608 65536 65536 NT_STATUS_OK
WriteX 9859 262144 65536 65536 NT_STATUS_OK
WriteX 9859 327680 65536 65536 NT_STATUS_OK
WriteX 9859 393216 65536 65536 NT_STATUS_OK
WriteX 9859 458752 65536 65536 NT_STATUS_OK
WriteX 9859 524288 65536 65536 NT_STATUS_OK
WriteX 9859 589824 35257 35257 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9861 NT_STATUS_OK
Close 9861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9864 NT_STATUS_OK
WriteX 9864 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9864 258 NT_STATUS_OK
WriteX 9864 0 65536 65536 NT_STATUS_OK
WriteX 9864 65536 65536 65536 NT_STATUS_OK
WriteX 9864 131072 65536 65536 NT_STATUS_OK
WriteX 9864 196608 65536 65536 NT_STATUS_OK
WriteX 9864 262144 65536 65536 NT_STATUS_OK
WriteX 9864 327680 65536 65536 NT_STATUS_OK
WriteX 9864 393216 65536 65536 NT_STATUS_OK
WriteX 9864 458752 65536 65536 NT_STATUS_OK
WriteX 9864 524288 65536 65536 NT_STATUS_OK
WriteX 9864 589824 57598 57598 NT_STATUS_OK
Close 9864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9866 NT_STATUS_OK
WriteX 9866 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9866 258 NT_STATUS_OK
WriteX 9866 0 12543 12543 NT_STATUS_OK
Flush 9866 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9868 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9870 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9872 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
ReadX 9872 1938 24 24 NT_STATUS_OK
ReadX 9872 1920 276 276 NT_STATUS_OK
ReadX 9872 1918 14 14 NT_STATUS_OK
ReadX 9872 1918 7 7 NT_STATUS_OK
ReadX 9872 1919 12 12 NT_STATUS_OK
ReadX 9872 1919 8 8 NT_STATUS_OK
ReadX 9872 1917 15 15 NT_STATUS_OK
ReadX 9872 0 16 16 NT_STATUS_OK
ReadX 9872 16 2048 2048 NT_STATUS_OK
ReadX 9872 2064 2048 2048 NT_STATUS_OK
ReadX 9872 257 2048 2048 NT_STATUS_OK
ReadX 9872 385 2048 2048 NT_STATUS_OK
ReadX 9872 513 2048 2048 NT_STATUS_OK
ReadX 9872 641 2048 2048 NT_STATUS_OK
ReadX 9872 769 2048 2048 NT_STATUS_OK
ReadX 9872 897 2048 2048 NT_STATUS_OK
ReadX 9872 1025 2048 2048 NT_STATUS_OK
ReadX 9872 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9874 NT_STATUS_OK
Close 9874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9877 NT_STATUS_OK
WriteX 9877 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 11588 11588 NT_STATUS_OK
Flush 9877 NT_STATUS_OK
Close 9877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
Close 9872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9882 NT_STATUS_OK
WriteX 9882 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9882 258 NT_STATUS_OK
WriteX 9882 0 11615 11615 NT_STATUS_OK
Flush 9882 NT_STATUS_OK
Close 9882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9884 NT_STATUS_OK
Close 9884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9888 NT_STATUS_OK
Close 9888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9891 NT_STATUS_OK
WriteX 9891 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9891 258 NT_STATUS_OK
WriteX 9891 0 65536 65536 NT_STATUS_OK
WriteX 9891 65536 16050 16050 NT_STATUS_OK
Close 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9871 1939 64 64 NT_STATUS_OK
ReadX 9871 128 248 248 NT_STATUS_OK
ReadX 9871 128 568 568 NT_STATUS_OK
ReadX 9871 3872 1536 1536 NT_STATUS_OK
ReadX 9871 3456 2560 2560 NT_STATUS_OK
ReadX 9871 3136 512 512 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
ReadX 9871 3264 3072 3072 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 3616 4096 4096 NT_STATUS_OK
ReadX 9871 1939 64 64 NT_STATUS_OK
ReadX 9871 128 248 248 NT_STATUS_OK
ReadX 9871 128 608 608 NT_STATUS_OK
ReadX 9871 2858 1024 1024 NT_STATUS_OK
ReadX 9871 2810 4096 4096 NT_STATUS_OK
ReadX 9871 2826 4096 4096 NT_STATUS_OK
ReadX 9871 2580 2048 2048 NT_STATUS_OK
ReadX 9871 2800 2560 2560 NT_STATUS_OK
ReadX 9871 2100 4096 4096 NT_STATUS_OK
ReadX 9871 2084 4096 4096 NT_STATUS_OK
ReadX 9871 868 4096 4096 NT_STATUS_OK
ReadX 9871 2324 4096 4096 NT_STATUS_OK
ReadX 9871 884 4096 4096 NT_STATUS_OK
ReadX 9871 2604 1024 1024 NT_STATUS_OK
ReadX 9871 580 4096 4096 NT_STATUS_OK
ReadX 9871 596 4096 4096 NT_STATUS_OK
ReadX 9871 2752 4096 4096 NT_STATUS_OK
ReadX 9871 2842 1024 1024 NT_STATUS_OK
ReadX 9871 660 4096 4096 NT_STATUS_OK
ReadX 9871 2720 4096 4096 NT_STATUS_OK
ReadX 9871 2736 4096 4096 NT_STATUS_OK
ReadX 9871 628 4096 4096 NT_STATUS_OK
ReadX 9871 2704 4096 4096 NT_STATUS_OK
ReadX 9871 1556 4096 4096 NT_STATUS_OK
ReadX 9871 576 4096 4096 NT_STATUS_OK
ReadX 9871 3168 1536 1536 NT_STATUS_OK
ReadX 9871 832 4096 4096 NT_STATUS_OK
ReadX 9871 1088 4096 4096 NT_STATUS_OK
ReadX 9871 1344 4096 4096 NT_STATUS_OK
ReadX 9871 1600 4096 4096 NT_STATUS_OK
ReadX 9871 1856 4096 4096 NT_STATUS_OK
ReadX 9871 2112 4096 4096 NT_STATUS_OK
ReadX 9871 1892 4096 4096 NT_STATUS_OK
ReadX 9871 820 4096 4096 NT_STATUS_OK
ReadX 9871 788 4096 4096 NT_STATUS_OK
ReadX 9871 1604 4096 4096 NT_STATUS_OK
ReadX 9871 3648 4096 4096 NT_STATUS_OK
ReadX 9871 2608 4096 4096 NT_STATUS_OK
ReadX 9871 548 4096 4096 NT_STATUS_OK
ReadX 9871 740 4096 4096 NT_STATUS_OK
ReadX 9871 1344 4096 4096 NT_STATUS_OK
ReadX 9871 3392 4096 4096 NT_STATUS_OK
ReadX 9871 3904 4096 4096 NT_STATUS_OK
ReadX 9871 644 4096 4096 NT_STATUS_OK
ReadX 9871 676 4096 4096 NT_STATUS_OK
ReadX 9871 2688 4096 4096 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 900 4096 4096 NT_STATUS_OK
ReadX 9871 1908 4096 4096 NT_STATUS_OK
ReadX 9871 852 4096 4096 NT_STATUS_OK
ReadX 9871 724 4096 4096 NT_STATUS_OK
ReadX 9871 2292 4096 4096 NT_STATUS_OK
ReadX 9871 612 4096 4096 NT_STATUS_OK
ReadX 9871 388 4096 4096 NT_STATUS_OK
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 500 4096 4096 NT_STATUS_OK
ReadX 9871 356 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 576 4096 4096 NT_STATUS_OK
ReadX 9871 340 4096 4096 NT_STATUS_OK
ReadX 9871 420 4096 4096 NT_STATUS_OK
ReadX 9871 1600 4096 4096 NT_STATUS_OK
ReadX 9871 404 4096 4096 NT_STATUS_OK
ReadX 9871 1428 4096 4096 NT_STATUS_OK
ReadX 9871 2656 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 452 4096 4096 NT_STATUS_OK
ReadX 9871 692 4096 4096 NT_STATUS_OK
ReadX 9871 564 4096 4096 NT_STATUS_OK
ReadX 9871 372 4096 4096 NT_STATUS_OK
ReadX 9871 468 4096 4096 NT_STATUS_OK
ReadX 9871 484 4096 4096 NT_STATUS_OK
ReadX 9871 1088 4096 4096 NT_STATUS_OK
ReadX 9871 1924 4096 4096 NT_STATUS_OK
ReadX 9871 2768 4096 4096 NT_STATUS_OK
ReadX 9871 832 4096 4096 NT_STATUS_OK
ReadX 9871 836 4096 4096 NT_STATUS_OK
ReadX 9871 1856 4096 4096 NT_STATUS_OK
ReadX 9871 2640 4096 4096 NT_STATUS_OK
ReadX 9871 436 4096 4096 NT_STATUS_OK
ReadX 9871 1828 4096 4096 NT_STATUS_OK
ReadX 9871 804 4096 4096 NT_STATUS_OK
ReadX 9871 1860 4096 4096 NT_STATUS_OK
ReadX 9871 1812 4096 4096 NT_STATUS_OK
ReadX 9871 756 4096 4096 NT_STATUS_OK
ReadX 9871 1636 4096 4096 NT_STATUS_OK
ReadX 9871 772 4096 4096 NT_STATUS_OK
ReadX 9871 2036 4096 4096 NT_STATUS_OK
ReadX 9871 1220 4096 4096 NT_STATUS_OK
ReadX 9871 1652 4096 4096 NT_STATUS_OK
ReadX 9871 2588 4096 4096 NT_STATUS_OK
ReadX 9871 916 4096 4096 NT_STATUS_OK
ReadX 9871 260 4096 4096 NT_STATUS_OK
ReadX 9871 932 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 308 4096 4096 NT_STATUS_OK
ReadX 9871 292 4096 4096 NT_STATUS_OK
ReadX 9871 1140 4096 4096 NT_STATUS_OK
ReadX 9871 276 4096 4096 NT_STATUS_OK
ReadX 9871 2020 4096 4096 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
ReadX 9871 516 4096 4096 NT_STATUS_OK
ReadX 9871 1844 4096 4096 NT_STATUS_OK
ReadX 9871 1124 4096 4096 NT_STATUS_OK
ReadX 9871 3136 4096 4096 NT_STATUS_OK
ReadX 9871 324 4096 4096 NT_STATUS_OK
ReadX 9871 1156 4096 4096 NT_STATUS_OK
ReadX 9871 1172 4096 4096 NT_STATUS_OK
ReadX 9871 2112 4096 4096 NT_STATUS_OK
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 964 4096 4096 NT_STATUS_OK
ReadX 9871 980 4096 4096 NT_STATUS_OK
ReadX 9871 1012 4096 4096 NT_STATUS_OK
ReadX 9871 532 4096 4096 NT_STATUS_OK
ReadX 9871 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9871 1620 4096 4096 NT_STATUS_OK
ReadX 9871 1604 4096 4096 NT_STATUS_OK
ReadX 9871 2116 4096 4096 NT_STATUS_OK
ReadX 9871 2132 4096 4096 NT_STATUS_OK
ReadX 9871 2148 4096 4096 NT_STATUS_OK
ReadX 9871 2276 4096 4096 NT_STATUS_OK
ReadX 9871 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9896 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 1004 NT_STATUS_OK
Close 9851 NT_STATUS_OK
WriteX 9896 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9896 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9853 1004 NT_STATUS_OK
Close 9853 NT_STATUS_OK
WriteX 9896 0 65536 65536 NT_STATUS_OK
WriteX 9896 65536 64850 64850 NT_STATUS_OK
Close 9896 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9898 NT_STATUS_OK
WriteX 9898 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9898 258 NT_STATUS_OK
ReadX 9871 2068 4096 4096 NT_STATUS_OK
ReadX 9871 1588 4096 4096 NT_STATUS_OK
ReadX 9871 1572 4096 4096 NT_STATUS_OK
WriteX 9898 0 18630 18630 NT_STATUS_OK
Flush 9898 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9900 NT_STATUS_OK
Close 9900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9871 612 4096 4096 NT_STATUS_OK
ReadX 9871 564 4096 4096 NT_STATUS_OK
ReadX 9871 1876 4096 4096 NT_STATUS_OK
ReadX 9871 628 4096 4096 NT_STATUS_OK
ReadX 9871 740 4096 4096 NT_STATUS_OK
ReadX 9871 724 4096 4096 NT_STATUS_OK
ReadX 9871 644 4096 4096 NT_STATUS_OK
ReadX 9871 2324 4096 4096 NT_STATUS_OK
ReadX 9871 660 4096 4096 NT_STATUS_OK
ReadX 9871 852 4096 4096 NT_STATUS_OK
ReadX 9871 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 580 4096 4096 NT_STATUS_OK
ReadX 9871 3136 512 512 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
Close 9871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 61440 4096 4096 NT_STATUS_OK
ReadX 9903 126976 4096 4096 NT_STATUS_OK
WriteX 9903 0 65536 65536 NT_STATUS_OK
WriteX 9903 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 61440 4096 4096 NT_STATUS_OK
ReadX 9904 126976 4096 4096 NT_STATUS_OK
ReadX 9904 192512 4096 4096 NT_STATUS_OK
ReadX 9904 258048 4096 4096 NT_STATUS_OK
WriteX 9904 0 65536 65536 NT_STATUS_OK
WriteX 9904 65536 65536 65536 NT_STATUS_OK
WriteX 9904 131072 65536 65536 NT_STATUS_OK
WriteX 9904 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 61440 4096 4096 NT_STATUS_OK
ReadX 9905 126976 4096 4096 NT_STATUS_OK
ReadX 9905 192512 4096 4096 NT_STATUS_OK
ReadX 9905 258048 4096 4096 NT_STATUS_OK
ReadX 9905 323584 4096 4096 NT_STATUS_OK
ReadX 9905 389120 4096 4096 NT_STATUS_OK
ReadX 9905 454656 4096 4096 NT_STATUS_OK
ReadX 9905 520192 4096 4096 NT_STATUS_OK
WriteX 9905 0 65536 65536 NT_STATUS_OK
WriteX 9905 65536 65536 65536 NT_STATUS_OK
WriteX 9905 131072 65536 65536 NT_STATUS_OK
WriteX 9905 196608 65536 65536 NT_STATUS_OK
WriteX 9905 262144 65536 65536 NT_STATUS_OK
WriteX 9905 327680 65536 65536 NT_STATUS_OK
WriteX 9905 393216 65536 65536 NT_STATUS_OK
WriteX 9905 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9907 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9908 NT_STATUS_OK
WriteX 9908 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9908 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9906 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9910 NT_STATUS_OK
Close 9910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Close 9903 NT_STATUS_OK
Close 9904 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9913 NT_STATUS_OK
WriteX 9913 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9913 258 NT_STATUS_OK
WriteX 9913 0 62591 62591 NT_STATUS_OK
Close 9913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9915 NT_STATUS_OK
Close 9915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9918 NT_STATUS_OK
WriteX 9918 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9918 258 NT_STATUS_OK
WriteX 9918 0 10845 10845 NT_STATUS_OK
Close 9918 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9920 NT_STATUS_OK
Close 9920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9923 NT_STATUS_OK
WriteX 9923 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9923 258 NT_STATUS_OK
WriteX 9923 0 30118 30118 NT_STATUS_OK
Close 9923 NT_STATUS_OK
WriteX 9906 0 4096 4096 NT_STATUS_OK
WriteX 9908 0 64 64 NT_STATUS_OK
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 61440 61440 NT_STATUS_OK
ReadX 9925 61440 4096 4096 NT_STATUS_OK
ReadX 9925 65536 61440 61440 NT_STATUS_OK
ReadX 9925 126976 4096 4096 NT_STATUS_OK
ReadX 9925 131072 61440 61440 NT_STATUS_OK
ReadX 9925 192512 4096 4096 NT_STATUS_OK
ReadX 9925 196608 61440 61440 NT_STATUS_OK
ReadX 9925 258048 4096 4096 NT_STATUS_OK
ReadX 9925 262144 61440 61440 NT_STATUS_OK
ReadX 9925 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 61440 61440 NT_STATUS_OK
ReadX 9926 61440 4096 4096 NT_STATUS_OK
ReadX 9926 65536 61440 61440 NT_STATUS_OK
ReadX 9926 126976 4096 4096 NT_STATUS_OK
ReadX 9926 131072 61440 61440 NT_STATUS_OK
ReadX 9926 192512 4096 4096 NT_STATUS_OK
ReadX 9926 196608 61440 61440 NT_STATUS_OK
ReadX 9926 258048 4096 4096 NT_STATUS_OK
ReadX 9926 262144 61440 61440 NT_STATUS_OK
ReadX 9926 323584 4096 4096 NT_STATUS_OK
ReadX 9926 327680 61440 61440 NT_STATUS_OK
ReadX 9926 389120 4096 4096 NT_STATUS_OK
ReadX 9926 393216 61440 61440 NT_STATUS_OK
ReadX 9926 454656 4096 4096 NT_STATUS_OK
ReadX 9926 458752 61440 61440 NT_STATUS_OK
ReadX 9926 520192 4096 4096 NT_STATUS_OK
ReadX 9926 524288 61440 61440 NT_STATUS_OK
ReadX 9926 585728 4096 4096 NT_STATUS_OK
ReadX 9926 589824 61440 61440 NT_STATUS_OK
ReadX 9926 651264 4096 4096 NT_STATUS_OK
ReadX 9926 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 61440 61440 NT_STATUS_OK
ReadX 9927 61440 4096 4096 NT_STATUS_OK
ReadX 9927 65536 61440 61440 NT_STATUS_OK
ReadX 9927 126976 4096 4096 NT_STATUS_OK
ReadX 9927 131072 61440 61440 NT_STATUS_OK
ReadX 9927 192512 4096 4096 NT_STATUS_OK
ReadX 9927 196608 61440 61440 NT_STATUS_OK
ReadX 9927 258048 4096 4096 NT_STATUS_OK
ReadX 9927 262144 61440 61440 NT_STATUS_OK
ReadX 9927 323584 4096 4096 NT_STATUS_OK
ReadX 9927 327680 61440 61440 NT_STATUS_OK
ReadX 9927 389120 4096 4096 NT_STATUS_OK
ReadX 9927 393216 61440 61440 NT_STATUS_OK
ReadX 9927 454656 4096 4096 NT_STATUS_OK
ReadX 9927 458752 61440 61440 NT_STATUS_OK
ReadX 9927 520192 4096 4096 NT_STATUS_OK
ReadX 9927 524288 61440 61440 NT_STATUS_OK
ReadX 9927 585728 4096 4096 NT_STATUS_OK
ReadX 9927 589824 61440 61440 NT_STATUS_OK
ReadX 9927 651264 4096 4096 NT_STATUS_OK
ReadX 9927 655360 61440 61440 NT_STATUS_OK
ReadX 9927 716800 4096 4096 NT_STATUS_OK
ReadX 9927 720896 61440 61440 NT_STATUS_OK
ReadX 9927 782336 4096 4096 NT_STATUS_OK
ReadX 9927 786432 61440 61440 NT_STATUS_OK
ReadX 9927 847872 4096 4096 NT_STATUS_OK
ReadX 9927 851968 61440 61440 NT_STATUS_OK
ReadX 9927 913408 4096 4096 NT_STATUS_OK
ReadX 9927 917504 61440 61440 NT_STATUS_OK
ReadX 9927 978944 4096 4096 NT_STATUS_OK
ReadX 9927 983040 61440 61440 NT_STATUS_OK
ReadX 9927 1044480 4096 4096 NT_STATUS_OK
ReadX 9927 1048576 61440 61440 NT_STATUS_OK
ReadX 9927 1110016 4096 4096 NT_STATUS_OK
ReadX 9927 1114112 61440 61440 NT_STATUS_OK
ReadX 9927 1175552 4096 4096 NT_STATUS_OK
ReadX 9927 1179648 61440 61440 NT_STATUS_OK
ReadX 9927 1241088 4096 4096 NT_STATUS_OK
ReadX 9927 1245184 61440 61440 NT_STATUS_OK
ReadX 9927 1306624 4096 4096 NT_STATUS_OK
ReadX 9927 1310720 61440 61440 NT_STATUS_OK
ReadX 9927 1372160 4096 4096 NT_STATUS_OK
ReadX 9927 1376256 61440 61440 NT_STATUS_OK
ReadX 9927 1437696 4096 4096 NT_STATUS_OK
ReadX 9927 1441792 61440 61440 NT_STATUS_OK
ReadX 9927 1503232 4096 4096 NT_STATUS_OK
ReadX 9927 1507328 61440 61440 NT_STATUS_OK
ReadX 9927 1568768 4096 4096 NT_STATUS_OK
ReadX 9927 1572864 61440 61440 NT_STATUS_OK
ReadX 9927 1634304 4096 4096 NT_STATUS_OK
ReadX 9927 1638400 61440 61440 NT_STATUS_OK
ReadX 9927 1699840 4096 4096 NT_STATUS_OK
ReadX 9927 1703936 61440 61440 NT_STATUS_OK
ReadX 9927 1765376 4096 4096 NT_STATUS_OK
ReadX 9927 1769472 61440 61440 NT_STATUS_OK
ReadX 9927 1830912 4096 4096 NT_STATUS_OK
ReadX 9927 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9928 NT_STATUS_OK
Close 9928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9931 NT_STATUS_OK
ReadX 9931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9932 NT_STATUS_OK
ReadX 9932 0 4096 4096 NT_STATUS_OK
ReadX 9932 4096 4096 4096 NT_STATUS_OK
ReadX 9932 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Close 9931 NT_STATUS_OK
Close 9932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9935 NT_STATUS_OK
ReadX 9935 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9936 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9936 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9935 NT_STATUS_OK
Close 9936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9940 NT_STATUS_OK
ReadX 9940 0 8192 8192 NT_STATUS_OK
ReadX 9940 8192 8192 8192 NT_STATUS_OK
ReadX 9940 16384 8192 8192 NT_STATUS_OK
ReadX 9940 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9942 NT_STATUS_OK
Close 9942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9945 NT_STATUS_OK
WriteX 9945 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9945 258 NT_STATUS_OK
WriteX 9945 0 10438 10438 NT_STATUS_OK
Close 9945 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9946 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9949 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9951 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
ReadX 9954 4096 4096 4096 NT_STATUS_OK
ReadX 9954 8192 4096 4096 NT_STATUS_OK
ReadX 9954 12288 8192 8192 NT_STATUS_OK
ReadX 9954 20480 8192 8192 NT_STATUS_OK
ReadX 9954 28672 8192 8192 NT_STATUS_OK
ReadX 9954 36864 8192 8192 NT_STATUS_OK
ReadX 9954 45056 8192 8192 NT_STATUS_OK
ReadX 9954 53248 8192 8192 NT_STATUS_OK
ReadX 9954 61440 8192 8192 NT_STATUS_OK
ReadX 9954 69632 8192 8192 NT_STATUS_OK
ReadX 9954 77824 8192 8192 NT_STATUS_OK
ReadX 9954 86016 8192 8192 NT_STATUS_OK
ReadX 9954 94208 8192 8192 NT_STATUS_OK
ReadX 9954 102400 8192 8192 NT_STATUS_OK
ReadX 9954 110592 8192 8192 NT_STATUS_OK
ReadX 9954 118784 8192 8192 NT_STATUS_OK
ReadX 9954 126976 8192 8192 NT_STATUS_OK
ReadX 9954 135168 8192 8192 NT_STATUS_OK
ReadX 9954 143360 8192 8192 NT_STATUS_OK
ReadX 9954 151552 8192 8192 NT_STATUS_OK
ReadX 9954 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9954 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Close 9951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9959 NT_STATUS_OK
WriteX 9959 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9959 258 NT_STATUS_OK
WriteX 9959 0 28489 28489 NT_STATUS_OK
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9960 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9962 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9963 NT_STATUS_OK
Close 9963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 8192 8192 NT_STATUS_OK
ReadX 9966 8192 8192 8192 NT_STATUS_OK
ReadX 9966 16384 8192 8192 NT_STATUS_OK
ReadX 9966 24576 8192 8192 NT_STATUS_OK
ReadX 9966 32768 16384 16384 NT_STATUS_OK
ReadX 9966 49152 8192 8192 NT_STATUS_OK
ReadX 9966 57344 8192 8192 NT_STATUS_OK
ReadX 9966 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9971 NT_STATUS_OK
WriteX 9971 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 258 NT_STATUS_OK
WriteX 9971 0 29253 29253 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9975 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9978 NT_STATUS_OK
WriteX 9978 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 258 NT_STATUS_OK
WriteX 9978 0 30183 30183 NT_STATUS_OK
Close 9978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9979 NT_STATUS_OK
Close 9979 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9981 NT_STATUS_OK
WriteX 9981 0 510 510 NT_STATUS_OK
WriteX 9981 510 512 512 NT_STATUS_OK
WriteX 9981 1022 510 510 NT_STATUS_OK
WriteX 9981 1532 510 510 NT_STATUS_OK
WriteX 9981 2042 168 168 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9982 NT_STATUS_OK
Close 9982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
WriteX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 61440 4096 4096 NT_STATUS_OK
ReadX 9985 126976 4096 4096 NT_STATUS_OK
WriteX 9985 0 65536 65536 NT_STATUS_OK
WriteX 9985 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 61440 4096 4096 NT_STATUS_OK
ReadX 9986 126976 4096 4096 NT_STATUS_OK
ReadX 9986 192512 4096 4096 NT_STATUS_OK
ReadX 9986 258048 4096 4096 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 61440 4096 4096 NT_STATUS_OK
ReadX 9987 126976 4096 4096 NT_STATUS_OK
ReadX 9987 192512 4096 4096 NT_STATUS_OK
ReadX 9987 258048 4096 4096 NT_STATUS_OK
ReadX 9987 323584 4096 4096 NT_STATUS_OK
ReadX 9987 389120 4096 4096 NT_STATUS_OK
ReadX 9987 454656 4096 4096 NT_STATUS_OK
ReadX 9987 520192 4096 4096 NT_STATUS_OK
WriteX 9987 0 65536 65536 NT_STATUS_OK
WriteX 9987 65536 65536 65536 NT_STATUS_OK
WriteX 9987 131072 65536 65536 NT_STATUS_OK
WriteX 9987 196608 65536 65536 NT_STATUS_OK
WriteX 9987 262144 65536 65536 NT_STATUS_OK
WriteX 9987 327680 65536 65536 NT_STATUS_OK
WriteX 9987 393216 65536 65536 NT_STATUS_OK
WriteX 9987 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9994 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10006 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10017 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10022 NT_STATUS_OK
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10032 NT_STATUS_OK
Close 10032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10037 NT_STATUS_OK
Close 10037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10056 NT_STATUS_OK
WriteX 10056 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10056 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10056 0 65536 65536 NT_STATUS_OK
WriteX 10056 65536 65536 65536 NT_STATUS_OK
WriteX 10056 131072 65536 65536 NT_STATUS_OK
WriteX 10056 196608 65536 65536 NT_STATUS_OK
WriteX 10056 262144 26634 26634 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10061 NT_STATUS_OK
Close 10061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10062 NT_STATUS_OK
Close 10062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
ReadX 10064 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10065 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10069 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10078 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10112 NT_STATUS_OK
Close 10112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10121 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
Close 10144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
Close 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10188 0 4096 4096 NT_STATUS_OK
Close 10188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
ReadX 10190 4096 4096 4096 NT_STATUS_OK
ReadX 10190 8192 4096 4096 NT_STATUS_OK
ReadX 10190 12288 4096 4096 NT_STATUS_OK
ReadX 10190 16384 4096 4096 NT_STATUS_OK
ReadX 10190 20480 4096 4096 NT_STATUS_OK
ReadX 10190 24576 4096 4096 NT_STATUS_OK
ReadX 10190 28672 4096 4096 NT_STATUS_OK
ReadX 10190 32768 4096 4096 NT_STATUS_OK
ReadX 10190 36864 4096 4096 NT_STATUS_OK
ReadX 10190 40960 4096 4096 NT_STATUS_OK
ReadX 10190 45056 4096 4096 NT_STATUS_OK
ReadX 10190 49152 4096 4096 NT_STATUS_OK
ReadX 10190 53248 4096 4096 NT_STATUS_OK
ReadX 10190 57344 4096 4096 NT_STATUS_OK
ReadX 10190 61440 4096 4096 NT_STATUS_OK
ReadX 10190 65536 4096 4096 NT_STATUS_OK
ReadX 10190 69632 4096 4096 NT_STATUS_OK
ReadX 10190 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10190 1004 NT_STATUS_OK
WriteX 10190 0 4096 4096 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10191 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
Close 10191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10196 NT_STATUS_OK
WriteX 10196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
WriteX 10196 0 65536 65536 NT_STATUS_OK
WriteX 10196 65536 19979 19979 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
SET_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
Close 10201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10202 1004 NT_STATUS_OK
WriteX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10203 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10208 NT_STATUS_OK
WriteX 10208 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10208 258 NT_STATUS_OK
WriteX 10208 0 65536 65536 NT_STATUS_OK
WriteX 10208 65536 17654 17654 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
SET_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10210 NT_STATUS_OK
SET_FILE_INFORMATION 10210 1004 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 4096 4096 NT_STATUS_OK
ReadX 10214 4096 4096 4096 NT_STATUS_OK
ReadX 10214 8192 4096 4096 NT_STATUS_OK
ReadX 10214 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10214 16384 4096 4096 NT_STATUS_OK
ReadX 10214 20480 4096 4096 NT_STATUS_OK
ReadX 10214 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10217 1004 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10218 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10220 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10223 NT_STATUS_OK
WriteX 10223 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10223 258 NT_STATUS_OK
WriteX 10223 0 65536 65536 NT_STATUS_OK
WriteX 10223 65536 19490 19490 NT_STATUS_OK
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
SET_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10225 NT_STATUS_OK
SET_FILE_INFORMATION 10225 1004 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10229 0 4096 4096 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
ReadX 10231 4096 4096 4096 NT_STATUS_OK
ReadX 10231 8192 4096 4096 NT_STATUS_OK
ReadX 10231 12288 4096 4096 NT_STATUS_OK
ReadX 10231 16384 4096 4096 NT_STATUS_OK
ReadX 10231 20480 4096 4096 NT_STATUS_OK
ReadX 10231 24576 4096 4096 NT_STATUS_OK
ReadX 10231 28672 4096 4096 NT_STATUS_OK
ReadX 10231 32768 4096 4096 NT_STATUS_OK
ReadX 10231 36864 4096 4096 NT_STATUS_OK
ReadX 10231 40960 4096 4096 NT_STATUS_OK
ReadX 10231 45056 4096 4096 NT_STATUS_OK
ReadX 10231 49152 4096 4096 NT_STATUS_OK
ReadX 10231 53248 4096 4096 NT_STATUS_OK
ReadX 10231 57344 4096 4096 NT_STATUS_OK
ReadX 10231 61440 4096 4096 NT_STATUS_OK
ReadX 10231 65536 4096 4096 NT_STATUS_OK
ReadX 10231 69632 4096 4096 NT_STATUS_OK
ReadX 10231 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10231 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10232 NT_STATUS_OK
SET_FILE_INFORMATION 10232 1004 NT_STATUS_OK
Close 10232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10237 NT_STATUS_OK
WriteX 10237 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 258 NT_STATUS_OK
WriteX 10237 0 65536 65536 NT_STATUS_OK
WriteX 10237 65536 8866 8866 NT_STATUS_OK
Close 10237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
SET_FILE_INFORMATION 10238 1004 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
Close 10238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
Close 10240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10245 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10248 NT_STATUS_OK
WriteX 10248 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 258 NT_STATUS_OK
WriteX 10248 0 65536 65536 NT_STATUS_OK
WriteX 10248 65536 9298 9298 NT_STATUS_OK
Close 10248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
WriteX 10249 0 4096 4096 NT_STATUS_OK
Flush 10249 NT_STATUS_OK
SET_FILE_INFORMATION 10249 1004 NT_STATUS_OK
WriteX 10249 0 4096 4096 NT_STATUS_OK
Flush 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10250 NT_STATUS_OK
SET_FILE_INFORMATION 10250 1004 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10255 0 4096 4096 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10256 4096 4096 4096 NT_STATUS_OK
ReadX 10256 8192 4096 4096 NT_STATUS_OK
ReadX 10256 12288 4096 4096 NT_STATUS_OK
ReadX 10256 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10259 1004 NT_STATUS_OK
WriteX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10265 NT_STATUS_OK
WriteX 10265 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 258 NT_STATUS_OK
WriteX 10265 0 65536 65536 NT_STATUS_OK
WriteX 10265 65536 11540 11540 NT_STATUS_OK
Close 10265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10267 NT_STATUS_OK
SET_FILE_INFORMATION 10267 1004 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10269 NT_STATUS_OK
Close 10269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 61440 4096 4096 NT_STATUS_OK
ReadX 10271 126976 4096 4096 NT_STATUS_OK
WriteX 10271 0 65536 65536 NT_STATUS_OK
WriteX 10271 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 61440 4096 4096 NT_STATUS_OK
ReadX 10272 126976 4096 4096 NT_STATUS_OK
ReadX 10272 192512 4096 4096 NT_STATUS_OK
ReadX 10272 258048 4096 4096 NT_STATUS_OK
WriteX 10272 0 65536 65536 NT_STATUS_OK
WriteX 10272 65536 65536 65536 NT_STATUS_OK
WriteX 10272 131072 65536 65536 NT_STATUS_OK
WriteX 10272 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 61440 4096 4096 NT_STATUS_OK
ReadX 10273 126976 4096 4096 NT_STATUS_OK
ReadX 10273 192512 4096 4096 NT_STATUS_OK
ReadX 10273 258048 4096 4096 NT_STATUS_OK
ReadX 10273 323584 4096 4096 NT_STATUS_OK
ReadX 10273 389120 4096 4096 NT_STATUS_OK
ReadX 10273 454656 4096 4096 NT_STATUS_OK
ReadX 10273 520192 4096 4096 NT_STATUS_OK
WriteX 10273 0 65536 65536 NT_STATUS_OK
WriteX 10273 65536 65536 65536 NT_STATUS_OK
WriteX 10273 131072 65536 65536 NT_STATUS_OK
WriteX 10273 196608 65536 65536 NT_STATUS_OK
WriteX 10273 262144 65536 65536 NT_STATUS_OK
WriteX 10273 327680 65536 65536 NT_STATUS_OK
WriteX 10273 393216 65536 65536 NT_STATUS_OK
WriteX 10273 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
ReadX 10274 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10275 NT_STATUS_OK
WriteX 10275 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 258 NT_STATUS_OK
WriteX 10275 0 53 53 NT_STATUS_OK
Close 10275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10214 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10274 8192 4096 4096 NT_STATUS_OK
ReadX 10274 12288 4096 4096 NT_STATUS_OK
WriteX 10278 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
ReadX 10274 16384 4096 4096 NT_STATUS_OK
ReadX 10274 20480 4096 4096 NT_STATUS_OK
WriteX 10278 0 15360 15360 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
WriteX 10279 0 4096 4096 NT_STATUS_OK
Close 10279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10283 NT_STATUS_OK
Close 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10282 4096 4096 4096 NT_STATUS_OK
ReadX 10282 8192 4096 4096 NT_STATUS_OK
ReadX 10282 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
ReadX 10285 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
ReadX 10286 4096 4096 4096 NT_STATUS_OK
ReadX 10286 8192 4096 4096 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10287 NT_STATUS_OK
WriteX 10287 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 258 NT_STATUS_OK
WriteX 10287 0 15360 15360 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10288 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10288 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10289 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10292 NT_STATUS_OK
SET_FILE_INFORMATION 10292 1004 NT_STATUS_OK
Close 10292 NT_STATUS_OK
WriteX 10288 0 4096 4096 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
ReadX 10295 4096 4096 4096 NT_STATUS_OK
ReadX 10295 8192 4096 4096 NT_STATUS_OK
ReadX 10295 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10297 NT_STATUS_OK
WriteX 10297 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10297 258 NT_STATUS_OK
WriteX 10297 0 53 53 NT_STATUS_OK
Close 10297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10298 NT_STATUS_OK
Close 10298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10296 4096 4096 4096 NT_STATUS_OK
ReadX 10296 8192 4096 4096 NT_STATUS_OK
ReadX 10296 12288 4096 4096 NT_STATUS_OK
WriteX 10300 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 12006 12006 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10304 4096 4096 4096 NT_STATUS_OK
ReadX 10304 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10307 NT_STATUS_OK
WriteX 10307 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10307 258 NT_STATUS_OK
WriteX 10307 0 11991 11991 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10308 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10309 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10312 NT_STATUS_OK
SET_FILE_INFORMATION 10312 1004 NT_STATUS_OK
Close 10312 NT_STATUS_OK
WriteX 10308 0 4096 4096 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10315 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
ReadX 10315 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
WriteX 10315 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
Close 10291 NT_STATUS_OK
WriteX 10295 0 19054 19054 NT_STATUS_OK
WriteX 10315 0 12288 12288 NT_STATUS_OK
Close 10311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 61440 61440 NT_STATUS_OK
ReadX 10322 61440 4096 4096 NT_STATUS_OK
ReadX 10322 65536 61440 61440 NT_STATUS_OK
ReadX 10322 126976 4096 4096 NT_STATUS_OK
ReadX 10322 131072 61440 61440 NT_STATUS_OK
ReadX 10322 192512 4096 4096 NT_STATUS_OK
ReadX 10322 196608 61440 61440 NT_STATUS_OK
ReadX 10322 258048 4096 4096 NT_STATUS_OK
ReadX 10322 262144 61440 61440 NT_STATUS_OK
ReadX 10322 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 61440 61440 NT_STATUS_OK
ReadX 10323 61440 4096 4096 NT_STATUS_OK
ReadX 10323 65536 61440 61440 NT_STATUS_OK
ReadX 10323 126976 4096 4096 NT_STATUS_OK
ReadX 10323 131072 61440 61440 NT_STATUS_OK
ReadX 10323 192512 4096 4096 NT_STATUS_OK
ReadX 10323 196608 61440 61440 NT_STATUS_OK
ReadX 10323 258048 4096 4096 NT_STATUS_OK
ReadX 10323 262144 61440 61440 NT_STATUS_OK
ReadX 10323 323584 4096 4096 NT_STATUS_OK
ReadX 10323 327680 61440 61440 NT_STATUS_OK
ReadX 10323 389120 4096 4096 NT_STATUS_OK
ReadX 10323 393216 61440 61440 NT_STATUS_OK
ReadX 10323 454656 4096 4096 NT_STATUS_OK
ReadX 10323 458752 61440 61440 NT_STATUS_OK
ReadX 10323 520192 4096 4096 NT_STATUS_OK
ReadX 10323 524288 61440 61440 NT_STATUS_OK
ReadX 10323 585728 4096 4096 NT_STATUS_OK
ReadX 10323 589824 61440 61440 NT_STATUS_OK
ReadX 10323 651264 4096 4096 NT_STATUS_OK
ReadX 10323 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 61440 61440 NT_STATUS_OK
ReadX 10324 61440 4096 4096 NT_STATUS_OK
ReadX 10324 65536 61440 61440 NT_STATUS_OK
ReadX 10324 126976 4096 4096 NT_STATUS_OK
ReadX 10324 131072 61440 61440 NT_STATUS_OK
ReadX 10324 192512 4096 4096 NT_STATUS_OK
ReadX 10324 196608 61440 61440 NT_STATUS_OK
ReadX 10324 258048 4096 4096 NT_STATUS_OK
ReadX 10324 262144 61440 61440 NT_STATUS_OK
ReadX 10324 323584 4096 4096 NT_STATUS_OK
ReadX 10324 327680 61440 61440 NT_STATUS_OK
ReadX 10324 389120 4096 4096 NT_STATUS_OK
ReadX 10324 393216 61440 61440 NT_STATUS_OK
ReadX 10324 454656 4096 4096 NT_STATUS_OK
ReadX 10324 458752 61440 61440 NT_STATUS_OK
ReadX 10324 520192 4096 4096 NT_STATUS_OK
ReadX 10324 524288 61440 61440 NT_STATUS_OK
ReadX 10324 585728 4096 4096 NT_STATUS_OK
ReadX 10324 589824 61440 61440 NT_STATUS_OK
ReadX 10324 651264 4096 4096 NT_STATUS_OK
ReadX 10324 655360 61440 61440 NT_STATUS_OK
ReadX 10324 716800 4096 4096 NT_STATUS_OK
ReadX 10324 720896 61440 61440 NT_STATUS_OK
ReadX 10324 782336 4096 4096 NT_STATUS_OK
ReadX 10324 786432 61440 61440 NT_STATUS_OK
ReadX 10324 847872 4096 4096 NT_STATUS_OK
ReadX 10324 851968 61440 61440 NT_STATUS_OK
ReadX 10324 913408 4096 4096 NT_STATUS_OK
ReadX 10324 917504 61440 61440 NT_STATUS_OK
ReadX 10324 978944 4096 4096 NT_STATUS_OK
ReadX 10324 983040 61440 61440 NT_STATUS_OK
ReadX 10324 1044480 4096 4096 NT_STATUS_OK
ReadX 10324 1048576 61440 61440 NT_STATUS_OK
ReadX 10324 1110016 4096 4096 NT_STATUS_OK
ReadX 10324 1114112 61440 61440 NT_STATUS_OK
ReadX 10324 1175552 4096 4096 NT_STATUS_OK
ReadX 10324 1179648 61440 61440 NT_STATUS_OK
ReadX 10324 1241088 4096 4096 NT_STATUS_OK
ReadX 10324 1245184 61440 61440 NT_STATUS_OK
ReadX 10324 1306624 4096 4096 NT_STATUS_OK
ReadX 10324 1310720 61440 61440 NT_STATUS_OK
ReadX 10324 1372160 4096 4096 NT_STATUS_OK
ReadX 10324 1376256 61440 61440 NT_STATUS_OK
ReadX 10324 1437696 4096 4096 NT_STATUS_OK
ReadX 10324 1441792 61440 61440 NT_STATUS_OK
ReadX 10324 1503232 4096 4096 NT_STATUS_OK
ReadX 10324 1507328 61440 61440 NT_STATUS_OK
ReadX 10324 1568768 4096 4096 NT_STATUS_OK
ReadX 10324 1572864 61440 61440 NT_STATUS_OK
ReadX 10324 1634304 4096 4096 NT_STATUS_OK
ReadX 10324 1638400 61440 61440 NT_STATUS_OK
ReadX 10324 1699840 4096 4096 NT_STATUS_OK
ReadX 10324 1703936 61440 61440 NT_STATUS_OK
ReadX 10324 1765376 4096 4096 NT_STATUS_OK
ReadX 10324 1769472 61440 61440 NT_STATUS_OK
ReadX 10324 1830912 4096 4096 NT_STATUS_OK
ReadX 10324 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10331 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 1004 NT_STATUS_OK
WriteX 10331 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10333 NT_STATUS_OK
WriteX 10333 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10333 258 NT_STATUS_OK
WriteX 10333 0 491 491 NT_STATUS_OK
Close 10333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10331 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10336 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10337 NT_STATUS_OK
WriteX 10337 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 258 NT_STATUS_OK
WriteX 10337 0 543 543 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10322 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 2048 2048 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
Flush 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10357 NT_STATUS_OK
WriteX 10357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10357 258 NT_STATUS_OK
WriteX 10357 0 2048 2048 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10363 NT_STATUS_OK
WriteX 10363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
WriteX 10363 0 2048 2048 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 2048 2048 NT_STATUS_OK
ReadX 10342 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10342 0 8192 8192 NT_STATUS_OK
WriteX 10343 0 4096 4096 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10368 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10388 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1004 NT_STATUS_OK
WriteX 10388 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 258 NT_STATUS_OK
WriteX 10388 0 2048 2048 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10396 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 258 NT_STATUS_OK
WriteX 10396 0 2048 2048 NT_STATUS_OK
Close 10396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
Flush 10389 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
Flush 10397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10391 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10399 NT_STATUS_OK
WriteX 10399 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 258 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Close 10399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10402 NT_STATUS_OK
WriteX 10402 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10402 258 NT_STATUS_OK
WriteX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10403 0 4096 4096 NT_STATUS_OK
Close 10400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10406 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10408 NT_STATUS_OK
ReadX 10408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10410 NT_STATUS_OK
WriteX 10410 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 2048 2048 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10412 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10425 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10427 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10430 NT_STATUS_OK
ReadX 10430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10447 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 1004 NT_STATUS_OK
WriteX 10447 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 258 NT_STATUS_OK
WriteX 10447 0 2048 2048 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10459 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 1004 NT_STATUS_OK
WriteX 10459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 258 NT_STATUS_OK
WriteX 10459 0 2048 2048 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10460 NT_STATUS_OK
ReadX 10460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10467 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 1004 NT_STATUS_OK
WriteX 10467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 258 NT_STATUS_OK
WriteX 10467 0 2048 2048 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10468 NT_STATUS_OK
ReadX 10468 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Flush 10448 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
WriteX 10468 0 4096 4096 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10468 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 4096 16384 16384 NT_STATUS_OK
ReadX 10430 4096 16384 16384 NT_STATUS_OK
ReadX 10462 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 2048 2048 NT_STATUS_OK
WriteX 10470 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10471 NT_STATUS_OK
QUERY_FILE_INFORMATION 10471 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10473 NT_STATUS_OK
QUERY_FILE_INFORMATION 10473 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10475 NT_STATUS_OK
QUERY_FILE_INFORMATION 10475 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10478 4096 16384 16384 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
WriteX 10480 0 4096 4096 NT_STATUS_OK
WriteX 10481 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 8192 8192 NT_STATUS_OK
ReadX 10484 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10498 0 4096 4096 NT_STATUS_OK
ReadX 10498 4096 4096 4096 NT_STATUS_OK
ReadX 10498 8192 4096 4096 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
ReadX 10499 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
WriteX 10480 0 4096 4096 NT_STATUS_OK
WriteX 10481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
ReadX 10507 4096 4096 4096 NT_STATUS_OK
WriteX 10507 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
ReadX 10509 4096 4096 4096 NT_STATUS_OK
WriteX 10509 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10510 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10512 0 4096 4096 NT_STATUS_OK
ReadX 10512 4096 4096 4096 NT_STATUS_OK
ReadX 10512 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
ReadX 10513 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10530 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 1004 NT_STATUS_OK
WriteX 10530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 2048 2048 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10536 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 1004 NT_STATUS_OK
WriteX 10536 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 258 NT_STATUS_OK
WriteX 10536 0 2048 2048 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10537 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10520 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10538 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10515 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10540 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 61440 4096 4096 NT_STATUS_OK
ReadX 10542 126976 4096 4096 NT_STATUS_OK
WriteX 10542 0 65536 65536 NT_STATUS_OK
WriteX 10542 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 61440 4096 4096 NT_STATUS_OK
ReadX 10543 126976 4096 4096 NT_STATUS_OK
ReadX 10543 192512 4096 4096 NT_STATUS_OK
ReadX 10543 258048 4096 4096 NT_STATUS_OK
WriteX 10543 0 65536 65536 NT_STATUS_OK
WriteX 10543 65536 65536 65536 NT_STATUS_OK
WriteX 10543 131072 65536 65536 NT_STATUS_OK
WriteX 10543 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 61440 4096 4096 NT_STATUS_OK
ReadX 10544 126976 4096 4096 NT_STATUS_OK
ReadX 10544 192512 4096 4096 NT_STATUS_OK
ReadX 10544 258048 4096 4096 NT_STATUS_OK
ReadX 10544 323584 4096 4096 NT_STATUS_OK
ReadX 10544 389120 4096 4096 NT_STATUS_OK
ReadX 10544 454656 4096 4096 NT_STATUS_OK
ReadX 10544 520192 4096 4096 NT_STATUS_OK
WriteX 10544 0 65536 65536 NT_STATUS_OK
WriteX 10544 65536 65536 65536 NT_STATUS_OK
WriteX 10544 131072 65536 65536 NT_STATUS_OK
WriteX 10544 196608 65536 65536 NT_STATUS_OK
WriteX 10544 262144 65536 65536 NT_STATUS_OK
WriteX 10544 327680 65536 65536 NT_STATUS_OK
WriteX 10544 393216 65536 65536 NT_STATUS_OK
WriteX 10544 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10545 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10545 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10545 8192 4096 4096 NT_STATUS_OK
ReadX 10545 12288 4096 4096 NT_STATUS_OK
ReadX 10545 16384 4096 4096 NT_STATUS_OK
ReadX 10545 20480 4096 4096 NT_STATUS_OK
ReadX 10545 24576 4096 4096 NT_STATUS_OK
ReadX 10545 28672 4096 4096 NT_STATUS_OK
ReadX 10545 32768 4096 4096 NT_STATUS_OK
ReadX 10545 36864 4096 4096 NT_STATUS_OK
ReadX 10545 40960 4096 4096 NT_STATUS_OK
ReadX 10545 45056 4096 4096 NT_STATUS_OK
ReadX 10545 49152 4096 4096 NT_STATUS_OK
ReadX 10545 53248 4096 4096 NT_STATUS_OK
ReadX 10545 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10545 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10548 NT_STATUS_OK
WriteX 10548 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10548 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 57088 57088 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10549 NT_STATUS_OK
SET_FILE_INFORMATION 10549 1004 NT_STATUS_OK
Close 10549 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10552 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10553 NT_STATUS_OK
WriteX 10553 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10553 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
WriteX 10553 0 51456 51456 NT_STATUS_OK
WriteX 10553 0 4096 4096 NT_STATUS_OK
Flush 10553 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
WriteX 10553 0 4096 4096 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10555 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10557 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10562 NT_STATUS_OK
WriteX 10562 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 258 NT_STATUS_OK
WriteX 10562 0 53077 53077 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10563 NT_STATUS_OK
WriteX 10563 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 1856 1856 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Flush 10563 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10565 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10572 NT_STATUS_OK
WriteX 10572 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 258 NT_STATUS_OK
WriteX 10572 0 7983 7983 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10577 NT_STATUS_OK
WriteX 10577 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10577 258 NT_STATUS_OK
WriteX 10577 0 65536 65536 NT_STATUS_OK
WriteX 10577 65536 65536 65536 NT_STATUS_OK
WriteX 10577 131072 65536 65536 NT_STATUS_OK
WriteX 10577 196608 65536 65536 NT_STATUS_OK
WriteX 10577 262144 65536 65536 NT_STATUS_OK
WriteX 10577 327680 65536 65536 NT_STATUS_OK
WriteX 10577 393216 65536 65536 NT_STATUS_OK
WriteX 10577 458752 46731 46731 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10578 NT_STATUS_OK
WriteX 10578 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10567 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 0 65536 65536 NT_STATUS_OK
WriteX 10578 65536 22848 22848 NT_STATUS_OK
WriteX 10578 0 4096 4096 NT_STATUS_OK
Flush 10578 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 0 4096 4096 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10580 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10582 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10583 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10583 1004 NT_STATUS_OK
ReadX 10583 8192 4096 4096 NT_STATUS_OK
ReadX 10583 12288 4096 4096 NT_STATUS_OK
ReadX 10583 16384 4096 4096 NT_STATUS_OK
ReadX 10583 20480 4096 4096 NT_STATUS_OK
ReadX 10583 24576 4096 4096 NT_STATUS_OK
ReadX 10583 28672 4096 4096 NT_STATUS_OK
ReadX 10583 32768 4096 4096 NT_STATUS_OK
ReadX 10583 36864 4096 4096 NT_STATUS_OK
ReadX 10583 40960 4096 4096 NT_STATUS_OK
ReadX 10583 45056 4096 4096 NT_STATUS_OK
ReadX 10583 49152 4096 4096 NT_STATUS_OK
ReadX 10583 53248 4096 4096 NT_STATUS_OK
ReadX 10583 57344 4096 4096 NT_STATUS_OK
ReadX 10583 61440 4096 4096 NT_STATUS_OK
ReadX 10583 65536 4096 4096 NT_STATUS_OK
ReadX 10583 69632 4096 4096 NT_STATUS_OK
ReadX 10583 73728 4096 4096 NT_STATUS_OK
ReadX 10583 77824 4096 4096 NT_STATUS_OK
ReadX 10583 81920 4096 4096 NT_STATUS_OK
ReadX 10583 86016 4096 4096 NT_STATUS_OK
ReadX 10583 90112 4096 4096 NT_STATUS_OK
ReadX 10583 94208 4096 4096 NT_STATUS_OK
ReadX 10583 98304 4096 4096 NT_STATUS_OK
ReadX 10583 102400 4096 4096 NT_STATUS_OK
ReadX 10583 106496 4096 4096 NT_STATUS_OK
ReadX 10583 110592 4096 4096 NT_STATUS_OK
ReadX 10583 114688 4096 4096 NT_STATUS_OK
ReadX 10583 118784 4096 4096 NT_STATUS_OK
ReadX 10583 122880 4096 4096 NT_STATUS_OK
ReadX 10583 126976 4096 4096 NT_STATUS_OK
ReadX 10583 131072 4096 4096 NT_STATUS_OK
ReadX 10583 135168 4096 4096 NT_STATUS_OK
ReadX 10583 139264 4096 4096 NT_STATUS_OK
ReadX 10583 143360 4096 4096 NT_STATUS_OK
ReadX 10583 147456 4096 4096 NT_STATUS_OK
ReadX 10583 151552 4096 4096 NT_STATUS_OK
ReadX 10583 155648 4096 4096 NT_STATUS_OK
ReadX 10583 159744 4096 4096 NT_STATUS_OK
ReadX 10583 163840 4096 4096 NT_STATUS_OK
ReadX 10583 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10583 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10586 NT_STATUS_OK
WriteX 10586 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 258 NT_STATUS_OK
Close 10583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10587 NT_STATUS_OK
SET_FILE_INFORMATION 10587 1004 NT_STATUS_OK
Close 10587 NT_STATUS_OK
WriteX 10586 0 42388 42388 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10590 NT_STATUS_OK
ReadX 10590 0 4096 4096 NT_STATUS_OK
ReadX 10590 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10591 NT_STATUS_OK
WriteX 10591 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10591 258 NT_STATUS_OK
SET_FILE_INFORMATION 10591 1004 NT_STATUS_OK
WriteX 10591 0 42652 42652 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
ReadX 10595 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10597 NT_STATUS_OK
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10600 NT_STATUS_OK
WriteX 10600 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 258 NT_STATUS_OK
WriteX 10600 0 65536 65536 NT_STATUS_OK
WriteX 10600 65536 49 49 NT_STATUS_OK
Close 10600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 61440 61440 NT_STATUS_OK
ReadX 10601 61440 4096 4096 NT_STATUS_OK
ReadX 10601 65536 61440 61440 NT_STATUS_OK
ReadX 10601 126976 4096 4096 NT_STATUS_OK
ReadX 10601 131072 61440 61440 NT_STATUS_OK
ReadX 10601 192512 4096 4096 NT_STATUS_OK
ReadX 10601 196608 61440 61440 NT_STATUS_OK
ReadX 10601 258048 4096 4096 NT_STATUS_OK
ReadX 10601 262144 61440 61440 NT_STATUS_OK
ReadX 10601 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 61440 61440 NT_STATUS_OK
ReadX 10602 61440 4096 4096 NT_STATUS_OK
ReadX 10602 65536 61440 61440 NT_STATUS_OK
ReadX 10602 126976 4096 4096 NT_STATUS_OK
ReadX 10602 131072 61440 61440 NT_STATUS_OK
ReadX 10602 192512 4096 4096 NT_STATUS_OK
ReadX 10602 196608 61440 61440 NT_STATUS_OK
ReadX 10602 258048 4096 4096 NT_STATUS_OK
ReadX 10602 262144 61440 61440 NT_STATUS_OK
ReadX 10602 323584 4096 4096 NT_STATUS_OK
ReadX 10602 327680 61440 61440 NT_STATUS_OK
ReadX 10602 389120 4096 4096 NT_STATUS_OK
ReadX 10602 393216 61440 61440 NT_STATUS_OK
ReadX 10602 454656 4096 4096 NT_STATUS_OK
ReadX 10602 458752 61440 61440 NT_STATUS_OK
ReadX 10602 520192 4096 4096 NT_STATUS_OK
ReadX 10602 524288 61440 61440 NT_STATUS_OK
ReadX 10602 585728 4096 4096 NT_STATUS_OK
ReadX 10602 589824 61440 61440 NT_STATUS_OK
ReadX 10602 651264 4096 4096 NT_STATUS_OK
ReadX 10602 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 61440 61440 NT_STATUS_OK
ReadX 10603 61440 4096 4096 NT_STATUS_OK
ReadX 10603 65536 61440 61440 NT_STATUS_OK
ReadX 10603 126976 4096 4096 NT_STATUS_OK
ReadX 10603 131072 61440 61440 NT_STATUS_OK
ReadX 10603 192512 4096 4096 NT_STATUS_OK
ReadX 10603 196608 61440 61440 NT_STATUS_OK
ReadX 10603 258048 4096 4096 NT_STATUS_OK
ReadX 10603 262144 61440 61440 NT_STATUS_OK
ReadX 10603 323584 4096 4096 NT_STATUS_OK
ReadX 10603 327680 61440 61440 NT_STATUS_OK
ReadX 10603 389120 4096 4096 NT_STATUS_OK
ReadX 10603 393216 61440 61440 NT_STATUS_OK
ReadX 10603 454656 4096 4096 NT_STATUS_OK
ReadX 10603 458752 61440 61440 NT_STATUS_OK
ReadX 10603 520192 4096 4096 NT_STATUS_OK
ReadX 10603 524288 61440 61440 NT_STATUS_OK
ReadX 10603 585728 4096 4096 NT_STATUS_OK
ReadX 10603 589824 61440 61440 NT_STATUS_OK
ReadX 10603 651264 4096 4096 NT_STATUS_OK
ReadX 10603 655360 61440 61440 NT_STATUS_OK
ReadX 10603 716800 4096 4096 NT_STATUS_OK
ReadX 10603 720896 61440 61440 NT_STATUS_OK
ReadX 10603 782336 4096 4096 NT_STATUS_OK
ReadX 10603 786432 61440 61440 NT_STATUS_OK
ReadX 10603 847872 4096 4096 NT_STATUS_OK
ReadX 10603 851968 61440 61440 NT_STATUS_OK
ReadX 10603 913408 4096 4096 NT_STATUS_OK
ReadX 10603 917504 61440 61440 NT_STATUS_OK
ReadX 10603 978944 4096 4096 NT_STATUS_OK
ReadX 10603 983040 61440 61440 NT_STATUS_OK
ReadX 10603 1044480 4096 4096 NT_STATUS_OK
ReadX 10603 1048576 61440 61440 NT_STATUS_OK
ReadX 10603 1110016 4096 4096 NT_STATUS_OK
ReadX 10603 1114112 61440 61440 NT_STATUS_OK
ReadX 10603 1175552 4096 4096 NT_STATUS_OK
ReadX 10603 1179648 61440 61440 NT_STATUS_OK
ReadX 10603 1241088 4096 4096 NT_STATUS_OK
ReadX 10603 1245184 61440 61440 NT_STATUS_OK
ReadX 10603 1306624 4096 4096 NT_STATUS_OK
ReadX 10603 1310720 61440 61440 NT_STATUS_OK
ReadX 10603 1372160 4096 4096 NT_STATUS_OK
ReadX 10603 1376256 61440 61440 NT_STATUS_OK
ReadX 10603 1437696 4096 4096 NT_STATUS_OK
ReadX 10603 1441792 61440 61440 NT_STATUS_OK
ReadX 10603 1503232 4096 4096 NT_STATUS_OK
ReadX 10603 1507328 61440 61440 NT_STATUS_OK
ReadX 10603 1568768 4096 4096 NT_STATUS_OK
ReadX 10603 1572864 61440 61440 NT_STATUS_OK
ReadX 10603 1634304 4096 4096 NT_STATUS_OK
ReadX 10603 1638400 61440 61440 NT_STATUS_OK
ReadX 10603 1699840 4096 4096 NT_STATUS_OK
ReadX 10603 1703936 61440 61440 NT_STATUS_OK
ReadX 10603 1765376 4096 4096 NT_STATUS_OK
ReadX 10603 1769472 61440 61440 NT_STATUS_OK
ReadX 10603 1830912 4096 4096 NT_STATUS_OK
ReadX 10603 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10605 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
ReadX 10605 2156 24 24 NT_STATUS_OK
ReadX 10605 2139 276 276 NT_STATUS_OK
ReadX 10605 2136 14 14 NT_STATUS_OK
ReadX 10605 2136 7 7 NT_STATUS_OK
ReadX 10605 2138 12 12 NT_STATUS_OK
ReadX 10605 2137 8 8 NT_STATUS_OK
ReadX 10605 2135 15 15 NT_STATUS_OK
ReadX 10605 0 16 16 NT_STATUS_OK
ReadX 10605 16 2048 2048 NT_STATUS_OK
ReadX 10605 2064 2048 2048 NT_STATUS_OK
ReadX 10605 257 2048 2048 NT_STATUS_OK
ReadX 10605 385 2048 2048 NT_STATUS_OK
ReadX 10605 513 2048 2048 NT_STATUS_OK
ReadX 10605 641 2048 2048 NT_STATUS_OK
ReadX 10605 769 2048 2048 NT_STATUS_OK
ReadX 10605 897 2048 2048 NT_STATUS_OK
ReadX 10605 1025 2048 2048 NT_STATUS_OK
ReadX 10605 1153 2048 2048 NT_STATUS_OK
ReadX 10605 1281 2048 2048 NT_STATUS_OK
ReadX 10605 1409 2048 2048 NT_STATUS_OK
ReadX 10605 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10607 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10610 NT_STATUS_OK
WriteX 10610 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10610 258 NT_STATUS_OK
WriteX 10610 0 10575 10575 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10615 NT_STATUS_OK
LockX 10615 2147483538 1 NT_STATUS_OK
UnlockX 10615 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1005 NT_STATUS_OK
ReadX 10615 0 512 512 NT_STATUS_OK
ReadX 10615 512 512 512 NT_STATUS_OK
ReadX 10615 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10616 NT_STATUS_OK
QUERY_FILE_INFORMATION 10616 1005 NT_STATUS_OK
ReadX 10616 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10617 NT_STATUS_OK
LockX 10617 2147483538 1 NT_STATUS_OK
UnlockX 10617 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10617 1005 NT_STATUS_OK
ReadX 10617 0 512 512 NT_STATUS_OK
ReadX 10617 512 512 512 NT_STATUS_OK
ReadX 10617 1024 512 512 NT_STATUS_OK
ReadX 10617 288 20 20 NT_STATUS_OK
ReadX 10617 308 2084 2084 NT_STATUS_OK
ReadX 10617 388 2084 2084 NT_STATUS_OK
ReadX 10617 388 2084 2084 NT_STATUS_OK
ReadX 10604 2157 1386 1386 NT_STATUS_OK
ReadX 10617 2472 399 399 NT_STATUS_OK
ReadX 10617 3072 1536 1536 NT_STATUS_OK
ReadX 10617 544 149 149 NT_STATUS_OK
ReadX 10617 693 485 485 NT_STATUS_OK
Close 10617 NT_STATUS_OK
ReadX 10604 2157 4096 4096 NT_STATUS_OK
ReadX 10604 6253 4096 4096 NT_STATUS_OK
ReadX 10604 10349 4096 4096 NT_STATUS_OK
ReadX 10604 14445 4096 4096 NT_STATUS_OK
ReadX 10604 18541 4096 4096 NT_STATUS_OK
ReadX 10604 22637 256 256 NT_STATUS_OK
ReadX 10604 22893 4096 4096 NT_STATUS_OK
ReadX 10604 26989 4096 4096 NT_STATUS_OK
ReadX 10604 31085 4096 4096 NT_STATUS_OK
ReadX 10604 35181 4096 4096 NT_STATUS_OK
ReadX 10604 39277 4096 4096 NT_STATUS_OK
ReadX 10604 43373 4096 4096 NT_STATUS_OK
ReadX 10604 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10604 2157 1024 1024 NT_STATUS_OK
ReadX 10604 1667 4688 4688 NT_STATUS_OK
ReadX 10604 6355 3516 3516 NT_STATUS_OK
ReadX 10604 9871 16384 16384 NT_STATUS_OK
ReadX 10604 26255 3771 3771 NT_STATUS_OK
ReadX 10604 30026 2048 2048 NT_STATUS_OK
ReadX 10604 32074 1024 1024 NT_STATUS_OK
ReadX 10604 33098 6652 6652 NT_STATUS_OK
ReadX 10604 39750 16384 16384 NT_STATUS_OK
ReadX 10604 56134 10496 10496 NT_STATUS_OK
ReadX 10604 66630 1784 1784 NT_STATUS_OK
ReadX 10604 68414 90 90 NT_STATUS_OK
ReadX 10604 68504 273 273 NT_STATUS_OK
ReadX 10604 68777 1600 1600 NT_STATUS_OK
ReadX 10604 70377 640 640 NT_STATUS_OK
ReadX 10604 71017 1280 1280 NT_STATUS_OK
ReadX 10604 72297 8464 8464 NT_STATUS_OK
ReadX 10604 80761 158 158 NT_STATUS_OK
ReadX 10604 80919 912 912 NT_STATUS_OK
ReadX 10604 81831 1980 1980 NT_STATUS_OK
ReadX 10604 83811 2256 2256 NT_STATUS_OK
ReadX 10604 86067 400 400 NT_STATUS_OK
ReadX 10604 86467 252 252 NT_STATUS_OK
ReadX 10604 86719 42 42 NT_STATUS_OK
ReadX 10604 86761 725 725 NT_STATUS_OK
ReadX 10604 2009 512 512 NT_STATUS_OK
ReadX 10604 3895 9 9 NT_STATUS_OK
ReadX 10604 3781 46 46 NT_STATUS_OK
ReadX 10604 4059 92 92 NT_STATUS_OK
ReadX 10604 3781 92 92 NT_STATUS_OK
ReadX 10604 3986 184 184 NT_STATUS_OK
ReadX 10604 3987 16384 16384 NT_STATUS_OK
ReadX 10604 3902 16384 16384 NT_STATUS_OK
ReadX 10604 3781 10240 10240 NT_STATUS_OK
ReadX 10604 3821 16384 16384 NT_STATUS_OK
ReadX 10604 3891 935 935 NT_STATUS_OK
ReadX 10604 4060 10240 10240 NT_STATUS_OK
ReadX 10604 4059 184 184 NT_STATUS_OK
ReadX 10604 256 184 184 NT_STATUS_OK
ReadX 10604 256 1026 1026 NT_STATUS_OK
ReadX 10604 3901 326 326 NT_STATUS_OK
ReadX 10604 3899 652 652 NT_STATUS_OK
ReadX 10604 256 2 2 NT_STATUS_OK
ReadX 10604 258 4948 4948 NT_STATUS_OK
Close 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10619 NT_STATUS_OK
Close 10619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10622 NT_STATUS_OK
WriteX 10622 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 258 NT_STATUS_OK
WriteX 10622 0 65536 65536 NT_STATUS_OK
WriteX 10622 65536 65536 65536 NT_STATUS_OK
WriteX 10622 131072 65536 65536 NT_STATUS_OK
WriteX 10622 196608 65536 65536 NT_STATUS_OK
WriteX 10622 262144 65536 65536 NT_STATUS_OK
WriteX 10622 327680 65536 65536 NT_STATUS_OK
WriteX 10622 393216 65536 65536 NT_STATUS_OK
WriteX 10622 458752 65536 65536 NT_STATUS_OK
WriteX 10622 524288 65536 65536 NT_STATUS_OK
WriteX 10622 589824 35257 35257 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10627 NT_STATUS_OK
WriteX 10627 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10627 258 NT_STATUS_OK
WriteX 10627 0 65536 65536 NT_STATUS_OK
WriteX 10627 65536 65536 65536 NT_STATUS_OK
WriteX 10627 131072 65536 65536 NT_STATUS_OK
WriteX 10627 196608 65536 65536 NT_STATUS_OK
WriteX 10627 262144 65536 65536 NT_STATUS_OK
WriteX 10627 327680 65536 65536 NT_STATUS_OK
WriteX 10627 393216 65536 65536 NT_STATUS_OK
WriteX 10627 458752 65536 65536 NT_STATUS_OK
WriteX 10627 524288 65536 65536 NT_STATUS_OK
WriteX 10627 589824 57598 57598 NT_STATUS_OK
Close 10627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10629 NT_STATUS_OK
WriteX 10629 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10629 258 NT_STATUS_OK
WriteX 10629 0 12543 12543 NT_STATUS_OK
Flush 10629 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10635 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
ReadX 10635 1938 24 24 NT_STATUS_OK
ReadX 10635 1920 276 276 NT_STATUS_OK
ReadX 10635 1918 14 14 NT_STATUS_OK
ReadX 10635 1918 7 7 NT_STATUS_OK
ReadX 10635 1919 12 12 NT_STATUS_OK
ReadX 10635 1919 8 8 NT_STATUS_OK
ReadX 10635 1917 15 15 NT_STATUS_OK
ReadX 10635 0 16 16 NT_STATUS_OK
ReadX 10635 16 2048 2048 NT_STATUS_OK
ReadX 10635 2064 2048 2048 NT_STATUS_OK
ReadX 10635 257 2048 2048 NT_STATUS_OK
ReadX 10635 385 2048 2048 NT_STATUS_OK
ReadX 10635 513 2048 2048 NT_STATUS_OK
ReadX 10635 641 2048 2048 NT_STATUS_OK
ReadX 10635 769 2048 2048 NT_STATUS_OK
ReadX 10635 897 2048 2048 NT_STATUS_OK
ReadX 10635 1025 2048 2048 NT_STATUS_OK
ReadX 10635 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10637 NT_STATUS_OK
Close 10637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10640 NT_STATUS_OK
WriteX 10640 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 11588 11588 NT_STATUS_OK
Flush 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10645 NT_STATUS_OK
WriteX 10645 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10645 258 NT_STATUS_OK
WriteX 10645 0 11615 11615 NT_STATUS_OK
Flush 10645 NT_STATUS_OK
Close 10645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10654 NT_STATUS_OK
WriteX 10654 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 258 NT_STATUS_OK
WriteX 10654 0 65536 65536 NT_STATUS_OK
WriteX 10654 65536 16050 16050 NT_STATUS_OK
Close 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10634 1939 64 64 NT_STATUS_OK
ReadX 10634 128 248 248 NT_STATUS_OK
ReadX 10634 128 568 568 NT_STATUS_OK
ReadX 10634 3872 1536 1536 NT_STATUS_OK
ReadX 10634 3456 2560 2560 NT_STATUS_OK
ReadX 10634 3136 512 512 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
ReadX 10634 3264 3072 3072 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 3616 4096 4096 NT_STATUS_OK
ReadX 10634 1939 64 64 NT_STATUS_OK
ReadX 10634 128 248 248 NT_STATUS_OK
ReadX 10634 128 608 608 NT_STATUS_OK
ReadX 10634 2858 1024 1024 NT_STATUS_OK
ReadX 10634 2810 4096 4096 NT_STATUS_OK
ReadX 10634 2826 4096 4096 NT_STATUS_OK
ReadX 10634 2580 2048 2048 NT_STATUS_OK
ReadX 10634 2800 2560 2560 NT_STATUS_OK
ReadX 10634 2100 4096 4096 NT_STATUS_OK
ReadX 10634 2084 4096 4096 NT_STATUS_OK
ReadX 10634 868 4096 4096 NT_STATUS_OK
ReadX 10634 2324 4096 4096 NT_STATUS_OK
ReadX 10634 884 4096 4096 NT_STATUS_OK
ReadX 10634 2604 1024 1024 NT_STATUS_OK
ReadX 10634 580 4096 4096 NT_STATUS_OK
ReadX 10634 596 4096 4096 NT_STATUS_OK
ReadX 10634 2752 4096 4096 NT_STATUS_OK
ReadX 10634 2842 1024 1024 NT_STATUS_OK
ReadX 10634 660 4096 4096 NT_STATUS_OK
ReadX 10634 2720 4096 4096 NT_STATUS_OK
ReadX 10634 2736 4096 4096 NT_STATUS_OK
ReadX 10634 628 4096 4096 NT_STATUS_OK
ReadX 10634 2704 4096 4096 NT_STATUS_OK
ReadX 10634 1556 4096 4096 NT_STATUS_OK
ReadX 10634 576 4096 4096 NT_STATUS_OK
ReadX 10634 3168 1536 1536 NT_STATUS_OK
ReadX 10634 832 4096 4096 NT_STATUS_OK
ReadX 10634 1088 4096 4096 NT_STATUS_OK
ReadX 10634 1344 4096 4096 NT_STATUS_OK
ReadX 10634 1600 4096 4096 NT_STATUS_OK
ReadX 10634 1856 4096 4096 NT_STATUS_OK
ReadX 10634 2112 4096 4096 NT_STATUS_OK
ReadX 10634 1892 4096 4096 NT_STATUS_OK
ReadX 10634 820 4096 4096 NT_STATUS_OK
ReadX 10634 788 4096 4096 NT_STATUS_OK
ReadX 10634 1604 4096 4096 NT_STATUS_OK
ReadX 10634 3648 4096 4096 NT_STATUS_OK
ReadX 10634 2608 4096 4096 NT_STATUS_OK
ReadX 10634 548 4096 4096 NT_STATUS_OK
ReadX 10634 740 4096 4096 NT_STATUS_OK
ReadX 10634 1344 4096 4096 NT_STATUS_OK
ReadX 10634 3392 4096 4096 NT_STATUS_OK
ReadX 10634 3904 4096 4096 NT_STATUS_OK
ReadX 10634 644 4096 4096 NT_STATUS_OK
ReadX 10634 676 4096 4096 NT_STATUS_OK
ReadX 10634 2688 4096 4096 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 900 4096 4096 NT_STATUS_OK
ReadX 10634 1908 4096 4096 NT_STATUS_OK
ReadX 10634 852 4096 4096 NT_STATUS_OK
ReadX 10634 724 4096 4096 NT_STATUS_OK
ReadX 10634 2292 4096 4096 NT_STATUS_OK
ReadX 10634 612 4096 4096 NT_STATUS_OK
ReadX 10634 388 4096 4096 NT_STATUS_OK
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 500 4096 4096 NT_STATUS_OK
ReadX 10634 356 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 576 4096 4096 NT_STATUS_OK
ReadX 10634 340 4096 4096 NT_STATUS_OK
ReadX 10634 420 4096 4096 NT_STATUS_OK
ReadX 10634 1600 4096 4096 NT_STATUS_OK
ReadX 10634 404 4096 4096 NT_STATUS_OK
ReadX 10634 1428 4096 4096 NT_STATUS_OK
ReadX 10634 2656 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 452 4096 4096 NT_STATUS_OK
ReadX 10634 692 4096 4096 NT_STATUS_OK
ReadX 10634 564 4096 4096 NT_STATUS_OK
ReadX 10634 372 4096 4096 NT_STATUS_OK
ReadX 10634 468 4096 4096 NT_STATUS_OK
ReadX 10634 484 4096 4096 NT_STATUS_OK
ReadX 10634 1088 4096 4096 NT_STATUS_OK
ReadX 10634 1924 4096 4096 NT_STATUS_OK
ReadX 10634 2768 4096 4096 NT_STATUS_OK
ReadX 10634 832 4096 4096 NT_STATUS_OK
ReadX 10634 836 4096 4096 NT_STATUS_OK
ReadX 10634 1856 4096 4096 NT_STATUS_OK
ReadX 10634 2640 4096 4096 NT_STATUS_OK
ReadX 10634 436 4096 4096 NT_STATUS_OK
ReadX 10634 1828 4096 4096 NT_STATUS_OK
ReadX 10634 804 4096 4096 NT_STATUS_OK
ReadX 10634 1860 4096 4096 NT_STATUS_OK
ReadX 10634 1812 4096 4096 NT_STATUS_OK
ReadX 10634 756 4096 4096 NT_STATUS_OK
ReadX 10634 1636 4096 4096 NT_STATUS_OK
ReadX 10634 772 4096 4096 NT_STATUS_OK
ReadX 10634 2036 4096 4096 NT_STATUS_OK
ReadX 10634 1220 4096 4096 NT_STATUS_OK
ReadX 10634 1652 4096 4096 NT_STATUS_OK
ReadX 10634 2588 4096 4096 NT_STATUS_OK
ReadX 10634 916 4096 4096 NT_STATUS_OK
ReadX 10634 260 4096 4096 NT_STATUS_OK
ReadX 10634 932 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 308 4096 4096 NT_STATUS_OK
ReadX 10634 292 4096 4096 NT_STATUS_OK
ReadX 10634 1140 4096 4096 NT_STATUS_OK
ReadX 10634 276 4096 4096 NT_STATUS_OK
ReadX 10634 2020 4096 4096 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
ReadX 10634 516 4096 4096 NT_STATUS_OK
ReadX 10634 1844 4096 4096 NT_STATUS_OK
ReadX 10634 1124 4096 4096 NT_STATUS_OK
ReadX 10634 3136 4096 4096 NT_STATUS_OK
ReadX 10634 324 4096 4096 NT_STATUS_OK
ReadX 10634 1156 4096 4096 NT_STATUS_OK
ReadX 10634 1172 4096 4096 NT_STATUS_OK
ReadX 10634 2112 4096 4096 NT_STATUS_OK
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 964 4096 4096 NT_STATUS_OK
ReadX 10634 980 4096 4096 NT_STATUS_OK
ReadX 10634 1012 4096 4096 NT_STATUS_OK
ReadX 10634 532 4096 4096 NT_STATUS_OK
ReadX 10634 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10634 1620 4096 4096 NT_STATUS_OK
ReadX 10634 1604 4096 4096 NT_STATUS_OK
ReadX 10634 2116 4096 4096 NT_STATUS_OK
ReadX 10634 2132 4096 4096 NT_STATUS_OK
ReadX 10634 2148 4096 4096 NT_STATUS_OK
ReadX 10634 2276 4096 4096 NT_STATUS_OK
ReadX 10634 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10659 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 1004 NT_STATUS_OK
Close 10614 NT_STATUS_OK
WriteX 10659 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10659 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10616 1004 NT_STATUS_OK
Close 10616 NT_STATUS_OK
WriteX 10659 0 65536 65536 NT_STATUS_OK
WriteX 10659 65536 64850 64850 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
ReadX 10634 2068 4096 4096 NT_STATUS_OK
ReadX 10634 1588 4096 4096 NT_STATUS_OK
ReadX 10634 1572 4096 4096 NT_STATUS_OK
WriteX 10661 0 18630 18630 NT_STATUS_OK
Flush 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10634 612 4096 4096 NT_STATUS_OK
ReadX 10634 564 4096 4096 NT_STATUS_OK
ReadX 10634 1876 4096 4096 NT_STATUS_OK
ReadX 10634 628 4096 4096 NT_STATUS_OK
ReadX 10634 740 4096 4096 NT_STATUS_OK
ReadX 10634 724 4096 4096 NT_STATUS_OK
ReadX 10634 644 4096 4096 NT_STATUS_OK
ReadX 10634 2324 4096 4096 NT_STATUS_OK
ReadX 10634 660 4096 4096 NT_STATUS_OK
ReadX 10634 852 4096 4096 NT_STATUS_OK
ReadX 10634 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 580 4096 4096 NT_STATUS_OK
ReadX 10634 3136 512 512 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
Close 10634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 61440 4096 4096 NT_STATUS_OK
ReadX 10666 126976 4096 4096 NT_STATUS_OK
WriteX 10666 0 65536 65536 NT_STATUS_OK
WriteX 10666 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 61440 4096 4096 NT_STATUS_OK
ReadX 10667 126976 4096 4096 NT_STATUS_OK
ReadX 10667 192512 4096 4096 NT_STATUS_OK
ReadX 10667 258048 4096 4096 NT_STATUS_OK
WriteX 10667 0 65536 65536 NT_STATUS_OK
WriteX 10667 65536 65536 65536 NT_STATUS_OK
WriteX 10667 131072 65536 65536 NT_STATUS_OK
WriteX 10667 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 61440 4096 4096 NT_STATUS_OK
ReadX 10668 126976 4096 4096 NT_STATUS_OK
ReadX 10668 192512 4096 4096 NT_STATUS_OK
ReadX 10668 258048 4096 4096 NT_STATUS_OK
ReadX 10668 323584 4096 4096 NT_STATUS_OK
ReadX 10668 389120 4096 4096 NT_STATUS_OK
ReadX 10668 454656 4096 4096 NT_STATUS_OK
ReadX 10668 520192 4096 4096 NT_STATUS_OK
WriteX 10668 0 65536 65536 NT_STATUS_OK
WriteX 10668 65536 65536 65536 NT_STATUS_OK
WriteX 10668 131072 65536 65536 NT_STATUS_OK
WriteX 10668 196608 65536 65536 NT_STATUS_OK
WriteX 10668 262144 65536 65536 NT_STATUS_OK
WriteX 10668 327680 65536 65536 NT_STATUS_OK
WriteX 10668 393216 65536 65536 NT_STATUS_OK
WriteX 10668 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10671 NT_STATUS_OK
WriteX 10671 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10669 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10676 NT_STATUS_OK
WriteX 10676 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10676 258 NT_STATUS_OK
WriteX 10676 0 62591 62591 NT_STATUS_OK
Close 10676 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10678 NT_STATUS_OK
Close 10678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10681 NT_STATUS_OK
WriteX 10681 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10681 258 NT_STATUS_OK
WriteX 10681 0 10845 10845 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10683 NT_STATUS_OK
Close 10683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10686 NT_STATUS_OK
WriteX 10686 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10686 258 NT_STATUS_OK
WriteX 10686 0 30118 30118 NT_STATUS_OK
Close 10686 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
WriteX 10671 0 64 64 NT_STATUS_OK
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 61440 61440 NT_STATUS_OK
ReadX 10688 61440 4096 4096 NT_STATUS_OK
ReadX 10688 65536 61440 61440 NT_STATUS_OK
ReadX 10688 126976 4096 4096 NT_STATUS_OK
ReadX 10688 131072 61440 61440 NT_STATUS_OK
ReadX 10688 192512 4096 4096 NT_STATUS_OK
ReadX 10688 196608 61440 61440 NT_STATUS_OK
ReadX 10688 258048 4096 4096 NT_STATUS_OK
ReadX 10688 262144 61440 61440 NT_STATUS_OK
ReadX 10688 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 61440 61440 NT_STATUS_OK
ReadX 10689 61440 4096 4096 NT_STATUS_OK
ReadX 10689 65536 61440 61440 NT_STATUS_OK
ReadX 10689 126976 4096 4096 NT_STATUS_OK
ReadX 10689 131072 61440 61440 NT_STATUS_OK
ReadX 10689 192512 4096 4096 NT_STATUS_OK
ReadX 10689 196608 61440 61440 NT_STATUS_OK
ReadX 10689 258048 4096 4096 NT_STATUS_OK
ReadX 10689 262144 61440 61440 NT_STATUS_OK
ReadX 10689 323584 4096 4096 NT_STATUS_OK
ReadX 10689 327680 61440 61440 NT_STATUS_OK
ReadX 10689 389120 4096 4096 NT_STATUS_OK
ReadX 10689 393216 61440 61440 NT_STATUS_OK
ReadX 10689 454656 4096 4096 NT_STATUS_OK
ReadX 10689 458752 61440 61440 NT_STATUS_OK
ReadX 10689 520192 4096 4096 NT_STATUS_OK
ReadX 10689 524288 61440 61440 NT_STATUS_OK
ReadX 10689 585728 4096 4096 NT_STATUS_OK
ReadX 10689 589824 61440 61440 NT_STATUS_OK
ReadX 10689 651264 4096 4096 NT_STATUS_OK
ReadX 10689 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 61440 61440 NT_STATUS_OK
ReadX 10690 61440 4096 4096 NT_STATUS_OK
ReadX 10690 65536 61440 61440 NT_STATUS_OK
ReadX 10690 126976 4096 4096 NT_STATUS_OK
ReadX 10690 131072 61440 61440 NT_STATUS_OK
ReadX 10690 192512 4096 4096 NT_STATUS_OK
ReadX 10690 196608 61440 61440 NT_STATUS_OK
ReadX 10690 258048 4096 4096 NT_STATUS_OK
ReadX 10690 262144 61440 61440 NT_STATUS_OK
ReadX 10690 323584 4096 4096 NT_STATUS_OK
ReadX 10690 327680 61440 61440 NT_STATUS_OK
ReadX 10690 389120 4096 4096 NT_STATUS_OK
ReadX 10690 393216 61440 61440 NT_STATUS_OK
ReadX 10690 454656 4096 4096 NT_STATUS_OK
ReadX 10690 458752 61440 61440 NT_STATUS_OK
ReadX 10690 520192 4096 4096 NT_STATUS_OK
ReadX 10690 524288 61440 61440 NT_STATUS_OK
ReadX 10690 585728 4096 4096 NT_STATUS_OK
ReadX 10690 589824 61440 61440 NT_STATUS_OK
ReadX 10690 651264 4096 4096 NT_STATUS_OK
ReadX 10690 655360 61440 61440 NT_STATUS_OK
ReadX 10690 716800 4096 4096 NT_STATUS_OK
ReadX 10690 720896 61440 61440 NT_STATUS_OK
ReadX 10690 782336 4096 4096 NT_STATUS_OK
ReadX 10690 786432 61440 61440 NT_STATUS_OK
ReadX 10690 847872 4096 4096 NT_STATUS_OK
ReadX 10690 851968 61440 61440 NT_STATUS_OK
ReadX 10690 913408 4096 4096 NT_STATUS_OK
ReadX 10690 917504 61440 61440 NT_STATUS_OK
ReadX 10690 978944 4096 4096 NT_STATUS_OK
ReadX 10690 983040 61440 61440 NT_STATUS_OK
ReadX 10690 1044480 4096 4096 NT_STATUS_OK
ReadX 10690 1048576 61440 61440 NT_STATUS_OK
ReadX 10690 1110016 4096 4096 NT_STATUS_OK
ReadX 10690 1114112 61440 61440 NT_STATUS_OK
ReadX 10690 1175552 4096 4096 NT_STATUS_OK
ReadX 10690 1179648 61440 61440 NT_STATUS_OK
ReadX 10690 1241088 4096 4096 NT_STATUS_OK
ReadX 10690 1245184 61440 61440 NT_STATUS_OK
ReadX 10690 1306624 4096 4096 NT_STATUS_OK
ReadX 10690 1310720 61440 61440 NT_STATUS_OK
ReadX 10690 1372160 4096 4096 NT_STATUS_OK
ReadX 10690 1376256 61440 61440 NT_STATUS_OK
ReadX 10690 1437696 4096 4096 NT_STATUS_OK
ReadX 10690 1441792 61440 61440 NT_STATUS_OK
ReadX 10690 1503232 4096 4096 NT_STATUS_OK
ReadX 10690 1507328 61440 61440 NT_STATUS_OK
ReadX 10690 1568768 4096 4096 NT_STATUS_OK
ReadX 10690 1572864 61440 61440 NT_STATUS_OK
ReadX 10690 1634304 4096 4096 NT_STATUS_OK
ReadX 10690 1638400 61440 61440 NT_STATUS_OK
ReadX 10690 1699840 4096 4096 NT_STATUS_OK
ReadX 10690 1703936 61440 61440 NT_STATUS_OK
ReadX 10690 1765376 4096 4096 NT_STATUS_OK
ReadX 10690 1769472 61440 61440 NT_STATUS_OK
ReadX 10690 1830912 4096 4096 NT_STATUS_OK
ReadX 10690 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10691 NT_STATUS_OK
Close 10691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 4096 4096 NT_STATUS_OK
ReadX 10695 4096 4096 4096 NT_STATUS_OK
ReadX 10695 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Close 10694 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10699 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10699 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10700 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 8192 8192 NT_STATUS_OK
ReadX 10703 8192 8192 8192 NT_STATUS_OK
ReadX 10703 16384 8192 8192 NT_STATUS_OK
ReadX 10703 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10705 NT_STATUS_OK
Close 10705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10708 NT_STATUS_OK
WriteX 10708 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10708 258 NT_STATUS_OK
WriteX 10708 0 10438 10438 NT_STATUS_OK
Close 10708 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10712 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10714 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
ReadX 10717 4096 4096 4096 NT_STATUS_OK
ReadX 10717 8192 4096 4096 NT_STATUS_OK
ReadX 10717 12288 8192 8192 NT_STATUS_OK
ReadX 10717 20480 8192 8192 NT_STATUS_OK
ReadX 10717 28672 8192 8192 NT_STATUS_OK
ReadX 10717 36864 8192 8192 NT_STATUS_OK
ReadX 10717 45056 8192 8192 NT_STATUS_OK
ReadX 10717 53248 8192 8192 NT_STATUS_OK
ReadX 10717 61440 8192 8192 NT_STATUS_OK
ReadX 10717 69632 8192 8192 NT_STATUS_OK
ReadX 10717 77824 8192 8192 NT_STATUS_OK
ReadX 10717 86016 8192 8192 NT_STATUS_OK
ReadX 10717 94208 8192 8192 NT_STATUS_OK
ReadX 10717 102400 8192 8192 NT_STATUS_OK
ReadX 10717 110592 8192 8192 NT_STATUS_OK
ReadX 10717 118784 8192 8192 NT_STATUS_OK
ReadX 10717 126976 8192 8192 NT_STATUS_OK
ReadX 10717 135168 8192 8192 NT_STATUS_OK
ReadX 10717 143360 8192 8192 NT_STATUS_OK
ReadX 10717 151552 8192 8192 NT_STATUS_OK
ReadX 10717 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10717 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10722 NT_STATUS_OK
WriteX 10722 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10722 258 NT_STATUS_OK
WriteX 10722 0 28489 28489 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10725 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10726 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 8192 8192 NT_STATUS_OK
ReadX 10729 8192 8192 8192 NT_STATUS_OK
ReadX 10729 16384 8192 8192 NT_STATUS_OK
ReadX 10729 24576 8192 8192 NT_STATUS_OK
ReadX 10729 32768 16384 16384 NT_STATUS_OK
ReadX 10729 49152 8192 8192 NT_STATUS_OK
ReadX 10729 57344 8192 8192 NT_STATUS_OK
ReadX 10729 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10734 NT_STATUS_OK
WriteX 10734 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 258 NT_STATUS_OK
WriteX 10734 0 29253 29253 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10741 NT_STATUS_OK
WriteX 10741 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10741 258 NT_STATUS_OK
WriteX 10741 0 30183 30183 NT_STATUS_OK
Close 10741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10744 NT_STATUS_OK
WriteX 10744 0 510 510 NT_STATUS_OK
WriteX 10744 510 512 512 NT_STATUS_OK
WriteX 10744 1022 510 510 NT_STATUS_OK
WriteX 10744 1532 510 510 NT_STATUS_OK
WriteX 10744 2042 168 168 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 61440 4096 4096 NT_STATUS_OK
ReadX 10748 126976 4096 4096 NT_STATUS_OK
WriteX 10748 0 65536 65536 NT_STATUS_OK
WriteX 10748 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 61440 4096 4096 NT_STATUS_OK
ReadX 10749 126976 4096 4096 NT_STATUS_OK
ReadX 10749 192512 4096 4096 NT_STATUS_OK
ReadX 10749 258048 4096 4096 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 65536 65536 NT_STATUS_OK
WriteX 10749 131072 65536 65536 NT_STATUS_OK
WriteX 10749 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 61440 4096 4096 NT_STATUS_OK
ReadX 10750 126976 4096 4096 NT_STATUS_OK
ReadX 10750 192512 4096 4096 NT_STATUS_OK
ReadX 10750 258048 4096 4096 NT_STATUS_OK
ReadX 10750 323584 4096 4096 NT_STATUS_OK
ReadX 10750 389120 4096 4096 NT_STATUS_OK
ReadX 10750 454656 4096 4096 NT_STATUS_OK
ReadX 10750 520192 4096 4096 NT_STATUS_OK
WriteX 10750 0 65536 65536 NT_STATUS_OK
WriteX 10750 65536 65536 65536 NT_STATUS_OK
WriteX 10750 131072 65536 65536 NT_STATUS_OK
WriteX 10750 196608 65536 65536 NT_STATUS_OK
WriteX 10750 262144 65536 65536 NT_STATUS_OK
WriteX 10750 327680 65536 65536 NT_STATUS_OK
WriteX 10750 393216 65536 65536 NT_STATUS_OK
WriteX 10750 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10757 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10762 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10795 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10819 NT_STATUS_OK
WriteX 10819 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10819 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10819 0 65536 65536 NT_STATUS_OK
WriteX 10819 65536 65536 65536 NT_STATUS_OK
WriteX 10819 131072 65536 65536 NT_STATUS_OK
WriteX 10819 196608 65536 65536 NT_STATUS_OK
WriteX 10819 262144 26634 26634 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10824 NT_STATUS_OK
Close 10824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
ReadX 10827 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10828 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10875 NT_STATUS_OK
Close 10875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10884 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
Close 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10951 0 4096 4096 NT_STATUS_OK
Close 10951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
ReadX 10953 4096 4096 4096 NT_STATUS_OK
ReadX 10953 8192 4096 4096 NT_STATUS_OK
ReadX 10953 12288 4096 4096 NT_STATUS_OK
ReadX 10953 16384 4096 4096 NT_STATUS_OK
ReadX 10953 20480 4096 4096 NT_STATUS_OK
ReadX 10953 24576 4096 4096 NT_STATUS_OK
ReadX 10953 28672 4096 4096 NT_STATUS_OK
ReadX 10953 32768 4096 4096 NT_STATUS_OK
ReadX 10953 36864 4096 4096 NT_STATUS_OK
ReadX 10953 40960 4096 4096 NT_STATUS_OK
ReadX 10953 45056 4096 4096 NT_STATUS_OK
ReadX 10953 49152 4096 4096 NT_STATUS_OK
ReadX 10953 53248 4096 4096 NT_STATUS_OK
ReadX 10953 57344 4096 4096 NT_STATUS_OK
ReadX 10953 61440 4096 4096 NT_STATUS_OK
ReadX 10953 65536 4096 4096 NT_STATUS_OK
ReadX 10953 69632 4096 4096 NT_STATUS_OK
ReadX 10953 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10953 1004 NT_STATUS_OK
WriteX 10953 0 4096 4096 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10954 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
Close 10954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10959 NT_STATUS_OK
WriteX 10959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
WriteX 10959 0 65536 65536 NT_STATUS_OK
WriteX 10959 65536 19979 19979 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
SET_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
Close 10964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10965 1004 NT_STATUS_OK
WriteX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10966 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10971 NT_STATUS_OK
WriteX 10971 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10971 258 NT_STATUS_OK
WriteX 10971 0 65536 65536 NT_STATUS_OK
WriteX 10971 65536 17654 17654 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
SET_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10973 NT_STATUS_OK
SET_FILE_INFORMATION 10973 1004 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 4096 4096 NT_STATUS_OK
ReadX 10977 4096 4096 4096 NT_STATUS_OK
ReadX 10977 8192 4096 4096 NT_STATUS_OK
ReadX 10977 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10977 16384 4096 4096 NT_STATUS_OK
ReadX 10977 20480 4096 4096 NT_STATUS_OK
ReadX 10977 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10980 1004 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10981 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10983 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10986 NT_STATUS_OK
WriteX 10986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10986 258 NT_STATUS_OK
WriteX 10986 0 65536 65536 NT_STATUS_OK
WriteX 10986 65536 19490 19490 NT_STATUS_OK
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
SET_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10988 NT_STATUS_OK
SET_FILE_INFORMATION 10988 1004 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10992 0 4096 4096 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
ReadX 10994 4096 4096 4096 NT_STATUS_OK
ReadX 10994 8192 4096 4096 NT_STATUS_OK
ReadX 10994 12288 4096 4096 NT_STATUS_OK
ReadX 10994 16384 4096 4096 NT_STATUS_OK
ReadX 10994 20480 4096 4096 NT_STATUS_OK
ReadX 10994 24576 4096 4096 NT_STATUS_OK
ReadX 10994 28672 4096 4096 NT_STATUS_OK
ReadX 10994 32768 4096 4096 NT_STATUS_OK
ReadX 10994 36864 4096 4096 NT_STATUS_OK
ReadX 10994 40960 4096 4096 NT_STATUS_OK
ReadX 10994 45056 4096 4096 NT_STATUS_OK
ReadX 10994 49152 4096 4096 NT_STATUS_OK
ReadX 10994 53248 4096 4096 NT_STATUS_OK
ReadX 10994 57344 4096 4096 NT_STATUS_OK
ReadX 10994 61440 4096 4096 NT_STATUS_OK
ReadX 10994 65536 4096 4096 NT_STATUS_OK
ReadX 10994 69632 4096 4096 NT_STATUS_OK
ReadX 10994 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10994 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10995 NT_STATUS_OK
SET_FILE_INFORMATION 10995 1004 NT_STATUS_OK
Close 10995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11000 NT_STATUS_OK
WriteX 11000 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 258 NT_STATUS_OK
WriteX 11000 0 65536 65536 NT_STATUS_OK
WriteX 11000 65536 8866 8866 NT_STATUS_OK
Close 11000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
SET_FILE_INFORMATION 11001 1004 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
Close 11001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
Close 11003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11008 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11011 NT_STATUS_OK
WriteX 11011 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 258 NT_STATUS_OK
WriteX 11011 0 65536 65536 NT_STATUS_OK
WriteX 11011 65536 9298 9298 NT_STATUS_OK
Close 11011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
WriteX 11012 0 4096 4096 NT_STATUS_OK
Flush 11012 NT_STATUS_OK
SET_FILE_INFORMATION 11012 1004 NT_STATUS_OK
WriteX 11012 0 4096 4096 NT_STATUS_OK
Flush 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11013 NT_STATUS_OK
SET_FILE_INFORMATION 11013 1004 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11018 0 4096 4096 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11019 4096 4096 4096 NT_STATUS_OK
ReadX 11019 8192 4096 4096 NT_STATUS_OK
ReadX 11019 12288 4096 4096 NT_STATUS_OK
ReadX 11019 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11022 1004 NT_STATUS_OK
WriteX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11028 NT_STATUS_OK
WriteX 11028 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 258 NT_STATUS_OK
WriteX 11028 0 65536 65536 NT_STATUS_OK
WriteX 11028 65536 11540 11540 NT_STATUS_OK
Close 11028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11030 NT_STATUS_OK
SET_FILE_INFORMATION 11030 1004 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11032 NT_STATUS_OK
Close 11032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 61440 4096 4096 NT_STATUS_OK
ReadX 11034 126976 4096 4096 NT_STATUS_OK
WriteX 11034 0 65536 65536 NT_STATUS_OK
WriteX 11034 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 61440 4096 4096 NT_STATUS_OK
ReadX 11035 126976 4096 4096 NT_STATUS_OK
ReadX 11035 192512 4096 4096 NT_STATUS_OK
ReadX 11035 258048 4096 4096 NT_STATUS_OK
WriteX 11035 0 65536 65536 NT_STATUS_OK
WriteX 11035 65536 65536 65536 NT_STATUS_OK
WriteX 11035 131072 65536 65536 NT_STATUS_OK
WriteX 11035 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 61440 4096 4096 NT_STATUS_OK
ReadX 11036 126976 4096 4096 NT_STATUS_OK
ReadX 11036 192512 4096 4096 NT_STATUS_OK
ReadX 11036 258048 4096 4096 NT_STATUS_OK
ReadX 11036 323584 4096 4096 NT_STATUS_OK
ReadX 11036 389120 4096 4096 NT_STATUS_OK
ReadX 11036 454656 4096 4096 NT_STATUS_OK
ReadX 11036 520192 4096 4096 NT_STATUS_OK
WriteX 11036 0 65536 65536 NT_STATUS_OK
WriteX 11036 65536 65536 65536 NT_STATUS_OK
WriteX 11036 131072 65536 65536 NT_STATUS_OK
WriteX 11036 196608 65536 65536 NT_STATUS_OK
WriteX 11036 262144 65536 65536 NT_STATUS_OK
WriteX 11036 327680 65536 65536 NT_STATUS_OK
WriteX 11036 393216 65536 65536 NT_STATUS_OK
WriteX 11036 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11037 NT_STATUS_OK
ReadX 11037 0 4096 4096 NT_STATUS_OK
ReadX 11037 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11038 NT_STATUS_OK
WriteX 11038 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 258 NT_STATUS_OK
WriteX 11038 0 53 53 NT_STATUS_OK
Close 11038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 10977 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11037 8192 4096 4096 NT_STATUS_OK
ReadX 11037 12288 4096 4096 NT_STATUS_OK
WriteX 11041 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
ReadX 11037 16384 4096 4096 NT_STATUS_OK
ReadX 11037 20480 4096 4096 NT_STATUS_OK
WriteX 11041 0 15360 15360 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
WriteX 11042 0 4096 4096 NT_STATUS_OK
Close 11042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11046 NT_STATUS_OK
Close 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11045 4096 4096 4096 NT_STATUS_OK
ReadX 11045 8192 4096 4096 NT_STATUS_OK
ReadX 11045 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
ReadX 11048 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
ReadX 11049 4096 4096 4096 NT_STATUS_OK
ReadX 11049 8192 4096 4096 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11050 NT_STATUS_OK
WriteX 11050 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 258 NT_STATUS_OK
WriteX 11050 0 15360 15360 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11052 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11055 NT_STATUS_OK
SET_FILE_INFORMATION 11055 1004 NT_STATUS_OK
Close 11055 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
ReadX 11058 4096 4096 4096 NT_STATUS_OK
ReadX 11058 8192 4096 4096 NT_STATUS_OK
ReadX 11058 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11060 NT_STATUS_OK
WriteX 11060 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11060 258 NT_STATUS_OK
WriteX 11060 0 53 53 NT_STATUS_OK
Close 11060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11061 NT_STATUS_OK
Close 11061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11059 4096 4096 4096 NT_STATUS_OK
ReadX 11059 8192 4096 4096 NT_STATUS_OK
ReadX 11059 12288 4096 4096 NT_STATUS_OK
WriteX 11063 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
WriteX 11063 0 12006 12006 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11067 4096 4096 4096 NT_STATUS_OK
ReadX 11067 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11070 NT_STATUS_OK
WriteX 11070 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11070 258 NT_STATUS_OK
WriteX 11070 0 11991 11991 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11072 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11075 NT_STATUS_OK
SET_FILE_INFORMATION 11075 1004 NT_STATUS_OK
Close 11075 NT_STATUS_OK
WriteX 11071 0 4096 4096 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11078 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
ReadX 11078 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
WriteX 11078 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
Close 11054 NT_STATUS_OK
WriteX 11058 0 19054 19054 NT_STATUS_OK
WriteX 11078 0 12288 12288 NT_STATUS_OK
Close 11074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11078 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 61440 61440 NT_STATUS_OK
ReadX 11085 61440 4096 4096 NT_STATUS_OK
ReadX 11085 65536 61440 61440 NT_STATUS_OK
ReadX 11085 126976 4096 4096 NT_STATUS_OK
ReadX 11085 131072 61440 61440 NT_STATUS_OK
ReadX 11085 192512 4096 4096 NT_STATUS_OK
ReadX 11085 196608 61440 61440 NT_STATUS_OK
ReadX 11085 258048 4096 4096 NT_STATUS_OK
ReadX 11085 262144 61440 61440 NT_STATUS_OK
ReadX 11085 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 61440 61440 NT_STATUS_OK
ReadX 11086 61440 4096 4096 NT_STATUS_OK
ReadX 11086 65536 61440 61440 NT_STATUS_OK
ReadX 11086 126976 4096 4096 NT_STATUS_OK
ReadX 11086 131072 61440 61440 NT_STATUS_OK
ReadX 11086 192512 4096 4096 NT_STATUS_OK
ReadX 11086 196608 61440 61440 NT_STATUS_OK
ReadX 11086 258048 4096 4096 NT_STATUS_OK
ReadX 11086 262144 61440 61440 NT_STATUS_OK
ReadX 11086 323584 4096 4096 NT_STATUS_OK
ReadX 11086 327680 61440 61440 NT_STATUS_OK
ReadX 11086 389120 4096 4096 NT_STATUS_OK
ReadX 11086 393216 61440 61440 NT_STATUS_OK
ReadX 11086 454656 4096 4096 NT_STATUS_OK
ReadX 11086 458752 61440 61440 NT_STATUS_OK
ReadX 11086 520192 4096 4096 NT_STATUS_OK
ReadX 11086 524288 61440 61440 NT_STATUS_OK
ReadX 11086 585728 4096 4096 NT_STATUS_OK
ReadX 11086 589824 61440 61440 NT_STATUS_OK
ReadX 11086 651264 4096 4096 NT_STATUS_OK
ReadX 11086 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 61440 61440 NT_STATUS_OK
ReadX 11087 61440 4096 4096 NT_STATUS_OK
ReadX 11087 65536 61440 61440 NT_STATUS_OK
ReadX 11087 126976 4096 4096 NT_STATUS_OK
ReadX 11087 131072 61440 61440 NT_STATUS_OK
ReadX 11087 192512 4096 4096 NT_STATUS_OK
ReadX 11087 196608 61440 61440 NT_STATUS_OK
ReadX 11087 258048 4096 4096 NT_STATUS_OK
ReadX 11087 262144 61440 61440 NT_STATUS_OK
ReadX 11087 323584 4096 4096 NT_STATUS_OK
ReadX 11087 327680 61440 61440 NT_STATUS_OK
ReadX 11087 389120 4096 4096 NT_STATUS_OK
ReadX 11087 393216 61440 61440 NT_STATUS_OK
ReadX 11087 454656 4096 4096 NT_STATUS_OK
ReadX 11087 458752 61440 61440 NT_STATUS_OK
ReadX 11087 520192 4096 4096 NT_STATUS_OK
ReadX 11087 524288 61440 61440 NT_STATUS_OK
ReadX 11087 585728 4096 4096 NT_STATUS_OK
ReadX 11087 589824 61440 61440 NT_STATUS_OK
ReadX 11087 651264 4096 4096 NT_STATUS_OK
ReadX 11087 655360 61440 61440 NT_STATUS_OK
ReadX 11087 716800 4096 4096 NT_STATUS_OK
ReadX 11087 720896 61440 61440 NT_STATUS_OK
ReadX 11087 782336 4096 4096 NT_STATUS_OK
ReadX 11087 786432 61440 61440 NT_STATUS_OK
ReadX 11087 847872 4096 4096 NT_STATUS_OK
ReadX 11087 851968 61440 61440 NT_STATUS_OK
ReadX 11087 913408 4096 4096 NT_STATUS_OK
ReadX 11087 917504 61440 61440 NT_STATUS_OK
ReadX 11087 978944 4096 4096 NT_STATUS_OK
ReadX 11087 983040 61440 61440 NT_STATUS_OK
ReadX 11087 1044480 4096 4096 NT_STATUS_OK
ReadX 11087 1048576 61440 61440 NT_STATUS_OK
ReadX 11087 1110016 4096 4096 NT_STATUS_OK
ReadX 11087 1114112 61440 61440 NT_STATUS_OK
ReadX 11087 1175552 4096 4096 NT_STATUS_OK
ReadX 11087 1179648 61440 61440 NT_STATUS_OK
ReadX 11087 1241088 4096 4096 NT_STATUS_OK
ReadX 11087 1245184 61440 61440 NT_STATUS_OK
ReadX 11087 1306624 4096 4096 NT_STATUS_OK
ReadX 11087 1310720 61440 61440 NT_STATUS_OK
ReadX 11087 1372160 4096 4096 NT_STATUS_OK
ReadX 11087 1376256 61440 61440 NT_STATUS_OK
ReadX 11087 1437696 4096 4096 NT_STATUS_OK
ReadX 11087 1441792 61440 61440 NT_STATUS_OK
ReadX 11087 1503232 4096 4096 NT_STATUS_OK
ReadX 11087 1507328 61440 61440 NT_STATUS_OK
ReadX 11087 1568768 4096 4096 NT_STATUS_OK
ReadX 11087 1572864 61440 61440 NT_STATUS_OK
ReadX 11087 1634304 4096 4096 NT_STATUS_OK
ReadX 11087 1638400 61440 61440 NT_STATUS_OK
ReadX 11087 1699840 4096 4096 NT_STATUS_OK
ReadX 11087 1703936 61440 61440 NT_STATUS_OK
ReadX 11087 1765376 4096 4096 NT_STATUS_OK
ReadX 11087 1769472 61440 61440 NT_STATUS_OK
ReadX 11087 1830912 4096 4096 NT_STATUS_OK
ReadX 11087 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11094 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 1004 NT_STATUS_OK
WriteX 11094 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11096 NT_STATUS_OK
WriteX 11096 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11096 258 NT_STATUS_OK
WriteX 11096 0 491 491 NT_STATUS_OK
Close 11096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11094 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11099 NT_STATUS_OK
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11100 NT_STATUS_OK
WriteX 11100 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11100 258 NT_STATUS_OK
WriteX 11100 0 543 543 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11085 NT_STATUS_OK
Close 11086 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 2048 2048 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
Flush 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11120 NT_STATUS_OK
WriteX 11120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11120 258 NT_STATUS_OK
WriteX 11120 0 2048 2048 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11126 NT_STATUS_OK
WriteX 11126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
WriteX 11126 0 2048 2048 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 2048 2048 NT_STATUS_OK
ReadX 11105 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11105 0 8192 8192 NT_STATUS_OK
WriteX 11106 0 4096 4096 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11131 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11151 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 1004 NT_STATUS_OK
WriteX 11151 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 258 NT_STATUS_OK
WriteX 11151 0 2048 2048 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11153 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11159 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 1004 NT_STATUS_OK
WriteX 11159 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 258 NT_STATUS_OK
WriteX 11159 0 2048 2048 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
Flush 11152 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
Flush 11160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11154 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11162 NT_STATUS_OK
WriteX 11162 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Close 11162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11165 NT_STATUS_OK
WriteX 11165 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11165 258 NT_STATUS_OK
WriteX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11166 0 4096 4096 NT_STATUS_OK
Close 11163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11146 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Close 11145 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11169 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11171 NT_STATUS_OK
ReadX 11171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11173 NT_STATUS_OK
WriteX 11173 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11173 258 NT_STATUS_OK
WriteX 11173 0 2048 2048 NT_STATUS_OK
Close 11173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11188 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11190 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11193 NT_STATUS_OK
ReadX 11193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11210 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 1004 NT_STATUS_OK
WriteX 11210 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 258 NT_STATUS_OK
WriteX 11210 0 2048 2048 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11216 NT_STATUS_OK
ReadX 11216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
WriteX 11222 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 258 NT_STATUS_OK
WriteX 11222 0 2048 2048 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11223 NT_STATUS_OK
ReadX 11223 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11230 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 1004 NT_STATUS_OK
WriteX 11230 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 258 NT_STATUS_OK
WriteX 11230 0 2048 2048 NT_STATUS_OK
Close 11230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Flush 11211 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
WriteX 11231 0 4096 4096 NT_STATUS_OK
Flush 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11231 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 4096 16384 16384 NT_STATUS_OK
ReadX 11193 4096 16384 16384 NT_STATUS_OK
ReadX 11225 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 2048 2048 NT_STATUS_OK
WriteX 11233 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11234 NT_STATUS_OK
QUERY_FILE_INFORMATION 11234 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11217 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11216 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11236 NT_STATUS_OK
QUERY_FILE_INFORMATION 11236 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11238 NT_STATUS_OK
QUERY_FILE_INFORMATION 11238 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11241 4096 16384 16384 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
WriteX 11244 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 8192 8192 NT_STATUS_OK
ReadX 11247 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11261 0 4096 4096 NT_STATUS_OK
ReadX 11261 4096 4096 4096 NT_STATUS_OK
ReadX 11261 8192 4096 4096 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
ReadX 11262 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
WriteX 11244 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
ReadX 11270 4096 4096 4096 NT_STATUS_OK
WriteX 11270 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11271 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
ReadX 11272 4096 4096 4096 NT_STATUS_OK
WriteX 11272 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11273 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11275 0 4096 4096 NT_STATUS_OK
ReadX 11275 4096 4096 4096 NT_STATUS_OK
ReadX 11275 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
ReadX 11276 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11293 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 1004 NT_STATUS_OK
WriteX 11293 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 2048 2048 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11298 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11299 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 1004 NT_STATUS_OK
WriteX 11299 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 258 NT_STATUS_OK
WriteX 11299 0 2048 2048 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11300 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11283 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11303 NT_STATUS_OK
QUERY_FILE_INFORMATION 11303 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 61440 4096 4096 NT_STATUS_OK
ReadX 11305 126976 4096 4096 NT_STATUS_OK
WriteX 11305 0 65536 65536 NT_STATUS_OK
WriteX 11305 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 61440 4096 4096 NT_STATUS_OK
ReadX 11306 126976 4096 4096 NT_STATUS_OK
ReadX 11306 192512 4096 4096 NT_STATUS_OK
ReadX 11306 258048 4096 4096 NT_STATUS_OK
WriteX 11306 0 65536 65536 NT_STATUS_OK
WriteX 11306 65536 65536 65536 NT_STATUS_OK
WriteX 11306 131072 65536 65536 NT_STATUS_OK
WriteX 11306 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 61440 4096 4096 NT_STATUS_OK
ReadX 11307 126976 4096 4096 NT_STATUS_OK
ReadX 11307 192512 4096 4096 NT_STATUS_OK
ReadX 11307 258048 4096 4096 NT_STATUS_OK
ReadX 11307 323584 4096 4096 NT_STATUS_OK
ReadX 11307 389120 4096 4096 NT_STATUS_OK
ReadX 11307 454656 4096 4096 NT_STATUS_OK
ReadX 11307 520192 4096 4096 NT_STATUS_OK
WriteX 11307 0 65536 65536 NT_STATUS_OK
WriteX 11307 65536 65536 65536 NT_STATUS_OK
WriteX 11307 131072 65536 65536 NT_STATUS_OK
WriteX 11307 196608 65536 65536 NT_STATUS_OK
WriteX 11307 262144 65536 65536 NT_STATUS_OK
WriteX 11307 327680 65536 65536 NT_STATUS_OK
WriteX 11307 393216 65536 65536 NT_STATUS_OK
WriteX 11307 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11308 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11308 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11308 8192 4096 4096 NT_STATUS_OK
ReadX 11308 12288 4096 4096 NT_STATUS_OK
ReadX 11308 16384 4096 4096 NT_STATUS_OK
ReadX 11308 20480 4096 4096 NT_STATUS_OK
ReadX 11308 24576 4096 4096 NT_STATUS_OK
ReadX 11308 28672 4096 4096 NT_STATUS_OK
ReadX 11308 32768 4096 4096 NT_STATUS_OK
ReadX 11308 36864 4096 4096 NT_STATUS_OK
ReadX 11308 40960 4096 4096 NT_STATUS_OK
ReadX 11308 45056 4096 4096 NT_STATUS_OK
ReadX 11308 49152 4096 4096 NT_STATUS_OK
ReadX 11308 53248 4096 4096 NT_STATUS_OK
ReadX 11308 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11308 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11311 NT_STATUS_OK
WriteX 11311 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11311 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11311 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11311 1004 NT_STATUS_OK
WriteX 11311 0 57088 57088 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
Close 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11311 1004 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11315 NT_STATUS_OK
ReadX 11315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11315 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11316 NT_STATUS_OK
WriteX 11316 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11316 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
WriteX 11316 0 51456 51456 NT_STATUS_OK
WriteX 11316 0 4096 4096 NT_STATUS_OK
Flush 11316 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
WriteX 11316 0 4096 4096 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11318 NT_STATUS_OK
Close 11318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11320 NT_STATUS_OK
ReadX 11320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11320 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11325 NT_STATUS_OK
WriteX 11325 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11325 258 NT_STATUS_OK
WriteX 11325 0 53077 53077 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11326 NT_STATUS_OK
WriteX 11326 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11326 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 1856 1856 NT_STATUS_OK
WriteX 11326 0 4096 4096 NT_STATUS_OK
Flush 11326 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
WriteX 11326 0 4096 4096 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11328 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
WriteX 11335 0 7983 7983 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11340 NT_STATUS_OK
WriteX 11340 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11340 258 NT_STATUS_OK
WriteX 11340 0 65536 65536 NT_STATUS_OK
WriteX 11340 65536 65536 65536 NT_STATUS_OK
WriteX 11340 131072 65536 65536 NT_STATUS_OK
WriteX 11340 196608 65536 65536 NT_STATUS_OK
WriteX 11340 262144 65536 65536 NT_STATUS_OK
WriteX 11340 327680 65536 65536 NT_STATUS_OK
WriteX 11340 393216 65536 65536 NT_STATUS_OK
WriteX 11340 458752 46731 46731 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11341 NT_STATUS_OK
WriteX 11341 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11330 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 0 65536 65536 NT_STATUS_OK
WriteX 11341 65536 22848 22848 NT_STATUS_OK
WriteX 11341 0 4096 4096 NT_STATUS_OK
Flush 11341 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 0 4096 4096 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11343 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11345 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11346 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11346 1004 NT_STATUS_OK
ReadX 11346 8192 4096 4096 NT_STATUS_OK
ReadX 11346 12288 4096 4096 NT_STATUS_OK
ReadX 11346 16384 4096 4096 NT_STATUS_OK
ReadX 11346 20480 4096 4096 NT_STATUS_OK
ReadX 11346 24576 4096 4096 NT_STATUS_OK
ReadX 11346 28672 4096 4096 NT_STATUS_OK
ReadX 11346 32768 4096 4096 NT_STATUS_OK
ReadX 11346 36864 4096 4096 NT_STATUS_OK
ReadX 11346 40960 4096 4096 NT_STATUS_OK
ReadX 11346 45056 4096 4096 NT_STATUS_OK
ReadX 11346 49152 4096 4096 NT_STATUS_OK
ReadX 11346 53248 4096 4096 NT_STATUS_OK
ReadX 11346 57344 4096 4096 NT_STATUS_OK
ReadX 11346 61440 4096 4096 NT_STATUS_OK
ReadX 11346 65536 4096 4096 NT_STATUS_OK
ReadX 11346 69632 4096 4096 NT_STATUS_OK
ReadX 11346 73728 4096 4096 NT_STATUS_OK
ReadX 11346 77824 4096 4096 NT_STATUS_OK
ReadX 11346 81920 4096 4096 NT_STATUS_OK
ReadX 11346 86016 4096 4096 NT_STATUS_OK
ReadX 11346 90112 4096 4096 NT_STATUS_OK
ReadX 11346 94208 4096 4096 NT_STATUS_OK
ReadX 11346 98304 4096 4096 NT_STATUS_OK
ReadX 11346 102400 4096 4096 NT_STATUS_OK
ReadX 11346 106496 4096 4096 NT_STATUS_OK
ReadX 11346 110592 4096 4096 NT_STATUS_OK
ReadX 11346 114688 4096 4096 NT_STATUS_OK
ReadX 11346 118784 4096 4096 NT_STATUS_OK
ReadX 11346 122880 4096 4096 NT_STATUS_OK
ReadX 11346 126976 4096 4096 NT_STATUS_OK
ReadX 11346 131072 4096 4096 NT_STATUS_OK
ReadX 11346 135168 4096 4096 NT_STATUS_OK
ReadX 11346 139264 4096 4096 NT_STATUS_OK
ReadX 11346 143360 4096 4096 NT_STATUS_OK
ReadX 11346 147456 4096 4096 NT_STATUS_OK
ReadX 11346 151552 4096 4096 NT_STATUS_OK
ReadX 11346 155648 4096 4096 NT_STATUS_OK
ReadX 11346 159744 4096 4096 NT_STATUS_OK
ReadX 11346 163840 4096 4096 NT_STATUS_OK
ReadX 11346 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11346 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11349 NT_STATUS_OK
WriteX 11349 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
Close 11346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11350 NT_STATUS_OK
SET_FILE_INFORMATION 11350 1004 NT_STATUS_OK
Close 11350 NT_STATUS_OK
WriteX 11349 0 42388 42388 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11353 NT_STATUS_OK
ReadX 11353 0 4096 4096 NT_STATUS_OK
ReadX 11353 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11354 NT_STATUS_OK
WriteX 11354 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 258 NT_STATUS_OK
SET_FILE_INFORMATION 11354 1004 NT_STATUS_OK
WriteX 11354 0 42652 42652 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
ReadX 11358 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11363 NT_STATUS_OK
WriteX 11363 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 258 NT_STATUS_OK
WriteX 11363 0 65536 65536 NT_STATUS_OK
WriteX 11363 65536 49 49 NT_STATUS_OK
Close 11363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 61440 61440 NT_STATUS_OK
ReadX 11364 61440 4096 4096 NT_STATUS_OK
ReadX 11364 65536 61440 61440 NT_STATUS_OK
ReadX 11364 126976 4096 4096 NT_STATUS_OK
ReadX 11364 131072 61440 61440 NT_STATUS_OK
ReadX 11364 192512 4096 4096 NT_STATUS_OK
ReadX 11364 196608 61440 61440 NT_STATUS_OK
ReadX 11364 258048 4096 4096 NT_STATUS_OK
ReadX 11364 262144 61440 61440 NT_STATUS_OK
ReadX 11364 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 61440 61440 NT_STATUS_OK
ReadX 11365 61440 4096 4096 NT_STATUS_OK
ReadX 11365 65536 61440 61440 NT_STATUS_OK
ReadX 11365 126976 4096 4096 NT_STATUS_OK
ReadX 11365 131072 61440 61440 NT_STATUS_OK
ReadX 11365 192512 4096 4096 NT_STATUS_OK
ReadX 11365 196608 61440 61440 NT_STATUS_OK
ReadX 11365 258048 4096 4096 NT_STATUS_OK
ReadX 11365 262144 61440 61440 NT_STATUS_OK
ReadX 11365 323584 4096 4096 NT_STATUS_OK
ReadX 11365 327680 61440 61440 NT_STATUS_OK
ReadX 11365 389120 4096 4096 NT_STATUS_OK
ReadX 11365 393216 61440 61440 NT_STATUS_OK
ReadX 11365 454656 4096 4096 NT_STATUS_OK
ReadX 11365 458752 61440 61440 NT_STATUS_OK
ReadX 11365 520192 4096 4096 NT_STATUS_OK
ReadX 11365 524288 61440 61440 NT_STATUS_OK
ReadX 11365 585728 4096 4096 NT_STATUS_OK
ReadX 11365 589824 61440 61440 NT_STATUS_OK
ReadX 11365 651264 4096 4096 NT_STATUS_OK
ReadX 11365 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 61440 61440 NT_STATUS_OK
ReadX 11366 61440 4096 4096 NT_STATUS_OK
ReadX 11366 65536 61440 61440 NT_STATUS_OK
ReadX 11366 126976 4096 4096 NT_STATUS_OK
ReadX 11366 131072 61440 61440 NT_STATUS_OK
ReadX 11366 192512 4096 4096 NT_STATUS_OK
ReadX 11366 196608 61440 61440 NT_STATUS_OK
ReadX 11366 258048 4096 4096 NT_STATUS_OK
ReadX 11366 262144 61440 61440 NT_STATUS_OK
ReadX 11366 323584 4096 4096 NT_STATUS_OK
ReadX 11366 327680 61440 61440 NT_STATUS_OK
ReadX 11366 389120 4096 4096 NT_STATUS_OK
ReadX 11366 393216 61440 61440 NT_STATUS_OK
ReadX 11366 454656 4096 4096 NT_STATUS_OK
ReadX 11366 458752 61440 61440 NT_STATUS_OK
ReadX 11366 520192 4096 4096 NT_STATUS_OK
ReadX 11366 524288 61440 61440 NT_STATUS_OK
ReadX 11366 585728 4096 4096 NT_STATUS_OK
ReadX 11366 589824 61440 61440 NT_STATUS_OK
ReadX 11366 651264 4096 4096 NT_STATUS_OK
ReadX 11366 655360 61440 61440 NT_STATUS_OK
ReadX 11366 716800 4096 4096 NT_STATUS_OK
ReadX 11366 720896 61440 61440 NT_STATUS_OK
ReadX 11366 782336 4096 4096 NT_STATUS_OK
ReadX 11366 786432 61440 61440 NT_STATUS_OK
ReadX 11366 847872 4096 4096 NT_STATUS_OK
ReadX 11366 851968 61440 61440 NT_STATUS_OK
ReadX 11366 913408 4096 4096 NT_STATUS_OK
ReadX 11366 917504 61440 61440 NT_STATUS_OK
ReadX 11366 978944 4096 4096 NT_STATUS_OK
ReadX 11366 983040 61440 61440 NT_STATUS_OK
ReadX 11366 1044480 4096 4096 NT_STATUS_OK
ReadX 11366 1048576 61440 61440 NT_STATUS_OK
ReadX 11366 1110016 4096 4096 NT_STATUS_OK
ReadX 11366 1114112 61440 61440 NT_STATUS_OK
ReadX 11366 1175552 4096 4096 NT_STATUS_OK
ReadX 11366 1179648 61440 61440 NT_STATUS_OK
ReadX 11366 1241088 4096 4096 NT_STATUS_OK
ReadX 11366 1245184 61440 61440 NT_STATUS_OK
ReadX 11366 1306624 4096 4096 NT_STATUS_OK
ReadX 11366 1310720 61440 61440 NT_STATUS_OK
ReadX 11366 1372160 4096 4096 NT_STATUS_OK
ReadX 11366 1376256 61440 61440 NT_STATUS_OK
ReadX 11366 1437696 4096 4096 NT_STATUS_OK
ReadX 11366 1441792 61440 61440 NT_STATUS_OK
ReadX 11366 1503232 4096 4096 NT_STATUS_OK
ReadX 11366 1507328 61440 61440 NT_STATUS_OK
ReadX 11366 1568768 4096 4096 NT_STATUS_OK
ReadX 11366 1572864 61440 61440 NT_STATUS_OK
ReadX 11366 1634304 4096 4096 NT_STATUS_OK
ReadX 11366 1638400 61440 61440 NT_STATUS_OK
ReadX 11366 1699840 4096 4096 NT_STATUS_OK
ReadX 11366 1703936 61440 61440 NT_STATUS_OK
ReadX 11366 1765376 4096 4096 NT_STATUS_OK
ReadX 11366 1769472 61440 61440 NT_STATUS_OK
ReadX 11366 1830912 4096 4096 NT_STATUS_OK
ReadX 11366 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11368 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
ReadX 11368 2156 24 24 NT_STATUS_OK
ReadX 11368 2139 276 276 NT_STATUS_OK
ReadX 11368 2136 14 14 NT_STATUS_OK
ReadX 11368 2136 7 7 NT_STATUS_OK
ReadX 11368 2138 12 12 NT_STATUS_OK
ReadX 11368 2137 8 8 NT_STATUS_OK
ReadX 11368 2135 15 15 NT_STATUS_OK
ReadX 11368 0 16 16 NT_STATUS_OK
ReadX 11368 16 2048 2048 NT_STATUS_OK
ReadX 11368 2064 2048 2048 NT_STATUS_OK
ReadX 11368 257 2048 2048 NT_STATUS_OK
ReadX 11368 385 2048 2048 NT_STATUS_OK
ReadX 11368 513 2048 2048 NT_STATUS_OK
ReadX 11368 641 2048 2048 NT_STATUS_OK
ReadX 11368 769 2048 2048 NT_STATUS_OK
ReadX 11368 897 2048 2048 NT_STATUS_OK
ReadX 11368 1025 2048 2048 NT_STATUS_OK
ReadX 11368 1153 2048 2048 NT_STATUS_OK
ReadX 11368 1281 2048 2048 NT_STATUS_OK
ReadX 11368 1409 2048 2048 NT_STATUS_OK
ReadX 11368 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11370 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11373 NT_STATUS_OK
WriteX 11373 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11373 258 NT_STATUS_OK
WriteX 11373 0 10575 10575 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11378 NT_STATUS_OK
LockX 11378 2147483538 1 NT_STATUS_OK
UnlockX 11378 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1005 NT_STATUS_OK
ReadX 11378 0 512 512 NT_STATUS_OK
ReadX 11378 512 512 512 NT_STATUS_OK
ReadX 11378 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11379 NT_STATUS_OK
QUERY_FILE_INFORMATION 11379 1005 NT_STATUS_OK
ReadX 11379 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11380 NT_STATUS_OK
LockX 11380 2147483538 1 NT_STATUS_OK
UnlockX 11380 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11380 1005 NT_STATUS_OK
ReadX 11380 0 512 512 NT_STATUS_OK
ReadX 11380 512 512 512 NT_STATUS_OK
ReadX 11380 1024 512 512 NT_STATUS_OK
ReadX 11380 288 20 20 NT_STATUS_OK
ReadX 11380 308 2084 2084 NT_STATUS_OK
ReadX 11380 388 2084 2084 NT_STATUS_OK
ReadX 11380 388 2084 2084 NT_STATUS_OK
ReadX 11367 2157 1386 1386 NT_STATUS_OK
ReadX 11380 2472 399 399 NT_STATUS_OK
ReadX 11380 3072 1536 1536 NT_STATUS_OK
ReadX 11380 544 149 149 NT_STATUS_OK
ReadX 11380 693 485 485 NT_STATUS_OK
Close 11380 NT_STATUS_OK
ReadX 11367 2157 4096 4096 NT_STATUS_OK
ReadX 11367 6253 4096 4096 NT_STATUS_OK
ReadX 11367 10349 4096 4096 NT_STATUS_OK
ReadX 11367 14445 4096 4096 NT_STATUS_OK
ReadX 11367 18541 4096 4096 NT_STATUS_OK
ReadX 11367 22637 256 256 NT_STATUS_OK
ReadX 11367 22893 4096 4096 NT_STATUS_OK
ReadX 11367 26989 4096 4096 NT_STATUS_OK
ReadX 11367 31085 4096 4096 NT_STATUS_OK
ReadX 11367 35181 4096 4096 NT_STATUS_OK
ReadX 11367 39277 4096 4096 NT_STATUS_OK
ReadX 11367 43373 4096 4096 NT_STATUS_OK
ReadX 11367 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11367 2157 1024 1024 NT_STATUS_OK
ReadX 11367 1667 4688 4688 NT_STATUS_OK
ReadX 11367 6355 3516 3516 NT_STATUS_OK
ReadX 11367 9871 16384 16384 NT_STATUS_OK
ReadX 11367 26255 3771 3771 NT_STATUS_OK
ReadX 11367 30026 2048 2048 NT_STATUS_OK
ReadX 11367 32074 1024 1024 NT_STATUS_OK
ReadX 11367 33098 6652 6652 NT_STATUS_OK
ReadX 11367 39750 16384 16384 NT_STATUS_OK
ReadX 11367 56134 10496 10496 NT_STATUS_OK
ReadX 11367 66630 1784 1784 NT_STATUS_OK
ReadX 11367 68414 90 90 NT_STATUS_OK
ReadX 11367 68504 273 273 NT_STATUS_OK
ReadX 11367 68777 1600 1600 NT_STATUS_OK
ReadX 11367 70377 640 640 NT_STATUS_OK
ReadX 11367 71017 1280 1280 NT_STATUS_OK
ReadX 11367 72297 8464 8464 NT_STATUS_OK
ReadX 11367 80761 158 158 NT_STATUS_OK
ReadX 11367 80919 912 912 NT_STATUS_OK
ReadX 11367 81831 1980 1980 NT_STATUS_OK
ReadX 11367 83811 2256 2256 NT_STATUS_OK
ReadX 11367 86067 400 400 NT_STATUS_OK
ReadX 11367 86467 252 252 NT_STATUS_OK
ReadX 11367 86719 42 42 NT_STATUS_OK
ReadX 11367 86761 725 725 NT_STATUS_OK
ReadX 11367 2009 512 512 NT_STATUS_OK
ReadX 11367 3895 9 9 NT_STATUS_OK
ReadX 11367 3781 46 46 NT_STATUS_OK
ReadX 11367 4059 92 92 NT_STATUS_OK
ReadX 11367 3781 92 92 NT_STATUS_OK
ReadX 11367 3986 184 184 NT_STATUS_OK
ReadX 11367 3987 16384 16384 NT_STATUS_OK
ReadX 11367 3902 16384 16384 NT_STATUS_OK
ReadX 11367 3781 10240 10240 NT_STATUS_OK
ReadX 11367 3821 16384 16384 NT_STATUS_OK
ReadX 11367 3891 935 935 NT_STATUS_OK
ReadX 11367 4060 10240 10240 NT_STATUS_OK
ReadX 11367 4059 184 184 NT_STATUS_OK
ReadX 11367 256 184 184 NT_STATUS_OK
ReadX 11367 256 1026 1026 NT_STATUS_OK
ReadX 11367 3901 326 326 NT_STATUS_OK
ReadX 11367 3899 652 652 NT_STATUS_OK
ReadX 11367 256 2 2 NT_STATUS_OK
ReadX 11367 258 4948 4948 NT_STATUS_OK
Close 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11382 NT_STATUS_OK
Close 11382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11385 NT_STATUS_OK
WriteX 11385 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 258 NT_STATUS_OK
WriteX 11385 0 65536 65536 NT_STATUS_OK
WriteX 11385 65536 65536 65536 NT_STATUS_OK
WriteX 11385 131072 65536 65536 NT_STATUS_OK
WriteX 11385 196608 65536 65536 NT_STATUS_OK
WriteX 11385 262144 65536 65536 NT_STATUS_OK
WriteX 11385 327680 65536 65536 NT_STATUS_OK
WriteX 11385 393216 65536 65536 NT_STATUS_OK
WriteX 11385 458752 65536 65536 NT_STATUS_OK
WriteX 11385 524288 65536 65536 NT_STATUS_OK
WriteX 11385 589824 35257 35257 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11390 NT_STATUS_OK
WriteX 11390 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11390 258 NT_STATUS_OK
WriteX 11390 0 65536 65536 NT_STATUS_OK
WriteX 11390 65536 65536 65536 NT_STATUS_OK
WriteX 11390 131072 65536 65536 NT_STATUS_OK
WriteX 11390 196608 65536 65536 NT_STATUS_OK
WriteX 11390 262144 65536 65536 NT_STATUS_OK
WriteX 11390 327680 65536 65536 NT_STATUS_OK
WriteX 11390 393216 65536 65536 NT_STATUS_OK
WriteX 11390 458752 65536 65536 NT_STATUS_OK
WriteX 11390 524288 65536 65536 NT_STATUS_OK
WriteX 11390 589824 57598 57598 NT_STATUS_OK
Close 11390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11392 NT_STATUS_OK
WriteX 11392 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11392 258 NT_STATUS_OK
WriteX 11392 0 12543 12543 NT_STATUS_OK
Flush 11392 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11398 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
ReadX 11398 1938 24 24 NT_STATUS_OK
ReadX 11398 1920 276 276 NT_STATUS_OK
ReadX 11398 1918 14 14 NT_STATUS_OK
ReadX 11398 1918 7 7 NT_STATUS_OK
ReadX 11398 1919 12 12 NT_STATUS_OK
ReadX 11398 1919 8 8 NT_STATUS_OK
ReadX 11398 1917 15 15 NT_STATUS_OK
ReadX 11398 0 16 16 NT_STATUS_OK
ReadX 11398 16 2048 2048 NT_STATUS_OK
ReadX 11398 2064 2048 2048 NT_STATUS_OK
ReadX 11398 257 2048 2048 NT_STATUS_OK
ReadX 11398 385 2048 2048 NT_STATUS_OK
ReadX 11398 513 2048 2048 NT_STATUS_OK
ReadX 11398 641 2048 2048 NT_STATUS_OK
ReadX 11398 769 2048 2048 NT_STATUS_OK
ReadX 11398 897 2048 2048 NT_STATUS_OK
ReadX 11398 1025 2048 2048 NT_STATUS_OK
ReadX 11398 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11403 NT_STATUS_OK
WriteX 11403 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 11588 11588 NT_STATUS_OK
Flush 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11408 NT_STATUS_OK
WriteX 11408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 258 NT_STATUS_OK
WriteX 11408 0 11615 11615 NT_STATUS_OK
Flush 11408 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11417 NT_STATUS_OK
WriteX 11417 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 258 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 16050 16050 NT_STATUS_OK
Close 11417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11397 1939 64 64 NT_STATUS_OK
ReadX 11397 128 248 248 NT_STATUS_OK
ReadX 11397 128 568 568 NT_STATUS_OK
ReadX 11397 3872 1536 1536 NT_STATUS_OK
ReadX 11397 3456 2560 2560 NT_STATUS_OK
ReadX 11397 3136 512 512 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
ReadX 11397 3264 3072 3072 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 3616 4096 4096 NT_STATUS_OK
ReadX 11397 1939 64 64 NT_STATUS_OK
ReadX 11397 128 248 248 NT_STATUS_OK
ReadX 11397 128 608 608 NT_STATUS_OK
ReadX 11397 2858 1024 1024 NT_STATUS_OK
ReadX 11397 2810 4096 4096 NT_STATUS_OK
ReadX 11397 2826 4096 4096 NT_STATUS_OK
ReadX 11397 2580 2048 2048 NT_STATUS_OK
ReadX 11397 2800 2560 2560 NT_STATUS_OK
ReadX 11397 2100 4096 4096 NT_STATUS_OK
ReadX 11397 2084 4096 4096 NT_STATUS_OK
ReadX 11397 868 4096 4096 NT_STATUS_OK
ReadX 11397 2324 4096 4096 NT_STATUS_OK
ReadX 11397 884 4096 4096 NT_STATUS_OK
ReadX 11397 2604 1024 1024 NT_STATUS_OK
ReadX 11397 580 4096 4096 NT_STATUS_OK
ReadX 11397 596 4096 4096 NT_STATUS_OK
ReadX 11397 2752 4096 4096 NT_STATUS_OK
ReadX 11397 2842 1024 1024 NT_STATUS_OK
ReadX 11397 660 4096 4096 NT_STATUS_OK
ReadX 11397 2720 4096 4096 NT_STATUS_OK
ReadX 11397 2736 4096 4096 NT_STATUS_OK
ReadX 11397 628 4096 4096 NT_STATUS_OK
ReadX 11397 2704 4096 4096 NT_STATUS_OK
ReadX 11397 1556 4096 4096 NT_STATUS_OK
ReadX 11397 576 4096 4096 NT_STATUS_OK
ReadX 11397 3168 1536 1536 NT_STATUS_OK
ReadX 11397 832 4096 4096 NT_STATUS_OK
ReadX 11397 1088 4096 4096 NT_STATUS_OK
ReadX 11397 1344 4096 4096 NT_STATUS_OK
ReadX 11397 1600 4096 4096 NT_STATUS_OK
ReadX 11397 1856 4096 4096 NT_STATUS_OK
ReadX 11397 2112 4096 4096 NT_STATUS_OK
ReadX 11397 1892 4096 4096 NT_STATUS_OK
ReadX 11397 820 4096 4096 NT_STATUS_OK
ReadX 11397 788 4096 4096 NT_STATUS_OK
ReadX 11397 1604 4096 4096 NT_STATUS_OK
ReadX 11397 3648 4096 4096 NT_STATUS_OK
ReadX 11397 2608 4096 4096 NT_STATUS_OK
ReadX 11397 548 4096 4096 NT_STATUS_OK
ReadX 11397 740 4096 4096 NT_STATUS_OK
ReadX 11397 1344 4096 4096 NT_STATUS_OK
ReadX 11397 3392 4096 4096 NT_STATUS_OK
ReadX 11397 3904 4096 4096 NT_STATUS_OK
ReadX 11397 644 4096 4096 NT_STATUS_OK
ReadX 11397 676 4096 4096 NT_STATUS_OK
ReadX 11397 2688 4096 4096 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 900 4096 4096 NT_STATUS_OK
ReadX 11397 1908 4096 4096 NT_STATUS_OK
ReadX 11397 852 4096 4096 NT_STATUS_OK
ReadX 11397 724 4096 4096 NT_STATUS_OK
ReadX 11397 2292 4096 4096 NT_STATUS_OK
ReadX 11397 612 4096 4096 NT_STATUS_OK
ReadX 11397 388 4096 4096 NT_STATUS_OK
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 500 4096 4096 NT_STATUS_OK
ReadX 11397 356 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 576 4096 4096 NT_STATUS_OK
ReadX 11397 340 4096 4096 NT_STATUS_OK
ReadX 11397 420 4096 4096 NT_STATUS_OK
ReadX 11397 1600 4096 4096 NT_STATUS_OK
ReadX 11397 404 4096 4096 NT_STATUS_OK
ReadX 11397 1428 4096 4096 NT_STATUS_OK
ReadX 11397 2656 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 452 4096 4096 NT_STATUS_OK
ReadX 11397 692 4096 4096 NT_STATUS_OK
ReadX 11397 564 4096 4096 NT_STATUS_OK
ReadX 11397 372 4096 4096 NT_STATUS_OK
ReadX 11397 468 4096 4096 NT_STATUS_OK
ReadX 11397 484 4096 4096 NT_STATUS_OK
ReadX 11397 1088 4096 4096 NT_STATUS_OK
ReadX 11397 1924 4096 4096 NT_STATUS_OK
ReadX 11397 2768 4096 4096 NT_STATUS_OK
ReadX 11397 832 4096 4096 NT_STATUS_OK
ReadX 11397 836 4096 4096 NT_STATUS_OK
ReadX 11397 1856 4096 4096 NT_STATUS_OK
ReadX 11397 2640 4096 4096 NT_STATUS_OK
ReadX 11397 436 4096 4096 NT_STATUS_OK
ReadX 11397 1828 4096 4096 NT_STATUS_OK
ReadX 11397 804 4096 4096 NT_STATUS_OK
ReadX 11397 1860 4096 4096 NT_STATUS_OK
ReadX 11397 1812 4096 4096 NT_STATUS_OK
ReadX 11397 756 4096 4096 NT_STATUS_OK
ReadX 11397 1636 4096 4096 NT_STATUS_OK
ReadX 11397 772 4096 4096 NT_STATUS_OK
ReadX 11397 2036 4096 4096 NT_STATUS_OK
ReadX 11397 1220 4096 4096 NT_STATUS_OK
ReadX 11397 1652 4096 4096 NT_STATUS_OK
ReadX 11397 2588 4096 4096 NT_STATUS_OK
ReadX 11397 916 4096 4096 NT_STATUS_OK
ReadX 11397 260 4096 4096 NT_STATUS_OK
ReadX 11397 932 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 308 4096 4096 NT_STATUS_OK
ReadX 11397 292 4096 4096 NT_STATUS_OK
ReadX 11397 1140 4096 4096 NT_STATUS_OK
ReadX 11397 276 4096 4096 NT_STATUS_OK
ReadX 11397 2020 4096 4096 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
ReadX 11397 516 4096 4096 NT_STATUS_OK
ReadX 11397 1844 4096 4096 NT_STATUS_OK
ReadX 11397 1124 4096 4096 NT_STATUS_OK
ReadX 11397 3136 4096 4096 NT_STATUS_OK
ReadX 11397 324 4096 4096 NT_STATUS_OK
ReadX 11397 1156 4096 4096 NT_STATUS_OK
ReadX 11397 1172 4096 4096 NT_STATUS_OK
ReadX 11397 2112 4096 4096 NT_STATUS_OK
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 964 4096 4096 NT_STATUS_OK
ReadX 11397 980 4096 4096 NT_STATUS_OK
ReadX 11397 1012 4096 4096 NT_STATUS_OK
ReadX 11397 532 4096 4096 NT_STATUS_OK
ReadX 11397 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11397 1620 4096 4096 NT_STATUS_OK
ReadX 11397 1604 4096 4096 NT_STATUS_OK
ReadX 11397 2116 4096 4096 NT_STATUS_OK
ReadX 11397 2132 4096 4096 NT_STATUS_OK
ReadX 11397 2148 4096 4096 NT_STATUS_OK
ReadX 11397 2276 4096 4096 NT_STATUS_OK
ReadX 11397 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11422 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 1004 NT_STATUS_OK
Close 11377 NT_STATUS_OK
WriteX 11422 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11422 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11379 1004 NT_STATUS_OK
Close 11379 NT_STATUS_OK
WriteX 11422 0 65536 65536 NT_STATUS_OK
WriteX 11422 65536 64850 64850 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11424 NT_STATUS_OK
WriteX 11424 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11424 258 NT_STATUS_OK
ReadX 11397 2068 4096 4096 NT_STATUS_OK
ReadX 11397 1588 4096 4096 NT_STATUS_OK
ReadX 11397 1572 4096 4096 NT_STATUS_OK
WriteX 11424 0 18630 18630 NT_STATUS_OK
Flush 11424 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11426 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11397 612 4096 4096 NT_STATUS_OK
ReadX 11397 564 4096 4096 NT_STATUS_OK
ReadX 11397 1876 4096 4096 NT_STATUS_OK
ReadX 11397 628 4096 4096 NT_STATUS_OK
ReadX 11397 740 4096 4096 NT_STATUS_OK
ReadX 11397 724 4096 4096 NT_STATUS_OK
ReadX 11397 644 4096 4096 NT_STATUS_OK
ReadX 11397 2324 4096 4096 NT_STATUS_OK
ReadX 11397 660 4096 4096 NT_STATUS_OK
ReadX 11397 852 4096 4096 NT_STATUS_OK
ReadX 11397 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 580 4096 4096 NT_STATUS_OK
ReadX 11397 3136 512 512 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
Close 11397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 61440 4096 4096 NT_STATUS_OK
ReadX 11429 126976 4096 4096 NT_STATUS_OK
WriteX 11429 0 65536 65536 NT_STATUS_OK
WriteX 11429 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 61440 4096 4096 NT_STATUS_OK
ReadX 11430 126976 4096 4096 NT_STATUS_OK
ReadX 11430 192512 4096 4096 NT_STATUS_OK
ReadX 11430 258048 4096 4096 NT_STATUS_OK
WriteX 11430 0 65536 65536 NT_STATUS_OK
WriteX 11430 65536 65536 65536 NT_STATUS_OK
WriteX 11430 131072 65536 65536 NT_STATUS_OK
WriteX 11430 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 61440 4096 4096 NT_STATUS_OK
ReadX 11431 126976 4096 4096 NT_STATUS_OK
ReadX 11431 192512 4096 4096 NT_STATUS_OK
ReadX 11431 258048 4096 4096 NT_STATUS_OK
ReadX 11431 323584 4096 4096 NT_STATUS_OK
ReadX 11431 389120 4096 4096 NT_STATUS_OK
ReadX 11431 454656 4096 4096 NT_STATUS_OK
ReadX 11431 520192 4096 4096 NT_STATUS_OK
WriteX 11431 0 65536 65536 NT_STATUS_OK
WriteX 11431 65536 65536 65536 NT_STATUS_OK
WriteX 11431 131072 65536 65536 NT_STATUS_OK
WriteX 11431 196608 65536 65536 NT_STATUS_OK
WriteX 11431 262144 65536 65536 NT_STATUS_OK
WriteX 11431 327680 65536 65536 NT_STATUS_OK
WriteX 11431 393216 65536 65536 NT_STATUS_OK
WriteX 11431 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11434 NT_STATUS_OK
WriteX 11434 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11434 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11432 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11439 NT_STATUS_OK
WriteX 11439 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11439 258 NT_STATUS_OK
WriteX 11439 0 62591 62591 NT_STATUS_OK
Close 11439 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11441 NT_STATUS_OK
Close 11441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11444 NT_STATUS_OK
WriteX 11444 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11444 258 NT_STATUS_OK
WriteX 11444 0 10845 10845 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11446 NT_STATUS_OK
Close 11446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11449 NT_STATUS_OK
WriteX 11449 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11449 258 NT_STATUS_OK
WriteX 11449 0 30118 30118 NT_STATUS_OK
Close 11449 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
WriteX 11434 0 64 64 NT_STATUS_OK
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 61440 61440 NT_STATUS_OK
ReadX 11451 61440 4096 4096 NT_STATUS_OK
ReadX 11451 65536 61440 61440 NT_STATUS_OK
ReadX 11451 126976 4096 4096 NT_STATUS_OK
ReadX 11451 131072 61440 61440 NT_STATUS_OK
ReadX 11451 192512 4096 4096 NT_STATUS_OK
ReadX 11451 196608 61440 61440 NT_STATUS_OK
ReadX 11451 258048 4096 4096 NT_STATUS_OK
ReadX 11451 262144 61440 61440 NT_STATUS_OK
ReadX 11451 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 61440 61440 NT_STATUS_OK
ReadX 11452 61440 4096 4096 NT_STATUS_OK
ReadX 11452 65536 61440 61440 NT_STATUS_OK
ReadX 11452 126976 4096 4096 NT_STATUS_OK
ReadX 11452 131072 61440 61440 NT_STATUS_OK
ReadX 11452 192512 4096 4096 NT_STATUS_OK
ReadX 11452 196608 61440 61440 NT_STATUS_OK
ReadX 11452 258048 4096 4096 NT_STATUS_OK
ReadX 11452 262144 61440 61440 NT_STATUS_OK
ReadX 11452 323584 4096 4096 NT_STATUS_OK
ReadX 11452 327680 61440 61440 NT_STATUS_OK
ReadX 11452 389120 4096 4096 NT_STATUS_OK
ReadX 11452 393216 61440 61440 NT_STATUS_OK
ReadX 11452 454656 4096 4096 NT_STATUS_OK
ReadX 11452 458752 61440 61440 NT_STATUS_OK
ReadX 11452 520192 4096 4096 NT_STATUS_OK
ReadX 11452 524288 61440 61440 NT_STATUS_OK
ReadX 11452 585728 4096 4096 NT_STATUS_OK
ReadX 11452 589824 61440 61440 NT_STATUS_OK
ReadX 11452 651264 4096 4096 NT_STATUS_OK
ReadX 11452 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 61440 61440 NT_STATUS_OK
ReadX 11453 61440 4096 4096 NT_STATUS_OK
ReadX 11453 65536 61440 61440 NT_STATUS_OK
ReadX 11453 126976 4096 4096 NT_STATUS_OK
ReadX 11453 131072 61440 61440 NT_STATUS_OK
ReadX 11453 192512 4096 4096 NT_STATUS_OK
ReadX 11453 196608 61440 61440 NT_STATUS_OK
ReadX 11453 258048 4096 4096 NT_STATUS_OK
ReadX 11453 262144 61440 61440 NT_STATUS_OK
ReadX 11453 323584 4096 4096 NT_STATUS_OK
ReadX 11453 327680 61440 61440 NT_STATUS_OK
ReadX 11453 389120 4096 4096 NT_STATUS_OK
ReadX 11453 393216 61440 61440 NT_STATUS_OK
ReadX 11453 454656 4096 4096 NT_STATUS_OK
ReadX 11453 458752 61440 61440 NT_STATUS_OK
ReadX 11453 520192 4096 4096 NT_STATUS_OK
ReadX 11453 524288 61440 61440 NT_STATUS_OK
ReadX 11453 585728 4096 4096 NT_STATUS_OK
ReadX 11453 589824 61440 61440 NT_STATUS_OK
ReadX 11453 651264 4096 4096 NT_STATUS_OK
ReadX 11453 655360 61440 61440 NT_STATUS_OK
ReadX 11453 716800 4096 4096 NT_STATUS_OK
ReadX 11453 720896 61440 61440 NT_STATUS_OK
ReadX 11453 782336 4096 4096 NT_STATUS_OK
ReadX 11453 786432 61440 61440 NT_STATUS_OK
ReadX 11453 847872 4096 4096 NT_STATUS_OK
ReadX 11453 851968 61440 61440 NT_STATUS_OK
ReadX 11453 913408 4096 4096 NT_STATUS_OK
ReadX 11453 917504 61440 61440 NT_STATUS_OK
ReadX 11453 978944 4096 4096 NT_STATUS_OK
ReadX 11453 983040 61440 61440 NT_STATUS_OK
ReadX 11453 1044480 4096 4096 NT_STATUS_OK
ReadX 11453 1048576 61440 61440 NT_STATUS_OK
ReadX 11453 1110016 4096 4096 NT_STATUS_OK
ReadX 11453 1114112 61440 61440 NT_STATUS_OK
ReadX 11453 1175552 4096 4096 NT_STATUS_OK
ReadX 11453 1179648 61440 61440 NT_STATUS_OK
ReadX 11453 1241088 4096 4096 NT_STATUS_OK
ReadX 11453 1245184 61440 61440 NT_STATUS_OK
ReadX 11453 1306624 4096 4096 NT_STATUS_OK
ReadX 11453 1310720 61440 61440 NT_STATUS_OK
ReadX 11453 1372160 4096 4096 NT_STATUS_OK
ReadX 11453 1376256 61440 61440 NT_STATUS_OK
ReadX 11453 1437696 4096 4096 NT_STATUS_OK
ReadX 11453 1441792 61440 61440 NT_STATUS_OK
ReadX 11453 1503232 4096 4096 NT_STATUS_OK
ReadX 11453 1507328 61440 61440 NT_STATUS_OK
ReadX 11453 1568768 4096 4096 NT_STATUS_OK
ReadX 11453 1572864 61440 61440 NT_STATUS_OK
ReadX 11453 1634304 4096 4096 NT_STATUS_OK
ReadX 11453 1638400 61440 61440 NT_STATUS_OK
ReadX 11453 1699840 4096 4096 NT_STATUS_OK
ReadX 11453 1703936 61440 61440 NT_STATUS_OK
ReadX 11453 1765376 4096 4096 NT_STATUS_OK
ReadX 11453 1769472 61440 61440 NT_STATUS_OK
ReadX 11453 1830912 4096 4096 NT_STATUS_OK
ReadX 11453 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11454 NT_STATUS_OK
Close 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 4096 4096 NT_STATUS_OK
ReadX 11458 4096 4096 4096 NT_STATUS_OK
ReadX 11458 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Close 11457 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11462 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11463 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 8192 8192 NT_STATUS_OK
ReadX 11466 8192 8192 8192 NT_STATUS_OK
ReadX 11466 16384 8192 8192 NT_STATUS_OK
ReadX 11466 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11468 NT_STATUS_OK
Close 11468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11471 NT_STATUS_OK
WriteX 11471 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 258 NT_STATUS_OK
WriteX 11471 0 10438 10438 NT_STATUS_OK
Close 11471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11475 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11477 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11478 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
ReadX 11480 4096 4096 4096 NT_STATUS_OK
ReadX 11480 8192 4096 4096 NT_STATUS_OK
ReadX 11480 12288 8192 8192 NT_STATUS_OK
ReadX 11480 20480 8192 8192 NT_STATUS_OK
ReadX 11480 28672 8192 8192 NT_STATUS_OK
ReadX 11480 36864 8192 8192 NT_STATUS_OK
ReadX 11480 45056 8192 8192 NT_STATUS_OK
ReadX 11480 53248 8192 8192 NT_STATUS_OK
ReadX 11480 61440 8192 8192 NT_STATUS_OK
ReadX 11480 69632 8192 8192 NT_STATUS_OK
ReadX 11480 77824 8192 8192 NT_STATUS_OK
ReadX 11480 86016 8192 8192 NT_STATUS_OK
ReadX 11480 94208 8192 8192 NT_STATUS_OK
ReadX 11480 102400 8192 8192 NT_STATUS_OK
ReadX 11480 110592 8192 8192 NT_STATUS_OK
ReadX 11480 118784 8192 8192 NT_STATUS_OK
ReadX 11480 126976 8192 8192 NT_STATUS_OK
ReadX 11480 135168 8192 8192 NT_STATUS_OK
ReadX 11480 143360 8192 8192 NT_STATUS_OK
ReadX 11480 151552 8192 8192 NT_STATUS_OK
ReadX 11480 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11480 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11485 NT_STATUS_OK
WriteX 11485 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11485 258 NT_STATUS_OK
WriteX 11485 0 28489 28489 NT_STATUS_OK
WriteX 11485 0 12288 12288 NT_STATUS_OK
Close 11485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11486 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11488 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11489 NT_STATUS_OK
Close 11489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 8192 8192 NT_STATUS_OK
ReadX 11492 8192 8192 8192 NT_STATUS_OK
ReadX 11492 16384 8192 8192 NT_STATUS_OK
ReadX 11492 24576 8192 8192 NT_STATUS_OK
ReadX 11492 32768 16384 16384 NT_STATUS_OK
ReadX 11492 49152 8192 8192 NT_STATUS_OK
ReadX 11492 57344 8192 8192 NT_STATUS_OK
ReadX 11492 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11497 NT_STATUS_OK
WriteX 11497 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 258 NT_STATUS_OK
WriteX 11497 0 29253 29253 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11504 NT_STATUS_OK
WriteX 11504 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11504 258 NT_STATUS_OK
WriteX 11504 0 30183 30183 NT_STATUS_OK
Close 11504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11505 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11507 NT_STATUS_OK
WriteX 11507 0 510 510 NT_STATUS_OK
WriteX 11507 510 512 512 NT_STATUS_OK
WriteX 11507 1022 510 510 NT_STATUS_OK
WriteX 11507 1532 510 510 NT_STATUS_OK
WriteX 11507 2042 168 168 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11508 NT_STATUS_OK
Close 11508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 61440 4096 4096 NT_STATUS_OK
ReadX 11511 126976 4096 4096 NT_STATUS_OK
WriteX 11511 0 65536 65536 NT_STATUS_OK
WriteX 11511 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 61440 4096 4096 NT_STATUS_OK
ReadX 11512 126976 4096 4096 NT_STATUS_OK
ReadX 11512 192512 4096 4096 NT_STATUS_OK
ReadX 11512 258048 4096 4096 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 65536 65536 NT_STATUS_OK
WriteX 11512 131072 65536 65536 NT_STATUS_OK
WriteX 11512 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 61440 4096 4096 NT_STATUS_OK
ReadX 11513 126976 4096 4096 NT_STATUS_OK
ReadX 11513 192512 4096 4096 NT_STATUS_OK
ReadX 11513 258048 4096 4096 NT_STATUS_OK
ReadX 11513 323584 4096 4096 NT_STATUS_OK
ReadX 11513 389120 4096 4096 NT_STATUS_OK
ReadX 11513 454656 4096 4096 NT_STATUS_OK
ReadX 11513 520192 4096 4096 NT_STATUS_OK
WriteX 11513 0 65536 65536 NT_STATUS_OK
WriteX 11513 65536 65536 65536 NT_STATUS_OK
WriteX 11513 131072 65536 65536 NT_STATUS_OK
WriteX 11513 196608 65536 65536 NT_STATUS_OK
WriteX 11513 262144 65536 65536 NT_STATUS_OK
WriteX 11513 327680 65536 65536 NT_STATUS_OK
WriteX 11513 393216 65536 65536 NT_STATUS_OK
WriteX 11513 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11514 NT_STATUS_OK
Close 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11523 NT_STATUS_OK
Close 11523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11525 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11543 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11548 NT_STATUS_OK
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11558 NT_STATUS_OK
Close 11558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11579 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11582 NT_STATUS_OK
WriteX 11582 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11582 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11582 0 65536 65536 NT_STATUS_OK
WriteX 11582 65536 65536 65536 NT_STATUS_OK
WriteX 11582 131072 65536 65536 NT_STATUS_OK
WriteX 11582 196608 65536 65536 NT_STATUS_OK
WriteX 11582 262144 26634 26634 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11587 NT_STATUS_OK
Close 11587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
ReadX 11590 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11591 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11613 NT_STATUS_OK
Close 11613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11618 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11638 NT_STATUS_OK
Close 11638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11642 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11647 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
Close 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11714 0 4096 4096 NT_STATUS_OK
Close 11714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
ReadX 11716 4096 4096 4096 NT_STATUS_OK
ReadX 11716 8192 4096 4096 NT_STATUS_OK
ReadX 11716 12288 4096 4096 NT_STATUS_OK
ReadX 11716 16384 4096 4096 NT_STATUS_OK
ReadX 11716 20480 4096 4096 NT_STATUS_OK
ReadX 11716 24576 4096 4096 NT_STATUS_OK
ReadX 11716 28672 4096 4096 NT_STATUS_OK
ReadX 11716 32768 4096 4096 NT_STATUS_OK
ReadX 11716 36864 4096 4096 NT_STATUS_OK
ReadX 11716 40960 4096 4096 NT_STATUS_OK
ReadX 11716 45056 4096 4096 NT_STATUS_OK
ReadX 11716 49152 4096 4096 NT_STATUS_OK
ReadX 11716 53248 4096 4096 NT_STATUS_OK
ReadX 11716 57344 4096 4096 NT_STATUS_OK
ReadX 11716 61440 4096 4096 NT_STATUS_OK
ReadX 11716 65536 4096 4096 NT_STATUS_OK
ReadX 11716 69632 4096 4096 NT_STATUS_OK
ReadX 11716 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11716 1004 NT_STATUS_OK
WriteX 11716 0 4096 4096 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11717 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
Close 11717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11722 NT_STATUS_OK
WriteX 11722 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11722 258 NT_STATUS_OK
WriteX 11722 0 65536 65536 NT_STATUS_OK
WriteX 11722 65536 19979 19979 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
SET_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
Close 11726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
Close 11727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11728 1004 NT_STATUS_OK
WriteX 11728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11729 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11734 NT_STATUS_OK
WriteX 11734 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11734 258 NT_STATUS_OK
WriteX 11734 0 65536 65536 NT_STATUS_OK
WriteX 11734 65536 17654 17654 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 1004 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
SET_FILE_INFORMATION 11735 1004 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11736 NT_STATUS_OK
SET_FILE_INFORMATION 11736 1004 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11740 NT_STATUS_OK
ReadX 11740 0 4096 4096 NT_STATUS_OK
ReadX 11740 4096 4096 4096 NT_STATUS_OK
ReadX 11740 8192 4096 4096 NT_STATUS_OK
ReadX 11740 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11740 16384 4096 4096 NT_STATUS_OK
ReadX 11740 20480 4096 4096 NT_STATUS_OK
ReadX 11740 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11743 1004 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11744 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11749 NT_STATUS_OK
WriteX 11749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11749 258 NT_STATUS_OK
WriteX 11749 0 65536 65536 NT_STATUS_OK
WriteX 11749 65536 19490 19490 NT_STATUS_OK
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
SET_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11751 NT_STATUS_OK
SET_FILE_INFORMATION 11751 1004 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11755 0 4096 4096 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
ReadX 11757 4096 4096 4096 NT_STATUS_OK
ReadX 11757 8192 4096 4096 NT_STATUS_OK
ReadX 11757 12288 4096 4096 NT_STATUS_OK
ReadX 11757 16384 4096 4096 NT_STATUS_OK
ReadX 11757 20480 4096 4096 NT_STATUS_OK
ReadX 11757 24576 4096 4096 NT_STATUS_OK
ReadX 11757 28672 4096 4096 NT_STATUS_OK
ReadX 11757 32768 4096 4096 NT_STATUS_OK
ReadX 11757 36864 4096 4096 NT_STATUS_OK
ReadX 11757 40960 4096 4096 NT_STATUS_OK
ReadX 11757 45056 4096 4096 NT_STATUS_OK
ReadX 11757 49152 4096 4096 NT_STATUS_OK
ReadX 11757 53248 4096 4096 NT_STATUS_OK
ReadX 11757 57344 4096 4096 NT_STATUS_OK
ReadX 11757 61440 4096 4096 NT_STATUS_OK
ReadX 11757 65536 4096 4096 NT_STATUS_OK
ReadX 11757 69632 4096 4096 NT_STATUS_OK
ReadX 11757 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11757 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11758 NT_STATUS_OK
SET_FILE_INFORMATION 11758 1004 NT_STATUS_OK
Close 11758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11763 NT_STATUS_OK
WriteX 11763 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 258 NT_STATUS_OK
WriteX 11763 0 65536 65536 NT_STATUS_OK
WriteX 11763 65536 8866 8866 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
SET_FILE_INFORMATION 11764 1004 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
Close 11766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11771 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11774 NT_STATUS_OK
WriteX 11774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 258 NT_STATUS_OK
WriteX 11774 0 65536 65536 NT_STATUS_OK
WriteX 11774 65536 9298 9298 NT_STATUS_OK
Close 11774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
WriteX 11775 0 4096 4096 NT_STATUS_OK
Flush 11775 NT_STATUS_OK
SET_FILE_INFORMATION 11775 1004 NT_STATUS_OK
WriteX 11775 0 4096 4096 NT_STATUS_OK
Flush 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11776 NT_STATUS_OK
SET_FILE_INFORMATION 11776 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11781 0 4096 4096 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11782 4096 4096 4096 NT_STATUS_OK
ReadX 11782 8192 4096 4096 NT_STATUS_OK
ReadX 11782 12288 4096 4096 NT_STATUS_OK
ReadX 11782 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11785 1004 NT_STATUS_OK
WriteX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11791 NT_STATUS_OK
WriteX 11791 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 258 NT_STATUS_OK
WriteX 11791 0 65536 65536 NT_STATUS_OK
WriteX 11791 65536 11540 11540 NT_STATUS_OK
Close 11791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11793 NT_STATUS_OK
SET_FILE_INFORMATION 11793 1004 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11795 NT_STATUS_OK
Close 11795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 61440 4096 4096 NT_STATUS_OK
ReadX 11797 126976 4096 4096 NT_STATUS_OK
WriteX 11797 0 65536 65536 NT_STATUS_OK
WriteX 11797 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 61440 4096 4096 NT_STATUS_OK
ReadX 11798 126976 4096 4096 NT_STATUS_OK
ReadX 11798 192512 4096 4096 NT_STATUS_OK
ReadX 11798 258048 4096 4096 NT_STATUS_OK
WriteX 11798 0 65536 65536 NT_STATUS_OK
WriteX 11798 65536 65536 65536 NT_STATUS_OK
WriteX 11798 131072 65536 65536 NT_STATUS_OK
WriteX 11798 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 61440 4096 4096 NT_STATUS_OK
ReadX 11799 126976 4096 4096 NT_STATUS_OK
ReadX 11799 192512 4096 4096 NT_STATUS_OK
ReadX 11799 258048 4096 4096 NT_STATUS_OK
ReadX 11799 323584 4096 4096 NT_STATUS_OK
ReadX 11799 389120 4096 4096 NT_STATUS_OK
ReadX 11799 454656 4096 4096 NT_STATUS_OK
ReadX 11799 520192 4096 4096 NT_STATUS_OK
WriteX 11799 0 65536 65536 NT_STATUS_OK
WriteX 11799 65536 65536 65536 NT_STATUS_OK
WriteX 11799 131072 65536 65536 NT_STATUS_OK
WriteX 11799 196608 65536 65536 NT_STATUS_OK
WriteX 11799 262144 65536 65536 NT_STATUS_OK
WriteX 11799 327680 65536 65536 NT_STATUS_OK
WriteX 11799 393216 65536 65536 NT_STATUS_OK
WriteX 11799 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
ReadX 11800 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11801 NT_STATUS_OK
WriteX 11801 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 258 NT_STATUS_OK
WriteX 11801 0 53 53 NT_STATUS_OK
Close 11801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11740 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11800 8192 4096 4096 NT_STATUS_OK
ReadX 11800 12288 4096 4096 NT_STATUS_OK
WriteX 11804 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
ReadX 11800 16384 4096 4096 NT_STATUS_OK
ReadX 11800 20480 4096 4096 NT_STATUS_OK
WriteX 11804 0 15360 15360 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
WriteX 11805 0 4096 4096 NT_STATUS_OK
Close 11805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11809 NT_STATUS_OK
Close 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11808 4096 4096 4096 NT_STATUS_OK
ReadX 11808 8192 4096 4096 NT_STATUS_OK
ReadX 11808 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
ReadX 11811 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
ReadX 11812 4096 4096 4096 NT_STATUS_OK
ReadX 11812 8192 4096 4096 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11813 NT_STATUS_OK
WriteX 11813 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 258 NT_STATUS_OK
WriteX 11813 0 15360 15360 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11815 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11818 NT_STATUS_OK
SET_FILE_INFORMATION 11818 1004 NT_STATUS_OK
Close 11818 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
ReadX 11821 4096 4096 4096 NT_STATUS_OK
ReadX 11821 8192 4096 4096 NT_STATUS_OK
ReadX 11821 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11823 NT_STATUS_OK
WriteX 11823 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11823 258 NT_STATUS_OK
WriteX 11823 0 53 53 NT_STATUS_OK
Close 11823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11824 NT_STATUS_OK
Close 11824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11822 4096 4096 4096 NT_STATUS_OK
ReadX 11822 8192 4096 4096 NT_STATUS_OK
ReadX 11822 12288 4096 4096 NT_STATUS_OK
WriteX 11826 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
WriteX 11826 0 12006 12006 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11830 4096 4096 4096 NT_STATUS_OK
ReadX 11830 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11833 NT_STATUS_OK
WriteX 11833 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11833 258 NT_STATUS_OK
WriteX 11833 0 11991 11991 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11835 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11838 NT_STATUS_OK
SET_FILE_INFORMATION 11838 1004 NT_STATUS_OK
Close 11838 NT_STATUS_OK
WriteX 11834 0 4096 4096 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11841 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
ReadX 11841 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
WriteX 11841 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
Close 11817 NT_STATUS_OK
WriteX 11821 0 19054 19054 NT_STATUS_OK
WriteX 11841 0 12288 12288 NT_STATUS_OK
Close 11837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 61440 61440 NT_STATUS_OK
ReadX 11848 61440 4096 4096 NT_STATUS_OK
ReadX 11848 65536 61440 61440 NT_STATUS_OK
ReadX 11848 126976 4096 4096 NT_STATUS_OK
ReadX 11848 131072 61440 61440 NT_STATUS_OK
ReadX 11848 192512 4096 4096 NT_STATUS_OK
ReadX 11848 196608 61440 61440 NT_STATUS_OK
ReadX 11848 258048 4096 4096 NT_STATUS_OK
ReadX 11848 262144 61440 61440 NT_STATUS_OK
ReadX 11848 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11849 NT_STATUS_OK
ReadX 11849 0 61440 61440 NT_STATUS_OK
ReadX 11849 61440 4096 4096 NT_STATUS_OK
ReadX 11849 65536 61440 61440 NT_STATUS_OK
ReadX 11849 126976 4096 4096 NT_STATUS_OK
ReadX 11849 131072 61440 61440 NT_STATUS_OK
ReadX 11849 192512 4096 4096 NT_STATUS_OK
ReadX 11849 196608 61440 61440 NT_STATUS_OK
ReadX 11849 258048 4096 4096 NT_STATUS_OK
ReadX 11849 262144 61440 61440 NT_STATUS_OK
ReadX 11849 323584 4096 4096 NT_STATUS_OK
ReadX 11849 327680 61440 61440 NT_STATUS_OK
ReadX 11849 389120 4096 4096 NT_STATUS_OK
ReadX 11849 393216 61440 61440 NT_STATUS_OK
ReadX 11849 454656 4096 4096 NT_STATUS_OK
ReadX 11849 458752 61440 61440 NT_STATUS_OK
ReadX 11849 520192 4096 4096 NT_STATUS_OK
ReadX 11849 524288 61440 61440 NT_STATUS_OK
ReadX 11849 585728 4096 4096 NT_STATUS_OK
ReadX 11849 589824 61440 61440 NT_STATUS_OK
ReadX 11849 651264 4096 4096 NT_STATUS_OK
ReadX 11849 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 61440 61440 NT_STATUS_OK
ReadX 11850 61440 4096 4096 NT_STATUS_OK
ReadX 11850 65536 61440 61440 NT_STATUS_OK
ReadX 11850 126976 4096 4096 NT_STATUS_OK
ReadX 11850 131072 61440 61440 NT_STATUS_OK
ReadX 11850 192512 4096 4096 NT_STATUS_OK
ReadX 11850 196608 61440 61440 NT_STATUS_OK
ReadX 11850 258048 4096 4096 NT_STATUS_OK
ReadX 11850 262144 61440 61440 NT_STATUS_OK
ReadX 11850 323584 4096 4096 NT_STATUS_OK
ReadX 11850 327680 61440 61440 NT_STATUS_OK
ReadX 11850 389120 4096 4096 NT_STATUS_OK
ReadX 11850 393216 61440 61440 NT_STATUS_OK
ReadX 11850 454656 4096 4096 NT_STATUS_OK
ReadX 11850 458752 61440 61440 NT_STATUS_OK
ReadX 11850 520192 4096 4096 NT_STATUS_OK
ReadX 11850 524288 61440 61440 NT_STATUS_OK
ReadX 11850 585728 4096 4096 NT_STATUS_OK
ReadX 11850 589824 61440 61440 NT_STATUS_OK
ReadX 11850 651264 4096 4096 NT_STATUS_OK
ReadX 11850 655360 61440 61440 NT_STATUS_OK
ReadX 11850 716800 4096 4096 NT_STATUS_OK
ReadX 11850 720896 61440 61440 NT_STATUS_OK
ReadX 11850 782336 4096 4096 NT_STATUS_OK
ReadX 11850 786432 61440 61440 NT_STATUS_OK
ReadX 11850 847872 4096 4096 NT_STATUS_OK
ReadX 11850 851968 61440 61440 NT_STATUS_OK
ReadX 11850 913408 4096 4096 NT_STATUS_OK
ReadX 11850 917504 61440 61440 NT_STATUS_OK
ReadX 11850 978944 4096 4096 NT_STATUS_OK
ReadX 11850 983040 61440 61440 NT_STATUS_OK
ReadX 11850 1044480 4096 4096 NT_STATUS_OK
ReadX 11850 1048576 61440 61440 NT_STATUS_OK
ReadX 11850 1110016 4096 4096 NT_STATUS_OK
ReadX 11850 1114112 61440 61440 NT_STATUS_OK
ReadX 11850 1175552 4096 4096 NT_STATUS_OK
ReadX 11850 1179648 61440 61440 NT_STATUS_OK
ReadX 11850 1241088 4096 4096 NT_STATUS_OK
ReadX 11850 1245184 61440 61440 NT_STATUS_OK
ReadX 11850 1306624 4096 4096 NT_STATUS_OK
ReadX 11850 1310720 61440 61440 NT_STATUS_OK
ReadX 11850 1372160 4096 4096 NT_STATUS_OK
ReadX 11850 1376256 61440 61440 NT_STATUS_OK
ReadX 11850 1437696 4096 4096 NT_STATUS_OK
ReadX 11850 1441792 61440 61440 NT_STATUS_OK
ReadX 11850 1503232 4096 4096 NT_STATUS_OK
ReadX 11850 1507328 61440 61440 NT_STATUS_OK
ReadX 11850 1568768 4096 4096 NT_STATUS_OK
ReadX 11850 1572864 61440 61440 NT_STATUS_OK
ReadX 11850 1634304 4096 4096 NT_STATUS_OK
ReadX 11850 1638400 61440 61440 NT_STATUS_OK
ReadX 11850 1699840 4096 4096 NT_STATUS_OK
ReadX 11850 1703936 61440 61440 NT_STATUS_OK
ReadX 11850 1765376 4096 4096 NT_STATUS_OK
ReadX 11850 1769472 61440 61440 NT_STATUS_OK
ReadX 11850 1830912 4096 4096 NT_STATUS_OK
ReadX 11850 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11857 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 1004 NT_STATUS_OK
WriteX 11857 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11859 NT_STATUS_OK
WriteX 11859 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
WriteX 11859 0 491 491 NT_STATUS_OK
Close 11859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11857 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11862 NT_STATUS_OK
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11863 NT_STATUS_OK
WriteX 11863 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
WriteX 11863 0 543 543 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11848 NT_STATUS_OK
Close 11849 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 2048 2048 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
Flush 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11883 NT_STATUS_OK
WriteX 11883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11883 258 NT_STATUS_OK
WriteX 11883 0 2048 2048 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11889 NT_STATUS_OK
WriteX 11889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
WriteX 11889 0 2048 2048 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 2048 2048 NT_STATUS_OK
ReadX 11868 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11868 0 8192 8192 NT_STATUS_OK
WriteX 11869 0 4096 4096 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11894 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11914 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 1004 NT_STATUS_OK
WriteX 11914 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 258 NT_STATUS_OK
WriteX 11914 0 2048 2048 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11922 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 1004 NT_STATUS_OK
WriteX 11922 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 258 NT_STATUS_OK
WriteX 11922 0 2048 2048 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
Flush 11915 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
Flush 11923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11917 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11925 NT_STATUS_OK
WriteX 11925 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Close 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11928 NT_STATUS_OK
WriteX 11928 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11928 258 NT_STATUS_OK
WriteX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11929 0 4096 4096 NT_STATUS_OK
Close 11926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11909 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Close 11908 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11932 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11934 NT_STATUS_OK
ReadX 11934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11936 NT_STATUS_OK
WriteX 11936 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11936 258 NT_STATUS_OK
WriteX 11936 0 2048 2048 NT_STATUS_OK
Close 11936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11951 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11953 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11956 NT_STATUS_OK
ReadX 11956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11973 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 1004 NT_STATUS_OK
WriteX 11973 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 258 NT_STATUS_OK
WriteX 11973 0 2048 2048 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11979 NT_STATUS_OK
ReadX 11979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
WriteX 11985 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 258 NT_STATUS_OK
WriteX 11985 0 2048 2048 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11986 NT_STATUS_OK
ReadX 11986 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11993 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 1004 NT_STATUS_OK
WriteX 11993 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 258 NT_STATUS_OK
WriteX 11993 0 2048 2048 NT_STATUS_OK
Close 11993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Flush 11974 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
WriteX 11994 0 4096 4096 NT_STATUS_OK
Flush 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 4096 16384 16384 NT_STATUS_OK
ReadX 11956 4096 16384 16384 NT_STATUS_OK
ReadX 11988 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 2048 2048 NT_STATUS_OK
WriteX 11996 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11997 NT_STATUS_OK
QUERY_FILE_INFORMATION 11997 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Close 11956 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11999 NT_STATUS_OK
QUERY_FILE_INFORMATION 11999 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12001 NT_STATUS_OK
QUERY_FILE_INFORMATION 12001 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12004 4096 16384 16384 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
WriteX 12007 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 8192 8192 NT_STATUS_OK
ReadX 12010 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12024 0 4096 4096 NT_STATUS_OK
ReadX 12024 4096 4096 4096 NT_STATUS_OK
ReadX 12024 8192 4096 4096 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
ReadX 12025 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
WriteX 12007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
ReadX 12033 4096 4096 4096 NT_STATUS_OK
WriteX 12033 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12034 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
ReadX 12035 4096 4096 4096 NT_STATUS_OK
WriteX 12035 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12036 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12038 0 4096 4096 NT_STATUS_OK
ReadX 12038 4096 4096 4096 NT_STATUS_OK
ReadX 12038 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
ReadX 12039 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12056 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 1004 NT_STATUS_OK
WriteX 12056 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 2048 2048 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12061 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12062 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 1004 NT_STATUS_OK
WriteX 12062 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 258 NT_STATUS_OK
WriteX 12062 0 2048 2048 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12063 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12046 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12066 NT_STATUS_OK
QUERY_FILE_INFORMATION 12066 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 61440 4096 4096 NT_STATUS_OK
ReadX 12068 126976 4096 4096 NT_STATUS_OK
WriteX 12068 0 65536 65536 NT_STATUS_OK
WriteX 12068 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 61440 4096 4096 NT_STATUS_OK
ReadX 12069 126976 4096 4096 NT_STATUS_OK
ReadX 12069 192512 4096 4096 NT_STATUS_OK
ReadX 12069 258048 4096 4096 NT_STATUS_OK
WriteX 12069 0 65536 65536 NT_STATUS_OK
WriteX 12069 65536 65536 65536 NT_STATUS_OK
WriteX 12069 131072 65536 65536 NT_STATUS_OK
WriteX 12069 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 61440 4096 4096 NT_STATUS_OK
ReadX 12070 126976 4096 4096 NT_STATUS_OK
ReadX 12070 192512 4096 4096 NT_STATUS_OK
ReadX 12070 258048 4096 4096 NT_STATUS_OK
ReadX 12070 323584 4096 4096 NT_STATUS_OK
ReadX 12070 389120 4096 4096 NT_STATUS_OK
ReadX 12070 454656 4096 4096 NT_STATUS_OK
ReadX 12070 520192 4096 4096 NT_STATUS_OK
WriteX 12070 0 65536 65536 NT_STATUS_OK
WriteX 12070 65536 65536 65536 NT_STATUS_OK
WriteX 12070 131072 65536 65536 NT_STATUS_OK
WriteX 12070 196608 65536 65536 NT_STATUS_OK
WriteX 12070 262144 65536 65536 NT_STATUS_OK
WriteX 12070 327680 65536 65536 NT_STATUS_OK
WriteX 12070 393216 65536 65536 NT_STATUS_OK
WriteX 12070 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12071 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12071 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12071 8192 4096 4096 NT_STATUS_OK
ReadX 12071 12288 4096 4096 NT_STATUS_OK
ReadX 12071 16384 4096 4096 NT_STATUS_OK
ReadX 12071 20480 4096 4096 NT_STATUS_OK
ReadX 12071 24576 4096 4096 NT_STATUS_OK
ReadX 12071 28672 4096 4096 NT_STATUS_OK
ReadX 12071 32768 4096 4096 NT_STATUS_OK
ReadX 12071 36864 4096 4096 NT_STATUS_OK
ReadX 12071 40960 4096 4096 NT_STATUS_OK
ReadX 12071 45056 4096 4096 NT_STATUS_OK
ReadX 12071 49152 4096 4096 NT_STATUS_OK
ReadX 12071 53248 4096 4096 NT_STATUS_OK
ReadX 12071 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12071 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12074 NT_STATUS_OK
WriteX 12074 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12074 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12074 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12074 1004 NT_STATUS_OK
WriteX 12074 0 57088 57088 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
Close 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12074 1004 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12078 NT_STATUS_OK
ReadX 12078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12078 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12079 NT_STATUS_OK
WriteX 12079 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12079 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
WriteX 12079 0 51456 51456 NT_STATUS_OK
WriteX 12079 0 4096 4096 NT_STATUS_OK
Flush 12079 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
WriteX 12079 0 4096 4096 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12081 NT_STATUS_OK
Close 12081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12083 NT_STATUS_OK
ReadX 12083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12083 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12088 NT_STATUS_OK
WriteX 12088 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12088 258 NT_STATUS_OK
WriteX 12088 0 53077 53077 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12089 NT_STATUS_OK
WriteX 12089 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12089 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 1856 1856 NT_STATUS_OK
WriteX 12089 0 4096 4096 NT_STATUS_OK
Flush 12089 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
WriteX 12089 0 4096 4096 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12091 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
WriteX 12098 0 7983 7983 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12103 NT_STATUS_OK
WriteX 12103 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12103 258 NT_STATUS_OK
WriteX 12103 0 65536 65536 NT_STATUS_OK
WriteX 12103 65536 65536 65536 NT_STATUS_OK
WriteX 12103 131072 65536 65536 NT_STATUS_OK
WriteX 12103 196608 65536 65536 NT_STATUS_OK
WriteX 12103 262144 65536 65536 NT_STATUS_OK
WriteX 12103 327680 65536 65536 NT_STATUS_OK
WriteX 12103 393216 65536 65536 NT_STATUS_OK
WriteX 12103 458752 46731 46731 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12104 NT_STATUS_OK
WriteX 12104 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12093 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 0 65536 65536 NT_STATUS_OK
WriteX 12104 65536 22848 22848 NT_STATUS_OK
WriteX 12104 0 4096 4096 NT_STATUS_OK
Flush 12104 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 0 4096 4096 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12106 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12108 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12109 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12109 1004 NT_STATUS_OK
ReadX 12109 8192 4096 4096 NT_STATUS_OK
ReadX 12109 12288 4096 4096 NT_STATUS_OK
ReadX 12109 16384 4096 4096 NT_STATUS_OK
ReadX 12109 20480 4096 4096 NT_STATUS_OK
ReadX 12109 24576 4096 4096 NT_STATUS_OK
ReadX 12109 28672 4096 4096 NT_STATUS_OK
ReadX 12109 32768 4096 4096 NT_STATUS_OK
ReadX 12109 36864 4096 4096 NT_STATUS_OK
ReadX 12109 40960 4096 4096 NT_STATUS_OK
ReadX 12109 45056 4096 4096 NT_STATUS_OK
ReadX 12109 49152 4096 4096 NT_STATUS_OK
ReadX 12109 53248 4096 4096 NT_STATUS_OK
ReadX 12109 57344 4096 4096 NT_STATUS_OK
ReadX 12109 61440 4096 4096 NT_STATUS_OK
ReadX 12109 65536 4096 4096 NT_STATUS_OK
ReadX 12109 69632 4096 4096 NT_STATUS_OK
ReadX 12109 73728 4096 4096 NT_STATUS_OK
ReadX 12109 77824 4096 4096 NT_STATUS_OK
ReadX 12109 81920 4096 4096 NT_STATUS_OK
ReadX 12109 86016 4096 4096 NT_STATUS_OK
ReadX 12109 90112 4096 4096 NT_STATUS_OK
ReadX 12109 94208 4096 4096 NT_STATUS_OK
ReadX 12109 98304 4096 4096 NT_STATUS_OK
ReadX 12109 102400 4096 4096 NT_STATUS_OK
ReadX 12109 106496 4096 4096 NT_STATUS_OK
ReadX 12109 110592 4096 4096 NT_STATUS_OK
ReadX 12109 114688 4096 4096 NT_STATUS_OK
ReadX 12109 118784 4096 4096 NT_STATUS_OK
ReadX 12109 122880 4096 4096 NT_STATUS_OK
ReadX 12109 126976 4096 4096 NT_STATUS_OK
ReadX 12109 131072 4096 4096 NT_STATUS_OK
ReadX 12109 135168 4096 4096 NT_STATUS_OK
ReadX 12109 139264 4096 4096 NT_STATUS_OK
ReadX 12109 143360 4096 4096 NT_STATUS_OK
ReadX 12109 147456 4096 4096 NT_STATUS_OK
ReadX 12109 151552 4096 4096 NT_STATUS_OK
ReadX 12109 155648 4096 4096 NT_STATUS_OK
ReadX 12109 159744 4096 4096 NT_STATUS_OK
ReadX 12109 163840 4096 4096 NT_STATUS_OK
ReadX 12109 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12109 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12112 NT_STATUS_OK
WriteX 12112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
Close 12109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12113 NT_STATUS_OK
SET_FILE_INFORMATION 12113 1004 NT_STATUS_OK
Close 12113 NT_STATUS_OK
WriteX 12112 0 42388 42388 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12116 NT_STATUS_OK
ReadX 12116 0 4096 4096 NT_STATUS_OK
ReadX 12116 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12117 NT_STATUS_OK
WriteX 12117 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 258 NT_STATUS_OK
SET_FILE_INFORMATION 12117 1004 NT_STATUS_OK
WriteX 12117 0 42652 42652 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
ReadX 12121 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12126 NT_STATUS_OK
WriteX 12126 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 258 NT_STATUS_OK
WriteX 12126 0 65536 65536 NT_STATUS_OK
WriteX 12126 65536 49 49 NT_STATUS_OK
Close 12126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 61440 61440 NT_STATUS_OK
ReadX 12127 61440 4096 4096 NT_STATUS_OK
ReadX 12127 65536 61440 61440 NT_STATUS_OK
ReadX 12127 126976 4096 4096 NT_STATUS_OK
ReadX 12127 131072 61440 61440 NT_STATUS_OK
ReadX 12127 192512 4096 4096 NT_STATUS_OK
ReadX 12127 196608 61440 61440 NT_STATUS_OK
ReadX 12127 258048 4096 4096 NT_STATUS_OK
ReadX 12127 262144 61440 61440 NT_STATUS_OK
ReadX 12127 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 61440 61440 NT_STATUS_OK
ReadX 12128 61440 4096 4096 NT_STATUS_OK
ReadX 12128 65536 61440 61440 NT_STATUS_OK
ReadX 12128 126976 4096 4096 NT_STATUS_OK
ReadX 12128 131072 61440 61440 NT_STATUS_OK
ReadX 12128 192512 4096 4096 NT_STATUS_OK
ReadX 12128 196608 61440 61440 NT_STATUS_OK
ReadX 12128 258048 4096 4096 NT_STATUS_OK
ReadX 12128 262144 61440 61440 NT_STATUS_OK
ReadX 12128 323584 4096 4096 NT_STATUS_OK
ReadX 12128 327680 61440 61440 NT_STATUS_OK
ReadX 12128 389120 4096 4096 NT_STATUS_OK
ReadX 12128 393216 61440 61440 NT_STATUS_OK
ReadX 12128 454656 4096 4096 NT_STATUS_OK
ReadX 12128 458752 61440 61440 NT_STATUS_OK
ReadX 12128 520192 4096 4096 NT_STATUS_OK
ReadX 12128 524288 61440 61440 NT_STATUS_OK
ReadX 12128 585728 4096 4096 NT_STATUS_OK
ReadX 12128 589824 61440 61440 NT_STATUS_OK
ReadX 12128 651264 4096 4096 NT_STATUS_OK
ReadX 12128 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 61440 61440 NT_STATUS_OK
ReadX 12129 61440 4096 4096 NT_STATUS_OK
ReadX 12129 65536 61440 61440 NT_STATUS_OK
ReadX 12129 126976 4096 4096 NT_STATUS_OK
ReadX 12129 131072 61440 61440 NT_STATUS_OK
ReadX 12129 192512 4096 4096 NT_STATUS_OK
ReadX 12129 196608 61440 61440 NT_STATUS_OK
ReadX 12129 258048 4096 4096 NT_STATUS_OK
ReadX 12129 262144 61440 61440 NT_STATUS_OK
ReadX 12129 323584 4096 4096 NT_STATUS_OK
ReadX 12129 327680 61440 61440 NT_STATUS_OK
ReadX 12129 389120 4096 4096 NT_STATUS_OK
ReadX 12129 393216 61440 61440 NT_STATUS_OK
ReadX 12129 454656 4096 4096 NT_STATUS_OK
ReadX 12129 458752 61440 61440 NT_STATUS_OK
ReadX 12129 520192 4096 4096 NT_STATUS_OK
ReadX 12129 524288 61440 61440 NT_STATUS_OK
ReadX 12129 585728 4096 4096 NT_STATUS_OK
ReadX 12129 589824 61440 61440 NT_STATUS_OK
ReadX 12129 651264 4096 4096 NT_STATUS_OK
ReadX 12129 655360 61440 61440 NT_STATUS_OK
ReadX 12129 716800 4096 4096 NT_STATUS_OK
ReadX 12129 720896 61440 61440 NT_STATUS_OK
ReadX 12129 782336 4096 4096 NT_STATUS_OK
ReadX 12129 786432 61440 61440 NT_STATUS_OK
ReadX 12129 847872 4096 4096 NT_STATUS_OK
ReadX 12129 851968 61440 61440 NT_STATUS_OK
ReadX 12129 913408 4096 4096 NT_STATUS_OK
ReadX 12129 917504 61440 61440 NT_STATUS_OK
ReadX 12129 978944 4096 4096 NT_STATUS_OK
ReadX 12129 983040 61440 61440 NT_STATUS_OK
ReadX 12129 1044480 4096 4096 NT_STATUS_OK
ReadX 12129 1048576 61440 61440 NT_STATUS_OK
ReadX 12129 1110016 4096 4096 NT_STATUS_OK
ReadX 12129 1114112 61440 61440 NT_STATUS_OK
ReadX 12129 1175552 4096 4096 NT_STATUS_OK
ReadX 12129 1179648 61440 61440 NT_STATUS_OK
ReadX 12129 1241088 4096 4096 NT_STATUS_OK
ReadX 12129 1245184 61440 61440 NT_STATUS_OK
ReadX 12129 1306624 4096 4096 NT_STATUS_OK
ReadX 12129 1310720 61440 61440 NT_STATUS_OK
ReadX 12129 1372160 4096 4096 NT_STATUS_OK
ReadX 12129 1376256 61440 61440 NT_STATUS_OK
ReadX 12129 1437696 4096 4096 NT_STATUS_OK
ReadX 12129 1441792 61440 61440 NT_STATUS_OK
ReadX 12129 1503232 4096 4096 NT_STATUS_OK
ReadX 12129 1507328 61440 61440 NT_STATUS_OK
ReadX 12129 1568768 4096 4096 NT_STATUS_OK
ReadX 12129 1572864 61440 61440 NT_STATUS_OK
ReadX 12129 1634304 4096 4096 NT_STATUS_OK
ReadX 12129 1638400 61440 61440 NT_STATUS_OK
ReadX 12129 1699840 4096 4096 NT_STATUS_OK
ReadX 12129 1703936 61440 61440 NT_STATUS_OK
ReadX 12129 1765376 4096 4096 NT_STATUS_OK
ReadX 12129 1769472 61440 61440 NT_STATUS_OK
ReadX 12129 1830912 4096 4096 NT_STATUS_OK
ReadX 12129 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12131 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
ReadX 12131 2156 24 24 NT_STATUS_OK
ReadX 12131 2139 276 276 NT_STATUS_OK
ReadX 12131 2136 14 14 NT_STATUS_OK
ReadX 12131 2136 7 7 NT_STATUS_OK
ReadX 12131 2138 12 12 NT_STATUS_OK
ReadX 12131 2137 8 8 NT_STATUS_OK
ReadX 12131 2135 15 15 NT_STATUS_OK
ReadX 12131 0 16 16 NT_STATUS_OK
ReadX 12131 16 2048 2048 NT_STATUS_OK
ReadX 12131 2064 2048 2048 NT_STATUS_OK
ReadX 12131 257 2048 2048 NT_STATUS_OK
ReadX 12131 385 2048 2048 NT_STATUS_OK
ReadX 12131 513 2048 2048 NT_STATUS_OK
ReadX 12131 641 2048 2048 NT_STATUS_OK
ReadX 12131 769 2048 2048 NT_STATUS_OK
ReadX 12131 897 2048 2048 NT_STATUS_OK
ReadX 12131 1025 2048 2048 NT_STATUS_OK
ReadX 12131 1153 2048 2048 NT_STATUS_OK
ReadX 12131 1281 2048 2048 NT_STATUS_OK
ReadX 12131 1409 2048 2048 NT_STATUS_OK
ReadX 12131 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12133 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12136 NT_STATUS_OK
WriteX 12136 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12136 258 NT_STATUS_OK
WriteX 12136 0 10575 10575 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12141 NT_STATUS_OK
LockX 12141 2147483538 1 NT_STATUS_OK
UnlockX 12141 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1005 NT_STATUS_OK
ReadX 12141 0 512 512 NT_STATUS_OK
ReadX 12141 512 512 512 NT_STATUS_OK
ReadX 12141 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12142 NT_STATUS_OK
QUERY_FILE_INFORMATION 12142 1005 NT_STATUS_OK
ReadX 12142 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12143 NT_STATUS_OK
LockX 12143 2147483538 1 NT_STATUS_OK
UnlockX 12143 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12143 1005 NT_STATUS_OK
ReadX 12143 0 512 512 NT_STATUS_OK
ReadX 12143 512 512 512 NT_STATUS_OK
ReadX 12143 1024 512 512 NT_STATUS_OK
ReadX 12143 288 20 20 NT_STATUS_OK
ReadX 12143 308 2084 2084 NT_STATUS_OK
ReadX 12143 388 2084 2084 NT_STATUS_OK
ReadX 12143 388 2084 2084 NT_STATUS_OK
ReadX 12130 2157 1386 1386 NT_STATUS_OK
ReadX 12143 2472 399 399 NT_STATUS_OK
ReadX 12143 3072 1536 1536 NT_STATUS_OK
ReadX 12143 544 149 149 NT_STATUS_OK
ReadX 12143 693 485 485 NT_STATUS_OK
Close 12143 NT_STATUS_OK
ReadX 12130 2157 4096 4096 NT_STATUS_OK
ReadX 12130 6253 4096 4096 NT_STATUS_OK
ReadX 12130 10349 4096 4096 NT_STATUS_OK
ReadX 12130 14445 4096 4096 NT_STATUS_OK
ReadX 12130 18541 4096 4096 NT_STATUS_OK
ReadX 12130 22637 256 256 NT_STATUS_OK
ReadX 12130 22893 4096 4096 NT_STATUS_OK
ReadX 12130 26989 4096 4096 NT_STATUS_OK
ReadX 12130 31085 4096 4096 NT_STATUS_OK
ReadX 12130 35181 4096 4096 NT_STATUS_OK
ReadX 12130 39277 4096 4096 NT_STATUS_OK
ReadX 12130 43373 4096 4096 NT_STATUS_OK
ReadX 12130 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12130 2157 1024 1024 NT_STATUS_OK
ReadX 12130 1667 4688 4688 NT_STATUS_OK
ReadX 12130 6355 3516 3516 NT_STATUS_OK
ReadX 12130 9871 16384 16384 NT_STATUS_OK
ReadX 12130 26255 3771 3771 NT_STATUS_OK
ReadX 12130 30026 2048 2048 NT_STATUS_OK
ReadX 12130 32074 1024 1024 NT_STATUS_OK
ReadX 12130 33098 6652 6652 NT_STATUS_OK
ReadX 12130 39750 16384 16384 NT_STATUS_OK
ReadX 12130 56134 10496 10496 NT_STATUS_OK
ReadX 12130 66630 1784 1784 NT_STATUS_OK
ReadX 12130 68414 90 90 NT_STATUS_OK
ReadX 12130 68504 273 273 NT_STATUS_OK
ReadX 12130 68777 1600 1600 NT_STATUS_OK
ReadX 12130 70377 640 640 NT_STATUS_OK
ReadX 12130 71017 1280 1280 NT_STATUS_OK
ReadX 12130 72297 8464 8464 NT_STATUS_OK
ReadX 12130 80761 158 158 NT_STATUS_OK
ReadX 12130 80919 912 912 NT_STATUS_OK
ReadX 12130 81831 1980 1980 NT_STATUS_OK
ReadX 12130 83811 2256 2256 NT_STATUS_OK
ReadX 12130 86067 400 400 NT_STATUS_OK
ReadX 12130 86467 252 252 NT_STATUS_OK
ReadX 12130 86719 42 42 NT_STATUS_OK
ReadX 12130 86761 725 725 NT_STATUS_OK
ReadX 12130 2009 512 512 NT_STATUS_OK
ReadX 12130 3895 9 9 NT_STATUS_OK
ReadX 12130 3781 46 46 NT_STATUS_OK
ReadX 12130 4059 92 92 NT_STATUS_OK
ReadX 12130 3781 92 92 NT_STATUS_OK
ReadX 12130 3986 184 184 NT_STATUS_OK
ReadX 12130 3987 16384 16384 NT_STATUS_OK
ReadX 12130 3902 16384 16384 NT_STATUS_OK
ReadX 12130 3781 10240 10240 NT_STATUS_OK
ReadX 12130 3821 16384 16384 NT_STATUS_OK
ReadX 12130 3891 935 935 NT_STATUS_OK
ReadX 12130 4060 10240 10240 NT_STATUS_OK
ReadX 12130 4059 184 184 NT_STATUS_OK
ReadX 12130 256 184 184 NT_STATUS_OK
ReadX 12130 256 1026 1026 NT_STATUS_OK
ReadX 12130 3901 326 326 NT_STATUS_OK
ReadX 12130 3899 652 652 NT_STATUS_OK
ReadX 12130 256 2 2 NT_STATUS_OK
ReadX 12130 258 4948 4948 NT_STATUS_OK
Close 12130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12145 NT_STATUS_OK
Close 12145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12148 NT_STATUS_OK
WriteX 12148 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 258 NT_STATUS_OK
WriteX 12148 0 65536 65536 NT_STATUS_OK
WriteX 12148 65536 65536 65536 NT_STATUS_OK
WriteX 12148 131072 65536 65536 NT_STATUS_OK
WriteX 12148 196608 65536 65536 NT_STATUS_OK
WriteX 12148 262144 65536 65536 NT_STATUS_OK
WriteX 12148 327680 65536 65536 NT_STATUS_OK
WriteX 12148 393216 65536 65536 NT_STATUS_OK
WriteX 12148 458752 65536 65536 NT_STATUS_OK
WriteX 12148 524288 65536 65536 NT_STATUS_OK
WriteX 12148 589824 35257 35257 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12153 NT_STATUS_OK
WriteX 12153 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12153 258 NT_STATUS_OK
WriteX 12153 0 65536 65536 NT_STATUS_OK
WriteX 12153 65536 65536 65536 NT_STATUS_OK
WriteX 12153 131072 65536 65536 NT_STATUS_OK
WriteX 12153 196608 65536 65536 NT_STATUS_OK
WriteX 12153 262144 65536 65536 NT_STATUS_OK
WriteX 12153 327680 65536 65536 NT_STATUS_OK
WriteX 12153 393216 65536 65536 NT_STATUS_OK
WriteX 12153 458752 65536 65536 NT_STATUS_OK
WriteX 12153 524288 65536 65536 NT_STATUS_OK
WriteX 12153 589824 57598 57598 NT_STATUS_OK
Close 12153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12155 NT_STATUS_OK
WriteX 12155 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12155 258 NT_STATUS_OK
WriteX 12155 0 12543 12543 NT_STATUS_OK
Flush 12155 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12161 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
ReadX 12161 1938 24 24 NT_STATUS_OK
ReadX 12161 1920 276 276 NT_STATUS_OK
ReadX 12161 1918 14 14 NT_STATUS_OK
ReadX 12161 1918 7 7 NT_STATUS_OK
ReadX 12161 1919 12 12 NT_STATUS_OK
ReadX 12161 1919 8 8 NT_STATUS_OK
ReadX 12161 1917 15 15 NT_STATUS_OK
ReadX 12161 0 16 16 NT_STATUS_OK
ReadX 12161 16 2048 2048 NT_STATUS_OK
ReadX 12161 2064 2048 2048 NT_STATUS_OK
ReadX 12161 257 2048 2048 NT_STATUS_OK
ReadX 12161 385 2048 2048 NT_STATUS_OK
ReadX 12161 513 2048 2048 NT_STATUS_OK
ReadX 12161 641 2048 2048 NT_STATUS_OK
ReadX 12161 769 2048 2048 NT_STATUS_OK
ReadX 12161 897 2048 2048 NT_STATUS_OK
ReadX 12161 1025 2048 2048 NT_STATUS_OK
ReadX 12161 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12166 NT_STATUS_OK
WriteX 12166 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 11588 11588 NT_STATUS_OK
Flush 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12171 NT_STATUS_OK
WriteX 12171 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 258 NT_STATUS_OK
WriteX 12171 0 11615 11615 NT_STATUS_OK
Flush 12171 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12180 NT_STATUS_OK
WriteX 12180 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 258 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 16050 16050 NT_STATUS_OK
Close 12180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12160 1939 64 64 NT_STATUS_OK
ReadX 12160 128 248 248 NT_STATUS_OK
ReadX 12160 128 568 568 NT_STATUS_OK
ReadX 12160 3872 1536 1536 NT_STATUS_OK
ReadX 12160 3456 2560 2560 NT_STATUS_OK
ReadX 12160 3136 512 512 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
ReadX 12160 3264 3072 3072 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 3616 4096 4096 NT_STATUS_OK
ReadX 12160 1939 64 64 NT_STATUS_OK
ReadX 12160 128 248 248 NT_STATUS_OK
ReadX 12160 128 608 608 NT_STATUS_OK
ReadX 12160 2858 1024 1024 NT_STATUS_OK
ReadX 12160 2810 4096 4096 NT_STATUS_OK
ReadX 12160 2826 4096 4096 NT_STATUS_OK
ReadX 12160 2580 2048 2048 NT_STATUS_OK
ReadX 12160 2800 2560 2560 NT_STATUS_OK
ReadX 12160 2100 4096 4096 NT_STATUS_OK
ReadX 12160 2084 4096 4096 NT_STATUS_OK
ReadX 12160 868 4096 4096 NT_STATUS_OK
ReadX 12160 2324 4096 4096 NT_STATUS_OK
ReadX 12160 884 4096 4096 NT_STATUS_OK
ReadX 12160 2604 1024 1024 NT_STATUS_OK
ReadX 12160 580 4096 4096 NT_STATUS_OK
ReadX 12160 596 4096 4096 NT_STATUS_OK
ReadX 12160 2752 4096 4096 NT_STATUS_OK
ReadX 12160 2842 1024 1024 NT_STATUS_OK
ReadX 12160 660 4096 4096 NT_STATUS_OK
ReadX 12160 2720 4096 4096 NT_STATUS_OK
ReadX 12160 2736 4096 4096 NT_STATUS_OK
ReadX 12160 628 4096 4096 NT_STATUS_OK
ReadX 12160 2704 4096 4096 NT_STATUS_OK
ReadX 12160 1556 4096 4096 NT_STATUS_OK
ReadX 12160 576 4096 4096 NT_STATUS_OK
ReadX 12160 3168 1536 1536 NT_STATUS_OK
ReadX 12160 832 4096 4096 NT_STATUS_OK
ReadX 12160 1088 4096 4096 NT_STATUS_OK
ReadX 12160 1344 4096 4096 NT_STATUS_OK
ReadX 12160 1600 4096 4096 NT_STATUS_OK
ReadX 12160 1856 4096 4096 NT_STATUS_OK
ReadX 12160 2112 4096 4096 NT_STATUS_OK
ReadX 12160 1892 4096 4096 NT_STATUS_OK
ReadX 12160 820 4096 4096 NT_STATUS_OK
ReadX 12160 788 4096 4096 NT_STATUS_OK
ReadX 12160 1604 4096 4096 NT_STATUS_OK
ReadX 12160 3648 4096 4096 NT_STATUS_OK
ReadX 12160 2608 4096 4096 NT_STATUS_OK
ReadX 12160 548 4096 4096 NT_STATUS_OK
ReadX 12160 740 4096 4096 NT_STATUS_OK
ReadX 12160 1344 4096 4096 NT_STATUS_OK
ReadX 12160 3392 4096 4096 NT_STATUS_OK
ReadX 12160 3904 4096 4096 NT_STATUS_OK
ReadX 12160 644 4096 4096 NT_STATUS_OK
ReadX 12160 676 4096 4096 NT_STATUS_OK
ReadX 12160 2688 4096 4096 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 900 4096 4096 NT_STATUS_OK
ReadX 12160 1908 4096 4096 NT_STATUS_OK
ReadX 12160 852 4096 4096 NT_STATUS_OK
ReadX 12160 724 4096 4096 NT_STATUS_OK
ReadX 12160 2292 4096 4096 NT_STATUS_OK
ReadX 12160 612 4096 4096 NT_STATUS_OK
ReadX 12160 388 4096 4096 NT_STATUS_OK
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 500 4096 4096 NT_STATUS_OK
ReadX 12160 356 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 576 4096 4096 NT_STATUS_OK
ReadX 12160 340 4096 4096 NT_STATUS_OK
ReadX 12160 420 4096 4096 NT_STATUS_OK
ReadX 12160 1600 4096 4096 NT_STATUS_OK
ReadX 12160 404 4096 4096 NT_STATUS_OK
ReadX 12160 1428 4096 4096 NT_STATUS_OK
ReadX 12160 2656 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 452 4096 4096 NT_STATUS_OK
ReadX 12160 692 4096 4096 NT_STATUS_OK
ReadX 12160 564 4096 4096 NT_STATUS_OK
ReadX 12160 372 4096 4096 NT_STATUS_OK
ReadX 12160 468 4096 4096 NT_STATUS_OK
ReadX 12160 484 4096 4096 NT_STATUS_OK
ReadX 12160 1088 4096 4096 NT_STATUS_OK
ReadX 12160 1924 4096 4096 NT_STATUS_OK
ReadX 12160 2768 4096 4096 NT_STATUS_OK
ReadX 12160 832 4096 4096 NT_STATUS_OK
ReadX 12160 836 4096 4096 NT_STATUS_OK
ReadX 12160 1856 4096 4096 NT_STATUS_OK
ReadX 12160 2640 4096 4096 NT_STATUS_OK
ReadX 12160 436 4096 4096 NT_STATUS_OK
ReadX 12160 1828 4096 4096 NT_STATUS_OK
ReadX 12160 804 4096 4096 NT_STATUS_OK
ReadX 12160 1860 4096 4096 NT_STATUS_OK
ReadX 12160 1812 4096 4096 NT_STATUS_OK
ReadX 12160 756 4096 4096 NT_STATUS_OK
ReadX 12160 1636 4096 4096 NT_STATUS_OK
ReadX 12160 772 4096 4096 NT_STATUS_OK
ReadX 12160 2036 4096 4096 NT_STATUS_OK
ReadX 12160 1220 4096 4096 NT_STATUS_OK
ReadX 12160 1652 4096 4096 NT_STATUS_OK
ReadX 12160 2588 4096 4096 NT_STATUS_OK
ReadX 12160 916 4096 4096 NT_STATUS_OK
ReadX 12160 260 4096 4096 NT_STATUS_OK
ReadX 12160 932 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 308 4096 4096 NT_STATUS_OK
ReadX 12160 292 4096 4096 NT_STATUS_OK
ReadX 12160 1140 4096 4096 NT_STATUS_OK
ReadX 12160 276 4096 4096 NT_STATUS_OK
ReadX 12160 2020 4096 4096 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
ReadX 12160 516 4096 4096 NT_STATUS_OK
ReadX 12160 1844 4096 4096 NT_STATUS_OK
ReadX 12160 1124 4096 4096 NT_STATUS_OK
ReadX 12160 3136 4096 4096 NT_STATUS_OK
ReadX 12160 324 4096 4096 NT_STATUS_OK
ReadX 12160 1156 4096 4096 NT_STATUS_OK
ReadX 12160 1172 4096 4096 NT_STATUS_OK
ReadX 12160 2112 4096 4096 NT_STATUS_OK
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 964 4096 4096 NT_STATUS_OK
ReadX 12160 980 4096 4096 NT_STATUS_OK
ReadX 12160 1012 4096 4096 NT_STATUS_OK
ReadX 12160 532 4096 4096 NT_STATUS_OK
ReadX 12160 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12160 1620 4096 4096 NT_STATUS_OK
ReadX 12160 1604 4096 4096 NT_STATUS_OK
ReadX 12160 2116 4096 4096 NT_STATUS_OK
ReadX 12160 2132 4096 4096 NT_STATUS_OK
ReadX 12160 2148 4096 4096 NT_STATUS_OK
ReadX 12160 2276 4096 4096 NT_STATUS_OK
ReadX 12160 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12185 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 1004 NT_STATUS_OK
Close 12140 NT_STATUS_OK
WriteX 12185 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12185 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12142 1004 NT_STATUS_OK
Close 12142 NT_STATUS_OK
WriteX 12185 0 65536 65536 NT_STATUS_OK
WriteX 12185 65536 64850 64850 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12187 NT_STATUS_OK
WriteX 12187 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12187 258 NT_STATUS_OK
ReadX 12160 2068 4096 4096 NT_STATUS_OK
ReadX 12160 1588 4096 4096 NT_STATUS_OK
ReadX 12160 1572 4096 4096 NT_STATUS_OK
WriteX 12187 0 18630 18630 NT_STATUS_OK
Flush 12187 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12189 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12160 612 4096 4096 NT_STATUS_OK
ReadX 12160 564 4096 4096 NT_STATUS_OK
ReadX 12160 1876 4096 4096 NT_STATUS_OK
ReadX 12160 628 4096 4096 NT_STATUS_OK
ReadX 12160 740 4096 4096 NT_STATUS_OK
ReadX 12160 724 4096 4096 NT_STATUS_OK
ReadX 12160 644 4096 4096 NT_STATUS_OK
ReadX 12160 2324 4096 4096 NT_STATUS_OK
ReadX 12160 660 4096 4096 NT_STATUS_OK
ReadX 12160 852 4096 4096 NT_STATUS_OK
ReadX 12160 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 580 4096 4096 NT_STATUS_OK
ReadX 12160 3136 512 512 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
Close 12160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 61440 4096 4096 NT_STATUS_OK
ReadX 12192 126976 4096 4096 NT_STATUS_OK
WriteX 12192 0 65536 65536 NT_STATUS_OK
WriteX 12192 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 61440 4096 4096 NT_STATUS_OK
ReadX 12193 126976 4096 4096 NT_STATUS_OK
ReadX 12193 192512 4096 4096 NT_STATUS_OK
ReadX 12193 258048 4096 4096 NT_STATUS_OK
WriteX 12193 0 65536 65536 NT_STATUS_OK
WriteX 12193 65536 65536 65536 NT_STATUS_OK
WriteX 12193 131072 65536 65536 NT_STATUS_OK
WriteX 12193 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 61440 4096 4096 NT_STATUS_OK
ReadX 12194 126976 4096 4096 NT_STATUS_OK
ReadX 12194 192512 4096 4096 NT_STATUS_OK
ReadX 12194 258048 4096 4096 NT_STATUS_OK
ReadX 12194 323584 4096 4096 NT_STATUS_OK
ReadX 12194 389120 4096 4096 NT_STATUS_OK
ReadX 12194 454656 4096 4096 NT_STATUS_OK
ReadX 12194 520192 4096 4096 NT_STATUS_OK
WriteX 12194 0 65536 65536 NT_STATUS_OK
WriteX 12194 65536 65536 65536 NT_STATUS_OK
WriteX 12194 131072 65536 65536 NT_STATUS_OK
WriteX 12194 196608 65536 65536 NT_STATUS_OK
WriteX 12194 262144 65536 65536 NT_STATUS_OK
WriteX 12194 327680 65536 65536 NT_STATUS_OK
WriteX 12194 393216 65536 65536 NT_STATUS_OK
WriteX 12194 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12197 NT_STATUS_OK
WriteX 12197 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12197 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12195 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12202 NT_STATUS_OK
WriteX 12202 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12202 258 NT_STATUS_OK
WriteX 12202 0 62591 62591 NT_STATUS_OK
Close 12202 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12204 NT_STATUS_OK
Close 12204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12207 NT_STATUS_OK
WriteX 12207 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12207 258 NT_STATUS_OK
WriteX 12207 0 10845 10845 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12209 NT_STATUS_OK
Close 12209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12212 NT_STATUS_OK
WriteX 12212 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12212 258 NT_STATUS_OK
WriteX 12212 0 30118 30118 NT_STATUS_OK
Close 12212 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
WriteX 12197 0 64 64 NT_STATUS_OK
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 61440 61440 NT_STATUS_OK
ReadX 12214 61440 4096 4096 NT_STATUS_OK
ReadX 12214 65536 61440 61440 NT_STATUS_OK
ReadX 12214 126976 4096 4096 NT_STATUS_OK
ReadX 12214 131072 61440 61440 NT_STATUS_OK
ReadX 12214 192512 4096 4096 NT_STATUS_OK
ReadX 12214 196608 61440 61440 NT_STATUS_OK
ReadX 12214 258048 4096 4096 NT_STATUS_OK
ReadX 12214 262144 61440 61440 NT_STATUS_OK
ReadX 12214 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 61440 61440 NT_STATUS_OK
ReadX 12215 61440 4096 4096 NT_STATUS_OK
ReadX 12215 65536 61440 61440 NT_STATUS_OK
ReadX 12215 126976 4096 4096 NT_STATUS_OK
ReadX 12215 131072 61440 61440 NT_STATUS_OK
ReadX 12215 192512 4096 4096 NT_STATUS_OK
ReadX 12215 196608 61440 61440 NT_STATUS_OK
ReadX 12215 258048 4096 4096 NT_STATUS_OK
ReadX 12215 262144 61440 61440 NT_STATUS_OK
ReadX 12215 323584 4096 4096 NT_STATUS_OK
ReadX 12215 327680 61440 61440 NT_STATUS_OK
ReadX 12215 389120 4096 4096 NT_STATUS_OK
ReadX 12215 393216 61440 61440 NT_STATUS_OK
ReadX 12215 454656 4096 4096 NT_STATUS_OK
ReadX 12215 458752 61440 61440 NT_STATUS_OK
ReadX 12215 520192 4096 4096 NT_STATUS_OK
ReadX 12215 524288 61440 61440 NT_STATUS_OK
ReadX 12215 585728 4096 4096 NT_STATUS_OK
ReadX 12215 589824 61440 61440 NT_STATUS_OK
ReadX 12215 651264 4096 4096 NT_STATUS_OK
ReadX 12215 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 61440 61440 NT_STATUS_OK
ReadX 12216 61440 4096 4096 NT_STATUS_OK
ReadX 12216 65536 61440 61440 NT_STATUS_OK
ReadX 12216 126976 4096 4096 NT_STATUS_OK
ReadX 12216 131072 61440 61440 NT_STATUS_OK
ReadX 12216 192512 4096 4096 NT_STATUS_OK
ReadX 12216 196608 61440 61440 NT_STATUS_OK
ReadX 12216 258048 4096 4096 NT_STATUS_OK
ReadX 12216 262144 61440 61440 NT_STATUS_OK
ReadX 12216 323584 4096 4096 NT_STATUS_OK
ReadX 12216 327680 61440 61440 NT_STATUS_OK
ReadX 12216 389120 4096 4096 NT_STATUS_OK
ReadX 12216 393216 61440 61440 NT_STATUS_OK
ReadX 12216 454656 4096 4096 NT_STATUS_OK
ReadX 12216 458752 61440 61440 NT_STATUS_OK
ReadX 12216 520192 4096 4096 NT_STATUS_OK
ReadX 12216 524288 61440 61440 NT_STATUS_OK
ReadX 12216 585728 4096 4096 NT_STATUS_OK
ReadX 12216 589824 61440 61440 NT_STATUS_OK
ReadX 12216 651264 4096 4096 NT_STATUS_OK
ReadX 12216 655360 61440 61440 NT_STATUS_OK
ReadX 12216 716800 4096 4096 NT_STATUS_OK
ReadX 12216 720896 61440 61440 NT_STATUS_OK
ReadX 12216 782336 4096 4096 NT_STATUS_OK
ReadX 12216 786432 61440 61440 NT_STATUS_OK
ReadX 12216 847872 4096 4096 NT_STATUS_OK
ReadX 12216 851968 61440 61440 NT_STATUS_OK
ReadX 12216 913408 4096 4096 NT_STATUS_OK
ReadX 12216 917504 61440 61440 NT_STATUS_OK
ReadX 12216 978944 4096 4096 NT_STATUS_OK
ReadX 12216 983040 61440 61440 NT_STATUS_OK
ReadX 12216 1044480 4096 4096 NT_STATUS_OK
ReadX 12216 1048576 61440 61440 NT_STATUS_OK
ReadX 12216 1110016 4096 4096 NT_STATUS_OK
ReadX 12216 1114112 61440 61440 NT_STATUS_OK
ReadX 12216 1175552 4096 4096 NT_STATUS_OK
ReadX 12216 1179648 61440 61440 NT_STATUS_OK
ReadX 12216 1241088 4096 4096 NT_STATUS_OK
ReadX 12216 1245184 61440 61440 NT_STATUS_OK
ReadX 12216 1306624 4096 4096 NT_STATUS_OK
ReadX 12216 1310720 61440 61440 NT_STATUS_OK
ReadX 12216 1372160 4096 4096 NT_STATUS_OK
ReadX 12216 1376256 61440 61440 NT_STATUS_OK
ReadX 12216 1437696 4096 4096 NT_STATUS_OK
ReadX 12216 1441792 61440 61440 NT_STATUS_OK
ReadX 12216 1503232 4096 4096 NT_STATUS_OK
ReadX 12216 1507328 61440 61440 NT_STATUS_OK
ReadX 12216 1568768 4096 4096 NT_STATUS_OK
ReadX 12216 1572864 61440 61440 NT_STATUS_OK
ReadX 12216 1634304 4096 4096 NT_STATUS_OK
ReadX 12216 1638400 61440 61440 NT_STATUS_OK
ReadX 12216 1699840 4096 4096 NT_STATUS_OK
ReadX 12216 1703936 61440 61440 NT_STATUS_OK
ReadX 12216 1765376 4096 4096 NT_STATUS_OK
ReadX 12216 1769472 61440 61440 NT_STATUS_OK
ReadX 12216 1830912 4096 4096 NT_STATUS_OK
ReadX 12216 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12217 NT_STATUS_OK
Close 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 4096 4096 NT_STATUS_OK
ReadX 12221 4096 4096 4096 NT_STATUS_OK
ReadX 12221 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12220 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12225 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12226 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 8192 8192 NT_STATUS_OK
ReadX 12229 8192 8192 8192 NT_STATUS_OK
ReadX 12229 16384 8192 8192 NT_STATUS_OK
ReadX 12229 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12231 NT_STATUS_OK
Close 12231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12234 NT_STATUS_OK
WriteX 12234 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 258 NT_STATUS_OK
WriteX 12234 0 10438 10438 NT_STATUS_OK
Close 12234 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12238 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12240 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
ReadX 12243 4096 4096 4096 NT_STATUS_OK
ReadX 12243 8192 4096 4096 NT_STATUS_OK
ReadX 12243 12288 8192 8192 NT_STATUS_OK
ReadX 12243 20480 8192 8192 NT_STATUS_OK
ReadX 12243 28672 8192 8192 NT_STATUS_OK
ReadX 12243 36864 8192 8192 NT_STATUS_OK
ReadX 12243 45056 8192 8192 NT_STATUS_OK
ReadX 12243 53248 8192 8192 NT_STATUS_OK
ReadX 12243 61440 8192 8192 NT_STATUS_OK
ReadX 12243 69632 8192 8192 NT_STATUS_OK
ReadX 12243 77824 8192 8192 NT_STATUS_OK
ReadX 12243 86016 8192 8192 NT_STATUS_OK
ReadX 12243 94208 8192 8192 NT_STATUS_OK
ReadX 12243 102400 8192 8192 NT_STATUS_OK
ReadX 12243 110592 8192 8192 NT_STATUS_OK
ReadX 12243 118784 8192 8192 NT_STATUS_OK
ReadX 12243 126976 8192 8192 NT_STATUS_OK
ReadX 12243 135168 8192 8192 NT_STATUS_OK
ReadX 12243 143360 8192 8192 NT_STATUS_OK
ReadX 12243 151552 8192 8192 NT_STATUS_OK
ReadX 12243 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12243 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12248 NT_STATUS_OK
WriteX 12248 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12248 258 NT_STATUS_OK
WriteX 12248 0 28489 28489 NT_STATUS_OK
Close 12248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12249 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12251 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12252 NT_STATUS_OK
Close 12252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 8192 8192 NT_STATUS_OK
ReadX 12255 8192 8192 8192 NT_STATUS_OK
ReadX 12255 16384 8192 8192 NT_STATUS_OK
ReadX 12255 24576 8192 8192 NT_STATUS_OK
ReadX 12255 32768 16384 16384 NT_STATUS_OK
ReadX 12255 49152 8192 8192 NT_STATUS_OK
ReadX 12255 57344 8192 8192 NT_STATUS_OK
ReadX 12255 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12260 NT_STATUS_OK
WriteX 12260 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 258 NT_STATUS_OK
WriteX 12260 0 29253 29253 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12267 NT_STATUS_OK
WriteX 12267 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12267 258 NT_STATUS_OK
WriteX 12267 0 30183 30183 NT_STATUS_OK
Close 12267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12268 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12270 NT_STATUS_OK
WriteX 12270 0 510 510 NT_STATUS_OK
WriteX 12270 510 512 512 NT_STATUS_OK
WriteX 12270 1022 510 510 NT_STATUS_OK
WriteX 12270 1532 510 510 NT_STATUS_OK
WriteX 12270 2042 168 168 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 61440 4096 4096 NT_STATUS_OK
ReadX 12274 126976 4096 4096 NT_STATUS_OK
WriteX 12274 0 65536 65536 NT_STATUS_OK
WriteX 12274 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 61440 4096 4096 NT_STATUS_OK
ReadX 12275 126976 4096 4096 NT_STATUS_OK
ReadX 12275 192512 4096 4096 NT_STATUS_OK
ReadX 12275 258048 4096 4096 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 65536 65536 NT_STATUS_OK
WriteX 12275 131072 65536 65536 NT_STATUS_OK
WriteX 12275 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 61440 4096 4096 NT_STATUS_OK
ReadX 12276 126976 4096 4096 NT_STATUS_OK
ReadX 12276 192512 4096 4096 NT_STATUS_OK
ReadX 12276 258048 4096 4096 NT_STATUS_OK
ReadX 12276 323584 4096 4096 NT_STATUS_OK
ReadX 12276 389120 4096 4096 NT_STATUS_OK
ReadX 12276 454656 4096 4096 NT_STATUS_OK
ReadX 12276 520192 4096 4096 NT_STATUS_OK
WriteX 12276 0 65536 65536 NT_STATUS_OK
WriteX 12276 65536 65536 65536 NT_STATUS_OK
WriteX 12276 131072 65536 65536 NT_STATUS_OK
WriteX 12276 196608 65536 65536 NT_STATUS_OK
WriteX 12276 262144 65536 65536 NT_STATUS_OK
WriteX 12276 327680 65536 65536 NT_STATUS_OK
WriteX 12276 393216 65536 65536 NT_STATUS_OK
WriteX 12276 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12277 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12286 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12288 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12306 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12311 NT_STATUS_OK
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12321 NT_STATUS_OK
Close 12321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12342 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12345 NT_STATUS_OK
WriteX 12345 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12345 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12345 0 65536 65536 NT_STATUS_OK
WriteX 12345 65536 65536 65536 NT_STATUS_OK
WriteX 12345 131072 65536 65536 NT_STATUS_OK
WriteX 12345 196608 65536 65536 NT_STATUS_OK
WriteX 12345 262144 26634 26634 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
ReadX 12353 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12381 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12401 NT_STATUS_OK
Close 12401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12405 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12410 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
Close 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12477 0 4096 4096 NT_STATUS_OK
Close 12477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
ReadX 12479 4096 4096 4096 NT_STATUS_OK
ReadX 12479 8192 4096 4096 NT_STATUS_OK
ReadX 12479 12288 4096 4096 NT_STATUS_OK
ReadX 12479 16384 4096 4096 NT_STATUS_OK
ReadX 12479 20480 4096 4096 NT_STATUS_OK
ReadX 12479 24576 4096 4096 NT_STATUS_OK
ReadX 12479 28672 4096 4096 NT_STATUS_OK
ReadX 12479 32768 4096 4096 NT_STATUS_OK
ReadX 12479 36864 4096 4096 NT_STATUS_OK
ReadX 12479 40960 4096 4096 NT_STATUS_OK
ReadX 12479 45056 4096 4096 NT_STATUS_OK
ReadX 12479 49152 4096 4096 NT_STATUS_OK
ReadX 12479 53248 4096 4096 NT_STATUS_OK
ReadX 12479 57344 4096 4096 NT_STATUS_OK
ReadX 12479 61440 4096 4096 NT_STATUS_OK
ReadX 12479 65536 4096 4096 NT_STATUS_OK
ReadX 12479 69632 4096 4096 NT_STATUS_OK
ReadX 12479 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12479 1004 NT_STATUS_OK
WriteX 12479 0 4096 4096 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12480 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
Close 12480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12485 NT_STATUS_OK
WriteX 12485 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12485 258 NT_STATUS_OK
WriteX 12485 0 65536 65536 NT_STATUS_OK
WriteX 12485 65536 19979 19979 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
SET_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
Close 12489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
Close 12490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12491 1004 NT_STATUS_OK
WriteX 12491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12492 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12497 NT_STATUS_OK
WriteX 12497 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12497 258 NT_STATUS_OK
WriteX 12497 0 65536 65536 NT_STATUS_OK
WriteX 12497 65536 17654 17654 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 1004 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
SET_FILE_INFORMATION 12498 1004 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12499 NT_STATUS_OK
SET_FILE_INFORMATION 12499 1004 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12503 NT_STATUS_OK
ReadX 12503 0 4096 4096 NT_STATUS_OK
ReadX 12503 4096 4096 4096 NT_STATUS_OK
ReadX 12503 8192 4096 4096 NT_STATUS_OK
ReadX 12503 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12503 16384 4096 4096 NT_STATUS_OK
ReadX 12503 20480 4096 4096 NT_STATUS_OK
ReadX 12503 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12506 1004 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12507 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12512 NT_STATUS_OK
WriteX 12512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12512 258 NT_STATUS_OK
WriteX 12512 0 65536 65536 NT_STATUS_OK
WriteX 12512 65536 19490 19490 NT_STATUS_OK
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
SET_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12514 NT_STATUS_OK
SET_FILE_INFORMATION 12514 1004 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12518 0 4096 4096 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
ReadX 12520 4096 4096 4096 NT_STATUS_OK
ReadX 12520 8192 4096 4096 NT_STATUS_OK
ReadX 12520 12288 4096 4096 NT_STATUS_OK
ReadX 12520 16384 4096 4096 NT_STATUS_OK
ReadX 12520 20480 4096 4096 NT_STATUS_OK
ReadX 12520 24576 4096 4096 NT_STATUS_OK
ReadX 12520 28672 4096 4096 NT_STATUS_OK
ReadX 12520 32768 4096 4096 NT_STATUS_OK
ReadX 12520 36864 4096 4096 NT_STATUS_OK
ReadX 12520 40960 4096 4096 NT_STATUS_OK
ReadX 12520 45056 4096 4096 NT_STATUS_OK
ReadX 12520 49152 4096 4096 NT_STATUS_OK
ReadX 12520 53248 4096 4096 NT_STATUS_OK
ReadX 12520 57344 4096 4096 NT_STATUS_OK
ReadX 12520 61440 4096 4096 NT_STATUS_OK
ReadX 12520 65536 4096 4096 NT_STATUS_OK
ReadX 12520 69632 4096 4096 NT_STATUS_OK
ReadX 12520 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12520 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12521 NT_STATUS_OK
SET_FILE_INFORMATION 12521 1004 NT_STATUS_OK
Close 12521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12526 NT_STATUS_OK
WriteX 12526 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 258 NT_STATUS_OK
WriteX 12526 0 65536 65536 NT_STATUS_OK
WriteX 12526 65536 8866 8866 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
SET_FILE_INFORMATION 12527 1004 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
Close 12529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12534 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12537 NT_STATUS_OK
WriteX 12537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 258 NT_STATUS_OK
WriteX 12537 0 65536 65536 NT_STATUS_OK
WriteX 12537 65536 9298 9298 NT_STATUS_OK
Close 12537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
WriteX 12538 0 4096 4096 NT_STATUS_OK
Flush 12538 NT_STATUS_OK
SET_FILE_INFORMATION 12538 1004 NT_STATUS_OK
WriteX 12538 0 4096 4096 NT_STATUS_OK
Flush 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12539 NT_STATUS_OK
SET_FILE_INFORMATION 12539 1004 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12544 0 4096 4096 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12545 4096 4096 4096 NT_STATUS_OK
ReadX 12545 8192 4096 4096 NT_STATUS_OK
ReadX 12545 12288 4096 4096 NT_STATUS_OK
ReadX 12545 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
Close 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12548 1004 NT_STATUS_OK
WriteX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12549 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12554 NT_STATUS_OK
WriteX 12554 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 258 NT_STATUS_OK
WriteX 12554 0 65536 65536 NT_STATUS_OK
WriteX 12554 65536 11540 11540 NT_STATUS_OK
Close 12554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12556 NT_STATUS_OK
SET_FILE_INFORMATION 12556 1004 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12558 NT_STATUS_OK
Close 12558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 61440 4096 4096 NT_STATUS_OK
ReadX 12560 126976 4096 4096 NT_STATUS_OK
WriteX 12560 0 65536 65536 NT_STATUS_OK
WriteX 12560 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 61440 4096 4096 NT_STATUS_OK
ReadX 12561 126976 4096 4096 NT_STATUS_OK
ReadX 12561 192512 4096 4096 NT_STATUS_OK
ReadX 12561 258048 4096 4096 NT_STATUS_OK
WriteX 12561 0 65536 65536 NT_STATUS_OK
WriteX 12561 65536 65536 65536 NT_STATUS_OK
WriteX 12561 131072 65536 65536 NT_STATUS_OK
WriteX 12561 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 61440 4096 4096 NT_STATUS_OK
ReadX 12562 126976 4096 4096 NT_STATUS_OK
ReadX 12562 192512 4096 4096 NT_STATUS_OK
ReadX 12562 258048 4096 4096 NT_STATUS_OK
ReadX 12562 323584 4096 4096 NT_STATUS_OK
ReadX 12562 389120 4096 4096 NT_STATUS_OK
ReadX 12562 454656 4096 4096 NT_STATUS_OK
ReadX 12562 520192 4096 4096 NT_STATUS_OK
WriteX 12562 0 65536 65536 NT_STATUS_OK
WriteX 12562 65536 65536 65536 NT_STATUS_OK
WriteX 12562 131072 65536 65536 NT_STATUS_OK
WriteX 12562 196608 65536 65536 NT_STATUS_OK
WriteX 12562 262144 65536 65536 NT_STATUS_OK
WriteX 12562 327680 65536 65536 NT_STATUS_OK
WriteX 12562 393216 65536 65536 NT_STATUS_OK
WriteX 12562 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
ReadX 12563 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12564 NT_STATUS_OK
WriteX 12564 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 258 NT_STATUS_OK
WriteX 12564 0 53 53 NT_STATUS_OK
Close 12564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12503 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12563 8192 4096 4096 NT_STATUS_OK
ReadX 12563 12288 4096 4096 NT_STATUS_OK
WriteX 12567 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
ReadX 12563 16384 4096 4096 NT_STATUS_OK
ReadX 12563 20480 4096 4096 NT_STATUS_OK
WriteX 12567 0 15360 15360 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
WriteX 12568 0 4096 4096 NT_STATUS_OK
Close 12568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12572 NT_STATUS_OK
Close 12572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12571 4096 4096 4096 NT_STATUS_OK
ReadX 12571 8192 4096 4096 NT_STATUS_OK
ReadX 12571 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
ReadX 12574 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
ReadX 12575 4096 4096 4096 NT_STATUS_OK
ReadX 12575 8192 4096 4096 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12576 NT_STATUS_OK
WriteX 12576 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 258 NT_STATUS_OK
WriteX 12576 0 15360 15360 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12578 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12581 NT_STATUS_OK
SET_FILE_INFORMATION 12581 1004 NT_STATUS_OK
Close 12581 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
ReadX 12584 4096 4096 4096 NT_STATUS_OK
ReadX 12584 8192 4096 4096 NT_STATUS_OK
ReadX 12584 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12586 NT_STATUS_OK
WriteX 12586 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12586 258 NT_STATUS_OK
WriteX 12586 0 53 53 NT_STATUS_OK
Close 12586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12587 NT_STATUS_OK
Close 12587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12585 4096 4096 4096 NT_STATUS_OK
ReadX 12585 8192 4096 4096 NT_STATUS_OK
ReadX 12585 12288 4096 4096 NT_STATUS_OK
WriteX 12589 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
WriteX 12589 0 12006 12006 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12593 4096 4096 4096 NT_STATUS_OK
ReadX 12593 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12596 NT_STATUS_OK
WriteX 12596 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12596 258 NT_STATUS_OK
WriteX 12596 0 11991 11991 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12598 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12601 NT_STATUS_OK
SET_FILE_INFORMATION 12601 1004 NT_STATUS_OK
Close 12601 NT_STATUS_OK
WriteX 12597 0 4096 4096 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12604 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
ReadX 12604 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
WriteX 12604 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
Close 12580 NT_STATUS_OK
WriteX 12584 0 19054 19054 NT_STATUS_OK
WriteX 12604 0 12288 12288 NT_STATUS_OK
Close 12600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 61440 61440 NT_STATUS_OK
ReadX 12611 61440 4096 4096 NT_STATUS_OK
ReadX 12611 65536 61440 61440 NT_STATUS_OK
ReadX 12611 126976 4096 4096 NT_STATUS_OK
ReadX 12611 131072 61440 61440 NT_STATUS_OK
ReadX 12611 192512 4096 4096 NT_STATUS_OK
ReadX 12611 196608 61440 61440 NT_STATUS_OK
ReadX 12611 258048 4096 4096 NT_STATUS_OK
ReadX 12611 262144 61440 61440 NT_STATUS_OK
ReadX 12611 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 61440 61440 NT_STATUS_OK
ReadX 12612 61440 4096 4096 NT_STATUS_OK
ReadX 12612 65536 61440 61440 NT_STATUS_OK
ReadX 12612 126976 4096 4096 NT_STATUS_OK
ReadX 12612 131072 61440 61440 NT_STATUS_OK
ReadX 12612 192512 4096 4096 NT_STATUS_OK
ReadX 12612 196608 61440 61440 NT_STATUS_OK
ReadX 12612 258048 4096 4096 NT_STATUS_OK
ReadX 12612 262144 61440 61440 NT_STATUS_OK
ReadX 12612 323584 4096 4096 NT_STATUS_OK
ReadX 12612 327680 61440 61440 NT_STATUS_OK
ReadX 12612 389120 4096 4096 NT_STATUS_OK
ReadX 12612 393216 61440 61440 NT_STATUS_OK
ReadX 12612 454656 4096 4096 NT_STATUS_OK
ReadX 12612 458752 61440 61440 NT_STATUS_OK
ReadX 12612 520192 4096 4096 NT_STATUS_OK
ReadX 12612 524288 61440 61440 NT_STATUS_OK
ReadX 12612 585728 4096 4096 NT_STATUS_OK
ReadX 12612 589824 61440 61440 NT_STATUS_OK
ReadX 12612 651264 4096 4096 NT_STATUS_OK
ReadX 12612 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 61440 61440 NT_STATUS_OK
ReadX 12613 61440 4096 4096 NT_STATUS_OK
ReadX 12613 65536 61440 61440 NT_STATUS_OK
ReadX 12613 126976 4096 4096 NT_STATUS_OK
ReadX 12613 131072 61440 61440 NT_STATUS_OK
ReadX 12613 192512 4096 4096 NT_STATUS_OK
ReadX 12613 196608 61440 61440 NT_STATUS_OK
ReadX 12613 258048 4096 4096 NT_STATUS_OK
ReadX 12613 262144 61440 61440 NT_STATUS_OK
ReadX 12613 323584 4096 4096 NT_STATUS_OK
ReadX 12613 327680 61440 61440 NT_STATUS_OK
ReadX 12613 389120 4096 4096 NT_STATUS_OK
ReadX 12613 393216 61440 61440 NT_STATUS_OK
ReadX 12613 454656 4096 4096 NT_STATUS_OK
ReadX 12613 458752 61440 61440 NT_STATUS_OK
ReadX 12613 520192 4096 4096 NT_STATUS_OK
ReadX 12613 524288 61440 61440 NT_STATUS_OK
ReadX 12613 585728 4096 4096 NT_STATUS_OK
ReadX 12613 589824 61440 61440 NT_STATUS_OK
ReadX 12613 651264 4096 4096 NT_STATUS_OK
ReadX 12613 655360 61440 61440 NT_STATUS_OK
ReadX 12613 716800 4096 4096 NT_STATUS_OK
ReadX 12613 720896 61440 61440 NT_STATUS_OK
ReadX 12613 782336 4096 4096 NT_STATUS_OK
ReadX 12613 786432 61440 61440 NT_STATUS_OK
ReadX 12613 847872 4096 4096 NT_STATUS_OK
ReadX 12613 851968 61440 61440 NT_STATUS_OK
ReadX 12613 913408 4096 4096 NT_STATUS_OK
ReadX 12613 917504 61440 61440 NT_STATUS_OK
ReadX 12613 978944 4096 4096 NT_STATUS_OK
ReadX 12613 983040 61440 61440 NT_STATUS_OK
ReadX 12613 1044480 4096 4096 NT_STATUS_OK
ReadX 12613 1048576 61440 61440 NT_STATUS_OK
ReadX 12613 1110016 4096 4096 NT_STATUS_OK
ReadX 12613 1114112 61440 61440 NT_STATUS_OK
ReadX 12613 1175552 4096 4096 NT_STATUS_OK
ReadX 12613 1179648 61440 61440 NT_STATUS_OK
ReadX 12613 1241088 4096 4096 NT_STATUS_OK
ReadX 12613 1245184 61440 61440 NT_STATUS_OK
ReadX 12613 1306624 4096 4096 NT_STATUS_OK
ReadX 12613 1310720 61440 61440 NT_STATUS_OK
ReadX 12613 1372160 4096 4096 NT_STATUS_OK
ReadX 12613 1376256 61440 61440 NT_STATUS_OK
ReadX 12613 1437696 4096 4096 NT_STATUS_OK
ReadX 12613 1441792 61440 61440 NT_STATUS_OK
ReadX 12613 1503232 4096 4096 NT_STATUS_OK
ReadX 12613 1507328 61440 61440 NT_STATUS_OK
ReadX 12613 1568768 4096 4096 NT_STATUS_OK
ReadX 12613 1572864 61440 61440 NT_STATUS_OK
ReadX 12613 1634304 4096 4096 NT_STATUS_OK
ReadX 12613 1638400 61440 61440 NT_STATUS_OK
ReadX 12613 1699840 4096 4096 NT_STATUS_OK
ReadX 12613 1703936 61440 61440 NT_STATUS_OK
ReadX 12613 1765376 4096 4096 NT_STATUS_OK
ReadX 12613 1769472 61440 61440 NT_STATUS_OK
ReadX 12613 1830912 4096 4096 NT_STATUS_OK
ReadX 12613 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12620 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 1004 NT_STATUS_OK
WriteX 12620 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12622 NT_STATUS_OK
WriteX 12622 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
WriteX 12622 0 491 491 NT_STATUS_OK
Close 12622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12620 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12625 NT_STATUS_OK
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12626 NT_STATUS_OK
WriteX 12626 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
WriteX 12626 0 543 543 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12611 NT_STATUS_OK
Close 12612 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12640 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1004 NT_STATUS_OK
WriteX 12640 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 258 NT_STATUS_OK
WriteX 12640 0 2048 2048 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12641 NT_STATUS_OK
ReadX 12641 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12641 0 4096 4096 NT_STATUS_OK
Flush 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12646 NT_STATUS_OK
WriteX 12646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12646 258 NT_STATUS_OK
WriteX 12646 0 2048 2048 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12652 NT_STATUS_OK
WriteX 12652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 258 NT_STATUS_OK
WriteX 12652 0 2048 2048 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 2048 2048 NT_STATUS_OK
ReadX 12631 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12631 0 8192 8192 NT_STATUS_OK
WriteX 12632 0 4096 4096 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12657 NT_STATUS_OK
QUERY_FILE_INFORMATION 12657 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12632 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12634 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12677 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 1004 NT_STATUS_OK
WriteX 12677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 2048 2048 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12679 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12685 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 1004 NT_STATUS_OK
WriteX 12685 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 258 NT_STATUS_OK
WriteX 12685 0 2048 2048 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
Flush 12678 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
Flush 12686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12680 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12688 NT_STATUS_OK
WriteX 12688 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 258 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12691 NT_STATUS_OK
WriteX 12691 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
WriteX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12692 0 4096 4096 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12672 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Close 12671 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12695 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12697 NT_STATUS_OK
ReadX 12697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12699 NT_STATUS_OK
WriteX 12699 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12699 258 NT_STATUS_OK
WriteX 12699 0 2048 2048 NT_STATUS_OK
Close 12699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12714 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12713 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12716 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 12718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12719 NT_STATUS_OK
ReadX 12719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12736 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 1004 NT_STATUS_OK
WriteX 12736 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 258 NT_STATUS_OK
WriteX 12736 0 2048 2048 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12742 NT_STATUS_OK
ReadX 12742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
WriteX 12748 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 258 NT_STATUS_OK
WriteX 12748 0 2048 2048 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12749 NT_STATUS_OK
ReadX 12749 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12756 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 1004 NT_STATUS_OK
WriteX 12756 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 258 NT_STATUS_OK
WriteX 12756 0 2048 2048 NT_STATUS_OK
Close 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Flush 12737 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
Flush 12749 NT_STATUS_OK
WriteX 12757 0 4096 4096 NT_STATUS_OK
Flush 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 4096 16384 16384 NT_STATUS_OK
ReadX 12719 4096 16384 16384 NT_STATUS_OK
ReadX 12751 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 2048 2048 NT_STATUS_OK
WriteX 12759 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12760 NT_STATUS_OK
QUERY_FILE_INFORMATION 12760 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Close 12719 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12762 NT_STATUS_OK
QUERY_FILE_INFORMATION 12762 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12767 4096 16384 16384 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
WriteX 12770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 8192 8192 NT_STATUS_OK
ReadX 12773 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12787 0 4096 4096 NT_STATUS_OK
ReadX 12787 4096 4096 4096 NT_STATUS_OK
ReadX 12787 8192 4096 4096 NT_STATUS_OK
WriteX 12773 0 4096 4096 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
ReadX 12788 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
Close 12786 NT_STATUS_OK
WriteX 12770 0 4096 4096 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12787 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12782 NT_STATUS_OK
Close 12767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12780 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12789 NT_STATUS_OK
Close 12774 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12790 NT_STATUS_OK
Close 12777 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12791 NT_STATUS_OK
Close 12771 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12792 NT_STATUS_OK
Close 12769 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
WriteX 12804 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 258 NT_STATUS_OK
WriteX 12804 0 2048 2048 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12789 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
ReadX 12807 4096 4096 4096 NT_STATUS_OK
WriteX 12807 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
ReadX 12809 4096 4096 4096 NT_STATUS_OK
WriteX 12809 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12810 NT_STATUS_OK
QUERY_FILE_INFORMATION 12810 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12812 0 4096 4096 NT_STATUS_OK
ReadX 12812 4096 4096 4096 NT_STATUS_OK
ReadX 12812 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12823 NT_STATUS_OK
ReadX 12823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 4096 4096 NT_STATUS_OK
ReadX 12813 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12830 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 1004 NT_STATUS_OK
WriteX 12830 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 258 NT_STATUS_OK
WriteX 12830 0 2048 2048 NT_STATUS_OK
Close 12830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12831 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12835 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12836 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 1004 NT_STATUS_OK
WriteX 12836 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 258 NT_STATUS_OK
WriteX 12836 0 2048 2048 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12837 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12820 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12838 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12825 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12820 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12823 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12840 NT_STATUS_OK
QUERY_FILE_INFORMATION 12840 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 61440 4096 4096 NT_STATUS_OK
ReadX 12842 126976 4096 4096 NT_STATUS_OK
WriteX 12842 0 65536 65536 NT_STATUS_OK
WriteX 12842 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 61440 4096 4096 NT_STATUS_OK
ReadX 12843 126976 4096 4096 NT_STATUS_OK
ReadX 12843 192512 4096 4096 NT_STATUS_OK
ReadX 12843 258048 4096 4096 NT_STATUS_OK
WriteX 12843 0 65536 65536 NT_STATUS_OK
WriteX 12843 65536 65536 65536 NT_STATUS_OK
WriteX 12843 131072 65536 65536 NT_STATUS_OK
WriteX 12843 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 61440 4096 4096 NT_STATUS_OK
ReadX 12844 126976 4096 4096 NT_STATUS_OK
ReadX 12844 192512 4096 4096 NT_STATUS_OK
ReadX 12844 258048 4096 4096 NT_STATUS_OK
ReadX 12844 323584 4096 4096 NT_STATUS_OK
ReadX 12844 389120 4096 4096 NT_STATUS_OK
ReadX 12844 454656 4096 4096 NT_STATUS_OK
ReadX 12844 520192 4096 4096 NT_STATUS_OK
WriteX 12844 0 65536 65536 NT_STATUS_OK
WriteX 12844 65536 65536 65536 NT_STATUS_OK
WriteX 12844 131072 65536 65536 NT_STATUS_OK
WriteX 12844 196608 65536 65536 NT_STATUS_OK
WriteX 12844 262144 65536 65536 NT_STATUS_OK
WriteX 12844 327680 65536 65536 NT_STATUS_OK
WriteX 12844 393216 65536 65536 NT_STATUS_OK
WriteX 12844 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12845 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12845 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12845 8192 4096 4096 NT_STATUS_OK
ReadX 12845 12288 4096 4096 NT_STATUS_OK
ReadX 12845 16384 4096 4096 NT_STATUS_OK
ReadX 12845 20480 4096 4096 NT_STATUS_OK
ReadX 12845 24576 4096 4096 NT_STATUS_OK
ReadX 12845 28672 4096 4096 NT_STATUS_OK
ReadX 12845 32768 4096 4096 NT_STATUS_OK
ReadX 12845 36864 4096 4096 NT_STATUS_OK
ReadX 12845 40960 4096 4096 NT_STATUS_OK
ReadX 12845 45056 4096 4096 NT_STATUS_OK
ReadX 12845 49152 4096 4096 NT_STATUS_OK
ReadX 12845 53248 4096 4096 NT_STATUS_OK
ReadX 12845 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12845 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12848 NT_STATUS_OK
WriteX 12848 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12848 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 57088 57088 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Flush 12848 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12849 NT_STATUS_OK
SET_FILE_INFORMATION 12849 1004 NT_STATUS_OK
Close 12849 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12852 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12853 NT_STATUS_OK
WriteX 12853 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 51456 51456 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Flush 12853 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12857 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12862 NT_STATUS_OK
WriteX 12862 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12862 258 NT_STATUS_OK
WriteX 12862 0 53077 53077 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12863 NT_STATUS_OK
WriteX 12863 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 0 65536 65536 NT_STATUS_OK
WriteX 12863 65536 1856 1856 NT_STATUS_OK
WriteX 12863 0 4096 4096 NT_STATUS_OK
Flush 12863 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 0 4096 4096 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Close 12857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12869 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12872 NT_STATUS_OK
WriteX 12872 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12872 258 NT_STATUS_OK
WriteX 12872 0 7983 7983 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12877 NT_STATUS_OK
WriteX 12877 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12877 258 NT_STATUS_OK
WriteX 12877 0 65536 65536 NT_STATUS_OK
WriteX 12877 65536 65536 65536 NT_STATUS_OK
WriteX 12877 131072 65536 65536 NT_STATUS_OK
WriteX 12877 196608 65536 65536 NT_STATUS_OK
WriteX 12877 262144 65536 65536 NT_STATUS_OK
WriteX 12877 327680 65536 65536 NT_STATUS_OK
WriteX 12877 393216 65536 65536 NT_STATUS_OK
WriteX 12877 458752 46731 46731 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12878 NT_STATUS_OK
WriteX 12878 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12867 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 0 65536 65536 NT_STATUS_OK
WriteX 12878 65536 22848 22848 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Flush 12878 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12882 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12883 NT_STATUS_OK
ReadX 12883 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12883 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12883 1004 NT_STATUS_OK
ReadX 12883 8192 4096 4096 NT_STATUS_OK
ReadX 12883 12288 4096 4096 NT_STATUS_OK
ReadX 12883 16384 4096 4096 NT_STATUS_OK
ReadX 12883 20480 4096 4096 NT_STATUS_OK
ReadX 12883 24576 4096 4096 NT_STATUS_OK
ReadX 12883 28672 4096 4096 NT_STATUS_OK
ReadX 12883 32768 4096 4096 NT_STATUS_OK
ReadX 12883 36864 4096 4096 NT_STATUS_OK
ReadX 12883 40960 4096 4096 NT_STATUS_OK
ReadX 12883 45056 4096 4096 NT_STATUS_OK
ReadX 12883 49152 4096 4096 NT_STATUS_OK
ReadX 12883 53248 4096 4096 NT_STATUS_OK
ReadX 12883 57344 4096 4096 NT_STATUS_OK
ReadX 12883 61440 4096 4096 NT_STATUS_OK
ReadX 12883 65536 4096 4096 NT_STATUS_OK
ReadX 12883 69632 4096 4096 NT_STATUS_OK
ReadX 12883 73728 4096 4096 NT_STATUS_OK
ReadX 12883 77824 4096 4096 NT_STATUS_OK
ReadX 12883 81920 4096 4096 NT_STATUS_OK
ReadX 12883 86016 4096 4096 NT_STATUS_OK
ReadX 12883 90112 4096 4096 NT_STATUS_OK
ReadX 12883 94208 4096 4096 NT_STATUS_OK
ReadX 12883 98304 4096 4096 NT_STATUS_OK
ReadX 12883 102400 4096 4096 NT_STATUS_OK
ReadX 12883 106496 4096 4096 NT_STATUS_OK
ReadX 12883 110592 4096 4096 NT_STATUS_OK
ReadX 12883 114688 4096 4096 NT_STATUS_OK
ReadX 12883 118784 4096 4096 NT_STATUS_OK
ReadX 12883 122880 4096 4096 NT_STATUS_OK
ReadX 12883 126976 4096 4096 NT_STATUS_OK
ReadX 12883 131072 4096 4096 NT_STATUS_OK
ReadX 12883 135168 4096 4096 NT_STATUS_OK
ReadX 12883 139264 4096 4096 NT_STATUS_OK
ReadX 12883 143360 4096 4096 NT_STATUS_OK
ReadX 12883 147456 4096 4096 NT_STATUS_OK
ReadX 12883 151552 4096 4096 NT_STATUS_OK
ReadX 12883 155648 4096 4096 NT_STATUS_OK
ReadX 12883 159744 4096 4096 NT_STATUS_OK
ReadX 12883 163840 4096 4096 NT_STATUS_OK
ReadX 12883 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12883 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12886 NT_STATUS_OK
WriteX 12886 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12886 258 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12887 NT_STATUS_OK
SET_FILE_INFORMATION 12887 1004 NT_STATUS_OK
Close 12887 NT_STATUS_OK
WriteX 12886 0 42388 42388 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12888 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 4096 4096 NT_STATUS_OK
ReadX 12890 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12891 NT_STATUS_OK
WriteX 12891 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 258 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
WriteX 12891 0 42652 42652 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12893 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
ReadX 12895 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12900 NT_STATUS_OK
WriteX 12900 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12900 258 NT_STATUS_OK
WriteX 12900 0 65536 65536 NT_STATUS_OK
WriteX 12900 65536 49 49 NT_STATUS_OK
Close 12900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 61440 61440 NT_STATUS_OK
ReadX 12901 61440 4096 4096 NT_STATUS_OK
ReadX 12901 65536 61440 61440 NT_STATUS_OK
ReadX 12901 126976 4096 4096 NT_STATUS_OK
ReadX 12901 131072 61440 61440 NT_STATUS_OK
ReadX 12901 192512 4096 4096 NT_STATUS_OK
ReadX 12901 196608 61440 61440 NT_STATUS_OK
ReadX 12901 258048 4096 4096 NT_STATUS_OK
ReadX 12901 262144 61440 61440 NT_STATUS_OK
ReadX 12901 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 61440 61440 NT_STATUS_OK
ReadX 12902 61440 4096 4096 NT_STATUS_OK
ReadX 12902 65536 61440 61440 NT_STATUS_OK
ReadX 12902 126976 4096 4096 NT_STATUS_OK
ReadX 12902 131072 61440 61440 NT_STATUS_OK
ReadX 12902 192512 4096 4096 NT_STATUS_OK
ReadX 12902 196608 61440 61440 NT_STATUS_OK
ReadX 12902 258048 4096 4096 NT_STATUS_OK
ReadX 12902 262144 61440 61440 NT_STATUS_OK
ReadX 12902 323584 4096 4096 NT_STATUS_OK
ReadX 12902 327680 61440 61440 NT_STATUS_OK
ReadX 12902 389120 4096 4096 NT_STATUS_OK
ReadX 12902 393216 61440 61440 NT_STATUS_OK
ReadX 12902 454656 4096 4096 NT_STATUS_OK
ReadX 12902 458752 61440 61440 NT_STATUS_OK
ReadX 12902 520192 4096 4096 NT_STATUS_OK
ReadX 12902 524288 61440 61440 NT_STATUS_OK
ReadX 12902 585728 4096 4096 NT_STATUS_OK
ReadX 12902 589824 61440 61440 NT_STATUS_OK
ReadX 12902 651264 4096 4096 NT_STATUS_OK
ReadX 12902 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 61440 61440 NT_STATUS_OK
ReadX 12903 61440 4096 4096 NT_STATUS_OK
ReadX 12903 65536 61440 61440 NT_STATUS_OK
ReadX 12903 126976 4096 4096 NT_STATUS_OK
ReadX 12903 131072 61440 61440 NT_STATUS_OK
ReadX 12903 192512 4096 4096 NT_STATUS_OK
ReadX 12903 196608 61440 61440 NT_STATUS_OK
ReadX 12903 258048 4096 4096 NT_STATUS_OK
ReadX 12903 262144 61440 61440 NT_STATUS_OK
ReadX 12903 323584 4096 4096 NT_STATUS_OK
ReadX 12903 327680 61440 61440 NT_STATUS_OK
ReadX 12903 389120 4096 4096 NT_STATUS_OK
ReadX 12903 393216 61440 61440 NT_STATUS_OK
ReadX 12903 454656 4096 4096 NT_STATUS_OK
ReadX 12903 458752 61440 61440 NT_STATUS_OK
ReadX 12903 520192 4096 4096 NT_STATUS_OK
ReadX 12903 524288 61440 61440 NT_STATUS_OK
ReadX 12903 585728 4096 4096 NT_STATUS_OK
ReadX 12903 589824 61440 61440 NT_STATUS_OK
ReadX 12903 651264 4096 4096 NT_STATUS_OK
ReadX 12903 655360 61440 61440 NT_STATUS_OK
ReadX 12903 716800 4096 4096 NT_STATUS_OK
ReadX 12903 720896 61440 61440 NT_STATUS_OK
ReadX 12903 782336 4096 4096 NT_STATUS_OK
ReadX 12903 786432 61440 61440 NT_STATUS_OK
ReadX 12903 847872 4096 4096 NT_STATUS_OK
ReadX 12903 851968 61440 61440 NT_STATUS_OK
ReadX 12903 913408 4096 4096 NT_STATUS_OK
ReadX 12903 917504 61440 61440 NT_STATUS_OK
ReadX 12903 978944 4096 4096 NT_STATUS_OK
ReadX 12903 983040 61440 61440 NT_STATUS_OK
ReadX 12903 1044480 4096 4096 NT_STATUS_OK
ReadX 12903 1048576 61440 61440 NT_STATUS_OK
ReadX 12903 1110016 4096 4096 NT_STATUS_OK
ReadX 12903 1114112 61440 61440 NT_STATUS_OK
ReadX 12903 1175552 4096 4096 NT_STATUS_OK
ReadX 12903 1179648 61440 61440 NT_STATUS_OK
ReadX 12903 1241088 4096 4096 NT_STATUS_OK
ReadX 12903 1245184 61440 61440 NT_STATUS_OK
ReadX 12903 1306624 4096 4096 NT_STATUS_OK
ReadX 12903 1310720 61440 61440 NT_STATUS_OK
ReadX 12903 1372160 4096 4096 NT_STATUS_OK
ReadX 12903 1376256 61440 61440 NT_STATUS_OK
ReadX 12903 1437696 4096 4096 NT_STATUS_OK
ReadX 12903 1441792 61440 61440 NT_STATUS_OK
ReadX 12903 1503232 4096 4096 NT_STATUS_OK
ReadX 12903 1507328 61440 61440 NT_STATUS_OK
ReadX 12903 1568768 4096 4096 NT_STATUS_OK
ReadX 12903 1572864 61440 61440 NT_STATUS_OK
ReadX 12903 1634304 4096 4096 NT_STATUS_OK
ReadX 12903 1638400 61440 61440 NT_STATUS_OK
ReadX 12903 1699840 4096 4096 NT_STATUS_OK
ReadX 12903 1703936 61440 61440 NT_STATUS_OK
ReadX 12903 1765376 4096 4096 NT_STATUS_OK
ReadX 12903 1769472 61440 61440 NT_STATUS_OK
ReadX 12903 1830912 4096 4096 NT_STATUS_OK
ReadX 12903 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12905 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
ReadX 12905 2156 24 24 NT_STATUS_OK
ReadX 12905 2139 276 276 NT_STATUS_OK
ReadX 12905 2136 14 14 NT_STATUS_OK
ReadX 12905 2136 7 7 NT_STATUS_OK
ReadX 12905 2138 12 12 NT_STATUS_OK
ReadX 12905 2137 8 8 NT_STATUS_OK
ReadX 12905 2135 15 15 NT_STATUS_OK
ReadX 12905 0 16 16 NT_STATUS_OK
ReadX 12905 16 2048 2048 NT_STATUS_OK
ReadX 12905 2064 2048 2048 NT_STATUS_OK
ReadX 12905 257 2048 2048 NT_STATUS_OK
ReadX 12905 385 2048 2048 NT_STATUS_OK
ReadX 12905 513 2048 2048 NT_STATUS_OK
ReadX 12905 641 2048 2048 NT_STATUS_OK
ReadX 12905 769 2048 2048 NT_STATUS_OK
ReadX 12905 897 2048 2048 NT_STATUS_OK
ReadX 12905 1025 2048 2048 NT_STATUS_OK
ReadX 12905 1153 2048 2048 NT_STATUS_OK
ReadX 12905 1281 2048 2048 NT_STATUS_OK
ReadX 12905 1409 2048 2048 NT_STATUS_OK
ReadX 12905 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12907 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12902 NT_STATUS_OK
Close 12903 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12910 NT_STATUS_OK
WriteX 12910 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 10575 10575 NT_STATUS_OK
Flush 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12915 NT_STATUS_OK
LockX 12915 2147483538 1 NT_STATUS_OK
UnlockX 12915 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1005 NT_STATUS_OK
ReadX 12915 0 512 512 NT_STATUS_OK
ReadX 12915 512 512 512 NT_STATUS_OK
ReadX 12915 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1004 NT_STATUS_OK
Close 12915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12916 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1005 NT_STATUS_OK
ReadX 12916 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12917 NT_STATUS_OK
LockX 12917 2147483538 1 NT_STATUS_OK
UnlockX 12917 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12917 1005 NT_STATUS_OK
ReadX 12917 0 512 512 NT_STATUS_OK
ReadX 12917 512 512 512 NT_STATUS_OK
ReadX 12917 1024 512 512 NT_STATUS_OK
ReadX 12917 288 20 20 NT_STATUS_OK
ReadX 12917 308 2084 2084 NT_STATUS_OK
ReadX 12917 388 2084 2084 NT_STATUS_OK
ReadX 12917 388 2084 2084 NT_STATUS_OK
ReadX 12904 2157 1386 1386 NT_STATUS_OK
ReadX 12917 2472 399 399 NT_STATUS_OK
ReadX 12917 3072 1536 1536 NT_STATUS_OK
ReadX 12917 544 149 149 NT_STATUS_OK
ReadX 12917 693 485 485 NT_STATUS_OK
Close 12917 NT_STATUS_OK
ReadX 12904 2157 4096 4096 NT_STATUS_OK
ReadX 12904 6253 4096 4096 NT_STATUS_OK
ReadX 12904 10349 4096 4096 NT_STATUS_OK
ReadX 12904 14445 4096 4096 NT_STATUS_OK
ReadX 12904 18541 4096 4096 NT_STATUS_OK
ReadX 12904 22637 256 256 NT_STATUS_OK
ReadX 12904 22893 4096 4096 NT_STATUS_OK
ReadX 12904 26989 4096 4096 NT_STATUS_OK
ReadX 12904 31085 4096 4096 NT_STATUS_OK
ReadX 12904 35181 4096 4096 NT_STATUS_OK
ReadX 12904 39277 4096 4096 NT_STATUS_OK
ReadX 12904 43373 4096 4096 NT_STATUS_OK
ReadX 12904 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12904 2157 1024 1024 NT_STATUS_OK
ReadX 12904 1667 4688 4688 NT_STATUS_OK
ReadX 12904 6355 3516 3516 NT_STATUS_OK
ReadX 12904 9871 16384 16384 NT_STATUS_OK
ReadX 12904 26255 3771 3771 NT_STATUS_OK
ReadX 12904 30026 2048 2048 NT_STATUS_OK
ReadX 12904 32074 1024 1024 NT_STATUS_OK
ReadX 12904 33098 6652 6652 NT_STATUS_OK
ReadX 12904 39750 16384 16384 NT_STATUS_OK
ReadX 12904 56134 10496 10496 NT_STATUS_OK
ReadX 12904 66630 1784 1784 NT_STATUS_OK
ReadX 12904 68414 90 90 NT_STATUS_OK
ReadX 12904 68504 273 273 NT_STATUS_OK
ReadX 12904 68777 1600 1600 NT_STATUS_OK
ReadX 12904 70377 640 640 NT_STATUS_OK
ReadX 12904 71017 1280 1280 NT_STATUS_OK
ReadX 12904 72297 8464 8464 NT_STATUS_OK
ReadX 12904 80761 158 158 NT_STATUS_OK
ReadX 12904 80919 912 912 NT_STATUS_OK
ReadX 12904 81831 1980 1980 NT_STATUS_OK
ReadX 12904 83811 2256 2256 NT_STATUS_OK
ReadX 12904 86067 400 400 NT_STATUS_OK
ReadX 12904 86467 252 252 NT_STATUS_OK
ReadX 12904 86719 42 42 NT_STATUS_OK
ReadX 12904 86761 725 725 NT_STATUS_OK
ReadX 12904 2009 512 512 NT_STATUS_OK
ReadX 12904 3895 9 9 NT_STATUS_OK
ReadX 12904 3781 46 46 NT_STATUS_OK
ReadX 12904 4059 92 92 NT_STATUS_OK
ReadX 12904 3781 92 92 NT_STATUS_OK
ReadX 12904 3986 184 184 NT_STATUS_OK
ReadX 12904 3987 16384 16384 NT_STATUS_OK
ReadX 12904 3902 16384 16384 NT_STATUS_OK
ReadX 12904 3781 10240 10240 NT_STATUS_OK
ReadX 12904 3821 16384 16384 NT_STATUS_OK
ReadX 12904 3891 935 935 NT_STATUS_OK
ReadX 12904 4060 10240 10240 NT_STATUS_OK
ReadX 12904 4059 184 184 NT_STATUS_OK
ReadX 12904 256 184 184 NT_STATUS_OK
ReadX 12904 256 1026 1026 NT_STATUS_OK
ReadX 12904 3901 326 326 NT_STATUS_OK
ReadX 12904 3899 652 652 NT_STATUS_OK
ReadX 12904 256 2 2 NT_STATUS_OK
ReadX 12904 258 4948 4948 NT_STATUS_OK
Close 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12922 NT_STATUS_OK
WriteX 12922 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12922 258 NT_STATUS_OK
WriteX 12922 0 65536 65536 NT_STATUS_OK
WriteX 12922 65536 65536 65536 NT_STATUS_OK
WriteX 12922 131072 65536 65536 NT_STATUS_OK
WriteX 12922 196608 65536 65536 NT_STATUS_OK
WriteX 12922 262144 65536 65536 NT_STATUS_OK
WriteX 12922 327680 65536 65536 NT_STATUS_OK
WriteX 12922 393216 65536 65536 NT_STATUS_OK
WriteX 12922 458752 65536 65536 NT_STATUS_OK
WriteX 12922 524288 65536 65536 NT_STATUS_OK
WriteX 12922 589824 35257 35257 NT_STATUS_OK
Close 12922 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12927 NT_STATUS_OK
WriteX 12927 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
WriteX 12927 0 65536 65536 NT_STATUS_OK
WriteX 12927 65536 65536 65536 NT_STATUS_OK
WriteX 12927 131072 65536 65536 NT_STATUS_OK
WriteX 12927 196608 65536 65536 NT_STATUS_OK
WriteX 12927 262144 65536 65536 NT_STATUS_OK
WriteX 12927 327680 65536 65536 NT_STATUS_OK
WriteX 12927 393216 65536 65536 NT_STATUS_OK
WriteX 12927 458752 65536 65536 NT_STATUS_OK
WriteX 12927 524288 65536 65536 NT_STATUS_OK
WriteX 12927 589824 57598 57598 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12929 NT_STATUS_OK
WriteX 12929 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 12543 12543 NT_STATUS_OK
Flush 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12935 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
ReadX 12935 1938 24 24 NT_STATUS_OK
ReadX 12935 1920 276 276 NT_STATUS_OK
ReadX 12935 1918 14 14 NT_STATUS_OK
ReadX 12935 1918 7 7 NT_STATUS_OK
ReadX 12935 1919 12 12 NT_STATUS_OK
ReadX 12935 1919 8 8 NT_STATUS_OK
ReadX 12935 1917 15 15 NT_STATUS_OK
ReadX 12935 0 16 16 NT_STATUS_OK
ReadX 12935 16 2048 2048 NT_STATUS_OK
ReadX 12935 2064 2048 2048 NT_STATUS_OK
ReadX 12935 257 2048 2048 NT_STATUS_OK
ReadX 12935 385 2048 2048 NT_STATUS_OK
ReadX 12935 513 2048 2048 NT_STATUS_OK
ReadX 12935 641 2048 2048 NT_STATUS_OK
ReadX 12935 769 2048 2048 NT_STATUS_OK
ReadX 12935 897 2048 2048 NT_STATUS_OK
ReadX 12935 1025 2048 2048 NT_STATUS_OK
ReadX 12935 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12940 NT_STATUS_OK
WriteX 12940 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 258 NT_STATUS_OK
WriteX 12940 0 11588 11588 NT_STATUS_OK
Flush 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12941 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
Close 12935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12945 NT_STATUS_OK
WriteX 12945 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12945 258 NT_STATUS_OK
WriteX 12945 0 11615 11615 NT_STATUS_OK
Flush 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12954 NT_STATUS_OK
WriteX 12954 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12954 258 NT_STATUS_OK
WriteX 12954 0 65536 65536 NT_STATUS_OK
WriteX 12954 65536 16050 16050 NT_STATUS_OK
Close 12954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12934 1939 64 64 NT_STATUS_OK
ReadX 12934 128 248 248 NT_STATUS_OK
ReadX 12934 128 568 568 NT_STATUS_OK
ReadX 12934 3872 1536 1536 NT_STATUS_OK
ReadX 12934 3456 2560 2560 NT_STATUS_OK
ReadX 12934 3136 512 512 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
ReadX 12934 3264 3072 3072 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 3616 4096 4096 NT_STATUS_OK
ReadX 12934 1939 64 64 NT_STATUS_OK
ReadX 12934 128 248 248 NT_STATUS_OK
ReadX 12934 128 608 608 NT_STATUS_OK
ReadX 12934 2858 1024 1024 NT_STATUS_OK
ReadX 12934 2810 4096 4096 NT_STATUS_OK
ReadX 12934 2826 4096 4096 NT_STATUS_OK
ReadX 12934 2580 2048 2048 NT_STATUS_OK
ReadX 12934 2800 2560 2560 NT_STATUS_OK
ReadX 12934 2100 4096 4096 NT_STATUS_OK
ReadX 12934 2084 4096 4096 NT_STATUS_OK
ReadX 12934 868 4096 4096 NT_STATUS_OK
ReadX 12934 2324 4096 4096 NT_STATUS_OK
ReadX 12934 884 4096 4096 NT_STATUS_OK
ReadX 12934 2604 1024 1024 NT_STATUS_OK
ReadX 12934 580 4096 4096 NT_STATUS_OK
ReadX 12934 596 4096 4096 NT_STATUS_OK
ReadX 12934 2752 4096 4096 NT_STATUS_OK
ReadX 12934 2842 1024 1024 NT_STATUS_OK
ReadX 12934 660 4096 4096 NT_STATUS_OK
ReadX 12934 2720 4096 4096 NT_STATUS_OK
ReadX 12934 2736 4096 4096 NT_STATUS_OK
ReadX 12934 628 4096 4096 NT_STATUS_OK
ReadX 12934 2704 4096 4096 NT_STATUS_OK
ReadX 12934 1556 4096 4096 NT_STATUS_OK
ReadX 12934 576 4096 4096 NT_STATUS_OK
ReadX 12934 3168 1536 1536 NT_STATUS_OK
ReadX 12934 832 4096 4096 NT_STATUS_OK
ReadX 12934 1088 4096 4096 NT_STATUS_OK
ReadX 12934 1344 4096 4096 NT_STATUS_OK
ReadX 12934 1600 4096 4096 NT_STATUS_OK
ReadX 12934 1856 4096 4096 NT_STATUS_OK
ReadX 12934 2112 4096 4096 NT_STATUS_OK
ReadX 12934 1892 4096 4096 NT_STATUS_OK
ReadX 12934 820 4096 4096 NT_STATUS_OK
ReadX 12934 788 4096 4096 NT_STATUS_OK
ReadX 12934 1604 4096 4096 NT_STATUS_OK
ReadX 12934 3648 4096 4096 NT_STATUS_OK
ReadX 12934 2608 4096 4096 NT_STATUS_OK
ReadX 12934 548 4096 4096 NT_STATUS_OK
ReadX 12934 740 4096 4096 NT_STATUS_OK
ReadX 12934 1344 4096 4096 NT_STATUS_OK
ReadX 12934 3392 4096 4096 NT_STATUS_OK
ReadX 12934 3904 4096 4096 NT_STATUS_OK
ReadX 12934 644 4096 4096 NT_STATUS_OK
ReadX 12934 676 4096 4096 NT_STATUS_OK
ReadX 12934 2688 4096 4096 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 900 4096 4096 NT_STATUS_OK
ReadX 12934 1908 4096 4096 NT_STATUS_OK
ReadX 12934 852 4096 4096 NT_STATUS_OK
ReadX 12934 724 4096 4096 NT_STATUS_OK
ReadX 12934 2292 4096 4096 NT_STATUS_OK
ReadX 12934 612 4096 4096 NT_STATUS_OK
ReadX 12934 388 4096 4096 NT_STATUS_OK
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 500 4096 4096 NT_STATUS_OK
ReadX 12934 356 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 576 4096 4096 NT_STATUS_OK
ReadX 12934 340 4096 4096 NT_STATUS_OK
ReadX 12934 420 4096 4096 NT_STATUS_OK
ReadX 12934 1600 4096 4096 NT_STATUS_OK
ReadX 12934 404 4096 4096 NT_STATUS_OK
ReadX 12934 1428 4096 4096 NT_STATUS_OK
ReadX 12934 2656 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 452 4096 4096 NT_STATUS_OK
ReadX 12934 692 4096 4096 NT_STATUS_OK
ReadX 12934 564 4096 4096 NT_STATUS_OK
ReadX 12934 372 4096 4096 NT_STATUS_OK
ReadX 12934 468 4096 4096 NT_STATUS_OK
ReadX 12934 484 4096 4096 NT_STATUS_OK
ReadX 12934 1088 4096 4096 NT_STATUS_OK
ReadX 12934 1924 4096 4096 NT_STATUS_OK
ReadX 12934 2768 4096 4096 NT_STATUS_OK
ReadX 12934 832 4096 4096 NT_STATUS_OK
ReadX 12934 836 4096 4096 NT_STATUS_OK
ReadX 12934 1856 4096 4096 NT_STATUS_OK
ReadX 12934 2640 4096 4096 NT_STATUS_OK
ReadX 12934 436 4096 4096 NT_STATUS_OK
ReadX 12934 1828 4096 4096 NT_STATUS_OK
ReadX 12934 804 4096 4096 NT_STATUS_OK
ReadX 12934 1860 4096 4096 NT_STATUS_OK
ReadX 12934 1812 4096 4096 NT_STATUS_OK
ReadX 12934 756 4096 4096 NT_STATUS_OK
ReadX 12934 1636 4096 4096 NT_STATUS_OK
ReadX 12934 772 4096 4096 NT_STATUS_OK
ReadX 12934 2036 4096 4096 NT_STATUS_OK
ReadX 12934 1220 4096 4096 NT_STATUS_OK
ReadX 12934 1652 4096 4096 NT_STATUS_OK
ReadX 12934 2588 4096 4096 NT_STATUS_OK
ReadX 12934 916 4096 4096 NT_STATUS_OK
ReadX 12934 260 4096 4096 NT_STATUS_OK
ReadX 12934 932 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 308 4096 4096 NT_STATUS_OK
ReadX 12934 292 4096 4096 NT_STATUS_OK
ReadX 12934 1140 4096 4096 NT_STATUS_OK
ReadX 12934 276 4096 4096 NT_STATUS_OK
ReadX 12934 2020 4096 4096 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
ReadX 12934 516 4096 4096 NT_STATUS_OK
ReadX 12934 1844 4096 4096 NT_STATUS_OK
ReadX 12934 1124 4096 4096 NT_STATUS_OK
ReadX 12934 3136 4096 4096 NT_STATUS_OK
ReadX 12934 324 4096 4096 NT_STATUS_OK
ReadX 12934 1156 4096 4096 NT_STATUS_OK
ReadX 12934 1172 4096 4096 NT_STATUS_OK
ReadX 12934 2112 4096 4096 NT_STATUS_OK
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 964 4096 4096 NT_STATUS_OK
ReadX 12934 980 4096 4096 NT_STATUS_OK
ReadX 12934 1012 4096 4096 NT_STATUS_OK
ReadX 12934 532 4096 4096 NT_STATUS_OK
ReadX 12934 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12934 1620 4096 4096 NT_STATUS_OK
ReadX 12934 1604 4096 4096 NT_STATUS_OK
ReadX 12934 2116 4096 4096 NT_STATUS_OK
ReadX 12934 2132 4096 4096 NT_STATUS_OK
ReadX 12934 2148 4096 4096 NT_STATUS_OK
ReadX 12934 2276 4096 4096 NT_STATUS_OK
ReadX 12934 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12956 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12959 NT_STATUS_OK
QUERY_FILE_INFORMATION 12914 1004 NT_STATUS_OK
Close 12914 NT_STATUS_OK
WriteX 12959 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12959 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1004 NT_STATUS_OK
Close 12916 NT_STATUS_OK
WriteX 12959 0 65536 65536 NT_STATUS_OK
WriteX 12959 65536 64850 64850 NT_STATUS_OK
Close 12959 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12961 NT_STATUS_OK
WriteX 12961 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
ReadX 12934 2068 4096 4096 NT_STATUS_OK
ReadX 12934 1588 4096 4096 NT_STATUS_OK
ReadX 12934 1572 4096 4096 NT_STATUS_OK
WriteX 12961 0 18630 18630 NT_STATUS_OK
Flush 12961 NT_STATUS_OK
Close 12961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 612 4096 4096 NT_STATUS_OK
ReadX 12934 564 4096 4096 NT_STATUS_OK
ReadX 12934 1876 4096 4096 NT_STATUS_OK
ReadX 12934 628 4096 4096 NT_STATUS_OK
ReadX 12934 740 4096 4096 NT_STATUS_OK
ReadX 12934 724 4096 4096 NT_STATUS_OK
ReadX 12934 644 4096 4096 NT_STATUS_OK
ReadX 12934 2324 4096 4096 NT_STATUS_OK
ReadX 12934 660 4096 4096 NT_STATUS_OK
ReadX 12934 852 4096 4096 NT_STATUS_OK
ReadX 12934 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 580 4096 4096 NT_STATUS_OK
ReadX 12934 3136 512 512 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 61440 4096 4096 NT_STATUS_OK
ReadX 12966 126976 4096 4096 NT_STATUS_OK
WriteX 12966 0 65536 65536 NT_STATUS_OK
WriteX 12966 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 61440 4096 4096 NT_STATUS_OK
ReadX 12967 126976 4096 4096 NT_STATUS_OK
ReadX 12967 192512 4096 4096 NT_STATUS_OK
ReadX 12967 258048 4096 4096 NT_STATUS_OK
WriteX 12967 0 65536 65536 NT_STATUS_OK
WriteX 12967 65536 65536 65536 NT_STATUS_OK
WriteX 12967 131072 65536 65536 NT_STATUS_OK
WriteX 12967 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 61440 4096 4096 NT_STATUS_OK
ReadX 12968 126976 4096 4096 NT_STATUS_OK
ReadX 12968 192512 4096 4096 NT_STATUS_OK
ReadX 12968 258048 4096 4096 NT_STATUS_OK
ReadX 12968 323584 4096 4096 NT_STATUS_OK
ReadX 12968 389120 4096 4096 NT_STATUS_OK
ReadX 12968 454656 4096 4096 NT_STATUS_OK
ReadX 12968 520192 4096 4096 NT_STATUS_OK
WriteX 12968 0 65536 65536 NT_STATUS_OK
WriteX 12968 65536 65536 65536 NT_STATUS_OK
WriteX 12968 131072 65536 65536 NT_STATUS_OK
WriteX 12968 196608 65536 65536 NT_STATUS_OK
WriteX 12968 262144 65536 65536 NT_STATUS_OK
WriteX 12968 327680 65536 65536 NT_STATUS_OK
WriteX 12968 393216 65536 65536 NT_STATUS_OK
WriteX 12968 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12971 NT_STATUS_OK
WriteX 12971 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12971 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12969 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12976 NT_STATUS_OK
WriteX 12976 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 258 NT_STATUS_OK
WriteX 12976 0 62591 62591 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12981 NT_STATUS_OK
WriteX 12981 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12981 258 NT_STATUS_OK
WriteX 12981 0 10845 10845 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12986 NT_STATUS_OK
WriteX 12986 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12986 258 NT_STATUS_OK
WriteX 12986 0 30118 30118 NT_STATUS_OK
Close 12986 NT_STATUS_OK
WriteX 12969 0 4096 4096 NT_STATUS_OK
WriteX 12971 0 64 64 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 61440 61440 NT_STATUS_OK
ReadX 12988 61440 4096 4096 NT_STATUS_OK
ReadX 12988 65536 61440 61440 NT_STATUS_OK
ReadX 12988 126976 4096 4096 NT_STATUS_OK
ReadX 12988 131072 61440 61440 NT_STATUS_OK
ReadX 12988 192512 4096 4096 NT_STATUS_OK
ReadX 12988 196608 61440 61440 NT_STATUS_OK
ReadX 12988 258048 4096 4096 NT_STATUS_OK
ReadX 12988 262144 61440 61440 NT_STATUS_OK
ReadX 12988 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 61440 61440 NT_STATUS_OK
ReadX 12989 61440 4096 4096 NT_STATUS_OK
ReadX 12989 65536 61440 61440 NT_STATUS_OK
ReadX 12989 126976 4096 4096 NT_STATUS_OK
ReadX 12989 131072 61440 61440 NT_STATUS_OK
ReadX 12989 192512 4096 4096 NT_STATUS_OK
ReadX 12989 196608 61440 61440 NT_STATUS_OK
ReadX 12989 258048 4096 4096 NT_STATUS_OK
ReadX 12989 262144 61440 61440 NT_STATUS_OK
ReadX 12989 323584 4096 4096 NT_STATUS_OK
ReadX 12989 327680 61440 61440 NT_STATUS_OK
ReadX 12989 389120 4096 4096 NT_STATUS_OK
ReadX 12989 393216 61440 61440 NT_STATUS_OK
ReadX 12989 454656 4096 4096 NT_STATUS_OK
ReadX 12989 458752 61440 61440 NT_STATUS_OK
ReadX 12989 520192 4096 4096 NT_STATUS_OK
ReadX 12989 524288 61440 61440 NT_STATUS_OK
ReadX 12989 585728 4096 4096 NT_STATUS_OK
ReadX 12989 589824 61440 61440 NT_STATUS_OK
ReadX 12989 651264 4096 4096 NT_STATUS_OK
ReadX 12989 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 61440 61440 NT_STATUS_OK
ReadX 12990 61440 4096 4096 NT_STATUS_OK
ReadX 12990 65536 61440 61440 NT_STATUS_OK
ReadX 12990 126976 4096 4096 NT_STATUS_OK
ReadX 12990 131072 61440 61440 NT_STATUS_OK
ReadX 12990 192512 4096 4096 NT_STATUS_OK
ReadX 12990 196608 61440 61440 NT_STATUS_OK
ReadX 12990 258048 4096 4096 NT_STATUS_OK
ReadX 12990 262144 61440 61440 NT_STATUS_OK
ReadX 12990 323584 4096 4096 NT_STATUS_OK
ReadX 12990 327680 61440 61440 NT_STATUS_OK
ReadX 12990 389120 4096 4096 NT_STATUS_OK
ReadX 12990 393216 61440 61440 NT_STATUS_OK
ReadX 12990 454656 4096 4096 NT_STATUS_OK
ReadX 12990 458752 61440 61440 NT_STATUS_OK
ReadX 12990 520192 4096 4096 NT_STATUS_OK
ReadX 12990 524288 61440 61440 NT_STATUS_OK
ReadX 12990 585728 4096 4096 NT_STATUS_OK
ReadX 12990 589824 61440 61440 NT_STATUS_OK
ReadX 12990 651264 4096 4096 NT_STATUS_OK
ReadX 12990 655360 61440 61440 NT_STATUS_OK
ReadX 12990 716800 4096 4096 NT_STATUS_OK
ReadX 12990 720896 61440 61440 NT_STATUS_OK
ReadX 12990 782336 4096 4096 NT_STATUS_OK
ReadX 12990 786432 61440 61440 NT_STATUS_OK
ReadX 12990 847872 4096 4096 NT_STATUS_OK
ReadX 12990 851968 61440 61440 NT_STATUS_OK
ReadX 12990 913408 4096 4096 NT_STATUS_OK
ReadX 12990 917504 61440 61440 NT_STATUS_OK
ReadX 12990 978944 4096 4096 NT_STATUS_OK
ReadX 12990 983040 61440 61440 NT_STATUS_OK
ReadX 12990 1044480 4096 4096 NT_STATUS_OK
ReadX 12990 1048576 61440 61440 NT_STATUS_OK
ReadX 12990 1110016 4096 4096 NT_STATUS_OK
ReadX 12990 1114112 61440 61440 NT_STATUS_OK
ReadX 12990 1175552 4096 4096 NT_STATUS_OK
ReadX 12990 1179648 61440 61440 NT_STATUS_OK
ReadX 12990 1241088 4096 4096 NT_STATUS_OK
ReadX 12990 1245184 61440 61440 NT_STATUS_OK
ReadX 12990 1306624 4096 4096 NT_STATUS_OK
ReadX 12990 1310720 61440 61440 NT_STATUS_OK
ReadX 12990 1372160 4096 4096 NT_STATUS_OK
ReadX 12990 1376256 61440 61440 NT_STATUS_OK
ReadX 12990 1437696 4096 4096 NT_STATUS_OK
ReadX 12990 1441792 61440 61440 NT_STATUS_OK
ReadX 12990 1503232 4096 4096 NT_STATUS_OK
ReadX 12990 1507328 61440 61440 NT_STATUS_OK
ReadX 12990 1568768 4096 4096 NT_STATUS_OK
ReadX 12990 1572864 61440 61440 NT_STATUS_OK
ReadX 12990 1634304 4096 4096 NT_STATUS_OK
ReadX 12990 1638400 61440 61440 NT_STATUS_OK
ReadX 12990 1699840 4096 4096 NT_STATUS_OK
ReadX 12990 1703936 61440 61440 NT_STATUS_OK
ReadX 12990 1765376 4096 4096 NT_STATUS_OK
ReadX 12990 1769472 61440 61440 NT_STATUS_OK
ReadX 12990 1830912 4096 4096 NT_STATUS_OK
ReadX 12990 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
ReadX 12995 4096 4096 4096 NT_STATUS_OK
ReadX 12995 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12993 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12999 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13002 NT_STATUS_OK
ReadX 13002 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 8192 8192 NT_STATUS_OK
ReadX 13003 8192 8192 8192 NT_STATUS_OK
ReadX 13003 16384 8192 8192 NT_STATUS_OK
ReadX 13003 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13008 NT_STATUS_OK
WriteX 13008 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 258 NT_STATUS_OK
WriteX 13008 0 10438 10438 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13012 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13014 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 4096 4096 NT_STATUS_OK
ReadX 13017 4096 4096 4096 NT_STATUS_OK
ReadX 13017 8192 4096 4096 NT_STATUS_OK
ReadX 13017 12288 8192 8192 NT_STATUS_OK
ReadX 13017 20480 8192 8192 NT_STATUS_OK
ReadX 13017 28672 8192 8192 NT_STATUS_OK
ReadX 13017 36864 8192 8192 NT_STATUS_OK
ReadX 13017 45056 8192 8192 NT_STATUS_OK
ReadX 13017 53248 8192 8192 NT_STATUS_OK
ReadX 13017 61440 8192 8192 NT_STATUS_OK
ReadX 13017 69632 8192 8192 NT_STATUS_OK
ReadX 13017 77824 8192 8192 NT_STATUS_OK
ReadX 13017 86016 8192 8192 NT_STATUS_OK
ReadX 13017 94208 8192 8192 NT_STATUS_OK
ReadX 13017 102400 8192 8192 NT_STATUS_OK
ReadX 13017 110592 8192 8192 NT_STATUS_OK
ReadX 13017 118784 8192 8192 NT_STATUS_OK
ReadX 13017 126976 8192 8192 NT_STATUS_OK
ReadX 13017 135168 8192 8192 NT_STATUS_OK
ReadX 13017 143360 8192 8192 NT_STATUS_OK
ReadX 13017 151552 8192 8192 NT_STATUS_OK
ReadX 13017 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13019 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
WriteX 13022 0 28489 28489 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13025 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 8192 8192 NT_STATUS_OK
ReadX 13029 8192 8192 8192 NT_STATUS_OK
ReadX 13029 16384 8192 8192 NT_STATUS_OK
ReadX 13029 24576 8192 8192 NT_STATUS_OK
ReadX 13029 32768 16384 16384 NT_STATUS_OK
ReadX 13029 49152 8192 8192 NT_STATUS_OK
ReadX 13029 57344 8192 8192 NT_STATUS_OK
ReadX 13029 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13031 NT_STATUS_OK
Close 13031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13034 NT_STATUS_OK
WriteX 13034 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13034 258 NT_STATUS_OK
WriteX 13034 0 29253 29253 NT_STATUS_OK
Close 13034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13041 NT_STATUS_OK
WriteX 13041 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 258 NT_STATUS_OK
WriteX 13041 0 30183 30183 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13044 NT_STATUS_OK
WriteX 13044 0 510 510 NT_STATUS_OK
WriteX 13044 510 512 512 NT_STATUS_OK
WriteX 13044 1022 510 510 NT_STATUS_OK
WriteX 13044 1532 510 510 NT_STATUS_OK
WriteX 13044 2042 168 168 NT_STATUS_OK
Close 13044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13045 NT_STATUS_OK
Close 13045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 61440 4096 4096 NT_STATUS_OK
ReadX 13048 126976 4096 4096 NT_STATUS_OK
WriteX 13048 0 65536 65536 NT_STATUS_OK
WriteX 13048 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 61440 4096 4096 NT_STATUS_OK
ReadX 13049 126976 4096 4096 NT_STATUS_OK
ReadX 13049 192512 4096 4096 NT_STATUS_OK
ReadX 13049 258048 4096 4096 NT_STATUS_OK
WriteX 13049 0 65536 65536 NT_STATUS_OK
WriteX 13049 65536 65536 65536 NT_STATUS_OK
WriteX 13049 131072 65536 65536 NT_STATUS_OK
WriteX 13049 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 61440 4096 4096 NT_STATUS_OK
ReadX 13050 126976 4096 4096 NT_STATUS_OK
ReadX 13050 192512 4096 4096 NT_STATUS_OK
ReadX 13050 258048 4096 4096 NT_STATUS_OK
ReadX 13050 323584 4096 4096 NT_STATUS_OK
ReadX 13050 389120 4096 4096 NT_STATUS_OK
ReadX 13050 454656 4096 4096 NT_STATUS_OK
ReadX 13050 520192 4096 4096 NT_STATUS_OK
WriteX 13050 0 65536 65536 NT_STATUS_OK
WriteX 13050 65536 65536 65536 NT_STATUS_OK
WriteX 13050 131072 65536 65536 NT_STATUS_OK
WriteX 13050 196608 65536 65536 NT_STATUS_OK
WriteX 13050 262144 65536 65536 NT_STATUS_OK
WriteX 13050 327680 65536 65536 NT_STATUS_OK
WriteX 13050 393216 65536 65536 NT_STATUS_OK
WriteX 13050 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13051 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Close 13050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13062 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13066 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13069 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13090 NT_STATUS_OK
Close 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13105 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13119 NT_STATUS_OK
WriteX 13119 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13119 0 65536 65536 NT_STATUS_OK
WriteX 13119 65536 65536 65536 NT_STATUS_OK
WriteX 13119 131072 65536 65536 NT_STATUS_OK
WriteX 13119 196608 65536 65536 NT_STATUS_OK
WriteX 13119 262144 26634 26634 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
ReadX 13127 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13160 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13175 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13179 NT_STATUS_OK
Close 13179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13194 NT_STATUS_OK
Close 13194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
Close 13206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13218 NT_STATUS_OK
Close 13218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
Close 13221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13251 0 4096 4096 NT_STATUS_OK
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
ReadX 13253 4096 4096 4096 NT_STATUS_OK
ReadX 13253 8192 4096 4096 NT_STATUS_OK
ReadX 13253 12288 4096 4096 NT_STATUS_OK
ReadX 13253 16384 4096 4096 NT_STATUS_OK
ReadX 13253 20480 4096 4096 NT_STATUS_OK
ReadX 13253 24576 4096 4096 NT_STATUS_OK
ReadX 13253 28672 4096 4096 NT_STATUS_OK
ReadX 13253 32768 4096 4096 NT_STATUS_OK
ReadX 13253 36864 4096 4096 NT_STATUS_OK
ReadX 13253 40960 4096 4096 NT_STATUS_OK
ReadX 13253 45056 4096 4096 NT_STATUS_OK
ReadX 13253 49152 4096 4096 NT_STATUS_OK
ReadX 13253 53248 4096 4096 NT_STATUS_OK
ReadX 13253 57344 4096 4096 NT_STATUS_OK
ReadX 13253 61440 4096 4096 NT_STATUS_OK
ReadX 13253 65536 4096 4096 NT_STATUS_OK
ReadX 13253 69632 4096 4096 NT_STATUS_OK
ReadX 13253 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13253 1004 NT_STATUS_OK
WriteX 13253 0 4096 4096 NT_STATUS_OK
Close 13253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13254 NT_STATUS_OK
SET_FILE_INFORMATION 13254 1004 NT_STATUS_OK
Close 13254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13259 NT_STATUS_OK
WriteX 13259 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13259 258 NT_STATUS_OK
WriteX 13259 0 65536 65536 NT_STATUS_OK
WriteX 13259 65536 19979 19979 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
QUERY_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
SET_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13268 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13271 NT_STATUS_OK
WriteX 13271 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13271 258 NT_STATUS_OK
WriteX 13271 0 65536 65536 NT_STATUS_OK
WriteX 13271 65536 17654 17654 NT_STATUS_OK
Close 13271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 4096 4096 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 1004 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
SET_FILE_INFORMATION 13272 1004 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13273 NT_STATUS_OK
SET_FILE_INFORMATION 13273 1004 NT_STATUS_OK
Close 13273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13275 NT_STATUS_OK
Close 13275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
ReadX 13277 4096 4096 4096 NT_STATUS_OK
ReadX 13277 8192 4096 4096 NT_STATUS_OK
ReadX 13277 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13277 16384 4096 4096 NT_STATUS_OK
ReadX 13277 20480 4096 4096 NT_STATUS_OK
ReadX 13277 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
Close 13279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
WriteX 13286 0 65536 65536 NT_STATUS_OK
WriteX 13286 65536 19490 19490 NT_STATUS_OK
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
QUERY_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
SET_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13288 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13292 0 4096 4096 NT_STATUS_OK
Close 13292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
ReadX 13294 4096 4096 4096 NT_STATUS_OK
ReadX 13294 8192 4096 4096 NT_STATUS_OK
ReadX 13294 12288 4096 4096 NT_STATUS_OK
ReadX 13294 16384 4096 4096 NT_STATUS_OK
ReadX 13294 20480 4096 4096 NT_STATUS_OK
ReadX 13294 24576 4096 4096 NT_STATUS_OK
ReadX 13294 28672 4096 4096 NT_STATUS_OK
ReadX 13294 32768 4096 4096 NT_STATUS_OK
ReadX 13294 36864 4096 4096 NT_STATUS_OK
ReadX 13294 40960 4096 4096 NT_STATUS_OK
ReadX 13294 45056 4096 4096 NT_STATUS_OK
ReadX 13294 49152 4096 4096 NT_STATUS_OK
ReadX 13294 53248 4096 4096 NT_STATUS_OK
ReadX 13294 57344 4096 4096 NT_STATUS_OK
ReadX 13294 61440 4096 4096 NT_STATUS_OK
ReadX 13294 65536 4096 4096 NT_STATUS_OK
ReadX 13294 69632 4096 4096 NT_STATUS_OK
ReadX 13294 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13294 1004 NT_STATUS_OK
WriteX 13294 0 4096 4096 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13295 NT_STATUS_OK
SET_FILE_INFORMATION 13295 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13297 NT_STATUS_OK
Close 13297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13300 NT_STATUS_OK
WriteX 13300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 258 NT_STATUS_OK
WriteX 13300 0 65536 65536 NT_STATUS_OK
WriteX 13300 65536 8866 8866 NT_STATUS_OK
Close 13300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
WriteX 13301 0 4096 4096 NT_STATUS_OK
Flush 13301 NT_STATUS_OK
SET_FILE_INFORMATION 13301 1004 NT_STATUS_OK
WriteX 13301 0 4096 4096 NT_STATUS_OK
Flush 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13305 1004 NT_STATUS_OK
WriteX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13308 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13311 NT_STATUS_OK
WriteX 13311 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 258 NT_STATUS_OK
WriteX 13311 0 65536 65536 NT_STATUS_OK
WriteX 13311 65536 9298 9298 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
SET_FILE_INFORMATION 13312 1004 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13313 NT_STATUS_OK
SET_FILE_INFORMATION 13313 1004 NT_STATUS_OK
Close 13313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13318 0 4096 4096 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13319 4096 4096 4096 NT_STATUS_OK
ReadX 13319 8192 4096 4096 NT_STATUS_OK
ReadX 13319 12288 4096 4096 NT_STATUS_OK
ReadX 13319 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13322 1004 NT_STATUS_OK
WriteX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13323 NT_STATUS_OK
Close 13323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13328 NT_STATUS_OK
WriteX 13328 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 258 NT_STATUS_OK
WriteX 13328 0 65536 65536 NT_STATUS_OK
WriteX 13328 65536 11540 11540 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
SET_FILE_INFORMATION 13329 1004 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13330 NT_STATUS_OK
SET_FILE_INFORMATION 13330 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
WriteX 13334 0 65536 65536 NT_STATUS_OK
WriteX 13334 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 61440 4096 4096 NT_STATUS_OK
ReadX 13335 126976 4096 4096 NT_STATUS_OK
ReadX 13335 192512 4096 4096 NT_STATUS_OK
ReadX 13335 258048 4096 4096 NT_STATUS_OK
WriteX 13335 0 65536 65536 NT_STATUS_OK
WriteX 13335 65536 65536 65536 NT_STATUS_OK
WriteX 13335 131072 65536 65536 NT_STATUS_OK
WriteX 13335 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 61440 4096 4096 NT_STATUS_OK
ReadX 13336 126976 4096 4096 NT_STATUS_OK
ReadX 13336 192512 4096 4096 NT_STATUS_OK
ReadX 13336 258048 4096 4096 NT_STATUS_OK
ReadX 13336 323584 4096 4096 NT_STATUS_OK
ReadX 13336 389120 4096 4096 NT_STATUS_OK
ReadX 13336 454656 4096 4096 NT_STATUS_OK
ReadX 13336 520192 4096 4096 NT_STATUS_OK
WriteX 13336 0 65536 65536 NT_STATUS_OK
WriteX 13336 65536 65536 65536 NT_STATUS_OK
WriteX 13336 131072 65536 65536 NT_STATUS_OK
WriteX 13336 196608 65536 65536 NT_STATUS_OK
WriteX 13336 262144 65536 65536 NT_STATUS_OK
WriteX 13336 327680 65536 65536 NT_STATUS_OK
WriteX 13336 393216 65536 65536 NT_STATUS_OK
WriteX 13336 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
ReadX 13337 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13338 NT_STATUS_OK
WriteX 13338 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
WriteX 13338 0 53 53 NT_STATUS_OK
Close 13338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13339 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13337 8192 4096 4096 NT_STATUS_OK
ReadX 13337 12288 4096 4096 NT_STATUS_OK
WriteX 13341 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 258 NT_STATUS_OK
ReadX 13337 16384 4096 4096 NT_STATUS_OK
ReadX 13337 20480 4096 4096 NT_STATUS_OK
WriteX 13341 0 15360 15360 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13342 1004 NT_STATUS_OK
WriteX 13342 0 4096 4096 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13345 4096 4096 4096 NT_STATUS_OK
ReadX 13345 8192 4096 4096 NT_STATUS_OK
ReadX 13345 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
ReadX 13348 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
ReadX 13349 4096 4096 4096 NT_STATUS_OK
ReadX 13349 8192 4096 4096 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13350 NT_STATUS_OK
WriteX 13350 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13350 258 NT_STATUS_OK
WriteX 13350 0 15360 15360 NT_STATUS_OK
Close 13350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13352 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13355 NT_STATUS_OK
SET_FILE_INFORMATION 13355 1004 NT_STATUS_OK
Close 13355 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
ReadX 13358 4096 4096 4096 NT_STATUS_OK
ReadX 13358 8192 4096 4096 NT_STATUS_OK
ReadX 13358 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13360 NT_STATUS_OK
WriteX 13360 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 258 NT_STATUS_OK
WriteX 13360 0 53 53 NT_STATUS_OK
Close 13360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13361 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13359 4096 4096 4096 NT_STATUS_OK
ReadX 13359 8192 4096 4096 NT_STATUS_OK
ReadX 13359 12288 4096 4096 NT_STATUS_OK
WriteX 13363 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13363 258 NT_STATUS_OK
WriteX 13363 0 12006 12006 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13364 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13364 1004 NT_STATUS_OK
WriteX 13364 0 4096 4096 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
ReadX 13367 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13370 NT_STATUS_OK
WriteX 13370 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13370 258 NT_STATUS_OK
WriteX 13370 0 11991 11991 NT_STATUS_OK
Close 13370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13375 NT_STATUS_OK
SET_FILE_INFORMATION 13375 1004 NT_STATUS_OK
WriteX 13358 0 19054 19054 NT_STATUS_OK
Close 13375 NT_STATUS_OK
WriteX 13371 0 4096 4096 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13376 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13378 NT_STATUS_OK
ReadX 13378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
ReadX 13378 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
WriteX 13378 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
Close 13354 NT_STATUS_OK
WriteX 13378 0 12288 12288 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 61440 61440 NT_STATUS_OK
ReadX 13385 61440 4096 4096 NT_STATUS_OK
ReadX 13385 65536 61440 61440 NT_STATUS_OK
ReadX 13385 126976 4096 4096 NT_STATUS_OK
ReadX 13385 131072 61440 61440 NT_STATUS_OK
ReadX 13385 192512 4096 4096 NT_STATUS_OK
ReadX 13385 196608 61440 61440 NT_STATUS_OK
ReadX 13385 258048 4096 4096 NT_STATUS_OK
ReadX 13385 262144 61440 61440 NT_STATUS_OK
ReadX 13385 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 61440 61440 NT_STATUS_OK
ReadX 13386 61440 4096 4096 NT_STATUS_OK
ReadX 13386 65536 61440 61440 NT_STATUS_OK
ReadX 13386 126976 4096 4096 NT_STATUS_OK
ReadX 13386 131072 61440 61440 NT_STATUS_OK
ReadX 13386 192512 4096 4096 NT_STATUS_OK
ReadX 13386 196608 61440 61440 NT_STATUS_OK
ReadX 13386 258048 4096 4096 NT_STATUS_OK
ReadX 13386 262144 61440 61440 NT_STATUS_OK
ReadX 13386 323584 4096 4096 NT_STATUS_OK
ReadX 13386 327680 61440 61440 NT_STATUS_OK
ReadX 13386 389120 4096 4096 NT_STATUS_OK
ReadX 13386 393216 61440 61440 NT_STATUS_OK
ReadX 13386 454656 4096 4096 NT_STATUS_OK
ReadX 13386 458752 61440 61440 NT_STATUS_OK
ReadX 13386 520192 4096 4096 NT_STATUS_OK
ReadX 13386 524288 61440 61440 NT_STATUS_OK
ReadX 13386 585728 4096 4096 NT_STATUS_OK
ReadX 13386 589824 61440 61440 NT_STATUS_OK
ReadX 13386 651264 4096 4096 NT_STATUS_OK
ReadX 13386 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 61440 61440 NT_STATUS_OK
ReadX 13387 61440 4096 4096 NT_STATUS_OK
ReadX 13387 65536 61440 61440 NT_STATUS_OK
ReadX 13387 126976 4096 4096 NT_STATUS_OK
ReadX 13387 131072 61440 61440 NT_STATUS_OK
ReadX 13387 192512 4096 4096 NT_STATUS_OK
ReadX 13387 196608 61440 61440 NT_STATUS_OK
ReadX 13387 258048 4096 4096 NT_STATUS_OK
ReadX 13387 262144 61440 61440 NT_STATUS_OK
ReadX 13387 323584 4096 4096 NT_STATUS_OK
ReadX 13387 327680 61440 61440 NT_STATUS_OK
ReadX 13387 389120 4096 4096 NT_STATUS_OK
ReadX 13387 393216 61440 61440 NT_STATUS_OK
ReadX 13387 454656 4096 4096 NT_STATUS_OK
ReadX 13387 458752 61440 61440 NT_STATUS_OK
ReadX 13387 520192 4096 4096 NT_STATUS_OK
ReadX 13387 524288 61440 61440 NT_STATUS_OK
ReadX 13387 585728 4096 4096 NT_STATUS_OK
ReadX 13387 589824 61440 61440 NT_STATUS_OK
ReadX 13387 651264 4096 4096 NT_STATUS_OK
ReadX 13387 655360 61440 61440 NT_STATUS_OK
ReadX 13387 716800 4096 4096 NT_STATUS_OK
ReadX 13387 720896 61440 61440 NT_STATUS_OK
ReadX 13387 782336 4096 4096 NT_STATUS_OK
ReadX 13387 786432 61440 61440 NT_STATUS_OK
ReadX 13387 847872 4096 4096 NT_STATUS_OK
ReadX 13387 851968 61440 61440 NT_STATUS_OK
ReadX 13387 913408 4096 4096 NT_STATUS_OK
ReadX 13387 917504 61440 61440 NT_STATUS_OK
ReadX 13387 978944 4096 4096 NT_STATUS_OK
ReadX 13387 983040 61440 61440 NT_STATUS_OK
ReadX 13387 1044480 4096 4096 NT_STATUS_OK
ReadX 13387 1048576 61440 61440 NT_STATUS_OK
ReadX 13387 1110016 4096 4096 NT_STATUS_OK
ReadX 13387 1114112 61440 61440 NT_STATUS_OK
ReadX 13387 1175552 4096 4096 NT_STATUS_OK
ReadX 13387 1179648 61440 61440 NT_STATUS_OK
ReadX 13387 1241088 4096 4096 NT_STATUS_OK
ReadX 13387 1245184 61440 61440 NT_STATUS_OK
ReadX 13387 1306624 4096 4096 NT_STATUS_OK
ReadX 13387 1310720 61440 61440 NT_STATUS_OK
ReadX 13387 1372160 4096 4096 NT_STATUS_OK
ReadX 13387 1376256 61440 61440 NT_STATUS_OK
ReadX 13387 1437696 4096 4096 NT_STATUS_OK
ReadX 13387 1441792 61440 61440 NT_STATUS_OK
ReadX 13387 1503232 4096 4096 NT_STATUS_OK
ReadX 13387 1507328 61440 61440 NT_STATUS_OK
ReadX 13387 1568768 4096 4096 NT_STATUS_OK
ReadX 13387 1572864 61440 61440 NT_STATUS_OK
ReadX 13387 1634304 4096 4096 NT_STATUS_OK
ReadX 13387 1638400 61440 61440 NT_STATUS_OK
ReadX 13387 1699840 4096 4096 NT_STATUS_OK
ReadX 13387 1703936 61440 61440 NT_STATUS_OK
ReadX 13387 1765376 4096 4096 NT_STATUS_OK
ReadX 13387 1769472 61440 61440 NT_STATUS_OK
ReadX 13387 1830912 4096 4096 NT_STATUS_OK
ReadX 13387 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13394 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 1004 NT_STATUS_OK
WriteX 13394 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13396 NT_STATUS_OK
WriteX 13396 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13396 258 NT_STATUS_OK
WriteX 13396 0 491 491 NT_STATUS_OK
Close 13396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13394 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13399 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13400 NT_STATUS_OK
WriteX 13400 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
WriteX 13400 0 543 543 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13406 NT_STATUS_OK
ReadX 13406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13407 NT_STATUS_OK
ReadX 13407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13414 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
WriteX 13414 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 258 NT_STATUS_OK
WriteX 13414 0 2048 2048 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
Flush 13415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13420 NT_STATUS_OK
WriteX 13420 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13420 258 NT_STATUS_OK
WriteX 13420 0 2048 2048 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13425 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13426 NT_STATUS_OK
WriteX 13426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 2048 2048 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 2048 2048 NT_STATUS_OK
ReadX 13405 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
WriteX 13405 0 8192 8192 NT_STATUS_OK
WriteX 13406 0 4096 4096 NT_STATUS_OK
WriteX 13407 0 4096 4096 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13431 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Close 13406 NT_STATUS_OK
Close 13407 NT_STATUS_OK
Close 13408 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13451 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 1004 NT_STATUS_OK
WriteX 13451 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 258 NT_STATUS_OK
WriteX 13451 0 2048 2048 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13459 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
WriteX 13459 0 2048 2048 NT_STATUS_OK
Close 13459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13460 NT_STATUS_OK
ReadX 13460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13452 0 4096 4096 NT_STATUS_OK
Flush 13452 NT_STATUS_OK
WriteX 13460 0 4096 4096 NT_STATUS_OK
Flush 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13452 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13460 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13454 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13462 NT_STATUS_OK
WriteX 13462 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13462 258 NT_STATUS_OK
WriteX 13462 0 4096 4096 NT_STATUS_OK
Close 13462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13464 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13465 NT_STATUS_OK
WriteX 13465 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13465 258 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13466 0 4096 4096 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13434 NT_STATUS_OK
Close 13435 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Close 13436 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13472 NT_STATUS_OK
Close 13472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13473 NT_STATUS_OK
WriteX 13473 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 258 NT_STATUS_OK
WriteX 13473 0 2048 2048 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13482 NT_STATUS_OK
ReadX 13482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13488 NT_STATUS_OK
QUERY_FILE_INFORMATION 13488 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Close 13482 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Close 13476 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Close 13477 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13490 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13492 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13505 NT_STATUS_OK
ReadX 13505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1004 NT_STATUS_OK
WriteX 13510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 258 NT_STATUS_OK
WriteX 13510 0 2048 2048 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13521 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13522 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 1004 NT_STATUS_OK
WriteX 13522 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
WriteX 13522 0 2048 2048 NT_STATUS_OK
Close 13522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
Close 13530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13511 0 4096 4096 NT_STATUS_OK
Flush 13511 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
Flush 13523 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
Flush 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13511 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13513 4096 16384 16384 NT_STATUS_OK
ReadX 13493 4096 16384 16384 NT_STATUS_OK
ReadX 13525 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 2048 2048 NT_STATUS_OK
WriteX 13533 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13534 NT_STATUS_OK
QUERY_FILE_INFORMATION 13534 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13495 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13536 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13538 NT_STATUS_OK
QUERY_FILE_INFORMATION 13538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13541 4096 16384 16384 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13544 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 8192 8192 NT_STATUS_OK
ReadX 13547 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13561 0 4096 4096 NT_STATUS_OK
ReadX 13561 4096 4096 4096 NT_STATUS_OK
ReadX 13561 8192 4096 4096 NT_STATUS_OK
WriteX 13547 0 4096 4096 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
ReadX 13562 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
WriteX 13567 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 258 NT_STATUS_OK
WriteX 13567 0 2048 2048 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
ReadX 13570 4096 4096 4096 NT_STATUS_OK
WriteX 13570 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
ReadX 13572 4096 4096 4096 NT_STATUS_OK
WriteX 13572 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13573 NT_STATUS_OK
QUERY_FILE_INFORMATION 13573 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13575 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13575 0 4096 4096 NT_STATUS_OK
ReadX 13575 4096 4096 4096 NT_STATUS_OK
ReadX 13575 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13586 NT_STATUS_OK
ReadX 13586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 4096 4096 NT_STATUS_OK
ReadX 13576 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13593 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 1004 NT_STATUS_OK
WriteX 13593 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 258 NT_STATUS_OK
WriteX 13593 0 2048 2048 NT_STATUS_OK
Close 13593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13594 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13598 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13599 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 1004 NT_STATUS_OK
WriteX 13599 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 258 NT_STATUS_OK
WriteX 13599 0 2048 2048 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13600 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13583 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13601 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13588 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13583 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13586 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13603 NT_STATUS_OK
QUERY_FILE_INFORMATION 13603 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 61440 4096 4096 NT_STATUS_OK
ReadX 13605 126976 4096 4096 NT_STATUS_OK
WriteX 13605 0 65536 65536 NT_STATUS_OK
WriteX 13605 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 61440 4096 4096 NT_STATUS_OK
ReadX 13606 126976 4096 4096 NT_STATUS_OK
ReadX 13606 192512 4096 4096 NT_STATUS_OK
ReadX 13606 258048 4096 4096 NT_STATUS_OK
WriteX 13606 0 65536 65536 NT_STATUS_OK
WriteX 13606 65536 65536 65536 NT_STATUS_OK
WriteX 13606 131072 65536 65536 NT_STATUS_OK
WriteX 13606 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 61440 4096 4096 NT_STATUS_OK
ReadX 13607 126976 4096 4096 NT_STATUS_OK
ReadX 13607 192512 4096 4096 NT_STATUS_OK
ReadX 13607 258048 4096 4096 NT_STATUS_OK
ReadX 13607 323584 4096 4096 NT_STATUS_OK
ReadX 13607 389120 4096 4096 NT_STATUS_OK
ReadX 13607 454656 4096 4096 NT_STATUS_OK
ReadX 13607 520192 4096 4096 NT_STATUS_OK
WriteX 13607 0 65536 65536 NT_STATUS_OK
WriteX 13607 65536 65536 65536 NT_STATUS_OK
WriteX 13607 131072 65536 65536 NT_STATUS_OK
WriteX 13607 196608 65536 65536 NT_STATUS_OK
WriteX 13607 262144 65536 65536 NT_STATUS_OK
WriteX 13607 327680 65536 65536 NT_STATUS_OK
WriteX 13607 393216 65536 65536 NT_STATUS_OK
WriteX 13607 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13608 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13608 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13608 8192 4096 4096 NT_STATUS_OK
ReadX 13608 12288 4096 4096 NT_STATUS_OK
ReadX 13608 16384 4096 4096 NT_STATUS_OK
ReadX 13608 20480 4096 4096 NT_STATUS_OK
ReadX 13608 24576 4096 4096 NT_STATUS_OK
ReadX 13608 28672 4096 4096 NT_STATUS_OK
ReadX 13608 32768 4096 4096 NT_STATUS_OK
ReadX 13608 36864 4096 4096 NT_STATUS_OK
ReadX 13608 40960 4096 4096 NT_STATUS_OK
ReadX 13608 45056 4096 4096 NT_STATUS_OK
ReadX 13608 49152 4096 4096 NT_STATUS_OK
ReadX 13608 53248 4096 4096 NT_STATUS_OK
ReadX 13608 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13608 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13611 NT_STATUS_OK
WriteX 13611 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13611 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13611 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 57088 57088 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Flush 13611 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13612 NT_STATUS_OK
SET_FILE_INFORMATION 13612 1004 NT_STATUS_OK
Close 13612 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13615 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13616 NT_STATUS_OK
WriteX 13616 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 51456 51456 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Flush 13616 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13620 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13625 NT_STATUS_OK
WriteX 13625 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13625 258 NT_STATUS_OK
WriteX 13625 0 53077 53077 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13626 NT_STATUS_OK
WriteX 13626 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 0 65536 65536 NT_STATUS_OK
WriteX 13626 65536 1856 1856 NT_STATUS_OK
WriteX 13626 0 4096 4096 NT_STATUS_OK
Flush 13626 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 0 4096 4096 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Close 13620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13632 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13635 NT_STATUS_OK
WriteX 13635 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13635 258 NT_STATUS_OK
WriteX 13635 0 7983 7983 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13640 NT_STATUS_OK
WriteX 13640 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13640 258 NT_STATUS_OK
WriteX 13640 0 65536 65536 NT_STATUS_OK
WriteX 13640 65536 65536 65536 NT_STATUS_OK
WriteX 13640 131072 65536 65536 NT_STATUS_OK
WriteX 13640 196608 65536 65536 NT_STATUS_OK
WriteX 13640 262144 65536 65536 NT_STATUS_OK
WriteX 13640 327680 65536 65536 NT_STATUS_OK
WriteX 13640 393216 65536 65536 NT_STATUS_OK
WriteX 13640 458752 46731 46731 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13641 NT_STATUS_OK
WriteX 13641 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13630 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 0 65536 65536 NT_STATUS_OK
WriteX 13641 65536 22848 22848 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Flush 13641 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13645 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13646 NT_STATUS_OK
ReadX 13646 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13646 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13646 1004 NT_STATUS_OK
ReadX 13646 8192 4096 4096 NT_STATUS_OK
ReadX 13646 12288 4096 4096 NT_STATUS_OK
ReadX 13646 16384 4096 4096 NT_STATUS_OK
ReadX 13646 20480 4096 4096 NT_STATUS_OK
ReadX 13646 24576 4096 4096 NT_STATUS_OK
ReadX 13646 28672 4096 4096 NT_STATUS_OK
ReadX 13646 32768 4096 4096 NT_STATUS_OK
ReadX 13646 36864 4096 4096 NT_STATUS_OK
ReadX 13646 40960 4096 4096 NT_STATUS_OK
ReadX 13646 45056 4096 4096 NT_STATUS_OK
ReadX 13646 49152 4096 4096 NT_STATUS_OK
ReadX 13646 53248 4096 4096 NT_STATUS_OK
ReadX 13646 57344 4096 4096 NT_STATUS_OK
ReadX 13646 61440 4096 4096 NT_STATUS_OK
ReadX 13646 65536 4096 4096 NT_STATUS_OK
ReadX 13646 69632 4096 4096 NT_STATUS_OK
ReadX 13646 73728 4096 4096 NT_STATUS_OK
ReadX 13646 77824 4096 4096 NT_STATUS_OK
ReadX 13646 81920 4096 4096 NT_STATUS_OK
ReadX 13646 86016 4096 4096 NT_STATUS_OK
ReadX 13646 90112 4096 4096 NT_STATUS_OK
ReadX 13646 94208 4096 4096 NT_STATUS_OK
ReadX 13646 98304 4096 4096 NT_STATUS_OK
ReadX 13646 102400 4096 4096 NT_STATUS_OK
ReadX 13646 106496 4096 4096 NT_STATUS_OK
ReadX 13646 110592 4096 4096 NT_STATUS_OK
ReadX 13646 114688 4096 4096 NT_STATUS_OK
ReadX 13646 118784 4096 4096 NT_STATUS_OK
ReadX 13646 122880 4096 4096 NT_STATUS_OK
ReadX 13646 126976 4096 4096 NT_STATUS_OK
ReadX 13646 131072 4096 4096 NT_STATUS_OK
ReadX 13646 135168 4096 4096 NT_STATUS_OK
ReadX 13646 139264 4096 4096 NT_STATUS_OK
ReadX 13646 143360 4096 4096 NT_STATUS_OK
ReadX 13646 147456 4096 4096 NT_STATUS_OK
ReadX 13646 151552 4096 4096 NT_STATUS_OK
ReadX 13646 155648 4096 4096 NT_STATUS_OK
ReadX 13646 159744 4096 4096 NT_STATUS_OK
ReadX 13646 163840 4096 4096 NT_STATUS_OK
ReadX 13646 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13646 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13645 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13649 NT_STATUS_OK
WriteX 13649 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13649 258 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13650 NT_STATUS_OK
SET_FILE_INFORMATION 13650 1004 NT_STATUS_OK
Close 13650 NT_STATUS_OK
WriteX 13649 0 42388 42388 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13651 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 4096 4096 NT_STATUS_OK
ReadX 13653 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13654 NT_STATUS_OK
WriteX 13654 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 258 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
WriteX 13654 0 42652 42652 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13656 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
ReadX 13658 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13663 NT_STATUS_OK
WriteX 13663 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13663 258 NT_STATUS_OK
WriteX 13663 0 65536 65536 NT_STATUS_OK
WriteX 13663 65536 49 49 NT_STATUS_OK
Close 13663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 61440 61440 NT_STATUS_OK
ReadX 13664 61440 4096 4096 NT_STATUS_OK
ReadX 13664 65536 61440 61440 NT_STATUS_OK
ReadX 13664 126976 4096 4096 NT_STATUS_OK
ReadX 13664 131072 61440 61440 NT_STATUS_OK
ReadX 13664 192512 4096 4096 NT_STATUS_OK
ReadX 13664 196608 61440 61440 NT_STATUS_OK
ReadX 13664 258048 4096 4096 NT_STATUS_OK
ReadX 13664 262144 61440 61440 NT_STATUS_OK
ReadX 13664 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 61440 61440 NT_STATUS_OK
ReadX 13665 61440 4096 4096 NT_STATUS_OK
ReadX 13665 65536 61440 61440 NT_STATUS_OK
ReadX 13665 126976 4096 4096 NT_STATUS_OK
ReadX 13665 131072 61440 61440 NT_STATUS_OK
ReadX 13665 192512 4096 4096 NT_STATUS_OK
ReadX 13665 196608 61440 61440 NT_STATUS_OK
ReadX 13665 258048 4096 4096 NT_STATUS_OK
ReadX 13665 262144 61440 61440 NT_STATUS_OK
ReadX 13665 323584 4096 4096 NT_STATUS_OK
ReadX 13665 327680 61440 61440 NT_STATUS_OK
ReadX 13665 389120 4096 4096 NT_STATUS_OK
ReadX 13665 393216 61440 61440 NT_STATUS_OK
ReadX 13665 454656 4096 4096 NT_STATUS_OK
ReadX 13665 458752 61440 61440 NT_STATUS_OK
ReadX 13665 520192 4096 4096 NT_STATUS_OK
ReadX 13665 524288 61440 61440 NT_STATUS_OK
ReadX 13665 585728 4096 4096 NT_STATUS_OK
ReadX 13665 589824 61440 61440 NT_STATUS_OK
ReadX 13665 651264 4096 4096 NT_STATUS_OK
ReadX 13665 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 61440 61440 NT_STATUS_OK
ReadX 13666 61440 4096 4096 NT_STATUS_OK
ReadX 13666 65536 61440 61440 NT_STATUS_OK
ReadX 13666 126976 4096 4096 NT_STATUS_OK
ReadX 13666 131072 61440 61440 NT_STATUS_OK
ReadX 13666 192512 4096 4096 NT_STATUS_OK
ReadX 13666 196608 61440 61440 NT_STATUS_OK
ReadX 13666 258048 4096 4096 NT_STATUS_OK
ReadX 13666 262144 61440 61440 NT_STATUS_OK
ReadX 13666 323584 4096 4096 NT_STATUS_OK
ReadX 13666 327680 61440 61440 NT_STATUS_OK
ReadX 13666 389120 4096 4096 NT_STATUS_OK
ReadX 13666 393216 61440 61440 NT_STATUS_OK
ReadX 13666 454656 4096 4096 NT_STATUS_OK
ReadX 13666 458752 61440 61440 NT_STATUS_OK
ReadX 13666 520192 4096 4096 NT_STATUS_OK
ReadX 13666 524288 61440 61440 NT_STATUS_OK
ReadX 13666 585728 4096 4096 NT_STATUS_OK
ReadX 13666 589824 61440 61440 NT_STATUS_OK
ReadX 13666 651264 4096 4096 NT_STATUS_OK
ReadX 13666 655360 61440 61440 NT_STATUS_OK
ReadX 13666 716800 4096 4096 NT_STATUS_OK
ReadX 13666 720896 61440 61440 NT_STATUS_OK
ReadX 13666 782336 4096 4096 NT_STATUS_OK
ReadX 13666 786432 61440 61440 NT_STATUS_OK
ReadX 13666 847872 4096 4096 NT_STATUS_OK
ReadX 13666 851968 61440 61440 NT_STATUS_OK
ReadX 13666 913408 4096 4096 NT_STATUS_OK
ReadX 13666 917504 61440 61440 NT_STATUS_OK
ReadX 13666 978944 4096 4096 NT_STATUS_OK
ReadX 13666 983040 61440 61440 NT_STATUS_OK
ReadX 13666 1044480 4096 4096 NT_STATUS_OK
ReadX 13666 1048576 61440 61440 NT_STATUS_OK
ReadX 13666 1110016 4096 4096 NT_STATUS_OK
ReadX 13666 1114112 61440 61440 NT_STATUS_OK
ReadX 13666 1175552 4096 4096 NT_STATUS_OK
ReadX 13666 1179648 61440 61440 NT_STATUS_OK
ReadX 13666 1241088 4096 4096 NT_STATUS_OK
ReadX 13666 1245184 61440 61440 NT_STATUS_OK
ReadX 13666 1306624 4096 4096 NT_STATUS_OK
ReadX 13666 1310720 61440 61440 NT_STATUS_OK
ReadX 13666 1372160 4096 4096 NT_STATUS_OK
ReadX 13666 1376256 61440 61440 NT_STATUS_OK
ReadX 13666 1437696 4096 4096 NT_STATUS_OK
ReadX 13666 1441792 61440 61440 NT_STATUS_OK
ReadX 13666 1503232 4096 4096 NT_STATUS_OK
ReadX 13666 1507328 61440 61440 NT_STATUS_OK
ReadX 13666 1568768 4096 4096 NT_STATUS_OK
ReadX 13666 1572864 61440 61440 NT_STATUS_OK
ReadX 13666 1634304 4096 4096 NT_STATUS_OK
ReadX 13666 1638400 61440 61440 NT_STATUS_OK
ReadX 13666 1699840 4096 4096 NT_STATUS_OK
ReadX 13666 1703936 61440 61440 NT_STATUS_OK
ReadX 13666 1765376 4096 4096 NT_STATUS_OK
ReadX 13666 1769472 61440 61440 NT_STATUS_OK
ReadX 13666 1830912 4096 4096 NT_STATUS_OK
ReadX 13666 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13668 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
ReadX 13668 2156 24 24 NT_STATUS_OK
ReadX 13668 2139 276 276 NT_STATUS_OK
ReadX 13668 2136 14 14 NT_STATUS_OK
ReadX 13668 2136 7 7 NT_STATUS_OK
ReadX 13668 2138 12 12 NT_STATUS_OK
ReadX 13668 2137 8 8 NT_STATUS_OK
ReadX 13668 2135 15 15 NT_STATUS_OK
ReadX 13668 0 16 16 NT_STATUS_OK
ReadX 13668 16 2048 2048 NT_STATUS_OK
ReadX 13668 2064 2048 2048 NT_STATUS_OK
ReadX 13668 257 2048 2048 NT_STATUS_OK
ReadX 13668 385 2048 2048 NT_STATUS_OK
ReadX 13668 513 2048 2048 NT_STATUS_OK
ReadX 13668 641 2048 2048 NT_STATUS_OK
ReadX 13668 769 2048 2048 NT_STATUS_OK
ReadX 13668 897 2048 2048 NT_STATUS_OK
ReadX 13668 1025 2048 2048 NT_STATUS_OK
ReadX 13668 1153 2048 2048 NT_STATUS_OK
ReadX 13668 1281 2048 2048 NT_STATUS_OK
ReadX 13668 1409 2048 2048 NT_STATUS_OK
ReadX 13668 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13670 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13665 NT_STATUS_OK
Close 13666 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13673 NT_STATUS_OK
WriteX 13673 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 10575 10575 NT_STATUS_OK
Flush 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13678 NT_STATUS_OK
LockX 13678 2147483538 1 NT_STATUS_OK
UnlockX 13678 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1005 NT_STATUS_OK
ReadX 13678 0 512 512 NT_STATUS_OK
ReadX 13678 512 512 512 NT_STATUS_OK
ReadX 13678 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1004 NT_STATUS_OK
Close 13678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13679 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1005 NT_STATUS_OK
ReadX 13679 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13680 NT_STATUS_OK
LockX 13680 2147483538 1 NT_STATUS_OK
UnlockX 13680 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13680 1005 NT_STATUS_OK
ReadX 13680 0 512 512 NT_STATUS_OK
ReadX 13680 512 512 512 NT_STATUS_OK
ReadX 13680 1024 512 512 NT_STATUS_OK
ReadX 13680 288 20 20 NT_STATUS_OK
ReadX 13680 308 2084 2084 NT_STATUS_OK
ReadX 13680 388 2084 2084 NT_STATUS_OK
ReadX 13680 388 2084 2084 NT_STATUS_OK
ReadX 13667 2157 1386 1386 NT_STATUS_OK
ReadX 13680 2472 399 399 NT_STATUS_OK
ReadX 13680 3072 1536 1536 NT_STATUS_OK
ReadX 13680 544 149 149 NT_STATUS_OK
ReadX 13680 693 485 485 NT_STATUS_OK
Close 13680 NT_STATUS_OK
ReadX 13667 2157 4096 4096 NT_STATUS_OK
ReadX 13667 6253 4096 4096 NT_STATUS_OK
ReadX 13667 10349 4096 4096 NT_STATUS_OK
ReadX 13667 14445 4096 4096 NT_STATUS_OK
ReadX 13667 18541 4096 4096 NT_STATUS_OK
ReadX 13667 22637 256 256 NT_STATUS_OK
ReadX 13667 22893 4096 4096 NT_STATUS_OK
ReadX 13667 26989 4096 4096 NT_STATUS_OK
ReadX 13667 31085 4096 4096 NT_STATUS_OK
ReadX 13667 35181 4096 4096 NT_STATUS_OK
ReadX 13667 39277 4096 4096 NT_STATUS_OK
ReadX 13667 43373 4096 4096 NT_STATUS_OK
ReadX 13667 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13667 2157 1024 1024 NT_STATUS_OK
ReadX 13667 1667 4688 4688 NT_STATUS_OK
ReadX 13667 6355 3516 3516 NT_STATUS_OK
ReadX 13667 9871 16384 16384 NT_STATUS_OK
ReadX 13667 26255 3771 3771 NT_STATUS_OK
ReadX 13667 30026 2048 2048 NT_STATUS_OK
ReadX 13667 32074 1024 1024 NT_STATUS_OK
ReadX 13667 33098 6652 6652 NT_STATUS_OK
ReadX 13667 39750 16384 16384 NT_STATUS_OK
ReadX 13667 56134 10496 10496 NT_STATUS_OK
ReadX 13667 66630 1784 1784 NT_STATUS_OK
ReadX 13667 68414 90 90 NT_STATUS_OK
ReadX 13667 68504 273 273 NT_STATUS_OK
ReadX 13667 68777 1600 1600 NT_STATUS_OK
ReadX 13667 70377 640 640 NT_STATUS_OK
ReadX 13667 71017 1280 1280 NT_STATUS_OK
ReadX 13667 72297 8464 8464 NT_STATUS_OK
ReadX 13667 80761 158 158 NT_STATUS_OK
ReadX 13667 80919 912 912 NT_STATUS_OK
ReadX 13667 81831 1980 1980 NT_STATUS_OK
ReadX 13667 83811 2256 2256 NT_STATUS_OK
ReadX 13667 86067 400 400 NT_STATUS_OK
ReadX 13667 86467 252 252 NT_STATUS_OK
ReadX 13667 86719 42 42 NT_STATUS_OK
ReadX 13667 86761 725 725 NT_STATUS_OK
ReadX 13667 2009 512 512 NT_STATUS_OK
ReadX 13667 3895 9 9 NT_STATUS_OK
ReadX 13667 3781 46 46 NT_STATUS_OK
ReadX 13667 4059 92 92 NT_STATUS_OK
ReadX 13667 3781 92 92 NT_STATUS_OK
ReadX 13667 3986 184 184 NT_STATUS_OK
ReadX 13667 3987 16384 16384 NT_STATUS_OK
ReadX 13667 3902 16384 16384 NT_STATUS_OK
ReadX 13667 3781 10240 10240 NT_STATUS_OK
ReadX 13667 3821 16384 16384 NT_STATUS_OK
ReadX 13667 3891 935 935 NT_STATUS_OK
ReadX 13667 4060 10240 10240 NT_STATUS_OK
ReadX 13667 4059 184 184 NT_STATUS_OK
ReadX 13667 256 184 184 NT_STATUS_OK
ReadX 13667 256 1026 1026 NT_STATUS_OK
ReadX 13667 3901 326 326 NT_STATUS_OK
ReadX 13667 3899 652 652 NT_STATUS_OK
ReadX 13667 256 2 2 NT_STATUS_OK
ReadX 13667 258 4948 4948 NT_STATUS_OK
Close 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13685 NT_STATUS_OK
WriteX 13685 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13685 258 NT_STATUS_OK
WriteX 13685 0 65536 65536 NT_STATUS_OK
WriteX 13685 65536 65536 65536 NT_STATUS_OK
WriteX 13685 131072 65536 65536 NT_STATUS_OK
WriteX 13685 196608 65536 65536 NT_STATUS_OK
WriteX 13685 262144 65536 65536 NT_STATUS_OK
WriteX 13685 327680 65536 65536 NT_STATUS_OK
WriteX 13685 393216 65536 65536 NT_STATUS_OK
WriteX 13685 458752 65536 65536 NT_STATUS_OK
WriteX 13685 524288 65536 65536 NT_STATUS_OK
WriteX 13685 589824 35257 35257 NT_STATUS_OK
Close 13685 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13690 NT_STATUS_OK
WriteX 13690 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
WriteX 13690 0 65536 65536 NT_STATUS_OK
WriteX 13690 65536 65536 65536 NT_STATUS_OK
WriteX 13690 131072 65536 65536 NT_STATUS_OK
WriteX 13690 196608 65536 65536 NT_STATUS_OK
WriteX 13690 262144 65536 65536 NT_STATUS_OK
WriteX 13690 327680 65536 65536 NT_STATUS_OK
WriteX 13690 393216 65536 65536 NT_STATUS_OK
WriteX 13690 458752 65536 65536 NT_STATUS_OK
WriteX 13690 524288 65536 65536 NT_STATUS_OK
WriteX 13690 589824 57598 57598 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13692 NT_STATUS_OK
WriteX 13692 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 12543 12543 NT_STATUS_OK
Flush 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13698 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
ReadX 13698 1938 24 24 NT_STATUS_OK
ReadX 13698 1920 276 276 NT_STATUS_OK
ReadX 13698 1918 14 14 NT_STATUS_OK
ReadX 13698 1918 7 7 NT_STATUS_OK
ReadX 13698 1919 12 12 NT_STATUS_OK
ReadX 13698 1919 8 8 NT_STATUS_OK
ReadX 13698 1917 15 15 NT_STATUS_OK
ReadX 13698 0 16 16 NT_STATUS_OK
ReadX 13698 16 2048 2048 NT_STATUS_OK
ReadX 13698 2064 2048 2048 NT_STATUS_OK
ReadX 13698 257 2048 2048 NT_STATUS_OK
ReadX 13698 385 2048 2048 NT_STATUS_OK
ReadX 13698 513 2048 2048 NT_STATUS_OK
ReadX 13698 641 2048 2048 NT_STATUS_OK
ReadX 13698 769 2048 2048 NT_STATUS_OK
ReadX 13698 897 2048 2048 NT_STATUS_OK
ReadX 13698 1025 2048 2048 NT_STATUS_OK
ReadX 13698 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13703 NT_STATUS_OK
WriteX 13703 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 258 NT_STATUS_OK
WriteX 13703 0 11588 11588 NT_STATUS_OK
Flush 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13704 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
Close 13698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13708 NT_STATUS_OK
WriteX 13708 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13708 258 NT_STATUS_OK
WriteX 13708 0 11615 11615 NT_STATUS_OK
Flush 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13717 NT_STATUS_OK
WriteX 13717 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13717 258 NT_STATUS_OK
WriteX 13717 0 65536 65536 NT_STATUS_OK
WriteX 13717 65536 16050 16050 NT_STATUS_OK
Close 13717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13697 1939 64 64 NT_STATUS_OK
ReadX 13697 128 248 248 NT_STATUS_OK
ReadX 13697 128 568 568 NT_STATUS_OK
ReadX 13697 3872 1536 1536 NT_STATUS_OK
ReadX 13697 3456 2560 2560 NT_STATUS_OK
ReadX 13697 3136 512 512 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
ReadX 13697 3264 3072 3072 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 3616 4096 4096 NT_STATUS_OK
ReadX 13697 1939 64 64 NT_STATUS_OK
ReadX 13697 128 248 248 NT_STATUS_OK
ReadX 13697 128 608 608 NT_STATUS_OK
ReadX 13697 2858 1024 1024 NT_STATUS_OK
ReadX 13697 2810 4096 4096 NT_STATUS_OK
ReadX 13697 2826 4096 4096 NT_STATUS_OK
ReadX 13697 2580 2048 2048 NT_STATUS_OK
ReadX 13697 2800 2560 2560 NT_STATUS_OK
ReadX 13697 2100 4096 4096 NT_STATUS_OK
ReadX 13697 2084 4096 4096 NT_STATUS_OK
ReadX 13697 868 4096 4096 NT_STATUS_OK
ReadX 13697 2324 4096 4096 NT_STATUS_OK
ReadX 13697 884 4096 4096 NT_STATUS_OK
ReadX 13697 2604 1024 1024 NT_STATUS_OK
ReadX 13697 580 4096 4096 NT_STATUS_OK
ReadX 13697 596 4096 4096 NT_STATUS_OK
ReadX 13697 2752 4096 4096 NT_STATUS_OK
ReadX 13697 2842 1024 1024 NT_STATUS_OK
ReadX 13697 660 4096 4096 NT_STATUS_OK
ReadX 13697 2720 4096 4096 NT_STATUS_OK
ReadX 13697 2736 4096 4096 NT_STATUS_OK
ReadX 13697 628 4096 4096 NT_STATUS_OK
ReadX 13697 2704 4096 4096 NT_STATUS_OK
ReadX 13697 1556 4096 4096 NT_STATUS_OK
ReadX 13697 576 4096 4096 NT_STATUS_OK
ReadX 13697 3168 1536 1536 NT_STATUS_OK
ReadX 13697 832 4096 4096 NT_STATUS_OK
ReadX 13697 1088 4096 4096 NT_STATUS_OK
ReadX 13697 1344 4096 4096 NT_STATUS_OK
ReadX 13697 1600 4096 4096 NT_STATUS_OK
ReadX 13697 1856 4096 4096 NT_STATUS_OK
ReadX 13697 2112 4096 4096 NT_STATUS_OK
ReadX 13697 1892 4096 4096 NT_STATUS_OK
ReadX 13697 820 4096 4096 NT_STATUS_OK
ReadX 13697 788 4096 4096 NT_STATUS_OK
ReadX 13697 1604 4096 4096 NT_STATUS_OK
ReadX 13697 3648 4096 4096 NT_STATUS_OK
ReadX 13697 2608 4096 4096 NT_STATUS_OK
ReadX 13697 548 4096 4096 NT_STATUS_OK
ReadX 13697 740 4096 4096 NT_STATUS_OK
ReadX 13697 1344 4096 4096 NT_STATUS_OK
ReadX 13697 3392 4096 4096 NT_STATUS_OK
ReadX 13697 3904 4096 4096 NT_STATUS_OK
ReadX 13697 644 4096 4096 NT_STATUS_OK
ReadX 13697 676 4096 4096 NT_STATUS_OK
ReadX 13697 2688 4096 4096 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 900 4096 4096 NT_STATUS_OK
ReadX 13697 1908 4096 4096 NT_STATUS_OK
ReadX 13697 852 4096 4096 NT_STATUS_OK
ReadX 13697 724 4096 4096 NT_STATUS_OK
ReadX 13697 2292 4096 4096 NT_STATUS_OK
ReadX 13697 612 4096 4096 NT_STATUS_OK
ReadX 13697 388 4096 4096 NT_STATUS_OK
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 500 4096 4096 NT_STATUS_OK
ReadX 13697 356 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 576 4096 4096 NT_STATUS_OK
ReadX 13697 340 4096 4096 NT_STATUS_OK
ReadX 13697 420 4096 4096 NT_STATUS_OK
ReadX 13697 1600 4096 4096 NT_STATUS_OK
ReadX 13697 404 4096 4096 NT_STATUS_OK
ReadX 13697 1428 4096 4096 NT_STATUS_OK
ReadX 13697 2656 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 452 4096 4096 NT_STATUS_OK
ReadX 13697 692 4096 4096 NT_STATUS_OK
ReadX 13697 564 4096 4096 NT_STATUS_OK
ReadX 13697 372 4096 4096 NT_STATUS_OK
ReadX 13697 468 4096 4096 NT_STATUS_OK
ReadX 13697 484 4096 4096 NT_STATUS_OK
ReadX 13697 1088 4096 4096 NT_STATUS_OK
ReadX 13697 1924 4096 4096 NT_STATUS_OK
ReadX 13697 2768 4096 4096 NT_STATUS_OK
ReadX 13697 832 4096 4096 NT_STATUS_OK
ReadX 13697 836 4096 4096 NT_STATUS_OK
ReadX 13697 1856 4096 4096 NT_STATUS_OK
ReadX 13697 2640 4096 4096 NT_STATUS_OK
ReadX 13697 436 4096 4096 NT_STATUS_OK
ReadX 13697 1828 4096 4096 NT_STATUS_OK
ReadX 13697 804 4096 4096 NT_STATUS_OK
ReadX 13697 1860 4096 4096 NT_STATUS_OK
ReadX 13697 1812 4096 4096 NT_STATUS_OK
ReadX 13697 756 4096 4096 NT_STATUS_OK
ReadX 13697 1636 4096 4096 NT_STATUS_OK
ReadX 13697 772 4096 4096 NT_STATUS_OK
ReadX 13697 2036 4096 4096 NT_STATUS_OK
ReadX 13697 1220 4096 4096 NT_STATUS_OK
ReadX 13697 1652 4096 4096 NT_STATUS_OK
ReadX 13697 2588 4096 4096 NT_STATUS_OK
ReadX 13697 916 4096 4096 NT_STATUS_OK
ReadX 13697 260 4096 4096 NT_STATUS_OK
ReadX 13697 932 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 308 4096 4096 NT_STATUS_OK
ReadX 13697 292 4096 4096 NT_STATUS_OK
ReadX 13697 1140 4096 4096 NT_STATUS_OK
ReadX 13697 276 4096 4096 NT_STATUS_OK
ReadX 13697 2020 4096 4096 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
ReadX 13697 516 4096 4096 NT_STATUS_OK
ReadX 13697 1844 4096 4096 NT_STATUS_OK
ReadX 13697 1124 4096 4096 NT_STATUS_OK
ReadX 13697 3136 4096 4096 NT_STATUS_OK
ReadX 13697 324 4096 4096 NT_STATUS_OK
ReadX 13697 1156 4096 4096 NT_STATUS_OK
ReadX 13697 1172 4096 4096 NT_STATUS_OK
ReadX 13697 2112 4096 4096 NT_STATUS_OK
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 964 4096 4096 NT_STATUS_OK
ReadX 13697 980 4096 4096 NT_STATUS_OK
ReadX 13697 1012 4096 4096 NT_STATUS_OK
ReadX 13697 532 4096 4096 NT_STATUS_OK
ReadX 13697 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13697 1620 4096 4096 NT_STATUS_OK
ReadX 13697 1604 4096 4096 NT_STATUS_OK
ReadX 13697 2116 4096 4096 NT_STATUS_OK
ReadX 13697 2132 4096 4096 NT_STATUS_OK
ReadX 13697 2148 4096 4096 NT_STATUS_OK
ReadX 13697 2276 4096 4096 NT_STATUS_OK
ReadX 13697 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13719 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13722 NT_STATUS_OK
QUERY_FILE_INFORMATION 13677 1004 NT_STATUS_OK
Close 13677 NT_STATUS_OK
WriteX 13722 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13722 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1004 NT_STATUS_OK
Close 13679 NT_STATUS_OK
WriteX 13722 0 65536 65536 NT_STATUS_OK
WriteX 13722 65536 64850 64850 NT_STATUS_OK
Close 13722 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13724 NT_STATUS_OK
WriteX 13724 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
ReadX 13697 2068 4096 4096 NT_STATUS_OK
ReadX 13697 1588 4096 4096 NT_STATUS_OK
ReadX 13697 1572 4096 4096 NT_STATUS_OK
WriteX 13724 0 18630 18630 NT_STATUS_OK
Flush 13724 NT_STATUS_OK
Close 13724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 612 4096 4096 NT_STATUS_OK
ReadX 13697 564 4096 4096 NT_STATUS_OK
ReadX 13697 1876 4096 4096 NT_STATUS_OK
ReadX 13697 628 4096 4096 NT_STATUS_OK
ReadX 13697 740 4096 4096 NT_STATUS_OK
ReadX 13697 724 4096 4096 NT_STATUS_OK
ReadX 13697 644 4096 4096 NT_STATUS_OK
ReadX 13697 2324 4096 4096 NT_STATUS_OK
ReadX 13697 660 4096 4096 NT_STATUS_OK
ReadX 13697 852 4096 4096 NT_STATUS_OK
ReadX 13697 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 580 4096 4096 NT_STATUS_OK
ReadX 13697 3136 512 512 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 61440 4096 4096 NT_STATUS_OK
ReadX 13729 126976 4096 4096 NT_STATUS_OK
WriteX 13729 0 65536 65536 NT_STATUS_OK
WriteX 13729 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 61440 4096 4096 NT_STATUS_OK
ReadX 13730 126976 4096 4096 NT_STATUS_OK
ReadX 13730 192512 4096 4096 NT_STATUS_OK
ReadX 13730 258048 4096 4096 NT_STATUS_OK
WriteX 13730 0 65536 65536 NT_STATUS_OK
WriteX 13730 65536 65536 65536 NT_STATUS_OK
WriteX 13730 131072 65536 65536 NT_STATUS_OK
WriteX 13730 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 61440 4096 4096 NT_STATUS_OK
ReadX 13731 126976 4096 4096 NT_STATUS_OK
ReadX 13731 192512 4096 4096 NT_STATUS_OK
ReadX 13731 258048 4096 4096 NT_STATUS_OK
ReadX 13731 323584 4096 4096 NT_STATUS_OK
ReadX 13731 389120 4096 4096 NT_STATUS_OK
ReadX 13731 454656 4096 4096 NT_STATUS_OK
ReadX 13731 520192 4096 4096 NT_STATUS_OK
WriteX 13731 0 65536 65536 NT_STATUS_OK
WriteX 13731 65536 65536 65536 NT_STATUS_OK
WriteX 13731 131072 65536 65536 NT_STATUS_OK
WriteX 13731 196608 65536 65536 NT_STATUS_OK
WriteX 13731 262144 65536 65536 NT_STATUS_OK
WriteX 13731 327680 65536 65536 NT_STATUS_OK
WriteX 13731 393216 65536 65536 NT_STATUS_OK
WriteX 13731 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13734 NT_STATUS_OK
WriteX 13734 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13734 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13732 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13739 NT_STATUS_OK
WriteX 13739 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 258 NT_STATUS_OK
WriteX 13739 0 62591 62591 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13744 NT_STATUS_OK
WriteX 13744 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13744 258 NT_STATUS_OK
WriteX 13744 0 10845 10845 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13749 NT_STATUS_OK
WriteX 13749 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13749 258 NT_STATUS_OK
WriteX 13749 0 30118 30118 NT_STATUS_OK
Close 13749 NT_STATUS_OK
WriteX 13732 0 4096 4096 NT_STATUS_OK
WriteX 13734 0 64 64 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 61440 61440 NT_STATUS_OK
ReadX 13751 61440 4096 4096 NT_STATUS_OK
ReadX 13751 65536 61440 61440 NT_STATUS_OK
ReadX 13751 126976 4096 4096 NT_STATUS_OK
ReadX 13751 131072 61440 61440 NT_STATUS_OK
ReadX 13751 192512 4096 4096 NT_STATUS_OK
ReadX 13751 196608 61440 61440 NT_STATUS_OK
ReadX 13751 258048 4096 4096 NT_STATUS_OK
ReadX 13751 262144 61440 61440 NT_STATUS_OK
ReadX 13751 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 61440 61440 NT_STATUS_OK
ReadX 13752 61440 4096 4096 NT_STATUS_OK
ReadX 13752 65536 61440 61440 NT_STATUS_OK
ReadX 13752 126976 4096 4096 NT_STATUS_OK
ReadX 13752 131072 61440 61440 NT_STATUS_OK
ReadX 13752 192512 4096 4096 NT_STATUS_OK
ReadX 13752 196608 61440 61440 NT_STATUS_OK
ReadX 13752 258048 4096 4096 NT_STATUS_OK
ReadX 13752 262144 61440 61440 NT_STATUS_OK
ReadX 13752 323584 4096 4096 NT_STATUS_OK
ReadX 13752 327680 61440 61440 NT_STATUS_OK
ReadX 13752 389120 4096 4096 NT_STATUS_OK
ReadX 13752 393216 61440 61440 NT_STATUS_OK
ReadX 13752 454656 4096 4096 NT_STATUS_OK
ReadX 13752 458752 61440 61440 NT_STATUS_OK
ReadX 13752 520192 4096 4096 NT_STATUS_OK
ReadX 13752 524288 61440 61440 NT_STATUS_OK
ReadX 13752 585728 4096 4096 NT_STATUS_OK
ReadX 13752 589824 61440 61440 NT_STATUS_OK
ReadX 13752 651264 4096 4096 NT_STATUS_OK
ReadX 13752 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 61440 61440 NT_STATUS_OK
ReadX 13753 61440 4096 4096 NT_STATUS_OK
ReadX 13753 65536 61440 61440 NT_STATUS_OK
ReadX 13753 126976 4096 4096 NT_STATUS_OK
ReadX 13753 131072 61440 61440 NT_STATUS_OK
ReadX 13753 192512 4096 4096 NT_STATUS_OK
ReadX 13753 196608 61440 61440 NT_STATUS_OK
ReadX 13753 258048 4096 4096 NT_STATUS_OK
ReadX 13753 262144 61440 61440 NT_STATUS_OK
ReadX 13753 323584 4096 4096 NT_STATUS_OK
ReadX 13753 327680 61440 61440 NT_STATUS_OK
ReadX 13753 389120 4096 4096 NT_STATUS_OK
ReadX 13753 393216 61440 61440 NT_STATUS_OK
ReadX 13753 454656 4096 4096 NT_STATUS_OK
ReadX 13753 458752 61440 61440 NT_STATUS_OK
ReadX 13753 520192 4096 4096 NT_STATUS_OK
ReadX 13753 524288 61440 61440 NT_STATUS_OK
ReadX 13753 585728 4096 4096 NT_STATUS_OK
ReadX 13753 589824 61440 61440 NT_STATUS_OK
ReadX 13753 651264 4096 4096 NT_STATUS_OK
ReadX 13753 655360 61440 61440 NT_STATUS_OK
ReadX 13753 716800 4096 4096 NT_STATUS_OK
ReadX 13753 720896 61440 61440 NT_STATUS_OK
ReadX 13753 782336 4096 4096 NT_STATUS_OK
ReadX 13753 786432 61440 61440 NT_STATUS_OK
ReadX 13753 847872 4096 4096 NT_STATUS_OK
ReadX 13753 851968 61440 61440 NT_STATUS_OK
ReadX 13753 913408 4096 4096 NT_STATUS_OK
ReadX 13753 917504 61440 61440 NT_STATUS_OK
ReadX 13753 978944 4096 4096 NT_STATUS_OK
ReadX 13753 983040 61440 61440 NT_STATUS_OK
ReadX 13753 1044480 4096 4096 NT_STATUS_OK
ReadX 13753 1048576 61440 61440 NT_STATUS_OK
ReadX 13753 1110016 4096 4096 NT_STATUS_OK
ReadX 13753 1114112 61440 61440 NT_STATUS_OK
ReadX 13753 1175552 4096 4096 NT_STATUS_OK
ReadX 13753 1179648 61440 61440 NT_STATUS_OK
ReadX 13753 1241088 4096 4096 NT_STATUS_OK
ReadX 13753 1245184 61440 61440 NT_STATUS_OK
ReadX 13753 1306624 4096 4096 NT_STATUS_OK
ReadX 13753 1310720 61440 61440 NT_STATUS_OK
ReadX 13753 1372160 4096 4096 NT_STATUS_OK
ReadX 13753 1376256 61440 61440 NT_STATUS_OK
ReadX 13753 1437696 4096 4096 NT_STATUS_OK
ReadX 13753 1441792 61440 61440 NT_STATUS_OK
ReadX 13753 1503232 4096 4096 NT_STATUS_OK
ReadX 13753 1507328 61440 61440 NT_STATUS_OK
ReadX 13753 1568768 4096 4096 NT_STATUS_OK
ReadX 13753 1572864 61440 61440 NT_STATUS_OK
ReadX 13753 1634304 4096 4096 NT_STATUS_OK
ReadX 13753 1638400 61440 61440 NT_STATUS_OK
ReadX 13753 1699840 4096 4096 NT_STATUS_OK
ReadX 13753 1703936 61440 61440 NT_STATUS_OK
ReadX 13753 1765376 4096 4096 NT_STATUS_OK
ReadX 13753 1769472 61440 61440 NT_STATUS_OK
ReadX 13753 1830912 4096 4096 NT_STATUS_OK
ReadX 13753 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
ReadX 13758 4096 4096 4096 NT_STATUS_OK
ReadX 13758 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13756 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13762 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13765 NT_STATUS_OK
ReadX 13765 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 8192 8192 NT_STATUS_OK
ReadX 13766 8192 8192 8192 NT_STATUS_OK
ReadX 13766 16384 8192 8192 NT_STATUS_OK
ReadX 13766 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13771 NT_STATUS_OK
WriteX 13771 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 258 NT_STATUS_OK
WriteX 13771 0 10438 10438 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13775 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13777 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 4096 4096 NT_STATUS_OK
ReadX 13780 4096 4096 4096 NT_STATUS_OK
ReadX 13780 8192 4096 4096 NT_STATUS_OK
ReadX 13780 12288 8192 8192 NT_STATUS_OK
ReadX 13780 20480 8192 8192 NT_STATUS_OK
ReadX 13780 28672 8192 8192 NT_STATUS_OK
ReadX 13780 36864 8192 8192 NT_STATUS_OK
ReadX 13780 45056 8192 8192 NT_STATUS_OK
ReadX 13780 53248 8192 8192 NT_STATUS_OK
ReadX 13780 61440 8192 8192 NT_STATUS_OK
ReadX 13780 69632 8192 8192 NT_STATUS_OK
ReadX 13780 77824 8192 8192 NT_STATUS_OK
ReadX 13780 86016 8192 8192 NT_STATUS_OK
ReadX 13780 94208 8192 8192 NT_STATUS_OK
ReadX 13780 102400 8192 8192 NT_STATUS_OK
ReadX 13780 110592 8192 8192 NT_STATUS_OK
ReadX 13780 118784 8192 8192 NT_STATUS_OK
ReadX 13780 126976 8192 8192 NT_STATUS_OK
ReadX 13780 135168 8192 8192 NT_STATUS_OK
ReadX 13780 143360 8192 8192 NT_STATUS_OK
ReadX 13780 151552 8192 8192 NT_STATUS_OK
ReadX 13780 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13782 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
WriteX 13785 0 28489 28489 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13788 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 8192 8192 NT_STATUS_OK
ReadX 13792 8192 8192 8192 NT_STATUS_OK
ReadX 13792 16384 8192 8192 NT_STATUS_OK
ReadX 13792 24576 8192 8192 NT_STATUS_OK
ReadX 13792 32768 16384 16384 NT_STATUS_OK
ReadX 13792 49152 8192 8192 NT_STATUS_OK
ReadX 13792 57344 8192 8192 NT_STATUS_OK
ReadX 13792 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13794 NT_STATUS_OK
Close 13794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13797 NT_STATUS_OK
WriteX 13797 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13797 258 NT_STATUS_OK
WriteX 13797 0 29253 29253 NT_STATUS_OK
Close 13797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13804 NT_STATUS_OK
WriteX 13804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 258 NT_STATUS_OK
WriteX 13804 0 30183 30183 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13807 NT_STATUS_OK
WriteX 13807 0 510 510 NT_STATUS_OK
WriteX 13807 510 512 512 NT_STATUS_OK
WriteX 13807 1022 510 510 NT_STATUS_OK
WriteX 13807 1532 510 510 NT_STATUS_OK
WriteX 13807 2042 168 168 NT_STATUS_OK
Close 13807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13808 NT_STATUS_OK
Close 13808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 61440 4096 4096 NT_STATUS_OK
ReadX 13811 126976 4096 4096 NT_STATUS_OK
WriteX 13811 0 65536 65536 NT_STATUS_OK
WriteX 13811 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 61440 4096 4096 NT_STATUS_OK
ReadX 13812 126976 4096 4096 NT_STATUS_OK
ReadX 13812 192512 4096 4096 NT_STATUS_OK
ReadX 13812 258048 4096 4096 NT_STATUS_OK
WriteX 13812 0 65536 65536 NT_STATUS_OK
WriteX 13812 65536 65536 65536 NT_STATUS_OK
WriteX 13812 131072 65536 65536 NT_STATUS_OK
WriteX 13812 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 61440 4096 4096 NT_STATUS_OK
ReadX 13813 126976 4096 4096 NT_STATUS_OK
ReadX 13813 192512 4096 4096 NT_STATUS_OK
ReadX 13813 258048 4096 4096 NT_STATUS_OK
ReadX 13813 323584 4096 4096 NT_STATUS_OK
ReadX 13813 389120 4096 4096 NT_STATUS_OK
ReadX 13813 454656 4096 4096 NT_STATUS_OK
ReadX 13813 520192 4096 4096 NT_STATUS_OK
WriteX 13813 0 65536 65536 NT_STATUS_OK
WriteX 13813 65536 65536 65536 NT_STATUS_OK
WriteX 13813 131072 65536 65536 NT_STATUS_OK
WriteX 13813 196608 65536 65536 NT_STATUS_OK
WriteX 13813 262144 65536 65536 NT_STATUS_OK
WriteX 13813 327680 65536 65536 NT_STATUS_OK
WriteX 13813 393216 65536 65536 NT_STATUS_OK
WriteX 13813 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13814 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Close 13813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13825 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13829 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13832 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13853 NT_STATUS_OK
Close 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13863 NT_STATUS_OK
Close 13863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13868 NT_STATUS_OK
Close 13868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13882 NT_STATUS_OK
WriteX 13882 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13882 0 65536 65536 NT_STATUS_OK
WriteX 13882 65536 65536 65536 NT_STATUS_OK
WriteX 13882 131072 65536 65536 NT_STATUS_OK
WriteX 13882 196608 65536 65536 NT_STATUS_OK
WriteX 13882 262144 26634 26634 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
ReadX 13890 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13923 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13938 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13942 NT_STATUS_OK
Close 13942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13957 NT_STATUS_OK
Close 13957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
Close 13969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13981 NT_STATUS_OK
Close 13981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
Close 13983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
Close 13984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14014 0 4096 4096 NT_STATUS_OK
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
ReadX 14016 4096 4096 4096 NT_STATUS_OK
ReadX 14016 8192 4096 4096 NT_STATUS_OK
ReadX 14016 12288 4096 4096 NT_STATUS_OK
ReadX 14016 16384 4096 4096 NT_STATUS_OK
ReadX 14016 20480 4096 4096 NT_STATUS_OK
ReadX 14016 24576 4096 4096 NT_STATUS_OK
ReadX 14016 28672 4096 4096 NT_STATUS_OK
ReadX 14016 32768 4096 4096 NT_STATUS_OK
ReadX 14016 36864 4096 4096 NT_STATUS_OK
ReadX 14016 40960 4096 4096 NT_STATUS_OK
ReadX 14016 45056 4096 4096 NT_STATUS_OK
ReadX 14016 49152 4096 4096 NT_STATUS_OK
ReadX 14016 53248 4096 4096 NT_STATUS_OK
ReadX 14016 57344 4096 4096 NT_STATUS_OK
ReadX 14016 61440 4096 4096 NT_STATUS_OK
ReadX 14016 65536 4096 4096 NT_STATUS_OK
ReadX 14016 69632 4096 4096 NT_STATUS_OK
ReadX 14016 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14016 1004 NT_STATUS_OK
WriteX 14016 0 4096 4096 NT_STATUS_OK
Close 14016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14017 NT_STATUS_OK
SET_FILE_INFORMATION 14017 1004 NT_STATUS_OK
Close 14017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14022 NT_STATUS_OK
WriteX 14022 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14022 258 NT_STATUS_OK
WriteX 14022 0 65536 65536 NT_STATUS_OK
WriteX 14022 65536 19979 19979 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
QUERY_FILE_INFORMATION 14023 1004 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
SET_FILE_INFORMATION 14023 1004 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14028 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14031 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14034 NT_STATUS_OK
WriteX 14034 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14034 258 NT_STATUS_OK
WriteX 14034 0 65536 65536 NT_STATUS_OK
WriteX 14034 65536 17654 17654 NT_STATUS_OK
Close 14034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 4096 4096 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 1004 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
SET_FILE_INFORMATION 14035 1004 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14036 NT_STATUS_OK
SET_FILE_INFORMATION 14036 1004 NT_STATUS_OK
Close 14036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 14038 NT_STATUS_OK
Close 14038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
ReadX 14040 4096 4096 4096 NT_STATUS_OK
ReadX 14040 8192 4096 4096 NT_STATUS_OK
ReadX 14040 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14040 16384 4096 4096 NT_STATUS_OK
ReadX 14040 20480 4096 4096 NT_STATUS_OK
ReadX 14040 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
Close 14042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14049 NT_STATUS_OK
WriteX 14049 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14049 258 NT_STATUS_OK
WriteX 14049 0 65536 65536 NT_STATUS_OK
WriteX 14049 65536 19490 19490 NT_STATUS_OK
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
QUERY_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
SET_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14051 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14055 0 4096 4096 NT_STATUS_OK
Close 14055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14056 NT_STATUS_OK
ReadX 14056 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
ReadX 14057 4096 4096 4096 NT_STATUS_OK
ReadX 14057 8192 4096 4096 NT_STATUS_OK
ReadX 14057 12288 4096 4096 NT_STATUS_OK
ReadX 14057 16384 4096 4096 NT_STATUS_OK
ReadX 14057 20480 4096 4096 NT_STATUS_OK
ReadX 14057 24576 4096 4096 NT_STATUS_OK
ReadX 14057 28672 4096 4096 NT_STATUS_OK
ReadX 14057 32768 4096 4096 NT_STATUS_OK
ReadX 14057 36864 4096 4096 NT_STATUS_OK
ReadX 14057 40960 4096 4096 NT_STATUS_OK
ReadX 14057 45056 4096 4096 NT_STATUS_OK
ReadX 14057 49152 4096 4096 NT_STATUS_OK
ReadX 14057 53248 4096 4096 NT_STATUS_OK
ReadX 14057 57344 4096 4096 NT_STATUS_OK
ReadX 14057 61440 4096 4096 NT_STATUS_OK
ReadX 14057 65536 4096 4096 NT_STATUS_OK
ReadX 14057 69632 4096 4096 NT_STATUS_OK
ReadX 14057 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14057 1004 NT_STATUS_OK
WriteX 14057 0 4096 4096 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14058 NT_STATUS_OK
SET_FILE_INFORMATION 14058 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14060 NT_STATUS_OK
Close 14060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14063 NT_STATUS_OK
WriteX 14063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 258 NT_STATUS_OK
WriteX 14063 0 65536 65536 NT_STATUS_OK
WriteX 14063 65536 8866 8866 NT_STATUS_OK
Close 14063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
WriteX 14064 0 4096 4096 NT_STATUS_OK
Flush 14064 NT_STATUS_OK
SET_FILE_INFORMATION 14064 1004 NT_STATUS_OK
WriteX 14064 0 4096 4096 NT_STATUS_OK
Flush 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14068 1004 NT_STATUS_OK
WriteX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14071 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14074 NT_STATUS_OK
WriteX 14074 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14074 258 NT_STATUS_OK
WriteX 14074 0 65536 65536 NT_STATUS_OK
WriteX 14074 65536 9298 9298 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
WriteX 14075 0 4096 4096 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
SET_FILE_INFORMATION 14075 1004 NT_STATUS_OK
WriteX 14075 0 4096 4096 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14076 NT_STATUS_OK
SET_FILE_INFORMATION 14076 1004 NT_STATUS_OK
Close 14076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14081 0 4096 4096 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14082 4096 4096 4096 NT_STATUS_OK
ReadX 14082 8192 4096 4096 NT_STATUS_OK
ReadX 14082 12288 4096 4096 NT_STATUS_OK
ReadX 14082 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14085 1004 NT_STATUS_OK
WriteX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 14086 NT_STATUS_OK
Close 14086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14091 NT_STATUS_OK
WriteX 14091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 258 NT_STATUS_OK
WriteX 14091 0 65536 65536 NT_STATUS_OK
WriteX 14091 65536 11540 11540 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
SET_FILE_INFORMATION 14092 1004 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14093 NT_STATUS_OK
SET_FILE_INFORMATION 14093 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9815 NT_STATUS_OK
ReadX 9815 61440 4096 4096 NT_STATUS_OK
ReadX 9815 126976 4096 4096 NT_STATUS_OK
WriteX 9815 0 65536 65536 NT_STATUS_OK
WriteX 9815 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9816 NT_STATUS_OK
ReadX 9816 61440 4096 4096 NT_STATUS_OK
ReadX 9816 126976 4096 4096 NT_STATUS_OK
ReadX 9816 192512 4096 4096 NT_STATUS_OK
ReadX 9816 258048 4096 4096 NT_STATUS_OK
WriteX 9816 0 65536 65536 NT_STATUS_OK
WriteX 9816 65536 65536 65536 NT_STATUS_OK
WriteX 9816 131072 65536 65536 NT_STATUS_OK
WriteX 9816 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 61440 4096 4096 NT_STATUS_OK
ReadX 9817 126976 4096 4096 NT_STATUS_OK
ReadX 9817 192512 4096 4096 NT_STATUS_OK
ReadX 9817 258048 4096 4096 NT_STATUS_OK
ReadX 9817 323584 4096 4096 NT_STATUS_OK
ReadX 9817 389120 4096 4096 NT_STATUS_OK
ReadX 9817 454656 4096 4096 NT_STATUS_OK
ReadX 9817 520192 4096 4096 NT_STATUS_OK
WriteX 9817 0 65536 65536 NT_STATUS_OK
WriteX 9817 65536 65536 65536 NT_STATUS_OK
WriteX 9817 131072 65536 65536 NT_STATUS_OK
WriteX 9817 196608 65536 65536 NT_STATUS_OK
WriteX 9817 262144 65536 65536 NT_STATUS_OK
WriteX 9817 327680 65536 65536 NT_STATUS_OK
WriteX 9817 393216 65536 65536 NT_STATUS_OK
WriteX 9817 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9818 NT_STATUS_OK
ReadX 9818 0 4096 4096 NT_STATUS_OK
ReadX 9818 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9819 NT_STATUS_OK
WriteX 9819 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9819 258 NT_STATUS_OK
WriteX 9819 0 53 53 NT_STATUS_OK
Close 9819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9820 NT_STATUS_OK
Close 9820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9816 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9818 8192 4096 4096 NT_STATUS_OK
ReadX 9818 12288 4096 4096 NT_STATUS_OK
WriteX 9822 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9822 258 NT_STATUS_OK
ReadX 9818 16384 4096 4096 NT_STATUS_OK
ReadX 9818 20480 4096 4096 NT_STATUS_OK
WriteX 9822 0 15360 15360 NT_STATUS_OK
Close 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9823 NT_STATUS_OK
ReadX 9823 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9823 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9823 1004 NT_STATUS_OK
WriteX 9823 0 4096 4096 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9824 NT_STATUS_OK
Close 9824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9826 NT_STATUS_OK
ReadX 9826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9827 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9826 4096 4096 4096 NT_STATUS_OK
ReadX 9826 8192 4096 4096 NT_STATUS_OK
ReadX 9826 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9829 NT_STATUS_OK
ReadX 9829 0 4096 4096 NT_STATUS_OK
ReadX 9829 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9830 NT_STATUS_OK
ReadX 9830 0 4096 4096 NT_STATUS_OK
ReadX 9830 4096 4096 4096 NT_STATUS_OK
ReadX 9830 8192 4096 4096 NT_STATUS_OK
Close 9829 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9831 NT_STATUS_OK
WriteX 9831 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 258 NT_STATUS_OK
WriteX 9831 0 15360 15360 NT_STATUS_OK
Close 9831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9832 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9835 NT_STATUS_OK
ReadX 9835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9836 NT_STATUS_OK
SET_FILE_INFORMATION 9836 1004 NT_STATUS_OK
Close 9836 NT_STATUS_OK
WriteX 9832 0 4096 4096 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9837 NT_STATUS_OK
Close 9837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 4096 4096 NT_STATUS_OK
ReadX 9839 4096 4096 4096 NT_STATUS_OK
ReadX 9839 8192 4096 4096 NT_STATUS_OK
ReadX 9839 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9839 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9839 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9841 NT_STATUS_OK
WriteX 9841 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9841 258 NT_STATUS_OK
WriteX 9841 0 53 53 NT_STATUS_OK
Close 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9842 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9840 4096 4096 4096 NT_STATUS_OK
ReadX 9840 8192 4096 4096 NT_STATUS_OK
ReadX 9840 12288 4096 4096 NT_STATUS_OK
WriteX 9844 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 258 NT_STATUS_OK
WriteX 9844 0 12006 12006 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9845 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9845 1004 NT_STATUS_OK
WriteX 9845 0 4096 4096 NT_STATUS_OK
Close 9845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9846 NT_STATUS_OK
Close 9846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9848 NT_STATUS_OK
ReadX 9848 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9849 NT_STATUS_OK
Close 9849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9848 4096 4096 4096 NT_STATUS_OK
ReadX 9848 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9851 NT_STATUS_OK
WriteX 9851 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 258 NT_STATUS_OK
WriteX 9851 0 11991 11991 NT_STATUS_OK
Close 9851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9853 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9856 NT_STATUS_OK
SET_FILE_INFORMATION 9856 1004 NT_STATUS_OK
Close 9856 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
Close 9852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9857 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9860 NT_STATUS_OK
Close 9860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9859 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
ReadX 9859 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
WriteX 9859 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
Close 9835 NT_STATUS_OK
WriteX 9839 0 19054 19054 NT_STATUS_OK
WriteX 9859 0 12288 12288 NT_STATUS_OK
Close 9855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9862 NT_STATUS_OK
Close 9862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9864 NT_STATUS_OK
Close 9864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 61440 61440 NT_STATUS_OK
ReadX 9866 61440 4096 4096 NT_STATUS_OK
ReadX 9866 65536 61440 61440 NT_STATUS_OK
ReadX 9866 126976 4096 4096 NT_STATUS_OK
ReadX 9866 131072 61440 61440 NT_STATUS_OK
ReadX 9866 192512 4096 4096 NT_STATUS_OK
ReadX 9866 196608 61440 61440 NT_STATUS_OK
ReadX 9866 258048 4096 4096 NT_STATUS_OK
ReadX 9866 262144 61440 61440 NT_STATUS_OK
ReadX 9866 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 61440 61440 NT_STATUS_OK
ReadX 9867 61440 4096 4096 NT_STATUS_OK
ReadX 9867 65536 61440 61440 NT_STATUS_OK
ReadX 9867 126976 4096 4096 NT_STATUS_OK
ReadX 9867 131072 61440 61440 NT_STATUS_OK
ReadX 9867 192512 4096 4096 NT_STATUS_OK
ReadX 9867 196608 61440 61440 NT_STATUS_OK
ReadX 9867 258048 4096 4096 NT_STATUS_OK
ReadX 9867 262144 61440 61440 NT_STATUS_OK
ReadX 9867 323584 4096 4096 NT_STATUS_OK
ReadX 9867 327680 61440 61440 NT_STATUS_OK
ReadX 9867 389120 4096 4096 NT_STATUS_OK
ReadX 9867 393216 61440 61440 NT_STATUS_OK
ReadX 9867 454656 4096 4096 NT_STATUS_OK
ReadX 9867 458752 61440 61440 NT_STATUS_OK
ReadX 9867 520192 4096 4096 NT_STATUS_OK
ReadX 9867 524288 61440 61440 NT_STATUS_OK
ReadX 9867 585728 4096 4096 NT_STATUS_OK
ReadX 9867 589824 61440 61440 NT_STATUS_OK
ReadX 9867 651264 4096 4096 NT_STATUS_OK
ReadX 9867 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 61440 61440 NT_STATUS_OK
ReadX 9868 61440 4096 4096 NT_STATUS_OK
ReadX 9868 65536 61440 61440 NT_STATUS_OK
ReadX 9868 126976 4096 4096 NT_STATUS_OK
ReadX 9868 131072 61440 61440 NT_STATUS_OK
ReadX 9868 192512 4096 4096 NT_STATUS_OK
ReadX 9868 196608 61440 61440 NT_STATUS_OK
ReadX 9868 258048 4096 4096 NT_STATUS_OK
ReadX 9868 262144 61440 61440 NT_STATUS_OK
ReadX 9868 323584 4096 4096 NT_STATUS_OK
ReadX 9868 327680 61440 61440 NT_STATUS_OK
ReadX 9868 389120 4096 4096 NT_STATUS_OK
ReadX 9868 393216 61440 61440 NT_STATUS_OK
ReadX 9868 454656 4096 4096 NT_STATUS_OK
ReadX 9868 458752 61440 61440 NT_STATUS_OK
ReadX 9868 520192 4096 4096 NT_STATUS_OK
ReadX 9868 524288 61440 61440 NT_STATUS_OK
ReadX 9868 585728 4096 4096 NT_STATUS_OK
ReadX 9868 589824 61440 61440 NT_STATUS_OK
ReadX 9868 651264 4096 4096 NT_STATUS_OK
ReadX 9868 655360 61440 61440 NT_STATUS_OK
ReadX 9868 716800 4096 4096 NT_STATUS_OK
ReadX 9868 720896 61440 61440 NT_STATUS_OK
ReadX 9868 782336 4096 4096 NT_STATUS_OK
ReadX 9868 786432 61440 61440 NT_STATUS_OK
ReadX 9868 847872 4096 4096 NT_STATUS_OK
ReadX 9868 851968 61440 61440 NT_STATUS_OK
ReadX 9868 913408 4096 4096 NT_STATUS_OK
ReadX 9868 917504 61440 61440 NT_STATUS_OK
ReadX 9868 978944 4096 4096 NT_STATUS_OK
ReadX 9868 983040 61440 61440 NT_STATUS_OK
ReadX 9868 1044480 4096 4096 NT_STATUS_OK
ReadX 9868 1048576 61440 61440 NT_STATUS_OK
ReadX 9868 1110016 4096 4096 NT_STATUS_OK
ReadX 9868 1114112 61440 61440 NT_STATUS_OK
ReadX 9868 1175552 4096 4096 NT_STATUS_OK
ReadX 9868 1179648 61440 61440 NT_STATUS_OK
ReadX 9868 1241088 4096 4096 NT_STATUS_OK
ReadX 9868 1245184 61440 61440 NT_STATUS_OK
ReadX 9868 1306624 4096 4096 NT_STATUS_OK
ReadX 9868 1310720 61440 61440 NT_STATUS_OK
ReadX 9868 1372160 4096 4096 NT_STATUS_OK
ReadX 9868 1376256 61440 61440 NT_STATUS_OK
ReadX 9868 1437696 4096 4096 NT_STATUS_OK
ReadX 9868 1441792 61440 61440 NT_STATUS_OK
ReadX 9868 1503232 4096 4096 NT_STATUS_OK
ReadX 9868 1507328 61440 61440 NT_STATUS_OK
ReadX 9868 1568768 4096 4096 NT_STATUS_OK
ReadX 9868 1572864 61440 61440 NT_STATUS_OK
ReadX 9868 1634304 4096 4096 NT_STATUS_OK
ReadX 9868 1638400 61440 61440 NT_STATUS_OK
ReadX 9868 1699840 4096 4096 NT_STATUS_OK
ReadX 9868 1703936 61440 61440 NT_STATUS_OK
ReadX 9868 1765376 4096 4096 NT_STATUS_OK
ReadX 9868 1769472 61440 61440 NT_STATUS_OK
ReadX 9868 1830912 4096 4096 NT_STATUS_OK
ReadX 9868 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9871 NT_STATUS_OK
ReadX 9871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9872 NT_STATUS_OK
ReadX 9872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9873 NT_STATUS_OK
ReadX 9873 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9875 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 1004 NT_STATUS_OK
WriteX 9875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9876 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9877 NT_STATUS_OK
WriteX 9877 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 491 491 NT_STATUS_OK
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9875 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9880 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9881 NT_STATUS_OK
WriteX 9881 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 258 NT_STATUS_OK
WriteX 9881 0 543 543 NT_STATUS_OK
Close 9881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9882 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Close 9871 NT_STATUS_OK
Close 9872 NT_STATUS_OK
Close 9873 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9895 NT_STATUS_OK
QUERY_FILE_INFORMATION 9895 1004 NT_STATUS_OK
WriteX 9895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9895 258 NT_STATUS_OK
WriteX 9895 0 2048 2048 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9896 0 4096 4096 NT_STATUS_OK
Flush 9896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9896 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9901 NT_STATUS_OK
WriteX 9901 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9901 258 NT_STATUS_OK
WriteX 9901 0 2048 2048 NT_STATUS_OK
Close 9901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9906 NT_STATUS_OK
Close 9906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9907 NT_STATUS_OK
WriteX 9907 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9907 258 NT_STATUS_OK
WriteX 9907 0 2048 2048 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 2048 2048 NT_STATUS_OK
ReadX 9886 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9902 0 4096 4096 NT_STATUS_OK
WriteX 9886 0 8192 8192 NT_STATUS_OK
WriteX 9887 0 4096 4096 NT_STATUS_OK
WriteX 9888 0 4096 4096 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9911 NT_STATUS_OK
ReadX 9911 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9912 NT_STATUS_OK
QUERY_FILE_INFORMATION 9912 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9911 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9888 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9917 NT_STATUS_OK
ReadX 9917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9918 NT_STATUS_OK
ReadX 9918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9919 NT_STATUS_OK
ReadX 9919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9920 NT_STATUS_OK
ReadX 9920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9922 NT_STATUS_OK
ReadX 9922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9923 NT_STATUS_OK
ReadX 9923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9932 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 258 NT_STATUS_OK
WriteX 9932 0 2048 2048 NT_STATUS_OK
Close 9932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9933 NT_STATUS_OK
ReadX 9933 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9935 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9940 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 1004 NT_STATUS_OK
WriteX 9940 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 258 NT_STATUS_OK
WriteX 9940 0 2048 2048 NT_STATUS_OK
Close 9940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9933 0 4096 4096 NT_STATUS_OK
Flush 9933 NT_STATUS_OK
WriteX 9941 0 4096 4096 NT_STATUS_OK
Flush 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9935 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9943 NT_STATUS_OK
WriteX 9943 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9943 258 NT_STATUS_OK
WriteX 9943 0 4096 4096 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9945 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9946 NT_STATUS_OK
WriteX 9946 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 4096 4096 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9947 0 4096 4096 NT_STATUS_OK
Close 9944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Close 9935 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9922 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Close 9916 NT_STATUS_OK
Close 9919 NT_STATUS_OK
Close 9920 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Close 9918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9954 NT_STATUS_OK
WriteX 9954 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9954 258 NT_STATUS_OK
WriteX 9954 0 2048 2048 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9957 NT_STATUS_OK
ReadX 9957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9959 NT_STATUS_OK
ReadX 9959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9960 NT_STATUS_OK
ReadX 9960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9961 NT_STATUS_OK
ReadX 9961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9963 NT_STATUS_OK
ReadX 9963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9969 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Close 9963 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9968 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Close 9957 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Close 9961 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Close 9959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9971 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9975 NT_STATUS_OK
ReadX 9975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9981 NT_STATUS_OK
ReadX 9981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9982 NT_STATUS_OK
ReadX 9982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9983 NT_STATUS_OK
ReadX 9983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9991 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 1004 NT_STATUS_OK
WriteX 9991 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 2048 2048 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9995 NT_STATUS_OK
ReadX 9995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9998 NT_STATUS_OK
ReadX 9998 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10003 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 1004 NT_STATUS_OK
WriteX 10003 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 258 NT_STATUS_OK
WriteX 10003 0 2048 2048 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10011 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 1004 NT_STATUS_OK
WriteX 10011 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 2048 2048 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 4096 16384 16384 NT_STATUS_OK
ReadX 9974 4096 16384 16384 NT_STATUS_OK
ReadX 10006 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 2048 2048 NT_STATUS_OK
WriteX 10014 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10015 NT_STATUS_OK
QUERY_FILE_INFORMATION 10015 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 9998 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9978 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Close 9996 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Close 9981 NT_STATUS_OK
Close 9982 NT_STATUS_OK
Close 9974 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9976 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10017 NT_STATUS_OK
QUERY_FILE_INFORMATION 10017 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10025 NT_STATUS_OK
ReadX 10025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10022 4096 16384 16384 NT_STATUS_OK
WriteX 10022 0 4096 4096 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10028 NT_STATUS_OK
ReadX 10028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10036 NT_STATUS_OK
ReadX 10036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10037 NT_STATUS_OK
ReadX 10037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 8192 8192 NT_STATUS_OK
ReadX 10028 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10042 0 4096 4096 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 4096 4096 NT_STATUS_OK
WriteX 10028 0 4096 4096 NT_STATUS_OK
WriteX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10043 0 4096 4096 NT_STATUS_OK
ReadX 10043 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10022 0 4096 4096 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10048 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 258 NT_STATUS_OK
WriteX 10048 0 2048 2048 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
ReadX 10051 4096 4096 4096 NT_STATUS_OK
WriteX 10051 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
ReadX 10053 4096 4096 4096 NT_STATUS_OK
WriteX 10053 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10054 NT_STATUS_OK
QUERY_FILE_INFORMATION 10054 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Close 10026 NT_STATUS_OK
Close 10022 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Close 10024 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Close 10034 NT_STATUS_OK
Close 10039 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Close 10036 NT_STATUS_OK
Close 10037 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Close 10028 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10030 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Close 10042 NT_STATUS_OK
Close 10043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10056 0 4096 4096 NT_STATUS_OK
ReadX 10056 4096 4096 4096 NT_STATUS_OK
ReadX 10056 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10059 NT_STATUS_OK
ReadX 10059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10068 NT_STATUS_OK
ReadX 10068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 4096 4096 NT_STATUS_OK
ReadX 10057 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10074 NT_STATUS_OK
QUERY_FILE_INFORMATION 10074 1004 NT_STATUS_OK
WriteX 10074 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10074 258 NT_STATUS_OK
WriteX 10074 0 2048 2048 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10075 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10079 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10080 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 1004 NT_STATUS_OK
WriteX 10080 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 2048 2048 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10064 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10082 NT_STATUS_OK
QUERY_FILE_INFORMATION 10082 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10058 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10059 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10084 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 61440 4096 4096 NT_STATUS_OK
ReadX 10086 126976 4096 4096 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 61440 4096 4096 NT_STATUS_OK
ReadX 10087 126976 4096 4096 NT_STATUS_OK
ReadX 10087 192512 4096 4096 NT_STATUS_OK
ReadX 10087 258048 4096 4096 NT_STATUS_OK
WriteX 10087 0 65536 65536 NT_STATUS_OK
WriteX 10087 65536 65536 65536 NT_STATUS_OK
WriteX 10087 131072 65536 65536 NT_STATUS_OK
WriteX 10087 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 61440 4096 4096 NT_STATUS_OK
ReadX 10088 126976 4096 4096 NT_STATUS_OK
ReadX 10088 192512 4096 4096 NT_STATUS_OK
ReadX 10088 258048 4096 4096 NT_STATUS_OK
ReadX 10088 323584 4096 4096 NT_STATUS_OK
ReadX 10088 389120 4096 4096 NT_STATUS_OK
ReadX 10088 454656 4096 4096 NT_STATUS_OK
ReadX 10088 520192 4096 4096 NT_STATUS_OK
WriteX 10088 0 65536 65536 NT_STATUS_OK
WriteX 10088 65536 65536 65536 NT_STATUS_OK
WriteX 10088 131072 65536 65536 NT_STATUS_OK
WriteX 10088 196608 65536 65536 NT_STATUS_OK
WriteX 10088 262144 65536 65536 NT_STATUS_OK
WriteX 10088 327680 65536 65536 NT_STATUS_OK
WriteX 10088 393216 65536 65536 NT_STATUS_OK
WriteX 10088 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10089 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
ReadX 10089 20480 4096 4096 NT_STATUS_OK
ReadX 10089 24576 4096 4096 NT_STATUS_OK
ReadX 10089 28672 4096 4096 NT_STATUS_OK
ReadX 10089 32768 4096 4096 NT_STATUS_OK
ReadX 10089 36864 4096 4096 NT_STATUS_OK
ReadX 10089 40960 4096 4096 NT_STATUS_OK
ReadX 10089 45056 4096 4096 NT_STATUS_OK
ReadX 10089 49152 4096 4096 NT_STATUS_OK
ReadX 10089 53248 4096 4096 NT_STATUS_OK
ReadX 10089 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10089 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10092 NT_STATUS_OK
WriteX 10092 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10092 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 57088 57088 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
Flush 10092 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10093 NT_STATUS_OK
SET_FILE_INFORMATION 10093 1004 NT_STATUS_OK
Close 10093 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10094 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10097 NT_STATUS_OK
WriteX 10097 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10097 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
WriteX 10097 0 51456 51456 NT_STATUS_OK
WriteX 10097 0 4096 4096 NT_STATUS_OK
Flush 10097 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
WriteX 10097 0 4096 4096 NT_STATUS_OK
Close 10097 NT_STATUS_OK
Close 10096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10101 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10106 NT_STATUS_OK
WriteX 10106 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 258 NT_STATUS_OK
WriteX 10106 0 53077 53077 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10107 NT_STATUS_OK
WriteX 10107 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
WriteX 10107 0 65536 65536 NT_STATUS_OK
WriteX 10107 65536 1856 1856 NT_STATUS_OK
WriteX 10107 0 4096 4096 NT_STATUS_OK
Flush 10107 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
WriteX 10107 0 4096 4096 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10116 NT_STATUS_OK
WriteX 10116 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10116 258 NT_STATUS_OK
WriteX 10116 0 7983 7983 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10118 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10121 NT_STATUS_OK
WriteX 10121 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10121 258 NT_STATUS_OK
WriteX 10121 0 65536 65536 NT_STATUS_OK
WriteX 10121 65536 65536 65536 NT_STATUS_OK
WriteX 10121 131072 65536 65536 NT_STATUS_OK
WriteX 10121 196608 65536 65536 NT_STATUS_OK
WriteX 10121 262144 65536 65536 NT_STATUS_OK
WriteX 10121 327680 65536 65536 NT_STATUS_OK
WriteX 10121 393216 65536 65536 NT_STATUS_OK
WriteX 10121 458752 46731 46731 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10111 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
WriteX 10122 0 65536 65536 NT_STATUS_OK
WriteX 10122 65536 22848 22848 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
Flush 10122 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10126 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10127 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10127 1004 NT_STATUS_OK
ReadX 10127 8192 4096 4096 NT_STATUS_OK
ReadX 10127 12288 4096 4096 NT_STATUS_OK
ReadX 10127 16384 4096 4096 NT_STATUS_OK
ReadX 10127 20480 4096 4096 NT_STATUS_OK
ReadX 10127 24576 4096 4096 NT_STATUS_OK
ReadX 10127 28672 4096 4096 NT_STATUS_OK
ReadX 10127 32768 4096 4096 NT_STATUS_OK
ReadX 10127 36864 4096 4096 NT_STATUS_OK
ReadX 10127 40960 4096 4096 NT_STATUS_OK
ReadX 10127 45056 4096 4096 NT_STATUS_OK
ReadX 10127 49152 4096 4096 NT_STATUS_OK
ReadX 10127 53248 4096 4096 NT_STATUS_OK
ReadX 10127 57344 4096 4096 NT_STATUS_OK
ReadX 10127 61440 4096 4096 NT_STATUS_OK
ReadX 10127 65536 4096 4096 NT_STATUS_OK
ReadX 10127 69632 4096 4096 NT_STATUS_OK
ReadX 10127 73728 4096 4096 NT_STATUS_OK
ReadX 10127 77824 4096 4096 NT_STATUS_OK
ReadX 10127 81920 4096 4096 NT_STATUS_OK
ReadX 10127 86016 4096 4096 NT_STATUS_OK
ReadX 10127 90112 4096 4096 NT_STATUS_OK
ReadX 10127 94208 4096 4096 NT_STATUS_OK
ReadX 10127 98304 4096 4096 NT_STATUS_OK
ReadX 10127 102400 4096 4096 NT_STATUS_OK
ReadX 10127 106496 4096 4096 NT_STATUS_OK
ReadX 10127 110592 4096 4096 NT_STATUS_OK
ReadX 10127 114688 4096 4096 NT_STATUS_OK
ReadX 10127 118784 4096 4096 NT_STATUS_OK
ReadX 10127 122880 4096 4096 NT_STATUS_OK
ReadX 10127 126976 4096 4096 NT_STATUS_OK
ReadX 10127 131072 4096 4096 NT_STATUS_OK
ReadX 10127 135168 4096 4096 NT_STATUS_OK
ReadX 10127 139264 4096 4096 NT_STATUS_OK
ReadX 10127 143360 4096 4096 NT_STATUS_OK
ReadX 10127 147456 4096 4096 NT_STATUS_OK
ReadX 10127 151552 4096 4096 NT_STATUS_OK
ReadX 10127 155648 4096 4096 NT_STATUS_OK
Close 10126 NT_STATUS_OK
ReadX 10127 159744 4096 4096 NT_STATUS_OK
ReadX 10127 163840 4096 4096 NT_STATUS_OK
ReadX 10127 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10127 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10128 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10130 NT_STATUS_OK
WriteX 10130 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 258 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10131 NT_STATUS_OK
SET_FILE_INFORMATION 10131 1004 NT_STATUS_OK
Close 10131 NT_STATUS_OK
WriteX 10130 0 42388 42388 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 0 4096 4096 NT_STATUS_OK
ReadX 10134 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10135 NT_STATUS_OK
WriteX 10135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
SET_FILE_INFORMATION 10135 1004 NT_STATUS_OK
WriteX 10135 0 42652 42652 NT_STATUS_OK
Close 10135 NT_STATUS_OK
Close 10134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10137 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 4096 4096 NT_STATUS_OK
ReadX 10139 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10144 NT_STATUS_OK
WriteX 10144 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10144 258 NT_STATUS_OK
WriteX 10144 0 65536 65536 NT_STATUS_OK
WriteX 10144 65536 49 49 NT_STATUS_OK
Close 10144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 61440 61440 NT_STATUS_OK
ReadX 10145 61440 4096 4096 NT_STATUS_OK
ReadX 10145 65536 61440 61440 NT_STATUS_OK
ReadX 10145 126976 4096 4096 NT_STATUS_OK
ReadX 10145 131072 61440 61440 NT_STATUS_OK
ReadX 10145 192512 4096 4096 NT_STATUS_OK
ReadX 10145 196608 61440 61440 NT_STATUS_OK
ReadX 10145 258048 4096 4096 NT_STATUS_OK
ReadX 10145 262144 61440 61440 NT_STATUS_OK
ReadX 10145 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10146 NT_STATUS_OK
ReadX 10146 0 61440 61440 NT_STATUS_OK
ReadX 10146 61440 4096 4096 NT_STATUS_OK
ReadX 10146 65536 61440 61440 NT_STATUS_OK
ReadX 10146 126976 4096 4096 NT_STATUS_OK
ReadX 10146 131072 61440 61440 NT_STATUS_OK
ReadX 10146 192512 4096 4096 NT_STATUS_OK
ReadX 10146 196608 61440 61440 NT_STATUS_OK
ReadX 10146 258048 4096 4096 NT_STATUS_OK
ReadX 10146 262144 61440 61440 NT_STATUS_OK
ReadX 10146 323584 4096 4096 NT_STATUS_OK
ReadX 10146 327680 61440 61440 NT_STATUS_OK
ReadX 10146 389120 4096 4096 NT_STATUS_OK
ReadX 10146 393216 61440 61440 NT_STATUS_OK
ReadX 10146 454656 4096 4096 NT_STATUS_OK
ReadX 10146 458752 61440 61440 NT_STATUS_OK
ReadX 10146 520192 4096 4096 NT_STATUS_OK
ReadX 10146 524288 61440 61440 NT_STATUS_OK
ReadX 10146 585728 4096 4096 NT_STATUS_OK
ReadX 10146 589824 61440 61440 NT_STATUS_OK
ReadX 10146 651264 4096 4096 NT_STATUS_OK
ReadX 10146 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10147 NT_STATUS_OK
ReadX 10147 0 61440 61440 NT_STATUS_OK
ReadX 10147 61440 4096 4096 NT_STATUS_OK
ReadX 10147 65536 61440 61440 NT_STATUS_OK
ReadX 10147 126976 4096 4096 NT_STATUS_OK
ReadX 10147 131072 61440 61440 NT_STATUS_OK
ReadX 10147 192512 4096 4096 NT_STATUS_OK
ReadX 10147 196608 61440 61440 NT_STATUS_OK
ReadX 10147 258048 4096 4096 NT_STATUS_OK
ReadX 10147 262144 61440 61440 NT_STATUS_OK
ReadX 10147 323584 4096 4096 NT_STATUS_OK
ReadX 10147 327680 61440 61440 NT_STATUS_OK
ReadX 10147 389120 4096 4096 NT_STATUS_OK
ReadX 10147 393216 61440 61440 NT_STATUS_OK
ReadX 10147 454656 4096 4096 NT_STATUS_OK
ReadX 10147 458752 61440 61440 NT_STATUS_OK
ReadX 10147 520192 4096 4096 NT_STATUS_OK
ReadX 10147 524288 61440 61440 NT_STATUS_OK
ReadX 10147 585728 4096 4096 NT_STATUS_OK
ReadX 10147 589824 61440 61440 NT_STATUS_OK
ReadX 10147 651264 4096 4096 NT_STATUS_OK
ReadX 10147 655360 61440 61440 NT_STATUS_OK
ReadX 10147 716800 4096 4096 NT_STATUS_OK
ReadX 10147 720896 61440 61440 NT_STATUS_OK
ReadX 10147 782336 4096 4096 NT_STATUS_OK
ReadX 10147 786432 61440 61440 NT_STATUS_OK
ReadX 10147 847872 4096 4096 NT_STATUS_OK
ReadX 10147 851968 61440 61440 NT_STATUS_OK
ReadX 10147 913408 4096 4096 NT_STATUS_OK
ReadX 10147 917504 61440 61440 NT_STATUS_OK
ReadX 10147 978944 4096 4096 NT_STATUS_OK
ReadX 10147 983040 61440 61440 NT_STATUS_OK
ReadX 10147 1044480 4096 4096 NT_STATUS_OK
ReadX 10147 1048576 61440 61440 NT_STATUS_OK
ReadX 10147 1110016 4096 4096 NT_STATUS_OK
ReadX 10147 1114112 61440 61440 NT_STATUS_OK
ReadX 10147 1175552 4096 4096 NT_STATUS_OK
ReadX 10147 1179648 61440 61440 NT_STATUS_OK
ReadX 10147 1241088 4096 4096 NT_STATUS_OK
ReadX 10147 1245184 61440 61440 NT_STATUS_OK
ReadX 10147 1306624 4096 4096 NT_STATUS_OK
ReadX 10147 1310720 61440 61440 NT_STATUS_OK
ReadX 10147 1372160 4096 4096 NT_STATUS_OK
ReadX 10147 1376256 61440 61440 NT_STATUS_OK
ReadX 10147 1437696 4096 4096 NT_STATUS_OK
ReadX 10147 1441792 61440 61440 NT_STATUS_OK
ReadX 10147 1503232 4096 4096 NT_STATUS_OK
ReadX 10147 1507328 61440 61440 NT_STATUS_OK
ReadX 10147 1568768 4096 4096 NT_STATUS_OK
ReadX 10147 1572864 61440 61440 NT_STATUS_OK
ReadX 10147 1634304 4096 4096 NT_STATUS_OK
ReadX 10147 1638400 61440 61440 NT_STATUS_OK
ReadX 10147 1699840 4096 4096 NT_STATUS_OK
ReadX 10147 1703936 61440 61440 NT_STATUS_OK
ReadX 10147 1765376 4096 4096 NT_STATUS_OK
ReadX 10147 1769472 61440 61440 NT_STATUS_OK
ReadX 10147 1830912 4096 4096 NT_STATUS_OK
ReadX 10147 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10149 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
ReadX 10149 2156 24 24 NT_STATUS_OK
ReadX 10149 2139 276 276 NT_STATUS_OK
ReadX 10149 2136 14 14 NT_STATUS_OK
ReadX 10149 2136 7 7 NT_STATUS_OK
ReadX 10149 2138 12 12 NT_STATUS_OK
ReadX 10149 2137 8 8 NT_STATUS_OK
ReadX 10149 2135 15 15 NT_STATUS_OK
ReadX 10149 0 16 16 NT_STATUS_OK
ReadX 10149 16 2048 2048 NT_STATUS_OK
ReadX 10149 2064 2048 2048 NT_STATUS_OK
ReadX 10149 257 2048 2048 NT_STATUS_OK
ReadX 10149 385 2048 2048 NT_STATUS_OK
ReadX 10149 513 2048 2048 NT_STATUS_OK
ReadX 10149 641 2048 2048 NT_STATUS_OK
ReadX 10149 769 2048 2048 NT_STATUS_OK
ReadX 10149 897 2048 2048 NT_STATUS_OK
ReadX 10149 1025 2048 2048 NT_STATUS_OK
ReadX 10149 1153 2048 2048 NT_STATUS_OK
ReadX 10149 1281 2048 2048 NT_STATUS_OK
ReadX 10149 1409 2048 2048 NT_STATUS_OK
ReadX 10149 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Close 10147 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10154 NT_STATUS_OK
WriteX 10154 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10154 258 NT_STATUS_OK
WriteX 10154 0 10575 10575 NT_STATUS_OK
Flush 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10159 NT_STATUS_OK
LockX 10159 2147483538 1 NT_STATUS_OK
UnlockX 10159 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1005 NT_STATUS_OK
ReadX 10159 0 512 512 NT_STATUS_OK
ReadX 10159 512 512 512 NT_STATUS_OK
ReadX 10159 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1004 NT_STATUS_OK
Close 10159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10160 NT_STATUS_OK
QUERY_FILE_INFORMATION 10160 1005 NT_STATUS_OK
ReadX 10160 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10161 NT_STATUS_OK
LockX 10161 2147483538 1 NT_STATUS_OK
UnlockX 10161 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10161 1005 NT_STATUS_OK
ReadX 10161 0 512 512 NT_STATUS_OK
ReadX 10161 512 512 512 NT_STATUS_OK
ReadX 10161 1024 512 512 NT_STATUS_OK
ReadX 10161 288 20 20 NT_STATUS_OK
ReadX 10161 308 2084 2084 NT_STATUS_OK
ReadX 10161 388 2084 2084 NT_STATUS_OK
ReadX 10161 388 2084 2084 NT_STATUS_OK
ReadX 10148 2157 1386 1386 NT_STATUS_OK
ReadX 10161 2472 399 399 NT_STATUS_OK
ReadX 10161 3072 1536 1536 NT_STATUS_OK
ReadX 10161 544 149 149 NT_STATUS_OK
ReadX 10161 693 485 485 NT_STATUS_OK
Close 10161 NT_STATUS_OK
ReadX 10148 2157 4096 4096 NT_STATUS_OK
ReadX 10148 6253 4096 4096 NT_STATUS_OK
ReadX 10148 10349 4096 4096 NT_STATUS_OK
ReadX 10148 14445 4096 4096 NT_STATUS_OK
ReadX 10148 18541 4096 4096 NT_STATUS_OK
ReadX 10148 22637 256 256 NT_STATUS_OK
ReadX 10148 22893 4096 4096 NT_STATUS_OK
ReadX 10148 26989 4096 4096 NT_STATUS_OK
ReadX 10148 31085 4096 4096 NT_STATUS_OK
ReadX 10148 35181 4096 4096 NT_STATUS_OK
ReadX 10148 39277 4096 4096 NT_STATUS_OK
ReadX 10148 43373 4096 4096 NT_STATUS_OK
ReadX 10148 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10148 2157 1024 1024 NT_STATUS_OK
ReadX 10148 1667 4688 4688 NT_STATUS_OK
ReadX 10148 6355 3516 3516 NT_STATUS_OK
ReadX 10148 9871 16384 16384 NT_STATUS_OK
ReadX 10148 26255 3771 3771 NT_STATUS_OK
ReadX 10148 30026 2048 2048 NT_STATUS_OK
ReadX 10148 32074 1024 1024 NT_STATUS_OK
ReadX 10148 33098 6652 6652 NT_STATUS_OK
ReadX 10148 39750 16384 16384 NT_STATUS_OK
ReadX 10148 56134 10496 10496 NT_STATUS_OK
ReadX 10148 66630 1784 1784 NT_STATUS_OK
ReadX 10148 68414 90 90 NT_STATUS_OK
ReadX 10148 68504 273 273 NT_STATUS_OK
ReadX 10148 68777 1600 1600 NT_STATUS_OK
ReadX 10148 70377 640 640 NT_STATUS_OK
ReadX 10148 71017 1280 1280 NT_STATUS_OK
ReadX 10148 72297 8464 8464 NT_STATUS_OK
ReadX 10148 80761 158 158 NT_STATUS_OK
ReadX 10148 80919 912 912 NT_STATUS_OK
ReadX 10148 81831 1980 1980 NT_STATUS_OK
ReadX 10148 83811 2256 2256 NT_STATUS_OK
ReadX 10148 86067 400 400 NT_STATUS_OK
ReadX 10148 86467 252 252 NT_STATUS_OK
ReadX 10148 86719 42 42 NT_STATUS_OK
ReadX 10148 86761 725 725 NT_STATUS_OK
ReadX 10148 2009 512 512 NT_STATUS_OK
ReadX 10148 3895 9 9 NT_STATUS_OK
ReadX 10148 3781 46 46 NT_STATUS_OK
ReadX 10148 4059 92 92 NT_STATUS_OK
ReadX 10148 3781 92 92 NT_STATUS_OK
ReadX 10148 3986 184 184 NT_STATUS_OK
ReadX 10148 3987 16384 16384 NT_STATUS_OK
ReadX 10148 3902 16384 16384 NT_STATUS_OK
ReadX 10148 3781 10240 10240 NT_STATUS_OK
ReadX 10148 3821 16384 16384 NT_STATUS_OK
ReadX 10148 3891 935 935 NT_STATUS_OK
ReadX 10148 4060 10240 10240 NT_STATUS_OK
ReadX 10148 4059 184 184 NT_STATUS_OK
ReadX 10148 256 184 184 NT_STATUS_OK
ReadX 10148 256 1026 1026 NT_STATUS_OK
ReadX 10148 3901 326 326 NT_STATUS_OK
ReadX 10148 3899 652 652 NT_STATUS_OK
ReadX 10148 256 2 2 NT_STATUS_OK
ReadX 10148 258 4948 4948 NT_STATUS_OK
Close 10148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10163 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10166 NT_STATUS_OK
WriteX 10166 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 65536 65536 NT_STATUS_OK
WriteX 10166 65536 65536 65536 NT_STATUS_OK
WriteX 10166 131072 65536 65536 NT_STATUS_OK
WriteX 10166 196608 65536 65536 NT_STATUS_OK
WriteX 10166 262144 65536 65536 NT_STATUS_OK
WriteX 10166 327680 65536 65536 NT_STATUS_OK
WriteX 10166 393216 65536 65536 NT_STATUS_OK
WriteX 10166 458752 65536 65536 NT_STATUS_OK
WriteX 10166 524288 65536 65536 NT_STATUS_OK
WriteX 10166 589824 35257 35257 NT_STATUS_OK
Close 10166 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10168 NT_STATUS_OK
Close 10168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10171 NT_STATUS_OK
WriteX 10171 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 258 NT_STATUS_OK
WriteX 10171 0 65536 65536 NT_STATUS_OK
WriteX 10171 65536 65536 65536 NT_STATUS_OK
WriteX 10171 131072 65536 65536 NT_STATUS_OK
WriteX 10171 196608 65536 65536 NT_STATUS_OK
WriteX 10171 262144 65536 65536 NT_STATUS_OK
WriteX 10171 327680 65536 65536 NT_STATUS_OK
WriteX 10171 393216 65536 65536 NT_STATUS_OK
WriteX 10171 458752 65536 65536 NT_STATUS_OK
WriteX 10171 524288 65536 65536 NT_STATUS_OK
WriteX 10171 589824 57598 57598 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10173 NT_STATUS_OK
WriteX 10173 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 258 NT_STATUS_OK
WriteX 10173 0 12543 12543 NT_STATUS_OK
Flush 10173 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10175 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10179 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
ReadX 10179 1938 24 24 NT_STATUS_OK
ReadX 10179 1920 276 276 NT_STATUS_OK
ReadX 10179 1918 14 14 NT_STATUS_OK
ReadX 10179 1918 7 7 NT_STATUS_OK
ReadX 10179 1919 12 12 NT_STATUS_OK
ReadX 10179 1919 8 8 NT_STATUS_OK
ReadX 10179 1917 15 15 NT_STATUS_OK
ReadX 10179 0 16 16 NT_STATUS_OK
ReadX 10179 16 2048 2048 NT_STATUS_OK
ReadX 10179 2064 2048 2048 NT_STATUS_OK
ReadX 10179 257 2048 2048 NT_STATUS_OK
ReadX 10179 385 2048 2048 NT_STATUS_OK
ReadX 10179 513 2048 2048 NT_STATUS_OK
ReadX 10179 641 2048 2048 NT_STATUS_OK
ReadX 10179 769 2048 2048 NT_STATUS_OK
ReadX 10179 897 2048 2048 NT_STATUS_OK
ReadX 10179 1025 2048 2048 NT_STATUS_OK
ReadX 10179 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10184 NT_STATUS_OK
WriteX 10184 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10184 258 NT_STATUS_OK
WriteX 10184 0 11588 11588 NT_STATUS_OK
Flush 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10189 NT_STATUS_OK
WriteX 10189 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10189 258 NT_STATUS_OK
WriteX 10189 0 11615 11615 NT_STATUS_OK
Flush 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10191 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10198 NT_STATUS_OK
WriteX 10198 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10198 258 NT_STATUS_OK
WriteX 10198 0 65536 65536 NT_STATUS_OK
WriteX 10198 65536 16050 16050 NT_STATUS_OK
Close 10198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10178 1939 64 64 NT_STATUS_OK
ReadX 10178 128 248 248 NT_STATUS_OK
ReadX 10178 128 568 568 NT_STATUS_OK
ReadX 10178 3872 1536 1536 NT_STATUS_OK
ReadX 10178 3456 2560 2560 NT_STATUS_OK
ReadX 10178 3136 512 512 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
ReadX 10178 3264 3072 3072 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 3616 4096 4096 NT_STATUS_OK
ReadX 10178 1939 64 64 NT_STATUS_OK
ReadX 10178 128 248 248 NT_STATUS_OK
ReadX 10178 128 608 608 NT_STATUS_OK
ReadX 10178 2858 1024 1024 NT_STATUS_OK
ReadX 10178 2810 4096 4096 NT_STATUS_OK
ReadX 10178 2826 4096 4096 NT_STATUS_OK
ReadX 10178 2580 2048 2048 NT_STATUS_OK
ReadX 10178 2800 2560 2560 NT_STATUS_OK
ReadX 10178 2100 4096 4096 NT_STATUS_OK
ReadX 10178 2084 4096 4096 NT_STATUS_OK
ReadX 10178 868 4096 4096 NT_STATUS_OK
ReadX 10178 2324 4096 4096 NT_STATUS_OK
ReadX 10178 884 4096 4096 NT_STATUS_OK
ReadX 10178 2604 1024 1024 NT_STATUS_OK
ReadX 10178 580 4096 4096 NT_STATUS_OK
ReadX 10178 596 4096 4096 NT_STATUS_OK
ReadX 10178 2752 4096 4096 NT_STATUS_OK
ReadX 10178 2842 1024 1024 NT_STATUS_OK
ReadX 10178 660 4096 4096 NT_STATUS_OK
ReadX 10178 2720 4096 4096 NT_STATUS_OK
ReadX 10178 2736 4096 4096 NT_STATUS_OK
ReadX 10178 628 4096 4096 NT_STATUS_OK
ReadX 10178 2704 4096 4096 NT_STATUS_OK
ReadX 10178 1556 4096 4096 NT_STATUS_OK
ReadX 10178 576 4096 4096 NT_STATUS_OK
ReadX 10178 3168 1536 1536 NT_STATUS_OK
ReadX 10178 832 4096 4096 NT_STATUS_OK
ReadX 10178 1088 4096 4096 NT_STATUS_OK
ReadX 10178 1344 4096 4096 NT_STATUS_OK
ReadX 10178 1600 4096 4096 NT_STATUS_OK
ReadX 10178 1856 4096 4096 NT_STATUS_OK
ReadX 10178 2112 4096 4096 NT_STATUS_OK
ReadX 10178 1892 4096 4096 NT_STATUS_OK
ReadX 10178 820 4096 4096 NT_STATUS_OK
ReadX 10178 788 4096 4096 NT_STATUS_OK
ReadX 10178 1604 4096 4096 NT_STATUS_OK
ReadX 10178 3648 4096 4096 NT_STATUS_OK
ReadX 10178 2608 4096 4096 NT_STATUS_OK
ReadX 10178 548 4096 4096 NT_STATUS_OK
ReadX 10178 740 4096 4096 NT_STATUS_OK
ReadX 10178 1344 4096 4096 NT_STATUS_OK
ReadX 10178 3392 4096 4096 NT_STATUS_OK
ReadX 10178 3904 4096 4096 NT_STATUS_OK
ReadX 10178 644 4096 4096 NT_STATUS_OK
ReadX 10178 676 4096 4096 NT_STATUS_OK
ReadX 10178 2688 4096 4096 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 900 4096 4096 NT_STATUS_OK
ReadX 10178 1908 4096 4096 NT_STATUS_OK
ReadX 10178 852 4096 4096 NT_STATUS_OK
ReadX 10178 724 4096 4096 NT_STATUS_OK
ReadX 10178 2292 4096 4096 NT_STATUS_OK
ReadX 10178 612 4096 4096 NT_STATUS_OK
ReadX 10178 388 4096 4096 NT_STATUS_OK
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 500 4096 4096 NT_STATUS_OK
ReadX 10178 356 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 576 4096 4096 NT_STATUS_OK
ReadX 10178 340 4096 4096 NT_STATUS_OK
ReadX 10178 420 4096 4096 NT_STATUS_OK
ReadX 10178 1600 4096 4096 NT_STATUS_OK
ReadX 10178 404 4096 4096 NT_STATUS_OK
ReadX 10178 1428 4096 4096 NT_STATUS_OK
ReadX 10178 2656 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 452 4096 4096 NT_STATUS_OK
ReadX 10178 692 4096 4096 NT_STATUS_OK
ReadX 10178 564 4096 4096 NT_STATUS_OK
ReadX 10178 372 4096 4096 NT_STATUS_OK
ReadX 10178 468 4096 4096 NT_STATUS_OK
ReadX 10178 484 4096 4096 NT_STATUS_OK
ReadX 10178 1088 4096 4096 NT_STATUS_OK
ReadX 10178 1924 4096 4096 NT_STATUS_OK
ReadX 10178 2768 4096 4096 NT_STATUS_OK
ReadX 10178 832 4096 4096 NT_STATUS_OK
ReadX 10178 836 4096 4096 NT_STATUS_OK
ReadX 10178 1856 4096 4096 NT_STATUS_OK
ReadX 10178 2640 4096 4096 NT_STATUS_OK
ReadX 10178 436 4096 4096 NT_STATUS_OK
ReadX 10178 1828 4096 4096 NT_STATUS_OK
ReadX 10178 804 4096 4096 NT_STATUS_OK
ReadX 10178 1860 4096 4096 NT_STATUS_OK
ReadX 10178 1812 4096 4096 NT_STATUS_OK
ReadX 10178 756 4096 4096 NT_STATUS_OK
ReadX 10178 1636 4096 4096 NT_STATUS_OK
ReadX 10178 772 4096 4096 NT_STATUS_OK
ReadX 10178 2036 4096 4096 NT_STATUS_OK
ReadX 10178 1220 4096 4096 NT_STATUS_OK
ReadX 10178 1652 4096 4096 NT_STATUS_OK
ReadX 10178 2588 4096 4096 NT_STATUS_OK
ReadX 10178 916 4096 4096 NT_STATUS_OK
ReadX 10178 260 4096 4096 NT_STATUS_OK
ReadX 10178 932 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 308 4096 4096 NT_STATUS_OK
ReadX 10178 292 4096 4096 NT_STATUS_OK
ReadX 10178 1140 4096 4096 NT_STATUS_OK
ReadX 10178 276 4096 4096 NT_STATUS_OK
ReadX 10178 2020 4096 4096 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
ReadX 10178 516 4096 4096 NT_STATUS_OK
ReadX 10178 1844 4096 4096 NT_STATUS_OK
ReadX 10178 1124 4096 4096 NT_STATUS_OK
ReadX 10178 3136 4096 4096 NT_STATUS_OK
ReadX 10178 324 4096 4096 NT_STATUS_OK
ReadX 10178 1156 4096 4096 NT_STATUS_OK
ReadX 10178 1172 4096 4096 NT_STATUS_OK
ReadX 10178 2112 4096 4096 NT_STATUS_OK
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 964 4096 4096 NT_STATUS_OK
ReadX 10178 980 4096 4096 NT_STATUS_OK
ReadX 10178 1012 4096 4096 NT_STATUS_OK
ReadX 10178 532 4096 4096 NT_STATUS_OK
ReadX 10178 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10178 1620 4096 4096 NT_STATUS_OK
ReadX 10178 1604 4096 4096 NT_STATUS_OK
ReadX 10178 2116 4096 4096 NT_STATUS_OK
ReadX 10178 2132 4096 4096 NT_STATUS_OK
ReadX 10178 2148 4096 4096 NT_STATUS_OK
ReadX 10178 2276 4096 4096 NT_STATUS_OK
ReadX 10178 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10203 NT_STATUS_OK
QUERY_FILE_INFORMATION 10158 1004 NT_STATUS_OK
Close 10158 NT_STATUS_OK
WriteX 10203 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10160 1004 NT_STATUS_OK
Close 10160 NT_STATUS_OK
WriteX 10203 0 65536 65536 NT_STATUS_OK
WriteX 10203 65536 64850 64850 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10205 NT_STATUS_OK
WriteX 10205 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
ReadX 10178 2068 4096 4096 NT_STATUS_OK
ReadX 10178 1588 4096 4096 NT_STATUS_OK
ReadX 10178 1572 4096 4096 NT_STATUS_OK
WriteX 10205 0 18630 18630 NT_STATUS_OK
Flush 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10207 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10178 612 4096 4096 NT_STATUS_OK
ReadX 10178 564 4096 4096 NT_STATUS_OK
ReadX 10178 1876 4096 4096 NT_STATUS_OK
ReadX 10178 628 4096 4096 NT_STATUS_OK
ReadX 10178 740 4096 4096 NT_STATUS_OK
ReadX 10178 724 4096 4096 NT_STATUS_OK
ReadX 10178 644 4096 4096 NT_STATUS_OK
ReadX 10178 2324 4096 4096 NT_STATUS_OK
ReadX 10178 660 4096 4096 NT_STATUS_OK
ReadX 10178 852 4096 4096 NT_STATUS_OK
ReadX 10178 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 580 4096 4096 NT_STATUS_OK
ReadX 10178 3136 512 512 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 61440 4096 4096 NT_STATUS_OK
ReadX 10210 126976 4096 4096 NT_STATUS_OK
WriteX 10210 0 65536 65536 NT_STATUS_OK
WriteX 10210 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 61440 4096 4096 NT_STATUS_OK
ReadX 10211 126976 4096 4096 NT_STATUS_OK
ReadX 10211 192512 4096 4096 NT_STATUS_OK
ReadX 10211 258048 4096 4096 NT_STATUS_OK
WriteX 10211 0 65536 65536 NT_STATUS_OK
WriteX 10211 65536 65536 65536 NT_STATUS_OK
WriteX 10211 131072 65536 65536 NT_STATUS_OK
WriteX 10211 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 61440 4096 4096 NT_STATUS_OK
ReadX 10212 126976 4096 4096 NT_STATUS_OK
ReadX 10212 192512 4096 4096 NT_STATUS_OK
ReadX 10212 258048 4096 4096 NT_STATUS_OK
ReadX 10212 323584 4096 4096 NT_STATUS_OK
ReadX 10212 389120 4096 4096 NT_STATUS_OK
ReadX 10212 454656 4096 4096 NT_STATUS_OK
ReadX 10212 520192 4096 4096 NT_STATUS_OK
WriteX 10212 0 65536 65536 NT_STATUS_OK
WriteX 10212 65536 65536 65536 NT_STATUS_OK
WriteX 10212 131072 65536 65536 NT_STATUS_OK
WriteX 10212 196608 65536 65536 NT_STATUS_OK
WriteX 10212 262144 65536 65536 NT_STATUS_OK
WriteX 10212 327680 65536 65536 NT_STATUS_OK
WriteX 10212 393216 65536 65536 NT_STATUS_OK
WriteX 10212 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10214 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10215 NT_STATUS_OK
WriteX 10215 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10215 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10213 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10217 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10210 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Close 10212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10220 NT_STATUS_OK
WriteX 10220 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10220 258 NT_STATUS_OK
WriteX 10220 0 62591 62591 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10222 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10225 NT_STATUS_OK
WriteX 10225 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 258 NT_STATUS_OK
WriteX 10225 0 10845 10845 NT_STATUS_OK
Close 10225 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10230 NT_STATUS_OK
WriteX 10230 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 258 NT_STATUS_OK
WriteX 10230 0 30118 30118 NT_STATUS_OK
Close 10230 NT_STATUS_OK
WriteX 10213 0 4096 4096 NT_STATUS_OK
WriteX 10215 0 64 64 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 61440 61440 NT_STATUS_OK
ReadX 10232 61440 4096 4096 NT_STATUS_OK
ReadX 10232 65536 61440 61440 NT_STATUS_OK
ReadX 10232 126976 4096 4096 NT_STATUS_OK
ReadX 10232 131072 61440 61440 NT_STATUS_OK
ReadX 10232 192512 4096 4096 NT_STATUS_OK
ReadX 10232 196608 61440 61440 NT_STATUS_OK
ReadX 10232 258048 4096 4096 NT_STATUS_OK
ReadX 10232 262144 61440 61440 NT_STATUS_OK
ReadX 10232 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 61440 61440 NT_STATUS_OK
ReadX 10233 61440 4096 4096 NT_STATUS_OK
ReadX 10233 65536 61440 61440 NT_STATUS_OK
ReadX 10233 126976 4096 4096 NT_STATUS_OK
ReadX 10233 131072 61440 61440 NT_STATUS_OK
ReadX 10233 192512 4096 4096 NT_STATUS_OK
ReadX 10233 196608 61440 61440 NT_STATUS_OK
ReadX 10233 258048 4096 4096 NT_STATUS_OK
ReadX 10233 262144 61440 61440 NT_STATUS_OK
ReadX 10233 323584 4096 4096 NT_STATUS_OK
ReadX 10233 327680 61440 61440 NT_STATUS_OK
ReadX 10233 389120 4096 4096 NT_STATUS_OK
ReadX 10233 393216 61440 61440 NT_STATUS_OK
ReadX 10233 454656 4096 4096 NT_STATUS_OK
ReadX 10233 458752 61440 61440 NT_STATUS_OK
ReadX 10233 520192 4096 4096 NT_STATUS_OK
ReadX 10233 524288 61440 61440 NT_STATUS_OK
ReadX 10233 585728 4096 4096 NT_STATUS_OK
ReadX 10233 589824 61440 61440 NT_STATUS_OK
ReadX 10233 651264 4096 4096 NT_STATUS_OK
ReadX 10233 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 61440 61440 NT_STATUS_OK
ReadX 10234 61440 4096 4096 NT_STATUS_OK
ReadX 10234 65536 61440 61440 NT_STATUS_OK
ReadX 10234 126976 4096 4096 NT_STATUS_OK
ReadX 10234 131072 61440 61440 NT_STATUS_OK
ReadX 10234 192512 4096 4096 NT_STATUS_OK
ReadX 10234 196608 61440 61440 NT_STATUS_OK
ReadX 10234 258048 4096 4096 NT_STATUS_OK
ReadX 10234 262144 61440 61440 NT_STATUS_OK
ReadX 10234 323584 4096 4096 NT_STATUS_OK
ReadX 10234 327680 61440 61440 NT_STATUS_OK
ReadX 10234 389120 4096 4096 NT_STATUS_OK
ReadX 10234 393216 61440 61440 NT_STATUS_OK
ReadX 10234 454656 4096 4096 NT_STATUS_OK
ReadX 10234 458752 61440 61440 NT_STATUS_OK
ReadX 10234 520192 4096 4096 NT_STATUS_OK
ReadX 10234 524288 61440 61440 NT_STATUS_OK
ReadX 10234 585728 4096 4096 NT_STATUS_OK
ReadX 10234 589824 61440 61440 NT_STATUS_OK
ReadX 10234 651264 4096 4096 NT_STATUS_OK
ReadX 10234 655360 61440 61440 NT_STATUS_OK
ReadX 10234 716800 4096 4096 NT_STATUS_OK
ReadX 10234 720896 61440 61440 NT_STATUS_OK
ReadX 10234 782336 4096 4096 NT_STATUS_OK
ReadX 10234 786432 61440 61440 NT_STATUS_OK
ReadX 10234 847872 4096 4096 NT_STATUS_OK
ReadX 10234 851968 61440 61440 NT_STATUS_OK
ReadX 10234 913408 4096 4096 NT_STATUS_OK
ReadX 10234 917504 61440 61440 NT_STATUS_OK
ReadX 10234 978944 4096 4096 NT_STATUS_OK
ReadX 10234 983040 61440 61440 NT_STATUS_OK
ReadX 10234 1044480 4096 4096 NT_STATUS_OK
ReadX 10234 1048576 61440 61440 NT_STATUS_OK
ReadX 10234 1110016 4096 4096 NT_STATUS_OK
ReadX 10234 1114112 61440 61440 NT_STATUS_OK
ReadX 10234 1175552 4096 4096 NT_STATUS_OK
ReadX 10234 1179648 61440 61440 NT_STATUS_OK
ReadX 10234 1241088 4096 4096 NT_STATUS_OK
ReadX 10234 1245184 61440 61440 NT_STATUS_OK
ReadX 10234 1306624 4096 4096 NT_STATUS_OK
ReadX 10234 1310720 61440 61440 NT_STATUS_OK
ReadX 10234 1372160 4096 4096 NT_STATUS_OK
ReadX 10234 1376256 61440 61440 NT_STATUS_OK
ReadX 10234 1437696 4096 4096 NT_STATUS_OK
ReadX 10234 1441792 61440 61440 NT_STATUS_OK
ReadX 10234 1503232 4096 4096 NT_STATUS_OK
ReadX 10234 1507328 61440 61440 NT_STATUS_OK
ReadX 10234 1568768 4096 4096 NT_STATUS_OK
ReadX 10234 1572864 61440 61440 NT_STATUS_OK
ReadX 10234 1634304 4096 4096 NT_STATUS_OK
ReadX 10234 1638400 61440 61440 NT_STATUS_OK
ReadX 10234 1699840 4096 4096 NT_STATUS_OK
ReadX 10234 1703936 61440 61440 NT_STATUS_OK
ReadX 10234 1765376 4096 4096 NT_STATUS_OK
ReadX 10234 1769472 61440 61440 NT_STATUS_OK
ReadX 10234 1830912 4096 4096 NT_STATUS_OK
ReadX 10234 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10235 NT_STATUS_OK
Close 10235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
ReadX 10239 4096 4096 4096 NT_STATUS_OK
ReadX 10239 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10243 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10244 NT_STATUS_OK
Close 10244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 8192 8192 NT_STATUS_OK
ReadX 10247 8192 8192 8192 NT_STATUS_OK
ReadX 10247 16384 8192 8192 NT_STATUS_OK
ReadX 10247 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10252 NT_STATUS_OK
WriteX 10252 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10252 258 NT_STATUS_OK
WriteX 10252 0 10438 10438 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10253 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10256 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
ReadX 10261 4096 4096 4096 NT_STATUS_OK
ReadX 10261 8192 4096 4096 NT_STATUS_OK
ReadX 10261 12288 8192 8192 NT_STATUS_OK
ReadX 10261 20480 8192 8192 NT_STATUS_OK
ReadX 10261 28672 8192 8192 NT_STATUS_OK
ReadX 10261 36864 8192 8192 NT_STATUS_OK
ReadX 10261 45056 8192 8192 NT_STATUS_OK
ReadX 10261 53248 8192 8192 NT_STATUS_OK
ReadX 10261 61440 8192 8192 NT_STATUS_OK
ReadX 10261 69632 8192 8192 NT_STATUS_OK
ReadX 10261 77824 8192 8192 NT_STATUS_OK
ReadX 10261 86016 8192 8192 NT_STATUS_OK
ReadX 10261 94208 8192 8192 NT_STATUS_OK
ReadX 10261 102400 8192 8192 NT_STATUS_OK
ReadX 10261 110592 8192 8192 NT_STATUS_OK
ReadX 10261 118784 8192 8192 NT_STATUS_OK
ReadX 10261 126976 8192 8192 NT_STATUS_OK
ReadX 10261 135168 8192 8192 NT_STATUS_OK
ReadX 10261 143360 8192 8192 NT_STATUS_OK
ReadX 10261 151552 8192 8192 NT_STATUS_OK
ReadX 10261 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10266 NT_STATUS_OK
WriteX 10266 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 258 NT_STATUS_OK
WriteX 10266 0 28489 28489 NT_STATUS_OK
Close 10266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10267 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10269 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10270 NT_STATUS_OK
Close 10270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 8192 8192 NT_STATUS_OK
ReadX 10273 8192 8192 8192 NT_STATUS_OK
ReadX 10273 16384 8192 8192 NT_STATUS_OK
ReadX 10273 24576 8192 8192 NT_STATUS_OK
ReadX 10273 32768 16384 16384 NT_STATUS_OK
ReadX 10273 49152 8192 8192 NT_STATUS_OK
ReadX 10273 57344 8192 8192 NT_STATUS_OK
ReadX 10273 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10275 NT_STATUS_OK
Close 10275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10278 NT_STATUS_OK
WriteX 10278 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
WriteX 10278 0 29253 29253 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10279 NT_STATUS_OK
Close 10279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10285 NT_STATUS_OK
WriteX 10285 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 258 NT_STATUS_OK
WriteX 10285 0 30183 30183 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10286 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10288 NT_STATUS_OK
WriteX 10288 0 510 510 NT_STATUS_OK
WriteX 10288 510 512 512 NT_STATUS_OK
WriteX 10288 1022 510 510 NT_STATUS_OK
WriteX 10288 1532 510 510 NT_STATUS_OK
WriteX 10288 2042 168 168 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10289 NT_STATUS_OK
Close 10289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 61440 4096 4096 NT_STATUS_OK
ReadX 10292 126976 4096 4096 NT_STATUS_OK
WriteX 10292 0 65536 65536 NT_STATUS_OK
WriteX 10292 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 61440 4096 4096 NT_STATUS_OK
ReadX 10293 126976 4096 4096 NT_STATUS_OK
ReadX 10293 192512 4096 4096 NT_STATUS_OK
ReadX 10293 258048 4096 4096 NT_STATUS_OK
WriteX 10293 0 65536 65536 NT_STATUS_OK
WriteX 10293 65536 65536 65536 NT_STATUS_OK
WriteX 10293 131072 65536 65536 NT_STATUS_OK
WriteX 10293 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 61440 4096 4096 NT_STATUS_OK
ReadX 10294 126976 4096 4096 NT_STATUS_OK
ReadX 10294 192512 4096 4096 NT_STATUS_OK
ReadX 10294 258048 4096 4096 NT_STATUS_OK
ReadX 10294 323584 4096 4096 NT_STATUS_OK
ReadX 10294 389120 4096 4096 NT_STATUS_OK
ReadX 10294 454656 4096 4096 NT_STATUS_OK
ReadX 10294 520192 4096 4096 NT_STATUS_OK
WriteX 10294 0 65536 65536 NT_STATUS_OK
WriteX 10294 65536 65536 65536 NT_STATUS_OK
WriteX 10294 131072 65536 65536 NT_STATUS_OK
WriteX 10294 196608 65536 65536 NT_STATUS_OK
WriteX 10294 262144 65536 65536 NT_STATUS_OK
WriteX 10294 327680 65536 65536 NT_STATUS_OK
WriteX 10294 393216 65536 65536 NT_STATUS_OK
WriteX 10294 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10304 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10310 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10315 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10319 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10324 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10329 NT_STATUS_OK
Close 10329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10334 NT_STATUS_OK
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10363 NT_STATUS_OK
WriteX 10363 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10363 0 65536 65536 NT_STATUS_OK
WriteX 10363 65536 65536 65536 NT_STATUS_OK
WriteX 10363 131072 65536 65536 NT_STATUS_OK
WriteX 10363 196608 65536 65536 NT_STATUS_OK
WriteX 10363 262144 26634 26634 NT_STATUS_OK
Close 10363 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10368 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
ReadX 10371 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10372 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10404 NT_STATUS_OK
Close 10404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
Close 10450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
Close 10465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10495 0 4096 4096 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 4096 4096 NT_STATUS_OK
ReadX 10497 4096 4096 4096 NT_STATUS_OK
ReadX 10497 8192 4096 4096 NT_STATUS_OK
ReadX 10497 12288 4096 4096 NT_STATUS_OK
ReadX 10497 16384 4096 4096 NT_STATUS_OK
ReadX 10497 20480 4096 4096 NT_STATUS_OK
ReadX 10497 24576 4096 4096 NT_STATUS_OK
ReadX 10497 28672 4096 4096 NT_STATUS_OK
ReadX 10497 32768 4096 4096 NT_STATUS_OK
ReadX 10497 36864 4096 4096 NT_STATUS_OK
ReadX 10497 40960 4096 4096 NT_STATUS_OK
ReadX 10497 45056 4096 4096 NT_STATUS_OK
ReadX 10497 49152 4096 4096 NT_STATUS_OK
ReadX 10497 53248 4096 4096 NT_STATUS_OK
ReadX 10497 57344 4096 4096 NT_STATUS_OK
ReadX 10497 61440 4096 4096 NT_STATUS_OK
ReadX 10497 65536 4096 4096 NT_STATUS_OK
ReadX 10497 69632 4096 4096 NT_STATUS_OK
ReadX 10497 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10497 1004 NT_STATUS_OK
WriteX 10497 0 4096 4096 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10498 NT_STATUS_OK
SET_FILE_INFORMATION 10498 1004 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10503 NT_STATUS_OK
WriteX 10503 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10503 258 NT_STATUS_OK
WriteX 10503 0 65536 65536 NT_STATUS_OK
WriteX 10503 65536 19979 19979 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
SET_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10509 1004 NT_STATUS_OK
WriteX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10515 NT_STATUS_OK
WriteX 10515 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 258 NT_STATUS_OK
WriteX 10515 0 65536 65536 NT_STATUS_OK
WriteX 10515 65536 17654 17654 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
QUERY_FILE_INFORMATION 10516 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
SET_FILE_INFORMATION 10516 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10517 NT_STATUS_OK
SET_FILE_INFORMATION 10517 1004 NT_STATUS_OK
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10519 NT_STATUS_OK
Close 10519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
ReadX 10521 4096 4096 4096 NT_STATUS_OK
ReadX 10521 8192 4096 4096 NT_STATUS_OK
ReadX 10521 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10521 16384 4096 4096 NT_STATUS_OK
ReadX 10521 20480 4096 4096 NT_STATUS_OK
ReadX 10521 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
Close 10523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10524 1004 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10525 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10530 NT_STATUS_OK
WriteX 10530 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 65536 65536 NT_STATUS_OK
WriteX 10530 65536 19490 19490 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 4096 4096 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
QUERY_FILE_INFORMATION 10531 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
SET_FILE_INFORMATION 10531 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10532 NT_STATUS_OK
SET_FILE_INFORMATION 10532 1004 NT_STATUS_OK
Close 10532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10536 0 4096 4096 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10538 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
ReadX 10538 4096 4096 4096 NT_STATUS_OK
ReadX 10538 8192 4096 4096 NT_STATUS_OK
ReadX 10538 12288 4096 4096 NT_STATUS_OK
ReadX 10538 16384 4096 4096 NT_STATUS_OK
ReadX 10538 20480 4096 4096 NT_STATUS_OK
ReadX 10538 24576 4096 4096 NT_STATUS_OK
ReadX 10538 28672 4096 4096 NT_STATUS_OK
ReadX 10538 32768 4096 4096 NT_STATUS_OK
ReadX 10538 36864 4096 4096 NT_STATUS_OK
ReadX 10538 40960 4096 4096 NT_STATUS_OK
ReadX 10538 45056 4096 4096 NT_STATUS_OK
ReadX 10538 49152 4096 4096 NT_STATUS_OK
ReadX 10538 53248 4096 4096 NT_STATUS_OK
ReadX 10538 57344 4096 4096 NT_STATUS_OK
ReadX 10538 61440 4096 4096 NT_STATUS_OK
ReadX 10538 65536 4096 4096 NT_STATUS_OK
ReadX 10538 69632 4096 4096 NT_STATUS_OK
ReadX 10538 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Close 10538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10539 NT_STATUS_OK
SET_FILE_INFORMATION 10539 1004 NT_STATUS_OK
Close 10539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10544 NT_STATUS_OK
WriteX 10544 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10544 258 NT_STATUS_OK
WriteX 10544 0 65536 65536 NT_STATUS_OK
WriteX 10544 65536 8866 8866 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
WriteX 10545 0 4096 4096 NT_STATUS_OK
Flush 10545 NT_STATUS_OK
SET_FILE_INFORMATION 10545 1004 NT_STATUS_OK
WriteX 10545 0 4096 4096 NT_STATUS_OK
Flush 10545 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
Close 10547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10549 1004 NT_STATUS_OK
WriteX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 65536 65536 NT_STATUS_OK
WriteX 10555 65536 9298 9298 NT_STATUS_OK
Close 10555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10556 NT_STATUS_OK
ReadX 10556 0 4096 4096 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
SET_FILE_INFORMATION 10556 1004 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10557 NT_STATUS_OK
SET_FILE_INFORMATION 10557 1004 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10562 0 4096 4096 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10563 4096 4096 4096 NT_STATUS_OK
ReadX 10563 8192 4096 4096 NT_STATUS_OK
ReadX 10563 12288 4096 4096 NT_STATUS_OK
ReadX 10563 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
Close 10565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10566 1004 NT_STATUS_OK
WriteX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10567 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10572 NT_STATUS_OK
WriteX 10572 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 258 NT_STATUS_OK
WriteX 10572 0 65536 65536 NT_STATUS_OK
WriteX 10572 65536 11540 11540 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
WriteX 10573 0 4096 4096 NT_STATUS_OK
Flush 10573 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
WriteX 10573 0 4096 4096 NT_STATUS_OK
Flush 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10574 NT_STATUS_OK
SET_FILE_INFORMATION 10574 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10576 NT_STATUS_OK
Close 10576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 61440 4096 4096 NT_STATUS_OK
ReadX 10578 126976 4096 4096 NT_STATUS_OK
WriteX 10578 0 65536 65536 NT_STATUS_OK
WriteX 10578 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 61440 4096 4096 NT_STATUS_OK
ReadX 10579 126976 4096 4096 NT_STATUS_OK
ReadX 10579 192512 4096 4096 NT_STATUS_OK
ReadX 10579 258048 4096 4096 NT_STATUS_OK
WriteX 10579 0 65536 65536 NT_STATUS_OK
WriteX 10579 65536 65536 65536 NT_STATUS_OK
WriteX 10579 131072 65536 65536 NT_STATUS_OK
WriteX 10579 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 61440 4096 4096 NT_STATUS_OK
ReadX 10580 126976 4096 4096 NT_STATUS_OK
ReadX 10580 192512 4096 4096 NT_STATUS_OK
ReadX 10580 258048 4096 4096 NT_STATUS_OK
ReadX 10580 323584 4096 4096 NT_STATUS_OK
ReadX 10580 389120 4096 4096 NT_STATUS_OK
ReadX 10580 454656 4096 4096 NT_STATUS_OK
ReadX 10580 520192 4096 4096 NT_STATUS_OK
WriteX 10580 0 65536 65536 NT_STATUS_OK
WriteX 10580 65536 65536 65536 NT_STATUS_OK
WriteX 10580 131072 65536 65536 NT_STATUS_OK
WriteX 10580 196608 65536 65536 NT_STATUS_OK
WriteX 10580 262144 65536 65536 NT_STATUS_OK
WriteX 10580 327680 65536 65536 NT_STATUS_OK
WriteX 10580 393216 65536 65536 NT_STATUS_OK
WriteX 10580 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
ReadX 10581 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10582 NT_STATUS_OK
WriteX 10582 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10582 258 NT_STATUS_OK
WriteX 10582 0 53 53 NT_STATUS_OK
Close 10582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10575 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10581 8192 4096 4096 NT_STATUS_OK
ReadX 10581 12288 4096 4096 NT_STATUS_OK
WriteX 10585 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10585 258 NT_STATUS_OK
ReadX 10581 16384 4096 4096 NT_STATUS_OK
ReadX 10581 20480 4096 4096 NT_STATUS_OK
WriteX 10585 0 15360 15360 NT_STATUS_OK
Close 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10586 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10586 1004 NT_STATUS_OK
WriteX 10586 0 4096 4096 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10589 4096 4096 4096 NT_STATUS_OK
ReadX 10589 8192 4096 4096 NT_STATUS_OK
ReadX 10589 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 4096 4096 NT_STATUS_OK
ReadX 10592 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10593 NT_STATUS_OK
ReadX 10593 0 4096 4096 NT_STATUS_OK
ReadX 10593 4096 4096 4096 NT_STATUS_OK
ReadX 10593 8192 4096 4096 NT_STATUS_OK
Close 10592 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10594 NT_STATUS_OK
WriteX 10594 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 15360 15360 NT_STATUS_OK
Close 10594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10595 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10595 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10599 NT_STATUS_OK
SET_FILE_INFORMATION 10599 1004 NT_STATUS_OK
Close 10599 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
ReadX 10602 4096 4096 4096 NT_STATUS_OK
ReadX 10602 8192 4096 4096 NT_STATUS_OK
ReadX 10602 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10602 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10602 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10604 NT_STATUS_OK
WriteX 10604 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10604 258 NT_STATUS_OK
WriteX 10604 0 53 53 NT_STATUS_OK
Close 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10603 4096 4096 4096 NT_STATUS_OK
ReadX 10603 8192 4096 4096 NT_STATUS_OK
ReadX 10603 12288 4096 4096 NT_STATUS_OK
WriteX 10607 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10607 258 NT_STATUS_OK
WriteX 10607 0 12006 12006 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
WriteX 10608 0 4096 4096 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10612 NT_STATUS_OK
Close 10612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10611 4096 4096 4096 NT_STATUS_OK
ReadX 10611 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 11991 11991 NT_STATUS_OK
Close 10614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10619 NT_STATUS_OK
SET_FILE_INFORMATION 10619 1004 NT_STATUS_OK
Close 10619 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10623 NT_STATUS_OK
Close 10623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10622 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
ReadX 10622 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
WriteX 10622 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
Close 10598 NT_STATUS_OK
WriteX 10602 0 19054 19054 NT_STATUS_OK
WriteX 10622 0 12288 12288 NT_STATUS_OK
Close 10618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 61440 61440 NT_STATUS_OK
ReadX 10629 61440 4096 4096 NT_STATUS_OK
ReadX 10629 65536 61440 61440 NT_STATUS_OK
ReadX 10629 126976 4096 4096 NT_STATUS_OK
ReadX 10629 131072 61440 61440 NT_STATUS_OK
ReadX 10629 192512 4096 4096 NT_STATUS_OK
ReadX 10629 196608 61440 61440 NT_STATUS_OK
ReadX 10629 258048 4096 4096 NT_STATUS_OK
ReadX 10629 262144 61440 61440 NT_STATUS_OK
ReadX 10629 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 61440 61440 NT_STATUS_OK
ReadX 10630 61440 4096 4096 NT_STATUS_OK
ReadX 10630 65536 61440 61440 NT_STATUS_OK
ReadX 10630 126976 4096 4096 NT_STATUS_OK
ReadX 10630 131072 61440 61440 NT_STATUS_OK
ReadX 10630 192512 4096 4096 NT_STATUS_OK
ReadX 10630 196608 61440 61440 NT_STATUS_OK
ReadX 10630 258048 4096 4096 NT_STATUS_OK
ReadX 10630 262144 61440 61440 NT_STATUS_OK
ReadX 10630 323584 4096 4096 NT_STATUS_OK
ReadX 10630 327680 61440 61440 NT_STATUS_OK
ReadX 10630 389120 4096 4096 NT_STATUS_OK
ReadX 10630 393216 61440 61440 NT_STATUS_OK
ReadX 10630 454656 4096 4096 NT_STATUS_OK
ReadX 10630 458752 61440 61440 NT_STATUS_OK
ReadX 10630 520192 4096 4096 NT_STATUS_OK
ReadX 10630 524288 61440 61440 NT_STATUS_OK
ReadX 10630 585728 4096 4096 NT_STATUS_OK
ReadX 10630 589824 61440 61440 NT_STATUS_OK
ReadX 10630 651264 4096 4096 NT_STATUS_OK
ReadX 10630 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 61440 61440 NT_STATUS_OK
ReadX 10631 61440 4096 4096 NT_STATUS_OK
ReadX 10631 65536 61440 61440 NT_STATUS_OK
ReadX 10631 126976 4096 4096 NT_STATUS_OK
ReadX 10631 131072 61440 61440 NT_STATUS_OK
ReadX 10631 192512 4096 4096 NT_STATUS_OK
ReadX 10631 196608 61440 61440 NT_STATUS_OK
ReadX 10631 258048 4096 4096 NT_STATUS_OK
ReadX 10631 262144 61440 61440 NT_STATUS_OK
ReadX 10631 323584 4096 4096 NT_STATUS_OK
ReadX 10631 327680 61440 61440 NT_STATUS_OK
ReadX 10631 389120 4096 4096 NT_STATUS_OK
ReadX 10631 393216 61440 61440 NT_STATUS_OK
ReadX 10631 454656 4096 4096 NT_STATUS_OK
ReadX 10631 458752 61440 61440 NT_STATUS_OK
ReadX 10631 520192 4096 4096 NT_STATUS_OK
ReadX 10631 524288 61440 61440 NT_STATUS_OK
ReadX 10631 585728 4096 4096 NT_STATUS_OK
ReadX 10631 589824 61440 61440 NT_STATUS_OK
ReadX 10631 651264 4096 4096 NT_STATUS_OK
ReadX 10631 655360 61440 61440 NT_STATUS_OK
ReadX 10631 716800 4096 4096 NT_STATUS_OK
ReadX 10631 720896 61440 61440 NT_STATUS_OK
ReadX 10631 782336 4096 4096 NT_STATUS_OK
ReadX 10631 786432 61440 61440 NT_STATUS_OK
ReadX 10631 847872 4096 4096 NT_STATUS_OK
ReadX 10631 851968 61440 61440 NT_STATUS_OK
ReadX 10631 913408 4096 4096 NT_STATUS_OK
ReadX 10631 917504 61440 61440 NT_STATUS_OK
ReadX 10631 978944 4096 4096 NT_STATUS_OK
ReadX 10631 983040 61440 61440 NT_STATUS_OK
ReadX 10631 1044480 4096 4096 NT_STATUS_OK
ReadX 10631 1048576 61440 61440 NT_STATUS_OK
ReadX 10631 1110016 4096 4096 NT_STATUS_OK
ReadX 10631 1114112 61440 61440 NT_STATUS_OK
ReadX 10631 1175552 4096 4096 NT_STATUS_OK
ReadX 10631 1179648 61440 61440 NT_STATUS_OK
ReadX 10631 1241088 4096 4096 NT_STATUS_OK
ReadX 10631 1245184 61440 61440 NT_STATUS_OK
ReadX 10631 1306624 4096 4096 NT_STATUS_OK
ReadX 10631 1310720 61440 61440 NT_STATUS_OK
ReadX 10631 1372160 4096 4096 NT_STATUS_OK
ReadX 10631 1376256 61440 61440 NT_STATUS_OK
ReadX 10631 1437696 4096 4096 NT_STATUS_OK
ReadX 10631 1441792 61440 61440 NT_STATUS_OK
ReadX 10631 1503232 4096 4096 NT_STATUS_OK
ReadX 10631 1507328 61440 61440 NT_STATUS_OK
ReadX 10631 1568768 4096 4096 NT_STATUS_OK
ReadX 10631 1572864 61440 61440 NT_STATUS_OK
ReadX 10631 1634304 4096 4096 NT_STATUS_OK
ReadX 10631 1638400 61440 61440 NT_STATUS_OK
ReadX 10631 1699840 4096 4096 NT_STATUS_OK
ReadX 10631 1703936 61440 61440 NT_STATUS_OK
ReadX 10631 1765376 4096 4096 NT_STATUS_OK
ReadX 10631 1769472 61440 61440 NT_STATUS_OK
ReadX 10631 1830912 4096 4096 NT_STATUS_OK
ReadX 10631 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10632 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10638 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 1004 NT_STATUS_OK
WriteX 10638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10640 NT_STATUS_OK
WriteX 10640 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 491 491 NT_STATUS_OK
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10638 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10644 NT_STATUS_OK
WriteX 10644 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
WriteX 10644 0 543 543 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10658 NT_STATUS_OK
QUERY_FILE_INFORMATION 10658 1004 NT_STATUS_OK
WriteX 10658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10658 258 NT_STATUS_OK
WriteX 10658 0 2048 2048 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10659 0 4096 4096 NT_STATUS_OK
Flush 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10659 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10664 NT_STATUS_OK
WriteX 10664 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10664 258 NT_STATUS_OK
WriteX 10664 0 2048 2048 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10670 NT_STATUS_OK
WriteX 10670 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10670 258 NT_STATUS_OK
WriteX 10670 0 2048 2048 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 2048 2048 NT_STATUS_OK
ReadX 10649 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10665 0 4096 4096 NT_STATUS_OK
WriteX 10649 0 8192 8192 NT_STATUS_OK
WriteX 10650 0 4096 4096 NT_STATUS_OK
WriteX 10651 0 4096 4096 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10675 NT_STATUS_OK
QUERY_FILE_INFORMATION 10675 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10682 NT_STATUS_OK
ReadX 10682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10683 NT_STATUS_OK
ReadX 10683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10686 NT_STATUS_OK
ReadX 10686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10695 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 258 NT_STATUS_OK
WriteX 10695 0 2048 2048 NT_STATUS_OK
Close 10695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10696 NT_STATUS_OK
ReadX 10696 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10703 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 1004 NT_STATUS_OK
WriteX 10703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 258 NT_STATUS_OK
WriteX 10703 0 2048 2048 NT_STATUS_OK
Close 10703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10696 0 4096 4096 NT_STATUS_OK
Flush 10696 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
Flush 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10698 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10706 NT_STATUS_OK
WriteX 10706 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 258 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10709 NT_STATUS_OK
WriteX 10709 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 4096 4096 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10710 0 4096 4096 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10685 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Close 10683 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Close 10681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10717 NT_STATUS_OK
WriteX 10717 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 258 NT_STATUS_OK
WriteX 10717 0 2048 2048 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10720 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10732 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10731 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10734 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10738 NT_STATUS_OK
ReadX 10738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10754 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 1004 NT_STATUS_OK
WriteX 10754 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 258 NT_STATUS_OK
WriteX 10754 0 2048 2048 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10761 NT_STATUS_OK
ReadX 10761 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10765 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10766 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 1004 NT_STATUS_OK
WriteX 10766 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 258 NT_STATUS_OK
WriteX 10766 0 2048 2048 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10774 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 1004 NT_STATUS_OK
WriteX 10774 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 2048 2048 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 4096 16384 16384 NT_STATUS_OK
ReadX 10737 4096 16384 16384 NT_STATUS_OK
ReadX 10769 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 2048 2048 NT_STATUS_OK
WriteX 10777 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10778 NT_STATUS_OK
QUERY_FILE_INFORMATION 10778 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10761 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Close 10759 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10780 NT_STATUS_OK
QUERY_FILE_INFORMATION 10780 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10785 4096 16384 16384 NT_STATUS_OK
WriteX 10785 0 4096 4096 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10799 NT_STATUS_OK
ReadX 10799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 8192 8192 NT_STATUS_OK
ReadX 10791 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10805 0 4096 4096 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
WriteX 10791 0 4096 4096 NT_STATUS_OK
WriteX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10806 0 4096 4096 NT_STATUS_OK
ReadX 10806 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10785 0 4096 4096 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10811 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 258 NT_STATUS_OK
WriteX 10811 0 2048 2048 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
ReadX 10814 4096 4096 4096 NT_STATUS_OK
WriteX 10814 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
ReadX 10816 4096 4096 4096 NT_STATUS_OK
WriteX 10816 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10817 NT_STATUS_OK
QUERY_FILE_INFORMATION 10817 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10785 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10797 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Close 10799 NT_STATUS_OK
Close 10800 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Close 10791 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Close 10806 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10819 0 4096 4096 NT_STATUS_OK
ReadX 10819 4096 4096 4096 NT_STATUS_OK
ReadX 10819 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
ReadX 10820 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10837 NT_STATUS_OK
QUERY_FILE_INFORMATION 10837 1004 NT_STATUS_OK
WriteX 10837 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10837 258 NT_STATUS_OK
WriteX 10837 0 2048 2048 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10838 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10843 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 1004 NT_STATUS_OK
WriteX 10843 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 2048 2048 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10827 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10845 NT_STATUS_OK
QUERY_FILE_INFORMATION 10845 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10847 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 61440 4096 4096 NT_STATUS_OK
ReadX 10849 126976 4096 4096 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 61440 4096 4096 NT_STATUS_OK
ReadX 10850 126976 4096 4096 NT_STATUS_OK
ReadX 10850 192512 4096 4096 NT_STATUS_OK
ReadX 10850 258048 4096 4096 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 65536 65536 NT_STATUS_OK
WriteX 10850 131072 65536 65536 NT_STATUS_OK
WriteX 10850 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 61440 4096 4096 NT_STATUS_OK
ReadX 10851 126976 4096 4096 NT_STATUS_OK
ReadX 10851 192512 4096 4096 NT_STATUS_OK
ReadX 10851 258048 4096 4096 NT_STATUS_OK
ReadX 10851 323584 4096 4096 NT_STATUS_OK
ReadX 10851 389120 4096 4096 NT_STATUS_OK
ReadX 10851 454656 4096 4096 NT_STATUS_OK
ReadX 10851 520192 4096 4096 NT_STATUS_OK
WriteX 10851 0 65536 65536 NT_STATUS_OK
WriteX 10851 65536 65536 65536 NT_STATUS_OK
WriteX 10851 131072 65536 65536 NT_STATUS_OK
WriteX 10851 196608 65536 65536 NT_STATUS_OK
WriteX 10851 262144 65536 65536 NT_STATUS_OK
WriteX 10851 327680 65536 65536 NT_STATUS_OK
WriteX 10851 393216 65536 65536 NT_STATUS_OK
WriteX 10851 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10852 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
ReadX 10852 20480 4096 4096 NT_STATUS_OK
ReadX 10852 24576 4096 4096 NT_STATUS_OK
ReadX 10852 28672 4096 4096 NT_STATUS_OK
ReadX 10852 32768 4096 4096 NT_STATUS_OK
ReadX 10852 36864 4096 4096 NT_STATUS_OK
ReadX 10852 40960 4096 4096 NT_STATUS_OK
ReadX 10852 45056 4096 4096 NT_STATUS_OK
ReadX 10852 49152 4096 4096 NT_STATUS_OK
ReadX 10852 53248 4096 4096 NT_STATUS_OK
ReadX 10852 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10852 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10855 NT_STATUS_OK
WriteX 10855 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10855 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 57088 57088 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
Flush 10855 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10856 NT_STATUS_OK
SET_FILE_INFORMATION 10856 1004 NT_STATUS_OK
Close 10856 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10857 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10860 NT_STATUS_OK
WriteX 10860 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10860 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 0 51456 51456 NT_STATUS_OK
WriteX 10860 0 4096 4096 NT_STATUS_OK
Flush 10860 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 0 4096 4096 NT_STATUS_OK
Close 10860 NT_STATUS_OK
Close 10859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10864 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10869 NT_STATUS_OK
WriteX 10869 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 258 NT_STATUS_OK
WriteX 10869 0 53077 53077 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10870 NT_STATUS_OK
WriteX 10870 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
WriteX 10870 0 65536 65536 NT_STATUS_OK
WriteX 10870 65536 1856 1856 NT_STATUS_OK
WriteX 10870 0 4096 4096 NT_STATUS_OK
Flush 10870 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
WriteX 10870 0 4096 4096 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10879 NT_STATUS_OK
WriteX 10879 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 7983 7983 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10884 NT_STATUS_OK
WriteX 10884 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10884 258 NT_STATUS_OK
WriteX 10884 0 65536 65536 NT_STATUS_OK
WriteX 10884 65536 65536 65536 NT_STATUS_OK
WriteX 10884 131072 65536 65536 NT_STATUS_OK
WriteX 10884 196608 65536 65536 NT_STATUS_OK
WriteX 10884 262144 65536 65536 NT_STATUS_OK
WriteX 10884 327680 65536 65536 NT_STATUS_OK
WriteX 10884 393216 65536 65536 NT_STATUS_OK
WriteX 10884 458752 46731 46731 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10874 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
WriteX 10885 0 65536 65536 NT_STATUS_OK
WriteX 10885 65536 22848 22848 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
Flush 10885 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10889 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10890 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10890 1004 NT_STATUS_OK
ReadX 10890 8192 4096 4096 NT_STATUS_OK
ReadX 10890 12288 4096 4096 NT_STATUS_OK
ReadX 10890 16384 4096 4096 NT_STATUS_OK
ReadX 10890 20480 4096 4096 NT_STATUS_OK
ReadX 10890 24576 4096 4096 NT_STATUS_OK
ReadX 10890 28672 4096 4096 NT_STATUS_OK
ReadX 10890 32768 4096 4096 NT_STATUS_OK
ReadX 10890 36864 4096 4096 NT_STATUS_OK
ReadX 10890 40960 4096 4096 NT_STATUS_OK
ReadX 10890 45056 4096 4096 NT_STATUS_OK
ReadX 10890 49152 4096 4096 NT_STATUS_OK
ReadX 10890 53248 4096 4096 NT_STATUS_OK
ReadX 10890 57344 4096 4096 NT_STATUS_OK
ReadX 10890 61440 4096 4096 NT_STATUS_OK
ReadX 10890 65536 4096 4096 NT_STATUS_OK
ReadX 10890 69632 4096 4096 NT_STATUS_OK
ReadX 10890 73728 4096 4096 NT_STATUS_OK
ReadX 10890 77824 4096 4096 NT_STATUS_OK
ReadX 10890 81920 4096 4096 NT_STATUS_OK
ReadX 10890 86016 4096 4096 NT_STATUS_OK
ReadX 10890 90112 4096 4096 NT_STATUS_OK
ReadX 10890 94208 4096 4096 NT_STATUS_OK
ReadX 10890 98304 4096 4096 NT_STATUS_OK
ReadX 10890 102400 4096 4096 NT_STATUS_OK
ReadX 10890 106496 4096 4096 NT_STATUS_OK
ReadX 10890 110592 4096 4096 NT_STATUS_OK
ReadX 10890 114688 4096 4096 NT_STATUS_OK
ReadX 10890 118784 4096 4096 NT_STATUS_OK
ReadX 10890 122880 4096 4096 NT_STATUS_OK
ReadX 10890 126976 4096 4096 NT_STATUS_OK
ReadX 10890 131072 4096 4096 NT_STATUS_OK
ReadX 10890 135168 4096 4096 NT_STATUS_OK
ReadX 10890 139264 4096 4096 NT_STATUS_OK
ReadX 10890 143360 4096 4096 NT_STATUS_OK
ReadX 10890 147456 4096 4096 NT_STATUS_OK
ReadX 10890 151552 4096 4096 NT_STATUS_OK
ReadX 10890 155648 4096 4096 NT_STATUS_OK
ReadX 10890 159744 4096 4096 NT_STATUS_OK
ReadX 10890 163840 4096 4096 NT_STATUS_OK
ReadX 10890 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10890 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10893 NT_STATUS_OK
WriteX 10893 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 258 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10894 NT_STATUS_OK
SET_FILE_INFORMATION 10894 1004 NT_STATUS_OK
Close 10894 NT_STATUS_OK
WriteX 10893 0 42388 42388 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
ReadX 10897 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10898 NT_STATUS_OK
WriteX 10898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
SET_FILE_INFORMATION 10898 1004 NT_STATUS_OK
WriteX 10898 0 42652 42652 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10900 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 4096 4096 NT_STATUS_OK
ReadX 10902 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10907 NT_STATUS_OK
WriteX 10907 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10907 258 NT_STATUS_OK
WriteX 10907 0 65536 65536 NT_STATUS_OK
WriteX 10907 65536 49 49 NT_STATUS_OK
Close 10907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 61440 61440 NT_STATUS_OK
ReadX 10908 61440 4096 4096 NT_STATUS_OK
ReadX 10908 65536 61440 61440 NT_STATUS_OK
ReadX 10908 126976 4096 4096 NT_STATUS_OK
ReadX 10908 131072 61440 61440 NT_STATUS_OK
ReadX 10908 192512 4096 4096 NT_STATUS_OK
ReadX 10908 196608 61440 61440 NT_STATUS_OK
ReadX 10908 258048 4096 4096 NT_STATUS_OK
ReadX 10908 262144 61440 61440 NT_STATUS_OK
ReadX 10908 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 61440 61440 NT_STATUS_OK
ReadX 10909 61440 4096 4096 NT_STATUS_OK
ReadX 10909 65536 61440 61440 NT_STATUS_OK
ReadX 10909 126976 4096 4096 NT_STATUS_OK
ReadX 10909 131072 61440 61440 NT_STATUS_OK
ReadX 10909 192512 4096 4096 NT_STATUS_OK
ReadX 10909 196608 61440 61440 NT_STATUS_OK
ReadX 10909 258048 4096 4096 NT_STATUS_OK
ReadX 10909 262144 61440 61440 NT_STATUS_OK
ReadX 10909 323584 4096 4096 NT_STATUS_OK
ReadX 10909 327680 61440 61440 NT_STATUS_OK
ReadX 10909 389120 4096 4096 NT_STATUS_OK
ReadX 10909 393216 61440 61440 NT_STATUS_OK
ReadX 10909 454656 4096 4096 NT_STATUS_OK
ReadX 10909 458752 61440 61440 NT_STATUS_OK
ReadX 10909 520192 4096 4096 NT_STATUS_OK
ReadX 10909 524288 61440 61440 NT_STATUS_OK
ReadX 10909 585728 4096 4096 NT_STATUS_OK
ReadX 10909 589824 61440 61440 NT_STATUS_OK
ReadX 10909 651264 4096 4096 NT_STATUS_OK
ReadX 10909 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 61440 61440 NT_STATUS_OK
ReadX 10910 61440 4096 4096 NT_STATUS_OK
ReadX 10910 65536 61440 61440 NT_STATUS_OK
ReadX 10910 126976 4096 4096 NT_STATUS_OK
ReadX 10910 131072 61440 61440 NT_STATUS_OK
ReadX 10910 192512 4096 4096 NT_STATUS_OK
ReadX 10910 196608 61440 61440 NT_STATUS_OK
ReadX 10910 258048 4096 4096 NT_STATUS_OK
ReadX 10910 262144 61440 61440 NT_STATUS_OK
ReadX 10910 323584 4096 4096 NT_STATUS_OK
ReadX 10910 327680 61440 61440 NT_STATUS_OK
ReadX 10910 389120 4096 4096 NT_STATUS_OK
ReadX 10910 393216 61440 61440 NT_STATUS_OK
ReadX 10910 454656 4096 4096 NT_STATUS_OK
ReadX 10910 458752 61440 61440 NT_STATUS_OK
ReadX 10910 520192 4096 4096 NT_STATUS_OK
ReadX 10910 524288 61440 61440 NT_STATUS_OK
ReadX 10910 585728 4096 4096 NT_STATUS_OK
ReadX 10910 589824 61440 61440 NT_STATUS_OK
ReadX 10910 651264 4096 4096 NT_STATUS_OK
ReadX 10910 655360 61440 61440 NT_STATUS_OK
ReadX 10910 716800 4096 4096 NT_STATUS_OK
ReadX 10910 720896 61440 61440 NT_STATUS_OK
ReadX 10910 782336 4096 4096 NT_STATUS_OK
ReadX 10910 786432 61440 61440 NT_STATUS_OK
ReadX 10910 847872 4096 4096 NT_STATUS_OK
ReadX 10910 851968 61440 61440 NT_STATUS_OK
ReadX 10910 913408 4096 4096 NT_STATUS_OK
ReadX 10910 917504 61440 61440 NT_STATUS_OK
ReadX 10910 978944 4096 4096 NT_STATUS_OK
ReadX 10910 983040 61440 61440 NT_STATUS_OK
ReadX 10910 1044480 4096 4096 NT_STATUS_OK
ReadX 10910 1048576 61440 61440 NT_STATUS_OK
ReadX 10910 1110016 4096 4096 NT_STATUS_OK
ReadX 10910 1114112 61440 61440 NT_STATUS_OK
ReadX 10910 1175552 4096 4096 NT_STATUS_OK
ReadX 10910 1179648 61440 61440 NT_STATUS_OK
ReadX 10910 1241088 4096 4096 NT_STATUS_OK
ReadX 10910 1245184 61440 61440 NT_STATUS_OK
ReadX 10910 1306624 4096 4096 NT_STATUS_OK
ReadX 10910 1310720 61440 61440 NT_STATUS_OK
ReadX 10910 1372160 4096 4096 NT_STATUS_OK
ReadX 10910 1376256 61440 61440 NT_STATUS_OK
ReadX 10910 1437696 4096 4096 NT_STATUS_OK
ReadX 10910 1441792 61440 61440 NT_STATUS_OK
ReadX 10910 1503232 4096 4096 NT_STATUS_OK
ReadX 10910 1507328 61440 61440 NT_STATUS_OK
ReadX 10910 1568768 4096 4096 NT_STATUS_OK
ReadX 10910 1572864 61440 61440 NT_STATUS_OK
ReadX 10910 1634304 4096 4096 NT_STATUS_OK
ReadX 10910 1638400 61440 61440 NT_STATUS_OK
ReadX 10910 1699840 4096 4096 NT_STATUS_OK
ReadX 10910 1703936 61440 61440 NT_STATUS_OK
ReadX 10910 1765376 4096 4096 NT_STATUS_OK
ReadX 10910 1769472 61440 61440 NT_STATUS_OK
ReadX 10910 1830912 4096 4096 NT_STATUS_OK
ReadX 10910 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10912 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
ReadX 10912 2156 24 24 NT_STATUS_OK
ReadX 10912 2139 276 276 NT_STATUS_OK
ReadX 10912 2136 14 14 NT_STATUS_OK
ReadX 10912 2136 7 7 NT_STATUS_OK
ReadX 10912 2138 12 12 NT_STATUS_OK
ReadX 10912 2137 8 8 NT_STATUS_OK
ReadX 10912 2135 15 15 NT_STATUS_OK
ReadX 10912 0 16 16 NT_STATUS_OK
ReadX 10912 16 2048 2048 NT_STATUS_OK
ReadX 10912 2064 2048 2048 NT_STATUS_OK
ReadX 10912 257 2048 2048 NT_STATUS_OK
ReadX 10912 385 2048 2048 NT_STATUS_OK
ReadX 10912 513 2048 2048 NT_STATUS_OK
ReadX 10912 641 2048 2048 NT_STATUS_OK
ReadX 10912 769 2048 2048 NT_STATUS_OK
ReadX 10912 897 2048 2048 NT_STATUS_OK
ReadX 10912 1025 2048 2048 NT_STATUS_OK
ReadX 10912 1153 2048 2048 NT_STATUS_OK
ReadX 10912 1281 2048 2048 NT_STATUS_OK
ReadX 10912 1409 2048 2048 NT_STATUS_OK
ReadX 10912 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10910 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10917 NT_STATUS_OK
WriteX 10917 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
WriteX 10917 0 10575 10575 NT_STATUS_OK
Flush 10917 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10922 NT_STATUS_OK
LockX 10922 2147483538 1 NT_STATUS_OK
UnlockX 10922 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1005 NT_STATUS_OK
ReadX 10922 0 512 512 NT_STATUS_OK
ReadX 10922 512 512 512 NT_STATUS_OK
ReadX 10922 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1004 NT_STATUS_OK
Close 10922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10923 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1005 NT_STATUS_OK
ReadX 10923 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10924 NT_STATUS_OK
LockX 10924 2147483538 1 NT_STATUS_OK
UnlockX 10924 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10924 1005 NT_STATUS_OK
ReadX 10924 0 512 512 NT_STATUS_OK
ReadX 10924 512 512 512 NT_STATUS_OK
ReadX 10924 1024 512 512 NT_STATUS_OK
ReadX 10924 288 20 20 NT_STATUS_OK
ReadX 10924 308 2084 2084 NT_STATUS_OK
ReadX 10924 388 2084 2084 NT_STATUS_OK
ReadX 10924 388 2084 2084 NT_STATUS_OK
ReadX 10911 2157 1386 1386 NT_STATUS_OK
ReadX 10924 2472 399 399 NT_STATUS_OK
ReadX 10924 3072 1536 1536 NT_STATUS_OK
ReadX 10924 544 149 149 NT_STATUS_OK
ReadX 10924 693 485 485 NT_STATUS_OK
Close 10924 NT_STATUS_OK
ReadX 10911 2157 4096 4096 NT_STATUS_OK
ReadX 10911 6253 4096 4096 NT_STATUS_OK
ReadX 10911 10349 4096 4096 NT_STATUS_OK
ReadX 10911 14445 4096 4096 NT_STATUS_OK
ReadX 10911 18541 4096 4096 NT_STATUS_OK
ReadX 10911 22637 256 256 NT_STATUS_OK
ReadX 10911 22893 4096 4096 NT_STATUS_OK
ReadX 10911 26989 4096 4096 NT_STATUS_OK
ReadX 10911 31085 4096 4096 NT_STATUS_OK
ReadX 10911 35181 4096 4096 NT_STATUS_OK
ReadX 10911 39277 4096 4096 NT_STATUS_OK
ReadX 10911 43373 4096 4096 NT_STATUS_OK
ReadX 10911 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10911 2157 1024 1024 NT_STATUS_OK
ReadX 10911 1667 4688 4688 NT_STATUS_OK
ReadX 10911 6355 3516 3516 NT_STATUS_OK
ReadX 10911 9871 16384 16384 NT_STATUS_OK
ReadX 10911 26255 3771 3771 NT_STATUS_OK
ReadX 10911 30026 2048 2048 NT_STATUS_OK
ReadX 10911 32074 1024 1024 NT_STATUS_OK
ReadX 10911 33098 6652 6652 NT_STATUS_OK
ReadX 10911 39750 16384 16384 NT_STATUS_OK
ReadX 10911 56134 10496 10496 NT_STATUS_OK
ReadX 10911 66630 1784 1784 NT_STATUS_OK
ReadX 10911 68414 90 90 NT_STATUS_OK
ReadX 10911 68504 273 273 NT_STATUS_OK
ReadX 10911 68777 1600 1600 NT_STATUS_OK
ReadX 10911 70377 640 640 NT_STATUS_OK
ReadX 10911 71017 1280 1280 NT_STATUS_OK
ReadX 10911 72297 8464 8464 NT_STATUS_OK
ReadX 10911 80761 158 158 NT_STATUS_OK
ReadX 10911 80919 912 912 NT_STATUS_OK
ReadX 10911 81831 1980 1980 NT_STATUS_OK
ReadX 10911 83811 2256 2256 NT_STATUS_OK
ReadX 10911 86067 400 400 NT_STATUS_OK
ReadX 10911 86467 252 252 NT_STATUS_OK
ReadX 10911 86719 42 42 NT_STATUS_OK
ReadX 10911 86761 725 725 NT_STATUS_OK
ReadX 10911 2009 512 512 NT_STATUS_OK
ReadX 10911 3895 9 9 NT_STATUS_OK
ReadX 10911 3781 46 46 NT_STATUS_OK
ReadX 10911 4059 92 92 NT_STATUS_OK
ReadX 10911 3781 92 92 NT_STATUS_OK
ReadX 10911 3986 184 184 NT_STATUS_OK
ReadX 10911 3987 16384 16384 NT_STATUS_OK
ReadX 10911 3902 16384 16384 NT_STATUS_OK
ReadX 10911 3781 10240 10240 NT_STATUS_OK
ReadX 10911 3821 16384 16384 NT_STATUS_OK
ReadX 10911 3891 935 935 NT_STATUS_OK
ReadX 10911 4060 10240 10240 NT_STATUS_OK
ReadX 10911 4059 184 184 NT_STATUS_OK
ReadX 10911 256 184 184 NT_STATUS_OK
ReadX 10911 256 1026 1026 NT_STATUS_OK
ReadX 10911 3901 326 326 NT_STATUS_OK
ReadX 10911 3899 652 652 NT_STATUS_OK
ReadX 10911 256 2 2 NT_STATUS_OK
ReadX 10911 258 4948 4948 NT_STATUS_OK
Close 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10926 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10929 NT_STATUS_OK
WriteX 10929 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 65536 65536 NT_STATUS_OK
WriteX 10929 65536 65536 65536 NT_STATUS_OK
WriteX 10929 131072 65536 65536 NT_STATUS_OK
WriteX 10929 196608 65536 65536 NT_STATUS_OK
WriteX 10929 262144 65536 65536 NT_STATUS_OK
WriteX 10929 327680 65536 65536 NT_STATUS_OK
WriteX 10929 393216 65536 65536 NT_STATUS_OK
WriteX 10929 458752 65536 65536 NT_STATUS_OK
WriteX 10929 524288 65536 65536 NT_STATUS_OK
WriteX 10929 589824 35257 35257 NT_STATUS_OK
Close 10929 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10934 NT_STATUS_OK
WriteX 10934 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 258 NT_STATUS_OK
WriteX 10934 0 65536 65536 NT_STATUS_OK
WriteX 10934 65536 65536 65536 NT_STATUS_OK
WriteX 10934 131072 65536 65536 NT_STATUS_OK
WriteX 10934 196608 65536 65536 NT_STATUS_OK
WriteX 10934 262144 65536 65536 NT_STATUS_OK
WriteX 10934 327680 65536 65536 NT_STATUS_OK
WriteX 10934 393216 65536 65536 NT_STATUS_OK
WriteX 10934 458752 65536 65536 NT_STATUS_OK
WriteX 10934 524288 65536 65536 NT_STATUS_OK
WriteX 10934 589824 57598 57598 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10936 NT_STATUS_OK
WriteX 10936 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 258 NT_STATUS_OK
WriteX 10936 0 12543 12543 NT_STATUS_OK
Flush 10936 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10938 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10942 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
ReadX 10942 1938 24 24 NT_STATUS_OK
ReadX 10942 1920 276 276 NT_STATUS_OK
ReadX 10942 1918 14 14 NT_STATUS_OK
ReadX 10942 1918 7 7 NT_STATUS_OK
ReadX 10942 1919 12 12 NT_STATUS_OK
ReadX 10942 1919 8 8 NT_STATUS_OK
ReadX 10942 1917 15 15 NT_STATUS_OK
ReadX 10942 0 16 16 NT_STATUS_OK
ReadX 10942 16 2048 2048 NT_STATUS_OK
ReadX 10942 2064 2048 2048 NT_STATUS_OK
ReadX 10942 257 2048 2048 NT_STATUS_OK
ReadX 10942 385 2048 2048 NT_STATUS_OK
ReadX 10942 513 2048 2048 NT_STATUS_OK
ReadX 10942 641 2048 2048 NT_STATUS_OK
ReadX 10942 769 2048 2048 NT_STATUS_OK
ReadX 10942 897 2048 2048 NT_STATUS_OK
ReadX 10942 1025 2048 2048 NT_STATUS_OK
ReadX 10942 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10947 NT_STATUS_OK
WriteX 10947 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10947 258 NT_STATUS_OK
WriteX 10947 0 11588 11588 NT_STATUS_OK
Flush 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10948 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10952 NT_STATUS_OK
WriteX 10952 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10952 258 NT_STATUS_OK
WriteX 10952 0 11615 11615 NT_STATUS_OK
Flush 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10954 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10961 NT_STATUS_OK
WriteX 10961 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10961 258 NT_STATUS_OK
WriteX 10961 0 65536 65536 NT_STATUS_OK
WriteX 10961 65536 16050 16050 NT_STATUS_OK
Close 10961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10941 1939 64 64 NT_STATUS_OK
ReadX 10941 128 248 248 NT_STATUS_OK
ReadX 10941 128 568 568 NT_STATUS_OK
ReadX 10941 3872 1536 1536 NT_STATUS_OK
ReadX 10941 3456 2560 2560 NT_STATUS_OK
ReadX 10941 3136 512 512 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
ReadX 10941 3264 3072 3072 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 3616 4096 4096 NT_STATUS_OK
ReadX 10941 1939 64 64 NT_STATUS_OK
ReadX 10941 128 248 248 NT_STATUS_OK
ReadX 10941 128 608 608 NT_STATUS_OK
ReadX 10941 2858 1024 1024 NT_STATUS_OK
ReadX 10941 2810 4096 4096 NT_STATUS_OK
ReadX 10941 2826 4096 4096 NT_STATUS_OK
ReadX 10941 2580 2048 2048 NT_STATUS_OK
ReadX 10941 2800 2560 2560 NT_STATUS_OK
ReadX 10941 2100 4096 4096 NT_STATUS_OK
ReadX 10941 2084 4096 4096 NT_STATUS_OK
ReadX 10941 868 4096 4096 NT_STATUS_OK
ReadX 10941 2324 4096 4096 NT_STATUS_OK
ReadX 10941 884 4096 4096 NT_STATUS_OK
ReadX 10941 2604 1024 1024 NT_STATUS_OK
ReadX 10941 580 4096 4096 NT_STATUS_OK
ReadX 10941 596 4096 4096 NT_STATUS_OK
ReadX 10941 2752 4096 4096 NT_STATUS_OK
ReadX 10941 2842 1024 1024 NT_STATUS_OK
ReadX 10941 660 4096 4096 NT_STATUS_OK
ReadX 10941 2720 4096 4096 NT_STATUS_OK
ReadX 10941 2736 4096 4096 NT_STATUS_OK
ReadX 10941 628 4096 4096 NT_STATUS_OK
ReadX 10941 2704 4096 4096 NT_STATUS_OK
ReadX 10941 1556 4096 4096 NT_STATUS_OK
ReadX 10941 576 4096 4096 NT_STATUS_OK
ReadX 10941 3168 1536 1536 NT_STATUS_OK
ReadX 10941 832 4096 4096 NT_STATUS_OK
ReadX 10941 1088 4096 4096 NT_STATUS_OK
ReadX 10941 1344 4096 4096 NT_STATUS_OK
ReadX 10941 1600 4096 4096 NT_STATUS_OK
ReadX 10941 1856 4096 4096 NT_STATUS_OK
ReadX 10941 2112 4096 4096 NT_STATUS_OK
ReadX 10941 1892 4096 4096 NT_STATUS_OK
ReadX 10941 820 4096 4096 NT_STATUS_OK
ReadX 10941 788 4096 4096 NT_STATUS_OK
ReadX 10941 1604 4096 4096 NT_STATUS_OK
ReadX 10941 3648 4096 4096 NT_STATUS_OK
ReadX 10941 2608 4096 4096 NT_STATUS_OK
ReadX 10941 548 4096 4096 NT_STATUS_OK
ReadX 10941 740 4096 4096 NT_STATUS_OK
ReadX 10941 1344 4096 4096 NT_STATUS_OK
ReadX 10941 3392 4096 4096 NT_STATUS_OK
ReadX 10941 3904 4096 4096 NT_STATUS_OK
ReadX 10941 644 4096 4096 NT_STATUS_OK
ReadX 10941 676 4096 4096 NT_STATUS_OK
ReadX 10941 2688 4096 4096 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 900 4096 4096 NT_STATUS_OK
ReadX 10941 1908 4096 4096 NT_STATUS_OK
ReadX 10941 852 4096 4096 NT_STATUS_OK
ReadX 10941 724 4096 4096 NT_STATUS_OK
ReadX 10941 2292 4096 4096 NT_STATUS_OK
ReadX 10941 612 4096 4096 NT_STATUS_OK
ReadX 10941 388 4096 4096 NT_STATUS_OK
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 500 4096 4096 NT_STATUS_OK
ReadX 10941 356 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 576 4096 4096 NT_STATUS_OK
ReadX 10941 340 4096 4096 NT_STATUS_OK
ReadX 10941 420 4096 4096 NT_STATUS_OK
ReadX 10941 1600 4096 4096 NT_STATUS_OK
ReadX 10941 404 4096 4096 NT_STATUS_OK
ReadX 10941 1428 4096 4096 NT_STATUS_OK
ReadX 10941 2656 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 452 4096 4096 NT_STATUS_OK
ReadX 10941 692 4096 4096 NT_STATUS_OK
ReadX 10941 564 4096 4096 NT_STATUS_OK
ReadX 10941 372 4096 4096 NT_STATUS_OK
ReadX 10941 468 4096 4096 NT_STATUS_OK
ReadX 10941 484 4096 4096 NT_STATUS_OK
ReadX 10941 1088 4096 4096 NT_STATUS_OK
ReadX 10941 1924 4096 4096 NT_STATUS_OK
ReadX 10941 2768 4096 4096 NT_STATUS_OK
ReadX 10941 832 4096 4096 NT_STATUS_OK
ReadX 10941 836 4096 4096 NT_STATUS_OK
ReadX 10941 1856 4096 4096 NT_STATUS_OK
ReadX 10941 2640 4096 4096 NT_STATUS_OK
ReadX 10941 436 4096 4096 NT_STATUS_OK
ReadX 10941 1828 4096 4096 NT_STATUS_OK
ReadX 10941 804 4096 4096 NT_STATUS_OK
ReadX 10941 1860 4096 4096 NT_STATUS_OK
ReadX 10941 1812 4096 4096 NT_STATUS_OK
ReadX 10941 756 4096 4096 NT_STATUS_OK
ReadX 10941 1636 4096 4096 NT_STATUS_OK
ReadX 10941 772 4096 4096 NT_STATUS_OK
ReadX 10941 2036 4096 4096 NT_STATUS_OK
ReadX 10941 1220 4096 4096 NT_STATUS_OK
ReadX 10941 1652 4096 4096 NT_STATUS_OK
ReadX 10941 2588 4096 4096 NT_STATUS_OK
ReadX 10941 916 4096 4096 NT_STATUS_OK
ReadX 10941 260 4096 4096 NT_STATUS_OK
ReadX 10941 932 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 308 4096 4096 NT_STATUS_OK
ReadX 10941 292 4096 4096 NT_STATUS_OK
ReadX 10941 1140 4096 4096 NT_STATUS_OK
ReadX 10941 276 4096 4096 NT_STATUS_OK
ReadX 10941 2020 4096 4096 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
ReadX 10941 516 4096 4096 NT_STATUS_OK
ReadX 10941 1844 4096 4096 NT_STATUS_OK
ReadX 10941 1124 4096 4096 NT_STATUS_OK
ReadX 10941 3136 4096 4096 NT_STATUS_OK
ReadX 10941 324 4096 4096 NT_STATUS_OK
ReadX 10941 1156 4096 4096 NT_STATUS_OK
ReadX 10941 1172 4096 4096 NT_STATUS_OK
ReadX 10941 2112 4096 4096 NT_STATUS_OK
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 964 4096 4096 NT_STATUS_OK
ReadX 10941 980 4096 4096 NT_STATUS_OK
ReadX 10941 1012 4096 4096 NT_STATUS_OK
ReadX 10941 532 4096 4096 NT_STATUS_OK
ReadX 10941 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10941 1620 4096 4096 NT_STATUS_OK
ReadX 10941 1604 4096 4096 NT_STATUS_OK
ReadX 10941 2116 4096 4096 NT_STATUS_OK
ReadX 10941 2132 4096 4096 NT_STATUS_OK
ReadX 10941 2148 4096 4096 NT_STATUS_OK
ReadX 10941 2276 4096 4096 NT_STATUS_OK
ReadX 10941 1540 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10966 NT_STATUS_OK
QUERY_FILE_INFORMATION 10921 1004 NT_STATUS_OK
Close 10921 NT_STATUS_OK
WriteX 10966 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1004 NT_STATUS_OK
Close 10923 NT_STATUS_OK
WriteX 10966 0 65536 65536 NT_STATUS_OK
WriteX 10966 65536 64850 64850 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10968 NT_STATUS_OK
WriteX 10968 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
ReadX 10941 2068 4096 4096 NT_STATUS_OK
ReadX 10941 1588 4096 4096 NT_STATUS_OK
ReadX 10941 1572 4096 4096 NT_STATUS_OK
WriteX 10968 0 18630 18630 NT_STATUS_OK
Flush 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10970 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10941 612 4096 4096 NT_STATUS_OK
ReadX 10941 564 4096 4096 NT_STATUS_OK
ReadX 10941 1876 4096 4096 NT_STATUS_OK
ReadX 10941 628 4096 4096 NT_STATUS_OK
ReadX 10941 740 4096 4096 NT_STATUS_OK
ReadX 10941 724 4096 4096 NT_STATUS_OK
ReadX 10941 644 4096 4096 NT_STATUS_OK
ReadX 10941 2324 4096 4096 NT_STATUS_OK
ReadX 10941 660 4096 4096 NT_STATUS_OK
ReadX 10941 852 4096 4096 NT_STATUS_OK
ReadX 10941 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 580 4096 4096 NT_STATUS_OK
ReadX 10941 3136 512 512 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 61440 4096 4096 NT_STATUS_OK
ReadX 10973 126976 4096 4096 NT_STATUS_OK
WriteX 10973 0 65536 65536 NT_STATUS_OK
WriteX 10973 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 61440 4096 4096 NT_STATUS_OK
ReadX 10974 126976 4096 4096 NT_STATUS_OK
ReadX 10974 192512 4096 4096 NT_STATUS_OK
ReadX 10974 258048 4096 4096 NT_STATUS_OK
WriteX 10974 0 65536 65536 NT_STATUS_OK
WriteX 10974 65536 65536 65536 NT_STATUS_OK
WriteX 10974 131072 65536 65536 NT_STATUS_OK
WriteX 10974 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 61440 4096 4096 NT_STATUS_OK
ReadX 10975 126976 4096 4096 NT_STATUS_OK
ReadX 10975 192512 4096 4096 NT_STATUS_OK
ReadX 10975 258048 4096 4096 NT_STATUS_OK
ReadX 10975 323584 4096 4096 NT_STATUS_OK
ReadX 10975 389120 4096 4096 NT_STATUS_OK
ReadX 10975 454656 4096 4096 NT_STATUS_OK
ReadX 10975 520192 4096 4096 NT_STATUS_OK
WriteX 10975 0 65536 65536 NT_STATUS_OK
WriteX 10975 65536 65536 65536 NT_STATUS_OK
WriteX 10975 131072 65536 65536 NT_STATUS_OK
WriteX 10975 196608 65536 65536 NT_STATUS_OK
WriteX 10975 262144 65536 65536 NT_STATUS_OK
WriteX 10975 327680 65536 65536 NT_STATUS_OK
WriteX 10975 393216 65536 65536 NT_STATUS_OK
WriteX 10975 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10977 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10978 NT_STATUS_OK
WriteX 10978 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10978 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10976 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10980 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10973 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Close 10975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10983 NT_STATUS_OK
WriteX 10983 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10983 258 NT_STATUS_OK
WriteX 10983 0 62591 62591 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10985 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10988 NT_STATUS_OK
WriteX 10988 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 258 NT_STATUS_OK
WriteX 10988 0 10845 10845 NT_STATUS_OK
Close 10988 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10993 NT_STATUS_OK
WriteX 10993 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 258 NT_STATUS_OK
WriteX 10993 0 30118 30118 NT_STATUS_OK
Close 10993 NT_STATUS_OK
WriteX 10976 0 4096 4096 NT_STATUS_OK
WriteX 10978 0 64 64 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 61440 61440 NT_STATUS_OK
ReadX 10995 61440 4096 4096 NT_STATUS_OK
ReadX 10995 65536 61440 61440 NT_STATUS_OK
ReadX 10995 126976 4096 4096 NT_STATUS_OK
ReadX 10995 131072 61440 61440 NT_STATUS_OK
ReadX 10995 192512 4096 4096 NT_STATUS_OK
ReadX 10995 196608 61440 61440 NT_STATUS_OK
ReadX 10995 258048 4096 4096 NT_STATUS_OK
ReadX 10995 262144 61440 61440 NT_STATUS_OK
ReadX 10995 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 61440 61440 NT_STATUS_OK
ReadX 10996 61440 4096 4096 NT_STATUS_OK
ReadX 10996 65536 61440 61440 NT_STATUS_OK
ReadX 10996 126976 4096 4096 NT_STATUS_OK
ReadX 10996 131072 61440 61440 NT_STATUS_OK
ReadX 10996 192512 4096 4096 NT_STATUS_OK
ReadX 10996 196608 61440 61440 NT_STATUS_OK
ReadX 10996 258048 4096 4096 NT_STATUS_OK
ReadX 10996 262144 61440 61440 NT_STATUS_OK
ReadX 10996 323584 4096 4096 NT_STATUS_OK
ReadX 10996 327680 61440 61440 NT_STATUS_OK
ReadX 10996 389120 4096 4096 NT_STATUS_OK
ReadX 10996 393216 61440 61440 NT_STATUS_OK
ReadX 10996 454656 4096 4096 NT_STATUS_OK
ReadX 10996 458752 61440 61440 NT_STATUS_OK
ReadX 10996 520192 4096 4096 NT_STATUS_OK
ReadX 10996 524288 61440 61440 NT_STATUS_OK
ReadX 10996 585728 4096 4096 NT_STATUS_OK
ReadX 10996 589824 61440 61440 NT_STATUS_OK
ReadX 10996 651264 4096 4096 NT_STATUS_OK
ReadX 10996 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 61440 61440 NT_STATUS_OK
ReadX 10997 61440 4096 4096 NT_STATUS_OK
ReadX 10997 65536 61440 61440 NT_STATUS_OK
ReadX 10997 126976 4096 4096 NT_STATUS_OK
ReadX 10997 131072 61440 61440 NT_STATUS_OK
ReadX 10997 192512 4096 4096 NT_STATUS_OK
ReadX 10997 196608 61440 61440 NT_STATUS_OK
ReadX 10997 258048 4096 4096 NT_STATUS_OK
ReadX 10997 262144 61440 61440 NT_STATUS_OK
ReadX 10997 323584 4096 4096 NT_STATUS_OK
ReadX 10997 327680 61440 61440 NT_STATUS_OK
ReadX 10997 389120 4096 4096 NT_STATUS_OK
ReadX 10997 393216 61440 61440 NT_STATUS_OK
ReadX 10997 454656 4096 4096 NT_STATUS_OK
ReadX 10997 458752 61440 61440 NT_STATUS_OK
ReadX 10997 520192 4096 4096 NT_STATUS_OK
ReadX 10997 524288 61440 61440 NT_STATUS_OK
ReadX 10997 585728 4096 4096 NT_STATUS_OK
ReadX 10997 589824 61440 61440 NT_STATUS_OK
ReadX 10997 651264 4096 4096 NT_STATUS_OK
ReadX 10997 655360 61440 61440 NT_STATUS_OK
ReadX 10997 716800 4096 4096 NT_STATUS_OK
ReadX 10997 720896 61440 61440 NT_STATUS_OK
ReadX 10997 782336 4096 4096 NT_STATUS_OK
ReadX 10997 786432 61440 61440 NT_STATUS_OK
ReadX 10997 847872 4096 4096 NT_STATUS_OK
ReadX 10997 851968 61440 61440 NT_STATUS_OK
ReadX 10997 913408 4096 4096 NT_STATUS_OK
ReadX 10997 917504 61440 61440 NT_STATUS_OK
ReadX 10997 978944 4096 4096 NT_STATUS_OK
ReadX 10997 983040 61440 61440 NT_STATUS_OK
ReadX 10997 1044480 4096 4096 NT_STATUS_OK
ReadX 10997 1048576 61440 61440 NT_STATUS_OK
ReadX 10997 1110016 4096 4096 NT_STATUS_OK
ReadX 10997 1114112 61440 61440 NT_STATUS_OK
ReadX 10997 1175552 4096 4096 NT_STATUS_OK
ReadX 10997 1179648 61440 61440 NT_STATUS_OK
ReadX 10997 1241088 4096 4096 NT_STATUS_OK
ReadX 10997 1245184 61440 61440 NT_STATUS_OK
ReadX 10997 1306624 4096 4096 NT_STATUS_OK
ReadX 10997 1310720 61440 61440 NT_STATUS_OK
ReadX 10997 1372160 4096 4096 NT_STATUS_OK
ReadX 10997 1376256 61440 61440 NT_STATUS_OK
ReadX 10997 1437696 4096 4096 NT_STATUS_OK
ReadX 10997 1441792 61440 61440 NT_STATUS_OK
ReadX 10997 1503232 4096 4096 NT_STATUS_OK
ReadX 10997 1507328 61440 61440 NT_STATUS_OK
ReadX 10997 1568768 4096 4096 NT_STATUS_OK
ReadX 10997 1572864 61440 61440 NT_STATUS_OK
ReadX 10997 1634304 4096 4096 NT_STATUS_OK
ReadX 10997 1638400 61440 61440 NT_STATUS_OK
ReadX 10997 1699840 4096 4096 NT_STATUS_OK
ReadX 10997 1703936 61440 61440 NT_STATUS_OK
ReadX 10997 1765376 4096 4096 NT_STATUS_OK
ReadX 10997 1769472 61440 61440 NT_STATUS_OK
ReadX 10997 1830912 4096 4096 NT_STATUS_OK
ReadX 10997 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10998 NT_STATUS_OK
Close 10998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
ReadX 11002 4096 4096 4096 NT_STATUS_OK
ReadX 11002 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11006 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11007 NT_STATUS_OK
Close 11007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 8192 8192 NT_STATUS_OK
ReadX 11010 8192 8192 8192 NT_STATUS_OK
ReadX 11010 16384 8192 8192 NT_STATUS_OK
ReadX 11010 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11015 NT_STATUS_OK
WriteX 11015 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11015 258 NT_STATUS_OK
WriteX 11015 0 10438 10438 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11016 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11019 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11021 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
ReadX 11024 4096 4096 4096 NT_STATUS_OK
ReadX 11024 8192 4096 4096 NT_STATUS_OK
ReadX 11024 12288 8192 8192 NT_STATUS_OK
ReadX 11024 20480 8192 8192 NT_STATUS_OK
ReadX 11024 28672 8192 8192 NT_STATUS_OK
ReadX 11024 36864 8192 8192 NT_STATUS_OK
ReadX 11024 45056 8192 8192 NT_STATUS_OK
ReadX 11024 53248 8192 8192 NT_STATUS_OK
ReadX 11024 61440 8192 8192 NT_STATUS_OK
ReadX 11024 69632 8192 8192 NT_STATUS_OK
ReadX 11024 77824 8192 8192 NT_STATUS_OK
ReadX 11024 86016 8192 8192 NT_STATUS_OK
ReadX 11024 94208 8192 8192 NT_STATUS_OK
ReadX 11024 102400 8192 8192 NT_STATUS_OK
ReadX 11024 110592 8192 8192 NT_STATUS_OK
ReadX 11024 118784 8192 8192 NT_STATUS_OK
ReadX 11024 126976 8192 8192 NT_STATUS_OK
ReadX 11024 135168 8192 8192 NT_STATUS_OK
ReadX 11024 143360 8192 8192 NT_STATUS_OK
ReadX 11024 151552 8192 8192 NT_STATUS_OK
ReadX 11024 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11029 NT_STATUS_OK
WriteX 11029 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 258 NT_STATUS_OK
WriteX 11029 0 28489 28489 NT_STATUS_OK
Close 11029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11030 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11032 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11033 NT_STATUS_OK
Close 11033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 8192 8192 NT_STATUS_OK
ReadX 11036 8192 8192 8192 NT_STATUS_OK
ReadX 11036 16384 8192 8192 NT_STATUS_OK
ReadX 11036 24576 8192 8192 NT_STATUS_OK
ReadX 11036 32768 16384 16384 NT_STATUS_OK
ReadX 11036 49152 8192 8192 NT_STATUS_OK
ReadX 11036 57344 8192 8192 NT_STATUS_OK
ReadX 11036 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11038 NT_STATUS_OK
Close 11038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11041 NT_STATUS_OK
WriteX 11041 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
WriteX 11041 0 29253 29253 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11042 NT_STATUS_OK
Close 11042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11048 NT_STATUS_OK
WriteX 11048 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 258 NT_STATUS_OK
WriteX 11048 0 30183 30183 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11049 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11051 NT_STATUS_OK
WriteX 11051 0 510 510 NT_STATUS_OK
WriteX 11051 510 512 512 NT_STATUS_OK
WriteX 11051 1022 510 510 NT_STATUS_OK
WriteX 11051 1532 510 510 NT_STATUS_OK
WriteX 11051 2042 168 168 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11052 NT_STATUS_OK
Close 11052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 61440 4096 4096 NT_STATUS_OK
ReadX 11055 126976 4096 4096 NT_STATUS_OK
WriteX 11055 0 65536 65536 NT_STATUS_OK
WriteX 11055 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 61440 4096 4096 NT_STATUS_OK
ReadX 11056 126976 4096 4096 NT_STATUS_OK
ReadX 11056 192512 4096 4096 NT_STATUS_OK
ReadX 11056 258048 4096 4096 NT_STATUS_OK
WriteX 11056 0 65536 65536 NT_STATUS_OK
WriteX 11056 65536 65536 65536 NT_STATUS_OK
WriteX 11056 131072 65536 65536 NT_STATUS_OK
WriteX 11056 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 61440 4096 4096 NT_STATUS_OK
ReadX 11057 126976 4096 4096 NT_STATUS_OK
ReadX 11057 192512 4096 4096 NT_STATUS_OK
ReadX 11057 258048 4096 4096 NT_STATUS_OK
ReadX 11057 323584 4096 4096 NT_STATUS_OK
ReadX 11057 389120 4096 4096 NT_STATUS_OK
ReadX 11057 454656 4096 4096 NT_STATUS_OK
ReadX 11057 520192 4096 4096 NT_STATUS_OK
WriteX 11057 0 65536 65536 NT_STATUS_OK
WriteX 11057 65536 65536 65536 NT_STATUS_OK
WriteX 11057 131072 65536 65536 NT_STATUS_OK
WriteX 11057 196608 65536 65536 NT_STATUS_OK
WriteX 11057 262144 65536 65536 NT_STATUS_OK
WriteX 11057 327680 65536 65536 NT_STATUS_OK
WriteX 11057 393216 65536 65536 NT_STATUS_OK
WriteX 11057 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11067 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11073 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11078 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11082 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11087 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11092 NT_STATUS_OK
Close 11092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11126 NT_STATUS_OK
WriteX 11126 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11126 0 65536 65536 NT_STATUS_OK
WriteX 11126 65536 65536 65536 NT_STATUS_OK
WriteX 11126 131072 65536 65536 NT_STATUS_OK
WriteX 11126 196608 65536 65536 NT_STATUS_OK
WriteX 11126 262144 26634 26634 NT_STATUS_OK
Close 11126 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11131 NT_STATUS_OK
Close 11131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
ReadX 11134 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11135 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11167 NT_STATUS_OK
Close 11167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
Close 11213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
Close 11214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
Close 11228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11258 0 4096 4096 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 4096 4096 NT_STATUS_OK
ReadX 11260 4096 4096 4096 NT_STATUS_OK
ReadX 11260 8192 4096 4096 NT_STATUS_OK
ReadX 11260 12288 4096 4096 NT_STATUS_OK
ReadX 11260 16384 4096 4096 NT_STATUS_OK
ReadX 11260 20480 4096 4096 NT_STATUS_OK
ReadX 11260 24576 4096 4096 NT_STATUS_OK
ReadX 11260 28672 4096 4096 NT_STATUS_OK
ReadX 11260 32768 4096 4096 NT_STATUS_OK
ReadX 11260 36864 4096 4096 NT_STATUS_OK
ReadX 11260 40960 4096 4096 NT_STATUS_OK
ReadX 11260 45056 4096 4096 NT_STATUS_OK
ReadX 11260 49152 4096 4096 NT_STATUS_OK
ReadX 11260 53248 4096 4096 NT_STATUS_OK
ReadX 11260 57344 4096 4096 NT_STATUS_OK
ReadX 11260 61440 4096 4096 NT_STATUS_OK
ReadX 11260 65536 4096 4096 NT_STATUS_OK
ReadX 11260 69632 4096 4096 NT_STATUS_OK
ReadX 11260 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11260 1004 NT_STATUS_OK
WriteX 11260 0 4096 4096 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11261 NT_STATUS_OK
SET_FILE_INFORMATION 11261 1004 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11266 NT_STATUS_OK
WriteX 11266 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11266 258 NT_STATUS_OK
WriteX 11266 0 65536 65536 NT_STATUS_OK
WriteX 11266 65536 19979 19979 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
SET_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11272 1004 NT_STATUS_OK
WriteX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11278 NT_STATUS_OK
WriteX 11278 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 258 NT_STATUS_OK
WriteX 11278 0 65536 65536 NT_STATUS_OK
WriteX 11278 65536 17654 17654 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
SET_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11280 NT_STATUS_OK
SET_FILE_INFORMATION 11280 1004 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
ReadX 11284 4096 4096 4096 NT_STATUS_OK
ReadX 11284 8192 4096 4096 NT_STATUS_OK
ReadX 11284 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11284 16384 4096 4096 NT_STATUS_OK
ReadX 11284 20480 4096 4096 NT_STATUS_OK
ReadX 11284 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11287 1004 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11288 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11293 NT_STATUS_OK
WriteX 11293 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 65536 65536 NT_STATUS_OK
WriteX 11293 65536 19490 19490 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
QUERY_FILE_INFORMATION 11294 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
SET_FILE_INFORMATION 11294 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11295 NT_STATUS_OK
SET_FILE_INFORMATION 11295 1004 NT_STATUS_OK
Close 11295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11299 0 4096 4096 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
ReadX 11301 4096 4096 4096 NT_STATUS_OK
ReadX 11301 8192 4096 4096 NT_STATUS_OK
ReadX 11301 12288 4096 4096 NT_STATUS_OK
ReadX 11301 16384 4096 4096 NT_STATUS_OK
ReadX 11301 20480 4096 4096 NT_STATUS_OK
ReadX 11301 24576 4096 4096 NT_STATUS_OK
ReadX 11301 28672 4096 4096 NT_STATUS_OK
ReadX 11301 32768 4096 4096 NT_STATUS_OK
ReadX 11301 36864 4096 4096 NT_STATUS_OK
ReadX 11301 40960 4096 4096 NT_STATUS_OK
ReadX 11301 45056 4096 4096 NT_STATUS_OK
ReadX 11301 49152 4096 4096 NT_STATUS_OK
ReadX 11301 53248 4096 4096 NT_STATUS_OK
ReadX 11301 57344 4096 4096 NT_STATUS_OK
ReadX 11301 61440 4096 4096 NT_STATUS_OK
ReadX 11301 65536 4096 4096 NT_STATUS_OK
ReadX 11301 69632 4096 4096 NT_STATUS_OK
ReadX 11301 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11301 1004 NT_STATUS_OK
WriteX 11301 0 4096 4096 NT_STATUS_OK
Close 11301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11302 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
Close 11302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11307 NT_STATUS_OK
WriteX 11307 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11307 258 NT_STATUS_OK
WriteX 11307 0 65536 65536 NT_STATUS_OK
WriteX 11307 65536 8866 8866 NT_STATUS_OK
Close 11307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
WriteX 11308 0 4096 4096 NT_STATUS_OK
Flush 11308 NT_STATUS_OK
SET_FILE_INFORMATION 11308 1004 NT_STATUS_OK
WriteX 11308 0 4096 4096 NT_STATUS_OK
Flush 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
Close 11310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11318 NT_STATUS_OK
WriteX 11318 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 65536 65536 NT_STATUS_OK
WriteX 11318 65536 9298 9298 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11319 NT_STATUS_OK
ReadX 11319 0 4096 4096 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
SET_FILE_INFORMATION 11319 1004 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11320 NT_STATUS_OK
SET_FILE_INFORMATION 11320 1004 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11325 0 4096 4096 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11326 4096 4096 4096 NT_STATUS_OK
ReadX 11326 8192 4096 4096 NT_STATUS_OK
ReadX 11326 12288 4096 4096 NT_STATUS_OK
ReadX 11326 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
Close 11328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11329 1004 NT_STATUS_OK
WriteX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11330 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
WriteX 11335 0 65536 65536 NT_STATUS_OK
WriteX 11335 65536 11540 11540 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
WriteX 11336 0 4096 4096 NT_STATUS_OK
Flush 11336 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
WriteX 11336 0 4096 4096 NT_STATUS_OK
Flush 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11337 NT_STATUS_OK
SET_FILE_INFORMATION 11337 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11338 NT_STATUS_OK
ReadX 11338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11339 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 61440 4096 4096 NT_STATUS_OK
ReadX 11341 126976 4096 4096 NT_STATUS_OK
WriteX 11341 0 65536 65536 NT_STATUS_OK
WriteX 11341 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 61440 4096 4096 NT_STATUS_OK
ReadX 11342 126976 4096 4096 NT_STATUS_OK
ReadX 11342 192512 4096 4096 NT_STATUS_OK
ReadX 11342 258048 4096 4096 NT_STATUS_OK
WriteX 11342 0 65536 65536 NT_STATUS_OK
WriteX 11342 65536 65536 65536 NT_STATUS_OK
WriteX 11342 131072 65536 65536 NT_STATUS_OK
WriteX 11342 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 61440 4096 4096 NT_STATUS_OK
ReadX 11343 126976 4096 4096 NT_STATUS_OK
ReadX 11343 192512 4096 4096 NT_STATUS_OK
ReadX 11343 258048 4096 4096 NT_STATUS_OK
ReadX 11343 323584 4096 4096 NT_STATUS_OK
ReadX 11343 389120 4096 4096 NT_STATUS_OK
ReadX 11343 454656 4096 4096 NT_STATUS_OK
ReadX 11343 520192 4096 4096 NT_STATUS_OK
WriteX 11343 0 65536 65536 NT_STATUS_OK
WriteX 11343 65536 65536 65536 NT_STATUS_OK
WriteX 11343 131072 65536 65536 NT_STATUS_OK
WriteX 11343 196608 65536 65536 NT_STATUS_OK
WriteX 11343 262144 65536 65536 NT_STATUS_OK
WriteX 11343 327680 65536 65536 NT_STATUS_OK
WriteX 11343 393216 65536 65536 NT_STATUS_OK
WriteX 11343 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
ReadX 11344 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11345 NT_STATUS_OK
WriteX 11345 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11345 258 NT_STATUS_OK
WriteX 11345 0 53 53 NT_STATUS_OK
Close 11345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11338 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11344 8192 4096 4096 NT_STATUS_OK
ReadX 11344 12288 4096 4096 NT_STATUS_OK
WriteX 11348 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11348 258 NT_STATUS_OK
ReadX 11344 16384 4096 4096 NT_STATUS_OK
ReadX 11344 20480 4096 4096 NT_STATUS_OK
WriteX 11348 0 15360 15360 NT_STATUS_OK
Close 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11349 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11349 1004 NT_STATUS_OK
WriteX 11349 0 4096 4096 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11352 4096 4096 4096 NT_STATUS_OK
ReadX 11352 8192 4096 4096 NT_STATUS_OK
ReadX 11352 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 4096 4096 NT_STATUS_OK
ReadX 11355 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11356 NT_STATUS_OK
ReadX 11356 0 4096 4096 NT_STATUS_OK
ReadX 11356 4096 4096 4096 NT_STATUS_OK
ReadX 11356 8192 4096 4096 NT_STATUS_OK
Close 11355 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11357 NT_STATUS_OK
WriteX 11357 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 15360 15360 NT_STATUS_OK
Close 11357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11362 NT_STATUS_OK
SET_FILE_INFORMATION 11362 1004 NT_STATUS_OK
Close 11362 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
ReadX 11365 4096 4096 4096 NT_STATUS_OK
ReadX 11365 8192 4096 4096 NT_STATUS_OK
ReadX 11365 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11365 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11365 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11367 NT_STATUS_OK
WriteX 11367 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11367 258 NT_STATUS_OK
WriteX 11367 0 53 53 NT_STATUS_OK
Close 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11366 4096 4096 4096 NT_STATUS_OK
ReadX 11366 8192 4096 4096 NT_STATUS_OK
ReadX 11366 12288 4096 4096 NT_STATUS_OK
WriteX 11370 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11370 258 NT_STATUS_OK
WriteX 11370 0 12006 12006 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
WriteX 11371 0 4096 4096 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11372 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11374 4096 4096 4096 NT_STATUS_OK
ReadX 11374 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11377 NT_STATUS_OK
WriteX 11377 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 11991 11991 NT_STATUS_OK
Close 11377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11381 NT_STATUS_OK
ReadX 11381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11382 NT_STATUS_OK
SET_FILE_INFORMATION 11382 1004 NT_STATUS_OK
Close 11382 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11386 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11385 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
ReadX 11385 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
WriteX 11385 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
Close 11361 NT_STATUS_OK
WriteX 11365 0 19054 19054 NT_STATUS_OK
WriteX 11385 0 12288 12288 NT_STATUS_OK
Close 11381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 61440 61440 NT_STATUS_OK
ReadX 11392 61440 4096 4096 NT_STATUS_OK
ReadX 11392 65536 61440 61440 NT_STATUS_OK
ReadX 11392 126976 4096 4096 NT_STATUS_OK
ReadX 11392 131072 61440 61440 NT_STATUS_OK
ReadX 11392 192512 4096 4096 NT_STATUS_OK
ReadX 11392 196608 61440 61440 NT_STATUS_OK
ReadX 11392 258048 4096 4096 NT_STATUS_OK
ReadX 11392 262144 61440 61440 NT_STATUS_OK
ReadX 11392 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 61440 61440 NT_STATUS_OK
ReadX 11393 61440 4096 4096 NT_STATUS_OK
ReadX 11393 65536 61440 61440 NT_STATUS_OK
ReadX 11393 126976 4096 4096 NT_STATUS_OK
ReadX 11393 131072 61440 61440 NT_STATUS_OK
ReadX 11393 192512 4096 4096 NT_STATUS_OK
ReadX 11393 196608 61440 61440 NT_STATUS_OK
ReadX 11393 258048 4096 4096 NT_STATUS_OK
ReadX 11393 262144 61440 61440 NT_STATUS_OK
ReadX 11393 323584 4096 4096 NT_STATUS_OK
ReadX 11393 327680 61440 61440 NT_STATUS_OK
ReadX 11393 389120 4096 4096 NT_STATUS_OK
ReadX 11393 393216 61440 61440 NT_STATUS_OK
ReadX 11393 454656 4096 4096 NT_STATUS_OK
ReadX 11393 458752 61440 61440 NT_STATUS_OK
ReadX 11393 520192 4096 4096 NT_STATUS_OK
ReadX 11393 524288 61440 61440 NT_STATUS_OK
ReadX 11393 585728 4096 4096 NT_STATUS_OK
ReadX 11393 589824 61440 61440 NT_STATUS_OK
ReadX 11393 651264 4096 4096 NT_STATUS_OK
ReadX 11393 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 61440 61440 NT_STATUS_OK
ReadX 11394 61440 4096 4096 NT_STATUS_OK
ReadX 11394 65536 61440 61440 NT_STATUS_OK
ReadX 11394 126976 4096 4096 NT_STATUS_OK
ReadX 11394 131072 61440 61440 NT_STATUS_OK
ReadX 11394 192512 4096 4096 NT_STATUS_OK
ReadX 11394 196608 61440 61440 NT_STATUS_OK
ReadX 11394 258048 4096 4096 NT_STATUS_OK
ReadX 11394 262144 61440 61440 NT_STATUS_OK
ReadX 11394 323584 4096 4096 NT_STATUS_OK
ReadX 11394 327680 61440 61440 NT_STATUS_OK
ReadX 11394 389120 4096 4096 NT_STATUS_OK
ReadX 11394 393216 61440 61440 NT_STATUS_OK
ReadX 11394 454656 4096 4096 NT_STATUS_OK
ReadX 11394 458752 61440 61440 NT_STATUS_OK
ReadX 11394 520192 4096 4096 NT_STATUS_OK
ReadX 11394 524288 61440 61440 NT_STATUS_OK
ReadX 11394 585728 4096 4096 NT_STATUS_OK
ReadX 11394 589824 61440 61440 NT_STATUS_OK
ReadX 11394 651264 4096 4096 NT_STATUS_OK
ReadX 11394 655360 61440 61440 NT_STATUS_OK
ReadX 11394 716800 4096 4096 NT_STATUS_OK
ReadX 11394 720896 61440 61440 NT_STATUS_OK
ReadX 11394 782336 4096 4096 NT_STATUS_OK
ReadX 11394 786432 61440 61440 NT_STATUS_OK
ReadX 11394 847872 4096 4096 NT_STATUS_OK
ReadX 11394 851968 61440 61440 NT_STATUS_OK
ReadX 11394 913408 4096 4096 NT_STATUS_OK
ReadX 11394 917504 61440 61440 NT_STATUS_OK
ReadX 11394 978944 4096 4096 NT_STATUS_OK
ReadX 11394 983040 61440 61440 NT_STATUS_OK
ReadX 11394 1044480 4096 4096 NT_STATUS_OK
ReadX 11394 1048576 61440 61440 NT_STATUS_OK
ReadX 11394 1110016 4096 4096 NT_STATUS_OK
ReadX 11394 1114112 61440 61440 NT_STATUS_OK
ReadX 11394 1175552 4096 4096 NT_STATUS_OK
ReadX 11394 1179648 61440 61440 NT_STATUS_OK
ReadX 11394 1241088 4096 4096 NT_STATUS_OK
ReadX 11394 1245184 61440 61440 NT_STATUS_OK
ReadX 11394 1306624 4096 4096 NT_STATUS_OK
ReadX 11394 1310720 61440 61440 NT_STATUS_OK
ReadX 11394 1372160 4096 4096 NT_STATUS_OK
ReadX 11394 1376256 61440 61440 NT_STATUS_OK
ReadX 11394 1437696 4096 4096 NT_STATUS_OK
ReadX 11394 1441792 61440 61440 NT_STATUS_OK
ReadX 11394 1503232 4096 4096 NT_STATUS_OK
ReadX 11394 1507328 61440 61440 NT_STATUS_OK
ReadX 11394 1568768 4096 4096 NT_STATUS_OK
ReadX 11394 1572864 61440 61440 NT_STATUS_OK
ReadX 11394 1634304 4096 4096 NT_STATUS_OK
ReadX 11394 1638400 61440 61440 NT_STATUS_OK
ReadX 11394 1699840 4096 4096 NT_STATUS_OK
ReadX 11394 1703936 61440 61440 NT_STATUS_OK
ReadX 11394 1765376 4096 4096 NT_STATUS_OK
ReadX 11394 1769472 61440 61440 NT_STATUS_OK
ReadX 11394 1830912 4096 4096 NT_STATUS_OK
ReadX 11394 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11396 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11401 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 1004 NT_STATUS_OK
WriteX 11401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11403 NT_STATUS_OK
WriteX 11403 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 491 491 NT_STATUS_OK
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11401 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11407 NT_STATUS_OK
WriteX 11407 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 258 NT_STATUS_OK
WriteX 11407 0 543 543 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11421 NT_STATUS_OK
QUERY_FILE_INFORMATION 11421 1004 NT_STATUS_OK
WriteX 11421 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11421 258 NT_STATUS_OK
WriteX 11421 0 2048 2048 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11422 0 4096 4096 NT_STATUS_OK
Flush 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11422 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11427 NT_STATUS_OK
WriteX 11427 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11427 258 NT_STATUS_OK
WriteX 11427 0 2048 2048 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11433 NT_STATUS_OK
WriteX 11433 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11433 258 NT_STATUS_OK
WriteX 11433 0 2048 2048 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 2048 2048 NT_STATUS_OK
ReadX 11412 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11428 0 4096 4096 NT_STATUS_OK
WriteX 11412 0 8192 8192 NT_STATUS_OK
WriteX 11413 0 4096 4096 NT_STATUS_OK
WriteX 11414 0 4096 4096 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11438 NT_STATUS_OK
QUERY_FILE_INFORMATION 11438 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11413 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11445 NT_STATUS_OK
ReadX 11445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11446 NT_STATUS_OK
ReadX 11446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11449 NT_STATUS_OK
ReadX 11449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11450 NT_STATUS_OK
ReadX 11450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11458 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 258 NT_STATUS_OK
WriteX 11458 0 2048 2048 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11459 NT_STATUS_OK
ReadX 11459 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11466 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 1004 NT_STATUS_OK
WriteX 11466 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 258 NT_STATUS_OK
WriteX 11466 0 2048 2048 NT_STATUS_OK
Close 11466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11459 0 4096 4096 NT_STATUS_OK
Flush 11459 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
Flush 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11461 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11469 NT_STATUS_OK
WriteX 11469 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 258 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11471 NT_STATUS_OK
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11472 NT_STATUS_OK
WriteX 11472 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 4096 4096 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11473 0 4096 4096 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11450 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Close 11446 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11480 NT_STATUS_OK
WriteX 11480 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 258 NT_STATUS_OK
WriteX 11480 0 2048 2048 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11483 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11495 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11494 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11497 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11501 NT_STATUS_OK
ReadX 11501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11517 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 1004 NT_STATUS_OK
WriteX 11517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 258 NT_STATUS_OK
WriteX 11517 0 2048 2048 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11524 NT_STATUS_OK
ReadX 11524 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11529 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 1004 NT_STATUS_OK
WriteX 11529 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 258 NT_STATUS_OK
WriteX 11529 0 2048 2048 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11537 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 1004 NT_STATUS_OK
WriteX 11537 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 2048 2048 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 4096 16384 16384 NT_STATUS_OK
ReadX 11500 4096 16384 16384 NT_STATUS_OK
ReadX 11532 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 2048 2048 NT_STATUS_OK
WriteX 11540 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11541 NT_STATUS_OK
QUERY_FILE_INFORMATION 11541 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11524 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11504 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Close 11522 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11543 NT_STATUS_OK
QUERY_FILE_INFORMATION 11543 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11548 4096 16384 16384 NT_STATUS_OK
WriteX 11548 0 4096 4096 NT_STATUS_OK
WriteX 11549 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11562 NT_STATUS_OK
ReadX 11562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 8192 8192 NT_STATUS_OK
ReadX 11554 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11568 0 4096 4096 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
WriteX 11554 0 4096 4096 NT_STATUS_OK
WriteX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
ReadX 11569 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11548 0 4096 4096 NT_STATUS_OK
WriteX 11549 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11574 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 258 NT_STATUS_OK
WriteX 11574 0 2048 2048 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
ReadX 11577 4096 4096 4096 NT_STATUS_OK
WriteX 11577 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
ReadX 11579 4096 4096 4096 NT_STATUS_OK
WriteX 11579 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11580 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11548 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11560 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Close 11562 NT_STATUS_OK
Close 11563 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Close 11554 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Close 11569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11582 0 4096 4096 NT_STATUS_OK
ReadX 11582 4096 4096 4096 NT_STATUS_OK
ReadX 11582 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11585 NT_STATUS_OK
ReadX 11585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
ReadX 11583 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11600 NT_STATUS_OK
QUERY_FILE_INFORMATION 11600 1004 NT_STATUS_OK
WriteX 11600 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11600 258 NT_STATUS_OK
WriteX 11600 0 2048 2048 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11601 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11606 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 1004 NT_STATUS_OK
WriteX 11606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 2048 2048 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11590 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11608 NT_STATUS_OK
QUERY_FILE_INFORMATION 11608 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11610 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 61440 4096 4096 NT_STATUS_OK
ReadX 11612 126976 4096 4096 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 61440 4096 4096 NT_STATUS_OK
ReadX 11613 126976 4096 4096 NT_STATUS_OK
ReadX 11613 192512 4096 4096 NT_STATUS_OK
ReadX 11613 258048 4096 4096 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 65536 65536 NT_STATUS_OK
WriteX 11613 131072 65536 65536 NT_STATUS_OK
WriteX 11613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 61440 4096 4096 NT_STATUS_OK
ReadX 11614 126976 4096 4096 NT_STATUS_OK
ReadX 11614 192512 4096 4096 NT_STATUS_OK
ReadX 11614 258048 4096 4096 NT_STATUS_OK
ReadX 11614 323584 4096 4096 NT_STATUS_OK
ReadX 11614 389120 4096 4096 NT_STATUS_OK
ReadX 11614 454656 4096 4096 NT_STATUS_OK
ReadX 11614 520192 4096 4096 NT_STATUS_OK
WriteX 11614 0 65536 65536 NT_STATUS_OK
WriteX 11614 65536 65536 65536 NT_STATUS_OK
WriteX 11614 131072 65536 65536 NT_STATUS_OK
WriteX 11614 196608 65536 65536 NT_STATUS_OK
WriteX 11614 262144 65536 65536 NT_STATUS_OK
WriteX 11614 327680 65536 65536 NT_STATUS_OK
WriteX 11614 393216 65536 65536 NT_STATUS_OK
WriteX 11614 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11615 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11615 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11615 8192 4096 4096 NT_STATUS_OK
ReadX 11615 12288 4096 4096 NT_STATUS_OK
ReadX 11615 16384 4096 4096 NT_STATUS_OK
ReadX 11615 20480 4096 4096 NT_STATUS_OK
ReadX 11615 24576 4096 4096 NT_STATUS_OK
ReadX 11615 28672 4096 4096 NT_STATUS_OK
ReadX 11615 32768 4096 4096 NT_STATUS_OK
ReadX 11615 36864 4096 4096 NT_STATUS_OK
ReadX 11615 40960 4096 4096 NT_STATUS_OK
ReadX 11615 45056 4096 4096 NT_STATUS_OK
ReadX 11615 49152 4096 4096 NT_STATUS_OK
ReadX 11615 53248 4096 4096 NT_STATUS_OK
ReadX 11615 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11615 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11618 NT_STATUS_OK
WriteX 11618 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11618 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11618 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11618 1004 NT_STATUS_OK
WriteX 11618 0 57088 57088 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
Flush 11618 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11619 NT_STATUS_OK
SET_FILE_INFORMATION 11619 1004 NT_STATUS_OK
Close 11619 NT_STATUS_OK
SET_FILE_INFORMATION 11618 1004 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11620 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11623 NT_STATUS_OK
WriteX 11623 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 0 51456 51456 NT_STATUS_OK
WriteX 11623 0 4096 4096 NT_STATUS_OK
Flush 11623 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 0 4096 4096 NT_STATUS_OK
Close 11623 NT_STATUS_OK
Close 11622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11627 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11632 NT_STATUS_OK
WriteX 11632 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 258 NT_STATUS_OK
WriteX 11632 0 53077 53077 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11633 NT_STATUS_OK
WriteX 11633 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11633 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
WriteX 11633 0 65536 65536 NT_STATUS_OK
WriteX 11633 65536 1856 1856 NT_STATUS_OK
WriteX 11633 0 4096 4096 NT_STATUS_OK
Flush 11633 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
WriteX 11633 0 4096 4096 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11642 NT_STATUS_OK
WriteX 11642 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 7983 7983 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11647 NT_STATUS_OK
WriteX 11647 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11647 258 NT_STATUS_OK
WriteX 11647 0 65536 65536 NT_STATUS_OK
WriteX 11647 65536 65536 65536 NT_STATUS_OK
WriteX 11647 131072 65536 65536 NT_STATUS_OK
WriteX 11647 196608 65536 65536 NT_STATUS_OK
WriteX 11647 262144 65536 65536 NT_STATUS_OK
WriteX 11647 327680 65536 65536 NT_STATUS_OK
WriteX 11647 393216 65536 65536 NT_STATUS_OK
WriteX 11647 458752 46731 46731 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11637 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
WriteX 11648 0 65536 65536 NT_STATUS_OK
WriteX 11648 65536 22848 22848 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
Flush 11648 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11652 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11653 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11653 1004 NT_STATUS_OK
ReadX 11653 8192 4096 4096 NT_STATUS_OK
ReadX 11653 12288 4096 4096 NT_STATUS_OK
ReadX 11653 16384 4096 4096 NT_STATUS_OK
ReadX 11653 20480 4096 4096 NT_STATUS_OK
ReadX 11653 24576 4096 4096 NT_STATUS_OK
ReadX 11653 28672 4096 4096 NT_STATUS_OK
ReadX 11653 32768 4096 4096 NT_STATUS_OK
ReadX 11653 36864 4096 4096 NT_STATUS_OK
ReadX 11653 40960 4096 4096 NT_STATUS_OK
ReadX 11653 45056 4096 4096 NT_STATUS_OK
ReadX 11653 49152 4096 4096 NT_STATUS_OK
ReadX 11653 53248 4096 4096 NT_STATUS_OK
ReadX 11653 57344 4096 4096 NT_STATUS_OK
ReadX 11653 61440 4096 4096 NT_STATUS_OK
ReadX 11653 65536 4096 4096 NT_STATUS_OK
ReadX 11653 69632 4096 4096 NT_STATUS_OK
ReadX 11653 73728 4096 4096 NT_STATUS_OK
ReadX 11653 77824 4096 4096 NT_STATUS_OK
ReadX 11653 81920 4096 4096 NT_STATUS_OK
ReadX 11653 86016 4096 4096 NT_STATUS_OK
ReadX 11653 90112 4096 4096 NT_STATUS_OK
ReadX 11653 94208 4096 4096 NT_STATUS_OK
ReadX 11653 98304 4096 4096 NT_STATUS_OK
ReadX 11653 102400 4096 4096 NT_STATUS_OK
ReadX 11653 106496 4096 4096 NT_STATUS_OK
ReadX 11653 110592 4096 4096 NT_STATUS_OK
ReadX 11653 114688 4096 4096 NT_STATUS_OK
ReadX 11653 118784 4096 4096 NT_STATUS_OK
ReadX 11653 122880 4096 4096 NT_STATUS_OK
ReadX 11653 126976 4096 4096 NT_STATUS_OK
ReadX 11653 131072 4096 4096 NT_STATUS_OK
ReadX 11653 135168 4096 4096 NT_STATUS_OK
ReadX 11653 139264 4096 4096 NT_STATUS_OK
ReadX 11653 143360 4096 4096 NT_STATUS_OK
ReadX 11653 147456 4096 4096 NT_STATUS_OK
ReadX 11653 151552 4096 4096 NT_STATUS_OK
ReadX 11653 155648 4096 4096 NT_STATUS_OK
ReadX 11653 159744 4096 4096 NT_STATUS_OK
ReadX 11653 163840 4096 4096 NT_STATUS_OK
ReadX 11653 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11653 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11656 NT_STATUS_OK
WriteX 11656 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 258 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11657 NT_STATUS_OK
SET_FILE_INFORMATION 11657 1004 NT_STATUS_OK
Close 11657 NT_STATUS_OK
WriteX 11656 0 42388 42388 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
ReadX 11660 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11661 NT_STATUS_OK
WriteX 11661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
SET_FILE_INFORMATION 11661 1004 NT_STATUS_OK
WriteX 11661 0 42652 42652 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11663 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 4096 4096 NT_STATUS_OK
ReadX 11665 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11670 NT_STATUS_OK
WriteX 11670 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11670 258 NT_STATUS_OK
WriteX 11670 0 65536 65536 NT_STATUS_OK
WriteX 11670 65536 49 49 NT_STATUS_OK
Close 11670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 61440 61440 NT_STATUS_OK
ReadX 11671 61440 4096 4096 NT_STATUS_OK
ReadX 11671 65536 61440 61440 NT_STATUS_OK
ReadX 11671 126976 4096 4096 NT_STATUS_OK
ReadX 11671 131072 61440 61440 NT_STATUS_OK
ReadX 11671 192512 4096 4096 NT_STATUS_OK
ReadX 11671 196608 61440 61440 NT_STATUS_OK
ReadX 11671 258048 4096 4096 NT_STATUS_OK
ReadX 11671 262144 61440 61440 NT_STATUS_OK
ReadX 11671 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 61440 61440 NT_STATUS_OK
ReadX 11672 61440 4096 4096 NT_STATUS_OK
ReadX 11672 65536 61440 61440 NT_STATUS_OK
ReadX 11672 126976 4096 4096 NT_STATUS_OK
ReadX 11672 131072 61440 61440 NT_STATUS_OK
ReadX 11672 192512 4096 4096 NT_STATUS_OK
ReadX 11672 196608 61440 61440 NT_STATUS_OK
ReadX 11672 258048 4096 4096 NT_STATUS_OK
ReadX 11672 262144 61440 61440 NT_STATUS_OK
ReadX 11672 323584 4096 4096 NT_STATUS_OK
ReadX 11672 327680 61440 61440 NT_STATUS_OK
ReadX 11672 389120 4096 4096 NT_STATUS_OK
ReadX 11672 393216 61440 61440 NT_STATUS_OK
ReadX 11672 454656 4096 4096 NT_STATUS_OK
ReadX 11672 458752 61440 61440 NT_STATUS_OK
ReadX 11672 520192 4096 4096 NT_STATUS_OK
ReadX 11672 524288 61440 61440 NT_STATUS_OK
ReadX 11672 585728 4096 4096 NT_STATUS_OK
ReadX 11672 589824 61440 61440 NT_STATUS_OK
ReadX 11672 651264 4096 4096 NT_STATUS_OK
ReadX 11672 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 61440 61440 NT_STATUS_OK
ReadX 11673 61440 4096 4096 NT_STATUS_OK
ReadX 11673 65536 61440 61440 NT_STATUS_OK
ReadX 11673 126976 4096 4096 NT_STATUS_OK
ReadX 11673 131072 61440 61440 NT_STATUS_OK
ReadX 11673 192512 4096 4096 NT_STATUS_OK
ReadX 11673 196608 61440 61440 NT_STATUS_OK
ReadX 11673 258048 4096 4096 NT_STATUS_OK
ReadX 11673 262144 61440 61440 NT_STATUS_OK
ReadX 11673 323584 4096 4096 NT_STATUS_OK
ReadX 11673 327680 61440 61440 NT_STATUS_OK
ReadX 11673 389120 4096 4096 NT_STATUS_OK
ReadX 11673 393216 61440 61440 NT_STATUS_OK
ReadX 11673 454656 4096 4096 NT_STATUS_OK
ReadX 11673 458752 61440 61440 NT_STATUS_OK
ReadX 11673 520192 4096 4096 NT_STATUS_OK
ReadX 11673 524288 61440 61440 NT_STATUS_OK
ReadX 11673 585728 4096 4096 NT_STATUS_OK
ReadX 11673 589824 61440 61440 NT_STATUS_OK
ReadX 11673 651264 4096 4096 NT_STATUS_OK
ReadX 11673 655360 61440 61440 NT_STATUS_OK
ReadX 11673 716800 4096 4096 NT_STATUS_OK
ReadX 11673 720896 61440 61440 NT_STATUS_OK
ReadX 11673 782336 4096 4096 NT_STATUS_OK
ReadX 11673 786432 61440 61440 NT_STATUS_OK
ReadX 11673 847872 4096 4096 NT_STATUS_OK
ReadX 11673 851968 61440 61440 NT_STATUS_OK
ReadX 11673 913408 4096 4096 NT_STATUS_OK
ReadX 11673 917504 61440 61440 NT_STATUS_OK
ReadX 11673 978944 4096 4096 NT_STATUS_OK
ReadX 11673 983040 61440 61440 NT_STATUS_OK
ReadX 11673 1044480 4096 4096 NT_STATUS_OK
ReadX 11673 1048576 61440 61440 NT_STATUS_OK
ReadX 11673 1110016 4096 4096 NT_STATUS_OK
ReadX 11673 1114112 61440 61440 NT_STATUS_OK
ReadX 11673 1175552 4096 4096 NT_STATUS_OK
ReadX 11673 1179648 61440 61440 NT_STATUS_OK
ReadX 11673 1241088 4096 4096 NT_STATUS_OK
ReadX 11673 1245184 61440 61440 NT_STATUS_OK
ReadX 11673 1306624 4096 4096 NT_STATUS_OK
ReadX 11673 1310720 61440 61440 NT_STATUS_OK
ReadX 11673 1372160 4096 4096 NT_STATUS_OK
ReadX 11673 1376256 61440 61440 NT_STATUS_OK
ReadX 11673 1437696 4096 4096 NT_STATUS_OK
ReadX 11673 1441792 61440 61440 NT_STATUS_OK
ReadX 11673 1503232 4096 4096 NT_STATUS_OK
ReadX 11673 1507328 61440 61440 NT_STATUS_OK
ReadX 11673 1568768 4096 4096 NT_STATUS_OK
ReadX 11673 1572864 61440 61440 NT_STATUS_OK
ReadX 11673 1634304 4096 4096 NT_STATUS_OK
ReadX 11673 1638400 61440 61440 NT_STATUS_OK
ReadX 11673 1699840 4096 4096 NT_STATUS_OK
ReadX 11673 1703936 61440 61440 NT_STATUS_OK
ReadX 11673 1765376 4096 4096 NT_STATUS_OK
ReadX 11673 1769472 61440 61440 NT_STATUS_OK
ReadX 11673 1830912 4096 4096 NT_STATUS_OK
ReadX 11673 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11675 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
ReadX 11675 2156 24 24 NT_STATUS_OK
ReadX 11675 2139 276 276 NT_STATUS_OK
ReadX 11675 2136 14 14 NT_STATUS_OK
ReadX 11675 2136 7 7 NT_STATUS_OK
ReadX 11675 2138 12 12 NT_STATUS_OK
ReadX 11675 2137 8 8 NT_STATUS_OK
ReadX 11675 2135 15 15 NT_STATUS_OK
ReadX 11675 0 16 16 NT_STATUS_OK
ReadX 11675 16 2048 2048 NT_STATUS_OK
ReadX 11675 2064 2048 2048 NT_STATUS_OK
ReadX 11675 257 2048 2048 NT_STATUS_OK
ReadX 11675 385 2048 2048 NT_STATUS_OK
ReadX 11675 513 2048 2048 NT_STATUS_OK
ReadX 11675 641 2048 2048 NT_STATUS_OK
ReadX 11675 769 2048 2048 NT_STATUS_OK
ReadX 11675 897 2048 2048 NT_STATUS_OK
ReadX 11675 1025 2048 2048 NT_STATUS_OK
ReadX 11675 1153 2048 2048 NT_STATUS_OK
ReadX 11675 1281 2048 2048 NT_STATUS_OK
ReadX 11675 1409 2048 2048 NT_STATUS_OK
ReadX 11675 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11673 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11680 NT_STATUS_OK
WriteX 11680 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
WriteX 11680 0 10575 10575 NT_STATUS_OK
Flush 11680 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11685 NT_STATUS_OK
LockX 11685 2147483538 1 NT_STATUS_OK
UnlockX 11685 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1005 NT_STATUS_OK
ReadX 11685 0 512 512 NT_STATUS_OK
ReadX 11685 512 512 512 NT_STATUS_OK
ReadX 11685 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1004 NT_STATUS_OK
Close 11685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11686 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1005 NT_STATUS_OK
ReadX 11686 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11687 NT_STATUS_OK
LockX 11687 2147483538 1 NT_STATUS_OK
UnlockX 11687 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11687 1005 NT_STATUS_OK
ReadX 11687 0 512 512 NT_STATUS_OK
ReadX 11687 512 512 512 NT_STATUS_OK
ReadX 11687 1024 512 512 NT_STATUS_OK
ReadX 11687 288 20 20 NT_STATUS_OK
ReadX 11687 308 2084 2084 NT_STATUS_OK
ReadX 11687 388 2084 2084 NT_STATUS_OK
ReadX 11687 388 2084 2084 NT_STATUS_OK
ReadX 11674 2157 1386 1386 NT_STATUS_OK
ReadX 11687 2472 399 399 NT_STATUS_OK
ReadX 11687 3072 1536 1536 NT_STATUS_OK
ReadX 11687 544 149 149 NT_STATUS_OK
ReadX 11687 693 485 485 NT_STATUS_OK
Close 11687 NT_STATUS_OK
ReadX 11674 2157 4096 4096 NT_STATUS_OK
ReadX 11674 6253 4096 4096 NT_STATUS_OK
ReadX 11674 10349 4096 4096 NT_STATUS_OK
ReadX 11674 14445 4096 4096 NT_STATUS_OK
ReadX 11674 18541 4096 4096 NT_STATUS_OK
ReadX 11674 22637 256 256 NT_STATUS_OK
ReadX 11674 22893 4096 4096 NT_STATUS_OK
ReadX 11674 26989 4096 4096 NT_STATUS_OK
ReadX 11674 31085 4096 4096 NT_STATUS_OK
ReadX 11674 35181 4096 4096 NT_STATUS_OK
ReadX 11674 39277 4096 4096 NT_STATUS_OK
ReadX 11674 43373 4096 4096 NT_STATUS_OK
ReadX 11674 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11674 2157 1024 1024 NT_STATUS_OK
ReadX 11674 1667 4688 4688 NT_STATUS_OK
ReadX 11674 6355 3516 3516 NT_STATUS_OK
ReadX 11674 9871 16384 16384 NT_STATUS_OK
ReadX 11674 26255 3771 3771 NT_STATUS_OK
ReadX 11674 30026 2048 2048 NT_STATUS_OK
ReadX 11674 32074 1024 1024 NT_STATUS_OK
ReadX 11674 33098 6652 6652 NT_STATUS_OK
ReadX 11674 39750 16384 16384 NT_STATUS_OK
ReadX 11674 56134 10496 10496 NT_STATUS_OK
ReadX 11674 66630 1784 1784 NT_STATUS_OK
ReadX 11674 68414 90 90 NT_STATUS_OK
ReadX 11674 68504 273 273 NT_STATUS_OK
ReadX 11674 68777 1600 1600 NT_STATUS_OK
ReadX 11674 70377 640 640 NT_STATUS_OK
ReadX 11674 71017 1280 1280 NT_STATUS_OK
ReadX 11674 72297 8464 8464 NT_STATUS_OK
ReadX 11674 80761 158 158 NT_STATUS_OK
ReadX 11674 80919 912 912 NT_STATUS_OK
ReadX 11674 81831 1980 1980 NT_STATUS_OK
ReadX 11674 83811 2256 2256 NT_STATUS_OK
ReadX 11674 86067 400 400 NT_STATUS_OK
ReadX 11674 86467 252 252 NT_STATUS_OK
ReadX 11674 86719 42 42 NT_STATUS_OK
ReadX 11674 86761 725 725 NT_STATUS_OK
ReadX 11674 2009 512 512 NT_STATUS_OK
ReadX 11674 3895 9 9 NT_STATUS_OK
ReadX 11674 3781 46 46 NT_STATUS_OK
ReadX 11674 4059 92 92 NT_STATUS_OK
ReadX 11674 3781 92 92 NT_STATUS_OK
ReadX 11674 3986 184 184 NT_STATUS_OK
ReadX 11674 3987 16384 16384 NT_STATUS_OK
ReadX 11674 3902 16384 16384 NT_STATUS_OK
ReadX 11674 3781 10240 10240 NT_STATUS_OK
ReadX 11674 3821 16384 16384 NT_STATUS_OK
ReadX 11674 3891 935 935 NT_STATUS_OK
ReadX 11674 4060 10240 10240 NT_STATUS_OK
ReadX 11674 4059 184 184 NT_STATUS_OK
ReadX 11674 256 184 184 NT_STATUS_OK
ReadX 11674 256 1026 1026 NT_STATUS_OK
ReadX 11674 3901 326 326 NT_STATUS_OK
ReadX 11674 3899 652 652 NT_STATUS_OK
ReadX 11674 256 2 2 NT_STATUS_OK
ReadX 11674 258 4948 4948 NT_STATUS_OK
Close 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11689 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11692 NT_STATUS_OK
WriteX 11692 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 65536 65536 NT_STATUS_OK
WriteX 11692 65536 65536 65536 NT_STATUS_OK
WriteX 11692 131072 65536 65536 NT_STATUS_OK
WriteX 11692 196608 65536 65536 NT_STATUS_OK
WriteX 11692 262144 65536 65536 NT_STATUS_OK
WriteX 11692 327680 65536 65536 NT_STATUS_OK
WriteX 11692 393216 65536 65536 NT_STATUS_OK
WriteX 11692 458752 65536 65536 NT_STATUS_OK
WriteX 11692 524288 65536 65536 NT_STATUS_OK
WriteX 11692 589824 35257 35257 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11697 NT_STATUS_OK
WriteX 11697 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 258 NT_STATUS_OK
WriteX 11697 0 65536 65536 NT_STATUS_OK
WriteX 11697 65536 65536 65536 NT_STATUS_OK
WriteX 11697 131072 65536 65536 NT_STATUS_OK
WriteX 11697 196608 65536 65536 NT_STATUS_OK
WriteX 11697 262144 65536 65536 NT_STATUS_OK
WriteX 11697 327680 65536 65536 NT_STATUS_OK
WriteX 11697 393216 65536 65536 NT_STATUS_OK
WriteX 11697 458752 65536 65536 NT_STATUS_OK
WriteX 11697 524288 65536 65536 NT_STATUS_OK
WriteX 11697 589824 57598 57598 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11699 NT_STATUS_OK
WriteX 11699 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 258 NT_STATUS_OK
WriteX 11699 0 12543 12543 NT_STATUS_OK
Flush 11699 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11701 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11705 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
ReadX 11705 1938 24 24 NT_STATUS_OK
ReadX 11705 1920 276 276 NT_STATUS_OK
ReadX 11705 1918 14 14 NT_STATUS_OK
ReadX 11705 1918 7 7 NT_STATUS_OK
ReadX 11705 1919 12 12 NT_STATUS_OK
ReadX 11705 1919 8 8 NT_STATUS_OK
ReadX 11705 1917 15 15 NT_STATUS_OK
ReadX 11705 0 16 16 NT_STATUS_OK
ReadX 11705 16 2048 2048 NT_STATUS_OK
ReadX 11705 2064 2048 2048 NT_STATUS_OK
ReadX 11705 257 2048 2048 NT_STATUS_OK
ReadX 11705 385 2048 2048 NT_STATUS_OK
ReadX 11705 513 2048 2048 NT_STATUS_OK
ReadX 11705 641 2048 2048 NT_STATUS_OK
ReadX 11705 769 2048 2048 NT_STATUS_OK
ReadX 11705 897 2048 2048 NT_STATUS_OK
ReadX 11705 1025 2048 2048 NT_STATUS_OK
ReadX 11705 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11710 NT_STATUS_OK
WriteX 11710 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11710 258 NT_STATUS_OK
WriteX 11710 0 11588 11588 NT_STATUS_OK
Flush 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11711 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11715 NT_STATUS_OK
WriteX 11715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11715 258 NT_STATUS_OK
WriteX 11715 0 11615 11615 NT_STATUS_OK
Flush 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11724 NT_STATUS_OK
WriteX 11724 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11724 258 NT_STATUS_OK
WriteX 11724 0 65536 65536 NT_STATUS_OK
WriteX 11724 65536 16050 16050 NT_STATUS_OK
Close 11724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11704 1939 64 64 NT_STATUS_OK
ReadX 11704 128 248 248 NT_STATUS_OK
ReadX 11704 128 568 568 NT_STATUS_OK
ReadX 11704 3872 1536 1536 NT_STATUS_OK
ReadX 11704 3456 2560 2560 NT_STATUS_OK
ReadX 11704 3136 512 512 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
ReadX 11704 3264 3072 3072 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 3616 4096 4096 NT_STATUS_OK
ReadX 11704 1939 64 64 NT_STATUS_OK
ReadX 11704 128 248 248 NT_STATUS_OK
ReadX 11704 128 608 608 NT_STATUS_OK
ReadX 11704 2858 1024 1024 NT_STATUS_OK
ReadX 11704 2810 4096 4096 NT_STATUS_OK
ReadX 11704 2826 4096 4096 NT_STATUS_OK
ReadX 11704 2580 2048 2048 NT_STATUS_OK
ReadX 11704 2800 2560 2560 NT_STATUS_OK
ReadX 11704 2100 4096 4096 NT_STATUS_OK
ReadX 11704 2084 4096 4096 NT_STATUS_OK
ReadX 11704 868 4096 4096 NT_STATUS_OK
ReadX 11704 2324 4096 4096 NT_STATUS_OK
ReadX 11704 884 4096 4096 NT_STATUS_OK
ReadX 11704 2604 1024 1024 NT_STATUS_OK
ReadX 11704 580 4096 4096 NT_STATUS_OK
ReadX 11704 596 4096 4096 NT_STATUS_OK
ReadX 11704 2752 4096 4096 NT_STATUS_OK
ReadX 11704 2842 1024 1024 NT_STATUS_OK
ReadX 11704 660 4096 4096 NT_STATUS_OK
ReadX 11704 2720 4096 4096 NT_STATUS_OK
ReadX 11704 2736 4096 4096 NT_STATUS_OK
ReadX 11704 628 4096 4096 NT_STATUS_OK
ReadX 11704 2704 4096 4096 NT_STATUS_OK
ReadX 11704 1556 4096 4096 NT_STATUS_OK
ReadX 11704 576 4096 4096 NT_STATUS_OK
ReadX 11704 3168 1536 1536 NT_STATUS_OK
ReadX 11704 832 4096 4096 NT_STATUS_OK
ReadX 11704 1088 4096 4096 NT_STATUS_OK
ReadX 11704 1344 4096 4096 NT_STATUS_OK
ReadX 11704 1600 4096 4096 NT_STATUS_OK
ReadX 11704 1856 4096 4096 NT_STATUS_OK
ReadX 11704 2112 4096 4096 NT_STATUS_OK
ReadX 11704 1892 4096 4096 NT_STATUS_OK
ReadX 11704 820 4096 4096 NT_STATUS_OK
ReadX 11704 788 4096 4096 NT_STATUS_OK
ReadX 11704 1604 4096 4096 NT_STATUS_OK
ReadX 11704 3648 4096 4096 NT_STATUS_OK
ReadX 11704 2608 4096 4096 NT_STATUS_OK
ReadX 11704 548 4096 4096 NT_STATUS_OK
ReadX 11704 740 4096 4096 NT_STATUS_OK
ReadX 11704 1344 4096 4096 NT_STATUS_OK
ReadX 11704 3392 4096 4096 NT_STATUS_OK
ReadX 11704 3904 4096 4096 NT_STATUS_OK
ReadX 11704 644 4096 4096 NT_STATUS_OK
ReadX 11704 676 4096 4096 NT_STATUS_OK
ReadX 11704 2688 4096 4096 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 900 4096 4096 NT_STATUS_OK
ReadX 11704 1908 4096 4096 NT_STATUS_OK
ReadX 11704 852 4096 4096 NT_STATUS_OK
ReadX 11704 724 4096 4096 NT_STATUS_OK
ReadX 11704 2292 4096 4096 NT_STATUS_OK
ReadX 11704 612 4096 4096 NT_STATUS_OK
ReadX 11704 388 4096 4096 NT_STATUS_OK
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 500 4096 4096 NT_STATUS_OK
ReadX 11704 356 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 576 4096 4096 NT_STATUS_OK
ReadX 11704 340 4096 4096 NT_STATUS_OK
ReadX 11704 420 4096 4096 NT_STATUS_OK
ReadX 11704 1600 4096 4096 NT_STATUS_OK
ReadX 11704 404 4096 4096 NT_STATUS_OK
ReadX 11704 1428 4096 4096 NT_STATUS_OK
ReadX 11704 2656 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 452 4096 4096 NT_STATUS_OK
ReadX 11704 692 4096 4096 NT_STATUS_OK
ReadX 11704 564 4096 4096 NT_STATUS_OK
ReadX 11704 372 4096 4096 NT_STATUS_OK
ReadX 11704 468 4096 4096 NT_STATUS_OK
ReadX 11704 484 4096 4096 NT_STATUS_OK
ReadX 11704 1088 4096 4096 NT_STATUS_OK
ReadX 11704 1924 4096 4096 NT_STATUS_OK
ReadX 11704 2768 4096 4096 NT_STATUS_OK
ReadX 11704 832 4096 4096 NT_STATUS_OK
ReadX 11704 836 4096 4096 NT_STATUS_OK
ReadX 11704 1856 4096 4096 NT_STATUS_OK
ReadX 11704 2640 4096 4096 NT_STATUS_OK
ReadX 11704 436 4096 4096 NT_STATUS_OK
ReadX 11704 1828 4096 4096 NT_STATUS_OK
ReadX 11704 804 4096 4096 NT_STATUS_OK
ReadX 11704 1860 4096 4096 NT_STATUS_OK
ReadX 11704 1812 4096 4096 NT_STATUS_OK
ReadX 11704 756 4096 4096 NT_STATUS_OK
ReadX 11704 1636 4096 4096 NT_STATUS_OK
ReadX 11704 772 4096 4096 NT_STATUS_OK
ReadX 11704 2036 4096 4096 NT_STATUS_OK
ReadX 11704 1220 4096 4096 NT_STATUS_OK
ReadX 11704 1652 4096 4096 NT_STATUS_OK
ReadX 11704 2588 4096 4096 NT_STATUS_OK
ReadX 11704 916 4096 4096 NT_STATUS_OK
ReadX 11704 260 4096 4096 NT_STATUS_OK
ReadX 11704 932 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 308 4096 4096 NT_STATUS_OK
ReadX 11704 292 4096 4096 NT_STATUS_OK
ReadX 11704 1140 4096 4096 NT_STATUS_OK
ReadX 11704 276 4096 4096 NT_STATUS_OK
ReadX 11704 2020 4096 4096 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
ReadX 11704 516 4096 4096 NT_STATUS_OK
ReadX 11704 1844 4096 4096 NT_STATUS_OK
ReadX 11704 1124 4096 4096 NT_STATUS_OK
ReadX 11704 3136 4096 4096 NT_STATUS_OK
ReadX 11704 324 4096 4096 NT_STATUS_OK
ReadX 11704 1156 4096 4096 NT_STATUS_OK
ReadX 11704 1172 4096 4096 NT_STATUS_OK
ReadX 11704 2112 4096 4096 NT_STATUS_OK
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 964 4096 4096 NT_STATUS_OK
ReadX 11704 980 4096 4096 NT_STATUS_OK
ReadX 11704 1012 4096 4096 NT_STATUS_OK
ReadX 11704 532 4096 4096 NT_STATUS_OK
ReadX 11704 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11704 1620 4096 4096 NT_STATUS_OK
ReadX 11704 1604 4096 4096 NT_STATUS_OK
ReadX 11704 2116 4096 4096 NT_STATUS_OK
ReadX 11704 2132 4096 4096 NT_STATUS_OK
ReadX 11704 2148 4096 4096 NT_STATUS_OK
ReadX 11704 2276 4096 4096 NT_STATUS_OK
ReadX 11704 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11729 NT_STATUS_OK
QUERY_FILE_INFORMATION 11684 1004 NT_STATUS_OK
Close 11684 NT_STATUS_OK
WriteX 11729 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1004 NT_STATUS_OK
Close 11686 NT_STATUS_OK
WriteX 11729 0 65536 65536 NT_STATUS_OK
WriteX 11729 65536 64850 64850 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11731 NT_STATUS_OK
WriteX 11731 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
ReadX 11704 2068 4096 4096 NT_STATUS_OK
ReadX 11704 1588 4096 4096 NT_STATUS_OK
ReadX 11704 1572 4096 4096 NT_STATUS_OK
WriteX 11731 0 18630 18630 NT_STATUS_OK
Flush 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11733 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11704 612 4096 4096 NT_STATUS_OK
ReadX 11704 564 4096 4096 NT_STATUS_OK
ReadX 11704 1876 4096 4096 NT_STATUS_OK
ReadX 11704 628 4096 4096 NT_STATUS_OK
ReadX 11704 740 4096 4096 NT_STATUS_OK
ReadX 11704 724 4096 4096 NT_STATUS_OK
ReadX 11704 644 4096 4096 NT_STATUS_OK
ReadX 11704 2324 4096 4096 NT_STATUS_OK
ReadX 11704 660 4096 4096 NT_STATUS_OK
ReadX 11704 852 4096 4096 NT_STATUS_OK
ReadX 11704 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 580 4096 4096 NT_STATUS_OK
ReadX 11704 3136 512 512 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 61440 4096 4096 NT_STATUS_OK
ReadX 11736 126976 4096 4096 NT_STATUS_OK
WriteX 11736 0 65536 65536 NT_STATUS_OK
WriteX 11736 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 61440 4096 4096 NT_STATUS_OK
ReadX 11737 126976 4096 4096 NT_STATUS_OK
ReadX 11737 192512 4096 4096 NT_STATUS_OK
ReadX 11737 258048 4096 4096 NT_STATUS_OK
WriteX 11737 0 65536 65536 NT_STATUS_OK
WriteX 11737 65536 65536 65536 NT_STATUS_OK
WriteX 11737 131072 65536 65536 NT_STATUS_OK
WriteX 11737 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 61440 4096 4096 NT_STATUS_OK
ReadX 11738 126976 4096 4096 NT_STATUS_OK
ReadX 11738 192512 4096 4096 NT_STATUS_OK
ReadX 11738 258048 4096 4096 NT_STATUS_OK
ReadX 11738 323584 4096 4096 NT_STATUS_OK
ReadX 11738 389120 4096 4096 NT_STATUS_OK
ReadX 11738 454656 4096 4096 NT_STATUS_OK
ReadX 11738 520192 4096 4096 NT_STATUS_OK
WriteX 11738 0 65536 65536 NT_STATUS_OK
WriteX 11738 65536 65536 65536 NT_STATUS_OK
WriteX 11738 131072 65536 65536 NT_STATUS_OK
WriteX 11738 196608 65536 65536 NT_STATUS_OK
WriteX 11738 262144 65536 65536 NT_STATUS_OK
WriteX 11738 327680 65536 65536 NT_STATUS_OK
WriteX 11738 393216 65536 65536 NT_STATUS_OK
WriteX 11738 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11740 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11741 NT_STATUS_OK
WriteX 11741 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11741 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11739 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11743 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11736 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11746 NT_STATUS_OK
WriteX 11746 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11746 258 NT_STATUS_OK
WriteX 11746 0 62591 62591 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11748 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11751 NT_STATUS_OK
WriteX 11751 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 258 NT_STATUS_OK
WriteX 11751 0 10845 10845 NT_STATUS_OK
Close 11751 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11756 NT_STATUS_OK
WriteX 11756 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 258 NT_STATUS_OK
WriteX 11756 0 30118 30118 NT_STATUS_OK
Close 11756 NT_STATUS_OK
WriteX 11739 0 4096 4096 NT_STATUS_OK
WriteX 11741 0 64 64 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 61440 61440 NT_STATUS_OK
ReadX 11758 61440 4096 4096 NT_STATUS_OK
ReadX 11758 65536 61440 61440 NT_STATUS_OK
ReadX 11758 126976 4096 4096 NT_STATUS_OK
ReadX 11758 131072 61440 61440 NT_STATUS_OK
ReadX 11758 192512 4096 4096 NT_STATUS_OK
ReadX 11758 196608 61440 61440 NT_STATUS_OK
ReadX 11758 258048 4096 4096 NT_STATUS_OK
ReadX 11758 262144 61440 61440 NT_STATUS_OK
ReadX 11758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 61440 61440 NT_STATUS_OK
ReadX 11759 61440 4096 4096 NT_STATUS_OK
ReadX 11759 65536 61440 61440 NT_STATUS_OK
ReadX 11759 126976 4096 4096 NT_STATUS_OK
ReadX 11759 131072 61440 61440 NT_STATUS_OK
ReadX 11759 192512 4096 4096 NT_STATUS_OK
ReadX 11759 196608 61440 61440 NT_STATUS_OK
ReadX 11759 258048 4096 4096 NT_STATUS_OK
ReadX 11759 262144 61440 61440 NT_STATUS_OK
ReadX 11759 323584 4096 4096 NT_STATUS_OK
ReadX 11759 327680 61440 61440 NT_STATUS_OK
ReadX 11759 389120 4096 4096 NT_STATUS_OK
ReadX 11759 393216 61440 61440 NT_STATUS_OK
ReadX 11759 454656 4096 4096 NT_STATUS_OK
ReadX 11759 458752 61440 61440 NT_STATUS_OK
ReadX 11759 520192 4096 4096 NT_STATUS_OK
ReadX 11759 524288 61440 61440 NT_STATUS_OK
ReadX 11759 585728 4096 4096 NT_STATUS_OK
ReadX 11759 589824 61440 61440 NT_STATUS_OK
ReadX 11759 651264 4096 4096 NT_STATUS_OK
ReadX 11759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 61440 61440 NT_STATUS_OK
ReadX 11760 61440 4096 4096 NT_STATUS_OK
ReadX 11760 65536 61440 61440 NT_STATUS_OK
ReadX 11760 126976 4096 4096 NT_STATUS_OK
ReadX 11760 131072 61440 61440 NT_STATUS_OK
ReadX 11760 192512 4096 4096 NT_STATUS_OK
ReadX 11760 196608 61440 61440 NT_STATUS_OK
ReadX 11760 258048 4096 4096 NT_STATUS_OK
ReadX 11760 262144 61440 61440 NT_STATUS_OK
ReadX 11760 323584 4096 4096 NT_STATUS_OK
ReadX 11760 327680 61440 61440 NT_STATUS_OK
ReadX 11760 389120 4096 4096 NT_STATUS_OK
ReadX 11760 393216 61440 61440 NT_STATUS_OK
ReadX 11760 454656 4096 4096 NT_STATUS_OK
ReadX 11760 458752 61440 61440 NT_STATUS_OK
ReadX 11760 520192 4096 4096 NT_STATUS_OK
ReadX 11760 524288 61440 61440 NT_STATUS_OK
ReadX 11760 585728 4096 4096 NT_STATUS_OK
ReadX 11760 589824 61440 61440 NT_STATUS_OK
ReadX 11760 651264 4096 4096 NT_STATUS_OK
ReadX 11760 655360 61440 61440 NT_STATUS_OK
ReadX 11760 716800 4096 4096 NT_STATUS_OK
ReadX 11760 720896 61440 61440 NT_STATUS_OK
ReadX 11760 782336 4096 4096 NT_STATUS_OK
ReadX 11760 786432 61440 61440 NT_STATUS_OK
ReadX 11760 847872 4096 4096 NT_STATUS_OK
ReadX 11760 851968 61440 61440 NT_STATUS_OK
ReadX 11760 913408 4096 4096 NT_STATUS_OK
ReadX 11760 917504 61440 61440 NT_STATUS_OK
ReadX 11760 978944 4096 4096 NT_STATUS_OK
ReadX 11760 983040 61440 61440 NT_STATUS_OK
ReadX 11760 1044480 4096 4096 NT_STATUS_OK
ReadX 11760 1048576 61440 61440 NT_STATUS_OK
ReadX 11760 1110016 4096 4096 NT_STATUS_OK
ReadX 11760 1114112 61440 61440 NT_STATUS_OK
ReadX 11760 1175552 4096 4096 NT_STATUS_OK
ReadX 11760 1179648 61440 61440 NT_STATUS_OK
ReadX 11760 1241088 4096 4096 NT_STATUS_OK
ReadX 11760 1245184 61440 61440 NT_STATUS_OK
ReadX 11760 1306624 4096 4096 NT_STATUS_OK
ReadX 11760 1310720 61440 61440 NT_STATUS_OK
ReadX 11760 1372160 4096 4096 NT_STATUS_OK
ReadX 11760 1376256 61440 61440 NT_STATUS_OK
ReadX 11760 1437696 4096 4096 NT_STATUS_OK
ReadX 11760 1441792 61440 61440 NT_STATUS_OK
ReadX 11760 1503232 4096 4096 NT_STATUS_OK
ReadX 11760 1507328 61440 61440 NT_STATUS_OK
ReadX 11760 1568768 4096 4096 NT_STATUS_OK
ReadX 11760 1572864 61440 61440 NT_STATUS_OK
ReadX 11760 1634304 4096 4096 NT_STATUS_OK
ReadX 11760 1638400 61440 61440 NT_STATUS_OK
ReadX 11760 1699840 4096 4096 NT_STATUS_OK
ReadX 11760 1703936 61440 61440 NT_STATUS_OK
ReadX 11760 1765376 4096 4096 NT_STATUS_OK
ReadX 11760 1769472 61440 61440 NT_STATUS_OK
ReadX 11760 1830912 4096 4096 NT_STATUS_OK
ReadX 11760 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11761 NT_STATUS_OK
Close 11761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
ReadX 11765 4096 4096 4096 NT_STATUS_OK
ReadX 11765 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11769 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11770 NT_STATUS_OK
Close 11770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 8192 8192 NT_STATUS_OK
ReadX 11773 8192 8192 8192 NT_STATUS_OK
ReadX 11773 16384 8192 8192 NT_STATUS_OK
ReadX 11773 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11778 NT_STATUS_OK
WriteX 11778 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11778 258 NT_STATUS_OK
WriteX 11778 0 10438 10438 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11779 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11782 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11784 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
ReadX 11787 4096 4096 4096 NT_STATUS_OK
ReadX 11787 8192 4096 4096 NT_STATUS_OK
ReadX 11787 12288 8192 8192 NT_STATUS_OK
ReadX 11787 20480 8192 8192 NT_STATUS_OK
ReadX 11787 28672 8192 8192 NT_STATUS_OK
ReadX 11787 36864 8192 8192 NT_STATUS_OK
ReadX 11787 45056 8192 8192 NT_STATUS_OK
ReadX 11787 53248 8192 8192 NT_STATUS_OK
ReadX 11787 61440 8192 8192 NT_STATUS_OK
ReadX 11787 69632 8192 8192 NT_STATUS_OK
ReadX 11787 77824 8192 8192 NT_STATUS_OK
ReadX 11787 86016 8192 8192 NT_STATUS_OK
ReadX 11787 94208 8192 8192 NT_STATUS_OK
ReadX 11787 102400 8192 8192 NT_STATUS_OK
ReadX 11787 110592 8192 8192 NT_STATUS_OK
ReadX 11787 118784 8192 8192 NT_STATUS_OK
ReadX 11787 126976 8192 8192 NT_STATUS_OK
ReadX 11787 135168 8192 8192 NT_STATUS_OK
ReadX 11787 143360 8192 8192 NT_STATUS_OK
ReadX 11787 151552 8192 8192 NT_STATUS_OK
ReadX 11787 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11792 NT_STATUS_OK
WriteX 11792 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 258 NT_STATUS_OK
WriteX 11792 0 28489 28489 NT_STATUS_OK
Close 11792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11793 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11795 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11796 NT_STATUS_OK
Close 11796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 0 8192 8192 NT_STATUS_OK
ReadX 11799 8192 8192 8192 NT_STATUS_OK
ReadX 11799 16384 8192 8192 NT_STATUS_OK
ReadX 11799 24576 8192 8192 NT_STATUS_OK
ReadX 11799 32768 16384 16384 NT_STATUS_OK
ReadX 11799 49152 8192 8192 NT_STATUS_OK
ReadX 11799 57344 8192 8192 NT_STATUS_OK
ReadX 11799 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11804 NT_STATUS_OK
WriteX 11804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
WriteX 11804 0 29253 29253 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11811 NT_STATUS_OK
WriteX 11811 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 258 NT_STATUS_OK
WriteX 11811 0 30183 30183 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11812 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11814 NT_STATUS_OK
WriteX 11814 0 510 510 NT_STATUS_OK
WriteX 11814 510 512 512 NT_STATUS_OK
WriteX 11814 1022 510 510 NT_STATUS_OK
WriteX 11814 1532 510 510 NT_STATUS_OK
WriteX 11814 2042 168 168 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11815 NT_STATUS_OK
Close 11815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 61440 4096 4096 NT_STATUS_OK
ReadX 11818 126976 4096 4096 NT_STATUS_OK
WriteX 11818 0 65536 65536 NT_STATUS_OK
WriteX 11818 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 61440 4096 4096 NT_STATUS_OK
ReadX 11819 126976 4096 4096 NT_STATUS_OK
ReadX 11819 192512 4096 4096 NT_STATUS_OK
ReadX 11819 258048 4096 4096 NT_STATUS_OK
WriteX 11819 0 65536 65536 NT_STATUS_OK
WriteX 11819 65536 65536 65536 NT_STATUS_OK
WriteX 11819 131072 65536 65536 NT_STATUS_OK
WriteX 11819 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 61440 4096 4096 NT_STATUS_OK
ReadX 11820 126976 4096 4096 NT_STATUS_OK
ReadX 11820 192512 4096 4096 NT_STATUS_OK
ReadX 11820 258048 4096 4096 NT_STATUS_OK
ReadX 11820 323584 4096 4096 NT_STATUS_OK
ReadX 11820 389120 4096 4096 NT_STATUS_OK
ReadX 11820 454656 4096 4096 NT_STATUS_OK
ReadX 11820 520192 4096 4096 NT_STATUS_OK
WriteX 11820 0 65536 65536 NT_STATUS_OK
WriteX 11820 65536 65536 65536 NT_STATUS_OK
WriteX 11820 131072 65536 65536 NT_STATUS_OK
WriteX 11820 196608 65536 65536 NT_STATUS_OK
WriteX 11820 262144 65536 65536 NT_STATUS_OK
WriteX 11820 327680 65536 65536 NT_STATUS_OK
WriteX 11820 393216 65536 65536 NT_STATUS_OK
WriteX 11820 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11836 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11841 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11845 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11850 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11855 NT_STATUS_OK
Close 11855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11889 0 65536 65536 NT_STATUS_OK
WriteX 11889 65536 65536 65536 NT_STATUS_OK
WriteX 11889 131072 65536 65536 NT_STATUS_OK
WriteX 11889 196608 65536 65536 NT_STATUS_OK
WriteX 11889 262144 26634 26634 NT_STATUS_OK
Close 11889 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11894 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
ReadX 11897 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11898 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
Close 11976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
Close 11977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
Close 11991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12021 0 4096 4096 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 4096 4096 NT_STATUS_OK
ReadX 12023 4096 4096 4096 NT_STATUS_OK
ReadX 12023 8192 4096 4096 NT_STATUS_OK
ReadX 12023 12288 4096 4096 NT_STATUS_OK
ReadX 12023 16384 4096 4096 NT_STATUS_OK
ReadX 12023 20480 4096 4096 NT_STATUS_OK
ReadX 12023 24576 4096 4096 NT_STATUS_OK
ReadX 12023 28672 4096 4096 NT_STATUS_OK
ReadX 12023 32768 4096 4096 NT_STATUS_OK
ReadX 12023 36864 4096 4096 NT_STATUS_OK
ReadX 12023 40960 4096 4096 NT_STATUS_OK
ReadX 12023 45056 4096 4096 NT_STATUS_OK
ReadX 12023 49152 4096 4096 NT_STATUS_OK
ReadX 12023 53248 4096 4096 NT_STATUS_OK
ReadX 12023 57344 4096 4096 NT_STATUS_OK
ReadX 12023 61440 4096 4096 NT_STATUS_OK
ReadX 12023 65536 4096 4096 NT_STATUS_OK
ReadX 12023 69632 4096 4096 NT_STATUS_OK
ReadX 12023 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12023 1004 NT_STATUS_OK
WriteX 12023 0 4096 4096 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12024 NT_STATUS_OK
SET_FILE_INFORMATION 12024 1004 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12029 NT_STATUS_OK
WriteX 12029 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12029 258 NT_STATUS_OK
WriteX 12029 0 65536 65536 NT_STATUS_OK
WriteX 12029 65536 19979 19979 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
SET_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12035 1004 NT_STATUS_OK
WriteX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12041 NT_STATUS_OK
WriteX 12041 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 258 NT_STATUS_OK
WriteX 12041 0 65536 65536 NT_STATUS_OK
WriteX 12041 65536 17654 17654 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
SET_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12043 NT_STATUS_OK
SET_FILE_INFORMATION 12043 1004 NT_STATUS_OK
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
ReadX 12047 4096 4096 4096 NT_STATUS_OK
ReadX 12047 8192 4096 4096 NT_STATUS_OK
ReadX 12047 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12047 16384 4096 4096 NT_STATUS_OK
ReadX 12047 20480 4096 4096 NT_STATUS_OK
ReadX 12047 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12050 1004 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12051 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12056 NT_STATUS_OK
WriteX 12056 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 65536 65536 NT_STATUS_OK
WriteX 12056 65536 19490 19490 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
QUERY_FILE_INFORMATION 12057 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
SET_FILE_INFORMATION 12057 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12058 NT_STATUS_OK
SET_FILE_INFORMATION 12058 1004 NT_STATUS_OK
Close 12058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12062 0 4096 4096 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
ReadX 12064 4096 4096 4096 NT_STATUS_OK
ReadX 12064 8192 4096 4096 NT_STATUS_OK
ReadX 12064 12288 4096 4096 NT_STATUS_OK
ReadX 12064 16384 4096 4096 NT_STATUS_OK
ReadX 12064 20480 4096 4096 NT_STATUS_OK
ReadX 12064 24576 4096 4096 NT_STATUS_OK
ReadX 12064 28672 4096 4096 NT_STATUS_OK
ReadX 12064 32768 4096 4096 NT_STATUS_OK
ReadX 12064 36864 4096 4096 NT_STATUS_OK
ReadX 12064 40960 4096 4096 NT_STATUS_OK
ReadX 12064 45056 4096 4096 NT_STATUS_OK
ReadX 12064 49152 4096 4096 NT_STATUS_OK
ReadX 12064 53248 4096 4096 NT_STATUS_OK
ReadX 12064 57344 4096 4096 NT_STATUS_OK
ReadX 12064 61440 4096 4096 NT_STATUS_OK
ReadX 12064 65536 4096 4096 NT_STATUS_OK
ReadX 12064 69632 4096 4096 NT_STATUS_OK
ReadX 12064 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12064 1004 NT_STATUS_OK
WriteX 12064 0 4096 4096 NT_STATUS_OK
Close 12064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12065 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
Close 12065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12070 NT_STATUS_OK
WriteX 12070 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12070 258 NT_STATUS_OK
WriteX 12070 0 65536 65536 NT_STATUS_OK
WriteX 12070 65536 8866 8866 NT_STATUS_OK
Close 12070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
WriteX 12071 0 4096 4096 NT_STATUS_OK
Flush 12071 NT_STATUS_OK
SET_FILE_INFORMATION 12071 1004 NT_STATUS_OK
WriteX 12071 0 4096 4096 NT_STATUS_OK
Flush 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
Close 12073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12081 NT_STATUS_OK
WriteX 12081 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 65536 65536 NT_STATUS_OK
WriteX 12081 65536 9298 9298 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12082 NT_STATUS_OK
ReadX 12082 0 4096 4096 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
SET_FILE_INFORMATION 12082 1004 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12083 NT_STATUS_OK
SET_FILE_INFORMATION 12083 1004 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12088 0 4096 4096 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12089 4096 4096 4096 NT_STATUS_OK
ReadX 12089 8192 4096 4096 NT_STATUS_OK
ReadX 12089 12288 4096 4096 NT_STATUS_OK
ReadX 12089 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
Close 12091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12092 1004 NT_STATUS_OK
WriteX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12093 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
WriteX 12098 0 65536 65536 NT_STATUS_OK
WriteX 12098 65536 11540 11540 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
WriteX 12099 0 4096 4096 NT_STATUS_OK
Flush 12099 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
WriteX 12099 0 4096 4096 NT_STATUS_OK
Flush 12099 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12100 NT_STATUS_OK
SET_FILE_INFORMATION 12100 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12101 NT_STATUS_OK
ReadX 12101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12102 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 61440 4096 4096 NT_STATUS_OK
ReadX 12104 126976 4096 4096 NT_STATUS_OK
WriteX 12104 0 65536 65536 NT_STATUS_OK
WriteX 12104 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 61440 4096 4096 NT_STATUS_OK
ReadX 12105 126976 4096 4096 NT_STATUS_OK
ReadX 12105 192512 4096 4096 NT_STATUS_OK
ReadX 12105 258048 4096 4096 NT_STATUS_OK
WriteX 12105 0 65536 65536 NT_STATUS_OK
WriteX 12105 65536 65536 65536 NT_STATUS_OK
WriteX 12105 131072 65536 65536 NT_STATUS_OK
WriteX 12105 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 61440 4096 4096 NT_STATUS_OK
ReadX 12106 126976 4096 4096 NT_STATUS_OK
ReadX 12106 192512 4096 4096 NT_STATUS_OK
ReadX 12106 258048 4096 4096 NT_STATUS_OK
ReadX 12106 323584 4096 4096 NT_STATUS_OK
ReadX 12106 389120 4096 4096 NT_STATUS_OK
ReadX 12106 454656 4096 4096 NT_STATUS_OK
ReadX 12106 520192 4096 4096 NT_STATUS_OK
WriteX 12106 0 65536 65536 NT_STATUS_OK
WriteX 12106 65536 65536 65536 NT_STATUS_OK
WriteX 12106 131072 65536 65536 NT_STATUS_OK
WriteX 12106 196608 65536 65536 NT_STATUS_OK
WriteX 12106 262144 65536 65536 NT_STATUS_OK
WriteX 12106 327680 65536 65536 NT_STATUS_OK
WriteX 12106 393216 65536 65536 NT_STATUS_OK
WriteX 12106 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
ReadX 12107 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12108 NT_STATUS_OK
WriteX 12108 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12108 258 NT_STATUS_OK
WriteX 12108 0 53 53 NT_STATUS_OK
Close 12108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12101 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12107 8192 4096 4096 NT_STATUS_OK
ReadX 12107 12288 4096 4096 NT_STATUS_OK
WriteX 12111 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12111 258 NT_STATUS_OK
ReadX 12107 16384 4096 4096 NT_STATUS_OK
ReadX 12107 20480 4096 4096 NT_STATUS_OK
WriteX 12111 0 15360 15360 NT_STATUS_OK
Close 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12112 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12112 1004 NT_STATUS_OK
WriteX 12112 0 4096 4096 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12115 4096 4096 4096 NT_STATUS_OK
ReadX 12115 8192 4096 4096 NT_STATUS_OK
ReadX 12115 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 4096 4096 NT_STATUS_OK
ReadX 12118 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12119 NT_STATUS_OK
ReadX 12119 0 4096 4096 NT_STATUS_OK
ReadX 12119 4096 4096 4096 NT_STATUS_OK
ReadX 12119 8192 4096 4096 NT_STATUS_OK
Close 12118 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12120 NT_STATUS_OK
WriteX 12120 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 15360 15360 NT_STATUS_OK
Close 12120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12121 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12121 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12125 NT_STATUS_OK
SET_FILE_INFORMATION 12125 1004 NT_STATUS_OK
Close 12125 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
ReadX 12128 4096 4096 4096 NT_STATUS_OK
ReadX 12128 8192 4096 4096 NT_STATUS_OK
ReadX 12128 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12128 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12128 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12130 NT_STATUS_OK
WriteX 12130 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12130 258 NT_STATUS_OK
WriteX 12130 0 53 53 NT_STATUS_OK
Close 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12129 4096 4096 4096 NT_STATUS_OK
ReadX 12129 8192 4096 4096 NT_STATUS_OK
ReadX 12129 12288 4096 4096 NT_STATUS_OK
WriteX 12133 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12133 258 NT_STATUS_OK
WriteX 12133 0 12006 12006 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
WriteX 12134 0 4096 4096 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12135 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12137 4096 4096 4096 NT_STATUS_OK
ReadX 12137 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12140 NT_STATUS_OK
WriteX 12140 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 11991 11991 NT_STATUS_OK
Close 12140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12144 NT_STATUS_OK
ReadX 12144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12145 NT_STATUS_OK
SET_FILE_INFORMATION 12145 1004 NT_STATUS_OK
Close 12145 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12149 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12148 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
ReadX 12148 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
WriteX 12148 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
Close 12124 NT_STATUS_OK
WriteX 12128 0 19054 19054 NT_STATUS_OK
WriteX 12148 0 12288 12288 NT_STATUS_OK
Close 12144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 61440 61440 NT_STATUS_OK
ReadX 12155 61440 4096 4096 NT_STATUS_OK
ReadX 12155 65536 61440 61440 NT_STATUS_OK
ReadX 12155 126976 4096 4096 NT_STATUS_OK
ReadX 12155 131072 61440 61440 NT_STATUS_OK
ReadX 12155 192512 4096 4096 NT_STATUS_OK
ReadX 12155 196608 61440 61440 NT_STATUS_OK
ReadX 12155 258048 4096 4096 NT_STATUS_OK
ReadX 12155 262144 61440 61440 NT_STATUS_OK
ReadX 12155 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 61440 61440 NT_STATUS_OK
ReadX 12156 61440 4096 4096 NT_STATUS_OK
ReadX 12156 65536 61440 61440 NT_STATUS_OK
ReadX 12156 126976 4096 4096 NT_STATUS_OK
ReadX 12156 131072 61440 61440 NT_STATUS_OK
ReadX 12156 192512 4096 4096 NT_STATUS_OK
ReadX 12156 196608 61440 61440 NT_STATUS_OK
ReadX 12156 258048 4096 4096 NT_STATUS_OK
ReadX 12156 262144 61440 61440 NT_STATUS_OK
ReadX 12156 323584 4096 4096 NT_STATUS_OK
ReadX 12156 327680 61440 61440 NT_STATUS_OK
ReadX 12156 389120 4096 4096 NT_STATUS_OK
ReadX 12156 393216 61440 61440 NT_STATUS_OK
ReadX 12156 454656 4096 4096 NT_STATUS_OK
ReadX 12156 458752 61440 61440 NT_STATUS_OK
ReadX 12156 520192 4096 4096 NT_STATUS_OK
ReadX 12156 524288 61440 61440 NT_STATUS_OK
ReadX 12156 585728 4096 4096 NT_STATUS_OK
ReadX 12156 589824 61440 61440 NT_STATUS_OK
ReadX 12156 651264 4096 4096 NT_STATUS_OK
ReadX 12156 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 61440 61440 NT_STATUS_OK
ReadX 12157 61440 4096 4096 NT_STATUS_OK
ReadX 12157 65536 61440 61440 NT_STATUS_OK
ReadX 12157 126976 4096 4096 NT_STATUS_OK
ReadX 12157 131072 61440 61440 NT_STATUS_OK
ReadX 12157 192512 4096 4096 NT_STATUS_OK
ReadX 12157 196608 61440 61440 NT_STATUS_OK
ReadX 12157 258048 4096 4096 NT_STATUS_OK
ReadX 12157 262144 61440 61440 NT_STATUS_OK
ReadX 12157 323584 4096 4096 NT_STATUS_OK
ReadX 12157 327680 61440 61440 NT_STATUS_OK
ReadX 12157 389120 4096 4096 NT_STATUS_OK
ReadX 12157 393216 61440 61440 NT_STATUS_OK
ReadX 12157 454656 4096 4096 NT_STATUS_OK
ReadX 12157 458752 61440 61440 NT_STATUS_OK
ReadX 12157 520192 4096 4096 NT_STATUS_OK
ReadX 12157 524288 61440 61440 NT_STATUS_OK
ReadX 12157 585728 4096 4096 NT_STATUS_OK
ReadX 12157 589824 61440 61440 NT_STATUS_OK
ReadX 12157 651264 4096 4096 NT_STATUS_OK
ReadX 12157 655360 61440 61440 NT_STATUS_OK
ReadX 12157 716800 4096 4096 NT_STATUS_OK
ReadX 12157 720896 61440 61440 NT_STATUS_OK
ReadX 12157 782336 4096 4096 NT_STATUS_OK
ReadX 12157 786432 61440 61440 NT_STATUS_OK
ReadX 12157 847872 4096 4096 NT_STATUS_OK
ReadX 12157 851968 61440 61440 NT_STATUS_OK
ReadX 12157 913408 4096 4096 NT_STATUS_OK
ReadX 12157 917504 61440 61440 NT_STATUS_OK
ReadX 12157 978944 4096 4096 NT_STATUS_OK
ReadX 12157 983040 61440 61440 NT_STATUS_OK
ReadX 12157 1044480 4096 4096 NT_STATUS_OK
ReadX 12157 1048576 61440 61440 NT_STATUS_OK
ReadX 12157 1110016 4096 4096 NT_STATUS_OK
ReadX 12157 1114112 61440 61440 NT_STATUS_OK
ReadX 12157 1175552 4096 4096 NT_STATUS_OK
ReadX 12157 1179648 61440 61440 NT_STATUS_OK
ReadX 12157 1241088 4096 4096 NT_STATUS_OK
ReadX 12157 1245184 61440 61440 NT_STATUS_OK
ReadX 12157 1306624 4096 4096 NT_STATUS_OK
ReadX 12157 1310720 61440 61440 NT_STATUS_OK
ReadX 12157 1372160 4096 4096 NT_STATUS_OK
ReadX 12157 1376256 61440 61440 NT_STATUS_OK
ReadX 12157 1437696 4096 4096 NT_STATUS_OK
ReadX 12157 1441792 61440 61440 NT_STATUS_OK
ReadX 12157 1503232 4096 4096 NT_STATUS_OK
ReadX 12157 1507328 61440 61440 NT_STATUS_OK
ReadX 12157 1568768 4096 4096 NT_STATUS_OK
ReadX 12157 1572864 61440 61440 NT_STATUS_OK
ReadX 12157 1634304 4096 4096 NT_STATUS_OK
ReadX 12157 1638400 61440 61440 NT_STATUS_OK
ReadX 12157 1699840 4096 4096 NT_STATUS_OK
ReadX 12157 1703936 61440 61440 NT_STATUS_OK
ReadX 12157 1765376 4096 4096 NT_STATUS_OK
ReadX 12157 1769472 61440 61440 NT_STATUS_OK
ReadX 12157 1830912 4096 4096 NT_STATUS_OK
ReadX 12157 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12164 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 1004 NT_STATUS_OK
WriteX 12164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12166 NT_STATUS_OK
WriteX 12166 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 491 491 NT_STATUS_OK
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12164 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12170 NT_STATUS_OK
WriteX 12170 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 258 NT_STATUS_OK
WriteX 12170 0 543 543 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12184 NT_STATUS_OK
QUERY_FILE_INFORMATION 12184 1004 NT_STATUS_OK
WriteX 12184 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12184 258 NT_STATUS_OK
WriteX 12184 0 2048 2048 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12185 0 4096 4096 NT_STATUS_OK
Flush 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12185 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12190 NT_STATUS_OK
WriteX 12190 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12190 258 NT_STATUS_OK
WriteX 12190 0 2048 2048 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12196 NT_STATUS_OK
WriteX 12196 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12196 258 NT_STATUS_OK
WriteX 12196 0 2048 2048 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 2048 2048 NT_STATUS_OK
ReadX 12175 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12191 0 4096 4096 NT_STATUS_OK
WriteX 12175 0 8192 8192 NT_STATUS_OK
WriteX 12176 0 4096 4096 NT_STATUS_OK
WriteX 12177 0 4096 4096 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12201 NT_STATUS_OK
QUERY_FILE_INFORMATION 12201 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12176 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12203 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12208 NT_STATUS_OK
ReadX 12208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12209 NT_STATUS_OK
ReadX 12209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12212 NT_STATUS_OK
ReadX 12212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12213 NT_STATUS_OK
ReadX 12213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12221 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 258 NT_STATUS_OK
WriteX 12221 0 2048 2048 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12222 NT_STATUS_OK
ReadX 12222 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12229 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 1004 NT_STATUS_OK
WriteX 12229 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 258 NT_STATUS_OK
WriteX 12229 0 2048 2048 NT_STATUS_OK
Close 12229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12222 0 4096 4096 NT_STATUS_OK
Flush 12222 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
Flush 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12222 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12224 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12232 NT_STATUS_OK
WriteX 12232 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 258 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12234 NT_STATUS_OK
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12235 NT_STATUS_OK
WriteX 12235 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 4096 4096 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12236 0 4096 4096 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12213 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Close 12209 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12243 NT_STATUS_OK
WriteX 12243 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 258 NT_STATUS_OK
WriteX 12243 0 2048 2048 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12246 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12257 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12260 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12264 NT_STATUS_OK
ReadX 12264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12270 NT_STATUS_OK
ReadX 12270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12279 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12280 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 1004 NT_STATUS_OK
WriteX 12280 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 258 NT_STATUS_OK
WriteX 12280 0 2048 2048 NT_STATUS_OK
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12287 NT_STATUS_OK
ReadX 12287 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12292 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 1004 NT_STATUS_OK
WriteX 12292 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 258 NT_STATUS_OK
WriteX 12292 0 2048 2048 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12300 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 1004 NT_STATUS_OK
WriteX 12300 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 2048 2048 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12281 0 4096 4096 NT_STATUS_OK
Flush 12281 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12281 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 4096 16384 16384 NT_STATUS_OK
ReadX 12263 4096 16384 16384 NT_STATUS_OK
ReadX 12295 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 2048 2048 NT_STATUS_OK
WriteX 12303 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12304 NT_STATUS_OK
QUERY_FILE_INFORMATION 12304 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12287 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12267 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Close 12285 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12306 NT_STATUS_OK
QUERY_FILE_INFORMATION 12306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12311 4096 16384 16384 NT_STATUS_OK
WriteX 12311 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 8192 8192 NT_STATUS_OK
ReadX 12317 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12331 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12331 0 4096 4096 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
WriteX 12317 0 4096 4096 NT_STATUS_OK
WriteX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
ReadX 12332 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12311 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12337 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 258 NT_STATUS_OK
WriteX 12337 0 2048 2048 NT_STATUS_OK
Close 12337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
ReadX 12340 4096 4096 4096 NT_STATUS_OK
WriteX 12340 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
ReadX 12342 4096 4096 4096 NT_STATUS_OK
WriteX 12342 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12343 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12311 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Close 12323 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Close 12325 NT_STATUS_OK
Close 12326 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Close 12317 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Close 12331 NT_STATUS_OK
Close 12332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12345 0 4096 4096 NT_STATUS_OK
ReadX 12345 4096 4096 4096 NT_STATUS_OK
ReadX 12345 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
ReadX 12346 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12363 NT_STATUS_OK
QUERY_FILE_INFORMATION 12363 1004 NT_STATUS_OK
WriteX 12363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12363 258 NT_STATUS_OK
WriteX 12363 0 2048 2048 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12364 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12369 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 1004 NT_STATUS_OK
WriteX 12369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 2048 2048 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12353 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12371 NT_STATUS_OK
QUERY_FILE_INFORMATION 12371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12373 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 61440 4096 4096 NT_STATUS_OK
ReadX 12375 126976 4096 4096 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 61440 4096 4096 NT_STATUS_OK
ReadX 12376 126976 4096 4096 NT_STATUS_OK
ReadX 12376 192512 4096 4096 NT_STATUS_OK
ReadX 12376 258048 4096 4096 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 65536 65536 NT_STATUS_OK
WriteX 12376 131072 65536 65536 NT_STATUS_OK
WriteX 12376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 61440 4096 4096 NT_STATUS_OK
ReadX 12377 126976 4096 4096 NT_STATUS_OK
ReadX 12377 192512 4096 4096 NT_STATUS_OK
ReadX 12377 258048 4096 4096 NT_STATUS_OK
ReadX 12377 323584 4096 4096 NT_STATUS_OK
ReadX 12377 389120 4096 4096 NT_STATUS_OK
ReadX 12377 454656 4096 4096 NT_STATUS_OK
ReadX 12377 520192 4096 4096 NT_STATUS_OK
WriteX 12377 0 65536 65536 NT_STATUS_OK
WriteX 12377 65536 65536 65536 NT_STATUS_OK
WriteX 12377 131072 65536 65536 NT_STATUS_OK
WriteX 12377 196608 65536 65536 NT_STATUS_OK
WriteX 12377 262144 65536 65536 NT_STATUS_OK
WriteX 12377 327680 65536 65536 NT_STATUS_OK
WriteX 12377 393216 65536 65536 NT_STATUS_OK
WriteX 12377 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12378 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12378 8192 4096 4096 NT_STATUS_OK
ReadX 12378 12288 4096 4096 NT_STATUS_OK
ReadX 12378 16384 4096 4096 NT_STATUS_OK
ReadX 12378 20480 4096 4096 NT_STATUS_OK
ReadX 12378 24576 4096 4096 NT_STATUS_OK
ReadX 12378 28672 4096 4096 NT_STATUS_OK
ReadX 12378 32768 4096 4096 NT_STATUS_OK
ReadX 12378 36864 4096 4096 NT_STATUS_OK
ReadX 12378 40960 4096 4096 NT_STATUS_OK
ReadX 12378 45056 4096 4096 NT_STATUS_OK
ReadX 12378 49152 4096 4096 NT_STATUS_OK
ReadX 12378 53248 4096 4096 NT_STATUS_OK
ReadX 12378 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12378 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12381 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12381 1004 NT_STATUS_OK
WriteX 12381 0 57088 57088 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
Flush 12381 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12382 NT_STATUS_OK
SET_FILE_INFORMATION 12382 1004 NT_STATUS_OK
Close 12382 NT_STATUS_OK
SET_FILE_INFORMATION 12381 1004 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12386 NT_STATUS_OK
WriteX 12386 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12386 0 51456 51456 NT_STATUS_OK
WriteX 12386 0 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 0 8192 8192 NT_STATUS_OK
Flush 12386 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 0 4096 4096 NT_STATUS_OK
Close 12386 NT_STATUS_OK
Close 12385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12390 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12395 NT_STATUS_OK
WriteX 12395 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 258 NT_STATUS_OK
WriteX 12395 0 53077 53077 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12396 NT_STATUS_OK
WriteX 12396 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12396 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
WriteX 12396 0 65536 65536 NT_STATUS_OK
WriteX 12396 65536 1856 1856 NT_STATUS_OK
WriteX 12396 0 4096 4096 NT_STATUS_OK
Flush 12396 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
WriteX 12396 0 4096 4096 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12405 NT_STATUS_OK
WriteX 12405 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
WriteX 12405 0 7983 7983 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12410 NT_STATUS_OK
WriteX 12410 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12410 258 NT_STATUS_OK
WriteX 12410 0 65536 65536 NT_STATUS_OK
WriteX 12410 65536 65536 65536 NT_STATUS_OK
WriteX 12410 131072 65536 65536 NT_STATUS_OK
WriteX 12410 196608 65536 65536 NT_STATUS_OK
WriteX 12410 262144 65536 65536 NT_STATUS_OK
WriteX 12410 327680 65536 65536 NT_STATUS_OK
WriteX 12410 393216 65536 65536 NT_STATUS_OK
WriteX 12410 458752 46731 46731 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12400 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
WriteX 12411 0 65536 65536 NT_STATUS_OK
WriteX 12411 65536 22848 22848 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
Flush 12411 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12415 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12416 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12416 1004 NT_STATUS_OK
ReadX 12416 8192 4096 4096 NT_STATUS_OK
ReadX 12416 12288 4096 4096 NT_STATUS_OK
ReadX 12416 16384 4096 4096 NT_STATUS_OK
ReadX 12416 20480 4096 4096 NT_STATUS_OK
ReadX 12416 24576 4096 4096 NT_STATUS_OK
ReadX 12416 28672 4096 4096 NT_STATUS_OK
ReadX 12416 32768 4096 4096 NT_STATUS_OK
ReadX 12416 36864 4096 4096 NT_STATUS_OK
ReadX 12416 40960 4096 4096 NT_STATUS_OK
ReadX 12416 45056 4096 4096 NT_STATUS_OK
ReadX 12416 49152 4096 4096 NT_STATUS_OK
ReadX 12416 53248 4096 4096 NT_STATUS_OK
ReadX 12416 57344 4096 4096 NT_STATUS_OK
ReadX 12416 61440 4096 4096 NT_STATUS_OK
ReadX 12416 65536 4096 4096 NT_STATUS_OK
ReadX 12416 69632 4096 4096 NT_STATUS_OK
ReadX 12416 73728 4096 4096 NT_STATUS_OK
ReadX 12416 77824 4096 4096 NT_STATUS_OK
ReadX 12416 81920 4096 4096 NT_STATUS_OK
ReadX 12416 86016 4096 4096 NT_STATUS_OK
ReadX 12416 90112 4096 4096 NT_STATUS_OK
ReadX 12416 94208 4096 4096 NT_STATUS_OK
ReadX 12416 98304 4096 4096 NT_STATUS_OK
ReadX 12416 102400 4096 4096 NT_STATUS_OK
ReadX 12416 106496 4096 4096 NT_STATUS_OK
ReadX 12416 110592 4096 4096 NT_STATUS_OK
ReadX 12416 114688 4096 4096 NT_STATUS_OK
ReadX 12416 118784 4096 4096 NT_STATUS_OK
ReadX 12416 122880 4096 4096 NT_STATUS_OK
ReadX 12416 126976 4096 4096 NT_STATUS_OK
ReadX 12416 131072 4096 4096 NT_STATUS_OK
ReadX 12416 135168 4096 4096 NT_STATUS_OK
ReadX 12416 139264 4096 4096 NT_STATUS_OK
ReadX 12416 143360 4096 4096 NT_STATUS_OK
ReadX 12416 147456 4096 4096 NT_STATUS_OK
ReadX 12416 151552 4096 4096 NT_STATUS_OK
ReadX 12416 155648 4096 4096 NT_STATUS_OK
ReadX 12416 159744 4096 4096 NT_STATUS_OK
ReadX 12416 163840 4096 4096 NT_STATUS_OK
ReadX 12416 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12416 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12419 NT_STATUS_OK
WriteX 12419 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 258 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12420 NT_STATUS_OK
SET_FILE_INFORMATION 12420 1004 NT_STATUS_OK
Close 12420 NT_STATUS_OK
WriteX 12419 0 42388 42388 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
ReadX 12423 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12424 NT_STATUS_OK
WriteX 12424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
SET_FILE_INFORMATION 12424 1004 NT_STATUS_OK
WriteX 12424 0 42652 42652 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12426 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 4096 4096 NT_STATUS_OK
ReadX 12428 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12433 NT_STATUS_OK
WriteX 12433 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12433 258 NT_STATUS_OK
WriteX 12433 0 65536 65536 NT_STATUS_OK
WriteX 12433 65536 49 49 NT_STATUS_OK
Close 12433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 61440 61440 NT_STATUS_OK
ReadX 12434 61440 4096 4096 NT_STATUS_OK
ReadX 12434 65536 61440 61440 NT_STATUS_OK
ReadX 12434 126976 4096 4096 NT_STATUS_OK
ReadX 12434 131072 61440 61440 NT_STATUS_OK
ReadX 12434 192512 4096 4096 NT_STATUS_OK
ReadX 12434 196608 61440 61440 NT_STATUS_OK
ReadX 12434 258048 4096 4096 NT_STATUS_OK
ReadX 12434 262144 61440 61440 NT_STATUS_OK
ReadX 12434 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 61440 61440 NT_STATUS_OK
ReadX 12435 61440 4096 4096 NT_STATUS_OK
ReadX 12435 65536 61440 61440 NT_STATUS_OK
ReadX 12435 126976 4096 4096 NT_STATUS_OK
ReadX 12435 131072 61440 61440 NT_STATUS_OK
ReadX 12435 192512 4096 4096 NT_STATUS_OK
ReadX 12435 196608 61440 61440 NT_STATUS_OK
ReadX 12435 258048 4096 4096 NT_STATUS_OK
ReadX 12435 262144 61440 61440 NT_STATUS_OK
ReadX 12435 323584 4096 4096 NT_STATUS_OK
ReadX 12435 327680 61440 61440 NT_STATUS_OK
ReadX 12435 389120 4096 4096 NT_STATUS_OK
ReadX 12435 393216 61440 61440 NT_STATUS_OK
ReadX 12435 454656 4096 4096 NT_STATUS_OK
ReadX 12435 458752 61440 61440 NT_STATUS_OK
ReadX 12435 520192 4096 4096 NT_STATUS_OK
ReadX 12435 524288 61440 61440 NT_STATUS_OK
ReadX 12435 585728 4096 4096 NT_STATUS_OK
ReadX 12435 589824 61440 61440 NT_STATUS_OK
ReadX 12435 651264 4096 4096 NT_STATUS_OK
ReadX 12435 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 61440 61440 NT_STATUS_OK
ReadX 12436 61440 4096 4096 NT_STATUS_OK
ReadX 12436 65536 61440 61440 NT_STATUS_OK
ReadX 12436 126976 4096 4096 NT_STATUS_OK
ReadX 12436 131072 61440 61440 NT_STATUS_OK
ReadX 12436 192512 4096 4096 NT_STATUS_OK
ReadX 12436 196608 61440 61440 NT_STATUS_OK
ReadX 12436 258048 4096 4096 NT_STATUS_OK
ReadX 12436 262144 61440 61440 NT_STATUS_OK
ReadX 12436 323584 4096 4096 NT_STATUS_OK
ReadX 12436 327680 61440 61440 NT_STATUS_OK
ReadX 12436 389120 4096 4096 NT_STATUS_OK
ReadX 12436 393216 61440 61440 NT_STATUS_OK
ReadX 12436 454656 4096 4096 NT_STATUS_OK
ReadX 12436 458752 61440 61440 NT_STATUS_OK
ReadX 12436 520192 4096 4096 NT_STATUS_OK
ReadX 12436 524288 61440 61440 NT_STATUS_OK
ReadX 12436 585728 4096 4096 NT_STATUS_OK
ReadX 12436 589824 61440 61440 NT_STATUS_OK
ReadX 12436 651264 4096 4096 NT_STATUS_OK
ReadX 12436 655360 61440 61440 NT_STATUS_OK
ReadX 12436 716800 4096 4096 NT_STATUS_OK
ReadX 12436 720896 61440 61440 NT_STATUS_OK
ReadX 12436 782336 4096 4096 NT_STATUS_OK
ReadX 12436 786432 61440 61440 NT_STATUS_OK
ReadX 12436 847872 4096 4096 NT_STATUS_OK
ReadX 12436 851968 61440 61440 NT_STATUS_OK
ReadX 12436 913408 4096 4096 NT_STATUS_OK
ReadX 12436 917504 61440 61440 NT_STATUS_OK
ReadX 12436 978944 4096 4096 NT_STATUS_OK
ReadX 12436 983040 61440 61440 NT_STATUS_OK
ReadX 12436 1044480 4096 4096 NT_STATUS_OK
ReadX 12436 1048576 61440 61440 NT_STATUS_OK
ReadX 12436 1110016 4096 4096 NT_STATUS_OK
ReadX 12436 1114112 61440 61440 NT_STATUS_OK
ReadX 12436 1175552 4096 4096 NT_STATUS_OK
ReadX 12436 1179648 61440 61440 NT_STATUS_OK
ReadX 12436 1241088 4096 4096 NT_STATUS_OK
ReadX 12436 1245184 61440 61440 NT_STATUS_OK
ReadX 12436 1306624 4096 4096 NT_STATUS_OK
ReadX 12436 1310720 61440 61440 NT_STATUS_OK
ReadX 12436 1372160 4096 4096 NT_STATUS_OK
ReadX 12436 1376256 61440 61440 NT_STATUS_OK
ReadX 12436 1437696 4096 4096 NT_STATUS_OK
ReadX 12436 1441792 61440 61440 NT_STATUS_OK
ReadX 12436 1503232 4096 4096 NT_STATUS_OK
ReadX 12436 1507328 61440 61440 NT_STATUS_OK
ReadX 12436 1568768 4096 4096 NT_STATUS_OK
ReadX 12436 1572864 61440 61440 NT_STATUS_OK
ReadX 12436 1634304 4096 4096 NT_STATUS_OK
ReadX 12436 1638400 61440 61440 NT_STATUS_OK
ReadX 12436 1699840 4096 4096 NT_STATUS_OK
ReadX 12436 1703936 61440 61440 NT_STATUS_OK
ReadX 12436 1765376 4096 4096 NT_STATUS_OK
ReadX 12436 1769472 61440 61440 NT_STATUS_OK
ReadX 12436 1830912 4096 4096 NT_STATUS_OK
ReadX 12436 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12438 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
ReadX 12438 2156 24 24 NT_STATUS_OK
ReadX 12438 2139 276 276 NT_STATUS_OK
ReadX 12438 2136 14 14 NT_STATUS_OK
ReadX 12438 2136 7 7 NT_STATUS_OK
ReadX 12438 2138 12 12 NT_STATUS_OK
ReadX 12438 2137 8 8 NT_STATUS_OK
ReadX 12438 2135 15 15 NT_STATUS_OK
ReadX 12438 0 16 16 NT_STATUS_OK
ReadX 12438 16 2048 2048 NT_STATUS_OK
ReadX 12438 2064 2048 2048 NT_STATUS_OK
ReadX 12438 257 2048 2048 NT_STATUS_OK
ReadX 12438 385 2048 2048 NT_STATUS_OK
ReadX 12438 513 2048 2048 NT_STATUS_OK
ReadX 12438 641 2048 2048 NT_STATUS_OK
ReadX 12438 769 2048 2048 NT_STATUS_OK
ReadX 12438 897 2048 2048 NT_STATUS_OK
ReadX 12438 1025 2048 2048 NT_STATUS_OK
ReadX 12438 1153 2048 2048 NT_STATUS_OK
ReadX 12438 1281 2048 2048 NT_STATUS_OK
ReadX 12438 1409 2048 2048 NT_STATUS_OK
ReadX 12438 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12436 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12443 NT_STATUS_OK
WriteX 12443 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
WriteX 12443 0 10575 10575 NT_STATUS_OK
Flush 12443 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12448 NT_STATUS_OK
LockX 12448 2147483538 1 NT_STATUS_OK
UnlockX 12448 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1005 NT_STATUS_OK
ReadX 12448 0 512 512 NT_STATUS_OK
ReadX 12448 512 512 512 NT_STATUS_OK
ReadX 12448 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1004 NT_STATUS_OK
Close 12448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12449 NT_STATUS_OK
QUERY_FILE_INFORMATION 12449 1005 NT_STATUS_OK
ReadX 12449 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12450 NT_STATUS_OK
LockX 12450 2147483538 1 NT_STATUS_OK
UnlockX 12450 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12450 1005 NT_STATUS_OK
ReadX 12450 0 512 512 NT_STATUS_OK
ReadX 12450 512 512 512 NT_STATUS_OK
ReadX 12450 1024 512 512 NT_STATUS_OK
ReadX 12450 288 20 20 NT_STATUS_OK
ReadX 12450 308 2084 2084 NT_STATUS_OK
ReadX 12450 388 2084 2084 NT_STATUS_OK
ReadX 12450 388 2084 2084 NT_STATUS_OK
ReadX 12437 2157 1386 1386 NT_STATUS_OK
ReadX 12450 2472 399 399 NT_STATUS_OK
ReadX 12450 3072 1536 1536 NT_STATUS_OK
ReadX 12450 544 149 149 NT_STATUS_OK
ReadX 12450 693 485 485 NT_STATUS_OK
Close 12450 NT_STATUS_OK
ReadX 12437 2157 4096 4096 NT_STATUS_OK
ReadX 12437 6253 4096 4096 NT_STATUS_OK
ReadX 12437 10349 4096 4096 NT_STATUS_OK
ReadX 12437 14445 4096 4096 NT_STATUS_OK
ReadX 12437 18541 4096 4096 NT_STATUS_OK
ReadX 12437 22637 256 256 NT_STATUS_OK
ReadX 12437 22893 4096 4096 NT_STATUS_OK
ReadX 12437 26989 4096 4096 NT_STATUS_OK
ReadX 12437 31085 4096 4096 NT_STATUS_OK
ReadX 12437 35181 4096 4096 NT_STATUS_OK
ReadX 12437 39277 4096 4096 NT_STATUS_OK
ReadX 12437 43373 4096 4096 NT_STATUS_OK
ReadX 12437 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12437 2157 1024 1024 NT_STATUS_OK
ReadX 12437 1667 4688 4688 NT_STATUS_OK
ReadX 12437 6355 3516 3516 NT_STATUS_OK
ReadX 12437 9871 16384 16384 NT_STATUS_OK
ReadX 12437 26255 3771 3771 NT_STATUS_OK
ReadX 12437 30026 2048 2048 NT_STATUS_OK
ReadX 12437 32074 1024 1024 NT_STATUS_OK
ReadX 12437 33098 6652 6652 NT_STATUS_OK
ReadX 12437 39750 16384 16384 NT_STATUS_OK
ReadX 12437 56134 10496 10496 NT_STATUS_OK
ReadX 12437 66630 1784 1784 NT_STATUS_OK
ReadX 12437 68414 90 90 NT_STATUS_OK
ReadX 12437 68504 273 273 NT_STATUS_OK
ReadX 12437 68777 1600 1600 NT_STATUS_OK
ReadX 12437 70377 640 640 NT_STATUS_OK
ReadX 12437 71017 1280 1280 NT_STATUS_OK
ReadX 12437 72297 8464 8464 NT_STATUS_OK
ReadX 12437 80761 158 158 NT_STATUS_OK
ReadX 12437 80919 912 912 NT_STATUS_OK
ReadX 12437 81831 1980 1980 NT_STATUS_OK
ReadX 12437 83811 2256 2256 NT_STATUS_OK
ReadX 12437 86067 400 400 NT_STATUS_OK
ReadX 12437 86467 252 252 NT_STATUS_OK
ReadX 12437 86719 42 42 NT_STATUS_OK
ReadX 12437 86761 725 725 NT_STATUS_OK
ReadX 12437 2009 512 512 NT_STATUS_OK
ReadX 12437 3895 9 9 NT_STATUS_OK
ReadX 12437 3781 46 46 NT_STATUS_OK
ReadX 12437 4059 92 92 NT_STATUS_OK
ReadX 12437 3781 92 92 NT_STATUS_OK
ReadX 12437 3986 184 184 NT_STATUS_OK
ReadX 12437 3987 16384 16384 NT_STATUS_OK
ReadX 12437 3902 16384 16384 NT_STATUS_OK
ReadX 12437 3781 10240 10240 NT_STATUS_OK
ReadX 12437 3821 16384 16384 NT_STATUS_OK
ReadX 12437 3891 935 935 NT_STATUS_OK
ReadX 12437 4060 10240 10240 NT_STATUS_OK
ReadX 12437 4059 184 184 NT_STATUS_OK
ReadX 12437 256 184 184 NT_STATUS_OK
ReadX 12437 256 1026 1026 NT_STATUS_OK
ReadX 12437 3901 326 326 NT_STATUS_OK
ReadX 12437 3899 652 652 NT_STATUS_OK
ReadX 12437 256 2 2 NT_STATUS_OK
ReadX 12437 258 4948 4948 NT_STATUS_OK
Close 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12452 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12455 NT_STATUS_OK
WriteX 12455 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 65536 65536 NT_STATUS_OK
WriteX 12455 65536 65536 65536 NT_STATUS_OK
WriteX 12455 131072 65536 65536 NT_STATUS_OK
WriteX 12455 196608 65536 65536 NT_STATUS_OK
WriteX 12455 262144 65536 65536 NT_STATUS_OK
WriteX 12455 327680 65536 65536 NT_STATUS_OK
WriteX 12455 393216 65536 65536 NT_STATUS_OK
WriteX 12455 458752 65536 65536 NT_STATUS_OK
WriteX 12455 524288 65536 65536 NT_STATUS_OK
WriteX 12455 589824 35257 35257 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12460 NT_STATUS_OK
WriteX 12460 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12460 258 NT_STATUS_OK
WriteX 12460 0 65536 65536 NT_STATUS_OK
WriteX 12460 65536 65536 65536 NT_STATUS_OK
WriteX 12460 131072 65536 65536 NT_STATUS_OK
WriteX 12460 196608 65536 65536 NT_STATUS_OK
WriteX 12460 262144 65536 65536 NT_STATUS_OK
WriteX 12460 327680 65536 65536 NT_STATUS_OK
WriteX 12460 393216 65536 65536 NT_STATUS_OK
WriteX 12460 458752 65536 65536 NT_STATUS_OK
WriteX 12460 524288 65536 65536 NT_STATUS_OK
WriteX 12460 589824 57598 57598 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12462 NT_STATUS_OK
WriteX 12462 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 258 NT_STATUS_OK
WriteX 12462 0 12543 12543 NT_STATUS_OK
Flush 12462 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12464 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12468 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
ReadX 12468 1938 24 24 NT_STATUS_OK
ReadX 12468 1920 276 276 NT_STATUS_OK
ReadX 12468 1918 14 14 NT_STATUS_OK
ReadX 12468 1918 7 7 NT_STATUS_OK
ReadX 12468 1919 12 12 NT_STATUS_OK
ReadX 12468 1919 8 8 NT_STATUS_OK
ReadX 12468 1917 15 15 NT_STATUS_OK
ReadX 12468 0 16 16 NT_STATUS_OK
ReadX 12468 16 2048 2048 NT_STATUS_OK
ReadX 12468 2064 2048 2048 NT_STATUS_OK
ReadX 12468 257 2048 2048 NT_STATUS_OK
ReadX 12468 385 2048 2048 NT_STATUS_OK
ReadX 12468 513 2048 2048 NT_STATUS_OK
ReadX 12468 641 2048 2048 NT_STATUS_OK
ReadX 12468 769 2048 2048 NT_STATUS_OK
ReadX 12468 897 2048 2048 NT_STATUS_OK
ReadX 12468 1025 2048 2048 NT_STATUS_OK
ReadX 12468 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12473 NT_STATUS_OK
WriteX 12473 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12473 258 NT_STATUS_OK
WriteX 12473 0 11588 11588 NT_STATUS_OK
Flush 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12474 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12478 NT_STATUS_OK
WriteX 12478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12478 258 NT_STATUS_OK
WriteX 12478 0 11615 11615 NT_STATUS_OK
Flush 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12487 NT_STATUS_OK
WriteX 12487 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12487 258 NT_STATUS_OK
WriteX 12487 0 65536 65536 NT_STATUS_OK
WriteX 12487 65536 16050 16050 NT_STATUS_OK
Close 12487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12467 1939 64 64 NT_STATUS_OK
ReadX 12467 128 248 248 NT_STATUS_OK
ReadX 12467 128 568 568 NT_STATUS_OK
ReadX 12467 3872 1536 1536 NT_STATUS_OK
ReadX 12467 3456 2560 2560 NT_STATUS_OK
ReadX 12467 3136 512 512 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
ReadX 12467 3264 3072 3072 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 3616 4096 4096 NT_STATUS_OK
ReadX 12467 1939 64 64 NT_STATUS_OK
ReadX 12467 128 248 248 NT_STATUS_OK
ReadX 12467 128 608 608 NT_STATUS_OK
ReadX 12467 2858 1024 1024 NT_STATUS_OK
ReadX 12467 2810 4096 4096 NT_STATUS_OK
ReadX 12467 2826 4096 4096 NT_STATUS_OK
ReadX 12467 2580 2048 2048 NT_STATUS_OK
ReadX 12467 2800 2560 2560 NT_STATUS_OK
ReadX 12467 2100 4096 4096 NT_STATUS_OK
ReadX 12467 2084 4096 4096 NT_STATUS_OK
ReadX 12467 868 4096 4096 NT_STATUS_OK
ReadX 12467 2324 4096 4096 NT_STATUS_OK
ReadX 12467 884 4096 4096 NT_STATUS_OK
ReadX 12467 2604 1024 1024 NT_STATUS_OK
ReadX 12467 580 4096 4096 NT_STATUS_OK
ReadX 12467 596 4096 4096 NT_STATUS_OK
ReadX 12467 2752 4096 4096 NT_STATUS_OK
ReadX 12467 2842 1024 1024 NT_STATUS_OK
ReadX 12467 660 4096 4096 NT_STATUS_OK
ReadX 12467 2720 4096 4096 NT_STATUS_OK
ReadX 12467 2736 4096 4096 NT_STATUS_OK
ReadX 12467 628 4096 4096 NT_STATUS_OK
ReadX 12467 2704 4096 4096 NT_STATUS_OK
ReadX 12467 1556 4096 4096 NT_STATUS_OK
ReadX 12467 576 4096 4096 NT_STATUS_OK
ReadX 12467 3168 1536 1536 NT_STATUS_OK
ReadX 12467 832 4096 4096 NT_STATUS_OK
ReadX 12467 1088 4096 4096 NT_STATUS_OK
ReadX 12467 1344 4096 4096 NT_STATUS_OK
ReadX 12467 1600 4096 4096 NT_STATUS_OK
ReadX 12467 1856 4096 4096 NT_STATUS_OK
ReadX 12467 2112 4096 4096 NT_STATUS_OK
ReadX 12467 1892 4096 4096 NT_STATUS_OK
ReadX 12467 820 4096 4096 NT_STATUS_OK
ReadX 12467 788 4096 4096 NT_STATUS_OK
ReadX 12467 1604 4096 4096 NT_STATUS_OK
ReadX 12467 3648 4096 4096 NT_STATUS_OK
ReadX 12467 2608 4096 4096 NT_STATUS_OK
ReadX 12467 548 4096 4096 NT_STATUS_OK
ReadX 12467 740 4096 4096 NT_STATUS_OK
ReadX 12467 1344 4096 4096 NT_STATUS_OK
ReadX 12467 3392 4096 4096 NT_STATUS_OK
ReadX 12467 3904 4096 4096 NT_STATUS_OK
ReadX 12467 644 4096 4096 NT_STATUS_OK
ReadX 12467 676 4096 4096 NT_STATUS_OK
ReadX 12467 2688 4096 4096 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 900 4096 4096 NT_STATUS_OK
ReadX 12467 1908 4096 4096 NT_STATUS_OK
ReadX 12467 852 4096 4096 NT_STATUS_OK
ReadX 12467 724 4096 4096 NT_STATUS_OK
ReadX 12467 2292 4096 4096 NT_STATUS_OK
ReadX 12467 612 4096 4096 NT_STATUS_OK
ReadX 12467 388 4096 4096 NT_STATUS_OK
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 500 4096 4096 NT_STATUS_OK
ReadX 12467 356 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 576 4096 4096 NT_STATUS_OK
ReadX 12467 340 4096 4096 NT_STATUS_OK
ReadX 12467 420 4096 4096 NT_STATUS_OK
ReadX 12467 1600 4096 4096 NT_STATUS_OK
ReadX 12467 404 4096 4096 NT_STATUS_OK
ReadX 12467 1428 4096 4096 NT_STATUS_OK
ReadX 12467 2656 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 452 4096 4096 NT_STATUS_OK
ReadX 12467 692 4096 4096 NT_STATUS_OK
ReadX 12467 564 4096 4096 NT_STATUS_OK
ReadX 12467 372 4096 4096 NT_STATUS_OK
ReadX 12467 468 4096 4096 NT_STATUS_OK
ReadX 12467 484 4096 4096 NT_STATUS_OK
ReadX 12467 1088 4096 4096 NT_STATUS_OK
ReadX 12467 1924 4096 4096 NT_STATUS_OK
ReadX 12467 2768 4096 4096 NT_STATUS_OK
ReadX 12467 832 4096 4096 NT_STATUS_OK
ReadX 12467 836 4096 4096 NT_STATUS_OK
ReadX 12467 1856 4096 4096 NT_STATUS_OK
ReadX 12467 2640 4096 4096 NT_STATUS_OK
ReadX 12467 436 4096 4096 NT_STATUS_OK
ReadX 12467 1828 4096 4096 NT_STATUS_OK
ReadX 12467 804 4096 4096 NT_STATUS_OK
ReadX 12467 1860 4096 4096 NT_STATUS_OK
ReadX 12467 1812 4096 4096 NT_STATUS_OK
ReadX 12467 756 4096 4096 NT_STATUS_OK
ReadX 12467 1636 4096 4096 NT_STATUS_OK
ReadX 12467 772 4096 4096 NT_STATUS_OK
ReadX 12467 2036 4096 4096 NT_STATUS_OK
ReadX 12467 1220 4096 4096 NT_STATUS_OK
ReadX 12467 1652 4096 4096 NT_STATUS_OK
ReadX 12467 2588 4096 4096 NT_STATUS_OK
ReadX 12467 916 4096 4096 NT_STATUS_OK
ReadX 12467 260 4096 4096 NT_STATUS_OK
ReadX 12467 932 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 308 4096 4096 NT_STATUS_OK
ReadX 12467 292 4096 4096 NT_STATUS_OK
ReadX 12467 1140 4096 4096 NT_STATUS_OK
ReadX 12467 276 4096 4096 NT_STATUS_OK
ReadX 12467 2020 4096 4096 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
ReadX 12467 516 4096 4096 NT_STATUS_OK
ReadX 12467 1844 4096 4096 NT_STATUS_OK
ReadX 12467 1124 4096 4096 NT_STATUS_OK
ReadX 12467 3136 4096 4096 NT_STATUS_OK
ReadX 12467 324 4096 4096 NT_STATUS_OK
ReadX 12467 1156 4096 4096 NT_STATUS_OK
ReadX 12467 1172 4096 4096 NT_STATUS_OK
ReadX 12467 2112 4096 4096 NT_STATUS_OK
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 964 4096 4096 NT_STATUS_OK
ReadX 12467 980 4096 4096 NT_STATUS_OK
ReadX 12467 1012 4096 4096 NT_STATUS_OK
ReadX 12467 532 4096 4096 NT_STATUS_OK
ReadX 12467 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12467 1620 4096 4096 NT_STATUS_OK
ReadX 12467 1604 4096 4096 NT_STATUS_OK
ReadX 12467 2116 4096 4096 NT_STATUS_OK
ReadX 12467 2132 4096 4096 NT_STATUS_OK
ReadX 12467 2148 4096 4096 NT_STATUS_OK
ReadX 12467 2276 4096 4096 NT_STATUS_OK
ReadX 12467 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12492 NT_STATUS_OK
QUERY_FILE_INFORMATION 12447 1004 NT_STATUS_OK
Close 12447 NT_STATUS_OK
WriteX 12492 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12449 1004 NT_STATUS_OK
Close 12449 NT_STATUS_OK
WriteX 12492 0 65536 65536 NT_STATUS_OK
WriteX 12492 65536 64850 64850 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12494 NT_STATUS_OK
WriteX 12494 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
ReadX 12467 2068 4096 4096 NT_STATUS_OK
ReadX 12467 1588 4096 4096 NT_STATUS_OK
ReadX 12467 1572 4096 4096 NT_STATUS_OK
WriteX 12494 0 18630 18630 NT_STATUS_OK
Flush 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12496 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12467 612 4096 4096 NT_STATUS_OK
ReadX 12467 564 4096 4096 NT_STATUS_OK
ReadX 12467 1876 4096 4096 NT_STATUS_OK
ReadX 12467 628 4096 4096 NT_STATUS_OK
ReadX 12467 740 4096 4096 NT_STATUS_OK
ReadX 12467 724 4096 4096 NT_STATUS_OK
ReadX 12467 644 4096 4096 NT_STATUS_OK
ReadX 12467 2324 4096 4096 NT_STATUS_OK
ReadX 12467 660 4096 4096 NT_STATUS_OK
ReadX 12467 852 4096 4096 NT_STATUS_OK
ReadX 12467 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 580 4096 4096 NT_STATUS_OK
ReadX 12467 3136 512 512 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 61440 4096 4096 NT_STATUS_OK
ReadX 12499 126976 4096 4096 NT_STATUS_OK
WriteX 12499 0 65536 65536 NT_STATUS_OK
WriteX 12499 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 61440 4096 4096 NT_STATUS_OK
ReadX 12500 126976 4096 4096 NT_STATUS_OK
ReadX 12500 192512 4096 4096 NT_STATUS_OK
ReadX 12500 258048 4096 4096 NT_STATUS_OK
WriteX 12500 0 65536 65536 NT_STATUS_OK
WriteX 12500 65536 65536 65536 NT_STATUS_OK
WriteX 12500 131072 65536 65536 NT_STATUS_OK
WriteX 12500 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 61440 4096 4096 NT_STATUS_OK
ReadX 12501 126976 4096 4096 NT_STATUS_OK
ReadX 12501 192512 4096 4096 NT_STATUS_OK
ReadX 12501 258048 4096 4096 NT_STATUS_OK
ReadX 12501 323584 4096 4096 NT_STATUS_OK
ReadX 12501 389120 4096 4096 NT_STATUS_OK
ReadX 12501 454656 4096 4096 NT_STATUS_OK
ReadX 12501 520192 4096 4096 NT_STATUS_OK
WriteX 12501 0 65536 65536 NT_STATUS_OK
WriteX 12501 65536 65536 65536 NT_STATUS_OK
WriteX 12501 131072 65536 65536 NT_STATUS_OK
WriteX 12501 196608 65536 65536 NT_STATUS_OK
WriteX 12501 262144 65536 65536 NT_STATUS_OK
WriteX 12501 327680 65536 65536 NT_STATUS_OK
WriteX 12501 393216 65536 65536 NT_STATUS_OK
WriteX 12501 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12503 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12504 NT_STATUS_OK
WriteX 12504 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12504 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12502 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12506 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12499 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12509 NT_STATUS_OK
WriteX 12509 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12509 258 NT_STATUS_OK
WriteX 12509 0 62591 62591 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12511 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12514 NT_STATUS_OK
WriteX 12514 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12514 258 NT_STATUS_OK
WriteX 12514 0 10845 10845 NT_STATUS_OK
Close 12514 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12519 NT_STATUS_OK
WriteX 12519 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12519 258 NT_STATUS_OK
WriteX 12519 0 30118 30118 NT_STATUS_OK
Close 12519 NT_STATUS_OK
WriteX 12502 0 4096 4096 NT_STATUS_OK
WriteX 12504 0 64 64 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12502 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 61440 61440 NT_STATUS_OK
ReadX 12521 61440 4096 4096 NT_STATUS_OK
ReadX 12521 65536 61440 61440 NT_STATUS_OK
ReadX 12521 126976 4096 4096 NT_STATUS_OK
ReadX 12521 131072 61440 61440 NT_STATUS_OK
ReadX 12521 192512 4096 4096 NT_STATUS_OK
ReadX 12521 196608 61440 61440 NT_STATUS_OK
ReadX 12521 258048 4096 4096 NT_STATUS_OK
ReadX 12521 262144 61440 61440 NT_STATUS_OK
ReadX 12521 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 61440 61440 NT_STATUS_OK
ReadX 12522 61440 4096 4096 NT_STATUS_OK
ReadX 12522 65536 61440 61440 NT_STATUS_OK
ReadX 12522 126976 4096 4096 NT_STATUS_OK
ReadX 12522 131072 61440 61440 NT_STATUS_OK
ReadX 12522 192512 4096 4096 NT_STATUS_OK
ReadX 12522 196608 61440 61440 NT_STATUS_OK
ReadX 12522 258048 4096 4096 NT_STATUS_OK
ReadX 12522 262144 61440 61440 NT_STATUS_OK
ReadX 12522 323584 4096 4096 NT_STATUS_OK
ReadX 12522 327680 61440 61440 NT_STATUS_OK
ReadX 12522 389120 4096 4096 NT_STATUS_OK
ReadX 12522 393216 61440 61440 NT_STATUS_OK
ReadX 12522 454656 4096 4096 NT_STATUS_OK
ReadX 12522 458752 61440 61440 NT_STATUS_OK
ReadX 12522 520192 4096 4096 NT_STATUS_OK
ReadX 12522 524288 61440 61440 NT_STATUS_OK
ReadX 12522 585728 4096 4096 NT_STATUS_OK
ReadX 12522 589824 61440 61440 NT_STATUS_OK
ReadX 12522 651264 4096 4096 NT_STATUS_OK
ReadX 12522 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 61440 61440 NT_STATUS_OK
ReadX 12523 61440 4096 4096 NT_STATUS_OK
ReadX 12523 65536 61440 61440 NT_STATUS_OK
ReadX 12523 126976 4096 4096 NT_STATUS_OK
ReadX 12523 131072 61440 61440 NT_STATUS_OK
ReadX 12523 192512 4096 4096 NT_STATUS_OK
ReadX 12523 196608 61440 61440 NT_STATUS_OK
ReadX 12523 258048 4096 4096 NT_STATUS_OK
ReadX 12523 262144 61440 61440 NT_STATUS_OK
ReadX 12523 323584 4096 4096 NT_STATUS_OK
ReadX 12523 327680 61440 61440 NT_STATUS_OK
ReadX 12523 389120 4096 4096 NT_STATUS_OK
ReadX 12523 393216 61440 61440 NT_STATUS_OK
ReadX 12523 454656 4096 4096 NT_STATUS_OK
ReadX 12523 458752 61440 61440 NT_STATUS_OK
ReadX 12523 520192 4096 4096 NT_STATUS_OK
ReadX 12523 524288 61440 61440 NT_STATUS_OK
ReadX 12523 585728 4096 4096 NT_STATUS_OK
ReadX 12523 589824 61440 61440 NT_STATUS_OK
ReadX 12523 651264 4096 4096 NT_STATUS_OK
ReadX 12523 655360 61440 61440 NT_STATUS_OK
ReadX 12523 716800 4096 4096 NT_STATUS_OK
ReadX 12523 720896 61440 61440 NT_STATUS_OK
ReadX 12523 782336 4096 4096 NT_STATUS_OK
ReadX 12523 786432 61440 61440 NT_STATUS_OK
ReadX 12523 847872 4096 4096 NT_STATUS_OK
ReadX 12523 851968 61440 61440 NT_STATUS_OK
ReadX 12523 913408 4096 4096 NT_STATUS_OK
ReadX 12523 917504 61440 61440 NT_STATUS_OK
ReadX 12523 978944 4096 4096 NT_STATUS_OK
ReadX 12523 983040 61440 61440 NT_STATUS_OK
ReadX 12523 1044480 4096 4096 NT_STATUS_OK
ReadX 12523 1048576 61440 61440 NT_STATUS_OK
ReadX 12523 1110016 4096 4096 NT_STATUS_OK
ReadX 12523 1114112 61440 61440 NT_STATUS_OK
ReadX 12523 1175552 4096 4096 NT_STATUS_OK
ReadX 12523 1179648 61440 61440 NT_STATUS_OK
ReadX 12523 1241088 4096 4096 NT_STATUS_OK
ReadX 12523 1245184 61440 61440 NT_STATUS_OK
ReadX 12523 1306624 4096 4096 NT_STATUS_OK
ReadX 12523 1310720 61440 61440 NT_STATUS_OK
ReadX 12523 1372160 4096 4096 NT_STATUS_OK
ReadX 12523 1376256 61440 61440 NT_STATUS_OK
ReadX 12523 1437696 4096 4096 NT_STATUS_OK
ReadX 12523 1441792 61440 61440 NT_STATUS_OK
ReadX 12523 1503232 4096 4096 NT_STATUS_OK
ReadX 12523 1507328 61440 61440 NT_STATUS_OK
ReadX 12523 1568768 4096 4096 NT_STATUS_OK
ReadX 12523 1572864 61440 61440 NT_STATUS_OK
ReadX 12523 1634304 4096 4096 NT_STATUS_OK
ReadX 12523 1638400 61440 61440 NT_STATUS_OK
ReadX 12523 1699840 4096 4096 NT_STATUS_OK
ReadX 12523 1703936 61440 61440 NT_STATUS_OK
ReadX 12523 1765376 4096 4096 NT_STATUS_OK
ReadX 12523 1769472 61440 61440 NT_STATUS_OK
ReadX 12523 1830912 4096 4096 NT_STATUS_OK
ReadX 12523 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12524 NT_STATUS_OK
Close 12524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
ReadX 12528 4096 4096 4096 NT_STATUS_OK
ReadX 12528 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12529 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12532 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12533 NT_STATUS_OK
Close 12533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 8192 8192 NT_STATUS_OK
ReadX 12536 8192 8192 8192 NT_STATUS_OK
ReadX 12536 16384 8192 8192 NT_STATUS_OK
ReadX 12536 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12541 NT_STATUS_OK
WriteX 12541 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12541 258 NT_STATUS_OK
WriteX 12541 0 10438 10438 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12542 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12545 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12547 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12549 NT_STATUS_OK
Close 12549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
ReadX 12550 4096 4096 4096 NT_STATUS_OK
ReadX 12550 8192 4096 4096 NT_STATUS_OK
ReadX 12550 12288 8192 8192 NT_STATUS_OK
ReadX 12550 20480 8192 8192 NT_STATUS_OK
ReadX 12550 28672 8192 8192 NT_STATUS_OK
ReadX 12550 36864 8192 8192 NT_STATUS_OK
ReadX 12550 45056 8192 8192 NT_STATUS_OK
ReadX 12550 53248 8192 8192 NT_STATUS_OK
ReadX 12550 61440 8192 8192 NT_STATUS_OK
ReadX 12550 69632 8192 8192 NT_STATUS_OK
ReadX 12550 77824 8192 8192 NT_STATUS_OK
ReadX 12550 86016 8192 8192 NT_STATUS_OK
ReadX 12550 94208 8192 8192 NT_STATUS_OK
ReadX 12550 102400 8192 8192 NT_STATUS_OK
ReadX 12550 110592 8192 8192 NT_STATUS_OK
ReadX 12550 118784 8192 8192 NT_STATUS_OK
ReadX 12550 126976 8192 8192 NT_STATUS_OK
ReadX 12550 135168 8192 8192 NT_STATUS_OK
ReadX 12550 143360 8192 8192 NT_STATUS_OK
ReadX 12550 151552 8192 8192 NT_STATUS_OK
ReadX 12550 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12552 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12555 NT_STATUS_OK
WriteX 12555 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 258 NT_STATUS_OK
WriteX 12555 0 28489 28489 NT_STATUS_OK
Close 12555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12556 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12558 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12559 NT_STATUS_OK
Close 12559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 0 8192 8192 NT_STATUS_OK
ReadX 12562 8192 8192 8192 NT_STATUS_OK
ReadX 12562 16384 8192 8192 NT_STATUS_OK
ReadX 12562 24576 8192 8192 NT_STATUS_OK
ReadX 12562 32768 16384 16384 NT_STATUS_OK
ReadX 12562 49152 8192 8192 NT_STATUS_OK
ReadX 12562 57344 8192 8192 NT_STATUS_OK
ReadX 12562 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12567 NT_STATUS_OK
WriteX 12567 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
WriteX 12567 0 29253 29253 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12568 NT_STATUS_OK
Close 12568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12571 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12574 NT_STATUS_OK
WriteX 12574 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 258 NT_STATUS_OK
WriteX 12574 0 30183 30183 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12575 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12577 NT_STATUS_OK
WriteX 12577 0 510 510 NT_STATUS_OK
WriteX 12577 510 512 512 NT_STATUS_OK
WriteX 12577 1022 510 510 NT_STATUS_OK
WriteX 12577 1532 510 510 NT_STATUS_OK
WriteX 12577 2042 168 168 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12578 NT_STATUS_OK
Close 12578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 61440 4096 4096 NT_STATUS_OK
ReadX 12581 126976 4096 4096 NT_STATUS_OK
WriteX 12581 0 65536 65536 NT_STATUS_OK
WriteX 12581 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 61440 4096 4096 NT_STATUS_OK
ReadX 12582 126976 4096 4096 NT_STATUS_OK
ReadX 12582 192512 4096 4096 NT_STATUS_OK
ReadX 12582 258048 4096 4096 NT_STATUS_OK
WriteX 12582 0 65536 65536 NT_STATUS_OK
WriteX 12582 65536 65536 65536 NT_STATUS_OK
WriteX 12582 131072 65536 65536 NT_STATUS_OK
WriteX 12582 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 61440 4096 4096 NT_STATUS_OK
ReadX 12583 126976 4096 4096 NT_STATUS_OK
ReadX 12583 192512 4096 4096 NT_STATUS_OK
ReadX 12583 258048 4096 4096 NT_STATUS_OK
ReadX 12583 323584 4096 4096 NT_STATUS_OK
ReadX 12583 389120 4096 4096 NT_STATUS_OK
ReadX 12583 454656 4096 4096 NT_STATUS_OK
ReadX 12583 520192 4096 4096 NT_STATUS_OK
WriteX 12583 0 65536 65536 NT_STATUS_OK
WriteX 12583 65536 65536 65536 NT_STATUS_OK
WriteX 12583 131072 65536 65536 NT_STATUS_OK
WriteX 12583 196608 65536 65536 NT_STATUS_OK
WriteX 12583 262144 65536 65536 NT_STATUS_OK
WriteX 12583 327680 65536 65536 NT_STATUS_OK
WriteX 12583 393216 65536 65536 NT_STATUS_OK
WriteX 12583 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12590 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12593 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12599 NT_STATUS_OK
Close 12599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12604 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12608 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12613 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12618 NT_STATUS_OK
Close 12618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12623 NT_STATUS_OK
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12638 NT_STATUS_OK
Close 12638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12652 NT_STATUS_OK
WriteX 12652 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12652 0 65536 65536 NT_STATUS_OK
WriteX 12652 65536 65536 65536 NT_STATUS_OK
WriteX 12652 131072 65536 65536 NT_STATUS_OK
WriteX 12652 196608 65536 65536 NT_STATUS_OK
WriteX 12652 262144 26634 26634 NT_STATUS_OK
Close 12652 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12657 NT_STATUS_OK
Close 12657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
ReadX 12660 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12661 NT_STATUS_OK
Close 12661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12665 NT_STATUS_OK
Close 12665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12708 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12717 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
Close 12739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
Close 12740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12751 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
Close 12754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12784 0 4096 4096 NT_STATUS_OK
Close 12784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 4096 4096 NT_STATUS_OK
ReadX 12786 4096 4096 4096 NT_STATUS_OK
ReadX 12786 8192 4096 4096 NT_STATUS_OK
ReadX 12786 12288 4096 4096 NT_STATUS_OK
ReadX 12786 16384 4096 4096 NT_STATUS_OK
ReadX 12786 20480 4096 4096 NT_STATUS_OK
ReadX 12786 24576 4096 4096 NT_STATUS_OK
ReadX 12786 28672 4096 4096 NT_STATUS_OK
ReadX 12786 32768 4096 4096 NT_STATUS_OK
ReadX 12786 36864 4096 4096 NT_STATUS_OK
ReadX 12786 40960 4096 4096 NT_STATUS_OK
ReadX 12786 45056 4096 4096 NT_STATUS_OK
ReadX 12786 49152 4096 4096 NT_STATUS_OK
ReadX 12786 53248 4096 4096 NT_STATUS_OK
ReadX 12786 57344 4096 4096 NT_STATUS_OK
ReadX 12786 61440 4096 4096 NT_STATUS_OK
ReadX 12786 65536 4096 4096 NT_STATUS_OK
ReadX 12786 69632 4096 4096 NT_STATUS_OK
ReadX 12786 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12786 1004 NT_STATUS_OK
WriteX 12786 0 4096 4096 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12787 NT_STATUS_OK
SET_FILE_INFORMATION 12787 1004 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12792 NT_STATUS_OK
WriteX 12792 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12792 258 NT_STATUS_OK
WriteX 12792 0 65536 65536 NT_STATUS_OK
WriteX 12792 65536 19979 19979 NT_STATUS_OK
Close 12792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 1004 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
SET_FILE_INFORMATION 12793 1004 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
Close 12794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
Close 12796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
Close 12797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12798 1004 NT_STATUS_OK
WriteX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12804 NT_STATUS_OK
WriteX 12804 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 258 NT_STATUS_OK
WriteX 12804 0 65536 65536 NT_STATUS_OK
WriteX 12804 65536 17654 17654 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
SET_FILE_INFORMATION 12805 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12806 NT_STATUS_OK
SET_FILE_INFORMATION 12806 1004 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12808 NT_STATUS_OK
Close 12808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
ReadX 12810 4096 4096 4096 NT_STATUS_OK
ReadX 12810 8192 4096 4096 NT_STATUS_OK
ReadX 12810 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12810 16384 4096 4096 NT_STATUS_OK
ReadX 12810 20480 4096 4096 NT_STATUS_OK
ReadX 12810 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
Close 12811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12813 1004 NT_STATUS_OK
WriteX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12819 NT_STATUS_OK
WriteX 12819 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12819 258 NT_STATUS_OK
WriteX 12819 0 65536 65536 NT_STATUS_OK
WriteX 12819 65536 19490 19490 NT_STATUS_OK
Close 12819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
QUERY_FILE_INFORMATION 12820 1004 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
SET_FILE_INFORMATION 12820 1004 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12821 NT_STATUS_OK
SET_FILE_INFORMATION 12821 1004 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12823 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12825 0 4096 4096 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12826 NT_STATUS_OK
ReadX 12826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
ReadX 12827 4096 4096 4096 NT_STATUS_OK
ReadX 12827 8192 4096 4096 NT_STATUS_OK
ReadX 12827 12288 4096 4096 NT_STATUS_OK
ReadX 12827 16384 4096 4096 NT_STATUS_OK
ReadX 12827 20480 4096 4096 NT_STATUS_OK
ReadX 12827 24576 4096 4096 NT_STATUS_OK
ReadX 12827 28672 4096 4096 NT_STATUS_OK
ReadX 12827 32768 4096 4096 NT_STATUS_OK
ReadX 12827 36864 4096 4096 NT_STATUS_OK
ReadX 12827 40960 4096 4096 NT_STATUS_OK
ReadX 12827 45056 4096 4096 NT_STATUS_OK
ReadX 12827 49152 4096 4096 NT_STATUS_OK
ReadX 12827 53248 4096 4096 NT_STATUS_OK
ReadX 12827 57344 4096 4096 NT_STATUS_OK
ReadX 12827 61440 4096 4096 NT_STATUS_OK
ReadX 12827 65536 4096 4096 NT_STATUS_OK
ReadX 12827 69632 4096 4096 NT_STATUS_OK
ReadX 12827 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12827 1004 NT_STATUS_OK
WriteX 12827 0 4096 4096 NT_STATUS_OK
Close 12827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12828 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
Close 12828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12829 NT_STATUS_OK
ReadX 12829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12833 NT_STATUS_OK
WriteX 12833 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12833 258 NT_STATUS_OK
WriteX 12833 0 65536 65536 NT_STATUS_OK
WriteX 12833 65536 8866 8866 NT_STATUS_OK
Close 12833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 4096 4096 NT_STATUS_OK
WriteX 12834 0 4096 4096 NT_STATUS_OK
Flush 12834 NT_STATUS_OK
SET_FILE_INFORMATION 12834 1004 NT_STATUS_OK
WriteX 12834 0 4096 4096 NT_STATUS_OK
Flush 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12839 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12844 NT_STATUS_OK
WriteX 12844 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 258 NT_STATUS_OK
WriteX 12844 0 65536 65536 NT_STATUS_OK
WriteX 12844 65536 9298 9298 NT_STATUS_OK
Close 12844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 4096 4096 NT_STATUS_OK
WriteX 12845 0 4096 4096 NT_STATUS_OK
Flush 12845 NT_STATUS_OK
SET_FILE_INFORMATION 12845 1004 NT_STATUS_OK
WriteX 12845 0 4096 4096 NT_STATUS_OK
Flush 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12846 NT_STATUS_OK
SET_FILE_INFORMATION 12846 1004 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12848 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12851 0 4096 4096 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12852 4096 4096 4096 NT_STATUS_OK
ReadX 12852 8192 4096 4096 NT_STATUS_OK
ReadX 12852 12288 4096 4096 NT_STATUS_OK
ReadX 12852 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
Close 12854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12855 1004 NT_STATUS_OK
WriteX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12861 NT_STATUS_OK
WriteX 12861 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 258 NT_STATUS_OK
WriteX 12861 0 65536 65536 NT_STATUS_OK
WriteX 12861 65536 11540 11540 NT_STATUS_OK
Close 12861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
WriteX 12862 0 4096 4096 NT_STATUS_OK
Flush 12862 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
WriteX 12862 0 4096 4096 NT_STATUS_OK
Flush 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12863 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
Close 12863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12864 NT_STATUS_OK
ReadX 12864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 61440 4096 4096 NT_STATUS_OK
ReadX 12867 126976 4096 4096 NT_STATUS_OK
WriteX 12867 0 65536 65536 NT_STATUS_OK
WriteX 12867 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 61440 4096 4096 NT_STATUS_OK
ReadX 12868 126976 4096 4096 NT_STATUS_OK
ReadX 12868 192512 4096 4096 NT_STATUS_OK
ReadX 12868 258048 4096 4096 NT_STATUS_OK
WriteX 12868 0 65536 65536 NT_STATUS_OK
WriteX 12868 65536 65536 65536 NT_STATUS_OK
WriteX 12868 131072 65536 65536 NT_STATUS_OK
WriteX 12868 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 61440 4096 4096 NT_STATUS_OK
ReadX 12869 126976 4096 4096 NT_STATUS_OK
ReadX 12869 192512 4096 4096 NT_STATUS_OK
ReadX 12869 258048 4096 4096 NT_STATUS_OK
ReadX 12869 323584 4096 4096 NT_STATUS_OK
ReadX 12869 389120 4096 4096 NT_STATUS_OK
ReadX 12869 454656 4096 4096 NT_STATUS_OK
ReadX 12869 520192 4096 4096 NT_STATUS_OK
WriteX 12869 0 65536 65536 NT_STATUS_OK
WriteX 12869 65536 65536 65536 NT_STATUS_OK
WriteX 12869 131072 65536 65536 NT_STATUS_OK
WriteX 12869 196608 65536 65536 NT_STATUS_OK
WriteX 12869 262144 65536 65536 NT_STATUS_OK
WriteX 12869 327680 65536 65536 NT_STATUS_OK
WriteX 12869 393216 65536 65536 NT_STATUS_OK
WriteX 12869 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
ReadX 12870 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12871 NT_STATUS_OK
WriteX 12871 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12871 258 NT_STATUS_OK
WriteX 12871 0 53 53 NT_STATUS_OK
Close 12871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12864 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12870 8192 4096 4096 NT_STATUS_OK
ReadX 12870 12288 4096 4096 NT_STATUS_OK
WriteX 12874 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12874 258 NT_STATUS_OK
ReadX 12870 16384 4096 4096 NT_STATUS_OK
ReadX 12870 20480 4096 4096 NT_STATUS_OK
WriteX 12874 0 15360 15360 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12875 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12875 1004 NT_STATUS_OK
WriteX 12875 0 4096 4096 NT_STATUS_OK
Close 12875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12878 4096 4096 4096 NT_STATUS_OK
ReadX 12878 8192 4096 4096 NT_STATUS_OK
ReadX 12878 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12881 NT_STATUS_OK
ReadX 12881 0 4096 4096 NT_STATUS_OK
ReadX 12881 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
ReadX 12882 4096 4096 4096 NT_STATUS_OK
ReadX 12882 8192 4096 4096 NT_STATUS_OK
Close 12881 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12883 NT_STATUS_OK
WriteX 12883 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 15360 15360 NT_STATUS_OK
Close 12883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12884 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12884 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12888 NT_STATUS_OK
SET_FILE_INFORMATION 12888 1004 NT_STATUS_OK
Close 12888 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12889 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
ReadX 12891 4096 4096 4096 NT_STATUS_OK
ReadX 12891 8192 4096 4096 NT_STATUS_OK
ReadX 12891 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12893 NT_STATUS_OK
WriteX 12893 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12893 258 NT_STATUS_OK
WriteX 12893 0 53 53 NT_STATUS_OK
Close 12893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12894 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12892 4096 4096 4096 NT_STATUS_OK
ReadX 12892 8192 4096 4096 NT_STATUS_OK
ReadX 12892 12288 4096 4096 NT_STATUS_OK
WriteX 12896 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12896 258 NT_STATUS_OK
WriteX 12896 0 12006 12006 NT_STATUS_OK
Close 12896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12897 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12897 1004 NT_STATUS_OK
WriteX 12897 0 4096 4096 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12898 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12901 NT_STATUS_OK
Close 12901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12900 4096 4096 4096 NT_STATUS_OK
ReadX 12900 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12903 NT_STATUS_OK
WriteX 12903 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
WriteX 12903 0 11991 11991 NT_STATUS_OK
Close 12903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12907 NT_STATUS_OK
ReadX 12907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12908 NT_STATUS_OK
SET_FILE_INFORMATION 12908 1004 NT_STATUS_OK
Close 12908 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Close 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12909 NT_STATUS_OK
Close 12909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12912 NT_STATUS_OK
Close 12912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12911 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
ReadX 12911 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
WriteX 12911 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12911 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
Close 12887 NT_STATUS_OK
WriteX 12891 0 19054 19054 NT_STATUS_OK
WriteX 12911 0 12288 12288 NT_STATUS_OK
Close 12907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12914 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 61440 61440 NT_STATUS_OK
ReadX 12918 61440 4096 4096 NT_STATUS_OK
ReadX 12918 65536 61440 61440 NT_STATUS_OK
ReadX 12918 126976 4096 4096 NT_STATUS_OK
ReadX 12918 131072 61440 61440 NT_STATUS_OK
ReadX 12918 192512 4096 4096 NT_STATUS_OK
ReadX 12918 196608 61440 61440 NT_STATUS_OK
ReadX 12918 258048 4096 4096 NT_STATUS_OK
ReadX 12918 262144 61440 61440 NT_STATUS_OK
ReadX 12918 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 61440 61440 NT_STATUS_OK
ReadX 12919 61440 4096 4096 NT_STATUS_OK
ReadX 12919 65536 61440 61440 NT_STATUS_OK
ReadX 12919 126976 4096 4096 NT_STATUS_OK
ReadX 12919 131072 61440 61440 NT_STATUS_OK
ReadX 12919 192512 4096 4096 NT_STATUS_OK
ReadX 12919 196608 61440 61440 NT_STATUS_OK
ReadX 12919 258048 4096 4096 NT_STATUS_OK
ReadX 12919 262144 61440 61440 NT_STATUS_OK
ReadX 12919 323584 4096 4096 NT_STATUS_OK
ReadX 12919 327680 61440 61440 NT_STATUS_OK
ReadX 12919 389120 4096 4096 NT_STATUS_OK
ReadX 12919 393216 61440 61440 NT_STATUS_OK
ReadX 12919 454656 4096 4096 NT_STATUS_OK
ReadX 12919 458752 61440 61440 NT_STATUS_OK
ReadX 12919 520192 4096 4096 NT_STATUS_OK
ReadX 12919 524288 61440 61440 NT_STATUS_OK
ReadX 12919 585728 4096 4096 NT_STATUS_OK
ReadX 12919 589824 61440 61440 NT_STATUS_OK
ReadX 12919 651264 4096 4096 NT_STATUS_OK
ReadX 12919 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 61440 61440 NT_STATUS_OK
ReadX 12920 61440 4096 4096 NT_STATUS_OK
ReadX 12920 65536 61440 61440 NT_STATUS_OK
ReadX 12920 126976 4096 4096 NT_STATUS_OK
ReadX 12920 131072 61440 61440 NT_STATUS_OK
ReadX 12920 192512 4096 4096 NT_STATUS_OK
ReadX 12920 196608 61440 61440 NT_STATUS_OK
ReadX 12920 258048 4096 4096 NT_STATUS_OK
ReadX 12920 262144 61440 61440 NT_STATUS_OK
ReadX 12920 323584 4096 4096 NT_STATUS_OK
ReadX 12920 327680 61440 61440 NT_STATUS_OK
ReadX 12920 389120 4096 4096 NT_STATUS_OK
ReadX 12920 393216 61440 61440 NT_STATUS_OK
ReadX 12920 454656 4096 4096 NT_STATUS_OK
ReadX 12920 458752 61440 61440 NT_STATUS_OK
ReadX 12920 520192 4096 4096 NT_STATUS_OK
ReadX 12920 524288 61440 61440 NT_STATUS_OK
ReadX 12920 585728 4096 4096 NT_STATUS_OK
ReadX 12920 589824 61440 61440 NT_STATUS_OK
ReadX 12920 651264 4096 4096 NT_STATUS_OK
ReadX 12920 655360 61440 61440 NT_STATUS_OK
ReadX 12920 716800 4096 4096 NT_STATUS_OK
ReadX 12920 720896 61440 61440 NT_STATUS_OK
ReadX 12920 782336 4096 4096 NT_STATUS_OK
ReadX 12920 786432 61440 61440 NT_STATUS_OK
ReadX 12920 847872 4096 4096 NT_STATUS_OK
ReadX 12920 851968 61440 61440 NT_STATUS_OK
ReadX 12920 913408 4096 4096 NT_STATUS_OK
ReadX 12920 917504 61440 61440 NT_STATUS_OK
ReadX 12920 978944 4096 4096 NT_STATUS_OK
ReadX 12920 983040 61440 61440 NT_STATUS_OK
ReadX 12920 1044480 4096 4096 NT_STATUS_OK
ReadX 12920 1048576 61440 61440 NT_STATUS_OK
ReadX 12920 1110016 4096 4096 NT_STATUS_OK
ReadX 12920 1114112 61440 61440 NT_STATUS_OK
ReadX 12920 1175552 4096 4096 NT_STATUS_OK
ReadX 12920 1179648 61440 61440 NT_STATUS_OK
ReadX 12920 1241088 4096 4096 NT_STATUS_OK
ReadX 12920 1245184 61440 61440 NT_STATUS_OK
ReadX 12920 1306624 4096 4096 NT_STATUS_OK
ReadX 12920 1310720 61440 61440 NT_STATUS_OK
ReadX 12920 1372160 4096 4096 NT_STATUS_OK
ReadX 12920 1376256 61440 61440 NT_STATUS_OK
ReadX 12920 1437696 4096 4096 NT_STATUS_OK
ReadX 12920 1441792 61440 61440 NT_STATUS_OK
ReadX 12920 1503232 4096 4096 NT_STATUS_OK
ReadX 12920 1507328 61440 61440 NT_STATUS_OK
ReadX 12920 1568768 4096 4096 NT_STATUS_OK
ReadX 12920 1572864 61440 61440 NT_STATUS_OK
ReadX 12920 1634304 4096 4096 NT_STATUS_OK
ReadX 12920 1638400 61440 61440 NT_STATUS_OK
ReadX 12920 1699840 4096 4096 NT_STATUS_OK
ReadX 12920 1703936 61440 61440 NT_STATUS_OK
ReadX 12920 1765376 4096 4096 NT_STATUS_OK
ReadX 12920 1769472 61440 61440 NT_STATUS_OK
ReadX 12920 1830912 4096 4096 NT_STATUS_OK
ReadX 12920 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12922 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12927 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 1004 NT_STATUS_OK
WriteX 12927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12929 NT_STATUS_OK
WriteX 12929 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 491 491 NT_STATUS_OK
Close 12929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12927 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12932 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12933 NT_STATUS_OK
WriteX 12933 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 258 NT_STATUS_OK
WriteX 12933 0 543 543 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12938 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12939 NT_STATUS_OK
ReadX 12939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12947 NT_STATUS_OK
QUERY_FILE_INFORMATION 12947 1004 NT_STATUS_OK
WriteX 12947 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12947 258 NT_STATUS_OK
WriteX 12947 0 2048 2048 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12948 NT_STATUS_OK
ReadX 12948 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12948 0 4096 4096 NT_STATUS_OK
Flush 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12948 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12953 NT_STATUS_OK
WriteX 12953 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12953 258 NT_STATUS_OK
WriteX 12953 0 2048 2048 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12959 NT_STATUS_OK
WriteX 12959 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12959 258 NT_STATUS_OK
WriteX 12959 0 2048 2048 NT_STATUS_OK
Close 12959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 2048 2048 NT_STATUS_OK
ReadX 12938 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12954 0 4096 4096 NT_STATUS_OK
WriteX 12938 0 8192 8192 NT_STATUS_OK
WriteX 12939 0 4096 4096 NT_STATUS_OK
WriteX 12940 0 4096 4096 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12964 NT_STATUS_OK
QUERY_FILE_INFORMATION 12964 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12939 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12966 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12971 NT_STATUS_OK
ReadX 12971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12972 NT_STATUS_OK
ReadX 12972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12974 NT_STATUS_OK
ReadX 12974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12975 NT_STATUS_OK
ReadX 12975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12976 NT_STATUS_OK
ReadX 12976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 258 NT_STATUS_OK
WriteX 12984 0 2048 2048 NT_STATUS_OK
Close 12984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12985 NT_STATUS_OK
ReadX 12985 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12992 NT_STATUS_OK
QUERY_FILE_INFORMATION 12992 1004 NT_STATUS_OK
WriteX 12992 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12992 258 NT_STATUS_OK
WriteX 12992 0 2048 2048 NT_STATUS_OK
Close 12992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12985 0 4096 4096 NT_STATUS_OK
Flush 12985 NT_STATUS_OK
WriteX 12993 0 4096 4096 NT_STATUS_OK
Flush 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12985 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12987 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12995 NT_STATUS_OK
WriteX 12995 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 258 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12998 NT_STATUS_OK
WriteX 12998 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 4096 4096 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12999 0 4096 4096 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Close 12987 NT_STATUS_OK
Close 12976 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12974 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Close 12972 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13006 NT_STATUS_OK
WriteX 13006 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13006 258 NT_STATUS_OK
WriteX 13006 0 2048 2048 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13009 NT_STATUS_OK
ReadX 13009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13020 NT_STATUS_OK
ReadX 13020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13021 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Close 13014 NT_STATUS_OK
Close 13015 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Close 13020 NT_STATUS_OK
Close 13008 NT_STATUS_OK
Close 13009 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13023 NT_STATUS_OK
QUERY_FILE_INFORMATION 13023 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13033 NT_STATUS_OK
ReadX 13033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13034 NT_STATUS_OK
ReadX 13034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13035 NT_STATUS_OK
ReadX 13035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13043 NT_STATUS_OK
QUERY_FILE_INFORMATION 13043 1004 NT_STATUS_OK
WriteX 13043 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13043 258 NT_STATUS_OK
WriteX 13043 0 2048 2048 NT_STATUS_OK
Close 13043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13044 NT_STATUS_OK
ReadX 13044 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13055 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 1004 NT_STATUS_OK
WriteX 13055 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 258 NT_STATUS_OK
WriteX 13055 0 2048 2048 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13063 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 1004 NT_STATUS_OK
WriteX 13063 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 2048 2048 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13044 0 4096 4096 NT_STATUS_OK
Flush 13044 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
Flush 13064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13044 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13046 4096 16384 16384 NT_STATUS_OK
ReadX 13026 4096 16384 16384 NT_STATUS_OK
ReadX 13058 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 2048 2048 NT_STATUS_OK
WriteX 13066 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13067 NT_STATUS_OK
QUERY_FILE_INFORMATION 13067 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13050 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13030 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
Close 13033 NT_STATUS_OK
Close 13034 NT_STATUS_OK
Close 13026 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13069 NT_STATUS_OK
QUERY_FILE_INFORMATION 13069 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13071 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13074 4096 16384 16384 NT_STATUS_OK
WriteX 13074 0 4096 4096 NT_STATUS_OK
WriteX 13075 0 4096 4096 NT_STATUS_OK
WriteX 13076 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13080 NT_STATUS_OK
ReadX 13080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13087 NT_STATUS_OK
ReadX 13087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13088 NT_STATUS_OK
ReadX 13088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13093 NT_STATUS_OK
ReadX 13093 0 8192 8192 NT_STATUS_OK
ReadX 13080 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13094 0 4096 4096 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 4096 4096 NT_STATUS_OK
WriteX 13080 0 4096 4096 NT_STATUS_OK
WriteX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
ReadX 13095 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13074 0 4096 4096 NT_STATUS_OK
WriteX 13075 0 4096 4096 NT_STATUS_OK
WriteX 13076 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13100 NT_STATUS_OK
QUERY_FILE_INFORMATION 13100 1004 NT_STATUS_OK
WriteX 13100 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13100 258 NT_STATUS_OK
WriteX 13100 0 2048 2048 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
ReadX 13103 4096 4096 4096 NT_STATUS_OK
WriteX 13103 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
ReadX 13105 4096 4096 4096 NT_STATUS_OK
WriteX 13105 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13106 NT_STATUS_OK
QUERY_FILE_INFORMATION 13106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Close 13074 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Close 13086 NT_STATUS_OK
Close 13091 NT_STATUS_OK
Close 13087 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Close 13089 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Close 13080 NT_STATUS_OK
Close 13081 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Close 13095 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13108 0 4096 4096 NT_STATUS_OK
ReadX 13108 4096 4096 4096 NT_STATUS_OK
ReadX 13108 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13111 NT_STATUS_OK
ReadX 13111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
ReadX 13109 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13126 NT_STATUS_OK
QUERY_FILE_INFORMATION 13126 1004 NT_STATUS_OK
WriteX 13126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13126 258 NT_STATUS_OK
WriteX 13126 0 2048 2048 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13131 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13132 NT_STATUS_OK
QUERY_FILE_INFORMATION 13132 1004 NT_STATUS_OK
WriteX 13132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13132 258 NT_STATUS_OK
WriteX 13132 0 2048 2048 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13116 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13134 NT_STATUS_OK
QUERY_FILE_INFORMATION 13134 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13136 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 61440 4096 4096 NT_STATUS_OK
ReadX 13138 126976 4096 4096 NT_STATUS_OK
WriteX 13138 0 65536 65536 NT_STATUS_OK
WriteX 13138 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 61440 4096 4096 NT_STATUS_OK
ReadX 13139 126976 4096 4096 NT_STATUS_OK
ReadX 13139 192512 4096 4096 NT_STATUS_OK
ReadX 13139 258048 4096 4096 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 65536 65536 NT_STATUS_OK
WriteX 13139 131072 65536 65536 NT_STATUS_OK
WriteX 13139 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 61440 4096 4096 NT_STATUS_OK
ReadX 13140 126976 4096 4096 NT_STATUS_OK
ReadX 13140 192512 4096 4096 NT_STATUS_OK
ReadX 13140 258048 4096 4096 NT_STATUS_OK
ReadX 13140 323584 4096 4096 NT_STATUS_OK
ReadX 13140 389120 4096 4096 NT_STATUS_OK
ReadX 13140 454656 4096 4096 NT_STATUS_OK
ReadX 13140 520192 4096 4096 NT_STATUS_OK
WriteX 13140 0 65536 65536 NT_STATUS_OK
WriteX 13140 65536 65536 65536 NT_STATUS_OK
WriteX 13140 131072 65536 65536 NT_STATUS_OK
WriteX 13140 196608 65536 65536 NT_STATUS_OK
WriteX 13140 262144 65536 65536 NT_STATUS_OK
WriteX 13140 327680 65536 65536 NT_STATUS_OK
WriteX 13140 393216 65536 65536 NT_STATUS_OK
WriteX 13140 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13141 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13141 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13141 8192 4096 4096 NT_STATUS_OK
ReadX 13141 12288 4096 4096 NT_STATUS_OK
ReadX 13141 16384 4096 4096 NT_STATUS_OK
ReadX 13141 20480 4096 4096 NT_STATUS_OK
ReadX 13141 24576 4096 4096 NT_STATUS_OK
ReadX 13141 28672 4096 4096 NT_STATUS_OK
ReadX 13141 32768 4096 4096 NT_STATUS_OK
ReadX 13141 36864 4096 4096 NT_STATUS_OK
ReadX 13141 40960 4096 4096 NT_STATUS_OK
ReadX 13141 45056 4096 4096 NT_STATUS_OK
ReadX 13141 49152 4096 4096 NT_STATUS_OK
ReadX 13141 53248 4096 4096 NT_STATUS_OK
ReadX 13141 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13141 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13144 NT_STATUS_OK
WriteX 13144 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13144 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13144 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13144 1004 NT_STATUS_OK
WriteX 13144 0 57088 57088 NT_STATUS_OK
WriteX 13144 0 4096 4096 NT_STATUS_OK
Flush 13144 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13145 NT_STATUS_OK
SET_FILE_INFORMATION 13145 1004 NT_STATUS_OK
Close 13145 NT_STATUS_OK
SET_FILE_INFORMATION 13144 1004 NT_STATUS_OK
WriteX 13144 0 4096 4096 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13148 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13149 NT_STATUS_OK
WriteX 13149 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13149 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 0 51456 51456 NT_STATUS_OK
WriteX 13149 0 4096 4096 NT_STATUS_OK
Flush 13149 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 0 4096 4096 NT_STATUS_OK
Close 13149 NT_STATUS_OK
Close 13148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13153 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13158 NT_STATUS_OK
WriteX 13158 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 258 NT_STATUS_OK
WriteX 13158 0 53077 53077 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13159 NT_STATUS_OK
WriteX 13159 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13159 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13159 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13159 1004 NT_STATUS_OK
WriteX 13159 0 65536 65536 NT_STATUS_OK
WriteX 13159 65536 1856 1856 NT_STATUS_OK
WriteX 13159 0 4096 4096 NT_STATUS_OK
Flush 13159 NT_STATUS_OK
SET_FILE_INFORMATION 13159 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13159 1004 NT_STATUS_OK
WriteX 13159 0 4096 4096 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Close 13153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13168 NT_STATUS_OK
WriteX 13168 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 7983 7983 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13173 NT_STATUS_OK
WriteX 13173 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13173 258 NT_STATUS_OK
WriteX 13173 0 65536 65536 NT_STATUS_OK
WriteX 13173 65536 65536 65536 NT_STATUS_OK
WriteX 13173 131072 65536 65536 NT_STATUS_OK
WriteX 13173 196608 65536 65536 NT_STATUS_OK
WriteX 13173 262144 65536 65536 NT_STATUS_OK
WriteX 13173 327680 65536 65536 NT_STATUS_OK
WriteX 13173 393216 65536 65536 NT_STATUS_OK
WriteX 13173 458752 46731 46731 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13174 NT_STATUS_OK
WriteX 13174 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13174 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13163 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13174 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13174 1004 NT_STATUS_OK
WriteX 13174 0 65536 65536 NT_STATUS_OK
WriteX 13174 65536 22848 22848 NT_STATUS_OK
WriteX 13174 0 4096 4096 NT_STATUS_OK
Flush 13174 NT_STATUS_OK
SET_FILE_INFORMATION 13174 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13174 1004 NT_STATUS_OK
WriteX 13174 0 4096 4096 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13176 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13178 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13179 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13179 1004 NT_STATUS_OK
ReadX 13179 8192 4096 4096 NT_STATUS_OK
ReadX 13179 12288 4096 4096 NT_STATUS_OK
ReadX 13179 16384 4096 4096 NT_STATUS_OK
ReadX 13179 20480 4096 4096 NT_STATUS_OK
ReadX 13179 24576 4096 4096 NT_STATUS_OK
ReadX 13179 28672 4096 4096 NT_STATUS_OK
ReadX 13179 32768 4096 4096 NT_STATUS_OK
ReadX 13179 36864 4096 4096 NT_STATUS_OK
ReadX 13179 40960 4096 4096 NT_STATUS_OK
ReadX 13179 45056 4096 4096 NT_STATUS_OK
ReadX 13179 49152 4096 4096 NT_STATUS_OK
ReadX 13179 53248 4096 4096 NT_STATUS_OK
ReadX 13179 57344 4096 4096 NT_STATUS_OK
ReadX 13179 61440 4096 4096 NT_STATUS_OK
ReadX 13179 65536 4096 4096 NT_STATUS_OK
ReadX 13179 69632 4096 4096 NT_STATUS_OK
ReadX 13179 73728 4096 4096 NT_STATUS_OK
ReadX 13179 77824 4096 4096 NT_STATUS_OK
ReadX 13179 81920 4096 4096 NT_STATUS_OK
ReadX 13179 86016 4096 4096 NT_STATUS_OK
ReadX 13179 90112 4096 4096 NT_STATUS_OK
ReadX 13179 94208 4096 4096 NT_STATUS_OK
ReadX 13179 98304 4096 4096 NT_STATUS_OK
ReadX 13179 102400 4096 4096 NT_STATUS_OK
ReadX 13179 106496 4096 4096 NT_STATUS_OK
ReadX 13179 110592 4096 4096 NT_STATUS_OK
ReadX 13179 114688 4096 4096 NT_STATUS_OK
ReadX 13179 118784 4096 4096 NT_STATUS_OK
ReadX 13179 122880 4096 4096 NT_STATUS_OK
ReadX 13179 126976 4096 4096 NT_STATUS_OK
ReadX 13179 131072 4096 4096 NT_STATUS_OK
ReadX 13179 135168 4096 4096 NT_STATUS_OK
ReadX 13179 139264 4096 4096 NT_STATUS_OK
ReadX 13179 143360 4096 4096 NT_STATUS_OK
ReadX 13179 147456 4096 4096 NT_STATUS_OK
ReadX 13179 151552 4096 4096 NT_STATUS_OK
ReadX 13179 155648 4096 4096 NT_STATUS_OK
ReadX 13179 159744 4096 4096 NT_STATUS_OK
ReadX 13179 163840 4096 4096 NT_STATUS_OK
ReadX 13179 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13179 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13180 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13182 NT_STATUS_OK
WriteX 13182 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13182 258 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13183 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
Close 13183 NT_STATUS_OK
WriteX 13182 0 42388 42388 NT_STATUS_OK
Close 13182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 0 4096 4096 NT_STATUS_OK
ReadX 13186 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13187 NT_STATUS_OK
WriteX 13187 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
SET_FILE_INFORMATION 13187 1004 NT_STATUS_OK
WriteX 13187 0 42652 42652 NT_STATUS_OK
Close 13187 NT_STATUS_OK
Close 13186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 4096 4096 NT_STATUS_OK
ReadX 13191 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13196 NT_STATUS_OK
WriteX 13196 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13196 258 NT_STATUS_OK
WriteX 13196 0 65536 65536 NT_STATUS_OK
WriteX 13196 65536 49 49 NT_STATUS_OK
Close 13196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 61440 61440 NT_STATUS_OK
ReadX 13197 61440 4096 4096 NT_STATUS_OK
ReadX 13197 65536 61440 61440 NT_STATUS_OK
ReadX 13197 126976 4096 4096 NT_STATUS_OK
ReadX 13197 131072 61440 61440 NT_STATUS_OK
ReadX 13197 192512 4096 4096 NT_STATUS_OK
ReadX 13197 196608 61440 61440 NT_STATUS_OK
ReadX 13197 258048 4096 4096 NT_STATUS_OK
ReadX 13197 262144 61440 61440 NT_STATUS_OK
ReadX 13197 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 61440 61440 NT_STATUS_OK
ReadX 13198 61440 4096 4096 NT_STATUS_OK
ReadX 13198 65536 61440 61440 NT_STATUS_OK
ReadX 13198 126976 4096 4096 NT_STATUS_OK
ReadX 13198 131072 61440 61440 NT_STATUS_OK
ReadX 13198 192512 4096 4096 NT_STATUS_OK
ReadX 13198 196608 61440 61440 NT_STATUS_OK
ReadX 13198 258048 4096 4096 NT_STATUS_OK
ReadX 13198 262144 61440 61440 NT_STATUS_OK
ReadX 13198 323584 4096 4096 NT_STATUS_OK
ReadX 13198 327680 61440 61440 NT_STATUS_OK
ReadX 13198 389120 4096 4096 NT_STATUS_OK
ReadX 13198 393216 61440 61440 NT_STATUS_OK
ReadX 13198 454656 4096 4096 NT_STATUS_OK
ReadX 13198 458752 61440 61440 NT_STATUS_OK
ReadX 13198 520192 4096 4096 NT_STATUS_OK
ReadX 13198 524288 61440 61440 NT_STATUS_OK
ReadX 13198 585728 4096 4096 NT_STATUS_OK
ReadX 13198 589824 61440 61440 NT_STATUS_OK
ReadX 13198 651264 4096 4096 NT_STATUS_OK
ReadX 13198 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 61440 61440 NT_STATUS_OK
ReadX 13199 61440 4096 4096 NT_STATUS_OK
ReadX 13199 65536 61440 61440 NT_STATUS_OK
ReadX 13199 126976 4096 4096 NT_STATUS_OK
ReadX 13199 131072 61440 61440 NT_STATUS_OK
ReadX 13199 192512 4096 4096 NT_STATUS_OK
ReadX 13199 196608 61440 61440 NT_STATUS_OK
ReadX 13199 258048 4096 4096 NT_STATUS_OK
ReadX 13199 262144 61440 61440 NT_STATUS_OK
ReadX 13199 323584 4096 4096 NT_STATUS_OK
ReadX 13199 327680 61440 61440 NT_STATUS_OK
ReadX 13199 389120 4096 4096 NT_STATUS_OK
ReadX 13199 393216 61440 61440 NT_STATUS_OK
ReadX 13199 454656 4096 4096 NT_STATUS_OK
ReadX 13199 458752 61440 61440 NT_STATUS_OK
ReadX 13199 520192 4096 4096 NT_STATUS_OK
ReadX 13199 524288 61440 61440 NT_STATUS_OK
ReadX 13199 585728 4096 4096 NT_STATUS_OK
ReadX 13199 589824 61440 61440 NT_STATUS_OK
ReadX 13199 651264 4096 4096 NT_STATUS_OK
ReadX 13199 655360 61440 61440 NT_STATUS_OK
ReadX 13199 716800 4096 4096 NT_STATUS_OK
ReadX 13199 720896 61440 61440 NT_STATUS_OK
ReadX 13199 782336 4096 4096 NT_STATUS_OK
ReadX 13199 786432 61440 61440 NT_STATUS_OK
ReadX 13199 847872 4096 4096 NT_STATUS_OK
ReadX 13199 851968 61440 61440 NT_STATUS_OK
ReadX 13199 913408 4096 4096 NT_STATUS_OK
ReadX 13199 917504 61440 61440 NT_STATUS_OK
ReadX 13199 978944 4096 4096 NT_STATUS_OK
ReadX 13199 983040 61440 61440 NT_STATUS_OK
ReadX 13199 1044480 4096 4096 NT_STATUS_OK
ReadX 13199 1048576 61440 61440 NT_STATUS_OK
ReadX 13199 1110016 4096 4096 NT_STATUS_OK
ReadX 13199 1114112 61440 61440 NT_STATUS_OK
ReadX 13199 1175552 4096 4096 NT_STATUS_OK
ReadX 13199 1179648 61440 61440 NT_STATUS_OK
ReadX 13199 1241088 4096 4096 NT_STATUS_OK
ReadX 13199 1245184 61440 61440 NT_STATUS_OK
ReadX 13199 1306624 4096 4096 NT_STATUS_OK
ReadX 13199 1310720 61440 61440 NT_STATUS_OK
ReadX 13199 1372160 4096 4096 NT_STATUS_OK
ReadX 13199 1376256 61440 61440 NT_STATUS_OK
ReadX 13199 1437696 4096 4096 NT_STATUS_OK
ReadX 13199 1441792 61440 61440 NT_STATUS_OK
ReadX 13199 1503232 4096 4096 NT_STATUS_OK
ReadX 13199 1507328 61440 61440 NT_STATUS_OK
ReadX 13199 1568768 4096 4096 NT_STATUS_OK
ReadX 13199 1572864 61440 61440 NT_STATUS_OK
ReadX 13199 1634304 4096 4096 NT_STATUS_OK
ReadX 13199 1638400 61440 61440 NT_STATUS_OK
ReadX 13199 1699840 4096 4096 NT_STATUS_OK
ReadX 13199 1703936 61440 61440 NT_STATUS_OK
ReadX 13199 1765376 4096 4096 NT_STATUS_OK
ReadX 13199 1769472 61440 61440 NT_STATUS_OK
ReadX 13199 1830912 4096 4096 NT_STATUS_OK
ReadX 13199 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13201 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 1005 NT_STATUS_OK
ReadX 13201 2156 24 24 NT_STATUS_OK
ReadX 13201 2139 276 276 NT_STATUS_OK
ReadX 13201 2136 14 14 NT_STATUS_OK
ReadX 13201 2136 7 7 NT_STATUS_OK
ReadX 13201 2138 12 12 NT_STATUS_OK
ReadX 13201 2137 8 8 NT_STATUS_OK
ReadX 13201 2135 15 15 NT_STATUS_OK
ReadX 13201 0 16 16 NT_STATUS_OK
ReadX 13201 16 2048 2048 NT_STATUS_OK
ReadX 13201 2064 2048 2048 NT_STATUS_OK
ReadX 13201 257 2048 2048 NT_STATUS_OK
ReadX 13201 385 2048 2048 NT_STATUS_OK
ReadX 13201 513 2048 2048 NT_STATUS_OK
ReadX 13201 641 2048 2048 NT_STATUS_OK
ReadX 13201 769 2048 2048 NT_STATUS_OK
ReadX 13201 897 2048 2048 NT_STATUS_OK
ReadX 13201 1025 2048 2048 NT_STATUS_OK
ReadX 13201 1153 2048 2048 NT_STATUS_OK
ReadX 13201 1281 2048 2048 NT_STATUS_OK
ReadX 13201 1409 2048 2048 NT_STATUS_OK
ReadX 13201 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13203 NT_STATUS_OK
Close 13203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Close 13199 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13206 NT_STATUS_OK
WriteX 13206 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 258 NT_STATUS_OK
WriteX 13206 0 10575 10575 NT_STATUS_OK
Flush 13206 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13211 NT_STATUS_OK
LockX 13211 2147483538 1 NT_STATUS_OK
UnlockX 13211 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1005 NT_STATUS_OK
ReadX 13211 0 512 512 NT_STATUS_OK
ReadX 13211 512 512 512 NT_STATUS_OK
ReadX 13211 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1004 NT_STATUS_OK
Close 13211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13212 NT_STATUS_OK
QUERY_FILE_INFORMATION 13212 1005 NT_STATUS_OK
ReadX 13212 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13213 NT_STATUS_OK
LockX 13213 2147483538 1 NT_STATUS_OK
UnlockX 13213 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13213 1005 NT_STATUS_OK
ReadX 13213 0 512 512 NT_STATUS_OK
ReadX 13213 512 512 512 NT_STATUS_OK
ReadX 13213 1024 512 512 NT_STATUS_OK
ReadX 13213 288 20 20 NT_STATUS_OK
ReadX 13213 308 2084 2084 NT_STATUS_OK
ReadX 13213 388 2084 2084 NT_STATUS_OK
ReadX 13213 388 2084 2084 NT_STATUS_OK
ReadX 13200 2157 1386 1386 NT_STATUS_OK
ReadX 13213 2472 399 399 NT_STATUS_OK
ReadX 13213 3072 1536 1536 NT_STATUS_OK
ReadX 13213 544 149 149 NT_STATUS_OK
ReadX 13213 693 485 485 NT_STATUS_OK
Close 13213 NT_STATUS_OK
ReadX 13200 2157 4096 4096 NT_STATUS_OK
ReadX 13200 6253 4096 4096 NT_STATUS_OK
ReadX 13200 10349 4096 4096 NT_STATUS_OK
ReadX 13200 14445 4096 4096 NT_STATUS_OK
ReadX 13200 18541 4096 4096 NT_STATUS_OK
ReadX 13200 22637 256 256 NT_STATUS_OK
ReadX 13200 22893 4096 4096 NT_STATUS_OK
ReadX 13200 26989 4096 4096 NT_STATUS_OK
ReadX 13200 31085 4096 4096 NT_STATUS_OK
ReadX 13200 35181 4096 4096 NT_STATUS_OK
ReadX 13200 39277 4096 4096 NT_STATUS_OK
ReadX 13200 43373 4096 4096 NT_STATUS_OK
ReadX 13200 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13200 2157 1024 1024 NT_STATUS_OK
ReadX 13200 1667 4688 4688 NT_STATUS_OK
ReadX 13200 6355 3516 3516 NT_STATUS_OK
ReadX 13200 9871 16384 16384 NT_STATUS_OK
ReadX 13200 26255 3771 3771 NT_STATUS_OK
ReadX 13200 30026 2048 2048 NT_STATUS_OK
ReadX 13200 32074 1024 1024 NT_STATUS_OK
ReadX 13200 33098 6652 6652 NT_STATUS_OK
ReadX 13200 39750 16384 16384 NT_STATUS_OK
ReadX 13200 56134 10496 10496 NT_STATUS_OK
ReadX 13200 66630 1784 1784 NT_STATUS_OK
ReadX 13200 68414 90 90 NT_STATUS_OK
ReadX 13200 68504 273 273 NT_STATUS_OK
ReadX 13200 68777 1600 1600 NT_STATUS_OK
ReadX 13200 70377 640 640 NT_STATUS_OK
ReadX 13200 71017 1280 1280 NT_STATUS_OK
ReadX 13200 72297 8464 8464 NT_STATUS_OK
ReadX 13200 80761 158 158 NT_STATUS_OK
ReadX 13200 80919 912 912 NT_STATUS_OK
ReadX 13200 81831 1980 1980 NT_STATUS_OK
ReadX 13200 83811 2256 2256 NT_STATUS_OK
ReadX 13200 86067 400 400 NT_STATUS_OK
ReadX 13200 86467 252 252 NT_STATUS_OK
ReadX 13200 86719 42 42 NT_STATUS_OK
ReadX 13200 86761 725 725 NT_STATUS_OK
ReadX 13200 2009 512 512 NT_STATUS_OK
ReadX 13200 3895 9 9 NT_STATUS_OK
ReadX 13200 3781 46 46 NT_STATUS_OK
ReadX 13200 4059 92 92 NT_STATUS_OK
ReadX 13200 3781 92 92 NT_STATUS_OK
ReadX 13200 3986 184 184 NT_STATUS_OK
ReadX 13200 3987 16384 16384 NT_STATUS_OK
ReadX 13200 3902 16384 16384 NT_STATUS_OK
ReadX 13200 3781 10240 10240 NT_STATUS_OK
ReadX 13200 3821 16384 16384 NT_STATUS_OK
ReadX 13200 3891 935 935 NT_STATUS_OK
ReadX 13200 4060 10240 10240 NT_STATUS_OK
ReadX 13200 4059 184 184 NT_STATUS_OK
ReadX 13200 256 184 184 NT_STATUS_OK
ReadX 13200 256 1026 1026 NT_STATUS_OK
ReadX 13200 3901 326 326 NT_STATUS_OK
ReadX 13200 3899 652 652 NT_STATUS_OK
ReadX 13200 256 2 2 NT_STATUS_OK
ReadX 13200 258 4948 4948 NT_STATUS_OK
Close 13200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13215 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13218 NT_STATUS_OK
WriteX 13218 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13218 258 NT_STATUS_OK
WriteX 13218 0 65536 65536 NT_STATUS_OK
WriteX 13218 65536 65536 65536 NT_STATUS_OK
WriteX 13218 131072 65536 65536 NT_STATUS_OK
WriteX 13218 196608 65536 65536 NT_STATUS_OK
WriteX 13218 262144 65536 65536 NT_STATUS_OK
WriteX 13218 327680 65536 65536 NT_STATUS_OK
WriteX 13218 393216 65536 65536 NT_STATUS_OK
WriteX 13218 458752 65536 65536 NT_STATUS_OK
WriteX 13218 524288 65536 65536 NT_STATUS_OK
WriteX 13218 589824 35257 35257 NT_STATUS_OK
Close 13218 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13220 NT_STATUS_OK
Close 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13223 NT_STATUS_OK
WriteX 13223 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13223 258 NT_STATUS_OK
WriteX 13223 0 65536 65536 NT_STATUS_OK
WriteX 13223 65536 65536 65536 NT_STATUS_OK
WriteX 13223 131072 65536 65536 NT_STATUS_OK
WriteX 13223 196608 65536 65536 NT_STATUS_OK
WriteX 13223 262144 65536 65536 NT_STATUS_OK
WriteX 13223 327680 65536 65536 NT_STATUS_OK
WriteX 13223 393216 65536 65536 NT_STATUS_OK
WriteX 13223 458752 65536 65536 NT_STATUS_OK
WriteX 13223 524288 65536 65536 NT_STATUS_OK
WriteX 13223 589824 57598 57598 NT_STATUS_OK
Close 13223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13225 NT_STATUS_OK
WriteX 13225 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 12543 12543 NT_STATUS_OK
Flush 13225 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13227 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13231 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1005 NT_STATUS_OK
ReadX 13231 1938 24 24 NT_STATUS_OK
ReadX 13231 1920 276 276 NT_STATUS_OK
ReadX 13231 1918 14 14 NT_STATUS_OK
ReadX 13231 1918 7 7 NT_STATUS_OK
ReadX 13231 1919 12 12 NT_STATUS_OK
ReadX 13231 1919 8 8 NT_STATUS_OK
ReadX 13231 1917 15 15 NT_STATUS_OK
ReadX 13231 0 16 16 NT_STATUS_OK
ReadX 13231 16 2048 2048 NT_STATUS_OK
ReadX 13231 2064 2048 2048 NT_STATUS_OK
ReadX 13231 257 2048 2048 NT_STATUS_OK
ReadX 13231 385 2048 2048 NT_STATUS_OK
ReadX 13231 513 2048 2048 NT_STATUS_OK
ReadX 13231 641 2048 2048 NT_STATUS_OK
ReadX 13231 769 2048 2048 NT_STATUS_OK
ReadX 13231 897 2048 2048 NT_STATUS_OK
ReadX 13231 1025 2048 2048 NT_STATUS_OK
ReadX 13231 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13233 NT_STATUS_OK
Close 13233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13236 NT_STATUS_OK
WriteX 13236 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 258 NT_STATUS_OK
WriteX 13236 0 11588 11588 NT_STATUS_OK
Flush 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13237 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13241 NT_STATUS_OK
WriteX 13241 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13241 258 NT_STATUS_OK
WriteX 13241 0 11615 11615 NT_STATUS_OK
Flush 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13250 NT_STATUS_OK
WriteX 13250 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13250 258 NT_STATUS_OK
WriteX 13250 0 65536 65536 NT_STATUS_OK
WriteX 13250 65536 16050 16050 NT_STATUS_OK
Close 13250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13230 1939 64 64 NT_STATUS_OK
ReadX 13230 128 248 248 NT_STATUS_OK
ReadX 13230 128 568 568 NT_STATUS_OK
ReadX 13230 3872 1536 1536 NT_STATUS_OK
ReadX 13230 3456 2560 2560 NT_STATUS_OK
ReadX 13230 3136 512 512 NT_STATUS_OK
ReadX 13230 2880 4096 4096 NT_STATUS_OK
ReadX 13230 3264 3072 3072 NT_STATUS_OK
ReadX 13230 320 4096 4096 NT_STATUS_OK
ReadX 13230 1024 4096 4096 NT_STATUS_OK
ReadX 13230 3616 4096 4096 NT_STATUS_OK
ReadX 13230 1939 64 64 NT_STATUS_OK
ReadX 13230 128 248 248 NT_STATUS_OK
ReadX 13230 128 608 608 NT_STATUS_OK
ReadX 13230 2858 1024 1024 NT_STATUS_OK
ReadX 13230 2810 4096 4096 NT_STATUS_OK
ReadX 13230 2826 4096 4096 NT_STATUS_OK
ReadX 13230 2580 2048 2048 NT_STATUS_OK
ReadX 13230 2800 2560 2560 NT_STATUS_OK
ReadX 13230 2100 4096 4096 NT_STATUS_OK
ReadX 13230 2084 4096 4096 NT_STATUS_OK
ReadX 13230 868 4096 4096 NT_STATUS_OK
ReadX 13230 2324 4096 4096 NT_STATUS_OK
ReadX 13230 884 4096 4096 NT_STATUS_OK
ReadX 13230 2604 1024 1024 NT_STATUS_OK
ReadX 13230 580 4096 4096 NT_STATUS_OK
ReadX 13230 596 4096 4096 NT_STATUS_OK
ReadX 13230 2752 4096 4096 NT_STATUS_OK
ReadX 13230 2842 1024 1024 NT_STATUS_OK
ReadX 13230 660 4096 4096 NT_STATUS_OK
ReadX 13230 2720 4096 4096 NT_STATUS_OK
ReadX 13230 2736 4096 4096 NT_STATUS_OK
ReadX 13230 628 4096 4096 NT_STATUS_OK
ReadX 13230 2704 4096 4096 NT_STATUS_OK
ReadX 13230 1556 4096 4096 NT_STATUS_OK
ReadX 13230 576 4096 4096 NT_STATUS_OK
ReadX 13230 3168 1536 1536 NT_STATUS_OK
ReadX 13230 832 4096 4096 NT_STATUS_OK
ReadX 13230 1088 4096 4096 NT_STATUS_OK
ReadX 13230 1344 4096 4096 NT_STATUS_OK
ReadX 13230 1600 4096 4096 NT_STATUS_OK
ReadX 13230 1856 4096 4096 NT_STATUS_OK
ReadX 13230 2112 4096 4096 NT_STATUS_OK
ReadX 13230 1892 4096 4096 NT_STATUS_OK
ReadX 13230 820 4096 4096 NT_STATUS_OK
ReadX 13230 788 4096 4096 NT_STATUS_OK
ReadX 13230 1604 4096 4096 NT_STATUS_OK
ReadX 13230 3648 4096 4096 NT_STATUS_OK
ReadX 13230 2608 4096 4096 NT_STATUS_OK
ReadX 13230 548 4096 4096 NT_STATUS_OK
ReadX 13230 740 4096 4096 NT_STATUS_OK
ReadX 13230 1344 4096 4096 NT_STATUS_OK
ReadX 13230 3392 4096 4096 NT_STATUS_OK
ReadX 13230 3904 4096 4096 NT_STATUS_OK
ReadX 13230 644 4096 4096 NT_STATUS_OK
ReadX 13230 676 4096 4096 NT_STATUS_OK
ReadX 13230 2688 4096 4096 NT_STATUS_OK
ReadX 13230 320 4096 4096 NT_STATUS_OK
ReadX 13230 900 4096 4096 NT_STATUS_OK
ReadX 13230 1908 4096 4096 NT_STATUS_OK
ReadX 13230 852 4096 4096 NT_STATUS_OK
ReadX 13230 724 4096 4096 NT_STATUS_OK
ReadX 13230 2292 4096 4096 NT_STATUS_OK
ReadX 13230 612 4096 4096 NT_STATUS_OK
ReadX 13230 388 4096 4096 NT_STATUS_OK
ReadX 13230 2368 4096 4096 NT_STATUS_OK
ReadX 13230 2624 4096 4096 NT_STATUS_OK
ReadX 13230 500 4096 4096 NT_STATUS_OK
ReadX 13230 356 4096 4096 NT_STATUS_OK
ReadX 13230 1024 4096 4096 NT_STATUS_OK
ReadX 13230 576 4096 4096 NT_STATUS_OK
ReadX 13230 340 4096 4096 NT_STATUS_OK
ReadX 13230 420 4096 4096 NT_STATUS_OK
ReadX 13230 1600 4096 4096 NT_STATUS_OK
ReadX 13230 404 4096 4096 NT_STATUS_OK
ReadX 13230 1428 4096 4096 NT_STATUS_OK
ReadX 13230 2656 4096 4096 NT_STATUS_OK
ReadX 13230 2624 4096 4096 NT_STATUS_OK
ReadX 13230 452 4096 4096 NT_STATUS_OK
ReadX 13230 692 4096 4096 NT_STATUS_OK
ReadX 13230 564 4096 4096 NT_STATUS_OK
ReadX 13230 372 4096 4096 NT_STATUS_OK
ReadX 13230 468 4096 4096 NT_STATUS_OK
ReadX 13230 484 4096 4096 NT_STATUS_OK
ReadX 13230 1088 4096 4096 NT_STATUS_OK
ReadX 13230 1924 4096 4096 NT_STATUS_OK
ReadX 13230 2768 4096 4096 NT_STATUS_OK
ReadX 13230 832 4096 4096 NT_STATUS_OK
ReadX 13230 836 4096 4096 NT_STATUS_OK
ReadX 13230 1856 4096 4096 NT_STATUS_OK
ReadX 13230 2640 4096 4096 NT_STATUS_OK
ReadX 13230 436 4096 4096 NT_STATUS_OK
ReadX 13230 1828 4096 4096 NT_STATUS_OK
ReadX 13230 804 4096 4096 NT_STATUS_OK
ReadX 13230 1860 4096 4096 NT_STATUS_OK
ReadX 13230 1812 4096 4096 NT_STATUS_OK
ReadX 13230 756 4096 4096 NT_STATUS_OK
ReadX 13230 1636 4096 4096 NT_STATUS_OK
ReadX 13230 772 4096 4096 NT_STATUS_OK
ReadX 13230 2036 4096 4096 NT_STATUS_OK
ReadX 13230 1220 4096 4096 NT_STATUS_OK
ReadX 13230 1652 4096 4096 NT_STATUS_OK
ReadX 13230 2588 4096 4096 NT_STATUS_OK
ReadX 13230 916 4096 4096 NT_STATUS_OK
ReadX 13230 260 4096 4096 NT_STATUS_OK
ReadX 13230 932 4096 4096 NT_STATUS_OK
ReadX 13230 2624 4096 4096 NT_STATUS_OK
ReadX 13230 308 4096 4096 NT_STATUS_OK
ReadX 13230 292 4096 4096 NT_STATUS_OK
ReadX 13230 1140 4096 4096 NT_STATUS_OK
ReadX 13230 276 4096 4096 NT_STATUS_OK
ReadX 13230 2020 4096 4096 NT_STATUS_OK
ReadX 13230 2880 4096 4096 NT_STATUS_OK
ReadX 13230 516 4096 4096 NT_STATUS_OK
ReadX 13230 1844 4096 4096 NT_STATUS_OK
ReadX 13230 1124 4096 4096 NT_STATUS_OK
ReadX 13230 3136 4096 4096 NT_STATUS_OK
ReadX 13230 324 4096 4096 NT_STATUS_OK
ReadX 13230 1156 4096 4096 NT_STATUS_OK
ReadX 13230 1172 4096 4096 NT_STATUS_OK
ReadX 13230 2112 4096 4096 NT_STATUS_OK
ReadX 13230 2368 4096 4096 NT_STATUS_OK
ReadX 13230 964 4096 4096 NT_STATUS_OK
ReadX 13230 980 4096 4096 NT_STATUS_OK
ReadX 13230 1012 4096 4096 NT_STATUS_OK
ReadX 13230 532 4096 4096 NT_STATUS_OK
ReadX 13230 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13230 1620 4096 4096 NT_STATUS_OK
ReadX 13230 1604 4096 4096 NT_STATUS_OK
ReadX 13230 2116 4096 4096 NT_STATUS_OK
ReadX 13230 2132 4096 4096 NT_STATUS_OK
ReadX 13230 2148 4096 4096 NT_STATUS_OK
ReadX 13230 2276 4096 4096 NT_STATUS_OK
ReadX 13230 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13255 NT_STATUS_OK
QUERY_FILE_INFORMATION 13210 1004 NT_STATUS_OK
Close 13210 NT_STATUS_OK
WriteX 13255 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13212 1004 NT_STATUS_OK
Close 13212 NT_STATUS_OK
WriteX 13255 0 65536 65536 NT_STATUS_OK
WriteX 13255 65536 64850 64850 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13257 NT_STATUS_OK
WriteX 13257 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
ReadX 13230 2068 4096 4096 NT_STATUS_OK
ReadX 13230 1588 4096 4096 NT_STATUS_OK
ReadX 13230 1572 4096 4096 NT_STATUS_OK
WriteX 13257 0 18630 18630 NT_STATUS_OK
Flush 13257 NT_STATUS_OK
Close 13257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13259 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13230 612 4096 4096 NT_STATUS_OK
ReadX 13230 564 4096 4096 NT_STATUS_OK
ReadX 13230 1876 4096 4096 NT_STATUS_OK
ReadX 13230 628 4096 4096 NT_STATUS_OK
ReadX 13230 740 4096 4096 NT_STATUS_OK
ReadX 13230 724 4096 4096 NT_STATUS_OK
ReadX 13230 644 4096 4096 NT_STATUS_OK
ReadX 13230 2324 4096 4096 NT_STATUS_OK
ReadX 13230 660 4096 4096 NT_STATUS_OK
ReadX 13230 852 4096 4096 NT_STATUS_OK
ReadX 13230 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13230 2368 4096 4096 NT_STATUS_OK
ReadX 13230 1024 4096 4096 NT_STATUS_OK
ReadX 13230 320 4096 4096 NT_STATUS_OK
ReadX 13230 580 4096 4096 NT_STATUS_OK
ReadX 13230 3136 512 512 NT_STATUS_OK
ReadX 13230 2880 4096 4096 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 61440 4096 4096 NT_STATUS_OK
ReadX 13262 126976 4096 4096 NT_STATUS_OK
WriteX 13262 0 65536 65536 NT_STATUS_OK
WriteX 13262 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 61440 4096 4096 NT_STATUS_OK
ReadX 13263 126976 4096 4096 NT_STATUS_OK
ReadX 13263 192512 4096 4096 NT_STATUS_OK
ReadX 13263 258048 4096 4096 NT_STATUS_OK
WriteX 13263 0 65536 65536 NT_STATUS_OK
WriteX 13263 65536 65536 65536 NT_STATUS_OK
WriteX 13263 131072 65536 65536 NT_STATUS_OK
WriteX 13263 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 61440 4096 4096 NT_STATUS_OK
ReadX 13264 126976 4096 4096 NT_STATUS_OK
ReadX 13264 192512 4096 4096 NT_STATUS_OK
ReadX 13264 258048 4096 4096 NT_STATUS_OK
ReadX 13264 323584 4096 4096 NT_STATUS_OK
ReadX 13264 389120 4096 4096 NT_STATUS_OK
ReadX 13264 454656 4096 4096 NT_STATUS_OK
ReadX 13264 520192 4096 4096 NT_STATUS_OK
WriteX 13264 0 65536 65536 NT_STATUS_OK
WriteX 13264 65536 65536 65536 NT_STATUS_OK
WriteX 13264 131072 65536 65536 NT_STATUS_OK
WriteX 13264 196608 65536 65536 NT_STATUS_OK
WriteX 13264 262144 65536 65536 NT_STATUS_OK
WriteX 13264 327680 65536 65536 NT_STATUS_OK
WriteX 13264 393216 65536 65536 NT_STATUS_OK
WriteX 13264 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13267 NT_STATUS_OK
WriteX 13267 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13267 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13265 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13272 NT_STATUS_OK
WriteX 13272 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 258 NT_STATUS_OK
WriteX 13272 0 62591 62591 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13277 NT_STATUS_OK
WriteX 13277 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13277 258 NT_STATUS_OK
WriteX 13277 0 10845 10845 NT_STATUS_OK
Close 13277 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13279 NT_STATUS_OK
Close 13279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13282 NT_STATUS_OK
WriteX 13282 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13282 258 NT_STATUS_OK
WriteX 13282 0 30118 30118 NT_STATUS_OK
Close 13282 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
WriteX 13267 0 64 64 NT_STATUS_OK
Close 13267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 61440 61440 NT_STATUS_OK
ReadX 13284 61440 4096 4096 NT_STATUS_OK
ReadX 13284 65536 61440 61440 NT_STATUS_OK
ReadX 13284 126976 4096 4096 NT_STATUS_OK
ReadX 13284 131072 61440 61440 NT_STATUS_OK
ReadX 13284 192512 4096 4096 NT_STATUS_OK
ReadX 13284 196608 61440 61440 NT_STATUS_OK
ReadX 13284 258048 4096 4096 NT_STATUS_OK
ReadX 13284 262144 61440 61440 NT_STATUS_OK
ReadX 13284 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 61440 61440 NT_STATUS_OK
ReadX 13285 61440 4096 4096 NT_STATUS_OK
ReadX 13285 65536 61440 61440 NT_STATUS_OK
ReadX 13285 126976 4096 4096 NT_STATUS_OK
ReadX 13285 131072 61440 61440 NT_STATUS_OK
ReadX 13285 192512 4096 4096 NT_STATUS_OK
ReadX 13285 196608 61440 61440 NT_STATUS_OK
ReadX 13285 258048 4096 4096 NT_STATUS_OK
ReadX 13285 262144 61440 61440 NT_STATUS_OK
ReadX 13285 323584 4096 4096 NT_STATUS_OK
ReadX 13285 327680 61440 61440 NT_STATUS_OK
ReadX 13285 389120 4096 4096 NT_STATUS_OK
ReadX 13285 393216 61440 61440 NT_STATUS_OK
ReadX 13285 454656 4096 4096 NT_STATUS_OK
ReadX 13285 458752 61440 61440 NT_STATUS_OK
Close 13284 NT_STATUS_OK
ReadX 13285 520192 4096 4096 NT_STATUS_OK
ReadX 13285 524288 61440 61440 NT_STATUS_OK
ReadX 13285 585728 4096 4096 NT_STATUS_OK
ReadX 13285 589824 61440 61440 NT_STATUS_OK
ReadX 13285 651264 4096 4096 NT_STATUS_OK
ReadX 13285 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 61440 61440 NT_STATUS_OK
ReadX 13286 61440 4096 4096 NT_STATUS_OK
ReadX 13286 65536 61440 61440 NT_STATUS_OK
ReadX 13286 126976 4096 4096 NT_STATUS_OK
ReadX 13286 131072 61440 61440 NT_STATUS_OK
ReadX 13286 192512 4096 4096 NT_STATUS_OK
ReadX 13286 196608 61440 61440 NT_STATUS_OK
ReadX 13286 258048 4096 4096 NT_STATUS_OK
ReadX 13286 262144 61440 61440 NT_STATUS_OK
ReadX 13286 323584 4096 4096 NT_STATUS_OK
ReadX 13286 327680 61440 61440 NT_STATUS_OK
ReadX 13286 389120 4096 4096 NT_STATUS_OK
ReadX 13286 393216 61440 61440 NT_STATUS_OK
ReadX 13286 454656 4096 4096 NT_STATUS_OK
ReadX 13286 458752 61440 61440 NT_STATUS_OK
ReadX 13286 520192 4096 4096 NT_STATUS_OK
ReadX 13286 524288 61440 61440 NT_STATUS_OK
ReadX 13286 585728 4096 4096 NT_STATUS_OK
ReadX 13286 589824 61440 61440 NT_STATUS_OK
ReadX 13286 651264 4096 4096 NT_STATUS_OK
ReadX 13286 655360 61440 61440 NT_STATUS_OK
ReadX 13286 716800 4096 4096 NT_STATUS_OK
ReadX 13286 720896 61440 61440 NT_STATUS_OK
ReadX 13286 782336 4096 4096 NT_STATUS_OK
ReadX 13286 786432 61440 61440 NT_STATUS_OK
ReadX 13286 847872 4096 4096 NT_STATUS_OK
ReadX 13286 851968 61440 61440 NT_STATUS_OK
ReadX 13286 913408 4096 4096 NT_STATUS_OK
ReadX 13286 917504 61440 61440 NT_STATUS_OK
ReadX 13286 978944 4096 4096 NT_STATUS_OK
ReadX 13286 983040 61440 61440 NT_STATUS_OK
ReadX 13286 1044480 4096 4096 NT_STATUS_OK
ReadX 13286 1048576 61440 61440 NT_STATUS_OK
ReadX 13286 1110016 4096 4096 NT_STATUS_OK
ReadX 13286 1114112 61440 61440 NT_STATUS_OK
ReadX 13286 1175552 4096 4096 NT_STATUS_OK
ReadX 13286 1179648 61440 61440 NT_STATUS_OK
ReadX 13286 1241088 4096 4096 NT_STATUS_OK
ReadX 13286 1245184 61440 61440 NT_STATUS_OK
ReadX 13286 1306624 4096 4096 NT_STATUS_OK
ReadX 13286 1310720 61440 61440 NT_STATUS_OK
ReadX 13286 1372160 4096 4096 NT_STATUS_OK
ReadX 13286 1376256 61440 61440 NT_STATUS_OK
ReadX 13286 1437696 4096 4096 NT_STATUS_OK
ReadX 13286 1441792 61440 61440 NT_STATUS_OK
ReadX 13286 1503232 4096 4096 NT_STATUS_OK
ReadX 13286 1507328 61440 61440 NT_STATUS_OK
ReadX 13286 1568768 4096 4096 NT_STATUS_OK
ReadX 13286 1572864 61440 61440 NT_STATUS_OK
ReadX 13286 1634304 4096 4096 NT_STATUS_OK
ReadX 13286 1638400 61440 61440 NT_STATUS_OK
ReadX 13286 1699840 4096 4096 NT_STATUS_OK
ReadX 13286 1703936 61440 61440 NT_STATUS_OK
ReadX 13286 1765376 4096 4096 NT_STATUS_OK
ReadX 13286 1769472 61440 61440 NT_STATUS_OK
ReadX 13286 1830912 4096 4096 NT_STATUS_OK
ReadX 13286 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
ReadX 13291 4096 4096 4096 NT_STATUS_OK
ReadX 13291 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13292 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13295 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13296 NT_STATUS_OK
Close 13296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 8192 8192 NT_STATUS_OK
ReadX 13299 8192 8192 8192 NT_STATUS_OK
ReadX 13299 16384 8192 8192 NT_STATUS_OK
ReadX 13299 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13304 NT_STATUS_OK
WriteX 13304 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13304 258 NT_STATUS_OK
WriteX 13304 0 10438 10438 NT_STATUS_OK
Close 13304 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13305 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13308 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13312 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
ReadX 13313 4096 4096 4096 NT_STATUS_OK
ReadX 13313 8192 4096 4096 NT_STATUS_OK
ReadX 13313 12288 8192 8192 NT_STATUS_OK
ReadX 13313 20480 8192 8192 NT_STATUS_OK
ReadX 13313 28672 8192 8192 NT_STATUS_OK
ReadX 13313 36864 8192 8192 NT_STATUS_OK
ReadX 13313 45056 8192 8192 NT_STATUS_OK
ReadX 13313 53248 8192 8192 NT_STATUS_OK
ReadX 13313 61440 8192 8192 NT_STATUS_OK
ReadX 13313 69632 8192 8192 NT_STATUS_OK
ReadX 13313 77824 8192 8192 NT_STATUS_OK
ReadX 13313 86016 8192 8192 NT_STATUS_OK
ReadX 13313 94208 8192 8192 NT_STATUS_OK
ReadX 13313 102400 8192 8192 NT_STATUS_OK
ReadX 13313 110592 8192 8192 NT_STATUS_OK
ReadX 13313 118784 8192 8192 NT_STATUS_OK
ReadX 13313 126976 8192 8192 NT_STATUS_OK
ReadX 13313 135168 8192 8192 NT_STATUS_OK
ReadX 13313 143360 8192 8192 NT_STATUS_OK
ReadX 13313 151552 8192 8192 NT_STATUS_OK
ReadX 13313 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13318 NT_STATUS_OK
WriteX 13318 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 258 NT_STATUS_OK
WriteX 13318 0 28489 28489 NT_STATUS_OK
Close 13318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13319 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13321 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13322 NT_STATUS_OK
Close 13322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13325 NT_STATUS_OK
ReadX 13325 0 8192 8192 NT_STATUS_OK
ReadX 13325 8192 8192 8192 NT_STATUS_OK
ReadX 13325 16384 8192 8192 NT_STATUS_OK
ReadX 13325 24576 8192 8192 NT_STATUS_OK
ReadX 13325 32768 16384 16384 NT_STATUS_OK
ReadX 13325 49152 8192 8192 NT_STATUS_OK
ReadX 13325 57344 8192 8192 NT_STATUS_OK
ReadX 13325 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13330 NT_STATUS_OK
WriteX 13330 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 258 NT_STATUS_OK
WriteX 13330 0 29253 29253 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13331 NT_STATUS_OK
Close 13331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13334 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13337 NT_STATUS_OK
WriteX 13337 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 258 NT_STATUS_OK
WriteX 13337 0 30183 30183 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13338 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13340 NT_STATUS_OK
WriteX 13340 0 510 510 NT_STATUS_OK
WriteX 13340 510 512 512 NT_STATUS_OK
WriteX 13340 1022 510 510 NT_STATUS_OK
WriteX 13340 1532 510 510 NT_STATUS_OK
WriteX 13340 2042 168 168 NT_STATUS_OK
Close 13340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13341 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 61440 4096 4096 NT_STATUS_OK
ReadX 13344 126976 4096 4096 NT_STATUS_OK
WriteX 13344 0 65536 65536 NT_STATUS_OK
WriteX 13344 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 61440 4096 4096 NT_STATUS_OK
ReadX 13345 126976 4096 4096 NT_STATUS_OK
ReadX 13345 192512 4096 4096 NT_STATUS_OK
ReadX 13345 258048 4096 4096 NT_STATUS_OK
WriteX 13345 0 65536 65536 NT_STATUS_OK
WriteX 13345 65536 65536 65536 NT_STATUS_OK
WriteX 13345 131072 65536 65536 NT_STATUS_OK
WriteX 13345 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 61440 4096 4096 NT_STATUS_OK
ReadX 13346 126976 4096 4096 NT_STATUS_OK
ReadX 13346 192512 4096 4096 NT_STATUS_OK
ReadX 13346 258048 4096 4096 NT_STATUS_OK
ReadX 13346 323584 4096 4096 NT_STATUS_OK
ReadX 13346 389120 4096 4096 NT_STATUS_OK
ReadX 13346 454656 4096 4096 NT_STATUS_OK
ReadX 13346 520192 4096 4096 NT_STATUS_OK
WriteX 13346 0 65536 65536 NT_STATUS_OK
WriteX 13346 65536 65536 65536 NT_STATUS_OK
WriteX 13346 131072 65536 65536 NT_STATUS_OK
WriteX 13346 196608 65536 65536 NT_STATUS_OK
WriteX 13346 262144 65536 65536 NT_STATUS_OK
WriteX 13346 327680 65536 65536 NT_STATUS_OK
WriteX 13346 393216 65536 65536 NT_STATUS_OK
WriteX 13346 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13353 NT_STATUS_OK
Close 13353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13362 NT_STATUS_OK
Close 13362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13367 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13371 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13376 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13386 NT_STATUS_OK
Close 13386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13401 NT_STATUS_OK
Close 13401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13415 NT_STATUS_OK
WriteX 13415 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13415 0 65536 65536 NT_STATUS_OK
WriteX 13415 65536 65536 65536 NT_STATUS_OK
WriteX 13415 131072 65536 65536 NT_STATUS_OK
WriteX 13415 196608 65536 65536 NT_STATUS_OK
WriteX 13415 262144 26634 26634 NT_STATUS_OK
Close 13415 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13420 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
Close 13422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
ReadX 13423 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13424 NT_STATUS_OK
Close 13424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13428 NT_STATUS_OK
Close 13428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13471 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13480 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
Close 13502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
Close 13503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13514 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
Close 13517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13547 0 4096 4096 NT_STATUS_OK
Close 13547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 4096 4096 NT_STATUS_OK
ReadX 13549 4096 4096 4096 NT_STATUS_OK
ReadX 13549 8192 4096 4096 NT_STATUS_OK
ReadX 13549 12288 4096 4096 NT_STATUS_OK
ReadX 13549 16384 4096 4096 NT_STATUS_OK
ReadX 13549 20480 4096 4096 NT_STATUS_OK
ReadX 13549 24576 4096 4096 NT_STATUS_OK
ReadX 13549 28672 4096 4096 NT_STATUS_OK
ReadX 13549 32768 4096 4096 NT_STATUS_OK
ReadX 13549 36864 4096 4096 NT_STATUS_OK
ReadX 13549 40960 4096 4096 NT_STATUS_OK
ReadX 13549 45056 4096 4096 NT_STATUS_OK
ReadX 13549 49152 4096 4096 NT_STATUS_OK
ReadX 13549 53248 4096 4096 NT_STATUS_OK
ReadX 13549 57344 4096 4096 NT_STATUS_OK
ReadX 13549 61440 4096 4096 NT_STATUS_OK
ReadX 13549 65536 4096 4096 NT_STATUS_OK
ReadX 13549 69632 4096 4096 NT_STATUS_OK
ReadX 13549 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13549 1004 NT_STATUS_OK
WriteX 13549 0 4096 4096 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13550 NT_STATUS_OK
SET_FILE_INFORMATION 13550 1004 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13555 NT_STATUS_OK
WriteX 13555 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13555 258 NT_STATUS_OK
WriteX 13555 0 65536 65536 NT_STATUS_OK
WriteX 13555 65536 19979 19979 NT_STATUS_OK
Close 13555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 1004 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
SET_FILE_INFORMATION 13556 1004 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
Close 13557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
Close 13559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
Close 13560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13561 1004 NT_STATUS_OK
WriteX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13567 NT_STATUS_OK
WriteX 13567 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 258 NT_STATUS_OK
WriteX 13567 0 65536 65536 NT_STATUS_OK
WriteX 13567 65536 17654 17654 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
SET_FILE_INFORMATION 13568 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13569 NT_STATUS_OK
SET_FILE_INFORMATION 13569 1004 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13571 NT_STATUS_OK
Close 13571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
ReadX 13573 4096 4096 4096 NT_STATUS_OK
ReadX 13573 8192 4096 4096 NT_STATUS_OK
ReadX 13573 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13573 16384 4096 4096 NT_STATUS_OK
ReadX 13573 20480 4096 4096 NT_STATUS_OK
ReadX 13573 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
Close 13574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13576 1004 NT_STATUS_OK
WriteX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13582 NT_STATUS_OK
WriteX 13582 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13582 258 NT_STATUS_OK
WriteX 13582 0 65536 65536 NT_STATUS_OK
WriteX 13582 65536 19490 19490 NT_STATUS_OK
Close 13582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
QUERY_FILE_INFORMATION 13583 1004 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
SET_FILE_INFORMATION 13583 1004 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13584 NT_STATUS_OK
SET_FILE_INFORMATION 13584 1004 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13586 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13588 0 4096 4096 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13589 NT_STATUS_OK
ReadX 13589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
ReadX 13590 4096 4096 4096 NT_STATUS_OK
ReadX 13590 8192 4096 4096 NT_STATUS_OK
ReadX 13590 12288 4096 4096 NT_STATUS_OK
ReadX 13590 16384 4096 4096 NT_STATUS_OK
ReadX 13590 20480 4096 4096 NT_STATUS_OK
ReadX 13590 24576 4096 4096 NT_STATUS_OK
ReadX 13590 28672 4096 4096 NT_STATUS_OK
ReadX 13590 32768 4096 4096 NT_STATUS_OK
ReadX 13590 36864 4096 4096 NT_STATUS_OK
ReadX 13590 40960 4096 4096 NT_STATUS_OK
ReadX 13590 45056 4096 4096 NT_STATUS_OK
ReadX 13590 49152 4096 4096 NT_STATUS_OK
ReadX 13590 53248 4096 4096 NT_STATUS_OK
ReadX 13590 57344 4096 4096 NT_STATUS_OK
ReadX 13590 61440 4096 4096 NT_STATUS_OK
ReadX 13590 65536 4096 4096 NT_STATUS_OK
ReadX 13590 69632 4096 4096 NT_STATUS_OK
ReadX 13590 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13590 1004 NT_STATUS_OK
WriteX 13590 0 4096 4096 NT_STATUS_OK
Close 13590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13591 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
Close 13591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13592 NT_STATUS_OK
ReadX 13592 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13596 NT_STATUS_OK
WriteX 13596 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13596 258 NT_STATUS_OK
WriteX 13596 0 65536 65536 NT_STATUS_OK
WriteX 13596 65536 8866 8866 NT_STATUS_OK
Close 13596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 4096 4096 NT_STATUS_OK
WriteX 13597 0 4096 4096 NT_STATUS_OK
Flush 13597 NT_STATUS_OK
SET_FILE_INFORMATION 13597 1004 NT_STATUS_OK
WriteX 13597 0 4096 4096 NT_STATUS_OK
Flush 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13602 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13592 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13607 NT_STATUS_OK
WriteX 13607 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 258 NT_STATUS_OK
WriteX 13607 0 65536 65536 NT_STATUS_OK
WriteX 13607 65536 9298 9298 NT_STATUS_OK
Close 13607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 4096 4096 NT_STATUS_OK
WriteX 13608 0 4096 4096 NT_STATUS_OK
Flush 13608 NT_STATUS_OK
SET_FILE_INFORMATION 13608 1004 NT_STATUS_OK
WriteX 13608 0 4096 4096 NT_STATUS_OK
Flush 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13609 NT_STATUS_OK
SET_FILE_INFORMATION 13609 1004 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13611 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13614 0 4096 4096 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13615 4096 4096 4096 NT_STATUS_OK
ReadX 13615 8192 4096 4096 NT_STATUS_OK
ReadX 13615 12288 4096 4096 NT_STATUS_OK
ReadX 13615 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
Close 13617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13618 1004 NT_STATUS_OK
WriteX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13624 NT_STATUS_OK
WriteX 13624 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 258 NT_STATUS_OK
WriteX 13624 0 65536 65536 NT_STATUS_OK
WriteX 13624 65536 11540 11540 NT_STATUS_OK
Close 13624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
WriteX 13625 0 4096 4096 NT_STATUS_OK
Flush 13625 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
WriteX 13625 0 4096 4096 NT_STATUS_OK
Flush 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13626 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
Close 13626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13627 NT_STATUS_OK
ReadX 13627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 61440 4096 4096 NT_STATUS_OK
ReadX 13630 126976 4096 4096 NT_STATUS_OK
WriteX 13630 0 65536 65536 NT_STATUS_OK
WriteX 13630 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 61440 4096 4096 NT_STATUS_OK
ReadX 13631 126976 4096 4096 NT_STATUS_OK
ReadX 13631 192512 4096 4096 NT_STATUS_OK
ReadX 13631 258048 4096 4096 NT_STATUS_OK
WriteX 13631 0 65536 65536 NT_STATUS_OK
WriteX 13631 65536 65536 65536 NT_STATUS_OK
WriteX 13631 131072 65536 65536 NT_STATUS_OK
WriteX 13631 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 61440 4096 4096 NT_STATUS_OK
ReadX 13632 126976 4096 4096 NT_STATUS_OK
ReadX 13632 192512 4096 4096 NT_STATUS_OK
ReadX 13632 258048 4096 4096 NT_STATUS_OK
ReadX 13632 323584 4096 4096 NT_STATUS_OK
ReadX 13632 389120 4096 4096 NT_STATUS_OK
ReadX 13632 454656 4096 4096 NT_STATUS_OK
ReadX 13632 520192 4096 4096 NT_STATUS_OK
WriteX 13632 0 65536 65536 NT_STATUS_OK
WriteX 13632 65536 65536 65536 NT_STATUS_OK
WriteX 13632 131072 65536 65536 NT_STATUS_OK
WriteX 13632 196608 65536 65536 NT_STATUS_OK
WriteX 13632 262144 65536 65536 NT_STATUS_OK
WriteX 13632 327680 65536 65536 NT_STATUS_OK
WriteX 13632 393216 65536 65536 NT_STATUS_OK
WriteX 13632 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
ReadX 13633 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13634 NT_STATUS_OK
WriteX 13634 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13634 258 NT_STATUS_OK
WriteX 13634 0 53 53 NT_STATUS_OK
Close 13634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13627 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13633 8192 4096 4096 NT_STATUS_OK
ReadX 13633 12288 4096 4096 NT_STATUS_OK
WriteX 13637 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13637 258 NT_STATUS_OK
ReadX 13633 16384 4096 4096 NT_STATUS_OK
ReadX 13633 20480 4096 4096 NT_STATUS_OK
WriteX 13637 0 15360 15360 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13638 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13638 1004 NT_STATUS_OK
WriteX 13638 0 4096 4096 NT_STATUS_OK
Close 13638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13641 4096 4096 4096 NT_STATUS_OK
ReadX 13641 8192 4096 4096 NT_STATUS_OK
ReadX 13641 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13644 NT_STATUS_OK
ReadX 13644 0 4096 4096 NT_STATUS_OK
ReadX 13644 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
ReadX 13645 4096 4096 4096 NT_STATUS_OK
ReadX 13645 8192 4096 4096 NT_STATUS_OK
Close 13644 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13646 NT_STATUS_OK
WriteX 13646 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 15360 15360 NT_STATUS_OK
Close 13646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13647 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13647 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13651 NT_STATUS_OK
SET_FILE_INFORMATION 13651 1004 NT_STATUS_OK
Close 13651 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13652 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
ReadX 13654 4096 4096 4096 NT_STATUS_OK
ReadX 13654 8192 4096 4096 NT_STATUS_OK
ReadX 13654 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13656 NT_STATUS_OK
WriteX 13656 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13656 258 NT_STATUS_OK
WriteX 13656 0 53 53 NT_STATUS_OK
Close 13656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13657 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13655 4096 4096 4096 NT_STATUS_OK
ReadX 13655 8192 4096 4096 NT_STATUS_OK
ReadX 13655 12288 4096 4096 NT_STATUS_OK
WriteX 13659 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13659 258 NT_STATUS_OK
WriteX 13659 0 12006 12006 NT_STATUS_OK
Close 13659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13660 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13660 1004 NT_STATUS_OK
WriteX 13660 0 4096 4096 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13661 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13664 NT_STATUS_OK
Close 13664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13663 4096 4096 4096 NT_STATUS_OK
ReadX 13663 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13666 NT_STATUS_OK
WriteX 13666 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
WriteX 13666 0 11991 11991 NT_STATUS_OK
Close 13666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13670 NT_STATUS_OK
ReadX 13670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13671 NT_STATUS_OK
SET_FILE_INFORMATION 13671 1004 NT_STATUS_OK
Close 13671 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Close 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13672 NT_STATUS_OK
Close 13672 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13675 NT_STATUS_OK
Close 13675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13674 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
ReadX 13674 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
WriteX 13674 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13674 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
Close 13650 NT_STATUS_OK
WriteX 13654 0 19054 19054 NT_STATUS_OK
WriteX 13674 0 12288 12288 NT_STATUS_OK
Close 13670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13677 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 61440 61440 NT_STATUS_OK
ReadX 13681 61440 4096 4096 NT_STATUS_OK
ReadX 13681 65536 61440 61440 NT_STATUS_OK
ReadX 13681 126976 4096 4096 NT_STATUS_OK
ReadX 13681 131072 61440 61440 NT_STATUS_OK
ReadX 13681 192512 4096 4096 NT_STATUS_OK
ReadX 13681 196608 61440 61440 NT_STATUS_OK
ReadX 13681 258048 4096 4096 NT_STATUS_OK
ReadX 13681 262144 61440 61440 NT_STATUS_OK
ReadX 13681 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 61440 61440 NT_STATUS_OK
ReadX 13682 61440 4096 4096 NT_STATUS_OK
ReadX 13682 65536 61440 61440 NT_STATUS_OK
ReadX 13682 126976 4096 4096 NT_STATUS_OK
ReadX 13682 131072 61440 61440 NT_STATUS_OK
ReadX 13682 192512 4096 4096 NT_STATUS_OK
ReadX 13682 196608 61440 61440 NT_STATUS_OK
ReadX 13682 258048 4096 4096 NT_STATUS_OK
ReadX 13682 262144 61440 61440 NT_STATUS_OK
ReadX 13682 323584 4096 4096 NT_STATUS_OK
ReadX 13682 327680 61440 61440 NT_STATUS_OK
ReadX 13682 389120 4096 4096 NT_STATUS_OK
ReadX 13682 393216 61440 61440 NT_STATUS_OK
ReadX 13682 454656 4096 4096 NT_STATUS_OK
ReadX 13682 458752 61440 61440 NT_STATUS_OK
ReadX 13682 520192 4096 4096 NT_STATUS_OK
ReadX 13682 524288 61440 61440 NT_STATUS_OK
ReadX 13682 585728 4096 4096 NT_STATUS_OK
ReadX 13682 589824 61440 61440 NT_STATUS_OK
ReadX 13682 651264 4096 4096 NT_STATUS_OK
ReadX 13682 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 61440 61440 NT_STATUS_OK
ReadX 13683 61440 4096 4096 NT_STATUS_OK
ReadX 13683 65536 61440 61440 NT_STATUS_OK
ReadX 13683 126976 4096 4096 NT_STATUS_OK
ReadX 13683 131072 61440 61440 NT_STATUS_OK
ReadX 13683 192512 4096 4096 NT_STATUS_OK
ReadX 13683 196608 61440 61440 NT_STATUS_OK
ReadX 13683 258048 4096 4096 NT_STATUS_OK
ReadX 13683 262144 61440 61440 NT_STATUS_OK
ReadX 13683 323584 4096 4096 NT_STATUS_OK
ReadX 13683 327680 61440 61440 NT_STATUS_OK
ReadX 13683 389120 4096 4096 NT_STATUS_OK
ReadX 13683 393216 61440 61440 NT_STATUS_OK
ReadX 13683 454656 4096 4096 NT_STATUS_OK
ReadX 13683 458752 61440 61440 NT_STATUS_OK
ReadX 13683 520192 4096 4096 NT_STATUS_OK
ReadX 13683 524288 61440 61440 NT_STATUS_OK
ReadX 13683 585728 4096 4096 NT_STATUS_OK
ReadX 13683 589824 61440 61440 NT_STATUS_OK
ReadX 13683 651264 4096 4096 NT_STATUS_OK
ReadX 13683 655360 61440 61440 NT_STATUS_OK
ReadX 13683 716800 4096 4096 NT_STATUS_OK
ReadX 13683 720896 61440 61440 NT_STATUS_OK
ReadX 13683 782336 4096 4096 NT_STATUS_OK
ReadX 13683 786432 61440 61440 NT_STATUS_OK
ReadX 13683 847872 4096 4096 NT_STATUS_OK
ReadX 13683 851968 61440 61440 NT_STATUS_OK
ReadX 13683 913408 4096 4096 NT_STATUS_OK
ReadX 13683 917504 61440 61440 NT_STATUS_OK
ReadX 13683 978944 4096 4096 NT_STATUS_OK
ReadX 13683 983040 61440 61440 NT_STATUS_OK
ReadX 13683 1044480 4096 4096 NT_STATUS_OK
ReadX 13683 1048576 61440 61440 NT_STATUS_OK
ReadX 13683 1110016 4096 4096 NT_STATUS_OK
ReadX 13683 1114112 61440 61440 NT_STATUS_OK
ReadX 13683 1175552 4096 4096 NT_STATUS_OK
ReadX 13683 1179648 61440 61440 NT_STATUS_OK
ReadX 13683 1241088 4096 4096 NT_STATUS_OK
ReadX 13683 1245184 61440 61440 NT_STATUS_OK
ReadX 13683 1306624 4096 4096 NT_STATUS_OK
ReadX 13683 1310720 61440 61440 NT_STATUS_OK
ReadX 13683 1372160 4096 4096 NT_STATUS_OK
ReadX 13683 1376256 61440 61440 NT_STATUS_OK
ReadX 13683 1437696 4096 4096 NT_STATUS_OK
ReadX 13683 1441792 61440 61440 NT_STATUS_OK
ReadX 13683 1503232 4096 4096 NT_STATUS_OK
ReadX 13683 1507328 61440 61440 NT_STATUS_OK
ReadX 13683 1568768 4096 4096 NT_STATUS_OK
ReadX 13683 1572864 61440 61440 NT_STATUS_OK
ReadX 13683 1634304 4096 4096 NT_STATUS_OK
ReadX 13683 1638400 61440 61440 NT_STATUS_OK
ReadX 13683 1699840 4096 4096 NT_STATUS_OK
ReadX 13683 1703936 61440 61440 NT_STATUS_OK
ReadX 13683 1765376 4096 4096 NT_STATUS_OK
ReadX 13683 1769472 61440 61440 NT_STATUS_OK
ReadX 13683 1830912 4096 4096 NT_STATUS_OK
ReadX 13683 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13685 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13690 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 1004 NT_STATUS_OK
WriteX 13690 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13692 NT_STATUS_OK
WriteX 13692 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 491 491 NT_STATUS_OK
Close 13692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13690 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13695 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13696 NT_STATUS_OK
WriteX 13696 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 258 NT_STATUS_OK
WriteX 13696 0 543 543 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13701 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13702 NT_STATUS_OK
ReadX 13702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13710 NT_STATUS_OK
QUERY_FILE_INFORMATION 13710 1004 NT_STATUS_OK
WriteX 13710 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13710 258 NT_STATUS_OK
WriteX 13710 0 2048 2048 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13711 NT_STATUS_OK
ReadX 13711 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13711 0 4096 4096 NT_STATUS_OK
Flush 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13711 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13716 NT_STATUS_OK
WriteX 13716 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13716 258 NT_STATUS_OK
WriteX 13716 0 2048 2048 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13722 NT_STATUS_OK
WriteX 13722 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13722 258 NT_STATUS_OK
WriteX 13722 0 2048 2048 NT_STATUS_OK
Close 13722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 2048 2048 NT_STATUS_OK
ReadX 13701 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13717 0 4096 4096 NT_STATUS_OK
WriteX 13701 0 8192 8192 NT_STATUS_OK
WriteX 13702 0 4096 4096 NT_STATUS_OK
WriteX 13703 0 4096 4096 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13727 NT_STATUS_OK
QUERY_FILE_INFORMATION 13727 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13702 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13729 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13734 NT_STATUS_OK
ReadX 13734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13735 NT_STATUS_OK
ReadX 13735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13737 NT_STATUS_OK
ReadX 13737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13738 NT_STATUS_OK
ReadX 13738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13739 NT_STATUS_OK
ReadX 13739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13747 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 258 NT_STATUS_OK
WriteX 13747 0 2048 2048 NT_STATUS_OK
Close 13747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13748 NT_STATUS_OK
ReadX 13748 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13755 NT_STATUS_OK
QUERY_FILE_INFORMATION 13755 1004 NT_STATUS_OK
WriteX 13755 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13755 258 NT_STATUS_OK
WriteX 13755 0 2048 2048 NT_STATUS_OK
Close 13755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13748 0 4096 4096 NT_STATUS_OK
Flush 13748 NT_STATUS_OK
WriteX 13756 0 4096 4096 NT_STATUS_OK
Flush 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13748 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13750 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13758 NT_STATUS_OK
WriteX 13758 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 258 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13761 NT_STATUS_OK
WriteX 13761 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 4096 4096 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13762 0 4096 4096 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Close 13750 NT_STATUS_OK
Close 13739 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13737 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Close 13735 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13769 NT_STATUS_OK
WriteX 13769 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13769 258 NT_STATUS_OK
WriteX 13769 0 2048 2048 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13772 NT_STATUS_OK
ReadX 13772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13783 NT_STATUS_OK
ReadX 13783 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13784 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Close 13777 NT_STATUS_OK
Close 13778 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Close 13783 NT_STATUS_OK
Close 13771 NT_STATUS_OK
Close 13772 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13786 NT_STATUS_OK
QUERY_FILE_INFORMATION 13786 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13796 NT_STATUS_OK
ReadX 13796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13797 NT_STATUS_OK
ReadX 13797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13798 NT_STATUS_OK
ReadX 13798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13806 NT_STATUS_OK
QUERY_FILE_INFORMATION 13806 1004 NT_STATUS_OK
WriteX 13806 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13806 258 NT_STATUS_OK
WriteX 13806 0 2048 2048 NT_STATUS_OK
Close 13806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13807 NT_STATUS_OK
ReadX 13807 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13818 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 1004 NT_STATUS_OK
WriteX 13818 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 258 NT_STATUS_OK
WriteX 13818 0 2048 2048 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13826 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 1004 NT_STATUS_OK
WriteX 13826 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 2048 2048 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13807 0 4096 4096 NT_STATUS_OK
Flush 13807 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
Flush 13827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13807 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13809 4096 16384 16384 NT_STATUS_OK
ReadX 13789 4096 16384 16384 NT_STATUS_OK
ReadX 13821 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 2048 2048 NT_STATUS_OK
WriteX 13829 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13830 NT_STATUS_OK
QUERY_FILE_INFORMATION 13830 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13813 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13793 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Close 13799 NT_STATUS_OK
Close 13796 NT_STATUS_OK
Close 13797 NT_STATUS_OK
Close 13789 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13832 NT_STATUS_OK
QUERY_FILE_INFORMATION 13832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13834 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13837 4096 16384 16384 NT_STATUS_OK
WriteX 13837 0 4096 4096 NT_STATUS_OK
WriteX 13838 0 4096 4096 NT_STATUS_OK
WriteX 13839 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13843 NT_STATUS_OK
ReadX 13843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13850 NT_STATUS_OK
ReadX 13850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13851 NT_STATUS_OK
ReadX 13851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13852 NT_STATUS_OK
ReadX 13852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13856 NT_STATUS_OK
ReadX 13856 0 8192 8192 NT_STATUS_OK
ReadX 13843 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13857 0 4096 4096 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 4096 4096 NT_STATUS_OK
WriteX 13843 0 4096 4096 NT_STATUS_OK
WriteX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
ReadX 13858 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13837 0 4096 4096 NT_STATUS_OK
WriteX 13838 0 4096 4096 NT_STATUS_OK
WriteX 13839 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13863 NT_STATUS_OK
QUERY_FILE_INFORMATION 13863 1004 NT_STATUS_OK
WriteX 13863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13863 258 NT_STATUS_OK
WriteX 13863 0 2048 2048 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
ReadX 13866 4096 4096 4096 NT_STATUS_OK
WriteX 13866 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
ReadX 13868 4096 4096 4096 NT_STATUS_OK
WriteX 13868 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13869 NT_STATUS_OK
QUERY_FILE_INFORMATION 13869 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13856 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Close 13837 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Close 13849 NT_STATUS_OK
Close 13854 NT_STATUS_OK
Close 13850 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Close 13852 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Close 13843 NT_STATUS_OK
Close 13844 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Close 13858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13871 0 4096 4096 NT_STATUS_OK
ReadX 13871 4096 4096 4096 NT_STATUS_OK
ReadX 13871 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13874 NT_STATUS_OK
ReadX 13874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
ReadX 13872 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13889 NT_STATUS_OK
QUERY_FILE_INFORMATION 13889 1004 NT_STATUS_OK
WriteX 13889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13889 258 NT_STATUS_OK
WriteX 13889 0 2048 2048 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13894 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13895 NT_STATUS_OK
QUERY_FILE_INFORMATION 13895 1004 NT_STATUS_OK
WriteX 13895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13895 258 NT_STATUS_OK
WriteX 13895 0 2048 2048 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13879 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13897 NT_STATUS_OK
QUERY_FILE_INFORMATION 13897 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13874 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13899 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 61440 4096 4096 NT_STATUS_OK
ReadX 13901 126976 4096 4096 NT_STATUS_OK
WriteX 13901 0 65536 65536 NT_STATUS_OK
WriteX 13901 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 61440 4096 4096 NT_STATUS_OK
ReadX 13902 126976 4096 4096 NT_STATUS_OK
ReadX 13902 192512 4096 4096 NT_STATUS_OK
ReadX 13902 258048 4096 4096 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 65536 65536 NT_STATUS_OK
WriteX 13902 131072 65536 65536 NT_STATUS_OK
WriteX 13902 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 61440 4096 4096 NT_STATUS_OK
ReadX 13903 126976 4096 4096 NT_STATUS_OK
ReadX 13903 192512 4096 4096 NT_STATUS_OK
ReadX 13903 258048 4096 4096 NT_STATUS_OK
ReadX 13903 323584 4096 4096 NT_STATUS_OK
ReadX 13903 389120 4096 4096 NT_STATUS_OK
ReadX 13903 454656 4096 4096 NT_STATUS_OK
ReadX 13903 520192 4096 4096 NT_STATUS_OK
WriteX 13903 0 65536 65536 NT_STATUS_OK
WriteX 13903 65536 65536 65536 NT_STATUS_OK
WriteX 13903 131072 65536 65536 NT_STATUS_OK
WriteX 13903 196608 65536 65536 NT_STATUS_OK
WriteX 13903 262144 65536 65536 NT_STATUS_OK
WriteX 13903 327680 65536 65536 NT_STATUS_OK
WriteX 13903 393216 65536 65536 NT_STATUS_OK
WriteX 13903 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13904 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13904 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13904 8192 4096 4096 NT_STATUS_OK
ReadX 13904 12288 4096 4096 NT_STATUS_OK
ReadX 13904 16384 4096 4096 NT_STATUS_OK
ReadX 13904 20480 4096 4096 NT_STATUS_OK
ReadX 13904 24576 4096 4096 NT_STATUS_OK
ReadX 13904 28672 4096 4096 NT_STATUS_OK
ReadX 13904 32768 4096 4096 NT_STATUS_OK
ReadX 13904 36864 4096 4096 NT_STATUS_OK
ReadX 13904 40960 4096 4096 NT_STATUS_OK
ReadX 13904 45056 4096 4096 NT_STATUS_OK
ReadX 13904 49152 4096 4096 NT_STATUS_OK
ReadX 13904 53248 4096 4096 NT_STATUS_OK
ReadX 13904 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13904 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13907 NT_STATUS_OK
WriteX 13907 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13907 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13907 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13907 1004 NT_STATUS_OK
WriteX 13907 0 57088 57088 NT_STATUS_OK
WriteX 13907 0 4096 4096 NT_STATUS_OK
Flush 13907 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13908 NT_STATUS_OK
SET_FILE_INFORMATION 13908 1004 NT_STATUS_OK
Close 13908 NT_STATUS_OK
SET_FILE_INFORMATION 13907 1004 NT_STATUS_OK
WriteX 13907 0 4096 4096 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13911 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13912 NT_STATUS_OK
WriteX 13912 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13912 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
WriteX 13912 0 51456 51456 NT_STATUS_OK
WriteX 13912 0 4096 4096 NT_STATUS_OK
Flush 13912 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
WriteX 13912 0 4096 4096 NT_STATUS_OK
Close 13912 NT_STATUS_OK
Close 13911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13916 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13921 NT_STATUS_OK
WriteX 13921 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 258 NT_STATUS_OK
WriteX 13921 0 53077 53077 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13922 NT_STATUS_OK
WriteX 13922 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13922 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13922 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13922 1004 NT_STATUS_OK
WriteX 13922 0 65536 65536 NT_STATUS_OK
WriteX 13922 65536 1856 1856 NT_STATUS_OK
WriteX 13922 0 4096 4096 NT_STATUS_OK
Flush 13922 NT_STATUS_OK
SET_FILE_INFORMATION 13922 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13922 1004 NT_STATUS_OK
WriteX 13922 0 4096 4096 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Close 13916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13931 NT_STATUS_OK
WriteX 13931 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 7983 7983 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13936 NT_STATUS_OK
WriteX 13936 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13936 258 NT_STATUS_OK
WriteX 13936 0 65536 65536 NT_STATUS_OK
WriteX 13936 65536 65536 65536 NT_STATUS_OK
WriteX 13936 131072 65536 65536 NT_STATUS_OK
WriteX 13936 196608 65536 65536 NT_STATUS_OK
WriteX 13936 262144 65536 65536 NT_STATUS_OK
WriteX 13936 327680 65536 65536 NT_STATUS_OK
WriteX 13936 393216 65536 65536 NT_STATUS_OK
WriteX 13936 458752 46731 46731 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13937 NT_STATUS_OK
WriteX 13937 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13937 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13926 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13937 1004 NT_STATUS_OK
WriteX 13937 0 65536 65536 NT_STATUS_OK
WriteX 13937 65536 22848 22848 NT_STATUS_OK
WriteX 13937 0 4096 4096 NT_STATUS_OK
Flush 13937 NT_STATUS_OK
SET_FILE_INFORMATION 13937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13937 1004 NT_STATUS_OK
WriteX 13937 0 4096 4096 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13939 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13941 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13942 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13942 1004 NT_STATUS_OK
ReadX 13942 8192 4096 4096 NT_STATUS_OK
ReadX 13942 12288 4096 4096 NT_STATUS_OK
ReadX 13942 16384 4096 4096 NT_STATUS_OK
ReadX 13942 20480 4096 4096 NT_STATUS_OK
ReadX 13942 24576 4096 4096 NT_STATUS_OK
ReadX 13942 28672 4096 4096 NT_STATUS_OK
ReadX 13942 32768 4096 4096 NT_STATUS_OK
ReadX 13942 36864 4096 4096 NT_STATUS_OK
ReadX 13942 40960 4096 4096 NT_STATUS_OK
ReadX 13942 45056 4096 4096 NT_STATUS_OK
ReadX 13942 49152 4096 4096 NT_STATUS_OK
ReadX 13942 53248 4096 4096 NT_STATUS_OK
ReadX 13942 57344 4096 4096 NT_STATUS_OK
ReadX 13942 61440 4096 4096 NT_STATUS_OK
ReadX 13942 65536 4096 4096 NT_STATUS_OK
ReadX 13942 69632 4096 4096 NT_STATUS_OK
ReadX 13942 73728 4096 4096 NT_STATUS_OK
ReadX 13942 77824 4096 4096 NT_STATUS_OK
ReadX 13942 81920 4096 4096 NT_STATUS_OK
ReadX 13942 86016 4096 4096 NT_STATUS_OK
ReadX 13942 90112 4096 4096 NT_STATUS_OK
ReadX 13942 94208 4096 4096 NT_STATUS_OK
ReadX 13942 98304 4096 4096 NT_STATUS_OK
ReadX 13942 102400 4096 4096 NT_STATUS_OK
ReadX 13942 106496 4096 4096 NT_STATUS_OK
ReadX 13942 110592 4096 4096 NT_STATUS_OK
ReadX 13942 114688 4096 4096 NT_STATUS_OK
ReadX 13942 118784 4096 4096 NT_STATUS_OK
ReadX 13942 122880 4096 4096 NT_STATUS_OK
ReadX 13942 126976 4096 4096 NT_STATUS_OK
ReadX 13942 131072 4096 4096 NT_STATUS_OK
ReadX 13942 135168 4096 4096 NT_STATUS_OK
ReadX 13942 139264 4096 4096 NT_STATUS_OK
ReadX 13942 143360 4096 4096 NT_STATUS_OK
ReadX 13942 147456 4096 4096 NT_STATUS_OK
ReadX 13942 151552 4096 4096 NT_STATUS_OK
ReadX 13942 155648 4096 4096 NT_STATUS_OK
ReadX 13942 159744 4096 4096 NT_STATUS_OK
ReadX 13942 163840 4096 4096 NT_STATUS_OK
ReadX 13942 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13942 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13943 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13945 NT_STATUS_OK
WriteX 13945 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13945 258 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13946 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
Close 13946 NT_STATUS_OK
WriteX 13945 0 42388 42388 NT_STATUS_OK
Close 13945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 0 4096 4096 NT_STATUS_OK
ReadX 13949 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13950 NT_STATUS_OK
WriteX 13950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
SET_FILE_INFORMATION 13950 1004 NT_STATUS_OK
WriteX 13950 0 42652 42652 NT_STATUS_OK
Close 13950 NT_STATUS_OK
Close 13949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 4096 4096 NT_STATUS_OK
ReadX 13954 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13959 NT_STATUS_OK
WriteX 13959 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13959 258 NT_STATUS_OK
WriteX 13959 0 65536 65536 NT_STATUS_OK
WriteX 13959 65536 49 49 NT_STATUS_OK
Close 13959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 61440 61440 NT_STATUS_OK
ReadX 13960 61440 4096 4096 NT_STATUS_OK
ReadX 13960 65536 61440 61440 NT_STATUS_OK
ReadX 13960 126976 4096 4096 NT_STATUS_OK
ReadX 13960 131072 61440 61440 NT_STATUS_OK
ReadX 13960 192512 4096 4096 NT_STATUS_OK
ReadX 13960 196608 61440 61440 NT_STATUS_OK
ReadX 13960 258048 4096 4096 NT_STATUS_OK
ReadX 13960 262144 61440 61440 NT_STATUS_OK
ReadX 13960 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 61440 61440 NT_STATUS_OK
ReadX 13961 61440 4096 4096 NT_STATUS_OK
ReadX 13961 65536 61440 61440 NT_STATUS_OK
ReadX 13961 126976 4096 4096 NT_STATUS_OK
ReadX 13961 131072 61440 61440 NT_STATUS_OK
ReadX 13961 192512 4096 4096 NT_STATUS_OK
ReadX 13961 196608 61440 61440 NT_STATUS_OK
ReadX 13961 258048 4096 4096 NT_STATUS_OK
ReadX 13961 262144 61440 61440 NT_STATUS_OK
ReadX 13961 323584 4096 4096 NT_STATUS_OK
ReadX 13961 327680 61440 61440 NT_STATUS_OK
ReadX 13961 389120 4096 4096 NT_STATUS_OK
ReadX 13961 393216 61440 61440 NT_STATUS_OK
ReadX 13961 454656 4096 4096 NT_STATUS_OK
ReadX 13961 458752 61440 61440 NT_STATUS_OK
ReadX 13961 520192 4096 4096 NT_STATUS_OK
ReadX 13961 524288 61440 61440 NT_STATUS_OK
ReadX 13961 585728 4096 4096 NT_STATUS_OK
ReadX 13961 589824 61440 61440 NT_STATUS_OK
ReadX 13961 651264 4096 4096 NT_STATUS_OK
ReadX 13961 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 61440 61440 NT_STATUS_OK
ReadX 13962 61440 4096 4096 NT_STATUS_OK
ReadX 13962 65536 61440 61440 NT_STATUS_OK
ReadX 13962 126976 4096 4096 NT_STATUS_OK
ReadX 13962 131072 61440 61440 NT_STATUS_OK
ReadX 13962 192512 4096 4096 NT_STATUS_OK
ReadX 13962 196608 61440 61440 NT_STATUS_OK
ReadX 13962 258048 4096 4096 NT_STATUS_OK
ReadX 13962 262144 61440 61440 NT_STATUS_OK
ReadX 13962 323584 4096 4096 NT_STATUS_OK
ReadX 13962 327680 61440 61440 NT_STATUS_OK
ReadX 13962 389120 4096 4096 NT_STATUS_OK
ReadX 13962 393216 61440 61440 NT_STATUS_OK
ReadX 13962 454656 4096 4096 NT_STATUS_OK
ReadX 13962 458752 61440 61440 NT_STATUS_OK
ReadX 13962 520192 4096 4096 NT_STATUS_OK
ReadX 13962 524288 61440 61440 NT_STATUS_OK
ReadX 13962 585728 4096 4096 NT_STATUS_OK
ReadX 13962 589824 61440 61440 NT_STATUS_OK
ReadX 13962 651264 4096 4096 NT_STATUS_OK
ReadX 13962 655360 61440 61440 NT_STATUS_OK
ReadX 13962 716800 4096 4096 NT_STATUS_OK
ReadX 13962 720896 61440 61440 NT_STATUS_OK
ReadX 13962 782336 4096 4096 NT_STATUS_OK
ReadX 13962 786432 61440 61440 NT_STATUS_OK
ReadX 13962 847872 4096 4096 NT_STATUS_OK
ReadX 13962 851968 61440 61440 NT_STATUS_OK
ReadX 13962 913408 4096 4096 NT_STATUS_OK
ReadX 13962 917504 61440 61440 NT_STATUS_OK
ReadX 13962 978944 4096 4096 NT_STATUS_OK
ReadX 13962 983040 61440 61440 NT_STATUS_OK
ReadX 13962 1044480 4096 4096 NT_STATUS_OK
ReadX 13962 1048576 61440 61440 NT_STATUS_OK
ReadX 13962 1110016 4096 4096 NT_STATUS_OK
ReadX 13962 1114112 61440 61440 NT_STATUS_OK
ReadX 13962 1175552 4096 4096 NT_STATUS_OK
ReadX 13962 1179648 61440 61440 NT_STATUS_OK
ReadX 13962 1241088 4096 4096 NT_STATUS_OK
ReadX 13962 1245184 61440 61440 NT_STATUS_OK
ReadX 13962 1306624 4096 4096 NT_STATUS_OK
ReadX 13962 1310720 61440 61440 NT_STATUS_OK
ReadX 13962 1372160 4096 4096 NT_STATUS_OK
ReadX 13962 1376256 61440 61440 NT_STATUS_OK
ReadX 13962 1437696 4096 4096 NT_STATUS_OK
ReadX 13962 1441792 61440 61440 NT_STATUS_OK
ReadX 13962 1503232 4096 4096 NT_STATUS_OK
ReadX 13962 1507328 61440 61440 NT_STATUS_OK
ReadX 13962 1568768 4096 4096 NT_STATUS_OK
ReadX 13962 1572864 61440 61440 NT_STATUS_OK
ReadX 13962 1634304 4096 4096 NT_STATUS_OK
ReadX 13962 1638400 61440 61440 NT_STATUS_OK
ReadX 13962 1699840 4096 4096 NT_STATUS_OK
ReadX 13962 1703936 61440 61440 NT_STATUS_OK
ReadX 13962 1765376 4096 4096 NT_STATUS_OK
ReadX 13962 1769472 61440 61440 NT_STATUS_OK
ReadX 13962 1830912 4096 4096 NT_STATUS_OK
ReadX 13962 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13964 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 1005 NT_STATUS_OK
ReadX 13964 2156 24 24 NT_STATUS_OK
ReadX 13964 2139 276 276 NT_STATUS_OK
ReadX 13964 2136 14 14 NT_STATUS_OK
ReadX 13964 2136 7 7 NT_STATUS_OK
ReadX 13964 2138 12 12 NT_STATUS_OK
ReadX 13964 2137 8 8 NT_STATUS_OK
ReadX 13964 2135 15 15 NT_STATUS_OK
ReadX 13964 0 16 16 NT_STATUS_OK
ReadX 13964 16 2048 2048 NT_STATUS_OK
ReadX 13964 2064 2048 2048 NT_STATUS_OK
ReadX 13964 257 2048 2048 NT_STATUS_OK
ReadX 13964 385 2048 2048 NT_STATUS_OK
ReadX 13964 513 2048 2048 NT_STATUS_OK
ReadX 13964 641 2048 2048 NT_STATUS_OK
ReadX 13964 769 2048 2048 NT_STATUS_OK
ReadX 13964 897 2048 2048 NT_STATUS_OK
ReadX 13964 1025 2048 2048 NT_STATUS_OK
ReadX 13964 1153 2048 2048 NT_STATUS_OK
ReadX 13964 1281 2048 2048 NT_STATUS_OK
ReadX 13964 1409 2048 2048 NT_STATUS_OK
ReadX 13964 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13966 NT_STATUS_OK
Close 13966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Close 13962 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13969 NT_STATUS_OK
WriteX 13969 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 258 NT_STATUS_OK
WriteX 13969 0 10575 10575 NT_STATUS_OK
Flush 13969 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13974 NT_STATUS_OK
LockX 13974 2147483538 1 NT_STATUS_OK
UnlockX 13974 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1005 NT_STATUS_OK
ReadX 13974 0 512 512 NT_STATUS_OK
ReadX 13974 512 512 512 NT_STATUS_OK
ReadX 13974 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1004 NT_STATUS_OK
Close 13974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13975 NT_STATUS_OK
QUERY_FILE_INFORMATION 13975 1005 NT_STATUS_OK
ReadX 13975 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13976 NT_STATUS_OK
LockX 13976 2147483538 1 NT_STATUS_OK
UnlockX 13976 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13976 1005 NT_STATUS_OK
ReadX 13976 0 512 512 NT_STATUS_OK
ReadX 13976 512 512 512 NT_STATUS_OK
ReadX 13976 1024 512 512 NT_STATUS_OK
ReadX 13976 288 20 20 NT_STATUS_OK
ReadX 13976 308 2084 2084 NT_STATUS_OK
ReadX 13976 388 2084 2084 NT_STATUS_OK
ReadX 13976 388 2084 2084 NT_STATUS_OK
ReadX 13963 2157 1386 1386 NT_STATUS_OK
ReadX 13976 2472 399 399 NT_STATUS_OK
ReadX 13976 3072 1536 1536 NT_STATUS_OK
ReadX 13976 544 149 149 NT_STATUS_OK
ReadX 13976 693 485 485 NT_STATUS_OK
Close 13976 NT_STATUS_OK
ReadX 13963 2157 4096 4096 NT_STATUS_OK
ReadX 13963 6253 4096 4096 NT_STATUS_OK
ReadX 13963 10349 4096 4096 NT_STATUS_OK
ReadX 13963 14445 4096 4096 NT_STATUS_OK
ReadX 13963 18541 4096 4096 NT_STATUS_OK
ReadX 13963 22637 256 256 NT_STATUS_OK
ReadX 13963 22893 4096 4096 NT_STATUS_OK
ReadX 13963 26989 4096 4096 NT_STATUS_OK
ReadX 13963 31085 4096 4096 NT_STATUS_OK
ReadX 13963 35181 4096 4096 NT_STATUS_OK
ReadX 13963 39277 4096 4096 NT_STATUS_OK
ReadX 13963 43373 4096 4096 NT_STATUS_OK
ReadX 13963 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13963 2157 1024 1024 NT_STATUS_OK
ReadX 13963 1667 4688 4688 NT_STATUS_OK
ReadX 13963 6355 3516 3516 NT_STATUS_OK
ReadX 13963 9871 16384 16384 NT_STATUS_OK
ReadX 13963 26255 3771 3771 NT_STATUS_OK
ReadX 13963 30026 2048 2048 NT_STATUS_OK
ReadX 13963 32074 1024 1024 NT_STATUS_OK
ReadX 13963 33098 6652 6652 NT_STATUS_OK
ReadX 13963 39750 16384 16384 NT_STATUS_OK
ReadX 13963 56134 10496 10496 NT_STATUS_OK
ReadX 13963 66630 1784 1784 NT_STATUS_OK
ReadX 13963 68414 90 90 NT_STATUS_OK
ReadX 13963 68504 273 273 NT_STATUS_OK
ReadX 13963 68777 1600 1600 NT_STATUS_OK
ReadX 13963 70377 640 640 NT_STATUS_OK
ReadX 13963 71017 1280 1280 NT_STATUS_OK
ReadX 13963 72297 8464 8464 NT_STATUS_OK
ReadX 13963 80761 158 158 NT_STATUS_OK
ReadX 13963 80919 912 912 NT_STATUS_OK
ReadX 13963 81831 1980 1980 NT_STATUS_OK
ReadX 13963 83811 2256 2256 NT_STATUS_OK
ReadX 13963 86067 400 400 NT_STATUS_OK
ReadX 13963 86467 252 252 NT_STATUS_OK
ReadX 13963 86719 42 42 NT_STATUS_OK
ReadX 13963 86761 725 725 NT_STATUS_OK
ReadX 13963 2009 512 512 NT_STATUS_OK
ReadX 13963 3895 9 9 NT_STATUS_OK
ReadX 13963 3781 46 46 NT_STATUS_OK
ReadX 13963 4059 92 92 NT_STATUS_OK
ReadX 13963 3781 92 92 NT_STATUS_OK
ReadX 13963 3986 184 184 NT_STATUS_OK
ReadX 13963 3987 16384 16384 NT_STATUS_OK
ReadX 13963 3902 16384 16384 NT_STATUS_OK
ReadX 13963 3781 10240 10240 NT_STATUS_OK
ReadX 13963 3821 16384 16384 NT_STATUS_OK
ReadX 13963 3891 935 935 NT_STATUS_OK
ReadX 13963 4060 10240 10240 NT_STATUS_OK
ReadX 13963 4059 184 184 NT_STATUS_OK
ReadX 13963 256 184 184 NT_STATUS_OK
ReadX 13963 256 1026 1026 NT_STATUS_OK
ReadX 13963 3901 326 326 NT_STATUS_OK
ReadX 13963 3899 652 652 NT_STATUS_OK
ReadX 13963 256 2 2 NT_STATUS_OK
ReadX 13963 258 4948 4948 NT_STATUS_OK
Close 13963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13978 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13981 NT_STATUS_OK
WriteX 13981 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13981 258 NT_STATUS_OK
WriteX 13981 0 65536 65536 NT_STATUS_OK
WriteX 13981 65536 65536 65536 NT_STATUS_OK
WriteX 13981 131072 65536 65536 NT_STATUS_OK
WriteX 13981 196608 65536 65536 NT_STATUS_OK
WriteX 13981 262144 65536 65536 NT_STATUS_OK
WriteX 13981 327680 65536 65536 NT_STATUS_OK
WriteX 13981 393216 65536 65536 NT_STATUS_OK
WriteX 13981 458752 65536 65536 NT_STATUS_OK
WriteX 13981 524288 65536 65536 NT_STATUS_OK
WriteX 13981 589824 35257 35257 NT_STATUS_OK
Close 13981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13983 NT_STATUS_OK
Close 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13986 NT_STATUS_OK
WriteX 13986 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13986 258 NT_STATUS_OK
WriteX 13986 0 65536 65536 NT_STATUS_OK
WriteX 13986 65536 65536 65536 NT_STATUS_OK
WriteX 13986 131072 65536 65536 NT_STATUS_OK
WriteX 13986 196608 65536 65536 NT_STATUS_OK
WriteX 13986 262144 65536 65536 NT_STATUS_OK
WriteX 13986 327680 65536 65536 NT_STATUS_OK
WriteX 13986 393216 65536 65536 NT_STATUS_OK
WriteX 13986 458752 65536 65536 NT_STATUS_OK
WriteX 13986 524288 65536 65536 NT_STATUS_OK
WriteX 13986 589824 57598 57598 NT_STATUS_OK
Close 13986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13988 NT_STATUS_OK
WriteX 13988 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 12543 12543 NT_STATUS_OK
Flush 13988 NT_STATUS_OK
Close 13988 NT_STATUS_OK
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13990 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13994 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1005 NT_STATUS_OK
ReadX 13994 1938 24 24 NT_STATUS_OK
ReadX 13994 1920 276 276 NT_STATUS_OK
ReadX 13994 1918 14 14 NT_STATUS_OK
ReadX 13994 1918 7 7 NT_STATUS_OK
ReadX 13994 1919 12 12 NT_STATUS_OK
ReadX 13994 1919 8 8 NT_STATUS_OK
ReadX 13994 1917 15 15 NT_STATUS_OK
ReadX 13994 0 16 16 NT_STATUS_OK
ReadX 13994 16 2048 2048 NT_STATUS_OK
ReadX 13994 2064 2048 2048 NT_STATUS_OK
ReadX 13994 257 2048 2048 NT_STATUS_OK
ReadX 13994 385 2048 2048 NT_STATUS_OK
ReadX 13994 513 2048 2048 NT_STATUS_OK
ReadX 13994 641 2048 2048 NT_STATUS_OK
ReadX 13994 769 2048 2048 NT_STATUS_OK
ReadX 13994 897 2048 2048 NT_STATUS_OK
ReadX 13994 1025 2048 2048 NT_STATUS_OK
ReadX 13994 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13996 NT_STATUS_OK
Close 13996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13999 NT_STATUS_OK
WriteX 13999 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 258 NT_STATUS_OK
WriteX 13999 0 11588 11588 NT_STATUS_OK
Flush 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14000 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14004 NT_STATUS_OK
WriteX 14004 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14004 258 NT_STATUS_OK
WriteX 14004 0 11615 11615 NT_STATUS_OK
Flush 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 14002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 14013 NT_STATUS_OK
WriteX 14013 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14013 258 NT_STATUS_OK
WriteX 14013 0 65536 65536 NT_STATUS_OK
WriteX 14013 65536 16050 16050 NT_STATUS_OK
Close 14013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13993 1939 64 64 NT_STATUS_OK
ReadX 13993 128 248 248 NT_STATUS_OK
ReadX 13993 128 568 568 NT_STATUS_OK
ReadX 13993 3872 1536 1536 NT_STATUS_OK
ReadX 13993 3456 2560 2560 NT_STATUS_OK
ReadX 13993 3136 512 512 NT_STATUS_OK
ReadX 13993 2880 4096 4096 NT_STATUS_OK
ReadX 13993 3264 3072 3072 NT_STATUS_OK
ReadX 13993 320 4096 4096 NT_STATUS_OK
ReadX 13993 1024 4096 4096 NT_STATUS_OK
ReadX 13993 3616 4096 4096 NT_STATUS_OK
ReadX 13993 1939 64 64 NT_STATUS_OK
ReadX 13993 128 248 248 NT_STATUS_OK
ReadX 13993 128 608 608 NT_STATUS_OK
ReadX 13993 2858 1024 1024 NT_STATUS_OK
ReadX 13993 2810 4096 4096 NT_STATUS_OK
ReadX 13993 2826 4096 4096 NT_STATUS_OK
ReadX 13993 2580 2048 2048 NT_STATUS_OK
ReadX 13993 2800 2560 2560 NT_STATUS_OK
ReadX 13993 2100 4096 4096 NT_STATUS_OK
ReadX 13993 2084 4096 4096 NT_STATUS_OK
ReadX 13993 868 4096 4096 NT_STATUS_OK
ReadX 13993 2324 4096 4096 NT_STATUS_OK
ReadX 13993 884 4096 4096 NT_STATUS_OK
ReadX 13993 2604 1024 1024 NT_STATUS_OK
ReadX 13993 580 4096 4096 NT_STATUS_OK
ReadX 13993 596 4096 4096 NT_STATUS_OK
ReadX 13993 2752 4096 4096 NT_STATUS_OK
ReadX 13993 2842 1024 1024 NT_STATUS_OK
ReadX 13993 660 4096 4096 NT_STATUS_OK
ReadX 13993 2720 4096 4096 NT_STATUS_OK
ReadX 13993 2736 4096 4096 NT_STATUS_OK
ReadX 13993 628 4096 4096 NT_STATUS_OK
ReadX 13993 2704 4096 4096 NT_STATUS_OK
ReadX 13993 1556 4096 4096 NT_STATUS_OK
ReadX 13993 576 4096 4096 NT_STATUS_OK
ReadX 13993 3168 1536 1536 NT_STATUS_OK
ReadX 13993 832 4096 4096 NT_STATUS_OK
ReadX 13993 1088 4096 4096 NT_STATUS_OK
ReadX 13993 1344 4096 4096 NT_STATUS_OK
ReadX 13993 1600 4096 4096 NT_STATUS_OK
ReadX 13993 1856 4096 4096 NT_STATUS_OK
ReadX 13993 2112 4096 4096 NT_STATUS_OK
ReadX 13993 1892 4096 4096 NT_STATUS_OK
ReadX 13993 820 4096 4096 NT_STATUS_OK
ReadX 13993 788 4096 4096 NT_STATUS_OK
ReadX 13993 1604 4096 4096 NT_STATUS_OK
ReadX 13993 3648 4096 4096 NT_STATUS_OK
ReadX 13993 2608 4096 4096 NT_STATUS_OK
ReadX 13993 548 4096 4096 NT_STATUS_OK
ReadX 13993 740 4096 4096 NT_STATUS_OK
ReadX 13993 1344 4096 4096 NT_STATUS_OK
ReadX 13993 3392 4096 4096 NT_STATUS_OK
ReadX 13993 3904 4096 4096 NT_STATUS_OK
ReadX 13993 644 4096 4096 NT_STATUS_OK
ReadX 13993 676 4096 4096 NT_STATUS_OK
ReadX 13993 2688 4096 4096 NT_STATUS_OK
ReadX 13993 320 4096 4096 NT_STATUS_OK
ReadX 13993 900 4096 4096 NT_STATUS_OK
ReadX 13993 1908 4096 4096 NT_STATUS_OK
ReadX 13993 852 4096 4096 NT_STATUS_OK
ReadX 13993 724 4096 4096 NT_STATUS_OK
ReadX 13993 2292 4096 4096 NT_STATUS_OK
ReadX 13993 612 4096 4096 NT_STATUS_OK
ReadX 13993 388 4096 4096 NT_STATUS_OK
ReadX 13993 2368 4096 4096 NT_STATUS_OK
ReadX 13993 2624 4096 4096 NT_STATUS_OK
ReadX 13993 500 4096 4096 NT_STATUS_OK
ReadX 13993 356 4096 4096 NT_STATUS_OK
ReadX 13993 1024 4096 4096 NT_STATUS_OK
ReadX 13993 576 4096 4096 NT_STATUS_OK
ReadX 13993 340 4096 4096 NT_STATUS_OK
ReadX 13993 420 4096 4096 NT_STATUS_OK
ReadX 13993 1600 4096 4096 NT_STATUS_OK
ReadX 13993 404 4096 4096 NT_STATUS_OK
ReadX 13993 1428 4096 4096 NT_STATUS_OK
ReadX 13993 2656 4096 4096 NT_STATUS_OK
ReadX 13993 2624 4096 4096 NT_STATUS_OK
ReadX 13993 452 4096 4096 NT_STATUS_OK
ReadX 13993 692 4096 4096 NT_STATUS_OK
ReadX 13993 564 4096 4096 NT_STATUS_OK
ReadX 13993 372 4096 4096 NT_STATUS_OK
ReadX 13993 468 4096 4096 NT_STATUS_OK
ReadX 13993 484 4096 4096 NT_STATUS_OK
ReadX 13993 1088 4096 4096 NT_STATUS_OK
ReadX 13993 1924 4096 4096 NT_STATUS_OK
ReadX 13993 2768 4096 4096 NT_STATUS_OK
ReadX 13993 832 4096 4096 NT_STATUS_OK
ReadX 13993 836 4096 4096 NT_STATUS_OK
ReadX 13993 1856 4096 4096 NT_STATUS_OK
ReadX 13993 2640 4096 4096 NT_STATUS_OK
ReadX 13993 436 4096 4096 NT_STATUS_OK
ReadX 13993 1828 4096 4096 NT_STATUS_OK
ReadX 13993 804 4096 4096 NT_STATUS_OK
ReadX 13993 1860 4096 4096 NT_STATUS_OK
ReadX 13993 1812 4096 4096 NT_STATUS_OK
ReadX 13993 756 4096 4096 NT_STATUS_OK
ReadX 13993 1636 4096 4096 NT_STATUS_OK
ReadX 13993 772 4096 4096 NT_STATUS_OK
ReadX 13993 2036 4096 4096 NT_STATUS_OK
ReadX 13993 1220 4096 4096 NT_STATUS_OK
ReadX 13993 1652 4096 4096 NT_STATUS_OK
ReadX 13993 2588 4096 4096 NT_STATUS_OK
ReadX 13993 916 4096 4096 NT_STATUS_OK
ReadX 13993 260 4096 4096 NT_STATUS_OK
ReadX 13993 932 4096 4096 NT_STATUS_OK
ReadX 13993 2624 4096 4096 NT_STATUS_OK
ReadX 13993 308 4096 4096 NT_STATUS_OK
ReadX 13993 292 4096 4096 NT_STATUS_OK
ReadX 13993 1140 4096 4096 NT_STATUS_OK
ReadX 13993 276 4096 4096 NT_STATUS_OK
ReadX 13993 2020 4096 4096 NT_STATUS_OK
ReadX 13993 2880 4096 4096 NT_STATUS_OK
ReadX 13993 516 4096 4096 NT_STATUS_OK
ReadX 13993 1844 4096 4096 NT_STATUS_OK
ReadX 13993 1124 4096 4096 NT_STATUS_OK
ReadX 13993 3136 4096 4096 NT_STATUS_OK
ReadX 13993 324 4096 4096 NT_STATUS_OK
ReadX 13993 1156 4096 4096 NT_STATUS_OK
ReadX 13993 1172 4096 4096 NT_STATUS_OK
ReadX 13993 2112 4096 4096 NT_STATUS_OK
ReadX 13993 2368 4096 4096 NT_STATUS_OK
ReadX 13993 964 4096 4096 NT_STATUS_OK
ReadX 13993 980 4096 4096 NT_STATUS_OK
ReadX 13993 1012 4096 4096 NT_STATUS_OK
ReadX 13993 532 4096 4096 NT_STATUS_OK
ReadX 13993 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13993 1620 4096 4096 NT_STATUS_OK
ReadX 13993 1604 4096 4096 NT_STATUS_OK
ReadX 13993 2116 4096 4096 NT_STATUS_OK
ReadX 13993 2132 4096 4096 NT_STATUS_OK
ReadX 13993 2148 4096 4096 NT_STATUS_OK
ReadX 13993 2276 4096 4096 NT_STATUS_OK
ReadX 13993 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 14018 NT_STATUS_OK
QUERY_FILE_INFORMATION 13973 1004 NT_STATUS_OK
Close 13973 NT_STATUS_OK
WriteX 14018 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13975 1004 NT_STATUS_OK
Close 13975 NT_STATUS_OK
WriteX 14018 0 65536 65536 NT_STATUS_OK
WriteX 14018 65536 64850 64850 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14020 NT_STATUS_OK
WriteX 14020 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
ReadX 13993 2068 4096 4096 NT_STATUS_OK
ReadX 13993 1588 4096 4096 NT_STATUS_OK
ReadX 13993 1572 4096 4096 NT_STATUS_OK
WriteX 14020 0 18630 18630 NT_STATUS_OK
Flush 14020 NT_STATUS_OK
Close 14020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 14008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14022 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13993 612 4096 4096 NT_STATUS_OK
ReadX 13993 564 4096 4096 NT_STATUS_OK
ReadX 13993 1876 4096 4096 NT_STATUS_OK
ReadX 13993 628 4096 4096 NT_STATUS_OK
ReadX 13993 740 4096 4096 NT_STATUS_OK
ReadX 13993 724 4096 4096 NT_STATUS_OK
ReadX 13993 644 4096 4096 NT_STATUS_OK
ReadX 13993 2324 4096 4096 NT_STATUS_OK
ReadX 13993 660 4096 4096 NT_STATUS_OK
ReadX 13993 852 4096 4096 NT_STATUS_OK
ReadX 13993 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13993 2368 4096 4096 NT_STATUS_OK
ReadX 13993 1024 4096 4096 NT_STATUS_OK
ReadX 13993 320 4096 4096 NT_STATUS_OK
ReadX 13993 580 4096 4096 NT_STATUS_OK
ReadX 13993 3136 512 512 NT_STATUS_OK
ReadX 13993 2880 4096 4096 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 61440 4096 4096 NT_STATUS_OK
ReadX 14025 126976 4096 4096 NT_STATUS_OK
WriteX 14025 0 65536 65536 NT_STATUS_OK
WriteX 14025 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 61440 4096 4096 NT_STATUS_OK
ReadX 14026 126976 4096 4096 NT_STATUS_OK
ReadX 14026 192512 4096 4096 NT_STATUS_OK
ReadX 14026 258048 4096 4096 NT_STATUS_OK
WriteX 14026 0 65536 65536 NT_STATUS_OK
WriteX 14026 65536 65536 65536 NT_STATUS_OK
WriteX 14026 131072 65536 65536 NT_STATUS_OK
WriteX 14026 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 61440 4096 4096 NT_STATUS_OK
ReadX 14027 126976 4096 4096 NT_STATUS_OK
ReadX 14027 192512 4096 4096 NT_STATUS_OK
ReadX 14027 258048 4096 4096 NT_STATUS_OK
ReadX 14027 323584 4096 4096 NT_STATUS_OK
ReadX 14027 389120 4096 4096 NT_STATUS_OK
ReadX 14027 454656 4096 4096 NT_STATUS_OK
ReadX 14027 520192 4096 4096 NT_STATUS_OK
WriteX 14027 0 65536 65536 NT_STATUS_OK
WriteX 14027 65536 65536 65536 NT_STATUS_OK
WriteX 14027 131072 65536 65536 NT_STATUS_OK
WriteX 14027 196608 65536 65536 NT_STATUS_OK
WriteX 14027 262144 65536 65536 NT_STATUS_OK
WriteX 14027 327680 65536 65536 NT_STATUS_OK
WriteX 14027 393216 65536 65536 NT_STATUS_OK
WriteX 14027 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 14030 NT_STATUS_OK
WriteX 14030 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14030 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14028 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 14035 NT_STATUS_OK
WriteX 14035 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 258 NT_STATUS_OK
WriteX 14035 0 62591 62591 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 14040 NT_STATUS_OK
WriteX 14040 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14040 258 NT_STATUS_OK
WriteX 14040 0 10845 10845 NT_STATUS_OK
Close 14040 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 14042 NT_STATUS_OK
Close 14042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 14045 NT_STATUS_OK
WriteX 14045 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14045 258 NT_STATUS_OK
WriteX 14045 0 30118 30118 NT_STATUS_OK
Close 14045 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
WriteX 14030 0 64 64 NT_STATUS_OK
Close 14030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 61440 61440 NT_STATUS_OK
ReadX 14047 61440 4096 4096 NT_STATUS_OK
ReadX 14047 65536 61440 61440 NT_STATUS_OK
ReadX 14047 126976 4096 4096 NT_STATUS_OK
ReadX 14047 131072 61440 61440 NT_STATUS_OK
ReadX 14047 192512 4096 4096 NT_STATUS_OK
ReadX 14047 196608 61440 61440 NT_STATUS_OK
ReadX 14047 258048 4096 4096 NT_STATUS_OK
ReadX 14047 262144 61440 61440 NT_STATUS_OK
ReadX 14047 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 61440 61440 NT_STATUS_OK
ReadX 14048 61440 4096 4096 NT_STATUS_OK
ReadX 14048 65536 61440 61440 NT_STATUS_OK
ReadX 14048 126976 4096 4096 NT_STATUS_OK
ReadX 14048 131072 61440 61440 NT_STATUS_OK
ReadX 14048 192512 4096 4096 NT_STATUS_OK
ReadX 14048 196608 61440 61440 NT_STATUS_OK
ReadX 14048 258048 4096 4096 NT_STATUS_OK
ReadX 14048 262144 61440 61440 NT_STATUS_OK
ReadX 14048 323584 4096 4096 NT_STATUS_OK
ReadX 14048 327680 61440 61440 NT_STATUS_OK
ReadX 14048 389120 4096 4096 NT_STATUS_OK
ReadX 14048 393216 61440 61440 NT_STATUS_OK
ReadX 14048 454656 4096 4096 NT_STATUS_OK
ReadX 14048 458752 61440 61440 NT_STATUS_OK
ReadX 14048 520192 4096 4096 NT_STATUS_OK
ReadX 14048 524288 61440 61440 NT_STATUS_OK
ReadX 14048 585728 4096 4096 NT_STATUS_OK
ReadX 14048 589824 61440 61440 NT_STATUS_OK
ReadX 14048 651264 4096 4096 NT_STATUS_OK
ReadX 14048 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 61440 61440 NT_STATUS_OK
ReadX 14049 61440 4096 4096 NT_STATUS_OK
ReadX 14049 65536 61440 61440 NT_STATUS_OK
ReadX 14049 126976 4096 4096 NT_STATUS_OK
ReadX 14049 131072 61440 61440 NT_STATUS_OK
ReadX 14049 192512 4096 4096 NT_STATUS_OK
ReadX 14049 196608 61440 61440 NT_STATUS_OK
ReadX 14049 258048 4096 4096 NT_STATUS_OK
ReadX 14049 262144 61440 61440 NT_STATUS_OK
ReadX 14049 323584 4096 4096 NT_STATUS_OK
ReadX 14049 327680 61440 61440 NT_STATUS_OK
ReadX 14049 389120 4096 4096 NT_STATUS_OK
ReadX 14049 393216 61440 61440 NT_STATUS_OK
ReadX 14049 454656 4096 4096 NT_STATUS_OK
ReadX 14049 458752 61440 61440 NT_STATUS_OK
ReadX 14049 520192 4096 4096 NT_STATUS_OK
ReadX 14049 524288 61440 61440 NT_STATUS_OK
ReadX 14049 585728 4096 4096 NT_STATUS_OK
ReadX 14049 589824 61440 61440 NT_STATUS_OK
ReadX 14049 651264 4096 4096 NT_STATUS_OK
ReadX 14049 655360 61440 61440 NT_STATUS_OK
ReadX 14049 716800 4096 4096 NT_STATUS_OK
ReadX 14049 720896 61440 61440 NT_STATUS_OK
ReadX 14049 782336 4096 4096 NT_STATUS_OK
ReadX 14049 786432 61440 61440 NT_STATUS_OK
ReadX 14049 847872 4096 4096 NT_STATUS_OK
ReadX 14049 851968 61440 61440 NT_STATUS_OK
ReadX 14049 913408 4096 4096 NT_STATUS_OK
ReadX 14049 917504 61440 61440 NT_STATUS_OK
ReadX 14049 978944 4096 4096 NT_STATUS_OK
ReadX 14049 983040 61440 61440 NT_STATUS_OK
ReadX 14049 1044480 4096 4096 NT_STATUS_OK
ReadX 14049 1048576 61440 61440 NT_STATUS_OK
ReadX 14049 1110016 4096 4096 NT_STATUS_OK
ReadX 14049 1114112 61440 61440 NT_STATUS_OK
ReadX 14049 1175552 4096 4096 NT_STATUS_OK
ReadX 14049 1179648 61440 61440 NT_STATUS_OK
ReadX 14049 1241088 4096 4096 NT_STATUS_OK
ReadX 14049 1245184 61440 61440 NT_STATUS_OK
ReadX 14049 1306624 4096 4096 NT_STATUS_OK
ReadX 14049 1310720 61440 61440 NT_STATUS_OK
ReadX 14049 1372160 4096 4096 NT_STATUS_OK
ReadX 14049 1376256 61440 61440 NT_STATUS_OK
ReadX 14049 1437696 4096 4096 NT_STATUS_OK
ReadX 14049 1441792 61440 61440 NT_STATUS_OK
ReadX 14049 1503232 4096 4096 NT_STATUS_OK
ReadX 14049 1507328 61440 61440 NT_STATUS_OK
ReadX 14049 1568768 4096 4096 NT_STATUS_OK
ReadX 14049 1572864 61440 61440 NT_STATUS_OK
ReadX 14049 1634304 4096 4096 NT_STATUS_OK
ReadX 14049 1638400 61440 61440 NT_STATUS_OK
ReadX 14049 1699840 4096 4096 NT_STATUS_OK
ReadX 14049 1703936 61440 61440 NT_STATUS_OK
ReadX 14049 1765376 4096 4096 NT_STATUS_OK
ReadX 14049 1769472 61440 61440 NT_STATUS_OK
ReadX 14049 1830912 4096 4096 NT_STATUS_OK
ReadX 14049 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
ReadX 14054 4096 4096 4096 NT_STATUS_OK
ReadX 14054 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14055 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 14058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14058 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14059 NT_STATUS_OK
Close 14059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 8192 8192 NT_STATUS_OK
ReadX 14062 8192 8192 8192 NT_STATUS_OK
ReadX 14062 16384 8192 8192 NT_STATUS_OK
ReadX 14062 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14067 NT_STATUS_OK
WriteX 14067 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14067 258 NT_STATUS_OK
WriteX 14067 0 10438 10438 NT_STATUS_OK
Close 14067 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 14068 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 14071 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 14072 NT_STATUS_OK
Close 14072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 14073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14075 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
ReadX 14076 4096 4096 4096 NT_STATUS_OK
ReadX 14076 8192 4096 4096 NT_STATUS_OK
ReadX 14076 12288 8192 8192 NT_STATUS_OK
ReadX 14076 20480 8192 8192 NT_STATUS_OK
ReadX 14076 28672 8192 8192 NT_STATUS_OK
ReadX 14076 36864 8192 8192 NT_STATUS_OK
ReadX 14076 45056 8192 8192 NT_STATUS_OK
ReadX 14076 53248 8192 8192 NT_STATUS_OK
ReadX 14076 61440 8192 8192 NT_STATUS_OK
ReadX 14076 69632 8192 8192 NT_STATUS_OK
ReadX 14076 77824 8192 8192 NT_STATUS_OK
ReadX 14076 86016 8192 8192 NT_STATUS_OK
ReadX 14076 94208 8192 8192 NT_STATUS_OK
ReadX 14076 102400 8192 8192 NT_STATUS_OK
ReadX 14076 110592 8192 8192 NT_STATUS_OK
ReadX 14076 118784 8192 8192 NT_STATUS_OK
ReadX 14076 126976 8192 8192 NT_STATUS_OK
ReadX 14076 135168 8192 8192 NT_STATUS_OK
ReadX 14076 143360 8192 8192 NT_STATUS_OK
ReadX 14076 151552 8192 8192 NT_STATUS_OK
ReadX 14076 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14081 NT_STATUS_OK
WriteX 14081 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14081 258 NT_STATUS_OK
WriteX 14081 0 26637 26637 NT_STATUS_OK
WriteX 14081 0 28489 28489 NT_STATUS_OK
Close 14081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 14082 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14084 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14085 NT_STATUS_OK
Close 14085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14088 NT_STATUS_OK
ReadX 14088 0 8192 8192 NT_STATUS_OK
ReadX 14088 8192 8192 8192 NT_STATUS_OK
ReadX 14088 16384 8192 8192 NT_STATUS_OK
ReadX 14088 24576 8192 8192 NT_STATUS_OK
ReadX 14088 32768 16384 16384 NT_STATUS_OK
ReadX 14088 49152 8192 8192 NT_STATUS_OK
ReadX 14088 57344 8192 8192 NT_STATUS_OK
ReadX 14088 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14090 NT_STATUS_OK
Close 14090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14093 NT_STATUS_OK
WriteX 14093 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 258 NT_STATUS_OK
WriteX 14093 0 29253 29253 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14094 NT_STATUS_OK
Close 14094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9722 NT_STATUS_OK
Close 9722 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9725 NT_STATUS_OK
WriteX 9725 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9725 258 NT_STATUS_OK
WriteX 9725 0 30183 30183 NT_STATUS_OK
Close 9725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9726 NT_STATUS_OK
Close 9726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9728 NT_STATUS_OK
WriteX 9728 0 510 510 NT_STATUS_OK
WriteX 9728 510 512 512 NT_STATUS_OK
WriteX 9728 1022 510 510 NT_STATUS_OK
WriteX 9728 1532 510 510 NT_STATUS_OK
WriteX 9728 2042 168 168 NT_STATUS_OK
Close 9728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9729 NT_STATUS_OK
Close 9729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9731 NT_STATUS_OK
ReadX 9731 0 4096 4096 NT_STATUS_OK
WriteX 9731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9732 NT_STATUS_OK
ReadX 9732 61440 4096 4096 NT_STATUS_OK
ReadX 9732 126976 4096 4096 NT_STATUS_OK
WriteX 9732 0 65536 65536 NT_STATUS_OK
WriteX 9732 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9733 NT_STATUS_OK
ReadX 9733 61440 4096 4096 NT_STATUS_OK
ReadX 9733 126976 4096 4096 NT_STATUS_OK
ReadX 9733 192512 4096 4096 NT_STATUS_OK
ReadX 9733 258048 4096 4096 NT_STATUS_OK
WriteX 9733 0 65536 65536 NT_STATUS_OK
WriteX 9733 65536 65536 65536 NT_STATUS_OK
WriteX 9733 131072 65536 65536 NT_STATUS_OK
WriteX 9733 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9734 NT_STATUS_OK
ReadX 9734 61440 4096 4096 NT_STATUS_OK
ReadX 9734 126976 4096 4096 NT_STATUS_OK
ReadX 9734 192512 4096 4096 NT_STATUS_OK
ReadX 9734 258048 4096 4096 NT_STATUS_OK
ReadX 9734 323584 4096 4096 NT_STATUS_OK
ReadX 9734 389120 4096 4096 NT_STATUS_OK
ReadX 9734 454656 4096 4096 NT_STATUS_OK
ReadX 9734 520192 4096 4096 NT_STATUS_OK
WriteX 9734 0 65536 65536 NT_STATUS_OK
WriteX 9734 65536 65536 65536 NT_STATUS_OK
WriteX 9734 131072 65536 65536 NT_STATUS_OK
WriteX 9734 196608 65536 65536 NT_STATUS_OK
WriteX 9734 262144 65536 65536 NT_STATUS_OK
WriteX 9734 327680 65536 65536 NT_STATUS_OK
WriteX 9734 393216 65536 65536 NT_STATUS_OK
WriteX 9734 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9735 NT_STATUS_OK
Close 9735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9731 NT_STATUS_OK
Close 9732 NT_STATUS_OK
Close 9733 NT_STATUS_OK
Close 9734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9737 NT_STATUS_OK
Close 9737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9741 NT_STATUS_OK
Close 9741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9744 NT_STATUS_OK
Close 9744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9746 NT_STATUS_OK
Close 9746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9750 NT_STATUS_OK
Close 9750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9753 NT_STATUS_OK
Close 9753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9755 NT_STATUS_OK
Close 9755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9759 NT_STATUS_OK
Close 9759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9764 NT_STATUS_OK
Close 9764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9769 NT_STATUS_OK
Close 9769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9774 NT_STATUS_OK
Close 9774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9779 NT_STATUS_OK
Close 9779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9784 NT_STATUS_OK
Close 9784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9789 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 9794 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 9797 NT_STATUS_OK
Close 9797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9800 NT_STATUS_OK
Close 9800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9803 NT_STATUS_OK
WriteX 9803 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9803 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 9803 0 65536 65536 NT_STATUS_OK
WriteX 9803 65536 65536 65536 NT_STATUS_OK
WriteX 9803 131072 65536 65536 NT_STATUS_OK
WriteX 9803 196608 65536 65536 NT_STATUS_OK
WriteX 9803 262144 26634 26634 NT_STATUS_OK
Close 9803 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9808 NT_STATUS_OK
Close 9808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9809 NT_STATUS_OK
Close 9809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9810 NT_STATUS_OK
ReadX 9810 0 4096 4096 NT_STATUS_OK
Close 9810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9811 NT_STATUS_OK
ReadX 9811 0 4096 4096 NT_STATUS_OK
ReadX 9811 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9812 NT_STATUS_OK
Close 9812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 9811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9816 NT_STATUS_OK
Close 9816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9819 NT_STATUS_OK
Close 9819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9821 NT_STATUS_OK
Close 9821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9825 NT_STATUS_OK
Close 9825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9828 NT_STATUS_OK
Close 9828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9834 NT_STATUS_OK
Close 9834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9839 NT_STATUS_OK
Close 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9844 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9849 NT_STATUS_OK
Close 9849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9854 NT_STATUS_OK
Close 9854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9859 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9863 NT_STATUS_OK
Close 9863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9868 NT_STATUS_OK
Close 9868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9873 NT_STATUS_OK
Close 9873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9876 NT_STATUS_OK
Close 9876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9888 NT_STATUS_OK
Close 9888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
Close 9890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 4096 4096 NT_STATUS_OK
Close 9891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9892 NT_STATUS_OK
ReadX 9892 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9902 NT_STATUS_OK
Close 9902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 0 4096 4096 NT_STATUS_OK
Close 9904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
Close 9905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9892 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9935 0 4096 4096 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9937 NT_STATUS_OK
ReadX 9937 0 4096 4096 NT_STATUS_OK
ReadX 9937 4096 4096 4096 NT_STATUS_OK
ReadX 9937 8192 4096 4096 NT_STATUS_OK
ReadX 9937 12288 4096 4096 NT_STATUS_OK
ReadX 9937 16384 4096 4096 NT_STATUS_OK
ReadX 9937 20480 4096 4096 NT_STATUS_OK
ReadX 9937 24576 4096 4096 NT_STATUS_OK
ReadX 9937 28672 4096 4096 NT_STATUS_OK
ReadX 9937 32768 4096 4096 NT_STATUS_OK
ReadX 9937 36864 4096 4096 NT_STATUS_OK
ReadX 9937 40960 4096 4096 NT_STATUS_OK
ReadX 9937 45056 4096 4096 NT_STATUS_OK
ReadX 9937 49152 4096 4096 NT_STATUS_OK
ReadX 9937 53248 4096 4096 NT_STATUS_OK
ReadX 9937 57344 4096 4096 NT_STATUS_OK
ReadX 9937 61440 4096 4096 NT_STATUS_OK
ReadX 9937 65536 4096 4096 NT_STATUS_OK
ReadX 9937 69632 4096 4096 NT_STATUS_OK
ReadX 9937 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9938 NT_STATUS_OK
SET_FILE_INFORMATION 9938 1004 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9940 NT_STATUS_OK
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9943 NT_STATUS_OK
WriteX 9943 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9943 258 NT_STATUS_OK
WriteX 9943 0 65536 65536 NT_STATUS_OK
WriteX 9943 65536 19979 19979 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 1004 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
SET_FILE_INFORMATION 9944 1004 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
Close 9944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9945 NT_STATUS_OK
ReadX 9945 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9946 NT_STATUS_OK
ReadX 9946 0 4096 4096 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9948 NT_STATUS_OK
ReadX 9948 0 4096 4096 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9949 NT_STATUS_OK
ReadX 9949 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9949 1004 NT_STATUS_OK
WriteX 9949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9946 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9952 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9955 NT_STATUS_OK
WriteX 9955 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9955 258 NT_STATUS_OK
WriteX 9955 0 65536 65536 NT_STATUS_OK
WriteX 9955 65536 17654 17654 NT_STATUS_OK
Close 9955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9956 NT_STATUS_OK
ReadX 9956 0 4096 4096 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 1004 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
SET_FILE_INFORMATION 9956 1004 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9957 NT_STATUS_OK
SET_FILE_INFORMATION 9957 1004 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9959 NT_STATUS_OK
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9961 NT_STATUS_OK
ReadX 9961 0 4096 4096 NT_STATUS_OK
ReadX 9961 4096 4096 4096 NT_STATUS_OK
ReadX 9961 8192 4096 4096 NT_STATUS_OK
ReadX 9961 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9961 16384 4096 4096 NT_STATUS_OK
ReadX 9961 20480 4096 4096 NT_STATUS_OK
ReadX 9961 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9963 NT_STATUS_OK
ReadX 9963 0 4096 4096 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9964 1004 NT_STATUS_OK
WriteX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9967 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 19490 19490 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 0 4096 4096 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 1004 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
SET_FILE_INFORMATION 9971 1004 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9972 NT_STATUS_OK
SET_FILE_INFORMATION 9972 1004 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9973 NT_STATUS_OK
ReadX 9973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9974 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9976 0 4096 4096 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
ReadX 9978 4096 4096 4096 NT_STATUS_OK
ReadX 9978 8192 4096 4096 NT_STATUS_OK
ReadX 9978 12288 4096 4096 NT_STATUS_OK
ReadX 9978 16384 4096 4096 NT_STATUS_OK
ReadX 9978 20480 4096 4096 NT_STATUS_OK
ReadX 9978 24576 4096 4096 NT_STATUS_OK
ReadX 9978 28672 4096 4096 NT_STATUS_OK
ReadX 9978 32768 4096 4096 NT_STATUS_OK
ReadX 9978 36864 4096 4096 NT_STATUS_OK
ReadX 9978 40960 4096 4096 NT_STATUS_OK
ReadX 9978 45056 4096 4096 NT_STATUS_OK
ReadX 9978 49152 4096 4096 NT_STATUS_OK
ReadX 9978 53248 4096 4096 NT_STATUS_OK
ReadX 9978 57344 4096 4096 NT_STATUS_OK
ReadX 9978 61440 4096 4096 NT_STATUS_OK
ReadX 9978 65536 4096 4096 NT_STATUS_OK
ReadX 9978 69632 4096 4096 NT_STATUS_OK
ReadX 9978 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9978 1004 NT_STATUS_OK
WriteX 9978 0 4096 4096 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9979 NT_STATUS_OK
SET_FILE_INFORMATION 9979 1004 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 8866 8866 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 4096 4096 NT_STATUS_OK
WriteX 9985 0 4096 4096 NT_STATUS_OK
Flush 9985 NT_STATUS_OK
SET_FILE_INFORMATION 9985 1004 NT_STATUS_OK
WriteX 9985 0 4096 4096 NT_STATUS_OK
Flush 9985 NT_STATUS_OK
Close 9985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 4096 4096 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9988 NT_STATUS_OK
ReadX 9988 0 4096 4096 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9989 NT_STATUS_OK
ReadX 9989 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9989 1004 NT_STATUS_OK
WriteX 9989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9989 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9992 NT_STATUS_OK
Close 9992 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9995 NT_STATUS_OK
WriteX 9995 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9995 258 NT_STATUS_OK
WriteX 9995 0 65536 65536 NT_STATUS_OK
WriteX 9995 65536 9298 9298 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
WriteX 9996 0 4096 4096 NT_STATUS_OK
Flush 9996 NT_STATUS_OK
SET_FILE_INFORMATION 9996 1004 NT_STATUS_OK
WriteX 9996 0 4096 4096 NT_STATUS_OK
Flush 9996 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9997 NT_STATUS_OK
SET_FILE_INFORMATION 9997 1004 NT_STATUS_OK
Close 9997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9998 NT_STATUS_OK
ReadX 9998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10002 0 4096 4096 NT_STATUS_OK
Close 10002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10003 NT_STATUS_OK
ReadX 10003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10003 4096 4096 4096 NT_STATUS_OK
ReadX 10003 8192 4096 4096 NT_STATUS_OK
ReadX 10003 12288 4096 4096 NT_STATUS_OK
ReadX 10003 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10005 NT_STATUS_OK
ReadX 10005 0 4096 4096 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10006 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10006 1004 NT_STATUS_OK
WriteX 10006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10003 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10009 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10012 NT_STATUS_OK
WriteX 10012 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10012 258 NT_STATUS_OK
WriteX 10012 0 65536 65536 NT_STATUS_OK
WriteX 10012 65536 11540 11540 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
WriteX 10013 0 4096 4096 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
SET_FILE_INFORMATION 10013 1004 NT_STATUS_OK
WriteX 10013 0 4096 4096 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10014 NT_STATUS_OK
SET_FILE_INFORMATION 10014 1004 NT_STATUS_OK
Close 10014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10016 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10018 NT_STATUS_OK
ReadX 10018 61440 4096 4096 NT_STATUS_OK
ReadX 10018 126976 4096 4096 NT_STATUS_OK
WriteX 10018 0 65536 65536 NT_STATUS_OK
WriteX 10018 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10019 NT_STATUS_OK
ReadX 10019 61440 4096 4096 NT_STATUS_OK
ReadX 10019 126976 4096 4096 NT_STATUS_OK
ReadX 10019 192512 4096 4096 NT_STATUS_OK
ReadX 10019 258048 4096 4096 NT_STATUS_OK
WriteX 10019 0 65536 65536 NT_STATUS_OK
WriteX 10019 65536 65536 65536 NT_STATUS_OK
WriteX 10019 131072 65536 65536 NT_STATUS_OK
WriteX 10019 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10020 NT_STATUS_OK
ReadX 10020 61440 4096 4096 NT_STATUS_OK
ReadX 10020 126976 4096 4096 NT_STATUS_OK
ReadX 10020 192512 4096 4096 NT_STATUS_OK
ReadX 10020 258048 4096 4096 NT_STATUS_OK
ReadX 10020 323584 4096 4096 NT_STATUS_OK
ReadX 10020 389120 4096 4096 NT_STATUS_OK
ReadX 10020 454656 4096 4096 NT_STATUS_OK
ReadX 10020 520192 4096 4096 NT_STATUS_OK
WriteX 10020 0 65536 65536 NT_STATUS_OK
WriteX 10020 65536 65536 65536 NT_STATUS_OK
WriteX 10020 131072 65536 65536 NT_STATUS_OK
WriteX 10020 196608 65536 65536 NT_STATUS_OK
WriteX 10020 262144 65536 65536 NT_STATUS_OK
WriteX 10020 327680 65536 65536 NT_STATUS_OK
WriteX 10020 393216 65536 65536 NT_STATUS_OK
WriteX 10020 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10021 NT_STATUS_OK
ReadX 10021 0 4096 4096 NT_STATUS_OK
ReadX 10021 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10022 NT_STATUS_OK
WriteX 10022 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10022 258 NT_STATUS_OK
WriteX 10022 0 53 53 NT_STATUS_OK
Close 10022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10023 NT_STATUS_OK
Close 10023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Close 9961 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Close 10019 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10021 8192 4096 4096 NT_STATUS_OK
ReadX 10021 12288 4096 4096 NT_STATUS_OK
WriteX 10025 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
ReadX 10021 16384 4096 4096 NT_STATUS_OK
ReadX 10021 20480 4096 4096 NT_STATUS_OK
WriteX 10025 0 15360 15360 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
WriteX 10026 0 4096 4096 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10030 NT_STATUS_OK
Close 10030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10029 4096 4096 4096 NT_STATUS_OK
ReadX 10029 8192 4096 4096 NT_STATUS_OK
ReadX 10029 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
ReadX 10032 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
ReadX 10033 4096 4096 4096 NT_STATUS_OK
ReadX 10033 8192 4096 4096 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10034 NT_STATUS_OK
WriteX 10034 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10034 258 NT_STATUS_OK
WriteX 10034 0 15360 15360 NT_STATUS_OK
Close 10034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10035 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10035 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10039 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
Close 10039 NT_STATUS_OK
WriteX 10035 0 4096 4096 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 4096 4096 NT_STATUS_OK
ReadX 10042 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10042 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10043 NT_STATUS_OK
ReadX 10043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10044 NT_STATUS_OK
WriteX 10044 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10044 258 NT_STATUS_OK
WriteX 10044 0 53 53 NT_STATUS_OK
Close 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10043 4096 4096 4096 NT_STATUS_OK
ReadX 10043 8192 4096 4096 NT_STATUS_OK
ReadX 10043 12288 4096 4096 NT_STATUS_OK
WriteX 10047 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10047 258 NT_STATUS_OK
WriteX 10047 0 12006 12006 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 0 4096 4096 NT_STATUS_OK
Close 10048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10049 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10052 NT_STATUS_OK
Close 10052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10051 4096 4096 4096 NT_STATUS_OK
ReadX 10051 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10054 NT_STATUS_OK
WriteX 10054 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10054 258 NT_STATUS_OK
WriteX 10054 0 11991 11991 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10055 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10055 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10059 NT_STATUS_OK
SET_FILE_INFORMATION 10059 1004 NT_STATUS_OK
Close 10059 NT_STATUS_OK
WriteX 10055 0 4096 4096 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10063 NT_STATUS_OK
Close 10063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10062 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
ReadX 10062 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
WriteX 10062 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
Close 10038 NT_STATUS_OK
WriteX 10042 0 19054 19054 NT_STATUS_OK
WriteX 10062 0 12288 12288 NT_STATUS_OK
Close 10058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10065 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10042 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 61440 61440 NT_STATUS_OK
ReadX 10069 61440 4096 4096 NT_STATUS_OK
ReadX 10069 65536 61440 61440 NT_STATUS_OK
ReadX 10069 126976 4096 4096 NT_STATUS_OK
ReadX 10069 131072 61440 61440 NT_STATUS_OK
ReadX 10069 192512 4096 4096 NT_STATUS_OK
ReadX 10069 196608 61440 61440 NT_STATUS_OK
ReadX 10069 258048 4096 4096 NT_STATUS_OK
ReadX 10069 262144 61440 61440 NT_STATUS_OK
ReadX 10069 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10070 NT_STATUS_OK
ReadX 10070 0 61440 61440 NT_STATUS_OK
ReadX 10070 61440 4096 4096 NT_STATUS_OK
ReadX 10070 65536 61440 61440 NT_STATUS_OK
ReadX 10070 126976 4096 4096 NT_STATUS_OK
ReadX 10070 131072 61440 61440 NT_STATUS_OK
ReadX 10070 192512 4096 4096 NT_STATUS_OK
ReadX 10070 196608 61440 61440 NT_STATUS_OK
ReadX 10070 258048 4096 4096 NT_STATUS_OK
ReadX 10070 262144 61440 61440 NT_STATUS_OK
ReadX 10070 323584 4096 4096 NT_STATUS_OK
ReadX 10070 327680 61440 61440 NT_STATUS_OK
ReadX 10070 389120 4096 4096 NT_STATUS_OK
ReadX 10070 393216 61440 61440 NT_STATUS_OK
ReadX 10070 454656 4096 4096 NT_STATUS_OK
ReadX 10070 458752 61440 61440 NT_STATUS_OK
ReadX 10070 520192 4096 4096 NT_STATUS_OK
ReadX 10070 524288 61440 61440 NT_STATUS_OK
ReadX 10070 585728 4096 4096 NT_STATUS_OK
ReadX 10070 589824 61440 61440 NT_STATUS_OK
ReadX 10070 651264 4096 4096 NT_STATUS_OK
ReadX 10070 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 61440 61440 NT_STATUS_OK
ReadX 10071 61440 4096 4096 NT_STATUS_OK
ReadX 10071 65536 61440 61440 NT_STATUS_OK
ReadX 10071 126976 4096 4096 NT_STATUS_OK
ReadX 10071 131072 61440 61440 NT_STATUS_OK
ReadX 10071 192512 4096 4096 NT_STATUS_OK
ReadX 10071 196608 61440 61440 NT_STATUS_OK
ReadX 10071 258048 4096 4096 NT_STATUS_OK
ReadX 10071 262144 61440 61440 NT_STATUS_OK
ReadX 10071 323584 4096 4096 NT_STATUS_OK
ReadX 10071 327680 61440 61440 NT_STATUS_OK
ReadX 10071 389120 4096 4096 NT_STATUS_OK
ReadX 10071 393216 61440 61440 NT_STATUS_OK
ReadX 10071 454656 4096 4096 NT_STATUS_OK
ReadX 10071 458752 61440 61440 NT_STATUS_OK
ReadX 10071 520192 4096 4096 NT_STATUS_OK
ReadX 10071 524288 61440 61440 NT_STATUS_OK
ReadX 10071 585728 4096 4096 NT_STATUS_OK
ReadX 10071 589824 61440 61440 NT_STATUS_OK
ReadX 10071 651264 4096 4096 NT_STATUS_OK
ReadX 10071 655360 61440 61440 NT_STATUS_OK
ReadX 10071 716800 4096 4096 NT_STATUS_OK
ReadX 10071 720896 61440 61440 NT_STATUS_OK
ReadX 10071 782336 4096 4096 NT_STATUS_OK
ReadX 10071 786432 61440 61440 NT_STATUS_OK
ReadX 10071 847872 4096 4096 NT_STATUS_OK
ReadX 10071 851968 61440 61440 NT_STATUS_OK
ReadX 10071 913408 4096 4096 NT_STATUS_OK
ReadX 10071 917504 61440 61440 NT_STATUS_OK
ReadX 10071 978944 4096 4096 NT_STATUS_OK
ReadX 10071 983040 61440 61440 NT_STATUS_OK
ReadX 10071 1044480 4096 4096 NT_STATUS_OK
ReadX 10071 1048576 61440 61440 NT_STATUS_OK
ReadX 10071 1110016 4096 4096 NT_STATUS_OK
ReadX 10071 1114112 61440 61440 NT_STATUS_OK
ReadX 10071 1175552 4096 4096 NT_STATUS_OK
ReadX 10071 1179648 61440 61440 NT_STATUS_OK
ReadX 10071 1241088 4096 4096 NT_STATUS_OK
ReadX 10071 1245184 61440 61440 NT_STATUS_OK
ReadX 10071 1306624 4096 4096 NT_STATUS_OK
ReadX 10071 1310720 61440 61440 NT_STATUS_OK
ReadX 10071 1372160 4096 4096 NT_STATUS_OK
ReadX 10071 1376256 61440 61440 NT_STATUS_OK
ReadX 10071 1437696 4096 4096 NT_STATUS_OK
ReadX 10071 1441792 61440 61440 NT_STATUS_OK
ReadX 10071 1503232 4096 4096 NT_STATUS_OK
ReadX 10071 1507328 61440 61440 NT_STATUS_OK
ReadX 10071 1568768 4096 4096 NT_STATUS_OK
ReadX 10071 1572864 61440 61440 NT_STATUS_OK
ReadX 10071 1634304 4096 4096 NT_STATUS_OK
ReadX 10071 1638400 61440 61440 NT_STATUS_OK
ReadX 10071 1699840 4096 4096 NT_STATUS_OK
ReadX 10071 1703936 61440 61440 NT_STATUS_OK
ReadX 10071 1765376 4096 4096 NT_STATUS_OK
ReadX 10071 1769472 61440 61440 NT_STATUS_OK
ReadX 10071 1830912 4096 4096 NT_STATUS_OK
ReadX 10071 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10072 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10078 NT_STATUS_OK
QUERY_FILE_INFORMATION 10078 1004 NT_STATUS_OK
WriteX 10078 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10078 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10079 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10080 NT_STATUS_OK
WriteX 10080 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 491 491 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10078 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10084 NT_STATUS_OK
WriteX 10084 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 258 NT_STATUS_OK
WriteX 10084 0 543 543 NT_STATUS_OK
Close 10084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10085 NT_STATUS_OK
ReadX 10085 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Close 10070 NT_STATUS_OK
Close 10071 NT_STATUS_OK
Close 10085 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Close 10075 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10093 NT_STATUS_OK
ReadX 10093 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10098 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 1004 NT_STATUS_OK
WriteX 10098 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 258 NT_STATUS_OK
WriteX 10098 0 2048 2048 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10099 NT_STATUS_OK
ReadX 10099 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10099 0 4096 4096 NT_STATUS_OK
Flush 10099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10104 NT_STATUS_OK
WriteX 10104 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10104 258 NT_STATUS_OK
WriteX 10104 0 2048 2048 NT_STATUS_OK
Close 10104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10110 NT_STATUS_OK
WriteX 10110 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 258 NT_STATUS_OK
WriteX 10110 0 2048 2048 NT_STATUS_OK
Close 10110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 2048 2048 NT_STATUS_OK
ReadX 10089 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10105 0 4096 4096 NT_STATUS_OK
WriteX 10089 0 8192 8192 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
WriteX 10091 0 4096 4096 NT_STATUS_OK
ReadX 10105 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10114 NT_STATUS_OK
ReadX 10114 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10115 NT_STATUS_OK
QUERY_FILE_INFORMATION 10115 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10114 NT_STATUS_OK
Close 10090 NT_STATUS_OK
Close 10091 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10089 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10122 NT_STATUS_OK
ReadX 10122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10124 NT_STATUS_OK
ReadX 10124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10125 NT_STATUS_OK
ReadX 10125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10135 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 1004 NT_STATUS_OK
WriteX 10135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
WriteX 10135 0 2048 2048 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10136 NT_STATUS_OK
ReadX 10136 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10137 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10143 NT_STATUS_OK
QUERY_FILE_INFORMATION 10143 1004 NT_STATUS_OK
WriteX 10143 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10143 258 NT_STATUS_OK
WriteX 10143 0 2048 2048 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10136 0 4096 4096 NT_STATUS_OK
Flush 10136 NT_STATUS_OK
WriteX 10144 0 4096 4096 NT_STATUS_OK
Flush 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10136 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10144 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10138 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10146 NT_STATUS_OK
WriteX 10146 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
WriteX 10146 0 4096 4096 NT_STATUS_OK
Close 10146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10147 NT_STATUS_OK
ReadX 10147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10148 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10149 NT_STATUS_OK
WriteX 10149 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 258 NT_STATUS_OK
WriteX 10149 0 4096 4096 NT_STATUS_OK
Close 10149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10150 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10150 0 4096 4096 NT_STATUS_OK
Close 10147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10127 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10123 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10156 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10157 NT_STATUS_OK
WriteX 10157 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10157 258 NT_STATUS_OK
WriteX 10157 0 2048 2048 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10172 NT_STATUS_OK
QUERY_FILE_INFORMATION 10172 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10167 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10174 NT_STATUS_OK
QUERY_FILE_INFORMATION 10174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10181 NT_STATUS_OK
ReadX 10181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10194 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 258 NT_STATUS_OK
WriteX 10194 0 2048 2048 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10197 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10206 NT_STATUS_OK
QUERY_FILE_INFORMATION 10206 1004 NT_STATUS_OK
WriteX 10206 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10206 258 NT_STATUS_OK
WriteX 10206 0 2048 2048 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10214 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 1004 NT_STATUS_OK
WriteX 10214 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 258 NT_STATUS_OK
WriteX 10214 0 2048 2048 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10195 0 4096 4096 NT_STATUS_OK
Flush 10195 NT_STATUS_OK
WriteX 10207 0 4096 4096 NT_STATUS_OK
Flush 10207 NT_STATUS_OK
WriteX 10215 0 4096 4096 NT_STATUS_OK
Flush 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10195 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10207 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10215 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10197 4096 16384 16384 NT_STATUS_OK
ReadX 10177 4096 16384 16384 NT_STATUS_OK
ReadX 10209 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 2048 2048 NT_STATUS_OK
WriteX 10217 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10218 NT_STATUS_OK
QUERY_FILE_INFORMATION 10218 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Close 10181 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10183 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10220 NT_STATUS_OK
QUERY_FILE_INFORMATION 10220 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10222 NT_STATUS_OK
QUERY_FILE_INFORMATION 10222 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10225 4096 16384 16384 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
WriteX 10228 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 8192 8192 NT_STATUS_OK
ReadX 10231 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
ReadX 10245 8192 4096 4096 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
WriteX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10246 0 4096 4096 NT_STATUS_OK
ReadX 10246 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
WriteX 10228 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10251 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 1004 NT_STATUS_OK
WriteX 10251 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 258 NT_STATUS_OK
WriteX 10251 0 2048 2048 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
ReadX 10254 4096 4096 4096 NT_STATUS_OK
WriteX 10254 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
ReadX 10256 4096 4096 4096 NT_STATUS_OK
WriteX 10256 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10257 NT_STATUS_OK
QUERY_FILE_INFORMATION 10257 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10240 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10259 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 4096 4096 NT_STATUS_OK
ReadX 10259 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
ReadX 10260 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10277 NT_STATUS_OK
QUERY_FILE_INFORMATION 10277 1004 NT_STATUS_OK
WriteX 10277 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10277 258 NT_STATUS_OK
WriteX 10277 0 2048 2048 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10278 NT_STATUS_OK
ReadX 10278 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10278 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10283 NT_STATUS_OK
QUERY_FILE_INFORMATION 10283 1004 NT_STATUS_OK
WriteX 10283 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10283 258 NT_STATUS_OK
WriteX 10283 0 2048 2048 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10284 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10267 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10285 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10287 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 61440 4096 4096 NT_STATUS_OK
ReadX 10289 126976 4096 4096 NT_STATUS_OK
WriteX 10289 0 65536 65536 NT_STATUS_OK
WriteX 10289 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 61440 4096 4096 NT_STATUS_OK
ReadX 10290 126976 4096 4096 NT_STATUS_OK
ReadX 10290 192512 4096 4096 NT_STATUS_OK
ReadX 10290 258048 4096 4096 NT_STATUS_OK
WriteX 10290 0 65536 65536 NT_STATUS_OK
WriteX 10290 65536 65536 65536 NT_STATUS_OK
WriteX 10290 131072 65536 65536 NT_STATUS_OK
WriteX 10290 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 61440 4096 4096 NT_STATUS_OK
ReadX 10291 126976 4096 4096 NT_STATUS_OK
ReadX 10291 192512 4096 4096 NT_STATUS_OK
ReadX 10291 258048 4096 4096 NT_STATUS_OK
ReadX 10291 323584 4096 4096 NT_STATUS_OK
ReadX 10291 389120 4096 4096 NT_STATUS_OK
ReadX 10291 454656 4096 4096 NT_STATUS_OK
ReadX 10291 520192 4096 4096 NT_STATUS_OK
WriteX 10291 0 65536 65536 NT_STATUS_OK
WriteX 10291 65536 65536 65536 NT_STATUS_OK
WriteX 10291 131072 65536 65536 NT_STATUS_OK
WriteX 10291 196608 65536 65536 NT_STATUS_OK
WriteX 10291 262144 65536 65536 NT_STATUS_OK
WriteX 10291 327680 65536 65536 NT_STATUS_OK
WriteX 10291 393216 65536 65536 NT_STATUS_OK
WriteX 10291 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10292 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10292 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10292 8192 4096 4096 NT_STATUS_OK
ReadX 10292 12288 4096 4096 NT_STATUS_OK
ReadX 10292 16384 4096 4096 NT_STATUS_OK
ReadX 10292 20480 4096 4096 NT_STATUS_OK
ReadX 10292 24576 4096 4096 NT_STATUS_OK
ReadX 10292 28672 4096 4096 NT_STATUS_OK
ReadX 10292 32768 4096 4096 NT_STATUS_OK
ReadX 10292 36864 4096 4096 NT_STATUS_OK
ReadX 10292 40960 4096 4096 NT_STATUS_OK
ReadX 10292 45056 4096 4096 NT_STATUS_OK
ReadX 10292 49152 4096 4096 NT_STATUS_OK
ReadX 10292 53248 4096 4096 NT_STATUS_OK
ReadX 10292 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10292 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10295 NT_STATUS_OK
WriteX 10295 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10295 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10295 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
WriteX 10295 0 57088 57088 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
Flush 10295 NT_STATUS_OK
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10296 NT_STATUS_OK
SET_FILE_INFORMATION 10296 1004 NT_STATUS_OK
Close 10296 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10299 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10300 NT_STATUS_OK
WriteX 10300 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 0 51456 51456 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
Flush 10300 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10304 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10309 NT_STATUS_OK
WriteX 10309 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10309 258 NT_STATUS_OK
WriteX 10309 0 53077 53077 NT_STATUS_OK
Close 10309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10310 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
WriteX 10310 0 65536 65536 NT_STATUS_OK
WriteX 10310 65536 1856 1856 NT_STATUS_OK
WriteX 10310 0 4096 4096 NT_STATUS_OK
Flush 10310 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
WriteX 10310 0 4096 4096 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10319 NT_STATUS_OK
WriteX 10319 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 7983 7983 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
WriteX 10324 0 65536 65536 NT_STATUS_OK
WriteX 10324 65536 65536 65536 NT_STATUS_OK
WriteX 10324 131072 65536 65536 NT_STATUS_OK
WriteX 10324 196608 65536 65536 NT_STATUS_OK
WriteX 10324 262144 65536 65536 NT_STATUS_OK
WriteX 10324 327680 65536 65536 NT_STATUS_OK
WriteX 10324 393216 65536 65536 NT_STATUS_OK
WriteX 10324 458752 46731 46731 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10325 NT_STATUS_OK
WriteX 10325 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10314 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
WriteX 10325 0 65536 65536 NT_STATUS_OK
WriteX 10325 65536 22848 22848 NT_STATUS_OK
WriteX 10325 0 4096 4096 NT_STATUS_OK
Flush 10325 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
WriteX 10325 0 4096 4096 NT_STATUS_OK
Close 10325 NT_STATUS_OK
Close 10314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10327 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10329 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10330 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10330 1004 NT_STATUS_OK
ReadX 10330 8192 4096 4096 NT_STATUS_OK
ReadX 10330 12288 4096 4096 NT_STATUS_OK
ReadX 10330 16384 4096 4096 NT_STATUS_OK
ReadX 10330 20480 4096 4096 NT_STATUS_OK
ReadX 10330 24576 4096 4096 NT_STATUS_OK
ReadX 10330 28672 4096 4096 NT_STATUS_OK
ReadX 10330 32768 4096 4096 NT_STATUS_OK
ReadX 10330 36864 4096 4096 NT_STATUS_OK
ReadX 10330 40960 4096 4096 NT_STATUS_OK
ReadX 10330 45056 4096 4096 NT_STATUS_OK
ReadX 10330 49152 4096 4096 NT_STATUS_OK
ReadX 10330 53248 4096 4096 NT_STATUS_OK
ReadX 10330 57344 4096 4096 NT_STATUS_OK
ReadX 10330 61440 4096 4096 NT_STATUS_OK
ReadX 10330 65536 4096 4096 NT_STATUS_OK
ReadX 10330 69632 4096 4096 NT_STATUS_OK
ReadX 10330 73728 4096 4096 NT_STATUS_OK
ReadX 10330 77824 4096 4096 NT_STATUS_OK
ReadX 10330 81920 4096 4096 NT_STATUS_OK
ReadX 10330 86016 4096 4096 NT_STATUS_OK
ReadX 10330 90112 4096 4096 NT_STATUS_OK
ReadX 10330 94208 4096 4096 NT_STATUS_OK
ReadX 10330 98304 4096 4096 NT_STATUS_OK
ReadX 10330 102400 4096 4096 NT_STATUS_OK
ReadX 10330 106496 4096 4096 NT_STATUS_OK
ReadX 10330 110592 4096 4096 NT_STATUS_OK
ReadX 10330 114688 4096 4096 NT_STATUS_OK
ReadX 10330 118784 4096 4096 NT_STATUS_OK
ReadX 10330 122880 4096 4096 NT_STATUS_OK
ReadX 10330 126976 4096 4096 NT_STATUS_OK
ReadX 10330 131072 4096 4096 NT_STATUS_OK
ReadX 10330 135168 4096 4096 NT_STATUS_OK
ReadX 10330 139264 4096 4096 NT_STATUS_OK
ReadX 10330 143360 4096 4096 NT_STATUS_OK
ReadX 10330 147456 4096 4096 NT_STATUS_OK
ReadX 10330 151552 4096 4096 NT_STATUS_OK
ReadX 10330 155648 4096 4096 NT_STATUS_OK
ReadX 10330 159744 4096 4096 NT_STATUS_OK
ReadX 10330 163840 4096 4096 NT_STATUS_OK
ReadX 10330 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10330 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10331 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10333 NT_STATUS_OK
WriteX 10333 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10333 258 NT_STATUS_OK
Close 10330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10334 NT_STATUS_OK
SET_FILE_INFORMATION 10334 1004 NT_STATUS_OK
Close 10334 NT_STATUS_OK
WriteX 10333 0 42388 42388 NT_STATUS_OK
Close 10333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
ReadX 10337 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10338 NT_STATUS_OK
WriteX 10338 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
SET_FILE_INFORMATION 10338 1004 NT_STATUS_OK
WriteX 10338 0 42652 42652 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10340 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
ReadX 10342 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10347 NT_STATUS_OK
WriteX 10347 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10347 258 NT_STATUS_OK
WriteX 10347 0 65536 65536 NT_STATUS_OK
WriteX 10347 65536 49 49 NT_STATUS_OK
Close 10347 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 61440 61440 NT_STATUS_OK
ReadX 10348 61440 4096 4096 NT_STATUS_OK
ReadX 10348 65536 61440 61440 NT_STATUS_OK
ReadX 10348 126976 4096 4096 NT_STATUS_OK
ReadX 10348 131072 61440 61440 NT_STATUS_OK
ReadX 10348 192512 4096 4096 NT_STATUS_OK
ReadX 10348 196608 61440 61440 NT_STATUS_OK
ReadX 10348 258048 4096 4096 NT_STATUS_OK
ReadX 10348 262144 61440 61440 NT_STATUS_OK
ReadX 10348 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 61440 61440 NT_STATUS_OK
ReadX 10349 61440 4096 4096 NT_STATUS_OK
ReadX 10349 65536 61440 61440 NT_STATUS_OK
ReadX 10349 126976 4096 4096 NT_STATUS_OK
ReadX 10349 131072 61440 61440 NT_STATUS_OK
ReadX 10349 192512 4096 4096 NT_STATUS_OK
ReadX 10349 196608 61440 61440 NT_STATUS_OK
ReadX 10349 258048 4096 4096 NT_STATUS_OK
ReadX 10349 262144 61440 61440 NT_STATUS_OK
ReadX 10349 323584 4096 4096 NT_STATUS_OK
ReadX 10349 327680 61440 61440 NT_STATUS_OK
ReadX 10349 389120 4096 4096 NT_STATUS_OK
ReadX 10349 393216 61440 61440 NT_STATUS_OK
ReadX 10349 454656 4096 4096 NT_STATUS_OK
ReadX 10349 458752 61440 61440 NT_STATUS_OK
ReadX 10349 520192 4096 4096 NT_STATUS_OK
ReadX 10349 524288 61440 61440 NT_STATUS_OK
ReadX 10349 585728 4096 4096 NT_STATUS_OK
ReadX 10349 589824 61440 61440 NT_STATUS_OK
ReadX 10349 651264 4096 4096 NT_STATUS_OK
ReadX 10349 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10350 NT_STATUS_OK
ReadX 10350 0 61440 61440 NT_STATUS_OK
ReadX 10350 61440 4096 4096 NT_STATUS_OK
ReadX 10350 65536 61440 61440 NT_STATUS_OK
ReadX 10350 126976 4096 4096 NT_STATUS_OK
ReadX 10350 131072 61440 61440 NT_STATUS_OK
ReadX 10350 192512 4096 4096 NT_STATUS_OK
ReadX 10350 196608 61440 61440 NT_STATUS_OK
ReadX 10350 258048 4096 4096 NT_STATUS_OK
ReadX 10350 262144 61440 61440 NT_STATUS_OK
ReadX 10350 323584 4096 4096 NT_STATUS_OK
ReadX 10350 327680 61440 61440 NT_STATUS_OK
ReadX 10350 389120 4096 4096 NT_STATUS_OK
ReadX 10350 393216 61440 61440 NT_STATUS_OK
ReadX 10350 454656 4096 4096 NT_STATUS_OK
ReadX 10350 458752 61440 61440 NT_STATUS_OK
ReadX 10350 520192 4096 4096 NT_STATUS_OK
ReadX 10350 524288 61440 61440 NT_STATUS_OK
ReadX 10350 585728 4096 4096 NT_STATUS_OK
ReadX 10350 589824 61440 61440 NT_STATUS_OK
ReadX 10350 651264 4096 4096 NT_STATUS_OK
ReadX 10350 655360 61440 61440 NT_STATUS_OK
ReadX 10350 716800 4096 4096 NT_STATUS_OK
ReadX 10350 720896 61440 61440 NT_STATUS_OK
ReadX 10350 782336 4096 4096 NT_STATUS_OK
ReadX 10350 786432 61440 61440 NT_STATUS_OK
ReadX 10350 847872 4096 4096 NT_STATUS_OK
ReadX 10350 851968 61440 61440 NT_STATUS_OK
ReadX 10350 913408 4096 4096 NT_STATUS_OK
ReadX 10350 917504 61440 61440 NT_STATUS_OK
ReadX 10350 978944 4096 4096 NT_STATUS_OK
ReadX 10350 983040 61440 61440 NT_STATUS_OK
ReadX 10350 1044480 4096 4096 NT_STATUS_OK
ReadX 10350 1048576 61440 61440 NT_STATUS_OK
ReadX 10350 1110016 4096 4096 NT_STATUS_OK
ReadX 10350 1114112 61440 61440 NT_STATUS_OK
ReadX 10350 1175552 4096 4096 NT_STATUS_OK
ReadX 10350 1179648 61440 61440 NT_STATUS_OK
ReadX 10350 1241088 4096 4096 NT_STATUS_OK
ReadX 10350 1245184 61440 61440 NT_STATUS_OK
ReadX 10350 1306624 4096 4096 NT_STATUS_OK
ReadX 10350 1310720 61440 61440 NT_STATUS_OK
ReadX 10350 1372160 4096 4096 NT_STATUS_OK
ReadX 10350 1376256 61440 61440 NT_STATUS_OK
ReadX 10350 1437696 4096 4096 NT_STATUS_OK
ReadX 10350 1441792 61440 61440 NT_STATUS_OK
ReadX 10350 1503232 4096 4096 NT_STATUS_OK
ReadX 10350 1507328 61440 61440 NT_STATUS_OK
ReadX 10350 1568768 4096 4096 NT_STATUS_OK
ReadX 10350 1572864 61440 61440 NT_STATUS_OK
ReadX 10350 1634304 4096 4096 NT_STATUS_OK
ReadX 10350 1638400 61440 61440 NT_STATUS_OK
ReadX 10350 1699840 4096 4096 NT_STATUS_OK
ReadX 10350 1703936 61440 61440 NT_STATUS_OK
ReadX 10350 1765376 4096 4096 NT_STATUS_OK
ReadX 10350 1769472 61440 61440 NT_STATUS_OK
ReadX 10350 1830912 4096 4096 NT_STATUS_OK
ReadX 10350 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10352 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1005 NT_STATUS_OK
ReadX 10352 2156 24 24 NT_STATUS_OK
ReadX 10352 2139 276 276 NT_STATUS_OK
ReadX 10352 2136 14 14 NT_STATUS_OK
ReadX 10352 2136 7 7 NT_STATUS_OK
ReadX 10352 2138 12 12 NT_STATUS_OK
ReadX 10352 2137 8 8 NT_STATUS_OK
ReadX 10352 2135 15 15 NT_STATUS_OK
ReadX 10352 0 16 16 NT_STATUS_OK
ReadX 10352 16 2048 2048 NT_STATUS_OK
ReadX 10352 2064 2048 2048 NT_STATUS_OK
ReadX 10352 257 2048 2048 NT_STATUS_OK
ReadX 10352 385 2048 2048 NT_STATUS_OK
ReadX 10352 513 2048 2048 NT_STATUS_OK
ReadX 10352 641 2048 2048 NT_STATUS_OK
ReadX 10352 769 2048 2048 NT_STATUS_OK
ReadX 10352 897 2048 2048 NT_STATUS_OK
ReadX 10352 1025 2048 2048 NT_STATUS_OK
ReadX 10352 1153 2048 2048 NT_STATUS_OK
ReadX 10352 1281 2048 2048 NT_STATUS_OK
ReadX 10352 1409 2048 2048 NT_STATUS_OK
ReadX 10352 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10350 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10357 NT_STATUS_OK
WriteX 10357 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10357 258 NT_STATUS_OK
WriteX 10357 0 10575 10575 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10358 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
Close 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10362 NT_STATUS_OK
LockX 10362 2147483538 1 NT_STATUS_OK
UnlockX 10362 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1005 NT_STATUS_OK
ReadX 10362 0 512 512 NT_STATUS_OK
ReadX 10362 512 512 512 NT_STATUS_OK
ReadX 10362 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1004 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10363 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1005 NT_STATUS_OK
ReadX 10363 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10364 NT_STATUS_OK
LockX 10364 2147483538 1 NT_STATUS_OK
UnlockX 10364 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10364 1005 NT_STATUS_OK
ReadX 10364 0 512 512 NT_STATUS_OK
ReadX 10364 512 512 512 NT_STATUS_OK
ReadX 10364 1024 512 512 NT_STATUS_OK
ReadX 10364 288 20 20 NT_STATUS_OK
ReadX 10364 308 2084 2084 NT_STATUS_OK
ReadX 10364 388 2084 2084 NT_STATUS_OK
ReadX 10364 388 2084 2084 NT_STATUS_OK
ReadX 10351 2157 1386 1386 NT_STATUS_OK
ReadX 10364 2472 399 399 NT_STATUS_OK
ReadX 10364 3072 1536 1536 NT_STATUS_OK
ReadX 10364 544 149 149 NT_STATUS_OK
ReadX 10364 693 485 485 NT_STATUS_OK
Close 10364 NT_STATUS_OK
ReadX 10351 2157 4096 4096 NT_STATUS_OK
ReadX 10351 6253 4096 4096 NT_STATUS_OK
ReadX 10351 10349 4096 4096 NT_STATUS_OK
ReadX 10351 14445 4096 4096 NT_STATUS_OK
ReadX 10351 18541 4096 4096 NT_STATUS_OK
ReadX 10351 22637 256 256 NT_STATUS_OK
ReadX 10351 22893 4096 4096 NT_STATUS_OK
ReadX 10351 26989 4096 4096 NT_STATUS_OK
ReadX 10351 31085 4096 4096 NT_STATUS_OK
ReadX 10351 35181 4096 4096 NT_STATUS_OK
ReadX 10351 39277 4096 4096 NT_STATUS_OK
ReadX 10351 43373 4096 4096 NT_STATUS_OK
ReadX 10351 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10351 2157 1024 1024 NT_STATUS_OK
ReadX 10351 1667 4688 4688 NT_STATUS_OK
ReadX 10351 6355 3516 3516 NT_STATUS_OK
ReadX 10351 9871 16384 16384 NT_STATUS_OK
ReadX 10351 26255 3771 3771 NT_STATUS_OK
ReadX 10351 30026 2048 2048 NT_STATUS_OK
ReadX 10351 32074 1024 1024 NT_STATUS_OK
ReadX 10351 33098 6652 6652 NT_STATUS_OK
ReadX 10351 39750 16384 16384 NT_STATUS_OK
ReadX 10351 56134 10496 10496 NT_STATUS_OK
ReadX 10351 66630 1784 1784 NT_STATUS_OK
ReadX 10351 68414 90 90 NT_STATUS_OK
ReadX 10351 68504 273 273 NT_STATUS_OK
ReadX 10351 68777 1600 1600 NT_STATUS_OK
ReadX 10351 70377 640 640 NT_STATUS_OK
ReadX 10351 71017 1280 1280 NT_STATUS_OK
ReadX 10351 72297 8464 8464 NT_STATUS_OK
ReadX 10351 80761 158 158 NT_STATUS_OK
ReadX 10351 80919 912 912 NT_STATUS_OK
ReadX 10351 81831 1980 1980 NT_STATUS_OK
ReadX 10351 83811 2256 2256 NT_STATUS_OK
ReadX 10351 86067 400 400 NT_STATUS_OK
ReadX 10351 86467 252 252 NT_STATUS_OK
ReadX 10351 86719 42 42 NT_STATUS_OK
ReadX 10351 86761 725 725 NT_STATUS_OK
ReadX 10351 2009 512 512 NT_STATUS_OK
ReadX 10351 3895 9 9 NT_STATUS_OK
ReadX 10351 3781 46 46 NT_STATUS_OK
ReadX 10351 4059 92 92 NT_STATUS_OK
ReadX 10351 3781 92 92 NT_STATUS_OK
ReadX 10351 3986 184 184 NT_STATUS_OK
ReadX 10351 3987 16384 16384 NT_STATUS_OK
ReadX 10351 3902 16384 16384 NT_STATUS_OK
ReadX 10351 3781 10240 10240 NT_STATUS_OK
ReadX 10351 3821 16384 16384 NT_STATUS_OK
ReadX 10351 3891 935 935 NT_STATUS_OK
ReadX 10351 4060 10240 10240 NT_STATUS_OK
ReadX 10351 4059 184 184 NT_STATUS_OK
ReadX 10351 256 184 184 NT_STATUS_OK
ReadX 10351 256 1026 1026 NT_STATUS_OK
ReadX 10351 3901 326 326 NT_STATUS_OK
ReadX 10351 3899 652 652 NT_STATUS_OK
ReadX 10351 256 2 2 NT_STATUS_OK
ReadX 10351 258 4948 4948 NT_STATUS_OK
Close 10351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10369 NT_STATUS_OK
WriteX 10369 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 258 NT_STATUS_OK
WriteX 10369 0 65536 65536 NT_STATUS_OK
WriteX 10369 65536 65536 65536 NT_STATUS_OK
WriteX 10369 131072 65536 65536 NT_STATUS_OK
WriteX 10369 196608 65536 65536 NT_STATUS_OK
WriteX 10369 262144 65536 65536 NT_STATUS_OK
WriteX 10369 327680 65536 65536 NT_STATUS_OK
WriteX 10369 393216 65536 65536 NT_STATUS_OK
WriteX 10369 458752 65536 65536 NT_STATUS_OK
WriteX 10369 524288 65536 65536 NT_STATUS_OK
WriteX 10369 589824 35257 35257 NT_STATUS_OK
Close 10369 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10374 NT_STATUS_OK
WriteX 10374 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10374 258 NT_STATUS_OK
WriteX 10374 0 65536 65536 NT_STATUS_OK
WriteX 10374 65536 65536 65536 NT_STATUS_OK
WriteX 10374 131072 65536 65536 NT_STATUS_OK
WriteX 10374 196608 65536 65536 NT_STATUS_OK
WriteX 10374 262144 65536 65536 NT_STATUS_OK
WriteX 10374 327680 65536 65536 NT_STATUS_OK
WriteX 10374 393216 65536 65536 NT_STATUS_OK
WriteX 10374 458752 65536 65536 NT_STATUS_OK
WriteX 10374 524288 65536 65536 NT_STATUS_OK
WriteX 10374 589824 57598 57598 NT_STATUS_OK
Close 10374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10376 NT_STATUS_OK
WriteX 10376 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10376 258 NT_STATUS_OK
WriteX 10376 0 12543 12543 NT_STATUS_OK
Flush 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10382 NT_STATUS_OK
QUERY_FILE_INFORMATION 10382 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10382 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10382 1005 NT_STATUS_OK
ReadX 10382 1938 24 24 NT_STATUS_OK
ReadX 10382 1920 276 276 NT_STATUS_OK
ReadX 10382 1918 14 14 NT_STATUS_OK
ReadX 10382 1918 7 7 NT_STATUS_OK
ReadX 10382 1919 12 12 NT_STATUS_OK
ReadX 10382 1919 8 8 NT_STATUS_OK
ReadX 10382 1917 15 15 NT_STATUS_OK
ReadX 10382 0 16 16 NT_STATUS_OK
ReadX 10382 16 2048 2048 NT_STATUS_OK
ReadX 10382 2064 2048 2048 NT_STATUS_OK
ReadX 10382 257 2048 2048 NT_STATUS_OK
ReadX 10382 385 2048 2048 NT_STATUS_OK
ReadX 10382 513 2048 2048 NT_STATUS_OK
ReadX 10382 641 2048 2048 NT_STATUS_OK
ReadX 10382 769 2048 2048 NT_STATUS_OK
ReadX 10382 897 2048 2048 NT_STATUS_OK
ReadX 10382 1025 2048 2048 NT_STATUS_OK
ReadX 10382 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10387 NT_STATUS_OK
WriteX 10387 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 11588 11588 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
Close 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 11615 11615 NT_STATUS_OK
Flush 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10398 NT_STATUS_OK
Close 10398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10401 NT_STATUS_OK
WriteX 10401 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10401 258 NT_STATUS_OK
WriteX 10401 0 65536 65536 NT_STATUS_OK
WriteX 10401 65536 16050 16050 NT_STATUS_OK
Close 10401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10381 1939 64 64 NT_STATUS_OK
ReadX 10381 128 248 248 NT_STATUS_OK
ReadX 10381 128 568 568 NT_STATUS_OK
ReadX 10381 3872 1536 1536 NT_STATUS_OK
ReadX 10381 3456 2560 2560 NT_STATUS_OK
ReadX 10381 3136 512 512 NT_STATUS_OK
ReadX 10381 2880 4096 4096 NT_STATUS_OK
ReadX 10381 3264 3072 3072 NT_STATUS_OK
ReadX 10381 320 4096 4096 NT_STATUS_OK
ReadX 10381 1024 4096 4096 NT_STATUS_OK
ReadX 10381 3616 4096 4096 NT_STATUS_OK
ReadX 10381 1939 64 64 NT_STATUS_OK
ReadX 10381 128 248 248 NT_STATUS_OK
ReadX 10381 128 608 608 NT_STATUS_OK
ReadX 10381 2858 1024 1024 NT_STATUS_OK
ReadX 10381 2810 4096 4096 NT_STATUS_OK
ReadX 10381 2826 4096 4096 NT_STATUS_OK
ReadX 10381 2580 2048 2048 NT_STATUS_OK
ReadX 10381 2800 2560 2560 NT_STATUS_OK
ReadX 10381 2100 4096 4096 NT_STATUS_OK
ReadX 10381 2084 4096 4096 NT_STATUS_OK
ReadX 10381 868 4096 4096 NT_STATUS_OK
ReadX 10381 2324 4096 4096 NT_STATUS_OK
ReadX 10381 884 4096 4096 NT_STATUS_OK
ReadX 10381 2604 1024 1024 NT_STATUS_OK
ReadX 10381 580 4096 4096 NT_STATUS_OK
ReadX 10381 596 4096 4096 NT_STATUS_OK
ReadX 10381 2752 4096 4096 NT_STATUS_OK
ReadX 10381 2842 1024 1024 NT_STATUS_OK
ReadX 10381 660 4096 4096 NT_STATUS_OK
ReadX 10381 2720 4096 4096 NT_STATUS_OK
ReadX 10381 2736 4096 4096 NT_STATUS_OK
ReadX 10381 628 4096 4096 NT_STATUS_OK
ReadX 10381 2704 4096 4096 NT_STATUS_OK
ReadX 10381 1556 4096 4096 NT_STATUS_OK
ReadX 10381 576 4096 4096 NT_STATUS_OK
ReadX 10381 3168 1536 1536 NT_STATUS_OK
ReadX 10381 832 4096 4096 NT_STATUS_OK
ReadX 10381 1088 4096 4096 NT_STATUS_OK
ReadX 10381 1344 4096 4096 NT_STATUS_OK
ReadX 10381 1600 4096 4096 NT_STATUS_OK
ReadX 10381 1856 4096 4096 NT_STATUS_OK
ReadX 10381 2112 4096 4096 NT_STATUS_OK
ReadX 10381 1892 4096 4096 NT_STATUS_OK
ReadX 10381 820 4096 4096 NT_STATUS_OK
ReadX 10381 788 4096 4096 NT_STATUS_OK
ReadX 10381 1604 4096 4096 NT_STATUS_OK
ReadX 10381 3648 4096 4096 NT_STATUS_OK
ReadX 10381 2608 4096 4096 NT_STATUS_OK
ReadX 10381 548 4096 4096 NT_STATUS_OK
ReadX 10381 740 4096 4096 NT_STATUS_OK
ReadX 10381 1344 4096 4096 NT_STATUS_OK
ReadX 10381 3392 4096 4096 NT_STATUS_OK
ReadX 10381 3904 4096 4096 NT_STATUS_OK
ReadX 10381 644 4096 4096 NT_STATUS_OK
ReadX 10381 676 4096 4096 NT_STATUS_OK
ReadX 10381 2688 4096 4096 NT_STATUS_OK
ReadX 10381 320 4096 4096 NT_STATUS_OK
ReadX 10381 900 4096 4096 NT_STATUS_OK
ReadX 10381 1908 4096 4096 NT_STATUS_OK
ReadX 10381 852 4096 4096 NT_STATUS_OK
ReadX 10381 724 4096 4096 NT_STATUS_OK
ReadX 10381 2292 4096 4096 NT_STATUS_OK
ReadX 10381 612 4096 4096 NT_STATUS_OK
ReadX 10381 388 4096 4096 NT_STATUS_OK
ReadX 10381 2368 4096 4096 NT_STATUS_OK
ReadX 10381 2624 4096 4096 NT_STATUS_OK
ReadX 10381 500 4096 4096 NT_STATUS_OK
ReadX 10381 356 4096 4096 NT_STATUS_OK
ReadX 10381 1024 4096 4096 NT_STATUS_OK
ReadX 10381 576 4096 4096 NT_STATUS_OK
ReadX 10381 340 4096 4096 NT_STATUS_OK
ReadX 10381 420 4096 4096 NT_STATUS_OK
ReadX 10381 1600 4096 4096 NT_STATUS_OK
ReadX 10381 404 4096 4096 NT_STATUS_OK
ReadX 10381 1428 4096 4096 NT_STATUS_OK
ReadX 10381 2656 4096 4096 NT_STATUS_OK
ReadX 10381 2624 4096 4096 NT_STATUS_OK
ReadX 10381 452 4096 4096 NT_STATUS_OK
ReadX 10381 692 4096 4096 NT_STATUS_OK
ReadX 10381 564 4096 4096 NT_STATUS_OK
ReadX 10381 372 4096 4096 NT_STATUS_OK
ReadX 10381 468 4096 4096 NT_STATUS_OK
ReadX 10381 484 4096 4096 NT_STATUS_OK
ReadX 10381 1088 4096 4096 NT_STATUS_OK
ReadX 10381 1924 4096 4096 NT_STATUS_OK
ReadX 10381 2768 4096 4096 NT_STATUS_OK
ReadX 10381 832 4096 4096 NT_STATUS_OK
ReadX 10381 836 4096 4096 NT_STATUS_OK
ReadX 10381 1856 4096 4096 NT_STATUS_OK
ReadX 10381 2640 4096 4096 NT_STATUS_OK
ReadX 10381 436 4096 4096 NT_STATUS_OK
ReadX 10381 1828 4096 4096 NT_STATUS_OK
ReadX 10381 804 4096 4096 NT_STATUS_OK
ReadX 10381 1860 4096 4096 NT_STATUS_OK
ReadX 10381 1812 4096 4096 NT_STATUS_OK
ReadX 10381 756 4096 4096 NT_STATUS_OK
ReadX 10381 1636 4096 4096 NT_STATUS_OK
ReadX 10381 772 4096 4096 NT_STATUS_OK
ReadX 10381 2036 4096 4096 NT_STATUS_OK
ReadX 10381 1220 4096 4096 NT_STATUS_OK
ReadX 10381 1652 4096 4096 NT_STATUS_OK
ReadX 10381 2588 4096 4096 NT_STATUS_OK
ReadX 10381 916 4096 4096 NT_STATUS_OK
ReadX 10381 260 4096 4096 NT_STATUS_OK
ReadX 10381 932 4096 4096 NT_STATUS_OK
ReadX 10381 2624 4096 4096 NT_STATUS_OK
ReadX 10381 308 4096 4096 NT_STATUS_OK
ReadX 10381 292 4096 4096 NT_STATUS_OK
ReadX 10381 1140 4096 4096 NT_STATUS_OK
ReadX 10381 276 4096 4096 NT_STATUS_OK
ReadX 10381 2020 4096 4096 NT_STATUS_OK
ReadX 10381 2880 4096 4096 NT_STATUS_OK
ReadX 10381 516 4096 4096 NT_STATUS_OK
ReadX 10381 1844 4096 4096 NT_STATUS_OK
ReadX 10381 1124 4096 4096 NT_STATUS_OK
ReadX 10381 3136 4096 4096 NT_STATUS_OK
ReadX 10381 324 4096 4096 NT_STATUS_OK
ReadX 10381 1156 4096 4096 NT_STATUS_OK
ReadX 10381 1172 4096 4096 NT_STATUS_OK
ReadX 10381 2112 4096 4096 NT_STATUS_OK
ReadX 10381 2368 4096 4096 NT_STATUS_OK
ReadX 10381 964 4096 4096 NT_STATUS_OK
ReadX 10381 980 4096 4096 NT_STATUS_OK
ReadX 10381 1012 4096 4096 NT_STATUS_OK
ReadX 10381 532 4096 4096 NT_STATUS_OK
ReadX 10381 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10381 1620 4096 4096 NT_STATUS_OK
ReadX 10381 1604 4096 4096 NT_STATUS_OK
ReadX 10381 2116 4096 4096 NT_STATUS_OK
ReadX 10381 2132 4096 4096 NT_STATUS_OK
ReadX 10381 2148 4096 4096 NT_STATUS_OK
ReadX 10381 2276 4096 4096 NT_STATUS_OK
ReadX 10381 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10406 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1004 NT_STATUS_OK
Close 10361 NT_STATUS_OK
WriteX 10406 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1004 NT_STATUS_OK
Close 10363 NT_STATUS_OK
WriteX 10406 0 65536 65536 NT_STATUS_OK
WriteX 10406 65536 64850 64850 NT_STATUS_OK
Close 10406 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10408 NT_STATUS_OK
WriteX 10408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10408 258 NT_STATUS_OK
ReadX 10381 2068 4096 4096 NT_STATUS_OK
ReadX 10381 1588 4096 4096 NT_STATUS_OK
ReadX 10381 1572 4096 4096 NT_STATUS_OK
WriteX 10408 0 18630 18630 NT_STATUS_OK
Flush 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10410 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10381 612 4096 4096 NT_STATUS_OK
ReadX 10381 564 4096 4096 NT_STATUS_OK
ReadX 10381 1876 4096 4096 NT_STATUS_OK
ReadX 10381 628 4096 4096 NT_STATUS_OK
ReadX 10381 740 4096 4096 NT_STATUS_OK
ReadX 10381 724 4096 4096 NT_STATUS_OK
ReadX 10381 644 4096 4096 NT_STATUS_OK
ReadX 10381 2324 4096 4096 NT_STATUS_OK
ReadX 10381 660 4096 4096 NT_STATUS_OK
ReadX 10381 852 4096 4096 NT_STATUS_OK
ReadX 10381 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10381 2368 4096 4096 NT_STATUS_OK
ReadX 10381 1024 4096 4096 NT_STATUS_OK
ReadX 10381 320 4096 4096 NT_STATUS_OK
ReadX 10381 580 4096 4096 NT_STATUS_OK
ReadX 10381 3136 512 512 NT_STATUS_OK
ReadX 10381 2880 4096 4096 NT_STATUS_OK
Close 10381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 61440 4096 4096 NT_STATUS_OK
ReadX 10413 126976 4096 4096 NT_STATUS_OK
WriteX 10413 0 65536 65536 NT_STATUS_OK
WriteX 10413 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 61440 4096 4096 NT_STATUS_OK
ReadX 10414 126976 4096 4096 NT_STATUS_OK
ReadX 10414 192512 4096 4096 NT_STATUS_OK
ReadX 10414 258048 4096 4096 NT_STATUS_OK
WriteX 10414 0 65536 65536 NT_STATUS_OK
WriteX 10414 65536 65536 65536 NT_STATUS_OK
WriteX 10414 131072 65536 65536 NT_STATUS_OK
WriteX 10414 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 61440 4096 4096 NT_STATUS_OK
ReadX 10415 126976 4096 4096 NT_STATUS_OK
ReadX 10415 192512 4096 4096 NT_STATUS_OK
ReadX 10415 258048 4096 4096 NT_STATUS_OK
ReadX 10415 323584 4096 4096 NT_STATUS_OK
ReadX 10415 389120 4096 4096 NT_STATUS_OK
ReadX 10415 454656 4096 4096 NT_STATUS_OK
ReadX 10415 520192 4096 4096 NT_STATUS_OK
WriteX 10415 0 65536 65536 NT_STATUS_OK
WriteX 10415 65536 65536 65536 NT_STATUS_OK
WriteX 10415 131072 65536 65536 NT_STATUS_OK
WriteX 10415 196608 65536 65536 NT_STATUS_OK
WriteX 10415 262144 65536 65536 NT_STATUS_OK
WriteX 10415 327680 65536 65536 NT_STATUS_OK
WriteX 10415 393216 65536 65536 NT_STATUS_OK
WriteX 10415 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10417 NT_STATUS_OK
Close 10417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10418 NT_STATUS_OK
WriteX 10418 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10416 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10420 NT_STATUS_OK
Close 10420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10423 NT_STATUS_OK
WriteX 10423 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10423 258 NT_STATUS_OK
WriteX 10423 0 62591 62591 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10428 NT_STATUS_OK
WriteX 10428 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10428 258 NT_STATUS_OK
WriteX 10428 0 10845 10845 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10433 NT_STATUS_OK
WriteX 10433 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10433 258 NT_STATUS_OK
WriteX 10433 0 30118 30118 NT_STATUS_OK
Close 10433 NT_STATUS_OK
WriteX 10416 0 4096 4096 NT_STATUS_OK
WriteX 10418 0 64 64 NT_STATUS_OK
Close 10418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 61440 61440 NT_STATUS_OK
ReadX 10435 61440 4096 4096 NT_STATUS_OK
ReadX 10435 65536 61440 61440 NT_STATUS_OK
ReadX 10435 126976 4096 4096 NT_STATUS_OK
ReadX 10435 131072 61440 61440 NT_STATUS_OK
ReadX 10435 192512 4096 4096 NT_STATUS_OK
ReadX 10435 196608 61440 61440 NT_STATUS_OK
ReadX 10435 258048 4096 4096 NT_STATUS_OK
ReadX 10435 262144 61440 61440 NT_STATUS_OK
ReadX 10435 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 61440 61440 NT_STATUS_OK
ReadX 10436 61440 4096 4096 NT_STATUS_OK
ReadX 10436 65536 61440 61440 NT_STATUS_OK
ReadX 10436 126976 4096 4096 NT_STATUS_OK
ReadX 10436 131072 61440 61440 NT_STATUS_OK
ReadX 10436 192512 4096 4096 NT_STATUS_OK
ReadX 10436 196608 61440 61440 NT_STATUS_OK
ReadX 10436 258048 4096 4096 NT_STATUS_OK
ReadX 10436 262144 61440 61440 NT_STATUS_OK
ReadX 10436 323584 4096 4096 NT_STATUS_OK
ReadX 10436 327680 61440 61440 NT_STATUS_OK
ReadX 10436 389120 4096 4096 NT_STATUS_OK
ReadX 10436 393216 61440 61440 NT_STATUS_OK
ReadX 10436 454656 4096 4096 NT_STATUS_OK
ReadX 10436 458752 61440 61440 NT_STATUS_OK
ReadX 10436 520192 4096 4096 NT_STATUS_OK
ReadX 10436 524288 61440 61440 NT_STATUS_OK
ReadX 10436 585728 4096 4096 NT_STATUS_OK
ReadX 10436 589824 61440 61440 NT_STATUS_OK
ReadX 10436 651264 4096 4096 NT_STATUS_OK
ReadX 10436 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 61440 61440 NT_STATUS_OK
ReadX 10437 61440 4096 4096 NT_STATUS_OK
ReadX 10437 65536 61440 61440 NT_STATUS_OK
ReadX 10437 126976 4096 4096 NT_STATUS_OK
ReadX 10437 131072 61440 61440 NT_STATUS_OK
ReadX 10437 192512 4096 4096 NT_STATUS_OK
ReadX 10437 196608 61440 61440 NT_STATUS_OK
ReadX 10437 258048 4096 4096 NT_STATUS_OK
ReadX 10437 262144 61440 61440 NT_STATUS_OK
ReadX 10437 323584 4096 4096 NT_STATUS_OK
ReadX 10437 327680 61440 61440 NT_STATUS_OK
ReadX 10437 389120 4096 4096 NT_STATUS_OK
ReadX 10437 393216 61440 61440 NT_STATUS_OK
ReadX 10437 454656 4096 4096 NT_STATUS_OK
ReadX 10437 458752 61440 61440 NT_STATUS_OK
ReadX 10437 520192 4096 4096 NT_STATUS_OK
ReadX 10437 524288 61440 61440 NT_STATUS_OK
ReadX 10437 585728 4096 4096 NT_STATUS_OK
ReadX 10437 589824 61440 61440 NT_STATUS_OK
ReadX 10437 651264 4096 4096 NT_STATUS_OK
ReadX 10437 655360 61440 61440 NT_STATUS_OK
ReadX 10437 716800 4096 4096 NT_STATUS_OK
ReadX 10437 720896 61440 61440 NT_STATUS_OK
ReadX 10437 782336 4096 4096 NT_STATUS_OK
ReadX 10437 786432 61440 61440 NT_STATUS_OK
ReadX 10437 847872 4096 4096 NT_STATUS_OK
ReadX 10437 851968 61440 61440 NT_STATUS_OK
ReadX 10437 913408 4096 4096 NT_STATUS_OK
ReadX 10437 917504 61440 61440 NT_STATUS_OK
ReadX 10437 978944 4096 4096 NT_STATUS_OK
ReadX 10437 983040 61440 61440 NT_STATUS_OK
ReadX 10437 1044480 4096 4096 NT_STATUS_OK
ReadX 10437 1048576 61440 61440 NT_STATUS_OK
ReadX 10437 1110016 4096 4096 NT_STATUS_OK
ReadX 10437 1114112 61440 61440 NT_STATUS_OK
ReadX 10437 1175552 4096 4096 NT_STATUS_OK
ReadX 10437 1179648 61440 61440 NT_STATUS_OK
ReadX 10437 1241088 4096 4096 NT_STATUS_OK
ReadX 10437 1245184 61440 61440 NT_STATUS_OK
ReadX 10437 1306624 4096 4096 NT_STATUS_OK
ReadX 10437 1310720 61440 61440 NT_STATUS_OK
ReadX 10437 1372160 4096 4096 NT_STATUS_OK
ReadX 10437 1376256 61440 61440 NT_STATUS_OK
ReadX 10437 1437696 4096 4096 NT_STATUS_OK
ReadX 10437 1441792 61440 61440 NT_STATUS_OK
ReadX 10437 1503232 4096 4096 NT_STATUS_OK
ReadX 10437 1507328 61440 61440 NT_STATUS_OK
ReadX 10437 1568768 4096 4096 NT_STATUS_OK
ReadX 10437 1572864 61440 61440 NT_STATUS_OK
ReadX 10437 1634304 4096 4096 NT_STATUS_OK
ReadX 10437 1638400 61440 61440 NT_STATUS_OK
ReadX 10437 1699840 4096 4096 NT_STATUS_OK
ReadX 10437 1703936 61440 61440 NT_STATUS_OK
ReadX 10437 1765376 4096 4096 NT_STATUS_OK
ReadX 10437 1769472 61440 61440 NT_STATUS_OK
ReadX 10437 1830912 4096 4096 NT_STATUS_OK
ReadX 10437 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
ReadX 10442 4096 4096 4096 NT_STATUS_OK
ReadX 10442 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10446 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10447 NT_STATUS_OK
Close 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 8192 8192 NT_STATUS_OK
ReadX 10450 8192 8192 8192 NT_STATUS_OK
ReadX 10450 16384 8192 8192 NT_STATUS_OK
ReadX 10450 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 10438 10438 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10458 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10461 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
ReadX 10464 4096 4096 4096 NT_STATUS_OK
ReadX 10464 8192 4096 4096 NT_STATUS_OK
ReadX 10464 12288 8192 8192 NT_STATUS_OK
ReadX 10464 20480 8192 8192 NT_STATUS_OK
ReadX 10464 28672 8192 8192 NT_STATUS_OK
ReadX 10464 36864 8192 8192 NT_STATUS_OK
ReadX 10464 45056 8192 8192 NT_STATUS_OK
ReadX 10464 53248 8192 8192 NT_STATUS_OK
ReadX 10464 61440 8192 8192 NT_STATUS_OK
ReadX 10464 69632 8192 8192 NT_STATUS_OK
ReadX 10464 77824 8192 8192 NT_STATUS_OK
ReadX 10464 86016 8192 8192 NT_STATUS_OK
ReadX 10464 94208 8192 8192 NT_STATUS_OK
ReadX 10464 102400 8192 8192 NT_STATUS_OK
ReadX 10464 110592 8192 8192 NT_STATUS_OK
ReadX 10464 118784 8192 8192 NT_STATUS_OK
ReadX 10464 126976 8192 8192 NT_STATUS_OK
ReadX 10464 135168 8192 8192 NT_STATUS_OK
ReadX 10464 143360 8192 8192 NT_STATUS_OK
ReadX 10464 151552 8192 8192 NT_STATUS_OK
ReadX 10464 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Close 10459 NT_STATUS_OK
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 28489 28489 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10472 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 8192 8192 NT_STATUS_OK
ReadX 10476 8192 8192 8192 NT_STATUS_OK
ReadX 10476 16384 8192 8192 NT_STATUS_OK
ReadX 10476 24576 8192 8192 NT_STATUS_OK
ReadX 10476 32768 16384 16384 NT_STATUS_OK
ReadX 10476 49152 8192 8192 NT_STATUS_OK
ReadX 10476 57344 8192 8192 NT_STATUS_OK
ReadX 10476 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10481 NT_STATUS_OK
WriteX 10481 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10481 258 NT_STATUS_OK
WriteX 10481 0 29253 29253 NT_STATUS_OK
Close 10481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10482 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10488 NT_STATUS_OK
WriteX 10488 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10488 258 NT_STATUS_OK
WriteX 10488 0 30183 30183 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10491 NT_STATUS_OK
WriteX 10491 0 510 510 NT_STATUS_OK
WriteX 10491 510 512 512 NT_STATUS_OK
WriteX 10491 1022 510 510 NT_STATUS_OK
WriteX 10491 1532 510 510 NT_STATUS_OK
WriteX 10491 2042 168 168 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10492 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
WriteX 10494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 61440 4096 4096 NT_STATUS_OK
ReadX 10495 126976 4096 4096 NT_STATUS_OK
WriteX 10495 0 65536 65536 NT_STATUS_OK
WriteX 10495 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 61440 4096 4096 NT_STATUS_OK
ReadX 10496 126976 4096 4096 NT_STATUS_OK
ReadX 10496 192512 4096 4096 NT_STATUS_OK
ReadX 10496 258048 4096 4096 NT_STATUS_OK
WriteX 10496 0 65536 65536 NT_STATUS_OK
WriteX 10496 65536 65536 65536 NT_STATUS_OK
WriteX 10496 131072 65536 65536 NT_STATUS_OK
WriteX 10496 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 61440 4096 4096 NT_STATUS_OK
ReadX 10497 126976 4096 4096 NT_STATUS_OK
ReadX 10497 192512 4096 4096 NT_STATUS_OK
ReadX 10497 258048 4096 4096 NT_STATUS_OK
ReadX 10497 323584 4096 4096 NT_STATUS_OK
ReadX 10497 389120 4096 4096 NT_STATUS_OK
ReadX 10497 454656 4096 4096 NT_STATUS_OK
ReadX 10497 520192 4096 4096 NT_STATUS_OK
WriteX 10497 0 65536 65536 NT_STATUS_OK
WriteX 10497 65536 65536 65536 NT_STATUS_OK
WriteX 10497 131072 65536 65536 NT_STATUS_OK
WriteX 10497 196608 65536 65536 NT_STATUS_OK
WriteX 10497 262144 65536 65536 NT_STATUS_OK
WriteX 10497 327680 65536 65536 NT_STATUS_OK
WriteX 10497 393216 65536 65536 NT_STATUS_OK
WriteX 10497 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10507 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10522 NT_STATUS_OK
Close 10522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10532 NT_STATUS_OK
Close 10532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10537 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10542 NT_STATUS_OK
Close 10542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10547 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10566 NT_STATUS_OK
WriteX 10566 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10566 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10566 0 65536 65536 NT_STATUS_OK
WriteX 10566 65536 65536 65536 NT_STATUS_OK
WriteX 10566 131072 65536 65536 NT_STATUS_OK
WriteX 10566 196608 65536 65536 NT_STATUS_OK
WriteX 10566 262144 26634 26634 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10571 NT_STATUS_OK
Close 10571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10574 NT_STATUS_OK
ReadX 10574 0 4096 4096 NT_STATUS_OK
ReadX 10574 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10591 NT_STATUS_OK
Close 10591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10597 NT_STATUS_OK
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10607 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10612 NT_STATUS_OK
Close 10612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10636 NT_STATUS_OK
Close 10636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10655 NT_STATUS_OK
ReadX 10655 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
Close 10668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10655 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10698 0 4096 4096 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
ReadX 10700 4096 4096 4096 NT_STATUS_OK
ReadX 10700 8192 4096 4096 NT_STATUS_OK
ReadX 10700 12288 4096 4096 NT_STATUS_OK
ReadX 10700 16384 4096 4096 NT_STATUS_OK
ReadX 10700 20480 4096 4096 NT_STATUS_OK
ReadX 10700 24576 4096 4096 NT_STATUS_OK
ReadX 10700 28672 4096 4096 NT_STATUS_OK
ReadX 10700 32768 4096 4096 NT_STATUS_OK
ReadX 10700 36864 4096 4096 NT_STATUS_OK
ReadX 10700 40960 4096 4096 NT_STATUS_OK
ReadX 10700 45056 4096 4096 NT_STATUS_OK
ReadX 10700 49152 4096 4096 NT_STATUS_OK
ReadX 10700 53248 4096 4096 NT_STATUS_OK
ReadX 10700 57344 4096 4096 NT_STATUS_OK
ReadX 10700 61440 4096 4096 NT_STATUS_OK
ReadX 10700 65536 4096 4096 NT_STATUS_OK
ReadX 10700 69632 4096 4096 NT_STATUS_OK
ReadX 10700 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10701 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10703 NT_STATUS_OK
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10706 NT_STATUS_OK
WriteX 10706 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 258 NT_STATUS_OK
WriteX 10706 0 65536 65536 NT_STATUS_OK
WriteX 10706 65536 19979 19979 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
QUERY_FILE_INFORMATION 10707 1004 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
SET_FILE_INFORMATION 10707 1004 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10712 1004 NT_STATUS_OK
WriteX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10718 NT_STATUS_OK
WriteX 10718 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 258 NT_STATUS_OK
WriteX 10718 0 65536 65536 NT_STATUS_OK
WriteX 10718 65536 17654 17654 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10719 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 1004 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
SET_FILE_INFORMATION 10719 1004 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10720 NT_STATUS_OK
SET_FILE_INFORMATION 10720 1004 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10722 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
ReadX 10724 4096 4096 4096 NT_STATUS_OK
ReadX 10724 8192 4096 4096 NT_STATUS_OK
ReadX 10724 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10724 16384 4096 4096 NT_STATUS_OK
ReadX 10724 20480 4096 4096 NT_STATUS_OK
ReadX 10724 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10727 1004 NT_STATUS_OK
WriteX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10730 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10733 NT_STATUS_OK
WriteX 10733 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 258 NT_STATUS_OK
WriteX 10733 0 65536 65536 NT_STATUS_OK
WriteX 10733 65536 19490 19490 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 1004 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10735 NT_STATUS_OK
SET_FILE_INFORMATION 10735 1004 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10737 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10739 0 4096 4096 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
ReadX 10741 4096 4096 4096 NT_STATUS_OK
ReadX 10741 8192 4096 4096 NT_STATUS_OK
ReadX 10741 12288 4096 4096 NT_STATUS_OK
ReadX 10741 16384 4096 4096 NT_STATUS_OK
ReadX 10741 20480 4096 4096 NT_STATUS_OK
ReadX 10741 24576 4096 4096 NT_STATUS_OK
ReadX 10741 28672 4096 4096 NT_STATUS_OK
ReadX 10741 32768 4096 4096 NT_STATUS_OK
ReadX 10741 36864 4096 4096 NT_STATUS_OK
ReadX 10741 40960 4096 4096 NT_STATUS_OK
ReadX 10741 45056 4096 4096 NT_STATUS_OK
ReadX 10741 49152 4096 4096 NT_STATUS_OK
ReadX 10741 53248 4096 4096 NT_STATUS_OK
ReadX 10741 57344 4096 4096 NT_STATUS_OK
ReadX 10741 61440 4096 4096 NT_STATUS_OK
ReadX 10741 65536 4096 4096 NT_STATUS_OK
ReadX 10741 69632 4096 4096 NT_STATUS_OK
ReadX 10741 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10741 1004 NT_STATUS_OK
WriteX 10741 0 4096 4096 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
SET_FILE_INFORMATION 10742 1004 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10736 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10747 NT_STATUS_OK
WriteX 10747 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10747 258 NT_STATUS_OK
WriteX 10747 0 65536 65536 NT_STATUS_OK
WriteX 10747 65536 8866 8866 NT_STATUS_OK
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
WriteX 10748 0 4096 4096 NT_STATUS_OK
Flush 10748 NT_STATUS_OK
SET_FILE_INFORMATION 10748 1004 NT_STATUS_OK
WriteX 10748 0 4096 4096 NT_STATUS_OK
Flush 10748 NT_STATUS_OK
Close 10748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
Close 10751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10752 1004 NT_STATUS_OK
WriteX 10752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10752 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10755 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10758 NT_STATUS_OK
WriteX 10758 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10758 258 NT_STATUS_OK
WriteX 10758 0 65536 65536 NT_STATUS_OK
WriteX 10758 65536 9298 9298 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
WriteX 10759 0 4096 4096 NT_STATUS_OK
Flush 10759 NT_STATUS_OK
SET_FILE_INFORMATION 10759 1004 NT_STATUS_OK
WriteX 10759 0 4096 4096 NT_STATUS_OK
Flush 10759 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
SET_FILE_INFORMATION 10760 1004 NT_STATUS_OK
Close 10760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10761 NT_STATUS_OK
ReadX 10761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10762 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10765 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10765 0 4096 4096 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10766 NT_STATUS_OK
ReadX 10766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10766 4096 4096 4096 NT_STATUS_OK
ReadX 10766 8192 4096 4096 NT_STATUS_OK
ReadX 10766 12288 4096 4096 NT_STATUS_OK
ReadX 10766 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10769 1004 NT_STATUS_OK
WriteX 10769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10766 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10772 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10775 NT_STATUS_OK
WriteX 10775 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10775 258 NT_STATUS_OK
WriteX 10775 0 65536 65536 NT_STATUS_OK
WriteX 10775 65536 11540 11540 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
WriteX 10776 0 4096 4096 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
SET_FILE_INFORMATION 10776 1004 NT_STATUS_OK
WriteX 10776 0 4096 4096 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10777 NT_STATUS_OK
SET_FILE_INFORMATION 10777 1004 NT_STATUS_OK
Close 10777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10779 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 61440 4096 4096 NT_STATUS_OK
ReadX 10781 126976 4096 4096 NT_STATUS_OK
WriteX 10781 0 65536 65536 NT_STATUS_OK
WriteX 10781 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 61440 4096 4096 NT_STATUS_OK
ReadX 10782 126976 4096 4096 NT_STATUS_OK
ReadX 10782 192512 4096 4096 NT_STATUS_OK
ReadX 10782 258048 4096 4096 NT_STATUS_OK
WriteX 10782 0 65536 65536 NT_STATUS_OK
WriteX 10782 65536 65536 65536 NT_STATUS_OK
WriteX 10782 131072 65536 65536 NT_STATUS_OK
WriteX 10782 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 61440 4096 4096 NT_STATUS_OK
ReadX 10783 126976 4096 4096 NT_STATUS_OK
ReadX 10783 192512 4096 4096 NT_STATUS_OK
ReadX 10783 258048 4096 4096 NT_STATUS_OK
ReadX 10783 323584 4096 4096 NT_STATUS_OK
ReadX 10783 389120 4096 4096 NT_STATUS_OK
ReadX 10783 454656 4096 4096 NT_STATUS_OK
ReadX 10783 520192 4096 4096 NT_STATUS_OK
WriteX 10783 0 65536 65536 NT_STATUS_OK
WriteX 10783 65536 65536 65536 NT_STATUS_OK
WriteX 10783 131072 65536 65536 NT_STATUS_OK
WriteX 10783 196608 65536 65536 NT_STATUS_OK
WriteX 10783 262144 65536 65536 NT_STATUS_OK
WriteX 10783 327680 65536 65536 NT_STATUS_OK
WriteX 10783 393216 65536 65536 NT_STATUS_OK
WriteX 10783 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10784 NT_STATUS_OK
ReadX 10784 0 4096 4096 NT_STATUS_OK
ReadX 10784 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10785 NT_STATUS_OK
WriteX 10785 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10785 258 NT_STATUS_OK
WriteX 10785 0 53 53 NT_STATUS_OK
Close 10785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10786 NT_STATUS_OK
Close 10786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10782 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10784 8192 4096 4096 NT_STATUS_OK
ReadX 10784 12288 4096 4096 NT_STATUS_OK
WriteX 10788 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
ReadX 10784 16384 4096 4096 NT_STATUS_OK
ReadX 10784 20480 4096 4096 NT_STATUS_OK
WriteX 10788 0 15360 15360 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
WriteX 10789 0 4096 4096 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10793 NT_STATUS_OK
Close 10793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10792 4096 4096 4096 NT_STATUS_OK
ReadX 10792 8192 4096 4096 NT_STATUS_OK
ReadX 10792 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
ReadX 10795 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
ReadX 10796 4096 4096 4096 NT_STATUS_OK
ReadX 10796 8192 4096 4096 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10797 NT_STATUS_OK
WriteX 10797 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10797 258 NT_STATUS_OK
WriteX 10797 0 15360 15360 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10798 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10798 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10802 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
Close 10802 NT_STATUS_OK
WriteX 10798 0 4096 4096 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
ReadX 10805 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10805 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10806 NT_STATUS_OK
ReadX 10806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10807 NT_STATUS_OK
WriteX 10807 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10807 258 NT_STATUS_OK
WriteX 10807 0 53 53 NT_STATUS_OK
Close 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10806 4096 4096 4096 NT_STATUS_OK
ReadX 10806 8192 4096 4096 NT_STATUS_OK
ReadX 10806 12288 4096 4096 NT_STATUS_OK
WriteX 10810 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10810 258 NT_STATUS_OK
WriteX 10810 0 12006 12006 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 0 4096 4096 NT_STATUS_OK
Close 10811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10815 NT_STATUS_OK
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10814 4096 4096 4096 NT_STATUS_OK
ReadX 10814 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10817 NT_STATUS_OK
WriteX 10817 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10817 258 NT_STATUS_OK
WriteX 10817 0 11991 11991 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10818 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10818 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10822 NT_STATUS_OK
SET_FILE_INFORMATION 10822 1004 NT_STATUS_OK
Close 10822 NT_STATUS_OK
WriteX 10818 0 4096 4096 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10826 NT_STATUS_OK
Close 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10825 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
ReadX 10825 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
WriteX 10825 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
Close 10801 NT_STATUS_OK
WriteX 10805 0 19054 19054 NT_STATUS_OK
WriteX 10825 0 12288 12288 NT_STATUS_OK
Close 10821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10828 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 61440 61440 NT_STATUS_OK
ReadX 10832 61440 4096 4096 NT_STATUS_OK
ReadX 10832 65536 61440 61440 NT_STATUS_OK
ReadX 10832 126976 4096 4096 NT_STATUS_OK
ReadX 10832 131072 61440 61440 NT_STATUS_OK
ReadX 10832 192512 4096 4096 NT_STATUS_OK
ReadX 10832 196608 61440 61440 NT_STATUS_OK
ReadX 10832 258048 4096 4096 NT_STATUS_OK
ReadX 10832 262144 61440 61440 NT_STATUS_OK
ReadX 10832 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 61440 61440 NT_STATUS_OK
ReadX 10833 61440 4096 4096 NT_STATUS_OK
ReadX 10833 65536 61440 61440 NT_STATUS_OK
ReadX 10833 126976 4096 4096 NT_STATUS_OK
ReadX 10833 131072 61440 61440 NT_STATUS_OK
ReadX 10833 192512 4096 4096 NT_STATUS_OK
ReadX 10833 196608 61440 61440 NT_STATUS_OK
ReadX 10833 258048 4096 4096 NT_STATUS_OK
ReadX 10833 262144 61440 61440 NT_STATUS_OK
ReadX 10833 323584 4096 4096 NT_STATUS_OK
ReadX 10833 327680 61440 61440 NT_STATUS_OK
ReadX 10833 389120 4096 4096 NT_STATUS_OK
ReadX 10833 393216 61440 61440 NT_STATUS_OK
ReadX 10833 454656 4096 4096 NT_STATUS_OK
ReadX 10833 458752 61440 61440 NT_STATUS_OK
ReadX 10833 520192 4096 4096 NT_STATUS_OK
ReadX 10833 524288 61440 61440 NT_STATUS_OK
ReadX 10833 585728 4096 4096 NT_STATUS_OK
ReadX 10833 589824 61440 61440 NT_STATUS_OK
ReadX 10833 651264 4096 4096 NT_STATUS_OK
ReadX 10833 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 61440 61440 NT_STATUS_OK
ReadX 10834 61440 4096 4096 NT_STATUS_OK
ReadX 10834 65536 61440 61440 NT_STATUS_OK
ReadX 10834 126976 4096 4096 NT_STATUS_OK
ReadX 10834 131072 61440 61440 NT_STATUS_OK
ReadX 10834 192512 4096 4096 NT_STATUS_OK
ReadX 10834 196608 61440 61440 NT_STATUS_OK
ReadX 10834 258048 4096 4096 NT_STATUS_OK
ReadX 10834 262144 61440 61440 NT_STATUS_OK
ReadX 10834 323584 4096 4096 NT_STATUS_OK
ReadX 10834 327680 61440 61440 NT_STATUS_OK
ReadX 10834 389120 4096 4096 NT_STATUS_OK
ReadX 10834 393216 61440 61440 NT_STATUS_OK
ReadX 10834 454656 4096 4096 NT_STATUS_OK
ReadX 10834 458752 61440 61440 NT_STATUS_OK
ReadX 10834 520192 4096 4096 NT_STATUS_OK
ReadX 10834 524288 61440 61440 NT_STATUS_OK
ReadX 10834 585728 4096 4096 NT_STATUS_OK
ReadX 10834 589824 61440 61440 NT_STATUS_OK
ReadX 10834 651264 4096 4096 NT_STATUS_OK
ReadX 10834 655360 61440 61440 NT_STATUS_OK
ReadX 10834 716800 4096 4096 NT_STATUS_OK
ReadX 10834 720896 61440 61440 NT_STATUS_OK
ReadX 10834 782336 4096 4096 NT_STATUS_OK
ReadX 10834 786432 61440 61440 NT_STATUS_OK
ReadX 10834 847872 4096 4096 NT_STATUS_OK
ReadX 10834 851968 61440 61440 NT_STATUS_OK
ReadX 10834 913408 4096 4096 NT_STATUS_OK
ReadX 10834 917504 61440 61440 NT_STATUS_OK
ReadX 10834 978944 4096 4096 NT_STATUS_OK
ReadX 10834 983040 61440 61440 NT_STATUS_OK
ReadX 10834 1044480 4096 4096 NT_STATUS_OK
ReadX 10834 1048576 61440 61440 NT_STATUS_OK
ReadX 10834 1110016 4096 4096 NT_STATUS_OK
ReadX 10834 1114112 61440 61440 NT_STATUS_OK
ReadX 10834 1175552 4096 4096 NT_STATUS_OK
ReadX 10834 1179648 61440 61440 NT_STATUS_OK
ReadX 10834 1241088 4096 4096 NT_STATUS_OK
ReadX 10834 1245184 61440 61440 NT_STATUS_OK
ReadX 10834 1306624 4096 4096 NT_STATUS_OK
ReadX 10834 1310720 61440 61440 NT_STATUS_OK
ReadX 10834 1372160 4096 4096 NT_STATUS_OK
ReadX 10834 1376256 61440 61440 NT_STATUS_OK
ReadX 10834 1437696 4096 4096 NT_STATUS_OK
ReadX 10834 1441792 61440 61440 NT_STATUS_OK
ReadX 10834 1503232 4096 4096 NT_STATUS_OK
ReadX 10834 1507328 61440 61440 NT_STATUS_OK
ReadX 10834 1568768 4096 4096 NT_STATUS_OK
ReadX 10834 1572864 61440 61440 NT_STATUS_OK
ReadX 10834 1634304 4096 4096 NT_STATUS_OK
ReadX 10834 1638400 61440 61440 NT_STATUS_OK
ReadX 10834 1699840 4096 4096 NT_STATUS_OK
ReadX 10834 1703936 61440 61440 NT_STATUS_OK
ReadX 10834 1765376 4096 4096 NT_STATUS_OK
ReadX 10834 1769472 61440 61440 NT_STATUS_OK
ReadX 10834 1830912 4096 4096 NT_STATUS_OK
ReadX 10834 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10841 NT_STATUS_OK
QUERY_FILE_INFORMATION 10841 1004 NT_STATUS_OK
WriteX 10841 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10841 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10843 NT_STATUS_OK
WriteX 10843 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 491 491 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10841 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
WriteX 10847 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 258 NT_STATUS_OK
WriteX 10847 0 543 543 NT_STATUS_OK
Close 10847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10848 NT_STATUS_OK
ReadX 10848 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10848 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10860 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10861 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 1004 NT_STATUS_OK
WriteX 10861 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 258 NT_STATUS_OK
WriteX 10861 0 2048 2048 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10862 NT_STATUS_OK
ReadX 10862 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10862 0 4096 4096 NT_STATUS_OK
Flush 10862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10867 NT_STATUS_OK
WriteX 10867 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10867 258 NT_STATUS_OK
WriteX 10867 0 2048 2048 NT_STATUS_OK
Close 10867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10873 NT_STATUS_OK
WriteX 10873 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 258 NT_STATUS_OK
WriteX 10873 0 2048 2048 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 2048 2048 NT_STATUS_OK
ReadX 10852 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10868 0 4096 4096 NT_STATUS_OK
WriteX 10852 0 8192 8192 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
WriteX 10854 0 4096 4096 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10877 NT_STATUS_OK
ReadX 10877 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10878 NT_STATUS_OK
QUERY_FILE_INFORMATION 10878 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10877 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10898 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 1004 NT_STATUS_OK
WriteX 10898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
WriteX 10898 0 2048 2048 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10906 NT_STATUS_OK
QUERY_FILE_INFORMATION 10906 1004 NT_STATUS_OK
WriteX 10906 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10906 258 NT_STATUS_OK
WriteX 10906 0 2048 2048 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10899 0 4096 4096 NT_STATUS_OK
Flush 10899 NT_STATUS_OK
WriteX 10907 0 4096 4096 NT_STATUS_OK
Flush 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10899 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10907 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10901 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10909 NT_STATUS_OK
WriteX 10909 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
WriteX 10909 0 4096 4096 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10911 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10912 NT_STATUS_OK
WriteX 10912 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 258 NT_STATUS_OK
WriteX 10912 0 4096 4096 NT_STATUS_OK
Close 10912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10913 0 4096 4096 NT_STATUS_OK
Close 10910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10886 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10919 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10920 NT_STATUS_OK
WriteX 10920 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10920 258 NT_STATUS_OK
WriteX 10920 0 2048 2048 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10922 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10935 NT_STATUS_OK
QUERY_FILE_INFORMATION 10935 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10937 NT_STATUS_OK
QUERY_FILE_INFORMATION 10937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10944 NT_STATUS_OK
ReadX 10944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10957 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 258 NT_STATUS_OK
WriteX 10957 0 2048 2048 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10960 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10969 NT_STATUS_OK
QUERY_FILE_INFORMATION 10969 1004 NT_STATUS_OK
WriteX 10969 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10969 258 NT_STATUS_OK
WriteX 10969 0 2048 2048 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10977 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 1004 NT_STATUS_OK
WriteX 10977 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 258 NT_STATUS_OK
WriteX 10977 0 2048 2048 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10958 0 4096 4096 NT_STATUS_OK
Flush 10958 NT_STATUS_OK
WriteX 10970 0 4096 4096 NT_STATUS_OK
Flush 10970 NT_STATUS_OK
WriteX 10978 0 4096 4096 NT_STATUS_OK
Flush 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10958 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10970 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10978 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10960 4096 16384 16384 NT_STATUS_OK
ReadX 10940 4096 16384 16384 NT_STATUS_OK
ReadX 10972 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 2048 2048 NT_STATUS_OK
WriteX 10980 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10981 NT_STATUS_OK
QUERY_FILE_INFORMATION 10981 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Close 10944 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10946 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10983 NT_STATUS_OK
QUERY_FILE_INFORMATION 10983 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10985 NT_STATUS_OK
QUERY_FILE_INFORMATION 10985 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10988 4096 16384 16384 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
WriteX 10991 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 8192 8192 NT_STATUS_OK
ReadX 10994 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
ReadX 11008 8192 4096 4096 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
WriteX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11009 0 4096 4096 NT_STATUS_OK
ReadX 11009 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
WriteX 10991 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11014 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 1004 NT_STATUS_OK
WriteX 11014 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 258 NT_STATUS_OK
WriteX 11014 0 2048 2048 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
ReadX 11017 4096 4096 4096 NT_STATUS_OK
WriteX 11017 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
ReadX 11019 4096 4096 4096 NT_STATUS_OK
WriteX 11019 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11020 NT_STATUS_OK
QUERY_FILE_INFORMATION 11020 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 11003 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11022 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 4096 4096 NT_STATUS_OK
ReadX 11022 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 4096 4096 NT_STATUS_OK
ReadX 11023 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11040 NT_STATUS_OK
QUERY_FILE_INFORMATION 11040 1004 NT_STATUS_OK
WriteX 11040 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11040 258 NT_STATUS_OK
WriteX 11040 0 2048 2048 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11041 NT_STATUS_OK
ReadX 11041 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11041 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11046 NT_STATUS_OK
QUERY_FILE_INFORMATION 11046 1004 NT_STATUS_OK
WriteX 11046 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11046 258 NT_STATUS_OK
WriteX 11046 0 2048 2048 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11047 NT_STATUS_OK
ReadX 11047 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11047 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11030 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11048 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11050 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 61440 4096 4096 NT_STATUS_OK
ReadX 11052 126976 4096 4096 NT_STATUS_OK
WriteX 11052 0 65536 65536 NT_STATUS_OK
WriteX 11052 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 61440 4096 4096 NT_STATUS_OK
ReadX 11053 126976 4096 4096 NT_STATUS_OK
ReadX 11053 192512 4096 4096 NT_STATUS_OK
ReadX 11053 258048 4096 4096 NT_STATUS_OK
WriteX 11053 0 65536 65536 NT_STATUS_OK
WriteX 11053 65536 65536 65536 NT_STATUS_OK
WriteX 11053 131072 65536 65536 NT_STATUS_OK
WriteX 11053 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 61440 4096 4096 NT_STATUS_OK
ReadX 11054 126976 4096 4096 NT_STATUS_OK
ReadX 11054 192512 4096 4096 NT_STATUS_OK
ReadX 11054 258048 4096 4096 NT_STATUS_OK
ReadX 11054 323584 4096 4096 NT_STATUS_OK
ReadX 11054 389120 4096 4096 NT_STATUS_OK
ReadX 11054 454656 4096 4096 NT_STATUS_OK
ReadX 11054 520192 4096 4096 NT_STATUS_OK
WriteX 11054 0 65536 65536 NT_STATUS_OK
WriteX 11054 65536 65536 65536 NT_STATUS_OK
WriteX 11054 131072 65536 65536 NT_STATUS_OK
WriteX 11054 196608 65536 65536 NT_STATUS_OK
WriteX 11054 262144 65536 65536 NT_STATUS_OK
WriteX 11054 327680 65536 65536 NT_STATUS_OK
WriteX 11054 393216 65536 65536 NT_STATUS_OK
WriteX 11054 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11055 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11055 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11055 8192 4096 4096 NT_STATUS_OK
ReadX 11055 12288 4096 4096 NT_STATUS_OK
ReadX 11055 16384 4096 4096 NT_STATUS_OK
ReadX 11055 20480 4096 4096 NT_STATUS_OK
ReadX 11055 24576 4096 4096 NT_STATUS_OK
ReadX 11055 28672 4096 4096 NT_STATUS_OK
ReadX 11055 32768 4096 4096 NT_STATUS_OK
ReadX 11055 36864 4096 4096 NT_STATUS_OK
ReadX 11055 40960 4096 4096 NT_STATUS_OK
ReadX 11055 45056 4096 4096 NT_STATUS_OK
ReadX 11055 49152 4096 4096 NT_STATUS_OK
ReadX 11055 53248 4096 4096 NT_STATUS_OK
ReadX 11055 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11055 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11058 NT_STATUS_OK
WriteX 11058 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11058 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
WriteX 11058 0 57088 57088 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
Flush 11058 NT_STATUS_OK
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11059 NT_STATUS_OK
SET_FILE_INFORMATION 11059 1004 NT_STATUS_OK
Close 11059 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11062 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11063 NT_STATUS_OK
WriteX 11063 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 51456 51456 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11067 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11072 NT_STATUS_OK
WriteX 11072 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11072 258 NT_STATUS_OK
WriteX 11072 0 53077 53077 NT_STATUS_OK
Close 11072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11073 NT_STATUS_OK
WriteX 11073 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11073 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
WriteX 11073 0 65536 65536 NT_STATUS_OK
WriteX 11073 65536 1856 1856 NT_STATUS_OK
WriteX 11073 0 4096 4096 NT_STATUS_OK
Flush 11073 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
WriteX 11073 0 4096 4096 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11082 NT_STATUS_OK
WriteX 11082 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 7983 7983 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
WriteX 11087 0 65536 65536 NT_STATUS_OK
WriteX 11087 65536 65536 65536 NT_STATUS_OK
WriteX 11087 131072 65536 65536 NT_STATUS_OK
WriteX 11087 196608 65536 65536 NT_STATUS_OK
WriteX 11087 262144 65536 65536 NT_STATUS_OK
WriteX 11087 327680 65536 65536 NT_STATUS_OK
WriteX 11087 393216 65536 65536 NT_STATUS_OK
WriteX 11087 458752 46731 46731 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11088 NT_STATUS_OK
WriteX 11088 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11077 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
WriteX 11088 0 65536 65536 NT_STATUS_OK
WriteX 11088 65536 22848 22848 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
Flush 11088 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
Close 11088 NT_STATUS_OK
Close 11077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11090 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11092 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11093 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11093 1004 NT_STATUS_OK
ReadX 11093 8192 4096 4096 NT_STATUS_OK
ReadX 11093 12288 4096 4096 NT_STATUS_OK
ReadX 11093 16384 4096 4096 NT_STATUS_OK
ReadX 11093 20480 4096 4096 NT_STATUS_OK
ReadX 11093 24576 4096 4096 NT_STATUS_OK
ReadX 11093 28672 4096 4096 NT_STATUS_OK
ReadX 11093 32768 4096 4096 NT_STATUS_OK
ReadX 11093 36864 4096 4096 NT_STATUS_OK
ReadX 11093 40960 4096 4096 NT_STATUS_OK
ReadX 11093 45056 4096 4096 NT_STATUS_OK
ReadX 11093 49152 4096 4096 NT_STATUS_OK
ReadX 11093 53248 4096 4096 NT_STATUS_OK
ReadX 11093 57344 4096 4096 NT_STATUS_OK
ReadX 11093 61440 4096 4096 NT_STATUS_OK
ReadX 11093 65536 4096 4096 NT_STATUS_OK
ReadX 11093 69632 4096 4096 NT_STATUS_OK
ReadX 11093 73728 4096 4096 NT_STATUS_OK
ReadX 11093 77824 4096 4096 NT_STATUS_OK
ReadX 11093 81920 4096 4096 NT_STATUS_OK
ReadX 11093 86016 4096 4096 NT_STATUS_OK
ReadX 11093 90112 4096 4096 NT_STATUS_OK
ReadX 11093 94208 4096 4096 NT_STATUS_OK
ReadX 11093 98304 4096 4096 NT_STATUS_OK
ReadX 11093 102400 4096 4096 NT_STATUS_OK
ReadX 11093 106496 4096 4096 NT_STATUS_OK
ReadX 11093 110592 4096 4096 NT_STATUS_OK
ReadX 11093 114688 4096 4096 NT_STATUS_OK
ReadX 11093 118784 4096 4096 NT_STATUS_OK
ReadX 11093 122880 4096 4096 NT_STATUS_OK
ReadX 11093 126976 4096 4096 NT_STATUS_OK
ReadX 11093 131072 4096 4096 NT_STATUS_OK
ReadX 11093 135168 4096 4096 NT_STATUS_OK
ReadX 11093 139264 4096 4096 NT_STATUS_OK
ReadX 11093 143360 4096 4096 NT_STATUS_OK
ReadX 11093 147456 4096 4096 NT_STATUS_OK
ReadX 11093 151552 4096 4096 NT_STATUS_OK
ReadX 11093 155648 4096 4096 NT_STATUS_OK
ReadX 11093 159744 4096 4096 NT_STATUS_OK
ReadX 11093 163840 4096 4096 NT_STATUS_OK
ReadX 11093 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11093 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11094 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11096 NT_STATUS_OK
WriteX 11096 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11096 258 NT_STATUS_OK
Close 11093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11097 NT_STATUS_OK
SET_FILE_INFORMATION 11097 1004 NT_STATUS_OK
Close 11097 NT_STATUS_OK
WriteX 11096 0 42388 42388 NT_STATUS_OK
Close 11096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
ReadX 11100 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11101 NT_STATUS_OK
WriteX 11101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
SET_FILE_INFORMATION 11101 1004 NT_STATUS_OK
WriteX 11101 0 42652 42652 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11103 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
ReadX 11105 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11110 NT_STATUS_OK
WriteX 11110 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11110 258 NT_STATUS_OK
WriteX 11110 0 65536 65536 NT_STATUS_OK
WriteX 11110 65536 49 49 NT_STATUS_OK
Close 11110 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 61440 61440 NT_STATUS_OK
ReadX 11111 61440 4096 4096 NT_STATUS_OK
ReadX 11111 65536 61440 61440 NT_STATUS_OK
ReadX 11111 126976 4096 4096 NT_STATUS_OK
ReadX 11111 131072 61440 61440 NT_STATUS_OK
ReadX 11111 192512 4096 4096 NT_STATUS_OK
ReadX 11111 196608 61440 61440 NT_STATUS_OK
ReadX 11111 258048 4096 4096 NT_STATUS_OK
ReadX 11111 262144 61440 61440 NT_STATUS_OK
ReadX 11111 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 61440 61440 NT_STATUS_OK
ReadX 11112 61440 4096 4096 NT_STATUS_OK
ReadX 11112 65536 61440 61440 NT_STATUS_OK
ReadX 11112 126976 4096 4096 NT_STATUS_OK
ReadX 11112 131072 61440 61440 NT_STATUS_OK
ReadX 11112 192512 4096 4096 NT_STATUS_OK
ReadX 11112 196608 61440 61440 NT_STATUS_OK
ReadX 11112 258048 4096 4096 NT_STATUS_OK
ReadX 11112 262144 61440 61440 NT_STATUS_OK
ReadX 11112 323584 4096 4096 NT_STATUS_OK
ReadX 11112 327680 61440 61440 NT_STATUS_OK
ReadX 11112 389120 4096 4096 NT_STATUS_OK
ReadX 11112 393216 61440 61440 NT_STATUS_OK
ReadX 11112 454656 4096 4096 NT_STATUS_OK
ReadX 11112 458752 61440 61440 NT_STATUS_OK
ReadX 11112 520192 4096 4096 NT_STATUS_OK
ReadX 11112 524288 61440 61440 NT_STATUS_OK
ReadX 11112 585728 4096 4096 NT_STATUS_OK
ReadX 11112 589824 61440 61440 NT_STATUS_OK
ReadX 11112 651264 4096 4096 NT_STATUS_OK
ReadX 11112 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 61440 61440 NT_STATUS_OK
ReadX 11113 61440 4096 4096 NT_STATUS_OK
ReadX 11113 65536 61440 61440 NT_STATUS_OK
ReadX 11113 126976 4096 4096 NT_STATUS_OK
ReadX 11113 131072 61440 61440 NT_STATUS_OK
ReadX 11113 192512 4096 4096 NT_STATUS_OK
ReadX 11113 196608 61440 61440 NT_STATUS_OK
ReadX 11113 258048 4096 4096 NT_STATUS_OK
ReadX 11113 262144 61440 61440 NT_STATUS_OK
ReadX 11113 323584 4096 4096 NT_STATUS_OK
ReadX 11113 327680 61440 61440 NT_STATUS_OK
ReadX 11113 389120 4096 4096 NT_STATUS_OK
ReadX 11113 393216 61440 61440 NT_STATUS_OK
ReadX 11113 454656 4096 4096 NT_STATUS_OK
ReadX 11113 458752 61440 61440 NT_STATUS_OK
ReadX 11113 520192 4096 4096 NT_STATUS_OK
ReadX 11113 524288 61440 61440 NT_STATUS_OK
ReadX 11113 585728 4096 4096 NT_STATUS_OK
ReadX 11113 589824 61440 61440 NT_STATUS_OK
ReadX 11113 651264 4096 4096 NT_STATUS_OK
ReadX 11113 655360 61440 61440 NT_STATUS_OK
ReadX 11113 716800 4096 4096 NT_STATUS_OK
ReadX 11113 720896 61440 61440 NT_STATUS_OK
ReadX 11113 782336 4096 4096 NT_STATUS_OK
ReadX 11113 786432 61440 61440 NT_STATUS_OK
ReadX 11113 847872 4096 4096 NT_STATUS_OK
ReadX 11113 851968 61440 61440 NT_STATUS_OK
ReadX 11113 913408 4096 4096 NT_STATUS_OK
ReadX 11113 917504 61440 61440 NT_STATUS_OK
ReadX 11113 978944 4096 4096 NT_STATUS_OK
ReadX 11113 983040 61440 61440 NT_STATUS_OK
ReadX 11113 1044480 4096 4096 NT_STATUS_OK
ReadX 11113 1048576 61440 61440 NT_STATUS_OK
ReadX 11113 1110016 4096 4096 NT_STATUS_OK
ReadX 11113 1114112 61440 61440 NT_STATUS_OK
ReadX 11113 1175552 4096 4096 NT_STATUS_OK
ReadX 11113 1179648 61440 61440 NT_STATUS_OK
ReadX 11113 1241088 4096 4096 NT_STATUS_OK
ReadX 11113 1245184 61440 61440 NT_STATUS_OK
ReadX 11113 1306624 4096 4096 NT_STATUS_OK
ReadX 11113 1310720 61440 61440 NT_STATUS_OK
ReadX 11113 1372160 4096 4096 NT_STATUS_OK
ReadX 11113 1376256 61440 61440 NT_STATUS_OK
ReadX 11113 1437696 4096 4096 NT_STATUS_OK
ReadX 11113 1441792 61440 61440 NT_STATUS_OK
ReadX 11113 1503232 4096 4096 NT_STATUS_OK
ReadX 11113 1507328 61440 61440 NT_STATUS_OK
ReadX 11113 1568768 4096 4096 NT_STATUS_OK
ReadX 11113 1572864 61440 61440 NT_STATUS_OK
ReadX 11113 1634304 4096 4096 NT_STATUS_OK
ReadX 11113 1638400 61440 61440 NT_STATUS_OK
ReadX 11113 1699840 4096 4096 NT_STATUS_OK
ReadX 11113 1703936 61440 61440 NT_STATUS_OK
ReadX 11113 1765376 4096 4096 NT_STATUS_OK
ReadX 11113 1769472 61440 61440 NT_STATUS_OK
ReadX 11113 1830912 4096 4096 NT_STATUS_OK
ReadX 11113 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11115 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1005 NT_STATUS_OK
ReadX 11115 2156 24 24 NT_STATUS_OK
ReadX 11115 2139 276 276 NT_STATUS_OK
ReadX 11115 2136 14 14 NT_STATUS_OK
ReadX 11115 2136 7 7 NT_STATUS_OK
ReadX 11115 2138 12 12 NT_STATUS_OK
ReadX 11115 2137 8 8 NT_STATUS_OK
ReadX 11115 2135 15 15 NT_STATUS_OK
ReadX 11115 0 16 16 NT_STATUS_OK
ReadX 11115 16 2048 2048 NT_STATUS_OK
ReadX 11115 2064 2048 2048 NT_STATUS_OK
ReadX 11115 257 2048 2048 NT_STATUS_OK
ReadX 11115 385 2048 2048 NT_STATUS_OK
ReadX 11115 513 2048 2048 NT_STATUS_OK
ReadX 11115 641 2048 2048 NT_STATUS_OK
ReadX 11115 769 2048 2048 NT_STATUS_OK
ReadX 11115 897 2048 2048 NT_STATUS_OK
ReadX 11115 1025 2048 2048 NT_STATUS_OK
ReadX 11115 1153 2048 2048 NT_STATUS_OK
ReadX 11115 1281 2048 2048 NT_STATUS_OK
ReadX 11115 1409 2048 2048 NT_STATUS_OK
ReadX 11115 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11113 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11120 NT_STATUS_OK
WriteX 11120 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11120 258 NT_STATUS_OK
WriteX 11120 0 10575 10575 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11121 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
Close 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11125 NT_STATUS_OK
LockX 11125 2147483538 1 NT_STATUS_OK
UnlockX 11125 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1005 NT_STATUS_OK
ReadX 11125 0 512 512 NT_STATUS_OK
ReadX 11125 512 512 512 NT_STATUS_OK
ReadX 11125 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1004 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11126 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 1005 NT_STATUS_OK
ReadX 11126 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11127 NT_STATUS_OK
LockX 11127 2147483538 1 NT_STATUS_OK
UnlockX 11127 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11127 1005 NT_STATUS_OK
ReadX 11127 0 512 512 NT_STATUS_OK
ReadX 11127 512 512 512 NT_STATUS_OK
ReadX 11127 1024 512 512 NT_STATUS_OK
ReadX 11127 288 20 20 NT_STATUS_OK
ReadX 11127 308 2084 2084 NT_STATUS_OK
ReadX 11127 388 2084 2084 NT_STATUS_OK
ReadX 11127 388 2084 2084 NT_STATUS_OK
ReadX 11114 2157 1386 1386 NT_STATUS_OK
ReadX 11127 2472 399 399 NT_STATUS_OK
ReadX 11127 3072 1536 1536 NT_STATUS_OK
ReadX 11127 544 149 149 NT_STATUS_OK
ReadX 11127 693 485 485 NT_STATUS_OK
Close 11127 NT_STATUS_OK
ReadX 11114 2157 4096 4096 NT_STATUS_OK
ReadX 11114 6253 4096 4096 NT_STATUS_OK
ReadX 11114 10349 4096 4096 NT_STATUS_OK
ReadX 11114 14445 4096 4096 NT_STATUS_OK
ReadX 11114 18541 4096 4096 NT_STATUS_OK
ReadX 11114 22637 256 256 NT_STATUS_OK
ReadX 11114 22893 4096 4096 NT_STATUS_OK
ReadX 11114 26989 4096 4096 NT_STATUS_OK
ReadX 11114 31085 4096 4096 NT_STATUS_OK
ReadX 11114 35181 4096 4096 NT_STATUS_OK
ReadX 11114 39277 4096 4096 NT_STATUS_OK
ReadX 11114 43373 4096 4096 NT_STATUS_OK
ReadX 11114 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11114 2157 1024 1024 NT_STATUS_OK
ReadX 11114 1667 4688 4688 NT_STATUS_OK
ReadX 11114 6355 3516 3516 NT_STATUS_OK
ReadX 11114 9871 16384 16384 NT_STATUS_OK
ReadX 11114 26255 3771 3771 NT_STATUS_OK
ReadX 11114 30026 2048 2048 NT_STATUS_OK
ReadX 11114 32074 1024 1024 NT_STATUS_OK
ReadX 11114 33098 6652 6652 NT_STATUS_OK
ReadX 11114 39750 16384 16384 NT_STATUS_OK
ReadX 11114 56134 10496 10496 NT_STATUS_OK
ReadX 11114 66630 1784 1784 NT_STATUS_OK
ReadX 11114 68414 90 90 NT_STATUS_OK
ReadX 11114 68504 273 273 NT_STATUS_OK
ReadX 11114 68777 1600 1600 NT_STATUS_OK
ReadX 11114 70377 640 640 NT_STATUS_OK
ReadX 11114 71017 1280 1280 NT_STATUS_OK
ReadX 11114 72297 8464 8464 NT_STATUS_OK
ReadX 11114 80761 158 158 NT_STATUS_OK
ReadX 11114 80919 912 912 NT_STATUS_OK
ReadX 11114 81831 1980 1980 NT_STATUS_OK
ReadX 11114 83811 2256 2256 NT_STATUS_OK
ReadX 11114 86067 400 400 NT_STATUS_OK
ReadX 11114 86467 252 252 NT_STATUS_OK
ReadX 11114 86719 42 42 NT_STATUS_OK
ReadX 11114 86761 725 725 NT_STATUS_OK
ReadX 11114 2009 512 512 NT_STATUS_OK
ReadX 11114 3895 9 9 NT_STATUS_OK
ReadX 11114 3781 46 46 NT_STATUS_OK
ReadX 11114 4059 92 92 NT_STATUS_OK
ReadX 11114 3781 92 92 NT_STATUS_OK
ReadX 11114 3986 184 184 NT_STATUS_OK
ReadX 11114 3987 16384 16384 NT_STATUS_OK
ReadX 11114 3902 16384 16384 NT_STATUS_OK
ReadX 11114 3781 10240 10240 NT_STATUS_OK
ReadX 11114 3821 16384 16384 NT_STATUS_OK
ReadX 11114 3891 935 935 NT_STATUS_OK
ReadX 11114 4060 10240 10240 NT_STATUS_OK
ReadX 11114 4059 184 184 NT_STATUS_OK
ReadX 11114 256 184 184 NT_STATUS_OK
ReadX 11114 256 1026 1026 NT_STATUS_OK
ReadX 11114 3901 326 326 NT_STATUS_OK
ReadX 11114 3899 652 652 NT_STATUS_OK
ReadX 11114 256 2 2 NT_STATUS_OK
ReadX 11114 258 4948 4948 NT_STATUS_OK
Close 11114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11129 NT_STATUS_OK
Close 11129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11132 NT_STATUS_OK
WriteX 11132 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11132 258 NT_STATUS_OK
WriteX 11132 0 65536 65536 NT_STATUS_OK
WriteX 11132 65536 65536 65536 NT_STATUS_OK
WriteX 11132 131072 65536 65536 NT_STATUS_OK
WriteX 11132 196608 65536 65536 NT_STATUS_OK
WriteX 11132 262144 65536 65536 NT_STATUS_OK
WriteX 11132 327680 65536 65536 NT_STATUS_OK
WriteX 11132 393216 65536 65536 NT_STATUS_OK
WriteX 11132 458752 65536 65536 NT_STATUS_OK
WriteX 11132 524288 65536 65536 NT_STATUS_OK
WriteX 11132 589824 35257 35257 NT_STATUS_OK
Close 11132 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11137 NT_STATUS_OK
WriteX 11137 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 258 NT_STATUS_OK
WriteX 11137 0 65536 65536 NT_STATUS_OK
WriteX 11137 65536 65536 65536 NT_STATUS_OK
WriteX 11137 131072 65536 65536 NT_STATUS_OK
WriteX 11137 196608 65536 65536 NT_STATUS_OK
WriteX 11137 262144 65536 65536 NT_STATUS_OK
WriteX 11137 327680 65536 65536 NT_STATUS_OK
WriteX 11137 393216 65536 65536 NT_STATUS_OK
WriteX 11137 458752 65536 65536 NT_STATUS_OK
WriteX 11137 524288 65536 65536 NT_STATUS_OK
WriteX 11137 589824 57598 57598 NT_STATUS_OK
Close 11137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11139 NT_STATUS_OK
WriteX 11139 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11139 258 NT_STATUS_OK
WriteX 11139 0 12543 12543 NT_STATUS_OK
Flush 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11141 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11145 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1005 NT_STATUS_OK
ReadX 11145 1938 24 24 NT_STATUS_OK
ReadX 11145 1920 276 276 NT_STATUS_OK
ReadX 11145 1918 14 14 NT_STATUS_OK
ReadX 11145 1918 7 7 NT_STATUS_OK
ReadX 11145 1919 12 12 NT_STATUS_OK
ReadX 11145 1919 8 8 NT_STATUS_OK
ReadX 11145 1917 15 15 NT_STATUS_OK
ReadX 11145 0 16 16 NT_STATUS_OK
ReadX 11145 16 2048 2048 NT_STATUS_OK
ReadX 11145 2064 2048 2048 NT_STATUS_OK
ReadX 11145 257 2048 2048 NT_STATUS_OK
ReadX 11145 385 2048 2048 NT_STATUS_OK
ReadX 11145 513 2048 2048 NT_STATUS_OK
ReadX 11145 641 2048 2048 NT_STATUS_OK
ReadX 11145 769 2048 2048 NT_STATUS_OK
ReadX 11145 897 2048 2048 NT_STATUS_OK
ReadX 11145 1025 2048 2048 NT_STATUS_OK
ReadX 11145 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11150 NT_STATUS_OK
WriteX 11150 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 258 NT_STATUS_OK
WriteX 11150 0 11588 11588 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 4096 4096 NT_STATUS_OK
Close 11145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 11615 11615 NT_STATUS_OK
Flush 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11161 NT_STATUS_OK
Close 11161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11164 NT_STATUS_OK
WriteX 11164 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11164 258 NT_STATUS_OK
WriteX 11164 0 65536 65536 NT_STATUS_OK
WriteX 11164 65536 16050 16050 NT_STATUS_OK
Close 11164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11144 1939 64 64 NT_STATUS_OK
ReadX 11144 128 248 248 NT_STATUS_OK
ReadX 11144 128 568 568 NT_STATUS_OK
ReadX 11144 3872 1536 1536 NT_STATUS_OK
ReadX 11144 3456 2560 2560 NT_STATUS_OK
ReadX 11144 3136 512 512 NT_STATUS_OK
ReadX 11144 2880 4096 4096 NT_STATUS_OK
ReadX 11144 3264 3072 3072 NT_STATUS_OK
ReadX 11144 320 4096 4096 NT_STATUS_OK
ReadX 11144 1024 4096 4096 NT_STATUS_OK
ReadX 11144 3616 4096 4096 NT_STATUS_OK
ReadX 11144 1939 64 64 NT_STATUS_OK
ReadX 11144 128 248 248 NT_STATUS_OK
ReadX 11144 128 608 608 NT_STATUS_OK
ReadX 11144 2858 1024 1024 NT_STATUS_OK
ReadX 11144 2810 4096 4096 NT_STATUS_OK
ReadX 11144 2826 4096 4096 NT_STATUS_OK
ReadX 11144 2580 2048 2048 NT_STATUS_OK
ReadX 11144 2800 2560 2560 NT_STATUS_OK
ReadX 11144 2100 4096 4096 NT_STATUS_OK
ReadX 11144 2084 4096 4096 NT_STATUS_OK
ReadX 11144 868 4096 4096 NT_STATUS_OK
ReadX 11144 2324 4096 4096 NT_STATUS_OK
ReadX 11144 884 4096 4096 NT_STATUS_OK
ReadX 11144 2604 1024 1024 NT_STATUS_OK
ReadX 11144 580 4096 4096 NT_STATUS_OK
ReadX 11144 596 4096 4096 NT_STATUS_OK
ReadX 11144 2752 4096 4096 NT_STATUS_OK
ReadX 11144 2842 1024 1024 NT_STATUS_OK
ReadX 11144 660 4096 4096 NT_STATUS_OK
ReadX 11144 2720 4096 4096 NT_STATUS_OK
ReadX 11144 2736 4096 4096 NT_STATUS_OK
ReadX 11144 628 4096 4096 NT_STATUS_OK
ReadX 11144 2704 4096 4096 NT_STATUS_OK
ReadX 11144 1556 4096 4096 NT_STATUS_OK
ReadX 11144 576 4096 4096 NT_STATUS_OK
ReadX 11144 3168 1536 1536 NT_STATUS_OK
ReadX 11144 832 4096 4096 NT_STATUS_OK
ReadX 11144 1088 4096 4096 NT_STATUS_OK
ReadX 11144 1344 4096 4096 NT_STATUS_OK
ReadX 11144 1600 4096 4096 NT_STATUS_OK
ReadX 11144 1856 4096 4096 NT_STATUS_OK
ReadX 11144 2112 4096 4096 NT_STATUS_OK
ReadX 11144 1892 4096 4096 NT_STATUS_OK
ReadX 11144 820 4096 4096 NT_STATUS_OK
ReadX 11144 788 4096 4096 NT_STATUS_OK
ReadX 11144 1604 4096 4096 NT_STATUS_OK
ReadX 11144 3648 4096 4096 NT_STATUS_OK
ReadX 11144 2608 4096 4096 NT_STATUS_OK
ReadX 11144 548 4096 4096 NT_STATUS_OK
ReadX 11144 740 4096 4096 NT_STATUS_OK
ReadX 11144 1344 4096 4096 NT_STATUS_OK
ReadX 11144 3392 4096 4096 NT_STATUS_OK
ReadX 11144 3904 4096 4096 NT_STATUS_OK
ReadX 11144 644 4096 4096 NT_STATUS_OK
ReadX 11144 676 4096 4096 NT_STATUS_OK
ReadX 11144 2688 4096 4096 NT_STATUS_OK
ReadX 11144 320 4096 4096 NT_STATUS_OK
ReadX 11144 900 4096 4096 NT_STATUS_OK
ReadX 11144 1908 4096 4096 NT_STATUS_OK
ReadX 11144 852 4096 4096 NT_STATUS_OK
ReadX 11144 724 4096 4096 NT_STATUS_OK
ReadX 11144 2292 4096 4096 NT_STATUS_OK
ReadX 11144 612 4096 4096 NT_STATUS_OK
ReadX 11144 388 4096 4096 NT_STATUS_OK
ReadX 11144 2368 4096 4096 NT_STATUS_OK
ReadX 11144 2624 4096 4096 NT_STATUS_OK
ReadX 11144 500 4096 4096 NT_STATUS_OK
ReadX 11144 356 4096 4096 NT_STATUS_OK
ReadX 11144 1024 4096 4096 NT_STATUS_OK
ReadX 11144 576 4096 4096 NT_STATUS_OK
ReadX 11144 340 4096 4096 NT_STATUS_OK
ReadX 11144 420 4096 4096 NT_STATUS_OK
ReadX 11144 1600 4096 4096 NT_STATUS_OK
ReadX 11144 404 4096 4096 NT_STATUS_OK
ReadX 11144 1428 4096 4096 NT_STATUS_OK
ReadX 11144 2656 4096 4096 NT_STATUS_OK
ReadX 11144 2624 4096 4096 NT_STATUS_OK
ReadX 11144 452 4096 4096 NT_STATUS_OK
ReadX 11144 692 4096 4096 NT_STATUS_OK
ReadX 11144 564 4096 4096 NT_STATUS_OK
ReadX 11144 372 4096 4096 NT_STATUS_OK
ReadX 11144 468 4096 4096 NT_STATUS_OK
ReadX 11144 484 4096 4096 NT_STATUS_OK
ReadX 11144 1088 4096 4096 NT_STATUS_OK
ReadX 11144 1924 4096 4096 NT_STATUS_OK
ReadX 11144 2768 4096 4096 NT_STATUS_OK
ReadX 11144 832 4096 4096 NT_STATUS_OK
ReadX 11144 836 4096 4096 NT_STATUS_OK
ReadX 11144 1856 4096 4096 NT_STATUS_OK
ReadX 11144 2640 4096 4096 NT_STATUS_OK
ReadX 11144 436 4096 4096 NT_STATUS_OK
ReadX 11144 1828 4096 4096 NT_STATUS_OK
ReadX 11144 804 4096 4096 NT_STATUS_OK
ReadX 11144 1860 4096 4096 NT_STATUS_OK
ReadX 11144 1812 4096 4096 NT_STATUS_OK
ReadX 11144 756 4096 4096 NT_STATUS_OK
ReadX 11144 1636 4096 4096 NT_STATUS_OK
ReadX 11144 772 4096 4096 NT_STATUS_OK
ReadX 11144 2036 4096 4096 NT_STATUS_OK
ReadX 11144 1220 4096 4096 NT_STATUS_OK
ReadX 11144 1652 4096 4096 NT_STATUS_OK
ReadX 11144 2588 4096 4096 NT_STATUS_OK
ReadX 11144 916 4096 4096 NT_STATUS_OK
ReadX 11144 260 4096 4096 NT_STATUS_OK
ReadX 11144 932 4096 4096 NT_STATUS_OK
ReadX 11144 2624 4096 4096 NT_STATUS_OK
ReadX 11144 308 4096 4096 NT_STATUS_OK
ReadX 11144 292 4096 4096 NT_STATUS_OK
ReadX 11144 1140 4096 4096 NT_STATUS_OK
ReadX 11144 276 4096 4096 NT_STATUS_OK
ReadX 11144 2020 4096 4096 NT_STATUS_OK
ReadX 11144 2880 4096 4096 NT_STATUS_OK
ReadX 11144 516 4096 4096 NT_STATUS_OK
ReadX 11144 1844 4096 4096 NT_STATUS_OK
ReadX 11144 1124 4096 4096 NT_STATUS_OK
ReadX 11144 3136 4096 4096 NT_STATUS_OK
ReadX 11144 324 4096 4096 NT_STATUS_OK
ReadX 11144 1156 4096 4096 NT_STATUS_OK
ReadX 11144 1172 4096 4096 NT_STATUS_OK
ReadX 11144 2112 4096 4096 NT_STATUS_OK
ReadX 11144 2368 4096 4096 NT_STATUS_OK
ReadX 11144 964 4096 4096 NT_STATUS_OK
ReadX 11144 980 4096 4096 NT_STATUS_OK
ReadX 11144 1012 4096 4096 NT_STATUS_OK
ReadX 11144 532 4096 4096 NT_STATUS_OK
ReadX 11144 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11144 1620 4096 4096 NT_STATUS_OK
ReadX 11144 1604 4096 4096 NT_STATUS_OK
ReadX 11144 2116 4096 4096 NT_STATUS_OK
ReadX 11144 2132 4096 4096 NT_STATUS_OK
ReadX 11144 2148 4096 4096 NT_STATUS_OK
ReadX 11144 2276 4096 4096 NT_STATUS_OK
ReadX 11144 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11169 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1004 NT_STATUS_OK
Close 11124 NT_STATUS_OK
WriteX 11169 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 1004 NT_STATUS_OK
Close 11126 NT_STATUS_OK
WriteX 11169 0 65536 65536 NT_STATUS_OK
WriteX 11169 65536 64850 64850 NT_STATUS_OK
Close 11169 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11171 NT_STATUS_OK
WriteX 11171 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11171 258 NT_STATUS_OK
ReadX 11144 2068 4096 4096 NT_STATUS_OK
ReadX 11144 1588 4096 4096 NT_STATUS_OK
ReadX 11144 1572 4096 4096 NT_STATUS_OK
WriteX 11171 0 18630 18630 NT_STATUS_OK
Flush 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11173 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11144 612 4096 4096 NT_STATUS_OK
ReadX 11144 564 4096 4096 NT_STATUS_OK
ReadX 11144 1876 4096 4096 NT_STATUS_OK
ReadX 11144 628 4096 4096 NT_STATUS_OK
ReadX 11144 740 4096 4096 NT_STATUS_OK
ReadX 11144 724 4096 4096 NT_STATUS_OK
ReadX 11144 644 4096 4096 NT_STATUS_OK
ReadX 11144 2324 4096 4096 NT_STATUS_OK
ReadX 11144 660 4096 4096 NT_STATUS_OK
ReadX 11144 852 4096 4096 NT_STATUS_OK
ReadX 11144 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11144 2368 4096 4096 NT_STATUS_OK
ReadX 11144 1024 4096 4096 NT_STATUS_OK
ReadX 11144 320 4096 4096 NT_STATUS_OK
ReadX 11144 580 4096 4096 NT_STATUS_OK
ReadX 11144 3136 512 512 NT_STATUS_OK
ReadX 11144 2880 4096 4096 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 61440 4096 4096 NT_STATUS_OK
ReadX 11176 126976 4096 4096 NT_STATUS_OK
WriteX 11176 0 65536 65536 NT_STATUS_OK
WriteX 11176 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 61440 4096 4096 NT_STATUS_OK
ReadX 11177 126976 4096 4096 NT_STATUS_OK
ReadX 11177 192512 4096 4096 NT_STATUS_OK
ReadX 11177 258048 4096 4096 NT_STATUS_OK
WriteX 11177 0 65536 65536 NT_STATUS_OK
WriteX 11177 65536 65536 65536 NT_STATUS_OK
WriteX 11177 131072 65536 65536 NT_STATUS_OK
WriteX 11177 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 61440 4096 4096 NT_STATUS_OK
ReadX 11178 126976 4096 4096 NT_STATUS_OK
ReadX 11178 192512 4096 4096 NT_STATUS_OK
ReadX 11178 258048 4096 4096 NT_STATUS_OK
ReadX 11178 323584 4096 4096 NT_STATUS_OK
ReadX 11178 389120 4096 4096 NT_STATUS_OK
ReadX 11178 454656 4096 4096 NT_STATUS_OK
ReadX 11178 520192 4096 4096 NT_STATUS_OK
WriteX 11178 0 65536 65536 NT_STATUS_OK
WriteX 11178 65536 65536 65536 NT_STATUS_OK
WriteX 11178 131072 65536 65536 NT_STATUS_OK
WriteX 11178 196608 65536 65536 NT_STATUS_OK
WriteX 11178 262144 65536 65536 NT_STATUS_OK
WriteX 11178 327680 65536 65536 NT_STATUS_OK
WriteX 11178 393216 65536 65536 NT_STATUS_OK
WriteX 11178 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11180 NT_STATUS_OK
Close 11180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11181 NT_STATUS_OK
WriteX 11181 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11179 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11183 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11186 NT_STATUS_OK
WriteX 11186 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11186 258 NT_STATUS_OK
WriteX 11186 0 62591 62591 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11191 NT_STATUS_OK
WriteX 11191 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11191 258 NT_STATUS_OK
WriteX 11191 0 10845 10845 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11196 NT_STATUS_OK
WriteX 11196 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 258 NT_STATUS_OK
WriteX 11196 0 30118 30118 NT_STATUS_OK
Close 11196 NT_STATUS_OK
WriteX 11179 0 4096 4096 NT_STATUS_OK
WriteX 11181 0 64 64 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 61440 61440 NT_STATUS_OK
ReadX 11198 61440 4096 4096 NT_STATUS_OK
ReadX 11198 65536 61440 61440 NT_STATUS_OK
ReadX 11198 126976 4096 4096 NT_STATUS_OK
ReadX 11198 131072 61440 61440 NT_STATUS_OK
ReadX 11198 192512 4096 4096 NT_STATUS_OK
ReadX 11198 196608 61440 61440 NT_STATUS_OK
ReadX 11198 258048 4096 4096 NT_STATUS_OK
ReadX 11198 262144 61440 61440 NT_STATUS_OK
ReadX 11198 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 61440 61440 NT_STATUS_OK
ReadX 11199 61440 4096 4096 NT_STATUS_OK
ReadX 11199 65536 61440 61440 NT_STATUS_OK
ReadX 11199 126976 4096 4096 NT_STATUS_OK
ReadX 11199 131072 61440 61440 NT_STATUS_OK
ReadX 11199 192512 4096 4096 NT_STATUS_OK
ReadX 11199 196608 61440 61440 NT_STATUS_OK
ReadX 11199 258048 4096 4096 NT_STATUS_OK
ReadX 11199 262144 61440 61440 NT_STATUS_OK
ReadX 11199 323584 4096 4096 NT_STATUS_OK
ReadX 11199 327680 61440 61440 NT_STATUS_OK
ReadX 11199 389120 4096 4096 NT_STATUS_OK
ReadX 11199 393216 61440 61440 NT_STATUS_OK
ReadX 11199 454656 4096 4096 NT_STATUS_OK
ReadX 11199 458752 61440 61440 NT_STATUS_OK
ReadX 11199 520192 4096 4096 NT_STATUS_OK
ReadX 11199 524288 61440 61440 NT_STATUS_OK
ReadX 11199 585728 4096 4096 NT_STATUS_OK
ReadX 11199 589824 61440 61440 NT_STATUS_OK
ReadX 11199 651264 4096 4096 NT_STATUS_OK
ReadX 11199 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 61440 61440 NT_STATUS_OK
ReadX 11200 61440 4096 4096 NT_STATUS_OK
ReadX 11200 65536 61440 61440 NT_STATUS_OK
ReadX 11200 126976 4096 4096 NT_STATUS_OK
ReadX 11200 131072 61440 61440 NT_STATUS_OK
ReadX 11200 192512 4096 4096 NT_STATUS_OK
ReadX 11200 196608 61440 61440 NT_STATUS_OK
ReadX 11200 258048 4096 4096 NT_STATUS_OK
ReadX 11200 262144 61440 61440 NT_STATUS_OK
ReadX 11200 323584 4096 4096 NT_STATUS_OK
ReadX 11200 327680 61440 61440 NT_STATUS_OK
ReadX 11200 389120 4096 4096 NT_STATUS_OK
ReadX 11200 393216 61440 61440 NT_STATUS_OK
ReadX 11200 454656 4096 4096 NT_STATUS_OK
ReadX 11200 458752 61440 61440 NT_STATUS_OK
ReadX 11200 520192 4096 4096 NT_STATUS_OK
ReadX 11200 524288 61440 61440 NT_STATUS_OK
ReadX 11200 585728 4096 4096 NT_STATUS_OK
ReadX 11200 589824 61440 61440 NT_STATUS_OK
ReadX 11200 651264 4096 4096 NT_STATUS_OK
ReadX 11200 655360 61440 61440 NT_STATUS_OK
ReadX 11200 716800 4096 4096 NT_STATUS_OK
ReadX 11200 720896 61440 61440 NT_STATUS_OK
ReadX 11200 782336 4096 4096 NT_STATUS_OK
ReadX 11200 786432 61440 61440 NT_STATUS_OK
ReadX 11200 847872 4096 4096 NT_STATUS_OK
ReadX 11200 851968 61440 61440 NT_STATUS_OK
ReadX 11200 913408 4096 4096 NT_STATUS_OK
ReadX 11200 917504 61440 61440 NT_STATUS_OK
ReadX 11200 978944 4096 4096 NT_STATUS_OK
ReadX 11200 983040 61440 61440 NT_STATUS_OK
ReadX 11200 1044480 4096 4096 NT_STATUS_OK
ReadX 11200 1048576 61440 61440 NT_STATUS_OK
ReadX 11200 1110016 4096 4096 NT_STATUS_OK
ReadX 11200 1114112 61440 61440 NT_STATUS_OK
ReadX 11200 1175552 4096 4096 NT_STATUS_OK
ReadX 11200 1179648 61440 61440 NT_STATUS_OK
ReadX 11200 1241088 4096 4096 NT_STATUS_OK
ReadX 11200 1245184 61440 61440 NT_STATUS_OK
ReadX 11200 1306624 4096 4096 NT_STATUS_OK
ReadX 11200 1310720 61440 61440 NT_STATUS_OK
ReadX 11200 1372160 4096 4096 NT_STATUS_OK
ReadX 11200 1376256 61440 61440 NT_STATUS_OK
ReadX 11200 1437696 4096 4096 NT_STATUS_OK
ReadX 11200 1441792 61440 61440 NT_STATUS_OK
ReadX 11200 1503232 4096 4096 NT_STATUS_OK
ReadX 11200 1507328 61440 61440 NT_STATUS_OK
ReadX 11200 1568768 4096 4096 NT_STATUS_OK
ReadX 11200 1572864 61440 61440 NT_STATUS_OK
ReadX 11200 1634304 4096 4096 NT_STATUS_OK
ReadX 11200 1638400 61440 61440 NT_STATUS_OK
ReadX 11200 1699840 4096 4096 NT_STATUS_OK
ReadX 11200 1703936 61440 61440 NT_STATUS_OK
ReadX 11200 1765376 4096 4096 NT_STATUS_OK
ReadX 11200 1769472 61440 61440 NT_STATUS_OK
ReadX 11200 1830912 4096 4096 NT_STATUS_OK
ReadX 11200 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11198 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
ReadX 11205 4096 4096 4096 NT_STATUS_OK
ReadX 11205 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11208 NT_STATUS_OK
ReadX 11208 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11209 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11210 NT_STATUS_OK
Close 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 8192 8192 NT_STATUS_OK
ReadX 11213 8192 8192 8192 NT_STATUS_OK
ReadX 11213 16384 8192 8192 NT_STATUS_OK
ReadX 11213 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11218 NT_STATUS_OK
WriteX 11218 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 258 NT_STATUS_OK
WriteX 11218 0 10438 10438 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11221 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11224 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
ReadX 11227 4096 4096 4096 NT_STATUS_OK
ReadX 11227 8192 4096 4096 NT_STATUS_OK
ReadX 11227 12288 8192 8192 NT_STATUS_OK
ReadX 11227 20480 8192 8192 NT_STATUS_OK
ReadX 11227 28672 8192 8192 NT_STATUS_OK
ReadX 11227 36864 8192 8192 NT_STATUS_OK
ReadX 11227 45056 8192 8192 NT_STATUS_OK
ReadX 11227 53248 8192 8192 NT_STATUS_OK
ReadX 11227 61440 8192 8192 NT_STATUS_OK
ReadX 11227 69632 8192 8192 NT_STATUS_OK
ReadX 11227 77824 8192 8192 NT_STATUS_OK
ReadX 11227 86016 8192 8192 NT_STATUS_OK
ReadX 11227 94208 8192 8192 NT_STATUS_OK
ReadX 11227 102400 8192 8192 NT_STATUS_OK
ReadX 11227 110592 8192 8192 NT_STATUS_OK
ReadX 11227 118784 8192 8192 NT_STATUS_OK
ReadX 11227 126976 8192 8192 NT_STATUS_OK
ReadX 11227 135168 8192 8192 NT_STATUS_OK
ReadX 11227 143360 8192 8192 NT_STATUS_OK
ReadX 11227 151552 8192 8192 NT_STATUS_OK
ReadX 11227 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11227 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Close 11222 NT_STATUS_OK
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
WriteX 11232 0 28489 28489 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11235 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 8192 8192 NT_STATUS_OK
ReadX 11239 8192 8192 8192 NT_STATUS_OK
ReadX 11239 16384 8192 8192 NT_STATUS_OK
ReadX 11239 24576 8192 8192 NT_STATUS_OK
ReadX 11239 32768 16384 16384 NT_STATUS_OK
ReadX 11239 49152 8192 8192 NT_STATUS_OK
ReadX 11239 57344 8192 8192 NT_STATUS_OK
ReadX 11239 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11244 NT_STATUS_OK
WriteX 11244 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11244 258 NT_STATUS_OK
WriteX 11244 0 29253 29253 NT_STATUS_OK
Close 11244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11245 NT_STATUS_OK
Close 11245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11251 NT_STATUS_OK
WriteX 11251 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11251 258 NT_STATUS_OK
WriteX 11251 0 30183 30183 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11254 NT_STATUS_OK
WriteX 11254 0 510 510 NT_STATUS_OK
WriteX 11254 510 512 512 NT_STATUS_OK
WriteX 11254 1022 510 510 NT_STATUS_OK
WriteX 11254 1532 510 510 NT_STATUS_OK
WriteX 11254 2042 168 168 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11255 NT_STATUS_OK
Close 11255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
WriteX 11257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 61440 4096 4096 NT_STATUS_OK
ReadX 11258 126976 4096 4096 NT_STATUS_OK
WriteX 11258 0 65536 65536 NT_STATUS_OK
WriteX 11258 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 61440 4096 4096 NT_STATUS_OK
ReadX 11259 126976 4096 4096 NT_STATUS_OK
ReadX 11259 192512 4096 4096 NT_STATUS_OK
ReadX 11259 258048 4096 4096 NT_STATUS_OK
WriteX 11259 0 65536 65536 NT_STATUS_OK
WriteX 11259 65536 65536 65536 NT_STATUS_OK
WriteX 11259 131072 65536 65536 NT_STATUS_OK
WriteX 11259 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 61440 4096 4096 NT_STATUS_OK
ReadX 11260 126976 4096 4096 NT_STATUS_OK
ReadX 11260 192512 4096 4096 NT_STATUS_OK
ReadX 11260 258048 4096 4096 NT_STATUS_OK
ReadX 11260 323584 4096 4096 NT_STATUS_OK
ReadX 11260 389120 4096 4096 NT_STATUS_OK
ReadX 11260 454656 4096 4096 NT_STATUS_OK
ReadX 11260 520192 4096 4096 NT_STATUS_OK
WriteX 11260 0 65536 65536 NT_STATUS_OK
WriteX 11260 65536 65536 65536 NT_STATUS_OK
WriteX 11260 131072 65536 65536 NT_STATUS_OK
WriteX 11260 196608 65536 65536 NT_STATUS_OK
WriteX 11260 262144 65536 65536 NT_STATUS_OK
WriteX 11260 327680 65536 65536 NT_STATUS_OK
WriteX 11260 393216 65536 65536 NT_STATUS_OK
WriteX 11260 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11285 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11300 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11305 NT_STATUS_OK
Close 11305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11310 NT_STATUS_OK
Close 11310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11329 NT_STATUS_OK
WriteX 11329 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11329 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11329 0 65536 65536 NT_STATUS_OK
WriteX 11329 65536 65536 65536 NT_STATUS_OK
WriteX 11329 131072 65536 65536 NT_STATUS_OK
WriteX 11329 196608 65536 65536 NT_STATUS_OK
WriteX 11329 262144 26634 26634 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11334 NT_STATUS_OK
Close 11334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11337 NT_STATUS_OK
ReadX 11337 0 4096 4096 NT_STATUS_OK
ReadX 11337 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11345 NT_STATUS_OK
Close 11345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11354 NT_STATUS_OK
Close 11354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11365 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11370 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11399 NT_STATUS_OK
Close 11399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
Close 11431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11418 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11461 0 4096 4096 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
ReadX 11463 4096 4096 4096 NT_STATUS_OK
ReadX 11463 8192 4096 4096 NT_STATUS_OK
ReadX 11463 12288 4096 4096 NT_STATUS_OK
ReadX 11463 16384 4096 4096 NT_STATUS_OK
ReadX 11463 20480 4096 4096 NT_STATUS_OK
ReadX 11463 24576 4096 4096 NT_STATUS_OK
ReadX 11463 28672 4096 4096 NT_STATUS_OK
ReadX 11463 32768 4096 4096 NT_STATUS_OK
ReadX 11463 36864 4096 4096 NT_STATUS_OK
ReadX 11463 40960 4096 4096 NT_STATUS_OK
ReadX 11463 45056 4096 4096 NT_STATUS_OK
ReadX 11463 49152 4096 4096 NT_STATUS_OK
ReadX 11463 53248 4096 4096 NT_STATUS_OK
ReadX 11463 57344 4096 4096 NT_STATUS_OK
ReadX 11463 61440 4096 4096 NT_STATUS_OK
ReadX 11463 65536 4096 4096 NT_STATUS_OK
ReadX 11463 69632 4096 4096 NT_STATUS_OK
ReadX 11463 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11464 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11466 NT_STATUS_OK
Close 11466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11469 NT_STATUS_OK
WriteX 11469 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 258 NT_STATUS_OK
WriteX 11469 0 65536 65536 NT_STATUS_OK
WriteX 11469 65536 19979 19979 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
QUERY_FILE_INFORMATION 11470 1004 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
SET_FILE_INFORMATION 11470 1004 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11475 1004 NT_STATUS_OK
WriteX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11481 NT_STATUS_OK
WriteX 11481 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 258 NT_STATUS_OK
WriteX 11481 0 65536 65536 NT_STATUS_OK
WriteX 11481 65536 17654 17654 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11482 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
QUERY_FILE_INFORMATION 11482 1004 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
SET_FILE_INFORMATION 11482 1004 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11483 NT_STATUS_OK
SET_FILE_INFORMATION 11483 1004 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11485 NT_STATUS_OK
Close 11485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
ReadX 11487 4096 4096 4096 NT_STATUS_OK
ReadX 11487 8192 4096 4096 NT_STATUS_OK
ReadX 11487 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11487 16384 4096 4096 NT_STATUS_OK
ReadX 11487 20480 4096 4096 NT_STATUS_OK
ReadX 11487 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11490 1004 NT_STATUS_OK
WriteX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11493 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11496 NT_STATUS_OK
WriteX 11496 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 258 NT_STATUS_OK
WriteX 11496 0 65536 65536 NT_STATUS_OK
WriteX 11496 65536 19490 19490 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 1004 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11498 NT_STATUS_OK
SET_FILE_INFORMATION 11498 1004 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11502 0 4096 4096 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
ReadX 11504 4096 4096 4096 NT_STATUS_OK
ReadX 11504 8192 4096 4096 NT_STATUS_OK
ReadX 11504 12288 4096 4096 NT_STATUS_OK
ReadX 11504 16384 4096 4096 NT_STATUS_OK
ReadX 11504 20480 4096 4096 NT_STATUS_OK
ReadX 11504 24576 4096 4096 NT_STATUS_OK
ReadX 11504 28672 4096 4096 NT_STATUS_OK
ReadX 11504 32768 4096 4096 NT_STATUS_OK
ReadX 11504 36864 4096 4096 NT_STATUS_OK
ReadX 11504 40960 4096 4096 NT_STATUS_OK
ReadX 11504 45056 4096 4096 NT_STATUS_OK
ReadX 11504 49152 4096 4096 NT_STATUS_OK
ReadX 11504 53248 4096 4096 NT_STATUS_OK
ReadX 11504 57344 4096 4096 NT_STATUS_OK
ReadX 11504 61440 4096 4096 NT_STATUS_OK
ReadX 11504 65536 4096 4096 NT_STATUS_OK
ReadX 11504 69632 4096 4096 NT_STATUS_OK
ReadX 11504 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11504 1004 NT_STATUS_OK
WriteX 11504 0 4096 4096 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
SET_FILE_INFORMATION 11505 1004 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11510 NT_STATUS_OK
WriteX 11510 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11510 258 NT_STATUS_OK
WriteX 11510 0 65536 65536 NT_STATUS_OK
WriteX 11510 65536 8866 8866 NT_STATUS_OK
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
WriteX 11511 0 4096 4096 NT_STATUS_OK
Flush 11511 NT_STATUS_OK
SET_FILE_INFORMATION 11511 1004 NT_STATUS_OK
WriteX 11511 0 4096 4096 NT_STATUS_OK
Flush 11511 NT_STATUS_OK
Close 11511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
Close 11514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11515 1004 NT_STATUS_OK
WriteX 11515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11515 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11521 NT_STATUS_OK
WriteX 11521 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11521 258 NT_STATUS_OK
WriteX 11521 0 65536 65536 NT_STATUS_OK
WriteX 11521 65536 9298 9298 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
WriteX 11522 0 4096 4096 NT_STATUS_OK
Flush 11522 NT_STATUS_OK
SET_FILE_INFORMATION 11522 1004 NT_STATUS_OK
WriteX 11522 0 4096 4096 NT_STATUS_OK
Flush 11522 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
SET_FILE_INFORMATION 11523 1004 NT_STATUS_OK
Close 11523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11524 NT_STATUS_OK
ReadX 11524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11525 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11528 0 4096 4096 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11529 NT_STATUS_OK
ReadX 11529 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11529 4096 4096 4096 NT_STATUS_OK
ReadX 11529 8192 4096 4096 NT_STATUS_OK
ReadX 11529 12288 4096 4096 NT_STATUS_OK
ReadX 11529 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11532 1004 NT_STATUS_OK
WriteX 11532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11529 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11535 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11538 NT_STATUS_OK
WriteX 11538 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11538 258 NT_STATUS_OK
WriteX 11538 0 65536 65536 NT_STATUS_OK
WriteX 11538 65536 11540 11540 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
WriteX 11539 0 4096 4096 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
SET_FILE_INFORMATION 11539 1004 NT_STATUS_OK
WriteX 11539 0 4096 4096 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11540 NT_STATUS_OK
SET_FILE_INFORMATION 11540 1004 NT_STATUS_OK
Close 11540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11542 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 61440 4096 4096 NT_STATUS_OK
ReadX 11544 126976 4096 4096 NT_STATUS_OK
WriteX 11544 0 65536 65536 NT_STATUS_OK
WriteX 11544 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 61440 4096 4096 NT_STATUS_OK
ReadX 11545 126976 4096 4096 NT_STATUS_OK
ReadX 11545 192512 4096 4096 NT_STATUS_OK
ReadX 11545 258048 4096 4096 NT_STATUS_OK
WriteX 11545 0 65536 65536 NT_STATUS_OK
WriteX 11545 65536 65536 65536 NT_STATUS_OK
WriteX 11545 131072 65536 65536 NT_STATUS_OK
WriteX 11545 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 61440 4096 4096 NT_STATUS_OK
ReadX 11546 126976 4096 4096 NT_STATUS_OK
ReadX 11546 192512 4096 4096 NT_STATUS_OK
ReadX 11546 258048 4096 4096 NT_STATUS_OK
ReadX 11546 323584 4096 4096 NT_STATUS_OK
ReadX 11546 389120 4096 4096 NT_STATUS_OK
ReadX 11546 454656 4096 4096 NT_STATUS_OK
ReadX 11546 520192 4096 4096 NT_STATUS_OK
WriteX 11546 0 65536 65536 NT_STATUS_OK
WriteX 11546 65536 65536 65536 NT_STATUS_OK
WriteX 11546 131072 65536 65536 NT_STATUS_OK
WriteX 11546 196608 65536 65536 NT_STATUS_OK
WriteX 11546 262144 65536 65536 NT_STATUS_OK
WriteX 11546 327680 65536 65536 NT_STATUS_OK
WriteX 11546 393216 65536 65536 NT_STATUS_OK
WriteX 11546 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11547 NT_STATUS_OK
ReadX 11547 0 4096 4096 NT_STATUS_OK
ReadX 11547 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11548 NT_STATUS_OK
WriteX 11548 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11548 258 NT_STATUS_OK
WriteX 11548 0 53 53 NT_STATUS_OK
Close 11548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11549 NT_STATUS_OK
Close 11549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11545 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11547 8192 4096 4096 NT_STATUS_OK
ReadX 11547 12288 4096 4096 NT_STATUS_OK
WriteX 11551 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
ReadX 11547 16384 4096 4096 NT_STATUS_OK
ReadX 11547 20480 4096 4096 NT_STATUS_OK
WriteX 11551 0 15360 15360 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
WriteX 11552 0 4096 4096 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11556 NT_STATUS_OK
Close 11556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11555 4096 4096 4096 NT_STATUS_OK
ReadX 11555 8192 4096 4096 NT_STATUS_OK
ReadX 11555 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
ReadX 11558 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
ReadX 11559 4096 4096 4096 NT_STATUS_OK
ReadX 11559 8192 4096 4096 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11560 NT_STATUS_OK
WriteX 11560 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11560 258 NT_STATUS_OK
WriteX 11560 0 15360 15360 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11561 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11561 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11565 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
Close 11565 NT_STATUS_OK
WriteX 11561 0 4096 4096 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
ReadX 11568 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11568 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11568 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11569 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11570 NT_STATUS_OK
WriteX 11570 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11570 258 NT_STATUS_OK
WriteX 11570 0 53 53 NT_STATUS_OK
Close 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11569 4096 4096 4096 NT_STATUS_OK
ReadX 11569 8192 4096 4096 NT_STATUS_OK
ReadX 11569 12288 4096 4096 NT_STATUS_OK
WriteX 11573 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11573 258 NT_STATUS_OK
WriteX 11573 0 12006 12006 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 0 4096 4096 NT_STATUS_OK
Close 11574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11578 NT_STATUS_OK
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11577 4096 4096 4096 NT_STATUS_OK
ReadX 11577 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11580 NT_STATUS_OK
WriteX 11580 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 258 NT_STATUS_OK
WriteX 11580 0 11991 11991 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11581 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11581 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11585 NT_STATUS_OK
SET_FILE_INFORMATION 11585 1004 NT_STATUS_OK
Close 11585 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11589 NT_STATUS_OK
Close 11589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11588 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
ReadX 11588 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
WriteX 11588 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
Close 11564 NT_STATUS_OK
WriteX 11568 0 19054 19054 NT_STATUS_OK
WriteX 11588 0 12288 12288 NT_STATUS_OK
Close 11584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11591 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 61440 61440 NT_STATUS_OK
ReadX 11595 61440 4096 4096 NT_STATUS_OK
ReadX 11595 65536 61440 61440 NT_STATUS_OK
ReadX 11595 126976 4096 4096 NT_STATUS_OK
ReadX 11595 131072 61440 61440 NT_STATUS_OK
ReadX 11595 192512 4096 4096 NT_STATUS_OK
ReadX 11595 196608 61440 61440 NT_STATUS_OK
ReadX 11595 258048 4096 4096 NT_STATUS_OK
ReadX 11595 262144 61440 61440 NT_STATUS_OK
ReadX 11595 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 61440 61440 NT_STATUS_OK
ReadX 11596 61440 4096 4096 NT_STATUS_OK
ReadX 11596 65536 61440 61440 NT_STATUS_OK
ReadX 11596 126976 4096 4096 NT_STATUS_OK
ReadX 11596 131072 61440 61440 NT_STATUS_OK
ReadX 11596 192512 4096 4096 NT_STATUS_OK
ReadX 11596 196608 61440 61440 NT_STATUS_OK
ReadX 11596 258048 4096 4096 NT_STATUS_OK
ReadX 11596 262144 61440 61440 NT_STATUS_OK
ReadX 11596 323584 4096 4096 NT_STATUS_OK
ReadX 11596 327680 61440 61440 NT_STATUS_OK
ReadX 11596 389120 4096 4096 NT_STATUS_OK
ReadX 11596 393216 61440 61440 NT_STATUS_OK
ReadX 11596 454656 4096 4096 NT_STATUS_OK
ReadX 11596 458752 61440 61440 NT_STATUS_OK
ReadX 11596 520192 4096 4096 NT_STATUS_OK
ReadX 11596 524288 61440 61440 NT_STATUS_OK
ReadX 11596 585728 4096 4096 NT_STATUS_OK
ReadX 11596 589824 61440 61440 NT_STATUS_OK
ReadX 11596 651264 4096 4096 NT_STATUS_OK
ReadX 11596 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 61440 61440 NT_STATUS_OK
ReadX 11597 61440 4096 4096 NT_STATUS_OK
ReadX 11597 65536 61440 61440 NT_STATUS_OK
ReadX 11597 126976 4096 4096 NT_STATUS_OK
ReadX 11597 131072 61440 61440 NT_STATUS_OK
ReadX 11597 192512 4096 4096 NT_STATUS_OK
ReadX 11597 196608 61440 61440 NT_STATUS_OK
ReadX 11597 258048 4096 4096 NT_STATUS_OK
ReadX 11597 262144 61440 61440 NT_STATUS_OK
ReadX 11597 323584 4096 4096 NT_STATUS_OK
ReadX 11597 327680 61440 61440 NT_STATUS_OK
ReadX 11597 389120 4096 4096 NT_STATUS_OK
ReadX 11597 393216 61440 61440 NT_STATUS_OK
ReadX 11597 454656 4096 4096 NT_STATUS_OK
ReadX 11597 458752 61440 61440 NT_STATUS_OK
ReadX 11597 520192 4096 4096 NT_STATUS_OK
ReadX 11597 524288 61440 61440 NT_STATUS_OK
ReadX 11597 585728 4096 4096 NT_STATUS_OK
ReadX 11597 589824 61440 61440 NT_STATUS_OK
ReadX 11597 651264 4096 4096 NT_STATUS_OK
ReadX 11597 655360 61440 61440 NT_STATUS_OK
ReadX 11597 716800 4096 4096 NT_STATUS_OK
ReadX 11597 720896 61440 61440 NT_STATUS_OK
ReadX 11597 782336 4096 4096 NT_STATUS_OK
ReadX 11597 786432 61440 61440 NT_STATUS_OK
ReadX 11597 847872 4096 4096 NT_STATUS_OK
ReadX 11597 851968 61440 61440 NT_STATUS_OK
ReadX 11597 913408 4096 4096 NT_STATUS_OK
ReadX 11597 917504 61440 61440 NT_STATUS_OK
ReadX 11597 978944 4096 4096 NT_STATUS_OK
ReadX 11597 983040 61440 61440 NT_STATUS_OK
ReadX 11597 1044480 4096 4096 NT_STATUS_OK
ReadX 11597 1048576 61440 61440 NT_STATUS_OK
ReadX 11597 1110016 4096 4096 NT_STATUS_OK
ReadX 11597 1114112 61440 61440 NT_STATUS_OK
ReadX 11597 1175552 4096 4096 NT_STATUS_OK
ReadX 11597 1179648 61440 61440 NT_STATUS_OK
ReadX 11597 1241088 4096 4096 NT_STATUS_OK
ReadX 11597 1245184 61440 61440 NT_STATUS_OK
ReadX 11597 1306624 4096 4096 NT_STATUS_OK
ReadX 11597 1310720 61440 61440 NT_STATUS_OK
ReadX 11597 1372160 4096 4096 NT_STATUS_OK
ReadX 11597 1376256 61440 61440 NT_STATUS_OK
ReadX 11597 1437696 4096 4096 NT_STATUS_OK
ReadX 11597 1441792 61440 61440 NT_STATUS_OK
ReadX 11597 1503232 4096 4096 NT_STATUS_OK
ReadX 11597 1507328 61440 61440 NT_STATUS_OK
ReadX 11597 1568768 4096 4096 NT_STATUS_OK
ReadX 11597 1572864 61440 61440 NT_STATUS_OK
ReadX 11597 1634304 4096 4096 NT_STATUS_OK
ReadX 11597 1638400 61440 61440 NT_STATUS_OK
ReadX 11597 1699840 4096 4096 NT_STATUS_OK
ReadX 11597 1703936 61440 61440 NT_STATUS_OK
ReadX 11597 1765376 4096 4096 NT_STATUS_OK
ReadX 11597 1769472 61440 61440 NT_STATUS_OK
ReadX 11597 1830912 4096 4096 NT_STATUS_OK
ReadX 11597 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11604 NT_STATUS_OK
QUERY_FILE_INFORMATION 11604 1004 NT_STATUS_OK
WriteX 11604 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11604 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11606 NT_STATUS_OK
WriteX 11606 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 491 491 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11604 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
WriteX 11610 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 258 NT_STATUS_OK
WriteX 11610 0 543 543 NT_STATUS_OK
Close 11610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11611 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11623 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11624 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 1004 NT_STATUS_OK
WriteX 11624 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 258 NT_STATUS_OK
WriteX 11624 0 2048 2048 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11625 NT_STATUS_OK
ReadX 11625 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11625 0 4096 4096 NT_STATUS_OK
Flush 11625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11630 NT_STATUS_OK
WriteX 11630 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11630 258 NT_STATUS_OK
WriteX 11630 0 2048 2048 NT_STATUS_OK
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11636 NT_STATUS_OK
WriteX 11636 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 258 NT_STATUS_OK
WriteX 11636 0 2048 2048 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 2048 2048 NT_STATUS_OK
ReadX 11615 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11631 0 4096 4096 NT_STATUS_OK
WriteX 11615 0 8192 8192 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
WriteX 11617 0 4096 4096 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11641 NT_STATUS_OK
QUERY_FILE_INFORMATION 11641 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11615 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11650 NT_STATUS_OK
ReadX 11650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11661 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 1004 NT_STATUS_OK
WriteX 11661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
WriteX 11661 0 2048 2048 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11664 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11669 NT_STATUS_OK
QUERY_FILE_INFORMATION 11669 1004 NT_STATUS_OK
WriteX 11669 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11669 258 NT_STATUS_OK
WriteX 11669 0 2048 2048 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11662 0 4096 4096 NT_STATUS_OK
Flush 11662 NT_STATUS_OK
WriteX 11670 0 4096 4096 NT_STATUS_OK
Flush 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11662 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11670 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11664 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11672 NT_STATUS_OK
WriteX 11672 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
WriteX 11672 0 4096 4096 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11674 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11675 NT_STATUS_OK
WriteX 11675 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 258 NT_STATUS_OK
WriteX 11675 0 4096 4096 NT_STATUS_OK
Close 11675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11676 0 4096 4096 NT_STATUS_OK
Close 11673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11649 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11682 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11683 NT_STATUS_OK
WriteX 11683 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11683 258 NT_STATUS_OK
WriteX 11683 0 2048 2048 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11685 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11698 NT_STATUS_OK
QUERY_FILE_INFORMATION 11698 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11700 NT_STATUS_OK
QUERY_FILE_INFORMATION 11700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11707 NT_STATUS_OK
ReadX 11707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11720 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 1004 NT_STATUS_OK
WriteX 11720 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 258 NT_STATUS_OK
WriteX 11720 0 2048 2048 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11723 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11732 NT_STATUS_OK
QUERY_FILE_INFORMATION 11732 1004 NT_STATUS_OK
WriteX 11732 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11732 258 NT_STATUS_OK
WriteX 11732 0 2048 2048 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11740 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 1004 NT_STATUS_OK
WriteX 11740 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 258 NT_STATUS_OK
WriteX 11740 0 2048 2048 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11733 0 4096 4096 NT_STATUS_OK
Flush 11733 NT_STATUS_OK
WriteX 11741 0 4096 4096 NT_STATUS_OK
Flush 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11733 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11741 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11723 4096 16384 16384 NT_STATUS_OK
ReadX 11703 4096 16384 16384 NT_STATUS_OK
ReadX 11735 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 2048 2048 NT_STATUS_OK
WriteX 11743 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11744 NT_STATUS_OK
QUERY_FILE_INFORMATION 11744 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11707 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11709 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11746 NT_STATUS_OK
QUERY_FILE_INFORMATION 11746 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11748 NT_STATUS_OK
QUERY_FILE_INFORMATION 11748 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11751 4096 16384 16384 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 8192 8192 NT_STATUS_OK
ReadX 11757 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
ReadX 11771 8192 4096 4096 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
WriteX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11772 0 4096 4096 NT_STATUS_OK
ReadX 11772 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11777 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 1004 NT_STATUS_OK
WriteX 11777 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
WriteX 11777 0 2048 2048 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11779 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
ReadX 11780 4096 4096 4096 NT_STATUS_OK
WriteX 11780 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
ReadX 11782 4096 4096 4096 NT_STATUS_OK
WriteX 11782 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11783 NT_STATUS_OK
QUERY_FILE_INFORMATION 11783 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11766 NT_STATUS_OK
Close 11767 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11785 0 4096 4096 NT_STATUS_OK
ReadX 11785 4096 4096 4096 NT_STATUS_OK
ReadX 11785 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
ReadX 11786 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11803 NT_STATUS_OK
QUERY_FILE_INFORMATION 11803 1004 NT_STATUS_OK
WriteX 11803 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11803 258 NT_STATUS_OK
WriteX 11803 0 2048 2048 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11804 NT_STATUS_OK
ReadX 11804 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11804 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11809 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 1004 NT_STATUS_OK
WriteX 11809 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 258 NT_STATUS_OK
WriteX 11809 0 2048 2048 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11810 NT_STATUS_OK
ReadX 11810 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11810 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11793 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11811 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11813 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 61440 4096 4096 NT_STATUS_OK
ReadX 11815 126976 4096 4096 NT_STATUS_OK
WriteX 11815 0 65536 65536 NT_STATUS_OK
WriteX 11815 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 61440 4096 4096 NT_STATUS_OK
ReadX 11816 126976 4096 4096 NT_STATUS_OK
ReadX 11816 192512 4096 4096 NT_STATUS_OK
ReadX 11816 258048 4096 4096 NT_STATUS_OK
WriteX 11816 0 65536 65536 NT_STATUS_OK
WriteX 11816 65536 65536 65536 NT_STATUS_OK
WriteX 11816 131072 65536 65536 NT_STATUS_OK
WriteX 11816 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 61440 4096 4096 NT_STATUS_OK
ReadX 11817 126976 4096 4096 NT_STATUS_OK
ReadX 11817 192512 4096 4096 NT_STATUS_OK
ReadX 11817 258048 4096 4096 NT_STATUS_OK
ReadX 11817 323584 4096 4096 NT_STATUS_OK
ReadX 11817 389120 4096 4096 NT_STATUS_OK
ReadX 11817 454656 4096 4096 NT_STATUS_OK
ReadX 11817 520192 4096 4096 NT_STATUS_OK
WriteX 11817 0 65536 65536 NT_STATUS_OK
WriteX 11817 65536 65536 65536 NT_STATUS_OK
WriteX 11817 131072 65536 65536 NT_STATUS_OK
WriteX 11817 196608 65536 65536 NT_STATUS_OK
WriteX 11817 262144 65536 65536 NT_STATUS_OK
WriteX 11817 327680 65536 65536 NT_STATUS_OK
WriteX 11817 393216 65536 65536 NT_STATUS_OK
WriteX 11817 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11818 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11818 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11818 8192 4096 4096 NT_STATUS_OK
ReadX 11818 12288 4096 4096 NT_STATUS_OK
ReadX 11818 16384 4096 4096 NT_STATUS_OK
ReadX 11818 20480 4096 4096 NT_STATUS_OK
ReadX 11818 24576 4096 4096 NT_STATUS_OK
ReadX 11818 28672 4096 4096 NT_STATUS_OK
ReadX 11818 32768 4096 4096 NT_STATUS_OK
ReadX 11818 36864 4096 4096 NT_STATUS_OK
ReadX 11818 40960 4096 4096 NT_STATUS_OK
ReadX 11818 45056 4096 4096 NT_STATUS_OK
ReadX 11818 49152 4096 4096 NT_STATUS_OK
ReadX 11818 53248 4096 4096 NT_STATUS_OK
ReadX 11818 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11818 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11821 NT_STATUS_OK
WriteX 11821 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11821 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
WriteX 11821 0 57088 57088 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
Flush 11821 NT_STATUS_OK
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11822 NT_STATUS_OK
SET_FILE_INFORMATION 11822 1004 NT_STATUS_OK
Close 11822 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11825 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11826 NT_STATUS_OK
WriteX 11826 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
WriteX 11826 0 51456 51456 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11830 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11835 NT_STATUS_OK
WriteX 11835 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11835 258 NT_STATUS_OK
WriteX 11835 0 53077 53077 NT_STATUS_OK
Close 11835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11836 NT_STATUS_OK
WriteX 11836 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11836 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
WriteX 11836 0 65536 65536 NT_STATUS_OK
WriteX 11836 65536 1856 1856 NT_STATUS_OK
WriteX 11836 0 4096 4096 NT_STATUS_OK
Flush 11836 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
WriteX 11836 0 4096 4096 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11845 NT_STATUS_OK
WriteX 11845 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 7983 7983 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11847 NT_STATUS_OK
Close 11847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
WriteX 11850 0 65536 65536 NT_STATUS_OK
WriteX 11850 65536 65536 65536 NT_STATUS_OK
WriteX 11850 131072 65536 65536 NT_STATUS_OK
WriteX 11850 196608 65536 65536 NT_STATUS_OK
WriteX 11850 262144 65536 65536 NT_STATUS_OK
WriteX 11850 327680 65536 65536 NT_STATUS_OK
WriteX 11850 393216 65536 65536 NT_STATUS_OK
WriteX 11850 458752 46731 46731 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11851 NT_STATUS_OK
WriteX 11851 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11840 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
WriteX 11851 0 65536 65536 NT_STATUS_OK
WriteX 11851 65536 22848 22848 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
Flush 11851 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
Close 11851 NT_STATUS_OK
Close 11840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11853 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11855 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11856 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11856 1004 NT_STATUS_OK
ReadX 11856 8192 4096 4096 NT_STATUS_OK
ReadX 11856 12288 4096 4096 NT_STATUS_OK
ReadX 11856 16384 4096 4096 NT_STATUS_OK
ReadX 11856 20480 4096 4096 NT_STATUS_OK
ReadX 11856 24576 4096 4096 NT_STATUS_OK
ReadX 11856 28672 4096 4096 NT_STATUS_OK
ReadX 11856 32768 4096 4096 NT_STATUS_OK
ReadX 11856 36864 4096 4096 NT_STATUS_OK
ReadX 11856 40960 4096 4096 NT_STATUS_OK
ReadX 11856 45056 4096 4096 NT_STATUS_OK
ReadX 11856 49152 4096 4096 NT_STATUS_OK
ReadX 11856 53248 4096 4096 NT_STATUS_OK
ReadX 11856 57344 4096 4096 NT_STATUS_OK
ReadX 11856 61440 4096 4096 NT_STATUS_OK
ReadX 11856 65536 4096 4096 NT_STATUS_OK
ReadX 11856 69632 4096 4096 NT_STATUS_OK
ReadX 11856 73728 4096 4096 NT_STATUS_OK
ReadX 11856 77824 4096 4096 NT_STATUS_OK
ReadX 11856 81920 4096 4096 NT_STATUS_OK
ReadX 11856 86016 4096 4096 NT_STATUS_OK
ReadX 11856 90112 4096 4096 NT_STATUS_OK
ReadX 11856 94208 4096 4096 NT_STATUS_OK
ReadX 11856 98304 4096 4096 NT_STATUS_OK
ReadX 11856 102400 4096 4096 NT_STATUS_OK
ReadX 11856 106496 4096 4096 NT_STATUS_OK
ReadX 11856 110592 4096 4096 NT_STATUS_OK
ReadX 11856 114688 4096 4096 NT_STATUS_OK
ReadX 11856 118784 4096 4096 NT_STATUS_OK
ReadX 11856 122880 4096 4096 NT_STATUS_OK
ReadX 11856 126976 4096 4096 NT_STATUS_OK
ReadX 11856 131072 4096 4096 NT_STATUS_OK
ReadX 11856 135168 4096 4096 NT_STATUS_OK
ReadX 11856 139264 4096 4096 NT_STATUS_OK
ReadX 11856 143360 4096 4096 NT_STATUS_OK
ReadX 11856 147456 4096 4096 NT_STATUS_OK
ReadX 11856 151552 4096 4096 NT_STATUS_OK
ReadX 11856 155648 4096 4096 NT_STATUS_OK
ReadX 11856 159744 4096 4096 NT_STATUS_OK
ReadX 11856 163840 4096 4096 NT_STATUS_OK
ReadX 11856 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11856 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11859 NT_STATUS_OK
WriteX 11859 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11860 NT_STATUS_OK
SET_FILE_INFORMATION 11860 1004 NT_STATUS_OK
Close 11860 NT_STATUS_OK
WriteX 11859 0 42388 42388 NT_STATUS_OK
Close 11859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
ReadX 11863 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11864 NT_STATUS_OK
WriteX 11864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
WriteX 11864 0 42652 42652 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
ReadX 11868 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11873 NT_STATUS_OK
WriteX 11873 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11873 258 NT_STATUS_OK
WriteX 11873 0 65536 65536 NT_STATUS_OK
WriteX 11873 65536 49 49 NT_STATUS_OK
Close 11873 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 61440 61440 NT_STATUS_OK
ReadX 11874 61440 4096 4096 NT_STATUS_OK
ReadX 11874 65536 61440 61440 NT_STATUS_OK
ReadX 11874 126976 4096 4096 NT_STATUS_OK
ReadX 11874 131072 61440 61440 NT_STATUS_OK
ReadX 11874 192512 4096 4096 NT_STATUS_OK
ReadX 11874 196608 61440 61440 NT_STATUS_OK
ReadX 11874 258048 4096 4096 NT_STATUS_OK
ReadX 11874 262144 61440 61440 NT_STATUS_OK
ReadX 11874 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 61440 61440 NT_STATUS_OK
ReadX 11875 61440 4096 4096 NT_STATUS_OK
ReadX 11875 65536 61440 61440 NT_STATUS_OK
ReadX 11875 126976 4096 4096 NT_STATUS_OK
ReadX 11875 131072 61440 61440 NT_STATUS_OK
ReadX 11875 192512 4096 4096 NT_STATUS_OK
ReadX 11875 196608 61440 61440 NT_STATUS_OK
ReadX 11875 258048 4096 4096 NT_STATUS_OK
ReadX 11875 262144 61440 61440 NT_STATUS_OK
ReadX 11875 323584 4096 4096 NT_STATUS_OK
ReadX 11875 327680 61440 61440 NT_STATUS_OK
ReadX 11875 389120 4096 4096 NT_STATUS_OK
ReadX 11875 393216 61440 61440 NT_STATUS_OK
ReadX 11875 454656 4096 4096 NT_STATUS_OK
ReadX 11875 458752 61440 61440 NT_STATUS_OK
ReadX 11875 520192 4096 4096 NT_STATUS_OK
ReadX 11875 524288 61440 61440 NT_STATUS_OK
ReadX 11875 585728 4096 4096 NT_STATUS_OK
ReadX 11875 589824 61440 61440 NT_STATUS_OK
ReadX 11875 651264 4096 4096 NT_STATUS_OK
ReadX 11875 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 61440 61440 NT_STATUS_OK
ReadX 11876 61440 4096 4096 NT_STATUS_OK
ReadX 11876 65536 61440 61440 NT_STATUS_OK
ReadX 11876 126976 4096 4096 NT_STATUS_OK
ReadX 11876 131072 61440 61440 NT_STATUS_OK
ReadX 11876 192512 4096 4096 NT_STATUS_OK
ReadX 11876 196608 61440 61440 NT_STATUS_OK
ReadX 11876 258048 4096 4096 NT_STATUS_OK
ReadX 11876 262144 61440 61440 NT_STATUS_OK
ReadX 11876 323584 4096 4096 NT_STATUS_OK
ReadX 11876 327680 61440 61440 NT_STATUS_OK
ReadX 11876 389120 4096 4096 NT_STATUS_OK
ReadX 11876 393216 61440 61440 NT_STATUS_OK
ReadX 11876 454656 4096 4096 NT_STATUS_OK
ReadX 11876 458752 61440 61440 NT_STATUS_OK
ReadX 11876 520192 4096 4096 NT_STATUS_OK
ReadX 11876 524288 61440 61440 NT_STATUS_OK
ReadX 11876 585728 4096 4096 NT_STATUS_OK
ReadX 11876 589824 61440 61440 NT_STATUS_OK
ReadX 11876 651264 4096 4096 NT_STATUS_OK
ReadX 11876 655360 61440 61440 NT_STATUS_OK
ReadX 11876 716800 4096 4096 NT_STATUS_OK
ReadX 11876 720896 61440 61440 NT_STATUS_OK
ReadX 11876 782336 4096 4096 NT_STATUS_OK
ReadX 11876 786432 61440 61440 NT_STATUS_OK
ReadX 11876 847872 4096 4096 NT_STATUS_OK
ReadX 11876 851968 61440 61440 NT_STATUS_OK
ReadX 11876 913408 4096 4096 NT_STATUS_OK
ReadX 11876 917504 61440 61440 NT_STATUS_OK
ReadX 11876 978944 4096 4096 NT_STATUS_OK
ReadX 11876 983040 61440 61440 NT_STATUS_OK
ReadX 11876 1044480 4096 4096 NT_STATUS_OK
ReadX 11876 1048576 61440 61440 NT_STATUS_OK
ReadX 11876 1110016 4096 4096 NT_STATUS_OK
ReadX 11876 1114112 61440 61440 NT_STATUS_OK
ReadX 11876 1175552 4096 4096 NT_STATUS_OK
ReadX 11876 1179648 61440 61440 NT_STATUS_OK
ReadX 11876 1241088 4096 4096 NT_STATUS_OK
ReadX 11876 1245184 61440 61440 NT_STATUS_OK
ReadX 11876 1306624 4096 4096 NT_STATUS_OK
ReadX 11876 1310720 61440 61440 NT_STATUS_OK
ReadX 11876 1372160 4096 4096 NT_STATUS_OK
ReadX 11876 1376256 61440 61440 NT_STATUS_OK
ReadX 11876 1437696 4096 4096 NT_STATUS_OK
ReadX 11876 1441792 61440 61440 NT_STATUS_OK
ReadX 11876 1503232 4096 4096 NT_STATUS_OK
ReadX 11876 1507328 61440 61440 NT_STATUS_OK
ReadX 11876 1568768 4096 4096 NT_STATUS_OK
ReadX 11876 1572864 61440 61440 NT_STATUS_OK
ReadX 11876 1634304 4096 4096 NT_STATUS_OK
ReadX 11876 1638400 61440 61440 NT_STATUS_OK
ReadX 11876 1699840 4096 4096 NT_STATUS_OK
ReadX 11876 1703936 61440 61440 NT_STATUS_OK
ReadX 11876 1765376 4096 4096 NT_STATUS_OK
ReadX 11876 1769472 61440 61440 NT_STATUS_OK
ReadX 11876 1830912 4096 4096 NT_STATUS_OK
ReadX 11876 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11878 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1005 NT_STATUS_OK
ReadX 11878 2156 24 24 NT_STATUS_OK
ReadX 11878 2139 276 276 NT_STATUS_OK
ReadX 11878 2136 14 14 NT_STATUS_OK
ReadX 11878 2136 7 7 NT_STATUS_OK
ReadX 11878 2138 12 12 NT_STATUS_OK
ReadX 11878 2137 8 8 NT_STATUS_OK
ReadX 11878 2135 15 15 NT_STATUS_OK
ReadX 11878 0 16 16 NT_STATUS_OK
ReadX 11878 16 2048 2048 NT_STATUS_OK
ReadX 11878 2064 2048 2048 NT_STATUS_OK
ReadX 11878 257 2048 2048 NT_STATUS_OK
ReadX 11878 385 2048 2048 NT_STATUS_OK
ReadX 11878 513 2048 2048 NT_STATUS_OK
ReadX 11878 641 2048 2048 NT_STATUS_OK
ReadX 11878 769 2048 2048 NT_STATUS_OK
ReadX 11878 897 2048 2048 NT_STATUS_OK
ReadX 11878 1025 2048 2048 NT_STATUS_OK
ReadX 11878 1153 2048 2048 NT_STATUS_OK
ReadX 11878 1281 2048 2048 NT_STATUS_OK
ReadX 11878 1409 2048 2048 NT_STATUS_OK
ReadX 11878 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11883 NT_STATUS_OK
WriteX 11883 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11883 258 NT_STATUS_OK
WriteX 11883 0 10575 10575 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11884 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
Close 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11888 NT_STATUS_OK
LockX 11888 2147483538 1 NT_STATUS_OK
UnlockX 11888 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1005 NT_STATUS_OK
ReadX 11888 0 512 512 NT_STATUS_OK
ReadX 11888 512 512 512 NT_STATUS_OK
ReadX 11888 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1004 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11889 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1005 NT_STATUS_OK
ReadX 11889 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11890 NT_STATUS_OK
LockX 11890 2147483538 1 NT_STATUS_OK
UnlockX 11890 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11890 1005 NT_STATUS_OK
ReadX 11890 0 512 512 NT_STATUS_OK
ReadX 11890 512 512 512 NT_STATUS_OK
ReadX 11890 1024 512 512 NT_STATUS_OK
ReadX 11890 288 20 20 NT_STATUS_OK
ReadX 11890 308 2084 2084 NT_STATUS_OK
ReadX 11890 388 2084 2084 NT_STATUS_OK
ReadX 11890 388 2084 2084 NT_STATUS_OK
ReadX 11877 2157 1386 1386 NT_STATUS_OK
ReadX 11890 2472 399 399 NT_STATUS_OK
ReadX 11890 3072 1536 1536 NT_STATUS_OK
ReadX 11890 544 149 149 NT_STATUS_OK
ReadX 11890 693 485 485 NT_STATUS_OK
Close 11890 NT_STATUS_OK
ReadX 11877 2157 4096 4096 NT_STATUS_OK
ReadX 11877 6253 4096 4096 NT_STATUS_OK
ReadX 11877 10349 4096 4096 NT_STATUS_OK
ReadX 11877 14445 4096 4096 NT_STATUS_OK
ReadX 11877 18541 4096 4096 NT_STATUS_OK
ReadX 11877 22637 256 256 NT_STATUS_OK
ReadX 11877 22893 4096 4096 NT_STATUS_OK
ReadX 11877 26989 4096 4096 NT_STATUS_OK
ReadX 11877 31085 4096 4096 NT_STATUS_OK
ReadX 11877 35181 4096 4096 NT_STATUS_OK
ReadX 11877 39277 4096 4096 NT_STATUS_OK
ReadX 11877 43373 4096 4096 NT_STATUS_OK
ReadX 11877 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11877 2157 1024 1024 NT_STATUS_OK
ReadX 11877 1667 4688 4688 NT_STATUS_OK
ReadX 11877 6355 3516 3516 NT_STATUS_OK
ReadX 11877 9871 16384 16384 NT_STATUS_OK
ReadX 11877 26255 3771 3771 NT_STATUS_OK
ReadX 11877 30026 2048 2048 NT_STATUS_OK
ReadX 11877 32074 1024 1024 NT_STATUS_OK
ReadX 11877 33098 6652 6652 NT_STATUS_OK
ReadX 11877 39750 16384 16384 NT_STATUS_OK
ReadX 11877 56134 10496 10496 NT_STATUS_OK
ReadX 11877 66630 1784 1784 NT_STATUS_OK
ReadX 11877 68414 90 90 NT_STATUS_OK
ReadX 11877 68504 273 273 NT_STATUS_OK
ReadX 11877 68777 1600 1600 NT_STATUS_OK
ReadX 11877 70377 640 640 NT_STATUS_OK
ReadX 11877 71017 1280 1280 NT_STATUS_OK
ReadX 11877 72297 8464 8464 NT_STATUS_OK
ReadX 11877 80761 158 158 NT_STATUS_OK
ReadX 11877 80919 912 912 NT_STATUS_OK
ReadX 11877 81831 1980 1980 NT_STATUS_OK
ReadX 11877 83811 2256 2256 NT_STATUS_OK
ReadX 11877 86067 400 400 NT_STATUS_OK
ReadX 11877 86467 252 252 NT_STATUS_OK
ReadX 11877 86719 42 42 NT_STATUS_OK
ReadX 11877 86761 725 725 NT_STATUS_OK
ReadX 11877 2009 512 512 NT_STATUS_OK
ReadX 11877 3895 9 9 NT_STATUS_OK
ReadX 11877 3781 46 46 NT_STATUS_OK
ReadX 11877 4059 92 92 NT_STATUS_OK
ReadX 11877 3781 92 92 NT_STATUS_OK
ReadX 11877 3986 184 184 NT_STATUS_OK
ReadX 11877 3987 16384 16384 NT_STATUS_OK
ReadX 11877 3902 16384 16384 NT_STATUS_OK
ReadX 11877 3781 10240 10240 NT_STATUS_OK
ReadX 11877 3821 16384 16384 NT_STATUS_OK
ReadX 11877 3891 935 935 NT_STATUS_OK
ReadX 11877 4060 10240 10240 NT_STATUS_OK
ReadX 11877 4059 184 184 NT_STATUS_OK
ReadX 11877 256 184 184 NT_STATUS_OK
ReadX 11877 256 1026 1026 NT_STATUS_OK
ReadX 11877 3901 326 326 NT_STATUS_OK
ReadX 11877 3899 652 652 NT_STATUS_OK
ReadX 11877 256 2 2 NT_STATUS_OK
ReadX 11877 258 4948 4948 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11892 NT_STATUS_OK
Close 11892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11895 NT_STATUS_OK
WriteX 11895 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11895 258 NT_STATUS_OK
WriteX 11895 0 65536 65536 NT_STATUS_OK
WriteX 11895 65536 65536 65536 NT_STATUS_OK
WriteX 11895 131072 65536 65536 NT_STATUS_OK
WriteX 11895 196608 65536 65536 NT_STATUS_OK
WriteX 11895 262144 65536 65536 NT_STATUS_OK
WriteX 11895 327680 65536 65536 NT_STATUS_OK
WriteX 11895 393216 65536 65536 NT_STATUS_OK
WriteX 11895 458752 65536 65536 NT_STATUS_OK
WriteX 11895 524288 65536 65536 NT_STATUS_OK
WriteX 11895 589824 35257 35257 NT_STATUS_OK
Close 11895 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11900 NT_STATUS_OK
WriteX 11900 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 258 NT_STATUS_OK
WriteX 11900 0 65536 65536 NT_STATUS_OK
WriteX 11900 65536 65536 65536 NT_STATUS_OK
WriteX 11900 131072 65536 65536 NT_STATUS_OK
WriteX 11900 196608 65536 65536 NT_STATUS_OK
WriteX 11900 262144 65536 65536 NT_STATUS_OK
WriteX 11900 327680 65536 65536 NT_STATUS_OK
WriteX 11900 393216 65536 65536 NT_STATUS_OK
WriteX 11900 458752 65536 65536 NT_STATUS_OK
WriteX 11900 524288 65536 65536 NT_STATUS_OK
WriteX 11900 589824 57598 57598 NT_STATUS_OK
Close 11900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11902 NT_STATUS_OK
WriteX 11902 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11902 258 NT_STATUS_OK
WriteX 11902 0 12543 12543 NT_STATUS_OK
Flush 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11908 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1005 NT_STATUS_OK
ReadX 11908 1938 24 24 NT_STATUS_OK
ReadX 11908 1920 276 276 NT_STATUS_OK
ReadX 11908 1918 14 14 NT_STATUS_OK
ReadX 11908 1918 7 7 NT_STATUS_OK
ReadX 11908 1919 12 12 NT_STATUS_OK
ReadX 11908 1919 8 8 NT_STATUS_OK
ReadX 11908 1917 15 15 NT_STATUS_OK
ReadX 11908 0 16 16 NT_STATUS_OK
ReadX 11908 16 2048 2048 NT_STATUS_OK
ReadX 11908 2064 2048 2048 NT_STATUS_OK
ReadX 11908 257 2048 2048 NT_STATUS_OK
ReadX 11908 385 2048 2048 NT_STATUS_OK
ReadX 11908 513 2048 2048 NT_STATUS_OK
ReadX 11908 641 2048 2048 NT_STATUS_OK
ReadX 11908 769 2048 2048 NT_STATUS_OK
ReadX 11908 897 2048 2048 NT_STATUS_OK
ReadX 11908 1025 2048 2048 NT_STATUS_OK
ReadX 11908 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11913 NT_STATUS_OK
WriteX 11913 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 258 NT_STATUS_OK
WriteX 11913 0 11588 11588 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 4096 4096 NT_STATUS_OK
Close 11908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 11615 11615 NT_STATUS_OK
Flush 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11924 NT_STATUS_OK
Close 11924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11927 NT_STATUS_OK
WriteX 11927 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 258 NT_STATUS_OK
WriteX 11927 0 65536 65536 NT_STATUS_OK
WriteX 11927 65536 16050 16050 NT_STATUS_OK
Close 11927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11907 1939 64 64 NT_STATUS_OK
ReadX 11907 128 248 248 NT_STATUS_OK
ReadX 11907 128 568 568 NT_STATUS_OK
ReadX 11907 3872 1536 1536 NT_STATUS_OK
ReadX 11907 3456 2560 2560 NT_STATUS_OK
ReadX 11907 3136 512 512 NT_STATUS_OK
ReadX 11907 2880 4096 4096 NT_STATUS_OK
ReadX 11907 3264 3072 3072 NT_STATUS_OK
ReadX 11907 320 4096 4096 NT_STATUS_OK
ReadX 11907 1024 4096 4096 NT_STATUS_OK
ReadX 11907 3616 4096 4096 NT_STATUS_OK
ReadX 11907 1939 64 64 NT_STATUS_OK
ReadX 11907 128 248 248 NT_STATUS_OK
ReadX 11907 128 608 608 NT_STATUS_OK
ReadX 11907 2858 1024 1024 NT_STATUS_OK
ReadX 11907 2810 4096 4096 NT_STATUS_OK
ReadX 11907 2826 4096 4096 NT_STATUS_OK
ReadX 11907 2580 2048 2048 NT_STATUS_OK
ReadX 11907 2800 2560 2560 NT_STATUS_OK
ReadX 11907 2100 4096 4096 NT_STATUS_OK
ReadX 11907 2084 4096 4096 NT_STATUS_OK
ReadX 11907 868 4096 4096 NT_STATUS_OK
ReadX 11907 2324 4096 4096 NT_STATUS_OK
ReadX 11907 884 4096 4096 NT_STATUS_OK
ReadX 11907 2604 1024 1024 NT_STATUS_OK
ReadX 11907 580 4096 4096 NT_STATUS_OK
ReadX 11907 596 4096 4096 NT_STATUS_OK
ReadX 11907 2752 4096 4096 NT_STATUS_OK
ReadX 11907 2842 1024 1024 NT_STATUS_OK
ReadX 11907 660 4096 4096 NT_STATUS_OK
ReadX 11907 2720 4096 4096 NT_STATUS_OK
ReadX 11907 2736 4096 4096 NT_STATUS_OK
ReadX 11907 628 4096 4096 NT_STATUS_OK
ReadX 11907 2704 4096 4096 NT_STATUS_OK
ReadX 11907 1556 4096 4096 NT_STATUS_OK
ReadX 11907 576 4096 4096 NT_STATUS_OK
ReadX 11907 3168 1536 1536 NT_STATUS_OK
ReadX 11907 832 4096 4096 NT_STATUS_OK
ReadX 11907 1088 4096 4096 NT_STATUS_OK
ReadX 11907 1344 4096 4096 NT_STATUS_OK
ReadX 11907 1600 4096 4096 NT_STATUS_OK
ReadX 11907 1856 4096 4096 NT_STATUS_OK
ReadX 11907 2112 4096 4096 NT_STATUS_OK
ReadX 11907 1892 4096 4096 NT_STATUS_OK
ReadX 11907 820 4096 4096 NT_STATUS_OK
ReadX 11907 788 4096 4096 NT_STATUS_OK
ReadX 11907 1604 4096 4096 NT_STATUS_OK
ReadX 11907 3648 4096 4096 NT_STATUS_OK
ReadX 11907 2608 4096 4096 NT_STATUS_OK
ReadX 11907 548 4096 4096 NT_STATUS_OK
ReadX 11907 740 4096 4096 NT_STATUS_OK
ReadX 11907 1344 4096 4096 NT_STATUS_OK
ReadX 11907 3392 4096 4096 NT_STATUS_OK
ReadX 11907 3904 4096 4096 NT_STATUS_OK
ReadX 11907 644 4096 4096 NT_STATUS_OK
ReadX 11907 676 4096 4096 NT_STATUS_OK
ReadX 11907 2688 4096 4096 NT_STATUS_OK
ReadX 11907 320 4096 4096 NT_STATUS_OK
ReadX 11907 900 4096 4096 NT_STATUS_OK
ReadX 11907 1908 4096 4096 NT_STATUS_OK
ReadX 11907 852 4096 4096 NT_STATUS_OK
ReadX 11907 724 4096 4096 NT_STATUS_OK
ReadX 11907 2292 4096 4096 NT_STATUS_OK
ReadX 11907 612 4096 4096 NT_STATUS_OK
ReadX 11907 388 4096 4096 NT_STATUS_OK
ReadX 11907 2368 4096 4096 NT_STATUS_OK
ReadX 11907 2624 4096 4096 NT_STATUS_OK
ReadX 11907 500 4096 4096 NT_STATUS_OK
ReadX 11907 356 4096 4096 NT_STATUS_OK
ReadX 11907 1024 4096 4096 NT_STATUS_OK
ReadX 11907 576 4096 4096 NT_STATUS_OK
ReadX 11907 340 4096 4096 NT_STATUS_OK
ReadX 11907 420 4096 4096 NT_STATUS_OK
ReadX 11907 1600 4096 4096 NT_STATUS_OK
ReadX 11907 404 4096 4096 NT_STATUS_OK
ReadX 11907 1428 4096 4096 NT_STATUS_OK
ReadX 11907 2656 4096 4096 NT_STATUS_OK
ReadX 11907 2624 4096 4096 NT_STATUS_OK
ReadX 11907 452 4096 4096 NT_STATUS_OK
ReadX 11907 692 4096 4096 NT_STATUS_OK
ReadX 11907 564 4096 4096 NT_STATUS_OK
ReadX 11907 372 4096 4096 NT_STATUS_OK
ReadX 11907 468 4096 4096 NT_STATUS_OK
ReadX 11907 484 4096 4096 NT_STATUS_OK
ReadX 11907 1088 4096 4096 NT_STATUS_OK
ReadX 11907 1924 4096 4096 NT_STATUS_OK
ReadX 11907 2768 4096 4096 NT_STATUS_OK
ReadX 11907 832 4096 4096 NT_STATUS_OK
ReadX 11907 836 4096 4096 NT_STATUS_OK
ReadX 11907 1856 4096 4096 NT_STATUS_OK
ReadX 11907 2640 4096 4096 NT_STATUS_OK
ReadX 11907 436 4096 4096 NT_STATUS_OK
ReadX 11907 1828 4096 4096 NT_STATUS_OK
ReadX 11907 804 4096 4096 NT_STATUS_OK
ReadX 11907 1860 4096 4096 NT_STATUS_OK
ReadX 11907 1812 4096 4096 NT_STATUS_OK
ReadX 11907 756 4096 4096 NT_STATUS_OK
ReadX 11907 1636 4096 4096 NT_STATUS_OK
ReadX 11907 772 4096 4096 NT_STATUS_OK
ReadX 11907 2036 4096 4096 NT_STATUS_OK
ReadX 11907 1220 4096 4096 NT_STATUS_OK
ReadX 11907 1652 4096 4096 NT_STATUS_OK
ReadX 11907 2588 4096 4096 NT_STATUS_OK
ReadX 11907 916 4096 4096 NT_STATUS_OK
ReadX 11907 260 4096 4096 NT_STATUS_OK
ReadX 11907 932 4096 4096 NT_STATUS_OK
ReadX 11907 2624 4096 4096 NT_STATUS_OK
ReadX 11907 308 4096 4096 NT_STATUS_OK
ReadX 11907 292 4096 4096 NT_STATUS_OK
ReadX 11907 1140 4096 4096 NT_STATUS_OK
ReadX 11907 276 4096 4096 NT_STATUS_OK
ReadX 11907 2020 4096 4096 NT_STATUS_OK
ReadX 11907 2880 4096 4096 NT_STATUS_OK
ReadX 11907 516 4096 4096 NT_STATUS_OK
ReadX 11907 1844 4096 4096 NT_STATUS_OK
ReadX 11907 1124 4096 4096 NT_STATUS_OK
ReadX 11907 3136 4096 4096 NT_STATUS_OK
ReadX 11907 324 4096 4096 NT_STATUS_OK
ReadX 11907 1156 4096 4096 NT_STATUS_OK
ReadX 11907 1172 4096 4096 NT_STATUS_OK
ReadX 11907 2112 4096 4096 NT_STATUS_OK
ReadX 11907 2368 4096 4096 NT_STATUS_OK
ReadX 11907 964 4096 4096 NT_STATUS_OK
ReadX 11907 980 4096 4096 NT_STATUS_OK
ReadX 11907 1012 4096 4096 NT_STATUS_OK
ReadX 11907 532 4096 4096 NT_STATUS_OK
ReadX 11907 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11907 1620 4096 4096 NT_STATUS_OK
ReadX 11907 1604 4096 4096 NT_STATUS_OK
ReadX 11907 2116 4096 4096 NT_STATUS_OK
ReadX 11907 2132 4096 4096 NT_STATUS_OK
ReadX 11907 2148 4096 4096 NT_STATUS_OK
ReadX 11907 2276 4096 4096 NT_STATUS_OK
ReadX 11907 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11932 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1004 NT_STATUS_OK
Close 11887 NT_STATUS_OK
WriteX 11932 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1004 NT_STATUS_OK
Close 11889 NT_STATUS_OK
WriteX 11932 0 65536 65536 NT_STATUS_OK
WriteX 11932 65536 64850 64850 NT_STATUS_OK
Close 11932 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11934 NT_STATUS_OK
WriteX 11934 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11934 258 NT_STATUS_OK
ReadX 11907 2068 4096 4096 NT_STATUS_OK
ReadX 11907 1588 4096 4096 NT_STATUS_OK
ReadX 11907 1572 4096 4096 NT_STATUS_OK
WriteX 11934 0 18630 18630 NT_STATUS_OK
Flush 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11936 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11907 612 4096 4096 NT_STATUS_OK
ReadX 11907 564 4096 4096 NT_STATUS_OK
ReadX 11907 1876 4096 4096 NT_STATUS_OK
ReadX 11907 628 4096 4096 NT_STATUS_OK
ReadX 11907 740 4096 4096 NT_STATUS_OK
ReadX 11907 724 4096 4096 NT_STATUS_OK
ReadX 11907 644 4096 4096 NT_STATUS_OK
ReadX 11907 2324 4096 4096 NT_STATUS_OK
ReadX 11907 660 4096 4096 NT_STATUS_OK
ReadX 11907 852 4096 4096 NT_STATUS_OK
ReadX 11907 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11907 2368 4096 4096 NT_STATUS_OK
ReadX 11907 1024 4096 4096 NT_STATUS_OK
ReadX 11907 320 4096 4096 NT_STATUS_OK
ReadX 11907 580 4096 4096 NT_STATUS_OK
ReadX 11907 3136 512 512 NT_STATUS_OK
ReadX 11907 2880 4096 4096 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 61440 4096 4096 NT_STATUS_OK
ReadX 11939 126976 4096 4096 NT_STATUS_OK
WriteX 11939 0 65536 65536 NT_STATUS_OK
WriteX 11939 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 61440 4096 4096 NT_STATUS_OK
ReadX 11940 126976 4096 4096 NT_STATUS_OK
ReadX 11940 192512 4096 4096 NT_STATUS_OK
ReadX 11940 258048 4096 4096 NT_STATUS_OK
WriteX 11940 0 65536 65536 NT_STATUS_OK
WriteX 11940 65536 65536 65536 NT_STATUS_OK
WriteX 11940 131072 65536 65536 NT_STATUS_OK
WriteX 11940 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 61440 4096 4096 NT_STATUS_OK
ReadX 11941 126976 4096 4096 NT_STATUS_OK
ReadX 11941 192512 4096 4096 NT_STATUS_OK
ReadX 11941 258048 4096 4096 NT_STATUS_OK
ReadX 11941 323584 4096 4096 NT_STATUS_OK
ReadX 11941 389120 4096 4096 NT_STATUS_OK
ReadX 11941 454656 4096 4096 NT_STATUS_OK
ReadX 11941 520192 4096 4096 NT_STATUS_OK
WriteX 11941 0 65536 65536 NT_STATUS_OK
WriteX 11941 65536 65536 65536 NT_STATUS_OK
WriteX 11941 131072 65536 65536 NT_STATUS_OK
WriteX 11941 196608 65536 65536 NT_STATUS_OK
WriteX 11941 262144 65536 65536 NT_STATUS_OK
WriteX 11941 327680 65536 65536 NT_STATUS_OK
WriteX 11941 393216 65536 65536 NT_STATUS_OK
WriteX 11941 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11943 NT_STATUS_OK
Close 11943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11944 NT_STATUS_OK
WriteX 11944 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11944 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11942 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11946 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11949 NT_STATUS_OK
WriteX 11949 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11949 258 NT_STATUS_OK
WriteX 11949 0 62591 62591 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11954 NT_STATUS_OK
WriteX 11954 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11954 258 NT_STATUS_OK
WriteX 11954 0 10845 10845 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11959 NT_STATUS_OK
WriteX 11959 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 258 NT_STATUS_OK
WriteX 11959 0 30118 30118 NT_STATUS_OK
Close 11959 NT_STATUS_OK
WriteX 11942 0 4096 4096 NT_STATUS_OK
WriteX 11944 0 64 64 NT_STATUS_OK
Close 11944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 61440 61440 NT_STATUS_OK
ReadX 11961 61440 4096 4096 NT_STATUS_OK
ReadX 11961 65536 61440 61440 NT_STATUS_OK
ReadX 11961 126976 4096 4096 NT_STATUS_OK
ReadX 11961 131072 61440 61440 NT_STATUS_OK
ReadX 11961 192512 4096 4096 NT_STATUS_OK
ReadX 11961 196608 61440 61440 NT_STATUS_OK
ReadX 11961 258048 4096 4096 NT_STATUS_OK
ReadX 11961 262144 61440 61440 NT_STATUS_OK
ReadX 11961 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 61440 61440 NT_STATUS_OK
ReadX 11962 61440 4096 4096 NT_STATUS_OK
ReadX 11962 65536 61440 61440 NT_STATUS_OK
ReadX 11962 126976 4096 4096 NT_STATUS_OK
ReadX 11962 131072 61440 61440 NT_STATUS_OK
ReadX 11962 192512 4096 4096 NT_STATUS_OK
ReadX 11962 196608 61440 61440 NT_STATUS_OK
ReadX 11962 258048 4096 4096 NT_STATUS_OK
ReadX 11962 262144 61440 61440 NT_STATUS_OK
ReadX 11962 323584 4096 4096 NT_STATUS_OK
ReadX 11962 327680 61440 61440 NT_STATUS_OK
ReadX 11962 389120 4096 4096 NT_STATUS_OK
ReadX 11962 393216 61440 61440 NT_STATUS_OK
ReadX 11962 454656 4096 4096 NT_STATUS_OK
ReadX 11962 458752 61440 61440 NT_STATUS_OK
ReadX 11962 520192 4096 4096 NT_STATUS_OK
ReadX 11962 524288 61440 61440 NT_STATUS_OK
ReadX 11962 585728 4096 4096 NT_STATUS_OK
ReadX 11962 589824 61440 61440 NT_STATUS_OK
ReadX 11962 651264 4096 4096 NT_STATUS_OK
ReadX 11962 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 61440 61440 NT_STATUS_OK
ReadX 11963 61440 4096 4096 NT_STATUS_OK
ReadX 11963 65536 61440 61440 NT_STATUS_OK
ReadX 11963 126976 4096 4096 NT_STATUS_OK
ReadX 11963 131072 61440 61440 NT_STATUS_OK
ReadX 11963 192512 4096 4096 NT_STATUS_OK
ReadX 11963 196608 61440 61440 NT_STATUS_OK
ReadX 11963 258048 4096 4096 NT_STATUS_OK
ReadX 11963 262144 61440 61440 NT_STATUS_OK
ReadX 11963 323584 4096 4096 NT_STATUS_OK
ReadX 11963 327680 61440 61440 NT_STATUS_OK
ReadX 11963 389120 4096 4096 NT_STATUS_OK
ReadX 11963 393216 61440 61440 NT_STATUS_OK
ReadX 11963 454656 4096 4096 NT_STATUS_OK
ReadX 11963 458752 61440 61440 NT_STATUS_OK
ReadX 11963 520192 4096 4096 NT_STATUS_OK
ReadX 11963 524288 61440 61440 NT_STATUS_OK
ReadX 11963 585728 4096 4096 NT_STATUS_OK
ReadX 11963 589824 61440 61440 NT_STATUS_OK
ReadX 11963 651264 4096 4096 NT_STATUS_OK
ReadX 11963 655360 61440 61440 NT_STATUS_OK
ReadX 11963 716800 4096 4096 NT_STATUS_OK
ReadX 11963 720896 61440 61440 NT_STATUS_OK
ReadX 11963 782336 4096 4096 NT_STATUS_OK
ReadX 11963 786432 61440 61440 NT_STATUS_OK
ReadX 11963 847872 4096 4096 NT_STATUS_OK
ReadX 11963 851968 61440 61440 NT_STATUS_OK
ReadX 11963 913408 4096 4096 NT_STATUS_OK
ReadX 11963 917504 61440 61440 NT_STATUS_OK
ReadX 11963 978944 4096 4096 NT_STATUS_OK
ReadX 11963 983040 61440 61440 NT_STATUS_OK
ReadX 11963 1044480 4096 4096 NT_STATUS_OK
ReadX 11963 1048576 61440 61440 NT_STATUS_OK
ReadX 11963 1110016 4096 4096 NT_STATUS_OK
ReadX 11963 1114112 61440 61440 NT_STATUS_OK
ReadX 11963 1175552 4096 4096 NT_STATUS_OK
ReadX 11963 1179648 61440 61440 NT_STATUS_OK
ReadX 11963 1241088 4096 4096 NT_STATUS_OK
ReadX 11963 1245184 61440 61440 NT_STATUS_OK
ReadX 11963 1306624 4096 4096 NT_STATUS_OK
ReadX 11963 1310720 61440 61440 NT_STATUS_OK
ReadX 11963 1372160 4096 4096 NT_STATUS_OK
ReadX 11963 1376256 61440 61440 NT_STATUS_OK
ReadX 11963 1437696 4096 4096 NT_STATUS_OK
ReadX 11963 1441792 61440 61440 NT_STATUS_OK
ReadX 11963 1503232 4096 4096 NT_STATUS_OK
ReadX 11963 1507328 61440 61440 NT_STATUS_OK
ReadX 11963 1568768 4096 4096 NT_STATUS_OK
ReadX 11963 1572864 61440 61440 NT_STATUS_OK
ReadX 11963 1634304 4096 4096 NT_STATUS_OK
ReadX 11963 1638400 61440 61440 NT_STATUS_OK
ReadX 11963 1699840 4096 4096 NT_STATUS_OK
ReadX 11963 1703936 61440 61440 NT_STATUS_OK
ReadX 11963 1765376 4096 4096 NT_STATUS_OK
ReadX 11963 1769472 61440 61440 NT_STATUS_OK
ReadX 11963 1830912 4096 4096 NT_STATUS_OK
ReadX 11963 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
ReadX 11968 4096 4096 4096 NT_STATUS_OK
ReadX 11968 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11971 NT_STATUS_OK
ReadX 11971 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11972 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11973 NT_STATUS_OK
Close 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 8192 8192 NT_STATUS_OK
ReadX 11976 8192 8192 8192 NT_STATUS_OK
ReadX 11976 16384 8192 8192 NT_STATUS_OK
ReadX 11976 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11981 NT_STATUS_OK
WriteX 11981 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 258 NT_STATUS_OK
WriteX 11981 0 10438 10438 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11984 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
ReadX 11990 4096 4096 4096 NT_STATUS_OK
ReadX 11990 8192 4096 4096 NT_STATUS_OK
ReadX 11990 12288 8192 8192 NT_STATUS_OK
ReadX 11990 20480 8192 8192 NT_STATUS_OK
ReadX 11990 28672 8192 8192 NT_STATUS_OK
ReadX 11990 36864 8192 8192 NT_STATUS_OK
ReadX 11990 45056 8192 8192 NT_STATUS_OK
ReadX 11990 53248 8192 8192 NT_STATUS_OK
ReadX 11990 61440 8192 8192 NT_STATUS_OK
ReadX 11990 69632 8192 8192 NT_STATUS_OK
ReadX 11990 77824 8192 8192 NT_STATUS_OK
ReadX 11990 86016 8192 8192 NT_STATUS_OK
ReadX 11990 94208 8192 8192 NT_STATUS_OK
ReadX 11990 102400 8192 8192 NT_STATUS_OK
ReadX 11990 110592 8192 8192 NT_STATUS_OK
ReadX 11990 118784 8192 8192 NT_STATUS_OK
ReadX 11990 126976 8192 8192 NT_STATUS_OK
ReadX 11990 135168 8192 8192 NT_STATUS_OK
ReadX 11990 143360 8192 8192 NT_STATUS_OK
ReadX 11990 151552 8192 8192 NT_STATUS_OK
ReadX 11990 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11990 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Close 11985 NT_STATUS_OK
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11995 NT_STATUS_OK
WriteX 11995 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 258 NT_STATUS_OK
WriteX 11995 0 28489 28489 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11998 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 8192 8192 NT_STATUS_OK
ReadX 12002 8192 8192 8192 NT_STATUS_OK
ReadX 12002 16384 8192 8192 NT_STATUS_OK
ReadX 12002 24576 8192 8192 NT_STATUS_OK
ReadX 12002 32768 16384 16384 NT_STATUS_OK
ReadX 12002 49152 8192 8192 NT_STATUS_OK
ReadX 12002 57344 8192 8192 NT_STATUS_OK
ReadX 12002 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12007 NT_STATUS_OK
WriteX 12007 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12007 258 NT_STATUS_OK
WriteX 12007 0 29253 29253 NT_STATUS_OK
Close 12007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12008 NT_STATUS_OK
Close 12008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12014 NT_STATUS_OK
WriteX 12014 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12014 258 NT_STATUS_OK
WriteX 12014 0 30183 30183 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12017 NT_STATUS_OK
WriteX 12017 0 510 510 NT_STATUS_OK
WriteX 12017 510 512 512 NT_STATUS_OK
WriteX 12017 1022 510 510 NT_STATUS_OK
WriteX 12017 1532 510 510 NT_STATUS_OK
WriteX 12017 2042 168 168 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12018 NT_STATUS_OK
Close 12018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
WriteX 12020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 61440 4096 4096 NT_STATUS_OK
ReadX 12021 126976 4096 4096 NT_STATUS_OK
WriteX 12021 0 65536 65536 NT_STATUS_OK
WriteX 12021 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 61440 4096 4096 NT_STATUS_OK
ReadX 12022 126976 4096 4096 NT_STATUS_OK
ReadX 12022 192512 4096 4096 NT_STATUS_OK
ReadX 12022 258048 4096 4096 NT_STATUS_OK
WriteX 12022 0 65536 65536 NT_STATUS_OK
WriteX 12022 65536 65536 65536 NT_STATUS_OK
WriteX 12022 131072 65536 65536 NT_STATUS_OK
WriteX 12022 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 61440 4096 4096 NT_STATUS_OK
ReadX 12023 126976 4096 4096 NT_STATUS_OK
ReadX 12023 192512 4096 4096 NT_STATUS_OK
ReadX 12023 258048 4096 4096 NT_STATUS_OK
ReadX 12023 323584 4096 4096 NT_STATUS_OK
ReadX 12023 389120 4096 4096 NT_STATUS_OK
ReadX 12023 454656 4096 4096 NT_STATUS_OK
ReadX 12023 520192 4096 4096 NT_STATUS_OK
WriteX 12023 0 65536 65536 NT_STATUS_OK
WriteX 12023 65536 65536 65536 NT_STATUS_OK
WriteX 12023 131072 65536 65536 NT_STATUS_OK
WriteX 12023 196608 65536 65536 NT_STATUS_OK
WriteX 12023 262144 65536 65536 NT_STATUS_OK
WriteX 12023 327680 65536 65536 NT_STATUS_OK
WriteX 12023 393216 65536 65536 NT_STATUS_OK
WriteX 12023 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12063 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12073 NT_STATUS_OK
Close 12073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12092 NT_STATUS_OK
WriteX 12092 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12092 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12092 0 65536 65536 NT_STATUS_OK
WriteX 12092 65536 65536 65536 NT_STATUS_OK
WriteX 12092 131072 65536 65536 NT_STATUS_OK
WriteX 12092 196608 65536 65536 NT_STATUS_OK
WriteX 12092 262144 26634 26634 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12097 NT_STATUS_OK
Close 12097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12100 NT_STATUS_OK
ReadX 12100 0 4096 4096 NT_STATUS_OK
ReadX 12100 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12108 NT_STATUS_OK
Close 12108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12117 NT_STATUS_OK
Close 12117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12128 NT_STATUS_OK
Close 12128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12133 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12162 NT_STATUS_OK
Close 12162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
Close 12194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12181 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12224 0 4096 4096 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
ReadX 12226 4096 4096 4096 NT_STATUS_OK
ReadX 12226 8192 4096 4096 NT_STATUS_OK
ReadX 12226 12288 4096 4096 NT_STATUS_OK
ReadX 12226 16384 4096 4096 NT_STATUS_OK
ReadX 12226 20480 4096 4096 NT_STATUS_OK
ReadX 12226 24576 4096 4096 NT_STATUS_OK
ReadX 12226 28672 4096 4096 NT_STATUS_OK
ReadX 12226 32768 4096 4096 NT_STATUS_OK
ReadX 12226 36864 4096 4096 NT_STATUS_OK
ReadX 12226 40960 4096 4096 NT_STATUS_OK
ReadX 12226 45056 4096 4096 NT_STATUS_OK
ReadX 12226 49152 4096 4096 NT_STATUS_OK
ReadX 12226 53248 4096 4096 NT_STATUS_OK
ReadX 12226 57344 4096 4096 NT_STATUS_OK
ReadX 12226 61440 4096 4096 NT_STATUS_OK
ReadX 12226 65536 4096 4096 NT_STATUS_OK
ReadX 12226 69632 4096 4096 NT_STATUS_OK
ReadX 12226 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12227 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12229 NT_STATUS_OK
Close 12229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12232 NT_STATUS_OK
WriteX 12232 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 258 NT_STATUS_OK
WriteX 12232 0 65536 65536 NT_STATUS_OK
WriteX 12232 65536 19979 19979 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
QUERY_FILE_INFORMATION 12233 1004 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
SET_FILE_INFORMATION 12233 1004 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12238 1004 NT_STATUS_OK
WriteX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12244 NT_STATUS_OK
WriteX 12244 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 258 NT_STATUS_OK
WriteX 12244 0 65536 65536 NT_STATUS_OK
WriteX 12244 65536 17654 17654 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12245 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
QUERY_FILE_INFORMATION 12245 1004 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
SET_FILE_INFORMATION 12245 1004 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12246 NT_STATUS_OK
SET_FILE_INFORMATION 12246 1004 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12248 NT_STATUS_OK
Close 12248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
ReadX 12250 4096 4096 4096 NT_STATUS_OK
ReadX 12250 8192 4096 4096 NT_STATUS_OK
ReadX 12250 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12250 16384 4096 4096 NT_STATUS_OK
ReadX 12250 20480 4096 4096 NT_STATUS_OK
ReadX 12250 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12253 1004 NT_STATUS_OK
WriteX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12256 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12259 NT_STATUS_OK
WriteX 12259 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 258 NT_STATUS_OK
WriteX 12259 0 65536 65536 NT_STATUS_OK
WriteX 12259 65536 19490 19490 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 1004 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12261 NT_STATUS_OK
SET_FILE_INFORMATION 12261 1004 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12265 0 4096 4096 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
ReadX 12267 4096 4096 4096 NT_STATUS_OK
ReadX 12267 8192 4096 4096 NT_STATUS_OK
ReadX 12267 12288 4096 4096 NT_STATUS_OK
ReadX 12267 16384 4096 4096 NT_STATUS_OK
ReadX 12267 20480 4096 4096 NT_STATUS_OK
ReadX 12267 24576 4096 4096 NT_STATUS_OK
ReadX 12267 28672 4096 4096 NT_STATUS_OK
ReadX 12267 32768 4096 4096 NT_STATUS_OK
ReadX 12267 36864 4096 4096 NT_STATUS_OK
ReadX 12267 40960 4096 4096 NT_STATUS_OK
ReadX 12267 45056 4096 4096 NT_STATUS_OK
ReadX 12267 49152 4096 4096 NT_STATUS_OK
ReadX 12267 53248 4096 4096 NT_STATUS_OK
ReadX 12267 57344 4096 4096 NT_STATUS_OK
ReadX 12267 61440 4096 4096 NT_STATUS_OK
ReadX 12267 65536 4096 4096 NT_STATUS_OK
ReadX 12267 69632 4096 4096 NT_STATUS_OK
ReadX 12267 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12267 1004 NT_STATUS_OK
WriteX 12267 0 4096 4096 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
SET_FILE_INFORMATION 12268 1004 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12273 NT_STATUS_OK
WriteX 12273 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12273 258 NT_STATUS_OK
WriteX 12273 0 65536 65536 NT_STATUS_OK
WriteX 12273 65536 8866 8866 NT_STATUS_OK
Close 12273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
WriteX 12274 0 4096 4096 NT_STATUS_OK
Flush 12274 NT_STATUS_OK
SET_FILE_INFORMATION 12274 1004 NT_STATUS_OK
WriteX 12274 0 4096 4096 NT_STATUS_OK
Flush 12274 NT_STATUS_OK
Close 12274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
Close 12277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12278 1004 NT_STATUS_OK
WriteX 12278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12278 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12281 NT_STATUS_OK
Close 12281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12284 NT_STATUS_OK
WriteX 12284 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12284 258 NT_STATUS_OK
WriteX 12284 0 65536 65536 NT_STATUS_OK
WriteX 12284 65536 9298 9298 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
WriteX 12285 0 4096 4096 NT_STATUS_OK
Flush 12285 NT_STATUS_OK
SET_FILE_INFORMATION 12285 1004 NT_STATUS_OK
WriteX 12285 0 4096 4096 NT_STATUS_OK
Flush 12285 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
SET_FILE_INFORMATION 12286 1004 NT_STATUS_OK
Close 12286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12287 NT_STATUS_OK
ReadX 12287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12288 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12291 0 4096 4096 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12292 NT_STATUS_OK
ReadX 12292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12292 4096 4096 4096 NT_STATUS_OK
ReadX 12292 8192 4096 4096 NT_STATUS_OK
ReadX 12292 12288 4096 4096 NT_STATUS_OK
ReadX 12292 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12295 1004 NT_STATUS_OK
WriteX 12295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12292 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12298 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12301 NT_STATUS_OK
WriteX 12301 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12301 258 NT_STATUS_OK
WriteX 12301 0 65536 65536 NT_STATUS_OK
WriteX 12301 65536 11540 11540 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
WriteX 12302 0 4096 4096 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
SET_FILE_INFORMATION 12302 1004 NT_STATUS_OK
WriteX 12302 0 4096 4096 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12303 NT_STATUS_OK
SET_FILE_INFORMATION 12303 1004 NT_STATUS_OK
Close 12303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12305 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 61440 4096 4096 NT_STATUS_OK
ReadX 12307 126976 4096 4096 NT_STATUS_OK
WriteX 12307 0 65536 65536 NT_STATUS_OK
WriteX 12307 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 61440 4096 4096 NT_STATUS_OK
ReadX 12308 126976 4096 4096 NT_STATUS_OK
ReadX 12308 192512 4096 4096 NT_STATUS_OK
ReadX 12308 258048 4096 4096 NT_STATUS_OK
WriteX 12308 0 65536 65536 NT_STATUS_OK
WriteX 12308 65536 65536 65536 NT_STATUS_OK
WriteX 12308 131072 65536 65536 NT_STATUS_OK
WriteX 12308 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 61440 4096 4096 NT_STATUS_OK
ReadX 12309 126976 4096 4096 NT_STATUS_OK
ReadX 12309 192512 4096 4096 NT_STATUS_OK
ReadX 12309 258048 4096 4096 NT_STATUS_OK
ReadX 12309 323584 4096 4096 NT_STATUS_OK
ReadX 12309 389120 4096 4096 NT_STATUS_OK
ReadX 12309 454656 4096 4096 NT_STATUS_OK
ReadX 12309 520192 4096 4096 NT_STATUS_OK
WriteX 12309 0 65536 65536 NT_STATUS_OK
WriteX 12309 65536 65536 65536 NT_STATUS_OK
WriteX 12309 131072 65536 65536 NT_STATUS_OK
WriteX 12309 196608 65536 65536 NT_STATUS_OK
WriteX 12309 262144 65536 65536 NT_STATUS_OK
WriteX 12309 327680 65536 65536 NT_STATUS_OK
WriteX 12309 393216 65536 65536 NT_STATUS_OK
Close 12304 NT_STATUS_OK
WriteX 12309 458752 65536 65536 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12309 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12310 NT_STATUS_OK
ReadX 12310 0 4096 4096 NT_STATUS_OK
ReadX 12310 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12311 NT_STATUS_OK
WriteX 12311 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12311 258 NT_STATUS_OK
WriteX 12311 0 53 53 NT_STATUS_OK
Close 12311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12312 NT_STATUS_OK
Close 12312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12310 8192 4096 4096 NT_STATUS_OK
ReadX 12310 12288 4096 4096 NT_STATUS_OK
WriteX 12314 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
ReadX 12310 16384 4096 4096 NT_STATUS_OK
ReadX 12310 20480 4096 4096 NT_STATUS_OK
WriteX 12314 0 15360 15360 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
WriteX 12315 0 4096 4096 NT_STATUS_OK
Close 12315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12319 NT_STATUS_OK
Close 12319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12318 4096 4096 4096 NT_STATUS_OK
ReadX 12318 8192 4096 4096 NT_STATUS_OK
ReadX 12318 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
ReadX 12321 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
ReadX 12322 4096 4096 4096 NT_STATUS_OK
ReadX 12322 8192 4096 4096 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12323 NT_STATUS_OK
WriteX 12323 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12323 258 NT_STATUS_OK
WriteX 12323 0 15360 15360 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12324 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12324 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12328 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
Close 12328 NT_STATUS_OK
WriteX 12324 0 4096 4096 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
ReadX 12331 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12331 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12331 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12332 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12333 NT_STATUS_OK
WriteX 12333 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12333 258 NT_STATUS_OK
WriteX 12333 0 53 53 NT_STATUS_OK
Close 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12332 4096 4096 4096 NT_STATUS_OK
ReadX 12332 8192 4096 4096 NT_STATUS_OK
ReadX 12332 12288 4096 4096 NT_STATUS_OK
WriteX 12336 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12336 258 NT_STATUS_OK
WriteX 12336 0 12006 12006 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 0 4096 4096 NT_STATUS_OK
Close 12337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12341 NT_STATUS_OK
Close 12341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12340 4096 4096 4096 NT_STATUS_OK
ReadX 12340 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12343 NT_STATUS_OK
WriteX 12343 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 258 NT_STATUS_OK
WriteX 12343 0 11991 11991 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12344 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12344 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12348 NT_STATUS_OK
WriteX 12331 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 12348 1004 NT_STATUS_OK
Close 12348 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12352 NT_STATUS_OK
Close 12352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12351 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
ReadX 12351 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
WriteX 12351 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
Close 12327 NT_STATUS_OK
WriteX 12351 0 12288 12288 NT_STATUS_OK
Close 12347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12331 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 61440 61440 NT_STATUS_OK
ReadX 12358 61440 4096 4096 NT_STATUS_OK
ReadX 12358 65536 61440 61440 NT_STATUS_OK
ReadX 12358 126976 4096 4096 NT_STATUS_OK
ReadX 12358 131072 61440 61440 NT_STATUS_OK
ReadX 12358 192512 4096 4096 NT_STATUS_OK
ReadX 12358 196608 61440 61440 NT_STATUS_OK
ReadX 12358 258048 4096 4096 NT_STATUS_OK
ReadX 12358 262144 61440 61440 NT_STATUS_OK
ReadX 12358 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 61440 61440 NT_STATUS_OK
ReadX 12359 61440 4096 4096 NT_STATUS_OK
ReadX 12359 65536 61440 61440 NT_STATUS_OK
ReadX 12359 126976 4096 4096 NT_STATUS_OK
ReadX 12359 131072 61440 61440 NT_STATUS_OK
ReadX 12359 192512 4096 4096 NT_STATUS_OK
ReadX 12359 196608 61440 61440 NT_STATUS_OK
ReadX 12359 258048 4096 4096 NT_STATUS_OK
ReadX 12359 262144 61440 61440 NT_STATUS_OK
ReadX 12359 323584 4096 4096 NT_STATUS_OK
ReadX 12359 327680 61440 61440 NT_STATUS_OK
ReadX 12359 389120 4096 4096 NT_STATUS_OK
ReadX 12359 393216 61440 61440 NT_STATUS_OK
ReadX 12359 454656 4096 4096 NT_STATUS_OK
ReadX 12359 458752 61440 61440 NT_STATUS_OK
ReadX 12359 520192 4096 4096 NT_STATUS_OK
ReadX 12359 524288 61440 61440 NT_STATUS_OK
ReadX 12359 585728 4096 4096 NT_STATUS_OK
ReadX 12359 589824 61440 61440 NT_STATUS_OK
ReadX 12359 651264 4096 4096 NT_STATUS_OK
ReadX 12359 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 61440 61440 NT_STATUS_OK
ReadX 12360 61440 4096 4096 NT_STATUS_OK
ReadX 12360 65536 61440 61440 NT_STATUS_OK
ReadX 12360 126976 4096 4096 NT_STATUS_OK
ReadX 12360 131072 61440 61440 NT_STATUS_OK
ReadX 12360 192512 4096 4096 NT_STATUS_OK
ReadX 12360 196608 61440 61440 NT_STATUS_OK
ReadX 12360 258048 4096 4096 NT_STATUS_OK
ReadX 12360 262144 61440 61440 NT_STATUS_OK
ReadX 12360 323584 4096 4096 NT_STATUS_OK
ReadX 12360 327680 61440 61440 NT_STATUS_OK
ReadX 12360 389120 4096 4096 NT_STATUS_OK
ReadX 12360 393216 61440 61440 NT_STATUS_OK
ReadX 12360 454656 4096 4096 NT_STATUS_OK
ReadX 12360 458752 61440 61440 NT_STATUS_OK
ReadX 12360 520192 4096 4096 NT_STATUS_OK
ReadX 12360 524288 61440 61440 NT_STATUS_OK
ReadX 12360 585728 4096 4096 NT_STATUS_OK
ReadX 12360 589824 61440 61440 NT_STATUS_OK
ReadX 12360 651264 4096 4096 NT_STATUS_OK
ReadX 12360 655360 61440 61440 NT_STATUS_OK
ReadX 12360 716800 4096 4096 NT_STATUS_OK
ReadX 12360 720896 61440 61440 NT_STATUS_OK
ReadX 12360 782336 4096 4096 NT_STATUS_OK
ReadX 12360 786432 61440 61440 NT_STATUS_OK
ReadX 12360 847872 4096 4096 NT_STATUS_OK
ReadX 12360 851968 61440 61440 NT_STATUS_OK
ReadX 12360 913408 4096 4096 NT_STATUS_OK
ReadX 12360 917504 61440 61440 NT_STATUS_OK
ReadX 12360 978944 4096 4096 NT_STATUS_OK
ReadX 12360 983040 61440 61440 NT_STATUS_OK
ReadX 12360 1044480 4096 4096 NT_STATUS_OK
ReadX 12360 1048576 61440 61440 NT_STATUS_OK
ReadX 12360 1110016 4096 4096 NT_STATUS_OK
ReadX 12360 1114112 61440 61440 NT_STATUS_OK
ReadX 12360 1175552 4096 4096 NT_STATUS_OK
ReadX 12360 1179648 61440 61440 NT_STATUS_OK
ReadX 12360 1241088 4096 4096 NT_STATUS_OK
ReadX 12360 1245184 61440 61440 NT_STATUS_OK
ReadX 12360 1306624 4096 4096 NT_STATUS_OK
ReadX 12360 1310720 61440 61440 NT_STATUS_OK
ReadX 12360 1372160 4096 4096 NT_STATUS_OK
ReadX 12360 1376256 61440 61440 NT_STATUS_OK
ReadX 12360 1437696 4096 4096 NT_STATUS_OK
ReadX 12360 1441792 61440 61440 NT_STATUS_OK
ReadX 12360 1503232 4096 4096 NT_STATUS_OK
ReadX 12360 1507328 61440 61440 NT_STATUS_OK
ReadX 12360 1568768 4096 4096 NT_STATUS_OK
ReadX 12360 1572864 61440 61440 NT_STATUS_OK
ReadX 12360 1634304 4096 4096 NT_STATUS_OK
ReadX 12360 1638400 61440 61440 NT_STATUS_OK
ReadX 12360 1699840 4096 4096 NT_STATUS_OK
ReadX 12360 1703936 61440 61440 NT_STATUS_OK
ReadX 12360 1765376 4096 4096 NT_STATUS_OK
ReadX 12360 1769472 61440 61440 NT_STATUS_OK
ReadX 12360 1830912 4096 4096 NT_STATUS_OK
ReadX 12360 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12367 NT_STATUS_OK
QUERY_FILE_INFORMATION 12367 1004 NT_STATUS_OK
WriteX 12367 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12367 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12369 NT_STATUS_OK
WriteX 12369 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 491 491 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12367 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
WriteX 12373 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 258 NT_STATUS_OK
WriteX 12373 0 543 543 NT_STATUS_OK
Close 12373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12374 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12386 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12387 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 1004 NT_STATUS_OK
WriteX 12387 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 258 NT_STATUS_OK
WriteX 12387 0 2048 2048 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12388 NT_STATUS_OK
ReadX 12388 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12388 0 4096 4096 NT_STATUS_OK
Flush 12388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12393 NT_STATUS_OK
WriteX 12393 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12393 258 NT_STATUS_OK
WriteX 12393 0 2048 2048 NT_STATUS_OK
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12399 NT_STATUS_OK
WriteX 12399 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 258 NT_STATUS_OK
WriteX 12399 0 2048 2048 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 2048 2048 NT_STATUS_OK
ReadX 12378 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12394 0 4096 4096 NT_STATUS_OK
WriteX 12378 0 8192 8192 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
WriteX 12380 0 4096 4096 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12404 NT_STATUS_OK
QUERY_FILE_INFORMATION 12404 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12413 NT_STATUS_OK
ReadX 12413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12424 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 1004 NT_STATUS_OK
WriteX 12424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
WriteX 12424 0 2048 2048 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12427 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12432 NT_STATUS_OK
QUERY_FILE_INFORMATION 12432 1004 NT_STATUS_OK
WriteX 12432 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12432 258 NT_STATUS_OK
WriteX 12432 0 2048 2048 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12425 0 4096 4096 NT_STATUS_OK
Flush 12425 NT_STATUS_OK
WriteX 12433 0 4096 4096 NT_STATUS_OK
Flush 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12425 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12433 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12427 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12435 NT_STATUS_OK
WriteX 12435 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
WriteX 12435 0 4096 4096 NT_STATUS_OK
Close 12435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12437 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12438 NT_STATUS_OK
WriteX 12438 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 258 NT_STATUS_OK
WriteX 12438 0 4096 4096 NT_STATUS_OK
Close 12438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12439 0 4096 4096 NT_STATUS_OK
Close 12436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12414 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12412 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12445 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12446 NT_STATUS_OK
WriteX 12446 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12446 258 NT_STATUS_OK
WriteX 12446 0 2048 2048 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12461 NT_STATUS_OK
QUERY_FILE_INFORMATION 12461 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12463 NT_STATUS_OK
QUERY_FILE_INFORMATION 12463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12470 NT_STATUS_OK
ReadX 12470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12483 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 1004 NT_STATUS_OK
WriteX 12483 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 258 NT_STATUS_OK
WriteX 12483 0 2048 2048 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12486 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12495 NT_STATUS_OK
QUERY_FILE_INFORMATION 12495 1004 NT_STATUS_OK
WriteX 12495 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12495 258 NT_STATUS_OK
WriteX 12495 0 2048 2048 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12503 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 1004 NT_STATUS_OK
WriteX 12503 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 258 NT_STATUS_OK
WriteX 12503 0 2048 2048 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12496 0 4096 4096 NT_STATUS_OK
Flush 12496 NT_STATUS_OK
WriteX 12504 0 4096 4096 NT_STATUS_OK
Flush 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12496 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12504 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12486 4096 16384 16384 NT_STATUS_OK
ReadX 12466 4096 16384 16384 NT_STATUS_OK
ReadX 12498 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 2048 2048 NT_STATUS_OK
WriteX 12506 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12507 NT_STATUS_OK
QUERY_FILE_INFORMATION 12507 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12470 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12472 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12509 NT_STATUS_OK
QUERY_FILE_INFORMATION 12509 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12511 NT_STATUS_OK
QUERY_FILE_INFORMATION 12511 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12514 4096 16384 16384 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 8192 8192 NT_STATUS_OK
ReadX 12520 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
ReadX 12534 8192 4096 4096 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
WriteX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12535 0 4096 4096 NT_STATUS_OK
ReadX 12535 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12540 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 1004 NT_STATUS_OK
WriteX 12540 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
WriteX 12540 0 2048 2048 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12542 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
ReadX 12543 4096 4096 4096 NT_STATUS_OK
WriteX 12543 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
ReadX 12545 4096 4096 4096 NT_STATUS_OK
WriteX 12545 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12546 NT_STATUS_OK
QUERY_FILE_INFORMATION 12546 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12529 NT_STATUS_OK
Close 12530 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12548 0 4096 4096 NT_STATUS_OK
ReadX 12548 4096 4096 4096 NT_STATUS_OK
ReadX 12548 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
ReadX 12549 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12566 NT_STATUS_OK
QUERY_FILE_INFORMATION 12566 1004 NT_STATUS_OK
WriteX 12566 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12566 258 NT_STATUS_OK
WriteX 12566 0 2048 2048 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12571 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12572 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 1004 NT_STATUS_OK
WriteX 12572 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 2048 2048 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12556 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12574 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12576 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 61440 4096 4096 NT_STATUS_OK
ReadX 12578 126976 4096 4096 NT_STATUS_OK
WriteX 12578 0 65536 65536 NT_STATUS_OK
WriteX 12578 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 61440 4096 4096 NT_STATUS_OK
ReadX 12579 126976 4096 4096 NT_STATUS_OK
ReadX 12579 192512 4096 4096 NT_STATUS_OK
ReadX 12579 258048 4096 4096 NT_STATUS_OK
WriteX 12579 0 65536 65536 NT_STATUS_OK
WriteX 12579 65536 65536 65536 NT_STATUS_OK
WriteX 12579 131072 65536 65536 NT_STATUS_OK
WriteX 12579 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 61440 4096 4096 NT_STATUS_OK
ReadX 12580 126976 4096 4096 NT_STATUS_OK
ReadX 12580 192512 4096 4096 NT_STATUS_OK
ReadX 12580 258048 4096 4096 NT_STATUS_OK
ReadX 12580 323584 4096 4096 NT_STATUS_OK
ReadX 12580 389120 4096 4096 NT_STATUS_OK
ReadX 12580 454656 4096 4096 NT_STATUS_OK
ReadX 12580 520192 4096 4096 NT_STATUS_OK
WriteX 12580 0 65536 65536 NT_STATUS_OK
WriteX 12580 65536 65536 65536 NT_STATUS_OK
WriteX 12580 131072 65536 65536 NT_STATUS_OK
WriteX 12580 196608 65536 65536 NT_STATUS_OK
WriteX 12580 262144 65536 65536 NT_STATUS_OK
WriteX 12580 327680 65536 65536 NT_STATUS_OK
WriteX 12580 393216 65536 65536 NT_STATUS_OK
WriteX 12580 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12581 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12581 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12581 8192 4096 4096 NT_STATUS_OK
ReadX 12581 12288 4096 4096 NT_STATUS_OK
ReadX 12581 16384 4096 4096 NT_STATUS_OK
ReadX 12581 20480 4096 4096 NT_STATUS_OK
ReadX 12581 24576 4096 4096 NT_STATUS_OK
ReadX 12581 28672 4096 4096 NT_STATUS_OK
ReadX 12581 32768 4096 4096 NT_STATUS_OK
ReadX 12581 36864 4096 4096 NT_STATUS_OK
ReadX 12581 40960 4096 4096 NT_STATUS_OK
ReadX 12581 45056 4096 4096 NT_STATUS_OK
ReadX 12581 49152 4096 4096 NT_STATUS_OK
ReadX 12581 53248 4096 4096 NT_STATUS_OK
ReadX 12581 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12581 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12584 NT_STATUS_OK
WriteX 12584 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12584 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
WriteX 12584 0 57088 57088 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
Flush 12584 NT_STATUS_OK
Close 12581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12585 NT_STATUS_OK
SET_FILE_INFORMATION 12585 1004 NT_STATUS_OK
Close 12585 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12588 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12589 NT_STATUS_OK
WriteX 12589 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
WriteX 12589 0 51456 51456 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12593 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12598 NT_STATUS_OK
WriteX 12598 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12598 258 NT_STATUS_OK
WriteX 12598 0 53077 53077 NT_STATUS_OK
Close 12598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12599 NT_STATUS_OK
WriteX 12599 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12599 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
WriteX 12599 0 65536 65536 NT_STATUS_OK
WriteX 12599 65536 1856 1856 NT_STATUS_OK
WriteX 12599 0 4096 4096 NT_STATUS_OK
Flush 12599 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
WriteX 12599 0 4096 4096 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12608 NT_STATUS_OK
WriteX 12608 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12608 258 NT_STATUS_OK
WriteX 12608 0 7983 7983 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12610 NT_STATUS_OK
Close 12610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
WriteX 12613 0 65536 65536 NT_STATUS_OK
WriteX 12613 65536 65536 65536 NT_STATUS_OK
WriteX 12613 131072 65536 65536 NT_STATUS_OK
WriteX 12613 196608 65536 65536 NT_STATUS_OK
WriteX 12613 262144 65536 65536 NT_STATUS_OK
WriteX 12613 327680 65536 65536 NT_STATUS_OK
WriteX 12613 393216 65536 65536 NT_STATUS_OK
WriteX 12613 458752 46731 46731 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12614 NT_STATUS_OK
WriteX 12614 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12614 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12603 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12614 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
WriteX 12614 0 65536 65536 NT_STATUS_OK
WriteX 12614 65536 22848 22848 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
Flush 12614 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
Close 12614 NT_STATUS_OK
Close 12603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12616 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12618 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12619 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12619 1004 NT_STATUS_OK
ReadX 12619 8192 4096 4096 NT_STATUS_OK
ReadX 12619 12288 4096 4096 NT_STATUS_OK
ReadX 12619 16384 4096 4096 NT_STATUS_OK
ReadX 12619 20480 4096 4096 NT_STATUS_OK
ReadX 12619 24576 4096 4096 NT_STATUS_OK
ReadX 12619 28672 4096 4096 NT_STATUS_OK
ReadX 12619 32768 4096 4096 NT_STATUS_OK
ReadX 12619 36864 4096 4096 NT_STATUS_OK
ReadX 12619 40960 4096 4096 NT_STATUS_OK
ReadX 12619 45056 4096 4096 NT_STATUS_OK
ReadX 12619 49152 4096 4096 NT_STATUS_OK
ReadX 12619 53248 4096 4096 NT_STATUS_OK
ReadX 12619 57344 4096 4096 NT_STATUS_OK
ReadX 12619 61440 4096 4096 NT_STATUS_OK
ReadX 12619 65536 4096 4096 NT_STATUS_OK
ReadX 12619 69632 4096 4096 NT_STATUS_OK
ReadX 12619 73728 4096 4096 NT_STATUS_OK
ReadX 12619 77824 4096 4096 NT_STATUS_OK
ReadX 12619 81920 4096 4096 NT_STATUS_OK
ReadX 12619 86016 4096 4096 NT_STATUS_OK
ReadX 12619 90112 4096 4096 NT_STATUS_OK
ReadX 12619 94208 4096 4096 NT_STATUS_OK
ReadX 12619 98304 4096 4096 NT_STATUS_OK
ReadX 12619 102400 4096 4096 NT_STATUS_OK
ReadX 12619 106496 4096 4096 NT_STATUS_OK
ReadX 12619 110592 4096 4096 NT_STATUS_OK
ReadX 12619 114688 4096 4096 NT_STATUS_OK
ReadX 12619 118784 4096 4096 NT_STATUS_OK
ReadX 12619 122880 4096 4096 NT_STATUS_OK
ReadX 12619 126976 4096 4096 NT_STATUS_OK
ReadX 12619 131072 4096 4096 NT_STATUS_OK
ReadX 12619 135168 4096 4096 NT_STATUS_OK
ReadX 12619 139264 4096 4096 NT_STATUS_OK
ReadX 12619 143360 4096 4096 NT_STATUS_OK
ReadX 12619 147456 4096 4096 NT_STATUS_OK
ReadX 12619 151552 4096 4096 NT_STATUS_OK
ReadX 12619 155648 4096 4096 NT_STATUS_OK
ReadX 12619 159744 4096 4096 NT_STATUS_OK
ReadX 12619 163840 4096 4096 NT_STATUS_OK
ReadX 12619 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12619 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12622 NT_STATUS_OK
WriteX 12622 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12623 NT_STATUS_OK
SET_FILE_INFORMATION 12623 1004 NT_STATUS_OK
Close 12623 NT_STATUS_OK
WriteX 12622 0 42388 42388 NT_STATUS_OK
Close 12622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
ReadX 12626 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12627 NT_STATUS_OK
WriteX 12627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
WriteX 12627 0 42652 42652 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
ReadX 12631 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12636 NT_STATUS_OK
WriteX 12636 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12636 258 NT_STATUS_OK
WriteX 12636 0 65536 65536 NT_STATUS_OK
WriteX 12636 65536 49 49 NT_STATUS_OK
Close 12636 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 61440 61440 NT_STATUS_OK
ReadX 12637 61440 4096 4096 NT_STATUS_OK
ReadX 12637 65536 61440 61440 NT_STATUS_OK
ReadX 12637 126976 4096 4096 NT_STATUS_OK
ReadX 12637 131072 61440 61440 NT_STATUS_OK
ReadX 12637 192512 4096 4096 NT_STATUS_OK
ReadX 12637 196608 61440 61440 NT_STATUS_OK
ReadX 12637 258048 4096 4096 NT_STATUS_OK
ReadX 12637 262144 61440 61440 NT_STATUS_OK
ReadX 12637 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 61440 61440 NT_STATUS_OK
ReadX 12638 61440 4096 4096 NT_STATUS_OK
ReadX 12638 65536 61440 61440 NT_STATUS_OK
ReadX 12638 126976 4096 4096 NT_STATUS_OK
ReadX 12638 131072 61440 61440 NT_STATUS_OK
ReadX 12638 192512 4096 4096 NT_STATUS_OK
ReadX 12638 196608 61440 61440 NT_STATUS_OK
ReadX 12638 258048 4096 4096 NT_STATUS_OK
ReadX 12638 262144 61440 61440 NT_STATUS_OK
ReadX 12638 323584 4096 4096 NT_STATUS_OK
ReadX 12638 327680 61440 61440 NT_STATUS_OK
ReadX 12638 389120 4096 4096 NT_STATUS_OK
ReadX 12638 393216 61440 61440 NT_STATUS_OK
ReadX 12638 454656 4096 4096 NT_STATUS_OK
ReadX 12638 458752 61440 61440 NT_STATUS_OK
ReadX 12638 520192 4096 4096 NT_STATUS_OK
ReadX 12638 524288 61440 61440 NT_STATUS_OK
ReadX 12638 585728 4096 4096 NT_STATUS_OK
ReadX 12638 589824 61440 61440 NT_STATUS_OK
ReadX 12638 651264 4096 4096 NT_STATUS_OK
ReadX 12638 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 61440 61440 NT_STATUS_OK
ReadX 12639 61440 4096 4096 NT_STATUS_OK
ReadX 12639 65536 61440 61440 NT_STATUS_OK
ReadX 12639 126976 4096 4096 NT_STATUS_OK
ReadX 12639 131072 61440 61440 NT_STATUS_OK
ReadX 12639 192512 4096 4096 NT_STATUS_OK
ReadX 12639 196608 61440 61440 NT_STATUS_OK
ReadX 12639 258048 4096 4096 NT_STATUS_OK
ReadX 12639 262144 61440 61440 NT_STATUS_OK
ReadX 12639 323584 4096 4096 NT_STATUS_OK
ReadX 12639 327680 61440 61440 NT_STATUS_OK
ReadX 12639 389120 4096 4096 NT_STATUS_OK
ReadX 12639 393216 61440 61440 NT_STATUS_OK
ReadX 12639 454656 4096 4096 NT_STATUS_OK
ReadX 12639 458752 61440 61440 NT_STATUS_OK
ReadX 12639 520192 4096 4096 NT_STATUS_OK
ReadX 12639 524288 61440 61440 NT_STATUS_OK
ReadX 12639 585728 4096 4096 NT_STATUS_OK
ReadX 12639 589824 61440 61440 NT_STATUS_OK
ReadX 12639 651264 4096 4096 NT_STATUS_OK
ReadX 12639 655360 61440 61440 NT_STATUS_OK
ReadX 12639 716800 4096 4096 NT_STATUS_OK
ReadX 12639 720896 61440 61440 NT_STATUS_OK
ReadX 12639 782336 4096 4096 NT_STATUS_OK
ReadX 12639 786432 61440 61440 NT_STATUS_OK
ReadX 12639 847872 4096 4096 NT_STATUS_OK
ReadX 12639 851968 61440 61440 NT_STATUS_OK
ReadX 12639 913408 4096 4096 NT_STATUS_OK
ReadX 12639 917504 61440 61440 NT_STATUS_OK
ReadX 12639 978944 4096 4096 NT_STATUS_OK
ReadX 12639 983040 61440 61440 NT_STATUS_OK
ReadX 12639 1044480 4096 4096 NT_STATUS_OK
ReadX 12639 1048576 61440 61440 NT_STATUS_OK
ReadX 12639 1110016 4096 4096 NT_STATUS_OK
ReadX 12639 1114112 61440 61440 NT_STATUS_OK
ReadX 12639 1175552 4096 4096 NT_STATUS_OK
ReadX 12639 1179648 61440 61440 NT_STATUS_OK
ReadX 12639 1241088 4096 4096 NT_STATUS_OK
ReadX 12639 1245184 61440 61440 NT_STATUS_OK
ReadX 12639 1306624 4096 4096 NT_STATUS_OK
ReadX 12639 1310720 61440 61440 NT_STATUS_OK
ReadX 12639 1372160 4096 4096 NT_STATUS_OK
ReadX 12639 1376256 61440 61440 NT_STATUS_OK
ReadX 12639 1437696 4096 4096 NT_STATUS_OK
ReadX 12639 1441792 61440 61440 NT_STATUS_OK
ReadX 12639 1503232 4096 4096 NT_STATUS_OK
ReadX 12639 1507328 61440 61440 NT_STATUS_OK
ReadX 12639 1568768 4096 4096 NT_STATUS_OK
ReadX 12639 1572864 61440 61440 NT_STATUS_OK
ReadX 12639 1634304 4096 4096 NT_STATUS_OK
ReadX 12639 1638400 61440 61440 NT_STATUS_OK
ReadX 12639 1699840 4096 4096 NT_STATUS_OK
ReadX 12639 1703936 61440 61440 NT_STATUS_OK
ReadX 12639 1765376 4096 4096 NT_STATUS_OK
ReadX 12639 1769472 61440 61440 NT_STATUS_OK
ReadX 12639 1830912 4096 4096 NT_STATUS_OK
ReadX 12639 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1005 NT_STATUS_OK
ReadX 12641 2156 24 24 NT_STATUS_OK
ReadX 12641 2139 276 276 NT_STATUS_OK
ReadX 12641 2136 14 14 NT_STATUS_OK
ReadX 12641 2136 7 7 NT_STATUS_OK
ReadX 12641 2138 12 12 NT_STATUS_OK
ReadX 12641 2137 8 8 NT_STATUS_OK
ReadX 12641 2135 15 15 NT_STATUS_OK
ReadX 12641 0 16 16 NT_STATUS_OK
ReadX 12641 16 2048 2048 NT_STATUS_OK
ReadX 12641 2064 2048 2048 NT_STATUS_OK
ReadX 12641 257 2048 2048 NT_STATUS_OK
ReadX 12641 385 2048 2048 NT_STATUS_OK
ReadX 12641 513 2048 2048 NT_STATUS_OK
ReadX 12641 641 2048 2048 NT_STATUS_OK
ReadX 12641 769 2048 2048 NT_STATUS_OK
ReadX 12641 897 2048 2048 NT_STATUS_OK
ReadX 12641 1025 2048 2048 NT_STATUS_OK
ReadX 12641 1153 2048 2048 NT_STATUS_OK
ReadX 12641 1281 2048 2048 NT_STATUS_OK
ReadX 12641 1409 2048 2048 NT_STATUS_OK
ReadX 12641 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12646 NT_STATUS_OK
WriteX 12646 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12646 258 NT_STATUS_OK
WriteX 12646 0 10575 10575 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12647 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
Close 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12651 NT_STATUS_OK
LockX 12651 2147483538 1 NT_STATUS_OK
UnlockX 12651 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1005 NT_STATUS_OK
ReadX 12651 0 512 512 NT_STATUS_OK
ReadX 12651 512 512 512 NT_STATUS_OK
ReadX 12651 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1004 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12652 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1005 NT_STATUS_OK
ReadX 12652 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12653 NT_STATUS_OK
LockX 12653 2147483538 1 NT_STATUS_OK
UnlockX 12653 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 1005 NT_STATUS_OK
ReadX 12653 0 512 512 NT_STATUS_OK
ReadX 12653 512 512 512 NT_STATUS_OK
ReadX 12653 1024 512 512 NT_STATUS_OK
ReadX 12653 288 20 20 NT_STATUS_OK
ReadX 12653 308 2084 2084 NT_STATUS_OK
ReadX 12653 388 2084 2084 NT_STATUS_OK
ReadX 12653 388 2084 2084 NT_STATUS_OK
ReadX 12640 2157 1386 1386 NT_STATUS_OK
ReadX 12653 2472 399 399 NT_STATUS_OK
ReadX 12653 3072 1536 1536 NT_STATUS_OK
ReadX 12653 544 149 149 NT_STATUS_OK
ReadX 12653 693 485 485 NT_STATUS_OK
Close 12653 NT_STATUS_OK
ReadX 12640 2157 4096 4096 NT_STATUS_OK
ReadX 12640 6253 4096 4096 NT_STATUS_OK
ReadX 12640 10349 4096 4096 NT_STATUS_OK
ReadX 12640 14445 4096 4096 NT_STATUS_OK
ReadX 12640 18541 4096 4096 NT_STATUS_OK
ReadX 12640 22637 256 256 NT_STATUS_OK
ReadX 12640 22893 4096 4096 NT_STATUS_OK
ReadX 12640 26989 4096 4096 NT_STATUS_OK
ReadX 12640 31085 4096 4096 NT_STATUS_OK
ReadX 12640 35181 4096 4096 NT_STATUS_OK
ReadX 12640 39277 4096 4096 NT_STATUS_OK
ReadX 12640 43373 4096 4096 NT_STATUS_OK
ReadX 12640 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12640 2157 1024 1024 NT_STATUS_OK
ReadX 12640 1667 4688 4688 NT_STATUS_OK
ReadX 12640 6355 3516 3516 NT_STATUS_OK
ReadX 12640 9871 16384 16384 NT_STATUS_OK
ReadX 12640 26255 3771 3771 NT_STATUS_OK
ReadX 12640 30026 2048 2048 NT_STATUS_OK
ReadX 12640 32074 1024 1024 NT_STATUS_OK
ReadX 12640 33098 6652 6652 NT_STATUS_OK
ReadX 12640 39750 16384 16384 NT_STATUS_OK
ReadX 12640 56134 10496 10496 NT_STATUS_OK
ReadX 12640 66630 1784 1784 NT_STATUS_OK
ReadX 12640 68414 90 90 NT_STATUS_OK
ReadX 12640 68504 273 273 NT_STATUS_OK
ReadX 12640 68777 1600 1600 NT_STATUS_OK
ReadX 12640 70377 640 640 NT_STATUS_OK
ReadX 12640 71017 1280 1280 NT_STATUS_OK
ReadX 12640 72297 8464 8464 NT_STATUS_OK
ReadX 12640 80761 158 158 NT_STATUS_OK
ReadX 12640 80919 912 912 NT_STATUS_OK
ReadX 12640 81831 1980 1980 NT_STATUS_OK
ReadX 12640 83811 2256 2256 NT_STATUS_OK
ReadX 12640 86067 400 400 NT_STATUS_OK
ReadX 12640 86467 252 252 NT_STATUS_OK
ReadX 12640 86719 42 42 NT_STATUS_OK
ReadX 12640 86761 725 725 NT_STATUS_OK
ReadX 12640 2009 512 512 NT_STATUS_OK
ReadX 12640 3895 9 9 NT_STATUS_OK
ReadX 12640 3781 46 46 NT_STATUS_OK
ReadX 12640 4059 92 92 NT_STATUS_OK
ReadX 12640 3781 92 92 NT_STATUS_OK
ReadX 12640 3986 184 184 NT_STATUS_OK
ReadX 12640 3987 16384 16384 NT_STATUS_OK
ReadX 12640 3902 16384 16384 NT_STATUS_OK
ReadX 12640 3781 10240 10240 NT_STATUS_OK
ReadX 12640 3821 16384 16384 NT_STATUS_OK
ReadX 12640 3891 935 935 NT_STATUS_OK
ReadX 12640 4060 10240 10240 NT_STATUS_OK
ReadX 12640 4059 184 184 NT_STATUS_OK
ReadX 12640 256 184 184 NT_STATUS_OK
ReadX 12640 256 1026 1026 NT_STATUS_OK
ReadX 12640 3901 326 326 NT_STATUS_OK
ReadX 12640 3899 652 652 NT_STATUS_OK
ReadX 12640 256 2 2 NT_STATUS_OK
ReadX 12640 258 4948 4948 NT_STATUS_OK
Close 12640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12658 NT_STATUS_OK
WriteX 12658 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
WriteX 12658 0 65536 65536 NT_STATUS_OK
WriteX 12658 65536 65536 65536 NT_STATUS_OK
WriteX 12658 131072 65536 65536 NT_STATUS_OK
WriteX 12658 196608 65536 65536 NT_STATUS_OK
WriteX 12658 262144 65536 65536 NT_STATUS_OK
WriteX 12658 327680 65536 65536 NT_STATUS_OK
WriteX 12658 393216 65536 65536 NT_STATUS_OK
WriteX 12658 458752 65536 65536 NT_STATUS_OK
WriteX 12658 524288 65536 65536 NT_STATUS_OK
WriteX 12658 589824 35257 35257 NT_STATUS_OK
Close 12658 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12663 NT_STATUS_OK
WriteX 12663 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 258 NT_STATUS_OK
WriteX 12663 0 65536 65536 NT_STATUS_OK
WriteX 12663 65536 65536 65536 NT_STATUS_OK
WriteX 12663 131072 65536 65536 NT_STATUS_OK
WriteX 12663 196608 65536 65536 NT_STATUS_OK
WriteX 12663 262144 65536 65536 NT_STATUS_OK
WriteX 12663 327680 65536 65536 NT_STATUS_OK
WriteX 12663 393216 65536 65536 NT_STATUS_OK
WriteX 12663 458752 65536 65536 NT_STATUS_OK
WriteX 12663 524288 65536 65536 NT_STATUS_OK
WriteX 12663 589824 57598 57598 NT_STATUS_OK
Close 12663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12665 NT_STATUS_OK
WriteX 12665 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12665 258 NT_STATUS_OK
WriteX 12665 0 12543 12543 NT_STATUS_OK
Flush 12665 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12671 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1005 NT_STATUS_OK
ReadX 12671 1938 24 24 NT_STATUS_OK
ReadX 12671 1920 276 276 NT_STATUS_OK
ReadX 12671 1918 14 14 NT_STATUS_OK
ReadX 12671 1918 7 7 NT_STATUS_OK
ReadX 12671 1919 12 12 NT_STATUS_OK
ReadX 12671 1919 8 8 NT_STATUS_OK
ReadX 12671 1917 15 15 NT_STATUS_OK
ReadX 12671 0 16 16 NT_STATUS_OK
ReadX 12671 16 2048 2048 NT_STATUS_OK
ReadX 12671 2064 2048 2048 NT_STATUS_OK
ReadX 12671 257 2048 2048 NT_STATUS_OK
ReadX 12671 385 2048 2048 NT_STATUS_OK
ReadX 12671 513 2048 2048 NT_STATUS_OK
ReadX 12671 641 2048 2048 NT_STATUS_OK
ReadX 12671 769 2048 2048 NT_STATUS_OK
ReadX 12671 897 2048 2048 NT_STATUS_OK
ReadX 12671 1025 2048 2048 NT_STATUS_OK
ReadX 12671 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12676 NT_STATUS_OK
WriteX 12676 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12676 258 NT_STATUS_OK
WriteX 12676 0 11588 11588 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 4096 4096 NT_STATUS_OK
Close 12671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12681 NT_STATUS_OK
WriteX 12681 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12681 258 NT_STATUS_OK
WriteX 12681 0 11615 11615 NT_STATUS_OK
Flush 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12687 NT_STATUS_OK
Close 12687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12690 NT_STATUS_OK
WriteX 12690 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12690 258 NT_STATUS_OK
WriteX 12690 0 65536 65536 NT_STATUS_OK
WriteX 12690 65536 16050 16050 NT_STATUS_OK
Close 12690 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12670 1939 64 64 NT_STATUS_OK
ReadX 12670 128 248 248 NT_STATUS_OK
ReadX 12670 128 568 568 NT_STATUS_OK
ReadX 12670 3872 1536 1536 NT_STATUS_OK
ReadX 12670 3456 2560 2560 NT_STATUS_OK
ReadX 12670 3136 512 512 NT_STATUS_OK
ReadX 12670 2880 4096 4096 NT_STATUS_OK
ReadX 12670 3264 3072 3072 NT_STATUS_OK
ReadX 12670 320 4096 4096 NT_STATUS_OK
ReadX 12670 1024 4096 4096 NT_STATUS_OK
ReadX 12670 3616 4096 4096 NT_STATUS_OK
ReadX 12670 1939 64 64 NT_STATUS_OK
ReadX 12670 128 248 248 NT_STATUS_OK
ReadX 12670 128 608 608 NT_STATUS_OK
ReadX 12670 2858 1024 1024 NT_STATUS_OK
ReadX 12670 2810 4096 4096 NT_STATUS_OK
ReadX 12670 2826 4096 4096 NT_STATUS_OK
ReadX 12670 2580 2048 2048 NT_STATUS_OK
ReadX 12670 2800 2560 2560 NT_STATUS_OK
ReadX 12670 2100 4096 4096 NT_STATUS_OK
ReadX 12670 2084 4096 4096 NT_STATUS_OK
ReadX 12670 868 4096 4096 NT_STATUS_OK
ReadX 12670 2324 4096 4096 NT_STATUS_OK
ReadX 12670 884 4096 4096 NT_STATUS_OK
ReadX 12670 2604 1024 1024 NT_STATUS_OK
ReadX 12670 580 4096 4096 NT_STATUS_OK
ReadX 12670 596 4096 4096 NT_STATUS_OK
ReadX 12670 2752 4096 4096 NT_STATUS_OK
ReadX 12670 2842 1024 1024 NT_STATUS_OK
ReadX 12670 660 4096 4096 NT_STATUS_OK
ReadX 12670 2720 4096 4096 NT_STATUS_OK
ReadX 12670 2736 4096 4096 NT_STATUS_OK
ReadX 12670 628 4096 4096 NT_STATUS_OK
ReadX 12670 2704 4096 4096 NT_STATUS_OK
ReadX 12670 1556 4096 4096 NT_STATUS_OK
ReadX 12670 576 4096 4096 NT_STATUS_OK
ReadX 12670 3168 1536 1536 NT_STATUS_OK
ReadX 12670 832 4096 4096 NT_STATUS_OK
ReadX 12670 1088 4096 4096 NT_STATUS_OK
ReadX 12670 1344 4096 4096 NT_STATUS_OK
ReadX 12670 1600 4096 4096 NT_STATUS_OK
ReadX 12670 1856 4096 4096 NT_STATUS_OK
ReadX 12670 2112 4096 4096 NT_STATUS_OK
ReadX 12670 1892 4096 4096 NT_STATUS_OK
ReadX 12670 820 4096 4096 NT_STATUS_OK
ReadX 12670 788 4096 4096 NT_STATUS_OK
ReadX 12670 1604 4096 4096 NT_STATUS_OK
ReadX 12670 3648 4096 4096 NT_STATUS_OK
ReadX 12670 2608 4096 4096 NT_STATUS_OK
ReadX 12670 548 4096 4096 NT_STATUS_OK
ReadX 12670 740 4096 4096 NT_STATUS_OK
ReadX 12670 1344 4096 4096 NT_STATUS_OK
ReadX 12670 3392 4096 4096 NT_STATUS_OK
ReadX 12670 3904 4096 4096 NT_STATUS_OK
ReadX 12670 644 4096 4096 NT_STATUS_OK
ReadX 12670 676 4096 4096 NT_STATUS_OK
ReadX 12670 2688 4096 4096 NT_STATUS_OK
ReadX 12670 320 4096 4096 NT_STATUS_OK
ReadX 12670 900 4096 4096 NT_STATUS_OK
ReadX 12670 1908 4096 4096 NT_STATUS_OK
ReadX 12670 852 4096 4096 NT_STATUS_OK
ReadX 12670 724 4096 4096 NT_STATUS_OK
ReadX 12670 2292 4096 4096 NT_STATUS_OK
ReadX 12670 612 4096 4096 NT_STATUS_OK
ReadX 12670 388 4096 4096 NT_STATUS_OK
ReadX 12670 2368 4096 4096 NT_STATUS_OK
ReadX 12670 2624 4096 4096 NT_STATUS_OK
ReadX 12670 500 4096 4096 NT_STATUS_OK
ReadX 12670 356 4096 4096 NT_STATUS_OK
ReadX 12670 1024 4096 4096 NT_STATUS_OK
ReadX 12670 576 4096 4096 NT_STATUS_OK
ReadX 12670 340 4096 4096 NT_STATUS_OK
ReadX 12670 420 4096 4096 NT_STATUS_OK
ReadX 12670 1600 4096 4096 NT_STATUS_OK
ReadX 12670 404 4096 4096 NT_STATUS_OK
ReadX 12670 1428 4096 4096 NT_STATUS_OK
ReadX 12670 2656 4096 4096 NT_STATUS_OK
ReadX 12670 2624 4096 4096 NT_STATUS_OK
ReadX 12670 452 4096 4096 NT_STATUS_OK
ReadX 12670 692 4096 4096 NT_STATUS_OK
ReadX 12670 564 4096 4096 NT_STATUS_OK
ReadX 12670 372 4096 4096 NT_STATUS_OK
ReadX 12670 468 4096 4096 NT_STATUS_OK
ReadX 12670 484 4096 4096 NT_STATUS_OK
ReadX 12670 1088 4096 4096 NT_STATUS_OK
ReadX 12670 1924 4096 4096 NT_STATUS_OK
ReadX 12670 2768 4096 4096 NT_STATUS_OK
ReadX 12670 832 4096 4096 NT_STATUS_OK
ReadX 12670 836 4096 4096 NT_STATUS_OK
ReadX 12670 1856 4096 4096 NT_STATUS_OK
ReadX 12670 2640 4096 4096 NT_STATUS_OK
ReadX 12670 436 4096 4096 NT_STATUS_OK
ReadX 12670 1828 4096 4096 NT_STATUS_OK
ReadX 12670 804 4096 4096 NT_STATUS_OK
ReadX 12670 1860 4096 4096 NT_STATUS_OK
ReadX 12670 1812 4096 4096 NT_STATUS_OK
ReadX 12670 756 4096 4096 NT_STATUS_OK
ReadX 12670 1636 4096 4096 NT_STATUS_OK
ReadX 12670 772 4096 4096 NT_STATUS_OK
ReadX 12670 2036 4096 4096 NT_STATUS_OK
ReadX 12670 1220 4096 4096 NT_STATUS_OK
ReadX 12670 1652 4096 4096 NT_STATUS_OK
ReadX 12670 2588 4096 4096 NT_STATUS_OK
ReadX 12670 916 4096 4096 NT_STATUS_OK
ReadX 12670 260 4096 4096 NT_STATUS_OK
ReadX 12670 932 4096 4096 NT_STATUS_OK
ReadX 12670 2624 4096 4096 NT_STATUS_OK
ReadX 12670 308 4096 4096 NT_STATUS_OK
ReadX 12670 292 4096 4096 NT_STATUS_OK
ReadX 12670 1140 4096 4096 NT_STATUS_OK
ReadX 12670 276 4096 4096 NT_STATUS_OK
ReadX 12670 2020 4096 4096 NT_STATUS_OK
ReadX 12670 2880 4096 4096 NT_STATUS_OK
ReadX 12670 516 4096 4096 NT_STATUS_OK
ReadX 12670 1844 4096 4096 NT_STATUS_OK
ReadX 12670 1124 4096 4096 NT_STATUS_OK
ReadX 12670 3136 4096 4096 NT_STATUS_OK
ReadX 12670 324 4096 4096 NT_STATUS_OK
ReadX 12670 1156 4096 4096 NT_STATUS_OK
ReadX 12670 1172 4096 4096 NT_STATUS_OK
ReadX 12670 2112 4096 4096 NT_STATUS_OK
ReadX 12670 2368 4096 4096 NT_STATUS_OK
ReadX 12670 964 4096 4096 NT_STATUS_OK
ReadX 12670 980 4096 4096 NT_STATUS_OK
ReadX 12670 1012 4096 4096 NT_STATUS_OK
ReadX 12670 532 4096 4096 NT_STATUS_OK
ReadX 12670 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12670 1620 4096 4096 NT_STATUS_OK
ReadX 12670 1604 4096 4096 NT_STATUS_OK
ReadX 12670 2116 4096 4096 NT_STATUS_OK
ReadX 12670 2132 4096 4096 NT_STATUS_OK
ReadX 12670 2148 4096 4096 NT_STATUS_OK
ReadX 12670 2276 4096 4096 NT_STATUS_OK
ReadX 12670 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12692 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12695 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1004 NT_STATUS_OK
Close 12650 NT_STATUS_OK
WriteX 12695 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12695 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1004 NT_STATUS_OK
Close 12652 NT_STATUS_OK
WriteX 12695 0 65536 65536 NT_STATUS_OK
WriteX 12695 65536 64850 64850 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12697 NT_STATUS_OK
WriteX 12697 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12697 258 NT_STATUS_OK
ReadX 12670 2068 4096 4096 NT_STATUS_OK
ReadX 12670 1588 4096 4096 NT_STATUS_OK
ReadX 12670 1572 4096 4096 NT_STATUS_OK
WriteX 12697 0 18630 18630 NT_STATUS_OK
Flush 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12699 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12670 612 4096 4096 NT_STATUS_OK
ReadX 12670 564 4096 4096 NT_STATUS_OK
ReadX 12670 1876 4096 4096 NT_STATUS_OK
ReadX 12670 628 4096 4096 NT_STATUS_OK
ReadX 12670 740 4096 4096 NT_STATUS_OK
ReadX 12670 724 4096 4096 NT_STATUS_OK
ReadX 12670 644 4096 4096 NT_STATUS_OK
ReadX 12670 2324 4096 4096 NT_STATUS_OK
ReadX 12670 660 4096 4096 NT_STATUS_OK
ReadX 12670 852 4096 4096 NT_STATUS_OK
ReadX 12670 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12670 2368 4096 4096 NT_STATUS_OK
ReadX 12670 1024 4096 4096 NT_STATUS_OK
ReadX 12670 320 4096 4096 NT_STATUS_OK
ReadX 12670 580 4096 4096 NT_STATUS_OK
ReadX 12670 3136 512 512 NT_STATUS_OK
ReadX 12670 2880 4096 4096 NT_STATUS_OK
Close 12670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 61440 4096 4096 NT_STATUS_OK
ReadX 12702 126976 4096 4096 NT_STATUS_OK
WriteX 12702 0 65536 65536 NT_STATUS_OK
WriteX 12702 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 61440 4096 4096 NT_STATUS_OK
ReadX 12703 126976 4096 4096 NT_STATUS_OK
ReadX 12703 192512 4096 4096 NT_STATUS_OK
ReadX 12703 258048 4096 4096 NT_STATUS_OK
WriteX 12703 0 65536 65536 NT_STATUS_OK
WriteX 12703 65536 65536 65536 NT_STATUS_OK
WriteX 12703 131072 65536 65536 NT_STATUS_OK
WriteX 12703 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 61440 4096 4096 NT_STATUS_OK
ReadX 12704 126976 4096 4096 NT_STATUS_OK
ReadX 12704 192512 4096 4096 NT_STATUS_OK
ReadX 12704 258048 4096 4096 NT_STATUS_OK
ReadX 12704 323584 4096 4096 NT_STATUS_OK
ReadX 12704 389120 4096 4096 NT_STATUS_OK
ReadX 12704 454656 4096 4096 NT_STATUS_OK
ReadX 12704 520192 4096 4096 NT_STATUS_OK
WriteX 12704 0 65536 65536 NT_STATUS_OK
WriteX 12704 65536 65536 65536 NT_STATUS_OK
WriteX 12704 131072 65536 65536 NT_STATUS_OK
WriteX 12704 196608 65536 65536 NT_STATUS_OK
WriteX 12704 262144 65536 65536 NT_STATUS_OK
WriteX 12704 327680 65536 65536 NT_STATUS_OK
WriteX 12704 393216 65536 65536 NT_STATUS_OK
WriteX 12704 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12706 NT_STATUS_OK
Close 12706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12707 NT_STATUS_OK
WriteX 12707 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12707 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12705 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12709 NT_STATUS_OK
Close 12709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12712 NT_STATUS_OK
WriteX 12712 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12712 258 NT_STATUS_OK
WriteX 12712 0 62591 62591 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12717 NT_STATUS_OK
WriteX 12717 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12717 258 NT_STATUS_OK
WriteX 12717 0 10845 10845 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12722 NT_STATUS_OK
WriteX 12722 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 258 NT_STATUS_OK
WriteX 12722 0 30118 30118 NT_STATUS_OK
Close 12722 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
WriteX 12707 0 64 64 NT_STATUS_OK
Close 12707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 61440 61440 NT_STATUS_OK
ReadX 12724 61440 4096 4096 NT_STATUS_OK
ReadX 12724 65536 61440 61440 NT_STATUS_OK
ReadX 12724 126976 4096 4096 NT_STATUS_OK
ReadX 12724 131072 61440 61440 NT_STATUS_OK
ReadX 12724 192512 4096 4096 NT_STATUS_OK
ReadX 12724 196608 61440 61440 NT_STATUS_OK
ReadX 12724 258048 4096 4096 NT_STATUS_OK
ReadX 12724 262144 61440 61440 NT_STATUS_OK
ReadX 12724 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 61440 61440 NT_STATUS_OK
ReadX 12725 61440 4096 4096 NT_STATUS_OK
ReadX 12725 65536 61440 61440 NT_STATUS_OK
ReadX 12725 126976 4096 4096 NT_STATUS_OK
ReadX 12725 131072 61440 61440 NT_STATUS_OK
ReadX 12725 192512 4096 4096 NT_STATUS_OK
ReadX 12725 196608 61440 61440 NT_STATUS_OK
ReadX 12725 258048 4096 4096 NT_STATUS_OK
ReadX 12725 262144 61440 61440 NT_STATUS_OK
ReadX 12725 323584 4096 4096 NT_STATUS_OK
ReadX 12725 327680 61440 61440 NT_STATUS_OK
ReadX 12725 389120 4096 4096 NT_STATUS_OK
ReadX 12725 393216 61440 61440 NT_STATUS_OK
ReadX 12725 454656 4096 4096 NT_STATUS_OK
ReadX 12725 458752 61440 61440 NT_STATUS_OK
ReadX 12725 520192 4096 4096 NT_STATUS_OK
ReadX 12725 524288 61440 61440 NT_STATUS_OK
ReadX 12725 585728 4096 4096 NT_STATUS_OK
ReadX 12725 589824 61440 61440 NT_STATUS_OK
ReadX 12725 651264 4096 4096 NT_STATUS_OK
ReadX 12725 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 61440 61440 NT_STATUS_OK
ReadX 12726 61440 4096 4096 NT_STATUS_OK
ReadX 12726 65536 61440 61440 NT_STATUS_OK
ReadX 12726 126976 4096 4096 NT_STATUS_OK
ReadX 12726 131072 61440 61440 NT_STATUS_OK
ReadX 12726 192512 4096 4096 NT_STATUS_OK
ReadX 12726 196608 61440 61440 NT_STATUS_OK
ReadX 12726 258048 4096 4096 NT_STATUS_OK
ReadX 12726 262144 61440 61440 NT_STATUS_OK
ReadX 12726 323584 4096 4096 NT_STATUS_OK
ReadX 12726 327680 61440 61440 NT_STATUS_OK
ReadX 12726 389120 4096 4096 NT_STATUS_OK
ReadX 12726 393216 61440 61440 NT_STATUS_OK
ReadX 12726 454656 4096 4096 NT_STATUS_OK
ReadX 12726 458752 61440 61440 NT_STATUS_OK
ReadX 12726 520192 4096 4096 NT_STATUS_OK
ReadX 12726 524288 61440 61440 NT_STATUS_OK
ReadX 12726 585728 4096 4096 NT_STATUS_OK
ReadX 12726 589824 61440 61440 NT_STATUS_OK
ReadX 12726 651264 4096 4096 NT_STATUS_OK
ReadX 12726 655360 61440 61440 NT_STATUS_OK
ReadX 12726 716800 4096 4096 NT_STATUS_OK
ReadX 12726 720896 61440 61440 NT_STATUS_OK
ReadX 12726 782336 4096 4096 NT_STATUS_OK
ReadX 12726 786432 61440 61440 NT_STATUS_OK
ReadX 12726 847872 4096 4096 NT_STATUS_OK
ReadX 12726 851968 61440 61440 NT_STATUS_OK
ReadX 12726 913408 4096 4096 NT_STATUS_OK
ReadX 12726 917504 61440 61440 NT_STATUS_OK
ReadX 12726 978944 4096 4096 NT_STATUS_OK
ReadX 12726 983040 61440 61440 NT_STATUS_OK
ReadX 12726 1044480 4096 4096 NT_STATUS_OK
ReadX 12726 1048576 61440 61440 NT_STATUS_OK
ReadX 12726 1110016 4096 4096 NT_STATUS_OK
ReadX 12726 1114112 61440 61440 NT_STATUS_OK
ReadX 12726 1175552 4096 4096 NT_STATUS_OK
ReadX 12726 1179648 61440 61440 NT_STATUS_OK
ReadX 12726 1241088 4096 4096 NT_STATUS_OK
ReadX 12726 1245184 61440 61440 NT_STATUS_OK
ReadX 12726 1306624 4096 4096 NT_STATUS_OK
ReadX 12726 1310720 61440 61440 NT_STATUS_OK
ReadX 12726 1372160 4096 4096 NT_STATUS_OK
ReadX 12726 1376256 61440 61440 NT_STATUS_OK
ReadX 12726 1437696 4096 4096 NT_STATUS_OK
ReadX 12726 1441792 61440 61440 NT_STATUS_OK
ReadX 12726 1503232 4096 4096 NT_STATUS_OK
ReadX 12726 1507328 61440 61440 NT_STATUS_OK
ReadX 12726 1568768 4096 4096 NT_STATUS_OK
ReadX 12726 1572864 61440 61440 NT_STATUS_OK
ReadX 12726 1634304 4096 4096 NT_STATUS_OK
ReadX 12726 1638400 61440 61440 NT_STATUS_OK
ReadX 12726 1699840 4096 4096 NT_STATUS_OK
ReadX 12726 1703936 61440 61440 NT_STATUS_OK
ReadX 12726 1765376 4096 4096 NT_STATUS_OK
ReadX 12726 1769472 61440 61440 NT_STATUS_OK
ReadX 12726 1830912 4096 4096 NT_STATUS_OK
ReadX 12726 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
ReadX 12731 4096 4096 4096 NT_STATUS_OK
ReadX 12731 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12734 NT_STATUS_OK
ReadX 12734 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12735 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 8192 8192 NT_STATUS_OK
ReadX 12739 8192 8192 8192 NT_STATUS_OK
ReadX 12739 16384 8192 8192 NT_STATUS_OK
ReadX 12739 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12744 NT_STATUS_OK
WriteX 12744 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12744 258 NT_STATUS_OK
WriteX 12744 0 10438 10438 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12747 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
ReadX 12753 4096 4096 4096 NT_STATUS_OK
ReadX 12753 8192 4096 4096 NT_STATUS_OK
ReadX 12753 12288 8192 8192 NT_STATUS_OK
ReadX 12753 20480 8192 8192 NT_STATUS_OK
ReadX 12753 28672 8192 8192 NT_STATUS_OK
ReadX 12753 36864 8192 8192 NT_STATUS_OK
ReadX 12753 45056 8192 8192 NT_STATUS_OK
ReadX 12753 53248 8192 8192 NT_STATUS_OK
ReadX 12753 61440 8192 8192 NT_STATUS_OK
ReadX 12753 69632 8192 8192 NT_STATUS_OK
ReadX 12753 77824 8192 8192 NT_STATUS_OK
ReadX 12753 86016 8192 8192 NT_STATUS_OK
ReadX 12753 94208 8192 8192 NT_STATUS_OK
ReadX 12753 102400 8192 8192 NT_STATUS_OK
ReadX 12753 110592 8192 8192 NT_STATUS_OK
ReadX 12753 118784 8192 8192 NT_STATUS_OK
ReadX 12753 126976 8192 8192 NT_STATUS_OK
ReadX 12753 135168 8192 8192 NT_STATUS_OK
ReadX 12753 143360 8192 8192 NT_STATUS_OK
ReadX 12753 151552 8192 8192 NT_STATUS_OK
ReadX 12753 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Close 12748 NT_STATUS_OK
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12755 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12758 NT_STATUS_OK
WriteX 12758 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12758 258 NT_STATUS_OK
WriteX 12758 0 28489 28489 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12759 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12761 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 8192 8192 NT_STATUS_OK
ReadX 12765 8192 8192 8192 NT_STATUS_OK
ReadX 12765 16384 8192 8192 NT_STATUS_OK
ReadX 12765 24576 8192 8192 NT_STATUS_OK
ReadX 12765 32768 16384 16384 NT_STATUS_OK
ReadX 12765 49152 8192 8192 NT_STATUS_OK
ReadX 12765 57344 8192 8192 NT_STATUS_OK
ReadX 12765 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12770 NT_STATUS_OK
WriteX 12770 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12770 258 NT_STATUS_OK
WriteX 12770 0 29253 29253 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12771 NT_STATUS_OK
Close 12771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12774 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12777 NT_STATUS_OK
WriteX 12777 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12777 258 NT_STATUS_OK
WriteX 12777 0 30183 30183 NT_STATUS_OK
Close 12777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12780 NT_STATUS_OK
WriteX 12780 0 510 510 NT_STATUS_OK
WriteX 12780 510 512 512 NT_STATUS_OK
WriteX 12780 1022 510 510 NT_STATUS_OK
WriteX 12780 1532 510 510 NT_STATUS_OK
WriteX 12780 2042 168 168 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12781 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
WriteX 12783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 61440 4096 4096 NT_STATUS_OK
ReadX 12784 126976 4096 4096 NT_STATUS_OK
WriteX 12784 0 65536 65536 NT_STATUS_OK
WriteX 12784 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 61440 4096 4096 NT_STATUS_OK
ReadX 12785 126976 4096 4096 NT_STATUS_OK
ReadX 12785 192512 4096 4096 NT_STATUS_OK
ReadX 12785 258048 4096 4096 NT_STATUS_OK
WriteX 12785 0 65536 65536 NT_STATUS_OK
WriteX 12785 65536 65536 65536 NT_STATUS_OK
WriteX 12785 131072 65536 65536 NT_STATUS_OK
WriteX 12785 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 61440 4096 4096 NT_STATUS_OK
ReadX 12786 126976 4096 4096 NT_STATUS_OK
ReadX 12786 192512 4096 4096 NT_STATUS_OK
ReadX 12786 258048 4096 4096 NT_STATUS_OK
ReadX 12786 323584 4096 4096 NT_STATUS_OK
ReadX 12786 389120 4096 4096 NT_STATUS_OK
ReadX 12786 454656 4096 4096 NT_STATUS_OK
ReadX 12786 520192 4096 4096 NT_STATUS_OK
WriteX 12786 0 65536 65536 NT_STATUS_OK
WriteX 12786 65536 65536 65536 NT_STATUS_OK
WriteX 12786 131072 65536 65536 NT_STATUS_OK
WriteX 12786 196608 65536 65536 NT_STATUS_OK
WriteX 12786 262144 65536 65536 NT_STATUS_OK
WriteX 12786 327680 65536 65536 NT_STATUS_OK
WriteX 12786 393216 65536 65536 NT_STATUS_OK
WriteX 12786 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12783 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Close 12786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12811 NT_STATUS_OK
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12826 NT_STATUS_OK
Close 12826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12855 NT_STATUS_OK
WriteX 12855 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12855 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12855 0 65536 65536 NT_STATUS_OK
WriteX 12855 65536 65536 65536 NT_STATUS_OK
WriteX 12855 131072 65536 65536 NT_STATUS_OK
WriteX 12855 196608 65536 65536 NT_STATUS_OK
WriteX 12855 262144 26634 26634 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12860 NT_STATUS_OK
Close 12860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12861 NT_STATUS_OK
Close 12861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
Close 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12863 NT_STATUS_OK
ReadX 12863 0 4096 4096 NT_STATUS_OK
ReadX 12863 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12886 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12891 NT_STATUS_OK
Close 12891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12896 NT_STATUS_OK
Close 12896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12901 NT_STATUS_OK
Close 12901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12925 NT_STATUS_OK
Close 12925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12954 NT_STATUS_OK
Close 12954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
Close 12957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12944 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12987 0 4096 4096 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
ReadX 12989 4096 4096 4096 NT_STATUS_OK
ReadX 12989 8192 4096 4096 NT_STATUS_OK
ReadX 12989 12288 4096 4096 NT_STATUS_OK
ReadX 12989 16384 4096 4096 NT_STATUS_OK
ReadX 12989 20480 4096 4096 NT_STATUS_OK
ReadX 12989 24576 4096 4096 NT_STATUS_OK
ReadX 12989 28672 4096 4096 NT_STATUS_OK
ReadX 12989 32768 4096 4096 NT_STATUS_OK
ReadX 12989 36864 4096 4096 NT_STATUS_OK
ReadX 12989 40960 4096 4096 NT_STATUS_OK
ReadX 12989 45056 4096 4096 NT_STATUS_OK
ReadX 12989 49152 4096 4096 NT_STATUS_OK
ReadX 12989 53248 4096 4096 NT_STATUS_OK
ReadX 12989 57344 4096 4096 NT_STATUS_OK
ReadX 12989 61440 4096 4096 NT_STATUS_OK
ReadX 12989 65536 4096 4096 NT_STATUS_OK
ReadX 12989 69632 4096 4096 NT_STATUS_OK
ReadX 12989 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12990 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12995 NT_STATUS_OK
WriteX 12995 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 258 NT_STATUS_OK
WriteX 12995 0 65536 65536 NT_STATUS_OK
WriteX 12995 65536 19979 19979 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
QUERY_FILE_INFORMATION 12996 1004 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
SET_FILE_INFORMATION 12996 1004 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
Close 12997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
Close 13000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13001 1004 NT_STATUS_OK
WriteX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13007 NT_STATUS_OK
WriteX 13007 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 258 NT_STATUS_OK
WriteX 13007 0 65536 65536 NT_STATUS_OK
WriteX 13007 65536 17654 17654 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13008 NT_STATUS_OK
ReadX 13008 0 4096 4096 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 1004 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
SET_FILE_INFORMATION 13008 1004 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13009 NT_STATUS_OK
SET_FILE_INFORMATION 13009 1004 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
ReadX 13013 4096 4096 4096 NT_STATUS_OK
ReadX 13013 8192 4096 4096 NT_STATUS_OK
ReadX 13013 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13013 16384 4096 4096 NT_STATUS_OK
ReadX 13013 20480 4096 4096 NT_STATUS_OK
ReadX 13013 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 4096 4096 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13016 1004 NT_STATUS_OK
WriteX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13019 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
WriteX 13022 0 65536 65536 NT_STATUS_OK
WriteX 13022 65536 19490 19490 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
QUERY_FILE_INFORMATION 13023 1004 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13024 NT_STATUS_OK
SET_FILE_INFORMATION 13024 1004 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13028 0 4096 4096 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
ReadX 13030 4096 4096 4096 NT_STATUS_OK
ReadX 13030 8192 4096 4096 NT_STATUS_OK
ReadX 13030 12288 4096 4096 NT_STATUS_OK
ReadX 13030 16384 4096 4096 NT_STATUS_OK
ReadX 13030 20480 4096 4096 NT_STATUS_OK
ReadX 13030 24576 4096 4096 NT_STATUS_OK
ReadX 13030 28672 4096 4096 NT_STATUS_OK
ReadX 13030 32768 4096 4096 NT_STATUS_OK
ReadX 13030 36864 4096 4096 NT_STATUS_OK
ReadX 13030 40960 4096 4096 NT_STATUS_OK
ReadX 13030 45056 4096 4096 NT_STATUS_OK
ReadX 13030 49152 4096 4096 NT_STATUS_OK
ReadX 13030 53248 4096 4096 NT_STATUS_OK
ReadX 13030 57344 4096 4096 NT_STATUS_OK
ReadX 13030 61440 4096 4096 NT_STATUS_OK
ReadX 13030 65536 4096 4096 NT_STATUS_OK
ReadX 13030 69632 4096 4096 NT_STATUS_OK
ReadX 13030 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13030 1004 NT_STATUS_OK
WriteX 13030 0 4096 4096 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
SET_FILE_INFORMATION 13031 1004 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13036 NT_STATUS_OK
WriteX 13036 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13036 258 NT_STATUS_OK
WriteX 13036 0 65536 65536 NT_STATUS_OK
WriteX 13036 65536 8866 8866 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
WriteX 13037 0 4096 4096 NT_STATUS_OK
Flush 13037 NT_STATUS_OK
SET_FILE_INFORMATION 13037 1004 NT_STATUS_OK
WriteX 13037 0 4096 4096 NT_STATUS_OK
Flush 13037 NT_STATUS_OK
Close 13037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
Close 13040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13041 1004 NT_STATUS_OK
WriteX 13041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13041 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13044 NT_STATUS_OK
Close 13044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13047 NT_STATUS_OK
WriteX 13047 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13047 258 NT_STATUS_OK
WriteX 13047 0 65536 65536 NT_STATUS_OK
WriteX 13047 65536 9298 9298 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
WriteX 13048 0 4096 4096 NT_STATUS_OK
Flush 13048 NT_STATUS_OK
SET_FILE_INFORMATION 13048 1004 NT_STATUS_OK
WriteX 13048 0 4096 4096 NT_STATUS_OK
Flush 13048 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
SET_FILE_INFORMATION 13049 1004 NT_STATUS_OK
Close 13049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13051 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13054 0 4096 4096 NT_STATUS_OK
Close 13054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13055 NT_STATUS_OK
ReadX 13055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13055 4096 4096 4096 NT_STATUS_OK
ReadX 13055 8192 4096 4096 NT_STATUS_OK
ReadX 13055 12288 4096 4096 NT_STATUS_OK
ReadX 13055 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13058 1004 NT_STATUS_OK
WriteX 13058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13055 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13064 NT_STATUS_OK
WriteX 13064 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13064 258 NT_STATUS_OK
WriteX 13064 0 65536 65536 NT_STATUS_OK
WriteX 13064 65536 11540 11540 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13066 NT_STATUS_OK
SET_FILE_INFORMATION 13066 1004 NT_STATUS_OK
Close 13066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13068 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 61440 4096 4096 NT_STATUS_OK
ReadX 13070 126976 4096 4096 NT_STATUS_OK
WriteX 13070 0 65536 65536 NT_STATUS_OK
WriteX 13070 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 61440 4096 4096 NT_STATUS_OK
ReadX 13071 126976 4096 4096 NT_STATUS_OK
ReadX 13071 192512 4096 4096 NT_STATUS_OK
ReadX 13071 258048 4096 4096 NT_STATUS_OK
WriteX 13071 0 65536 65536 NT_STATUS_OK
WriteX 13071 65536 65536 65536 NT_STATUS_OK
WriteX 13071 131072 65536 65536 NT_STATUS_OK
WriteX 13071 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 61440 4096 4096 NT_STATUS_OK
ReadX 13072 126976 4096 4096 NT_STATUS_OK
ReadX 13072 192512 4096 4096 NT_STATUS_OK
ReadX 13072 258048 4096 4096 NT_STATUS_OK
ReadX 13072 323584 4096 4096 NT_STATUS_OK
ReadX 13072 389120 4096 4096 NT_STATUS_OK
ReadX 13072 454656 4096 4096 NT_STATUS_OK
ReadX 13072 520192 4096 4096 NT_STATUS_OK
WriteX 13072 0 65536 65536 NT_STATUS_OK
WriteX 13072 65536 65536 65536 NT_STATUS_OK
WriteX 13072 131072 65536 65536 NT_STATUS_OK
WriteX 13072 196608 65536 65536 NT_STATUS_OK
WriteX 13072 262144 65536 65536 NT_STATUS_OK
WriteX 13072 327680 65536 65536 NT_STATUS_OK
WriteX 13072 393216 65536 65536 NT_STATUS_OK
WriteX 13072 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13073 NT_STATUS_OK
ReadX 13073 0 4096 4096 NT_STATUS_OK
ReadX 13073 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13074 NT_STATUS_OK
WriteX 13074 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13074 258 NT_STATUS_OK
WriteX 13074 0 53 53 NT_STATUS_OK
Close 13074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13071 NT_STATUS_OK
Close 13072 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13073 8192 4096 4096 NT_STATUS_OK
ReadX 13073 12288 4096 4096 NT_STATUS_OK
WriteX 13077 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
ReadX 13073 16384 4096 4096 NT_STATUS_OK
ReadX 13073 20480 4096 4096 NT_STATUS_OK
WriteX 13077 0 15360 15360 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
WriteX 13078 0 4096 4096 NT_STATUS_OK
Close 13078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13082 NT_STATUS_OK
Close 13082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13081 4096 4096 4096 NT_STATUS_OK
ReadX 13081 8192 4096 4096 NT_STATUS_OK
ReadX 13081 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
ReadX 13084 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
ReadX 13085 4096 4096 4096 NT_STATUS_OK
ReadX 13085 8192 4096 4096 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13086 NT_STATUS_OK
WriteX 13086 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13086 258 NT_STATUS_OK
WriteX 13086 0 15360 15360 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13087 NT_STATUS_OK
ReadX 13087 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13087 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13087 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13091 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
Close 13091 NT_STATUS_OK
WriteX 13087 0 4096 4096 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 4096 4096 NT_STATUS_OK
ReadX 13094 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13094 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13094 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13095 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13096 NT_STATUS_OK
WriteX 13096 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13096 258 NT_STATUS_OK
WriteX 13096 0 53 53 NT_STATUS_OK
Close 13096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
WriteX 13094 0 19054 19054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13095 4096 4096 4096 NT_STATUS_OK
ReadX 13095 8192 4096 4096 NT_STATUS_OK
ReadX 13095 12288 4096 4096 NT_STATUS_OK
WriteX 13099 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13099 258 NT_STATUS_OK
WriteX 13099 0 12006 12006 NT_STATUS_OK
Close 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13100 NT_STATUS_OK
ReadX 13100 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
WriteX 13100 0 4096 4096 NT_STATUS_OK
Close 13100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13101 NT_STATUS_OK
Close 13101 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13104 NT_STATUS_OK
Close 13104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13103 4096 4096 4096 NT_STATUS_OK
ReadX 13103 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13106 NT_STATUS_OK
WriteX 13106 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13106 258 NT_STATUS_OK
WriteX 13106 0 11991 11991 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13107 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13111 NT_STATUS_OK
SET_FILE_INFORMATION 13111 1004 NT_STATUS_OK
Close 13111 NT_STATUS_OK
WriteX 13107 0 4096 4096 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13115 NT_STATUS_OK
Close 13115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13114 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
ReadX 13114 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
WriteX 13114 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
Close 13090 NT_STATUS_OK
WriteX 13114 0 12288 12288 NT_STATUS_OK
Close 13110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 61440 61440 NT_STATUS_OK
ReadX 13121 61440 4096 4096 NT_STATUS_OK
ReadX 13121 65536 61440 61440 NT_STATUS_OK
ReadX 13121 126976 4096 4096 NT_STATUS_OK
ReadX 13121 131072 61440 61440 NT_STATUS_OK
ReadX 13121 192512 4096 4096 NT_STATUS_OK
ReadX 13121 196608 61440 61440 NT_STATUS_OK
ReadX 13121 258048 4096 4096 NT_STATUS_OK
ReadX 13121 262144 61440 61440 NT_STATUS_OK
ReadX 13121 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 61440 61440 NT_STATUS_OK
ReadX 13122 61440 4096 4096 NT_STATUS_OK
ReadX 13122 65536 61440 61440 NT_STATUS_OK
ReadX 13122 126976 4096 4096 NT_STATUS_OK
ReadX 13122 131072 61440 61440 NT_STATUS_OK
ReadX 13122 192512 4096 4096 NT_STATUS_OK
ReadX 13122 196608 61440 61440 NT_STATUS_OK
ReadX 13122 258048 4096 4096 NT_STATUS_OK
ReadX 13122 262144 61440 61440 NT_STATUS_OK
ReadX 13122 323584 4096 4096 NT_STATUS_OK
ReadX 13122 327680 61440 61440 NT_STATUS_OK
ReadX 13122 389120 4096 4096 NT_STATUS_OK
ReadX 13122 393216 61440 61440 NT_STATUS_OK
ReadX 13122 454656 4096 4096 NT_STATUS_OK
ReadX 13122 458752 61440 61440 NT_STATUS_OK
ReadX 13122 520192 4096 4096 NT_STATUS_OK
ReadX 13122 524288 61440 61440 NT_STATUS_OK
ReadX 13122 585728 4096 4096 NT_STATUS_OK
ReadX 13122 589824 61440 61440 NT_STATUS_OK
ReadX 13122 651264 4096 4096 NT_STATUS_OK
ReadX 13122 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 61440 61440 NT_STATUS_OK
ReadX 13123 61440 4096 4096 NT_STATUS_OK
ReadX 13123 65536 61440 61440 NT_STATUS_OK
ReadX 13123 126976 4096 4096 NT_STATUS_OK
ReadX 13123 131072 61440 61440 NT_STATUS_OK
ReadX 13123 192512 4096 4096 NT_STATUS_OK
ReadX 13123 196608 61440 61440 NT_STATUS_OK
ReadX 13123 258048 4096 4096 NT_STATUS_OK
ReadX 13123 262144 61440 61440 NT_STATUS_OK
ReadX 13123 323584 4096 4096 NT_STATUS_OK
ReadX 13123 327680 61440 61440 NT_STATUS_OK
ReadX 13123 389120 4096 4096 NT_STATUS_OK
ReadX 13123 393216 61440 61440 NT_STATUS_OK
ReadX 13123 454656 4096 4096 NT_STATUS_OK
ReadX 13123 458752 61440 61440 NT_STATUS_OK
ReadX 13123 520192 4096 4096 NT_STATUS_OK
ReadX 13123 524288 61440 61440 NT_STATUS_OK
ReadX 13123 585728 4096 4096 NT_STATUS_OK
ReadX 13123 589824 61440 61440 NT_STATUS_OK
ReadX 13123 651264 4096 4096 NT_STATUS_OK
ReadX 13123 655360 61440 61440 NT_STATUS_OK
ReadX 13123 716800 4096 4096 NT_STATUS_OK
ReadX 13123 720896 61440 61440 NT_STATUS_OK
ReadX 13123 782336 4096 4096 NT_STATUS_OK
ReadX 13123 786432 61440 61440 NT_STATUS_OK
ReadX 13123 847872 4096 4096 NT_STATUS_OK
ReadX 13123 851968 61440 61440 NT_STATUS_OK
ReadX 13123 913408 4096 4096 NT_STATUS_OK
ReadX 13123 917504 61440 61440 NT_STATUS_OK
ReadX 13123 978944 4096 4096 NT_STATUS_OK
ReadX 13123 983040 61440 61440 NT_STATUS_OK
ReadX 13123 1044480 4096 4096 NT_STATUS_OK
ReadX 13123 1048576 61440 61440 NT_STATUS_OK
ReadX 13123 1110016 4096 4096 NT_STATUS_OK
ReadX 13123 1114112 61440 61440 NT_STATUS_OK
ReadX 13123 1175552 4096 4096 NT_STATUS_OK
ReadX 13123 1179648 61440 61440 NT_STATUS_OK
ReadX 13123 1241088 4096 4096 NT_STATUS_OK
ReadX 13123 1245184 61440 61440 NT_STATUS_OK
ReadX 13123 1306624 4096 4096 NT_STATUS_OK
ReadX 13123 1310720 61440 61440 NT_STATUS_OK
ReadX 13123 1372160 4096 4096 NT_STATUS_OK
ReadX 13123 1376256 61440 61440 NT_STATUS_OK
ReadX 13123 1437696 4096 4096 NT_STATUS_OK
ReadX 13123 1441792 61440 61440 NT_STATUS_OK
ReadX 13123 1503232 4096 4096 NT_STATUS_OK
ReadX 13123 1507328 61440 61440 NT_STATUS_OK
ReadX 13123 1568768 4096 4096 NT_STATUS_OK
ReadX 13123 1572864 61440 61440 NT_STATUS_OK
ReadX 13123 1634304 4096 4096 NT_STATUS_OK
ReadX 13123 1638400 61440 61440 NT_STATUS_OK
ReadX 13123 1699840 4096 4096 NT_STATUS_OK
ReadX 13123 1703936 61440 61440 NT_STATUS_OK
ReadX 13123 1765376 4096 4096 NT_STATUS_OK
ReadX 13123 1769472 61440 61440 NT_STATUS_OK
ReadX 13123 1830912 4096 4096 NT_STATUS_OK
ReadX 13123 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13130 NT_STATUS_OK
QUERY_FILE_INFORMATION 13130 1004 NT_STATUS_OK
WriteX 13130 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13130 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13131 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13132 NT_STATUS_OK
WriteX 13132 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13132 258 NT_STATUS_OK
WriteX 13132 0 491 491 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13130 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
WriteX 13136 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 258 NT_STATUS_OK
WriteX 13136 0 543 543 NT_STATUS_OK
Close 13136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13137 NT_STATUS_OK
ReadX 13137 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13123 NT_STATUS_OK
Close 13137 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13150 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 1004 NT_STATUS_OK
WriteX 13150 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 258 NT_STATUS_OK
WriteX 13150 0 2048 2048 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13151 NT_STATUS_OK
ReadX 13151 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13151 0 4096 4096 NT_STATUS_OK
Flush 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13151 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13156 NT_STATUS_OK
WriteX 13156 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13156 258 NT_STATUS_OK
WriteX 13156 0 2048 2048 NT_STATUS_OK
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13162 NT_STATUS_OK
WriteX 13162 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 258 NT_STATUS_OK
WriteX 13162 0 2048 2048 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 2048 2048 NT_STATUS_OK
ReadX 13141 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13157 0 4096 4096 NT_STATUS_OK
WriteX 13141 0 8192 8192 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13167 NT_STATUS_OK
QUERY_FILE_INFORMATION 13167 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13169 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13187 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 1004 NT_STATUS_OK
WriteX 13187 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
WriteX 13187 0 2048 2048 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13190 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13195 NT_STATUS_OK
QUERY_FILE_INFORMATION 13195 1004 NT_STATUS_OK
WriteX 13195 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13195 258 NT_STATUS_OK
WriteX 13195 0 2048 2048 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13188 0 4096 4096 NT_STATUS_OK
Flush 13188 NT_STATUS_OK
WriteX 13196 0 4096 4096 NT_STATUS_OK
Flush 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13188 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13196 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13190 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13197 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13198 NT_STATUS_OK
WriteX 13198 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13198 258 NT_STATUS_OK
WriteX 13198 0 4096 4096 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13201 NT_STATUS_OK
WriteX 13201 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 4096 4096 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13202 0 4096 4096 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13175 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13208 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13209 NT_STATUS_OK
WriteX 13209 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13209 258 NT_STATUS_OK
WriteX 13209 0 2048 2048 NT_STATUS_OK
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13224 NT_STATUS_OK
QUERY_FILE_INFORMATION 13224 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13226 NT_STATUS_OK
QUERY_FILE_INFORMATION 13226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13246 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 1004 NT_STATUS_OK
WriteX 13246 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 258 NT_STATUS_OK
WriteX 13246 0 2048 2048 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13258 1004 NT_STATUS_OK
WriteX 13258 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13258 258 NT_STATUS_OK
WriteX 13258 0 2048 2048 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13266 NT_STATUS_OK
QUERY_FILE_INFORMATION 13266 1004 NT_STATUS_OK
WriteX 13266 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13266 258 NT_STATUS_OK
WriteX 13266 0 2048 2048 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13267 NT_STATUS_OK
ReadX 13267 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13259 0 4096 4096 NT_STATUS_OK
Flush 13259 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
Flush 13267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13249 4096 16384 16384 NT_STATUS_OK
ReadX 13229 4096 16384 16384 NT_STATUS_OK
ReadX 13261 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 2048 2048 NT_STATUS_OK
WriteX 13269 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13270 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13238 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13236 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13272 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13274 NT_STATUS_OK
QUERY_FILE_INFORMATION 13274 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13277 4096 16384 16384 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 8192 8192 NT_STATUS_OK
ReadX 13283 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
ReadX 13297 8192 4096 4096 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
WriteX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13298 0 4096 4096 NT_STATUS_OK
ReadX 13298 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13303 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 1004 NT_STATUS_OK
WriteX 13303 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
WriteX 13303 0 2048 2048 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13305 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
ReadX 13306 4096 4096 4096 NT_STATUS_OK
WriteX 13306 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13307 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
ReadX 13308 4096 4096 4096 NT_STATUS_OK
WriteX 13308 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13309 NT_STATUS_OK
QUERY_FILE_INFORMATION 13309 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13293 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13311 0 4096 4096 NT_STATUS_OK
ReadX 13311 4096 4096 4096 NT_STATUS_OK
ReadX 13311 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
ReadX 13312 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13329 NT_STATUS_OK
QUERY_FILE_INFORMATION 13329 1004 NT_STATUS_OK
WriteX 13329 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13329 258 NT_STATUS_OK
WriteX 13329 0 2048 2048 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13330 NT_STATUS_OK
ReadX 13330 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13334 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13335 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 1004 NT_STATUS_OK
WriteX 13335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 2048 2048 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13319 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13337 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13339 NT_STATUS_OK
QUERY_FILE_INFORMATION 13339 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 61440 4096 4096 NT_STATUS_OK
ReadX 13341 126976 4096 4096 NT_STATUS_OK
WriteX 13341 0 65536 65536 NT_STATUS_OK
WriteX 13341 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 61440 4096 4096 NT_STATUS_OK
ReadX 13342 126976 4096 4096 NT_STATUS_OK
ReadX 13342 192512 4096 4096 NT_STATUS_OK
ReadX 13342 258048 4096 4096 NT_STATUS_OK
WriteX 13342 0 65536 65536 NT_STATUS_OK
WriteX 13342 65536 65536 65536 NT_STATUS_OK
WriteX 13342 131072 65536 65536 NT_STATUS_OK
WriteX 13342 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 61440 4096 4096 NT_STATUS_OK
ReadX 13343 126976 4096 4096 NT_STATUS_OK
ReadX 13343 192512 4096 4096 NT_STATUS_OK
ReadX 13343 258048 4096 4096 NT_STATUS_OK
ReadX 13343 323584 4096 4096 NT_STATUS_OK
ReadX 13343 389120 4096 4096 NT_STATUS_OK
ReadX 13343 454656 4096 4096 NT_STATUS_OK
ReadX 13343 520192 4096 4096 NT_STATUS_OK
WriteX 13343 0 65536 65536 NT_STATUS_OK
WriteX 13343 65536 65536 65536 NT_STATUS_OK
WriteX 13343 131072 65536 65536 NT_STATUS_OK
WriteX 13343 196608 65536 65536 NT_STATUS_OK
WriteX 13343 262144 65536 65536 NT_STATUS_OK
WriteX 13343 327680 65536 65536 NT_STATUS_OK
WriteX 13343 393216 65536 65536 NT_STATUS_OK
WriteX 13343 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13344 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13344 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13344 8192 4096 4096 NT_STATUS_OK
ReadX 13344 12288 4096 4096 NT_STATUS_OK
ReadX 13344 16384 4096 4096 NT_STATUS_OK
ReadX 13344 20480 4096 4096 NT_STATUS_OK
ReadX 13344 24576 4096 4096 NT_STATUS_OK
ReadX 13344 28672 4096 4096 NT_STATUS_OK
ReadX 13344 32768 4096 4096 NT_STATUS_OK
ReadX 13344 36864 4096 4096 NT_STATUS_OK
ReadX 13344 40960 4096 4096 NT_STATUS_OK
ReadX 13344 45056 4096 4096 NT_STATUS_OK
ReadX 13344 49152 4096 4096 NT_STATUS_OK
ReadX 13344 53248 4096 4096 NT_STATUS_OK
ReadX 13344 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13344 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13345 NT_STATUS_OK
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13347 NT_STATUS_OK
WriteX 13347 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13347 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13347 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
WriteX 13347 0 57088 57088 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
Flush 13347 NT_STATUS_OK
Close 13344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13348 NT_STATUS_OK
SET_FILE_INFORMATION 13348 1004 NT_STATUS_OK
Close 13348 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13351 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13352 NT_STATUS_OK
WriteX 13352 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13352 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 0 51456 51456 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13356 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13361 NT_STATUS_OK
WriteX 13361 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13361 258 NT_STATUS_OK
WriteX 13361 0 53077 53077 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13362 NT_STATUS_OK
WriteX 13362 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
WriteX 13362 0 65536 65536 NT_STATUS_OK
WriteX 13362 65536 1856 1856 NT_STATUS_OK
WriteX 13362 0 4096 4096 NT_STATUS_OK
Flush 13362 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
WriteX 13362 0 4096 4096 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13371 NT_STATUS_OK
WriteX 13371 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13371 258 NT_STATUS_OK
WriteX 13371 0 7983 7983 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13373 NT_STATUS_OK
Close 13373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
WriteX 13376 0 65536 65536 NT_STATUS_OK
WriteX 13376 65536 65536 65536 NT_STATUS_OK
WriteX 13376 131072 65536 65536 NT_STATUS_OK
WriteX 13376 196608 65536 65536 NT_STATUS_OK
WriteX 13376 262144 65536 65536 NT_STATUS_OK
WriteX 13376 327680 65536 65536 NT_STATUS_OK
WriteX 13376 393216 65536 65536 NT_STATUS_OK
WriteX 13376 458752 46731 46731 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13377 NT_STATUS_OK
WriteX 13377 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13377 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13366 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13377 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
WriteX 13377 0 65536 65536 NT_STATUS_OK
WriteX 13377 65536 22848 22848 NT_STATUS_OK
WriteX 13377 0 4096 4096 NT_STATUS_OK
Flush 13377 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
WriteX 13377 0 4096 4096 NT_STATUS_OK
Close 13377 NT_STATUS_OK
Close 13366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13381 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13382 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13382 1004 NT_STATUS_OK
ReadX 13382 8192 4096 4096 NT_STATUS_OK
ReadX 13382 12288 4096 4096 NT_STATUS_OK
ReadX 13382 16384 4096 4096 NT_STATUS_OK
ReadX 13382 20480 4096 4096 NT_STATUS_OK
ReadX 13382 24576 4096 4096 NT_STATUS_OK
ReadX 13382 28672 4096 4096 NT_STATUS_OK
ReadX 13382 32768 4096 4096 NT_STATUS_OK
ReadX 13382 36864 4096 4096 NT_STATUS_OK
ReadX 13382 40960 4096 4096 NT_STATUS_OK
ReadX 13382 45056 4096 4096 NT_STATUS_OK
ReadX 13382 49152 4096 4096 NT_STATUS_OK
ReadX 13382 53248 4096 4096 NT_STATUS_OK
ReadX 13382 57344 4096 4096 NT_STATUS_OK
ReadX 13382 61440 4096 4096 NT_STATUS_OK
ReadX 13382 65536 4096 4096 NT_STATUS_OK
ReadX 13382 69632 4096 4096 NT_STATUS_OK
ReadX 13382 73728 4096 4096 NT_STATUS_OK
ReadX 13382 77824 4096 4096 NT_STATUS_OK
ReadX 13382 81920 4096 4096 NT_STATUS_OK
ReadX 13382 86016 4096 4096 NT_STATUS_OK
ReadX 13382 90112 4096 4096 NT_STATUS_OK
ReadX 13382 94208 4096 4096 NT_STATUS_OK
ReadX 13382 98304 4096 4096 NT_STATUS_OK
ReadX 13382 102400 4096 4096 NT_STATUS_OK
ReadX 13382 106496 4096 4096 NT_STATUS_OK
ReadX 13382 110592 4096 4096 NT_STATUS_OK
ReadX 13382 114688 4096 4096 NT_STATUS_OK
ReadX 13382 118784 4096 4096 NT_STATUS_OK
ReadX 13382 122880 4096 4096 NT_STATUS_OK
ReadX 13382 126976 4096 4096 NT_STATUS_OK
ReadX 13382 131072 4096 4096 NT_STATUS_OK
ReadX 13382 135168 4096 4096 NT_STATUS_OK
ReadX 13382 139264 4096 4096 NT_STATUS_OK
ReadX 13382 143360 4096 4096 NT_STATUS_OK
ReadX 13382 147456 4096 4096 NT_STATUS_OK
ReadX 13382 151552 4096 4096 NT_STATUS_OK
ReadX 13382 155648 4096 4096 NT_STATUS_OK
ReadX 13382 159744 4096 4096 NT_STATUS_OK
ReadX 13382 163840 4096 4096 NT_STATUS_OK
ReadX 13382 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13382 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13385 NT_STATUS_OK
WriteX 13385 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13385 258 NT_STATUS_OK
Close 13382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13386 NT_STATUS_OK
SET_FILE_INFORMATION 13386 1004 NT_STATUS_OK
Close 13386 NT_STATUS_OK
WriteX 13385 0 42388 42388 NT_STATUS_OK
Close 13385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
ReadX 13389 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13390 NT_STATUS_OK
WriteX 13390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
WriteX 13390 0 42652 42652 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
ReadX 13394 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13399 NT_STATUS_OK
WriteX 13399 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13399 258 NT_STATUS_OK
WriteX 13399 0 65536 65536 NT_STATUS_OK
WriteX 13399 65536 49 49 NT_STATUS_OK
Close 13399 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 61440 61440 NT_STATUS_OK
ReadX 13400 61440 4096 4096 NT_STATUS_OK
ReadX 13400 65536 61440 61440 NT_STATUS_OK
ReadX 13400 126976 4096 4096 NT_STATUS_OK
ReadX 13400 131072 61440 61440 NT_STATUS_OK
ReadX 13400 192512 4096 4096 NT_STATUS_OK
ReadX 13400 196608 61440 61440 NT_STATUS_OK
ReadX 13400 258048 4096 4096 NT_STATUS_OK
ReadX 13400 262144 61440 61440 NT_STATUS_OK
ReadX 13400 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 61440 61440 NT_STATUS_OK
ReadX 13401 61440 4096 4096 NT_STATUS_OK
ReadX 13401 65536 61440 61440 NT_STATUS_OK
ReadX 13401 126976 4096 4096 NT_STATUS_OK
ReadX 13401 131072 61440 61440 NT_STATUS_OK
ReadX 13401 192512 4096 4096 NT_STATUS_OK
ReadX 13401 196608 61440 61440 NT_STATUS_OK
ReadX 13401 258048 4096 4096 NT_STATUS_OK
ReadX 13401 262144 61440 61440 NT_STATUS_OK
ReadX 13401 323584 4096 4096 NT_STATUS_OK
ReadX 13401 327680 61440 61440 NT_STATUS_OK
ReadX 13401 389120 4096 4096 NT_STATUS_OK
ReadX 13401 393216 61440 61440 NT_STATUS_OK
ReadX 13401 454656 4096 4096 NT_STATUS_OK
ReadX 13401 458752 61440 61440 NT_STATUS_OK
ReadX 13401 520192 4096 4096 NT_STATUS_OK
ReadX 13401 524288 61440 61440 NT_STATUS_OK
ReadX 13401 585728 4096 4096 NT_STATUS_OK
ReadX 13401 589824 61440 61440 NT_STATUS_OK
ReadX 13401 651264 4096 4096 NT_STATUS_OK
ReadX 13401 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 61440 61440 NT_STATUS_OK
ReadX 13402 61440 4096 4096 NT_STATUS_OK
ReadX 13402 65536 61440 61440 NT_STATUS_OK
ReadX 13402 126976 4096 4096 NT_STATUS_OK
ReadX 13402 131072 61440 61440 NT_STATUS_OK
ReadX 13402 192512 4096 4096 NT_STATUS_OK
ReadX 13402 196608 61440 61440 NT_STATUS_OK
ReadX 13402 258048 4096 4096 NT_STATUS_OK
ReadX 13402 262144 61440 61440 NT_STATUS_OK
ReadX 13402 323584 4096 4096 NT_STATUS_OK
ReadX 13402 327680 61440 61440 NT_STATUS_OK
ReadX 13402 389120 4096 4096 NT_STATUS_OK
ReadX 13402 393216 61440 61440 NT_STATUS_OK
ReadX 13402 454656 4096 4096 NT_STATUS_OK
ReadX 13402 458752 61440 61440 NT_STATUS_OK
ReadX 13402 520192 4096 4096 NT_STATUS_OK
ReadX 13402 524288 61440 61440 NT_STATUS_OK
ReadX 13402 585728 4096 4096 NT_STATUS_OK
ReadX 13402 589824 61440 61440 NT_STATUS_OK
ReadX 13402 651264 4096 4096 NT_STATUS_OK
ReadX 13402 655360 61440 61440 NT_STATUS_OK
ReadX 13402 716800 4096 4096 NT_STATUS_OK
ReadX 13402 720896 61440 61440 NT_STATUS_OK
ReadX 13402 782336 4096 4096 NT_STATUS_OK
ReadX 13402 786432 61440 61440 NT_STATUS_OK
ReadX 13402 847872 4096 4096 NT_STATUS_OK
ReadX 13402 851968 61440 61440 NT_STATUS_OK
ReadX 13402 913408 4096 4096 NT_STATUS_OK
ReadX 13402 917504 61440 61440 NT_STATUS_OK
ReadX 13402 978944 4096 4096 NT_STATUS_OK
ReadX 13402 983040 61440 61440 NT_STATUS_OK
ReadX 13402 1044480 4096 4096 NT_STATUS_OK
ReadX 13402 1048576 61440 61440 NT_STATUS_OK
ReadX 13402 1110016 4096 4096 NT_STATUS_OK
ReadX 13402 1114112 61440 61440 NT_STATUS_OK
ReadX 13402 1175552 4096 4096 NT_STATUS_OK
ReadX 13402 1179648 61440 61440 NT_STATUS_OK
ReadX 13402 1241088 4096 4096 NT_STATUS_OK
ReadX 13402 1245184 61440 61440 NT_STATUS_OK
ReadX 13402 1306624 4096 4096 NT_STATUS_OK
ReadX 13402 1310720 61440 61440 NT_STATUS_OK
ReadX 13402 1372160 4096 4096 NT_STATUS_OK
ReadX 13402 1376256 61440 61440 NT_STATUS_OK
ReadX 13402 1437696 4096 4096 NT_STATUS_OK
ReadX 13402 1441792 61440 61440 NT_STATUS_OK
ReadX 13402 1503232 4096 4096 NT_STATUS_OK
ReadX 13402 1507328 61440 61440 NT_STATUS_OK
ReadX 13402 1568768 4096 4096 NT_STATUS_OK
ReadX 13402 1572864 61440 61440 NT_STATUS_OK
ReadX 13402 1634304 4096 4096 NT_STATUS_OK
ReadX 13402 1638400 61440 61440 NT_STATUS_OK
ReadX 13402 1699840 4096 4096 NT_STATUS_OK
ReadX 13402 1703936 61440 61440 NT_STATUS_OK
ReadX 13402 1765376 4096 4096 NT_STATUS_OK
ReadX 13402 1769472 61440 61440 NT_STATUS_OK
ReadX 13402 1830912 4096 4096 NT_STATUS_OK
ReadX 13402 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1005 NT_STATUS_OK
ReadX 13404 2156 24 24 NT_STATUS_OK
ReadX 13404 2139 276 276 NT_STATUS_OK
ReadX 13404 2136 14 14 NT_STATUS_OK
ReadX 13404 2136 7 7 NT_STATUS_OK
ReadX 13404 2138 12 12 NT_STATUS_OK
ReadX 13404 2137 8 8 NT_STATUS_OK
ReadX 13404 2135 15 15 NT_STATUS_OK
ReadX 13404 0 16 16 NT_STATUS_OK
ReadX 13404 16 2048 2048 NT_STATUS_OK
ReadX 13404 2064 2048 2048 NT_STATUS_OK
ReadX 13404 257 2048 2048 NT_STATUS_OK
ReadX 13404 385 2048 2048 NT_STATUS_OK
ReadX 13404 513 2048 2048 NT_STATUS_OK
ReadX 13404 641 2048 2048 NT_STATUS_OK
ReadX 13404 769 2048 2048 NT_STATUS_OK
ReadX 13404 897 2048 2048 NT_STATUS_OK
ReadX 13404 1025 2048 2048 NT_STATUS_OK
ReadX 13404 1153 2048 2048 NT_STATUS_OK
ReadX 13404 1281 2048 2048 NT_STATUS_OK
ReadX 13404 1409 2048 2048 NT_STATUS_OK
ReadX 13404 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Close 13394 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13409 NT_STATUS_OK
WriteX 13409 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13409 258 NT_STATUS_OK
WriteX 13409 0 10575 10575 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13410 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
Close 13404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13414 NT_STATUS_OK
LockX 13414 2147483538 1 NT_STATUS_OK
UnlockX 13414 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1005 NT_STATUS_OK
ReadX 13414 0 512 512 NT_STATUS_OK
ReadX 13414 512 512 512 NT_STATUS_OK
ReadX 13414 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13415 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1005 NT_STATUS_OK
ReadX 13415 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13416 NT_STATUS_OK
LockX 13416 2147483538 1 NT_STATUS_OK
UnlockX 13416 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 1005 NT_STATUS_OK
ReadX 13416 0 512 512 NT_STATUS_OK
ReadX 13416 512 512 512 NT_STATUS_OK
ReadX 13416 1024 512 512 NT_STATUS_OK
ReadX 13416 288 20 20 NT_STATUS_OK
ReadX 13416 308 2084 2084 NT_STATUS_OK
ReadX 13416 388 2084 2084 NT_STATUS_OK
ReadX 13416 388 2084 2084 NT_STATUS_OK
ReadX 13403 2157 1386 1386 NT_STATUS_OK
ReadX 13416 2472 399 399 NT_STATUS_OK
ReadX 13416 3072 1536 1536 NT_STATUS_OK
ReadX 13416 544 149 149 NT_STATUS_OK
ReadX 13416 693 485 485 NT_STATUS_OK
Close 13416 NT_STATUS_OK
ReadX 13403 2157 4096 4096 NT_STATUS_OK
ReadX 13403 6253 4096 4096 NT_STATUS_OK
ReadX 13403 10349 4096 4096 NT_STATUS_OK
ReadX 13403 14445 4096 4096 NT_STATUS_OK
ReadX 13403 18541 4096 4096 NT_STATUS_OK
ReadX 13403 22637 256 256 NT_STATUS_OK
ReadX 13403 22893 4096 4096 NT_STATUS_OK
ReadX 13403 26989 4096 4096 NT_STATUS_OK
ReadX 13403 31085 4096 4096 NT_STATUS_OK
ReadX 13403 35181 4096 4096 NT_STATUS_OK
ReadX 13403 39277 4096 4096 NT_STATUS_OK
ReadX 13403 43373 4096 4096 NT_STATUS_OK
ReadX 13403 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13403 2157 1024 1024 NT_STATUS_OK
ReadX 13403 1667 4688 4688 NT_STATUS_OK
ReadX 13403 6355 3516 3516 NT_STATUS_OK
ReadX 13403 9871 16384 16384 NT_STATUS_OK
ReadX 13403 26255 3771 3771 NT_STATUS_OK
ReadX 13403 30026 2048 2048 NT_STATUS_OK
ReadX 13403 32074 1024 1024 NT_STATUS_OK
ReadX 13403 33098 6652 6652 NT_STATUS_OK
ReadX 13403 39750 16384 16384 NT_STATUS_OK
ReadX 13403 56134 10496 10496 NT_STATUS_OK
ReadX 13403 66630 1784 1784 NT_STATUS_OK
ReadX 13403 68414 90 90 NT_STATUS_OK
ReadX 13403 68504 273 273 NT_STATUS_OK
ReadX 13403 68777 1600 1600 NT_STATUS_OK
ReadX 13403 70377 640 640 NT_STATUS_OK
ReadX 13403 71017 1280 1280 NT_STATUS_OK
ReadX 13403 72297 8464 8464 NT_STATUS_OK
ReadX 13403 80761 158 158 NT_STATUS_OK
ReadX 13403 80919 912 912 NT_STATUS_OK
ReadX 13403 81831 1980 1980 NT_STATUS_OK
ReadX 13403 83811 2256 2256 NT_STATUS_OK
ReadX 13403 86067 400 400 NT_STATUS_OK
ReadX 13403 86467 252 252 NT_STATUS_OK
ReadX 13403 86719 42 42 NT_STATUS_OK
ReadX 13403 86761 725 725 NT_STATUS_OK
ReadX 13403 2009 512 512 NT_STATUS_OK
ReadX 13403 3895 9 9 NT_STATUS_OK
ReadX 13403 3781 46 46 NT_STATUS_OK
ReadX 13403 4059 92 92 NT_STATUS_OK
ReadX 13403 3781 92 92 NT_STATUS_OK
ReadX 13403 3986 184 184 NT_STATUS_OK
ReadX 13403 3987 16384 16384 NT_STATUS_OK
ReadX 13403 3902 16384 16384 NT_STATUS_OK
ReadX 13403 3781 10240 10240 NT_STATUS_OK
ReadX 13403 3821 16384 16384 NT_STATUS_OK
ReadX 13403 3891 935 935 NT_STATUS_OK
ReadX 13403 4060 10240 10240 NT_STATUS_OK
ReadX 13403 4059 184 184 NT_STATUS_OK
ReadX 13403 256 184 184 NT_STATUS_OK
ReadX 13403 256 1026 1026 NT_STATUS_OK
ReadX 13403 3901 326 326 NT_STATUS_OK
ReadX 13403 3899 652 652 NT_STATUS_OK
ReadX 13403 256 2 2 NT_STATUS_OK
ReadX 13403 258 4948 4948 NT_STATUS_OK
Close 13403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13421 NT_STATUS_OK
WriteX 13421 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
WriteX 13421 0 65536 65536 NT_STATUS_OK
WriteX 13421 65536 65536 65536 NT_STATUS_OK
WriteX 13421 131072 65536 65536 NT_STATUS_OK
WriteX 13421 196608 65536 65536 NT_STATUS_OK
WriteX 13421 262144 65536 65536 NT_STATUS_OK
WriteX 13421 327680 65536 65536 NT_STATUS_OK
WriteX 13421 393216 65536 65536 NT_STATUS_OK
WriteX 13421 458752 65536 65536 NT_STATUS_OK
WriteX 13421 524288 65536 65536 NT_STATUS_OK
WriteX 13421 589824 35257 35257 NT_STATUS_OK
Close 13421 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13426 NT_STATUS_OK
WriteX 13426 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 65536 65536 NT_STATUS_OK
WriteX 13426 65536 65536 65536 NT_STATUS_OK
WriteX 13426 131072 65536 65536 NT_STATUS_OK
WriteX 13426 196608 65536 65536 NT_STATUS_OK
WriteX 13426 262144 65536 65536 NT_STATUS_OK
WriteX 13426 327680 65536 65536 NT_STATUS_OK
WriteX 13426 393216 65536 65536 NT_STATUS_OK
WriteX 13426 458752 65536 65536 NT_STATUS_OK
WriteX 13426 524288 65536 65536 NT_STATUS_OK
WriteX 13426 589824 57598 57598 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13428 NT_STATUS_OK
WriteX 13428 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13428 258 NT_STATUS_OK
WriteX 13428 0 12543 12543 NT_STATUS_OK
Flush 13428 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13434 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1005 NT_STATUS_OK
ReadX 13434 1938 24 24 NT_STATUS_OK
ReadX 13434 1920 276 276 NT_STATUS_OK
ReadX 13434 1918 14 14 NT_STATUS_OK
ReadX 13434 1918 7 7 NT_STATUS_OK
ReadX 13434 1919 12 12 NT_STATUS_OK
ReadX 13434 1919 8 8 NT_STATUS_OK
ReadX 13434 1917 15 15 NT_STATUS_OK
ReadX 13434 0 16 16 NT_STATUS_OK
ReadX 13434 16 2048 2048 NT_STATUS_OK
ReadX 13434 2064 2048 2048 NT_STATUS_OK
ReadX 13434 257 2048 2048 NT_STATUS_OK
ReadX 13434 385 2048 2048 NT_STATUS_OK
ReadX 13434 513 2048 2048 NT_STATUS_OK
ReadX 13434 641 2048 2048 NT_STATUS_OK
ReadX 13434 769 2048 2048 NT_STATUS_OK
ReadX 13434 897 2048 2048 NT_STATUS_OK
ReadX 13434 1025 2048 2048 NT_STATUS_OK
ReadX 13434 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13439 NT_STATUS_OK
WriteX 13439 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13439 258 NT_STATUS_OK
WriteX 13439 0 11588 11588 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
Close 13434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13444 NT_STATUS_OK
WriteX 13444 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13444 258 NT_STATUS_OK
WriteX 13444 0 11615 11615 NT_STATUS_OK
Flush 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13450 NT_STATUS_OK
Close 13450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13453 NT_STATUS_OK
WriteX 13453 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13453 258 NT_STATUS_OK
WriteX 13453 0 65536 65536 NT_STATUS_OK
WriteX 13453 65536 16050 16050 NT_STATUS_OK
Close 13453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13433 1939 64 64 NT_STATUS_OK
ReadX 13433 128 248 248 NT_STATUS_OK
ReadX 13433 128 568 568 NT_STATUS_OK
ReadX 13433 3872 1536 1536 NT_STATUS_OK
ReadX 13433 3456 2560 2560 NT_STATUS_OK
ReadX 13433 3136 512 512 NT_STATUS_OK
ReadX 13433 2880 4096 4096 NT_STATUS_OK
ReadX 13433 3264 3072 3072 NT_STATUS_OK
ReadX 13433 320 4096 4096 NT_STATUS_OK
ReadX 13433 1024 4096 4096 NT_STATUS_OK
ReadX 13433 3616 4096 4096 NT_STATUS_OK
ReadX 13433 1939 64 64 NT_STATUS_OK
ReadX 13433 128 248 248 NT_STATUS_OK
ReadX 13433 128 608 608 NT_STATUS_OK
ReadX 13433 2858 1024 1024 NT_STATUS_OK
ReadX 13433 2810 4096 4096 NT_STATUS_OK
ReadX 13433 2826 4096 4096 NT_STATUS_OK
ReadX 13433 2580 2048 2048 NT_STATUS_OK
ReadX 13433 2800 2560 2560 NT_STATUS_OK
ReadX 13433 2100 4096 4096 NT_STATUS_OK
ReadX 13433 2084 4096 4096 NT_STATUS_OK
ReadX 13433 868 4096 4096 NT_STATUS_OK
ReadX 13433 2324 4096 4096 NT_STATUS_OK
ReadX 13433 884 4096 4096 NT_STATUS_OK
ReadX 13433 2604 1024 1024 NT_STATUS_OK
ReadX 13433 580 4096 4096 NT_STATUS_OK
ReadX 13433 596 4096 4096 NT_STATUS_OK
ReadX 13433 2752 4096 4096 NT_STATUS_OK
ReadX 13433 2842 1024 1024 NT_STATUS_OK
ReadX 13433 660 4096 4096 NT_STATUS_OK
ReadX 13433 2720 4096 4096 NT_STATUS_OK
ReadX 13433 2736 4096 4096 NT_STATUS_OK
ReadX 13433 628 4096 4096 NT_STATUS_OK
ReadX 13433 2704 4096 4096 NT_STATUS_OK
ReadX 13433 1556 4096 4096 NT_STATUS_OK
ReadX 13433 576 4096 4096 NT_STATUS_OK
ReadX 13433 3168 1536 1536 NT_STATUS_OK
ReadX 13433 832 4096 4096 NT_STATUS_OK
ReadX 13433 1088 4096 4096 NT_STATUS_OK
ReadX 13433 1344 4096 4096 NT_STATUS_OK
ReadX 13433 1600 4096 4096 NT_STATUS_OK
ReadX 13433 1856 4096 4096 NT_STATUS_OK
ReadX 13433 2112 4096 4096 NT_STATUS_OK
ReadX 13433 1892 4096 4096 NT_STATUS_OK
ReadX 13433 820 4096 4096 NT_STATUS_OK
ReadX 13433 788 4096 4096 NT_STATUS_OK
ReadX 13433 1604 4096 4096 NT_STATUS_OK
ReadX 13433 3648 4096 4096 NT_STATUS_OK
ReadX 13433 2608 4096 4096 NT_STATUS_OK
ReadX 13433 548 4096 4096 NT_STATUS_OK
ReadX 13433 740 4096 4096 NT_STATUS_OK
ReadX 13433 1344 4096 4096 NT_STATUS_OK
ReadX 13433 3392 4096 4096 NT_STATUS_OK
ReadX 13433 3904 4096 4096 NT_STATUS_OK
ReadX 13433 644 4096 4096 NT_STATUS_OK
ReadX 13433 676 4096 4096 NT_STATUS_OK
ReadX 13433 2688 4096 4096 NT_STATUS_OK
ReadX 13433 320 4096 4096 NT_STATUS_OK
ReadX 13433 900 4096 4096 NT_STATUS_OK
ReadX 13433 1908 4096 4096 NT_STATUS_OK
ReadX 13433 852 4096 4096 NT_STATUS_OK
ReadX 13433 724 4096 4096 NT_STATUS_OK
ReadX 13433 2292 4096 4096 NT_STATUS_OK
ReadX 13433 612 4096 4096 NT_STATUS_OK
ReadX 13433 388 4096 4096 NT_STATUS_OK
ReadX 13433 2368 4096 4096 NT_STATUS_OK
ReadX 13433 2624 4096 4096 NT_STATUS_OK
ReadX 13433 500 4096 4096 NT_STATUS_OK
ReadX 13433 356 4096 4096 NT_STATUS_OK
ReadX 13433 1024 4096 4096 NT_STATUS_OK
ReadX 13433 576 4096 4096 NT_STATUS_OK
ReadX 13433 340 4096 4096 NT_STATUS_OK
ReadX 13433 420 4096 4096 NT_STATUS_OK
ReadX 13433 1600 4096 4096 NT_STATUS_OK
ReadX 13433 404 4096 4096 NT_STATUS_OK
ReadX 13433 1428 4096 4096 NT_STATUS_OK
ReadX 13433 2656 4096 4096 NT_STATUS_OK
ReadX 13433 2624 4096 4096 NT_STATUS_OK
ReadX 13433 452 4096 4096 NT_STATUS_OK
ReadX 13433 692 4096 4096 NT_STATUS_OK
ReadX 13433 564 4096 4096 NT_STATUS_OK
ReadX 13433 372 4096 4096 NT_STATUS_OK
ReadX 13433 468 4096 4096 NT_STATUS_OK
ReadX 13433 484 4096 4096 NT_STATUS_OK
ReadX 13433 1088 4096 4096 NT_STATUS_OK
ReadX 13433 1924 4096 4096 NT_STATUS_OK
ReadX 13433 2768 4096 4096 NT_STATUS_OK
ReadX 13433 832 4096 4096 NT_STATUS_OK
ReadX 13433 836 4096 4096 NT_STATUS_OK
ReadX 13433 1856 4096 4096 NT_STATUS_OK
ReadX 13433 2640 4096 4096 NT_STATUS_OK
ReadX 13433 436 4096 4096 NT_STATUS_OK
ReadX 13433 1828 4096 4096 NT_STATUS_OK
ReadX 13433 804 4096 4096 NT_STATUS_OK
ReadX 13433 1860 4096 4096 NT_STATUS_OK
ReadX 13433 1812 4096 4096 NT_STATUS_OK
ReadX 13433 756 4096 4096 NT_STATUS_OK
ReadX 13433 1636 4096 4096 NT_STATUS_OK
ReadX 13433 772 4096 4096 NT_STATUS_OK
ReadX 13433 2036 4096 4096 NT_STATUS_OK
ReadX 13433 1220 4096 4096 NT_STATUS_OK
ReadX 13433 1652 4096 4096 NT_STATUS_OK
ReadX 13433 2588 4096 4096 NT_STATUS_OK
ReadX 13433 916 4096 4096 NT_STATUS_OK
ReadX 13433 260 4096 4096 NT_STATUS_OK
ReadX 13433 932 4096 4096 NT_STATUS_OK
ReadX 13433 2624 4096 4096 NT_STATUS_OK
ReadX 13433 308 4096 4096 NT_STATUS_OK
ReadX 13433 292 4096 4096 NT_STATUS_OK
ReadX 13433 1140 4096 4096 NT_STATUS_OK
ReadX 13433 276 4096 4096 NT_STATUS_OK
ReadX 13433 2020 4096 4096 NT_STATUS_OK
ReadX 13433 2880 4096 4096 NT_STATUS_OK
ReadX 13433 516 4096 4096 NT_STATUS_OK
ReadX 13433 1844 4096 4096 NT_STATUS_OK
ReadX 13433 1124 4096 4096 NT_STATUS_OK
ReadX 13433 3136 4096 4096 NT_STATUS_OK
ReadX 13433 324 4096 4096 NT_STATUS_OK
ReadX 13433 1156 4096 4096 NT_STATUS_OK
ReadX 13433 1172 4096 4096 NT_STATUS_OK
ReadX 13433 2112 4096 4096 NT_STATUS_OK
ReadX 13433 2368 4096 4096 NT_STATUS_OK
ReadX 13433 964 4096 4096 NT_STATUS_OK
ReadX 13433 980 4096 4096 NT_STATUS_OK
ReadX 13433 1012 4096 4096 NT_STATUS_OK
ReadX 13433 532 4096 4096 NT_STATUS_OK
ReadX 13433 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13433 1620 4096 4096 NT_STATUS_OK
ReadX 13433 1604 4096 4096 NT_STATUS_OK
ReadX 13433 2116 4096 4096 NT_STATUS_OK
ReadX 13433 2132 4096 4096 NT_STATUS_OK
ReadX 13433 2148 4096 4096 NT_STATUS_OK
ReadX 13433 2276 4096 4096 NT_STATUS_OK
ReadX 13433 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13455 NT_STATUS_OK
Close 13455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13458 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1004 NT_STATUS_OK
Close 13413 NT_STATUS_OK
WriteX 13458 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13458 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1004 NT_STATUS_OK
Close 13415 NT_STATUS_OK
WriteX 13458 0 65536 65536 NT_STATUS_OK
WriteX 13458 65536 64850 64850 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13460 NT_STATUS_OK
WriteX 13460 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13460 258 NT_STATUS_OK
ReadX 13433 2068 4096 4096 NT_STATUS_OK
ReadX 13433 1588 4096 4096 NT_STATUS_OK
ReadX 13433 1572 4096 4096 NT_STATUS_OK
WriteX 13460 0 18630 18630 NT_STATUS_OK
Flush 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13462 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13433 612 4096 4096 NT_STATUS_OK
ReadX 13433 564 4096 4096 NT_STATUS_OK
ReadX 13433 1876 4096 4096 NT_STATUS_OK
ReadX 13433 628 4096 4096 NT_STATUS_OK
ReadX 13433 740 4096 4096 NT_STATUS_OK
ReadX 13433 724 4096 4096 NT_STATUS_OK
ReadX 13433 644 4096 4096 NT_STATUS_OK
ReadX 13433 2324 4096 4096 NT_STATUS_OK
ReadX 13433 660 4096 4096 NT_STATUS_OK
ReadX 13433 852 4096 4096 NT_STATUS_OK
ReadX 13433 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13433 2368 4096 4096 NT_STATUS_OK
ReadX 13433 1024 4096 4096 NT_STATUS_OK
ReadX 13433 320 4096 4096 NT_STATUS_OK
ReadX 13433 580 4096 4096 NT_STATUS_OK
ReadX 13433 3136 512 512 NT_STATUS_OK
ReadX 13433 2880 4096 4096 NT_STATUS_OK
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 61440 4096 4096 NT_STATUS_OK
ReadX 13465 126976 4096 4096 NT_STATUS_OK
WriteX 13465 0 65536 65536 NT_STATUS_OK
WriteX 13465 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 61440 4096 4096 NT_STATUS_OK
ReadX 13466 126976 4096 4096 NT_STATUS_OK
ReadX 13466 192512 4096 4096 NT_STATUS_OK
ReadX 13466 258048 4096 4096 NT_STATUS_OK
WriteX 13466 0 65536 65536 NT_STATUS_OK
WriteX 13466 65536 65536 65536 NT_STATUS_OK
WriteX 13466 131072 65536 65536 NT_STATUS_OK
WriteX 13466 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 61440 4096 4096 NT_STATUS_OK
ReadX 13467 126976 4096 4096 NT_STATUS_OK
ReadX 13467 192512 4096 4096 NT_STATUS_OK
ReadX 13467 258048 4096 4096 NT_STATUS_OK
ReadX 13467 323584 4096 4096 NT_STATUS_OK
ReadX 13467 389120 4096 4096 NT_STATUS_OK
ReadX 13467 454656 4096 4096 NT_STATUS_OK
ReadX 13467 520192 4096 4096 NT_STATUS_OK
WriteX 13467 0 65536 65536 NT_STATUS_OK
WriteX 13467 65536 65536 65536 NT_STATUS_OK
WriteX 13467 131072 65536 65536 NT_STATUS_OK
WriteX 13467 196608 65536 65536 NT_STATUS_OK
WriteX 13467 262144 65536 65536 NT_STATUS_OK
WriteX 13467 327680 65536 65536 NT_STATUS_OK
WriteX 13467 393216 65536 65536 NT_STATUS_OK
WriteX 13467 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13470 NT_STATUS_OK
WriteX 13470 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13470 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13468 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13472 NT_STATUS_OK
Close 13472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13475 NT_STATUS_OK
WriteX 13475 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13475 258 NT_STATUS_OK
WriteX 13475 0 62591 62591 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13480 NT_STATUS_OK
WriteX 13480 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13480 258 NT_STATUS_OK
WriteX 13480 0 10845 10845 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13485 NT_STATUS_OK
WriteX 13485 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 258 NT_STATUS_OK
WriteX 13485 0 30118 30118 NT_STATUS_OK
Close 13485 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
WriteX 13470 0 64 64 NT_STATUS_OK
Close 13470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 61440 61440 NT_STATUS_OK
ReadX 13487 61440 4096 4096 NT_STATUS_OK
ReadX 13487 65536 61440 61440 NT_STATUS_OK
ReadX 13487 126976 4096 4096 NT_STATUS_OK
ReadX 13487 131072 61440 61440 NT_STATUS_OK
ReadX 13487 192512 4096 4096 NT_STATUS_OK
ReadX 13487 196608 61440 61440 NT_STATUS_OK
ReadX 13487 258048 4096 4096 NT_STATUS_OK
ReadX 13487 262144 61440 61440 NT_STATUS_OK
ReadX 13487 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 61440 61440 NT_STATUS_OK
ReadX 13488 61440 4096 4096 NT_STATUS_OK
ReadX 13488 65536 61440 61440 NT_STATUS_OK
ReadX 13488 126976 4096 4096 NT_STATUS_OK
ReadX 13488 131072 61440 61440 NT_STATUS_OK
ReadX 13488 192512 4096 4096 NT_STATUS_OK
ReadX 13488 196608 61440 61440 NT_STATUS_OK
ReadX 13488 258048 4096 4096 NT_STATUS_OK
ReadX 13488 262144 61440 61440 NT_STATUS_OK
ReadX 13488 323584 4096 4096 NT_STATUS_OK
ReadX 13488 327680 61440 61440 NT_STATUS_OK
ReadX 13488 389120 4096 4096 NT_STATUS_OK
ReadX 13488 393216 61440 61440 NT_STATUS_OK
ReadX 13488 454656 4096 4096 NT_STATUS_OK
ReadX 13488 458752 61440 61440 NT_STATUS_OK
ReadX 13488 520192 4096 4096 NT_STATUS_OK
ReadX 13488 524288 61440 61440 NT_STATUS_OK
ReadX 13488 585728 4096 4096 NT_STATUS_OK
ReadX 13488 589824 61440 61440 NT_STATUS_OK
ReadX 13488 651264 4096 4096 NT_STATUS_OK
ReadX 13488 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 61440 61440 NT_STATUS_OK
ReadX 13489 61440 4096 4096 NT_STATUS_OK
ReadX 13489 65536 61440 61440 NT_STATUS_OK
ReadX 13489 126976 4096 4096 NT_STATUS_OK
ReadX 13489 131072 61440 61440 NT_STATUS_OK
ReadX 13489 192512 4096 4096 NT_STATUS_OK
ReadX 13489 196608 61440 61440 NT_STATUS_OK
ReadX 13489 258048 4096 4096 NT_STATUS_OK
ReadX 13489 262144 61440 61440 NT_STATUS_OK
ReadX 13489 323584 4096 4096 NT_STATUS_OK
ReadX 13489 327680 61440 61440 NT_STATUS_OK
ReadX 13489 389120 4096 4096 NT_STATUS_OK
ReadX 13489 393216 61440 61440 NT_STATUS_OK
ReadX 13489 454656 4096 4096 NT_STATUS_OK
ReadX 13489 458752 61440 61440 NT_STATUS_OK
ReadX 13489 520192 4096 4096 NT_STATUS_OK
ReadX 13489 524288 61440 61440 NT_STATUS_OK
ReadX 13489 585728 4096 4096 NT_STATUS_OK
ReadX 13489 589824 61440 61440 NT_STATUS_OK
ReadX 13489 651264 4096 4096 NT_STATUS_OK
ReadX 13489 655360 61440 61440 NT_STATUS_OK
ReadX 13489 716800 4096 4096 NT_STATUS_OK
ReadX 13489 720896 61440 61440 NT_STATUS_OK
ReadX 13489 782336 4096 4096 NT_STATUS_OK
ReadX 13489 786432 61440 61440 NT_STATUS_OK
ReadX 13489 847872 4096 4096 NT_STATUS_OK
ReadX 13489 851968 61440 61440 NT_STATUS_OK
ReadX 13489 913408 4096 4096 NT_STATUS_OK
ReadX 13489 917504 61440 61440 NT_STATUS_OK
ReadX 13489 978944 4096 4096 NT_STATUS_OK
ReadX 13489 983040 61440 61440 NT_STATUS_OK
ReadX 13489 1044480 4096 4096 NT_STATUS_OK
ReadX 13489 1048576 61440 61440 NT_STATUS_OK
ReadX 13489 1110016 4096 4096 NT_STATUS_OK
ReadX 13489 1114112 61440 61440 NT_STATUS_OK
ReadX 13489 1175552 4096 4096 NT_STATUS_OK
ReadX 13489 1179648 61440 61440 NT_STATUS_OK
ReadX 13489 1241088 4096 4096 NT_STATUS_OK
ReadX 13489 1245184 61440 61440 NT_STATUS_OK
ReadX 13489 1306624 4096 4096 NT_STATUS_OK
ReadX 13489 1310720 61440 61440 NT_STATUS_OK
ReadX 13489 1372160 4096 4096 NT_STATUS_OK
ReadX 13489 1376256 61440 61440 NT_STATUS_OK
ReadX 13489 1437696 4096 4096 NT_STATUS_OK
ReadX 13489 1441792 61440 61440 NT_STATUS_OK
ReadX 13489 1503232 4096 4096 NT_STATUS_OK
ReadX 13489 1507328 61440 61440 NT_STATUS_OK
ReadX 13489 1568768 4096 4096 NT_STATUS_OK
ReadX 13489 1572864 61440 61440 NT_STATUS_OK
ReadX 13489 1634304 4096 4096 NT_STATUS_OK
ReadX 13489 1638400 61440 61440 NT_STATUS_OK
ReadX 13489 1699840 4096 4096 NT_STATUS_OK
ReadX 13489 1703936 61440 61440 NT_STATUS_OK
ReadX 13489 1765376 4096 4096 NT_STATUS_OK
ReadX 13489 1769472 61440 61440 NT_STATUS_OK
ReadX 13489 1830912 4096 4096 NT_STATUS_OK
ReadX 13489 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
ReadX 13494 4096 4096 4096 NT_STATUS_OK
ReadX 13494 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13498 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 8192 8192 NT_STATUS_OK
ReadX 13502 8192 8192 8192 NT_STATUS_OK
ReadX 13502 16384 8192 8192 NT_STATUS_OK
ReadX 13502 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13507 NT_STATUS_OK
WriteX 13507 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13507 258 NT_STATUS_OK
WriteX 13507 0 10438 10438 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13510 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13511 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13513 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
ReadX 13516 4096 4096 4096 NT_STATUS_OK
ReadX 13516 8192 4096 4096 NT_STATUS_OK
ReadX 13516 12288 8192 8192 NT_STATUS_OK
ReadX 13516 20480 8192 8192 NT_STATUS_OK
ReadX 13516 28672 8192 8192 NT_STATUS_OK
ReadX 13516 36864 8192 8192 NT_STATUS_OK
ReadX 13516 45056 8192 8192 NT_STATUS_OK
ReadX 13516 53248 8192 8192 NT_STATUS_OK
ReadX 13516 61440 8192 8192 NT_STATUS_OK
ReadX 13516 69632 8192 8192 NT_STATUS_OK
ReadX 13516 77824 8192 8192 NT_STATUS_OK
ReadX 13516 86016 8192 8192 NT_STATUS_OK
ReadX 13516 94208 8192 8192 NT_STATUS_OK
ReadX 13516 102400 8192 8192 NT_STATUS_OK
ReadX 13516 110592 8192 8192 NT_STATUS_OK
ReadX 13516 118784 8192 8192 NT_STATUS_OK
ReadX 13516 126976 8192 8192 NT_STATUS_OK
ReadX 13516 135168 8192 8192 NT_STATUS_OK
ReadX 13516 143360 8192 8192 NT_STATUS_OK
ReadX 13516 151552 8192 8192 NT_STATUS_OK
ReadX 13516 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Close 13511 NT_STATUS_OK
Close 13513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13518 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13521 NT_STATUS_OK
WriteX 13521 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13521 258 NT_STATUS_OK
WriteX 13521 0 28489 28489 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13522 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13524 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 8192 8192 NT_STATUS_OK
ReadX 13528 8192 8192 8192 NT_STATUS_OK
ReadX 13528 16384 8192 8192 NT_STATUS_OK
ReadX 13528 24576 8192 8192 NT_STATUS_OK
ReadX 13528 32768 16384 16384 NT_STATUS_OK
ReadX 13528 49152 8192 8192 NT_STATUS_OK
ReadX 13528 57344 8192 8192 NT_STATUS_OK
ReadX 13528 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13533 NT_STATUS_OK
WriteX 13533 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13533 258 NT_STATUS_OK
WriteX 13533 0 29253 29253 NT_STATUS_OK
Close 13533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13534 NT_STATUS_OK
Close 13534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13537 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13540 NT_STATUS_OK
WriteX 13540 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13540 258 NT_STATUS_OK
WriteX 13540 0 30183 30183 NT_STATUS_OK
Close 13540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13543 NT_STATUS_OK
WriteX 13543 0 510 510 NT_STATUS_OK
WriteX 13543 510 512 512 NT_STATUS_OK
WriteX 13543 1022 510 510 NT_STATUS_OK
WriteX 13543 1532 510 510 NT_STATUS_OK
WriteX 13543 2042 168 168 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13544 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 0 4096 4096 NT_STATUS_OK
WriteX 13546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 61440 4096 4096 NT_STATUS_OK
ReadX 13547 126976 4096 4096 NT_STATUS_OK
WriteX 13547 0 65536 65536 NT_STATUS_OK
WriteX 13547 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 61440 4096 4096 NT_STATUS_OK
ReadX 13548 126976 4096 4096 NT_STATUS_OK
ReadX 13548 192512 4096 4096 NT_STATUS_OK
ReadX 13548 258048 4096 4096 NT_STATUS_OK
WriteX 13548 0 65536 65536 NT_STATUS_OK
WriteX 13548 65536 65536 65536 NT_STATUS_OK
WriteX 13548 131072 65536 65536 NT_STATUS_OK
WriteX 13548 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 61440 4096 4096 NT_STATUS_OK
ReadX 13549 126976 4096 4096 NT_STATUS_OK
ReadX 13549 192512 4096 4096 NT_STATUS_OK
ReadX 13549 258048 4096 4096 NT_STATUS_OK
ReadX 13549 323584 4096 4096 NT_STATUS_OK
ReadX 13549 389120 4096 4096 NT_STATUS_OK
ReadX 13549 454656 4096 4096 NT_STATUS_OK
ReadX 13549 520192 4096 4096 NT_STATUS_OK
WriteX 13549 0 65536 65536 NT_STATUS_OK
WriteX 13549 65536 65536 65536 NT_STATUS_OK
WriteX 13549 131072 65536 65536 NT_STATUS_OK
WriteX 13549 196608 65536 65536 NT_STATUS_OK
WriteX 13549 262144 65536 65536 NT_STATUS_OK
WriteX 13549 327680 65536 65536 NT_STATUS_OK
WriteX 13549 393216 65536 65536 NT_STATUS_OK
WriteX 13549 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13546 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13574 NT_STATUS_OK
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13589 NT_STATUS_OK
Close 13589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13618 NT_STATUS_OK
WriteX 13618 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13618 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13618 0 65536 65536 NT_STATUS_OK
WriteX 13618 65536 65536 65536 NT_STATUS_OK
WriteX 13618 131072 65536 65536 NT_STATUS_OK
WriteX 13618 196608 65536 65536 NT_STATUS_OK
WriteX 13618 262144 26634 26634 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13623 NT_STATUS_OK
Close 13623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13624 NT_STATUS_OK
Close 13624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
Close 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13626 NT_STATUS_OK
ReadX 13626 0 4096 4096 NT_STATUS_OK
ReadX 13626 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13649 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13654 NT_STATUS_OK
Close 13654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13659 NT_STATUS_OK
Close 13659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13664 NT_STATUS_OK
Close 13664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13688 NT_STATUS_OK
Close 13688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13717 NT_STATUS_OK
Close 13717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
Close 13720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13707 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13750 0 4096 4096 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
ReadX 13752 4096 4096 4096 NT_STATUS_OK
ReadX 13752 8192 4096 4096 NT_STATUS_OK
ReadX 13752 12288 4096 4096 NT_STATUS_OK
ReadX 13752 16384 4096 4096 NT_STATUS_OK
ReadX 13752 20480 4096 4096 NT_STATUS_OK
ReadX 13752 24576 4096 4096 NT_STATUS_OK
ReadX 13752 28672 4096 4096 NT_STATUS_OK
ReadX 13752 32768 4096 4096 NT_STATUS_OK
ReadX 13752 36864 4096 4096 NT_STATUS_OK
ReadX 13752 40960 4096 4096 NT_STATUS_OK
ReadX 13752 45056 4096 4096 NT_STATUS_OK
ReadX 13752 49152 4096 4096 NT_STATUS_OK
ReadX 13752 53248 4096 4096 NT_STATUS_OK
ReadX 13752 57344 4096 4096 NT_STATUS_OK
ReadX 13752 61440 4096 4096 NT_STATUS_OK
ReadX 13752 65536 4096 4096 NT_STATUS_OK
ReadX 13752 69632 4096 4096 NT_STATUS_OK
ReadX 13752 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13753 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13758 NT_STATUS_OK
WriteX 13758 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 258 NT_STATUS_OK
WriteX 13758 0 65536 65536 NT_STATUS_OK
WriteX 13758 65536 19979 19979 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
QUERY_FILE_INFORMATION 13759 1004 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
SET_FILE_INFORMATION 13759 1004 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
Close 13760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
Close 13763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13764 1004 NT_STATUS_OK
WriteX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13770 NT_STATUS_OK
WriteX 13770 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 258 NT_STATUS_OK
WriteX 13770 0 65536 65536 NT_STATUS_OK
WriteX 13770 65536 17654 17654 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13771 NT_STATUS_OK
ReadX 13771 0 4096 4096 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 1004 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
SET_FILE_INFORMATION 13771 1004 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13772 NT_STATUS_OK
SET_FILE_INFORMATION 13772 1004 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
ReadX 13776 4096 4096 4096 NT_STATUS_OK
ReadX 13776 8192 4096 4096 NT_STATUS_OK
ReadX 13776 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13776 16384 4096 4096 NT_STATUS_OK
ReadX 13776 20480 4096 4096 NT_STATUS_OK
ReadX 13776 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 4096 4096 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13779 1004 NT_STATUS_OK
WriteX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13782 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
WriteX 13785 0 65536 65536 NT_STATUS_OK
WriteX 13785 65536 19490 19490 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
QUERY_FILE_INFORMATION 13786 1004 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13787 NT_STATUS_OK
SET_FILE_INFORMATION 13787 1004 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13791 0 4096 4096 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
ReadX 13793 4096 4096 4096 NT_STATUS_OK
ReadX 13793 8192 4096 4096 NT_STATUS_OK
ReadX 13793 12288 4096 4096 NT_STATUS_OK
ReadX 13793 16384 4096 4096 NT_STATUS_OK
ReadX 13793 20480 4096 4096 NT_STATUS_OK
ReadX 13793 24576 4096 4096 NT_STATUS_OK
ReadX 13793 28672 4096 4096 NT_STATUS_OK
ReadX 13793 32768 4096 4096 NT_STATUS_OK
ReadX 13793 36864 4096 4096 NT_STATUS_OK
ReadX 13793 40960 4096 4096 NT_STATUS_OK
ReadX 13793 45056 4096 4096 NT_STATUS_OK
ReadX 13793 49152 4096 4096 NT_STATUS_OK
ReadX 13793 53248 4096 4096 NT_STATUS_OK
ReadX 13793 57344 4096 4096 NT_STATUS_OK
ReadX 13793 61440 4096 4096 NT_STATUS_OK
ReadX 13793 65536 4096 4096 NT_STATUS_OK
ReadX 13793 69632 4096 4096 NT_STATUS_OK
ReadX 13793 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13793 1004 NT_STATUS_OK
WriteX 13793 0 4096 4096 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
SET_FILE_INFORMATION 13794 1004 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13799 NT_STATUS_OK
WriteX 13799 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13799 258 NT_STATUS_OK
WriteX 13799 0 65536 65536 NT_STATUS_OK
WriteX 13799 65536 8866 8866 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
WriteX 13800 0 4096 4096 NT_STATUS_OK
Flush 13800 NT_STATUS_OK
SET_FILE_INFORMATION 13800 1004 NT_STATUS_OK
WriteX 13800 0 4096 4096 NT_STATUS_OK
Flush 13800 NT_STATUS_OK
Close 13800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
Close 13803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13804 1004 NT_STATUS_OK
WriteX 13804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13804 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13807 NT_STATUS_OK
Close 13807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13810 NT_STATUS_OK
WriteX 13810 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13810 258 NT_STATUS_OK
WriteX 13810 0 65536 65536 NT_STATUS_OK
WriteX 13810 65536 9298 9298 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
WriteX 13811 0 4096 4096 NT_STATUS_OK
Flush 13811 NT_STATUS_OK
SET_FILE_INFORMATION 13811 1004 NT_STATUS_OK
WriteX 13811 0 4096 4096 NT_STATUS_OK
Flush 13811 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
SET_FILE_INFORMATION 13812 1004 NT_STATUS_OK
Close 13812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13814 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13817 0 4096 4096 NT_STATUS_OK
Close 13817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13818 NT_STATUS_OK
ReadX 13818 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13818 4096 4096 4096 NT_STATUS_OK
ReadX 13818 8192 4096 4096 NT_STATUS_OK
ReadX 13818 12288 4096 4096 NT_STATUS_OK
ReadX 13818 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13821 1004 NT_STATUS_OK
WriteX 13821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13818 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13827 NT_STATUS_OK
WriteX 13827 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13827 258 NT_STATUS_OK
WriteX 13827 0 65536 65536 NT_STATUS_OK
WriteX 13827 65536 11540 11540 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13829 NT_STATUS_OK
SET_FILE_INFORMATION 13829 1004 NT_STATUS_OK
Close 13829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13831 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 61440 4096 4096 NT_STATUS_OK
ReadX 13833 126976 4096 4096 NT_STATUS_OK
WriteX 13833 0 65536 65536 NT_STATUS_OK
WriteX 13833 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 61440 4096 4096 NT_STATUS_OK
ReadX 13834 126976 4096 4096 NT_STATUS_OK
ReadX 13834 192512 4096 4096 NT_STATUS_OK
ReadX 13834 258048 4096 4096 NT_STATUS_OK
WriteX 13834 0 65536 65536 NT_STATUS_OK
WriteX 13834 65536 65536 65536 NT_STATUS_OK
WriteX 13834 131072 65536 65536 NT_STATUS_OK
WriteX 13834 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 61440 4096 4096 NT_STATUS_OK
ReadX 13835 126976 4096 4096 NT_STATUS_OK
ReadX 13835 192512 4096 4096 NT_STATUS_OK
ReadX 13835 258048 4096 4096 NT_STATUS_OK
ReadX 13835 323584 4096 4096 NT_STATUS_OK
ReadX 13835 389120 4096 4096 NT_STATUS_OK
ReadX 13835 454656 4096 4096 NT_STATUS_OK
ReadX 13835 520192 4096 4096 NT_STATUS_OK
WriteX 13835 0 65536 65536 NT_STATUS_OK
WriteX 13835 65536 65536 65536 NT_STATUS_OK
WriteX 13835 131072 65536 65536 NT_STATUS_OK
WriteX 13835 196608 65536 65536 NT_STATUS_OK
WriteX 13835 262144 65536 65536 NT_STATUS_OK
WriteX 13835 327680 65536 65536 NT_STATUS_OK
WriteX 13835 393216 65536 65536 NT_STATUS_OK
WriteX 13835 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13836 NT_STATUS_OK
ReadX 13836 0 4096 4096 NT_STATUS_OK
ReadX 13836 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13837 NT_STATUS_OK
WriteX 13837 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13837 258 NT_STATUS_OK
WriteX 13837 0 53 53 NT_STATUS_OK
Close 13837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13834 NT_STATUS_OK
Close 13835 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13836 8192 4096 4096 NT_STATUS_OK
ReadX 13836 12288 4096 4096 NT_STATUS_OK
WriteX 13840 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
ReadX 13836 16384 4096 4096 NT_STATUS_OK
ReadX 13836 20480 4096 4096 NT_STATUS_OK
WriteX 13840 0 15360 15360 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
WriteX 13841 0 4096 4096 NT_STATUS_OK
Close 13841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13845 NT_STATUS_OK
Close 13845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13844 4096 4096 4096 NT_STATUS_OK
ReadX 13844 8192 4096 4096 NT_STATUS_OK
ReadX 13844 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
ReadX 13847 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13848 NT_STATUS_OK
Close 13836 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
ReadX 13848 4096 4096 4096 NT_STATUS_OK
ReadX 13848 8192 4096 4096 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13849 NT_STATUS_OK
WriteX 13849 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13849 258 NT_STATUS_OK
WriteX 13849 0 15360 15360 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13850 NT_STATUS_OK
ReadX 13850 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13850 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13850 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13854 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
Close 13854 NT_STATUS_OK
WriteX 13850 0 4096 4096 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 4096 4096 NT_STATUS_OK
ReadX 13857 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13857 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13857 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13858 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13859 NT_STATUS_OK
WriteX 13859 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13859 258 NT_STATUS_OK
WriteX 13859 0 53 53 NT_STATUS_OK
Close 13859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13858 4096 4096 4096 NT_STATUS_OK
ReadX 13858 8192 4096 4096 NT_STATUS_OK
ReadX 13858 12288 4096 4096 NT_STATUS_OK
WriteX 13862 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13862 258 NT_STATUS_OK
WriteX 13862 0 12006 12006 NT_STATUS_OK
Close 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13863 NT_STATUS_OK
ReadX 13863 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
WriteX 13863 0 4096 4096 NT_STATUS_OK
Close 13863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13864 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13867 NT_STATUS_OK
Close 13867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13866 4096 4096 4096 NT_STATUS_OK
ReadX 13866 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13869 NT_STATUS_OK
WriteX 13869 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13869 258 NT_STATUS_OK
WriteX 13869 0 11991 11991 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13870 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13874 NT_STATUS_OK
SET_FILE_INFORMATION 13874 1004 NT_STATUS_OK
Close 13874 NT_STATUS_OK
WriteX 13870 0 4096 4096 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13878 NT_STATUS_OK
Close 13878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13877 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
ReadX 13877 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
WriteX 13877 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
Close 13853 NT_STATUS_OK
WriteX 13857 0 19054 19054 NT_STATUS_OK
WriteX 13877 0 12288 12288 NT_STATUS_OK
Close 13873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 61440 61440 NT_STATUS_OK
ReadX 13884 61440 4096 4096 NT_STATUS_OK
ReadX 13884 65536 61440 61440 NT_STATUS_OK
ReadX 13884 126976 4096 4096 NT_STATUS_OK
ReadX 13884 131072 61440 61440 NT_STATUS_OK
ReadX 13884 192512 4096 4096 NT_STATUS_OK
ReadX 13884 196608 61440 61440 NT_STATUS_OK
ReadX 13884 258048 4096 4096 NT_STATUS_OK
ReadX 13884 262144 61440 61440 NT_STATUS_OK
ReadX 13884 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 61440 61440 NT_STATUS_OK
ReadX 13885 61440 4096 4096 NT_STATUS_OK
ReadX 13885 65536 61440 61440 NT_STATUS_OK
ReadX 13885 126976 4096 4096 NT_STATUS_OK
ReadX 13885 131072 61440 61440 NT_STATUS_OK
ReadX 13885 192512 4096 4096 NT_STATUS_OK
ReadX 13885 196608 61440 61440 NT_STATUS_OK
ReadX 13885 258048 4096 4096 NT_STATUS_OK
ReadX 13885 262144 61440 61440 NT_STATUS_OK
ReadX 13885 323584 4096 4096 NT_STATUS_OK
ReadX 13885 327680 61440 61440 NT_STATUS_OK
ReadX 13885 389120 4096 4096 NT_STATUS_OK
ReadX 13885 393216 61440 61440 NT_STATUS_OK
ReadX 13885 454656 4096 4096 NT_STATUS_OK
ReadX 13885 458752 61440 61440 NT_STATUS_OK
ReadX 13885 520192 4096 4096 NT_STATUS_OK
ReadX 13885 524288 61440 61440 NT_STATUS_OK
ReadX 13885 585728 4096 4096 NT_STATUS_OK
ReadX 13885 589824 61440 61440 NT_STATUS_OK
ReadX 13885 651264 4096 4096 NT_STATUS_OK
ReadX 13885 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 61440 61440 NT_STATUS_OK
ReadX 13886 61440 4096 4096 NT_STATUS_OK
ReadX 13886 65536 61440 61440 NT_STATUS_OK
ReadX 13886 126976 4096 4096 NT_STATUS_OK
ReadX 13886 131072 61440 61440 NT_STATUS_OK
ReadX 13886 192512 4096 4096 NT_STATUS_OK
ReadX 13886 196608 61440 61440 NT_STATUS_OK
ReadX 13886 258048 4096 4096 NT_STATUS_OK
ReadX 13886 262144 61440 61440 NT_STATUS_OK
ReadX 13886 323584 4096 4096 NT_STATUS_OK
ReadX 13886 327680 61440 61440 NT_STATUS_OK
ReadX 13886 389120 4096 4096 NT_STATUS_OK
ReadX 13886 393216 61440 61440 NT_STATUS_OK
ReadX 13886 454656 4096 4096 NT_STATUS_OK
ReadX 13886 458752 61440 61440 NT_STATUS_OK
ReadX 13886 520192 4096 4096 NT_STATUS_OK
ReadX 13886 524288 61440 61440 NT_STATUS_OK
ReadX 13886 585728 4096 4096 NT_STATUS_OK
ReadX 13886 589824 61440 61440 NT_STATUS_OK
ReadX 13886 651264 4096 4096 NT_STATUS_OK
ReadX 13886 655360 61440 61440 NT_STATUS_OK
ReadX 13886 716800 4096 4096 NT_STATUS_OK
ReadX 13886 720896 61440 61440 NT_STATUS_OK
ReadX 13886 782336 4096 4096 NT_STATUS_OK
ReadX 13886 786432 61440 61440 NT_STATUS_OK
ReadX 13886 847872 4096 4096 NT_STATUS_OK
ReadX 13886 851968 61440 61440 NT_STATUS_OK
ReadX 13886 913408 4096 4096 NT_STATUS_OK
ReadX 13886 917504 61440 61440 NT_STATUS_OK
ReadX 13886 978944 4096 4096 NT_STATUS_OK
ReadX 13886 983040 61440 61440 NT_STATUS_OK
ReadX 13886 1044480 4096 4096 NT_STATUS_OK
ReadX 13886 1048576 61440 61440 NT_STATUS_OK
ReadX 13886 1110016 4096 4096 NT_STATUS_OK
ReadX 13886 1114112 61440 61440 NT_STATUS_OK
ReadX 13886 1175552 4096 4096 NT_STATUS_OK
ReadX 13886 1179648 61440 61440 NT_STATUS_OK
ReadX 13886 1241088 4096 4096 NT_STATUS_OK
ReadX 13886 1245184 61440 61440 NT_STATUS_OK
ReadX 13886 1306624 4096 4096 NT_STATUS_OK
ReadX 13886 1310720 61440 61440 NT_STATUS_OK
ReadX 13886 1372160 4096 4096 NT_STATUS_OK
ReadX 13886 1376256 61440 61440 NT_STATUS_OK
ReadX 13886 1437696 4096 4096 NT_STATUS_OK
ReadX 13886 1441792 61440 61440 NT_STATUS_OK
ReadX 13886 1503232 4096 4096 NT_STATUS_OK
ReadX 13886 1507328 61440 61440 NT_STATUS_OK
ReadX 13886 1568768 4096 4096 NT_STATUS_OK
ReadX 13886 1572864 61440 61440 NT_STATUS_OK
ReadX 13886 1634304 4096 4096 NT_STATUS_OK
ReadX 13886 1638400 61440 61440 NT_STATUS_OK
ReadX 13886 1699840 4096 4096 NT_STATUS_OK
ReadX 13886 1703936 61440 61440 NT_STATUS_OK
ReadX 13886 1765376 4096 4096 NT_STATUS_OK
ReadX 13886 1769472 61440 61440 NT_STATUS_OK
ReadX 13886 1830912 4096 4096 NT_STATUS_OK
ReadX 13886 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13893 NT_STATUS_OK
QUERY_FILE_INFORMATION 13893 1004 NT_STATUS_OK
WriteX 13893 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13893 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13894 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13895 NT_STATUS_OK
WriteX 13895 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13895 258 NT_STATUS_OK
WriteX 13895 0 491 491 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13893 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13899 NT_STATUS_OK
WriteX 13899 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 258 NT_STATUS_OK
WriteX 13899 0 543 543 NT_STATUS_OK
Close 13899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13900 NT_STATUS_OK
ReadX 13900 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Close 13886 NT_STATUS_OK
Close 13900 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13913 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 1004 NT_STATUS_OK
WriteX 13913 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 258 NT_STATUS_OK
WriteX 13913 0 2048 2048 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13914 NT_STATUS_OK
ReadX 13914 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13914 0 4096 4096 NT_STATUS_OK
Flush 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13914 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13919 NT_STATUS_OK
WriteX 13919 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13919 258 NT_STATUS_OK
WriteX 13919 0 2048 2048 NT_STATUS_OK
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13925 NT_STATUS_OK
WriteX 13925 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 258 NT_STATUS_OK
WriteX 13925 0 2048 2048 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 2048 2048 NT_STATUS_OK
ReadX 13904 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13920 0 4096 4096 NT_STATUS_OK
WriteX 13904 0 8192 8192 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13930 NT_STATUS_OK
QUERY_FILE_INFORMATION 13930 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Close 13905 NT_STATUS_OK
Close 13906 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13950 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 1004 NT_STATUS_OK
WriteX 13950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
WriteX 13950 0 2048 2048 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13953 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13958 NT_STATUS_OK
QUERY_FILE_INFORMATION 13958 1004 NT_STATUS_OK
WriteX 13958 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13958 258 NT_STATUS_OK
WriteX 13958 0 2048 2048 NT_STATUS_OK
Close 13958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13951 0 4096 4096 NT_STATUS_OK
Flush 13951 NT_STATUS_OK
WriteX 13959 0 4096 4096 NT_STATUS_OK
Flush 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13951 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13959 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13953 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13960 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13961 NT_STATUS_OK
WriteX 13961 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13961 258 NT_STATUS_OK
WriteX 13961 0 4096 4096 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13964 NT_STATUS_OK
WriteX 13964 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 4096 4096 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13965 0 4096 4096 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13938 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13971 NT_STATUS_OK
Close 13971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13972 NT_STATUS_OK
WriteX 13972 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13972 258 NT_STATUS_OK
WriteX 13972 0 2048 2048 NT_STATUS_OK
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13978 NT_STATUS_OK
ReadX 13978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13987 NT_STATUS_OK
QUERY_FILE_INFORMATION 13987 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13989 NT_STATUS_OK
QUERY_FILE_INFORMATION 13989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13996 NT_STATUS_OK
ReadX 13996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13997 NT_STATUS_OK
ReadX 13997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14009 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 1004 NT_STATUS_OK
WriteX 14009 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 258 NT_STATUS_OK
WriteX 14009 0 2048 2048 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14021 NT_STATUS_OK
QUERY_FILE_INFORMATION 14021 1004 NT_STATUS_OK
WriteX 14021 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14021 258 NT_STATUS_OK
WriteX 14021 0 2048 2048 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14029 NT_STATUS_OK
QUERY_FILE_INFORMATION 14029 1004 NT_STATUS_OK
WriteX 14029 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14029 258 NT_STATUS_OK
WriteX 14029 0 2048 2048 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14030 NT_STATUS_OK
ReadX 14030 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14022 0 4096 4096 NT_STATUS_OK
Flush 14022 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
Flush 14030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14012 4096 16384 16384 NT_STATUS_OK
ReadX 13992 4096 16384 16384 NT_STATUS_OK
ReadX 14024 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 2048 2048 NT_STATUS_OK
WriteX 14032 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14033 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14016 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 14001 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 13999 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14035 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14037 NT_STATUS_OK
QUERY_FILE_INFORMATION 14037 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14040 4096 16384 16384 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14041 0 4096 4096 NT_STATUS_OK
WriteX 14042 0 4096 4096 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14056 NT_STATUS_OK
ReadX 14056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 8192 8192 NT_STATUS_OK
ReadX 14046 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
ReadX 14060 8192 4096 4096 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
WriteX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14061 0 4096 4096 NT_STATUS_OK
ReadX 14061 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14041 0 4096 4096 NT_STATUS_OK
WriteX 14042 0 4096 4096 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14066 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 1004 NT_STATUS_OK
WriteX 14066 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
WriteX 14066 0 2048 2048 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
ReadX 14069 4096 4096 4096 NT_STATUS_OK
WriteX 14069 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
ReadX 14071 4096 4096 4096 NT_STATUS_OK
WriteX 14071 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14072 NT_STATUS_OK
QUERY_FILE_INFORMATION 14072 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14056 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14074 0 4096 4096 NT_STATUS_OK
ReadX 14074 4096 4096 4096 NT_STATUS_OK
ReadX 14074 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
ReadX 14075 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14092 NT_STATUS_OK
QUERY_FILE_INFORMATION 14092 1004 NT_STATUS_OK
WriteX 14092 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14092 258 NT_STATUS_OK
WriteX 14092 0 2048 2048 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14093 NT_STATUS_OK
ReadX 14093 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9757 NT_STATUS_OK
Close 9757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9758 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 1004 NT_STATUS_OK
WriteX 9758 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 258 NT_STATUS_OK
WriteX 9758 0 2048 2048 NT_STATUS_OK
Close 9758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9759 NT_STATUS_OK
ReadX 9759 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9759 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14082 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9760 NT_STATUS_OK
QUERY_FILE_INFORMATION 9760 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14079 NT_STATUS_OK
Close 14080 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9762 NT_STATUS_OK
QUERY_FILE_INFORMATION 9762 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9764 NT_STATUS_OK
ReadX 9764 61440 4096 4096 NT_STATUS_OK
ReadX 9764 126976 4096 4096 NT_STATUS_OK
WriteX 9764 0 65536 65536 NT_STATUS_OK
WriteX 9764 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9765 NT_STATUS_OK
ReadX 9765 61440 4096 4096 NT_STATUS_OK
ReadX 9765 126976 4096 4096 NT_STATUS_OK
ReadX 9765 192512 4096 4096 NT_STATUS_OK
ReadX 9765 258048 4096 4096 NT_STATUS_OK
WriteX 9765 0 65536 65536 NT_STATUS_OK
WriteX 9765 65536 65536 65536 NT_STATUS_OK
WriteX 9765 131072 65536 65536 NT_STATUS_OK
WriteX 9765 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9766 NT_STATUS_OK
ReadX 9766 61440 4096 4096 NT_STATUS_OK
ReadX 9766 126976 4096 4096 NT_STATUS_OK
ReadX 9766 192512 4096 4096 NT_STATUS_OK
ReadX 9766 258048 4096 4096 NT_STATUS_OK
ReadX 9766 323584 4096 4096 NT_STATUS_OK
ReadX 9766 389120 4096 4096 NT_STATUS_OK
ReadX 9766 454656 4096 4096 NT_STATUS_OK
ReadX 9766 520192 4096 4096 NT_STATUS_OK
WriteX 9766 0 65536 65536 NT_STATUS_OK
WriteX 9766 65536 65536 65536 NT_STATUS_OK
WriteX 9766 131072 65536 65536 NT_STATUS_OK
WriteX 9766 196608 65536 65536 NT_STATUS_OK
WriteX 9766 262144 65536 65536 NT_STATUS_OK
WriteX 9766 327680 65536 65536 NT_STATUS_OK
WriteX 9766 393216 65536 65536 NT_STATUS_OK
WriteX 9766 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9767 NT_STATUS_OK
ReadX 9767 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9767 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9767 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9767 8192 4096 4096 NT_STATUS_OK
ReadX 9767 12288 4096 4096 NT_STATUS_OK
ReadX 9767 16384 4096 4096 NT_STATUS_OK
ReadX 9767 20480 4096 4096 NT_STATUS_OK
ReadX 9767 24576 4096 4096 NT_STATUS_OK
ReadX 9767 28672 4096 4096 NT_STATUS_OK
ReadX 9767 32768 4096 4096 NT_STATUS_OK
ReadX 9767 36864 4096 4096 NT_STATUS_OK
ReadX 9767 40960 4096 4096 NT_STATUS_OK
ReadX 9767 45056 4096 4096 NT_STATUS_OK
ReadX 9767 49152 4096 4096 NT_STATUS_OK
ReadX 9767 53248 4096 4096 NT_STATUS_OK
ReadX 9767 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9767 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9768 NT_STATUS_OK
Close 9768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9764 NT_STATUS_OK
Close 9765 NT_STATUS_OK
Close 9766 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9770 NT_STATUS_OK
WriteX 9770 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9770 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9770 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9770 1004 NT_STATUS_OK
WriteX 9770 0 57088 57088 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
Flush 9770 NT_STATUS_OK
Close 9767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9771 NT_STATUS_OK
SET_FILE_INFORMATION 9771 1004 NT_STATUS_OK
Close 9771 NT_STATUS_OK
SET_FILE_INFORMATION 9770 1004 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
Close 9770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9772 NT_STATUS_OK
Close 9772 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9774 NT_STATUS_OK
ReadX 9774 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9774 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9775 NT_STATUS_OK
WriteX 9775 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9775 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9775 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9775 1004 NT_STATUS_OK
WriteX 9775 0 51456 51456 NT_STATUS_OK
WriteX 9775 0 4096 4096 NT_STATUS_OK
Flush 9775 NT_STATUS_OK
SET_FILE_INFORMATION 9775 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9775 1004 NT_STATUS_OK
WriteX 9775 0 4096 4096 NT_STATUS_OK
Close 9775 NT_STATUS_OK
Close 9774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9777 NT_STATUS_OK
Close 9777 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9779 NT_STATUS_OK
ReadX 9779 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9779 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9781 NT_STATUS_OK
Close 9781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9784 NT_STATUS_OK
WriteX 9784 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9784 258 NT_STATUS_OK
WriteX 9784 0 53077 53077 NT_STATUS_OK
Close 9784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9785 NT_STATUS_OK
WriteX 9785 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9785 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 65536 65536 NT_STATUS_OK
WriteX 9785 65536 1856 1856 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Flush 9785 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Close 9785 NT_STATUS_OK
Close 9779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9787 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9789 NT_STATUS_OK
ReadX 9789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9791 NT_STATUS_OK
Close 9791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9794 NT_STATUS_OK
WriteX 9794 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9794 258 NT_STATUS_OK
WriteX 9794 0 7983 7983 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9796 NT_STATUS_OK
Close 9796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9799 NT_STATUS_OK
WriteX 9799 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9799 258 NT_STATUS_OK
WriteX 9799 0 65536 65536 NT_STATUS_OK
WriteX 9799 65536 65536 65536 NT_STATUS_OK
WriteX 9799 131072 65536 65536 NT_STATUS_OK
WriteX 9799 196608 65536 65536 NT_STATUS_OK
WriteX 9799 262144 65536 65536 NT_STATUS_OK
WriteX 9799 327680 65536 65536 NT_STATUS_OK
WriteX 9799 393216 65536 65536 NT_STATUS_OK
WriteX 9799 458752 46731 46731 NT_STATUS_OK
Close 9799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9800 NT_STATUS_OK
WriteX 9800 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9789 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 65536 65536 NT_STATUS_OK
WriteX 9800 65536 22848 22848 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Flush 9800 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9802 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9804 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9805 NT_STATUS_OK
ReadX 9805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9805 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9805 1004 NT_STATUS_OK
ReadX 9805 8192 4096 4096 NT_STATUS_OK
ReadX 9805 12288 4096 4096 NT_STATUS_OK
ReadX 9805 16384 4096 4096 NT_STATUS_OK
ReadX 9805 20480 4096 4096 NT_STATUS_OK
ReadX 9805 24576 4096 4096 NT_STATUS_OK
ReadX 9805 28672 4096 4096 NT_STATUS_OK
ReadX 9805 32768 4096 4096 NT_STATUS_OK
ReadX 9805 36864 4096 4096 NT_STATUS_OK
ReadX 9805 40960 4096 4096 NT_STATUS_OK
ReadX 9805 45056 4096 4096 NT_STATUS_OK
ReadX 9805 49152 4096 4096 NT_STATUS_OK
ReadX 9805 53248 4096 4096 NT_STATUS_OK
ReadX 9805 57344 4096 4096 NT_STATUS_OK
ReadX 9805 61440 4096 4096 NT_STATUS_OK
ReadX 9805 65536 4096 4096 NT_STATUS_OK
ReadX 9805 69632 4096 4096 NT_STATUS_OK
ReadX 9805 73728 4096 4096 NT_STATUS_OK
ReadX 9805 77824 4096 4096 NT_STATUS_OK
ReadX 9805 81920 4096 4096 NT_STATUS_OK
ReadX 9805 86016 4096 4096 NT_STATUS_OK
ReadX 9805 90112 4096 4096 NT_STATUS_OK
ReadX 9805 94208 4096 4096 NT_STATUS_OK
ReadX 9805 98304 4096 4096 NT_STATUS_OK
ReadX 9805 102400 4096 4096 NT_STATUS_OK
ReadX 9805 106496 4096 4096 NT_STATUS_OK
ReadX 9805 110592 4096 4096 NT_STATUS_OK
ReadX 9805 114688 4096 4096 NT_STATUS_OK
ReadX 9805 118784 4096 4096 NT_STATUS_OK
ReadX 9805 122880 4096 4096 NT_STATUS_OK
ReadX 9805 126976 4096 4096 NT_STATUS_OK
ReadX 9805 131072 4096 4096 NT_STATUS_OK
ReadX 9805 135168 4096 4096 NT_STATUS_OK
ReadX 9805 139264 4096 4096 NT_STATUS_OK
ReadX 9805 143360 4096 4096 NT_STATUS_OK
ReadX 9805 147456 4096 4096 NT_STATUS_OK
ReadX 9805 151552 4096 4096 NT_STATUS_OK
ReadX 9805 155648 4096 4096 NT_STATUS_OK
ReadX 9805 159744 4096 4096 NT_STATUS_OK
ReadX 9805 163840 4096 4096 NT_STATUS_OK
ReadX 9805 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9805 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9806 NT_STATUS_OK
Close 9806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9808 NT_STATUS_OK
WriteX 9808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9808 258 NT_STATUS_OK
Close 9805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9809 NT_STATUS_OK
SET_FILE_INFORMATION 9809 1004 NT_STATUS_OK
Close 9809 NT_STATUS_OK
WriteX 9808 0 42388 42388 NT_STATUS_OK
Close 9808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9810 NT_STATUS_OK
Close 9810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9812 NT_STATUS_OK
ReadX 9812 0 4096 4096 NT_STATUS_OK
ReadX 9812 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9813 NT_STATUS_OK
WriteX 9813 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9813 258 NT_STATUS_OK
SET_FILE_INFORMATION 9813 1004 NT_STATUS_OK
WriteX 9813 0 42652 42652 NT_STATUS_OK
Close 9813 NT_STATUS_OK
Close 9812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9815 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 0 4096 4096 NT_STATUS_OK
ReadX 9817 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9819 NT_STATUS_OK
Close 9819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9822 NT_STATUS_OK
WriteX 9822 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9822 258 NT_STATUS_OK
WriteX 9822 0 65536 65536 NT_STATUS_OK
WriteX 9822 65536 49 49 NT_STATUS_OK
Close 9822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9823 NT_STATUS_OK
ReadX 9823 0 61440 61440 NT_STATUS_OK
ReadX 9823 61440 4096 4096 NT_STATUS_OK
ReadX 9823 65536 61440 61440 NT_STATUS_OK
ReadX 9823 126976 4096 4096 NT_STATUS_OK
ReadX 9823 131072 61440 61440 NT_STATUS_OK
ReadX 9823 192512 4096 4096 NT_STATUS_OK
ReadX 9823 196608 61440 61440 NT_STATUS_OK
ReadX 9823 258048 4096 4096 NT_STATUS_OK
ReadX 9823 262144 61440 61440 NT_STATUS_OK
ReadX 9823 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9824 NT_STATUS_OK
ReadX 9824 0 61440 61440 NT_STATUS_OK
ReadX 9824 61440 4096 4096 NT_STATUS_OK
ReadX 9824 65536 61440 61440 NT_STATUS_OK
ReadX 9824 126976 4096 4096 NT_STATUS_OK
ReadX 9824 131072 61440 61440 NT_STATUS_OK
ReadX 9824 192512 4096 4096 NT_STATUS_OK
ReadX 9824 196608 61440 61440 NT_STATUS_OK
ReadX 9824 258048 4096 4096 NT_STATUS_OK
ReadX 9824 262144 61440 61440 NT_STATUS_OK
ReadX 9824 323584 4096 4096 NT_STATUS_OK
ReadX 9824 327680 61440 61440 NT_STATUS_OK
ReadX 9824 389120 4096 4096 NT_STATUS_OK
ReadX 9824 393216 61440 61440 NT_STATUS_OK
ReadX 9824 454656 4096 4096 NT_STATUS_OK
ReadX 9824 458752 61440 61440 NT_STATUS_OK
ReadX 9824 520192 4096 4096 NT_STATUS_OK
ReadX 9824 524288 61440 61440 NT_STATUS_OK
ReadX 9824 585728 4096 4096 NT_STATUS_OK
ReadX 9824 589824 61440 61440 NT_STATUS_OK
ReadX 9824 651264 4096 4096 NT_STATUS_OK
ReadX 9824 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9825 NT_STATUS_OK
ReadX 9825 0 61440 61440 NT_STATUS_OK
ReadX 9825 61440 4096 4096 NT_STATUS_OK
ReadX 9825 65536 61440 61440 NT_STATUS_OK
ReadX 9825 126976 4096 4096 NT_STATUS_OK
ReadX 9825 131072 61440 61440 NT_STATUS_OK
ReadX 9825 192512 4096 4096 NT_STATUS_OK
ReadX 9825 196608 61440 61440 NT_STATUS_OK
ReadX 9825 258048 4096 4096 NT_STATUS_OK
ReadX 9825 262144 61440 61440 NT_STATUS_OK
ReadX 9825 323584 4096 4096 NT_STATUS_OK
ReadX 9825 327680 61440 61440 NT_STATUS_OK
ReadX 9825 389120 4096 4096 NT_STATUS_OK
ReadX 9825 393216 61440 61440 NT_STATUS_OK
ReadX 9825 454656 4096 4096 NT_STATUS_OK
ReadX 9825 458752 61440 61440 NT_STATUS_OK
ReadX 9825 520192 4096 4096 NT_STATUS_OK
ReadX 9825 524288 61440 61440 NT_STATUS_OK
ReadX 9825 585728 4096 4096 NT_STATUS_OK
ReadX 9825 589824 61440 61440 NT_STATUS_OK
ReadX 9825 651264 4096 4096 NT_STATUS_OK
ReadX 9825 655360 61440 61440 NT_STATUS_OK
ReadX 9825 716800 4096 4096 NT_STATUS_OK
ReadX 9825 720896 61440 61440 NT_STATUS_OK
ReadX 9825 782336 4096 4096 NT_STATUS_OK
ReadX 9825 786432 61440 61440 NT_STATUS_OK
ReadX 9825 847872 4096 4096 NT_STATUS_OK
ReadX 9825 851968 61440 61440 NT_STATUS_OK
ReadX 9825 913408 4096 4096 NT_STATUS_OK
ReadX 9825 917504 61440 61440 NT_STATUS_OK
ReadX 9825 978944 4096 4096 NT_STATUS_OK
ReadX 9825 983040 61440 61440 NT_STATUS_OK
ReadX 9825 1044480 4096 4096 NT_STATUS_OK
ReadX 9825 1048576 61440 61440 NT_STATUS_OK
ReadX 9825 1110016 4096 4096 NT_STATUS_OK
ReadX 9825 1114112 61440 61440 NT_STATUS_OK
ReadX 9825 1175552 4096 4096 NT_STATUS_OK
ReadX 9825 1179648 61440 61440 NT_STATUS_OK
ReadX 9825 1241088 4096 4096 NT_STATUS_OK
ReadX 9825 1245184 61440 61440 NT_STATUS_OK
ReadX 9825 1306624 4096 4096 NT_STATUS_OK
ReadX 9825 1310720 61440 61440 NT_STATUS_OK
ReadX 9825 1372160 4096 4096 NT_STATUS_OK
ReadX 9825 1376256 61440 61440 NT_STATUS_OK
ReadX 9825 1437696 4096 4096 NT_STATUS_OK
ReadX 9825 1441792 61440 61440 NT_STATUS_OK
ReadX 9825 1503232 4096 4096 NT_STATUS_OK
ReadX 9825 1507328 61440 61440 NT_STATUS_OK
ReadX 9825 1568768 4096 4096 NT_STATUS_OK
ReadX 9825 1572864 61440 61440 NT_STATUS_OK
ReadX 9825 1634304 4096 4096 NT_STATUS_OK
ReadX 9825 1638400 61440 61440 NT_STATUS_OK
ReadX 9825 1699840 4096 4096 NT_STATUS_OK
ReadX 9825 1703936 61440 61440 NT_STATUS_OK
ReadX 9825 1765376 4096 4096 NT_STATUS_OK
ReadX 9825 1769472 61440 61440 NT_STATUS_OK
ReadX 9825 1830912 4096 4096 NT_STATUS_OK
ReadX 9825 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9827 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 1005 NT_STATUS_OK
ReadX 9827 2156 24 24 NT_STATUS_OK
ReadX 9827 2139 276 276 NT_STATUS_OK
ReadX 9827 2136 14 14 NT_STATUS_OK
ReadX 9827 2136 7 7 NT_STATUS_OK
ReadX 9827 2138 12 12 NT_STATUS_OK
ReadX 9827 2137 8 8 NT_STATUS_OK
ReadX 9827 2135 15 15 NT_STATUS_OK
ReadX 9827 0 16 16 NT_STATUS_OK
ReadX 9827 16 2048 2048 NT_STATUS_OK
ReadX 9827 2064 2048 2048 NT_STATUS_OK
ReadX 9827 257 2048 2048 NT_STATUS_OK
ReadX 9827 385 2048 2048 NT_STATUS_OK
ReadX 9827 513 2048 2048 NT_STATUS_OK
ReadX 9827 641 2048 2048 NT_STATUS_OK
ReadX 9827 769 2048 2048 NT_STATUS_OK
ReadX 9827 897 2048 2048 NT_STATUS_OK
ReadX 9827 1025 2048 2048 NT_STATUS_OK
ReadX 9827 1153 2048 2048 NT_STATUS_OK
ReadX 9827 1281 2048 2048 NT_STATUS_OK
ReadX 9827 1409 2048 2048 NT_STATUS_OK
ReadX 9827 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9829 NT_STATUS_OK
Close 9829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9823 NT_STATUS_OK
Close 9824 NT_STATUS_OK
Close 9825 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9832 NT_STATUS_OK
WriteX 9832 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9832 258 NT_STATUS_OK
WriteX 9832 0 10575 10575 NT_STATUS_OK
Flush 9832 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9835 NT_STATUS_OK
ReadX 9835 0 4096 4096 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9837 NT_STATUS_OK
LockX 9837 2147483538 1 NT_STATUS_OK
UnlockX 9837 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1005 NT_STATUS_OK
ReadX 9837 0 512 512 NT_STATUS_OK
ReadX 9837 512 512 512 NT_STATUS_OK
ReadX 9837 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1004 NT_STATUS_OK
Close 9837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9838 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1005 NT_STATUS_OK
ReadX 9838 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9839 NT_STATUS_OK
LockX 9839 2147483538 1 NT_STATUS_OK
UnlockX 9839 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9839 1005 NT_STATUS_OK
ReadX 9839 0 512 512 NT_STATUS_OK
ReadX 9839 512 512 512 NT_STATUS_OK
ReadX 9839 1024 512 512 NT_STATUS_OK
ReadX 9839 288 20 20 NT_STATUS_OK
ReadX 9839 308 2084 2084 NT_STATUS_OK
ReadX 9839 388 2084 2084 NT_STATUS_OK
ReadX 9839 388 2084 2084 NT_STATUS_OK
ReadX 9826 2157 1386 1386 NT_STATUS_OK
ReadX 9839 2472 399 399 NT_STATUS_OK
ReadX 9839 3072 1536 1536 NT_STATUS_OK
ReadX 9839 544 149 149 NT_STATUS_OK
ReadX 9839 693 485 485 NT_STATUS_OK
Close 9839 NT_STATUS_OK
ReadX 9826 2157 4096 4096 NT_STATUS_OK
ReadX 9826 6253 4096 4096 NT_STATUS_OK
ReadX 9826 10349 4096 4096 NT_STATUS_OK
ReadX 9826 14445 4096 4096 NT_STATUS_OK
ReadX 9826 18541 4096 4096 NT_STATUS_OK
ReadX 9826 22637 256 256 NT_STATUS_OK
ReadX 9826 22893 4096 4096 NT_STATUS_OK
ReadX 9826 26989 4096 4096 NT_STATUS_OK
ReadX 9826 31085 4096 4096 NT_STATUS_OK
ReadX 9826 35181 4096 4096 NT_STATUS_OK
ReadX 9826 39277 4096 4096 NT_STATUS_OK
ReadX 9826 43373 4096 4096 NT_STATUS_OK
ReadX 9826 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9826 2157 1024 1024 NT_STATUS_OK
ReadX 9826 1667 4688 4688 NT_STATUS_OK
ReadX 9826 6355 3516 3516 NT_STATUS_OK
ReadX 9826 9871 16384 16384 NT_STATUS_OK
ReadX 9826 26255 3771 3771 NT_STATUS_OK
ReadX 9826 30026 2048 2048 NT_STATUS_OK
ReadX 9826 32074 1024 1024 NT_STATUS_OK
ReadX 9826 33098 6652 6652 NT_STATUS_OK
ReadX 9826 39750 16384 16384 NT_STATUS_OK
ReadX 9826 56134 10496 10496 NT_STATUS_OK
ReadX 9826 66630 1784 1784 NT_STATUS_OK
ReadX 9826 68414 90 90 NT_STATUS_OK
ReadX 9826 68504 273 273 NT_STATUS_OK
ReadX 9826 68777 1600 1600 NT_STATUS_OK
ReadX 9826 70377 640 640 NT_STATUS_OK
ReadX 9826 71017 1280 1280 NT_STATUS_OK
ReadX 9826 72297 8464 8464 NT_STATUS_OK
ReadX 9826 80761 158 158 NT_STATUS_OK
ReadX 9826 80919 912 912 NT_STATUS_OK
ReadX 9826 81831 1980 1980 NT_STATUS_OK
ReadX 9826 83811 2256 2256 NT_STATUS_OK
ReadX 9826 86067 400 400 NT_STATUS_OK
ReadX 9826 86467 252 252 NT_STATUS_OK
ReadX 9826 86719 42 42 NT_STATUS_OK
ReadX 9826 86761 725 725 NT_STATUS_OK
ReadX 9826 2009 512 512 NT_STATUS_OK
ReadX 9826 3895 9 9 NT_STATUS_OK
ReadX 9826 3781 46 46 NT_STATUS_OK
ReadX 9826 4059 92 92 NT_STATUS_OK
ReadX 9826 3781 92 92 NT_STATUS_OK
ReadX 9826 3986 184 184 NT_STATUS_OK
ReadX 9826 3987 16384 16384 NT_STATUS_OK
ReadX 9826 3902 16384 16384 NT_STATUS_OK
ReadX 9826 3781 10240 10240 NT_STATUS_OK
ReadX 9826 3821 16384 16384 NT_STATUS_OK
ReadX 9826 3891 935 935 NT_STATUS_OK
ReadX 9826 4060 10240 10240 NT_STATUS_OK
ReadX 9826 4059 184 184 NT_STATUS_OK
ReadX 9826 256 184 184 NT_STATUS_OK
ReadX 9826 256 1026 1026 NT_STATUS_OK
ReadX 9826 3901 326 326 NT_STATUS_OK
ReadX 9826 3899 652 652 NT_STATUS_OK
ReadX 9826 256 2 2 NT_STATUS_OK
ReadX 9826 258 4948 4948 NT_STATUS_OK
Close 9826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9841 NT_STATUS_OK
Close 9841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9844 NT_STATUS_OK
WriteX 9844 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 258 NT_STATUS_OK
WriteX 9844 0 65536 65536 NT_STATUS_OK
WriteX 9844 65536 65536 65536 NT_STATUS_OK
WriteX 9844 131072 65536 65536 NT_STATUS_OK
WriteX 9844 196608 65536 65536 NT_STATUS_OK
WriteX 9844 262144 65536 65536 NT_STATUS_OK
WriteX 9844 327680 65536 65536 NT_STATUS_OK
WriteX 9844 393216 65536 65536 NT_STATUS_OK
WriteX 9844 458752 65536 65536 NT_STATUS_OK
WriteX 9844 524288 65536 65536 NT_STATUS_OK
WriteX 9844 589824 35257 35257 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9846 NT_STATUS_OK
Close 9846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9849 NT_STATUS_OK
WriteX 9849 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9849 258 NT_STATUS_OK
WriteX 9849 0 65536 65536 NT_STATUS_OK
WriteX 9849 65536 65536 65536 NT_STATUS_OK
WriteX 9849 131072 65536 65536 NT_STATUS_OK
WriteX 9849 196608 65536 65536 NT_STATUS_OK
WriteX 9849 262144 65536 65536 NT_STATUS_OK
WriteX 9849 327680 65536 65536 NT_STATUS_OK
WriteX 9849 393216 65536 65536 NT_STATUS_OK
WriteX 9849 458752 65536 65536 NT_STATUS_OK
WriteX 9849 524288 65536 65536 NT_STATUS_OK
WriteX 9849 589824 57598 57598 NT_STATUS_OK
Close 9849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9851 NT_STATUS_OK
WriteX 9851 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 258 NT_STATUS_OK
WriteX 9851 0 12543 12543 NT_STATUS_OK
Flush 9851 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9853 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9857 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 1005 NT_STATUS_OK
ReadX 9857 1938 24 24 NT_STATUS_OK
ReadX 9857 1920 276 276 NT_STATUS_OK
ReadX 9857 1918 14 14 NT_STATUS_OK
ReadX 9857 1918 7 7 NT_STATUS_OK
ReadX 9857 1919 12 12 NT_STATUS_OK
ReadX 9857 1919 8 8 NT_STATUS_OK
ReadX 9857 1917 15 15 NT_STATUS_OK
ReadX 9857 0 16 16 NT_STATUS_OK
ReadX 9857 16 2048 2048 NT_STATUS_OK
ReadX 9857 2064 2048 2048 NT_STATUS_OK
ReadX 9857 257 2048 2048 NT_STATUS_OK
ReadX 9857 385 2048 2048 NT_STATUS_OK
ReadX 9857 513 2048 2048 NT_STATUS_OK
ReadX 9857 641 2048 2048 NT_STATUS_OK
ReadX 9857 769 2048 2048 NT_STATUS_OK
ReadX 9857 897 2048 2048 NT_STATUS_OK
ReadX 9857 1025 2048 2048 NT_STATUS_OK
ReadX 9857 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9859 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9862 NT_STATUS_OK
WriteX 9862 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9862 258 NT_STATUS_OK
WriteX 9862 0 11588 11588 NT_STATUS_OK
Flush 9862 NT_STATUS_OK
Close 9862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9863 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 4096 4096 NT_STATUS_OK
Close 9857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9867 NT_STATUS_OK
WriteX 9867 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9867 258 NT_STATUS_OK
WriteX 9867 0 11615 11615 NT_STATUS_OK
Flush 9867 NT_STATUS_OK
Close 9867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9869 NT_STATUS_OK
Close 9869 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9871 NT_STATUS_OK
ReadX 9871 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9873 NT_STATUS_OK
Close 9873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9876 NT_STATUS_OK
WriteX 9876 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9876 258 NT_STATUS_OK
WriteX 9876 0 65536 65536 NT_STATUS_OK
WriteX 9876 65536 16050 16050 NT_STATUS_OK
Close 9876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9856 1939 64 64 NT_STATUS_OK
ReadX 9856 128 248 248 NT_STATUS_OK
ReadX 9856 128 568 568 NT_STATUS_OK
ReadX 9856 3872 1536 1536 NT_STATUS_OK
ReadX 9856 3456 2560 2560 NT_STATUS_OK
ReadX 9856 3136 512 512 NT_STATUS_OK
ReadX 9856 2880 4096 4096 NT_STATUS_OK
ReadX 9856 3264 3072 3072 NT_STATUS_OK
ReadX 9856 320 4096 4096 NT_STATUS_OK
ReadX 9856 1024 4096 4096 NT_STATUS_OK
ReadX 9856 3616 4096 4096 NT_STATUS_OK
ReadX 9856 1939 64 64 NT_STATUS_OK
ReadX 9856 128 248 248 NT_STATUS_OK
ReadX 9856 128 608 608 NT_STATUS_OK
ReadX 9856 2858 1024 1024 NT_STATUS_OK
ReadX 9856 2810 4096 4096 NT_STATUS_OK
ReadX 9856 2826 4096 4096 NT_STATUS_OK
ReadX 9856 2580 2048 2048 NT_STATUS_OK
ReadX 9856 2800 2560 2560 NT_STATUS_OK
ReadX 9856 2100 4096 4096 NT_STATUS_OK
ReadX 9856 2084 4096 4096 NT_STATUS_OK
ReadX 9856 868 4096 4096 NT_STATUS_OK
ReadX 9856 2324 4096 4096 NT_STATUS_OK
ReadX 9856 884 4096 4096 NT_STATUS_OK
ReadX 9856 2604 1024 1024 NT_STATUS_OK
ReadX 9856 580 4096 4096 NT_STATUS_OK
ReadX 9856 596 4096 4096 NT_STATUS_OK
ReadX 9856 2752 4096 4096 NT_STATUS_OK
ReadX 9856 2842 1024 1024 NT_STATUS_OK
ReadX 9856 660 4096 4096 NT_STATUS_OK
ReadX 9856 2720 4096 4096 NT_STATUS_OK
ReadX 9856 2736 4096 4096 NT_STATUS_OK
ReadX 9856 628 4096 4096 NT_STATUS_OK
ReadX 9856 2704 4096 4096 NT_STATUS_OK
ReadX 9856 1556 4096 4096 NT_STATUS_OK
ReadX 9856 576 4096 4096 NT_STATUS_OK
ReadX 9856 3168 1536 1536 NT_STATUS_OK
ReadX 9856 832 4096 4096 NT_STATUS_OK
ReadX 9856 1088 4096 4096 NT_STATUS_OK
ReadX 9856 1344 4096 4096 NT_STATUS_OK
ReadX 9856 1600 4096 4096 NT_STATUS_OK
ReadX 9856 1856 4096 4096 NT_STATUS_OK
ReadX 9856 2112 4096 4096 NT_STATUS_OK
ReadX 9856 1892 4096 4096 NT_STATUS_OK
ReadX 9856 820 4096 4096 NT_STATUS_OK
ReadX 9856 788 4096 4096 NT_STATUS_OK
ReadX 9856 1604 4096 4096 NT_STATUS_OK
ReadX 9856 3648 4096 4096 NT_STATUS_OK
ReadX 9856 2608 4096 4096 NT_STATUS_OK
ReadX 9856 548 4096 4096 NT_STATUS_OK
ReadX 9856 740 4096 4096 NT_STATUS_OK
ReadX 9856 1344 4096 4096 NT_STATUS_OK
ReadX 9856 3392 4096 4096 NT_STATUS_OK
ReadX 9856 3904 4096 4096 NT_STATUS_OK
ReadX 9856 644 4096 4096 NT_STATUS_OK
ReadX 9856 676 4096 4096 NT_STATUS_OK
ReadX 9856 2688 4096 4096 NT_STATUS_OK
ReadX 9856 320 4096 4096 NT_STATUS_OK
ReadX 9856 900 4096 4096 NT_STATUS_OK
ReadX 9856 1908 4096 4096 NT_STATUS_OK
ReadX 9856 852 4096 4096 NT_STATUS_OK
ReadX 9856 724 4096 4096 NT_STATUS_OK
ReadX 9856 2292 4096 4096 NT_STATUS_OK
ReadX 9856 612 4096 4096 NT_STATUS_OK
ReadX 9856 388 4096 4096 NT_STATUS_OK
ReadX 9856 2368 4096 4096 NT_STATUS_OK
ReadX 9856 2624 4096 4096 NT_STATUS_OK
ReadX 9856 500 4096 4096 NT_STATUS_OK
ReadX 9856 356 4096 4096 NT_STATUS_OK
ReadX 9856 1024 4096 4096 NT_STATUS_OK
ReadX 9856 576 4096 4096 NT_STATUS_OK
ReadX 9856 340 4096 4096 NT_STATUS_OK
ReadX 9856 420 4096 4096 NT_STATUS_OK
ReadX 9856 1600 4096 4096 NT_STATUS_OK
ReadX 9856 404 4096 4096 NT_STATUS_OK
ReadX 9856 1428 4096 4096 NT_STATUS_OK
ReadX 9856 2656 4096 4096 NT_STATUS_OK
ReadX 9856 2624 4096 4096 NT_STATUS_OK
ReadX 9856 452 4096 4096 NT_STATUS_OK
ReadX 9856 692 4096 4096 NT_STATUS_OK
ReadX 9856 564 4096 4096 NT_STATUS_OK
ReadX 9856 372 4096 4096 NT_STATUS_OK
ReadX 9856 468 4096 4096 NT_STATUS_OK
ReadX 9856 484 4096 4096 NT_STATUS_OK
ReadX 9856 1088 4096 4096 NT_STATUS_OK
ReadX 9856 1924 4096 4096 NT_STATUS_OK
ReadX 9856 2768 4096 4096 NT_STATUS_OK
ReadX 9856 832 4096 4096 NT_STATUS_OK
ReadX 9856 836 4096 4096 NT_STATUS_OK
ReadX 9856 1856 4096 4096 NT_STATUS_OK
ReadX 9856 2640 4096 4096 NT_STATUS_OK
ReadX 9856 436 4096 4096 NT_STATUS_OK
ReadX 9856 1828 4096 4096 NT_STATUS_OK
ReadX 9856 804 4096 4096 NT_STATUS_OK
ReadX 9856 1860 4096 4096 NT_STATUS_OK
ReadX 9856 1812 4096 4096 NT_STATUS_OK
ReadX 9856 756 4096 4096 NT_STATUS_OK
ReadX 9856 1636 4096 4096 NT_STATUS_OK
ReadX 9856 772 4096 4096 NT_STATUS_OK
ReadX 9856 2036 4096 4096 NT_STATUS_OK
ReadX 9856 1220 4096 4096 NT_STATUS_OK
ReadX 9856 1652 4096 4096 NT_STATUS_OK
ReadX 9856 2588 4096 4096 NT_STATUS_OK
ReadX 9856 916 4096 4096 NT_STATUS_OK
ReadX 9856 260 4096 4096 NT_STATUS_OK
ReadX 9856 932 4096 4096 NT_STATUS_OK
ReadX 9856 2624 4096 4096 NT_STATUS_OK
ReadX 9856 308 4096 4096 NT_STATUS_OK
ReadX 9856 292 4096 4096 NT_STATUS_OK
ReadX 9856 1140 4096 4096 NT_STATUS_OK
ReadX 9856 276 4096 4096 NT_STATUS_OK
ReadX 9856 2020 4096 4096 NT_STATUS_OK
ReadX 9856 2880 4096 4096 NT_STATUS_OK
ReadX 9856 516 4096 4096 NT_STATUS_OK
ReadX 9856 1844 4096 4096 NT_STATUS_OK
ReadX 9856 1124 4096 4096 NT_STATUS_OK
ReadX 9856 3136 4096 4096 NT_STATUS_OK
ReadX 9856 324 4096 4096 NT_STATUS_OK
ReadX 9856 1156 4096 4096 NT_STATUS_OK
ReadX 9856 1172 4096 4096 NT_STATUS_OK
ReadX 9856 2112 4096 4096 NT_STATUS_OK
ReadX 9856 2368 4096 4096 NT_STATUS_OK
ReadX 9856 964 4096 4096 NT_STATUS_OK
ReadX 9856 980 4096 4096 NT_STATUS_OK
ReadX 9856 1012 4096 4096 NT_STATUS_OK
ReadX 9856 532 4096 4096 NT_STATUS_OK
ReadX 9856 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9856 1620 4096 4096 NT_STATUS_OK
ReadX 9856 1604 4096 4096 NT_STATUS_OK
ReadX 9856 2116 4096 4096 NT_STATUS_OK
ReadX 9856 2132 4096 4096 NT_STATUS_OK
ReadX 9856 2148 4096 4096 NT_STATUS_OK
ReadX 9856 2276 4096 4096 NT_STATUS_OK
ReadX 9856 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9881 NT_STATUS_OK
QUERY_FILE_INFORMATION 9836 1004 NT_STATUS_OK
Close 9836 NT_STATUS_OK
WriteX 9881 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1004 NT_STATUS_OK
Close 9838 NT_STATUS_OK
WriteX 9881 0 65536 65536 NT_STATUS_OK
WriteX 9881 65536 64850 64850 NT_STATUS_OK
Close 9881 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9883 NT_STATUS_OK
WriteX 9883 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9883 258 NT_STATUS_OK
ReadX 9856 2068 4096 4096 NT_STATUS_OK
ReadX 9856 1588 4096 4096 NT_STATUS_OK
ReadX 9856 1572 4096 4096 NT_STATUS_OK
WriteX 9883 0 18630 18630 NT_STATUS_OK
Flush 9883 NT_STATUS_OK
Close 9883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9885 NT_STATUS_OK
Close 9885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9856 612 4096 4096 NT_STATUS_OK
ReadX 9856 564 4096 4096 NT_STATUS_OK
ReadX 9856 1876 4096 4096 NT_STATUS_OK
ReadX 9856 628 4096 4096 NT_STATUS_OK
ReadX 9856 740 4096 4096 NT_STATUS_OK
ReadX 9856 724 4096 4096 NT_STATUS_OK
ReadX 9856 644 4096 4096 NT_STATUS_OK
ReadX 9856 2324 4096 4096 NT_STATUS_OK
ReadX 9856 660 4096 4096 NT_STATUS_OK
ReadX 9856 852 4096 4096 NT_STATUS_OK
ReadX 9856 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9856 2368 4096 4096 NT_STATUS_OK
ReadX 9856 1024 4096 4096 NT_STATUS_OK
ReadX 9856 320 4096 4096 NT_STATUS_OK
ReadX 9856 580 4096 4096 NT_STATUS_OK
ReadX 9856 3136 512 512 NT_STATUS_OK
ReadX 9856 2880 4096 4096 NT_STATUS_OK
Close 9856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 61440 4096 4096 NT_STATUS_OK
ReadX 9888 126976 4096 4096 NT_STATUS_OK
WriteX 9888 0 65536 65536 NT_STATUS_OK
WriteX 9888 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 61440 4096 4096 NT_STATUS_OK
ReadX 9889 126976 4096 4096 NT_STATUS_OK
ReadX 9889 192512 4096 4096 NT_STATUS_OK
ReadX 9889 258048 4096 4096 NT_STATUS_OK
WriteX 9889 0 65536 65536 NT_STATUS_OK
WriteX 9889 65536 65536 65536 NT_STATUS_OK
WriteX 9889 131072 65536 65536 NT_STATUS_OK
WriteX 9889 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 61440 4096 4096 NT_STATUS_OK
ReadX 9890 126976 4096 4096 NT_STATUS_OK
ReadX 9890 192512 4096 4096 NT_STATUS_OK
ReadX 9890 258048 4096 4096 NT_STATUS_OK
ReadX 9890 323584 4096 4096 NT_STATUS_OK
ReadX 9890 389120 4096 4096 NT_STATUS_OK
ReadX 9890 454656 4096 4096 NT_STATUS_OK
ReadX 9890 520192 4096 4096 NT_STATUS_OK
WriteX 9890 0 65536 65536 NT_STATUS_OK
WriteX 9890 65536 65536 65536 NT_STATUS_OK
WriteX 9890 131072 65536 65536 NT_STATUS_OK
WriteX 9890 196608 65536 65536 NT_STATUS_OK
WriteX 9890 262144 65536 65536 NT_STATUS_OK
WriteX 9890 327680 65536 65536 NT_STATUS_OK
WriteX 9890 393216 65536 65536 NT_STATUS_OK
WriteX 9890 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9892 NT_STATUS_OK
Close 9892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9893 NT_STATUS_OK
WriteX 9893 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9893 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9891 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9895 NT_STATUS_OK
Close 9895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9855 NT_STATUS_OK
Close 9888 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9898 NT_STATUS_OK
WriteX 9898 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9898 258 NT_STATUS_OK
WriteX 9898 0 62591 62591 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9900 NT_STATUS_OK
Close 9900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9903 NT_STATUS_OK
WriteX 9903 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9903 258 NT_STATUS_OK
WriteX 9903 0 10845 10845 NT_STATUS_OK
Close 9903 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9905 NT_STATUS_OK
Close 9905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9908 NT_STATUS_OK
WriteX 9908 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9908 258 NT_STATUS_OK
WriteX 9908 0 30118 30118 NT_STATUS_OK
Close 9908 NT_STATUS_OK
WriteX 9891 0 4096 4096 NT_STATUS_OK
WriteX 9893 0 64 64 NT_STATUS_OK
Close 9893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9891 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9910 NT_STATUS_OK
ReadX 9910 0 61440 61440 NT_STATUS_OK
ReadX 9910 61440 4096 4096 NT_STATUS_OK
ReadX 9910 65536 61440 61440 NT_STATUS_OK
ReadX 9910 126976 4096 4096 NT_STATUS_OK
ReadX 9910 131072 61440 61440 NT_STATUS_OK
ReadX 9910 192512 4096 4096 NT_STATUS_OK
ReadX 9910 196608 61440 61440 NT_STATUS_OK
ReadX 9910 258048 4096 4096 NT_STATUS_OK
ReadX 9910 262144 61440 61440 NT_STATUS_OK
ReadX 9910 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9911 NT_STATUS_OK
ReadX 9911 0 61440 61440 NT_STATUS_OK
ReadX 9911 61440 4096 4096 NT_STATUS_OK
ReadX 9911 65536 61440 61440 NT_STATUS_OK
ReadX 9911 126976 4096 4096 NT_STATUS_OK
ReadX 9911 131072 61440 61440 NT_STATUS_OK
ReadX 9911 192512 4096 4096 NT_STATUS_OK
ReadX 9911 196608 61440 61440 NT_STATUS_OK
ReadX 9911 258048 4096 4096 NT_STATUS_OK
ReadX 9911 262144 61440 61440 NT_STATUS_OK
ReadX 9911 323584 4096 4096 NT_STATUS_OK
ReadX 9911 327680 61440 61440 NT_STATUS_OK
ReadX 9911 389120 4096 4096 NT_STATUS_OK
ReadX 9911 393216 61440 61440 NT_STATUS_OK
ReadX 9911 454656 4096 4096 NT_STATUS_OK
ReadX 9911 458752 61440 61440 NT_STATUS_OK
ReadX 9911 520192 4096 4096 NT_STATUS_OK
ReadX 9911 524288 61440 61440 NT_STATUS_OK
ReadX 9911 585728 4096 4096 NT_STATUS_OK
ReadX 9911 589824 61440 61440 NT_STATUS_OK
ReadX 9911 651264 4096 4096 NT_STATUS_OK
ReadX 9911 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9912 NT_STATUS_OK
ReadX 9912 0 61440 61440 NT_STATUS_OK
ReadX 9912 61440 4096 4096 NT_STATUS_OK
ReadX 9912 65536 61440 61440 NT_STATUS_OK
ReadX 9912 126976 4096 4096 NT_STATUS_OK
ReadX 9912 131072 61440 61440 NT_STATUS_OK
ReadX 9912 192512 4096 4096 NT_STATUS_OK
ReadX 9912 196608 61440 61440 NT_STATUS_OK
ReadX 9912 258048 4096 4096 NT_STATUS_OK
ReadX 9912 262144 61440 61440 NT_STATUS_OK
ReadX 9912 323584 4096 4096 NT_STATUS_OK
ReadX 9912 327680 61440 61440 NT_STATUS_OK
ReadX 9912 389120 4096 4096 NT_STATUS_OK
ReadX 9912 393216 61440 61440 NT_STATUS_OK
ReadX 9912 454656 4096 4096 NT_STATUS_OK
ReadX 9912 458752 61440 61440 NT_STATUS_OK
ReadX 9912 520192 4096 4096 NT_STATUS_OK
ReadX 9912 524288 61440 61440 NT_STATUS_OK
ReadX 9912 585728 4096 4096 NT_STATUS_OK
ReadX 9912 589824 61440 61440 NT_STATUS_OK
ReadX 9912 651264 4096 4096 NT_STATUS_OK
ReadX 9912 655360 61440 61440 NT_STATUS_OK
ReadX 9912 716800 4096 4096 NT_STATUS_OK
ReadX 9912 720896 61440 61440 NT_STATUS_OK
ReadX 9912 782336 4096 4096 NT_STATUS_OK
ReadX 9912 786432 61440 61440 NT_STATUS_OK
ReadX 9912 847872 4096 4096 NT_STATUS_OK
ReadX 9912 851968 61440 61440 NT_STATUS_OK
ReadX 9912 913408 4096 4096 NT_STATUS_OK
ReadX 9912 917504 61440 61440 NT_STATUS_OK
ReadX 9912 978944 4096 4096 NT_STATUS_OK
ReadX 9912 983040 61440 61440 NT_STATUS_OK
ReadX 9912 1044480 4096 4096 NT_STATUS_OK
ReadX 9912 1048576 61440 61440 NT_STATUS_OK
ReadX 9912 1110016 4096 4096 NT_STATUS_OK
ReadX 9912 1114112 61440 61440 NT_STATUS_OK
ReadX 9912 1175552 4096 4096 NT_STATUS_OK
ReadX 9912 1179648 61440 61440 NT_STATUS_OK
ReadX 9912 1241088 4096 4096 NT_STATUS_OK
ReadX 9912 1245184 61440 61440 NT_STATUS_OK
ReadX 9912 1306624 4096 4096 NT_STATUS_OK
ReadX 9912 1310720 61440 61440 NT_STATUS_OK
ReadX 9912 1372160 4096 4096 NT_STATUS_OK
ReadX 9912 1376256 61440 61440 NT_STATUS_OK
ReadX 9912 1437696 4096 4096 NT_STATUS_OK
ReadX 9912 1441792 61440 61440 NT_STATUS_OK
ReadX 9912 1503232 4096 4096 NT_STATUS_OK
ReadX 9912 1507328 61440 61440 NT_STATUS_OK
ReadX 9912 1568768 4096 4096 NT_STATUS_OK
ReadX 9912 1572864 61440 61440 NT_STATUS_OK
ReadX 9912 1634304 4096 4096 NT_STATUS_OK
ReadX 9912 1638400 61440 61440 NT_STATUS_OK
ReadX 9912 1699840 4096 4096 NT_STATUS_OK
ReadX 9912 1703936 61440 61440 NT_STATUS_OK
ReadX 9912 1765376 4096 4096 NT_STATUS_OK
ReadX 9912 1769472 61440 61440 NT_STATUS_OK
ReadX 9912 1830912 4096 4096 NT_STATUS_OK
ReadX 9912 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9913 NT_STATUS_OK
Close 9913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9910 NT_STATUS_OK
Close 9911 NT_STATUS_OK
Close 9912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9917 NT_STATUS_OK
ReadX 9917 0 4096 4096 NT_STATUS_OK
ReadX 9917 4096 4096 4096 NT_STATUS_OK
ReadX 9917 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9918 NT_STATUS_OK
Close 9918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Close 9916 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9920 NT_STATUS_OK
ReadX 9920 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9921 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9922 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9920 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 8192 8192 NT_STATUS_OK
ReadX 9925 8192 8192 8192 NT_STATUS_OK
ReadX 9925 16384 8192 8192 NT_STATUS_OK
ReadX 9925 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9927 NT_STATUS_OK
Close 9927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9930 NT_STATUS_OK
WriteX 9930 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9930 258 NT_STATUS_OK
WriteX 9930 0 10438 10438 NT_STATUS_OK
Close 9930 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9934 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9936 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9938 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
ReadX 9939 4096 4096 4096 NT_STATUS_OK
ReadX 9939 8192 4096 4096 NT_STATUS_OK
ReadX 9939 12288 8192 8192 NT_STATUS_OK
ReadX 9939 20480 8192 8192 NT_STATUS_OK
ReadX 9939 28672 8192 8192 NT_STATUS_OK
ReadX 9939 36864 8192 8192 NT_STATUS_OK
ReadX 9939 45056 8192 8192 NT_STATUS_OK
ReadX 9939 53248 8192 8192 NT_STATUS_OK
ReadX 9939 61440 8192 8192 NT_STATUS_OK
ReadX 9939 69632 8192 8192 NT_STATUS_OK
ReadX 9939 77824 8192 8192 NT_STATUS_OK
ReadX 9939 86016 8192 8192 NT_STATUS_OK
ReadX 9939 94208 8192 8192 NT_STATUS_OK
ReadX 9939 102400 8192 8192 NT_STATUS_OK
ReadX 9939 110592 8192 8192 NT_STATUS_OK
ReadX 9939 118784 8192 8192 NT_STATUS_OK
ReadX 9939 126976 8192 8192 NT_STATUS_OK
ReadX 9939 135168 8192 8192 NT_STATUS_OK
ReadX 9939 143360 8192 8192 NT_STATUS_OK
ReadX 9939 151552 8192 8192 NT_STATUS_OK
ReadX 9939 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Close 9932 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9941 NT_STATUS_OK
Close 9941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9944 NT_STATUS_OK
WriteX 9944 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 258 NT_STATUS_OK
WriteX 9944 0 28489 28489 NT_STATUS_OK
Close 9944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9945 NT_STATUS_OK
Close 9945 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9947 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9950 NT_STATUS_OK
ReadX 9950 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9951 NT_STATUS_OK
ReadX 9951 0 8192 8192 NT_STATUS_OK
ReadX 9951 8192 8192 8192 NT_STATUS_OK
ReadX 9951 16384 8192 8192 NT_STATUS_OK
ReadX 9951 24576 8192 8192 NT_STATUS_OK
ReadX 9951 32768 16384 16384 NT_STATUS_OK
ReadX 9951 49152 8192 8192 NT_STATUS_OK
ReadX 9951 57344 8192 8192 NT_STATUS_OK
ReadX 9951 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9951 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9956 NT_STATUS_OK
WriteX 9956 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 258 NT_STATUS_OK
WriteX 9956 0 29253 29253 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9957 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9960 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9963 NT_STATUS_OK
WriteX 9963 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 30183 30183 NT_STATUS_OK
Close 9963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9966 NT_STATUS_OK
WriteX 9966 0 510 510 NT_STATUS_OK
WriteX 9966 510 512 512 NT_STATUS_OK
WriteX 9966 1022 510 510 NT_STATUS_OK
WriteX 9966 1532 510 510 NT_STATUS_OK
WriteX 9966 2042 168 168 NT_STATUS_OK
Close 9966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9967 NT_STATUS_OK
Close 9967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9969 NT_STATUS_OK
ReadX 9969 0 4096 4096 NT_STATUS_OK
WriteX 9969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9970 NT_STATUS_OK
ReadX 9970 61440 4096 4096 NT_STATUS_OK
ReadX 9970 126976 4096 4096 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 61440 4096 4096 NT_STATUS_OK
ReadX 9971 126976 4096 4096 NT_STATUS_OK
ReadX 9971 192512 4096 4096 NT_STATUS_OK
ReadX 9971 258048 4096 4096 NT_STATUS_OK
WriteX 9971 0 65536 65536 NT_STATUS_OK
WriteX 9971 65536 65536 65536 NT_STATUS_OK
WriteX 9971 131072 65536 65536 NT_STATUS_OK
WriteX 9971 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9972 NT_STATUS_OK
ReadX 9972 61440 4096 4096 NT_STATUS_OK
ReadX 9972 126976 4096 4096 NT_STATUS_OK
ReadX 9972 192512 4096 4096 NT_STATUS_OK
ReadX 9972 258048 4096 4096 NT_STATUS_OK
ReadX 9972 323584 4096 4096 NT_STATUS_OK
ReadX 9972 389120 4096 4096 NT_STATUS_OK
ReadX 9972 454656 4096 4096 NT_STATUS_OK
ReadX 9972 520192 4096 4096 NT_STATUS_OK
WriteX 9972 0 65536 65536 NT_STATUS_OK
WriteX 9972 65536 65536 65536 NT_STATUS_OK
WriteX 9972 131072 65536 65536 NT_STATUS_OK
WriteX 9972 196608 65536 65536 NT_STATUS_OK
WriteX 9972 262144 65536 65536 NT_STATUS_OK
WriteX 9972 327680 65536 65536 NT_STATUS_OK
WriteX 9972 393216 65536 65536 NT_STATUS_OK
WriteX 9972 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9973 NT_STATUS_OK
Close 9973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9969 NT_STATUS_OK
Close 9970 NT_STATUS_OK
Close 9971 NT_STATUS_OK
Close 9972 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9975 NT_STATUS_OK
Close 9975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9979 NT_STATUS_OK
Close 9979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9982 NT_STATUS_OK
Close 9982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9984 NT_STATUS_OK
Close 9984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9993 NT_STATUS_OK
Close 9993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10002 NT_STATUS_OK
Close 10002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10017 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10022 NT_STATUS_OK
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10032 NT_STATUS_OK
Close 10032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10038 NT_STATUS_OK
Close 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10041 NT_STATUS_OK
WriteX 10041 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10041 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10041 0 65536 65536 NT_STATUS_OK
WriteX 10041 65536 65536 65536 NT_STATUS_OK
WriteX 10041 131072 65536 65536 NT_STATUS_OK
WriteX 10041 196608 65536 65536 NT_STATUS_OK
WriteX 10041 262144 26634 26634 NT_STATUS_OK
Close 10041 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10046 NT_STATUS_OK
Close 10046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
ReadX 10049 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10057 NT_STATUS_OK
Close 10057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10059 NT_STATUS_OK
Close 10059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10063 NT_STATUS_OK
Close 10063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10066 NT_STATUS_OK
Close 10066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10068 NT_STATUS_OK
Close 10068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10077 NT_STATUS_OK
Close 10077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10082 NT_STATUS_OK
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10101 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10106 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10111 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10114 NT_STATUS_OK
Close 10114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10127 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
Close 10128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
Close 10129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10142 NT_STATUS_OK
ReadX 10142 0 4096 4096 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10173 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10173 0 4096 4096 NT_STATUS_OK
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
ReadX 10175 4096 4096 4096 NT_STATUS_OK
ReadX 10175 8192 4096 4096 NT_STATUS_OK
ReadX 10175 12288 4096 4096 NT_STATUS_OK
ReadX 10175 16384 4096 4096 NT_STATUS_OK
ReadX 10175 20480 4096 4096 NT_STATUS_OK
ReadX 10175 24576 4096 4096 NT_STATUS_OK
ReadX 10175 28672 4096 4096 NT_STATUS_OK
ReadX 10175 32768 4096 4096 NT_STATUS_OK
ReadX 10175 36864 4096 4096 NT_STATUS_OK
ReadX 10175 40960 4096 4096 NT_STATUS_OK
ReadX 10175 45056 4096 4096 NT_STATUS_OK
ReadX 10175 49152 4096 4096 NT_STATUS_OK
ReadX 10175 53248 4096 4096 NT_STATUS_OK
ReadX 10175 57344 4096 4096 NT_STATUS_OK
ReadX 10175 61440 4096 4096 NT_STATUS_OK
ReadX 10175 65536 4096 4096 NT_STATUS_OK
ReadX 10175 69632 4096 4096 NT_STATUS_OK
ReadX 10175 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10175 1004 NT_STATUS_OK
WriteX 10175 0 4096 4096 NT_STATUS_OK
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10176 NT_STATUS_OK
SET_FILE_INFORMATION 10176 1004 NT_STATUS_OK
Close 10176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10178 NT_STATUS_OK
Close 10178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10181 NT_STATUS_OK
WriteX 10181 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10181 258 NT_STATUS_OK
WriteX 10181 0 65536 65536 NT_STATUS_OK
WriteX 10181 65536 19979 19979 NT_STATUS_OK
Close 10181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
QUERY_FILE_INFORMATION 10182 1004 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
SET_FILE_INFORMATION 10182 1004 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
Close 10183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10187 1004 NT_STATUS_OK
WriteX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10188 NT_STATUS_OK
Close 10188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10190 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10193 NT_STATUS_OK
WriteX 10193 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 258 NT_STATUS_OK
WriteX 10193 0 65536 65536 NT_STATUS_OK
WriteX 10193 65536 17654 17654 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10195 NT_STATUS_OK
SET_FILE_INFORMATION 10195 1004 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10196 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
ReadX 10199 4096 4096 4096 NT_STATUS_OK
ReadX 10199 8192 4096 4096 NT_STATUS_OK
ReadX 10199 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10199 16384 4096 4096 NT_STATUS_OK
ReadX 10199 20480 4096 4096 NT_STATUS_OK
ReadX 10199 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
Close 10201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10202 1004 NT_STATUS_OK
WriteX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10203 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10208 NT_STATUS_OK
WriteX 10208 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10208 258 NT_STATUS_OK
WriteX 10208 0 65536 65536 NT_STATUS_OK
WriteX 10208 65536 19490 19490 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
SET_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10210 NT_STATUS_OK
SET_FILE_INFORMATION 10210 1004 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10214 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10214 0 4096 4096 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
ReadX 10216 4096 4096 4096 NT_STATUS_OK
ReadX 10216 8192 4096 4096 NT_STATUS_OK
ReadX 10216 12288 4096 4096 NT_STATUS_OK
ReadX 10216 16384 4096 4096 NT_STATUS_OK
ReadX 10216 20480 4096 4096 NT_STATUS_OK
ReadX 10216 24576 4096 4096 NT_STATUS_OK
ReadX 10216 28672 4096 4096 NT_STATUS_OK
ReadX 10216 32768 4096 4096 NT_STATUS_OK
ReadX 10216 36864 4096 4096 NT_STATUS_OK
ReadX 10216 40960 4096 4096 NT_STATUS_OK
ReadX 10216 45056 4096 4096 NT_STATUS_OK
ReadX 10216 49152 4096 4096 NT_STATUS_OK
ReadX 10216 53248 4096 4096 NT_STATUS_OK
ReadX 10216 57344 4096 4096 NT_STATUS_OK
ReadX 10216 61440 4096 4096 NT_STATUS_OK
ReadX 10216 65536 4096 4096 NT_STATUS_OK
ReadX 10216 69632 4096 4096 NT_STATUS_OK
ReadX 10216 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10216 1004 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10217 NT_STATUS_OK
SET_FILE_INFORMATION 10217 1004 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10222 NT_STATUS_OK
WriteX 10222 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10222 258 NT_STATUS_OK
WriteX 10222 0 65536 65536 NT_STATUS_OK
WriteX 10222 65536 8866 8866 NT_STATUS_OK
Close 10222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
Flush 10223 NT_STATUS_OK
SET_FILE_INFORMATION 10223 1004 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
Flush 10223 NT_STATUS_OK
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
Close 10226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10227 1004 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10233 NT_STATUS_OK
WriteX 10233 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10233 258 NT_STATUS_OK
WriteX 10233 0 65536 65536 NT_STATUS_OK
WriteX 10233 65536 9298 9298 NT_STATUS_OK
Close 10233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
WriteX 10234 0 4096 4096 NT_STATUS_OK
Flush 10234 NT_STATUS_OK
SET_FILE_INFORMATION 10234 1004 NT_STATUS_OK
WriteX 10234 0 4096 4096 NT_STATUS_OK
Flush 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10235 NT_STATUS_OK
SET_FILE_INFORMATION 10235 1004 NT_STATUS_OK
Close 10235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10240 0 4096 4096 NT_STATUS_OK
Close 10240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10241 4096 4096 4096 NT_STATUS_OK
ReadX 10241 8192 4096 4096 NT_STATUS_OK
ReadX 10241 12288 4096 4096 NT_STATUS_OK
ReadX 10241 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 4096 4096 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10244 1004 NT_STATUS_OK
WriteX 10244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10245 NT_STATUS_OK
Close 10245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10247 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10250 NT_STATUS_OK
WriteX 10250 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 65536 65536 NT_STATUS_OK
WriteX 10250 65536 11540 11540 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Flush 10251 NT_STATUS_OK
SET_FILE_INFORMATION 10251 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Flush 10251 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10252 NT_STATUS_OK
SET_FILE_INFORMATION 10252 1004 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10254 NT_STATUS_OK
Close 10254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 61440 4096 4096 NT_STATUS_OK
ReadX 10256 126976 4096 4096 NT_STATUS_OK
WriteX 10256 0 65536 65536 NT_STATUS_OK
WriteX 10256 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 61440 4096 4096 NT_STATUS_OK
ReadX 10257 126976 4096 4096 NT_STATUS_OK
ReadX 10257 192512 4096 4096 NT_STATUS_OK
ReadX 10257 258048 4096 4096 NT_STATUS_OK
WriteX 10257 0 65536 65536 NT_STATUS_OK
WriteX 10257 65536 65536 65536 NT_STATUS_OK
WriteX 10257 131072 65536 65536 NT_STATUS_OK
WriteX 10257 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 61440 4096 4096 NT_STATUS_OK
ReadX 10258 126976 4096 4096 NT_STATUS_OK
ReadX 10258 192512 4096 4096 NT_STATUS_OK
ReadX 10258 258048 4096 4096 NT_STATUS_OK
ReadX 10258 323584 4096 4096 NT_STATUS_OK
ReadX 10258 389120 4096 4096 NT_STATUS_OK
ReadX 10258 454656 4096 4096 NT_STATUS_OK
ReadX 10258 520192 4096 4096 NT_STATUS_OK
WriteX 10258 0 65536 65536 NT_STATUS_OK
WriteX 10258 65536 65536 65536 NT_STATUS_OK
WriteX 10258 131072 65536 65536 NT_STATUS_OK
WriteX 10258 196608 65536 65536 NT_STATUS_OK
WriteX 10258 262144 65536 65536 NT_STATUS_OK
WriteX 10258 327680 65536 65536 NT_STATUS_OK
WriteX 10258 393216 65536 65536 NT_STATUS_OK
WriteX 10258 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10260 NT_STATUS_OK
WriteX 10260 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10260 258 NT_STATUS_OK
WriteX 10260 0 53 53 NT_STATUS_OK
Close 10260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10261 NT_STATUS_OK
Close 10261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10259 8192 4096 4096 NT_STATUS_OK
ReadX 10259 12288 4096 4096 NT_STATUS_OK
WriteX 10263 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10263 258 NT_STATUS_OK
ReadX 10259 16384 4096 4096 NT_STATUS_OK
ReadX 10259 20480 4096 4096 NT_STATUS_OK
WriteX 10263 0 15360 15360 NT_STATUS_OK
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10264 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10264 1004 NT_STATUS_OK
WriteX 10264 0 4096 4096 NT_STATUS_OK
Close 10264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10265 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10267 4096 4096 4096 NT_STATUS_OK
ReadX 10267 8192 4096 4096 NT_STATUS_OK
ReadX 10267 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
ReadX 10270 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
ReadX 10271 4096 4096 4096 NT_STATUS_OK
ReadX 10271 8192 4096 4096 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10272 NT_STATUS_OK
WriteX 10272 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10272 258 NT_STATUS_OK
WriteX 10272 0 15360 15360 NT_STATUS_OK
Close 10272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10273 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10274 NT_STATUS_OK
Close 10274 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10276 NT_STATUS_OK
ReadX 10276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10277 NT_STATUS_OK
SET_FILE_INFORMATION 10277 1004 NT_STATUS_OK
Close 10277 NT_STATUS_OK
WriteX 10273 0 4096 4096 NT_STATUS_OK
Close 10273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 0 4096 4096 NT_STATUS_OK
ReadX 10280 4096 4096 4096 NT_STATUS_OK
ReadX 10280 8192 4096 4096 NT_STATUS_OK
ReadX 10280 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10280 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10280 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10282 NT_STATUS_OK
WriteX 10282 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 53 53 NT_STATUS_OK
Close 10282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10283 NT_STATUS_OK
Close 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10281 4096 4096 4096 NT_STATUS_OK
ReadX 10281 8192 4096 4096 NT_STATUS_OK
ReadX 10281 12288 4096 4096 NT_STATUS_OK
WriteX 10285 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 258 NT_STATUS_OK
WriteX 10285 0 12006 12006 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10287 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10289 4096 4096 4096 NT_STATUS_OK
ReadX 10289 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10292 NT_STATUS_OK
WriteX 10292 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10292 258 NT_STATUS_OK
WriteX 10292 0 11991 11991 NT_STATUS_OK
Close 10292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10293 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10293 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10294 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10297 NT_STATUS_OK
SET_FILE_INFORMATION 10297 1004 NT_STATUS_OK
Close 10297 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10298 NT_STATUS_OK
Close 10298 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10300 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
ReadX 10300 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
WriteX 10280 0 19054 19054 NT_STATUS_OK
WriteX 10300 0 12288 12288 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10303 NT_STATUS_OK
Close 10303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 61440 61440 NT_STATUS_OK
ReadX 10307 61440 4096 4096 NT_STATUS_OK
ReadX 10307 65536 61440 61440 NT_STATUS_OK
ReadX 10307 126976 4096 4096 NT_STATUS_OK
ReadX 10307 131072 61440 61440 NT_STATUS_OK
ReadX 10307 192512 4096 4096 NT_STATUS_OK
ReadX 10307 196608 61440 61440 NT_STATUS_OK
ReadX 10307 258048 4096 4096 NT_STATUS_OK
ReadX 10307 262144 61440 61440 NT_STATUS_OK
ReadX 10307 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 61440 61440 NT_STATUS_OK
ReadX 10308 61440 4096 4096 NT_STATUS_OK
ReadX 10308 65536 61440 61440 NT_STATUS_OK
ReadX 10308 126976 4096 4096 NT_STATUS_OK
ReadX 10308 131072 61440 61440 NT_STATUS_OK
ReadX 10308 192512 4096 4096 NT_STATUS_OK
ReadX 10308 196608 61440 61440 NT_STATUS_OK
ReadX 10308 258048 4096 4096 NT_STATUS_OK
ReadX 10308 262144 61440 61440 NT_STATUS_OK
ReadX 10308 323584 4096 4096 NT_STATUS_OK
ReadX 10308 327680 61440 61440 NT_STATUS_OK
ReadX 10308 389120 4096 4096 NT_STATUS_OK
ReadX 10308 393216 61440 61440 NT_STATUS_OK
ReadX 10308 454656 4096 4096 NT_STATUS_OK
ReadX 10308 458752 61440 61440 NT_STATUS_OK
ReadX 10308 520192 4096 4096 NT_STATUS_OK
ReadX 10308 524288 61440 61440 NT_STATUS_OK
ReadX 10308 585728 4096 4096 NT_STATUS_OK
ReadX 10308 589824 61440 61440 NT_STATUS_OK
ReadX 10308 651264 4096 4096 NT_STATUS_OK
ReadX 10308 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 61440 61440 NT_STATUS_OK
ReadX 10309 61440 4096 4096 NT_STATUS_OK
ReadX 10309 65536 61440 61440 NT_STATUS_OK
ReadX 10309 126976 4096 4096 NT_STATUS_OK
ReadX 10309 131072 61440 61440 NT_STATUS_OK
ReadX 10309 192512 4096 4096 NT_STATUS_OK
ReadX 10309 196608 61440 61440 NT_STATUS_OK
ReadX 10309 258048 4096 4096 NT_STATUS_OK
ReadX 10309 262144 61440 61440 NT_STATUS_OK
ReadX 10309 323584 4096 4096 NT_STATUS_OK
ReadX 10309 327680 61440 61440 NT_STATUS_OK
ReadX 10309 389120 4096 4096 NT_STATUS_OK
ReadX 10309 393216 61440 61440 NT_STATUS_OK
ReadX 10309 454656 4096 4096 NT_STATUS_OK
ReadX 10309 458752 61440 61440 NT_STATUS_OK
ReadX 10309 520192 4096 4096 NT_STATUS_OK
ReadX 10309 524288 61440 61440 NT_STATUS_OK
ReadX 10309 585728 4096 4096 NT_STATUS_OK
ReadX 10309 589824 61440 61440 NT_STATUS_OK
ReadX 10309 651264 4096 4096 NT_STATUS_OK
ReadX 10309 655360 61440 61440 NT_STATUS_OK
ReadX 10309 716800 4096 4096 NT_STATUS_OK
ReadX 10309 720896 61440 61440 NT_STATUS_OK
ReadX 10309 782336 4096 4096 NT_STATUS_OK
ReadX 10309 786432 61440 61440 NT_STATUS_OK
ReadX 10309 847872 4096 4096 NT_STATUS_OK
ReadX 10309 851968 61440 61440 NT_STATUS_OK
ReadX 10309 913408 4096 4096 NT_STATUS_OK
ReadX 10309 917504 61440 61440 NT_STATUS_OK
ReadX 10309 978944 4096 4096 NT_STATUS_OK
ReadX 10309 983040 61440 61440 NT_STATUS_OK
ReadX 10309 1044480 4096 4096 NT_STATUS_OK
ReadX 10309 1048576 61440 61440 NT_STATUS_OK
ReadX 10309 1110016 4096 4096 NT_STATUS_OK
ReadX 10309 1114112 61440 61440 NT_STATUS_OK
ReadX 10309 1175552 4096 4096 NT_STATUS_OK
ReadX 10309 1179648 61440 61440 NT_STATUS_OK
ReadX 10309 1241088 4096 4096 NT_STATUS_OK
ReadX 10309 1245184 61440 61440 NT_STATUS_OK
ReadX 10309 1306624 4096 4096 NT_STATUS_OK
ReadX 10309 1310720 61440 61440 NT_STATUS_OK
ReadX 10309 1372160 4096 4096 NT_STATUS_OK
ReadX 10309 1376256 61440 61440 NT_STATUS_OK
ReadX 10309 1437696 4096 4096 NT_STATUS_OK
ReadX 10309 1441792 61440 61440 NT_STATUS_OK
ReadX 10309 1503232 4096 4096 NT_STATUS_OK
ReadX 10309 1507328 61440 61440 NT_STATUS_OK
ReadX 10309 1568768 4096 4096 NT_STATUS_OK
ReadX 10309 1572864 61440 61440 NT_STATUS_OK
ReadX 10309 1634304 4096 4096 NT_STATUS_OK
ReadX 10309 1638400 61440 61440 NT_STATUS_OK
ReadX 10309 1699840 4096 4096 NT_STATUS_OK
ReadX 10309 1703936 61440 61440 NT_STATUS_OK
ReadX 10309 1765376 4096 4096 NT_STATUS_OK
ReadX 10309 1769472 61440 61440 NT_STATUS_OK
ReadX 10309 1830912 4096 4096 NT_STATUS_OK
ReadX 10309 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10315 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10316 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10317 NT_STATUS_OK
Close 10317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10318 NT_STATUS_OK
WriteX 10318 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10318 258 NT_STATUS_OK
WriteX 10318 0 491 491 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10316 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10322 NT_STATUS_OK
WriteX 10322 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10322 258 NT_STATUS_OK
WriteX 10322 0 543 543 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10336 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 1004 NT_STATUS_OK
WriteX 10336 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 258 NT_STATUS_OK
WriteX 10336 0 2048 2048 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
Flush 10337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10342 NT_STATUS_OK
WriteX 10342 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10342 258 NT_STATUS_OK
WriteX 10342 0 2048 2048 NT_STATUS_OK
Close 10342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10347 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10348 NT_STATUS_OK
WriteX 10348 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10348 258 NT_STATUS_OK
WriteX 10348 0 2048 2048 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 2048 2048 NT_STATUS_OK
ReadX 10327 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10343 0 4096 4096 NT_STATUS_OK
WriteX 10327 0 8192 8192 NT_STATUS_OK
WriteX 10328 0 4096 4096 NT_STATUS_OK
WriteX 10329 0 4096 4096 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10353 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10373 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1004 NT_STATUS_OK
WriteX 10373 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 258 NT_STATUS_OK
WriteX 10373 0 2048 2048 NT_STATUS_OK
Close 10373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10375 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10381 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1004 NT_STATUS_OK
WriteX 10381 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 258 NT_STATUS_OK
WriteX 10381 0 2048 2048 NT_STATUS_OK
Close 10381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
Flush 10374 NT_STATUS_OK
WriteX 10382 0 4096 4096 NT_STATUS_OK
Flush 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10376 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10384 NT_STATUS_OK
WriteX 10384 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10386 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10387 NT_STATUS_OK
WriteX 10387 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10388 0 4096 4096 NT_STATUS_OK
Close 10385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10362 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10363 NT_STATUS_OK
Close 10356 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10391 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10395 NT_STATUS_OK
WriteX 10395 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 2048 2048 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10408 NT_STATUS_OK
ReadX 10408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10409 NT_STATUS_OK
ReadX 10409 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10410 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10412 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10425 NT_STATUS_OK
ReadX 10425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10432 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 258 NT_STATUS_OK
WriteX 10432 0 2048 2048 NT_STATUS_OK
Close 10432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10435 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10444 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 1004 NT_STATUS_OK
WriteX 10444 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 2048 2048 NT_STATUS_OK
Close 10444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10447 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10452 NT_STATUS_OK
QUERY_FILE_INFORMATION 10452 1004 NT_STATUS_OK
WriteX 10452 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10452 258 NT_STATUS_OK
WriteX 10452 0 2048 2048 NT_STATUS_OK
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10433 0 4096 4096 NT_STATUS_OK
Flush 10433 NT_STATUS_OK
WriteX 10445 0 4096 4096 NT_STATUS_OK
Flush 10445 NT_STATUS_OK
WriteX 10453 0 4096 4096 NT_STATUS_OK
Flush 10453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10445 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10435 4096 16384 16384 NT_STATUS_OK
ReadX 10415 4096 16384 16384 NT_STATUS_OK
ReadX 10447 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 2048 2048 NT_STATUS_OK
WriteX 10455 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10456 NT_STATUS_OK
QUERY_FILE_INFORMATION 10456 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Close 10447 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10425 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10458 NT_STATUS_OK
QUERY_FILE_INFORMATION 10458 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10460 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10463 4096 16384 16384 NT_STATUS_OK
WriteX 10463 0 4096 4096 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
WriteX 10465 0 4096 4096 NT_STATUS_OK
WriteX 10466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10477 NT_STATUS_OK
ReadX 10477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 8192 8192 NT_STATUS_OK
ReadX 10469 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10483 0 4096 4096 NT_STATUS_OK
ReadX 10483 4096 4096 4096 NT_STATUS_OK
ReadX 10483 8192 4096 4096 NT_STATUS_OK
WriteX 10469 0 4096 4096 NT_STATUS_OK
WriteX 10470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
ReadX 10484 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10463 0 4096 4096 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
WriteX 10465 0 4096 4096 NT_STATUS_OK
WriteX 10466 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10489 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 1004 NT_STATUS_OK
WriteX 10489 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 258 NT_STATUS_OK
WriteX 10489 0 2048 2048 NT_STATUS_OK
Close 10489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
ReadX 10492 4096 4096 4096 NT_STATUS_OK
WriteX 10492 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
ReadX 10494 4096 4096 4096 NT_STATUS_OK
WriteX 10494 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Close 10465 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Close 10477 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10497 0 4096 4096 NT_STATUS_OK
ReadX 10497 4096 4096 4096 NT_STATUS_OK
ReadX 10497 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10500 NT_STATUS_OK
ReadX 10500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10501 NT_STATUS_OK
ReadX 10501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10502 NT_STATUS_OK
ReadX 10502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
ReadX 10498 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10515 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 1004 NT_STATUS_OK
WriteX 10515 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 258 NT_STATUS_OK
WriteX 10515 0 2048 2048 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10521 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 1004 NT_STATUS_OK
WriteX 10521 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 258 NT_STATUS_OK
WriteX 10521 0 2048 2048 NT_STATUS_OK
Close 10521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10522 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10505 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10523 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10504 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Close 10502 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Close 10500 NT_STATUS_OK
Close 10501 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Close 10507 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10525 NT_STATUS_OK
QUERY_FILE_INFORMATION 10525 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 61440 4096 4096 NT_STATUS_OK
ReadX 10527 126976 4096 4096 NT_STATUS_OK
WriteX 10527 0 65536 65536 NT_STATUS_OK
WriteX 10527 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 61440 4096 4096 NT_STATUS_OK
ReadX 10528 126976 4096 4096 NT_STATUS_OK
ReadX 10528 192512 4096 4096 NT_STATUS_OK
ReadX 10528 258048 4096 4096 NT_STATUS_OK
WriteX 10528 0 65536 65536 NT_STATUS_OK
WriteX 10528 65536 65536 65536 NT_STATUS_OK
WriteX 10528 131072 65536 65536 NT_STATUS_OK
WriteX 10528 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 61440 4096 4096 NT_STATUS_OK
ReadX 10529 126976 4096 4096 NT_STATUS_OK
ReadX 10529 192512 4096 4096 NT_STATUS_OK
ReadX 10529 258048 4096 4096 NT_STATUS_OK
ReadX 10529 323584 4096 4096 NT_STATUS_OK
ReadX 10529 389120 4096 4096 NT_STATUS_OK
ReadX 10529 454656 4096 4096 NT_STATUS_OK
ReadX 10529 520192 4096 4096 NT_STATUS_OK
WriteX 10529 0 65536 65536 NT_STATUS_OK
WriteX 10529 65536 65536 65536 NT_STATUS_OK
WriteX 10529 131072 65536 65536 NT_STATUS_OK
WriteX 10529 196608 65536 65536 NT_STATUS_OK
WriteX 10529 262144 65536 65536 NT_STATUS_OK
WriteX 10529 327680 65536 65536 NT_STATUS_OK
WriteX 10529 393216 65536 65536 NT_STATUS_OK
WriteX 10529 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10530 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10530 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10530 8192 4096 4096 NT_STATUS_OK
ReadX 10530 12288 4096 4096 NT_STATUS_OK
ReadX 10530 16384 4096 4096 NT_STATUS_OK
ReadX 10530 20480 4096 4096 NT_STATUS_OK
ReadX 10530 24576 4096 4096 NT_STATUS_OK
ReadX 10530 28672 4096 4096 NT_STATUS_OK
ReadX 10530 32768 4096 4096 NT_STATUS_OK
ReadX 10530 36864 4096 4096 NT_STATUS_OK
ReadX 10530 40960 4096 4096 NT_STATUS_OK
ReadX 10530 45056 4096 4096 NT_STATUS_OK
ReadX 10530 49152 4096 4096 NT_STATUS_OK
ReadX 10530 53248 4096 4096 NT_STATUS_OK
ReadX 10530 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10530 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10533 NT_STATUS_OK
WriteX 10533 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10533 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10533 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10533 1004 NT_STATUS_OK
WriteX 10533 0 57088 57088 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Flush 10533 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10534 NT_STATUS_OK
SET_FILE_INFORMATION 10534 1004 NT_STATUS_OK
Close 10534 NT_STATUS_OK
SET_FILE_INFORMATION 10533 1004 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10537 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10538 NT_STATUS_OK
WriteX 10538 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10538 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 51456 51456 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Flush 10538 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10540 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10542 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10544 NT_STATUS_OK
Close 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10547 NT_STATUS_OK
WriteX 10547 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10547 258 NT_STATUS_OK
WriteX 10547 0 53077 53077 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10548 NT_STATUS_OK
WriteX 10548 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10548 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 65536 65536 NT_STATUS_OK
WriteX 10548 65536 1856 1856 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10557 NT_STATUS_OK
WriteX 10557 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
WriteX 10557 0 7983 7983 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10562 NT_STATUS_OK
WriteX 10562 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 258 NT_STATUS_OK
WriteX 10562 0 65536 65536 NT_STATUS_OK
WriteX 10562 65536 65536 65536 NT_STATUS_OK
WriteX 10562 131072 65536 65536 NT_STATUS_OK
WriteX 10562 196608 65536 65536 NT_STATUS_OK
WriteX 10562 262144 65536 65536 NT_STATUS_OK
WriteX 10562 327680 65536 65536 NT_STATUS_OK
WriteX 10562 393216 65536 65536 NT_STATUS_OK
WriteX 10562 458752 46731 46731 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10563 NT_STATUS_OK
WriteX 10563 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10552 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 22848 22848 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Flush 10563 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10565 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10567 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10568 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10568 1004 NT_STATUS_OK
ReadX 10568 8192 4096 4096 NT_STATUS_OK
ReadX 10568 12288 4096 4096 NT_STATUS_OK
ReadX 10568 16384 4096 4096 NT_STATUS_OK
ReadX 10568 20480 4096 4096 NT_STATUS_OK
ReadX 10568 24576 4096 4096 NT_STATUS_OK
ReadX 10568 28672 4096 4096 NT_STATUS_OK
ReadX 10568 32768 4096 4096 NT_STATUS_OK
ReadX 10568 36864 4096 4096 NT_STATUS_OK
ReadX 10568 40960 4096 4096 NT_STATUS_OK
ReadX 10568 45056 4096 4096 NT_STATUS_OK
ReadX 10568 49152 4096 4096 NT_STATUS_OK
ReadX 10568 53248 4096 4096 NT_STATUS_OK
ReadX 10568 57344 4096 4096 NT_STATUS_OK
ReadX 10568 61440 4096 4096 NT_STATUS_OK
ReadX 10568 65536 4096 4096 NT_STATUS_OK
ReadX 10568 69632 4096 4096 NT_STATUS_OK
ReadX 10568 73728 4096 4096 NT_STATUS_OK
ReadX 10568 77824 4096 4096 NT_STATUS_OK
ReadX 10568 81920 4096 4096 NT_STATUS_OK
ReadX 10568 86016 4096 4096 NT_STATUS_OK
ReadX 10568 90112 4096 4096 NT_STATUS_OK
ReadX 10568 94208 4096 4096 NT_STATUS_OK
ReadX 10568 98304 4096 4096 NT_STATUS_OK
ReadX 10568 102400 4096 4096 NT_STATUS_OK
ReadX 10568 106496 4096 4096 NT_STATUS_OK
ReadX 10568 110592 4096 4096 NT_STATUS_OK
ReadX 10568 114688 4096 4096 NT_STATUS_OK
ReadX 10568 118784 4096 4096 NT_STATUS_OK
ReadX 10568 122880 4096 4096 NT_STATUS_OK
ReadX 10568 126976 4096 4096 NT_STATUS_OK
ReadX 10568 131072 4096 4096 NT_STATUS_OK
ReadX 10568 135168 4096 4096 NT_STATUS_OK
ReadX 10568 139264 4096 4096 NT_STATUS_OK
ReadX 10568 143360 4096 4096 NT_STATUS_OK
ReadX 10568 147456 4096 4096 NT_STATUS_OK
ReadX 10568 151552 4096 4096 NT_STATUS_OK
ReadX 10568 155648 4096 4096 NT_STATUS_OK
ReadX 10568 159744 4096 4096 NT_STATUS_OK
ReadX 10568 163840 4096 4096 NT_STATUS_OK
ReadX 10568 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10568 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10571 NT_STATUS_OK
WriteX 10571 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10571 258 NT_STATUS_OK
Close 10568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10572 NT_STATUS_OK
SET_FILE_INFORMATION 10572 1004 NT_STATUS_OK
Close 10572 NT_STATUS_OK
WriteX 10571 0 42388 42388 NT_STATUS_OK
Close 10571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 4096 4096 NT_STATUS_OK
ReadX 10575 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10576 NT_STATUS_OK
WriteX 10576 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10576 258 NT_STATUS_OK
SET_FILE_INFORMATION 10576 1004 NT_STATUS_OK
WriteX 10576 0 42652 42652 NT_STATUS_OK
Close 10576 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
ReadX 10580 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10585 NT_STATUS_OK
WriteX 10585 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10585 258 NT_STATUS_OK
WriteX 10585 0 65536 65536 NT_STATUS_OK
WriteX 10585 65536 49 49 NT_STATUS_OK
Close 10585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 61440 61440 NT_STATUS_OK
ReadX 10586 61440 4096 4096 NT_STATUS_OK
ReadX 10586 65536 61440 61440 NT_STATUS_OK
ReadX 10586 126976 4096 4096 NT_STATUS_OK
ReadX 10586 131072 61440 61440 NT_STATUS_OK
ReadX 10586 192512 4096 4096 NT_STATUS_OK
ReadX 10586 196608 61440 61440 NT_STATUS_OK
ReadX 10586 258048 4096 4096 NT_STATUS_OK
ReadX 10586 262144 61440 61440 NT_STATUS_OK
ReadX 10586 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 61440 61440 NT_STATUS_OK
ReadX 10587 61440 4096 4096 NT_STATUS_OK
ReadX 10587 65536 61440 61440 NT_STATUS_OK
ReadX 10587 126976 4096 4096 NT_STATUS_OK
ReadX 10587 131072 61440 61440 NT_STATUS_OK
ReadX 10587 192512 4096 4096 NT_STATUS_OK
ReadX 10587 196608 61440 61440 NT_STATUS_OK
ReadX 10587 258048 4096 4096 NT_STATUS_OK
ReadX 10587 262144 61440 61440 NT_STATUS_OK
ReadX 10587 323584 4096 4096 NT_STATUS_OK
ReadX 10587 327680 61440 61440 NT_STATUS_OK
ReadX 10587 389120 4096 4096 NT_STATUS_OK
ReadX 10587 393216 61440 61440 NT_STATUS_OK
ReadX 10587 454656 4096 4096 NT_STATUS_OK
ReadX 10587 458752 61440 61440 NT_STATUS_OK
ReadX 10587 520192 4096 4096 NT_STATUS_OK
ReadX 10587 524288 61440 61440 NT_STATUS_OK
ReadX 10587 585728 4096 4096 NT_STATUS_OK
ReadX 10587 589824 61440 61440 NT_STATUS_OK
ReadX 10587 651264 4096 4096 NT_STATUS_OK
ReadX 10587 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 61440 61440 NT_STATUS_OK
ReadX 10588 61440 4096 4096 NT_STATUS_OK
ReadX 10588 65536 61440 61440 NT_STATUS_OK
ReadX 10588 126976 4096 4096 NT_STATUS_OK
ReadX 10588 131072 61440 61440 NT_STATUS_OK
ReadX 10588 192512 4096 4096 NT_STATUS_OK
ReadX 10588 196608 61440 61440 NT_STATUS_OK
ReadX 10588 258048 4096 4096 NT_STATUS_OK
ReadX 10588 262144 61440 61440 NT_STATUS_OK
ReadX 10588 323584 4096 4096 NT_STATUS_OK
ReadX 10588 327680 61440 61440 NT_STATUS_OK
ReadX 10588 389120 4096 4096 NT_STATUS_OK
ReadX 10588 393216 61440 61440 NT_STATUS_OK
ReadX 10588 454656 4096 4096 NT_STATUS_OK
ReadX 10588 458752 61440 61440 NT_STATUS_OK
ReadX 10588 520192 4096 4096 NT_STATUS_OK
ReadX 10588 524288 61440 61440 NT_STATUS_OK
ReadX 10588 585728 4096 4096 NT_STATUS_OK
ReadX 10588 589824 61440 61440 NT_STATUS_OK
ReadX 10588 651264 4096 4096 NT_STATUS_OK
ReadX 10588 655360 61440 61440 NT_STATUS_OK
ReadX 10588 716800 4096 4096 NT_STATUS_OK
ReadX 10588 720896 61440 61440 NT_STATUS_OK
ReadX 10588 782336 4096 4096 NT_STATUS_OK
ReadX 10588 786432 61440 61440 NT_STATUS_OK
ReadX 10588 847872 4096 4096 NT_STATUS_OK
ReadX 10588 851968 61440 61440 NT_STATUS_OK
ReadX 10588 913408 4096 4096 NT_STATUS_OK
ReadX 10588 917504 61440 61440 NT_STATUS_OK
ReadX 10588 978944 4096 4096 NT_STATUS_OK
ReadX 10588 983040 61440 61440 NT_STATUS_OK
ReadX 10588 1044480 4096 4096 NT_STATUS_OK
ReadX 10588 1048576 61440 61440 NT_STATUS_OK
ReadX 10588 1110016 4096 4096 NT_STATUS_OK
ReadX 10588 1114112 61440 61440 NT_STATUS_OK
ReadX 10588 1175552 4096 4096 NT_STATUS_OK
ReadX 10588 1179648 61440 61440 NT_STATUS_OK
ReadX 10588 1241088 4096 4096 NT_STATUS_OK
ReadX 10588 1245184 61440 61440 NT_STATUS_OK
ReadX 10588 1306624 4096 4096 NT_STATUS_OK
ReadX 10588 1310720 61440 61440 NT_STATUS_OK
ReadX 10588 1372160 4096 4096 NT_STATUS_OK
ReadX 10588 1376256 61440 61440 NT_STATUS_OK
ReadX 10588 1437696 4096 4096 NT_STATUS_OK
ReadX 10588 1441792 61440 61440 NT_STATUS_OK
ReadX 10588 1503232 4096 4096 NT_STATUS_OK
ReadX 10588 1507328 61440 61440 NT_STATUS_OK
ReadX 10588 1568768 4096 4096 NT_STATUS_OK
ReadX 10588 1572864 61440 61440 NT_STATUS_OK
ReadX 10588 1634304 4096 4096 NT_STATUS_OK
ReadX 10588 1638400 61440 61440 NT_STATUS_OK
ReadX 10588 1699840 4096 4096 NT_STATUS_OK
ReadX 10588 1703936 61440 61440 NT_STATUS_OK
ReadX 10588 1765376 4096 4096 NT_STATUS_OK
ReadX 10588 1769472 61440 61440 NT_STATUS_OK
ReadX 10588 1830912 4096 4096 NT_STATUS_OK
ReadX 10588 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10590 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 1005 NT_STATUS_OK
ReadX 10590 2156 24 24 NT_STATUS_OK
ReadX 10590 2139 276 276 NT_STATUS_OK
ReadX 10590 2136 14 14 NT_STATUS_OK
ReadX 10590 2136 7 7 NT_STATUS_OK
ReadX 10590 2138 12 12 NT_STATUS_OK
ReadX 10590 2137 8 8 NT_STATUS_OK
ReadX 10590 2135 15 15 NT_STATUS_OK
ReadX 10590 0 16 16 NT_STATUS_OK
ReadX 10590 16 2048 2048 NT_STATUS_OK
ReadX 10590 2064 2048 2048 NT_STATUS_OK
ReadX 10590 257 2048 2048 NT_STATUS_OK
ReadX 10590 385 2048 2048 NT_STATUS_OK
ReadX 10590 513 2048 2048 NT_STATUS_OK
ReadX 10590 641 2048 2048 NT_STATUS_OK
ReadX 10590 769 2048 2048 NT_STATUS_OK
ReadX 10590 897 2048 2048 NT_STATUS_OK
ReadX 10590 1025 2048 2048 NT_STATUS_OK
ReadX 10590 1153 2048 2048 NT_STATUS_OK
ReadX 10590 1281 2048 2048 NT_STATUS_OK
ReadX 10590 1409 2048 2048 NT_STATUS_OK
ReadX 10590 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10595 NT_STATUS_OK
WriteX 10595 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10595 258 NT_STATUS_OK
WriteX 10595 0 10575 10575 NT_STATUS_OK
Flush 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10600 NT_STATUS_OK
LockX 10600 2147483538 1 NT_STATUS_OK
UnlockX 10600 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1005 NT_STATUS_OK
ReadX 10600 0 512 512 NT_STATUS_OK
ReadX 10600 512 512 512 NT_STATUS_OK
ReadX 10600 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1004 NT_STATUS_OK
Close 10600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10601 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 1005 NT_STATUS_OK
ReadX 10601 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10602 NT_STATUS_OK
LockX 10602 2147483538 1 NT_STATUS_OK
UnlockX 10602 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10602 1005 NT_STATUS_OK
ReadX 10602 0 512 512 NT_STATUS_OK
ReadX 10602 512 512 512 NT_STATUS_OK
ReadX 10602 1024 512 512 NT_STATUS_OK
ReadX 10602 288 20 20 NT_STATUS_OK
ReadX 10602 308 2084 2084 NT_STATUS_OK
ReadX 10602 388 2084 2084 NT_STATUS_OK
ReadX 10602 388 2084 2084 NT_STATUS_OK
ReadX 10589 2157 1386 1386 NT_STATUS_OK
ReadX 10602 2472 399 399 NT_STATUS_OK
ReadX 10602 3072 1536 1536 NT_STATUS_OK
ReadX 10602 544 149 149 NT_STATUS_OK
ReadX 10602 693 485 485 NT_STATUS_OK
Close 10602 NT_STATUS_OK
ReadX 10589 2157 4096 4096 NT_STATUS_OK
ReadX 10589 6253 4096 4096 NT_STATUS_OK
ReadX 10589 10349 4096 4096 NT_STATUS_OK
ReadX 10589 14445 4096 4096 NT_STATUS_OK
ReadX 10589 18541 4096 4096 NT_STATUS_OK
ReadX 10589 22637 256 256 NT_STATUS_OK
ReadX 10589 22893 4096 4096 NT_STATUS_OK
ReadX 10589 26989 4096 4096 NT_STATUS_OK
ReadX 10589 31085 4096 4096 NT_STATUS_OK
ReadX 10589 35181 4096 4096 NT_STATUS_OK
ReadX 10589 39277 4096 4096 NT_STATUS_OK
ReadX 10589 43373 4096 4096 NT_STATUS_OK
ReadX 10589 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10589 2157 1024 1024 NT_STATUS_OK
ReadX 10589 1667 4688 4688 NT_STATUS_OK
ReadX 10589 6355 3516 3516 NT_STATUS_OK
ReadX 10589 9871 16384 16384 NT_STATUS_OK
ReadX 10589 26255 3771 3771 NT_STATUS_OK
ReadX 10589 30026 2048 2048 NT_STATUS_OK
ReadX 10589 32074 1024 1024 NT_STATUS_OK
ReadX 10589 33098 6652 6652 NT_STATUS_OK
ReadX 10589 39750 16384 16384 NT_STATUS_OK
ReadX 10589 56134 10496 10496 NT_STATUS_OK
ReadX 10589 66630 1784 1784 NT_STATUS_OK
ReadX 10589 68414 90 90 NT_STATUS_OK
ReadX 10589 68504 273 273 NT_STATUS_OK
ReadX 10589 68777 1600 1600 NT_STATUS_OK
ReadX 10589 70377 640 640 NT_STATUS_OK
ReadX 10589 71017 1280 1280 NT_STATUS_OK
ReadX 10589 72297 8464 8464 NT_STATUS_OK
ReadX 10589 80761 158 158 NT_STATUS_OK
ReadX 10589 80919 912 912 NT_STATUS_OK
ReadX 10589 81831 1980 1980 NT_STATUS_OK
ReadX 10589 83811 2256 2256 NT_STATUS_OK
ReadX 10589 86067 400 400 NT_STATUS_OK
ReadX 10589 86467 252 252 NT_STATUS_OK
ReadX 10589 86719 42 42 NT_STATUS_OK
ReadX 10589 86761 725 725 NT_STATUS_OK
ReadX 10589 2009 512 512 NT_STATUS_OK
ReadX 10589 3895 9 9 NT_STATUS_OK
ReadX 10589 3781 46 46 NT_STATUS_OK
ReadX 10589 4059 92 92 NT_STATUS_OK
ReadX 10589 3781 92 92 NT_STATUS_OK
ReadX 10589 3986 184 184 NT_STATUS_OK
ReadX 10589 3987 16384 16384 NT_STATUS_OK
ReadX 10589 3902 16384 16384 NT_STATUS_OK
ReadX 10589 3781 10240 10240 NT_STATUS_OK
ReadX 10589 3821 16384 16384 NT_STATUS_OK
ReadX 10589 3891 935 935 NT_STATUS_OK
ReadX 10589 4060 10240 10240 NT_STATUS_OK
ReadX 10589 4059 184 184 NT_STATUS_OK
ReadX 10589 256 184 184 NT_STATUS_OK
ReadX 10589 256 1026 1026 NT_STATUS_OK
ReadX 10589 3901 326 326 NT_STATUS_OK
ReadX 10589 3899 652 652 NT_STATUS_OK
ReadX 10589 256 2 2 NT_STATUS_OK
ReadX 10589 258 4948 4948 NT_STATUS_OK
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10604 NT_STATUS_OK
Close 10604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10607 NT_STATUS_OK
WriteX 10607 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10607 258 NT_STATUS_OK
WriteX 10607 0 65536 65536 NT_STATUS_OK
WriteX 10607 65536 65536 65536 NT_STATUS_OK
WriteX 10607 131072 65536 65536 NT_STATUS_OK
WriteX 10607 196608 65536 65536 NT_STATUS_OK
WriteX 10607 262144 65536 65536 NT_STATUS_OK
WriteX 10607 327680 65536 65536 NT_STATUS_OK
WriteX 10607 393216 65536 65536 NT_STATUS_OK
WriteX 10607 458752 65536 65536 NT_STATUS_OK
WriteX 10607 524288 65536 65536 NT_STATUS_OK
WriteX 10607 589824 35257 35257 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10612 NT_STATUS_OK
WriteX 10612 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10612 258 NT_STATUS_OK
WriteX 10612 0 65536 65536 NT_STATUS_OK
WriteX 10612 65536 65536 65536 NT_STATUS_OK
WriteX 10612 131072 65536 65536 NT_STATUS_OK
WriteX 10612 196608 65536 65536 NT_STATUS_OK
WriteX 10612 262144 65536 65536 NT_STATUS_OK
WriteX 10612 327680 65536 65536 NT_STATUS_OK
WriteX 10612 393216 65536 65536 NT_STATUS_OK
WriteX 10612 458752 65536 65536 NT_STATUS_OK
WriteX 10612 524288 65536 65536 NT_STATUS_OK
WriteX 10612 589824 57598 57598 NT_STATUS_OK
Close 10612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 12543 12543 NT_STATUS_OK
Flush 10614 NT_STATUS_OK
Close 10614 NT_STATUS_OK
Close 10598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10620 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1005 NT_STATUS_OK
ReadX 10620 1938 24 24 NT_STATUS_OK
ReadX 10620 1920 276 276 NT_STATUS_OK
ReadX 10620 1918 14 14 NT_STATUS_OK
ReadX 10620 1918 7 7 NT_STATUS_OK
ReadX 10620 1919 12 12 NT_STATUS_OK
ReadX 10620 1919 8 8 NT_STATUS_OK
ReadX 10620 1917 15 15 NT_STATUS_OK
ReadX 10620 0 16 16 NT_STATUS_OK
ReadX 10620 16 2048 2048 NT_STATUS_OK
ReadX 10620 2064 2048 2048 NT_STATUS_OK
ReadX 10620 257 2048 2048 NT_STATUS_OK
ReadX 10620 385 2048 2048 NT_STATUS_OK
ReadX 10620 513 2048 2048 NT_STATUS_OK
ReadX 10620 641 2048 2048 NT_STATUS_OK
ReadX 10620 769 2048 2048 NT_STATUS_OK
ReadX 10620 897 2048 2048 NT_STATUS_OK
ReadX 10620 1025 2048 2048 NT_STATUS_OK
ReadX 10620 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10625 NT_STATUS_OK
WriteX 10625 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10625 258 NT_STATUS_OK
WriteX 10625 0 11588 11588 NT_STATUS_OK
Flush 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10630 NT_STATUS_OK
WriteX 10630 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10630 258 NT_STATUS_OK
WriteX 10630 0 11615 11615 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10636 NT_STATUS_OK
Close 10636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10639 NT_STATUS_OK
WriteX 10639 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10639 258 NT_STATUS_OK
WriteX 10639 0 65536 65536 NT_STATUS_OK
WriteX 10639 65536 16050 16050 NT_STATUS_OK
Close 10639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10619 1939 64 64 NT_STATUS_OK
ReadX 10619 128 248 248 NT_STATUS_OK
ReadX 10619 128 568 568 NT_STATUS_OK
ReadX 10619 3872 1536 1536 NT_STATUS_OK
ReadX 10619 3456 2560 2560 NT_STATUS_OK
ReadX 10619 3136 512 512 NT_STATUS_OK
ReadX 10619 2880 4096 4096 NT_STATUS_OK
ReadX 10619 3264 3072 3072 NT_STATUS_OK
ReadX 10619 320 4096 4096 NT_STATUS_OK
ReadX 10619 1024 4096 4096 NT_STATUS_OK
ReadX 10619 3616 4096 4096 NT_STATUS_OK
ReadX 10619 1939 64 64 NT_STATUS_OK
ReadX 10619 128 248 248 NT_STATUS_OK
ReadX 10619 128 608 608 NT_STATUS_OK
ReadX 10619 2858 1024 1024 NT_STATUS_OK
ReadX 10619 2810 4096 4096 NT_STATUS_OK
ReadX 10619 2826 4096 4096 NT_STATUS_OK
ReadX 10619 2580 2048 2048 NT_STATUS_OK
ReadX 10619 2800 2560 2560 NT_STATUS_OK
ReadX 10619 2100 4096 4096 NT_STATUS_OK
ReadX 10619 2084 4096 4096 NT_STATUS_OK
ReadX 10619 868 4096 4096 NT_STATUS_OK
ReadX 10619 2324 4096 4096 NT_STATUS_OK
ReadX 10619 884 4096 4096 NT_STATUS_OK
ReadX 10619 2604 1024 1024 NT_STATUS_OK
ReadX 10619 580 4096 4096 NT_STATUS_OK
ReadX 10619 596 4096 4096 NT_STATUS_OK
ReadX 10619 2752 4096 4096 NT_STATUS_OK
ReadX 10619 2842 1024 1024 NT_STATUS_OK
ReadX 10619 660 4096 4096 NT_STATUS_OK
ReadX 10619 2720 4096 4096 NT_STATUS_OK
ReadX 10619 2736 4096 4096 NT_STATUS_OK
ReadX 10619 628 4096 4096 NT_STATUS_OK
ReadX 10619 2704 4096 4096 NT_STATUS_OK
ReadX 10619 1556 4096 4096 NT_STATUS_OK
ReadX 10619 576 4096 4096 NT_STATUS_OK
ReadX 10619 3168 1536 1536 NT_STATUS_OK
ReadX 10619 832 4096 4096 NT_STATUS_OK
ReadX 10619 1088 4096 4096 NT_STATUS_OK
ReadX 10619 1344 4096 4096 NT_STATUS_OK
ReadX 10619 1600 4096 4096 NT_STATUS_OK
ReadX 10619 1856 4096 4096 NT_STATUS_OK
ReadX 10619 2112 4096 4096 NT_STATUS_OK
ReadX 10619 1892 4096 4096 NT_STATUS_OK
ReadX 10619 820 4096 4096 NT_STATUS_OK
ReadX 10619 788 4096 4096 NT_STATUS_OK
ReadX 10619 1604 4096 4096 NT_STATUS_OK
ReadX 10619 3648 4096 4096 NT_STATUS_OK
ReadX 10619 2608 4096 4096 NT_STATUS_OK
ReadX 10619 548 4096 4096 NT_STATUS_OK
ReadX 10619 740 4096 4096 NT_STATUS_OK
ReadX 10619 1344 4096 4096 NT_STATUS_OK
ReadX 10619 3392 4096 4096 NT_STATUS_OK
ReadX 10619 3904 4096 4096 NT_STATUS_OK
ReadX 10619 644 4096 4096 NT_STATUS_OK
ReadX 10619 676 4096 4096 NT_STATUS_OK
ReadX 10619 2688 4096 4096 NT_STATUS_OK
ReadX 10619 320 4096 4096 NT_STATUS_OK
ReadX 10619 900 4096 4096 NT_STATUS_OK
ReadX 10619 1908 4096 4096 NT_STATUS_OK
ReadX 10619 852 4096 4096 NT_STATUS_OK
ReadX 10619 724 4096 4096 NT_STATUS_OK
ReadX 10619 2292 4096 4096 NT_STATUS_OK
ReadX 10619 612 4096 4096 NT_STATUS_OK
ReadX 10619 388 4096 4096 NT_STATUS_OK
ReadX 10619 2368 4096 4096 NT_STATUS_OK
ReadX 10619 2624 4096 4096 NT_STATUS_OK
ReadX 10619 500 4096 4096 NT_STATUS_OK
ReadX 10619 356 4096 4096 NT_STATUS_OK
ReadX 10619 1024 4096 4096 NT_STATUS_OK
ReadX 10619 576 4096 4096 NT_STATUS_OK
ReadX 10619 340 4096 4096 NT_STATUS_OK
ReadX 10619 420 4096 4096 NT_STATUS_OK
ReadX 10619 1600 4096 4096 NT_STATUS_OK
ReadX 10619 404 4096 4096 NT_STATUS_OK
ReadX 10619 1428 4096 4096 NT_STATUS_OK
ReadX 10619 2656 4096 4096 NT_STATUS_OK
ReadX 10619 2624 4096 4096 NT_STATUS_OK
ReadX 10619 452 4096 4096 NT_STATUS_OK
ReadX 10619 692 4096 4096 NT_STATUS_OK
ReadX 10619 564 4096 4096 NT_STATUS_OK
ReadX 10619 372 4096 4096 NT_STATUS_OK
ReadX 10619 468 4096 4096 NT_STATUS_OK
ReadX 10619 484 4096 4096 NT_STATUS_OK
ReadX 10619 1088 4096 4096 NT_STATUS_OK
ReadX 10619 1924 4096 4096 NT_STATUS_OK
ReadX 10619 2768 4096 4096 NT_STATUS_OK
ReadX 10619 832 4096 4096 NT_STATUS_OK
ReadX 10619 836 4096 4096 NT_STATUS_OK
ReadX 10619 1856 4096 4096 NT_STATUS_OK
ReadX 10619 2640 4096 4096 NT_STATUS_OK
ReadX 10619 436 4096 4096 NT_STATUS_OK
ReadX 10619 1828 4096 4096 NT_STATUS_OK
ReadX 10619 804 4096 4096 NT_STATUS_OK
ReadX 10619 1860 4096 4096 NT_STATUS_OK
ReadX 10619 1812 4096 4096 NT_STATUS_OK
ReadX 10619 756 4096 4096 NT_STATUS_OK
ReadX 10619 1636 4096 4096 NT_STATUS_OK
ReadX 10619 772 4096 4096 NT_STATUS_OK
ReadX 10619 2036 4096 4096 NT_STATUS_OK
ReadX 10619 1220 4096 4096 NT_STATUS_OK
ReadX 10619 1652 4096 4096 NT_STATUS_OK
ReadX 10619 2588 4096 4096 NT_STATUS_OK
ReadX 10619 916 4096 4096 NT_STATUS_OK
ReadX 10619 260 4096 4096 NT_STATUS_OK
ReadX 10619 932 4096 4096 NT_STATUS_OK
ReadX 10619 2624 4096 4096 NT_STATUS_OK
ReadX 10619 308 4096 4096 NT_STATUS_OK
ReadX 10619 292 4096 4096 NT_STATUS_OK
ReadX 10619 1140 4096 4096 NT_STATUS_OK
ReadX 10619 276 4096 4096 NT_STATUS_OK
ReadX 10619 2020 4096 4096 NT_STATUS_OK
ReadX 10619 2880 4096 4096 NT_STATUS_OK
ReadX 10619 516 4096 4096 NT_STATUS_OK
ReadX 10619 1844 4096 4096 NT_STATUS_OK
ReadX 10619 1124 4096 4096 NT_STATUS_OK
ReadX 10619 3136 4096 4096 NT_STATUS_OK
ReadX 10619 324 4096 4096 NT_STATUS_OK
ReadX 10619 1156 4096 4096 NT_STATUS_OK
ReadX 10619 1172 4096 4096 NT_STATUS_OK
ReadX 10619 2112 4096 4096 NT_STATUS_OK
ReadX 10619 2368 4096 4096 NT_STATUS_OK
ReadX 10619 964 4096 4096 NT_STATUS_OK
ReadX 10619 980 4096 4096 NT_STATUS_OK
ReadX 10619 1012 4096 4096 NT_STATUS_OK
ReadX 10619 532 4096 4096 NT_STATUS_OK
ReadX 10619 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10619 1620 4096 4096 NT_STATUS_OK
ReadX 10619 1604 4096 4096 NT_STATUS_OK
ReadX 10619 2116 4096 4096 NT_STATUS_OK
ReadX 10619 2132 4096 4096 NT_STATUS_OK
ReadX 10619 2148 4096 4096 NT_STATUS_OK
ReadX 10619 2276 4096 4096 NT_STATUS_OK
ReadX 10619 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10644 NT_STATUS_OK
QUERY_FILE_INFORMATION 10599 1004 NT_STATUS_OK
Close 10599 NT_STATUS_OK
WriteX 10644 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 1004 NT_STATUS_OK
Close 10601 NT_STATUS_OK
WriteX 10644 0 65536 65536 NT_STATUS_OK
WriteX 10644 65536 64850 64850 NT_STATUS_OK
Close 10644 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10646 NT_STATUS_OK
WriteX 10646 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10646 258 NT_STATUS_OK
ReadX 10619 2068 4096 4096 NT_STATUS_OK
ReadX 10619 1588 4096 4096 NT_STATUS_OK
ReadX 10619 1572 4096 4096 NT_STATUS_OK
WriteX 10646 0 18630 18630 NT_STATUS_OK
Flush 10646 NT_STATUS_OK
Close 10646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10648 NT_STATUS_OK
Close 10648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10619 612 4096 4096 NT_STATUS_OK
ReadX 10619 564 4096 4096 NT_STATUS_OK
ReadX 10619 1876 4096 4096 NT_STATUS_OK
ReadX 10619 628 4096 4096 NT_STATUS_OK
ReadX 10619 740 4096 4096 NT_STATUS_OK
ReadX 10619 724 4096 4096 NT_STATUS_OK
ReadX 10619 644 4096 4096 NT_STATUS_OK
ReadX 10619 2324 4096 4096 NT_STATUS_OK
ReadX 10619 660 4096 4096 NT_STATUS_OK
ReadX 10619 852 4096 4096 NT_STATUS_OK
ReadX 10619 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10619 2368 4096 4096 NT_STATUS_OK
ReadX 10619 1024 4096 4096 NT_STATUS_OK
ReadX 10619 320 4096 4096 NT_STATUS_OK
ReadX 10619 580 4096 4096 NT_STATUS_OK
ReadX 10619 3136 512 512 NT_STATUS_OK
ReadX 10619 2880 4096 4096 NT_STATUS_OK
Close 10619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 61440 4096 4096 NT_STATUS_OK
ReadX 10651 126976 4096 4096 NT_STATUS_OK
WriteX 10651 0 65536 65536 NT_STATUS_OK
WriteX 10651 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 61440 4096 4096 NT_STATUS_OK
ReadX 10652 126976 4096 4096 NT_STATUS_OK
ReadX 10652 192512 4096 4096 NT_STATUS_OK
ReadX 10652 258048 4096 4096 NT_STATUS_OK
WriteX 10652 0 65536 65536 NT_STATUS_OK
WriteX 10652 65536 65536 65536 NT_STATUS_OK
WriteX 10652 131072 65536 65536 NT_STATUS_OK
WriteX 10652 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 61440 4096 4096 NT_STATUS_OK
ReadX 10653 126976 4096 4096 NT_STATUS_OK
ReadX 10653 192512 4096 4096 NT_STATUS_OK
ReadX 10653 258048 4096 4096 NT_STATUS_OK
ReadX 10653 323584 4096 4096 NT_STATUS_OK
ReadX 10653 389120 4096 4096 NT_STATUS_OK
ReadX 10653 454656 4096 4096 NT_STATUS_OK
ReadX 10653 520192 4096 4096 NT_STATUS_OK
WriteX 10653 0 65536 65536 NT_STATUS_OK
WriteX 10653 65536 65536 65536 NT_STATUS_OK
WriteX 10653 131072 65536 65536 NT_STATUS_OK
WriteX 10653 196608 65536 65536 NT_STATUS_OK
WriteX 10653 262144 65536 65536 NT_STATUS_OK
WriteX 10653 327680 65536 65536 NT_STATUS_OK
WriteX 10653 393216 65536 65536 NT_STATUS_OK
WriteX 10653 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10655 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10656 NT_STATUS_OK
WriteX 10656 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10656 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10654 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10618 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
WriteX 10661 0 62591 62591 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10666 NT_STATUS_OK
WriteX 10666 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10666 258 NT_STATUS_OK
WriteX 10666 0 10845 10845 NT_STATUS_OK
Close 10666 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10668 NT_STATUS_OK
Close 10668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10671 NT_STATUS_OK
WriteX 10671 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
WriteX 10671 0 30118 30118 NT_STATUS_OK
Close 10671 NT_STATUS_OK
WriteX 10654 0 4096 4096 NT_STATUS_OK
WriteX 10656 0 64 64 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10654 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10673 NT_STATUS_OK
ReadX 10673 0 61440 61440 NT_STATUS_OK
ReadX 10673 61440 4096 4096 NT_STATUS_OK
ReadX 10673 65536 61440 61440 NT_STATUS_OK
ReadX 10673 126976 4096 4096 NT_STATUS_OK
ReadX 10673 131072 61440 61440 NT_STATUS_OK
ReadX 10673 192512 4096 4096 NT_STATUS_OK
ReadX 10673 196608 61440 61440 NT_STATUS_OK
ReadX 10673 258048 4096 4096 NT_STATUS_OK
ReadX 10673 262144 61440 61440 NT_STATUS_OK
ReadX 10673 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 61440 61440 NT_STATUS_OK
ReadX 10674 61440 4096 4096 NT_STATUS_OK
ReadX 10674 65536 61440 61440 NT_STATUS_OK
ReadX 10674 126976 4096 4096 NT_STATUS_OK
ReadX 10674 131072 61440 61440 NT_STATUS_OK
ReadX 10674 192512 4096 4096 NT_STATUS_OK
ReadX 10674 196608 61440 61440 NT_STATUS_OK
ReadX 10674 258048 4096 4096 NT_STATUS_OK
ReadX 10674 262144 61440 61440 NT_STATUS_OK
ReadX 10674 323584 4096 4096 NT_STATUS_OK
ReadX 10674 327680 61440 61440 NT_STATUS_OK
ReadX 10674 389120 4096 4096 NT_STATUS_OK
ReadX 10674 393216 61440 61440 NT_STATUS_OK
ReadX 10674 454656 4096 4096 NT_STATUS_OK
ReadX 10674 458752 61440 61440 NT_STATUS_OK
ReadX 10674 520192 4096 4096 NT_STATUS_OK
ReadX 10674 524288 61440 61440 NT_STATUS_OK
ReadX 10674 585728 4096 4096 NT_STATUS_OK
ReadX 10674 589824 61440 61440 NT_STATUS_OK
ReadX 10674 651264 4096 4096 NT_STATUS_OK
ReadX 10674 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 61440 61440 NT_STATUS_OK
ReadX 10675 61440 4096 4096 NT_STATUS_OK
ReadX 10675 65536 61440 61440 NT_STATUS_OK
ReadX 10675 126976 4096 4096 NT_STATUS_OK
ReadX 10675 131072 61440 61440 NT_STATUS_OK
ReadX 10675 192512 4096 4096 NT_STATUS_OK
ReadX 10675 196608 61440 61440 NT_STATUS_OK
ReadX 10675 258048 4096 4096 NT_STATUS_OK
ReadX 10675 262144 61440 61440 NT_STATUS_OK
ReadX 10675 323584 4096 4096 NT_STATUS_OK
ReadX 10675 327680 61440 61440 NT_STATUS_OK
ReadX 10675 389120 4096 4096 NT_STATUS_OK
ReadX 10675 393216 61440 61440 NT_STATUS_OK
ReadX 10675 454656 4096 4096 NT_STATUS_OK
ReadX 10675 458752 61440 61440 NT_STATUS_OK
ReadX 10675 520192 4096 4096 NT_STATUS_OK
ReadX 10675 524288 61440 61440 NT_STATUS_OK
ReadX 10675 585728 4096 4096 NT_STATUS_OK
ReadX 10675 589824 61440 61440 NT_STATUS_OK
ReadX 10675 651264 4096 4096 NT_STATUS_OK
ReadX 10675 655360 61440 61440 NT_STATUS_OK
ReadX 10675 716800 4096 4096 NT_STATUS_OK
ReadX 10675 720896 61440 61440 NT_STATUS_OK
ReadX 10675 782336 4096 4096 NT_STATUS_OK
ReadX 10675 786432 61440 61440 NT_STATUS_OK
ReadX 10675 847872 4096 4096 NT_STATUS_OK
ReadX 10675 851968 61440 61440 NT_STATUS_OK
ReadX 10675 913408 4096 4096 NT_STATUS_OK
ReadX 10675 917504 61440 61440 NT_STATUS_OK
ReadX 10675 978944 4096 4096 NT_STATUS_OK
ReadX 10675 983040 61440 61440 NT_STATUS_OK
ReadX 10675 1044480 4096 4096 NT_STATUS_OK
ReadX 10675 1048576 61440 61440 NT_STATUS_OK
ReadX 10675 1110016 4096 4096 NT_STATUS_OK
ReadX 10675 1114112 61440 61440 NT_STATUS_OK
ReadX 10675 1175552 4096 4096 NT_STATUS_OK
ReadX 10675 1179648 61440 61440 NT_STATUS_OK
ReadX 10675 1241088 4096 4096 NT_STATUS_OK
ReadX 10675 1245184 61440 61440 NT_STATUS_OK
ReadX 10675 1306624 4096 4096 NT_STATUS_OK
ReadX 10675 1310720 61440 61440 NT_STATUS_OK
ReadX 10675 1372160 4096 4096 NT_STATUS_OK
ReadX 10675 1376256 61440 61440 NT_STATUS_OK
ReadX 10675 1437696 4096 4096 NT_STATUS_OK
ReadX 10675 1441792 61440 61440 NT_STATUS_OK
ReadX 10675 1503232 4096 4096 NT_STATUS_OK
ReadX 10675 1507328 61440 61440 NT_STATUS_OK
ReadX 10675 1568768 4096 4096 NT_STATUS_OK
ReadX 10675 1572864 61440 61440 NT_STATUS_OK
ReadX 10675 1634304 4096 4096 NT_STATUS_OK
ReadX 10675 1638400 61440 61440 NT_STATUS_OK
ReadX 10675 1699840 4096 4096 NT_STATUS_OK
ReadX 10675 1703936 61440 61440 NT_STATUS_OK
ReadX 10675 1765376 4096 4096 NT_STATUS_OK
ReadX 10675 1769472 61440 61440 NT_STATUS_OK
ReadX 10675 1830912 4096 4096 NT_STATUS_OK
ReadX 10675 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10676 NT_STATUS_OK
Close 10676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10673 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
ReadX 10680 4096 4096 4096 NT_STATUS_OK
ReadX 10680 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10681 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10683 NT_STATUS_OK
ReadX 10683 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10684 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10683 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 8192 8192 NT_STATUS_OK
ReadX 10688 8192 8192 8192 NT_STATUS_OK
ReadX 10688 16384 8192 8192 NT_STATUS_OK
ReadX 10688 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10693 NT_STATUS_OK
WriteX 10693 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10693 258 NT_STATUS_OK
WriteX 10693 0 10438 10438 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10697 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10699 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
ReadX 10702 4096 4096 4096 NT_STATUS_OK
ReadX 10702 8192 4096 4096 NT_STATUS_OK
ReadX 10702 12288 8192 8192 NT_STATUS_OK
ReadX 10702 20480 8192 8192 NT_STATUS_OK
ReadX 10702 28672 8192 8192 NT_STATUS_OK
ReadX 10702 36864 8192 8192 NT_STATUS_OK
ReadX 10702 45056 8192 8192 NT_STATUS_OK
ReadX 10702 53248 8192 8192 NT_STATUS_OK
ReadX 10702 61440 8192 8192 NT_STATUS_OK
ReadX 10702 69632 8192 8192 NT_STATUS_OK
ReadX 10702 77824 8192 8192 NT_STATUS_OK
ReadX 10702 86016 8192 8192 NT_STATUS_OK
ReadX 10702 94208 8192 8192 NT_STATUS_OK
ReadX 10702 102400 8192 8192 NT_STATUS_OK
ReadX 10702 110592 8192 8192 NT_STATUS_OK
ReadX 10702 118784 8192 8192 NT_STATUS_OK
ReadX 10702 126976 8192 8192 NT_STATUS_OK
ReadX 10702 135168 8192 8192 NT_STATUS_OK
ReadX 10702 143360 8192 8192 NT_STATUS_OK
ReadX 10702 151552 8192 8192 NT_STATUS_OK
ReadX 10702 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10707 NT_STATUS_OK
WriteX 10707 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10707 258 NT_STATUS_OK
WriteX 10707 0 28489 28489 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10710 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10713 NT_STATUS_OK
ReadX 10713 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 8192 8192 NT_STATUS_OK
ReadX 10714 8192 8192 8192 NT_STATUS_OK
ReadX 10714 16384 8192 8192 NT_STATUS_OK
ReadX 10714 24576 8192 8192 NT_STATUS_OK
ReadX 10714 32768 16384 16384 NT_STATUS_OK
ReadX 10714 49152 8192 8192 NT_STATUS_OK
ReadX 10714 57344 8192 8192 NT_STATUS_OK
ReadX 10714 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10714 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10719 NT_STATUS_OK
WriteX 10719 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 258 NT_STATUS_OK
WriteX 10719 0 29253 29253 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10726 NT_STATUS_OK
WriteX 10726 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 258 NT_STATUS_OK
WriteX 10726 0 30183 30183 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10729 NT_STATUS_OK
WriteX 10729 0 510 510 NT_STATUS_OK
WriteX 10729 510 512 512 NT_STATUS_OK
WriteX 10729 1022 510 510 NT_STATUS_OK
WriteX 10729 1532 510 510 NT_STATUS_OK
WriteX 10729 2042 168 168 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10730 NT_STATUS_OK
Close 10730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
WriteX 10732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 61440 4096 4096 NT_STATUS_OK
ReadX 10733 126976 4096 4096 NT_STATUS_OK
WriteX 10733 0 65536 65536 NT_STATUS_OK
WriteX 10733 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 61440 4096 4096 NT_STATUS_OK
ReadX 10734 126976 4096 4096 NT_STATUS_OK
ReadX 10734 192512 4096 4096 NT_STATUS_OK
ReadX 10734 258048 4096 4096 NT_STATUS_OK
WriteX 10734 0 65536 65536 NT_STATUS_OK
WriteX 10734 65536 65536 65536 NT_STATUS_OK
WriteX 10734 131072 65536 65536 NT_STATUS_OK
WriteX 10734 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 61440 4096 4096 NT_STATUS_OK
ReadX 10735 126976 4096 4096 NT_STATUS_OK
ReadX 10735 192512 4096 4096 NT_STATUS_OK
ReadX 10735 258048 4096 4096 NT_STATUS_OK
ReadX 10735 323584 4096 4096 NT_STATUS_OK
ReadX 10735 389120 4096 4096 NT_STATUS_OK
ReadX 10735 454656 4096 4096 NT_STATUS_OK
ReadX 10735 520192 4096 4096 NT_STATUS_OK
WriteX 10735 0 65536 65536 NT_STATUS_OK
WriteX 10735 65536 65536 65536 NT_STATUS_OK
WriteX 10735 131072 65536 65536 NT_STATUS_OK
WriteX 10735 196608 65536 65536 NT_STATUS_OK
WriteX 10735 262144 65536 65536 NT_STATUS_OK
WriteX 10735 327680 65536 65536 NT_STATUS_OK
WriteX 10735 393216 65536 65536 NT_STATUS_OK
WriteX 10735 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10736 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10732 NT_STATUS_OK
Close 10733 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10747 NT_STATUS_OK
Close 10747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10756 NT_STATUS_OK
Close 10756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10765 NT_STATUS_OK
Close 10765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10795 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10801 NT_STATUS_OK
Close 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10804 NT_STATUS_OK
WriteX 10804 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10804 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10804 0 65536 65536 NT_STATUS_OK
WriteX 10804 65536 65536 65536 NT_STATUS_OK
WriteX 10804 131072 65536 65536 NT_STATUS_OK
WriteX 10804 196608 65536 65536 NT_STATUS_OK
WriteX 10804 262144 26634 26634 NT_STATUS_OK
Close 10804 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10809 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
ReadX 10812 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10820 NT_STATUS_OK
Close 10820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10826 NT_STATUS_OK
Close 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10831 NT_STATUS_OK
Close 10831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10840 NT_STATUS_OK
Close 10840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10864 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10874 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10877 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
Close 10892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10936 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10936 0 4096 4096 NT_STATUS_OK
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
ReadX 10938 4096 4096 4096 NT_STATUS_OK
ReadX 10938 8192 4096 4096 NT_STATUS_OK
ReadX 10938 12288 4096 4096 NT_STATUS_OK
ReadX 10938 16384 4096 4096 NT_STATUS_OK
ReadX 10938 20480 4096 4096 NT_STATUS_OK
ReadX 10938 24576 4096 4096 NT_STATUS_OK
ReadX 10938 28672 4096 4096 NT_STATUS_OK
ReadX 10938 32768 4096 4096 NT_STATUS_OK
ReadX 10938 36864 4096 4096 NT_STATUS_OK
ReadX 10938 40960 4096 4096 NT_STATUS_OK
ReadX 10938 45056 4096 4096 NT_STATUS_OK
ReadX 10938 49152 4096 4096 NT_STATUS_OK
ReadX 10938 53248 4096 4096 NT_STATUS_OK
ReadX 10938 57344 4096 4096 NT_STATUS_OK
ReadX 10938 61440 4096 4096 NT_STATUS_OK
ReadX 10938 65536 4096 4096 NT_STATUS_OK
ReadX 10938 69632 4096 4096 NT_STATUS_OK
ReadX 10938 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10938 1004 NT_STATUS_OK
WriteX 10938 0 4096 4096 NT_STATUS_OK
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10939 NT_STATUS_OK
SET_FILE_INFORMATION 10939 1004 NT_STATUS_OK
Close 10939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10944 NT_STATUS_OK
WriteX 10944 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10944 258 NT_STATUS_OK
WriteX 10944 0 65536 65536 NT_STATUS_OK
WriteX 10944 65536 19979 19979 NT_STATUS_OK
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
QUERY_FILE_INFORMATION 10945 1004 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
SET_FILE_INFORMATION 10945 1004 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
Close 10946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10950 1004 NT_STATUS_OK
WriteX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10953 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10956 NT_STATUS_OK
WriteX 10956 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 258 NT_STATUS_OK
WriteX 10956 0 65536 65536 NT_STATUS_OK
WriteX 10956 65536 17654 17654 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10958 NT_STATUS_OK
SET_FILE_INFORMATION 10958 1004 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10959 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
ReadX 10962 4096 4096 4096 NT_STATUS_OK
ReadX 10962 8192 4096 4096 NT_STATUS_OK
ReadX 10962 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10962 16384 4096 4096 NT_STATUS_OK
ReadX 10962 20480 4096 4096 NT_STATUS_OK
ReadX 10962 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
Close 10964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10965 1004 NT_STATUS_OK
WriteX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10966 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10971 NT_STATUS_OK
WriteX 10971 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10971 258 NT_STATUS_OK
WriteX 10971 0 65536 65536 NT_STATUS_OK
WriteX 10971 65536 19490 19490 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
SET_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10973 NT_STATUS_OK
SET_FILE_INFORMATION 10973 1004 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10977 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10977 0 4096 4096 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
ReadX 10979 4096 4096 4096 NT_STATUS_OK
ReadX 10979 8192 4096 4096 NT_STATUS_OK
ReadX 10979 12288 4096 4096 NT_STATUS_OK
ReadX 10979 16384 4096 4096 NT_STATUS_OK
ReadX 10979 20480 4096 4096 NT_STATUS_OK
ReadX 10979 24576 4096 4096 NT_STATUS_OK
ReadX 10979 28672 4096 4096 NT_STATUS_OK
ReadX 10979 32768 4096 4096 NT_STATUS_OK
ReadX 10979 36864 4096 4096 NT_STATUS_OK
ReadX 10979 40960 4096 4096 NT_STATUS_OK
ReadX 10979 45056 4096 4096 NT_STATUS_OK
ReadX 10979 49152 4096 4096 NT_STATUS_OK
ReadX 10979 53248 4096 4096 NT_STATUS_OK
ReadX 10979 57344 4096 4096 NT_STATUS_OK
ReadX 10979 61440 4096 4096 NT_STATUS_OK
ReadX 10979 65536 4096 4096 NT_STATUS_OK
ReadX 10979 69632 4096 4096 NT_STATUS_OK
ReadX 10979 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10979 1004 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10980 NT_STATUS_OK
SET_FILE_INFORMATION 10980 1004 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10985 NT_STATUS_OK
WriteX 10985 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10985 258 NT_STATUS_OK
WriteX 10985 0 65536 65536 NT_STATUS_OK
WriteX 10985 65536 8866 8866 NT_STATUS_OK
Close 10985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
Flush 10986 NT_STATUS_OK
SET_FILE_INFORMATION 10986 1004 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
Flush 10986 NT_STATUS_OK
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
Close 10989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10990 1004 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10996 NT_STATUS_OK
WriteX 10996 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10996 258 NT_STATUS_OK
WriteX 10996 0 65536 65536 NT_STATUS_OK
WriteX 10996 65536 9298 9298 NT_STATUS_OK
Close 10996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
WriteX 10997 0 4096 4096 NT_STATUS_OK
Flush 10997 NT_STATUS_OK
SET_FILE_INFORMATION 10997 1004 NT_STATUS_OK
WriteX 10997 0 4096 4096 NT_STATUS_OK
Flush 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10998 NT_STATUS_OK
SET_FILE_INFORMATION 10998 1004 NT_STATUS_OK
Close 10998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11003 0 4096 4096 NT_STATUS_OK
Close 11003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11004 4096 4096 4096 NT_STATUS_OK
ReadX 11004 8192 4096 4096 NT_STATUS_OK
ReadX 11004 12288 4096 4096 NT_STATUS_OK
ReadX 11004 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 4096 4096 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11007 1004 NT_STATUS_OK
WriteX 11007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11008 NT_STATUS_OK
Close 11008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11010 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11013 NT_STATUS_OK
WriteX 11013 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 65536 65536 NT_STATUS_OK
WriteX 11013 65536 11540 11540 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Flush 11014 NT_STATUS_OK
SET_FILE_INFORMATION 11014 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Flush 11014 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11015 NT_STATUS_OK
SET_FILE_INFORMATION 11015 1004 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11017 NT_STATUS_OK
Close 11017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 61440 4096 4096 NT_STATUS_OK
ReadX 11019 126976 4096 4096 NT_STATUS_OK
WriteX 11019 0 65536 65536 NT_STATUS_OK
WriteX 11019 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 61440 4096 4096 NT_STATUS_OK
ReadX 11020 126976 4096 4096 NT_STATUS_OK
ReadX 11020 192512 4096 4096 NT_STATUS_OK
ReadX 11020 258048 4096 4096 NT_STATUS_OK
WriteX 11020 0 65536 65536 NT_STATUS_OK
WriteX 11020 65536 65536 65536 NT_STATUS_OK
WriteX 11020 131072 65536 65536 NT_STATUS_OK
WriteX 11020 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 61440 4096 4096 NT_STATUS_OK
ReadX 11021 126976 4096 4096 NT_STATUS_OK
ReadX 11021 192512 4096 4096 NT_STATUS_OK
ReadX 11021 258048 4096 4096 NT_STATUS_OK
ReadX 11021 323584 4096 4096 NT_STATUS_OK
ReadX 11021 389120 4096 4096 NT_STATUS_OK
ReadX 11021 454656 4096 4096 NT_STATUS_OK
ReadX 11021 520192 4096 4096 NT_STATUS_OK
WriteX 11021 0 65536 65536 NT_STATUS_OK
WriteX 11021 65536 65536 65536 NT_STATUS_OK
WriteX 11021 131072 65536 65536 NT_STATUS_OK
WriteX 11021 196608 65536 65536 NT_STATUS_OK
WriteX 11021 262144 65536 65536 NT_STATUS_OK
WriteX 11021 327680 65536 65536 NT_STATUS_OK
WriteX 11021 393216 65536 65536 NT_STATUS_OK
WriteX 11021 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11023 NT_STATUS_OK
WriteX 11023 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11023 258 NT_STATUS_OK
WriteX 11023 0 53 53 NT_STATUS_OK
Close 11023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11024 NT_STATUS_OK
Close 11024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11022 8192 4096 4096 NT_STATUS_OK
ReadX 11022 12288 4096 4096 NT_STATUS_OK
WriteX 11026 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11026 258 NT_STATUS_OK
ReadX 11022 16384 4096 4096 NT_STATUS_OK
ReadX 11022 20480 4096 4096 NT_STATUS_OK
WriteX 11026 0 15360 15360 NT_STATUS_OK
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11027 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11027 1004 NT_STATUS_OK
WriteX 11027 0 4096 4096 NT_STATUS_OK
Close 11027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11028 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11030 4096 4096 4096 NT_STATUS_OK
ReadX 11030 8192 4096 4096 NT_STATUS_OK
ReadX 11030 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
ReadX 11033 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
ReadX 11034 4096 4096 4096 NT_STATUS_OK
ReadX 11034 8192 4096 4096 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11035 NT_STATUS_OK
WriteX 11035 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11035 258 NT_STATUS_OK
WriteX 11035 0 15360 15360 NT_STATUS_OK
Close 11035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11036 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11037 NT_STATUS_OK
Close 11037 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11039 NT_STATUS_OK
ReadX 11039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11040 NT_STATUS_OK
SET_FILE_INFORMATION 11040 1004 NT_STATUS_OK
Close 11040 NT_STATUS_OK
WriteX 11036 0 4096 4096 NT_STATUS_OK
Close 11036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11041 NT_STATUS_OK
Close 11041 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 0 4096 4096 NT_STATUS_OK
ReadX 11043 4096 4096 4096 NT_STATUS_OK
ReadX 11043 8192 4096 4096 NT_STATUS_OK
ReadX 11043 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11043 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11043 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11045 NT_STATUS_OK
WriteX 11045 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 53 53 NT_STATUS_OK
Close 11045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11046 NT_STATUS_OK
Close 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11044 4096 4096 4096 NT_STATUS_OK
ReadX 11044 8192 4096 4096 NT_STATUS_OK
ReadX 11044 12288 4096 4096 NT_STATUS_OK
WriteX 11048 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 258 NT_STATUS_OK
WriteX 11048 0 12006 12006 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11050 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11052 4096 4096 4096 NT_STATUS_OK
ReadX 11052 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11055 NT_STATUS_OK
WriteX 11055 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11055 258 NT_STATUS_OK
WriteX 11055 0 11991 11991 NT_STATUS_OK
Close 11055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11056 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11057 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11060 NT_STATUS_OK
WriteX 11043 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11060 1004 NT_STATUS_OK
Close 11060 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11061 NT_STATUS_OK
Close 11061 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11063 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
ReadX 11063 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
WriteX 11063 0 12288 12288 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 61440 61440 NT_STATUS_OK
ReadX 11070 61440 4096 4096 NT_STATUS_OK
ReadX 11070 65536 61440 61440 NT_STATUS_OK
ReadX 11070 126976 4096 4096 NT_STATUS_OK
ReadX 11070 131072 61440 61440 NT_STATUS_OK
ReadX 11070 192512 4096 4096 NT_STATUS_OK
ReadX 11070 196608 61440 61440 NT_STATUS_OK
ReadX 11070 258048 4096 4096 NT_STATUS_OK
ReadX 11070 262144 61440 61440 NT_STATUS_OK
ReadX 11070 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 61440 61440 NT_STATUS_OK
ReadX 11071 61440 4096 4096 NT_STATUS_OK
ReadX 11071 65536 61440 61440 NT_STATUS_OK
ReadX 11071 126976 4096 4096 NT_STATUS_OK
ReadX 11071 131072 61440 61440 NT_STATUS_OK
ReadX 11071 192512 4096 4096 NT_STATUS_OK
ReadX 11071 196608 61440 61440 NT_STATUS_OK
ReadX 11071 258048 4096 4096 NT_STATUS_OK
ReadX 11071 262144 61440 61440 NT_STATUS_OK
ReadX 11071 323584 4096 4096 NT_STATUS_OK
ReadX 11071 327680 61440 61440 NT_STATUS_OK
ReadX 11071 389120 4096 4096 NT_STATUS_OK
ReadX 11071 393216 61440 61440 NT_STATUS_OK
ReadX 11071 454656 4096 4096 NT_STATUS_OK
ReadX 11071 458752 61440 61440 NT_STATUS_OK
ReadX 11071 520192 4096 4096 NT_STATUS_OK
ReadX 11071 524288 61440 61440 NT_STATUS_OK
ReadX 11071 585728 4096 4096 NT_STATUS_OK
ReadX 11071 589824 61440 61440 NT_STATUS_OK
ReadX 11071 651264 4096 4096 NT_STATUS_OK
ReadX 11071 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 61440 61440 NT_STATUS_OK
ReadX 11072 61440 4096 4096 NT_STATUS_OK
ReadX 11072 65536 61440 61440 NT_STATUS_OK
ReadX 11072 126976 4096 4096 NT_STATUS_OK
ReadX 11072 131072 61440 61440 NT_STATUS_OK
ReadX 11072 192512 4096 4096 NT_STATUS_OK
ReadX 11072 196608 61440 61440 NT_STATUS_OK
ReadX 11072 258048 4096 4096 NT_STATUS_OK
ReadX 11072 262144 61440 61440 NT_STATUS_OK
ReadX 11072 323584 4096 4096 NT_STATUS_OK
ReadX 11072 327680 61440 61440 NT_STATUS_OK
ReadX 11072 389120 4096 4096 NT_STATUS_OK
ReadX 11072 393216 61440 61440 NT_STATUS_OK
ReadX 11072 454656 4096 4096 NT_STATUS_OK
ReadX 11072 458752 61440 61440 NT_STATUS_OK
ReadX 11072 520192 4096 4096 NT_STATUS_OK
ReadX 11072 524288 61440 61440 NT_STATUS_OK
ReadX 11072 585728 4096 4096 NT_STATUS_OK
ReadX 11072 589824 61440 61440 NT_STATUS_OK
ReadX 11072 651264 4096 4096 NT_STATUS_OK
ReadX 11072 655360 61440 61440 NT_STATUS_OK
ReadX 11072 716800 4096 4096 NT_STATUS_OK
ReadX 11072 720896 61440 61440 NT_STATUS_OK
ReadX 11072 782336 4096 4096 NT_STATUS_OK
ReadX 11072 786432 61440 61440 NT_STATUS_OK
ReadX 11072 847872 4096 4096 NT_STATUS_OK
ReadX 11072 851968 61440 61440 NT_STATUS_OK
ReadX 11072 913408 4096 4096 NT_STATUS_OK
ReadX 11072 917504 61440 61440 NT_STATUS_OK
ReadX 11072 978944 4096 4096 NT_STATUS_OK
ReadX 11072 983040 61440 61440 NT_STATUS_OK
ReadX 11072 1044480 4096 4096 NT_STATUS_OK
ReadX 11072 1048576 61440 61440 NT_STATUS_OK
ReadX 11072 1110016 4096 4096 NT_STATUS_OK
ReadX 11072 1114112 61440 61440 NT_STATUS_OK
ReadX 11072 1175552 4096 4096 NT_STATUS_OK
ReadX 11072 1179648 61440 61440 NT_STATUS_OK
ReadX 11072 1241088 4096 4096 NT_STATUS_OK
ReadX 11072 1245184 61440 61440 NT_STATUS_OK
ReadX 11072 1306624 4096 4096 NT_STATUS_OK
ReadX 11072 1310720 61440 61440 NT_STATUS_OK
ReadX 11072 1372160 4096 4096 NT_STATUS_OK
ReadX 11072 1376256 61440 61440 NT_STATUS_OK
ReadX 11072 1437696 4096 4096 NT_STATUS_OK
ReadX 11072 1441792 61440 61440 NT_STATUS_OK
ReadX 11072 1503232 4096 4096 NT_STATUS_OK
ReadX 11072 1507328 61440 61440 NT_STATUS_OK
ReadX 11072 1568768 4096 4096 NT_STATUS_OK
ReadX 11072 1572864 61440 61440 NT_STATUS_OK
ReadX 11072 1634304 4096 4096 NT_STATUS_OK
ReadX 11072 1638400 61440 61440 NT_STATUS_OK
ReadX 11072 1699840 4096 4096 NT_STATUS_OK
ReadX 11072 1703936 61440 61440 NT_STATUS_OK
ReadX 11072 1765376 4096 4096 NT_STATUS_OK
ReadX 11072 1769472 61440 61440 NT_STATUS_OK
ReadX 11072 1830912 4096 4096 NT_STATUS_OK
ReadX 11072 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11079 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11080 NT_STATUS_OK
Close 11080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11081 NT_STATUS_OK
WriteX 11081 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11081 258 NT_STATUS_OK
WriteX 11081 0 491 491 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11079 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11085 NT_STATUS_OK
WriteX 11085 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11085 258 NT_STATUS_OK
WriteX 11085 0 543 543 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11086 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11098 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11099 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 1004 NT_STATUS_OK
WriteX 11099 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 258 NT_STATUS_OK
WriteX 11099 0 2048 2048 NT_STATUS_OK
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
Flush 11100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 543 543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 7936 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11106 NT_STATUS_OK
WriteX 11106 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 258 NT_STATUS_OK
WriteX 11106 0 2048 2048 NT_STATUS_OK
Close 11106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11112 NT_STATUS_OK
WriteX 11112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11112 258 NT_STATUS_OK
WriteX 11112 0 2048 2048 NT_STATUS_OK
Close 11112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 2048 2048 NT_STATUS_OK
ReadX 11090 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
WriteX 11090 0 8192 8192 NT_STATUS_OK
WriteX 11091 0 4096 4096 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11116 NT_STATUS_OK
ReadX 11116 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11136 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11137 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 1004 NT_STATUS_OK
WriteX 11137 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 258 NT_STATUS_OK
WriteX 11137 0 2048 2048 NT_STATUS_OK
Close 11137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11145 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1004 NT_STATUS_OK
WriteX 11145 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 258 NT_STATUS_OK
WriteX 11145 0 2048 2048 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11138 0 4096 4096 NT_STATUS_OK
Flush 11138 NT_STATUS_OK
WriteX 11146 0 4096 4096 NT_STATUS_OK
Flush 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11138 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11146 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11140 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11147 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11148 NT_STATUS_OK
WriteX 11148 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11148 258 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11151 NT_STATUS_OK
WriteX 11151 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 258 NT_STATUS_OK
WriteX 11151 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11152 0 4096 4096 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11159 NT_STATUS_OK
WriteX 11159 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 258 NT_STATUS_OK
WriteX 11159 0 2048 2048 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11171 NT_STATUS_OK
ReadX 11171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11172 NT_STATUS_OK
ReadX 11172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11174 NT_STATUS_OK
QUERY_FILE_INFORMATION 11174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Close 11171 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11165 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11176 NT_STATUS_OK
QUERY_FILE_INFORMATION 11176 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11188 NT_STATUS_OK
ReadX 11188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11196 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 1004 NT_STATUS_OK
WriteX 11196 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 258 NT_STATUS_OK
WriteX 11196 0 2048 2048 NT_STATUS_OK
Close 11196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11208 NT_STATUS_OK
QUERY_FILE_INFORMATION 11208 1004 NT_STATUS_OK
WriteX 11208 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11208 258 NT_STATUS_OK
WriteX 11208 0 2048 2048 NT_STATUS_OK
Close 11208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11216 NT_STATUS_OK
QUERY_FILE_INFORMATION 11216 1004 NT_STATUS_OK
WriteX 11216 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11216 258 NT_STATUS_OK
WriteX 11216 0 2048 2048 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
WriteX 11209 0 4096 4096 NT_STATUS_OK
Flush 11209 NT_STATUS_OK
WriteX 11217 0 4096 4096 NT_STATUS_OK
Flush 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11217 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11199 4096 16384 16384 NT_STATUS_OK
ReadX 11179 4096 16384 16384 NT_STATUS_OK
ReadX 11211 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11218 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 2048 2048 NT_STATUS_OK
WriteX 11219 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11220 NT_STATUS_OK
QUERY_FILE_INFORMATION 11220 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11191 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11188 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11224 NT_STATUS_OK
QUERY_FILE_INFORMATION 11224 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11227 4096 16384 16384 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
WriteX 11228 0 4096 4096 NT_STATUS_OK
WriteX 11229 0 4096 4096 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11240 NT_STATUS_OK
ReadX 11240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 0 8192 8192 NT_STATUS_OK
ReadX 11233 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11247 0 4096 4096 NT_STATUS_OK
ReadX 11247 4096 4096 4096 NT_STATUS_OK
ReadX 11247 8192 4096 4096 NT_STATUS_OK
WriteX 11233 0 4096 4096 NT_STATUS_OK
WriteX 11234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
ReadX 11248 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
WriteX 11228 0 4096 4096 NT_STATUS_OK
WriteX 11229 0 4096 4096 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11253 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 1004 NT_STATUS_OK
WriteX 11253 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 258 NT_STATUS_OK
WriteX 11253 0 2048 2048 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
ReadX 11256 4096 4096 4096 NT_STATUS_OK
WriteX 11256 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 0 4096 4096 NT_STATUS_OK
ReadX 11258 4096 4096 4096 NT_STATUS_OK
WriteX 11258 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11259 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Close 11231 NT_STATUS_OK
Close 11227 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11240 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11261 0 4096 4096 NT_STATUS_OK
ReadX 11261 4096 4096 4096 NT_STATUS_OK
ReadX 11261 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11263 NT_STATUS_OK
ReadX 11263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11264 NT_STATUS_OK
ReadX 11264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11265 NT_STATUS_OK
ReadX 11265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
ReadX 11262 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11279 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 258 NT_STATUS_OK
WriteX 11279 0 2048 2048 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11280 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11284 NT_STATUS_OK
Close 11284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11285 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 1004 NT_STATUS_OK
WriteX 11285 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 258 NT_STATUS_OK
WriteX 11285 0 2048 2048 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11286 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11269 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11287 NT_STATUS_OK
QUERY_FILE_INFORMATION 11287 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11274 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Close 11263 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11264 NT_STATUS_OK
Close 11265 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Close 11270 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11289 NT_STATUS_OK
QUERY_FILE_INFORMATION 11289 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 61440 4096 4096 NT_STATUS_OK
ReadX 11291 126976 4096 4096 NT_STATUS_OK
WriteX 11291 0 65536 65536 NT_STATUS_OK
WriteX 11291 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 61440 4096 4096 NT_STATUS_OK
ReadX 11292 126976 4096 4096 NT_STATUS_OK
ReadX 11292 192512 4096 4096 NT_STATUS_OK
ReadX 11292 258048 4096 4096 NT_STATUS_OK
WriteX 11292 0 65536 65536 NT_STATUS_OK
WriteX 11292 65536 65536 65536 NT_STATUS_OK
WriteX 11292 131072 65536 65536 NT_STATUS_OK
WriteX 11292 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 61440 4096 4096 NT_STATUS_OK
ReadX 11293 126976 4096 4096 NT_STATUS_OK
ReadX 11293 192512 4096 4096 NT_STATUS_OK
ReadX 11293 258048 4096 4096 NT_STATUS_OK
ReadX 11293 323584 4096 4096 NT_STATUS_OK
ReadX 11293 389120 4096 4096 NT_STATUS_OK
ReadX 11293 454656 4096 4096 NT_STATUS_OK
ReadX 11293 520192 4096 4096 NT_STATUS_OK
WriteX 11293 0 65536 65536 NT_STATUS_OK
WriteX 11293 65536 65536 65536 NT_STATUS_OK
WriteX 11293 131072 65536 65536 NT_STATUS_OK
WriteX 11293 196608 65536 65536 NT_STATUS_OK
WriteX 11293 262144 65536 65536 NT_STATUS_OK
WriteX 11293 327680 65536 65536 NT_STATUS_OK
WriteX 11293 393216 65536 65536 NT_STATUS_OK
WriteX 11293 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11294 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11294 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11294 8192 4096 4096 NT_STATUS_OK
ReadX 11294 12288 4096 4096 NT_STATUS_OK
ReadX 11294 16384 4096 4096 NT_STATUS_OK
ReadX 11294 20480 4096 4096 NT_STATUS_OK
ReadX 11294 24576 4096 4096 NT_STATUS_OK
ReadX 11294 28672 4096 4096 NT_STATUS_OK
ReadX 11294 32768 4096 4096 NT_STATUS_OK
ReadX 11294 36864 4096 4096 NT_STATUS_OK
ReadX 11294 40960 4096 4096 NT_STATUS_OK
ReadX 11294 45056 4096 4096 NT_STATUS_OK
ReadX 11294 49152 4096 4096 NT_STATUS_OK
ReadX 11294 53248 4096 4096 NT_STATUS_OK
ReadX 11294 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11294 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11297 NT_STATUS_OK
WriteX 11297 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11297 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11297 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11297 1004 NT_STATUS_OK
WriteX 11297 0 57088 57088 NT_STATUS_OK
WriteX 11297 0 4096 4096 NT_STATUS_OK
Flush 11297 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11298 NT_STATUS_OK
SET_FILE_INFORMATION 11298 1004 NT_STATUS_OK
Close 11298 NT_STATUS_OK
SET_FILE_INFORMATION 11297 1004 NT_STATUS_OK
WriteX 11297 0 4096 4096 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11299 NT_STATUS_OK
Close 11299 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11301 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11302 NT_STATUS_OK
WriteX 11302 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11302 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11302 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
WriteX 11302 0 51456 51456 NT_STATUS_OK
WriteX 11302 0 4096 4096 NT_STATUS_OK
Flush 11302 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
WriteX 11302 0 4096 4096 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11306 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11311 NT_STATUS_OK
WriteX 11311 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11311 258 NT_STATUS_OK
WriteX 11311 0 53077 53077 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11312 NT_STATUS_OK
WriteX 11312 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11312 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 65536 65536 NT_STATUS_OK
WriteX 11312 65536 1856 1856 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Flush 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11316 NT_STATUS_OK
ReadX 11316 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11318 NT_STATUS_OK
Close 11318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11321 NT_STATUS_OK
WriteX 11321 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 258 NT_STATUS_OK
WriteX 11321 0 7983 7983 NT_STATUS_OK
Close 11321 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11326 NT_STATUS_OK
WriteX 11326 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11326 258 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 65536 65536 NT_STATUS_OK
WriteX 11326 131072 65536 65536 NT_STATUS_OK
WriteX 11326 196608 65536 65536 NT_STATUS_OK
WriteX 11326 262144 65536 65536 NT_STATUS_OK
WriteX 11326 327680 65536 65536 NT_STATUS_OK
WriteX 11326 393216 65536 65536 NT_STATUS_OK
WriteX 11326 458752 46731 46731 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11327 NT_STATUS_OK
WriteX 11327 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11316 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11327 1004 NT_STATUS_OK
WriteX 11327 0 65536 65536 NT_STATUS_OK
WriteX 11327 65536 22848 22848 NT_STATUS_OK
WriteX 11327 0 4096 4096 NT_STATUS_OK
Flush 11327 NT_STATUS_OK
SET_FILE_INFORMATION 11327 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11327 1004 NT_STATUS_OK
WriteX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11331 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11332 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11332 1004 NT_STATUS_OK
ReadX 11332 8192 4096 4096 NT_STATUS_OK
ReadX 11332 12288 4096 4096 NT_STATUS_OK
ReadX 11332 16384 4096 4096 NT_STATUS_OK
ReadX 11332 20480 4096 4096 NT_STATUS_OK
ReadX 11332 24576 4096 4096 NT_STATUS_OK
ReadX 11332 28672 4096 4096 NT_STATUS_OK
ReadX 11332 32768 4096 4096 NT_STATUS_OK
ReadX 11332 36864 4096 4096 NT_STATUS_OK
ReadX 11332 40960 4096 4096 NT_STATUS_OK
ReadX 11332 45056 4096 4096 NT_STATUS_OK
ReadX 11332 49152 4096 4096 NT_STATUS_OK
ReadX 11332 53248 4096 4096 NT_STATUS_OK
ReadX 11332 57344 4096 4096 NT_STATUS_OK
ReadX 11332 61440 4096 4096 NT_STATUS_OK
ReadX 11332 65536 4096 4096 NT_STATUS_OK
ReadX 11332 69632 4096 4096 NT_STATUS_OK
ReadX 11332 73728 4096 4096 NT_STATUS_OK
ReadX 11332 77824 4096 4096 NT_STATUS_OK
ReadX 11332 81920 4096 4096 NT_STATUS_OK
ReadX 11332 86016 4096 4096 NT_STATUS_OK
ReadX 11332 90112 4096 4096 NT_STATUS_OK
ReadX 11332 94208 4096 4096 NT_STATUS_OK
ReadX 11332 98304 4096 4096 NT_STATUS_OK
ReadX 11332 102400 4096 4096 NT_STATUS_OK
ReadX 11332 106496 4096 4096 NT_STATUS_OK
ReadX 11332 110592 4096 4096 NT_STATUS_OK
ReadX 11332 114688 4096 4096 NT_STATUS_OK
ReadX 11332 118784 4096 4096 NT_STATUS_OK
ReadX 11332 122880 4096 4096 NT_STATUS_OK
ReadX 11332 126976 4096 4096 NT_STATUS_OK
ReadX 11332 131072 4096 4096 NT_STATUS_OK
ReadX 11332 135168 4096 4096 NT_STATUS_OK
ReadX 11332 139264 4096 4096 NT_STATUS_OK
ReadX 11332 143360 4096 4096 NT_STATUS_OK
ReadX 11332 147456 4096 4096 NT_STATUS_OK
ReadX 11332 151552 4096 4096 NT_STATUS_OK
ReadX 11332 155648 4096 4096 NT_STATUS_OK
ReadX 11332 159744 4096 4096 NT_STATUS_OK
ReadX 11332 163840 4096 4096 NT_STATUS_OK
ReadX 11332 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11332 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
Close 11332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11336 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
Close 11336 NT_STATUS_OK
WriteX 11335 0 42388 42388 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11339 NT_STATUS_OK
ReadX 11339 0 4096 4096 NT_STATUS_OK
ReadX 11339 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11340 NT_STATUS_OK
WriteX 11340 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11340 258 NT_STATUS_OK
SET_FILE_INFORMATION 11340 1004 NT_STATUS_OK
WriteX 11340 0 42652 42652 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
ReadX 11344 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11349 NT_STATUS_OK
WriteX 11349 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
WriteX 11349 0 65536 65536 NT_STATUS_OK
WriteX 11349 65536 49 49 NT_STATUS_OK
Close 11349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 61440 61440 NT_STATUS_OK
ReadX 11350 61440 4096 4096 NT_STATUS_OK
ReadX 11350 65536 61440 61440 NT_STATUS_OK
ReadX 11350 126976 4096 4096 NT_STATUS_OK
ReadX 11350 131072 61440 61440 NT_STATUS_OK
ReadX 11350 192512 4096 4096 NT_STATUS_OK
ReadX 11350 196608 61440 61440 NT_STATUS_OK
ReadX 11350 258048 4096 4096 NT_STATUS_OK
ReadX 11350 262144 61440 61440 NT_STATUS_OK
ReadX 11350 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 61440 61440 NT_STATUS_OK
ReadX 11351 61440 4096 4096 NT_STATUS_OK
ReadX 11351 65536 61440 61440 NT_STATUS_OK
ReadX 11351 126976 4096 4096 NT_STATUS_OK
ReadX 11351 131072 61440 61440 NT_STATUS_OK
ReadX 11351 192512 4096 4096 NT_STATUS_OK
ReadX 11351 196608 61440 61440 NT_STATUS_OK
ReadX 11351 258048 4096 4096 NT_STATUS_OK
ReadX 11351 262144 61440 61440 NT_STATUS_OK
ReadX 11351 323584 4096 4096 NT_STATUS_OK
ReadX 11351 327680 61440 61440 NT_STATUS_OK
ReadX 11351 389120 4096 4096 NT_STATUS_OK
ReadX 11351 393216 61440 61440 NT_STATUS_OK
ReadX 11351 454656 4096 4096 NT_STATUS_OK
ReadX 11351 458752 61440 61440 NT_STATUS_OK
ReadX 11351 520192 4096 4096 NT_STATUS_OK
ReadX 11351 524288 61440 61440 NT_STATUS_OK
ReadX 11351 585728 4096 4096 NT_STATUS_OK
ReadX 11351 589824 61440 61440 NT_STATUS_OK
ReadX 11351 651264 4096 4096 NT_STATUS_OK
ReadX 11351 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 61440 61440 NT_STATUS_OK
ReadX 11352 61440 4096 4096 NT_STATUS_OK
ReadX 11352 65536 61440 61440 NT_STATUS_OK
ReadX 11352 126976 4096 4096 NT_STATUS_OK
ReadX 11352 131072 61440 61440 NT_STATUS_OK
ReadX 11352 192512 4096 4096 NT_STATUS_OK
ReadX 11352 196608 61440 61440 NT_STATUS_OK
ReadX 11352 258048 4096 4096 NT_STATUS_OK
ReadX 11352 262144 61440 61440 NT_STATUS_OK
ReadX 11352 323584 4096 4096 NT_STATUS_OK
ReadX 11352 327680 61440 61440 NT_STATUS_OK
ReadX 11352 389120 4096 4096 NT_STATUS_OK
ReadX 11352 393216 61440 61440 NT_STATUS_OK
ReadX 11352 454656 4096 4096 NT_STATUS_OK
ReadX 11352 458752 61440 61440 NT_STATUS_OK
ReadX 11352 520192 4096 4096 NT_STATUS_OK
ReadX 11352 524288 61440 61440 NT_STATUS_OK
ReadX 11352 585728 4096 4096 NT_STATUS_OK
ReadX 11352 589824 61440 61440 NT_STATUS_OK
ReadX 11352 651264 4096 4096 NT_STATUS_OK
ReadX 11352 655360 61440 61440 NT_STATUS_OK
ReadX 11352 716800 4096 4096 NT_STATUS_OK
ReadX 11352 720896 61440 61440 NT_STATUS_OK
ReadX 11352 782336 4096 4096 NT_STATUS_OK
ReadX 11352 786432 61440 61440 NT_STATUS_OK
ReadX 11352 847872 4096 4096 NT_STATUS_OK
ReadX 11352 851968 61440 61440 NT_STATUS_OK
ReadX 11352 913408 4096 4096 NT_STATUS_OK
ReadX 11352 917504 61440 61440 NT_STATUS_OK
ReadX 11352 978944 4096 4096 NT_STATUS_OK
ReadX 11352 983040 61440 61440 NT_STATUS_OK
ReadX 11352 1044480 4096 4096 NT_STATUS_OK
ReadX 11352 1048576 61440 61440 NT_STATUS_OK
ReadX 11352 1110016 4096 4096 NT_STATUS_OK
ReadX 11352 1114112 61440 61440 NT_STATUS_OK
ReadX 11352 1175552 4096 4096 NT_STATUS_OK
ReadX 11352 1179648 61440 61440 NT_STATUS_OK
ReadX 11352 1241088 4096 4096 NT_STATUS_OK
ReadX 11352 1245184 61440 61440 NT_STATUS_OK
ReadX 11352 1306624 4096 4096 NT_STATUS_OK
ReadX 11352 1310720 61440 61440 NT_STATUS_OK
ReadX 11352 1372160 4096 4096 NT_STATUS_OK
ReadX 11352 1376256 61440 61440 NT_STATUS_OK
ReadX 11352 1437696 4096 4096 NT_STATUS_OK
ReadX 11352 1441792 61440 61440 NT_STATUS_OK
ReadX 11352 1503232 4096 4096 NT_STATUS_OK
ReadX 11352 1507328 61440 61440 NT_STATUS_OK
ReadX 11352 1568768 4096 4096 NT_STATUS_OK
ReadX 11352 1572864 61440 61440 NT_STATUS_OK
ReadX 11352 1634304 4096 4096 NT_STATUS_OK
ReadX 11352 1638400 61440 61440 NT_STATUS_OK
ReadX 11352 1699840 4096 4096 NT_STATUS_OK
ReadX 11352 1703936 61440 61440 NT_STATUS_OK
ReadX 11352 1765376 4096 4096 NT_STATUS_OK
ReadX 11352 1769472 61440 61440 NT_STATUS_OK
ReadX 11352 1830912 4096 4096 NT_STATUS_OK
ReadX 11352 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11354 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 1005 NT_STATUS_OK
ReadX 11354 2156 24 24 NT_STATUS_OK
ReadX 11354 2139 276 276 NT_STATUS_OK
ReadX 11354 2136 14 14 NT_STATUS_OK
ReadX 11354 2136 7 7 NT_STATUS_OK
ReadX 11354 2138 12 12 NT_STATUS_OK
ReadX 11354 2137 8 8 NT_STATUS_OK
ReadX 11354 2135 15 15 NT_STATUS_OK
ReadX 11354 0 16 16 NT_STATUS_OK
ReadX 11354 16 2048 2048 NT_STATUS_OK
ReadX 11354 2064 2048 2048 NT_STATUS_OK
ReadX 11354 257 2048 2048 NT_STATUS_OK
ReadX 11354 385 2048 2048 NT_STATUS_OK
ReadX 11354 513 2048 2048 NT_STATUS_OK
ReadX 11354 641 2048 2048 NT_STATUS_OK
ReadX 11354 769 2048 2048 NT_STATUS_OK
ReadX 11354 897 2048 2048 NT_STATUS_OK
ReadX 11354 1025 2048 2048 NT_STATUS_OK
ReadX 11354 1153 2048 2048 NT_STATUS_OK
ReadX 11354 1281 2048 2048 NT_STATUS_OK
ReadX 11354 1409 2048 2048 NT_STATUS_OK
ReadX 11354 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11359 NT_STATUS_OK
WriteX 11359 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11359 258 NT_STATUS_OK
WriteX 11359 0 10575 10575 NT_STATUS_OK
Flush 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
Close 11354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11364 NT_STATUS_OK
LockX 11364 2147483538 1 NT_STATUS_OK
UnlockX 11364 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1005 NT_STATUS_OK
ReadX 11364 0 512 512 NT_STATUS_OK
ReadX 11364 512 512 512 NT_STATUS_OK
ReadX 11364 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1004 NT_STATUS_OK
Close 11364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11365 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 1005 NT_STATUS_OK
ReadX 11365 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11366 NT_STATUS_OK
LockX 11366 2147483538 1 NT_STATUS_OK
UnlockX 11366 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11366 1005 NT_STATUS_OK
ReadX 11366 0 512 512 NT_STATUS_OK
ReadX 11366 512 512 512 NT_STATUS_OK
ReadX 11366 1024 512 512 NT_STATUS_OK
ReadX 11366 288 20 20 NT_STATUS_OK
ReadX 11366 308 2084 2084 NT_STATUS_OK
ReadX 11366 388 2084 2084 NT_STATUS_OK
ReadX 11366 388 2084 2084 NT_STATUS_OK
ReadX 11353 2157 1386 1386 NT_STATUS_OK
ReadX 11366 2472 399 399 NT_STATUS_OK
ReadX 11366 3072 1536 1536 NT_STATUS_OK
ReadX 11366 544 149 149 NT_STATUS_OK
ReadX 11366 693 485 485 NT_STATUS_OK
Close 11366 NT_STATUS_OK
ReadX 11353 2157 4096 4096 NT_STATUS_OK
ReadX 11353 6253 4096 4096 NT_STATUS_OK
ReadX 11353 10349 4096 4096 NT_STATUS_OK
ReadX 11353 14445 4096 4096 NT_STATUS_OK
ReadX 11353 18541 4096 4096 NT_STATUS_OK
ReadX 11353 22637 256 256 NT_STATUS_OK
ReadX 11353 22893 4096 4096 NT_STATUS_OK
ReadX 11353 26989 4096 4096 NT_STATUS_OK
ReadX 11353 31085 4096 4096 NT_STATUS_OK
ReadX 11353 35181 4096 4096 NT_STATUS_OK
ReadX 11353 39277 4096 4096 NT_STATUS_OK
ReadX 11353 43373 4096 4096 NT_STATUS_OK
ReadX 11353 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11353 2157 1024 1024 NT_STATUS_OK
ReadX 11353 1667 4688 4688 NT_STATUS_OK
ReadX 11353 6355 3516 3516 NT_STATUS_OK
ReadX 11353 9871 16384 16384 NT_STATUS_OK
ReadX 11353 26255 3771 3771 NT_STATUS_OK
ReadX 11353 30026 2048 2048 NT_STATUS_OK
ReadX 11353 32074 1024 1024 NT_STATUS_OK
ReadX 11353 33098 6652 6652 NT_STATUS_OK
ReadX 11353 39750 16384 16384 NT_STATUS_OK
ReadX 11353 56134 10496 10496 NT_STATUS_OK
ReadX 11353 66630 1784 1784 NT_STATUS_OK
ReadX 11353 68414 90 90 NT_STATUS_OK
ReadX 11353 68504 273 273 NT_STATUS_OK
ReadX 11353 68777 1600 1600 NT_STATUS_OK
ReadX 11353 70377 640 640 NT_STATUS_OK
ReadX 11353 71017 1280 1280 NT_STATUS_OK
ReadX 11353 72297 8464 8464 NT_STATUS_OK
ReadX 11353 80761 158 158 NT_STATUS_OK
ReadX 11353 80919 912 912 NT_STATUS_OK
ReadX 11353 81831 1980 1980 NT_STATUS_OK
ReadX 11353 83811 2256 2256 NT_STATUS_OK
ReadX 11353 86067 400 400 NT_STATUS_OK
ReadX 11353 86467 252 252 NT_STATUS_OK
ReadX 11353 86719 42 42 NT_STATUS_OK
ReadX 11353 86761 725 725 NT_STATUS_OK
ReadX 11353 2009 512 512 NT_STATUS_OK
ReadX 11353 3895 9 9 NT_STATUS_OK
ReadX 11353 3781 46 46 NT_STATUS_OK
ReadX 11353 4059 92 92 NT_STATUS_OK
ReadX 11353 3781 92 92 NT_STATUS_OK
ReadX 11353 3986 184 184 NT_STATUS_OK
ReadX 11353 3987 16384 16384 NT_STATUS_OK
ReadX 11353 3902 16384 16384 NT_STATUS_OK
ReadX 11353 3781 10240 10240 NT_STATUS_OK
ReadX 11353 3821 16384 16384 NT_STATUS_OK
ReadX 11353 3891 935 935 NT_STATUS_OK
ReadX 11353 4060 10240 10240 NT_STATUS_OK
ReadX 11353 4059 184 184 NT_STATUS_OK
ReadX 11353 256 184 184 NT_STATUS_OK
ReadX 11353 256 1026 1026 NT_STATUS_OK
ReadX 11353 3901 326 326 NT_STATUS_OK
ReadX 11353 3899 652 652 NT_STATUS_OK
ReadX 11353 256 2 2 NT_STATUS_OK
ReadX 11353 258 4948 4948 NT_STATUS_OK
Close 11353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11371 NT_STATUS_OK
WriteX 11371 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11371 258 NT_STATUS_OK
WriteX 11371 0 65536 65536 NT_STATUS_OK
WriteX 11371 65536 65536 65536 NT_STATUS_OK
WriteX 11371 131072 65536 65536 NT_STATUS_OK
WriteX 11371 196608 65536 65536 NT_STATUS_OK
WriteX 11371 262144 65536 65536 NT_STATUS_OK
WriteX 11371 327680 65536 65536 NT_STATUS_OK
WriteX 11371 393216 65536 65536 NT_STATUS_OK
WriteX 11371 458752 65536 65536 NT_STATUS_OK
WriteX 11371 524288 65536 65536 NT_STATUS_OK
WriteX 11371 589824 35257 35257 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11376 NT_STATUS_OK
WriteX 11376 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 258 NT_STATUS_OK
WriteX 11376 0 65536 65536 NT_STATUS_OK
WriteX 11376 65536 65536 65536 NT_STATUS_OK
WriteX 11376 131072 65536 65536 NT_STATUS_OK
WriteX 11376 196608 65536 65536 NT_STATUS_OK
WriteX 11376 262144 65536 65536 NT_STATUS_OK
WriteX 11376 327680 65536 65536 NT_STATUS_OK
WriteX 11376 393216 65536 65536 NT_STATUS_OK
WriteX 11376 458752 65536 65536 NT_STATUS_OK
WriteX 11376 524288 65536 65536 NT_STATUS_OK
WriteX 11376 589824 57598 57598 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11378 NT_STATUS_OK
WriteX 11378 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 258 NT_STATUS_OK
WriteX 11378 0 12543 12543 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
Close 11362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11382 NT_STATUS_OK
ReadX 11382 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11384 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1005 NT_STATUS_OK
ReadX 11384 1938 24 24 NT_STATUS_OK
ReadX 11384 1920 276 276 NT_STATUS_OK
ReadX 11384 1918 14 14 NT_STATUS_OK
ReadX 11384 1918 7 7 NT_STATUS_OK
ReadX 11384 1919 12 12 NT_STATUS_OK
ReadX 11384 1919 8 8 NT_STATUS_OK
ReadX 11384 1917 15 15 NT_STATUS_OK
ReadX 11384 0 16 16 NT_STATUS_OK
ReadX 11384 16 2048 2048 NT_STATUS_OK
ReadX 11384 2064 2048 2048 NT_STATUS_OK
ReadX 11384 257 2048 2048 NT_STATUS_OK
ReadX 11384 385 2048 2048 NT_STATUS_OK
ReadX 11384 513 2048 2048 NT_STATUS_OK
ReadX 11384 641 2048 2048 NT_STATUS_OK
ReadX 11384 769 2048 2048 NT_STATUS_OK
ReadX 11384 897 2048 2048 NT_STATUS_OK
ReadX 11384 1025 2048 2048 NT_STATUS_OK
ReadX 11384 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11386 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11389 NT_STATUS_OK
WriteX 11389 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11389 258 NT_STATUS_OK
WriteX 11389 0 11588 11588 NT_STATUS_OK
Flush 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 4096 4096 NT_STATUS_OK
Close 11384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11394 NT_STATUS_OK
WriteX 11394 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11394 258 NT_STATUS_OK
WriteX 11394 0 11615 11615 NT_STATUS_OK
Flush 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11396 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11403 NT_STATUS_OK
WriteX 11403 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 65536 65536 NT_STATUS_OK
WriteX 11403 65536 16050 16050 NT_STATUS_OK
Close 11403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11383 1939 64 64 NT_STATUS_OK
ReadX 11383 128 248 248 NT_STATUS_OK
ReadX 11383 128 568 568 NT_STATUS_OK
ReadX 11383 3872 1536 1536 NT_STATUS_OK
ReadX 11383 3456 2560 2560 NT_STATUS_OK
ReadX 11383 3136 512 512 NT_STATUS_OK
ReadX 11383 2880 4096 4096 NT_STATUS_OK
ReadX 11383 3264 3072 3072 NT_STATUS_OK
ReadX 11383 320 4096 4096 NT_STATUS_OK
ReadX 11383 1024 4096 4096 NT_STATUS_OK
ReadX 11383 3616 4096 4096 NT_STATUS_OK
ReadX 11383 1939 64 64 NT_STATUS_OK
ReadX 11383 128 248 248 NT_STATUS_OK
ReadX 11383 128 608 608 NT_STATUS_OK
ReadX 11383 2858 1024 1024 NT_STATUS_OK
ReadX 11383 2810 4096 4096 NT_STATUS_OK
ReadX 11383 2826 4096 4096 NT_STATUS_OK
ReadX 11383 2580 2048 2048 NT_STATUS_OK
ReadX 11383 2800 2560 2560 NT_STATUS_OK
ReadX 11383 2100 4096 4096 NT_STATUS_OK
ReadX 11383 2084 4096 4096 NT_STATUS_OK
ReadX 11383 868 4096 4096 NT_STATUS_OK
ReadX 11383 2324 4096 4096 NT_STATUS_OK
ReadX 11383 884 4096 4096 NT_STATUS_OK
ReadX 11383 2604 1024 1024 NT_STATUS_OK
ReadX 11383 580 4096 4096 NT_STATUS_OK
ReadX 11383 596 4096 4096 NT_STATUS_OK
ReadX 11383 2752 4096 4096 NT_STATUS_OK
ReadX 11383 2842 1024 1024 NT_STATUS_OK
ReadX 11383 660 4096 4096 NT_STATUS_OK
ReadX 11383 2720 4096 4096 NT_STATUS_OK
ReadX 11383 2736 4096 4096 NT_STATUS_OK
ReadX 11383 628 4096 4096 NT_STATUS_OK
ReadX 11383 2704 4096 4096 NT_STATUS_OK
ReadX 11383 1556 4096 4096 NT_STATUS_OK
ReadX 11383 576 4096 4096 NT_STATUS_OK
ReadX 11383 3168 1536 1536 NT_STATUS_OK
ReadX 11383 832 4096 4096 NT_STATUS_OK
ReadX 11383 1088 4096 4096 NT_STATUS_OK
ReadX 11383 1344 4096 4096 NT_STATUS_OK
ReadX 11383 1600 4096 4096 NT_STATUS_OK
ReadX 11383 1856 4096 4096 NT_STATUS_OK
ReadX 11383 2112 4096 4096 NT_STATUS_OK
ReadX 11383 1892 4096 4096 NT_STATUS_OK
ReadX 11383 820 4096 4096 NT_STATUS_OK
ReadX 11383 788 4096 4096 NT_STATUS_OK
ReadX 11383 1604 4096 4096 NT_STATUS_OK
ReadX 11383 3648 4096 4096 NT_STATUS_OK
ReadX 11383 2608 4096 4096 NT_STATUS_OK
ReadX 11383 548 4096 4096 NT_STATUS_OK
ReadX 11383 740 4096 4096 NT_STATUS_OK
ReadX 11383 1344 4096 4096 NT_STATUS_OK
ReadX 11383 3392 4096 4096 NT_STATUS_OK
ReadX 11383 3904 4096 4096 NT_STATUS_OK
ReadX 11383 644 4096 4096 NT_STATUS_OK
ReadX 11383 676 4096 4096 NT_STATUS_OK
ReadX 11383 2688 4096 4096 NT_STATUS_OK
ReadX 11383 320 4096 4096 NT_STATUS_OK
ReadX 11383 900 4096 4096 NT_STATUS_OK
ReadX 11383 1908 4096 4096 NT_STATUS_OK
ReadX 11383 852 4096 4096 NT_STATUS_OK
ReadX 11383 724 4096 4096 NT_STATUS_OK
ReadX 11383 2292 4096 4096 NT_STATUS_OK
ReadX 11383 612 4096 4096 NT_STATUS_OK
ReadX 11383 388 4096 4096 NT_STATUS_OK
ReadX 11383 2368 4096 4096 NT_STATUS_OK
ReadX 11383 2624 4096 4096 NT_STATUS_OK
ReadX 11383 500 4096 4096 NT_STATUS_OK
ReadX 11383 356 4096 4096 NT_STATUS_OK
ReadX 11383 1024 4096 4096 NT_STATUS_OK
ReadX 11383 576 4096 4096 NT_STATUS_OK
ReadX 11383 340 4096 4096 NT_STATUS_OK
ReadX 11383 420 4096 4096 NT_STATUS_OK
ReadX 11383 1600 4096 4096 NT_STATUS_OK
ReadX 11383 404 4096 4096 NT_STATUS_OK
ReadX 11383 1428 4096 4096 NT_STATUS_OK
ReadX 11383 2656 4096 4096 NT_STATUS_OK
ReadX 11383 2624 4096 4096 NT_STATUS_OK
ReadX 11383 452 4096 4096 NT_STATUS_OK
ReadX 11383 692 4096 4096 NT_STATUS_OK
ReadX 11383 564 4096 4096 NT_STATUS_OK
ReadX 11383 372 4096 4096 NT_STATUS_OK
ReadX 11383 468 4096 4096 NT_STATUS_OK
ReadX 11383 484 4096 4096 NT_STATUS_OK
ReadX 11383 1088 4096 4096 NT_STATUS_OK
ReadX 11383 1924 4096 4096 NT_STATUS_OK
ReadX 11383 2768 4096 4096 NT_STATUS_OK
ReadX 11383 832 4096 4096 NT_STATUS_OK
ReadX 11383 836 4096 4096 NT_STATUS_OK
ReadX 11383 1856 4096 4096 NT_STATUS_OK
ReadX 11383 2640 4096 4096 NT_STATUS_OK
ReadX 11383 436 4096 4096 NT_STATUS_OK
ReadX 11383 1828 4096 4096 NT_STATUS_OK
ReadX 11383 804 4096 4096 NT_STATUS_OK
ReadX 11383 1860 4096 4096 NT_STATUS_OK
ReadX 11383 1812 4096 4096 NT_STATUS_OK
ReadX 11383 756 4096 4096 NT_STATUS_OK
ReadX 11383 1636 4096 4096 NT_STATUS_OK
ReadX 11383 772 4096 4096 NT_STATUS_OK
ReadX 11383 2036 4096 4096 NT_STATUS_OK
ReadX 11383 1220 4096 4096 NT_STATUS_OK
ReadX 11383 1652 4096 4096 NT_STATUS_OK
ReadX 11383 2588 4096 4096 NT_STATUS_OK
ReadX 11383 916 4096 4096 NT_STATUS_OK
ReadX 11383 260 4096 4096 NT_STATUS_OK
ReadX 11383 932 4096 4096 NT_STATUS_OK
ReadX 11383 2624 4096 4096 NT_STATUS_OK
ReadX 11383 308 4096 4096 NT_STATUS_OK
ReadX 11383 292 4096 4096 NT_STATUS_OK
ReadX 11383 1140 4096 4096 NT_STATUS_OK
ReadX 11383 276 4096 4096 NT_STATUS_OK
ReadX 11383 2020 4096 4096 NT_STATUS_OK
ReadX 11383 2880 4096 4096 NT_STATUS_OK
ReadX 11383 516 4096 4096 NT_STATUS_OK
ReadX 11383 1844 4096 4096 NT_STATUS_OK
ReadX 11383 1124 4096 4096 NT_STATUS_OK
ReadX 11383 3136 4096 4096 NT_STATUS_OK
ReadX 11383 324 4096 4096 NT_STATUS_OK
ReadX 11383 1156 4096 4096 NT_STATUS_OK
ReadX 11383 1172 4096 4096 NT_STATUS_OK
ReadX 11383 2112 4096 4096 NT_STATUS_OK
ReadX 11383 2368 4096 4096 NT_STATUS_OK
ReadX 11383 964 4096 4096 NT_STATUS_OK
ReadX 11383 980 4096 4096 NT_STATUS_OK
ReadX 11383 1012 4096 4096 NT_STATUS_OK
ReadX 11383 532 4096 4096 NT_STATUS_OK
ReadX 11383 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11383 1620 4096 4096 NT_STATUS_OK
ReadX 11383 1604 4096 4096 NT_STATUS_OK
ReadX 11383 2116 4096 4096 NT_STATUS_OK
ReadX 11383 2132 4096 4096 NT_STATUS_OK
ReadX 11383 2148 4096 4096 NT_STATUS_OK
ReadX 11383 2276 4096 4096 NT_STATUS_OK
ReadX 11383 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11405 NT_STATUS_OK
Close 11405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11408 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 1004 NT_STATUS_OK
Close 11363 NT_STATUS_OK
WriteX 11408 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 1004 NT_STATUS_OK
Close 11365 NT_STATUS_OK
WriteX 11408 0 65536 65536 NT_STATUS_OK
WriteX 11408 65536 64850 64850 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11410 NT_STATUS_OK
WriteX 11410 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11410 258 NT_STATUS_OK
ReadX 11383 2068 4096 4096 NT_STATUS_OK
ReadX 11383 1588 4096 4096 NT_STATUS_OK
ReadX 11383 1572 4096 4096 NT_STATUS_OK
WriteX 11410 0 18630 18630 NT_STATUS_OK
Flush 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11412 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11383 612 4096 4096 NT_STATUS_OK
ReadX 11383 564 4096 4096 NT_STATUS_OK
ReadX 11383 1876 4096 4096 NT_STATUS_OK
ReadX 11383 628 4096 4096 NT_STATUS_OK
ReadX 11383 740 4096 4096 NT_STATUS_OK
ReadX 11383 724 4096 4096 NT_STATUS_OK
ReadX 11383 644 4096 4096 NT_STATUS_OK
ReadX 11383 2324 4096 4096 NT_STATUS_OK
ReadX 11383 660 4096 4096 NT_STATUS_OK
ReadX 11383 852 4096 4096 NT_STATUS_OK
ReadX 11383 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11383 2368 4096 4096 NT_STATUS_OK
ReadX 11383 1024 4096 4096 NT_STATUS_OK
ReadX 11383 320 4096 4096 NT_STATUS_OK
ReadX 11383 580 4096 4096 NT_STATUS_OK
ReadX 11383 3136 512 512 NT_STATUS_OK
ReadX 11383 2880 4096 4096 NT_STATUS_OK
Close 11383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 61440 4096 4096 NT_STATUS_OK
ReadX 11415 126976 4096 4096 NT_STATUS_OK
WriteX 11415 0 65536 65536 NT_STATUS_OK
WriteX 11415 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 61440 4096 4096 NT_STATUS_OK
ReadX 11416 126976 4096 4096 NT_STATUS_OK
ReadX 11416 192512 4096 4096 NT_STATUS_OK
ReadX 11416 258048 4096 4096 NT_STATUS_OK
WriteX 11416 0 65536 65536 NT_STATUS_OK
WriteX 11416 65536 65536 65536 NT_STATUS_OK
WriteX 11416 131072 65536 65536 NT_STATUS_OK
WriteX 11416 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 61440 4096 4096 NT_STATUS_OK
ReadX 11417 126976 4096 4096 NT_STATUS_OK
ReadX 11417 192512 4096 4096 NT_STATUS_OK
ReadX 11417 258048 4096 4096 NT_STATUS_OK
ReadX 11417 323584 4096 4096 NT_STATUS_OK
ReadX 11417 389120 4096 4096 NT_STATUS_OK
ReadX 11417 454656 4096 4096 NT_STATUS_OK
ReadX 11417 520192 4096 4096 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 65536 65536 NT_STATUS_OK
WriteX 11417 131072 65536 65536 NT_STATUS_OK
WriteX 11417 196608 65536 65536 NT_STATUS_OK
WriteX 11417 262144 65536 65536 NT_STATUS_OK
WriteX 11417 327680 65536 65536 NT_STATUS_OK
WriteX 11417 393216 65536 65536 NT_STATUS_OK
WriteX 11417 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11420 NT_STATUS_OK
WriteX 11420 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11418 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11382 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Close 11417 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11425 NT_STATUS_OK
WriteX 11425 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11425 258 NT_STATUS_OK
WriteX 11425 0 62591 62591 NT_STATUS_OK
Close 11425 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11430 NT_STATUS_OK
WriteX 11430 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11430 258 NT_STATUS_OK
WriteX 11430 0 10845 10845 NT_STATUS_OK
Close 11430 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11435 NT_STATUS_OK
WriteX 11435 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11435 258 NT_STATUS_OK
WriteX 11435 0 30118 30118 NT_STATUS_OK
Close 11435 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
WriteX 11420 0 64 64 NT_STATUS_OK
Close 11420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11418 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 61440 61440 NT_STATUS_OK
ReadX 11437 61440 4096 4096 NT_STATUS_OK
ReadX 11437 65536 61440 61440 NT_STATUS_OK
ReadX 11437 126976 4096 4096 NT_STATUS_OK
ReadX 11437 131072 61440 61440 NT_STATUS_OK
ReadX 11437 192512 4096 4096 NT_STATUS_OK
ReadX 11437 196608 61440 61440 NT_STATUS_OK
ReadX 11437 258048 4096 4096 NT_STATUS_OK
ReadX 11437 262144 61440 61440 NT_STATUS_OK
ReadX 11437 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 61440 61440 NT_STATUS_OK
ReadX 11438 61440 4096 4096 NT_STATUS_OK
ReadX 11438 65536 61440 61440 NT_STATUS_OK
ReadX 11438 126976 4096 4096 NT_STATUS_OK
ReadX 11438 131072 61440 61440 NT_STATUS_OK
ReadX 11438 192512 4096 4096 NT_STATUS_OK
ReadX 11438 196608 61440 61440 NT_STATUS_OK
ReadX 11438 258048 4096 4096 NT_STATUS_OK
ReadX 11438 262144 61440 61440 NT_STATUS_OK
ReadX 11438 323584 4096 4096 NT_STATUS_OK
ReadX 11438 327680 61440 61440 NT_STATUS_OK
ReadX 11438 389120 4096 4096 NT_STATUS_OK
ReadX 11438 393216 61440 61440 NT_STATUS_OK
ReadX 11438 454656 4096 4096 NT_STATUS_OK
ReadX 11438 458752 61440 61440 NT_STATUS_OK
ReadX 11438 520192 4096 4096 NT_STATUS_OK
ReadX 11438 524288 61440 61440 NT_STATUS_OK
ReadX 11438 585728 4096 4096 NT_STATUS_OK
ReadX 11438 589824 61440 61440 NT_STATUS_OK
ReadX 11438 651264 4096 4096 NT_STATUS_OK
ReadX 11438 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 61440 61440 NT_STATUS_OK
ReadX 11439 61440 4096 4096 NT_STATUS_OK
ReadX 11439 65536 61440 61440 NT_STATUS_OK
ReadX 11439 126976 4096 4096 NT_STATUS_OK
ReadX 11439 131072 61440 61440 NT_STATUS_OK
ReadX 11439 192512 4096 4096 NT_STATUS_OK
ReadX 11439 196608 61440 61440 NT_STATUS_OK
ReadX 11439 258048 4096 4096 NT_STATUS_OK
ReadX 11439 262144 61440 61440 NT_STATUS_OK
ReadX 11439 323584 4096 4096 NT_STATUS_OK
ReadX 11439 327680 61440 61440 NT_STATUS_OK
ReadX 11439 389120 4096 4096 NT_STATUS_OK
ReadX 11439 393216 61440 61440 NT_STATUS_OK
ReadX 11439 454656 4096 4096 NT_STATUS_OK
ReadX 11439 458752 61440 61440 NT_STATUS_OK
ReadX 11439 520192 4096 4096 NT_STATUS_OK
ReadX 11439 524288 61440 61440 NT_STATUS_OK
ReadX 11439 585728 4096 4096 NT_STATUS_OK
ReadX 11439 589824 61440 61440 NT_STATUS_OK
ReadX 11439 651264 4096 4096 NT_STATUS_OK
ReadX 11439 655360 61440 61440 NT_STATUS_OK
ReadX 11439 716800 4096 4096 NT_STATUS_OK
ReadX 11439 720896 61440 61440 NT_STATUS_OK
ReadX 11439 782336 4096 4096 NT_STATUS_OK
ReadX 11439 786432 61440 61440 NT_STATUS_OK
ReadX 11439 847872 4096 4096 NT_STATUS_OK
ReadX 11439 851968 61440 61440 NT_STATUS_OK
ReadX 11439 913408 4096 4096 NT_STATUS_OK
ReadX 11439 917504 61440 61440 NT_STATUS_OK
ReadX 11439 978944 4096 4096 NT_STATUS_OK
ReadX 11439 983040 61440 61440 NT_STATUS_OK
ReadX 11439 1044480 4096 4096 NT_STATUS_OK
ReadX 11439 1048576 61440 61440 NT_STATUS_OK
ReadX 11439 1110016 4096 4096 NT_STATUS_OK
ReadX 11439 1114112 61440 61440 NT_STATUS_OK
ReadX 11439 1175552 4096 4096 NT_STATUS_OK
ReadX 11439 1179648 61440 61440 NT_STATUS_OK
ReadX 11439 1241088 4096 4096 NT_STATUS_OK
ReadX 11439 1245184 61440 61440 NT_STATUS_OK
ReadX 11439 1306624 4096 4096 NT_STATUS_OK
ReadX 11439 1310720 61440 61440 NT_STATUS_OK
ReadX 11439 1372160 4096 4096 NT_STATUS_OK
ReadX 11439 1376256 61440 61440 NT_STATUS_OK
ReadX 11439 1437696 4096 4096 NT_STATUS_OK
ReadX 11439 1441792 61440 61440 NT_STATUS_OK
ReadX 11439 1503232 4096 4096 NT_STATUS_OK
ReadX 11439 1507328 61440 61440 NT_STATUS_OK
ReadX 11439 1568768 4096 4096 NT_STATUS_OK
ReadX 11439 1572864 61440 61440 NT_STATUS_OK
ReadX 11439 1634304 4096 4096 NT_STATUS_OK
ReadX 11439 1638400 61440 61440 NT_STATUS_OK
ReadX 11439 1699840 4096 4096 NT_STATUS_OK
ReadX 11439 1703936 61440 61440 NT_STATUS_OK
ReadX 11439 1765376 4096 4096 NT_STATUS_OK
ReadX 11439 1769472 61440 61440 NT_STATUS_OK
ReadX 11439 1830912 4096 4096 NT_STATUS_OK
ReadX 11439 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11440 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
ReadX 11444 4096 4096 4096 NT_STATUS_OK
ReadX 11444 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11448 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11449 NT_STATUS_OK
Close 11449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 8192 8192 NT_STATUS_OK
ReadX 11452 8192 8192 8192 NT_STATUS_OK
ReadX 11452 16384 8192 8192 NT_STATUS_OK
ReadX 11452 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11454 NT_STATUS_OK
Close 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11457 NT_STATUS_OK
WriteX 11457 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11457 258 NT_STATUS_OK
WriteX 11457 0 10438 10438 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11458 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11460 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11461 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11463 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
ReadX 11466 4096 4096 4096 NT_STATUS_OK
ReadX 11466 8192 4096 4096 NT_STATUS_OK
ReadX 11466 12288 8192 8192 NT_STATUS_OK
ReadX 11466 20480 8192 8192 NT_STATUS_OK
ReadX 11466 28672 8192 8192 NT_STATUS_OK
ReadX 11466 36864 8192 8192 NT_STATUS_OK
ReadX 11466 45056 8192 8192 NT_STATUS_OK
ReadX 11466 53248 8192 8192 NT_STATUS_OK
ReadX 11466 61440 8192 8192 NT_STATUS_OK
ReadX 11466 69632 8192 8192 NT_STATUS_OK
ReadX 11466 77824 8192 8192 NT_STATUS_OK
ReadX 11466 86016 8192 8192 NT_STATUS_OK
ReadX 11466 94208 8192 8192 NT_STATUS_OK
ReadX 11466 102400 8192 8192 NT_STATUS_OK
ReadX 11466 110592 8192 8192 NT_STATUS_OK
ReadX 11466 118784 8192 8192 NT_STATUS_OK
ReadX 11466 126976 8192 8192 NT_STATUS_OK
ReadX 11466 135168 8192 8192 NT_STATUS_OK
ReadX 11466 143360 8192 8192 NT_STATUS_OK
ReadX 11466 151552 8192 8192 NT_STATUS_OK
ReadX 11466 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11459 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11468 NT_STATUS_OK
Close 11468 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11471 NT_STATUS_OK
WriteX 11471 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 258 NT_STATUS_OK
WriteX 11471 0 28489 28489 NT_STATUS_OK
Close 11471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11474 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 8192 8192 NT_STATUS_OK
ReadX 11478 8192 8192 8192 NT_STATUS_OK
ReadX 11478 16384 8192 8192 NT_STATUS_OK
ReadX 11478 24576 8192 8192 NT_STATUS_OK
ReadX 11478 32768 16384 16384 NT_STATUS_OK
ReadX 11478 49152 8192 8192 NT_STATUS_OK
ReadX 11478 57344 8192 8192 NT_STATUS_OK
ReadX 11478 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11480 NT_STATUS_OK
Close 11480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11477 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11483 NT_STATUS_OK
WriteX 11483 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11483 258 NT_STATUS_OK
WriteX 11483 0 29253 29253 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11487 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11490 NT_STATUS_OK
WriteX 11490 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11490 258 NT_STATUS_OK
WriteX 11490 0 30183 30183 NT_STATUS_OK
Close 11490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11493 NT_STATUS_OK
WriteX 11493 0 510 510 NT_STATUS_OK
WriteX 11493 510 512 512 NT_STATUS_OK
WriteX 11493 1022 510 510 NT_STATUS_OK
WriteX 11493 1532 510 510 NT_STATUS_OK
WriteX 11493 2042 168 168 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 0 4096 4096 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 61440 4096 4096 NT_STATUS_OK
ReadX 11497 126976 4096 4096 NT_STATUS_OK
WriteX 11497 0 65536 65536 NT_STATUS_OK
WriteX 11497 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 61440 4096 4096 NT_STATUS_OK
ReadX 11498 126976 4096 4096 NT_STATUS_OK
ReadX 11498 192512 4096 4096 NT_STATUS_OK
ReadX 11498 258048 4096 4096 NT_STATUS_OK
WriteX 11498 0 65536 65536 NT_STATUS_OK
WriteX 11498 65536 65536 65536 NT_STATUS_OK
WriteX 11498 131072 65536 65536 NT_STATUS_OK
WriteX 11498 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 61440 4096 4096 NT_STATUS_OK
ReadX 11499 126976 4096 4096 NT_STATUS_OK
ReadX 11499 192512 4096 4096 NT_STATUS_OK
ReadX 11499 258048 4096 4096 NT_STATUS_OK
ReadX 11499 323584 4096 4096 NT_STATUS_OK
ReadX 11499 389120 4096 4096 NT_STATUS_OK
ReadX 11499 454656 4096 4096 NT_STATUS_OK
ReadX 11499 520192 4096 4096 NT_STATUS_OK
WriteX 11499 0 65536 65536 NT_STATUS_OK
WriteX 11499 65536 65536 65536 NT_STATUS_OK
WriteX 11499 131072 65536 65536 NT_STATUS_OK
WriteX 11499 196608 65536 65536 NT_STATUS_OK
WriteX 11499 262144 65536 65536 NT_STATUS_OK
WriteX 11499 327680 65536 65536 NT_STATUS_OK
WriteX 11499 393216 65536 65536 NT_STATUS_OK
WriteX 11499 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11496 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11506 NT_STATUS_OK
Close 11506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11509 NT_STATUS_OK
Close 11509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11511 NT_STATUS_OK
Close 11511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11515 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11549 NT_STATUS_OK
Close 11549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11554 NT_STATUS_OK
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11568 NT_STATUS_OK
WriteX 11568 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11568 0 65536 65536 NT_STATUS_OK
WriteX 11568 65536 65536 65536 NT_STATUS_OK
WriteX 11568 131072 65536 65536 NT_STATUS_OK
WriteX 11568 196608 65536 65536 NT_STATUS_OK
WriteX 11568 262144 26634 26634 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11574 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 0 4096 4096 NT_STATUS_OK
ReadX 11576 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11638 NT_STATUS_OK
Close 11638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11653 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
Close 11655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
Close 11656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11700 0 4096 4096 NT_STATUS_OK
Close 11700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
ReadX 11702 4096 4096 4096 NT_STATUS_OK
ReadX 11702 8192 4096 4096 NT_STATUS_OK
ReadX 11702 12288 4096 4096 NT_STATUS_OK
ReadX 11702 16384 4096 4096 NT_STATUS_OK
ReadX 11702 20480 4096 4096 NT_STATUS_OK
ReadX 11702 24576 4096 4096 NT_STATUS_OK
ReadX 11702 28672 4096 4096 NT_STATUS_OK
ReadX 11702 32768 4096 4096 NT_STATUS_OK
ReadX 11702 36864 4096 4096 NT_STATUS_OK
ReadX 11702 40960 4096 4096 NT_STATUS_OK
ReadX 11702 45056 4096 4096 NT_STATUS_OK
ReadX 11702 49152 4096 4096 NT_STATUS_OK
ReadX 11702 53248 4096 4096 NT_STATUS_OK
ReadX 11702 57344 4096 4096 NT_STATUS_OK
ReadX 11702 61440 4096 4096 NT_STATUS_OK
ReadX 11702 65536 4096 4096 NT_STATUS_OK
ReadX 11702 69632 4096 4096 NT_STATUS_OK
ReadX 11702 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11702 1004 NT_STATUS_OK
WriteX 11702 0 4096 4096 NT_STATUS_OK
Close 11702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11703 NT_STATUS_OK
SET_FILE_INFORMATION 11703 1004 NT_STATUS_OK
Close 11703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11705 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11708 NT_STATUS_OK
WriteX 11708 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11708 258 NT_STATUS_OK
WriteX 11708 0 65536 65536 NT_STATUS_OK
WriteX 11708 65536 19979 19979 NT_STATUS_OK
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
SET_FILE_INFORMATION 11709 1004 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
Close 11709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11714 1004 NT_STATUS_OK
WriteX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11720 NT_STATUS_OK
WriteX 11720 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 258 NT_STATUS_OK
WriteX 11720 0 65536 65536 NT_STATUS_OK
WriteX 11720 65536 17654 17654 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
QUERY_FILE_INFORMATION 11721 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
SET_FILE_INFORMATION 11721 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11722 NT_STATUS_OK
SET_FILE_INFORMATION 11722 1004 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11724 NT_STATUS_OK
Close 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
ReadX 11726 4096 4096 4096 NT_STATUS_OK
ReadX 11726 8192 4096 4096 NT_STATUS_OK
ReadX 11726 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11726 16384 4096 4096 NT_STATUS_OK
ReadX 11726 20480 4096 4096 NT_STATUS_OK
ReadX 11726 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
Close 11727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
Close 11728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11729 NT_STATUS_OK
ReadX 11729 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11730 NT_STATUS_OK
Close 11730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11732 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11735 NT_STATUS_OK
WriteX 11735 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 258 NT_STATUS_OK
WriteX 11735 0 65536 65536 NT_STATUS_OK
WriteX 11735 65536 19490 19490 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 1004 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
SET_FILE_INFORMATION 11736 1004 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11737 NT_STATUS_OK
SET_FILE_INFORMATION 11737 1004 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11739 NT_STATUS_OK
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11741 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
ReadX 11743 4096 4096 4096 NT_STATUS_OK
ReadX 11743 8192 4096 4096 NT_STATUS_OK
ReadX 11743 12288 4096 4096 NT_STATUS_OK
ReadX 11743 16384 4096 4096 NT_STATUS_OK
ReadX 11743 20480 4096 4096 NT_STATUS_OK
ReadX 11743 24576 4096 4096 NT_STATUS_OK
ReadX 11743 28672 4096 4096 NT_STATUS_OK
ReadX 11743 32768 4096 4096 NT_STATUS_OK
ReadX 11743 36864 4096 4096 NT_STATUS_OK
ReadX 11743 40960 4096 4096 NT_STATUS_OK
ReadX 11743 45056 4096 4096 NT_STATUS_OK
ReadX 11743 49152 4096 4096 NT_STATUS_OK
ReadX 11743 53248 4096 4096 NT_STATUS_OK
ReadX 11743 57344 4096 4096 NT_STATUS_OK
ReadX 11743 61440 4096 4096 NT_STATUS_OK
ReadX 11743 65536 4096 4096 NT_STATUS_OK
ReadX 11743 69632 4096 4096 NT_STATUS_OK
ReadX 11743 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11743 1004 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11744 NT_STATUS_OK
SET_FILE_INFORMATION 11744 1004 NT_STATUS_OK
Close 11744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11749 NT_STATUS_OK
WriteX 11749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11749 258 NT_STATUS_OK
WriteX 11749 0 65536 65536 NT_STATUS_OK
WriteX 11749 65536 8866 8866 NT_STATUS_OK
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
SET_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
Close 11752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
Close 11753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11754 1004 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11755 NT_STATUS_OK
Close 11755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11757 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11760 NT_STATUS_OK
WriteX 11760 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11760 258 NT_STATUS_OK
WriteX 11760 0 65536 65536 NT_STATUS_OK
WriteX 11760 65536 9298 9298 NT_STATUS_OK
Close 11760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
WriteX 11761 0 4096 4096 NT_STATUS_OK
Flush 11761 NT_STATUS_OK
SET_FILE_INFORMATION 11761 1004 NT_STATUS_OK
WriteX 11761 0 4096 4096 NT_STATUS_OK
Flush 11761 NT_STATUS_OK
Close 11761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11762 NT_STATUS_OK
SET_FILE_INFORMATION 11762 1004 NT_STATUS_OK
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11767 0 4096 4096 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11768 4096 4096 4096 NT_STATUS_OK
ReadX 11768 8192 4096 4096 NT_STATUS_OK
ReadX 11768 12288 4096 4096 NT_STATUS_OK
ReadX 11768 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 4096 4096 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 4096 4096 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11771 1004 NT_STATUS_OK
WriteX 11771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11772 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11774 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11777 NT_STATUS_OK
WriteX 11777 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
WriteX 11777 0 65536 65536 NT_STATUS_OK
WriteX 11777 65536 11540 11540 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
SET_FILE_INFORMATION 11778 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11779 NT_STATUS_OK
SET_FILE_INFORMATION 11779 1004 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 61440 4096 4096 NT_STATUS_OK
ReadX 11783 126976 4096 4096 NT_STATUS_OK
WriteX 11783 0 65536 65536 NT_STATUS_OK
WriteX 11783 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 61440 4096 4096 NT_STATUS_OK
ReadX 11784 126976 4096 4096 NT_STATUS_OK
ReadX 11784 192512 4096 4096 NT_STATUS_OK
ReadX 11784 258048 4096 4096 NT_STATUS_OK
WriteX 11784 0 65536 65536 NT_STATUS_OK
WriteX 11784 65536 65536 65536 NT_STATUS_OK
WriteX 11784 131072 65536 65536 NT_STATUS_OK
WriteX 11784 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 61440 4096 4096 NT_STATUS_OK
ReadX 11785 126976 4096 4096 NT_STATUS_OK
ReadX 11785 192512 4096 4096 NT_STATUS_OK
ReadX 11785 258048 4096 4096 NT_STATUS_OK
ReadX 11785 323584 4096 4096 NT_STATUS_OK
ReadX 11785 389120 4096 4096 NT_STATUS_OK
ReadX 11785 454656 4096 4096 NT_STATUS_OK
ReadX 11785 520192 4096 4096 NT_STATUS_OK
WriteX 11785 0 65536 65536 NT_STATUS_OK
WriteX 11785 65536 65536 65536 NT_STATUS_OK
WriteX 11785 131072 65536 65536 NT_STATUS_OK
WriteX 11785 196608 65536 65536 NT_STATUS_OK
WriteX 11785 262144 65536 65536 NT_STATUS_OK
WriteX 11785 327680 65536 65536 NT_STATUS_OK
WriteX 11785 393216 65536 65536 NT_STATUS_OK
WriteX 11785 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
ReadX 11786 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11787 NT_STATUS_OK
WriteX 11787 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11787 258 NT_STATUS_OK
WriteX 11787 0 53 53 NT_STATUS_OK
Close 11787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11786 8192 4096 4096 NT_STATUS_OK
ReadX 11786 12288 4096 4096 NT_STATUS_OK
WriteX 11790 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11790 258 NT_STATUS_OK
ReadX 11786 16384 4096 4096 NT_STATUS_OK
ReadX 11786 20480 4096 4096 NT_STATUS_OK
WriteX 11790 0 15360 15360 NT_STATUS_OK
Close 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11791 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11791 1004 NT_STATUS_OK
WriteX 11791 0 4096 4096 NT_STATUS_OK
Close 11791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11795 NT_STATUS_OK
Close 11795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11794 4096 4096 4096 NT_STATUS_OK
ReadX 11794 8192 4096 4096 NT_STATUS_OK
ReadX 11794 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
ReadX 11797 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
ReadX 11798 4096 4096 4096 NT_STATUS_OK
ReadX 11798 8192 4096 4096 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11799 NT_STATUS_OK
WriteX 11799 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11799 258 NT_STATUS_OK
WriteX 11799 0 15360 15360 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11804 NT_STATUS_OK
SET_FILE_INFORMATION 11804 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
WriteX 11800 0 4096 4096 NT_STATUS_OK
Close 11800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 0 4096 4096 NT_STATUS_OK
ReadX 11807 4096 4096 4096 NT_STATUS_OK
ReadX 11807 8192 4096 4096 NT_STATUS_OK
ReadX 11807 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11807 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11807 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11809 NT_STATUS_OK
WriteX 11809 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 258 NT_STATUS_OK
WriteX 11809 0 53 53 NT_STATUS_OK
Close 11809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11808 4096 4096 4096 NT_STATUS_OK
ReadX 11808 8192 4096 4096 NT_STATUS_OK
ReadX 11808 12288 4096 4096 NT_STATUS_OK
WriteX 11812 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 258 NT_STATUS_OK
WriteX 11812 0 12006 12006 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
WriteX 11813 0 4096 4096 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11817 NT_STATUS_OK
Close 11817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11816 4096 4096 4096 NT_STATUS_OK
ReadX 11816 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11819 NT_STATUS_OK
WriteX 11819 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 258 NT_STATUS_OK
WriteX 11819 0 11991 11991 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11824 NT_STATUS_OK
WriteX 11807 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11824 1004 NT_STATUS_OK
Close 11824 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11825 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11827 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
ReadX 11827 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
Close 11803 NT_STATUS_OK
WriteX 11827 0 12288 12288 NT_STATUS_OK
Close 11823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 61440 61440 NT_STATUS_OK
ReadX 11834 61440 4096 4096 NT_STATUS_OK
ReadX 11834 65536 61440 61440 NT_STATUS_OK
ReadX 11834 126976 4096 4096 NT_STATUS_OK
ReadX 11834 131072 61440 61440 NT_STATUS_OK
ReadX 11834 192512 4096 4096 NT_STATUS_OK
ReadX 11834 196608 61440 61440 NT_STATUS_OK
ReadX 11834 258048 4096 4096 NT_STATUS_OK
ReadX 11834 262144 61440 61440 NT_STATUS_OK
ReadX 11834 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 61440 61440 NT_STATUS_OK
ReadX 11835 61440 4096 4096 NT_STATUS_OK
ReadX 11835 65536 61440 61440 NT_STATUS_OK
ReadX 11835 126976 4096 4096 NT_STATUS_OK
ReadX 11835 131072 61440 61440 NT_STATUS_OK
ReadX 11835 192512 4096 4096 NT_STATUS_OK
ReadX 11835 196608 61440 61440 NT_STATUS_OK
ReadX 11835 258048 4096 4096 NT_STATUS_OK
ReadX 11835 262144 61440 61440 NT_STATUS_OK
ReadX 11835 323584 4096 4096 NT_STATUS_OK
ReadX 11835 327680 61440 61440 NT_STATUS_OK
ReadX 11835 389120 4096 4096 NT_STATUS_OK
ReadX 11835 393216 61440 61440 NT_STATUS_OK
ReadX 11835 454656 4096 4096 NT_STATUS_OK
ReadX 11835 458752 61440 61440 NT_STATUS_OK
ReadX 11835 520192 4096 4096 NT_STATUS_OK
ReadX 11835 524288 61440 61440 NT_STATUS_OK
ReadX 11835 585728 4096 4096 NT_STATUS_OK
ReadX 11835 589824 61440 61440 NT_STATUS_OK
ReadX 11835 651264 4096 4096 NT_STATUS_OK
ReadX 11835 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 61440 61440 NT_STATUS_OK
ReadX 11836 61440 4096 4096 NT_STATUS_OK
ReadX 11836 65536 61440 61440 NT_STATUS_OK
ReadX 11836 126976 4096 4096 NT_STATUS_OK
ReadX 11836 131072 61440 61440 NT_STATUS_OK
ReadX 11836 192512 4096 4096 NT_STATUS_OK
ReadX 11836 196608 61440 61440 NT_STATUS_OK
ReadX 11836 258048 4096 4096 NT_STATUS_OK
ReadX 11836 262144 61440 61440 NT_STATUS_OK
ReadX 11836 323584 4096 4096 NT_STATUS_OK
ReadX 11836 327680 61440 61440 NT_STATUS_OK
ReadX 11836 389120 4096 4096 NT_STATUS_OK
ReadX 11836 393216 61440 61440 NT_STATUS_OK
ReadX 11836 454656 4096 4096 NT_STATUS_OK
ReadX 11836 458752 61440 61440 NT_STATUS_OK
ReadX 11836 520192 4096 4096 NT_STATUS_OK
ReadX 11836 524288 61440 61440 NT_STATUS_OK
ReadX 11836 585728 4096 4096 NT_STATUS_OK
ReadX 11836 589824 61440 61440 NT_STATUS_OK
ReadX 11836 651264 4096 4096 NT_STATUS_OK
ReadX 11836 655360 61440 61440 NT_STATUS_OK
ReadX 11836 716800 4096 4096 NT_STATUS_OK
ReadX 11836 720896 61440 61440 NT_STATUS_OK
ReadX 11836 782336 4096 4096 NT_STATUS_OK
ReadX 11836 786432 61440 61440 NT_STATUS_OK
ReadX 11836 847872 4096 4096 NT_STATUS_OK
ReadX 11836 851968 61440 61440 NT_STATUS_OK
ReadX 11836 913408 4096 4096 NT_STATUS_OK
ReadX 11836 917504 61440 61440 NT_STATUS_OK
ReadX 11836 978944 4096 4096 NT_STATUS_OK
ReadX 11836 983040 61440 61440 NT_STATUS_OK
ReadX 11836 1044480 4096 4096 NT_STATUS_OK
ReadX 11836 1048576 61440 61440 NT_STATUS_OK
ReadX 11836 1110016 4096 4096 NT_STATUS_OK
ReadX 11836 1114112 61440 61440 NT_STATUS_OK
ReadX 11836 1175552 4096 4096 NT_STATUS_OK
ReadX 11836 1179648 61440 61440 NT_STATUS_OK
ReadX 11836 1241088 4096 4096 NT_STATUS_OK
ReadX 11836 1245184 61440 61440 NT_STATUS_OK
ReadX 11836 1306624 4096 4096 NT_STATUS_OK
ReadX 11836 1310720 61440 61440 NT_STATUS_OK
ReadX 11836 1372160 4096 4096 NT_STATUS_OK
ReadX 11836 1376256 61440 61440 NT_STATUS_OK
ReadX 11836 1437696 4096 4096 NT_STATUS_OK
ReadX 11836 1441792 61440 61440 NT_STATUS_OK
ReadX 11836 1503232 4096 4096 NT_STATUS_OK
ReadX 11836 1507328 61440 61440 NT_STATUS_OK
ReadX 11836 1568768 4096 4096 NT_STATUS_OK
ReadX 11836 1572864 61440 61440 NT_STATUS_OK
ReadX 11836 1634304 4096 4096 NT_STATUS_OK
ReadX 11836 1638400 61440 61440 NT_STATUS_OK
ReadX 11836 1699840 4096 4096 NT_STATUS_OK
ReadX 11836 1703936 61440 61440 NT_STATUS_OK
ReadX 11836 1765376 4096 4096 NT_STATUS_OK
ReadX 11836 1769472 61440 61440 NT_STATUS_OK
ReadX 11836 1830912 4096 4096 NT_STATUS_OK
ReadX 11836 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11843 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 1004 NT_STATUS_OK
WriteX 11843 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11845 NT_STATUS_OK
WriteX 11845 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 491 491 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11843 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11848 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11849 NT_STATUS_OK
WriteX 11849 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 258 NT_STATUS_OK
WriteX 11849 0 543 543 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11840 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11863 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
WriteX 11863 0 2048 2048 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11864 0 4096 4096 NT_STATUS_OK
Flush 11864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11869 NT_STATUS_OK
WriteX 11869 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 258 NT_STATUS_OK
WriteX 11869 0 2048 2048 NT_STATUS_OK
Close 11869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11875 NT_STATUS_OK
WriteX 11875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11875 258 NT_STATUS_OK
WriteX 11875 0 2048 2048 NT_STATUS_OK
Close 11875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 2048 2048 NT_STATUS_OK
ReadX 11854 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
WriteX 11854 0 8192 8192 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
WriteX 11856 0 4096 4096 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11879 NT_STATUS_OK
ReadX 11879 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11900 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 1004 NT_STATUS_OK
WriteX 11900 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 258 NT_STATUS_OK
WriteX 11900 0 2048 2048 NT_STATUS_OK
Close 11900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11908 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1004 NT_STATUS_OK
WriteX 11908 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 258 NT_STATUS_OK
WriteX 11908 0 2048 2048 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11901 0 4096 4096 NT_STATUS_OK
Flush 11901 NT_STATUS_OK
WriteX 11909 0 4096 4096 NT_STATUS_OK
Flush 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11901 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11909 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11903 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11911 NT_STATUS_OK
WriteX 11911 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11911 258 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11914 NT_STATUS_OK
WriteX 11914 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 258 NT_STATUS_OK
WriteX 11914 0 4096 4096 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11915 0 4096 4096 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11922 NT_STATUS_OK
WriteX 11922 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 258 NT_STATUS_OK
WriteX 11922 0 2048 2048 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11934 NT_STATUS_OK
ReadX 11934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11935 NT_STATUS_OK
ReadX 11935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11937 NT_STATUS_OK
QUERY_FILE_INFORMATION 11937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11920 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11928 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11939 NT_STATUS_OK
QUERY_FILE_INFORMATION 11939 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11951 NT_STATUS_OK
ReadX 11951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11959 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 1004 NT_STATUS_OK
WriteX 11959 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 258 NT_STATUS_OK
WriteX 11959 0 2048 2048 NT_STATUS_OK
Close 11959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11971 NT_STATUS_OK
QUERY_FILE_INFORMATION 11971 1004 NT_STATUS_OK
WriteX 11971 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11971 258 NT_STATUS_OK
WriteX 11971 0 2048 2048 NT_STATUS_OK
Close 11971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11979 NT_STATUS_OK
QUERY_FILE_INFORMATION 11979 1004 NT_STATUS_OK
WriteX 11979 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11979 258 NT_STATUS_OK
WriteX 11979 0 2048 2048 NT_STATUS_OK
Close 11979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
WriteX 11972 0 4096 4096 NT_STATUS_OK
Flush 11972 NT_STATUS_OK
WriteX 11980 0 4096 4096 NT_STATUS_OK
Flush 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11962 4096 16384 16384 NT_STATUS_OK
ReadX 11942 4096 16384 16384 NT_STATUS_OK
ReadX 11974 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11981 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 2048 2048 NT_STATUS_OK
WriteX 11982 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11983 NT_STATUS_OK
QUERY_FILE_INFORMATION 11983 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11954 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11951 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11987 NT_STATUS_OK
QUERY_FILE_INFORMATION 11987 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11990 4096 16384 16384 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
WriteX 11991 0 4096 4096 NT_STATUS_OK
WriteX 11992 0 4096 4096 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12003 NT_STATUS_OK
ReadX 12003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 0 8192 8192 NT_STATUS_OK
ReadX 11996 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12010 0 4096 4096 NT_STATUS_OK
ReadX 12010 4096 4096 4096 NT_STATUS_OK
ReadX 12010 8192 4096 4096 NT_STATUS_OK
WriteX 11996 0 4096 4096 NT_STATUS_OK
WriteX 11997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
ReadX 12011 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
WriteX 11991 0 4096 4096 NT_STATUS_OK
WriteX 11992 0 4096 4096 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12016 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 1004 NT_STATUS_OK
WriteX 12016 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 258 NT_STATUS_OK
WriteX 12016 0 2048 2048 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
ReadX 12019 4096 4096 4096 NT_STATUS_OK
WriteX 12019 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 0 4096 4096 NT_STATUS_OK
ReadX 12021 4096 4096 4096 NT_STATUS_OK
WriteX 12021 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12022 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Close 11994 NT_STATUS_OK
Close 11990 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12003 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12024 0 4096 4096 NT_STATUS_OK
ReadX 12024 4096 4096 4096 NT_STATUS_OK
ReadX 12024 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12026 NT_STATUS_OK
ReadX 12026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12027 NT_STATUS_OK
ReadX 12027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12028 NT_STATUS_OK
ReadX 12028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
ReadX 12025 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12042 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 258 NT_STATUS_OK
WriteX 12042 0 2048 2048 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12043 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12047 NT_STATUS_OK
Close 12047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12048 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 1004 NT_STATUS_OK
WriteX 12048 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 258 NT_STATUS_OK
WriteX 12048 0 2048 2048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12032 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12050 NT_STATUS_OK
QUERY_FILE_INFORMATION 12050 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12037 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Close 12026 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12027 NT_STATUS_OK
Close 12028 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Close 12033 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12052 NT_STATUS_OK
QUERY_FILE_INFORMATION 12052 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 61440 4096 4096 NT_STATUS_OK
ReadX 12054 126976 4096 4096 NT_STATUS_OK
WriteX 12054 0 65536 65536 NT_STATUS_OK
WriteX 12054 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 61440 4096 4096 NT_STATUS_OK
ReadX 12055 126976 4096 4096 NT_STATUS_OK
ReadX 12055 192512 4096 4096 NT_STATUS_OK
ReadX 12055 258048 4096 4096 NT_STATUS_OK
WriteX 12055 0 65536 65536 NT_STATUS_OK
WriteX 12055 65536 65536 65536 NT_STATUS_OK
WriteX 12055 131072 65536 65536 NT_STATUS_OK
WriteX 12055 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 61440 4096 4096 NT_STATUS_OK
ReadX 12056 126976 4096 4096 NT_STATUS_OK
ReadX 12056 192512 4096 4096 NT_STATUS_OK
ReadX 12056 258048 4096 4096 NT_STATUS_OK
ReadX 12056 323584 4096 4096 NT_STATUS_OK
ReadX 12056 389120 4096 4096 NT_STATUS_OK
ReadX 12056 454656 4096 4096 NT_STATUS_OK
ReadX 12056 520192 4096 4096 NT_STATUS_OK
WriteX 12056 0 65536 65536 NT_STATUS_OK
WriteX 12056 65536 65536 65536 NT_STATUS_OK
WriteX 12056 131072 65536 65536 NT_STATUS_OK
WriteX 12056 196608 65536 65536 NT_STATUS_OK
WriteX 12056 262144 65536 65536 NT_STATUS_OK
WriteX 12056 327680 65536 65536 NT_STATUS_OK
WriteX 12056 393216 65536 65536 NT_STATUS_OK
WriteX 12056 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12057 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12057 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12057 8192 4096 4096 NT_STATUS_OK
ReadX 12057 12288 4096 4096 NT_STATUS_OK
ReadX 12057 16384 4096 4096 NT_STATUS_OK
ReadX 12057 20480 4096 4096 NT_STATUS_OK
ReadX 12057 24576 4096 4096 NT_STATUS_OK
ReadX 12057 28672 4096 4096 NT_STATUS_OK
ReadX 12057 32768 4096 4096 NT_STATUS_OK
ReadX 12057 36864 4096 4096 NT_STATUS_OK
ReadX 12057 40960 4096 4096 NT_STATUS_OK
ReadX 12057 45056 4096 4096 NT_STATUS_OK
ReadX 12057 49152 4096 4096 NT_STATUS_OK
ReadX 12057 53248 4096 4096 NT_STATUS_OK
ReadX 12057 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12057 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12060 NT_STATUS_OK
WriteX 12060 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12060 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12060 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12060 1004 NT_STATUS_OK
WriteX 12060 0 57088 57088 NT_STATUS_OK
WriteX 12060 0 4096 4096 NT_STATUS_OK
Flush 12060 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12061 NT_STATUS_OK
SET_FILE_INFORMATION 12061 1004 NT_STATUS_OK
Close 12061 NT_STATUS_OK
SET_FILE_INFORMATION 12060 1004 NT_STATUS_OK
WriteX 12060 0 4096 4096 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12062 NT_STATUS_OK
Close 12062 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12064 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12065 NT_STATUS_OK
WriteX 12065 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12065 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12065 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
WriteX 12065 0 51456 51456 NT_STATUS_OK
WriteX 12065 0 4096 4096 NT_STATUS_OK
Flush 12065 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
WriteX 12065 0 4096 4096 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12069 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12074 NT_STATUS_OK
WriteX 12074 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12074 258 NT_STATUS_OK
WriteX 12074 0 53077 53077 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12075 NT_STATUS_OK
WriteX 12075 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12075 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 65536 65536 NT_STATUS_OK
WriteX 12075 65536 1856 1856 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Flush 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12079 NT_STATUS_OK
ReadX 12079 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12081 NT_STATUS_OK
Close 12081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12084 NT_STATUS_OK
WriteX 12084 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 258 NT_STATUS_OK
WriteX 12084 0 7983 7983 NT_STATUS_OK
Close 12084 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12089 NT_STATUS_OK
WriteX 12089 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12089 258 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 65536 65536 NT_STATUS_OK
WriteX 12089 131072 65536 65536 NT_STATUS_OK
WriteX 12089 196608 65536 65536 NT_STATUS_OK
WriteX 12089 262144 65536 65536 NT_STATUS_OK
WriteX 12089 327680 65536 65536 NT_STATUS_OK
WriteX 12089 393216 65536 65536 NT_STATUS_OK
WriteX 12089 458752 46731 46731 NT_STATUS_OK
Close 12089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12090 NT_STATUS_OK
WriteX 12090 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12079 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12090 1004 NT_STATUS_OK
WriteX 12090 0 65536 65536 NT_STATUS_OK
WriteX 12090 65536 22848 22848 NT_STATUS_OK
WriteX 12090 0 4096 4096 NT_STATUS_OK
Flush 12090 NT_STATUS_OK
SET_FILE_INFORMATION 12090 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12090 1004 NT_STATUS_OK
WriteX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12094 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12095 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12095 1004 NT_STATUS_OK
ReadX 12095 8192 4096 4096 NT_STATUS_OK
ReadX 12095 12288 4096 4096 NT_STATUS_OK
ReadX 12095 16384 4096 4096 NT_STATUS_OK
ReadX 12095 20480 4096 4096 NT_STATUS_OK
ReadX 12095 24576 4096 4096 NT_STATUS_OK
ReadX 12095 28672 4096 4096 NT_STATUS_OK
ReadX 12095 32768 4096 4096 NT_STATUS_OK
ReadX 12095 36864 4096 4096 NT_STATUS_OK
ReadX 12095 40960 4096 4096 NT_STATUS_OK
ReadX 12095 45056 4096 4096 NT_STATUS_OK
ReadX 12095 49152 4096 4096 NT_STATUS_OK
ReadX 12095 53248 4096 4096 NT_STATUS_OK
ReadX 12095 57344 4096 4096 NT_STATUS_OK
ReadX 12095 61440 4096 4096 NT_STATUS_OK
ReadX 12095 65536 4096 4096 NT_STATUS_OK
ReadX 12095 69632 4096 4096 NT_STATUS_OK
ReadX 12095 73728 4096 4096 NT_STATUS_OK
ReadX 12095 77824 4096 4096 NT_STATUS_OK
ReadX 12095 81920 4096 4096 NT_STATUS_OK
ReadX 12095 86016 4096 4096 NT_STATUS_OK
ReadX 12095 90112 4096 4096 NT_STATUS_OK
ReadX 12095 94208 4096 4096 NT_STATUS_OK
ReadX 12095 98304 4096 4096 NT_STATUS_OK
ReadX 12095 102400 4096 4096 NT_STATUS_OK
ReadX 12095 106496 4096 4096 NT_STATUS_OK
ReadX 12095 110592 4096 4096 NT_STATUS_OK
ReadX 12095 114688 4096 4096 NT_STATUS_OK
ReadX 12095 118784 4096 4096 NT_STATUS_OK
ReadX 12095 122880 4096 4096 NT_STATUS_OK
ReadX 12095 126976 4096 4096 NT_STATUS_OK
ReadX 12095 131072 4096 4096 NT_STATUS_OK
ReadX 12095 135168 4096 4096 NT_STATUS_OK
ReadX 12095 139264 4096 4096 NT_STATUS_OK
ReadX 12095 143360 4096 4096 NT_STATUS_OK
ReadX 12095 147456 4096 4096 NT_STATUS_OK
ReadX 12095 151552 4096 4096 NT_STATUS_OK
ReadX 12095 155648 4096 4096 NT_STATUS_OK
ReadX 12095 159744 4096 4096 NT_STATUS_OK
ReadX 12095 163840 4096 4096 NT_STATUS_OK
ReadX 12095 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12095 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
Close 12095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12099 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
Close 12099 NT_STATUS_OK
WriteX 12098 0 42388 42388 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12102 NT_STATUS_OK
ReadX 12102 0 4096 4096 NT_STATUS_OK
ReadX 12102 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12103 NT_STATUS_OK
WriteX 12103 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12103 258 NT_STATUS_OK
SET_FILE_INFORMATION 12103 1004 NT_STATUS_OK
WriteX 12103 0 42652 42652 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
ReadX 12107 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12112 NT_STATUS_OK
WriteX 12112 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
WriteX 12112 0 65536 65536 NT_STATUS_OK
WriteX 12112 65536 49 49 NT_STATUS_OK
Close 12112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 61440 61440 NT_STATUS_OK
ReadX 12113 61440 4096 4096 NT_STATUS_OK
ReadX 12113 65536 61440 61440 NT_STATUS_OK
ReadX 12113 126976 4096 4096 NT_STATUS_OK
ReadX 12113 131072 61440 61440 NT_STATUS_OK
ReadX 12113 192512 4096 4096 NT_STATUS_OK
ReadX 12113 196608 61440 61440 NT_STATUS_OK
ReadX 12113 258048 4096 4096 NT_STATUS_OK
ReadX 12113 262144 61440 61440 NT_STATUS_OK
ReadX 12113 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 61440 61440 NT_STATUS_OK
ReadX 12114 61440 4096 4096 NT_STATUS_OK
ReadX 12114 65536 61440 61440 NT_STATUS_OK
ReadX 12114 126976 4096 4096 NT_STATUS_OK
ReadX 12114 131072 61440 61440 NT_STATUS_OK
ReadX 12114 192512 4096 4096 NT_STATUS_OK
ReadX 12114 196608 61440 61440 NT_STATUS_OK
ReadX 12114 258048 4096 4096 NT_STATUS_OK
ReadX 12114 262144 61440 61440 NT_STATUS_OK
ReadX 12114 323584 4096 4096 NT_STATUS_OK
ReadX 12114 327680 61440 61440 NT_STATUS_OK
ReadX 12114 389120 4096 4096 NT_STATUS_OK
ReadX 12114 393216 61440 61440 NT_STATUS_OK
ReadX 12114 454656 4096 4096 NT_STATUS_OK
ReadX 12114 458752 61440 61440 NT_STATUS_OK
ReadX 12114 520192 4096 4096 NT_STATUS_OK
ReadX 12114 524288 61440 61440 NT_STATUS_OK
ReadX 12114 585728 4096 4096 NT_STATUS_OK
ReadX 12114 589824 61440 61440 NT_STATUS_OK
ReadX 12114 651264 4096 4096 NT_STATUS_OK
ReadX 12114 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 61440 61440 NT_STATUS_OK
ReadX 12115 61440 4096 4096 NT_STATUS_OK
ReadX 12115 65536 61440 61440 NT_STATUS_OK
ReadX 12115 126976 4096 4096 NT_STATUS_OK
ReadX 12115 131072 61440 61440 NT_STATUS_OK
ReadX 12115 192512 4096 4096 NT_STATUS_OK
ReadX 12115 196608 61440 61440 NT_STATUS_OK
ReadX 12115 258048 4096 4096 NT_STATUS_OK
ReadX 12115 262144 61440 61440 NT_STATUS_OK
ReadX 12115 323584 4096 4096 NT_STATUS_OK
ReadX 12115 327680 61440 61440 NT_STATUS_OK
ReadX 12115 389120 4096 4096 NT_STATUS_OK
ReadX 12115 393216 61440 61440 NT_STATUS_OK
ReadX 12115 454656 4096 4096 NT_STATUS_OK
ReadX 12115 458752 61440 61440 NT_STATUS_OK
ReadX 12115 520192 4096 4096 NT_STATUS_OK
ReadX 12115 524288 61440 61440 NT_STATUS_OK
ReadX 12115 585728 4096 4096 NT_STATUS_OK
ReadX 12115 589824 61440 61440 NT_STATUS_OK
ReadX 12115 651264 4096 4096 NT_STATUS_OK
ReadX 12115 655360 61440 61440 NT_STATUS_OK
ReadX 12115 716800 4096 4096 NT_STATUS_OK
ReadX 12115 720896 61440 61440 NT_STATUS_OK
ReadX 12115 782336 4096 4096 NT_STATUS_OK
ReadX 12115 786432 61440 61440 NT_STATUS_OK
ReadX 12115 847872 4096 4096 NT_STATUS_OK
ReadX 12115 851968 61440 61440 NT_STATUS_OK
ReadX 12115 913408 4096 4096 NT_STATUS_OK
ReadX 12115 917504 61440 61440 NT_STATUS_OK
ReadX 12115 978944 4096 4096 NT_STATUS_OK
ReadX 12115 983040 61440 61440 NT_STATUS_OK
ReadX 12115 1044480 4096 4096 NT_STATUS_OK
ReadX 12115 1048576 61440 61440 NT_STATUS_OK
ReadX 12115 1110016 4096 4096 NT_STATUS_OK
ReadX 12115 1114112 61440 61440 NT_STATUS_OK
ReadX 12115 1175552 4096 4096 NT_STATUS_OK
ReadX 12115 1179648 61440 61440 NT_STATUS_OK
ReadX 12115 1241088 4096 4096 NT_STATUS_OK
ReadX 12115 1245184 61440 61440 NT_STATUS_OK
ReadX 12115 1306624 4096 4096 NT_STATUS_OK
ReadX 12115 1310720 61440 61440 NT_STATUS_OK
ReadX 12115 1372160 4096 4096 NT_STATUS_OK
ReadX 12115 1376256 61440 61440 NT_STATUS_OK
ReadX 12115 1437696 4096 4096 NT_STATUS_OK
ReadX 12115 1441792 61440 61440 NT_STATUS_OK
ReadX 12115 1503232 4096 4096 NT_STATUS_OK
ReadX 12115 1507328 61440 61440 NT_STATUS_OK
ReadX 12115 1568768 4096 4096 NT_STATUS_OK
ReadX 12115 1572864 61440 61440 NT_STATUS_OK
ReadX 12115 1634304 4096 4096 NT_STATUS_OK
ReadX 12115 1638400 61440 61440 NT_STATUS_OK
ReadX 12115 1699840 4096 4096 NT_STATUS_OK
ReadX 12115 1703936 61440 61440 NT_STATUS_OK
ReadX 12115 1765376 4096 4096 NT_STATUS_OK
ReadX 12115 1769472 61440 61440 NT_STATUS_OK
ReadX 12115 1830912 4096 4096 NT_STATUS_OK
ReadX 12115 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12117 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 1005 NT_STATUS_OK
ReadX 12117 2156 24 24 NT_STATUS_OK
ReadX 12117 2139 276 276 NT_STATUS_OK
ReadX 12117 2136 14 14 NT_STATUS_OK
ReadX 12117 2136 7 7 NT_STATUS_OK
ReadX 12117 2138 12 12 NT_STATUS_OK
ReadX 12117 2137 8 8 NT_STATUS_OK
ReadX 12117 2135 15 15 NT_STATUS_OK
ReadX 12117 0 16 16 NT_STATUS_OK
ReadX 12117 16 2048 2048 NT_STATUS_OK
ReadX 12117 2064 2048 2048 NT_STATUS_OK
ReadX 12117 257 2048 2048 NT_STATUS_OK
ReadX 12117 385 2048 2048 NT_STATUS_OK
ReadX 12117 513 2048 2048 NT_STATUS_OK
ReadX 12117 641 2048 2048 NT_STATUS_OK
ReadX 12117 769 2048 2048 NT_STATUS_OK
ReadX 12117 897 2048 2048 NT_STATUS_OK
ReadX 12117 1025 2048 2048 NT_STATUS_OK
ReadX 12117 1153 2048 2048 NT_STATUS_OK
ReadX 12117 1281 2048 2048 NT_STATUS_OK
ReadX 12117 1409 2048 2048 NT_STATUS_OK
ReadX 12117 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12122 NT_STATUS_OK
WriteX 12122 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12122 258 NT_STATUS_OK
WriteX 12122 0 10575 10575 NT_STATUS_OK
Flush 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
Close 12117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12127 NT_STATUS_OK
LockX 12127 2147483538 1 NT_STATUS_OK
UnlockX 12127 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1005 NT_STATUS_OK
ReadX 12127 0 512 512 NT_STATUS_OK
ReadX 12127 512 512 512 NT_STATUS_OK
ReadX 12127 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1004 NT_STATUS_OK
Close 12127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12128 NT_STATUS_OK
QUERY_FILE_INFORMATION 12128 1005 NT_STATUS_OK
ReadX 12128 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12129 NT_STATUS_OK
LockX 12129 2147483538 1 NT_STATUS_OK
UnlockX 12129 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12129 1005 NT_STATUS_OK
ReadX 12129 0 512 512 NT_STATUS_OK
ReadX 12129 512 512 512 NT_STATUS_OK
ReadX 12129 1024 512 512 NT_STATUS_OK
ReadX 12129 288 20 20 NT_STATUS_OK
ReadX 12129 308 2084 2084 NT_STATUS_OK
ReadX 12129 388 2084 2084 NT_STATUS_OK
ReadX 12129 388 2084 2084 NT_STATUS_OK
ReadX 12116 2157 1386 1386 NT_STATUS_OK
ReadX 12129 2472 399 399 NT_STATUS_OK
ReadX 12129 3072 1536 1536 NT_STATUS_OK
ReadX 12129 544 149 149 NT_STATUS_OK
ReadX 12129 693 485 485 NT_STATUS_OK
Close 12129 NT_STATUS_OK
ReadX 12116 2157 4096 4096 NT_STATUS_OK
ReadX 12116 6253 4096 4096 NT_STATUS_OK
ReadX 12116 10349 4096 4096 NT_STATUS_OK
ReadX 12116 14445 4096 4096 NT_STATUS_OK
ReadX 12116 18541 4096 4096 NT_STATUS_OK
ReadX 12116 22637 256 256 NT_STATUS_OK
ReadX 12116 22893 4096 4096 NT_STATUS_OK
ReadX 12116 26989 4096 4096 NT_STATUS_OK
ReadX 12116 31085 4096 4096 NT_STATUS_OK
ReadX 12116 35181 4096 4096 NT_STATUS_OK
ReadX 12116 39277 4096 4096 NT_STATUS_OK
ReadX 12116 43373 4096 4096 NT_STATUS_OK
ReadX 12116 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12116 2157 1024 1024 NT_STATUS_OK
ReadX 12116 1667 4688 4688 NT_STATUS_OK
ReadX 12116 6355 3516 3516 NT_STATUS_OK
ReadX 12116 9871 16384 16384 NT_STATUS_OK
ReadX 12116 26255 3771 3771 NT_STATUS_OK
ReadX 12116 30026 2048 2048 NT_STATUS_OK
ReadX 12116 32074 1024 1024 NT_STATUS_OK
ReadX 12116 33098 6652 6652 NT_STATUS_OK
ReadX 12116 39750 16384 16384 NT_STATUS_OK
ReadX 12116 56134 10496 10496 NT_STATUS_OK
ReadX 12116 66630 1784 1784 NT_STATUS_OK
ReadX 12116 68414 90 90 NT_STATUS_OK
ReadX 12116 68504 273 273 NT_STATUS_OK
ReadX 12116 68777 1600 1600 NT_STATUS_OK
ReadX 12116 70377 640 640 NT_STATUS_OK
ReadX 12116 71017 1280 1280 NT_STATUS_OK
ReadX 12116 72297 8464 8464 NT_STATUS_OK
ReadX 12116 80761 158 158 NT_STATUS_OK
ReadX 12116 80919 912 912 NT_STATUS_OK
ReadX 12116 81831 1980 1980 NT_STATUS_OK
ReadX 12116 83811 2256 2256 NT_STATUS_OK
ReadX 12116 86067 400 400 NT_STATUS_OK
ReadX 12116 86467 252 252 NT_STATUS_OK
ReadX 12116 86719 42 42 NT_STATUS_OK
ReadX 12116 86761 725 725 NT_STATUS_OK
ReadX 12116 2009 512 512 NT_STATUS_OK
ReadX 12116 3895 9 9 NT_STATUS_OK
ReadX 12116 3781 46 46 NT_STATUS_OK
ReadX 12116 4059 92 92 NT_STATUS_OK
ReadX 12116 3781 92 92 NT_STATUS_OK
ReadX 12116 3986 184 184 NT_STATUS_OK
ReadX 12116 3987 16384 16384 NT_STATUS_OK
ReadX 12116 3902 16384 16384 NT_STATUS_OK
ReadX 12116 3781 10240 10240 NT_STATUS_OK
ReadX 12116 3821 16384 16384 NT_STATUS_OK
ReadX 12116 3891 935 935 NT_STATUS_OK
ReadX 12116 4060 10240 10240 NT_STATUS_OK
ReadX 12116 4059 184 184 NT_STATUS_OK
ReadX 12116 256 184 184 NT_STATUS_OK
ReadX 12116 256 1026 1026 NT_STATUS_OK
ReadX 12116 3901 326 326 NT_STATUS_OK
ReadX 12116 3899 652 652 NT_STATUS_OK
ReadX 12116 256 2 2 NT_STATUS_OK
ReadX 12116 258 4948 4948 NT_STATUS_OK
Close 12116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12134 NT_STATUS_OK
WriteX 12134 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12134 258 NT_STATUS_OK
WriteX 12134 0 65536 65536 NT_STATUS_OK
WriteX 12134 65536 65536 65536 NT_STATUS_OK
WriteX 12134 131072 65536 65536 NT_STATUS_OK
WriteX 12134 196608 65536 65536 NT_STATUS_OK
WriteX 12134 262144 65536 65536 NT_STATUS_OK
WriteX 12134 327680 65536 65536 NT_STATUS_OK
WriteX 12134 393216 65536 65536 NT_STATUS_OK
WriteX 12134 458752 65536 65536 NT_STATUS_OK
WriteX 12134 524288 65536 65536 NT_STATUS_OK
WriteX 12134 589824 35257 35257 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12139 NT_STATUS_OK
WriteX 12139 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 258 NT_STATUS_OK
WriteX 12139 0 65536 65536 NT_STATUS_OK
WriteX 12139 65536 65536 65536 NT_STATUS_OK
WriteX 12139 131072 65536 65536 NT_STATUS_OK
WriteX 12139 196608 65536 65536 NT_STATUS_OK
WriteX 12139 262144 65536 65536 NT_STATUS_OK
WriteX 12139 327680 65536 65536 NT_STATUS_OK
WriteX 12139 393216 65536 65536 NT_STATUS_OK
WriteX 12139 458752 65536 65536 NT_STATUS_OK
WriteX 12139 524288 65536 65536 NT_STATUS_OK
WriteX 12139 589824 57598 57598 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12141 NT_STATUS_OK
WriteX 12141 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 258 NT_STATUS_OK
WriteX 12141 0 12543 12543 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
Close 12125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12145 NT_STATUS_OK
ReadX 12145 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12147 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1005 NT_STATUS_OK
ReadX 12147 1938 24 24 NT_STATUS_OK
ReadX 12147 1920 276 276 NT_STATUS_OK
ReadX 12147 1918 14 14 NT_STATUS_OK
ReadX 12147 1918 7 7 NT_STATUS_OK
ReadX 12147 1919 12 12 NT_STATUS_OK
ReadX 12147 1919 8 8 NT_STATUS_OK
ReadX 12147 1917 15 15 NT_STATUS_OK
ReadX 12147 0 16 16 NT_STATUS_OK
ReadX 12147 16 2048 2048 NT_STATUS_OK
ReadX 12147 2064 2048 2048 NT_STATUS_OK
ReadX 12147 257 2048 2048 NT_STATUS_OK
ReadX 12147 385 2048 2048 NT_STATUS_OK
ReadX 12147 513 2048 2048 NT_STATUS_OK
ReadX 12147 641 2048 2048 NT_STATUS_OK
ReadX 12147 769 2048 2048 NT_STATUS_OK
ReadX 12147 897 2048 2048 NT_STATUS_OK
ReadX 12147 1025 2048 2048 NT_STATUS_OK
ReadX 12147 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12149 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12152 NT_STATUS_OK
WriteX 12152 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12152 258 NT_STATUS_OK
WriteX 12152 0 11588 11588 NT_STATUS_OK
Flush 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 4096 4096 NT_STATUS_OK
Close 12147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12157 NT_STATUS_OK
WriteX 12157 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12157 258 NT_STATUS_OK
WriteX 12157 0 11615 11615 NT_STATUS_OK
Flush 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12159 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12166 NT_STATUS_OK
WriteX 12166 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 65536 65536 NT_STATUS_OK
WriteX 12166 65536 16050 16050 NT_STATUS_OK
Close 12166 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12146 1939 64 64 NT_STATUS_OK
ReadX 12146 128 248 248 NT_STATUS_OK
ReadX 12146 128 568 568 NT_STATUS_OK
ReadX 12146 3872 1536 1536 NT_STATUS_OK
ReadX 12146 3456 2560 2560 NT_STATUS_OK
ReadX 12146 3136 512 512 NT_STATUS_OK
ReadX 12146 2880 4096 4096 NT_STATUS_OK
ReadX 12146 3264 3072 3072 NT_STATUS_OK
ReadX 12146 320 4096 4096 NT_STATUS_OK
ReadX 12146 1024 4096 4096 NT_STATUS_OK
ReadX 12146 3616 4096 4096 NT_STATUS_OK
ReadX 12146 1939 64 64 NT_STATUS_OK
ReadX 12146 128 248 248 NT_STATUS_OK
ReadX 12146 128 608 608 NT_STATUS_OK
ReadX 12146 2858 1024 1024 NT_STATUS_OK
ReadX 12146 2810 4096 4096 NT_STATUS_OK
ReadX 12146 2826 4096 4096 NT_STATUS_OK
ReadX 12146 2580 2048 2048 NT_STATUS_OK
ReadX 12146 2800 2560 2560 NT_STATUS_OK
ReadX 12146 2100 4096 4096 NT_STATUS_OK
ReadX 12146 2084 4096 4096 NT_STATUS_OK
ReadX 12146 868 4096 4096 NT_STATUS_OK
ReadX 12146 2324 4096 4096 NT_STATUS_OK
ReadX 12146 884 4096 4096 NT_STATUS_OK
ReadX 12146 2604 1024 1024 NT_STATUS_OK
ReadX 12146 580 4096 4096 NT_STATUS_OK
ReadX 12146 596 4096 4096 NT_STATUS_OK
ReadX 12146 2752 4096 4096 NT_STATUS_OK
ReadX 12146 2842 1024 1024 NT_STATUS_OK
ReadX 12146 660 4096 4096 NT_STATUS_OK
ReadX 12146 2720 4096 4096 NT_STATUS_OK
ReadX 12146 2736 4096 4096 NT_STATUS_OK
ReadX 12146 628 4096 4096 NT_STATUS_OK
ReadX 12146 2704 4096 4096 NT_STATUS_OK
ReadX 12146 1556 4096 4096 NT_STATUS_OK
ReadX 12146 576 4096 4096 NT_STATUS_OK
ReadX 12146 3168 1536 1536 NT_STATUS_OK
ReadX 12146 832 4096 4096 NT_STATUS_OK
ReadX 12146 1088 4096 4096 NT_STATUS_OK
ReadX 12146 1344 4096 4096 NT_STATUS_OK
ReadX 12146 1600 4096 4096 NT_STATUS_OK
ReadX 12146 1856 4096 4096 NT_STATUS_OK
ReadX 12146 2112 4096 4096 NT_STATUS_OK
ReadX 12146 1892 4096 4096 NT_STATUS_OK
ReadX 12146 820 4096 4096 NT_STATUS_OK
ReadX 12146 788 4096 4096 NT_STATUS_OK
ReadX 12146 1604 4096 4096 NT_STATUS_OK
ReadX 12146 3648 4096 4096 NT_STATUS_OK
ReadX 12146 2608 4096 4096 NT_STATUS_OK
ReadX 12146 548 4096 4096 NT_STATUS_OK
ReadX 12146 740 4096 4096 NT_STATUS_OK
ReadX 12146 1344 4096 4096 NT_STATUS_OK
ReadX 12146 3392 4096 4096 NT_STATUS_OK
ReadX 12146 3904 4096 4096 NT_STATUS_OK
ReadX 12146 644 4096 4096 NT_STATUS_OK
ReadX 12146 676 4096 4096 NT_STATUS_OK
ReadX 12146 2688 4096 4096 NT_STATUS_OK
ReadX 12146 320 4096 4096 NT_STATUS_OK
ReadX 12146 900 4096 4096 NT_STATUS_OK
ReadX 12146 1908 4096 4096 NT_STATUS_OK
ReadX 12146 852 4096 4096 NT_STATUS_OK
ReadX 12146 724 4096 4096 NT_STATUS_OK
ReadX 12146 2292 4096 4096 NT_STATUS_OK
ReadX 12146 612 4096 4096 NT_STATUS_OK
ReadX 12146 388 4096 4096 NT_STATUS_OK
ReadX 12146 2368 4096 4096 NT_STATUS_OK
ReadX 12146 2624 4096 4096 NT_STATUS_OK
ReadX 12146 500 4096 4096 NT_STATUS_OK
ReadX 12146 356 4096 4096 NT_STATUS_OK
ReadX 12146 1024 4096 4096 NT_STATUS_OK
ReadX 12146 576 4096 4096 NT_STATUS_OK
ReadX 12146 340 4096 4096 NT_STATUS_OK
ReadX 12146 420 4096 4096 NT_STATUS_OK
ReadX 12146 1600 4096 4096 NT_STATUS_OK
ReadX 12146 404 4096 4096 NT_STATUS_OK
ReadX 12146 1428 4096 4096 NT_STATUS_OK
ReadX 12146 2656 4096 4096 NT_STATUS_OK
ReadX 12146 2624 4096 4096 NT_STATUS_OK
ReadX 12146 452 4096 4096 NT_STATUS_OK
ReadX 12146 692 4096 4096 NT_STATUS_OK
ReadX 12146 564 4096 4096 NT_STATUS_OK
ReadX 12146 372 4096 4096 NT_STATUS_OK
ReadX 12146 468 4096 4096 NT_STATUS_OK
ReadX 12146 484 4096 4096 NT_STATUS_OK
ReadX 12146 1088 4096 4096 NT_STATUS_OK
ReadX 12146 1924 4096 4096 NT_STATUS_OK
ReadX 12146 2768 4096 4096 NT_STATUS_OK
ReadX 12146 832 4096 4096 NT_STATUS_OK
ReadX 12146 836 4096 4096 NT_STATUS_OK
ReadX 12146 1856 4096 4096 NT_STATUS_OK
ReadX 12146 2640 4096 4096 NT_STATUS_OK
ReadX 12146 436 4096 4096 NT_STATUS_OK
ReadX 12146 1828 4096 4096 NT_STATUS_OK
ReadX 12146 804 4096 4096 NT_STATUS_OK
ReadX 12146 1860 4096 4096 NT_STATUS_OK
ReadX 12146 1812 4096 4096 NT_STATUS_OK
ReadX 12146 756 4096 4096 NT_STATUS_OK
ReadX 12146 1636 4096 4096 NT_STATUS_OK
ReadX 12146 772 4096 4096 NT_STATUS_OK
ReadX 12146 2036 4096 4096 NT_STATUS_OK
ReadX 12146 1220 4096 4096 NT_STATUS_OK
ReadX 12146 1652 4096 4096 NT_STATUS_OK
ReadX 12146 2588 4096 4096 NT_STATUS_OK
ReadX 12146 916 4096 4096 NT_STATUS_OK
ReadX 12146 260 4096 4096 NT_STATUS_OK
ReadX 12146 932 4096 4096 NT_STATUS_OK
ReadX 12146 2624 4096 4096 NT_STATUS_OK
ReadX 12146 308 4096 4096 NT_STATUS_OK
ReadX 12146 292 4096 4096 NT_STATUS_OK
ReadX 12146 1140 4096 4096 NT_STATUS_OK
ReadX 12146 276 4096 4096 NT_STATUS_OK
ReadX 12146 2020 4096 4096 NT_STATUS_OK
ReadX 12146 2880 4096 4096 NT_STATUS_OK
ReadX 12146 516 4096 4096 NT_STATUS_OK
ReadX 12146 1844 4096 4096 NT_STATUS_OK
ReadX 12146 1124 4096 4096 NT_STATUS_OK
ReadX 12146 3136 4096 4096 NT_STATUS_OK
ReadX 12146 324 4096 4096 NT_STATUS_OK
ReadX 12146 1156 4096 4096 NT_STATUS_OK
ReadX 12146 1172 4096 4096 NT_STATUS_OK
ReadX 12146 2112 4096 4096 NT_STATUS_OK
ReadX 12146 2368 4096 4096 NT_STATUS_OK
ReadX 12146 964 4096 4096 NT_STATUS_OK
ReadX 12146 980 4096 4096 NT_STATUS_OK
ReadX 12146 1012 4096 4096 NT_STATUS_OK
ReadX 12146 532 4096 4096 NT_STATUS_OK
ReadX 12146 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12146 1620 4096 4096 NT_STATUS_OK
ReadX 12146 1604 4096 4096 NT_STATUS_OK
ReadX 12146 2116 4096 4096 NT_STATUS_OK
ReadX 12146 2132 4096 4096 NT_STATUS_OK
ReadX 12146 2148 4096 4096 NT_STATUS_OK
ReadX 12146 2276 4096 4096 NT_STATUS_OK
ReadX 12146 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12168 NT_STATUS_OK
Close 12168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12171 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 1004 NT_STATUS_OK
Close 12126 NT_STATUS_OK
WriteX 12171 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12128 1004 NT_STATUS_OK
Close 12128 NT_STATUS_OK
WriteX 12171 0 65536 65536 NT_STATUS_OK
WriteX 12171 65536 64850 64850 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12173 NT_STATUS_OK
WriteX 12173 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12173 258 NT_STATUS_OK
ReadX 12146 2068 4096 4096 NT_STATUS_OK
ReadX 12146 1588 4096 4096 NT_STATUS_OK
ReadX 12146 1572 4096 4096 NT_STATUS_OK
WriteX 12173 0 18630 18630 NT_STATUS_OK
Flush 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12175 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12146 612 4096 4096 NT_STATUS_OK
ReadX 12146 564 4096 4096 NT_STATUS_OK
ReadX 12146 1876 4096 4096 NT_STATUS_OK
ReadX 12146 628 4096 4096 NT_STATUS_OK
ReadX 12146 740 4096 4096 NT_STATUS_OK
ReadX 12146 724 4096 4096 NT_STATUS_OK
ReadX 12146 644 4096 4096 NT_STATUS_OK
ReadX 12146 2324 4096 4096 NT_STATUS_OK
ReadX 12146 660 4096 4096 NT_STATUS_OK
ReadX 12146 852 4096 4096 NT_STATUS_OK
ReadX 12146 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12146 2368 4096 4096 NT_STATUS_OK
ReadX 12146 1024 4096 4096 NT_STATUS_OK
ReadX 12146 320 4096 4096 NT_STATUS_OK
ReadX 12146 580 4096 4096 NT_STATUS_OK
ReadX 12146 3136 512 512 NT_STATUS_OK
ReadX 12146 2880 4096 4096 NT_STATUS_OK
Close 12146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 61440 4096 4096 NT_STATUS_OK
ReadX 12178 126976 4096 4096 NT_STATUS_OK
WriteX 12178 0 65536 65536 NT_STATUS_OK
WriteX 12178 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 61440 4096 4096 NT_STATUS_OK
ReadX 12179 126976 4096 4096 NT_STATUS_OK
ReadX 12179 192512 4096 4096 NT_STATUS_OK
ReadX 12179 258048 4096 4096 NT_STATUS_OK
WriteX 12179 0 65536 65536 NT_STATUS_OK
WriteX 12179 65536 65536 65536 NT_STATUS_OK
WriteX 12179 131072 65536 65536 NT_STATUS_OK
WriteX 12179 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 61440 4096 4096 NT_STATUS_OK
ReadX 12180 126976 4096 4096 NT_STATUS_OK
ReadX 12180 192512 4096 4096 NT_STATUS_OK
ReadX 12180 258048 4096 4096 NT_STATUS_OK
ReadX 12180 323584 4096 4096 NT_STATUS_OK
ReadX 12180 389120 4096 4096 NT_STATUS_OK
ReadX 12180 454656 4096 4096 NT_STATUS_OK
ReadX 12180 520192 4096 4096 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 65536 65536 NT_STATUS_OK
WriteX 12180 131072 65536 65536 NT_STATUS_OK
WriteX 12180 196608 65536 65536 NT_STATUS_OK
WriteX 12180 262144 65536 65536 NT_STATUS_OK
WriteX 12180 327680 65536 65536 NT_STATUS_OK
WriteX 12180 393216 65536 65536 NT_STATUS_OK
WriteX 12180 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12183 NT_STATUS_OK
WriteX 12183 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12181 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12145 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Close 12180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12188 NT_STATUS_OK
WriteX 12188 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12188 258 NT_STATUS_OK
WriteX 12188 0 62591 62591 NT_STATUS_OK
Close 12188 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12193 NT_STATUS_OK
WriteX 12193 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12193 258 NT_STATUS_OK
WriteX 12193 0 10845 10845 NT_STATUS_OK
Close 12193 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12198 NT_STATUS_OK
WriteX 12198 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12198 258 NT_STATUS_OK
WriteX 12198 0 30118 30118 NT_STATUS_OK
Close 12198 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
WriteX 12183 0 64 64 NT_STATUS_OK
Close 12183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12181 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 61440 61440 NT_STATUS_OK
ReadX 12200 61440 4096 4096 NT_STATUS_OK
ReadX 12200 65536 61440 61440 NT_STATUS_OK
ReadX 12200 126976 4096 4096 NT_STATUS_OK
ReadX 12200 131072 61440 61440 NT_STATUS_OK
ReadX 12200 192512 4096 4096 NT_STATUS_OK
ReadX 12200 196608 61440 61440 NT_STATUS_OK
ReadX 12200 258048 4096 4096 NT_STATUS_OK
ReadX 12200 262144 61440 61440 NT_STATUS_OK
ReadX 12200 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 61440 61440 NT_STATUS_OK
ReadX 12201 61440 4096 4096 NT_STATUS_OK
ReadX 12201 65536 61440 61440 NT_STATUS_OK
ReadX 12201 126976 4096 4096 NT_STATUS_OK
ReadX 12201 131072 61440 61440 NT_STATUS_OK
ReadX 12201 192512 4096 4096 NT_STATUS_OK
ReadX 12201 196608 61440 61440 NT_STATUS_OK
ReadX 12201 258048 4096 4096 NT_STATUS_OK
ReadX 12201 262144 61440 61440 NT_STATUS_OK
ReadX 12201 323584 4096 4096 NT_STATUS_OK
ReadX 12201 327680 61440 61440 NT_STATUS_OK
ReadX 12201 389120 4096 4096 NT_STATUS_OK
ReadX 12201 393216 61440 61440 NT_STATUS_OK
ReadX 12201 454656 4096 4096 NT_STATUS_OK
ReadX 12201 458752 61440 61440 NT_STATUS_OK
ReadX 12201 520192 4096 4096 NT_STATUS_OK
ReadX 12201 524288 61440 61440 NT_STATUS_OK
ReadX 12201 585728 4096 4096 NT_STATUS_OK
ReadX 12201 589824 61440 61440 NT_STATUS_OK
ReadX 12201 651264 4096 4096 NT_STATUS_OK
ReadX 12201 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 61440 61440 NT_STATUS_OK
ReadX 12202 61440 4096 4096 NT_STATUS_OK
ReadX 12202 65536 61440 61440 NT_STATUS_OK
ReadX 12202 126976 4096 4096 NT_STATUS_OK
ReadX 12202 131072 61440 61440 NT_STATUS_OK
ReadX 12202 192512 4096 4096 NT_STATUS_OK
ReadX 12202 196608 61440 61440 NT_STATUS_OK
ReadX 12202 258048 4096 4096 NT_STATUS_OK
ReadX 12202 262144 61440 61440 NT_STATUS_OK
ReadX 12202 323584 4096 4096 NT_STATUS_OK
ReadX 12202 327680 61440 61440 NT_STATUS_OK
ReadX 12202 389120 4096 4096 NT_STATUS_OK
ReadX 12202 393216 61440 61440 NT_STATUS_OK
ReadX 12202 454656 4096 4096 NT_STATUS_OK
ReadX 12202 458752 61440 61440 NT_STATUS_OK
ReadX 12202 520192 4096 4096 NT_STATUS_OK
ReadX 12202 524288 61440 61440 NT_STATUS_OK
ReadX 12202 585728 4096 4096 NT_STATUS_OK
ReadX 12202 589824 61440 61440 NT_STATUS_OK
ReadX 12202 651264 4096 4096 NT_STATUS_OK
ReadX 12202 655360 61440 61440 NT_STATUS_OK
ReadX 12202 716800 4096 4096 NT_STATUS_OK
ReadX 12202 720896 61440 61440 NT_STATUS_OK
ReadX 12202 782336 4096 4096 NT_STATUS_OK
ReadX 12202 786432 61440 61440 NT_STATUS_OK
ReadX 12202 847872 4096 4096 NT_STATUS_OK
ReadX 12202 851968 61440 61440 NT_STATUS_OK
ReadX 12202 913408 4096 4096 NT_STATUS_OK
ReadX 12202 917504 61440 61440 NT_STATUS_OK
ReadX 12202 978944 4096 4096 NT_STATUS_OK
ReadX 12202 983040 61440 61440 NT_STATUS_OK
ReadX 12202 1044480 4096 4096 NT_STATUS_OK
ReadX 12202 1048576 61440 61440 NT_STATUS_OK
ReadX 12202 1110016 4096 4096 NT_STATUS_OK
ReadX 12202 1114112 61440 61440 NT_STATUS_OK
ReadX 12202 1175552 4096 4096 NT_STATUS_OK
ReadX 12202 1179648 61440 61440 NT_STATUS_OK
ReadX 12202 1241088 4096 4096 NT_STATUS_OK
ReadX 12202 1245184 61440 61440 NT_STATUS_OK
ReadX 12202 1306624 4096 4096 NT_STATUS_OK
ReadX 12202 1310720 61440 61440 NT_STATUS_OK
ReadX 12202 1372160 4096 4096 NT_STATUS_OK
ReadX 12202 1376256 61440 61440 NT_STATUS_OK
ReadX 12202 1437696 4096 4096 NT_STATUS_OK
ReadX 12202 1441792 61440 61440 NT_STATUS_OK
ReadX 12202 1503232 4096 4096 NT_STATUS_OK
ReadX 12202 1507328 61440 61440 NT_STATUS_OK
ReadX 12202 1568768 4096 4096 NT_STATUS_OK
ReadX 12202 1572864 61440 61440 NT_STATUS_OK
ReadX 12202 1634304 4096 4096 NT_STATUS_OK
ReadX 12202 1638400 61440 61440 NT_STATUS_OK
ReadX 12202 1699840 4096 4096 NT_STATUS_OK
ReadX 12202 1703936 61440 61440 NT_STATUS_OK
ReadX 12202 1765376 4096 4096 NT_STATUS_OK
ReadX 12202 1769472 61440 61440 NT_STATUS_OK
ReadX 12202 1830912 4096 4096 NT_STATUS_OK
ReadX 12202 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12203 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
ReadX 12207 4096 4096 4096 NT_STATUS_OK
ReadX 12207 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12211 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12212 NT_STATUS_OK
Close 12212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 8192 8192 NT_STATUS_OK
ReadX 12215 8192 8192 8192 NT_STATUS_OK
ReadX 12215 16384 8192 8192 NT_STATUS_OK
ReadX 12215 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12217 NT_STATUS_OK
Close 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12220 NT_STATUS_OK
WriteX 12220 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12220 258 NT_STATUS_OK
WriteX 12220 0 10438 10438 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12221 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12222 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12223 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12224 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12226 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
ReadX 12229 4096 4096 4096 NT_STATUS_OK
ReadX 12229 8192 4096 4096 NT_STATUS_OK
ReadX 12229 12288 8192 8192 NT_STATUS_OK
ReadX 12229 20480 8192 8192 NT_STATUS_OK
ReadX 12229 28672 8192 8192 NT_STATUS_OK
ReadX 12229 36864 8192 8192 NT_STATUS_OK
ReadX 12229 45056 8192 8192 NT_STATUS_OK
ReadX 12229 53248 8192 8192 NT_STATUS_OK
ReadX 12229 61440 8192 8192 NT_STATUS_OK
ReadX 12229 69632 8192 8192 NT_STATUS_OK
ReadX 12229 77824 8192 8192 NT_STATUS_OK
ReadX 12229 86016 8192 8192 NT_STATUS_OK
ReadX 12229 94208 8192 8192 NT_STATUS_OK
ReadX 12229 102400 8192 8192 NT_STATUS_OK
ReadX 12229 110592 8192 8192 NT_STATUS_OK
ReadX 12229 118784 8192 8192 NT_STATUS_OK
ReadX 12229 126976 8192 8192 NT_STATUS_OK
ReadX 12229 135168 8192 8192 NT_STATUS_OK
ReadX 12229 143360 8192 8192 NT_STATUS_OK
ReadX 12229 151552 8192 8192 NT_STATUS_OK
ReadX 12229 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12222 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12231 NT_STATUS_OK
Close 12231 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12234 NT_STATUS_OK
WriteX 12234 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 258 NT_STATUS_OK
WriteX 12234 0 28489 28489 NT_STATUS_OK
Close 12234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12237 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 8192 8192 NT_STATUS_OK
ReadX 12241 8192 8192 8192 NT_STATUS_OK
ReadX 12241 16384 8192 8192 NT_STATUS_OK
ReadX 12241 24576 8192 8192 NT_STATUS_OK
ReadX 12241 32768 16384 16384 NT_STATUS_OK
ReadX 12241 49152 8192 8192 NT_STATUS_OK
ReadX 12241 57344 8192 8192 NT_STATUS_OK
ReadX 12241 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12243 NT_STATUS_OK
Close 12243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12240 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12246 NT_STATUS_OK
WriteX 12246 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12246 258 NT_STATUS_OK
WriteX 12246 0 29253 29253 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12250 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12253 NT_STATUS_OK
WriteX 12253 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12253 258 NT_STATUS_OK
WriteX 12253 0 30183 30183 NT_STATUS_OK
Close 12253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12256 NT_STATUS_OK
WriteX 12256 0 510 510 NT_STATUS_OK
WriteX 12256 510 512 512 NT_STATUS_OK
WriteX 12256 1022 510 510 NT_STATUS_OK
WriteX 12256 1532 510 510 NT_STATUS_OK
WriteX 12256 2042 168 168 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 0 4096 4096 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 61440 4096 4096 NT_STATUS_OK
ReadX 12260 126976 4096 4096 NT_STATUS_OK
WriteX 12260 0 65536 65536 NT_STATUS_OK
WriteX 12260 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 61440 4096 4096 NT_STATUS_OK
ReadX 12261 126976 4096 4096 NT_STATUS_OK
ReadX 12261 192512 4096 4096 NT_STATUS_OK
ReadX 12261 258048 4096 4096 NT_STATUS_OK
WriteX 12261 0 65536 65536 NT_STATUS_OK
WriteX 12261 65536 65536 65536 NT_STATUS_OK
WriteX 12261 131072 65536 65536 NT_STATUS_OK
WriteX 12261 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 61440 4096 4096 NT_STATUS_OK
ReadX 12262 126976 4096 4096 NT_STATUS_OK
ReadX 12262 192512 4096 4096 NT_STATUS_OK
ReadX 12262 258048 4096 4096 NT_STATUS_OK
ReadX 12262 323584 4096 4096 NT_STATUS_OK
ReadX 12262 389120 4096 4096 NT_STATUS_OK
ReadX 12262 454656 4096 4096 NT_STATUS_OK
ReadX 12262 520192 4096 4096 NT_STATUS_OK
WriteX 12262 0 65536 65536 NT_STATUS_OK
WriteX 12262 65536 65536 65536 NT_STATUS_OK
WriteX 12262 131072 65536 65536 NT_STATUS_OK
WriteX 12262 196608 65536 65536 NT_STATUS_OK
WriteX 12262 262144 65536 65536 NT_STATUS_OK
WriteX 12262 327680 65536 65536 NT_STATUS_OK
WriteX 12262 393216 65536 65536 NT_STATUS_OK
WriteX 12262 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12259 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12269 NT_STATUS_OK
Close 12269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12272 NT_STATUS_OK
Close 12272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12274 NT_STATUS_OK
Close 12274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12278 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12281 NT_STATUS_OK
Close 12281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12312 NT_STATUS_OK
Close 12312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12317 NT_STATUS_OK
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12331 NT_STATUS_OK
WriteX 12331 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12331 0 65536 65536 NT_STATUS_OK
WriteX 12331 65536 65536 65536 NT_STATUS_OK
WriteX 12331 131072 65536 65536 NT_STATUS_OK
WriteX 12331 196608 65536 65536 NT_STATUS_OK
WriteX 12331 262144 26634 26634 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12337 NT_STATUS_OK
Close 12337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 0 4096 4096 NT_STATUS_OK
ReadX 12339 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12401 NT_STATUS_OK
Close 12401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12416 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
Close 12418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
Close 12419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12463 0 4096 4096 NT_STATUS_OK
Close 12463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
ReadX 12465 4096 4096 4096 NT_STATUS_OK
ReadX 12465 8192 4096 4096 NT_STATUS_OK
ReadX 12465 12288 4096 4096 NT_STATUS_OK
ReadX 12465 16384 4096 4096 NT_STATUS_OK
ReadX 12465 20480 4096 4096 NT_STATUS_OK
ReadX 12465 24576 4096 4096 NT_STATUS_OK
ReadX 12465 28672 4096 4096 NT_STATUS_OK
ReadX 12465 32768 4096 4096 NT_STATUS_OK
ReadX 12465 36864 4096 4096 NT_STATUS_OK
ReadX 12465 40960 4096 4096 NT_STATUS_OK
ReadX 12465 45056 4096 4096 NT_STATUS_OK
ReadX 12465 49152 4096 4096 NT_STATUS_OK
ReadX 12465 53248 4096 4096 NT_STATUS_OK
ReadX 12465 57344 4096 4096 NT_STATUS_OK
ReadX 12465 61440 4096 4096 NT_STATUS_OK
ReadX 12465 65536 4096 4096 NT_STATUS_OK
ReadX 12465 69632 4096 4096 NT_STATUS_OK
ReadX 12465 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12465 1004 NT_STATUS_OK
WriteX 12465 0 4096 4096 NT_STATUS_OK
Close 12465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12466 NT_STATUS_OK
SET_FILE_INFORMATION 12466 1004 NT_STATUS_OK
Close 12466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12468 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12471 NT_STATUS_OK
WriteX 12471 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12471 258 NT_STATUS_OK
WriteX 12471 0 65536 65536 NT_STATUS_OK
WriteX 12471 65536 19979 19979 NT_STATUS_OK
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
SET_FILE_INFORMATION 12472 1004 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
Close 12472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12477 1004 NT_STATUS_OK
WriteX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12483 NT_STATUS_OK
WriteX 12483 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 258 NT_STATUS_OK
WriteX 12483 0 65536 65536 NT_STATUS_OK
WriteX 12483 65536 17654 17654 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
QUERY_FILE_INFORMATION 12484 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
SET_FILE_INFORMATION 12484 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12485 NT_STATUS_OK
SET_FILE_INFORMATION 12485 1004 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12487 NT_STATUS_OK
Close 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
ReadX 12489 4096 4096 4096 NT_STATUS_OK
ReadX 12489 8192 4096 4096 NT_STATUS_OK
ReadX 12489 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12489 16384 4096 4096 NT_STATUS_OK
ReadX 12489 20480 4096 4096 NT_STATUS_OK
ReadX 12489 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
Close 12490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
Close 12491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12492 NT_STATUS_OK
ReadX 12492 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12493 NT_STATUS_OK
Close 12493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12495 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12498 NT_STATUS_OK
WriteX 12498 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 258 NT_STATUS_OK
WriteX 12498 0 65536 65536 NT_STATUS_OK
WriteX 12498 65536 19490 19490 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 1004 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
SET_FILE_INFORMATION 12499 1004 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12500 NT_STATUS_OK
SET_FILE_INFORMATION 12500 1004 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12502 NT_STATUS_OK
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12504 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
ReadX 12506 4096 4096 4096 NT_STATUS_OK
ReadX 12506 8192 4096 4096 NT_STATUS_OK
ReadX 12506 12288 4096 4096 NT_STATUS_OK
ReadX 12506 16384 4096 4096 NT_STATUS_OK
ReadX 12506 20480 4096 4096 NT_STATUS_OK
ReadX 12506 24576 4096 4096 NT_STATUS_OK
ReadX 12506 28672 4096 4096 NT_STATUS_OK
ReadX 12506 32768 4096 4096 NT_STATUS_OK
ReadX 12506 36864 4096 4096 NT_STATUS_OK
ReadX 12506 40960 4096 4096 NT_STATUS_OK
ReadX 12506 45056 4096 4096 NT_STATUS_OK
ReadX 12506 49152 4096 4096 NT_STATUS_OK
ReadX 12506 53248 4096 4096 NT_STATUS_OK
ReadX 12506 57344 4096 4096 NT_STATUS_OK
ReadX 12506 61440 4096 4096 NT_STATUS_OK
ReadX 12506 65536 4096 4096 NT_STATUS_OK
ReadX 12506 69632 4096 4096 NT_STATUS_OK
ReadX 12506 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12506 1004 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12507 NT_STATUS_OK
SET_FILE_INFORMATION 12507 1004 NT_STATUS_OK
Close 12507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12512 NT_STATUS_OK
WriteX 12512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12512 258 NT_STATUS_OK
WriteX 12512 0 65536 65536 NT_STATUS_OK
WriteX 12512 65536 8866 8866 NT_STATUS_OK
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
SET_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
Close 12515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
Close 12516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12517 1004 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12518 NT_STATUS_OK
Close 12518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12520 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12523 NT_STATUS_OK
WriteX 12523 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12523 258 NT_STATUS_OK
WriteX 12523 0 65536 65536 NT_STATUS_OK
WriteX 12523 65536 9298 9298 NT_STATUS_OK
Close 12523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
WriteX 12524 0 4096 4096 NT_STATUS_OK
Flush 12524 NT_STATUS_OK
SET_FILE_INFORMATION 12524 1004 NT_STATUS_OK
WriteX 12524 0 4096 4096 NT_STATUS_OK
Flush 12524 NT_STATUS_OK
Close 12524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12525 NT_STATUS_OK
SET_FILE_INFORMATION 12525 1004 NT_STATUS_OK
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12530 0 4096 4096 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12531 4096 4096 4096 NT_STATUS_OK
ReadX 12531 8192 4096 4096 NT_STATUS_OK
ReadX 12531 12288 4096 4096 NT_STATUS_OK
ReadX 12531 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 4096 4096 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 4096 4096 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12534 1004 NT_STATUS_OK
WriteX 12534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12535 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12537 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12540 NT_STATUS_OK
WriteX 12540 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
WriteX 12540 0 65536 65536 NT_STATUS_OK
WriteX 12540 65536 11540 11540 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
SET_FILE_INFORMATION 12541 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12542 NT_STATUS_OK
SET_FILE_INFORMATION 12542 1004 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 61440 4096 4096 NT_STATUS_OK
ReadX 12546 126976 4096 4096 NT_STATUS_OK
WriteX 12546 0 65536 65536 NT_STATUS_OK
WriteX 12546 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 61440 4096 4096 NT_STATUS_OK
ReadX 12547 126976 4096 4096 NT_STATUS_OK
ReadX 12547 192512 4096 4096 NT_STATUS_OK
ReadX 12547 258048 4096 4096 NT_STATUS_OK
WriteX 12547 0 65536 65536 NT_STATUS_OK
WriteX 12547 65536 65536 65536 NT_STATUS_OK
WriteX 12547 131072 65536 65536 NT_STATUS_OK
WriteX 12547 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 61440 4096 4096 NT_STATUS_OK
ReadX 12548 126976 4096 4096 NT_STATUS_OK
ReadX 12548 192512 4096 4096 NT_STATUS_OK
ReadX 12548 258048 4096 4096 NT_STATUS_OK
ReadX 12548 323584 4096 4096 NT_STATUS_OK
ReadX 12548 389120 4096 4096 NT_STATUS_OK
ReadX 12548 454656 4096 4096 NT_STATUS_OK
ReadX 12548 520192 4096 4096 NT_STATUS_OK
WriteX 12548 0 65536 65536 NT_STATUS_OK
WriteX 12548 65536 65536 65536 NT_STATUS_OK
WriteX 12548 131072 65536 65536 NT_STATUS_OK
WriteX 12548 196608 65536 65536 NT_STATUS_OK
WriteX 12548 262144 65536 65536 NT_STATUS_OK
WriteX 12548 327680 65536 65536 NT_STATUS_OK
WriteX 12548 393216 65536 65536 NT_STATUS_OK
WriteX 12548 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
ReadX 12549 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12550 NT_STATUS_OK
WriteX 12550 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12550 258 NT_STATUS_OK
WriteX 12550 0 53 53 NT_STATUS_OK
Close 12550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12549 8192 4096 4096 NT_STATUS_OK
ReadX 12549 12288 4096 4096 NT_STATUS_OK
WriteX 12553 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12553 258 NT_STATUS_OK
ReadX 12549 16384 4096 4096 NT_STATUS_OK
ReadX 12549 20480 4096 4096 NT_STATUS_OK
WriteX 12553 0 15360 15360 NT_STATUS_OK
Close 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12554 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12554 1004 NT_STATUS_OK
WriteX 12554 0 4096 4096 NT_STATUS_OK
Close 12554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12558 NT_STATUS_OK
Close 12558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12557 4096 4096 4096 NT_STATUS_OK
ReadX 12557 8192 4096 4096 NT_STATUS_OK
ReadX 12557 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
ReadX 12560 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
ReadX 12561 4096 4096 4096 NT_STATUS_OK
ReadX 12561 8192 4096 4096 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12562 NT_STATUS_OK
WriteX 12562 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12562 258 NT_STATUS_OK
WriteX 12562 0 15360 15360 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12567 NT_STATUS_OK
SET_FILE_INFORMATION 12567 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
WriteX 12563 0 4096 4096 NT_STATUS_OK
Close 12563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12568 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 4096 4096 NT_STATUS_OK
ReadX 12570 4096 4096 4096 NT_STATUS_OK
ReadX 12570 8192 4096 4096 NT_STATUS_OK
ReadX 12570 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12570 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12570 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12572 NT_STATUS_OK
WriteX 12572 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 53 53 NT_STATUS_OK
Close 12572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12570 0 19054 19054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12571 4096 4096 4096 NT_STATUS_OK
ReadX 12571 8192 4096 4096 NT_STATUS_OK
ReadX 12571 12288 4096 4096 NT_STATUS_OK
WriteX 12575 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 258 NT_STATUS_OK
WriteX 12575 0 12006 12006 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
WriteX 12576 0 4096 4096 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12580 NT_STATUS_OK
Close 12580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12579 4096 4096 4096 NT_STATUS_OK
ReadX 12579 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12582 NT_STATUS_OK
WriteX 12582 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 258 NT_STATUS_OK
WriteX 12582 0 11991 11991 NT_STATUS_OK
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12587 NT_STATUS_OK
SET_FILE_INFORMATION 12587 1004 NT_STATUS_OK
Close 12587 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12588 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12590 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
ReadX 12590 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
Close 12566 NT_STATUS_OK
WriteX 12590 0 12288 12288 NT_STATUS_OK
Close 12586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12593 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 61440 61440 NT_STATUS_OK
ReadX 12597 61440 4096 4096 NT_STATUS_OK
ReadX 12597 65536 61440 61440 NT_STATUS_OK
ReadX 12597 126976 4096 4096 NT_STATUS_OK
ReadX 12597 131072 61440 61440 NT_STATUS_OK
ReadX 12597 192512 4096 4096 NT_STATUS_OK
ReadX 12597 196608 61440 61440 NT_STATUS_OK
ReadX 12597 258048 4096 4096 NT_STATUS_OK
ReadX 12597 262144 61440 61440 NT_STATUS_OK
ReadX 12597 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 61440 61440 NT_STATUS_OK
ReadX 12598 61440 4096 4096 NT_STATUS_OK
ReadX 12598 65536 61440 61440 NT_STATUS_OK
ReadX 12598 126976 4096 4096 NT_STATUS_OK
ReadX 12598 131072 61440 61440 NT_STATUS_OK
ReadX 12598 192512 4096 4096 NT_STATUS_OK
ReadX 12598 196608 61440 61440 NT_STATUS_OK
ReadX 12598 258048 4096 4096 NT_STATUS_OK
ReadX 12598 262144 61440 61440 NT_STATUS_OK
ReadX 12598 323584 4096 4096 NT_STATUS_OK
ReadX 12598 327680 61440 61440 NT_STATUS_OK
ReadX 12598 389120 4096 4096 NT_STATUS_OK
ReadX 12598 393216 61440 61440 NT_STATUS_OK
ReadX 12598 454656 4096 4096 NT_STATUS_OK
ReadX 12598 458752 61440 61440 NT_STATUS_OK
ReadX 12598 520192 4096 4096 NT_STATUS_OK
ReadX 12598 524288 61440 61440 NT_STATUS_OK
ReadX 12598 585728 4096 4096 NT_STATUS_OK
ReadX 12598 589824 61440 61440 NT_STATUS_OK
ReadX 12598 651264 4096 4096 NT_STATUS_OK
ReadX 12598 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 61440 61440 NT_STATUS_OK
ReadX 12599 61440 4096 4096 NT_STATUS_OK
ReadX 12599 65536 61440 61440 NT_STATUS_OK
ReadX 12599 126976 4096 4096 NT_STATUS_OK
ReadX 12599 131072 61440 61440 NT_STATUS_OK
ReadX 12599 192512 4096 4096 NT_STATUS_OK
ReadX 12599 196608 61440 61440 NT_STATUS_OK
ReadX 12599 258048 4096 4096 NT_STATUS_OK
ReadX 12599 262144 61440 61440 NT_STATUS_OK
ReadX 12599 323584 4096 4096 NT_STATUS_OK
ReadX 12599 327680 61440 61440 NT_STATUS_OK
ReadX 12599 389120 4096 4096 NT_STATUS_OK
ReadX 12599 393216 61440 61440 NT_STATUS_OK
ReadX 12599 454656 4096 4096 NT_STATUS_OK
ReadX 12599 458752 61440 61440 NT_STATUS_OK
ReadX 12599 520192 4096 4096 NT_STATUS_OK
ReadX 12599 524288 61440 61440 NT_STATUS_OK
ReadX 12599 585728 4096 4096 NT_STATUS_OK
ReadX 12599 589824 61440 61440 NT_STATUS_OK
ReadX 12599 651264 4096 4096 NT_STATUS_OK
ReadX 12599 655360 61440 61440 NT_STATUS_OK
ReadX 12599 716800 4096 4096 NT_STATUS_OK
ReadX 12599 720896 61440 61440 NT_STATUS_OK
ReadX 12599 782336 4096 4096 NT_STATUS_OK
ReadX 12599 786432 61440 61440 NT_STATUS_OK
ReadX 12599 847872 4096 4096 NT_STATUS_OK
ReadX 12599 851968 61440 61440 NT_STATUS_OK
ReadX 12599 913408 4096 4096 NT_STATUS_OK
ReadX 12599 917504 61440 61440 NT_STATUS_OK
ReadX 12599 978944 4096 4096 NT_STATUS_OK
ReadX 12599 983040 61440 61440 NT_STATUS_OK
ReadX 12599 1044480 4096 4096 NT_STATUS_OK
ReadX 12599 1048576 61440 61440 NT_STATUS_OK
ReadX 12599 1110016 4096 4096 NT_STATUS_OK
ReadX 12599 1114112 61440 61440 NT_STATUS_OK
ReadX 12599 1175552 4096 4096 NT_STATUS_OK
ReadX 12599 1179648 61440 61440 NT_STATUS_OK
ReadX 12599 1241088 4096 4096 NT_STATUS_OK
ReadX 12599 1245184 61440 61440 NT_STATUS_OK
ReadX 12599 1306624 4096 4096 NT_STATUS_OK
ReadX 12599 1310720 61440 61440 NT_STATUS_OK
ReadX 12599 1372160 4096 4096 NT_STATUS_OK
ReadX 12599 1376256 61440 61440 NT_STATUS_OK
ReadX 12599 1437696 4096 4096 NT_STATUS_OK
ReadX 12599 1441792 61440 61440 NT_STATUS_OK
ReadX 12599 1503232 4096 4096 NT_STATUS_OK
ReadX 12599 1507328 61440 61440 NT_STATUS_OK
ReadX 12599 1568768 4096 4096 NT_STATUS_OK
ReadX 12599 1572864 61440 61440 NT_STATUS_OK
ReadX 12599 1634304 4096 4096 NT_STATUS_OK
ReadX 12599 1638400 61440 61440 NT_STATUS_OK
ReadX 12599 1699840 4096 4096 NT_STATUS_OK
ReadX 12599 1703936 61440 61440 NT_STATUS_OK
ReadX 12599 1765376 4096 4096 NT_STATUS_OK
ReadX 12599 1769472 61440 61440 NT_STATUS_OK
ReadX 12599 1830912 4096 4096 NT_STATUS_OK
ReadX 12599 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12606 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 1004 NT_STATUS_OK
WriteX 12606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12608 NT_STATUS_OK
WriteX 12608 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12608 258 NT_STATUS_OK
WriteX 12608 0 491 491 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12606 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12611 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12612 NT_STATUS_OK
WriteX 12612 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 258 NT_STATUS_OK
WriteX 12612 0 543 543 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12603 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12626 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
WriteX 12626 0 2048 2048 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12627 0 4096 4096 NT_STATUS_OK
Flush 12627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12632 NT_STATUS_OK
WriteX 12632 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 258 NT_STATUS_OK
WriteX 12632 0 2048 2048 NT_STATUS_OK
Close 12632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12638 NT_STATUS_OK
WriteX 12638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12638 258 NT_STATUS_OK
WriteX 12638 0 2048 2048 NT_STATUS_OK
Close 12638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 2048 2048 NT_STATUS_OK
ReadX 12617 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
WriteX 12617 0 8192 8192 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
WriteX 12619 0 4096 4096 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12663 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 1004 NT_STATUS_OK
WriteX 12663 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 258 NT_STATUS_OK
WriteX 12663 0 2048 2048 NT_STATUS_OK
Close 12663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12671 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1004 NT_STATUS_OK
WriteX 12671 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 258 NT_STATUS_OK
WriteX 12671 0 2048 2048 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12664 0 4096 4096 NT_STATUS_OK
Flush 12664 NT_STATUS_OK
WriteX 12672 0 4096 4096 NT_STATUS_OK
Flush 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12664 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12666 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12674 NT_STATUS_OK
WriteX 12674 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12674 258 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12677 NT_STATUS_OK
WriteX 12677 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 4096 4096 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12678 0 4096 4096 NT_STATUS_OK
Close 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12684 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12685 NT_STATUS_OK
WriteX 12685 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 258 NT_STATUS_OK
WriteX 12685 0 2048 2048 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12697 NT_STATUS_OK
ReadX 12697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12698 NT_STATUS_OK
ReadX 12698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12700 NT_STATUS_OK
QUERY_FILE_INFORMATION 12700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12691 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12702 NT_STATUS_OK
QUERY_FILE_INFORMATION 12702 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12714 NT_STATUS_OK
ReadX 12714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12722 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 1004 NT_STATUS_OK
WriteX 12722 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 258 NT_STATUS_OK
WriteX 12722 0 2048 2048 NT_STATUS_OK
Close 12722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12734 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 1004 NT_STATUS_OK
WriteX 12734 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 258 NT_STATUS_OK
WriteX 12734 0 2048 2048 NT_STATUS_OK
Close 12734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12742 NT_STATUS_OK
QUERY_FILE_INFORMATION 12742 1004 NT_STATUS_OK
WriteX 12742 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12742 258 NT_STATUS_OK
WriteX 12742 0 2048 2048 NT_STATUS_OK
Close 12742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
WriteX 12735 0 4096 4096 NT_STATUS_OK
Flush 12735 NT_STATUS_OK
WriteX 12743 0 4096 4096 NT_STATUS_OK
Flush 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12725 4096 16384 16384 NT_STATUS_OK
ReadX 12705 4096 16384 16384 NT_STATUS_OK
ReadX 12737 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12744 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 2048 2048 NT_STATUS_OK
WriteX 12745 0 19584 19584 NT_STATUS_OK
WriteX 12745 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12746 NT_STATUS_OK
QUERY_FILE_INFORMATION 12746 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12717 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12714 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Close 12713 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12750 NT_STATUS_OK
QUERY_FILE_INFORMATION 12750 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12753 4096 16384 16384 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
WriteX 12754 0 4096 4096 NT_STATUS_OK
WriteX 12755 0 4096 4096 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12766 NT_STATUS_OK
ReadX 12766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 0 8192 8192 NT_STATUS_OK
ReadX 12759 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12773 0 4096 4096 NT_STATUS_OK
ReadX 12773 4096 4096 4096 NT_STATUS_OK
ReadX 12773 8192 4096 4096 NT_STATUS_OK
WriteX 12759 0 4096 4096 NT_STATUS_OK
WriteX 12760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
ReadX 12774 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
WriteX 12754 0 4096 4096 NT_STATUS_OK
WriteX 12755 0 4096 4096 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12779 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 1004 NT_STATUS_OK
WriteX 12779 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 258 NT_STATUS_OK
WriteX 12779 0 2048 2048 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
ReadX 12782 4096 4096 4096 NT_STATUS_OK
WriteX 12782 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 0 4096 4096 NT_STATUS_OK
ReadX 12784 4096 4096 4096 NT_STATUS_OK
WriteX 12784 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12785 NT_STATUS_OK
QUERY_FILE_INFORMATION 12785 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12757 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12766 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12787 0 4096 4096 NT_STATUS_OK
ReadX 12787 4096 4096 4096 NT_STATUS_OK
ReadX 12787 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12789 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12790 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12792 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
ReadX 12788 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12805 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 1004 NT_STATUS_OK
WriteX 12805 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 258 NT_STATUS_OK
WriteX 12805 0 2048 2048 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12806 NT_STATUS_OK
ReadX 12806 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12806 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12811 NT_STATUS_OK
QUERY_FILE_INFORMATION 12811 1004 NT_STATUS_OK
WriteX 12811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12811 258 NT_STATUS_OK
WriteX 12811 0 2048 2048 NT_STATUS_OK
Close 12811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12795 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12813 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12800 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12815 NT_STATUS_OK
QUERY_FILE_INFORMATION 12815 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 61440 4096 4096 NT_STATUS_OK
ReadX 12817 126976 4096 4096 NT_STATUS_OK
WriteX 12817 0 65536 65536 NT_STATUS_OK
WriteX 12817 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 61440 4096 4096 NT_STATUS_OK
ReadX 12818 126976 4096 4096 NT_STATUS_OK
ReadX 12818 192512 4096 4096 NT_STATUS_OK
ReadX 12818 258048 4096 4096 NT_STATUS_OK
WriteX 12818 0 65536 65536 NT_STATUS_OK
WriteX 12818 65536 65536 65536 NT_STATUS_OK
WriteX 12818 131072 65536 65536 NT_STATUS_OK
WriteX 12818 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 61440 4096 4096 NT_STATUS_OK
ReadX 12819 126976 4096 4096 NT_STATUS_OK
ReadX 12819 192512 4096 4096 NT_STATUS_OK
ReadX 12819 258048 4096 4096 NT_STATUS_OK
ReadX 12819 323584 4096 4096 NT_STATUS_OK
ReadX 12819 389120 4096 4096 NT_STATUS_OK
ReadX 12819 454656 4096 4096 NT_STATUS_OK
ReadX 12819 520192 4096 4096 NT_STATUS_OK
WriteX 12819 0 65536 65536 NT_STATUS_OK
WriteX 12819 65536 65536 65536 NT_STATUS_OK
WriteX 12819 131072 65536 65536 NT_STATUS_OK
WriteX 12819 196608 65536 65536 NT_STATUS_OK
WriteX 12819 262144 65536 65536 NT_STATUS_OK
WriteX 12819 327680 65536 65536 NT_STATUS_OK
WriteX 12819 393216 65536 65536 NT_STATUS_OK
WriteX 12819 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12820 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12820 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12820 8192 4096 4096 NT_STATUS_OK
ReadX 12820 12288 4096 4096 NT_STATUS_OK
ReadX 12820 16384 4096 4096 NT_STATUS_OK
ReadX 12820 20480 4096 4096 NT_STATUS_OK
ReadX 12820 24576 4096 4096 NT_STATUS_OK
ReadX 12820 28672 4096 4096 NT_STATUS_OK
ReadX 12820 32768 4096 4096 NT_STATUS_OK
ReadX 12820 36864 4096 4096 NT_STATUS_OK
ReadX 12820 40960 4096 4096 NT_STATUS_OK
ReadX 12820 45056 4096 4096 NT_STATUS_OK
ReadX 12820 49152 4096 4096 NT_STATUS_OK
ReadX 12820 53248 4096 4096 NT_STATUS_OK
ReadX 12820 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12820 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12823 NT_STATUS_OK
WriteX 12823 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12823 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12823 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12823 1004 NT_STATUS_OK
WriteX 12823 0 57088 57088 NT_STATUS_OK
WriteX 12823 0 4096 4096 NT_STATUS_OK
Flush 12823 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12824 NT_STATUS_OK
SET_FILE_INFORMATION 12824 1004 NT_STATUS_OK
Close 12824 NT_STATUS_OK
SET_FILE_INFORMATION 12823 1004 NT_STATUS_OK
WriteX 12823 0 4096 4096 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12827 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12828 NT_STATUS_OK
WriteX 12828 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12828 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12828 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
WriteX 12828 0 51456 51456 NT_STATUS_OK
WriteX 12828 0 4096 4096 NT_STATUS_OK
Flush 12828 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
WriteX 12828 0 4096 4096 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12832 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12837 NT_STATUS_OK
WriteX 12837 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12837 258 NT_STATUS_OK
WriteX 12837 0 53077 53077 NT_STATUS_OK
Close 12837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12838 NT_STATUS_OK
WriteX 12838 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12838 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
WriteX 12838 0 65536 65536 NT_STATUS_OK
WriteX 12838 65536 1856 1856 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Flush 12838 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12844 NT_STATUS_OK
Close 12844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12847 NT_STATUS_OK
WriteX 12847 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 258 NT_STATUS_OK
WriteX 12847 0 7983 7983 NT_STATUS_OK
Close 12847 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12852 NT_STATUS_OK
WriteX 12852 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12852 258 NT_STATUS_OK
WriteX 12852 0 65536 65536 NT_STATUS_OK
WriteX 12852 65536 65536 65536 NT_STATUS_OK
WriteX 12852 131072 65536 65536 NT_STATUS_OK
WriteX 12852 196608 65536 65536 NT_STATUS_OK
WriteX 12852 262144 65536 65536 NT_STATUS_OK
WriteX 12852 327680 65536 65536 NT_STATUS_OK
WriteX 12852 393216 65536 65536 NT_STATUS_OK
WriteX 12852 458752 46731 46731 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12853 NT_STATUS_OK
WriteX 12853 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12842 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 65536 65536 NT_STATUS_OK
WriteX 12853 65536 22848 22848 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Flush 12853 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12857 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12858 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12858 1004 NT_STATUS_OK
ReadX 12858 8192 4096 4096 NT_STATUS_OK
ReadX 12858 12288 4096 4096 NT_STATUS_OK
ReadX 12858 16384 4096 4096 NT_STATUS_OK
ReadX 12858 20480 4096 4096 NT_STATUS_OK
ReadX 12858 24576 4096 4096 NT_STATUS_OK
ReadX 12858 28672 4096 4096 NT_STATUS_OK
ReadX 12858 32768 4096 4096 NT_STATUS_OK
ReadX 12858 36864 4096 4096 NT_STATUS_OK
ReadX 12858 40960 4096 4096 NT_STATUS_OK
ReadX 12858 45056 4096 4096 NT_STATUS_OK
ReadX 12858 49152 4096 4096 NT_STATUS_OK
ReadX 12858 53248 4096 4096 NT_STATUS_OK
ReadX 12858 57344 4096 4096 NT_STATUS_OK
ReadX 12858 61440 4096 4096 NT_STATUS_OK
ReadX 12858 65536 4096 4096 NT_STATUS_OK
ReadX 12858 69632 4096 4096 NT_STATUS_OK
ReadX 12858 73728 4096 4096 NT_STATUS_OK
ReadX 12858 77824 4096 4096 NT_STATUS_OK
ReadX 12858 81920 4096 4096 NT_STATUS_OK
ReadX 12858 86016 4096 4096 NT_STATUS_OK
ReadX 12858 90112 4096 4096 NT_STATUS_OK
ReadX 12858 94208 4096 4096 NT_STATUS_OK
ReadX 12858 98304 4096 4096 NT_STATUS_OK
ReadX 12858 102400 4096 4096 NT_STATUS_OK
ReadX 12858 106496 4096 4096 NT_STATUS_OK
ReadX 12858 110592 4096 4096 NT_STATUS_OK
ReadX 12858 114688 4096 4096 NT_STATUS_OK
ReadX 12858 118784 4096 4096 NT_STATUS_OK
ReadX 12858 122880 4096 4096 NT_STATUS_OK
ReadX 12858 126976 4096 4096 NT_STATUS_OK
ReadX 12858 131072 4096 4096 NT_STATUS_OK
ReadX 12858 135168 4096 4096 NT_STATUS_OK
ReadX 12858 139264 4096 4096 NT_STATUS_OK
ReadX 12858 143360 4096 4096 NT_STATUS_OK
ReadX 12858 147456 4096 4096 NT_STATUS_OK
ReadX 12858 151552 4096 4096 NT_STATUS_OK
ReadX 12858 155648 4096 4096 NT_STATUS_OK
ReadX 12858 159744 4096 4096 NT_STATUS_OK
ReadX 12858 163840 4096 4096 NT_STATUS_OK
ReadX 12858 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12858 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12861 NT_STATUS_OK
WriteX 12861 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 258 NT_STATUS_OK
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12862 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
Close 12862 NT_STATUS_OK
WriteX 12861 0 42388 42388 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12863 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12865 NT_STATUS_OK
ReadX 12865 0 4096 4096 NT_STATUS_OK
ReadX 12865 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12866 NT_STATUS_OK
WriteX 12866 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12866 258 NT_STATUS_OK
SET_FILE_INFORMATION 12866 1004 NT_STATUS_OK
WriteX 12866 0 42652 42652 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
ReadX 12870 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12875 NT_STATUS_OK
WriteX 12875 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 258 NT_STATUS_OK
WriteX 12875 0 65536 65536 NT_STATUS_OK
WriteX 12875 65536 49 49 NT_STATUS_OK
Close 12875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 61440 61440 NT_STATUS_OK
ReadX 12876 61440 4096 4096 NT_STATUS_OK
ReadX 12876 65536 61440 61440 NT_STATUS_OK
ReadX 12876 126976 4096 4096 NT_STATUS_OK
ReadX 12876 131072 61440 61440 NT_STATUS_OK
ReadX 12876 192512 4096 4096 NT_STATUS_OK
ReadX 12876 196608 61440 61440 NT_STATUS_OK
ReadX 12876 258048 4096 4096 NT_STATUS_OK
ReadX 12876 262144 61440 61440 NT_STATUS_OK
ReadX 12876 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 61440 61440 NT_STATUS_OK
ReadX 12877 61440 4096 4096 NT_STATUS_OK
ReadX 12877 65536 61440 61440 NT_STATUS_OK
ReadX 12877 126976 4096 4096 NT_STATUS_OK
ReadX 12877 131072 61440 61440 NT_STATUS_OK
ReadX 12877 192512 4096 4096 NT_STATUS_OK
ReadX 12877 196608 61440 61440 NT_STATUS_OK
ReadX 12877 258048 4096 4096 NT_STATUS_OK
ReadX 12877 262144 61440 61440 NT_STATUS_OK
ReadX 12877 323584 4096 4096 NT_STATUS_OK
ReadX 12877 327680 61440 61440 NT_STATUS_OK
ReadX 12877 389120 4096 4096 NT_STATUS_OK
ReadX 12877 393216 61440 61440 NT_STATUS_OK
ReadX 12877 454656 4096 4096 NT_STATUS_OK
ReadX 12877 458752 61440 61440 NT_STATUS_OK
ReadX 12877 520192 4096 4096 NT_STATUS_OK
ReadX 12877 524288 61440 61440 NT_STATUS_OK
ReadX 12877 585728 4096 4096 NT_STATUS_OK
ReadX 12877 589824 61440 61440 NT_STATUS_OK
ReadX 12877 651264 4096 4096 NT_STATUS_OK
ReadX 12877 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 61440 61440 NT_STATUS_OK
ReadX 12878 61440 4096 4096 NT_STATUS_OK
ReadX 12878 65536 61440 61440 NT_STATUS_OK
ReadX 12878 126976 4096 4096 NT_STATUS_OK
ReadX 12878 131072 61440 61440 NT_STATUS_OK
ReadX 12878 192512 4096 4096 NT_STATUS_OK
ReadX 12878 196608 61440 61440 NT_STATUS_OK
ReadX 12878 258048 4096 4096 NT_STATUS_OK
ReadX 12878 262144 61440 61440 NT_STATUS_OK
ReadX 12878 323584 4096 4096 NT_STATUS_OK
ReadX 12878 327680 61440 61440 NT_STATUS_OK
ReadX 12878 389120 4096 4096 NT_STATUS_OK
ReadX 12878 393216 61440 61440 NT_STATUS_OK
ReadX 12878 454656 4096 4096 NT_STATUS_OK
ReadX 12878 458752 61440 61440 NT_STATUS_OK
ReadX 12878 520192 4096 4096 NT_STATUS_OK
ReadX 12878 524288 61440 61440 NT_STATUS_OK
ReadX 12878 585728 4096 4096 NT_STATUS_OK
ReadX 12878 589824 61440 61440 NT_STATUS_OK
ReadX 12878 651264 4096 4096 NT_STATUS_OK
ReadX 12878 655360 61440 61440 NT_STATUS_OK
ReadX 12878 716800 4096 4096 NT_STATUS_OK
ReadX 12878 720896 61440 61440 NT_STATUS_OK
ReadX 12878 782336 4096 4096 NT_STATUS_OK
ReadX 12878 786432 61440 61440 NT_STATUS_OK
ReadX 12878 847872 4096 4096 NT_STATUS_OK
ReadX 12878 851968 61440 61440 NT_STATUS_OK
ReadX 12878 913408 4096 4096 NT_STATUS_OK
ReadX 12878 917504 61440 61440 NT_STATUS_OK
ReadX 12878 978944 4096 4096 NT_STATUS_OK
ReadX 12878 983040 61440 61440 NT_STATUS_OK
ReadX 12878 1044480 4096 4096 NT_STATUS_OK
ReadX 12878 1048576 61440 61440 NT_STATUS_OK
ReadX 12878 1110016 4096 4096 NT_STATUS_OK
ReadX 12878 1114112 61440 61440 NT_STATUS_OK
ReadX 12878 1175552 4096 4096 NT_STATUS_OK
ReadX 12878 1179648 61440 61440 NT_STATUS_OK
ReadX 12878 1241088 4096 4096 NT_STATUS_OK
ReadX 12878 1245184 61440 61440 NT_STATUS_OK
ReadX 12878 1306624 4096 4096 NT_STATUS_OK
ReadX 12878 1310720 61440 61440 NT_STATUS_OK
ReadX 12878 1372160 4096 4096 NT_STATUS_OK
ReadX 12878 1376256 61440 61440 NT_STATUS_OK
ReadX 12878 1437696 4096 4096 NT_STATUS_OK
ReadX 12878 1441792 61440 61440 NT_STATUS_OK
ReadX 12878 1503232 4096 4096 NT_STATUS_OK
ReadX 12878 1507328 61440 61440 NT_STATUS_OK
ReadX 12878 1568768 4096 4096 NT_STATUS_OK
ReadX 12878 1572864 61440 61440 NT_STATUS_OK
ReadX 12878 1634304 4096 4096 NT_STATUS_OK
ReadX 12878 1638400 61440 61440 NT_STATUS_OK
ReadX 12878 1699840 4096 4096 NT_STATUS_OK
ReadX 12878 1703936 61440 61440 NT_STATUS_OK
ReadX 12878 1765376 4096 4096 NT_STATUS_OK
ReadX 12878 1769472 61440 61440 NT_STATUS_OK
ReadX 12878 1830912 4096 4096 NT_STATUS_OK
ReadX 12878 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12880 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 1005 NT_STATUS_OK
ReadX 12880 2156 24 24 NT_STATUS_OK
ReadX 12880 2139 276 276 NT_STATUS_OK
ReadX 12880 2136 14 14 NT_STATUS_OK
ReadX 12880 2136 7 7 NT_STATUS_OK
ReadX 12880 2138 12 12 NT_STATUS_OK
ReadX 12880 2137 8 8 NT_STATUS_OK
ReadX 12880 2135 15 15 NT_STATUS_OK
ReadX 12880 0 16 16 NT_STATUS_OK
ReadX 12880 16 2048 2048 NT_STATUS_OK
ReadX 12880 2064 2048 2048 NT_STATUS_OK
ReadX 12880 257 2048 2048 NT_STATUS_OK
ReadX 12880 385 2048 2048 NT_STATUS_OK
ReadX 12880 513 2048 2048 NT_STATUS_OK
ReadX 12880 641 2048 2048 NT_STATUS_OK
ReadX 12880 769 2048 2048 NT_STATUS_OK
ReadX 12880 897 2048 2048 NT_STATUS_OK
ReadX 12880 1025 2048 2048 NT_STATUS_OK
ReadX 12880 1153 2048 2048 NT_STATUS_OK
ReadX 12880 1281 2048 2048 NT_STATUS_OK
ReadX 12880 1409 2048 2048 NT_STATUS_OK
ReadX 12880 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12885 NT_STATUS_OK
WriteX 12885 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12885 258 NT_STATUS_OK
WriteX 12885 0 10575 10575 NT_STATUS_OK
Flush 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12886 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12890 NT_STATUS_OK
LockX 12890 2147483538 1 NT_STATUS_OK
UnlockX 12890 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1005 NT_STATUS_OK
ReadX 12890 0 512 512 NT_STATUS_OK
ReadX 12890 512 512 512 NT_STATUS_OK
ReadX 12890 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1004 NT_STATUS_OK
Close 12890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12891 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 1005 NT_STATUS_OK
ReadX 12891 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12892 NT_STATUS_OK
LockX 12892 2147483538 1 NT_STATUS_OK
UnlockX 12892 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12892 1005 NT_STATUS_OK
ReadX 12892 0 512 512 NT_STATUS_OK
ReadX 12892 512 512 512 NT_STATUS_OK
ReadX 12892 1024 512 512 NT_STATUS_OK
ReadX 12892 288 20 20 NT_STATUS_OK
ReadX 12892 308 2084 2084 NT_STATUS_OK
ReadX 12892 388 2084 2084 NT_STATUS_OK
ReadX 12892 388 2084 2084 NT_STATUS_OK
ReadX 12879 2157 1386 1386 NT_STATUS_OK
ReadX 12892 2472 399 399 NT_STATUS_OK
ReadX 12892 3072 1536 1536 NT_STATUS_OK
ReadX 12892 544 149 149 NT_STATUS_OK
ReadX 12892 693 485 485 NT_STATUS_OK
Close 12892 NT_STATUS_OK
ReadX 12879 2157 4096 4096 NT_STATUS_OK
ReadX 12879 6253 4096 4096 NT_STATUS_OK
ReadX 12879 10349 4096 4096 NT_STATUS_OK
ReadX 12879 14445 4096 4096 NT_STATUS_OK
ReadX 12879 18541 4096 4096 NT_STATUS_OK
ReadX 12879 22637 256 256 NT_STATUS_OK
ReadX 12879 22893 4096 4096 NT_STATUS_OK
ReadX 12879 26989 4096 4096 NT_STATUS_OK
ReadX 12879 31085 4096 4096 NT_STATUS_OK
ReadX 12879 35181 4096 4096 NT_STATUS_OK
ReadX 12879 39277 4096 4096 NT_STATUS_OK
ReadX 12879 43373 4096 4096 NT_STATUS_OK
ReadX 12879 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12879 2157 1024 1024 NT_STATUS_OK
ReadX 12879 1667 4688 4688 NT_STATUS_OK
ReadX 12879 6355 3516 3516 NT_STATUS_OK
ReadX 12879 9871 16384 16384 NT_STATUS_OK
ReadX 12879 26255 3771 3771 NT_STATUS_OK
ReadX 12879 30026 2048 2048 NT_STATUS_OK
ReadX 12879 32074 1024 1024 NT_STATUS_OK
ReadX 12879 33098 6652 6652 NT_STATUS_OK
ReadX 12879 39750 16384 16384 NT_STATUS_OK
ReadX 12879 56134 10496 10496 NT_STATUS_OK
ReadX 12879 66630 1784 1784 NT_STATUS_OK
ReadX 12879 68414 90 90 NT_STATUS_OK
ReadX 12879 68504 273 273 NT_STATUS_OK
ReadX 12879 68777 1600 1600 NT_STATUS_OK
ReadX 12879 70377 640 640 NT_STATUS_OK
ReadX 12879 71017 1280 1280 NT_STATUS_OK
ReadX 12879 72297 8464 8464 NT_STATUS_OK
ReadX 12879 80761 158 158 NT_STATUS_OK
ReadX 12879 80919 912 912 NT_STATUS_OK
ReadX 12879 81831 1980 1980 NT_STATUS_OK
ReadX 12879 83811 2256 2256 NT_STATUS_OK
ReadX 12879 86067 400 400 NT_STATUS_OK
ReadX 12879 86467 252 252 NT_STATUS_OK
ReadX 12879 86719 42 42 NT_STATUS_OK
ReadX 12879 86761 725 725 NT_STATUS_OK
ReadX 12879 2009 512 512 NT_STATUS_OK
ReadX 12879 3895 9 9 NT_STATUS_OK
ReadX 12879 3781 46 46 NT_STATUS_OK
ReadX 12879 4059 92 92 NT_STATUS_OK
ReadX 12879 3781 92 92 NT_STATUS_OK
ReadX 12879 3986 184 184 NT_STATUS_OK
ReadX 12879 3987 16384 16384 NT_STATUS_OK
ReadX 12879 3902 16384 16384 NT_STATUS_OK
ReadX 12879 3781 10240 10240 NT_STATUS_OK
ReadX 12879 3821 16384 16384 NT_STATUS_OK
ReadX 12879 3891 935 935 NT_STATUS_OK
ReadX 12879 4060 10240 10240 NT_STATUS_OK
ReadX 12879 4059 184 184 NT_STATUS_OK
ReadX 12879 256 184 184 NT_STATUS_OK
ReadX 12879 256 1026 1026 NT_STATUS_OK
ReadX 12879 3901 326 326 NT_STATUS_OK
ReadX 12879 3899 652 652 NT_STATUS_OK
ReadX 12879 256 2 2 NT_STATUS_OK
ReadX 12879 258 4948 4948 NT_STATUS_OK
Close 12879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12894 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12897 NT_STATUS_OK
WriteX 12897 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12897 258 NT_STATUS_OK
WriteX 12897 0 65536 65536 NT_STATUS_OK
WriteX 12897 65536 65536 65536 NT_STATUS_OK
WriteX 12897 131072 65536 65536 NT_STATUS_OK
WriteX 12897 196608 65536 65536 NT_STATUS_OK
WriteX 12897 262144 65536 65536 NT_STATUS_OK
WriteX 12897 327680 65536 65536 NT_STATUS_OK
WriteX 12897 393216 65536 65536 NT_STATUS_OK
WriteX 12897 458752 65536 65536 NT_STATUS_OK
WriteX 12897 524288 65536 65536 NT_STATUS_OK
WriteX 12897 589824 35257 35257 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12902 NT_STATUS_OK
WriteX 12902 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 258 NT_STATUS_OK
WriteX 12902 0 65536 65536 NT_STATUS_OK
WriteX 12902 65536 65536 65536 NT_STATUS_OK
WriteX 12902 131072 65536 65536 NT_STATUS_OK
WriteX 12902 196608 65536 65536 NT_STATUS_OK
WriteX 12902 262144 65536 65536 NT_STATUS_OK
WriteX 12902 327680 65536 65536 NT_STATUS_OK
WriteX 12902 393216 65536 65536 NT_STATUS_OK
WriteX 12902 458752 65536 65536 NT_STATUS_OK
WriteX 12902 524288 65536 65536 NT_STATUS_OK
WriteX 12902 589824 57598 57598 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12904 NT_STATUS_OK
WriteX 12904 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12904 258 NT_STATUS_OK
WriteX 12904 0 12543 12543 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
Close 12904 NT_STATUS_OK
Close 12888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12908 NT_STATUS_OK
ReadX 12908 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12910 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1005 NT_STATUS_OK
ReadX 12910 1938 24 24 NT_STATUS_OK
ReadX 12910 1920 276 276 NT_STATUS_OK
ReadX 12910 1918 14 14 NT_STATUS_OK
ReadX 12910 1918 7 7 NT_STATUS_OK
ReadX 12910 1919 12 12 NT_STATUS_OK
ReadX 12910 1919 8 8 NT_STATUS_OK
ReadX 12910 1917 15 15 NT_STATUS_OK
ReadX 12910 0 16 16 NT_STATUS_OK
ReadX 12910 16 2048 2048 NT_STATUS_OK
ReadX 12910 2064 2048 2048 NT_STATUS_OK
ReadX 12910 257 2048 2048 NT_STATUS_OK
ReadX 12910 385 2048 2048 NT_STATUS_OK
ReadX 12910 513 2048 2048 NT_STATUS_OK
ReadX 12910 641 2048 2048 NT_STATUS_OK
ReadX 12910 769 2048 2048 NT_STATUS_OK
ReadX 12910 897 2048 2048 NT_STATUS_OK
ReadX 12910 1025 2048 2048 NT_STATUS_OK
ReadX 12910 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12912 NT_STATUS_OK
Close 12912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12915 NT_STATUS_OK
WriteX 12915 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 258 NT_STATUS_OK
WriteX 12915 0 11588 11588 NT_STATUS_OK
Flush 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 4096 4096 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12920 NT_STATUS_OK
WriteX 12920 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12920 258 NT_STATUS_OK
WriteX 12920 0 11615 11615 NT_STATUS_OK
Flush 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12922 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12926 NT_STATUS_OK
Close 12926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12929 NT_STATUS_OK
WriteX 12929 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 65536 65536 NT_STATUS_OK
WriteX 12929 65536 16050 16050 NT_STATUS_OK
Close 12929 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12909 1939 64 64 NT_STATUS_OK
ReadX 12909 128 248 248 NT_STATUS_OK
ReadX 12909 128 568 568 NT_STATUS_OK
ReadX 12909 3872 1536 1536 NT_STATUS_OK
ReadX 12909 3456 2560 2560 NT_STATUS_OK
ReadX 12909 3136 512 512 NT_STATUS_OK
ReadX 12909 2880 4096 4096 NT_STATUS_OK
ReadX 12909 3264 3072 3072 NT_STATUS_OK
ReadX 12909 320 4096 4096 NT_STATUS_OK
ReadX 12909 1024 4096 4096 NT_STATUS_OK
ReadX 12909 3616 4096 4096 NT_STATUS_OK
ReadX 12909 1939 64 64 NT_STATUS_OK
ReadX 12909 128 248 248 NT_STATUS_OK
ReadX 12909 128 608 608 NT_STATUS_OK
ReadX 12909 2858 1024 1024 NT_STATUS_OK
ReadX 12909 2810 4096 4096 NT_STATUS_OK
ReadX 12909 2826 4096 4096 NT_STATUS_OK
ReadX 12909 2580 2048 2048 NT_STATUS_OK
ReadX 12909 2800 2560 2560 NT_STATUS_OK
ReadX 12909 2100 4096 4096 NT_STATUS_OK
ReadX 12909 2084 4096 4096 NT_STATUS_OK
ReadX 12909 868 4096 4096 NT_STATUS_OK
ReadX 12909 2324 4096 4096 NT_STATUS_OK
ReadX 12909 884 4096 4096 NT_STATUS_OK
ReadX 12909 2604 1024 1024 NT_STATUS_OK
ReadX 12909 580 4096 4096 NT_STATUS_OK
ReadX 12909 596 4096 4096 NT_STATUS_OK
ReadX 12909 2752 4096 4096 NT_STATUS_OK
ReadX 12909 2842 1024 1024 NT_STATUS_OK
ReadX 12909 660 4096 4096 NT_STATUS_OK
ReadX 12909 2720 4096 4096 NT_STATUS_OK
ReadX 12909 2736 4096 4096 NT_STATUS_OK
ReadX 12909 628 4096 4096 NT_STATUS_OK
ReadX 12909 2704 4096 4096 NT_STATUS_OK
ReadX 12909 1556 4096 4096 NT_STATUS_OK
ReadX 12909 576 4096 4096 NT_STATUS_OK
ReadX 12909 3168 1536 1536 NT_STATUS_OK
ReadX 12909 832 4096 4096 NT_STATUS_OK
ReadX 12909 1088 4096 4096 NT_STATUS_OK
ReadX 12909 1344 4096 4096 NT_STATUS_OK
ReadX 12909 1600 4096 4096 NT_STATUS_OK
ReadX 12909 1856 4096 4096 NT_STATUS_OK
ReadX 12909 2112 4096 4096 NT_STATUS_OK
ReadX 12909 1892 4096 4096 NT_STATUS_OK
ReadX 12909 820 4096 4096 NT_STATUS_OK
ReadX 12909 788 4096 4096 NT_STATUS_OK
ReadX 12909 1604 4096 4096 NT_STATUS_OK
ReadX 12909 3648 4096 4096 NT_STATUS_OK
ReadX 12909 2608 4096 4096 NT_STATUS_OK
ReadX 12909 548 4096 4096 NT_STATUS_OK
ReadX 12909 740 4096 4096 NT_STATUS_OK
ReadX 12909 1344 4096 4096 NT_STATUS_OK
ReadX 12909 3392 4096 4096 NT_STATUS_OK
ReadX 12909 3904 4096 4096 NT_STATUS_OK
ReadX 12909 644 4096 4096 NT_STATUS_OK
ReadX 12909 676 4096 4096 NT_STATUS_OK
ReadX 12909 2688 4096 4096 NT_STATUS_OK
ReadX 12909 320 4096 4096 NT_STATUS_OK
ReadX 12909 900 4096 4096 NT_STATUS_OK
ReadX 12909 1908 4096 4096 NT_STATUS_OK
ReadX 12909 852 4096 4096 NT_STATUS_OK
ReadX 12909 724 4096 4096 NT_STATUS_OK
ReadX 12909 2292 4096 4096 NT_STATUS_OK
ReadX 12909 612 4096 4096 NT_STATUS_OK
ReadX 12909 388 4096 4096 NT_STATUS_OK
ReadX 12909 2368 4096 4096 NT_STATUS_OK
ReadX 12909 2624 4096 4096 NT_STATUS_OK
ReadX 12909 500 4096 4096 NT_STATUS_OK
ReadX 12909 356 4096 4096 NT_STATUS_OK
ReadX 12909 1024 4096 4096 NT_STATUS_OK
ReadX 12909 576 4096 4096 NT_STATUS_OK
ReadX 12909 340 4096 4096 NT_STATUS_OK
ReadX 12909 420 4096 4096 NT_STATUS_OK
ReadX 12909 1600 4096 4096 NT_STATUS_OK
ReadX 12909 404 4096 4096 NT_STATUS_OK
ReadX 12909 1428 4096 4096 NT_STATUS_OK
ReadX 12909 2656 4096 4096 NT_STATUS_OK
ReadX 12909 2624 4096 4096 NT_STATUS_OK
ReadX 12909 452 4096 4096 NT_STATUS_OK
ReadX 12909 692 4096 4096 NT_STATUS_OK
ReadX 12909 564 4096 4096 NT_STATUS_OK
ReadX 12909 372 4096 4096 NT_STATUS_OK
ReadX 12909 468 4096 4096 NT_STATUS_OK
ReadX 12909 484 4096 4096 NT_STATUS_OK
ReadX 12909 1088 4096 4096 NT_STATUS_OK
ReadX 12909 1924 4096 4096 NT_STATUS_OK
ReadX 12909 2768 4096 4096 NT_STATUS_OK
ReadX 12909 832 4096 4096 NT_STATUS_OK
ReadX 12909 836 4096 4096 NT_STATUS_OK
ReadX 12909 1856 4096 4096 NT_STATUS_OK
ReadX 12909 2640 4096 4096 NT_STATUS_OK
ReadX 12909 436 4096 4096 NT_STATUS_OK
ReadX 12909 1828 4096 4096 NT_STATUS_OK
ReadX 12909 804 4096 4096 NT_STATUS_OK
ReadX 12909 1860 4096 4096 NT_STATUS_OK
ReadX 12909 1812 4096 4096 NT_STATUS_OK
ReadX 12909 756 4096 4096 NT_STATUS_OK
ReadX 12909 1636 4096 4096 NT_STATUS_OK
ReadX 12909 772 4096 4096 NT_STATUS_OK
ReadX 12909 2036 4096 4096 NT_STATUS_OK
ReadX 12909 1220 4096 4096 NT_STATUS_OK
ReadX 12909 1652 4096 4096 NT_STATUS_OK
ReadX 12909 2588 4096 4096 NT_STATUS_OK
ReadX 12909 916 4096 4096 NT_STATUS_OK
ReadX 12909 260 4096 4096 NT_STATUS_OK
ReadX 12909 932 4096 4096 NT_STATUS_OK
ReadX 12909 2624 4096 4096 NT_STATUS_OK
ReadX 12909 308 4096 4096 NT_STATUS_OK
ReadX 12909 292 4096 4096 NT_STATUS_OK
ReadX 12909 1140 4096 4096 NT_STATUS_OK
ReadX 12909 276 4096 4096 NT_STATUS_OK
ReadX 12909 2020 4096 4096 NT_STATUS_OK
ReadX 12909 2880 4096 4096 NT_STATUS_OK
ReadX 12909 516 4096 4096 NT_STATUS_OK
ReadX 12909 1844 4096 4096 NT_STATUS_OK
ReadX 12909 1124 4096 4096 NT_STATUS_OK
ReadX 12909 3136 4096 4096 NT_STATUS_OK
ReadX 12909 324 4096 4096 NT_STATUS_OK
ReadX 12909 1156 4096 4096 NT_STATUS_OK
ReadX 12909 1172 4096 4096 NT_STATUS_OK
ReadX 12909 2112 4096 4096 NT_STATUS_OK
ReadX 12909 2368 4096 4096 NT_STATUS_OK
ReadX 12909 964 4096 4096 NT_STATUS_OK
ReadX 12909 980 4096 4096 NT_STATUS_OK
ReadX 12909 1012 4096 4096 NT_STATUS_OK
ReadX 12909 532 4096 4096 NT_STATUS_OK
ReadX 12909 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12909 1620 4096 4096 NT_STATUS_OK
ReadX 12909 1604 4096 4096 NT_STATUS_OK
ReadX 12909 2116 4096 4096 NT_STATUS_OK
ReadX 12909 2132 4096 4096 NT_STATUS_OK
ReadX 12909 2148 4096 4096 NT_STATUS_OK
ReadX 12909 2276 4096 4096 NT_STATUS_OK
ReadX 12909 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12934 NT_STATUS_OK
QUERY_FILE_INFORMATION 12889 1004 NT_STATUS_OK
Close 12889 NT_STATUS_OK
WriteX 12934 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12934 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 1004 NT_STATUS_OK
Close 12891 NT_STATUS_OK
WriteX 12934 0 65536 65536 NT_STATUS_OK
WriteX 12934 65536 64850 64850 NT_STATUS_OK
Close 12934 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12936 NT_STATUS_OK
WriteX 12936 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12936 258 NT_STATUS_OK
ReadX 12909 2068 4096 4096 NT_STATUS_OK
ReadX 12909 1588 4096 4096 NT_STATUS_OK
ReadX 12909 1572 4096 4096 NT_STATUS_OK
WriteX 12936 0 18630 18630 NT_STATUS_OK
Flush 12936 NT_STATUS_OK
Close 12936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12938 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12909 612 4096 4096 NT_STATUS_OK
ReadX 12909 564 4096 4096 NT_STATUS_OK
ReadX 12909 1876 4096 4096 NT_STATUS_OK
ReadX 12909 628 4096 4096 NT_STATUS_OK
ReadX 12909 740 4096 4096 NT_STATUS_OK
ReadX 12909 724 4096 4096 NT_STATUS_OK
ReadX 12909 644 4096 4096 NT_STATUS_OK
ReadX 12909 2324 4096 4096 NT_STATUS_OK
ReadX 12909 660 4096 4096 NT_STATUS_OK
ReadX 12909 852 4096 4096 NT_STATUS_OK
ReadX 12909 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12909 2368 4096 4096 NT_STATUS_OK
ReadX 12909 1024 4096 4096 NT_STATUS_OK
ReadX 12909 320 4096 4096 NT_STATUS_OK
ReadX 12909 580 4096 4096 NT_STATUS_OK
ReadX 12909 3136 512 512 NT_STATUS_OK
ReadX 12909 2880 4096 4096 NT_STATUS_OK
Close 12909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 61440 4096 4096 NT_STATUS_OK
ReadX 12941 126976 4096 4096 NT_STATUS_OK
WriteX 12941 0 65536 65536 NT_STATUS_OK
WriteX 12941 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 61440 4096 4096 NT_STATUS_OK
ReadX 12942 126976 4096 4096 NT_STATUS_OK
ReadX 12942 192512 4096 4096 NT_STATUS_OK
ReadX 12942 258048 4096 4096 NT_STATUS_OK
WriteX 12942 0 65536 65536 NT_STATUS_OK
WriteX 12942 65536 65536 65536 NT_STATUS_OK
WriteX 12942 131072 65536 65536 NT_STATUS_OK
WriteX 12942 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 61440 4096 4096 NT_STATUS_OK
ReadX 12943 126976 4096 4096 NT_STATUS_OK
ReadX 12943 192512 4096 4096 NT_STATUS_OK
ReadX 12943 258048 4096 4096 NT_STATUS_OK
ReadX 12943 323584 4096 4096 NT_STATUS_OK
ReadX 12943 389120 4096 4096 NT_STATUS_OK
ReadX 12943 454656 4096 4096 NT_STATUS_OK
ReadX 12943 520192 4096 4096 NT_STATUS_OK
WriteX 12943 0 65536 65536 NT_STATUS_OK
WriteX 12943 65536 65536 65536 NT_STATUS_OK
WriteX 12943 131072 65536 65536 NT_STATUS_OK
WriteX 12943 196608 65536 65536 NT_STATUS_OK
WriteX 12943 262144 65536 65536 NT_STATUS_OK
WriteX 12943 327680 65536 65536 NT_STATUS_OK
WriteX 12943 393216 65536 65536 NT_STATUS_OK
WriteX 12943 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12946 NT_STATUS_OK
WriteX 12946 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12944 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Close 12908 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12942 NT_STATUS_OK
Close 12943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12951 NT_STATUS_OK
WriteX 12951 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12951 258 NT_STATUS_OK
WriteX 12951 0 62591 62591 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12956 NT_STATUS_OK
WriteX 12956 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12956 258 NT_STATUS_OK
WriteX 12956 0 10845 10845 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12961 NT_STATUS_OK
WriteX 12961 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
WriteX 12961 0 30118 30118 NT_STATUS_OK
Close 12961 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
WriteX 12946 0 64 64 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12944 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 61440 61440 NT_STATUS_OK
ReadX 12963 61440 4096 4096 NT_STATUS_OK
ReadX 12963 65536 61440 61440 NT_STATUS_OK
ReadX 12963 126976 4096 4096 NT_STATUS_OK
ReadX 12963 131072 61440 61440 NT_STATUS_OK
ReadX 12963 192512 4096 4096 NT_STATUS_OK
ReadX 12963 196608 61440 61440 NT_STATUS_OK
ReadX 12963 258048 4096 4096 NT_STATUS_OK
ReadX 12963 262144 61440 61440 NT_STATUS_OK
ReadX 12963 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 61440 61440 NT_STATUS_OK
ReadX 12964 61440 4096 4096 NT_STATUS_OK
ReadX 12964 65536 61440 61440 NT_STATUS_OK
ReadX 12964 126976 4096 4096 NT_STATUS_OK
ReadX 12964 131072 61440 61440 NT_STATUS_OK
ReadX 12964 192512 4096 4096 NT_STATUS_OK
ReadX 12964 196608 61440 61440 NT_STATUS_OK
ReadX 12964 258048 4096 4096 NT_STATUS_OK
ReadX 12964 262144 61440 61440 NT_STATUS_OK
ReadX 12964 323584 4096 4096 NT_STATUS_OK
ReadX 12964 327680 61440 61440 NT_STATUS_OK
ReadX 12964 389120 4096 4096 NT_STATUS_OK
ReadX 12964 393216 61440 61440 NT_STATUS_OK
ReadX 12964 454656 4096 4096 NT_STATUS_OK
ReadX 12964 458752 61440 61440 NT_STATUS_OK
ReadX 12964 520192 4096 4096 NT_STATUS_OK
ReadX 12964 524288 61440 61440 NT_STATUS_OK
ReadX 12964 585728 4096 4096 NT_STATUS_OK
ReadX 12964 589824 61440 61440 NT_STATUS_OK
ReadX 12964 651264 4096 4096 NT_STATUS_OK
ReadX 12964 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 61440 61440 NT_STATUS_OK
ReadX 12965 61440 4096 4096 NT_STATUS_OK
ReadX 12965 65536 61440 61440 NT_STATUS_OK
ReadX 12965 126976 4096 4096 NT_STATUS_OK
ReadX 12965 131072 61440 61440 NT_STATUS_OK
ReadX 12965 192512 4096 4096 NT_STATUS_OK
ReadX 12965 196608 61440 61440 NT_STATUS_OK
ReadX 12965 258048 4096 4096 NT_STATUS_OK
ReadX 12965 262144 61440 61440 NT_STATUS_OK
ReadX 12965 323584 4096 4096 NT_STATUS_OK
ReadX 12965 327680 61440 61440 NT_STATUS_OK
ReadX 12965 389120 4096 4096 NT_STATUS_OK
ReadX 12965 393216 61440 61440 NT_STATUS_OK
ReadX 12965 454656 4096 4096 NT_STATUS_OK
ReadX 12965 458752 61440 61440 NT_STATUS_OK
ReadX 12965 520192 4096 4096 NT_STATUS_OK
ReadX 12965 524288 61440 61440 NT_STATUS_OK
ReadX 12965 585728 4096 4096 NT_STATUS_OK
ReadX 12965 589824 61440 61440 NT_STATUS_OK
ReadX 12965 651264 4096 4096 NT_STATUS_OK
ReadX 12965 655360 61440 61440 NT_STATUS_OK
ReadX 12965 716800 4096 4096 NT_STATUS_OK
ReadX 12965 720896 61440 61440 NT_STATUS_OK
ReadX 12965 782336 4096 4096 NT_STATUS_OK
ReadX 12965 786432 61440 61440 NT_STATUS_OK
ReadX 12965 847872 4096 4096 NT_STATUS_OK
ReadX 12965 851968 61440 61440 NT_STATUS_OK
ReadX 12965 913408 4096 4096 NT_STATUS_OK
ReadX 12965 917504 61440 61440 NT_STATUS_OK
ReadX 12965 978944 4096 4096 NT_STATUS_OK
ReadX 12965 983040 61440 61440 NT_STATUS_OK
ReadX 12965 1044480 4096 4096 NT_STATUS_OK
ReadX 12965 1048576 61440 61440 NT_STATUS_OK
ReadX 12965 1110016 4096 4096 NT_STATUS_OK
ReadX 12965 1114112 61440 61440 NT_STATUS_OK
ReadX 12965 1175552 4096 4096 NT_STATUS_OK
ReadX 12965 1179648 61440 61440 NT_STATUS_OK
ReadX 12965 1241088 4096 4096 NT_STATUS_OK
ReadX 12965 1245184 61440 61440 NT_STATUS_OK
ReadX 12965 1306624 4096 4096 NT_STATUS_OK
ReadX 12965 1310720 61440 61440 NT_STATUS_OK
ReadX 12965 1372160 4096 4096 NT_STATUS_OK
ReadX 12965 1376256 61440 61440 NT_STATUS_OK
ReadX 12965 1437696 4096 4096 NT_STATUS_OK
ReadX 12965 1441792 61440 61440 NT_STATUS_OK
ReadX 12965 1503232 4096 4096 NT_STATUS_OK
ReadX 12965 1507328 61440 61440 NT_STATUS_OK
ReadX 12965 1568768 4096 4096 NT_STATUS_OK
ReadX 12965 1572864 61440 61440 NT_STATUS_OK
ReadX 12965 1634304 4096 4096 NT_STATUS_OK
ReadX 12965 1638400 61440 61440 NT_STATUS_OK
ReadX 12965 1699840 4096 4096 NT_STATUS_OK
ReadX 12965 1703936 61440 61440 NT_STATUS_OK
ReadX 12965 1765376 4096 4096 NT_STATUS_OK
ReadX 12965 1769472 61440 61440 NT_STATUS_OK
ReadX 12965 1830912 4096 4096 NT_STATUS_OK
ReadX 12965 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
ReadX 12970 4096 4096 4096 NT_STATUS_OK
ReadX 12970 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12974 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Close 12974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 0 8192 8192 NT_STATUS_OK
ReadX 12978 8192 8192 8192 NT_STATUS_OK
ReadX 12978 16384 8192 8192 NT_STATUS_OK
ReadX 12978 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12980 NT_STATUS_OK
Close 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12983 NT_STATUS_OK
WriteX 12983 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12983 258 NT_STATUS_OK
WriteX 12983 0 10438 10438 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12985 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12988 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12989 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
ReadX 12992 4096 4096 4096 NT_STATUS_OK
ReadX 12992 8192 4096 4096 NT_STATUS_OK
ReadX 12992 12288 8192 8192 NT_STATUS_OK
ReadX 12992 20480 8192 8192 NT_STATUS_OK
ReadX 12992 28672 8192 8192 NT_STATUS_OK
ReadX 12992 36864 8192 8192 NT_STATUS_OK
ReadX 12992 45056 8192 8192 NT_STATUS_OK
ReadX 12992 53248 8192 8192 NT_STATUS_OK
ReadX 12992 61440 8192 8192 NT_STATUS_OK
ReadX 12992 69632 8192 8192 NT_STATUS_OK
ReadX 12992 77824 8192 8192 NT_STATUS_OK
ReadX 12992 86016 8192 8192 NT_STATUS_OK
ReadX 12992 94208 8192 8192 NT_STATUS_OK
ReadX 12992 102400 8192 8192 NT_STATUS_OK
ReadX 12992 110592 8192 8192 NT_STATUS_OK
ReadX 12992 118784 8192 8192 NT_STATUS_OK
ReadX 12992 126976 8192 8192 NT_STATUS_OK
ReadX 12992 135168 8192 8192 NT_STATUS_OK
ReadX 12992 143360 8192 8192 NT_STATUS_OK
ReadX 12992 151552 8192 8192 NT_STATUS_OK
ReadX 12992 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12985 NT_STATUS_OK
Close 12987 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12994 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12997 NT_STATUS_OK
WriteX 12997 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12997 258 NT_STATUS_OK
WriteX 12997 0 28489 28489 NT_STATUS_OK
Close 12997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12998 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13000 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 8192 8192 NT_STATUS_OK
ReadX 13004 8192 8192 8192 NT_STATUS_OK
ReadX 13004 16384 8192 8192 NT_STATUS_OK
ReadX 13004 24576 8192 8192 NT_STATUS_OK
ReadX 13004 32768 16384 16384 NT_STATUS_OK
ReadX 13004 49152 8192 8192 NT_STATUS_OK
ReadX 13004 57344 8192 8192 NT_STATUS_OK
ReadX 13004 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13006 NT_STATUS_OK
Close 13006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13009 NT_STATUS_OK
WriteX 13009 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13009 258 NT_STATUS_OK
WriteX 13009 0 29253 29253 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13016 NT_STATUS_OK
WriteX 13016 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13016 258 NT_STATUS_OK
WriteX 13016 0 30183 30183 NT_STATUS_OK
Close 13016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13019 NT_STATUS_OK
WriteX 13019 0 510 510 NT_STATUS_OK
WriteX 13019 510 512 512 NT_STATUS_OK
WriteX 13019 1022 510 510 NT_STATUS_OK
WriteX 13019 1532 510 510 NT_STATUS_OK
WriteX 13019 2042 168 168 NT_STATUS_OK
Close 13019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 0 4096 4096 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 61440 4096 4096 NT_STATUS_OK
ReadX 13023 126976 4096 4096 NT_STATUS_OK
WriteX 13023 0 65536 65536 NT_STATUS_OK
WriteX 13023 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 61440 4096 4096 NT_STATUS_OK
ReadX 13024 126976 4096 4096 NT_STATUS_OK
ReadX 13024 192512 4096 4096 NT_STATUS_OK
ReadX 13024 258048 4096 4096 NT_STATUS_OK
WriteX 13024 0 65536 65536 NT_STATUS_OK
WriteX 13024 65536 65536 65536 NT_STATUS_OK
WriteX 13024 131072 65536 65536 NT_STATUS_OK
WriteX 13024 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 61440 4096 4096 NT_STATUS_OK
ReadX 13025 126976 4096 4096 NT_STATUS_OK
ReadX 13025 192512 4096 4096 NT_STATUS_OK
ReadX 13025 258048 4096 4096 NT_STATUS_OK
ReadX 13025 323584 4096 4096 NT_STATUS_OK
ReadX 13025 389120 4096 4096 NT_STATUS_OK
ReadX 13025 454656 4096 4096 NT_STATUS_OK
ReadX 13025 520192 4096 4096 NT_STATUS_OK
WriteX 13025 0 65536 65536 NT_STATUS_OK
WriteX 13025 65536 65536 65536 NT_STATUS_OK
WriteX 13025 131072 65536 65536 NT_STATUS_OK
WriteX 13025 196608 65536 65536 NT_STATUS_OK
WriteX 13025 262144 65536 65536 NT_STATUS_OK
WriteX 13025 327680 65536 65536 NT_STATUS_OK
WriteX 13025 393216 65536 65536 NT_STATUS_OK
WriteX 13025 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13022 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13032 NT_STATUS_OK
Close 13032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13037 NT_STATUS_OK
Close 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13041 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13044 NT_STATUS_OK
Close 13044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13091 NT_STATUS_OK
Close 13091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13094 NT_STATUS_OK
WriteX 13094 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13094 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13094 0 65536 65536 NT_STATUS_OK
WriteX 13094 65536 65536 65536 NT_STATUS_OK
WriteX 13094 131072 65536 65536 NT_STATUS_OK
WriteX 13094 196608 65536 65536 NT_STATUS_OK
WriteX 13094 262144 26634 26634 NT_STATUS_OK
Close 13094 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
ReadX 13102 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13102 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13121 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13164 NT_STATUS_OK
Close 13164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13169 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13179 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
Close 13181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
Close 13182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13226 0 4096 4096 NT_STATUS_OK
Close 13226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
ReadX 13228 4096 4096 4096 NT_STATUS_OK
ReadX 13228 8192 4096 4096 NT_STATUS_OK
ReadX 13228 12288 4096 4096 NT_STATUS_OK
ReadX 13228 16384 4096 4096 NT_STATUS_OK
ReadX 13228 20480 4096 4096 NT_STATUS_OK
ReadX 13228 24576 4096 4096 NT_STATUS_OK
ReadX 13228 28672 4096 4096 NT_STATUS_OK
ReadX 13228 32768 4096 4096 NT_STATUS_OK
ReadX 13228 36864 4096 4096 NT_STATUS_OK
ReadX 13228 40960 4096 4096 NT_STATUS_OK
ReadX 13228 45056 4096 4096 NT_STATUS_OK
ReadX 13228 49152 4096 4096 NT_STATUS_OK
ReadX 13228 53248 4096 4096 NT_STATUS_OK
ReadX 13228 57344 4096 4096 NT_STATUS_OK
ReadX 13228 61440 4096 4096 NT_STATUS_OK
ReadX 13228 65536 4096 4096 NT_STATUS_OK
ReadX 13228 69632 4096 4096 NT_STATUS_OK
ReadX 13228 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13228 1004 NT_STATUS_OK
WriteX 13228 0 4096 4096 NT_STATUS_OK
Close 13228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13229 NT_STATUS_OK
SET_FILE_INFORMATION 13229 1004 NT_STATUS_OK
Close 13229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13231 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13234 NT_STATUS_OK
WriteX 13234 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13234 258 NT_STATUS_OK
WriteX 13234 0 65536 65536 NT_STATUS_OK
WriteX 13234 65536 19979 19979 NT_STATUS_OK
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
QUERY_FILE_INFORMATION 13235 1004 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
SET_FILE_INFORMATION 13235 1004 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
Close 13235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13240 1004 NT_STATUS_OK
WriteX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13246 NT_STATUS_OK
WriteX 13246 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 258 NT_STATUS_OK
WriteX 13246 0 65536 65536 NT_STATUS_OK
WriteX 13246 65536 17654 17654 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
QUERY_FILE_INFORMATION 13247 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
SET_FILE_INFORMATION 13247 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13248 NT_STATUS_OK
SET_FILE_INFORMATION 13248 1004 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13250 NT_STATUS_OK
Close 13250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
ReadX 13252 4096 4096 4096 NT_STATUS_OK
ReadX 13252 8192 4096 4096 NT_STATUS_OK
ReadX 13252 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13252 16384 4096 4096 NT_STATUS_OK
ReadX 13252 20480 4096 4096 NT_STATUS_OK
ReadX 13252 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
Close 13253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 4096 4096 NT_STATUS_OK
Close 13254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13255 1004 NT_STATUS_OK
WriteX 13255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13258 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13261 NT_STATUS_OK
WriteX 13261 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13261 258 NT_STATUS_OK
WriteX 13261 0 65536 65536 NT_STATUS_OK
WriteX 13261 65536 19490 19490 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 1004 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
SET_FILE_INFORMATION 13262 1004 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13263 NT_STATUS_OK
SET_FILE_INFORMATION 13263 1004 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13265 NT_STATUS_OK
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13267 0 4096 4096 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
ReadX 13269 4096 4096 4096 NT_STATUS_OK
ReadX 13269 8192 4096 4096 NT_STATUS_OK
ReadX 13269 12288 4096 4096 NT_STATUS_OK
ReadX 13269 16384 4096 4096 NT_STATUS_OK
ReadX 13269 20480 4096 4096 NT_STATUS_OK
ReadX 13269 24576 4096 4096 NT_STATUS_OK
ReadX 13269 28672 4096 4096 NT_STATUS_OK
ReadX 13269 32768 4096 4096 NT_STATUS_OK
ReadX 13269 36864 4096 4096 NT_STATUS_OK
ReadX 13269 40960 4096 4096 NT_STATUS_OK
ReadX 13269 45056 4096 4096 NT_STATUS_OK
ReadX 13269 49152 4096 4096 NT_STATUS_OK
ReadX 13269 53248 4096 4096 NT_STATUS_OK
ReadX 13269 57344 4096 4096 NT_STATUS_OK
ReadX 13269 61440 4096 4096 NT_STATUS_OK
ReadX 13269 65536 4096 4096 NT_STATUS_OK
ReadX 13269 69632 4096 4096 NT_STATUS_OK
ReadX 13269 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13269 1004 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13270 NT_STATUS_OK
SET_FILE_INFORMATION 13270 1004 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13275 NT_STATUS_OK
WriteX 13275 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13275 258 NT_STATUS_OK
WriteX 13275 0 65536 65536 NT_STATUS_OK
WriteX 13275 65536 8866 8866 NT_STATUS_OK
Close 13275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
Flush 13276 NT_STATUS_OK
SET_FILE_INFORMATION 13276 1004 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
Flush 13276 NT_STATUS_OK
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
Close 13279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13271 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
WriteX 13286 0 65536 65536 NT_STATUS_OK
WriteX 13286 65536 9298 9298 NT_STATUS_OK
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
SET_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13288 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13293 0 4096 4096 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13294 4096 4096 4096 NT_STATUS_OK
ReadX 13294 8192 4096 4096 NT_STATUS_OK
ReadX 13294 12288 4096 4096 NT_STATUS_OK
ReadX 13294 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 4096 4096 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13297 1004 NT_STATUS_OK
WriteX 13297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13298 NT_STATUS_OK
Close 13298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13300 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13303 NT_STATUS_OK
WriteX 13303 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
WriteX 13303 0 65536 65536 NT_STATUS_OK
WriteX 13303 65536 11540 11540 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
SET_FILE_INFORMATION 13304 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13305 NT_STATUS_OK
SET_FILE_INFORMATION 13305 1004 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 61440 4096 4096 NT_STATUS_OK
ReadX 13309 126976 4096 4096 NT_STATUS_OK
WriteX 13309 0 65536 65536 NT_STATUS_OK
WriteX 13309 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 61440 4096 4096 NT_STATUS_OK
ReadX 13310 126976 4096 4096 NT_STATUS_OK
ReadX 13310 192512 4096 4096 NT_STATUS_OK
ReadX 13310 258048 4096 4096 NT_STATUS_OK
WriteX 13310 0 65536 65536 NT_STATUS_OK
WriteX 13310 65536 65536 65536 NT_STATUS_OK
WriteX 13310 131072 65536 65536 NT_STATUS_OK
WriteX 13310 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 61440 4096 4096 NT_STATUS_OK
ReadX 13311 126976 4096 4096 NT_STATUS_OK
ReadX 13311 192512 4096 4096 NT_STATUS_OK
ReadX 13311 258048 4096 4096 NT_STATUS_OK
ReadX 13311 323584 4096 4096 NT_STATUS_OK
ReadX 13311 389120 4096 4096 NT_STATUS_OK
ReadX 13311 454656 4096 4096 NT_STATUS_OK
ReadX 13311 520192 4096 4096 NT_STATUS_OK
WriteX 13311 0 65536 65536 NT_STATUS_OK
WriteX 13311 65536 65536 65536 NT_STATUS_OK
WriteX 13311 131072 65536 65536 NT_STATUS_OK
WriteX 13311 196608 65536 65536 NT_STATUS_OK
WriteX 13311 262144 65536 65536 NT_STATUS_OK
WriteX 13311 327680 65536 65536 NT_STATUS_OK
WriteX 13311 393216 65536 65536 NT_STATUS_OK
WriteX 13311 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
ReadX 13312 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13313 NT_STATUS_OK
WriteX 13313 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13313 258 NT_STATUS_OK
WriteX 13313 0 53 53 NT_STATUS_OK
Close 13313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13312 8192 4096 4096 NT_STATUS_OK
ReadX 13312 12288 4096 4096 NT_STATUS_OK
WriteX 13316 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13316 258 NT_STATUS_OK
ReadX 13312 16384 4096 4096 NT_STATUS_OK
ReadX 13312 20480 4096 4096 NT_STATUS_OK
WriteX 13316 0 15360 15360 NT_STATUS_OK
Close 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13317 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13317 1004 NT_STATUS_OK
WriteX 13317 0 4096 4096 NT_STATUS_OK
Close 13317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13318 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13321 NT_STATUS_OK
Close 13321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13320 4096 4096 4096 NT_STATUS_OK
ReadX 13320 8192 4096 4096 NT_STATUS_OK
ReadX 13320 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
ReadX 13323 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
ReadX 13324 4096 4096 4096 NT_STATUS_OK
ReadX 13324 8192 4096 4096 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13325 NT_STATUS_OK
WriteX 13325 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13325 258 NT_STATUS_OK
WriteX 13325 0 15360 15360 NT_STATUS_OK
Close 13325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13326 NT_STATUS_OK
ReadX 13326 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13330 NT_STATUS_OK
SET_FILE_INFORMATION 13330 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
WriteX 13326 0 4096 4096 NT_STATUS_OK
Close 13326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13331 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 0 4096 4096 NT_STATUS_OK
ReadX 13333 4096 4096 4096 NT_STATUS_OK
ReadX 13333 8192 4096 4096 NT_STATUS_OK
ReadX 13333 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13333 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13333 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13335 NT_STATUS_OK
WriteX 13335 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 53 53 NT_STATUS_OK
Close 13335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13334 4096 4096 4096 NT_STATUS_OK
ReadX 13334 8192 4096 4096 NT_STATUS_OK
ReadX 13334 12288 4096 4096 NT_STATUS_OK
WriteX 13338 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
WriteX 13338 0 12006 12006 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
WriteX 13339 0 4096 4096 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13342 4096 4096 4096 NT_STATUS_OK
ReadX 13342 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13345 NT_STATUS_OK
WriteX 13345 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13345 258 NT_STATUS_OK
WriteX 13345 0 11991 11991 NT_STATUS_OK
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13350 NT_STATUS_OK
SET_FILE_INFORMATION 13350 1004 NT_STATUS_OK
Close 13350 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13351 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13353 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
ReadX 13353 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
Close 13329 NT_STATUS_OK
WriteX 13333 0 19054 19054 NT_STATUS_OK
WriteX 13353 0 12288 12288 NT_STATUS_OK
Close 13349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 61440 61440 NT_STATUS_OK
ReadX 13360 61440 4096 4096 NT_STATUS_OK
ReadX 13360 65536 61440 61440 NT_STATUS_OK
ReadX 13360 126976 4096 4096 NT_STATUS_OK
ReadX 13360 131072 61440 61440 NT_STATUS_OK
ReadX 13360 192512 4096 4096 NT_STATUS_OK
ReadX 13360 196608 61440 61440 NT_STATUS_OK
ReadX 13360 258048 4096 4096 NT_STATUS_OK
ReadX 13360 262144 61440 61440 NT_STATUS_OK
ReadX 13360 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 61440 61440 NT_STATUS_OK
ReadX 13361 61440 4096 4096 NT_STATUS_OK
ReadX 13361 65536 61440 61440 NT_STATUS_OK
ReadX 13361 126976 4096 4096 NT_STATUS_OK
ReadX 13361 131072 61440 61440 NT_STATUS_OK
ReadX 13361 192512 4096 4096 NT_STATUS_OK
ReadX 13361 196608 61440 61440 NT_STATUS_OK
ReadX 13361 258048 4096 4096 NT_STATUS_OK
ReadX 13361 262144 61440 61440 NT_STATUS_OK
ReadX 13361 323584 4096 4096 NT_STATUS_OK
ReadX 13361 327680 61440 61440 NT_STATUS_OK
ReadX 13361 389120 4096 4096 NT_STATUS_OK
ReadX 13361 393216 61440 61440 NT_STATUS_OK
ReadX 13361 454656 4096 4096 NT_STATUS_OK
ReadX 13361 458752 61440 61440 NT_STATUS_OK
ReadX 13361 520192 4096 4096 NT_STATUS_OK
ReadX 13361 524288 61440 61440 NT_STATUS_OK
ReadX 13361 585728 4096 4096 NT_STATUS_OK
ReadX 13361 589824 61440 61440 NT_STATUS_OK
ReadX 13361 651264 4096 4096 NT_STATUS_OK
ReadX 13361 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 61440 61440 NT_STATUS_OK
ReadX 13362 61440 4096 4096 NT_STATUS_OK
ReadX 13362 65536 61440 61440 NT_STATUS_OK
ReadX 13362 126976 4096 4096 NT_STATUS_OK
ReadX 13362 131072 61440 61440 NT_STATUS_OK
ReadX 13362 192512 4096 4096 NT_STATUS_OK
ReadX 13362 196608 61440 61440 NT_STATUS_OK
ReadX 13362 258048 4096 4096 NT_STATUS_OK
ReadX 13362 262144 61440 61440 NT_STATUS_OK
ReadX 13362 323584 4096 4096 NT_STATUS_OK
ReadX 13362 327680 61440 61440 NT_STATUS_OK
ReadX 13362 389120 4096 4096 NT_STATUS_OK
ReadX 13362 393216 61440 61440 NT_STATUS_OK
ReadX 13362 454656 4096 4096 NT_STATUS_OK
ReadX 13362 458752 61440 61440 NT_STATUS_OK
ReadX 13362 520192 4096 4096 NT_STATUS_OK
ReadX 13362 524288 61440 61440 NT_STATUS_OK
ReadX 13362 585728 4096 4096 NT_STATUS_OK
ReadX 13362 589824 61440 61440 NT_STATUS_OK
ReadX 13362 651264 4096 4096 NT_STATUS_OK
ReadX 13362 655360 61440 61440 NT_STATUS_OK
ReadX 13362 716800 4096 4096 NT_STATUS_OK
ReadX 13362 720896 61440 61440 NT_STATUS_OK
ReadX 13362 782336 4096 4096 NT_STATUS_OK
ReadX 13362 786432 61440 61440 NT_STATUS_OK
ReadX 13362 847872 4096 4096 NT_STATUS_OK
ReadX 13362 851968 61440 61440 NT_STATUS_OK
ReadX 13362 913408 4096 4096 NT_STATUS_OK
ReadX 13362 917504 61440 61440 NT_STATUS_OK
ReadX 13362 978944 4096 4096 NT_STATUS_OK
ReadX 13362 983040 61440 61440 NT_STATUS_OK
ReadX 13362 1044480 4096 4096 NT_STATUS_OK
ReadX 13362 1048576 61440 61440 NT_STATUS_OK
ReadX 13362 1110016 4096 4096 NT_STATUS_OK
ReadX 13362 1114112 61440 61440 NT_STATUS_OK
ReadX 13362 1175552 4096 4096 NT_STATUS_OK
ReadX 13362 1179648 61440 61440 NT_STATUS_OK
ReadX 13362 1241088 4096 4096 NT_STATUS_OK
ReadX 13362 1245184 61440 61440 NT_STATUS_OK
ReadX 13362 1306624 4096 4096 NT_STATUS_OK
ReadX 13362 1310720 61440 61440 NT_STATUS_OK
ReadX 13362 1372160 4096 4096 NT_STATUS_OK
ReadX 13362 1376256 61440 61440 NT_STATUS_OK
ReadX 13362 1437696 4096 4096 NT_STATUS_OK
ReadX 13362 1441792 61440 61440 NT_STATUS_OK
ReadX 13362 1503232 4096 4096 NT_STATUS_OK
ReadX 13362 1507328 61440 61440 NT_STATUS_OK
ReadX 13362 1568768 4096 4096 NT_STATUS_OK
ReadX 13362 1572864 61440 61440 NT_STATUS_OK
ReadX 13362 1634304 4096 4096 NT_STATUS_OK
ReadX 13362 1638400 61440 61440 NT_STATUS_OK
ReadX 13362 1699840 4096 4096 NT_STATUS_OK
ReadX 13362 1703936 61440 61440 NT_STATUS_OK
ReadX 13362 1765376 4096 4096 NT_STATUS_OK
ReadX 13362 1769472 61440 61440 NT_STATUS_OK
ReadX 13362 1830912 4096 4096 NT_STATUS_OK
ReadX 13362 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13369 NT_STATUS_OK
QUERY_FILE_INFORMATION 13369 1004 NT_STATUS_OK
WriteX 13369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13369 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13370 NT_STATUS_OK
Close 13370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13371 NT_STATUS_OK
WriteX 13371 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13371 258 NT_STATUS_OK
WriteX 13371 0 491 491 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13369 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13374 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13375 NT_STATUS_OK
WriteX 13375 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 258 NT_STATUS_OK
WriteX 13375 0 543 543 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13376 NT_STATUS_OK
ReadX 13376 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13366 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13389 NT_STATUS_OK
QUERY_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13389 258 NT_STATUS_OK
WriteX 13389 0 2048 2048 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
Flush 13390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13395 NT_STATUS_OK
WriteX 13395 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 258 NT_STATUS_OK
WriteX 13395 0 2048 2048 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13401 NT_STATUS_OK
WriteX 13401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13401 258 NT_STATUS_OK
WriteX 13401 0 2048 2048 NT_STATUS_OK
Close 13401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 2048 2048 NT_STATUS_OK
ReadX 13380 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
WriteX 13380 0 8192 8192 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
WriteX 13382 0 4096 4096 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13396 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13426 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 1004 NT_STATUS_OK
WriteX 13426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 2048 2048 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13434 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1004 NT_STATUS_OK
WriteX 13434 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 258 NT_STATUS_OK
WriteX 13434 0 2048 2048 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13427 0 4096 4096 NT_STATUS_OK
Flush 13427 NT_STATUS_OK
WriteX 13435 0 4096 4096 NT_STATUS_OK
Flush 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13429 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13436 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13437 NT_STATUS_OK
WriteX 13437 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13437 258 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13440 NT_STATUS_OK
WriteX 13440 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13440 258 NT_STATUS_OK
WriteX 13440 0 4096 4096 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13441 0 4096 4096 NT_STATUS_OK
Close 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13447 NT_STATUS_OK
Close 13447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13448 NT_STATUS_OK
WriteX 13448 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13448 258 NT_STATUS_OK
WriteX 13448 0 2048 2048 NT_STATUS_OK
Close 13448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13460 NT_STATUS_OK
ReadX 13460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13461 NT_STATUS_OK
ReadX 13461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13463 NT_STATUS_OK
QUERY_FILE_INFORMATION 13463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Close 13460 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13465 NT_STATUS_OK
QUERY_FILE_INFORMATION 13465 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13485 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 1004 NT_STATUS_OK
WriteX 13485 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 258 NT_STATUS_OK
WriteX 13485 0 2048 2048 NT_STATUS_OK
Close 13485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13497 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 1004 NT_STATUS_OK
WriteX 13497 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 258 NT_STATUS_OK
WriteX 13497 0 2048 2048 NT_STATUS_OK
Close 13497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13505 NT_STATUS_OK
QUERY_FILE_INFORMATION 13505 1004 NT_STATUS_OK
WriteX 13505 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13505 258 NT_STATUS_OK
WriteX 13505 0 2048 2048 NT_STATUS_OK
Close 13505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
WriteX 13498 0 4096 4096 NT_STATUS_OK
Flush 13498 NT_STATUS_OK
WriteX 13506 0 4096 4096 NT_STATUS_OK
Flush 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13506 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13488 4096 16384 16384 NT_STATUS_OK
ReadX 13468 4096 16384 16384 NT_STATUS_OK
ReadX 13500 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13507 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 2048 2048 NT_STATUS_OK
WriteX 13508 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13509 NT_STATUS_OK
QUERY_FILE_INFORMATION 13509 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Close 13490 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13477 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Close 13476 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13511 NT_STATUS_OK
QUERY_FILE_INFORMATION 13511 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13513 NT_STATUS_OK
QUERY_FILE_INFORMATION 13513 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13520 NT_STATUS_OK
ReadX 13520 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13516 4096 16384 16384 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
WriteX 13517 0 4096 4096 NT_STATUS_OK
WriteX 13518 0 4096 4096 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13521 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13529 NT_STATUS_OK
ReadX 13529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13530 NT_STATUS_OK
ReadX 13530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 0 8192 8192 NT_STATUS_OK
ReadX 13522 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13536 0 4096 4096 NT_STATUS_OK
ReadX 13536 4096 4096 4096 NT_STATUS_OK
ReadX 13536 8192 4096 4096 NT_STATUS_OK
WriteX 13522 0 4096 4096 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
ReadX 13537 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
WriteX 13517 0 4096 4096 NT_STATUS_OK
WriteX 13518 0 4096 4096 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13542 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 1004 NT_STATUS_OK
WriteX 13542 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 258 NT_STATUS_OK
WriteX 13542 0 2048 2048 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 4096 4096 NT_STATUS_OK
ReadX 13545 4096 4096 4096 NT_STATUS_OK
WriteX 13545 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 0 4096 4096 NT_STATUS_OK
ReadX 13547 4096 4096 4096 NT_STATUS_OK
WriteX 13547 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13548 NT_STATUS_OK
QUERY_FILE_INFORMATION 13548 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13520 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13529 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13550 0 4096 4096 NT_STATUS_OK
ReadX 13550 4096 4096 4096 NT_STATUS_OK
ReadX 13550 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
ReadX 13551 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13568 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 1004 NT_STATUS_OK
WriteX 13568 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 258 NT_STATUS_OK
WriteX 13568 0 2048 2048 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13569 NT_STATUS_OK
ReadX 13569 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13569 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13574 NT_STATUS_OK
QUERY_FILE_INFORMATION 13574 1004 NT_STATUS_OK
WriteX 13574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13574 258 NT_STATUS_OK
WriteX 13574 0 2048 2048 NT_STATUS_OK
Close 13574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13558 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13576 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13563 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13578 NT_STATUS_OK
QUERY_FILE_INFORMATION 13578 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 61440 4096 4096 NT_STATUS_OK
ReadX 13580 126976 4096 4096 NT_STATUS_OK
WriteX 13580 0 65536 65536 NT_STATUS_OK
WriteX 13580 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 61440 4096 4096 NT_STATUS_OK
ReadX 13581 126976 4096 4096 NT_STATUS_OK
ReadX 13581 192512 4096 4096 NT_STATUS_OK
ReadX 13581 258048 4096 4096 NT_STATUS_OK
WriteX 13581 0 65536 65536 NT_STATUS_OK
WriteX 13581 65536 65536 65536 NT_STATUS_OK
WriteX 13581 131072 65536 65536 NT_STATUS_OK
WriteX 13581 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 61440 4096 4096 NT_STATUS_OK
ReadX 13582 126976 4096 4096 NT_STATUS_OK
ReadX 13582 192512 4096 4096 NT_STATUS_OK
ReadX 13582 258048 4096 4096 NT_STATUS_OK
ReadX 13582 323584 4096 4096 NT_STATUS_OK
ReadX 13582 389120 4096 4096 NT_STATUS_OK
ReadX 13582 454656 4096 4096 NT_STATUS_OK
ReadX 13582 520192 4096 4096 NT_STATUS_OK
WriteX 13582 0 65536 65536 NT_STATUS_OK
WriteX 13582 65536 65536 65536 NT_STATUS_OK
WriteX 13582 131072 65536 65536 NT_STATUS_OK
WriteX 13582 196608 65536 65536 NT_STATUS_OK
WriteX 13582 262144 65536 65536 NT_STATUS_OK
WriteX 13582 327680 65536 65536 NT_STATUS_OK
WriteX 13582 393216 65536 65536 NT_STATUS_OK
WriteX 13582 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13583 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13583 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13583 8192 4096 4096 NT_STATUS_OK
ReadX 13583 12288 4096 4096 NT_STATUS_OK
ReadX 13583 16384 4096 4096 NT_STATUS_OK
ReadX 13583 20480 4096 4096 NT_STATUS_OK
ReadX 13583 24576 4096 4096 NT_STATUS_OK
ReadX 13583 28672 4096 4096 NT_STATUS_OK
ReadX 13583 32768 4096 4096 NT_STATUS_OK
ReadX 13583 36864 4096 4096 NT_STATUS_OK
ReadX 13583 40960 4096 4096 NT_STATUS_OK
ReadX 13583 45056 4096 4096 NT_STATUS_OK
ReadX 13583 49152 4096 4096 NT_STATUS_OK
ReadX 13583 53248 4096 4096 NT_STATUS_OK
ReadX 13583 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13583 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13586 NT_STATUS_OK
WriteX 13586 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13586 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13586 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13586 1004 NT_STATUS_OK
WriteX 13586 0 57088 57088 NT_STATUS_OK
WriteX 13586 0 4096 4096 NT_STATUS_OK
Flush 13586 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13587 NT_STATUS_OK
SET_FILE_INFORMATION 13587 1004 NT_STATUS_OK
Close 13587 NT_STATUS_OK
SET_FILE_INFORMATION 13586 1004 NT_STATUS_OK
WriteX 13586 0 4096 4096 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13590 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13591 NT_STATUS_OK
WriteX 13591 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13591 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13591 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
WriteX 13591 0 51456 51456 NT_STATUS_OK
WriteX 13591 0 4096 4096 NT_STATUS_OK
Flush 13591 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
WriteX 13591 0 4096 4096 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13595 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13600 NT_STATUS_OK
WriteX 13600 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13600 258 NT_STATUS_OK
WriteX 13600 0 53077 53077 NT_STATUS_OK
Close 13600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13601 NT_STATUS_OK
WriteX 13601 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13601 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
WriteX 13601 0 65536 65536 NT_STATUS_OK
WriteX 13601 65536 1856 1856 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Flush 13601 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13607 NT_STATUS_OK
Close 13607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13610 NT_STATUS_OK
WriteX 13610 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 258 NT_STATUS_OK
WriteX 13610 0 7983 7983 NT_STATUS_OK
Close 13610 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13615 NT_STATUS_OK
WriteX 13615 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13615 258 NT_STATUS_OK
WriteX 13615 0 65536 65536 NT_STATUS_OK
WriteX 13615 65536 65536 65536 NT_STATUS_OK
WriteX 13615 131072 65536 65536 NT_STATUS_OK
WriteX 13615 196608 65536 65536 NT_STATUS_OK
WriteX 13615 262144 65536 65536 NT_STATUS_OK
WriteX 13615 327680 65536 65536 NT_STATUS_OK
WriteX 13615 393216 65536 65536 NT_STATUS_OK
WriteX 13615 458752 46731 46731 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13616 NT_STATUS_OK
WriteX 13616 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13605 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 65536 65536 NT_STATUS_OK
WriteX 13616 65536 22848 22848 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Flush 13616 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13620 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13621 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13621 1004 NT_STATUS_OK
ReadX 13621 8192 4096 4096 NT_STATUS_OK
ReadX 13621 12288 4096 4096 NT_STATUS_OK
ReadX 13621 16384 4096 4096 NT_STATUS_OK
ReadX 13621 20480 4096 4096 NT_STATUS_OK
ReadX 13621 24576 4096 4096 NT_STATUS_OK
ReadX 13621 28672 4096 4096 NT_STATUS_OK
ReadX 13621 32768 4096 4096 NT_STATUS_OK
ReadX 13621 36864 4096 4096 NT_STATUS_OK
ReadX 13621 40960 4096 4096 NT_STATUS_OK
ReadX 13621 45056 4096 4096 NT_STATUS_OK
ReadX 13621 49152 4096 4096 NT_STATUS_OK
ReadX 13621 53248 4096 4096 NT_STATUS_OK
ReadX 13621 57344 4096 4096 NT_STATUS_OK
ReadX 13621 61440 4096 4096 NT_STATUS_OK
ReadX 13621 65536 4096 4096 NT_STATUS_OK
ReadX 13621 69632 4096 4096 NT_STATUS_OK
ReadX 13621 73728 4096 4096 NT_STATUS_OK
ReadX 13621 77824 4096 4096 NT_STATUS_OK
ReadX 13621 81920 4096 4096 NT_STATUS_OK
ReadX 13621 86016 4096 4096 NT_STATUS_OK
ReadX 13621 90112 4096 4096 NT_STATUS_OK
ReadX 13621 94208 4096 4096 NT_STATUS_OK
ReadX 13621 98304 4096 4096 NT_STATUS_OK
ReadX 13621 102400 4096 4096 NT_STATUS_OK
ReadX 13621 106496 4096 4096 NT_STATUS_OK
ReadX 13621 110592 4096 4096 NT_STATUS_OK
ReadX 13621 114688 4096 4096 NT_STATUS_OK
ReadX 13621 118784 4096 4096 NT_STATUS_OK
ReadX 13621 122880 4096 4096 NT_STATUS_OK
ReadX 13621 126976 4096 4096 NT_STATUS_OK
ReadX 13621 131072 4096 4096 NT_STATUS_OK
ReadX 13621 135168 4096 4096 NT_STATUS_OK
ReadX 13621 139264 4096 4096 NT_STATUS_OK
ReadX 13621 143360 4096 4096 NT_STATUS_OK
ReadX 13621 147456 4096 4096 NT_STATUS_OK
ReadX 13621 151552 4096 4096 NT_STATUS_OK
ReadX 13621 155648 4096 4096 NT_STATUS_OK
ReadX 13621 159744 4096 4096 NT_STATUS_OK
ReadX 13621 163840 4096 4096 NT_STATUS_OK
ReadX 13621 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13621 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13624 NT_STATUS_OK
WriteX 13624 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 258 NT_STATUS_OK
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13625 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
Close 13625 NT_STATUS_OK
WriteX 13624 0 42388 42388 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13626 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13628 NT_STATUS_OK
ReadX 13628 0 4096 4096 NT_STATUS_OK
ReadX 13628 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13629 NT_STATUS_OK
WriteX 13629 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13629 258 NT_STATUS_OK
SET_FILE_INFORMATION 13629 1004 NT_STATUS_OK
WriteX 13629 0 42652 42652 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
ReadX 13633 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13638 NT_STATUS_OK
WriteX 13638 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 258 NT_STATUS_OK
WriteX 13638 0 65536 65536 NT_STATUS_OK
WriteX 13638 65536 49 49 NT_STATUS_OK
Close 13638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 61440 61440 NT_STATUS_OK
ReadX 13639 61440 4096 4096 NT_STATUS_OK
ReadX 13639 65536 61440 61440 NT_STATUS_OK
ReadX 13639 126976 4096 4096 NT_STATUS_OK
ReadX 13639 131072 61440 61440 NT_STATUS_OK
ReadX 13639 192512 4096 4096 NT_STATUS_OK
ReadX 13639 196608 61440 61440 NT_STATUS_OK
ReadX 13639 258048 4096 4096 NT_STATUS_OK
ReadX 13639 262144 61440 61440 NT_STATUS_OK
ReadX 13639 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 61440 61440 NT_STATUS_OK
ReadX 13640 61440 4096 4096 NT_STATUS_OK
ReadX 13640 65536 61440 61440 NT_STATUS_OK
ReadX 13640 126976 4096 4096 NT_STATUS_OK
ReadX 13640 131072 61440 61440 NT_STATUS_OK
ReadX 13640 192512 4096 4096 NT_STATUS_OK
ReadX 13640 196608 61440 61440 NT_STATUS_OK
ReadX 13640 258048 4096 4096 NT_STATUS_OK
ReadX 13640 262144 61440 61440 NT_STATUS_OK
ReadX 13640 323584 4096 4096 NT_STATUS_OK
ReadX 13640 327680 61440 61440 NT_STATUS_OK
ReadX 13640 389120 4096 4096 NT_STATUS_OK
ReadX 13640 393216 61440 61440 NT_STATUS_OK
ReadX 13640 454656 4096 4096 NT_STATUS_OK
ReadX 13640 458752 61440 61440 NT_STATUS_OK
ReadX 13640 520192 4096 4096 NT_STATUS_OK
ReadX 13640 524288 61440 61440 NT_STATUS_OK
ReadX 13640 585728 4096 4096 NT_STATUS_OK
ReadX 13640 589824 61440 61440 NT_STATUS_OK
ReadX 13640 651264 4096 4096 NT_STATUS_OK
ReadX 13640 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 61440 61440 NT_STATUS_OK
ReadX 13641 61440 4096 4096 NT_STATUS_OK
ReadX 13641 65536 61440 61440 NT_STATUS_OK
ReadX 13641 126976 4096 4096 NT_STATUS_OK
ReadX 13641 131072 61440 61440 NT_STATUS_OK
ReadX 13641 192512 4096 4096 NT_STATUS_OK
ReadX 13641 196608 61440 61440 NT_STATUS_OK
ReadX 13641 258048 4096 4096 NT_STATUS_OK
ReadX 13641 262144 61440 61440 NT_STATUS_OK
ReadX 13641 323584 4096 4096 NT_STATUS_OK
ReadX 13641 327680 61440 61440 NT_STATUS_OK
ReadX 13641 389120 4096 4096 NT_STATUS_OK
ReadX 13641 393216 61440 61440 NT_STATUS_OK
ReadX 13641 454656 4096 4096 NT_STATUS_OK
ReadX 13641 458752 61440 61440 NT_STATUS_OK
ReadX 13641 520192 4096 4096 NT_STATUS_OK
ReadX 13641 524288 61440 61440 NT_STATUS_OK
ReadX 13641 585728 4096 4096 NT_STATUS_OK
ReadX 13641 589824 61440 61440 NT_STATUS_OK
ReadX 13641 651264 4096 4096 NT_STATUS_OK
ReadX 13641 655360 61440 61440 NT_STATUS_OK
ReadX 13641 716800 4096 4096 NT_STATUS_OK
ReadX 13641 720896 61440 61440 NT_STATUS_OK
ReadX 13641 782336 4096 4096 NT_STATUS_OK
ReadX 13641 786432 61440 61440 NT_STATUS_OK
ReadX 13641 847872 4096 4096 NT_STATUS_OK
ReadX 13641 851968 61440 61440 NT_STATUS_OK
ReadX 13641 913408 4096 4096 NT_STATUS_OK
ReadX 13641 917504 61440 61440 NT_STATUS_OK
ReadX 13641 978944 4096 4096 NT_STATUS_OK
ReadX 13641 983040 61440 61440 NT_STATUS_OK
ReadX 13641 1044480 4096 4096 NT_STATUS_OK
ReadX 13641 1048576 61440 61440 NT_STATUS_OK
ReadX 13641 1110016 4096 4096 NT_STATUS_OK
ReadX 13641 1114112 61440 61440 NT_STATUS_OK
ReadX 13641 1175552 4096 4096 NT_STATUS_OK
ReadX 13641 1179648 61440 61440 NT_STATUS_OK
ReadX 13641 1241088 4096 4096 NT_STATUS_OK
ReadX 13641 1245184 61440 61440 NT_STATUS_OK
ReadX 13641 1306624 4096 4096 NT_STATUS_OK
ReadX 13641 1310720 61440 61440 NT_STATUS_OK
ReadX 13641 1372160 4096 4096 NT_STATUS_OK
ReadX 13641 1376256 61440 61440 NT_STATUS_OK
ReadX 13641 1437696 4096 4096 NT_STATUS_OK
ReadX 13641 1441792 61440 61440 NT_STATUS_OK
ReadX 13641 1503232 4096 4096 NT_STATUS_OK
ReadX 13641 1507328 61440 61440 NT_STATUS_OK
ReadX 13641 1568768 4096 4096 NT_STATUS_OK
ReadX 13641 1572864 61440 61440 NT_STATUS_OK
ReadX 13641 1634304 4096 4096 NT_STATUS_OK
ReadX 13641 1638400 61440 61440 NT_STATUS_OK
ReadX 13641 1699840 4096 4096 NT_STATUS_OK
ReadX 13641 1703936 61440 61440 NT_STATUS_OK
ReadX 13641 1765376 4096 4096 NT_STATUS_OK
ReadX 13641 1769472 61440 61440 NT_STATUS_OK
ReadX 13641 1830912 4096 4096 NT_STATUS_OK
ReadX 13641 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13643 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 1005 NT_STATUS_OK
ReadX 13643 2156 24 24 NT_STATUS_OK
ReadX 13643 2139 276 276 NT_STATUS_OK
ReadX 13643 2136 14 14 NT_STATUS_OK
ReadX 13643 2136 7 7 NT_STATUS_OK
ReadX 13643 2138 12 12 NT_STATUS_OK
ReadX 13643 2137 8 8 NT_STATUS_OK
ReadX 13643 2135 15 15 NT_STATUS_OK
ReadX 13643 0 16 16 NT_STATUS_OK
ReadX 13643 16 2048 2048 NT_STATUS_OK
ReadX 13643 2064 2048 2048 NT_STATUS_OK
ReadX 13643 257 2048 2048 NT_STATUS_OK
ReadX 13643 385 2048 2048 NT_STATUS_OK
ReadX 13643 513 2048 2048 NT_STATUS_OK
ReadX 13643 641 2048 2048 NT_STATUS_OK
ReadX 13643 769 2048 2048 NT_STATUS_OK
ReadX 13643 897 2048 2048 NT_STATUS_OK
ReadX 13643 1025 2048 2048 NT_STATUS_OK
ReadX 13643 1153 2048 2048 NT_STATUS_OK
ReadX 13643 1281 2048 2048 NT_STATUS_OK
ReadX 13643 1409 2048 2048 NT_STATUS_OK
ReadX 13643 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13648 NT_STATUS_OK
WriteX 13648 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13648 258 NT_STATUS_OK
WriteX 13648 0 10575 10575 NT_STATUS_OK
Flush 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13649 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13653 NT_STATUS_OK
LockX 13653 2147483538 1 NT_STATUS_OK
UnlockX 13653 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1005 NT_STATUS_OK
ReadX 13653 0 512 512 NT_STATUS_OK
ReadX 13653 512 512 512 NT_STATUS_OK
ReadX 13653 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1004 NT_STATUS_OK
Close 13653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13654 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 1005 NT_STATUS_OK
ReadX 13654 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13655 NT_STATUS_OK
LockX 13655 2147483538 1 NT_STATUS_OK
UnlockX 13655 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13655 1005 NT_STATUS_OK
ReadX 13655 0 512 512 NT_STATUS_OK
ReadX 13655 512 512 512 NT_STATUS_OK
ReadX 13655 1024 512 512 NT_STATUS_OK
ReadX 13655 288 20 20 NT_STATUS_OK
ReadX 13655 308 2084 2084 NT_STATUS_OK
ReadX 13655 388 2084 2084 NT_STATUS_OK
ReadX 13655 388 2084 2084 NT_STATUS_OK
ReadX 13642 2157 1386 1386 NT_STATUS_OK
ReadX 13655 2472 399 399 NT_STATUS_OK
ReadX 13655 3072 1536 1536 NT_STATUS_OK
ReadX 13655 544 149 149 NT_STATUS_OK
ReadX 13655 693 485 485 NT_STATUS_OK
Close 13655 NT_STATUS_OK
ReadX 13642 2157 4096 4096 NT_STATUS_OK
ReadX 13642 6253 4096 4096 NT_STATUS_OK
ReadX 13642 10349 4096 4096 NT_STATUS_OK
ReadX 13642 14445 4096 4096 NT_STATUS_OK
ReadX 13642 18541 4096 4096 NT_STATUS_OK
ReadX 13642 22637 256 256 NT_STATUS_OK
ReadX 13642 22893 4096 4096 NT_STATUS_OK
ReadX 13642 26989 4096 4096 NT_STATUS_OK
ReadX 13642 31085 4096 4096 NT_STATUS_OK
ReadX 13642 35181 4096 4096 NT_STATUS_OK
ReadX 13642 39277 4096 4096 NT_STATUS_OK
ReadX 13642 43373 4096 4096 NT_STATUS_OK
ReadX 13642 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13642 2157 1024 1024 NT_STATUS_OK
ReadX 13642 1667 4688 4688 NT_STATUS_OK
ReadX 13642 6355 3516 3516 NT_STATUS_OK
ReadX 13642 9871 16384 16384 NT_STATUS_OK
ReadX 13642 26255 3771 3771 NT_STATUS_OK
ReadX 13642 30026 2048 2048 NT_STATUS_OK
ReadX 13642 32074 1024 1024 NT_STATUS_OK
ReadX 13642 33098 6652 6652 NT_STATUS_OK
ReadX 13642 39750 16384 16384 NT_STATUS_OK
ReadX 13642 56134 10496 10496 NT_STATUS_OK
ReadX 13642 66630 1784 1784 NT_STATUS_OK
ReadX 13642 68414 90 90 NT_STATUS_OK
ReadX 13642 68504 273 273 NT_STATUS_OK
ReadX 13642 68777 1600 1600 NT_STATUS_OK
ReadX 13642 70377 640 640 NT_STATUS_OK
ReadX 13642 71017 1280 1280 NT_STATUS_OK
ReadX 13642 72297 8464 8464 NT_STATUS_OK
ReadX 13642 80761 158 158 NT_STATUS_OK
ReadX 13642 80919 912 912 NT_STATUS_OK
ReadX 13642 81831 1980 1980 NT_STATUS_OK
ReadX 13642 83811 2256 2256 NT_STATUS_OK
ReadX 13642 86067 400 400 NT_STATUS_OK
ReadX 13642 86467 252 252 NT_STATUS_OK
ReadX 13642 86719 42 42 NT_STATUS_OK
ReadX 13642 86761 725 725 NT_STATUS_OK
ReadX 13642 2009 512 512 NT_STATUS_OK
ReadX 13642 3895 9 9 NT_STATUS_OK
ReadX 13642 3781 46 46 NT_STATUS_OK
ReadX 13642 4059 92 92 NT_STATUS_OK
ReadX 13642 3781 92 92 NT_STATUS_OK
ReadX 13642 3986 184 184 NT_STATUS_OK
ReadX 13642 3987 16384 16384 NT_STATUS_OK
ReadX 13642 3902 16384 16384 NT_STATUS_OK
ReadX 13642 3781 10240 10240 NT_STATUS_OK
ReadX 13642 3821 16384 16384 NT_STATUS_OK
ReadX 13642 3891 935 935 NT_STATUS_OK
ReadX 13642 4060 10240 10240 NT_STATUS_OK
ReadX 13642 4059 184 184 NT_STATUS_OK
ReadX 13642 256 184 184 NT_STATUS_OK
ReadX 13642 256 1026 1026 NT_STATUS_OK
ReadX 13642 3901 326 326 NT_STATUS_OK
ReadX 13642 3899 652 652 NT_STATUS_OK
ReadX 13642 256 2 2 NT_STATUS_OK
ReadX 13642 258 4948 4948 NT_STATUS_OK
Close 13642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13657 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13660 NT_STATUS_OK
WriteX 13660 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13660 258 NT_STATUS_OK
WriteX 13660 0 65536 65536 NT_STATUS_OK
WriteX 13660 65536 65536 65536 NT_STATUS_OK
WriteX 13660 131072 65536 65536 NT_STATUS_OK
WriteX 13660 196608 65536 65536 NT_STATUS_OK
WriteX 13660 262144 65536 65536 NT_STATUS_OK
WriteX 13660 327680 65536 65536 NT_STATUS_OK
WriteX 13660 393216 65536 65536 NT_STATUS_OK
WriteX 13660 458752 65536 65536 NT_STATUS_OK
WriteX 13660 524288 65536 65536 NT_STATUS_OK
WriteX 13660 589824 35257 35257 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13665 NT_STATUS_OK
WriteX 13665 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 258 NT_STATUS_OK
WriteX 13665 0 65536 65536 NT_STATUS_OK
WriteX 13665 65536 65536 65536 NT_STATUS_OK
WriteX 13665 131072 65536 65536 NT_STATUS_OK
WriteX 13665 196608 65536 65536 NT_STATUS_OK
WriteX 13665 262144 65536 65536 NT_STATUS_OK
WriteX 13665 327680 65536 65536 NT_STATUS_OK
WriteX 13665 393216 65536 65536 NT_STATUS_OK
WriteX 13665 458752 65536 65536 NT_STATUS_OK
WriteX 13665 524288 65536 65536 NT_STATUS_OK
WriteX 13665 589824 57598 57598 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13667 NT_STATUS_OK
WriteX 13667 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13667 258 NT_STATUS_OK
WriteX 13667 0 12543 12543 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
Close 13667 NT_STATUS_OK
Close 13651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13671 NT_STATUS_OK
ReadX 13671 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13673 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1005 NT_STATUS_OK
ReadX 13673 1938 24 24 NT_STATUS_OK
ReadX 13673 1920 276 276 NT_STATUS_OK
ReadX 13673 1918 14 14 NT_STATUS_OK
ReadX 13673 1918 7 7 NT_STATUS_OK
ReadX 13673 1919 12 12 NT_STATUS_OK
ReadX 13673 1919 8 8 NT_STATUS_OK
ReadX 13673 1917 15 15 NT_STATUS_OK
ReadX 13673 0 16 16 NT_STATUS_OK
ReadX 13673 16 2048 2048 NT_STATUS_OK
ReadX 13673 2064 2048 2048 NT_STATUS_OK
ReadX 13673 257 2048 2048 NT_STATUS_OK
ReadX 13673 385 2048 2048 NT_STATUS_OK
ReadX 13673 513 2048 2048 NT_STATUS_OK
ReadX 13673 641 2048 2048 NT_STATUS_OK
ReadX 13673 769 2048 2048 NT_STATUS_OK
ReadX 13673 897 2048 2048 NT_STATUS_OK
ReadX 13673 1025 2048 2048 NT_STATUS_OK
ReadX 13673 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13675 NT_STATUS_OK
Close 13675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13678 NT_STATUS_OK
WriteX 13678 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 258 NT_STATUS_OK
WriteX 13678 0 11588 11588 NT_STATUS_OK
Flush 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 4096 4096 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13683 NT_STATUS_OK
WriteX 13683 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13683 258 NT_STATUS_OK
WriteX 13683 0 11615 11615 NT_STATUS_OK
Flush 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13685 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13689 NT_STATUS_OK
Close 13689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13692 NT_STATUS_OK
WriteX 13692 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 65536 65536 NT_STATUS_OK
WriteX 13692 65536 16050 16050 NT_STATUS_OK
Close 13692 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13672 1939 64 64 NT_STATUS_OK
ReadX 13672 128 248 248 NT_STATUS_OK
ReadX 13672 128 568 568 NT_STATUS_OK
ReadX 13672 3872 1536 1536 NT_STATUS_OK
ReadX 13672 3456 2560 2560 NT_STATUS_OK
ReadX 13672 3136 512 512 NT_STATUS_OK
ReadX 13672 2880 4096 4096 NT_STATUS_OK
ReadX 13672 3264 3072 3072 NT_STATUS_OK
ReadX 13672 320 4096 4096 NT_STATUS_OK
ReadX 13672 1024 4096 4096 NT_STATUS_OK
ReadX 13672 3616 4096 4096 NT_STATUS_OK
ReadX 13672 1939 64 64 NT_STATUS_OK
ReadX 13672 128 248 248 NT_STATUS_OK
ReadX 13672 128 608 608 NT_STATUS_OK
ReadX 13672 2858 1024 1024 NT_STATUS_OK
ReadX 13672 2810 4096 4096 NT_STATUS_OK
ReadX 13672 2826 4096 4096 NT_STATUS_OK
ReadX 13672 2580 2048 2048 NT_STATUS_OK
ReadX 13672 2800 2560 2560 NT_STATUS_OK
ReadX 13672 2100 4096 4096 NT_STATUS_OK
ReadX 13672 2084 4096 4096 NT_STATUS_OK
ReadX 13672 868 4096 4096 NT_STATUS_OK
ReadX 13672 2324 4096 4096 NT_STATUS_OK
ReadX 13672 884 4096 4096 NT_STATUS_OK
ReadX 13672 2604 1024 1024 NT_STATUS_OK
ReadX 13672 580 4096 4096 NT_STATUS_OK
ReadX 13672 596 4096 4096 NT_STATUS_OK
ReadX 13672 2752 4096 4096 NT_STATUS_OK
ReadX 13672 2842 1024 1024 NT_STATUS_OK
ReadX 13672 660 4096 4096 NT_STATUS_OK
ReadX 13672 2720 4096 4096 NT_STATUS_OK
ReadX 13672 2736 4096 4096 NT_STATUS_OK
ReadX 13672 628 4096 4096 NT_STATUS_OK
ReadX 13672 2704 4096 4096 NT_STATUS_OK
ReadX 13672 1556 4096 4096 NT_STATUS_OK
ReadX 13672 576 4096 4096 NT_STATUS_OK
ReadX 13672 3168 1536 1536 NT_STATUS_OK
ReadX 13672 832 4096 4096 NT_STATUS_OK
ReadX 13672 1088 4096 4096 NT_STATUS_OK
ReadX 13672 1344 4096 4096 NT_STATUS_OK
ReadX 13672 1600 4096 4096 NT_STATUS_OK
ReadX 13672 1856 4096 4096 NT_STATUS_OK
ReadX 13672 2112 4096 4096 NT_STATUS_OK
ReadX 13672 1892 4096 4096 NT_STATUS_OK
ReadX 13672 820 4096 4096 NT_STATUS_OK
ReadX 13672 788 4096 4096 NT_STATUS_OK
ReadX 13672 1604 4096 4096 NT_STATUS_OK
ReadX 13672 3648 4096 4096 NT_STATUS_OK
ReadX 13672 2608 4096 4096 NT_STATUS_OK
ReadX 13672 548 4096 4096 NT_STATUS_OK
ReadX 13672 740 4096 4096 NT_STATUS_OK
ReadX 13672 1344 4096 4096 NT_STATUS_OK
ReadX 13672 3392 4096 4096 NT_STATUS_OK
ReadX 13672 3904 4096 4096 NT_STATUS_OK
ReadX 13672 644 4096 4096 NT_STATUS_OK
ReadX 13672 676 4096 4096 NT_STATUS_OK
ReadX 13672 2688 4096 4096 NT_STATUS_OK
ReadX 13672 320 4096 4096 NT_STATUS_OK
ReadX 13672 900 4096 4096 NT_STATUS_OK
ReadX 13672 1908 4096 4096 NT_STATUS_OK
ReadX 13672 852 4096 4096 NT_STATUS_OK
ReadX 13672 724 4096 4096 NT_STATUS_OK
ReadX 13672 2292 4096 4096 NT_STATUS_OK
ReadX 13672 612 4096 4096 NT_STATUS_OK
ReadX 13672 388 4096 4096 NT_STATUS_OK
ReadX 13672 2368 4096 4096 NT_STATUS_OK
ReadX 13672 2624 4096 4096 NT_STATUS_OK
ReadX 13672 500 4096 4096 NT_STATUS_OK
ReadX 13672 356 4096 4096 NT_STATUS_OK
ReadX 13672 1024 4096 4096 NT_STATUS_OK
ReadX 13672 576 4096 4096 NT_STATUS_OK
ReadX 13672 340 4096 4096 NT_STATUS_OK
ReadX 13672 420 4096 4096 NT_STATUS_OK
ReadX 13672 1600 4096 4096 NT_STATUS_OK
ReadX 13672 404 4096 4096 NT_STATUS_OK
ReadX 13672 1428 4096 4096 NT_STATUS_OK
ReadX 13672 2656 4096 4096 NT_STATUS_OK
ReadX 13672 2624 4096 4096 NT_STATUS_OK
ReadX 13672 452 4096 4096 NT_STATUS_OK
ReadX 13672 692 4096 4096 NT_STATUS_OK
ReadX 13672 564 4096 4096 NT_STATUS_OK
ReadX 13672 372 4096 4096 NT_STATUS_OK
ReadX 13672 468 4096 4096 NT_STATUS_OK
ReadX 13672 484 4096 4096 NT_STATUS_OK
ReadX 13672 1088 4096 4096 NT_STATUS_OK
ReadX 13672 1924 4096 4096 NT_STATUS_OK
ReadX 13672 2768 4096 4096 NT_STATUS_OK
ReadX 13672 832 4096 4096 NT_STATUS_OK
ReadX 13672 836 4096 4096 NT_STATUS_OK
ReadX 13672 1856 4096 4096 NT_STATUS_OK
ReadX 13672 2640 4096 4096 NT_STATUS_OK
ReadX 13672 436 4096 4096 NT_STATUS_OK
ReadX 13672 1828 4096 4096 NT_STATUS_OK
ReadX 13672 804 4096 4096 NT_STATUS_OK
ReadX 13672 1860 4096 4096 NT_STATUS_OK
ReadX 13672 1812 4096 4096 NT_STATUS_OK
ReadX 13672 756 4096 4096 NT_STATUS_OK
ReadX 13672 1636 4096 4096 NT_STATUS_OK
ReadX 13672 772 4096 4096 NT_STATUS_OK
ReadX 13672 2036 4096 4096 NT_STATUS_OK
ReadX 13672 1220 4096 4096 NT_STATUS_OK
ReadX 13672 1652 4096 4096 NT_STATUS_OK
ReadX 13672 2588 4096 4096 NT_STATUS_OK
ReadX 13672 916 4096 4096 NT_STATUS_OK
ReadX 13672 260 4096 4096 NT_STATUS_OK
ReadX 13672 932 4096 4096 NT_STATUS_OK
ReadX 13672 2624 4096 4096 NT_STATUS_OK
ReadX 13672 308 4096 4096 NT_STATUS_OK
ReadX 13672 292 4096 4096 NT_STATUS_OK
ReadX 13672 1140 4096 4096 NT_STATUS_OK
ReadX 13672 276 4096 4096 NT_STATUS_OK
ReadX 13672 2020 4096 4096 NT_STATUS_OK
ReadX 13672 2880 4096 4096 NT_STATUS_OK
ReadX 13672 516 4096 4096 NT_STATUS_OK
ReadX 13672 1844 4096 4096 NT_STATUS_OK
ReadX 13672 1124 4096 4096 NT_STATUS_OK
ReadX 13672 3136 4096 4096 NT_STATUS_OK
ReadX 13672 324 4096 4096 NT_STATUS_OK
ReadX 13672 1156 4096 4096 NT_STATUS_OK
ReadX 13672 1172 4096 4096 NT_STATUS_OK
ReadX 13672 2112 4096 4096 NT_STATUS_OK
ReadX 13672 2368 4096 4096 NT_STATUS_OK
ReadX 13672 964 4096 4096 NT_STATUS_OK
ReadX 13672 980 4096 4096 NT_STATUS_OK
ReadX 13672 1012 4096 4096 NT_STATUS_OK
ReadX 13672 532 4096 4096 NT_STATUS_OK
ReadX 13672 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13672 1620 4096 4096 NT_STATUS_OK
ReadX 13672 1604 4096 4096 NT_STATUS_OK
ReadX 13672 2116 4096 4096 NT_STATUS_OK
ReadX 13672 2132 4096 4096 NT_STATUS_OK
ReadX 13672 2148 4096 4096 NT_STATUS_OK
ReadX 13672 2276 4096 4096 NT_STATUS_OK
ReadX 13672 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13697 NT_STATUS_OK
QUERY_FILE_INFORMATION 13652 1004 NT_STATUS_OK
Close 13652 NT_STATUS_OK
WriteX 13697 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13697 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 1004 NT_STATUS_OK
Close 13654 NT_STATUS_OK
WriteX 13697 0 65536 65536 NT_STATUS_OK
WriteX 13697 65536 64850 64850 NT_STATUS_OK
Close 13697 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13699 NT_STATUS_OK
WriteX 13699 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13699 258 NT_STATUS_OK
ReadX 13672 2068 4096 4096 NT_STATUS_OK
ReadX 13672 1588 4096 4096 NT_STATUS_OK
ReadX 13672 1572 4096 4096 NT_STATUS_OK
WriteX 13699 0 18630 18630 NT_STATUS_OK
Flush 13699 NT_STATUS_OK
Close 13699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13701 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13672 612 4096 4096 NT_STATUS_OK
ReadX 13672 564 4096 4096 NT_STATUS_OK
ReadX 13672 1876 4096 4096 NT_STATUS_OK
ReadX 13672 628 4096 4096 NT_STATUS_OK
ReadX 13672 740 4096 4096 NT_STATUS_OK
ReadX 13672 724 4096 4096 NT_STATUS_OK
ReadX 13672 644 4096 4096 NT_STATUS_OK
ReadX 13672 2324 4096 4096 NT_STATUS_OK
ReadX 13672 660 4096 4096 NT_STATUS_OK
ReadX 13672 852 4096 4096 NT_STATUS_OK
ReadX 13672 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13672 2368 4096 4096 NT_STATUS_OK
ReadX 13672 1024 4096 4096 NT_STATUS_OK
ReadX 13672 320 4096 4096 NT_STATUS_OK
ReadX 13672 580 4096 4096 NT_STATUS_OK
ReadX 13672 3136 512 512 NT_STATUS_OK
ReadX 13672 2880 4096 4096 NT_STATUS_OK
Close 13672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 61440 4096 4096 NT_STATUS_OK
ReadX 13704 126976 4096 4096 NT_STATUS_OK
WriteX 13704 0 65536 65536 NT_STATUS_OK
WriteX 13704 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 61440 4096 4096 NT_STATUS_OK
ReadX 13705 126976 4096 4096 NT_STATUS_OK
ReadX 13705 192512 4096 4096 NT_STATUS_OK
ReadX 13705 258048 4096 4096 NT_STATUS_OK
WriteX 13705 0 65536 65536 NT_STATUS_OK
WriteX 13705 65536 65536 65536 NT_STATUS_OK
WriteX 13705 131072 65536 65536 NT_STATUS_OK
WriteX 13705 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 61440 4096 4096 NT_STATUS_OK
ReadX 13706 126976 4096 4096 NT_STATUS_OK
ReadX 13706 192512 4096 4096 NT_STATUS_OK
ReadX 13706 258048 4096 4096 NT_STATUS_OK
ReadX 13706 323584 4096 4096 NT_STATUS_OK
ReadX 13706 389120 4096 4096 NT_STATUS_OK
ReadX 13706 454656 4096 4096 NT_STATUS_OK
ReadX 13706 520192 4096 4096 NT_STATUS_OK
WriteX 13706 0 65536 65536 NT_STATUS_OK
WriteX 13706 65536 65536 65536 NT_STATUS_OK
WriteX 13706 131072 65536 65536 NT_STATUS_OK
WriteX 13706 196608 65536 65536 NT_STATUS_OK
WriteX 13706 262144 65536 65536 NT_STATUS_OK
WriteX 13706 327680 65536 65536 NT_STATUS_OK
WriteX 13706 393216 65536 65536 NT_STATUS_OK
WriteX 13706 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13709 NT_STATUS_OK
WriteX 13709 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13707 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Close 13671 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13705 NT_STATUS_OK
Close 13706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13714 NT_STATUS_OK
WriteX 13714 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13714 258 NT_STATUS_OK
WriteX 13714 0 62591 62591 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13719 NT_STATUS_OK
WriteX 13719 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13719 258 NT_STATUS_OK
WriteX 13719 0 10845 10845 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13724 NT_STATUS_OK
WriteX 13724 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
WriteX 13724 0 30118 30118 NT_STATUS_OK
Close 13724 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
WriteX 13709 0 64 64 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13707 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 61440 61440 NT_STATUS_OK
ReadX 13726 61440 4096 4096 NT_STATUS_OK
ReadX 13726 65536 61440 61440 NT_STATUS_OK
ReadX 13726 126976 4096 4096 NT_STATUS_OK
ReadX 13726 131072 61440 61440 NT_STATUS_OK
ReadX 13726 192512 4096 4096 NT_STATUS_OK
ReadX 13726 196608 61440 61440 NT_STATUS_OK
ReadX 13726 258048 4096 4096 NT_STATUS_OK
ReadX 13726 262144 61440 61440 NT_STATUS_OK
ReadX 13726 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 61440 61440 NT_STATUS_OK
ReadX 13727 61440 4096 4096 NT_STATUS_OK
ReadX 13727 65536 61440 61440 NT_STATUS_OK
ReadX 13727 126976 4096 4096 NT_STATUS_OK
ReadX 13727 131072 61440 61440 NT_STATUS_OK
ReadX 13727 192512 4096 4096 NT_STATUS_OK
ReadX 13727 196608 61440 61440 NT_STATUS_OK
ReadX 13727 258048 4096 4096 NT_STATUS_OK
ReadX 13727 262144 61440 61440 NT_STATUS_OK
ReadX 13727 323584 4096 4096 NT_STATUS_OK
ReadX 13727 327680 61440 61440 NT_STATUS_OK
ReadX 13727 389120 4096 4096 NT_STATUS_OK
ReadX 13727 393216 61440 61440 NT_STATUS_OK
ReadX 13727 454656 4096 4096 NT_STATUS_OK
ReadX 13727 458752 61440 61440 NT_STATUS_OK
ReadX 13727 520192 4096 4096 NT_STATUS_OK
ReadX 13727 524288 61440 61440 NT_STATUS_OK
ReadX 13727 585728 4096 4096 NT_STATUS_OK
ReadX 13727 589824 61440 61440 NT_STATUS_OK
ReadX 13727 651264 4096 4096 NT_STATUS_OK
ReadX 13727 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 61440 61440 NT_STATUS_OK
ReadX 13728 61440 4096 4096 NT_STATUS_OK
ReadX 13728 65536 61440 61440 NT_STATUS_OK
ReadX 13728 126976 4096 4096 NT_STATUS_OK
ReadX 13728 131072 61440 61440 NT_STATUS_OK
ReadX 13728 192512 4096 4096 NT_STATUS_OK
ReadX 13728 196608 61440 61440 NT_STATUS_OK
ReadX 13728 258048 4096 4096 NT_STATUS_OK
ReadX 13728 262144 61440 61440 NT_STATUS_OK
ReadX 13728 323584 4096 4096 NT_STATUS_OK
ReadX 13728 327680 61440 61440 NT_STATUS_OK
ReadX 13728 389120 4096 4096 NT_STATUS_OK
ReadX 13728 393216 61440 61440 NT_STATUS_OK
ReadX 13728 454656 4096 4096 NT_STATUS_OK
ReadX 13728 458752 61440 61440 NT_STATUS_OK
ReadX 13728 520192 4096 4096 NT_STATUS_OK
ReadX 13728 524288 61440 61440 NT_STATUS_OK
ReadX 13728 585728 4096 4096 NT_STATUS_OK
ReadX 13728 589824 61440 61440 NT_STATUS_OK
ReadX 13728 651264 4096 4096 NT_STATUS_OK
ReadX 13728 655360 61440 61440 NT_STATUS_OK
ReadX 13728 716800 4096 4096 NT_STATUS_OK
ReadX 13728 720896 61440 61440 NT_STATUS_OK
ReadX 13728 782336 4096 4096 NT_STATUS_OK
ReadX 13728 786432 61440 61440 NT_STATUS_OK
ReadX 13728 847872 4096 4096 NT_STATUS_OK
ReadX 13728 851968 61440 61440 NT_STATUS_OK
ReadX 13728 913408 4096 4096 NT_STATUS_OK
ReadX 13728 917504 61440 61440 NT_STATUS_OK
ReadX 13728 978944 4096 4096 NT_STATUS_OK
ReadX 13728 983040 61440 61440 NT_STATUS_OK
ReadX 13728 1044480 4096 4096 NT_STATUS_OK
ReadX 13728 1048576 61440 61440 NT_STATUS_OK
ReadX 13728 1110016 4096 4096 NT_STATUS_OK
ReadX 13728 1114112 61440 61440 NT_STATUS_OK
ReadX 13728 1175552 4096 4096 NT_STATUS_OK
ReadX 13728 1179648 61440 61440 NT_STATUS_OK
ReadX 13728 1241088 4096 4096 NT_STATUS_OK
ReadX 13728 1245184 61440 61440 NT_STATUS_OK
ReadX 13728 1306624 4096 4096 NT_STATUS_OK
ReadX 13728 1310720 61440 61440 NT_STATUS_OK
ReadX 13728 1372160 4096 4096 NT_STATUS_OK
ReadX 13728 1376256 61440 61440 NT_STATUS_OK
ReadX 13728 1437696 4096 4096 NT_STATUS_OK
ReadX 13728 1441792 61440 61440 NT_STATUS_OK
ReadX 13728 1503232 4096 4096 NT_STATUS_OK
ReadX 13728 1507328 61440 61440 NT_STATUS_OK
ReadX 13728 1568768 4096 4096 NT_STATUS_OK
ReadX 13728 1572864 61440 61440 NT_STATUS_OK
ReadX 13728 1634304 4096 4096 NT_STATUS_OK
ReadX 13728 1638400 61440 61440 NT_STATUS_OK
ReadX 13728 1699840 4096 4096 NT_STATUS_OK
ReadX 13728 1703936 61440 61440 NT_STATUS_OK
ReadX 13728 1765376 4096 4096 NT_STATUS_OK
ReadX 13728 1769472 61440 61440 NT_STATUS_OK
ReadX 13728 1830912 4096 4096 NT_STATUS_OK
ReadX 13728 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
ReadX 13733 4096 4096 4096 NT_STATUS_OK
ReadX 13733 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13737 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Close 13737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 0 8192 8192 NT_STATUS_OK
ReadX 13741 8192 8192 8192 NT_STATUS_OK
ReadX 13741 16384 8192 8192 NT_STATUS_OK
ReadX 13741 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13743 NT_STATUS_OK
Close 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13746 NT_STATUS_OK
WriteX 13746 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13746 258 NT_STATUS_OK
WriteX 13746 0 10438 10438 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13748 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13751 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13752 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
ReadX 13755 4096 4096 4096 NT_STATUS_OK
ReadX 13755 8192 4096 4096 NT_STATUS_OK
ReadX 13755 12288 8192 8192 NT_STATUS_OK
ReadX 13755 20480 8192 8192 NT_STATUS_OK
ReadX 13755 28672 8192 8192 NT_STATUS_OK
ReadX 13755 36864 8192 8192 NT_STATUS_OK
ReadX 13755 45056 8192 8192 NT_STATUS_OK
ReadX 13755 53248 8192 8192 NT_STATUS_OK
ReadX 13755 61440 8192 8192 NT_STATUS_OK
ReadX 13755 69632 8192 8192 NT_STATUS_OK
ReadX 13755 77824 8192 8192 NT_STATUS_OK
ReadX 13755 86016 8192 8192 NT_STATUS_OK
ReadX 13755 94208 8192 8192 NT_STATUS_OK
ReadX 13755 102400 8192 8192 NT_STATUS_OK
ReadX 13755 110592 8192 8192 NT_STATUS_OK
ReadX 13755 118784 8192 8192 NT_STATUS_OK
ReadX 13755 126976 8192 8192 NT_STATUS_OK
ReadX 13755 135168 8192 8192 NT_STATUS_OK
ReadX 13755 143360 8192 8192 NT_STATUS_OK
ReadX 13755 151552 8192 8192 NT_STATUS_OK
ReadX 13755 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13748 NT_STATUS_OK
Close 13750 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13757 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13760 NT_STATUS_OK
WriteX 13760 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13760 258 NT_STATUS_OK
WriteX 13760 0 28489 28489 NT_STATUS_OK
Close 13760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13761 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13763 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 8192 8192 NT_STATUS_OK
ReadX 13767 8192 8192 8192 NT_STATUS_OK
ReadX 13767 16384 8192 8192 NT_STATUS_OK
ReadX 13767 24576 8192 8192 NT_STATUS_OK
ReadX 13767 32768 16384 16384 NT_STATUS_OK
ReadX 13767 49152 8192 8192 NT_STATUS_OK
ReadX 13767 57344 8192 8192 NT_STATUS_OK
ReadX 13767 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13769 NT_STATUS_OK
Close 13769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13772 NT_STATUS_OK
WriteX 13772 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13772 258 NT_STATUS_OK
WriteX 13772 0 29253 29253 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13779 NT_STATUS_OK
WriteX 13779 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13779 258 NT_STATUS_OK
WriteX 13779 0 30183 30183 NT_STATUS_OK
Close 13779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13782 NT_STATUS_OK
WriteX 13782 0 510 510 NT_STATUS_OK
WriteX 13782 510 512 512 NT_STATUS_OK
WriteX 13782 1022 510 510 NT_STATUS_OK
WriteX 13782 1532 510 510 NT_STATUS_OK
WriteX 13782 2042 168 168 NT_STATUS_OK
Close 13782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 0 4096 4096 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 61440 4096 4096 NT_STATUS_OK
ReadX 13786 126976 4096 4096 NT_STATUS_OK
WriteX 13786 0 65536 65536 NT_STATUS_OK
WriteX 13786 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 61440 4096 4096 NT_STATUS_OK
ReadX 13787 126976 4096 4096 NT_STATUS_OK
ReadX 13787 192512 4096 4096 NT_STATUS_OK
ReadX 13787 258048 4096 4096 NT_STATUS_OK
WriteX 13787 0 65536 65536 NT_STATUS_OK
WriteX 13787 65536 65536 65536 NT_STATUS_OK
WriteX 13787 131072 65536 65536 NT_STATUS_OK
WriteX 13787 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 61440 4096 4096 NT_STATUS_OK
ReadX 13788 126976 4096 4096 NT_STATUS_OK
ReadX 13788 192512 4096 4096 NT_STATUS_OK
ReadX 13788 258048 4096 4096 NT_STATUS_OK
ReadX 13788 323584 4096 4096 NT_STATUS_OK
ReadX 13788 389120 4096 4096 NT_STATUS_OK
ReadX 13788 454656 4096 4096 NT_STATUS_OK
ReadX 13788 520192 4096 4096 NT_STATUS_OK
WriteX 13788 0 65536 65536 NT_STATUS_OK
WriteX 13788 65536 65536 65536 NT_STATUS_OK
WriteX 13788 131072 65536 65536 NT_STATUS_OK
WriteX 13788 196608 65536 65536 NT_STATUS_OK
WriteX 13788 262144 65536 65536 NT_STATUS_OK
WriteX 13788 327680 65536 65536 NT_STATUS_OK
WriteX 13788 393216 65536 65536 NT_STATUS_OK
WriteX 13788 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13785 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13795 NT_STATUS_OK
Close 13795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13800 NT_STATUS_OK
Close 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13804 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13807 NT_STATUS_OK
Close 13807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13854 NT_STATUS_OK
Close 13854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13857 NT_STATUS_OK
WriteX 13857 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13857 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13857 0 65536 65536 NT_STATUS_OK
WriteX 13857 65536 65536 65536 NT_STATUS_OK
WriteX 13857 131072 65536 65536 NT_STATUS_OK
WriteX 13857 196608 65536 65536 NT_STATUS_OK
WriteX 13857 262144 26634 26634 NT_STATUS_OK
Close 13857 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13863 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 0 4096 4096 NT_STATUS_OK
ReadX 13865 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13870 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13884 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13927 NT_STATUS_OK
Close 13927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13932 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13942 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
Close 13944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
Close 13945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
Close 13958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13989 0 4096 4096 NT_STATUS_OK
Close 13989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
ReadX 13991 4096 4096 4096 NT_STATUS_OK
ReadX 13991 8192 4096 4096 NT_STATUS_OK
ReadX 13991 12288 4096 4096 NT_STATUS_OK
ReadX 13991 16384 4096 4096 NT_STATUS_OK
ReadX 13991 20480 4096 4096 NT_STATUS_OK
ReadX 13991 24576 4096 4096 NT_STATUS_OK
ReadX 13991 28672 4096 4096 NT_STATUS_OK
ReadX 13991 32768 4096 4096 NT_STATUS_OK
ReadX 13991 36864 4096 4096 NT_STATUS_OK
ReadX 13991 40960 4096 4096 NT_STATUS_OK
ReadX 13991 45056 4096 4096 NT_STATUS_OK
ReadX 13991 49152 4096 4096 NT_STATUS_OK
ReadX 13991 53248 4096 4096 NT_STATUS_OK
ReadX 13991 57344 4096 4096 NT_STATUS_OK
ReadX 13991 61440 4096 4096 NT_STATUS_OK
ReadX 13991 65536 4096 4096 NT_STATUS_OK
ReadX 13991 69632 4096 4096 NT_STATUS_OK
ReadX 13991 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13991 1004 NT_STATUS_OK
WriteX 13991 0 4096 4096 NT_STATUS_OK
Close 13991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13992 NT_STATUS_OK
SET_FILE_INFORMATION 13992 1004 NT_STATUS_OK
Close 13992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13994 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13997 NT_STATUS_OK
WriteX 13997 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13997 258 NT_STATUS_OK
WriteX 13997 0 65536 65536 NT_STATUS_OK
WriteX 13997 65536 19979 19979 NT_STATUS_OK
Close 13997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
QUERY_FILE_INFORMATION 13998 1004 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
SET_FILE_INFORMATION 13998 1004 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
Close 13998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 4096 4096 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14003 1004 NT_STATUS_OK
WriteX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14009 NT_STATUS_OK
WriteX 14009 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 258 NT_STATUS_OK
WriteX 14009 0 65536 65536 NT_STATUS_OK
WriteX 14009 65536 17654 17654 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
QUERY_FILE_INFORMATION 14010 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
SET_FILE_INFORMATION 14010 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14011 NT_STATUS_OK
SET_FILE_INFORMATION 14011 1004 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 14013 NT_STATUS_OK
Close 14013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
ReadX 14015 4096 4096 4096 NT_STATUS_OK
ReadX 14015 8192 4096 4096 NT_STATUS_OK
ReadX 14015 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14015 16384 4096 4096 NT_STATUS_OK
ReadX 14015 20480 4096 4096 NT_STATUS_OK
ReadX 14015 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
Close 14016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 4096 4096 NT_STATUS_OK
Close 14017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14018 1004 NT_STATUS_OK
WriteX 14018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14021 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14024 NT_STATUS_OK
WriteX 14024 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14024 258 NT_STATUS_OK
WriteX 14024 0 65536 65536 NT_STATUS_OK
WriteX 14024 65536 19490 19490 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 1004 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
SET_FILE_INFORMATION 14025 1004 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14026 NT_STATUS_OK
SET_FILE_INFORMATION 14026 1004 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 14028 NT_STATUS_OK
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14030 0 4096 4096 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
ReadX 14032 4096 4096 4096 NT_STATUS_OK
ReadX 14032 8192 4096 4096 NT_STATUS_OK
ReadX 14032 12288 4096 4096 NT_STATUS_OK
ReadX 14032 16384 4096 4096 NT_STATUS_OK
ReadX 14032 20480 4096 4096 NT_STATUS_OK
ReadX 14032 24576 4096 4096 NT_STATUS_OK
ReadX 14032 28672 4096 4096 NT_STATUS_OK
ReadX 14032 32768 4096 4096 NT_STATUS_OK
ReadX 14032 36864 4096 4096 NT_STATUS_OK
ReadX 14032 40960 4096 4096 NT_STATUS_OK
ReadX 14032 45056 4096 4096 NT_STATUS_OK
ReadX 14032 49152 4096 4096 NT_STATUS_OK
ReadX 14032 53248 4096 4096 NT_STATUS_OK
ReadX 14032 57344 4096 4096 NT_STATUS_OK
ReadX 14032 61440 4096 4096 NT_STATUS_OK
ReadX 14032 65536 4096 4096 NT_STATUS_OK
ReadX 14032 69632 4096 4096 NT_STATUS_OK
ReadX 14032 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14032 1004 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14033 NT_STATUS_OK
SET_FILE_INFORMATION 14033 1004 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14038 NT_STATUS_OK
WriteX 14038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14038 258 NT_STATUS_OK
WriteX 14038 0 65536 65536 NT_STATUS_OK
WriteX 14038 65536 8866 8866 NT_STATUS_OK
Close 14038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
WriteX 14039 0 4096 4096 NT_STATUS_OK
Flush 14039 NT_STATUS_OK
SET_FILE_INFORMATION 14039 1004 NT_STATUS_OK
WriteX 14039 0 4096 4096 NT_STATUS_OK
Flush 14039 NT_STATUS_OK
Close 14039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
Close 14042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14034 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14049 NT_STATUS_OK
WriteX 14049 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14049 258 NT_STATUS_OK
WriteX 14049 0 65536 65536 NT_STATUS_OK
WriteX 14049 65536 9298 9298 NT_STATUS_OK
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
SET_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14051 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14056 0 4096 4096 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14057 4096 4096 4096 NT_STATUS_OK
ReadX 14057 8192 4096 4096 NT_STATUS_OK
ReadX 14057 12288 4096 4096 NT_STATUS_OK
ReadX 14057 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 4096 4096 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14060 1004 NT_STATUS_OK
WriteX 14060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 14061 NT_STATUS_OK
Close 14061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14063 NT_STATUS_OK
Close 14063 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14066 NT_STATUS_OK
WriteX 14066 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
WriteX 14066 0 65536 65536 NT_STATUS_OK
WriteX 14066 65536 11540 11540 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
SET_FILE_INFORMATION 14067 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14068 NT_STATUS_OK
SET_FILE_INFORMATION 14068 1004 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 61440 4096 4096 NT_STATUS_OK
ReadX 14072 126976 4096 4096 NT_STATUS_OK
WriteX 14072 0 65536 65536 NT_STATUS_OK
WriteX 14072 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 61440 4096 4096 NT_STATUS_OK
ReadX 14073 126976 4096 4096 NT_STATUS_OK
ReadX 14073 192512 4096 4096 NT_STATUS_OK
ReadX 14073 258048 4096 4096 NT_STATUS_OK
WriteX 14073 0 65536 65536 NT_STATUS_OK
WriteX 14073 65536 65536 65536 NT_STATUS_OK
WriteX 14073 131072 65536 65536 NT_STATUS_OK
WriteX 14073 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 61440 4096 4096 NT_STATUS_OK
ReadX 14074 126976 4096 4096 NT_STATUS_OK
ReadX 14074 192512 4096 4096 NT_STATUS_OK
ReadX 14074 258048 4096 4096 NT_STATUS_OK
ReadX 14074 323584 4096 4096 NT_STATUS_OK
ReadX 14074 389120 4096 4096 NT_STATUS_OK
ReadX 14074 454656 4096 4096 NT_STATUS_OK
ReadX 14074 520192 4096 4096 NT_STATUS_OK
WriteX 14074 0 65536 65536 NT_STATUS_OK
WriteX 14074 65536 65536 65536 NT_STATUS_OK
WriteX 14074 131072 65536 65536 NT_STATUS_OK
WriteX 14074 196608 65536 65536 NT_STATUS_OK
WriteX 14074 262144 65536 65536 NT_STATUS_OK
WriteX 14074 327680 65536 65536 NT_STATUS_OK
WriteX 14074 393216 65536 65536 NT_STATUS_OK
WriteX 14074 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
ReadX 14075 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 14076 NT_STATUS_OK
WriteX 14076 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14076 258 NT_STATUS_OK
WriteX 14076 0 53 53 NT_STATUS_OK
Close 14076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 14079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14075 8192 4096 4096 NT_STATUS_OK
ReadX 14075 12288 4096 4096 NT_STATUS_OK
WriteX 14079 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14079 258 NT_STATUS_OK
ReadX 14075 16384 4096 4096 NT_STATUS_OK
ReadX 14075 20480 4096 4096 NT_STATUS_OK
WriteX 14079 0 15360 15360 NT_STATUS_OK
Close 14079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14080 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14080 1004 NT_STATUS_OK
WriteX 14080 0 4096 4096 NT_STATUS_OK
Close 14080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 14081 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 14084 NT_STATUS_OK
Close 14084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 14083 4096 4096 4096 NT_STATUS_OK
ReadX 14083 8192 4096 4096 NT_STATUS_OK
ReadX 14083 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
ReadX 14086 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
ReadX 14087 4096 4096 4096 NT_STATUS_OK
ReadX 14087 8192 4096 4096 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 14088 NT_STATUS_OK
WriteX 14088 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14088 258 NT_STATUS_OK
WriteX 14088 0 15360 15360 NT_STATUS_OK
Close 14088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 14089 NT_STATUS_OK
ReadX 14089 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14089 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 14090 NT_STATUS_OK
Close 14090 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 14093 NT_STATUS_OK
SET_FILE_INFORMATION 14093 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
WriteX 14089 0 4096 4096 NT_STATUS_OK
Close 14089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 14094 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
ReadX 10174 4096 4096 4096 NT_STATUS_OK
ReadX 10174 8192 4096 4096 NT_STATUS_OK
ReadX 10174 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10174 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10176 NT_STATUS_OK
WriteX 10176 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10176 258 NT_STATUS_OK
WriteX 10176 0 53 53 NT_STATUS_OK
Close 10176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10175 4096 4096 4096 NT_STATUS_OK
ReadX 10175 8192 4096 4096 NT_STATUS_OK
ReadX 10175 12288 4096 4096 NT_STATUS_OK
WriteX 10179 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 258 NT_STATUS_OK
WriteX 10179 0 12006 12006 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10180 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10180 1004 NT_STATUS_OK
WriteX 10180 0 4096 4096 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10183 4096 4096 4096 NT_STATUS_OK
ReadX 10183 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10186 NT_STATUS_OK
WriteX 10186 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10186 258 NT_STATUS_OK
WriteX 10186 0 11991 11991 NT_STATUS_OK
Close 10186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10187 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10187 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10188 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10191 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
Close 10191 NT_STATUS_OK
WriteX 10187 0 4096 4096 NT_STATUS_OK
Close 10187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10192 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10194 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
ReadX 10194 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
Close 14092 NT_STATUS_OK
WriteX 10174 0 19054 19054 NT_STATUS_OK
WriteX 10194 0 12288 12288 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10199 NT_STATUS_OK
Close 10199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 61440 61440 NT_STATUS_OK
ReadX 10201 61440 4096 4096 NT_STATUS_OK
ReadX 10201 65536 61440 61440 NT_STATUS_OK
ReadX 10201 126976 4096 4096 NT_STATUS_OK
ReadX 10201 131072 61440 61440 NT_STATUS_OK
ReadX 10201 192512 4096 4096 NT_STATUS_OK
ReadX 10201 196608 61440 61440 NT_STATUS_OK
ReadX 10201 258048 4096 4096 NT_STATUS_OK
ReadX 10201 262144 61440 61440 NT_STATUS_OK
ReadX 10201 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 61440 61440 NT_STATUS_OK
ReadX 10202 61440 4096 4096 NT_STATUS_OK
ReadX 10202 65536 61440 61440 NT_STATUS_OK
ReadX 10202 126976 4096 4096 NT_STATUS_OK
ReadX 10202 131072 61440 61440 NT_STATUS_OK
ReadX 10202 192512 4096 4096 NT_STATUS_OK
ReadX 10202 196608 61440 61440 NT_STATUS_OK
ReadX 10202 258048 4096 4096 NT_STATUS_OK
ReadX 10202 262144 61440 61440 NT_STATUS_OK
ReadX 10202 323584 4096 4096 NT_STATUS_OK
ReadX 10202 327680 61440 61440 NT_STATUS_OK
ReadX 10202 389120 4096 4096 NT_STATUS_OK
ReadX 10202 393216 61440 61440 NT_STATUS_OK
ReadX 10202 454656 4096 4096 NT_STATUS_OK
ReadX 10202 458752 61440 61440 NT_STATUS_OK
ReadX 10202 520192 4096 4096 NT_STATUS_OK
ReadX 10202 524288 61440 61440 NT_STATUS_OK
ReadX 10202 585728 4096 4096 NT_STATUS_OK
ReadX 10202 589824 61440 61440 NT_STATUS_OK
ReadX 10202 651264 4096 4096 NT_STATUS_OK
ReadX 10202 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10203 NT_STATUS_OK
ReadX 10203 0 61440 61440 NT_STATUS_OK
ReadX 10203 61440 4096 4096 NT_STATUS_OK
ReadX 10203 65536 61440 61440 NT_STATUS_OK
ReadX 10203 126976 4096 4096 NT_STATUS_OK
ReadX 10203 131072 61440 61440 NT_STATUS_OK
ReadX 10203 192512 4096 4096 NT_STATUS_OK
ReadX 10203 196608 61440 61440 NT_STATUS_OK
ReadX 10203 258048 4096 4096 NT_STATUS_OK
ReadX 10203 262144 61440 61440 NT_STATUS_OK
ReadX 10203 323584 4096 4096 NT_STATUS_OK
ReadX 10203 327680 61440 61440 NT_STATUS_OK
ReadX 10203 389120 4096 4096 NT_STATUS_OK
ReadX 10203 393216 61440 61440 NT_STATUS_OK
ReadX 10203 454656 4096 4096 NT_STATUS_OK
ReadX 10203 458752 61440 61440 NT_STATUS_OK
ReadX 10203 520192 4096 4096 NT_STATUS_OK
ReadX 10203 524288 61440 61440 NT_STATUS_OK
ReadX 10203 585728 4096 4096 NT_STATUS_OK
ReadX 10203 589824 61440 61440 NT_STATUS_OK
ReadX 10203 651264 4096 4096 NT_STATUS_OK
ReadX 10203 655360 61440 61440 NT_STATUS_OK
ReadX 10203 716800 4096 4096 NT_STATUS_OK
ReadX 10203 720896 61440 61440 NT_STATUS_OK
ReadX 10203 782336 4096 4096 NT_STATUS_OK
ReadX 10203 786432 61440 61440 NT_STATUS_OK
ReadX 10203 847872 4096 4096 NT_STATUS_OK
ReadX 10203 851968 61440 61440 NT_STATUS_OK
ReadX 10203 913408 4096 4096 NT_STATUS_OK
ReadX 10203 917504 61440 61440 NT_STATUS_OK
ReadX 10203 978944 4096 4096 NT_STATUS_OK
ReadX 10203 983040 61440 61440 NT_STATUS_OK
ReadX 10203 1044480 4096 4096 NT_STATUS_OK
ReadX 10203 1048576 61440 61440 NT_STATUS_OK
ReadX 10203 1110016 4096 4096 NT_STATUS_OK
ReadX 10203 1114112 61440 61440 NT_STATUS_OK
ReadX 10203 1175552 4096 4096 NT_STATUS_OK
ReadX 10203 1179648 61440 61440 NT_STATUS_OK
ReadX 10203 1241088 4096 4096 NT_STATUS_OK
ReadX 10203 1245184 61440 61440 NT_STATUS_OK
ReadX 10203 1306624 4096 4096 NT_STATUS_OK
ReadX 10203 1310720 61440 61440 NT_STATUS_OK
ReadX 10203 1372160 4096 4096 NT_STATUS_OK
ReadX 10203 1376256 61440 61440 NT_STATUS_OK
ReadX 10203 1437696 4096 4096 NT_STATUS_OK
ReadX 10203 1441792 61440 61440 NT_STATUS_OK
ReadX 10203 1503232 4096 4096 NT_STATUS_OK
ReadX 10203 1507328 61440 61440 NT_STATUS_OK
ReadX 10203 1568768 4096 4096 NT_STATUS_OK
ReadX 10203 1572864 61440 61440 NT_STATUS_OK
ReadX 10203 1634304 4096 4096 NT_STATUS_OK
ReadX 10203 1638400 61440 61440 NT_STATUS_OK
ReadX 10203 1699840 4096 4096 NT_STATUS_OK
ReadX 10203 1703936 61440 61440 NT_STATUS_OK
ReadX 10203 1765376 4096 4096 NT_STATUS_OK
ReadX 10203 1769472 61440 61440 NT_STATUS_OK
ReadX 10203 1830912 4096 4096 NT_STATUS_OK
ReadX 10203 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10210 NT_STATUS_OK
QUERY_FILE_INFORMATION 10210 1004 NT_STATUS_OK
WriteX 10210 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10210 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10211 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10212 NT_STATUS_OK
WriteX 10212 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10212 258 NT_STATUS_OK
WriteX 10212 0 491 491 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10215 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10216 NT_STATUS_OK
WriteX 10216 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10216 258 NT_STATUS_OK
WriteX 10216 0 543 543 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10203 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10221 NT_STATUS_OK
ReadX 10221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10230 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 1004 NT_STATUS_OK
WriteX 10230 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 258 NT_STATUS_OK
WriteX 10230 0 2048 2048 NT_STATUS_OK
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
Flush 10231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10236 NT_STATUS_OK
WriteX 10236 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10236 258 NT_STATUS_OK
WriteX 10236 0 2048 2048 NT_STATUS_OK
Close 10236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10241 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10242 NT_STATUS_OK
WriteX 10242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 258 NT_STATUS_OK
WriteX 10242 0 2048 2048 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 2048 2048 NT_STATUS_OK
ReadX 10221 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
WriteX 10221 0 8192 8192 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10247 NT_STATUS_OK
QUERY_FILE_INFORMATION 10247 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10267 NT_STATUS_OK
QUERY_FILE_INFORMATION 10267 1004 NT_STATUS_OK
WriteX 10267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10267 258 NT_STATUS_OK
WriteX 10267 0 2048 2048 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10270 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10274 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10275 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 1004 NT_STATUS_OK
WriteX 10275 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 258 NT_STATUS_OK
WriteX 10275 0 2048 2048 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10276 NT_STATUS_OK
ReadX 10276 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10268 0 4096 4096 NT_STATUS_OK
Flush 10268 NT_STATUS_OK
WriteX 10276 0 4096 4096 NT_STATUS_OK
Flush 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10276 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10270 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10278 NT_STATUS_OK
WriteX 10278 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
WriteX 10278 0 4096 4096 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10281 NT_STATUS_OK
WriteX 10281 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10281 258 NT_STATUS_OK
WriteX 10281 0 4096 4096 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10282 0 4096 4096 NT_STATUS_OK
Close 10279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10250 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10285 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10289 NT_STATUS_OK
WriteX 10289 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10289 258 NT_STATUS_OK
WriteX 10289 0 2048 2048 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10298 NT_STATUS_OK
ReadX 10298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10304 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10298 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10306 NT_STATUS_OK
QUERY_FILE_INFORMATION 10306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10316 NT_STATUS_OK
ReadX 10316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10318 NT_STATUS_OK
ReadX 10318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10326 NT_STATUS_OK
QUERY_FILE_INFORMATION 10326 1004 NT_STATUS_OK
WriteX 10326 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10326 258 NT_STATUS_OK
WriteX 10326 0 2048 2048 NT_STATUS_OK
Close 10326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10338 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 1004 NT_STATUS_OK
WriteX 10338 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
WriteX 10338 0 2048 2048 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10346 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 1004 NT_STATUS_OK
WriteX 10346 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 258 NT_STATUS_OK
WriteX 10346 0 2048 2048 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10327 0 4096 4096 NT_STATUS_OK
Flush 10327 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
Flush 10339 NT_STATUS_OK
WriteX 10347 0 4096 4096 NT_STATUS_OK
Flush 10347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10327 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10347 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10329 4096 16384 16384 NT_STATUS_OK
ReadX 10309 4096 16384 16384 NT_STATUS_OK
ReadX 10341 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 2048 2048 NT_STATUS_OK
WriteX 10349 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10350 NT_STATUS_OK
QUERY_FILE_INFORMATION 10350 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Close 10321 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10320 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Close 10316 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10352 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10354 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10357 4096 16384 16384 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10359 0 4096 4096 NT_STATUS_OK
WriteX 10360 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10369 NT_STATUS_OK
ReadX 10369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 8192 8192 NT_STATUS_OK
ReadX 10363 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10377 0 4096 4096 NT_STATUS_OK
ReadX 10377 4096 4096 4096 NT_STATUS_OK
ReadX 10377 8192 4096 4096 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
WriteX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
ReadX 10378 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10359 0 4096 4096 NT_STATUS_OK
WriteX 10360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10382 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10383 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 1004 NT_STATUS_OK
WriteX 10383 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 2048 2048 NT_STATUS_OK
Close 10383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10384 NT_STATUS_OK
ReadX 10384 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
ReadX 10386 4096 4096 4096 NT_STATUS_OK
WriteX 10386 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
ReadX 10388 4096 4096 4096 NT_STATUS_OK
WriteX 10388 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10389 NT_STATUS_OK
QUERY_FILE_INFORMATION 10389 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10363 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10391 0 4096 4096 NT_STATUS_OK
ReadX 10391 4096 4096 4096 NT_STATUS_OK
ReadX 10391 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10394 NT_STATUS_OK
ReadX 10394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
ReadX 10392 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10409 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 1004 NT_STATUS_OK
WriteX 10409 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 258 NT_STATUS_OK
WriteX 10409 0 2048 2048 NT_STATUS_OK
Close 10409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10415 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 1004 NT_STATUS_OK
WriteX 10415 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 258 NT_STATUS_OK
WriteX 10415 0 2048 2048 NT_STATUS_OK
Close 10415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10399 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10417 NT_STATUS_OK
QUERY_FILE_INFORMATION 10417 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10394 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10419 NT_STATUS_OK
QUERY_FILE_INFORMATION 10419 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 61440 4096 4096 NT_STATUS_OK
ReadX 10421 126976 4096 4096 NT_STATUS_OK
WriteX 10421 0 65536 65536 NT_STATUS_OK
WriteX 10421 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 61440 4096 4096 NT_STATUS_OK
ReadX 10422 126976 4096 4096 NT_STATUS_OK
ReadX 10422 192512 4096 4096 NT_STATUS_OK
ReadX 10422 258048 4096 4096 NT_STATUS_OK
WriteX 10422 0 65536 65536 NT_STATUS_OK
WriteX 10422 65536 65536 65536 NT_STATUS_OK
WriteX 10422 131072 65536 65536 NT_STATUS_OK
WriteX 10422 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 61440 4096 4096 NT_STATUS_OK
ReadX 10423 126976 4096 4096 NT_STATUS_OK
ReadX 10423 192512 4096 4096 NT_STATUS_OK
ReadX 10423 258048 4096 4096 NT_STATUS_OK
ReadX 10423 323584 4096 4096 NT_STATUS_OK
ReadX 10423 389120 4096 4096 NT_STATUS_OK
ReadX 10423 454656 4096 4096 NT_STATUS_OK
ReadX 10423 520192 4096 4096 NT_STATUS_OK
WriteX 10423 0 65536 65536 NT_STATUS_OK
WriteX 10423 65536 65536 65536 NT_STATUS_OK
WriteX 10423 131072 65536 65536 NT_STATUS_OK
WriteX 10423 196608 65536 65536 NT_STATUS_OK
WriteX 10423 262144 65536 65536 NT_STATUS_OK
WriteX 10423 327680 65536 65536 NT_STATUS_OK
WriteX 10423 393216 65536 65536 NT_STATUS_OK
WriteX 10423 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10424 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10424 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10424 8192 4096 4096 NT_STATUS_OK
ReadX 10424 12288 4096 4096 NT_STATUS_OK
ReadX 10424 16384 4096 4096 NT_STATUS_OK
ReadX 10424 20480 4096 4096 NT_STATUS_OK
ReadX 10424 24576 4096 4096 NT_STATUS_OK
ReadX 10424 28672 4096 4096 NT_STATUS_OK
ReadX 10424 32768 4096 4096 NT_STATUS_OK
ReadX 10424 36864 4096 4096 NT_STATUS_OK
ReadX 10424 40960 4096 4096 NT_STATUS_OK
ReadX 10424 45056 4096 4096 NT_STATUS_OK
ReadX 10424 49152 4096 4096 NT_STATUS_OK
ReadX 10424 53248 4096 4096 NT_STATUS_OK
ReadX 10424 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10424 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10427 NT_STATUS_OK
WriteX 10427 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10427 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 57088 57088 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Flush 10427 NT_STATUS_OK
Close 10424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10428 NT_STATUS_OK
SET_FILE_INFORMATION 10428 1004 NT_STATUS_OK
Close 10428 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10431 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10432 NT_STATUS_OK
WriteX 10432 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10432 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 0 51456 51456 NT_STATUS_OK
WriteX 10432 0 4096 4096 NT_STATUS_OK
Flush 10432 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 0 4096 4096 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10436 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10441 NT_STATUS_OK
WriteX 10441 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10441 258 NT_STATUS_OK
WriteX 10441 0 53077 53077 NT_STATUS_OK
Close 10441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10442 NT_STATUS_OK
WriteX 10442 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
WriteX 10442 0 65536 65536 NT_STATUS_OK
WriteX 10442 65536 1856 1856 NT_STATUS_OK
WriteX 10442 0 4096 4096 NT_STATUS_OK
Flush 10442 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
WriteX 10442 0 4096 4096 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10451 NT_STATUS_OK
WriteX 10451 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10451 258 NT_STATUS_OK
WriteX 10451 0 7983 7983 NT_STATUS_OK
Close 10451 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10453 NT_STATUS_OK
Close 10453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10456 NT_STATUS_OK
WriteX 10456 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10456 258 NT_STATUS_OK
WriteX 10456 0 65536 65536 NT_STATUS_OK
WriteX 10456 65536 65536 65536 NT_STATUS_OK
WriteX 10456 131072 65536 65536 NT_STATUS_OK
WriteX 10456 196608 65536 65536 NT_STATUS_OK
WriteX 10456 262144 65536 65536 NT_STATUS_OK
WriteX 10456 327680 65536 65536 NT_STATUS_OK
WriteX 10456 393216 65536 65536 NT_STATUS_OK
WriteX 10456 458752 46731 46731 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10457 NT_STATUS_OK
WriteX 10457 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10457 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10446 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10457 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
WriteX 10457 0 65536 65536 NT_STATUS_OK
WriteX 10457 65536 22848 22848 NT_STATUS_OK
WriteX 10457 0 4096 4096 NT_STATUS_OK
Flush 10457 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
WriteX 10457 0 4096 4096 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10461 NT_STATUS_OK
ReadX 10461 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10461 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10462 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
ReadX 10462 8192 4096 4096 NT_STATUS_OK
ReadX 10462 12288 4096 4096 NT_STATUS_OK
ReadX 10462 16384 4096 4096 NT_STATUS_OK
ReadX 10462 20480 4096 4096 NT_STATUS_OK
ReadX 10462 24576 4096 4096 NT_STATUS_OK
ReadX 10462 28672 4096 4096 NT_STATUS_OK
ReadX 10462 32768 4096 4096 NT_STATUS_OK
ReadX 10462 36864 4096 4096 NT_STATUS_OK
ReadX 10462 40960 4096 4096 NT_STATUS_OK
ReadX 10462 45056 4096 4096 NT_STATUS_OK
ReadX 10462 49152 4096 4096 NT_STATUS_OK
ReadX 10462 53248 4096 4096 NT_STATUS_OK
ReadX 10462 57344 4096 4096 NT_STATUS_OK
ReadX 10462 61440 4096 4096 NT_STATUS_OK
ReadX 10462 65536 4096 4096 NT_STATUS_OK
ReadX 10462 69632 4096 4096 NT_STATUS_OK
ReadX 10462 73728 4096 4096 NT_STATUS_OK
ReadX 10462 77824 4096 4096 NT_STATUS_OK
ReadX 10462 81920 4096 4096 NT_STATUS_OK
ReadX 10462 86016 4096 4096 NT_STATUS_OK
ReadX 10462 90112 4096 4096 NT_STATUS_OK
ReadX 10462 94208 4096 4096 NT_STATUS_OK
ReadX 10462 98304 4096 4096 NT_STATUS_OK
ReadX 10462 102400 4096 4096 NT_STATUS_OK
ReadX 10462 106496 4096 4096 NT_STATUS_OK
ReadX 10462 110592 4096 4096 NT_STATUS_OK
ReadX 10462 114688 4096 4096 NT_STATUS_OK
ReadX 10462 118784 4096 4096 NT_STATUS_OK
ReadX 10462 122880 4096 4096 NT_STATUS_OK
ReadX 10462 126976 4096 4096 NT_STATUS_OK
ReadX 10462 131072 4096 4096 NT_STATUS_OK
ReadX 10462 135168 4096 4096 NT_STATUS_OK
ReadX 10462 139264 4096 4096 NT_STATUS_OK
ReadX 10462 143360 4096 4096 NT_STATUS_OK
ReadX 10462 147456 4096 4096 NT_STATUS_OK
ReadX 10462 151552 4096 4096 NT_STATUS_OK
ReadX 10462 155648 4096 4096 NT_STATUS_OK
ReadX 10462 159744 4096 4096 NT_STATUS_OK
ReadX 10462 163840 4096 4096 NT_STATUS_OK
ReadX 10462 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10462 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10465 NT_STATUS_OK
WriteX 10465 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10465 258 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10466 NT_STATUS_OK
SET_FILE_INFORMATION 10466 1004 NT_STATUS_OK
Close 10466 NT_STATUS_OK
WriteX 10465 0 42388 42388 NT_STATUS_OK
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
ReadX 10469 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10470 NT_STATUS_OK
WriteX 10470 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10470 258 NT_STATUS_OK
SET_FILE_INFORMATION 10470 1004 NT_STATUS_OK
WriteX 10470 0 42652 42652 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10472 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
ReadX 10474 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10479 NT_STATUS_OK
WriteX 10479 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10479 258 NT_STATUS_OK
WriteX 10479 0 65536 65536 NT_STATUS_OK
WriteX 10479 65536 49 49 NT_STATUS_OK
Close 10479 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 61440 61440 NT_STATUS_OK
ReadX 10480 61440 4096 4096 NT_STATUS_OK
ReadX 10480 65536 61440 61440 NT_STATUS_OK
ReadX 10480 126976 4096 4096 NT_STATUS_OK
ReadX 10480 131072 61440 61440 NT_STATUS_OK
ReadX 10480 192512 4096 4096 NT_STATUS_OK
ReadX 10480 196608 61440 61440 NT_STATUS_OK
ReadX 10480 258048 4096 4096 NT_STATUS_OK
ReadX 10480 262144 61440 61440 NT_STATUS_OK
ReadX 10480 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 61440 61440 NT_STATUS_OK
ReadX 10481 61440 4096 4096 NT_STATUS_OK
ReadX 10481 65536 61440 61440 NT_STATUS_OK
ReadX 10481 126976 4096 4096 NT_STATUS_OK
ReadX 10481 131072 61440 61440 NT_STATUS_OK
ReadX 10481 192512 4096 4096 NT_STATUS_OK
ReadX 10481 196608 61440 61440 NT_STATUS_OK
ReadX 10481 258048 4096 4096 NT_STATUS_OK
ReadX 10481 262144 61440 61440 NT_STATUS_OK
ReadX 10481 323584 4096 4096 NT_STATUS_OK
ReadX 10481 327680 61440 61440 NT_STATUS_OK
ReadX 10481 389120 4096 4096 NT_STATUS_OK
ReadX 10481 393216 61440 61440 NT_STATUS_OK
ReadX 10481 454656 4096 4096 NT_STATUS_OK
ReadX 10481 458752 61440 61440 NT_STATUS_OK
ReadX 10481 520192 4096 4096 NT_STATUS_OK
ReadX 10481 524288 61440 61440 NT_STATUS_OK
ReadX 10481 585728 4096 4096 NT_STATUS_OK
ReadX 10481 589824 61440 61440 NT_STATUS_OK
ReadX 10481 651264 4096 4096 NT_STATUS_OK
ReadX 10481 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 61440 61440 NT_STATUS_OK
ReadX 10482 61440 4096 4096 NT_STATUS_OK
ReadX 10482 65536 61440 61440 NT_STATUS_OK
ReadX 10482 126976 4096 4096 NT_STATUS_OK
ReadX 10482 131072 61440 61440 NT_STATUS_OK
ReadX 10482 192512 4096 4096 NT_STATUS_OK
ReadX 10482 196608 61440 61440 NT_STATUS_OK
ReadX 10482 258048 4096 4096 NT_STATUS_OK
ReadX 10482 262144 61440 61440 NT_STATUS_OK
ReadX 10482 323584 4096 4096 NT_STATUS_OK
ReadX 10482 327680 61440 61440 NT_STATUS_OK
ReadX 10482 389120 4096 4096 NT_STATUS_OK
ReadX 10482 393216 61440 61440 NT_STATUS_OK
ReadX 10482 454656 4096 4096 NT_STATUS_OK
ReadX 10482 458752 61440 61440 NT_STATUS_OK
ReadX 10482 520192 4096 4096 NT_STATUS_OK
ReadX 10482 524288 61440 61440 NT_STATUS_OK
ReadX 10482 585728 4096 4096 NT_STATUS_OK
ReadX 10482 589824 61440 61440 NT_STATUS_OK
ReadX 10482 651264 4096 4096 NT_STATUS_OK
ReadX 10482 655360 61440 61440 NT_STATUS_OK
ReadX 10482 716800 4096 4096 NT_STATUS_OK
ReadX 10482 720896 61440 61440 NT_STATUS_OK
ReadX 10482 782336 4096 4096 NT_STATUS_OK
ReadX 10482 786432 61440 61440 NT_STATUS_OK
ReadX 10482 847872 4096 4096 NT_STATUS_OK
ReadX 10482 851968 61440 61440 NT_STATUS_OK
ReadX 10482 913408 4096 4096 NT_STATUS_OK
ReadX 10482 917504 61440 61440 NT_STATUS_OK
ReadX 10482 978944 4096 4096 NT_STATUS_OK
ReadX 10482 983040 61440 61440 NT_STATUS_OK
ReadX 10482 1044480 4096 4096 NT_STATUS_OK
ReadX 10482 1048576 61440 61440 NT_STATUS_OK
ReadX 10482 1110016 4096 4096 NT_STATUS_OK
ReadX 10482 1114112 61440 61440 NT_STATUS_OK
ReadX 10482 1175552 4096 4096 NT_STATUS_OK
ReadX 10482 1179648 61440 61440 NT_STATUS_OK
ReadX 10482 1241088 4096 4096 NT_STATUS_OK
ReadX 10482 1245184 61440 61440 NT_STATUS_OK
ReadX 10482 1306624 4096 4096 NT_STATUS_OK
ReadX 10482 1310720 61440 61440 NT_STATUS_OK
ReadX 10482 1372160 4096 4096 NT_STATUS_OK
ReadX 10482 1376256 61440 61440 NT_STATUS_OK
ReadX 10482 1437696 4096 4096 NT_STATUS_OK
ReadX 10482 1441792 61440 61440 NT_STATUS_OK
ReadX 10482 1503232 4096 4096 NT_STATUS_OK
ReadX 10482 1507328 61440 61440 NT_STATUS_OK
ReadX 10482 1568768 4096 4096 NT_STATUS_OK
ReadX 10482 1572864 61440 61440 NT_STATUS_OK
ReadX 10482 1634304 4096 4096 NT_STATUS_OK
ReadX 10482 1638400 61440 61440 NT_STATUS_OK
ReadX 10482 1699840 4096 4096 NT_STATUS_OK
ReadX 10482 1703936 61440 61440 NT_STATUS_OK
ReadX 10482 1765376 4096 4096 NT_STATUS_OK
ReadX 10482 1769472 61440 61440 NT_STATUS_OK
ReadX 10482 1830912 4096 4096 NT_STATUS_OK
ReadX 10482 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10484 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
ReadX 10484 2156 24 24 NT_STATUS_OK
ReadX 10484 2139 276 276 NT_STATUS_OK
ReadX 10484 2136 14 14 NT_STATUS_OK
ReadX 10484 2136 7 7 NT_STATUS_OK
ReadX 10484 2138 12 12 NT_STATUS_OK
ReadX 10484 2137 8 8 NT_STATUS_OK
ReadX 10484 2135 15 15 NT_STATUS_OK
ReadX 10484 0 16 16 NT_STATUS_OK
ReadX 10484 16 2048 2048 NT_STATUS_OK
ReadX 10484 2064 2048 2048 NT_STATUS_OK
ReadX 10484 257 2048 2048 NT_STATUS_OK
ReadX 10484 385 2048 2048 NT_STATUS_OK
ReadX 10484 513 2048 2048 NT_STATUS_OK
ReadX 10484 641 2048 2048 NT_STATUS_OK
ReadX 10484 769 2048 2048 NT_STATUS_OK
ReadX 10484 897 2048 2048 NT_STATUS_OK
ReadX 10484 1025 2048 2048 NT_STATUS_OK
ReadX 10484 1153 2048 2048 NT_STATUS_OK
ReadX 10484 1281 2048 2048 NT_STATUS_OK
ReadX 10484 1409 2048 2048 NT_STATUS_OK
ReadX 10484 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10486 NT_STATUS_OK
Close 10486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10489 NT_STATUS_OK
WriteX 10489 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 258 NT_STATUS_OK
WriteX 10489 0 10575 10575 NT_STATUS_OK
Flush 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10490 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10494 NT_STATUS_OK
LockX 10494 2147483538 1 NT_STATUS_OK
UnlockX 10494 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 1005 NT_STATUS_OK
ReadX 10494 0 512 512 NT_STATUS_OK
ReadX 10494 512 512 512 NT_STATUS_OK
ReadX 10494 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 1004 NT_STATUS_OK
Close 10494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1005 NT_STATUS_OK
ReadX 10495 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10496 NT_STATUS_OK
LockX 10496 2147483538 1 NT_STATUS_OK
UnlockX 10496 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 1005 NT_STATUS_OK
ReadX 10496 0 512 512 NT_STATUS_OK
ReadX 10496 512 512 512 NT_STATUS_OK
ReadX 10496 1024 512 512 NT_STATUS_OK
ReadX 10496 288 20 20 NT_STATUS_OK
ReadX 10496 308 2084 2084 NT_STATUS_OK
ReadX 10496 388 2084 2084 NT_STATUS_OK
ReadX 10496 388 2084 2084 NT_STATUS_OK
ReadX 10483 2157 1386 1386 NT_STATUS_OK
ReadX 10496 2472 399 399 NT_STATUS_OK
ReadX 10496 3072 1536 1536 NT_STATUS_OK
ReadX 10496 544 149 149 NT_STATUS_OK
ReadX 10496 693 485 485 NT_STATUS_OK
Close 10496 NT_STATUS_OK
ReadX 10483 2157 4096 4096 NT_STATUS_OK
ReadX 10483 6253 4096 4096 NT_STATUS_OK
ReadX 10483 10349 4096 4096 NT_STATUS_OK
ReadX 10483 14445 4096 4096 NT_STATUS_OK
ReadX 10483 18541 4096 4096 NT_STATUS_OK
ReadX 10483 22637 256 256 NT_STATUS_OK
ReadX 10483 22893 4096 4096 NT_STATUS_OK
ReadX 10483 26989 4096 4096 NT_STATUS_OK
ReadX 10483 31085 4096 4096 NT_STATUS_OK
ReadX 10483 35181 4096 4096 NT_STATUS_OK
ReadX 10483 39277 4096 4096 NT_STATUS_OK
ReadX 10483 43373 4096 4096 NT_STATUS_OK
ReadX 10483 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10483 2157 1024 1024 NT_STATUS_OK
ReadX 10483 1667 4688 4688 NT_STATUS_OK
ReadX 10483 6355 3516 3516 NT_STATUS_OK
ReadX 10483 9871 16384 16384 NT_STATUS_OK
ReadX 10483 26255 3771 3771 NT_STATUS_OK
ReadX 10483 30026 2048 2048 NT_STATUS_OK
ReadX 10483 32074 1024 1024 NT_STATUS_OK
ReadX 10483 33098 6652 6652 NT_STATUS_OK
ReadX 10483 39750 16384 16384 NT_STATUS_OK
ReadX 10483 56134 10496 10496 NT_STATUS_OK
ReadX 10483 66630 1784 1784 NT_STATUS_OK
ReadX 10483 68414 90 90 NT_STATUS_OK
ReadX 10483 68504 273 273 NT_STATUS_OK
ReadX 10483 68777 1600 1600 NT_STATUS_OK
ReadX 10483 70377 640 640 NT_STATUS_OK
ReadX 10483 71017 1280 1280 NT_STATUS_OK
ReadX 10483 72297 8464 8464 NT_STATUS_OK
ReadX 10483 80761 158 158 NT_STATUS_OK
ReadX 10483 80919 912 912 NT_STATUS_OK
ReadX 10483 81831 1980 1980 NT_STATUS_OK
ReadX 10483 83811 2256 2256 NT_STATUS_OK
ReadX 10483 86067 400 400 NT_STATUS_OK
ReadX 10483 86467 252 252 NT_STATUS_OK
ReadX 10483 86719 42 42 NT_STATUS_OK
ReadX 10483 86761 725 725 NT_STATUS_OK
ReadX 10483 2009 512 512 NT_STATUS_OK
ReadX 10483 3895 9 9 NT_STATUS_OK
ReadX 10483 3781 46 46 NT_STATUS_OK
ReadX 10483 4059 92 92 NT_STATUS_OK
ReadX 10483 3781 92 92 NT_STATUS_OK
ReadX 10483 3986 184 184 NT_STATUS_OK
ReadX 10483 3987 16384 16384 NT_STATUS_OK
ReadX 10483 3902 16384 16384 NT_STATUS_OK
ReadX 10483 3781 10240 10240 NT_STATUS_OK
ReadX 10483 3821 16384 16384 NT_STATUS_OK
ReadX 10483 3891 935 935 NT_STATUS_OK
ReadX 10483 4060 10240 10240 NT_STATUS_OK
ReadX 10483 4059 184 184 NT_STATUS_OK
ReadX 10483 256 184 184 NT_STATUS_OK
ReadX 10483 256 1026 1026 NT_STATUS_OK
ReadX 10483 3901 326 326 NT_STATUS_OK
ReadX 10483 3899 652 652 NT_STATUS_OK
ReadX 10483 256 2 2 NT_STATUS_OK
ReadX 10483 258 4948 4948 NT_STATUS_OK
Close 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10501 NT_STATUS_OK
WriteX 10501 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10501 258 NT_STATUS_OK
WriteX 10501 0 65536 65536 NT_STATUS_OK
WriteX 10501 65536 65536 65536 NT_STATUS_OK
WriteX 10501 131072 65536 65536 NT_STATUS_OK
WriteX 10501 196608 65536 65536 NT_STATUS_OK
WriteX 10501 262144 65536 65536 NT_STATUS_OK
WriteX 10501 327680 65536 65536 NT_STATUS_OK
WriteX 10501 393216 65536 65536 NT_STATUS_OK
WriteX 10501 458752 65536 65536 NT_STATUS_OK
WriteX 10501 524288 65536 65536 NT_STATUS_OK
WriteX 10501 589824 35257 35257 NT_STATUS_OK
Close 10501 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10506 NT_STATUS_OK
WriteX 10506 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10506 258 NT_STATUS_OK
WriteX 10506 0 65536 65536 NT_STATUS_OK
WriteX 10506 65536 65536 65536 NT_STATUS_OK
WriteX 10506 131072 65536 65536 NT_STATUS_OK
WriteX 10506 196608 65536 65536 NT_STATUS_OK
WriteX 10506 262144 65536 65536 NT_STATUS_OK
WriteX 10506 327680 65536 65536 NT_STATUS_OK
WriteX 10506 393216 65536 65536 NT_STATUS_OK
WriteX 10506 458752 65536 65536 NT_STATUS_OK
WriteX 10506 524288 65536 65536 NT_STATUS_OK
WriteX 10506 589824 57598 57598 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10508 NT_STATUS_OK
WriteX 10508 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10508 258 NT_STATUS_OK
WriteX 10508 0 12543 12543 NT_STATUS_OK
Flush 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10512 NT_STATUS_OK
ReadX 10512 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10514 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 1005 NT_STATUS_OK
ReadX 10514 1938 24 24 NT_STATUS_OK
ReadX 10514 1920 276 276 NT_STATUS_OK
ReadX 10514 1918 14 14 NT_STATUS_OK
ReadX 10514 1918 7 7 NT_STATUS_OK
ReadX 10514 1919 12 12 NT_STATUS_OK
ReadX 10514 1919 8 8 NT_STATUS_OK
ReadX 10514 1917 15 15 NT_STATUS_OK
ReadX 10514 0 16 16 NT_STATUS_OK
ReadX 10514 16 2048 2048 NT_STATUS_OK
ReadX 10514 2064 2048 2048 NT_STATUS_OK
ReadX 10514 257 2048 2048 NT_STATUS_OK
ReadX 10514 385 2048 2048 NT_STATUS_OK
ReadX 10514 513 2048 2048 NT_STATUS_OK
ReadX 10514 641 2048 2048 NT_STATUS_OK
ReadX 10514 769 2048 2048 NT_STATUS_OK
ReadX 10514 897 2048 2048 NT_STATUS_OK
ReadX 10514 1025 2048 2048 NT_STATUS_OK
ReadX 10514 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10519 NT_STATUS_OK
WriteX 10519 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10519 258 NT_STATUS_OK
WriteX 10519 0 11588 11588 NT_STATUS_OK
Flush 10519 NT_STATUS_OK
Close 10519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
Close 10514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10524 NT_STATUS_OK
WriteX 10524 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10524 258 NT_STATUS_OK
WriteX 10524 0 11615 11615 NT_STATUS_OK
Flush 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10530 NT_STATUS_OK
Close 10530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10533 NT_STATUS_OK
WriteX 10533 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10533 258 NT_STATUS_OK
WriteX 10533 0 65536 65536 NT_STATUS_OK
WriteX 10533 65536 16050 16050 NT_STATUS_OK
Close 10533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10513 1939 64 64 NT_STATUS_OK
ReadX 10513 128 248 248 NT_STATUS_OK
ReadX 10513 128 568 568 NT_STATUS_OK
ReadX 10513 3872 1536 1536 NT_STATUS_OK
ReadX 10513 3456 2560 2560 NT_STATUS_OK
ReadX 10513 3136 512 512 NT_STATUS_OK
ReadX 10513 2880 4096 4096 NT_STATUS_OK
ReadX 10513 3264 3072 3072 NT_STATUS_OK
ReadX 10513 320 4096 4096 NT_STATUS_OK
ReadX 10513 1024 4096 4096 NT_STATUS_OK
ReadX 10513 3616 4096 4096 NT_STATUS_OK
ReadX 10513 1939 64 64 NT_STATUS_OK
ReadX 10513 128 248 248 NT_STATUS_OK
ReadX 10513 128 608 608 NT_STATUS_OK
ReadX 10513 2858 1024 1024 NT_STATUS_OK
ReadX 10513 2810 4096 4096 NT_STATUS_OK
ReadX 10513 2826 4096 4096 NT_STATUS_OK
ReadX 10513 2580 2048 2048 NT_STATUS_OK
ReadX 10513 2800 2560 2560 NT_STATUS_OK
ReadX 10513 2100 4096 4096 NT_STATUS_OK
ReadX 10513 2084 4096 4096 NT_STATUS_OK
ReadX 10513 868 4096 4096 NT_STATUS_OK
ReadX 10513 2324 4096 4096 NT_STATUS_OK
ReadX 10513 884 4096 4096 NT_STATUS_OK
ReadX 10513 2604 1024 1024 NT_STATUS_OK
ReadX 10513 580 4096 4096 NT_STATUS_OK
ReadX 10513 596 4096 4096 NT_STATUS_OK
ReadX 10513 2752 4096 4096 NT_STATUS_OK
ReadX 10513 2842 1024 1024 NT_STATUS_OK
ReadX 10513 660 4096 4096 NT_STATUS_OK
ReadX 10513 2720 4096 4096 NT_STATUS_OK
ReadX 10513 2736 4096 4096 NT_STATUS_OK
ReadX 10513 628 4096 4096 NT_STATUS_OK
ReadX 10513 2704 4096 4096 NT_STATUS_OK
ReadX 10513 1556 4096 4096 NT_STATUS_OK
ReadX 10513 576 4096 4096 NT_STATUS_OK
ReadX 10513 3168 1536 1536 NT_STATUS_OK
ReadX 10513 832 4096 4096 NT_STATUS_OK
ReadX 10513 1088 4096 4096 NT_STATUS_OK
ReadX 10513 1344 4096 4096 NT_STATUS_OK
ReadX 10513 1600 4096 4096 NT_STATUS_OK
ReadX 10513 1856 4096 4096 NT_STATUS_OK
ReadX 10513 2112 4096 4096 NT_STATUS_OK
ReadX 10513 1892 4096 4096 NT_STATUS_OK
ReadX 10513 820 4096 4096 NT_STATUS_OK
ReadX 10513 788 4096 4096 NT_STATUS_OK
ReadX 10513 1604 4096 4096 NT_STATUS_OK
ReadX 10513 3648 4096 4096 NT_STATUS_OK
ReadX 10513 2608 4096 4096 NT_STATUS_OK
ReadX 10513 548 4096 4096 NT_STATUS_OK
ReadX 10513 740 4096 4096 NT_STATUS_OK
ReadX 10513 1344 4096 4096 NT_STATUS_OK
ReadX 10513 3392 4096 4096 NT_STATUS_OK
ReadX 10513 3904 4096 4096 NT_STATUS_OK
ReadX 10513 644 4096 4096 NT_STATUS_OK
ReadX 10513 676 4096 4096 NT_STATUS_OK
ReadX 10513 2688 4096 4096 NT_STATUS_OK
ReadX 10513 320 4096 4096 NT_STATUS_OK
ReadX 10513 900 4096 4096 NT_STATUS_OK
ReadX 10513 1908 4096 4096 NT_STATUS_OK
ReadX 10513 852 4096 4096 NT_STATUS_OK
ReadX 10513 724 4096 4096 NT_STATUS_OK
ReadX 10513 2292 4096 4096 NT_STATUS_OK
ReadX 10513 612 4096 4096 NT_STATUS_OK
ReadX 10513 388 4096 4096 NT_STATUS_OK
ReadX 10513 2368 4096 4096 NT_STATUS_OK
ReadX 10513 2624 4096 4096 NT_STATUS_OK
ReadX 10513 500 4096 4096 NT_STATUS_OK
ReadX 10513 356 4096 4096 NT_STATUS_OK
ReadX 10513 1024 4096 4096 NT_STATUS_OK
ReadX 10513 576 4096 4096 NT_STATUS_OK
ReadX 10513 340 4096 4096 NT_STATUS_OK
ReadX 10513 420 4096 4096 NT_STATUS_OK
ReadX 10513 1600 4096 4096 NT_STATUS_OK
ReadX 10513 404 4096 4096 NT_STATUS_OK
ReadX 10513 1428 4096 4096 NT_STATUS_OK
ReadX 10513 2656 4096 4096 NT_STATUS_OK
ReadX 10513 2624 4096 4096 NT_STATUS_OK
ReadX 10513 452 4096 4096 NT_STATUS_OK
ReadX 10513 692 4096 4096 NT_STATUS_OK
ReadX 10513 564 4096 4096 NT_STATUS_OK
ReadX 10513 372 4096 4096 NT_STATUS_OK
ReadX 10513 468 4096 4096 NT_STATUS_OK
ReadX 10513 484 4096 4096 NT_STATUS_OK
ReadX 10513 1088 4096 4096 NT_STATUS_OK
ReadX 10513 1924 4096 4096 NT_STATUS_OK
ReadX 10513 2768 4096 4096 NT_STATUS_OK
ReadX 10513 832 4096 4096 NT_STATUS_OK
ReadX 10513 836 4096 4096 NT_STATUS_OK
ReadX 10513 1856 4096 4096 NT_STATUS_OK
ReadX 10513 2640 4096 4096 NT_STATUS_OK
ReadX 10513 436 4096 4096 NT_STATUS_OK
ReadX 10513 1828 4096 4096 NT_STATUS_OK
ReadX 10513 804 4096 4096 NT_STATUS_OK
ReadX 10513 1860 4096 4096 NT_STATUS_OK
ReadX 10513 1812 4096 4096 NT_STATUS_OK
ReadX 10513 756 4096 4096 NT_STATUS_OK
ReadX 10513 1636 4096 4096 NT_STATUS_OK
ReadX 10513 772 4096 4096 NT_STATUS_OK
ReadX 10513 2036 4096 4096 NT_STATUS_OK
ReadX 10513 1220 4096 4096 NT_STATUS_OK
ReadX 10513 1652 4096 4096 NT_STATUS_OK
ReadX 10513 2588 4096 4096 NT_STATUS_OK
ReadX 10513 916 4096 4096 NT_STATUS_OK
ReadX 10513 260 4096 4096 NT_STATUS_OK
ReadX 10513 932 4096 4096 NT_STATUS_OK
ReadX 10513 2624 4096 4096 NT_STATUS_OK
ReadX 10513 308 4096 4096 NT_STATUS_OK
ReadX 10513 292 4096 4096 NT_STATUS_OK
ReadX 10513 1140 4096 4096 NT_STATUS_OK
ReadX 10513 276 4096 4096 NT_STATUS_OK
ReadX 10513 2020 4096 4096 NT_STATUS_OK
ReadX 10513 2880 4096 4096 NT_STATUS_OK
ReadX 10513 516 4096 4096 NT_STATUS_OK
ReadX 10513 1844 4096 4096 NT_STATUS_OK
ReadX 10513 1124 4096 4096 NT_STATUS_OK
ReadX 10513 3136 4096 4096 NT_STATUS_OK
ReadX 10513 324 4096 4096 NT_STATUS_OK
ReadX 10513 1156 4096 4096 NT_STATUS_OK
ReadX 10513 1172 4096 4096 NT_STATUS_OK
ReadX 10513 2112 4096 4096 NT_STATUS_OK
ReadX 10513 2368 4096 4096 NT_STATUS_OK
ReadX 10513 964 4096 4096 NT_STATUS_OK
ReadX 10513 980 4096 4096 NT_STATUS_OK
ReadX 10513 1012 4096 4096 NT_STATUS_OK
ReadX 10513 532 4096 4096 NT_STATUS_OK
ReadX 10513 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10513 1620 4096 4096 NT_STATUS_OK
ReadX 10513 1604 4096 4096 NT_STATUS_OK
ReadX 10513 2116 4096 4096 NT_STATUS_OK
ReadX 10513 2132 4096 4096 NT_STATUS_OK
ReadX 10513 2148 4096 4096 NT_STATUS_OK
ReadX 10513 2276 4096 4096 NT_STATUS_OK
ReadX 10513 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10538 NT_STATUS_OK
QUERY_FILE_INFORMATION 10493 1004 NT_STATUS_OK
Close 10493 NT_STATUS_OK
WriteX 10538 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
Close 10495 NT_STATUS_OK
WriteX 10538 0 65536 65536 NT_STATUS_OK
WriteX 10538 65536 64850 64850 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10540 NT_STATUS_OK
WriteX 10540 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 258 NT_STATUS_OK
ReadX 10513 2068 4096 4096 NT_STATUS_OK
ReadX 10513 1588 4096 4096 NT_STATUS_OK
ReadX 10513 1572 4096 4096 NT_STATUS_OK
WriteX 10540 0 18630 18630 NT_STATUS_OK
Flush 10540 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10542 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10513 612 4096 4096 NT_STATUS_OK
ReadX 10513 564 4096 4096 NT_STATUS_OK
ReadX 10513 1876 4096 4096 NT_STATUS_OK
ReadX 10513 628 4096 4096 NT_STATUS_OK
ReadX 10513 740 4096 4096 NT_STATUS_OK
ReadX 10513 724 4096 4096 NT_STATUS_OK
ReadX 10513 644 4096 4096 NT_STATUS_OK
ReadX 10513 2324 4096 4096 NT_STATUS_OK
ReadX 10513 660 4096 4096 NT_STATUS_OK
ReadX 10513 852 4096 4096 NT_STATUS_OK
ReadX 10513 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10513 2368 4096 4096 NT_STATUS_OK
ReadX 10513 1024 4096 4096 NT_STATUS_OK
ReadX 10513 320 4096 4096 NT_STATUS_OK
ReadX 10513 580 4096 4096 NT_STATUS_OK
ReadX 10513 3136 512 512 NT_STATUS_OK
ReadX 10513 2880 4096 4096 NT_STATUS_OK
Close 10513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 61440 4096 4096 NT_STATUS_OK
ReadX 10545 126976 4096 4096 NT_STATUS_OK
WriteX 10545 0 65536 65536 NT_STATUS_OK
WriteX 10545 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 61440 4096 4096 NT_STATUS_OK
ReadX 10546 126976 4096 4096 NT_STATUS_OK
ReadX 10546 192512 4096 4096 NT_STATUS_OK
ReadX 10546 258048 4096 4096 NT_STATUS_OK
WriteX 10546 0 65536 65536 NT_STATUS_OK
WriteX 10546 65536 65536 65536 NT_STATUS_OK
WriteX 10546 131072 65536 65536 NT_STATUS_OK
WriteX 10546 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 61440 4096 4096 NT_STATUS_OK
ReadX 10547 126976 4096 4096 NT_STATUS_OK
ReadX 10547 192512 4096 4096 NT_STATUS_OK
ReadX 10547 258048 4096 4096 NT_STATUS_OK
ReadX 10547 323584 4096 4096 NT_STATUS_OK
ReadX 10547 389120 4096 4096 NT_STATUS_OK
ReadX 10547 454656 4096 4096 NT_STATUS_OK
ReadX 10547 520192 4096 4096 NT_STATUS_OK
WriteX 10547 0 65536 65536 NT_STATUS_OK
WriteX 10547 65536 65536 65536 NT_STATUS_OK
WriteX 10547 131072 65536 65536 NT_STATUS_OK
WriteX 10547 196608 65536 65536 NT_STATUS_OK
WriteX 10547 262144 65536 65536 NT_STATUS_OK
WriteX 10547 327680 65536 65536 NT_STATUS_OK
WriteX 10547 393216 65536 65536 NT_STATUS_OK
WriteX 10547 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10549 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10550 NT_STATUS_OK
WriteX 10550 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10550 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10548 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Close 10546 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 62591 62591 NT_STATUS_OK
Close 10555 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10560 NT_STATUS_OK
WriteX 10560 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10560 258 NT_STATUS_OK
WriteX 10560 0 10845 10845 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10565 NT_STATUS_OK
WriteX 10565 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10565 258 NT_STATUS_OK
WriteX 10565 0 30118 30118 NT_STATUS_OK
Close 10565 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
WriteX 10550 0 64 64 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 61440 61440 NT_STATUS_OK
ReadX 10567 61440 4096 4096 NT_STATUS_OK
ReadX 10567 65536 61440 61440 NT_STATUS_OK
ReadX 10567 126976 4096 4096 NT_STATUS_OK
ReadX 10567 131072 61440 61440 NT_STATUS_OK
ReadX 10567 192512 4096 4096 NT_STATUS_OK
ReadX 10567 196608 61440 61440 NT_STATUS_OK
ReadX 10567 258048 4096 4096 NT_STATUS_OK
ReadX 10567 262144 61440 61440 NT_STATUS_OK
ReadX 10567 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 61440 61440 NT_STATUS_OK
ReadX 10568 61440 4096 4096 NT_STATUS_OK
ReadX 10568 65536 61440 61440 NT_STATUS_OK
ReadX 10568 126976 4096 4096 NT_STATUS_OK
ReadX 10568 131072 61440 61440 NT_STATUS_OK
ReadX 10568 192512 4096 4096 NT_STATUS_OK
ReadX 10568 196608 61440 61440 NT_STATUS_OK
ReadX 10568 258048 4096 4096 NT_STATUS_OK
ReadX 10568 262144 61440 61440 NT_STATUS_OK
ReadX 10568 323584 4096 4096 NT_STATUS_OK
ReadX 10568 327680 61440 61440 NT_STATUS_OK
ReadX 10568 389120 4096 4096 NT_STATUS_OK
ReadX 10568 393216 61440 61440 NT_STATUS_OK
ReadX 10568 454656 4096 4096 NT_STATUS_OK
ReadX 10568 458752 61440 61440 NT_STATUS_OK
ReadX 10568 520192 4096 4096 NT_STATUS_OK
ReadX 10568 524288 61440 61440 NT_STATUS_OK
ReadX 10568 585728 4096 4096 NT_STATUS_OK
ReadX 10568 589824 61440 61440 NT_STATUS_OK
ReadX 10568 651264 4096 4096 NT_STATUS_OK
ReadX 10568 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 61440 61440 NT_STATUS_OK
ReadX 10569 61440 4096 4096 NT_STATUS_OK
ReadX 10569 65536 61440 61440 NT_STATUS_OK
ReadX 10569 126976 4096 4096 NT_STATUS_OK
ReadX 10569 131072 61440 61440 NT_STATUS_OK
ReadX 10569 192512 4096 4096 NT_STATUS_OK
ReadX 10569 196608 61440 61440 NT_STATUS_OK
ReadX 10569 258048 4096 4096 NT_STATUS_OK
ReadX 10569 262144 61440 61440 NT_STATUS_OK
ReadX 10569 323584 4096 4096 NT_STATUS_OK
ReadX 10569 327680 61440 61440 NT_STATUS_OK
ReadX 10569 389120 4096 4096 NT_STATUS_OK
ReadX 10569 393216 61440 61440 NT_STATUS_OK
ReadX 10569 454656 4096 4096 NT_STATUS_OK
ReadX 10569 458752 61440 61440 NT_STATUS_OK
ReadX 10569 520192 4096 4096 NT_STATUS_OK
ReadX 10569 524288 61440 61440 NT_STATUS_OK
ReadX 10569 585728 4096 4096 NT_STATUS_OK
ReadX 10569 589824 61440 61440 NT_STATUS_OK
ReadX 10569 651264 4096 4096 NT_STATUS_OK
ReadX 10569 655360 61440 61440 NT_STATUS_OK
ReadX 10569 716800 4096 4096 NT_STATUS_OK
ReadX 10569 720896 61440 61440 NT_STATUS_OK
ReadX 10569 782336 4096 4096 NT_STATUS_OK
ReadX 10569 786432 61440 61440 NT_STATUS_OK
ReadX 10569 847872 4096 4096 NT_STATUS_OK
ReadX 10569 851968 61440 61440 NT_STATUS_OK
ReadX 10569 913408 4096 4096 NT_STATUS_OK
ReadX 10569 917504 61440 61440 NT_STATUS_OK
ReadX 10569 978944 4096 4096 NT_STATUS_OK
ReadX 10569 983040 61440 61440 NT_STATUS_OK
ReadX 10569 1044480 4096 4096 NT_STATUS_OK
ReadX 10569 1048576 61440 61440 NT_STATUS_OK
ReadX 10569 1110016 4096 4096 NT_STATUS_OK
ReadX 10569 1114112 61440 61440 NT_STATUS_OK
ReadX 10569 1175552 4096 4096 NT_STATUS_OK
ReadX 10569 1179648 61440 61440 NT_STATUS_OK
ReadX 10569 1241088 4096 4096 NT_STATUS_OK
ReadX 10569 1245184 61440 61440 NT_STATUS_OK
ReadX 10569 1306624 4096 4096 NT_STATUS_OK
ReadX 10569 1310720 61440 61440 NT_STATUS_OK
ReadX 10569 1372160 4096 4096 NT_STATUS_OK
ReadX 10569 1376256 61440 61440 NT_STATUS_OK
ReadX 10569 1437696 4096 4096 NT_STATUS_OK
ReadX 10569 1441792 61440 61440 NT_STATUS_OK
ReadX 10569 1503232 4096 4096 NT_STATUS_OK
ReadX 10569 1507328 61440 61440 NT_STATUS_OK
ReadX 10569 1568768 4096 4096 NT_STATUS_OK
ReadX 10569 1572864 61440 61440 NT_STATUS_OK
ReadX 10569 1634304 4096 4096 NT_STATUS_OK
ReadX 10569 1638400 61440 61440 NT_STATUS_OK
ReadX 10569 1699840 4096 4096 NT_STATUS_OK
ReadX 10569 1703936 61440 61440 NT_STATUS_OK
ReadX 10569 1765376 4096 4096 NT_STATUS_OK
ReadX 10569 1769472 61440 61440 NT_STATUS_OK
ReadX 10569 1830912 4096 4096 NT_STATUS_OK
ReadX 10569 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10574 NT_STATUS_OK
ReadX 10574 0 4096 4096 NT_STATUS_OK
ReadX 10574 4096 4096 4096 NT_STATUS_OK
ReadX 10574 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Close 10574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10578 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 8192 8192 NT_STATUS_OK
ReadX 10582 8192 8192 8192 NT_STATUS_OK
ReadX 10582 16384 8192 8192 NT_STATUS_OK
ReadX 10582 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10587 NT_STATUS_OK
WriteX 10587 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10587 258 NT_STATUS_OK
WriteX 10587 0 10438 10438 NT_STATUS_OK
Close 10587 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10591 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10593 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
ReadX 10596 4096 4096 4096 NT_STATUS_OK
ReadX 10596 8192 4096 4096 NT_STATUS_OK
ReadX 10596 12288 8192 8192 NT_STATUS_OK
ReadX 10596 20480 8192 8192 NT_STATUS_OK
ReadX 10596 28672 8192 8192 NT_STATUS_OK
ReadX 10596 36864 8192 8192 NT_STATUS_OK
ReadX 10596 45056 8192 8192 NT_STATUS_OK
ReadX 10596 53248 8192 8192 NT_STATUS_OK
ReadX 10596 61440 8192 8192 NT_STATUS_OK
ReadX 10596 69632 8192 8192 NT_STATUS_OK
ReadX 10596 77824 8192 8192 NT_STATUS_OK
ReadX 10596 86016 8192 8192 NT_STATUS_OK
ReadX 10596 94208 8192 8192 NT_STATUS_OK
ReadX 10596 102400 8192 8192 NT_STATUS_OK
ReadX 10596 110592 8192 8192 NT_STATUS_OK
ReadX 10596 118784 8192 8192 NT_STATUS_OK
ReadX 10596 126976 8192 8192 NT_STATUS_OK
ReadX 10596 135168 8192 8192 NT_STATUS_OK
ReadX 10596 143360 8192 8192 NT_STATUS_OK
ReadX 10596 151552 8192 8192 NT_STATUS_OK
ReadX 10596 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10598 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10601 NT_STATUS_OK
WriteX 10601 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 258 NT_STATUS_OK
WriteX 10601 0 28489 28489 NT_STATUS_OK
Close 10601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10604 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 8192 8192 NT_STATUS_OK
ReadX 10608 8192 8192 8192 NT_STATUS_OK
ReadX 10608 16384 8192 8192 NT_STATUS_OK
ReadX 10608 24576 8192 8192 NT_STATUS_OK
ReadX 10608 32768 16384 16384 NT_STATUS_OK
ReadX 10608 49152 8192 8192 NT_STATUS_OK
ReadX 10608 57344 8192 8192 NT_STATUS_OK
ReadX 10608 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10613 NT_STATUS_OK
WriteX 10613 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10613 258 NT_STATUS_OK
WriteX 10613 0 29253 29253 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10614 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10620 NT_STATUS_OK
WriteX 10620 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 258 NT_STATUS_OK
WriteX 10620 0 30183 30183 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10621 NT_STATUS_OK
Close 10621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10623 NT_STATUS_OK
WriteX 10623 0 510 510 NT_STATUS_OK
WriteX 10623 510 512 512 NT_STATUS_OK
WriteX 10623 1022 510 510 NT_STATUS_OK
WriteX 10623 1532 510 510 NT_STATUS_OK
WriteX 10623 2042 168 168 NT_STATUS_OK
Close 10623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 61440 4096 4096 NT_STATUS_OK
ReadX 10627 126976 4096 4096 NT_STATUS_OK
WriteX 10627 0 65536 65536 NT_STATUS_OK
WriteX 10627 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 61440 4096 4096 NT_STATUS_OK
ReadX 10628 126976 4096 4096 NT_STATUS_OK
ReadX 10628 192512 4096 4096 NT_STATUS_OK
ReadX 10628 258048 4096 4096 NT_STATUS_OK
WriteX 10628 0 65536 65536 NT_STATUS_OK
WriteX 10628 65536 65536 65536 NT_STATUS_OK
WriteX 10628 131072 65536 65536 NT_STATUS_OK
WriteX 10628 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 61440 4096 4096 NT_STATUS_OK
ReadX 10629 126976 4096 4096 NT_STATUS_OK
ReadX 10629 192512 4096 4096 NT_STATUS_OK
ReadX 10629 258048 4096 4096 NT_STATUS_OK
ReadX 10629 323584 4096 4096 NT_STATUS_OK
ReadX 10629 389120 4096 4096 NT_STATUS_OK
ReadX 10629 454656 4096 4096 NT_STATUS_OK
ReadX 10629 520192 4096 4096 NT_STATUS_OK
WriteX 10629 0 65536 65536 NT_STATUS_OK
WriteX 10629 65536 65536 65536 NT_STATUS_OK
WriteX 10629 131072 65536 65536 NT_STATUS_OK
WriteX 10629 196608 65536 65536 NT_STATUS_OK
WriteX 10629 262144 65536 65536 NT_STATUS_OK
WriteX 10629 327680 65536 65536 NT_STATUS_OK
WriteX 10629 393216 65536 65536 NT_STATUS_OK
WriteX 10629 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10636 NT_STATUS_OK
Close 10636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10645 NT_STATUS_OK
Close 10645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10648 NT_STATUS_OK
Close 10648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10654 NT_STATUS_OK
Close 10654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10664 NT_STATUS_OK
Close 10664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10674 NT_STATUS_OK
Close 10674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10679 NT_STATUS_OK
Close 10679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10684 NT_STATUS_OK
Close 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10689 NT_STATUS_OK
Close 10689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10692 NT_STATUS_OK
Close 10692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10695 NT_STATUS_OK
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10698 NT_STATUS_OK
WriteX 10698 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10698 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10698 0 65536 65536 NT_STATUS_OK
WriteX 10698 65536 65536 65536 NT_STATUS_OK
WriteX 10698 131072 65536 65536 NT_STATUS_OK
WriteX 10698 196608 65536 65536 NT_STATUS_OK
WriteX 10698 262144 26634 26634 NT_STATUS_OK
Close 10698 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10703 NT_STATUS_OK
Close 10703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10705 NT_STATUS_OK
ReadX 10705 0 4096 4096 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
ReadX 10706 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10714 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10729 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10763 NT_STATUS_OK
Close 10763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10768 NT_STATUS_OK
Close 10768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10773 NT_STATUS_OK
Close 10773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
Close 10785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10797 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10798 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10799 NT_STATUS_OK
ReadX 10799 0 4096 4096 NT_STATUS_OK
Close 10799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
Close 10800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10830 0 4096 4096 NT_STATUS_OK
Close 10830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
ReadX 10832 4096 4096 4096 NT_STATUS_OK
ReadX 10832 8192 4096 4096 NT_STATUS_OK
ReadX 10832 12288 4096 4096 NT_STATUS_OK
ReadX 10832 16384 4096 4096 NT_STATUS_OK
ReadX 10832 20480 4096 4096 NT_STATUS_OK
ReadX 10832 24576 4096 4096 NT_STATUS_OK
ReadX 10832 28672 4096 4096 NT_STATUS_OK
ReadX 10832 32768 4096 4096 NT_STATUS_OK
ReadX 10832 36864 4096 4096 NT_STATUS_OK
ReadX 10832 40960 4096 4096 NT_STATUS_OK
ReadX 10832 45056 4096 4096 NT_STATUS_OK
ReadX 10832 49152 4096 4096 NT_STATUS_OK
ReadX 10832 53248 4096 4096 NT_STATUS_OK
ReadX 10832 57344 4096 4096 NT_STATUS_OK
ReadX 10832 61440 4096 4096 NT_STATUS_OK
ReadX 10832 65536 4096 4096 NT_STATUS_OK
ReadX 10832 69632 4096 4096 NT_STATUS_OK
ReadX 10832 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10832 1004 NT_STATUS_OK
WriteX 10832 0 4096 4096 NT_STATUS_OK
Close 10832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10833 NT_STATUS_OK
SET_FILE_INFORMATION 10833 1004 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10838 NT_STATUS_OK
WriteX 10838 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10838 258 NT_STATUS_OK
WriteX 10838 0 65536 65536 NT_STATUS_OK
WriteX 10838 65536 19979 19979 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 4096 4096 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
QUERY_FILE_INFORMATION 10839 1004 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
SET_FILE_INFORMATION 10839 1004 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
Close 10839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10844 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10850 NT_STATUS_OK
WriteX 10850 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10850 258 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 17654 17654 NT_STATUS_OK
Close 10850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
QUERY_FILE_INFORMATION 10851 1004 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
SET_FILE_INFORMATION 10851 1004 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10852 NT_STATUS_OK
SET_FILE_INFORMATION 10852 1004 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10854 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 0 4096 4096 NT_STATUS_OK
ReadX 10856 4096 4096 4096 NT_STATUS_OK
ReadX 10856 8192 4096 4096 NT_STATUS_OK
ReadX 10856 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10856 16384 4096 4096 NT_STATUS_OK
ReadX 10856 20480 4096 4096 NT_STATUS_OK
ReadX 10856 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
Close 10857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10858 NT_STATUS_OK
ReadX 10858 0 4096 4096 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10859 1004 NT_STATUS_OK
WriteX 10859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10865 NT_STATUS_OK
WriteX 10865 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 65536 65536 NT_STATUS_OK
WriteX 10865 65536 19490 19490 NT_STATUS_OK
Close 10865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
QUERY_FILE_INFORMATION 10866 1004 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10867 NT_STATUS_OK
SET_FILE_INFORMATION 10867 1004 NT_STATUS_OK
Close 10867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10871 0 4096 4096 NT_STATUS_OK
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10872 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
ReadX 10873 4096 4096 4096 NT_STATUS_OK
ReadX 10873 8192 4096 4096 NT_STATUS_OK
ReadX 10873 12288 4096 4096 NT_STATUS_OK
ReadX 10873 16384 4096 4096 NT_STATUS_OK
ReadX 10873 20480 4096 4096 NT_STATUS_OK
ReadX 10873 24576 4096 4096 NT_STATUS_OK
ReadX 10873 28672 4096 4096 NT_STATUS_OK
ReadX 10873 32768 4096 4096 NT_STATUS_OK
ReadX 10873 36864 4096 4096 NT_STATUS_OK
ReadX 10873 40960 4096 4096 NT_STATUS_OK
ReadX 10873 45056 4096 4096 NT_STATUS_OK
ReadX 10873 49152 4096 4096 NT_STATUS_OK
ReadX 10873 53248 4096 4096 NT_STATUS_OK
ReadX 10873 57344 4096 4096 NT_STATUS_OK
ReadX 10873 61440 4096 4096 NT_STATUS_OK
ReadX 10873 65536 4096 4096 NT_STATUS_OK
ReadX 10873 69632 4096 4096 NT_STATUS_OK
ReadX 10873 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
WriteX 10873 0 4096 4096 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10874 NT_STATUS_OK
SET_FILE_INFORMATION 10874 1004 NT_STATUS_OK
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10879 NT_STATUS_OK
WriteX 10879 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 65536 65536 NT_STATUS_OK
WriteX 10879 65536 8866 8866 NT_STATUS_OK
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
WriteX 10880 0 4096 4096 NT_STATUS_OK
Flush 10880 NT_STATUS_OK
SET_FILE_INFORMATION 10880 1004 NT_STATUS_OK
WriteX 10880 0 4096 4096 NT_STATUS_OK
Flush 10880 NT_STATUS_OK
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10884 1004 NT_STATUS_OK
WriteX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10885 NT_STATUS_OK
Close 10885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10890 NT_STATUS_OK
WriteX 10890 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10890 258 NT_STATUS_OK
WriteX 10890 0 65536 65536 NT_STATUS_OK
WriteX 10890 65536 9298 9298 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
Flush 10891 NT_STATUS_OK
SET_FILE_INFORMATION 10891 1004 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
Flush 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10892 NT_STATUS_OK
SET_FILE_INFORMATION 10892 1004 NT_STATUS_OK
Close 10892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10897 0 4096 4096 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10898 4096 4096 4096 NT_STATUS_OK
ReadX 10898 8192 4096 4096 NT_STATUS_OK
ReadX 10898 12288 4096 4096 NT_STATUS_OK
ReadX 10898 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 4096 4096 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10901 1004 NT_STATUS_OK
WriteX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10902 NT_STATUS_OK
Close 10902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10907 NT_STATUS_OK
WriteX 10907 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10907 258 NT_STATUS_OK
WriteX 10907 0 65536 65536 NT_STATUS_OK
WriteX 10907 65536 11540 11540 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
WriteX 10908 0 4096 4096 NT_STATUS_OK
Flush 10908 NT_STATUS_OK
SET_FILE_INFORMATION 10908 1004 NT_STATUS_OK
WriteX 10908 0 4096 4096 NT_STATUS_OK
Flush 10908 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10909 NT_STATUS_OK
SET_FILE_INFORMATION 10909 1004 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10911 NT_STATUS_OK
Close 10911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 61440 4096 4096 NT_STATUS_OK
ReadX 10913 126976 4096 4096 NT_STATUS_OK
WriteX 10913 0 65536 65536 NT_STATUS_OK
WriteX 10913 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 61440 4096 4096 NT_STATUS_OK
ReadX 10914 126976 4096 4096 NT_STATUS_OK
ReadX 10914 192512 4096 4096 NT_STATUS_OK
ReadX 10914 258048 4096 4096 NT_STATUS_OK
WriteX 10914 0 65536 65536 NT_STATUS_OK
WriteX 10914 65536 65536 65536 NT_STATUS_OK
WriteX 10914 131072 65536 65536 NT_STATUS_OK
WriteX 10914 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 61440 4096 4096 NT_STATUS_OK
ReadX 10915 126976 4096 4096 NT_STATUS_OK
ReadX 10915 192512 4096 4096 NT_STATUS_OK
ReadX 10915 258048 4096 4096 NT_STATUS_OK
ReadX 10915 323584 4096 4096 NT_STATUS_OK
ReadX 10915 389120 4096 4096 NT_STATUS_OK
ReadX 10915 454656 4096 4096 NT_STATUS_OK
ReadX 10915 520192 4096 4096 NT_STATUS_OK
WriteX 10915 0 65536 65536 NT_STATUS_OK
WriteX 10915 65536 65536 65536 NT_STATUS_OK
WriteX 10915 131072 65536 65536 NT_STATUS_OK
WriteX 10915 196608 65536 65536 NT_STATUS_OK
WriteX 10915 262144 65536 65536 NT_STATUS_OK
WriteX 10915 327680 65536 65536 NT_STATUS_OK
WriteX 10915 393216 65536 65536 NT_STATUS_OK
WriteX 10915 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 4096 4096 NT_STATUS_OK
ReadX 10916 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10917 NT_STATUS_OK
WriteX 10917 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
WriteX 10917 0 53 53 NT_STATUS_OK
Close 10917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10910 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10916 8192 4096 4096 NT_STATUS_OK
ReadX 10916 12288 4096 4096 NT_STATUS_OK
WriteX 10920 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10920 258 NT_STATUS_OK
ReadX 10916 16384 4096 4096 NT_STATUS_OK
ReadX 10916 20480 4096 4096 NT_STATUS_OK
WriteX 10920 0 15360 15360 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10921 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10921 1004 NT_STATUS_OK
WriteX 10921 0 4096 4096 NT_STATUS_OK
Close 10921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10925 NT_STATUS_OK
Close 10925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10924 4096 4096 4096 NT_STATUS_OK
ReadX 10924 8192 4096 4096 NT_STATUS_OK
ReadX 10924 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
ReadX 10927 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
ReadX 10928 4096 4096 4096 NT_STATUS_OK
ReadX 10928 8192 4096 4096 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10929 NT_STATUS_OK
WriteX 10929 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 15360 15360 NT_STATUS_OK
Close 10929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10930 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10930 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10934 NT_STATUS_OK
SET_FILE_INFORMATION 10934 1004 NT_STATUS_OK
Close 10934 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
Close 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10935 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
ReadX 10937 4096 4096 4096 NT_STATUS_OK
ReadX 10937 8192 4096 4096 NT_STATUS_OK
ReadX 10937 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10939 NT_STATUS_OK
WriteX 10939 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10939 258 NT_STATUS_OK
WriteX 10939 0 53 53 NT_STATUS_OK
Close 10939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10938 4096 4096 4096 NT_STATUS_OK
ReadX 10938 8192 4096 4096 NT_STATUS_OK
ReadX 10938 12288 4096 4096 NT_STATUS_OK
WriteX 10942 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 258 NT_STATUS_OK
WriteX 10942 0 12006 12006 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10943 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10943 1004 NT_STATUS_OK
WriteX 10943 0 4096 4096 NT_STATUS_OK
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10946 4096 4096 4096 NT_STATUS_OK
ReadX 10946 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10949 NT_STATUS_OK
WriteX 10949 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10949 258 NT_STATUS_OK
WriteX 10949 0 11991 11991 NT_STATUS_OK
Close 10949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10950 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10950 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10954 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
Close 10954 NT_STATUS_OK
WriteX 10950 0 4096 4096 NT_STATUS_OK
Close 10950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10955 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10957 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
ReadX 10957 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
Close 10933 NT_STATUS_OK
WriteX 10937 0 19054 19054 NT_STATUS_OK
WriteX 10957 0 12288 12288 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10962 NT_STATUS_OK
Close 10962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 61440 61440 NT_STATUS_OK
ReadX 10964 61440 4096 4096 NT_STATUS_OK
ReadX 10964 65536 61440 61440 NT_STATUS_OK
ReadX 10964 126976 4096 4096 NT_STATUS_OK
ReadX 10964 131072 61440 61440 NT_STATUS_OK
ReadX 10964 192512 4096 4096 NT_STATUS_OK
ReadX 10964 196608 61440 61440 NT_STATUS_OK
ReadX 10964 258048 4096 4096 NT_STATUS_OK
ReadX 10964 262144 61440 61440 NT_STATUS_OK
ReadX 10964 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 61440 61440 NT_STATUS_OK
ReadX 10965 61440 4096 4096 NT_STATUS_OK
ReadX 10965 65536 61440 61440 NT_STATUS_OK
ReadX 10965 126976 4096 4096 NT_STATUS_OK
ReadX 10965 131072 61440 61440 NT_STATUS_OK
ReadX 10965 192512 4096 4096 NT_STATUS_OK
ReadX 10965 196608 61440 61440 NT_STATUS_OK
ReadX 10965 258048 4096 4096 NT_STATUS_OK
ReadX 10965 262144 61440 61440 NT_STATUS_OK
ReadX 10965 323584 4096 4096 NT_STATUS_OK
ReadX 10965 327680 61440 61440 NT_STATUS_OK
ReadX 10965 389120 4096 4096 NT_STATUS_OK
ReadX 10965 393216 61440 61440 NT_STATUS_OK
ReadX 10965 454656 4096 4096 NT_STATUS_OK
ReadX 10965 458752 61440 61440 NT_STATUS_OK
ReadX 10965 520192 4096 4096 NT_STATUS_OK
ReadX 10965 524288 61440 61440 NT_STATUS_OK
ReadX 10965 585728 4096 4096 NT_STATUS_OK
ReadX 10965 589824 61440 61440 NT_STATUS_OK
ReadX 10965 651264 4096 4096 NT_STATUS_OK
ReadX 10965 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10966 NT_STATUS_OK
ReadX 10966 0 61440 61440 NT_STATUS_OK
ReadX 10966 61440 4096 4096 NT_STATUS_OK
ReadX 10966 65536 61440 61440 NT_STATUS_OK
ReadX 10966 126976 4096 4096 NT_STATUS_OK
ReadX 10966 131072 61440 61440 NT_STATUS_OK
ReadX 10966 192512 4096 4096 NT_STATUS_OK
ReadX 10966 196608 61440 61440 NT_STATUS_OK
ReadX 10966 258048 4096 4096 NT_STATUS_OK
ReadX 10966 262144 61440 61440 NT_STATUS_OK
ReadX 10966 323584 4096 4096 NT_STATUS_OK
ReadX 10966 327680 61440 61440 NT_STATUS_OK
ReadX 10966 389120 4096 4096 NT_STATUS_OK
ReadX 10966 393216 61440 61440 NT_STATUS_OK
ReadX 10966 454656 4096 4096 NT_STATUS_OK
ReadX 10966 458752 61440 61440 NT_STATUS_OK
ReadX 10966 520192 4096 4096 NT_STATUS_OK
ReadX 10966 524288 61440 61440 NT_STATUS_OK
ReadX 10966 585728 4096 4096 NT_STATUS_OK
ReadX 10966 589824 61440 61440 NT_STATUS_OK
ReadX 10966 651264 4096 4096 NT_STATUS_OK
ReadX 10966 655360 61440 61440 NT_STATUS_OK
ReadX 10966 716800 4096 4096 NT_STATUS_OK
ReadX 10966 720896 61440 61440 NT_STATUS_OK
ReadX 10966 782336 4096 4096 NT_STATUS_OK
ReadX 10966 786432 61440 61440 NT_STATUS_OK
ReadX 10966 847872 4096 4096 NT_STATUS_OK
ReadX 10966 851968 61440 61440 NT_STATUS_OK
ReadX 10966 913408 4096 4096 NT_STATUS_OK
ReadX 10966 917504 61440 61440 NT_STATUS_OK
ReadX 10966 978944 4096 4096 NT_STATUS_OK
ReadX 10966 983040 61440 61440 NT_STATUS_OK
ReadX 10966 1044480 4096 4096 NT_STATUS_OK
ReadX 10966 1048576 61440 61440 NT_STATUS_OK
ReadX 10966 1110016 4096 4096 NT_STATUS_OK
ReadX 10966 1114112 61440 61440 NT_STATUS_OK
ReadX 10966 1175552 4096 4096 NT_STATUS_OK
ReadX 10966 1179648 61440 61440 NT_STATUS_OK
ReadX 10966 1241088 4096 4096 NT_STATUS_OK
ReadX 10966 1245184 61440 61440 NT_STATUS_OK
ReadX 10966 1306624 4096 4096 NT_STATUS_OK
ReadX 10966 1310720 61440 61440 NT_STATUS_OK
ReadX 10966 1372160 4096 4096 NT_STATUS_OK
ReadX 10966 1376256 61440 61440 NT_STATUS_OK
ReadX 10966 1437696 4096 4096 NT_STATUS_OK
ReadX 10966 1441792 61440 61440 NT_STATUS_OK
ReadX 10966 1503232 4096 4096 NT_STATUS_OK
ReadX 10966 1507328 61440 61440 NT_STATUS_OK
ReadX 10966 1568768 4096 4096 NT_STATUS_OK
ReadX 10966 1572864 61440 61440 NT_STATUS_OK
ReadX 10966 1634304 4096 4096 NT_STATUS_OK
ReadX 10966 1638400 61440 61440 NT_STATUS_OK
ReadX 10966 1699840 4096 4096 NT_STATUS_OK
ReadX 10966 1703936 61440 61440 NT_STATUS_OK
ReadX 10966 1765376 4096 4096 NT_STATUS_OK
ReadX 10966 1769472 61440 61440 NT_STATUS_OK
ReadX 10966 1830912 4096 4096 NT_STATUS_OK
ReadX 10966 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10973 NT_STATUS_OK
QUERY_FILE_INFORMATION 10973 1004 NT_STATUS_OK
WriteX 10973 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10973 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10974 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10975 NT_STATUS_OK
WriteX 10975 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10975 258 NT_STATUS_OK
WriteX 10975 0 491 491 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10978 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10979 NT_STATUS_OK
WriteX 10979 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10979 258 NT_STATUS_OK
WriteX 10979 0 543 543 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10966 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10984 NT_STATUS_OK
ReadX 10984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10993 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 1004 NT_STATUS_OK
WriteX 10993 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 258 NT_STATUS_OK
WriteX 10993 0 2048 2048 NT_STATUS_OK
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
Flush 10994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10999 NT_STATUS_OK
WriteX 10999 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10999 258 NT_STATUS_OK
WriteX 10999 0 2048 2048 NT_STATUS_OK
Close 10999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11004 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11005 NT_STATUS_OK
WriteX 11005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 258 NT_STATUS_OK
WriteX 11005 0 2048 2048 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 2048 2048 NT_STATUS_OK
ReadX 10984 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
WriteX 10984 0 8192 8192 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11010 NT_STATUS_OK
QUERY_FILE_INFORMATION 11010 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11030 NT_STATUS_OK
QUERY_FILE_INFORMATION 11030 1004 NT_STATUS_OK
WriteX 11030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11030 258 NT_STATUS_OK
WriteX 11030 0 2048 2048 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11033 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11037 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11038 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 1004 NT_STATUS_OK
WriteX 11038 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 258 NT_STATUS_OK
WriteX 11038 0 2048 2048 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11039 NT_STATUS_OK
ReadX 11039 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11031 0 4096 4096 NT_STATUS_OK
Flush 11031 NT_STATUS_OK
WriteX 11039 0 4096 4096 NT_STATUS_OK
Flush 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11039 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11033 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11041 NT_STATUS_OK
WriteX 11041 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
WriteX 11041 0 4096 4096 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11044 NT_STATUS_OK
WriteX 11044 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11044 258 NT_STATUS_OK
WriteX 11044 0 4096 4096 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11045 0 4096 4096 NT_STATUS_OK
Close 11042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11048 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11050 NT_STATUS_OK
ReadX 11050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11052 NT_STATUS_OK
WriteX 11052 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11052 258 NT_STATUS_OK
WriteX 11052 0 2048 2048 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11067 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11061 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11069 NT_STATUS_OK
QUERY_FILE_INFORMATION 11069 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11071 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11079 NT_STATUS_OK
ReadX 11079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11081 NT_STATUS_OK
ReadX 11081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11089 NT_STATUS_OK
QUERY_FILE_INFORMATION 11089 1004 NT_STATUS_OK
WriteX 11089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11089 258 NT_STATUS_OK
WriteX 11089 0 2048 2048 NT_STATUS_OK
Close 11089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11101 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 1004 NT_STATUS_OK
WriteX 11101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
WriteX 11101 0 2048 2048 NT_STATUS_OK
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11109 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 1004 NT_STATUS_OK
WriteX 11109 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 258 NT_STATUS_OK
WriteX 11109 0 2048 2048 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
Flush 11090 NT_STATUS_OK
WriteX 11102 0 4096 4096 NT_STATUS_OK
Flush 11102 NT_STATUS_OK
WriteX 11110 0 4096 4096 NT_STATUS_OK
Flush 11110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11102 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11110 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11092 4096 16384 16384 NT_STATUS_OK
ReadX 11072 4096 16384 16384 NT_STATUS_OK
ReadX 11104 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 2048 2048 NT_STATUS_OK
WriteX 11112 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11113 NT_STATUS_OK
QUERY_FILE_INFORMATION 11113 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11084 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11083 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11078 NT_STATUS_OK
Close 11081 NT_STATUS_OK
Close 11082 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11115 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11120 4096 16384 16384 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11122 0 4096 4096 NT_STATUS_OK
WriteX 11123 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 8192 8192 NT_STATUS_OK
ReadX 11126 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11140 0 4096 4096 NT_STATUS_OK
ReadX 11140 4096 4096 4096 NT_STATUS_OK
ReadX 11140 8192 4096 4096 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
WriteX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
ReadX 11141 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11122 0 4096 4096 NT_STATUS_OK
WriteX 11123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11146 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 1004 NT_STATUS_OK
WriteX 11146 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 2048 2048 NT_STATUS_OK
Close 11146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11147 NT_STATUS_OK
ReadX 11147 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11147 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11147 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
ReadX 11149 4096 4096 4096 NT_STATUS_OK
WriteX 11149 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11147 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 0 4096 4096 NT_STATUS_OK
ReadX 11151 4096 4096 4096 NT_STATUS_OK
WriteX 11151 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11152 NT_STATUS_OK
QUERY_FILE_INFORMATION 11152 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11154 0 4096 4096 NT_STATUS_OK
ReadX 11154 4096 4096 4096 NT_STATUS_OK
ReadX 11154 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
ReadX 11155 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11172 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 1004 NT_STATUS_OK
WriteX 11172 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 258 NT_STATUS_OK
WriteX 11172 0 2048 2048 NT_STATUS_OK
Close 11172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11178 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 1004 NT_STATUS_OK
WriteX 11178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 258 NT_STATUS_OK
WriteX 11178 0 2048 2048 NT_STATUS_OK
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11162 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11180 NT_STATUS_OK
QUERY_FILE_INFORMATION 11180 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11159 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Close 11165 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11182 NT_STATUS_OK
QUERY_FILE_INFORMATION 11182 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 61440 4096 4096 NT_STATUS_OK
ReadX 11184 126976 4096 4096 NT_STATUS_OK
WriteX 11184 0 65536 65536 NT_STATUS_OK
WriteX 11184 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 61440 4096 4096 NT_STATUS_OK
ReadX 11185 126976 4096 4096 NT_STATUS_OK
ReadX 11185 192512 4096 4096 NT_STATUS_OK
ReadX 11185 258048 4096 4096 NT_STATUS_OK
WriteX 11185 0 65536 65536 NT_STATUS_OK
WriteX 11185 65536 65536 65536 NT_STATUS_OK
WriteX 11185 131072 65536 65536 NT_STATUS_OK
WriteX 11185 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 61440 4096 4096 NT_STATUS_OK
ReadX 11186 126976 4096 4096 NT_STATUS_OK
ReadX 11186 192512 4096 4096 NT_STATUS_OK
ReadX 11186 258048 4096 4096 NT_STATUS_OK
ReadX 11186 323584 4096 4096 NT_STATUS_OK
ReadX 11186 389120 4096 4096 NT_STATUS_OK
ReadX 11186 454656 4096 4096 NT_STATUS_OK
ReadX 11186 520192 4096 4096 NT_STATUS_OK
WriteX 11186 0 65536 65536 NT_STATUS_OK
WriteX 11186 65536 65536 65536 NT_STATUS_OK
WriteX 11186 131072 65536 65536 NT_STATUS_OK
WriteX 11186 196608 65536 65536 NT_STATUS_OK
WriteX 11186 262144 65536 65536 NT_STATUS_OK
WriteX 11186 327680 65536 65536 NT_STATUS_OK
WriteX 11186 393216 65536 65536 NT_STATUS_OK
WriteX 11186 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11187 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11187 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11187 8192 4096 4096 NT_STATUS_OK
ReadX 11187 12288 4096 4096 NT_STATUS_OK
ReadX 11187 16384 4096 4096 NT_STATUS_OK
ReadX 11187 20480 4096 4096 NT_STATUS_OK
ReadX 11187 24576 4096 4096 NT_STATUS_OK
ReadX 11187 28672 4096 4096 NT_STATUS_OK
ReadX 11187 32768 4096 4096 NT_STATUS_OK
ReadX 11187 36864 4096 4096 NT_STATUS_OK
ReadX 11187 40960 4096 4096 NT_STATUS_OK
ReadX 11187 45056 4096 4096 NT_STATUS_OK
ReadX 11187 49152 4096 4096 NT_STATUS_OK
ReadX 11187 53248 4096 4096 NT_STATUS_OK
ReadX 11187 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11187 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11190 NT_STATUS_OK
WriteX 11190 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11190 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 57088 57088 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Flush 11190 NT_STATUS_OK
Close 11187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11191 NT_STATUS_OK
SET_FILE_INFORMATION 11191 1004 NT_STATUS_OK
Close 11191 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11194 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11195 NT_STATUS_OK
WriteX 11195 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11195 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
WriteX 11195 0 51456 51456 NT_STATUS_OK
WriteX 11195 0 4096 4096 NT_STATUS_OK
Flush 11195 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
WriteX 11195 0 4096 4096 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11199 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11204 NT_STATUS_OK
WriteX 11204 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11204 258 NT_STATUS_OK
WriteX 11204 0 53077 53077 NT_STATUS_OK
Close 11204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11205 NT_STATUS_OK
WriteX 11205 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 0 65536 65536 NT_STATUS_OK
WriteX 11205 65536 1856 1856 NT_STATUS_OK
WriteX 11205 0 4096 4096 NT_STATUS_OK
Flush 11205 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 0 4096 4096 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11214 NT_STATUS_OK
WriteX 11214 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11214 258 NT_STATUS_OK
WriteX 11214 0 7983 7983 NT_STATUS_OK
Close 11214 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11216 NT_STATUS_OK
Close 11216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11219 NT_STATUS_OK
WriteX 11219 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11219 258 NT_STATUS_OK
WriteX 11219 0 65536 65536 NT_STATUS_OK
WriteX 11219 65536 65536 65536 NT_STATUS_OK
WriteX 11219 131072 65536 65536 NT_STATUS_OK
WriteX 11219 196608 65536 65536 NT_STATUS_OK
WriteX 11219 262144 65536 65536 NT_STATUS_OK
WriteX 11219 327680 65536 65536 NT_STATUS_OK
WriteX 11219 393216 65536 65536 NT_STATUS_OK
WriteX 11219 458752 46731 46731 NT_STATUS_OK
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11220 NT_STATUS_OK
WriteX 11220 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11220 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11209 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
WriteX 11220 0 65536 65536 NT_STATUS_OK
WriteX 11220 65536 22848 22848 NT_STATUS_OK
WriteX 11220 0 4096 4096 NT_STATUS_OK
Flush 11220 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
WriteX 11220 0 4096 4096 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11224 NT_STATUS_OK
ReadX 11224 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11224 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11225 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
ReadX 11225 8192 4096 4096 NT_STATUS_OK
ReadX 11225 12288 4096 4096 NT_STATUS_OK
ReadX 11225 16384 4096 4096 NT_STATUS_OK
ReadX 11225 20480 4096 4096 NT_STATUS_OK
ReadX 11225 24576 4096 4096 NT_STATUS_OK
ReadX 11225 28672 4096 4096 NT_STATUS_OK
ReadX 11225 32768 4096 4096 NT_STATUS_OK
ReadX 11225 36864 4096 4096 NT_STATUS_OK
ReadX 11225 40960 4096 4096 NT_STATUS_OK
ReadX 11225 45056 4096 4096 NT_STATUS_OK
ReadX 11225 49152 4096 4096 NT_STATUS_OK
ReadX 11225 53248 4096 4096 NT_STATUS_OK
ReadX 11225 57344 4096 4096 NT_STATUS_OK
ReadX 11225 61440 4096 4096 NT_STATUS_OK
ReadX 11225 65536 4096 4096 NT_STATUS_OK
ReadX 11225 69632 4096 4096 NT_STATUS_OK
ReadX 11225 73728 4096 4096 NT_STATUS_OK
ReadX 11225 77824 4096 4096 NT_STATUS_OK
ReadX 11225 81920 4096 4096 NT_STATUS_OK
ReadX 11225 86016 4096 4096 NT_STATUS_OK
ReadX 11225 90112 4096 4096 NT_STATUS_OK
ReadX 11225 94208 4096 4096 NT_STATUS_OK
ReadX 11225 98304 4096 4096 NT_STATUS_OK
ReadX 11225 102400 4096 4096 NT_STATUS_OK
ReadX 11225 106496 4096 4096 NT_STATUS_OK
ReadX 11225 110592 4096 4096 NT_STATUS_OK
ReadX 11225 114688 4096 4096 NT_STATUS_OK
ReadX 11225 118784 4096 4096 NT_STATUS_OK
ReadX 11225 122880 4096 4096 NT_STATUS_OK
ReadX 11225 126976 4096 4096 NT_STATUS_OK
ReadX 11225 131072 4096 4096 NT_STATUS_OK
ReadX 11225 135168 4096 4096 NT_STATUS_OK
ReadX 11225 139264 4096 4096 NT_STATUS_OK
ReadX 11225 143360 4096 4096 NT_STATUS_OK
ReadX 11225 147456 4096 4096 NT_STATUS_OK
ReadX 11225 151552 4096 4096 NT_STATUS_OK
ReadX 11225 155648 4096 4096 NT_STATUS_OK
ReadX 11225 159744 4096 4096 NT_STATUS_OK
ReadX 11225 163840 4096 4096 NT_STATUS_OK
ReadX 11225 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11225 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11228 NT_STATUS_OK
WriteX 11228 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11228 258 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11229 NT_STATUS_OK
SET_FILE_INFORMATION 11229 1004 NT_STATUS_OK
Close 11229 NT_STATUS_OK
WriteX 11228 0 42388 42388 NT_STATUS_OK
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
ReadX 11232 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11233 NT_STATUS_OK
WriteX 11233 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11233 258 NT_STATUS_OK
SET_FILE_INFORMATION 11233 1004 NT_STATUS_OK
WriteX 11233 0 42652 42652 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11235 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
ReadX 11237 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11242 NT_STATUS_OK
WriteX 11242 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 258 NT_STATUS_OK
WriteX 11242 0 65536 65536 NT_STATUS_OK
WriteX 11242 65536 49 49 NT_STATUS_OK
Close 11242 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 61440 61440 NT_STATUS_OK
ReadX 11243 61440 4096 4096 NT_STATUS_OK
ReadX 11243 65536 61440 61440 NT_STATUS_OK
ReadX 11243 126976 4096 4096 NT_STATUS_OK
ReadX 11243 131072 61440 61440 NT_STATUS_OK
ReadX 11243 192512 4096 4096 NT_STATUS_OK
ReadX 11243 196608 61440 61440 NT_STATUS_OK
ReadX 11243 258048 4096 4096 NT_STATUS_OK
ReadX 11243 262144 61440 61440 NT_STATUS_OK
ReadX 11243 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 61440 61440 NT_STATUS_OK
ReadX 11244 61440 4096 4096 NT_STATUS_OK
ReadX 11244 65536 61440 61440 NT_STATUS_OK
ReadX 11244 126976 4096 4096 NT_STATUS_OK
ReadX 11244 131072 61440 61440 NT_STATUS_OK
ReadX 11244 192512 4096 4096 NT_STATUS_OK
ReadX 11244 196608 61440 61440 NT_STATUS_OK
ReadX 11244 258048 4096 4096 NT_STATUS_OK
ReadX 11244 262144 61440 61440 NT_STATUS_OK
ReadX 11244 323584 4096 4096 NT_STATUS_OK
ReadX 11244 327680 61440 61440 NT_STATUS_OK
ReadX 11244 389120 4096 4096 NT_STATUS_OK
ReadX 11244 393216 61440 61440 NT_STATUS_OK
ReadX 11244 454656 4096 4096 NT_STATUS_OK
ReadX 11244 458752 61440 61440 NT_STATUS_OK
ReadX 11244 520192 4096 4096 NT_STATUS_OK
ReadX 11244 524288 61440 61440 NT_STATUS_OK
ReadX 11244 585728 4096 4096 NT_STATUS_OK
ReadX 11244 589824 61440 61440 NT_STATUS_OK
ReadX 11244 651264 4096 4096 NT_STATUS_OK
ReadX 11244 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 61440 61440 NT_STATUS_OK
ReadX 11245 61440 4096 4096 NT_STATUS_OK
ReadX 11245 65536 61440 61440 NT_STATUS_OK
ReadX 11245 126976 4096 4096 NT_STATUS_OK
ReadX 11245 131072 61440 61440 NT_STATUS_OK
ReadX 11245 192512 4096 4096 NT_STATUS_OK
ReadX 11245 196608 61440 61440 NT_STATUS_OK
ReadX 11245 258048 4096 4096 NT_STATUS_OK
ReadX 11245 262144 61440 61440 NT_STATUS_OK
ReadX 11245 323584 4096 4096 NT_STATUS_OK
ReadX 11245 327680 61440 61440 NT_STATUS_OK
ReadX 11245 389120 4096 4096 NT_STATUS_OK
ReadX 11245 393216 61440 61440 NT_STATUS_OK
ReadX 11245 454656 4096 4096 NT_STATUS_OK
ReadX 11245 458752 61440 61440 NT_STATUS_OK
ReadX 11245 520192 4096 4096 NT_STATUS_OK
ReadX 11245 524288 61440 61440 NT_STATUS_OK
ReadX 11245 585728 4096 4096 NT_STATUS_OK
ReadX 11245 589824 61440 61440 NT_STATUS_OK
ReadX 11245 651264 4096 4096 NT_STATUS_OK
ReadX 11245 655360 61440 61440 NT_STATUS_OK
ReadX 11245 716800 4096 4096 NT_STATUS_OK
ReadX 11245 720896 61440 61440 NT_STATUS_OK
ReadX 11245 782336 4096 4096 NT_STATUS_OK
ReadX 11245 786432 61440 61440 NT_STATUS_OK
ReadX 11245 847872 4096 4096 NT_STATUS_OK
ReadX 11245 851968 61440 61440 NT_STATUS_OK
ReadX 11245 913408 4096 4096 NT_STATUS_OK
ReadX 11245 917504 61440 61440 NT_STATUS_OK
ReadX 11245 978944 4096 4096 NT_STATUS_OK
ReadX 11245 983040 61440 61440 NT_STATUS_OK
ReadX 11245 1044480 4096 4096 NT_STATUS_OK
ReadX 11245 1048576 61440 61440 NT_STATUS_OK
ReadX 11245 1110016 4096 4096 NT_STATUS_OK
ReadX 11245 1114112 61440 61440 NT_STATUS_OK
ReadX 11245 1175552 4096 4096 NT_STATUS_OK
ReadX 11245 1179648 61440 61440 NT_STATUS_OK
ReadX 11245 1241088 4096 4096 NT_STATUS_OK
ReadX 11245 1245184 61440 61440 NT_STATUS_OK
ReadX 11245 1306624 4096 4096 NT_STATUS_OK
ReadX 11245 1310720 61440 61440 NT_STATUS_OK
ReadX 11245 1372160 4096 4096 NT_STATUS_OK
ReadX 11245 1376256 61440 61440 NT_STATUS_OK
ReadX 11245 1437696 4096 4096 NT_STATUS_OK
ReadX 11245 1441792 61440 61440 NT_STATUS_OK
ReadX 11245 1503232 4096 4096 NT_STATUS_OK
ReadX 11245 1507328 61440 61440 NT_STATUS_OK
ReadX 11245 1568768 4096 4096 NT_STATUS_OK
ReadX 11245 1572864 61440 61440 NT_STATUS_OK
ReadX 11245 1634304 4096 4096 NT_STATUS_OK
ReadX 11245 1638400 61440 61440 NT_STATUS_OK
ReadX 11245 1699840 4096 4096 NT_STATUS_OK
ReadX 11245 1703936 61440 61440 NT_STATUS_OK
ReadX 11245 1765376 4096 4096 NT_STATUS_OK
ReadX 11245 1769472 61440 61440 NT_STATUS_OK
ReadX 11245 1830912 4096 4096 NT_STATUS_OK
ReadX 11245 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11247 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
ReadX 11247 2156 24 24 NT_STATUS_OK
ReadX 11247 2139 276 276 NT_STATUS_OK
ReadX 11247 2136 14 14 NT_STATUS_OK
ReadX 11247 2136 7 7 NT_STATUS_OK
ReadX 11247 2138 12 12 NT_STATUS_OK
ReadX 11247 2137 8 8 NT_STATUS_OK
ReadX 11247 2135 15 15 NT_STATUS_OK
ReadX 11247 0 16 16 NT_STATUS_OK
ReadX 11247 16 2048 2048 NT_STATUS_OK
ReadX 11247 2064 2048 2048 NT_STATUS_OK
ReadX 11247 257 2048 2048 NT_STATUS_OK
ReadX 11247 385 2048 2048 NT_STATUS_OK
ReadX 11247 513 2048 2048 NT_STATUS_OK
ReadX 11247 641 2048 2048 NT_STATUS_OK
ReadX 11247 769 2048 2048 NT_STATUS_OK
ReadX 11247 897 2048 2048 NT_STATUS_OK
ReadX 11247 1025 2048 2048 NT_STATUS_OK
ReadX 11247 1153 2048 2048 NT_STATUS_OK
ReadX 11247 1281 2048 2048 NT_STATUS_OK
ReadX 11247 1409 2048 2048 NT_STATUS_OK
ReadX 11247 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11249 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11252 NT_STATUS_OK
WriteX 11252 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11252 258 NT_STATUS_OK
WriteX 11252 0 10575 10575 NT_STATUS_OK
Flush 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11253 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
Close 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11257 NT_STATUS_OK
LockX 11257 2147483538 1 NT_STATUS_OK
UnlockX 11257 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 1005 NT_STATUS_OK
ReadX 11257 0 512 512 NT_STATUS_OK
ReadX 11257 512 512 512 NT_STATUS_OK
ReadX 11257 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 1004 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1005 NT_STATUS_OK
ReadX 11258 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11259 NT_STATUS_OK
LockX 11259 2147483538 1 NT_STATUS_OK
UnlockX 11259 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 1005 NT_STATUS_OK
ReadX 11259 0 512 512 NT_STATUS_OK
ReadX 11259 512 512 512 NT_STATUS_OK
ReadX 11259 1024 512 512 NT_STATUS_OK
ReadX 11259 288 20 20 NT_STATUS_OK
ReadX 11259 308 2084 2084 NT_STATUS_OK
ReadX 11259 388 2084 2084 NT_STATUS_OK
ReadX 11259 388 2084 2084 NT_STATUS_OK
ReadX 11246 2157 1386 1386 NT_STATUS_OK
ReadX 11259 2472 399 399 NT_STATUS_OK
ReadX 11259 3072 1536 1536 NT_STATUS_OK
ReadX 11259 544 149 149 NT_STATUS_OK
ReadX 11259 693 485 485 NT_STATUS_OK
Close 11259 NT_STATUS_OK
ReadX 11246 2157 4096 4096 NT_STATUS_OK
ReadX 11246 6253 4096 4096 NT_STATUS_OK
ReadX 11246 10349 4096 4096 NT_STATUS_OK
ReadX 11246 14445 4096 4096 NT_STATUS_OK
ReadX 11246 18541 4096 4096 NT_STATUS_OK
ReadX 11246 22637 256 256 NT_STATUS_OK
ReadX 11246 22893 4096 4096 NT_STATUS_OK
ReadX 11246 26989 4096 4096 NT_STATUS_OK
ReadX 11246 31085 4096 4096 NT_STATUS_OK
ReadX 11246 35181 4096 4096 NT_STATUS_OK
ReadX 11246 39277 4096 4096 NT_STATUS_OK
ReadX 11246 43373 4096 4096 NT_STATUS_OK
ReadX 11246 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11246 2157 1024 1024 NT_STATUS_OK
ReadX 11246 1667 4688 4688 NT_STATUS_OK
ReadX 11246 6355 3516 3516 NT_STATUS_OK
ReadX 11246 9871 16384 16384 NT_STATUS_OK
ReadX 11246 26255 3771 3771 NT_STATUS_OK
ReadX 11246 30026 2048 2048 NT_STATUS_OK
ReadX 11246 32074 1024 1024 NT_STATUS_OK
ReadX 11246 33098 6652 6652 NT_STATUS_OK
ReadX 11246 39750 16384 16384 NT_STATUS_OK
ReadX 11246 56134 10496 10496 NT_STATUS_OK
ReadX 11246 66630 1784 1784 NT_STATUS_OK
ReadX 11246 68414 90 90 NT_STATUS_OK
ReadX 11246 68504 273 273 NT_STATUS_OK
ReadX 11246 68777 1600 1600 NT_STATUS_OK
ReadX 11246 70377 640 640 NT_STATUS_OK
ReadX 11246 71017 1280 1280 NT_STATUS_OK
ReadX 11246 72297 8464 8464 NT_STATUS_OK
ReadX 11246 80761 158 158 NT_STATUS_OK
ReadX 11246 80919 912 912 NT_STATUS_OK
ReadX 11246 81831 1980 1980 NT_STATUS_OK
ReadX 11246 83811 2256 2256 NT_STATUS_OK
ReadX 11246 86067 400 400 NT_STATUS_OK
ReadX 11246 86467 252 252 NT_STATUS_OK
ReadX 11246 86719 42 42 NT_STATUS_OK
ReadX 11246 86761 725 725 NT_STATUS_OK
ReadX 11246 2009 512 512 NT_STATUS_OK
ReadX 11246 3895 9 9 NT_STATUS_OK
ReadX 11246 3781 46 46 NT_STATUS_OK
ReadX 11246 4059 92 92 NT_STATUS_OK
ReadX 11246 3781 92 92 NT_STATUS_OK
ReadX 11246 3986 184 184 NT_STATUS_OK
ReadX 11246 3987 16384 16384 NT_STATUS_OK
ReadX 11246 3902 16384 16384 NT_STATUS_OK
ReadX 11246 3781 10240 10240 NT_STATUS_OK
ReadX 11246 3821 16384 16384 NT_STATUS_OK
ReadX 11246 3891 935 935 NT_STATUS_OK
ReadX 11246 4060 10240 10240 NT_STATUS_OK
ReadX 11246 4059 184 184 NT_STATUS_OK
ReadX 11246 256 184 184 NT_STATUS_OK
ReadX 11246 256 1026 1026 NT_STATUS_OK
ReadX 11246 3901 326 326 NT_STATUS_OK
ReadX 11246 3899 652 652 NT_STATUS_OK
ReadX 11246 256 2 2 NT_STATUS_OK
ReadX 11246 258 4948 4948 NT_STATUS_OK
Close 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11264 NT_STATUS_OK
WriteX 11264 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 258 NT_STATUS_OK
WriteX 11264 0 65536 65536 NT_STATUS_OK
WriteX 11264 65536 65536 65536 NT_STATUS_OK
WriteX 11264 131072 65536 65536 NT_STATUS_OK
WriteX 11264 196608 65536 65536 NT_STATUS_OK
WriteX 11264 262144 65536 65536 NT_STATUS_OK
WriteX 11264 327680 65536 65536 NT_STATUS_OK
WriteX 11264 393216 65536 65536 NT_STATUS_OK
WriteX 11264 458752 65536 65536 NT_STATUS_OK
WriteX 11264 524288 65536 65536 NT_STATUS_OK
WriteX 11264 589824 35257 35257 NT_STATUS_OK
Close 11264 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11269 NT_STATUS_OK
WriteX 11269 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11269 258 NT_STATUS_OK
WriteX 11269 0 65536 65536 NT_STATUS_OK
WriteX 11269 65536 65536 65536 NT_STATUS_OK
WriteX 11269 131072 65536 65536 NT_STATUS_OK
WriteX 11269 196608 65536 65536 NT_STATUS_OK
WriteX 11269 262144 65536 65536 NT_STATUS_OK
WriteX 11269 327680 65536 65536 NT_STATUS_OK
WriteX 11269 393216 65536 65536 NT_STATUS_OK
WriteX 11269 458752 65536 65536 NT_STATUS_OK
WriteX 11269 524288 65536 65536 NT_STATUS_OK
WriteX 11269 589824 57598 57598 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11271 NT_STATUS_OK
WriteX 11271 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11271 258 NT_STATUS_OK
WriteX 11271 0 12543 12543 NT_STATUS_OK
Flush 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11277 NT_STATUS_OK
QUERY_FILE_INFORMATION 11277 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11277 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11277 1005 NT_STATUS_OK
ReadX 11277 1938 24 24 NT_STATUS_OK
ReadX 11277 1920 276 276 NT_STATUS_OK
ReadX 11277 1918 14 14 NT_STATUS_OK
ReadX 11277 1918 7 7 NT_STATUS_OK
ReadX 11277 1919 12 12 NT_STATUS_OK
ReadX 11277 1919 8 8 NT_STATUS_OK
ReadX 11277 1917 15 15 NT_STATUS_OK
ReadX 11277 0 16 16 NT_STATUS_OK
ReadX 11277 16 2048 2048 NT_STATUS_OK
ReadX 11277 2064 2048 2048 NT_STATUS_OK
ReadX 11277 257 2048 2048 NT_STATUS_OK
ReadX 11277 385 2048 2048 NT_STATUS_OK
ReadX 11277 513 2048 2048 NT_STATUS_OK
ReadX 11277 641 2048 2048 NT_STATUS_OK
ReadX 11277 769 2048 2048 NT_STATUS_OK
ReadX 11277 897 2048 2048 NT_STATUS_OK
ReadX 11277 1025 2048 2048 NT_STATUS_OK
ReadX 11277 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11282 NT_STATUS_OK
WriteX 11282 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11282 258 NT_STATUS_OK
WriteX 11282 0 11588 11588 NT_STATUS_OK
Flush 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
Close 11277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11287 NT_STATUS_OK
WriteX 11287 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11287 258 NT_STATUS_OK
WriteX 11287 0 11615 11615 NT_STATUS_OK
Flush 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11293 NT_STATUS_OK
Close 11293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11296 NT_STATUS_OK
WriteX 11296 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11296 258 NT_STATUS_OK
WriteX 11296 0 65536 65536 NT_STATUS_OK
WriteX 11296 65536 16050 16050 NT_STATUS_OK
Close 11296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11276 1939 64 64 NT_STATUS_OK
ReadX 11276 128 248 248 NT_STATUS_OK
ReadX 11276 128 568 568 NT_STATUS_OK
ReadX 11276 3872 1536 1536 NT_STATUS_OK
ReadX 11276 3456 2560 2560 NT_STATUS_OK
ReadX 11276 3136 512 512 NT_STATUS_OK
ReadX 11276 2880 4096 4096 NT_STATUS_OK
ReadX 11276 3264 3072 3072 NT_STATUS_OK
ReadX 11276 320 4096 4096 NT_STATUS_OK
ReadX 11276 1024 4096 4096 NT_STATUS_OK
ReadX 11276 3616 4096 4096 NT_STATUS_OK
ReadX 11276 1939 64 64 NT_STATUS_OK
ReadX 11276 128 248 248 NT_STATUS_OK
ReadX 11276 128 608 608 NT_STATUS_OK
ReadX 11276 2858 1024 1024 NT_STATUS_OK
ReadX 11276 2810 4096 4096 NT_STATUS_OK
ReadX 11276 2826 4096 4096 NT_STATUS_OK
ReadX 11276 2580 2048 2048 NT_STATUS_OK
ReadX 11276 2800 2560 2560 NT_STATUS_OK
ReadX 11276 2100 4096 4096 NT_STATUS_OK
ReadX 11276 2084 4096 4096 NT_STATUS_OK
ReadX 11276 868 4096 4096 NT_STATUS_OK
ReadX 11276 2324 4096 4096 NT_STATUS_OK
ReadX 11276 884 4096 4096 NT_STATUS_OK
ReadX 11276 2604 1024 1024 NT_STATUS_OK
ReadX 11276 580 4096 4096 NT_STATUS_OK
ReadX 11276 596 4096 4096 NT_STATUS_OK
ReadX 11276 2752 4096 4096 NT_STATUS_OK
ReadX 11276 2842 1024 1024 NT_STATUS_OK
ReadX 11276 660 4096 4096 NT_STATUS_OK
ReadX 11276 2720 4096 4096 NT_STATUS_OK
ReadX 11276 2736 4096 4096 NT_STATUS_OK
ReadX 11276 628 4096 4096 NT_STATUS_OK
ReadX 11276 2704 4096 4096 NT_STATUS_OK
ReadX 11276 1556 4096 4096 NT_STATUS_OK
ReadX 11276 576 4096 4096 NT_STATUS_OK
ReadX 11276 3168 1536 1536 NT_STATUS_OK
ReadX 11276 832 4096 4096 NT_STATUS_OK
ReadX 11276 1088 4096 4096 NT_STATUS_OK
ReadX 11276 1344 4096 4096 NT_STATUS_OK
ReadX 11276 1600 4096 4096 NT_STATUS_OK
ReadX 11276 1856 4096 4096 NT_STATUS_OK
ReadX 11276 2112 4096 4096 NT_STATUS_OK
ReadX 11276 1892 4096 4096 NT_STATUS_OK
ReadX 11276 820 4096 4096 NT_STATUS_OK
ReadX 11276 788 4096 4096 NT_STATUS_OK
ReadX 11276 1604 4096 4096 NT_STATUS_OK
ReadX 11276 3648 4096 4096 NT_STATUS_OK
ReadX 11276 2608 4096 4096 NT_STATUS_OK
ReadX 11276 548 4096 4096 NT_STATUS_OK
ReadX 11276 740 4096 4096 NT_STATUS_OK
ReadX 11276 1344 4096 4096 NT_STATUS_OK
ReadX 11276 3392 4096 4096 NT_STATUS_OK
ReadX 11276 3904 4096 4096 NT_STATUS_OK
ReadX 11276 644 4096 4096 NT_STATUS_OK
ReadX 11276 676 4096 4096 NT_STATUS_OK
ReadX 11276 2688 4096 4096 NT_STATUS_OK
ReadX 11276 320 4096 4096 NT_STATUS_OK
ReadX 11276 900 4096 4096 NT_STATUS_OK
ReadX 11276 1908 4096 4096 NT_STATUS_OK
ReadX 11276 852 4096 4096 NT_STATUS_OK
ReadX 11276 724 4096 4096 NT_STATUS_OK
ReadX 11276 2292 4096 4096 NT_STATUS_OK
ReadX 11276 612 4096 4096 NT_STATUS_OK
ReadX 11276 388 4096 4096 NT_STATUS_OK
ReadX 11276 2368 4096 4096 NT_STATUS_OK
ReadX 11276 2624 4096 4096 NT_STATUS_OK
ReadX 11276 500 4096 4096 NT_STATUS_OK
ReadX 11276 356 4096 4096 NT_STATUS_OK
ReadX 11276 1024 4096 4096 NT_STATUS_OK
ReadX 11276 576 4096 4096 NT_STATUS_OK
ReadX 11276 340 4096 4096 NT_STATUS_OK
ReadX 11276 420 4096 4096 NT_STATUS_OK
ReadX 11276 1600 4096 4096 NT_STATUS_OK
ReadX 11276 404 4096 4096 NT_STATUS_OK
ReadX 11276 1428 4096 4096 NT_STATUS_OK
ReadX 11276 2656 4096 4096 NT_STATUS_OK
ReadX 11276 2624 4096 4096 NT_STATUS_OK
ReadX 11276 452 4096 4096 NT_STATUS_OK
ReadX 11276 692 4096 4096 NT_STATUS_OK
ReadX 11276 564 4096 4096 NT_STATUS_OK
ReadX 11276 372 4096 4096 NT_STATUS_OK
ReadX 11276 468 4096 4096 NT_STATUS_OK
ReadX 11276 484 4096 4096 NT_STATUS_OK
ReadX 11276 1088 4096 4096 NT_STATUS_OK
ReadX 11276 1924 4096 4096 NT_STATUS_OK
ReadX 11276 2768 4096 4096 NT_STATUS_OK
ReadX 11276 832 4096 4096 NT_STATUS_OK
ReadX 11276 836 4096 4096 NT_STATUS_OK
ReadX 11276 1856 4096 4096 NT_STATUS_OK
ReadX 11276 2640 4096 4096 NT_STATUS_OK
ReadX 11276 436 4096 4096 NT_STATUS_OK
ReadX 11276 1828 4096 4096 NT_STATUS_OK
ReadX 11276 804 4096 4096 NT_STATUS_OK
ReadX 11276 1860 4096 4096 NT_STATUS_OK
ReadX 11276 1812 4096 4096 NT_STATUS_OK
ReadX 11276 756 4096 4096 NT_STATUS_OK
ReadX 11276 1636 4096 4096 NT_STATUS_OK
ReadX 11276 772 4096 4096 NT_STATUS_OK
ReadX 11276 2036 4096 4096 NT_STATUS_OK
ReadX 11276 1220 4096 4096 NT_STATUS_OK
ReadX 11276 1652 4096 4096 NT_STATUS_OK
ReadX 11276 2588 4096 4096 NT_STATUS_OK
ReadX 11276 916 4096 4096 NT_STATUS_OK
ReadX 11276 260 4096 4096 NT_STATUS_OK
ReadX 11276 932 4096 4096 NT_STATUS_OK
ReadX 11276 2624 4096 4096 NT_STATUS_OK
ReadX 11276 308 4096 4096 NT_STATUS_OK
ReadX 11276 292 4096 4096 NT_STATUS_OK
ReadX 11276 1140 4096 4096 NT_STATUS_OK
ReadX 11276 276 4096 4096 NT_STATUS_OK
ReadX 11276 2020 4096 4096 NT_STATUS_OK
ReadX 11276 2880 4096 4096 NT_STATUS_OK
ReadX 11276 516 4096 4096 NT_STATUS_OK
ReadX 11276 1844 4096 4096 NT_STATUS_OK
ReadX 11276 1124 4096 4096 NT_STATUS_OK
ReadX 11276 3136 4096 4096 NT_STATUS_OK
ReadX 11276 324 4096 4096 NT_STATUS_OK
ReadX 11276 1156 4096 4096 NT_STATUS_OK
ReadX 11276 1172 4096 4096 NT_STATUS_OK
ReadX 11276 2112 4096 4096 NT_STATUS_OK
ReadX 11276 2368 4096 4096 NT_STATUS_OK
ReadX 11276 964 4096 4096 NT_STATUS_OK
ReadX 11276 980 4096 4096 NT_STATUS_OK
ReadX 11276 1012 4096 4096 NT_STATUS_OK
ReadX 11276 532 4096 4096 NT_STATUS_OK
ReadX 11276 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11276 1620 4096 4096 NT_STATUS_OK
ReadX 11276 1604 4096 4096 NT_STATUS_OK
ReadX 11276 2116 4096 4096 NT_STATUS_OK
ReadX 11276 2132 4096 4096 NT_STATUS_OK
ReadX 11276 2148 4096 4096 NT_STATUS_OK
ReadX 11276 2276 4096 4096 NT_STATUS_OK
ReadX 11276 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11298 NT_STATUS_OK
Close 11298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11256 1004 NT_STATUS_OK
Close 11256 NT_STATUS_OK
WriteX 11301 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1004 NT_STATUS_OK
Close 11258 NT_STATUS_OK
WriteX 11301 0 65536 65536 NT_STATUS_OK
WriteX 11301 65536 64850 64850 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11303 NT_STATUS_OK
WriteX 11303 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11303 258 NT_STATUS_OK
ReadX 11276 2068 4096 4096 NT_STATUS_OK
ReadX 11276 1588 4096 4096 NT_STATUS_OK
ReadX 11276 1572 4096 4096 NT_STATUS_OK
WriteX 11303 0 18630 18630 NT_STATUS_OK
Flush 11303 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11305 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11276 612 4096 4096 NT_STATUS_OK
ReadX 11276 564 4096 4096 NT_STATUS_OK
ReadX 11276 1876 4096 4096 NT_STATUS_OK
ReadX 11276 628 4096 4096 NT_STATUS_OK
ReadX 11276 740 4096 4096 NT_STATUS_OK
ReadX 11276 724 4096 4096 NT_STATUS_OK
ReadX 11276 644 4096 4096 NT_STATUS_OK
ReadX 11276 2324 4096 4096 NT_STATUS_OK
ReadX 11276 660 4096 4096 NT_STATUS_OK
ReadX 11276 852 4096 4096 NT_STATUS_OK
ReadX 11276 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11276 2368 4096 4096 NT_STATUS_OK
ReadX 11276 1024 4096 4096 NT_STATUS_OK
ReadX 11276 320 4096 4096 NT_STATUS_OK
ReadX 11276 580 4096 4096 NT_STATUS_OK
ReadX 11276 3136 512 512 NT_STATUS_OK
ReadX 11276 2880 4096 4096 NT_STATUS_OK
Close 11276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 61440 4096 4096 NT_STATUS_OK
ReadX 11308 126976 4096 4096 NT_STATUS_OK
WriteX 11308 0 65536 65536 NT_STATUS_OK
WriteX 11308 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 61440 4096 4096 NT_STATUS_OK
ReadX 11309 126976 4096 4096 NT_STATUS_OK
ReadX 11309 192512 4096 4096 NT_STATUS_OK
ReadX 11309 258048 4096 4096 NT_STATUS_OK
WriteX 11309 0 65536 65536 NT_STATUS_OK
WriteX 11309 65536 65536 65536 NT_STATUS_OK
WriteX 11309 131072 65536 65536 NT_STATUS_OK
WriteX 11309 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 61440 4096 4096 NT_STATUS_OK
ReadX 11310 126976 4096 4096 NT_STATUS_OK
ReadX 11310 192512 4096 4096 NT_STATUS_OK
ReadX 11310 258048 4096 4096 NT_STATUS_OK
ReadX 11310 323584 4096 4096 NT_STATUS_OK
ReadX 11310 389120 4096 4096 NT_STATUS_OK
ReadX 11310 454656 4096 4096 NT_STATUS_OK
ReadX 11310 520192 4096 4096 NT_STATUS_OK
WriteX 11310 0 65536 65536 NT_STATUS_OK
WriteX 11310 65536 65536 65536 NT_STATUS_OK
WriteX 11310 131072 65536 65536 NT_STATUS_OK
WriteX 11310 196608 65536 65536 NT_STATUS_OK
WriteX 11310 262144 65536 65536 NT_STATUS_OK
WriteX 11310 327680 65536 65536 NT_STATUS_OK
WriteX 11310 393216 65536 65536 NT_STATUS_OK
WriteX 11310 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11312 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11313 NT_STATUS_OK
WriteX 11313 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11313 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11311 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Close 11309 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11318 NT_STATUS_OK
WriteX 11318 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 62591 62591 NT_STATUS_OK
Close 11318 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11323 NT_STATUS_OK
WriteX 11323 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11323 258 NT_STATUS_OK
WriteX 11323 0 10845 10845 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11328 NT_STATUS_OK
WriteX 11328 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11328 258 NT_STATUS_OK
WriteX 11328 0 30118 30118 NT_STATUS_OK
Close 11328 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
WriteX 11313 0 64 64 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 61440 61440 NT_STATUS_OK
ReadX 11330 61440 4096 4096 NT_STATUS_OK
ReadX 11330 65536 61440 61440 NT_STATUS_OK
ReadX 11330 126976 4096 4096 NT_STATUS_OK
ReadX 11330 131072 61440 61440 NT_STATUS_OK
ReadX 11330 192512 4096 4096 NT_STATUS_OK
ReadX 11330 196608 61440 61440 NT_STATUS_OK
ReadX 11330 258048 4096 4096 NT_STATUS_OK
ReadX 11330 262144 61440 61440 NT_STATUS_OK
ReadX 11330 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 61440 61440 NT_STATUS_OK
ReadX 11331 61440 4096 4096 NT_STATUS_OK
ReadX 11331 65536 61440 61440 NT_STATUS_OK
ReadX 11331 126976 4096 4096 NT_STATUS_OK
ReadX 11331 131072 61440 61440 NT_STATUS_OK
ReadX 11331 192512 4096 4096 NT_STATUS_OK
ReadX 11331 196608 61440 61440 NT_STATUS_OK
ReadX 11331 258048 4096 4096 NT_STATUS_OK
ReadX 11331 262144 61440 61440 NT_STATUS_OK
ReadX 11331 323584 4096 4096 NT_STATUS_OK
ReadX 11331 327680 61440 61440 NT_STATUS_OK
ReadX 11331 389120 4096 4096 NT_STATUS_OK
ReadX 11331 393216 61440 61440 NT_STATUS_OK
ReadX 11331 454656 4096 4096 NT_STATUS_OK
ReadX 11331 458752 61440 61440 NT_STATUS_OK
ReadX 11331 520192 4096 4096 NT_STATUS_OK
ReadX 11331 524288 61440 61440 NT_STATUS_OK
ReadX 11331 585728 4096 4096 NT_STATUS_OK
ReadX 11331 589824 61440 61440 NT_STATUS_OK
ReadX 11331 651264 4096 4096 NT_STATUS_OK
ReadX 11331 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 61440 61440 NT_STATUS_OK
ReadX 11332 61440 4096 4096 NT_STATUS_OK
ReadX 11332 65536 61440 61440 NT_STATUS_OK
ReadX 11332 126976 4096 4096 NT_STATUS_OK
ReadX 11332 131072 61440 61440 NT_STATUS_OK
ReadX 11332 192512 4096 4096 NT_STATUS_OK
ReadX 11332 196608 61440 61440 NT_STATUS_OK
ReadX 11332 258048 4096 4096 NT_STATUS_OK
ReadX 11332 262144 61440 61440 NT_STATUS_OK
ReadX 11332 323584 4096 4096 NT_STATUS_OK
ReadX 11332 327680 61440 61440 NT_STATUS_OK
ReadX 11332 389120 4096 4096 NT_STATUS_OK
ReadX 11332 393216 61440 61440 NT_STATUS_OK
ReadX 11332 454656 4096 4096 NT_STATUS_OK
ReadX 11332 458752 61440 61440 NT_STATUS_OK
ReadX 11332 520192 4096 4096 NT_STATUS_OK
ReadX 11332 524288 61440 61440 NT_STATUS_OK
ReadX 11332 585728 4096 4096 NT_STATUS_OK
ReadX 11332 589824 61440 61440 NT_STATUS_OK
ReadX 11332 651264 4096 4096 NT_STATUS_OK
ReadX 11332 655360 61440 61440 NT_STATUS_OK
ReadX 11332 716800 4096 4096 NT_STATUS_OK
ReadX 11332 720896 61440 61440 NT_STATUS_OK
ReadX 11332 782336 4096 4096 NT_STATUS_OK
ReadX 11332 786432 61440 61440 NT_STATUS_OK
ReadX 11332 847872 4096 4096 NT_STATUS_OK
ReadX 11332 851968 61440 61440 NT_STATUS_OK
ReadX 11332 913408 4096 4096 NT_STATUS_OK
ReadX 11332 917504 61440 61440 NT_STATUS_OK
ReadX 11332 978944 4096 4096 NT_STATUS_OK
ReadX 11332 983040 61440 61440 NT_STATUS_OK
ReadX 11332 1044480 4096 4096 NT_STATUS_OK
ReadX 11332 1048576 61440 61440 NT_STATUS_OK
ReadX 11332 1110016 4096 4096 NT_STATUS_OK
ReadX 11332 1114112 61440 61440 NT_STATUS_OK
ReadX 11332 1175552 4096 4096 NT_STATUS_OK
ReadX 11332 1179648 61440 61440 NT_STATUS_OK
ReadX 11332 1241088 4096 4096 NT_STATUS_OK
ReadX 11332 1245184 61440 61440 NT_STATUS_OK
ReadX 11332 1306624 4096 4096 NT_STATUS_OK
ReadX 11332 1310720 61440 61440 NT_STATUS_OK
ReadX 11332 1372160 4096 4096 NT_STATUS_OK
ReadX 11332 1376256 61440 61440 NT_STATUS_OK
ReadX 11332 1437696 4096 4096 NT_STATUS_OK
ReadX 11332 1441792 61440 61440 NT_STATUS_OK
ReadX 11332 1503232 4096 4096 NT_STATUS_OK
ReadX 11332 1507328 61440 61440 NT_STATUS_OK
ReadX 11332 1568768 4096 4096 NT_STATUS_OK
ReadX 11332 1572864 61440 61440 NT_STATUS_OK
ReadX 11332 1634304 4096 4096 NT_STATUS_OK
ReadX 11332 1638400 61440 61440 NT_STATUS_OK
ReadX 11332 1699840 4096 4096 NT_STATUS_OK
ReadX 11332 1703936 61440 61440 NT_STATUS_OK
ReadX 11332 1765376 4096 4096 NT_STATUS_OK
ReadX 11332 1769472 61440 61440 NT_STATUS_OK
ReadX 11332 1830912 4096 4096 NT_STATUS_OK
ReadX 11332 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11337 NT_STATUS_OK
ReadX 11337 0 4096 4096 NT_STATUS_OK
ReadX 11337 4096 4096 4096 NT_STATUS_OK
ReadX 11337 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11341 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 8192 8192 NT_STATUS_OK
ReadX 11345 8192 8192 8192 NT_STATUS_OK
ReadX 11345 16384 8192 8192 NT_STATUS_OK
ReadX 11345 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11350 NT_STATUS_OK
WriteX 11350 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11350 258 NT_STATUS_OK
WriteX 11350 0 10438 10438 NT_STATUS_OK
Close 11350 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11354 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11355 NT_STATUS_OK
Close 11355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11356 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11358 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
ReadX 11359 4096 4096 4096 NT_STATUS_OK
ReadX 11359 8192 4096 4096 NT_STATUS_OK
ReadX 11359 12288 8192 8192 NT_STATUS_OK
ReadX 11359 20480 8192 8192 NT_STATUS_OK
ReadX 11359 28672 8192 8192 NT_STATUS_OK
ReadX 11359 36864 8192 8192 NT_STATUS_OK
ReadX 11359 45056 8192 8192 NT_STATUS_OK
ReadX 11359 53248 8192 8192 NT_STATUS_OK
ReadX 11359 61440 8192 8192 NT_STATUS_OK
ReadX 11359 69632 8192 8192 NT_STATUS_OK
ReadX 11359 77824 8192 8192 NT_STATUS_OK
ReadX 11359 86016 8192 8192 NT_STATUS_OK
ReadX 11359 94208 8192 8192 NT_STATUS_OK
ReadX 11359 102400 8192 8192 NT_STATUS_OK
ReadX 11359 110592 8192 8192 NT_STATUS_OK
ReadX 11359 118784 8192 8192 NT_STATUS_OK
ReadX 11359 126976 8192 8192 NT_STATUS_OK
ReadX 11359 135168 8192 8192 NT_STATUS_OK
ReadX 11359 143360 8192 8192 NT_STATUS_OK
ReadX 11359 151552 8192 8192 NT_STATUS_OK
ReadX 11359 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11361 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11364 NT_STATUS_OK
WriteX 11364 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 258 NT_STATUS_OK
WriteX 11364 0 28489 28489 NT_STATUS_OK
Close 11364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11365 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11367 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 8192 8192 NT_STATUS_OK
ReadX 11371 8192 8192 8192 NT_STATUS_OK
ReadX 11371 16384 8192 8192 NT_STATUS_OK
ReadX 11371 24576 8192 8192 NT_STATUS_OK
ReadX 11371 32768 16384 16384 NT_STATUS_OK
ReadX 11371 49152 8192 8192 NT_STATUS_OK
ReadX 11371 57344 8192 8192 NT_STATUS_OK
ReadX 11371 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11376 NT_STATUS_OK
WriteX 11376 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 258 NT_STATUS_OK
WriteX 11376 0 29253 29253 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11377 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11383 NT_STATUS_OK
WriteX 11383 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11383 258 NT_STATUS_OK
WriteX 11383 0 30183 30183 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11384 NT_STATUS_OK
Close 11384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11386 NT_STATUS_OK
WriteX 11386 0 510 510 NT_STATUS_OK
WriteX 11386 510 512 512 NT_STATUS_OK
WriteX 11386 1022 510 510 NT_STATUS_OK
WriteX 11386 1532 510 510 NT_STATUS_OK
WriteX 11386 2042 168 168 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 61440 4096 4096 NT_STATUS_OK
ReadX 11390 126976 4096 4096 NT_STATUS_OK
WriteX 11390 0 65536 65536 NT_STATUS_OK
WriteX 11390 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 61440 4096 4096 NT_STATUS_OK
ReadX 11391 126976 4096 4096 NT_STATUS_OK
ReadX 11391 192512 4096 4096 NT_STATUS_OK
ReadX 11391 258048 4096 4096 NT_STATUS_OK
WriteX 11391 0 65536 65536 NT_STATUS_OK
WriteX 11391 65536 65536 65536 NT_STATUS_OK
WriteX 11391 131072 65536 65536 NT_STATUS_OK
WriteX 11391 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 61440 4096 4096 NT_STATUS_OK
ReadX 11392 126976 4096 4096 NT_STATUS_OK
ReadX 11392 192512 4096 4096 NT_STATUS_OK
ReadX 11392 258048 4096 4096 NT_STATUS_OK
ReadX 11392 323584 4096 4096 NT_STATUS_OK
ReadX 11392 389120 4096 4096 NT_STATUS_OK
ReadX 11392 454656 4096 4096 NT_STATUS_OK
ReadX 11392 520192 4096 4096 NT_STATUS_OK
WriteX 11392 0 65536 65536 NT_STATUS_OK
WriteX 11392 65536 65536 65536 NT_STATUS_OK
WriteX 11392 131072 65536 65536 NT_STATUS_OK
WriteX 11392 196608 65536 65536 NT_STATUS_OK
WriteX 11392 262144 65536 65536 NT_STATUS_OK
WriteX 11392 327680 65536 65536 NT_STATUS_OK
WriteX 11392 393216 65536 65536 NT_STATUS_OK
WriteX 11392 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11395 NT_STATUS_OK
Close 11395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11399 NT_STATUS_OK
Close 11399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11408 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11411 NT_STATUS_OK
Close 11411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11417 NT_STATUS_OK
Close 11417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11437 NT_STATUS_OK
Close 11437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11442 NT_STATUS_OK
Close 11442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11447 NT_STATUS_OK
Close 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11452 NT_STATUS_OK
Close 11452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11455 NT_STATUS_OK
Close 11455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11458 NT_STATUS_OK
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11461 NT_STATUS_OK
WriteX 11461 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11461 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11461 0 65536 65536 NT_STATUS_OK
WriteX 11461 65536 65536 65536 NT_STATUS_OK
WriteX 11461 131072 65536 65536 NT_STATUS_OK
WriteX 11461 196608 65536 65536 NT_STATUS_OK
WriteX 11461 262144 26634 26634 NT_STATUS_OK
Close 11461 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11466 NT_STATUS_OK
Close 11466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11468 NT_STATUS_OK
ReadX 11468 0 4096 4096 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
ReadX 11469 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11477 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11483 NT_STATUS_OK
Close 11483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11486 NT_STATUS_OK
Close 11486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11492 NT_STATUS_OK
Close 11492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11526 NT_STATUS_OK
Close 11526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11531 NT_STATUS_OK
Close 11531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11536 NT_STATUS_OK
Close 11536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
Close 11548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
Close 11549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11560 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11562 NT_STATUS_OK
ReadX 11562 0 4096 4096 NT_STATUS_OK
Close 11562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
Close 11563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11593 0 4096 4096 NT_STATUS_OK
Close 11593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
ReadX 11595 4096 4096 4096 NT_STATUS_OK
ReadX 11595 8192 4096 4096 NT_STATUS_OK
ReadX 11595 12288 4096 4096 NT_STATUS_OK
ReadX 11595 16384 4096 4096 NT_STATUS_OK
ReadX 11595 20480 4096 4096 NT_STATUS_OK
ReadX 11595 24576 4096 4096 NT_STATUS_OK
ReadX 11595 28672 4096 4096 NT_STATUS_OK
ReadX 11595 32768 4096 4096 NT_STATUS_OK
ReadX 11595 36864 4096 4096 NT_STATUS_OK
ReadX 11595 40960 4096 4096 NT_STATUS_OK
ReadX 11595 45056 4096 4096 NT_STATUS_OK
ReadX 11595 49152 4096 4096 NT_STATUS_OK
ReadX 11595 53248 4096 4096 NT_STATUS_OK
ReadX 11595 57344 4096 4096 NT_STATUS_OK
ReadX 11595 61440 4096 4096 NT_STATUS_OK
ReadX 11595 65536 4096 4096 NT_STATUS_OK
ReadX 11595 69632 4096 4096 NT_STATUS_OK
ReadX 11595 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11595 1004 NT_STATUS_OK
WriteX 11595 0 4096 4096 NT_STATUS_OK
Close 11595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11596 NT_STATUS_OK
SET_FILE_INFORMATION 11596 1004 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11601 NT_STATUS_OK
WriteX 11601 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11601 258 NT_STATUS_OK
WriteX 11601 0 65536 65536 NT_STATUS_OK
WriteX 11601 65536 19979 19979 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
QUERY_FILE_INFORMATION 11602 1004 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
SET_FILE_INFORMATION 11602 1004 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
Close 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11607 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11608 NT_STATUS_OK
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11613 NT_STATUS_OK
WriteX 11613 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11613 258 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 17654 17654 NT_STATUS_OK
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
QUERY_FILE_INFORMATION 11614 1004 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
SET_FILE_INFORMATION 11614 1004 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11615 NT_STATUS_OK
SET_FILE_INFORMATION 11615 1004 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 0 4096 4096 NT_STATUS_OK
ReadX 11619 4096 4096 4096 NT_STATUS_OK
ReadX 11619 8192 4096 4096 NT_STATUS_OK
ReadX 11619 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11619 16384 4096 4096 NT_STATUS_OK
ReadX 11619 20480 4096 4096 NT_STATUS_OK
ReadX 11619 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 0 4096 4096 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11622 1004 NT_STATUS_OK
WriteX 11622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11628 NT_STATUS_OK
WriteX 11628 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 65536 65536 NT_STATUS_OK
WriteX 11628 65536 19490 19490 NT_STATUS_OK
Close 11628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
QUERY_FILE_INFORMATION 11629 1004 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11630 NT_STATUS_OK
SET_FILE_INFORMATION 11630 1004 NT_STATUS_OK
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11632 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11634 0 4096 4096 NT_STATUS_OK
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11635 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
ReadX 11636 4096 4096 4096 NT_STATUS_OK
ReadX 11636 8192 4096 4096 NT_STATUS_OK
ReadX 11636 12288 4096 4096 NT_STATUS_OK
ReadX 11636 16384 4096 4096 NT_STATUS_OK
ReadX 11636 20480 4096 4096 NT_STATUS_OK
ReadX 11636 24576 4096 4096 NT_STATUS_OK
ReadX 11636 28672 4096 4096 NT_STATUS_OK
ReadX 11636 32768 4096 4096 NT_STATUS_OK
ReadX 11636 36864 4096 4096 NT_STATUS_OK
ReadX 11636 40960 4096 4096 NT_STATUS_OK
ReadX 11636 45056 4096 4096 NT_STATUS_OK
ReadX 11636 49152 4096 4096 NT_STATUS_OK
ReadX 11636 53248 4096 4096 NT_STATUS_OK
ReadX 11636 57344 4096 4096 NT_STATUS_OK
ReadX 11636 61440 4096 4096 NT_STATUS_OK
ReadX 11636 65536 4096 4096 NT_STATUS_OK
ReadX 11636 69632 4096 4096 NT_STATUS_OK
ReadX 11636 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
WriteX 11636 0 4096 4096 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11637 NT_STATUS_OK
SET_FILE_INFORMATION 11637 1004 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11642 NT_STATUS_OK
WriteX 11642 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 65536 65536 NT_STATUS_OK
WriteX 11642 65536 8866 8866 NT_STATUS_OK
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
WriteX 11643 0 4096 4096 NT_STATUS_OK
Flush 11643 NT_STATUS_OK
SET_FILE_INFORMATION 11643 1004 NT_STATUS_OK
WriteX 11643 0 4096 4096 NT_STATUS_OK
Flush 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11647 1004 NT_STATUS_OK
WriteX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11648 NT_STATUS_OK
Close 11648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11653 NT_STATUS_OK
WriteX 11653 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11653 258 NT_STATUS_OK
WriteX 11653 0 65536 65536 NT_STATUS_OK
WriteX 11653 65536 9298 9298 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
Flush 11654 NT_STATUS_OK
SET_FILE_INFORMATION 11654 1004 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
Flush 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11655 NT_STATUS_OK
SET_FILE_INFORMATION 11655 1004 NT_STATUS_OK
Close 11655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11660 0 4096 4096 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11661 4096 4096 4096 NT_STATUS_OK
ReadX 11661 8192 4096 4096 NT_STATUS_OK
ReadX 11661 12288 4096 4096 NT_STATUS_OK
ReadX 11661 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 4096 4096 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11664 1004 NT_STATUS_OK
WriteX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11670 NT_STATUS_OK
WriteX 11670 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11670 258 NT_STATUS_OK
WriteX 11670 0 65536 65536 NT_STATUS_OK
WriteX 11670 65536 11540 11540 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
WriteX 11671 0 4096 4096 NT_STATUS_OK
Flush 11671 NT_STATUS_OK
SET_FILE_INFORMATION 11671 1004 NT_STATUS_OK
WriteX 11671 0 4096 4096 NT_STATUS_OK
Flush 11671 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11672 NT_STATUS_OK
SET_FILE_INFORMATION 11672 1004 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11674 NT_STATUS_OK
Close 11674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 61440 4096 4096 NT_STATUS_OK
ReadX 11676 126976 4096 4096 NT_STATUS_OK
WriteX 11676 0 65536 65536 NT_STATUS_OK
WriteX 11676 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 61440 4096 4096 NT_STATUS_OK
ReadX 11677 126976 4096 4096 NT_STATUS_OK
ReadX 11677 192512 4096 4096 NT_STATUS_OK
ReadX 11677 258048 4096 4096 NT_STATUS_OK
WriteX 11677 0 65536 65536 NT_STATUS_OK
WriteX 11677 65536 65536 65536 NT_STATUS_OK
WriteX 11677 131072 65536 65536 NT_STATUS_OK
WriteX 11677 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 61440 4096 4096 NT_STATUS_OK
ReadX 11678 126976 4096 4096 NT_STATUS_OK
ReadX 11678 192512 4096 4096 NT_STATUS_OK
ReadX 11678 258048 4096 4096 NT_STATUS_OK
ReadX 11678 323584 4096 4096 NT_STATUS_OK
ReadX 11678 389120 4096 4096 NT_STATUS_OK
ReadX 11678 454656 4096 4096 NT_STATUS_OK
ReadX 11678 520192 4096 4096 NT_STATUS_OK
WriteX 11678 0 65536 65536 NT_STATUS_OK
WriteX 11678 65536 65536 65536 NT_STATUS_OK
WriteX 11678 131072 65536 65536 NT_STATUS_OK
WriteX 11678 196608 65536 65536 NT_STATUS_OK
WriteX 11678 262144 65536 65536 NT_STATUS_OK
WriteX 11678 327680 65536 65536 NT_STATUS_OK
WriteX 11678 393216 65536 65536 NT_STATUS_OK
WriteX 11678 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 4096 4096 NT_STATUS_OK
ReadX 11679 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11680 NT_STATUS_OK
WriteX 11680 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
WriteX 11680 0 53 53 NT_STATUS_OK
Close 11680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11673 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11679 8192 4096 4096 NT_STATUS_OK
ReadX 11679 12288 4096 4096 NT_STATUS_OK
WriteX 11683 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11683 258 NT_STATUS_OK
ReadX 11679 16384 4096 4096 NT_STATUS_OK
ReadX 11679 20480 4096 4096 NT_STATUS_OK
WriteX 11683 0 15360 15360 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11684 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11684 1004 NT_STATUS_OK
WriteX 11684 0 4096 4096 NT_STATUS_OK
Close 11684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11687 4096 4096 4096 NT_STATUS_OK
ReadX 11687 8192 4096 4096 NT_STATUS_OK
ReadX 11687 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
ReadX 11690 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
ReadX 11691 4096 4096 4096 NT_STATUS_OK
ReadX 11691 8192 4096 4096 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11692 NT_STATUS_OK
WriteX 11692 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 15360 15360 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11693 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11693 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11697 NT_STATUS_OK
SET_FILE_INFORMATION 11697 1004 NT_STATUS_OK
Close 11697 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
Close 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11698 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
ReadX 11700 4096 4096 4096 NT_STATUS_OK
ReadX 11700 8192 4096 4096 NT_STATUS_OK
ReadX 11700 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11702 NT_STATUS_OK
WriteX 11702 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11702 258 NT_STATUS_OK
WriteX 11702 0 53 53 NT_STATUS_OK
Close 11702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11701 4096 4096 4096 NT_STATUS_OK
ReadX 11701 8192 4096 4096 NT_STATUS_OK
ReadX 11701 12288 4096 4096 NT_STATUS_OK
WriteX 11705 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 258 NT_STATUS_OK
WriteX 11705 0 12006 12006 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11706 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11706 1004 NT_STATUS_OK
WriteX 11706 0 4096 4096 NT_STATUS_OK
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11709 4096 4096 4096 NT_STATUS_OK
ReadX 11709 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11712 NT_STATUS_OK
WriteX 11712 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11712 258 NT_STATUS_OK
WriteX 11712 0 11991 11991 NT_STATUS_OK
Close 11712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11713 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11713 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11714 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11717 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
Close 11717 NT_STATUS_OK
WriteX 11713 0 4096 4096 NT_STATUS_OK
Close 11713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11718 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11720 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
ReadX 11720 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
WriteX 11720 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
Close 11696 NT_STATUS_OK
WriteX 11700 0 19054 19054 NT_STATUS_OK
WriteX 11720 0 12288 12288 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11725 NT_STATUS_OK
Close 11725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 61440 61440 NT_STATUS_OK
ReadX 11727 61440 4096 4096 NT_STATUS_OK
ReadX 11727 65536 61440 61440 NT_STATUS_OK
ReadX 11727 126976 4096 4096 NT_STATUS_OK
ReadX 11727 131072 61440 61440 NT_STATUS_OK
ReadX 11727 192512 4096 4096 NT_STATUS_OK
ReadX 11727 196608 61440 61440 NT_STATUS_OK
ReadX 11727 258048 4096 4096 NT_STATUS_OK
ReadX 11727 262144 61440 61440 NT_STATUS_OK
ReadX 11727 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 61440 61440 NT_STATUS_OK
ReadX 11728 61440 4096 4096 NT_STATUS_OK
ReadX 11728 65536 61440 61440 NT_STATUS_OK
ReadX 11728 126976 4096 4096 NT_STATUS_OK
ReadX 11728 131072 61440 61440 NT_STATUS_OK
ReadX 11728 192512 4096 4096 NT_STATUS_OK
ReadX 11728 196608 61440 61440 NT_STATUS_OK
ReadX 11728 258048 4096 4096 NT_STATUS_OK
ReadX 11728 262144 61440 61440 NT_STATUS_OK
ReadX 11728 323584 4096 4096 NT_STATUS_OK
ReadX 11728 327680 61440 61440 NT_STATUS_OK
ReadX 11728 389120 4096 4096 NT_STATUS_OK
ReadX 11728 393216 61440 61440 NT_STATUS_OK
ReadX 11728 454656 4096 4096 NT_STATUS_OK
ReadX 11728 458752 61440 61440 NT_STATUS_OK
ReadX 11728 520192 4096 4096 NT_STATUS_OK
ReadX 11728 524288 61440 61440 NT_STATUS_OK
ReadX 11728 585728 4096 4096 NT_STATUS_OK
ReadX 11728 589824 61440 61440 NT_STATUS_OK
ReadX 11728 651264 4096 4096 NT_STATUS_OK
ReadX 11728 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11729 NT_STATUS_OK
ReadX 11729 0 61440 61440 NT_STATUS_OK
ReadX 11729 61440 4096 4096 NT_STATUS_OK
ReadX 11729 65536 61440 61440 NT_STATUS_OK
ReadX 11729 126976 4096 4096 NT_STATUS_OK
ReadX 11729 131072 61440 61440 NT_STATUS_OK
ReadX 11729 192512 4096 4096 NT_STATUS_OK
ReadX 11729 196608 61440 61440 NT_STATUS_OK
ReadX 11729 258048 4096 4096 NT_STATUS_OK
ReadX 11729 262144 61440 61440 NT_STATUS_OK
ReadX 11729 323584 4096 4096 NT_STATUS_OK
ReadX 11729 327680 61440 61440 NT_STATUS_OK
ReadX 11729 389120 4096 4096 NT_STATUS_OK
ReadX 11729 393216 61440 61440 NT_STATUS_OK
ReadX 11729 454656 4096 4096 NT_STATUS_OK
ReadX 11729 458752 61440 61440 NT_STATUS_OK
ReadX 11729 520192 4096 4096 NT_STATUS_OK
ReadX 11729 524288 61440 61440 NT_STATUS_OK
ReadX 11729 585728 4096 4096 NT_STATUS_OK
ReadX 11729 589824 61440 61440 NT_STATUS_OK
ReadX 11729 651264 4096 4096 NT_STATUS_OK
ReadX 11729 655360 61440 61440 NT_STATUS_OK
ReadX 11729 716800 4096 4096 NT_STATUS_OK
ReadX 11729 720896 61440 61440 NT_STATUS_OK
ReadX 11729 782336 4096 4096 NT_STATUS_OK
ReadX 11729 786432 61440 61440 NT_STATUS_OK
ReadX 11729 847872 4096 4096 NT_STATUS_OK
ReadX 11729 851968 61440 61440 NT_STATUS_OK
ReadX 11729 913408 4096 4096 NT_STATUS_OK
ReadX 11729 917504 61440 61440 NT_STATUS_OK
ReadX 11729 978944 4096 4096 NT_STATUS_OK
ReadX 11729 983040 61440 61440 NT_STATUS_OK
ReadX 11729 1044480 4096 4096 NT_STATUS_OK
ReadX 11729 1048576 61440 61440 NT_STATUS_OK
ReadX 11729 1110016 4096 4096 NT_STATUS_OK
ReadX 11729 1114112 61440 61440 NT_STATUS_OK
ReadX 11729 1175552 4096 4096 NT_STATUS_OK
ReadX 11729 1179648 61440 61440 NT_STATUS_OK
ReadX 11729 1241088 4096 4096 NT_STATUS_OK
ReadX 11729 1245184 61440 61440 NT_STATUS_OK
ReadX 11729 1306624 4096 4096 NT_STATUS_OK
ReadX 11729 1310720 61440 61440 NT_STATUS_OK
ReadX 11729 1372160 4096 4096 NT_STATUS_OK
ReadX 11729 1376256 61440 61440 NT_STATUS_OK
ReadX 11729 1437696 4096 4096 NT_STATUS_OK
ReadX 11729 1441792 61440 61440 NT_STATUS_OK
ReadX 11729 1503232 4096 4096 NT_STATUS_OK
ReadX 11729 1507328 61440 61440 NT_STATUS_OK
ReadX 11729 1568768 4096 4096 NT_STATUS_OK
ReadX 11729 1572864 61440 61440 NT_STATUS_OK
ReadX 11729 1634304 4096 4096 NT_STATUS_OK
ReadX 11729 1638400 61440 61440 NT_STATUS_OK
ReadX 11729 1699840 4096 4096 NT_STATUS_OK
ReadX 11729 1703936 61440 61440 NT_STATUS_OK
ReadX 11729 1765376 4096 4096 NT_STATUS_OK
ReadX 11729 1769472 61440 61440 NT_STATUS_OK
ReadX 11729 1830912 4096 4096 NT_STATUS_OK
ReadX 11729 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11736 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 1004 NT_STATUS_OK
WriteX 11736 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11737 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11738 NT_STATUS_OK
WriteX 11738 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11738 258 NT_STATUS_OK
WriteX 11738 0 491 491 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11736 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11741 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11742 NT_STATUS_OK
WriteX 11742 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11742 258 NT_STATUS_OK
WriteX 11742 0 543 543 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11747 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11756 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 1004 NT_STATUS_OK
WriteX 11756 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 258 NT_STATUS_OK
WriteX 11756 0 2048 2048 NT_STATUS_OK
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
Flush 11757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11762 NT_STATUS_OK
WriteX 11762 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11762 258 NT_STATUS_OK
WriteX 11762 0 2048 2048 NT_STATUS_OK
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11767 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11768 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
ReadX 11747 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
WriteX 11747 0 8192 8192 NT_STATUS_OK
WriteX 11748 0 4096 4096 NT_STATUS_OK
WriteX 11749 0 4096 4096 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11773 NT_STATUS_OK
QUERY_FILE_INFORMATION 11773 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11793 NT_STATUS_OK
QUERY_FILE_INFORMATION 11793 1004 NT_STATUS_OK
WriteX 11793 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11793 258 NT_STATUS_OK
WriteX 11793 0 2048 2048 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11801 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 1004 NT_STATUS_OK
WriteX 11801 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 258 NT_STATUS_OK
WriteX 11801 0 2048 2048 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11802 NT_STATUS_OK
ReadX 11802 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11794 0 4096 4096 NT_STATUS_OK
Flush 11794 NT_STATUS_OK
WriteX 11802 0 4096 4096 NT_STATUS_OK
Flush 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11794 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11802 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11796 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11804 NT_STATUS_OK
WriteX 11804 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
WriteX 11804 0 4096 4096 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11807 NT_STATUS_OK
WriteX 11807 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11807 258 NT_STATUS_OK
WriteX 11807 0 4096 4096 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11808 0 4096 4096 NT_STATUS_OK
Close 11805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11776 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11811 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11815 NT_STATUS_OK
WriteX 11815 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11815 258 NT_STATUS_OK
WriteX 11815 0 2048 2048 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11830 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11813 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11824 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11832 NT_STATUS_OK
QUERY_FILE_INFORMATION 11832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11838 NT_STATUS_OK
ReadX 11838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11842 NT_STATUS_OK
ReadX 11842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11844 NT_STATUS_OK
ReadX 11844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11852 NT_STATUS_OK
QUERY_FILE_INFORMATION 11852 1004 NT_STATUS_OK
WriteX 11852 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11852 258 NT_STATUS_OK
WriteX 11852 0 2048 2048 NT_STATUS_OK
Close 11852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11864 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 1004 NT_STATUS_OK
WriteX 11864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
WriteX 11864 0 2048 2048 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11872 NT_STATUS_OK
QUERY_FILE_INFORMATION 11872 1004 NT_STATUS_OK
WriteX 11872 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11872 258 NT_STATUS_OK
WriteX 11872 0 2048 2048 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
Flush 11853 NT_STATUS_OK
WriteX 11865 0 4096 4096 NT_STATUS_OK
Flush 11865 NT_STATUS_OK
WriteX 11873 0 4096 4096 NT_STATUS_OK
Flush 11873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11865 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11873 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11855 4096 16384 16384 NT_STATUS_OK
ReadX 11835 4096 16384 16384 NT_STATUS_OK
ReadX 11867 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 2048 2048 NT_STATUS_OK
WriteX 11875 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11876 NT_STATUS_OK
QUERY_FILE_INFORMATION 11876 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11847 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11846 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Close 11844 NT_STATUS_OK
Close 11845 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11878 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11883 4096 16384 16384 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11885 0 4096 4096 NT_STATUS_OK
WriteX 11886 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 8192 8192 NT_STATUS_OK
ReadX 11889 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11903 0 4096 4096 NT_STATUS_OK
ReadX 11903 4096 4096 4096 NT_STATUS_OK
ReadX 11903 8192 4096 4096 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
WriteX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
ReadX 11904 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11885 0 4096 4096 NT_STATUS_OK
WriteX 11886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11909 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 1004 NT_STATUS_OK
WriteX 11909 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 258 NT_STATUS_OK
WriteX 11909 0 2048 2048 NT_STATUS_OK
Close 11909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11910 NT_STATUS_OK
ReadX 11910 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11910 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11910 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
ReadX 11912 4096 4096 4096 NT_STATUS_OK
WriteX 11912 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11910 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 4096 4096 NT_STATUS_OK
ReadX 11914 4096 4096 4096 NT_STATUS_OK
WriteX 11914 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11915 NT_STATUS_OK
QUERY_FILE_INFORMATION 11915 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11917 0 4096 4096 NT_STATUS_OK
ReadX 11917 4096 4096 4096 NT_STATUS_OK
ReadX 11917 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
ReadX 11918 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11935 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 1004 NT_STATUS_OK
WriteX 11935 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 258 NT_STATUS_OK
WriteX 11935 0 2048 2048 NT_STATUS_OK
Close 11935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11941 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 1004 NT_STATUS_OK
WriteX 11941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 258 NT_STATUS_OK
WriteX 11941 0 2048 2048 NT_STATUS_OK
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11942 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11925 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11943 NT_STATUS_OK
QUERY_FILE_INFORMATION 11943 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11922 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Close 11920 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Close 11928 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11945 NT_STATUS_OK
QUERY_FILE_INFORMATION 11945 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 61440 4096 4096 NT_STATUS_OK
ReadX 11947 126976 4096 4096 NT_STATUS_OK
WriteX 11947 0 65536 65536 NT_STATUS_OK
WriteX 11947 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 61440 4096 4096 NT_STATUS_OK
ReadX 11948 126976 4096 4096 NT_STATUS_OK
ReadX 11948 192512 4096 4096 NT_STATUS_OK
ReadX 11948 258048 4096 4096 NT_STATUS_OK
WriteX 11948 0 65536 65536 NT_STATUS_OK
WriteX 11948 65536 65536 65536 NT_STATUS_OK
WriteX 11948 131072 65536 65536 NT_STATUS_OK
WriteX 11948 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 61440 4096 4096 NT_STATUS_OK
ReadX 11949 126976 4096 4096 NT_STATUS_OK
ReadX 11949 192512 4096 4096 NT_STATUS_OK
ReadX 11949 258048 4096 4096 NT_STATUS_OK
ReadX 11949 323584 4096 4096 NT_STATUS_OK
ReadX 11949 389120 4096 4096 NT_STATUS_OK
ReadX 11949 454656 4096 4096 NT_STATUS_OK
ReadX 11949 520192 4096 4096 NT_STATUS_OK
WriteX 11949 0 65536 65536 NT_STATUS_OK
WriteX 11949 65536 65536 65536 NT_STATUS_OK
WriteX 11949 131072 65536 65536 NT_STATUS_OK
WriteX 11949 196608 65536 65536 NT_STATUS_OK
WriteX 11949 262144 65536 65536 NT_STATUS_OK
WriteX 11949 327680 65536 65536 NT_STATUS_OK
WriteX 11949 393216 65536 65536 NT_STATUS_OK
WriteX 11949 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11950 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11950 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11950 8192 4096 4096 NT_STATUS_OK
ReadX 11950 12288 4096 4096 NT_STATUS_OK
ReadX 11950 16384 4096 4096 NT_STATUS_OK
ReadX 11950 20480 4096 4096 NT_STATUS_OK
ReadX 11950 24576 4096 4096 NT_STATUS_OK
ReadX 11950 28672 4096 4096 NT_STATUS_OK
ReadX 11950 32768 4096 4096 NT_STATUS_OK
ReadX 11950 36864 4096 4096 NT_STATUS_OK
ReadX 11950 40960 4096 4096 NT_STATUS_OK
ReadX 11950 45056 4096 4096 NT_STATUS_OK
ReadX 11950 49152 4096 4096 NT_STATUS_OK
ReadX 11950 53248 4096 4096 NT_STATUS_OK
ReadX 11950 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11950 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11953 NT_STATUS_OK
WriteX 11953 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11953 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 57088 57088 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Flush 11953 NT_STATUS_OK
Close 11950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11954 NT_STATUS_OK
SET_FILE_INFORMATION 11954 1004 NT_STATUS_OK
Close 11954 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11957 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11958 NT_STATUS_OK
WriteX 11958 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11958 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
WriteX 11958 0 51456 51456 NT_STATUS_OK
WriteX 11958 0 4096 4096 NT_STATUS_OK
Flush 11958 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
WriteX 11958 0 4096 4096 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11962 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11967 NT_STATUS_OK
WriteX 11967 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11967 258 NT_STATUS_OK
WriteX 11967 0 53077 53077 NT_STATUS_OK
Close 11967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11968 NT_STATUS_OK
WriteX 11968 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 0 65536 65536 NT_STATUS_OK
WriteX 11968 65536 1856 1856 NT_STATUS_OK
WriteX 11968 0 4096 4096 NT_STATUS_OK
Flush 11968 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 0 4096 4096 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11970 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11977 NT_STATUS_OK
WriteX 11977 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11977 258 NT_STATUS_OK
WriteX 11977 0 7983 7983 NT_STATUS_OK
Close 11977 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11979 NT_STATUS_OK
Close 11979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11982 NT_STATUS_OK
WriteX 11982 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11982 258 NT_STATUS_OK
WriteX 11982 0 65536 65536 NT_STATUS_OK
WriteX 11982 65536 65536 65536 NT_STATUS_OK
WriteX 11982 131072 65536 65536 NT_STATUS_OK
WriteX 11982 196608 65536 65536 NT_STATUS_OK
WriteX 11982 262144 65536 65536 NT_STATUS_OK
WriteX 11982 327680 65536 65536 NT_STATUS_OK
WriteX 11982 393216 65536 65536 NT_STATUS_OK
WriteX 11982 458752 46731 46731 NT_STATUS_OK
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11983 NT_STATUS_OK
WriteX 11983 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11983 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11972 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
WriteX 11983 0 65536 65536 NT_STATUS_OK
WriteX 11983 65536 22848 22848 NT_STATUS_OK
WriteX 11983 0 4096 4096 NT_STATUS_OK
Flush 11983 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
WriteX 11983 0 4096 4096 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11987 NT_STATUS_OK
ReadX 11987 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11987 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11988 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
ReadX 11988 8192 4096 4096 NT_STATUS_OK
ReadX 11988 12288 4096 4096 NT_STATUS_OK
ReadX 11988 16384 4096 4096 NT_STATUS_OK
ReadX 11988 20480 4096 4096 NT_STATUS_OK
ReadX 11988 24576 4096 4096 NT_STATUS_OK
ReadX 11988 28672 4096 4096 NT_STATUS_OK
ReadX 11988 32768 4096 4096 NT_STATUS_OK
ReadX 11988 36864 4096 4096 NT_STATUS_OK
ReadX 11988 40960 4096 4096 NT_STATUS_OK
ReadX 11988 45056 4096 4096 NT_STATUS_OK
ReadX 11988 49152 4096 4096 NT_STATUS_OK
ReadX 11988 53248 4096 4096 NT_STATUS_OK
ReadX 11988 57344 4096 4096 NT_STATUS_OK
ReadX 11988 61440 4096 4096 NT_STATUS_OK
ReadX 11988 65536 4096 4096 NT_STATUS_OK
ReadX 11988 69632 4096 4096 NT_STATUS_OK
ReadX 11988 73728 4096 4096 NT_STATUS_OK
ReadX 11988 77824 4096 4096 NT_STATUS_OK
ReadX 11988 81920 4096 4096 NT_STATUS_OK
ReadX 11988 86016 4096 4096 NT_STATUS_OK
ReadX 11988 90112 4096 4096 NT_STATUS_OK
ReadX 11988 94208 4096 4096 NT_STATUS_OK
ReadX 11988 98304 4096 4096 NT_STATUS_OK
ReadX 11988 102400 4096 4096 NT_STATUS_OK
ReadX 11988 106496 4096 4096 NT_STATUS_OK
ReadX 11988 110592 4096 4096 NT_STATUS_OK
ReadX 11988 114688 4096 4096 NT_STATUS_OK
ReadX 11988 118784 4096 4096 NT_STATUS_OK
ReadX 11988 122880 4096 4096 NT_STATUS_OK
ReadX 11988 126976 4096 4096 NT_STATUS_OK
ReadX 11988 131072 4096 4096 NT_STATUS_OK
ReadX 11988 135168 4096 4096 NT_STATUS_OK
ReadX 11988 139264 4096 4096 NT_STATUS_OK
ReadX 11988 143360 4096 4096 NT_STATUS_OK
ReadX 11988 147456 4096 4096 NT_STATUS_OK
ReadX 11988 151552 4096 4096 NT_STATUS_OK
ReadX 11988 155648 4096 4096 NT_STATUS_OK
ReadX 11988 159744 4096 4096 NT_STATUS_OK
ReadX 11988 163840 4096 4096 NT_STATUS_OK
ReadX 11988 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11988 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11991 NT_STATUS_OK
WriteX 11991 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11991 258 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11992 NT_STATUS_OK
SET_FILE_INFORMATION 11992 1004 NT_STATUS_OK
Close 11992 NT_STATUS_OK
WriteX 11991 0 42388 42388 NT_STATUS_OK
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
ReadX 11995 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11996 NT_STATUS_OK
WriteX 11996 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11996 258 NT_STATUS_OK
SET_FILE_INFORMATION 11996 1004 NT_STATUS_OK
WriteX 11996 0 42652 42652 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11998 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
ReadX 12000 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12005 NT_STATUS_OK
WriteX 12005 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 258 NT_STATUS_OK
WriteX 12005 0 65536 65536 NT_STATUS_OK
WriteX 12005 65536 49 49 NT_STATUS_OK
Close 12005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 61440 61440 NT_STATUS_OK
ReadX 12006 61440 4096 4096 NT_STATUS_OK
ReadX 12006 65536 61440 61440 NT_STATUS_OK
ReadX 12006 126976 4096 4096 NT_STATUS_OK
ReadX 12006 131072 61440 61440 NT_STATUS_OK
ReadX 12006 192512 4096 4096 NT_STATUS_OK
ReadX 12006 196608 61440 61440 NT_STATUS_OK
ReadX 12006 258048 4096 4096 NT_STATUS_OK
ReadX 12006 262144 61440 61440 NT_STATUS_OK
ReadX 12006 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 61440 61440 NT_STATUS_OK
ReadX 12007 61440 4096 4096 NT_STATUS_OK
ReadX 12007 65536 61440 61440 NT_STATUS_OK
ReadX 12007 126976 4096 4096 NT_STATUS_OK
ReadX 12007 131072 61440 61440 NT_STATUS_OK
ReadX 12007 192512 4096 4096 NT_STATUS_OK
ReadX 12007 196608 61440 61440 NT_STATUS_OK
ReadX 12007 258048 4096 4096 NT_STATUS_OK
ReadX 12007 262144 61440 61440 NT_STATUS_OK
ReadX 12007 323584 4096 4096 NT_STATUS_OK
ReadX 12007 327680 61440 61440 NT_STATUS_OK
ReadX 12007 389120 4096 4096 NT_STATUS_OK
ReadX 12007 393216 61440 61440 NT_STATUS_OK
ReadX 12007 454656 4096 4096 NT_STATUS_OK
ReadX 12007 458752 61440 61440 NT_STATUS_OK
ReadX 12007 520192 4096 4096 NT_STATUS_OK
ReadX 12007 524288 61440 61440 NT_STATUS_OK
ReadX 12007 585728 4096 4096 NT_STATUS_OK
ReadX 12007 589824 61440 61440 NT_STATUS_OK
ReadX 12007 651264 4096 4096 NT_STATUS_OK
ReadX 12007 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 61440 61440 NT_STATUS_OK
ReadX 12008 61440 4096 4096 NT_STATUS_OK
ReadX 12008 65536 61440 61440 NT_STATUS_OK
ReadX 12008 126976 4096 4096 NT_STATUS_OK
ReadX 12008 131072 61440 61440 NT_STATUS_OK
ReadX 12008 192512 4096 4096 NT_STATUS_OK
ReadX 12008 196608 61440 61440 NT_STATUS_OK
ReadX 12008 258048 4096 4096 NT_STATUS_OK
ReadX 12008 262144 61440 61440 NT_STATUS_OK
ReadX 12008 323584 4096 4096 NT_STATUS_OK
ReadX 12008 327680 61440 61440 NT_STATUS_OK
ReadX 12008 389120 4096 4096 NT_STATUS_OK
ReadX 12008 393216 61440 61440 NT_STATUS_OK
ReadX 12008 454656 4096 4096 NT_STATUS_OK
ReadX 12008 458752 61440 61440 NT_STATUS_OK
ReadX 12008 520192 4096 4096 NT_STATUS_OK
ReadX 12008 524288 61440 61440 NT_STATUS_OK
ReadX 12008 585728 4096 4096 NT_STATUS_OK
ReadX 12008 589824 61440 61440 NT_STATUS_OK
ReadX 12008 651264 4096 4096 NT_STATUS_OK
ReadX 12008 655360 61440 61440 NT_STATUS_OK
ReadX 12008 716800 4096 4096 NT_STATUS_OK
ReadX 12008 720896 61440 61440 NT_STATUS_OK
ReadX 12008 782336 4096 4096 NT_STATUS_OK
ReadX 12008 786432 61440 61440 NT_STATUS_OK
ReadX 12008 847872 4096 4096 NT_STATUS_OK
ReadX 12008 851968 61440 61440 NT_STATUS_OK
ReadX 12008 913408 4096 4096 NT_STATUS_OK
ReadX 12008 917504 61440 61440 NT_STATUS_OK
ReadX 12008 978944 4096 4096 NT_STATUS_OK
ReadX 12008 983040 61440 61440 NT_STATUS_OK
ReadX 12008 1044480 4096 4096 NT_STATUS_OK
ReadX 12008 1048576 61440 61440 NT_STATUS_OK
ReadX 12008 1110016 4096 4096 NT_STATUS_OK
ReadX 12008 1114112 61440 61440 NT_STATUS_OK
ReadX 12008 1175552 4096 4096 NT_STATUS_OK
ReadX 12008 1179648 61440 61440 NT_STATUS_OK
ReadX 12008 1241088 4096 4096 NT_STATUS_OK
ReadX 12008 1245184 61440 61440 NT_STATUS_OK
ReadX 12008 1306624 4096 4096 NT_STATUS_OK
ReadX 12008 1310720 61440 61440 NT_STATUS_OK
ReadX 12008 1372160 4096 4096 NT_STATUS_OK
ReadX 12008 1376256 61440 61440 NT_STATUS_OK
ReadX 12008 1437696 4096 4096 NT_STATUS_OK
ReadX 12008 1441792 61440 61440 NT_STATUS_OK
ReadX 12008 1503232 4096 4096 NT_STATUS_OK
ReadX 12008 1507328 61440 61440 NT_STATUS_OK
ReadX 12008 1568768 4096 4096 NT_STATUS_OK
ReadX 12008 1572864 61440 61440 NT_STATUS_OK
ReadX 12008 1634304 4096 4096 NT_STATUS_OK
ReadX 12008 1638400 61440 61440 NT_STATUS_OK
ReadX 12008 1699840 4096 4096 NT_STATUS_OK
ReadX 12008 1703936 61440 61440 NT_STATUS_OK
ReadX 12008 1765376 4096 4096 NT_STATUS_OK
ReadX 12008 1769472 61440 61440 NT_STATUS_OK
Close 12006 NT_STATUS_OK
ReadX 12008 1830912 4096 4096 NT_STATUS_OK
Close 12000 NT_STATUS_OK
ReadX 12008 1835008 32768 32768 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12010 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
ReadX 12010 2156 24 24 NT_STATUS_OK
ReadX 12010 2139 276 276 NT_STATUS_OK
ReadX 12010 2136 14 14 NT_STATUS_OK
ReadX 12010 2136 7 7 NT_STATUS_OK
ReadX 12010 2138 12 12 NT_STATUS_OK
ReadX 12010 2137 8 8 NT_STATUS_OK
ReadX 12010 2135 15 15 NT_STATUS_OK
ReadX 12010 0 16 16 NT_STATUS_OK
ReadX 12010 16 2048 2048 NT_STATUS_OK
ReadX 12010 2064 2048 2048 NT_STATUS_OK
ReadX 12010 257 2048 2048 NT_STATUS_OK
ReadX 12010 385 2048 2048 NT_STATUS_OK
ReadX 12010 513 2048 2048 NT_STATUS_OK
ReadX 12010 641 2048 2048 NT_STATUS_OK
ReadX 12010 769 2048 2048 NT_STATUS_OK
ReadX 12010 897 2048 2048 NT_STATUS_OK
ReadX 12010 1025 2048 2048 NT_STATUS_OK
ReadX 12010 1153 2048 2048 NT_STATUS_OK
ReadX 12010 1281 2048 2048 NT_STATUS_OK
ReadX 12010 1409 2048 2048 NT_STATUS_OK
ReadX 12010 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12012 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12015 NT_STATUS_OK
WriteX 12015 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12015 258 NT_STATUS_OK
WriteX 12015 0 10575 10575 NT_STATUS_OK
Flush 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12016 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
Close 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12020 NT_STATUS_OK
LockX 12020 2147483538 1 NT_STATUS_OK
UnlockX 12020 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 1005 NT_STATUS_OK
ReadX 12020 0 512 512 NT_STATUS_OK
ReadX 12020 512 512 512 NT_STATUS_OK
ReadX 12020 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 1004 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12021 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1005 NT_STATUS_OK
ReadX 12021 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12022 NT_STATUS_OK
LockX 12022 2147483538 1 NT_STATUS_OK
UnlockX 12022 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 1005 NT_STATUS_OK
ReadX 12022 0 512 512 NT_STATUS_OK
ReadX 12022 512 512 512 NT_STATUS_OK
ReadX 12022 1024 512 512 NT_STATUS_OK
ReadX 12022 288 20 20 NT_STATUS_OK
ReadX 12022 308 2084 2084 NT_STATUS_OK
ReadX 12022 388 2084 2084 NT_STATUS_OK
ReadX 12022 388 2084 2084 NT_STATUS_OK
ReadX 12009 2157 1386 1386 NT_STATUS_OK
ReadX 12022 2472 399 399 NT_STATUS_OK
ReadX 12022 3072 1536 1536 NT_STATUS_OK
ReadX 12022 544 149 149 NT_STATUS_OK
ReadX 12022 693 485 485 NT_STATUS_OK
Close 12022 NT_STATUS_OK
ReadX 12009 2157 4096 4096 NT_STATUS_OK
ReadX 12009 6253 4096 4096 NT_STATUS_OK
ReadX 12009 10349 4096 4096 NT_STATUS_OK
ReadX 12009 14445 4096 4096 NT_STATUS_OK
ReadX 12009 18541 4096 4096 NT_STATUS_OK
ReadX 12009 22637 256 256 NT_STATUS_OK
ReadX 12009 22893 4096 4096 NT_STATUS_OK
ReadX 12009 26989 4096 4096 NT_STATUS_OK
ReadX 12009 31085 4096 4096 NT_STATUS_OK
ReadX 12009 35181 4096 4096 NT_STATUS_OK
ReadX 12009 39277 4096 4096 NT_STATUS_OK
ReadX 12009 43373 4096 4096 NT_STATUS_OK
ReadX 12009 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12009 2157 1024 1024 NT_STATUS_OK
ReadX 12009 1667 4688 4688 NT_STATUS_OK
ReadX 12009 6355 3516 3516 NT_STATUS_OK
ReadX 12009 9871 16384 16384 NT_STATUS_OK
ReadX 12009 26255 3771 3771 NT_STATUS_OK
ReadX 12009 30026 2048 2048 NT_STATUS_OK
ReadX 12009 32074 1024 1024 NT_STATUS_OK
ReadX 12009 33098 6652 6652 NT_STATUS_OK
ReadX 12009 39750 16384 16384 NT_STATUS_OK
ReadX 12009 56134 10496 10496 NT_STATUS_OK
ReadX 12009 66630 1784 1784 NT_STATUS_OK
ReadX 12009 68414 90 90 NT_STATUS_OK
ReadX 12009 68504 273 273 NT_STATUS_OK
ReadX 12009 68777 1600 1600 NT_STATUS_OK
ReadX 12009 70377 640 640 NT_STATUS_OK
ReadX 12009 71017 1280 1280 NT_STATUS_OK
ReadX 12009 72297 8464 8464 NT_STATUS_OK
ReadX 12009 80761 158 158 NT_STATUS_OK
ReadX 12009 80919 912 912 NT_STATUS_OK
ReadX 12009 81831 1980 1980 NT_STATUS_OK
ReadX 12009 83811 2256 2256 NT_STATUS_OK
ReadX 12009 86067 400 400 NT_STATUS_OK
ReadX 12009 86467 252 252 NT_STATUS_OK
ReadX 12009 86719 42 42 NT_STATUS_OK
ReadX 12009 86761 725 725 NT_STATUS_OK
ReadX 12009 2009 512 512 NT_STATUS_OK
ReadX 12009 3895 9 9 NT_STATUS_OK
ReadX 12009 3781 46 46 NT_STATUS_OK
ReadX 12009 4059 92 92 NT_STATUS_OK
ReadX 12009 3781 92 92 NT_STATUS_OK
ReadX 12009 3986 184 184 NT_STATUS_OK
ReadX 12009 3987 16384 16384 NT_STATUS_OK
ReadX 12009 3902 16384 16384 NT_STATUS_OK
ReadX 12009 3781 10240 10240 NT_STATUS_OK
ReadX 12009 3821 16384 16384 NT_STATUS_OK
ReadX 12009 3891 935 935 NT_STATUS_OK
ReadX 12009 4060 10240 10240 NT_STATUS_OK
ReadX 12009 4059 184 184 NT_STATUS_OK
ReadX 12009 256 184 184 NT_STATUS_OK
ReadX 12009 256 1026 1026 NT_STATUS_OK
ReadX 12009 3901 326 326 NT_STATUS_OK
ReadX 12009 3899 652 652 NT_STATUS_OK
ReadX 12009 256 2 2 NT_STATUS_OK
ReadX 12009 258 4948 4948 NT_STATUS_OK
Close 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12027 NT_STATUS_OK
WriteX 12027 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 258 NT_STATUS_OK
WriteX 12027 0 65536 65536 NT_STATUS_OK
WriteX 12027 65536 65536 65536 NT_STATUS_OK
WriteX 12027 131072 65536 65536 NT_STATUS_OK
WriteX 12027 196608 65536 65536 NT_STATUS_OK
WriteX 12027 262144 65536 65536 NT_STATUS_OK
WriteX 12027 327680 65536 65536 NT_STATUS_OK
WriteX 12027 393216 65536 65536 NT_STATUS_OK
WriteX 12027 458752 65536 65536 NT_STATUS_OK
WriteX 12027 524288 65536 65536 NT_STATUS_OK
WriteX 12027 589824 35257 35257 NT_STATUS_OK
Close 12027 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12032 NT_STATUS_OK
WriteX 12032 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12032 258 NT_STATUS_OK
WriteX 12032 0 65536 65536 NT_STATUS_OK
WriteX 12032 65536 65536 65536 NT_STATUS_OK
WriteX 12032 131072 65536 65536 NT_STATUS_OK
WriteX 12032 196608 65536 65536 NT_STATUS_OK
WriteX 12032 262144 65536 65536 NT_STATUS_OK
WriteX 12032 327680 65536 65536 NT_STATUS_OK
WriteX 12032 393216 65536 65536 NT_STATUS_OK
WriteX 12032 458752 65536 65536 NT_STATUS_OK
WriteX 12032 524288 65536 65536 NT_STATUS_OK
WriteX 12032 589824 57598 57598 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12034 NT_STATUS_OK
WriteX 12034 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12034 258 NT_STATUS_OK
WriteX 12034 0 12543 12543 NT_STATUS_OK
Flush 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12038 NT_STATUS_OK
ReadX 12038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12040 NT_STATUS_OK
QUERY_FILE_INFORMATION 12040 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12040 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12040 1005 NT_STATUS_OK
ReadX 12040 1938 24 24 NT_STATUS_OK
ReadX 12040 1920 276 276 NT_STATUS_OK
ReadX 12040 1918 14 14 NT_STATUS_OK
ReadX 12040 1918 7 7 NT_STATUS_OK
ReadX 12040 1919 12 12 NT_STATUS_OK
ReadX 12040 1919 8 8 NT_STATUS_OK
ReadX 12040 1917 15 15 NT_STATUS_OK
ReadX 12040 0 16 16 NT_STATUS_OK
ReadX 12040 16 2048 2048 NT_STATUS_OK
ReadX 12040 2064 2048 2048 NT_STATUS_OK
ReadX 12040 257 2048 2048 NT_STATUS_OK
ReadX 12040 385 2048 2048 NT_STATUS_OK
ReadX 12040 513 2048 2048 NT_STATUS_OK
ReadX 12040 641 2048 2048 NT_STATUS_OK
ReadX 12040 769 2048 2048 NT_STATUS_OK
ReadX 12040 897 2048 2048 NT_STATUS_OK
ReadX 12040 1025 2048 2048 NT_STATUS_OK
ReadX 12040 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12045 NT_STATUS_OK
WriteX 12045 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12045 258 NT_STATUS_OK
WriteX 12045 0 11588 11588 NT_STATUS_OK
Flush 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
Close 12040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12050 NT_STATUS_OK
WriteX 12050 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12050 258 NT_STATUS_OK
WriteX 12050 0 11615 11615 NT_STATUS_OK
Flush 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12056 NT_STATUS_OK
Close 12056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12059 NT_STATUS_OK
WriteX 12059 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12059 258 NT_STATUS_OK
WriteX 12059 0 65536 65536 NT_STATUS_OK
WriteX 12059 65536 16050 16050 NT_STATUS_OK
Close 12059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12039 1939 64 64 NT_STATUS_OK
ReadX 12039 128 248 248 NT_STATUS_OK
ReadX 12039 128 568 568 NT_STATUS_OK
ReadX 12039 3872 1536 1536 NT_STATUS_OK
ReadX 12039 3456 2560 2560 NT_STATUS_OK
ReadX 12039 3136 512 512 NT_STATUS_OK
ReadX 12039 2880 4096 4096 NT_STATUS_OK
ReadX 12039 3264 3072 3072 NT_STATUS_OK
ReadX 12039 320 4096 4096 NT_STATUS_OK
ReadX 12039 1024 4096 4096 NT_STATUS_OK
ReadX 12039 3616 4096 4096 NT_STATUS_OK
ReadX 12039 1939 64 64 NT_STATUS_OK
ReadX 12039 128 248 248 NT_STATUS_OK
ReadX 12039 128 608 608 NT_STATUS_OK
ReadX 12039 2858 1024 1024 NT_STATUS_OK
ReadX 12039 2810 4096 4096 NT_STATUS_OK
ReadX 12039 2826 4096 4096 NT_STATUS_OK
ReadX 12039 2580 2048 2048 NT_STATUS_OK
ReadX 12039 2800 2560 2560 NT_STATUS_OK
ReadX 12039 2100 4096 4096 NT_STATUS_OK
ReadX 12039 2084 4096 4096 NT_STATUS_OK
ReadX 12039 868 4096 4096 NT_STATUS_OK
ReadX 12039 2324 4096 4096 NT_STATUS_OK
ReadX 12039 884 4096 4096 NT_STATUS_OK
ReadX 12039 2604 1024 1024 NT_STATUS_OK
ReadX 12039 580 4096 4096 NT_STATUS_OK
ReadX 12039 596 4096 4096 NT_STATUS_OK
ReadX 12039 2752 4096 4096 NT_STATUS_OK
ReadX 12039 2842 1024 1024 NT_STATUS_OK
ReadX 12039 660 4096 4096 NT_STATUS_OK
ReadX 12039 2720 4096 4096 NT_STATUS_OK
ReadX 12039 2736 4096 4096 NT_STATUS_OK
ReadX 12039 628 4096 4096 NT_STATUS_OK
ReadX 12039 2704 4096 4096 NT_STATUS_OK
ReadX 12039 1556 4096 4096 NT_STATUS_OK
ReadX 12039 576 4096 4096 NT_STATUS_OK
ReadX 12039 3168 1536 1536 NT_STATUS_OK
ReadX 12039 832 4096 4096 NT_STATUS_OK
ReadX 12039 1088 4096 4096 NT_STATUS_OK
ReadX 12039 1344 4096 4096 NT_STATUS_OK
ReadX 12039 1600 4096 4096 NT_STATUS_OK
ReadX 12039 1856 4096 4096 NT_STATUS_OK
ReadX 12039 2112 4096 4096 NT_STATUS_OK
ReadX 12039 1892 4096 4096 NT_STATUS_OK
ReadX 12039 820 4096 4096 NT_STATUS_OK
ReadX 12039 788 4096 4096 NT_STATUS_OK
ReadX 12039 1604 4096 4096 NT_STATUS_OK
ReadX 12039 3648 4096 4096 NT_STATUS_OK
ReadX 12039 2608 4096 4096 NT_STATUS_OK
ReadX 12039 548 4096 4096 NT_STATUS_OK
ReadX 12039 740 4096 4096 NT_STATUS_OK
ReadX 12039 1344 4096 4096 NT_STATUS_OK
ReadX 12039 3392 4096 4096 NT_STATUS_OK
ReadX 12039 3904 4096 4096 NT_STATUS_OK
ReadX 12039 644 4096 4096 NT_STATUS_OK
ReadX 12039 676 4096 4096 NT_STATUS_OK
ReadX 12039 2688 4096 4096 NT_STATUS_OK
ReadX 12039 320 4096 4096 NT_STATUS_OK
ReadX 12039 900 4096 4096 NT_STATUS_OK
ReadX 12039 1908 4096 4096 NT_STATUS_OK
ReadX 12039 852 4096 4096 NT_STATUS_OK
ReadX 12039 724 4096 4096 NT_STATUS_OK
ReadX 12039 2292 4096 4096 NT_STATUS_OK
ReadX 12039 612 4096 4096 NT_STATUS_OK
ReadX 12039 388 4096 4096 NT_STATUS_OK
ReadX 12039 2368 4096 4096 NT_STATUS_OK
ReadX 12039 2624 4096 4096 NT_STATUS_OK
ReadX 12039 500 4096 4096 NT_STATUS_OK
ReadX 12039 356 4096 4096 NT_STATUS_OK
ReadX 12039 1024 4096 4096 NT_STATUS_OK
ReadX 12039 576 4096 4096 NT_STATUS_OK
ReadX 12039 340 4096 4096 NT_STATUS_OK
ReadX 12039 420 4096 4096 NT_STATUS_OK
ReadX 12039 1600 4096 4096 NT_STATUS_OK
ReadX 12039 404 4096 4096 NT_STATUS_OK
ReadX 12039 1428 4096 4096 NT_STATUS_OK
ReadX 12039 2656 4096 4096 NT_STATUS_OK
ReadX 12039 2624 4096 4096 NT_STATUS_OK
ReadX 12039 452 4096 4096 NT_STATUS_OK
ReadX 12039 692 4096 4096 NT_STATUS_OK
ReadX 12039 564 4096 4096 NT_STATUS_OK
ReadX 12039 372 4096 4096 NT_STATUS_OK
ReadX 12039 468 4096 4096 NT_STATUS_OK
ReadX 12039 484 4096 4096 NT_STATUS_OK
ReadX 12039 1088 4096 4096 NT_STATUS_OK
ReadX 12039 1924 4096 4096 NT_STATUS_OK
ReadX 12039 2768 4096 4096 NT_STATUS_OK
ReadX 12039 832 4096 4096 NT_STATUS_OK
ReadX 12039 836 4096 4096 NT_STATUS_OK
ReadX 12039 1856 4096 4096 NT_STATUS_OK
ReadX 12039 2640 4096 4096 NT_STATUS_OK
ReadX 12039 436 4096 4096 NT_STATUS_OK
ReadX 12039 1828 4096 4096 NT_STATUS_OK
ReadX 12039 804 4096 4096 NT_STATUS_OK
ReadX 12039 1860 4096 4096 NT_STATUS_OK
ReadX 12039 1812 4096 4096 NT_STATUS_OK
ReadX 12039 756 4096 4096 NT_STATUS_OK
ReadX 12039 1636 4096 4096 NT_STATUS_OK
ReadX 12039 772 4096 4096 NT_STATUS_OK
ReadX 12039 2036 4096 4096 NT_STATUS_OK
ReadX 12039 1220 4096 4096 NT_STATUS_OK
ReadX 12039 1652 4096 4096 NT_STATUS_OK
ReadX 12039 2588 4096 4096 NT_STATUS_OK
ReadX 12039 916 4096 4096 NT_STATUS_OK
ReadX 12039 260 4096 4096 NT_STATUS_OK
ReadX 12039 932 4096 4096 NT_STATUS_OK
ReadX 12039 2624 4096 4096 NT_STATUS_OK
ReadX 12039 308 4096 4096 NT_STATUS_OK
ReadX 12039 292 4096 4096 NT_STATUS_OK
ReadX 12039 1140 4096 4096 NT_STATUS_OK
ReadX 12039 276 4096 4096 NT_STATUS_OK
ReadX 12039 2020 4096 4096 NT_STATUS_OK
ReadX 12039 2880 4096 4096 NT_STATUS_OK
ReadX 12039 516 4096 4096 NT_STATUS_OK
ReadX 12039 1844 4096 4096 NT_STATUS_OK
ReadX 12039 1124 4096 4096 NT_STATUS_OK
ReadX 12039 3136 4096 4096 NT_STATUS_OK
ReadX 12039 324 4096 4096 NT_STATUS_OK
ReadX 12039 1156 4096 4096 NT_STATUS_OK
ReadX 12039 1172 4096 4096 NT_STATUS_OK
ReadX 12039 2112 4096 4096 NT_STATUS_OK
ReadX 12039 2368 4096 4096 NT_STATUS_OK
ReadX 12039 964 4096 4096 NT_STATUS_OK
ReadX 12039 980 4096 4096 NT_STATUS_OK
ReadX 12039 1012 4096 4096 NT_STATUS_OK
ReadX 12039 532 4096 4096 NT_STATUS_OK
ReadX 12039 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12039 1620 4096 4096 NT_STATUS_OK
ReadX 12039 1604 4096 4096 NT_STATUS_OK
ReadX 12039 2116 4096 4096 NT_STATUS_OK
ReadX 12039 2132 4096 4096 NT_STATUS_OK
ReadX 12039 2148 4096 4096 NT_STATUS_OK
ReadX 12039 2276 4096 4096 NT_STATUS_OK
ReadX 12039 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12061 NT_STATUS_OK
Close 12061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12019 1004 NT_STATUS_OK
Close 12019 NT_STATUS_OK
WriteX 12064 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1004 NT_STATUS_OK
Close 12021 NT_STATUS_OK
WriteX 12064 0 65536 65536 NT_STATUS_OK
WriteX 12064 65536 64850 64850 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12066 NT_STATUS_OK
WriteX 12066 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12066 258 NT_STATUS_OK
ReadX 12039 2068 4096 4096 NT_STATUS_OK
ReadX 12039 1588 4096 4096 NT_STATUS_OK
ReadX 12039 1572 4096 4096 NT_STATUS_OK
WriteX 12066 0 18630 18630 NT_STATUS_OK
Flush 12066 NT_STATUS_OK
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12039 612 4096 4096 NT_STATUS_OK
ReadX 12039 564 4096 4096 NT_STATUS_OK
ReadX 12039 1876 4096 4096 NT_STATUS_OK
ReadX 12039 628 4096 4096 NT_STATUS_OK
ReadX 12039 740 4096 4096 NT_STATUS_OK
ReadX 12039 724 4096 4096 NT_STATUS_OK
ReadX 12039 644 4096 4096 NT_STATUS_OK
ReadX 12039 2324 4096 4096 NT_STATUS_OK
ReadX 12039 660 4096 4096 NT_STATUS_OK
ReadX 12039 852 4096 4096 NT_STATUS_OK
ReadX 12039 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12039 2368 4096 4096 NT_STATUS_OK
ReadX 12039 1024 4096 4096 NT_STATUS_OK
ReadX 12039 320 4096 4096 NT_STATUS_OK
ReadX 12039 580 4096 4096 NT_STATUS_OK
ReadX 12039 3136 512 512 NT_STATUS_OK
ReadX 12039 2880 4096 4096 NT_STATUS_OK
Close 12039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 61440 4096 4096 NT_STATUS_OK
ReadX 12071 126976 4096 4096 NT_STATUS_OK
WriteX 12071 0 65536 65536 NT_STATUS_OK
WriteX 12071 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 61440 4096 4096 NT_STATUS_OK
ReadX 12072 126976 4096 4096 NT_STATUS_OK
ReadX 12072 192512 4096 4096 NT_STATUS_OK
ReadX 12072 258048 4096 4096 NT_STATUS_OK
WriteX 12072 0 65536 65536 NT_STATUS_OK
WriteX 12072 65536 65536 65536 NT_STATUS_OK
WriteX 12072 131072 65536 65536 NT_STATUS_OK
WriteX 12072 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 61440 4096 4096 NT_STATUS_OK
ReadX 12073 126976 4096 4096 NT_STATUS_OK
ReadX 12073 192512 4096 4096 NT_STATUS_OK
ReadX 12073 258048 4096 4096 NT_STATUS_OK
ReadX 12073 323584 4096 4096 NT_STATUS_OK
ReadX 12073 389120 4096 4096 NT_STATUS_OK
ReadX 12073 454656 4096 4096 NT_STATUS_OK
ReadX 12073 520192 4096 4096 NT_STATUS_OK
WriteX 12073 0 65536 65536 NT_STATUS_OK
WriteX 12073 65536 65536 65536 NT_STATUS_OK
WriteX 12073 131072 65536 65536 NT_STATUS_OK
WriteX 12073 196608 65536 65536 NT_STATUS_OK
WriteX 12073 262144 65536 65536 NT_STATUS_OK
WriteX 12073 327680 65536 65536 NT_STATUS_OK
WriteX 12073 393216 65536 65536 NT_STATUS_OK
WriteX 12073 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12075 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12076 NT_STATUS_OK
WriteX 12076 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12076 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12074 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Close 12072 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12081 NT_STATUS_OK
WriteX 12081 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 62591 62591 NT_STATUS_OK
Close 12081 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12086 NT_STATUS_OK
WriteX 12086 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12086 258 NT_STATUS_OK
WriteX 12086 0 10845 10845 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12091 NT_STATUS_OK
WriteX 12091 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12091 258 NT_STATUS_OK
WriteX 12091 0 30118 30118 NT_STATUS_OK
Close 12091 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
WriteX 12076 0 64 64 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 61440 61440 NT_STATUS_OK
ReadX 12093 61440 4096 4096 NT_STATUS_OK
ReadX 12093 65536 61440 61440 NT_STATUS_OK
ReadX 12093 126976 4096 4096 NT_STATUS_OK
ReadX 12093 131072 61440 61440 NT_STATUS_OK
ReadX 12093 192512 4096 4096 NT_STATUS_OK
ReadX 12093 196608 61440 61440 NT_STATUS_OK
ReadX 12093 258048 4096 4096 NT_STATUS_OK
ReadX 12093 262144 61440 61440 NT_STATUS_OK
ReadX 12093 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 61440 61440 NT_STATUS_OK
ReadX 12094 61440 4096 4096 NT_STATUS_OK
ReadX 12094 65536 61440 61440 NT_STATUS_OK
ReadX 12094 126976 4096 4096 NT_STATUS_OK
ReadX 12094 131072 61440 61440 NT_STATUS_OK
ReadX 12094 192512 4096 4096 NT_STATUS_OK
ReadX 12094 196608 61440 61440 NT_STATUS_OK
ReadX 12094 258048 4096 4096 NT_STATUS_OK
ReadX 12094 262144 61440 61440 NT_STATUS_OK
ReadX 12094 323584 4096 4096 NT_STATUS_OK
ReadX 12094 327680 61440 61440 NT_STATUS_OK
ReadX 12094 389120 4096 4096 NT_STATUS_OK
ReadX 12094 393216 61440 61440 NT_STATUS_OK
ReadX 12094 454656 4096 4096 NT_STATUS_OK
ReadX 12094 458752 61440 61440 NT_STATUS_OK
ReadX 12094 520192 4096 4096 NT_STATUS_OK
ReadX 12094 524288 61440 61440 NT_STATUS_OK
ReadX 12094 585728 4096 4096 NT_STATUS_OK
ReadX 12094 589824 61440 61440 NT_STATUS_OK
ReadX 12094 651264 4096 4096 NT_STATUS_OK
ReadX 12094 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 61440 61440 NT_STATUS_OK
ReadX 12095 61440 4096 4096 NT_STATUS_OK
ReadX 12095 65536 61440 61440 NT_STATUS_OK
ReadX 12095 126976 4096 4096 NT_STATUS_OK
ReadX 12095 131072 61440 61440 NT_STATUS_OK
ReadX 12095 192512 4096 4096 NT_STATUS_OK
ReadX 12095 196608 61440 61440 NT_STATUS_OK
ReadX 12095 258048 4096 4096 NT_STATUS_OK
ReadX 12095 262144 61440 61440 NT_STATUS_OK
ReadX 12095 323584 4096 4096 NT_STATUS_OK
ReadX 12095 327680 61440 61440 NT_STATUS_OK
ReadX 12095 389120 4096 4096 NT_STATUS_OK
ReadX 12095 393216 61440 61440 NT_STATUS_OK
ReadX 12095 454656 4096 4096 NT_STATUS_OK
ReadX 12095 458752 61440 61440 NT_STATUS_OK
ReadX 12095 520192 4096 4096 NT_STATUS_OK
ReadX 12095 524288 61440 61440 NT_STATUS_OK
ReadX 12095 585728 4096 4096 NT_STATUS_OK
ReadX 12095 589824 61440 61440 NT_STATUS_OK
ReadX 12095 651264 4096 4096 NT_STATUS_OK
ReadX 12095 655360 61440 61440 NT_STATUS_OK
ReadX 12095 716800 4096 4096 NT_STATUS_OK
ReadX 12095 720896 61440 61440 NT_STATUS_OK
ReadX 12095 782336 4096 4096 NT_STATUS_OK
ReadX 12095 786432 61440 61440 NT_STATUS_OK
ReadX 12095 847872 4096 4096 NT_STATUS_OK
ReadX 12095 851968 61440 61440 NT_STATUS_OK
ReadX 12095 913408 4096 4096 NT_STATUS_OK
ReadX 12095 917504 61440 61440 NT_STATUS_OK
ReadX 12095 978944 4096 4096 NT_STATUS_OK
ReadX 12095 983040 61440 61440 NT_STATUS_OK
ReadX 12095 1044480 4096 4096 NT_STATUS_OK
ReadX 12095 1048576 61440 61440 NT_STATUS_OK
ReadX 12095 1110016 4096 4096 NT_STATUS_OK
ReadX 12095 1114112 61440 61440 NT_STATUS_OK
ReadX 12095 1175552 4096 4096 NT_STATUS_OK
ReadX 12095 1179648 61440 61440 NT_STATUS_OK
ReadX 12095 1241088 4096 4096 NT_STATUS_OK
ReadX 12095 1245184 61440 61440 NT_STATUS_OK
ReadX 12095 1306624 4096 4096 NT_STATUS_OK
ReadX 12095 1310720 61440 61440 NT_STATUS_OK
ReadX 12095 1372160 4096 4096 NT_STATUS_OK
ReadX 12095 1376256 61440 61440 NT_STATUS_OK
ReadX 12095 1437696 4096 4096 NT_STATUS_OK
ReadX 12095 1441792 61440 61440 NT_STATUS_OK
ReadX 12095 1503232 4096 4096 NT_STATUS_OK
ReadX 12095 1507328 61440 61440 NT_STATUS_OK
ReadX 12095 1568768 4096 4096 NT_STATUS_OK
ReadX 12095 1572864 61440 61440 NT_STATUS_OK
ReadX 12095 1634304 4096 4096 NT_STATUS_OK
ReadX 12095 1638400 61440 61440 NT_STATUS_OK
ReadX 12095 1699840 4096 4096 NT_STATUS_OK
ReadX 12095 1703936 61440 61440 NT_STATUS_OK
ReadX 12095 1765376 4096 4096 NT_STATUS_OK
ReadX 12095 1769472 61440 61440 NT_STATUS_OK
ReadX 12095 1830912 4096 4096 NT_STATUS_OK
ReadX 12095 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12100 NT_STATUS_OK
ReadX 12100 0 4096 4096 NT_STATUS_OK
ReadX 12100 4096 4096 4096 NT_STATUS_OK
ReadX 12100 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12104 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 8192 8192 NT_STATUS_OK
ReadX 12108 8192 8192 8192 NT_STATUS_OK
ReadX 12108 16384 8192 8192 NT_STATUS_OK
ReadX 12108 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12113 NT_STATUS_OK
WriteX 12113 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12113 258 NT_STATUS_OK
WriteX 12113 0 10438 10438 NT_STATUS_OK
Close 12113 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12117 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12118 NT_STATUS_OK
Close 12118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12119 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12121 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
ReadX 12122 4096 4096 4096 NT_STATUS_OK
ReadX 12122 8192 4096 4096 NT_STATUS_OK
ReadX 12122 12288 8192 8192 NT_STATUS_OK
ReadX 12122 20480 8192 8192 NT_STATUS_OK
ReadX 12122 28672 8192 8192 NT_STATUS_OK
ReadX 12122 36864 8192 8192 NT_STATUS_OK
ReadX 12122 45056 8192 8192 NT_STATUS_OK
ReadX 12122 53248 8192 8192 NT_STATUS_OK
ReadX 12122 61440 8192 8192 NT_STATUS_OK
ReadX 12122 69632 8192 8192 NT_STATUS_OK
ReadX 12122 77824 8192 8192 NT_STATUS_OK
ReadX 12122 86016 8192 8192 NT_STATUS_OK
ReadX 12122 94208 8192 8192 NT_STATUS_OK
ReadX 12122 102400 8192 8192 NT_STATUS_OK
ReadX 12122 110592 8192 8192 NT_STATUS_OK
ReadX 12122 118784 8192 8192 NT_STATUS_OK
ReadX 12122 126976 8192 8192 NT_STATUS_OK
ReadX 12122 135168 8192 8192 NT_STATUS_OK
ReadX 12122 143360 8192 8192 NT_STATUS_OK
ReadX 12122 151552 8192 8192 NT_STATUS_OK
ReadX 12122 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12124 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12127 NT_STATUS_OK
WriteX 12127 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 258 NT_STATUS_OK
WriteX 12127 0 28489 28489 NT_STATUS_OK
Close 12127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12128 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12130 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 8192 8192 NT_STATUS_OK
ReadX 12134 8192 8192 8192 NT_STATUS_OK
ReadX 12134 16384 8192 8192 NT_STATUS_OK
ReadX 12134 24576 8192 8192 NT_STATUS_OK
ReadX 12134 32768 16384 16384 NT_STATUS_OK
ReadX 12134 49152 8192 8192 NT_STATUS_OK
ReadX 12134 57344 8192 8192 NT_STATUS_OK
ReadX 12134 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12139 NT_STATUS_OK
WriteX 12139 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 258 NT_STATUS_OK
WriteX 12139 0 29253 29253 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12140 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12146 NT_STATUS_OK
WriteX 12146 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12146 258 NT_STATUS_OK
WriteX 12146 0 30183 30183 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12147 NT_STATUS_OK
Close 12147 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12149 NT_STATUS_OK
WriteX 12149 0 510 510 NT_STATUS_OK
WriteX 12149 510 512 512 NT_STATUS_OK
WriteX 12149 1022 510 510 NT_STATUS_OK
WriteX 12149 1532 510 510 NT_STATUS_OK
WriteX 12149 2042 168 168 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 61440 4096 4096 NT_STATUS_OK
ReadX 12153 126976 4096 4096 NT_STATUS_OK
WriteX 12153 0 65536 65536 NT_STATUS_OK
WriteX 12153 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 61440 4096 4096 NT_STATUS_OK
ReadX 12154 126976 4096 4096 NT_STATUS_OK
ReadX 12154 192512 4096 4096 NT_STATUS_OK
ReadX 12154 258048 4096 4096 NT_STATUS_OK
WriteX 12154 0 65536 65536 NT_STATUS_OK
WriteX 12154 65536 65536 65536 NT_STATUS_OK
WriteX 12154 131072 65536 65536 NT_STATUS_OK
WriteX 12154 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 61440 4096 4096 NT_STATUS_OK
ReadX 12155 126976 4096 4096 NT_STATUS_OK
ReadX 12155 192512 4096 4096 NT_STATUS_OK
ReadX 12155 258048 4096 4096 NT_STATUS_OK
ReadX 12155 323584 4096 4096 NT_STATUS_OK
ReadX 12155 389120 4096 4096 NT_STATUS_OK
ReadX 12155 454656 4096 4096 NT_STATUS_OK
ReadX 12155 520192 4096 4096 NT_STATUS_OK
WriteX 12155 0 65536 65536 NT_STATUS_OK
WriteX 12155 65536 65536 65536 NT_STATUS_OK
WriteX 12155 131072 65536 65536 NT_STATUS_OK
WriteX 12155 196608 65536 65536 NT_STATUS_OK
WriteX 12155 262144 65536 65536 NT_STATUS_OK
WriteX 12155 327680 65536 65536 NT_STATUS_OK
WriteX 12155 393216 65536 65536 NT_STATUS_OK
WriteX 12155 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12158 NT_STATUS_OK
Close 12158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12162 NT_STATUS_OK
Close 12162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12171 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12174 NT_STATUS_OK
Close 12174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12180 NT_STATUS_OK
Close 12180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12200 NT_STATUS_OK
Close 12200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12205 NT_STATUS_OK
Close 12205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12210 NT_STATUS_OK
Close 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12218 NT_STATUS_OK
Close 12218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12221 NT_STATUS_OK
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12224 NT_STATUS_OK
WriteX 12224 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12224 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12224 0 65536 65536 NT_STATUS_OK
WriteX 12224 65536 65536 65536 NT_STATUS_OK
WriteX 12224 131072 65536 65536 NT_STATUS_OK
WriteX 12224 196608 65536 65536 NT_STATUS_OK
WriteX 12224 262144 26634 26634 NT_STATUS_OK
Close 12224 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12229 NT_STATUS_OK
Close 12229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12231 NT_STATUS_OK
ReadX 12231 0 4096 4096 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
ReadX 12232 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12240 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12246 NT_STATUS_OK
Close 12246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12249 NT_STATUS_OK
Close 12249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12255 NT_STATUS_OK
Close 12255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12289 NT_STATUS_OK
Close 12289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12294 NT_STATUS_OK
Close 12294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12299 NT_STATUS_OK
Close 12299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
Close 12311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
Close 12312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12323 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12324 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
Close 12325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
Close 12326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12356 0 4096 4096 NT_STATUS_OK
Close 12356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
ReadX 12358 4096 4096 4096 NT_STATUS_OK
ReadX 12358 8192 4096 4096 NT_STATUS_OK
ReadX 12358 12288 4096 4096 NT_STATUS_OK
ReadX 12358 16384 4096 4096 NT_STATUS_OK
ReadX 12358 20480 4096 4096 NT_STATUS_OK
ReadX 12358 24576 4096 4096 NT_STATUS_OK
ReadX 12358 28672 4096 4096 NT_STATUS_OK
ReadX 12358 32768 4096 4096 NT_STATUS_OK
ReadX 12358 36864 4096 4096 NT_STATUS_OK
ReadX 12358 40960 4096 4096 NT_STATUS_OK
ReadX 12358 45056 4096 4096 NT_STATUS_OK
ReadX 12358 49152 4096 4096 NT_STATUS_OK
ReadX 12358 53248 4096 4096 NT_STATUS_OK
ReadX 12358 57344 4096 4096 NT_STATUS_OK
ReadX 12358 61440 4096 4096 NT_STATUS_OK
ReadX 12358 65536 4096 4096 NT_STATUS_OK
ReadX 12358 69632 4096 4096 NT_STATUS_OK
ReadX 12358 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12358 1004 NT_STATUS_OK
WriteX 12358 0 4096 4096 NT_STATUS_OK
Close 12358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12359 NT_STATUS_OK
SET_FILE_INFORMATION 12359 1004 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12364 NT_STATUS_OK
WriteX 12364 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12364 258 NT_STATUS_OK
WriteX 12364 0 65536 65536 NT_STATUS_OK
WriteX 12364 65536 19979 19979 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
QUERY_FILE_INFORMATION 12365 1004 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
SET_FILE_INFORMATION 12365 1004 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
Close 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12370 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12371 NT_STATUS_OK
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12376 NT_STATUS_OK
WriteX 12376 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12376 258 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 17654 17654 NT_STATUS_OK
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
QUERY_FILE_INFORMATION 12377 1004 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
SET_FILE_INFORMATION 12377 1004 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12378 NT_STATUS_OK
SET_FILE_INFORMATION 12378 1004 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 0 4096 4096 NT_STATUS_OK
ReadX 12382 4096 4096 4096 NT_STATUS_OK
ReadX 12382 8192 4096 4096 NT_STATUS_OK
ReadX 12382 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12382 16384 4096 4096 NT_STATUS_OK
ReadX 12382 20480 4096 4096 NT_STATUS_OK
ReadX 12382 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 0 4096 4096 NT_STATUS_OK
Close 12383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 0 4096 4096 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12385 1004 NT_STATUS_OK
WriteX 12385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12391 NT_STATUS_OK
WriteX 12391 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 65536 65536 NT_STATUS_OK
WriteX 12391 65536 19490 19490 NT_STATUS_OK
Close 12391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
QUERY_FILE_INFORMATION 12392 1004 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12393 NT_STATUS_OK
SET_FILE_INFORMATION 12393 1004 NT_STATUS_OK
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12395 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12397 0 4096 4096 NT_STATUS_OK
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
ReadX 12399 4096 4096 4096 NT_STATUS_OK
ReadX 12399 8192 4096 4096 NT_STATUS_OK
ReadX 12399 12288 4096 4096 NT_STATUS_OK
ReadX 12399 16384 4096 4096 NT_STATUS_OK
ReadX 12399 20480 4096 4096 NT_STATUS_OK
ReadX 12399 24576 4096 4096 NT_STATUS_OK
ReadX 12399 28672 4096 4096 NT_STATUS_OK
ReadX 12399 32768 4096 4096 NT_STATUS_OK
ReadX 12399 36864 4096 4096 NT_STATUS_OK
ReadX 12399 40960 4096 4096 NT_STATUS_OK
ReadX 12399 45056 4096 4096 NT_STATUS_OK
ReadX 12399 49152 4096 4096 NT_STATUS_OK
ReadX 12399 53248 4096 4096 NT_STATUS_OK
ReadX 12399 57344 4096 4096 NT_STATUS_OK
ReadX 12399 61440 4096 4096 NT_STATUS_OK
ReadX 12399 65536 4096 4096 NT_STATUS_OK
ReadX 12399 69632 4096 4096 NT_STATUS_OK
ReadX 12399 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
WriteX 12399 0 4096 4096 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12400 NT_STATUS_OK
SET_FILE_INFORMATION 12400 1004 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12405 NT_STATUS_OK
WriteX 12405 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
WriteX 12405 0 65536 65536 NT_STATUS_OK
WriteX 12405 65536 8866 8866 NT_STATUS_OK
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
WriteX 12406 0 4096 4096 NT_STATUS_OK
Flush 12406 NT_STATUS_OK
SET_FILE_INFORMATION 12406 1004 NT_STATUS_OK
WriteX 12406 0 4096 4096 NT_STATUS_OK
Flush 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
Close 12408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12410 1004 NT_STATUS_OK
WriteX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12411 NT_STATUS_OK
Close 12411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12416 NT_STATUS_OK
WriteX 12416 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12416 258 NT_STATUS_OK
WriteX 12416 0 65536 65536 NT_STATUS_OK
WriteX 12416 65536 9298 9298 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
Flush 12417 NT_STATUS_OK
SET_FILE_INFORMATION 12417 1004 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
Flush 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12418 NT_STATUS_OK
SET_FILE_INFORMATION 12418 1004 NT_STATUS_OK
Close 12418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12423 0 4096 4096 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12424 4096 4096 4096 NT_STATUS_OK
ReadX 12424 8192 4096 4096 NT_STATUS_OK
ReadX 12424 12288 4096 4096 NT_STATUS_OK
ReadX 12424 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 4096 4096 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12427 1004 NT_STATUS_OK
WriteX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12433 NT_STATUS_OK
WriteX 12433 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12433 258 NT_STATUS_OK
WriteX 12433 0 65536 65536 NT_STATUS_OK
WriteX 12433 65536 11540 11540 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
WriteX 12434 0 4096 4096 NT_STATUS_OK
Flush 12434 NT_STATUS_OK
SET_FILE_INFORMATION 12434 1004 NT_STATUS_OK
WriteX 12434 0 4096 4096 NT_STATUS_OK
Flush 12434 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12435 NT_STATUS_OK
SET_FILE_INFORMATION 12435 1004 NT_STATUS_OK
Close 12435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12437 NT_STATUS_OK
Close 12437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 61440 4096 4096 NT_STATUS_OK
ReadX 12439 126976 4096 4096 NT_STATUS_OK
WriteX 12439 0 65536 65536 NT_STATUS_OK
WriteX 12439 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 61440 4096 4096 NT_STATUS_OK
ReadX 12440 126976 4096 4096 NT_STATUS_OK
ReadX 12440 192512 4096 4096 NT_STATUS_OK
ReadX 12440 258048 4096 4096 NT_STATUS_OK
WriteX 12440 0 65536 65536 NT_STATUS_OK
WriteX 12440 65536 65536 65536 NT_STATUS_OK
WriteX 12440 131072 65536 65536 NT_STATUS_OK
WriteX 12440 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 61440 4096 4096 NT_STATUS_OK
ReadX 12441 126976 4096 4096 NT_STATUS_OK
ReadX 12441 192512 4096 4096 NT_STATUS_OK
ReadX 12441 258048 4096 4096 NT_STATUS_OK
ReadX 12441 323584 4096 4096 NT_STATUS_OK
ReadX 12441 389120 4096 4096 NT_STATUS_OK
ReadX 12441 454656 4096 4096 NT_STATUS_OK
ReadX 12441 520192 4096 4096 NT_STATUS_OK
WriteX 12441 0 65536 65536 NT_STATUS_OK
WriteX 12441 65536 65536 65536 NT_STATUS_OK
WriteX 12441 131072 65536 65536 NT_STATUS_OK
WriteX 12441 196608 65536 65536 NT_STATUS_OK
WriteX 12441 262144 65536 65536 NT_STATUS_OK
WriteX 12441 327680 65536 65536 NT_STATUS_OK
WriteX 12441 393216 65536 65536 NT_STATUS_OK
WriteX 12441 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 4096 4096 NT_STATUS_OK
ReadX 12442 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12443 NT_STATUS_OK
WriteX 12443 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
WriteX 12443 0 53 53 NT_STATUS_OK
Close 12443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12436 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12442 8192 4096 4096 NT_STATUS_OK
ReadX 12442 12288 4096 4096 NT_STATUS_OK
WriteX 12446 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12446 258 NT_STATUS_OK
ReadX 12442 16384 4096 4096 NT_STATUS_OK
ReadX 12442 20480 4096 4096 NT_STATUS_OK
WriteX 12446 0 15360 15360 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12447 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12447 1004 NT_STATUS_OK
WriteX 12447 0 4096 4096 NT_STATUS_OK
Close 12447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12450 4096 4096 4096 NT_STATUS_OK
ReadX 12450 8192 4096 4096 NT_STATUS_OK
ReadX 12450 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
ReadX 12453 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
ReadX 12454 4096 4096 4096 NT_STATUS_OK
ReadX 12454 8192 4096 4096 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12455 NT_STATUS_OK
WriteX 12455 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 15360 15360 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12456 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12456 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12460 NT_STATUS_OK
SET_FILE_INFORMATION 12460 1004 NT_STATUS_OK
Close 12460 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
Close 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12461 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
ReadX 12463 4096 4096 4096 NT_STATUS_OK
ReadX 12463 8192 4096 4096 NT_STATUS_OK
ReadX 12463 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12465 NT_STATUS_OK
WriteX 12465 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12465 258 NT_STATUS_OK
WriteX 12465 0 53 53 NT_STATUS_OK
Close 12465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12464 4096 4096 4096 NT_STATUS_OK
ReadX 12464 8192 4096 4096 NT_STATUS_OK
ReadX 12464 12288 4096 4096 NT_STATUS_OK
WriteX 12468 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 258 NT_STATUS_OK
WriteX 12468 0 12006 12006 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12469 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12469 1004 NT_STATUS_OK
WriteX 12469 0 4096 4096 NT_STATUS_OK
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12472 4096 4096 4096 NT_STATUS_OK
ReadX 12472 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12475 NT_STATUS_OK
WriteX 12475 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12475 258 NT_STATUS_OK
WriteX 12475 0 11991 11991 NT_STATUS_OK
Close 12475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12476 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12476 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12477 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12480 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
Close 12480 NT_STATUS_OK
WriteX 12476 0 4096 4096 NT_STATUS_OK
Close 12476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12481 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12483 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
ReadX 12483 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
WriteX 12483 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
Close 12459 NT_STATUS_OK
WriteX 12463 0 19054 19054 NT_STATUS_OK
WriteX 12483 0 12288 12288 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12488 NT_STATUS_OK
Close 12488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 61440 61440 NT_STATUS_OK
ReadX 12490 61440 4096 4096 NT_STATUS_OK
ReadX 12490 65536 61440 61440 NT_STATUS_OK
ReadX 12490 126976 4096 4096 NT_STATUS_OK
ReadX 12490 131072 61440 61440 NT_STATUS_OK
ReadX 12490 192512 4096 4096 NT_STATUS_OK
ReadX 12490 196608 61440 61440 NT_STATUS_OK
ReadX 12490 258048 4096 4096 NT_STATUS_OK
ReadX 12490 262144 61440 61440 NT_STATUS_OK
ReadX 12490 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 61440 61440 NT_STATUS_OK
ReadX 12491 61440 4096 4096 NT_STATUS_OK
ReadX 12491 65536 61440 61440 NT_STATUS_OK
ReadX 12491 126976 4096 4096 NT_STATUS_OK
ReadX 12491 131072 61440 61440 NT_STATUS_OK
ReadX 12491 192512 4096 4096 NT_STATUS_OK
ReadX 12491 196608 61440 61440 NT_STATUS_OK
ReadX 12491 258048 4096 4096 NT_STATUS_OK
ReadX 12491 262144 61440 61440 NT_STATUS_OK
ReadX 12491 323584 4096 4096 NT_STATUS_OK
ReadX 12491 327680 61440 61440 NT_STATUS_OK
ReadX 12491 389120 4096 4096 NT_STATUS_OK
ReadX 12491 393216 61440 61440 NT_STATUS_OK
ReadX 12491 454656 4096 4096 NT_STATUS_OK
ReadX 12491 458752 61440 61440 NT_STATUS_OK
ReadX 12491 520192 4096 4096 NT_STATUS_OK
ReadX 12491 524288 61440 61440 NT_STATUS_OK
ReadX 12491 585728 4096 4096 NT_STATUS_OK
ReadX 12491 589824 61440 61440 NT_STATUS_OK
ReadX 12491 651264 4096 4096 NT_STATUS_OK
ReadX 12491 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12492 NT_STATUS_OK
ReadX 12492 0 61440 61440 NT_STATUS_OK
ReadX 12492 61440 4096 4096 NT_STATUS_OK
ReadX 12492 65536 61440 61440 NT_STATUS_OK
ReadX 12492 126976 4096 4096 NT_STATUS_OK
ReadX 12492 131072 61440 61440 NT_STATUS_OK
ReadX 12492 192512 4096 4096 NT_STATUS_OK
ReadX 12492 196608 61440 61440 NT_STATUS_OK
ReadX 12492 258048 4096 4096 NT_STATUS_OK
ReadX 12492 262144 61440 61440 NT_STATUS_OK
ReadX 12492 323584 4096 4096 NT_STATUS_OK
ReadX 12492 327680 61440 61440 NT_STATUS_OK
ReadX 12492 389120 4096 4096 NT_STATUS_OK
ReadX 12492 393216 61440 61440 NT_STATUS_OK
ReadX 12492 454656 4096 4096 NT_STATUS_OK
ReadX 12492 458752 61440 61440 NT_STATUS_OK
ReadX 12492 520192 4096 4096 NT_STATUS_OK
ReadX 12492 524288 61440 61440 NT_STATUS_OK
ReadX 12492 585728 4096 4096 NT_STATUS_OK
ReadX 12492 589824 61440 61440 NT_STATUS_OK
ReadX 12492 651264 4096 4096 NT_STATUS_OK
ReadX 12492 655360 61440 61440 NT_STATUS_OK
ReadX 12492 716800 4096 4096 NT_STATUS_OK
ReadX 12492 720896 61440 61440 NT_STATUS_OK
ReadX 12492 782336 4096 4096 NT_STATUS_OK
ReadX 12492 786432 61440 61440 NT_STATUS_OK
ReadX 12492 847872 4096 4096 NT_STATUS_OK
ReadX 12492 851968 61440 61440 NT_STATUS_OK
ReadX 12492 913408 4096 4096 NT_STATUS_OK
ReadX 12492 917504 61440 61440 NT_STATUS_OK
ReadX 12492 978944 4096 4096 NT_STATUS_OK
ReadX 12492 983040 61440 61440 NT_STATUS_OK
ReadX 12492 1044480 4096 4096 NT_STATUS_OK
ReadX 12492 1048576 61440 61440 NT_STATUS_OK
ReadX 12492 1110016 4096 4096 NT_STATUS_OK
ReadX 12492 1114112 61440 61440 NT_STATUS_OK
ReadX 12492 1175552 4096 4096 NT_STATUS_OK
ReadX 12492 1179648 61440 61440 NT_STATUS_OK
ReadX 12492 1241088 4096 4096 NT_STATUS_OK
ReadX 12492 1245184 61440 61440 NT_STATUS_OK
ReadX 12492 1306624 4096 4096 NT_STATUS_OK
ReadX 12492 1310720 61440 61440 NT_STATUS_OK
ReadX 12492 1372160 4096 4096 NT_STATUS_OK
ReadX 12492 1376256 61440 61440 NT_STATUS_OK
ReadX 12492 1437696 4096 4096 NT_STATUS_OK
ReadX 12492 1441792 61440 61440 NT_STATUS_OK
ReadX 12492 1503232 4096 4096 NT_STATUS_OK
ReadX 12492 1507328 61440 61440 NT_STATUS_OK
ReadX 12492 1568768 4096 4096 NT_STATUS_OK
ReadX 12492 1572864 61440 61440 NT_STATUS_OK
ReadX 12492 1634304 4096 4096 NT_STATUS_OK
ReadX 12492 1638400 61440 61440 NT_STATUS_OK
ReadX 12492 1699840 4096 4096 NT_STATUS_OK
ReadX 12492 1703936 61440 61440 NT_STATUS_OK
ReadX 12492 1765376 4096 4096 NT_STATUS_OK
ReadX 12492 1769472 61440 61440 NT_STATUS_OK
ReadX 12492 1830912 4096 4096 NT_STATUS_OK
ReadX 12492 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12499 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 1004 NT_STATUS_OK
WriteX 12499 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12500 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12501 NT_STATUS_OK
WriteX 12501 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12501 258 NT_STATUS_OK
WriteX 12501 0 491 491 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12499 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12504 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12505 NT_STATUS_OK
WriteX 12505 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12505 258 NT_STATUS_OK
WriteX 12505 0 543 543 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12510 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12519 NT_STATUS_OK
QUERY_FILE_INFORMATION 12519 1004 NT_STATUS_OK
WriteX 12519 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12519 258 NT_STATUS_OK
WriteX 12519 0 2048 2048 NT_STATUS_OK
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
Flush 12520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12525 NT_STATUS_OK
WriteX 12525 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12525 258 NT_STATUS_OK
WriteX 12525 0 2048 2048 NT_STATUS_OK
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12530 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12531 NT_STATUS_OK
WriteX 12531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 258 NT_STATUS_OK
WriteX 12531 0 2048 2048 NT_STATUS_OK
Close 12531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 2048 2048 NT_STATUS_OK
ReadX 12510 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
WriteX 12510 0 8192 8192 NT_STATUS_OK
WriteX 12511 0 4096 4096 NT_STATUS_OK
WriteX 12512 0 4096 4096 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12536 NT_STATUS_OK
QUERY_FILE_INFORMATION 12536 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12556 NT_STATUS_OK
QUERY_FILE_INFORMATION 12556 1004 NT_STATUS_OK
WriteX 12556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12556 258 NT_STATUS_OK
WriteX 12556 0 2048 2048 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12564 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 1004 NT_STATUS_OK
WriteX 12564 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 258 NT_STATUS_OK
WriteX 12564 0 2048 2048 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12565 NT_STATUS_OK
ReadX 12565 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12557 0 4096 4096 NT_STATUS_OK
Flush 12557 NT_STATUS_OK
WriteX 12565 0 4096 4096 NT_STATUS_OK
Flush 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12557 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12565 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12559 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12567 NT_STATUS_OK
WriteX 12567 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
WriteX 12567 0 4096 4096 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12570 NT_STATUS_OK
WriteX 12570 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12570 258 NT_STATUS_OK
WriteX 12570 0 4096 4096 NT_STATUS_OK
Close 12570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12571 0 4096 4096 NT_STATUS_OK
Close 12568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12539 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12574 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12578 NT_STATUS_OK
WriteX 12578 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 258 NT_STATUS_OK
WriteX 12578 0 2048 2048 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12580 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12593 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12576 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12595 NT_STATUS_OK
QUERY_FILE_INFORMATION 12595 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12601 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12607 NT_STATUS_OK
ReadX 12607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12615 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 1004 NT_STATUS_OK
WriteX 12615 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 258 NT_STATUS_OK
WriteX 12615 0 2048 2048 NT_STATUS_OK
Close 12615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12617 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12627 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 1004 NT_STATUS_OK
WriteX 12627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
WriteX 12627 0 2048 2048 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12635 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 1004 NT_STATUS_OK
WriteX 12635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 2048 2048 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
Flush 12616 NT_STATUS_OK
WriteX 12628 0 4096 4096 NT_STATUS_OK
Flush 12628 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
Flush 12636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12628 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 4096 16384 16384 NT_STATUS_OK
ReadX 12598 4096 16384 16384 NT_STATUS_OK
ReadX 12630 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 2048 2048 NT_STATUS_OK
WriteX 12638 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12639 NT_STATUS_OK
QUERY_FILE_INFORMATION 12639 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12610 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12609 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Close 12607 NT_STATUS_OK
Close 12608 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12646 4096 16384 16384 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12648 0 4096 4096 NT_STATUS_OK
WriteX 12649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 8192 8192 NT_STATUS_OK
ReadX 12652 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12666 0 4096 4096 NT_STATUS_OK
ReadX 12666 4096 4096 4096 NT_STATUS_OK
ReadX 12666 8192 4096 4096 NT_STATUS_OK
WriteX 12652 0 4096 4096 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
ReadX 12667 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12648 0 4096 4096 NT_STATUS_OK
WriteX 12649 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12672 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 1004 NT_STATUS_OK
WriteX 12672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 2048 2048 NT_STATUS_OK
Close 12672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12673 NT_STATUS_OK
ReadX 12673 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
ReadX 12675 4096 4096 4096 NT_STATUS_OK
WriteX 12675 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 4096 4096 NT_STATUS_OK
ReadX 12677 4096 4096 4096 NT_STATUS_OK
WriteX 12677 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12678 NT_STATUS_OK
QUERY_FILE_INFORMATION 12678 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Close 12654 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12680 0 4096 4096 NT_STATUS_OK
ReadX 12680 4096 4096 4096 NT_STATUS_OK
ReadX 12680 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
ReadX 12681 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12698 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 1004 NT_STATUS_OK
WriteX 12698 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 258 NT_STATUS_OK
WriteX 12698 0 2048 2048 NT_STATUS_OK
Close 12698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12704 NT_STATUS_OK
QUERY_FILE_INFORMATION 12704 1004 NT_STATUS_OK
WriteX 12704 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12704 258 NT_STATUS_OK
WriteX 12704 0 2048 2048 NT_STATUS_OK
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12688 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12706 NT_STATUS_OK
QUERY_FILE_INFORMATION 12706 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Close 12691 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12708 NT_STATUS_OK
QUERY_FILE_INFORMATION 12708 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 61440 4096 4096 NT_STATUS_OK
ReadX 12710 126976 4096 4096 NT_STATUS_OK
WriteX 12710 0 65536 65536 NT_STATUS_OK
WriteX 12710 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 61440 4096 4096 NT_STATUS_OK
ReadX 12711 126976 4096 4096 NT_STATUS_OK
ReadX 12711 192512 4096 4096 NT_STATUS_OK
ReadX 12711 258048 4096 4096 NT_STATUS_OK
WriteX 12711 0 65536 65536 NT_STATUS_OK
WriteX 12711 65536 65536 65536 NT_STATUS_OK
WriteX 12711 131072 65536 65536 NT_STATUS_OK
WriteX 12711 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 61440 4096 4096 NT_STATUS_OK
ReadX 12712 126976 4096 4096 NT_STATUS_OK
ReadX 12712 192512 4096 4096 NT_STATUS_OK
ReadX 12712 258048 4096 4096 NT_STATUS_OK
ReadX 12712 323584 4096 4096 NT_STATUS_OK
ReadX 12712 389120 4096 4096 NT_STATUS_OK
ReadX 12712 454656 4096 4096 NT_STATUS_OK
ReadX 12712 520192 4096 4096 NT_STATUS_OK
WriteX 12712 0 65536 65536 NT_STATUS_OK
WriteX 12712 65536 65536 65536 NT_STATUS_OK
WriteX 12712 131072 65536 65536 NT_STATUS_OK
WriteX 12712 196608 65536 65536 NT_STATUS_OK
WriteX 12712 262144 65536 65536 NT_STATUS_OK
WriteX 12712 327680 65536 65536 NT_STATUS_OK
WriteX 12712 393216 65536 65536 NT_STATUS_OK
WriteX 12712 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12713 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12713 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12713 8192 4096 4096 NT_STATUS_OK
ReadX 12713 12288 4096 4096 NT_STATUS_OK
ReadX 12713 16384 4096 4096 NT_STATUS_OK
ReadX 12713 20480 4096 4096 NT_STATUS_OK
ReadX 12713 24576 4096 4096 NT_STATUS_OK
ReadX 12713 28672 4096 4096 NT_STATUS_OK
ReadX 12713 32768 4096 4096 NT_STATUS_OK
ReadX 12713 36864 4096 4096 NT_STATUS_OK
ReadX 12713 40960 4096 4096 NT_STATUS_OK
ReadX 12713 45056 4096 4096 NT_STATUS_OK
ReadX 12713 49152 4096 4096 NT_STATUS_OK
ReadX 12713 53248 4096 4096 NT_STATUS_OK
ReadX 12713 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12713 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12716 NT_STATUS_OK
WriteX 12716 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12716 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 57088 57088 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Flush 12716 NT_STATUS_OK
Close 12713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12717 NT_STATUS_OK
SET_FILE_INFORMATION 12717 1004 NT_STATUS_OK
Close 12717 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12720 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12721 NT_STATUS_OK
WriteX 12721 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
WriteX 12721 0 51456 51456 NT_STATUS_OK
WriteX 12721 0 4096 4096 NT_STATUS_OK
Flush 12721 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
WriteX 12721 0 4096 4096 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12725 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12730 NT_STATUS_OK
WriteX 12730 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12730 258 NT_STATUS_OK
WriteX 12730 0 53077 53077 NT_STATUS_OK
Close 12730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12731 NT_STATUS_OK
WriteX 12731 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12731 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 0 65536 65536 NT_STATUS_OK
WriteX 12731 65536 1856 1856 NT_STATUS_OK
WriteX 12731 0 4096 4096 NT_STATUS_OK
Flush 12731 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 0 4096 4096 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12733 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12740 NT_STATUS_OK
WriteX 12740 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 258 NT_STATUS_OK
WriteX 12740 0 7983 7983 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12745 NT_STATUS_OK
WriteX 12745 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12745 258 NT_STATUS_OK
WriteX 12745 0 65536 65536 NT_STATUS_OK
WriteX 12745 65536 65536 65536 NT_STATUS_OK
WriteX 12745 131072 65536 65536 NT_STATUS_OK
WriteX 12745 196608 65536 65536 NT_STATUS_OK
WriteX 12745 262144 65536 65536 NT_STATUS_OK
WriteX 12745 327680 65536 65536 NT_STATUS_OK
WriteX 12745 393216 65536 65536 NT_STATUS_OK
WriteX 12745 458752 46731 46731 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12746 NT_STATUS_OK
WriteX 12746 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12746 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12735 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12746 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
WriteX 12746 0 65536 65536 NT_STATUS_OK
WriteX 12746 65536 22848 22848 NT_STATUS_OK
WriteX 12746 0 4096 4096 NT_STATUS_OK
Flush 12746 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
WriteX 12746 0 4096 4096 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12750 NT_STATUS_OK
ReadX 12750 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12750 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12751 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
ReadX 12751 8192 4096 4096 NT_STATUS_OK
ReadX 12751 12288 4096 4096 NT_STATUS_OK
ReadX 12751 16384 4096 4096 NT_STATUS_OK
ReadX 12751 20480 4096 4096 NT_STATUS_OK
ReadX 12751 24576 4096 4096 NT_STATUS_OK
ReadX 12751 28672 4096 4096 NT_STATUS_OK
ReadX 12751 32768 4096 4096 NT_STATUS_OK
ReadX 12751 36864 4096 4096 NT_STATUS_OK
ReadX 12751 40960 4096 4096 NT_STATUS_OK
ReadX 12751 45056 4096 4096 NT_STATUS_OK
ReadX 12751 49152 4096 4096 NT_STATUS_OK
ReadX 12751 53248 4096 4096 NT_STATUS_OK
ReadX 12751 57344 4096 4096 NT_STATUS_OK
ReadX 12751 61440 4096 4096 NT_STATUS_OK
ReadX 12751 65536 4096 4096 NT_STATUS_OK
ReadX 12751 69632 4096 4096 NT_STATUS_OK
ReadX 12751 73728 4096 4096 NT_STATUS_OK
ReadX 12751 77824 4096 4096 NT_STATUS_OK
ReadX 12751 81920 4096 4096 NT_STATUS_OK
ReadX 12751 86016 4096 4096 NT_STATUS_OK
ReadX 12751 90112 4096 4096 NT_STATUS_OK
ReadX 12751 94208 4096 4096 NT_STATUS_OK
ReadX 12751 98304 4096 4096 NT_STATUS_OK
ReadX 12751 102400 4096 4096 NT_STATUS_OK
ReadX 12751 106496 4096 4096 NT_STATUS_OK
ReadX 12751 110592 4096 4096 NT_STATUS_OK
ReadX 12751 114688 4096 4096 NT_STATUS_OK
ReadX 12751 118784 4096 4096 NT_STATUS_OK
ReadX 12751 122880 4096 4096 NT_STATUS_OK
ReadX 12751 126976 4096 4096 NT_STATUS_OK
ReadX 12751 131072 4096 4096 NT_STATUS_OK
ReadX 12751 135168 4096 4096 NT_STATUS_OK
ReadX 12751 139264 4096 4096 NT_STATUS_OK
ReadX 12751 143360 4096 4096 NT_STATUS_OK
ReadX 12751 147456 4096 4096 NT_STATUS_OK
ReadX 12751 151552 4096 4096 NT_STATUS_OK
ReadX 12751 155648 4096 4096 NT_STATUS_OK
ReadX 12751 159744 4096 4096 NT_STATUS_OK
ReadX 12751 163840 4096 4096 NT_STATUS_OK
ReadX 12751 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12751 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12754 NT_STATUS_OK
WriteX 12754 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12754 258 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12755 NT_STATUS_OK
SET_FILE_INFORMATION 12755 1004 NT_STATUS_OK
Close 12755 NT_STATUS_OK
WriteX 12754 0 42388 42388 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
ReadX 12758 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12759 NT_STATUS_OK
WriteX 12759 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12759 258 NT_STATUS_OK
SET_FILE_INFORMATION 12759 1004 NT_STATUS_OK
WriteX 12759 0 42652 42652 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
ReadX 12763 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12768 NT_STATUS_OK
WriteX 12768 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 258 NT_STATUS_OK
WriteX 12768 0 65536 65536 NT_STATUS_OK
WriteX 12768 65536 49 49 NT_STATUS_OK
Close 12768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 61440 61440 NT_STATUS_OK
ReadX 12769 61440 4096 4096 NT_STATUS_OK
ReadX 12769 65536 61440 61440 NT_STATUS_OK
ReadX 12769 126976 4096 4096 NT_STATUS_OK
ReadX 12769 131072 61440 61440 NT_STATUS_OK
ReadX 12769 192512 4096 4096 NT_STATUS_OK
ReadX 12769 196608 61440 61440 NT_STATUS_OK
ReadX 12769 258048 4096 4096 NT_STATUS_OK
ReadX 12769 262144 61440 61440 NT_STATUS_OK
ReadX 12769 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 61440 61440 NT_STATUS_OK
ReadX 12770 61440 4096 4096 NT_STATUS_OK
ReadX 12770 65536 61440 61440 NT_STATUS_OK
ReadX 12770 126976 4096 4096 NT_STATUS_OK
ReadX 12770 131072 61440 61440 NT_STATUS_OK
ReadX 12770 192512 4096 4096 NT_STATUS_OK
ReadX 12770 196608 61440 61440 NT_STATUS_OK
ReadX 12770 258048 4096 4096 NT_STATUS_OK
ReadX 12770 262144 61440 61440 NT_STATUS_OK
ReadX 12770 323584 4096 4096 NT_STATUS_OK
ReadX 12770 327680 61440 61440 NT_STATUS_OK
ReadX 12770 389120 4096 4096 NT_STATUS_OK
ReadX 12770 393216 61440 61440 NT_STATUS_OK
ReadX 12770 454656 4096 4096 NT_STATUS_OK
ReadX 12770 458752 61440 61440 NT_STATUS_OK
ReadX 12770 520192 4096 4096 NT_STATUS_OK
ReadX 12770 524288 61440 61440 NT_STATUS_OK
ReadX 12770 585728 4096 4096 NT_STATUS_OK
ReadX 12770 589824 61440 61440 NT_STATUS_OK
ReadX 12770 651264 4096 4096 NT_STATUS_OK
ReadX 12770 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 61440 61440 NT_STATUS_OK
ReadX 12771 61440 4096 4096 NT_STATUS_OK
ReadX 12771 65536 61440 61440 NT_STATUS_OK
ReadX 12771 126976 4096 4096 NT_STATUS_OK
ReadX 12771 131072 61440 61440 NT_STATUS_OK
ReadX 12771 192512 4096 4096 NT_STATUS_OK
ReadX 12771 196608 61440 61440 NT_STATUS_OK
ReadX 12771 258048 4096 4096 NT_STATUS_OK
ReadX 12771 262144 61440 61440 NT_STATUS_OK
ReadX 12771 323584 4096 4096 NT_STATUS_OK
ReadX 12771 327680 61440 61440 NT_STATUS_OK
ReadX 12771 389120 4096 4096 NT_STATUS_OK
ReadX 12771 393216 61440 61440 NT_STATUS_OK
ReadX 12771 454656 4096 4096 NT_STATUS_OK
ReadX 12771 458752 61440 61440 NT_STATUS_OK
ReadX 12771 520192 4096 4096 NT_STATUS_OK
ReadX 12771 524288 61440 61440 NT_STATUS_OK
ReadX 12771 585728 4096 4096 NT_STATUS_OK
ReadX 12771 589824 61440 61440 NT_STATUS_OK
ReadX 12771 651264 4096 4096 NT_STATUS_OK
ReadX 12771 655360 61440 61440 NT_STATUS_OK
ReadX 12771 716800 4096 4096 NT_STATUS_OK
ReadX 12771 720896 61440 61440 NT_STATUS_OK
ReadX 12771 782336 4096 4096 NT_STATUS_OK
ReadX 12771 786432 61440 61440 NT_STATUS_OK
ReadX 12771 847872 4096 4096 NT_STATUS_OK
ReadX 12771 851968 61440 61440 NT_STATUS_OK
ReadX 12771 913408 4096 4096 NT_STATUS_OK
ReadX 12771 917504 61440 61440 NT_STATUS_OK
ReadX 12771 978944 4096 4096 NT_STATUS_OK
ReadX 12771 983040 61440 61440 NT_STATUS_OK
ReadX 12771 1044480 4096 4096 NT_STATUS_OK
ReadX 12771 1048576 61440 61440 NT_STATUS_OK
ReadX 12771 1110016 4096 4096 NT_STATUS_OK
ReadX 12771 1114112 61440 61440 NT_STATUS_OK
ReadX 12771 1175552 4096 4096 NT_STATUS_OK
ReadX 12771 1179648 61440 61440 NT_STATUS_OK
ReadX 12771 1241088 4096 4096 NT_STATUS_OK
ReadX 12771 1245184 61440 61440 NT_STATUS_OK
ReadX 12771 1306624 4096 4096 NT_STATUS_OK
ReadX 12771 1310720 61440 61440 NT_STATUS_OK
ReadX 12771 1372160 4096 4096 NT_STATUS_OK
ReadX 12771 1376256 61440 61440 NT_STATUS_OK
ReadX 12771 1437696 4096 4096 NT_STATUS_OK
ReadX 12771 1441792 61440 61440 NT_STATUS_OK
ReadX 12771 1503232 4096 4096 NT_STATUS_OK
ReadX 12771 1507328 61440 61440 NT_STATUS_OK
ReadX 12771 1568768 4096 4096 NT_STATUS_OK
ReadX 12771 1572864 61440 61440 NT_STATUS_OK
ReadX 12771 1634304 4096 4096 NT_STATUS_OK
ReadX 12771 1638400 61440 61440 NT_STATUS_OK
ReadX 12771 1699840 4096 4096 NT_STATUS_OK
ReadX 12771 1703936 61440 61440 NT_STATUS_OK
ReadX 12771 1765376 4096 4096 NT_STATUS_OK
ReadX 12771 1769472 61440 61440 NT_STATUS_OK
ReadX 12771 1830912 4096 4096 NT_STATUS_OK
ReadX 12771 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12773 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
ReadX 12773 2156 24 24 NT_STATUS_OK
ReadX 12773 2139 276 276 NT_STATUS_OK
ReadX 12773 2136 14 14 NT_STATUS_OK
ReadX 12773 2136 7 7 NT_STATUS_OK
ReadX 12773 2138 12 12 NT_STATUS_OK
ReadX 12773 2137 8 8 NT_STATUS_OK
ReadX 12773 2135 15 15 NT_STATUS_OK
ReadX 12773 0 16 16 NT_STATUS_OK
ReadX 12773 16 2048 2048 NT_STATUS_OK
ReadX 12773 2064 2048 2048 NT_STATUS_OK
ReadX 12773 257 2048 2048 NT_STATUS_OK
ReadX 12773 385 2048 2048 NT_STATUS_OK
ReadX 12773 513 2048 2048 NT_STATUS_OK
ReadX 12773 641 2048 2048 NT_STATUS_OK
ReadX 12773 769 2048 2048 NT_STATUS_OK
ReadX 12773 897 2048 2048 NT_STATUS_OK
ReadX 12773 1025 2048 2048 NT_STATUS_OK
ReadX 12773 1153 2048 2048 NT_STATUS_OK
ReadX 12773 1281 2048 2048 NT_STATUS_OK
ReadX 12773 1409 2048 2048 NT_STATUS_OK
ReadX 12773 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12775 NT_STATUS_OK
Close 12775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12778 NT_STATUS_OK
WriteX 12778 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12778 258 NT_STATUS_OK
WriteX 12778 0 10575 10575 NT_STATUS_OK
Flush 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12779 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
Close 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12783 NT_STATUS_OK
LockX 12783 2147483538 1 NT_STATUS_OK
UnlockX 12783 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 1005 NT_STATUS_OK
ReadX 12783 0 512 512 NT_STATUS_OK
ReadX 12783 512 512 512 NT_STATUS_OK
ReadX 12783 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 1004 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12784 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1005 NT_STATUS_OK
ReadX 12784 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12785 NT_STATUS_OK
LockX 12785 2147483538 1 NT_STATUS_OK
UnlockX 12785 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12785 1005 NT_STATUS_OK
ReadX 12785 0 512 512 NT_STATUS_OK
ReadX 12785 512 512 512 NT_STATUS_OK
ReadX 12785 1024 512 512 NT_STATUS_OK
ReadX 12785 288 20 20 NT_STATUS_OK
ReadX 12785 308 2084 2084 NT_STATUS_OK
ReadX 12785 388 2084 2084 NT_STATUS_OK
ReadX 12785 388 2084 2084 NT_STATUS_OK
ReadX 12772 2157 1386 1386 NT_STATUS_OK
ReadX 12785 2472 399 399 NT_STATUS_OK
ReadX 12785 3072 1536 1536 NT_STATUS_OK
ReadX 12785 544 149 149 NT_STATUS_OK
ReadX 12785 693 485 485 NT_STATUS_OK
Close 12785 NT_STATUS_OK
ReadX 12772 2157 4096 4096 NT_STATUS_OK
ReadX 12772 6253 4096 4096 NT_STATUS_OK
ReadX 12772 10349 4096 4096 NT_STATUS_OK
ReadX 12772 14445 4096 4096 NT_STATUS_OK
ReadX 12772 18541 4096 4096 NT_STATUS_OK
ReadX 12772 22637 256 256 NT_STATUS_OK
ReadX 12772 22893 4096 4096 NT_STATUS_OK
ReadX 12772 26989 4096 4096 NT_STATUS_OK
ReadX 12772 31085 4096 4096 NT_STATUS_OK
ReadX 12772 35181 4096 4096 NT_STATUS_OK
ReadX 12772 39277 4096 4096 NT_STATUS_OK
ReadX 12772 43373 4096 4096 NT_STATUS_OK
ReadX 12772 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12772 2157 1024 1024 NT_STATUS_OK
ReadX 12772 1667 4688 4688 NT_STATUS_OK
ReadX 12772 6355 3516 3516 NT_STATUS_OK
ReadX 12772 9871 16384 16384 NT_STATUS_OK
ReadX 12772 26255 3771 3771 NT_STATUS_OK
ReadX 12772 30026 2048 2048 NT_STATUS_OK
ReadX 12772 32074 1024 1024 NT_STATUS_OK
ReadX 12772 33098 6652 6652 NT_STATUS_OK
ReadX 12772 39750 16384 16384 NT_STATUS_OK
ReadX 12772 56134 10496 10496 NT_STATUS_OK
ReadX 12772 66630 1784 1784 NT_STATUS_OK
ReadX 12772 68414 90 90 NT_STATUS_OK
ReadX 12772 68504 273 273 NT_STATUS_OK
ReadX 12772 68777 1600 1600 NT_STATUS_OK
ReadX 12772 70377 640 640 NT_STATUS_OK
ReadX 12772 71017 1280 1280 NT_STATUS_OK
ReadX 12772 72297 8464 8464 NT_STATUS_OK
ReadX 12772 80761 158 158 NT_STATUS_OK
ReadX 12772 80919 912 912 NT_STATUS_OK
ReadX 12772 81831 1980 1980 NT_STATUS_OK
ReadX 12772 83811 2256 2256 NT_STATUS_OK
ReadX 12772 86067 400 400 NT_STATUS_OK
ReadX 12772 86467 252 252 NT_STATUS_OK
ReadX 12772 86719 42 42 NT_STATUS_OK
ReadX 12772 86761 725 725 NT_STATUS_OK
ReadX 12772 2009 512 512 NT_STATUS_OK
ReadX 12772 3895 9 9 NT_STATUS_OK
ReadX 12772 3781 46 46 NT_STATUS_OK
ReadX 12772 4059 92 92 NT_STATUS_OK
ReadX 12772 3781 92 92 NT_STATUS_OK
ReadX 12772 3986 184 184 NT_STATUS_OK
ReadX 12772 3987 16384 16384 NT_STATUS_OK
ReadX 12772 3902 16384 16384 NT_STATUS_OK
ReadX 12772 3781 10240 10240 NT_STATUS_OK
ReadX 12772 3821 16384 16384 NT_STATUS_OK
ReadX 12772 3891 935 935 NT_STATUS_OK
ReadX 12772 4060 10240 10240 NT_STATUS_OK
ReadX 12772 4059 184 184 NT_STATUS_OK
ReadX 12772 256 184 184 NT_STATUS_OK
ReadX 12772 256 1026 1026 NT_STATUS_OK
ReadX 12772 3901 326 326 NT_STATUS_OK
ReadX 12772 3899 652 652 NT_STATUS_OK
ReadX 12772 256 2 2 NT_STATUS_OK
ReadX 12772 258 4948 4948 NT_STATUS_OK
Close 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12790 NT_STATUS_OK
WriteX 12790 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12790 258 NT_STATUS_OK
WriteX 12790 0 65536 65536 NT_STATUS_OK
WriteX 12790 65536 65536 65536 NT_STATUS_OK
WriteX 12790 131072 65536 65536 NT_STATUS_OK
WriteX 12790 196608 65536 65536 NT_STATUS_OK
WriteX 12790 262144 65536 65536 NT_STATUS_OK
WriteX 12790 327680 65536 65536 NT_STATUS_OK
WriteX 12790 393216 65536 65536 NT_STATUS_OK
WriteX 12790 458752 65536 65536 NT_STATUS_OK
WriteX 12790 524288 65536 65536 NT_STATUS_OK
WriteX 12790 589824 35257 35257 NT_STATUS_OK
Close 12790 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12795 NT_STATUS_OK
WriteX 12795 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12795 258 NT_STATUS_OK
WriteX 12795 0 65536 65536 NT_STATUS_OK
WriteX 12795 65536 65536 65536 NT_STATUS_OK
WriteX 12795 131072 65536 65536 NT_STATUS_OK
WriteX 12795 196608 65536 65536 NT_STATUS_OK
WriteX 12795 262144 65536 65536 NT_STATUS_OK
WriteX 12795 327680 65536 65536 NT_STATUS_OK
WriteX 12795 393216 65536 65536 NT_STATUS_OK
WriteX 12795 458752 65536 65536 NT_STATUS_OK
WriteX 12795 524288 65536 65536 NT_STATUS_OK
WriteX 12795 589824 57598 57598 NT_STATUS_OK
Close 12795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12797 NT_STATUS_OK
WriteX 12797 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12797 258 NT_STATUS_OK
WriteX 12797 0 12543 12543 NT_STATUS_OK
Flush 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12801 NT_STATUS_OK
ReadX 12801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12803 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 1005 NT_STATUS_OK
ReadX 12803 1938 24 24 NT_STATUS_OK
ReadX 12803 1920 276 276 NT_STATUS_OK
ReadX 12803 1918 14 14 NT_STATUS_OK
ReadX 12803 1918 7 7 NT_STATUS_OK
ReadX 12803 1919 12 12 NT_STATUS_OK
ReadX 12803 1919 8 8 NT_STATUS_OK
ReadX 12803 1917 15 15 NT_STATUS_OK
ReadX 12803 0 16 16 NT_STATUS_OK
ReadX 12803 16 2048 2048 NT_STATUS_OK
ReadX 12803 2064 2048 2048 NT_STATUS_OK
ReadX 12803 257 2048 2048 NT_STATUS_OK
ReadX 12803 385 2048 2048 NT_STATUS_OK
ReadX 12803 513 2048 2048 NT_STATUS_OK
ReadX 12803 641 2048 2048 NT_STATUS_OK
ReadX 12803 769 2048 2048 NT_STATUS_OK
ReadX 12803 897 2048 2048 NT_STATUS_OK
ReadX 12803 1025 2048 2048 NT_STATUS_OK
ReadX 12803 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12808 NT_STATUS_OK
WriteX 12808 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12808 258 NT_STATUS_OK
WriteX 12808 0 11588 11588 NT_STATUS_OK
Flush 12808 NT_STATUS_OK
Close 12808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12809 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
Close 12803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12813 NT_STATUS_OK
WriteX 12813 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 258 NT_STATUS_OK
WriteX 12813 0 11615 11615 NT_STATUS_OK
Flush 12813 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12815 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12819 NT_STATUS_OK
Close 12819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12822 NT_STATUS_OK
WriteX 12822 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12822 258 NT_STATUS_OK
WriteX 12822 0 65536 65536 NT_STATUS_OK
WriteX 12822 65536 16050 16050 NT_STATUS_OK
Close 12822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12802 1939 64 64 NT_STATUS_OK
ReadX 12802 128 248 248 NT_STATUS_OK
ReadX 12802 128 568 568 NT_STATUS_OK
ReadX 12802 3872 1536 1536 NT_STATUS_OK
ReadX 12802 3456 2560 2560 NT_STATUS_OK
ReadX 12802 3136 512 512 NT_STATUS_OK
ReadX 12802 2880 4096 4096 NT_STATUS_OK
ReadX 12802 3264 3072 3072 NT_STATUS_OK
ReadX 12802 320 4096 4096 NT_STATUS_OK
ReadX 12802 1024 4096 4096 NT_STATUS_OK
ReadX 12802 3616 4096 4096 NT_STATUS_OK
ReadX 12802 1939 64 64 NT_STATUS_OK
ReadX 12802 128 248 248 NT_STATUS_OK
ReadX 12802 128 608 608 NT_STATUS_OK
ReadX 12802 2858 1024 1024 NT_STATUS_OK
ReadX 12802 2810 4096 4096 NT_STATUS_OK
ReadX 12802 2826 4096 4096 NT_STATUS_OK
ReadX 12802 2580 2048 2048 NT_STATUS_OK
ReadX 12802 2800 2560 2560 NT_STATUS_OK
ReadX 12802 2100 4096 4096 NT_STATUS_OK
ReadX 12802 2084 4096 4096 NT_STATUS_OK
ReadX 12802 868 4096 4096 NT_STATUS_OK
ReadX 12802 2324 4096 4096 NT_STATUS_OK
ReadX 12802 884 4096 4096 NT_STATUS_OK
ReadX 12802 2604 1024 1024 NT_STATUS_OK
ReadX 12802 580 4096 4096 NT_STATUS_OK
ReadX 12802 596 4096 4096 NT_STATUS_OK
ReadX 12802 2752 4096 4096 NT_STATUS_OK
ReadX 12802 2842 1024 1024 NT_STATUS_OK
ReadX 12802 660 4096 4096 NT_STATUS_OK
ReadX 12802 2720 4096 4096 NT_STATUS_OK
ReadX 12802 2736 4096 4096 NT_STATUS_OK
ReadX 12802 628 4096 4096 NT_STATUS_OK
ReadX 12802 2704 4096 4096 NT_STATUS_OK
ReadX 12802 1556 4096 4096 NT_STATUS_OK
ReadX 12802 576 4096 4096 NT_STATUS_OK
ReadX 12802 3168 1536 1536 NT_STATUS_OK
ReadX 12802 832 4096 4096 NT_STATUS_OK
ReadX 12802 1088 4096 4096 NT_STATUS_OK
ReadX 12802 1344 4096 4096 NT_STATUS_OK
ReadX 12802 1600 4096 4096 NT_STATUS_OK
ReadX 12802 1856 4096 4096 NT_STATUS_OK
ReadX 12802 2112 4096 4096 NT_STATUS_OK
ReadX 12802 1892 4096 4096 NT_STATUS_OK
ReadX 12802 820 4096 4096 NT_STATUS_OK
ReadX 12802 788 4096 4096 NT_STATUS_OK
ReadX 12802 1604 4096 4096 NT_STATUS_OK
ReadX 12802 3648 4096 4096 NT_STATUS_OK
ReadX 12802 2608 4096 4096 NT_STATUS_OK
ReadX 12802 548 4096 4096 NT_STATUS_OK
ReadX 12802 740 4096 4096 NT_STATUS_OK
ReadX 12802 1344 4096 4096 NT_STATUS_OK
ReadX 12802 3392 4096 4096 NT_STATUS_OK
ReadX 12802 3904 4096 4096 NT_STATUS_OK
ReadX 12802 644 4096 4096 NT_STATUS_OK
ReadX 12802 676 4096 4096 NT_STATUS_OK
ReadX 12802 2688 4096 4096 NT_STATUS_OK
ReadX 12802 320 4096 4096 NT_STATUS_OK
ReadX 12802 900 4096 4096 NT_STATUS_OK
ReadX 12802 1908 4096 4096 NT_STATUS_OK
ReadX 12802 852 4096 4096 NT_STATUS_OK
ReadX 12802 724 4096 4096 NT_STATUS_OK
ReadX 12802 2292 4096 4096 NT_STATUS_OK
ReadX 12802 612 4096 4096 NT_STATUS_OK
ReadX 12802 388 4096 4096 NT_STATUS_OK
ReadX 12802 2368 4096 4096 NT_STATUS_OK
ReadX 12802 2624 4096 4096 NT_STATUS_OK
ReadX 12802 500 4096 4096 NT_STATUS_OK
ReadX 12802 356 4096 4096 NT_STATUS_OK
ReadX 12802 1024 4096 4096 NT_STATUS_OK
ReadX 12802 576 4096 4096 NT_STATUS_OK
ReadX 12802 340 4096 4096 NT_STATUS_OK
ReadX 12802 420 4096 4096 NT_STATUS_OK
ReadX 12802 1600 4096 4096 NT_STATUS_OK
ReadX 12802 404 4096 4096 NT_STATUS_OK
ReadX 12802 1428 4096 4096 NT_STATUS_OK
ReadX 12802 2656 4096 4096 NT_STATUS_OK
ReadX 12802 2624 4096 4096 NT_STATUS_OK
ReadX 12802 452 4096 4096 NT_STATUS_OK
ReadX 12802 692 4096 4096 NT_STATUS_OK
ReadX 12802 564 4096 4096 NT_STATUS_OK
ReadX 12802 372 4096 4096 NT_STATUS_OK
ReadX 12802 468 4096 4096 NT_STATUS_OK
ReadX 12802 484 4096 4096 NT_STATUS_OK
ReadX 12802 1088 4096 4096 NT_STATUS_OK
ReadX 12802 1924 4096 4096 NT_STATUS_OK
ReadX 12802 2768 4096 4096 NT_STATUS_OK
ReadX 12802 832 4096 4096 NT_STATUS_OK
ReadX 12802 836 4096 4096 NT_STATUS_OK
ReadX 12802 1856 4096 4096 NT_STATUS_OK
ReadX 12802 2640 4096 4096 NT_STATUS_OK
ReadX 12802 436 4096 4096 NT_STATUS_OK
ReadX 12802 1828 4096 4096 NT_STATUS_OK
ReadX 12802 804 4096 4096 NT_STATUS_OK
ReadX 12802 1860 4096 4096 NT_STATUS_OK
ReadX 12802 1812 4096 4096 NT_STATUS_OK
ReadX 12802 756 4096 4096 NT_STATUS_OK
ReadX 12802 1636 4096 4096 NT_STATUS_OK
ReadX 12802 772 4096 4096 NT_STATUS_OK
ReadX 12802 2036 4096 4096 NT_STATUS_OK
ReadX 12802 1220 4096 4096 NT_STATUS_OK
ReadX 12802 1652 4096 4096 NT_STATUS_OK
ReadX 12802 2588 4096 4096 NT_STATUS_OK
ReadX 12802 916 4096 4096 NT_STATUS_OK
ReadX 12802 260 4096 4096 NT_STATUS_OK
ReadX 12802 932 4096 4096 NT_STATUS_OK
ReadX 12802 2624 4096 4096 NT_STATUS_OK
ReadX 12802 308 4096 4096 NT_STATUS_OK
ReadX 12802 292 4096 4096 NT_STATUS_OK
ReadX 12802 1140 4096 4096 NT_STATUS_OK
ReadX 12802 276 4096 4096 NT_STATUS_OK
ReadX 12802 2020 4096 4096 NT_STATUS_OK
ReadX 12802 2880 4096 4096 NT_STATUS_OK
ReadX 12802 516 4096 4096 NT_STATUS_OK
ReadX 12802 1844 4096 4096 NT_STATUS_OK
ReadX 12802 1124 4096 4096 NT_STATUS_OK
ReadX 12802 3136 4096 4096 NT_STATUS_OK
ReadX 12802 324 4096 4096 NT_STATUS_OK
ReadX 12802 1156 4096 4096 NT_STATUS_OK
ReadX 12802 1172 4096 4096 NT_STATUS_OK
ReadX 12802 2112 4096 4096 NT_STATUS_OK
ReadX 12802 2368 4096 4096 NT_STATUS_OK
ReadX 12802 964 4096 4096 NT_STATUS_OK
ReadX 12802 980 4096 4096 NT_STATUS_OK
ReadX 12802 1012 4096 4096 NT_STATUS_OK
ReadX 12802 532 4096 4096 NT_STATUS_OK
ReadX 12802 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12802 1620 4096 4096 NT_STATUS_OK
ReadX 12802 1604 4096 4096 NT_STATUS_OK
ReadX 12802 2116 4096 4096 NT_STATUS_OK
ReadX 12802 2132 4096 4096 NT_STATUS_OK
ReadX 12802 2148 4096 4096 NT_STATUS_OK
ReadX 12802 2276 4096 4096 NT_STATUS_OK
ReadX 12802 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12824 NT_STATUS_OK
Close 12824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12827 NT_STATUS_OK
QUERY_FILE_INFORMATION 12782 1004 NT_STATUS_OK
Close 12782 NT_STATUS_OK
WriteX 12827 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1004 NT_STATUS_OK
Close 12784 NT_STATUS_OK
WriteX 12827 0 65536 65536 NT_STATUS_OK
WriteX 12827 65536 64850 64850 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12829 NT_STATUS_OK
WriteX 12829 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12829 258 NT_STATUS_OK
ReadX 12802 2068 4096 4096 NT_STATUS_OK
ReadX 12802 1588 4096 4096 NT_STATUS_OK
ReadX 12802 1572 4096 4096 NT_STATUS_OK
WriteX 12829 0 18630 18630 NT_STATUS_OK
Flush 12829 NT_STATUS_OK
Close 12829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12802 612 4096 4096 NT_STATUS_OK
ReadX 12802 564 4096 4096 NT_STATUS_OK
ReadX 12802 1876 4096 4096 NT_STATUS_OK
ReadX 12802 628 4096 4096 NT_STATUS_OK
ReadX 12802 740 4096 4096 NT_STATUS_OK
ReadX 12802 724 4096 4096 NT_STATUS_OK
ReadX 12802 644 4096 4096 NT_STATUS_OK
ReadX 12802 2324 4096 4096 NT_STATUS_OK
ReadX 12802 660 4096 4096 NT_STATUS_OK
ReadX 12802 852 4096 4096 NT_STATUS_OK
ReadX 12802 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12802 2368 4096 4096 NT_STATUS_OK
ReadX 12802 1024 4096 4096 NT_STATUS_OK
ReadX 12802 320 4096 4096 NT_STATUS_OK
ReadX 12802 580 4096 4096 NT_STATUS_OK
ReadX 12802 3136 512 512 NT_STATUS_OK
ReadX 12802 2880 4096 4096 NT_STATUS_OK
Close 12802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 61440 4096 4096 NT_STATUS_OK
ReadX 12834 126976 4096 4096 NT_STATUS_OK
WriteX 12834 0 65536 65536 NT_STATUS_OK
WriteX 12834 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 61440 4096 4096 NT_STATUS_OK
ReadX 12835 126976 4096 4096 NT_STATUS_OK
ReadX 12835 192512 4096 4096 NT_STATUS_OK
ReadX 12835 258048 4096 4096 NT_STATUS_OK
WriteX 12835 0 65536 65536 NT_STATUS_OK
WriteX 12835 65536 65536 65536 NT_STATUS_OK
WriteX 12835 131072 65536 65536 NT_STATUS_OK
WriteX 12835 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 61440 4096 4096 NT_STATUS_OK
ReadX 12836 126976 4096 4096 NT_STATUS_OK
ReadX 12836 192512 4096 4096 NT_STATUS_OK
ReadX 12836 258048 4096 4096 NT_STATUS_OK
ReadX 12836 323584 4096 4096 NT_STATUS_OK
ReadX 12836 389120 4096 4096 NT_STATUS_OK
ReadX 12836 454656 4096 4096 NT_STATUS_OK
ReadX 12836 520192 4096 4096 NT_STATUS_OK
WriteX 12836 0 65536 65536 NT_STATUS_OK
WriteX 12836 65536 65536 65536 NT_STATUS_OK
WriteX 12836 131072 65536 65536 NT_STATUS_OK
WriteX 12836 196608 65536 65536 NT_STATUS_OK
WriteX 12836 262144 65536 65536 NT_STATUS_OK
WriteX 12836 327680 65536 65536 NT_STATUS_OK
WriteX 12836 393216 65536 65536 NT_STATUS_OK
WriteX 12836 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12838 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12839 NT_STATUS_OK
WriteX 12839 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12837 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12835 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12844 NT_STATUS_OK
WriteX 12844 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 258 NT_STATUS_OK
WriteX 12844 0 62591 62591 NT_STATUS_OK
Close 12844 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12849 NT_STATUS_OK
WriteX 12849 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12849 258 NT_STATUS_OK
WriteX 12849 0 10845 10845 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12854 NT_STATUS_OK
WriteX 12854 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12854 258 NT_STATUS_OK
WriteX 12854 0 30118 30118 NT_STATUS_OK
Close 12854 NT_STATUS_OK
WriteX 12837 0 4096 4096 NT_STATUS_OK
WriteX 12839 0 64 64 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 61440 61440 NT_STATUS_OK
ReadX 12856 61440 4096 4096 NT_STATUS_OK
ReadX 12856 65536 61440 61440 NT_STATUS_OK
ReadX 12856 126976 4096 4096 NT_STATUS_OK
ReadX 12856 131072 61440 61440 NT_STATUS_OK
ReadX 12856 192512 4096 4096 NT_STATUS_OK
ReadX 12856 196608 61440 61440 NT_STATUS_OK
ReadX 12856 258048 4096 4096 NT_STATUS_OK
ReadX 12856 262144 61440 61440 NT_STATUS_OK
ReadX 12856 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 61440 61440 NT_STATUS_OK
ReadX 12857 61440 4096 4096 NT_STATUS_OK
ReadX 12857 65536 61440 61440 NT_STATUS_OK
ReadX 12857 126976 4096 4096 NT_STATUS_OK
ReadX 12857 131072 61440 61440 NT_STATUS_OK
ReadX 12857 192512 4096 4096 NT_STATUS_OK
ReadX 12857 196608 61440 61440 NT_STATUS_OK
ReadX 12857 258048 4096 4096 NT_STATUS_OK
ReadX 12857 262144 61440 61440 NT_STATUS_OK
ReadX 12857 323584 4096 4096 NT_STATUS_OK
ReadX 12857 327680 61440 61440 NT_STATUS_OK
ReadX 12857 389120 4096 4096 NT_STATUS_OK
ReadX 12857 393216 61440 61440 NT_STATUS_OK
ReadX 12857 454656 4096 4096 NT_STATUS_OK
ReadX 12857 458752 61440 61440 NT_STATUS_OK
ReadX 12857 520192 4096 4096 NT_STATUS_OK
ReadX 12857 524288 61440 61440 NT_STATUS_OK
ReadX 12857 585728 4096 4096 NT_STATUS_OK
ReadX 12857 589824 61440 61440 NT_STATUS_OK
ReadX 12857 651264 4096 4096 NT_STATUS_OK
ReadX 12857 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 61440 61440 NT_STATUS_OK
ReadX 12858 61440 4096 4096 NT_STATUS_OK
ReadX 12858 65536 61440 61440 NT_STATUS_OK
ReadX 12858 126976 4096 4096 NT_STATUS_OK
ReadX 12858 131072 61440 61440 NT_STATUS_OK
ReadX 12858 192512 4096 4096 NT_STATUS_OK
ReadX 12858 196608 61440 61440 NT_STATUS_OK
ReadX 12858 258048 4096 4096 NT_STATUS_OK
ReadX 12858 262144 61440 61440 NT_STATUS_OK
ReadX 12858 323584 4096 4096 NT_STATUS_OK
ReadX 12858 327680 61440 61440 NT_STATUS_OK
ReadX 12858 389120 4096 4096 NT_STATUS_OK
ReadX 12858 393216 61440 61440 NT_STATUS_OK
ReadX 12858 454656 4096 4096 NT_STATUS_OK
ReadX 12858 458752 61440 61440 NT_STATUS_OK
ReadX 12858 520192 4096 4096 NT_STATUS_OK
ReadX 12858 524288 61440 61440 NT_STATUS_OK
ReadX 12858 585728 4096 4096 NT_STATUS_OK
ReadX 12858 589824 61440 61440 NT_STATUS_OK
ReadX 12858 651264 4096 4096 NT_STATUS_OK
ReadX 12858 655360 61440 61440 NT_STATUS_OK
ReadX 12858 716800 4096 4096 NT_STATUS_OK
ReadX 12858 720896 61440 61440 NT_STATUS_OK
ReadX 12858 782336 4096 4096 NT_STATUS_OK
ReadX 12858 786432 61440 61440 NT_STATUS_OK
ReadX 12858 847872 4096 4096 NT_STATUS_OK
ReadX 12858 851968 61440 61440 NT_STATUS_OK
ReadX 12858 913408 4096 4096 NT_STATUS_OK
ReadX 12858 917504 61440 61440 NT_STATUS_OK
ReadX 12858 978944 4096 4096 NT_STATUS_OK
ReadX 12858 983040 61440 61440 NT_STATUS_OK
ReadX 12858 1044480 4096 4096 NT_STATUS_OK
ReadX 12858 1048576 61440 61440 NT_STATUS_OK
ReadX 12858 1110016 4096 4096 NT_STATUS_OK
ReadX 12858 1114112 61440 61440 NT_STATUS_OK
ReadX 12858 1175552 4096 4096 NT_STATUS_OK
ReadX 12858 1179648 61440 61440 NT_STATUS_OK
ReadX 12858 1241088 4096 4096 NT_STATUS_OK
ReadX 12858 1245184 61440 61440 NT_STATUS_OK
ReadX 12858 1306624 4096 4096 NT_STATUS_OK
ReadX 12858 1310720 61440 61440 NT_STATUS_OK
ReadX 12858 1372160 4096 4096 NT_STATUS_OK
ReadX 12858 1376256 61440 61440 NT_STATUS_OK
ReadX 12858 1437696 4096 4096 NT_STATUS_OK
ReadX 12858 1441792 61440 61440 NT_STATUS_OK
ReadX 12858 1503232 4096 4096 NT_STATUS_OK
ReadX 12858 1507328 61440 61440 NT_STATUS_OK
ReadX 12858 1568768 4096 4096 NT_STATUS_OK
ReadX 12858 1572864 61440 61440 NT_STATUS_OK
ReadX 12858 1634304 4096 4096 NT_STATUS_OK
ReadX 12858 1638400 61440 61440 NT_STATUS_OK
ReadX 12858 1699840 4096 4096 NT_STATUS_OK
ReadX 12858 1703936 61440 61440 NT_STATUS_OK
ReadX 12858 1765376 4096 4096 NT_STATUS_OK
ReadX 12858 1769472 61440 61440 NT_STATUS_OK
ReadX 12858 1830912 4096 4096 NT_STATUS_OK
ReadX 12858 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12863 NT_STATUS_OK
ReadX 12863 0 4096 4096 NT_STATUS_OK
ReadX 12863 4096 4096 4096 NT_STATUS_OK
ReadX 12863 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12867 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 8192 8192 NT_STATUS_OK
ReadX 12871 8192 8192 8192 NT_STATUS_OK
ReadX 12871 16384 8192 8192 NT_STATUS_OK
ReadX 12871 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12871 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12876 NT_STATUS_OK
WriteX 12876 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12876 258 NT_STATUS_OK
WriteX 12876 0 10438 10438 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12880 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12881 NT_STATUS_OK
Close 12881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12882 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
ReadX 12885 4096 4096 4096 NT_STATUS_OK
ReadX 12885 8192 4096 4096 NT_STATUS_OK
ReadX 12885 12288 8192 8192 NT_STATUS_OK
ReadX 12885 20480 8192 8192 NT_STATUS_OK
ReadX 12885 28672 8192 8192 NT_STATUS_OK
ReadX 12885 36864 8192 8192 NT_STATUS_OK
ReadX 12885 45056 8192 8192 NT_STATUS_OK
ReadX 12885 53248 8192 8192 NT_STATUS_OK
ReadX 12885 61440 8192 8192 NT_STATUS_OK
ReadX 12885 69632 8192 8192 NT_STATUS_OK
ReadX 12885 77824 8192 8192 NT_STATUS_OK
ReadX 12885 86016 8192 8192 NT_STATUS_OK
ReadX 12885 94208 8192 8192 NT_STATUS_OK
ReadX 12885 102400 8192 8192 NT_STATUS_OK
ReadX 12885 110592 8192 8192 NT_STATUS_OK
ReadX 12885 118784 8192 8192 NT_STATUS_OK
ReadX 12885 126976 8192 8192 NT_STATUS_OK
ReadX 12885 135168 8192 8192 NT_STATUS_OK
ReadX 12885 143360 8192 8192 NT_STATUS_OK
ReadX 12885 151552 8192 8192 NT_STATUS_OK
ReadX 12885 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12890 NT_STATUS_OK
WriteX 12890 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 258 NT_STATUS_OK
WriteX 12890 0 28489 28489 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12891 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12893 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12894 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 8192 8192 NT_STATUS_OK
ReadX 12897 8192 8192 8192 NT_STATUS_OK
ReadX 12897 16384 8192 8192 NT_STATUS_OK
ReadX 12897 24576 8192 8192 NT_STATUS_OK
ReadX 12897 32768 16384 16384 NT_STATUS_OK
ReadX 12897 49152 8192 8192 NT_STATUS_OK
ReadX 12897 57344 8192 8192 NT_STATUS_OK
ReadX 12897 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Close 12896 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12902 NT_STATUS_OK
WriteX 12902 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 258 NT_STATUS_OK
WriteX 12902 0 29253 29253 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12903 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12909 NT_STATUS_OK
WriteX 12909 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12909 258 NT_STATUS_OK
WriteX 12909 0 30183 30183 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12912 NT_STATUS_OK
WriteX 12912 0 510 510 NT_STATUS_OK
WriteX 12912 510 512 512 NT_STATUS_OK
WriteX 12912 1022 510 510 NT_STATUS_OK
WriteX 12912 1532 510 510 NT_STATUS_OK
WriteX 12912 2042 168 168 NT_STATUS_OK
Close 12912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12913 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 61440 4096 4096 NT_STATUS_OK
ReadX 12916 126976 4096 4096 NT_STATUS_OK
WriteX 12916 0 65536 65536 NT_STATUS_OK
WriteX 12916 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 61440 4096 4096 NT_STATUS_OK
ReadX 12917 126976 4096 4096 NT_STATUS_OK
ReadX 12917 192512 4096 4096 NT_STATUS_OK
ReadX 12917 258048 4096 4096 NT_STATUS_OK
WriteX 12917 0 65536 65536 NT_STATUS_OK
WriteX 12917 65536 65536 65536 NT_STATUS_OK
WriteX 12917 131072 65536 65536 NT_STATUS_OK
WriteX 12917 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 61440 4096 4096 NT_STATUS_OK
ReadX 12918 126976 4096 4096 NT_STATUS_OK
ReadX 12918 192512 4096 4096 NT_STATUS_OK
ReadX 12918 258048 4096 4096 NT_STATUS_OK
ReadX 12918 323584 4096 4096 NT_STATUS_OK
ReadX 12918 389120 4096 4096 NT_STATUS_OK
ReadX 12918 454656 4096 4096 NT_STATUS_OK
ReadX 12918 520192 4096 4096 NT_STATUS_OK
WriteX 12918 0 65536 65536 NT_STATUS_OK
WriteX 12918 65536 65536 65536 NT_STATUS_OK
WriteX 12918 131072 65536 65536 NT_STATUS_OK
WriteX 12918 196608 65536 65536 NT_STATUS_OK
WriteX 12918 262144 65536 65536 NT_STATUS_OK
WriteX 12918 327680 65536 65536 NT_STATUS_OK
WriteX 12918 393216 65536 65536 NT_STATUS_OK
WriteX 12918 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12925 NT_STATUS_OK
Close 12925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12934 NT_STATUS_OK
Close 12934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12943 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12968 NT_STATUS_OK
Close 12968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12981 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12987 NT_STATUS_OK
WriteX 12987 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12987 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12987 0 65536 65536 NT_STATUS_OK
WriteX 12987 65536 65536 65536 NT_STATUS_OK
WriteX 12987 131072 65536 65536 NT_STATUS_OK
WriteX 12987 196608 65536 65536 NT_STATUS_OK
WriteX 12987 262144 26634 26634 NT_STATUS_OK
Close 12987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
ReadX 12995 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13003 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13012 NT_STATUS_OK
Close 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13018 NT_STATUS_OK
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13052 NT_STATUS_OK
Close 13052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13062 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13072 NT_STATUS_OK
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
Close 13074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
Close 13075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13087 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13088 NT_STATUS_OK
ReadX 13088 0 4096 4096 NT_STATUS_OK
Close 13088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 0 4096 4096 NT_STATUS_OK
Close 13089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13076 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13119 0 4096 4096 NT_STATUS_OK
Close 13119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
ReadX 13121 4096 4096 4096 NT_STATUS_OK
ReadX 13121 8192 4096 4096 NT_STATUS_OK
ReadX 13121 12288 4096 4096 NT_STATUS_OK
ReadX 13121 16384 4096 4096 NT_STATUS_OK
ReadX 13121 20480 4096 4096 NT_STATUS_OK
ReadX 13121 24576 4096 4096 NT_STATUS_OK
ReadX 13121 28672 4096 4096 NT_STATUS_OK
ReadX 13121 32768 4096 4096 NT_STATUS_OK
ReadX 13121 36864 4096 4096 NT_STATUS_OK
ReadX 13121 40960 4096 4096 NT_STATUS_OK
ReadX 13121 45056 4096 4096 NT_STATUS_OK
ReadX 13121 49152 4096 4096 NT_STATUS_OK
ReadX 13121 53248 4096 4096 NT_STATUS_OK
ReadX 13121 57344 4096 4096 NT_STATUS_OK
ReadX 13121 61440 4096 4096 NT_STATUS_OK
ReadX 13121 65536 4096 4096 NT_STATUS_OK
ReadX 13121 69632 4096 4096 NT_STATUS_OK
ReadX 13121 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13121 1004 NT_STATUS_OK
WriteX 13121 0 4096 4096 NT_STATUS_OK
Close 13121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13122 NT_STATUS_OK
SET_FILE_INFORMATION 13122 1004 NT_STATUS_OK
Close 13122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13127 NT_STATUS_OK
WriteX 13127 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13127 258 NT_STATUS_OK
WriteX 13127 0 65536 65536 NT_STATUS_OK
WriteX 13127 65536 19979 19979 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
QUERY_FILE_INFORMATION 13128 1004 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
SET_FILE_INFORMATION 13128 1004 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13133 1004 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13123 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13136 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13139 NT_STATUS_OK
WriteX 13139 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13139 258 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 17654 17654 NT_STATUS_OK
Close 13139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
QUERY_FILE_INFORMATION 13140 1004 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
SET_FILE_INFORMATION 13140 1004 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13141 NT_STATUS_OK
SET_FILE_INFORMATION 13141 1004 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13143 NT_STATUS_OK
Close 13143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 4096 4096 NT_STATUS_OK
ReadX 13145 4096 4096 4096 NT_STATUS_OK
ReadX 13145 8192 4096 4096 NT_STATUS_OK
ReadX 13145 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13145 16384 4096 4096 NT_STATUS_OK
ReadX 13145 20480 4096 4096 NT_STATUS_OK
ReadX 13145 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13146 NT_STATUS_OK
ReadX 13146 0 4096 4096 NT_STATUS_OK
Close 13146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13148 1004 NT_STATUS_OK
WriteX 13148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13154 NT_STATUS_OK
WriteX 13154 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13154 258 NT_STATUS_OK
WriteX 13154 0 65536 65536 NT_STATUS_OK
WriteX 13154 65536 19490 19490 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13155 NT_STATUS_OK
ReadX 13155 0 4096 4096 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 1004 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
SET_FILE_INFORMATION 13155 1004 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13156 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13158 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13160 0 4096 4096 NT_STATUS_OK
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
ReadX 13162 4096 4096 4096 NT_STATUS_OK
ReadX 13162 8192 4096 4096 NT_STATUS_OK
ReadX 13162 12288 4096 4096 NT_STATUS_OK
ReadX 13162 16384 4096 4096 NT_STATUS_OK
ReadX 13162 20480 4096 4096 NT_STATUS_OK
ReadX 13162 24576 4096 4096 NT_STATUS_OK
ReadX 13162 28672 4096 4096 NT_STATUS_OK
ReadX 13162 32768 4096 4096 NT_STATUS_OK
ReadX 13162 36864 4096 4096 NT_STATUS_OK
ReadX 13162 40960 4096 4096 NT_STATUS_OK
ReadX 13162 45056 4096 4096 NT_STATUS_OK
ReadX 13162 49152 4096 4096 NT_STATUS_OK
ReadX 13162 53248 4096 4096 NT_STATUS_OK
ReadX 13162 57344 4096 4096 NT_STATUS_OK
ReadX 13162 61440 4096 4096 NT_STATUS_OK
ReadX 13162 65536 4096 4096 NT_STATUS_OK
ReadX 13162 69632 4096 4096 NT_STATUS_OK
ReadX 13162 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13162 1004 NT_STATUS_OK
WriteX 13162 0 4096 4096 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13163 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
Close 13163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13168 NT_STATUS_OK
WriteX 13168 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 65536 65536 NT_STATUS_OK
WriteX 13168 65536 8866 8866 NT_STATUS_OK
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Flush 13169 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Flush 13169 NT_STATUS_OK
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13173 1004 NT_STATUS_OK
WriteX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13174 NT_STATUS_OK
Close 13174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13176 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13179 NT_STATUS_OK
WriteX 13179 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13179 258 NT_STATUS_OK
WriteX 13179 0 65536 65536 NT_STATUS_OK
WriteX 13179 65536 9298 9298 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
Flush 13180 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
Flush 13180 NT_STATUS_OK
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13181 NT_STATUS_OK
SET_FILE_INFORMATION 13181 1004 NT_STATUS_OK
Close 13181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13183 NT_STATUS_OK
Close 13183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13186 0 4096 4096 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13187 4096 4096 4096 NT_STATUS_OK
ReadX 13187 8192 4096 4096 NT_STATUS_OK
ReadX 13187 12288 4096 4096 NT_STATUS_OK
ReadX 13187 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 4096 4096 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13189 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13190 1004 NT_STATUS_OK
WriteX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13191 NT_STATUS_OK
Close 13191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13187 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13196 NT_STATUS_OK
WriteX 13196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13196 258 NT_STATUS_OK
WriteX 13196 0 65536 65536 NT_STATUS_OK
WriteX 13196 65536 11540 11540 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
WriteX 13197 0 4096 4096 NT_STATUS_OK
Flush 13197 NT_STATUS_OK
SET_FILE_INFORMATION 13197 1004 NT_STATUS_OK
WriteX 13197 0 4096 4096 NT_STATUS_OK
Flush 13197 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13198 NT_STATUS_OK
SET_FILE_INFORMATION 13198 1004 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 61440 4096 4096 NT_STATUS_OK
ReadX 13202 126976 4096 4096 NT_STATUS_OK
WriteX 13202 0 65536 65536 NT_STATUS_OK
WriteX 13202 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 61440 4096 4096 NT_STATUS_OK
ReadX 13203 126976 4096 4096 NT_STATUS_OK
ReadX 13203 192512 4096 4096 NT_STATUS_OK
ReadX 13203 258048 4096 4096 NT_STATUS_OK
WriteX 13203 0 65536 65536 NT_STATUS_OK
WriteX 13203 65536 65536 65536 NT_STATUS_OK
WriteX 13203 131072 65536 65536 NT_STATUS_OK
WriteX 13203 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 61440 4096 4096 NT_STATUS_OK
ReadX 13204 126976 4096 4096 NT_STATUS_OK
ReadX 13204 192512 4096 4096 NT_STATUS_OK
ReadX 13204 258048 4096 4096 NT_STATUS_OK
ReadX 13204 323584 4096 4096 NT_STATUS_OK
ReadX 13204 389120 4096 4096 NT_STATUS_OK
ReadX 13204 454656 4096 4096 NT_STATUS_OK
ReadX 13204 520192 4096 4096 NT_STATUS_OK
WriteX 13204 0 65536 65536 NT_STATUS_OK
WriteX 13204 65536 65536 65536 NT_STATUS_OK
WriteX 13204 131072 65536 65536 NT_STATUS_OK
WriteX 13204 196608 65536 65536 NT_STATUS_OK
WriteX 13204 262144 65536 65536 NT_STATUS_OK
WriteX 13204 327680 65536 65536 NT_STATUS_OK
WriteX 13204 393216 65536 65536 NT_STATUS_OK
WriteX 13204 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13205 NT_STATUS_OK
ReadX 13205 0 4096 4096 NT_STATUS_OK
ReadX 13205 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13206 NT_STATUS_OK
WriteX 13206 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 258 NT_STATUS_OK
WriteX 13206 0 53 53 NT_STATUS_OK
Close 13206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13199 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13205 8192 4096 4096 NT_STATUS_OK
ReadX 13205 12288 4096 4096 NT_STATUS_OK
WriteX 13209 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13209 258 NT_STATUS_OK
ReadX 13205 16384 4096 4096 NT_STATUS_OK
ReadX 13205 20480 4096 4096 NT_STATUS_OK
WriteX 13209 0 15360 15360 NT_STATUS_OK
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13210 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13210 1004 NT_STATUS_OK
WriteX 13210 0 4096 4096 NT_STATUS_OK
Close 13210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13213 4096 4096 4096 NT_STATUS_OK
ReadX 13213 8192 4096 4096 NT_STATUS_OK
ReadX 13213 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
ReadX 13216 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
ReadX 13217 4096 4096 4096 NT_STATUS_OK
ReadX 13217 8192 4096 4096 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13218 NT_STATUS_OK
WriteX 13218 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13218 258 NT_STATUS_OK
WriteX 13218 0 15360 15360 NT_STATUS_OK
Close 13218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13219 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13219 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13220 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13223 NT_STATUS_OK
SET_FILE_INFORMATION 13223 1004 NT_STATUS_OK
Close 13223 NT_STATUS_OK
WriteX 13219 0 4096 4096 NT_STATUS_OK
Close 13219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13224 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
ReadX 13226 4096 4096 4096 NT_STATUS_OK
ReadX 13226 8192 4096 4096 NT_STATUS_OK
ReadX 13226 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13228 NT_STATUS_OK
WriteX 13228 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13228 258 NT_STATUS_OK
WriteX 13228 0 53 53 NT_STATUS_OK
Close 13228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13229 NT_STATUS_OK
Close 13229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13227 4096 4096 4096 NT_STATUS_OK
ReadX 13227 8192 4096 4096 NT_STATUS_OK
ReadX 13227 12288 4096 4096 NT_STATUS_OK
WriteX 13231 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 258 NT_STATUS_OK
WriteX 13231 0 12006 12006 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13232 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13232 1004 NT_STATUS_OK
WriteX 13232 0 4096 4096 NT_STATUS_OK
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13233 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13235 4096 4096 4096 NT_STATUS_OK
ReadX 13235 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13238 NT_STATUS_OK
WriteX 13238 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13238 258 NT_STATUS_OK
WriteX 13238 0 11991 11991 NT_STATUS_OK
Close 13238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13239 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13239 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13240 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13243 NT_STATUS_OK
SET_FILE_INFORMATION 13243 1004 NT_STATUS_OK
Close 13243 NT_STATUS_OK
WriteX 13239 0 4096 4096 NT_STATUS_OK
Close 13239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13244 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13246 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
ReadX 13246 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
WriteX 13246 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
Close 13222 NT_STATUS_OK
WriteX 13226 0 19054 19054 NT_STATUS_OK
WriteX 13246 0 12288 12288 NT_STATUS_OK
Close 13242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13251 NT_STATUS_OK
Close 13251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 61440 61440 NT_STATUS_OK
ReadX 13253 61440 4096 4096 NT_STATUS_OK
ReadX 13253 65536 61440 61440 NT_STATUS_OK
ReadX 13253 126976 4096 4096 NT_STATUS_OK
ReadX 13253 131072 61440 61440 NT_STATUS_OK
ReadX 13253 192512 4096 4096 NT_STATUS_OK
ReadX 13253 196608 61440 61440 NT_STATUS_OK
ReadX 13253 258048 4096 4096 NT_STATUS_OK
ReadX 13253 262144 61440 61440 NT_STATUS_OK
ReadX 13253 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 61440 61440 NT_STATUS_OK
ReadX 13254 61440 4096 4096 NT_STATUS_OK
ReadX 13254 65536 61440 61440 NT_STATUS_OK
ReadX 13254 126976 4096 4096 NT_STATUS_OK
ReadX 13254 131072 61440 61440 NT_STATUS_OK
ReadX 13254 192512 4096 4096 NT_STATUS_OK
ReadX 13254 196608 61440 61440 NT_STATUS_OK
ReadX 13254 258048 4096 4096 NT_STATUS_OK
ReadX 13254 262144 61440 61440 NT_STATUS_OK
ReadX 13254 323584 4096 4096 NT_STATUS_OK
ReadX 13254 327680 61440 61440 NT_STATUS_OK
ReadX 13254 389120 4096 4096 NT_STATUS_OK
ReadX 13254 393216 61440 61440 NT_STATUS_OK
ReadX 13254 454656 4096 4096 NT_STATUS_OK
ReadX 13254 458752 61440 61440 NT_STATUS_OK
ReadX 13254 520192 4096 4096 NT_STATUS_OK
ReadX 13254 524288 61440 61440 NT_STATUS_OK
ReadX 13254 585728 4096 4096 NT_STATUS_OK
ReadX 13254 589824 61440 61440 NT_STATUS_OK
ReadX 13254 651264 4096 4096 NT_STATUS_OK
ReadX 13254 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 61440 61440 NT_STATUS_OK
ReadX 13255 61440 4096 4096 NT_STATUS_OK
ReadX 13255 65536 61440 61440 NT_STATUS_OK
ReadX 13255 126976 4096 4096 NT_STATUS_OK
ReadX 13255 131072 61440 61440 NT_STATUS_OK
ReadX 13255 192512 4096 4096 NT_STATUS_OK
ReadX 13255 196608 61440 61440 NT_STATUS_OK
ReadX 13255 258048 4096 4096 NT_STATUS_OK
ReadX 13255 262144 61440 61440 NT_STATUS_OK
ReadX 13255 323584 4096 4096 NT_STATUS_OK
ReadX 13255 327680 61440 61440 NT_STATUS_OK
ReadX 13255 389120 4096 4096 NT_STATUS_OK
ReadX 13255 393216 61440 61440 NT_STATUS_OK
ReadX 13255 454656 4096 4096 NT_STATUS_OK
ReadX 13255 458752 61440 61440 NT_STATUS_OK
ReadX 13255 520192 4096 4096 NT_STATUS_OK
ReadX 13255 524288 61440 61440 NT_STATUS_OK
ReadX 13255 585728 4096 4096 NT_STATUS_OK
ReadX 13255 589824 61440 61440 NT_STATUS_OK
ReadX 13255 651264 4096 4096 NT_STATUS_OK
ReadX 13255 655360 61440 61440 NT_STATUS_OK
ReadX 13255 716800 4096 4096 NT_STATUS_OK
ReadX 13255 720896 61440 61440 NT_STATUS_OK
ReadX 13255 782336 4096 4096 NT_STATUS_OK
ReadX 13255 786432 61440 61440 NT_STATUS_OK
ReadX 13255 847872 4096 4096 NT_STATUS_OK
ReadX 13255 851968 61440 61440 NT_STATUS_OK
ReadX 13255 913408 4096 4096 NT_STATUS_OK
ReadX 13255 917504 61440 61440 NT_STATUS_OK
ReadX 13255 978944 4096 4096 NT_STATUS_OK
ReadX 13255 983040 61440 61440 NT_STATUS_OK
ReadX 13255 1044480 4096 4096 NT_STATUS_OK
ReadX 13255 1048576 61440 61440 NT_STATUS_OK
ReadX 13255 1110016 4096 4096 NT_STATUS_OK
ReadX 13255 1114112 61440 61440 NT_STATUS_OK
ReadX 13255 1175552 4096 4096 NT_STATUS_OK
ReadX 13255 1179648 61440 61440 NT_STATUS_OK
ReadX 13255 1241088 4096 4096 NT_STATUS_OK
ReadX 13255 1245184 61440 61440 NT_STATUS_OK
ReadX 13255 1306624 4096 4096 NT_STATUS_OK
ReadX 13255 1310720 61440 61440 NT_STATUS_OK
ReadX 13255 1372160 4096 4096 NT_STATUS_OK
ReadX 13255 1376256 61440 61440 NT_STATUS_OK
ReadX 13255 1437696 4096 4096 NT_STATUS_OK
ReadX 13255 1441792 61440 61440 NT_STATUS_OK
ReadX 13255 1503232 4096 4096 NT_STATUS_OK
ReadX 13255 1507328 61440 61440 NT_STATUS_OK
ReadX 13255 1568768 4096 4096 NT_STATUS_OK
ReadX 13255 1572864 61440 61440 NT_STATUS_OK
ReadX 13255 1634304 4096 4096 NT_STATUS_OK
ReadX 13255 1638400 61440 61440 NT_STATUS_OK
ReadX 13255 1699840 4096 4096 NT_STATUS_OK
ReadX 13255 1703936 61440 61440 NT_STATUS_OK
ReadX 13255 1765376 4096 4096 NT_STATUS_OK
ReadX 13255 1769472 61440 61440 NT_STATUS_OK
ReadX 13255 1830912 4096 4096 NT_STATUS_OK
ReadX 13255 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13262 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 1004 NT_STATUS_OK
WriteX 13262 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13263 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13264 NT_STATUS_OK
WriteX 13264 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 491 491 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13262 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13267 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13268 NT_STATUS_OK
WriteX 13268 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13268 258 NT_STATUS_OK
WriteX 13268 0 543 543 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13254 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13257 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13272 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13273 NT_STATUS_OK
ReadX 13273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13282 NT_STATUS_OK
QUERY_FILE_INFORMATION 13282 1004 NT_STATUS_OK
WriteX 13282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13282 258 NT_STATUS_OK
WriteX 13282 0 2048 2048 NT_STATUS_OK
Close 13282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
Flush 13283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13287 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13288 NT_STATUS_OK
WriteX 13288 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13288 258 NT_STATUS_OK
WriteX 13288 0 2048 2048 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13293 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13294 NT_STATUS_OK
WriteX 13294 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 258 NT_STATUS_OK
WriteX 13294 0 2048 2048 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 2048 2048 NT_STATUS_OK
ReadX 13273 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
WriteX 13273 0 8192 8192 NT_STATUS_OK
WriteX 13274 0 4096 4096 NT_STATUS_OK
WriteX 13275 0 4096 4096 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13299 NT_STATUS_OK
QUERY_FILE_INFORMATION 13299 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13319 NT_STATUS_OK
QUERY_FILE_INFORMATION 13319 1004 NT_STATUS_OK
WriteX 13319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13319 258 NT_STATUS_OK
WriteX 13319 0 2048 2048 NT_STATUS_OK
Close 13319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13327 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 1004 NT_STATUS_OK
WriteX 13327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 258 NT_STATUS_OK
WriteX 13327 0 2048 2048 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13320 0 4096 4096 NT_STATUS_OK
Flush 13320 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
Flush 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13320 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13322 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13330 NT_STATUS_OK
WriteX 13330 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 258 NT_STATUS_OK
WriteX 13330 0 4096 4096 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13333 NT_STATUS_OK
WriteX 13333 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13333 258 NT_STATUS_OK
WriteX 13333 0 4096 4096 NT_STATUS_OK
Close 13333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13334 0 4096 4096 NT_STATUS_OK
Close 13331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13337 NT_STATUS_OK
Close 13337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13341 NT_STATUS_OK
WriteX 13341 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 258 NT_STATUS_OK
WriteX 13341 0 2048 2048 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13343 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13356 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13339 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Close 13350 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13358 NT_STATUS_OK
QUERY_FILE_INFORMATION 13358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13368 NT_STATUS_OK
ReadX 13368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13370 NT_STATUS_OK
ReadX 13370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13378 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
WriteX 13378 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 258 NT_STATUS_OK
WriteX 13378 0 2048 2048 NT_STATUS_OK
Close 13378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13379 NT_STATUS_OK
ReadX 13379 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13390 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 1004 NT_STATUS_OK
WriteX 13390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
WriteX 13390 0 2048 2048 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13398 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 1004 NT_STATUS_OK
WriteX 13398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 2048 2048 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13379 0 4096 4096 NT_STATUS_OK
Flush 13379 NT_STATUS_OK
WriteX 13391 0 4096 4096 NT_STATUS_OK
Flush 13391 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
Flush 13399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13379 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 4096 16384 16384 NT_STATUS_OK
ReadX 13361 4096 16384 16384 NT_STATUS_OK
ReadX 13393 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 2048 2048 NT_STATUS_OK
WriteX 13401 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13402 NT_STATUS_OK
QUERY_FILE_INFORMATION 13402 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13373 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Close 13370 NT_STATUS_OK
Close 13371 NT_STATUS_OK
Close 13368 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13409 4096 16384 16384 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
WriteX 13411 0 4096 4096 NT_STATUS_OK
WriteX 13412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 8192 8192 NT_STATUS_OK
ReadX 13415 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13429 0 4096 4096 NT_STATUS_OK
ReadX 13429 4096 4096 4096 NT_STATUS_OK
ReadX 13429 8192 4096 4096 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
ReadX 13430 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
WriteX 13411 0 4096 4096 NT_STATUS_OK
WriteX 13412 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13435 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 1004 NT_STATUS_OK
WriteX 13435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 2048 2048 NT_STATUS_OK
Close 13435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
ReadX 13438 4096 4096 4096 NT_STATUS_OK
WriteX 13438 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
ReadX 13440 4096 4096 4096 NT_STATUS_OK
WriteX 13440 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13441 NT_STATUS_OK
QUERY_FILE_INFORMATION 13441 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13426 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Close 13417 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13443 0 4096 4096 NT_STATUS_OK
ReadX 13443 4096 4096 4096 NT_STATUS_OK
ReadX 13443 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
ReadX 13444 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13461 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 1004 NT_STATUS_OK
WriteX 13461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 258 NT_STATUS_OK
WriteX 13461 0 2048 2048 NT_STATUS_OK
Close 13461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13467 NT_STATUS_OK
QUERY_FILE_INFORMATION 13467 1004 NT_STATUS_OK
WriteX 13467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13467 258 NT_STATUS_OK
WriteX 13467 0 2048 2048 NT_STATUS_OK
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13451 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13469 NT_STATUS_OK
QUERY_FILE_INFORMATION 13469 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13471 NT_STATUS_OK
QUERY_FILE_INFORMATION 13471 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 61440 4096 4096 NT_STATUS_OK
ReadX 13473 126976 4096 4096 NT_STATUS_OK
WriteX 13473 0 65536 65536 NT_STATUS_OK
WriteX 13473 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 61440 4096 4096 NT_STATUS_OK
ReadX 13474 126976 4096 4096 NT_STATUS_OK
ReadX 13474 192512 4096 4096 NT_STATUS_OK
ReadX 13474 258048 4096 4096 NT_STATUS_OK
WriteX 13474 0 65536 65536 NT_STATUS_OK
WriteX 13474 65536 65536 65536 NT_STATUS_OK
WriteX 13474 131072 65536 65536 NT_STATUS_OK
WriteX 13474 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 61440 4096 4096 NT_STATUS_OK
ReadX 13475 126976 4096 4096 NT_STATUS_OK
ReadX 13475 192512 4096 4096 NT_STATUS_OK
ReadX 13475 258048 4096 4096 NT_STATUS_OK
ReadX 13475 323584 4096 4096 NT_STATUS_OK
ReadX 13475 389120 4096 4096 NT_STATUS_OK
ReadX 13475 454656 4096 4096 NT_STATUS_OK
ReadX 13475 520192 4096 4096 NT_STATUS_OK
WriteX 13475 0 65536 65536 NT_STATUS_OK
WriteX 13475 65536 65536 65536 NT_STATUS_OK
WriteX 13475 131072 65536 65536 NT_STATUS_OK
WriteX 13475 196608 65536 65536 NT_STATUS_OK
WriteX 13475 262144 65536 65536 NT_STATUS_OK
WriteX 13475 327680 65536 65536 NT_STATUS_OK
WriteX 13475 393216 65536 65536 NT_STATUS_OK
WriteX 13475 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13476 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13476 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13476 8192 4096 4096 NT_STATUS_OK
ReadX 13476 12288 4096 4096 NT_STATUS_OK
ReadX 13476 16384 4096 4096 NT_STATUS_OK
ReadX 13476 20480 4096 4096 NT_STATUS_OK
ReadX 13476 24576 4096 4096 NT_STATUS_OK
ReadX 13476 28672 4096 4096 NT_STATUS_OK
ReadX 13476 32768 4096 4096 NT_STATUS_OK
ReadX 13476 36864 4096 4096 NT_STATUS_OK
ReadX 13476 40960 4096 4096 NT_STATUS_OK
ReadX 13476 45056 4096 4096 NT_STATUS_OK
ReadX 13476 49152 4096 4096 NT_STATUS_OK
ReadX 13476 53248 4096 4096 NT_STATUS_OK
ReadX 13476 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13476 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13473 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13479 NT_STATUS_OK
WriteX 13479 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13479 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 57088 57088 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Flush 13479 NT_STATUS_OK
Close 13476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13480 NT_STATUS_OK
SET_FILE_INFORMATION 13480 1004 NT_STATUS_OK
Close 13480 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Close 13479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13483 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13484 NT_STATUS_OK
WriteX 13484 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
WriteX 13484 0 51456 51456 NT_STATUS_OK
WriteX 13484 0 4096 4096 NT_STATUS_OK
Flush 13484 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
WriteX 13484 0 4096 4096 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13488 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13493 NT_STATUS_OK
WriteX 13493 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13493 258 NT_STATUS_OK
WriteX 13493 0 53077 53077 NT_STATUS_OK
Close 13493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13494 NT_STATUS_OK
WriteX 13494 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13494 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 0 65536 65536 NT_STATUS_OK
WriteX 13494 65536 1856 1856 NT_STATUS_OK
WriteX 13494 0 4096 4096 NT_STATUS_OK
Flush 13494 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 0 4096 4096 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13496 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13503 NT_STATUS_OK
WriteX 13503 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 258 NT_STATUS_OK
WriteX 13503 0 7983 7983 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13508 NT_STATUS_OK
WriteX 13508 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13508 258 NT_STATUS_OK
WriteX 13508 0 65536 65536 NT_STATUS_OK
WriteX 13508 65536 65536 65536 NT_STATUS_OK
WriteX 13508 131072 65536 65536 NT_STATUS_OK
WriteX 13508 196608 65536 65536 NT_STATUS_OK
WriteX 13508 262144 65536 65536 NT_STATUS_OK
WriteX 13508 327680 65536 65536 NT_STATUS_OK
WriteX 13508 393216 65536 65536 NT_STATUS_OK
WriteX 13508 458752 46731 46731 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13509 NT_STATUS_OK
WriteX 13509 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13509 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13498 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13509 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
WriteX 13509 0 65536 65536 NT_STATUS_OK
WriteX 13509 65536 22848 22848 NT_STATUS_OK
WriteX 13509 0 4096 4096 NT_STATUS_OK
Flush 13509 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
WriteX 13509 0 4096 4096 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13513 NT_STATUS_OK
ReadX 13513 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13513 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13514 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
ReadX 13514 8192 4096 4096 NT_STATUS_OK
ReadX 13514 12288 4096 4096 NT_STATUS_OK
ReadX 13514 16384 4096 4096 NT_STATUS_OK
ReadX 13514 20480 4096 4096 NT_STATUS_OK
ReadX 13514 24576 4096 4096 NT_STATUS_OK
ReadX 13514 28672 4096 4096 NT_STATUS_OK
ReadX 13514 32768 4096 4096 NT_STATUS_OK
ReadX 13514 36864 4096 4096 NT_STATUS_OK
ReadX 13514 40960 4096 4096 NT_STATUS_OK
ReadX 13514 45056 4096 4096 NT_STATUS_OK
ReadX 13514 49152 4096 4096 NT_STATUS_OK
ReadX 13514 53248 4096 4096 NT_STATUS_OK
ReadX 13514 57344 4096 4096 NT_STATUS_OK
ReadX 13514 61440 4096 4096 NT_STATUS_OK
ReadX 13514 65536 4096 4096 NT_STATUS_OK
ReadX 13514 69632 4096 4096 NT_STATUS_OK
ReadX 13514 73728 4096 4096 NT_STATUS_OK
ReadX 13514 77824 4096 4096 NT_STATUS_OK
ReadX 13514 81920 4096 4096 NT_STATUS_OK
ReadX 13514 86016 4096 4096 NT_STATUS_OK
ReadX 13514 90112 4096 4096 NT_STATUS_OK
ReadX 13514 94208 4096 4096 NT_STATUS_OK
ReadX 13514 98304 4096 4096 NT_STATUS_OK
ReadX 13514 102400 4096 4096 NT_STATUS_OK
ReadX 13514 106496 4096 4096 NT_STATUS_OK
ReadX 13514 110592 4096 4096 NT_STATUS_OK
ReadX 13514 114688 4096 4096 NT_STATUS_OK
ReadX 13514 118784 4096 4096 NT_STATUS_OK
ReadX 13514 122880 4096 4096 NT_STATUS_OK
ReadX 13514 126976 4096 4096 NT_STATUS_OK
ReadX 13514 131072 4096 4096 NT_STATUS_OK
ReadX 13514 135168 4096 4096 NT_STATUS_OK
ReadX 13514 139264 4096 4096 NT_STATUS_OK
ReadX 13514 143360 4096 4096 NT_STATUS_OK
ReadX 13514 147456 4096 4096 NT_STATUS_OK
ReadX 13514 151552 4096 4096 NT_STATUS_OK
ReadX 13514 155648 4096 4096 NT_STATUS_OK
ReadX 13514 159744 4096 4096 NT_STATUS_OK
ReadX 13514 163840 4096 4096 NT_STATUS_OK
ReadX 13514 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13514 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13517 NT_STATUS_OK
WriteX 13517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13517 258 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13518 NT_STATUS_OK
SET_FILE_INFORMATION 13518 1004 NT_STATUS_OK
Close 13518 NT_STATUS_OK
WriteX 13517 0 42388 42388 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
ReadX 13521 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13522 NT_STATUS_OK
WriteX 13522 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
SET_FILE_INFORMATION 13522 1004 NT_STATUS_OK
WriteX 13522 0 42652 42652 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
ReadX 13526 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13531 NT_STATUS_OK
WriteX 13531 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 258 NT_STATUS_OK
WriteX 13531 0 65536 65536 NT_STATUS_OK
WriteX 13531 65536 49 49 NT_STATUS_OK
Close 13531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 61440 61440 NT_STATUS_OK
ReadX 13532 61440 4096 4096 NT_STATUS_OK
ReadX 13532 65536 61440 61440 NT_STATUS_OK
ReadX 13532 126976 4096 4096 NT_STATUS_OK
ReadX 13532 131072 61440 61440 NT_STATUS_OK
ReadX 13532 192512 4096 4096 NT_STATUS_OK
ReadX 13532 196608 61440 61440 NT_STATUS_OK
ReadX 13532 258048 4096 4096 NT_STATUS_OK
ReadX 13532 262144 61440 61440 NT_STATUS_OK
ReadX 13532 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 61440 61440 NT_STATUS_OK
ReadX 13533 61440 4096 4096 NT_STATUS_OK
ReadX 13533 65536 61440 61440 NT_STATUS_OK
ReadX 13533 126976 4096 4096 NT_STATUS_OK
ReadX 13533 131072 61440 61440 NT_STATUS_OK
ReadX 13533 192512 4096 4096 NT_STATUS_OK
ReadX 13533 196608 61440 61440 NT_STATUS_OK
ReadX 13533 258048 4096 4096 NT_STATUS_OK
ReadX 13533 262144 61440 61440 NT_STATUS_OK
ReadX 13533 323584 4096 4096 NT_STATUS_OK
ReadX 13533 327680 61440 61440 NT_STATUS_OK
ReadX 13533 389120 4096 4096 NT_STATUS_OK
ReadX 13533 393216 61440 61440 NT_STATUS_OK
ReadX 13533 454656 4096 4096 NT_STATUS_OK
ReadX 13533 458752 61440 61440 NT_STATUS_OK
ReadX 13533 520192 4096 4096 NT_STATUS_OK
ReadX 13533 524288 61440 61440 NT_STATUS_OK
ReadX 13533 585728 4096 4096 NT_STATUS_OK
ReadX 13533 589824 61440 61440 NT_STATUS_OK
ReadX 13533 651264 4096 4096 NT_STATUS_OK
ReadX 13533 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 61440 61440 NT_STATUS_OK
ReadX 13534 61440 4096 4096 NT_STATUS_OK
ReadX 13534 65536 61440 61440 NT_STATUS_OK
ReadX 13534 126976 4096 4096 NT_STATUS_OK
ReadX 13534 131072 61440 61440 NT_STATUS_OK
ReadX 13534 192512 4096 4096 NT_STATUS_OK
ReadX 13534 196608 61440 61440 NT_STATUS_OK
ReadX 13534 258048 4096 4096 NT_STATUS_OK
ReadX 13534 262144 61440 61440 NT_STATUS_OK
ReadX 13534 323584 4096 4096 NT_STATUS_OK
ReadX 13534 327680 61440 61440 NT_STATUS_OK
ReadX 13534 389120 4096 4096 NT_STATUS_OK
ReadX 13534 393216 61440 61440 NT_STATUS_OK
ReadX 13534 454656 4096 4096 NT_STATUS_OK
ReadX 13534 458752 61440 61440 NT_STATUS_OK
ReadX 13534 520192 4096 4096 NT_STATUS_OK
ReadX 13534 524288 61440 61440 NT_STATUS_OK
ReadX 13534 585728 4096 4096 NT_STATUS_OK
ReadX 13534 589824 61440 61440 NT_STATUS_OK
ReadX 13534 651264 4096 4096 NT_STATUS_OK
ReadX 13534 655360 61440 61440 NT_STATUS_OK
ReadX 13534 716800 4096 4096 NT_STATUS_OK
ReadX 13534 720896 61440 61440 NT_STATUS_OK
ReadX 13534 782336 4096 4096 NT_STATUS_OK
ReadX 13534 786432 61440 61440 NT_STATUS_OK
ReadX 13534 847872 4096 4096 NT_STATUS_OK
ReadX 13534 851968 61440 61440 NT_STATUS_OK
ReadX 13534 913408 4096 4096 NT_STATUS_OK
ReadX 13534 917504 61440 61440 NT_STATUS_OK
ReadX 13534 978944 4096 4096 NT_STATUS_OK
ReadX 13534 983040 61440 61440 NT_STATUS_OK
ReadX 13534 1044480 4096 4096 NT_STATUS_OK
ReadX 13534 1048576 61440 61440 NT_STATUS_OK
ReadX 13534 1110016 4096 4096 NT_STATUS_OK
ReadX 13534 1114112 61440 61440 NT_STATUS_OK
ReadX 13534 1175552 4096 4096 NT_STATUS_OK
ReadX 13534 1179648 61440 61440 NT_STATUS_OK
ReadX 13534 1241088 4096 4096 NT_STATUS_OK
ReadX 13534 1245184 61440 61440 NT_STATUS_OK
ReadX 13534 1306624 4096 4096 NT_STATUS_OK
ReadX 13534 1310720 61440 61440 NT_STATUS_OK
ReadX 13534 1372160 4096 4096 NT_STATUS_OK
ReadX 13534 1376256 61440 61440 NT_STATUS_OK
ReadX 13534 1437696 4096 4096 NT_STATUS_OK
ReadX 13534 1441792 61440 61440 NT_STATUS_OK
ReadX 13534 1503232 4096 4096 NT_STATUS_OK
ReadX 13534 1507328 61440 61440 NT_STATUS_OK
ReadX 13534 1568768 4096 4096 NT_STATUS_OK
ReadX 13534 1572864 61440 61440 NT_STATUS_OK
ReadX 13534 1634304 4096 4096 NT_STATUS_OK
ReadX 13534 1638400 61440 61440 NT_STATUS_OK
ReadX 13534 1699840 4096 4096 NT_STATUS_OK
ReadX 13534 1703936 61440 61440 NT_STATUS_OK
ReadX 13534 1765376 4096 4096 NT_STATUS_OK
ReadX 13534 1769472 61440 61440 NT_STATUS_OK
ReadX 13534 1830912 4096 4096 NT_STATUS_OK
ReadX 13534 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13536 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
ReadX 13536 2156 24 24 NT_STATUS_OK
ReadX 13536 2139 276 276 NT_STATUS_OK
ReadX 13536 2136 14 14 NT_STATUS_OK
ReadX 13536 2136 7 7 NT_STATUS_OK
ReadX 13536 2138 12 12 NT_STATUS_OK
ReadX 13536 2137 8 8 NT_STATUS_OK
ReadX 13536 2135 15 15 NT_STATUS_OK
ReadX 13536 0 16 16 NT_STATUS_OK
ReadX 13536 16 2048 2048 NT_STATUS_OK
ReadX 13536 2064 2048 2048 NT_STATUS_OK
ReadX 13536 257 2048 2048 NT_STATUS_OK
ReadX 13536 385 2048 2048 NT_STATUS_OK
ReadX 13536 513 2048 2048 NT_STATUS_OK
ReadX 13536 641 2048 2048 NT_STATUS_OK
ReadX 13536 769 2048 2048 NT_STATUS_OK
ReadX 13536 897 2048 2048 NT_STATUS_OK
ReadX 13536 1025 2048 2048 NT_STATUS_OK
ReadX 13536 1153 2048 2048 NT_STATUS_OK
ReadX 13536 1281 2048 2048 NT_STATUS_OK
ReadX 13536 1409 2048 2048 NT_STATUS_OK
ReadX 13536 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13538 NT_STATUS_OK
Close 13538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13541 NT_STATUS_OK
WriteX 13541 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13541 258 NT_STATUS_OK
WriteX 13541 0 10575 10575 NT_STATUS_OK
Flush 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13542 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13546 NT_STATUS_OK
LockX 13546 2147483538 1 NT_STATUS_OK
UnlockX 13546 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 1005 NT_STATUS_OK
ReadX 13546 0 512 512 NT_STATUS_OK
ReadX 13546 512 512 512 NT_STATUS_OK
ReadX 13546 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 1004 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13547 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1005 NT_STATUS_OK
ReadX 13547 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13548 NT_STATUS_OK
LockX 13548 2147483538 1 NT_STATUS_OK
UnlockX 13548 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13548 1005 NT_STATUS_OK
ReadX 13548 0 512 512 NT_STATUS_OK
ReadX 13548 512 512 512 NT_STATUS_OK
ReadX 13548 1024 512 512 NT_STATUS_OK
ReadX 13548 288 20 20 NT_STATUS_OK
ReadX 13548 308 2084 2084 NT_STATUS_OK
ReadX 13548 388 2084 2084 NT_STATUS_OK
ReadX 13548 388 2084 2084 NT_STATUS_OK
ReadX 13535 2157 1386 1386 NT_STATUS_OK
ReadX 13548 2472 399 399 NT_STATUS_OK
ReadX 13548 3072 1536 1536 NT_STATUS_OK
ReadX 13548 544 149 149 NT_STATUS_OK
ReadX 13548 693 485 485 NT_STATUS_OK
Close 13548 NT_STATUS_OK
ReadX 13535 2157 4096 4096 NT_STATUS_OK
ReadX 13535 6253 4096 4096 NT_STATUS_OK
ReadX 13535 10349 4096 4096 NT_STATUS_OK
ReadX 13535 14445 4096 4096 NT_STATUS_OK
ReadX 13535 18541 4096 4096 NT_STATUS_OK
ReadX 13535 22637 256 256 NT_STATUS_OK
ReadX 13535 22893 4096 4096 NT_STATUS_OK
ReadX 13535 26989 4096 4096 NT_STATUS_OK
ReadX 13535 31085 4096 4096 NT_STATUS_OK
ReadX 13535 35181 4096 4096 NT_STATUS_OK
ReadX 13535 39277 4096 4096 NT_STATUS_OK
ReadX 13535 43373 4096 4096 NT_STATUS_OK
ReadX 13535 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13535 2157 1024 1024 NT_STATUS_OK
ReadX 13535 1667 4688 4688 NT_STATUS_OK
ReadX 13535 6355 3516 3516 NT_STATUS_OK
ReadX 13535 9871 16384 16384 NT_STATUS_OK
ReadX 13535 26255 3771 3771 NT_STATUS_OK
ReadX 13535 30026 2048 2048 NT_STATUS_OK
ReadX 13535 32074 1024 1024 NT_STATUS_OK
ReadX 13535 33098 6652 6652 NT_STATUS_OK
ReadX 13535 39750 16384 16384 NT_STATUS_OK
ReadX 13535 56134 10496 10496 NT_STATUS_OK
ReadX 13535 66630 1784 1784 NT_STATUS_OK
ReadX 13535 68414 90 90 NT_STATUS_OK
ReadX 13535 68504 273 273 NT_STATUS_OK
ReadX 13535 68777 1600 1600 NT_STATUS_OK
ReadX 13535 70377 640 640 NT_STATUS_OK
ReadX 13535 71017 1280 1280 NT_STATUS_OK
ReadX 13535 72297 8464 8464 NT_STATUS_OK
ReadX 13535 80761 158 158 NT_STATUS_OK
ReadX 13535 80919 912 912 NT_STATUS_OK
ReadX 13535 81831 1980 1980 NT_STATUS_OK
ReadX 13535 83811 2256 2256 NT_STATUS_OK
ReadX 13535 86067 400 400 NT_STATUS_OK
ReadX 13535 86467 252 252 NT_STATUS_OK
ReadX 13535 86719 42 42 NT_STATUS_OK
ReadX 13535 86761 725 725 NT_STATUS_OK
ReadX 13535 2009 512 512 NT_STATUS_OK
ReadX 13535 3895 9 9 NT_STATUS_OK
ReadX 13535 3781 46 46 NT_STATUS_OK
ReadX 13535 4059 92 92 NT_STATUS_OK
ReadX 13535 3781 92 92 NT_STATUS_OK
ReadX 13535 3986 184 184 NT_STATUS_OK
ReadX 13535 3987 16384 16384 NT_STATUS_OK
ReadX 13535 3902 16384 16384 NT_STATUS_OK
ReadX 13535 3781 10240 10240 NT_STATUS_OK
ReadX 13535 3821 16384 16384 NT_STATUS_OK
ReadX 13535 3891 935 935 NT_STATUS_OK
ReadX 13535 4060 10240 10240 NT_STATUS_OK
ReadX 13535 4059 184 184 NT_STATUS_OK
ReadX 13535 256 184 184 NT_STATUS_OK
ReadX 13535 256 1026 1026 NT_STATUS_OK
ReadX 13535 3901 326 326 NT_STATUS_OK
ReadX 13535 3899 652 652 NT_STATUS_OK
ReadX 13535 256 2 2 NT_STATUS_OK
ReadX 13535 258 4948 4948 NT_STATUS_OK
Close 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13553 NT_STATUS_OK
WriteX 13553 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13553 258 NT_STATUS_OK
WriteX 13553 0 65536 65536 NT_STATUS_OK
WriteX 13553 65536 65536 65536 NT_STATUS_OK
WriteX 13553 131072 65536 65536 NT_STATUS_OK
WriteX 13553 196608 65536 65536 NT_STATUS_OK
WriteX 13553 262144 65536 65536 NT_STATUS_OK
WriteX 13553 327680 65536 65536 NT_STATUS_OK
WriteX 13553 393216 65536 65536 NT_STATUS_OK
WriteX 13553 458752 65536 65536 NT_STATUS_OK
WriteX 13553 524288 65536 65536 NT_STATUS_OK
WriteX 13553 589824 35257 35257 NT_STATUS_OK
Close 13553 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13558 NT_STATUS_OK
WriteX 13558 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13558 258 NT_STATUS_OK
WriteX 13558 0 65536 65536 NT_STATUS_OK
WriteX 13558 65536 65536 65536 NT_STATUS_OK
WriteX 13558 131072 65536 65536 NT_STATUS_OK
WriteX 13558 196608 65536 65536 NT_STATUS_OK
WriteX 13558 262144 65536 65536 NT_STATUS_OK
WriteX 13558 327680 65536 65536 NT_STATUS_OK
WriteX 13558 393216 65536 65536 NT_STATUS_OK
WriteX 13558 458752 65536 65536 NT_STATUS_OK
WriteX 13558 524288 65536 65536 NT_STATUS_OK
WriteX 13558 589824 57598 57598 NT_STATUS_OK
Close 13558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13560 NT_STATUS_OK
WriteX 13560 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13560 258 NT_STATUS_OK
WriteX 13560 0 12543 12543 NT_STATUS_OK
Flush 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13564 NT_STATUS_OK
ReadX 13564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13566 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 1005 NT_STATUS_OK
ReadX 13566 1938 24 24 NT_STATUS_OK
ReadX 13566 1920 276 276 NT_STATUS_OK
ReadX 13566 1918 14 14 NT_STATUS_OK
ReadX 13566 1918 7 7 NT_STATUS_OK
ReadX 13566 1919 12 12 NT_STATUS_OK
ReadX 13566 1919 8 8 NT_STATUS_OK
ReadX 13566 1917 15 15 NT_STATUS_OK
ReadX 13566 0 16 16 NT_STATUS_OK
ReadX 13566 16 2048 2048 NT_STATUS_OK
ReadX 13566 2064 2048 2048 NT_STATUS_OK
ReadX 13566 257 2048 2048 NT_STATUS_OK
ReadX 13566 385 2048 2048 NT_STATUS_OK
ReadX 13566 513 2048 2048 NT_STATUS_OK
ReadX 13566 641 2048 2048 NT_STATUS_OK
ReadX 13566 769 2048 2048 NT_STATUS_OK
ReadX 13566 897 2048 2048 NT_STATUS_OK
ReadX 13566 1025 2048 2048 NT_STATUS_OK
ReadX 13566 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13571 NT_STATUS_OK
WriteX 13571 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13571 258 NT_STATUS_OK
WriteX 13571 0 11588 11588 NT_STATUS_OK
Flush 13571 NT_STATUS_OK
Close 13571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13572 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
Close 13566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13576 NT_STATUS_OK
WriteX 13576 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 258 NT_STATUS_OK
WriteX 13576 0 11615 11615 NT_STATUS_OK
Flush 13576 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13578 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13582 NT_STATUS_OK
Close 13582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13585 NT_STATUS_OK
WriteX 13585 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13585 258 NT_STATUS_OK
WriteX 13585 0 65536 65536 NT_STATUS_OK
WriteX 13585 65536 16050 16050 NT_STATUS_OK
Close 13585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13565 1939 64 64 NT_STATUS_OK
ReadX 13565 128 248 248 NT_STATUS_OK
ReadX 13565 128 568 568 NT_STATUS_OK
ReadX 13565 3872 1536 1536 NT_STATUS_OK
ReadX 13565 3456 2560 2560 NT_STATUS_OK
ReadX 13565 3136 512 512 NT_STATUS_OK
ReadX 13565 2880 4096 4096 NT_STATUS_OK
ReadX 13565 3264 3072 3072 NT_STATUS_OK
ReadX 13565 320 4096 4096 NT_STATUS_OK
ReadX 13565 1024 4096 4096 NT_STATUS_OK
ReadX 13565 3616 4096 4096 NT_STATUS_OK
ReadX 13565 1939 64 64 NT_STATUS_OK
ReadX 13565 128 248 248 NT_STATUS_OK
ReadX 13565 128 608 608 NT_STATUS_OK
ReadX 13565 2858 1024 1024 NT_STATUS_OK
ReadX 13565 2810 4096 4096 NT_STATUS_OK
ReadX 13565 2826 4096 4096 NT_STATUS_OK
ReadX 13565 2580 2048 2048 NT_STATUS_OK
ReadX 13565 2800 2560 2560 NT_STATUS_OK
ReadX 13565 2100 4096 4096 NT_STATUS_OK
ReadX 13565 2084 4096 4096 NT_STATUS_OK
ReadX 13565 868 4096 4096 NT_STATUS_OK
ReadX 13565 2324 4096 4096 NT_STATUS_OK
ReadX 13565 884 4096 4096 NT_STATUS_OK
ReadX 13565 2604 1024 1024 NT_STATUS_OK
ReadX 13565 580 4096 4096 NT_STATUS_OK
ReadX 13565 596 4096 4096 NT_STATUS_OK
ReadX 13565 2752 4096 4096 NT_STATUS_OK
ReadX 13565 2842 1024 1024 NT_STATUS_OK
ReadX 13565 660 4096 4096 NT_STATUS_OK
ReadX 13565 2720 4096 4096 NT_STATUS_OK
ReadX 13565 2736 4096 4096 NT_STATUS_OK
ReadX 13565 628 4096 4096 NT_STATUS_OK
ReadX 13565 2704 4096 4096 NT_STATUS_OK
ReadX 13565 1556 4096 4096 NT_STATUS_OK
ReadX 13565 576 4096 4096 NT_STATUS_OK
ReadX 13565 3168 1536 1536 NT_STATUS_OK
ReadX 13565 832 4096 4096 NT_STATUS_OK
ReadX 13565 1088 4096 4096 NT_STATUS_OK
ReadX 13565 1344 4096 4096 NT_STATUS_OK
ReadX 13565 1600 4096 4096 NT_STATUS_OK
ReadX 13565 1856 4096 4096 NT_STATUS_OK
ReadX 13565 2112 4096 4096 NT_STATUS_OK
ReadX 13565 1892 4096 4096 NT_STATUS_OK
ReadX 13565 820 4096 4096 NT_STATUS_OK
ReadX 13565 788 4096 4096 NT_STATUS_OK
ReadX 13565 1604 4096 4096 NT_STATUS_OK
ReadX 13565 3648 4096 4096 NT_STATUS_OK
ReadX 13565 2608 4096 4096 NT_STATUS_OK
ReadX 13565 548 4096 4096 NT_STATUS_OK
ReadX 13565 740 4096 4096 NT_STATUS_OK
ReadX 13565 1344 4096 4096 NT_STATUS_OK
ReadX 13565 3392 4096 4096 NT_STATUS_OK
ReadX 13565 3904 4096 4096 NT_STATUS_OK
ReadX 13565 644 4096 4096 NT_STATUS_OK
ReadX 13565 676 4096 4096 NT_STATUS_OK
ReadX 13565 2688 4096 4096 NT_STATUS_OK
ReadX 13565 320 4096 4096 NT_STATUS_OK
ReadX 13565 900 4096 4096 NT_STATUS_OK
ReadX 13565 1908 4096 4096 NT_STATUS_OK
ReadX 13565 852 4096 4096 NT_STATUS_OK
ReadX 13565 724 4096 4096 NT_STATUS_OK
ReadX 13565 2292 4096 4096 NT_STATUS_OK
ReadX 13565 612 4096 4096 NT_STATUS_OK
ReadX 13565 388 4096 4096 NT_STATUS_OK
ReadX 13565 2368 4096 4096 NT_STATUS_OK
ReadX 13565 2624 4096 4096 NT_STATUS_OK
ReadX 13565 500 4096 4096 NT_STATUS_OK
ReadX 13565 356 4096 4096 NT_STATUS_OK
ReadX 13565 1024 4096 4096 NT_STATUS_OK
ReadX 13565 576 4096 4096 NT_STATUS_OK
ReadX 13565 340 4096 4096 NT_STATUS_OK
ReadX 13565 420 4096 4096 NT_STATUS_OK
ReadX 13565 1600 4096 4096 NT_STATUS_OK
ReadX 13565 404 4096 4096 NT_STATUS_OK
ReadX 13565 1428 4096 4096 NT_STATUS_OK
ReadX 13565 2656 4096 4096 NT_STATUS_OK
ReadX 13565 2624 4096 4096 NT_STATUS_OK
ReadX 13565 452 4096 4096 NT_STATUS_OK
ReadX 13565 692 4096 4096 NT_STATUS_OK
ReadX 13565 564 4096 4096 NT_STATUS_OK
ReadX 13565 372 4096 4096 NT_STATUS_OK
ReadX 13565 468 4096 4096 NT_STATUS_OK
ReadX 13565 484 4096 4096 NT_STATUS_OK
ReadX 13565 1088 4096 4096 NT_STATUS_OK
ReadX 13565 1924 4096 4096 NT_STATUS_OK
ReadX 13565 2768 4096 4096 NT_STATUS_OK
ReadX 13565 832 4096 4096 NT_STATUS_OK
ReadX 13565 836 4096 4096 NT_STATUS_OK
ReadX 13565 1856 4096 4096 NT_STATUS_OK
ReadX 13565 2640 4096 4096 NT_STATUS_OK
ReadX 13565 436 4096 4096 NT_STATUS_OK
ReadX 13565 1828 4096 4096 NT_STATUS_OK
ReadX 13565 804 4096 4096 NT_STATUS_OK
ReadX 13565 1860 4096 4096 NT_STATUS_OK
ReadX 13565 1812 4096 4096 NT_STATUS_OK
ReadX 13565 756 4096 4096 NT_STATUS_OK
ReadX 13565 1636 4096 4096 NT_STATUS_OK
ReadX 13565 772 4096 4096 NT_STATUS_OK
ReadX 13565 2036 4096 4096 NT_STATUS_OK
ReadX 13565 1220 4096 4096 NT_STATUS_OK
ReadX 13565 1652 4096 4096 NT_STATUS_OK
ReadX 13565 2588 4096 4096 NT_STATUS_OK
ReadX 13565 916 4096 4096 NT_STATUS_OK
ReadX 13565 260 4096 4096 NT_STATUS_OK
ReadX 13565 932 4096 4096 NT_STATUS_OK
ReadX 13565 2624 4096 4096 NT_STATUS_OK
ReadX 13565 308 4096 4096 NT_STATUS_OK
ReadX 13565 292 4096 4096 NT_STATUS_OK
ReadX 13565 1140 4096 4096 NT_STATUS_OK
ReadX 13565 276 4096 4096 NT_STATUS_OK
ReadX 13565 2020 4096 4096 NT_STATUS_OK
ReadX 13565 2880 4096 4096 NT_STATUS_OK
ReadX 13565 516 4096 4096 NT_STATUS_OK
ReadX 13565 1844 4096 4096 NT_STATUS_OK
ReadX 13565 1124 4096 4096 NT_STATUS_OK
ReadX 13565 3136 4096 4096 NT_STATUS_OK
ReadX 13565 324 4096 4096 NT_STATUS_OK
ReadX 13565 1156 4096 4096 NT_STATUS_OK
ReadX 13565 1172 4096 4096 NT_STATUS_OK
ReadX 13565 2112 4096 4096 NT_STATUS_OK
ReadX 13565 2368 4096 4096 NT_STATUS_OK
ReadX 13565 964 4096 4096 NT_STATUS_OK
ReadX 13565 980 4096 4096 NT_STATUS_OK
ReadX 13565 1012 4096 4096 NT_STATUS_OK
ReadX 13565 532 4096 4096 NT_STATUS_OK
ReadX 13565 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13565 1620 4096 4096 NT_STATUS_OK
ReadX 13565 1604 4096 4096 NT_STATUS_OK
ReadX 13565 2116 4096 4096 NT_STATUS_OK
ReadX 13565 2132 4096 4096 NT_STATUS_OK
ReadX 13565 2148 4096 4096 NT_STATUS_OK
ReadX 13565 2276 4096 4096 NT_STATUS_OK
ReadX 13565 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13587 NT_STATUS_OK
Close 13587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13590 NT_STATUS_OK
QUERY_FILE_INFORMATION 13545 1004 NT_STATUS_OK
Close 13545 NT_STATUS_OK
WriteX 13590 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1004 NT_STATUS_OK
Close 13547 NT_STATUS_OK
WriteX 13590 0 65536 65536 NT_STATUS_OK
WriteX 13590 65536 64850 64850 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13592 NT_STATUS_OK
WriteX 13592 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13592 258 NT_STATUS_OK
ReadX 13565 2068 4096 4096 NT_STATUS_OK
ReadX 13565 1588 4096 4096 NT_STATUS_OK
ReadX 13565 1572 4096 4096 NT_STATUS_OK
WriteX 13592 0 18630 18630 NT_STATUS_OK
Flush 13592 NT_STATUS_OK
Close 13592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13565 612 4096 4096 NT_STATUS_OK
ReadX 13565 564 4096 4096 NT_STATUS_OK
ReadX 13565 1876 4096 4096 NT_STATUS_OK
ReadX 13565 628 4096 4096 NT_STATUS_OK
ReadX 13565 740 4096 4096 NT_STATUS_OK
ReadX 13565 724 4096 4096 NT_STATUS_OK
ReadX 13565 644 4096 4096 NT_STATUS_OK
ReadX 13565 2324 4096 4096 NT_STATUS_OK
ReadX 13565 660 4096 4096 NT_STATUS_OK
ReadX 13565 852 4096 4096 NT_STATUS_OK
ReadX 13565 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13565 2368 4096 4096 NT_STATUS_OK
ReadX 13565 1024 4096 4096 NT_STATUS_OK
ReadX 13565 320 4096 4096 NT_STATUS_OK
ReadX 13565 580 4096 4096 NT_STATUS_OK
ReadX 13565 3136 512 512 NT_STATUS_OK
ReadX 13565 2880 4096 4096 NT_STATUS_OK
Close 13565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 61440 4096 4096 NT_STATUS_OK
ReadX 13597 126976 4096 4096 NT_STATUS_OK
WriteX 13597 0 65536 65536 NT_STATUS_OK
WriteX 13597 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 61440 4096 4096 NT_STATUS_OK
ReadX 13598 126976 4096 4096 NT_STATUS_OK
ReadX 13598 192512 4096 4096 NT_STATUS_OK
ReadX 13598 258048 4096 4096 NT_STATUS_OK
WriteX 13598 0 65536 65536 NT_STATUS_OK
WriteX 13598 65536 65536 65536 NT_STATUS_OK
WriteX 13598 131072 65536 65536 NT_STATUS_OK
WriteX 13598 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 61440 4096 4096 NT_STATUS_OK
ReadX 13599 126976 4096 4096 NT_STATUS_OK
ReadX 13599 192512 4096 4096 NT_STATUS_OK
ReadX 13599 258048 4096 4096 NT_STATUS_OK
ReadX 13599 323584 4096 4096 NT_STATUS_OK
ReadX 13599 389120 4096 4096 NT_STATUS_OK
ReadX 13599 454656 4096 4096 NT_STATUS_OK
ReadX 13599 520192 4096 4096 NT_STATUS_OK
WriteX 13599 0 65536 65536 NT_STATUS_OK
WriteX 13599 65536 65536 65536 NT_STATUS_OK
WriteX 13599 131072 65536 65536 NT_STATUS_OK
WriteX 13599 196608 65536 65536 NT_STATUS_OK
WriteX 13599 262144 65536 65536 NT_STATUS_OK
WriteX 13599 327680 65536 65536 NT_STATUS_OK
WriteX 13599 393216 65536 65536 NT_STATUS_OK
WriteX 13599 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13601 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13602 NT_STATUS_OK
WriteX 13602 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13600 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13598 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13607 NT_STATUS_OK
WriteX 13607 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 258 NT_STATUS_OK
WriteX 13607 0 62591 62591 NT_STATUS_OK
Close 13607 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13612 NT_STATUS_OK
WriteX 13612 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13612 258 NT_STATUS_OK
WriteX 13612 0 10845 10845 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13617 NT_STATUS_OK
WriteX 13617 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13617 258 NT_STATUS_OK
WriteX 13617 0 30118 30118 NT_STATUS_OK
Close 13617 NT_STATUS_OK
WriteX 13600 0 4096 4096 NT_STATUS_OK
WriteX 13602 0 64 64 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 61440 61440 NT_STATUS_OK
ReadX 13619 61440 4096 4096 NT_STATUS_OK
ReadX 13619 65536 61440 61440 NT_STATUS_OK
ReadX 13619 126976 4096 4096 NT_STATUS_OK
ReadX 13619 131072 61440 61440 NT_STATUS_OK
ReadX 13619 192512 4096 4096 NT_STATUS_OK
ReadX 13619 196608 61440 61440 NT_STATUS_OK
ReadX 13619 258048 4096 4096 NT_STATUS_OK
ReadX 13619 262144 61440 61440 NT_STATUS_OK
ReadX 13619 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 61440 61440 NT_STATUS_OK
ReadX 13620 61440 4096 4096 NT_STATUS_OK
ReadX 13620 65536 61440 61440 NT_STATUS_OK
ReadX 13620 126976 4096 4096 NT_STATUS_OK
ReadX 13620 131072 61440 61440 NT_STATUS_OK
ReadX 13620 192512 4096 4096 NT_STATUS_OK
ReadX 13620 196608 61440 61440 NT_STATUS_OK
ReadX 13620 258048 4096 4096 NT_STATUS_OK
ReadX 13620 262144 61440 61440 NT_STATUS_OK
ReadX 13620 323584 4096 4096 NT_STATUS_OK
ReadX 13620 327680 61440 61440 NT_STATUS_OK
ReadX 13620 389120 4096 4096 NT_STATUS_OK
ReadX 13620 393216 61440 61440 NT_STATUS_OK
ReadX 13620 454656 4096 4096 NT_STATUS_OK
ReadX 13620 458752 61440 61440 NT_STATUS_OK
ReadX 13620 520192 4096 4096 NT_STATUS_OK
ReadX 13620 524288 61440 61440 NT_STATUS_OK
ReadX 13620 585728 4096 4096 NT_STATUS_OK
ReadX 13620 589824 61440 61440 NT_STATUS_OK
ReadX 13620 651264 4096 4096 NT_STATUS_OK
ReadX 13620 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 61440 61440 NT_STATUS_OK
ReadX 13621 61440 4096 4096 NT_STATUS_OK
ReadX 13621 65536 61440 61440 NT_STATUS_OK
ReadX 13621 126976 4096 4096 NT_STATUS_OK
ReadX 13621 131072 61440 61440 NT_STATUS_OK
ReadX 13621 192512 4096 4096 NT_STATUS_OK
ReadX 13621 196608 61440 61440 NT_STATUS_OK
ReadX 13621 258048 4096 4096 NT_STATUS_OK
ReadX 13621 262144 61440 61440 NT_STATUS_OK
ReadX 13621 323584 4096 4096 NT_STATUS_OK
ReadX 13621 327680 61440 61440 NT_STATUS_OK
ReadX 13621 389120 4096 4096 NT_STATUS_OK
ReadX 13621 393216 61440 61440 NT_STATUS_OK
ReadX 13621 454656 4096 4096 NT_STATUS_OK
ReadX 13621 458752 61440 61440 NT_STATUS_OK
ReadX 13621 520192 4096 4096 NT_STATUS_OK
ReadX 13621 524288 61440 61440 NT_STATUS_OK
ReadX 13621 585728 4096 4096 NT_STATUS_OK
ReadX 13621 589824 61440 61440 NT_STATUS_OK
ReadX 13621 651264 4096 4096 NT_STATUS_OK
ReadX 13621 655360 61440 61440 NT_STATUS_OK
ReadX 13621 716800 4096 4096 NT_STATUS_OK
ReadX 13621 720896 61440 61440 NT_STATUS_OK
ReadX 13621 782336 4096 4096 NT_STATUS_OK
ReadX 13621 786432 61440 61440 NT_STATUS_OK
ReadX 13621 847872 4096 4096 NT_STATUS_OK
ReadX 13621 851968 61440 61440 NT_STATUS_OK
ReadX 13621 913408 4096 4096 NT_STATUS_OK
ReadX 13621 917504 61440 61440 NT_STATUS_OK
ReadX 13621 978944 4096 4096 NT_STATUS_OK
ReadX 13621 983040 61440 61440 NT_STATUS_OK
ReadX 13621 1044480 4096 4096 NT_STATUS_OK
ReadX 13621 1048576 61440 61440 NT_STATUS_OK
ReadX 13621 1110016 4096 4096 NT_STATUS_OK
ReadX 13621 1114112 61440 61440 NT_STATUS_OK
ReadX 13621 1175552 4096 4096 NT_STATUS_OK
ReadX 13621 1179648 61440 61440 NT_STATUS_OK
ReadX 13621 1241088 4096 4096 NT_STATUS_OK
ReadX 13621 1245184 61440 61440 NT_STATUS_OK
ReadX 13621 1306624 4096 4096 NT_STATUS_OK
ReadX 13621 1310720 61440 61440 NT_STATUS_OK
ReadX 13621 1372160 4096 4096 NT_STATUS_OK
ReadX 13621 1376256 61440 61440 NT_STATUS_OK
ReadX 13621 1437696 4096 4096 NT_STATUS_OK
ReadX 13621 1441792 61440 61440 NT_STATUS_OK
ReadX 13621 1503232 4096 4096 NT_STATUS_OK
ReadX 13621 1507328 61440 61440 NT_STATUS_OK
ReadX 13621 1568768 4096 4096 NT_STATUS_OK
ReadX 13621 1572864 61440 61440 NT_STATUS_OK
ReadX 13621 1634304 4096 4096 NT_STATUS_OK
ReadX 13621 1638400 61440 61440 NT_STATUS_OK
ReadX 13621 1699840 4096 4096 NT_STATUS_OK
ReadX 13621 1703936 61440 61440 NT_STATUS_OK
ReadX 13621 1765376 4096 4096 NT_STATUS_OK
ReadX 13621 1769472 61440 61440 NT_STATUS_OK
ReadX 13621 1830912 4096 4096 NT_STATUS_OK
ReadX 13621 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13626 NT_STATUS_OK
ReadX 13626 0 4096 4096 NT_STATUS_OK
ReadX 13626 4096 4096 4096 NT_STATUS_OK
ReadX 13626 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13630 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 8192 8192 NT_STATUS_OK
ReadX 13634 8192 8192 8192 NT_STATUS_OK
ReadX 13634 16384 8192 8192 NT_STATUS_OK
ReadX 13634 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13634 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13639 NT_STATUS_OK
WriteX 13639 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13639 258 NT_STATUS_OK
WriteX 13639 0 10438 10438 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13643 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13644 NT_STATUS_OK
Close 13644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13645 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
ReadX 13648 4096 4096 4096 NT_STATUS_OK
ReadX 13648 8192 4096 4096 NT_STATUS_OK
ReadX 13648 12288 8192 8192 NT_STATUS_OK
ReadX 13648 20480 8192 8192 NT_STATUS_OK
ReadX 13648 28672 8192 8192 NT_STATUS_OK
ReadX 13648 36864 8192 8192 NT_STATUS_OK
ReadX 13648 45056 8192 8192 NT_STATUS_OK
ReadX 13648 53248 8192 8192 NT_STATUS_OK
ReadX 13648 61440 8192 8192 NT_STATUS_OK
ReadX 13648 69632 8192 8192 NT_STATUS_OK
ReadX 13648 77824 8192 8192 NT_STATUS_OK
ReadX 13648 86016 8192 8192 NT_STATUS_OK
ReadX 13648 94208 8192 8192 NT_STATUS_OK
ReadX 13648 102400 8192 8192 NT_STATUS_OK
ReadX 13648 110592 8192 8192 NT_STATUS_OK
ReadX 13648 118784 8192 8192 NT_STATUS_OK
ReadX 13648 126976 8192 8192 NT_STATUS_OK
ReadX 13648 135168 8192 8192 NT_STATUS_OK
ReadX 13648 143360 8192 8192 NT_STATUS_OK
ReadX 13648 151552 8192 8192 NT_STATUS_OK
ReadX 13648 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13653 NT_STATUS_OK
WriteX 13653 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 258 NT_STATUS_OK
WriteX 13653 0 28489 28489 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13654 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13656 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13657 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 8192 8192 NT_STATUS_OK
ReadX 13660 8192 8192 8192 NT_STATUS_OK
ReadX 13660 16384 8192 8192 NT_STATUS_OK
ReadX 13660 24576 8192 8192 NT_STATUS_OK
ReadX 13660 32768 16384 16384 NT_STATUS_OK
ReadX 13660 49152 8192 8192 NT_STATUS_OK
ReadX 13660 57344 8192 8192 NT_STATUS_OK
ReadX 13660 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13665 NT_STATUS_OK
WriteX 13665 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 258 NT_STATUS_OK
WriteX 13665 0 29253 29253 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13666 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13672 NT_STATUS_OK
WriteX 13672 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13672 258 NT_STATUS_OK
WriteX 13672 0 30183 30183 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13675 NT_STATUS_OK
WriteX 13675 0 510 510 NT_STATUS_OK
WriteX 13675 510 512 512 NT_STATUS_OK
WriteX 13675 1022 510 510 NT_STATUS_OK
WriteX 13675 1532 510 510 NT_STATUS_OK
WriteX 13675 2042 168 168 NT_STATUS_OK
Close 13675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13676 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 61440 4096 4096 NT_STATUS_OK
ReadX 13679 126976 4096 4096 NT_STATUS_OK
WriteX 13679 0 65536 65536 NT_STATUS_OK
WriteX 13679 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 61440 4096 4096 NT_STATUS_OK
ReadX 13680 126976 4096 4096 NT_STATUS_OK
ReadX 13680 192512 4096 4096 NT_STATUS_OK
ReadX 13680 258048 4096 4096 NT_STATUS_OK
WriteX 13680 0 65536 65536 NT_STATUS_OK
WriteX 13680 65536 65536 65536 NT_STATUS_OK
WriteX 13680 131072 65536 65536 NT_STATUS_OK
WriteX 13680 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 61440 4096 4096 NT_STATUS_OK
ReadX 13681 126976 4096 4096 NT_STATUS_OK
ReadX 13681 192512 4096 4096 NT_STATUS_OK
ReadX 13681 258048 4096 4096 NT_STATUS_OK
ReadX 13681 323584 4096 4096 NT_STATUS_OK
ReadX 13681 389120 4096 4096 NT_STATUS_OK
ReadX 13681 454656 4096 4096 NT_STATUS_OK
ReadX 13681 520192 4096 4096 NT_STATUS_OK
WriteX 13681 0 65536 65536 NT_STATUS_OK
WriteX 13681 65536 65536 65536 NT_STATUS_OK
WriteX 13681 131072 65536 65536 NT_STATUS_OK
WriteX 13681 196608 65536 65536 NT_STATUS_OK
WriteX 13681 262144 65536 65536 NT_STATUS_OK
WriteX 13681 327680 65536 65536 NT_STATUS_OK
WriteX 13681 393216 65536 65536 NT_STATUS_OK
WriteX 13681 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13688 NT_STATUS_OK
Close 13688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13697 NT_STATUS_OK
Close 13697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13706 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13731 NT_STATUS_OK
Close 13731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13744 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13750 NT_STATUS_OK
WriteX 13750 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13750 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13750 0 65536 65536 NT_STATUS_OK
WriteX 13750 65536 65536 65536 NT_STATUS_OK
WriteX 13750 131072 65536 65536 NT_STATUS_OK
WriteX 13750 196608 65536 65536 NT_STATUS_OK
WriteX 13750 262144 26634 26634 NT_STATUS_OK
Close 13750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
ReadX 13758 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13766 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13775 NT_STATUS_OK
Close 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13781 NT_STATUS_OK
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13815 NT_STATUS_OK
Close 13815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13825 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13835 NT_STATUS_OK
Close 13835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
Close 13837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
Close 13838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13851 NT_STATUS_OK
ReadX 13851 0 4096 4096 NT_STATUS_OK
Close 13851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13852 NT_STATUS_OK
ReadX 13852 0 4096 4096 NT_STATUS_OK
Close 13852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13839 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13882 0 4096 4096 NT_STATUS_OK
Close 13882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
ReadX 13884 4096 4096 4096 NT_STATUS_OK
ReadX 13884 8192 4096 4096 NT_STATUS_OK
ReadX 13884 12288 4096 4096 NT_STATUS_OK
ReadX 13884 16384 4096 4096 NT_STATUS_OK
ReadX 13884 20480 4096 4096 NT_STATUS_OK
ReadX 13884 24576 4096 4096 NT_STATUS_OK
ReadX 13884 28672 4096 4096 NT_STATUS_OK
ReadX 13884 32768 4096 4096 NT_STATUS_OK
ReadX 13884 36864 4096 4096 NT_STATUS_OK
ReadX 13884 40960 4096 4096 NT_STATUS_OK
ReadX 13884 45056 4096 4096 NT_STATUS_OK
ReadX 13884 49152 4096 4096 NT_STATUS_OK
ReadX 13884 53248 4096 4096 NT_STATUS_OK
ReadX 13884 57344 4096 4096 NT_STATUS_OK
ReadX 13884 61440 4096 4096 NT_STATUS_OK
ReadX 13884 65536 4096 4096 NT_STATUS_OK
ReadX 13884 69632 4096 4096 NT_STATUS_OK
ReadX 13884 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13884 1004 NT_STATUS_OK
WriteX 13884 0 4096 4096 NT_STATUS_OK
Close 13884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13885 NT_STATUS_OK
SET_FILE_INFORMATION 13885 1004 NT_STATUS_OK
Close 13885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13890 NT_STATUS_OK
WriteX 13890 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13890 258 NT_STATUS_OK
WriteX 13890 0 65536 65536 NT_STATUS_OK
WriteX 13890 65536 19979 19979 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
QUERY_FILE_INFORMATION 13891 1004 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
SET_FILE_INFORMATION 13891 1004 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13896 1004 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13897 NT_STATUS_OK
Close 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13899 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13902 NT_STATUS_OK
WriteX 13902 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13902 258 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 17654 17654 NT_STATUS_OK
Close 13902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
QUERY_FILE_INFORMATION 13903 1004 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
SET_FILE_INFORMATION 13903 1004 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13904 NT_STATUS_OK
SET_FILE_INFORMATION 13904 1004 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13906 NT_STATUS_OK
Close 13906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 4096 4096 NT_STATUS_OK
ReadX 13908 4096 4096 4096 NT_STATUS_OK
ReadX 13908 8192 4096 4096 NT_STATUS_OK
ReadX 13908 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13908 16384 4096 4096 NT_STATUS_OK
ReadX 13908 20480 4096 4096 NT_STATUS_OK
ReadX 13908 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13909 NT_STATUS_OK
ReadX 13909 0 4096 4096 NT_STATUS_OK
Close 13909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13911 1004 NT_STATUS_OK
WriteX 13911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13917 NT_STATUS_OK
WriteX 13917 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13917 258 NT_STATUS_OK
WriteX 13917 0 65536 65536 NT_STATUS_OK
WriteX 13917 65536 19490 19490 NT_STATUS_OK
Close 13917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13918 NT_STATUS_OK
ReadX 13918 0 4096 4096 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 1004 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
SET_FILE_INFORMATION 13918 1004 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13919 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13921 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13923 0 4096 4096 NT_STATUS_OK
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
ReadX 13925 4096 4096 4096 NT_STATUS_OK
ReadX 13925 8192 4096 4096 NT_STATUS_OK
ReadX 13925 12288 4096 4096 NT_STATUS_OK
ReadX 13925 16384 4096 4096 NT_STATUS_OK
ReadX 13925 20480 4096 4096 NT_STATUS_OK
ReadX 13925 24576 4096 4096 NT_STATUS_OK
ReadX 13925 28672 4096 4096 NT_STATUS_OK
ReadX 13925 32768 4096 4096 NT_STATUS_OK
ReadX 13925 36864 4096 4096 NT_STATUS_OK
ReadX 13925 40960 4096 4096 NT_STATUS_OK
ReadX 13925 45056 4096 4096 NT_STATUS_OK
ReadX 13925 49152 4096 4096 NT_STATUS_OK
ReadX 13925 53248 4096 4096 NT_STATUS_OK
ReadX 13925 57344 4096 4096 NT_STATUS_OK
ReadX 13925 61440 4096 4096 NT_STATUS_OK
ReadX 13925 65536 4096 4096 NT_STATUS_OK
ReadX 13925 69632 4096 4096 NT_STATUS_OK
ReadX 13925 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13925 1004 NT_STATUS_OK
WriteX 13925 0 4096 4096 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13926 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
Close 13926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13931 NT_STATUS_OK
WriteX 13931 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 65536 65536 NT_STATUS_OK
WriteX 13931 65536 8866 8866 NT_STATUS_OK
Close 13931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Flush 13932 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Flush 13932 NT_STATUS_OK
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13936 1004 NT_STATUS_OK
WriteX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13937 NT_STATUS_OK
Close 13937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13939 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13942 NT_STATUS_OK
WriteX 13942 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13942 258 NT_STATUS_OK
WriteX 13942 0 65536 65536 NT_STATUS_OK
WriteX 13942 65536 9298 9298 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
Flush 13943 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
Flush 13943 NT_STATUS_OK
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13944 NT_STATUS_OK
SET_FILE_INFORMATION 13944 1004 NT_STATUS_OK
Close 13944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13946 NT_STATUS_OK
Close 13946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13949 0 4096 4096 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13950 4096 4096 4096 NT_STATUS_OK
ReadX 13950 8192 4096 4096 NT_STATUS_OK
ReadX 13950 12288 4096 4096 NT_STATUS_OK
ReadX 13950 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 4096 4096 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13952 NT_STATUS_OK
ReadX 13952 0 4096 4096 NT_STATUS_OK
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13953 1004 NT_STATUS_OK
WriteX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13954 NT_STATUS_OK
Close 13954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13950 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13959 NT_STATUS_OK
WriteX 13959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13959 258 NT_STATUS_OK
WriteX 13959 0 65536 65536 NT_STATUS_OK
WriteX 13959 65536 11540 11540 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
WriteX 13960 0 4096 4096 NT_STATUS_OK
Flush 13960 NT_STATUS_OK
SET_FILE_INFORMATION 13960 1004 NT_STATUS_OK
WriteX 13960 0 4096 4096 NT_STATUS_OK
Flush 13960 NT_STATUS_OK
Close 13960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13961 NT_STATUS_OK
SET_FILE_INFORMATION 13961 1004 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 61440 4096 4096 NT_STATUS_OK
ReadX 13965 126976 4096 4096 NT_STATUS_OK
WriteX 13965 0 65536 65536 NT_STATUS_OK
WriteX 13965 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 61440 4096 4096 NT_STATUS_OK
ReadX 13966 126976 4096 4096 NT_STATUS_OK
ReadX 13966 192512 4096 4096 NT_STATUS_OK
ReadX 13966 258048 4096 4096 NT_STATUS_OK
WriteX 13966 0 65536 65536 NT_STATUS_OK
WriteX 13966 65536 65536 65536 NT_STATUS_OK
WriteX 13966 131072 65536 65536 NT_STATUS_OK
WriteX 13966 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 61440 4096 4096 NT_STATUS_OK
ReadX 13967 126976 4096 4096 NT_STATUS_OK
ReadX 13967 192512 4096 4096 NT_STATUS_OK
ReadX 13967 258048 4096 4096 NT_STATUS_OK
ReadX 13967 323584 4096 4096 NT_STATUS_OK
ReadX 13967 389120 4096 4096 NT_STATUS_OK
ReadX 13967 454656 4096 4096 NT_STATUS_OK
ReadX 13967 520192 4096 4096 NT_STATUS_OK
WriteX 13967 0 65536 65536 NT_STATUS_OK
WriteX 13967 65536 65536 65536 NT_STATUS_OK
WriteX 13967 131072 65536 65536 NT_STATUS_OK
WriteX 13967 196608 65536 65536 NT_STATUS_OK
WriteX 13967 262144 65536 65536 NT_STATUS_OK
WriteX 13967 327680 65536 65536 NT_STATUS_OK
WriteX 13967 393216 65536 65536 NT_STATUS_OK
WriteX 13967 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13968 NT_STATUS_OK
ReadX 13968 0 4096 4096 NT_STATUS_OK
ReadX 13968 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13969 NT_STATUS_OK
WriteX 13969 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 258 NT_STATUS_OK
WriteX 13969 0 53 53 NT_STATUS_OK
Close 13969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13962 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13968 8192 4096 4096 NT_STATUS_OK
ReadX 13968 12288 4096 4096 NT_STATUS_OK
WriteX 13972 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13972 258 NT_STATUS_OK
ReadX 13968 16384 4096 4096 NT_STATUS_OK
ReadX 13968 20480 4096 4096 NT_STATUS_OK
WriteX 13972 0 15360 15360 NT_STATUS_OK
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13973 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13973 1004 NT_STATUS_OK
WriteX 13973 0 4096 4096 NT_STATUS_OK
Close 13973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13976 4096 4096 4096 NT_STATUS_OK
ReadX 13976 8192 4096 4096 NT_STATUS_OK
ReadX 13976 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
ReadX 13979 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
ReadX 13980 4096 4096 4096 NT_STATUS_OK
ReadX 13980 8192 4096 4096 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13981 NT_STATUS_OK
WriteX 13981 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13981 258 NT_STATUS_OK
WriteX 13981 0 15360 15360 NT_STATUS_OK
Close 13981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13982 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13982 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13983 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13986 NT_STATUS_OK
SET_FILE_INFORMATION 13986 1004 NT_STATUS_OK
Close 13986 NT_STATUS_OK
WriteX 13982 0 4096 4096 NT_STATUS_OK
Close 13982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13987 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
ReadX 13989 4096 4096 4096 NT_STATUS_OK
ReadX 13989 8192 4096 4096 NT_STATUS_OK
ReadX 13989 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13991 NT_STATUS_OK
WriteX 13991 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13991 258 NT_STATUS_OK
WriteX 13991 0 53 53 NT_STATUS_OK
Close 13991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13992 NT_STATUS_OK
Close 13992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13990 4096 4096 4096 NT_STATUS_OK
ReadX 13990 8192 4096 4096 NT_STATUS_OK
ReadX 13990 12288 4096 4096 NT_STATUS_OK
WriteX 13994 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 258 NT_STATUS_OK
WriteX 13994 0 12006 12006 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13995 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13995 1004 NT_STATUS_OK
WriteX 13995 0 4096 4096 NT_STATUS_OK
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13996 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13998 4096 4096 4096 NT_STATUS_OK
ReadX 13998 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 14001 NT_STATUS_OK
WriteX 14001 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14001 258 NT_STATUS_OK
WriteX 14001 0 11991 11991 NT_STATUS_OK
Close 14001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14002 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14002 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 14003 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 14006 NT_STATUS_OK
SET_FILE_INFORMATION 14006 1004 NT_STATUS_OK
Close 14006 NT_STATUS_OK
WriteX 14002 0 4096 4096 NT_STATUS_OK
Close 14002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 14007 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 14009 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
ReadX 14009 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
WriteX 14009 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
Close 13985 NT_STATUS_OK
WriteX 13989 0 19054 19054 NT_STATUS_OK
WriteX 14009 0 12288 12288 NT_STATUS_OK
Close 14005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 14012 NT_STATUS_OK
Close 14012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 14014 NT_STATUS_OK
Close 14014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 61440 61440 NT_STATUS_OK
ReadX 14016 61440 4096 4096 NT_STATUS_OK
ReadX 14016 65536 61440 61440 NT_STATUS_OK
ReadX 14016 126976 4096 4096 NT_STATUS_OK
ReadX 14016 131072 61440 61440 NT_STATUS_OK
ReadX 14016 192512 4096 4096 NT_STATUS_OK
ReadX 14016 196608 61440 61440 NT_STATUS_OK
ReadX 14016 258048 4096 4096 NT_STATUS_OK
ReadX 14016 262144 61440 61440 NT_STATUS_OK
ReadX 14016 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 61440 61440 NT_STATUS_OK
ReadX 14017 61440 4096 4096 NT_STATUS_OK
ReadX 14017 65536 61440 61440 NT_STATUS_OK
ReadX 14017 126976 4096 4096 NT_STATUS_OK
ReadX 14017 131072 61440 61440 NT_STATUS_OK
ReadX 14017 192512 4096 4096 NT_STATUS_OK
ReadX 14017 196608 61440 61440 NT_STATUS_OK
ReadX 14017 258048 4096 4096 NT_STATUS_OK
ReadX 14017 262144 61440 61440 NT_STATUS_OK
ReadX 14017 323584 4096 4096 NT_STATUS_OK
ReadX 14017 327680 61440 61440 NT_STATUS_OK
ReadX 14017 389120 4096 4096 NT_STATUS_OK
ReadX 14017 393216 61440 61440 NT_STATUS_OK
ReadX 14017 454656 4096 4096 NT_STATUS_OK
ReadX 14017 458752 61440 61440 NT_STATUS_OK
ReadX 14017 520192 4096 4096 NT_STATUS_OK
ReadX 14017 524288 61440 61440 NT_STATUS_OK
ReadX 14017 585728 4096 4096 NT_STATUS_OK
ReadX 14017 589824 61440 61440 NT_STATUS_OK
ReadX 14017 651264 4096 4096 NT_STATUS_OK
ReadX 14017 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 61440 61440 NT_STATUS_OK
ReadX 14018 61440 4096 4096 NT_STATUS_OK
ReadX 14018 65536 61440 61440 NT_STATUS_OK
ReadX 14018 126976 4096 4096 NT_STATUS_OK
ReadX 14018 131072 61440 61440 NT_STATUS_OK
ReadX 14018 192512 4096 4096 NT_STATUS_OK
ReadX 14018 196608 61440 61440 NT_STATUS_OK
ReadX 14018 258048 4096 4096 NT_STATUS_OK
ReadX 14018 262144 61440 61440 NT_STATUS_OK
ReadX 14018 323584 4096 4096 NT_STATUS_OK
ReadX 14018 327680 61440 61440 NT_STATUS_OK
ReadX 14018 389120 4096 4096 NT_STATUS_OK
ReadX 14018 393216 61440 61440 NT_STATUS_OK
ReadX 14018 454656 4096 4096 NT_STATUS_OK
ReadX 14018 458752 61440 61440 NT_STATUS_OK
ReadX 14018 520192 4096 4096 NT_STATUS_OK
ReadX 14018 524288 61440 61440 NT_STATUS_OK
ReadX 14018 585728 4096 4096 NT_STATUS_OK
ReadX 14018 589824 61440 61440 NT_STATUS_OK
ReadX 14018 651264 4096 4096 NT_STATUS_OK
ReadX 14018 655360 61440 61440 NT_STATUS_OK
ReadX 14018 716800 4096 4096 NT_STATUS_OK
ReadX 14018 720896 61440 61440 NT_STATUS_OK
ReadX 14018 782336 4096 4096 NT_STATUS_OK
ReadX 14018 786432 61440 61440 NT_STATUS_OK
ReadX 14018 847872 4096 4096 NT_STATUS_OK
ReadX 14018 851968 61440 61440 NT_STATUS_OK
ReadX 14018 913408 4096 4096 NT_STATUS_OK
ReadX 14018 917504 61440 61440 NT_STATUS_OK
ReadX 14018 978944 4096 4096 NT_STATUS_OK
ReadX 14018 983040 61440 61440 NT_STATUS_OK
ReadX 14018 1044480 4096 4096 NT_STATUS_OK
ReadX 14018 1048576 61440 61440 NT_STATUS_OK
ReadX 14018 1110016 4096 4096 NT_STATUS_OK
ReadX 14018 1114112 61440 61440 NT_STATUS_OK
ReadX 14018 1175552 4096 4096 NT_STATUS_OK
ReadX 14018 1179648 61440 61440 NT_STATUS_OK
ReadX 14018 1241088 4096 4096 NT_STATUS_OK
ReadX 14018 1245184 61440 61440 NT_STATUS_OK
ReadX 14018 1306624 4096 4096 NT_STATUS_OK
ReadX 14018 1310720 61440 61440 NT_STATUS_OK
ReadX 14018 1372160 4096 4096 NT_STATUS_OK
ReadX 14018 1376256 61440 61440 NT_STATUS_OK
ReadX 14018 1437696 4096 4096 NT_STATUS_OK
ReadX 14018 1441792 61440 61440 NT_STATUS_OK
ReadX 14018 1503232 4096 4096 NT_STATUS_OK
ReadX 14018 1507328 61440 61440 NT_STATUS_OK
ReadX 14018 1568768 4096 4096 NT_STATUS_OK
ReadX 14018 1572864 61440 61440 NT_STATUS_OK
ReadX 14018 1634304 4096 4096 NT_STATUS_OK
ReadX 14018 1638400 61440 61440 NT_STATUS_OK
ReadX 14018 1699840 4096 4096 NT_STATUS_OK
ReadX 14018 1703936 61440 61440 NT_STATUS_OK
ReadX 14018 1765376 4096 4096 NT_STATUS_OK
ReadX 14018 1769472 61440 61440 NT_STATUS_OK
ReadX 14018 1830912 4096 4096 NT_STATUS_OK
ReadX 14018 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 14024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 14025 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 1004 NT_STATUS_OK
WriteX 14025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 14026 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 14027 NT_STATUS_OK
WriteX 14027 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 491 491 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 14025 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 14030 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14031 NT_STATUS_OK
WriteX 14031 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14031 258 NT_STATUS_OK
WriteX 14031 0 543 543 NT_STATUS_OK
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 14016 NT_STATUS_OK
Close 14017 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14020 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 14025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14035 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14036 NT_STATUS_OK
ReadX 14036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 14044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14045 NT_STATUS_OK
QUERY_FILE_INFORMATION 14045 1004 NT_STATUS_OK
WriteX 14045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14045 258 NT_STATUS_OK
WriteX 14045 0 2048 2048 NT_STATUS_OK
Close 14045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
Flush 14046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 14050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14051 NT_STATUS_OK
WriteX 14051 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14051 258 NT_STATUS_OK
WriteX 14051 0 2048 2048 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 14056 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14057 NT_STATUS_OK
WriteX 14057 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 258 NT_STATUS_OK
WriteX 14057 0 2048 2048 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 2048 2048 NT_STATUS_OK
ReadX 14036 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
WriteX 14036 0 8192 8192 NT_STATUS_OK
WriteX 14037 0 4096 4096 NT_STATUS_OK
WriteX 14038 0 4096 4096 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14062 NT_STATUS_OK
QUERY_FILE_INFORMATION 14062 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14082 NT_STATUS_OK
QUERY_FILE_INFORMATION 14082 1004 NT_STATUS_OK
WriteX 14082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14082 258 NT_STATUS_OK
WriteX 14082 0 2048 2048 NT_STATUS_OK
Close 14082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14090 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 1004 NT_STATUS_OK
WriteX 14090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 258 NT_STATUS_OK
WriteX 14090 0 2048 2048 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14083 0 4096 4096 NT_STATUS_OK
Flush 14083 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
Flush 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14083 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14085 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14093 NT_STATUS_OK
WriteX 14093 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 258 NT_STATUS_OK
WriteX 14093 0 4096 4096 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10149 0 4096 4096 NT_STATUS_OK
Close 14094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10152 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10154 NT_STATUS_OK
ReadX 10154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10156 NT_STATUS_OK
WriteX 10156 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10156 258 NT_STATUS_OK
WriteX 10156 0 2048 2048 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10171 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10154 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10167 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10173 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10181 NT_STATUS_OK
ReadX 10181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10193 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 1004 NT_STATUS_OK
WriteX 10193 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 258 NT_STATUS_OK
WriteX 10193 0 2048 2048 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10205 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 1004 NT_STATUS_OK
WriteX 10205 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
WriteX 10205 0 2048 2048 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10213 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 1004 NT_STATUS_OK
WriteX 10213 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 258 NT_STATUS_OK
WriteX 10213 0 2048 2048 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Flush 10206 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
Flush 10214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10196 4096 16384 16384 NT_STATUS_OK
ReadX 10176 4096 16384 16384 NT_STATUS_OK
ReadX 10208 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 2048 2048 NT_STATUS_OK
WriteX 10216 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10217 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10182 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10183 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10219 NT_STATUS_OK
QUERY_FILE_INFORMATION 10219 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10221 NT_STATUS_OK
QUERY_FILE_INFORMATION 10221 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10224 4096 16384 16384 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 8192 8192 NT_STATUS_OK
ReadX 10230 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10244 0 4096 4096 NT_STATUS_OK
ReadX 10244 4096 4096 4096 NT_STATUS_OK
ReadX 10244 8192 4096 4096 NT_STATUS_OK
WriteX 10230 0 4096 4096 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10250 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 1004 NT_STATUS_OK
WriteX 10250 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 2048 2048 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
ReadX 10253 4096 4096 4096 NT_STATUS_OK
WriteX 10253 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
ReadX 10255 4096 4096 4096 NT_STATUS_OK
WriteX 10255 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10256 NT_STATUS_OK
QUERY_FILE_INFORMATION 10256 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10240 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10258 0 4096 4096 NT_STATUS_OK
ReadX 10258 4096 4096 4096 NT_STATUS_OK
ReadX 10258 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10276 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 1004 NT_STATUS_OK
WriteX 10276 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 258 NT_STATUS_OK
WriteX 10276 0 2048 2048 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10277 NT_STATUS_OK
ReadX 10277 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10281 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10282 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 2048 2048 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10266 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10284 NT_STATUS_OK
QUERY_FILE_INFORMATION 10284 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10286 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 61440 4096 4096 NT_STATUS_OK
ReadX 10288 126976 4096 4096 NT_STATUS_OK
WriteX 10288 0 65536 65536 NT_STATUS_OK
WriteX 10288 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 61440 4096 4096 NT_STATUS_OK
ReadX 10289 126976 4096 4096 NT_STATUS_OK
ReadX 10289 192512 4096 4096 NT_STATUS_OK
ReadX 10289 258048 4096 4096 NT_STATUS_OK
WriteX 10289 0 65536 65536 NT_STATUS_OK
WriteX 10289 65536 65536 65536 NT_STATUS_OK
WriteX 10289 131072 65536 65536 NT_STATUS_OK
WriteX 10289 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 61440 4096 4096 NT_STATUS_OK
ReadX 10290 126976 4096 4096 NT_STATUS_OK
ReadX 10290 192512 4096 4096 NT_STATUS_OK
ReadX 10290 258048 4096 4096 NT_STATUS_OK
ReadX 10290 323584 4096 4096 NT_STATUS_OK
ReadX 10290 389120 4096 4096 NT_STATUS_OK
ReadX 10290 454656 4096 4096 NT_STATUS_OK
ReadX 10290 520192 4096 4096 NT_STATUS_OK
WriteX 10290 0 65536 65536 NT_STATUS_OK
WriteX 10290 65536 65536 65536 NT_STATUS_OK
WriteX 10290 131072 65536 65536 NT_STATUS_OK
WriteX 10290 196608 65536 65536 NT_STATUS_OK
WriteX 10290 262144 65536 65536 NT_STATUS_OK
WriteX 10290 327680 65536 65536 NT_STATUS_OK
WriteX 10290 393216 65536 65536 NT_STATUS_OK
WriteX 10290 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10291 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10291 8192 4096 4096 NT_STATUS_OK
ReadX 10291 12288 4096 4096 NT_STATUS_OK
ReadX 10291 16384 4096 4096 NT_STATUS_OK
ReadX 10291 20480 4096 4096 NT_STATUS_OK
ReadX 10291 24576 4096 4096 NT_STATUS_OK
ReadX 10291 28672 4096 4096 NT_STATUS_OK
ReadX 10291 32768 4096 4096 NT_STATUS_OK
ReadX 10291 36864 4096 4096 NT_STATUS_OK
ReadX 10291 40960 4096 4096 NT_STATUS_OK
ReadX 10291 45056 4096 4096 NT_STATUS_OK
ReadX 10291 49152 4096 4096 NT_STATUS_OK
ReadX 10291 53248 4096 4096 NT_STATUS_OK
ReadX 10291 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10291 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10292 NT_STATUS_OK
Close 10292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10294 NT_STATUS_OK
WriteX 10294 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10294 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10294 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10294 1004 NT_STATUS_OK
WriteX 10294 0 57088 57088 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
Flush 10294 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10295 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
Close 10295 NT_STATUS_OK
SET_FILE_INFORMATION 10294 1004 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
Close 10294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10296 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10298 NT_STATUS_OK
ReadX 10298 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10298 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10299 NT_STATUS_OK
WriteX 10299 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10299 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10299 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
WriteX 10299 0 51456 51456 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
Flush 10299 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10303 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10308 NT_STATUS_OK
WriteX 10308 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10308 258 NT_STATUS_OK
WriteX 10308 0 53077 53077 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10309 NT_STATUS_OK
WriteX 10309 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10309 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10309 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10309 1004 NT_STATUS_OK
WriteX 10309 0 65536 65536 NT_STATUS_OK
WriteX 10309 65536 1856 1856 NT_STATUS_OK
WriteX 10309 0 4096 4096 NT_STATUS_OK
Flush 10309 NT_STATUS_OK
SET_FILE_INFORMATION 10309 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10309 1004 NT_STATUS_OK
WriteX 10309 0 4096 4096 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10315 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10318 NT_STATUS_OK
WriteX 10318 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10318 258 NT_STATUS_OK
WriteX 10318 0 7983 7983 NT_STATUS_OK
Close 10318 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10323 NT_STATUS_OK
WriteX 10323 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 258 NT_STATUS_OK
WriteX 10323 0 65536 65536 NT_STATUS_OK
WriteX 10323 65536 65536 65536 NT_STATUS_OK
WriteX 10323 131072 65536 65536 NT_STATUS_OK
WriteX 10323 196608 65536 65536 NT_STATUS_OK
WriteX 10323 262144 65536 65536 NT_STATUS_OK
WriteX 10323 327680 65536 65536 NT_STATUS_OK
WriteX 10323 393216 65536 65536 NT_STATUS_OK
WriteX 10323 458752 46731 46731 NT_STATUS_OK
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10313 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
WriteX 10324 0 65536 65536 NT_STATUS_OK
WriteX 10324 65536 22848 22848 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10328 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10329 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
ReadX 10329 8192 4096 4096 NT_STATUS_OK
ReadX 10329 12288 4096 4096 NT_STATUS_OK
ReadX 10329 16384 4096 4096 NT_STATUS_OK
ReadX 10329 20480 4096 4096 NT_STATUS_OK
ReadX 10329 24576 4096 4096 NT_STATUS_OK
ReadX 10329 28672 4096 4096 NT_STATUS_OK
ReadX 10329 32768 4096 4096 NT_STATUS_OK
ReadX 10329 36864 4096 4096 NT_STATUS_OK
ReadX 10329 40960 4096 4096 NT_STATUS_OK
ReadX 10329 45056 4096 4096 NT_STATUS_OK
ReadX 10329 49152 4096 4096 NT_STATUS_OK
ReadX 10329 53248 4096 4096 NT_STATUS_OK
ReadX 10329 57344 4096 4096 NT_STATUS_OK
ReadX 10329 61440 4096 4096 NT_STATUS_OK
ReadX 10329 65536 4096 4096 NT_STATUS_OK
ReadX 10329 69632 4096 4096 NT_STATUS_OK
ReadX 10329 73728 4096 4096 NT_STATUS_OK
ReadX 10329 77824 4096 4096 NT_STATUS_OK
ReadX 10329 81920 4096 4096 NT_STATUS_OK
ReadX 10329 86016 4096 4096 NT_STATUS_OK
ReadX 10329 90112 4096 4096 NT_STATUS_OK
ReadX 10329 94208 4096 4096 NT_STATUS_OK
ReadX 10329 98304 4096 4096 NT_STATUS_OK
ReadX 10329 102400 4096 4096 NT_STATUS_OK
ReadX 10329 106496 4096 4096 NT_STATUS_OK
ReadX 10329 110592 4096 4096 NT_STATUS_OK
ReadX 10329 114688 4096 4096 NT_STATUS_OK
ReadX 10329 118784 4096 4096 NT_STATUS_OK
ReadX 10329 122880 4096 4096 NT_STATUS_OK
ReadX 10329 126976 4096 4096 NT_STATUS_OK
ReadX 10329 131072 4096 4096 NT_STATUS_OK
ReadX 10329 135168 4096 4096 NT_STATUS_OK
ReadX 10329 139264 4096 4096 NT_STATUS_OK
ReadX 10329 143360 4096 4096 NT_STATUS_OK
ReadX 10329 147456 4096 4096 NT_STATUS_OK
ReadX 10329 151552 4096 4096 NT_STATUS_OK
ReadX 10329 155648 4096 4096 NT_STATUS_OK
ReadX 10329 159744 4096 4096 NT_STATUS_OK
ReadX 10329 163840 4096 4096 NT_STATUS_OK
ReadX 10329 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10329 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10330 NT_STATUS_OK
Close 10330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10332 NT_STATUS_OK
WriteX 10332 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10332 258 NT_STATUS_OK
Close 10329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10333 NT_STATUS_OK
SET_FILE_INFORMATION 10333 1004 NT_STATUS_OK
Close 10333 NT_STATUS_OK
WriteX 10332 0 42388 42388 NT_STATUS_OK
Close 10332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10334 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
ReadX 10336 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10337 NT_STATUS_OK
WriteX 10337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 258 NT_STATUS_OK
SET_FILE_INFORMATION 10337 1004 NT_STATUS_OK
WriteX 10337 0 42652 42652 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
ReadX 10341 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10343 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10346 NT_STATUS_OK
WriteX 10346 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 258 NT_STATUS_OK
WriteX 10346 0 65536 65536 NT_STATUS_OK
WriteX 10346 65536 49 49 NT_STATUS_OK
Close 10346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 61440 61440 NT_STATUS_OK
ReadX 10347 61440 4096 4096 NT_STATUS_OK
ReadX 10347 65536 61440 61440 NT_STATUS_OK
ReadX 10347 126976 4096 4096 NT_STATUS_OK
ReadX 10347 131072 61440 61440 NT_STATUS_OK
ReadX 10347 192512 4096 4096 NT_STATUS_OK
ReadX 10347 196608 61440 61440 NT_STATUS_OK
ReadX 10347 258048 4096 4096 NT_STATUS_OK
ReadX 10347 262144 61440 61440 NT_STATUS_OK
ReadX 10347 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 61440 61440 NT_STATUS_OK
ReadX 10348 61440 4096 4096 NT_STATUS_OK
ReadX 10348 65536 61440 61440 NT_STATUS_OK
ReadX 10348 126976 4096 4096 NT_STATUS_OK
ReadX 10348 131072 61440 61440 NT_STATUS_OK
ReadX 10348 192512 4096 4096 NT_STATUS_OK
ReadX 10348 196608 61440 61440 NT_STATUS_OK
ReadX 10348 258048 4096 4096 NT_STATUS_OK
ReadX 10348 262144 61440 61440 NT_STATUS_OK
ReadX 10348 323584 4096 4096 NT_STATUS_OK
ReadX 10348 327680 61440 61440 NT_STATUS_OK
ReadX 10348 389120 4096 4096 NT_STATUS_OK
ReadX 10348 393216 61440 61440 NT_STATUS_OK
ReadX 10348 454656 4096 4096 NT_STATUS_OK
ReadX 10348 458752 61440 61440 NT_STATUS_OK
ReadX 10348 520192 4096 4096 NT_STATUS_OK
ReadX 10348 524288 61440 61440 NT_STATUS_OK
ReadX 10348 585728 4096 4096 NT_STATUS_OK
ReadX 10348 589824 61440 61440 NT_STATUS_OK
ReadX 10348 651264 4096 4096 NT_STATUS_OK
ReadX 10348 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 61440 61440 NT_STATUS_OK
ReadX 10349 61440 4096 4096 NT_STATUS_OK
ReadX 10349 65536 61440 61440 NT_STATUS_OK
ReadX 10349 126976 4096 4096 NT_STATUS_OK
ReadX 10349 131072 61440 61440 NT_STATUS_OK
ReadX 10349 192512 4096 4096 NT_STATUS_OK
ReadX 10349 196608 61440 61440 NT_STATUS_OK
ReadX 10349 258048 4096 4096 NT_STATUS_OK
ReadX 10349 262144 61440 61440 NT_STATUS_OK
ReadX 10349 323584 4096 4096 NT_STATUS_OK
ReadX 10349 327680 61440 61440 NT_STATUS_OK
ReadX 10349 389120 4096 4096 NT_STATUS_OK
ReadX 10349 393216 61440 61440 NT_STATUS_OK
ReadX 10349 454656 4096 4096 NT_STATUS_OK
ReadX 10349 458752 61440 61440 NT_STATUS_OK
ReadX 10349 520192 4096 4096 NT_STATUS_OK
ReadX 10349 524288 61440 61440 NT_STATUS_OK
ReadX 10349 585728 4096 4096 NT_STATUS_OK
ReadX 10349 589824 61440 61440 NT_STATUS_OK
ReadX 10349 651264 4096 4096 NT_STATUS_OK
ReadX 10349 655360 61440 61440 NT_STATUS_OK
ReadX 10349 716800 4096 4096 NT_STATUS_OK
ReadX 10349 720896 61440 61440 NT_STATUS_OK
ReadX 10349 782336 4096 4096 NT_STATUS_OK
ReadX 10349 786432 61440 61440 NT_STATUS_OK
ReadX 10349 847872 4096 4096 NT_STATUS_OK
ReadX 10349 851968 61440 61440 NT_STATUS_OK
ReadX 10349 913408 4096 4096 NT_STATUS_OK
ReadX 10349 917504 61440 61440 NT_STATUS_OK
ReadX 10349 978944 4096 4096 NT_STATUS_OK
ReadX 10349 983040 61440 61440 NT_STATUS_OK
ReadX 10349 1044480 4096 4096 NT_STATUS_OK
ReadX 10349 1048576 61440 61440 NT_STATUS_OK
ReadX 10349 1110016 4096 4096 NT_STATUS_OK
ReadX 10349 1114112 61440 61440 NT_STATUS_OK
ReadX 10349 1175552 4096 4096 NT_STATUS_OK
ReadX 10349 1179648 61440 61440 NT_STATUS_OK
ReadX 10349 1241088 4096 4096 NT_STATUS_OK
ReadX 10349 1245184 61440 61440 NT_STATUS_OK
ReadX 10349 1306624 4096 4096 NT_STATUS_OK
ReadX 10349 1310720 61440 61440 NT_STATUS_OK
ReadX 10349 1372160 4096 4096 NT_STATUS_OK
ReadX 10349 1376256 61440 61440 NT_STATUS_OK
ReadX 10349 1437696 4096 4096 NT_STATUS_OK
ReadX 10349 1441792 61440 61440 NT_STATUS_OK
ReadX 10349 1503232 4096 4096 NT_STATUS_OK
ReadX 10349 1507328 61440 61440 NT_STATUS_OK
ReadX 10349 1568768 4096 4096 NT_STATUS_OK
ReadX 10349 1572864 61440 61440 NT_STATUS_OK
ReadX 10349 1634304 4096 4096 NT_STATUS_OK
ReadX 10349 1638400 61440 61440 NT_STATUS_OK
ReadX 10349 1699840 4096 4096 NT_STATUS_OK
ReadX 10349 1703936 61440 61440 NT_STATUS_OK
ReadX 10349 1765376 4096 4096 NT_STATUS_OK
ReadX 10349 1769472 61440 61440 NT_STATUS_OK
ReadX 10349 1830912 4096 4096 NT_STATUS_OK
ReadX 10349 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1005 NT_STATUS_OK
ReadX 10351 2156 24 24 NT_STATUS_OK
ReadX 10351 2139 276 276 NT_STATUS_OK
ReadX 10351 2136 14 14 NT_STATUS_OK
ReadX 10351 2136 7 7 NT_STATUS_OK
ReadX 10351 2138 12 12 NT_STATUS_OK
ReadX 10351 2137 8 8 NT_STATUS_OK
ReadX 10351 2135 15 15 NT_STATUS_OK
ReadX 10351 0 16 16 NT_STATUS_OK
ReadX 10351 16 2048 2048 NT_STATUS_OK
ReadX 10351 2064 2048 2048 NT_STATUS_OK
ReadX 10351 257 2048 2048 NT_STATUS_OK
ReadX 10351 385 2048 2048 NT_STATUS_OK
ReadX 10351 513 2048 2048 NT_STATUS_OK
ReadX 10351 641 2048 2048 NT_STATUS_OK
ReadX 10351 769 2048 2048 NT_STATUS_OK
ReadX 10351 897 2048 2048 NT_STATUS_OK
ReadX 10351 1025 2048 2048 NT_STATUS_OK
ReadX 10351 1153 2048 2048 NT_STATUS_OK
ReadX 10351 1281 2048 2048 NT_STATUS_OK
ReadX 10351 1409 2048 2048 NT_STATUS_OK
ReadX 10351 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10353 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10347 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10356 NT_STATUS_OK
WriteX 10356 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10356 258 NT_STATUS_OK
WriteX 10356 0 10575 10575 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10361 NT_STATUS_OK
LockX 10361 2147483538 1 NT_STATUS_OK
UnlockX 10361 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1005 NT_STATUS_OK
ReadX 10361 0 512 512 NT_STATUS_OK
ReadX 10361 512 512 512 NT_STATUS_OK
ReadX 10361 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1004 NT_STATUS_OK
Close 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10362 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1005 NT_STATUS_OK
ReadX 10362 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10363 NT_STATUS_OK
LockX 10363 2147483538 1 NT_STATUS_OK
UnlockX 10363 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1005 NT_STATUS_OK
ReadX 10363 0 512 512 NT_STATUS_OK
ReadX 10363 512 512 512 NT_STATUS_OK
ReadX 10363 1024 512 512 NT_STATUS_OK
ReadX 10363 288 20 20 NT_STATUS_OK
ReadX 10363 308 2084 2084 NT_STATUS_OK
ReadX 10363 388 2084 2084 NT_STATUS_OK
ReadX 10363 388 2084 2084 NT_STATUS_OK
ReadX 10350 2157 1386 1386 NT_STATUS_OK
ReadX 10363 2472 399 399 NT_STATUS_OK
ReadX 10363 3072 1536 1536 NT_STATUS_OK
ReadX 10363 544 149 149 NT_STATUS_OK
ReadX 10363 693 485 485 NT_STATUS_OK
Close 10363 NT_STATUS_OK
ReadX 10350 2157 4096 4096 NT_STATUS_OK
ReadX 10350 6253 4096 4096 NT_STATUS_OK
ReadX 10350 10349 4096 4096 NT_STATUS_OK
ReadX 10350 14445 4096 4096 NT_STATUS_OK
ReadX 10350 18541 4096 4096 NT_STATUS_OK
ReadX 10350 22637 256 256 NT_STATUS_OK
ReadX 10350 22893 4096 4096 NT_STATUS_OK
ReadX 10350 26989 4096 4096 NT_STATUS_OK
ReadX 10350 31085 4096 4096 NT_STATUS_OK
ReadX 10350 35181 4096 4096 NT_STATUS_OK
ReadX 10350 39277 4096 4096 NT_STATUS_OK
ReadX 10350 43373 4096 4096 NT_STATUS_OK
ReadX 10350 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10350 2157 1024 1024 NT_STATUS_OK
ReadX 10350 1667 4688 4688 NT_STATUS_OK
ReadX 10350 6355 3516 3516 NT_STATUS_OK
ReadX 10350 9871 16384 16384 NT_STATUS_OK
ReadX 10350 26255 3771 3771 NT_STATUS_OK
ReadX 10350 30026 2048 2048 NT_STATUS_OK
ReadX 10350 32074 1024 1024 NT_STATUS_OK
ReadX 10350 33098 6652 6652 NT_STATUS_OK
ReadX 10350 39750 16384 16384 NT_STATUS_OK
ReadX 10350 56134 10496 10496 NT_STATUS_OK
ReadX 10350 66630 1784 1784 NT_STATUS_OK
ReadX 10350 68414 90 90 NT_STATUS_OK
ReadX 10350 68504 273 273 NT_STATUS_OK
ReadX 10350 68777 1600 1600 NT_STATUS_OK
ReadX 10350 70377 640 640 NT_STATUS_OK
ReadX 10350 71017 1280 1280 NT_STATUS_OK
ReadX 10350 72297 8464 8464 NT_STATUS_OK
ReadX 10350 80761 158 158 NT_STATUS_OK
ReadX 10350 80919 912 912 NT_STATUS_OK
ReadX 10350 81831 1980 1980 NT_STATUS_OK
ReadX 10350 83811 2256 2256 NT_STATUS_OK
ReadX 10350 86067 400 400 NT_STATUS_OK
ReadX 10350 86467 252 252 NT_STATUS_OK
ReadX 10350 86719 42 42 NT_STATUS_OK
ReadX 10350 86761 725 725 NT_STATUS_OK
ReadX 10350 2009 512 512 NT_STATUS_OK
ReadX 10350 3895 9 9 NT_STATUS_OK
ReadX 10350 3781 46 46 NT_STATUS_OK
ReadX 10350 4059 92 92 NT_STATUS_OK
ReadX 10350 3781 92 92 NT_STATUS_OK
ReadX 10350 3986 184 184 NT_STATUS_OK
ReadX 10350 3987 16384 16384 NT_STATUS_OK
ReadX 10350 3902 16384 16384 NT_STATUS_OK
ReadX 10350 3781 10240 10240 NT_STATUS_OK
ReadX 10350 3821 16384 16384 NT_STATUS_OK
ReadX 10350 3891 935 935 NT_STATUS_OK
ReadX 10350 4060 10240 10240 NT_STATUS_OK
ReadX 10350 4059 184 184 NT_STATUS_OK
ReadX 10350 256 184 184 NT_STATUS_OK
ReadX 10350 256 1026 1026 NT_STATUS_OK
ReadX 10350 3901 326 326 NT_STATUS_OK
ReadX 10350 3899 652 652 NT_STATUS_OK
ReadX 10350 256 2 2 NT_STATUS_OK
ReadX 10350 258 4948 4948 NT_STATUS_OK
Close 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10368 NT_STATUS_OK
WriteX 10368 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 258 NT_STATUS_OK
WriteX 10368 0 65536 65536 NT_STATUS_OK
WriteX 10368 65536 65536 65536 NT_STATUS_OK
WriteX 10368 131072 65536 65536 NT_STATUS_OK
WriteX 10368 196608 65536 65536 NT_STATUS_OK
WriteX 10368 262144 65536 65536 NT_STATUS_OK
WriteX 10368 327680 65536 65536 NT_STATUS_OK
WriteX 10368 393216 65536 65536 NT_STATUS_OK
WriteX 10368 458752 65536 65536 NT_STATUS_OK
WriteX 10368 524288 65536 65536 NT_STATUS_OK
WriteX 10368 589824 35257 35257 NT_STATUS_OK
Close 10368 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10373 NT_STATUS_OK
WriteX 10373 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 258 NT_STATUS_OK
WriteX 10373 0 65536 65536 NT_STATUS_OK
WriteX 10373 65536 65536 65536 NT_STATUS_OK
WriteX 10373 131072 65536 65536 NT_STATUS_OK
WriteX 10373 196608 65536 65536 NT_STATUS_OK
WriteX 10373 262144 65536 65536 NT_STATUS_OK
WriteX 10373 327680 65536 65536 NT_STATUS_OK
WriteX 10373 393216 65536 65536 NT_STATUS_OK
WriteX 10373 458752 65536 65536 NT_STATUS_OK
WriteX 10373 524288 65536 65536 NT_STATUS_OK
WriteX 10373 589824 57598 57598 NT_STATUS_OK
Close 10373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10375 NT_STATUS_OK
WriteX 10375 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10375 258 NT_STATUS_OK
WriteX 10375 0 12543 12543 NT_STATUS_OK
Flush 10375 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10377 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10381 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1005 NT_STATUS_OK
ReadX 10381 1938 24 24 NT_STATUS_OK
ReadX 10381 1920 276 276 NT_STATUS_OK
ReadX 10381 1918 14 14 NT_STATUS_OK
ReadX 10381 1918 7 7 NT_STATUS_OK
ReadX 10381 1919 12 12 NT_STATUS_OK
ReadX 10381 1919 8 8 NT_STATUS_OK
ReadX 10381 1917 15 15 NT_STATUS_OK
ReadX 10381 0 16 16 NT_STATUS_OK
ReadX 10381 16 2048 2048 NT_STATUS_OK
ReadX 10381 2064 2048 2048 NT_STATUS_OK
ReadX 10381 257 2048 2048 NT_STATUS_OK
ReadX 10381 385 2048 2048 NT_STATUS_OK
ReadX 10381 513 2048 2048 NT_STATUS_OK
ReadX 10381 641 2048 2048 NT_STATUS_OK
ReadX 10381 769 2048 2048 NT_STATUS_OK
ReadX 10381 897 2048 2048 NT_STATUS_OK
ReadX 10381 1025 2048 2048 NT_STATUS_OK
ReadX 10381 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10386 NT_STATUS_OK
WriteX 10386 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10386 258 NT_STATUS_OK
WriteX 10386 0 11588 11588 NT_STATUS_OK
Flush 10386 NT_STATUS_OK
Close 10386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10391 NT_STATUS_OK
WriteX 10391 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10391 258 NT_STATUS_OK
WriteX 10391 0 11615 11615 NT_STATUS_OK
Flush 10391 NT_STATUS_OK
Close 10391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10397 NT_STATUS_OK
Close 10397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10400 NT_STATUS_OK
WriteX 10400 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10400 258 NT_STATUS_OK
WriteX 10400 0 65536 65536 NT_STATUS_OK
WriteX 10400 65536 16050 16050 NT_STATUS_OK
Close 10400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10380 1939 64 64 NT_STATUS_OK
ReadX 10380 128 248 248 NT_STATUS_OK
ReadX 10380 128 568 568 NT_STATUS_OK
ReadX 10380 3872 1536 1536 NT_STATUS_OK
ReadX 10380 3456 2560 2560 NT_STATUS_OK
ReadX 10380 3136 512 512 NT_STATUS_OK
ReadX 10380 2880 4096 4096 NT_STATUS_OK
ReadX 10380 3264 3072 3072 NT_STATUS_OK
ReadX 10380 320 4096 4096 NT_STATUS_OK
ReadX 10380 1024 4096 4096 NT_STATUS_OK
ReadX 10380 3616 4096 4096 NT_STATUS_OK
ReadX 10380 1939 64 64 NT_STATUS_OK
ReadX 10380 128 248 248 NT_STATUS_OK
ReadX 10380 128 608 608 NT_STATUS_OK
ReadX 10380 2858 1024 1024 NT_STATUS_OK
ReadX 10380 2810 4096 4096 NT_STATUS_OK
ReadX 10380 2826 4096 4096 NT_STATUS_OK
ReadX 10380 2580 2048 2048 NT_STATUS_OK
ReadX 10380 2800 2560 2560 NT_STATUS_OK
ReadX 10380 2100 4096 4096 NT_STATUS_OK
ReadX 10380 2084 4096 4096 NT_STATUS_OK
ReadX 10380 868 4096 4096 NT_STATUS_OK
ReadX 10380 2324 4096 4096 NT_STATUS_OK
ReadX 10380 884 4096 4096 NT_STATUS_OK
ReadX 10380 2604 1024 1024 NT_STATUS_OK
ReadX 10380 580 4096 4096 NT_STATUS_OK
ReadX 10380 596 4096 4096 NT_STATUS_OK
ReadX 10380 2752 4096 4096 NT_STATUS_OK
ReadX 10380 2842 1024 1024 NT_STATUS_OK
ReadX 10380 660 4096 4096 NT_STATUS_OK
ReadX 10380 2720 4096 4096 NT_STATUS_OK
ReadX 10380 2736 4096 4096 NT_STATUS_OK
ReadX 10380 628 4096 4096 NT_STATUS_OK
ReadX 10380 2704 4096 4096 NT_STATUS_OK
ReadX 10380 1556 4096 4096 NT_STATUS_OK
ReadX 10380 576 4096 4096 NT_STATUS_OK
ReadX 10380 3168 1536 1536 NT_STATUS_OK
ReadX 10380 832 4096 4096 NT_STATUS_OK
ReadX 10380 1088 4096 4096 NT_STATUS_OK
ReadX 10380 1344 4096 4096 NT_STATUS_OK
ReadX 10380 1600 4096 4096 NT_STATUS_OK
ReadX 10380 1856 4096 4096 NT_STATUS_OK
ReadX 10380 2112 4096 4096 NT_STATUS_OK
ReadX 10380 1892 4096 4096 NT_STATUS_OK
ReadX 10380 820 4096 4096 NT_STATUS_OK
ReadX 10380 788 4096 4096 NT_STATUS_OK
ReadX 10380 1604 4096 4096 NT_STATUS_OK
ReadX 10380 3648 4096 4096 NT_STATUS_OK
ReadX 10380 2608 4096 4096 NT_STATUS_OK
ReadX 10380 548 4096 4096 NT_STATUS_OK
ReadX 10380 740 4096 4096 NT_STATUS_OK
ReadX 10380 1344 4096 4096 NT_STATUS_OK
ReadX 10380 3392 4096 4096 NT_STATUS_OK
ReadX 10380 3904 4096 4096 NT_STATUS_OK
ReadX 10380 644 4096 4096 NT_STATUS_OK
ReadX 10380 676 4096 4096 NT_STATUS_OK
ReadX 10380 2688 4096 4096 NT_STATUS_OK
ReadX 10380 320 4096 4096 NT_STATUS_OK
ReadX 10380 900 4096 4096 NT_STATUS_OK
ReadX 10380 1908 4096 4096 NT_STATUS_OK
ReadX 10380 852 4096 4096 NT_STATUS_OK
ReadX 10380 724 4096 4096 NT_STATUS_OK
ReadX 10380 2292 4096 4096 NT_STATUS_OK
ReadX 10380 612 4096 4096 NT_STATUS_OK
ReadX 10380 388 4096 4096 NT_STATUS_OK
ReadX 10380 2368 4096 4096 NT_STATUS_OK
ReadX 10380 2624 4096 4096 NT_STATUS_OK
ReadX 10380 500 4096 4096 NT_STATUS_OK
ReadX 10380 356 4096 4096 NT_STATUS_OK
ReadX 10380 1024 4096 4096 NT_STATUS_OK
ReadX 10380 576 4096 4096 NT_STATUS_OK
ReadX 10380 340 4096 4096 NT_STATUS_OK
ReadX 10380 420 4096 4096 NT_STATUS_OK
ReadX 10380 1600 4096 4096 NT_STATUS_OK
ReadX 10380 404 4096 4096 NT_STATUS_OK
ReadX 10380 1428 4096 4096 NT_STATUS_OK
ReadX 10380 2656 4096 4096 NT_STATUS_OK
ReadX 10380 2624 4096 4096 NT_STATUS_OK
ReadX 10380 452 4096 4096 NT_STATUS_OK
ReadX 10380 692 4096 4096 NT_STATUS_OK
ReadX 10380 564 4096 4096 NT_STATUS_OK
ReadX 10380 372 4096 4096 NT_STATUS_OK
ReadX 10380 468 4096 4096 NT_STATUS_OK
ReadX 10380 484 4096 4096 NT_STATUS_OK
ReadX 10380 1088 4096 4096 NT_STATUS_OK
ReadX 10380 1924 4096 4096 NT_STATUS_OK
ReadX 10380 2768 4096 4096 NT_STATUS_OK
ReadX 10380 832 4096 4096 NT_STATUS_OK
ReadX 10380 836 4096 4096 NT_STATUS_OK
ReadX 10380 1856 4096 4096 NT_STATUS_OK
ReadX 10380 2640 4096 4096 NT_STATUS_OK
ReadX 10380 436 4096 4096 NT_STATUS_OK
ReadX 10380 1828 4096 4096 NT_STATUS_OK
ReadX 10380 804 4096 4096 NT_STATUS_OK
ReadX 10380 1860 4096 4096 NT_STATUS_OK
ReadX 10380 1812 4096 4096 NT_STATUS_OK
ReadX 10380 756 4096 4096 NT_STATUS_OK
ReadX 10380 1636 4096 4096 NT_STATUS_OK
ReadX 10380 772 4096 4096 NT_STATUS_OK
ReadX 10380 2036 4096 4096 NT_STATUS_OK
ReadX 10380 1220 4096 4096 NT_STATUS_OK
ReadX 10380 1652 4096 4096 NT_STATUS_OK
ReadX 10380 2588 4096 4096 NT_STATUS_OK
ReadX 10380 916 4096 4096 NT_STATUS_OK
ReadX 10380 260 4096 4096 NT_STATUS_OK
ReadX 10380 932 4096 4096 NT_STATUS_OK
ReadX 10380 2624 4096 4096 NT_STATUS_OK
ReadX 10380 308 4096 4096 NT_STATUS_OK
ReadX 10380 292 4096 4096 NT_STATUS_OK
ReadX 10380 1140 4096 4096 NT_STATUS_OK
ReadX 10380 276 4096 4096 NT_STATUS_OK
ReadX 10380 2020 4096 4096 NT_STATUS_OK
ReadX 10380 2880 4096 4096 NT_STATUS_OK
ReadX 10380 516 4096 4096 NT_STATUS_OK
ReadX 10380 1844 4096 4096 NT_STATUS_OK
ReadX 10380 1124 4096 4096 NT_STATUS_OK
ReadX 10380 3136 4096 4096 NT_STATUS_OK
ReadX 10380 324 4096 4096 NT_STATUS_OK
ReadX 10380 1156 4096 4096 NT_STATUS_OK
ReadX 10380 1172 4096 4096 NT_STATUS_OK
ReadX 10380 2112 4096 4096 NT_STATUS_OK
ReadX 10380 2368 4096 4096 NT_STATUS_OK
ReadX 10380 964 4096 4096 NT_STATUS_OK
ReadX 10380 980 4096 4096 NT_STATUS_OK
ReadX 10380 1012 4096 4096 NT_STATUS_OK
ReadX 10380 532 4096 4096 NT_STATUS_OK
ReadX 10380 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10380 1620 4096 4096 NT_STATUS_OK
ReadX 10380 1604 4096 4096 NT_STATUS_OK
ReadX 10380 2116 4096 4096 NT_STATUS_OK
ReadX 10380 2132 4096 4096 NT_STATUS_OK
ReadX 10380 2148 4096 4096 NT_STATUS_OK
ReadX 10380 2276 4096 4096 NT_STATUS_OK
ReadX 10380 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10402 NT_STATUS_OK
Close 10402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10405 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 1004 NT_STATUS_OK
Close 10360 NT_STATUS_OK
WriteX 10405 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10405 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1004 NT_STATUS_OK
Close 10362 NT_STATUS_OK
WriteX 10405 0 65536 65536 NT_STATUS_OK
WriteX 10405 65536 64850 64850 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10407 NT_STATUS_OK
WriteX 10407 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10407 258 NT_STATUS_OK
ReadX 10380 2068 4096 4096 NT_STATUS_OK
ReadX 10380 1588 4096 4096 NT_STATUS_OK
ReadX 10380 1572 4096 4096 NT_STATUS_OK
WriteX 10407 0 18630 18630 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10380 612 4096 4096 NT_STATUS_OK
ReadX 10380 564 4096 4096 NT_STATUS_OK
ReadX 10380 1876 4096 4096 NT_STATUS_OK
ReadX 10380 628 4096 4096 NT_STATUS_OK
ReadX 10380 740 4096 4096 NT_STATUS_OK
ReadX 10380 724 4096 4096 NT_STATUS_OK
ReadX 10380 644 4096 4096 NT_STATUS_OK
ReadX 10380 2324 4096 4096 NT_STATUS_OK
ReadX 10380 660 4096 4096 NT_STATUS_OK
ReadX 10380 852 4096 4096 NT_STATUS_OK
ReadX 10380 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10380 2368 4096 4096 NT_STATUS_OK
ReadX 10380 1024 4096 4096 NT_STATUS_OK
ReadX 10380 320 4096 4096 NT_STATUS_OK
ReadX 10380 580 4096 4096 NT_STATUS_OK
ReadX 10380 3136 512 512 NT_STATUS_OK
ReadX 10380 2880 4096 4096 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 61440 4096 4096 NT_STATUS_OK
ReadX 10412 126976 4096 4096 NT_STATUS_OK
WriteX 10412 0 65536 65536 NT_STATUS_OK
WriteX 10412 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 61440 4096 4096 NT_STATUS_OK
ReadX 10413 126976 4096 4096 NT_STATUS_OK
ReadX 10413 192512 4096 4096 NT_STATUS_OK
ReadX 10413 258048 4096 4096 NT_STATUS_OK
WriteX 10413 0 65536 65536 NT_STATUS_OK
WriteX 10413 65536 65536 65536 NT_STATUS_OK
WriteX 10413 131072 65536 65536 NT_STATUS_OK
WriteX 10413 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 61440 4096 4096 NT_STATUS_OK
ReadX 10414 126976 4096 4096 NT_STATUS_OK
ReadX 10414 192512 4096 4096 NT_STATUS_OK
ReadX 10414 258048 4096 4096 NT_STATUS_OK
ReadX 10414 323584 4096 4096 NT_STATUS_OK
ReadX 10414 389120 4096 4096 NT_STATUS_OK
ReadX 10414 454656 4096 4096 NT_STATUS_OK
ReadX 10414 520192 4096 4096 NT_STATUS_OK
WriteX 10414 0 65536 65536 NT_STATUS_OK
WriteX 10414 65536 65536 65536 NT_STATUS_OK
WriteX 10414 131072 65536 65536 NT_STATUS_OK
WriteX 10414 196608 65536 65536 NT_STATUS_OK
WriteX 10414 262144 65536 65536 NT_STATUS_OK
WriteX 10414 327680 65536 65536 NT_STATUS_OK
WriteX 10414 393216 65536 65536 NT_STATUS_OK
WriteX 10414 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10417 NT_STATUS_OK
WriteX 10417 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10417 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10415 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10422 NT_STATUS_OK
WriteX 10422 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 258 NT_STATUS_OK
WriteX 10422 0 62591 62591 NT_STATUS_OK
Close 10422 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10424 NT_STATUS_OK
Close 10424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10427 NT_STATUS_OK
WriteX 10427 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
WriteX 10427 0 10845 10845 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10432 NT_STATUS_OK
WriteX 10432 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 258 NT_STATUS_OK
WriteX 10432 0 30118 30118 NT_STATUS_OK
Close 10432 NT_STATUS_OK
WriteX 10415 0 4096 4096 NT_STATUS_OK
WriteX 10417 0 64 64 NT_STATUS_OK
Close 10417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 61440 61440 NT_STATUS_OK
ReadX 10434 61440 4096 4096 NT_STATUS_OK
ReadX 10434 65536 61440 61440 NT_STATUS_OK
ReadX 10434 126976 4096 4096 NT_STATUS_OK
ReadX 10434 131072 61440 61440 NT_STATUS_OK
ReadX 10434 192512 4096 4096 NT_STATUS_OK
ReadX 10434 196608 61440 61440 NT_STATUS_OK
ReadX 10434 258048 4096 4096 NT_STATUS_OK
ReadX 10434 262144 61440 61440 NT_STATUS_OK
ReadX 10434 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 61440 61440 NT_STATUS_OK
ReadX 10435 61440 4096 4096 NT_STATUS_OK
ReadX 10435 65536 61440 61440 NT_STATUS_OK
ReadX 10435 126976 4096 4096 NT_STATUS_OK
ReadX 10435 131072 61440 61440 NT_STATUS_OK
ReadX 10435 192512 4096 4096 NT_STATUS_OK
ReadX 10435 196608 61440 61440 NT_STATUS_OK
ReadX 10435 258048 4096 4096 NT_STATUS_OK
ReadX 10435 262144 61440 61440 NT_STATUS_OK
ReadX 10435 323584 4096 4096 NT_STATUS_OK
ReadX 10435 327680 61440 61440 NT_STATUS_OK
ReadX 10435 389120 4096 4096 NT_STATUS_OK
ReadX 10435 393216 61440 61440 NT_STATUS_OK
ReadX 10435 454656 4096 4096 NT_STATUS_OK
ReadX 10435 458752 61440 61440 NT_STATUS_OK
ReadX 10435 520192 4096 4096 NT_STATUS_OK
ReadX 10435 524288 61440 61440 NT_STATUS_OK
ReadX 10435 585728 4096 4096 NT_STATUS_OK
ReadX 10435 589824 61440 61440 NT_STATUS_OK
ReadX 10435 651264 4096 4096 NT_STATUS_OK
ReadX 10435 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 61440 61440 NT_STATUS_OK
ReadX 10436 61440 4096 4096 NT_STATUS_OK
ReadX 10436 65536 61440 61440 NT_STATUS_OK
ReadX 10436 126976 4096 4096 NT_STATUS_OK
ReadX 10436 131072 61440 61440 NT_STATUS_OK
ReadX 10436 192512 4096 4096 NT_STATUS_OK
ReadX 10436 196608 61440 61440 NT_STATUS_OK
ReadX 10436 258048 4096 4096 NT_STATUS_OK
ReadX 10436 262144 61440 61440 NT_STATUS_OK
ReadX 10436 323584 4096 4096 NT_STATUS_OK
ReadX 10436 327680 61440 61440 NT_STATUS_OK
ReadX 10436 389120 4096 4096 NT_STATUS_OK
ReadX 10436 393216 61440 61440 NT_STATUS_OK
ReadX 10436 454656 4096 4096 NT_STATUS_OK
ReadX 10436 458752 61440 61440 NT_STATUS_OK
ReadX 10436 520192 4096 4096 NT_STATUS_OK
ReadX 10436 524288 61440 61440 NT_STATUS_OK
ReadX 10436 585728 4096 4096 NT_STATUS_OK
ReadX 10436 589824 61440 61440 NT_STATUS_OK
ReadX 10436 651264 4096 4096 NT_STATUS_OK
ReadX 10436 655360 61440 61440 NT_STATUS_OK
ReadX 10436 716800 4096 4096 NT_STATUS_OK
ReadX 10436 720896 61440 61440 NT_STATUS_OK
ReadX 10436 782336 4096 4096 NT_STATUS_OK
ReadX 10436 786432 61440 61440 NT_STATUS_OK
ReadX 10436 847872 4096 4096 NT_STATUS_OK
ReadX 10436 851968 61440 61440 NT_STATUS_OK
ReadX 10436 913408 4096 4096 NT_STATUS_OK
ReadX 10436 917504 61440 61440 NT_STATUS_OK
ReadX 10436 978944 4096 4096 NT_STATUS_OK
ReadX 10436 983040 61440 61440 NT_STATUS_OK
ReadX 10436 1044480 4096 4096 NT_STATUS_OK
ReadX 10436 1048576 61440 61440 NT_STATUS_OK
ReadX 10436 1110016 4096 4096 NT_STATUS_OK
ReadX 10436 1114112 61440 61440 NT_STATUS_OK
ReadX 10436 1175552 4096 4096 NT_STATUS_OK
ReadX 10436 1179648 61440 61440 NT_STATUS_OK
ReadX 10436 1241088 4096 4096 NT_STATUS_OK
ReadX 10436 1245184 61440 61440 NT_STATUS_OK
ReadX 10436 1306624 4096 4096 NT_STATUS_OK
ReadX 10436 1310720 61440 61440 NT_STATUS_OK
ReadX 10436 1372160 4096 4096 NT_STATUS_OK
ReadX 10436 1376256 61440 61440 NT_STATUS_OK
ReadX 10436 1437696 4096 4096 NT_STATUS_OK
ReadX 10436 1441792 61440 61440 NT_STATUS_OK
ReadX 10436 1503232 4096 4096 NT_STATUS_OK
ReadX 10436 1507328 61440 61440 NT_STATUS_OK
ReadX 10436 1568768 4096 4096 NT_STATUS_OK
ReadX 10436 1572864 61440 61440 NT_STATUS_OK
ReadX 10436 1634304 4096 4096 NT_STATUS_OK
ReadX 10436 1638400 61440 61440 NT_STATUS_OK
ReadX 10436 1699840 4096 4096 NT_STATUS_OK
ReadX 10436 1703936 61440 61440 NT_STATUS_OK
ReadX 10436 1765376 4096 4096 NT_STATUS_OK
ReadX 10436 1769472 61440 61440 NT_STATUS_OK
ReadX 10436 1830912 4096 4096 NT_STATUS_OK
ReadX 10436 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10437 NT_STATUS_OK
Close 10437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
ReadX 10441 4096 4096 4096 NT_STATUS_OK
ReadX 10441 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10442 NT_STATUS_OK
Close 10442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10444 NT_STATUS_OK
ReadX 10444 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10445 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 8192 8192 NT_STATUS_OK
ReadX 10449 8192 8192 8192 NT_STATUS_OK
ReadX 10449 16384 8192 8192 NT_STATUS_OK
ReadX 10449 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10451 NT_STATUS_OK
Close 10451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10454 NT_STATUS_OK
WriteX 10454 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
WriteX 10454 0 10438 10438 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10456 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10458 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10460 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 0 4096 4096 NT_STATUS_OK
ReadX 10463 4096 4096 4096 NT_STATUS_OK
ReadX 10463 8192 4096 4096 NT_STATUS_OK
ReadX 10463 12288 8192 8192 NT_STATUS_OK
ReadX 10463 20480 8192 8192 NT_STATUS_OK
ReadX 10463 28672 8192 8192 NT_STATUS_OK
ReadX 10463 36864 8192 8192 NT_STATUS_OK
ReadX 10463 45056 8192 8192 NT_STATUS_OK
ReadX 10463 53248 8192 8192 NT_STATUS_OK
ReadX 10463 61440 8192 8192 NT_STATUS_OK
ReadX 10463 69632 8192 8192 NT_STATUS_OK
ReadX 10463 77824 8192 8192 NT_STATUS_OK
ReadX 10463 86016 8192 8192 NT_STATUS_OK
ReadX 10463 94208 8192 8192 NT_STATUS_OK
ReadX 10463 102400 8192 8192 NT_STATUS_OK
ReadX 10463 110592 8192 8192 NT_STATUS_OK
ReadX 10463 118784 8192 8192 NT_STATUS_OK
ReadX 10463 126976 8192 8192 NT_STATUS_OK
ReadX 10463 135168 8192 8192 NT_STATUS_OK
ReadX 10463 143360 8192 8192 NT_STATUS_OK
ReadX 10463 151552 8192 8192 NT_STATUS_OK
ReadX 10463 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Close 10458 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10465 NT_STATUS_OK
Close 10465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10468 NT_STATUS_OK
WriteX 10468 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10468 258 NT_STATUS_OK
WriteX 10468 0 28489 28489 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10469 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10471 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10472 NT_STATUS_OK
Close 10472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 8192 8192 NT_STATUS_OK
ReadX 10475 8192 8192 8192 NT_STATUS_OK
ReadX 10475 16384 8192 8192 NT_STATUS_OK
ReadX 10475 24576 8192 8192 NT_STATUS_OK
ReadX 10475 32768 16384 16384 NT_STATUS_OK
ReadX 10475 49152 8192 8192 NT_STATUS_OK
ReadX 10475 57344 8192 8192 NT_STATUS_OK
ReadX 10475 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10477 NT_STATUS_OK
Close 10477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10480 NT_STATUS_OK
WriteX 10480 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10480 258 NT_STATUS_OK
WriteX 10480 0 29253 29253 NT_STATUS_OK
Close 10480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10481 NT_STATUS_OK
Close 10481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10484 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10487 NT_STATUS_OK
WriteX 10487 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10487 258 NT_STATUS_OK
WriteX 10487 0 30183 30183 NT_STATUS_OK
Close 10487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10490 NT_STATUS_OK
WriteX 10490 0 510 510 NT_STATUS_OK
WriteX 10490 510 512 512 NT_STATUS_OK
WriteX 10490 1022 510 510 NT_STATUS_OK
WriteX 10490 1532 510 510 NT_STATUS_OK
WriteX 10490 2042 168 168 NT_STATUS_OK
Close 10490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
WriteX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 61440 4096 4096 NT_STATUS_OK
ReadX 10494 126976 4096 4096 NT_STATUS_OK
WriteX 10494 0 65536 65536 NT_STATUS_OK
WriteX 10494 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 61440 4096 4096 NT_STATUS_OK
ReadX 10495 126976 4096 4096 NT_STATUS_OK
ReadX 10495 192512 4096 4096 NT_STATUS_OK
ReadX 10495 258048 4096 4096 NT_STATUS_OK
WriteX 10495 0 65536 65536 NT_STATUS_OK
WriteX 10495 65536 65536 65536 NT_STATUS_OK
WriteX 10495 131072 65536 65536 NT_STATUS_OK
WriteX 10495 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 61440 4096 4096 NT_STATUS_OK
ReadX 10496 126976 4096 4096 NT_STATUS_OK
ReadX 10496 192512 4096 4096 NT_STATUS_OK
ReadX 10496 258048 4096 4096 NT_STATUS_OK
ReadX 10496 323584 4096 4096 NT_STATUS_OK
ReadX 10496 389120 4096 4096 NT_STATUS_OK
ReadX 10496 454656 4096 4096 NT_STATUS_OK
ReadX 10496 520192 4096 4096 NT_STATUS_OK
WriteX 10496 0 65536 65536 NT_STATUS_OK
WriteX 10496 65536 65536 65536 NT_STATUS_OK
WriteX 10496 131072 65536 65536 NT_STATUS_OK
WriteX 10496 196608 65536 65536 NT_STATUS_OK
WriteX 10496 262144 65536 65536 NT_STATUS_OK
WriteX 10496 327680 65536 65536 NT_STATUS_OK
WriteX 10496 393216 65536 65536 NT_STATUS_OK
WriteX 10496 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10497 NT_STATUS_OK
Close 10497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10499 NT_STATUS_OK
Close 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10515 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10517 NT_STATUS_OK
Close 10517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10521 NT_STATUS_OK
Close 10521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10536 NT_STATUS_OK
Close 10536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10551 NT_STATUS_OK
Close 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10565 NT_STATUS_OK
WriteX 10565 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10565 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10565 0 65536 65536 NT_STATUS_OK
WriteX 10565 65536 65536 65536 NT_STATUS_OK
WriteX 10565 131072 65536 65536 NT_STATUS_OK
WriteX 10565 196608 65536 65536 NT_STATUS_OK
WriteX 10565 262144 26634 26634 NT_STATUS_OK
Close 10565 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10571 NT_STATUS_OK
Close 10571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
ReadX 10573 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10581 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10601 NT_STATUS_OK
Close 10601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10606 NT_STATUS_OK
Close 10606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10621 NT_STATUS_OK
Close 10621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10635 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10638 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10664 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
Close 10666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10654 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10697 0 4096 4096 NT_STATUS_OK
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
ReadX 10699 4096 4096 4096 NT_STATUS_OK
ReadX 10699 8192 4096 4096 NT_STATUS_OK
ReadX 10699 12288 4096 4096 NT_STATUS_OK
ReadX 10699 16384 4096 4096 NT_STATUS_OK
ReadX 10699 20480 4096 4096 NT_STATUS_OK
ReadX 10699 24576 4096 4096 NT_STATUS_OK
ReadX 10699 28672 4096 4096 NT_STATUS_OK
ReadX 10699 32768 4096 4096 NT_STATUS_OK
ReadX 10699 36864 4096 4096 NT_STATUS_OK
ReadX 10699 40960 4096 4096 NT_STATUS_OK
ReadX 10699 45056 4096 4096 NT_STATUS_OK
ReadX 10699 49152 4096 4096 NT_STATUS_OK
ReadX 10699 53248 4096 4096 NT_STATUS_OK
ReadX 10699 57344 4096 4096 NT_STATUS_OK
ReadX 10699 61440 4096 4096 NT_STATUS_OK
ReadX 10699 65536 4096 4096 NT_STATUS_OK
ReadX 10699 69632 4096 4096 NT_STATUS_OK
ReadX 10699 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10699 1004 NT_STATUS_OK
WriteX 10699 0 4096 4096 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10700 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10705 NT_STATUS_OK
WriteX 10705 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 258 NT_STATUS_OK
WriteX 10705 0 65536 65536 NT_STATUS_OK
WriteX 10705 65536 19979 19979 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 1004 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
SET_FILE_INFORMATION 10706 1004 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
Close 10707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10711 1004 NT_STATUS_OK
WriteX 10711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Close 10711 NT_STATUS_OK
Close 10701 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10714 NT_STATUS_OK
Close 10714 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10717 NT_STATUS_OK
WriteX 10717 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 258 NT_STATUS_OK
WriteX 10717 0 65536 65536 NT_STATUS_OK
WriteX 10717 65536 17654 17654 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 4096 4096 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10719 NT_STATUS_OK
SET_FILE_INFORMATION 10719 1004 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10720 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
ReadX 10723 4096 4096 4096 NT_STATUS_OK
ReadX 10723 8192 4096 4096 NT_STATUS_OK
ReadX 10723 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10723 16384 4096 4096 NT_STATUS_OK
ReadX 10723 20480 4096 4096 NT_STATUS_OK
ReadX 10723 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10726 1004 NT_STATUS_OK
WriteX 10726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10729 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10732 NT_STATUS_OK
WriteX 10732 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 258 NT_STATUS_OK
WriteX 10732 0 65536 65536 NT_STATUS_OK
WriteX 10732 65536 19490 19490 NT_STATUS_OK
Close 10732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 0 4096 4096 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 1004 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
SET_FILE_INFORMATION 10733 1004 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10736 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10738 0 4096 4096 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
ReadX 10740 4096 4096 4096 NT_STATUS_OK
ReadX 10740 8192 4096 4096 NT_STATUS_OK
ReadX 10740 12288 4096 4096 NT_STATUS_OK
ReadX 10740 16384 4096 4096 NT_STATUS_OK
ReadX 10740 20480 4096 4096 NT_STATUS_OK
ReadX 10740 24576 4096 4096 NT_STATUS_OK
ReadX 10740 28672 4096 4096 NT_STATUS_OK
ReadX 10740 32768 4096 4096 NT_STATUS_OK
ReadX 10740 36864 4096 4096 NT_STATUS_OK
ReadX 10740 40960 4096 4096 NT_STATUS_OK
ReadX 10740 45056 4096 4096 NT_STATUS_OK
ReadX 10740 49152 4096 4096 NT_STATUS_OK
ReadX 10740 53248 4096 4096 NT_STATUS_OK
ReadX 10740 57344 4096 4096 NT_STATUS_OK
ReadX 10740 61440 4096 4096 NT_STATUS_OK
ReadX 10740 65536 4096 4096 NT_STATUS_OK
ReadX 10740 69632 4096 4096 NT_STATUS_OK
ReadX 10740 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10740 1004 NT_STATUS_OK
WriteX 10740 0 4096 4096 NT_STATUS_OK
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
SET_FILE_INFORMATION 10741 1004 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10743 NT_STATUS_OK
Close 10743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10746 NT_STATUS_OK
WriteX 10746 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10746 258 NT_STATUS_OK
WriteX 10746 0 65536 65536 NT_STATUS_OK
WriteX 10746 65536 8866 8866 NT_STATUS_OK
Close 10746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
Flush 10747 NT_STATUS_OK
SET_FILE_INFORMATION 10747 1004 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
Flush 10747 NT_STATUS_OK
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10751 1004 NT_STATUS_OK
WriteX 10751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10752 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10757 NT_STATUS_OK
WriteX 10757 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 258 NT_STATUS_OK
WriteX 10757 0 65536 65536 NT_STATUS_OK
WriteX 10757 65536 9298 9298 NT_STATUS_OK
Close 10757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
WriteX 10758 0 4096 4096 NT_STATUS_OK
Flush 10758 NT_STATUS_OK
SET_FILE_INFORMATION 10758 1004 NT_STATUS_OK
WriteX 10758 0 4096 4096 NT_STATUS_OK
Flush 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
SET_FILE_INFORMATION 10759 1004 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10761 NT_STATUS_OK
Close 10761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10764 0 4096 4096 NT_STATUS_OK
Close 10764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10765 NT_STATUS_OK
ReadX 10765 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10765 4096 4096 4096 NT_STATUS_OK
ReadX 10765 8192 4096 4096 NT_STATUS_OK
ReadX 10765 12288 4096 4096 NT_STATUS_OK
ReadX 10765 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10766 NT_STATUS_OK
ReadX 10766 0 4096 4096 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10765 NT_STATUS_OK
Close 10768 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 11540 11540 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
SET_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10776 NT_STATUS_OK
SET_FILE_INFORMATION 10776 1004 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 61440 4096 4096 NT_STATUS_OK
ReadX 10780 126976 4096 4096 NT_STATUS_OK
WriteX 10780 0 65536 65536 NT_STATUS_OK
WriteX 10780 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 61440 4096 4096 NT_STATUS_OK
ReadX 10781 126976 4096 4096 NT_STATUS_OK
ReadX 10781 192512 4096 4096 NT_STATUS_OK
ReadX 10781 258048 4096 4096 NT_STATUS_OK
WriteX 10781 0 65536 65536 NT_STATUS_OK
WriteX 10781 65536 65536 65536 NT_STATUS_OK
WriteX 10781 131072 65536 65536 NT_STATUS_OK
WriteX 10781 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 61440 4096 4096 NT_STATUS_OK
ReadX 10782 126976 4096 4096 NT_STATUS_OK
ReadX 10782 192512 4096 4096 NT_STATUS_OK
ReadX 10782 258048 4096 4096 NT_STATUS_OK
ReadX 10782 323584 4096 4096 NT_STATUS_OK
ReadX 10782 389120 4096 4096 NT_STATUS_OK
ReadX 10782 454656 4096 4096 NT_STATUS_OK
ReadX 10782 520192 4096 4096 NT_STATUS_OK
WriteX 10782 0 65536 65536 NT_STATUS_OK
WriteX 10782 65536 65536 65536 NT_STATUS_OK
WriteX 10782 131072 65536 65536 NT_STATUS_OK
WriteX 10782 196608 65536 65536 NT_STATUS_OK
WriteX 10782 262144 65536 65536 NT_STATUS_OK
WriteX 10782 327680 65536 65536 NT_STATUS_OK
WriteX 10782 393216 65536 65536 NT_STATUS_OK
WriteX 10782 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
ReadX 10783 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10784 NT_STATUS_OK
WriteX 10784 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10784 258 NT_STATUS_OK
WriteX 10784 0 53 53 NT_STATUS_OK
Close 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10782 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10783 8192 4096 4096 NT_STATUS_OK
ReadX 10783 12288 4096 4096 NT_STATUS_OK
WriteX 10787 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 258 NT_STATUS_OK
ReadX 10783 16384 4096 4096 NT_STATUS_OK
ReadX 10783 20480 4096 4096 NT_STATUS_OK
WriteX 10787 0 15360 15360 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10789 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10792 NT_STATUS_OK
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10791 4096 4096 4096 NT_STATUS_OK
ReadX 10791 8192 4096 4096 NT_STATUS_OK
ReadX 10791 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
ReadX 10794 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
ReadX 10795 4096 4096 4096 NT_STATUS_OK
ReadX 10795 8192 4096 4096 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10796 NT_STATUS_OK
WriteX 10796 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10796 258 NT_STATUS_OK
WriteX 10796 0 15360 15360 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10797 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10797 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10801 NT_STATUS_OK
SET_FILE_INFORMATION 10801 1004 NT_STATUS_OK
Close 10801 NT_STATUS_OK
WriteX 10797 0 4096 4096 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10802 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
ReadX 10804 4096 4096 4096 NT_STATUS_OK
ReadX 10804 8192 4096 4096 NT_STATUS_OK
ReadX 10804 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10804 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10806 NT_STATUS_OK
WriteX 10806 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 258 NT_STATUS_OK
WriteX 10806 0 53 53 NT_STATUS_OK
Close 10806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10807 NT_STATUS_OK
Close 10807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
ReadX 10805 12288 4096 4096 NT_STATUS_OK
WriteX 10809 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10809 258 NT_STATUS_OK
WriteX 10809 0 12006 12006 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
WriteX 10810 0 4096 4096 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10811 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10813 4096 4096 4096 NT_STATUS_OK
ReadX 10813 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10816 NT_STATUS_OK
WriteX 10816 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 258 NT_STATUS_OK
WriteX 10816 0 11991 11991 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10817 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10818 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10821 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
Close 10821 NT_STATUS_OK
WriteX 10817 0 4096 4096 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10824 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
ReadX 10824 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
WriteX 10824 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10824 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
Close 10800 NT_STATUS_OK
WriteX 10804 0 19054 19054 NT_STATUS_OK
WriteX 10824 0 12288 12288 NT_STATUS_OK
Close 10820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 61440 61440 NT_STATUS_OK
ReadX 10831 61440 4096 4096 NT_STATUS_OK
ReadX 10831 65536 61440 61440 NT_STATUS_OK
ReadX 10831 126976 4096 4096 NT_STATUS_OK
ReadX 10831 131072 61440 61440 NT_STATUS_OK
ReadX 10831 192512 4096 4096 NT_STATUS_OK
ReadX 10831 196608 61440 61440 NT_STATUS_OK
ReadX 10831 258048 4096 4096 NT_STATUS_OK
ReadX 10831 262144 61440 61440 NT_STATUS_OK
ReadX 10831 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 61440 61440 NT_STATUS_OK
ReadX 10832 61440 4096 4096 NT_STATUS_OK
ReadX 10832 65536 61440 61440 NT_STATUS_OK
ReadX 10832 126976 4096 4096 NT_STATUS_OK
ReadX 10832 131072 61440 61440 NT_STATUS_OK
ReadX 10832 192512 4096 4096 NT_STATUS_OK
ReadX 10832 196608 61440 61440 NT_STATUS_OK
ReadX 10832 258048 4096 4096 NT_STATUS_OK
ReadX 10832 262144 61440 61440 NT_STATUS_OK
ReadX 10832 323584 4096 4096 NT_STATUS_OK
ReadX 10832 327680 61440 61440 NT_STATUS_OK
ReadX 10832 389120 4096 4096 NT_STATUS_OK
ReadX 10832 393216 61440 61440 NT_STATUS_OK
ReadX 10832 454656 4096 4096 NT_STATUS_OK
ReadX 10832 458752 61440 61440 NT_STATUS_OK
ReadX 10832 520192 4096 4096 NT_STATUS_OK
ReadX 10832 524288 61440 61440 NT_STATUS_OK
ReadX 10832 585728 4096 4096 NT_STATUS_OK
ReadX 10832 589824 61440 61440 NT_STATUS_OK
ReadX 10832 651264 4096 4096 NT_STATUS_OK
ReadX 10832 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 61440 61440 NT_STATUS_OK
ReadX 10833 61440 4096 4096 NT_STATUS_OK
ReadX 10833 65536 61440 61440 NT_STATUS_OK
ReadX 10833 126976 4096 4096 NT_STATUS_OK
ReadX 10833 131072 61440 61440 NT_STATUS_OK
ReadX 10833 192512 4096 4096 NT_STATUS_OK
ReadX 10833 196608 61440 61440 NT_STATUS_OK
ReadX 10833 258048 4096 4096 NT_STATUS_OK
ReadX 10833 262144 61440 61440 NT_STATUS_OK
ReadX 10833 323584 4096 4096 NT_STATUS_OK
ReadX 10833 327680 61440 61440 NT_STATUS_OK
ReadX 10833 389120 4096 4096 NT_STATUS_OK
ReadX 10833 393216 61440 61440 NT_STATUS_OK
ReadX 10833 454656 4096 4096 NT_STATUS_OK
ReadX 10833 458752 61440 61440 NT_STATUS_OK
ReadX 10833 520192 4096 4096 NT_STATUS_OK
ReadX 10833 524288 61440 61440 NT_STATUS_OK
ReadX 10833 585728 4096 4096 NT_STATUS_OK
ReadX 10833 589824 61440 61440 NT_STATUS_OK
ReadX 10833 651264 4096 4096 NT_STATUS_OK
ReadX 10833 655360 61440 61440 NT_STATUS_OK
ReadX 10833 716800 4096 4096 NT_STATUS_OK
ReadX 10833 720896 61440 61440 NT_STATUS_OK
ReadX 10833 782336 4096 4096 NT_STATUS_OK
ReadX 10833 786432 61440 61440 NT_STATUS_OK
ReadX 10833 847872 4096 4096 NT_STATUS_OK
ReadX 10833 851968 61440 61440 NT_STATUS_OK
ReadX 10833 913408 4096 4096 NT_STATUS_OK
ReadX 10833 917504 61440 61440 NT_STATUS_OK
ReadX 10833 978944 4096 4096 NT_STATUS_OK
ReadX 10833 983040 61440 61440 NT_STATUS_OK
ReadX 10833 1044480 4096 4096 NT_STATUS_OK
ReadX 10833 1048576 61440 61440 NT_STATUS_OK
ReadX 10833 1110016 4096 4096 NT_STATUS_OK
ReadX 10833 1114112 61440 61440 NT_STATUS_OK
ReadX 10833 1175552 4096 4096 NT_STATUS_OK
ReadX 10833 1179648 61440 61440 NT_STATUS_OK
ReadX 10833 1241088 4096 4096 NT_STATUS_OK
ReadX 10833 1245184 61440 61440 NT_STATUS_OK
ReadX 10833 1306624 4096 4096 NT_STATUS_OK
ReadX 10833 1310720 61440 61440 NT_STATUS_OK
ReadX 10833 1372160 4096 4096 NT_STATUS_OK
ReadX 10833 1376256 61440 61440 NT_STATUS_OK
ReadX 10833 1437696 4096 4096 NT_STATUS_OK
ReadX 10833 1441792 61440 61440 NT_STATUS_OK
ReadX 10833 1503232 4096 4096 NT_STATUS_OK
ReadX 10833 1507328 61440 61440 NT_STATUS_OK
ReadX 10833 1568768 4096 4096 NT_STATUS_OK
ReadX 10833 1572864 61440 61440 NT_STATUS_OK
ReadX 10833 1634304 4096 4096 NT_STATUS_OK
ReadX 10833 1638400 61440 61440 NT_STATUS_OK
ReadX 10833 1699840 4096 4096 NT_STATUS_OK
ReadX 10833 1703936 61440 61440 NT_STATUS_OK
ReadX 10833 1765376 4096 4096 NT_STATUS_OK
ReadX 10833 1769472 61440 61440 NT_STATUS_OK
ReadX 10833 1830912 4096 4096 NT_STATUS_OK
ReadX 10833 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10840 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 1004 NT_STATUS_OK
WriteX 10840 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10842 NT_STATUS_OK
WriteX 10842 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10842 258 NT_STATUS_OK
WriteX 10842 0 491 491 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10840 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10846 NT_STATUS_OK
WriteX 10846 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10846 258 NT_STATUS_OK
WriteX 10846 0 543 543 NT_STATUS_OK
Close 10846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10860 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
WriteX 10860 0 2048 2048 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10861 NT_STATUS_OK
ReadX 10861 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
Flush 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10866 NT_STATUS_OK
WriteX 10866 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10866 258 NT_STATUS_OK
WriteX 10866 0 2048 2048 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10867 NT_STATUS_OK
ReadX 10867 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10871 NT_STATUS_OK
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10872 NT_STATUS_OK
WriteX 10872 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10872 258 NT_STATUS_OK
WriteX 10872 0 2048 2048 NT_STATUS_OK
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 2048 2048 NT_STATUS_OK
ReadX 10851 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10867 0 4096 4096 NT_STATUS_OK
WriteX 10851 0 8192 8192 NT_STATUS_OK
WriteX 10852 0 4096 4096 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
ReadX 10867 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10877 NT_STATUS_OK
QUERY_FILE_INFORMATION 10877 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10897 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 258 NT_STATUS_OK
WriteX 10897 0 2048 2048 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10905 NT_STATUS_OK
QUERY_FILE_INFORMATION 10905 1004 NT_STATUS_OK
WriteX 10905 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10905 258 NT_STATUS_OK
WriteX 10905 0 2048 2048 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
WriteX 10906 0 4096 4096 NT_STATUS_OK
Flush 10906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10906 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10900 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10908 NT_STATUS_OK
WriteX 10908 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10908 258 NT_STATUS_OK
WriteX 10908 0 4096 4096 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10912 0 4096 4096 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10886 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10915 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10919 NT_STATUS_OK
WriteX 10919 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10919 258 NT_STATUS_OK
WriteX 10919 0 2048 2048 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10934 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10917 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10936 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10944 NT_STATUS_OK
ReadX 10944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10956 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 1004 NT_STATUS_OK
WriteX 10956 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 258 NT_STATUS_OK
WriteX 10956 0 2048 2048 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10968 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 1004 NT_STATUS_OK
WriteX 10968 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
WriteX 10968 0 2048 2048 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10976 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 1004 NT_STATUS_OK
WriteX 10976 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 258 NT_STATUS_OK
WriteX 10976 0 2048 2048 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Flush 10969 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
Flush 10977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10959 4096 16384 16384 NT_STATUS_OK
ReadX 10939 4096 16384 16384 NT_STATUS_OK
ReadX 10971 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 2048 2048 NT_STATUS_OK
WriteX 10979 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10980 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10945 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10946 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10982 NT_STATUS_OK
QUERY_FILE_INFORMATION 10982 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10984 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10987 4096 16384 16384 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 8192 8192 NT_STATUS_OK
ReadX 10993 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11007 0 4096 4096 NT_STATUS_OK
ReadX 11007 4096 4096 4096 NT_STATUS_OK
ReadX 11007 8192 4096 4096 NT_STATUS_OK
WriteX 10993 0 4096 4096 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11013 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 1004 NT_STATUS_OK
WriteX 11013 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 2048 2048 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
ReadX 11016 4096 4096 4096 NT_STATUS_OK
WriteX 11016 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
ReadX 11018 4096 4096 4096 NT_STATUS_OK
WriteX 11018 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11019 NT_STATUS_OK
QUERY_FILE_INFORMATION 11019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 11003 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11021 0 4096 4096 NT_STATUS_OK
ReadX 11021 4096 4096 4096 NT_STATUS_OK
ReadX 11021 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11039 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 1004 NT_STATUS_OK
WriteX 11039 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 258 NT_STATUS_OK
WriteX 11039 0 2048 2048 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11040 NT_STATUS_OK
ReadX 11040 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11044 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11045 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 1004 NT_STATUS_OK
WriteX 11045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 2048 2048 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11029 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11047 NT_STATUS_OK
QUERY_FILE_INFORMATION 11047 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11049 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 61440 4096 4096 NT_STATUS_OK
ReadX 11051 126976 4096 4096 NT_STATUS_OK
WriteX 11051 0 65536 65536 NT_STATUS_OK
WriteX 11051 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 61440 4096 4096 NT_STATUS_OK
ReadX 11052 126976 4096 4096 NT_STATUS_OK
ReadX 11052 192512 4096 4096 NT_STATUS_OK
ReadX 11052 258048 4096 4096 NT_STATUS_OK
WriteX 11052 0 65536 65536 NT_STATUS_OK
WriteX 11052 65536 65536 65536 NT_STATUS_OK
WriteX 11052 131072 65536 65536 NT_STATUS_OK
WriteX 11052 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 61440 4096 4096 NT_STATUS_OK
ReadX 11053 126976 4096 4096 NT_STATUS_OK
ReadX 11053 192512 4096 4096 NT_STATUS_OK
ReadX 11053 258048 4096 4096 NT_STATUS_OK
ReadX 11053 323584 4096 4096 NT_STATUS_OK
ReadX 11053 389120 4096 4096 NT_STATUS_OK
ReadX 11053 454656 4096 4096 NT_STATUS_OK
ReadX 11053 520192 4096 4096 NT_STATUS_OK
WriteX 11053 0 65536 65536 NT_STATUS_OK
WriteX 11053 65536 65536 65536 NT_STATUS_OK
WriteX 11053 131072 65536 65536 NT_STATUS_OK
WriteX 11053 196608 65536 65536 NT_STATUS_OK
WriteX 11053 262144 65536 65536 NT_STATUS_OK
WriteX 11053 327680 65536 65536 NT_STATUS_OK
WriteX 11053 393216 65536 65536 NT_STATUS_OK
WriteX 11053 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11054 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11054 8192 4096 4096 NT_STATUS_OK
ReadX 11054 12288 4096 4096 NT_STATUS_OK
ReadX 11054 16384 4096 4096 NT_STATUS_OK
ReadX 11054 20480 4096 4096 NT_STATUS_OK
ReadX 11054 24576 4096 4096 NT_STATUS_OK
ReadX 11054 28672 4096 4096 NT_STATUS_OK
ReadX 11054 32768 4096 4096 NT_STATUS_OK
ReadX 11054 36864 4096 4096 NT_STATUS_OK
ReadX 11054 40960 4096 4096 NT_STATUS_OK
ReadX 11054 45056 4096 4096 NT_STATUS_OK
ReadX 11054 49152 4096 4096 NT_STATUS_OK
ReadX 11054 53248 4096 4096 NT_STATUS_OK
ReadX 11054 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11054 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11055 NT_STATUS_OK
Close 11055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11057 NT_STATUS_OK
WriteX 11057 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11057 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11057 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11057 1004 NT_STATUS_OK
WriteX 11057 0 57088 57088 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
Flush 11057 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11058 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
Close 11058 NT_STATUS_OK
SET_FILE_INFORMATION 11057 1004 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
Close 11057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11059 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11061 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11062 NT_STATUS_OK
WriteX 11062 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11062 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
WriteX 11062 0 51456 51456 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
Flush 11062 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11066 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11071 NT_STATUS_OK
WriteX 11071 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11071 258 NT_STATUS_OK
WriteX 11071 0 53077 53077 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11072 NT_STATUS_OK
WriteX 11072 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11072 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11072 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11072 1004 NT_STATUS_OK
WriteX 11072 0 65536 65536 NT_STATUS_OK
WriteX 11072 65536 1856 1856 NT_STATUS_OK
WriteX 11072 0 4096 4096 NT_STATUS_OK
Flush 11072 NT_STATUS_OK
SET_FILE_INFORMATION 11072 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11072 1004 NT_STATUS_OK
WriteX 11072 0 4096 4096 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11078 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11081 NT_STATUS_OK
WriteX 11081 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11081 258 NT_STATUS_OK
WriteX 11081 0 7983 7983 NT_STATUS_OK
Close 11081 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11086 NT_STATUS_OK
WriteX 11086 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 258 NT_STATUS_OK
WriteX 11086 0 65536 65536 NT_STATUS_OK
WriteX 11086 65536 65536 65536 NT_STATUS_OK
WriteX 11086 131072 65536 65536 NT_STATUS_OK
WriteX 11086 196608 65536 65536 NT_STATUS_OK
WriteX 11086 262144 65536 65536 NT_STATUS_OK
WriteX 11086 327680 65536 65536 NT_STATUS_OK
WriteX 11086 393216 65536 65536 NT_STATUS_OK
WriteX 11086 458752 46731 46731 NT_STATUS_OK
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11076 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
WriteX 11087 0 65536 65536 NT_STATUS_OK
WriteX 11087 65536 22848 22848 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11091 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11092 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
ReadX 11092 8192 4096 4096 NT_STATUS_OK
ReadX 11092 12288 4096 4096 NT_STATUS_OK
ReadX 11092 16384 4096 4096 NT_STATUS_OK
ReadX 11092 20480 4096 4096 NT_STATUS_OK
ReadX 11092 24576 4096 4096 NT_STATUS_OK
ReadX 11092 28672 4096 4096 NT_STATUS_OK
ReadX 11092 32768 4096 4096 NT_STATUS_OK
ReadX 11092 36864 4096 4096 NT_STATUS_OK
ReadX 11092 40960 4096 4096 NT_STATUS_OK
ReadX 11092 45056 4096 4096 NT_STATUS_OK
ReadX 11092 49152 4096 4096 NT_STATUS_OK
ReadX 11092 53248 4096 4096 NT_STATUS_OK
ReadX 11092 57344 4096 4096 NT_STATUS_OK
ReadX 11092 61440 4096 4096 NT_STATUS_OK
ReadX 11092 65536 4096 4096 NT_STATUS_OK
ReadX 11092 69632 4096 4096 NT_STATUS_OK
ReadX 11092 73728 4096 4096 NT_STATUS_OK
ReadX 11092 77824 4096 4096 NT_STATUS_OK
ReadX 11092 81920 4096 4096 NT_STATUS_OK
ReadX 11092 86016 4096 4096 NT_STATUS_OK
ReadX 11092 90112 4096 4096 NT_STATUS_OK
ReadX 11092 94208 4096 4096 NT_STATUS_OK
ReadX 11092 98304 4096 4096 NT_STATUS_OK
ReadX 11092 102400 4096 4096 NT_STATUS_OK
ReadX 11092 106496 4096 4096 NT_STATUS_OK
ReadX 11092 110592 4096 4096 NT_STATUS_OK
ReadX 11092 114688 4096 4096 NT_STATUS_OK
ReadX 11092 118784 4096 4096 NT_STATUS_OK
ReadX 11092 122880 4096 4096 NT_STATUS_OK
ReadX 11092 126976 4096 4096 NT_STATUS_OK
ReadX 11092 131072 4096 4096 NT_STATUS_OK
ReadX 11092 135168 4096 4096 NT_STATUS_OK
ReadX 11092 139264 4096 4096 NT_STATUS_OK
ReadX 11092 143360 4096 4096 NT_STATUS_OK
ReadX 11092 147456 4096 4096 NT_STATUS_OK
ReadX 11092 151552 4096 4096 NT_STATUS_OK
ReadX 11092 155648 4096 4096 NT_STATUS_OK
ReadX 11092 159744 4096 4096 NT_STATUS_OK
ReadX 11092 163840 4096 4096 NT_STATUS_OK
ReadX 11092 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11092 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11093 NT_STATUS_OK
Close 11093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11095 NT_STATUS_OK
WriteX 11095 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11095 258 NT_STATUS_OK
Close 11092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11096 NT_STATUS_OK
SET_FILE_INFORMATION 11096 1004 NT_STATUS_OK
Close 11096 NT_STATUS_OK
WriteX 11095 0 42388 42388 NT_STATUS_OK
Close 11095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
ReadX 11099 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11100 NT_STATUS_OK
WriteX 11100 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11100 258 NT_STATUS_OK
SET_FILE_INFORMATION 11100 1004 NT_STATUS_OK
WriteX 11100 0 42652 42652 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
ReadX 11104 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11106 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11109 NT_STATUS_OK
WriteX 11109 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 258 NT_STATUS_OK
WriteX 11109 0 65536 65536 NT_STATUS_OK
WriteX 11109 65536 49 49 NT_STATUS_OK
Close 11109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 61440 61440 NT_STATUS_OK
ReadX 11110 61440 4096 4096 NT_STATUS_OK
ReadX 11110 65536 61440 61440 NT_STATUS_OK
ReadX 11110 126976 4096 4096 NT_STATUS_OK
ReadX 11110 131072 61440 61440 NT_STATUS_OK
ReadX 11110 192512 4096 4096 NT_STATUS_OK
ReadX 11110 196608 61440 61440 NT_STATUS_OK
ReadX 11110 258048 4096 4096 NT_STATUS_OK
ReadX 11110 262144 61440 61440 NT_STATUS_OK
ReadX 11110 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 61440 61440 NT_STATUS_OK
ReadX 11111 61440 4096 4096 NT_STATUS_OK
ReadX 11111 65536 61440 61440 NT_STATUS_OK
ReadX 11111 126976 4096 4096 NT_STATUS_OK
ReadX 11111 131072 61440 61440 NT_STATUS_OK
ReadX 11111 192512 4096 4096 NT_STATUS_OK
ReadX 11111 196608 61440 61440 NT_STATUS_OK
ReadX 11111 258048 4096 4096 NT_STATUS_OK
ReadX 11111 262144 61440 61440 NT_STATUS_OK
ReadX 11111 323584 4096 4096 NT_STATUS_OK
ReadX 11111 327680 61440 61440 NT_STATUS_OK
ReadX 11111 389120 4096 4096 NT_STATUS_OK
ReadX 11111 393216 61440 61440 NT_STATUS_OK
ReadX 11111 454656 4096 4096 NT_STATUS_OK
ReadX 11111 458752 61440 61440 NT_STATUS_OK
ReadX 11111 520192 4096 4096 NT_STATUS_OK
ReadX 11111 524288 61440 61440 NT_STATUS_OK
ReadX 11111 585728 4096 4096 NT_STATUS_OK
ReadX 11111 589824 61440 61440 NT_STATUS_OK
ReadX 11111 651264 4096 4096 NT_STATUS_OK
ReadX 11111 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 61440 61440 NT_STATUS_OK
ReadX 11112 61440 4096 4096 NT_STATUS_OK
ReadX 11112 65536 61440 61440 NT_STATUS_OK
ReadX 11112 126976 4096 4096 NT_STATUS_OK
ReadX 11112 131072 61440 61440 NT_STATUS_OK
ReadX 11112 192512 4096 4096 NT_STATUS_OK
ReadX 11112 196608 61440 61440 NT_STATUS_OK
ReadX 11112 258048 4096 4096 NT_STATUS_OK
ReadX 11112 262144 61440 61440 NT_STATUS_OK
ReadX 11112 323584 4096 4096 NT_STATUS_OK
ReadX 11112 327680 61440 61440 NT_STATUS_OK
ReadX 11112 389120 4096 4096 NT_STATUS_OK
ReadX 11112 393216 61440 61440 NT_STATUS_OK
ReadX 11112 454656 4096 4096 NT_STATUS_OK
ReadX 11112 458752 61440 61440 NT_STATUS_OK
ReadX 11112 520192 4096 4096 NT_STATUS_OK
ReadX 11112 524288 61440 61440 NT_STATUS_OK
ReadX 11112 585728 4096 4096 NT_STATUS_OK
ReadX 11112 589824 61440 61440 NT_STATUS_OK
ReadX 11112 651264 4096 4096 NT_STATUS_OK
ReadX 11112 655360 61440 61440 NT_STATUS_OK
ReadX 11112 716800 4096 4096 NT_STATUS_OK
ReadX 11112 720896 61440 61440 NT_STATUS_OK
ReadX 11112 782336 4096 4096 NT_STATUS_OK
ReadX 11112 786432 61440 61440 NT_STATUS_OK
ReadX 11112 847872 4096 4096 NT_STATUS_OK
ReadX 11112 851968 61440 61440 NT_STATUS_OK
ReadX 11112 913408 4096 4096 NT_STATUS_OK
ReadX 11112 917504 61440 61440 NT_STATUS_OK
ReadX 11112 978944 4096 4096 NT_STATUS_OK
ReadX 11112 983040 61440 61440 NT_STATUS_OK
ReadX 11112 1044480 4096 4096 NT_STATUS_OK
ReadX 11112 1048576 61440 61440 NT_STATUS_OK
ReadX 11112 1110016 4096 4096 NT_STATUS_OK
ReadX 11112 1114112 61440 61440 NT_STATUS_OK
ReadX 11112 1175552 4096 4096 NT_STATUS_OK
ReadX 11112 1179648 61440 61440 NT_STATUS_OK
ReadX 11112 1241088 4096 4096 NT_STATUS_OK
ReadX 11112 1245184 61440 61440 NT_STATUS_OK
ReadX 11112 1306624 4096 4096 NT_STATUS_OK
ReadX 11112 1310720 61440 61440 NT_STATUS_OK
ReadX 11112 1372160 4096 4096 NT_STATUS_OK
ReadX 11112 1376256 61440 61440 NT_STATUS_OK
ReadX 11112 1437696 4096 4096 NT_STATUS_OK
ReadX 11112 1441792 61440 61440 NT_STATUS_OK
ReadX 11112 1503232 4096 4096 NT_STATUS_OK
ReadX 11112 1507328 61440 61440 NT_STATUS_OK
ReadX 11112 1568768 4096 4096 NT_STATUS_OK
ReadX 11112 1572864 61440 61440 NT_STATUS_OK
ReadX 11112 1634304 4096 4096 NT_STATUS_OK
ReadX 11112 1638400 61440 61440 NT_STATUS_OK
ReadX 11112 1699840 4096 4096 NT_STATUS_OK
ReadX 11112 1703936 61440 61440 NT_STATUS_OK
ReadX 11112 1765376 4096 4096 NT_STATUS_OK
ReadX 11112 1769472 61440 61440 NT_STATUS_OK
ReadX 11112 1830912 4096 4096 NT_STATUS_OK
ReadX 11112 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1005 NT_STATUS_OK
ReadX 11114 2156 24 24 NT_STATUS_OK
ReadX 11114 2139 276 276 NT_STATUS_OK
ReadX 11114 2136 14 14 NT_STATUS_OK
ReadX 11114 2136 7 7 NT_STATUS_OK
ReadX 11114 2138 12 12 NT_STATUS_OK
ReadX 11114 2137 8 8 NT_STATUS_OK
ReadX 11114 2135 15 15 NT_STATUS_OK
ReadX 11114 0 16 16 NT_STATUS_OK
ReadX 11114 16 2048 2048 NT_STATUS_OK
ReadX 11114 2064 2048 2048 NT_STATUS_OK
ReadX 11114 257 2048 2048 NT_STATUS_OK
ReadX 11114 385 2048 2048 NT_STATUS_OK
ReadX 11114 513 2048 2048 NT_STATUS_OK
ReadX 11114 641 2048 2048 NT_STATUS_OK
ReadX 11114 769 2048 2048 NT_STATUS_OK
ReadX 11114 897 2048 2048 NT_STATUS_OK
ReadX 11114 1025 2048 2048 NT_STATUS_OK
ReadX 11114 1153 2048 2048 NT_STATUS_OK
ReadX 11114 1281 2048 2048 NT_STATUS_OK
ReadX 11114 1409 2048 2048 NT_STATUS_OK
ReadX 11114 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11116 NT_STATUS_OK
Close 11116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11110 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11119 NT_STATUS_OK
WriteX 11119 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 258 NT_STATUS_OK
WriteX 11119 0 10575 10575 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11124 NT_STATUS_OK
LockX 11124 2147483538 1 NT_STATUS_OK
UnlockX 11124 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1005 NT_STATUS_OK
ReadX 11124 0 512 512 NT_STATUS_OK
ReadX 11124 512 512 512 NT_STATUS_OK
ReadX 11124 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1004 NT_STATUS_OK
Close 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11125 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1005 NT_STATUS_OK
ReadX 11125 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11126 NT_STATUS_OK
LockX 11126 2147483538 1 NT_STATUS_OK
UnlockX 11126 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 1005 NT_STATUS_OK
ReadX 11126 0 512 512 NT_STATUS_OK
ReadX 11126 512 512 512 NT_STATUS_OK
ReadX 11126 1024 512 512 NT_STATUS_OK
ReadX 11126 288 20 20 NT_STATUS_OK
ReadX 11126 308 2084 2084 NT_STATUS_OK
ReadX 11126 388 2084 2084 NT_STATUS_OK
ReadX 11126 388 2084 2084 NT_STATUS_OK
ReadX 11113 2157 1386 1386 NT_STATUS_OK
ReadX 11126 2472 399 399 NT_STATUS_OK
ReadX 11126 3072 1536 1536 NT_STATUS_OK
ReadX 11126 544 149 149 NT_STATUS_OK
ReadX 11126 693 485 485 NT_STATUS_OK
Close 11126 NT_STATUS_OK
ReadX 11113 2157 4096 4096 NT_STATUS_OK
ReadX 11113 6253 4096 4096 NT_STATUS_OK
ReadX 11113 10349 4096 4096 NT_STATUS_OK
ReadX 11113 14445 4096 4096 NT_STATUS_OK
ReadX 11113 18541 4096 4096 NT_STATUS_OK
ReadX 11113 22637 256 256 NT_STATUS_OK
ReadX 11113 22893 4096 4096 NT_STATUS_OK
ReadX 11113 26989 4096 4096 NT_STATUS_OK
ReadX 11113 31085 4096 4096 NT_STATUS_OK
ReadX 11113 35181 4096 4096 NT_STATUS_OK
ReadX 11113 39277 4096 4096 NT_STATUS_OK
ReadX 11113 43373 4096 4096 NT_STATUS_OK
ReadX 11113 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11113 2157 1024 1024 NT_STATUS_OK
ReadX 11113 1667 4688 4688 NT_STATUS_OK
ReadX 11113 6355 3516 3516 NT_STATUS_OK
ReadX 11113 9871 16384 16384 NT_STATUS_OK
ReadX 11113 26255 3771 3771 NT_STATUS_OK
ReadX 11113 30026 2048 2048 NT_STATUS_OK
ReadX 11113 32074 1024 1024 NT_STATUS_OK
ReadX 11113 33098 6652 6652 NT_STATUS_OK
ReadX 11113 39750 16384 16384 NT_STATUS_OK
ReadX 11113 56134 10496 10496 NT_STATUS_OK
ReadX 11113 66630 1784 1784 NT_STATUS_OK
ReadX 11113 68414 90 90 NT_STATUS_OK
ReadX 11113 68504 273 273 NT_STATUS_OK
ReadX 11113 68777 1600 1600 NT_STATUS_OK
ReadX 11113 70377 640 640 NT_STATUS_OK
ReadX 11113 71017 1280 1280 NT_STATUS_OK
ReadX 11113 72297 8464 8464 NT_STATUS_OK
ReadX 11113 80761 158 158 NT_STATUS_OK
ReadX 11113 80919 912 912 NT_STATUS_OK
ReadX 11113 81831 1980 1980 NT_STATUS_OK
ReadX 11113 83811 2256 2256 NT_STATUS_OK
ReadX 11113 86067 400 400 NT_STATUS_OK
ReadX 11113 86467 252 252 NT_STATUS_OK
ReadX 11113 86719 42 42 NT_STATUS_OK
ReadX 11113 86761 725 725 NT_STATUS_OK
ReadX 11113 2009 512 512 NT_STATUS_OK
ReadX 11113 3895 9 9 NT_STATUS_OK
ReadX 11113 3781 46 46 NT_STATUS_OK
ReadX 11113 4059 92 92 NT_STATUS_OK
ReadX 11113 3781 92 92 NT_STATUS_OK
ReadX 11113 3986 184 184 NT_STATUS_OK
ReadX 11113 3987 16384 16384 NT_STATUS_OK
ReadX 11113 3902 16384 16384 NT_STATUS_OK
ReadX 11113 3781 10240 10240 NT_STATUS_OK
ReadX 11113 3821 16384 16384 NT_STATUS_OK
ReadX 11113 3891 935 935 NT_STATUS_OK
ReadX 11113 4060 10240 10240 NT_STATUS_OK
ReadX 11113 4059 184 184 NT_STATUS_OK
ReadX 11113 256 184 184 NT_STATUS_OK
ReadX 11113 256 1026 1026 NT_STATUS_OK
ReadX 11113 3901 326 326 NT_STATUS_OK
ReadX 11113 3899 652 652 NT_STATUS_OK
ReadX 11113 256 2 2 NT_STATUS_OK
ReadX 11113 258 4948 4948 NT_STATUS_OK
Close 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11131 NT_STATUS_OK
WriteX 11131 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 258 NT_STATUS_OK
WriteX 11131 0 65536 65536 NT_STATUS_OK
WriteX 11131 65536 65536 65536 NT_STATUS_OK
WriteX 11131 131072 65536 65536 NT_STATUS_OK
WriteX 11131 196608 65536 65536 NT_STATUS_OK
WriteX 11131 262144 65536 65536 NT_STATUS_OK
WriteX 11131 327680 65536 65536 NT_STATUS_OK
WriteX 11131 393216 65536 65536 NT_STATUS_OK
WriteX 11131 458752 65536 65536 NT_STATUS_OK
WriteX 11131 524288 65536 65536 NT_STATUS_OK
WriteX 11131 589824 35257 35257 NT_STATUS_OK
Close 11131 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11136 NT_STATUS_OK
WriteX 11136 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 258 NT_STATUS_OK
WriteX 11136 0 65536 65536 NT_STATUS_OK
WriteX 11136 65536 65536 65536 NT_STATUS_OK
WriteX 11136 131072 65536 65536 NT_STATUS_OK
WriteX 11136 196608 65536 65536 NT_STATUS_OK
WriteX 11136 262144 65536 65536 NT_STATUS_OK
WriteX 11136 327680 65536 65536 NT_STATUS_OK
WriteX 11136 393216 65536 65536 NT_STATUS_OK
WriteX 11136 458752 65536 65536 NT_STATUS_OK
WriteX 11136 524288 65536 65536 NT_STATUS_OK
WriteX 11136 589824 57598 57598 NT_STATUS_OK
Close 11136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11138 NT_STATUS_OK
WriteX 11138 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11138 258 NT_STATUS_OK
WriteX 11138 0 12543 12543 NT_STATUS_OK
Flush 11138 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11140 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11143 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11144 NT_STATUS_OK
QUERY_FILE_INFORMATION 11144 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11144 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11144 1005 NT_STATUS_OK
ReadX 11144 1938 24 24 NT_STATUS_OK
ReadX 11144 1920 276 276 NT_STATUS_OK
ReadX 11144 1918 14 14 NT_STATUS_OK
ReadX 11144 1918 7 7 NT_STATUS_OK
ReadX 11144 1919 12 12 NT_STATUS_OK
ReadX 11144 1919 8 8 NT_STATUS_OK
ReadX 11144 1917 15 15 NT_STATUS_OK
ReadX 11144 0 16 16 NT_STATUS_OK
ReadX 11144 16 2048 2048 NT_STATUS_OK
ReadX 11144 2064 2048 2048 NT_STATUS_OK
ReadX 11144 257 2048 2048 NT_STATUS_OK
ReadX 11144 385 2048 2048 NT_STATUS_OK
ReadX 11144 513 2048 2048 NT_STATUS_OK
ReadX 11144 641 2048 2048 NT_STATUS_OK
ReadX 11144 769 2048 2048 NT_STATUS_OK
ReadX 11144 897 2048 2048 NT_STATUS_OK
ReadX 11144 1025 2048 2048 NT_STATUS_OK
ReadX 11144 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11146 NT_STATUS_OK
Close 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11149 NT_STATUS_OK
WriteX 11149 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11149 258 NT_STATUS_OK
WriteX 11149 0 11588 11588 NT_STATUS_OK
Flush 11149 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11154 NT_STATUS_OK
WriteX 11154 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11154 258 NT_STATUS_OK
WriteX 11154 0 11615 11615 NT_STATUS_OK
Flush 11154 NT_STATUS_OK
Close 11154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11160 NT_STATUS_OK
Close 11160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11163 NT_STATUS_OK
WriteX 11163 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11163 258 NT_STATUS_OK
WriteX 11163 0 65536 65536 NT_STATUS_OK
WriteX 11163 65536 16050 16050 NT_STATUS_OK
Close 11163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11143 1939 64 64 NT_STATUS_OK
ReadX 11143 128 248 248 NT_STATUS_OK
ReadX 11143 128 568 568 NT_STATUS_OK
ReadX 11143 3872 1536 1536 NT_STATUS_OK
ReadX 11143 3456 2560 2560 NT_STATUS_OK
ReadX 11143 3136 512 512 NT_STATUS_OK
ReadX 11143 2880 4096 4096 NT_STATUS_OK
ReadX 11143 3264 3072 3072 NT_STATUS_OK
ReadX 11143 320 4096 4096 NT_STATUS_OK
ReadX 11143 1024 4096 4096 NT_STATUS_OK
ReadX 11143 3616 4096 4096 NT_STATUS_OK
ReadX 11143 1939 64 64 NT_STATUS_OK
ReadX 11143 128 248 248 NT_STATUS_OK
ReadX 11143 128 608 608 NT_STATUS_OK
ReadX 11143 2858 1024 1024 NT_STATUS_OK
ReadX 11143 2810 4096 4096 NT_STATUS_OK
ReadX 11143 2826 4096 4096 NT_STATUS_OK
ReadX 11143 2580 2048 2048 NT_STATUS_OK
ReadX 11143 2800 2560 2560 NT_STATUS_OK
ReadX 11143 2100 4096 4096 NT_STATUS_OK
ReadX 11143 2084 4096 4096 NT_STATUS_OK
ReadX 11143 868 4096 4096 NT_STATUS_OK
ReadX 11143 2324 4096 4096 NT_STATUS_OK
ReadX 11143 884 4096 4096 NT_STATUS_OK
ReadX 11143 2604 1024 1024 NT_STATUS_OK
ReadX 11143 580 4096 4096 NT_STATUS_OK
ReadX 11143 596 4096 4096 NT_STATUS_OK
ReadX 11143 2752 4096 4096 NT_STATUS_OK
ReadX 11143 2842 1024 1024 NT_STATUS_OK
ReadX 11143 660 4096 4096 NT_STATUS_OK
ReadX 11143 2720 4096 4096 NT_STATUS_OK
ReadX 11143 2736 4096 4096 NT_STATUS_OK
ReadX 11143 628 4096 4096 NT_STATUS_OK
ReadX 11143 2704 4096 4096 NT_STATUS_OK
ReadX 11143 1556 4096 4096 NT_STATUS_OK
ReadX 11143 576 4096 4096 NT_STATUS_OK
ReadX 11143 3168 1536 1536 NT_STATUS_OK
ReadX 11143 832 4096 4096 NT_STATUS_OK
ReadX 11143 1088 4096 4096 NT_STATUS_OK
ReadX 11143 1344 4096 4096 NT_STATUS_OK
ReadX 11143 1600 4096 4096 NT_STATUS_OK
ReadX 11143 1856 4096 4096 NT_STATUS_OK
ReadX 11143 2112 4096 4096 NT_STATUS_OK
ReadX 11143 1892 4096 4096 NT_STATUS_OK
ReadX 11143 820 4096 4096 NT_STATUS_OK
ReadX 11143 788 4096 4096 NT_STATUS_OK
ReadX 11143 1604 4096 4096 NT_STATUS_OK
ReadX 11143 3648 4096 4096 NT_STATUS_OK
ReadX 11143 2608 4096 4096 NT_STATUS_OK
ReadX 11143 548 4096 4096 NT_STATUS_OK
ReadX 11143 740 4096 4096 NT_STATUS_OK
ReadX 11143 1344 4096 4096 NT_STATUS_OK
ReadX 11143 3392 4096 4096 NT_STATUS_OK
ReadX 11143 3904 4096 4096 NT_STATUS_OK
ReadX 11143 644 4096 4096 NT_STATUS_OK
ReadX 11143 676 4096 4096 NT_STATUS_OK
ReadX 11143 2688 4096 4096 NT_STATUS_OK
ReadX 11143 320 4096 4096 NT_STATUS_OK
ReadX 11143 900 4096 4096 NT_STATUS_OK
ReadX 11143 1908 4096 4096 NT_STATUS_OK
ReadX 11143 852 4096 4096 NT_STATUS_OK
ReadX 11143 724 4096 4096 NT_STATUS_OK
ReadX 11143 2292 4096 4096 NT_STATUS_OK
ReadX 11143 612 4096 4096 NT_STATUS_OK
ReadX 11143 388 4096 4096 NT_STATUS_OK
ReadX 11143 2368 4096 4096 NT_STATUS_OK
ReadX 11143 2624 4096 4096 NT_STATUS_OK
ReadX 11143 500 4096 4096 NT_STATUS_OK
ReadX 11143 356 4096 4096 NT_STATUS_OK
ReadX 11143 1024 4096 4096 NT_STATUS_OK
ReadX 11143 576 4096 4096 NT_STATUS_OK
ReadX 11143 340 4096 4096 NT_STATUS_OK
ReadX 11143 420 4096 4096 NT_STATUS_OK
ReadX 11143 1600 4096 4096 NT_STATUS_OK
ReadX 11143 404 4096 4096 NT_STATUS_OK
ReadX 11143 1428 4096 4096 NT_STATUS_OK
ReadX 11143 2656 4096 4096 NT_STATUS_OK
ReadX 11143 2624 4096 4096 NT_STATUS_OK
ReadX 11143 452 4096 4096 NT_STATUS_OK
ReadX 11143 692 4096 4096 NT_STATUS_OK
ReadX 11143 564 4096 4096 NT_STATUS_OK
ReadX 11143 372 4096 4096 NT_STATUS_OK
ReadX 11143 468 4096 4096 NT_STATUS_OK
ReadX 11143 484 4096 4096 NT_STATUS_OK
ReadX 11143 1088 4096 4096 NT_STATUS_OK
ReadX 11143 1924 4096 4096 NT_STATUS_OK
ReadX 11143 2768 4096 4096 NT_STATUS_OK
ReadX 11143 832 4096 4096 NT_STATUS_OK
ReadX 11143 836 4096 4096 NT_STATUS_OK
ReadX 11143 1856 4096 4096 NT_STATUS_OK
ReadX 11143 2640 4096 4096 NT_STATUS_OK
ReadX 11143 436 4096 4096 NT_STATUS_OK
ReadX 11143 1828 4096 4096 NT_STATUS_OK
ReadX 11143 804 4096 4096 NT_STATUS_OK
ReadX 11143 1860 4096 4096 NT_STATUS_OK
ReadX 11143 1812 4096 4096 NT_STATUS_OK
ReadX 11143 756 4096 4096 NT_STATUS_OK
ReadX 11143 1636 4096 4096 NT_STATUS_OK
ReadX 11143 772 4096 4096 NT_STATUS_OK
ReadX 11143 2036 4096 4096 NT_STATUS_OK
ReadX 11143 1220 4096 4096 NT_STATUS_OK
ReadX 11143 1652 4096 4096 NT_STATUS_OK
ReadX 11143 2588 4096 4096 NT_STATUS_OK
ReadX 11143 916 4096 4096 NT_STATUS_OK
ReadX 11143 260 4096 4096 NT_STATUS_OK
ReadX 11143 932 4096 4096 NT_STATUS_OK
ReadX 11143 2624 4096 4096 NT_STATUS_OK
ReadX 11143 308 4096 4096 NT_STATUS_OK
ReadX 11143 292 4096 4096 NT_STATUS_OK
ReadX 11143 1140 4096 4096 NT_STATUS_OK
ReadX 11143 276 4096 4096 NT_STATUS_OK
ReadX 11143 2020 4096 4096 NT_STATUS_OK
ReadX 11143 2880 4096 4096 NT_STATUS_OK
ReadX 11143 516 4096 4096 NT_STATUS_OK
ReadX 11143 1844 4096 4096 NT_STATUS_OK
ReadX 11143 1124 4096 4096 NT_STATUS_OK
ReadX 11143 3136 4096 4096 NT_STATUS_OK
ReadX 11143 324 4096 4096 NT_STATUS_OK
ReadX 11143 1156 4096 4096 NT_STATUS_OK
ReadX 11143 1172 4096 4096 NT_STATUS_OK
ReadX 11143 2112 4096 4096 NT_STATUS_OK
ReadX 11143 2368 4096 4096 NT_STATUS_OK
ReadX 11143 964 4096 4096 NT_STATUS_OK
ReadX 11143 980 4096 4096 NT_STATUS_OK
ReadX 11143 1012 4096 4096 NT_STATUS_OK
ReadX 11143 532 4096 4096 NT_STATUS_OK
ReadX 11143 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11143 1620 4096 4096 NT_STATUS_OK
ReadX 11143 1604 4096 4096 NT_STATUS_OK
ReadX 11143 2116 4096 4096 NT_STATUS_OK
ReadX 11143 2132 4096 4096 NT_STATUS_OK
ReadX 11143 2148 4096 4096 NT_STATUS_OK
ReadX 11143 2276 4096 4096 NT_STATUS_OK
ReadX 11143 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11165 NT_STATUS_OK
Close 11165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11168 NT_STATUS_OK
QUERY_FILE_INFORMATION 11123 1004 NT_STATUS_OK
Close 11123 NT_STATUS_OK
WriteX 11168 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11168 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1004 NT_STATUS_OK
Close 11125 NT_STATUS_OK
WriteX 11168 0 65536 65536 NT_STATUS_OK
WriteX 11168 65536 64850 64850 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11170 NT_STATUS_OK
WriteX 11170 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11170 258 NT_STATUS_OK
ReadX 11143 2068 4096 4096 NT_STATUS_OK
ReadX 11143 1588 4096 4096 NT_STATUS_OK
ReadX 11143 1572 4096 4096 NT_STATUS_OK
WriteX 11170 0 18630 18630 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11143 612 4096 4096 NT_STATUS_OK
ReadX 11143 564 4096 4096 NT_STATUS_OK
ReadX 11143 1876 4096 4096 NT_STATUS_OK
ReadX 11143 628 4096 4096 NT_STATUS_OK
ReadX 11143 740 4096 4096 NT_STATUS_OK
ReadX 11143 724 4096 4096 NT_STATUS_OK
ReadX 11143 644 4096 4096 NT_STATUS_OK
ReadX 11143 2324 4096 4096 NT_STATUS_OK
ReadX 11143 660 4096 4096 NT_STATUS_OK
ReadX 11143 852 4096 4096 NT_STATUS_OK
ReadX 11143 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11143 2368 4096 4096 NT_STATUS_OK
ReadX 11143 1024 4096 4096 NT_STATUS_OK
ReadX 11143 320 4096 4096 NT_STATUS_OK
ReadX 11143 580 4096 4096 NT_STATUS_OK
ReadX 11143 3136 512 512 NT_STATUS_OK
ReadX 11143 2880 4096 4096 NT_STATUS_OK
Close 11143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 61440 4096 4096 NT_STATUS_OK
ReadX 11175 126976 4096 4096 NT_STATUS_OK
WriteX 11175 0 65536 65536 NT_STATUS_OK
WriteX 11175 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 61440 4096 4096 NT_STATUS_OK
ReadX 11176 126976 4096 4096 NT_STATUS_OK
ReadX 11176 192512 4096 4096 NT_STATUS_OK
ReadX 11176 258048 4096 4096 NT_STATUS_OK
WriteX 11176 0 65536 65536 NT_STATUS_OK
WriteX 11176 65536 65536 65536 NT_STATUS_OK
WriteX 11176 131072 65536 65536 NT_STATUS_OK
WriteX 11176 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 61440 4096 4096 NT_STATUS_OK
ReadX 11177 126976 4096 4096 NT_STATUS_OK
ReadX 11177 192512 4096 4096 NT_STATUS_OK
ReadX 11177 258048 4096 4096 NT_STATUS_OK
ReadX 11177 323584 4096 4096 NT_STATUS_OK
ReadX 11177 389120 4096 4096 NT_STATUS_OK
ReadX 11177 454656 4096 4096 NT_STATUS_OK
ReadX 11177 520192 4096 4096 NT_STATUS_OK
WriteX 11177 0 65536 65536 NT_STATUS_OK
WriteX 11177 65536 65536 65536 NT_STATUS_OK
WriteX 11177 131072 65536 65536 NT_STATUS_OK
WriteX 11177 196608 65536 65536 NT_STATUS_OK
WriteX 11177 262144 65536 65536 NT_STATUS_OK
WriteX 11177 327680 65536 65536 NT_STATUS_OK
WriteX 11177 393216 65536 65536 NT_STATUS_OK
WriteX 11177 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11180 NT_STATUS_OK
WriteX 11180 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11180 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11178 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11174 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11185 NT_STATUS_OK
WriteX 11185 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
WriteX 11185 0 62591 62591 NT_STATUS_OK
Close 11185 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11187 NT_STATUS_OK
Close 11187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11190 NT_STATUS_OK
WriteX 11190 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
WriteX 11190 0 10845 10845 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11195 NT_STATUS_OK
WriteX 11195 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 258 NT_STATUS_OK
WriteX 11195 0 30118 30118 NT_STATUS_OK
Close 11195 NT_STATUS_OK
WriteX 11178 0 4096 4096 NT_STATUS_OK
WriteX 11180 0 64 64 NT_STATUS_OK
Close 11180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 61440 61440 NT_STATUS_OK
ReadX 11197 61440 4096 4096 NT_STATUS_OK
ReadX 11197 65536 61440 61440 NT_STATUS_OK
ReadX 11197 126976 4096 4096 NT_STATUS_OK
ReadX 11197 131072 61440 61440 NT_STATUS_OK
ReadX 11197 192512 4096 4096 NT_STATUS_OK
ReadX 11197 196608 61440 61440 NT_STATUS_OK
ReadX 11197 258048 4096 4096 NT_STATUS_OK
ReadX 11197 262144 61440 61440 NT_STATUS_OK
ReadX 11197 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 61440 61440 NT_STATUS_OK
ReadX 11198 61440 4096 4096 NT_STATUS_OK
ReadX 11198 65536 61440 61440 NT_STATUS_OK
ReadX 11198 126976 4096 4096 NT_STATUS_OK
ReadX 11198 131072 61440 61440 NT_STATUS_OK
ReadX 11198 192512 4096 4096 NT_STATUS_OK
ReadX 11198 196608 61440 61440 NT_STATUS_OK
ReadX 11198 258048 4096 4096 NT_STATUS_OK
ReadX 11198 262144 61440 61440 NT_STATUS_OK
ReadX 11198 323584 4096 4096 NT_STATUS_OK
ReadX 11198 327680 61440 61440 NT_STATUS_OK
ReadX 11198 389120 4096 4096 NT_STATUS_OK
ReadX 11198 393216 61440 61440 NT_STATUS_OK
ReadX 11198 454656 4096 4096 NT_STATUS_OK
ReadX 11198 458752 61440 61440 NT_STATUS_OK
ReadX 11198 520192 4096 4096 NT_STATUS_OK
ReadX 11198 524288 61440 61440 NT_STATUS_OK
ReadX 11198 585728 4096 4096 NT_STATUS_OK
ReadX 11198 589824 61440 61440 NT_STATUS_OK
ReadX 11198 651264 4096 4096 NT_STATUS_OK
ReadX 11198 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 61440 61440 NT_STATUS_OK
ReadX 11199 61440 4096 4096 NT_STATUS_OK
ReadX 11199 65536 61440 61440 NT_STATUS_OK
ReadX 11199 126976 4096 4096 NT_STATUS_OK
ReadX 11199 131072 61440 61440 NT_STATUS_OK
ReadX 11199 192512 4096 4096 NT_STATUS_OK
ReadX 11199 196608 61440 61440 NT_STATUS_OK
ReadX 11199 258048 4096 4096 NT_STATUS_OK
ReadX 11199 262144 61440 61440 NT_STATUS_OK
ReadX 11199 323584 4096 4096 NT_STATUS_OK
ReadX 11199 327680 61440 61440 NT_STATUS_OK
ReadX 11199 389120 4096 4096 NT_STATUS_OK
ReadX 11199 393216 61440 61440 NT_STATUS_OK
ReadX 11199 454656 4096 4096 NT_STATUS_OK
ReadX 11199 458752 61440 61440 NT_STATUS_OK
ReadX 11199 520192 4096 4096 NT_STATUS_OK
ReadX 11199 524288 61440 61440 NT_STATUS_OK
ReadX 11199 585728 4096 4096 NT_STATUS_OK
ReadX 11199 589824 61440 61440 NT_STATUS_OK
ReadX 11199 651264 4096 4096 NT_STATUS_OK
ReadX 11199 655360 61440 61440 NT_STATUS_OK
ReadX 11199 716800 4096 4096 NT_STATUS_OK
ReadX 11199 720896 61440 61440 NT_STATUS_OK
ReadX 11199 782336 4096 4096 NT_STATUS_OK
ReadX 11199 786432 61440 61440 NT_STATUS_OK
ReadX 11199 847872 4096 4096 NT_STATUS_OK
ReadX 11199 851968 61440 61440 NT_STATUS_OK
ReadX 11199 913408 4096 4096 NT_STATUS_OK
ReadX 11199 917504 61440 61440 NT_STATUS_OK
ReadX 11199 978944 4096 4096 NT_STATUS_OK
ReadX 11199 983040 61440 61440 NT_STATUS_OK
ReadX 11199 1044480 4096 4096 NT_STATUS_OK
ReadX 11199 1048576 61440 61440 NT_STATUS_OK
ReadX 11199 1110016 4096 4096 NT_STATUS_OK
ReadX 11199 1114112 61440 61440 NT_STATUS_OK
Close 11197 NT_STATUS_OK
ReadX 11199 1175552 4096 4096 NT_STATUS_OK
Close 11198 NT_STATUS_OK
ReadX 11199 1179648 61440 61440 NT_STATUS_OK
ReadX 11199 1241088 4096 4096 NT_STATUS_OK
ReadX 11199 1245184 61440 61440 NT_STATUS_OK
ReadX 11199 1306624 4096 4096 NT_STATUS_OK
ReadX 11199 1310720 61440 61440 NT_STATUS_OK
ReadX 11199 1372160 4096 4096 NT_STATUS_OK
ReadX 11199 1376256 61440 61440 NT_STATUS_OK
ReadX 11199 1437696 4096 4096 NT_STATUS_OK
ReadX 11199 1441792 61440 61440 NT_STATUS_OK
ReadX 11199 1503232 4096 4096 NT_STATUS_OK
ReadX 11199 1507328 61440 61440 NT_STATUS_OK
ReadX 11199 1568768 4096 4096 NT_STATUS_OK
ReadX 11199 1572864 61440 61440 NT_STATUS_OK
ReadX 11199 1634304 4096 4096 NT_STATUS_OK
ReadX 11199 1638400 61440 61440 NT_STATUS_OK
ReadX 11199 1699840 4096 4096 NT_STATUS_OK
ReadX 11199 1703936 61440 61440 NT_STATUS_OK
ReadX 11199 1765376 4096 4096 NT_STATUS_OK
ReadX 11199 1769472 61440 61440 NT_STATUS_OK
ReadX 11199 1830912 4096 4096 NT_STATUS_OK
ReadX 11199 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11200 NT_STATUS_OK
Close 11200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
ReadX 11204 4096 4096 4096 NT_STATUS_OK
ReadX 11204 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11205 NT_STATUS_OK
Close 11205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11207 NT_STATUS_OK
ReadX 11207 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11208 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 8192 8192 NT_STATUS_OK
ReadX 11212 8192 8192 8192 NT_STATUS_OK
ReadX 11212 16384 8192 8192 NT_STATUS_OK
ReadX 11212 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11214 NT_STATUS_OK
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11217 NT_STATUS_OK
WriteX 11217 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 10438 10438 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11221 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11223 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11226 NT_STATUS_OK
ReadX 11226 0 4096 4096 NT_STATUS_OK
ReadX 11226 4096 4096 4096 NT_STATUS_OK
ReadX 11226 8192 4096 4096 NT_STATUS_OK
ReadX 11226 12288 8192 8192 NT_STATUS_OK
ReadX 11226 20480 8192 8192 NT_STATUS_OK
ReadX 11226 28672 8192 8192 NT_STATUS_OK
ReadX 11226 36864 8192 8192 NT_STATUS_OK
ReadX 11226 45056 8192 8192 NT_STATUS_OK
ReadX 11226 53248 8192 8192 NT_STATUS_OK
ReadX 11226 61440 8192 8192 NT_STATUS_OK
ReadX 11226 69632 8192 8192 NT_STATUS_OK
ReadX 11226 77824 8192 8192 NT_STATUS_OK
ReadX 11226 86016 8192 8192 NT_STATUS_OK
ReadX 11226 94208 8192 8192 NT_STATUS_OK
ReadX 11226 102400 8192 8192 NT_STATUS_OK
ReadX 11226 110592 8192 8192 NT_STATUS_OK
ReadX 11226 118784 8192 8192 NT_STATUS_OK
ReadX 11226 126976 8192 8192 NT_STATUS_OK
ReadX 11226 135168 8192 8192 NT_STATUS_OK
ReadX 11226 143360 8192 8192 NT_STATUS_OK
ReadX 11226 151552 8192 8192 NT_STATUS_OK
ReadX 11226 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11228 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11231 NT_STATUS_OK
WriteX 11231 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11231 258 NT_STATUS_OK
WriteX 11231 0 28489 28489 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11232 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11234 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11235 NT_STATUS_OK
Close 11235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 8192 8192 NT_STATUS_OK
ReadX 11238 8192 8192 8192 NT_STATUS_OK
ReadX 11238 16384 8192 8192 NT_STATUS_OK
ReadX 11238 24576 8192 8192 NT_STATUS_OK
ReadX 11238 32768 16384 16384 NT_STATUS_OK
ReadX 11238 49152 8192 8192 NT_STATUS_OK
ReadX 11238 57344 8192 8192 NT_STATUS_OK
ReadX 11238 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11240 NT_STATUS_OK
Close 11240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11243 NT_STATUS_OK
WriteX 11243 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11243 258 NT_STATUS_OK
WriteX 11243 0 29253 29253 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11244 NT_STATUS_OK
Close 11244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11247 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11250 NT_STATUS_OK
WriteX 11250 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 258 NT_STATUS_OK
WriteX 11250 0 30183 30183 NT_STATUS_OK
Close 11250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11253 NT_STATUS_OK
WriteX 11253 0 510 510 NT_STATUS_OK
WriteX 11253 510 512 512 NT_STATUS_OK
WriteX 11253 1022 510 510 NT_STATUS_OK
WriteX 11253 1532 510 510 NT_STATUS_OK
WriteX 11253 2042 168 168 NT_STATUS_OK
Close 11253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
WriteX 11256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 61440 4096 4096 NT_STATUS_OK
ReadX 11257 126976 4096 4096 NT_STATUS_OK
WriteX 11257 0 65536 65536 NT_STATUS_OK
WriteX 11257 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 61440 4096 4096 NT_STATUS_OK
ReadX 11258 126976 4096 4096 NT_STATUS_OK
ReadX 11258 192512 4096 4096 NT_STATUS_OK
ReadX 11258 258048 4096 4096 NT_STATUS_OK
WriteX 11258 0 65536 65536 NT_STATUS_OK
WriteX 11258 65536 65536 65536 NT_STATUS_OK
WriteX 11258 131072 65536 65536 NT_STATUS_OK
WriteX 11258 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 61440 4096 4096 NT_STATUS_OK
ReadX 11259 126976 4096 4096 NT_STATUS_OK
ReadX 11259 192512 4096 4096 NT_STATUS_OK
ReadX 11259 258048 4096 4096 NT_STATUS_OK
ReadX 11259 323584 4096 4096 NT_STATUS_OK
ReadX 11259 389120 4096 4096 NT_STATUS_OK
ReadX 11259 454656 4096 4096 NT_STATUS_OK
ReadX 11259 520192 4096 4096 NT_STATUS_OK
WriteX 11259 0 65536 65536 NT_STATUS_OK
WriteX 11259 65536 65536 65536 NT_STATUS_OK
WriteX 11259 131072 65536 65536 NT_STATUS_OK
WriteX 11259 196608 65536 65536 NT_STATUS_OK
WriteX 11259 262144 65536 65536 NT_STATUS_OK
WriteX 11259 327680 65536 65536 NT_STATUS_OK
WriteX 11259 393216 65536 65536 NT_STATUS_OK
WriteX 11259 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11260 NT_STATUS_OK
Close 11260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11262 NT_STATUS_OK
Close 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11278 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11280 NT_STATUS_OK
Close 11280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11284 NT_STATUS_OK
Close 11284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11299 NT_STATUS_OK
Close 11299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11328 NT_STATUS_OK
WriteX 11328 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11328 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11328 0 65536 65536 NT_STATUS_OK
WriteX 11328 65536 65536 65536 NT_STATUS_OK
WriteX 11328 131072 65536 65536 NT_STATUS_OK
WriteX 11328 196608 65536 65536 NT_STATUS_OK
WriteX 11328 262144 26634 26634 NT_STATUS_OK
Close 11328 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11334 NT_STATUS_OK
Close 11334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
ReadX 11336 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11341 NT_STATUS_OK
Close 11341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11344 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11355 NT_STATUS_OK
Close 11355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11364 NT_STATUS_OK
Close 11364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11384 NT_STATUS_OK
Close 11384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11398 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11401 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
Close 11429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11417 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11460 0 4096 4096 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
ReadX 11462 4096 4096 4096 NT_STATUS_OK
ReadX 11462 8192 4096 4096 NT_STATUS_OK
ReadX 11462 12288 4096 4096 NT_STATUS_OK
ReadX 11462 16384 4096 4096 NT_STATUS_OK
ReadX 11462 20480 4096 4096 NT_STATUS_OK
ReadX 11462 24576 4096 4096 NT_STATUS_OK
ReadX 11462 28672 4096 4096 NT_STATUS_OK
ReadX 11462 32768 4096 4096 NT_STATUS_OK
ReadX 11462 36864 4096 4096 NT_STATUS_OK
ReadX 11462 40960 4096 4096 NT_STATUS_OK
ReadX 11462 45056 4096 4096 NT_STATUS_OK
ReadX 11462 49152 4096 4096 NT_STATUS_OK
ReadX 11462 53248 4096 4096 NT_STATUS_OK
ReadX 11462 57344 4096 4096 NT_STATUS_OK
ReadX 11462 61440 4096 4096 NT_STATUS_OK
ReadX 11462 65536 4096 4096 NT_STATUS_OK
ReadX 11462 69632 4096 4096 NT_STATUS_OK
ReadX 11462 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11462 1004 NT_STATUS_OK
WriteX 11462 0 4096 4096 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11463 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11468 NT_STATUS_OK
WriteX 11468 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 258 NT_STATUS_OK
WriteX 11468 0 65536 65536 NT_STATUS_OK
WriteX 11468 65536 19979 19979 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 1004 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
SET_FILE_INFORMATION 11469 1004 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
Close 11470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11474 1004 NT_STATUS_OK
WriteX 11474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Close 11464 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11477 NT_STATUS_OK
Close 11477 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11480 NT_STATUS_OK
WriteX 11480 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 258 NT_STATUS_OK
WriteX 11480 0 65536 65536 NT_STATUS_OK
WriteX 11480 65536 17654 17654 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 4096 4096 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11482 NT_STATUS_OK
SET_FILE_INFORMATION 11482 1004 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11483 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
ReadX 11486 4096 4096 4096 NT_STATUS_OK
ReadX 11486 8192 4096 4096 NT_STATUS_OK
ReadX 11486 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11486 16384 4096 4096 NT_STATUS_OK
ReadX 11486 20480 4096 4096 NT_STATUS_OK
ReadX 11486 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11489 1004 NT_STATUS_OK
WriteX 11489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11492 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11495 NT_STATUS_OK
WriteX 11495 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 258 NT_STATUS_OK
WriteX 11495 0 65536 65536 NT_STATUS_OK
WriteX 11495 65536 19490 19490 NT_STATUS_OK
Close 11495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 0 4096 4096 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 1004 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
SET_FILE_INFORMATION 11496 1004 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11499 NT_STATUS_OK
Close 11499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11501 0 4096 4096 NT_STATUS_OK
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
ReadX 11503 4096 4096 4096 NT_STATUS_OK
ReadX 11503 8192 4096 4096 NT_STATUS_OK
ReadX 11503 12288 4096 4096 NT_STATUS_OK
ReadX 11503 16384 4096 4096 NT_STATUS_OK
ReadX 11503 20480 4096 4096 NT_STATUS_OK
ReadX 11503 24576 4096 4096 NT_STATUS_OK
ReadX 11503 28672 4096 4096 NT_STATUS_OK
ReadX 11503 32768 4096 4096 NT_STATUS_OK
ReadX 11503 36864 4096 4096 NT_STATUS_OK
ReadX 11503 40960 4096 4096 NT_STATUS_OK
ReadX 11503 45056 4096 4096 NT_STATUS_OK
ReadX 11503 49152 4096 4096 NT_STATUS_OK
ReadX 11503 53248 4096 4096 NT_STATUS_OK
ReadX 11503 57344 4096 4096 NT_STATUS_OK
ReadX 11503 61440 4096 4096 NT_STATUS_OK
ReadX 11503 65536 4096 4096 NT_STATUS_OK
ReadX 11503 69632 4096 4096 NT_STATUS_OK
ReadX 11503 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11503 1004 NT_STATUS_OK
WriteX 11503 0 4096 4096 NT_STATUS_OK
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
SET_FILE_INFORMATION 11504 1004 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11506 NT_STATUS_OK
Close 11506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11509 NT_STATUS_OK
WriteX 11509 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11509 258 NT_STATUS_OK
WriteX 11509 0 65536 65536 NT_STATUS_OK
WriteX 11509 65536 8866 8866 NT_STATUS_OK
Close 11509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
Flush 11510 NT_STATUS_OK
SET_FILE_INFORMATION 11510 1004 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
Flush 11510 NT_STATUS_OK
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11514 1004 NT_STATUS_OK
WriteX 11514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11515 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11520 NT_STATUS_OK
WriteX 11520 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 258 NT_STATUS_OK
WriteX 11520 0 65536 65536 NT_STATUS_OK
WriteX 11520 65536 9298 9298 NT_STATUS_OK
Close 11520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
WriteX 11521 0 4096 4096 NT_STATUS_OK
Flush 11521 NT_STATUS_OK
SET_FILE_INFORMATION 11521 1004 NT_STATUS_OK
WriteX 11521 0 4096 4096 NT_STATUS_OK
Flush 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
SET_FILE_INFORMATION 11522 1004 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11527 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11527 0 4096 4096 NT_STATUS_OK
Close 11527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11528 NT_STATUS_OK
ReadX 11528 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11528 4096 4096 4096 NT_STATUS_OK
ReadX 11528 8192 4096 4096 NT_STATUS_OK
ReadX 11528 12288 4096 4096 NT_STATUS_OK
ReadX 11528 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11529 NT_STATUS_OK
ReadX 11529 0 4096 4096 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11528 NT_STATUS_OK
Close 11531 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 11540 11540 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
SET_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11539 NT_STATUS_OK
SET_FILE_INFORMATION 11539 1004 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 61440 4096 4096 NT_STATUS_OK
ReadX 11543 126976 4096 4096 NT_STATUS_OK
WriteX 11543 0 65536 65536 NT_STATUS_OK
WriteX 11543 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 61440 4096 4096 NT_STATUS_OK
ReadX 11544 126976 4096 4096 NT_STATUS_OK
ReadX 11544 192512 4096 4096 NT_STATUS_OK
ReadX 11544 258048 4096 4096 NT_STATUS_OK
WriteX 11544 0 65536 65536 NT_STATUS_OK
WriteX 11544 65536 65536 65536 NT_STATUS_OK
WriteX 11544 131072 65536 65536 NT_STATUS_OK
WriteX 11544 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 61440 4096 4096 NT_STATUS_OK
ReadX 11545 126976 4096 4096 NT_STATUS_OK
ReadX 11545 192512 4096 4096 NT_STATUS_OK
ReadX 11545 258048 4096 4096 NT_STATUS_OK
ReadX 11545 323584 4096 4096 NT_STATUS_OK
ReadX 11545 389120 4096 4096 NT_STATUS_OK
ReadX 11545 454656 4096 4096 NT_STATUS_OK
ReadX 11545 520192 4096 4096 NT_STATUS_OK
WriteX 11545 0 65536 65536 NT_STATUS_OK
WriteX 11545 65536 65536 65536 NT_STATUS_OK
WriteX 11545 131072 65536 65536 NT_STATUS_OK
WriteX 11545 196608 65536 65536 NT_STATUS_OK
WriteX 11545 262144 65536 65536 NT_STATUS_OK
WriteX 11545 327680 65536 65536 NT_STATUS_OK
WriteX 11545 393216 65536 65536 NT_STATUS_OK
WriteX 11545 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
ReadX 11546 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11547 NT_STATUS_OK
WriteX 11547 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11547 258 NT_STATUS_OK
WriteX 11547 0 53 53 NT_STATUS_OK
Close 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11548 NT_STATUS_OK
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11545 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11546 8192 4096 4096 NT_STATUS_OK
ReadX 11546 12288 4096 4096 NT_STATUS_OK
WriteX 11550 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 258 NT_STATUS_OK
ReadX 11546 16384 4096 4096 NT_STATUS_OK
ReadX 11546 20480 4096 4096 NT_STATUS_OK
WriteX 11550 0 15360 15360 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11552 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11555 NT_STATUS_OK
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11554 4096 4096 4096 NT_STATUS_OK
ReadX 11554 8192 4096 4096 NT_STATUS_OK
ReadX 11554 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
ReadX 11557 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
ReadX 11558 4096 4096 4096 NT_STATUS_OK
ReadX 11558 8192 4096 4096 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11559 NT_STATUS_OK
WriteX 11559 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11559 258 NT_STATUS_OK
WriteX 11559 0 15360 15360 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11560 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11560 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11564 NT_STATUS_OK
SET_FILE_INFORMATION 11564 1004 NT_STATUS_OK
Close 11564 NT_STATUS_OK
WriteX 11560 0 4096 4096 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
ReadX 11567 4096 4096 4096 NT_STATUS_OK
ReadX 11567 8192 4096 4096 NT_STATUS_OK
ReadX 11567 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11567 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11569 NT_STATUS_OK
WriteX 11569 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 258 NT_STATUS_OK
WriteX 11569 0 53 53 NT_STATUS_OK
Close 11569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11570 NT_STATUS_OK
Close 11570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
ReadX 11568 12288 4096 4096 NT_STATUS_OK
WriteX 11572 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11572 258 NT_STATUS_OK
WriteX 11572 0 12006 12006 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
WriteX 11573 0 4096 4096 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11574 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11576 4096 4096 4096 NT_STATUS_OK
ReadX 11576 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11579 NT_STATUS_OK
WriteX 11579 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 258 NT_STATUS_OK
WriteX 11579 0 11991 11991 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11584 NT_STATUS_OK
SET_FILE_INFORMATION 11584 1004 NT_STATUS_OK
Close 11584 NT_STATUS_OK
WriteX 11580 0 4096 4096 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11585 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11587 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
ReadX 11587 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
WriteX 11587 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11587 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
Close 11563 NT_STATUS_OK
WriteX 11567 0 19054 19054 NT_STATUS_OK
WriteX 11587 0 12288 12288 NT_STATUS_OK
Close 11583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11592 NT_STATUS_OK
Close 11592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 61440 61440 NT_STATUS_OK
ReadX 11594 61440 4096 4096 NT_STATUS_OK
ReadX 11594 65536 61440 61440 NT_STATUS_OK
ReadX 11594 126976 4096 4096 NT_STATUS_OK
ReadX 11594 131072 61440 61440 NT_STATUS_OK
ReadX 11594 192512 4096 4096 NT_STATUS_OK
ReadX 11594 196608 61440 61440 NT_STATUS_OK
ReadX 11594 258048 4096 4096 NT_STATUS_OK
ReadX 11594 262144 61440 61440 NT_STATUS_OK
ReadX 11594 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 61440 61440 NT_STATUS_OK
ReadX 11595 61440 4096 4096 NT_STATUS_OK
ReadX 11595 65536 61440 61440 NT_STATUS_OK
ReadX 11595 126976 4096 4096 NT_STATUS_OK
ReadX 11595 131072 61440 61440 NT_STATUS_OK
ReadX 11595 192512 4096 4096 NT_STATUS_OK
ReadX 11595 196608 61440 61440 NT_STATUS_OK
ReadX 11595 258048 4096 4096 NT_STATUS_OK
ReadX 11595 262144 61440 61440 NT_STATUS_OK
ReadX 11595 323584 4096 4096 NT_STATUS_OK
ReadX 11595 327680 61440 61440 NT_STATUS_OK
ReadX 11595 389120 4096 4096 NT_STATUS_OK
ReadX 11595 393216 61440 61440 NT_STATUS_OK
ReadX 11595 454656 4096 4096 NT_STATUS_OK
ReadX 11595 458752 61440 61440 NT_STATUS_OK
ReadX 11595 520192 4096 4096 NT_STATUS_OK
ReadX 11595 524288 61440 61440 NT_STATUS_OK
ReadX 11595 585728 4096 4096 NT_STATUS_OK
ReadX 11595 589824 61440 61440 NT_STATUS_OK
ReadX 11595 651264 4096 4096 NT_STATUS_OK
ReadX 11595 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 61440 61440 NT_STATUS_OK
ReadX 11596 61440 4096 4096 NT_STATUS_OK
ReadX 11596 65536 61440 61440 NT_STATUS_OK
ReadX 11596 126976 4096 4096 NT_STATUS_OK
ReadX 11596 131072 61440 61440 NT_STATUS_OK
ReadX 11596 192512 4096 4096 NT_STATUS_OK
ReadX 11596 196608 61440 61440 NT_STATUS_OK
ReadX 11596 258048 4096 4096 NT_STATUS_OK
ReadX 11596 262144 61440 61440 NT_STATUS_OK
ReadX 11596 323584 4096 4096 NT_STATUS_OK
ReadX 11596 327680 61440 61440 NT_STATUS_OK
ReadX 11596 389120 4096 4096 NT_STATUS_OK
ReadX 11596 393216 61440 61440 NT_STATUS_OK
ReadX 11596 454656 4096 4096 NT_STATUS_OK
ReadX 11596 458752 61440 61440 NT_STATUS_OK
ReadX 11596 520192 4096 4096 NT_STATUS_OK
ReadX 11596 524288 61440 61440 NT_STATUS_OK
ReadX 11596 585728 4096 4096 NT_STATUS_OK
ReadX 11596 589824 61440 61440 NT_STATUS_OK
ReadX 11596 651264 4096 4096 NT_STATUS_OK
ReadX 11596 655360 61440 61440 NT_STATUS_OK
ReadX 11596 716800 4096 4096 NT_STATUS_OK
ReadX 11596 720896 61440 61440 NT_STATUS_OK
ReadX 11596 782336 4096 4096 NT_STATUS_OK
ReadX 11596 786432 61440 61440 NT_STATUS_OK
ReadX 11596 847872 4096 4096 NT_STATUS_OK
ReadX 11596 851968 61440 61440 NT_STATUS_OK
ReadX 11596 913408 4096 4096 NT_STATUS_OK
ReadX 11596 917504 61440 61440 NT_STATUS_OK
ReadX 11596 978944 4096 4096 NT_STATUS_OK
ReadX 11596 983040 61440 61440 NT_STATUS_OK
ReadX 11596 1044480 4096 4096 NT_STATUS_OK
ReadX 11596 1048576 61440 61440 NT_STATUS_OK
ReadX 11596 1110016 4096 4096 NT_STATUS_OK
ReadX 11596 1114112 61440 61440 NT_STATUS_OK
ReadX 11596 1175552 4096 4096 NT_STATUS_OK
ReadX 11596 1179648 61440 61440 NT_STATUS_OK
ReadX 11596 1241088 4096 4096 NT_STATUS_OK
ReadX 11596 1245184 61440 61440 NT_STATUS_OK
ReadX 11596 1306624 4096 4096 NT_STATUS_OK
ReadX 11596 1310720 61440 61440 NT_STATUS_OK
ReadX 11596 1372160 4096 4096 NT_STATUS_OK
ReadX 11596 1376256 61440 61440 NT_STATUS_OK
ReadX 11596 1437696 4096 4096 NT_STATUS_OK
ReadX 11596 1441792 61440 61440 NT_STATUS_OK
ReadX 11596 1503232 4096 4096 NT_STATUS_OK
ReadX 11596 1507328 61440 61440 NT_STATUS_OK
ReadX 11596 1568768 4096 4096 NT_STATUS_OK
ReadX 11596 1572864 61440 61440 NT_STATUS_OK
ReadX 11596 1634304 4096 4096 NT_STATUS_OK
ReadX 11596 1638400 61440 61440 NT_STATUS_OK
ReadX 11596 1699840 4096 4096 NT_STATUS_OK
ReadX 11596 1703936 61440 61440 NT_STATUS_OK
ReadX 11596 1765376 4096 4096 NT_STATUS_OK
ReadX 11596 1769472 61440 61440 NT_STATUS_OK
ReadX 11596 1830912 4096 4096 NT_STATUS_OK
ReadX 11596 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11602 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11603 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 1004 NT_STATUS_OK
WriteX 11603 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11605 NT_STATUS_OK
WriteX 11605 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11605 258 NT_STATUS_OK
WriteX 11605 0 491 491 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11603 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11608 NT_STATUS_OK
Close 11608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11609 NT_STATUS_OK
WriteX 11609 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11609 258 NT_STATUS_OK
WriteX 11609 0 543 543 NT_STATUS_OK
Close 11609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11623 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
WriteX 11623 0 2048 2048 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11624 NT_STATUS_OK
ReadX 11624 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
Flush 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11629 NT_STATUS_OK
WriteX 11629 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11629 258 NT_STATUS_OK
WriteX 11629 0 2048 2048 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11630 NT_STATUS_OK
ReadX 11630 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11635 NT_STATUS_OK
WriteX 11635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11635 258 NT_STATUS_OK
WriteX 11635 0 2048 2048 NT_STATUS_OK
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 2048 2048 NT_STATUS_OK
ReadX 11614 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11630 0 4096 4096 NT_STATUS_OK
WriteX 11614 0 8192 8192 NT_STATUS_OK
WriteX 11615 0 4096 4096 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
ReadX 11630 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11640 NT_STATUS_OK
QUERY_FILE_INFORMATION 11640 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11615 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11650 NT_STATUS_OK
ReadX 11650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11660 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 1004 NT_STATUS_OK
WriteX 11660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 258 NT_STATUS_OK
WriteX 11660 0 2048 2048 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11668 NT_STATUS_OK
QUERY_FILE_INFORMATION 11668 1004 NT_STATUS_OK
WriteX 11668 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11668 258 NT_STATUS_OK
WriteX 11668 0 2048 2048 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
WriteX 11669 0 4096 4096 NT_STATUS_OK
Flush 11669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11663 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11671 NT_STATUS_OK
WriteX 11671 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11671 258 NT_STATUS_OK
WriteX 11671 0 4096 4096 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11675 0 4096 4096 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11649 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11678 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11682 NT_STATUS_OK
WriteX 11682 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11682 258 NT_STATUS_OK
WriteX 11682 0 2048 2048 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11697 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11680 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11699 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11707 NT_STATUS_OK
ReadX 11707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11719 NT_STATUS_OK
QUERY_FILE_INFORMATION 11719 1004 NT_STATUS_OK
WriteX 11719 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11719 258 NT_STATUS_OK
WriteX 11719 0 2048 2048 NT_STATUS_OK
Close 11719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11731 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 1004 NT_STATUS_OK
WriteX 11731 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
WriteX 11731 0 2048 2048 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11734 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11739 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 1004 NT_STATUS_OK
WriteX 11739 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 258 NT_STATUS_OK
WriteX 11739 0 2048 2048 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11740 NT_STATUS_OK
ReadX 11740 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11720 0 4096 4096 NT_STATUS_OK
Flush 11720 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Flush 11732 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
Flush 11740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11720 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11722 4096 16384 16384 NT_STATUS_OK
ReadX 11702 4096 16384 16384 NT_STATUS_OK
ReadX 11734 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 2048 2048 NT_STATUS_OK
WriteX 11742 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11743 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Close 11708 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11709 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11745 NT_STATUS_OK
QUERY_FILE_INFORMATION 11745 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11747 NT_STATUS_OK
QUERY_FILE_INFORMATION 11747 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11750 4096 16384 16384 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 8192 8192 NT_STATUS_OK
ReadX 11756 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11770 0 4096 4096 NT_STATUS_OK
ReadX 11770 4096 4096 4096 NT_STATUS_OK
ReadX 11770 8192 4096 4096 NT_STATUS_OK
WriteX 11756 0 4096 4096 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11776 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 1004 NT_STATUS_OK
WriteX 11776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 258 NT_STATUS_OK
WriteX 11776 0 2048 2048 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
ReadX 11779 4096 4096 4096 NT_STATUS_OK
WriteX 11779 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
ReadX 11781 4096 4096 4096 NT_STATUS_OK
WriteX 11781 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11782 NT_STATUS_OK
QUERY_FILE_INFORMATION 11782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11767 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11766 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11784 0 4096 4096 NT_STATUS_OK
ReadX 11784 4096 4096 4096 NT_STATUS_OK
ReadX 11784 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
ReadX 11785 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11802 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 1004 NT_STATUS_OK
WriteX 11802 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 258 NT_STATUS_OK
WriteX 11802 0 2048 2048 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11803 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11807 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11808 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 1004 NT_STATUS_OK
WriteX 11808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 258 NT_STATUS_OK
WriteX 11808 0 2048 2048 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11792 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11810 NT_STATUS_OK
QUERY_FILE_INFORMATION 11810 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11812 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 61440 4096 4096 NT_STATUS_OK
ReadX 11814 126976 4096 4096 NT_STATUS_OK
WriteX 11814 0 65536 65536 NT_STATUS_OK
WriteX 11814 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 61440 4096 4096 NT_STATUS_OK
ReadX 11815 126976 4096 4096 NT_STATUS_OK
ReadX 11815 192512 4096 4096 NT_STATUS_OK
ReadX 11815 258048 4096 4096 NT_STATUS_OK
WriteX 11815 0 65536 65536 NT_STATUS_OK
WriteX 11815 65536 65536 65536 NT_STATUS_OK
WriteX 11815 131072 65536 65536 NT_STATUS_OK
WriteX 11815 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 61440 4096 4096 NT_STATUS_OK
ReadX 11816 126976 4096 4096 NT_STATUS_OK
ReadX 11816 192512 4096 4096 NT_STATUS_OK
ReadX 11816 258048 4096 4096 NT_STATUS_OK
ReadX 11816 323584 4096 4096 NT_STATUS_OK
ReadX 11816 389120 4096 4096 NT_STATUS_OK
ReadX 11816 454656 4096 4096 NT_STATUS_OK
ReadX 11816 520192 4096 4096 NT_STATUS_OK
WriteX 11816 0 65536 65536 NT_STATUS_OK
WriteX 11816 65536 65536 65536 NT_STATUS_OK
WriteX 11816 131072 65536 65536 NT_STATUS_OK
WriteX 11816 196608 65536 65536 NT_STATUS_OK
WriteX 11816 262144 65536 65536 NT_STATUS_OK
WriteX 11816 327680 65536 65536 NT_STATUS_OK
WriteX 11816 393216 65536 65536 NT_STATUS_OK
WriteX 11816 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11817 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11817 8192 4096 4096 NT_STATUS_OK
ReadX 11817 12288 4096 4096 NT_STATUS_OK
ReadX 11817 16384 4096 4096 NT_STATUS_OK
ReadX 11817 20480 4096 4096 NT_STATUS_OK
ReadX 11817 24576 4096 4096 NT_STATUS_OK
ReadX 11817 28672 4096 4096 NT_STATUS_OK
ReadX 11817 32768 4096 4096 NT_STATUS_OK
ReadX 11817 36864 4096 4096 NT_STATUS_OK
ReadX 11817 40960 4096 4096 NT_STATUS_OK
ReadX 11817 45056 4096 4096 NT_STATUS_OK
ReadX 11817 49152 4096 4096 NT_STATUS_OK
ReadX 11817 53248 4096 4096 NT_STATUS_OK
ReadX 11817 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11817 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11818 NT_STATUS_OK
Close 11818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11820 NT_STATUS_OK
WriteX 11820 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11820 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11820 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
WriteX 11820 0 57088 57088 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Flush 11820 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11821 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
Close 11821 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11822 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11824 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11825 NT_STATUS_OK
WriteX 11825 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11825 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
WriteX 11825 0 51456 51456 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
Flush 11825 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11829 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11834 NT_STATUS_OK
WriteX 11834 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11834 258 NT_STATUS_OK
WriteX 11834 0 53077 53077 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11835 NT_STATUS_OK
WriteX 11835 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11835 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11835 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11835 1004 NT_STATUS_OK
WriteX 11835 0 65536 65536 NT_STATUS_OK
WriteX 11835 65536 1856 1856 NT_STATUS_OK
WriteX 11835 0 4096 4096 NT_STATUS_OK
Flush 11835 NT_STATUS_OK
SET_FILE_INFORMATION 11835 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11835 1004 NT_STATUS_OK
WriteX 11835 0 4096 4096 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11841 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11844 NT_STATUS_OK
WriteX 11844 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11844 258 NT_STATUS_OK
WriteX 11844 0 7983 7983 NT_STATUS_OK
Close 11844 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11849 NT_STATUS_OK
WriteX 11849 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 258 NT_STATUS_OK
WriteX 11849 0 65536 65536 NT_STATUS_OK
WriteX 11849 65536 65536 65536 NT_STATUS_OK
WriteX 11849 131072 65536 65536 NT_STATUS_OK
WriteX 11849 196608 65536 65536 NT_STATUS_OK
WriteX 11849 262144 65536 65536 NT_STATUS_OK
WriteX 11849 327680 65536 65536 NT_STATUS_OK
WriteX 11849 393216 65536 65536 NT_STATUS_OK
WriteX 11849 458752 46731 46731 NT_STATUS_OK
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11839 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
WriteX 11850 0 65536 65536 NT_STATUS_OK
WriteX 11850 65536 22848 22848 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11854 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11855 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
ReadX 11855 8192 4096 4096 NT_STATUS_OK
ReadX 11855 12288 4096 4096 NT_STATUS_OK
ReadX 11855 16384 4096 4096 NT_STATUS_OK
ReadX 11855 20480 4096 4096 NT_STATUS_OK
ReadX 11855 24576 4096 4096 NT_STATUS_OK
ReadX 11855 28672 4096 4096 NT_STATUS_OK
ReadX 11855 32768 4096 4096 NT_STATUS_OK
ReadX 11855 36864 4096 4096 NT_STATUS_OK
ReadX 11855 40960 4096 4096 NT_STATUS_OK
ReadX 11855 45056 4096 4096 NT_STATUS_OK
ReadX 11855 49152 4096 4096 NT_STATUS_OK
ReadX 11855 53248 4096 4096 NT_STATUS_OK
ReadX 11855 57344 4096 4096 NT_STATUS_OK
ReadX 11855 61440 4096 4096 NT_STATUS_OK
ReadX 11855 65536 4096 4096 NT_STATUS_OK
ReadX 11855 69632 4096 4096 NT_STATUS_OK
ReadX 11855 73728 4096 4096 NT_STATUS_OK
ReadX 11855 77824 4096 4096 NT_STATUS_OK
ReadX 11855 81920 4096 4096 NT_STATUS_OK
ReadX 11855 86016 4096 4096 NT_STATUS_OK
ReadX 11855 90112 4096 4096 NT_STATUS_OK
ReadX 11855 94208 4096 4096 NT_STATUS_OK
ReadX 11855 98304 4096 4096 NT_STATUS_OK
ReadX 11855 102400 4096 4096 NT_STATUS_OK
ReadX 11855 106496 4096 4096 NT_STATUS_OK
ReadX 11855 110592 4096 4096 NT_STATUS_OK
ReadX 11855 114688 4096 4096 NT_STATUS_OK
ReadX 11855 118784 4096 4096 NT_STATUS_OK
ReadX 11855 122880 4096 4096 NT_STATUS_OK
ReadX 11855 126976 4096 4096 NT_STATUS_OK
ReadX 11855 131072 4096 4096 NT_STATUS_OK
ReadX 11855 135168 4096 4096 NT_STATUS_OK
ReadX 11855 139264 4096 4096 NT_STATUS_OK
ReadX 11855 143360 4096 4096 NT_STATUS_OK
ReadX 11855 147456 4096 4096 NT_STATUS_OK
ReadX 11855 151552 4096 4096 NT_STATUS_OK
ReadX 11855 155648 4096 4096 NT_STATUS_OK
ReadX 11855 159744 4096 4096 NT_STATUS_OK
ReadX 11855 163840 4096 4096 NT_STATUS_OK
ReadX 11855 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11855 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11856 NT_STATUS_OK
Close 11856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11858 NT_STATUS_OK
WriteX 11858 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11858 258 NT_STATUS_OK
Close 11855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11859 NT_STATUS_OK
SET_FILE_INFORMATION 11859 1004 NT_STATUS_OK
Close 11859 NT_STATUS_OK
WriteX 11858 0 42388 42388 NT_STATUS_OK
Close 11858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
ReadX 11862 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11863 NT_STATUS_OK
WriteX 11863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
SET_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 0 42652 42652 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
ReadX 11867 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11869 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11872 NT_STATUS_OK
WriteX 11872 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11872 258 NT_STATUS_OK
WriteX 11872 0 65536 65536 NT_STATUS_OK
WriteX 11872 65536 49 49 NT_STATUS_OK
Close 11872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 61440 61440 NT_STATUS_OK
ReadX 11873 61440 4096 4096 NT_STATUS_OK
ReadX 11873 65536 61440 61440 NT_STATUS_OK
ReadX 11873 126976 4096 4096 NT_STATUS_OK
ReadX 11873 131072 61440 61440 NT_STATUS_OK
ReadX 11873 192512 4096 4096 NT_STATUS_OK
ReadX 11873 196608 61440 61440 NT_STATUS_OK
ReadX 11873 258048 4096 4096 NT_STATUS_OK
ReadX 11873 262144 61440 61440 NT_STATUS_OK
ReadX 11873 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 61440 61440 NT_STATUS_OK
ReadX 11874 61440 4096 4096 NT_STATUS_OK
ReadX 11874 65536 61440 61440 NT_STATUS_OK
ReadX 11874 126976 4096 4096 NT_STATUS_OK
ReadX 11874 131072 61440 61440 NT_STATUS_OK
ReadX 11874 192512 4096 4096 NT_STATUS_OK
ReadX 11874 196608 61440 61440 NT_STATUS_OK
ReadX 11874 258048 4096 4096 NT_STATUS_OK
ReadX 11874 262144 61440 61440 NT_STATUS_OK
ReadX 11874 323584 4096 4096 NT_STATUS_OK
ReadX 11874 327680 61440 61440 NT_STATUS_OK
ReadX 11874 389120 4096 4096 NT_STATUS_OK
ReadX 11874 393216 61440 61440 NT_STATUS_OK
ReadX 11874 454656 4096 4096 NT_STATUS_OK
ReadX 11874 458752 61440 61440 NT_STATUS_OK
ReadX 11874 520192 4096 4096 NT_STATUS_OK
ReadX 11874 524288 61440 61440 NT_STATUS_OK
ReadX 11874 585728 4096 4096 NT_STATUS_OK
ReadX 11874 589824 61440 61440 NT_STATUS_OK
ReadX 11874 651264 4096 4096 NT_STATUS_OK
ReadX 11874 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 61440 61440 NT_STATUS_OK
ReadX 11875 61440 4096 4096 NT_STATUS_OK
ReadX 11875 65536 61440 61440 NT_STATUS_OK
ReadX 11875 126976 4096 4096 NT_STATUS_OK
ReadX 11875 131072 61440 61440 NT_STATUS_OK
ReadX 11875 192512 4096 4096 NT_STATUS_OK
ReadX 11875 196608 61440 61440 NT_STATUS_OK
ReadX 11875 258048 4096 4096 NT_STATUS_OK
ReadX 11875 262144 61440 61440 NT_STATUS_OK
ReadX 11875 323584 4096 4096 NT_STATUS_OK
ReadX 11875 327680 61440 61440 NT_STATUS_OK
ReadX 11875 389120 4096 4096 NT_STATUS_OK
ReadX 11875 393216 61440 61440 NT_STATUS_OK
ReadX 11875 454656 4096 4096 NT_STATUS_OK
ReadX 11875 458752 61440 61440 NT_STATUS_OK
ReadX 11875 520192 4096 4096 NT_STATUS_OK
ReadX 11875 524288 61440 61440 NT_STATUS_OK
ReadX 11875 585728 4096 4096 NT_STATUS_OK
ReadX 11875 589824 61440 61440 NT_STATUS_OK
ReadX 11875 651264 4096 4096 NT_STATUS_OK
ReadX 11875 655360 61440 61440 NT_STATUS_OK
ReadX 11875 716800 4096 4096 NT_STATUS_OK
ReadX 11875 720896 61440 61440 NT_STATUS_OK
ReadX 11875 782336 4096 4096 NT_STATUS_OK
ReadX 11875 786432 61440 61440 NT_STATUS_OK
ReadX 11875 847872 4096 4096 NT_STATUS_OK
ReadX 11875 851968 61440 61440 NT_STATUS_OK
ReadX 11875 913408 4096 4096 NT_STATUS_OK
ReadX 11875 917504 61440 61440 NT_STATUS_OK
ReadX 11875 978944 4096 4096 NT_STATUS_OK
ReadX 11875 983040 61440 61440 NT_STATUS_OK
ReadX 11875 1044480 4096 4096 NT_STATUS_OK
ReadX 11875 1048576 61440 61440 NT_STATUS_OK
ReadX 11875 1110016 4096 4096 NT_STATUS_OK
ReadX 11875 1114112 61440 61440 NT_STATUS_OK
ReadX 11875 1175552 4096 4096 NT_STATUS_OK
ReadX 11875 1179648 61440 61440 NT_STATUS_OK
ReadX 11875 1241088 4096 4096 NT_STATUS_OK
ReadX 11875 1245184 61440 61440 NT_STATUS_OK
ReadX 11875 1306624 4096 4096 NT_STATUS_OK
ReadX 11875 1310720 61440 61440 NT_STATUS_OK
ReadX 11875 1372160 4096 4096 NT_STATUS_OK
ReadX 11875 1376256 61440 61440 NT_STATUS_OK
ReadX 11875 1437696 4096 4096 NT_STATUS_OK
ReadX 11875 1441792 61440 61440 NT_STATUS_OK
ReadX 11875 1503232 4096 4096 NT_STATUS_OK
ReadX 11875 1507328 61440 61440 NT_STATUS_OK
ReadX 11875 1568768 4096 4096 NT_STATUS_OK
ReadX 11875 1572864 61440 61440 NT_STATUS_OK
ReadX 11875 1634304 4096 4096 NT_STATUS_OK
ReadX 11875 1638400 61440 61440 NT_STATUS_OK
ReadX 11875 1699840 4096 4096 NT_STATUS_OK
ReadX 11875 1703936 61440 61440 NT_STATUS_OK
ReadX 11875 1765376 4096 4096 NT_STATUS_OK
ReadX 11875 1769472 61440 61440 NT_STATUS_OK
ReadX 11875 1830912 4096 4096 NT_STATUS_OK
ReadX 11875 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1005 NT_STATUS_OK
ReadX 11877 2156 24 24 NT_STATUS_OK
ReadX 11877 2139 276 276 NT_STATUS_OK
ReadX 11877 2136 14 14 NT_STATUS_OK
ReadX 11877 2136 7 7 NT_STATUS_OK
ReadX 11877 2138 12 12 NT_STATUS_OK
ReadX 11877 2137 8 8 NT_STATUS_OK
ReadX 11877 2135 15 15 NT_STATUS_OK
ReadX 11877 0 16 16 NT_STATUS_OK
ReadX 11877 16 2048 2048 NT_STATUS_OK
ReadX 11877 2064 2048 2048 NT_STATUS_OK
ReadX 11877 257 2048 2048 NT_STATUS_OK
ReadX 11877 385 2048 2048 NT_STATUS_OK
ReadX 11877 513 2048 2048 NT_STATUS_OK
ReadX 11877 641 2048 2048 NT_STATUS_OK
ReadX 11877 769 2048 2048 NT_STATUS_OK
ReadX 11877 897 2048 2048 NT_STATUS_OK
ReadX 11877 1025 2048 2048 NT_STATUS_OK
ReadX 11877 1153 2048 2048 NT_STATUS_OK
ReadX 11877 1281 2048 2048 NT_STATUS_OK
ReadX 11877 1409 2048 2048 NT_STATUS_OK
ReadX 11877 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11879 NT_STATUS_OK
Close 11879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11873 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11882 NT_STATUS_OK
WriteX 11882 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 258 NT_STATUS_OK
WriteX 11882 0 10575 10575 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11887 NT_STATUS_OK
LockX 11887 2147483538 1 NT_STATUS_OK
UnlockX 11887 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1005 NT_STATUS_OK
ReadX 11887 0 512 512 NT_STATUS_OK
ReadX 11887 512 512 512 NT_STATUS_OK
ReadX 11887 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1004 NT_STATUS_OK
Close 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11888 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1005 NT_STATUS_OK
ReadX 11888 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11889 NT_STATUS_OK
LockX 11889 2147483538 1 NT_STATUS_OK
UnlockX 11889 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1005 NT_STATUS_OK
ReadX 11889 0 512 512 NT_STATUS_OK
ReadX 11889 512 512 512 NT_STATUS_OK
ReadX 11889 1024 512 512 NT_STATUS_OK
ReadX 11889 288 20 20 NT_STATUS_OK
ReadX 11889 308 2084 2084 NT_STATUS_OK
ReadX 11889 388 2084 2084 NT_STATUS_OK
ReadX 11889 388 2084 2084 NT_STATUS_OK
ReadX 11876 2157 1386 1386 NT_STATUS_OK
ReadX 11889 2472 399 399 NT_STATUS_OK
ReadX 11889 3072 1536 1536 NT_STATUS_OK
ReadX 11889 544 149 149 NT_STATUS_OK
ReadX 11889 693 485 485 NT_STATUS_OK
Close 11889 NT_STATUS_OK
ReadX 11876 2157 4096 4096 NT_STATUS_OK
ReadX 11876 6253 4096 4096 NT_STATUS_OK
ReadX 11876 10349 4096 4096 NT_STATUS_OK
ReadX 11876 14445 4096 4096 NT_STATUS_OK
ReadX 11876 18541 4096 4096 NT_STATUS_OK
ReadX 11876 22637 256 256 NT_STATUS_OK
ReadX 11876 22893 4096 4096 NT_STATUS_OK
ReadX 11876 26989 4096 4096 NT_STATUS_OK
ReadX 11876 31085 4096 4096 NT_STATUS_OK
ReadX 11876 35181 4096 4096 NT_STATUS_OK
ReadX 11876 39277 4096 4096 NT_STATUS_OK
ReadX 11876 43373 4096 4096 NT_STATUS_OK
ReadX 11876 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11876 2157 1024 1024 NT_STATUS_OK
ReadX 11876 1667 4688 4688 NT_STATUS_OK
ReadX 11876 6355 3516 3516 NT_STATUS_OK
ReadX 11876 9871 16384 16384 NT_STATUS_OK
ReadX 11876 26255 3771 3771 NT_STATUS_OK
ReadX 11876 30026 2048 2048 NT_STATUS_OK
ReadX 11876 32074 1024 1024 NT_STATUS_OK
ReadX 11876 33098 6652 6652 NT_STATUS_OK
ReadX 11876 39750 16384 16384 NT_STATUS_OK
ReadX 11876 56134 10496 10496 NT_STATUS_OK
ReadX 11876 66630 1784 1784 NT_STATUS_OK
ReadX 11876 68414 90 90 NT_STATUS_OK
ReadX 11876 68504 273 273 NT_STATUS_OK
ReadX 11876 68777 1600 1600 NT_STATUS_OK
ReadX 11876 70377 640 640 NT_STATUS_OK
ReadX 11876 71017 1280 1280 NT_STATUS_OK
ReadX 11876 72297 8464 8464 NT_STATUS_OK
ReadX 11876 80761 158 158 NT_STATUS_OK
ReadX 11876 80919 912 912 NT_STATUS_OK
ReadX 11876 81831 1980 1980 NT_STATUS_OK
ReadX 11876 83811 2256 2256 NT_STATUS_OK
ReadX 11876 86067 400 400 NT_STATUS_OK
ReadX 11876 86467 252 252 NT_STATUS_OK
ReadX 11876 86719 42 42 NT_STATUS_OK
ReadX 11876 86761 725 725 NT_STATUS_OK
ReadX 11876 2009 512 512 NT_STATUS_OK
ReadX 11876 3895 9 9 NT_STATUS_OK
ReadX 11876 3781 46 46 NT_STATUS_OK
ReadX 11876 4059 92 92 NT_STATUS_OK
ReadX 11876 3781 92 92 NT_STATUS_OK
ReadX 11876 3986 184 184 NT_STATUS_OK
ReadX 11876 3987 16384 16384 NT_STATUS_OK
ReadX 11876 3902 16384 16384 NT_STATUS_OK
ReadX 11876 3781 10240 10240 NT_STATUS_OK
ReadX 11876 3821 16384 16384 NT_STATUS_OK
ReadX 11876 3891 935 935 NT_STATUS_OK
ReadX 11876 4060 10240 10240 NT_STATUS_OK
ReadX 11876 4059 184 184 NT_STATUS_OK
ReadX 11876 256 184 184 NT_STATUS_OK
ReadX 11876 256 1026 1026 NT_STATUS_OK
ReadX 11876 3901 326 326 NT_STATUS_OK
ReadX 11876 3899 652 652 NT_STATUS_OK
ReadX 11876 256 2 2 NT_STATUS_OK
ReadX 11876 258 4948 4948 NT_STATUS_OK
Close 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11894 NT_STATUS_OK
WriteX 11894 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 258 NT_STATUS_OK
WriteX 11894 0 65536 65536 NT_STATUS_OK
WriteX 11894 65536 65536 65536 NT_STATUS_OK
WriteX 11894 131072 65536 65536 NT_STATUS_OK
WriteX 11894 196608 65536 65536 NT_STATUS_OK
WriteX 11894 262144 65536 65536 NT_STATUS_OK
WriteX 11894 327680 65536 65536 NT_STATUS_OK
WriteX 11894 393216 65536 65536 NT_STATUS_OK
WriteX 11894 458752 65536 65536 NT_STATUS_OK
WriteX 11894 524288 65536 65536 NT_STATUS_OK
WriteX 11894 589824 35257 35257 NT_STATUS_OK
Close 11894 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11899 NT_STATUS_OK
WriteX 11899 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 258 NT_STATUS_OK
WriteX 11899 0 65536 65536 NT_STATUS_OK
WriteX 11899 65536 65536 65536 NT_STATUS_OK
WriteX 11899 131072 65536 65536 NT_STATUS_OK
WriteX 11899 196608 65536 65536 NT_STATUS_OK
WriteX 11899 262144 65536 65536 NT_STATUS_OK
WriteX 11899 327680 65536 65536 NT_STATUS_OK
WriteX 11899 393216 65536 65536 NT_STATUS_OK
WriteX 11899 458752 65536 65536 NT_STATUS_OK
WriteX 11899 524288 65536 65536 NT_STATUS_OK
WriteX 11899 589824 57598 57598 NT_STATUS_OK
Close 11899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11901 NT_STATUS_OK
WriteX 11901 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11901 258 NT_STATUS_OK
WriteX 11901 0 12543 12543 NT_STATUS_OK
Flush 11901 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11903 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11907 NT_STATUS_OK
QUERY_FILE_INFORMATION 11907 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11907 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11907 1005 NT_STATUS_OK
ReadX 11907 1938 24 24 NT_STATUS_OK
ReadX 11907 1920 276 276 NT_STATUS_OK
ReadX 11907 1918 14 14 NT_STATUS_OK
ReadX 11907 1918 7 7 NT_STATUS_OK
ReadX 11907 1919 12 12 NT_STATUS_OK
ReadX 11907 1919 8 8 NT_STATUS_OK
ReadX 11907 1917 15 15 NT_STATUS_OK
ReadX 11907 0 16 16 NT_STATUS_OK
ReadX 11907 16 2048 2048 NT_STATUS_OK
ReadX 11907 2064 2048 2048 NT_STATUS_OK
ReadX 11907 257 2048 2048 NT_STATUS_OK
ReadX 11907 385 2048 2048 NT_STATUS_OK
ReadX 11907 513 2048 2048 NT_STATUS_OK
ReadX 11907 641 2048 2048 NT_STATUS_OK
ReadX 11907 769 2048 2048 NT_STATUS_OK
ReadX 11907 897 2048 2048 NT_STATUS_OK
ReadX 11907 1025 2048 2048 NT_STATUS_OK
ReadX 11907 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11909 NT_STATUS_OK
Close 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11912 NT_STATUS_OK
WriteX 11912 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11912 258 NT_STATUS_OK
WriteX 11912 0 11588 11588 NT_STATUS_OK
Flush 11912 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11917 NT_STATUS_OK
WriteX 11917 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11917 258 NT_STATUS_OK
WriteX 11917 0 11615 11615 NT_STATUS_OK
Flush 11917 NT_STATUS_OK
Close 11917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11919 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11923 NT_STATUS_OK
Close 11923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11926 NT_STATUS_OK
WriteX 11926 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11926 258 NT_STATUS_OK
WriteX 11926 0 65536 65536 NT_STATUS_OK
WriteX 11926 65536 16050 16050 NT_STATUS_OK
Close 11926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11906 1939 64 64 NT_STATUS_OK
ReadX 11906 128 248 248 NT_STATUS_OK
ReadX 11906 128 568 568 NT_STATUS_OK
ReadX 11906 3872 1536 1536 NT_STATUS_OK
ReadX 11906 3456 2560 2560 NT_STATUS_OK
ReadX 11906 3136 512 512 NT_STATUS_OK
ReadX 11906 2880 4096 4096 NT_STATUS_OK
ReadX 11906 3264 3072 3072 NT_STATUS_OK
ReadX 11906 320 4096 4096 NT_STATUS_OK
ReadX 11906 1024 4096 4096 NT_STATUS_OK
ReadX 11906 3616 4096 4096 NT_STATUS_OK
ReadX 11906 1939 64 64 NT_STATUS_OK
ReadX 11906 128 248 248 NT_STATUS_OK
ReadX 11906 128 608 608 NT_STATUS_OK
ReadX 11906 2858 1024 1024 NT_STATUS_OK
ReadX 11906 2810 4096 4096 NT_STATUS_OK
ReadX 11906 2826 4096 4096 NT_STATUS_OK
ReadX 11906 2580 2048 2048 NT_STATUS_OK
ReadX 11906 2800 2560 2560 NT_STATUS_OK
ReadX 11906 2100 4096 4096 NT_STATUS_OK
ReadX 11906 2084 4096 4096 NT_STATUS_OK
ReadX 11906 868 4096 4096 NT_STATUS_OK
ReadX 11906 2324 4096 4096 NT_STATUS_OK
ReadX 11906 884 4096 4096 NT_STATUS_OK
ReadX 11906 2604 1024 1024 NT_STATUS_OK
ReadX 11906 580 4096 4096 NT_STATUS_OK
ReadX 11906 596 4096 4096 NT_STATUS_OK
ReadX 11906 2752 4096 4096 NT_STATUS_OK
ReadX 11906 2842 1024 1024 NT_STATUS_OK
ReadX 11906 660 4096 4096 NT_STATUS_OK
ReadX 11906 2720 4096 4096 NT_STATUS_OK
ReadX 11906 2736 4096 4096 NT_STATUS_OK
ReadX 11906 628 4096 4096 NT_STATUS_OK
ReadX 11906 2704 4096 4096 NT_STATUS_OK
ReadX 11906 1556 4096 4096 NT_STATUS_OK
ReadX 11906 576 4096 4096 NT_STATUS_OK
ReadX 11906 3168 1536 1536 NT_STATUS_OK
ReadX 11906 832 4096 4096 NT_STATUS_OK
ReadX 11906 1088 4096 4096 NT_STATUS_OK
ReadX 11906 1344 4096 4096 NT_STATUS_OK
ReadX 11906 1600 4096 4096 NT_STATUS_OK
ReadX 11906 1856 4096 4096 NT_STATUS_OK
ReadX 11906 2112 4096 4096 NT_STATUS_OK
ReadX 11906 1892 4096 4096 NT_STATUS_OK
ReadX 11906 820 4096 4096 NT_STATUS_OK
ReadX 11906 788 4096 4096 NT_STATUS_OK
ReadX 11906 1604 4096 4096 NT_STATUS_OK
ReadX 11906 3648 4096 4096 NT_STATUS_OK
ReadX 11906 2608 4096 4096 NT_STATUS_OK
ReadX 11906 548 4096 4096 NT_STATUS_OK
ReadX 11906 740 4096 4096 NT_STATUS_OK
ReadX 11906 1344 4096 4096 NT_STATUS_OK
ReadX 11906 3392 4096 4096 NT_STATUS_OK
ReadX 11906 3904 4096 4096 NT_STATUS_OK
ReadX 11906 644 4096 4096 NT_STATUS_OK
ReadX 11906 676 4096 4096 NT_STATUS_OK
ReadX 11906 2688 4096 4096 NT_STATUS_OK
ReadX 11906 320 4096 4096 NT_STATUS_OK
ReadX 11906 900 4096 4096 NT_STATUS_OK
ReadX 11906 1908 4096 4096 NT_STATUS_OK
ReadX 11906 852 4096 4096 NT_STATUS_OK
ReadX 11906 724 4096 4096 NT_STATUS_OK
ReadX 11906 2292 4096 4096 NT_STATUS_OK
ReadX 11906 612 4096 4096 NT_STATUS_OK
ReadX 11906 388 4096 4096 NT_STATUS_OK
ReadX 11906 2368 4096 4096 NT_STATUS_OK
ReadX 11906 2624 4096 4096 NT_STATUS_OK
ReadX 11906 500 4096 4096 NT_STATUS_OK
ReadX 11906 356 4096 4096 NT_STATUS_OK
ReadX 11906 1024 4096 4096 NT_STATUS_OK
ReadX 11906 576 4096 4096 NT_STATUS_OK
ReadX 11906 340 4096 4096 NT_STATUS_OK
ReadX 11906 420 4096 4096 NT_STATUS_OK
ReadX 11906 1600 4096 4096 NT_STATUS_OK
ReadX 11906 404 4096 4096 NT_STATUS_OK
ReadX 11906 1428 4096 4096 NT_STATUS_OK
ReadX 11906 2656 4096 4096 NT_STATUS_OK
ReadX 11906 2624 4096 4096 NT_STATUS_OK
ReadX 11906 452 4096 4096 NT_STATUS_OK
ReadX 11906 692 4096 4096 NT_STATUS_OK
ReadX 11906 564 4096 4096 NT_STATUS_OK
ReadX 11906 372 4096 4096 NT_STATUS_OK
ReadX 11906 468 4096 4096 NT_STATUS_OK
ReadX 11906 484 4096 4096 NT_STATUS_OK
ReadX 11906 1088 4096 4096 NT_STATUS_OK
ReadX 11906 1924 4096 4096 NT_STATUS_OK
ReadX 11906 2768 4096 4096 NT_STATUS_OK
ReadX 11906 832 4096 4096 NT_STATUS_OK
ReadX 11906 836 4096 4096 NT_STATUS_OK
ReadX 11906 1856 4096 4096 NT_STATUS_OK
ReadX 11906 2640 4096 4096 NT_STATUS_OK
ReadX 11906 436 4096 4096 NT_STATUS_OK
ReadX 11906 1828 4096 4096 NT_STATUS_OK
ReadX 11906 804 4096 4096 NT_STATUS_OK
ReadX 11906 1860 4096 4096 NT_STATUS_OK
ReadX 11906 1812 4096 4096 NT_STATUS_OK
ReadX 11906 756 4096 4096 NT_STATUS_OK
ReadX 11906 1636 4096 4096 NT_STATUS_OK
ReadX 11906 772 4096 4096 NT_STATUS_OK
ReadX 11906 2036 4096 4096 NT_STATUS_OK
ReadX 11906 1220 4096 4096 NT_STATUS_OK
ReadX 11906 1652 4096 4096 NT_STATUS_OK
ReadX 11906 2588 4096 4096 NT_STATUS_OK
ReadX 11906 916 4096 4096 NT_STATUS_OK
ReadX 11906 260 4096 4096 NT_STATUS_OK
ReadX 11906 932 4096 4096 NT_STATUS_OK
ReadX 11906 2624 4096 4096 NT_STATUS_OK
ReadX 11906 308 4096 4096 NT_STATUS_OK
ReadX 11906 292 4096 4096 NT_STATUS_OK
ReadX 11906 1140 4096 4096 NT_STATUS_OK
ReadX 11906 276 4096 4096 NT_STATUS_OK
ReadX 11906 2020 4096 4096 NT_STATUS_OK
ReadX 11906 2880 4096 4096 NT_STATUS_OK
ReadX 11906 516 4096 4096 NT_STATUS_OK
ReadX 11906 1844 4096 4096 NT_STATUS_OK
ReadX 11906 1124 4096 4096 NT_STATUS_OK
ReadX 11906 3136 4096 4096 NT_STATUS_OK
ReadX 11906 324 4096 4096 NT_STATUS_OK
ReadX 11906 1156 4096 4096 NT_STATUS_OK
ReadX 11906 1172 4096 4096 NT_STATUS_OK
ReadX 11906 2112 4096 4096 NT_STATUS_OK
ReadX 11906 2368 4096 4096 NT_STATUS_OK
ReadX 11906 964 4096 4096 NT_STATUS_OK
ReadX 11906 980 4096 4096 NT_STATUS_OK
ReadX 11906 1012 4096 4096 NT_STATUS_OK
ReadX 11906 532 4096 4096 NT_STATUS_OK
ReadX 11906 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11906 1620 4096 4096 NT_STATUS_OK
ReadX 11906 1604 4096 4096 NT_STATUS_OK
ReadX 11906 2116 4096 4096 NT_STATUS_OK
ReadX 11906 2132 4096 4096 NT_STATUS_OK
ReadX 11906 2148 4096 4096 NT_STATUS_OK
ReadX 11906 2276 4096 4096 NT_STATUS_OK
ReadX 11906 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11928 NT_STATUS_OK
Close 11928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11931 NT_STATUS_OK
QUERY_FILE_INFORMATION 11886 1004 NT_STATUS_OK
Close 11886 NT_STATUS_OK
WriteX 11931 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11931 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1004 NT_STATUS_OK
Close 11888 NT_STATUS_OK
WriteX 11931 0 65536 65536 NT_STATUS_OK
WriteX 11931 65536 64850 64850 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11933 NT_STATUS_OK
WriteX 11933 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11933 258 NT_STATUS_OK
ReadX 11906 2068 4096 4096 NT_STATUS_OK
ReadX 11906 1588 4096 4096 NT_STATUS_OK
ReadX 11906 1572 4096 4096 NT_STATUS_OK
WriteX 11933 0 18630 18630 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11906 612 4096 4096 NT_STATUS_OK
ReadX 11906 564 4096 4096 NT_STATUS_OK
ReadX 11906 1876 4096 4096 NT_STATUS_OK
ReadX 11906 628 4096 4096 NT_STATUS_OK
ReadX 11906 740 4096 4096 NT_STATUS_OK
ReadX 11906 724 4096 4096 NT_STATUS_OK
ReadX 11906 644 4096 4096 NT_STATUS_OK
ReadX 11906 2324 4096 4096 NT_STATUS_OK
ReadX 11906 660 4096 4096 NT_STATUS_OK
ReadX 11906 852 4096 4096 NT_STATUS_OK
ReadX 11906 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11906 2368 4096 4096 NT_STATUS_OK
ReadX 11906 1024 4096 4096 NT_STATUS_OK
ReadX 11906 320 4096 4096 NT_STATUS_OK
ReadX 11906 580 4096 4096 NT_STATUS_OK
ReadX 11906 3136 512 512 NT_STATUS_OK
ReadX 11906 2880 4096 4096 NT_STATUS_OK
Close 11906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 61440 4096 4096 NT_STATUS_OK
ReadX 11938 126976 4096 4096 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 61440 4096 4096 NT_STATUS_OK
ReadX 11939 126976 4096 4096 NT_STATUS_OK
ReadX 11939 192512 4096 4096 NT_STATUS_OK
ReadX 11939 258048 4096 4096 NT_STATUS_OK
WriteX 11939 0 65536 65536 NT_STATUS_OK
WriteX 11939 65536 65536 65536 NT_STATUS_OK
WriteX 11939 131072 65536 65536 NT_STATUS_OK
WriteX 11939 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 61440 4096 4096 NT_STATUS_OK
ReadX 11940 126976 4096 4096 NT_STATUS_OK
ReadX 11940 192512 4096 4096 NT_STATUS_OK
ReadX 11940 258048 4096 4096 NT_STATUS_OK
ReadX 11940 323584 4096 4096 NT_STATUS_OK
ReadX 11940 389120 4096 4096 NT_STATUS_OK
ReadX 11940 454656 4096 4096 NT_STATUS_OK
ReadX 11940 520192 4096 4096 NT_STATUS_OK
WriteX 11940 0 65536 65536 NT_STATUS_OK
WriteX 11940 65536 65536 65536 NT_STATUS_OK
WriteX 11940 131072 65536 65536 NT_STATUS_OK
WriteX 11940 196608 65536 65536 NT_STATUS_OK
WriteX 11940 262144 65536 65536 NT_STATUS_OK
WriteX 11940 327680 65536 65536 NT_STATUS_OK
WriteX 11940 393216 65536 65536 NT_STATUS_OK
WriteX 11940 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11943 NT_STATUS_OK
WriteX 11943 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11943 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11941 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11948 NT_STATUS_OK
WriteX 11948 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
WriteX 11948 0 62591 62591 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11950 NT_STATUS_OK
Close 11950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11953 NT_STATUS_OK
WriteX 11953 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
WriteX 11953 0 10845 10845 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11958 NT_STATUS_OK
WriteX 11958 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 258 NT_STATUS_OK
WriteX 11958 0 30118 30118 NT_STATUS_OK
Close 11958 NT_STATUS_OK
WriteX 11941 0 4096 4096 NT_STATUS_OK
WriteX 11943 0 64 64 NT_STATUS_OK
Close 11943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 61440 61440 NT_STATUS_OK
ReadX 11960 61440 4096 4096 NT_STATUS_OK
ReadX 11960 65536 61440 61440 NT_STATUS_OK
ReadX 11960 126976 4096 4096 NT_STATUS_OK
ReadX 11960 131072 61440 61440 NT_STATUS_OK
ReadX 11960 192512 4096 4096 NT_STATUS_OK
ReadX 11960 196608 61440 61440 NT_STATUS_OK
ReadX 11960 258048 4096 4096 NT_STATUS_OK
ReadX 11960 262144 61440 61440 NT_STATUS_OK
ReadX 11960 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 61440 61440 NT_STATUS_OK
ReadX 11961 61440 4096 4096 NT_STATUS_OK
ReadX 11961 65536 61440 61440 NT_STATUS_OK
ReadX 11961 126976 4096 4096 NT_STATUS_OK
ReadX 11961 131072 61440 61440 NT_STATUS_OK
ReadX 11961 192512 4096 4096 NT_STATUS_OK
ReadX 11961 196608 61440 61440 NT_STATUS_OK
ReadX 11961 258048 4096 4096 NT_STATUS_OK
ReadX 11961 262144 61440 61440 NT_STATUS_OK
ReadX 11961 323584 4096 4096 NT_STATUS_OK
ReadX 11961 327680 61440 61440 NT_STATUS_OK
ReadX 11961 389120 4096 4096 NT_STATUS_OK
ReadX 11961 393216 61440 61440 NT_STATUS_OK
ReadX 11961 454656 4096 4096 NT_STATUS_OK
ReadX 11961 458752 61440 61440 NT_STATUS_OK
ReadX 11961 520192 4096 4096 NT_STATUS_OK
ReadX 11961 524288 61440 61440 NT_STATUS_OK
ReadX 11961 585728 4096 4096 NT_STATUS_OK
ReadX 11961 589824 61440 61440 NT_STATUS_OK
ReadX 11961 651264 4096 4096 NT_STATUS_OK
ReadX 11961 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 61440 61440 NT_STATUS_OK
ReadX 11962 61440 4096 4096 NT_STATUS_OK
ReadX 11962 65536 61440 61440 NT_STATUS_OK
ReadX 11962 126976 4096 4096 NT_STATUS_OK
ReadX 11962 131072 61440 61440 NT_STATUS_OK
ReadX 11962 192512 4096 4096 NT_STATUS_OK
ReadX 11962 196608 61440 61440 NT_STATUS_OK
ReadX 11962 258048 4096 4096 NT_STATUS_OK
ReadX 11962 262144 61440 61440 NT_STATUS_OK
ReadX 11962 323584 4096 4096 NT_STATUS_OK
ReadX 11962 327680 61440 61440 NT_STATUS_OK
ReadX 11962 389120 4096 4096 NT_STATUS_OK
ReadX 11962 393216 61440 61440 NT_STATUS_OK
ReadX 11962 454656 4096 4096 NT_STATUS_OK
ReadX 11962 458752 61440 61440 NT_STATUS_OK
ReadX 11962 520192 4096 4096 NT_STATUS_OK
ReadX 11962 524288 61440 61440 NT_STATUS_OK
ReadX 11962 585728 4096 4096 NT_STATUS_OK
ReadX 11962 589824 61440 61440 NT_STATUS_OK
ReadX 11962 651264 4096 4096 NT_STATUS_OK
ReadX 11962 655360 61440 61440 NT_STATUS_OK
ReadX 11962 716800 4096 4096 NT_STATUS_OK
ReadX 11962 720896 61440 61440 NT_STATUS_OK
ReadX 11962 782336 4096 4096 NT_STATUS_OK
ReadX 11962 786432 61440 61440 NT_STATUS_OK
ReadX 11962 847872 4096 4096 NT_STATUS_OK
ReadX 11962 851968 61440 61440 NT_STATUS_OK
ReadX 11962 913408 4096 4096 NT_STATUS_OK
ReadX 11962 917504 61440 61440 NT_STATUS_OK
ReadX 11962 978944 4096 4096 NT_STATUS_OK
ReadX 11962 983040 61440 61440 NT_STATUS_OK
ReadX 11962 1044480 4096 4096 NT_STATUS_OK
ReadX 11962 1048576 61440 61440 NT_STATUS_OK
ReadX 11962 1110016 4096 4096 NT_STATUS_OK
ReadX 11962 1114112 61440 61440 NT_STATUS_OK
ReadX 11962 1175552 4096 4096 NT_STATUS_OK
ReadX 11962 1179648 61440 61440 NT_STATUS_OK
ReadX 11962 1241088 4096 4096 NT_STATUS_OK
ReadX 11962 1245184 61440 61440 NT_STATUS_OK
ReadX 11962 1306624 4096 4096 NT_STATUS_OK
ReadX 11962 1310720 61440 61440 NT_STATUS_OK
ReadX 11962 1372160 4096 4096 NT_STATUS_OK
ReadX 11962 1376256 61440 61440 NT_STATUS_OK
ReadX 11962 1437696 4096 4096 NT_STATUS_OK
ReadX 11962 1441792 61440 61440 NT_STATUS_OK
ReadX 11962 1503232 4096 4096 NT_STATUS_OK
ReadX 11962 1507328 61440 61440 NT_STATUS_OK
ReadX 11962 1568768 4096 4096 NT_STATUS_OK
ReadX 11962 1572864 61440 61440 NT_STATUS_OK
ReadX 11962 1634304 4096 4096 NT_STATUS_OK
ReadX 11962 1638400 61440 61440 NT_STATUS_OK
ReadX 11962 1699840 4096 4096 NT_STATUS_OK
ReadX 11962 1703936 61440 61440 NT_STATUS_OK
ReadX 11962 1765376 4096 4096 NT_STATUS_OK
ReadX 11962 1769472 61440 61440 NT_STATUS_OK
ReadX 11962 1830912 4096 4096 NT_STATUS_OK
ReadX 11962 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11963 NT_STATUS_OK
Close 11963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
ReadX 11967 4096 4096 4096 NT_STATUS_OK
ReadX 11967 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11968 NT_STATUS_OK
Close 11968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11970 NT_STATUS_OK
ReadX 11970 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11971 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 8192 8192 NT_STATUS_OK
ReadX 11975 8192 8192 8192 NT_STATUS_OK
ReadX 11975 16384 8192 8192 NT_STATUS_OK
ReadX 11975 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11977 NT_STATUS_OK
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11980 NT_STATUS_OK
WriteX 11980 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 10438 10438 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11984 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11986 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11989 NT_STATUS_OK
ReadX 11989 0 4096 4096 NT_STATUS_OK
ReadX 11989 4096 4096 4096 NT_STATUS_OK
ReadX 11989 8192 4096 4096 NT_STATUS_OK
ReadX 11989 12288 8192 8192 NT_STATUS_OK
ReadX 11989 20480 8192 8192 NT_STATUS_OK
ReadX 11989 28672 8192 8192 NT_STATUS_OK
ReadX 11989 36864 8192 8192 NT_STATUS_OK
ReadX 11989 45056 8192 8192 NT_STATUS_OK
ReadX 11989 53248 8192 8192 NT_STATUS_OK
ReadX 11989 61440 8192 8192 NT_STATUS_OK
ReadX 11989 69632 8192 8192 NT_STATUS_OK
ReadX 11989 77824 8192 8192 NT_STATUS_OK
ReadX 11989 86016 8192 8192 NT_STATUS_OK
ReadX 11989 94208 8192 8192 NT_STATUS_OK
ReadX 11989 102400 8192 8192 NT_STATUS_OK
ReadX 11989 110592 8192 8192 NT_STATUS_OK
ReadX 11989 118784 8192 8192 NT_STATUS_OK
ReadX 11989 126976 8192 8192 NT_STATUS_OK
ReadX 11989 135168 8192 8192 NT_STATUS_OK
ReadX 11989 143360 8192 8192 NT_STATUS_OK
ReadX 11989 151552 8192 8192 NT_STATUS_OK
ReadX 11989 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11991 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11994 NT_STATUS_OK
WriteX 11994 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11994 258 NT_STATUS_OK
WriteX 11994 0 28489 28489 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11995 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11997 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11998 NT_STATUS_OK
Close 11998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 8192 8192 NT_STATUS_OK
ReadX 12001 8192 8192 8192 NT_STATUS_OK
ReadX 12001 16384 8192 8192 NT_STATUS_OK
ReadX 12001 24576 8192 8192 NT_STATUS_OK
ReadX 12001 32768 16384 16384 NT_STATUS_OK
ReadX 12001 49152 8192 8192 NT_STATUS_OK
ReadX 12001 57344 8192 8192 NT_STATUS_OK
ReadX 12001 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12003 NT_STATUS_OK
Close 12003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12006 NT_STATUS_OK
WriteX 12006 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12006 258 NT_STATUS_OK
WriteX 12006 0 29253 29253 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12007 NT_STATUS_OK
Close 12007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12010 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12013 NT_STATUS_OK
WriteX 12013 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 258 NT_STATUS_OK
WriteX 12013 0 30183 30183 NT_STATUS_OK
Close 12013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12016 NT_STATUS_OK
WriteX 12016 0 510 510 NT_STATUS_OK
WriteX 12016 510 512 512 NT_STATUS_OK
WriteX 12016 1022 510 510 NT_STATUS_OK
WriteX 12016 1532 510 510 NT_STATUS_OK
WriteX 12016 2042 168 168 NT_STATUS_OK
Close 12016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
WriteX 12019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 61440 4096 4096 NT_STATUS_OK
ReadX 12020 126976 4096 4096 NT_STATUS_OK
WriteX 12020 0 65536 65536 NT_STATUS_OK
WriteX 12020 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 61440 4096 4096 NT_STATUS_OK
ReadX 12021 126976 4096 4096 NT_STATUS_OK
ReadX 12021 192512 4096 4096 NT_STATUS_OK
ReadX 12021 258048 4096 4096 NT_STATUS_OK
WriteX 12021 0 65536 65536 NT_STATUS_OK
WriteX 12021 65536 65536 65536 NT_STATUS_OK
WriteX 12021 131072 65536 65536 NT_STATUS_OK
WriteX 12021 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 61440 4096 4096 NT_STATUS_OK
ReadX 12022 126976 4096 4096 NT_STATUS_OK
ReadX 12022 192512 4096 4096 NT_STATUS_OK
ReadX 12022 258048 4096 4096 NT_STATUS_OK
ReadX 12022 323584 4096 4096 NT_STATUS_OK
ReadX 12022 389120 4096 4096 NT_STATUS_OK
ReadX 12022 454656 4096 4096 NT_STATUS_OK
ReadX 12022 520192 4096 4096 NT_STATUS_OK
WriteX 12022 0 65536 65536 NT_STATUS_OK
WriteX 12022 65536 65536 65536 NT_STATUS_OK
WriteX 12022 131072 65536 65536 NT_STATUS_OK
WriteX 12022 196608 65536 65536 NT_STATUS_OK
WriteX 12022 262144 65536 65536 NT_STATUS_OK
WriteX 12022 327680 65536 65536 NT_STATUS_OK
WriteX 12022 393216 65536 65536 NT_STATUS_OK
WriteX 12022 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12023 NT_STATUS_OK
Close 12023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12025 NT_STATUS_OK
Close 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12032 NT_STATUS_OK
Close 12032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12041 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12043 NT_STATUS_OK
Close 12043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12047 NT_STATUS_OK
Close 12047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12062 NT_STATUS_OK
Close 12062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12091 NT_STATUS_OK
WriteX 12091 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12091 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12091 0 65536 65536 NT_STATUS_OK
WriteX 12091 65536 65536 65536 NT_STATUS_OK
WriteX 12091 131072 65536 65536 NT_STATUS_OK
WriteX 12091 196608 65536 65536 NT_STATUS_OK
WriteX 12091 262144 26634 26634 NT_STATUS_OK
Close 12091 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12097 NT_STATUS_OK
Close 12097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
ReadX 12099 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12104 NT_STATUS_OK
Close 12104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12107 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12118 NT_STATUS_OK
Close 12118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12127 NT_STATUS_OK
Close 12127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12147 NT_STATUS_OK
Close 12147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12161 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12164 NT_STATUS_OK
Close 12164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12191 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
Close 12192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12180 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12223 0 4096 4096 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
ReadX 12225 4096 4096 4096 NT_STATUS_OK
ReadX 12225 8192 4096 4096 NT_STATUS_OK
ReadX 12225 12288 4096 4096 NT_STATUS_OK
ReadX 12225 16384 4096 4096 NT_STATUS_OK
ReadX 12225 20480 4096 4096 NT_STATUS_OK
ReadX 12225 24576 4096 4096 NT_STATUS_OK
ReadX 12225 28672 4096 4096 NT_STATUS_OK
ReadX 12225 32768 4096 4096 NT_STATUS_OK
ReadX 12225 36864 4096 4096 NT_STATUS_OK
ReadX 12225 40960 4096 4096 NT_STATUS_OK
ReadX 12225 45056 4096 4096 NT_STATUS_OK
ReadX 12225 49152 4096 4096 NT_STATUS_OK
ReadX 12225 53248 4096 4096 NT_STATUS_OK
ReadX 12225 57344 4096 4096 NT_STATUS_OK
ReadX 12225 61440 4096 4096 NT_STATUS_OK
ReadX 12225 65536 4096 4096 NT_STATUS_OK
ReadX 12225 69632 4096 4096 NT_STATUS_OK
ReadX 12225 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12225 1004 NT_STATUS_OK
WriteX 12225 0 4096 4096 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12226 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12231 NT_STATUS_OK
WriteX 12231 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 258 NT_STATUS_OK
WriteX 12231 0 65536 65536 NT_STATUS_OK
WriteX 12231 65536 19979 19979 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 1004 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
SET_FILE_INFORMATION 12232 1004 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
Close 12233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12237 1004 NT_STATUS_OK
WriteX 12237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Close 12227 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12240 NT_STATUS_OK
Close 12240 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12243 NT_STATUS_OK
WriteX 12243 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 258 NT_STATUS_OK
WriteX 12243 0 65536 65536 NT_STATUS_OK
WriteX 12243 65536 17654 17654 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 4096 4096 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12245 NT_STATUS_OK
SET_FILE_INFORMATION 12245 1004 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12246 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
ReadX 12249 4096 4096 4096 NT_STATUS_OK
ReadX 12249 8192 4096 4096 NT_STATUS_OK
ReadX 12249 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12249 16384 4096 4096 NT_STATUS_OK
ReadX 12249 20480 4096 4096 NT_STATUS_OK
ReadX 12249 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12252 1004 NT_STATUS_OK
WriteX 12252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12255 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12258 NT_STATUS_OK
WriteX 12258 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 258 NT_STATUS_OK
WriteX 12258 0 65536 65536 NT_STATUS_OK
WriteX 12258 65536 19490 19490 NT_STATUS_OK
Close 12258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 0 4096 4096 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 1004 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
SET_FILE_INFORMATION 12259 1004 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12262 NT_STATUS_OK
Close 12262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12264 0 4096 4096 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
ReadX 12266 4096 4096 4096 NT_STATUS_OK
ReadX 12266 8192 4096 4096 NT_STATUS_OK
ReadX 12266 12288 4096 4096 NT_STATUS_OK
ReadX 12266 16384 4096 4096 NT_STATUS_OK
ReadX 12266 20480 4096 4096 NT_STATUS_OK
ReadX 12266 24576 4096 4096 NT_STATUS_OK
ReadX 12266 28672 4096 4096 NT_STATUS_OK
ReadX 12266 32768 4096 4096 NT_STATUS_OK
ReadX 12266 36864 4096 4096 NT_STATUS_OK
ReadX 12266 40960 4096 4096 NT_STATUS_OK
ReadX 12266 45056 4096 4096 NT_STATUS_OK
ReadX 12266 49152 4096 4096 NT_STATUS_OK
ReadX 12266 53248 4096 4096 NT_STATUS_OK
ReadX 12266 57344 4096 4096 NT_STATUS_OK
ReadX 12266 61440 4096 4096 NT_STATUS_OK
ReadX 12266 65536 4096 4096 NT_STATUS_OK
ReadX 12266 69632 4096 4096 NT_STATUS_OK
ReadX 12266 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12266 1004 NT_STATUS_OK
WriteX 12266 0 4096 4096 NT_STATUS_OK
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
SET_FILE_INFORMATION 12267 1004 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12269 NT_STATUS_OK
Close 12269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12272 NT_STATUS_OK
WriteX 12272 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12272 258 NT_STATUS_OK
WriteX 12272 0 65536 65536 NT_STATUS_OK
WriteX 12272 65536 8866 8866 NT_STATUS_OK
Close 12272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
Flush 12273 NT_STATUS_OK
SET_FILE_INFORMATION 12273 1004 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
Flush 12273 NT_STATUS_OK
Close 12273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12277 1004 NT_STATUS_OK
WriteX 12277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12278 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12277 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12283 NT_STATUS_OK
WriteX 12283 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 258 NT_STATUS_OK
WriteX 12283 0 65536 65536 NT_STATUS_OK
WriteX 12283 65536 9298 9298 NT_STATUS_OK
Close 12283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
WriteX 12284 0 4096 4096 NT_STATUS_OK
Flush 12284 NT_STATUS_OK
SET_FILE_INFORMATION 12284 1004 NT_STATUS_OK
WriteX 12284 0 4096 4096 NT_STATUS_OK
Flush 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
SET_FILE_INFORMATION 12285 1004 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12290 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12290 0 4096 4096 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12291 NT_STATUS_OK
ReadX 12291 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12291 4096 4096 4096 NT_STATUS_OK
ReadX 12291 8192 4096 4096 NT_STATUS_OK
ReadX 12291 12288 4096 4096 NT_STATUS_OK
ReadX 12291 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12292 NT_STATUS_OK
ReadX 12292 0 4096 4096 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12291 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 11540 11540 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
SET_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12302 NT_STATUS_OK
SET_FILE_INFORMATION 12302 1004 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 61440 4096 4096 NT_STATUS_OK
ReadX 12306 126976 4096 4096 NT_STATUS_OK
WriteX 12306 0 65536 65536 NT_STATUS_OK
WriteX 12306 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 61440 4096 4096 NT_STATUS_OK
ReadX 12307 126976 4096 4096 NT_STATUS_OK
ReadX 12307 192512 4096 4096 NT_STATUS_OK
ReadX 12307 258048 4096 4096 NT_STATUS_OK
WriteX 12307 0 65536 65536 NT_STATUS_OK
WriteX 12307 65536 65536 65536 NT_STATUS_OK
WriteX 12307 131072 65536 65536 NT_STATUS_OK
WriteX 12307 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 61440 4096 4096 NT_STATUS_OK
ReadX 12308 126976 4096 4096 NT_STATUS_OK
ReadX 12308 192512 4096 4096 NT_STATUS_OK
ReadX 12308 258048 4096 4096 NT_STATUS_OK
ReadX 12308 323584 4096 4096 NT_STATUS_OK
ReadX 12308 389120 4096 4096 NT_STATUS_OK
ReadX 12308 454656 4096 4096 NT_STATUS_OK
ReadX 12308 520192 4096 4096 NT_STATUS_OK
WriteX 12308 0 65536 65536 NT_STATUS_OK
WriteX 12308 65536 65536 65536 NT_STATUS_OK
WriteX 12308 131072 65536 65536 NT_STATUS_OK
WriteX 12308 196608 65536 65536 NT_STATUS_OK
WriteX 12308 262144 65536 65536 NT_STATUS_OK
WriteX 12308 327680 65536 65536 NT_STATUS_OK
WriteX 12308 393216 65536 65536 NT_STATUS_OK
WriteX 12308 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
ReadX 12309 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12310 NT_STATUS_OK
WriteX 12310 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12310 258 NT_STATUS_OK
WriteX 12310 0 53 53 NT_STATUS_OK
Close 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12311 NT_STATUS_OK
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12308 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12309 8192 4096 4096 NT_STATUS_OK
ReadX 12309 12288 4096 4096 NT_STATUS_OK
WriteX 12313 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 258 NT_STATUS_OK
ReadX 12309 16384 4096 4096 NT_STATUS_OK
ReadX 12309 20480 4096 4096 NT_STATUS_OK
WriteX 12313 0 15360 15360 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12315 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12318 NT_STATUS_OK
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12317 4096 4096 4096 NT_STATUS_OK
ReadX 12317 8192 4096 4096 NT_STATUS_OK
ReadX 12317 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
ReadX 12320 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
ReadX 12321 4096 4096 4096 NT_STATUS_OK
ReadX 12321 8192 4096 4096 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12322 NT_STATUS_OK
WriteX 12322 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12322 258 NT_STATUS_OK
WriteX 12322 0 15360 15360 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12323 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12323 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12327 NT_STATUS_OK
SET_FILE_INFORMATION 12327 1004 NT_STATUS_OK
Close 12327 NT_STATUS_OK
WriteX 12323 0 4096 4096 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
ReadX 12330 4096 4096 4096 NT_STATUS_OK
ReadX 12330 8192 4096 4096 NT_STATUS_OK
ReadX 12330 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12330 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12330 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12332 NT_STATUS_OK
WriteX 12332 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 258 NT_STATUS_OK
WriteX 12332 0 53 53 NT_STATUS_OK
Close 12332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12333 NT_STATUS_OK
Close 12333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
ReadX 12331 12288 4096 4096 NT_STATUS_OK
WriteX 12335 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12335 258 NT_STATUS_OK
WriteX 12335 0 12006 12006 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
WriteX 12336 0 4096 4096 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12337 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12339 4096 4096 4096 NT_STATUS_OK
ReadX 12339 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12342 NT_STATUS_OK
WriteX 12342 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 258 NT_STATUS_OK
WriteX 12342 0 11991 11991 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12347 NT_STATUS_OK
SET_FILE_INFORMATION 12347 1004 NT_STATUS_OK
Close 12347 NT_STATUS_OK
WriteX 12343 0 4096 4096 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12348 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12350 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
ReadX 12350 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
WriteX 12350 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12350 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
Close 12326 NT_STATUS_OK
WriteX 12330 0 19054 19054 NT_STATUS_OK
WriteX 12350 0 12288 12288 NT_STATUS_OK
Close 12346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12355 NT_STATUS_OK
Close 12355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 61440 61440 NT_STATUS_OK
ReadX 12357 61440 4096 4096 NT_STATUS_OK
ReadX 12357 65536 61440 61440 NT_STATUS_OK
ReadX 12357 126976 4096 4096 NT_STATUS_OK
ReadX 12357 131072 61440 61440 NT_STATUS_OK
ReadX 12357 192512 4096 4096 NT_STATUS_OK
ReadX 12357 196608 61440 61440 NT_STATUS_OK
ReadX 12357 258048 4096 4096 NT_STATUS_OK
ReadX 12357 262144 61440 61440 NT_STATUS_OK
ReadX 12357 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 61440 61440 NT_STATUS_OK
ReadX 12358 61440 4096 4096 NT_STATUS_OK
ReadX 12358 65536 61440 61440 NT_STATUS_OK
ReadX 12358 126976 4096 4096 NT_STATUS_OK
ReadX 12358 131072 61440 61440 NT_STATUS_OK
ReadX 12358 192512 4096 4096 NT_STATUS_OK
ReadX 12358 196608 61440 61440 NT_STATUS_OK
ReadX 12358 258048 4096 4096 NT_STATUS_OK
ReadX 12358 262144 61440 61440 NT_STATUS_OK
ReadX 12358 323584 4096 4096 NT_STATUS_OK
ReadX 12358 327680 61440 61440 NT_STATUS_OK
ReadX 12358 389120 4096 4096 NT_STATUS_OK
ReadX 12358 393216 61440 61440 NT_STATUS_OK
ReadX 12358 454656 4096 4096 NT_STATUS_OK
ReadX 12358 458752 61440 61440 NT_STATUS_OK
ReadX 12358 520192 4096 4096 NT_STATUS_OK
ReadX 12358 524288 61440 61440 NT_STATUS_OK
ReadX 12358 585728 4096 4096 NT_STATUS_OK
ReadX 12358 589824 61440 61440 NT_STATUS_OK
ReadX 12358 651264 4096 4096 NT_STATUS_OK
ReadX 12358 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 61440 61440 NT_STATUS_OK
ReadX 12359 61440 4096 4096 NT_STATUS_OK
ReadX 12359 65536 61440 61440 NT_STATUS_OK
ReadX 12359 126976 4096 4096 NT_STATUS_OK
ReadX 12359 131072 61440 61440 NT_STATUS_OK
ReadX 12359 192512 4096 4096 NT_STATUS_OK
ReadX 12359 196608 61440 61440 NT_STATUS_OK
ReadX 12359 258048 4096 4096 NT_STATUS_OK
ReadX 12359 262144 61440 61440 NT_STATUS_OK
ReadX 12359 323584 4096 4096 NT_STATUS_OK
ReadX 12359 327680 61440 61440 NT_STATUS_OK
ReadX 12359 389120 4096 4096 NT_STATUS_OK
ReadX 12359 393216 61440 61440 NT_STATUS_OK
ReadX 12359 454656 4096 4096 NT_STATUS_OK
ReadX 12359 458752 61440 61440 NT_STATUS_OK
ReadX 12359 520192 4096 4096 NT_STATUS_OK
ReadX 12359 524288 61440 61440 NT_STATUS_OK
ReadX 12359 585728 4096 4096 NT_STATUS_OK
ReadX 12359 589824 61440 61440 NT_STATUS_OK
ReadX 12359 651264 4096 4096 NT_STATUS_OK
ReadX 12359 655360 61440 61440 NT_STATUS_OK
ReadX 12359 716800 4096 4096 NT_STATUS_OK
ReadX 12359 720896 61440 61440 NT_STATUS_OK
ReadX 12359 782336 4096 4096 NT_STATUS_OK
ReadX 12359 786432 61440 61440 NT_STATUS_OK
ReadX 12359 847872 4096 4096 NT_STATUS_OK
ReadX 12359 851968 61440 61440 NT_STATUS_OK
ReadX 12359 913408 4096 4096 NT_STATUS_OK
ReadX 12359 917504 61440 61440 NT_STATUS_OK
ReadX 12359 978944 4096 4096 NT_STATUS_OK
ReadX 12359 983040 61440 61440 NT_STATUS_OK
ReadX 12359 1044480 4096 4096 NT_STATUS_OK
ReadX 12359 1048576 61440 61440 NT_STATUS_OK
ReadX 12359 1110016 4096 4096 NT_STATUS_OK
ReadX 12359 1114112 61440 61440 NT_STATUS_OK
ReadX 12359 1175552 4096 4096 NT_STATUS_OK
ReadX 12359 1179648 61440 61440 NT_STATUS_OK
ReadX 12359 1241088 4096 4096 NT_STATUS_OK
ReadX 12359 1245184 61440 61440 NT_STATUS_OK
ReadX 12359 1306624 4096 4096 NT_STATUS_OK
ReadX 12359 1310720 61440 61440 NT_STATUS_OK
ReadX 12359 1372160 4096 4096 NT_STATUS_OK
ReadX 12359 1376256 61440 61440 NT_STATUS_OK
ReadX 12359 1437696 4096 4096 NT_STATUS_OK
ReadX 12359 1441792 61440 61440 NT_STATUS_OK
ReadX 12359 1503232 4096 4096 NT_STATUS_OK
ReadX 12359 1507328 61440 61440 NT_STATUS_OK
ReadX 12359 1568768 4096 4096 NT_STATUS_OK
ReadX 12359 1572864 61440 61440 NT_STATUS_OK
ReadX 12359 1634304 4096 4096 NT_STATUS_OK
ReadX 12359 1638400 61440 61440 NT_STATUS_OK
ReadX 12359 1699840 4096 4096 NT_STATUS_OK
ReadX 12359 1703936 61440 61440 NT_STATUS_OK
ReadX 12359 1765376 4096 4096 NT_STATUS_OK
ReadX 12359 1769472 61440 61440 NT_STATUS_OK
ReadX 12359 1830912 4096 4096 NT_STATUS_OK
ReadX 12359 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12365 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12366 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 1004 NT_STATUS_OK
WriteX 12366 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12368 NT_STATUS_OK
WriteX 12368 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12368 258 NT_STATUS_OK
WriteX 12368 0 491 491 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12366 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12371 NT_STATUS_OK
Close 12371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12372 NT_STATUS_OK
WriteX 12372 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12372 258 NT_STATUS_OK
WriteX 12372 0 543 543 NT_STATUS_OK
Close 12372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12386 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
WriteX 12386 0 2048 2048 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12387 NT_STATUS_OK
ReadX 12387 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
Flush 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12392 NT_STATUS_OK
WriteX 12392 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12392 258 NT_STATUS_OK
WriteX 12392 0 2048 2048 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12393 NT_STATUS_OK
ReadX 12393 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12398 NT_STATUS_OK
WriteX 12398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12398 258 NT_STATUS_OK
WriteX 12398 0 2048 2048 NT_STATUS_OK
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 2048 2048 NT_STATUS_OK
ReadX 12377 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12393 0 4096 4096 NT_STATUS_OK
WriteX 12377 0 8192 8192 NT_STATUS_OK
WriteX 12378 0 4096 4096 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
ReadX 12393 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12403 NT_STATUS_OK
QUERY_FILE_INFORMATION 12403 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12378 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12413 NT_STATUS_OK
ReadX 12413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12423 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 1004 NT_STATUS_OK
WriteX 12423 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 258 NT_STATUS_OK
WriteX 12423 0 2048 2048 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12431 NT_STATUS_OK
QUERY_FILE_INFORMATION 12431 1004 NT_STATUS_OK
WriteX 12431 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12431 258 NT_STATUS_OK
WriteX 12431 0 2048 2048 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
Flush 12424 NT_STATUS_OK
WriteX 12432 0 4096 4096 NT_STATUS_OK
Flush 12432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12426 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12434 NT_STATUS_OK
WriteX 12434 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12434 258 NT_STATUS_OK
WriteX 12434 0 4096 4096 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12438 0 4096 4096 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12412 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12441 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12445 NT_STATUS_OK
WriteX 12445 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12445 258 NT_STATUS_OK
WriteX 12445 0 2048 2048 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12447 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12460 NT_STATUS_OK
QUERY_FILE_INFORMATION 12460 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12443 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12462 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12470 NT_STATUS_OK
ReadX 12470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12481 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12482 NT_STATUS_OK
QUERY_FILE_INFORMATION 12482 1004 NT_STATUS_OK
WriteX 12482 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12482 258 NT_STATUS_OK
WriteX 12482 0 2048 2048 NT_STATUS_OK
Close 12482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12494 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 1004 NT_STATUS_OK
WriteX 12494 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
WriteX 12494 0 2048 2048 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12502 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 1004 NT_STATUS_OK
WriteX 12502 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 258 NT_STATUS_OK
WriteX 12502 0 2048 2048 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12503 NT_STATUS_OK
ReadX 12503 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12483 0 4096 4096 NT_STATUS_OK
Flush 12483 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Flush 12495 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
Flush 12503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12483 0 4096 4096 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12485 4096 16384 16384 NT_STATUS_OK
ReadX 12465 4096 16384 16384 NT_STATUS_OK
ReadX 12497 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 2048 2048 NT_STATUS_OK
WriteX 12505 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12506 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12471 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12472 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12508 NT_STATUS_OK
QUERY_FILE_INFORMATION 12508 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12510 NT_STATUS_OK
QUERY_FILE_INFORMATION 12510 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12513 4096 16384 16384 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 8192 8192 NT_STATUS_OK
ReadX 12519 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12533 0 4096 4096 NT_STATUS_OK
ReadX 12533 4096 4096 4096 NT_STATUS_OK
ReadX 12533 8192 4096 4096 NT_STATUS_OK
WriteX 12519 0 4096 4096 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12539 NT_STATUS_OK
QUERY_FILE_INFORMATION 12539 1004 NT_STATUS_OK
WriteX 12539 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12539 258 NT_STATUS_OK
WriteX 12539 0 2048 2048 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
ReadX 12542 4096 4096 4096 NT_STATUS_OK
WriteX 12542 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
ReadX 12544 4096 4096 4096 NT_STATUS_OK
WriteX 12544 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12545 NT_STATUS_OK
QUERY_FILE_INFORMATION 12545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12530 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12529 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12547 0 4096 4096 NT_STATUS_OK
ReadX 12547 4096 4096 4096 NT_STATUS_OK
ReadX 12547 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
ReadX 12548 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12565 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 1004 NT_STATUS_OK
WriteX 12565 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 258 NT_STATUS_OK
WriteX 12565 0 2048 2048 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12566 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12570 NT_STATUS_OK
Close 12570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12571 NT_STATUS_OK
QUERY_FILE_INFORMATION 12571 1004 NT_STATUS_OK
WriteX 12571 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12571 258 NT_STATUS_OK
WriteX 12571 0 2048 2048 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12555 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12573 NT_STATUS_OK
QUERY_FILE_INFORMATION 12573 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12575 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 61440 4096 4096 NT_STATUS_OK
ReadX 12577 126976 4096 4096 NT_STATUS_OK
WriteX 12577 0 65536 65536 NT_STATUS_OK
WriteX 12577 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 61440 4096 4096 NT_STATUS_OK
ReadX 12578 126976 4096 4096 NT_STATUS_OK
ReadX 12578 192512 4096 4096 NT_STATUS_OK
ReadX 12578 258048 4096 4096 NT_STATUS_OK
WriteX 12578 0 65536 65536 NT_STATUS_OK
WriteX 12578 65536 65536 65536 NT_STATUS_OK
WriteX 12578 131072 65536 65536 NT_STATUS_OK
WriteX 12578 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 61440 4096 4096 NT_STATUS_OK
ReadX 12579 126976 4096 4096 NT_STATUS_OK
ReadX 12579 192512 4096 4096 NT_STATUS_OK
ReadX 12579 258048 4096 4096 NT_STATUS_OK
ReadX 12579 323584 4096 4096 NT_STATUS_OK
ReadX 12579 389120 4096 4096 NT_STATUS_OK
ReadX 12579 454656 4096 4096 NT_STATUS_OK
ReadX 12579 520192 4096 4096 NT_STATUS_OK
WriteX 12579 0 65536 65536 NT_STATUS_OK
WriteX 12579 65536 65536 65536 NT_STATUS_OK
WriteX 12579 131072 65536 65536 NT_STATUS_OK
WriteX 12579 196608 65536 65536 NT_STATUS_OK
WriteX 12579 262144 65536 65536 NT_STATUS_OK
WriteX 12579 327680 65536 65536 NT_STATUS_OK
WriteX 12579 393216 65536 65536 NT_STATUS_OK
WriteX 12579 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12580 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12580 8192 4096 4096 NT_STATUS_OK
ReadX 12580 12288 4096 4096 NT_STATUS_OK
ReadX 12580 16384 4096 4096 NT_STATUS_OK
ReadX 12580 20480 4096 4096 NT_STATUS_OK
ReadX 12580 24576 4096 4096 NT_STATUS_OK
ReadX 12580 28672 4096 4096 NT_STATUS_OK
ReadX 12580 32768 4096 4096 NT_STATUS_OK
ReadX 12580 36864 4096 4096 NT_STATUS_OK
ReadX 12580 40960 4096 4096 NT_STATUS_OK
ReadX 12580 45056 4096 4096 NT_STATUS_OK
ReadX 12580 49152 4096 4096 NT_STATUS_OK
ReadX 12580 53248 4096 4096 NT_STATUS_OK
ReadX 12580 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12580 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12581 NT_STATUS_OK
Close 12581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12583 NT_STATUS_OK
WriteX 12583 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12583 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12583 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
WriteX 12583 0 57088 57088 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Flush 12583 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12584 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
Close 12584 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12585 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12587 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12588 NT_STATUS_OK
WriteX 12588 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12588 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
WriteX 12588 0 51456 51456 NT_STATUS_OK
WriteX 12588 0 4096 4096 NT_STATUS_OK
Flush 12588 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
WriteX 12588 0 4096 4096 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12590 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12592 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12597 NT_STATUS_OK
WriteX 12597 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12597 258 NT_STATUS_OK
WriteX 12597 0 53077 53077 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12598 NT_STATUS_OK
WriteX 12598 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12598 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12598 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12598 1004 NT_STATUS_OK
WriteX 12598 0 65536 65536 NT_STATUS_OK
WriteX 12598 65536 1856 1856 NT_STATUS_OK
WriteX 12598 0 4096 4096 NT_STATUS_OK
Flush 12598 NT_STATUS_OK
SET_FILE_INFORMATION 12598 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12598 1004 NT_STATUS_OK
WriteX 12598 0 4096 4096 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12604 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12607 NT_STATUS_OK
WriteX 12607 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12607 258 NT_STATUS_OK
WriteX 12607 0 7983 7983 NT_STATUS_OK
Close 12607 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12612 NT_STATUS_OK
WriteX 12612 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 258 NT_STATUS_OK
WriteX 12612 0 65536 65536 NT_STATUS_OK
WriteX 12612 65536 65536 65536 NT_STATUS_OK
WriteX 12612 131072 65536 65536 NT_STATUS_OK
WriteX 12612 196608 65536 65536 NT_STATUS_OK
WriteX 12612 262144 65536 65536 NT_STATUS_OK
WriteX 12612 327680 65536 65536 NT_STATUS_OK
WriteX 12612 393216 65536 65536 NT_STATUS_OK
WriteX 12612 458752 46731 46731 NT_STATUS_OK
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12602 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
WriteX 12613 0 65536 65536 NT_STATUS_OK
WriteX 12613 65536 22848 22848 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12617 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12618 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
ReadX 12618 8192 4096 4096 NT_STATUS_OK
ReadX 12618 12288 4096 4096 NT_STATUS_OK
ReadX 12618 16384 4096 4096 NT_STATUS_OK
ReadX 12618 20480 4096 4096 NT_STATUS_OK
ReadX 12618 24576 4096 4096 NT_STATUS_OK
ReadX 12618 28672 4096 4096 NT_STATUS_OK
ReadX 12618 32768 4096 4096 NT_STATUS_OK
ReadX 12618 36864 4096 4096 NT_STATUS_OK
ReadX 12618 40960 4096 4096 NT_STATUS_OK
ReadX 12618 45056 4096 4096 NT_STATUS_OK
ReadX 12618 49152 4096 4096 NT_STATUS_OK
ReadX 12618 53248 4096 4096 NT_STATUS_OK
ReadX 12618 57344 4096 4096 NT_STATUS_OK
ReadX 12618 61440 4096 4096 NT_STATUS_OK
ReadX 12618 65536 4096 4096 NT_STATUS_OK
ReadX 12618 69632 4096 4096 NT_STATUS_OK
ReadX 12618 73728 4096 4096 NT_STATUS_OK
ReadX 12618 77824 4096 4096 NT_STATUS_OK
ReadX 12618 81920 4096 4096 NT_STATUS_OK
ReadX 12618 86016 4096 4096 NT_STATUS_OK
ReadX 12618 90112 4096 4096 NT_STATUS_OK
ReadX 12618 94208 4096 4096 NT_STATUS_OK
ReadX 12618 98304 4096 4096 NT_STATUS_OK
ReadX 12618 102400 4096 4096 NT_STATUS_OK
ReadX 12618 106496 4096 4096 NT_STATUS_OK
ReadX 12618 110592 4096 4096 NT_STATUS_OK
ReadX 12618 114688 4096 4096 NT_STATUS_OK
ReadX 12618 118784 4096 4096 NT_STATUS_OK
ReadX 12618 122880 4096 4096 NT_STATUS_OK
ReadX 12618 126976 4096 4096 NT_STATUS_OK
ReadX 12618 131072 4096 4096 NT_STATUS_OK
ReadX 12618 135168 4096 4096 NT_STATUS_OK
ReadX 12618 139264 4096 4096 NT_STATUS_OK
ReadX 12618 143360 4096 4096 NT_STATUS_OK
ReadX 12618 147456 4096 4096 NT_STATUS_OK
ReadX 12618 151552 4096 4096 NT_STATUS_OK
ReadX 12618 155648 4096 4096 NT_STATUS_OK
ReadX 12618 159744 4096 4096 NT_STATUS_OK
ReadX 12618 163840 4096 4096 NT_STATUS_OK
ReadX 12618 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12618 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12619 NT_STATUS_OK
Close 12619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12621 NT_STATUS_OK
WriteX 12621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12621 258 NT_STATUS_OK
Close 12618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12622 NT_STATUS_OK
SET_FILE_INFORMATION 12622 1004 NT_STATUS_OK
Close 12622 NT_STATUS_OK
WriteX 12621 0 42388 42388 NT_STATUS_OK
Close 12621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12623 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
ReadX 12625 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12626 NT_STATUS_OK
WriteX 12626 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
SET_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 0 42652 42652 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
ReadX 12630 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12632 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12635 NT_STATUS_OK
WriteX 12635 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 65536 65536 NT_STATUS_OK
WriteX 12635 65536 49 49 NT_STATUS_OK
Close 12635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 61440 61440 NT_STATUS_OK
ReadX 12636 61440 4096 4096 NT_STATUS_OK
ReadX 12636 65536 61440 61440 NT_STATUS_OK
ReadX 12636 126976 4096 4096 NT_STATUS_OK
ReadX 12636 131072 61440 61440 NT_STATUS_OK
ReadX 12636 192512 4096 4096 NT_STATUS_OK
ReadX 12636 196608 61440 61440 NT_STATUS_OK
ReadX 12636 258048 4096 4096 NT_STATUS_OK
ReadX 12636 262144 61440 61440 NT_STATUS_OK
ReadX 12636 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 61440 61440 NT_STATUS_OK
ReadX 12637 61440 4096 4096 NT_STATUS_OK
ReadX 12637 65536 61440 61440 NT_STATUS_OK
ReadX 12637 126976 4096 4096 NT_STATUS_OK
ReadX 12637 131072 61440 61440 NT_STATUS_OK
ReadX 12637 192512 4096 4096 NT_STATUS_OK
ReadX 12637 196608 61440 61440 NT_STATUS_OK
ReadX 12637 258048 4096 4096 NT_STATUS_OK
ReadX 12637 262144 61440 61440 NT_STATUS_OK
ReadX 12637 323584 4096 4096 NT_STATUS_OK
ReadX 12637 327680 61440 61440 NT_STATUS_OK
ReadX 12637 389120 4096 4096 NT_STATUS_OK
ReadX 12637 393216 61440 61440 NT_STATUS_OK
ReadX 12637 454656 4096 4096 NT_STATUS_OK
ReadX 12637 458752 61440 61440 NT_STATUS_OK
ReadX 12637 520192 4096 4096 NT_STATUS_OK
ReadX 12637 524288 61440 61440 NT_STATUS_OK
ReadX 12637 585728 4096 4096 NT_STATUS_OK
ReadX 12637 589824 61440 61440 NT_STATUS_OK
ReadX 12637 651264 4096 4096 NT_STATUS_OK
ReadX 12637 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 61440 61440 NT_STATUS_OK
ReadX 12638 61440 4096 4096 NT_STATUS_OK
ReadX 12638 65536 61440 61440 NT_STATUS_OK
ReadX 12638 126976 4096 4096 NT_STATUS_OK
ReadX 12638 131072 61440 61440 NT_STATUS_OK
ReadX 12638 192512 4096 4096 NT_STATUS_OK
ReadX 12638 196608 61440 61440 NT_STATUS_OK
ReadX 12638 258048 4096 4096 NT_STATUS_OK
ReadX 12638 262144 61440 61440 NT_STATUS_OK
ReadX 12638 323584 4096 4096 NT_STATUS_OK
ReadX 12638 327680 61440 61440 NT_STATUS_OK
ReadX 12638 389120 4096 4096 NT_STATUS_OK
ReadX 12638 393216 61440 61440 NT_STATUS_OK
ReadX 12638 454656 4096 4096 NT_STATUS_OK
ReadX 12638 458752 61440 61440 NT_STATUS_OK
ReadX 12638 520192 4096 4096 NT_STATUS_OK
ReadX 12638 524288 61440 61440 NT_STATUS_OK
ReadX 12638 585728 4096 4096 NT_STATUS_OK
ReadX 12638 589824 61440 61440 NT_STATUS_OK
ReadX 12638 651264 4096 4096 NT_STATUS_OK
ReadX 12638 655360 61440 61440 NT_STATUS_OK
ReadX 12638 716800 4096 4096 NT_STATUS_OK
ReadX 12638 720896 61440 61440 NT_STATUS_OK
ReadX 12638 782336 4096 4096 NT_STATUS_OK
ReadX 12638 786432 61440 61440 NT_STATUS_OK
ReadX 12638 847872 4096 4096 NT_STATUS_OK
ReadX 12638 851968 61440 61440 NT_STATUS_OK
ReadX 12638 913408 4096 4096 NT_STATUS_OK
ReadX 12638 917504 61440 61440 NT_STATUS_OK
ReadX 12638 978944 4096 4096 NT_STATUS_OK
ReadX 12638 983040 61440 61440 NT_STATUS_OK
ReadX 12638 1044480 4096 4096 NT_STATUS_OK
ReadX 12638 1048576 61440 61440 NT_STATUS_OK
ReadX 12638 1110016 4096 4096 NT_STATUS_OK
ReadX 12638 1114112 61440 61440 NT_STATUS_OK
ReadX 12638 1175552 4096 4096 NT_STATUS_OK
ReadX 12638 1179648 61440 61440 NT_STATUS_OK
ReadX 12638 1241088 4096 4096 NT_STATUS_OK
ReadX 12638 1245184 61440 61440 NT_STATUS_OK
ReadX 12638 1306624 4096 4096 NT_STATUS_OK
ReadX 12638 1310720 61440 61440 NT_STATUS_OK
ReadX 12638 1372160 4096 4096 NT_STATUS_OK
ReadX 12638 1376256 61440 61440 NT_STATUS_OK
ReadX 12638 1437696 4096 4096 NT_STATUS_OK
ReadX 12638 1441792 61440 61440 NT_STATUS_OK
ReadX 12638 1503232 4096 4096 NT_STATUS_OK
ReadX 12638 1507328 61440 61440 NT_STATUS_OK
ReadX 12638 1568768 4096 4096 NT_STATUS_OK
ReadX 12638 1572864 61440 61440 NT_STATUS_OK
ReadX 12638 1634304 4096 4096 NT_STATUS_OK
ReadX 12638 1638400 61440 61440 NT_STATUS_OK
ReadX 12638 1699840 4096 4096 NT_STATUS_OK
ReadX 12638 1703936 61440 61440 NT_STATUS_OK
ReadX 12638 1765376 4096 4096 NT_STATUS_OK
ReadX 12638 1769472 61440 61440 NT_STATUS_OK
ReadX 12638 1830912 4096 4096 NT_STATUS_OK
ReadX 12638 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12640 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1005 NT_STATUS_OK
ReadX 12640 2156 24 24 NT_STATUS_OK
ReadX 12640 2139 276 276 NT_STATUS_OK
ReadX 12640 2136 14 14 NT_STATUS_OK
ReadX 12640 2136 7 7 NT_STATUS_OK
ReadX 12640 2138 12 12 NT_STATUS_OK
ReadX 12640 2137 8 8 NT_STATUS_OK
ReadX 12640 2135 15 15 NT_STATUS_OK
ReadX 12640 0 16 16 NT_STATUS_OK
ReadX 12640 16 2048 2048 NT_STATUS_OK
ReadX 12640 2064 2048 2048 NT_STATUS_OK
ReadX 12640 257 2048 2048 NT_STATUS_OK
ReadX 12640 385 2048 2048 NT_STATUS_OK
ReadX 12640 513 2048 2048 NT_STATUS_OK
ReadX 12640 641 2048 2048 NT_STATUS_OK
ReadX 12640 769 2048 2048 NT_STATUS_OK
ReadX 12640 897 2048 2048 NT_STATUS_OK
ReadX 12640 1025 2048 2048 NT_STATUS_OK
ReadX 12640 1153 2048 2048 NT_STATUS_OK
ReadX 12640 1281 2048 2048 NT_STATUS_OK
ReadX 12640 1409 2048 2048 NT_STATUS_OK
ReadX 12640 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12642 NT_STATUS_OK
Close 12642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12636 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12645 NT_STATUS_OK
WriteX 12645 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 258 NT_STATUS_OK
WriteX 12645 0 10575 10575 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12650 NT_STATUS_OK
LockX 12650 2147483538 1 NT_STATUS_OK
UnlockX 12650 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1005 NT_STATUS_OK
ReadX 12650 0 512 512 NT_STATUS_OK
ReadX 12650 512 512 512 NT_STATUS_OK
ReadX 12650 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1004 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12651 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1005 NT_STATUS_OK
ReadX 12651 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12652 NT_STATUS_OK
LockX 12652 2147483538 1 NT_STATUS_OK
UnlockX 12652 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1005 NT_STATUS_OK
ReadX 12652 0 512 512 NT_STATUS_OK
ReadX 12652 512 512 512 NT_STATUS_OK
ReadX 12652 1024 512 512 NT_STATUS_OK
ReadX 12652 288 20 20 NT_STATUS_OK
ReadX 12652 308 2084 2084 NT_STATUS_OK
ReadX 12652 388 2084 2084 NT_STATUS_OK
ReadX 12652 388 2084 2084 NT_STATUS_OK
ReadX 12639 2157 1386 1386 NT_STATUS_OK
ReadX 12652 2472 399 399 NT_STATUS_OK
ReadX 12652 3072 1536 1536 NT_STATUS_OK
ReadX 12652 544 149 149 NT_STATUS_OK
ReadX 12652 693 485 485 NT_STATUS_OK
Close 12652 NT_STATUS_OK
ReadX 12639 2157 4096 4096 NT_STATUS_OK
ReadX 12639 6253 4096 4096 NT_STATUS_OK
ReadX 12639 10349 4096 4096 NT_STATUS_OK
ReadX 12639 14445 4096 4096 NT_STATUS_OK
ReadX 12639 18541 4096 4096 NT_STATUS_OK
ReadX 12639 22637 256 256 NT_STATUS_OK
ReadX 12639 22893 4096 4096 NT_STATUS_OK
ReadX 12639 26989 4096 4096 NT_STATUS_OK
ReadX 12639 31085 4096 4096 NT_STATUS_OK
ReadX 12639 35181 4096 4096 NT_STATUS_OK
ReadX 12639 39277 4096 4096 NT_STATUS_OK
ReadX 12639 43373 4096 4096 NT_STATUS_OK
ReadX 12639 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12639 2157 1024 1024 NT_STATUS_OK
ReadX 12639 1667 4688 4688 NT_STATUS_OK
ReadX 12639 6355 3516 3516 NT_STATUS_OK
ReadX 12639 9871 16384 16384 NT_STATUS_OK
ReadX 12639 26255 3771 3771 NT_STATUS_OK
ReadX 12639 30026 2048 2048 NT_STATUS_OK
ReadX 12639 32074 1024 1024 NT_STATUS_OK
ReadX 12639 33098 6652 6652 NT_STATUS_OK
ReadX 12639 39750 16384 16384 NT_STATUS_OK
ReadX 12639 56134 10496 10496 NT_STATUS_OK
ReadX 12639 66630 1784 1784 NT_STATUS_OK
ReadX 12639 68414 90 90 NT_STATUS_OK
ReadX 12639 68504 273 273 NT_STATUS_OK
ReadX 12639 68777 1600 1600 NT_STATUS_OK
ReadX 12639 70377 640 640 NT_STATUS_OK
ReadX 12639 71017 1280 1280 NT_STATUS_OK
ReadX 12639 72297 8464 8464 NT_STATUS_OK
ReadX 12639 80761 158 158 NT_STATUS_OK
ReadX 12639 80919 912 912 NT_STATUS_OK
ReadX 12639 81831 1980 1980 NT_STATUS_OK
ReadX 12639 83811 2256 2256 NT_STATUS_OK
ReadX 12639 86067 400 400 NT_STATUS_OK
ReadX 12639 86467 252 252 NT_STATUS_OK
ReadX 12639 86719 42 42 NT_STATUS_OK
ReadX 12639 86761 725 725 NT_STATUS_OK
ReadX 12639 2009 512 512 NT_STATUS_OK
ReadX 12639 3895 9 9 NT_STATUS_OK
ReadX 12639 3781 46 46 NT_STATUS_OK
ReadX 12639 4059 92 92 NT_STATUS_OK
ReadX 12639 3781 92 92 NT_STATUS_OK
ReadX 12639 3986 184 184 NT_STATUS_OK
ReadX 12639 3987 16384 16384 NT_STATUS_OK
ReadX 12639 3902 16384 16384 NT_STATUS_OK
ReadX 12639 3781 10240 10240 NT_STATUS_OK
ReadX 12639 3821 16384 16384 NT_STATUS_OK
ReadX 12639 3891 935 935 NT_STATUS_OK
ReadX 12639 4060 10240 10240 NT_STATUS_OK
ReadX 12639 4059 184 184 NT_STATUS_OK
ReadX 12639 256 184 184 NT_STATUS_OK
ReadX 12639 256 1026 1026 NT_STATUS_OK
ReadX 12639 3901 326 326 NT_STATUS_OK
ReadX 12639 3899 652 652 NT_STATUS_OK
ReadX 12639 256 2 2 NT_STATUS_OK
ReadX 12639 258 4948 4948 NT_STATUS_OK
Close 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12657 NT_STATUS_OK
WriteX 12657 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12657 258 NT_STATUS_OK
WriteX 12657 0 65536 65536 NT_STATUS_OK
WriteX 12657 65536 65536 65536 NT_STATUS_OK
WriteX 12657 131072 65536 65536 NT_STATUS_OK
WriteX 12657 196608 65536 65536 NT_STATUS_OK
WriteX 12657 262144 65536 65536 NT_STATUS_OK
WriteX 12657 327680 65536 65536 NT_STATUS_OK
WriteX 12657 393216 65536 65536 NT_STATUS_OK
WriteX 12657 458752 65536 65536 NT_STATUS_OK
WriteX 12657 524288 65536 65536 NT_STATUS_OK
WriteX 12657 589824 35257 35257 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12659 NT_STATUS_OK
Close 12659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12662 NT_STATUS_OK
WriteX 12662 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 258 NT_STATUS_OK
WriteX 12662 0 65536 65536 NT_STATUS_OK
WriteX 12662 65536 65536 65536 NT_STATUS_OK
WriteX 12662 131072 65536 65536 NT_STATUS_OK
WriteX 12662 196608 65536 65536 NT_STATUS_OK
WriteX 12662 262144 65536 65536 NT_STATUS_OK
WriteX 12662 327680 65536 65536 NT_STATUS_OK
WriteX 12662 393216 65536 65536 NT_STATUS_OK
WriteX 12662 458752 65536 65536 NT_STATUS_OK
WriteX 12662 524288 65536 65536 NT_STATUS_OK
WriteX 12662 589824 57598 57598 NT_STATUS_OK
Close 12662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12664 NT_STATUS_OK
WriteX 12664 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12664 258 NT_STATUS_OK
WriteX 12664 0 12543 12543 NT_STATUS_OK
Flush 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12666 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12670 NT_STATUS_OK
QUERY_FILE_INFORMATION 12670 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12670 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12670 1005 NT_STATUS_OK
ReadX 12670 1938 24 24 NT_STATUS_OK
ReadX 12670 1920 276 276 NT_STATUS_OK
ReadX 12670 1918 14 14 NT_STATUS_OK
ReadX 12670 1918 7 7 NT_STATUS_OK
ReadX 12670 1919 12 12 NT_STATUS_OK
ReadX 12670 1919 8 8 NT_STATUS_OK
ReadX 12670 1917 15 15 NT_STATUS_OK
ReadX 12670 0 16 16 NT_STATUS_OK
ReadX 12670 16 2048 2048 NT_STATUS_OK
ReadX 12670 2064 2048 2048 NT_STATUS_OK
ReadX 12670 257 2048 2048 NT_STATUS_OK
ReadX 12670 385 2048 2048 NT_STATUS_OK
ReadX 12670 513 2048 2048 NT_STATUS_OK
ReadX 12670 641 2048 2048 NT_STATUS_OK
ReadX 12670 769 2048 2048 NT_STATUS_OK
ReadX 12670 897 2048 2048 NT_STATUS_OK
ReadX 12670 1025 2048 2048 NT_STATUS_OK
ReadX 12670 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12672 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12675 NT_STATUS_OK
WriteX 12675 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12675 258 NT_STATUS_OK
WriteX 12675 0 11588 11588 NT_STATUS_OK
Flush 12675 NT_STATUS_OK
Close 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12680 NT_STATUS_OK
WriteX 12680 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12680 258 NT_STATUS_OK
WriteX 12680 0 11615 11615 NT_STATUS_OK
Flush 12680 NT_STATUS_OK
Close 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12682 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12686 NT_STATUS_OK
Close 12686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12689 NT_STATUS_OK
WriteX 12689 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12689 258 NT_STATUS_OK
WriteX 12689 0 65536 65536 NT_STATUS_OK
WriteX 12689 65536 16050 16050 NT_STATUS_OK
Close 12689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12669 1939 64 64 NT_STATUS_OK
ReadX 12669 128 248 248 NT_STATUS_OK
ReadX 12669 128 568 568 NT_STATUS_OK
ReadX 12669 3872 1536 1536 NT_STATUS_OK
ReadX 12669 3456 2560 2560 NT_STATUS_OK
ReadX 12669 3136 512 512 NT_STATUS_OK
ReadX 12669 2880 4096 4096 NT_STATUS_OK
ReadX 12669 3264 3072 3072 NT_STATUS_OK
ReadX 12669 320 4096 4096 NT_STATUS_OK
ReadX 12669 1024 4096 4096 NT_STATUS_OK
ReadX 12669 3616 4096 4096 NT_STATUS_OK
ReadX 12669 1939 64 64 NT_STATUS_OK
ReadX 12669 128 248 248 NT_STATUS_OK
ReadX 12669 128 608 608 NT_STATUS_OK
ReadX 12669 2858 1024 1024 NT_STATUS_OK
ReadX 12669 2810 4096 4096 NT_STATUS_OK
ReadX 12669 2826 4096 4096 NT_STATUS_OK
ReadX 12669 2580 2048 2048 NT_STATUS_OK
ReadX 12669 2800 2560 2560 NT_STATUS_OK
ReadX 12669 2100 4096 4096 NT_STATUS_OK
ReadX 12669 2084 4096 4096 NT_STATUS_OK
ReadX 12669 868 4096 4096 NT_STATUS_OK
ReadX 12669 2324 4096 4096 NT_STATUS_OK
ReadX 12669 884 4096 4096 NT_STATUS_OK
ReadX 12669 2604 1024 1024 NT_STATUS_OK
ReadX 12669 580 4096 4096 NT_STATUS_OK
ReadX 12669 596 4096 4096 NT_STATUS_OK
ReadX 12669 2752 4096 4096 NT_STATUS_OK
ReadX 12669 2842 1024 1024 NT_STATUS_OK
ReadX 12669 660 4096 4096 NT_STATUS_OK
ReadX 12669 2720 4096 4096 NT_STATUS_OK
ReadX 12669 2736 4096 4096 NT_STATUS_OK
ReadX 12669 628 4096 4096 NT_STATUS_OK
ReadX 12669 2704 4096 4096 NT_STATUS_OK
ReadX 12669 1556 4096 4096 NT_STATUS_OK
ReadX 12669 576 4096 4096 NT_STATUS_OK
ReadX 12669 3168 1536 1536 NT_STATUS_OK
ReadX 12669 832 4096 4096 NT_STATUS_OK
ReadX 12669 1088 4096 4096 NT_STATUS_OK
ReadX 12669 1344 4096 4096 NT_STATUS_OK
ReadX 12669 1600 4096 4096 NT_STATUS_OK
ReadX 12669 1856 4096 4096 NT_STATUS_OK
ReadX 12669 2112 4096 4096 NT_STATUS_OK
ReadX 12669 1892 4096 4096 NT_STATUS_OK
ReadX 12669 820 4096 4096 NT_STATUS_OK
ReadX 12669 788 4096 4096 NT_STATUS_OK
ReadX 12669 1604 4096 4096 NT_STATUS_OK
ReadX 12669 3648 4096 4096 NT_STATUS_OK
ReadX 12669 2608 4096 4096 NT_STATUS_OK
ReadX 12669 548 4096 4096 NT_STATUS_OK
ReadX 12669 740 4096 4096 NT_STATUS_OK
ReadX 12669 1344 4096 4096 NT_STATUS_OK
ReadX 12669 3392 4096 4096 NT_STATUS_OK
ReadX 12669 3904 4096 4096 NT_STATUS_OK
ReadX 12669 644 4096 4096 NT_STATUS_OK
ReadX 12669 676 4096 4096 NT_STATUS_OK
ReadX 12669 2688 4096 4096 NT_STATUS_OK
ReadX 12669 320 4096 4096 NT_STATUS_OK
ReadX 12669 900 4096 4096 NT_STATUS_OK
ReadX 12669 1908 4096 4096 NT_STATUS_OK
ReadX 12669 852 4096 4096 NT_STATUS_OK
ReadX 12669 724 4096 4096 NT_STATUS_OK
ReadX 12669 2292 4096 4096 NT_STATUS_OK
ReadX 12669 612 4096 4096 NT_STATUS_OK
ReadX 12669 388 4096 4096 NT_STATUS_OK
ReadX 12669 2368 4096 4096 NT_STATUS_OK
ReadX 12669 2624 4096 4096 NT_STATUS_OK
ReadX 12669 500 4096 4096 NT_STATUS_OK
ReadX 12669 356 4096 4096 NT_STATUS_OK
ReadX 12669 1024 4096 4096 NT_STATUS_OK
ReadX 12669 576 4096 4096 NT_STATUS_OK
ReadX 12669 340 4096 4096 NT_STATUS_OK
ReadX 12669 420 4096 4096 NT_STATUS_OK
ReadX 12669 1600 4096 4096 NT_STATUS_OK
ReadX 12669 404 4096 4096 NT_STATUS_OK
ReadX 12669 1428 4096 4096 NT_STATUS_OK
ReadX 12669 2656 4096 4096 NT_STATUS_OK
ReadX 12669 2624 4096 4096 NT_STATUS_OK
ReadX 12669 452 4096 4096 NT_STATUS_OK
ReadX 12669 692 4096 4096 NT_STATUS_OK
ReadX 12669 564 4096 4096 NT_STATUS_OK
ReadX 12669 372 4096 4096 NT_STATUS_OK
ReadX 12669 468 4096 4096 NT_STATUS_OK
ReadX 12669 484 4096 4096 NT_STATUS_OK
ReadX 12669 1088 4096 4096 NT_STATUS_OK
ReadX 12669 1924 4096 4096 NT_STATUS_OK
ReadX 12669 2768 4096 4096 NT_STATUS_OK
ReadX 12669 832 4096 4096 NT_STATUS_OK
ReadX 12669 836 4096 4096 NT_STATUS_OK
ReadX 12669 1856 4096 4096 NT_STATUS_OK
ReadX 12669 2640 4096 4096 NT_STATUS_OK
ReadX 12669 436 4096 4096 NT_STATUS_OK
ReadX 12669 1828 4096 4096 NT_STATUS_OK
ReadX 12669 804 4096 4096 NT_STATUS_OK
ReadX 12669 1860 4096 4096 NT_STATUS_OK
ReadX 12669 1812 4096 4096 NT_STATUS_OK
ReadX 12669 756 4096 4096 NT_STATUS_OK
ReadX 12669 1636 4096 4096 NT_STATUS_OK
ReadX 12669 772 4096 4096 NT_STATUS_OK
ReadX 12669 2036 4096 4096 NT_STATUS_OK
ReadX 12669 1220 4096 4096 NT_STATUS_OK
ReadX 12669 1652 4096 4096 NT_STATUS_OK
ReadX 12669 2588 4096 4096 NT_STATUS_OK
ReadX 12669 916 4096 4096 NT_STATUS_OK
ReadX 12669 260 4096 4096 NT_STATUS_OK
ReadX 12669 932 4096 4096 NT_STATUS_OK
ReadX 12669 2624 4096 4096 NT_STATUS_OK
ReadX 12669 308 4096 4096 NT_STATUS_OK
ReadX 12669 292 4096 4096 NT_STATUS_OK
ReadX 12669 1140 4096 4096 NT_STATUS_OK
ReadX 12669 276 4096 4096 NT_STATUS_OK
ReadX 12669 2020 4096 4096 NT_STATUS_OK
ReadX 12669 2880 4096 4096 NT_STATUS_OK
ReadX 12669 516 4096 4096 NT_STATUS_OK
ReadX 12669 1844 4096 4096 NT_STATUS_OK
ReadX 12669 1124 4096 4096 NT_STATUS_OK
ReadX 12669 3136 4096 4096 NT_STATUS_OK
ReadX 12669 324 4096 4096 NT_STATUS_OK
ReadX 12669 1156 4096 4096 NT_STATUS_OK
ReadX 12669 1172 4096 4096 NT_STATUS_OK
ReadX 12669 2112 4096 4096 NT_STATUS_OK
ReadX 12669 2368 4096 4096 NT_STATUS_OK
ReadX 12669 964 4096 4096 NT_STATUS_OK
ReadX 12669 980 4096 4096 NT_STATUS_OK
ReadX 12669 1012 4096 4096 NT_STATUS_OK
ReadX 12669 532 4096 4096 NT_STATUS_OK
ReadX 12669 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12669 1620 4096 4096 NT_STATUS_OK
ReadX 12669 1604 4096 4096 NT_STATUS_OK
ReadX 12669 2116 4096 4096 NT_STATUS_OK
ReadX 12669 2132 4096 4096 NT_STATUS_OK
ReadX 12669 2148 4096 4096 NT_STATUS_OK
ReadX 12669 2276 4096 4096 NT_STATUS_OK
ReadX 12669 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12691 NT_STATUS_OK
Close 12691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12694 NT_STATUS_OK
QUERY_FILE_INFORMATION 12649 1004 NT_STATUS_OK
Close 12649 NT_STATUS_OK
WriteX 12694 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12694 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1004 NT_STATUS_OK
Close 12651 NT_STATUS_OK
WriteX 12694 0 65536 65536 NT_STATUS_OK
WriteX 12694 65536 64850 64850 NT_STATUS_OK
Close 12694 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12696 NT_STATUS_OK
WriteX 12696 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12696 258 NT_STATUS_OK
ReadX 12669 2068 4096 4096 NT_STATUS_OK
ReadX 12669 1588 4096 4096 NT_STATUS_OK
ReadX 12669 1572 4096 4096 NT_STATUS_OK
WriteX 12696 0 18630 18630 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12669 612 4096 4096 NT_STATUS_OK
ReadX 12669 564 4096 4096 NT_STATUS_OK
ReadX 12669 1876 4096 4096 NT_STATUS_OK
ReadX 12669 628 4096 4096 NT_STATUS_OK
ReadX 12669 740 4096 4096 NT_STATUS_OK
ReadX 12669 724 4096 4096 NT_STATUS_OK
ReadX 12669 644 4096 4096 NT_STATUS_OK
ReadX 12669 2324 4096 4096 NT_STATUS_OK
ReadX 12669 660 4096 4096 NT_STATUS_OK
ReadX 12669 852 4096 4096 NT_STATUS_OK
ReadX 12669 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12669 2368 4096 4096 NT_STATUS_OK
ReadX 12669 1024 4096 4096 NT_STATUS_OK
ReadX 12669 320 4096 4096 NT_STATUS_OK
ReadX 12669 580 4096 4096 NT_STATUS_OK
ReadX 12669 3136 512 512 NT_STATUS_OK
ReadX 12669 2880 4096 4096 NT_STATUS_OK
Close 12669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 61440 4096 4096 NT_STATUS_OK
ReadX 12701 126976 4096 4096 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 61440 4096 4096 NT_STATUS_OK
ReadX 12702 126976 4096 4096 NT_STATUS_OK
ReadX 12702 192512 4096 4096 NT_STATUS_OK
ReadX 12702 258048 4096 4096 NT_STATUS_OK
WriteX 12702 0 65536 65536 NT_STATUS_OK
WriteX 12702 65536 65536 65536 NT_STATUS_OK
WriteX 12702 131072 65536 65536 NT_STATUS_OK
WriteX 12702 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 61440 4096 4096 NT_STATUS_OK
ReadX 12703 126976 4096 4096 NT_STATUS_OK
ReadX 12703 192512 4096 4096 NT_STATUS_OK
ReadX 12703 258048 4096 4096 NT_STATUS_OK
ReadX 12703 323584 4096 4096 NT_STATUS_OK
ReadX 12703 389120 4096 4096 NT_STATUS_OK
ReadX 12703 454656 4096 4096 NT_STATUS_OK
ReadX 12703 520192 4096 4096 NT_STATUS_OK
WriteX 12703 0 65536 65536 NT_STATUS_OK
WriteX 12703 65536 65536 65536 NT_STATUS_OK
WriteX 12703 131072 65536 65536 NT_STATUS_OK
WriteX 12703 196608 65536 65536 NT_STATUS_OK
WriteX 12703 262144 65536 65536 NT_STATUS_OK
WriteX 12703 327680 65536 65536 NT_STATUS_OK
WriteX 12703 393216 65536 65536 NT_STATUS_OK
WriteX 12703 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12706 NT_STATUS_OK
WriteX 12706 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12706 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12704 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12708 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12711 NT_STATUS_OK
WriteX 12711 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
WriteX 12711 0 62591 62591 NT_STATUS_OK
Close 12711 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12713 NT_STATUS_OK
Close 12713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12716 NT_STATUS_OK
WriteX 12716 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
WriteX 12716 0 10845 10845 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12721 NT_STATUS_OK
WriteX 12721 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 258 NT_STATUS_OK
WriteX 12721 0 30118 30118 NT_STATUS_OK
Close 12721 NT_STATUS_OK
WriteX 12704 0 4096 4096 NT_STATUS_OK
WriteX 12706 0 64 64 NT_STATUS_OK
Close 12706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 61440 61440 NT_STATUS_OK
ReadX 12723 61440 4096 4096 NT_STATUS_OK
ReadX 12723 65536 61440 61440 NT_STATUS_OK
ReadX 12723 126976 4096 4096 NT_STATUS_OK
ReadX 12723 131072 61440 61440 NT_STATUS_OK
ReadX 12723 192512 4096 4096 NT_STATUS_OK
ReadX 12723 196608 61440 61440 NT_STATUS_OK
ReadX 12723 258048 4096 4096 NT_STATUS_OK
ReadX 12723 262144 61440 61440 NT_STATUS_OK
ReadX 12723 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 61440 61440 NT_STATUS_OK
ReadX 12724 61440 4096 4096 NT_STATUS_OK
ReadX 12724 65536 61440 61440 NT_STATUS_OK
ReadX 12724 126976 4096 4096 NT_STATUS_OK
ReadX 12724 131072 61440 61440 NT_STATUS_OK
ReadX 12724 192512 4096 4096 NT_STATUS_OK
ReadX 12724 196608 61440 61440 NT_STATUS_OK
ReadX 12724 258048 4096 4096 NT_STATUS_OK
ReadX 12724 262144 61440 61440 NT_STATUS_OK
ReadX 12724 323584 4096 4096 NT_STATUS_OK
ReadX 12724 327680 61440 61440 NT_STATUS_OK
ReadX 12724 389120 4096 4096 NT_STATUS_OK
ReadX 12724 393216 61440 61440 NT_STATUS_OK
ReadX 12724 454656 4096 4096 NT_STATUS_OK
ReadX 12724 458752 61440 61440 NT_STATUS_OK
ReadX 12724 520192 4096 4096 NT_STATUS_OK
ReadX 12724 524288 61440 61440 NT_STATUS_OK
ReadX 12724 585728 4096 4096 NT_STATUS_OK
ReadX 12724 589824 61440 61440 NT_STATUS_OK
ReadX 12724 651264 4096 4096 NT_STATUS_OK
ReadX 12724 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 61440 61440 NT_STATUS_OK
ReadX 12725 61440 4096 4096 NT_STATUS_OK
ReadX 12725 65536 61440 61440 NT_STATUS_OK
ReadX 12725 126976 4096 4096 NT_STATUS_OK
ReadX 12725 131072 61440 61440 NT_STATUS_OK
ReadX 12725 192512 4096 4096 NT_STATUS_OK
ReadX 12725 196608 61440 61440 NT_STATUS_OK
ReadX 12725 258048 4096 4096 NT_STATUS_OK
ReadX 12725 262144 61440 61440 NT_STATUS_OK
ReadX 12725 323584 4096 4096 NT_STATUS_OK
ReadX 12725 327680 61440 61440 NT_STATUS_OK
ReadX 12725 389120 4096 4096 NT_STATUS_OK
ReadX 12725 393216 61440 61440 NT_STATUS_OK
ReadX 12725 454656 4096 4096 NT_STATUS_OK
ReadX 12725 458752 61440 61440 NT_STATUS_OK
ReadX 12725 520192 4096 4096 NT_STATUS_OK
ReadX 12725 524288 61440 61440 NT_STATUS_OK
ReadX 12725 585728 4096 4096 NT_STATUS_OK
ReadX 12725 589824 61440 61440 NT_STATUS_OK
ReadX 12725 651264 4096 4096 NT_STATUS_OK
ReadX 12725 655360 61440 61440 NT_STATUS_OK
ReadX 12725 716800 4096 4096 NT_STATUS_OK
ReadX 12725 720896 61440 61440 NT_STATUS_OK
ReadX 12725 782336 4096 4096 NT_STATUS_OK
ReadX 12725 786432 61440 61440 NT_STATUS_OK
ReadX 12725 847872 4096 4096 NT_STATUS_OK
ReadX 12725 851968 61440 61440 NT_STATUS_OK
ReadX 12725 913408 4096 4096 NT_STATUS_OK
ReadX 12725 917504 61440 61440 NT_STATUS_OK
ReadX 12725 978944 4096 4096 NT_STATUS_OK
ReadX 12725 983040 61440 61440 NT_STATUS_OK
ReadX 12725 1044480 4096 4096 NT_STATUS_OK
ReadX 12725 1048576 61440 61440 NT_STATUS_OK
ReadX 12725 1110016 4096 4096 NT_STATUS_OK
ReadX 12725 1114112 61440 61440 NT_STATUS_OK
ReadX 12725 1175552 4096 4096 NT_STATUS_OK
ReadX 12725 1179648 61440 61440 NT_STATUS_OK
ReadX 12725 1241088 4096 4096 NT_STATUS_OK
ReadX 12725 1245184 61440 61440 NT_STATUS_OK
ReadX 12725 1306624 4096 4096 NT_STATUS_OK
ReadX 12725 1310720 61440 61440 NT_STATUS_OK
ReadX 12725 1372160 4096 4096 NT_STATUS_OK
ReadX 12725 1376256 61440 61440 NT_STATUS_OK
ReadX 12725 1437696 4096 4096 NT_STATUS_OK
ReadX 12725 1441792 61440 61440 NT_STATUS_OK
ReadX 12725 1503232 4096 4096 NT_STATUS_OK
ReadX 12725 1507328 61440 61440 NT_STATUS_OK
ReadX 12725 1568768 4096 4096 NT_STATUS_OK
ReadX 12725 1572864 61440 61440 NT_STATUS_OK
ReadX 12725 1634304 4096 4096 NT_STATUS_OK
ReadX 12725 1638400 61440 61440 NT_STATUS_OK
ReadX 12725 1699840 4096 4096 NT_STATUS_OK
ReadX 12725 1703936 61440 61440 NT_STATUS_OK
ReadX 12725 1765376 4096 4096 NT_STATUS_OK
ReadX 12725 1769472 61440 61440 NT_STATUS_OK
ReadX 12725 1830912 4096 4096 NT_STATUS_OK
ReadX 12725 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12726 NT_STATUS_OK
Close 12726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
ReadX 12730 4096 4096 4096 NT_STATUS_OK
ReadX 12730 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12731 NT_STATUS_OK
Close 12731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12733 NT_STATUS_OK
ReadX 12733 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12734 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12735 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 8192 8192 NT_STATUS_OK
ReadX 12738 8192 8192 8192 NT_STATUS_OK
ReadX 12738 16384 8192 8192 NT_STATUS_OK
ReadX 12738 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12740 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12743 NT_STATUS_OK
WriteX 12743 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 10438 10438 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12744 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12745 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12747 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12749 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12751 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12752 NT_STATUS_OK
ReadX 12752 0 4096 4096 NT_STATUS_OK
ReadX 12752 4096 4096 4096 NT_STATUS_OK
ReadX 12752 8192 4096 4096 NT_STATUS_OK
ReadX 12752 12288 8192 8192 NT_STATUS_OK
ReadX 12752 20480 8192 8192 NT_STATUS_OK
ReadX 12752 28672 8192 8192 NT_STATUS_OK
ReadX 12752 36864 8192 8192 NT_STATUS_OK
ReadX 12752 45056 8192 8192 NT_STATUS_OK
ReadX 12752 53248 8192 8192 NT_STATUS_OK
ReadX 12752 61440 8192 8192 NT_STATUS_OK
ReadX 12752 69632 8192 8192 NT_STATUS_OK
ReadX 12752 77824 8192 8192 NT_STATUS_OK
ReadX 12752 86016 8192 8192 NT_STATUS_OK
ReadX 12752 94208 8192 8192 NT_STATUS_OK
ReadX 12752 102400 8192 8192 NT_STATUS_OK
ReadX 12752 110592 8192 8192 NT_STATUS_OK
ReadX 12752 118784 8192 8192 NT_STATUS_OK
ReadX 12752 126976 8192 8192 NT_STATUS_OK
ReadX 12752 135168 8192 8192 NT_STATUS_OK
ReadX 12752 143360 8192 8192 NT_STATUS_OK
ReadX 12752 151552 8192 8192 NT_STATUS_OK
ReadX 12752 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12754 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12757 NT_STATUS_OK
WriteX 12757 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12757 258 NT_STATUS_OK
WriteX 12757 0 28489 28489 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12758 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12760 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 8192 8192 NT_STATUS_OK
ReadX 12764 8192 8192 8192 NT_STATUS_OK
ReadX 12764 16384 8192 8192 NT_STATUS_OK
ReadX 12764 24576 8192 8192 NT_STATUS_OK
ReadX 12764 32768 16384 16384 NT_STATUS_OK
ReadX 12764 49152 8192 8192 NT_STATUS_OK
ReadX 12764 57344 8192 8192 NT_STATUS_OK
ReadX 12764 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12769 NT_STATUS_OK
WriteX 12769 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12769 258 NT_STATUS_OK
WriteX 12769 0 29253 29253 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12770 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12773 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12776 NT_STATUS_OK
WriteX 12776 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
WriteX 12776 0 30183 30183 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12777 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12779 NT_STATUS_OK
WriteX 12779 0 510 510 NT_STATUS_OK
WriteX 12779 510 512 512 NT_STATUS_OK
WriteX 12779 1022 510 510 NT_STATUS_OK
WriteX 12779 1532 510 510 NT_STATUS_OK
WriteX 12779 2042 168 168 NT_STATUS_OK
Close 12779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
WriteX 12782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 61440 4096 4096 NT_STATUS_OK
ReadX 12783 126976 4096 4096 NT_STATUS_OK
WriteX 12783 0 65536 65536 NT_STATUS_OK
WriteX 12783 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 61440 4096 4096 NT_STATUS_OK
ReadX 12784 126976 4096 4096 NT_STATUS_OK
ReadX 12784 192512 4096 4096 NT_STATUS_OK
ReadX 12784 258048 4096 4096 NT_STATUS_OK
WriteX 12784 0 65536 65536 NT_STATUS_OK
WriteX 12784 65536 65536 65536 NT_STATUS_OK
WriteX 12784 131072 65536 65536 NT_STATUS_OK
WriteX 12784 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 61440 4096 4096 NT_STATUS_OK
ReadX 12785 126976 4096 4096 NT_STATUS_OK
ReadX 12785 192512 4096 4096 NT_STATUS_OK
ReadX 12785 258048 4096 4096 NT_STATUS_OK
ReadX 12785 323584 4096 4096 NT_STATUS_OK
ReadX 12785 389120 4096 4096 NT_STATUS_OK
ReadX 12785 454656 4096 4096 NT_STATUS_OK
ReadX 12785 520192 4096 4096 NT_STATUS_OK
WriteX 12785 0 65536 65536 NT_STATUS_OK
WriteX 12785 65536 65536 65536 NT_STATUS_OK
WriteX 12785 131072 65536 65536 NT_STATUS_OK
WriteX 12785 196608 65536 65536 NT_STATUS_OK
WriteX 12785 262144 65536 65536 NT_STATUS_OK
WriteX 12785 327680 65536 65536 NT_STATUS_OK
WriteX 12785 393216 65536 65536 NT_STATUS_OK
WriteX 12785 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12786 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12782 NT_STATUS_OK
Close 12783 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12788 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12795 NT_STATUS_OK
Close 12795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12804 NT_STATUS_OK
Close 12804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12806 NT_STATUS_OK
Close 12806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12815 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12820 NT_STATUS_OK
Close 12820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12835 NT_STATUS_OK
Close 12835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12848 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12854 NT_STATUS_OK
WriteX 12854 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12854 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12854 0 65536 65536 NT_STATUS_OK
WriteX 12854 65536 65536 65536 NT_STATUS_OK
WriteX 12854 131072 65536 65536 NT_STATUS_OK
WriteX 12854 196608 65536 65536 NT_STATUS_OK
WriteX 12854 262144 26634 26634 NT_STATUS_OK
Close 12854 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12860 NT_STATUS_OK
Close 12860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
Close 12861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
ReadX 12862 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12863 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12870 NT_STATUS_OK
Close 12870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12881 NT_STATUS_OK
Close 12881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12890 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12914 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12927 NT_STATUS_OK
Close 12927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
Close 12955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12943 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12986 0 4096 4096 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
ReadX 12988 4096 4096 4096 NT_STATUS_OK
ReadX 12988 8192 4096 4096 NT_STATUS_OK
ReadX 12988 12288 4096 4096 NT_STATUS_OK
ReadX 12988 16384 4096 4096 NT_STATUS_OK
ReadX 12988 20480 4096 4096 NT_STATUS_OK
ReadX 12988 24576 4096 4096 NT_STATUS_OK
ReadX 12988 28672 4096 4096 NT_STATUS_OK
ReadX 12988 32768 4096 4096 NT_STATUS_OK
ReadX 12988 36864 4096 4096 NT_STATUS_OK
ReadX 12988 40960 4096 4096 NT_STATUS_OK
ReadX 12988 45056 4096 4096 NT_STATUS_OK
ReadX 12988 49152 4096 4096 NT_STATUS_OK
ReadX 12988 53248 4096 4096 NT_STATUS_OK
ReadX 12988 57344 4096 4096 NT_STATUS_OK
ReadX 12988 61440 4096 4096 NT_STATUS_OK
ReadX 12988 65536 4096 4096 NT_STATUS_OK
ReadX 12988 69632 4096 4096 NT_STATUS_OK
ReadX 12988 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12988 1004 NT_STATUS_OK
WriteX 12988 0 4096 4096 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12989 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12994 NT_STATUS_OK
WriteX 12994 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 258 NT_STATUS_OK
WriteX 12994 0 65536 65536 NT_STATUS_OK
WriteX 12994 65536 19979 19979 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 1004 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
SET_FILE_INFORMATION 12995 1004 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
Close 12996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13000 1004 NT_STATUS_OK
WriteX 13000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13003 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13006 NT_STATUS_OK
WriteX 13006 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13006 258 NT_STATUS_OK
WriteX 13006 0 65536 65536 NT_STATUS_OK
WriteX 13006 65536 17654 17654 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 4096 4096 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13008 NT_STATUS_OK
SET_FILE_INFORMATION 13008 1004 NT_STATUS_OK
Close 13008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13009 NT_STATUS_OK
ReadX 13009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
ReadX 13012 4096 4096 4096 NT_STATUS_OK
ReadX 13012 8192 4096 4096 NT_STATUS_OK
ReadX 13012 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13012 16384 4096 4096 NT_STATUS_OK
ReadX 13012 20480 4096 4096 NT_STATUS_OK
ReadX 13012 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13015 1004 NT_STATUS_OK
WriteX 13015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13018 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13021 NT_STATUS_OK
WriteX 13021 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 258 NT_STATUS_OK
WriteX 13021 0 65536 65536 NT_STATUS_OK
WriteX 13021 65536 19490 19490 NT_STATUS_OK
Close 13021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 0 4096 4096 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 1004 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
SET_FILE_INFORMATION 13022 1004 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13025 NT_STATUS_OK
Close 13025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13027 0 4096 4096 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
ReadX 13029 4096 4096 4096 NT_STATUS_OK
ReadX 13029 8192 4096 4096 NT_STATUS_OK
ReadX 13029 12288 4096 4096 NT_STATUS_OK
ReadX 13029 16384 4096 4096 NT_STATUS_OK
ReadX 13029 20480 4096 4096 NT_STATUS_OK
ReadX 13029 24576 4096 4096 NT_STATUS_OK
ReadX 13029 28672 4096 4096 NT_STATUS_OK
ReadX 13029 32768 4096 4096 NT_STATUS_OK
ReadX 13029 36864 4096 4096 NT_STATUS_OK
ReadX 13029 40960 4096 4096 NT_STATUS_OK
ReadX 13029 45056 4096 4096 NT_STATUS_OK
ReadX 13029 49152 4096 4096 NT_STATUS_OK
ReadX 13029 53248 4096 4096 NT_STATUS_OK
ReadX 13029 57344 4096 4096 NT_STATUS_OK
ReadX 13029 61440 4096 4096 NT_STATUS_OK
ReadX 13029 65536 4096 4096 NT_STATUS_OK
ReadX 13029 69632 4096 4096 NT_STATUS_OK
ReadX 13029 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13029 1004 NT_STATUS_OK
WriteX 13029 0 4096 4096 NT_STATUS_OK
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
SET_FILE_INFORMATION 13030 1004 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13032 NT_STATUS_OK
Close 13032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13035 NT_STATUS_OK
WriteX 13035 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13035 258 NT_STATUS_OK
WriteX 13035 0 65536 65536 NT_STATUS_OK
WriteX 13035 65536 8866 8866 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
WriteX 13036 0 4096 4096 NT_STATUS_OK
Flush 13036 NT_STATUS_OK
SET_FILE_INFORMATION 13036 1004 NT_STATUS_OK
WriteX 13036 0 4096 4096 NT_STATUS_OK
Flush 13036 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13040 1004 NT_STATUS_OK
WriteX 13040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13041 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13040 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13046 NT_STATUS_OK
WriteX 13046 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 258 NT_STATUS_OK
WriteX 13046 0 65536 65536 NT_STATUS_OK
WriteX 13046 65536 9298 9298 NT_STATUS_OK
Close 13046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
Flush 13047 NT_STATUS_OK
SET_FILE_INFORMATION 13047 1004 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
Flush 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
SET_FILE_INFORMATION 13048 1004 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13053 0 4096 4096 NT_STATUS_OK
Close 13053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13054 NT_STATUS_OK
ReadX 13054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13054 4096 4096 4096 NT_STATUS_OK
ReadX 13054 8192 4096 4096 NT_STATUS_OK
ReadX 13054 12288 4096 4096 NT_STATUS_OK
ReadX 13054 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13055 NT_STATUS_OK
ReadX 13055 0 4096 4096 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
WriteX 13057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13058 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13054 NT_STATUS_OK
Close 13057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13063 NT_STATUS_OK
WriteX 13063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 11540 11540 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
Flush 13064 NT_STATUS_OK
SET_FILE_INFORMATION 13064 1004 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
Flush 13064 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 61440 4096 4096 NT_STATUS_OK
ReadX 13069 126976 4096 4096 NT_STATUS_OK
WriteX 13069 0 65536 65536 NT_STATUS_OK
WriteX 13069 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 61440 4096 4096 NT_STATUS_OK
ReadX 13070 126976 4096 4096 NT_STATUS_OK
ReadX 13070 192512 4096 4096 NT_STATUS_OK
ReadX 13070 258048 4096 4096 NT_STATUS_OK
WriteX 13070 0 65536 65536 NT_STATUS_OK
WriteX 13070 65536 65536 65536 NT_STATUS_OK
WriteX 13070 131072 65536 65536 NT_STATUS_OK
WriteX 13070 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 61440 4096 4096 NT_STATUS_OK
ReadX 13071 126976 4096 4096 NT_STATUS_OK
ReadX 13071 192512 4096 4096 NT_STATUS_OK
ReadX 13071 258048 4096 4096 NT_STATUS_OK
ReadX 13071 323584 4096 4096 NT_STATUS_OK
ReadX 13071 389120 4096 4096 NT_STATUS_OK
ReadX 13071 454656 4096 4096 NT_STATUS_OK
ReadX 13071 520192 4096 4096 NT_STATUS_OK
WriteX 13071 0 65536 65536 NT_STATUS_OK
WriteX 13071 65536 65536 65536 NT_STATUS_OK
WriteX 13071 131072 65536 65536 NT_STATUS_OK
WriteX 13071 196608 65536 65536 NT_STATUS_OK
WriteX 13071 262144 65536 65536 NT_STATUS_OK
WriteX 13071 327680 65536 65536 NT_STATUS_OK
WriteX 13071 393216 65536 65536 NT_STATUS_OK
WriteX 13071 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
ReadX 13072 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13073 NT_STATUS_OK
WriteX 13073 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13073 258 NT_STATUS_OK
WriteX 13073 0 53 53 NT_STATUS_OK
Close 13073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13074 NT_STATUS_OK
Close 13074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13071 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13072 8192 4096 4096 NT_STATUS_OK
ReadX 13072 12288 4096 4096 NT_STATUS_OK
WriteX 13076 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
ReadX 13072 16384 4096 4096 NT_STATUS_OK
ReadX 13072 20480 4096 4096 NT_STATUS_OK
WriteX 13076 0 15360 15360 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13078 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13080 NT_STATUS_OK
ReadX 13080 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13081 NT_STATUS_OK
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13080 4096 4096 4096 NT_STATUS_OK
ReadX 13080 8192 4096 4096 NT_STATUS_OK
ReadX 13080 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
ReadX 13083 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
ReadX 13084 4096 4096 4096 NT_STATUS_OK
ReadX 13084 8192 4096 4096 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13085 NT_STATUS_OK
WriteX 13085 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13085 258 NT_STATUS_OK
WriteX 13085 0 15360 15360 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13086 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13086 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13087 NT_STATUS_OK
Close 13087 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13090 NT_STATUS_OK
SET_FILE_INFORMATION 13090 1004 NT_STATUS_OK
Close 13090 NT_STATUS_OK
WriteX 13086 0 4096 4096 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13091 NT_STATUS_OK
Close 13091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13093 NT_STATUS_OK
ReadX 13093 0 4096 4096 NT_STATUS_OK
ReadX 13093 4096 4096 4096 NT_STATUS_OK
ReadX 13093 8192 4096 4096 NT_STATUS_OK
ReadX 13093 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13095 NT_STATUS_OK
WriteX 13095 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 258 NT_STATUS_OK
WriteX 13095 0 53 53 NT_STATUS_OK
Close 13095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13096 NT_STATUS_OK
Close 13096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 4096 4096 NT_STATUS_OK
ReadX 13094 12288 4096 4096 NT_STATUS_OK
WriteX 13098 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13098 258 NT_STATUS_OK
WriteX 13098 0 12006 12006 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
Close 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13102 4096 4096 4096 NT_STATUS_OK
ReadX 13102 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 11991 11991 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13110 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
Close 13110 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13114 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13113 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
ReadX 13113 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
WriteX 13113 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13113 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
Close 13089 NT_STATUS_OK
WriteX 13093 0 19054 19054 NT_STATUS_OK
WriteX 13113 0 12288 12288 NT_STATUS_OK
Close 13109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13118 NT_STATUS_OK
Close 13118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 61440 61440 NT_STATUS_OK
ReadX 13120 61440 4096 4096 NT_STATUS_OK
ReadX 13120 65536 61440 61440 NT_STATUS_OK
ReadX 13120 126976 4096 4096 NT_STATUS_OK
ReadX 13120 131072 61440 61440 NT_STATUS_OK
ReadX 13120 192512 4096 4096 NT_STATUS_OK
ReadX 13120 196608 61440 61440 NT_STATUS_OK
ReadX 13120 258048 4096 4096 NT_STATUS_OK
ReadX 13120 262144 61440 61440 NT_STATUS_OK
ReadX 13120 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 61440 61440 NT_STATUS_OK
ReadX 13121 61440 4096 4096 NT_STATUS_OK
ReadX 13121 65536 61440 61440 NT_STATUS_OK
ReadX 13121 126976 4096 4096 NT_STATUS_OK
ReadX 13121 131072 61440 61440 NT_STATUS_OK
ReadX 13121 192512 4096 4096 NT_STATUS_OK
ReadX 13121 196608 61440 61440 NT_STATUS_OK
ReadX 13121 258048 4096 4096 NT_STATUS_OK
ReadX 13121 262144 61440 61440 NT_STATUS_OK
ReadX 13121 323584 4096 4096 NT_STATUS_OK
ReadX 13121 327680 61440 61440 NT_STATUS_OK
ReadX 13121 389120 4096 4096 NT_STATUS_OK
ReadX 13121 393216 61440 61440 NT_STATUS_OK
ReadX 13121 454656 4096 4096 NT_STATUS_OK
ReadX 13121 458752 61440 61440 NT_STATUS_OK
ReadX 13121 520192 4096 4096 NT_STATUS_OK
ReadX 13121 524288 61440 61440 NT_STATUS_OK
ReadX 13121 585728 4096 4096 NT_STATUS_OK
ReadX 13121 589824 61440 61440 NT_STATUS_OK
ReadX 13121 651264 4096 4096 NT_STATUS_OK
ReadX 13121 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 61440 61440 NT_STATUS_OK
ReadX 13122 61440 4096 4096 NT_STATUS_OK
ReadX 13122 65536 61440 61440 NT_STATUS_OK
ReadX 13122 126976 4096 4096 NT_STATUS_OK
ReadX 13122 131072 61440 61440 NT_STATUS_OK
ReadX 13122 192512 4096 4096 NT_STATUS_OK
ReadX 13122 196608 61440 61440 NT_STATUS_OK
ReadX 13122 258048 4096 4096 NT_STATUS_OK
ReadX 13122 262144 61440 61440 NT_STATUS_OK
ReadX 13122 323584 4096 4096 NT_STATUS_OK
ReadX 13122 327680 61440 61440 NT_STATUS_OK
ReadX 13122 389120 4096 4096 NT_STATUS_OK
ReadX 13122 393216 61440 61440 NT_STATUS_OK
ReadX 13122 454656 4096 4096 NT_STATUS_OK
ReadX 13122 458752 61440 61440 NT_STATUS_OK
ReadX 13122 520192 4096 4096 NT_STATUS_OK
ReadX 13122 524288 61440 61440 NT_STATUS_OK
ReadX 13122 585728 4096 4096 NT_STATUS_OK
ReadX 13122 589824 61440 61440 NT_STATUS_OK
ReadX 13122 651264 4096 4096 NT_STATUS_OK
ReadX 13122 655360 61440 61440 NT_STATUS_OK
ReadX 13122 716800 4096 4096 NT_STATUS_OK
ReadX 13122 720896 61440 61440 NT_STATUS_OK
ReadX 13122 782336 4096 4096 NT_STATUS_OK
ReadX 13122 786432 61440 61440 NT_STATUS_OK
ReadX 13122 847872 4096 4096 NT_STATUS_OK
ReadX 13122 851968 61440 61440 NT_STATUS_OK
ReadX 13122 913408 4096 4096 NT_STATUS_OK
ReadX 13122 917504 61440 61440 NT_STATUS_OK
ReadX 13122 978944 4096 4096 NT_STATUS_OK
ReadX 13122 983040 61440 61440 NT_STATUS_OK
ReadX 13122 1044480 4096 4096 NT_STATUS_OK
ReadX 13122 1048576 61440 61440 NT_STATUS_OK
ReadX 13122 1110016 4096 4096 NT_STATUS_OK
ReadX 13122 1114112 61440 61440 NT_STATUS_OK
ReadX 13122 1175552 4096 4096 NT_STATUS_OK
ReadX 13122 1179648 61440 61440 NT_STATUS_OK
ReadX 13122 1241088 4096 4096 NT_STATUS_OK
ReadX 13122 1245184 61440 61440 NT_STATUS_OK
ReadX 13122 1306624 4096 4096 NT_STATUS_OK
ReadX 13122 1310720 61440 61440 NT_STATUS_OK
ReadX 13122 1372160 4096 4096 NT_STATUS_OK
ReadX 13122 1376256 61440 61440 NT_STATUS_OK
ReadX 13122 1437696 4096 4096 NT_STATUS_OK
ReadX 13122 1441792 61440 61440 NT_STATUS_OK
ReadX 13122 1503232 4096 4096 NT_STATUS_OK
ReadX 13122 1507328 61440 61440 NT_STATUS_OK
ReadX 13122 1568768 4096 4096 NT_STATUS_OK
ReadX 13122 1572864 61440 61440 NT_STATUS_OK
ReadX 13122 1634304 4096 4096 NT_STATUS_OK
ReadX 13122 1638400 61440 61440 NT_STATUS_OK
ReadX 13122 1699840 4096 4096 NT_STATUS_OK
ReadX 13122 1703936 61440 61440 NT_STATUS_OK
ReadX 13122 1765376 4096 4096 NT_STATUS_OK
ReadX 13122 1769472 61440 61440 NT_STATUS_OK
ReadX 13122 1830912 4096 4096 NT_STATUS_OK
ReadX 13122 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13129 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1004 NT_STATUS_OK
WriteX 13129 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13131 NT_STATUS_OK
WriteX 13131 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13131 258 NT_STATUS_OK
WriteX 13131 0 491 491 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13129 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13135 NT_STATUS_OK
WriteX 13135 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13135 258 NT_STATUS_OK
WriteX 13135 0 543 543 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13149 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 258 NT_STATUS_OK
WriteX 13149 0 2048 2048 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
Flush 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13155 NT_STATUS_OK
WriteX 13155 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 258 NT_STATUS_OK
WriteX 13155 0 2048 2048 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13160 NT_STATUS_OK
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13161 NT_STATUS_OK
WriteX 13161 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13161 258 NT_STATUS_OK
WriteX 13161 0 2048 2048 NT_STATUS_OK
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 2048 2048 NT_STATUS_OK
ReadX 13140 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13156 0 4096 4096 NT_STATUS_OK
WriteX 13140 0 8192 8192 NT_STATUS_OK
WriteX 13141 0 4096 4096 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13166 NT_STATUS_OK
QUERY_FILE_INFORMATION 13166 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13156 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13186 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 1004 NT_STATUS_OK
WriteX 13186 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 258 NT_STATUS_OK
WriteX 13186 0 2048 2048 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13194 NT_STATUS_OK
QUERY_FILE_INFORMATION 13194 1004 NT_STATUS_OK
WriteX 13194 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13194 258 NT_STATUS_OK
WriteX 13194 0 2048 2048 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
Flush 13187 NT_STATUS_OK
WriteX 13195 0 4096 4096 NT_STATUS_OK
Flush 13195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13195 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13189 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13197 NT_STATUS_OK
WriteX 13197 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13197 258 NT_STATUS_OK
WriteX 13197 0 4096 4096 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13200 NT_STATUS_OK
WriteX 13200 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13201 0 4096 4096 NT_STATUS_OK
Close 13198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13175 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13169 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13208 NT_STATUS_OK
WriteX 13208 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13208 258 NT_STATUS_OK
WriteX 13208 0 2048 2048 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13223 NT_STATUS_OK
QUERY_FILE_INFORMATION 13223 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13225 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13245 NT_STATUS_OK
QUERY_FILE_INFORMATION 13245 1004 NT_STATUS_OK
WriteX 13245 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13245 258 NT_STATUS_OK
WriteX 13245 0 2048 2048 NT_STATUS_OK
Close 13245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13257 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 1004 NT_STATUS_OK
WriteX 13257 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
WriteX 13257 0 2048 2048 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13265 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 258 NT_STATUS_OK
WriteX 13265 0 2048 2048 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13266 NT_STATUS_OK
ReadX 13266 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13246 0 4096 4096 NT_STATUS_OK
Flush 13246 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Flush 13258 NT_STATUS_OK
WriteX 13266 0 4096 4096 NT_STATUS_OK
Flush 13266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13246 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13248 4096 16384 16384 NT_STATUS_OK
ReadX 13228 4096 16384 16384 NT_STATUS_OK
ReadX 13260 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 2048 2048 NT_STATUS_OK
WriteX 13268 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13269 NT_STATUS_OK
QUERY_FILE_INFORMATION 13269 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13234 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13238 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13236 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13271 NT_STATUS_OK
QUERY_FILE_INFORMATION 13271 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13273 NT_STATUS_OK
QUERY_FILE_INFORMATION 13273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13276 4096 16384 16384 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 8192 8192 NT_STATUS_OK
ReadX 13282 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13296 0 4096 4096 NT_STATUS_OK
ReadX 13296 4096 4096 4096 NT_STATUS_OK
ReadX 13296 8192 4096 4096 NT_STATUS_OK
WriteX 13282 0 4096 4096 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13302 NT_STATUS_OK
QUERY_FILE_INFORMATION 13302 1004 NT_STATUS_OK
WriteX 13302 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13302 258 NT_STATUS_OK
WriteX 13302 0 2048 2048 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13304 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
ReadX 13305 4096 4096 4096 NT_STATUS_OK
WriteX 13305 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
ReadX 13307 4096 4096 4096 NT_STATUS_OK
WriteX 13307 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13308 NT_STATUS_OK
QUERY_FILE_INFORMATION 13308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13293 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13310 0 4096 4096 NT_STATUS_OK
ReadX 13310 4096 4096 4096 NT_STATUS_OK
ReadX 13310 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
ReadX 13311 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13328 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 1004 NT_STATUS_OK
WriteX 13328 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 258 NT_STATUS_OK
WriteX 13328 0 2048 2048 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13333 NT_STATUS_OK
Close 13333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13334 NT_STATUS_OK
QUERY_FILE_INFORMATION 13334 1004 NT_STATUS_OK
WriteX 13334 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13334 258 NT_STATUS_OK
WriteX 13334 0 2048 2048 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13336 NT_STATUS_OK
QUERY_FILE_INFORMATION 13336 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13338 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 61440 4096 4096 NT_STATUS_OK
ReadX 13340 126976 4096 4096 NT_STATUS_OK
WriteX 13340 0 65536 65536 NT_STATUS_OK
WriteX 13340 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 61440 4096 4096 NT_STATUS_OK
ReadX 13341 126976 4096 4096 NT_STATUS_OK
ReadX 13341 192512 4096 4096 NT_STATUS_OK
ReadX 13341 258048 4096 4096 NT_STATUS_OK
WriteX 13341 0 65536 65536 NT_STATUS_OK
WriteX 13341 65536 65536 65536 NT_STATUS_OK
WriteX 13341 131072 65536 65536 NT_STATUS_OK
WriteX 13341 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 61440 4096 4096 NT_STATUS_OK
ReadX 13342 126976 4096 4096 NT_STATUS_OK
ReadX 13342 192512 4096 4096 NT_STATUS_OK
ReadX 13342 258048 4096 4096 NT_STATUS_OK
ReadX 13342 323584 4096 4096 NT_STATUS_OK
ReadX 13342 389120 4096 4096 NT_STATUS_OK
ReadX 13342 454656 4096 4096 NT_STATUS_OK
ReadX 13342 520192 4096 4096 NT_STATUS_OK
WriteX 13342 0 65536 65536 NT_STATUS_OK
WriteX 13342 65536 65536 65536 NT_STATUS_OK
WriteX 13342 131072 65536 65536 NT_STATUS_OK
WriteX 13342 196608 65536 65536 NT_STATUS_OK
WriteX 13342 262144 65536 65536 NT_STATUS_OK
WriteX 13342 327680 65536 65536 NT_STATUS_OK
WriteX 13342 393216 65536 65536 NT_STATUS_OK
WriteX 13342 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13343 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13343 8192 4096 4096 NT_STATUS_OK
ReadX 13343 12288 4096 4096 NT_STATUS_OK
ReadX 13343 16384 4096 4096 NT_STATUS_OK
ReadX 13343 20480 4096 4096 NT_STATUS_OK
ReadX 13343 24576 4096 4096 NT_STATUS_OK
ReadX 13343 28672 4096 4096 NT_STATUS_OK
ReadX 13343 32768 4096 4096 NT_STATUS_OK
ReadX 13343 36864 4096 4096 NT_STATUS_OK
ReadX 13343 40960 4096 4096 NT_STATUS_OK
ReadX 13343 45056 4096 4096 NT_STATUS_OK
ReadX 13343 49152 4096 4096 NT_STATUS_OK
ReadX 13343 53248 4096 4096 NT_STATUS_OK
ReadX 13343 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13343 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13344 NT_STATUS_OK
Close 13344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13346 NT_STATUS_OK
WriteX 13346 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13346 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13346 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
WriteX 13346 0 57088 57088 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Flush 13346 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13347 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
Close 13347 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13348 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13350 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13351 NT_STATUS_OK
WriteX 13351 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13351 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
WriteX 13351 0 51456 51456 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Flush 13351 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13353 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13355 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13357 NT_STATUS_OK
Close 13357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13360 NT_STATUS_OK
WriteX 13360 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 258 NT_STATUS_OK
WriteX 13360 0 53077 53077 NT_STATUS_OK
Close 13360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13361 NT_STATUS_OK
WriteX 13361 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13361 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13361 1004 NT_STATUS_OK
WriteX 13361 0 65536 65536 NT_STATUS_OK
WriteX 13361 65536 1856 1856 NT_STATUS_OK
WriteX 13361 0 4096 4096 NT_STATUS_OK
Flush 13361 NT_STATUS_OK
SET_FILE_INFORMATION 13361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13361 1004 NT_STATUS_OK
WriteX 13361 0 4096 4096 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13367 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13370 NT_STATUS_OK
WriteX 13370 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13370 258 NT_STATUS_OK
WriteX 13370 0 7983 7983 NT_STATUS_OK
Close 13370 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13375 NT_STATUS_OK
WriteX 13375 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 258 NT_STATUS_OK
WriteX 13375 0 65536 65536 NT_STATUS_OK
WriteX 13375 65536 65536 65536 NT_STATUS_OK
WriteX 13375 131072 65536 65536 NT_STATUS_OK
WriteX 13375 196608 65536 65536 NT_STATUS_OK
WriteX 13375 262144 65536 65536 NT_STATUS_OK
WriteX 13375 327680 65536 65536 NT_STATUS_OK
WriteX 13375 393216 65536 65536 NT_STATUS_OK
WriteX 13375 458752 46731 46731 NT_STATUS_OK
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13365 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
WriteX 13376 0 65536 65536 NT_STATUS_OK
WriteX 13376 65536 22848 22848 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Close 13365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13380 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13381 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
ReadX 13381 8192 4096 4096 NT_STATUS_OK
ReadX 13381 12288 4096 4096 NT_STATUS_OK
ReadX 13381 16384 4096 4096 NT_STATUS_OK
ReadX 13381 20480 4096 4096 NT_STATUS_OK
ReadX 13381 24576 4096 4096 NT_STATUS_OK
ReadX 13381 28672 4096 4096 NT_STATUS_OK
ReadX 13381 32768 4096 4096 NT_STATUS_OK
ReadX 13381 36864 4096 4096 NT_STATUS_OK
ReadX 13381 40960 4096 4096 NT_STATUS_OK
ReadX 13381 45056 4096 4096 NT_STATUS_OK
ReadX 13381 49152 4096 4096 NT_STATUS_OK
ReadX 13381 53248 4096 4096 NT_STATUS_OK
ReadX 13381 57344 4096 4096 NT_STATUS_OK
ReadX 13381 61440 4096 4096 NT_STATUS_OK
ReadX 13381 65536 4096 4096 NT_STATUS_OK
ReadX 13381 69632 4096 4096 NT_STATUS_OK
ReadX 13381 73728 4096 4096 NT_STATUS_OK
ReadX 13381 77824 4096 4096 NT_STATUS_OK
ReadX 13381 81920 4096 4096 NT_STATUS_OK
ReadX 13381 86016 4096 4096 NT_STATUS_OK
ReadX 13381 90112 4096 4096 NT_STATUS_OK
ReadX 13381 94208 4096 4096 NT_STATUS_OK
ReadX 13381 98304 4096 4096 NT_STATUS_OK
ReadX 13381 102400 4096 4096 NT_STATUS_OK
ReadX 13381 106496 4096 4096 NT_STATUS_OK
ReadX 13381 110592 4096 4096 NT_STATUS_OK
ReadX 13381 114688 4096 4096 NT_STATUS_OK
ReadX 13381 118784 4096 4096 NT_STATUS_OK
ReadX 13381 122880 4096 4096 NT_STATUS_OK
ReadX 13381 126976 4096 4096 NT_STATUS_OK
ReadX 13381 131072 4096 4096 NT_STATUS_OK
ReadX 13381 135168 4096 4096 NT_STATUS_OK
ReadX 13381 139264 4096 4096 NT_STATUS_OK
ReadX 13381 143360 4096 4096 NT_STATUS_OK
ReadX 13381 147456 4096 4096 NT_STATUS_OK
ReadX 13381 151552 4096 4096 NT_STATUS_OK
ReadX 13381 155648 4096 4096 NT_STATUS_OK
ReadX 13381 159744 4096 4096 NT_STATUS_OK
ReadX 13381 163840 4096 4096 NT_STATUS_OK
ReadX 13381 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13381 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13382 NT_STATUS_OK
Close 13382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13384 NT_STATUS_OK
WriteX 13384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13384 258 NT_STATUS_OK
Close 13381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13385 NT_STATUS_OK
SET_FILE_INFORMATION 13385 1004 NT_STATUS_OK
Close 13385 NT_STATUS_OK
WriteX 13384 0 42388 42388 NT_STATUS_OK
Close 13384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13386 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
ReadX 13388 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13389 NT_STATUS_OK
WriteX 13389 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13389 258 NT_STATUS_OK
SET_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 0 42652 42652 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
ReadX 13393 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13398 NT_STATUS_OK
WriteX 13398 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 65536 65536 NT_STATUS_OK
WriteX 13398 65536 49 49 NT_STATUS_OK
Close 13398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 61440 61440 NT_STATUS_OK
ReadX 13399 61440 4096 4096 NT_STATUS_OK
ReadX 13399 65536 61440 61440 NT_STATUS_OK
ReadX 13399 126976 4096 4096 NT_STATUS_OK
ReadX 13399 131072 61440 61440 NT_STATUS_OK
ReadX 13399 192512 4096 4096 NT_STATUS_OK
ReadX 13399 196608 61440 61440 NT_STATUS_OK
ReadX 13399 258048 4096 4096 NT_STATUS_OK
ReadX 13399 262144 61440 61440 NT_STATUS_OK
ReadX 13399 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 61440 61440 NT_STATUS_OK
ReadX 13400 61440 4096 4096 NT_STATUS_OK
ReadX 13400 65536 61440 61440 NT_STATUS_OK
ReadX 13400 126976 4096 4096 NT_STATUS_OK
ReadX 13400 131072 61440 61440 NT_STATUS_OK
ReadX 13400 192512 4096 4096 NT_STATUS_OK
ReadX 13400 196608 61440 61440 NT_STATUS_OK
ReadX 13400 258048 4096 4096 NT_STATUS_OK
ReadX 13400 262144 61440 61440 NT_STATUS_OK
ReadX 13400 323584 4096 4096 NT_STATUS_OK
ReadX 13400 327680 61440 61440 NT_STATUS_OK
ReadX 13400 389120 4096 4096 NT_STATUS_OK
ReadX 13400 393216 61440 61440 NT_STATUS_OK
ReadX 13400 454656 4096 4096 NT_STATUS_OK
ReadX 13400 458752 61440 61440 NT_STATUS_OK
ReadX 13400 520192 4096 4096 NT_STATUS_OK
ReadX 13400 524288 61440 61440 NT_STATUS_OK
ReadX 13400 585728 4096 4096 NT_STATUS_OK
ReadX 13400 589824 61440 61440 NT_STATUS_OK
ReadX 13400 651264 4096 4096 NT_STATUS_OK
ReadX 13400 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 61440 61440 NT_STATUS_OK
ReadX 13401 61440 4096 4096 NT_STATUS_OK
ReadX 13401 65536 61440 61440 NT_STATUS_OK
ReadX 13401 126976 4096 4096 NT_STATUS_OK
ReadX 13401 131072 61440 61440 NT_STATUS_OK
ReadX 13401 192512 4096 4096 NT_STATUS_OK
ReadX 13401 196608 61440 61440 NT_STATUS_OK
ReadX 13401 258048 4096 4096 NT_STATUS_OK
ReadX 13401 262144 61440 61440 NT_STATUS_OK
ReadX 13401 323584 4096 4096 NT_STATUS_OK
ReadX 13401 327680 61440 61440 NT_STATUS_OK
ReadX 13401 389120 4096 4096 NT_STATUS_OK
ReadX 13401 393216 61440 61440 NT_STATUS_OK
ReadX 13401 454656 4096 4096 NT_STATUS_OK
ReadX 13401 458752 61440 61440 NT_STATUS_OK
ReadX 13401 520192 4096 4096 NT_STATUS_OK
ReadX 13401 524288 61440 61440 NT_STATUS_OK
ReadX 13401 585728 4096 4096 NT_STATUS_OK
ReadX 13401 589824 61440 61440 NT_STATUS_OK
ReadX 13401 651264 4096 4096 NT_STATUS_OK
ReadX 13401 655360 61440 61440 NT_STATUS_OK
ReadX 13401 716800 4096 4096 NT_STATUS_OK
ReadX 13401 720896 61440 61440 NT_STATUS_OK
ReadX 13401 782336 4096 4096 NT_STATUS_OK
ReadX 13401 786432 61440 61440 NT_STATUS_OK
ReadX 13401 847872 4096 4096 NT_STATUS_OK
ReadX 13401 851968 61440 61440 NT_STATUS_OK
ReadX 13401 913408 4096 4096 NT_STATUS_OK
ReadX 13401 917504 61440 61440 NT_STATUS_OK
ReadX 13401 978944 4096 4096 NT_STATUS_OK
ReadX 13401 983040 61440 61440 NT_STATUS_OK
ReadX 13401 1044480 4096 4096 NT_STATUS_OK
ReadX 13401 1048576 61440 61440 NT_STATUS_OK
ReadX 13401 1110016 4096 4096 NT_STATUS_OK
ReadX 13401 1114112 61440 61440 NT_STATUS_OK
ReadX 13401 1175552 4096 4096 NT_STATUS_OK
ReadX 13401 1179648 61440 61440 NT_STATUS_OK
ReadX 13401 1241088 4096 4096 NT_STATUS_OK
ReadX 13401 1245184 61440 61440 NT_STATUS_OK
ReadX 13401 1306624 4096 4096 NT_STATUS_OK
ReadX 13401 1310720 61440 61440 NT_STATUS_OK
ReadX 13401 1372160 4096 4096 NT_STATUS_OK
ReadX 13401 1376256 61440 61440 NT_STATUS_OK
ReadX 13401 1437696 4096 4096 NT_STATUS_OK
ReadX 13401 1441792 61440 61440 NT_STATUS_OK
ReadX 13401 1503232 4096 4096 NT_STATUS_OK
ReadX 13401 1507328 61440 61440 NT_STATUS_OK
ReadX 13401 1568768 4096 4096 NT_STATUS_OK
ReadX 13401 1572864 61440 61440 NT_STATUS_OK
ReadX 13401 1634304 4096 4096 NT_STATUS_OK
ReadX 13401 1638400 61440 61440 NT_STATUS_OK
ReadX 13401 1699840 4096 4096 NT_STATUS_OK
ReadX 13401 1703936 61440 61440 NT_STATUS_OK
ReadX 13401 1765376 4096 4096 NT_STATUS_OK
ReadX 13401 1769472 61440 61440 NT_STATUS_OK
ReadX 13401 1830912 4096 4096 NT_STATUS_OK
ReadX 13401 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13403 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1005 NT_STATUS_OK
ReadX 13403 2156 24 24 NT_STATUS_OK
ReadX 13403 2139 276 276 NT_STATUS_OK
ReadX 13403 2136 14 14 NT_STATUS_OK
ReadX 13403 2136 7 7 NT_STATUS_OK
ReadX 13403 2138 12 12 NT_STATUS_OK
ReadX 13403 2137 8 8 NT_STATUS_OK
ReadX 13403 2135 15 15 NT_STATUS_OK
ReadX 13403 0 16 16 NT_STATUS_OK
ReadX 13403 16 2048 2048 NT_STATUS_OK
ReadX 13403 2064 2048 2048 NT_STATUS_OK
ReadX 13403 257 2048 2048 NT_STATUS_OK
ReadX 13403 385 2048 2048 NT_STATUS_OK
ReadX 13403 513 2048 2048 NT_STATUS_OK
ReadX 13403 641 2048 2048 NT_STATUS_OK
ReadX 13403 769 2048 2048 NT_STATUS_OK
ReadX 13403 897 2048 2048 NT_STATUS_OK
ReadX 13403 1025 2048 2048 NT_STATUS_OK
ReadX 13403 1153 2048 2048 NT_STATUS_OK
ReadX 13403 1281 2048 2048 NT_STATUS_OK
ReadX 13403 1409 2048 2048 NT_STATUS_OK
ReadX 13403 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13405 NT_STATUS_OK
Close 13405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13399 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13408 NT_STATUS_OK
WriteX 13408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 258 NT_STATUS_OK
WriteX 13408 0 10575 10575 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13413 NT_STATUS_OK
LockX 13413 2147483538 1 NT_STATUS_OK
UnlockX 13413 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1005 NT_STATUS_OK
ReadX 13413 0 512 512 NT_STATUS_OK
ReadX 13413 512 512 512 NT_STATUS_OK
ReadX 13413 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1004 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13414 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1005 NT_STATUS_OK
ReadX 13414 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13415 NT_STATUS_OK
LockX 13415 2147483538 1 NT_STATUS_OK
UnlockX 13415 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1005 NT_STATUS_OK
ReadX 13415 0 512 512 NT_STATUS_OK
ReadX 13415 512 512 512 NT_STATUS_OK
ReadX 13415 1024 512 512 NT_STATUS_OK
ReadX 13415 288 20 20 NT_STATUS_OK
ReadX 13415 308 2084 2084 NT_STATUS_OK
ReadX 13415 388 2084 2084 NT_STATUS_OK
ReadX 13415 388 2084 2084 NT_STATUS_OK
ReadX 13402 2157 1386 1386 NT_STATUS_OK
ReadX 13415 2472 399 399 NT_STATUS_OK
ReadX 13415 3072 1536 1536 NT_STATUS_OK
ReadX 13415 544 149 149 NT_STATUS_OK
ReadX 13415 693 485 485 NT_STATUS_OK
Close 13415 NT_STATUS_OK
ReadX 13402 2157 4096 4096 NT_STATUS_OK
ReadX 13402 6253 4096 4096 NT_STATUS_OK
ReadX 13402 10349 4096 4096 NT_STATUS_OK
ReadX 13402 14445 4096 4096 NT_STATUS_OK
ReadX 13402 18541 4096 4096 NT_STATUS_OK
ReadX 13402 22637 256 256 NT_STATUS_OK
ReadX 13402 22893 4096 4096 NT_STATUS_OK
ReadX 13402 26989 4096 4096 NT_STATUS_OK
ReadX 13402 31085 4096 4096 NT_STATUS_OK
ReadX 13402 35181 4096 4096 NT_STATUS_OK
ReadX 13402 39277 4096 4096 NT_STATUS_OK
ReadX 13402 43373 4096 4096 NT_STATUS_OK
ReadX 13402 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13402 2157 1024 1024 NT_STATUS_OK
ReadX 13402 1667 4688 4688 NT_STATUS_OK
ReadX 13402 6355 3516 3516 NT_STATUS_OK
ReadX 13402 9871 16384 16384 NT_STATUS_OK
ReadX 13402 26255 3771 3771 NT_STATUS_OK
ReadX 13402 30026 2048 2048 NT_STATUS_OK
ReadX 13402 32074 1024 1024 NT_STATUS_OK
ReadX 13402 33098 6652 6652 NT_STATUS_OK
ReadX 13402 39750 16384 16384 NT_STATUS_OK
ReadX 13402 56134 10496 10496 NT_STATUS_OK
ReadX 13402 66630 1784 1784 NT_STATUS_OK
ReadX 13402 68414 90 90 NT_STATUS_OK
ReadX 13402 68504 273 273 NT_STATUS_OK
ReadX 13402 68777 1600 1600 NT_STATUS_OK
ReadX 13402 70377 640 640 NT_STATUS_OK
ReadX 13402 71017 1280 1280 NT_STATUS_OK
ReadX 13402 72297 8464 8464 NT_STATUS_OK
ReadX 13402 80761 158 158 NT_STATUS_OK
ReadX 13402 80919 912 912 NT_STATUS_OK
ReadX 13402 81831 1980 1980 NT_STATUS_OK
ReadX 13402 83811 2256 2256 NT_STATUS_OK
ReadX 13402 86067 400 400 NT_STATUS_OK
ReadX 13402 86467 252 252 NT_STATUS_OK
ReadX 13402 86719 42 42 NT_STATUS_OK
ReadX 13402 86761 725 725 NT_STATUS_OK
ReadX 13402 2009 512 512 NT_STATUS_OK
ReadX 13402 3895 9 9 NT_STATUS_OK
ReadX 13402 3781 46 46 NT_STATUS_OK
ReadX 13402 4059 92 92 NT_STATUS_OK
ReadX 13402 3781 92 92 NT_STATUS_OK
ReadX 13402 3986 184 184 NT_STATUS_OK
ReadX 13402 3987 16384 16384 NT_STATUS_OK
ReadX 13402 3902 16384 16384 NT_STATUS_OK
ReadX 13402 3781 10240 10240 NT_STATUS_OK
ReadX 13402 3821 16384 16384 NT_STATUS_OK
ReadX 13402 3891 935 935 NT_STATUS_OK
ReadX 13402 4060 10240 10240 NT_STATUS_OK
ReadX 13402 4059 184 184 NT_STATUS_OK
ReadX 13402 256 184 184 NT_STATUS_OK
ReadX 13402 256 1026 1026 NT_STATUS_OK
ReadX 13402 3901 326 326 NT_STATUS_OK
ReadX 13402 3899 652 652 NT_STATUS_OK
ReadX 13402 256 2 2 NT_STATUS_OK
ReadX 13402 258 4948 4948 NT_STATUS_OK
Close 13402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13420 NT_STATUS_OK
WriteX 13420 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13420 258 NT_STATUS_OK
WriteX 13420 0 65536 65536 NT_STATUS_OK
WriteX 13420 65536 65536 65536 NT_STATUS_OK
WriteX 13420 131072 65536 65536 NT_STATUS_OK
WriteX 13420 196608 65536 65536 NT_STATUS_OK
WriteX 13420 262144 65536 65536 NT_STATUS_OK
WriteX 13420 327680 65536 65536 NT_STATUS_OK
WriteX 13420 393216 65536 65536 NT_STATUS_OK
WriteX 13420 458752 65536 65536 NT_STATUS_OK
WriteX 13420 524288 65536 65536 NT_STATUS_OK
WriteX 13420 589824 35257 35257 NT_STATUS_OK
Close 13420 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13422 NT_STATUS_OK
Close 13422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13425 NT_STATUS_OK
WriteX 13425 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 258 NT_STATUS_OK
WriteX 13425 0 65536 65536 NT_STATUS_OK
WriteX 13425 65536 65536 65536 NT_STATUS_OK
WriteX 13425 131072 65536 65536 NT_STATUS_OK
WriteX 13425 196608 65536 65536 NT_STATUS_OK
WriteX 13425 262144 65536 65536 NT_STATUS_OK
WriteX 13425 327680 65536 65536 NT_STATUS_OK
WriteX 13425 393216 65536 65536 NT_STATUS_OK
WriteX 13425 458752 65536 65536 NT_STATUS_OK
WriteX 13425 524288 65536 65536 NT_STATUS_OK
WriteX 13425 589824 57598 57598 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13427 NT_STATUS_OK
WriteX 13427 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13427 258 NT_STATUS_OK
WriteX 13427 0 12543 12543 NT_STATUS_OK
Flush 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13429 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13433 NT_STATUS_OK
QUERY_FILE_INFORMATION 13433 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13433 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13433 1005 NT_STATUS_OK
ReadX 13433 1938 24 24 NT_STATUS_OK
ReadX 13433 1920 276 276 NT_STATUS_OK
ReadX 13433 1918 14 14 NT_STATUS_OK
ReadX 13433 1918 7 7 NT_STATUS_OK
ReadX 13433 1919 12 12 NT_STATUS_OK
ReadX 13433 1919 8 8 NT_STATUS_OK
ReadX 13433 1917 15 15 NT_STATUS_OK
ReadX 13433 0 16 16 NT_STATUS_OK
ReadX 13433 16 2048 2048 NT_STATUS_OK
ReadX 13433 2064 2048 2048 NT_STATUS_OK
ReadX 13433 257 2048 2048 NT_STATUS_OK
ReadX 13433 385 2048 2048 NT_STATUS_OK
ReadX 13433 513 2048 2048 NT_STATUS_OK
ReadX 13433 641 2048 2048 NT_STATUS_OK
ReadX 13433 769 2048 2048 NT_STATUS_OK
ReadX 13433 897 2048 2048 NT_STATUS_OK
ReadX 13433 1025 2048 2048 NT_STATUS_OK
ReadX 13433 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13435 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13438 NT_STATUS_OK
WriteX 13438 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13438 258 NT_STATUS_OK
WriteX 13438 0 11588 11588 NT_STATUS_OK
Flush 13438 NT_STATUS_OK
Close 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13443 NT_STATUS_OK
WriteX 13443 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13443 258 NT_STATUS_OK
WriteX 13443 0 11615 11615 NT_STATUS_OK
Flush 13443 NT_STATUS_OK
Close 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13445 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13449 NT_STATUS_OK
Close 13449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13452 NT_STATUS_OK
WriteX 13452 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13452 258 NT_STATUS_OK
WriteX 13452 0 65536 65536 NT_STATUS_OK
WriteX 13452 65536 16050 16050 NT_STATUS_OK
Close 13452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13432 1939 64 64 NT_STATUS_OK
ReadX 13432 128 248 248 NT_STATUS_OK
ReadX 13432 128 568 568 NT_STATUS_OK
ReadX 13432 3872 1536 1536 NT_STATUS_OK
ReadX 13432 3456 2560 2560 NT_STATUS_OK
ReadX 13432 3136 512 512 NT_STATUS_OK
ReadX 13432 2880 4096 4096 NT_STATUS_OK
ReadX 13432 3264 3072 3072 NT_STATUS_OK
ReadX 13432 320 4096 4096 NT_STATUS_OK
ReadX 13432 1024 4096 4096 NT_STATUS_OK
ReadX 13432 3616 4096 4096 NT_STATUS_OK
ReadX 13432 1939 64 64 NT_STATUS_OK
ReadX 13432 128 248 248 NT_STATUS_OK
ReadX 13432 128 608 608 NT_STATUS_OK
ReadX 13432 2858 1024 1024 NT_STATUS_OK
ReadX 13432 2810 4096 4096 NT_STATUS_OK
ReadX 13432 2826 4096 4096 NT_STATUS_OK
ReadX 13432 2580 2048 2048 NT_STATUS_OK
ReadX 13432 2800 2560 2560 NT_STATUS_OK
ReadX 13432 2100 4096 4096 NT_STATUS_OK
ReadX 13432 2084 4096 4096 NT_STATUS_OK
ReadX 13432 868 4096 4096 NT_STATUS_OK
ReadX 13432 2324 4096 4096 NT_STATUS_OK
ReadX 13432 884 4096 4096 NT_STATUS_OK
ReadX 13432 2604 1024 1024 NT_STATUS_OK
ReadX 13432 580 4096 4096 NT_STATUS_OK
ReadX 13432 596 4096 4096 NT_STATUS_OK
ReadX 13432 2752 4096 4096 NT_STATUS_OK
ReadX 13432 2842 1024 1024 NT_STATUS_OK
ReadX 13432 660 4096 4096 NT_STATUS_OK
ReadX 13432 2720 4096 4096 NT_STATUS_OK
ReadX 13432 2736 4096 4096 NT_STATUS_OK
ReadX 13432 628 4096 4096 NT_STATUS_OK
ReadX 13432 2704 4096 4096 NT_STATUS_OK
ReadX 13432 1556 4096 4096 NT_STATUS_OK
ReadX 13432 576 4096 4096 NT_STATUS_OK
ReadX 13432 3168 1536 1536 NT_STATUS_OK
ReadX 13432 832 4096 4096 NT_STATUS_OK
ReadX 13432 1088 4096 4096 NT_STATUS_OK
ReadX 13432 1344 4096 4096 NT_STATUS_OK
ReadX 13432 1600 4096 4096 NT_STATUS_OK
ReadX 13432 1856 4096 4096 NT_STATUS_OK
ReadX 13432 2112 4096 4096 NT_STATUS_OK
ReadX 13432 1892 4096 4096 NT_STATUS_OK
ReadX 13432 820 4096 4096 NT_STATUS_OK
ReadX 13432 788 4096 4096 NT_STATUS_OK
ReadX 13432 1604 4096 4096 NT_STATUS_OK
ReadX 13432 3648 4096 4096 NT_STATUS_OK
ReadX 13432 2608 4096 4096 NT_STATUS_OK
ReadX 13432 548 4096 4096 NT_STATUS_OK
ReadX 13432 740 4096 4096 NT_STATUS_OK
ReadX 13432 1344 4096 4096 NT_STATUS_OK
ReadX 13432 3392 4096 4096 NT_STATUS_OK
ReadX 13432 3904 4096 4096 NT_STATUS_OK
ReadX 13432 644 4096 4096 NT_STATUS_OK
ReadX 13432 676 4096 4096 NT_STATUS_OK
ReadX 13432 2688 4096 4096 NT_STATUS_OK
ReadX 13432 320 4096 4096 NT_STATUS_OK
ReadX 13432 900 4096 4096 NT_STATUS_OK
ReadX 13432 1908 4096 4096 NT_STATUS_OK
ReadX 13432 852 4096 4096 NT_STATUS_OK
ReadX 13432 724 4096 4096 NT_STATUS_OK
ReadX 13432 2292 4096 4096 NT_STATUS_OK
ReadX 13432 612 4096 4096 NT_STATUS_OK
ReadX 13432 388 4096 4096 NT_STATUS_OK
ReadX 13432 2368 4096 4096 NT_STATUS_OK
ReadX 13432 2624 4096 4096 NT_STATUS_OK
ReadX 13432 500 4096 4096 NT_STATUS_OK
ReadX 13432 356 4096 4096 NT_STATUS_OK
ReadX 13432 1024 4096 4096 NT_STATUS_OK
ReadX 13432 576 4096 4096 NT_STATUS_OK
ReadX 13432 340 4096 4096 NT_STATUS_OK
ReadX 13432 420 4096 4096 NT_STATUS_OK
ReadX 13432 1600 4096 4096 NT_STATUS_OK
ReadX 13432 404 4096 4096 NT_STATUS_OK
ReadX 13432 1428 4096 4096 NT_STATUS_OK
ReadX 13432 2656 4096 4096 NT_STATUS_OK
ReadX 13432 2624 4096 4096 NT_STATUS_OK
ReadX 13432 452 4096 4096 NT_STATUS_OK
ReadX 13432 692 4096 4096 NT_STATUS_OK
ReadX 13432 564 4096 4096 NT_STATUS_OK
ReadX 13432 372 4096 4096 NT_STATUS_OK
ReadX 13432 468 4096 4096 NT_STATUS_OK
ReadX 13432 484 4096 4096 NT_STATUS_OK
ReadX 13432 1088 4096 4096 NT_STATUS_OK
ReadX 13432 1924 4096 4096 NT_STATUS_OK
ReadX 13432 2768 4096 4096 NT_STATUS_OK
ReadX 13432 832 4096 4096 NT_STATUS_OK
ReadX 13432 836 4096 4096 NT_STATUS_OK
ReadX 13432 1856 4096 4096 NT_STATUS_OK
ReadX 13432 2640 4096 4096 NT_STATUS_OK
ReadX 13432 436 4096 4096 NT_STATUS_OK
ReadX 13432 1828 4096 4096 NT_STATUS_OK
ReadX 13432 804 4096 4096 NT_STATUS_OK
ReadX 13432 1860 4096 4096 NT_STATUS_OK
ReadX 13432 1812 4096 4096 NT_STATUS_OK
ReadX 13432 756 4096 4096 NT_STATUS_OK
ReadX 13432 1636 4096 4096 NT_STATUS_OK
ReadX 13432 772 4096 4096 NT_STATUS_OK
ReadX 13432 2036 4096 4096 NT_STATUS_OK
ReadX 13432 1220 4096 4096 NT_STATUS_OK
ReadX 13432 1652 4096 4096 NT_STATUS_OK
ReadX 13432 2588 4096 4096 NT_STATUS_OK
ReadX 13432 916 4096 4096 NT_STATUS_OK
ReadX 13432 260 4096 4096 NT_STATUS_OK
ReadX 13432 932 4096 4096 NT_STATUS_OK
ReadX 13432 2624 4096 4096 NT_STATUS_OK
ReadX 13432 308 4096 4096 NT_STATUS_OK
ReadX 13432 292 4096 4096 NT_STATUS_OK
ReadX 13432 1140 4096 4096 NT_STATUS_OK
ReadX 13432 276 4096 4096 NT_STATUS_OK
ReadX 13432 2020 4096 4096 NT_STATUS_OK
ReadX 13432 2880 4096 4096 NT_STATUS_OK
ReadX 13432 516 4096 4096 NT_STATUS_OK
ReadX 13432 1844 4096 4096 NT_STATUS_OK
ReadX 13432 1124 4096 4096 NT_STATUS_OK
ReadX 13432 3136 4096 4096 NT_STATUS_OK
ReadX 13432 324 4096 4096 NT_STATUS_OK
ReadX 13432 1156 4096 4096 NT_STATUS_OK
ReadX 13432 1172 4096 4096 NT_STATUS_OK
ReadX 13432 2112 4096 4096 NT_STATUS_OK
ReadX 13432 2368 4096 4096 NT_STATUS_OK
ReadX 13432 964 4096 4096 NT_STATUS_OK
ReadX 13432 980 4096 4096 NT_STATUS_OK
ReadX 13432 1012 4096 4096 NT_STATUS_OK
ReadX 13432 532 4096 4096 NT_STATUS_OK
ReadX 13432 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13432 1620 4096 4096 NT_STATUS_OK
ReadX 13432 1604 4096 4096 NT_STATUS_OK
ReadX 13432 2116 4096 4096 NT_STATUS_OK
ReadX 13432 2132 4096 4096 NT_STATUS_OK
ReadX 13432 2148 4096 4096 NT_STATUS_OK
ReadX 13432 2276 4096 4096 NT_STATUS_OK
ReadX 13432 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13454 NT_STATUS_OK
Close 13454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13457 NT_STATUS_OK
QUERY_FILE_INFORMATION 13412 1004 NT_STATUS_OK
Close 13412 NT_STATUS_OK
WriteX 13457 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13457 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
Close 13414 NT_STATUS_OK
WriteX 13457 0 65536 65536 NT_STATUS_OK
WriteX 13457 65536 64850 64850 NT_STATUS_OK
Close 13457 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13459 NT_STATUS_OK
WriteX 13459 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
ReadX 13432 2068 4096 4096 NT_STATUS_OK
ReadX 13432 1588 4096 4096 NT_STATUS_OK
ReadX 13432 1572 4096 4096 NT_STATUS_OK
WriteX 13459 0 18630 18630 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13432 612 4096 4096 NT_STATUS_OK
ReadX 13432 564 4096 4096 NT_STATUS_OK
ReadX 13432 1876 4096 4096 NT_STATUS_OK
ReadX 13432 628 4096 4096 NT_STATUS_OK
ReadX 13432 740 4096 4096 NT_STATUS_OK
ReadX 13432 724 4096 4096 NT_STATUS_OK
ReadX 13432 644 4096 4096 NT_STATUS_OK
ReadX 13432 2324 4096 4096 NT_STATUS_OK
ReadX 13432 660 4096 4096 NT_STATUS_OK
ReadX 13432 852 4096 4096 NT_STATUS_OK
ReadX 13432 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13432 2368 4096 4096 NT_STATUS_OK
ReadX 13432 1024 4096 4096 NT_STATUS_OK
ReadX 13432 320 4096 4096 NT_STATUS_OK
ReadX 13432 580 4096 4096 NT_STATUS_OK
ReadX 13432 3136 512 512 NT_STATUS_OK
ReadX 13432 2880 4096 4096 NT_STATUS_OK
Close 13432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 61440 4096 4096 NT_STATUS_OK
ReadX 13464 126976 4096 4096 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 61440 4096 4096 NT_STATUS_OK
ReadX 13465 126976 4096 4096 NT_STATUS_OK
ReadX 13465 192512 4096 4096 NT_STATUS_OK
ReadX 13465 258048 4096 4096 NT_STATUS_OK
WriteX 13465 0 65536 65536 NT_STATUS_OK
WriteX 13465 65536 65536 65536 NT_STATUS_OK
WriteX 13465 131072 65536 65536 NT_STATUS_OK
WriteX 13465 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 61440 4096 4096 NT_STATUS_OK
ReadX 13466 126976 4096 4096 NT_STATUS_OK
ReadX 13466 192512 4096 4096 NT_STATUS_OK
ReadX 13466 258048 4096 4096 NT_STATUS_OK
ReadX 13466 323584 4096 4096 NT_STATUS_OK
ReadX 13466 389120 4096 4096 NT_STATUS_OK
ReadX 13466 454656 4096 4096 NT_STATUS_OK
ReadX 13466 520192 4096 4096 NT_STATUS_OK
WriteX 13466 0 65536 65536 NT_STATUS_OK
WriteX 13466 65536 65536 65536 NT_STATUS_OK
WriteX 13466 131072 65536 65536 NT_STATUS_OK
WriteX 13466 196608 65536 65536 NT_STATUS_OK
WriteX 13466 262144 65536 65536 NT_STATUS_OK
WriteX 13466 327680 65536 65536 NT_STATUS_OK
WriteX 13466 393216 65536 65536 NT_STATUS_OK
WriteX 13466 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13469 NT_STATUS_OK
WriteX 13469 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13469 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13467 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13471 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13474 NT_STATUS_OK
WriteX 13474 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
WriteX 13474 0 62591 62591 NT_STATUS_OK
Close 13474 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13476 NT_STATUS_OK
Close 13476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13479 NT_STATUS_OK
WriteX 13479 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
WriteX 13479 0 10845 10845 NT_STATUS_OK
Close 13479 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13484 NT_STATUS_OK
WriteX 13484 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 258 NT_STATUS_OK
WriteX 13484 0 30118 30118 NT_STATUS_OK
Close 13484 NT_STATUS_OK
WriteX 13467 0 4096 4096 NT_STATUS_OK
WriteX 13469 0 64 64 NT_STATUS_OK
Close 13469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 61440 61440 NT_STATUS_OK
ReadX 13486 61440 4096 4096 NT_STATUS_OK
ReadX 13486 65536 61440 61440 NT_STATUS_OK
ReadX 13486 126976 4096 4096 NT_STATUS_OK
ReadX 13486 131072 61440 61440 NT_STATUS_OK
ReadX 13486 192512 4096 4096 NT_STATUS_OK
ReadX 13486 196608 61440 61440 NT_STATUS_OK
ReadX 13486 258048 4096 4096 NT_STATUS_OK
ReadX 13486 262144 61440 61440 NT_STATUS_OK
ReadX 13486 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 61440 61440 NT_STATUS_OK
ReadX 13487 61440 4096 4096 NT_STATUS_OK
ReadX 13487 65536 61440 61440 NT_STATUS_OK
ReadX 13487 126976 4096 4096 NT_STATUS_OK
ReadX 13487 131072 61440 61440 NT_STATUS_OK
ReadX 13487 192512 4096 4096 NT_STATUS_OK
ReadX 13487 196608 61440 61440 NT_STATUS_OK
ReadX 13487 258048 4096 4096 NT_STATUS_OK
ReadX 13487 262144 61440 61440 NT_STATUS_OK
ReadX 13487 323584 4096 4096 NT_STATUS_OK
ReadX 13487 327680 61440 61440 NT_STATUS_OK
ReadX 13487 389120 4096 4096 NT_STATUS_OK
ReadX 13487 393216 61440 61440 NT_STATUS_OK
ReadX 13487 454656 4096 4096 NT_STATUS_OK
ReadX 13487 458752 61440 61440 NT_STATUS_OK
ReadX 13487 520192 4096 4096 NT_STATUS_OK
ReadX 13487 524288 61440 61440 NT_STATUS_OK
ReadX 13487 585728 4096 4096 NT_STATUS_OK
ReadX 13487 589824 61440 61440 NT_STATUS_OK
ReadX 13487 651264 4096 4096 NT_STATUS_OK
ReadX 13487 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 61440 61440 NT_STATUS_OK
ReadX 13488 61440 4096 4096 NT_STATUS_OK
ReadX 13488 65536 61440 61440 NT_STATUS_OK
ReadX 13488 126976 4096 4096 NT_STATUS_OK
ReadX 13488 131072 61440 61440 NT_STATUS_OK
ReadX 13488 192512 4096 4096 NT_STATUS_OK
ReadX 13488 196608 61440 61440 NT_STATUS_OK
ReadX 13488 258048 4096 4096 NT_STATUS_OK
ReadX 13488 262144 61440 61440 NT_STATUS_OK
ReadX 13488 323584 4096 4096 NT_STATUS_OK
ReadX 13488 327680 61440 61440 NT_STATUS_OK
ReadX 13488 389120 4096 4096 NT_STATUS_OK
ReadX 13488 393216 61440 61440 NT_STATUS_OK
ReadX 13488 454656 4096 4096 NT_STATUS_OK
ReadX 13488 458752 61440 61440 NT_STATUS_OK
ReadX 13488 520192 4096 4096 NT_STATUS_OK
ReadX 13488 524288 61440 61440 NT_STATUS_OK
ReadX 13488 585728 4096 4096 NT_STATUS_OK
ReadX 13488 589824 61440 61440 NT_STATUS_OK
ReadX 13488 651264 4096 4096 NT_STATUS_OK
ReadX 13488 655360 61440 61440 NT_STATUS_OK
ReadX 13488 716800 4096 4096 NT_STATUS_OK
ReadX 13488 720896 61440 61440 NT_STATUS_OK
ReadX 13488 782336 4096 4096 NT_STATUS_OK
ReadX 13488 786432 61440 61440 NT_STATUS_OK
ReadX 13488 847872 4096 4096 NT_STATUS_OK
ReadX 13488 851968 61440 61440 NT_STATUS_OK
ReadX 13488 913408 4096 4096 NT_STATUS_OK
ReadX 13488 917504 61440 61440 NT_STATUS_OK
ReadX 13488 978944 4096 4096 NT_STATUS_OK
ReadX 13488 983040 61440 61440 NT_STATUS_OK
ReadX 13488 1044480 4096 4096 NT_STATUS_OK
ReadX 13488 1048576 61440 61440 NT_STATUS_OK
ReadX 13488 1110016 4096 4096 NT_STATUS_OK
ReadX 13488 1114112 61440 61440 NT_STATUS_OK
ReadX 13488 1175552 4096 4096 NT_STATUS_OK
ReadX 13488 1179648 61440 61440 NT_STATUS_OK
ReadX 13488 1241088 4096 4096 NT_STATUS_OK
ReadX 13488 1245184 61440 61440 NT_STATUS_OK
ReadX 13488 1306624 4096 4096 NT_STATUS_OK
ReadX 13488 1310720 61440 61440 NT_STATUS_OK
ReadX 13488 1372160 4096 4096 NT_STATUS_OK
ReadX 13488 1376256 61440 61440 NT_STATUS_OK
ReadX 13488 1437696 4096 4096 NT_STATUS_OK
ReadX 13488 1441792 61440 61440 NT_STATUS_OK
ReadX 13488 1503232 4096 4096 NT_STATUS_OK
ReadX 13488 1507328 61440 61440 NT_STATUS_OK
ReadX 13488 1568768 4096 4096 NT_STATUS_OK
ReadX 13488 1572864 61440 61440 NT_STATUS_OK
ReadX 13488 1634304 4096 4096 NT_STATUS_OK
ReadX 13488 1638400 61440 61440 NT_STATUS_OK
ReadX 13488 1699840 4096 4096 NT_STATUS_OK
ReadX 13488 1703936 61440 61440 NT_STATUS_OK
ReadX 13488 1765376 4096 4096 NT_STATUS_OK
ReadX 13488 1769472 61440 61440 NT_STATUS_OK
ReadX 13488 1830912 4096 4096 NT_STATUS_OK
ReadX 13488 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13489 NT_STATUS_OK
Close 13489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
ReadX 13493 4096 4096 4096 NT_STATUS_OK
ReadX 13493 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13494 NT_STATUS_OK
Close 13494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13497 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13498 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 8192 8192 NT_STATUS_OK
ReadX 13501 8192 8192 8192 NT_STATUS_OK
ReadX 13501 16384 8192 8192 NT_STATUS_OK
ReadX 13501 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13503 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13506 NT_STATUS_OK
WriteX 13506 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 10438 10438 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13507 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13512 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13514 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
ReadX 13515 4096 4096 4096 NT_STATUS_OK
ReadX 13515 8192 4096 4096 NT_STATUS_OK
ReadX 13515 12288 8192 8192 NT_STATUS_OK
ReadX 13515 20480 8192 8192 NT_STATUS_OK
ReadX 13515 28672 8192 8192 NT_STATUS_OK
ReadX 13515 36864 8192 8192 NT_STATUS_OK
ReadX 13515 45056 8192 8192 NT_STATUS_OK
ReadX 13515 53248 8192 8192 NT_STATUS_OK
ReadX 13515 61440 8192 8192 NT_STATUS_OK
ReadX 13515 69632 8192 8192 NT_STATUS_OK
ReadX 13515 77824 8192 8192 NT_STATUS_OK
ReadX 13515 86016 8192 8192 NT_STATUS_OK
ReadX 13515 94208 8192 8192 NT_STATUS_OK
ReadX 13515 102400 8192 8192 NT_STATUS_OK
ReadX 13515 110592 8192 8192 NT_STATUS_OK
ReadX 13515 118784 8192 8192 NT_STATUS_OK
ReadX 13515 126976 8192 8192 NT_STATUS_OK
ReadX 13515 135168 8192 8192 NT_STATUS_OK
ReadX 13515 143360 8192 8192 NT_STATUS_OK
ReadX 13515 151552 8192 8192 NT_STATUS_OK
ReadX 13515 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13517 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13520 NT_STATUS_OK
WriteX 13520 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13520 258 NT_STATUS_OK
WriteX 13520 0 28489 28489 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13521 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13523 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 8192 8192 NT_STATUS_OK
ReadX 13527 8192 8192 8192 NT_STATUS_OK
ReadX 13527 16384 8192 8192 NT_STATUS_OK
ReadX 13527 24576 8192 8192 NT_STATUS_OK
ReadX 13527 32768 16384 16384 NT_STATUS_OK
ReadX 13527 49152 8192 8192 NT_STATUS_OK
ReadX 13527 57344 8192 8192 NT_STATUS_OK
ReadX 13527 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13532 NT_STATUS_OK
WriteX 13532 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13532 258 NT_STATUS_OK
WriteX 13532 0 29253 29253 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13533 NT_STATUS_OK
Close 13533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13536 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13539 NT_STATUS_OK
WriteX 13539 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
WriteX 13539 0 30183 30183 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13540 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13542 NT_STATUS_OK
WriteX 13542 0 510 510 NT_STATUS_OK
WriteX 13542 510 512 512 NT_STATUS_OK
WriteX 13542 1022 510 510 NT_STATUS_OK
WriteX 13542 1532 510 510 NT_STATUS_OK
WriteX 13542 2042 168 168 NT_STATUS_OK
Close 13542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 4096 4096 NT_STATUS_OK
WriteX 13545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 61440 4096 4096 NT_STATUS_OK
ReadX 13546 126976 4096 4096 NT_STATUS_OK
WriteX 13546 0 65536 65536 NT_STATUS_OK
WriteX 13546 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 61440 4096 4096 NT_STATUS_OK
ReadX 13547 126976 4096 4096 NT_STATUS_OK
ReadX 13547 192512 4096 4096 NT_STATUS_OK
ReadX 13547 258048 4096 4096 NT_STATUS_OK
WriteX 13547 0 65536 65536 NT_STATUS_OK
WriteX 13547 65536 65536 65536 NT_STATUS_OK
WriteX 13547 131072 65536 65536 NT_STATUS_OK
WriteX 13547 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 61440 4096 4096 NT_STATUS_OK
ReadX 13548 126976 4096 4096 NT_STATUS_OK
ReadX 13548 192512 4096 4096 NT_STATUS_OK
ReadX 13548 258048 4096 4096 NT_STATUS_OK
ReadX 13548 323584 4096 4096 NT_STATUS_OK
ReadX 13548 389120 4096 4096 NT_STATUS_OK
ReadX 13548 454656 4096 4096 NT_STATUS_OK
ReadX 13548 520192 4096 4096 NT_STATUS_OK
WriteX 13548 0 65536 65536 NT_STATUS_OK
WriteX 13548 65536 65536 65536 NT_STATUS_OK
WriteX 13548 131072 65536 65536 NT_STATUS_OK
WriteX 13548 196608 65536 65536 NT_STATUS_OK
WriteX 13548 262144 65536 65536 NT_STATUS_OK
WriteX 13548 327680 65536 65536 NT_STATUS_OK
WriteX 13548 393216 65536 65536 NT_STATUS_OK
WriteX 13548 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13549 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Close 13546 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13551 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13558 NT_STATUS_OK
Close 13558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13567 NT_STATUS_OK
Close 13567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13569 NT_STATUS_OK
Close 13569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13578 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13583 NT_STATUS_OK
Close 13583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13598 NT_STATUS_OK
Close 13598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13611 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13617 NT_STATUS_OK
WriteX 13617 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13617 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13617 0 65536 65536 NT_STATUS_OK
WriteX 13617 65536 65536 65536 NT_STATUS_OK
WriteX 13617 131072 65536 65536 NT_STATUS_OK
WriteX 13617 196608 65536 65536 NT_STATUS_OK
WriteX 13617 262144 26634 26634 NT_STATUS_OK
Close 13617 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13623 NT_STATUS_OK
Close 13623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
Close 13624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
ReadX 13625 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13626 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13633 NT_STATUS_OK
Close 13633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13644 NT_STATUS_OK
Close 13644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13653 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13677 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13690 NT_STATUS_OK
Close 13690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
Close 13718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13706 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13749 0 4096 4096 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
ReadX 13751 4096 4096 4096 NT_STATUS_OK
ReadX 13751 8192 4096 4096 NT_STATUS_OK
ReadX 13751 12288 4096 4096 NT_STATUS_OK
ReadX 13751 16384 4096 4096 NT_STATUS_OK
ReadX 13751 20480 4096 4096 NT_STATUS_OK
ReadX 13751 24576 4096 4096 NT_STATUS_OK
ReadX 13751 28672 4096 4096 NT_STATUS_OK
ReadX 13751 32768 4096 4096 NT_STATUS_OK
ReadX 13751 36864 4096 4096 NT_STATUS_OK
ReadX 13751 40960 4096 4096 NT_STATUS_OK
ReadX 13751 45056 4096 4096 NT_STATUS_OK
ReadX 13751 49152 4096 4096 NT_STATUS_OK
ReadX 13751 53248 4096 4096 NT_STATUS_OK
ReadX 13751 57344 4096 4096 NT_STATUS_OK
ReadX 13751 61440 4096 4096 NT_STATUS_OK
ReadX 13751 65536 4096 4096 NT_STATUS_OK
ReadX 13751 69632 4096 4096 NT_STATUS_OK
ReadX 13751 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13751 1004 NT_STATUS_OK
WriteX 13751 0 4096 4096 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13752 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13757 NT_STATUS_OK
WriteX 13757 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 258 NT_STATUS_OK
WriteX 13757 0 65536 65536 NT_STATUS_OK
WriteX 13757 65536 19979 19979 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 1004 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
SET_FILE_INFORMATION 13758 1004 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
Close 13759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13763 1004 NT_STATUS_OK
WriteX 13763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13766 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13769 NT_STATUS_OK
WriteX 13769 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13769 258 NT_STATUS_OK
WriteX 13769 0 65536 65536 NT_STATUS_OK
WriteX 13769 65536 17654 17654 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 4096 4096 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13771 NT_STATUS_OK
SET_FILE_INFORMATION 13771 1004 NT_STATUS_OK
Close 13771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13772 NT_STATUS_OK
ReadX 13772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
ReadX 13775 4096 4096 4096 NT_STATUS_OK
ReadX 13775 8192 4096 4096 NT_STATUS_OK
ReadX 13775 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13775 16384 4096 4096 NT_STATUS_OK
ReadX 13775 20480 4096 4096 NT_STATUS_OK
ReadX 13775 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13778 1004 NT_STATUS_OK
WriteX 13778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13781 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13784 NT_STATUS_OK
WriteX 13784 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 258 NT_STATUS_OK
WriteX 13784 0 65536 65536 NT_STATUS_OK
WriteX 13784 65536 19490 19490 NT_STATUS_OK
Close 13784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 0 4096 4096 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 1004 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
SET_FILE_INFORMATION 13785 1004 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13788 NT_STATUS_OK
Close 13788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13790 0 4096 4096 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
ReadX 13792 4096 4096 4096 NT_STATUS_OK
ReadX 13792 8192 4096 4096 NT_STATUS_OK
ReadX 13792 12288 4096 4096 NT_STATUS_OK
ReadX 13792 16384 4096 4096 NT_STATUS_OK
ReadX 13792 20480 4096 4096 NT_STATUS_OK
ReadX 13792 24576 4096 4096 NT_STATUS_OK
ReadX 13792 28672 4096 4096 NT_STATUS_OK
ReadX 13792 32768 4096 4096 NT_STATUS_OK
ReadX 13792 36864 4096 4096 NT_STATUS_OK
ReadX 13792 40960 4096 4096 NT_STATUS_OK
ReadX 13792 45056 4096 4096 NT_STATUS_OK
ReadX 13792 49152 4096 4096 NT_STATUS_OK
ReadX 13792 53248 4096 4096 NT_STATUS_OK
ReadX 13792 57344 4096 4096 NT_STATUS_OK
ReadX 13792 61440 4096 4096 NT_STATUS_OK
ReadX 13792 65536 4096 4096 NT_STATUS_OK
ReadX 13792 69632 4096 4096 NT_STATUS_OK
ReadX 13792 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13792 1004 NT_STATUS_OK
WriteX 13792 0 4096 4096 NT_STATUS_OK
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
SET_FILE_INFORMATION 13793 1004 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13795 NT_STATUS_OK
Close 13795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13798 NT_STATUS_OK
WriteX 13798 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13798 258 NT_STATUS_OK
WriteX 13798 0 65536 65536 NT_STATUS_OK
WriteX 13798 65536 8866 8866 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
WriteX 13799 0 4096 4096 NT_STATUS_OK
Flush 13799 NT_STATUS_OK
SET_FILE_INFORMATION 13799 1004 NT_STATUS_OK
WriteX 13799 0 4096 4096 NT_STATUS_OK
Flush 13799 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13803 1004 NT_STATUS_OK
WriteX 13803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13804 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13803 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13809 NT_STATUS_OK
WriteX 13809 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 258 NT_STATUS_OK
WriteX 13809 0 65536 65536 NT_STATUS_OK
WriteX 13809 65536 9298 9298 NT_STATUS_OK
Close 13809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
Flush 13810 NT_STATUS_OK
SET_FILE_INFORMATION 13810 1004 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
Flush 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
SET_FILE_INFORMATION 13811 1004 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13816 0 4096 4096 NT_STATUS_OK
Close 13816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13817 NT_STATUS_OK
ReadX 13817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13817 4096 4096 4096 NT_STATUS_OK
ReadX 13817 8192 4096 4096 NT_STATUS_OK
ReadX 13817 12288 4096 4096 NT_STATUS_OK
ReadX 13817 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13818 NT_STATUS_OK
ReadX 13818 0 4096 4096 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
WriteX 13820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13821 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13817 NT_STATUS_OK
Close 13820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13826 NT_STATUS_OK
WriteX 13826 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 11540 11540 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
Flush 13827 NT_STATUS_OK
SET_FILE_INFORMATION 13827 1004 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
Flush 13827 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 61440 4096 4096 NT_STATUS_OK
ReadX 13832 126976 4096 4096 NT_STATUS_OK
WriteX 13832 0 65536 65536 NT_STATUS_OK
WriteX 13832 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 61440 4096 4096 NT_STATUS_OK
ReadX 13833 126976 4096 4096 NT_STATUS_OK
ReadX 13833 192512 4096 4096 NT_STATUS_OK
ReadX 13833 258048 4096 4096 NT_STATUS_OK
WriteX 13833 0 65536 65536 NT_STATUS_OK
WriteX 13833 65536 65536 65536 NT_STATUS_OK
WriteX 13833 131072 65536 65536 NT_STATUS_OK
WriteX 13833 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 61440 4096 4096 NT_STATUS_OK
ReadX 13834 126976 4096 4096 NT_STATUS_OK
ReadX 13834 192512 4096 4096 NT_STATUS_OK
ReadX 13834 258048 4096 4096 NT_STATUS_OK
ReadX 13834 323584 4096 4096 NT_STATUS_OK
ReadX 13834 389120 4096 4096 NT_STATUS_OK
ReadX 13834 454656 4096 4096 NT_STATUS_OK
ReadX 13834 520192 4096 4096 NT_STATUS_OK
WriteX 13834 0 65536 65536 NT_STATUS_OK
WriteX 13834 65536 65536 65536 NT_STATUS_OK
WriteX 13834 131072 65536 65536 NT_STATUS_OK
WriteX 13834 196608 65536 65536 NT_STATUS_OK
WriteX 13834 262144 65536 65536 NT_STATUS_OK
WriteX 13834 327680 65536 65536 NT_STATUS_OK
WriteX 13834 393216 65536 65536 NT_STATUS_OK
WriteX 13834 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
ReadX 13835 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13836 NT_STATUS_OK
WriteX 13836 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13836 258 NT_STATUS_OK
WriteX 13836 0 53 53 NT_STATUS_OK
Close 13836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13837 NT_STATUS_OK
Close 13837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13834 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13835 8192 4096 4096 NT_STATUS_OK
ReadX 13835 12288 4096 4096 NT_STATUS_OK
WriteX 13839 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
ReadX 13835 16384 4096 4096 NT_STATUS_OK
ReadX 13835 20480 4096 4096 NT_STATUS_OK
WriteX 13839 0 15360 15360 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13841 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13843 NT_STATUS_OK
ReadX 13843 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13844 NT_STATUS_OK
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13843 4096 4096 4096 NT_STATUS_OK
ReadX 13843 8192 4096 4096 NT_STATUS_OK
ReadX 13843 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
ReadX 13846 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
ReadX 13847 4096 4096 4096 NT_STATUS_OK
ReadX 13847 8192 4096 4096 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13848 NT_STATUS_OK
WriteX 13848 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13848 258 NT_STATUS_OK
WriteX 13848 0 15360 15360 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13849 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13849 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13850 NT_STATUS_OK
Close 13850 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13852 NT_STATUS_OK
ReadX 13852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13853 NT_STATUS_OK
SET_FILE_INFORMATION 13853 1004 NT_STATUS_OK
Close 13853 NT_STATUS_OK
WriteX 13849 0 4096 4096 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13854 NT_STATUS_OK
Close 13854 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13856 NT_STATUS_OK
ReadX 13856 0 4096 4096 NT_STATUS_OK
ReadX 13856 4096 4096 4096 NT_STATUS_OK
ReadX 13856 8192 4096 4096 NT_STATUS_OK
ReadX 13856 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13856 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13856 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13858 NT_STATUS_OK
WriteX 13858 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 258 NT_STATUS_OK
WriteX 13858 0 53 53 NT_STATUS_OK
Close 13858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13859 NT_STATUS_OK
Close 13859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 4096 4096 NT_STATUS_OK
ReadX 13857 12288 4096 4096 NT_STATUS_OK
WriteX 13861 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13861 258 NT_STATUS_OK
WriteX 13861 0 12006 12006 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13862 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13862 1004 NT_STATUS_OK
WriteX 13862 0 4096 4096 NT_STATUS_OK
Close 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13863 NT_STATUS_OK
Close 13863 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13865 4096 4096 4096 NT_STATUS_OK
ReadX 13865 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13868 NT_STATUS_OK
WriteX 13868 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
WriteX 13868 0 11991 11991 NT_STATUS_OK
Close 13868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13869 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13869 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13870 NT_STATUS_OK
Close 13870 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13873 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
Close 13873 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13877 NT_STATUS_OK
Close 13877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13876 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13876 1004 NT_STATUS_OK
ReadX 13876 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13876 1004 NT_STATUS_OK
WriteX 13876 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13876 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13876 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13876 1004 NT_STATUS_OK
Close 13852 NT_STATUS_OK
WriteX 13856 0 19054 19054 NT_STATUS_OK
WriteX 13876 0 12288 12288 NT_STATUS_OK
Close 13872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13856 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13881 NT_STATUS_OK
Close 13881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 61440 61440 NT_STATUS_OK
ReadX 13883 61440 4096 4096 NT_STATUS_OK
ReadX 13883 65536 61440 61440 NT_STATUS_OK
ReadX 13883 126976 4096 4096 NT_STATUS_OK
ReadX 13883 131072 61440 61440 NT_STATUS_OK
ReadX 13883 192512 4096 4096 NT_STATUS_OK
ReadX 13883 196608 61440 61440 NT_STATUS_OK
ReadX 13883 258048 4096 4096 NT_STATUS_OK
ReadX 13883 262144 61440 61440 NT_STATUS_OK
ReadX 13883 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 61440 61440 NT_STATUS_OK
ReadX 13884 61440 4096 4096 NT_STATUS_OK
ReadX 13884 65536 61440 61440 NT_STATUS_OK
ReadX 13884 126976 4096 4096 NT_STATUS_OK
ReadX 13884 131072 61440 61440 NT_STATUS_OK
ReadX 13884 192512 4096 4096 NT_STATUS_OK
ReadX 13884 196608 61440 61440 NT_STATUS_OK
ReadX 13884 258048 4096 4096 NT_STATUS_OK
ReadX 13884 262144 61440 61440 NT_STATUS_OK
ReadX 13884 323584 4096 4096 NT_STATUS_OK
ReadX 13884 327680 61440 61440 NT_STATUS_OK
ReadX 13884 389120 4096 4096 NT_STATUS_OK
ReadX 13884 393216 61440 61440 NT_STATUS_OK
ReadX 13884 454656 4096 4096 NT_STATUS_OK
ReadX 13884 458752 61440 61440 NT_STATUS_OK
ReadX 13884 520192 4096 4096 NT_STATUS_OK
ReadX 13884 524288 61440 61440 NT_STATUS_OK
ReadX 13884 585728 4096 4096 NT_STATUS_OK
ReadX 13884 589824 61440 61440 NT_STATUS_OK
ReadX 13884 651264 4096 4096 NT_STATUS_OK
ReadX 13884 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 61440 61440 NT_STATUS_OK
ReadX 13885 61440 4096 4096 NT_STATUS_OK
ReadX 13885 65536 61440 61440 NT_STATUS_OK
ReadX 13885 126976 4096 4096 NT_STATUS_OK
ReadX 13885 131072 61440 61440 NT_STATUS_OK
ReadX 13885 192512 4096 4096 NT_STATUS_OK
ReadX 13885 196608 61440 61440 NT_STATUS_OK
ReadX 13885 258048 4096 4096 NT_STATUS_OK
ReadX 13885 262144 61440 61440 NT_STATUS_OK
ReadX 13885 323584 4096 4096 NT_STATUS_OK
ReadX 13885 327680 61440 61440 NT_STATUS_OK
ReadX 13885 389120 4096 4096 NT_STATUS_OK
ReadX 13885 393216 61440 61440 NT_STATUS_OK
ReadX 13885 454656 4096 4096 NT_STATUS_OK
ReadX 13885 458752 61440 61440 NT_STATUS_OK
ReadX 13885 520192 4096 4096 NT_STATUS_OK
ReadX 13885 524288 61440 61440 NT_STATUS_OK
ReadX 13885 585728 4096 4096 NT_STATUS_OK
ReadX 13885 589824 61440 61440 NT_STATUS_OK
ReadX 13885 651264 4096 4096 NT_STATUS_OK
ReadX 13885 655360 61440 61440 NT_STATUS_OK
ReadX 13885 716800 4096 4096 NT_STATUS_OK
ReadX 13885 720896 61440 61440 NT_STATUS_OK
ReadX 13885 782336 4096 4096 NT_STATUS_OK
ReadX 13885 786432 61440 61440 NT_STATUS_OK
ReadX 13885 847872 4096 4096 NT_STATUS_OK
ReadX 13885 851968 61440 61440 NT_STATUS_OK
ReadX 13885 913408 4096 4096 NT_STATUS_OK
ReadX 13885 917504 61440 61440 NT_STATUS_OK
ReadX 13885 978944 4096 4096 NT_STATUS_OK
ReadX 13885 983040 61440 61440 NT_STATUS_OK
ReadX 13885 1044480 4096 4096 NT_STATUS_OK
ReadX 13885 1048576 61440 61440 NT_STATUS_OK
ReadX 13885 1110016 4096 4096 NT_STATUS_OK
ReadX 13885 1114112 61440 61440 NT_STATUS_OK
ReadX 13885 1175552 4096 4096 NT_STATUS_OK
ReadX 13885 1179648 61440 61440 NT_STATUS_OK
ReadX 13885 1241088 4096 4096 NT_STATUS_OK
ReadX 13885 1245184 61440 61440 NT_STATUS_OK
ReadX 13885 1306624 4096 4096 NT_STATUS_OK
ReadX 13885 1310720 61440 61440 NT_STATUS_OK
ReadX 13885 1372160 4096 4096 NT_STATUS_OK
ReadX 13885 1376256 61440 61440 NT_STATUS_OK
ReadX 13885 1437696 4096 4096 NT_STATUS_OK
ReadX 13885 1441792 61440 61440 NT_STATUS_OK
ReadX 13885 1503232 4096 4096 NT_STATUS_OK
ReadX 13885 1507328 61440 61440 NT_STATUS_OK
ReadX 13885 1568768 4096 4096 NT_STATUS_OK
ReadX 13885 1572864 61440 61440 NT_STATUS_OK
ReadX 13885 1634304 4096 4096 NT_STATUS_OK
ReadX 13885 1638400 61440 61440 NT_STATUS_OK
ReadX 13885 1699840 4096 4096 NT_STATUS_OK
ReadX 13885 1703936 61440 61440 NT_STATUS_OK
ReadX 13885 1765376 4096 4096 NT_STATUS_OK
ReadX 13885 1769472 61440 61440 NT_STATUS_OK
ReadX 13885 1830912 4096 4096 NT_STATUS_OK
ReadX 13885 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13892 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 1004 NT_STATUS_OK
WriteX 13892 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13894 NT_STATUS_OK
WriteX 13894 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13894 258 NT_STATUS_OK
WriteX 13894 0 491 491 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13892 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13897 NT_STATUS_OK
Close 13897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13898 NT_STATUS_OK
WriteX 13898 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13898 258 NT_STATUS_OK
WriteX 13898 0 543 543 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13912 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 1004 NT_STATUS_OK
WriteX 13912 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 258 NT_STATUS_OK
WriteX 13912 0 2048 2048 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13913 0 4096 4096 NT_STATUS_OK
Flush 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13913 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13918 NT_STATUS_OK
WriteX 13918 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 258 NT_STATUS_OK
WriteX 13918 0 2048 2048 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13923 NT_STATUS_OK
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13924 NT_STATUS_OK
WriteX 13924 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13924 258 NT_STATUS_OK
WriteX 13924 0 2048 2048 NT_STATUS_OK
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 2048 2048 NT_STATUS_OK
ReadX 13903 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13919 0 4096 4096 NT_STATUS_OK
WriteX 13903 0 8192 8192 NT_STATUS_OK
WriteX 13904 0 4096 4096 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13929 NT_STATUS_OK
QUERY_FILE_INFORMATION 13929 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Close 13905 NT_STATUS_OK
Close 13906 NT_STATUS_OK
Close 13919 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13949 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 1004 NT_STATUS_OK
WriteX 13949 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 258 NT_STATUS_OK
WriteX 13949 0 2048 2048 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13952 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13957 NT_STATUS_OK
QUERY_FILE_INFORMATION 13957 1004 NT_STATUS_OK
WriteX 13957 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13957 258 NT_STATUS_OK
WriteX 13957 0 2048 2048 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
Flush 13950 NT_STATUS_OK
WriteX 13958 0 4096 4096 NT_STATUS_OK
Flush 13958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13958 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13952 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13960 NT_STATUS_OK
WriteX 13960 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13960 258 NT_STATUS_OK
WriteX 13960 0 4096 4096 NT_STATUS_OK
Close 13960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13962 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13963 NT_STATUS_OK
WriteX 13963 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13963 258 NT_STATUS_OK
WriteX 13963 0 4096 4096 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13964 0 4096 4096 NT_STATUS_OK
Close 13961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13938 NT_STATUS_OK
Close 13952 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13932 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13971 NT_STATUS_OK
WriteX 13971 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13971 258 NT_STATUS_OK
WriteX 13971 0 2048 2048 NT_STATUS_OK
Close 13971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13978 NT_STATUS_OK
ReadX 13978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13986 NT_STATUS_OK
QUERY_FILE_INFORMATION 13986 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13988 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13996 NT_STATUS_OK
ReadX 13996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13997 NT_STATUS_OK
ReadX 13997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14008 NT_STATUS_OK
QUERY_FILE_INFORMATION 14008 1004 NT_STATUS_OK
WriteX 14008 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14008 258 NT_STATUS_OK
WriteX 14008 0 2048 2048 NT_STATUS_OK
Close 14008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14020 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 1004 NT_STATUS_OK
WriteX 14020 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
WriteX 14020 0 2048 2048 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14028 NT_STATUS_OK
QUERY_FILE_INFORMATION 14028 1004 NT_STATUS_OK
WriteX 14028 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14028 258 NT_STATUS_OK
WriteX 14028 0 2048 2048 NT_STATUS_OK
Close 14028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14029 NT_STATUS_OK
ReadX 14029 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14009 0 4096 4096 NT_STATUS_OK
Flush 14009 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
Flush 14021 NT_STATUS_OK
WriteX 14029 0 4096 4096 NT_STATUS_OK
Flush 14029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14009 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14011 4096 16384 16384 NT_STATUS_OK
ReadX 13991 4096 16384 16384 NT_STATUS_OK
ReadX 14023 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 2048 2048 NT_STATUS_OK
WriteX 14031 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14032 NT_STATUS_OK
QUERY_FILE_INFORMATION 14032 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Close 13997 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 14001 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 13999 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14034 NT_STATUS_OK
QUERY_FILE_INFORMATION 14034 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14036 NT_STATUS_OK
QUERY_FILE_INFORMATION 14036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14039 4096 16384 16384 NT_STATUS_OK
WriteX 14039 0 4096 4096 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14041 0 4096 4096 NT_STATUS_OK
WriteX 14042 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14056 NT_STATUS_OK
ReadX 14056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 8192 8192 NT_STATUS_OK
ReadX 14045 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14059 0 4096 4096 NT_STATUS_OK
ReadX 14059 4096 4096 4096 NT_STATUS_OK
ReadX 14059 8192 4096 4096 NT_STATUS_OK
WriteX 14045 0 4096 4096 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14039 0 4096 4096 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14041 0 4096 4096 NT_STATUS_OK
WriteX 14042 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14065 NT_STATUS_OK
QUERY_FILE_INFORMATION 14065 1004 NT_STATUS_OK
WriteX 14065 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14065 258 NT_STATUS_OK
WriteX 14065 0 2048 2048 NT_STATUS_OK
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14066 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14067 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
ReadX 14068 4096 4096 4096 NT_STATUS_OK
WriteX 14068 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14069 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
ReadX 14070 4096 4096 4096 NT_STATUS_OK
WriteX 14070 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14071 NT_STATUS_OK
QUERY_FILE_INFORMATION 14071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14056 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14073 0 4096 4096 NT_STATUS_OK
ReadX 14073 4096 4096 4096 NT_STATUS_OK
ReadX 14073 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
ReadX 14074 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14091 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 1004 NT_STATUS_OK
WriteX 14091 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 258 NT_STATUS_OK
WriteX 14091 0 2048 2048 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10186 NT_STATUS_OK
QUERY_FILE_INFORMATION 10186 1004 NT_STATUS_OK
WriteX 10186 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10186 258 NT_STATUS_OK
WriteX 10186 0 2048 2048 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10188 NT_STATUS_OK
QUERY_FILE_INFORMATION 10188 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14080 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14079 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10190 NT_STATUS_OK
QUERY_FILE_INFORMATION 10190 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 61440 4096 4096 NT_STATUS_OK
ReadX 10192 126976 4096 4096 NT_STATUS_OK
WriteX 10192 0 65536 65536 NT_STATUS_OK
WriteX 10192 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 61440 4096 4096 NT_STATUS_OK
ReadX 10193 126976 4096 4096 NT_STATUS_OK
ReadX 10193 192512 4096 4096 NT_STATUS_OK
ReadX 10193 258048 4096 4096 NT_STATUS_OK
WriteX 10193 0 65536 65536 NT_STATUS_OK
WriteX 10193 65536 65536 65536 NT_STATUS_OK
WriteX 10193 131072 65536 65536 NT_STATUS_OK
WriteX 10193 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 61440 4096 4096 NT_STATUS_OK
ReadX 10194 126976 4096 4096 NT_STATUS_OK
ReadX 10194 192512 4096 4096 NT_STATUS_OK
ReadX 10194 258048 4096 4096 NT_STATUS_OK
ReadX 10194 323584 4096 4096 NT_STATUS_OK
ReadX 10194 389120 4096 4096 NT_STATUS_OK
ReadX 10194 454656 4096 4096 NT_STATUS_OK
ReadX 10194 520192 4096 4096 NT_STATUS_OK
WriteX 10194 0 65536 65536 NT_STATUS_OK
WriteX 10194 65536 65536 65536 NT_STATUS_OK
WriteX 10194 131072 65536 65536 NT_STATUS_OK
WriteX 10194 196608 65536 65536 NT_STATUS_OK
WriteX 10194 262144 65536 65536 NT_STATUS_OK
WriteX 10194 327680 65536 65536 NT_STATUS_OK
WriteX 10194 393216 65536 65536 NT_STATUS_OK
WriteX 10194 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10195 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10195 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10195 8192 4096 4096 NT_STATUS_OK
ReadX 10195 12288 4096 4096 NT_STATUS_OK
ReadX 10195 16384 4096 4096 NT_STATUS_OK
ReadX 10195 20480 4096 4096 NT_STATUS_OK
ReadX 10195 24576 4096 4096 NT_STATUS_OK
ReadX 10195 28672 4096 4096 NT_STATUS_OK
ReadX 10195 32768 4096 4096 NT_STATUS_OK
ReadX 10195 36864 4096 4096 NT_STATUS_OK
ReadX 10195 40960 4096 4096 NT_STATUS_OK
ReadX 10195 45056 4096 4096 NT_STATUS_OK
ReadX 10195 49152 4096 4096 NT_STATUS_OK
ReadX 10195 53248 4096 4096 NT_STATUS_OK
ReadX 10195 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10195 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10196 NT_STATUS_OK
Close 10196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Close 10194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10198 NT_STATUS_OK
WriteX 10198 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10198 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10198 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10198 1004 NT_STATUS_OK
WriteX 10198 0 57088 57088 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
Flush 10198 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10199 NT_STATUS_OK
SET_FILE_INFORMATION 10199 1004 NT_STATUS_OK
Close 10199 NT_STATUS_OK
SET_FILE_INFORMATION 10198 1004 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
Close 10198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10202 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10203 NT_STATUS_OK
WriteX 10203 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10203 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10203 1004 NT_STATUS_OK
WriteX 10203 0 51456 51456 NT_STATUS_OK
WriteX 10203 0 4096 4096 NT_STATUS_OK
Flush 10203 NT_STATUS_OK
SET_FILE_INFORMATION 10203 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10203 1004 NT_STATUS_OK
WriteX 10203 0 4096 4096 NT_STATUS_OK
Close 10203 NT_STATUS_OK
Close 10202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10207 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10212 NT_STATUS_OK
WriteX 10212 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10212 258 NT_STATUS_OK
WriteX 10212 0 53077 53077 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10213 NT_STATUS_OK
WriteX 10213 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10213 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10213 1004 NT_STATUS_OK
WriteX 10213 0 65536 65536 NT_STATUS_OK
WriteX 10213 65536 1856 1856 NT_STATUS_OK
WriteX 10213 0 4096 4096 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
SET_FILE_INFORMATION 10213 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10213 1004 NT_STATUS_OK
WriteX 10213 0 4096 4096 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Close 10207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10215 NT_STATUS_OK
Close 10215 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10222 NT_STATUS_OK
WriteX 10222 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10222 258 NT_STATUS_OK
WriteX 10222 0 7983 7983 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10227 NT_STATUS_OK
WriteX 10227 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10227 258 NT_STATUS_OK
WriteX 10227 0 65536 65536 NT_STATUS_OK
WriteX 10227 65536 65536 65536 NT_STATUS_OK
WriteX 10227 131072 65536 65536 NT_STATUS_OK
WriteX 10227 196608 65536 65536 NT_STATUS_OK
WriteX 10227 262144 65536 65536 NT_STATUS_OK
WriteX 10227 327680 65536 65536 NT_STATUS_OK
WriteX 10227 393216 65536 65536 NT_STATUS_OK
WriteX 10227 458752 46731 46731 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10228 NT_STATUS_OK
WriteX 10228 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10228 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10217 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10228 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10228 1004 NT_STATUS_OK
WriteX 10228 0 65536 65536 NT_STATUS_OK
WriteX 10228 65536 22848 22848 NT_STATUS_OK
WriteX 10228 0 4096 4096 NT_STATUS_OK
Flush 10228 NT_STATUS_OK
SET_FILE_INFORMATION 10228 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10228 1004 NT_STATUS_OK
WriteX 10228 0 4096 4096 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10232 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10233 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10233 1004 NT_STATUS_OK
ReadX 10233 8192 4096 4096 NT_STATUS_OK
ReadX 10233 12288 4096 4096 NT_STATUS_OK
ReadX 10233 16384 4096 4096 NT_STATUS_OK
ReadX 10233 20480 4096 4096 NT_STATUS_OK
ReadX 10233 24576 4096 4096 NT_STATUS_OK
ReadX 10233 28672 4096 4096 NT_STATUS_OK
ReadX 10233 32768 4096 4096 NT_STATUS_OK
ReadX 10233 36864 4096 4096 NT_STATUS_OK
ReadX 10233 40960 4096 4096 NT_STATUS_OK
ReadX 10233 45056 4096 4096 NT_STATUS_OK
ReadX 10233 49152 4096 4096 NT_STATUS_OK
ReadX 10233 53248 4096 4096 NT_STATUS_OK
ReadX 10233 57344 4096 4096 NT_STATUS_OK
ReadX 10233 61440 4096 4096 NT_STATUS_OK
ReadX 10233 65536 4096 4096 NT_STATUS_OK
ReadX 10233 69632 4096 4096 NT_STATUS_OK
ReadX 10233 73728 4096 4096 NT_STATUS_OK
ReadX 10233 77824 4096 4096 NT_STATUS_OK
ReadX 10233 81920 4096 4096 NT_STATUS_OK
ReadX 10233 86016 4096 4096 NT_STATUS_OK
ReadX 10233 90112 4096 4096 NT_STATUS_OK
ReadX 10233 94208 4096 4096 NT_STATUS_OK
ReadX 10233 98304 4096 4096 NT_STATUS_OK
ReadX 10233 102400 4096 4096 NT_STATUS_OK
ReadX 10233 106496 4096 4096 NT_STATUS_OK
ReadX 10233 110592 4096 4096 NT_STATUS_OK
ReadX 10233 114688 4096 4096 NT_STATUS_OK
ReadX 10233 118784 4096 4096 NT_STATUS_OK
ReadX 10233 122880 4096 4096 NT_STATUS_OK
ReadX 10233 126976 4096 4096 NT_STATUS_OK
ReadX 10233 131072 4096 4096 NT_STATUS_OK
ReadX 10233 135168 4096 4096 NT_STATUS_OK
ReadX 10233 139264 4096 4096 NT_STATUS_OK
ReadX 10233 143360 4096 4096 NT_STATUS_OK
ReadX 10233 147456 4096 4096 NT_STATUS_OK
ReadX 10233 151552 4096 4096 NT_STATUS_OK
ReadX 10233 155648 4096 4096 NT_STATUS_OK
ReadX 10233 159744 4096 4096 NT_STATUS_OK
ReadX 10233 163840 4096 4096 NT_STATUS_OK
ReadX 10233 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10233 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10236 NT_STATUS_OK
WriteX 10236 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10236 258 NT_STATUS_OK
Close 10233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10237 NT_STATUS_OK
SET_FILE_INFORMATION 10237 1004 NT_STATUS_OK
Close 10237 NT_STATUS_OK
WriteX 10236 0 42388 42388 NT_STATUS_OK
Close 10236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10238 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
ReadX 10240 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10241 NT_STATUS_OK
WriteX 10241 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10241 258 NT_STATUS_OK
SET_FILE_INFORMATION 10241 1004 NT_STATUS_OK
WriteX 10241 0 42652 42652 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10247 NT_STATUS_OK
Close 10247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10250 NT_STATUS_OK
WriteX 10250 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 65536 65536 NT_STATUS_OK
WriteX 10250 65536 49 49 NT_STATUS_OK
Close 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 61440 61440 NT_STATUS_OK
ReadX 10251 61440 4096 4096 NT_STATUS_OK
ReadX 10251 65536 61440 61440 NT_STATUS_OK
ReadX 10251 126976 4096 4096 NT_STATUS_OK
ReadX 10251 131072 61440 61440 NT_STATUS_OK
ReadX 10251 192512 4096 4096 NT_STATUS_OK
ReadX 10251 196608 61440 61440 NT_STATUS_OK
ReadX 10251 258048 4096 4096 NT_STATUS_OK
ReadX 10251 262144 61440 61440 NT_STATUS_OK
ReadX 10251 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 61440 61440 NT_STATUS_OK
ReadX 10252 61440 4096 4096 NT_STATUS_OK
ReadX 10252 65536 61440 61440 NT_STATUS_OK
ReadX 10252 126976 4096 4096 NT_STATUS_OK
ReadX 10252 131072 61440 61440 NT_STATUS_OK
ReadX 10252 192512 4096 4096 NT_STATUS_OK
ReadX 10252 196608 61440 61440 NT_STATUS_OK
ReadX 10252 258048 4096 4096 NT_STATUS_OK
ReadX 10252 262144 61440 61440 NT_STATUS_OK
ReadX 10252 323584 4096 4096 NT_STATUS_OK
ReadX 10252 327680 61440 61440 NT_STATUS_OK
ReadX 10252 389120 4096 4096 NT_STATUS_OK
ReadX 10252 393216 61440 61440 NT_STATUS_OK
ReadX 10252 454656 4096 4096 NT_STATUS_OK
ReadX 10252 458752 61440 61440 NT_STATUS_OK
ReadX 10252 520192 4096 4096 NT_STATUS_OK
ReadX 10252 524288 61440 61440 NT_STATUS_OK
ReadX 10252 585728 4096 4096 NT_STATUS_OK
ReadX 10252 589824 61440 61440 NT_STATUS_OK
ReadX 10252 651264 4096 4096 NT_STATUS_OK
ReadX 10252 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 61440 61440 NT_STATUS_OK
ReadX 10253 61440 4096 4096 NT_STATUS_OK
ReadX 10253 65536 61440 61440 NT_STATUS_OK
ReadX 10253 126976 4096 4096 NT_STATUS_OK
ReadX 10253 131072 61440 61440 NT_STATUS_OK
ReadX 10253 192512 4096 4096 NT_STATUS_OK
ReadX 10253 196608 61440 61440 NT_STATUS_OK
ReadX 10253 258048 4096 4096 NT_STATUS_OK
ReadX 10253 262144 61440 61440 NT_STATUS_OK
ReadX 10253 323584 4096 4096 NT_STATUS_OK
ReadX 10253 327680 61440 61440 NT_STATUS_OK
ReadX 10253 389120 4096 4096 NT_STATUS_OK
ReadX 10253 393216 61440 61440 NT_STATUS_OK
ReadX 10253 454656 4096 4096 NT_STATUS_OK
ReadX 10253 458752 61440 61440 NT_STATUS_OK
ReadX 10253 520192 4096 4096 NT_STATUS_OK
ReadX 10253 524288 61440 61440 NT_STATUS_OK
ReadX 10253 585728 4096 4096 NT_STATUS_OK
ReadX 10253 589824 61440 61440 NT_STATUS_OK
ReadX 10253 651264 4096 4096 NT_STATUS_OK
ReadX 10253 655360 61440 61440 NT_STATUS_OK
ReadX 10253 716800 4096 4096 NT_STATUS_OK
ReadX 10253 720896 61440 61440 NT_STATUS_OK
ReadX 10253 782336 4096 4096 NT_STATUS_OK
ReadX 10253 786432 61440 61440 NT_STATUS_OK
ReadX 10253 847872 4096 4096 NT_STATUS_OK
ReadX 10253 851968 61440 61440 NT_STATUS_OK
ReadX 10253 913408 4096 4096 NT_STATUS_OK
ReadX 10253 917504 61440 61440 NT_STATUS_OK
ReadX 10253 978944 4096 4096 NT_STATUS_OK
ReadX 10253 983040 61440 61440 NT_STATUS_OK
ReadX 10253 1044480 4096 4096 NT_STATUS_OK
ReadX 10253 1048576 61440 61440 NT_STATUS_OK
ReadX 10253 1110016 4096 4096 NT_STATUS_OK
ReadX 10253 1114112 61440 61440 NT_STATUS_OK
ReadX 10253 1175552 4096 4096 NT_STATUS_OK
ReadX 10253 1179648 61440 61440 NT_STATUS_OK
ReadX 10253 1241088 4096 4096 NT_STATUS_OK
ReadX 10253 1245184 61440 61440 NT_STATUS_OK
ReadX 10253 1306624 4096 4096 NT_STATUS_OK
ReadX 10253 1310720 61440 61440 NT_STATUS_OK
ReadX 10253 1372160 4096 4096 NT_STATUS_OK
ReadX 10253 1376256 61440 61440 NT_STATUS_OK
ReadX 10253 1437696 4096 4096 NT_STATUS_OK
ReadX 10253 1441792 61440 61440 NT_STATUS_OK
ReadX 10253 1503232 4096 4096 NT_STATUS_OK
ReadX 10253 1507328 61440 61440 NT_STATUS_OK
ReadX 10253 1568768 4096 4096 NT_STATUS_OK
ReadX 10253 1572864 61440 61440 NT_STATUS_OK
ReadX 10253 1634304 4096 4096 NT_STATUS_OK
ReadX 10253 1638400 61440 61440 NT_STATUS_OK
ReadX 10253 1699840 4096 4096 NT_STATUS_OK
ReadX 10253 1703936 61440 61440 NT_STATUS_OK
ReadX 10253 1765376 4096 4096 NT_STATUS_OK
ReadX 10253 1769472 61440 61440 NT_STATUS_OK
ReadX 10253 1830912 4096 4096 NT_STATUS_OK
ReadX 10253 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10255 NT_STATUS_OK
QUERY_FILE_INFORMATION 10255 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10255 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10255 1005 NT_STATUS_OK
ReadX 10255 2156 24 24 NT_STATUS_OK
ReadX 10255 2139 276 276 NT_STATUS_OK
ReadX 10255 2136 14 14 NT_STATUS_OK
ReadX 10255 2136 7 7 NT_STATUS_OK
ReadX 10255 2138 12 12 NT_STATUS_OK
ReadX 10255 2137 8 8 NT_STATUS_OK
ReadX 10255 2135 15 15 NT_STATUS_OK
ReadX 10255 0 16 16 NT_STATUS_OK
ReadX 10255 16 2048 2048 NT_STATUS_OK
ReadX 10255 2064 2048 2048 NT_STATUS_OK
ReadX 10255 257 2048 2048 NT_STATUS_OK
ReadX 10255 385 2048 2048 NT_STATUS_OK
ReadX 10255 513 2048 2048 NT_STATUS_OK
ReadX 10255 641 2048 2048 NT_STATUS_OK
ReadX 10255 769 2048 2048 NT_STATUS_OK
ReadX 10255 897 2048 2048 NT_STATUS_OK
ReadX 10255 1025 2048 2048 NT_STATUS_OK
ReadX 10255 1153 2048 2048 NT_STATUS_OK
ReadX 10255 1281 2048 2048 NT_STATUS_OK
ReadX 10255 1409 2048 2048 NT_STATUS_OK
ReadX 10255 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10260 NT_STATUS_OK
WriteX 10260 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10260 258 NT_STATUS_OK
WriteX 10260 0 10575 10575 NT_STATUS_OK
Flush 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10261 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
Close 10255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10265 NT_STATUS_OK
LockX 10265 2147483538 1 NT_STATUS_OK
UnlockX 10265 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 1005 NT_STATUS_OK
ReadX 10265 0 512 512 NT_STATUS_OK
ReadX 10265 512 512 512 NT_STATUS_OK
ReadX 10265 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 1004 NT_STATUS_OK
Close 10265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10266 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 1005 NT_STATUS_OK
ReadX 10266 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10267 NT_STATUS_OK
LockX 10267 2147483538 1 NT_STATUS_OK
UnlockX 10267 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10267 1005 NT_STATUS_OK
ReadX 10267 0 512 512 NT_STATUS_OK
ReadX 10267 512 512 512 NT_STATUS_OK
ReadX 10267 1024 512 512 NT_STATUS_OK
ReadX 10267 288 20 20 NT_STATUS_OK
ReadX 10267 308 2084 2084 NT_STATUS_OK
ReadX 10267 388 2084 2084 NT_STATUS_OK
ReadX 10267 388 2084 2084 NT_STATUS_OK
ReadX 10254 2157 1386 1386 NT_STATUS_OK
ReadX 10267 2472 399 399 NT_STATUS_OK
ReadX 10267 3072 1536 1536 NT_STATUS_OK
ReadX 10267 544 149 149 NT_STATUS_OK
ReadX 10267 693 485 485 NT_STATUS_OK
Close 10267 NT_STATUS_OK
ReadX 10254 2157 4096 4096 NT_STATUS_OK
ReadX 10254 6253 4096 4096 NT_STATUS_OK
ReadX 10254 10349 4096 4096 NT_STATUS_OK
ReadX 10254 14445 4096 4096 NT_STATUS_OK
ReadX 10254 18541 4096 4096 NT_STATUS_OK
ReadX 10254 22637 256 256 NT_STATUS_OK
ReadX 10254 22893 4096 4096 NT_STATUS_OK
ReadX 10254 26989 4096 4096 NT_STATUS_OK
ReadX 10254 31085 4096 4096 NT_STATUS_OK
ReadX 10254 35181 4096 4096 NT_STATUS_OK
ReadX 10254 39277 4096 4096 NT_STATUS_OK
ReadX 10254 43373 4096 4096 NT_STATUS_OK
ReadX 10254 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10254 2157 1024 1024 NT_STATUS_OK
ReadX 10254 1667 4688 4688 NT_STATUS_OK
ReadX 10254 6355 3516 3516 NT_STATUS_OK
ReadX 10254 9871 16384 16384 NT_STATUS_OK
ReadX 10254 26255 3771 3771 NT_STATUS_OK
ReadX 10254 30026 2048 2048 NT_STATUS_OK
ReadX 10254 32074 1024 1024 NT_STATUS_OK
ReadX 10254 33098 6652 6652 NT_STATUS_OK
ReadX 10254 39750 16384 16384 NT_STATUS_OK
ReadX 10254 56134 10496 10496 NT_STATUS_OK
ReadX 10254 66630 1784 1784 NT_STATUS_OK
ReadX 10254 68414 90 90 NT_STATUS_OK
ReadX 10254 68504 273 273 NT_STATUS_OK
ReadX 10254 68777 1600 1600 NT_STATUS_OK
ReadX 10254 70377 640 640 NT_STATUS_OK
ReadX 10254 71017 1280 1280 NT_STATUS_OK
ReadX 10254 72297 8464 8464 NT_STATUS_OK
ReadX 10254 80761 158 158 NT_STATUS_OK
ReadX 10254 80919 912 912 NT_STATUS_OK
ReadX 10254 81831 1980 1980 NT_STATUS_OK
ReadX 10254 83811 2256 2256 NT_STATUS_OK
ReadX 10254 86067 400 400 NT_STATUS_OK
ReadX 10254 86467 252 252 NT_STATUS_OK
ReadX 10254 86719 42 42 NT_STATUS_OK
ReadX 10254 86761 725 725 NT_STATUS_OK
ReadX 10254 2009 512 512 NT_STATUS_OK
ReadX 10254 3895 9 9 NT_STATUS_OK
ReadX 10254 3781 46 46 NT_STATUS_OK
ReadX 10254 4059 92 92 NT_STATUS_OK
ReadX 10254 3781 92 92 NT_STATUS_OK
ReadX 10254 3986 184 184 NT_STATUS_OK
ReadX 10254 3987 16384 16384 NT_STATUS_OK
ReadX 10254 3902 16384 16384 NT_STATUS_OK
ReadX 10254 3781 10240 10240 NT_STATUS_OK
ReadX 10254 3821 16384 16384 NT_STATUS_OK
ReadX 10254 3891 935 935 NT_STATUS_OK
ReadX 10254 4060 10240 10240 NT_STATUS_OK
ReadX 10254 4059 184 184 NT_STATUS_OK
ReadX 10254 256 184 184 NT_STATUS_OK
ReadX 10254 256 1026 1026 NT_STATUS_OK
ReadX 10254 3901 326 326 NT_STATUS_OK
ReadX 10254 3899 652 652 NT_STATUS_OK
ReadX 10254 256 2 2 NT_STATUS_OK
ReadX 10254 258 4948 4948 NT_STATUS_OK
Close 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10269 NT_STATUS_OK
Close 10269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10272 NT_STATUS_OK
WriteX 10272 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10272 258 NT_STATUS_OK
WriteX 10272 0 65536 65536 NT_STATUS_OK
WriteX 10272 65536 65536 65536 NT_STATUS_OK
WriteX 10272 131072 65536 65536 NT_STATUS_OK
WriteX 10272 196608 65536 65536 NT_STATUS_OK
WriteX 10272 262144 65536 65536 NT_STATUS_OK
WriteX 10272 327680 65536 65536 NT_STATUS_OK
WriteX 10272 393216 65536 65536 NT_STATUS_OK
WriteX 10272 458752 65536 65536 NT_STATUS_OK
WriteX 10272 524288 65536 65536 NT_STATUS_OK
WriteX 10272 589824 35257 35257 NT_STATUS_OK
Close 10272 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10274 NT_STATUS_OK
Close 10274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10277 NT_STATUS_OK
WriteX 10277 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10277 258 NT_STATUS_OK
WriteX 10277 0 65536 65536 NT_STATUS_OK
WriteX 10277 65536 65536 65536 NT_STATUS_OK
WriteX 10277 131072 65536 65536 NT_STATUS_OK
WriteX 10277 196608 65536 65536 NT_STATUS_OK
WriteX 10277 262144 65536 65536 NT_STATUS_OK
WriteX 10277 327680 65536 65536 NT_STATUS_OK
WriteX 10277 393216 65536 65536 NT_STATUS_OK
WriteX 10277 458752 65536 65536 NT_STATUS_OK
WriteX 10277 524288 65536 65536 NT_STATUS_OK
WriteX 10277 589824 57598 57598 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10279 NT_STATUS_OK
WriteX 10279 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10279 258 NT_STATUS_OK
WriteX 10279 0 12543 12543 NT_STATUS_OK
Flush 10279 NT_STATUS_OK
Close 10279 NT_STATUS_OK
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10281 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10284 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10285 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 1005 NT_STATUS_OK
ReadX 10285 1938 24 24 NT_STATUS_OK
ReadX 10285 1920 276 276 NT_STATUS_OK
ReadX 10285 1918 14 14 NT_STATUS_OK
ReadX 10285 1918 7 7 NT_STATUS_OK
ReadX 10285 1919 12 12 NT_STATUS_OK
ReadX 10285 1919 8 8 NT_STATUS_OK
ReadX 10285 1917 15 15 NT_STATUS_OK
ReadX 10285 0 16 16 NT_STATUS_OK
ReadX 10285 16 2048 2048 NT_STATUS_OK
ReadX 10285 2064 2048 2048 NT_STATUS_OK
ReadX 10285 257 2048 2048 NT_STATUS_OK
ReadX 10285 385 2048 2048 NT_STATUS_OK
ReadX 10285 513 2048 2048 NT_STATUS_OK
ReadX 10285 641 2048 2048 NT_STATUS_OK
ReadX 10285 769 2048 2048 NT_STATUS_OK
ReadX 10285 897 2048 2048 NT_STATUS_OK
ReadX 10285 1025 2048 2048 NT_STATUS_OK
ReadX 10285 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10287 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10290 NT_STATUS_OK
WriteX 10290 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10290 258 NT_STATUS_OK
WriteX 10290 0 11588 11588 NT_STATUS_OK
Flush 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10291 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10295 NT_STATUS_OK
WriteX 10295 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10295 258 NT_STATUS_OK
WriteX 10295 0 11615 11615 NT_STATUS_OK
Flush 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10304 NT_STATUS_OK
WriteX 10304 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 258 NT_STATUS_OK
WriteX 10304 0 65536 65536 NT_STATUS_OK
WriteX 10304 65536 16050 16050 NT_STATUS_OK
Close 10304 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10284 1939 64 64 NT_STATUS_OK
ReadX 10284 128 248 248 NT_STATUS_OK
ReadX 10284 128 568 568 NT_STATUS_OK
ReadX 10284 3872 1536 1536 NT_STATUS_OK
ReadX 10284 3456 2560 2560 NT_STATUS_OK
ReadX 10284 3136 512 512 NT_STATUS_OK
ReadX 10284 2880 4096 4096 NT_STATUS_OK
ReadX 10284 3264 3072 3072 NT_STATUS_OK
ReadX 10284 320 4096 4096 NT_STATUS_OK
ReadX 10284 1024 4096 4096 NT_STATUS_OK
ReadX 10284 3616 4096 4096 NT_STATUS_OK
ReadX 10284 1939 64 64 NT_STATUS_OK
ReadX 10284 128 248 248 NT_STATUS_OK
ReadX 10284 128 608 608 NT_STATUS_OK
ReadX 10284 2858 1024 1024 NT_STATUS_OK
ReadX 10284 2810 4096 4096 NT_STATUS_OK
ReadX 10284 2826 4096 4096 NT_STATUS_OK
ReadX 10284 2580 2048 2048 NT_STATUS_OK
ReadX 10284 2800 2560 2560 NT_STATUS_OK
ReadX 10284 2100 4096 4096 NT_STATUS_OK
ReadX 10284 2084 4096 4096 NT_STATUS_OK
ReadX 10284 868 4096 4096 NT_STATUS_OK
ReadX 10284 2324 4096 4096 NT_STATUS_OK
ReadX 10284 884 4096 4096 NT_STATUS_OK
ReadX 10284 2604 1024 1024 NT_STATUS_OK
ReadX 10284 580 4096 4096 NT_STATUS_OK
ReadX 10284 596 4096 4096 NT_STATUS_OK
ReadX 10284 2752 4096 4096 NT_STATUS_OK
ReadX 10284 2842 1024 1024 NT_STATUS_OK
ReadX 10284 660 4096 4096 NT_STATUS_OK
ReadX 10284 2720 4096 4096 NT_STATUS_OK
ReadX 10284 2736 4096 4096 NT_STATUS_OK
ReadX 10284 628 4096 4096 NT_STATUS_OK
ReadX 10284 2704 4096 4096 NT_STATUS_OK
ReadX 10284 1556 4096 4096 NT_STATUS_OK
ReadX 10284 576 4096 4096 NT_STATUS_OK
ReadX 10284 3168 1536 1536 NT_STATUS_OK
ReadX 10284 832 4096 4096 NT_STATUS_OK
ReadX 10284 1088 4096 4096 NT_STATUS_OK
ReadX 10284 1344 4096 4096 NT_STATUS_OK
ReadX 10284 1600 4096 4096 NT_STATUS_OK
ReadX 10284 1856 4096 4096 NT_STATUS_OK
ReadX 10284 2112 4096 4096 NT_STATUS_OK
ReadX 10284 1892 4096 4096 NT_STATUS_OK
ReadX 10284 820 4096 4096 NT_STATUS_OK
ReadX 10284 788 4096 4096 NT_STATUS_OK
ReadX 10284 1604 4096 4096 NT_STATUS_OK
ReadX 10284 3648 4096 4096 NT_STATUS_OK
ReadX 10284 2608 4096 4096 NT_STATUS_OK
ReadX 10284 548 4096 4096 NT_STATUS_OK
ReadX 10284 740 4096 4096 NT_STATUS_OK
ReadX 10284 1344 4096 4096 NT_STATUS_OK
ReadX 10284 3392 4096 4096 NT_STATUS_OK
ReadX 10284 3904 4096 4096 NT_STATUS_OK
ReadX 10284 644 4096 4096 NT_STATUS_OK
ReadX 10284 676 4096 4096 NT_STATUS_OK
ReadX 10284 2688 4096 4096 NT_STATUS_OK
ReadX 10284 320 4096 4096 NT_STATUS_OK
ReadX 10284 900 4096 4096 NT_STATUS_OK
ReadX 10284 1908 4096 4096 NT_STATUS_OK
ReadX 10284 852 4096 4096 NT_STATUS_OK
ReadX 10284 724 4096 4096 NT_STATUS_OK
ReadX 10284 2292 4096 4096 NT_STATUS_OK
ReadX 10284 612 4096 4096 NT_STATUS_OK
ReadX 10284 388 4096 4096 NT_STATUS_OK
ReadX 10284 2368 4096 4096 NT_STATUS_OK
ReadX 10284 2624 4096 4096 NT_STATUS_OK
ReadX 10284 500 4096 4096 NT_STATUS_OK
ReadX 10284 356 4096 4096 NT_STATUS_OK
ReadX 10284 1024 4096 4096 NT_STATUS_OK
ReadX 10284 576 4096 4096 NT_STATUS_OK
ReadX 10284 340 4096 4096 NT_STATUS_OK
ReadX 10284 420 4096 4096 NT_STATUS_OK
ReadX 10284 1600 4096 4096 NT_STATUS_OK
ReadX 10284 404 4096 4096 NT_STATUS_OK
ReadX 10284 1428 4096 4096 NT_STATUS_OK
ReadX 10284 2656 4096 4096 NT_STATUS_OK
ReadX 10284 2624 4096 4096 NT_STATUS_OK
ReadX 10284 452 4096 4096 NT_STATUS_OK
ReadX 10284 692 4096 4096 NT_STATUS_OK
ReadX 10284 564 4096 4096 NT_STATUS_OK
ReadX 10284 372 4096 4096 NT_STATUS_OK
ReadX 10284 468 4096 4096 NT_STATUS_OK
ReadX 10284 484 4096 4096 NT_STATUS_OK
ReadX 10284 1088 4096 4096 NT_STATUS_OK
ReadX 10284 1924 4096 4096 NT_STATUS_OK
ReadX 10284 2768 4096 4096 NT_STATUS_OK
ReadX 10284 832 4096 4096 NT_STATUS_OK
ReadX 10284 836 4096 4096 NT_STATUS_OK
ReadX 10284 1856 4096 4096 NT_STATUS_OK
ReadX 10284 2640 4096 4096 NT_STATUS_OK
ReadX 10284 436 4096 4096 NT_STATUS_OK
ReadX 10284 1828 4096 4096 NT_STATUS_OK
ReadX 10284 804 4096 4096 NT_STATUS_OK
ReadX 10284 1860 4096 4096 NT_STATUS_OK
ReadX 10284 1812 4096 4096 NT_STATUS_OK
ReadX 10284 756 4096 4096 NT_STATUS_OK
ReadX 10284 1636 4096 4096 NT_STATUS_OK
ReadX 10284 772 4096 4096 NT_STATUS_OK
ReadX 10284 2036 4096 4096 NT_STATUS_OK
ReadX 10284 1220 4096 4096 NT_STATUS_OK
ReadX 10284 1652 4096 4096 NT_STATUS_OK
ReadX 10284 2588 4096 4096 NT_STATUS_OK
ReadX 10284 916 4096 4096 NT_STATUS_OK
ReadX 10284 260 4096 4096 NT_STATUS_OK
ReadX 10284 932 4096 4096 NT_STATUS_OK
ReadX 10284 2624 4096 4096 NT_STATUS_OK
ReadX 10284 308 4096 4096 NT_STATUS_OK
ReadX 10284 292 4096 4096 NT_STATUS_OK
ReadX 10284 1140 4096 4096 NT_STATUS_OK
ReadX 10284 276 4096 4096 NT_STATUS_OK
ReadX 10284 2020 4096 4096 NT_STATUS_OK
ReadX 10284 2880 4096 4096 NT_STATUS_OK
ReadX 10284 516 4096 4096 NT_STATUS_OK
ReadX 10284 1844 4096 4096 NT_STATUS_OK
ReadX 10284 1124 4096 4096 NT_STATUS_OK
ReadX 10284 3136 4096 4096 NT_STATUS_OK
ReadX 10284 324 4096 4096 NT_STATUS_OK
ReadX 10284 1156 4096 4096 NT_STATUS_OK
ReadX 10284 1172 4096 4096 NT_STATUS_OK
ReadX 10284 2112 4096 4096 NT_STATUS_OK
ReadX 10284 2368 4096 4096 NT_STATUS_OK
ReadX 10284 964 4096 4096 NT_STATUS_OK
ReadX 10284 980 4096 4096 NT_STATUS_OK
ReadX 10284 1012 4096 4096 NT_STATUS_OK
ReadX 10284 532 4096 4096 NT_STATUS_OK
ReadX 10284 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10284 1620 4096 4096 NT_STATUS_OK
ReadX 10284 1604 4096 4096 NT_STATUS_OK
ReadX 10284 2116 4096 4096 NT_STATUS_OK
ReadX 10284 2132 4096 4096 NT_STATUS_OK
ReadX 10284 2148 4096 4096 NT_STATUS_OK
ReadX 10284 2276 4096 4096 NT_STATUS_OK
ReadX 10284 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10309 NT_STATUS_OK
QUERY_FILE_INFORMATION 10264 1004 NT_STATUS_OK
Close 10264 NT_STATUS_OK
WriteX 10309 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10309 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 1004 NT_STATUS_OK
Close 10266 NT_STATUS_OK
WriteX 10309 0 65536 65536 NT_STATUS_OK
WriteX 10309 65536 64850 64850 NT_STATUS_OK
Close 10309 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10311 NT_STATUS_OK
WriteX 10311 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10311 258 NT_STATUS_OK
ReadX 10284 2068 4096 4096 NT_STATUS_OK
ReadX 10284 1588 4096 4096 NT_STATUS_OK
ReadX 10284 1572 4096 4096 NT_STATUS_OK
WriteX 10311 0 18630 18630 NT_STATUS_OK
Flush 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10284 612 4096 4096 NT_STATUS_OK
ReadX 10284 564 4096 4096 NT_STATUS_OK
ReadX 10284 1876 4096 4096 NT_STATUS_OK
ReadX 10284 628 4096 4096 NT_STATUS_OK
ReadX 10284 740 4096 4096 NT_STATUS_OK
ReadX 10284 724 4096 4096 NT_STATUS_OK
ReadX 10284 644 4096 4096 NT_STATUS_OK
ReadX 10284 2324 4096 4096 NT_STATUS_OK
ReadX 10284 660 4096 4096 NT_STATUS_OK
ReadX 10284 852 4096 4096 NT_STATUS_OK
ReadX 10284 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10284 2368 4096 4096 NT_STATUS_OK
ReadX 10284 1024 4096 4096 NT_STATUS_OK
ReadX 10284 320 4096 4096 NT_STATUS_OK
ReadX 10284 580 4096 4096 NT_STATUS_OK
ReadX 10284 3136 512 512 NT_STATUS_OK
ReadX 10284 2880 4096 4096 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10316 NT_STATUS_OK
ReadX 10316 61440 4096 4096 NT_STATUS_OK
ReadX 10316 126976 4096 4096 NT_STATUS_OK
WriteX 10316 0 65536 65536 NT_STATUS_OK
WriteX 10316 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 61440 4096 4096 NT_STATUS_OK
ReadX 10317 126976 4096 4096 NT_STATUS_OK
ReadX 10317 192512 4096 4096 NT_STATUS_OK
ReadX 10317 258048 4096 4096 NT_STATUS_OK
WriteX 10317 0 65536 65536 NT_STATUS_OK
WriteX 10317 65536 65536 65536 NT_STATUS_OK
WriteX 10317 131072 65536 65536 NT_STATUS_OK
WriteX 10317 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10318 NT_STATUS_OK
ReadX 10318 61440 4096 4096 NT_STATUS_OK
ReadX 10318 126976 4096 4096 NT_STATUS_OK
ReadX 10318 192512 4096 4096 NT_STATUS_OK
ReadX 10318 258048 4096 4096 NT_STATUS_OK
ReadX 10318 323584 4096 4096 NT_STATUS_OK
ReadX 10318 389120 4096 4096 NT_STATUS_OK
ReadX 10318 454656 4096 4096 NT_STATUS_OK
ReadX 10318 520192 4096 4096 NT_STATUS_OK
WriteX 10318 0 65536 65536 NT_STATUS_OK
WriteX 10318 65536 65536 65536 NT_STATUS_OK
WriteX 10318 131072 65536 65536 NT_STATUS_OK
WriteX 10318 196608 65536 65536 NT_STATUS_OK
WriteX 10318 262144 65536 65536 NT_STATUS_OK
WriteX 10318 327680 65536 65536 NT_STATUS_OK
WriteX 10318 393216 65536 65536 NT_STATUS_OK
WriteX 10318 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10321 NT_STATUS_OK
WriteX 10321 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10321 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10319 0 8192 8192 NT_STATUS_OK
Flush 10319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10319 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10319 0 8192 8192 NT_STATUS_OK
Flush 10319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10319 0 8192 8192 NT_STATUS_OK
Flush 10319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10319 0 8192 8192 NT_STATUS_OK
Flush 10319 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10323 NT_STATUS_OK
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Close 10283 NT_STATUS_OK
Close 10316 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10326 NT_STATUS_OK
WriteX 10326 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10326 258 NT_STATUS_OK
WriteX 10326 0 62591 62591 NT_STATUS_OK
Close 10326 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10328 NT_STATUS_OK
Close 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10331 NT_STATUS_OK
WriteX 10331 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 258 NT_STATUS_OK
WriteX 10331 0 10845 10845 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10333 NT_STATUS_OK
Close 10333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10336 NT_STATUS_OK
WriteX 10336 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 258 NT_STATUS_OK
WriteX 10336 0 30118 30118 NT_STATUS_OK
Close 10336 NT_STATUS_OK
WriteX 10319 0 4096 4096 NT_STATUS_OK
WriteX 10321 0 64 64 NT_STATUS_OK
Close 10321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 61440 61440 NT_STATUS_OK
ReadX 10338 61440 4096 4096 NT_STATUS_OK
ReadX 10338 65536 61440 61440 NT_STATUS_OK
ReadX 10338 126976 4096 4096 NT_STATUS_OK
ReadX 10338 131072 61440 61440 NT_STATUS_OK
ReadX 10338 192512 4096 4096 NT_STATUS_OK
ReadX 10338 196608 61440 61440 NT_STATUS_OK
ReadX 10338 258048 4096 4096 NT_STATUS_OK
ReadX 10338 262144 61440 61440 NT_STATUS_OK
ReadX 10338 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 61440 61440 NT_STATUS_OK
ReadX 10339 61440 4096 4096 NT_STATUS_OK
ReadX 10339 65536 61440 61440 NT_STATUS_OK
ReadX 10339 126976 4096 4096 NT_STATUS_OK
ReadX 10339 131072 61440 61440 NT_STATUS_OK
ReadX 10339 192512 4096 4096 NT_STATUS_OK
ReadX 10339 196608 61440 61440 NT_STATUS_OK
ReadX 10339 258048 4096 4096 NT_STATUS_OK
ReadX 10339 262144 61440 61440 NT_STATUS_OK
ReadX 10339 323584 4096 4096 NT_STATUS_OK
ReadX 10339 327680 61440 61440 NT_STATUS_OK
ReadX 10339 389120 4096 4096 NT_STATUS_OK
ReadX 10339 393216 61440 61440 NT_STATUS_OK
ReadX 10339 454656 4096 4096 NT_STATUS_OK
ReadX 10339 458752 61440 61440 NT_STATUS_OK
ReadX 10339 520192 4096 4096 NT_STATUS_OK
ReadX 10339 524288 61440 61440 NT_STATUS_OK
ReadX 10339 585728 4096 4096 NT_STATUS_OK
ReadX 10339 589824 61440 61440 NT_STATUS_OK
ReadX 10339 651264 4096 4096 NT_STATUS_OK
ReadX 10339 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 61440 61440 NT_STATUS_OK
ReadX 10340 61440 4096 4096 NT_STATUS_OK
ReadX 10340 65536 61440 61440 NT_STATUS_OK
ReadX 10340 126976 4096 4096 NT_STATUS_OK
ReadX 10340 131072 61440 61440 NT_STATUS_OK
ReadX 10340 192512 4096 4096 NT_STATUS_OK
ReadX 10340 196608 61440 61440 NT_STATUS_OK
ReadX 10340 258048 4096 4096 NT_STATUS_OK
ReadX 10340 262144 61440 61440 NT_STATUS_OK
ReadX 10340 323584 4096 4096 NT_STATUS_OK
ReadX 10340 327680 61440 61440 NT_STATUS_OK
ReadX 10340 389120 4096 4096 NT_STATUS_OK
ReadX 10340 393216 61440 61440 NT_STATUS_OK
ReadX 10340 454656 4096 4096 NT_STATUS_OK
ReadX 10340 458752 61440 61440 NT_STATUS_OK
ReadX 10340 520192 4096 4096 NT_STATUS_OK
ReadX 10340 524288 61440 61440 NT_STATUS_OK
ReadX 10340 585728 4096 4096 NT_STATUS_OK
ReadX 10340 589824 61440 61440 NT_STATUS_OK
ReadX 10340 651264 4096 4096 NT_STATUS_OK
ReadX 10340 655360 61440 61440 NT_STATUS_OK
ReadX 10340 716800 4096 4096 NT_STATUS_OK
ReadX 10340 720896 61440 61440 NT_STATUS_OK
ReadX 10340 782336 4096 4096 NT_STATUS_OK
ReadX 10340 786432 61440 61440 NT_STATUS_OK
ReadX 10340 847872 4096 4096 NT_STATUS_OK
ReadX 10340 851968 61440 61440 NT_STATUS_OK
ReadX 10340 913408 4096 4096 NT_STATUS_OK
ReadX 10340 917504 61440 61440 NT_STATUS_OK
ReadX 10340 978944 4096 4096 NT_STATUS_OK
ReadX 10340 983040 61440 61440 NT_STATUS_OK
ReadX 10340 1044480 4096 4096 NT_STATUS_OK
ReadX 10340 1048576 61440 61440 NT_STATUS_OK
ReadX 10340 1110016 4096 4096 NT_STATUS_OK
ReadX 10340 1114112 61440 61440 NT_STATUS_OK
ReadX 10340 1175552 4096 4096 NT_STATUS_OK
ReadX 10340 1179648 61440 61440 NT_STATUS_OK
ReadX 10340 1241088 4096 4096 NT_STATUS_OK
ReadX 10340 1245184 61440 61440 NT_STATUS_OK
ReadX 10340 1306624 4096 4096 NT_STATUS_OK
ReadX 10340 1310720 61440 61440 NT_STATUS_OK
ReadX 10340 1372160 4096 4096 NT_STATUS_OK
ReadX 10340 1376256 61440 61440 NT_STATUS_OK
ReadX 10340 1437696 4096 4096 NT_STATUS_OK
ReadX 10340 1441792 61440 61440 NT_STATUS_OK
ReadX 10340 1503232 4096 4096 NT_STATUS_OK
ReadX 10340 1507328 61440 61440 NT_STATUS_OK
ReadX 10340 1568768 4096 4096 NT_STATUS_OK
ReadX 10340 1572864 61440 61440 NT_STATUS_OK
ReadX 10340 1634304 4096 4096 NT_STATUS_OK
ReadX 10340 1638400 61440 61440 NT_STATUS_OK
ReadX 10340 1699840 4096 4096 NT_STATUS_OK
ReadX 10340 1703936 61440 61440 NT_STATUS_OK
ReadX 10340 1765376 4096 4096 NT_STATUS_OK
ReadX 10340 1769472 61440 61440 NT_STATUS_OK
ReadX 10340 1830912 4096 4096 NT_STATUS_OK
ReadX 10340 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10341 NT_STATUS_OK
Close 10341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
ReadX 10345 4096 4096 4096 NT_STATUS_OK
ReadX 10345 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10346 NT_STATUS_OK
Close 10346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10349 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10353 NT_STATUS_OK
ReadX 10353 0 8192 8192 NT_STATUS_OK
ReadX 10353 8192 8192 8192 NT_STATUS_OK
ReadX 10353 16384 8192 8192 NT_STATUS_OK
ReadX 10353 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10355 NT_STATUS_OK
Close 10355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10358 NT_STATUS_OK
WriteX 10358 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10358 258 NT_STATUS_OK
WriteX 10358 0 10438 10438 NT_STATUS_OK
Close 10358 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10359 NT_STATUS_OK
Close 10359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10361 NT_STATUS_OK
Close 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10362 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10363 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10364 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10365 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
ReadX 10367 4096 4096 4096 NT_STATUS_OK
ReadX 10367 8192 4096 4096 NT_STATUS_OK
ReadX 10367 12288 8192 8192 NT_STATUS_OK
ReadX 10367 20480 8192 8192 NT_STATUS_OK
ReadX 10367 28672 8192 8192 NT_STATUS_OK
ReadX 10367 36864 8192 8192 NT_STATUS_OK
ReadX 10367 45056 8192 8192 NT_STATUS_OK
ReadX 10367 53248 8192 8192 NT_STATUS_OK
ReadX 10367 61440 8192 8192 NT_STATUS_OK
ReadX 10367 69632 8192 8192 NT_STATUS_OK
ReadX 10367 77824 8192 8192 NT_STATUS_OK
ReadX 10367 86016 8192 8192 NT_STATUS_OK
ReadX 10367 94208 8192 8192 NT_STATUS_OK
ReadX 10367 102400 8192 8192 NT_STATUS_OK
ReadX 10367 110592 8192 8192 NT_STATUS_OK
ReadX 10367 118784 8192 8192 NT_STATUS_OK
ReadX 10367 126976 8192 8192 NT_STATUS_OK
ReadX 10367 135168 8192 8192 NT_STATUS_OK
ReadX 10367 143360 8192 8192 NT_STATUS_OK
ReadX 10367 151552 8192 8192 NT_STATUS_OK
ReadX 10367 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Close 10362 NT_STATUS_OK
Close 10364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10372 NT_STATUS_OK
WriteX 10372 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10372 258 NT_STATUS_OK
WriteX 10372 0 28489 28489 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10373 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10375 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10375 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 8192 8192 NT_STATUS_OK
ReadX 10379 8192 8192 8192 NT_STATUS_OK
ReadX 10379 16384 8192 8192 NT_STATUS_OK
ReadX 10379 24576 8192 8192 NT_STATUS_OK
ReadX 10379 32768 16384 16384 NT_STATUS_OK
ReadX 10379 49152 8192 8192 NT_STATUS_OK
ReadX 10379 57344 8192 8192 NT_STATUS_OK
ReadX 10379 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10384 NT_STATUS_OK
WriteX 10384 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 29253 29253 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10386 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10391 NT_STATUS_OK
WriteX 10391 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10391 258 NT_STATUS_OK
WriteX 10391 0 30183 30183 NT_STATUS_OK
Close 10391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10394 NT_STATUS_OK
WriteX 10394 0 510 510 NT_STATUS_OK
WriteX 10394 510 512 512 NT_STATUS_OK
WriteX 10394 1022 510 510 NT_STATUS_OK
WriteX 10394 1532 510 510 NT_STATUS_OK
WriteX 10394 2042 168 168 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10395 NT_STATUS_OK
Close 10395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 61440 4096 4096 NT_STATUS_OK
ReadX 10398 126976 4096 4096 NT_STATUS_OK
WriteX 10398 0 65536 65536 NT_STATUS_OK
WriteX 10398 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 61440 4096 4096 NT_STATUS_OK
ReadX 10399 126976 4096 4096 NT_STATUS_OK
ReadX 10399 192512 4096 4096 NT_STATUS_OK
ReadX 10399 258048 4096 4096 NT_STATUS_OK
WriteX 10399 0 65536 65536 NT_STATUS_OK
WriteX 10399 65536 65536 65536 NT_STATUS_OK
WriteX 10399 131072 65536 65536 NT_STATUS_OK
WriteX 10399 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 61440 4096 4096 NT_STATUS_OK
ReadX 10400 126976 4096 4096 NT_STATUS_OK
ReadX 10400 192512 4096 4096 NT_STATUS_OK
ReadX 10400 258048 4096 4096 NT_STATUS_OK
ReadX 10400 323584 4096 4096 NT_STATUS_OK
ReadX 10400 389120 4096 4096 NT_STATUS_OK
ReadX 10400 454656 4096 4096 NT_STATUS_OK
ReadX 10400 520192 4096 4096 NT_STATUS_OK
WriteX 10400 0 65536 65536 NT_STATUS_OK
WriteX 10400 65536 65536 65536 NT_STATUS_OK
WriteX 10400 131072 65536 65536 NT_STATUS_OK
WriteX 10400 196608 65536 65536 NT_STATUS_OK
WriteX 10400 262144 65536 65536 NT_STATUS_OK
WriteX 10400 327680 65536 65536 NT_STATUS_OK
WriteX 10400 393216 65536 65536 NT_STATUS_OK
WriteX 10400 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10410 NT_STATUS_OK
Close 10410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10412 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10421 NT_STATUS_OK
Close 10421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10435 NT_STATUS_OK
Close 10435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10450 NT_STATUS_OK
Close 10450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10469 0 65536 65536 NT_STATUS_OK
WriteX 10469 65536 65536 65536 NT_STATUS_OK
WriteX 10469 131072 65536 65536 NT_STATUS_OK
WriteX 10469 196608 65536 65536 NT_STATUS_OK
WriteX 10469 262144 26634 26634 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10474 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10475 NT_STATUS_OK
Close 10475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
Close 10476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10477 NT_STATUS_OK
ReadX 10477 0 4096 4096 NT_STATUS_OK
ReadX 10477 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10477 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10482 NT_STATUS_OK
Close 10482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10487 NT_STATUS_OK
Close 10487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10494 NT_STATUS_OK
Close 10494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10496 NT_STATUS_OK
Close 10496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10505 NT_STATUS_OK
Close 10505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10515 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10525 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10529 NT_STATUS_OK
Close 10529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10539 NT_STATUS_OK
Close 10539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10542 NT_STATUS_OK
Close 10542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10544 NT_STATUS_OK
Close 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10556 NT_STATUS_OK
ReadX 10556 0 4096 4096 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 4096 4096 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
Close 10570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 4096 4096 NT_STATUS_OK
Close 10571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10601 0 4096 4096 NT_STATUS_OK
Close 10601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
ReadX 10603 4096 4096 4096 NT_STATUS_OK
ReadX 10603 8192 4096 4096 NT_STATUS_OK
ReadX 10603 12288 4096 4096 NT_STATUS_OK
ReadX 10603 16384 4096 4096 NT_STATUS_OK
ReadX 10603 20480 4096 4096 NT_STATUS_OK
ReadX 10603 24576 4096 4096 NT_STATUS_OK
ReadX 10603 28672 4096 4096 NT_STATUS_OK
ReadX 10603 32768 4096 4096 NT_STATUS_OK
ReadX 10603 36864 4096 4096 NT_STATUS_OK
ReadX 10603 40960 4096 4096 NT_STATUS_OK
ReadX 10603 45056 4096 4096 NT_STATUS_OK
ReadX 10603 49152 4096 4096 NT_STATUS_OK
ReadX 10603 53248 4096 4096 NT_STATUS_OK
ReadX 10603 57344 4096 4096 NT_STATUS_OK
ReadX 10603 61440 4096 4096 NT_STATUS_OK
ReadX 10603 65536 4096 4096 NT_STATUS_OK
ReadX 10603 69632 4096 4096 NT_STATUS_OK
ReadX 10603 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10603 1004 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Close 10603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10604 NT_STATUS_OK
SET_FILE_INFORMATION 10604 1004 NT_STATUS_OK
Close 10604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10606 NT_STATUS_OK
Close 10606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10609 NT_STATUS_OK
WriteX 10609 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10609 258 NT_STATUS_OK
WriteX 10609 0 65536 65536 NT_STATUS_OK
WriteX 10609 65536 19979 19979 NT_STATUS_OK
Close 10609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 4096 4096 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
QUERY_FILE_INFORMATION 10610 1004 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
SET_FILE_INFORMATION 10610 1004 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10612 NT_STATUS_OK
ReadX 10612 0 4096 4096 NT_STATUS_OK
Close 10611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10614 NT_STATUS_OK
ReadX 10614 0 4096 4096 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10612 NT_STATUS_OK
Close 10615 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10618 NT_STATUS_OK
Close 10618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10621 NT_STATUS_OK
WriteX 10621 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10621 258 NT_STATUS_OK
WriteX 10621 0 65536 65536 NT_STATUS_OK
WriteX 10621 65536 17654 17654 NT_STATUS_OK
Close 10621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10623 NT_STATUS_OK
SET_FILE_INFORMATION 10623 1004 NT_STATUS_OK
Close 10623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10624 NT_STATUS_OK
ReadX 10624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 0 4096 4096 NT_STATUS_OK
ReadX 10627 4096 4096 4096 NT_STATUS_OK
ReadX 10627 8192 4096 4096 NT_STATUS_OK
ReadX 10627 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10627 16384 4096 4096 NT_STATUS_OK
ReadX 10627 20480 4096 4096 NT_STATUS_OK
ReadX 10627 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
Close 10628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 4096 4096 NT_STATUS_OK
Close 10629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10630 1004 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10633 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10636 NT_STATUS_OK
WriteX 10636 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10636 258 NT_STATUS_OK
WriteX 10636 0 65536 65536 NT_STATUS_OK
WriteX 10636 65536 19490 19490 NT_STATUS_OK
Close 10636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10637 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Flush 10637 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Flush 10637 NT_STATUS_OK
QUERY_FILE_INFORMATION 10637 1004 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Flush 10637 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Flush 10637 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Flush 10637 NT_STATUS_OK
SET_FILE_INFORMATION 10637 1004 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Flush 10637 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10638 NT_STATUS_OK
SET_FILE_INFORMATION 10638 1004 NT_STATUS_OK
Close 10638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10642 0 4096 4096 NT_STATUS_OK
Close 10642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
ReadX 10644 4096 4096 4096 NT_STATUS_OK
ReadX 10644 8192 4096 4096 NT_STATUS_OK
ReadX 10644 12288 4096 4096 NT_STATUS_OK
ReadX 10644 16384 4096 4096 NT_STATUS_OK
ReadX 10644 20480 4096 4096 NT_STATUS_OK
ReadX 10644 24576 4096 4096 NT_STATUS_OK
ReadX 10644 28672 4096 4096 NT_STATUS_OK
ReadX 10644 32768 4096 4096 NT_STATUS_OK
ReadX 10644 36864 4096 4096 NT_STATUS_OK
ReadX 10644 40960 4096 4096 NT_STATUS_OK
ReadX 10644 45056 4096 4096 NT_STATUS_OK
ReadX 10644 49152 4096 4096 NT_STATUS_OK
ReadX 10644 53248 4096 4096 NT_STATUS_OK
ReadX 10644 57344 4096 4096 NT_STATUS_OK
ReadX 10644 61440 4096 4096 NT_STATUS_OK
ReadX 10644 65536 4096 4096 NT_STATUS_OK
ReadX 10644 69632 4096 4096 NT_STATUS_OK
ReadX 10644 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10644 1004 NT_STATUS_OK
WriteX 10644 0 4096 4096 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10645 NT_STATUS_OK
SET_FILE_INFORMATION 10645 1004 NT_STATUS_OK
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10650 NT_STATUS_OK
WriteX 10650 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10650 258 NT_STATUS_OK
WriteX 10650 0 65536 65536 NT_STATUS_OK
WriteX 10650 65536 8866 8866 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 0 4096 4096 NT_STATUS_OK
WriteX 10651 0 4096 4096 NT_STATUS_OK
Flush 10651 NT_STATUS_OK
SET_FILE_INFORMATION 10651 1004 NT_STATUS_OK
WriteX 10651 0 4096 4096 NT_STATUS_OK
Flush 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10655 NT_STATUS_OK
ReadX 10655 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10655 1004 NT_STATUS_OK
WriteX 10655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10655 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
WriteX 10661 0 65536 65536 NT_STATUS_OK
WriteX 10661 65536 9298 9298 NT_STATUS_OK
Close 10661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
WriteX 10662 0 4096 4096 NT_STATUS_OK
Flush 10662 NT_STATUS_OK
SET_FILE_INFORMATION 10662 1004 NT_STATUS_OK
WriteX 10662 0 4096 4096 NT_STATUS_OK
Flush 10662 NT_STATUS_OK
Close 10662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10663 NT_STATUS_OK
SET_FILE_INFORMATION 10663 1004 NT_STATUS_OK
Close 10663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10668 0 4096 4096 NT_STATUS_OK
Close 10668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10669 4096 4096 4096 NT_STATUS_OK
ReadX 10669 8192 4096 4096 NT_STATUS_OK
ReadX 10669 12288 4096 4096 NT_STATUS_OK
ReadX 10669 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10670 NT_STATUS_OK
ReadX 10670 0 4096 4096 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
Close 10671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10672 1004 NT_STATUS_OK
WriteX 10672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10672 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10678 NT_STATUS_OK
WriteX 10678 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10678 258 NT_STATUS_OK
WriteX 10678 0 65536 65536 NT_STATUS_OK
WriteX 10678 65536 11540 11540 NT_STATUS_OK
Close 10678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
WriteX 10679 0 4096 4096 NT_STATUS_OK
Flush 10679 NT_STATUS_OK
SET_FILE_INFORMATION 10679 1004 NT_STATUS_OK
WriteX 10679 0 4096 4096 NT_STATUS_OK
Flush 10679 NT_STATUS_OK
Close 10679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10680 NT_STATUS_OK
SET_FILE_INFORMATION 10680 1004 NT_STATUS_OK
Close 10680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 61440 4096 4096 NT_STATUS_OK
ReadX 10684 126976 4096 4096 NT_STATUS_OK
WriteX 10684 0 65536 65536 NT_STATUS_OK
WriteX 10684 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 61440 4096 4096 NT_STATUS_OK
ReadX 10685 126976 4096 4096 NT_STATUS_OK
ReadX 10685 192512 4096 4096 NT_STATUS_OK
ReadX 10685 258048 4096 4096 NT_STATUS_OK
WriteX 10685 0 65536 65536 NT_STATUS_OK
WriteX 10685 65536 65536 65536 NT_STATUS_OK
WriteX 10685 131072 65536 65536 NT_STATUS_OK
WriteX 10685 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10686 NT_STATUS_OK
ReadX 10686 61440 4096 4096 NT_STATUS_OK
ReadX 10686 126976 4096 4096 NT_STATUS_OK
ReadX 10686 192512 4096 4096 NT_STATUS_OK
ReadX 10686 258048 4096 4096 NT_STATUS_OK
ReadX 10686 323584 4096 4096 NT_STATUS_OK
ReadX 10686 389120 4096 4096 NT_STATUS_OK
ReadX 10686 454656 4096 4096 NT_STATUS_OK
ReadX 10686 520192 4096 4096 NT_STATUS_OK
WriteX 10686 0 65536 65536 NT_STATUS_OK
WriteX 10686 65536 65536 65536 NT_STATUS_OK
WriteX 10686 131072 65536 65536 NT_STATUS_OK
WriteX 10686 196608 65536 65536 NT_STATUS_OK
WriteX 10686 262144 65536 65536 NT_STATUS_OK
WriteX 10686 327680 65536 65536 NT_STATUS_OK
WriteX 10686 393216 65536 65536 NT_STATUS_OK
WriteX 10686 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 4096 4096 NT_STATUS_OK
ReadX 10687 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10688 NT_STATUS_OK
WriteX 10688 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10688 258 NT_STATUS_OK
WriteX 10688 0 53 53 NT_STATUS_OK
Close 10688 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10689 NT_STATUS_OK
Close 10689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10681 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Close 10685 NT_STATUS_OK
Close 10686 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10687 8192 4096 4096 NT_STATUS_OK
ReadX 10687 12288 4096 4096 NT_STATUS_OK
WriteX 10691 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10691 258 NT_STATUS_OK
ReadX 10687 16384 4096 4096 NT_STATUS_OK
ReadX 10687 20480 4096 4096 NT_STATUS_OK
WriteX 10691 0 15360 15360 NT_STATUS_OK
Close 10691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
WriteX 10692 0 4096 4096 NT_STATUS_OK
Close 10692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10693 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10695 4096 4096 4096 NT_STATUS_OK
ReadX 10695 8192 4096 4096 NT_STATUS_OK
ReadX 10695 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
ReadX 10698 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
ReadX 10699 4096 4096 4096 NT_STATUS_OK
ReadX 10699 8192 4096 4096 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10700 NT_STATUS_OK
WriteX 10700 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 258 NT_STATUS_OK
WriteX 10700 0 15360 15360 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10705 NT_STATUS_OK
SET_FILE_INFORMATION 10705 1004 NT_STATUS_OK
Close 10705 NT_STATUS_OK
WriteX 10701 0 4096 4096 NT_STATUS_OK
Close 10701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
ReadX 10708 4096 4096 4096 NT_STATUS_OK
ReadX 10708 8192 4096 4096 NT_STATUS_OK
ReadX 10708 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10708 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10708 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10710 NT_STATUS_OK
WriteX 10710 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 258 NT_STATUS_OK
WriteX 10710 0 53 53 NT_STATUS_OK
Close 10710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10709 4096 4096 4096 NT_STATUS_OK
ReadX 10709 8192 4096 4096 NT_STATUS_OK
ReadX 10709 12288 4096 4096 NT_STATUS_OK
WriteX 10713 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 258 NT_STATUS_OK
WriteX 10713 0 12006 12006 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10714 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10714 1004 NT_STATUS_OK
WriteX 10714 0 4096 4096 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10718 NT_STATUS_OK
Close 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10717 4096 4096 4096 NT_STATUS_OK
ReadX 10717 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10720 NT_STATUS_OK
WriteX 10720 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10720 258 NT_STATUS_OK
WriteX 10720 0 11991 11991 NT_STATUS_OK
Close 10720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10721 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10722 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
Close 10725 NT_STATUS_OK
WriteX 10721 0 4096 4096 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10726 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10729 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10728 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10728 1004 NT_STATUS_OK
ReadX 10728 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10728 1004 NT_STATUS_OK
WriteX 10728 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10728 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10728 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10728 1004 NT_STATUS_OK
Close 10704 NT_STATUS_OK
WriteX 10708 0 19054 19054 NT_STATUS_OK
WriteX 10728 0 12288 12288 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 61440 61440 NT_STATUS_OK
ReadX 10735 61440 4096 4096 NT_STATUS_OK
ReadX 10735 65536 61440 61440 NT_STATUS_OK
ReadX 10735 126976 4096 4096 NT_STATUS_OK
ReadX 10735 131072 61440 61440 NT_STATUS_OK
ReadX 10735 192512 4096 4096 NT_STATUS_OK
ReadX 10735 196608 61440 61440 NT_STATUS_OK
ReadX 10735 258048 4096 4096 NT_STATUS_OK
ReadX 10735 262144 61440 61440 NT_STATUS_OK
ReadX 10735 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 61440 61440 NT_STATUS_OK
ReadX 10736 61440 4096 4096 NT_STATUS_OK
ReadX 10736 65536 61440 61440 NT_STATUS_OK
ReadX 10736 126976 4096 4096 NT_STATUS_OK
ReadX 10736 131072 61440 61440 NT_STATUS_OK
ReadX 10736 192512 4096 4096 NT_STATUS_OK
ReadX 10736 196608 61440 61440 NT_STATUS_OK
ReadX 10736 258048 4096 4096 NT_STATUS_OK
ReadX 10736 262144 61440 61440 NT_STATUS_OK
ReadX 10736 323584 4096 4096 NT_STATUS_OK
ReadX 10736 327680 61440 61440 NT_STATUS_OK
ReadX 10736 389120 4096 4096 NT_STATUS_OK
ReadX 10736 393216 61440 61440 NT_STATUS_OK
ReadX 10736 454656 4096 4096 NT_STATUS_OK
ReadX 10736 458752 61440 61440 NT_STATUS_OK
ReadX 10736 520192 4096 4096 NT_STATUS_OK
ReadX 10736 524288 61440 61440 NT_STATUS_OK
ReadX 10736 585728 4096 4096 NT_STATUS_OK
ReadX 10736 589824 61440 61440 NT_STATUS_OK
ReadX 10736 651264 4096 4096 NT_STATUS_OK
ReadX 10736 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 61440 61440 NT_STATUS_OK
ReadX 10737 61440 4096 4096 NT_STATUS_OK
ReadX 10737 65536 61440 61440 NT_STATUS_OK
ReadX 10737 126976 4096 4096 NT_STATUS_OK
ReadX 10737 131072 61440 61440 NT_STATUS_OK
ReadX 10737 192512 4096 4096 NT_STATUS_OK
ReadX 10737 196608 61440 61440 NT_STATUS_OK
ReadX 10737 258048 4096 4096 NT_STATUS_OK
ReadX 10737 262144 61440 61440 NT_STATUS_OK
ReadX 10737 323584 4096 4096 NT_STATUS_OK
ReadX 10737 327680 61440 61440 NT_STATUS_OK
ReadX 10737 389120 4096 4096 NT_STATUS_OK
ReadX 10737 393216 61440 61440 NT_STATUS_OK
ReadX 10737 454656 4096 4096 NT_STATUS_OK
ReadX 10737 458752 61440 61440 NT_STATUS_OK
ReadX 10737 520192 4096 4096 NT_STATUS_OK
ReadX 10737 524288 61440 61440 NT_STATUS_OK
ReadX 10737 585728 4096 4096 NT_STATUS_OK
ReadX 10737 589824 61440 61440 NT_STATUS_OK
ReadX 10737 651264 4096 4096 NT_STATUS_OK
ReadX 10737 655360 61440 61440 NT_STATUS_OK
ReadX 10737 716800 4096 4096 NT_STATUS_OK
ReadX 10737 720896 61440 61440 NT_STATUS_OK
ReadX 10737 782336 4096 4096 NT_STATUS_OK
ReadX 10737 786432 61440 61440 NT_STATUS_OK
ReadX 10737 847872 4096 4096 NT_STATUS_OK
ReadX 10737 851968 61440 61440 NT_STATUS_OK
ReadX 10737 913408 4096 4096 NT_STATUS_OK
ReadX 10737 917504 61440 61440 NT_STATUS_OK
ReadX 10737 978944 4096 4096 NT_STATUS_OK
ReadX 10737 983040 61440 61440 NT_STATUS_OK
ReadX 10737 1044480 4096 4096 NT_STATUS_OK
ReadX 10737 1048576 61440 61440 NT_STATUS_OK
ReadX 10737 1110016 4096 4096 NT_STATUS_OK
ReadX 10737 1114112 61440 61440 NT_STATUS_OK
ReadX 10737 1175552 4096 4096 NT_STATUS_OK
ReadX 10737 1179648 61440 61440 NT_STATUS_OK
ReadX 10737 1241088 4096 4096 NT_STATUS_OK
ReadX 10737 1245184 61440 61440 NT_STATUS_OK
ReadX 10737 1306624 4096 4096 NT_STATUS_OK
ReadX 10737 1310720 61440 61440 NT_STATUS_OK
ReadX 10737 1372160 4096 4096 NT_STATUS_OK
ReadX 10737 1376256 61440 61440 NT_STATUS_OK
ReadX 10737 1437696 4096 4096 NT_STATUS_OK
ReadX 10737 1441792 61440 61440 NT_STATUS_OK
ReadX 10737 1503232 4096 4096 NT_STATUS_OK
ReadX 10737 1507328 61440 61440 NT_STATUS_OK
ReadX 10737 1568768 4096 4096 NT_STATUS_OK
ReadX 10737 1572864 61440 61440 NT_STATUS_OK
ReadX 10737 1634304 4096 4096 NT_STATUS_OK
ReadX 10737 1638400 61440 61440 NT_STATUS_OK
ReadX 10737 1699840 4096 4096 NT_STATUS_OK
ReadX 10737 1703936 61440 61440 NT_STATUS_OK
ReadX 10737 1765376 4096 4096 NT_STATUS_OK
ReadX 10737 1769472 61440 61440 NT_STATUS_OK
ReadX 10737 1830912 4096 4096 NT_STATUS_OK
ReadX 10737 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10744 NT_STATUS_OK
QUERY_FILE_INFORMATION 10744 1004 NT_STATUS_OK
WriteX 10744 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10744 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10746 NT_STATUS_OK
WriteX 10746 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10746 258 NT_STATUS_OK
WriteX 10746 0 491 491 NT_STATUS_OK
Close 10746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10744 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10750 NT_STATUS_OK
WriteX 10750 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10750 258 NT_STATUS_OK
WriteX 10750 0 543 543 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Close 10736 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10756 NT_STATUS_OK
ReadX 10756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10764 NT_STATUS_OK
QUERY_FILE_INFORMATION 10764 1004 NT_STATUS_OK
WriteX 10764 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10764 258 NT_STATUS_OK
WriteX 10764 0 2048 2048 NT_STATUS_OK
Close 10764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10765 NT_STATUS_OK
ReadX 10765 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10765 0 4096 4096 NT_STATUS_OK
Flush 10765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10765 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10770 NT_STATUS_OK
WriteX 10770 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10770 258 NT_STATUS_OK
WriteX 10770 0 2048 2048 NT_STATUS_OK
Close 10770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10771 NT_STATUS_OK
ReadX 10771 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10776 NT_STATUS_OK
WriteX 10776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 2048 2048 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 2048 2048 NT_STATUS_OK
ReadX 10755 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10771 0 4096 4096 NT_STATUS_OK
WriteX 10755 0 8192 8192 NT_STATUS_OK
WriteX 10756 0 4096 4096 NT_STATUS_OK
WriteX 10757 0 4096 4096 NT_STATUS_OK
ReadX 10771 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10781 NT_STATUS_OK
QUERY_FILE_INFORMATION 10781 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10756 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Close 10771 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10784 NT_STATUS_OK
ReadX 10784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10790 NT_STATUS_OK
ReadX 10790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10801 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 1004 NT_STATUS_OK
WriteX 10801 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 2048 2048 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10809 NT_STATUS_OK
QUERY_FILE_INFORMATION 10809 1004 NT_STATUS_OK
WriteX 10809 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10809 258 NT_STATUS_OK
WriteX 10809 0 2048 2048 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10810 0 4096 4096 NT_STATUS_OK
Flush 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10810 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10804 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10812 NT_STATUS_OK
WriteX 10812 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10812 258 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10815 NT_STATUS_OK
WriteX 10815 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10815 258 NT_STATUS_OK
WriteX 10815 0 4096 4096 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10816 0 4096 4096 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10791 NT_STATUS_OK
Close 10784 NT_STATUS_OK
Close 10785 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10823 NT_STATUS_OK
WriteX 10823 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10823 258 NT_STATUS_OK
WriteX 10823 0 2048 2048 NT_STATUS_OK
Close 10823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10838 NT_STATUS_OK
QUERY_FILE_INFORMATION 10838 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10840 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10848 NT_STATUS_OK
ReadX 10848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10860 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
WriteX 10860 0 2048 2048 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10861 NT_STATUS_OK
ReadX 10861 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10865 NT_STATUS_OK
ReadX 10865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10867 NT_STATUS_OK
ReadX 10867 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10872 NT_STATUS_OK
QUERY_FILE_INFORMATION 10872 1004 NT_STATUS_OK
WriteX 10872 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10872 258 NT_STATUS_OK
WriteX 10872 0 2048 2048 NT_STATUS_OK
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10880 NT_STATUS_OK
QUERY_FILE_INFORMATION 10880 1004 NT_STATUS_OK
WriteX 10880 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10880 258 NT_STATUS_OK
WriteX 10880 0 2048 2048 NT_STATUS_OK
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
Flush 10861 NT_STATUS_OK
WriteX 10873 0 4096 4096 NT_STATUS_OK
Flush 10873 NT_STATUS_OK
WriteX 10881 0 4096 4096 NT_STATUS_OK
Flush 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10873 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10881 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10863 4096 16384 16384 NT_STATUS_OK
ReadX 10843 4096 16384 16384 NT_STATUS_OK
ReadX 10875 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 2048 2048 NT_STATUS_OK
WriteX 10883 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10884 NT_STATUS_OK
QUERY_FILE_INFORMATION 10884 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Close 10863 NT_STATUS_OK
Close 10864 NT_STATUS_OK
Close 10865 NT_STATUS_OK
Close 10866 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Close 10843 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10886 NT_STATUS_OK
QUERY_FILE_INFORMATION 10886 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10888 NT_STATUS_OK
QUERY_FILE_INFORMATION 10888 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10895 NT_STATUS_OK
ReadX 10895 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10891 4096 16384 16384 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
WriteX 10892 0 4096 4096 NT_STATUS_OK
WriteX 10893 0 4096 4096 NT_STATUS_OK
WriteX 10894 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10903 NT_STATUS_OK
ReadX 10903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 8192 8192 NT_STATUS_OK
ReadX 10897 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10911 0 4096 4096 NT_STATUS_OK
ReadX 10911 4096 4096 4096 NT_STATUS_OK
ReadX 10911 8192 4096 4096 NT_STATUS_OK
WriteX 10897 0 4096 4096 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10912 0 4096 4096 NT_STATUS_OK
ReadX 10912 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
WriteX 10892 0 4096 4096 NT_STATUS_OK
WriteX 10893 0 4096 4096 NT_STATUS_OK
WriteX 10894 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10917 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 1004 NT_STATUS_OK
WriteX 10917 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
WriteX 10917 0 2048 2048 NT_STATUS_OK
Close 10917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10918 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10918 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
ReadX 10920 4096 4096 4096 NT_STATUS_OK
WriteX 10920 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10918 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
ReadX 10922 4096 4096 4096 NT_STATUS_OK
WriteX 10922 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10923 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10910 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10894 NT_STATUS_OK
Close 10903 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Close 10906 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10897 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10899 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10911 NT_STATUS_OK
Close 10912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10925 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10925 0 4096 4096 NT_STATUS_OK
ReadX 10925 4096 4096 4096 NT_STATUS_OK
ReadX 10925 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
ReadX 10926 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10943 NT_STATUS_OK
QUERY_FILE_INFORMATION 10943 1004 NT_STATUS_OK
WriteX 10943 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10943 258 NT_STATUS_OK
WriteX 10943 0 2048 2048 NT_STATUS_OK
Close 10943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10944 NT_STATUS_OK
ReadX 10944 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10944 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10948 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10949 NT_STATUS_OK
QUERY_FILE_INFORMATION 10949 1004 NT_STATUS_OK
WriteX 10949 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10949 258 NT_STATUS_OK
WriteX 10949 0 2048 2048 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10950 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10933 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10951 NT_STATUS_OK
QUERY_FILE_INFORMATION 10951 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10953 NT_STATUS_OK
QUERY_FILE_INFORMATION 10953 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 61440 4096 4096 NT_STATUS_OK
ReadX 10955 126976 4096 4096 NT_STATUS_OK
WriteX 10955 0 65536 65536 NT_STATUS_OK
WriteX 10955 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 61440 4096 4096 NT_STATUS_OK
ReadX 10956 126976 4096 4096 NT_STATUS_OK
ReadX 10956 192512 4096 4096 NT_STATUS_OK
ReadX 10956 258048 4096 4096 NT_STATUS_OK
WriteX 10956 0 65536 65536 NT_STATUS_OK
WriteX 10956 65536 65536 65536 NT_STATUS_OK
WriteX 10956 131072 65536 65536 NT_STATUS_OK
WriteX 10956 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 61440 4096 4096 NT_STATUS_OK
ReadX 10957 126976 4096 4096 NT_STATUS_OK
ReadX 10957 192512 4096 4096 NT_STATUS_OK
ReadX 10957 258048 4096 4096 NT_STATUS_OK
ReadX 10957 323584 4096 4096 NT_STATUS_OK
ReadX 10957 389120 4096 4096 NT_STATUS_OK
ReadX 10957 454656 4096 4096 NT_STATUS_OK
ReadX 10957 520192 4096 4096 NT_STATUS_OK
WriteX 10957 0 65536 65536 NT_STATUS_OK
WriteX 10957 65536 65536 65536 NT_STATUS_OK
WriteX 10957 131072 65536 65536 NT_STATUS_OK
WriteX 10957 196608 65536 65536 NT_STATUS_OK
WriteX 10957 262144 65536 65536 NT_STATUS_OK
WriteX 10957 327680 65536 65536 NT_STATUS_OK
WriteX 10957 393216 65536 65536 NT_STATUS_OK
WriteX 10957 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10958 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10958 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10958 8192 4096 4096 NT_STATUS_OK
ReadX 10958 12288 4096 4096 NT_STATUS_OK
ReadX 10958 16384 4096 4096 NT_STATUS_OK
ReadX 10958 20480 4096 4096 NT_STATUS_OK
ReadX 10958 24576 4096 4096 NT_STATUS_OK
ReadX 10958 28672 4096 4096 NT_STATUS_OK
ReadX 10958 32768 4096 4096 NT_STATUS_OK
ReadX 10958 36864 4096 4096 NT_STATUS_OK
ReadX 10958 40960 4096 4096 NT_STATUS_OK
ReadX 10958 45056 4096 4096 NT_STATUS_OK
ReadX 10958 49152 4096 4096 NT_STATUS_OK
ReadX 10958 53248 4096 4096 NT_STATUS_OK
ReadX 10958 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10958 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10959 NT_STATUS_OK
Close 10959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Close 10957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10961 NT_STATUS_OK
WriteX 10961 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10961 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10961 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10961 1004 NT_STATUS_OK
WriteX 10961 0 57088 57088 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
Flush 10961 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10962 NT_STATUS_OK
SET_FILE_INFORMATION 10962 1004 NT_STATUS_OK
Close 10962 NT_STATUS_OK
SET_FILE_INFORMATION 10961 1004 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
Close 10961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10965 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10966 NT_STATUS_OK
WriteX 10966 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10966 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10966 1004 NT_STATUS_OK
WriteX 10966 0 51456 51456 NT_STATUS_OK
WriteX 10966 0 4096 4096 NT_STATUS_OK
Flush 10966 NT_STATUS_OK
SET_FILE_INFORMATION 10966 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10966 1004 NT_STATUS_OK
WriteX 10966 0 4096 4096 NT_STATUS_OK
Close 10966 NT_STATUS_OK
Close 10965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10970 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10975 NT_STATUS_OK
WriteX 10975 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10975 258 NT_STATUS_OK
WriteX 10975 0 53077 53077 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10976 NT_STATUS_OK
WriteX 10976 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10976 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10976 1004 NT_STATUS_OK
WriteX 10976 0 65536 65536 NT_STATUS_OK
WriteX 10976 65536 1856 1856 NT_STATUS_OK
WriteX 10976 0 4096 4096 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
SET_FILE_INFORMATION 10976 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10976 1004 NT_STATUS_OK
WriteX 10976 0 4096 4096 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Close 10970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10978 NT_STATUS_OK
Close 10978 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10985 NT_STATUS_OK
WriteX 10985 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10985 258 NT_STATUS_OK
WriteX 10985 0 7983 7983 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10990 NT_STATUS_OK
WriteX 10990 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10990 258 NT_STATUS_OK
WriteX 10990 0 65536 65536 NT_STATUS_OK
WriteX 10990 65536 65536 65536 NT_STATUS_OK
WriteX 10990 131072 65536 65536 NT_STATUS_OK
WriteX 10990 196608 65536 65536 NT_STATUS_OK
WriteX 10990 262144 65536 65536 NT_STATUS_OK
WriteX 10990 327680 65536 65536 NT_STATUS_OK
WriteX 10990 393216 65536 65536 NT_STATUS_OK
WriteX 10990 458752 46731 46731 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10991 NT_STATUS_OK
WriteX 10991 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10991 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10980 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10991 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10991 1004 NT_STATUS_OK
WriteX 10991 0 65536 65536 NT_STATUS_OK
WriteX 10991 65536 22848 22848 NT_STATUS_OK
WriteX 10991 0 4096 4096 NT_STATUS_OK
Flush 10991 NT_STATUS_OK
SET_FILE_INFORMATION 10991 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10991 1004 NT_STATUS_OK
WriteX 10991 0 4096 4096 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10995 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10996 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10996 1004 NT_STATUS_OK
ReadX 10996 8192 4096 4096 NT_STATUS_OK
ReadX 10996 12288 4096 4096 NT_STATUS_OK
ReadX 10996 16384 4096 4096 NT_STATUS_OK
ReadX 10996 20480 4096 4096 NT_STATUS_OK
ReadX 10996 24576 4096 4096 NT_STATUS_OK
ReadX 10996 28672 4096 4096 NT_STATUS_OK
ReadX 10996 32768 4096 4096 NT_STATUS_OK
ReadX 10996 36864 4096 4096 NT_STATUS_OK
ReadX 10996 40960 4096 4096 NT_STATUS_OK
ReadX 10996 45056 4096 4096 NT_STATUS_OK
ReadX 10996 49152 4096 4096 NT_STATUS_OK
ReadX 10996 53248 4096 4096 NT_STATUS_OK
ReadX 10996 57344 4096 4096 NT_STATUS_OK
ReadX 10996 61440 4096 4096 NT_STATUS_OK
ReadX 10996 65536 4096 4096 NT_STATUS_OK
ReadX 10996 69632 4096 4096 NT_STATUS_OK
ReadX 10996 73728 4096 4096 NT_STATUS_OK
ReadX 10996 77824 4096 4096 NT_STATUS_OK
ReadX 10996 81920 4096 4096 NT_STATUS_OK
ReadX 10996 86016 4096 4096 NT_STATUS_OK
ReadX 10996 90112 4096 4096 NT_STATUS_OK
ReadX 10996 94208 4096 4096 NT_STATUS_OK
ReadX 10996 98304 4096 4096 NT_STATUS_OK
ReadX 10996 102400 4096 4096 NT_STATUS_OK
ReadX 10996 106496 4096 4096 NT_STATUS_OK
ReadX 10996 110592 4096 4096 NT_STATUS_OK
ReadX 10996 114688 4096 4096 NT_STATUS_OK
ReadX 10996 118784 4096 4096 NT_STATUS_OK
ReadX 10996 122880 4096 4096 NT_STATUS_OK
ReadX 10996 126976 4096 4096 NT_STATUS_OK
ReadX 10996 131072 4096 4096 NT_STATUS_OK
ReadX 10996 135168 4096 4096 NT_STATUS_OK
ReadX 10996 139264 4096 4096 NT_STATUS_OK
ReadX 10996 143360 4096 4096 NT_STATUS_OK
ReadX 10996 147456 4096 4096 NT_STATUS_OK
ReadX 10996 151552 4096 4096 NT_STATUS_OK
ReadX 10996 155648 4096 4096 NT_STATUS_OK
ReadX 10996 159744 4096 4096 NT_STATUS_OK
ReadX 10996 163840 4096 4096 NT_STATUS_OK
ReadX 10996 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10996 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10999 NT_STATUS_OK
WriteX 10999 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10999 258 NT_STATUS_OK
Close 10996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11000 NT_STATUS_OK
SET_FILE_INFORMATION 11000 1004 NT_STATUS_OK
Close 11000 NT_STATUS_OK
WriteX 10999 0 42388 42388 NT_STATUS_OK
Close 10999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11001 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
ReadX 11003 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11004 NT_STATUS_OK
WriteX 11004 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11004 258 NT_STATUS_OK
SET_FILE_INFORMATION 11004 1004 NT_STATUS_OK
WriteX 11004 0 42652 42652 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11010 NT_STATUS_OK
Close 11010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11013 NT_STATUS_OK
WriteX 11013 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 65536 65536 NT_STATUS_OK
WriteX 11013 65536 49 49 NT_STATUS_OK
Close 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 61440 61440 NT_STATUS_OK
ReadX 11014 61440 4096 4096 NT_STATUS_OK
ReadX 11014 65536 61440 61440 NT_STATUS_OK
ReadX 11014 126976 4096 4096 NT_STATUS_OK
ReadX 11014 131072 61440 61440 NT_STATUS_OK
ReadX 11014 192512 4096 4096 NT_STATUS_OK
ReadX 11014 196608 61440 61440 NT_STATUS_OK
ReadX 11014 258048 4096 4096 NT_STATUS_OK
ReadX 11014 262144 61440 61440 NT_STATUS_OK
ReadX 11014 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 61440 61440 NT_STATUS_OK
ReadX 11015 61440 4096 4096 NT_STATUS_OK
ReadX 11015 65536 61440 61440 NT_STATUS_OK
ReadX 11015 126976 4096 4096 NT_STATUS_OK
ReadX 11015 131072 61440 61440 NT_STATUS_OK
ReadX 11015 192512 4096 4096 NT_STATUS_OK
ReadX 11015 196608 61440 61440 NT_STATUS_OK
ReadX 11015 258048 4096 4096 NT_STATUS_OK
ReadX 11015 262144 61440 61440 NT_STATUS_OK
ReadX 11015 323584 4096 4096 NT_STATUS_OK
ReadX 11015 327680 61440 61440 NT_STATUS_OK
ReadX 11015 389120 4096 4096 NT_STATUS_OK
ReadX 11015 393216 61440 61440 NT_STATUS_OK
ReadX 11015 454656 4096 4096 NT_STATUS_OK
ReadX 11015 458752 61440 61440 NT_STATUS_OK
ReadX 11015 520192 4096 4096 NT_STATUS_OK
ReadX 11015 524288 61440 61440 NT_STATUS_OK
ReadX 11015 585728 4096 4096 NT_STATUS_OK
ReadX 11015 589824 61440 61440 NT_STATUS_OK
ReadX 11015 651264 4096 4096 NT_STATUS_OK
ReadX 11015 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 61440 61440 NT_STATUS_OK
ReadX 11016 61440 4096 4096 NT_STATUS_OK
ReadX 11016 65536 61440 61440 NT_STATUS_OK
ReadX 11016 126976 4096 4096 NT_STATUS_OK
ReadX 11016 131072 61440 61440 NT_STATUS_OK
ReadX 11016 192512 4096 4096 NT_STATUS_OK
ReadX 11016 196608 61440 61440 NT_STATUS_OK
ReadX 11016 258048 4096 4096 NT_STATUS_OK
ReadX 11016 262144 61440 61440 NT_STATUS_OK
ReadX 11016 323584 4096 4096 NT_STATUS_OK
ReadX 11016 327680 61440 61440 NT_STATUS_OK
ReadX 11016 389120 4096 4096 NT_STATUS_OK
ReadX 11016 393216 61440 61440 NT_STATUS_OK
ReadX 11016 454656 4096 4096 NT_STATUS_OK
ReadX 11016 458752 61440 61440 NT_STATUS_OK
ReadX 11016 520192 4096 4096 NT_STATUS_OK
ReadX 11016 524288 61440 61440 NT_STATUS_OK
ReadX 11016 585728 4096 4096 NT_STATUS_OK
ReadX 11016 589824 61440 61440 NT_STATUS_OK
ReadX 11016 651264 4096 4096 NT_STATUS_OK
ReadX 11016 655360 61440 61440 NT_STATUS_OK
ReadX 11016 716800 4096 4096 NT_STATUS_OK
ReadX 11016 720896 61440 61440 NT_STATUS_OK
ReadX 11016 782336 4096 4096 NT_STATUS_OK
ReadX 11016 786432 61440 61440 NT_STATUS_OK
ReadX 11016 847872 4096 4096 NT_STATUS_OK
ReadX 11016 851968 61440 61440 NT_STATUS_OK
ReadX 11016 913408 4096 4096 NT_STATUS_OK
ReadX 11016 917504 61440 61440 NT_STATUS_OK
ReadX 11016 978944 4096 4096 NT_STATUS_OK
ReadX 11016 983040 61440 61440 NT_STATUS_OK
ReadX 11016 1044480 4096 4096 NT_STATUS_OK
ReadX 11016 1048576 61440 61440 NT_STATUS_OK
ReadX 11016 1110016 4096 4096 NT_STATUS_OK
ReadX 11016 1114112 61440 61440 NT_STATUS_OK
ReadX 11016 1175552 4096 4096 NT_STATUS_OK
ReadX 11016 1179648 61440 61440 NT_STATUS_OK
ReadX 11016 1241088 4096 4096 NT_STATUS_OK
ReadX 11016 1245184 61440 61440 NT_STATUS_OK
ReadX 11016 1306624 4096 4096 NT_STATUS_OK
ReadX 11016 1310720 61440 61440 NT_STATUS_OK
ReadX 11016 1372160 4096 4096 NT_STATUS_OK
ReadX 11016 1376256 61440 61440 NT_STATUS_OK
ReadX 11016 1437696 4096 4096 NT_STATUS_OK
ReadX 11016 1441792 61440 61440 NT_STATUS_OK
ReadX 11016 1503232 4096 4096 NT_STATUS_OK
ReadX 11016 1507328 61440 61440 NT_STATUS_OK
ReadX 11016 1568768 4096 4096 NT_STATUS_OK
ReadX 11016 1572864 61440 61440 NT_STATUS_OK
ReadX 11016 1634304 4096 4096 NT_STATUS_OK
ReadX 11016 1638400 61440 61440 NT_STATUS_OK
ReadX 11016 1699840 4096 4096 NT_STATUS_OK
ReadX 11016 1703936 61440 61440 NT_STATUS_OK
ReadX 11016 1765376 4096 4096 NT_STATUS_OK
ReadX 11016 1769472 61440 61440 NT_STATUS_OK
ReadX 11016 1830912 4096 4096 NT_STATUS_OK
ReadX 11016 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11018 NT_STATUS_OK
QUERY_FILE_INFORMATION 11018 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11018 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11018 1005 NT_STATUS_OK
ReadX 11018 2156 24 24 NT_STATUS_OK
ReadX 11018 2139 276 276 NT_STATUS_OK
ReadX 11018 2136 14 14 NT_STATUS_OK
ReadX 11018 2136 7 7 NT_STATUS_OK
ReadX 11018 2138 12 12 NT_STATUS_OK
ReadX 11018 2137 8 8 NT_STATUS_OK
ReadX 11018 2135 15 15 NT_STATUS_OK
ReadX 11018 0 16 16 NT_STATUS_OK
ReadX 11018 16 2048 2048 NT_STATUS_OK
ReadX 11018 2064 2048 2048 NT_STATUS_OK
ReadX 11018 257 2048 2048 NT_STATUS_OK
ReadX 11018 385 2048 2048 NT_STATUS_OK
ReadX 11018 513 2048 2048 NT_STATUS_OK
ReadX 11018 641 2048 2048 NT_STATUS_OK
ReadX 11018 769 2048 2048 NT_STATUS_OK
ReadX 11018 897 2048 2048 NT_STATUS_OK
ReadX 11018 1025 2048 2048 NT_STATUS_OK
ReadX 11018 1153 2048 2048 NT_STATUS_OK
ReadX 11018 1281 2048 2048 NT_STATUS_OK
ReadX 11018 1409 2048 2048 NT_STATUS_OK
ReadX 11018 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11023 NT_STATUS_OK
WriteX 11023 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11023 258 NT_STATUS_OK
WriteX 11023 0 10575 10575 NT_STATUS_OK
Flush 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11024 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
Close 11018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11028 NT_STATUS_OK
LockX 11028 2147483538 1 NT_STATUS_OK
UnlockX 11028 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 1005 NT_STATUS_OK
ReadX 11028 0 512 512 NT_STATUS_OK
ReadX 11028 512 512 512 NT_STATUS_OK
ReadX 11028 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 1004 NT_STATUS_OK
Close 11028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11029 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 1005 NT_STATUS_OK
ReadX 11029 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11030 NT_STATUS_OK
LockX 11030 2147483538 1 NT_STATUS_OK
UnlockX 11030 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11030 1005 NT_STATUS_OK
ReadX 11030 0 512 512 NT_STATUS_OK
ReadX 11030 512 512 512 NT_STATUS_OK
ReadX 11030 1024 512 512 NT_STATUS_OK
ReadX 11030 288 20 20 NT_STATUS_OK
ReadX 11030 308 2084 2084 NT_STATUS_OK
ReadX 11030 388 2084 2084 NT_STATUS_OK
ReadX 11030 388 2084 2084 NT_STATUS_OK
ReadX 11017 2157 1386 1386 NT_STATUS_OK
ReadX 11030 2472 399 399 NT_STATUS_OK
ReadX 11030 3072 1536 1536 NT_STATUS_OK
ReadX 11030 544 149 149 NT_STATUS_OK
ReadX 11030 693 485 485 NT_STATUS_OK
Close 11030 NT_STATUS_OK
ReadX 11017 2157 4096 4096 NT_STATUS_OK
ReadX 11017 6253 4096 4096 NT_STATUS_OK
ReadX 11017 10349 4096 4096 NT_STATUS_OK
ReadX 11017 14445 4096 4096 NT_STATUS_OK
ReadX 11017 18541 4096 4096 NT_STATUS_OK
ReadX 11017 22637 256 256 NT_STATUS_OK
ReadX 11017 22893 4096 4096 NT_STATUS_OK
ReadX 11017 26989 4096 4096 NT_STATUS_OK
ReadX 11017 31085 4096 4096 NT_STATUS_OK
ReadX 11017 35181 4096 4096 NT_STATUS_OK
ReadX 11017 39277 4096 4096 NT_STATUS_OK
ReadX 11017 43373 4096 4096 NT_STATUS_OK
ReadX 11017 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11017 2157 1024 1024 NT_STATUS_OK
ReadX 11017 1667 4688 4688 NT_STATUS_OK
ReadX 11017 6355 3516 3516 NT_STATUS_OK
ReadX 11017 9871 16384 16384 NT_STATUS_OK
ReadX 11017 26255 3771 3771 NT_STATUS_OK
ReadX 11017 30026 2048 2048 NT_STATUS_OK
ReadX 11017 32074 1024 1024 NT_STATUS_OK
ReadX 11017 33098 6652 6652 NT_STATUS_OK
ReadX 11017 39750 16384 16384 NT_STATUS_OK
ReadX 11017 56134 10496 10496 NT_STATUS_OK
ReadX 11017 66630 1784 1784 NT_STATUS_OK
ReadX 11017 68414 90 90 NT_STATUS_OK
ReadX 11017 68504 273 273 NT_STATUS_OK
ReadX 11017 68777 1600 1600 NT_STATUS_OK
ReadX 11017 70377 640 640 NT_STATUS_OK
ReadX 11017 71017 1280 1280 NT_STATUS_OK
ReadX 11017 72297 8464 8464 NT_STATUS_OK
ReadX 11017 80761 158 158 NT_STATUS_OK
ReadX 11017 80919 912 912 NT_STATUS_OK
ReadX 11017 81831 1980 1980 NT_STATUS_OK
ReadX 11017 83811 2256 2256 NT_STATUS_OK
ReadX 11017 86067 400 400 NT_STATUS_OK
ReadX 11017 86467 252 252 NT_STATUS_OK
ReadX 11017 86719 42 42 NT_STATUS_OK
ReadX 11017 86761 725 725 NT_STATUS_OK
ReadX 11017 2009 512 512 NT_STATUS_OK
ReadX 11017 3895 9 9 NT_STATUS_OK
ReadX 11017 3781 46 46 NT_STATUS_OK
ReadX 11017 4059 92 92 NT_STATUS_OK
ReadX 11017 3781 92 92 NT_STATUS_OK
ReadX 11017 3986 184 184 NT_STATUS_OK
ReadX 11017 3987 16384 16384 NT_STATUS_OK
ReadX 11017 3902 16384 16384 NT_STATUS_OK
ReadX 11017 3781 10240 10240 NT_STATUS_OK
ReadX 11017 3821 16384 16384 NT_STATUS_OK
ReadX 11017 3891 935 935 NT_STATUS_OK
ReadX 11017 4060 10240 10240 NT_STATUS_OK
ReadX 11017 4059 184 184 NT_STATUS_OK
ReadX 11017 256 184 184 NT_STATUS_OK
ReadX 11017 256 1026 1026 NT_STATUS_OK
ReadX 11017 3901 326 326 NT_STATUS_OK
ReadX 11017 3899 652 652 NT_STATUS_OK
ReadX 11017 256 2 2 NT_STATUS_OK
ReadX 11017 258 4948 4948 NT_STATUS_OK
Close 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11032 NT_STATUS_OK
Close 11032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11035 NT_STATUS_OK
WriteX 11035 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11035 258 NT_STATUS_OK
WriteX 11035 0 65536 65536 NT_STATUS_OK
WriteX 11035 65536 65536 65536 NT_STATUS_OK
WriteX 11035 131072 65536 65536 NT_STATUS_OK
WriteX 11035 196608 65536 65536 NT_STATUS_OK
WriteX 11035 262144 65536 65536 NT_STATUS_OK
WriteX 11035 327680 65536 65536 NT_STATUS_OK
WriteX 11035 393216 65536 65536 NT_STATUS_OK
WriteX 11035 458752 65536 65536 NT_STATUS_OK
WriteX 11035 524288 65536 65536 NT_STATUS_OK
WriteX 11035 589824 35257 35257 NT_STATUS_OK
Close 11035 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11037 NT_STATUS_OK
Close 11037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11040 NT_STATUS_OK
WriteX 11040 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11040 258 NT_STATUS_OK
WriteX 11040 0 65536 65536 NT_STATUS_OK
WriteX 11040 65536 65536 65536 NT_STATUS_OK
WriteX 11040 131072 65536 65536 NT_STATUS_OK
WriteX 11040 196608 65536 65536 NT_STATUS_OK
WriteX 11040 262144 65536 65536 NT_STATUS_OK
WriteX 11040 327680 65536 65536 NT_STATUS_OK
WriteX 11040 393216 65536 65536 NT_STATUS_OK
WriteX 11040 458752 65536 65536 NT_STATUS_OK
WriteX 11040 524288 65536 65536 NT_STATUS_OK
WriteX 11040 589824 57598 57598 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11042 NT_STATUS_OK
WriteX 11042 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11042 258 NT_STATUS_OK
WriteX 11042 0 12543 12543 NT_STATUS_OK
Flush 11042 NT_STATUS_OK
Close 11042 NT_STATUS_OK
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11044 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11048 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 1005 NT_STATUS_OK
ReadX 11048 1938 24 24 NT_STATUS_OK
ReadX 11048 1920 276 276 NT_STATUS_OK
ReadX 11048 1918 14 14 NT_STATUS_OK
ReadX 11048 1918 7 7 NT_STATUS_OK
ReadX 11048 1919 12 12 NT_STATUS_OK
ReadX 11048 1919 8 8 NT_STATUS_OK
ReadX 11048 1917 15 15 NT_STATUS_OK
ReadX 11048 0 16 16 NT_STATUS_OK
ReadX 11048 16 2048 2048 NT_STATUS_OK
ReadX 11048 2064 2048 2048 NT_STATUS_OK
ReadX 11048 257 2048 2048 NT_STATUS_OK
ReadX 11048 385 2048 2048 NT_STATUS_OK
ReadX 11048 513 2048 2048 NT_STATUS_OK
ReadX 11048 641 2048 2048 NT_STATUS_OK
ReadX 11048 769 2048 2048 NT_STATUS_OK
ReadX 11048 897 2048 2048 NT_STATUS_OK
ReadX 11048 1025 2048 2048 NT_STATUS_OK
ReadX 11048 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11050 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11053 NT_STATUS_OK
WriteX 11053 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11053 258 NT_STATUS_OK
WriteX 11053 0 11588 11588 NT_STATUS_OK
Flush 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11054 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11058 NT_STATUS_OK
WriteX 11058 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11058 258 NT_STATUS_OK
WriteX 11058 0 11615 11615 NT_STATUS_OK
Flush 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11067 NT_STATUS_OK
WriteX 11067 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 258 NT_STATUS_OK
WriteX 11067 0 65536 65536 NT_STATUS_OK
WriteX 11067 65536 16050 16050 NT_STATUS_OK
Close 11067 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11047 1939 64 64 NT_STATUS_OK
ReadX 11047 128 248 248 NT_STATUS_OK
ReadX 11047 128 568 568 NT_STATUS_OK
ReadX 11047 3872 1536 1536 NT_STATUS_OK
ReadX 11047 3456 2560 2560 NT_STATUS_OK
ReadX 11047 3136 512 512 NT_STATUS_OK
ReadX 11047 2880 4096 4096 NT_STATUS_OK
ReadX 11047 3264 3072 3072 NT_STATUS_OK
ReadX 11047 320 4096 4096 NT_STATUS_OK
ReadX 11047 1024 4096 4096 NT_STATUS_OK
ReadX 11047 3616 4096 4096 NT_STATUS_OK
ReadX 11047 1939 64 64 NT_STATUS_OK
ReadX 11047 128 248 248 NT_STATUS_OK
ReadX 11047 128 608 608 NT_STATUS_OK
ReadX 11047 2858 1024 1024 NT_STATUS_OK
ReadX 11047 2810 4096 4096 NT_STATUS_OK
ReadX 11047 2826 4096 4096 NT_STATUS_OK
ReadX 11047 2580 2048 2048 NT_STATUS_OK
ReadX 11047 2800 2560 2560 NT_STATUS_OK
ReadX 11047 2100 4096 4096 NT_STATUS_OK
ReadX 11047 2084 4096 4096 NT_STATUS_OK
ReadX 11047 868 4096 4096 NT_STATUS_OK
ReadX 11047 2324 4096 4096 NT_STATUS_OK
ReadX 11047 884 4096 4096 NT_STATUS_OK
ReadX 11047 2604 1024 1024 NT_STATUS_OK
ReadX 11047 580 4096 4096 NT_STATUS_OK
ReadX 11047 596 4096 4096 NT_STATUS_OK
ReadX 11047 2752 4096 4096 NT_STATUS_OK
ReadX 11047 2842 1024 1024 NT_STATUS_OK
ReadX 11047 660 4096 4096 NT_STATUS_OK
ReadX 11047 2720 4096 4096 NT_STATUS_OK
ReadX 11047 2736 4096 4096 NT_STATUS_OK
ReadX 11047 628 4096 4096 NT_STATUS_OK
ReadX 11047 2704 4096 4096 NT_STATUS_OK
ReadX 11047 1556 4096 4096 NT_STATUS_OK
ReadX 11047 576 4096 4096 NT_STATUS_OK
ReadX 11047 3168 1536 1536 NT_STATUS_OK
ReadX 11047 832 4096 4096 NT_STATUS_OK
ReadX 11047 1088 4096 4096 NT_STATUS_OK
ReadX 11047 1344 4096 4096 NT_STATUS_OK
ReadX 11047 1600 4096 4096 NT_STATUS_OK
ReadX 11047 1856 4096 4096 NT_STATUS_OK
ReadX 11047 2112 4096 4096 NT_STATUS_OK
ReadX 11047 1892 4096 4096 NT_STATUS_OK
ReadX 11047 820 4096 4096 NT_STATUS_OK
ReadX 11047 788 4096 4096 NT_STATUS_OK
ReadX 11047 1604 4096 4096 NT_STATUS_OK
ReadX 11047 3648 4096 4096 NT_STATUS_OK
ReadX 11047 2608 4096 4096 NT_STATUS_OK
ReadX 11047 548 4096 4096 NT_STATUS_OK
ReadX 11047 740 4096 4096 NT_STATUS_OK
ReadX 11047 1344 4096 4096 NT_STATUS_OK
ReadX 11047 3392 4096 4096 NT_STATUS_OK
ReadX 11047 3904 4096 4096 NT_STATUS_OK
ReadX 11047 644 4096 4096 NT_STATUS_OK
ReadX 11047 676 4096 4096 NT_STATUS_OK
ReadX 11047 2688 4096 4096 NT_STATUS_OK
ReadX 11047 320 4096 4096 NT_STATUS_OK
ReadX 11047 900 4096 4096 NT_STATUS_OK
ReadX 11047 1908 4096 4096 NT_STATUS_OK
ReadX 11047 852 4096 4096 NT_STATUS_OK
ReadX 11047 724 4096 4096 NT_STATUS_OK
ReadX 11047 2292 4096 4096 NT_STATUS_OK
ReadX 11047 612 4096 4096 NT_STATUS_OK
ReadX 11047 388 4096 4096 NT_STATUS_OK
ReadX 11047 2368 4096 4096 NT_STATUS_OK
ReadX 11047 2624 4096 4096 NT_STATUS_OK
ReadX 11047 500 4096 4096 NT_STATUS_OK
ReadX 11047 356 4096 4096 NT_STATUS_OK
ReadX 11047 1024 4096 4096 NT_STATUS_OK
ReadX 11047 576 4096 4096 NT_STATUS_OK
ReadX 11047 340 4096 4096 NT_STATUS_OK
ReadX 11047 420 4096 4096 NT_STATUS_OK
ReadX 11047 1600 4096 4096 NT_STATUS_OK
ReadX 11047 404 4096 4096 NT_STATUS_OK
ReadX 11047 1428 4096 4096 NT_STATUS_OK
ReadX 11047 2656 4096 4096 NT_STATUS_OK
ReadX 11047 2624 4096 4096 NT_STATUS_OK
ReadX 11047 452 4096 4096 NT_STATUS_OK
ReadX 11047 692 4096 4096 NT_STATUS_OK
ReadX 11047 564 4096 4096 NT_STATUS_OK
ReadX 11047 372 4096 4096 NT_STATUS_OK
ReadX 11047 468 4096 4096 NT_STATUS_OK
ReadX 11047 484 4096 4096 NT_STATUS_OK
ReadX 11047 1088 4096 4096 NT_STATUS_OK
ReadX 11047 1924 4096 4096 NT_STATUS_OK
ReadX 11047 2768 4096 4096 NT_STATUS_OK
ReadX 11047 832 4096 4096 NT_STATUS_OK
ReadX 11047 836 4096 4096 NT_STATUS_OK
ReadX 11047 1856 4096 4096 NT_STATUS_OK
ReadX 11047 2640 4096 4096 NT_STATUS_OK
ReadX 11047 436 4096 4096 NT_STATUS_OK
ReadX 11047 1828 4096 4096 NT_STATUS_OK
ReadX 11047 804 4096 4096 NT_STATUS_OK
ReadX 11047 1860 4096 4096 NT_STATUS_OK
ReadX 11047 1812 4096 4096 NT_STATUS_OK
ReadX 11047 756 4096 4096 NT_STATUS_OK
ReadX 11047 1636 4096 4096 NT_STATUS_OK
ReadX 11047 772 4096 4096 NT_STATUS_OK
ReadX 11047 2036 4096 4096 NT_STATUS_OK
ReadX 11047 1220 4096 4096 NT_STATUS_OK
ReadX 11047 1652 4096 4096 NT_STATUS_OK
ReadX 11047 2588 4096 4096 NT_STATUS_OK
ReadX 11047 916 4096 4096 NT_STATUS_OK
ReadX 11047 260 4096 4096 NT_STATUS_OK
ReadX 11047 932 4096 4096 NT_STATUS_OK
ReadX 11047 2624 4096 4096 NT_STATUS_OK
ReadX 11047 308 4096 4096 NT_STATUS_OK
ReadX 11047 292 4096 4096 NT_STATUS_OK
ReadX 11047 1140 4096 4096 NT_STATUS_OK
ReadX 11047 276 4096 4096 NT_STATUS_OK
ReadX 11047 2020 4096 4096 NT_STATUS_OK
ReadX 11047 2880 4096 4096 NT_STATUS_OK
ReadX 11047 516 4096 4096 NT_STATUS_OK
ReadX 11047 1844 4096 4096 NT_STATUS_OK
ReadX 11047 1124 4096 4096 NT_STATUS_OK
ReadX 11047 3136 4096 4096 NT_STATUS_OK
ReadX 11047 324 4096 4096 NT_STATUS_OK
ReadX 11047 1156 4096 4096 NT_STATUS_OK
ReadX 11047 1172 4096 4096 NT_STATUS_OK
ReadX 11047 2112 4096 4096 NT_STATUS_OK
ReadX 11047 2368 4096 4096 NT_STATUS_OK
ReadX 11047 964 4096 4096 NT_STATUS_OK
ReadX 11047 980 4096 4096 NT_STATUS_OK
ReadX 11047 1012 4096 4096 NT_STATUS_OK
ReadX 11047 532 4096 4096 NT_STATUS_OK
ReadX 11047 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11047 1620 4096 4096 NT_STATUS_OK
ReadX 11047 1604 4096 4096 NT_STATUS_OK
ReadX 11047 2116 4096 4096 NT_STATUS_OK
ReadX 11047 2132 4096 4096 NT_STATUS_OK
ReadX 11047 2148 4096 4096 NT_STATUS_OK
ReadX 11047 2276 4096 4096 NT_STATUS_OK
ReadX 11047 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11072 NT_STATUS_OK
QUERY_FILE_INFORMATION 11027 1004 NT_STATUS_OK
Close 11027 NT_STATUS_OK
WriteX 11072 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11072 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 1004 NT_STATUS_OK
Close 11029 NT_STATUS_OK
WriteX 11072 0 65536 65536 NT_STATUS_OK
WriteX 11072 65536 64850 64850 NT_STATUS_OK
Close 11072 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11074 NT_STATUS_OK
WriteX 11074 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11074 258 NT_STATUS_OK
ReadX 11047 2068 4096 4096 NT_STATUS_OK
ReadX 11047 1588 4096 4096 NT_STATUS_OK
ReadX 11047 1572 4096 4096 NT_STATUS_OK
WriteX 11074 0 18630 18630 NT_STATUS_OK
Flush 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11047 612 4096 4096 NT_STATUS_OK
ReadX 11047 564 4096 4096 NT_STATUS_OK
ReadX 11047 1876 4096 4096 NT_STATUS_OK
ReadX 11047 628 4096 4096 NT_STATUS_OK
ReadX 11047 740 4096 4096 NT_STATUS_OK
ReadX 11047 724 4096 4096 NT_STATUS_OK
ReadX 11047 644 4096 4096 NT_STATUS_OK
ReadX 11047 2324 4096 4096 NT_STATUS_OK
ReadX 11047 660 4096 4096 NT_STATUS_OK
ReadX 11047 852 4096 4096 NT_STATUS_OK
ReadX 11047 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11047 2368 4096 4096 NT_STATUS_OK
ReadX 11047 1024 4096 4096 NT_STATUS_OK
ReadX 11047 320 4096 4096 NT_STATUS_OK
ReadX 11047 580 4096 4096 NT_STATUS_OK
ReadX 11047 3136 512 512 NT_STATUS_OK
ReadX 11047 2880 4096 4096 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11079 NT_STATUS_OK
ReadX 11079 61440 4096 4096 NT_STATUS_OK
ReadX 11079 126976 4096 4096 NT_STATUS_OK
WriteX 11079 0 65536 65536 NT_STATUS_OK
WriteX 11079 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 61440 4096 4096 NT_STATUS_OK
ReadX 11080 126976 4096 4096 NT_STATUS_OK
ReadX 11080 192512 4096 4096 NT_STATUS_OK
ReadX 11080 258048 4096 4096 NT_STATUS_OK
WriteX 11080 0 65536 65536 NT_STATUS_OK
WriteX 11080 65536 65536 65536 NT_STATUS_OK
WriteX 11080 131072 65536 65536 NT_STATUS_OK
WriteX 11080 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11081 NT_STATUS_OK
ReadX 11081 61440 4096 4096 NT_STATUS_OK
ReadX 11081 126976 4096 4096 NT_STATUS_OK
ReadX 11081 192512 4096 4096 NT_STATUS_OK
ReadX 11081 258048 4096 4096 NT_STATUS_OK
ReadX 11081 323584 4096 4096 NT_STATUS_OK
ReadX 11081 389120 4096 4096 NT_STATUS_OK
ReadX 11081 454656 4096 4096 NT_STATUS_OK
ReadX 11081 520192 4096 4096 NT_STATUS_OK
WriteX 11081 0 65536 65536 NT_STATUS_OK
WriteX 11081 65536 65536 65536 NT_STATUS_OK
WriteX 11081 131072 65536 65536 NT_STATUS_OK
WriteX 11081 196608 65536 65536 NT_STATUS_OK
WriteX 11081 262144 65536 65536 NT_STATUS_OK
WriteX 11081 327680 65536 65536 NT_STATUS_OK
WriteX 11081 393216 65536 65536 NT_STATUS_OK
WriteX 11081 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11084 NT_STATUS_OK
WriteX 11084 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11084 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11082 0 8192 8192 NT_STATUS_OK
Flush 11082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11082 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11082 0 8192 8192 NT_STATUS_OK
Flush 11082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11082 0 8192 8192 NT_STATUS_OK
Flush 11082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11082 0 8192 8192 NT_STATUS_OK
Flush 11082 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11086 NT_STATUS_OK
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11078 NT_STATUS_OK
Close 11046 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Close 11081 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11089 NT_STATUS_OK
WriteX 11089 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11089 258 NT_STATUS_OK
WriteX 11089 0 62591 62591 NT_STATUS_OK
Close 11089 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11091 NT_STATUS_OK
Close 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11094 NT_STATUS_OK
WriteX 11094 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 258 NT_STATUS_OK
WriteX 11094 0 10845 10845 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11096 NT_STATUS_OK
Close 11096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11099 NT_STATUS_OK
WriteX 11099 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 258 NT_STATUS_OK
WriteX 11099 0 30118 30118 NT_STATUS_OK
Close 11099 NT_STATUS_OK
WriteX 11082 0 4096 4096 NT_STATUS_OK
WriteX 11084 0 64 64 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11082 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 61440 61440 NT_STATUS_OK
ReadX 11101 61440 4096 4096 NT_STATUS_OK
ReadX 11101 65536 61440 61440 NT_STATUS_OK
ReadX 11101 126976 4096 4096 NT_STATUS_OK
ReadX 11101 131072 61440 61440 NT_STATUS_OK
ReadX 11101 192512 4096 4096 NT_STATUS_OK
ReadX 11101 196608 61440 61440 NT_STATUS_OK
ReadX 11101 258048 4096 4096 NT_STATUS_OK
ReadX 11101 262144 61440 61440 NT_STATUS_OK
ReadX 11101 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 61440 61440 NT_STATUS_OK
ReadX 11102 61440 4096 4096 NT_STATUS_OK
ReadX 11102 65536 61440 61440 NT_STATUS_OK
ReadX 11102 126976 4096 4096 NT_STATUS_OK
ReadX 11102 131072 61440 61440 NT_STATUS_OK
ReadX 11102 192512 4096 4096 NT_STATUS_OK
ReadX 11102 196608 61440 61440 NT_STATUS_OK
ReadX 11102 258048 4096 4096 NT_STATUS_OK
ReadX 11102 262144 61440 61440 NT_STATUS_OK
ReadX 11102 323584 4096 4096 NT_STATUS_OK
ReadX 11102 327680 61440 61440 NT_STATUS_OK
ReadX 11102 389120 4096 4096 NT_STATUS_OK
ReadX 11102 393216 61440 61440 NT_STATUS_OK
ReadX 11102 454656 4096 4096 NT_STATUS_OK
ReadX 11102 458752 61440 61440 NT_STATUS_OK
ReadX 11102 520192 4096 4096 NT_STATUS_OK
ReadX 11102 524288 61440 61440 NT_STATUS_OK
ReadX 11102 585728 4096 4096 NT_STATUS_OK
ReadX 11102 589824 61440 61440 NT_STATUS_OK
ReadX 11102 651264 4096 4096 NT_STATUS_OK
ReadX 11102 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 61440 61440 NT_STATUS_OK
ReadX 11103 61440 4096 4096 NT_STATUS_OK
ReadX 11103 65536 61440 61440 NT_STATUS_OK
ReadX 11103 126976 4096 4096 NT_STATUS_OK
ReadX 11103 131072 61440 61440 NT_STATUS_OK
ReadX 11103 192512 4096 4096 NT_STATUS_OK
ReadX 11103 196608 61440 61440 NT_STATUS_OK
ReadX 11103 258048 4096 4096 NT_STATUS_OK
ReadX 11103 262144 61440 61440 NT_STATUS_OK
ReadX 11103 323584 4096 4096 NT_STATUS_OK
ReadX 11103 327680 61440 61440 NT_STATUS_OK
ReadX 11103 389120 4096 4096 NT_STATUS_OK
ReadX 11103 393216 61440 61440 NT_STATUS_OK
ReadX 11103 454656 4096 4096 NT_STATUS_OK
ReadX 11103 458752 61440 61440 NT_STATUS_OK
ReadX 11103 520192 4096 4096 NT_STATUS_OK
ReadX 11103 524288 61440 61440 NT_STATUS_OK
ReadX 11103 585728 4096 4096 NT_STATUS_OK
ReadX 11103 589824 61440 61440 NT_STATUS_OK
ReadX 11103 651264 4096 4096 NT_STATUS_OK
ReadX 11103 655360 61440 61440 NT_STATUS_OK
ReadX 11103 716800 4096 4096 NT_STATUS_OK
ReadX 11103 720896 61440 61440 NT_STATUS_OK
ReadX 11103 782336 4096 4096 NT_STATUS_OK
ReadX 11103 786432 61440 61440 NT_STATUS_OK
ReadX 11103 847872 4096 4096 NT_STATUS_OK
ReadX 11103 851968 61440 61440 NT_STATUS_OK
ReadX 11103 913408 4096 4096 NT_STATUS_OK
ReadX 11103 917504 61440 61440 NT_STATUS_OK
ReadX 11103 978944 4096 4096 NT_STATUS_OK
ReadX 11103 983040 61440 61440 NT_STATUS_OK
ReadX 11103 1044480 4096 4096 NT_STATUS_OK
ReadX 11103 1048576 61440 61440 NT_STATUS_OK
ReadX 11103 1110016 4096 4096 NT_STATUS_OK
ReadX 11103 1114112 61440 61440 NT_STATUS_OK
ReadX 11103 1175552 4096 4096 NT_STATUS_OK
ReadX 11103 1179648 61440 61440 NT_STATUS_OK
ReadX 11103 1241088 4096 4096 NT_STATUS_OK
ReadX 11103 1245184 61440 61440 NT_STATUS_OK
ReadX 11103 1306624 4096 4096 NT_STATUS_OK
ReadX 11103 1310720 61440 61440 NT_STATUS_OK
ReadX 11103 1372160 4096 4096 NT_STATUS_OK
ReadX 11103 1376256 61440 61440 NT_STATUS_OK
ReadX 11103 1437696 4096 4096 NT_STATUS_OK
ReadX 11103 1441792 61440 61440 NT_STATUS_OK
ReadX 11103 1503232 4096 4096 NT_STATUS_OK
ReadX 11103 1507328 61440 61440 NT_STATUS_OK
ReadX 11103 1568768 4096 4096 NT_STATUS_OK
ReadX 11103 1572864 61440 61440 NT_STATUS_OK
ReadX 11103 1634304 4096 4096 NT_STATUS_OK
ReadX 11103 1638400 61440 61440 NT_STATUS_OK
ReadX 11103 1699840 4096 4096 NT_STATUS_OK
ReadX 11103 1703936 61440 61440 NT_STATUS_OK
ReadX 11103 1765376 4096 4096 NT_STATUS_OK
ReadX 11103 1769472 61440 61440 NT_STATUS_OK
ReadX 11103 1830912 4096 4096 NT_STATUS_OK
ReadX 11103 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11104 NT_STATUS_OK
Close 11104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
ReadX 11108 4096 4096 4096 NT_STATUS_OK
ReadX 11108 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11109 NT_STATUS_OK
Close 11109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11112 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11116 NT_STATUS_OK
ReadX 11116 0 8192 8192 NT_STATUS_OK
ReadX 11116 8192 8192 8192 NT_STATUS_OK
ReadX 11116 16384 8192 8192 NT_STATUS_OK
ReadX 11116 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11118 NT_STATUS_OK
Close 11118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Close 11115 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11121 NT_STATUS_OK
WriteX 11121 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11121 258 NT_STATUS_OK
WriteX 11121 0 10438 10438 NT_STATUS_OK
Close 11121 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11122 NT_STATUS_OK
Close 11122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11124 NT_STATUS_OK
Close 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11125 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11126 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11127 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11129 NT_STATUS_OK
Close 11129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
ReadX 11130 4096 4096 4096 NT_STATUS_OK
ReadX 11130 8192 4096 4096 NT_STATUS_OK
ReadX 11130 12288 8192 8192 NT_STATUS_OK
ReadX 11130 20480 8192 8192 NT_STATUS_OK
ReadX 11130 28672 8192 8192 NT_STATUS_OK
ReadX 11130 36864 8192 8192 NT_STATUS_OK
ReadX 11130 45056 8192 8192 NT_STATUS_OK
ReadX 11130 53248 8192 8192 NT_STATUS_OK
ReadX 11130 61440 8192 8192 NT_STATUS_OK
ReadX 11130 69632 8192 8192 NT_STATUS_OK
ReadX 11130 77824 8192 8192 NT_STATUS_OK
ReadX 11130 86016 8192 8192 NT_STATUS_OK
ReadX 11130 94208 8192 8192 NT_STATUS_OK
ReadX 11130 102400 8192 8192 NT_STATUS_OK
ReadX 11130 110592 8192 8192 NT_STATUS_OK
ReadX 11130 118784 8192 8192 NT_STATUS_OK
ReadX 11130 126976 8192 8192 NT_STATUS_OK
ReadX 11130 135168 8192 8192 NT_STATUS_OK
ReadX 11130 143360 8192 8192 NT_STATUS_OK
ReadX 11130 151552 8192 8192 NT_STATUS_OK
ReadX 11130 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Close 11127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11135 NT_STATUS_OK
WriteX 11135 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11135 258 NT_STATUS_OK
WriteX 11135 0 28489 28489 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11136 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11138 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 8192 8192 NT_STATUS_OK
ReadX 11142 8192 8192 8192 NT_STATUS_OK
ReadX 11142 16384 8192 8192 NT_STATUS_OK
ReadX 11142 24576 8192 8192 NT_STATUS_OK
ReadX 11142 32768 16384 16384 NT_STATUS_OK
ReadX 11142 49152 8192 8192 NT_STATUS_OK
ReadX 11142 57344 8192 8192 NT_STATUS_OK
ReadX 11142 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11147 NT_STATUS_OK
WriteX 11147 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 258 NT_STATUS_OK
WriteX 11147 0 29253 29253 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11154 NT_STATUS_OK
WriteX 11154 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11154 258 NT_STATUS_OK
WriteX 11154 0 30183 30183 NT_STATUS_OK
Close 11154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11157 NT_STATUS_OK
WriteX 11157 0 510 510 NT_STATUS_OK
WriteX 11157 510 512 512 NT_STATUS_OK
WriteX 11157 1022 510 510 NT_STATUS_OK
WriteX 11157 1532 510 510 NT_STATUS_OK
WriteX 11157 2042 168 168 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 61440 4096 4096 NT_STATUS_OK
ReadX 11161 126976 4096 4096 NT_STATUS_OK
WriteX 11161 0 65536 65536 NT_STATUS_OK
WriteX 11161 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 61440 4096 4096 NT_STATUS_OK
ReadX 11162 126976 4096 4096 NT_STATUS_OK
ReadX 11162 192512 4096 4096 NT_STATUS_OK
ReadX 11162 258048 4096 4096 NT_STATUS_OK
WriteX 11162 0 65536 65536 NT_STATUS_OK
WriteX 11162 65536 65536 65536 NT_STATUS_OK
WriteX 11162 131072 65536 65536 NT_STATUS_OK
WriteX 11162 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 61440 4096 4096 NT_STATUS_OK
ReadX 11163 126976 4096 4096 NT_STATUS_OK
ReadX 11163 192512 4096 4096 NT_STATUS_OK
ReadX 11163 258048 4096 4096 NT_STATUS_OK
ReadX 11163 323584 4096 4096 NT_STATUS_OK
ReadX 11163 389120 4096 4096 NT_STATUS_OK
ReadX 11163 454656 4096 4096 NT_STATUS_OK
ReadX 11163 520192 4096 4096 NT_STATUS_OK
WriteX 11163 0 65536 65536 NT_STATUS_OK
WriteX 11163 65536 65536 65536 NT_STATUS_OK
WriteX 11163 131072 65536 65536 NT_STATUS_OK
WriteX 11163 196608 65536 65536 NT_STATUS_OK
WriteX 11163 262144 65536 65536 NT_STATUS_OK
WriteX 11163 327680 65536 65536 NT_STATUS_OK
WriteX 11163 393216 65536 65536 NT_STATUS_OK
WriteX 11163 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11173 NT_STATUS_OK
Close 11173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11175 NT_STATUS_OK
Close 11175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11184 NT_STATUS_OK
Close 11184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11198 NT_STATUS_OK
Close 11198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11203 NT_STATUS_OK
Close 11203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11213 NT_STATUS_OK
Close 11213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11232 0 65536 65536 NT_STATUS_OK
WriteX 11232 65536 65536 65536 NT_STATUS_OK
WriteX 11232 131072 65536 65536 NT_STATUS_OK
WriteX 11232 196608 65536 65536 NT_STATUS_OK
WriteX 11232 262144 26634 26634 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11237 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11238 NT_STATUS_OK
Close 11238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
Close 11239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11240 NT_STATUS_OK
ReadX 11240 0 4096 4096 NT_STATUS_OK
ReadX 11240 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11240 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11245 NT_STATUS_OK
Close 11245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11250 NT_STATUS_OK
Close 11250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11257 NT_STATUS_OK
Close 11257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11259 NT_STATUS_OK
Close 11259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11268 NT_STATUS_OK
Close 11268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11278 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11288 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11292 NT_STATUS_OK
Close 11292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11302 NT_STATUS_OK
Close 11302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11305 NT_STATUS_OK
Close 11305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11307 NT_STATUS_OK
Close 11307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11317 NT_STATUS_OK
Close 11317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11319 NT_STATUS_OK
ReadX 11319 0 4096 4096 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11320 NT_STATUS_OK
ReadX 11320 0 4096 4096 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11331 NT_STATUS_OK
Close 11331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
Close 11333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 4096 4096 NT_STATUS_OK
Close 11334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11364 0 4096 4096 NT_STATUS_OK
Close 11364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
ReadX 11366 4096 4096 4096 NT_STATUS_OK
ReadX 11366 8192 4096 4096 NT_STATUS_OK
ReadX 11366 12288 4096 4096 NT_STATUS_OK
ReadX 11366 16384 4096 4096 NT_STATUS_OK
ReadX 11366 20480 4096 4096 NT_STATUS_OK
ReadX 11366 24576 4096 4096 NT_STATUS_OK
ReadX 11366 28672 4096 4096 NT_STATUS_OK
ReadX 11366 32768 4096 4096 NT_STATUS_OK
ReadX 11366 36864 4096 4096 NT_STATUS_OK
ReadX 11366 40960 4096 4096 NT_STATUS_OK
ReadX 11366 45056 4096 4096 NT_STATUS_OK
ReadX 11366 49152 4096 4096 NT_STATUS_OK
ReadX 11366 53248 4096 4096 NT_STATUS_OK
ReadX 11366 57344 4096 4096 NT_STATUS_OK
ReadX 11366 61440 4096 4096 NT_STATUS_OK
ReadX 11366 65536 4096 4096 NT_STATUS_OK
ReadX 11366 69632 4096 4096 NT_STATUS_OK
ReadX 11366 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11366 1004 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Close 11366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11367 NT_STATUS_OK
SET_FILE_INFORMATION 11367 1004 NT_STATUS_OK
Close 11367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11372 NT_STATUS_OK
WriteX 11372 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11372 258 NT_STATUS_OK
WriteX 11372 0 65536 65536 NT_STATUS_OK
WriteX 11372 65536 19979 19979 NT_STATUS_OK
Close 11372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 4096 4096 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
QUERY_FILE_INFORMATION 11373 1004 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
SET_FILE_INFORMATION 11373 1004 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11375 NT_STATUS_OK
ReadX 11375 0 4096 4096 NT_STATUS_OK
Close 11374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11377 NT_STATUS_OK
ReadX 11377 0 4096 4096 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11375 NT_STATUS_OK
Close 11378 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11381 NT_STATUS_OK
Close 11381 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11384 NT_STATUS_OK
WriteX 11384 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 258 NT_STATUS_OK
WriteX 11384 0 65536 65536 NT_STATUS_OK
WriteX 11384 65536 17654 17654 NT_STATUS_OK
Close 11384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11386 NT_STATUS_OK
SET_FILE_INFORMATION 11386 1004 NT_STATUS_OK
Close 11386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11387 NT_STATUS_OK
ReadX 11387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 0 4096 4096 NT_STATUS_OK
ReadX 11390 4096 4096 4096 NT_STATUS_OK
ReadX 11390 8192 4096 4096 NT_STATUS_OK
ReadX 11390 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11390 16384 4096 4096 NT_STATUS_OK
ReadX 11390 20480 4096 4096 NT_STATUS_OK
ReadX 11390 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
Close 11391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 4096 4096 NT_STATUS_OK
Close 11392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11393 1004 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11396 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11399 NT_STATUS_OK
WriteX 11399 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11399 258 NT_STATUS_OK
WriteX 11399 0 65536 65536 NT_STATUS_OK
WriteX 11399 65536 19490 19490 NT_STATUS_OK
Close 11399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11400 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Flush 11400 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Flush 11400 NT_STATUS_OK
QUERY_FILE_INFORMATION 11400 1004 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Flush 11400 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Flush 11400 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Flush 11400 NT_STATUS_OK
SET_FILE_INFORMATION 11400 1004 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Flush 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11401 NT_STATUS_OK
SET_FILE_INFORMATION 11401 1004 NT_STATUS_OK
Close 11401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11405 0 4096 4096 NT_STATUS_OK
Close 11405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
ReadX 11407 4096 4096 4096 NT_STATUS_OK
ReadX 11407 8192 4096 4096 NT_STATUS_OK
ReadX 11407 12288 4096 4096 NT_STATUS_OK
ReadX 11407 16384 4096 4096 NT_STATUS_OK
ReadX 11407 20480 4096 4096 NT_STATUS_OK
ReadX 11407 24576 4096 4096 NT_STATUS_OK
ReadX 11407 28672 4096 4096 NT_STATUS_OK
ReadX 11407 32768 4096 4096 NT_STATUS_OK
ReadX 11407 36864 4096 4096 NT_STATUS_OK
ReadX 11407 40960 4096 4096 NT_STATUS_OK
ReadX 11407 45056 4096 4096 NT_STATUS_OK
ReadX 11407 49152 4096 4096 NT_STATUS_OK
ReadX 11407 53248 4096 4096 NT_STATUS_OK
ReadX 11407 57344 4096 4096 NT_STATUS_OK
ReadX 11407 61440 4096 4096 NT_STATUS_OK
ReadX 11407 65536 4096 4096 NT_STATUS_OK
ReadX 11407 69632 4096 4096 NT_STATUS_OK
ReadX 11407 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11407 1004 NT_STATUS_OK
WriteX 11407 0 4096 4096 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11408 NT_STATUS_OK
SET_FILE_INFORMATION 11408 1004 NT_STATUS_OK
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11413 NT_STATUS_OK
WriteX 11413 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11413 258 NT_STATUS_OK
WriteX 11413 0 65536 65536 NT_STATUS_OK
WriteX 11413 65536 8866 8866 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
WriteX 11414 0 4096 4096 NT_STATUS_OK
Flush 11414 NT_STATUS_OK
SET_FILE_INFORMATION 11414 1004 NT_STATUS_OK
WriteX 11414 0 4096 4096 NT_STATUS_OK
Flush 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11418 1004 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11418 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11421 NT_STATUS_OK
Close 11421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11424 NT_STATUS_OK
WriteX 11424 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11424 258 NT_STATUS_OK
WriteX 11424 0 65536 65536 NT_STATUS_OK
WriteX 11424 65536 9298 9298 NT_STATUS_OK
Close 11424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
WriteX 11425 0 4096 4096 NT_STATUS_OK
Flush 11425 NT_STATUS_OK
SET_FILE_INFORMATION 11425 1004 NT_STATUS_OK
WriteX 11425 0 4096 4096 NT_STATUS_OK
Flush 11425 NT_STATUS_OK
Close 11425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11426 NT_STATUS_OK
SET_FILE_INFORMATION 11426 1004 NT_STATUS_OK
Close 11426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11431 0 4096 4096 NT_STATUS_OK
Close 11431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11432 4096 4096 4096 NT_STATUS_OK
ReadX 11432 8192 4096 4096 NT_STATUS_OK
ReadX 11432 12288 4096 4096 NT_STATUS_OK
ReadX 11432 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11433 NT_STATUS_OK
ReadX 11433 0 4096 4096 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
Close 11434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11435 1004 NT_STATUS_OK
WriteX 11435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11435 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11441 NT_STATUS_OK
WriteX 11441 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11441 258 NT_STATUS_OK
WriteX 11441 0 65536 65536 NT_STATUS_OK
WriteX 11441 65536 11540 11540 NT_STATUS_OK
Close 11441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
WriteX 11442 0 4096 4096 NT_STATUS_OK
Flush 11442 NT_STATUS_OK
SET_FILE_INFORMATION 11442 1004 NT_STATUS_OK
WriteX 11442 0 4096 4096 NT_STATUS_OK
Flush 11442 NT_STATUS_OK
Close 11442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11443 NT_STATUS_OK
SET_FILE_INFORMATION 11443 1004 NT_STATUS_OK
Close 11443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 61440 4096 4096 NT_STATUS_OK
ReadX 11447 126976 4096 4096 NT_STATUS_OK
WriteX 11447 0 65536 65536 NT_STATUS_OK
WriteX 11447 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 61440 4096 4096 NT_STATUS_OK
ReadX 11448 126976 4096 4096 NT_STATUS_OK
ReadX 11448 192512 4096 4096 NT_STATUS_OK
ReadX 11448 258048 4096 4096 NT_STATUS_OK
WriteX 11448 0 65536 65536 NT_STATUS_OK
WriteX 11448 65536 65536 65536 NT_STATUS_OK
WriteX 11448 131072 65536 65536 NT_STATUS_OK
WriteX 11448 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11449 NT_STATUS_OK
ReadX 11449 61440 4096 4096 NT_STATUS_OK
ReadX 11449 126976 4096 4096 NT_STATUS_OK
ReadX 11449 192512 4096 4096 NT_STATUS_OK
ReadX 11449 258048 4096 4096 NT_STATUS_OK
ReadX 11449 323584 4096 4096 NT_STATUS_OK
ReadX 11449 389120 4096 4096 NT_STATUS_OK
ReadX 11449 454656 4096 4096 NT_STATUS_OK
ReadX 11449 520192 4096 4096 NT_STATUS_OK
WriteX 11449 0 65536 65536 NT_STATUS_OK
WriteX 11449 65536 65536 65536 NT_STATUS_OK
WriteX 11449 131072 65536 65536 NT_STATUS_OK
WriteX 11449 196608 65536 65536 NT_STATUS_OK
WriteX 11449 262144 65536 65536 NT_STATUS_OK
WriteX 11449 327680 65536 65536 NT_STATUS_OK
WriteX 11449 393216 65536 65536 NT_STATUS_OK
WriteX 11449 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11450 NT_STATUS_OK
ReadX 11450 0 4096 4096 NT_STATUS_OK
ReadX 11450 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11451 NT_STATUS_OK
WriteX 11451 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11451 258 NT_STATUS_OK
WriteX 11451 0 53 53 NT_STATUS_OK
Close 11451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11452 NT_STATUS_OK
Close 11452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Close 11449 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11450 8192 4096 4096 NT_STATUS_OK
ReadX 11450 12288 4096 4096 NT_STATUS_OK
WriteX 11454 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11454 258 NT_STATUS_OK
ReadX 11450 16384 4096 4096 NT_STATUS_OK
ReadX 11450 20480 4096 4096 NT_STATUS_OK
WriteX 11454 0 15360 15360 NT_STATUS_OK
Close 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
WriteX 11455 0 4096 4096 NT_STATUS_OK
Close 11455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11456 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11458 4096 4096 4096 NT_STATUS_OK
ReadX 11458 8192 4096 4096 NT_STATUS_OK
ReadX 11458 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
ReadX 11461 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
ReadX 11462 4096 4096 4096 NT_STATUS_OK
ReadX 11462 8192 4096 4096 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11463 NT_STATUS_OK
WriteX 11463 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 258 NT_STATUS_OK
WriteX 11463 0 15360 15360 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11468 NT_STATUS_OK
SET_FILE_INFORMATION 11468 1004 NT_STATUS_OK
Close 11468 NT_STATUS_OK
WriteX 11464 0 4096 4096 NT_STATUS_OK
Close 11464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
ReadX 11471 4096 4096 4096 NT_STATUS_OK
ReadX 11471 8192 4096 4096 NT_STATUS_OK
ReadX 11471 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11471 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11471 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11473 NT_STATUS_OK
WriteX 11473 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 258 NT_STATUS_OK
WriteX 11473 0 53 53 NT_STATUS_OK
Close 11473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11472 4096 4096 4096 NT_STATUS_OK
ReadX 11472 8192 4096 4096 NT_STATUS_OK
ReadX 11472 12288 4096 4096 NT_STATUS_OK
WriteX 11476 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 258 NT_STATUS_OK
WriteX 11476 0 12006 12006 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11477 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11477 1004 NT_STATUS_OK
WriteX 11477 0 4096 4096 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11481 NT_STATUS_OK
Close 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11480 4096 4096 4096 NT_STATUS_OK
ReadX 11480 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11483 NT_STATUS_OK
WriteX 11483 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11483 258 NT_STATUS_OK
WriteX 11483 0 11991 11991 NT_STATUS_OK
Close 11483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11484 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11485 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
WriteX 11471 0 19054 19054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
Close 11488 NT_STATUS_OK
WriteX 11484 0 4096 4096 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11489 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11492 NT_STATUS_OK
Close 11492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11491 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11491 1004 NT_STATUS_OK
ReadX 11491 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11491 1004 NT_STATUS_OK
WriteX 11491 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11491 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11491 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11491 1004 NT_STATUS_OK
Close 11467 NT_STATUS_OK
WriteX 11491 0 12288 12288 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 61440 61440 NT_STATUS_OK
ReadX 11498 61440 4096 4096 NT_STATUS_OK
ReadX 11498 65536 61440 61440 NT_STATUS_OK
ReadX 11498 126976 4096 4096 NT_STATUS_OK
ReadX 11498 131072 61440 61440 NT_STATUS_OK
ReadX 11498 192512 4096 4096 NT_STATUS_OK
ReadX 11498 196608 61440 61440 NT_STATUS_OK
ReadX 11498 258048 4096 4096 NT_STATUS_OK
ReadX 11498 262144 61440 61440 NT_STATUS_OK
ReadX 11498 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 61440 61440 NT_STATUS_OK
ReadX 11499 61440 4096 4096 NT_STATUS_OK
ReadX 11499 65536 61440 61440 NT_STATUS_OK
ReadX 11499 126976 4096 4096 NT_STATUS_OK
ReadX 11499 131072 61440 61440 NT_STATUS_OK
ReadX 11499 192512 4096 4096 NT_STATUS_OK
ReadX 11499 196608 61440 61440 NT_STATUS_OK
ReadX 11499 258048 4096 4096 NT_STATUS_OK
ReadX 11499 262144 61440 61440 NT_STATUS_OK
ReadX 11499 323584 4096 4096 NT_STATUS_OK
ReadX 11499 327680 61440 61440 NT_STATUS_OK
ReadX 11499 389120 4096 4096 NT_STATUS_OK
ReadX 11499 393216 61440 61440 NT_STATUS_OK
ReadX 11499 454656 4096 4096 NT_STATUS_OK
ReadX 11499 458752 61440 61440 NT_STATUS_OK
ReadX 11499 520192 4096 4096 NT_STATUS_OK
ReadX 11499 524288 61440 61440 NT_STATUS_OK
ReadX 11499 585728 4096 4096 NT_STATUS_OK
ReadX 11499 589824 61440 61440 NT_STATUS_OK
ReadX 11499 651264 4096 4096 NT_STATUS_OK
ReadX 11499 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 61440 61440 NT_STATUS_OK
ReadX 11500 61440 4096 4096 NT_STATUS_OK
ReadX 11500 65536 61440 61440 NT_STATUS_OK
ReadX 11500 126976 4096 4096 NT_STATUS_OK
ReadX 11500 131072 61440 61440 NT_STATUS_OK
ReadX 11500 192512 4096 4096 NT_STATUS_OK
ReadX 11500 196608 61440 61440 NT_STATUS_OK
ReadX 11500 258048 4096 4096 NT_STATUS_OK
ReadX 11500 262144 61440 61440 NT_STATUS_OK
ReadX 11500 323584 4096 4096 NT_STATUS_OK
ReadX 11500 327680 61440 61440 NT_STATUS_OK
ReadX 11500 389120 4096 4096 NT_STATUS_OK
ReadX 11500 393216 61440 61440 NT_STATUS_OK
ReadX 11500 454656 4096 4096 NT_STATUS_OK
ReadX 11500 458752 61440 61440 NT_STATUS_OK
ReadX 11500 520192 4096 4096 NT_STATUS_OK
ReadX 11500 524288 61440 61440 NT_STATUS_OK
ReadX 11500 585728 4096 4096 NT_STATUS_OK
ReadX 11500 589824 61440 61440 NT_STATUS_OK
ReadX 11500 651264 4096 4096 NT_STATUS_OK
ReadX 11500 655360 61440 61440 NT_STATUS_OK
ReadX 11500 716800 4096 4096 NT_STATUS_OK
ReadX 11500 720896 61440 61440 NT_STATUS_OK
ReadX 11500 782336 4096 4096 NT_STATUS_OK
ReadX 11500 786432 61440 61440 NT_STATUS_OK
ReadX 11500 847872 4096 4096 NT_STATUS_OK
ReadX 11500 851968 61440 61440 NT_STATUS_OK
ReadX 11500 913408 4096 4096 NT_STATUS_OK
ReadX 11500 917504 61440 61440 NT_STATUS_OK
ReadX 11500 978944 4096 4096 NT_STATUS_OK
ReadX 11500 983040 61440 61440 NT_STATUS_OK
ReadX 11500 1044480 4096 4096 NT_STATUS_OK
ReadX 11500 1048576 61440 61440 NT_STATUS_OK
ReadX 11500 1110016 4096 4096 NT_STATUS_OK
ReadX 11500 1114112 61440 61440 NT_STATUS_OK
ReadX 11500 1175552 4096 4096 NT_STATUS_OK
ReadX 11500 1179648 61440 61440 NT_STATUS_OK
ReadX 11500 1241088 4096 4096 NT_STATUS_OK
ReadX 11500 1245184 61440 61440 NT_STATUS_OK
ReadX 11500 1306624 4096 4096 NT_STATUS_OK
ReadX 11500 1310720 61440 61440 NT_STATUS_OK
ReadX 11500 1372160 4096 4096 NT_STATUS_OK
ReadX 11500 1376256 61440 61440 NT_STATUS_OK
ReadX 11500 1437696 4096 4096 NT_STATUS_OK
ReadX 11500 1441792 61440 61440 NT_STATUS_OK
ReadX 11500 1503232 4096 4096 NT_STATUS_OK
ReadX 11500 1507328 61440 61440 NT_STATUS_OK
ReadX 11500 1568768 4096 4096 NT_STATUS_OK
ReadX 11500 1572864 61440 61440 NT_STATUS_OK
ReadX 11500 1634304 4096 4096 NT_STATUS_OK
ReadX 11500 1638400 61440 61440 NT_STATUS_OK
ReadX 11500 1699840 4096 4096 NT_STATUS_OK
ReadX 11500 1703936 61440 61440 NT_STATUS_OK
ReadX 11500 1765376 4096 4096 NT_STATUS_OK
ReadX 11500 1769472 61440 61440 NT_STATUS_OK
ReadX 11500 1830912 4096 4096 NT_STATUS_OK
ReadX 11500 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11507 NT_STATUS_OK
QUERY_FILE_INFORMATION 11507 1004 NT_STATUS_OK
WriteX 11507 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11507 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11508 NT_STATUS_OK
Close 11508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11509 NT_STATUS_OK
WriteX 11509 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11509 258 NT_STATUS_OK
WriteX 11509 0 491 491 NT_STATUS_OK
Close 11509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11507 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11513 NT_STATUS_OK
WriteX 11513 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11513 258 NT_STATUS_OK
WriteX 11513 0 543 543 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Close 11504 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11519 NT_STATUS_OK
ReadX 11519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11527 NT_STATUS_OK
QUERY_FILE_INFORMATION 11527 1004 NT_STATUS_OK
WriteX 11527 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11527 258 NT_STATUS_OK
WriteX 11527 0 2048 2048 NT_STATUS_OK
Close 11527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11528 NT_STATUS_OK
ReadX 11528 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11528 0 4096 4096 NT_STATUS_OK
Flush 11528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11528 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11533 NT_STATUS_OK
WriteX 11533 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11533 258 NT_STATUS_OK
WriteX 11533 0 2048 2048 NT_STATUS_OK
Close 11533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11534 NT_STATUS_OK
ReadX 11534 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11539 NT_STATUS_OK
WriteX 11539 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 2048 2048 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 2048 2048 NT_STATUS_OK
ReadX 11518 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11522 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11534 0 4096 4096 NT_STATUS_OK
WriteX 11518 0 8192 8192 NT_STATUS_OK
WriteX 11519 0 4096 4096 NT_STATUS_OK
WriteX 11520 0 4096 4096 NT_STATUS_OK
ReadX 11534 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11544 NT_STATUS_OK
QUERY_FILE_INFORMATION 11544 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11519 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Close 11534 NT_STATUS_OK
Close 11518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11547 NT_STATUS_OK
ReadX 11547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11553 NT_STATUS_OK
ReadX 11553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11564 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 1004 NT_STATUS_OK
WriteX 11564 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 2048 2048 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11572 NT_STATUS_OK
QUERY_FILE_INFORMATION 11572 1004 NT_STATUS_OK
WriteX 11572 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11572 258 NT_STATUS_OK
WriteX 11572 0 2048 2048 NT_STATUS_OK
Close 11572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11573 0 4096 4096 NT_STATUS_OK
Flush 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11567 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11575 NT_STATUS_OK
WriteX 11575 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11575 258 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11578 NT_STATUS_OK
WriteX 11578 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11578 258 NT_STATUS_OK
WriteX 11578 0 4096 4096 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11579 0 4096 4096 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11554 NT_STATUS_OK
Close 11547 NT_STATUS_OK
Close 11548 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11585 NT_STATUS_OK
Close 11585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11586 NT_STATUS_OK
WriteX 11586 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11586 258 NT_STATUS_OK
WriteX 11586 0 2048 2048 NT_STATUS_OK
Close 11586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11601 NT_STATUS_OK
QUERY_FILE_INFORMATION 11601 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11603 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11623 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
WriteX 11623 0 2048 2048 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11624 NT_STATUS_OK
ReadX 11624 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11630 NT_STATUS_OK
ReadX 11630 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11635 NT_STATUS_OK
QUERY_FILE_INFORMATION 11635 1004 NT_STATUS_OK
WriteX 11635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11635 258 NT_STATUS_OK
WriteX 11635 0 2048 2048 NT_STATUS_OK
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11643 NT_STATUS_OK
QUERY_FILE_INFORMATION 11643 1004 NT_STATUS_OK
WriteX 11643 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11643 258 NT_STATUS_OK
WriteX 11643 0 2048 2048 NT_STATUS_OK
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
Flush 11624 NT_STATUS_OK
WriteX 11636 0 4096 4096 NT_STATUS_OK
Flush 11636 NT_STATUS_OK
WriteX 11644 0 4096 4096 NT_STATUS_OK
Flush 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11644 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11626 4096 16384 16384 NT_STATUS_OK
ReadX 11606 4096 16384 16384 NT_STATUS_OK
ReadX 11638 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 2048 2048 NT_STATUS_OK
WriteX 11646 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11647 NT_STATUS_OK
QUERY_FILE_INFORMATION 11647 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Close 11626 NT_STATUS_OK
Close 11627 NT_STATUS_OK
Close 11628 NT_STATUS_OK
Close 11629 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11615 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Close 11606 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11649 NT_STATUS_OK
QUERY_FILE_INFORMATION 11649 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11651 NT_STATUS_OK
QUERY_FILE_INFORMATION 11651 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11653 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11658 NT_STATUS_OK
ReadX 11658 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11654 4096 16384 16384 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
WriteX 11655 0 4096 4096 NT_STATUS_OK
WriteX 11656 0 4096 4096 NT_STATUS_OK
WriteX 11657 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11666 NT_STATUS_OK
ReadX 11666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11668 NT_STATUS_OK
ReadX 11668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 8192 8192 NT_STATUS_OK
ReadX 11660 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11674 0 4096 4096 NT_STATUS_OK
ReadX 11674 4096 4096 4096 NT_STATUS_OK
ReadX 11674 8192 4096 4096 NT_STATUS_OK
WriteX 11660 0 4096 4096 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11675 0 4096 4096 NT_STATUS_OK
ReadX 11675 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
WriteX 11655 0 4096 4096 NT_STATUS_OK
WriteX 11656 0 4096 4096 NT_STATUS_OK
WriteX 11657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11679 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11680 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 1004 NT_STATUS_OK
WriteX 11680 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
WriteX 11680 0 2048 2048 NT_STATUS_OK
Close 11680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11681 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11681 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
ReadX 11683 4096 4096 4096 NT_STATUS_OK
WriteX 11683 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11681 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
ReadX 11685 4096 4096 4096 NT_STATUS_OK
WriteX 11685 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11686 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11673 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11666 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Close 11669 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11660 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11662 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11674 NT_STATUS_OK
Close 11675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11688 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11688 0 4096 4096 NT_STATUS_OK
ReadX 11688 4096 4096 4096 NT_STATUS_OK
ReadX 11688 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
ReadX 11689 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11706 NT_STATUS_OK
QUERY_FILE_INFORMATION 11706 1004 NT_STATUS_OK
WriteX 11706 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11706 258 NT_STATUS_OK
WriteX 11706 0 2048 2048 NT_STATUS_OK
Close 11706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11707 NT_STATUS_OK
ReadX 11707 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11707 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11711 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11712 NT_STATUS_OK
QUERY_FILE_INFORMATION 11712 1004 NT_STATUS_OK
WriteX 11712 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11712 258 NT_STATUS_OK
WriteX 11712 0 2048 2048 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11713 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11696 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11714 NT_STATUS_OK
QUERY_FILE_INFORMATION 11714 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11716 NT_STATUS_OK
QUERY_FILE_INFORMATION 11716 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 61440 4096 4096 NT_STATUS_OK
ReadX 11718 126976 4096 4096 NT_STATUS_OK
WriteX 11718 0 65536 65536 NT_STATUS_OK
WriteX 11718 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 61440 4096 4096 NT_STATUS_OK
ReadX 11719 126976 4096 4096 NT_STATUS_OK
ReadX 11719 192512 4096 4096 NT_STATUS_OK
ReadX 11719 258048 4096 4096 NT_STATUS_OK
WriteX 11719 0 65536 65536 NT_STATUS_OK
WriteX 11719 65536 65536 65536 NT_STATUS_OK
WriteX 11719 131072 65536 65536 NT_STATUS_OK
WriteX 11719 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 61440 4096 4096 NT_STATUS_OK
ReadX 11720 126976 4096 4096 NT_STATUS_OK
ReadX 11720 192512 4096 4096 NT_STATUS_OK
ReadX 11720 258048 4096 4096 NT_STATUS_OK
ReadX 11720 323584 4096 4096 NT_STATUS_OK
ReadX 11720 389120 4096 4096 NT_STATUS_OK
ReadX 11720 454656 4096 4096 NT_STATUS_OK
ReadX 11720 520192 4096 4096 NT_STATUS_OK
WriteX 11720 0 65536 65536 NT_STATUS_OK
WriteX 11720 65536 65536 65536 NT_STATUS_OK
WriteX 11720 131072 65536 65536 NT_STATUS_OK
WriteX 11720 196608 65536 65536 NT_STATUS_OK
WriteX 11720 262144 65536 65536 NT_STATUS_OK
WriteX 11720 327680 65536 65536 NT_STATUS_OK
WriteX 11720 393216 65536 65536 NT_STATUS_OK
WriteX 11720 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11721 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11721 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11721 8192 4096 4096 NT_STATUS_OK
ReadX 11721 12288 4096 4096 NT_STATUS_OK
ReadX 11721 16384 4096 4096 NT_STATUS_OK
ReadX 11721 20480 4096 4096 NT_STATUS_OK
ReadX 11721 24576 4096 4096 NT_STATUS_OK
ReadX 11721 28672 4096 4096 NT_STATUS_OK
ReadX 11721 32768 4096 4096 NT_STATUS_OK
ReadX 11721 36864 4096 4096 NT_STATUS_OK
ReadX 11721 40960 4096 4096 NT_STATUS_OK
ReadX 11721 45056 4096 4096 NT_STATUS_OK
ReadX 11721 49152 4096 4096 NT_STATUS_OK
ReadX 11721 53248 4096 4096 NT_STATUS_OK
ReadX 11721 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11721 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11722 NT_STATUS_OK
Close 11722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Close 11720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11724 NT_STATUS_OK
WriteX 11724 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11724 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11724 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11724 1004 NT_STATUS_OK
WriteX 11724 0 57088 57088 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
Flush 11724 NT_STATUS_OK
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11725 NT_STATUS_OK
SET_FILE_INFORMATION 11725 1004 NT_STATUS_OK
Close 11725 NT_STATUS_OK
SET_FILE_INFORMATION 11724 1004 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
Close 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11728 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11729 NT_STATUS_OK
WriteX 11729 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11729 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 0 51456 51456 NT_STATUS_OK
WriteX 11729 0 4096 4096 NT_STATUS_OK
Flush 11729 NT_STATUS_OK
SET_FILE_INFORMATION 11729 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 0 4096 4096 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Close 11728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11733 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11738 NT_STATUS_OK
WriteX 11738 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11738 258 NT_STATUS_OK
WriteX 11738 0 53077 53077 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11739 NT_STATUS_OK
WriteX 11739 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11739 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11739 1004 NT_STATUS_OK
WriteX 11739 0 65536 65536 NT_STATUS_OK
WriteX 11739 65536 1856 1856 NT_STATUS_OK
WriteX 11739 0 4096 4096 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
SET_FILE_INFORMATION 11739 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11739 1004 NT_STATUS_OK
WriteX 11739 0 4096 4096 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Close 11733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11741 NT_STATUS_OK
Close 11741 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11748 NT_STATUS_OK
WriteX 11748 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11748 258 NT_STATUS_OK
WriteX 11748 0 7983 7983 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11753 NT_STATUS_OK
WriteX 11753 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11753 258 NT_STATUS_OK
WriteX 11753 0 65536 65536 NT_STATUS_OK
WriteX 11753 65536 65536 65536 NT_STATUS_OK
WriteX 11753 131072 65536 65536 NT_STATUS_OK
WriteX 11753 196608 65536 65536 NT_STATUS_OK
WriteX 11753 262144 65536 65536 NT_STATUS_OK
WriteX 11753 327680 65536 65536 NT_STATUS_OK
WriteX 11753 393216 65536 65536 NT_STATUS_OK
WriteX 11753 458752 46731 46731 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11754 NT_STATUS_OK
WriteX 11754 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11754 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11743 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11754 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11754 1004 NT_STATUS_OK
WriteX 11754 0 65536 65536 NT_STATUS_OK
WriteX 11754 65536 22848 22848 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
Flush 11754 NT_STATUS_OK
SET_FILE_INFORMATION 11754 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11754 1004 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11756 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11758 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11759 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11759 1004 NT_STATUS_OK
ReadX 11759 8192 4096 4096 NT_STATUS_OK
ReadX 11759 12288 4096 4096 NT_STATUS_OK
ReadX 11759 16384 4096 4096 NT_STATUS_OK
ReadX 11759 20480 4096 4096 NT_STATUS_OK
ReadX 11759 24576 4096 4096 NT_STATUS_OK
ReadX 11759 28672 4096 4096 NT_STATUS_OK
ReadX 11759 32768 4096 4096 NT_STATUS_OK
ReadX 11759 36864 4096 4096 NT_STATUS_OK
ReadX 11759 40960 4096 4096 NT_STATUS_OK
ReadX 11759 45056 4096 4096 NT_STATUS_OK
ReadX 11759 49152 4096 4096 NT_STATUS_OK
ReadX 11759 53248 4096 4096 NT_STATUS_OK
ReadX 11759 57344 4096 4096 NT_STATUS_OK
ReadX 11759 61440 4096 4096 NT_STATUS_OK
ReadX 11759 65536 4096 4096 NT_STATUS_OK
ReadX 11759 69632 4096 4096 NT_STATUS_OK
ReadX 11759 73728 4096 4096 NT_STATUS_OK
ReadX 11759 77824 4096 4096 NT_STATUS_OK
ReadX 11759 81920 4096 4096 NT_STATUS_OK
ReadX 11759 86016 4096 4096 NT_STATUS_OK
ReadX 11759 90112 4096 4096 NT_STATUS_OK
ReadX 11759 94208 4096 4096 NT_STATUS_OK
ReadX 11759 98304 4096 4096 NT_STATUS_OK
ReadX 11759 102400 4096 4096 NT_STATUS_OK
ReadX 11759 106496 4096 4096 NT_STATUS_OK
ReadX 11759 110592 4096 4096 NT_STATUS_OK
ReadX 11759 114688 4096 4096 NT_STATUS_OK
ReadX 11759 118784 4096 4096 NT_STATUS_OK
ReadX 11759 122880 4096 4096 NT_STATUS_OK
ReadX 11759 126976 4096 4096 NT_STATUS_OK
ReadX 11759 131072 4096 4096 NT_STATUS_OK
ReadX 11759 135168 4096 4096 NT_STATUS_OK
ReadX 11759 139264 4096 4096 NT_STATUS_OK
ReadX 11759 143360 4096 4096 NT_STATUS_OK
ReadX 11759 147456 4096 4096 NT_STATUS_OK
ReadX 11759 151552 4096 4096 NT_STATUS_OK
ReadX 11759 155648 4096 4096 NT_STATUS_OK
ReadX 11759 159744 4096 4096 NT_STATUS_OK
ReadX 11759 163840 4096 4096 NT_STATUS_OK
ReadX 11759 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11759 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11762 NT_STATUS_OK
WriteX 11762 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11762 258 NT_STATUS_OK
Close 11759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11763 NT_STATUS_OK
SET_FILE_INFORMATION 11763 1004 NT_STATUS_OK
Close 11763 NT_STATUS_OK
WriteX 11762 0 42388 42388 NT_STATUS_OK
Close 11762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
ReadX 11766 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11767 NT_STATUS_OK
WriteX 11767 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11767 258 NT_STATUS_OK
SET_FILE_INFORMATION 11767 1004 NT_STATUS_OK
WriteX 11767 0 42652 42652 NT_STATUS_OK
Close 11767 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11773 NT_STATUS_OK
Close 11773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11776 NT_STATUS_OK
WriteX 11776 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 258 NT_STATUS_OK
WriteX 11776 0 65536 65536 NT_STATUS_OK
WriteX 11776 65536 49 49 NT_STATUS_OK
Close 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 61440 61440 NT_STATUS_OK
ReadX 11777 61440 4096 4096 NT_STATUS_OK
ReadX 11777 65536 61440 61440 NT_STATUS_OK
ReadX 11777 126976 4096 4096 NT_STATUS_OK
ReadX 11777 131072 61440 61440 NT_STATUS_OK
ReadX 11777 192512 4096 4096 NT_STATUS_OK
ReadX 11777 196608 61440 61440 NT_STATUS_OK
ReadX 11777 258048 4096 4096 NT_STATUS_OK
ReadX 11777 262144 61440 61440 NT_STATUS_OK
ReadX 11777 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 61440 61440 NT_STATUS_OK
ReadX 11778 61440 4096 4096 NT_STATUS_OK
ReadX 11778 65536 61440 61440 NT_STATUS_OK
ReadX 11778 126976 4096 4096 NT_STATUS_OK
ReadX 11778 131072 61440 61440 NT_STATUS_OK
ReadX 11778 192512 4096 4096 NT_STATUS_OK
ReadX 11778 196608 61440 61440 NT_STATUS_OK
ReadX 11778 258048 4096 4096 NT_STATUS_OK
ReadX 11778 262144 61440 61440 NT_STATUS_OK
ReadX 11778 323584 4096 4096 NT_STATUS_OK
ReadX 11778 327680 61440 61440 NT_STATUS_OK
ReadX 11778 389120 4096 4096 NT_STATUS_OK
ReadX 11778 393216 61440 61440 NT_STATUS_OK
ReadX 11778 454656 4096 4096 NT_STATUS_OK
ReadX 11778 458752 61440 61440 NT_STATUS_OK
ReadX 11778 520192 4096 4096 NT_STATUS_OK
ReadX 11778 524288 61440 61440 NT_STATUS_OK
ReadX 11778 585728 4096 4096 NT_STATUS_OK
ReadX 11778 589824 61440 61440 NT_STATUS_OK
ReadX 11778 651264 4096 4096 NT_STATUS_OK
ReadX 11778 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 61440 61440 NT_STATUS_OK
ReadX 11779 61440 4096 4096 NT_STATUS_OK
ReadX 11779 65536 61440 61440 NT_STATUS_OK
ReadX 11779 126976 4096 4096 NT_STATUS_OK
ReadX 11779 131072 61440 61440 NT_STATUS_OK
ReadX 11779 192512 4096 4096 NT_STATUS_OK
ReadX 11779 196608 61440 61440 NT_STATUS_OK
ReadX 11779 258048 4096 4096 NT_STATUS_OK
ReadX 11779 262144 61440 61440 NT_STATUS_OK
ReadX 11779 323584 4096 4096 NT_STATUS_OK
ReadX 11779 327680 61440 61440 NT_STATUS_OK
ReadX 11779 389120 4096 4096 NT_STATUS_OK
ReadX 11779 393216 61440 61440 NT_STATUS_OK
ReadX 11779 454656 4096 4096 NT_STATUS_OK
ReadX 11779 458752 61440 61440 NT_STATUS_OK
ReadX 11779 520192 4096 4096 NT_STATUS_OK
ReadX 11779 524288 61440 61440 NT_STATUS_OK
ReadX 11779 585728 4096 4096 NT_STATUS_OK
ReadX 11779 589824 61440 61440 NT_STATUS_OK
ReadX 11779 651264 4096 4096 NT_STATUS_OK
ReadX 11779 655360 61440 61440 NT_STATUS_OK
ReadX 11779 716800 4096 4096 NT_STATUS_OK
ReadX 11779 720896 61440 61440 NT_STATUS_OK
ReadX 11779 782336 4096 4096 NT_STATUS_OK
ReadX 11779 786432 61440 61440 NT_STATUS_OK
ReadX 11779 847872 4096 4096 NT_STATUS_OK
ReadX 11779 851968 61440 61440 NT_STATUS_OK
ReadX 11779 913408 4096 4096 NT_STATUS_OK
ReadX 11779 917504 61440 61440 NT_STATUS_OK
ReadX 11779 978944 4096 4096 NT_STATUS_OK
ReadX 11779 983040 61440 61440 NT_STATUS_OK
ReadX 11779 1044480 4096 4096 NT_STATUS_OK
ReadX 11779 1048576 61440 61440 NT_STATUS_OK
ReadX 11779 1110016 4096 4096 NT_STATUS_OK
ReadX 11779 1114112 61440 61440 NT_STATUS_OK
ReadX 11779 1175552 4096 4096 NT_STATUS_OK
ReadX 11779 1179648 61440 61440 NT_STATUS_OK
ReadX 11779 1241088 4096 4096 NT_STATUS_OK
ReadX 11779 1245184 61440 61440 NT_STATUS_OK
ReadX 11779 1306624 4096 4096 NT_STATUS_OK
ReadX 11779 1310720 61440 61440 NT_STATUS_OK
ReadX 11779 1372160 4096 4096 NT_STATUS_OK
ReadX 11779 1376256 61440 61440 NT_STATUS_OK
ReadX 11779 1437696 4096 4096 NT_STATUS_OK
ReadX 11779 1441792 61440 61440 NT_STATUS_OK
ReadX 11779 1503232 4096 4096 NT_STATUS_OK
ReadX 11779 1507328 61440 61440 NT_STATUS_OK
ReadX 11779 1568768 4096 4096 NT_STATUS_OK
ReadX 11779 1572864 61440 61440 NT_STATUS_OK
ReadX 11779 1634304 4096 4096 NT_STATUS_OK
ReadX 11779 1638400 61440 61440 NT_STATUS_OK
ReadX 11779 1699840 4096 4096 NT_STATUS_OK
ReadX 11779 1703936 61440 61440 NT_STATUS_OK
ReadX 11779 1765376 4096 4096 NT_STATUS_OK
ReadX 11779 1769472 61440 61440 NT_STATUS_OK
ReadX 11779 1830912 4096 4096 NT_STATUS_OK
ReadX 11779 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11781 NT_STATUS_OK
QUERY_FILE_INFORMATION 11781 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11781 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11781 1005 NT_STATUS_OK
ReadX 11781 2156 24 24 NT_STATUS_OK
ReadX 11781 2139 276 276 NT_STATUS_OK
ReadX 11781 2136 14 14 NT_STATUS_OK
ReadX 11781 2136 7 7 NT_STATUS_OK
ReadX 11781 2138 12 12 NT_STATUS_OK
ReadX 11781 2137 8 8 NT_STATUS_OK
ReadX 11781 2135 15 15 NT_STATUS_OK
ReadX 11781 0 16 16 NT_STATUS_OK
ReadX 11781 16 2048 2048 NT_STATUS_OK
ReadX 11781 2064 2048 2048 NT_STATUS_OK
ReadX 11781 257 2048 2048 NT_STATUS_OK
ReadX 11781 385 2048 2048 NT_STATUS_OK
ReadX 11781 513 2048 2048 NT_STATUS_OK
ReadX 11781 641 2048 2048 NT_STATUS_OK
ReadX 11781 769 2048 2048 NT_STATUS_OK
ReadX 11781 897 2048 2048 NT_STATUS_OK
ReadX 11781 1025 2048 2048 NT_STATUS_OK
ReadX 11781 1153 2048 2048 NT_STATUS_OK
ReadX 11781 1281 2048 2048 NT_STATUS_OK
ReadX 11781 1409 2048 2048 NT_STATUS_OK
ReadX 11781 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11786 NT_STATUS_OK
WriteX 11786 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11786 258 NT_STATUS_OK
WriteX 11786 0 10575 10575 NT_STATUS_OK
Flush 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11787 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11791 NT_STATUS_OK
LockX 11791 2147483538 1 NT_STATUS_OK
UnlockX 11791 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 1005 NT_STATUS_OK
ReadX 11791 0 512 512 NT_STATUS_OK
ReadX 11791 512 512 512 NT_STATUS_OK
ReadX 11791 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 1004 NT_STATUS_OK
Close 11791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11792 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 1005 NT_STATUS_OK
ReadX 11792 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11793 NT_STATUS_OK
LockX 11793 2147483538 1 NT_STATUS_OK
UnlockX 11793 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11793 1005 NT_STATUS_OK
ReadX 11793 0 512 512 NT_STATUS_OK
ReadX 11793 512 512 512 NT_STATUS_OK
ReadX 11793 1024 512 512 NT_STATUS_OK
ReadX 11793 288 20 20 NT_STATUS_OK
ReadX 11793 308 2084 2084 NT_STATUS_OK
ReadX 11793 388 2084 2084 NT_STATUS_OK
ReadX 11793 388 2084 2084 NT_STATUS_OK
ReadX 11780 2157 1386 1386 NT_STATUS_OK
ReadX 11793 2472 399 399 NT_STATUS_OK
ReadX 11793 3072 1536 1536 NT_STATUS_OK
ReadX 11793 544 149 149 NT_STATUS_OK
ReadX 11793 693 485 485 NT_STATUS_OK
Close 11793 NT_STATUS_OK
ReadX 11780 2157 4096 4096 NT_STATUS_OK
ReadX 11780 6253 4096 4096 NT_STATUS_OK
ReadX 11780 10349 4096 4096 NT_STATUS_OK
ReadX 11780 14445 4096 4096 NT_STATUS_OK
ReadX 11780 18541 4096 4096 NT_STATUS_OK
ReadX 11780 22637 256 256 NT_STATUS_OK
ReadX 11780 22893 4096 4096 NT_STATUS_OK
ReadX 11780 26989 4096 4096 NT_STATUS_OK
ReadX 11780 31085 4096 4096 NT_STATUS_OK
ReadX 11780 35181 4096 4096 NT_STATUS_OK
ReadX 11780 39277 4096 4096 NT_STATUS_OK
ReadX 11780 43373 4096 4096 NT_STATUS_OK
ReadX 11780 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11780 2157 1024 1024 NT_STATUS_OK
ReadX 11780 1667 4688 4688 NT_STATUS_OK
ReadX 11780 6355 3516 3516 NT_STATUS_OK
ReadX 11780 9871 16384 16384 NT_STATUS_OK
ReadX 11780 26255 3771 3771 NT_STATUS_OK
ReadX 11780 30026 2048 2048 NT_STATUS_OK
ReadX 11780 32074 1024 1024 NT_STATUS_OK
ReadX 11780 33098 6652 6652 NT_STATUS_OK
ReadX 11780 39750 16384 16384 NT_STATUS_OK
ReadX 11780 56134 10496 10496 NT_STATUS_OK
ReadX 11780 66630 1784 1784 NT_STATUS_OK
ReadX 11780 68414 90 90 NT_STATUS_OK
ReadX 11780 68504 273 273 NT_STATUS_OK
ReadX 11780 68777 1600 1600 NT_STATUS_OK
ReadX 11780 70377 640 640 NT_STATUS_OK
ReadX 11780 71017 1280 1280 NT_STATUS_OK
ReadX 11780 72297 8464 8464 NT_STATUS_OK
ReadX 11780 80761 158 158 NT_STATUS_OK
ReadX 11780 80919 912 912 NT_STATUS_OK
ReadX 11780 81831 1980 1980 NT_STATUS_OK
ReadX 11780 83811 2256 2256 NT_STATUS_OK
ReadX 11780 86067 400 400 NT_STATUS_OK
ReadX 11780 86467 252 252 NT_STATUS_OK
ReadX 11780 86719 42 42 NT_STATUS_OK
ReadX 11780 86761 725 725 NT_STATUS_OK
ReadX 11780 2009 512 512 NT_STATUS_OK
ReadX 11780 3895 9 9 NT_STATUS_OK
ReadX 11780 3781 46 46 NT_STATUS_OK
ReadX 11780 4059 92 92 NT_STATUS_OK
ReadX 11780 3781 92 92 NT_STATUS_OK
ReadX 11780 3986 184 184 NT_STATUS_OK
ReadX 11780 3987 16384 16384 NT_STATUS_OK
ReadX 11780 3902 16384 16384 NT_STATUS_OK
ReadX 11780 3781 10240 10240 NT_STATUS_OK
ReadX 11780 3821 16384 16384 NT_STATUS_OK
ReadX 11780 3891 935 935 NT_STATUS_OK
ReadX 11780 4060 10240 10240 NT_STATUS_OK
ReadX 11780 4059 184 184 NT_STATUS_OK
ReadX 11780 256 184 184 NT_STATUS_OK
ReadX 11780 256 1026 1026 NT_STATUS_OK
ReadX 11780 3901 326 326 NT_STATUS_OK
ReadX 11780 3899 652 652 NT_STATUS_OK
ReadX 11780 256 2 2 NT_STATUS_OK
ReadX 11780 258 4948 4948 NT_STATUS_OK
Close 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11795 NT_STATUS_OK
Close 11795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11798 NT_STATUS_OK
WriteX 11798 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11798 258 NT_STATUS_OK
WriteX 11798 0 65536 65536 NT_STATUS_OK
WriteX 11798 65536 65536 65536 NT_STATUS_OK
WriteX 11798 131072 65536 65536 NT_STATUS_OK
WriteX 11798 196608 65536 65536 NT_STATUS_OK
WriteX 11798 262144 65536 65536 NT_STATUS_OK
WriteX 11798 327680 65536 65536 NT_STATUS_OK
WriteX 11798 393216 65536 65536 NT_STATUS_OK
WriteX 11798 458752 65536 65536 NT_STATUS_OK
WriteX 11798 524288 65536 65536 NT_STATUS_OK
WriteX 11798 589824 35257 35257 NT_STATUS_OK
Close 11798 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11800 NT_STATUS_OK
Close 11800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11803 NT_STATUS_OK
WriteX 11803 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11803 258 NT_STATUS_OK
WriteX 11803 0 65536 65536 NT_STATUS_OK
WriteX 11803 65536 65536 65536 NT_STATUS_OK
WriteX 11803 131072 65536 65536 NT_STATUS_OK
WriteX 11803 196608 65536 65536 NT_STATUS_OK
WriteX 11803 262144 65536 65536 NT_STATUS_OK
WriteX 11803 327680 65536 65536 NT_STATUS_OK
WriteX 11803 393216 65536 65536 NT_STATUS_OK
WriteX 11803 458752 65536 65536 NT_STATUS_OK
WriteX 11803 524288 65536 65536 NT_STATUS_OK
WriteX 11803 589824 57598 57598 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11805 NT_STATUS_OK
WriteX 11805 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11805 258 NT_STATUS_OK
WriteX 11805 0 12543 12543 NT_STATUS_OK
Flush 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Close 11789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11807 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11811 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 1005 NT_STATUS_OK
ReadX 11811 1938 24 24 NT_STATUS_OK
ReadX 11811 1920 276 276 NT_STATUS_OK
ReadX 11811 1918 14 14 NT_STATUS_OK
ReadX 11811 1918 7 7 NT_STATUS_OK
ReadX 11811 1919 12 12 NT_STATUS_OK
ReadX 11811 1919 8 8 NT_STATUS_OK
ReadX 11811 1917 15 15 NT_STATUS_OK
ReadX 11811 0 16 16 NT_STATUS_OK
ReadX 11811 16 2048 2048 NT_STATUS_OK
ReadX 11811 2064 2048 2048 NT_STATUS_OK
ReadX 11811 257 2048 2048 NT_STATUS_OK
ReadX 11811 385 2048 2048 NT_STATUS_OK
ReadX 11811 513 2048 2048 NT_STATUS_OK
ReadX 11811 641 2048 2048 NT_STATUS_OK
ReadX 11811 769 2048 2048 NT_STATUS_OK
ReadX 11811 897 2048 2048 NT_STATUS_OK
ReadX 11811 1025 2048 2048 NT_STATUS_OK
ReadX 11811 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11813 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11816 NT_STATUS_OK
WriteX 11816 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11816 258 NT_STATUS_OK
WriteX 11816 0 11588 11588 NT_STATUS_OK
Flush 11816 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11817 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11821 NT_STATUS_OK
WriteX 11821 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11821 258 NT_STATUS_OK
WriteX 11821 0 11615 11615 NT_STATUS_OK
Flush 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11830 NT_STATUS_OK
WriteX 11830 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 258 NT_STATUS_OK
WriteX 11830 0 65536 65536 NT_STATUS_OK
WriteX 11830 65536 16050 16050 NT_STATUS_OK
Close 11830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11810 1939 64 64 NT_STATUS_OK
ReadX 11810 128 248 248 NT_STATUS_OK
ReadX 11810 128 568 568 NT_STATUS_OK
ReadX 11810 3872 1536 1536 NT_STATUS_OK
ReadX 11810 3456 2560 2560 NT_STATUS_OK
ReadX 11810 3136 512 512 NT_STATUS_OK
ReadX 11810 2880 4096 4096 NT_STATUS_OK
ReadX 11810 3264 3072 3072 NT_STATUS_OK
ReadX 11810 320 4096 4096 NT_STATUS_OK
ReadX 11810 1024 4096 4096 NT_STATUS_OK
ReadX 11810 3616 4096 4096 NT_STATUS_OK
ReadX 11810 1939 64 64 NT_STATUS_OK
ReadX 11810 128 248 248 NT_STATUS_OK
ReadX 11810 128 608 608 NT_STATUS_OK
ReadX 11810 2858 1024 1024 NT_STATUS_OK
ReadX 11810 2810 4096 4096 NT_STATUS_OK
ReadX 11810 2826 4096 4096 NT_STATUS_OK
ReadX 11810 2580 2048 2048 NT_STATUS_OK
ReadX 11810 2800 2560 2560 NT_STATUS_OK
ReadX 11810 2100 4096 4096 NT_STATUS_OK
ReadX 11810 2084 4096 4096 NT_STATUS_OK
ReadX 11810 868 4096 4096 NT_STATUS_OK
ReadX 11810 2324 4096 4096 NT_STATUS_OK
ReadX 11810 884 4096 4096 NT_STATUS_OK
ReadX 11810 2604 1024 1024 NT_STATUS_OK
ReadX 11810 580 4096 4096 NT_STATUS_OK
ReadX 11810 596 4096 4096 NT_STATUS_OK
ReadX 11810 2752 4096 4096 NT_STATUS_OK
ReadX 11810 2842 1024 1024 NT_STATUS_OK
ReadX 11810 660 4096 4096 NT_STATUS_OK
ReadX 11810 2720 4096 4096 NT_STATUS_OK
ReadX 11810 2736 4096 4096 NT_STATUS_OK
ReadX 11810 628 4096 4096 NT_STATUS_OK
ReadX 11810 2704 4096 4096 NT_STATUS_OK
ReadX 11810 1556 4096 4096 NT_STATUS_OK
ReadX 11810 576 4096 4096 NT_STATUS_OK
ReadX 11810 3168 1536 1536 NT_STATUS_OK
ReadX 11810 832 4096 4096 NT_STATUS_OK
ReadX 11810 1088 4096 4096 NT_STATUS_OK
ReadX 11810 1344 4096 4096 NT_STATUS_OK
ReadX 11810 1600 4096 4096 NT_STATUS_OK
ReadX 11810 1856 4096 4096 NT_STATUS_OK
ReadX 11810 2112 4096 4096 NT_STATUS_OK
ReadX 11810 1892 4096 4096 NT_STATUS_OK
ReadX 11810 820 4096 4096 NT_STATUS_OK
ReadX 11810 788 4096 4096 NT_STATUS_OK
ReadX 11810 1604 4096 4096 NT_STATUS_OK
ReadX 11810 3648 4096 4096 NT_STATUS_OK
ReadX 11810 2608 4096 4096 NT_STATUS_OK
ReadX 11810 548 4096 4096 NT_STATUS_OK
ReadX 11810 740 4096 4096 NT_STATUS_OK
ReadX 11810 1344 4096 4096 NT_STATUS_OK
ReadX 11810 3392 4096 4096 NT_STATUS_OK
ReadX 11810 3904 4096 4096 NT_STATUS_OK
ReadX 11810 644 4096 4096 NT_STATUS_OK
ReadX 11810 676 4096 4096 NT_STATUS_OK
ReadX 11810 2688 4096 4096 NT_STATUS_OK
ReadX 11810 320 4096 4096 NT_STATUS_OK
ReadX 11810 900 4096 4096 NT_STATUS_OK
ReadX 11810 1908 4096 4096 NT_STATUS_OK
ReadX 11810 852 4096 4096 NT_STATUS_OK
ReadX 11810 724 4096 4096 NT_STATUS_OK
ReadX 11810 2292 4096 4096 NT_STATUS_OK
ReadX 11810 612 4096 4096 NT_STATUS_OK
ReadX 11810 388 4096 4096 NT_STATUS_OK
ReadX 11810 2368 4096 4096 NT_STATUS_OK
ReadX 11810 2624 4096 4096 NT_STATUS_OK
ReadX 11810 500 4096 4096 NT_STATUS_OK
ReadX 11810 356 4096 4096 NT_STATUS_OK
ReadX 11810 1024 4096 4096 NT_STATUS_OK
ReadX 11810 576 4096 4096 NT_STATUS_OK
ReadX 11810 340 4096 4096 NT_STATUS_OK
ReadX 11810 420 4096 4096 NT_STATUS_OK
ReadX 11810 1600 4096 4096 NT_STATUS_OK
ReadX 11810 404 4096 4096 NT_STATUS_OK
ReadX 11810 1428 4096 4096 NT_STATUS_OK
ReadX 11810 2656 4096 4096 NT_STATUS_OK
ReadX 11810 2624 4096 4096 NT_STATUS_OK
ReadX 11810 452 4096 4096 NT_STATUS_OK
ReadX 11810 692 4096 4096 NT_STATUS_OK
ReadX 11810 564 4096 4096 NT_STATUS_OK
ReadX 11810 372 4096 4096 NT_STATUS_OK
ReadX 11810 468 4096 4096 NT_STATUS_OK
ReadX 11810 484 4096 4096 NT_STATUS_OK
ReadX 11810 1088 4096 4096 NT_STATUS_OK
ReadX 11810 1924 4096 4096 NT_STATUS_OK
ReadX 11810 2768 4096 4096 NT_STATUS_OK
ReadX 11810 832 4096 4096 NT_STATUS_OK
ReadX 11810 836 4096 4096 NT_STATUS_OK
ReadX 11810 1856 4096 4096 NT_STATUS_OK
ReadX 11810 2640 4096 4096 NT_STATUS_OK
ReadX 11810 436 4096 4096 NT_STATUS_OK
ReadX 11810 1828 4096 4096 NT_STATUS_OK
ReadX 11810 804 4096 4096 NT_STATUS_OK
ReadX 11810 1860 4096 4096 NT_STATUS_OK
ReadX 11810 1812 4096 4096 NT_STATUS_OK
ReadX 11810 756 4096 4096 NT_STATUS_OK
ReadX 11810 1636 4096 4096 NT_STATUS_OK
ReadX 11810 772 4096 4096 NT_STATUS_OK
ReadX 11810 2036 4096 4096 NT_STATUS_OK
ReadX 11810 1220 4096 4096 NT_STATUS_OK
ReadX 11810 1652 4096 4096 NT_STATUS_OK
ReadX 11810 2588 4096 4096 NT_STATUS_OK
ReadX 11810 916 4096 4096 NT_STATUS_OK
ReadX 11810 260 4096 4096 NT_STATUS_OK
ReadX 11810 932 4096 4096 NT_STATUS_OK
ReadX 11810 2624 4096 4096 NT_STATUS_OK
ReadX 11810 308 4096 4096 NT_STATUS_OK
ReadX 11810 292 4096 4096 NT_STATUS_OK
ReadX 11810 1140 4096 4096 NT_STATUS_OK
ReadX 11810 276 4096 4096 NT_STATUS_OK
ReadX 11810 2020 4096 4096 NT_STATUS_OK
ReadX 11810 2880 4096 4096 NT_STATUS_OK
ReadX 11810 516 4096 4096 NT_STATUS_OK
ReadX 11810 1844 4096 4096 NT_STATUS_OK
ReadX 11810 1124 4096 4096 NT_STATUS_OK
ReadX 11810 3136 4096 4096 NT_STATUS_OK
ReadX 11810 324 4096 4096 NT_STATUS_OK
ReadX 11810 1156 4096 4096 NT_STATUS_OK
ReadX 11810 1172 4096 4096 NT_STATUS_OK
ReadX 11810 2112 4096 4096 NT_STATUS_OK
ReadX 11810 2368 4096 4096 NT_STATUS_OK
ReadX 11810 964 4096 4096 NT_STATUS_OK
ReadX 11810 980 4096 4096 NT_STATUS_OK
ReadX 11810 1012 4096 4096 NT_STATUS_OK
ReadX 11810 532 4096 4096 NT_STATUS_OK
ReadX 11810 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11810 1620 4096 4096 NT_STATUS_OK
ReadX 11810 1604 4096 4096 NT_STATUS_OK
ReadX 11810 2116 4096 4096 NT_STATUS_OK
ReadX 11810 2132 4096 4096 NT_STATUS_OK
ReadX 11810 2148 4096 4096 NT_STATUS_OK
ReadX 11810 2276 4096 4096 NT_STATUS_OK
ReadX 11810 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11835 NT_STATUS_OK
QUERY_FILE_INFORMATION 11790 1004 NT_STATUS_OK
Close 11790 NT_STATUS_OK
WriteX 11835 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11835 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 1004 NT_STATUS_OK
Close 11792 NT_STATUS_OK
WriteX 11835 0 65536 65536 NT_STATUS_OK
WriteX 11835 65536 64850 64850 NT_STATUS_OK
Close 11835 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11837 NT_STATUS_OK
WriteX 11837 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11837 258 NT_STATUS_OK
ReadX 11810 2068 4096 4096 NT_STATUS_OK
ReadX 11810 1588 4096 4096 NT_STATUS_OK
ReadX 11810 1572 4096 4096 NT_STATUS_OK
WriteX 11837 0 18630 18630 NT_STATUS_OK
Flush 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11810 612 4096 4096 NT_STATUS_OK
ReadX 11810 564 4096 4096 NT_STATUS_OK
ReadX 11810 1876 4096 4096 NT_STATUS_OK
ReadX 11810 628 4096 4096 NT_STATUS_OK
ReadX 11810 740 4096 4096 NT_STATUS_OK
ReadX 11810 724 4096 4096 NT_STATUS_OK
ReadX 11810 644 4096 4096 NT_STATUS_OK
ReadX 11810 2324 4096 4096 NT_STATUS_OK
ReadX 11810 660 4096 4096 NT_STATUS_OK
ReadX 11810 852 4096 4096 NT_STATUS_OK
ReadX 11810 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11810 2368 4096 4096 NT_STATUS_OK
ReadX 11810 1024 4096 4096 NT_STATUS_OK
ReadX 11810 320 4096 4096 NT_STATUS_OK
ReadX 11810 580 4096 4096 NT_STATUS_OK
ReadX 11810 3136 512 512 NT_STATUS_OK
ReadX 11810 2880 4096 4096 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11842 NT_STATUS_OK
ReadX 11842 61440 4096 4096 NT_STATUS_OK
ReadX 11842 126976 4096 4096 NT_STATUS_OK
WriteX 11842 0 65536 65536 NT_STATUS_OK
WriteX 11842 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 61440 4096 4096 NT_STATUS_OK
ReadX 11843 126976 4096 4096 NT_STATUS_OK
ReadX 11843 192512 4096 4096 NT_STATUS_OK
ReadX 11843 258048 4096 4096 NT_STATUS_OK
WriteX 11843 0 65536 65536 NT_STATUS_OK
WriteX 11843 65536 65536 65536 NT_STATUS_OK
WriteX 11843 131072 65536 65536 NT_STATUS_OK
WriteX 11843 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11844 NT_STATUS_OK
ReadX 11844 61440 4096 4096 NT_STATUS_OK
ReadX 11844 126976 4096 4096 NT_STATUS_OK
ReadX 11844 192512 4096 4096 NT_STATUS_OK
ReadX 11844 258048 4096 4096 NT_STATUS_OK
ReadX 11844 323584 4096 4096 NT_STATUS_OK
ReadX 11844 389120 4096 4096 NT_STATUS_OK
ReadX 11844 454656 4096 4096 NT_STATUS_OK
ReadX 11844 520192 4096 4096 NT_STATUS_OK
WriteX 11844 0 65536 65536 NT_STATUS_OK
WriteX 11844 65536 65536 65536 NT_STATUS_OK
WriteX 11844 131072 65536 65536 NT_STATUS_OK
WriteX 11844 196608 65536 65536 NT_STATUS_OK
WriteX 11844 262144 65536 65536 NT_STATUS_OK
WriteX 11844 327680 65536 65536 NT_STATUS_OK
WriteX 11844 393216 65536 65536 NT_STATUS_OK
WriteX 11844 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11847 NT_STATUS_OK
WriteX 11847 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11847 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11845 0 8192 8192 NT_STATUS_OK
Flush 11845 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11845 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11845 0 8192 8192 NT_STATUS_OK
Flush 11845 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11845 0 8192 8192 NT_STATUS_OK
Flush 11845 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11845 0 8192 8192 NT_STATUS_OK
Flush 11845 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11849 NT_STATUS_OK
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Close 11809 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Close 11844 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11852 NT_STATUS_OK
WriteX 11852 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11852 258 NT_STATUS_OK
WriteX 11852 0 62591 62591 NT_STATUS_OK
Close 11852 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11854 NT_STATUS_OK
Close 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11857 NT_STATUS_OK
WriteX 11857 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 258 NT_STATUS_OK
WriteX 11857 0 10845 10845 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11859 NT_STATUS_OK
Close 11859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11862 NT_STATUS_OK
WriteX 11862 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11862 258 NT_STATUS_OK
WriteX 11862 0 30118 30118 NT_STATUS_OK
Close 11862 NT_STATUS_OK
WriteX 11845 0 4096 4096 NT_STATUS_OK
WriteX 11847 0 64 64 NT_STATUS_OK
Close 11847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11845 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 61440 61440 NT_STATUS_OK
ReadX 11864 61440 4096 4096 NT_STATUS_OK
ReadX 11864 65536 61440 61440 NT_STATUS_OK
ReadX 11864 126976 4096 4096 NT_STATUS_OK
ReadX 11864 131072 61440 61440 NT_STATUS_OK
ReadX 11864 192512 4096 4096 NT_STATUS_OK
ReadX 11864 196608 61440 61440 NT_STATUS_OK
ReadX 11864 258048 4096 4096 NT_STATUS_OK
ReadX 11864 262144 61440 61440 NT_STATUS_OK
ReadX 11864 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 61440 61440 NT_STATUS_OK
ReadX 11865 61440 4096 4096 NT_STATUS_OK
ReadX 11865 65536 61440 61440 NT_STATUS_OK
ReadX 11865 126976 4096 4096 NT_STATUS_OK
ReadX 11865 131072 61440 61440 NT_STATUS_OK
ReadX 11865 192512 4096 4096 NT_STATUS_OK
ReadX 11865 196608 61440 61440 NT_STATUS_OK
ReadX 11865 258048 4096 4096 NT_STATUS_OK
ReadX 11865 262144 61440 61440 NT_STATUS_OK
ReadX 11865 323584 4096 4096 NT_STATUS_OK
ReadX 11865 327680 61440 61440 NT_STATUS_OK
ReadX 11865 389120 4096 4096 NT_STATUS_OK
ReadX 11865 393216 61440 61440 NT_STATUS_OK
ReadX 11865 454656 4096 4096 NT_STATUS_OK
ReadX 11865 458752 61440 61440 NT_STATUS_OK
ReadX 11865 520192 4096 4096 NT_STATUS_OK
ReadX 11865 524288 61440 61440 NT_STATUS_OK
ReadX 11865 585728 4096 4096 NT_STATUS_OK
ReadX 11865 589824 61440 61440 NT_STATUS_OK
ReadX 11865 651264 4096 4096 NT_STATUS_OK
ReadX 11865 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 61440 61440 NT_STATUS_OK
ReadX 11866 61440 4096 4096 NT_STATUS_OK
ReadX 11866 65536 61440 61440 NT_STATUS_OK
ReadX 11866 126976 4096 4096 NT_STATUS_OK
ReadX 11866 131072 61440 61440 NT_STATUS_OK
ReadX 11866 192512 4096 4096 NT_STATUS_OK
ReadX 11866 196608 61440 61440 NT_STATUS_OK
ReadX 11866 258048 4096 4096 NT_STATUS_OK
ReadX 11866 262144 61440 61440 NT_STATUS_OK
ReadX 11866 323584 4096 4096 NT_STATUS_OK
ReadX 11866 327680 61440 61440 NT_STATUS_OK
ReadX 11866 389120 4096 4096 NT_STATUS_OK
ReadX 11866 393216 61440 61440 NT_STATUS_OK
ReadX 11866 454656 4096 4096 NT_STATUS_OK
ReadX 11866 458752 61440 61440 NT_STATUS_OK
ReadX 11866 520192 4096 4096 NT_STATUS_OK
ReadX 11866 524288 61440 61440 NT_STATUS_OK
ReadX 11866 585728 4096 4096 NT_STATUS_OK
ReadX 11866 589824 61440 61440 NT_STATUS_OK
ReadX 11866 651264 4096 4096 NT_STATUS_OK
ReadX 11866 655360 61440 61440 NT_STATUS_OK
ReadX 11866 716800 4096 4096 NT_STATUS_OK
ReadX 11866 720896 61440 61440 NT_STATUS_OK
ReadX 11866 782336 4096 4096 NT_STATUS_OK
ReadX 11866 786432 61440 61440 NT_STATUS_OK
ReadX 11866 847872 4096 4096 NT_STATUS_OK
ReadX 11866 851968 61440 61440 NT_STATUS_OK
ReadX 11866 913408 4096 4096 NT_STATUS_OK
ReadX 11866 917504 61440 61440 NT_STATUS_OK
ReadX 11866 978944 4096 4096 NT_STATUS_OK
ReadX 11866 983040 61440 61440 NT_STATUS_OK
ReadX 11866 1044480 4096 4096 NT_STATUS_OK
ReadX 11866 1048576 61440 61440 NT_STATUS_OK
ReadX 11866 1110016 4096 4096 NT_STATUS_OK
ReadX 11866 1114112 61440 61440 NT_STATUS_OK
ReadX 11866 1175552 4096 4096 NT_STATUS_OK
ReadX 11866 1179648 61440 61440 NT_STATUS_OK
ReadX 11866 1241088 4096 4096 NT_STATUS_OK
ReadX 11866 1245184 61440 61440 NT_STATUS_OK
ReadX 11866 1306624 4096 4096 NT_STATUS_OK
ReadX 11866 1310720 61440 61440 NT_STATUS_OK
ReadX 11866 1372160 4096 4096 NT_STATUS_OK
ReadX 11866 1376256 61440 61440 NT_STATUS_OK
ReadX 11866 1437696 4096 4096 NT_STATUS_OK
ReadX 11866 1441792 61440 61440 NT_STATUS_OK
ReadX 11866 1503232 4096 4096 NT_STATUS_OK
ReadX 11866 1507328 61440 61440 NT_STATUS_OK
ReadX 11866 1568768 4096 4096 NT_STATUS_OK
ReadX 11866 1572864 61440 61440 NT_STATUS_OK
ReadX 11866 1634304 4096 4096 NT_STATUS_OK
ReadX 11866 1638400 61440 61440 NT_STATUS_OK
ReadX 11866 1699840 4096 4096 NT_STATUS_OK
ReadX 11866 1703936 61440 61440 NT_STATUS_OK
ReadX 11866 1765376 4096 4096 NT_STATUS_OK
ReadX 11866 1769472 61440 61440 NT_STATUS_OK
ReadX 11866 1830912 4096 4096 NT_STATUS_OK
ReadX 11866 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11867 NT_STATUS_OK
Close 11867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
ReadX 11871 4096 4096 4096 NT_STATUS_OK
ReadX 11871 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11872 NT_STATUS_OK
Close 11872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11875 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11879 NT_STATUS_OK
ReadX 11879 0 8192 8192 NT_STATUS_OK
ReadX 11879 8192 8192 8192 NT_STATUS_OK
ReadX 11879 16384 8192 8192 NT_STATUS_OK
ReadX 11879 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11881 NT_STATUS_OK
Close 11881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Close 11878 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11884 NT_STATUS_OK
WriteX 11884 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11884 258 NT_STATUS_OK
WriteX 11884 0 10438 10438 NT_STATUS_OK
Close 11884 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11885 NT_STATUS_OK
Close 11885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11887 NT_STATUS_OK
Close 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11888 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11889 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11890 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11892 NT_STATUS_OK
Close 11892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
ReadX 11893 4096 4096 4096 NT_STATUS_OK
ReadX 11893 8192 4096 4096 NT_STATUS_OK
ReadX 11893 12288 8192 8192 NT_STATUS_OK
ReadX 11893 20480 8192 8192 NT_STATUS_OK
ReadX 11893 28672 8192 8192 NT_STATUS_OK
ReadX 11893 36864 8192 8192 NT_STATUS_OK
ReadX 11893 45056 8192 8192 NT_STATUS_OK
ReadX 11893 53248 8192 8192 NT_STATUS_OK
ReadX 11893 61440 8192 8192 NT_STATUS_OK
ReadX 11893 69632 8192 8192 NT_STATUS_OK
ReadX 11893 77824 8192 8192 NT_STATUS_OK
ReadX 11893 86016 8192 8192 NT_STATUS_OK
ReadX 11893 94208 8192 8192 NT_STATUS_OK
ReadX 11893 102400 8192 8192 NT_STATUS_OK
ReadX 11893 110592 8192 8192 NT_STATUS_OK
ReadX 11893 118784 8192 8192 NT_STATUS_OK
ReadX 11893 126976 8192 8192 NT_STATUS_OK
ReadX 11893 135168 8192 8192 NT_STATUS_OK
ReadX 11893 143360 8192 8192 NT_STATUS_OK
ReadX 11893 151552 8192 8192 NT_STATUS_OK
ReadX 11893 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Close 11890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11898 NT_STATUS_OK
WriteX 11898 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11898 258 NT_STATUS_OK
WriteX 11898 0 28489 28489 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11899 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11901 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 8192 8192 NT_STATUS_OK
ReadX 11905 8192 8192 8192 NT_STATUS_OK
ReadX 11905 16384 8192 8192 NT_STATUS_OK
ReadX 11905 24576 8192 8192 NT_STATUS_OK
ReadX 11905 32768 16384 16384 NT_STATUS_OK
ReadX 11905 49152 8192 8192 NT_STATUS_OK
ReadX 11905 57344 8192 8192 NT_STATUS_OK
ReadX 11905 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11910 NT_STATUS_OK
WriteX 11910 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 258 NT_STATUS_OK
WriteX 11910 0 29253 29253 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11917 NT_STATUS_OK
WriteX 11917 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11917 258 NT_STATUS_OK
WriteX 11917 0 30183 30183 NT_STATUS_OK
Close 11917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11920 NT_STATUS_OK
WriteX 11920 0 510 510 NT_STATUS_OK
WriteX 11920 510 512 512 NT_STATUS_OK
WriteX 11920 1022 510 510 NT_STATUS_OK
WriteX 11920 1532 510 510 NT_STATUS_OK
WriteX 11920 2042 168 168 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 61440 4096 4096 NT_STATUS_OK
ReadX 11924 126976 4096 4096 NT_STATUS_OK
WriteX 11924 0 65536 65536 NT_STATUS_OK
WriteX 11924 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 61440 4096 4096 NT_STATUS_OK
ReadX 11925 126976 4096 4096 NT_STATUS_OK
ReadX 11925 192512 4096 4096 NT_STATUS_OK
ReadX 11925 258048 4096 4096 NT_STATUS_OK
WriteX 11925 0 65536 65536 NT_STATUS_OK
WriteX 11925 65536 65536 65536 NT_STATUS_OK
WriteX 11925 131072 65536 65536 NT_STATUS_OK
WriteX 11925 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 61440 4096 4096 NT_STATUS_OK
ReadX 11926 126976 4096 4096 NT_STATUS_OK
ReadX 11926 192512 4096 4096 NT_STATUS_OK
ReadX 11926 258048 4096 4096 NT_STATUS_OK
ReadX 11926 323584 4096 4096 NT_STATUS_OK
ReadX 11926 389120 4096 4096 NT_STATUS_OK
ReadX 11926 454656 4096 4096 NT_STATUS_OK
ReadX 11926 520192 4096 4096 NT_STATUS_OK
WriteX 11926 0 65536 65536 NT_STATUS_OK
WriteX 11926 65536 65536 65536 NT_STATUS_OK
WriteX 11926 131072 65536 65536 NT_STATUS_OK
WriteX 11926 196608 65536 65536 NT_STATUS_OK
WriteX 11926 262144 65536 65536 NT_STATUS_OK
WriteX 11926 327680 65536 65536 NT_STATUS_OK
WriteX 11926 393216 65536 65536 NT_STATUS_OK
WriteX 11926 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11936 NT_STATUS_OK
Close 11936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11938 NT_STATUS_OK
Close 11938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11947 NT_STATUS_OK
Close 11947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11961 NT_STATUS_OK
Close 11961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11966 NT_STATUS_OK
Close 11966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11976 NT_STATUS_OK
Close 11976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11995 NT_STATUS_OK
WriteX 11995 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11995 0 65536 65536 NT_STATUS_OK
WriteX 11995 65536 65536 65536 NT_STATUS_OK
WriteX 11995 131072 65536 65536 NT_STATUS_OK
WriteX 11995 196608 65536 65536 NT_STATUS_OK
WriteX 11995 262144 26634 26634 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12000 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12001 NT_STATUS_OK
Close 12001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
Close 12002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12003 NT_STATUS_OK
ReadX 12003 0 4096 4096 NT_STATUS_OK
ReadX 12003 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12003 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12008 NT_STATUS_OK
Close 12008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12013 NT_STATUS_OK
Close 12013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12020 NT_STATUS_OK
Close 12020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12022 NT_STATUS_OK
Close 12022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12031 NT_STATUS_OK
Close 12031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12041 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12051 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12055 NT_STATUS_OK
Close 12055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12065 NT_STATUS_OK
Close 12065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12070 NT_STATUS_OK
Close 12070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12080 NT_STATUS_OK
Close 12080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12082 NT_STATUS_OK
ReadX 12082 0 4096 4096 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12083 NT_STATUS_OK
ReadX 12083 0 4096 4096 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12094 NT_STATUS_OK
Close 12094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 4096 4096 NT_STATUS_OK
Close 12097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12127 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12127 0 4096 4096 NT_STATUS_OK
Close 12127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
ReadX 12129 4096 4096 4096 NT_STATUS_OK
ReadX 12129 8192 4096 4096 NT_STATUS_OK
ReadX 12129 12288 4096 4096 NT_STATUS_OK
ReadX 12129 16384 4096 4096 NT_STATUS_OK
ReadX 12129 20480 4096 4096 NT_STATUS_OK
ReadX 12129 24576 4096 4096 NT_STATUS_OK
ReadX 12129 28672 4096 4096 NT_STATUS_OK
ReadX 12129 32768 4096 4096 NT_STATUS_OK
ReadX 12129 36864 4096 4096 NT_STATUS_OK
ReadX 12129 40960 4096 4096 NT_STATUS_OK
ReadX 12129 45056 4096 4096 NT_STATUS_OK
ReadX 12129 49152 4096 4096 NT_STATUS_OK
ReadX 12129 53248 4096 4096 NT_STATUS_OK
ReadX 12129 57344 4096 4096 NT_STATUS_OK
ReadX 12129 61440 4096 4096 NT_STATUS_OK
ReadX 12129 65536 4096 4096 NT_STATUS_OK
ReadX 12129 69632 4096 4096 NT_STATUS_OK
ReadX 12129 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12129 1004 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Close 12129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12130 NT_STATUS_OK
SET_FILE_INFORMATION 12130 1004 NT_STATUS_OK
Close 12130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12135 NT_STATUS_OK
WriteX 12135 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12135 258 NT_STATUS_OK
WriteX 12135 0 65536 65536 NT_STATUS_OK
WriteX 12135 65536 19979 19979 NT_STATUS_OK
Close 12135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12136 NT_STATUS_OK
ReadX 12136 0 4096 4096 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
QUERY_FILE_INFORMATION 12136 1004 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
SET_FILE_INFORMATION 12136 1004 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12138 NT_STATUS_OK
ReadX 12138 0 4096 4096 NT_STATUS_OK
Close 12137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12140 NT_STATUS_OK
ReadX 12140 0 4096 4096 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12138 NT_STATUS_OK
Close 12141 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12144 NT_STATUS_OK
Close 12144 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12147 NT_STATUS_OK
WriteX 12147 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 258 NT_STATUS_OK
WriteX 12147 0 65536 65536 NT_STATUS_OK
WriteX 12147 65536 17654 17654 NT_STATUS_OK
Close 12147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12149 NT_STATUS_OK
SET_FILE_INFORMATION 12149 1004 NT_STATUS_OK
Close 12149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12150 NT_STATUS_OK
ReadX 12150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 0 4096 4096 NT_STATUS_OK
ReadX 12153 4096 4096 4096 NT_STATUS_OK
ReadX 12153 8192 4096 4096 NT_STATUS_OK
ReadX 12153 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12153 16384 4096 4096 NT_STATUS_OK
ReadX 12153 20480 4096 4096 NT_STATUS_OK
ReadX 12153 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
Close 12154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 4096 4096 NT_STATUS_OK
Close 12155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12156 1004 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12159 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12162 NT_STATUS_OK
WriteX 12162 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12162 258 NT_STATUS_OK
WriteX 12162 0 65536 65536 NT_STATUS_OK
WriteX 12162 65536 19490 19490 NT_STATUS_OK
Close 12162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12163 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Flush 12163 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Flush 12163 NT_STATUS_OK
QUERY_FILE_INFORMATION 12163 1004 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Flush 12163 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Flush 12163 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Flush 12163 NT_STATUS_OK
SET_FILE_INFORMATION 12163 1004 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Flush 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12164 NT_STATUS_OK
SET_FILE_INFORMATION 12164 1004 NT_STATUS_OK
Close 12164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12168 0 4096 4096 NT_STATUS_OK
Close 12168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
ReadX 12170 4096 4096 4096 NT_STATUS_OK
ReadX 12170 8192 4096 4096 NT_STATUS_OK
ReadX 12170 12288 4096 4096 NT_STATUS_OK
ReadX 12170 16384 4096 4096 NT_STATUS_OK
ReadX 12170 20480 4096 4096 NT_STATUS_OK
ReadX 12170 24576 4096 4096 NT_STATUS_OK
ReadX 12170 28672 4096 4096 NT_STATUS_OK
ReadX 12170 32768 4096 4096 NT_STATUS_OK
ReadX 12170 36864 4096 4096 NT_STATUS_OK
ReadX 12170 40960 4096 4096 NT_STATUS_OK
ReadX 12170 45056 4096 4096 NT_STATUS_OK
ReadX 12170 49152 4096 4096 NT_STATUS_OK
ReadX 12170 53248 4096 4096 NT_STATUS_OK
ReadX 12170 57344 4096 4096 NT_STATUS_OK
ReadX 12170 61440 4096 4096 NT_STATUS_OK
ReadX 12170 65536 4096 4096 NT_STATUS_OK
ReadX 12170 69632 4096 4096 NT_STATUS_OK
ReadX 12170 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12170 1004 NT_STATUS_OK
WriteX 12170 0 4096 4096 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12171 NT_STATUS_OK
SET_FILE_INFORMATION 12171 1004 NT_STATUS_OK
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12176 NT_STATUS_OK
WriteX 12176 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12176 258 NT_STATUS_OK
WriteX 12176 0 65536 65536 NT_STATUS_OK
WriteX 12176 65536 8866 8866 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
WriteX 12177 0 4096 4096 NT_STATUS_OK
Flush 12177 NT_STATUS_OK
SET_FILE_INFORMATION 12177 1004 NT_STATUS_OK
WriteX 12177 0 4096 4096 NT_STATUS_OK
Flush 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12181 1004 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12181 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12184 NT_STATUS_OK
Close 12184 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12187 NT_STATUS_OK
WriteX 12187 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12187 258 NT_STATUS_OK
WriteX 12187 0 65536 65536 NT_STATUS_OK
WriteX 12187 65536 9298 9298 NT_STATUS_OK
Close 12187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
WriteX 12188 0 4096 4096 NT_STATUS_OK
Flush 12188 NT_STATUS_OK
SET_FILE_INFORMATION 12188 1004 NT_STATUS_OK
WriteX 12188 0 4096 4096 NT_STATUS_OK
Flush 12188 NT_STATUS_OK
Close 12188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12189 NT_STATUS_OK
SET_FILE_INFORMATION 12189 1004 NT_STATUS_OK
Close 12189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12194 0 4096 4096 NT_STATUS_OK
Close 12194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12195 4096 4096 4096 NT_STATUS_OK
ReadX 12195 8192 4096 4096 NT_STATUS_OK
ReadX 12195 12288 4096 4096 NT_STATUS_OK
ReadX 12195 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12196 NT_STATUS_OK
ReadX 12196 0 4096 4096 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
Close 12197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12198 1004 NT_STATUS_OK
WriteX 12198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12198 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12204 NT_STATUS_OK
WriteX 12204 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12204 258 NT_STATUS_OK
WriteX 12204 0 65536 65536 NT_STATUS_OK
WriteX 12204 65536 11540 11540 NT_STATUS_OK
Close 12204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
WriteX 12205 0 4096 4096 NT_STATUS_OK
Flush 12205 NT_STATUS_OK
SET_FILE_INFORMATION 12205 1004 NT_STATUS_OK
WriteX 12205 0 4096 4096 NT_STATUS_OK
Flush 12205 NT_STATUS_OK
Close 12205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12206 NT_STATUS_OK
SET_FILE_INFORMATION 12206 1004 NT_STATUS_OK
Close 12206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 61440 4096 4096 NT_STATUS_OK
ReadX 12210 126976 4096 4096 NT_STATUS_OK
WriteX 12210 0 65536 65536 NT_STATUS_OK
WriteX 12210 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 61440 4096 4096 NT_STATUS_OK
ReadX 12211 126976 4096 4096 NT_STATUS_OK
ReadX 12211 192512 4096 4096 NT_STATUS_OK
ReadX 12211 258048 4096 4096 NT_STATUS_OK
WriteX 12211 0 65536 65536 NT_STATUS_OK
WriteX 12211 65536 65536 65536 NT_STATUS_OK
WriteX 12211 131072 65536 65536 NT_STATUS_OK
WriteX 12211 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12212 NT_STATUS_OK
ReadX 12212 61440 4096 4096 NT_STATUS_OK
ReadX 12212 126976 4096 4096 NT_STATUS_OK
ReadX 12212 192512 4096 4096 NT_STATUS_OK
ReadX 12212 258048 4096 4096 NT_STATUS_OK
ReadX 12212 323584 4096 4096 NT_STATUS_OK
ReadX 12212 389120 4096 4096 NT_STATUS_OK
ReadX 12212 454656 4096 4096 NT_STATUS_OK
ReadX 12212 520192 4096 4096 NT_STATUS_OK
WriteX 12212 0 65536 65536 NT_STATUS_OK
WriteX 12212 65536 65536 65536 NT_STATUS_OK
WriteX 12212 131072 65536 65536 NT_STATUS_OK
WriteX 12212 196608 65536 65536 NT_STATUS_OK
WriteX 12212 262144 65536 65536 NT_STATUS_OK
WriteX 12212 327680 65536 65536 NT_STATUS_OK
WriteX 12212 393216 65536 65536 NT_STATUS_OK
WriteX 12212 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12213 NT_STATUS_OK
ReadX 12213 0 4096 4096 NT_STATUS_OK
ReadX 12213 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12214 NT_STATUS_OK
WriteX 12214 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12214 258 NT_STATUS_OK
WriteX 12214 0 53 53 NT_STATUS_OK
Close 12214 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Close 12212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12213 8192 4096 4096 NT_STATUS_OK
ReadX 12213 12288 4096 4096 NT_STATUS_OK
WriteX 12217 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12217 258 NT_STATUS_OK
ReadX 12213 16384 4096 4096 NT_STATUS_OK
ReadX 12213 20480 4096 4096 NT_STATUS_OK
WriteX 12217 0 15360 15360 NT_STATUS_OK
Close 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
WriteX 12218 0 4096 4096 NT_STATUS_OK
Close 12218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12219 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12221 4096 4096 4096 NT_STATUS_OK
ReadX 12221 8192 4096 4096 NT_STATUS_OK
ReadX 12221 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
ReadX 12224 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
ReadX 12225 4096 4096 4096 NT_STATUS_OK
ReadX 12225 8192 4096 4096 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12226 NT_STATUS_OK
WriteX 12226 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 258 NT_STATUS_OK
WriteX 12226 0 15360 15360 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12231 NT_STATUS_OK
SET_FILE_INFORMATION 12231 1004 NT_STATUS_OK
Close 12231 NT_STATUS_OK
WriteX 12227 0 4096 4096 NT_STATUS_OK
Close 12227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
ReadX 12234 4096 4096 4096 NT_STATUS_OK
ReadX 12234 8192 4096 4096 NT_STATUS_OK
ReadX 12234 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12234 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12234 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12236 NT_STATUS_OK
WriteX 12236 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 258 NT_STATUS_OK
WriteX 12236 0 53 53 NT_STATUS_OK
Close 12236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12235 4096 4096 4096 NT_STATUS_OK
ReadX 12235 8192 4096 4096 NT_STATUS_OK
ReadX 12235 12288 4096 4096 NT_STATUS_OK
WriteX 12239 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 258 NT_STATUS_OK
WriteX 12239 0 12006 12006 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12240 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12240 1004 NT_STATUS_OK
WriteX 12240 0 4096 4096 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12244 NT_STATUS_OK
Close 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12243 4096 4096 4096 NT_STATUS_OK
ReadX 12243 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12246 NT_STATUS_OK
WriteX 12246 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12246 258 NT_STATUS_OK
WriteX 12246 0 11991 11991 NT_STATUS_OK
Close 12246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12247 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12247 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12248 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
Close 12251 NT_STATUS_OK
WriteX 12247 0 4096 4096 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12252 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12255 NT_STATUS_OK
Close 12255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12254 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12254 1004 NT_STATUS_OK
ReadX 12254 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12254 1004 NT_STATUS_OK
WriteX 12254 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12254 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12254 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12254 1004 NT_STATUS_OK
Close 12230 NT_STATUS_OK
WriteX 12234 0 19054 19054 NT_STATUS_OK
WriteX 12254 0 12288 12288 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 61440 61440 NT_STATUS_OK
ReadX 12261 61440 4096 4096 NT_STATUS_OK
ReadX 12261 65536 61440 61440 NT_STATUS_OK
ReadX 12261 126976 4096 4096 NT_STATUS_OK
ReadX 12261 131072 61440 61440 NT_STATUS_OK
ReadX 12261 192512 4096 4096 NT_STATUS_OK
ReadX 12261 196608 61440 61440 NT_STATUS_OK
ReadX 12261 258048 4096 4096 NT_STATUS_OK
ReadX 12261 262144 61440 61440 NT_STATUS_OK
ReadX 12261 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 61440 61440 NT_STATUS_OK
ReadX 12262 61440 4096 4096 NT_STATUS_OK
ReadX 12262 65536 61440 61440 NT_STATUS_OK
ReadX 12262 126976 4096 4096 NT_STATUS_OK
ReadX 12262 131072 61440 61440 NT_STATUS_OK
ReadX 12262 192512 4096 4096 NT_STATUS_OK
ReadX 12262 196608 61440 61440 NT_STATUS_OK
ReadX 12262 258048 4096 4096 NT_STATUS_OK
ReadX 12262 262144 61440 61440 NT_STATUS_OK
ReadX 12262 323584 4096 4096 NT_STATUS_OK
ReadX 12262 327680 61440 61440 NT_STATUS_OK
ReadX 12262 389120 4096 4096 NT_STATUS_OK
ReadX 12262 393216 61440 61440 NT_STATUS_OK
ReadX 12262 454656 4096 4096 NT_STATUS_OK
ReadX 12262 458752 61440 61440 NT_STATUS_OK
ReadX 12262 520192 4096 4096 NT_STATUS_OK
ReadX 12262 524288 61440 61440 NT_STATUS_OK
ReadX 12262 585728 4096 4096 NT_STATUS_OK
ReadX 12262 589824 61440 61440 NT_STATUS_OK
ReadX 12262 651264 4096 4096 NT_STATUS_OK
ReadX 12262 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 61440 61440 NT_STATUS_OK
ReadX 12263 61440 4096 4096 NT_STATUS_OK
ReadX 12263 65536 61440 61440 NT_STATUS_OK
ReadX 12263 126976 4096 4096 NT_STATUS_OK
ReadX 12263 131072 61440 61440 NT_STATUS_OK
ReadX 12263 192512 4096 4096 NT_STATUS_OK
ReadX 12263 196608 61440 61440 NT_STATUS_OK
ReadX 12263 258048 4096 4096 NT_STATUS_OK
ReadX 12263 262144 61440 61440 NT_STATUS_OK
ReadX 12263 323584 4096 4096 NT_STATUS_OK
ReadX 12263 327680 61440 61440 NT_STATUS_OK
ReadX 12263 389120 4096 4096 NT_STATUS_OK
ReadX 12263 393216 61440 61440 NT_STATUS_OK
ReadX 12263 454656 4096 4096 NT_STATUS_OK
ReadX 12263 458752 61440 61440 NT_STATUS_OK
ReadX 12263 520192 4096 4096 NT_STATUS_OK
ReadX 12263 524288 61440 61440 NT_STATUS_OK
ReadX 12263 585728 4096 4096 NT_STATUS_OK
ReadX 12263 589824 61440 61440 NT_STATUS_OK
ReadX 12263 651264 4096 4096 NT_STATUS_OK
ReadX 12263 655360 61440 61440 NT_STATUS_OK
ReadX 12263 716800 4096 4096 NT_STATUS_OK
ReadX 12263 720896 61440 61440 NT_STATUS_OK
ReadX 12263 782336 4096 4096 NT_STATUS_OK
ReadX 12263 786432 61440 61440 NT_STATUS_OK
ReadX 12263 847872 4096 4096 NT_STATUS_OK
ReadX 12263 851968 61440 61440 NT_STATUS_OK
ReadX 12263 913408 4096 4096 NT_STATUS_OK
ReadX 12263 917504 61440 61440 NT_STATUS_OK
ReadX 12263 978944 4096 4096 NT_STATUS_OK
ReadX 12263 983040 61440 61440 NT_STATUS_OK
ReadX 12263 1044480 4096 4096 NT_STATUS_OK
ReadX 12263 1048576 61440 61440 NT_STATUS_OK
ReadX 12263 1110016 4096 4096 NT_STATUS_OK
ReadX 12263 1114112 61440 61440 NT_STATUS_OK
ReadX 12263 1175552 4096 4096 NT_STATUS_OK
ReadX 12263 1179648 61440 61440 NT_STATUS_OK
ReadX 12263 1241088 4096 4096 NT_STATUS_OK
ReadX 12263 1245184 61440 61440 NT_STATUS_OK
ReadX 12263 1306624 4096 4096 NT_STATUS_OK
ReadX 12263 1310720 61440 61440 NT_STATUS_OK
ReadX 12263 1372160 4096 4096 NT_STATUS_OK
ReadX 12263 1376256 61440 61440 NT_STATUS_OK
ReadX 12263 1437696 4096 4096 NT_STATUS_OK
ReadX 12263 1441792 61440 61440 NT_STATUS_OK
ReadX 12263 1503232 4096 4096 NT_STATUS_OK
ReadX 12263 1507328 61440 61440 NT_STATUS_OK
ReadX 12263 1568768 4096 4096 NT_STATUS_OK
ReadX 12263 1572864 61440 61440 NT_STATUS_OK
ReadX 12263 1634304 4096 4096 NT_STATUS_OK
ReadX 12263 1638400 61440 61440 NT_STATUS_OK
ReadX 12263 1699840 4096 4096 NT_STATUS_OK
ReadX 12263 1703936 61440 61440 NT_STATUS_OK
ReadX 12263 1765376 4096 4096 NT_STATUS_OK
ReadX 12263 1769472 61440 61440 NT_STATUS_OK
ReadX 12263 1830912 4096 4096 NT_STATUS_OK
ReadX 12263 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12270 NT_STATUS_OK
QUERY_FILE_INFORMATION 12270 1004 NT_STATUS_OK
WriteX 12270 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12270 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12272 NT_STATUS_OK
WriteX 12272 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12272 258 NT_STATUS_OK
WriteX 12272 0 491 491 NT_STATUS_OK
Close 12272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12270 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12276 NT_STATUS_OK
WriteX 12276 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12276 258 NT_STATUS_OK
WriteX 12276 0 543 543 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Close 12277 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Close 12267 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12282 NT_STATUS_OK
ReadX 12282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12290 NT_STATUS_OK
QUERY_FILE_INFORMATION 12290 1004 NT_STATUS_OK
WriteX 12290 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12290 258 NT_STATUS_OK
WriteX 12290 0 2048 2048 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12291 NT_STATUS_OK
ReadX 12291 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12291 0 4096 4096 NT_STATUS_OK
Flush 12291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12291 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12296 NT_STATUS_OK
WriteX 12296 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12296 258 NT_STATUS_OK
WriteX 12296 0 2048 2048 NT_STATUS_OK
Close 12296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12297 NT_STATUS_OK
ReadX 12297 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12302 NT_STATUS_OK
WriteX 12302 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 2048 2048 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 2048 2048 NT_STATUS_OK
ReadX 12281 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12285 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12297 0 4096 4096 NT_STATUS_OK
WriteX 12281 0 8192 8192 NT_STATUS_OK
WriteX 12282 0 4096 4096 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
ReadX 12297 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12307 NT_STATUS_OK
QUERY_FILE_INFORMATION 12307 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12282 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Close 12297 NT_STATUS_OK
Close 12281 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12309 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12310 NT_STATUS_OK
ReadX 12310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12316 NT_STATUS_OK
ReadX 12316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12327 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 1004 NT_STATUS_OK
WriteX 12327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 2048 2048 NT_STATUS_OK
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12334 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12335 NT_STATUS_OK
QUERY_FILE_INFORMATION 12335 1004 NT_STATUS_OK
WriteX 12335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12335 258 NT_STATUS_OK
WriteX 12335 0 2048 2048 NT_STATUS_OK
Close 12335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12336 0 4096 4096 NT_STATUS_OK
Flush 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12330 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12338 NT_STATUS_OK
WriteX 12338 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12338 258 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12341 NT_STATUS_OK
WriteX 12341 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12341 258 NT_STATUS_OK
WriteX 12341 0 4096 4096 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12342 0 4096 4096 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12317 NT_STATUS_OK
Close 12310 NT_STATUS_OK
Close 12311 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12348 NT_STATUS_OK
Close 12348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12349 NT_STATUS_OK
WriteX 12349 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12349 258 NT_STATUS_OK
WriteX 12349 0 2048 2048 NT_STATUS_OK
Close 12349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12364 NT_STATUS_OK
QUERY_FILE_INFORMATION 12364 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12366 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12386 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
WriteX 12386 0 2048 2048 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12387 NT_STATUS_OK
ReadX 12387 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12393 NT_STATUS_OK
ReadX 12393 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12398 NT_STATUS_OK
QUERY_FILE_INFORMATION 12398 1004 NT_STATUS_OK
WriteX 12398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12398 258 NT_STATUS_OK
WriteX 12398 0 2048 2048 NT_STATUS_OK
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12406 NT_STATUS_OK
QUERY_FILE_INFORMATION 12406 1004 NT_STATUS_OK
WriteX 12406 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12406 258 NT_STATUS_OK
WriteX 12406 0 2048 2048 NT_STATUS_OK
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
Flush 12387 NT_STATUS_OK
WriteX 12399 0 4096 4096 NT_STATUS_OK
Flush 12399 NT_STATUS_OK
WriteX 12407 0 4096 4096 NT_STATUS_OK
Flush 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12407 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12389 4096 16384 16384 NT_STATUS_OK
ReadX 12369 4096 16384 16384 NT_STATUS_OK
ReadX 12401 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 2048 2048 NT_STATUS_OK
WriteX 12409 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12410 NT_STATUS_OK
QUERY_FILE_INFORMATION 12410 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Close 12389 NT_STATUS_OK
Close 12390 NT_STATUS_OK
Close 12391 NT_STATUS_OK
Close 12392 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12378 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Close 12369 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12412 NT_STATUS_OK
QUERY_FILE_INFORMATION 12412 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12414 NT_STATUS_OK
QUERY_FILE_INFORMATION 12414 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12421 NT_STATUS_OK
ReadX 12421 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12417 4096 16384 16384 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
WriteX 12418 0 4096 4096 NT_STATUS_OK
WriteX 12419 0 4096 4096 NT_STATUS_OK
WriteX 12420 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12429 NT_STATUS_OK
ReadX 12429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12430 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12431 NT_STATUS_OK
ReadX 12431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 8192 8192 NT_STATUS_OK
ReadX 12423 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12437 0 4096 4096 NT_STATUS_OK
ReadX 12437 4096 4096 4096 NT_STATUS_OK
ReadX 12437 8192 4096 4096 NT_STATUS_OK
WriteX 12423 0 4096 4096 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12438 0 4096 4096 NT_STATUS_OK
ReadX 12438 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
WriteX 12418 0 4096 4096 NT_STATUS_OK
WriteX 12419 0 4096 4096 NT_STATUS_OK
WriteX 12420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12442 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12443 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 1004 NT_STATUS_OK
WriteX 12443 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
WriteX 12443 0 2048 2048 NT_STATUS_OK
Close 12443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12444 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12444 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
ReadX 12446 4096 4096 4096 NT_STATUS_OK
WriteX 12446 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12444 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12447 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
ReadX 12448 4096 4096 4096 NT_STATUS_OK
WriteX 12448 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12449 NT_STATUS_OK
QUERY_FILE_INFORMATION 12449 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12436 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12429 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Close 12432 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12423 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12425 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12437 NT_STATUS_OK
Close 12438 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12451 0 4096 4096 NT_STATUS_OK
ReadX 12451 4096 4096 4096 NT_STATUS_OK
ReadX 12451 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
ReadX 12452 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12469 NT_STATUS_OK
QUERY_FILE_INFORMATION 12469 1004 NT_STATUS_OK
WriteX 12469 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12469 258 NT_STATUS_OK
WriteX 12469 0 2048 2048 NT_STATUS_OK
Close 12469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12470 NT_STATUS_OK
ReadX 12470 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12470 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12474 NT_STATUS_OK
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12475 NT_STATUS_OK
QUERY_FILE_INFORMATION 12475 1004 NT_STATUS_OK
WriteX 12475 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12475 258 NT_STATUS_OK
WriteX 12475 0 2048 2048 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12476 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12459 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12477 NT_STATUS_OK
QUERY_FILE_INFORMATION 12477 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12479 NT_STATUS_OK
QUERY_FILE_INFORMATION 12479 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 61440 4096 4096 NT_STATUS_OK
ReadX 12481 126976 4096 4096 NT_STATUS_OK
WriteX 12481 0 65536 65536 NT_STATUS_OK
WriteX 12481 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 61440 4096 4096 NT_STATUS_OK
ReadX 12482 126976 4096 4096 NT_STATUS_OK
ReadX 12482 192512 4096 4096 NT_STATUS_OK
ReadX 12482 258048 4096 4096 NT_STATUS_OK
WriteX 12482 0 65536 65536 NT_STATUS_OK
WriteX 12482 65536 65536 65536 NT_STATUS_OK
WriteX 12482 131072 65536 65536 NT_STATUS_OK
WriteX 12482 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 61440 4096 4096 NT_STATUS_OK
ReadX 12483 126976 4096 4096 NT_STATUS_OK
ReadX 12483 192512 4096 4096 NT_STATUS_OK
ReadX 12483 258048 4096 4096 NT_STATUS_OK
ReadX 12483 323584 4096 4096 NT_STATUS_OK
ReadX 12483 389120 4096 4096 NT_STATUS_OK
ReadX 12483 454656 4096 4096 NT_STATUS_OK
ReadX 12483 520192 4096 4096 NT_STATUS_OK
WriteX 12483 0 65536 65536 NT_STATUS_OK
WriteX 12483 65536 65536 65536 NT_STATUS_OK
WriteX 12483 131072 65536 65536 NT_STATUS_OK
WriteX 12483 196608 65536 65536 NT_STATUS_OK
WriteX 12483 262144 65536 65536 NT_STATUS_OK
WriteX 12483 327680 65536 65536 NT_STATUS_OK
WriteX 12483 393216 65536 65536 NT_STATUS_OK
WriteX 12483 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12484 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12484 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12484 8192 4096 4096 NT_STATUS_OK
ReadX 12484 12288 4096 4096 NT_STATUS_OK
ReadX 12484 16384 4096 4096 NT_STATUS_OK
ReadX 12484 20480 4096 4096 NT_STATUS_OK
ReadX 12484 24576 4096 4096 NT_STATUS_OK
ReadX 12484 28672 4096 4096 NT_STATUS_OK
ReadX 12484 32768 4096 4096 NT_STATUS_OK
ReadX 12484 36864 4096 4096 NT_STATUS_OK
ReadX 12484 40960 4096 4096 NT_STATUS_OK
ReadX 12484 45056 4096 4096 NT_STATUS_OK
ReadX 12484 49152 4096 4096 NT_STATUS_OK
ReadX 12484 53248 4096 4096 NT_STATUS_OK
ReadX 12484 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12484 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12485 NT_STATUS_OK
Close 12485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12487 NT_STATUS_OK
WriteX 12487 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12487 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12487 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12487 1004 NT_STATUS_OK
WriteX 12487 0 57088 57088 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
Flush 12487 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12488 NT_STATUS_OK
SET_FILE_INFORMATION 12488 1004 NT_STATUS_OK
Close 12488 NT_STATUS_OK
SET_FILE_INFORMATION 12487 1004 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
Close 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12491 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12492 NT_STATUS_OK
WriteX 12492 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12492 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 0 51456 51456 NT_STATUS_OK
WriteX 12492 0 4096 4096 NT_STATUS_OK
Flush 12492 NT_STATUS_OK
SET_FILE_INFORMATION 12492 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 0 4096 4096 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Close 12491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12496 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12501 NT_STATUS_OK
WriteX 12501 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12501 258 NT_STATUS_OK
WriteX 12501 0 53077 53077 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12502 NT_STATUS_OK
WriteX 12502 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12502 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12502 1004 NT_STATUS_OK
WriteX 12502 0 65536 65536 NT_STATUS_OK
WriteX 12502 65536 1856 1856 NT_STATUS_OK
WriteX 12502 0 4096 4096 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
SET_FILE_INFORMATION 12502 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12502 1004 NT_STATUS_OK
WriteX 12502 0 4096 4096 NT_STATUS_OK
Close 12502 NT_STATUS_OK
Close 12496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12504 NT_STATUS_OK
Close 12504 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12511 NT_STATUS_OK
WriteX 12511 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12511 258 NT_STATUS_OK
WriteX 12511 0 7983 7983 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12516 NT_STATUS_OK
WriteX 12516 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12516 258 NT_STATUS_OK
WriteX 12516 0 65536 65536 NT_STATUS_OK
WriteX 12516 65536 65536 65536 NT_STATUS_OK
WriteX 12516 131072 65536 65536 NT_STATUS_OK
WriteX 12516 196608 65536 65536 NT_STATUS_OK
WriteX 12516 262144 65536 65536 NT_STATUS_OK
WriteX 12516 327680 65536 65536 NT_STATUS_OK
WriteX 12516 393216 65536 65536 NT_STATUS_OK
WriteX 12516 458752 46731 46731 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12517 NT_STATUS_OK
WriteX 12517 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12517 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12506 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12517 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12517 1004 NT_STATUS_OK
WriteX 12517 0 65536 65536 NT_STATUS_OK
WriteX 12517 65536 22848 22848 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
Flush 12517 NT_STATUS_OK
SET_FILE_INFORMATION 12517 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12517 1004 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12519 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12521 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12522 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12522 1004 NT_STATUS_OK
ReadX 12522 8192 4096 4096 NT_STATUS_OK
ReadX 12522 12288 4096 4096 NT_STATUS_OK
ReadX 12522 16384 4096 4096 NT_STATUS_OK
ReadX 12522 20480 4096 4096 NT_STATUS_OK
ReadX 12522 24576 4096 4096 NT_STATUS_OK
ReadX 12522 28672 4096 4096 NT_STATUS_OK
ReadX 12522 32768 4096 4096 NT_STATUS_OK
ReadX 12522 36864 4096 4096 NT_STATUS_OK
ReadX 12522 40960 4096 4096 NT_STATUS_OK
ReadX 12522 45056 4096 4096 NT_STATUS_OK
ReadX 12522 49152 4096 4096 NT_STATUS_OK
ReadX 12522 53248 4096 4096 NT_STATUS_OK
ReadX 12522 57344 4096 4096 NT_STATUS_OK
ReadX 12522 61440 4096 4096 NT_STATUS_OK
ReadX 12522 65536 4096 4096 NT_STATUS_OK
ReadX 12522 69632 4096 4096 NT_STATUS_OK
ReadX 12522 73728 4096 4096 NT_STATUS_OK
ReadX 12522 77824 4096 4096 NT_STATUS_OK
ReadX 12522 81920 4096 4096 NT_STATUS_OK
ReadX 12522 86016 4096 4096 NT_STATUS_OK
ReadX 12522 90112 4096 4096 NT_STATUS_OK
ReadX 12522 94208 4096 4096 NT_STATUS_OK
ReadX 12522 98304 4096 4096 NT_STATUS_OK
ReadX 12522 102400 4096 4096 NT_STATUS_OK
ReadX 12522 106496 4096 4096 NT_STATUS_OK
ReadX 12522 110592 4096 4096 NT_STATUS_OK
ReadX 12522 114688 4096 4096 NT_STATUS_OK
ReadX 12522 118784 4096 4096 NT_STATUS_OK
ReadX 12522 122880 4096 4096 NT_STATUS_OK
ReadX 12522 126976 4096 4096 NT_STATUS_OK
ReadX 12522 131072 4096 4096 NT_STATUS_OK
ReadX 12522 135168 4096 4096 NT_STATUS_OK
ReadX 12522 139264 4096 4096 NT_STATUS_OK
ReadX 12522 143360 4096 4096 NT_STATUS_OK
ReadX 12522 147456 4096 4096 NT_STATUS_OK
ReadX 12522 151552 4096 4096 NT_STATUS_OK
ReadX 12522 155648 4096 4096 NT_STATUS_OK
ReadX 12522 159744 4096 4096 NT_STATUS_OK
ReadX 12522 163840 4096 4096 NT_STATUS_OK
ReadX 12522 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12522 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12525 NT_STATUS_OK
WriteX 12525 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12525 258 NT_STATUS_OK
Close 12522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12526 NT_STATUS_OK
SET_FILE_INFORMATION 12526 1004 NT_STATUS_OK
Close 12526 NT_STATUS_OK
WriteX 12525 0 42388 42388 NT_STATUS_OK
Close 12525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
ReadX 12529 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12530 NT_STATUS_OK
WriteX 12530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12530 258 NT_STATUS_OK
SET_FILE_INFORMATION 12530 1004 NT_STATUS_OK
WriteX 12530 0 42652 42652 NT_STATUS_OK
Close 12530 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12536 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12539 NT_STATUS_OK
WriteX 12539 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12539 258 NT_STATUS_OK
WriteX 12539 0 65536 65536 NT_STATUS_OK
WriteX 12539 65536 49 49 NT_STATUS_OK
Close 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 61440 61440 NT_STATUS_OK
ReadX 12540 61440 4096 4096 NT_STATUS_OK
ReadX 12540 65536 61440 61440 NT_STATUS_OK
ReadX 12540 126976 4096 4096 NT_STATUS_OK
ReadX 12540 131072 61440 61440 NT_STATUS_OK
ReadX 12540 192512 4096 4096 NT_STATUS_OK
ReadX 12540 196608 61440 61440 NT_STATUS_OK
ReadX 12540 258048 4096 4096 NT_STATUS_OK
ReadX 12540 262144 61440 61440 NT_STATUS_OK
ReadX 12540 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 61440 61440 NT_STATUS_OK
ReadX 12541 61440 4096 4096 NT_STATUS_OK
ReadX 12541 65536 61440 61440 NT_STATUS_OK
ReadX 12541 126976 4096 4096 NT_STATUS_OK
ReadX 12541 131072 61440 61440 NT_STATUS_OK
ReadX 12541 192512 4096 4096 NT_STATUS_OK
ReadX 12541 196608 61440 61440 NT_STATUS_OK
ReadX 12541 258048 4096 4096 NT_STATUS_OK
ReadX 12541 262144 61440 61440 NT_STATUS_OK
ReadX 12541 323584 4096 4096 NT_STATUS_OK
ReadX 12541 327680 61440 61440 NT_STATUS_OK
ReadX 12541 389120 4096 4096 NT_STATUS_OK
ReadX 12541 393216 61440 61440 NT_STATUS_OK
ReadX 12541 454656 4096 4096 NT_STATUS_OK
ReadX 12541 458752 61440 61440 NT_STATUS_OK
ReadX 12541 520192 4096 4096 NT_STATUS_OK
ReadX 12541 524288 61440 61440 NT_STATUS_OK
ReadX 12541 585728 4096 4096 NT_STATUS_OK
ReadX 12541 589824 61440 61440 NT_STATUS_OK
ReadX 12541 651264 4096 4096 NT_STATUS_OK
ReadX 12541 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 61440 61440 NT_STATUS_OK
ReadX 12542 61440 4096 4096 NT_STATUS_OK
ReadX 12542 65536 61440 61440 NT_STATUS_OK
ReadX 12542 126976 4096 4096 NT_STATUS_OK
ReadX 12542 131072 61440 61440 NT_STATUS_OK
ReadX 12542 192512 4096 4096 NT_STATUS_OK
ReadX 12542 196608 61440 61440 NT_STATUS_OK
ReadX 12542 258048 4096 4096 NT_STATUS_OK
ReadX 12542 262144 61440 61440 NT_STATUS_OK
ReadX 12542 323584 4096 4096 NT_STATUS_OK
ReadX 12542 327680 61440 61440 NT_STATUS_OK
ReadX 12542 389120 4096 4096 NT_STATUS_OK
ReadX 12542 393216 61440 61440 NT_STATUS_OK
ReadX 12542 454656 4096 4096 NT_STATUS_OK
ReadX 12542 458752 61440 61440 NT_STATUS_OK
ReadX 12542 520192 4096 4096 NT_STATUS_OK
ReadX 12542 524288 61440 61440 NT_STATUS_OK
ReadX 12542 585728 4096 4096 NT_STATUS_OK
ReadX 12542 589824 61440 61440 NT_STATUS_OK
ReadX 12542 651264 4096 4096 NT_STATUS_OK
ReadX 12542 655360 61440 61440 NT_STATUS_OK
ReadX 12542 716800 4096 4096 NT_STATUS_OK
ReadX 12542 720896 61440 61440 NT_STATUS_OK
ReadX 12542 782336 4096 4096 NT_STATUS_OK
ReadX 12542 786432 61440 61440 NT_STATUS_OK
ReadX 12542 847872 4096 4096 NT_STATUS_OK
ReadX 12542 851968 61440 61440 NT_STATUS_OK
ReadX 12542 913408 4096 4096 NT_STATUS_OK
ReadX 12542 917504 61440 61440 NT_STATUS_OK
ReadX 12542 978944 4096 4096 NT_STATUS_OK
ReadX 12542 983040 61440 61440 NT_STATUS_OK
ReadX 12542 1044480 4096 4096 NT_STATUS_OK
ReadX 12542 1048576 61440 61440 NT_STATUS_OK
ReadX 12542 1110016 4096 4096 NT_STATUS_OK
ReadX 12542 1114112 61440 61440 NT_STATUS_OK
ReadX 12542 1175552 4096 4096 NT_STATUS_OK
ReadX 12542 1179648 61440 61440 NT_STATUS_OK
ReadX 12542 1241088 4096 4096 NT_STATUS_OK
ReadX 12542 1245184 61440 61440 NT_STATUS_OK
ReadX 12542 1306624 4096 4096 NT_STATUS_OK
ReadX 12542 1310720 61440 61440 NT_STATUS_OK
ReadX 12542 1372160 4096 4096 NT_STATUS_OK
ReadX 12542 1376256 61440 61440 NT_STATUS_OK
ReadX 12542 1437696 4096 4096 NT_STATUS_OK
ReadX 12542 1441792 61440 61440 NT_STATUS_OK
ReadX 12542 1503232 4096 4096 NT_STATUS_OK
ReadX 12542 1507328 61440 61440 NT_STATUS_OK
ReadX 12542 1568768 4096 4096 NT_STATUS_OK
ReadX 12542 1572864 61440 61440 NT_STATUS_OK
ReadX 12542 1634304 4096 4096 NT_STATUS_OK
ReadX 12542 1638400 61440 61440 NT_STATUS_OK
ReadX 12542 1699840 4096 4096 NT_STATUS_OK
ReadX 12542 1703936 61440 61440 NT_STATUS_OK
ReadX 12542 1765376 4096 4096 NT_STATUS_OK
ReadX 12542 1769472 61440 61440 NT_STATUS_OK
ReadX 12542 1830912 4096 4096 NT_STATUS_OK
ReadX 12542 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12544 NT_STATUS_OK
QUERY_FILE_INFORMATION 12544 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12544 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12544 1005 NT_STATUS_OK
ReadX 12544 2156 24 24 NT_STATUS_OK
ReadX 12544 2139 276 276 NT_STATUS_OK
ReadX 12544 2136 14 14 NT_STATUS_OK
ReadX 12544 2136 7 7 NT_STATUS_OK
ReadX 12544 2138 12 12 NT_STATUS_OK
ReadX 12544 2137 8 8 NT_STATUS_OK
ReadX 12544 2135 15 15 NT_STATUS_OK
ReadX 12544 0 16 16 NT_STATUS_OK
ReadX 12544 16 2048 2048 NT_STATUS_OK
ReadX 12544 2064 2048 2048 NT_STATUS_OK
ReadX 12544 257 2048 2048 NT_STATUS_OK
ReadX 12544 385 2048 2048 NT_STATUS_OK
ReadX 12544 513 2048 2048 NT_STATUS_OK
ReadX 12544 641 2048 2048 NT_STATUS_OK
ReadX 12544 769 2048 2048 NT_STATUS_OK
ReadX 12544 897 2048 2048 NT_STATUS_OK
ReadX 12544 1025 2048 2048 NT_STATUS_OK
ReadX 12544 1153 2048 2048 NT_STATUS_OK
ReadX 12544 1281 2048 2048 NT_STATUS_OK
ReadX 12544 1409 2048 2048 NT_STATUS_OK
ReadX 12544 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12549 NT_STATUS_OK
WriteX 12549 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12549 258 NT_STATUS_OK
WriteX 12549 0 4112 4112 NT_STATUS_OK
WriteX 12549 0 10575 10575 NT_STATUS_OK
Flush 12549 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12550 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12554 NT_STATUS_OK
LockX 12554 2147483538 1 NT_STATUS_OK
UnlockX 12554 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 1005 NT_STATUS_OK
ReadX 12554 0 512 512 NT_STATUS_OK
ReadX 12554 512 512 512 NT_STATUS_OK
ReadX 12554 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 1004 NT_STATUS_OK
Close 12554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12555 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 1005 NT_STATUS_OK
ReadX 12555 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12556 NT_STATUS_OK
LockX 12556 2147483538 1 NT_STATUS_OK
UnlockX 12556 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12556 1005 NT_STATUS_OK
ReadX 12556 0 512 512 NT_STATUS_OK
ReadX 12556 512 512 512 NT_STATUS_OK
ReadX 12556 1024 512 512 NT_STATUS_OK
ReadX 12556 288 20 20 NT_STATUS_OK
ReadX 12556 308 2084 2084 NT_STATUS_OK
ReadX 12556 388 2084 2084 NT_STATUS_OK
ReadX 12556 388 2084 2084 NT_STATUS_OK
ReadX 12543 2157 1386 1386 NT_STATUS_OK
ReadX 12556 2472 399 399 NT_STATUS_OK
ReadX 12556 3072 1536 1536 NT_STATUS_OK
ReadX 12556 544 149 149 NT_STATUS_OK
ReadX 12556 693 485 485 NT_STATUS_OK
Close 12556 NT_STATUS_OK
ReadX 12543 2157 4096 4096 NT_STATUS_OK
ReadX 12543 6253 4096 4096 NT_STATUS_OK
ReadX 12543 10349 4096 4096 NT_STATUS_OK
ReadX 12543 14445 4096 4096 NT_STATUS_OK
ReadX 12543 18541 4096 4096 NT_STATUS_OK
ReadX 12543 22637 256 256 NT_STATUS_OK
ReadX 12543 22893 4096 4096 NT_STATUS_OK
ReadX 12543 26989 4096 4096 NT_STATUS_OK
ReadX 12543 31085 4096 4096 NT_STATUS_OK
ReadX 12543 35181 4096 4096 NT_STATUS_OK
ReadX 12543 39277 4096 4096 NT_STATUS_OK
ReadX 12543 43373 4096 4096 NT_STATUS_OK
ReadX 12543 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12543 2157 1024 1024 NT_STATUS_OK
ReadX 12543 1667 4688 4688 NT_STATUS_OK
ReadX 12543 6355 3516 3516 NT_STATUS_OK
ReadX 12543 9871 16384 16384 NT_STATUS_OK
ReadX 12543 26255 3771 3771 NT_STATUS_OK
ReadX 12543 30026 2048 2048 NT_STATUS_OK
ReadX 12543 32074 1024 1024 NT_STATUS_OK
ReadX 12543 33098 6652 6652 NT_STATUS_OK
ReadX 12543 39750 16384 16384 NT_STATUS_OK
ReadX 12543 56134 10496 10496 NT_STATUS_OK
ReadX 12543 66630 1784 1784 NT_STATUS_OK
ReadX 12543 68414 90 90 NT_STATUS_OK
ReadX 12543 68504 273 273 NT_STATUS_OK
ReadX 12543 68777 1600 1600 NT_STATUS_OK
ReadX 12543 70377 640 640 NT_STATUS_OK
ReadX 12543 71017 1280 1280 NT_STATUS_OK
ReadX 12543 72297 8464 8464 NT_STATUS_OK
ReadX 12543 80761 158 158 NT_STATUS_OK
ReadX 12543 80919 912 912 NT_STATUS_OK
ReadX 12543 81831 1980 1980 NT_STATUS_OK
ReadX 12543 83811 2256 2256 NT_STATUS_OK
ReadX 12543 86067 400 400 NT_STATUS_OK
ReadX 12543 86467 252 252 NT_STATUS_OK
ReadX 12543 86719 42 42 NT_STATUS_OK
ReadX 12543 86761 725 725 NT_STATUS_OK
ReadX 12543 2009 512 512 NT_STATUS_OK
ReadX 12543 3895 9 9 NT_STATUS_OK
ReadX 12543 3781 46 46 NT_STATUS_OK
ReadX 12543 4059 92 92 NT_STATUS_OK
ReadX 12543 3781 92 92 NT_STATUS_OK
ReadX 12543 3986 184 184 NT_STATUS_OK
ReadX 12543 3987 16384 16384 NT_STATUS_OK
ReadX 12543 3902 16384 16384 NT_STATUS_OK
ReadX 12543 3781 10240 10240 NT_STATUS_OK
ReadX 12543 3821 16384 16384 NT_STATUS_OK
ReadX 12543 3891 935 935 NT_STATUS_OK
ReadX 12543 4060 10240 10240 NT_STATUS_OK
ReadX 12543 4059 184 184 NT_STATUS_OK
ReadX 12543 256 184 184 NT_STATUS_OK
ReadX 12543 256 1026 1026 NT_STATUS_OK
ReadX 12543 3901 326 326 NT_STATUS_OK
ReadX 12543 3899 652 652 NT_STATUS_OK
ReadX 12543 256 2 2 NT_STATUS_OK
ReadX 12543 258 4948 4948 NT_STATUS_OK
Close 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12558 NT_STATUS_OK
Close 12558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12561 NT_STATUS_OK
WriteX 12561 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12561 258 NT_STATUS_OK
WriteX 12561 0 65536 65536 NT_STATUS_OK
WriteX 12561 65536 65536 65536 NT_STATUS_OK
WriteX 12561 131072 65536 65536 NT_STATUS_OK
WriteX 12561 196608 65536 65536 NT_STATUS_OK
WriteX 12561 262144 65536 65536 NT_STATUS_OK
WriteX 12561 327680 65536 65536 NT_STATUS_OK
WriteX 12561 393216 65536 65536 NT_STATUS_OK
WriteX 12561 458752 65536 65536 NT_STATUS_OK
WriteX 12561 524288 65536 65536 NT_STATUS_OK
WriteX 12561 589824 35257 35257 NT_STATUS_OK
Close 12561 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12563 NT_STATUS_OK
Close 12563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12566 NT_STATUS_OK
WriteX 12566 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12566 258 NT_STATUS_OK
WriteX 12566 0 65536 65536 NT_STATUS_OK
WriteX 12566 65536 65536 65536 NT_STATUS_OK
WriteX 12566 131072 65536 65536 NT_STATUS_OK
WriteX 12566 196608 65536 65536 NT_STATUS_OK
WriteX 12566 262144 65536 65536 NT_STATUS_OK
WriteX 12566 327680 65536 65536 NT_STATUS_OK
WriteX 12566 393216 65536 65536 NT_STATUS_OK
WriteX 12566 458752 65536 65536 NT_STATUS_OK
WriteX 12566 524288 65536 65536 NT_STATUS_OK
WriteX 12566 589824 57598 57598 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12568 NT_STATUS_OK
WriteX 12568 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12568 258 NT_STATUS_OK
WriteX 12568 0 12543 12543 NT_STATUS_OK
Flush 12568 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Close 12552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12570 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12574 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 1005 NT_STATUS_OK
ReadX 12574 1938 24 24 NT_STATUS_OK
ReadX 12574 1920 276 276 NT_STATUS_OK
ReadX 12574 1918 14 14 NT_STATUS_OK
ReadX 12574 1918 7 7 NT_STATUS_OK
ReadX 12574 1919 12 12 NT_STATUS_OK
ReadX 12574 1919 8 8 NT_STATUS_OK
ReadX 12574 1917 15 15 NT_STATUS_OK
ReadX 12574 0 16 16 NT_STATUS_OK
ReadX 12574 16 2048 2048 NT_STATUS_OK
ReadX 12574 2064 2048 2048 NT_STATUS_OK
ReadX 12574 257 2048 2048 NT_STATUS_OK
ReadX 12574 385 2048 2048 NT_STATUS_OK
ReadX 12574 513 2048 2048 NT_STATUS_OK
ReadX 12574 641 2048 2048 NT_STATUS_OK
ReadX 12574 769 2048 2048 NT_STATUS_OK
ReadX 12574 897 2048 2048 NT_STATUS_OK
ReadX 12574 1025 2048 2048 NT_STATUS_OK
ReadX 12574 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12576 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12579 NT_STATUS_OK
WriteX 12579 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12579 258 NT_STATUS_OK
WriteX 12579 0 11588 11588 NT_STATUS_OK
Flush 12579 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12580 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 0 4096 4096 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12584 NT_STATUS_OK
WriteX 12584 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12584 258 NT_STATUS_OK
WriteX 12584 0 11615 11615 NT_STATUS_OK
Flush 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12590 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12593 NT_STATUS_OK
WriteX 12593 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 258 NT_STATUS_OK
WriteX 12593 0 65536 65536 NT_STATUS_OK
WriteX 12593 65536 16050 16050 NT_STATUS_OK
Close 12593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12573 1939 64 64 NT_STATUS_OK
ReadX 12573 128 248 248 NT_STATUS_OK
ReadX 12573 128 568 568 NT_STATUS_OK
ReadX 12573 3872 1536 1536 NT_STATUS_OK
ReadX 12573 3456 2560 2560 NT_STATUS_OK
ReadX 12573 3136 512 512 NT_STATUS_OK
ReadX 12573 2880 4096 4096 NT_STATUS_OK
ReadX 12573 3264 3072 3072 NT_STATUS_OK
ReadX 12573 320 4096 4096 NT_STATUS_OK
ReadX 12573 1024 4096 4096 NT_STATUS_OK
ReadX 12573 3616 4096 4096 NT_STATUS_OK
ReadX 12573 1939 64 64 NT_STATUS_OK
ReadX 12573 128 248 248 NT_STATUS_OK
ReadX 12573 128 608 608 NT_STATUS_OK
ReadX 12573 2858 1024 1024 NT_STATUS_OK
ReadX 12573 2810 4096 4096 NT_STATUS_OK
ReadX 12573 2826 4096 4096 NT_STATUS_OK
ReadX 12573 2580 2048 2048 NT_STATUS_OK
ReadX 12573 2800 2560 2560 NT_STATUS_OK
ReadX 12573 2100 4096 4096 NT_STATUS_OK
ReadX 12573 2084 4096 4096 NT_STATUS_OK
ReadX 12573 868 4096 4096 NT_STATUS_OK
ReadX 12573 2324 4096 4096 NT_STATUS_OK
ReadX 12573 884 4096 4096 NT_STATUS_OK
ReadX 12573 2604 1024 1024 NT_STATUS_OK
ReadX 12573 580 4096 4096 NT_STATUS_OK
ReadX 12573 596 4096 4096 NT_STATUS_OK
ReadX 12573 2752 4096 4096 NT_STATUS_OK
ReadX 12573 2842 1024 1024 NT_STATUS_OK
ReadX 12573 660 4096 4096 NT_STATUS_OK
ReadX 12573 2720 4096 4096 NT_STATUS_OK
ReadX 12573 2736 4096 4096 NT_STATUS_OK
ReadX 12573 628 4096 4096 NT_STATUS_OK
ReadX 12573 2704 4096 4096 NT_STATUS_OK
ReadX 12573 1556 4096 4096 NT_STATUS_OK
ReadX 12573 576 4096 4096 NT_STATUS_OK
ReadX 12573 3168 1536 1536 NT_STATUS_OK
ReadX 12573 832 4096 4096 NT_STATUS_OK
ReadX 12573 1088 4096 4096 NT_STATUS_OK
ReadX 12573 1344 4096 4096 NT_STATUS_OK
ReadX 12573 1600 4096 4096 NT_STATUS_OK
ReadX 12573 1856 4096 4096 NT_STATUS_OK
ReadX 12573 2112 4096 4096 NT_STATUS_OK
ReadX 12573 1892 4096 4096 NT_STATUS_OK
ReadX 12573 820 4096 4096 NT_STATUS_OK
ReadX 12573 788 4096 4096 NT_STATUS_OK
ReadX 12573 1604 4096 4096 NT_STATUS_OK
ReadX 12573 3648 4096 4096 NT_STATUS_OK
ReadX 12573 2608 4096 4096 NT_STATUS_OK
ReadX 12573 548 4096 4096 NT_STATUS_OK
ReadX 12573 740 4096 4096 NT_STATUS_OK
ReadX 12573 1344 4096 4096 NT_STATUS_OK
ReadX 12573 3392 4096 4096 NT_STATUS_OK
ReadX 12573 3904 4096 4096 NT_STATUS_OK
ReadX 12573 644 4096 4096 NT_STATUS_OK
ReadX 12573 676 4096 4096 NT_STATUS_OK
ReadX 12573 2688 4096 4096 NT_STATUS_OK
ReadX 12573 320 4096 4096 NT_STATUS_OK
ReadX 12573 900 4096 4096 NT_STATUS_OK
ReadX 12573 1908 4096 4096 NT_STATUS_OK
ReadX 12573 852 4096 4096 NT_STATUS_OK
ReadX 12573 724 4096 4096 NT_STATUS_OK
ReadX 12573 2292 4096 4096 NT_STATUS_OK
ReadX 12573 612 4096 4096 NT_STATUS_OK
ReadX 12573 388 4096 4096 NT_STATUS_OK
ReadX 12573 2368 4096 4096 NT_STATUS_OK
ReadX 12573 2624 4096 4096 NT_STATUS_OK
ReadX 12573 500 4096 4096 NT_STATUS_OK
ReadX 12573 356 4096 4096 NT_STATUS_OK
ReadX 12573 1024 4096 4096 NT_STATUS_OK
ReadX 12573 576 4096 4096 NT_STATUS_OK
ReadX 12573 340 4096 4096 NT_STATUS_OK
ReadX 12573 420 4096 4096 NT_STATUS_OK
ReadX 12573 1600 4096 4096 NT_STATUS_OK
ReadX 12573 404 4096 4096 NT_STATUS_OK
ReadX 12573 1428 4096 4096 NT_STATUS_OK
ReadX 12573 2656 4096 4096 NT_STATUS_OK
ReadX 12573 2624 4096 4096 NT_STATUS_OK
ReadX 12573 452 4096 4096 NT_STATUS_OK
ReadX 12573 692 4096 4096 NT_STATUS_OK
ReadX 12573 564 4096 4096 NT_STATUS_OK
ReadX 12573 372 4096 4096 NT_STATUS_OK
ReadX 12573 468 4096 4096 NT_STATUS_OK
ReadX 12573 484 4096 4096 NT_STATUS_OK
ReadX 12573 1088 4096 4096 NT_STATUS_OK
ReadX 12573 1924 4096 4096 NT_STATUS_OK
ReadX 12573 2768 4096 4096 NT_STATUS_OK
ReadX 12573 832 4096 4096 NT_STATUS_OK
ReadX 12573 836 4096 4096 NT_STATUS_OK
ReadX 12573 1856 4096 4096 NT_STATUS_OK
ReadX 12573 2640 4096 4096 NT_STATUS_OK
ReadX 12573 436 4096 4096 NT_STATUS_OK
ReadX 12573 1828 4096 4096 NT_STATUS_OK
ReadX 12573 804 4096 4096 NT_STATUS_OK
ReadX 12573 1860 4096 4096 NT_STATUS_OK
ReadX 12573 1812 4096 4096 NT_STATUS_OK
ReadX 12573 756 4096 4096 NT_STATUS_OK
ReadX 12573 1636 4096 4096 NT_STATUS_OK
ReadX 12573 772 4096 4096 NT_STATUS_OK
ReadX 12573 2036 4096 4096 NT_STATUS_OK
ReadX 12573 1220 4096 4096 NT_STATUS_OK
ReadX 12573 1652 4096 4096 NT_STATUS_OK
ReadX 12573 2588 4096 4096 NT_STATUS_OK
ReadX 12573 916 4096 4096 NT_STATUS_OK
ReadX 12573 260 4096 4096 NT_STATUS_OK
ReadX 12573 932 4096 4096 NT_STATUS_OK
ReadX 12573 2624 4096 4096 NT_STATUS_OK
ReadX 12573 308 4096 4096 NT_STATUS_OK
ReadX 12573 292 4096 4096 NT_STATUS_OK
ReadX 12573 1140 4096 4096 NT_STATUS_OK
ReadX 12573 276 4096 4096 NT_STATUS_OK
ReadX 12573 2020 4096 4096 NT_STATUS_OK
ReadX 12573 2880 4096 4096 NT_STATUS_OK
ReadX 12573 516 4096 4096 NT_STATUS_OK
ReadX 12573 1844 4096 4096 NT_STATUS_OK
ReadX 12573 1124 4096 4096 NT_STATUS_OK
ReadX 12573 3136 4096 4096 NT_STATUS_OK
ReadX 12573 324 4096 4096 NT_STATUS_OK
ReadX 12573 1156 4096 4096 NT_STATUS_OK
ReadX 12573 1172 4096 4096 NT_STATUS_OK
ReadX 12573 2112 4096 4096 NT_STATUS_OK
ReadX 12573 2368 4096 4096 NT_STATUS_OK
ReadX 12573 964 4096 4096 NT_STATUS_OK
ReadX 12573 980 4096 4096 NT_STATUS_OK
ReadX 12573 1012 4096 4096 NT_STATUS_OK
ReadX 12573 532 4096 4096 NT_STATUS_OK
ReadX 12573 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12573 1620 4096 4096 NT_STATUS_OK
ReadX 12573 1604 4096 4096 NT_STATUS_OK
ReadX 12573 2116 4096 4096 NT_STATUS_OK
ReadX 12573 2132 4096 4096 NT_STATUS_OK
ReadX 12573 2148 4096 4096 NT_STATUS_OK
ReadX 12573 2276 4096 4096 NT_STATUS_OK
ReadX 12573 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12598 NT_STATUS_OK
QUERY_FILE_INFORMATION 12553 1004 NT_STATUS_OK
Close 12553 NT_STATUS_OK
WriteX 12598 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12598 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 1004 NT_STATUS_OK
Close 12555 NT_STATUS_OK
WriteX 12598 0 65536 65536 NT_STATUS_OK
WriteX 12598 65536 64850 64850 NT_STATUS_OK
Close 12598 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12600 NT_STATUS_OK
WriteX 12600 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12600 258 NT_STATUS_OK
ReadX 12573 2068 4096 4096 NT_STATUS_OK
ReadX 12573 1588 4096 4096 NT_STATUS_OK
ReadX 12573 1572 4096 4096 NT_STATUS_OK
WriteX 12600 0 18630 18630 NT_STATUS_OK
Flush 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12573 612 4096 4096 NT_STATUS_OK
ReadX 12573 564 4096 4096 NT_STATUS_OK
ReadX 12573 1876 4096 4096 NT_STATUS_OK
ReadX 12573 628 4096 4096 NT_STATUS_OK
ReadX 12573 740 4096 4096 NT_STATUS_OK
ReadX 12573 724 4096 4096 NT_STATUS_OK
ReadX 12573 644 4096 4096 NT_STATUS_OK
ReadX 12573 2324 4096 4096 NT_STATUS_OK
ReadX 12573 660 4096 4096 NT_STATUS_OK
ReadX 12573 852 4096 4096 NT_STATUS_OK
ReadX 12573 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12573 2368 4096 4096 NT_STATUS_OK
ReadX 12573 1024 4096 4096 NT_STATUS_OK
ReadX 12573 320 4096 4096 NT_STATUS_OK
ReadX 12573 580 4096 4096 NT_STATUS_OK
ReadX 12573 3136 512 512 NT_STATUS_OK
ReadX 12573 2880 4096 4096 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 61440 4096 4096 NT_STATUS_OK
ReadX 12605 126976 4096 4096 NT_STATUS_OK
WriteX 12605 0 65536 65536 NT_STATUS_OK
WriteX 12605 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 61440 4096 4096 NT_STATUS_OK
ReadX 12606 126976 4096 4096 NT_STATUS_OK
ReadX 12606 192512 4096 4096 NT_STATUS_OK
ReadX 12606 258048 4096 4096 NT_STATUS_OK
WriteX 12606 0 65536 65536 NT_STATUS_OK
WriteX 12606 65536 65536 65536 NT_STATUS_OK
WriteX 12606 131072 65536 65536 NT_STATUS_OK
WriteX 12606 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12607 NT_STATUS_OK
ReadX 12607 61440 4096 4096 NT_STATUS_OK
ReadX 12607 126976 4096 4096 NT_STATUS_OK
ReadX 12607 192512 4096 4096 NT_STATUS_OK
ReadX 12607 258048 4096 4096 NT_STATUS_OK
ReadX 12607 323584 4096 4096 NT_STATUS_OK
ReadX 12607 389120 4096 4096 NT_STATUS_OK
ReadX 12607 454656 4096 4096 NT_STATUS_OK
ReadX 12607 520192 4096 4096 NT_STATUS_OK
WriteX 12607 0 65536 65536 NT_STATUS_OK
WriteX 12607 65536 65536 65536 NT_STATUS_OK
WriteX 12607 131072 65536 65536 NT_STATUS_OK
WriteX 12607 196608 65536 65536 NT_STATUS_OK
WriteX 12607 262144 65536 65536 NT_STATUS_OK
WriteX 12607 327680 65536 65536 NT_STATUS_OK
WriteX 12607 393216 65536 65536 NT_STATUS_OK
WriteX 12607 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12610 NT_STATUS_OK
WriteX 12610 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12610 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12608 0 8192 8192 NT_STATUS_OK
Flush 12608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12608 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12608 0 8192 8192 NT_STATUS_OK
Flush 12608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12608 0 8192 8192 NT_STATUS_OK
Flush 12608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12608 0 8192 8192 NT_STATUS_OK
Flush 12608 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12612 NT_STATUS_OK
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Close 12607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12615 NT_STATUS_OK
WriteX 12615 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 258 NT_STATUS_OK
WriteX 12615 0 62591 62591 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12617 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12620 NT_STATUS_OK
WriteX 12620 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 258 NT_STATUS_OK
WriteX 12620 0 10845 10845 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12622 NT_STATUS_OK
Close 12622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12625 NT_STATUS_OK
WriteX 12625 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12625 258 NT_STATUS_OK
WriteX 12625 0 30118 30118 NT_STATUS_OK
Close 12625 NT_STATUS_OK
WriteX 12608 0 4096 4096 NT_STATUS_OK
WriteX 12610 0 64 64 NT_STATUS_OK
Close 12610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12608 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 61440 61440 NT_STATUS_OK
ReadX 12627 61440 4096 4096 NT_STATUS_OK
ReadX 12627 65536 61440 61440 NT_STATUS_OK
ReadX 12627 126976 4096 4096 NT_STATUS_OK
ReadX 12627 131072 61440 61440 NT_STATUS_OK
ReadX 12627 192512 4096 4096 NT_STATUS_OK
ReadX 12627 196608 61440 61440 NT_STATUS_OK
ReadX 12627 258048 4096 4096 NT_STATUS_OK
ReadX 12627 262144 61440 61440 NT_STATUS_OK
ReadX 12627 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 61440 61440 NT_STATUS_OK
ReadX 12628 61440 4096 4096 NT_STATUS_OK
ReadX 12628 65536 61440 61440 NT_STATUS_OK
ReadX 12628 126976 4096 4096 NT_STATUS_OK
ReadX 12628 131072 61440 61440 NT_STATUS_OK
ReadX 12628 192512 4096 4096 NT_STATUS_OK
ReadX 12628 196608 61440 61440 NT_STATUS_OK
ReadX 12628 258048 4096 4096 NT_STATUS_OK
ReadX 12628 262144 61440 61440 NT_STATUS_OK
ReadX 12628 323584 4096 4096 NT_STATUS_OK
ReadX 12628 327680 61440 61440 NT_STATUS_OK
ReadX 12628 389120 4096 4096 NT_STATUS_OK
ReadX 12628 393216 61440 61440 NT_STATUS_OK
ReadX 12628 454656 4096 4096 NT_STATUS_OK
ReadX 12628 458752 61440 61440 NT_STATUS_OK
ReadX 12628 520192 4096 4096 NT_STATUS_OK
ReadX 12628 524288 61440 61440 NT_STATUS_OK
ReadX 12628 585728 4096 4096 NT_STATUS_OK
ReadX 12628 589824 61440 61440 NT_STATUS_OK
ReadX 12628 651264 4096 4096 NT_STATUS_OK
ReadX 12628 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 61440 61440 NT_STATUS_OK
ReadX 12629 61440 4096 4096 NT_STATUS_OK
ReadX 12629 65536 61440 61440 NT_STATUS_OK
ReadX 12629 126976 4096 4096 NT_STATUS_OK
ReadX 12629 131072 61440 61440 NT_STATUS_OK
ReadX 12629 192512 4096 4096 NT_STATUS_OK
ReadX 12629 196608 61440 61440 NT_STATUS_OK
ReadX 12629 258048 4096 4096 NT_STATUS_OK
ReadX 12629 262144 61440 61440 NT_STATUS_OK
ReadX 12629 323584 4096 4096 NT_STATUS_OK
ReadX 12629 327680 61440 61440 NT_STATUS_OK
ReadX 12629 389120 4096 4096 NT_STATUS_OK
ReadX 12629 393216 61440 61440 NT_STATUS_OK
ReadX 12629 454656 4096 4096 NT_STATUS_OK
ReadX 12629 458752 61440 61440 NT_STATUS_OK
ReadX 12629 520192 4096 4096 NT_STATUS_OK
ReadX 12629 524288 61440 61440 NT_STATUS_OK
ReadX 12629 585728 4096 4096 NT_STATUS_OK
ReadX 12629 589824 61440 61440 NT_STATUS_OK
ReadX 12629 651264 4096 4096 NT_STATUS_OK
ReadX 12629 655360 61440 61440 NT_STATUS_OK
ReadX 12629 716800 4096 4096 NT_STATUS_OK
ReadX 12629 720896 61440 61440 NT_STATUS_OK
ReadX 12629 782336 4096 4096 NT_STATUS_OK
ReadX 12629 786432 61440 61440 NT_STATUS_OK
ReadX 12629 847872 4096 4096 NT_STATUS_OK
ReadX 12629 851968 61440 61440 NT_STATUS_OK
ReadX 12629 913408 4096 4096 NT_STATUS_OK
ReadX 12629 917504 61440 61440 NT_STATUS_OK
ReadX 12629 978944 4096 4096 NT_STATUS_OK
ReadX 12629 983040 61440 61440 NT_STATUS_OK
ReadX 12629 1044480 4096 4096 NT_STATUS_OK
ReadX 12629 1048576 61440 61440 NT_STATUS_OK
ReadX 12629 1110016 4096 4096 NT_STATUS_OK
ReadX 12629 1114112 61440 61440 NT_STATUS_OK
ReadX 12629 1175552 4096 4096 NT_STATUS_OK
ReadX 12629 1179648 61440 61440 NT_STATUS_OK
ReadX 12629 1241088 4096 4096 NT_STATUS_OK
ReadX 12629 1245184 61440 61440 NT_STATUS_OK
ReadX 12629 1306624 4096 4096 NT_STATUS_OK
ReadX 12629 1310720 61440 61440 NT_STATUS_OK
ReadX 12629 1372160 4096 4096 NT_STATUS_OK
ReadX 12629 1376256 61440 61440 NT_STATUS_OK
ReadX 12629 1437696 4096 4096 NT_STATUS_OK
ReadX 12629 1441792 61440 61440 NT_STATUS_OK
ReadX 12629 1503232 4096 4096 NT_STATUS_OK
ReadX 12629 1507328 61440 61440 NT_STATUS_OK
ReadX 12629 1568768 4096 4096 NT_STATUS_OK
ReadX 12629 1572864 61440 61440 NT_STATUS_OK
ReadX 12629 1634304 4096 4096 NT_STATUS_OK
ReadX 12629 1638400 61440 61440 NT_STATUS_OK
ReadX 12629 1699840 4096 4096 NT_STATUS_OK
ReadX 12629 1703936 61440 61440 NT_STATUS_OK
ReadX 12629 1765376 4096 4096 NT_STATUS_OK
ReadX 12629 1769472 61440 61440 NT_STATUS_OK
ReadX 12629 1830912 4096 4096 NT_STATUS_OK
ReadX 12629 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12630 NT_STATUS_OK
Close 12630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
ReadX 12634 4096 4096 4096 NT_STATUS_OK
ReadX 12634 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12635 NT_STATUS_OK
Close 12635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12632 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12634 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12638 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12639 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12641 NT_STATUS_OK
ReadX 12641 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 8192 8192 NT_STATUS_OK
ReadX 12642 8192 8192 8192 NT_STATUS_OK
ReadX 12642 16384 8192 8192 NT_STATUS_OK
ReadX 12642 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12644 NT_STATUS_OK
Close 12644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Close 12641 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12647 NT_STATUS_OK
WriteX 12647 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12647 258 NT_STATUS_OK
WriteX 12647 0 10438 10438 NT_STATUS_OK
Close 12647 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12648 NT_STATUS_OK
Close 12648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12649 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12650 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12651 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12652 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12653 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
ReadX 12656 4096 4096 4096 NT_STATUS_OK
ReadX 12656 8192 4096 4096 NT_STATUS_OK
ReadX 12656 12288 8192 8192 NT_STATUS_OK
ReadX 12656 20480 8192 8192 NT_STATUS_OK
ReadX 12656 28672 8192 8192 NT_STATUS_OK
ReadX 12656 36864 8192 8192 NT_STATUS_OK
ReadX 12656 45056 8192 8192 NT_STATUS_OK
ReadX 12656 53248 8192 8192 NT_STATUS_OK
ReadX 12656 61440 8192 8192 NT_STATUS_OK
ReadX 12656 69632 8192 8192 NT_STATUS_OK
ReadX 12656 77824 8192 8192 NT_STATUS_OK
ReadX 12656 86016 8192 8192 NT_STATUS_OK
ReadX 12656 94208 8192 8192 NT_STATUS_OK
ReadX 12656 102400 8192 8192 NT_STATUS_OK
ReadX 12656 110592 8192 8192 NT_STATUS_OK
ReadX 12656 118784 8192 8192 NT_STATUS_OK
ReadX 12656 126976 8192 8192 NT_STATUS_OK
ReadX 12656 135168 8192 8192 NT_STATUS_OK
ReadX 12656 143360 8192 8192 NT_STATUS_OK
ReadX 12656 151552 8192 8192 NT_STATUS_OK
ReadX 12656 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Close 12653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12661 NT_STATUS_OK
WriteX 12661 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12661 258 NT_STATUS_OK
WriteX 12661 0 28489 28489 NT_STATUS_OK
Close 12661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12662 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12664 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12664 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12665 NT_STATUS_OK
Close 12665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 8192 8192 NT_STATUS_OK
ReadX 12668 8192 8192 8192 NT_STATUS_OK
ReadX 12668 16384 8192 8192 NT_STATUS_OK
ReadX 12668 24576 8192 8192 NT_STATUS_OK
ReadX 12668 32768 16384 16384 NT_STATUS_OK
ReadX 12668 49152 8192 8192 NT_STATUS_OK
ReadX 12668 57344 8192 8192 NT_STATUS_OK
ReadX 12668 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12673 NT_STATUS_OK
WriteX 12673 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12673 258 NT_STATUS_OK
WriteX 12673 0 29253 29253 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12680 NT_STATUS_OK
WriteX 12680 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12680 258 NT_STATUS_OK
WriteX 12680 0 30183 30183 NT_STATUS_OK
Close 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12683 NT_STATUS_OK
WriteX 12683 0 510 510 NT_STATUS_OK
WriteX 12683 510 512 512 NT_STATUS_OK
WriteX 12683 1022 510 510 NT_STATUS_OK
WriteX 12683 1532 510 510 NT_STATUS_OK
WriteX 12683 2042 168 168 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12684 NT_STATUS_OK
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 4096 4096 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 61440 4096 4096 NT_STATUS_OK
ReadX 12687 126976 4096 4096 NT_STATUS_OK
WriteX 12687 0 65536 65536 NT_STATUS_OK
WriteX 12687 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 61440 4096 4096 NT_STATUS_OK
ReadX 12688 126976 4096 4096 NT_STATUS_OK
ReadX 12688 192512 4096 4096 NT_STATUS_OK
ReadX 12688 258048 4096 4096 NT_STATUS_OK
WriteX 12688 0 65536 65536 NT_STATUS_OK
WriteX 12688 65536 65536 65536 NT_STATUS_OK
WriteX 12688 131072 65536 65536 NT_STATUS_OK
WriteX 12688 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 61440 4096 4096 NT_STATUS_OK
ReadX 12689 126976 4096 4096 NT_STATUS_OK
ReadX 12689 192512 4096 4096 NT_STATUS_OK
ReadX 12689 258048 4096 4096 NT_STATUS_OK
ReadX 12689 323584 4096 4096 NT_STATUS_OK
ReadX 12689 389120 4096 4096 NT_STATUS_OK
ReadX 12689 454656 4096 4096 NT_STATUS_OK
ReadX 12689 520192 4096 4096 NT_STATUS_OK
WriteX 12689 0 65536 65536 NT_STATUS_OK
WriteX 12689 65536 65536 65536 NT_STATUS_OK
WriteX 12689 131072 65536 65536 NT_STATUS_OK
WriteX 12689 196608 65536 65536 NT_STATUS_OK
WriteX 12689 262144 65536 65536 NT_STATUS_OK
WriteX 12689 327680 65536 65536 NT_STATUS_OK
WriteX 12689 393216 65536 65536 NT_STATUS_OK
WriteX 12689 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12692 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12699 NT_STATUS_OK
Close 12699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12701 NT_STATUS_OK
Close 12701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12708 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12710 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12724 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12739 NT_STATUS_OK
Close 12739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12744 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12755 NT_STATUS_OK
Close 12755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12758 NT_STATUS_OK
WriteX 12758 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12758 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12758 0 65536 65536 NT_STATUS_OK
WriteX 12758 65536 65536 65536 NT_STATUS_OK
WriteX 12758 131072 65536 65536 NT_STATUS_OK
WriteX 12758 196608 65536 65536 NT_STATUS_OK
WriteX 12758 262144 26634 26634 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12763 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12764 NT_STATUS_OK
Close 12764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
Close 12765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12766 NT_STATUS_OK
ReadX 12766 0 4096 4096 NT_STATUS_OK
ReadX 12766 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12766 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12771 NT_STATUS_OK
Close 12771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12774 NT_STATUS_OK
Close 12774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12776 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12785 NT_STATUS_OK
Close 12785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12794 NT_STATUS_OK
Close 12794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12804 NT_STATUS_OK
Close 12804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12809 NT_STATUS_OK
Close 12809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12818 NT_STATUS_OK
Close 12818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12823 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12828 NT_STATUS_OK
Close 12828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12833 NT_STATUS_OK
Close 12833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 4096 4096 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12846 NT_STATUS_OK
ReadX 12846 0 4096 4096 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12857 NT_STATUS_OK
Close 12857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
Close 12859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 4096 4096 NT_STATUS_OK
Close 12860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12890 0 4096 4096 NT_STATUS_OK
Close 12890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
ReadX 12892 4096 4096 4096 NT_STATUS_OK
ReadX 12892 8192 4096 4096 NT_STATUS_OK
ReadX 12892 12288 4096 4096 NT_STATUS_OK
ReadX 12892 16384 4096 4096 NT_STATUS_OK
ReadX 12892 20480 4096 4096 NT_STATUS_OK
ReadX 12892 24576 4096 4096 NT_STATUS_OK
ReadX 12892 28672 4096 4096 NT_STATUS_OK
ReadX 12892 32768 4096 4096 NT_STATUS_OK
ReadX 12892 36864 4096 4096 NT_STATUS_OK
ReadX 12892 40960 4096 4096 NT_STATUS_OK
ReadX 12892 45056 4096 4096 NT_STATUS_OK
ReadX 12892 49152 4096 4096 NT_STATUS_OK
ReadX 12892 53248 4096 4096 NT_STATUS_OK
ReadX 12892 57344 4096 4096 NT_STATUS_OK
ReadX 12892 61440 4096 4096 NT_STATUS_OK
ReadX 12892 65536 4096 4096 NT_STATUS_OK
ReadX 12892 69632 4096 4096 NT_STATUS_OK
ReadX 12892 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12892 1004 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Close 12892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12893 NT_STATUS_OK
SET_FILE_INFORMATION 12893 1004 NT_STATUS_OK
Close 12893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12898 NT_STATUS_OK
WriteX 12898 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12898 258 NT_STATUS_OK
WriteX 12898 0 65536 65536 NT_STATUS_OK
WriteX 12898 65536 19979 19979 NT_STATUS_OK
Close 12898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12899 NT_STATUS_OK
ReadX 12899 0 4096 4096 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
QUERY_FILE_INFORMATION 12899 1004 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
SET_FILE_INFORMATION 12899 1004 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 4096 4096 NT_STATUS_OK
Close 12900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 4096 4096 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 4096 4096 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12904 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12907 NT_STATUS_OK
Close 12907 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12910 NT_STATUS_OK
WriteX 12910 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 65536 65536 NT_STATUS_OK
WriteX 12910 65536 17654 17654 NT_STATUS_OK
Close 12910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
QUERY_FILE_INFORMATION 12911 1004 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12912 NT_STATUS_OK
SET_FILE_INFORMATION 12912 1004 NT_STATUS_OK
Close 12912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12914 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 0 4096 4096 NT_STATUS_OK
ReadX 12916 4096 4096 4096 NT_STATUS_OK
ReadX 12916 8192 4096 4096 NT_STATUS_OK
ReadX 12916 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12916 16384 4096 4096 NT_STATUS_OK
ReadX 12916 20480 4096 4096 NT_STATUS_OK
ReadX 12916 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
Close 12917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 4096 4096 NT_STATUS_OK
Close 12918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12919 1004 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12922 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12925 NT_STATUS_OK
WriteX 12925 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12925 258 NT_STATUS_OK
WriteX 12925 0 65536 65536 NT_STATUS_OK
WriteX 12925 65536 19490 19490 NT_STATUS_OK
Close 12925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12926 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Flush 12926 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Flush 12926 NT_STATUS_OK
QUERY_FILE_INFORMATION 12926 1004 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Flush 12926 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Flush 12926 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Flush 12926 NT_STATUS_OK
SET_FILE_INFORMATION 12926 1004 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Flush 12926 NT_STATUS_OK
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12927 NT_STATUS_OK
SET_FILE_INFORMATION 12927 1004 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12931 0 4096 4096 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
ReadX 12933 4096 4096 4096 NT_STATUS_OK
ReadX 12933 8192 4096 4096 NT_STATUS_OK
ReadX 12933 12288 4096 4096 NT_STATUS_OK
ReadX 12933 16384 4096 4096 NT_STATUS_OK
ReadX 12933 20480 4096 4096 NT_STATUS_OK
ReadX 12933 24576 4096 4096 NT_STATUS_OK
ReadX 12933 28672 4096 4096 NT_STATUS_OK
ReadX 12933 32768 4096 4096 NT_STATUS_OK
ReadX 12933 36864 4096 4096 NT_STATUS_OK
ReadX 12933 40960 4096 4096 NT_STATUS_OK
ReadX 12933 45056 4096 4096 NT_STATUS_OK
ReadX 12933 49152 4096 4096 NT_STATUS_OK
ReadX 12933 53248 4096 4096 NT_STATUS_OK
ReadX 12933 57344 4096 4096 NT_STATUS_OK
ReadX 12933 61440 4096 4096 NT_STATUS_OK
ReadX 12933 65536 4096 4096 NT_STATUS_OK
ReadX 12933 69632 4096 4096 NT_STATUS_OK
ReadX 12933 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12933 1004 NT_STATUS_OK
WriteX 12933 0 4096 4096 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12934 NT_STATUS_OK
SET_FILE_INFORMATION 12934 1004 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12936 NT_STATUS_OK
Close 12936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12939 NT_STATUS_OK
WriteX 12939 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12939 258 NT_STATUS_OK
WriteX 12939 0 65536 65536 NT_STATUS_OK
WriteX 12939 65536 8866 8866 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
WriteX 12940 0 4096 4096 NT_STATUS_OK
Flush 12940 NT_STATUS_OK
SET_FILE_INFORMATION 12940 1004 NT_STATUS_OK
WriteX 12940 0 4096 4096 NT_STATUS_OK
Flush 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12944 1004 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12944 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12950 NT_STATUS_OK
WriteX 12950 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12950 258 NT_STATUS_OK
WriteX 12950 0 65536 65536 NT_STATUS_OK
WriteX 12950 65536 9298 9298 NT_STATUS_OK
Close 12950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
WriteX 12951 0 4096 4096 NT_STATUS_OK
Flush 12951 NT_STATUS_OK
SET_FILE_INFORMATION 12951 1004 NT_STATUS_OK
WriteX 12951 0 4096 4096 NT_STATUS_OK
Flush 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12952 NT_STATUS_OK
SET_FILE_INFORMATION 12952 1004 NT_STATUS_OK
Close 12952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12954 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12957 0 4096 4096 NT_STATUS_OK
Close 12957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12958 4096 4096 4096 NT_STATUS_OK
ReadX 12958 8192 4096 4096 NT_STATUS_OK
ReadX 12958 12288 4096 4096 NT_STATUS_OK
ReadX 12958 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12959 NT_STATUS_OK
ReadX 12959 0 4096 4096 NT_STATUS_OK
Close 12959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
Close 12960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12961 1004 NT_STATUS_OK
WriteX 12961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12962 NT_STATUS_OK
Close 12962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12961 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12964 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12967 NT_STATUS_OK
WriteX 12967 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12967 258 NT_STATUS_OK
WriteX 12967 0 65536 65536 NT_STATUS_OK
WriteX 12967 65536 11540 11540 NT_STATUS_OK
Close 12967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
WriteX 12968 0 4096 4096 NT_STATUS_OK
Flush 12968 NT_STATUS_OK
SET_FILE_INFORMATION 12968 1004 NT_STATUS_OK
WriteX 12968 0 4096 4096 NT_STATUS_OK
Flush 12968 NT_STATUS_OK
Close 12968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12969 NT_STATUS_OK
SET_FILE_INFORMATION 12969 1004 NT_STATUS_OK
Close 12969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 61440 4096 4096 NT_STATUS_OK
ReadX 12973 126976 4096 4096 NT_STATUS_OK
WriteX 12973 0 65536 65536 NT_STATUS_OK
WriteX 12973 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12974 NT_STATUS_OK
ReadX 12974 61440 4096 4096 NT_STATUS_OK
ReadX 12974 126976 4096 4096 NT_STATUS_OK
ReadX 12974 192512 4096 4096 NT_STATUS_OK
ReadX 12974 258048 4096 4096 NT_STATUS_OK
WriteX 12974 0 65536 65536 NT_STATUS_OK
WriteX 12974 65536 65536 65536 NT_STATUS_OK
WriteX 12974 131072 65536 65536 NT_STATUS_OK
WriteX 12974 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12975 NT_STATUS_OK
ReadX 12975 61440 4096 4096 NT_STATUS_OK
ReadX 12975 126976 4096 4096 NT_STATUS_OK
ReadX 12975 192512 4096 4096 NT_STATUS_OK
ReadX 12975 258048 4096 4096 NT_STATUS_OK
ReadX 12975 323584 4096 4096 NT_STATUS_OK
ReadX 12975 389120 4096 4096 NT_STATUS_OK
ReadX 12975 454656 4096 4096 NT_STATUS_OK
ReadX 12975 520192 4096 4096 NT_STATUS_OK
WriteX 12975 0 65536 65536 NT_STATUS_OK
WriteX 12975 65536 65536 65536 NT_STATUS_OK
WriteX 12975 131072 65536 65536 NT_STATUS_OK
WriteX 12975 196608 65536 65536 NT_STATUS_OK
WriteX 12975 262144 65536 65536 NT_STATUS_OK
WriteX 12975 327680 65536 65536 NT_STATUS_OK
WriteX 12975 393216 65536 65536 NT_STATUS_OK
WriteX 12975 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12976 NT_STATUS_OK
ReadX 12976 0 4096 4096 NT_STATUS_OK
ReadX 12976 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12977 NT_STATUS_OK
WriteX 12977 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12977 258 NT_STATUS_OK
WriteX 12977 0 53 53 NT_STATUS_OK
Close 12977 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Close 12974 NT_STATUS_OK
Close 12975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12976 8192 4096 4096 NT_STATUS_OK
ReadX 12976 12288 4096 4096 NT_STATUS_OK
WriteX 12980 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12980 258 NT_STATUS_OK
ReadX 12976 16384 4096 4096 NT_STATUS_OK
ReadX 12976 20480 4096 4096 NT_STATUS_OK
WriteX 12980 0 15360 15360 NT_STATUS_OK
Close 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
WriteX 12981 0 4096 4096 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12982 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12984 NT_STATUS_OK
ReadX 12984 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12985 NT_STATUS_OK
Close 12985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12984 4096 4096 4096 NT_STATUS_OK
ReadX 12984 8192 4096 4096 NT_STATUS_OK
ReadX 12984 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
ReadX 12987 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
ReadX 12988 4096 4096 4096 NT_STATUS_OK
ReadX 12988 8192 4096 4096 NT_STATUS_OK
Close 12987 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12989 NT_STATUS_OK
WriteX 12989 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 258 NT_STATUS_OK
WriteX 12989 0 15360 15360 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12994 NT_STATUS_OK
SET_FILE_INFORMATION 12994 1004 NT_STATUS_OK
Close 12994 NT_STATUS_OK
WriteX 12990 0 4096 4096 NT_STATUS_OK
Close 12990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
ReadX 12997 4096 4096 4096 NT_STATUS_OK
ReadX 12997 8192 4096 4096 NT_STATUS_OK
ReadX 12997 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12997 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12997 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12999 NT_STATUS_OK
WriteX 12999 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 258 NT_STATUS_OK
WriteX 12999 0 53 53 NT_STATUS_OK
Close 12999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12998 4096 4096 4096 NT_STATUS_OK
ReadX 12998 8192 4096 4096 NT_STATUS_OK
ReadX 12998 12288 4096 4096 NT_STATUS_OK
WriteX 13002 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 258 NT_STATUS_OK
WriteX 13002 0 12006 12006 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13003 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13003 1004 NT_STATUS_OK
WriteX 13003 0 4096 4096 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13007 NT_STATUS_OK
Close 13007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13006 4096 4096 4096 NT_STATUS_OK
ReadX 13006 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13009 NT_STATUS_OK
WriteX 13009 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13009 258 NT_STATUS_OK
WriteX 13009 0 11991 11991 NT_STATUS_OK
Close 13009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13010 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13010 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
WriteX 12997 0 19054 19054 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
Close 13014 NT_STATUS_OK
WriteX 13010 0 4096 4096 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13015 NT_STATUS_OK
Close 13015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13018 NT_STATUS_OK
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13017 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13017 1004 NT_STATUS_OK
ReadX 13017 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13017 1004 NT_STATUS_OK
WriteX 13017 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13017 1004 NT_STATUS_OK
Close 12993 NT_STATUS_OK
WriteX 13017 0 12288 12288 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13022 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 0 61440 61440 NT_STATUS_OK
ReadX 13024 61440 4096 4096 NT_STATUS_OK
ReadX 13024 65536 61440 61440 NT_STATUS_OK
ReadX 13024 126976 4096 4096 NT_STATUS_OK
ReadX 13024 131072 61440 61440 NT_STATUS_OK
ReadX 13024 192512 4096 4096 NT_STATUS_OK
ReadX 13024 196608 61440 61440 NT_STATUS_OK
ReadX 13024 258048 4096 4096 NT_STATUS_OK
ReadX 13024 262144 61440 61440 NT_STATUS_OK
ReadX 13024 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 61440 61440 NT_STATUS_OK
ReadX 13025 61440 4096 4096 NT_STATUS_OK
ReadX 13025 65536 61440 61440 NT_STATUS_OK
ReadX 13025 126976 4096 4096 NT_STATUS_OK
ReadX 13025 131072 61440 61440 NT_STATUS_OK
ReadX 13025 192512 4096 4096 NT_STATUS_OK
ReadX 13025 196608 61440 61440 NT_STATUS_OK
ReadX 13025 258048 4096 4096 NT_STATUS_OK
ReadX 13025 262144 61440 61440 NT_STATUS_OK
ReadX 13025 323584 4096 4096 NT_STATUS_OK
ReadX 13025 327680 61440 61440 NT_STATUS_OK
ReadX 13025 389120 4096 4096 NT_STATUS_OK
ReadX 13025 393216 61440 61440 NT_STATUS_OK
ReadX 13025 454656 4096 4096 NT_STATUS_OK
ReadX 13025 458752 61440 61440 NT_STATUS_OK
ReadX 13025 520192 4096 4096 NT_STATUS_OK
ReadX 13025 524288 61440 61440 NT_STATUS_OK
ReadX 13025 585728 4096 4096 NT_STATUS_OK
ReadX 13025 589824 61440 61440 NT_STATUS_OK
ReadX 13025 651264 4096 4096 NT_STATUS_OK
ReadX 13025 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 61440 61440 NT_STATUS_OK
ReadX 13026 61440 4096 4096 NT_STATUS_OK
ReadX 13026 65536 61440 61440 NT_STATUS_OK
ReadX 13026 126976 4096 4096 NT_STATUS_OK
ReadX 13026 131072 61440 61440 NT_STATUS_OK
ReadX 13026 192512 4096 4096 NT_STATUS_OK
ReadX 13026 196608 61440 61440 NT_STATUS_OK
ReadX 13026 258048 4096 4096 NT_STATUS_OK
ReadX 13026 262144 61440 61440 NT_STATUS_OK
ReadX 13026 323584 4096 4096 NT_STATUS_OK
ReadX 13026 327680 61440 61440 NT_STATUS_OK
ReadX 13026 389120 4096 4096 NT_STATUS_OK
ReadX 13026 393216 61440 61440 NT_STATUS_OK
ReadX 13026 454656 4096 4096 NT_STATUS_OK
ReadX 13026 458752 61440 61440 NT_STATUS_OK
ReadX 13026 520192 4096 4096 NT_STATUS_OK
ReadX 13026 524288 61440 61440 NT_STATUS_OK
ReadX 13026 585728 4096 4096 NT_STATUS_OK
ReadX 13026 589824 61440 61440 NT_STATUS_OK
ReadX 13026 651264 4096 4096 NT_STATUS_OK
ReadX 13026 655360 61440 61440 NT_STATUS_OK
ReadX 13026 716800 4096 4096 NT_STATUS_OK
ReadX 13026 720896 61440 61440 NT_STATUS_OK
ReadX 13026 782336 4096 4096 NT_STATUS_OK
ReadX 13026 786432 61440 61440 NT_STATUS_OK
ReadX 13026 847872 4096 4096 NT_STATUS_OK
ReadX 13026 851968 61440 61440 NT_STATUS_OK
ReadX 13026 913408 4096 4096 NT_STATUS_OK
ReadX 13026 917504 61440 61440 NT_STATUS_OK
ReadX 13026 978944 4096 4096 NT_STATUS_OK
ReadX 13026 983040 61440 61440 NT_STATUS_OK
ReadX 13026 1044480 4096 4096 NT_STATUS_OK
ReadX 13026 1048576 61440 61440 NT_STATUS_OK
ReadX 13026 1110016 4096 4096 NT_STATUS_OK
ReadX 13026 1114112 61440 61440 NT_STATUS_OK
ReadX 13026 1175552 4096 4096 NT_STATUS_OK
ReadX 13026 1179648 61440 61440 NT_STATUS_OK
ReadX 13026 1241088 4096 4096 NT_STATUS_OK
ReadX 13026 1245184 61440 61440 NT_STATUS_OK
ReadX 13026 1306624 4096 4096 NT_STATUS_OK
ReadX 13026 1310720 61440 61440 NT_STATUS_OK
ReadX 13026 1372160 4096 4096 NT_STATUS_OK
ReadX 13026 1376256 61440 61440 NT_STATUS_OK
ReadX 13026 1437696 4096 4096 NT_STATUS_OK
ReadX 13026 1441792 61440 61440 NT_STATUS_OK
ReadX 13026 1503232 4096 4096 NT_STATUS_OK
ReadX 13026 1507328 61440 61440 NT_STATUS_OK
ReadX 13026 1568768 4096 4096 NT_STATUS_OK
ReadX 13026 1572864 61440 61440 NT_STATUS_OK
ReadX 13026 1634304 4096 4096 NT_STATUS_OK
ReadX 13026 1638400 61440 61440 NT_STATUS_OK
ReadX 13026 1699840 4096 4096 NT_STATUS_OK
ReadX 13026 1703936 61440 61440 NT_STATUS_OK
ReadX 13026 1765376 4096 4096 NT_STATUS_OK
ReadX 13026 1769472 61440 61440 NT_STATUS_OK
ReadX 13026 1830912 4096 4096 NT_STATUS_OK
ReadX 13026 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13033 NT_STATUS_OK
QUERY_FILE_INFORMATION 13033 1004 NT_STATUS_OK
WriteX 13033 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13033 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13034 NT_STATUS_OK
Close 13034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13035 NT_STATUS_OK
WriteX 13035 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13035 258 NT_STATUS_OK
WriteX 13035 0 491 491 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13033 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13039 NT_STATUS_OK
WriteX 13039 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13039 258 NT_STATUS_OK
WriteX 13039 0 543 543 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Close 13026 NT_STATUS_OK
Close 13040 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13030 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13044 NT_STATUS_OK
ReadX 13044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13045 NT_STATUS_OK
ReadX 13045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13053 NT_STATUS_OK
QUERY_FILE_INFORMATION 13053 1004 NT_STATUS_OK
WriteX 13053 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13053 258 NT_STATUS_OK
WriteX 13053 0 2048 2048 NT_STATUS_OK
Close 13053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13054 NT_STATUS_OK
ReadX 13054 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13054 0 4096 4096 NT_STATUS_OK
Flush 13054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13059 NT_STATUS_OK
WriteX 13059 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13059 258 NT_STATUS_OK
WriteX 13059 0 2048 2048 NT_STATUS_OK
Close 13059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13060 NT_STATUS_OK
ReadX 13060 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13064 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13065 NT_STATUS_OK
WriteX 13065 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 2048 2048 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 2048 2048 NT_STATUS_OK
ReadX 13044 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13060 0 4096 4096 NT_STATUS_OK
WriteX 13044 0 8192 8192 NT_STATUS_OK
WriteX 13045 0 4096 4096 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
ReadX 13060 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13070 NT_STATUS_OK
QUERY_FILE_INFORMATION 13070 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13045 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Close 13044 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13072 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13073 NT_STATUS_OK
ReadX 13073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13080 NT_STATUS_OK
ReadX 13080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13090 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 1004 NT_STATUS_OK
WriteX 13090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 2048 2048 NT_STATUS_OK
Close 13090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13098 NT_STATUS_OK
QUERY_FILE_INFORMATION 13098 1004 NT_STATUS_OK
WriteX 13098 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13098 258 NT_STATUS_OK
WriteX 13098 0 2048 2048 NT_STATUS_OK
Close 13098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13091 0 4096 4096 NT_STATUS_OK
Flush 13091 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
Flush 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13093 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13101 NT_STATUS_OK
WriteX 13101 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13101 258 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13104 NT_STATUS_OK
WriteX 13104 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13104 258 NT_STATUS_OK
WriteX 13104 0 4096 4096 NT_STATUS_OK
Close 13104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13105 0 4096 4096 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Close 13080 NT_STATUS_OK
Close 13073 NT_STATUS_OK
Close 13074 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13112 NT_STATUS_OK
WriteX 13112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13112 258 NT_STATUS_OK
WriteX 13112 0 2048 2048 NT_STATUS_OK
Close 13112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13127 NT_STATUS_OK
QUERY_FILE_INFORMATION 13127 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13123 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13129 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13135 NT_STATUS_OK
ReadX 13135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13137 NT_STATUS_OK
ReadX 13137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13149 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 258 NT_STATUS_OK
WriteX 13149 0 2048 2048 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13152 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13155 NT_STATUS_OK
ReadX 13155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13161 NT_STATUS_OK
QUERY_FILE_INFORMATION 13161 1004 NT_STATUS_OK
WriteX 13161 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13161 258 NT_STATUS_OK
WriteX 13161 0 2048 2048 NT_STATUS_OK
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13169 NT_STATUS_OK
QUERY_FILE_INFORMATION 13169 1004 NT_STATUS_OK
WriteX 13169 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13169 258 NT_STATUS_OK
WriteX 13169 0 2048 2048 NT_STATUS_OK
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
Flush 13150 NT_STATUS_OK
WriteX 13162 0 4096 4096 NT_STATUS_OK
Flush 13162 NT_STATUS_OK
WriteX 13170 0 4096 4096 NT_STATUS_OK
Flush 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13170 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13152 4096 16384 16384 NT_STATUS_OK
ReadX 13132 4096 16384 16384 NT_STATUS_OK
ReadX 13164 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 2048 2048 NT_STATUS_OK
WriteX 13172 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13173 NT_STATUS_OK
QUERY_FILE_INFORMATION 13173 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13156 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13152 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13154 NT_STATUS_OK
Close 13155 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Close 13132 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13175 NT_STATUS_OK
QUERY_FILE_INFORMATION 13175 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13177 NT_STATUS_OK
QUERY_FILE_INFORMATION 13177 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13184 NT_STATUS_OK
ReadX 13184 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13180 4096 16384 16384 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
WriteX 13181 0 4096 4096 NT_STATUS_OK
WriteX 13182 0 4096 4096 NT_STATUS_OK
WriteX 13183 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13189 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13193 NT_STATUS_OK
ReadX 13193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13194 NT_STATUS_OK
ReadX 13194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 8192 8192 NT_STATUS_OK
ReadX 13186 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13200 0 4096 4096 NT_STATUS_OK
ReadX 13200 4096 4096 4096 NT_STATUS_OK
ReadX 13200 8192 4096 4096 NT_STATUS_OK
WriteX 13186 0 4096 4096 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13201 0 4096 4096 NT_STATUS_OK
ReadX 13201 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
WriteX 13181 0 4096 4096 NT_STATUS_OK
WriteX 13182 0 4096 4096 NT_STATUS_OK
WriteX 13183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13206 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 1004 NT_STATUS_OK
WriteX 13206 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 258 NT_STATUS_OK
WriteX 13206 0 2048 2048 NT_STATUS_OK
Close 13206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13207 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13207 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
ReadX 13209 4096 4096 4096 NT_STATUS_OK
WriteX 13209 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13207 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
ReadX 13211 4096 4096 4096 NT_STATUS_OK
WriteX 13211 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13212 NT_STATUS_OK
QUERY_FILE_INFORMATION 13212 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13199 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13192 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Close 13193 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Close 13195 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Close 13186 NT_STATUS_OK
Close 13187 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13188 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13200 NT_STATUS_OK
Close 13201 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13214 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13214 0 4096 4096 NT_STATUS_OK
ReadX 13214 4096 4096 4096 NT_STATUS_OK
ReadX 13214 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
ReadX 13215 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13232 NT_STATUS_OK
QUERY_FILE_INFORMATION 13232 1004 NT_STATUS_OK
WriteX 13232 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13232 258 NT_STATUS_OK
WriteX 13232 0 2048 2048 NT_STATUS_OK
Close 13232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13233 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13237 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13238 NT_STATUS_OK
QUERY_FILE_INFORMATION 13238 1004 NT_STATUS_OK
WriteX 13238 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13238 258 NT_STATUS_OK
WriteX 13238 0 2048 2048 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13222 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13240 NT_STATUS_OK
QUERY_FILE_INFORMATION 13240 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13242 NT_STATUS_OK
QUERY_FILE_INFORMATION 13242 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 61440 4096 4096 NT_STATUS_OK
ReadX 13244 126976 4096 4096 NT_STATUS_OK
WriteX 13244 0 65536 65536 NT_STATUS_OK
WriteX 13244 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 61440 4096 4096 NT_STATUS_OK
ReadX 13245 126976 4096 4096 NT_STATUS_OK
ReadX 13245 192512 4096 4096 NT_STATUS_OK
ReadX 13245 258048 4096 4096 NT_STATUS_OK
WriteX 13245 0 65536 65536 NT_STATUS_OK
WriteX 13245 65536 65536 65536 NT_STATUS_OK
WriteX 13245 131072 65536 65536 NT_STATUS_OK
WriteX 13245 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 61440 4096 4096 NT_STATUS_OK
ReadX 13246 126976 4096 4096 NT_STATUS_OK
ReadX 13246 192512 4096 4096 NT_STATUS_OK
ReadX 13246 258048 4096 4096 NT_STATUS_OK
ReadX 13246 323584 4096 4096 NT_STATUS_OK
ReadX 13246 389120 4096 4096 NT_STATUS_OK
ReadX 13246 454656 4096 4096 NT_STATUS_OK
ReadX 13246 520192 4096 4096 NT_STATUS_OK
WriteX 13246 0 65536 65536 NT_STATUS_OK
WriteX 13246 65536 65536 65536 NT_STATUS_OK
WriteX 13246 131072 65536 65536 NT_STATUS_OK
WriteX 13246 196608 65536 65536 NT_STATUS_OK
WriteX 13246 262144 65536 65536 NT_STATUS_OK
WriteX 13246 327680 65536 65536 NT_STATUS_OK
WriteX 13246 393216 65536 65536 NT_STATUS_OK
WriteX 13246 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13247 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13247 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13247 8192 4096 4096 NT_STATUS_OK
ReadX 13247 12288 4096 4096 NT_STATUS_OK
ReadX 13247 16384 4096 4096 NT_STATUS_OK
ReadX 13247 20480 4096 4096 NT_STATUS_OK
ReadX 13247 24576 4096 4096 NT_STATUS_OK
ReadX 13247 28672 4096 4096 NT_STATUS_OK
ReadX 13247 32768 4096 4096 NT_STATUS_OK
ReadX 13247 36864 4096 4096 NT_STATUS_OK
ReadX 13247 40960 4096 4096 NT_STATUS_OK
ReadX 13247 45056 4096 4096 NT_STATUS_OK
ReadX 13247 49152 4096 4096 NT_STATUS_OK
ReadX 13247 53248 4096 4096 NT_STATUS_OK
ReadX 13247 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13247 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13248 NT_STATUS_OK
Close 13248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13250 NT_STATUS_OK
WriteX 13250 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13250 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13250 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13250 1004 NT_STATUS_OK
WriteX 13250 0 57088 57088 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
Flush 13250 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13251 NT_STATUS_OK
SET_FILE_INFORMATION 13251 1004 NT_STATUS_OK
Close 13251 NT_STATUS_OK
SET_FILE_INFORMATION 13250 1004 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
Close 13250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13254 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13255 NT_STATUS_OK
WriteX 13255 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13255 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13255 1004 NT_STATUS_OK
WriteX 13255 0 51456 51456 NT_STATUS_OK
WriteX 13255 0 4096 4096 NT_STATUS_OK
Flush 13255 NT_STATUS_OK
SET_FILE_INFORMATION 13255 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13255 1004 NT_STATUS_OK
WriteX 13255 0 4096 4096 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Close 13254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13257 NT_STATUS_OK
Close 13257 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13259 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13261 NT_STATUS_OK
Close 13261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13264 NT_STATUS_OK
WriteX 13264 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 53077 53077 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13265 NT_STATUS_OK
WriteX 13265 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13265 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 0 65536 65536 NT_STATUS_OK
WriteX 13265 65536 1856 1856 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
SET_FILE_INFORMATION 13265 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Close 13259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13267 NT_STATUS_OK
Close 13267 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13274 NT_STATUS_OK
WriteX 13274 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13274 258 NT_STATUS_OK
WriteX 13274 0 7983 7983 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13276 NT_STATUS_OK
Close 13276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13279 NT_STATUS_OK
WriteX 13279 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13279 258 NT_STATUS_OK
WriteX 13279 0 65536 65536 NT_STATUS_OK
WriteX 13279 65536 65536 65536 NT_STATUS_OK
WriteX 13279 131072 65536 65536 NT_STATUS_OK
WriteX 13279 196608 65536 65536 NT_STATUS_OK
WriteX 13279 262144 65536 65536 NT_STATUS_OK
WriteX 13279 327680 65536 65536 NT_STATUS_OK
WriteX 13279 393216 65536 65536 NT_STATUS_OK
WriteX 13279 458752 46731 46731 NT_STATUS_OK
Close 13279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13280 NT_STATUS_OK
WriteX 13280 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13280 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13269 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13280 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 65536 65536 NT_STATUS_OK
WriteX 13280 65536 22848 22848 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
Flush 13280 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13282 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13284 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13285 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13285 1004 NT_STATUS_OK
ReadX 13285 8192 4096 4096 NT_STATUS_OK
ReadX 13285 12288 4096 4096 NT_STATUS_OK
ReadX 13285 16384 4096 4096 NT_STATUS_OK
ReadX 13285 20480 4096 4096 NT_STATUS_OK
ReadX 13285 24576 4096 4096 NT_STATUS_OK
ReadX 13285 28672 4096 4096 NT_STATUS_OK
ReadX 13285 32768 4096 4096 NT_STATUS_OK
ReadX 13285 36864 4096 4096 NT_STATUS_OK
ReadX 13285 40960 4096 4096 NT_STATUS_OK
ReadX 13285 45056 4096 4096 NT_STATUS_OK
ReadX 13285 49152 4096 4096 NT_STATUS_OK
ReadX 13285 53248 4096 4096 NT_STATUS_OK
ReadX 13285 57344 4096 4096 NT_STATUS_OK
ReadX 13285 61440 4096 4096 NT_STATUS_OK
ReadX 13285 65536 4096 4096 NT_STATUS_OK
ReadX 13285 69632 4096 4096 NT_STATUS_OK
ReadX 13285 73728 4096 4096 NT_STATUS_OK
ReadX 13285 77824 4096 4096 NT_STATUS_OK
ReadX 13285 81920 4096 4096 NT_STATUS_OK
ReadX 13285 86016 4096 4096 NT_STATUS_OK
ReadX 13285 90112 4096 4096 NT_STATUS_OK
ReadX 13285 94208 4096 4096 NT_STATUS_OK
ReadX 13285 98304 4096 4096 NT_STATUS_OK
ReadX 13285 102400 4096 4096 NT_STATUS_OK
ReadX 13285 106496 4096 4096 NT_STATUS_OK
ReadX 13285 110592 4096 4096 NT_STATUS_OK
ReadX 13285 114688 4096 4096 NT_STATUS_OK
ReadX 13285 118784 4096 4096 NT_STATUS_OK
ReadX 13285 122880 4096 4096 NT_STATUS_OK
ReadX 13285 126976 4096 4096 NT_STATUS_OK
ReadX 13285 131072 4096 4096 NT_STATUS_OK
ReadX 13285 135168 4096 4096 NT_STATUS_OK
ReadX 13285 139264 4096 4096 NT_STATUS_OK
ReadX 13285 143360 4096 4096 NT_STATUS_OK
ReadX 13285 147456 4096 4096 NT_STATUS_OK
ReadX 13285 151552 4096 4096 NT_STATUS_OK
ReadX 13285 155648 4096 4096 NT_STATUS_OK
ReadX 13285 159744 4096 4096 NT_STATUS_OK
ReadX 13285 163840 4096 4096 NT_STATUS_OK
ReadX 13285 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13285 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13288 NT_STATUS_OK
WriteX 13288 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13288 258 NT_STATUS_OK
Close 13285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13289 NT_STATUS_OK
SET_FILE_INFORMATION 13289 1004 NT_STATUS_OK
Close 13289 NT_STATUS_OK
WriteX 13288 0 42388 42388 NT_STATUS_OK
Close 13288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
ReadX 13292 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13293 NT_STATUS_OK
WriteX 13293 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 258 NT_STATUS_OK
SET_FILE_INFORMATION 13293 1004 NT_STATUS_OK
WriteX 13293 0 42652 42652 NT_STATUS_OK
Close 13293 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13295 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13299 NT_STATUS_OK
Close 13299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13302 NT_STATUS_OK
WriteX 13302 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13302 258 NT_STATUS_OK
WriteX 13302 0 65536 65536 NT_STATUS_OK
WriteX 13302 65536 49 49 NT_STATUS_OK
Close 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 61440 61440 NT_STATUS_OK
ReadX 13303 61440 4096 4096 NT_STATUS_OK
ReadX 13303 65536 61440 61440 NT_STATUS_OK
ReadX 13303 126976 4096 4096 NT_STATUS_OK
ReadX 13303 131072 61440 61440 NT_STATUS_OK
ReadX 13303 192512 4096 4096 NT_STATUS_OK
ReadX 13303 196608 61440 61440 NT_STATUS_OK
ReadX 13303 258048 4096 4096 NT_STATUS_OK
ReadX 13303 262144 61440 61440 NT_STATUS_OK
ReadX 13303 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 61440 61440 NT_STATUS_OK
ReadX 13304 61440 4096 4096 NT_STATUS_OK
ReadX 13304 65536 61440 61440 NT_STATUS_OK
ReadX 13304 126976 4096 4096 NT_STATUS_OK
ReadX 13304 131072 61440 61440 NT_STATUS_OK
ReadX 13304 192512 4096 4096 NT_STATUS_OK
ReadX 13304 196608 61440 61440 NT_STATUS_OK
ReadX 13304 258048 4096 4096 NT_STATUS_OK
ReadX 13304 262144 61440 61440 NT_STATUS_OK
ReadX 13304 323584 4096 4096 NT_STATUS_OK
ReadX 13304 327680 61440 61440 NT_STATUS_OK
ReadX 13304 389120 4096 4096 NT_STATUS_OK
ReadX 13304 393216 61440 61440 NT_STATUS_OK
ReadX 13304 454656 4096 4096 NT_STATUS_OK
ReadX 13304 458752 61440 61440 NT_STATUS_OK
ReadX 13304 520192 4096 4096 NT_STATUS_OK
ReadX 13304 524288 61440 61440 NT_STATUS_OK
ReadX 13304 585728 4096 4096 NT_STATUS_OK
ReadX 13304 589824 61440 61440 NT_STATUS_OK
ReadX 13304 651264 4096 4096 NT_STATUS_OK
ReadX 13304 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 61440 61440 NT_STATUS_OK
ReadX 13305 61440 4096 4096 NT_STATUS_OK
ReadX 13305 65536 61440 61440 NT_STATUS_OK
ReadX 13305 126976 4096 4096 NT_STATUS_OK
ReadX 13305 131072 61440 61440 NT_STATUS_OK
ReadX 13305 192512 4096 4096 NT_STATUS_OK
ReadX 13305 196608 61440 61440 NT_STATUS_OK
ReadX 13305 258048 4096 4096 NT_STATUS_OK
ReadX 13305 262144 61440 61440 NT_STATUS_OK
ReadX 13305 323584 4096 4096 NT_STATUS_OK
ReadX 13305 327680 61440 61440 NT_STATUS_OK
ReadX 13305 389120 4096 4096 NT_STATUS_OK
ReadX 13305 393216 61440 61440 NT_STATUS_OK
ReadX 13305 454656 4096 4096 NT_STATUS_OK
ReadX 13305 458752 61440 61440 NT_STATUS_OK
ReadX 13305 520192 4096 4096 NT_STATUS_OK
ReadX 13305 524288 61440 61440 NT_STATUS_OK
ReadX 13305 585728 4096 4096 NT_STATUS_OK
ReadX 13305 589824 61440 61440 NT_STATUS_OK
ReadX 13305 651264 4096 4096 NT_STATUS_OK
ReadX 13305 655360 61440 61440 NT_STATUS_OK
ReadX 13305 716800 4096 4096 NT_STATUS_OK
ReadX 13305 720896 61440 61440 NT_STATUS_OK
ReadX 13305 782336 4096 4096 NT_STATUS_OK
ReadX 13305 786432 61440 61440 NT_STATUS_OK
ReadX 13305 847872 4096 4096 NT_STATUS_OK
ReadX 13305 851968 61440 61440 NT_STATUS_OK
ReadX 13305 913408 4096 4096 NT_STATUS_OK
ReadX 13305 917504 61440 61440 NT_STATUS_OK
ReadX 13305 978944 4096 4096 NT_STATUS_OK
ReadX 13305 983040 61440 61440 NT_STATUS_OK
ReadX 13305 1044480 4096 4096 NT_STATUS_OK
ReadX 13305 1048576 61440 61440 NT_STATUS_OK
ReadX 13305 1110016 4096 4096 NT_STATUS_OK
ReadX 13305 1114112 61440 61440 NT_STATUS_OK
ReadX 13305 1175552 4096 4096 NT_STATUS_OK
ReadX 13305 1179648 61440 61440 NT_STATUS_OK
ReadX 13305 1241088 4096 4096 NT_STATUS_OK
ReadX 13305 1245184 61440 61440 NT_STATUS_OK
ReadX 13305 1306624 4096 4096 NT_STATUS_OK
ReadX 13305 1310720 61440 61440 NT_STATUS_OK
ReadX 13305 1372160 4096 4096 NT_STATUS_OK
ReadX 13305 1376256 61440 61440 NT_STATUS_OK
ReadX 13305 1437696 4096 4096 NT_STATUS_OK
ReadX 13305 1441792 61440 61440 NT_STATUS_OK
ReadX 13305 1503232 4096 4096 NT_STATUS_OK
ReadX 13305 1507328 61440 61440 NT_STATUS_OK
ReadX 13305 1568768 4096 4096 NT_STATUS_OK
ReadX 13305 1572864 61440 61440 NT_STATUS_OK
ReadX 13305 1634304 4096 4096 NT_STATUS_OK
ReadX 13305 1638400 61440 61440 NT_STATUS_OK
ReadX 13305 1699840 4096 4096 NT_STATUS_OK
ReadX 13305 1703936 61440 61440 NT_STATUS_OK
ReadX 13305 1765376 4096 4096 NT_STATUS_OK
ReadX 13305 1769472 61440 61440 NT_STATUS_OK
ReadX 13305 1830912 4096 4096 NT_STATUS_OK
ReadX 13305 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13307 NT_STATUS_OK
QUERY_FILE_INFORMATION 13307 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13307 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13307 1005 NT_STATUS_OK
ReadX 13307 2156 24 24 NT_STATUS_OK
ReadX 13307 2139 276 276 NT_STATUS_OK
ReadX 13307 2136 14 14 NT_STATUS_OK
ReadX 13307 2136 7 7 NT_STATUS_OK
ReadX 13307 2138 12 12 NT_STATUS_OK
ReadX 13307 2137 8 8 NT_STATUS_OK
ReadX 13307 2135 15 15 NT_STATUS_OK
ReadX 13307 0 16 16 NT_STATUS_OK
ReadX 13307 16 2048 2048 NT_STATUS_OK
ReadX 13307 2064 2048 2048 NT_STATUS_OK
ReadX 13307 257 2048 2048 NT_STATUS_OK
ReadX 13307 385 2048 2048 NT_STATUS_OK
ReadX 13307 513 2048 2048 NT_STATUS_OK
ReadX 13307 641 2048 2048 NT_STATUS_OK
ReadX 13307 769 2048 2048 NT_STATUS_OK
ReadX 13307 897 2048 2048 NT_STATUS_OK
ReadX 13307 1025 2048 2048 NT_STATUS_OK
ReadX 13307 1153 2048 2048 NT_STATUS_OK
ReadX 13307 1281 2048 2048 NT_STATUS_OK
ReadX 13307 1409 2048 2048 NT_STATUS_OK
ReadX 13307 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13312 NT_STATUS_OK
WriteX 13312 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13312 258 NT_STATUS_OK
WriteX 13312 0 10575 10575 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
Close 13312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13313 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13317 NT_STATUS_OK
LockX 13317 2147483538 1 NT_STATUS_OK
UnlockX 13317 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13317 1005 NT_STATUS_OK
ReadX 13317 0 512 512 NT_STATUS_OK
ReadX 13317 512 512 512 NT_STATUS_OK
ReadX 13317 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13317 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13317 1004 NT_STATUS_OK
Close 13317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13318 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 1005 NT_STATUS_OK
ReadX 13318 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13319 NT_STATUS_OK
LockX 13319 2147483538 1 NT_STATUS_OK
UnlockX 13319 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13319 1005 NT_STATUS_OK
ReadX 13319 0 512 512 NT_STATUS_OK
ReadX 13319 512 512 512 NT_STATUS_OK
ReadX 13319 1024 512 512 NT_STATUS_OK
ReadX 13319 288 20 20 NT_STATUS_OK
ReadX 13319 308 2084 2084 NT_STATUS_OK
ReadX 13319 388 2084 2084 NT_STATUS_OK
ReadX 13319 388 2084 2084 NT_STATUS_OK
ReadX 13306 2157 1386 1386 NT_STATUS_OK
ReadX 13319 2472 399 399 NT_STATUS_OK
ReadX 13319 3072 1536 1536 NT_STATUS_OK
ReadX 13319 544 149 149 NT_STATUS_OK
ReadX 13319 693 485 485 NT_STATUS_OK
Close 13319 NT_STATUS_OK
ReadX 13306 2157 4096 4096 NT_STATUS_OK
ReadX 13306 6253 4096 4096 NT_STATUS_OK
ReadX 13306 10349 4096 4096 NT_STATUS_OK
ReadX 13306 14445 4096 4096 NT_STATUS_OK
ReadX 13306 18541 4096 4096 NT_STATUS_OK
ReadX 13306 22637 256 256 NT_STATUS_OK
ReadX 13306 22893 4096 4096 NT_STATUS_OK
ReadX 13306 26989 4096 4096 NT_STATUS_OK
ReadX 13306 31085 4096 4096 NT_STATUS_OK
ReadX 13306 35181 4096 4096 NT_STATUS_OK
ReadX 13306 39277 4096 4096 NT_STATUS_OK
ReadX 13306 43373 4096 4096 NT_STATUS_OK
ReadX 13306 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13306 2157 1024 1024 NT_STATUS_OK
ReadX 13306 1667 4688 4688 NT_STATUS_OK
ReadX 13306 6355 3516 3516 NT_STATUS_OK
ReadX 13306 9871 16384 16384 NT_STATUS_OK
ReadX 13306 26255 3771 3771 NT_STATUS_OK
ReadX 13306 30026 2048 2048 NT_STATUS_OK
ReadX 13306 32074 1024 1024 NT_STATUS_OK
ReadX 13306 33098 6652 6652 NT_STATUS_OK
ReadX 13306 39750 16384 16384 NT_STATUS_OK
ReadX 13306 56134 10496 10496 NT_STATUS_OK
ReadX 13306 66630 1784 1784 NT_STATUS_OK
ReadX 13306 68414 90 90 NT_STATUS_OK
ReadX 13306 68504 273 273 NT_STATUS_OK
ReadX 13306 68777 1600 1600 NT_STATUS_OK
ReadX 13306 70377 640 640 NT_STATUS_OK
ReadX 13306 71017 1280 1280 NT_STATUS_OK
ReadX 13306 72297 8464 8464 NT_STATUS_OK
ReadX 13306 80761 158 158 NT_STATUS_OK
ReadX 13306 80919 912 912 NT_STATUS_OK
ReadX 13306 81831 1980 1980 NT_STATUS_OK
ReadX 13306 83811 2256 2256 NT_STATUS_OK
ReadX 13306 86067 400 400 NT_STATUS_OK
ReadX 13306 86467 252 252 NT_STATUS_OK
ReadX 13306 86719 42 42 NT_STATUS_OK
ReadX 13306 86761 725 725 NT_STATUS_OK
ReadX 13306 2009 512 512 NT_STATUS_OK
ReadX 13306 3895 9 9 NT_STATUS_OK
ReadX 13306 3781 46 46 NT_STATUS_OK
ReadX 13306 4059 92 92 NT_STATUS_OK
ReadX 13306 3781 92 92 NT_STATUS_OK
ReadX 13306 3986 184 184 NT_STATUS_OK
ReadX 13306 3987 16384 16384 NT_STATUS_OK
ReadX 13306 3902 16384 16384 NT_STATUS_OK
ReadX 13306 3781 10240 10240 NT_STATUS_OK
ReadX 13306 3821 16384 16384 NT_STATUS_OK
ReadX 13306 3891 935 935 NT_STATUS_OK
ReadX 13306 4060 10240 10240 NT_STATUS_OK
ReadX 13306 4059 184 184 NT_STATUS_OK
ReadX 13306 256 184 184 NT_STATUS_OK
ReadX 13306 256 1026 1026 NT_STATUS_OK
ReadX 13306 3901 326 326 NT_STATUS_OK
ReadX 13306 3899 652 652 NT_STATUS_OK
ReadX 13306 256 2 2 NT_STATUS_OK
ReadX 13306 258 4948 4948 NT_STATUS_OK
Close 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13321 NT_STATUS_OK
Close 13321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13324 NT_STATUS_OK
WriteX 13324 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13324 258 NT_STATUS_OK
WriteX 13324 0 65536 65536 NT_STATUS_OK
WriteX 13324 65536 65536 65536 NT_STATUS_OK
WriteX 13324 131072 65536 65536 NT_STATUS_OK
WriteX 13324 196608 65536 65536 NT_STATUS_OK
WriteX 13324 262144 65536 65536 NT_STATUS_OK
WriteX 13324 327680 65536 65536 NT_STATUS_OK
WriteX 13324 393216 65536 65536 NT_STATUS_OK
WriteX 13324 458752 65536 65536 NT_STATUS_OK
WriteX 13324 524288 65536 65536 NT_STATUS_OK
WriteX 13324 589824 35257 35257 NT_STATUS_OK
Close 13324 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13326 NT_STATUS_OK
Close 13326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13329 NT_STATUS_OK
WriteX 13329 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13329 258 NT_STATUS_OK
WriteX 13329 0 65536 65536 NT_STATUS_OK
WriteX 13329 65536 65536 65536 NT_STATUS_OK
WriteX 13329 131072 65536 65536 NT_STATUS_OK
WriteX 13329 196608 65536 65536 NT_STATUS_OK
WriteX 13329 262144 65536 65536 NT_STATUS_OK
WriteX 13329 327680 65536 65536 NT_STATUS_OK
WriteX 13329 393216 65536 65536 NT_STATUS_OK
WriteX 13329 458752 65536 65536 NT_STATUS_OK
WriteX 13329 524288 65536 65536 NT_STATUS_OK
WriteX 13329 589824 57598 57598 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13331 NT_STATUS_OK
WriteX 13331 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13331 258 NT_STATUS_OK
WriteX 13331 0 12543 12543 NT_STATUS_OK
Flush 13331 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13333 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13337 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 1005 NT_STATUS_OK
ReadX 13337 1938 24 24 NT_STATUS_OK
ReadX 13337 1920 276 276 NT_STATUS_OK
ReadX 13337 1918 14 14 NT_STATUS_OK
ReadX 13337 1918 7 7 NT_STATUS_OK
ReadX 13337 1919 12 12 NT_STATUS_OK
ReadX 13337 1919 8 8 NT_STATUS_OK
ReadX 13337 1917 15 15 NT_STATUS_OK
ReadX 13337 0 16 16 NT_STATUS_OK
ReadX 13337 16 2048 2048 NT_STATUS_OK
ReadX 13337 2064 2048 2048 NT_STATUS_OK
ReadX 13337 257 2048 2048 NT_STATUS_OK
ReadX 13337 385 2048 2048 NT_STATUS_OK
ReadX 13337 513 2048 2048 NT_STATUS_OK
ReadX 13337 641 2048 2048 NT_STATUS_OK
ReadX 13337 769 2048 2048 NT_STATUS_OK
ReadX 13337 897 2048 2048 NT_STATUS_OK
ReadX 13337 1025 2048 2048 NT_STATUS_OK
ReadX 13337 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13339 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13342 NT_STATUS_OK
WriteX 13342 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13342 258 NT_STATUS_OK
WriteX 13342 0 11588 11588 NT_STATUS_OK
Flush 13342 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13347 NT_STATUS_OK
WriteX 13347 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13347 258 NT_STATUS_OK
WriteX 13347 0 11615 11615 NT_STATUS_OK
Flush 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13353 NT_STATUS_OK
Close 13353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13356 NT_STATUS_OK
WriteX 13356 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 258 NT_STATUS_OK
WriteX 13356 0 65536 65536 NT_STATUS_OK
WriteX 13356 65536 16050 16050 NT_STATUS_OK
Close 13356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13336 1939 64 64 NT_STATUS_OK
ReadX 13336 128 248 248 NT_STATUS_OK
ReadX 13336 128 568 568 NT_STATUS_OK
ReadX 13336 3872 1536 1536 NT_STATUS_OK
ReadX 13336 3456 2560 2560 NT_STATUS_OK
ReadX 13336 3136 512 512 NT_STATUS_OK
ReadX 13336 2880 4096 4096 NT_STATUS_OK
ReadX 13336 3264 3072 3072 NT_STATUS_OK
ReadX 13336 320 4096 4096 NT_STATUS_OK
ReadX 13336 1024 4096 4096 NT_STATUS_OK
ReadX 13336 3616 4096 4096 NT_STATUS_OK
ReadX 13336 1939 64 64 NT_STATUS_OK
ReadX 13336 128 248 248 NT_STATUS_OK
ReadX 13336 128 608 608 NT_STATUS_OK
ReadX 13336 2858 1024 1024 NT_STATUS_OK
ReadX 13336 2810 4096 4096 NT_STATUS_OK
ReadX 13336 2826 4096 4096 NT_STATUS_OK
ReadX 13336 2580 2048 2048 NT_STATUS_OK
ReadX 13336 2800 2560 2560 NT_STATUS_OK
ReadX 13336 2100 4096 4096 NT_STATUS_OK
ReadX 13336 2084 4096 4096 NT_STATUS_OK
ReadX 13336 868 4096 4096 NT_STATUS_OK
ReadX 13336 2324 4096 4096 NT_STATUS_OK
ReadX 13336 884 4096 4096 NT_STATUS_OK
ReadX 13336 2604 1024 1024 NT_STATUS_OK
ReadX 13336 580 4096 4096 NT_STATUS_OK
ReadX 13336 596 4096 4096 NT_STATUS_OK
ReadX 13336 2752 4096 4096 NT_STATUS_OK
ReadX 13336 2842 1024 1024 NT_STATUS_OK
ReadX 13336 660 4096 4096 NT_STATUS_OK
ReadX 13336 2720 4096 4096 NT_STATUS_OK
ReadX 13336 2736 4096 4096 NT_STATUS_OK
ReadX 13336 628 4096 4096 NT_STATUS_OK
ReadX 13336 2704 4096 4096 NT_STATUS_OK
ReadX 13336 1556 4096 4096 NT_STATUS_OK
ReadX 13336 576 4096 4096 NT_STATUS_OK
ReadX 13336 3168 1536 1536 NT_STATUS_OK
ReadX 13336 832 4096 4096 NT_STATUS_OK
ReadX 13336 1088 4096 4096 NT_STATUS_OK
ReadX 13336 1344 4096 4096 NT_STATUS_OK
ReadX 13336 1600 4096 4096 NT_STATUS_OK
ReadX 13336 1856 4096 4096 NT_STATUS_OK
ReadX 13336 2112 4096 4096 NT_STATUS_OK
ReadX 13336 1892 4096 4096 NT_STATUS_OK
ReadX 13336 820 4096 4096 NT_STATUS_OK
ReadX 13336 788 4096 4096 NT_STATUS_OK
ReadX 13336 1604 4096 4096 NT_STATUS_OK
ReadX 13336 3648 4096 4096 NT_STATUS_OK
ReadX 13336 2608 4096 4096 NT_STATUS_OK
ReadX 13336 548 4096 4096 NT_STATUS_OK
ReadX 13336 740 4096 4096 NT_STATUS_OK
ReadX 13336 1344 4096 4096 NT_STATUS_OK
ReadX 13336 3392 4096 4096 NT_STATUS_OK
ReadX 13336 3904 4096 4096 NT_STATUS_OK
ReadX 13336 644 4096 4096 NT_STATUS_OK
ReadX 13336 676 4096 4096 NT_STATUS_OK
ReadX 13336 2688 4096 4096 NT_STATUS_OK
ReadX 13336 320 4096 4096 NT_STATUS_OK
ReadX 13336 900 4096 4096 NT_STATUS_OK
ReadX 13336 1908 4096 4096 NT_STATUS_OK
ReadX 13336 852 4096 4096 NT_STATUS_OK
ReadX 13336 724 4096 4096 NT_STATUS_OK
ReadX 13336 2292 4096 4096 NT_STATUS_OK
ReadX 13336 612 4096 4096 NT_STATUS_OK
ReadX 13336 388 4096 4096 NT_STATUS_OK
ReadX 13336 2368 4096 4096 NT_STATUS_OK
ReadX 13336 2624 4096 4096 NT_STATUS_OK
ReadX 13336 500 4096 4096 NT_STATUS_OK
ReadX 13336 356 4096 4096 NT_STATUS_OK
ReadX 13336 1024 4096 4096 NT_STATUS_OK
ReadX 13336 576 4096 4096 NT_STATUS_OK
ReadX 13336 340 4096 4096 NT_STATUS_OK
ReadX 13336 420 4096 4096 NT_STATUS_OK
ReadX 13336 1600 4096 4096 NT_STATUS_OK
ReadX 13336 404 4096 4096 NT_STATUS_OK
ReadX 13336 1428 4096 4096 NT_STATUS_OK
ReadX 13336 2656 4096 4096 NT_STATUS_OK
ReadX 13336 2624 4096 4096 NT_STATUS_OK
ReadX 13336 452 4096 4096 NT_STATUS_OK
ReadX 13336 692 4096 4096 NT_STATUS_OK
ReadX 13336 564 4096 4096 NT_STATUS_OK
ReadX 13336 372 4096 4096 NT_STATUS_OK
ReadX 13336 468 4096 4096 NT_STATUS_OK
ReadX 13336 484 4096 4096 NT_STATUS_OK
ReadX 13336 1088 4096 4096 NT_STATUS_OK
ReadX 13336 1924 4096 4096 NT_STATUS_OK
ReadX 13336 2768 4096 4096 NT_STATUS_OK
ReadX 13336 832 4096 4096 NT_STATUS_OK
ReadX 13336 836 4096 4096 NT_STATUS_OK
ReadX 13336 1856 4096 4096 NT_STATUS_OK
ReadX 13336 2640 4096 4096 NT_STATUS_OK
ReadX 13336 436 4096 4096 NT_STATUS_OK
ReadX 13336 1828 4096 4096 NT_STATUS_OK
ReadX 13336 804 4096 4096 NT_STATUS_OK
ReadX 13336 1860 4096 4096 NT_STATUS_OK
ReadX 13336 1812 4096 4096 NT_STATUS_OK
ReadX 13336 756 4096 4096 NT_STATUS_OK
ReadX 13336 1636 4096 4096 NT_STATUS_OK
ReadX 13336 772 4096 4096 NT_STATUS_OK
ReadX 13336 2036 4096 4096 NT_STATUS_OK
ReadX 13336 1220 4096 4096 NT_STATUS_OK
ReadX 13336 1652 4096 4096 NT_STATUS_OK
ReadX 13336 2588 4096 4096 NT_STATUS_OK
ReadX 13336 916 4096 4096 NT_STATUS_OK
ReadX 13336 260 4096 4096 NT_STATUS_OK
ReadX 13336 932 4096 4096 NT_STATUS_OK
ReadX 13336 2624 4096 4096 NT_STATUS_OK
ReadX 13336 308 4096 4096 NT_STATUS_OK
ReadX 13336 292 4096 4096 NT_STATUS_OK
ReadX 13336 1140 4096 4096 NT_STATUS_OK
ReadX 13336 276 4096 4096 NT_STATUS_OK
ReadX 13336 2020 4096 4096 NT_STATUS_OK
ReadX 13336 2880 4096 4096 NT_STATUS_OK
ReadX 13336 516 4096 4096 NT_STATUS_OK
ReadX 13336 1844 4096 4096 NT_STATUS_OK
ReadX 13336 1124 4096 4096 NT_STATUS_OK
ReadX 13336 3136 4096 4096 NT_STATUS_OK
ReadX 13336 324 4096 4096 NT_STATUS_OK
ReadX 13336 1156 4096 4096 NT_STATUS_OK
ReadX 13336 1172 4096 4096 NT_STATUS_OK
ReadX 13336 2112 4096 4096 NT_STATUS_OK
ReadX 13336 2368 4096 4096 NT_STATUS_OK
ReadX 13336 964 4096 4096 NT_STATUS_OK
ReadX 13336 980 4096 4096 NT_STATUS_OK
ReadX 13336 1012 4096 4096 NT_STATUS_OK
ReadX 13336 532 4096 4096 NT_STATUS_OK
ReadX 13336 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13336 1620 4096 4096 NT_STATUS_OK
ReadX 13336 1604 4096 4096 NT_STATUS_OK
ReadX 13336 2116 4096 4096 NT_STATUS_OK
ReadX 13336 2132 4096 4096 NT_STATUS_OK
ReadX 13336 2148 4096 4096 NT_STATUS_OK
ReadX 13336 2276 4096 4096 NT_STATUS_OK
ReadX 13336 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13361 NT_STATUS_OK
QUERY_FILE_INFORMATION 13316 1004 NT_STATUS_OK
Close 13316 NT_STATUS_OK
WriteX 13361 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13361 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 1004 NT_STATUS_OK
Close 13318 NT_STATUS_OK
WriteX 13361 0 65536 65536 NT_STATUS_OK
WriteX 13361 65536 64850 64850 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13363 NT_STATUS_OK
WriteX 13363 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13363 258 NT_STATUS_OK
ReadX 13336 2068 4096 4096 NT_STATUS_OK
ReadX 13336 1588 4096 4096 NT_STATUS_OK
ReadX 13336 1572 4096 4096 NT_STATUS_OK
WriteX 13363 0 18630 18630 NT_STATUS_OK
Flush 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13336 612 4096 4096 NT_STATUS_OK
ReadX 13336 564 4096 4096 NT_STATUS_OK
ReadX 13336 1876 4096 4096 NT_STATUS_OK
ReadX 13336 628 4096 4096 NT_STATUS_OK
ReadX 13336 740 4096 4096 NT_STATUS_OK
ReadX 13336 724 4096 4096 NT_STATUS_OK
ReadX 13336 644 4096 4096 NT_STATUS_OK
ReadX 13336 2324 4096 4096 NT_STATUS_OK
ReadX 13336 660 4096 4096 NT_STATUS_OK
ReadX 13336 852 4096 4096 NT_STATUS_OK
ReadX 13336 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13336 2368 4096 4096 NT_STATUS_OK
ReadX 13336 1024 4096 4096 NT_STATUS_OK
ReadX 13336 320 4096 4096 NT_STATUS_OK
ReadX 13336 580 4096 4096 NT_STATUS_OK
ReadX 13336 3136 512 512 NT_STATUS_OK
ReadX 13336 2880 4096 4096 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13368 NT_STATUS_OK
ReadX 13368 61440 4096 4096 NT_STATUS_OK
ReadX 13368 126976 4096 4096 NT_STATUS_OK
WriteX 13368 0 65536 65536 NT_STATUS_OK
WriteX 13368 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 61440 4096 4096 NT_STATUS_OK
ReadX 13369 126976 4096 4096 NT_STATUS_OK
ReadX 13369 192512 4096 4096 NT_STATUS_OK
ReadX 13369 258048 4096 4096 NT_STATUS_OK
WriteX 13369 0 65536 65536 NT_STATUS_OK
WriteX 13369 65536 65536 65536 NT_STATUS_OK
WriteX 13369 131072 65536 65536 NT_STATUS_OK
WriteX 13369 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13370 NT_STATUS_OK
ReadX 13370 61440 4096 4096 NT_STATUS_OK
ReadX 13370 126976 4096 4096 NT_STATUS_OK
ReadX 13370 192512 4096 4096 NT_STATUS_OK
ReadX 13370 258048 4096 4096 NT_STATUS_OK
ReadX 13370 323584 4096 4096 NT_STATUS_OK
ReadX 13370 389120 4096 4096 NT_STATUS_OK
ReadX 13370 454656 4096 4096 NT_STATUS_OK
ReadX 13370 520192 4096 4096 NT_STATUS_OK
WriteX 13370 0 65536 65536 NT_STATUS_OK
WriteX 13370 65536 65536 65536 NT_STATUS_OK
WriteX 13370 131072 65536 65536 NT_STATUS_OK
WriteX 13370 196608 65536 65536 NT_STATUS_OK
WriteX 13370 262144 65536 65536 NT_STATUS_OK
WriteX 13370 327680 65536 65536 NT_STATUS_OK
WriteX 13370 393216 65536 65536 NT_STATUS_OK
WriteX 13370 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13373 NT_STATUS_OK
WriteX 13373 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13373 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13371 0 8192 8192 NT_STATUS_OK
Flush 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13371 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13371 0 8192 8192 NT_STATUS_OK
Flush 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13371 0 8192 8192 NT_STATUS_OK
Flush 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13371 0 8192 8192 NT_STATUS_OK
Flush 13371 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13375 NT_STATUS_OK
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13368 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Close 13370 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13378 NT_STATUS_OK
WriteX 13378 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 258 NT_STATUS_OK
WriteX 13378 0 62591 62591 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13380 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13383 NT_STATUS_OK
WriteX 13383 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13383 258 NT_STATUS_OK
WriteX 13383 0 10845 10845 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13385 NT_STATUS_OK
Close 13385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13388 NT_STATUS_OK
WriteX 13388 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13388 258 NT_STATUS_OK
WriteX 13388 0 30118 30118 NT_STATUS_OK
Close 13388 NT_STATUS_OK
WriteX 13371 0 4096 4096 NT_STATUS_OK
WriteX 13373 0 64 64 NT_STATUS_OK
Close 13373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 61440 61440 NT_STATUS_OK
ReadX 13390 61440 4096 4096 NT_STATUS_OK
ReadX 13390 65536 61440 61440 NT_STATUS_OK
ReadX 13390 126976 4096 4096 NT_STATUS_OK
ReadX 13390 131072 61440 61440 NT_STATUS_OK
ReadX 13390 192512 4096 4096 NT_STATUS_OK
ReadX 13390 196608 61440 61440 NT_STATUS_OK
ReadX 13390 258048 4096 4096 NT_STATUS_OK
ReadX 13390 262144 61440 61440 NT_STATUS_OK
ReadX 13390 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 61440 61440 NT_STATUS_OK
ReadX 13391 61440 4096 4096 NT_STATUS_OK
ReadX 13391 65536 61440 61440 NT_STATUS_OK
ReadX 13391 126976 4096 4096 NT_STATUS_OK
ReadX 13391 131072 61440 61440 NT_STATUS_OK
ReadX 13391 192512 4096 4096 NT_STATUS_OK
ReadX 13391 196608 61440 61440 NT_STATUS_OK
ReadX 13391 258048 4096 4096 NT_STATUS_OK
ReadX 13391 262144 61440 61440 NT_STATUS_OK
ReadX 13391 323584 4096 4096 NT_STATUS_OK
ReadX 13391 327680 61440 61440 NT_STATUS_OK
ReadX 13391 389120 4096 4096 NT_STATUS_OK
ReadX 13391 393216 61440 61440 NT_STATUS_OK
ReadX 13391 454656 4096 4096 NT_STATUS_OK
ReadX 13391 458752 61440 61440 NT_STATUS_OK
ReadX 13391 520192 4096 4096 NT_STATUS_OK
ReadX 13391 524288 61440 61440 NT_STATUS_OK
ReadX 13391 585728 4096 4096 NT_STATUS_OK
ReadX 13391 589824 61440 61440 NT_STATUS_OK
ReadX 13391 651264 4096 4096 NT_STATUS_OK
ReadX 13391 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 61440 61440 NT_STATUS_OK
ReadX 13392 61440 4096 4096 NT_STATUS_OK
ReadX 13392 65536 61440 61440 NT_STATUS_OK
ReadX 13392 126976 4096 4096 NT_STATUS_OK
ReadX 13392 131072 61440 61440 NT_STATUS_OK
ReadX 13392 192512 4096 4096 NT_STATUS_OK
ReadX 13392 196608 61440 61440 NT_STATUS_OK
ReadX 13392 258048 4096 4096 NT_STATUS_OK
ReadX 13392 262144 61440 61440 NT_STATUS_OK
ReadX 13392 323584 4096 4096 NT_STATUS_OK
ReadX 13392 327680 61440 61440 NT_STATUS_OK
ReadX 13392 389120 4096 4096 NT_STATUS_OK
ReadX 13392 393216 61440 61440 NT_STATUS_OK
ReadX 13392 454656 4096 4096 NT_STATUS_OK
ReadX 13392 458752 61440 61440 NT_STATUS_OK
ReadX 13392 520192 4096 4096 NT_STATUS_OK
ReadX 13392 524288 61440 61440 NT_STATUS_OK
ReadX 13392 585728 4096 4096 NT_STATUS_OK
ReadX 13392 589824 61440 61440 NT_STATUS_OK
ReadX 13392 651264 4096 4096 NT_STATUS_OK
ReadX 13392 655360 61440 61440 NT_STATUS_OK
ReadX 13392 716800 4096 4096 NT_STATUS_OK
ReadX 13392 720896 61440 61440 NT_STATUS_OK
ReadX 13392 782336 4096 4096 NT_STATUS_OK
ReadX 13392 786432 61440 61440 NT_STATUS_OK
ReadX 13392 847872 4096 4096 NT_STATUS_OK
ReadX 13392 851968 61440 61440 NT_STATUS_OK
ReadX 13392 913408 4096 4096 NT_STATUS_OK
ReadX 13392 917504 61440 61440 NT_STATUS_OK
ReadX 13392 978944 4096 4096 NT_STATUS_OK
ReadX 13392 983040 61440 61440 NT_STATUS_OK
ReadX 13392 1044480 4096 4096 NT_STATUS_OK
ReadX 13392 1048576 61440 61440 NT_STATUS_OK
ReadX 13392 1110016 4096 4096 NT_STATUS_OK
ReadX 13392 1114112 61440 61440 NT_STATUS_OK
ReadX 13392 1175552 4096 4096 NT_STATUS_OK
ReadX 13392 1179648 61440 61440 NT_STATUS_OK
ReadX 13392 1241088 4096 4096 NT_STATUS_OK
ReadX 13392 1245184 61440 61440 NT_STATUS_OK
ReadX 13392 1306624 4096 4096 NT_STATUS_OK
ReadX 13392 1310720 61440 61440 NT_STATUS_OK
ReadX 13392 1372160 4096 4096 NT_STATUS_OK
ReadX 13392 1376256 61440 61440 NT_STATUS_OK
ReadX 13392 1437696 4096 4096 NT_STATUS_OK
ReadX 13392 1441792 61440 61440 NT_STATUS_OK
ReadX 13392 1503232 4096 4096 NT_STATUS_OK
ReadX 13392 1507328 61440 61440 NT_STATUS_OK
ReadX 13392 1568768 4096 4096 NT_STATUS_OK
ReadX 13392 1572864 61440 61440 NT_STATUS_OK
ReadX 13392 1634304 4096 4096 NT_STATUS_OK
ReadX 13392 1638400 61440 61440 NT_STATUS_OK
ReadX 13392 1699840 4096 4096 NT_STATUS_OK
ReadX 13392 1703936 61440 61440 NT_STATUS_OK
ReadX 13392 1765376 4096 4096 NT_STATUS_OK
ReadX 13392 1769472 61440 61440 NT_STATUS_OK
ReadX 13392 1830912 4096 4096 NT_STATUS_OK
ReadX 13392 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13393 NT_STATUS_OK
Close 13393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13395 NT_STATUS_OK
ReadX 13395 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 4096 4096 NT_STATUS_OK
ReadX 13397 4096 4096 4096 NT_STATUS_OK
ReadX 13397 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13398 NT_STATUS_OK
Close 13398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13395 NT_STATUS_OK
Close 13396 NT_STATUS_OK
Close 13397 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13401 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13402 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13404 NT_STATUS_OK
ReadX 13404 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 8192 8192 NT_STATUS_OK
ReadX 13405 8192 8192 8192 NT_STATUS_OK
ReadX 13405 16384 8192 8192 NT_STATUS_OK
ReadX 13405 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13407 NT_STATUS_OK
Close 13407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Close 13404 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13410 NT_STATUS_OK
WriteX 13410 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13410 258 NT_STATUS_OK
WriteX 13410 0 10438 10438 NT_STATUS_OK
Close 13410 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13411 NT_STATUS_OK
Close 13411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13412 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13413 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13414 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13415 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13416 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
ReadX 13419 4096 4096 4096 NT_STATUS_OK
ReadX 13419 8192 4096 4096 NT_STATUS_OK
ReadX 13419 12288 8192 8192 NT_STATUS_OK
ReadX 13419 20480 8192 8192 NT_STATUS_OK
ReadX 13419 28672 8192 8192 NT_STATUS_OK
ReadX 13419 36864 8192 8192 NT_STATUS_OK
ReadX 13419 45056 8192 8192 NT_STATUS_OK
ReadX 13419 53248 8192 8192 NT_STATUS_OK
ReadX 13419 61440 8192 8192 NT_STATUS_OK
ReadX 13419 69632 8192 8192 NT_STATUS_OK
ReadX 13419 77824 8192 8192 NT_STATUS_OK
ReadX 13419 86016 8192 8192 NT_STATUS_OK
ReadX 13419 94208 8192 8192 NT_STATUS_OK
ReadX 13419 102400 8192 8192 NT_STATUS_OK
ReadX 13419 110592 8192 8192 NT_STATUS_OK
ReadX 13419 118784 8192 8192 NT_STATUS_OK
ReadX 13419 126976 8192 8192 NT_STATUS_OK
ReadX 13419 135168 8192 8192 NT_STATUS_OK
ReadX 13419 143360 8192 8192 NT_STATUS_OK
ReadX 13419 151552 8192 8192 NT_STATUS_OK
ReadX 13419 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Close 13416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13424 NT_STATUS_OK
WriteX 13424 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13424 258 NT_STATUS_OK
WriteX 13424 0 28489 28489 NT_STATUS_OK
Close 13424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13425 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13427 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13427 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13428 NT_STATUS_OK
Close 13428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 0 8192 8192 NT_STATUS_OK
ReadX 13431 8192 8192 8192 NT_STATUS_OK
ReadX 13431 16384 8192 8192 NT_STATUS_OK
ReadX 13431 24576 8192 8192 NT_STATUS_OK
ReadX 13431 32768 16384 16384 NT_STATUS_OK
ReadX 13431 49152 8192 8192 NT_STATUS_OK
ReadX 13431 57344 8192 8192 NT_STATUS_OK
ReadX 13431 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13436 NT_STATUS_OK
WriteX 13436 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13436 258 NT_STATUS_OK
WriteX 13436 0 29253 29253 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13443 NT_STATUS_OK
WriteX 13443 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13443 258 NT_STATUS_OK
WriteX 13443 0 30183 30183 NT_STATUS_OK
Close 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13446 NT_STATUS_OK
WriteX 13446 0 510 510 NT_STATUS_OK
WriteX 13446 510 512 512 NT_STATUS_OK
WriteX 13446 1022 510 510 NT_STATUS_OK
WriteX 13446 1532 510 510 NT_STATUS_OK
WriteX 13446 2042 168 168 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13447 NT_STATUS_OK
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 0 4096 4096 NT_STATUS_OK
WriteX 13449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 61440 4096 4096 NT_STATUS_OK
ReadX 13450 126976 4096 4096 NT_STATUS_OK
WriteX 13450 0 65536 65536 NT_STATUS_OK
WriteX 13450 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 61440 4096 4096 NT_STATUS_OK
ReadX 13451 126976 4096 4096 NT_STATUS_OK
ReadX 13451 192512 4096 4096 NT_STATUS_OK
ReadX 13451 258048 4096 4096 NT_STATUS_OK
WriteX 13451 0 65536 65536 NT_STATUS_OK
WriteX 13451 65536 65536 65536 NT_STATUS_OK
WriteX 13451 131072 65536 65536 NT_STATUS_OK
WriteX 13451 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 61440 4096 4096 NT_STATUS_OK
ReadX 13452 126976 4096 4096 NT_STATUS_OK
ReadX 13452 192512 4096 4096 NT_STATUS_OK
ReadX 13452 258048 4096 4096 NT_STATUS_OK
ReadX 13452 323584 4096 4096 NT_STATUS_OK
ReadX 13452 389120 4096 4096 NT_STATUS_OK
ReadX 13452 454656 4096 4096 NT_STATUS_OK
ReadX 13452 520192 4096 4096 NT_STATUS_OK
WriteX 13452 0 65536 65536 NT_STATUS_OK
WriteX 13452 65536 65536 65536 NT_STATUS_OK
WriteX 13452 131072 65536 65536 NT_STATUS_OK
WriteX 13452 196608 65536 65536 NT_STATUS_OK
WriteX 13452 262144 65536 65536 NT_STATUS_OK
WriteX 13452 327680 65536 65536 NT_STATUS_OK
WriteX 13452 393216 65536 65536 NT_STATUS_OK
WriteX 13452 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13453 NT_STATUS_OK
Close 13453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13455 NT_STATUS_OK
Close 13455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13462 NT_STATUS_OK
Close 13462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13464 NT_STATUS_OK
Close 13464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13471 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13473 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13487 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13502 NT_STATUS_OK
Close 13502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13507 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13518 NT_STATUS_OK
Close 13518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13521 NT_STATUS_OK
WriteX 13521 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13521 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13521 0 65536 65536 NT_STATUS_OK
WriteX 13521 65536 65536 65536 NT_STATUS_OK
WriteX 13521 131072 65536 65536 NT_STATUS_OK
WriteX 13521 196608 65536 65536 NT_STATUS_OK
WriteX 13521 262144 26634 26634 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13526 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13527 NT_STATUS_OK
Close 13527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
Close 13528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13529 NT_STATUS_OK
ReadX 13529 0 4096 4096 NT_STATUS_OK
ReadX 13529 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13529 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13534 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13537 NT_STATUS_OK
Close 13537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13539 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13548 NT_STATUS_OK
Close 13548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13557 NT_STATUS_OK
Close 13557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13567 NT_STATUS_OK
Close 13567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13572 NT_STATUS_OK
Close 13572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13581 NT_STATUS_OK
Close 13581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13586 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13591 NT_STATUS_OK
Close 13591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13596 NT_STATUS_OK
Close 13596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 4096 4096 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13609 NT_STATUS_OK
ReadX 13609 0 4096 4096 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13620 NT_STATUS_OK
Close 13620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
Close 13622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 4096 4096 NT_STATUS_OK
Close 13623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13653 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13653 0 4096 4096 NT_STATUS_OK
Close 13653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
ReadX 13655 4096 4096 4096 NT_STATUS_OK
ReadX 13655 8192 4096 4096 NT_STATUS_OK
ReadX 13655 12288 4096 4096 NT_STATUS_OK
ReadX 13655 16384 4096 4096 NT_STATUS_OK
ReadX 13655 20480 4096 4096 NT_STATUS_OK
ReadX 13655 24576 4096 4096 NT_STATUS_OK
ReadX 13655 28672 4096 4096 NT_STATUS_OK
ReadX 13655 32768 4096 4096 NT_STATUS_OK
ReadX 13655 36864 4096 4096 NT_STATUS_OK
ReadX 13655 40960 4096 4096 NT_STATUS_OK
ReadX 13655 45056 4096 4096 NT_STATUS_OK
ReadX 13655 49152 4096 4096 NT_STATUS_OK
ReadX 13655 53248 4096 4096 NT_STATUS_OK
ReadX 13655 57344 4096 4096 NT_STATUS_OK
ReadX 13655 61440 4096 4096 NT_STATUS_OK
ReadX 13655 65536 4096 4096 NT_STATUS_OK
ReadX 13655 69632 4096 4096 NT_STATUS_OK
ReadX 13655 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13655 1004 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Close 13655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13656 NT_STATUS_OK
SET_FILE_INFORMATION 13656 1004 NT_STATUS_OK
Close 13656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13661 NT_STATUS_OK
WriteX 13661 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13661 258 NT_STATUS_OK
WriteX 13661 0 65536 65536 NT_STATUS_OK
WriteX 13661 65536 19979 19979 NT_STATUS_OK
Close 13661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13662 NT_STATUS_OK
ReadX 13662 0 4096 4096 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
QUERY_FILE_INFORMATION 13662 1004 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
SET_FILE_INFORMATION 13662 1004 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 4096 4096 NT_STATUS_OK
Close 13663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 4096 4096 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 4096 4096 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13667 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13670 NT_STATUS_OK
Close 13670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13673 NT_STATUS_OK
WriteX 13673 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 65536 65536 NT_STATUS_OK
WriteX 13673 65536 17654 17654 NT_STATUS_OK
Close 13673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
QUERY_FILE_INFORMATION 13674 1004 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13675 NT_STATUS_OK
SET_FILE_INFORMATION 13675 1004 NT_STATUS_OK
Close 13675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13677 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 0 4096 4096 NT_STATUS_OK
ReadX 13679 4096 4096 4096 NT_STATUS_OK
ReadX 13679 8192 4096 4096 NT_STATUS_OK
ReadX 13679 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13679 16384 4096 4096 NT_STATUS_OK
ReadX 13679 20480 4096 4096 NT_STATUS_OK
ReadX 13679 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
Close 13680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 4096 4096 NT_STATUS_OK
Close 13681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13682 1004 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13685 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13688 NT_STATUS_OK
WriteX 13688 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13688 258 NT_STATUS_OK
WriteX 13688 0 65536 65536 NT_STATUS_OK
WriteX 13688 65536 19490 19490 NT_STATUS_OK
Close 13688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13689 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Flush 13689 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Flush 13689 NT_STATUS_OK
QUERY_FILE_INFORMATION 13689 1004 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Flush 13689 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Flush 13689 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Flush 13689 NT_STATUS_OK
SET_FILE_INFORMATION 13689 1004 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Flush 13689 NT_STATUS_OK
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13690 NT_STATUS_OK
SET_FILE_INFORMATION 13690 1004 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13694 0 4096 4096 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
ReadX 13696 4096 4096 4096 NT_STATUS_OK
ReadX 13696 8192 4096 4096 NT_STATUS_OK
ReadX 13696 12288 4096 4096 NT_STATUS_OK
ReadX 13696 16384 4096 4096 NT_STATUS_OK
ReadX 13696 20480 4096 4096 NT_STATUS_OK
ReadX 13696 24576 4096 4096 NT_STATUS_OK
ReadX 13696 28672 4096 4096 NT_STATUS_OK
ReadX 13696 32768 4096 4096 NT_STATUS_OK
ReadX 13696 36864 4096 4096 NT_STATUS_OK
ReadX 13696 40960 4096 4096 NT_STATUS_OK
ReadX 13696 45056 4096 4096 NT_STATUS_OK
ReadX 13696 49152 4096 4096 NT_STATUS_OK
ReadX 13696 53248 4096 4096 NT_STATUS_OK
ReadX 13696 57344 4096 4096 NT_STATUS_OK
ReadX 13696 61440 4096 4096 NT_STATUS_OK
ReadX 13696 65536 4096 4096 NT_STATUS_OK
ReadX 13696 69632 4096 4096 NT_STATUS_OK
ReadX 13696 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13696 1004 NT_STATUS_OK
WriteX 13696 0 4096 4096 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13697 NT_STATUS_OK
SET_FILE_INFORMATION 13697 1004 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13699 NT_STATUS_OK
Close 13699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13702 NT_STATUS_OK
WriteX 13702 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13702 258 NT_STATUS_OK
Close 13698 NT_STATUS_OK
WriteX 13702 0 65536 65536 NT_STATUS_OK
WriteX 13702 65536 8866 8866 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
WriteX 13703 0 4096 4096 NT_STATUS_OK
Flush 13703 NT_STATUS_OK
SET_FILE_INFORMATION 13703 1004 NT_STATUS_OK
WriteX 13703 0 4096 4096 NT_STATUS_OK
Flush 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13707 1004 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13707 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13713 NT_STATUS_OK
WriteX 13713 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13713 258 NT_STATUS_OK
WriteX 13713 0 65536 65536 NT_STATUS_OK
WriteX 13713 65536 9298 9298 NT_STATUS_OK
Close 13713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
WriteX 13714 0 4096 4096 NT_STATUS_OK
Flush 13714 NT_STATUS_OK
SET_FILE_INFORMATION 13714 1004 NT_STATUS_OK
WriteX 13714 0 4096 4096 NT_STATUS_OK
Flush 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13715 NT_STATUS_OK
SET_FILE_INFORMATION 13715 1004 NT_STATUS_OK
Close 13715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13717 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13720 0 4096 4096 NT_STATUS_OK
Close 13720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13721 4096 4096 4096 NT_STATUS_OK
ReadX 13721 8192 4096 4096 NT_STATUS_OK
ReadX 13721 12288 4096 4096 NT_STATUS_OK
ReadX 13721 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13722 NT_STATUS_OK
ReadX 13722 0 4096 4096 NT_STATUS_OK
Close 13722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
Close 13723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13724 1004 NT_STATUS_OK
WriteX 13724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13725 NT_STATUS_OK
Close 13725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13724 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13727 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13730 NT_STATUS_OK
WriteX 13730 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13730 258 NT_STATUS_OK
WriteX 13730 0 65536 65536 NT_STATUS_OK
WriteX 13730 65536 11540 11540 NT_STATUS_OK
Close 13730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
WriteX 13731 0 4096 4096 NT_STATUS_OK
Flush 13731 NT_STATUS_OK
SET_FILE_INFORMATION 13731 1004 NT_STATUS_OK
WriteX 13731 0 4096 4096 NT_STATUS_OK
Flush 13731 NT_STATUS_OK
Close 13731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13732 NT_STATUS_OK
SET_FILE_INFORMATION 13732 1004 NT_STATUS_OK
Close 13732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 61440 4096 4096 NT_STATUS_OK
ReadX 13736 126976 4096 4096 NT_STATUS_OK
WriteX 13736 0 65536 65536 NT_STATUS_OK
WriteX 13736 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13737 NT_STATUS_OK
ReadX 13737 61440 4096 4096 NT_STATUS_OK
ReadX 13737 126976 4096 4096 NT_STATUS_OK
ReadX 13737 192512 4096 4096 NT_STATUS_OK
ReadX 13737 258048 4096 4096 NT_STATUS_OK
WriteX 13737 0 65536 65536 NT_STATUS_OK
WriteX 13737 65536 65536 65536 NT_STATUS_OK
WriteX 13737 131072 65536 65536 NT_STATUS_OK
WriteX 13737 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13738 NT_STATUS_OK
ReadX 13738 61440 4096 4096 NT_STATUS_OK
ReadX 13738 126976 4096 4096 NT_STATUS_OK
ReadX 13738 192512 4096 4096 NT_STATUS_OK
ReadX 13738 258048 4096 4096 NT_STATUS_OK
ReadX 13738 323584 4096 4096 NT_STATUS_OK
ReadX 13738 389120 4096 4096 NT_STATUS_OK
ReadX 13738 454656 4096 4096 NT_STATUS_OK
ReadX 13738 520192 4096 4096 NT_STATUS_OK
WriteX 13738 0 65536 65536 NT_STATUS_OK
WriteX 13738 65536 65536 65536 NT_STATUS_OK
WriteX 13738 131072 65536 65536 NT_STATUS_OK
WriteX 13738 196608 65536 65536 NT_STATUS_OK
WriteX 13738 262144 65536 65536 NT_STATUS_OK
WriteX 13738 327680 65536 65536 NT_STATUS_OK
WriteX 13738 393216 65536 65536 NT_STATUS_OK
WriteX 13738 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13739 NT_STATUS_OK
ReadX 13739 0 4096 4096 NT_STATUS_OK
ReadX 13739 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13740 NT_STATUS_OK
WriteX 13740 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13740 258 NT_STATUS_OK
WriteX 13740 0 53 53 NT_STATUS_OK
Close 13740 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Close 13737 NT_STATUS_OK
Close 13738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13739 8192 4096 4096 NT_STATUS_OK
ReadX 13739 12288 4096 4096 NT_STATUS_OK
WriteX 13743 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13743 258 NT_STATUS_OK
ReadX 13739 16384 4096 4096 NT_STATUS_OK
ReadX 13739 20480 4096 4096 NT_STATUS_OK
WriteX 13743 0 15360 15360 NT_STATUS_OK
Close 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
WriteX 13744 0 4096 4096 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13745 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13747 NT_STATUS_OK
ReadX 13747 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13748 NT_STATUS_OK
Close 13748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13747 4096 4096 4096 NT_STATUS_OK
ReadX 13747 8192 4096 4096 NT_STATUS_OK
ReadX 13747 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
ReadX 13750 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
ReadX 13751 4096 4096 4096 NT_STATUS_OK
ReadX 13751 8192 4096 4096 NT_STATUS_OK
Close 13750 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13752 NT_STATUS_OK
WriteX 13752 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 258 NT_STATUS_OK
WriteX 13752 0 15360 15360 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13757 NT_STATUS_OK
SET_FILE_INFORMATION 13757 1004 NT_STATUS_OK
Close 13757 NT_STATUS_OK
WriteX 13753 0 4096 4096 NT_STATUS_OK
Close 13753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
ReadX 13760 4096 4096 4096 NT_STATUS_OK
ReadX 13760 8192 4096 4096 NT_STATUS_OK
ReadX 13760 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13760 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13760 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13762 NT_STATUS_OK
WriteX 13762 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 258 NT_STATUS_OK
WriteX 13762 0 53 53 NT_STATUS_OK
Close 13762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13761 4096 4096 4096 NT_STATUS_OK
ReadX 13761 8192 4096 4096 NT_STATUS_OK
ReadX 13761 12288 4096 4096 NT_STATUS_OK
WriteX 13765 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 258 NT_STATUS_OK
WriteX 13765 0 12006 12006 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13766 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13766 1004 NT_STATUS_OK
WriteX 13766 0 4096 4096 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13770 NT_STATUS_OK
Close 13770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13769 4096 4096 4096 NT_STATUS_OK
ReadX 13769 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13772 NT_STATUS_OK
WriteX 13772 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13772 258 NT_STATUS_OK
WriteX 13772 0 11991 11991 NT_STATUS_OK
Close 13772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13773 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13773 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
Close 13777 NT_STATUS_OK
WriteX 13773 0 4096 4096 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13778 NT_STATUS_OK
Close 13778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13781 NT_STATUS_OK
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13780 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13780 1004 NT_STATUS_OK
ReadX 13780 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13780 1004 NT_STATUS_OK
WriteX 13780 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13780 1004 NT_STATUS_OK
Close 13756 NT_STATUS_OK
WriteX 13760 0 19054 19054 NT_STATUS_OK
WriteX 13780 0 12288 12288 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13785 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 0 61440 61440 NT_STATUS_OK
ReadX 13787 61440 4096 4096 NT_STATUS_OK
ReadX 13787 65536 61440 61440 NT_STATUS_OK
ReadX 13787 126976 4096 4096 NT_STATUS_OK
ReadX 13787 131072 61440 61440 NT_STATUS_OK
ReadX 13787 192512 4096 4096 NT_STATUS_OK
ReadX 13787 196608 61440 61440 NT_STATUS_OK
ReadX 13787 258048 4096 4096 NT_STATUS_OK
ReadX 13787 262144 61440 61440 NT_STATUS_OK
ReadX 13787 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 61440 61440 NT_STATUS_OK
ReadX 13788 61440 4096 4096 NT_STATUS_OK
ReadX 13788 65536 61440 61440 NT_STATUS_OK
ReadX 13788 126976 4096 4096 NT_STATUS_OK
ReadX 13788 131072 61440 61440 NT_STATUS_OK
ReadX 13788 192512 4096 4096 NT_STATUS_OK
ReadX 13788 196608 61440 61440 NT_STATUS_OK
ReadX 13788 258048 4096 4096 NT_STATUS_OK
ReadX 13788 262144 61440 61440 NT_STATUS_OK
ReadX 13788 323584 4096 4096 NT_STATUS_OK
ReadX 13788 327680 61440 61440 NT_STATUS_OK
ReadX 13788 389120 4096 4096 NT_STATUS_OK
ReadX 13788 393216 61440 61440 NT_STATUS_OK
ReadX 13788 454656 4096 4096 NT_STATUS_OK
ReadX 13788 458752 61440 61440 NT_STATUS_OK
ReadX 13788 520192 4096 4096 NT_STATUS_OK
ReadX 13788 524288 61440 61440 NT_STATUS_OK
ReadX 13788 585728 4096 4096 NT_STATUS_OK
ReadX 13788 589824 61440 61440 NT_STATUS_OK
ReadX 13788 651264 4096 4096 NT_STATUS_OK
ReadX 13788 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 61440 61440 NT_STATUS_OK
ReadX 13789 61440 4096 4096 NT_STATUS_OK
ReadX 13789 65536 61440 61440 NT_STATUS_OK
ReadX 13789 126976 4096 4096 NT_STATUS_OK
ReadX 13789 131072 61440 61440 NT_STATUS_OK
ReadX 13789 192512 4096 4096 NT_STATUS_OK
ReadX 13789 196608 61440 61440 NT_STATUS_OK
ReadX 13789 258048 4096 4096 NT_STATUS_OK
ReadX 13789 262144 61440 61440 NT_STATUS_OK
ReadX 13789 323584 4096 4096 NT_STATUS_OK
ReadX 13789 327680 61440 61440 NT_STATUS_OK
ReadX 13789 389120 4096 4096 NT_STATUS_OK
ReadX 13789 393216 61440 61440 NT_STATUS_OK
ReadX 13789 454656 4096 4096 NT_STATUS_OK
ReadX 13789 458752 61440 61440 NT_STATUS_OK
ReadX 13789 520192 4096 4096 NT_STATUS_OK
ReadX 13789 524288 61440 61440 NT_STATUS_OK
ReadX 13789 585728 4096 4096 NT_STATUS_OK
ReadX 13789 589824 61440 61440 NT_STATUS_OK
ReadX 13789 651264 4096 4096 NT_STATUS_OK
ReadX 13789 655360 61440 61440 NT_STATUS_OK
ReadX 13789 716800 4096 4096 NT_STATUS_OK
ReadX 13789 720896 61440 61440 NT_STATUS_OK
ReadX 13789 782336 4096 4096 NT_STATUS_OK
ReadX 13789 786432 61440 61440 NT_STATUS_OK
ReadX 13789 847872 4096 4096 NT_STATUS_OK
ReadX 13789 851968 61440 61440 NT_STATUS_OK
ReadX 13789 913408 4096 4096 NT_STATUS_OK
ReadX 13789 917504 61440 61440 NT_STATUS_OK
ReadX 13789 978944 4096 4096 NT_STATUS_OK
ReadX 13789 983040 61440 61440 NT_STATUS_OK
ReadX 13789 1044480 4096 4096 NT_STATUS_OK
ReadX 13789 1048576 61440 61440 NT_STATUS_OK
ReadX 13789 1110016 4096 4096 NT_STATUS_OK
ReadX 13789 1114112 61440 61440 NT_STATUS_OK
ReadX 13789 1175552 4096 4096 NT_STATUS_OK
ReadX 13789 1179648 61440 61440 NT_STATUS_OK
ReadX 13789 1241088 4096 4096 NT_STATUS_OK
ReadX 13789 1245184 61440 61440 NT_STATUS_OK
ReadX 13789 1306624 4096 4096 NT_STATUS_OK
ReadX 13789 1310720 61440 61440 NT_STATUS_OK
ReadX 13789 1372160 4096 4096 NT_STATUS_OK
ReadX 13789 1376256 61440 61440 NT_STATUS_OK
ReadX 13789 1437696 4096 4096 NT_STATUS_OK
ReadX 13789 1441792 61440 61440 NT_STATUS_OK
ReadX 13789 1503232 4096 4096 NT_STATUS_OK
ReadX 13789 1507328 61440 61440 NT_STATUS_OK
ReadX 13789 1568768 4096 4096 NT_STATUS_OK
ReadX 13789 1572864 61440 61440 NT_STATUS_OK
ReadX 13789 1634304 4096 4096 NT_STATUS_OK
ReadX 13789 1638400 61440 61440 NT_STATUS_OK
ReadX 13789 1699840 4096 4096 NT_STATUS_OK
ReadX 13789 1703936 61440 61440 NT_STATUS_OK
ReadX 13789 1765376 4096 4096 NT_STATUS_OK
ReadX 13789 1769472 61440 61440 NT_STATUS_OK
ReadX 13789 1830912 4096 4096 NT_STATUS_OK
ReadX 13789 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13791 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13796 NT_STATUS_OK
QUERY_FILE_INFORMATION 13796 1004 NT_STATUS_OK
WriteX 13796 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13796 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13797 NT_STATUS_OK
Close 13797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13798 NT_STATUS_OK
WriteX 13798 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13798 258 NT_STATUS_OK
WriteX 13798 0 491 491 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13796 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13802 NT_STATUS_OK
WriteX 13802 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13802 258 NT_STATUS_OK
WriteX 13802 0 543 543 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Close 13789 NT_STATUS_OK
Close 13803 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13793 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13807 NT_STATUS_OK
ReadX 13807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13808 NT_STATUS_OK
ReadX 13808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13816 NT_STATUS_OK
QUERY_FILE_INFORMATION 13816 1004 NT_STATUS_OK
WriteX 13816 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13816 258 NT_STATUS_OK
WriteX 13816 0 2048 2048 NT_STATUS_OK
Close 13816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13817 NT_STATUS_OK
ReadX 13817 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13817 0 4096 4096 NT_STATUS_OK
Flush 13817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13822 NT_STATUS_OK
WriteX 13822 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13822 258 NT_STATUS_OK
WriteX 13822 0 2048 2048 NT_STATUS_OK
Close 13822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13823 NT_STATUS_OK
ReadX 13823 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13827 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13828 NT_STATUS_OK
WriteX 13828 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 2048 2048 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 2048 2048 NT_STATUS_OK
ReadX 13807 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13823 0 4096 4096 NT_STATUS_OK
WriteX 13807 0 8192 8192 NT_STATUS_OK
WriteX 13808 0 4096 4096 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
ReadX 13823 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13833 NT_STATUS_OK
QUERY_FILE_INFORMATION 13833 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13808 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Close 13807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13836 NT_STATUS_OK
ReadX 13836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13843 NT_STATUS_OK
ReadX 13843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13853 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 1004 NT_STATUS_OK
WriteX 13853 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 2048 2048 NT_STATUS_OK
Close 13853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13856 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13860 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13861 NT_STATUS_OK
QUERY_FILE_INFORMATION 13861 1004 NT_STATUS_OK
WriteX 13861 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13861 258 NT_STATUS_OK
WriteX 13861 0 2048 2048 NT_STATUS_OK
Close 13861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13854 0 4096 4096 NT_STATUS_OK
Flush 13854 NT_STATUS_OK
WriteX 13862 0 4096 4096 NT_STATUS_OK
Flush 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13854 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13856 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13864 NT_STATUS_OK
WriteX 13864 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13864 258 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13867 NT_STATUS_OK
WriteX 13867 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13867 258 NT_STATUS_OK
WriteX 13867 0 4096 4096 NT_STATUS_OK
Close 13867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13868 0 4096 4096 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Close 13856 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Close 13843 NT_STATUS_OK
Close 13836 NT_STATUS_OK
Close 13837 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13875 NT_STATUS_OK
WriteX 13875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13875 258 NT_STATUS_OK
WriteX 13875 0 2048 2048 NT_STATUS_OK
Close 13875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13890 NT_STATUS_OK
QUERY_FILE_INFORMATION 13890 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Close 13886 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13892 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13898 NT_STATUS_OK
ReadX 13898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13900 NT_STATUS_OK
ReadX 13900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13912 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 1004 NT_STATUS_OK
WriteX 13912 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 258 NT_STATUS_OK
WriteX 13912 0 2048 2048 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13918 NT_STATUS_OK
ReadX 13918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13924 NT_STATUS_OK
QUERY_FILE_INFORMATION 13924 1004 NT_STATUS_OK
WriteX 13924 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13924 258 NT_STATUS_OK
WriteX 13924 0 2048 2048 NT_STATUS_OK
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13932 NT_STATUS_OK
QUERY_FILE_INFORMATION 13932 1004 NT_STATUS_OK
WriteX 13932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13932 258 NT_STATUS_OK
WriteX 13932 0 2048 2048 NT_STATUS_OK
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13913 0 4096 4096 NT_STATUS_OK
Flush 13913 NT_STATUS_OK
WriteX 13925 0 4096 4096 NT_STATUS_OK
Flush 13925 NT_STATUS_OK
WriteX 13933 0 4096 4096 NT_STATUS_OK
Flush 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13913 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13933 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13915 4096 16384 16384 NT_STATUS_OK
ReadX 13895 4096 16384 16384 NT_STATUS_OK
ReadX 13927 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 2048 2048 NT_STATUS_OK
WriteX 13935 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13936 NT_STATUS_OK
QUERY_FILE_INFORMATION 13936 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13919 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Close 13915 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13917 NT_STATUS_OK
Close 13918 NT_STATUS_OK
Close 13906 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Close 13905 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Close 13895 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13938 NT_STATUS_OK
QUERY_FILE_INFORMATION 13938 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13940 NT_STATUS_OK
QUERY_FILE_INFORMATION 13940 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13947 NT_STATUS_OK
ReadX 13947 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13943 4096 16384 16384 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
WriteX 13944 0 4096 4096 NT_STATUS_OK
WriteX 13945 0 4096 4096 NT_STATUS_OK
WriteX 13946 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13952 NT_STATUS_OK
ReadX 13952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13956 NT_STATUS_OK
ReadX 13956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13957 NT_STATUS_OK
ReadX 13957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 8192 8192 NT_STATUS_OK
ReadX 13949 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13963 0 4096 4096 NT_STATUS_OK
ReadX 13963 4096 4096 4096 NT_STATUS_OK
ReadX 13963 8192 4096 4096 NT_STATUS_OK
WriteX 13949 0 4096 4096 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13964 0 4096 4096 NT_STATUS_OK
ReadX 13964 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
WriteX 13944 0 4096 4096 NT_STATUS_OK
WriteX 13945 0 4096 4096 NT_STATUS_OK
WriteX 13946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13969 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 1004 NT_STATUS_OK
WriteX 13969 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 258 NT_STATUS_OK
WriteX 13969 0 2048 2048 NT_STATUS_OK
Close 13969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13970 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13970 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
ReadX 13972 4096 4096 4096 NT_STATUS_OK
WriteX 13972 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13970 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
ReadX 13974 4096 4096 4096 NT_STATUS_OK
WriteX 13974 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13975 NT_STATUS_OK
QUERY_FILE_INFORMATION 13975 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13962 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13955 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Close 13956 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Close 13958 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Close 13949 NT_STATUS_OK
Close 13950 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13951 NT_STATUS_OK
Close 13952 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13963 NT_STATUS_OK
Close 13964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13977 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13977 0 4096 4096 NT_STATUS_OK
ReadX 13977 4096 4096 4096 NT_STATUS_OK
ReadX 13977 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
ReadX 13978 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13995 NT_STATUS_OK
QUERY_FILE_INFORMATION 13995 1004 NT_STATUS_OK
WriteX 13995 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13995 258 NT_STATUS_OK
WriteX 13995 0 2048 2048 NT_STATUS_OK
Close 13995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13996 NT_STATUS_OK
ReadX 13996 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13996 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 14000 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14001 NT_STATUS_OK
QUERY_FILE_INFORMATION 14001 1004 NT_STATUS_OK
WriteX 14001 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14001 258 NT_STATUS_OK
WriteX 14001 0 2048 2048 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 14002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13985 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14003 NT_STATUS_OK
QUERY_FILE_INFORMATION 14003 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 13988 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14005 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 61440 4096 4096 NT_STATUS_OK
ReadX 14007 126976 4096 4096 NT_STATUS_OK
WriteX 14007 0 65536 65536 NT_STATUS_OK
WriteX 14007 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 61440 4096 4096 NT_STATUS_OK
ReadX 14008 126976 4096 4096 NT_STATUS_OK
ReadX 14008 192512 4096 4096 NT_STATUS_OK
ReadX 14008 258048 4096 4096 NT_STATUS_OK
WriteX 14008 0 65536 65536 NT_STATUS_OK
WriteX 14008 65536 65536 65536 NT_STATUS_OK
WriteX 14008 131072 65536 65536 NT_STATUS_OK
WriteX 14008 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 61440 4096 4096 NT_STATUS_OK
ReadX 14009 126976 4096 4096 NT_STATUS_OK
ReadX 14009 192512 4096 4096 NT_STATUS_OK
ReadX 14009 258048 4096 4096 NT_STATUS_OK
ReadX 14009 323584 4096 4096 NT_STATUS_OK
ReadX 14009 389120 4096 4096 NT_STATUS_OK
ReadX 14009 454656 4096 4096 NT_STATUS_OK
ReadX 14009 520192 4096 4096 NT_STATUS_OK
WriteX 14009 0 65536 65536 NT_STATUS_OK
WriteX 14009 65536 65536 65536 NT_STATUS_OK
WriteX 14009 131072 65536 65536 NT_STATUS_OK
WriteX 14009 196608 65536 65536 NT_STATUS_OK
WriteX 14009 262144 65536 65536 NT_STATUS_OK
WriteX 14009 327680 65536 65536 NT_STATUS_OK
WriteX 14009 393216 65536 65536 NT_STATUS_OK
WriteX 14009 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14010 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14010 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14010 8192 4096 4096 NT_STATUS_OK
ReadX 14010 12288 4096 4096 NT_STATUS_OK
ReadX 14010 16384 4096 4096 NT_STATUS_OK
ReadX 14010 20480 4096 4096 NT_STATUS_OK
ReadX 14010 24576 4096 4096 NT_STATUS_OK
ReadX 14010 28672 4096 4096 NT_STATUS_OK
ReadX 14010 32768 4096 4096 NT_STATUS_OK
ReadX 14010 36864 4096 4096 NT_STATUS_OK
ReadX 14010 40960 4096 4096 NT_STATUS_OK
ReadX 14010 45056 4096 4096 NT_STATUS_OK
ReadX 14010 49152 4096 4096 NT_STATUS_OK
ReadX 14010 53248 4096 4096 NT_STATUS_OK
ReadX 14010 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14010 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 14011 NT_STATUS_OK
Close 14011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 14013 NT_STATUS_OK
WriteX 14013 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14013 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14013 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14013 1004 NT_STATUS_OK
WriteX 14013 0 57088 57088 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
Flush 14013 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 14014 NT_STATUS_OK
SET_FILE_INFORMATION 14014 1004 NT_STATUS_OK
Close 14014 NT_STATUS_OK
SET_FILE_INFORMATION 14013 1004 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
Close 14013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14017 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 14018 NT_STATUS_OK
WriteX 14018 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14018 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14018 1004 NT_STATUS_OK
WriteX 14018 0 51456 51456 NT_STATUS_OK
WriteX 14018 0 4096 4096 NT_STATUS_OK
Flush 14018 NT_STATUS_OK
SET_FILE_INFORMATION 14018 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14018 1004 NT_STATUS_OK
WriteX 14018 0 4096 4096 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Close 14017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 14020 NT_STATUS_OK
Close 14020 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14022 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 14024 NT_STATUS_OK
Close 14024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 14027 NT_STATUS_OK
WriteX 14027 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 53077 53077 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 14028 NT_STATUS_OK
WriteX 14028 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14028 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14028 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14028 1004 NT_STATUS_OK
WriteX 14028 0 65536 65536 NT_STATUS_OK
WriteX 14028 65536 1856 1856 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
SET_FILE_INFORMATION 14028 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14028 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Close 14022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 14030 NT_STATUS_OK
Close 14030 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 14034 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 14037 NT_STATUS_OK
WriteX 14037 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14037 258 NT_STATUS_OK
WriteX 14037 0 7983 7983 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 14039 NT_STATUS_OK
Close 14039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 14042 NT_STATUS_OK
WriteX 14042 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14042 258 NT_STATUS_OK
WriteX 14042 0 65536 65536 NT_STATUS_OK
WriteX 14042 65536 65536 65536 NT_STATUS_OK
WriteX 14042 131072 65536 65536 NT_STATUS_OK
WriteX 14042 196608 65536 65536 NT_STATUS_OK
WriteX 14042 262144 65536 65536 NT_STATUS_OK
WriteX 14042 327680 65536 65536 NT_STATUS_OK
WriteX 14042 393216 65536 65536 NT_STATUS_OK
WriteX 14042 458752 46731 46731 NT_STATUS_OK
Close 14042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 14043 NT_STATUS_OK
WriteX 14043 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14043 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14032 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 14043 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 65536 65536 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
WriteX 14043 65536 22848 22848 NT_STATUS_OK
Flush 14043 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 14045 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14047 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14048 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14048 1004 NT_STATUS_OK
ReadX 14048 8192 4096 4096 NT_STATUS_OK
ReadX 14048 12288 4096 4096 NT_STATUS_OK
ReadX 14048 16384 4096 4096 NT_STATUS_OK
ReadX 14048 20480 4096 4096 NT_STATUS_OK
ReadX 14048 24576 4096 4096 NT_STATUS_OK
ReadX 14048 28672 4096 4096 NT_STATUS_OK
ReadX 14048 32768 4096 4096 NT_STATUS_OK
ReadX 14048 36864 4096 4096 NT_STATUS_OK
ReadX 14048 40960 4096 4096 NT_STATUS_OK
ReadX 14048 45056 4096 4096 NT_STATUS_OK
ReadX 14048 49152 4096 4096 NT_STATUS_OK
ReadX 14048 53248 4096 4096 NT_STATUS_OK
ReadX 14048 57344 4096 4096 NT_STATUS_OK
ReadX 14048 61440 4096 4096 NT_STATUS_OK
ReadX 14048 65536 4096 4096 NT_STATUS_OK
ReadX 14048 69632 4096 4096 NT_STATUS_OK
ReadX 14048 73728 4096 4096 NT_STATUS_OK
ReadX 14048 77824 4096 4096 NT_STATUS_OK
ReadX 14048 81920 4096 4096 NT_STATUS_OK
ReadX 14048 86016 4096 4096 NT_STATUS_OK
ReadX 14048 90112 4096 4096 NT_STATUS_OK
ReadX 14048 94208 4096 4096 NT_STATUS_OK
ReadX 14048 98304 4096 4096 NT_STATUS_OK
ReadX 14048 102400 4096 4096 NT_STATUS_OK
ReadX 14048 106496 4096 4096 NT_STATUS_OK
ReadX 14048 110592 4096 4096 NT_STATUS_OK
ReadX 14048 114688 4096 4096 NT_STATUS_OK
ReadX 14048 118784 4096 4096 NT_STATUS_OK
ReadX 14048 122880 4096 4096 NT_STATUS_OK
ReadX 14048 126976 4096 4096 NT_STATUS_OK
ReadX 14048 131072 4096 4096 NT_STATUS_OK
ReadX 14048 135168 4096 4096 NT_STATUS_OK
ReadX 14048 139264 4096 4096 NT_STATUS_OK
ReadX 14048 143360 4096 4096 NT_STATUS_OK
ReadX 14048 147456 4096 4096 NT_STATUS_OK
ReadX 14048 151552 4096 4096 NT_STATUS_OK
ReadX 14048 155648 4096 4096 NT_STATUS_OK
ReadX 14048 159744 4096 4096 NT_STATUS_OK
ReadX 14048 163840 4096 4096 NT_STATUS_OK
ReadX 14048 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14048 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 14051 NT_STATUS_OK
WriteX 14051 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14051 258 NT_STATUS_OK
Close 14048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 14052 NT_STATUS_OK
SET_FILE_INFORMATION 14052 1004 NT_STATUS_OK
Close 14052 NT_STATUS_OK
WriteX 14051 0 42388 42388 NT_STATUS_OK
Close 14051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
ReadX 14055 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 14056 NT_STATUS_OK
WriteX 14056 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 258 NT_STATUS_OK
SET_FILE_INFORMATION 14056 1004 NT_STATUS_OK
WriteX 14056 0 42652 42652 NT_STATUS_OK
Close 14056 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 14058 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 14062 NT_STATUS_OK
Close 14062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 14065 NT_STATUS_OK
WriteX 14065 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14065 258 NT_STATUS_OK
WriteX 14065 0 65536 65536 NT_STATUS_OK
WriteX 14065 65536 49 49 NT_STATUS_OK
Close 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 61440 61440 NT_STATUS_OK
ReadX 14066 61440 4096 4096 NT_STATUS_OK
ReadX 14066 65536 61440 61440 NT_STATUS_OK
ReadX 14066 126976 4096 4096 NT_STATUS_OK
ReadX 14066 131072 61440 61440 NT_STATUS_OK
ReadX 14066 192512 4096 4096 NT_STATUS_OK
ReadX 14066 196608 61440 61440 NT_STATUS_OK
ReadX 14066 258048 4096 4096 NT_STATUS_OK
ReadX 14066 262144 61440 61440 NT_STATUS_OK
ReadX 14066 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 61440 61440 NT_STATUS_OK
ReadX 14067 61440 4096 4096 NT_STATUS_OK
ReadX 14067 65536 61440 61440 NT_STATUS_OK
ReadX 14067 126976 4096 4096 NT_STATUS_OK
ReadX 14067 131072 61440 61440 NT_STATUS_OK
ReadX 14067 192512 4096 4096 NT_STATUS_OK
ReadX 14067 196608 61440 61440 NT_STATUS_OK
ReadX 14067 258048 4096 4096 NT_STATUS_OK
ReadX 14067 262144 61440 61440 NT_STATUS_OK
ReadX 14067 323584 4096 4096 NT_STATUS_OK
ReadX 14067 327680 61440 61440 NT_STATUS_OK
ReadX 14067 389120 4096 4096 NT_STATUS_OK
ReadX 14067 393216 61440 61440 NT_STATUS_OK
ReadX 14067 454656 4096 4096 NT_STATUS_OK
ReadX 14067 458752 61440 61440 NT_STATUS_OK
ReadX 14067 520192 4096 4096 NT_STATUS_OK
ReadX 14067 524288 61440 61440 NT_STATUS_OK
ReadX 14067 585728 4096 4096 NT_STATUS_OK
ReadX 14067 589824 61440 61440 NT_STATUS_OK
ReadX 14067 651264 4096 4096 NT_STATUS_OK
ReadX 14067 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 61440 61440 NT_STATUS_OK
ReadX 14068 61440 4096 4096 NT_STATUS_OK
ReadX 14068 65536 61440 61440 NT_STATUS_OK
ReadX 14068 126976 4096 4096 NT_STATUS_OK
ReadX 14068 131072 61440 61440 NT_STATUS_OK
ReadX 14068 192512 4096 4096 NT_STATUS_OK
ReadX 14068 196608 61440 61440 NT_STATUS_OK
ReadX 14068 258048 4096 4096 NT_STATUS_OK
ReadX 14068 262144 61440 61440 NT_STATUS_OK
ReadX 14068 323584 4096 4096 NT_STATUS_OK
ReadX 14068 327680 61440 61440 NT_STATUS_OK
ReadX 14068 389120 4096 4096 NT_STATUS_OK
ReadX 14068 393216 61440 61440 NT_STATUS_OK
ReadX 14068 454656 4096 4096 NT_STATUS_OK
ReadX 14068 458752 61440 61440 NT_STATUS_OK
ReadX 14068 520192 4096 4096 NT_STATUS_OK
ReadX 14068 524288 61440 61440 NT_STATUS_OK
ReadX 14068 585728 4096 4096 NT_STATUS_OK
ReadX 14068 589824 61440 61440 NT_STATUS_OK
ReadX 14068 651264 4096 4096 NT_STATUS_OK
ReadX 14068 655360 61440 61440 NT_STATUS_OK
ReadX 14068 716800 4096 4096 NT_STATUS_OK
ReadX 14068 720896 61440 61440 NT_STATUS_OK
ReadX 14068 782336 4096 4096 NT_STATUS_OK
ReadX 14068 786432 61440 61440 NT_STATUS_OK
ReadX 14068 847872 4096 4096 NT_STATUS_OK
ReadX 14068 851968 61440 61440 NT_STATUS_OK
ReadX 14068 913408 4096 4096 NT_STATUS_OK
ReadX 14068 917504 61440 61440 NT_STATUS_OK
ReadX 14068 978944 4096 4096 NT_STATUS_OK
ReadX 14068 983040 61440 61440 NT_STATUS_OK
ReadX 14068 1044480 4096 4096 NT_STATUS_OK
ReadX 14068 1048576 61440 61440 NT_STATUS_OK
ReadX 14068 1110016 4096 4096 NT_STATUS_OK
ReadX 14068 1114112 61440 61440 NT_STATUS_OK
ReadX 14068 1175552 4096 4096 NT_STATUS_OK
ReadX 14068 1179648 61440 61440 NT_STATUS_OK
ReadX 14068 1241088 4096 4096 NT_STATUS_OK
ReadX 14068 1245184 61440 61440 NT_STATUS_OK
ReadX 14068 1306624 4096 4096 NT_STATUS_OK
ReadX 14068 1310720 61440 61440 NT_STATUS_OK
ReadX 14068 1372160 4096 4096 NT_STATUS_OK
ReadX 14068 1376256 61440 61440 NT_STATUS_OK
ReadX 14068 1437696 4096 4096 NT_STATUS_OK
ReadX 14068 1441792 61440 61440 NT_STATUS_OK
ReadX 14068 1503232 4096 4096 NT_STATUS_OK
ReadX 14068 1507328 61440 61440 NT_STATUS_OK
ReadX 14068 1568768 4096 4096 NT_STATUS_OK
ReadX 14068 1572864 61440 61440 NT_STATUS_OK
ReadX 14068 1634304 4096 4096 NT_STATUS_OK
ReadX 14068 1638400 61440 61440 NT_STATUS_OK
ReadX 14068 1699840 4096 4096 NT_STATUS_OK
ReadX 14068 1703936 61440 61440 NT_STATUS_OK
ReadX 14068 1765376 4096 4096 NT_STATUS_OK
ReadX 14068 1769472 61440 61440 NT_STATUS_OK
ReadX 14068 1830912 4096 4096 NT_STATUS_OK
ReadX 14068 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 14069 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 14070 NT_STATUS_OK
QUERY_FILE_INFORMATION 14070 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14070 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14070 1005 NT_STATUS_OK
ReadX 14070 2156 24 24 NT_STATUS_OK
ReadX 14070 2139 276 276 NT_STATUS_OK
ReadX 14070 2136 14 14 NT_STATUS_OK
ReadX 14070 2136 7 7 NT_STATUS_OK
ReadX 14070 2138 12 12 NT_STATUS_OK
ReadX 14070 2137 8 8 NT_STATUS_OK
ReadX 14070 2135 15 15 NT_STATUS_OK
ReadX 14070 0 16 16 NT_STATUS_OK
ReadX 14070 16 2048 2048 NT_STATUS_OK
ReadX 14070 2064 2048 2048 NT_STATUS_OK
ReadX 14070 257 2048 2048 NT_STATUS_OK
ReadX 14070 385 2048 2048 NT_STATUS_OK
ReadX 14070 513 2048 2048 NT_STATUS_OK
ReadX 14070 641 2048 2048 NT_STATUS_OK
ReadX 14070 769 2048 2048 NT_STATUS_OK
ReadX 14070 897 2048 2048 NT_STATUS_OK
ReadX 14070 1025 2048 2048 NT_STATUS_OK
ReadX 14070 1153 2048 2048 NT_STATUS_OK
ReadX 14070 1281 2048 2048 NT_STATUS_OK
ReadX 14070 1409 2048 2048 NT_STATUS_OK
ReadX 14070 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 14072 NT_STATUS_OK
Close 14072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14075 NT_STATUS_OK
WriteX 14075 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14075 258 NT_STATUS_OK
WriteX 14075 0 10575 10575 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
Close 14075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14076 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14080 NT_STATUS_OK
LockX 14080 2147483538 1 NT_STATUS_OK
UnlockX 14080 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14080 1005 NT_STATUS_OK
ReadX 14080 0 512 512 NT_STATUS_OK
ReadX 14080 512 512 512 NT_STATUS_OK
ReadX 14080 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 14080 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14080 1004 NT_STATUS_OK
Close 14080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14081 NT_STATUS_OK
QUERY_FILE_INFORMATION 14081 1005 NT_STATUS_OK
ReadX 14081 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14082 NT_STATUS_OK
LockX 14082 2147483538 1 NT_STATUS_OK
UnlockX 14082 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14082 1005 NT_STATUS_OK
ReadX 14082 0 512 512 NT_STATUS_OK
ReadX 14082 512 512 512 NT_STATUS_OK
ReadX 14082 1024 512 512 NT_STATUS_OK
ReadX 14082 288 20 20 NT_STATUS_OK
ReadX 14082 308 2084 2084 NT_STATUS_OK
ReadX 14082 388 2084 2084 NT_STATUS_OK
ReadX 14082 388 2084 2084 NT_STATUS_OK
ReadX 14069 2157 1386 1386 NT_STATUS_OK
ReadX 14082 2472 399 399 NT_STATUS_OK
ReadX 14082 3072 1536 1536 NT_STATUS_OK
ReadX 14082 544 149 149 NT_STATUS_OK
ReadX 14082 693 485 485 NT_STATUS_OK
Close 14082 NT_STATUS_OK
ReadX 14069 2157 4096 4096 NT_STATUS_OK
ReadX 14069 6253 4096 4096 NT_STATUS_OK
ReadX 14069 10349 4096 4096 NT_STATUS_OK
ReadX 14069 14445 4096 4096 NT_STATUS_OK
ReadX 14069 18541 4096 4096 NT_STATUS_OK
ReadX 14069 22637 256 256 NT_STATUS_OK
ReadX 14069 22893 4096 4096 NT_STATUS_OK
ReadX 14069 26989 4096 4096 NT_STATUS_OK
ReadX 14069 31085 4096 4096 NT_STATUS_OK
ReadX 14069 35181 4096 4096 NT_STATUS_OK
ReadX 14069 39277 4096 4096 NT_STATUS_OK
ReadX 14069 43373 4096 4096 NT_STATUS_OK
ReadX 14069 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14069 2157 1024 1024 NT_STATUS_OK
ReadX 14069 1667 4688 4688 NT_STATUS_OK
ReadX 14069 6355 3516 3516 NT_STATUS_OK
ReadX 14069 9871 16384 16384 NT_STATUS_OK
ReadX 14069 26255 3771 3771 NT_STATUS_OK
ReadX 14069 30026 2048 2048 NT_STATUS_OK
ReadX 14069 32074 1024 1024 NT_STATUS_OK
ReadX 14069 33098 6652 6652 NT_STATUS_OK
ReadX 14069 39750 16384 16384 NT_STATUS_OK
ReadX 14069 56134 10496 10496 NT_STATUS_OK
ReadX 14069 66630 1784 1784 NT_STATUS_OK
ReadX 14069 68414 90 90 NT_STATUS_OK
ReadX 14069 68504 273 273 NT_STATUS_OK
ReadX 14069 68777 1600 1600 NT_STATUS_OK
ReadX 14069 70377 640 640 NT_STATUS_OK
ReadX 14069 71017 1280 1280 NT_STATUS_OK
ReadX 14069 72297 8464 8464 NT_STATUS_OK
ReadX 14069 80761 158 158 NT_STATUS_OK
ReadX 14069 80919 912 912 NT_STATUS_OK
ReadX 14069 81831 1980 1980 NT_STATUS_OK
ReadX 14069 83811 2256 2256 NT_STATUS_OK
ReadX 14069 86067 400 400 NT_STATUS_OK
ReadX 14069 86467 252 252 NT_STATUS_OK
ReadX 14069 86719 42 42 NT_STATUS_OK
ReadX 14069 86761 725 725 NT_STATUS_OK
ReadX 14069 2009 512 512 NT_STATUS_OK
ReadX 14069 3895 9 9 NT_STATUS_OK
ReadX 14069 3781 46 46 NT_STATUS_OK
ReadX 14069 4059 92 92 NT_STATUS_OK
ReadX 14069 3781 92 92 NT_STATUS_OK
ReadX 14069 3986 184 184 NT_STATUS_OK
ReadX 14069 3987 16384 16384 NT_STATUS_OK
ReadX 14069 3902 16384 16384 NT_STATUS_OK
ReadX 14069 3781 10240 10240 NT_STATUS_OK
ReadX 14069 3821 16384 16384 NT_STATUS_OK
ReadX 14069 3891 935 935 NT_STATUS_OK
ReadX 14069 4060 10240 10240 NT_STATUS_OK
ReadX 14069 4059 184 184 NT_STATUS_OK
ReadX 14069 256 184 184 NT_STATUS_OK
ReadX 14069 256 1026 1026 NT_STATUS_OK
ReadX 14069 3901 326 326 NT_STATUS_OK
ReadX 14069 3899 652 652 NT_STATUS_OK
ReadX 14069 256 2 2 NT_STATUS_OK
ReadX 14069 258 4948 4948 NT_STATUS_OK
Close 14069 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 14084 NT_STATUS_OK
Close 14084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 14087 NT_STATUS_OK
WriteX 14087 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14087 258 NT_STATUS_OK
WriteX 14087 0 65536 65536 NT_STATUS_OK
WriteX 14087 65536 65536 65536 NT_STATUS_OK
WriteX 14087 131072 65536 65536 NT_STATUS_OK
WriteX 14087 196608 65536 65536 NT_STATUS_OK
WriteX 14087 262144 65536 65536 NT_STATUS_OK
WriteX 14087 327680 65536 65536 NT_STATUS_OK
WriteX 14087 393216 65536 65536 NT_STATUS_OK
WriteX 14087 458752 65536 65536 NT_STATUS_OK
WriteX 14087 524288 65536 65536 NT_STATUS_OK
WriteX 14087 589824 35257 35257 NT_STATUS_OK
Close 14087 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 14089 NT_STATUS_OK
Close 14089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 14092 NT_STATUS_OK
WriteX 14092 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14092 258 NT_STATUS_OK
WriteX 14092 0 65536 65536 NT_STATUS_OK
WriteX 14092 65536 65536 65536 NT_STATUS_OK
WriteX 14092 131072 65536 65536 NT_STATUS_OK
WriteX 14092 196608 65536 65536 NT_STATUS_OK
WriteX 14092 262144 65536 65536 NT_STATUS_OK
WriteX 14092 327680 65536 65536 NT_STATUS_OK
WriteX 14092 393216 65536 65536 NT_STATUS_OK
WriteX 14092 458752 65536 65536 NT_STATUS_OK
WriteX 14092 524288 65536 65536 NT_STATUS_OK
WriteX 14092 589824 57598 57598 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14094 NT_STATUS_OK
WriteX 14094 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14094 258 NT_STATUS_OK
WriteX 14094 0 12543 12543 NT_STATUS_OK
Flush 14094 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10093 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10095 NT_STATUS_OK
ReadX 10095 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10097 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 1005 NT_STATUS_OK
ReadX 10097 1938 24 24 NT_STATUS_OK
ReadX 10097 1920 276 276 NT_STATUS_OK
ReadX 10097 1918 14 14 NT_STATUS_OK
ReadX 10097 1918 7 7 NT_STATUS_OK
ReadX 10097 1919 12 12 NT_STATUS_OK
ReadX 10097 1919 8 8 NT_STATUS_OK
ReadX 10097 1917 15 15 NT_STATUS_OK
ReadX 10097 0 16 16 NT_STATUS_OK
ReadX 10097 16 2048 2048 NT_STATUS_OK
ReadX 10097 2064 2048 2048 NT_STATUS_OK
ReadX 10097 257 2048 2048 NT_STATUS_OK
ReadX 10097 385 2048 2048 NT_STATUS_OK
ReadX 10097 513 2048 2048 NT_STATUS_OK
ReadX 10097 641 2048 2048 NT_STATUS_OK
ReadX 10097 769 2048 2048 NT_STATUS_OK
ReadX 10097 897 2048 2048 NT_STATUS_OK
ReadX 10097 1025 2048 2048 NT_STATUS_OK
ReadX 10097 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10102 NT_STATUS_OK
WriteX 10102 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10102 258 NT_STATUS_OK
WriteX 10102 0 11588 11588 NT_STATUS_OK
Flush 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 4096 4096 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10107 NT_STATUS_OK
WriteX 10107 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10107 258 NT_STATUS_OK
WriteX 10107 0 11615 11615 NT_STATUS_OK
Flush 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10116 NT_STATUS_OK
WriteX 10116 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10116 258 NT_STATUS_OK
WriteX 10116 0 65536 65536 NT_STATUS_OK
WriteX 10116 65536 16050 16050 NT_STATUS_OK
Close 10116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10096 1939 64 64 NT_STATUS_OK
ReadX 10096 128 248 248 NT_STATUS_OK
ReadX 10096 128 568 568 NT_STATUS_OK
ReadX 10096 3872 1536 1536 NT_STATUS_OK
ReadX 10096 3456 2560 2560 NT_STATUS_OK
ReadX 10096 3136 512 512 NT_STATUS_OK
ReadX 10096 2880 4096 4096 NT_STATUS_OK
ReadX 10096 3264 3072 3072 NT_STATUS_OK
ReadX 10096 320 4096 4096 NT_STATUS_OK
ReadX 10096 1024 4096 4096 NT_STATUS_OK
ReadX 10096 3616 4096 4096 NT_STATUS_OK
ReadX 10096 1939 64 64 NT_STATUS_OK
ReadX 10096 128 248 248 NT_STATUS_OK
ReadX 10096 128 608 608 NT_STATUS_OK
ReadX 10096 2858 1024 1024 NT_STATUS_OK
ReadX 10096 2810 4096 4096 NT_STATUS_OK
ReadX 10096 2826 4096 4096 NT_STATUS_OK
ReadX 10096 2580 2048 2048 NT_STATUS_OK
ReadX 10096 2800 2560 2560 NT_STATUS_OK
ReadX 10096 2100 4096 4096 NT_STATUS_OK
ReadX 10096 2084 4096 4096 NT_STATUS_OK
ReadX 10096 868 4096 4096 NT_STATUS_OK
ReadX 10096 2324 4096 4096 NT_STATUS_OK
ReadX 10096 884 4096 4096 NT_STATUS_OK
ReadX 10096 2604 1024 1024 NT_STATUS_OK
ReadX 10096 580 4096 4096 NT_STATUS_OK
ReadX 10096 596 4096 4096 NT_STATUS_OK
ReadX 10096 2752 4096 4096 NT_STATUS_OK
ReadX 10096 2842 1024 1024 NT_STATUS_OK
ReadX 10096 660 4096 4096 NT_STATUS_OK
ReadX 10096 2720 4096 4096 NT_STATUS_OK
ReadX 10096 2736 4096 4096 NT_STATUS_OK
ReadX 10096 628 4096 4096 NT_STATUS_OK
ReadX 10096 2704 4096 4096 NT_STATUS_OK
ReadX 10096 1556 4096 4096 NT_STATUS_OK
ReadX 10096 576 4096 4096 NT_STATUS_OK
ReadX 10096 3168 1536 1536 NT_STATUS_OK
ReadX 10096 832 4096 4096 NT_STATUS_OK
ReadX 10096 1088 4096 4096 NT_STATUS_OK
ReadX 10096 1344 4096 4096 NT_STATUS_OK
ReadX 10096 1600 4096 4096 NT_STATUS_OK
ReadX 10096 1856 4096 4096 NT_STATUS_OK
ReadX 10096 2112 4096 4096 NT_STATUS_OK
ReadX 10096 1892 4096 4096 NT_STATUS_OK
ReadX 10096 820 4096 4096 NT_STATUS_OK
ReadX 10096 788 4096 4096 NT_STATUS_OK
ReadX 10096 1604 4096 4096 NT_STATUS_OK
ReadX 10096 3648 4096 4096 NT_STATUS_OK
ReadX 10096 2608 4096 4096 NT_STATUS_OK
ReadX 10096 548 4096 4096 NT_STATUS_OK
ReadX 10096 740 4096 4096 NT_STATUS_OK
ReadX 10096 1344 4096 4096 NT_STATUS_OK
ReadX 10096 3392 4096 4096 NT_STATUS_OK
ReadX 10096 3904 4096 4096 NT_STATUS_OK
ReadX 10096 644 4096 4096 NT_STATUS_OK
ReadX 10096 676 4096 4096 NT_STATUS_OK
ReadX 10096 2688 4096 4096 NT_STATUS_OK
ReadX 10096 320 4096 4096 NT_STATUS_OK
ReadX 10096 900 4096 4096 NT_STATUS_OK
ReadX 10096 1908 4096 4096 NT_STATUS_OK
ReadX 10096 852 4096 4096 NT_STATUS_OK
ReadX 10096 724 4096 4096 NT_STATUS_OK
ReadX 10096 2292 4096 4096 NT_STATUS_OK
ReadX 10096 612 4096 4096 NT_STATUS_OK
ReadX 10096 388 4096 4096 NT_STATUS_OK
ReadX 10096 2368 4096 4096 NT_STATUS_OK
ReadX 10096 2624 4096 4096 NT_STATUS_OK
ReadX 10096 500 4096 4096 NT_STATUS_OK
ReadX 10096 356 4096 4096 NT_STATUS_OK
ReadX 10096 1024 4096 4096 NT_STATUS_OK
ReadX 10096 576 4096 4096 NT_STATUS_OK
ReadX 10096 340 4096 4096 NT_STATUS_OK
ReadX 10096 420 4096 4096 NT_STATUS_OK
ReadX 10096 1600 4096 4096 NT_STATUS_OK
ReadX 10096 404 4096 4096 NT_STATUS_OK
ReadX 10096 1428 4096 4096 NT_STATUS_OK
ReadX 10096 2656 4096 4096 NT_STATUS_OK
ReadX 10096 2624 4096 4096 NT_STATUS_OK
ReadX 10096 452 4096 4096 NT_STATUS_OK
ReadX 10096 692 4096 4096 NT_STATUS_OK
ReadX 10096 564 4096 4096 NT_STATUS_OK
ReadX 10096 372 4096 4096 NT_STATUS_OK
ReadX 10096 468 4096 4096 NT_STATUS_OK
ReadX 10096 484 4096 4096 NT_STATUS_OK
ReadX 10096 1088 4096 4096 NT_STATUS_OK
ReadX 10096 1924 4096 4096 NT_STATUS_OK
ReadX 10096 2768 4096 4096 NT_STATUS_OK
ReadX 10096 832 4096 4096 NT_STATUS_OK
ReadX 10096 836 4096 4096 NT_STATUS_OK
ReadX 10096 1856 4096 4096 NT_STATUS_OK
ReadX 10096 2640 4096 4096 NT_STATUS_OK
ReadX 10096 436 4096 4096 NT_STATUS_OK
ReadX 10096 1828 4096 4096 NT_STATUS_OK
ReadX 10096 804 4096 4096 NT_STATUS_OK
ReadX 10096 1860 4096 4096 NT_STATUS_OK
ReadX 10096 1812 4096 4096 NT_STATUS_OK
ReadX 10096 756 4096 4096 NT_STATUS_OK
ReadX 10096 1636 4096 4096 NT_STATUS_OK
ReadX 10096 772 4096 4096 NT_STATUS_OK
ReadX 10096 2036 4096 4096 NT_STATUS_OK
ReadX 10096 1220 4096 4096 NT_STATUS_OK
ReadX 10096 1652 4096 4096 NT_STATUS_OK
ReadX 10096 2588 4096 4096 NT_STATUS_OK
ReadX 10096 916 4096 4096 NT_STATUS_OK
ReadX 10096 260 4096 4096 NT_STATUS_OK
ReadX 10096 932 4096 4096 NT_STATUS_OK
ReadX 10096 2624 4096 4096 NT_STATUS_OK
ReadX 10096 308 4096 4096 NT_STATUS_OK
ReadX 10096 292 4096 4096 NT_STATUS_OK
ReadX 10096 1140 4096 4096 NT_STATUS_OK
ReadX 10096 276 4096 4096 NT_STATUS_OK
ReadX 10096 2020 4096 4096 NT_STATUS_OK
ReadX 10096 2880 4096 4096 NT_STATUS_OK
ReadX 10096 516 4096 4096 NT_STATUS_OK
ReadX 10096 1844 4096 4096 NT_STATUS_OK
ReadX 10096 1124 4096 4096 NT_STATUS_OK
ReadX 10096 3136 4096 4096 NT_STATUS_OK
ReadX 10096 324 4096 4096 NT_STATUS_OK
ReadX 10096 1156 4096 4096 NT_STATUS_OK
ReadX 10096 1172 4096 4096 NT_STATUS_OK
ReadX 10096 2112 4096 4096 NT_STATUS_OK
ReadX 10096 2368 4096 4096 NT_STATUS_OK
ReadX 10096 964 4096 4096 NT_STATUS_OK
ReadX 10096 980 4096 4096 NT_STATUS_OK
ReadX 10096 1012 4096 4096 NT_STATUS_OK
ReadX 10096 532 4096 4096 NT_STATUS_OK
ReadX 10096 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10096 1620 4096 4096 NT_STATUS_OK
ReadX 10096 1604 4096 4096 NT_STATUS_OK
ReadX 10096 2116 4096 4096 NT_STATUS_OK
ReadX 10096 2132 4096 4096 NT_STATUS_OK
ReadX 10096 2148 4096 4096 NT_STATUS_OK
ReadX 10096 2276 4096 4096 NT_STATUS_OK
ReadX 10096 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10118 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10121 NT_STATUS_OK
QUERY_FILE_INFORMATION 14079 1004 NT_STATUS_OK
Close 14079 NT_STATUS_OK
WriteX 10121 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10121 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 14081 1004 NT_STATUS_OK
Close 14081 NT_STATUS_OK
WriteX 10121 0 65536 65536 NT_STATUS_OK
WriteX 10121 65536 64850 64850 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10123 NT_STATUS_OK
WriteX 10123 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10123 258 NT_STATUS_OK
ReadX 10096 2068 4096 4096 NT_STATUS_OK
ReadX 10096 1588 4096 4096 NT_STATUS_OK
ReadX 10096 1572 4096 4096 NT_STATUS_OK
WriteX 10123 0 18630 18630 NT_STATUS_OK
Flush 10123 NT_STATUS_OK
Close 10123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10125 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10096 612 4096 4096 NT_STATUS_OK
ReadX 10096 564 4096 4096 NT_STATUS_OK
ReadX 10096 1876 4096 4096 NT_STATUS_OK
ReadX 10096 628 4096 4096 NT_STATUS_OK
ReadX 10096 740 4096 4096 NT_STATUS_OK
ReadX 10096 724 4096 4096 NT_STATUS_OK
ReadX 10096 644 4096 4096 NT_STATUS_OK
ReadX 10096 2324 4096 4096 NT_STATUS_OK
ReadX 10096 660 4096 4096 NT_STATUS_OK
ReadX 10096 852 4096 4096 NT_STATUS_OK
ReadX 10096 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10096 2368 4096 4096 NT_STATUS_OK
ReadX 10096 1024 4096 4096 NT_STATUS_OK
ReadX 10096 320 4096 4096 NT_STATUS_OK
ReadX 10096 580 4096 4096 NT_STATUS_OK
ReadX 10096 3136 512 512 NT_STATUS_OK
ReadX 10096 2880 4096 4096 NT_STATUS_OK
Close 10096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 61440 4096 4096 NT_STATUS_OK
ReadX 10128 126976 4096 4096 NT_STATUS_OK
WriteX 10128 0 65536 65536 NT_STATUS_OK
WriteX 10128 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 61440 4096 4096 NT_STATUS_OK
ReadX 10129 126976 4096 4096 NT_STATUS_OK
ReadX 10129 192512 4096 4096 NT_STATUS_OK
ReadX 10129 258048 4096 4096 NT_STATUS_OK
WriteX 10129 0 65536 65536 NT_STATUS_OK
WriteX 10129 65536 65536 65536 NT_STATUS_OK
WriteX 10129 131072 65536 65536 NT_STATUS_OK
WriteX 10129 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 61440 4096 4096 NT_STATUS_OK
ReadX 10130 126976 4096 4096 NT_STATUS_OK
ReadX 10130 192512 4096 4096 NT_STATUS_OK
ReadX 10130 258048 4096 4096 NT_STATUS_OK
ReadX 10130 323584 4096 4096 NT_STATUS_OK
ReadX 10130 389120 4096 4096 NT_STATUS_OK
ReadX 10130 454656 4096 4096 NT_STATUS_OK
ReadX 10130 520192 4096 4096 NT_STATUS_OK
WriteX 10130 0 65536 65536 NT_STATUS_OK
WriteX 10130 65536 65536 65536 NT_STATUS_OK
WriteX 10130 131072 65536 65536 NT_STATUS_OK
WriteX 10130 196608 65536 65536 NT_STATUS_OK
WriteX 10130 262144 65536 65536 NT_STATUS_OK
WriteX 10130 327680 65536 65536 NT_STATUS_OK
WriteX 10130 393216 65536 65536 NT_STATUS_OK
WriteX 10130 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10131 NT_STATUS_OK
ReadX 10131 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10133 NT_STATUS_OK
WriteX 10133 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10133 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10131 0 8192 8192 NT_STATUS_OK
Flush 10131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10131 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10131 0 8192 8192 NT_STATUS_OK
Flush 10131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10131 0 8192 8192 NT_STATUS_OK
Flush 10131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10131 0 8192 8192 NT_STATUS_OK
Flush 10131 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10127 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10138 NT_STATUS_OK
WriteX 10138 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10138 258 NT_STATUS_OK
WriteX 10138 0 62591 62591 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10143 NT_STATUS_OK
WriteX 10143 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10143 258 NT_STATUS_OK
WriteX 10143 0 10845 10845 NT_STATUS_OK
Close 10143 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10145 NT_STATUS_OK
Close 10145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10148 NT_STATUS_OK
WriteX 10148 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 30118 30118 NT_STATUS_OK
Close 10148 NT_STATUS_OK
WriteX 10131 0 4096 4096 NT_STATUS_OK
WriteX 10133 0 64 64 NT_STATUS_OK
Close 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10150 NT_STATUS_OK
ReadX 10150 0 61440 61440 NT_STATUS_OK
ReadX 10150 61440 4096 4096 NT_STATUS_OK
ReadX 10150 65536 61440 61440 NT_STATUS_OK
ReadX 10150 126976 4096 4096 NT_STATUS_OK
ReadX 10150 131072 61440 61440 NT_STATUS_OK
ReadX 10150 192512 4096 4096 NT_STATUS_OK
ReadX 10150 196608 61440 61440 NT_STATUS_OK
ReadX 10150 258048 4096 4096 NT_STATUS_OK
ReadX 10150 262144 61440 61440 NT_STATUS_OK
ReadX 10150 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10151 NT_STATUS_OK
ReadX 10151 0 61440 61440 NT_STATUS_OK
ReadX 10151 61440 4096 4096 NT_STATUS_OK
ReadX 10151 65536 61440 61440 NT_STATUS_OK
ReadX 10151 126976 4096 4096 NT_STATUS_OK
ReadX 10151 131072 61440 61440 NT_STATUS_OK
ReadX 10151 192512 4096 4096 NT_STATUS_OK
ReadX 10151 196608 61440 61440 NT_STATUS_OK
ReadX 10151 258048 4096 4096 NT_STATUS_OK
ReadX 10151 262144 61440 61440 NT_STATUS_OK
ReadX 10151 323584 4096 4096 NT_STATUS_OK
ReadX 10151 327680 61440 61440 NT_STATUS_OK
ReadX 10151 389120 4096 4096 NT_STATUS_OK
ReadX 10151 393216 61440 61440 NT_STATUS_OK
ReadX 10151 454656 4096 4096 NT_STATUS_OK
ReadX 10151 458752 61440 61440 NT_STATUS_OK
ReadX 10151 520192 4096 4096 NT_STATUS_OK
ReadX 10151 524288 61440 61440 NT_STATUS_OK
ReadX 10151 585728 4096 4096 NT_STATUS_OK
ReadX 10151 589824 61440 61440 NT_STATUS_OK
ReadX 10151 651264 4096 4096 NT_STATUS_OK
ReadX 10151 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10152 NT_STATUS_OK
ReadX 10152 0 61440 61440 NT_STATUS_OK
ReadX 10152 61440 4096 4096 NT_STATUS_OK
ReadX 10152 65536 61440 61440 NT_STATUS_OK
ReadX 10152 126976 4096 4096 NT_STATUS_OK
ReadX 10152 131072 61440 61440 NT_STATUS_OK
ReadX 10152 192512 4096 4096 NT_STATUS_OK
ReadX 10152 196608 61440 61440 NT_STATUS_OK
ReadX 10152 258048 4096 4096 NT_STATUS_OK
ReadX 10152 262144 61440 61440 NT_STATUS_OK
ReadX 10152 323584 4096 4096 NT_STATUS_OK
ReadX 10152 327680 61440 61440 NT_STATUS_OK
ReadX 10152 389120 4096 4096 NT_STATUS_OK
ReadX 10152 393216 61440 61440 NT_STATUS_OK
ReadX 10152 454656 4096 4096 NT_STATUS_OK
ReadX 10152 458752 61440 61440 NT_STATUS_OK
ReadX 10152 520192 4096 4096 NT_STATUS_OK
ReadX 10152 524288 61440 61440 NT_STATUS_OK
ReadX 10152 585728 4096 4096 NT_STATUS_OK
ReadX 10152 589824 61440 61440 NT_STATUS_OK
ReadX 10152 651264 4096 4096 NT_STATUS_OK
ReadX 10152 655360 61440 61440 NT_STATUS_OK
ReadX 10152 716800 4096 4096 NT_STATUS_OK
ReadX 10152 720896 61440 61440 NT_STATUS_OK
ReadX 10152 782336 4096 4096 NT_STATUS_OK
ReadX 10152 786432 61440 61440 NT_STATUS_OK
ReadX 10152 847872 4096 4096 NT_STATUS_OK
ReadX 10152 851968 61440 61440 NT_STATUS_OK
ReadX 10152 913408 4096 4096 NT_STATUS_OK
ReadX 10152 917504 61440 61440 NT_STATUS_OK
ReadX 10152 978944 4096 4096 NT_STATUS_OK
ReadX 10152 983040 61440 61440 NT_STATUS_OK
ReadX 10152 1044480 4096 4096 NT_STATUS_OK
ReadX 10152 1048576 61440 61440 NT_STATUS_OK
ReadX 10152 1110016 4096 4096 NT_STATUS_OK
ReadX 10152 1114112 61440 61440 NT_STATUS_OK
ReadX 10152 1175552 4096 4096 NT_STATUS_OK
ReadX 10152 1179648 61440 61440 NT_STATUS_OK
ReadX 10152 1241088 4096 4096 NT_STATUS_OK
ReadX 10152 1245184 61440 61440 NT_STATUS_OK
ReadX 10152 1306624 4096 4096 NT_STATUS_OK
ReadX 10152 1310720 61440 61440 NT_STATUS_OK
ReadX 10152 1372160 4096 4096 NT_STATUS_OK
ReadX 10152 1376256 61440 61440 NT_STATUS_OK
ReadX 10152 1437696 4096 4096 NT_STATUS_OK
ReadX 10152 1441792 61440 61440 NT_STATUS_OK
ReadX 10152 1503232 4096 4096 NT_STATUS_OK
ReadX 10152 1507328 61440 61440 NT_STATUS_OK
ReadX 10152 1568768 4096 4096 NT_STATUS_OK
ReadX 10152 1572864 61440 61440 NT_STATUS_OK
ReadX 10152 1634304 4096 4096 NT_STATUS_OK
ReadX 10152 1638400 61440 61440 NT_STATUS_OK
ReadX 10152 1699840 4096 4096 NT_STATUS_OK
ReadX 10152 1703936 61440 61440 NT_STATUS_OK
ReadX 10152 1765376 4096 4096 NT_STATUS_OK
ReadX 10152 1769472 61440 61440 NT_STATUS_OK
ReadX 10152 1830912 4096 4096 NT_STATUS_OK
ReadX 10152 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Close 10151 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
ReadX 10157 4096 4096 4096 NT_STATUS_OK
ReadX 10157 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10158 NT_STATUS_OK
Close 10158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10161 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10162 NT_STATUS_OK
Close 10162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 8192 8192 NT_STATUS_OK
ReadX 10165 8192 8192 8192 NT_STATUS_OK
ReadX 10165 16384 8192 8192 NT_STATUS_OK
ReadX 10165 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10167 NT_STATUS_OK
Close 10167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10170 NT_STATUS_OK
WriteX 10170 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10170 258 NT_STATUS_OK
WriteX 10170 0 10438 10438 NT_STATUS_OK
Close 10170 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10171 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10173 NT_STATUS_OK
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10174 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10175 NT_STATUS_OK
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10176 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10178 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
ReadX 10179 4096 4096 4096 NT_STATUS_OK
ReadX 10179 8192 4096 4096 NT_STATUS_OK
ReadX 10179 12288 8192 8192 NT_STATUS_OK
ReadX 10179 20480 8192 8192 NT_STATUS_OK
ReadX 10179 28672 8192 8192 NT_STATUS_OK
ReadX 10179 36864 8192 8192 NT_STATUS_OK
ReadX 10179 45056 8192 8192 NT_STATUS_OK
ReadX 10179 53248 8192 8192 NT_STATUS_OK
ReadX 10179 61440 8192 8192 NT_STATUS_OK
ReadX 10179 69632 8192 8192 NT_STATUS_OK
ReadX 10179 77824 8192 8192 NT_STATUS_OK
ReadX 10179 86016 8192 8192 NT_STATUS_OK
ReadX 10179 94208 8192 8192 NT_STATUS_OK
ReadX 10179 102400 8192 8192 NT_STATUS_OK
ReadX 10179 110592 8192 8192 NT_STATUS_OK
ReadX 10179 118784 8192 8192 NT_STATUS_OK
ReadX 10179 126976 8192 8192 NT_STATUS_OK
ReadX 10179 135168 8192 8192 NT_STATUS_OK
ReadX 10179 143360 8192 8192 NT_STATUS_OK
ReadX 10179 151552 8192 8192 NT_STATUS_OK
ReadX 10179 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10184 NT_STATUS_OK
WriteX 10184 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10184 258 NT_STATUS_OK
WriteX 10184 0 28489 28489 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10187 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10188 NT_STATUS_OK
Close 10188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 8192 8192 NT_STATUS_OK
ReadX 10191 8192 8192 8192 NT_STATUS_OK
ReadX 10191 16384 8192 8192 NT_STATUS_OK
ReadX 10191 24576 8192 8192 NT_STATUS_OK
ReadX 10191 32768 16384 16384 NT_STATUS_OK
ReadX 10191 49152 8192 8192 NT_STATUS_OK
ReadX 10191 57344 8192 8192 NT_STATUS_OK
ReadX 10191 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10196 NT_STATUS_OK
WriteX 10196 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
WriteX 10196 0 29253 29253 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10203 NT_STATUS_OK
WriteX 10203 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
WriteX 10203 0 30183 30183 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10204 NT_STATUS_OK
Close 10204 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10206 NT_STATUS_OK
WriteX 10206 0 510 510 NT_STATUS_OK
WriteX 10206 510 512 512 NT_STATUS_OK
WriteX 10206 1022 510 510 NT_STATUS_OK
WriteX 10206 1532 510 510 NT_STATUS_OK
WriteX 10206 2042 168 168 NT_STATUS_OK
Close 10206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10207 NT_STATUS_OK
Close 10207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 61440 4096 4096 NT_STATUS_OK
ReadX 10210 126976 4096 4096 NT_STATUS_OK
WriteX 10210 0 65536 65536 NT_STATUS_OK
WriteX 10210 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 61440 4096 4096 NT_STATUS_OK
ReadX 10211 126976 4096 4096 NT_STATUS_OK
ReadX 10211 192512 4096 4096 NT_STATUS_OK
ReadX 10211 258048 4096 4096 NT_STATUS_OK
WriteX 10211 0 65536 65536 NT_STATUS_OK
WriteX 10211 65536 65536 65536 NT_STATUS_OK
WriteX 10211 131072 65536 65536 NT_STATUS_OK
WriteX 10211 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 61440 4096 4096 NT_STATUS_OK
ReadX 10212 126976 4096 4096 NT_STATUS_OK
ReadX 10212 192512 4096 4096 NT_STATUS_OK
ReadX 10212 258048 4096 4096 NT_STATUS_OK
ReadX 10212 323584 4096 4096 NT_STATUS_OK
ReadX 10212 389120 4096 4096 NT_STATUS_OK
ReadX 10212 454656 4096 4096 NT_STATUS_OK
ReadX 10212 520192 4096 4096 NT_STATUS_OK
WriteX 10212 0 65536 65536 NT_STATUS_OK
WriteX 10212 65536 65536 65536 NT_STATUS_OK
WriteX 10212 131072 65536 65536 NT_STATUS_OK
WriteX 10212 196608 65536 65536 NT_STATUS_OK
WriteX 10212 262144 65536 65536 NT_STATUS_OK
WriteX 10212 327680 65536 65536 NT_STATUS_OK
WriteX 10212 393216 65536 65536 NT_STATUS_OK
WriteX 10212 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10213 NT_STATUS_OK
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10210 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Close 10212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10215 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10222 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10231 NT_STATUS_OK
Close 10231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10233 NT_STATUS_OK
Close 10233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10242 NT_STATUS_OK
Close 10242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10247 NT_STATUS_OK
Close 10247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10267 NT_STATUS_OK
Close 10267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10272 NT_STATUS_OK
Close 10272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10275 NT_STATUS_OK
Close 10275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10281 NT_STATUS_OK
WriteX 10281 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10281 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10281 0 65536 65536 NT_STATUS_OK
WriteX 10281 65536 65536 65536 NT_STATUS_OK
WriteX 10281 131072 65536 65536 NT_STATUS_OK
WriteX 10281 196608 65536 65536 NT_STATUS_OK
WriteX 10281 262144 26634 26634 NT_STATUS_OK
Close 10281 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10286 NT_STATUS_OK
Close 10286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10287 NT_STATUS_OK
Close 10287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 0 4096 4096 NT_STATUS_OK
ReadX 10289 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10294 NT_STATUS_OK
Close 10294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10299 NT_STATUS_OK
Close 10299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10303 NT_STATUS_OK
Close 10303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10308 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10317 NT_STATUS_OK
Close 10317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10322 NT_STATUS_OK
Close 10322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10327 NT_STATUS_OK
Close 10327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10337 NT_STATUS_OK
Close 10337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10341 NT_STATUS_OK
Close 10341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10346 NT_STATUS_OK
Close 10346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10351 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10369 NT_STATUS_OK
ReadX 10369 0 4096 4096 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10380 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
Close 10383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10384 NT_STATUS_OK
ReadX 10384 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Close 10384 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10413 0 4096 4096 NT_STATUS_OK
Close 10413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
ReadX 10415 4096 4096 4096 NT_STATUS_OK
ReadX 10415 8192 4096 4096 NT_STATUS_OK
ReadX 10415 12288 4096 4096 NT_STATUS_OK
ReadX 10415 16384 4096 4096 NT_STATUS_OK
ReadX 10415 20480 4096 4096 NT_STATUS_OK
ReadX 10415 24576 4096 4096 NT_STATUS_OK
ReadX 10415 28672 4096 4096 NT_STATUS_OK
ReadX 10415 32768 4096 4096 NT_STATUS_OK
ReadX 10415 36864 4096 4096 NT_STATUS_OK
ReadX 10415 40960 4096 4096 NT_STATUS_OK
ReadX 10415 45056 4096 4096 NT_STATUS_OK
ReadX 10415 49152 4096 4096 NT_STATUS_OK
ReadX 10415 53248 4096 4096 NT_STATUS_OK
ReadX 10415 57344 4096 4096 NT_STATUS_OK
ReadX 10415 61440 4096 4096 NT_STATUS_OK
ReadX 10415 65536 4096 4096 NT_STATUS_OK
ReadX 10415 69632 4096 4096 NT_STATUS_OK
ReadX 10415 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10415 1004 NT_STATUS_OK
WriteX 10415 0 4096 4096 NT_STATUS_OK
Close 10415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10416 NT_STATUS_OK
SET_FILE_INFORMATION 10416 1004 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10418 NT_STATUS_OK
Close 10418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10421 NT_STATUS_OK
WriteX 10421 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10421 258 NT_STATUS_OK
WriteX 10421 0 65536 65536 NT_STATUS_OK
WriteX 10421 65536 19979 19979 NT_STATUS_OK
Close 10421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
WriteX 10422 0 4096 4096 NT_STATUS_OK
Flush 10422 NT_STATUS_OK
WriteX 10422 0 4096 4096 NT_STATUS_OK
Flush 10422 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 1004 NT_STATUS_OK
WriteX 10422 0 4096 4096 NT_STATUS_OK
Flush 10422 NT_STATUS_OK
WriteX 10422 0 4096 4096 NT_STATUS_OK
Flush 10422 NT_STATUS_OK
WriteX 10422 0 4096 4096 NT_STATUS_OK
Flush 10422 NT_STATUS_OK
SET_FILE_INFORMATION 10422 1004 NT_STATUS_OK
WriteX 10422 0 4096 4096 NT_STATUS_OK
Flush 10422 NT_STATUS_OK
Close 10422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
Close 10423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10425 NT_STATUS_OK
ReadX 10425 0 4096 4096 NT_STATUS_OK
Close 10425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
Close 10426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10433 NT_STATUS_OK
WriteX 10433 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10433 258 NT_STATUS_OK
WriteX 10433 0 65536 65536 NT_STATUS_OK
WriteX 10433 65536 17654 17654 NT_STATUS_OK
Close 10433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 4096 4096 NT_STATUS_OK
WriteX 10434 0 4096 4096 NT_STATUS_OK
Flush 10434 NT_STATUS_OK
WriteX 10434 0 4096 4096 NT_STATUS_OK
Flush 10434 NT_STATUS_OK
QUERY_FILE_INFORMATION 10434 1004 NT_STATUS_OK
WriteX 10434 0 4096 4096 NT_STATUS_OK
Flush 10434 NT_STATUS_OK
WriteX 10434 0 4096 4096 NT_STATUS_OK
Flush 10434 NT_STATUS_OK
WriteX 10434 0 4096 4096 NT_STATUS_OK
Flush 10434 NT_STATUS_OK
SET_FILE_INFORMATION 10434 1004 NT_STATUS_OK
WriteX 10434 0 4096 4096 NT_STATUS_OK
Flush 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10435 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
Close 10435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10437 NT_STATUS_OK
Close 10437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
ReadX 10439 4096 4096 4096 NT_STATUS_OK
ReadX 10439 8192 4096 4096 NT_STATUS_OK
ReadX 10439 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10439 16384 4096 4096 NT_STATUS_OK
ReadX 10439 20480 4096 4096 NT_STATUS_OK
ReadX 10439 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
Close 10440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
Close 10441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
WriteX 10442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10448 NT_STATUS_OK
WriteX 10448 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10448 258 NT_STATUS_OK
WriteX 10448 0 65536 65536 NT_STATUS_OK
WriteX 10448 65536 19490 19490 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 4096 4096 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
Flush 10449 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
Flush 10449 NT_STATUS_OK
QUERY_FILE_INFORMATION 10449 1004 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
Flush 10449 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
Flush 10449 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
Flush 10449 NT_STATUS_OK
SET_FILE_INFORMATION 10449 1004 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
Flush 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10450 NT_STATUS_OK
SET_FILE_INFORMATION 10450 1004 NT_STATUS_OK
Close 10450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10454 0 4096 4096 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10456 NT_STATUS_OK
ReadX 10456 0 4096 4096 NT_STATUS_OK
ReadX 10456 4096 4096 4096 NT_STATUS_OK
ReadX 10456 8192 4096 4096 NT_STATUS_OK
ReadX 10456 12288 4096 4096 NT_STATUS_OK
ReadX 10456 16384 4096 4096 NT_STATUS_OK
ReadX 10456 20480 4096 4096 NT_STATUS_OK
ReadX 10456 24576 4096 4096 NT_STATUS_OK
ReadX 10456 28672 4096 4096 NT_STATUS_OK
ReadX 10456 32768 4096 4096 NT_STATUS_OK
ReadX 10456 36864 4096 4096 NT_STATUS_OK
ReadX 10456 40960 4096 4096 NT_STATUS_OK
ReadX 10456 45056 4096 4096 NT_STATUS_OK
ReadX 10456 49152 4096 4096 NT_STATUS_OK
ReadX 10456 53248 4096 4096 NT_STATUS_OK
ReadX 10456 57344 4096 4096 NT_STATUS_OK
ReadX 10456 61440 4096 4096 NT_STATUS_OK
ReadX 10456 65536 4096 4096 NT_STATUS_OK
ReadX 10456 69632 4096 4096 NT_STATUS_OK
ReadX 10456 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10456 1004 NT_STATUS_OK
WriteX 10456 0 4096 4096 NT_STATUS_OK
Close 10456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10457 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
Close 10457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10462 NT_STATUS_OK
WriteX 10462 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10462 258 NT_STATUS_OK
WriteX 10462 0 65536 65536 NT_STATUS_OK
WriteX 10462 65536 8866 8866 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 0 4096 4096 NT_STATUS_OK
WriteX 10463 0 4096 4096 NT_STATUS_OK
Flush 10463 NT_STATUS_OK
SET_FILE_INFORMATION 10463 1004 NT_STATUS_OK
WriteX 10463 0 4096 4096 NT_STATUS_OK
Flush 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
Close 10465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
Close 10466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10467 1004 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10468 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10473 NT_STATUS_OK
WriteX 10473 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10473 258 NT_STATUS_OK
WriteX 10473 0 65536 65536 NT_STATUS_OK
WriteX 10473 65536 9298 9298 NT_STATUS_OK
Close 10473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
WriteX 10474 0 4096 4096 NT_STATUS_OK
Flush 10474 NT_STATUS_OK
SET_FILE_INFORMATION 10474 1004 NT_STATUS_OK
WriteX 10474 0 4096 4096 NT_STATUS_OK
Flush 10474 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10475 NT_STATUS_OK
SET_FILE_INFORMATION 10475 1004 NT_STATUS_OK
Close 10475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10477 NT_STATUS_OK
Close 10477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10480 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10480 0 4096 4096 NT_STATUS_OK
Close 10480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10481 4096 4096 4096 NT_STATUS_OK
ReadX 10481 8192 4096 4096 NT_STATUS_OK
ReadX 10481 12288 4096 4096 NT_STATUS_OK
ReadX 10481 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 4096 4096 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10483 NT_STATUS_OK
ReadX 10483 0 4096 4096 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10484 1004 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10487 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10490 NT_STATUS_OK
WriteX 10490 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10490 258 NT_STATUS_OK
WriteX 10490 0 65536 65536 NT_STATUS_OK
WriteX 10490 65536 11540 11540 NT_STATUS_OK
Close 10490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
WriteX 10491 0 4096 4096 NT_STATUS_OK
Flush 10491 NT_STATUS_OK
SET_FILE_INFORMATION 10491 1004 NT_STATUS_OK
WriteX 10491 0 4096 4096 NT_STATUS_OK
Flush 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10492 NT_STATUS_OK
SET_FILE_INFORMATION 10492 1004 NT_STATUS_OK
Close 10492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10494 NT_STATUS_OK
Close 10494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 61440 4096 4096 NT_STATUS_OK
ReadX 10496 126976 4096 4096 NT_STATUS_OK
WriteX 10496 0 65536 65536 NT_STATUS_OK
WriteX 10496 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 61440 4096 4096 NT_STATUS_OK
ReadX 10497 126976 4096 4096 NT_STATUS_OK
ReadX 10497 192512 4096 4096 NT_STATUS_OK
ReadX 10497 258048 4096 4096 NT_STATUS_OK
WriteX 10497 0 65536 65536 NT_STATUS_OK
WriteX 10497 65536 65536 65536 NT_STATUS_OK
WriteX 10497 131072 65536 65536 NT_STATUS_OK
WriteX 10497 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 61440 4096 4096 NT_STATUS_OK
ReadX 10498 126976 4096 4096 NT_STATUS_OK
ReadX 10498 192512 4096 4096 NT_STATUS_OK
ReadX 10498 258048 4096 4096 NT_STATUS_OK
ReadX 10498 323584 4096 4096 NT_STATUS_OK
ReadX 10498 389120 4096 4096 NT_STATUS_OK
ReadX 10498 454656 4096 4096 NT_STATUS_OK
ReadX 10498 520192 4096 4096 NT_STATUS_OK
WriteX 10498 0 65536 65536 NT_STATUS_OK
WriteX 10498 65536 65536 65536 NT_STATUS_OK
WriteX 10498 131072 65536 65536 NT_STATUS_OK
WriteX 10498 196608 65536 65536 NT_STATUS_OK
WriteX 10498 262144 65536 65536 NT_STATUS_OK
WriteX 10498 327680 65536 65536 NT_STATUS_OK
WriteX 10498 393216 65536 65536 NT_STATUS_OK
WriteX 10498 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
ReadX 10499 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10500 NT_STATUS_OK
WriteX 10500 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10500 258 NT_STATUS_OK
WriteX 10500 0 53 53 NT_STATUS_OK
Close 10500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10501 NT_STATUS_OK
Close 10501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10499 8192 4096 4096 NT_STATUS_OK
ReadX 10499 12288 4096 4096 NT_STATUS_OK
WriteX 10503 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10503 258 NT_STATUS_OK
ReadX 10499 16384 4096 4096 NT_STATUS_OK
ReadX 10499 20480 4096 4096 NT_STATUS_OK
WriteX 10503 0 15360 15360 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10504 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10505 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10507 4096 4096 4096 NT_STATUS_OK
ReadX 10507 8192 4096 4096 NT_STATUS_OK
ReadX 10507 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
ReadX 10510 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 4096 4096 NT_STATUS_OK
ReadX 10511 4096 4096 4096 NT_STATUS_OK
ReadX 10511 8192 4096 4096 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10512 NT_STATUS_OK
WriteX 10512 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10512 258 NT_STATUS_OK
WriteX 10512 0 15360 15360 NT_STATUS_OK
Close 10512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10513 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10513 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10514 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10517 NT_STATUS_OK
SET_FILE_INFORMATION 10517 1004 NT_STATUS_OK
Close 10517 NT_STATUS_OK
WriteX 10513 0 4096 4096 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
ReadX 10520 4096 4096 4096 NT_STATUS_OK
ReadX 10520 8192 4096 4096 NT_STATUS_OK
ReadX 10520 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10520 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10520 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10522 NT_STATUS_OK
WriteX 10522 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10522 258 NT_STATUS_OK
WriteX 10522 0 53 53 NT_STATUS_OK
Close 10522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10523 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10521 4096 4096 4096 NT_STATUS_OK
ReadX 10521 8192 4096 4096 NT_STATUS_OK
ReadX 10521 12288 4096 4096 NT_STATUS_OK
WriteX 10525 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10525 258 NT_STATUS_OK
WriteX 10525 0 12006 12006 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10526 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10526 1004 NT_STATUS_OK
WriteX 10526 0 4096 4096 NT_STATUS_OK
Close 10526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10530 NT_STATUS_OK
Close 10530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10529 4096 4096 4096 NT_STATUS_OK
ReadX 10529 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10532 NT_STATUS_OK
WriteX 10532 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10532 258 NT_STATUS_OK
WriteX 10532 0 11991 11991 NT_STATUS_OK
Close 10532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10533 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10533 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10536 NT_STATUS_OK
ReadX 10536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10537 NT_STATUS_OK
SET_FILE_INFORMATION 10537 1004 NT_STATUS_OK
Close 10537 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10540 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10540 1004 NT_STATUS_OK
ReadX 10540 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10540 1004 NT_STATUS_OK
WriteX 10540 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10540 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10540 1004 NT_STATUS_OK
Close 10516 NT_STATUS_OK
WriteX 10520 0 19054 19054 NT_STATUS_OK
WriteX 10540 0 12288 12288 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10545 NT_STATUS_OK
Close 10545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 61440 61440 NT_STATUS_OK
ReadX 10547 61440 4096 4096 NT_STATUS_OK
ReadX 10547 65536 61440 61440 NT_STATUS_OK
ReadX 10547 126976 4096 4096 NT_STATUS_OK
ReadX 10547 131072 61440 61440 NT_STATUS_OK
ReadX 10547 192512 4096 4096 NT_STATUS_OK
ReadX 10547 196608 61440 61440 NT_STATUS_OK
ReadX 10547 258048 4096 4096 NT_STATUS_OK
ReadX 10547 262144 61440 61440 NT_STATUS_OK
ReadX 10547 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 61440 61440 NT_STATUS_OK
ReadX 10548 61440 4096 4096 NT_STATUS_OK
ReadX 10548 65536 61440 61440 NT_STATUS_OK
ReadX 10548 126976 4096 4096 NT_STATUS_OK
ReadX 10548 131072 61440 61440 NT_STATUS_OK
ReadX 10548 192512 4096 4096 NT_STATUS_OK
ReadX 10548 196608 61440 61440 NT_STATUS_OK
ReadX 10548 258048 4096 4096 NT_STATUS_OK
ReadX 10548 262144 61440 61440 NT_STATUS_OK
ReadX 10548 323584 4096 4096 NT_STATUS_OK
ReadX 10548 327680 61440 61440 NT_STATUS_OK
ReadX 10548 389120 4096 4096 NT_STATUS_OK
ReadX 10548 393216 61440 61440 NT_STATUS_OK
ReadX 10548 454656 4096 4096 NT_STATUS_OK
ReadX 10548 458752 61440 61440 NT_STATUS_OK
ReadX 10548 520192 4096 4096 NT_STATUS_OK
ReadX 10548 524288 61440 61440 NT_STATUS_OK
ReadX 10548 585728 4096 4096 NT_STATUS_OK
ReadX 10548 589824 61440 61440 NT_STATUS_OK
ReadX 10548 651264 4096 4096 NT_STATUS_OK
ReadX 10548 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 61440 61440 NT_STATUS_OK
ReadX 10549 61440 4096 4096 NT_STATUS_OK
ReadX 10549 65536 61440 61440 NT_STATUS_OK
ReadX 10549 126976 4096 4096 NT_STATUS_OK
ReadX 10549 131072 61440 61440 NT_STATUS_OK
ReadX 10549 192512 4096 4096 NT_STATUS_OK
ReadX 10549 196608 61440 61440 NT_STATUS_OK
ReadX 10549 258048 4096 4096 NT_STATUS_OK
ReadX 10549 262144 61440 61440 NT_STATUS_OK
ReadX 10549 323584 4096 4096 NT_STATUS_OK
ReadX 10549 327680 61440 61440 NT_STATUS_OK
ReadX 10549 389120 4096 4096 NT_STATUS_OK
ReadX 10549 393216 61440 61440 NT_STATUS_OK
ReadX 10549 454656 4096 4096 NT_STATUS_OK
ReadX 10549 458752 61440 61440 NT_STATUS_OK
ReadX 10549 520192 4096 4096 NT_STATUS_OK
ReadX 10549 524288 61440 61440 NT_STATUS_OK
ReadX 10549 585728 4096 4096 NT_STATUS_OK
ReadX 10549 589824 61440 61440 NT_STATUS_OK
ReadX 10549 651264 4096 4096 NT_STATUS_OK
ReadX 10549 655360 61440 61440 NT_STATUS_OK
ReadX 10549 716800 4096 4096 NT_STATUS_OK
ReadX 10549 720896 61440 61440 NT_STATUS_OK
ReadX 10549 782336 4096 4096 NT_STATUS_OK
ReadX 10549 786432 61440 61440 NT_STATUS_OK
ReadX 10549 847872 4096 4096 NT_STATUS_OK
ReadX 10549 851968 61440 61440 NT_STATUS_OK
ReadX 10549 913408 4096 4096 NT_STATUS_OK
ReadX 10549 917504 61440 61440 NT_STATUS_OK
ReadX 10549 978944 4096 4096 NT_STATUS_OK
ReadX 10549 983040 61440 61440 NT_STATUS_OK
ReadX 10549 1044480 4096 4096 NT_STATUS_OK
ReadX 10549 1048576 61440 61440 NT_STATUS_OK
ReadX 10549 1110016 4096 4096 NT_STATUS_OK
ReadX 10549 1114112 61440 61440 NT_STATUS_OK
ReadX 10549 1175552 4096 4096 NT_STATUS_OK
ReadX 10549 1179648 61440 61440 NT_STATUS_OK
ReadX 10549 1241088 4096 4096 NT_STATUS_OK
ReadX 10549 1245184 61440 61440 NT_STATUS_OK
ReadX 10549 1306624 4096 4096 NT_STATUS_OK
ReadX 10549 1310720 61440 61440 NT_STATUS_OK
ReadX 10549 1372160 4096 4096 NT_STATUS_OK
ReadX 10549 1376256 61440 61440 NT_STATUS_OK
ReadX 10549 1437696 4096 4096 NT_STATUS_OK
ReadX 10549 1441792 61440 61440 NT_STATUS_OK
ReadX 10549 1503232 4096 4096 NT_STATUS_OK
ReadX 10549 1507328 61440 61440 NT_STATUS_OK
ReadX 10549 1568768 4096 4096 NT_STATUS_OK
ReadX 10549 1572864 61440 61440 NT_STATUS_OK
ReadX 10549 1634304 4096 4096 NT_STATUS_OK
ReadX 10549 1638400 61440 61440 NT_STATUS_OK
ReadX 10549 1699840 4096 4096 NT_STATUS_OK
ReadX 10549 1703936 61440 61440 NT_STATUS_OK
ReadX 10549 1765376 4096 4096 NT_STATUS_OK
ReadX 10549 1769472 61440 61440 NT_STATUS_OK
ReadX 10549 1830912 4096 4096 NT_STATUS_OK
ReadX 10549 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10553 NT_STATUS_OK
ReadX 10553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10554 NT_STATUS_OK
ReadX 10554 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10556 NT_STATUS_OK
QUERY_FILE_INFORMATION 10556 1004 NT_STATUS_OK
WriteX 10556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10556 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10558 NT_STATUS_OK
WriteX 10558 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10558 258 NT_STATUS_OK
WriteX 10558 0 491 491 NT_STATUS_OK
Close 10558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10559 NT_STATUS_OK
ReadX 10559 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10556 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10561 NT_STATUS_OK
Close 10561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10562 NT_STATUS_OK
WriteX 10562 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 258 NT_STATUS_OK
WriteX 10562 0 543 543 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10554 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10575 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10576 NT_STATUS_OK
QUERY_FILE_INFORMATION 10576 1004 NT_STATUS_OK
WriteX 10576 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10576 258 NT_STATUS_OK
WriteX 10576 0 2048 2048 NT_STATUS_OK
Close 10576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10577 0 4096 4096 NT_STATUS_OK
Flush 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10577 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10582 NT_STATUS_OK
WriteX 10582 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10582 258 NT_STATUS_OK
WriteX 10582 0 2048 2048 NT_STATUS_OK
Close 10582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10588 NT_STATUS_OK
WriteX 10588 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10588 258 NT_STATUS_OK
WriteX 10588 0 2048 2048 NT_STATUS_OK
Close 10588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 2048 2048 NT_STATUS_OK
ReadX 10567 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10583 0 4096 4096 NT_STATUS_OK
WriteX 10567 0 8192 8192 NT_STATUS_OK
WriteX 10568 0 4096 4096 NT_STATUS_OK
WriteX 10569 0 4096 4096 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10593 NT_STATUS_OK
QUERY_FILE_INFORMATION 10593 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10592 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10595 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10597 NT_STATUS_OK
ReadX 10597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10599 NT_STATUS_OK
ReadX 10599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10604 NT_STATUS_OK
ReadX 10604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10606 NT_STATUS_OK
ReadX 10606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10612 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10613 NT_STATUS_OK
QUERY_FILE_INFORMATION 10613 1004 NT_STATUS_OK
WriteX 10613 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10613 258 NT_STATUS_OK
WriteX 10613 0 2048 2048 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10614 NT_STATUS_OK
ReadX 10614 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10616 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10621 NT_STATUS_OK
QUERY_FILE_INFORMATION 10621 1004 NT_STATUS_OK
WriteX 10621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10621 258 NT_STATUS_OK
WriteX 10621 0 2048 2048 NT_STATUS_OK
Close 10621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10614 0 4096 4096 NT_STATUS_OK
Flush 10614 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
Flush 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10614 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10616 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10623 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10624 NT_STATUS_OK
WriteX 10624 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10624 258 NT_STATUS_OK
WriteX 10624 0 4096 4096 NT_STATUS_OK
Close 10624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10627 NT_STATUS_OK
WriteX 10627 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10627 258 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
Close 10627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10628 0 4096 4096 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10599 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10634 NT_STATUS_OK
Close 10634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10635 NT_STATUS_OK
WriteX 10635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 258 NT_STATUS_OK
WriteX 10635 0 2048 2048 NT_STATUS_OK
Close 10635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10638 NT_STATUS_OK
ReadX 10638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10640 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10647 NT_STATUS_OK
ReadX 10647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10648 NT_STATUS_OK
ReadX 10648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10650 NT_STATUS_OK
QUERY_FILE_INFORMATION 10650 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Close 10648 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Close 10647 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Close 10637 NT_STATUS_OK
Close 10638 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10652 NT_STATUS_OK
QUERY_FILE_INFORMATION 10652 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10655 NT_STATUS_OK
ReadX 10655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10656 NT_STATUS_OK
ReadX 10656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10657 NT_STATUS_OK
ReadX 10657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10663 NT_STATUS_OK
ReadX 10663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10672 NT_STATUS_OK
QUERY_FILE_INFORMATION 10672 1004 NT_STATUS_OK
WriteX 10672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10672 258 NT_STATUS_OK
WriteX 10672 0 2048 2048 NT_STATUS_OK
Close 10672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10673 NT_STATUS_OK
ReadX 10673 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10676 NT_STATUS_OK
ReadX 10676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10677 NT_STATUS_OK
ReadX 10677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10683 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10684 NT_STATUS_OK
QUERY_FILE_INFORMATION 10684 1004 NT_STATUS_OK
WriteX 10684 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10684 258 NT_STATUS_OK
WriteX 10684 0 2048 2048 NT_STATUS_OK
Close 10684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10686 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10687 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10692 NT_STATUS_OK
QUERY_FILE_INFORMATION 10692 1004 NT_STATUS_OK
WriteX 10692 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10692 258 NT_STATUS_OK
WriteX 10692 0 2048 2048 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10673 0 4096 4096 NT_STATUS_OK
Flush 10673 NT_STATUS_OK
WriteX 10685 0 4096 4096 NT_STATUS_OK
Flush 10685 NT_STATUS_OK
WriteX 10693 0 4096 4096 NT_STATUS_OK
Flush 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10673 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10685 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10675 4096 16384 16384 NT_STATUS_OK
ReadX 10655 4096 16384 16384 NT_STATUS_OK
ReadX 10687 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 2048 2048 NT_STATUS_OK
WriteX 10695 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10696 NT_STATUS_OK
QUERY_FILE_INFORMATION 10696 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10659 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Close 10676 NT_STATUS_OK
Close 10677 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Close 10664 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10662 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Close 10655 NT_STATUS_OK
Close 10656 NT_STATUS_OK
Close 10657 NT_STATUS_OK
Close 10658 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10698 NT_STATUS_OK
QUERY_FILE_INFORMATION 10698 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10700 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10705 NT_STATUS_OK
ReadX 10705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10703 4096 16384 16384 NT_STATUS_OK
WriteX 10703 0 4096 4096 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
WriteX 10705 0 4096 4096 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10713 NT_STATUS_OK
ReadX 10713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10716 NT_STATUS_OK
ReadX 10716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10719 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10720 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 8192 8192 NT_STATUS_OK
ReadX 10709 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10723 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10723 0 4096 4096 NT_STATUS_OK
ReadX 10723 4096 4096 4096 NT_STATUS_OK
ReadX 10723 8192 4096 4096 NT_STATUS_OK
WriteX 10709 0 4096 4096 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
ReadX 10724 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10703 0 4096 4096 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
WriteX 10705 0 4096 4096 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10729 NT_STATUS_OK
QUERY_FILE_INFORMATION 10729 1004 NT_STATUS_OK
WriteX 10729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10729 258 NT_STATUS_OK
WriteX 10729 0 2048 2048 NT_STATUS_OK
Close 10729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10730 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
ReadX 10732 4096 4096 4096 NT_STATUS_OK
WriteX 10732 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10730 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
ReadX 10734 4096 4096 4096 NT_STATUS_OK
WriteX 10734 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10735 NT_STATUS_OK
QUERY_FILE_INFORMATION 10735 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Close 10707 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10704 NT_STATUS_OK
Close 10705 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Close 10716 NT_STATUS_OK
Close 10717 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Close 10714 NT_STATUS_OK
Close 10711 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10737 0 4096 4096 NT_STATUS_OK
ReadX 10737 4096 4096 4096 NT_STATUS_OK
ReadX 10737 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
ReadX 10738 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10755 NT_STATUS_OK
QUERY_FILE_INFORMATION 10755 1004 NT_STATUS_OK
WriteX 10755 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10755 258 NT_STATUS_OK
WriteX 10755 0 2048 2048 NT_STATUS_OK
Close 10755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10756 NT_STATUS_OK
ReadX 10756 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10761 NT_STATUS_OK
QUERY_FILE_INFORMATION 10761 1004 NT_STATUS_OK
WriteX 10761 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10761 258 NT_STATUS_OK
WriteX 10761 0 2048 2048 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10762 NT_STATUS_OK
ReadX 10762 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10762 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10745 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10763 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10765 NT_STATUS_OK
QUERY_FILE_INFORMATION 10765 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 61440 4096 4096 NT_STATUS_OK
ReadX 10767 126976 4096 4096 NT_STATUS_OK
WriteX 10767 0 65536 65536 NT_STATUS_OK
WriteX 10767 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 61440 4096 4096 NT_STATUS_OK
ReadX 10768 126976 4096 4096 NT_STATUS_OK
ReadX 10768 192512 4096 4096 NT_STATUS_OK
ReadX 10768 258048 4096 4096 NT_STATUS_OK
WriteX 10768 0 65536 65536 NT_STATUS_OK
WriteX 10768 65536 65536 65536 NT_STATUS_OK
WriteX 10768 131072 65536 65536 NT_STATUS_OK
WriteX 10768 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 61440 4096 4096 NT_STATUS_OK
ReadX 10769 126976 4096 4096 NT_STATUS_OK
ReadX 10769 192512 4096 4096 NT_STATUS_OK
ReadX 10769 258048 4096 4096 NT_STATUS_OK
ReadX 10769 323584 4096 4096 NT_STATUS_OK
ReadX 10769 389120 4096 4096 NT_STATUS_OK
ReadX 10769 454656 4096 4096 NT_STATUS_OK
ReadX 10769 520192 4096 4096 NT_STATUS_OK
WriteX 10769 0 65536 65536 NT_STATUS_OK
WriteX 10769 65536 65536 65536 NT_STATUS_OK
WriteX 10769 131072 65536 65536 NT_STATUS_OK
WriteX 10769 196608 65536 65536 NT_STATUS_OK
WriteX 10769 262144 65536 65536 NT_STATUS_OK
WriteX 10769 327680 65536 65536 NT_STATUS_OK
WriteX 10769 393216 65536 65536 NT_STATUS_OK
WriteX 10769 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10770 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10770 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10770 8192 4096 4096 NT_STATUS_OK
ReadX 10770 12288 4096 4096 NT_STATUS_OK
ReadX 10770 16384 4096 4096 NT_STATUS_OK
ReadX 10770 20480 4096 4096 NT_STATUS_OK
ReadX 10770 24576 4096 4096 NT_STATUS_OK
ReadX 10770 28672 4096 4096 NT_STATUS_OK
ReadX 10770 32768 4096 4096 NT_STATUS_OK
ReadX 10770 36864 4096 4096 NT_STATUS_OK
ReadX 10770 40960 4096 4096 NT_STATUS_OK
ReadX 10770 45056 4096 4096 NT_STATUS_OK
ReadX 10770 49152 4096 4096 NT_STATUS_OK
ReadX 10770 53248 4096 4096 NT_STATUS_OK
ReadX 10770 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10770 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10767 NT_STATUS_OK
Close 10768 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10773 NT_STATUS_OK
WriteX 10773 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10773 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10773 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10773 1004 NT_STATUS_OK
WriteX 10773 0 57088 57088 NT_STATUS_OK
WriteX 10773 0 4096 4096 NT_STATUS_OK
Flush 10773 NT_STATUS_OK
Close 10770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10774 NT_STATUS_OK
SET_FILE_INFORMATION 10774 1004 NT_STATUS_OK
Close 10774 NT_STATUS_OK
SET_FILE_INFORMATION 10773 1004 NT_STATUS_OK
WriteX 10773 0 4096 4096 NT_STATUS_OK
Close 10773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10777 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10778 NT_STATUS_OK
WriteX 10778 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10778 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10778 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10778 1004 NT_STATUS_OK
WriteX 10778 0 51456 51456 NT_STATUS_OK
WriteX 10778 0 4096 4096 NT_STATUS_OK
Flush 10778 NT_STATUS_OK
SET_FILE_INFORMATION 10778 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10778 1004 NT_STATUS_OK
WriteX 10778 0 4096 4096 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Close 10777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10782 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10787 NT_STATUS_OK
WriteX 10787 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 258 NT_STATUS_OK
WriteX 10787 0 53077 53077 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10788 NT_STATUS_OK
WriteX 10788 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10788 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
WriteX 10788 0 65536 65536 NT_STATUS_OK
WriteX 10788 65536 1856 1856 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
Flush 10788 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10797 NT_STATUS_OK
WriteX 10797 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10797 258 NT_STATUS_OK
WriteX 10797 0 7983 7983 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10802 NT_STATUS_OK
WriteX 10802 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 258 NT_STATUS_OK
WriteX 10802 0 65536 65536 NT_STATUS_OK
WriteX 10802 65536 65536 65536 NT_STATUS_OK
WriteX 10802 131072 65536 65536 NT_STATUS_OK
WriteX 10802 196608 65536 65536 NT_STATUS_OK
WriteX 10802 262144 65536 65536 NT_STATUS_OK
WriteX 10802 327680 65536 65536 NT_STATUS_OK
WriteX 10802 393216 65536 65536 NT_STATUS_OK
WriteX 10802 458752 46731 46731 NT_STATUS_OK
Close 10802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10803 NT_STATUS_OK
WriteX 10803 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10803 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10792 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10803 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
WriteX 10803 0 65536 65536 NT_STATUS_OK
WriteX 10803 65536 22848 22848 NT_STATUS_OK
WriteX 10803 0 4096 4096 NT_STATUS_OK
Flush 10803 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
WriteX 10803 0 4096 4096 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10807 NT_STATUS_OK
ReadX 10807 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10807 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10808 NT_STATUS_OK
ReadX 10808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10808 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10808 1004 NT_STATUS_OK
ReadX 10808 8192 4096 4096 NT_STATUS_OK
ReadX 10808 12288 4096 4096 NT_STATUS_OK
ReadX 10808 16384 4096 4096 NT_STATUS_OK
ReadX 10808 20480 4096 4096 NT_STATUS_OK
ReadX 10808 24576 4096 4096 NT_STATUS_OK
ReadX 10808 28672 4096 4096 NT_STATUS_OK
ReadX 10808 32768 4096 4096 NT_STATUS_OK
ReadX 10808 36864 4096 4096 NT_STATUS_OK
ReadX 10808 40960 4096 4096 NT_STATUS_OK
ReadX 10808 45056 4096 4096 NT_STATUS_OK
ReadX 10808 49152 4096 4096 NT_STATUS_OK
ReadX 10808 53248 4096 4096 NT_STATUS_OK
ReadX 10808 57344 4096 4096 NT_STATUS_OK
ReadX 10808 61440 4096 4096 NT_STATUS_OK
ReadX 10808 65536 4096 4096 NT_STATUS_OK
ReadX 10808 69632 4096 4096 NT_STATUS_OK
ReadX 10808 73728 4096 4096 NT_STATUS_OK
ReadX 10808 77824 4096 4096 NT_STATUS_OK
ReadX 10808 81920 4096 4096 NT_STATUS_OK
ReadX 10808 86016 4096 4096 NT_STATUS_OK
ReadX 10808 90112 4096 4096 NT_STATUS_OK
ReadX 10808 94208 4096 4096 NT_STATUS_OK
ReadX 10808 98304 4096 4096 NT_STATUS_OK
ReadX 10808 102400 4096 4096 NT_STATUS_OK
ReadX 10808 106496 4096 4096 NT_STATUS_OK
ReadX 10808 110592 4096 4096 NT_STATUS_OK
ReadX 10808 114688 4096 4096 NT_STATUS_OK
ReadX 10808 118784 4096 4096 NT_STATUS_OK
ReadX 10808 122880 4096 4096 NT_STATUS_OK
ReadX 10808 126976 4096 4096 NT_STATUS_OK
ReadX 10808 131072 4096 4096 NT_STATUS_OK
ReadX 10808 135168 4096 4096 NT_STATUS_OK
ReadX 10808 139264 4096 4096 NT_STATUS_OK
ReadX 10808 143360 4096 4096 NT_STATUS_OK
ReadX 10808 147456 4096 4096 NT_STATUS_OK
ReadX 10808 151552 4096 4096 NT_STATUS_OK
ReadX 10808 155648 4096 4096 NT_STATUS_OK
ReadX 10808 159744 4096 4096 NT_STATUS_OK
ReadX 10808 163840 4096 4096 NT_STATUS_OK
ReadX 10808 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10808 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10809 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10811 NT_STATUS_OK
WriteX 10811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 258 NT_STATUS_OK
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10812 NT_STATUS_OK
SET_FILE_INFORMATION 10812 1004 NT_STATUS_OK
Close 10812 NT_STATUS_OK
WriteX 10811 0 42388 42388 NT_STATUS_OK
Close 10811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 0 4096 4096 NT_STATUS_OK
ReadX 10815 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10816 NT_STATUS_OK
WriteX 10816 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 258 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 42652 42652 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10818 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
ReadX 10820 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10825 NT_STATUS_OK
WriteX 10825 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 258 NT_STATUS_OK
WriteX 10825 0 65536 65536 NT_STATUS_OK
WriteX 10825 65536 49 49 NT_STATUS_OK
Close 10825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 61440 61440 NT_STATUS_OK
ReadX 10826 61440 4096 4096 NT_STATUS_OK
ReadX 10826 65536 61440 61440 NT_STATUS_OK
ReadX 10826 126976 4096 4096 NT_STATUS_OK
ReadX 10826 131072 61440 61440 NT_STATUS_OK
ReadX 10826 192512 4096 4096 NT_STATUS_OK
ReadX 10826 196608 61440 61440 NT_STATUS_OK
ReadX 10826 258048 4096 4096 NT_STATUS_OK
ReadX 10826 262144 61440 61440 NT_STATUS_OK
ReadX 10826 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 61440 61440 NT_STATUS_OK
ReadX 10827 61440 4096 4096 NT_STATUS_OK
ReadX 10827 65536 61440 61440 NT_STATUS_OK
ReadX 10827 126976 4096 4096 NT_STATUS_OK
ReadX 10827 131072 61440 61440 NT_STATUS_OK
ReadX 10827 192512 4096 4096 NT_STATUS_OK
ReadX 10827 196608 61440 61440 NT_STATUS_OK
ReadX 10827 258048 4096 4096 NT_STATUS_OK
ReadX 10827 262144 61440 61440 NT_STATUS_OK
ReadX 10827 323584 4096 4096 NT_STATUS_OK
ReadX 10827 327680 61440 61440 NT_STATUS_OK
ReadX 10827 389120 4096 4096 NT_STATUS_OK
ReadX 10827 393216 61440 61440 NT_STATUS_OK
ReadX 10827 454656 4096 4096 NT_STATUS_OK
ReadX 10827 458752 61440 61440 NT_STATUS_OK
ReadX 10827 520192 4096 4096 NT_STATUS_OK
ReadX 10827 524288 61440 61440 NT_STATUS_OK
ReadX 10827 585728 4096 4096 NT_STATUS_OK
ReadX 10827 589824 61440 61440 NT_STATUS_OK
ReadX 10827 651264 4096 4096 NT_STATUS_OK
ReadX 10827 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 61440 61440 NT_STATUS_OK
ReadX 10828 61440 4096 4096 NT_STATUS_OK
ReadX 10828 65536 61440 61440 NT_STATUS_OK
ReadX 10828 126976 4096 4096 NT_STATUS_OK
ReadX 10828 131072 61440 61440 NT_STATUS_OK
ReadX 10828 192512 4096 4096 NT_STATUS_OK
ReadX 10828 196608 61440 61440 NT_STATUS_OK
ReadX 10828 258048 4096 4096 NT_STATUS_OK
ReadX 10828 262144 61440 61440 NT_STATUS_OK
ReadX 10828 323584 4096 4096 NT_STATUS_OK
ReadX 10828 327680 61440 61440 NT_STATUS_OK
ReadX 10828 389120 4096 4096 NT_STATUS_OK
ReadX 10828 393216 61440 61440 NT_STATUS_OK
ReadX 10828 454656 4096 4096 NT_STATUS_OK
ReadX 10828 458752 61440 61440 NT_STATUS_OK
ReadX 10828 520192 4096 4096 NT_STATUS_OK
ReadX 10828 524288 61440 61440 NT_STATUS_OK
ReadX 10828 585728 4096 4096 NT_STATUS_OK
ReadX 10828 589824 61440 61440 NT_STATUS_OK
ReadX 10828 651264 4096 4096 NT_STATUS_OK
ReadX 10828 655360 61440 61440 NT_STATUS_OK
ReadX 10828 716800 4096 4096 NT_STATUS_OK
ReadX 10828 720896 61440 61440 NT_STATUS_OK
ReadX 10828 782336 4096 4096 NT_STATUS_OK
ReadX 10828 786432 61440 61440 NT_STATUS_OK
ReadX 10828 847872 4096 4096 NT_STATUS_OK
ReadX 10828 851968 61440 61440 NT_STATUS_OK
ReadX 10828 913408 4096 4096 NT_STATUS_OK
ReadX 10828 917504 61440 61440 NT_STATUS_OK
ReadX 10828 978944 4096 4096 NT_STATUS_OK
ReadX 10828 983040 61440 61440 NT_STATUS_OK
ReadX 10828 1044480 4096 4096 NT_STATUS_OK
ReadX 10828 1048576 61440 61440 NT_STATUS_OK
ReadX 10828 1110016 4096 4096 NT_STATUS_OK
ReadX 10828 1114112 61440 61440 NT_STATUS_OK
ReadX 10828 1175552 4096 4096 NT_STATUS_OK
ReadX 10828 1179648 61440 61440 NT_STATUS_OK
ReadX 10828 1241088 4096 4096 NT_STATUS_OK
ReadX 10828 1245184 61440 61440 NT_STATUS_OK
ReadX 10828 1306624 4096 4096 NT_STATUS_OK
ReadX 10828 1310720 61440 61440 NT_STATUS_OK
ReadX 10828 1372160 4096 4096 NT_STATUS_OK
ReadX 10828 1376256 61440 61440 NT_STATUS_OK
ReadX 10828 1437696 4096 4096 NT_STATUS_OK
ReadX 10828 1441792 61440 61440 NT_STATUS_OK
ReadX 10828 1503232 4096 4096 NT_STATUS_OK
ReadX 10828 1507328 61440 61440 NT_STATUS_OK
ReadX 10828 1568768 4096 4096 NT_STATUS_OK
ReadX 10828 1572864 61440 61440 NT_STATUS_OK
ReadX 10828 1634304 4096 4096 NT_STATUS_OK
ReadX 10828 1638400 61440 61440 NT_STATUS_OK
ReadX 10828 1699840 4096 4096 NT_STATUS_OK
ReadX 10828 1703936 61440 61440 NT_STATUS_OK
ReadX 10828 1765376 4096 4096 NT_STATUS_OK
ReadX 10828 1769472 61440 61440 NT_STATUS_OK
ReadX 10828 1830912 4096 4096 NT_STATUS_OK
ReadX 10828 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10830 NT_STATUS_OK
QUERY_FILE_INFORMATION 10830 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10830 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10830 1005 NT_STATUS_OK
ReadX 10830 2156 24 24 NT_STATUS_OK
ReadX 10830 2139 276 276 NT_STATUS_OK
ReadX 10830 2136 14 14 NT_STATUS_OK
ReadX 10830 2136 7 7 NT_STATUS_OK
ReadX 10830 2138 12 12 NT_STATUS_OK
ReadX 10830 2137 8 8 NT_STATUS_OK
ReadX 10830 2135 15 15 NT_STATUS_OK
ReadX 10830 0 16 16 NT_STATUS_OK
ReadX 10830 16 2048 2048 NT_STATUS_OK
ReadX 10830 2064 2048 2048 NT_STATUS_OK
ReadX 10830 257 2048 2048 NT_STATUS_OK
ReadX 10830 385 2048 2048 NT_STATUS_OK
ReadX 10830 513 2048 2048 NT_STATUS_OK
ReadX 10830 641 2048 2048 NT_STATUS_OK
ReadX 10830 769 2048 2048 NT_STATUS_OK
ReadX 10830 897 2048 2048 NT_STATUS_OK
ReadX 10830 1025 2048 2048 NT_STATUS_OK
ReadX 10830 1153 2048 2048 NT_STATUS_OK
ReadX 10830 1281 2048 2048 NT_STATUS_OK
ReadX 10830 1409 2048 2048 NT_STATUS_OK
ReadX 10830 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10835 NT_STATUS_OK
WriteX 10835 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10835 258 NT_STATUS_OK
WriteX 10835 0 10575 10575 NT_STATUS_OK
Flush 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10836 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10840 NT_STATUS_OK
LockX 10840 2147483538 1 NT_STATUS_OK
UnlockX 10840 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 1005 NT_STATUS_OK
ReadX 10840 0 512 512 NT_STATUS_OK
ReadX 10840 512 512 512 NT_STATUS_OK
ReadX 10840 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 1004 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10841 NT_STATUS_OK
QUERY_FILE_INFORMATION 10841 1005 NT_STATUS_OK
ReadX 10841 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10842 NT_STATUS_OK
LockX 10842 2147483538 1 NT_STATUS_OK
UnlockX 10842 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10842 1005 NT_STATUS_OK
ReadX 10842 0 512 512 NT_STATUS_OK
ReadX 10842 512 512 512 NT_STATUS_OK
ReadX 10842 1024 512 512 NT_STATUS_OK
ReadX 10842 288 20 20 NT_STATUS_OK
ReadX 10842 308 2084 2084 NT_STATUS_OK
ReadX 10842 388 2084 2084 NT_STATUS_OK
ReadX 10842 388 2084 2084 NT_STATUS_OK
ReadX 10829 2157 1386 1386 NT_STATUS_OK
ReadX 10842 2472 399 399 NT_STATUS_OK
ReadX 10842 3072 1536 1536 NT_STATUS_OK
ReadX 10842 544 149 149 NT_STATUS_OK
ReadX 10842 693 485 485 NT_STATUS_OK
Close 10842 NT_STATUS_OK
ReadX 10829 2157 4096 4096 NT_STATUS_OK
ReadX 10829 6253 4096 4096 NT_STATUS_OK
ReadX 10829 10349 4096 4096 NT_STATUS_OK
ReadX 10829 14445 4096 4096 NT_STATUS_OK
ReadX 10829 18541 4096 4096 NT_STATUS_OK
ReadX 10829 22637 256 256 NT_STATUS_OK
ReadX 10829 22893 4096 4096 NT_STATUS_OK
ReadX 10829 26989 4096 4096 NT_STATUS_OK
ReadX 10829 31085 4096 4096 NT_STATUS_OK
ReadX 10829 35181 4096 4096 NT_STATUS_OK
ReadX 10829 39277 4096 4096 NT_STATUS_OK
ReadX 10829 43373 4096 4096 NT_STATUS_OK
ReadX 10829 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10829 2157 1024 1024 NT_STATUS_OK
ReadX 10829 1667 4688 4688 NT_STATUS_OK
ReadX 10829 6355 3516 3516 NT_STATUS_OK
ReadX 10829 9871 16384 16384 NT_STATUS_OK
ReadX 10829 26255 3771 3771 NT_STATUS_OK
ReadX 10829 30026 2048 2048 NT_STATUS_OK
ReadX 10829 32074 1024 1024 NT_STATUS_OK
ReadX 10829 33098 6652 6652 NT_STATUS_OK
ReadX 10829 39750 16384 16384 NT_STATUS_OK
ReadX 10829 56134 10496 10496 NT_STATUS_OK
ReadX 10829 66630 1784 1784 NT_STATUS_OK
ReadX 10829 68414 90 90 NT_STATUS_OK
ReadX 10829 68504 273 273 NT_STATUS_OK
ReadX 10829 68777 1600 1600 NT_STATUS_OK
ReadX 10829 70377 640 640 NT_STATUS_OK
ReadX 10829 71017 1280 1280 NT_STATUS_OK
ReadX 10829 72297 8464 8464 NT_STATUS_OK
ReadX 10829 80761 158 158 NT_STATUS_OK
ReadX 10829 80919 912 912 NT_STATUS_OK
ReadX 10829 81831 1980 1980 NT_STATUS_OK
ReadX 10829 83811 2256 2256 NT_STATUS_OK
ReadX 10829 86067 400 400 NT_STATUS_OK
ReadX 10829 86467 252 252 NT_STATUS_OK
ReadX 10829 86719 42 42 NT_STATUS_OK
ReadX 10829 86761 725 725 NT_STATUS_OK
ReadX 10829 2009 512 512 NT_STATUS_OK
ReadX 10829 3895 9 9 NT_STATUS_OK
ReadX 10829 3781 46 46 NT_STATUS_OK
ReadX 10829 4059 92 92 NT_STATUS_OK
ReadX 10829 3781 92 92 NT_STATUS_OK
ReadX 10829 3986 184 184 NT_STATUS_OK
ReadX 10829 3987 16384 16384 NT_STATUS_OK
ReadX 10829 3902 16384 16384 NT_STATUS_OK
ReadX 10829 3781 10240 10240 NT_STATUS_OK
ReadX 10829 3821 16384 16384 NT_STATUS_OK
ReadX 10829 3891 935 935 NT_STATUS_OK
ReadX 10829 4060 10240 10240 NT_STATUS_OK
ReadX 10829 4059 184 184 NT_STATUS_OK
ReadX 10829 256 184 184 NT_STATUS_OK
ReadX 10829 256 1026 1026 NT_STATUS_OK
ReadX 10829 3901 326 326 NT_STATUS_OK
ReadX 10829 3899 652 652 NT_STATUS_OK
ReadX 10829 256 2 2 NT_STATUS_OK
ReadX 10829 258 4948 4948 NT_STATUS_OK
Close 10829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10847 NT_STATUS_OK
WriteX 10847 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 258 NT_STATUS_OK
WriteX 10847 0 65536 65536 NT_STATUS_OK
WriteX 10847 65536 65536 65536 NT_STATUS_OK
WriteX 10847 131072 65536 65536 NT_STATUS_OK
WriteX 10847 196608 65536 65536 NT_STATUS_OK
WriteX 10847 262144 65536 65536 NT_STATUS_OK
WriteX 10847 327680 65536 65536 NT_STATUS_OK
WriteX 10847 393216 65536 65536 NT_STATUS_OK
WriteX 10847 458752 65536 65536 NT_STATUS_OK
WriteX 10847 524288 65536 65536 NT_STATUS_OK
WriteX 10847 589824 35257 35257 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10849 NT_STATUS_OK
Close 10849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10852 NT_STATUS_OK
WriteX 10852 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 258 NT_STATUS_OK
WriteX 10852 0 65536 65536 NT_STATUS_OK
WriteX 10852 65536 65536 65536 NT_STATUS_OK
WriteX 10852 131072 65536 65536 NT_STATUS_OK
WriteX 10852 196608 65536 65536 NT_STATUS_OK
WriteX 10852 262144 65536 65536 NT_STATUS_OK
WriteX 10852 327680 65536 65536 NT_STATUS_OK
WriteX 10852 393216 65536 65536 NT_STATUS_OK
WriteX 10852 458752 65536 65536 NT_STATUS_OK
WriteX 10852 524288 65536 65536 NT_STATUS_OK
WriteX 10852 589824 57598 57598 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10854 NT_STATUS_OK
WriteX 10854 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10854 258 NT_STATUS_OK
WriteX 10854 0 12543 12543 NT_STATUS_OK
Flush 10854 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10856 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10858 NT_STATUS_OK
ReadX 10858 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10860 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 1005 NT_STATUS_OK
ReadX 10860 1938 24 24 NT_STATUS_OK
ReadX 10860 1920 276 276 NT_STATUS_OK
ReadX 10860 1918 14 14 NT_STATUS_OK
ReadX 10860 1918 7 7 NT_STATUS_OK
ReadX 10860 1919 12 12 NT_STATUS_OK
ReadX 10860 1919 8 8 NT_STATUS_OK
ReadX 10860 1917 15 15 NT_STATUS_OK
ReadX 10860 0 16 16 NT_STATUS_OK
ReadX 10860 16 2048 2048 NT_STATUS_OK
ReadX 10860 2064 2048 2048 NT_STATUS_OK
ReadX 10860 257 2048 2048 NT_STATUS_OK
ReadX 10860 385 2048 2048 NT_STATUS_OK
ReadX 10860 513 2048 2048 NT_STATUS_OK
ReadX 10860 641 2048 2048 NT_STATUS_OK
ReadX 10860 769 2048 2048 NT_STATUS_OK
ReadX 10860 897 2048 2048 NT_STATUS_OK
ReadX 10860 1025 2048 2048 NT_STATUS_OK
ReadX 10860 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10865 NT_STATUS_OK
WriteX 10865 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 11588 11588 NT_STATUS_OK
Flush 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10870 NT_STATUS_OK
WriteX 10870 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10870 258 NT_STATUS_OK
WriteX 10870 0 11615 11615 NT_STATUS_OK
Flush 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10879 NT_STATUS_OK
WriteX 10879 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 65536 65536 NT_STATUS_OK
WriteX 10879 65536 16050 16050 NT_STATUS_OK
Close 10879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10859 1939 64 64 NT_STATUS_OK
ReadX 10859 128 248 248 NT_STATUS_OK
ReadX 10859 128 568 568 NT_STATUS_OK
ReadX 10859 3872 1536 1536 NT_STATUS_OK
ReadX 10859 3456 2560 2560 NT_STATUS_OK
ReadX 10859 3136 512 512 NT_STATUS_OK
ReadX 10859 2880 4096 4096 NT_STATUS_OK
ReadX 10859 3264 3072 3072 NT_STATUS_OK
ReadX 10859 320 4096 4096 NT_STATUS_OK
ReadX 10859 1024 4096 4096 NT_STATUS_OK
ReadX 10859 3616 4096 4096 NT_STATUS_OK
ReadX 10859 1939 64 64 NT_STATUS_OK
ReadX 10859 128 248 248 NT_STATUS_OK
ReadX 10859 128 608 608 NT_STATUS_OK
ReadX 10859 2858 1024 1024 NT_STATUS_OK
ReadX 10859 2810 4096 4096 NT_STATUS_OK
ReadX 10859 2826 4096 4096 NT_STATUS_OK
ReadX 10859 2580 2048 2048 NT_STATUS_OK
ReadX 10859 2800 2560 2560 NT_STATUS_OK
ReadX 10859 2100 4096 4096 NT_STATUS_OK
ReadX 10859 2084 4096 4096 NT_STATUS_OK
ReadX 10859 868 4096 4096 NT_STATUS_OK
ReadX 10859 2324 4096 4096 NT_STATUS_OK
ReadX 10859 884 4096 4096 NT_STATUS_OK
ReadX 10859 2604 1024 1024 NT_STATUS_OK
ReadX 10859 580 4096 4096 NT_STATUS_OK
ReadX 10859 596 4096 4096 NT_STATUS_OK
ReadX 10859 2752 4096 4096 NT_STATUS_OK
ReadX 10859 2842 1024 1024 NT_STATUS_OK
ReadX 10859 660 4096 4096 NT_STATUS_OK
ReadX 10859 2720 4096 4096 NT_STATUS_OK
ReadX 10859 2736 4096 4096 NT_STATUS_OK
ReadX 10859 628 4096 4096 NT_STATUS_OK
ReadX 10859 2704 4096 4096 NT_STATUS_OK
ReadX 10859 1556 4096 4096 NT_STATUS_OK
ReadX 10859 576 4096 4096 NT_STATUS_OK
ReadX 10859 3168 1536 1536 NT_STATUS_OK
ReadX 10859 832 4096 4096 NT_STATUS_OK
ReadX 10859 1088 4096 4096 NT_STATUS_OK
ReadX 10859 1344 4096 4096 NT_STATUS_OK
ReadX 10859 1600 4096 4096 NT_STATUS_OK
ReadX 10859 1856 4096 4096 NT_STATUS_OK
ReadX 10859 2112 4096 4096 NT_STATUS_OK
ReadX 10859 1892 4096 4096 NT_STATUS_OK
ReadX 10859 820 4096 4096 NT_STATUS_OK
ReadX 10859 788 4096 4096 NT_STATUS_OK
ReadX 10859 1604 4096 4096 NT_STATUS_OK
ReadX 10859 3648 4096 4096 NT_STATUS_OK
ReadX 10859 2608 4096 4096 NT_STATUS_OK
ReadX 10859 548 4096 4096 NT_STATUS_OK
ReadX 10859 740 4096 4096 NT_STATUS_OK
ReadX 10859 1344 4096 4096 NT_STATUS_OK
ReadX 10859 3392 4096 4096 NT_STATUS_OK
ReadX 10859 3904 4096 4096 NT_STATUS_OK
ReadX 10859 644 4096 4096 NT_STATUS_OK
ReadX 10859 676 4096 4096 NT_STATUS_OK
ReadX 10859 2688 4096 4096 NT_STATUS_OK
ReadX 10859 320 4096 4096 NT_STATUS_OK
ReadX 10859 900 4096 4096 NT_STATUS_OK
ReadX 10859 1908 4096 4096 NT_STATUS_OK
ReadX 10859 852 4096 4096 NT_STATUS_OK
ReadX 10859 724 4096 4096 NT_STATUS_OK
ReadX 10859 2292 4096 4096 NT_STATUS_OK
ReadX 10859 612 4096 4096 NT_STATUS_OK
ReadX 10859 388 4096 4096 NT_STATUS_OK
ReadX 10859 2368 4096 4096 NT_STATUS_OK
ReadX 10859 2624 4096 4096 NT_STATUS_OK
ReadX 10859 500 4096 4096 NT_STATUS_OK
ReadX 10859 356 4096 4096 NT_STATUS_OK
ReadX 10859 1024 4096 4096 NT_STATUS_OK
ReadX 10859 576 4096 4096 NT_STATUS_OK
ReadX 10859 340 4096 4096 NT_STATUS_OK
ReadX 10859 420 4096 4096 NT_STATUS_OK
ReadX 10859 1600 4096 4096 NT_STATUS_OK
ReadX 10859 404 4096 4096 NT_STATUS_OK
ReadX 10859 1428 4096 4096 NT_STATUS_OK
ReadX 10859 2656 4096 4096 NT_STATUS_OK
ReadX 10859 2624 4096 4096 NT_STATUS_OK
ReadX 10859 452 4096 4096 NT_STATUS_OK
ReadX 10859 692 4096 4096 NT_STATUS_OK
ReadX 10859 564 4096 4096 NT_STATUS_OK
ReadX 10859 372 4096 4096 NT_STATUS_OK
ReadX 10859 468 4096 4096 NT_STATUS_OK
ReadX 10859 484 4096 4096 NT_STATUS_OK
ReadX 10859 1088 4096 4096 NT_STATUS_OK
ReadX 10859 1924 4096 4096 NT_STATUS_OK
ReadX 10859 2768 4096 4096 NT_STATUS_OK
ReadX 10859 832 4096 4096 NT_STATUS_OK
ReadX 10859 836 4096 4096 NT_STATUS_OK
ReadX 10859 1856 4096 4096 NT_STATUS_OK
ReadX 10859 2640 4096 4096 NT_STATUS_OK
ReadX 10859 436 4096 4096 NT_STATUS_OK
ReadX 10859 1828 4096 4096 NT_STATUS_OK
ReadX 10859 804 4096 4096 NT_STATUS_OK
ReadX 10859 1860 4096 4096 NT_STATUS_OK
ReadX 10859 1812 4096 4096 NT_STATUS_OK
ReadX 10859 756 4096 4096 NT_STATUS_OK
ReadX 10859 1636 4096 4096 NT_STATUS_OK
ReadX 10859 772 4096 4096 NT_STATUS_OK
ReadX 10859 2036 4096 4096 NT_STATUS_OK
ReadX 10859 1220 4096 4096 NT_STATUS_OK
ReadX 10859 1652 4096 4096 NT_STATUS_OK
ReadX 10859 2588 4096 4096 NT_STATUS_OK
ReadX 10859 916 4096 4096 NT_STATUS_OK
ReadX 10859 260 4096 4096 NT_STATUS_OK
ReadX 10859 932 4096 4096 NT_STATUS_OK
ReadX 10859 2624 4096 4096 NT_STATUS_OK
ReadX 10859 308 4096 4096 NT_STATUS_OK
ReadX 10859 292 4096 4096 NT_STATUS_OK
ReadX 10859 1140 4096 4096 NT_STATUS_OK
ReadX 10859 276 4096 4096 NT_STATUS_OK
ReadX 10859 2020 4096 4096 NT_STATUS_OK
ReadX 10859 2880 4096 4096 NT_STATUS_OK
ReadX 10859 516 4096 4096 NT_STATUS_OK
ReadX 10859 1844 4096 4096 NT_STATUS_OK
ReadX 10859 1124 4096 4096 NT_STATUS_OK
ReadX 10859 3136 4096 4096 NT_STATUS_OK
ReadX 10859 324 4096 4096 NT_STATUS_OK
ReadX 10859 1156 4096 4096 NT_STATUS_OK
ReadX 10859 1172 4096 4096 NT_STATUS_OK
ReadX 10859 2112 4096 4096 NT_STATUS_OK
ReadX 10859 2368 4096 4096 NT_STATUS_OK
ReadX 10859 964 4096 4096 NT_STATUS_OK
ReadX 10859 980 4096 4096 NT_STATUS_OK
ReadX 10859 1012 4096 4096 NT_STATUS_OK
ReadX 10859 532 4096 4096 NT_STATUS_OK
ReadX 10859 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10859 1620 4096 4096 NT_STATUS_OK
ReadX 10859 1604 4096 4096 NT_STATUS_OK
ReadX 10859 2116 4096 4096 NT_STATUS_OK
ReadX 10859 2132 4096 4096 NT_STATUS_OK
ReadX 10859 2148 4096 4096 NT_STATUS_OK
ReadX 10859 2276 4096 4096 NT_STATUS_OK
ReadX 10859 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10884 NT_STATUS_OK
QUERY_FILE_INFORMATION 10839 1004 NT_STATUS_OK
Close 10839 NT_STATUS_OK
WriteX 10884 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10884 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10841 1004 NT_STATUS_OK
Close 10841 NT_STATUS_OK
WriteX 10884 0 65536 65536 NT_STATUS_OK
WriteX 10884 65536 64850 64850 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10886 NT_STATUS_OK
WriteX 10886 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10886 258 NT_STATUS_OK
ReadX 10859 2068 4096 4096 NT_STATUS_OK
ReadX 10859 1588 4096 4096 NT_STATUS_OK
ReadX 10859 1572 4096 4096 NT_STATUS_OK
WriteX 10886 0 18630 18630 NT_STATUS_OK
Flush 10886 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10888 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10859 612 4096 4096 NT_STATUS_OK
ReadX 10859 564 4096 4096 NT_STATUS_OK
ReadX 10859 1876 4096 4096 NT_STATUS_OK
ReadX 10859 628 4096 4096 NT_STATUS_OK
ReadX 10859 740 4096 4096 NT_STATUS_OK
ReadX 10859 724 4096 4096 NT_STATUS_OK
ReadX 10859 644 4096 4096 NT_STATUS_OK
ReadX 10859 2324 4096 4096 NT_STATUS_OK
ReadX 10859 660 4096 4096 NT_STATUS_OK
ReadX 10859 852 4096 4096 NT_STATUS_OK
ReadX 10859 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10859 2368 4096 4096 NT_STATUS_OK
ReadX 10859 1024 4096 4096 NT_STATUS_OK
ReadX 10859 320 4096 4096 NT_STATUS_OK
ReadX 10859 580 4096 4096 NT_STATUS_OK
ReadX 10859 3136 512 512 NT_STATUS_OK
ReadX 10859 2880 4096 4096 NT_STATUS_OK
Close 10859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 61440 4096 4096 NT_STATUS_OK
ReadX 10891 126976 4096 4096 NT_STATUS_OK
WriteX 10891 0 65536 65536 NT_STATUS_OK
WriteX 10891 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 61440 4096 4096 NT_STATUS_OK
ReadX 10892 126976 4096 4096 NT_STATUS_OK
ReadX 10892 192512 4096 4096 NT_STATUS_OK
ReadX 10892 258048 4096 4096 NT_STATUS_OK
WriteX 10892 0 65536 65536 NT_STATUS_OK
WriteX 10892 65536 65536 65536 NT_STATUS_OK
WriteX 10892 131072 65536 65536 NT_STATUS_OK
WriteX 10892 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 61440 4096 4096 NT_STATUS_OK
ReadX 10893 126976 4096 4096 NT_STATUS_OK
ReadX 10893 192512 4096 4096 NT_STATUS_OK
ReadX 10893 258048 4096 4096 NT_STATUS_OK
ReadX 10893 323584 4096 4096 NT_STATUS_OK
ReadX 10893 389120 4096 4096 NT_STATUS_OK
ReadX 10893 454656 4096 4096 NT_STATUS_OK
ReadX 10893 520192 4096 4096 NT_STATUS_OK
WriteX 10893 0 65536 65536 NT_STATUS_OK
WriteX 10893 65536 65536 65536 NT_STATUS_OK
WriteX 10893 131072 65536 65536 NT_STATUS_OK
WriteX 10893 196608 65536 65536 NT_STATUS_OK
WriteX 10893 262144 65536 65536 NT_STATUS_OK
WriteX 10893 327680 65536 65536 NT_STATUS_OK
WriteX 10893 393216 65536 65536 NT_STATUS_OK
WriteX 10893 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10896 NT_STATUS_OK
WriteX 10896 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10896 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10894 0 8192 8192 NT_STATUS_OK
Flush 10894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10894 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10894 0 8192 8192 NT_STATUS_OK
Flush 10894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10894 0 8192 8192 NT_STATUS_OK
Flush 10894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10894 0 8192 8192 NT_STATUS_OK
Flush 10894 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10901 NT_STATUS_OK
WriteX 10901 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10901 258 NT_STATUS_OK
WriteX 10901 0 62591 62591 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10906 NT_STATUS_OK
WriteX 10906 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10906 258 NT_STATUS_OK
WriteX 10906 0 10845 10845 NT_STATUS_OK
Close 10906 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10908 NT_STATUS_OK
Close 10908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10911 NT_STATUS_OK
WriteX 10911 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 30118 30118 NT_STATUS_OK
Close 10911 NT_STATUS_OK
WriteX 10894 0 4096 4096 NT_STATUS_OK
WriteX 10896 0 64 64 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 0 61440 61440 NT_STATUS_OK
ReadX 10913 61440 4096 4096 NT_STATUS_OK
ReadX 10913 65536 61440 61440 NT_STATUS_OK
ReadX 10913 126976 4096 4096 NT_STATUS_OK
ReadX 10913 131072 61440 61440 NT_STATUS_OK
ReadX 10913 192512 4096 4096 NT_STATUS_OK
ReadX 10913 196608 61440 61440 NT_STATUS_OK
ReadX 10913 258048 4096 4096 NT_STATUS_OK
ReadX 10913 262144 61440 61440 NT_STATUS_OK
ReadX 10913 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 0 61440 61440 NT_STATUS_OK
ReadX 10914 61440 4096 4096 NT_STATUS_OK
ReadX 10914 65536 61440 61440 NT_STATUS_OK
ReadX 10914 126976 4096 4096 NT_STATUS_OK
ReadX 10914 131072 61440 61440 NT_STATUS_OK
ReadX 10914 192512 4096 4096 NT_STATUS_OK
ReadX 10914 196608 61440 61440 NT_STATUS_OK
ReadX 10914 258048 4096 4096 NT_STATUS_OK
ReadX 10914 262144 61440 61440 NT_STATUS_OK
ReadX 10914 323584 4096 4096 NT_STATUS_OK
ReadX 10914 327680 61440 61440 NT_STATUS_OK
ReadX 10914 389120 4096 4096 NT_STATUS_OK
ReadX 10914 393216 61440 61440 NT_STATUS_OK
ReadX 10914 454656 4096 4096 NT_STATUS_OK
ReadX 10914 458752 61440 61440 NT_STATUS_OK
ReadX 10914 520192 4096 4096 NT_STATUS_OK
ReadX 10914 524288 61440 61440 NT_STATUS_OK
ReadX 10914 585728 4096 4096 NT_STATUS_OK
ReadX 10914 589824 61440 61440 NT_STATUS_OK
ReadX 10914 651264 4096 4096 NT_STATUS_OK
ReadX 10914 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 0 61440 61440 NT_STATUS_OK
ReadX 10915 61440 4096 4096 NT_STATUS_OK
ReadX 10915 65536 61440 61440 NT_STATUS_OK
ReadX 10915 126976 4096 4096 NT_STATUS_OK
ReadX 10915 131072 61440 61440 NT_STATUS_OK
ReadX 10915 192512 4096 4096 NT_STATUS_OK
ReadX 10915 196608 61440 61440 NT_STATUS_OK
ReadX 10915 258048 4096 4096 NT_STATUS_OK
ReadX 10915 262144 61440 61440 NT_STATUS_OK
ReadX 10915 323584 4096 4096 NT_STATUS_OK
ReadX 10915 327680 61440 61440 NT_STATUS_OK
ReadX 10915 389120 4096 4096 NT_STATUS_OK
ReadX 10915 393216 61440 61440 NT_STATUS_OK
ReadX 10915 454656 4096 4096 NT_STATUS_OK
ReadX 10915 458752 61440 61440 NT_STATUS_OK
ReadX 10915 520192 4096 4096 NT_STATUS_OK
ReadX 10915 524288 61440 61440 NT_STATUS_OK
ReadX 10915 585728 4096 4096 NT_STATUS_OK
ReadX 10915 589824 61440 61440 NT_STATUS_OK
ReadX 10915 651264 4096 4096 NT_STATUS_OK
ReadX 10915 655360 61440 61440 NT_STATUS_OK
ReadX 10915 716800 4096 4096 NT_STATUS_OK
ReadX 10915 720896 61440 61440 NT_STATUS_OK
ReadX 10915 782336 4096 4096 NT_STATUS_OK
ReadX 10915 786432 61440 61440 NT_STATUS_OK
ReadX 10915 847872 4096 4096 NT_STATUS_OK
ReadX 10915 851968 61440 61440 NT_STATUS_OK
ReadX 10915 913408 4096 4096 NT_STATUS_OK
ReadX 10915 917504 61440 61440 NT_STATUS_OK
ReadX 10915 978944 4096 4096 NT_STATUS_OK
ReadX 10915 983040 61440 61440 NT_STATUS_OK
ReadX 10915 1044480 4096 4096 NT_STATUS_OK
ReadX 10915 1048576 61440 61440 NT_STATUS_OK
ReadX 10915 1110016 4096 4096 NT_STATUS_OK
ReadX 10915 1114112 61440 61440 NT_STATUS_OK
ReadX 10915 1175552 4096 4096 NT_STATUS_OK
ReadX 10915 1179648 61440 61440 NT_STATUS_OK
ReadX 10915 1241088 4096 4096 NT_STATUS_OK
ReadX 10915 1245184 61440 61440 NT_STATUS_OK
ReadX 10915 1306624 4096 4096 NT_STATUS_OK
ReadX 10915 1310720 61440 61440 NT_STATUS_OK
ReadX 10915 1372160 4096 4096 NT_STATUS_OK
ReadX 10915 1376256 61440 61440 NT_STATUS_OK
ReadX 10915 1437696 4096 4096 NT_STATUS_OK
ReadX 10915 1441792 61440 61440 NT_STATUS_OK
ReadX 10915 1503232 4096 4096 NT_STATUS_OK
ReadX 10915 1507328 61440 61440 NT_STATUS_OK
ReadX 10915 1568768 4096 4096 NT_STATUS_OK
ReadX 10915 1572864 61440 61440 NT_STATUS_OK
ReadX 10915 1634304 4096 4096 NT_STATUS_OK
ReadX 10915 1638400 61440 61440 NT_STATUS_OK
ReadX 10915 1699840 4096 4096 NT_STATUS_OK
ReadX 10915 1703936 61440 61440 NT_STATUS_OK
ReadX 10915 1765376 4096 4096 NT_STATUS_OK
ReadX 10915 1769472 61440 61440 NT_STATUS_OK
ReadX 10915 1830912 4096 4096 NT_STATUS_OK
ReadX 10915 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
ReadX 10920 4096 4096 4096 NT_STATUS_OK
ReadX 10920 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10921 NT_STATUS_OK
Close 10921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10924 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10925 NT_STATUS_OK
Close 10925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 8192 8192 NT_STATUS_OK
ReadX 10928 8192 8192 8192 NT_STATUS_OK
ReadX 10928 16384 8192 8192 NT_STATUS_OK
ReadX 10928 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10930 NT_STATUS_OK
Close 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10933 NT_STATUS_OK
WriteX 10933 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10933 258 NT_STATUS_OK
WriteX 10933 0 10438 10438 NT_STATUS_OK
Close 10933 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10934 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10936 NT_STATUS_OK
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10937 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10938 NT_STATUS_OK
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10939 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
ReadX 10942 4096 4096 4096 NT_STATUS_OK
ReadX 10942 8192 4096 4096 NT_STATUS_OK
ReadX 10942 12288 8192 8192 NT_STATUS_OK
ReadX 10942 20480 8192 8192 NT_STATUS_OK
ReadX 10942 28672 8192 8192 NT_STATUS_OK
ReadX 10942 36864 8192 8192 NT_STATUS_OK
ReadX 10942 45056 8192 8192 NT_STATUS_OK
ReadX 10942 53248 8192 8192 NT_STATUS_OK
ReadX 10942 61440 8192 8192 NT_STATUS_OK
ReadX 10942 69632 8192 8192 NT_STATUS_OK
ReadX 10942 77824 8192 8192 NT_STATUS_OK
ReadX 10942 86016 8192 8192 NT_STATUS_OK
ReadX 10942 94208 8192 8192 NT_STATUS_OK
ReadX 10942 102400 8192 8192 NT_STATUS_OK
ReadX 10942 110592 8192 8192 NT_STATUS_OK
ReadX 10942 118784 8192 8192 NT_STATUS_OK
ReadX 10942 126976 8192 8192 NT_STATUS_OK
ReadX 10942 135168 8192 8192 NT_STATUS_OK
ReadX 10942 143360 8192 8192 NT_STATUS_OK
ReadX 10942 151552 8192 8192 NT_STATUS_OK
ReadX 10942 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10947 NT_STATUS_OK
WriteX 10947 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10947 258 NT_STATUS_OK
WriteX 10947 0 28489 28489 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10948 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10950 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 8192 8192 NT_STATUS_OK
ReadX 10954 8192 8192 8192 NT_STATUS_OK
ReadX 10954 16384 8192 8192 NT_STATUS_OK
ReadX 10954 24576 8192 8192 NT_STATUS_OK
ReadX 10954 32768 16384 16384 NT_STATUS_OK
ReadX 10954 49152 8192 8192 NT_STATUS_OK
ReadX 10954 57344 8192 8192 NT_STATUS_OK
ReadX 10954 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10959 NT_STATUS_OK
WriteX 10959 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
WriteX 10959 0 29253 29253 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10966 NT_STATUS_OK
WriteX 10966 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
WriteX 10966 0 30183 30183 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10967 NT_STATUS_OK
Close 10967 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10969 NT_STATUS_OK
WriteX 10969 0 510 510 NT_STATUS_OK
WriteX 10969 510 512 512 NT_STATUS_OK
WriteX 10969 1022 510 510 NT_STATUS_OK
WriteX 10969 1532 510 510 NT_STATUS_OK
WriteX 10969 2042 168 168 NT_STATUS_OK
Close 10969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10970 NT_STATUS_OK
Close 10970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 61440 4096 4096 NT_STATUS_OK
ReadX 10973 126976 4096 4096 NT_STATUS_OK
WriteX 10973 0 65536 65536 NT_STATUS_OK
WriteX 10973 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 61440 4096 4096 NT_STATUS_OK
ReadX 10974 126976 4096 4096 NT_STATUS_OK
ReadX 10974 192512 4096 4096 NT_STATUS_OK
ReadX 10974 258048 4096 4096 NT_STATUS_OK
WriteX 10974 0 65536 65536 NT_STATUS_OK
WriteX 10974 65536 65536 65536 NT_STATUS_OK
WriteX 10974 131072 65536 65536 NT_STATUS_OK
WriteX 10974 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 61440 4096 4096 NT_STATUS_OK
ReadX 10975 126976 4096 4096 NT_STATUS_OK
ReadX 10975 192512 4096 4096 NT_STATUS_OK
ReadX 10975 258048 4096 4096 NT_STATUS_OK
ReadX 10975 323584 4096 4096 NT_STATUS_OK
ReadX 10975 389120 4096 4096 NT_STATUS_OK
ReadX 10975 454656 4096 4096 NT_STATUS_OK
ReadX 10975 520192 4096 4096 NT_STATUS_OK
WriteX 10975 0 65536 65536 NT_STATUS_OK
WriteX 10975 65536 65536 65536 NT_STATUS_OK
WriteX 10975 131072 65536 65536 NT_STATUS_OK
WriteX 10975 196608 65536 65536 NT_STATUS_OK
WriteX 10975 262144 65536 65536 NT_STATUS_OK
WriteX 10975 327680 65536 65536 NT_STATUS_OK
WriteX 10975 393216 65536 65536 NT_STATUS_OK
WriteX 10975 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10976 NT_STATUS_OK
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10973 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Close 10975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10978 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10985 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10994 NT_STATUS_OK
Close 10994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10996 NT_STATUS_OK
Close 10996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11005 NT_STATUS_OK
Close 11005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11010 NT_STATUS_OK
Close 11010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11030 NT_STATUS_OK
Close 11030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11035 NT_STATUS_OK
Close 11035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11038 NT_STATUS_OK
Close 11038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11041 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11044 NT_STATUS_OK
WriteX 11044 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11044 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11044 0 65536 65536 NT_STATUS_OK
WriteX 11044 65536 65536 65536 NT_STATUS_OK
WriteX 11044 131072 65536 65536 NT_STATUS_OK
WriteX 11044 196608 65536 65536 NT_STATUS_OK
WriteX 11044 262144 26634 26634 NT_STATUS_OK
Close 11044 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11049 NT_STATUS_OK
Close 11049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11050 NT_STATUS_OK
Close 11050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 0 4096 4096 NT_STATUS_OK
ReadX 11052 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11057 NT_STATUS_OK
Close 11057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11062 NT_STATUS_OK
Close 11062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11071 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11080 NT_STATUS_OK
Close 11080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11085 NT_STATUS_OK
Close 11085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11090 NT_STATUS_OK
Close 11090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11100 NT_STATUS_OK
Close 11100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11104 NT_STATUS_OK
Close 11104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11109 NT_STATUS_OK
Close 11109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11114 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11129 NT_STATUS_OK
Close 11129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
Close 11131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
Close 11132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11143 NT_STATUS_OK
Close 11143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
Close 11146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11147 NT_STATUS_OK
ReadX 11147 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Close 11147 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11176 0 4096 4096 NT_STATUS_OK
Close 11176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
ReadX 11178 4096 4096 4096 NT_STATUS_OK
ReadX 11178 8192 4096 4096 NT_STATUS_OK
ReadX 11178 12288 4096 4096 NT_STATUS_OK
ReadX 11178 16384 4096 4096 NT_STATUS_OK
ReadX 11178 20480 4096 4096 NT_STATUS_OK
ReadX 11178 24576 4096 4096 NT_STATUS_OK
ReadX 11178 28672 4096 4096 NT_STATUS_OK
ReadX 11178 32768 4096 4096 NT_STATUS_OK
ReadX 11178 36864 4096 4096 NT_STATUS_OK
ReadX 11178 40960 4096 4096 NT_STATUS_OK
ReadX 11178 45056 4096 4096 NT_STATUS_OK
ReadX 11178 49152 4096 4096 NT_STATUS_OK
ReadX 11178 53248 4096 4096 NT_STATUS_OK
ReadX 11178 57344 4096 4096 NT_STATUS_OK
ReadX 11178 61440 4096 4096 NT_STATUS_OK
ReadX 11178 65536 4096 4096 NT_STATUS_OK
ReadX 11178 69632 4096 4096 NT_STATUS_OK
ReadX 11178 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11178 1004 NT_STATUS_OK
WriteX 11178 0 4096 4096 NT_STATUS_OK
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11179 NT_STATUS_OK
SET_FILE_INFORMATION 11179 1004 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11181 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11184 NT_STATUS_OK
WriteX 11184 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11184 258 NT_STATUS_OK
WriteX 11184 0 65536 65536 NT_STATUS_OK
WriteX 11184 65536 19979 19979 NT_STATUS_OK
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
WriteX 11185 0 4096 4096 NT_STATUS_OK
Flush 11185 NT_STATUS_OK
WriteX 11185 0 4096 4096 NT_STATUS_OK
Flush 11185 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 1004 NT_STATUS_OK
WriteX 11185 0 4096 4096 NT_STATUS_OK
Flush 11185 NT_STATUS_OK
WriteX 11185 0 4096 4096 NT_STATUS_OK
Flush 11185 NT_STATUS_OK
WriteX 11185 0 4096 4096 NT_STATUS_OK
Flush 11185 NT_STATUS_OK
SET_FILE_INFORMATION 11185 1004 NT_STATUS_OK
WriteX 11185 0 4096 4096 NT_STATUS_OK
Flush 11185 NT_STATUS_OK
Close 11185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
Close 11186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11188 NT_STATUS_OK
ReadX 11188 0 4096 4096 NT_STATUS_OK
Close 11188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
Close 11189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11196 NT_STATUS_OK
WriteX 11196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 258 NT_STATUS_OK
WriteX 11196 0 65536 65536 NT_STATUS_OK
WriteX 11196 65536 17654 17654 NT_STATUS_OK
Close 11196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 4096 4096 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
QUERY_FILE_INFORMATION 11197 1004 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
SET_FILE_INFORMATION 11197 1004 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11198 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
Close 11198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11200 NT_STATUS_OK
Close 11200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
ReadX 11202 4096 4096 4096 NT_STATUS_OK
ReadX 11202 8192 4096 4096 NT_STATUS_OK
ReadX 11202 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11202 16384 4096 4096 NT_STATUS_OK
ReadX 11202 20480 4096 4096 NT_STATUS_OK
ReadX 11202 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
Close 11203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
Close 11204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11211 NT_STATUS_OK
WriteX 11211 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11211 258 NT_STATUS_OK
WriteX 11211 0 65536 65536 NT_STATUS_OK
WriteX 11211 65536 19490 19490 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 4096 4096 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
Flush 11212 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
Flush 11212 NT_STATUS_OK
QUERY_FILE_INFORMATION 11212 1004 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
Flush 11212 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
Flush 11212 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
Flush 11212 NT_STATUS_OK
SET_FILE_INFORMATION 11212 1004 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
Flush 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11213 NT_STATUS_OK
SET_FILE_INFORMATION 11213 1004 NT_STATUS_OK
Close 11213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11217 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11217 0 4096 4096 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 4096 4096 NT_STATUS_OK
ReadX 11219 4096 4096 4096 NT_STATUS_OK
ReadX 11219 8192 4096 4096 NT_STATUS_OK
ReadX 11219 12288 4096 4096 NT_STATUS_OK
ReadX 11219 16384 4096 4096 NT_STATUS_OK
ReadX 11219 20480 4096 4096 NT_STATUS_OK
ReadX 11219 24576 4096 4096 NT_STATUS_OK
ReadX 11219 28672 4096 4096 NT_STATUS_OK
ReadX 11219 32768 4096 4096 NT_STATUS_OK
ReadX 11219 36864 4096 4096 NT_STATUS_OK
ReadX 11219 40960 4096 4096 NT_STATUS_OK
ReadX 11219 45056 4096 4096 NT_STATUS_OK
ReadX 11219 49152 4096 4096 NT_STATUS_OK
ReadX 11219 53248 4096 4096 NT_STATUS_OK
ReadX 11219 57344 4096 4096 NT_STATUS_OK
ReadX 11219 61440 4096 4096 NT_STATUS_OK
ReadX 11219 65536 4096 4096 NT_STATUS_OK
ReadX 11219 69632 4096 4096 NT_STATUS_OK
ReadX 11219 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11219 1004 NT_STATUS_OK
WriteX 11219 0 4096 4096 NT_STATUS_OK
Close 11219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11220 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
Close 11220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11225 NT_STATUS_OK
WriteX 11225 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 258 NT_STATUS_OK
WriteX 11225 0 65536 65536 NT_STATUS_OK
WriteX 11225 65536 8866 8866 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11226 NT_STATUS_OK
ReadX 11226 0 4096 4096 NT_STATUS_OK
WriteX 11226 0 4096 4096 NT_STATUS_OK
Flush 11226 NT_STATUS_OK
SET_FILE_INFORMATION 11226 1004 NT_STATUS_OK
WriteX 11226 0 4096 4096 NT_STATUS_OK
Flush 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
Close 11228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
Close 11229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11230 1004 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11231 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11236 NT_STATUS_OK
WriteX 11236 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11236 258 NT_STATUS_OK
WriteX 11236 0 65536 65536 NT_STATUS_OK
WriteX 11236 65536 9298 9298 NT_STATUS_OK
Close 11236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
WriteX 11237 0 4096 4096 NT_STATUS_OK
Flush 11237 NT_STATUS_OK
SET_FILE_INFORMATION 11237 1004 NT_STATUS_OK
WriteX 11237 0 4096 4096 NT_STATUS_OK
Flush 11237 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11238 NT_STATUS_OK
SET_FILE_INFORMATION 11238 1004 NT_STATUS_OK
Close 11238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11240 NT_STATUS_OK
Close 11240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11243 0 4096 4096 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11244 4096 4096 4096 NT_STATUS_OK
ReadX 11244 8192 4096 4096 NT_STATUS_OK
ReadX 11244 12288 4096 4096 NT_STATUS_OK
ReadX 11244 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
Close 11245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 0 4096 4096 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11247 1004 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11250 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11253 NT_STATUS_OK
WriteX 11253 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 258 NT_STATUS_OK
WriteX 11253 0 65536 65536 NT_STATUS_OK
WriteX 11253 65536 11540 11540 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
Flush 11254 NT_STATUS_OK
SET_FILE_INFORMATION 11254 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
Flush 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11255 NT_STATUS_OK
SET_FILE_INFORMATION 11255 1004 NT_STATUS_OK
Close 11255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11257 NT_STATUS_OK
Close 11257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 61440 4096 4096 NT_STATUS_OK
ReadX 11259 126976 4096 4096 NT_STATUS_OK
WriteX 11259 0 65536 65536 NT_STATUS_OK
WriteX 11259 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 61440 4096 4096 NT_STATUS_OK
ReadX 11260 126976 4096 4096 NT_STATUS_OK
ReadX 11260 192512 4096 4096 NT_STATUS_OK
ReadX 11260 258048 4096 4096 NT_STATUS_OK
WriteX 11260 0 65536 65536 NT_STATUS_OK
WriteX 11260 65536 65536 65536 NT_STATUS_OK
WriteX 11260 131072 65536 65536 NT_STATUS_OK
WriteX 11260 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11261 NT_STATUS_OK
ReadX 11261 61440 4096 4096 NT_STATUS_OK
ReadX 11261 126976 4096 4096 NT_STATUS_OK
ReadX 11261 192512 4096 4096 NT_STATUS_OK
ReadX 11261 258048 4096 4096 NT_STATUS_OK
ReadX 11261 323584 4096 4096 NT_STATUS_OK
ReadX 11261 389120 4096 4096 NT_STATUS_OK
ReadX 11261 454656 4096 4096 NT_STATUS_OK
ReadX 11261 520192 4096 4096 NT_STATUS_OK
WriteX 11261 0 65536 65536 NT_STATUS_OK
WriteX 11261 65536 65536 65536 NT_STATUS_OK
WriteX 11261 131072 65536 65536 NT_STATUS_OK
WriteX 11261 196608 65536 65536 NT_STATUS_OK
WriteX 11261 262144 65536 65536 NT_STATUS_OK
WriteX 11261 327680 65536 65536 NT_STATUS_OK
WriteX 11261 393216 65536 65536 NT_STATUS_OK
WriteX 11261 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
ReadX 11262 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11263 NT_STATUS_OK
WriteX 11263 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11263 258 NT_STATUS_OK
WriteX 11263 0 53 53 NT_STATUS_OK
Close 11263 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11264 NT_STATUS_OK
Close 11264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11262 8192 4096 4096 NT_STATUS_OK
ReadX 11262 12288 4096 4096 NT_STATUS_OK
WriteX 11266 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11266 258 NT_STATUS_OK
ReadX 11262 16384 4096 4096 NT_STATUS_OK
ReadX 11262 20480 4096 4096 NT_STATUS_OK
WriteX 11266 0 15360 15360 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11267 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11268 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11270 4096 4096 4096 NT_STATUS_OK
ReadX 11270 8192 4096 4096 NT_STATUS_OK
ReadX 11270 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
ReadX 11273 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
ReadX 11274 4096 4096 4096 NT_STATUS_OK
ReadX 11274 8192 4096 4096 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11275 NT_STATUS_OK
WriteX 11275 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11275 258 NT_STATUS_OK
WriteX 11275 0 15360 15360 NT_STATUS_OK
Close 11275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11276 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11276 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11277 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11280 NT_STATUS_OK
SET_FILE_INFORMATION 11280 1004 NT_STATUS_OK
Close 11280 NT_STATUS_OK
WriteX 11276 0 4096 4096 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
ReadX 11283 4096 4096 4096 NT_STATUS_OK
ReadX 11283 8192 4096 4096 NT_STATUS_OK
ReadX 11283 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11283 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11283 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11285 NT_STATUS_OK
WriteX 11285 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 258 NT_STATUS_OK
WriteX 11285 0 53 53 NT_STATUS_OK
Close 11285 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11286 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11284 4096 4096 4096 NT_STATUS_OK
ReadX 11284 8192 4096 4096 NT_STATUS_OK
ReadX 11284 12288 4096 4096 NT_STATUS_OK
WriteX 11288 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11288 258 NT_STATUS_OK
WriteX 11288 0 12006 12006 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11289 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11289 1004 NT_STATUS_OK
WriteX 11289 0 4096 4096 NT_STATUS_OK
Close 11289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11293 NT_STATUS_OK
Close 11293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11292 4096 4096 4096 NT_STATUS_OK
ReadX 11292 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11295 NT_STATUS_OK
WriteX 11295 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11295 258 NT_STATUS_OK
WriteX 11295 0 11991 11991 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11296 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11296 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11299 NT_STATUS_OK
ReadX 11299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11300 NT_STATUS_OK
SET_FILE_INFORMATION 11300 1004 NT_STATUS_OK
Close 11300 NT_STATUS_OK
WriteX 11296 0 4096 4096 NT_STATUS_OK
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11303 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11303 1004 NT_STATUS_OK
ReadX 11303 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11303 1004 NT_STATUS_OK
WriteX 11303 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11303 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11303 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11303 1004 NT_STATUS_OK
Close 11279 NT_STATUS_OK
WriteX 11283 0 19054 19054 NT_STATUS_OK
WriteX 11303 0 12288 12288 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 61440 61440 NT_STATUS_OK
ReadX 11310 61440 4096 4096 NT_STATUS_OK
ReadX 11310 65536 61440 61440 NT_STATUS_OK
ReadX 11310 126976 4096 4096 NT_STATUS_OK
ReadX 11310 131072 61440 61440 NT_STATUS_OK
ReadX 11310 192512 4096 4096 NT_STATUS_OK
ReadX 11310 196608 61440 61440 NT_STATUS_OK
ReadX 11310 258048 4096 4096 NT_STATUS_OK
ReadX 11310 262144 61440 61440 NT_STATUS_OK
ReadX 11310 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 61440 61440 NT_STATUS_OK
ReadX 11311 61440 4096 4096 NT_STATUS_OK
ReadX 11311 65536 61440 61440 NT_STATUS_OK
ReadX 11311 126976 4096 4096 NT_STATUS_OK
ReadX 11311 131072 61440 61440 NT_STATUS_OK
ReadX 11311 192512 4096 4096 NT_STATUS_OK
ReadX 11311 196608 61440 61440 NT_STATUS_OK
ReadX 11311 258048 4096 4096 NT_STATUS_OK
ReadX 11311 262144 61440 61440 NT_STATUS_OK
ReadX 11311 323584 4096 4096 NT_STATUS_OK
ReadX 11311 327680 61440 61440 NT_STATUS_OK
ReadX 11311 389120 4096 4096 NT_STATUS_OK
ReadX 11311 393216 61440 61440 NT_STATUS_OK
ReadX 11311 454656 4096 4096 NT_STATUS_OK
ReadX 11311 458752 61440 61440 NT_STATUS_OK
ReadX 11311 520192 4096 4096 NT_STATUS_OK
ReadX 11311 524288 61440 61440 NT_STATUS_OK
ReadX 11311 585728 4096 4096 NT_STATUS_OK
ReadX 11311 589824 61440 61440 NT_STATUS_OK
ReadX 11311 651264 4096 4096 NT_STATUS_OK
ReadX 11311 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 61440 61440 NT_STATUS_OK
ReadX 11312 61440 4096 4096 NT_STATUS_OK
ReadX 11312 65536 61440 61440 NT_STATUS_OK
ReadX 11312 126976 4096 4096 NT_STATUS_OK
ReadX 11312 131072 61440 61440 NT_STATUS_OK
ReadX 11312 192512 4096 4096 NT_STATUS_OK
ReadX 11312 196608 61440 61440 NT_STATUS_OK
ReadX 11312 258048 4096 4096 NT_STATUS_OK
ReadX 11312 262144 61440 61440 NT_STATUS_OK
ReadX 11312 323584 4096 4096 NT_STATUS_OK
ReadX 11312 327680 61440 61440 NT_STATUS_OK
ReadX 11312 389120 4096 4096 NT_STATUS_OK
ReadX 11312 393216 61440 61440 NT_STATUS_OK
ReadX 11312 454656 4096 4096 NT_STATUS_OK
ReadX 11312 458752 61440 61440 NT_STATUS_OK
ReadX 11312 520192 4096 4096 NT_STATUS_OK
ReadX 11312 524288 61440 61440 NT_STATUS_OK
ReadX 11312 585728 4096 4096 NT_STATUS_OK
ReadX 11312 589824 61440 61440 NT_STATUS_OK
ReadX 11312 651264 4096 4096 NT_STATUS_OK
ReadX 11312 655360 61440 61440 NT_STATUS_OK
ReadX 11312 716800 4096 4096 NT_STATUS_OK
ReadX 11312 720896 61440 61440 NT_STATUS_OK
ReadX 11312 782336 4096 4096 NT_STATUS_OK
ReadX 11312 786432 61440 61440 NT_STATUS_OK
ReadX 11312 847872 4096 4096 NT_STATUS_OK
ReadX 11312 851968 61440 61440 NT_STATUS_OK
ReadX 11312 913408 4096 4096 NT_STATUS_OK
ReadX 11312 917504 61440 61440 NT_STATUS_OK
ReadX 11312 978944 4096 4096 NT_STATUS_OK
ReadX 11312 983040 61440 61440 NT_STATUS_OK
ReadX 11312 1044480 4096 4096 NT_STATUS_OK
ReadX 11312 1048576 61440 61440 NT_STATUS_OK
ReadX 11312 1110016 4096 4096 NT_STATUS_OK
ReadX 11312 1114112 61440 61440 NT_STATUS_OK
ReadX 11312 1175552 4096 4096 NT_STATUS_OK
ReadX 11312 1179648 61440 61440 NT_STATUS_OK
ReadX 11312 1241088 4096 4096 NT_STATUS_OK
ReadX 11312 1245184 61440 61440 NT_STATUS_OK
ReadX 11312 1306624 4096 4096 NT_STATUS_OK
ReadX 11312 1310720 61440 61440 NT_STATUS_OK
ReadX 11312 1372160 4096 4096 NT_STATUS_OK
ReadX 11312 1376256 61440 61440 NT_STATUS_OK
ReadX 11312 1437696 4096 4096 NT_STATUS_OK
ReadX 11312 1441792 61440 61440 NT_STATUS_OK
ReadX 11312 1503232 4096 4096 NT_STATUS_OK
ReadX 11312 1507328 61440 61440 NT_STATUS_OK
ReadX 11312 1568768 4096 4096 NT_STATUS_OK
ReadX 11312 1572864 61440 61440 NT_STATUS_OK
ReadX 11312 1634304 4096 4096 NT_STATUS_OK
ReadX 11312 1638400 61440 61440 NT_STATUS_OK
ReadX 11312 1699840 4096 4096 NT_STATUS_OK
ReadX 11312 1703936 61440 61440 NT_STATUS_OK
ReadX 11312 1765376 4096 4096 NT_STATUS_OK
ReadX 11312 1769472 61440 61440 NT_STATUS_OK
ReadX 11312 1830912 4096 4096 NT_STATUS_OK
ReadX 11312 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11315 NT_STATUS_OK
ReadX 11315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11316 NT_STATUS_OK
ReadX 11316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11317 NT_STATUS_OK
ReadX 11317 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11319 NT_STATUS_OK
QUERY_FILE_INFORMATION 11319 1004 NT_STATUS_OK
WriteX 11319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11319 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11321 NT_STATUS_OK
WriteX 11321 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 258 NT_STATUS_OK
WriteX 11321 0 491 491 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11322 NT_STATUS_OK
ReadX 11322 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11319 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11324 NT_STATUS_OK
Close 11324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11325 NT_STATUS_OK
WriteX 11325 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11325 258 NT_STATUS_OK
WriteX 11325 0 543 543 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11317 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11339 NT_STATUS_OK
QUERY_FILE_INFORMATION 11339 1004 NT_STATUS_OK
WriteX 11339 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11339 258 NT_STATUS_OK
WriteX 11339 0 2048 2048 NT_STATUS_OK
Close 11339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11340 0 4096 4096 NT_STATUS_OK
Flush 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11340 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11344 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11345 NT_STATUS_OK
WriteX 11345 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11345 258 NT_STATUS_OK
WriteX 11345 0 2048 2048 NT_STATUS_OK
Close 11345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11351 NT_STATUS_OK
WriteX 11351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11351 258 NT_STATUS_OK
WriteX 11351 0 2048 2048 NT_STATUS_OK
Close 11351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 2048 2048 NT_STATUS_OK
ReadX 11330 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11346 0 4096 4096 NT_STATUS_OK
WriteX 11330 0 8192 8192 NT_STATUS_OK
WriteX 11331 0 4096 4096 NT_STATUS_OK
WriteX 11332 0 4096 4096 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11356 NT_STATUS_OK
QUERY_FILE_INFORMATION 11356 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11355 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11346 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11358 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11360 NT_STATUS_OK
ReadX 11360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11367 NT_STATUS_OK
ReadX 11367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11369 NT_STATUS_OK
ReadX 11369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11375 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11376 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 1004 NT_STATUS_OK
WriteX 11376 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 258 NT_STATUS_OK
WriteX 11376 0 2048 2048 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11377 NT_STATUS_OK
ReadX 11377 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11379 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11384 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1004 NT_STATUS_OK
WriteX 11384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 258 NT_STATUS_OK
WriteX 11384 0 2048 2048 NT_STATUS_OK
Close 11384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11377 0 4096 4096 NT_STATUS_OK
Flush 11377 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
Flush 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11377 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11379 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11386 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11387 NT_STATUS_OK
WriteX 11387 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11387 258 NT_STATUS_OK
WriteX 11387 0 4096 4096 NT_STATUS_OK
Close 11387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11390 NT_STATUS_OK
WriteX 11390 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11390 258 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
Close 11390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11391 0 4096 4096 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11362 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11397 NT_STATUS_OK
Close 11397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11398 NT_STATUS_OK
WriteX 11398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 258 NT_STATUS_OK
WriteX 11398 0 2048 2048 NT_STATUS_OK
Close 11398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11401 NT_STATUS_OK
ReadX 11401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11403 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11410 NT_STATUS_OK
ReadX 11410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11411 NT_STATUS_OK
ReadX 11411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11413 NT_STATUS_OK
QUERY_FILE_INFORMATION 11413 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Close 11411 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Close 11410 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Close 11400 NT_STATUS_OK
Close 11401 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11415 NT_STATUS_OK
QUERY_FILE_INFORMATION 11415 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11419 NT_STATUS_OK
ReadX 11419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11420 NT_STATUS_OK
ReadX 11420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11426 NT_STATUS_OK
ReadX 11426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11435 NT_STATUS_OK
QUERY_FILE_INFORMATION 11435 1004 NT_STATUS_OK
WriteX 11435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11435 258 NT_STATUS_OK
WriteX 11435 0 2048 2048 NT_STATUS_OK
Close 11435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11436 NT_STATUS_OK
ReadX 11436 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11440 NT_STATUS_OK
ReadX 11440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11447 NT_STATUS_OK
QUERY_FILE_INFORMATION 11447 1004 NT_STATUS_OK
WriteX 11447 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11447 258 NT_STATUS_OK
WriteX 11447 0 2048 2048 NT_STATUS_OK
Close 11447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11450 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11455 NT_STATUS_OK
QUERY_FILE_INFORMATION 11455 1004 NT_STATUS_OK
WriteX 11455 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11455 258 NT_STATUS_OK
WriteX 11455 0 2048 2048 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11436 0 4096 4096 NT_STATUS_OK
Flush 11436 NT_STATUS_OK
WriteX 11448 0 4096 4096 NT_STATUS_OK
Flush 11448 NT_STATUS_OK
WriteX 11456 0 4096 4096 NT_STATUS_OK
Flush 11456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11436 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11438 4096 16384 16384 NT_STATUS_OK
ReadX 11418 4096 16384 16384 NT_STATUS_OK
ReadX 11450 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 2048 2048 NT_STATUS_OK
WriteX 11458 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11459 NT_STATUS_OK
QUERY_FILE_INFORMATION 11459 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11422 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Close 11440 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11450 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Close 11427 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11425 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Close 11418 NT_STATUS_OK
Close 11419 NT_STATUS_OK
Close 11420 NT_STATUS_OK
Close 11421 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11461 NT_STATUS_OK
QUERY_FILE_INFORMATION 11461 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11463 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11468 NT_STATUS_OK
ReadX 11468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11466 4096 16384 16384 NT_STATUS_OK
WriteX 11466 0 4096 4096 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
WriteX 11468 0 4096 4096 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11476 NT_STATUS_OK
ReadX 11476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11479 NT_STATUS_OK
ReadX 11479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11482 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11483 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 8192 8192 NT_STATUS_OK
ReadX 11472 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11486 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11486 0 4096 4096 NT_STATUS_OK
ReadX 11486 4096 4096 4096 NT_STATUS_OK
ReadX 11486 8192 4096 4096 NT_STATUS_OK
WriteX 11472 0 4096 4096 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
ReadX 11487 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11466 0 4096 4096 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
WriteX 11468 0 4096 4096 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11492 NT_STATUS_OK
QUERY_FILE_INFORMATION 11492 1004 NT_STATUS_OK
WriteX 11492 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11492 258 NT_STATUS_OK
WriteX 11492 0 2048 2048 NT_STATUS_OK
Close 11492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11493 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11493 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11495 NT_STATUS_OK
ReadX 11495 0 4096 4096 NT_STATUS_OK
ReadX 11495 4096 4096 4096 NT_STATUS_OK
WriteX 11495 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11493 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
ReadX 11497 4096 4096 4096 NT_STATUS_OK
WriteX 11497 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11498 NT_STATUS_OK
QUERY_FILE_INFORMATION 11498 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Close 11470 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11467 NT_STATUS_OK
Close 11468 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Close 11479 NT_STATUS_OK
Close 11480 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11476 NT_STATUS_OK
Close 11477 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11500 0 4096 4096 NT_STATUS_OK
ReadX 11500 4096 4096 4096 NT_STATUS_OK
ReadX 11500 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
ReadX 11501 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11518 NT_STATUS_OK
QUERY_FILE_INFORMATION 11518 1004 NT_STATUS_OK
WriteX 11518 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11518 258 NT_STATUS_OK
WriteX 11518 0 2048 2048 NT_STATUS_OK
Close 11518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11519 NT_STATUS_OK
ReadX 11519 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11519 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11523 NT_STATUS_OK
Close 11523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11524 NT_STATUS_OK
QUERY_FILE_INFORMATION 11524 1004 NT_STATUS_OK
WriteX 11524 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11524 258 NT_STATUS_OK
WriteX 11524 0 2048 2048 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11525 NT_STATUS_OK
ReadX 11525 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11525 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11508 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11526 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Close 11513 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Close 11504 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11528 NT_STATUS_OK
QUERY_FILE_INFORMATION 11528 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 61440 4096 4096 NT_STATUS_OK
ReadX 11530 126976 4096 4096 NT_STATUS_OK
WriteX 11530 0 65536 65536 NT_STATUS_OK
WriteX 11530 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 61440 4096 4096 NT_STATUS_OK
ReadX 11531 126976 4096 4096 NT_STATUS_OK
ReadX 11531 192512 4096 4096 NT_STATUS_OK
ReadX 11531 258048 4096 4096 NT_STATUS_OK
WriteX 11531 0 65536 65536 NT_STATUS_OK
WriteX 11531 65536 65536 65536 NT_STATUS_OK
WriteX 11531 131072 65536 65536 NT_STATUS_OK
WriteX 11531 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 61440 4096 4096 NT_STATUS_OK
ReadX 11532 126976 4096 4096 NT_STATUS_OK
ReadX 11532 192512 4096 4096 NT_STATUS_OK
ReadX 11532 258048 4096 4096 NT_STATUS_OK
ReadX 11532 323584 4096 4096 NT_STATUS_OK
ReadX 11532 389120 4096 4096 NT_STATUS_OK
ReadX 11532 454656 4096 4096 NT_STATUS_OK
ReadX 11532 520192 4096 4096 NT_STATUS_OK
WriteX 11532 0 65536 65536 NT_STATUS_OK
WriteX 11532 65536 65536 65536 NT_STATUS_OK
WriteX 11532 131072 65536 65536 NT_STATUS_OK
WriteX 11532 196608 65536 65536 NT_STATUS_OK
WriteX 11532 262144 65536 65536 NT_STATUS_OK
WriteX 11532 327680 65536 65536 NT_STATUS_OK
WriteX 11532 393216 65536 65536 NT_STATUS_OK
WriteX 11532 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11533 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11533 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11533 8192 4096 4096 NT_STATUS_OK
ReadX 11533 12288 4096 4096 NT_STATUS_OK
ReadX 11533 16384 4096 4096 NT_STATUS_OK
ReadX 11533 20480 4096 4096 NT_STATUS_OK
ReadX 11533 24576 4096 4096 NT_STATUS_OK
ReadX 11533 28672 4096 4096 NT_STATUS_OK
ReadX 11533 32768 4096 4096 NT_STATUS_OK
ReadX 11533 36864 4096 4096 NT_STATUS_OK
ReadX 11533 40960 4096 4096 NT_STATUS_OK
ReadX 11533 45056 4096 4096 NT_STATUS_OK
ReadX 11533 49152 4096 4096 NT_STATUS_OK
ReadX 11533 53248 4096 4096 NT_STATUS_OK
ReadX 11533 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11533 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11530 NT_STATUS_OK
Close 11531 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11536 NT_STATUS_OK
WriteX 11536 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11536 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11536 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11536 1004 NT_STATUS_OK
WriteX 11536 0 57088 57088 NT_STATUS_OK
WriteX 11536 0 4096 4096 NT_STATUS_OK
Flush 11536 NT_STATUS_OK
Close 11533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11537 NT_STATUS_OK
SET_FILE_INFORMATION 11537 1004 NT_STATUS_OK
Close 11537 NT_STATUS_OK
SET_FILE_INFORMATION 11536 1004 NT_STATUS_OK
WriteX 11536 0 4096 4096 NT_STATUS_OK
Close 11536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11540 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11541 NT_STATUS_OK
WriteX 11541 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11541 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11541 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11541 1004 NT_STATUS_OK
WriteX 11541 0 51456 51456 NT_STATUS_OK
WriteX 11541 0 4096 4096 NT_STATUS_OK
Flush 11541 NT_STATUS_OK
SET_FILE_INFORMATION 11541 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11541 1004 NT_STATUS_OK
WriteX 11541 0 4096 4096 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Close 11540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11543 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11545 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11550 NT_STATUS_OK
WriteX 11550 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 258 NT_STATUS_OK
WriteX 11550 0 53077 53077 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11551 NT_STATUS_OK
WriteX 11551 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11551 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
WriteX 11551 0 65536 65536 NT_STATUS_OK
WriteX 11551 65536 1856 1856 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
Flush 11551 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11560 NT_STATUS_OK
WriteX 11560 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11560 258 NT_STATUS_OK
WriteX 11560 0 7983 7983 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11565 NT_STATUS_OK
WriteX 11565 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 258 NT_STATUS_OK
WriteX 11565 0 65536 65536 NT_STATUS_OK
WriteX 11565 65536 65536 65536 NT_STATUS_OK
WriteX 11565 131072 65536 65536 NT_STATUS_OK
WriteX 11565 196608 65536 65536 NT_STATUS_OK
WriteX 11565 262144 65536 65536 NT_STATUS_OK
WriteX 11565 327680 65536 65536 NT_STATUS_OK
WriteX 11565 393216 65536 65536 NT_STATUS_OK
WriteX 11565 458752 46731 46731 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11566 NT_STATUS_OK
WriteX 11566 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11566 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11555 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11566 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
WriteX 11566 0 65536 65536 NT_STATUS_OK
WriteX 11566 65536 22848 22848 NT_STATUS_OK
WriteX 11566 0 4096 4096 NT_STATUS_OK
Flush 11566 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
WriteX 11566 0 4096 4096 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11570 NT_STATUS_OK
ReadX 11570 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11570 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11571 NT_STATUS_OK
ReadX 11571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11571 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11571 1004 NT_STATUS_OK
ReadX 11571 8192 4096 4096 NT_STATUS_OK
ReadX 11571 12288 4096 4096 NT_STATUS_OK
ReadX 11571 16384 4096 4096 NT_STATUS_OK
ReadX 11571 20480 4096 4096 NT_STATUS_OK
ReadX 11571 24576 4096 4096 NT_STATUS_OK
ReadX 11571 28672 4096 4096 NT_STATUS_OK
ReadX 11571 32768 4096 4096 NT_STATUS_OK
ReadX 11571 36864 4096 4096 NT_STATUS_OK
ReadX 11571 40960 4096 4096 NT_STATUS_OK
ReadX 11571 45056 4096 4096 NT_STATUS_OK
ReadX 11571 49152 4096 4096 NT_STATUS_OK
ReadX 11571 53248 4096 4096 NT_STATUS_OK
ReadX 11571 57344 4096 4096 NT_STATUS_OK
ReadX 11571 61440 4096 4096 NT_STATUS_OK
ReadX 11571 65536 4096 4096 NT_STATUS_OK
ReadX 11571 69632 4096 4096 NT_STATUS_OK
ReadX 11571 73728 4096 4096 NT_STATUS_OK
ReadX 11571 77824 4096 4096 NT_STATUS_OK
ReadX 11571 81920 4096 4096 NT_STATUS_OK
ReadX 11571 86016 4096 4096 NT_STATUS_OK
ReadX 11571 90112 4096 4096 NT_STATUS_OK
ReadX 11571 94208 4096 4096 NT_STATUS_OK
ReadX 11571 98304 4096 4096 NT_STATUS_OK
ReadX 11571 102400 4096 4096 NT_STATUS_OK
ReadX 11571 106496 4096 4096 NT_STATUS_OK
ReadX 11571 110592 4096 4096 NT_STATUS_OK
ReadX 11571 114688 4096 4096 NT_STATUS_OK
ReadX 11571 118784 4096 4096 NT_STATUS_OK
ReadX 11571 122880 4096 4096 NT_STATUS_OK
ReadX 11571 126976 4096 4096 NT_STATUS_OK
ReadX 11571 131072 4096 4096 NT_STATUS_OK
ReadX 11571 135168 4096 4096 NT_STATUS_OK
ReadX 11571 139264 4096 4096 NT_STATUS_OK
ReadX 11571 143360 4096 4096 NT_STATUS_OK
ReadX 11571 147456 4096 4096 NT_STATUS_OK
ReadX 11571 151552 4096 4096 NT_STATUS_OK
ReadX 11571 155648 4096 4096 NT_STATUS_OK
ReadX 11571 159744 4096 4096 NT_STATUS_OK
ReadX 11571 163840 4096 4096 NT_STATUS_OK
ReadX 11571 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11571 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11572 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11574 NT_STATUS_OK
WriteX 11574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 258 NT_STATUS_OK
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11575 NT_STATUS_OK
SET_FILE_INFORMATION 11575 1004 NT_STATUS_OK
Close 11575 NT_STATUS_OK
WriteX 11574 0 42388 42388 NT_STATUS_OK
Close 11574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 0 4096 4096 NT_STATUS_OK
ReadX 11578 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11579 NT_STATUS_OK
WriteX 11579 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 258 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 42652 42652 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
ReadX 11583 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11585 NT_STATUS_OK
Close 11585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11588 NT_STATUS_OK
WriteX 11588 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 258 NT_STATUS_OK
WriteX 11588 0 65536 65536 NT_STATUS_OK
WriteX 11588 65536 49 49 NT_STATUS_OK
Close 11588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 61440 61440 NT_STATUS_OK
ReadX 11589 61440 4096 4096 NT_STATUS_OK
ReadX 11589 65536 61440 61440 NT_STATUS_OK
ReadX 11589 126976 4096 4096 NT_STATUS_OK
ReadX 11589 131072 61440 61440 NT_STATUS_OK
ReadX 11589 192512 4096 4096 NT_STATUS_OK
ReadX 11589 196608 61440 61440 NT_STATUS_OK
ReadX 11589 258048 4096 4096 NT_STATUS_OK
ReadX 11589 262144 61440 61440 NT_STATUS_OK
ReadX 11589 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 61440 61440 NT_STATUS_OK
ReadX 11590 61440 4096 4096 NT_STATUS_OK
ReadX 11590 65536 61440 61440 NT_STATUS_OK
ReadX 11590 126976 4096 4096 NT_STATUS_OK
ReadX 11590 131072 61440 61440 NT_STATUS_OK
ReadX 11590 192512 4096 4096 NT_STATUS_OK
ReadX 11590 196608 61440 61440 NT_STATUS_OK
ReadX 11590 258048 4096 4096 NT_STATUS_OK
ReadX 11590 262144 61440 61440 NT_STATUS_OK
ReadX 11590 323584 4096 4096 NT_STATUS_OK
ReadX 11590 327680 61440 61440 NT_STATUS_OK
ReadX 11590 389120 4096 4096 NT_STATUS_OK
ReadX 11590 393216 61440 61440 NT_STATUS_OK
ReadX 11590 454656 4096 4096 NT_STATUS_OK
ReadX 11590 458752 61440 61440 NT_STATUS_OK
ReadX 11590 520192 4096 4096 NT_STATUS_OK
ReadX 11590 524288 61440 61440 NT_STATUS_OK
ReadX 11590 585728 4096 4096 NT_STATUS_OK
ReadX 11590 589824 61440 61440 NT_STATUS_OK
ReadX 11590 651264 4096 4096 NT_STATUS_OK
ReadX 11590 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 61440 61440 NT_STATUS_OK
ReadX 11591 61440 4096 4096 NT_STATUS_OK
ReadX 11591 65536 61440 61440 NT_STATUS_OK
ReadX 11591 126976 4096 4096 NT_STATUS_OK
ReadX 11591 131072 61440 61440 NT_STATUS_OK
ReadX 11591 192512 4096 4096 NT_STATUS_OK
ReadX 11591 196608 61440 61440 NT_STATUS_OK
ReadX 11591 258048 4096 4096 NT_STATUS_OK
ReadX 11591 262144 61440 61440 NT_STATUS_OK
ReadX 11591 323584 4096 4096 NT_STATUS_OK
ReadX 11591 327680 61440 61440 NT_STATUS_OK
ReadX 11591 389120 4096 4096 NT_STATUS_OK
ReadX 11591 393216 61440 61440 NT_STATUS_OK
ReadX 11591 454656 4096 4096 NT_STATUS_OK
ReadX 11591 458752 61440 61440 NT_STATUS_OK
ReadX 11591 520192 4096 4096 NT_STATUS_OK
ReadX 11591 524288 61440 61440 NT_STATUS_OK
ReadX 11591 585728 4096 4096 NT_STATUS_OK
ReadX 11591 589824 61440 61440 NT_STATUS_OK
ReadX 11591 651264 4096 4096 NT_STATUS_OK
ReadX 11591 655360 61440 61440 NT_STATUS_OK
ReadX 11591 716800 4096 4096 NT_STATUS_OK
ReadX 11591 720896 61440 61440 NT_STATUS_OK
ReadX 11591 782336 4096 4096 NT_STATUS_OK
ReadX 11591 786432 61440 61440 NT_STATUS_OK
ReadX 11591 847872 4096 4096 NT_STATUS_OK
ReadX 11591 851968 61440 61440 NT_STATUS_OK
ReadX 11591 913408 4096 4096 NT_STATUS_OK
ReadX 11591 917504 61440 61440 NT_STATUS_OK
ReadX 11591 978944 4096 4096 NT_STATUS_OK
ReadX 11591 983040 61440 61440 NT_STATUS_OK
ReadX 11591 1044480 4096 4096 NT_STATUS_OK
ReadX 11591 1048576 61440 61440 NT_STATUS_OK
ReadX 11591 1110016 4096 4096 NT_STATUS_OK
ReadX 11591 1114112 61440 61440 NT_STATUS_OK
ReadX 11591 1175552 4096 4096 NT_STATUS_OK
ReadX 11591 1179648 61440 61440 NT_STATUS_OK
ReadX 11591 1241088 4096 4096 NT_STATUS_OK
ReadX 11591 1245184 61440 61440 NT_STATUS_OK
ReadX 11591 1306624 4096 4096 NT_STATUS_OK
ReadX 11591 1310720 61440 61440 NT_STATUS_OK
ReadX 11591 1372160 4096 4096 NT_STATUS_OK
ReadX 11591 1376256 61440 61440 NT_STATUS_OK
ReadX 11591 1437696 4096 4096 NT_STATUS_OK
ReadX 11591 1441792 61440 61440 NT_STATUS_OK
ReadX 11591 1503232 4096 4096 NT_STATUS_OK
ReadX 11591 1507328 61440 61440 NT_STATUS_OK
ReadX 11591 1568768 4096 4096 NT_STATUS_OK
ReadX 11591 1572864 61440 61440 NT_STATUS_OK
ReadX 11591 1634304 4096 4096 NT_STATUS_OK
ReadX 11591 1638400 61440 61440 NT_STATUS_OK
ReadX 11591 1699840 4096 4096 NT_STATUS_OK
ReadX 11591 1703936 61440 61440 NT_STATUS_OK
ReadX 11591 1765376 4096 4096 NT_STATUS_OK
ReadX 11591 1769472 61440 61440 NT_STATUS_OK
ReadX 11591 1830912 4096 4096 NT_STATUS_OK
ReadX 11591 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11593 NT_STATUS_OK
QUERY_FILE_INFORMATION 11593 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11593 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11593 1005 NT_STATUS_OK
ReadX 11593 2156 24 24 NT_STATUS_OK
ReadX 11593 2139 276 276 NT_STATUS_OK
ReadX 11593 2136 14 14 NT_STATUS_OK
ReadX 11593 2136 7 7 NT_STATUS_OK
ReadX 11593 2138 12 12 NT_STATUS_OK
ReadX 11593 2137 8 8 NT_STATUS_OK
ReadX 11593 2135 15 15 NT_STATUS_OK
ReadX 11593 0 16 16 NT_STATUS_OK
ReadX 11593 16 2048 2048 NT_STATUS_OK
ReadX 11593 2064 2048 2048 NT_STATUS_OK
ReadX 11593 257 2048 2048 NT_STATUS_OK
ReadX 11593 385 2048 2048 NT_STATUS_OK
ReadX 11593 513 2048 2048 NT_STATUS_OK
ReadX 11593 641 2048 2048 NT_STATUS_OK
ReadX 11593 769 2048 2048 NT_STATUS_OK
ReadX 11593 897 2048 2048 NT_STATUS_OK
ReadX 11593 1025 2048 2048 NT_STATUS_OK
ReadX 11593 1153 2048 2048 NT_STATUS_OK
ReadX 11593 1281 2048 2048 NT_STATUS_OK
ReadX 11593 1409 2048 2048 NT_STATUS_OK
ReadX 11593 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11598 NT_STATUS_OK
WriteX 11598 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11598 258 NT_STATUS_OK
WriteX 11598 0 10575 10575 NT_STATUS_OK
Flush 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11603 NT_STATUS_OK
LockX 11603 2147483538 1 NT_STATUS_OK
UnlockX 11603 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 1005 NT_STATUS_OK
ReadX 11603 0 512 512 NT_STATUS_OK
ReadX 11603 512 512 512 NT_STATUS_OK
ReadX 11603 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 1004 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11604 NT_STATUS_OK
QUERY_FILE_INFORMATION 11604 1005 NT_STATUS_OK
ReadX 11604 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11605 NT_STATUS_OK
LockX 11605 2147483538 1 NT_STATUS_OK
UnlockX 11605 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11605 1005 NT_STATUS_OK
ReadX 11605 0 512 512 NT_STATUS_OK
ReadX 11605 512 512 512 NT_STATUS_OK
ReadX 11605 1024 512 512 NT_STATUS_OK
ReadX 11605 288 20 20 NT_STATUS_OK
ReadX 11605 308 2084 2084 NT_STATUS_OK
ReadX 11605 388 2084 2084 NT_STATUS_OK
ReadX 11605 388 2084 2084 NT_STATUS_OK
ReadX 11592 2157 1386 1386 NT_STATUS_OK
ReadX 11605 2472 399 399 NT_STATUS_OK
ReadX 11605 3072 1536 1536 NT_STATUS_OK
ReadX 11605 544 149 149 NT_STATUS_OK
ReadX 11605 693 485 485 NT_STATUS_OK
Close 11605 NT_STATUS_OK
ReadX 11592 2157 4096 4096 NT_STATUS_OK
ReadX 11592 6253 4096 4096 NT_STATUS_OK
ReadX 11592 10349 4096 4096 NT_STATUS_OK
ReadX 11592 14445 4096 4096 NT_STATUS_OK
ReadX 11592 18541 4096 4096 NT_STATUS_OK
ReadX 11592 22637 256 256 NT_STATUS_OK
ReadX 11592 22893 4096 4096 NT_STATUS_OK
ReadX 11592 26989 4096 4096 NT_STATUS_OK
ReadX 11592 31085 4096 4096 NT_STATUS_OK
ReadX 11592 35181 4096 4096 NT_STATUS_OK
ReadX 11592 39277 4096 4096 NT_STATUS_OK
ReadX 11592 43373 4096 4096 NT_STATUS_OK
ReadX 11592 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11592 2157 1024 1024 NT_STATUS_OK
ReadX 11592 1667 4688 4688 NT_STATUS_OK
ReadX 11592 6355 3516 3516 NT_STATUS_OK
ReadX 11592 9871 16384 16384 NT_STATUS_OK
ReadX 11592 26255 3771 3771 NT_STATUS_OK
ReadX 11592 30026 2048 2048 NT_STATUS_OK
ReadX 11592 32074 1024 1024 NT_STATUS_OK
ReadX 11592 33098 6652 6652 NT_STATUS_OK
ReadX 11592 39750 16384 16384 NT_STATUS_OK
ReadX 11592 56134 10496 10496 NT_STATUS_OK
ReadX 11592 66630 1784 1784 NT_STATUS_OK
ReadX 11592 68414 90 90 NT_STATUS_OK
ReadX 11592 68504 273 273 NT_STATUS_OK
ReadX 11592 68777 1600 1600 NT_STATUS_OK
ReadX 11592 70377 640 640 NT_STATUS_OK
ReadX 11592 71017 1280 1280 NT_STATUS_OK
ReadX 11592 72297 8464 8464 NT_STATUS_OK
ReadX 11592 80761 158 158 NT_STATUS_OK
ReadX 11592 80919 912 912 NT_STATUS_OK
ReadX 11592 81831 1980 1980 NT_STATUS_OK
ReadX 11592 83811 2256 2256 NT_STATUS_OK
ReadX 11592 86067 400 400 NT_STATUS_OK
ReadX 11592 86467 252 252 NT_STATUS_OK
ReadX 11592 86719 42 42 NT_STATUS_OK
ReadX 11592 86761 725 725 NT_STATUS_OK
ReadX 11592 2009 512 512 NT_STATUS_OK
ReadX 11592 3895 9 9 NT_STATUS_OK
ReadX 11592 3781 46 46 NT_STATUS_OK
ReadX 11592 4059 92 92 NT_STATUS_OK
ReadX 11592 3781 92 92 NT_STATUS_OK
ReadX 11592 3986 184 184 NT_STATUS_OK
ReadX 11592 3987 16384 16384 NT_STATUS_OK
ReadX 11592 3902 16384 16384 NT_STATUS_OK
ReadX 11592 3781 10240 10240 NT_STATUS_OK
ReadX 11592 3821 16384 16384 NT_STATUS_OK
ReadX 11592 3891 935 935 NT_STATUS_OK
ReadX 11592 4060 10240 10240 NT_STATUS_OK
ReadX 11592 4059 184 184 NT_STATUS_OK
ReadX 11592 256 184 184 NT_STATUS_OK
ReadX 11592 256 1026 1026 NT_STATUS_OK
ReadX 11592 3901 326 326 NT_STATUS_OK
ReadX 11592 3899 652 652 NT_STATUS_OK
ReadX 11592 256 2 2 NT_STATUS_OK
ReadX 11592 258 4948 4948 NT_STATUS_OK
Close 11592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11610 NT_STATUS_OK
WriteX 11610 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 258 NT_STATUS_OK
WriteX 11610 0 65536 65536 NT_STATUS_OK
WriteX 11610 65536 65536 65536 NT_STATUS_OK
WriteX 11610 131072 65536 65536 NT_STATUS_OK
WriteX 11610 196608 65536 65536 NT_STATUS_OK
WriteX 11610 262144 65536 65536 NT_STATUS_OK
WriteX 11610 327680 65536 65536 NT_STATUS_OK
WriteX 11610 393216 65536 65536 NT_STATUS_OK
WriteX 11610 458752 65536 65536 NT_STATUS_OK
WriteX 11610 524288 65536 65536 NT_STATUS_OK
WriteX 11610 589824 35257 35257 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11612 NT_STATUS_OK
Close 11612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11615 NT_STATUS_OK
WriteX 11615 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 258 NT_STATUS_OK
WriteX 11615 0 65536 65536 NT_STATUS_OK
WriteX 11615 65536 65536 65536 NT_STATUS_OK
WriteX 11615 131072 65536 65536 NT_STATUS_OK
WriteX 11615 196608 65536 65536 NT_STATUS_OK
WriteX 11615 262144 65536 65536 NT_STATUS_OK
WriteX 11615 327680 65536 65536 NT_STATUS_OK
WriteX 11615 393216 65536 65536 NT_STATUS_OK
WriteX 11615 458752 65536 65536 NT_STATUS_OK
WriteX 11615 524288 65536 65536 NT_STATUS_OK
WriteX 11615 589824 57598 57598 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11617 NT_STATUS_OK
WriteX 11617 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11617 258 NT_STATUS_OK
WriteX 11617 0 12543 12543 NT_STATUS_OK
Flush 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11623 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 1005 NT_STATUS_OK
ReadX 11623 1938 24 24 NT_STATUS_OK
ReadX 11623 1920 276 276 NT_STATUS_OK
ReadX 11623 1918 14 14 NT_STATUS_OK
ReadX 11623 1918 7 7 NT_STATUS_OK
ReadX 11623 1919 12 12 NT_STATUS_OK
ReadX 11623 1919 8 8 NT_STATUS_OK
ReadX 11623 1917 15 15 NT_STATUS_OK
ReadX 11623 0 16 16 NT_STATUS_OK
ReadX 11623 16 2048 2048 NT_STATUS_OK
ReadX 11623 2064 2048 2048 NT_STATUS_OK
ReadX 11623 257 2048 2048 NT_STATUS_OK
ReadX 11623 385 2048 2048 NT_STATUS_OK
ReadX 11623 513 2048 2048 NT_STATUS_OK
ReadX 11623 641 2048 2048 NT_STATUS_OK
ReadX 11623 769 2048 2048 NT_STATUS_OK
ReadX 11623 897 2048 2048 NT_STATUS_OK
ReadX 11623 1025 2048 2048 NT_STATUS_OK
ReadX 11623 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11628 NT_STATUS_OK
WriteX 11628 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 11588 11588 NT_STATUS_OK
Flush 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11633 NT_STATUS_OK
WriteX 11633 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11633 258 NT_STATUS_OK
WriteX 11633 0 11615 11615 NT_STATUS_OK
Flush 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11642 NT_STATUS_OK
WriteX 11642 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 65536 65536 NT_STATUS_OK
WriteX 11642 65536 16050 16050 NT_STATUS_OK
Close 11642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11622 1939 64 64 NT_STATUS_OK
ReadX 11622 128 248 248 NT_STATUS_OK
ReadX 11622 128 568 568 NT_STATUS_OK
ReadX 11622 3872 1536 1536 NT_STATUS_OK
ReadX 11622 3456 2560 2560 NT_STATUS_OK
ReadX 11622 3136 512 512 NT_STATUS_OK
ReadX 11622 2880 4096 4096 NT_STATUS_OK
ReadX 11622 3264 3072 3072 NT_STATUS_OK
ReadX 11622 320 4096 4096 NT_STATUS_OK
ReadX 11622 1024 4096 4096 NT_STATUS_OK
ReadX 11622 3616 4096 4096 NT_STATUS_OK
ReadX 11622 1939 64 64 NT_STATUS_OK
ReadX 11622 128 248 248 NT_STATUS_OK
ReadX 11622 128 608 608 NT_STATUS_OK
ReadX 11622 2858 1024 1024 NT_STATUS_OK
ReadX 11622 2810 4096 4096 NT_STATUS_OK
ReadX 11622 2826 4096 4096 NT_STATUS_OK
ReadX 11622 2580 2048 2048 NT_STATUS_OK
ReadX 11622 2800 2560 2560 NT_STATUS_OK
ReadX 11622 2100 4096 4096 NT_STATUS_OK
ReadX 11622 2084 4096 4096 NT_STATUS_OK
ReadX 11622 868 4096 4096 NT_STATUS_OK
ReadX 11622 2324 4096 4096 NT_STATUS_OK
ReadX 11622 884 4096 4096 NT_STATUS_OK
ReadX 11622 2604 1024 1024 NT_STATUS_OK
ReadX 11622 580 4096 4096 NT_STATUS_OK
ReadX 11622 596 4096 4096 NT_STATUS_OK
ReadX 11622 2752 4096 4096 NT_STATUS_OK
ReadX 11622 2842 1024 1024 NT_STATUS_OK
ReadX 11622 660 4096 4096 NT_STATUS_OK
ReadX 11622 2720 4096 4096 NT_STATUS_OK
ReadX 11622 2736 4096 4096 NT_STATUS_OK
ReadX 11622 628 4096 4096 NT_STATUS_OK
ReadX 11622 2704 4096 4096 NT_STATUS_OK
ReadX 11622 1556 4096 4096 NT_STATUS_OK
ReadX 11622 576 4096 4096 NT_STATUS_OK
ReadX 11622 3168 1536 1536 NT_STATUS_OK
ReadX 11622 832 4096 4096 NT_STATUS_OK
ReadX 11622 1088 4096 4096 NT_STATUS_OK
ReadX 11622 1344 4096 4096 NT_STATUS_OK
ReadX 11622 1600 4096 4096 NT_STATUS_OK
ReadX 11622 1856 4096 4096 NT_STATUS_OK
ReadX 11622 2112 4096 4096 NT_STATUS_OK
ReadX 11622 1892 4096 4096 NT_STATUS_OK
ReadX 11622 820 4096 4096 NT_STATUS_OK
ReadX 11622 788 4096 4096 NT_STATUS_OK
ReadX 11622 1604 4096 4096 NT_STATUS_OK
ReadX 11622 3648 4096 4096 NT_STATUS_OK
ReadX 11622 2608 4096 4096 NT_STATUS_OK
ReadX 11622 548 4096 4096 NT_STATUS_OK
ReadX 11622 740 4096 4096 NT_STATUS_OK
ReadX 11622 1344 4096 4096 NT_STATUS_OK
ReadX 11622 3392 4096 4096 NT_STATUS_OK
ReadX 11622 3904 4096 4096 NT_STATUS_OK
ReadX 11622 644 4096 4096 NT_STATUS_OK
ReadX 11622 676 4096 4096 NT_STATUS_OK
ReadX 11622 2688 4096 4096 NT_STATUS_OK
ReadX 11622 320 4096 4096 NT_STATUS_OK
ReadX 11622 900 4096 4096 NT_STATUS_OK
ReadX 11622 1908 4096 4096 NT_STATUS_OK
ReadX 11622 852 4096 4096 NT_STATUS_OK
ReadX 11622 724 4096 4096 NT_STATUS_OK
ReadX 11622 2292 4096 4096 NT_STATUS_OK
ReadX 11622 612 4096 4096 NT_STATUS_OK
ReadX 11622 388 4096 4096 NT_STATUS_OK
ReadX 11622 2368 4096 4096 NT_STATUS_OK
ReadX 11622 2624 4096 4096 NT_STATUS_OK
ReadX 11622 500 4096 4096 NT_STATUS_OK
ReadX 11622 356 4096 4096 NT_STATUS_OK
ReadX 11622 1024 4096 4096 NT_STATUS_OK
ReadX 11622 576 4096 4096 NT_STATUS_OK
ReadX 11622 340 4096 4096 NT_STATUS_OK
ReadX 11622 420 4096 4096 NT_STATUS_OK
ReadX 11622 1600 4096 4096 NT_STATUS_OK
ReadX 11622 404 4096 4096 NT_STATUS_OK
ReadX 11622 1428 4096 4096 NT_STATUS_OK
ReadX 11622 2656 4096 4096 NT_STATUS_OK
ReadX 11622 2624 4096 4096 NT_STATUS_OK
ReadX 11622 452 4096 4096 NT_STATUS_OK
ReadX 11622 692 4096 4096 NT_STATUS_OK
ReadX 11622 564 4096 4096 NT_STATUS_OK
ReadX 11622 372 4096 4096 NT_STATUS_OK
ReadX 11622 468 4096 4096 NT_STATUS_OK
ReadX 11622 484 4096 4096 NT_STATUS_OK
ReadX 11622 1088 4096 4096 NT_STATUS_OK
ReadX 11622 1924 4096 4096 NT_STATUS_OK
ReadX 11622 2768 4096 4096 NT_STATUS_OK
ReadX 11622 832 4096 4096 NT_STATUS_OK
ReadX 11622 836 4096 4096 NT_STATUS_OK
ReadX 11622 1856 4096 4096 NT_STATUS_OK
ReadX 11622 2640 4096 4096 NT_STATUS_OK
ReadX 11622 436 4096 4096 NT_STATUS_OK
ReadX 11622 1828 4096 4096 NT_STATUS_OK
ReadX 11622 804 4096 4096 NT_STATUS_OK
ReadX 11622 1860 4096 4096 NT_STATUS_OK
ReadX 11622 1812 4096 4096 NT_STATUS_OK
ReadX 11622 756 4096 4096 NT_STATUS_OK
ReadX 11622 1636 4096 4096 NT_STATUS_OK
ReadX 11622 772 4096 4096 NT_STATUS_OK
ReadX 11622 2036 4096 4096 NT_STATUS_OK
ReadX 11622 1220 4096 4096 NT_STATUS_OK
ReadX 11622 1652 4096 4096 NT_STATUS_OK
ReadX 11622 2588 4096 4096 NT_STATUS_OK
ReadX 11622 916 4096 4096 NT_STATUS_OK
ReadX 11622 260 4096 4096 NT_STATUS_OK
ReadX 11622 932 4096 4096 NT_STATUS_OK
ReadX 11622 2624 4096 4096 NT_STATUS_OK
ReadX 11622 308 4096 4096 NT_STATUS_OK
ReadX 11622 292 4096 4096 NT_STATUS_OK
ReadX 11622 1140 4096 4096 NT_STATUS_OK
ReadX 11622 276 4096 4096 NT_STATUS_OK
ReadX 11622 2020 4096 4096 NT_STATUS_OK
ReadX 11622 2880 4096 4096 NT_STATUS_OK
ReadX 11622 516 4096 4096 NT_STATUS_OK
ReadX 11622 1844 4096 4096 NT_STATUS_OK
ReadX 11622 1124 4096 4096 NT_STATUS_OK
ReadX 11622 3136 4096 4096 NT_STATUS_OK
ReadX 11622 324 4096 4096 NT_STATUS_OK
ReadX 11622 1156 4096 4096 NT_STATUS_OK
ReadX 11622 1172 4096 4096 NT_STATUS_OK
ReadX 11622 2112 4096 4096 NT_STATUS_OK
ReadX 11622 2368 4096 4096 NT_STATUS_OK
ReadX 11622 964 4096 4096 NT_STATUS_OK
ReadX 11622 980 4096 4096 NT_STATUS_OK
ReadX 11622 1012 4096 4096 NT_STATUS_OK
ReadX 11622 532 4096 4096 NT_STATUS_OK
ReadX 11622 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11622 1620 4096 4096 NT_STATUS_OK
ReadX 11622 1604 4096 4096 NT_STATUS_OK
ReadX 11622 2116 4096 4096 NT_STATUS_OK
ReadX 11622 2132 4096 4096 NT_STATUS_OK
ReadX 11622 2148 4096 4096 NT_STATUS_OK
ReadX 11622 2276 4096 4096 NT_STATUS_OK
ReadX 11622 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11647 NT_STATUS_OK
QUERY_FILE_INFORMATION 11602 1004 NT_STATUS_OK
Close 11602 NT_STATUS_OK
WriteX 11647 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11647 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11604 1004 NT_STATUS_OK
Close 11604 NT_STATUS_OK
WriteX 11647 0 65536 65536 NT_STATUS_OK
WriteX 11647 65536 64850 64850 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11649 NT_STATUS_OK
WriteX 11649 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11649 258 NT_STATUS_OK
ReadX 11622 2068 4096 4096 NT_STATUS_OK
ReadX 11622 1588 4096 4096 NT_STATUS_OK
ReadX 11622 1572 4096 4096 NT_STATUS_OK
WriteX 11649 0 18630 18630 NT_STATUS_OK
Flush 11649 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11651 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11622 612 4096 4096 NT_STATUS_OK
ReadX 11622 564 4096 4096 NT_STATUS_OK
ReadX 11622 1876 4096 4096 NT_STATUS_OK
ReadX 11622 628 4096 4096 NT_STATUS_OK
ReadX 11622 740 4096 4096 NT_STATUS_OK
ReadX 11622 724 4096 4096 NT_STATUS_OK
ReadX 11622 644 4096 4096 NT_STATUS_OK
ReadX 11622 2324 4096 4096 NT_STATUS_OK
ReadX 11622 660 4096 4096 NT_STATUS_OK
ReadX 11622 852 4096 4096 NT_STATUS_OK
ReadX 11622 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11622 2368 4096 4096 NT_STATUS_OK
ReadX 11622 1024 4096 4096 NT_STATUS_OK
ReadX 11622 320 4096 4096 NT_STATUS_OK
ReadX 11622 580 4096 4096 NT_STATUS_OK
ReadX 11622 3136 512 512 NT_STATUS_OK
ReadX 11622 2880 4096 4096 NT_STATUS_OK
Close 11622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 61440 4096 4096 NT_STATUS_OK
ReadX 11654 126976 4096 4096 NT_STATUS_OK
WriteX 11654 0 65536 65536 NT_STATUS_OK
WriteX 11654 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 61440 4096 4096 NT_STATUS_OK
ReadX 11655 126976 4096 4096 NT_STATUS_OK
ReadX 11655 192512 4096 4096 NT_STATUS_OK
ReadX 11655 258048 4096 4096 NT_STATUS_OK
WriteX 11655 0 65536 65536 NT_STATUS_OK
WriteX 11655 65536 65536 65536 NT_STATUS_OK
WriteX 11655 131072 65536 65536 NT_STATUS_OK
WriteX 11655 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 61440 4096 4096 NT_STATUS_OK
ReadX 11656 126976 4096 4096 NT_STATUS_OK
ReadX 11656 192512 4096 4096 NT_STATUS_OK
ReadX 11656 258048 4096 4096 NT_STATUS_OK
ReadX 11656 323584 4096 4096 NT_STATUS_OK
ReadX 11656 389120 4096 4096 NT_STATUS_OK
ReadX 11656 454656 4096 4096 NT_STATUS_OK
ReadX 11656 520192 4096 4096 NT_STATUS_OK
WriteX 11656 0 65536 65536 NT_STATUS_OK
WriteX 11656 65536 65536 65536 NT_STATUS_OK
WriteX 11656 131072 65536 65536 NT_STATUS_OK
WriteX 11656 196608 65536 65536 NT_STATUS_OK
WriteX 11656 262144 65536 65536 NT_STATUS_OK
WriteX 11656 327680 65536 65536 NT_STATUS_OK
WriteX 11656 393216 65536 65536 NT_STATUS_OK
WriteX 11656 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11659 NT_STATUS_OK
WriteX 11659 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11659 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11657 0 8192 8192 NT_STATUS_OK
Flush 11657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11657 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11657 0 8192 8192 NT_STATUS_OK
Flush 11657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11657 0 8192 8192 NT_STATUS_OK
Flush 11657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11657 0 8192 8192 NT_STATUS_OK
Flush 11657 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11664 NT_STATUS_OK
WriteX 11664 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11664 258 NT_STATUS_OK
WriteX 11664 0 62591 62591 NT_STATUS_OK
Close 11664 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11666 NT_STATUS_OK
Close 11666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11669 NT_STATUS_OK
WriteX 11669 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11669 258 NT_STATUS_OK
WriteX 11669 0 10845 10845 NT_STATUS_OK
Close 11669 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11671 NT_STATUS_OK
Close 11671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11674 NT_STATUS_OK
WriteX 11674 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 30118 30118 NT_STATUS_OK
Close 11674 NT_STATUS_OK
WriteX 11657 0 4096 4096 NT_STATUS_OK
WriteX 11659 0 64 64 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 61440 61440 NT_STATUS_OK
ReadX 11676 61440 4096 4096 NT_STATUS_OK
ReadX 11676 65536 61440 61440 NT_STATUS_OK
ReadX 11676 126976 4096 4096 NT_STATUS_OK
ReadX 11676 131072 61440 61440 NT_STATUS_OK
ReadX 11676 192512 4096 4096 NT_STATUS_OK
ReadX 11676 196608 61440 61440 NT_STATUS_OK
ReadX 11676 258048 4096 4096 NT_STATUS_OK
ReadX 11676 262144 61440 61440 NT_STATUS_OK
ReadX 11676 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 0 61440 61440 NT_STATUS_OK
ReadX 11677 61440 4096 4096 NT_STATUS_OK
ReadX 11677 65536 61440 61440 NT_STATUS_OK
ReadX 11677 126976 4096 4096 NT_STATUS_OK
ReadX 11677 131072 61440 61440 NT_STATUS_OK
ReadX 11677 192512 4096 4096 NT_STATUS_OK
ReadX 11677 196608 61440 61440 NT_STATUS_OK
ReadX 11677 258048 4096 4096 NT_STATUS_OK
ReadX 11677 262144 61440 61440 NT_STATUS_OK
ReadX 11677 323584 4096 4096 NT_STATUS_OK
ReadX 11677 327680 61440 61440 NT_STATUS_OK
ReadX 11677 389120 4096 4096 NT_STATUS_OK
ReadX 11677 393216 61440 61440 NT_STATUS_OK
ReadX 11677 454656 4096 4096 NT_STATUS_OK
ReadX 11677 458752 61440 61440 NT_STATUS_OK
ReadX 11677 520192 4096 4096 NT_STATUS_OK
ReadX 11677 524288 61440 61440 NT_STATUS_OK
ReadX 11677 585728 4096 4096 NT_STATUS_OK
ReadX 11677 589824 61440 61440 NT_STATUS_OK
ReadX 11677 651264 4096 4096 NT_STATUS_OK
ReadX 11677 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 0 61440 61440 NT_STATUS_OK
ReadX 11678 61440 4096 4096 NT_STATUS_OK
ReadX 11678 65536 61440 61440 NT_STATUS_OK
ReadX 11678 126976 4096 4096 NT_STATUS_OK
ReadX 11678 131072 61440 61440 NT_STATUS_OK
ReadX 11678 192512 4096 4096 NT_STATUS_OK
ReadX 11678 196608 61440 61440 NT_STATUS_OK
ReadX 11678 258048 4096 4096 NT_STATUS_OK
ReadX 11678 262144 61440 61440 NT_STATUS_OK
ReadX 11678 323584 4096 4096 NT_STATUS_OK
ReadX 11678 327680 61440 61440 NT_STATUS_OK
ReadX 11678 389120 4096 4096 NT_STATUS_OK
ReadX 11678 393216 61440 61440 NT_STATUS_OK
ReadX 11678 454656 4096 4096 NT_STATUS_OK
ReadX 11678 458752 61440 61440 NT_STATUS_OK
ReadX 11678 520192 4096 4096 NT_STATUS_OK
ReadX 11678 524288 61440 61440 NT_STATUS_OK
ReadX 11678 585728 4096 4096 NT_STATUS_OK
ReadX 11678 589824 61440 61440 NT_STATUS_OK
ReadX 11678 651264 4096 4096 NT_STATUS_OK
ReadX 11678 655360 61440 61440 NT_STATUS_OK
ReadX 11678 716800 4096 4096 NT_STATUS_OK
ReadX 11678 720896 61440 61440 NT_STATUS_OK
ReadX 11678 782336 4096 4096 NT_STATUS_OK
ReadX 11678 786432 61440 61440 NT_STATUS_OK
ReadX 11678 847872 4096 4096 NT_STATUS_OK
ReadX 11678 851968 61440 61440 NT_STATUS_OK
ReadX 11678 913408 4096 4096 NT_STATUS_OK
ReadX 11678 917504 61440 61440 NT_STATUS_OK
ReadX 11678 978944 4096 4096 NT_STATUS_OK
ReadX 11678 983040 61440 61440 NT_STATUS_OK
ReadX 11678 1044480 4096 4096 NT_STATUS_OK
ReadX 11678 1048576 61440 61440 NT_STATUS_OK
ReadX 11678 1110016 4096 4096 NT_STATUS_OK
ReadX 11678 1114112 61440 61440 NT_STATUS_OK
ReadX 11678 1175552 4096 4096 NT_STATUS_OK
ReadX 11678 1179648 61440 61440 NT_STATUS_OK
ReadX 11678 1241088 4096 4096 NT_STATUS_OK
ReadX 11678 1245184 61440 61440 NT_STATUS_OK
ReadX 11678 1306624 4096 4096 NT_STATUS_OK
ReadX 11678 1310720 61440 61440 NT_STATUS_OK
ReadX 11678 1372160 4096 4096 NT_STATUS_OK
ReadX 11678 1376256 61440 61440 NT_STATUS_OK
ReadX 11678 1437696 4096 4096 NT_STATUS_OK
ReadX 11678 1441792 61440 61440 NT_STATUS_OK
ReadX 11678 1503232 4096 4096 NT_STATUS_OK
ReadX 11678 1507328 61440 61440 NT_STATUS_OK
ReadX 11678 1568768 4096 4096 NT_STATUS_OK
ReadX 11678 1572864 61440 61440 NT_STATUS_OK
ReadX 11678 1634304 4096 4096 NT_STATUS_OK
ReadX 11678 1638400 61440 61440 NT_STATUS_OK
ReadX 11678 1699840 4096 4096 NT_STATUS_OK
ReadX 11678 1703936 61440 61440 NT_STATUS_OK
ReadX 11678 1765376 4096 4096 NT_STATUS_OK
ReadX 11678 1769472 61440 61440 NT_STATUS_OK
ReadX 11678 1830912 4096 4096 NT_STATUS_OK
ReadX 11678 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
ReadX 11683 4096 4096 4096 NT_STATUS_OK
ReadX 11683 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11684 NT_STATUS_OK
Close 11684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11687 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 8192 8192 NT_STATUS_OK
ReadX 11691 8192 8192 8192 NT_STATUS_OK
ReadX 11691 16384 8192 8192 NT_STATUS_OK
ReadX 11691 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11693 NT_STATUS_OK
Close 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11696 NT_STATUS_OK
WriteX 11696 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11696 258 NT_STATUS_OK
WriteX 11696 0 10438 10438 NT_STATUS_OK
Close 11696 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11697 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11699 NT_STATUS_OK
Close 11699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11700 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11701 NT_STATUS_OK
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11702 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11704 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
ReadX 11705 4096 4096 4096 NT_STATUS_OK
ReadX 11705 8192 4096 4096 NT_STATUS_OK
ReadX 11705 12288 8192 8192 NT_STATUS_OK
ReadX 11705 20480 8192 8192 NT_STATUS_OK
ReadX 11705 28672 8192 8192 NT_STATUS_OK
ReadX 11705 36864 8192 8192 NT_STATUS_OK
ReadX 11705 45056 8192 8192 NT_STATUS_OK
ReadX 11705 53248 8192 8192 NT_STATUS_OK
ReadX 11705 61440 8192 8192 NT_STATUS_OK
ReadX 11705 69632 8192 8192 NT_STATUS_OK
ReadX 11705 77824 8192 8192 NT_STATUS_OK
ReadX 11705 86016 8192 8192 NT_STATUS_OK
ReadX 11705 94208 8192 8192 NT_STATUS_OK
ReadX 11705 102400 8192 8192 NT_STATUS_OK
ReadX 11705 110592 8192 8192 NT_STATUS_OK
ReadX 11705 118784 8192 8192 NT_STATUS_OK
ReadX 11705 126976 8192 8192 NT_STATUS_OK
ReadX 11705 135168 8192 8192 NT_STATUS_OK
ReadX 11705 143360 8192 8192 NT_STATUS_OK
ReadX 11705 151552 8192 8192 NT_STATUS_OK
ReadX 11705 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11710 NT_STATUS_OK
WriteX 11710 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11710 258 NT_STATUS_OK
WriteX 11710 0 28489 28489 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11711 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11713 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11714 NT_STATUS_OK
Close 11714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 8192 8192 NT_STATUS_OK
ReadX 11717 8192 8192 8192 NT_STATUS_OK
ReadX 11717 16384 8192 8192 NT_STATUS_OK
ReadX 11717 24576 8192 8192 NT_STATUS_OK
ReadX 11717 32768 16384 16384 NT_STATUS_OK
ReadX 11717 49152 8192 8192 NT_STATUS_OK
ReadX 11717 57344 8192 8192 NT_STATUS_OK
ReadX 11717 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11722 NT_STATUS_OK
WriteX 11722 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11722 258 NT_STATUS_OK
WriteX 11722 0 29253 29253 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11729 NT_STATUS_OK
WriteX 11729 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
WriteX 11729 0 30183 30183 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11730 NT_STATUS_OK
Close 11730 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11732 NT_STATUS_OK
WriteX 11732 0 510 510 NT_STATUS_OK
WriteX 11732 510 512 512 NT_STATUS_OK
WriteX 11732 1022 510 510 NT_STATUS_OK
WriteX 11732 1532 510 510 NT_STATUS_OK
WriteX 11732 2042 168 168 NT_STATUS_OK
Close 11732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11733 NT_STATUS_OK
Close 11733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 61440 4096 4096 NT_STATUS_OK
ReadX 11736 126976 4096 4096 NT_STATUS_OK
WriteX 11736 0 65536 65536 NT_STATUS_OK
WriteX 11736 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 61440 4096 4096 NT_STATUS_OK
ReadX 11737 126976 4096 4096 NT_STATUS_OK
ReadX 11737 192512 4096 4096 NT_STATUS_OK
ReadX 11737 258048 4096 4096 NT_STATUS_OK
WriteX 11737 0 65536 65536 NT_STATUS_OK
WriteX 11737 65536 65536 65536 NT_STATUS_OK
WriteX 11737 131072 65536 65536 NT_STATUS_OK
WriteX 11737 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 61440 4096 4096 NT_STATUS_OK
ReadX 11738 126976 4096 4096 NT_STATUS_OK
ReadX 11738 192512 4096 4096 NT_STATUS_OK
ReadX 11738 258048 4096 4096 NT_STATUS_OK
ReadX 11738 323584 4096 4096 NT_STATUS_OK
ReadX 11738 389120 4096 4096 NT_STATUS_OK
ReadX 11738 454656 4096 4096 NT_STATUS_OK
ReadX 11738 520192 4096 4096 NT_STATUS_OK
WriteX 11738 0 65536 65536 NT_STATUS_OK
WriteX 11738 65536 65536 65536 NT_STATUS_OK
WriteX 11738 131072 65536 65536 NT_STATUS_OK
WriteX 11738 196608 65536 65536 NT_STATUS_OK
WriteX 11738 262144 65536 65536 NT_STATUS_OK
WriteX 11738 327680 65536 65536 NT_STATUS_OK
WriteX 11738 393216 65536 65536 NT_STATUS_OK
WriteX 11738 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11739 NT_STATUS_OK
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11736 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11741 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11748 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11754 NT_STATUS_OK
Close 11754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11757 NT_STATUS_OK
Close 11757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11759 NT_STATUS_OK
Close 11759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11763 NT_STATUS_OK
Close 11763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11768 NT_STATUS_OK
Close 11768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11773 NT_STATUS_OK
Close 11773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11793 NT_STATUS_OK
Close 11793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11798 NT_STATUS_OK
Close 11798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11804 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11807 NT_STATUS_OK
WriteX 11807 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11807 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11807 0 65536 65536 NT_STATUS_OK
WriteX 11807 65536 65536 65536 NT_STATUS_OK
WriteX 11807 131072 65536 65536 NT_STATUS_OK
WriteX 11807 196608 65536 65536 NT_STATUS_OK
WriteX 11807 262144 26634 26634 NT_STATUS_OK
Close 11807 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11812 NT_STATUS_OK
Close 11812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11813 NT_STATUS_OK
Close 11813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 0 4096 4096 NT_STATUS_OK
ReadX 11815 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11816 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11820 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11825 NT_STATUS_OK
Close 11825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11829 NT_STATUS_OK
Close 11829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11834 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11843 NT_STATUS_OK
Close 11843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11848 NT_STATUS_OK
Close 11848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11853 NT_STATUS_OK
Close 11853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11863 NT_STATUS_OK
Close 11863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11867 NT_STATUS_OK
Close 11867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11872 NT_STATUS_OK
Close 11872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11877 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11892 NT_STATUS_OK
Close 11892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
Close 11895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11906 NT_STATUS_OK
Close 11906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
Close 11909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11910 NT_STATUS_OK
ReadX 11910 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Close 11910 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11939 0 4096 4096 NT_STATUS_OK
Close 11939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
ReadX 11941 4096 4096 4096 NT_STATUS_OK
ReadX 11941 8192 4096 4096 NT_STATUS_OK
ReadX 11941 12288 4096 4096 NT_STATUS_OK
ReadX 11941 16384 4096 4096 NT_STATUS_OK
ReadX 11941 20480 4096 4096 NT_STATUS_OK
ReadX 11941 24576 4096 4096 NT_STATUS_OK
ReadX 11941 28672 4096 4096 NT_STATUS_OK
ReadX 11941 32768 4096 4096 NT_STATUS_OK
ReadX 11941 36864 4096 4096 NT_STATUS_OK
ReadX 11941 40960 4096 4096 NT_STATUS_OK
ReadX 11941 45056 4096 4096 NT_STATUS_OK
ReadX 11941 49152 4096 4096 NT_STATUS_OK
ReadX 11941 53248 4096 4096 NT_STATUS_OK
ReadX 11941 57344 4096 4096 NT_STATUS_OK
ReadX 11941 61440 4096 4096 NT_STATUS_OK
ReadX 11941 65536 4096 4096 NT_STATUS_OK
ReadX 11941 69632 4096 4096 NT_STATUS_OK
ReadX 11941 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11941 1004 NT_STATUS_OK
WriteX 11941 0 4096 4096 NT_STATUS_OK
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11942 NT_STATUS_OK
SET_FILE_INFORMATION 11942 1004 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11944 NT_STATUS_OK
Close 11944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11947 NT_STATUS_OK
WriteX 11947 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11947 258 NT_STATUS_OK
WriteX 11947 0 65536 65536 NT_STATUS_OK
WriteX 11947 65536 19979 19979 NT_STATUS_OK
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
WriteX 11948 0 4096 4096 NT_STATUS_OK
Flush 11948 NT_STATUS_OK
WriteX 11948 0 4096 4096 NT_STATUS_OK
Flush 11948 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 1004 NT_STATUS_OK
WriteX 11948 0 4096 4096 NT_STATUS_OK
Flush 11948 NT_STATUS_OK
WriteX 11948 0 4096 4096 NT_STATUS_OK
Flush 11948 NT_STATUS_OK
WriteX 11948 0 4096 4096 NT_STATUS_OK
Flush 11948 NT_STATUS_OK
SET_FILE_INFORMATION 11948 1004 NT_STATUS_OK
WriteX 11948 0 4096 4096 NT_STATUS_OK
Flush 11948 NT_STATUS_OK
Close 11948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
Close 11949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11951 NT_STATUS_OK
ReadX 11951 0 4096 4096 NT_STATUS_OK
Close 11951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 4096 4096 NT_STATUS_OK
Close 11952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11959 NT_STATUS_OK
WriteX 11959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 258 NT_STATUS_OK
WriteX 11959 0 65536 65536 NT_STATUS_OK
WriteX 11959 65536 17654 17654 NT_STATUS_OK
Close 11959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
QUERY_FILE_INFORMATION 11960 1004 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
SET_FILE_INFORMATION 11960 1004 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11961 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
Close 11961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11963 NT_STATUS_OK
Close 11963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
ReadX 11965 4096 4096 4096 NT_STATUS_OK
ReadX 11965 8192 4096 4096 NT_STATUS_OK
ReadX 11965 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11965 16384 4096 4096 NT_STATUS_OK
ReadX 11965 20480 4096 4096 NT_STATUS_OK
ReadX 11965 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
Close 11966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
Close 11967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11974 NT_STATUS_OK
WriteX 11974 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11974 258 NT_STATUS_OK
WriteX 11974 0 65536 65536 NT_STATUS_OK
WriteX 11974 65536 19490 19490 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 4096 4096 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
Flush 11975 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
Flush 11975 NT_STATUS_OK
QUERY_FILE_INFORMATION 11975 1004 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
Flush 11975 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
Flush 11975 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
Flush 11975 NT_STATUS_OK
SET_FILE_INFORMATION 11975 1004 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
Flush 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11976 NT_STATUS_OK
SET_FILE_INFORMATION 11976 1004 NT_STATUS_OK
Close 11976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11980 0 4096 4096 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 4096 4096 NT_STATUS_OK
ReadX 11982 4096 4096 4096 NT_STATUS_OK
ReadX 11982 8192 4096 4096 NT_STATUS_OK
ReadX 11982 12288 4096 4096 NT_STATUS_OK
ReadX 11982 16384 4096 4096 NT_STATUS_OK
ReadX 11982 20480 4096 4096 NT_STATUS_OK
ReadX 11982 24576 4096 4096 NT_STATUS_OK
ReadX 11982 28672 4096 4096 NT_STATUS_OK
ReadX 11982 32768 4096 4096 NT_STATUS_OK
ReadX 11982 36864 4096 4096 NT_STATUS_OK
ReadX 11982 40960 4096 4096 NT_STATUS_OK
ReadX 11982 45056 4096 4096 NT_STATUS_OK
ReadX 11982 49152 4096 4096 NT_STATUS_OK
ReadX 11982 53248 4096 4096 NT_STATUS_OK
ReadX 11982 57344 4096 4096 NT_STATUS_OK
ReadX 11982 61440 4096 4096 NT_STATUS_OK
ReadX 11982 65536 4096 4096 NT_STATUS_OK
ReadX 11982 69632 4096 4096 NT_STATUS_OK
ReadX 11982 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11982 1004 NT_STATUS_OK
WriteX 11982 0 4096 4096 NT_STATUS_OK
Close 11982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11983 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
Close 11983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11988 NT_STATUS_OK
WriteX 11988 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 258 NT_STATUS_OK
WriteX 11988 0 65536 65536 NT_STATUS_OK
WriteX 11988 65536 8866 8866 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11989 NT_STATUS_OK
ReadX 11989 0 4096 4096 NT_STATUS_OK
WriteX 11989 0 4096 4096 NT_STATUS_OK
Flush 11989 NT_STATUS_OK
SET_FILE_INFORMATION 11989 1004 NT_STATUS_OK
WriteX 11989 0 4096 4096 NT_STATUS_OK
Flush 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
Close 11991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
Close 11992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11993 1004 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11994 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11999 NT_STATUS_OK
WriteX 11999 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11999 258 NT_STATUS_OK
WriteX 11999 0 65536 65536 NT_STATUS_OK
WriteX 11999 65536 9298 9298 NT_STATUS_OK
Close 11999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
WriteX 12000 0 4096 4096 NT_STATUS_OK
Flush 12000 NT_STATUS_OK
SET_FILE_INFORMATION 12000 1004 NT_STATUS_OK
WriteX 12000 0 4096 4096 NT_STATUS_OK
Flush 12000 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12001 NT_STATUS_OK
SET_FILE_INFORMATION 12001 1004 NT_STATUS_OK
Close 12001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12003 NT_STATUS_OK
Close 12003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12006 0 4096 4096 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12007 4096 4096 4096 NT_STATUS_OK
ReadX 12007 8192 4096 4096 NT_STATUS_OK
ReadX 12007 12288 4096 4096 NT_STATUS_OK
ReadX 12007 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
Close 12008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 0 4096 4096 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12010 1004 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12013 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12016 NT_STATUS_OK
WriteX 12016 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 258 NT_STATUS_OK
WriteX 12016 0 65536 65536 NT_STATUS_OK
WriteX 12016 65536 11540 11540 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
Flush 12017 NT_STATUS_OK
SET_FILE_INFORMATION 12017 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
Flush 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12018 NT_STATUS_OK
SET_FILE_INFORMATION 12018 1004 NT_STATUS_OK
Close 12018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12020 NT_STATUS_OK
Close 12020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 61440 4096 4096 NT_STATUS_OK
ReadX 12022 126976 4096 4096 NT_STATUS_OK
WriteX 12022 0 65536 65536 NT_STATUS_OK
WriteX 12022 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 61440 4096 4096 NT_STATUS_OK
ReadX 12023 126976 4096 4096 NT_STATUS_OK
ReadX 12023 192512 4096 4096 NT_STATUS_OK
ReadX 12023 258048 4096 4096 NT_STATUS_OK
WriteX 12023 0 65536 65536 NT_STATUS_OK
WriteX 12023 65536 65536 65536 NT_STATUS_OK
WriteX 12023 131072 65536 65536 NT_STATUS_OK
WriteX 12023 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12024 NT_STATUS_OK
ReadX 12024 61440 4096 4096 NT_STATUS_OK
ReadX 12024 126976 4096 4096 NT_STATUS_OK
ReadX 12024 192512 4096 4096 NT_STATUS_OK
ReadX 12024 258048 4096 4096 NT_STATUS_OK
ReadX 12024 323584 4096 4096 NT_STATUS_OK
ReadX 12024 389120 4096 4096 NT_STATUS_OK
ReadX 12024 454656 4096 4096 NT_STATUS_OK
ReadX 12024 520192 4096 4096 NT_STATUS_OK
WriteX 12024 0 65536 65536 NT_STATUS_OK
WriteX 12024 65536 65536 65536 NT_STATUS_OK
WriteX 12024 131072 65536 65536 NT_STATUS_OK
WriteX 12024 196608 65536 65536 NT_STATUS_OK
WriteX 12024 262144 65536 65536 NT_STATUS_OK
WriteX 12024 327680 65536 65536 NT_STATUS_OK
WriteX 12024 393216 65536 65536 NT_STATUS_OK
WriteX 12024 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
ReadX 12025 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12026 NT_STATUS_OK
WriteX 12026 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12026 258 NT_STATUS_OK
WriteX 12026 0 53 53 NT_STATUS_OK
Close 12026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12027 NT_STATUS_OK
Close 12027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12025 8192 4096 4096 NT_STATUS_OK
ReadX 12025 12288 4096 4096 NT_STATUS_OK
WriteX 12029 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12029 258 NT_STATUS_OK
ReadX 12025 16384 4096 4096 NT_STATUS_OK
ReadX 12025 20480 4096 4096 NT_STATUS_OK
WriteX 12029 0 15360 15360 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12030 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12031 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12033 4096 4096 4096 NT_STATUS_OK
ReadX 12033 8192 4096 4096 NT_STATUS_OK
ReadX 12033 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
ReadX 12036 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
ReadX 12037 4096 4096 4096 NT_STATUS_OK
ReadX 12037 8192 4096 4096 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12038 NT_STATUS_OK
WriteX 12038 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12038 258 NT_STATUS_OK
WriteX 12038 0 15360 15360 NT_STATUS_OK
Close 12038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12039 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12039 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12040 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12043 NT_STATUS_OK
SET_FILE_INFORMATION 12043 1004 NT_STATUS_OK
Close 12043 NT_STATUS_OK
WriteX 12039 0 4096 4096 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
ReadX 12046 4096 4096 4096 NT_STATUS_OK
ReadX 12046 8192 4096 4096 NT_STATUS_OK
ReadX 12046 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12046 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12046 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12048 NT_STATUS_OK
WriteX 12048 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 258 NT_STATUS_OK
WriteX 12048 0 53 53 NT_STATUS_OK
Close 12048 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12049 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12047 4096 4096 4096 NT_STATUS_OK
ReadX 12047 8192 4096 4096 NT_STATUS_OK
ReadX 12047 12288 4096 4096 NT_STATUS_OK
WriteX 12051 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12051 258 NT_STATUS_OK
WriteX 12051 0 12006 12006 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12052 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12052 1004 NT_STATUS_OK
WriteX 12052 0 4096 4096 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12056 NT_STATUS_OK
Close 12056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12055 4096 4096 4096 NT_STATUS_OK
ReadX 12055 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12058 NT_STATUS_OK
WriteX 12058 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12058 258 NT_STATUS_OK
WriteX 12058 0 11991 11991 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12059 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12059 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12062 NT_STATUS_OK
ReadX 12062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12063 NT_STATUS_OK
SET_FILE_INFORMATION 12063 1004 NT_STATUS_OK
Close 12063 NT_STATUS_OK
WriteX 12059 0 4096 4096 NT_STATUS_OK
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12066 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12066 1004 NT_STATUS_OK
ReadX 12066 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12066 1004 NT_STATUS_OK
WriteX 12066 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12066 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12066 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12066 1004 NT_STATUS_OK
Close 12042 NT_STATUS_OK
WriteX 12046 0 19054 19054 NT_STATUS_OK
WriteX 12066 0 12288 12288 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12069 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 61440 61440 NT_STATUS_OK
ReadX 12073 61440 4096 4096 NT_STATUS_OK
ReadX 12073 65536 61440 61440 NT_STATUS_OK
ReadX 12073 126976 4096 4096 NT_STATUS_OK
ReadX 12073 131072 61440 61440 NT_STATUS_OK
ReadX 12073 192512 4096 4096 NT_STATUS_OK
ReadX 12073 196608 61440 61440 NT_STATUS_OK
ReadX 12073 258048 4096 4096 NT_STATUS_OK
ReadX 12073 262144 61440 61440 NT_STATUS_OK
ReadX 12073 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 61440 61440 NT_STATUS_OK
ReadX 12074 61440 4096 4096 NT_STATUS_OK
ReadX 12074 65536 61440 61440 NT_STATUS_OK
ReadX 12074 126976 4096 4096 NT_STATUS_OK
ReadX 12074 131072 61440 61440 NT_STATUS_OK
ReadX 12074 192512 4096 4096 NT_STATUS_OK
ReadX 12074 196608 61440 61440 NT_STATUS_OK
ReadX 12074 258048 4096 4096 NT_STATUS_OK
ReadX 12074 262144 61440 61440 NT_STATUS_OK
ReadX 12074 323584 4096 4096 NT_STATUS_OK
ReadX 12074 327680 61440 61440 NT_STATUS_OK
ReadX 12074 389120 4096 4096 NT_STATUS_OK
ReadX 12074 393216 61440 61440 NT_STATUS_OK
ReadX 12074 454656 4096 4096 NT_STATUS_OK
ReadX 12074 458752 61440 61440 NT_STATUS_OK
ReadX 12074 520192 4096 4096 NT_STATUS_OK
ReadX 12074 524288 61440 61440 NT_STATUS_OK
ReadX 12074 585728 4096 4096 NT_STATUS_OK
ReadX 12074 589824 61440 61440 NT_STATUS_OK
ReadX 12074 651264 4096 4096 NT_STATUS_OK
ReadX 12074 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 61440 61440 NT_STATUS_OK
ReadX 12075 61440 4096 4096 NT_STATUS_OK
ReadX 12075 65536 61440 61440 NT_STATUS_OK
ReadX 12075 126976 4096 4096 NT_STATUS_OK
ReadX 12075 131072 61440 61440 NT_STATUS_OK
ReadX 12075 192512 4096 4096 NT_STATUS_OK
ReadX 12075 196608 61440 61440 NT_STATUS_OK
ReadX 12075 258048 4096 4096 NT_STATUS_OK
ReadX 12075 262144 61440 61440 NT_STATUS_OK
ReadX 12075 323584 4096 4096 NT_STATUS_OK
ReadX 12075 327680 61440 61440 NT_STATUS_OK
ReadX 12075 389120 4096 4096 NT_STATUS_OK
ReadX 12075 393216 61440 61440 NT_STATUS_OK
ReadX 12075 454656 4096 4096 NT_STATUS_OK
ReadX 12075 458752 61440 61440 NT_STATUS_OK
ReadX 12075 520192 4096 4096 NT_STATUS_OK
ReadX 12075 524288 61440 61440 NT_STATUS_OK
ReadX 12075 585728 4096 4096 NT_STATUS_OK
ReadX 12075 589824 61440 61440 NT_STATUS_OK
ReadX 12075 651264 4096 4096 NT_STATUS_OK
ReadX 12075 655360 61440 61440 NT_STATUS_OK
ReadX 12075 716800 4096 4096 NT_STATUS_OK
ReadX 12075 720896 61440 61440 NT_STATUS_OK
ReadX 12075 782336 4096 4096 NT_STATUS_OK
ReadX 12075 786432 61440 61440 NT_STATUS_OK
ReadX 12075 847872 4096 4096 NT_STATUS_OK
ReadX 12075 851968 61440 61440 NT_STATUS_OK
ReadX 12075 913408 4096 4096 NT_STATUS_OK
ReadX 12075 917504 61440 61440 NT_STATUS_OK
ReadX 12075 978944 4096 4096 NT_STATUS_OK
ReadX 12075 983040 61440 61440 NT_STATUS_OK
ReadX 12075 1044480 4096 4096 NT_STATUS_OK
ReadX 12075 1048576 61440 61440 NT_STATUS_OK
ReadX 12075 1110016 4096 4096 NT_STATUS_OK
ReadX 12075 1114112 61440 61440 NT_STATUS_OK
ReadX 12075 1175552 4096 4096 NT_STATUS_OK
ReadX 12075 1179648 61440 61440 NT_STATUS_OK
ReadX 12075 1241088 4096 4096 NT_STATUS_OK
ReadX 12075 1245184 61440 61440 NT_STATUS_OK
ReadX 12075 1306624 4096 4096 NT_STATUS_OK
ReadX 12075 1310720 61440 61440 NT_STATUS_OK
ReadX 12075 1372160 4096 4096 NT_STATUS_OK
ReadX 12075 1376256 61440 61440 NT_STATUS_OK
ReadX 12075 1437696 4096 4096 NT_STATUS_OK
ReadX 12075 1441792 61440 61440 NT_STATUS_OK
ReadX 12075 1503232 4096 4096 NT_STATUS_OK
ReadX 12075 1507328 61440 61440 NT_STATUS_OK
ReadX 12075 1568768 4096 4096 NT_STATUS_OK
ReadX 12075 1572864 61440 61440 NT_STATUS_OK
ReadX 12075 1634304 4096 4096 NT_STATUS_OK
ReadX 12075 1638400 61440 61440 NT_STATUS_OK
ReadX 12075 1699840 4096 4096 NT_STATUS_OK
ReadX 12075 1703936 61440 61440 NT_STATUS_OK
ReadX 12075 1765376 4096 4096 NT_STATUS_OK
ReadX 12075 1769472 61440 61440 NT_STATUS_OK
ReadX 12075 1830912 4096 4096 NT_STATUS_OK
ReadX 12075 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12078 NT_STATUS_OK
ReadX 12078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12079 NT_STATUS_OK
ReadX 12079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12080 NT_STATUS_OK
ReadX 12080 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12082 NT_STATUS_OK
QUERY_FILE_INFORMATION 12082 1004 NT_STATUS_OK
WriteX 12082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12082 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12084 NT_STATUS_OK
WriteX 12084 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 258 NT_STATUS_OK
WriteX 12084 0 491 491 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12085 NT_STATUS_OK
ReadX 12085 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12082 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12087 NT_STATUS_OK
Close 12087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12088 NT_STATUS_OK
WriteX 12088 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12088 258 NT_STATUS_OK
WriteX 12088 0 543 543 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12080 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12101 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12102 NT_STATUS_OK
QUERY_FILE_INFORMATION 12102 1004 NT_STATUS_OK
WriteX 12102 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12102 258 NT_STATUS_OK
WriteX 12102 0 2048 2048 NT_STATUS_OK
Close 12102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12103 0 4096 4096 NT_STATUS_OK
Flush 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12103 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12108 NT_STATUS_OK
WriteX 12108 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12108 258 NT_STATUS_OK
WriteX 12108 0 2048 2048 NT_STATUS_OK
Close 12108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12114 NT_STATUS_OK
WriteX 12114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12114 258 NT_STATUS_OK
WriteX 12114 0 2048 2048 NT_STATUS_OK
Close 12114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 2048 2048 NT_STATUS_OK
ReadX 12093 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12109 0 4096 4096 NT_STATUS_OK
WriteX 12093 0 8192 8192 NT_STATUS_OK
WriteX 12094 0 4096 4096 NT_STATUS_OK
WriteX 12095 0 4096 4096 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12119 NT_STATUS_OK
QUERY_FILE_INFORMATION 12119 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12118 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12109 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12121 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12123 NT_STATUS_OK
ReadX 12123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12130 NT_STATUS_OK
ReadX 12130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12132 NT_STATUS_OK
ReadX 12132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12139 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 1004 NT_STATUS_OK
WriteX 12139 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 258 NT_STATUS_OK
WriteX 12139 0 2048 2048 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12140 NT_STATUS_OK
ReadX 12140 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12142 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12147 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1004 NT_STATUS_OK
WriteX 12147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 258 NT_STATUS_OK
WriteX 12147 0 2048 2048 NT_STATUS_OK
Close 12147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12140 0 4096 4096 NT_STATUS_OK
Flush 12140 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
Flush 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12140 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12142 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12150 NT_STATUS_OK
WriteX 12150 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12150 258 NT_STATUS_OK
WriteX 12150 0 4096 4096 NT_STATUS_OK
Close 12150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12153 NT_STATUS_OK
WriteX 12153 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12153 258 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
Close 12153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12154 0 4096 4096 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12125 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12160 NT_STATUS_OK
Close 12160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12161 NT_STATUS_OK
WriteX 12161 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 258 NT_STATUS_OK
WriteX 12161 0 2048 2048 NT_STATUS_OK
Close 12161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12164 NT_STATUS_OK
ReadX 12164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12166 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12173 NT_STATUS_OK
ReadX 12173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12174 NT_STATUS_OK
ReadX 12174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12176 NT_STATUS_OK
QUERY_FILE_INFORMATION 12176 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Close 12174 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Close 12173 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Close 12163 NT_STATUS_OK
Close 12164 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12178 NT_STATUS_OK
QUERY_FILE_INFORMATION 12178 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12182 NT_STATUS_OK
ReadX 12182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12183 NT_STATUS_OK
ReadX 12183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12189 NT_STATUS_OK
ReadX 12189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12197 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12198 NT_STATUS_OK
QUERY_FILE_INFORMATION 12198 1004 NT_STATUS_OK
WriteX 12198 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12198 258 NT_STATUS_OK
WriteX 12198 0 2048 2048 NT_STATUS_OK
Close 12198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12199 NT_STATUS_OK
ReadX 12199 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12203 NT_STATUS_OK
ReadX 12203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12210 NT_STATUS_OK
QUERY_FILE_INFORMATION 12210 1004 NT_STATUS_OK
WriteX 12210 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12210 258 NT_STATUS_OK
WriteX 12210 0 2048 2048 NT_STATUS_OK
Close 12210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12213 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12217 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12218 NT_STATUS_OK
QUERY_FILE_INFORMATION 12218 1004 NT_STATUS_OK
WriteX 12218 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12218 258 NT_STATUS_OK
WriteX 12218 0 2048 2048 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12199 0 4096 4096 NT_STATUS_OK
Flush 12199 NT_STATUS_OK
WriteX 12211 0 4096 4096 NT_STATUS_OK
Flush 12211 NT_STATUS_OK
WriteX 12219 0 4096 4096 NT_STATUS_OK
Flush 12219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12199 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12201 4096 16384 16384 NT_STATUS_OK
ReadX 12181 4096 16384 16384 NT_STATUS_OK
ReadX 12213 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 2048 2048 NT_STATUS_OK
WriteX 12221 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12222 NT_STATUS_OK
QUERY_FILE_INFORMATION 12222 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12185 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Close 12203 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12213 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Close 12190 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12188 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Close 12181 NT_STATUS_OK
Close 12182 NT_STATUS_OK
Close 12183 NT_STATUS_OK
Close 12184 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12224 NT_STATUS_OK
QUERY_FILE_INFORMATION 12224 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12226 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12231 NT_STATUS_OK
ReadX 12231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12229 4096 16384 16384 NT_STATUS_OK
WriteX 12229 0 4096 4096 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
WriteX 12231 0 4096 4096 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12239 NT_STATUS_OK
ReadX 12239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12242 NT_STATUS_OK
ReadX 12242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12245 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12246 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 8192 8192 NT_STATUS_OK
ReadX 12235 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12249 0 4096 4096 NT_STATUS_OK
ReadX 12249 4096 4096 4096 NT_STATUS_OK
ReadX 12249 8192 4096 4096 NT_STATUS_OK
WriteX 12235 0 4096 4096 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
ReadX 12250 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12229 0 4096 4096 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
WriteX 12231 0 4096 4096 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12255 NT_STATUS_OK
QUERY_FILE_INFORMATION 12255 1004 NT_STATUS_OK
WriteX 12255 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12255 258 NT_STATUS_OK
WriteX 12255 0 2048 2048 NT_STATUS_OK
Close 12255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12256 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12258 NT_STATUS_OK
ReadX 12258 0 4096 4096 NT_STATUS_OK
ReadX 12258 4096 4096 4096 NT_STATUS_OK
WriteX 12258 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
ReadX 12260 4096 4096 4096 NT_STATUS_OK
WriteX 12260 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12261 NT_STATUS_OK
QUERY_FILE_INFORMATION 12261 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Close 12233 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12230 NT_STATUS_OK
Close 12231 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Close 12242 NT_STATUS_OK
Close 12243 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12239 NT_STATUS_OK
Close 12240 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12263 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12263 0 4096 4096 NT_STATUS_OK
ReadX 12263 4096 4096 4096 NT_STATUS_OK
ReadX 12263 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12270 NT_STATUS_OK
ReadX 12270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
ReadX 12264 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12281 NT_STATUS_OK
QUERY_FILE_INFORMATION 12281 1004 NT_STATUS_OK
WriteX 12281 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12281 258 NT_STATUS_OK
WriteX 12281 0 2048 2048 NT_STATUS_OK
Close 12281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12282 NT_STATUS_OK
ReadX 12282 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12282 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12286 NT_STATUS_OK
Close 12286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12287 NT_STATUS_OK
QUERY_FILE_INFORMATION 12287 1004 NT_STATUS_OK
WriteX 12287 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12287 258 NT_STATUS_OK
WriteX 12287 0 2048 2048 NT_STATUS_OK
Close 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12288 NT_STATUS_OK
ReadX 12288 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12288 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12271 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12289 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Close 12267 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12291 NT_STATUS_OK
QUERY_FILE_INFORMATION 12291 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 61440 4096 4096 NT_STATUS_OK
ReadX 12293 126976 4096 4096 NT_STATUS_OK
WriteX 12293 0 65536 65536 NT_STATUS_OK
WriteX 12293 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 61440 4096 4096 NT_STATUS_OK
ReadX 12294 126976 4096 4096 NT_STATUS_OK
ReadX 12294 192512 4096 4096 NT_STATUS_OK
ReadX 12294 258048 4096 4096 NT_STATUS_OK
WriteX 12294 0 65536 65536 NT_STATUS_OK
WriteX 12294 65536 65536 65536 NT_STATUS_OK
WriteX 12294 131072 65536 65536 NT_STATUS_OK
WriteX 12294 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 61440 4096 4096 NT_STATUS_OK
ReadX 12295 126976 4096 4096 NT_STATUS_OK
ReadX 12295 192512 4096 4096 NT_STATUS_OK
ReadX 12295 258048 4096 4096 NT_STATUS_OK
ReadX 12295 323584 4096 4096 NT_STATUS_OK
ReadX 12295 389120 4096 4096 NT_STATUS_OK
ReadX 12295 454656 4096 4096 NT_STATUS_OK
ReadX 12295 520192 4096 4096 NT_STATUS_OK
WriteX 12295 0 65536 65536 NT_STATUS_OK
WriteX 12295 65536 65536 65536 NT_STATUS_OK
WriteX 12295 131072 65536 65536 NT_STATUS_OK
WriteX 12295 196608 65536 65536 NT_STATUS_OK
WriteX 12295 262144 65536 65536 NT_STATUS_OK
WriteX 12295 327680 65536 65536 NT_STATUS_OK
WriteX 12295 393216 65536 65536 NT_STATUS_OK
WriteX 12295 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12296 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12296 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12296 8192 4096 4096 NT_STATUS_OK
ReadX 12296 12288 4096 4096 NT_STATUS_OK
ReadX 12296 16384 4096 4096 NT_STATUS_OK
ReadX 12296 20480 4096 4096 NT_STATUS_OK
ReadX 12296 24576 4096 4096 NT_STATUS_OK
ReadX 12296 28672 4096 4096 NT_STATUS_OK
ReadX 12296 32768 4096 4096 NT_STATUS_OK
ReadX 12296 36864 4096 4096 NT_STATUS_OK
ReadX 12296 40960 4096 4096 NT_STATUS_OK
ReadX 12296 45056 4096 4096 NT_STATUS_OK
ReadX 12296 49152 4096 4096 NT_STATUS_OK
ReadX 12296 53248 4096 4096 NT_STATUS_OK
ReadX 12296 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12296 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12293 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12299 NT_STATUS_OK
WriteX 12299 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12299 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12299 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12299 1004 NT_STATUS_OK
WriteX 12299 0 57088 57088 NT_STATUS_OK
WriteX 12299 0 4096 4096 NT_STATUS_OK
Flush 12299 NT_STATUS_OK
Close 12296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12300 NT_STATUS_OK
SET_FILE_INFORMATION 12300 1004 NT_STATUS_OK
Close 12300 NT_STATUS_OK
SET_FILE_INFORMATION 12299 1004 NT_STATUS_OK
WriteX 12299 0 4096 4096 NT_STATUS_OK
Close 12299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12303 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12304 NT_STATUS_OK
WriteX 12304 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12304 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12304 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12304 1004 NT_STATUS_OK
WriteX 12304 0 51456 51456 NT_STATUS_OK
WriteX 12304 0 4096 4096 NT_STATUS_OK
Flush 12304 NT_STATUS_OK
SET_FILE_INFORMATION 12304 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12304 1004 NT_STATUS_OK
WriteX 12304 0 4096 4096 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Close 12303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12306 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12308 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12313 NT_STATUS_OK
WriteX 12313 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 258 NT_STATUS_OK
WriteX 12313 0 53077 53077 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12314 NT_STATUS_OK
WriteX 12314 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12314 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
WriteX 12314 0 65536 65536 NT_STATUS_OK
WriteX 12314 65536 1856 1856 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
Flush 12314 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12323 NT_STATUS_OK
WriteX 12323 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12323 258 NT_STATUS_OK
WriteX 12323 0 7983 7983 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12328 NT_STATUS_OK
WriteX 12328 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 258 NT_STATUS_OK
WriteX 12328 0 65536 65536 NT_STATUS_OK
WriteX 12328 65536 65536 65536 NT_STATUS_OK
WriteX 12328 131072 65536 65536 NT_STATUS_OK
WriteX 12328 196608 65536 65536 NT_STATUS_OK
WriteX 12328 262144 65536 65536 NT_STATUS_OK
WriteX 12328 327680 65536 65536 NT_STATUS_OK
WriteX 12328 393216 65536 65536 NT_STATUS_OK
WriteX 12328 458752 46731 46731 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12329 NT_STATUS_OK
WriteX 12329 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12329 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12318 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12329 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
WriteX 12329 0 65536 65536 NT_STATUS_OK
WriteX 12329 65536 22848 22848 NT_STATUS_OK
WriteX 12329 0 4096 4096 NT_STATUS_OK
Flush 12329 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
WriteX 12329 0 4096 4096 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12333 NT_STATUS_OK
ReadX 12333 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12333 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12334 NT_STATUS_OK
ReadX 12334 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12334 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12334 1004 NT_STATUS_OK
ReadX 12334 8192 4096 4096 NT_STATUS_OK
ReadX 12334 12288 4096 4096 NT_STATUS_OK
ReadX 12334 16384 4096 4096 NT_STATUS_OK
ReadX 12334 20480 4096 4096 NT_STATUS_OK
ReadX 12334 24576 4096 4096 NT_STATUS_OK
ReadX 12334 28672 4096 4096 NT_STATUS_OK
ReadX 12334 32768 4096 4096 NT_STATUS_OK
ReadX 12334 36864 4096 4096 NT_STATUS_OK
ReadX 12334 40960 4096 4096 NT_STATUS_OK
ReadX 12334 45056 4096 4096 NT_STATUS_OK
ReadX 12334 49152 4096 4096 NT_STATUS_OK
ReadX 12334 53248 4096 4096 NT_STATUS_OK
ReadX 12334 57344 4096 4096 NT_STATUS_OK
ReadX 12334 61440 4096 4096 NT_STATUS_OK
ReadX 12334 65536 4096 4096 NT_STATUS_OK
ReadX 12334 69632 4096 4096 NT_STATUS_OK
ReadX 12334 73728 4096 4096 NT_STATUS_OK
ReadX 12334 77824 4096 4096 NT_STATUS_OK
ReadX 12334 81920 4096 4096 NT_STATUS_OK
ReadX 12334 86016 4096 4096 NT_STATUS_OK
ReadX 12334 90112 4096 4096 NT_STATUS_OK
ReadX 12334 94208 4096 4096 NT_STATUS_OK
ReadX 12334 98304 4096 4096 NT_STATUS_OK
ReadX 12334 102400 4096 4096 NT_STATUS_OK
ReadX 12334 106496 4096 4096 NT_STATUS_OK
ReadX 12334 110592 4096 4096 NT_STATUS_OK
ReadX 12334 114688 4096 4096 NT_STATUS_OK
ReadX 12334 118784 4096 4096 NT_STATUS_OK
ReadX 12334 122880 4096 4096 NT_STATUS_OK
ReadX 12334 126976 4096 4096 NT_STATUS_OK
ReadX 12334 131072 4096 4096 NT_STATUS_OK
ReadX 12334 135168 4096 4096 NT_STATUS_OK
ReadX 12334 139264 4096 4096 NT_STATUS_OK
ReadX 12334 143360 4096 4096 NT_STATUS_OK
ReadX 12334 147456 4096 4096 NT_STATUS_OK
ReadX 12334 151552 4096 4096 NT_STATUS_OK
ReadX 12334 155648 4096 4096 NT_STATUS_OK
ReadX 12334 159744 4096 4096 NT_STATUS_OK
ReadX 12334 163840 4096 4096 NT_STATUS_OK
ReadX 12334 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12334 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12335 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12337 NT_STATUS_OK
WriteX 12337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 258 NT_STATUS_OK
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12338 NT_STATUS_OK
SET_FILE_INFORMATION 12338 1004 NT_STATUS_OK
Close 12338 NT_STATUS_OK
WriteX 12337 0 42388 42388 NT_STATUS_OK
Close 12337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 0 4096 4096 NT_STATUS_OK
ReadX 12341 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12342 NT_STATUS_OK
WriteX 12342 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 258 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 42652 42652 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Close 12341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
ReadX 12346 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12348 NT_STATUS_OK
Close 12348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12351 NT_STATUS_OK
WriteX 12351 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 258 NT_STATUS_OK
WriteX 12351 0 65536 65536 NT_STATUS_OK
WriteX 12351 65536 49 49 NT_STATUS_OK
Close 12351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 61440 61440 NT_STATUS_OK
ReadX 12352 61440 4096 4096 NT_STATUS_OK
ReadX 12352 65536 61440 61440 NT_STATUS_OK
ReadX 12352 126976 4096 4096 NT_STATUS_OK
ReadX 12352 131072 61440 61440 NT_STATUS_OK
ReadX 12352 192512 4096 4096 NT_STATUS_OK
ReadX 12352 196608 61440 61440 NT_STATUS_OK
ReadX 12352 258048 4096 4096 NT_STATUS_OK
ReadX 12352 262144 61440 61440 NT_STATUS_OK
ReadX 12352 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 61440 61440 NT_STATUS_OK
ReadX 12353 61440 4096 4096 NT_STATUS_OK
ReadX 12353 65536 61440 61440 NT_STATUS_OK
ReadX 12353 126976 4096 4096 NT_STATUS_OK
ReadX 12353 131072 61440 61440 NT_STATUS_OK
ReadX 12353 192512 4096 4096 NT_STATUS_OK
ReadX 12353 196608 61440 61440 NT_STATUS_OK
ReadX 12353 258048 4096 4096 NT_STATUS_OK
ReadX 12353 262144 61440 61440 NT_STATUS_OK
ReadX 12353 323584 4096 4096 NT_STATUS_OK
ReadX 12353 327680 61440 61440 NT_STATUS_OK
ReadX 12353 389120 4096 4096 NT_STATUS_OK
ReadX 12353 393216 61440 61440 NT_STATUS_OK
ReadX 12353 454656 4096 4096 NT_STATUS_OK
ReadX 12353 458752 61440 61440 NT_STATUS_OK
ReadX 12353 520192 4096 4096 NT_STATUS_OK
ReadX 12353 524288 61440 61440 NT_STATUS_OK
ReadX 12353 585728 4096 4096 NT_STATUS_OK
ReadX 12353 589824 61440 61440 NT_STATUS_OK
ReadX 12353 651264 4096 4096 NT_STATUS_OK
ReadX 12353 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 61440 61440 NT_STATUS_OK
ReadX 12354 61440 4096 4096 NT_STATUS_OK
ReadX 12354 65536 61440 61440 NT_STATUS_OK
ReadX 12354 126976 4096 4096 NT_STATUS_OK
ReadX 12354 131072 61440 61440 NT_STATUS_OK
ReadX 12354 192512 4096 4096 NT_STATUS_OK
ReadX 12354 196608 61440 61440 NT_STATUS_OK
ReadX 12354 258048 4096 4096 NT_STATUS_OK
ReadX 12354 262144 61440 61440 NT_STATUS_OK
ReadX 12354 323584 4096 4096 NT_STATUS_OK
ReadX 12354 327680 61440 61440 NT_STATUS_OK
ReadX 12354 389120 4096 4096 NT_STATUS_OK
ReadX 12354 393216 61440 61440 NT_STATUS_OK
ReadX 12354 454656 4096 4096 NT_STATUS_OK
ReadX 12354 458752 61440 61440 NT_STATUS_OK
ReadX 12354 520192 4096 4096 NT_STATUS_OK
ReadX 12354 524288 61440 61440 NT_STATUS_OK
ReadX 12354 585728 4096 4096 NT_STATUS_OK
ReadX 12354 589824 61440 61440 NT_STATUS_OK
ReadX 12354 651264 4096 4096 NT_STATUS_OK
ReadX 12354 655360 61440 61440 NT_STATUS_OK
ReadX 12354 716800 4096 4096 NT_STATUS_OK
ReadX 12354 720896 61440 61440 NT_STATUS_OK
ReadX 12354 782336 4096 4096 NT_STATUS_OK
ReadX 12354 786432 61440 61440 NT_STATUS_OK
ReadX 12354 847872 4096 4096 NT_STATUS_OK
ReadX 12354 851968 61440 61440 NT_STATUS_OK
ReadX 12354 913408 4096 4096 NT_STATUS_OK
ReadX 12354 917504 61440 61440 NT_STATUS_OK
ReadX 12354 978944 4096 4096 NT_STATUS_OK
ReadX 12354 983040 61440 61440 NT_STATUS_OK
ReadX 12354 1044480 4096 4096 NT_STATUS_OK
ReadX 12354 1048576 61440 61440 NT_STATUS_OK
ReadX 12354 1110016 4096 4096 NT_STATUS_OK
ReadX 12354 1114112 61440 61440 NT_STATUS_OK
ReadX 12354 1175552 4096 4096 NT_STATUS_OK
ReadX 12354 1179648 61440 61440 NT_STATUS_OK
ReadX 12354 1241088 4096 4096 NT_STATUS_OK
ReadX 12354 1245184 61440 61440 NT_STATUS_OK
ReadX 12354 1306624 4096 4096 NT_STATUS_OK
ReadX 12354 1310720 61440 61440 NT_STATUS_OK
ReadX 12354 1372160 4096 4096 NT_STATUS_OK
ReadX 12354 1376256 61440 61440 NT_STATUS_OK
ReadX 12354 1437696 4096 4096 NT_STATUS_OK
ReadX 12354 1441792 61440 61440 NT_STATUS_OK
ReadX 12354 1503232 4096 4096 NT_STATUS_OK
ReadX 12354 1507328 61440 61440 NT_STATUS_OK
ReadX 12354 1568768 4096 4096 NT_STATUS_OK
ReadX 12354 1572864 61440 61440 NT_STATUS_OK
ReadX 12354 1634304 4096 4096 NT_STATUS_OK
ReadX 12354 1638400 61440 61440 NT_STATUS_OK
ReadX 12354 1699840 4096 4096 NT_STATUS_OK
ReadX 12354 1703936 61440 61440 NT_STATUS_OK
ReadX 12354 1765376 4096 4096 NT_STATUS_OK
ReadX 12354 1769472 61440 61440 NT_STATUS_OK
ReadX 12354 1830912 4096 4096 NT_STATUS_OK
ReadX 12354 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12356 NT_STATUS_OK
QUERY_FILE_INFORMATION 12356 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12356 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12356 1005 NT_STATUS_OK
ReadX 12356 2156 24 24 NT_STATUS_OK
ReadX 12356 2139 276 276 NT_STATUS_OK
ReadX 12356 2136 14 14 NT_STATUS_OK
ReadX 12356 2136 7 7 NT_STATUS_OK
ReadX 12356 2138 12 12 NT_STATUS_OK
ReadX 12356 2137 8 8 NT_STATUS_OK
ReadX 12356 2135 15 15 NT_STATUS_OK
ReadX 12356 0 16 16 NT_STATUS_OK
ReadX 12356 16 2048 2048 NT_STATUS_OK
ReadX 12356 2064 2048 2048 NT_STATUS_OK
ReadX 12356 257 2048 2048 NT_STATUS_OK
ReadX 12356 385 2048 2048 NT_STATUS_OK
ReadX 12356 513 2048 2048 NT_STATUS_OK
ReadX 12356 641 2048 2048 NT_STATUS_OK
ReadX 12356 769 2048 2048 NT_STATUS_OK
ReadX 12356 897 2048 2048 NT_STATUS_OK
ReadX 12356 1025 2048 2048 NT_STATUS_OK
ReadX 12356 1153 2048 2048 NT_STATUS_OK
ReadX 12356 1281 2048 2048 NT_STATUS_OK
ReadX 12356 1409 2048 2048 NT_STATUS_OK
ReadX 12356 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12361 NT_STATUS_OK
WriteX 12361 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12361 258 NT_STATUS_OK
WriteX 12361 0 10575 10575 NT_STATUS_OK
Flush 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12366 NT_STATUS_OK
LockX 12366 2147483538 1 NT_STATUS_OK
UnlockX 12366 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 1005 NT_STATUS_OK
ReadX 12366 0 512 512 NT_STATUS_OK
ReadX 12366 512 512 512 NT_STATUS_OK
ReadX 12366 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 1004 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12367 NT_STATUS_OK
QUERY_FILE_INFORMATION 12367 1005 NT_STATUS_OK
ReadX 12367 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12368 NT_STATUS_OK
LockX 12368 2147483538 1 NT_STATUS_OK
UnlockX 12368 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12368 1005 NT_STATUS_OK
ReadX 12368 0 512 512 NT_STATUS_OK
ReadX 12368 512 512 512 NT_STATUS_OK
ReadX 12368 1024 512 512 NT_STATUS_OK
ReadX 12368 288 20 20 NT_STATUS_OK
ReadX 12368 308 2084 2084 NT_STATUS_OK
ReadX 12368 388 2084 2084 NT_STATUS_OK
ReadX 12368 388 2084 2084 NT_STATUS_OK
ReadX 12355 2157 1386 1386 NT_STATUS_OK
ReadX 12368 2472 399 399 NT_STATUS_OK
ReadX 12368 3072 1536 1536 NT_STATUS_OK
ReadX 12368 544 149 149 NT_STATUS_OK
ReadX 12368 693 485 485 NT_STATUS_OK
Close 12368 NT_STATUS_OK
ReadX 12355 2157 4096 4096 NT_STATUS_OK
ReadX 12355 6253 4096 4096 NT_STATUS_OK
ReadX 12355 10349 4096 4096 NT_STATUS_OK
ReadX 12355 14445 4096 4096 NT_STATUS_OK
ReadX 12355 18541 4096 4096 NT_STATUS_OK
ReadX 12355 22637 256 256 NT_STATUS_OK
ReadX 12355 22893 4096 4096 NT_STATUS_OK
ReadX 12355 26989 4096 4096 NT_STATUS_OK
ReadX 12355 31085 4096 4096 NT_STATUS_OK
ReadX 12355 35181 4096 4096 NT_STATUS_OK
ReadX 12355 39277 4096 4096 NT_STATUS_OK
ReadX 12355 43373 4096 4096 NT_STATUS_OK
ReadX 12355 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12355 2157 1024 1024 NT_STATUS_OK
ReadX 12355 1667 4688 4688 NT_STATUS_OK
ReadX 12355 6355 3516 3516 NT_STATUS_OK
ReadX 12355 9871 16384 16384 NT_STATUS_OK
ReadX 12355 26255 3771 3771 NT_STATUS_OK
ReadX 12355 30026 2048 2048 NT_STATUS_OK
ReadX 12355 32074 1024 1024 NT_STATUS_OK
ReadX 12355 33098 6652 6652 NT_STATUS_OK
ReadX 12355 39750 16384 16384 NT_STATUS_OK
ReadX 12355 56134 10496 10496 NT_STATUS_OK
ReadX 12355 66630 1784 1784 NT_STATUS_OK
ReadX 12355 68414 90 90 NT_STATUS_OK
ReadX 12355 68504 273 273 NT_STATUS_OK
ReadX 12355 68777 1600 1600 NT_STATUS_OK
ReadX 12355 70377 640 640 NT_STATUS_OK
ReadX 12355 71017 1280 1280 NT_STATUS_OK
ReadX 12355 72297 8464 8464 NT_STATUS_OK
ReadX 12355 80761 158 158 NT_STATUS_OK
ReadX 12355 80919 912 912 NT_STATUS_OK
ReadX 12355 81831 1980 1980 NT_STATUS_OK
ReadX 12355 83811 2256 2256 NT_STATUS_OK
ReadX 12355 86067 400 400 NT_STATUS_OK
ReadX 12355 86467 252 252 NT_STATUS_OK
ReadX 12355 86719 42 42 NT_STATUS_OK
ReadX 12355 86761 725 725 NT_STATUS_OK
ReadX 12355 2009 512 512 NT_STATUS_OK
ReadX 12355 3895 9 9 NT_STATUS_OK
ReadX 12355 3781 46 46 NT_STATUS_OK
ReadX 12355 4059 92 92 NT_STATUS_OK
ReadX 12355 3781 92 92 NT_STATUS_OK
ReadX 12355 3986 184 184 NT_STATUS_OK
ReadX 12355 3987 16384 16384 NT_STATUS_OK
ReadX 12355 3902 16384 16384 NT_STATUS_OK
ReadX 12355 3781 10240 10240 NT_STATUS_OK
ReadX 12355 3821 16384 16384 NT_STATUS_OK
ReadX 12355 3891 935 935 NT_STATUS_OK
ReadX 12355 4060 10240 10240 NT_STATUS_OK
ReadX 12355 4059 184 184 NT_STATUS_OK
ReadX 12355 256 184 184 NT_STATUS_OK
ReadX 12355 256 1026 1026 NT_STATUS_OK
ReadX 12355 3901 326 326 NT_STATUS_OK
ReadX 12355 3899 652 652 NT_STATUS_OK
ReadX 12355 256 2 2 NT_STATUS_OK
ReadX 12355 258 4948 4948 NT_STATUS_OK
Close 12355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12373 NT_STATUS_OK
WriteX 12373 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 258 NT_STATUS_OK
WriteX 12373 0 65536 65536 NT_STATUS_OK
WriteX 12373 65536 65536 65536 NT_STATUS_OK
WriteX 12373 131072 65536 65536 NT_STATUS_OK
WriteX 12373 196608 65536 65536 NT_STATUS_OK
WriteX 12373 262144 65536 65536 NT_STATUS_OK
WriteX 12373 327680 65536 65536 NT_STATUS_OK
WriteX 12373 393216 65536 65536 NT_STATUS_OK
WriteX 12373 458752 65536 65536 NT_STATUS_OK
WriteX 12373 524288 65536 65536 NT_STATUS_OK
WriteX 12373 589824 35257 35257 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12375 NT_STATUS_OK
Close 12375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12378 NT_STATUS_OK
WriteX 12378 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 258 NT_STATUS_OK
WriteX 12378 0 65536 65536 NT_STATUS_OK
WriteX 12378 65536 65536 65536 NT_STATUS_OK
WriteX 12378 131072 65536 65536 NT_STATUS_OK
WriteX 12378 196608 65536 65536 NT_STATUS_OK
WriteX 12378 262144 65536 65536 NT_STATUS_OK
WriteX 12378 327680 65536 65536 NT_STATUS_OK
WriteX 12378 393216 65536 65536 NT_STATUS_OK
WriteX 12378 458752 65536 65536 NT_STATUS_OK
WriteX 12378 524288 65536 65536 NT_STATUS_OK
WriteX 12378 589824 57598 57598 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12380 NT_STATUS_OK
WriteX 12380 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12380 258 NT_STATUS_OK
WriteX 12380 0 12543 12543 NT_STATUS_OK
Flush 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12386 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1005 NT_STATUS_OK
ReadX 12386 1938 24 24 NT_STATUS_OK
ReadX 12386 1920 276 276 NT_STATUS_OK
ReadX 12386 1918 14 14 NT_STATUS_OK
ReadX 12386 1918 7 7 NT_STATUS_OK
ReadX 12386 1919 12 12 NT_STATUS_OK
ReadX 12386 1919 8 8 NT_STATUS_OK
ReadX 12386 1917 15 15 NT_STATUS_OK
ReadX 12386 0 16 16 NT_STATUS_OK
ReadX 12386 16 2048 2048 NT_STATUS_OK
ReadX 12386 2064 2048 2048 NT_STATUS_OK
ReadX 12386 257 2048 2048 NT_STATUS_OK
ReadX 12386 385 2048 2048 NT_STATUS_OK
ReadX 12386 513 2048 2048 NT_STATUS_OK
ReadX 12386 641 2048 2048 NT_STATUS_OK
ReadX 12386 769 2048 2048 NT_STATUS_OK
ReadX 12386 897 2048 2048 NT_STATUS_OK
ReadX 12386 1025 2048 2048 NT_STATUS_OK
ReadX 12386 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12391 NT_STATUS_OK
WriteX 12391 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 11588 11588 NT_STATUS_OK
Flush 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12396 NT_STATUS_OK
WriteX 12396 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12396 258 NT_STATUS_OK
WriteX 12396 0 11615 11615 NT_STATUS_OK
Flush 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12405 NT_STATUS_OK
WriteX 12405 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
WriteX 12405 0 65536 65536 NT_STATUS_OK
WriteX 12405 65536 16050 16050 NT_STATUS_OK
Close 12405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12385 1939 64 64 NT_STATUS_OK
ReadX 12385 128 248 248 NT_STATUS_OK
ReadX 12385 128 568 568 NT_STATUS_OK
ReadX 12385 3872 1536 1536 NT_STATUS_OK
ReadX 12385 3456 2560 2560 NT_STATUS_OK
ReadX 12385 3136 512 512 NT_STATUS_OK
ReadX 12385 2880 4096 4096 NT_STATUS_OK
ReadX 12385 3264 3072 3072 NT_STATUS_OK
ReadX 12385 320 4096 4096 NT_STATUS_OK
ReadX 12385 1024 4096 4096 NT_STATUS_OK
ReadX 12385 3616 4096 4096 NT_STATUS_OK
ReadX 12385 1939 64 64 NT_STATUS_OK
ReadX 12385 128 248 248 NT_STATUS_OK
ReadX 12385 128 608 608 NT_STATUS_OK
ReadX 12385 2858 1024 1024 NT_STATUS_OK
ReadX 12385 2810 4096 4096 NT_STATUS_OK
ReadX 12385 2826 4096 4096 NT_STATUS_OK
ReadX 12385 2580 2048 2048 NT_STATUS_OK
ReadX 12385 2800 2560 2560 NT_STATUS_OK
ReadX 12385 2100 4096 4096 NT_STATUS_OK
ReadX 12385 2084 4096 4096 NT_STATUS_OK
ReadX 12385 868 4096 4096 NT_STATUS_OK
ReadX 12385 2324 4096 4096 NT_STATUS_OK
ReadX 12385 884 4096 4096 NT_STATUS_OK
ReadX 12385 2604 1024 1024 NT_STATUS_OK
ReadX 12385 580 4096 4096 NT_STATUS_OK
ReadX 12385 596 4096 4096 NT_STATUS_OK
ReadX 12385 2752 4096 4096 NT_STATUS_OK
ReadX 12385 2842 1024 1024 NT_STATUS_OK
ReadX 12385 660 4096 4096 NT_STATUS_OK
ReadX 12385 2720 4096 4096 NT_STATUS_OK
ReadX 12385 2736 4096 4096 NT_STATUS_OK
ReadX 12385 628 4096 4096 NT_STATUS_OK
ReadX 12385 2704 4096 4096 NT_STATUS_OK
ReadX 12385 1556 4096 4096 NT_STATUS_OK
ReadX 12385 576 4096 4096 NT_STATUS_OK
ReadX 12385 3168 1536 1536 NT_STATUS_OK
ReadX 12385 832 4096 4096 NT_STATUS_OK
ReadX 12385 1088 4096 4096 NT_STATUS_OK
ReadX 12385 1344 4096 4096 NT_STATUS_OK
ReadX 12385 1600 4096 4096 NT_STATUS_OK
ReadX 12385 1856 4096 4096 NT_STATUS_OK
ReadX 12385 2112 4096 4096 NT_STATUS_OK
ReadX 12385 1892 4096 4096 NT_STATUS_OK
ReadX 12385 820 4096 4096 NT_STATUS_OK
ReadX 12385 788 4096 4096 NT_STATUS_OK
ReadX 12385 1604 4096 4096 NT_STATUS_OK
ReadX 12385 3648 4096 4096 NT_STATUS_OK
ReadX 12385 2608 4096 4096 NT_STATUS_OK
ReadX 12385 548 4096 4096 NT_STATUS_OK
ReadX 12385 740 4096 4096 NT_STATUS_OK
ReadX 12385 1344 4096 4096 NT_STATUS_OK
ReadX 12385 3392 4096 4096 NT_STATUS_OK
ReadX 12385 3904 4096 4096 NT_STATUS_OK
ReadX 12385 644 4096 4096 NT_STATUS_OK
ReadX 12385 676 4096 4096 NT_STATUS_OK
ReadX 12385 2688 4096 4096 NT_STATUS_OK
ReadX 12385 320 4096 4096 NT_STATUS_OK
ReadX 12385 900 4096 4096 NT_STATUS_OK
ReadX 12385 1908 4096 4096 NT_STATUS_OK
ReadX 12385 852 4096 4096 NT_STATUS_OK
ReadX 12385 724 4096 4096 NT_STATUS_OK
ReadX 12385 2292 4096 4096 NT_STATUS_OK
ReadX 12385 612 4096 4096 NT_STATUS_OK
ReadX 12385 388 4096 4096 NT_STATUS_OK
ReadX 12385 2368 4096 4096 NT_STATUS_OK
ReadX 12385 2624 4096 4096 NT_STATUS_OK
ReadX 12385 500 4096 4096 NT_STATUS_OK
ReadX 12385 356 4096 4096 NT_STATUS_OK
ReadX 12385 1024 4096 4096 NT_STATUS_OK
ReadX 12385 576 4096 4096 NT_STATUS_OK
ReadX 12385 340 4096 4096 NT_STATUS_OK
ReadX 12385 420 4096 4096 NT_STATUS_OK
ReadX 12385 1600 4096 4096 NT_STATUS_OK
ReadX 12385 404 4096 4096 NT_STATUS_OK
ReadX 12385 1428 4096 4096 NT_STATUS_OK
ReadX 12385 2656 4096 4096 NT_STATUS_OK
ReadX 12385 2624 4096 4096 NT_STATUS_OK
ReadX 12385 452 4096 4096 NT_STATUS_OK
ReadX 12385 692 4096 4096 NT_STATUS_OK
ReadX 12385 564 4096 4096 NT_STATUS_OK
ReadX 12385 372 4096 4096 NT_STATUS_OK
ReadX 12385 468 4096 4096 NT_STATUS_OK
ReadX 12385 484 4096 4096 NT_STATUS_OK
ReadX 12385 1088 4096 4096 NT_STATUS_OK
ReadX 12385 1924 4096 4096 NT_STATUS_OK
ReadX 12385 2768 4096 4096 NT_STATUS_OK
ReadX 12385 832 4096 4096 NT_STATUS_OK
ReadX 12385 836 4096 4096 NT_STATUS_OK
ReadX 12385 1856 4096 4096 NT_STATUS_OK
ReadX 12385 2640 4096 4096 NT_STATUS_OK
ReadX 12385 436 4096 4096 NT_STATUS_OK
ReadX 12385 1828 4096 4096 NT_STATUS_OK
ReadX 12385 804 4096 4096 NT_STATUS_OK
ReadX 12385 1860 4096 4096 NT_STATUS_OK
ReadX 12385 1812 4096 4096 NT_STATUS_OK
ReadX 12385 756 4096 4096 NT_STATUS_OK
ReadX 12385 1636 4096 4096 NT_STATUS_OK
ReadX 12385 772 4096 4096 NT_STATUS_OK
ReadX 12385 2036 4096 4096 NT_STATUS_OK
ReadX 12385 1220 4096 4096 NT_STATUS_OK
ReadX 12385 1652 4096 4096 NT_STATUS_OK
ReadX 12385 2588 4096 4096 NT_STATUS_OK
ReadX 12385 916 4096 4096 NT_STATUS_OK
ReadX 12385 260 4096 4096 NT_STATUS_OK
ReadX 12385 932 4096 4096 NT_STATUS_OK
ReadX 12385 2624 4096 4096 NT_STATUS_OK
ReadX 12385 308 4096 4096 NT_STATUS_OK
ReadX 12385 292 4096 4096 NT_STATUS_OK
ReadX 12385 1140 4096 4096 NT_STATUS_OK
ReadX 12385 276 4096 4096 NT_STATUS_OK
ReadX 12385 2020 4096 4096 NT_STATUS_OK
ReadX 12385 2880 4096 4096 NT_STATUS_OK
ReadX 12385 516 4096 4096 NT_STATUS_OK
ReadX 12385 1844 4096 4096 NT_STATUS_OK
ReadX 12385 1124 4096 4096 NT_STATUS_OK
ReadX 12385 3136 4096 4096 NT_STATUS_OK
ReadX 12385 324 4096 4096 NT_STATUS_OK
ReadX 12385 1156 4096 4096 NT_STATUS_OK
ReadX 12385 1172 4096 4096 NT_STATUS_OK
ReadX 12385 2112 4096 4096 NT_STATUS_OK
ReadX 12385 2368 4096 4096 NT_STATUS_OK
ReadX 12385 964 4096 4096 NT_STATUS_OK
ReadX 12385 980 4096 4096 NT_STATUS_OK
ReadX 12385 1012 4096 4096 NT_STATUS_OK
ReadX 12385 532 4096 4096 NT_STATUS_OK
ReadX 12385 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12385 1620 4096 4096 NT_STATUS_OK
ReadX 12385 1604 4096 4096 NT_STATUS_OK
ReadX 12385 2116 4096 4096 NT_STATUS_OK
ReadX 12385 2132 4096 4096 NT_STATUS_OK
ReadX 12385 2148 4096 4096 NT_STATUS_OK
ReadX 12385 2276 4096 4096 NT_STATUS_OK
ReadX 12385 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12410 NT_STATUS_OK
QUERY_FILE_INFORMATION 12365 1004 NT_STATUS_OK
Close 12365 NT_STATUS_OK
WriteX 12410 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12410 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12367 1004 NT_STATUS_OK
Close 12367 NT_STATUS_OK
WriteX 12410 0 65536 65536 NT_STATUS_OK
WriteX 12410 65536 64850 64850 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12412 NT_STATUS_OK
WriteX 12412 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12412 258 NT_STATUS_OK
ReadX 12385 2068 4096 4096 NT_STATUS_OK
ReadX 12385 1588 4096 4096 NT_STATUS_OK
ReadX 12385 1572 4096 4096 NT_STATUS_OK
WriteX 12412 0 18630 18630 NT_STATUS_OK
Flush 12412 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12414 NT_STATUS_OK
Close 12414 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12385 612 4096 4096 NT_STATUS_OK
ReadX 12385 564 4096 4096 NT_STATUS_OK
ReadX 12385 1876 4096 4096 NT_STATUS_OK
ReadX 12385 628 4096 4096 NT_STATUS_OK
ReadX 12385 740 4096 4096 NT_STATUS_OK
ReadX 12385 724 4096 4096 NT_STATUS_OK
ReadX 12385 644 4096 4096 NT_STATUS_OK
ReadX 12385 2324 4096 4096 NT_STATUS_OK
ReadX 12385 660 4096 4096 NT_STATUS_OK
ReadX 12385 852 4096 4096 NT_STATUS_OK
ReadX 12385 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12385 2368 4096 4096 NT_STATUS_OK
ReadX 12385 1024 4096 4096 NT_STATUS_OK
ReadX 12385 320 4096 4096 NT_STATUS_OK
ReadX 12385 580 4096 4096 NT_STATUS_OK
ReadX 12385 3136 512 512 NT_STATUS_OK
ReadX 12385 2880 4096 4096 NT_STATUS_OK
Close 12385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 61440 4096 4096 NT_STATUS_OK
ReadX 12417 126976 4096 4096 NT_STATUS_OK
WriteX 12417 0 65536 65536 NT_STATUS_OK
WriteX 12417 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 61440 4096 4096 NT_STATUS_OK
ReadX 12418 126976 4096 4096 NT_STATUS_OK
ReadX 12418 192512 4096 4096 NT_STATUS_OK
ReadX 12418 258048 4096 4096 NT_STATUS_OK
WriteX 12418 0 65536 65536 NT_STATUS_OK
WriteX 12418 65536 65536 65536 NT_STATUS_OK
WriteX 12418 131072 65536 65536 NT_STATUS_OK
WriteX 12418 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 61440 4096 4096 NT_STATUS_OK
ReadX 12419 126976 4096 4096 NT_STATUS_OK
ReadX 12419 192512 4096 4096 NT_STATUS_OK
ReadX 12419 258048 4096 4096 NT_STATUS_OK
ReadX 12419 323584 4096 4096 NT_STATUS_OK
ReadX 12419 389120 4096 4096 NT_STATUS_OK
ReadX 12419 454656 4096 4096 NT_STATUS_OK
ReadX 12419 520192 4096 4096 NT_STATUS_OK
WriteX 12419 0 65536 65536 NT_STATUS_OK
WriteX 12419 65536 65536 65536 NT_STATUS_OK
WriteX 12419 131072 65536 65536 NT_STATUS_OK
WriteX 12419 196608 65536 65536 NT_STATUS_OK
WriteX 12419 262144 65536 65536 NT_STATUS_OK
WriteX 12419 327680 65536 65536 NT_STATUS_OK
WriteX 12419 393216 65536 65536 NT_STATUS_OK
WriteX 12419 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12422 NT_STATUS_OK
WriteX 12422 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12422 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12420 0 8192 8192 NT_STATUS_OK
Flush 12420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12420 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12420 0 8192 8192 NT_STATUS_OK
Flush 12420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12420 0 8192 8192 NT_STATUS_OK
Flush 12420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12420 0 8192 8192 NT_STATUS_OK
Flush 12420 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12427 NT_STATUS_OK
WriteX 12427 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12427 258 NT_STATUS_OK
WriteX 12427 0 62591 62591 NT_STATUS_OK
Close 12427 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12429 NT_STATUS_OK
Close 12429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12432 NT_STATUS_OK
WriteX 12432 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12432 258 NT_STATUS_OK
WriteX 12432 0 10845 10845 NT_STATUS_OK
Close 12432 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12434 NT_STATUS_OK
Close 12434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12437 NT_STATUS_OK
WriteX 12437 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 30118 30118 NT_STATUS_OK
Close 12437 NT_STATUS_OK
WriteX 12420 0 4096 4096 NT_STATUS_OK
WriteX 12422 0 64 64 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 0 61440 61440 NT_STATUS_OK
ReadX 12439 61440 4096 4096 NT_STATUS_OK
ReadX 12439 65536 61440 61440 NT_STATUS_OK
ReadX 12439 126976 4096 4096 NT_STATUS_OK
ReadX 12439 131072 61440 61440 NT_STATUS_OK
ReadX 12439 192512 4096 4096 NT_STATUS_OK
ReadX 12439 196608 61440 61440 NT_STATUS_OK
ReadX 12439 258048 4096 4096 NT_STATUS_OK
ReadX 12439 262144 61440 61440 NT_STATUS_OK
ReadX 12439 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 0 61440 61440 NT_STATUS_OK
ReadX 12440 61440 4096 4096 NT_STATUS_OK
ReadX 12440 65536 61440 61440 NT_STATUS_OK
ReadX 12440 126976 4096 4096 NT_STATUS_OK
ReadX 12440 131072 61440 61440 NT_STATUS_OK
ReadX 12440 192512 4096 4096 NT_STATUS_OK
ReadX 12440 196608 61440 61440 NT_STATUS_OK
ReadX 12440 258048 4096 4096 NT_STATUS_OK
ReadX 12440 262144 61440 61440 NT_STATUS_OK
ReadX 12440 323584 4096 4096 NT_STATUS_OK
ReadX 12440 327680 61440 61440 NT_STATUS_OK
ReadX 12440 389120 4096 4096 NT_STATUS_OK
ReadX 12440 393216 61440 61440 NT_STATUS_OK
ReadX 12440 454656 4096 4096 NT_STATUS_OK
ReadX 12440 458752 61440 61440 NT_STATUS_OK
ReadX 12440 520192 4096 4096 NT_STATUS_OK
ReadX 12440 524288 61440 61440 NT_STATUS_OK
ReadX 12440 585728 4096 4096 NT_STATUS_OK
ReadX 12440 589824 61440 61440 NT_STATUS_OK
ReadX 12440 651264 4096 4096 NT_STATUS_OK
ReadX 12440 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 0 61440 61440 NT_STATUS_OK
ReadX 12441 61440 4096 4096 NT_STATUS_OK
ReadX 12441 65536 61440 61440 NT_STATUS_OK
ReadX 12441 126976 4096 4096 NT_STATUS_OK
ReadX 12441 131072 61440 61440 NT_STATUS_OK
ReadX 12441 192512 4096 4096 NT_STATUS_OK
ReadX 12441 196608 61440 61440 NT_STATUS_OK
ReadX 12441 258048 4096 4096 NT_STATUS_OK
ReadX 12441 262144 61440 61440 NT_STATUS_OK
ReadX 12441 323584 4096 4096 NT_STATUS_OK
ReadX 12441 327680 61440 61440 NT_STATUS_OK
ReadX 12441 389120 4096 4096 NT_STATUS_OK
ReadX 12441 393216 61440 61440 NT_STATUS_OK
ReadX 12441 454656 4096 4096 NT_STATUS_OK
ReadX 12441 458752 61440 61440 NT_STATUS_OK
ReadX 12441 520192 4096 4096 NT_STATUS_OK
ReadX 12441 524288 61440 61440 NT_STATUS_OK
ReadX 12441 585728 4096 4096 NT_STATUS_OK
ReadX 12441 589824 61440 61440 NT_STATUS_OK
ReadX 12441 651264 4096 4096 NT_STATUS_OK
ReadX 12441 655360 61440 61440 NT_STATUS_OK
ReadX 12441 716800 4096 4096 NT_STATUS_OK
ReadX 12441 720896 61440 61440 NT_STATUS_OK
ReadX 12441 782336 4096 4096 NT_STATUS_OK
ReadX 12441 786432 61440 61440 NT_STATUS_OK
ReadX 12441 847872 4096 4096 NT_STATUS_OK
ReadX 12441 851968 61440 61440 NT_STATUS_OK
ReadX 12441 913408 4096 4096 NT_STATUS_OK
ReadX 12441 917504 61440 61440 NT_STATUS_OK
ReadX 12441 978944 4096 4096 NT_STATUS_OK
ReadX 12441 983040 61440 61440 NT_STATUS_OK
ReadX 12441 1044480 4096 4096 NT_STATUS_OK
ReadX 12441 1048576 61440 61440 NT_STATUS_OK
ReadX 12441 1110016 4096 4096 NT_STATUS_OK
ReadX 12441 1114112 61440 61440 NT_STATUS_OK
ReadX 12441 1175552 4096 4096 NT_STATUS_OK
ReadX 12441 1179648 61440 61440 NT_STATUS_OK
ReadX 12441 1241088 4096 4096 NT_STATUS_OK
ReadX 12441 1245184 61440 61440 NT_STATUS_OK
ReadX 12441 1306624 4096 4096 NT_STATUS_OK
ReadX 12441 1310720 61440 61440 NT_STATUS_OK
ReadX 12441 1372160 4096 4096 NT_STATUS_OK
ReadX 12441 1376256 61440 61440 NT_STATUS_OK
ReadX 12441 1437696 4096 4096 NT_STATUS_OK
ReadX 12441 1441792 61440 61440 NT_STATUS_OK
ReadX 12441 1503232 4096 4096 NT_STATUS_OK
ReadX 12441 1507328 61440 61440 NT_STATUS_OK
ReadX 12441 1568768 4096 4096 NT_STATUS_OK
ReadX 12441 1572864 61440 61440 NT_STATUS_OK
ReadX 12441 1634304 4096 4096 NT_STATUS_OK
ReadX 12441 1638400 61440 61440 NT_STATUS_OK
ReadX 12441 1699840 4096 4096 NT_STATUS_OK
ReadX 12441 1703936 61440 61440 NT_STATUS_OK
ReadX 12441 1765376 4096 4096 NT_STATUS_OK
ReadX 12441 1769472 61440 61440 NT_STATUS_OK
ReadX 12441 1830912 4096 4096 NT_STATUS_OK
ReadX 12441 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
ReadX 12446 4096 4096 4096 NT_STATUS_OK
ReadX 12446 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12447 NT_STATUS_OK
Close 12447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12450 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 8192 8192 NT_STATUS_OK
ReadX 12454 8192 8192 8192 NT_STATUS_OK
ReadX 12454 16384 8192 8192 NT_STATUS_OK
ReadX 12454 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12456 NT_STATUS_OK
Close 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12459 NT_STATUS_OK
WriteX 12459 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12459 258 NT_STATUS_OK
WriteX 12459 0 10438 10438 NT_STATUS_OK
Close 12459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12460 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12462 NT_STATUS_OK
Close 12462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12463 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12464 NT_STATUS_OK
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12465 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12467 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
ReadX 12468 4096 4096 4096 NT_STATUS_OK
ReadX 12468 8192 4096 4096 NT_STATUS_OK
ReadX 12468 12288 8192 8192 NT_STATUS_OK
ReadX 12468 20480 8192 8192 NT_STATUS_OK
ReadX 12468 28672 8192 8192 NT_STATUS_OK
ReadX 12468 36864 8192 8192 NT_STATUS_OK
ReadX 12468 45056 8192 8192 NT_STATUS_OK
ReadX 12468 53248 8192 8192 NT_STATUS_OK
ReadX 12468 61440 8192 8192 NT_STATUS_OK
ReadX 12468 69632 8192 8192 NT_STATUS_OK
ReadX 12468 77824 8192 8192 NT_STATUS_OK
ReadX 12468 86016 8192 8192 NT_STATUS_OK
ReadX 12468 94208 8192 8192 NT_STATUS_OK
ReadX 12468 102400 8192 8192 NT_STATUS_OK
ReadX 12468 110592 8192 8192 NT_STATUS_OK
ReadX 12468 118784 8192 8192 NT_STATUS_OK
ReadX 12468 126976 8192 8192 NT_STATUS_OK
ReadX 12468 135168 8192 8192 NT_STATUS_OK
ReadX 12468 143360 8192 8192 NT_STATUS_OK
ReadX 12468 151552 8192 8192 NT_STATUS_OK
ReadX 12468 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12473 NT_STATUS_OK
WriteX 12473 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12473 258 NT_STATUS_OK
WriteX 12473 0 28489 28489 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12474 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12476 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12477 NT_STATUS_OK
Close 12477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 8192 8192 NT_STATUS_OK
ReadX 12480 8192 8192 8192 NT_STATUS_OK
ReadX 12480 16384 8192 8192 NT_STATUS_OK
ReadX 12480 24576 8192 8192 NT_STATUS_OK
ReadX 12480 32768 16384 16384 NT_STATUS_OK
ReadX 12480 49152 8192 8192 NT_STATUS_OK
ReadX 12480 57344 8192 8192 NT_STATUS_OK
ReadX 12480 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12485 NT_STATUS_OK
WriteX 12485 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12485 258 NT_STATUS_OK
WriteX 12485 0 29253 29253 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12492 NT_STATUS_OK
WriteX 12492 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
WriteX 12492 0 30183 30183 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12493 NT_STATUS_OK
Close 12493 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12495 NT_STATUS_OK
WriteX 12495 0 510 510 NT_STATUS_OK
WriteX 12495 510 512 512 NT_STATUS_OK
WriteX 12495 1022 510 510 NT_STATUS_OK
WriteX 12495 1532 510 510 NT_STATUS_OK
WriteX 12495 2042 168 168 NT_STATUS_OK
Close 12495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12496 NT_STATUS_OK
Close 12496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 61440 4096 4096 NT_STATUS_OK
ReadX 12499 126976 4096 4096 NT_STATUS_OK
WriteX 12499 0 65536 65536 NT_STATUS_OK
WriteX 12499 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 61440 4096 4096 NT_STATUS_OK
ReadX 12500 126976 4096 4096 NT_STATUS_OK
ReadX 12500 192512 4096 4096 NT_STATUS_OK
ReadX 12500 258048 4096 4096 NT_STATUS_OK
WriteX 12500 0 65536 65536 NT_STATUS_OK
WriteX 12500 65536 65536 65536 NT_STATUS_OK
WriteX 12500 131072 65536 65536 NT_STATUS_OK
WriteX 12500 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 61440 4096 4096 NT_STATUS_OK
ReadX 12501 126976 4096 4096 NT_STATUS_OK
ReadX 12501 192512 4096 4096 NT_STATUS_OK
ReadX 12501 258048 4096 4096 NT_STATUS_OK
ReadX 12501 323584 4096 4096 NT_STATUS_OK
ReadX 12501 389120 4096 4096 NT_STATUS_OK
ReadX 12501 454656 4096 4096 NT_STATUS_OK
ReadX 12501 520192 4096 4096 NT_STATUS_OK
WriteX 12501 0 65536 65536 NT_STATUS_OK
WriteX 12501 65536 65536 65536 NT_STATUS_OK
WriteX 12501 131072 65536 65536 NT_STATUS_OK
WriteX 12501 196608 65536 65536 NT_STATUS_OK
WriteX 12501 262144 65536 65536 NT_STATUS_OK
WriteX 12501 327680 65536 65536 NT_STATUS_OK
WriteX 12501 393216 65536 65536 NT_STATUS_OK
WriteX 12501 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12502 NT_STATUS_OK
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12499 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12504 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12511 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12517 NT_STATUS_OK
Close 12517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12520 NT_STATUS_OK
Close 12520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12522 NT_STATUS_OK
Close 12522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12526 NT_STATUS_OK
Close 12526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12531 NT_STATUS_OK
Close 12531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12536 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12556 NT_STATUS_OK
Close 12556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12561 NT_STATUS_OK
Close 12561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12567 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12570 NT_STATUS_OK
WriteX 12570 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12570 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12570 0 65536 65536 NT_STATUS_OK
WriteX 12570 65536 65536 65536 NT_STATUS_OK
WriteX 12570 131072 65536 65536 NT_STATUS_OK
WriteX 12570 196608 65536 65536 NT_STATUS_OK
WriteX 12570 262144 26634 26634 NT_STATUS_OK
Close 12570 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12575 NT_STATUS_OK
Close 12575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12576 NT_STATUS_OK
Close 12576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 0 4096 4096 NT_STATUS_OK
ReadX 12578 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12579 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12583 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12588 NT_STATUS_OK
Close 12588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12592 NT_STATUS_OK
Close 12592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12597 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12606 NT_STATUS_OK
Close 12606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12611 NT_STATUS_OK
Close 12611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12616 NT_STATUS_OK
Close 12616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12626 NT_STATUS_OK
Close 12626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12630 NT_STATUS_OK
Close 12630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12635 NT_STATUS_OK
Close 12635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
Close 12657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
Close 12658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12669 NT_STATUS_OK
Close 12669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
Close 12672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12673 NT_STATUS_OK
ReadX 12673 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Close 12673 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12702 0 4096 4096 NT_STATUS_OK
Close 12702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
ReadX 12704 4096 4096 4096 NT_STATUS_OK
ReadX 12704 8192 4096 4096 NT_STATUS_OK
ReadX 12704 12288 4096 4096 NT_STATUS_OK
ReadX 12704 16384 4096 4096 NT_STATUS_OK
ReadX 12704 20480 4096 4096 NT_STATUS_OK
ReadX 12704 24576 4096 4096 NT_STATUS_OK
ReadX 12704 28672 4096 4096 NT_STATUS_OK
ReadX 12704 32768 4096 4096 NT_STATUS_OK
ReadX 12704 36864 4096 4096 NT_STATUS_OK
ReadX 12704 40960 4096 4096 NT_STATUS_OK
ReadX 12704 45056 4096 4096 NT_STATUS_OK
ReadX 12704 49152 4096 4096 NT_STATUS_OK
ReadX 12704 53248 4096 4096 NT_STATUS_OK
ReadX 12704 57344 4096 4096 NT_STATUS_OK
ReadX 12704 61440 4096 4096 NT_STATUS_OK
ReadX 12704 65536 4096 4096 NT_STATUS_OK
ReadX 12704 69632 4096 4096 NT_STATUS_OK
ReadX 12704 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12704 1004 NT_STATUS_OK
WriteX 12704 0 4096 4096 NT_STATUS_OK
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12705 NT_STATUS_OK
SET_FILE_INFORMATION 12705 1004 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12707 NT_STATUS_OK
Close 12707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12710 NT_STATUS_OK
WriteX 12710 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 258 NT_STATUS_OK
WriteX 12710 0 65536 65536 NT_STATUS_OK
WriteX 12710 65536 19979 19979 NT_STATUS_OK
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
WriteX 12711 0 4096 4096 NT_STATUS_OK
Flush 12711 NT_STATUS_OK
WriteX 12711 0 4096 4096 NT_STATUS_OK
Flush 12711 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 1004 NT_STATUS_OK
WriteX 12711 0 4096 4096 NT_STATUS_OK
Flush 12711 NT_STATUS_OK
WriteX 12711 0 4096 4096 NT_STATUS_OK
Flush 12711 NT_STATUS_OK
WriteX 12711 0 4096 4096 NT_STATUS_OK
Flush 12711 NT_STATUS_OK
SET_FILE_INFORMATION 12711 1004 NT_STATUS_OK
WriteX 12711 0 4096 4096 NT_STATUS_OK
Flush 12711 NT_STATUS_OK
Close 12711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
Close 12712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12714 NT_STATUS_OK
ReadX 12714 0 4096 4096 NT_STATUS_OK
Close 12714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 4096 4096 NT_STATUS_OK
Close 12715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12717 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12713 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12722 NT_STATUS_OK
WriteX 12722 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 258 NT_STATUS_OK
WriteX 12722 0 65536 65536 NT_STATUS_OK
WriteX 12722 65536 17654 17654 NT_STATUS_OK
Close 12722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
QUERY_FILE_INFORMATION 12723 1004 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
SET_FILE_INFORMATION 12723 1004 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12724 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
Close 12724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12726 NT_STATUS_OK
Close 12726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
ReadX 12728 4096 4096 4096 NT_STATUS_OK
ReadX 12728 8192 4096 4096 NT_STATUS_OK
ReadX 12728 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12728 16384 4096 4096 NT_STATUS_OK
ReadX 12728 20480 4096 4096 NT_STATUS_OK
ReadX 12728 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
Close 12729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
Close 12730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12737 NT_STATUS_OK
WriteX 12737 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12737 258 NT_STATUS_OK
WriteX 12737 0 65536 65536 NT_STATUS_OK
WriteX 12737 65536 19490 19490 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
Flush 12738 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
Flush 12738 NT_STATUS_OK
QUERY_FILE_INFORMATION 12738 1004 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
Flush 12738 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
Flush 12738 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
Flush 12738 NT_STATUS_OK
SET_FILE_INFORMATION 12738 1004 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
Flush 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12739 NT_STATUS_OK
SET_FILE_INFORMATION 12739 1004 NT_STATUS_OK
Close 12739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12743 0 4096 4096 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 4096 4096 NT_STATUS_OK
ReadX 12745 4096 4096 4096 NT_STATUS_OK
ReadX 12745 8192 4096 4096 NT_STATUS_OK
ReadX 12745 12288 4096 4096 NT_STATUS_OK
ReadX 12745 16384 4096 4096 NT_STATUS_OK
ReadX 12745 20480 4096 4096 NT_STATUS_OK
ReadX 12745 24576 4096 4096 NT_STATUS_OK
ReadX 12745 28672 4096 4096 NT_STATUS_OK
ReadX 12745 32768 4096 4096 NT_STATUS_OK
ReadX 12745 36864 4096 4096 NT_STATUS_OK
ReadX 12745 40960 4096 4096 NT_STATUS_OK
ReadX 12745 45056 4096 4096 NT_STATUS_OK
ReadX 12745 49152 4096 4096 NT_STATUS_OK
ReadX 12745 53248 4096 4096 NT_STATUS_OK
ReadX 12745 57344 4096 4096 NT_STATUS_OK
ReadX 12745 61440 4096 4096 NT_STATUS_OK
ReadX 12745 65536 4096 4096 NT_STATUS_OK
ReadX 12745 69632 4096 4096 NT_STATUS_OK
ReadX 12745 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12745 1004 NT_STATUS_OK
WriteX 12745 0 4096 4096 NT_STATUS_OK
Close 12745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12746 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
Close 12746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12751 NT_STATUS_OK
WriteX 12751 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12751 258 NT_STATUS_OK
WriteX 12751 0 65536 65536 NT_STATUS_OK
WriteX 12751 65536 8866 8866 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12752 NT_STATUS_OK
ReadX 12752 0 4096 4096 NT_STATUS_OK
WriteX 12752 0 4096 4096 NT_STATUS_OK
Flush 12752 NT_STATUS_OK
SET_FILE_INFORMATION 12752 1004 NT_STATUS_OK
WriteX 12752 0 4096 4096 NT_STATUS_OK
Flush 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
Close 12754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
Close 12755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12756 1004 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12757 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12759 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12762 NT_STATUS_OK
WriteX 12762 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12762 258 NT_STATUS_OK
WriteX 12762 0 65536 65536 NT_STATUS_OK
WriteX 12762 65536 9298 9298 NT_STATUS_OK
Close 12762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
WriteX 12763 0 4096 4096 NT_STATUS_OK
Flush 12763 NT_STATUS_OK
SET_FILE_INFORMATION 12763 1004 NT_STATUS_OK
WriteX 12763 0 4096 4096 NT_STATUS_OK
Flush 12763 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12764 NT_STATUS_OK
SET_FILE_INFORMATION 12764 1004 NT_STATUS_OK
Close 12764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12769 0 4096 4096 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12770 4096 4096 4096 NT_STATUS_OK
ReadX 12770 8192 4096 4096 NT_STATUS_OK
ReadX 12770 12288 4096 4096 NT_STATUS_OK
ReadX 12770 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
Close 12771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 0 4096 4096 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12773 1004 NT_STATUS_OK
WriteX 12773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12774 NT_STATUS_OK
Close 12774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12776 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12779 NT_STATUS_OK
WriteX 12779 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 258 NT_STATUS_OK
WriteX 12779 0 65536 65536 NT_STATUS_OK
WriteX 12779 65536 11540 11540 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
Flush 12780 NT_STATUS_OK
SET_FILE_INFORMATION 12780 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
Flush 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12781 NT_STATUS_OK
SET_FILE_INFORMATION 12781 1004 NT_STATUS_OK
Close 12781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 61440 4096 4096 NT_STATUS_OK
ReadX 12785 126976 4096 4096 NT_STATUS_OK
WriteX 12785 0 65536 65536 NT_STATUS_OK
WriteX 12785 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 61440 4096 4096 NT_STATUS_OK
ReadX 12786 126976 4096 4096 NT_STATUS_OK
ReadX 12786 192512 4096 4096 NT_STATUS_OK
ReadX 12786 258048 4096 4096 NT_STATUS_OK
WriteX 12786 0 65536 65536 NT_STATUS_OK
WriteX 12786 65536 65536 65536 NT_STATUS_OK
WriteX 12786 131072 65536 65536 NT_STATUS_OK
WriteX 12786 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12787 NT_STATUS_OK
ReadX 12787 61440 4096 4096 NT_STATUS_OK
ReadX 12787 126976 4096 4096 NT_STATUS_OK
ReadX 12787 192512 4096 4096 NT_STATUS_OK
ReadX 12787 258048 4096 4096 NT_STATUS_OK
ReadX 12787 323584 4096 4096 NT_STATUS_OK
ReadX 12787 389120 4096 4096 NT_STATUS_OK
ReadX 12787 454656 4096 4096 NT_STATUS_OK
ReadX 12787 520192 4096 4096 NT_STATUS_OK
WriteX 12787 0 65536 65536 NT_STATUS_OK
WriteX 12787 65536 65536 65536 NT_STATUS_OK
WriteX 12787 131072 65536 65536 NT_STATUS_OK
WriteX 12787 196608 65536 65536 NT_STATUS_OK
WriteX 12787 262144 65536 65536 NT_STATUS_OK
WriteX 12787 327680 65536 65536 NT_STATUS_OK
WriteX 12787 393216 65536 65536 NT_STATUS_OK
WriteX 12787 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
ReadX 12788 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12789 NT_STATUS_OK
WriteX 12789 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12789 258 NT_STATUS_OK
WriteX 12789 0 53 53 NT_STATUS_OK
Close 12789 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12790 NT_STATUS_OK
Close 12790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12782 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Close 12786 NT_STATUS_OK
Close 12787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12788 8192 4096 4096 NT_STATUS_OK
ReadX 12788 12288 4096 4096 NT_STATUS_OK
WriteX 12792 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12792 258 NT_STATUS_OK
ReadX 12788 16384 4096 4096 NT_STATUS_OK
ReadX 12788 20480 4096 4096 NT_STATUS_OK
WriteX 12792 0 15360 15360 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12793 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12793 1004 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12794 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12796 4096 4096 4096 NT_STATUS_OK
ReadX 12796 8192 4096 4096 NT_STATUS_OK
ReadX 12796 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
ReadX 12799 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
ReadX 12800 4096 4096 4096 NT_STATUS_OK
ReadX 12800 8192 4096 4096 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12801 NT_STATUS_OK
WriteX 12801 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12801 258 NT_STATUS_OK
WriteX 12801 0 15360 15360 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12802 NT_STATUS_OK
ReadX 12802 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12802 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12802 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12803 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12806 NT_STATUS_OK
SET_FILE_INFORMATION 12806 1004 NT_STATUS_OK
Close 12806 NT_STATUS_OK
WriteX 12802 0 4096 4096 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
ReadX 12809 4096 4096 4096 NT_STATUS_OK
ReadX 12809 8192 4096 4096 NT_STATUS_OK
ReadX 12809 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12809 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12809 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12811 NT_STATUS_OK
WriteX 12811 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12811 258 NT_STATUS_OK
WriteX 12811 0 53 53 NT_STATUS_OK
Close 12811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12810 4096 4096 4096 NT_STATUS_OK
ReadX 12810 8192 4096 4096 NT_STATUS_OK
ReadX 12810 12288 4096 4096 NT_STATUS_OK
WriteX 12814 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12814 258 NT_STATUS_OK
WriteX 12814 0 12006 12006 NT_STATUS_OK
Close 12814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12815 1004 NT_STATUS_OK
WriteX 12815 0 4096 4096 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12819 NT_STATUS_OK
Close 12819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12818 4096 4096 4096 NT_STATUS_OK
ReadX 12818 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12821 NT_STATUS_OK
WriteX 12821 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12821 258 NT_STATUS_OK
WriteX 12821 0 11991 11991 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12822 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12822 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12823 NT_STATUS_OK
Close 12823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12826 NT_STATUS_OK
SET_FILE_INFORMATION 12826 1004 NT_STATUS_OK
Close 12826 NT_STATUS_OK
WriteX 12822 0 4096 4096 NT_STATUS_OK
Close 12822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12829 NT_STATUS_OK
ReadX 12829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12829 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12829 1004 NT_STATUS_OK
ReadX 12829 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12829 1004 NT_STATUS_OK
WriteX 12829 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12829 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12829 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12829 1004 NT_STATUS_OK
Close 12805 NT_STATUS_OK
WriteX 12809 0 19054 19054 NT_STATUS_OK
WriteX 12829 0 12288 12288 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12832 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 61440 61440 NT_STATUS_OK
ReadX 12836 61440 4096 4096 NT_STATUS_OK
ReadX 12836 65536 61440 61440 NT_STATUS_OK
ReadX 12836 126976 4096 4096 NT_STATUS_OK
ReadX 12836 131072 61440 61440 NT_STATUS_OK
ReadX 12836 192512 4096 4096 NT_STATUS_OK
ReadX 12836 196608 61440 61440 NT_STATUS_OK
ReadX 12836 258048 4096 4096 NT_STATUS_OK
ReadX 12836 262144 61440 61440 NT_STATUS_OK
ReadX 12836 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 61440 61440 NT_STATUS_OK
ReadX 12837 61440 4096 4096 NT_STATUS_OK
ReadX 12837 65536 61440 61440 NT_STATUS_OK
ReadX 12837 126976 4096 4096 NT_STATUS_OK
ReadX 12837 131072 61440 61440 NT_STATUS_OK
ReadX 12837 192512 4096 4096 NT_STATUS_OK
ReadX 12837 196608 61440 61440 NT_STATUS_OK
ReadX 12837 258048 4096 4096 NT_STATUS_OK
ReadX 12837 262144 61440 61440 NT_STATUS_OK
ReadX 12837 323584 4096 4096 NT_STATUS_OK
ReadX 12837 327680 61440 61440 NT_STATUS_OK
ReadX 12837 389120 4096 4096 NT_STATUS_OK
ReadX 12837 393216 61440 61440 NT_STATUS_OK
ReadX 12837 454656 4096 4096 NT_STATUS_OK
ReadX 12837 458752 61440 61440 NT_STATUS_OK
ReadX 12837 520192 4096 4096 NT_STATUS_OK
ReadX 12837 524288 61440 61440 NT_STATUS_OK
ReadX 12837 585728 4096 4096 NT_STATUS_OK
ReadX 12837 589824 61440 61440 NT_STATUS_OK
ReadX 12837 651264 4096 4096 NT_STATUS_OK
ReadX 12837 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 61440 61440 NT_STATUS_OK
ReadX 12838 61440 4096 4096 NT_STATUS_OK
ReadX 12838 65536 61440 61440 NT_STATUS_OK
ReadX 12838 126976 4096 4096 NT_STATUS_OK
ReadX 12838 131072 61440 61440 NT_STATUS_OK
ReadX 12838 192512 4096 4096 NT_STATUS_OK
ReadX 12838 196608 61440 61440 NT_STATUS_OK
ReadX 12838 258048 4096 4096 NT_STATUS_OK
ReadX 12838 262144 61440 61440 NT_STATUS_OK
ReadX 12838 323584 4096 4096 NT_STATUS_OK
ReadX 12838 327680 61440 61440 NT_STATUS_OK
ReadX 12838 389120 4096 4096 NT_STATUS_OK
ReadX 12838 393216 61440 61440 NT_STATUS_OK
ReadX 12838 454656 4096 4096 NT_STATUS_OK
ReadX 12838 458752 61440 61440 NT_STATUS_OK
ReadX 12838 520192 4096 4096 NT_STATUS_OK
ReadX 12838 524288 61440 61440 NT_STATUS_OK
ReadX 12838 585728 4096 4096 NT_STATUS_OK
ReadX 12838 589824 61440 61440 NT_STATUS_OK
ReadX 12838 651264 4096 4096 NT_STATUS_OK
ReadX 12838 655360 61440 61440 NT_STATUS_OK
ReadX 12838 716800 4096 4096 NT_STATUS_OK
ReadX 12838 720896 61440 61440 NT_STATUS_OK
ReadX 12838 782336 4096 4096 NT_STATUS_OK
ReadX 12838 786432 61440 61440 NT_STATUS_OK
ReadX 12838 847872 4096 4096 NT_STATUS_OK
ReadX 12838 851968 61440 61440 NT_STATUS_OK
ReadX 12838 913408 4096 4096 NT_STATUS_OK
ReadX 12838 917504 61440 61440 NT_STATUS_OK
ReadX 12838 978944 4096 4096 NT_STATUS_OK
ReadX 12838 983040 61440 61440 NT_STATUS_OK
ReadX 12838 1044480 4096 4096 NT_STATUS_OK
ReadX 12838 1048576 61440 61440 NT_STATUS_OK
ReadX 12838 1110016 4096 4096 NT_STATUS_OK
ReadX 12838 1114112 61440 61440 NT_STATUS_OK
ReadX 12838 1175552 4096 4096 NT_STATUS_OK
ReadX 12838 1179648 61440 61440 NT_STATUS_OK
ReadX 12838 1241088 4096 4096 NT_STATUS_OK
ReadX 12838 1245184 61440 61440 NT_STATUS_OK
ReadX 12838 1306624 4096 4096 NT_STATUS_OK
ReadX 12838 1310720 61440 61440 NT_STATUS_OK
ReadX 12838 1372160 4096 4096 NT_STATUS_OK
ReadX 12838 1376256 61440 61440 NT_STATUS_OK
ReadX 12838 1437696 4096 4096 NT_STATUS_OK
ReadX 12838 1441792 61440 61440 NT_STATUS_OK
ReadX 12838 1503232 4096 4096 NT_STATUS_OK
ReadX 12838 1507328 61440 61440 NT_STATUS_OK
ReadX 12838 1568768 4096 4096 NT_STATUS_OK
ReadX 12838 1572864 61440 61440 NT_STATUS_OK
ReadX 12838 1634304 4096 4096 NT_STATUS_OK
ReadX 12838 1638400 61440 61440 NT_STATUS_OK
ReadX 12838 1699840 4096 4096 NT_STATUS_OK
ReadX 12838 1703936 61440 61440 NT_STATUS_OK
ReadX 12838 1765376 4096 4096 NT_STATUS_OK
ReadX 12838 1769472 61440 61440 NT_STATUS_OK
ReadX 12838 1830912 4096 4096 NT_STATUS_OK
ReadX 12838 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12841 NT_STATUS_OK
ReadX 12841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12845 NT_STATUS_OK
QUERY_FILE_INFORMATION 12845 1004 NT_STATUS_OK
WriteX 12845 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12845 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12847 NT_STATUS_OK
WriteX 12847 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 258 NT_STATUS_OK
WriteX 12847 0 491 491 NT_STATUS_OK
Close 12847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12848 NT_STATUS_OK
ReadX 12848 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12845 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12851 NT_STATUS_OK
WriteX 12851 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12851 258 NT_STATUS_OK
WriteX 12851 0 543 543 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12864 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12865 NT_STATUS_OK
QUERY_FILE_INFORMATION 12865 1004 NT_STATUS_OK
WriteX 12865 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12865 258 NT_STATUS_OK
WriteX 12865 0 2048 2048 NT_STATUS_OK
Close 12865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12866 0 4096 4096 NT_STATUS_OK
Flush 12866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12866 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12871 NT_STATUS_OK
WriteX 12871 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12871 258 NT_STATUS_OK
WriteX 12871 0 2048 2048 NT_STATUS_OK
Close 12871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12872 NT_STATUS_OK
ReadX 12872 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12877 NT_STATUS_OK
WriteX 12877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12877 258 NT_STATUS_OK
WriteX 12877 0 2048 2048 NT_STATUS_OK
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 2048 2048 NT_STATUS_OK
ReadX 12856 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12872 0 4096 4096 NT_STATUS_OK
WriteX 12856 0 8192 8192 NT_STATUS_OK
WriteX 12857 0 4096 4096 NT_STATUS_OK
WriteX 12858 0 4096 4096 NT_STATUS_OK
ReadX 12872 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12881 NT_STATUS_OK
ReadX 12881 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12882 NT_STATUS_OK
QUERY_FILE_INFORMATION 12882 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12881 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12872 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12886 NT_STATUS_OK
ReadX 12886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12893 NT_STATUS_OK
ReadX 12893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12902 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 1004 NT_STATUS_OK
WriteX 12902 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 258 NT_STATUS_OK
WriteX 12902 0 2048 2048 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12905 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12910 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1004 NT_STATUS_OK
WriteX 12910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 2048 2048 NT_STATUS_OK
Close 12910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12903 0 4096 4096 NT_STATUS_OK
Flush 12903 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
Flush 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12903 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12905 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12913 NT_STATUS_OK
WriteX 12913 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12913 258 NT_STATUS_OK
WriteX 12913 0 4096 4096 NT_STATUS_OK
Close 12913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12914 NT_STATUS_OK
Close 12897 NT_STATUS_OK
ReadX 12914 0 4096 4096 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12915 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12916 NT_STATUS_OK
Close 12885 NT_STATUS_OK
WriteX 12916 4095 1 1 NT_STATUS_OK
Close 12896 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 258 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
Close 12892 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12917 NT_STATUS_OK
Close 12889 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
Close 12890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12887 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12923 NT_STATUS_OK
Close 12923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12924 NT_STATUS_OK
WriteX 12924 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12924 258 NT_STATUS_OK
WriteX 12924 0 2048 2048 NT_STATUS_OK
Close 12924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12927 NT_STATUS_OK
ReadX 12927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12929 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12936 NT_STATUS_OK
ReadX 12936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12937 NT_STATUS_OK
ReadX 12937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12938 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12939 NT_STATUS_OK
QUERY_FILE_INFORMATION 12939 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Close 12937 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Close 12936 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Close 12926 NT_STATUS_OK
Close 12927 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12941 NT_STATUS_OK
QUERY_FILE_INFORMATION 12941 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12945 NT_STATUS_OK
ReadX 12945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12946 NT_STATUS_OK
ReadX 12946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12948 NT_STATUS_OK
ReadX 12948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12952 NT_STATUS_OK
ReadX 12952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12960 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12961 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 1004 NT_STATUS_OK
WriteX 12961 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
WriteX 12961 0 2048 2048 NT_STATUS_OK
Close 12961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12962 NT_STATUS_OK
ReadX 12962 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12973 NT_STATUS_OK
QUERY_FILE_INFORMATION 12973 1004 NT_STATUS_OK
WriteX 12973 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12973 258 NT_STATUS_OK
WriteX 12973 0 2048 2048 NT_STATUS_OK
Close 12973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12974 NT_STATUS_OK
ReadX 12974 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12976 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12981 NT_STATUS_OK
QUERY_FILE_INFORMATION 12981 1004 NT_STATUS_OK
WriteX 12981 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12981 258 NT_STATUS_OK
WriteX 12981 0 2048 2048 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12962 0 4096 4096 NT_STATUS_OK
Flush 12962 NT_STATUS_OK
WriteX 12974 0 4096 4096 NT_STATUS_OK
Flush 12974 NT_STATUS_OK
WriteX 12982 0 4096 4096 NT_STATUS_OK
Flush 12982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12962 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12964 4096 16384 16384 NT_STATUS_OK
ReadX 12944 4096 16384 16384 NT_STATUS_OK
ReadX 12976 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12984 NT_STATUS_OK
ReadX 12984 0 2048 2048 NT_STATUS_OK
WriteX 12984 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12985 NT_STATUS_OK
QUERY_FILE_INFORMATION 12985 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12984 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12956 NT_STATUS_OK
Close 12948 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12955 NT_STATUS_OK
Close 12976 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Close 12953 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 12951 NT_STATUS_OK
Close 12952 NT_STATUS_OK
Close 12944 NT_STATUS_OK
Close 12945 NT_STATUS_OK
Close 12946 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12987 NT_STATUS_OK
QUERY_FILE_INFORMATION 12987 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12989 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12992 4096 16384 16384 NT_STATUS_OK
WriteX 12992 0 4096 4096 NT_STATUS_OK
WriteX 12993 0 4096 4096 NT_STATUS_OK
WriteX 12994 0 4096 4096 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13002 NT_STATUS_OK
ReadX 13002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13005 NT_STATUS_OK
ReadX 13005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13008 NT_STATUS_OK
ReadX 13008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13009 NT_STATUS_OK
ReadX 13009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 8192 8192 NT_STATUS_OK
ReadX 12998 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13012 0 4096 4096 NT_STATUS_OK
ReadX 13012 4096 4096 4096 NT_STATUS_OK
ReadX 13012 8192 4096 4096 NT_STATUS_OK
WriteX 12998 0 4096 4096 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
ReadX 13013 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12992 0 4096 4096 NT_STATUS_OK
WriteX 12993 0 4096 4096 NT_STATUS_OK
WriteX 12994 0 4096 4096 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13018 NT_STATUS_OK
QUERY_FILE_INFORMATION 13018 1004 NT_STATUS_OK
WriteX 13018 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13018 258 NT_STATUS_OK
WriteX 13018 0 2048 2048 NT_STATUS_OK
Close 13018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13019 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13021 NT_STATUS_OK
ReadX 13021 0 4096 4096 NT_STATUS_OK
ReadX 13021 4096 4096 4096 NT_STATUS_OK
WriteX 13021 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
ReadX 13023 4096 4096 4096 NT_STATUS_OK
WriteX 13023 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13024 NT_STATUS_OK
QUERY_FILE_INFORMATION 13024 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Close 12996 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12993 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13009 NT_STATUS_OK
Close 13005 NT_STATUS_OK
Close 13006 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Close 13008 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13026 0 4096 4096 NT_STATUS_OK
ReadX 13026 4096 4096 4096 NT_STATUS_OK
ReadX 13026 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13033 NT_STATUS_OK
ReadX 13033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13034 NT_STATUS_OK
ReadX 13034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13035 NT_STATUS_OK
ReadX 13035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
ReadX 13027 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13044 NT_STATUS_OK
QUERY_FILE_INFORMATION 13044 1004 NT_STATUS_OK
WriteX 13044 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13044 258 NT_STATUS_OK
WriteX 13044 0 2048 2048 NT_STATUS_OK
Close 13044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13045 NT_STATUS_OK
ReadX 13045 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13045 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13049 NT_STATUS_OK
Close 13049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13050 NT_STATUS_OK
QUERY_FILE_INFORMATION 13050 1004 NT_STATUS_OK
WriteX 13050 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13050 258 NT_STATUS_OK
WriteX 13050 0 2048 2048 NT_STATUS_OK
Close 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13051 NT_STATUS_OK
ReadX 13051 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13051 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13034 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13052 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13033 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13030 NT_STATUS_OK
Close 13034 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13026 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13054 NT_STATUS_OK
QUERY_FILE_INFORMATION 13054 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 61440 4096 4096 NT_STATUS_OK
ReadX 13056 126976 4096 4096 NT_STATUS_OK
WriteX 13056 0 65536 65536 NT_STATUS_OK
WriteX 13056 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 61440 4096 4096 NT_STATUS_OK
ReadX 13057 126976 4096 4096 NT_STATUS_OK
ReadX 13057 192512 4096 4096 NT_STATUS_OK
ReadX 13057 258048 4096 4096 NT_STATUS_OK
WriteX 13057 0 65536 65536 NT_STATUS_OK
WriteX 13057 65536 65536 65536 NT_STATUS_OK
WriteX 13057 131072 65536 65536 NT_STATUS_OK
WriteX 13057 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 61440 4096 4096 NT_STATUS_OK
ReadX 13058 126976 4096 4096 NT_STATUS_OK
ReadX 13058 192512 4096 4096 NT_STATUS_OK
ReadX 13058 258048 4096 4096 NT_STATUS_OK
ReadX 13058 323584 4096 4096 NT_STATUS_OK
ReadX 13058 389120 4096 4096 NT_STATUS_OK
ReadX 13058 454656 4096 4096 NT_STATUS_OK
ReadX 13058 520192 4096 4096 NT_STATUS_OK
WriteX 13058 0 65536 65536 NT_STATUS_OK
WriteX 13058 65536 65536 65536 NT_STATUS_OK
WriteX 13058 131072 65536 65536 NT_STATUS_OK
WriteX 13058 196608 65536 65536 NT_STATUS_OK
WriteX 13058 262144 65536 65536 NT_STATUS_OK
WriteX 13058 327680 65536 65536 NT_STATUS_OK
WriteX 13058 393216 65536 65536 NT_STATUS_OK
WriteX 13058 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13059 NT_STATUS_OK
ReadX 13059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13059 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13059 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13059 8192 4096 4096 NT_STATUS_OK
ReadX 13059 12288 4096 4096 NT_STATUS_OK
ReadX 13059 16384 4096 4096 NT_STATUS_OK
ReadX 13059 20480 4096 4096 NT_STATUS_OK
ReadX 13059 24576 4096 4096 NT_STATUS_OK
ReadX 13059 28672 4096 4096 NT_STATUS_OK
ReadX 13059 32768 4096 4096 NT_STATUS_OK
ReadX 13059 36864 4096 4096 NT_STATUS_OK
ReadX 13059 40960 4096 4096 NT_STATUS_OK
ReadX 13059 45056 4096 4096 NT_STATUS_OK
ReadX 13059 49152 4096 4096 NT_STATUS_OK
ReadX 13059 53248 4096 4096 NT_STATUS_OK
ReadX 13059 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13059 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13056 NT_STATUS_OK
Close 13057 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13062 NT_STATUS_OK
WriteX 13062 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13062 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13062 1004 NT_STATUS_OK
WriteX 13062 0 57088 57088 NT_STATUS_OK
WriteX 13062 0 4096 4096 NT_STATUS_OK
Flush 13062 NT_STATUS_OK
Close 13059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13063 NT_STATUS_OK
SET_FILE_INFORMATION 13063 1004 NT_STATUS_OK
Close 13063 NT_STATUS_OK
SET_FILE_INFORMATION 13062 1004 NT_STATUS_OK
WriteX 13062 0 4096 4096 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13064 NT_STATUS_OK
Close 13064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13066 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13067 NT_STATUS_OK
WriteX 13067 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13067 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13067 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13067 1004 NT_STATUS_OK
WriteX 13067 0 51456 51456 NT_STATUS_OK
WriteX 13067 0 4096 4096 NT_STATUS_OK
Flush 13067 NT_STATUS_OK
SET_FILE_INFORMATION 13067 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13067 1004 NT_STATUS_OK
WriteX 13067 0 4096 4096 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13069 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13071 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 53077 53077 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13077 NT_STATUS_OK
WriteX 13077 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13077 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 65536 65536 NT_STATUS_OK
WriteX 13077 65536 1856 1856 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13086 NT_STATUS_OK
WriteX 13086 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13086 258 NT_STATUS_OK
WriteX 13086 0 7983 7983 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13091 NT_STATUS_OK
WriteX 13091 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 258 NT_STATUS_OK
WriteX 13091 0 65536 65536 NT_STATUS_OK
WriteX 13091 65536 65536 65536 NT_STATUS_OK
WriteX 13091 131072 65536 65536 NT_STATUS_OK
WriteX 13091 196608 65536 65536 NT_STATUS_OK
WriteX 13091 262144 65536 65536 NT_STATUS_OK
WriteX 13091 327680 65536 65536 NT_STATUS_OK
WriteX 13091 393216 65536 65536 NT_STATUS_OK
WriteX 13091 458752 46731 46731 NT_STATUS_OK
Close 13091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13092 NT_STATUS_OK
WriteX 13092 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13092 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13081 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 65536 65536 NT_STATUS_OK
WriteX 13092 65536 22848 22848 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13094 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13096 NT_STATUS_OK
ReadX 13096 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13097 NT_STATUS_OK
ReadX 13097 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13097 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13097 1004 NT_STATUS_OK
ReadX 13097 8192 4096 4096 NT_STATUS_OK
ReadX 13097 12288 4096 4096 NT_STATUS_OK
ReadX 13097 16384 4096 4096 NT_STATUS_OK
ReadX 13097 20480 4096 4096 NT_STATUS_OK
ReadX 13097 24576 4096 4096 NT_STATUS_OK
ReadX 13097 28672 4096 4096 NT_STATUS_OK
ReadX 13097 32768 4096 4096 NT_STATUS_OK
ReadX 13097 36864 4096 4096 NT_STATUS_OK
ReadX 13097 40960 4096 4096 NT_STATUS_OK
ReadX 13097 45056 4096 4096 NT_STATUS_OK
ReadX 13097 49152 4096 4096 NT_STATUS_OK
ReadX 13097 53248 4096 4096 NT_STATUS_OK
ReadX 13097 57344 4096 4096 NT_STATUS_OK
ReadX 13097 61440 4096 4096 NT_STATUS_OK
ReadX 13097 65536 4096 4096 NT_STATUS_OK
ReadX 13097 69632 4096 4096 NT_STATUS_OK
ReadX 13097 73728 4096 4096 NT_STATUS_OK
ReadX 13097 77824 4096 4096 NT_STATUS_OK
ReadX 13097 81920 4096 4096 NT_STATUS_OK
ReadX 13097 86016 4096 4096 NT_STATUS_OK
ReadX 13097 90112 4096 4096 NT_STATUS_OK
ReadX 13097 94208 4096 4096 NT_STATUS_OK
ReadX 13097 98304 4096 4096 NT_STATUS_OK
ReadX 13097 102400 4096 4096 NT_STATUS_OK
ReadX 13097 106496 4096 4096 NT_STATUS_OK
ReadX 13097 110592 4096 4096 NT_STATUS_OK
ReadX 13097 114688 4096 4096 NT_STATUS_OK
ReadX 13097 118784 4096 4096 NT_STATUS_OK
ReadX 13097 122880 4096 4096 NT_STATUS_OK
ReadX 13097 126976 4096 4096 NT_STATUS_OK
ReadX 13097 131072 4096 4096 NT_STATUS_OK
ReadX 13097 135168 4096 4096 NT_STATUS_OK
ReadX 13097 139264 4096 4096 NT_STATUS_OK
ReadX 13097 143360 4096 4096 NT_STATUS_OK
ReadX 13097 147456 4096 4096 NT_STATUS_OK
ReadX 13097 151552 4096 4096 NT_STATUS_OK
ReadX 13097 155648 4096 4096 NT_STATUS_OK
ReadX 13097 159744 4096 4096 NT_STATUS_OK
ReadX 13097 163840 4096 4096 NT_STATUS_OK
ReadX 13097 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13097 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13098 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13100 NT_STATUS_OK
WriteX 13100 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13100 258 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13101 NT_STATUS_OK
SET_FILE_INFORMATION 13101 1004 NT_STATUS_OK
Close 13101 NT_STATUS_OK
WriteX 13100 0 42388 42388 NT_STATUS_OK
Close 13100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 0 4096 4096 NT_STATUS_OK
ReadX 13104 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
WriteX 13105 0 42652 42652 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Close 13104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
ReadX 13109 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13114 NT_STATUS_OK
WriteX 13114 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 258 NT_STATUS_OK
WriteX 13114 0 65536 65536 NT_STATUS_OK
WriteX 13114 65536 49 49 NT_STATUS_OK
Close 13114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 61440 61440 NT_STATUS_OK
ReadX 13115 61440 4096 4096 NT_STATUS_OK
ReadX 13115 65536 61440 61440 NT_STATUS_OK
ReadX 13115 126976 4096 4096 NT_STATUS_OK
ReadX 13115 131072 61440 61440 NT_STATUS_OK
ReadX 13115 192512 4096 4096 NT_STATUS_OK
ReadX 13115 196608 61440 61440 NT_STATUS_OK
ReadX 13115 258048 4096 4096 NT_STATUS_OK
ReadX 13115 262144 61440 61440 NT_STATUS_OK
ReadX 13115 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 61440 61440 NT_STATUS_OK
ReadX 13116 61440 4096 4096 NT_STATUS_OK
ReadX 13116 65536 61440 61440 NT_STATUS_OK
ReadX 13116 126976 4096 4096 NT_STATUS_OK
ReadX 13116 131072 61440 61440 NT_STATUS_OK
ReadX 13116 192512 4096 4096 NT_STATUS_OK
ReadX 13116 196608 61440 61440 NT_STATUS_OK
ReadX 13116 258048 4096 4096 NT_STATUS_OK
ReadX 13116 262144 61440 61440 NT_STATUS_OK
ReadX 13116 323584 4096 4096 NT_STATUS_OK
ReadX 13116 327680 61440 61440 NT_STATUS_OK
ReadX 13116 389120 4096 4096 NT_STATUS_OK
ReadX 13116 393216 61440 61440 NT_STATUS_OK
ReadX 13116 454656 4096 4096 NT_STATUS_OK
ReadX 13116 458752 61440 61440 NT_STATUS_OK
ReadX 13116 520192 4096 4096 NT_STATUS_OK
ReadX 13116 524288 61440 61440 NT_STATUS_OK
ReadX 13116 585728 4096 4096 NT_STATUS_OK
ReadX 13116 589824 61440 61440 NT_STATUS_OK
ReadX 13116 651264 4096 4096 NT_STATUS_OK
ReadX 13116 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 61440 61440 NT_STATUS_OK
ReadX 13117 61440 4096 4096 NT_STATUS_OK
ReadX 13117 65536 61440 61440 NT_STATUS_OK
ReadX 13117 126976 4096 4096 NT_STATUS_OK
ReadX 13117 131072 61440 61440 NT_STATUS_OK
ReadX 13117 192512 4096 4096 NT_STATUS_OK
ReadX 13117 196608 61440 61440 NT_STATUS_OK
ReadX 13117 258048 4096 4096 NT_STATUS_OK
ReadX 13117 262144 61440 61440 NT_STATUS_OK
ReadX 13117 323584 4096 4096 NT_STATUS_OK
ReadX 13117 327680 61440 61440 NT_STATUS_OK
ReadX 13117 389120 4096 4096 NT_STATUS_OK
ReadX 13117 393216 61440 61440 NT_STATUS_OK
ReadX 13117 454656 4096 4096 NT_STATUS_OK
ReadX 13117 458752 61440 61440 NT_STATUS_OK
ReadX 13117 520192 4096 4096 NT_STATUS_OK
ReadX 13117 524288 61440 61440 NT_STATUS_OK
ReadX 13117 585728 4096 4096 NT_STATUS_OK
ReadX 13117 589824 61440 61440 NT_STATUS_OK
ReadX 13117 651264 4096 4096 NT_STATUS_OK
ReadX 13117 655360 61440 61440 NT_STATUS_OK
ReadX 13117 716800 4096 4096 NT_STATUS_OK
ReadX 13117 720896 61440 61440 NT_STATUS_OK
ReadX 13117 782336 4096 4096 NT_STATUS_OK
ReadX 13117 786432 61440 61440 NT_STATUS_OK
ReadX 13117 847872 4096 4096 NT_STATUS_OK
ReadX 13117 851968 61440 61440 NT_STATUS_OK
ReadX 13117 913408 4096 4096 NT_STATUS_OK
ReadX 13117 917504 61440 61440 NT_STATUS_OK
ReadX 13117 978944 4096 4096 NT_STATUS_OK
ReadX 13117 983040 61440 61440 NT_STATUS_OK
ReadX 13117 1044480 4096 4096 NT_STATUS_OK
ReadX 13117 1048576 61440 61440 NT_STATUS_OK
ReadX 13117 1110016 4096 4096 NT_STATUS_OK
ReadX 13117 1114112 61440 61440 NT_STATUS_OK
ReadX 13117 1175552 4096 4096 NT_STATUS_OK
ReadX 13117 1179648 61440 61440 NT_STATUS_OK
ReadX 13117 1241088 4096 4096 NT_STATUS_OK
ReadX 13117 1245184 61440 61440 NT_STATUS_OK
ReadX 13117 1306624 4096 4096 NT_STATUS_OK
ReadX 13117 1310720 61440 61440 NT_STATUS_OK
ReadX 13117 1372160 4096 4096 NT_STATUS_OK
ReadX 13117 1376256 61440 61440 NT_STATUS_OK
ReadX 13117 1437696 4096 4096 NT_STATUS_OK
ReadX 13117 1441792 61440 61440 NT_STATUS_OK
ReadX 13117 1503232 4096 4096 NT_STATUS_OK
ReadX 13117 1507328 61440 61440 NT_STATUS_OK
ReadX 13117 1568768 4096 4096 NT_STATUS_OK
ReadX 13117 1572864 61440 61440 NT_STATUS_OK
ReadX 13117 1634304 4096 4096 NT_STATUS_OK
ReadX 13117 1638400 61440 61440 NT_STATUS_OK
ReadX 13117 1699840 4096 4096 NT_STATUS_OK
ReadX 13117 1703936 61440 61440 NT_STATUS_OK
ReadX 13117 1765376 4096 4096 NT_STATUS_OK
ReadX 13117 1769472 61440 61440 NT_STATUS_OK
ReadX 13117 1830912 4096 4096 NT_STATUS_OK
ReadX 13117 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13118 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13119 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 1005 NT_STATUS_OK
ReadX 13119 2156 24 24 NT_STATUS_OK
ReadX 13119 2139 276 276 NT_STATUS_OK
ReadX 13119 2136 14 14 NT_STATUS_OK
ReadX 13119 2136 7 7 NT_STATUS_OK
ReadX 13119 2138 12 12 NT_STATUS_OK
ReadX 13119 2137 8 8 NT_STATUS_OK
ReadX 13119 2135 15 15 NT_STATUS_OK
ReadX 13119 0 16 16 NT_STATUS_OK
ReadX 13119 16 2048 2048 NT_STATUS_OK
ReadX 13119 2064 2048 2048 NT_STATUS_OK
ReadX 13119 257 2048 2048 NT_STATUS_OK
ReadX 13119 385 2048 2048 NT_STATUS_OK
ReadX 13119 513 2048 2048 NT_STATUS_OK
ReadX 13119 641 2048 2048 NT_STATUS_OK
ReadX 13119 769 2048 2048 NT_STATUS_OK
ReadX 13119 897 2048 2048 NT_STATUS_OK
ReadX 13119 1025 2048 2048 NT_STATUS_OK
ReadX 13119 1153 2048 2048 NT_STATUS_OK
ReadX 13119 1281 2048 2048 NT_STATUS_OK
ReadX 13119 1409 2048 2048 NT_STATUS_OK
ReadX 13119 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13121 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13124 NT_STATUS_OK
WriteX 13124 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13124 258 NT_STATUS_OK
WriteX 13124 0 10575 10575 NT_STATUS_OK
Flush 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13129 NT_STATUS_OK
LockX 13129 2147483538 1 NT_STATUS_OK
UnlockX 13129 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1005 NT_STATUS_OK
ReadX 13129 0 512 512 NT_STATUS_OK
ReadX 13129 512 512 512 NT_STATUS_OK
ReadX 13129 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1004 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13130 NT_STATUS_OK
QUERY_FILE_INFORMATION 13130 1005 NT_STATUS_OK
ReadX 13130 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13131 NT_STATUS_OK
LockX 13131 2147483538 1 NT_STATUS_OK
UnlockX 13131 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13131 1005 NT_STATUS_OK
ReadX 13131 0 512 512 NT_STATUS_OK
ReadX 13131 512 512 512 NT_STATUS_OK
ReadX 13131 1024 512 512 NT_STATUS_OK
ReadX 13131 288 20 20 NT_STATUS_OK
ReadX 13131 308 2084 2084 NT_STATUS_OK
ReadX 13131 388 2084 2084 NT_STATUS_OK
ReadX 13131 388 2084 2084 NT_STATUS_OK
ReadX 13118 2157 1386 1386 NT_STATUS_OK
ReadX 13131 2472 399 399 NT_STATUS_OK
ReadX 13131 3072 1536 1536 NT_STATUS_OK
ReadX 13131 544 149 149 NT_STATUS_OK
ReadX 13131 693 485 485 NT_STATUS_OK
Close 13131 NT_STATUS_OK
ReadX 13118 2157 4096 4096 NT_STATUS_OK
ReadX 13118 6253 4096 4096 NT_STATUS_OK
ReadX 13118 10349 4096 4096 NT_STATUS_OK
ReadX 13118 14445 4096 4096 NT_STATUS_OK
ReadX 13118 18541 4096 4096 NT_STATUS_OK
ReadX 13118 22637 256 256 NT_STATUS_OK
ReadX 13118 22893 4096 4096 NT_STATUS_OK
ReadX 13118 26989 4096 4096 NT_STATUS_OK
ReadX 13118 31085 4096 4096 NT_STATUS_OK
ReadX 13118 35181 4096 4096 NT_STATUS_OK
ReadX 13118 39277 4096 4096 NT_STATUS_OK
ReadX 13118 43373 4096 4096 NT_STATUS_OK
ReadX 13118 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13118 2157 1024 1024 NT_STATUS_OK
ReadX 13118 1667 4688 4688 NT_STATUS_OK
ReadX 13118 6355 3516 3516 NT_STATUS_OK
ReadX 13118 9871 16384 16384 NT_STATUS_OK
ReadX 13118 26255 3771 3771 NT_STATUS_OK
ReadX 13118 30026 2048 2048 NT_STATUS_OK
ReadX 13118 32074 1024 1024 NT_STATUS_OK
ReadX 13118 33098 6652 6652 NT_STATUS_OK
ReadX 13118 39750 16384 16384 NT_STATUS_OK
ReadX 13118 56134 10496 10496 NT_STATUS_OK
ReadX 13118 66630 1784 1784 NT_STATUS_OK
ReadX 13118 68414 90 90 NT_STATUS_OK
ReadX 13118 68504 273 273 NT_STATUS_OK
ReadX 13118 68777 1600 1600 NT_STATUS_OK
ReadX 13118 70377 640 640 NT_STATUS_OK
ReadX 13118 71017 1280 1280 NT_STATUS_OK
ReadX 13118 72297 8464 8464 NT_STATUS_OK
ReadX 13118 80761 158 158 NT_STATUS_OK
ReadX 13118 80919 912 912 NT_STATUS_OK
ReadX 13118 81831 1980 1980 NT_STATUS_OK
ReadX 13118 83811 2256 2256 NT_STATUS_OK
ReadX 13118 86067 400 400 NT_STATUS_OK
ReadX 13118 86467 252 252 NT_STATUS_OK
ReadX 13118 86719 42 42 NT_STATUS_OK
ReadX 13118 86761 725 725 NT_STATUS_OK
ReadX 13118 2009 512 512 NT_STATUS_OK
ReadX 13118 3895 9 9 NT_STATUS_OK
ReadX 13118 3781 46 46 NT_STATUS_OK
ReadX 13118 4059 92 92 NT_STATUS_OK
ReadX 13118 3781 92 92 NT_STATUS_OK
ReadX 13118 3986 184 184 NT_STATUS_OK
ReadX 13118 3987 16384 16384 NT_STATUS_OK
ReadX 13118 3902 16384 16384 NT_STATUS_OK
ReadX 13118 3781 10240 10240 NT_STATUS_OK
ReadX 13118 3821 16384 16384 NT_STATUS_OK
ReadX 13118 3891 935 935 NT_STATUS_OK
ReadX 13118 4060 10240 10240 NT_STATUS_OK
ReadX 13118 4059 184 184 NT_STATUS_OK
ReadX 13118 256 184 184 NT_STATUS_OK
ReadX 13118 256 1026 1026 NT_STATUS_OK
ReadX 13118 3901 326 326 NT_STATUS_OK
ReadX 13118 3899 652 652 NT_STATUS_OK
ReadX 13118 256 2 2 NT_STATUS_OK
ReadX 13118 258 4948 4948 NT_STATUS_OK
Close 13118 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13133 NT_STATUS_OK
Close 13133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13136 NT_STATUS_OK
WriteX 13136 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 258 NT_STATUS_OK
WriteX 13136 0 65536 65536 NT_STATUS_OK
WriteX 13136 65536 65536 65536 NT_STATUS_OK
WriteX 13136 131072 65536 65536 NT_STATUS_OK
WriteX 13136 196608 65536 65536 NT_STATUS_OK
WriteX 13136 262144 65536 65536 NT_STATUS_OK
WriteX 13136 327680 65536 65536 NT_STATUS_OK
WriteX 13136 393216 65536 65536 NT_STATUS_OK
WriteX 13136 458752 65536 65536 NT_STATUS_OK
WriteX 13136 524288 65536 65536 NT_STATUS_OK
WriteX 13136 589824 35257 35257 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13138 NT_STATUS_OK
Close 13138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13141 NT_STATUS_OK
WriteX 13141 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 258 NT_STATUS_OK
WriteX 13141 0 65536 65536 NT_STATUS_OK
WriteX 13141 65536 65536 65536 NT_STATUS_OK
WriteX 13141 131072 65536 65536 NT_STATUS_OK
WriteX 13141 196608 65536 65536 NT_STATUS_OK
WriteX 13141 262144 65536 65536 NT_STATUS_OK
WriteX 13141 327680 65536 65536 NT_STATUS_OK
WriteX 13141 393216 65536 65536 NT_STATUS_OK
WriteX 13141 458752 65536 65536 NT_STATUS_OK
WriteX 13141 524288 65536 65536 NT_STATUS_OK
WriteX 13141 589824 57598 57598 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13143 NT_STATUS_OK
WriteX 13143 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13143 258 NT_STATUS_OK
WriteX 13143 0 12543 12543 NT_STATUS_OK
Flush 13143 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13149 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 1005 NT_STATUS_OK
ReadX 13149 1938 24 24 NT_STATUS_OK
ReadX 13149 1920 276 276 NT_STATUS_OK
ReadX 13149 1918 14 14 NT_STATUS_OK
ReadX 13149 1918 7 7 NT_STATUS_OK
ReadX 13149 1919 12 12 NT_STATUS_OK
ReadX 13149 1919 8 8 NT_STATUS_OK
ReadX 13149 1917 15 15 NT_STATUS_OK
ReadX 13149 0 16 16 NT_STATUS_OK
ReadX 13149 16 2048 2048 NT_STATUS_OK
ReadX 13149 2064 2048 2048 NT_STATUS_OK
ReadX 13149 257 2048 2048 NT_STATUS_OK
ReadX 13149 385 2048 2048 NT_STATUS_OK
ReadX 13149 513 2048 2048 NT_STATUS_OK
ReadX 13149 641 2048 2048 NT_STATUS_OK
ReadX 13149 769 2048 2048 NT_STATUS_OK
ReadX 13149 897 2048 2048 NT_STATUS_OK
ReadX 13149 1025 2048 2048 NT_STATUS_OK
ReadX 13149 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13154 NT_STATUS_OK
WriteX 13154 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13154 258 NT_STATUS_OK
WriteX 13154 0 11588 11588 NT_STATUS_OK
Flush 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
Close 13149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13159 NT_STATUS_OK
WriteX 13159 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13159 258 NT_STATUS_OK
WriteX 13159 0 11615 11615 NT_STATUS_OK
Flush 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13168 NT_STATUS_OK
WriteX 13168 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 65536 65536 NT_STATUS_OK
WriteX 13168 65536 16050 16050 NT_STATUS_OK
Close 13168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13148 1939 64 64 NT_STATUS_OK
ReadX 13148 128 248 248 NT_STATUS_OK
ReadX 13148 128 568 568 NT_STATUS_OK
ReadX 13148 3872 1536 1536 NT_STATUS_OK
ReadX 13148 3456 2560 2560 NT_STATUS_OK
ReadX 13148 3136 512 512 NT_STATUS_OK
ReadX 13148 2880 4096 4096 NT_STATUS_OK
ReadX 13148 3264 3072 3072 NT_STATUS_OK
ReadX 13148 320 4096 4096 NT_STATUS_OK
ReadX 13148 1024 4096 4096 NT_STATUS_OK
ReadX 13148 3616 4096 4096 NT_STATUS_OK
ReadX 13148 1939 64 64 NT_STATUS_OK
ReadX 13148 128 248 248 NT_STATUS_OK
ReadX 13148 128 608 608 NT_STATUS_OK
ReadX 13148 2858 1024 1024 NT_STATUS_OK
ReadX 13148 2810 4096 4096 NT_STATUS_OK
ReadX 13148 2826 4096 4096 NT_STATUS_OK
ReadX 13148 2580 2048 2048 NT_STATUS_OK
ReadX 13148 2800 2560 2560 NT_STATUS_OK
ReadX 13148 2100 4096 4096 NT_STATUS_OK
ReadX 13148 2084 4096 4096 NT_STATUS_OK
ReadX 13148 868 4096 4096 NT_STATUS_OK
ReadX 13148 2324 4096 4096 NT_STATUS_OK
ReadX 13148 884 4096 4096 NT_STATUS_OK
ReadX 13148 2604 1024 1024 NT_STATUS_OK
ReadX 13148 580 4096 4096 NT_STATUS_OK
ReadX 13148 596 4096 4096 NT_STATUS_OK
ReadX 13148 2752 4096 4096 NT_STATUS_OK
ReadX 13148 2842 1024 1024 NT_STATUS_OK
ReadX 13148 660 4096 4096 NT_STATUS_OK
ReadX 13148 2720 4096 4096 NT_STATUS_OK
ReadX 13148 2736 4096 4096 NT_STATUS_OK
ReadX 13148 628 4096 4096 NT_STATUS_OK
ReadX 13148 2704 4096 4096 NT_STATUS_OK
ReadX 13148 1556 4096 4096 NT_STATUS_OK
ReadX 13148 576 4096 4096 NT_STATUS_OK
ReadX 13148 3168 1536 1536 NT_STATUS_OK
ReadX 13148 832 4096 4096 NT_STATUS_OK
ReadX 13148 1088 4096 4096 NT_STATUS_OK
ReadX 13148 1344 4096 4096 NT_STATUS_OK
ReadX 13148 1600 4096 4096 NT_STATUS_OK
ReadX 13148 1856 4096 4096 NT_STATUS_OK
ReadX 13148 2112 4096 4096 NT_STATUS_OK
ReadX 13148 1892 4096 4096 NT_STATUS_OK
ReadX 13148 820 4096 4096 NT_STATUS_OK
ReadX 13148 788 4096 4096 NT_STATUS_OK
ReadX 13148 1604 4096 4096 NT_STATUS_OK
ReadX 13148 3648 4096 4096 NT_STATUS_OK
ReadX 13148 2608 4096 4096 NT_STATUS_OK
ReadX 13148 548 4096 4096 NT_STATUS_OK
ReadX 13148 740 4096 4096 NT_STATUS_OK
ReadX 13148 1344 4096 4096 NT_STATUS_OK
ReadX 13148 3392 4096 4096 NT_STATUS_OK
ReadX 13148 3904 4096 4096 NT_STATUS_OK
ReadX 13148 644 4096 4096 NT_STATUS_OK
ReadX 13148 676 4096 4096 NT_STATUS_OK
ReadX 13148 2688 4096 4096 NT_STATUS_OK
ReadX 13148 320 4096 4096 NT_STATUS_OK
ReadX 13148 900 4096 4096 NT_STATUS_OK
ReadX 13148 1908 4096 4096 NT_STATUS_OK
ReadX 13148 852 4096 4096 NT_STATUS_OK
ReadX 13148 724 4096 4096 NT_STATUS_OK
ReadX 13148 2292 4096 4096 NT_STATUS_OK
ReadX 13148 612 4096 4096 NT_STATUS_OK
ReadX 13148 388 4096 4096 NT_STATUS_OK
ReadX 13148 2368 4096 4096 NT_STATUS_OK
ReadX 13148 2624 4096 4096 NT_STATUS_OK
ReadX 13148 500 4096 4096 NT_STATUS_OK
ReadX 13148 356 4096 4096 NT_STATUS_OK
ReadX 13148 1024 4096 4096 NT_STATUS_OK
ReadX 13148 576 4096 4096 NT_STATUS_OK
ReadX 13148 340 4096 4096 NT_STATUS_OK
ReadX 13148 420 4096 4096 NT_STATUS_OK
ReadX 13148 1600 4096 4096 NT_STATUS_OK
ReadX 13148 404 4096 4096 NT_STATUS_OK
ReadX 13148 1428 4096 4096 NT_STATUS_OK
ReadX 13148 2656 4096 4096 NT_STATUS_OK
ReadX 13148 2624 4096 4096 NT_STATUS_OK
ReadX 13148 452 4096 4096 NT_STATUS_OK
ReadX 13148 692 4096 4096 NT_STATUS_OK
ReadX 13148 564 4096 4096 NT_STATUS_OK
ReadX 13148 372 4096 4096 NT_STATUS_OK
ReadX 13148 468 4096 4096 NT_STATUS_OK
ReadX 13148 484 4096 4096 NT_STATUS_OK
ReadX 13148 1088 4096 4096 NT_STATUS_OK
ReadX 13148 1924 4096 4096 NT_STATUS_OK
ReadX 13148 2768 4096 4096 NT_STATUS_OK
ReadX 13148 832 4096 4096 NT_STATUS_OK
ReadX 13148 836 4096 4096 NT_STATUS_OK
ReadX 13148 1856 4096 4096 NT_STATUS_OK
ReadX 13148 2640 4096 4096 NT_STATUS_OK
ReadX 13148 436 4096 4096 NT_STATUS_OK
ReadX 13148 1828 4096 4096 NT_STATUS_OK
ReadX 13148 804 4096 4096 NT_STATUS_OK
ReadX 13148 1860 4096 4096 NT_STATUS_OK
ReadX 13148 1812 4096 4096 NT_STATUS_OK
ReadX 13148 756 4096 4096 NT_STATUS_OK
ReadX 13148 1636 4096 4096 NT_STATUS_OK
ReadX 13148 772 4096 4096 NT_STATUS_OK
ReadX 13148 2036 4096 4096 NT_STATUS_OK
ReadX 13148 1220 4096 4096 NT_STATUS_OK
ReadX 13148 1652 4096 4096 NT_STATUS_OK
ReadX 13148 2588 4096 4096 NT_STATUS_OK
ReadX 13148 916 4096 4096 NT_STATUS_OK
ReadX 13148 260 4096 4096 NT_STATUS_OK
ReadX 13148 932 4096 4096 NT_STATUS_OK
ReadX 13148 2624 4096 4096 NT_STATUS_OK
ReadX 13148 308 4096 4096 NT_STATUS_OK
ReadX 13148 292 4096 4096 NT_STATUS_OK
ReadX 13148 1140 4096 4096 NT_STATUS_OK
ReadX 13148 276 4096 4096 NT_STATUS_OK
ReadX 13148 2020 4096 4096 NT_STATUS_OK
ReadX 13148 2880 4096 4096 NT_STATUS_OK
ReadX 13148 516 4096 4096 NT_STATUS_OK
ReadX 13148 1844 4096 4096 NT_STATUS_OK
ReadX 13148 1124 4096 4096 NT_STATUS_OK
ReadX 13148 3136 4096 4096 NT_STATUS_OK
ReadX 13148 324 4096 4096 NT_STATUS_OK
ReadX 13148 1156 4096 4096 NT_STATUS_OK
ReadX 13148 1172 4096 4096 NT_STATUS_OK
ReadX 13148 2112 4096 4096 NT_STATUS_OK
ReadX 13148 2368 4096 4096 NT_STATUS_OK
ReadX 13148 964 4096 4096 NT_STATUS_OK
ReadX 13148 980 4096 4096 NT_STATUS_OK
ReadX 13148 1012 4096 4096 NT_STATUS_OK
ReadX 13148 532 4096 4096 NT_STATUS_OK
ReadX 13148 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13148 1620 4096 4096 NT_STATUS_OK
ReadX 13148 1604 4096 4096 NT_STATUS_OK
ReadX 13148 2116 4096 4096 NT_STATUS_OK
ReadX 13148 2132 4096 4096 NT_STATUS_OK
ReadX 13148 2148 4096 4096 NT_STATUS_OK
ReadX 13148 2276 4096 4096 NT_STATUS_OK
ReadX 13148 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13173 NT_STATUS_OK
QUERY_FILE_INFORMATION 13128 1004 NT_STATUS_OK
Close 13128 NT_STATUS_OK
WriteX 13173 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13173 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13130 1004 NT_STATUS_OK
Close 13130 NT_STATUS_OK
WriteX 13173 0 65536 65536 NT_STATUS_OK
WriteX 13173 65536 64850 64850 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13175 NT_STATUS_OK
WriteX 13175 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13175 258 NT_STATUS_OK
ReadX 13148 2068 4096 4096 NT_STATUS_OK
ReadX 13148 1588 4096 4096 NT_STATUS_OK
ReadX 13148 1572 4096 4096 NT_STATUS_OK
WriteX 13175 0 18630 18630 NT_STATUS_OK
Flush 13175 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13148 612 4096 4096 NT_STATUS_OK
ReadX 13148 564 4096 4096 NT_STATUS_OK
ReadX 13148 1876 4096 4096 NT_STATUS_OK
ReadX 13148 628 4096 4096 NT_STATUS_OK
ReadX 13148 740 4096 4096 NT_STATUS_OK
ReadX 13148 724 4096 4096 NT_STATUS_OK
ReadX 13148 644 4096 4096 NT_STATUS_OK
ReadX 13148 2324 4096 4096 NT_STATUS_OK
ReadX 13148 660 4096 4096 NT_STATUS_OK
ReadX 13148 852 4096 4096 NT_STATUS_OK
ReadX 13148 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13148 2368 4096 4096 NT_STATUS_OK
ReadX 13148 1024 4096 4096 NT_STATUS_OK
ReadX 13148 320 4096 4096 NT_STATUS_OK
ReadX 13148 580 4096 4096 NT_STATUS_OK
ReadX 13148 3136 512 512 NT_STATUS_OK
ReadX 13148 2880 4096 4096 NT_STATUS_OK
Close 13148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 61440 4096 4096 NT_STATUS_OK
ReadX 13180 126976 4096 4096 NT_STATUS_OK
WriteX 13180 0 65536 65536 NT_STATUS_OK
WriteX 13180 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 61440 4096 4096 NT_STATUS_OK
ReadX 13181 126976 4096 4096 NT_STATUS_OK
ReadX 13181 192512 4096 4096 NT_STATUS_OK
ReadX 13181 258048 4096 4096 NT_STATUS_OK
WriteX 13181 0 65536 65536 NT_STATUS_OK
WriteX 13181 65536 65536 65536 NT_STATUS_OK
WriteX 13181 131072 65536 65536 NT_STATUS_OK
WriteX 13181 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 61440 4096 4096 NT_STATUS_OK
ReadX 13182 126976 4096 4096 NT_STATUS_OK
ReadX 13182 192512 4096 4096 NT_STATUS_OK
ReadX 13182 258048 4096 4096 NT_STATUS_OK
ReadX 13182 323584 4096 4096 NT_STATUS_OK
ReadX 13182 389120 4096 4096 NT_STATUS_OK
ReadX 13182 454656 4096 4096 NT_STATUS_OK
ReadX 13182 520192 4096 4096 NT_STATUS_OK
WriteX 13182 0 65536 65536 NT_STATUS_OK
WriteX 13182 65536 65536 65536 NT_STATUS_OK
WriteX 13182 131072 65536 65536 NT_STATUS_OK
WriteX 13182 196608 65536 65536 NT_STATUS_OK
WriteX 13182 262144 65536 65536 NT_STATUS_OK
WriteX 13182 327680 65536 65536 NT_STATUS_OK
WriteX 13182 393216 65536 65536 NT_STATUS_OK
WriteX 13182 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13185 NT_STATUS_OK
WriteX 13185 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13185 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13183 0 8192 8192 NT_STATUS_OK
Flush 13183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13183 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13183 0 8192 8192 NT_STATUS_OK
Flush 13183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13183 0 8192 8192 NT_STATUS_OK
Flush 13183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13183 0 8192 8192 NT_STATUS_OK
Flush 13183 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13147 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13190 NT_STATUS_OK
WriteX 13190 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13190 258 NT_STATUS_OK
WriteX 13190 0 62591 62591 NT_STATUS_OK
Close 13190 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13195 NT_STATUS_OK
WriteX 13195 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13195 258 NT_STATUS_OK
WriteX 13195 0 10845 10845 NT_STATUS_OK
Close 13195 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13197 NT_STATUS_OK
Close 13197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13200 NT_STATUS_OK
WriteX 13200 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 30118 30118 NT_STATUS_OK
Close 13200 NT_STATUS_OK
WriteX 13183 0 4096 4096 NT_STATUS_OK
WriteX 13185 0 64 64 NT_STATUS_OK
Close 13185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 61440 61440 NT_STATUS_OK
ReadX 13202 61440 4096 4096 NT_STATUS_OK
ReadX 13202 65536 61440 61440 NT_STATUS_OK
ReadX 13202 126976 4096 4096 NT_STATUS_OK
ReadX 13202 131072 61440 61440 NT_STATUS_OK
ReadX 13202 192512 4096 4096 NT_STATUS_OK
ReadX 13202 196608 61440 61440 NT_STATUS_OK
ReadX 13202 258048 4096 4096 NT_STATUS_OK
ReadX 13202 262144 61440 61440 NT_STATUS_OK
ReadX 13202 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 0 61440 61440 NT_STATUS_OK
ReadX 13203 61440 4096 4096 NT_STATUS_OK
ReadX 13203 65536 61440 61440 NT_STATUS_OK
ReadX 13203 126976 4096 4096 NT_STATUS_OK
ReadX 13203 131072 61440 61440 NT_STATUS_OK
ReadX 13203 192512 4096 4096 NT_STATUS_OK
ReadX 13203 196608 61440 61440 NT_STATUS_OK
ReadX 13203 258048 4096 4096 NT_STATUS_OK
ReadX 13203 262144 61440 61440 NT_STATUS_OK
ReadX 13203 323584 4096 4096 NT_STATUS_OK
ReadX 13203 327680 61440 61440 NT_STATUS_OK
ReadX 13203 389120 4096 4096 NT_STATUS_OK
ReadX 13203 393216 61440 61440 NT_STATUS_OK
ReadX 13203 454656 4096 4096 NT_STATUS_OK
ReadX 13203 458752 61440 61440 NT_STATUS_OK
ReadX 13203 520192 4096 4096 NT_STATUS_OK
ReadX 13203 524288 61440 61440 NT_STATUS_OK
ReadX 13203 585728 4096 4096 NT_STATUS_OK
ReadX 13203 589824 61440 61440 NT_STATUS_OK
ReadX 13203 651264 4096 4096 NT_STATUS_OK
ReadX 13203 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 0 61440 61440 NT_STATUS_OK
ReadX 13204 61440 4096 4096 NT_STATUS_OK
ReadX 13204 65536 61440 61440 NT_STATUS_OK
ReadX 13204 126976 4096 4096 NT_STATUS_OK
ReadX 13204 131072 61440 61440 NT_STATUS_OK
ReadX 13204 192512 4096 4096 NT_STATUS_OK
ReadX 13204 196608 61440 61440 NT_STATUS_OK
ReadX 13204 258048 4096 4096 NT_STATUS_OK
ReadX 13204 262144 61440 61440 NT_STATUS_OK
ReadX 13204 323584 4096 4096 NT_STATUS_OK
ReadX 13204 327680 61440 61440 NT_STATUS_OK
ReadX 13204 389120 4096 4096 NT_STATUS_OK
ReadX 13204 393216 61440 61440 NT_STATUS_OK
ReadX 13204 454656 4096 4096 NT_STATUS_OK
ReadX 13204 458752 61440 61440 NT_STATUS_OK
ReadX 13204 520192 4096 4096 NT_STATUS_OK
ReadX 13204 524288 61440 61440 NT_STATUS_OK
ReadX 13204 585728 4096 4096 NT_STATUS_OK
ReadX 13204 589824 61440 61440 NT_STATUS_OK
ReadX 13204 651264 4096 4096 NT_STATUS_OK
ReadX 13204 655360 61440 61440 NT_STATUS_OK
ReadX 13204 716800 4096 4096 NT_STATUS_OK
ReadX 13204 720896 61440 61440 NT_STATUS_OK
ReadX 13204 782336 4096 4096 NT_STATUS_OK
ReadX 13204 786432 61440 61440 NT_STATUS_OK
ReadX 13204 847872 4096 4096 NT_STATUS_OK
ReadX 13204 851968 61440 61440 NT_STATUS_OK
ReadX 13204 913408 4096 4096 NT_STATUS_OK
ReadX 13204 917504 61440 61440 NT_STATUS_OK
ReadX 13204 978944 4096 4096 NT_STATUS_OK
ReadX 13204 983040 61440 61440 NT_STATUS_OK
ReadX 13204 1044480 4096 4096 NT_STATUS_OK
ReadX 13204 1048576 61440 61440 NT_STATUS_OK
ReadX 13204 1110016 4096 4096 NT_STATUS_OK
ReadX 13204 1114112 61440 61440 NT_STATUS_OK
ReadX 13204 1175552 4096 4096 NT_STATUS_OK
ReadX 13204 1179648 61440 61440 NT_STATUS_OK
ReadX 13204 1241088 4096 4096 NT_STATUS_OK
ReadX 13204 1245184 61440 61440 NT_STATUS_OK
ReadX 13204 1306624 4096 4096 NT_STATUS_OK
ReadX 13204 1310720 61440 61440 NT_STATUS_OK
ReadX 13204 1372160 4096 4096 NT_STATUS_OK
ReadX 13204 1376256 61440 61440 NT_STATUS_OK
ReadX 13204 1437696 4096 4096 NT_STATUS_OK
ReadX 13204 1441792 61440 61440 NT_STATUS_OK
ReadX 13204 1503232 4096 4096 NT_STATUS_OK
ReadX 13204 1507328 61440 61440 NT_STATUS_OK
ReadX 13204 1568768 4096 4096 NT_STATUS_OK
ReadX 13204 1572864 61440 61440 NT_STATUS_OK
ReadX 13204 1634304 4096 4096 NT_STATUS_OK
ReadX 13204 1638400 61440 61440 NT_STATUS_OK
ReadX 13204 1699840 4096 4096 NT_STATUS_OK
ReadX 13204 1703936 61440 61440 NT_STATUS_OK
ReadX 13204 1765376 4096 4096 NT_STATUS_OK
ReadX 13204 1769472 61440 61440 NT_STATUS_OK
ReadX 13204 1830912 4096 4096 NT_STATUS_OK
ReadX 13204 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
ReadX 13209 4096 4096 4096 NT_STATUS_OK
ReadX 13209 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13210 NT_STATUS_OK
Close 13210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13213 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 8192 8192 NT_STATUS_OK
ReadX 13217 8192 8192 8192 NT_STATUS_OK
ReadX 13217 16384 8192 8192 NT_STATUS_OK
ReadX 13217 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13219 NT_STATUS_OK
Close 13219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13222 NT_STATUS_OK
WriteX 13222 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13222 258 NT_STATUS_OK
WriteX 13222 0 10438 10438 NT_STATUS_OK
Close 13222 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13223 NT_STATUS_OK
Close 13223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13225 NT_STATUS_OK
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13226 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13227 NT_STATUS_OK
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13228 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
ReadX 13231 4096 4096 4096 NT_STATUS_OK
ReadX 13231 8192 4096 4096 NT_STATUS_OK
ReadX 13231 12288 8192 8192 NT_STATUS_OK
ReadX 13231 20480 8192 8192 NT_STATUS_OK
ReadX 13231 28672 8192 8192 NT_STATUS_OK
ReadX 13231 36864 8192 8192 NT_STATUS_OK
ReadX 13231 45056 8192 8192 NT_STATUS_OK
ReadX 13231 53248 8192 8192 NT_STATUS_OK
ReadX 13231 61440 8192 8192 NT_STATUS_OK
ReadX 13231 69632 8192 8192 NT_STATUS_OK
ReadX 13231 77824 8192 8192 NT_STATUS_OK
ReadX 13231 86016 8192 8192 NT_STATUS_OK
ReadX 13231 94208 8192 8192 NT_STATUS_OK
ReadX 13231 102400 8192 8192 NT_STATUS_OK
ReadX 13231 110592 8192 8192 NT_STATUS_OK
ReadX 13231 118784 8192 8192 NT_STATUS_OK
ReadX 13231 126976 8192 8192 NT_STATUS_OK
ReadX 13231 135168 8192 8192 NT_STATUS_OK
ReadX 13231 143360 8192 8192 NT_STATUS_OK
ReadX 13231 151552 8192 8192 NT_STATUS_OK
ReadX 13231 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13233 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13236 NT_STATUS_OK
WriteX 13236 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 258 NT_STATUS_OK
WriteX 13236 0 28489 28489 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13237 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13239 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13239 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13240 NT_STATUS_OK
Close 13240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 8192 8192 NT_STATUS_OK
ReadX 13243 8192 8192 8192 NT_STATUS_OK
ReadX 13243 16384 8192 8192 NT_STATUS_OK
ReadX 13243 24576 8192 8192 NT_STATUS_OK
ReadX 13243 32768 16384 16384 NT_STATUS_OK
ReadX 13243 49152 8192 8192 NT_STATUS_OK
ReadX 13243 57344 8192 8192 NT_STATUS_OK
ReadX 13243 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13245 NT_STATUS_OK
Close 13245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13248 NT_STATUS_OK
WriteX 13248 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13248 258 NT_STATUS_OK
WriteX 13248 0 29253 29253 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13255 NT_STATUS_OK
WriteX 13255 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
WriteX 13255 0 30183 30183 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13258 NT_STATUS_OK
WriteX 13258 0 510 510 NT_STATUS_OK
WriteX 13258 510 512 512 NT_STATUS_OK
WriteX 13258 1022 510 510 NT_STATUS_OK
WriteX 13258 1532 510 510 NT_STATUS_OK
WriteX 13258 2042 168 168 NT_STATUS_OK
Close 13258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13259 NT_STATUS_OK
Close 13259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
WriteX 13261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 61440 4096 4096 NT_STATUS_OK
ReadX 13262 126976 4096 4096 NT_STATUS_OK
WriteX 13262 0 65536 65536 NT_STATUS_OK
WriteX 13262 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 61440 4096 4096 NT_STATUS_OK
ReadX 13263 126976 4096 4096 NT_STATUS_OK
ReadX 13263 192512 4096 4096 NT_STATUS_OK
ReadX 13263 258048 4096 4096 NT_STATUS_OK
WriteX 13263 0 65536 65536 NT_STATUS_OK
WriteX 13263 65536 65536 65536 NT_STATUS_OK
WriteX 13263 131072 65536 65536 NT_STATUS_OK
WriteX 13263 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 61440 4096 4096 NT_STATUS_OK
ReadX 13264 126976 4096 4096 NT_STATUS_OK
ReadX 13264 192512 4096 4096 NT_STATUS_OK
ReadX 13264 258048 4096 4096 NT_STATUS_OK
ReadX 13264 323584 4096 4096 NT_STATUS_OK
ReadX 13264 389120 4096 4096 NT_STATUS_OK
ReadX 13264 454656 4096 4096 NT_STATUS_OK
ReadX 13264 520192 4096 4096 NT_STATUS_OK
WriteX 13264 0 65536 65536 NT_STATUS_OK
WriteX 13264 65536 65536 65536 NT_STATUS_OK
WriteX 13264 131072 65536 65536 NT_STATUS_OK
WriteX 13264 196608 65536 65536 NT_STATUS_OK
WriteX 13264 262144 65536 65536 NT_STATUS_OK
WriteX 13264 327680 65536 65536 NT_STATUS_OK
WriteX 13264 393216 65536 65536 NT_STATUS_OK
WriteX 13264 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13265 NT_STATUS_OK
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13267 NT_STATUS_OK
Close 13267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13276 NT_STATUS_OK
Close 13276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13280 NT_STATUS_OK
Close 13280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13285 NT_STATUS_OK
Close 13285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13289 NT_STATUS_OK
Close 13289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13294 NT_STATUS_OK
Close 13294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13299 NT_STATUS_OK
Close 13299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13319 NT_STATUS_OK
Close 13319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13324 NT_STATUS_OK
Close 13324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13330 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13333 NT_STATUS_OK
WriteX 13333 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13333 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13333 0 65536 65536 NT_STATUS_OK
WriteX 13333 65536 65536 65536 NT_STATUS_OK
WriteX 13333 131072 65536 65536 NT_STATUS_OK
WriteX 13333 196608 65536 65536 NT_STATUS_OK
WriteX 13333 262144 26634 26634 NT_STATUS_OK
Close 13333 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13338 NT_STATUS_OK
Close 13338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13339 NT_STATUS_OK
Close 13339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 0 4096 4096 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 0 4096 4096 NT_STATUS_OK
ReadX 13341 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13342 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13351 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13355 NT_STATUS_OK
Close 13355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13360 NT_STATUS_OK
Close 13360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13369 NT_STATUS_OK
Close 13369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13374 NT_STATUS_OK
Close 13374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13384 NT_STATUS_OK
Close 13384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13389 NT_STATUS_OK
Close 13389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13393 NT_STATUS_OK
Close 13393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13398 NT_STATUS_OK
Close 13398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
Close 13421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13432 NT_STATUS_OK
Close 13432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
Close 13435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Close 13436 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13465 0 4096 4096 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 4096 4096 NT_STATUS_OK
ReadX 13467 4096 4096 4096 NT_STATUS_OK
ReadX 13467 8192 4096 4096 NT_STATUS_OK
ReadX 13467 12288 4096 4096 NT_STATUS_OK
ReadX 13467 16384 4096 4096 NT_STATUS_OK
ReadX 13467 20480 4096 4096 NT_STATUS_OK
ReadX 13467 24576 4096 4096 NT_STATUS_OK
ReadX 13467 28672 4096 4096 NT_STATUS_OK
ReadX 13467 32768 4096 4096 NT_STATUS_OK
ReadX 13467 36864 4096 4096 NT_STATUS_OK
ReadX 13467 40960 4096 4096 NT_STATUS_OK
ReadX 13467 45056 4096 4096 NT_STATUS_OK
ReadX 13467 49152 4096 4096 NT_STATUS_OK
ReadX 13467 53248 4096 4096 NT_STATUS_OK
ReadX 13467 57344 4096 4096 NT_STATUS_OK
ReadX 13467 61440 4096 4096 NT_STATUS_OK
ReadX 13467 65536 4096 4096 NT_STATUS_OK
ReadX 13467 69632 4096 4096 NT_STATUS_OK
ReadX 13467 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13467 1004 NT_STATUS_OK
WriteX 13467 0 4096 4096 NT_STATUS_OK
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13468 NT_STATUS_OK
SET_FILE_INFORMATION 13468 1004 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13470 NT_STATUS_OK
Close 13470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13473 NT_STATUS_OK
WriteX 13473 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 258 NT_STATUS_OK
WriteX 13473 0 65536 65536 NT_STATUS_OK
WriteX 13473 65536 19979 19979 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 4096 4096 NT_STATUS_OK
WriteX 13474 0 4096 4096 NT_STATUS_OK
Flush 13474 NT_STATUS_OK
WriteX 13474 0 4096 4096 NT_STATUS_OK
Flush 13474 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 1004 NT_STATUS_OK
WriteX 13474 0 4096 4096 NT_STATUS_OK
Flush 13474 NT_STATUS_OK
WriteX 13474 0 4096 4096 NT_STATUS_OK
Flush 13474 NT_STATUS_OK
WriteX 13474 0 4096 4096 NT_STATUS_OK
Flush 13474 NT_STATUS_OK
SET_FILE_INFORMATION 13474 1004 NT_STATUS_OK
WriteX 13474 0 4096 4096 NT_STATUS_OK
Flush 13474 NT_STATUS_OK
Close 13474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
Close 13475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 4096 4096 NT_STATUS_OK
Close 13477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
Close 13478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13480 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13476 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13485 NT_STATUS_OK
WriteX 13485 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 258 NT_STATUS_OK
WriteX 13485 0 65536 65536 NT_STATUS_OK
WriteX 13485 65536 17654 17654 NT_STATUS_OK
Close 13485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
QUERY_FILE_INFORMATION 13486 1004 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
SET_FILE_INFORMATION 13486 1004 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13487 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
Close 13487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13489 NT_STATUS_OK
Close 13489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
ReadX 13491 4096 4096 4096 NT_STATUS_OK
ReadX 13491 8192 4096 4096 NT_STATUS_OK
ReadX 13491 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13491 16384 4096 4096 NT_STATUS_OK
ReadX 13491 20480 4096 4096 NT_STATUS_OK
ReadX 13491 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
Close 13492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
Close 13493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13500 NT_STATUS_OK
WriteX 13500 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13500 258 NT_STATUS_OK
WriteX 13500 0 65536 65536 NT_STATUS_OK
WriteX 13500 65536 19490 19490 NT_STATUS_OK
Close 13500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
Flush 13501 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
Flush 13501 NT_STATUS_OK
QUERY_FILE_INFORMATION 13501 1004 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
Flush 13501 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
Flush 13501 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
Flush 13501 NT_STATUS_OK
SET_FILE_INFORMATION 13501 1004 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
Flush 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13502 NT_STATUS_OK
SET_FILE_INFORMATION 13502 1004 NT_STATUS_OK
Close 13502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13506 0 4096 4096 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 4096 4096 NT_STATUS_OK
ReadX 13508 4096 4096 4096 NT_STATUS_OK
ReadX 13508 8192 4096 4096 NT_STATUS_OK
ReadX 13508 12288 4096 4096 NT_STATUS_OK
ReadX 13508 16384 4096 4096 NT_STATUS_OK
ReadX 13508 20480 4096 4096 NT_STATUS_OK
ReadX 13508 24576 4096 4096 NT_STATUS_OK
ReadX 13508 28672 4096 4096 NT_STATUS_OK
ReadX 13508 32768 4096 4096 NT_STATUS_OK
ReadX 13508 36864 4096 4096 NT_STATUS_OK
ReadX 13508 40960 4096 4096 NT_STATUS_OK
ReadX 13508 45056 4096 4096 NT_STATUS_OK
ReadX 13508 49152 4096 4096 NT_STATUS_OK
ReadX 13508 53248 4096 4096 NT_STATUS_OK
ReadX 13508 57344 4096 4096 NT_STATUS_OK
ReadX 13508 61440 4096 4096 NT_STATUS_OK
ReadX 13508 65536 4096 4096 NT_STATUS_OK
ReadX 13508 69632 4096 4096 NT_STATUS_OK
ReadX 13508 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13508 1004 NT_STATUS_OK
WriteX 13508 0 4096 4096 NT_STATUS_OK
Close 13508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13509 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13514 NT_STATUS_OK
WriteX 13514 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13514 258 NT_STATUS_OK
WriteX 13514 0 65536 65536 NT_STATUS_OK
WriteX 13514 65536 8866 8866 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
WriteX 13515 0 4096 4096 NT_STATUS_OK
Flush 13515 NT_STATUS_OK
SET_FILE_INFORMATION 13515 1004 NT_STATUS_OK
WriteX 13515 0 4096 4096 NT_STATUS_OK
Flush 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
Close 13517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
Close 13518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13519 1004 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13520 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13522 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13525 NT_STATUS_OK
WriteX 13525 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13525 258 NT_STATUS_OK
WriteX 13525 0 65536 65536 NT_STATUS_OK
WriteX 13525 65536 9298 9298 NT_STATUS_OK
Close 13525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
WriteX 13526 0 4096 4096 NT_STATUS_OK
Flush 13526 NT_STATUS_OK
SET_FILE_INFORMATION 13526 1004 NT_STATUS_OK
WriteX 13526 0 4096 4096 NT_STATUS_OK
Flush 13526 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13527 NT_STATUS_OK
SET_FILE_INFORMATION 13527 1004 NT_STATUS_OK
Close 13527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13532 0 4096 4096 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13533 4096 4096 4096 NT_STATUS_OK
ReadX 13533 8192 4096 4096 NT_STATUS_OK
ReadX 13533 12288 4096 4096 NT_STATUS_OK
ReadX 13533 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
Close 13534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 0 4096 4096 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13536 1004 NT_STATUS_OK
WriteX 13536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13537 NT_STATUS_OK
Close 13537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13539 NT_STATUS_OK
Close 13539 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13542 NT_STATUS_OK
WriteX 13542 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 258 NT_STATUS_OK
WriteX 13542 0 65536 65536 NT_STATUS_OK
WriteX 13542 65536 11540 11540 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
Flush 13543 NT_STATUS_OK
SET_FILE_INFORMATION 13543 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
Flush 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13544 NT_STATUS_OK
SET_FILE_INFORMATION 13544 1004 NT_STATUS_OK
Close 13544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 61440 4096 4096 NT_STATUS_OK
ReadX 13548 126976 4096 4096 NT_STATUS_OK
WriteX 13548 0 65536 65536 NT_STATUS_OK
WriteX 13548 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 61440 4096 4096 NT_STATUS_OK
ReadX 13549 126976 4096 4096 NT_STATUS_OK
ReadX 13549 192512 4096 4096 NT_STATUS_OK
ReadX 13549 258048 4096 4096 NT_STATUS_OK
WriteX 13549 0 65536 65536 NT_STATUS_OK
WriteX 13549 65536 65536 65536 NT_STATUS_OK
WriteX 13549 131072 65536 65536 NT_STATUS_OK
WriteX 13549 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 61440 4096 4096 NT_STATUS_OK
ReadX 13550 126976 4096 4096 NT_STATUS_OK
ReadX 13550 192512 4096 4096 NT_STATUS_OK
ReadX 13550 258048 4096 4096 NT_STATUS_OK
ReadX 13550 323584 4096 4096 NT_STATUS_OK
ReadX 13550 389120 4096 4096 NT_STATUS_OK
ReadX 13550 454656 4096 4096 NT_STATUS_OK
ReadX 13550 520192 4096 4096 NT_STATUS_OK
WriteX 13550 0 65536 65536 NT_STATUS_OK
WriteX 13550 65536 65536 65536 NT_STATUS_OK
WriteX 13550 131072 65536 65536 NT_STATUS_OK
WriteX 13550 196608 65536 65536 NT_STATUS_OK
WriteX 13550 262144 65536 65536 NT_STATUS_OK
WriteX 13550 327680 65536 65536 NT_STATUS_OK
WriteX 13550 393216 65536 65536 NT_STATUS_OK
WriteX 13550 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
ReadX 13551 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13552 NT_STATUS_OK
WriteX 13552 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13552 258 NT_STATUS_OK
WriteX 13552 0 53 53 NT_STATUS_OK
Close 13552 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13553 NT_STATUS_OK
Close 13553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13551 8192 4096 4096 NT_STATUS_OK
ReadX 13551 12288 4096 4096 NT_STATUS_OK
WriteX 13555 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13555 258 NT_STATUS_OK
ReadX 13551 16384 4096 4096 NT_STATUS_OK
ReadX 13551 20480 4096 4096 NT_STATUS_OK
WriteX 13555 0 15360 15360 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13556 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13556 1004 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13557 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13559 4096 4096 4096 NT_STATUS_OK
ReadX 13559 8192 4096 4096 NT_STATUS_OK
ReadX 13559 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
ReadX 13562 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
ReadX 13563 4096 4096 4096 NT_STATUS_OK
ReadX 13563 8192 4096 4096 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13564 NT_STATUS_OK
WriteX 13564 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13564 258 NT_STATUS_OK
WriteX 13564 0 15360 15360 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13565 NT_STATUS_OK
ReadX 13565 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13565 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13565 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13566 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13569 NT_STATUS_OK
SET_FILE_INFORMATION 13569 1004 NT_STATUS_OK
Close 13569 NT_STATUS_OK
WriteX 13565 0 4096 4096 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
ReadX 13572 4096 4096 4096 NT_STATUS_OK
ReadX 13572 8192 4096 4096 NT_STATUS_OK
ReadX 13572 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13572 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13574 NT_STATUS_OK
WriteX 13574 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13574 258 NT_STATUS_OK
WriteX 13574 0 53 53 NT_STATUS_OK
Close 13574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13573 4096 4096 4096 NT_STATUS_OK
ReadX 13573 8192 4096 4096 NT_STATUS_OK
ReadX 13573 12288 4096 4096 NT_STATUS_OK
WriteX 13577 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13577 258 NT_STATUS_OK
WriteX 13577 0 12006 12006 NT_STATUS_OK
Close 13577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13578 1004 NT_STATUS_OK
WriteX 13578 0 4096 4096 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13582 NT_STATUS_OK
Close 13582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13581 4096 4096 4096 NT_STATUS_OK
ReadX 13581 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13584 NT_STATUS_OK
WriteX 13584 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13584 258 NT_STATUS_OK
WriteX 13584 0 11991 11991 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13585 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13585 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13586 NT_STATUS_OK
Close 13586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13589 NT_STATUS_OK
WriteX 13572 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 13589 1004 NT_STATUS_OK
Close 13589 NT_STATUS_OK
WriteX 13585 0 4096 4096 NT_STATUS_OK
Close 13585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13592 NT_STATUS_OK
ReadX 13592 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13592 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13592 1004 NT_STATUS_OK
ReadX 13592 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13592 1004 NT_STATUS_OK
WriteX 13592 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13592 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13592 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13592 1004 NT_STATUS_OK
Close 13568 NT_STATUS_OK
WriteX 13592 0 12288 12288 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13595 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13592 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 61440 61440 NT_STATUS_OK
ReadX 13599 61440 4096 4096 NT_STATUS_OK
ReadX 13599 65536 61440 61440 NT_STATUS_OK
ReadX 13599 126976 4096 4096 NT_STATUS_OK
ReadX 13599 131072 61440 61440 NT_STATUS_OK
ReadX 13599 192512 4096 4096 NT_STATUS_OK
ReadX 13599 196608 61440 61440 NT_STATUS_OK
ReadX 13599 258048 4096 4096 NT_STATUS_OK
ReadX 13599 262144 61440 61440 NT_STATUS_OK
ReadX 13599 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 61440 61440 NT_STATUS_OK
ReadX 13600 61440 4096 4096 NT_STATUS_OK
ReadX 13600 65536 61440 61440 NT_STATUS_OK
ReadX 13600 126976 4096 4096 NT_STATUS_OK
ReadX 13600 131072 61440 61440 NT_STATUS_OK
ReadX 13600 192512 4096 4096 NT_STATUS_OK
ReadX 13600 196608 61440 61440 NT_STATUS_OK
ReadX 13600 258048 4096 4096 NT_STATUS_OK
ReadX 13600 262144 61440 61440 NT_STATUS_OK
ReadX 13600 323584 4096 4096 NT_STATUS_OK
ReadX 13600 327680 61440 61440 NT_STATUS_OK
ReadX 13600 389120 4096 4096 NT_STATUS_OK
ReadX 13600 393216 61440 61440 NT_STATUS_OK
ReadX 13600 454656 4096 4096 NT_STATUS_OK
ReadX 13600 458752 61440 61440 NT_STATUS_OK
ReadX 13600 520192 4096 4096 NT_STATUS_OK
ReadX 13600 524288 61440 61440 NT_STATUS_OK
ReadX 13600 585728 4096 4096 NT_STATUS_OK
ReadX 13600 589824 61440 61440 NT_STATUS_OK
ReadX 13600 651264 4096 4096 NT_STATUS_OK
ReadX 13600 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 61440 61440 NT_STATUS_OK
ReadX 13601 61440 4096 4096 NT_STATUS_OK
ReadX 13601 65536 61440 61440 NT_STATUS_OK
ReadX 13601 126976 4096 4096 NT_STATUS_OK
ReadX 13601 131072 61440 61440 NT_STATUS_OK
ReadX 13601 192512 4096 4096 NT_STATUS_OK
ReadX 13601 196608 61440 61440 NT_STATUS_OK
ReadX 13601 258048 4096 4096 NT_STATUS_OK
ReadX 13601 262144 61440 61440 NT_STATUS_OK
ReadX 13601 323584 4096 4096 NT_STATUS_OK
ReadX 13601 327680 61440 61440 NT_STATUS_OK
ReadX 13601 389120 4096 4096 NT_STATUS_OK
ReadX 13601 393216 61440 61440 NT_STATUS_OK
ReadX 13601 454656 4096 4096 NT_STATUS_OK
ReadX 13601 458752 61440 61440 NT_STATUS_OK
ReadX 13601 520192 4096 4096 NT_STATUS_OK
ReadX 13601 524288 61440 61440 NT_STATUS_OK
ReadX 13601 585728 4096 4096 NT_STATUS_OK
ReadX 13601 589824 61440 61440 NT_STATUS_OK
ReadX 13601 651264 4096 4096 NT_STATUS_OK
ReadX 13601 655360 61440 61440 NT_STATUS_OK
ReadX 13601 716800 4096 4096 NT_STATUS_OK
ReadX 13601 720896 61440 61440 NT_STATUS_OK
ReadX 13601 782336 4096 4096 NT_STATUS_OK
ReadX 13601 786432 61440 61440 NT_STATUS_OK
ReadX 13601 847872 4096 4096 NT_STATUS_OK
ReadX 13601 851968 61440 61440 NT_STATUS_OK
ReadX 13601 913408 4096 4096 NT_STATUS_OK
ReadX 13601 917504 61440 61440 NT_STATUS_OK
ReadX 13601 978944 4096 4096 NT_STATUS_OK
ReadX 13601 983040 61440 61440 NT_STATUS_OK
ReadX 13601 1044480 4096 4096 NT_STATUS_OK
ReadX 13601 1048576 61440 61440 NT_STATUS_OK
ReadX 13601 1110016 4096 4096 NT_STATUS_OK
ReadX 13601 1114112 61440 61440 NT_STATUS_OK
ReadX 13601 1175552 4096 4096 NT_STATUS_OK
ReadX 13601 1179648 61440 61440 NT_STATUS_OK
ReadX 13601 1241088 4096 4096 NT_STATUS_OK
ReadX 13601 1245184 61440 61440 NT_STATUS_OK
ReadX 13601 1306624 4096 4096 NT_STATUS_OK
ReadX 13601 1310720 61440 61440 NT_STATUS_OK
ReadX 13601 1372160 4096 4096 NT_STATUS_OK
ReadX 13601 1376256 61440 61440 NT_STATUS_OK
ReadX 13601 1437696 4096 4096 NT_STATUS_OK
ReadX 13601 1441792 61440 61440 NT_STATUS_OK
ReadX 13601 1503232 4096 4096 NT_STATUS_OK
ReadX 13601 1507328 61440 61440 NT_STATUS_OK
ReadX 13601 1568768 4096 4096 NT_STATUS_OK
ReadX 13601 1572864 61440 61440 NT_STATUS_OK
ReadX 13601 1634304 4096 4096 NT_STATUS_OK
ReadX 13601 1638400 61440 61440 NT_STATUS_OK
ReadX 13601 1699840 4096 4096 NT_STATUS_OK
ReadX 13601 1703936 61440 61440 NT_STATUS_OK
ReadX 13601 1765376 4096 4096 NT_STATUS_OK
ReadX 13601 1769472 61440 61440 NT_STATUS_OK
ReadX 13601 1830912 4096 4096 NT_STATUS_OK
ReadX 13601 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13602 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13604 NT_STATUS_OK
ReadX 13604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13608 NT_STATUS_OK
QUERY_FILE_INFORMATION 13608 1004 NT_STATUS_OK
WriteX 13608 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13608 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13610 NT_STATUS_OK
WriteX 13610 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 258 NT_STATUS_OK
WriteX 13610 0 491 491 NT_STATUS_OK
Close 13610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13611 NT_STATUS_OK
ReadX 13611 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13608 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13614 NT_STATUS_OK
WriteX 13614 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13614 258 NT_STATUS_OK
WriteX 13614 0 543 543 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13628 NT_STATUS_OK
QUERY_FILE_INFORMATION 13628 1004 NT_STATUS_OK
WriteX 13628 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13628 258 NT_STATUS_OK
WriteX 13628 0 2048 2048 NT_STATUS_OK
Close 13628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13629 0 4096 4096 NT_STATUS_OK
Flush 13629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13629 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13634 NT_STATUS_OK
WriteX 13634 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13634 258 NT_STATUS_OK
WriteX 13634 0 2048 2048 NT_STATUS_OK
Close 13634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13635 NT_STATUS_OK
ReadX 13635 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13640 NT_STATUS_OK
WriteX 13640 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13640 258 NT_STATUS_OK
WriteX 13640 0 2048 2048 NT_STATUS_OK
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 2048 2048 NT_STATUS_OK
ReadX 13619 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13635 0 4096 4096 NT_STATUS_OK
WriteX 13619 0 8192 8192 NT_STATUS_OK
WriteX 13620 0 4096 4096 NT_STATUS_OK
WriteX 13621 0 4096 4096 NT_STATUS_OK
ReadX 13635 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13644 NT_STATUS_OK
ReadX 13644 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13645 NT_STATUS_OK
QUERY_FILE_INFORMATION 13645 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13644 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13635 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13647 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13649 NT_STATUS_OK
ReadX 13649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13656 NT_STATUS_OK
ReadX 13656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13664 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13665 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 1004 NT_STATUS_OK
WriteX 13665 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 258 NT_STATUS_OK
WriteX 13665 0 2048 2048 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13668 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13673 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1004 NT_STATUS_OK
WriteX 13673 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 2048 2048 NT_STATUS_OK
Close 13673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13666 0 4096 4096 NT_STATUS_OK
Flush 13666 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
Flush 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13666 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13668 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13676 NT_STATUS_OK
WriteX 13676 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13676 258 NT_STATUS_OK
WriteX 13676 0 4096 4096 NT_STATUS_OK
Close 13676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13679 NT_STATUS_OK
WriteX 13679 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 258 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
Close 13679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13680 0 4096 4096 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Close 13655 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13686 NT_STATUS_OK
Close 13686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13687 NT_STATUS_OK
WriteX 13687 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13687 258 NT_STATUS_OK
WriteX 13687 0 2048 2048 NT_STATUS_OK
Close 13687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13690 NT_STATUS_OK
ReadX 13690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13692 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13699 NT_STATUS_OK
ReadX 13699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13700 NT_STATUS_OK
ReadX 13700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13701 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13702 NT_STATUS_OK
QUERY_FILE_INFORMATION 13702 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Close 13700 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Close 13699 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Close 13689 NT_STATUS_OK
Close 13690 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13704 NT_STATUS_OK
QUERY_FILE_INFORMATION 13704 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13706 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13708 NT_STATUS_OK
ReadX 13708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13709 NT_STATUS_OK
ReadX 13709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13711 NT_STATUS_OK
ReadX 13711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13715 NT_STATUS_OK
ReadX 13715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13723 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13724 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 1004 NT_STATUS_OK
WriteX 13724 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
WriteX 13724 0 2048 2048 NT_STATUS_OK
Close 13724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13725 NT_STATUS_OK
ReadX 13725 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13736 NT_STATUS_OK
QUERY_FILE_INFORMATION 13736 1004 NT_STATUS_OK
WriteX 13736 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13736 258 NT_STATUS_OK
WriteX 13736 0 2048 2048 NT_STATUS_OK
Close 13736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13737 NT_STATUS_OK
ReadX 13737 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13739 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13744 NT_STATUS_OK
QUERY_FILE_INFORMATION 13744 1004 NT_STATUS_OK
WriteX 13744 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13744 258 NT_STATUS_OK
WriteX 13744 0 2048 2048 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13725 0 4096 4096 NT_STATUS_OK
Flush 13725 NT_STATUS_OK
WriteX 13737 0 4096 4096 NT_STATUS_OK
Flush 13737 NT_STATUS_OK
WriteX 13745 0 4096 4096 NT_STATUS_OK
Flush 13745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13725 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13737 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13727 4096 16384 16384 NT_STATUS_OK
ReadX 13707 4096 16384 16384 NT_STATUS_OK
ReadX 13739 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13747 NT_STATUS_OK
ReadX 13747 0 2048 2048 NT_STATUS_OK
WriteX 13747 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13748 NT_STATUS_OK
QUERY_FILE_INFORMATION 13748 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13747 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13719 NT_STATUS_OK
Close 13711 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13718 NT_STATUS_OK
Close 13739 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Close 13716 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13714 NT_STATUS_OK
Close 13715 NT_STATUS_OK
Close 13707 NT_STATUS_OK
Close 13708 NT_STATUS_OK
Close 13709 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13750 NT_STATUS_OK
QUERY_FILE_INFORMATION 13750 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13752 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13755 4096 16384 16384 NT_STATUS_OK
WriteX 13755 0 4096 4096 NT_STATUS_OK
WriteX 13756 0 4096 4096 NT_STATUS_OK
WriteX 13757 0 4096 4096 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13765 NT_STATUS_OK
ReadX 13765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13768 NT_STATUS_OK
ReadX 13768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13771 NT_STATUS_OK
ReadX 13771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13772 NT_STATUS_OK
ReadX 13772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 8192 8192 NT_STATUS_OK
ReadX 13761 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13775 0 4096 4096 NT_STATUS_OK
ReadX 13775 4096 4096 4096 NT_STATUS_OK
ReadX 13775 8192 4096 4096 NT_STATUS_OK
WriteX 13761 0 4096 4096 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
ReadX 13776 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13755 0 4096 4096 NT_STATUS_OK
WriteX 13756 0 4096 4096 NT_STATUS_OK
WriteX 13757 0 4096 4096 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13781 NT_STATUS_OK
QUERY_FILE_INFORMATION 13781 1004 NT_STATUS_OK
WriteX 13781 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13781 258 NT_STATUS_OK
WriteX 13781 0 2048 2048 NT_STATUS_OK
Close 13781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13782 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13784 NT_STATUS_OK
ReadX 13784 0 4096 4096 NT_STATUS_OK
ReadX 13784 4096 4096 4096 NT_STATUS_OK
WriteX 13784 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
ReadX 13786 4096 4096 4096 NT_STATUS_OK
WriteX 13786 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13787 NT_STATUS_OK
QUERY_FILE_INFORMATION 13787 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Close 13759 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13756 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13772 NT_STATUS_OK
Close 13768 NT_STATUS_OK
Close 13769 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Close 13771 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13789 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13789 0 4096 4096 NT_STATUS_OK
ReadX 13789 4096 4096 4096 NT_STATUS_OK
ReadX 13789 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13796 NT_STATUS_OK
ReadX 13796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13797 NT_STATUS_OK
ReadX 13797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13798 NT_STATUS_OK
ReadX 13798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
ReadX 13790 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13807 NT_STATUS_OK
QUERY_FILE_INFORMATION 13807 1004 NT_STATUS_OK
WriteX 13807 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13807 258 NT_STATUS_OK
WriteX 13807 0 2048 2048 NT_STATUS_OK
Close 13807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13808 NT_STATUS_OK
ReadX 13808 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13808 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13812 NT_STATUS_OK
Close 13812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13813 NT_STATUS_OK
QUERY_FILE_INFORMATION 13813 1004 NT_STATUS_OK
WriteX 13813 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13813 258 NT_STATUS_OK
WriteX 13813 0 2048 2048 NT_STATUS_OK
Close 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13814 NT_STATUS_OK
ReadX 13814 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13814 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13797 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13815 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13796 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13793 NT_STATUS_OK
Close 13797 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Close 13799 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13789 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13817 NT_STATUS_OK
QUERY_FILE_INFORMATION 13817 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 61440 4096 4096 NT_STATUS_OK
ReadX 13819 126976 4096 4096 NT_STATUS_OK
WriteX 13819 0 65536 65536 NT_STATUS_OK
WriteX 13819 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 61440 4096 4096 NT_STATUS_OK
ReadX 13820 126976 4096 4096 NT_STATUS_OK
ReadX 13820 192512 4096 4096 NT_STATUS_OK
ReadX 13820 258048 4096 4096 NT_STATUS_OK
WriteX 13820 0 65536 65536 NT_STATUS_OK
WriteX 13820 65536 65536 65536 NT_STATUS_OK
WriteX 13820 131072 65536 65536 NT_STATUS_OK
WriteX 13820 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 61440 4096 4096 NT_STATUS_OK
ReadX 13821 126976 4096 4096 NT_STATUS_OK
ReadX 13821 192512 4096 4096 NT_STATUS_OK
ReadX 13821 258048 4096 4096 NT_STATUS_OK
ReadX 13821 323584 4096 4096 NT_STATUS_OK
ReadX 13821 389120 4096 4096 NT_STATUS_OK
ReadX 13821 454656 4096 4096 NT_STATUS_OK
ReadX 13821 520192 4096 4096 NT_STATUS_OK
WriteX 13821 0 65536 65536 NT_STATUS_OK
WriteX 13821 65536 65536 65536 NT_STATUS_OK
WriteX 13821 131072 65536 65536 NT_STATUS_OK
WriteX 13821 196608 65536 65536 NT_STATUS_OK
WriteX 13821 262144 65536 65536 NT_STATUS_OK
WriteX 13821 327680 65536 65536 NT_STATUS_OK
WriteX 13821 393216 65536 65536 NT_STATUS_OK
WriteX 13821 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13822 NT_STATUS_OK
ReadX 13822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13822 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13822 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13822 8192 4096 4096 NT_STATUS_OK
ReadX 13822 12288 4096 4096 NT_STATUS_OK
ReadX 13822 16384 4096 4096 NT_STATUS_OK
ReadX 13822 20480 4096 4096 NT_STATUS_OK
ReadX 13822 24576 4096 4096 NT_STATUS_OK
ReadX 13822 28672 4096 4096 NT_STATUS_OK
ReadX 13822 32768 4096 4096 NT_STATUS_OK
ReadX 13822 36864 4096 4096 NT_STATUS_OK
ReadX 13822 40960 4096 4096 NT_STATUS_OK
ReadX 13822 45056 4096 4096 NT_STATUS_OK
ReadX 13822 49152 4096 4096 NT_STATUS_OK
ReadX 13822 53248 4096 4096 NT_STATUS_OK
ReadX 13822 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13822 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13819 NT_STATUS_OK
Close 13820 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13825 NT_STATUS_OK
WriteX 13825 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13825 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13825 1004 NT_STATUS_OK
WriteX 13825 0 57088 57088 NT_STATUS_OK
WriteX 13825 0 4096 4096 NT_STATUS_OK
Flush 13825 NT_STATUS_OK
Close 13822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13826 NT_STATUS_OK
SET_FILE_INFORMATION 13826 1004 NT_STATUS_OK
Close 13826 NT_STATUS_OK
SET_FILE_INFORMATION 13825 1004 NT_STATUS_OK
WriteX 13825 0 4096 4096 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13827 NT_STATUS_OK
Close 13827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13829 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13830 NT_STATUS_OK
WriteX 13830 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13830 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13830 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13830 1004 NT_STATUS_OK
WriteX 13830 0 51456 51456 NT_STATUS_OK
WriteX 13830 0 4096 4096 NT_STATUS_OK
Flush 13830 NT_STATUS_OK
SET_FILE_INFORMATION 13830 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13830 1004 NT_STATUS_OK
WriteX 13830 0 4096 4096 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13832 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13834 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 53077 53077 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13840 NT_STATUS_OK
WriteX 13840 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13840 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 65536 65536 NT_STATUS_OK
WriteX 13840 65536 1856 1856 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13849 NT_STATUS_OK
WriteX 13849 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13849 258 NT_STATUS_OK
WriteX 13849 0 7983 7983 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13854 NT_STATUS_OK
WriteX 13854 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 258 NT_STATUS_OK
WriteX 13854 0 65536 65536 NT_STATUS_OK
WriteX 13854 65536 65536 65536 NT_STATUS_OK
WriteX 13854 131072 65536 65536 NT_STATUS_OK
WriteX 13854 196608 65536 65536 NT_STATUS_OK
WriteX 13854 262144 65536 65536 NT_STATUS_OK
WriteX 13854 327680 65536 65536 NT_STATUS_OK
WriteX 13854 393216 65536 65536 NT_STATUS_OK
WriteX 13854 458752 46731 46731 NT_STATUS_OK
Close 13854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13855 NT_STATUS_OK
WriteX 13855 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13855 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13844 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 65536 65536 NT_STATUS_OK
WriteX 13855 65536 22848 22848 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13857 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13859 NT_STATUS_OK
ReadX 13859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13860 NT_STATUS_OK
ReadX 13860 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13860 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13860 1004 NT_STATUS_OK
ReadX 13860 8192 4096 4096 NT_STATUS_OK
ReadX 13860 12288 4096 4096 NT_STATUS_OK
ReadX 13860 16384 4096 4096 NT_STATUS_OK
ReadX 13860 20480 4096 4096 NT_STATUS_OK
ReadX 13860 24576 4096 4096 NT_STATUS_OK
ReadX 13860 28672 4096 4096 NT_STATUS_OK
ReadX 13860 32768 4096 4096 NT_STATUS_OK
ReadX 13860 36864 4096 4096 NT_STATUS_OK
ReadX 13860 40960 4096 4096 NT_STATUS_OK
ReadX 13860 45056 4096 4096 NT_STATUS_OK
ReadX 13860 49152 4096 4096 NT_STATUS_OK
ReadX 13860 53248 4096 4096 NT_STATUS_OK
ReadX 13860 57344 4096 4096 NT_STATUS_OK
ReadX 13860 61440 4096 4096 NT_STATUS_OK
ReadX 13860 65536 4096 4096 NT_STATUS_OK
ReadX 13860 69632 4096 4096 NT_STATUS_OK
ReadX 13860 73728 4096 4096 NT_STATUS_OK
ReadX 13860 77824 4096 4096 NT_STATUS_OK
ReadX 13860 81920 4096 4096 NT_STATUS_OK
ReadX 13860 86016 4096 4096 NT_STATUS_OK
ReadX 13860 90112 4096 4096 NT_STATUS_OK
ReadX 13860 94208 4096 4096 NT_STATUS_OK
ReadX 13860 98304 4096 4096 NT_STATUS_OK
ReadX 13860 102400 4096 4096 NT_STATUS_OK
ReadX 13860 106496 4096 4096 NT_STATUS_OK
ReadX 13860 110592 4096 4096 NT_STATUS_OK
ReadX 13860 114688 4096 4096 NT_STATUS_OK
ReadX 13860 118784 4096 4096 NT_STATUS_OK
ReadX 13860 122880 4096 4096 NT_STATUS_OK
ReadX 13860 126976 4096 4096 NT_STATUS_OK
ReadX 13860 131072 4096 4096 NT_STATUS_OK
ReadX 13860 135168 4096 4096 NT_STATUS_OK
ReadX 13860 139264 4096 4096 NT_STATUS_OK
ReadX 13860 143360 4096 4096 NT_STATUS_OK
ReadX 13860 147456 4096 4096 NT_STATUS_OK
ReadX 13860 151552 4096 4096 NT_STATUS_OK
ReadX 13860 155648 4096 4096 NT_STATUS_OK
ReadX 13860 159744 4096 4096 NT_STATUS_OK
ReadX 13860 163840 4096 4096 NT_STATUS_OK
ReadX 13860 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13860 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13861 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13863 NT_STATUS_OK
WriteX 13863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13863 258 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13864 NT_STATUS_OK
SET_FILE_INFORMATION 13864 1004 NT_STATUS_OK
Close 13864 NT_STATUS_OK
WriteX 13863 0 42388 42388 NT_STATUS_OK
Close 13863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 0 4096 4096 NT_STATUS_OK
ReadX 13867 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13868 NT_STATUS_OK
WriteX 13868 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
WriteX 13868 0 42652 42652 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Close 13867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13870 NT_STATUS_OK
Close 13870 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
ReadX 13872 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13877 NT_STATUS_OK
WriteX 13877 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 258 NT_STATUS_OK
WriteX 13877 0 65536 65536 NT_STATUS_OK
WriteX 13877 65536 49 49 NT_STATUS_OK
Close 13877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 61440 61440 NT_STATUS_OK
ReadX 13878 61440 4096 4096 NT_STATUS_OK
ReadX 13878 65536 61440 61440 NT_STATUS_OK
ReadX 13878 126976 4096 4096 NT_STATUS_OK
ReadX 13878 131072 61440 61440 NT_STATUS_OK
ReadX 13878 192512 4096 4096 NT_STATUS_OK
ReadX 13878 196608 61440 61440 NT_STATUS_OK
ReadX 13878 258048 4096 4096 NT_STATUS_OK
ReadX 13878 262144 61440 61440 NT_STATUS_OK
ReadX 13878 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 61440 61440 NT_STATUS_OK
ReadX 13879 61440 4096 4096 NT_STATUS_OK
ReadX 13879 65536 61440 61440 NT_STATUS_OK
ReadX 13879 126976 4096 4096 NT_STATUS_OK
ReadX 13879 131072 61440 61440 NT_STATUS_OK
ReadX 13879 192512 4096 4096 NT_STATUS_OK
ReadX 13879 196608 61440 61440 NT_STATUS_OK
ReadX 13879 258048 4096 4096 NT_STATUS_OK
ReadX 13879 262144 61440 61440 NT_STATUS_OK
ReadX 13879 323584 4096 4096 NT_STATUS_OK
ReadX 13879 327680 61440 61440 NT_STATUS_OK
ReadX 13879 389120 4096 4096 NT_STATUS_OK
ReadX 13879 393216 61440 61440 NT_STATUS_OK
ReadX 13879 454656 4096 4096 NT_STATUS_OK
ReadX 13879 458752 61440 61440 NT_STATUS_OK
ReadX 13879 520192 4096 4096 NT_STATUS_OK
ReadX 13879 524288 61440 61440 NT_STATUS_OK
ReadX 13879 585728 4096 4096 NT_STATUS_OK
ReadX 13879 589824 61440 61440 NT_STATUS_OK
ReadX 13879 651264 4096 4096 NT_STATUS_OK
ReadX 13879 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 61440 61440 NT_STATUS_OK
ReadX 13880 61440 4096 4096 NT_STATUS_OK
ReadX 13880 65536 61440 61440 NT_STATUS_OK
ReadX 13880 126976 4096 4096 NT_STATUS_OK
ReadX 13880 131072 61440 61440 NT_STATUS_OK
ReadX 13880 192512 4096 4096 NT_STATUS_OK
ReadX 13880 196608 61440 61440 NT_STATUS_OK
ReadX 13880 258048 4096 4096 NT_STATUS_OK
ReadX 13880 262144 61440 61440 NT_STATUS_OK
ReadX 13880 323584 4096 4096 NT_STATUS_OK
ReadX 13880 327680 61440 61440 NT_STATUS_OK
ReadX 13880 389120 4096 4096 NT_STATUS_OK
ReadX 13880 393216 61440 61440 NT_STATUS_OK
ReadX 13880 454656 4096 4096 NT_STATUS_OK
ReadX 13880 458752 61440 61440 NT_STATUS_OK
ReadX 13880 520192 4096 4096 NT_STATUS_OK
ReadX 13880 524288 61440 61440 NT_STATUS_OK
ReadX 13880 585728 4096 4096 NT_STATUS_OK
ReadX 13880 589824 61440 61440 NT_STATUS_OK
ReadX 13880 651264 4096 4096 NT_STATUS_OK
ReadX 13880 655360 61440 61440 NT_STATUS_OK
ReadX 13880 716800 4096 4096 NT_STATUS_OK
ReadX 13880 720896 61440 61440 NT_STATUS_OK
ReadX 13880 782336 4096 4096 NT_STATUS_OK
ReadX 13880 786432 61440 61440 NT_STATUS_OK
ReadX 13880 847872 4096 4096 NT_STATUS_OK
ReadX 13880 851968 61440 61440 NT_STATUS_OK
ReadX 13880 913408 4096 4096 NT_STATUS_OK
ReadX 13880 917504 61440 61440 NT_STATUS_OK
ReadX 13880 978944 4096 4096 NT_STATUS_OK
ReadX 13880 983040 61440 61440 NT_STATUS_OK
ReadX 13880 1044480 4096 4096 NT_STATUS_OK
ReadX 13880 1048576 61440 61440 NT_STATUS_OK
ReadX 13880 1110016 4096 4096 NT_STATUS_OK
ReadX 13880 1114112 61440 61440 NT_STATUS_OK
ReadX 13880 1175552 4096 4096 NT_STATUS_OK
ReadX 13880 1179648 61440 61440 NT_STATUS_OK
ReadX 13880 1241088 4096 4096 NT_STATUS_OK
ReadX 13880 1245184 61440 61440 NT_STATUS_OK
ReadX 13880 1306624 4096 4096 NT_STATUS_OK
ReadX 13880 1310720 61440 61440 NT_STATUS_OK
ReadX 13880 1372160 4096 4096 NT_STATUS_OK
ReadX 13880 1376256 61440 61440 NT_STATUS_OK
ReadX 13880 1437696 4096 4096 NT_STATUS_OK
ReadX 13880 1441792 61440 61440 NT_STATUS_OK
ReadX 13880 1503232 4096 4096 NT_STATUS_OK
ReadX 13880 1507328 61440 61440 NT_STATUS_OK
ReadX 13880 1568768 4096 4096 NT_STATUS_OK
ReadX 13880 1572864 61440 61440 NT_STATUS_OK
ReadX 13880 1634304 4096 4096 NT_STATUS_OK
ReadX 13880 1638400 61440 61440 NT_STATUS_OK
ReadX 13880 1699840 4096 4096 NT_STATUS_OK
ReadX 13880 1703936 61440 61440 NT_STATUS_OK
ReadX 13880 1765376 4096 4096 NT_STATUS_OK
ReadX 13880 1769472 61440 61440 NT_STATUS_OK
ReadX 13880 1830912 4096 4096 NT_STATUS_OK
ReadX 13880 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13881 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13882 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 1005 NT_STATUS_OK
ReadX 13882 2156 24 24 NT_STATUS_OK
ReadX 13882 2139 276 276 NT_STATUS_OK
ReadX 13882 2136 14 14 NT_STATUS_OK
ReadX 13882 2136 7 7 NT_STATUS_OK
ReadX 13882 2138 12 12 NT_STATUS_OK
ReadX 13882 2137 8 8 NT_STATUS_OK
ReadX 13882 2135 15 15 NT_STATUS_OK
ReadX 13882 0 16 16 NT_STATUS_OK
ReadX 13882 16 2048 2048 NT_STATUS_OK
ReadX 13882 2064 2048 2048 NT_STATUS_OK
ReadX 13882 257 2048 2048 NT_STATUS_OK
ReadX 13882 385 2048 2048 NT_STATUS_OK
ReadX 13882 513 2048 2048 NT_STATUS_OK
ReadX 13882 641 2048 2048 NT_STATUS_OK
ReadX 13882 769 2048 2048 NT_STATUS_OK
ReadX 13882 897 2048 2048 NT_STATUS_OK
ReadX 13882 1025 2048 2048 NT_STATUS_OK
ReadX 13882 1153 2048 2048 NT_STATUS_OK
ReadX 13882 1281 2048 2048 NT_STATUS_OK
ReadX 13882 1409 2048 2048 NT_STATUS_OK
ReadX 13882 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13884 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13887 NT_STATUS_OK
WriteX 13887 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13887 258 NT_STATUS_OK
WriteX 13887 0 10575 10575 NT_STATUS_OK
Flush 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13892 NT_STATUS_OK
LockX 13892 2147483538 1 NT_STATUS_OK
UnlockX 13892 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 1005 NT_STATUS_OK
ReadX 13892 0 512 512 NT_STATUS_OK
ReadX 13892 512 512 512 NT_STATUS_OK
ReadX 13892 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 1004 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13893 NT_STATUS_OK
QUERY_FILE_INFORMATION 13893 1005 NT_STATUS_OK
ReadX 13893 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13894 NT_STATUS_OK
LockX 13894 2147483538 1 NT_STATUS_OK
UnlockX 13894 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13894 1005 NT_STATUS_OK
ReadX 13894 0 512 512 NT_STATUS_OK
ReadX 13894 512 512 512 NT_STATUS_OK
ReadX 13894 1024 512 512 NT_STATUS_OK
ReadX 13894 288 20 20 NT_STATUS_OK
ReadX 13894 308 2084 2084 NT_STATUS_OK
ReadX 13894 388 2084 2084 NT_STATUS_OK
ReadX 13894 388 2084 2084 NT_STATUS_OK
ReadX 13881 2157 1386 1386 NT_STATUS_OK
ReadX 13894 2472 399 399 NT_STATUS_OK
ReadX 13894 3072 1536 1536 NT_STATUS_OK
ReadX 13894 544 149 149 NT_STATUS_OK
ReadX 13894 693 485 485 NT_STATUS_OK
Close 13894 NT_STATUS_OK
ReadX 13881 2157 4096 4096 NT_STATUS_OK
ReadX 13881 6253 4096 4096 NT_STATUS_OK
ReadX 13881 10349 4096 4096 NT_STATUS_OK
ReadX 13881 14445 4096 4096 NT_STATUS_OK
ReadX 13881 18541 4096 4096 NT_STATUS_OK
ReadX 13881 22637 256 256 NT_STATUS_OK
ReadX 13881 22893 4096 4096 NT_STATUS_OK
ReadX 13881 26989 4096 4096 NT_STATUS_OK
ReadX 13881 31085 4096 4096 NT_STATUS_OK
ReadX 13881 35181 4096 4096 NT_STATUS_OK
ReadX 13881 39277 4096 4096 NT_STATUS_OK
ReadX 13881 43373 4096 4096 NT_STATUS_OK
ReadX 13881 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13881 2157 1024 1024 NT_STATUS_OK
ReadX 13881 1667 4688 4688 NT_STATUS_OK
ReadX 13881 6355 3516 3516 NT_STATUS_OK
ReadX 13881 9871 16384 16384 NT_STATUS_OK
ReadX 13881 26255 3771 3771 NT_STATUS_OK
ReadX 13881 30026 2048 2048 NT_STATUS_OK
ReadX 13881 32074 1024 1024 NT_STATUS_OK
ReadX 13881 33098 6652 6652 NT_STATUS_OK
ReadX 13881 39750 16384 16384 NT_STATUS_OK
ReadX 13881 56134 10496 10496 NT_STATUS_OK
ReadX 13881 66630 1784 1784 NT_STATUS_OK
ReadX 13881 68414 90 90 NT_STATUS_OK
ReadX 13881 68504 273 273 NT_STATUS_OK
ReadX 13881 68777 1600 1600 NT_STATUS_OK
ReadX 13881 70377 640 640 NT_STATUS_OK
ReadX 13881 71017 1280 1280 NT_STATUS_OK
ReadX 13881 72297 8464 8464 NT_STATUS_OK
ReadX 13881 80761 158 158 NT_STATUS_OK
ReadX 13881 80919 912 912 NT_STATUS_OK
ReadX 13881 81831 1980 1980 NT_STATUS_OK
ReadX 13881 83811 2256 2256 NT_STATUS_OK
ReadX 13881 86067 400 400 NT_STATUS_OK
ReadX 13881 86467 252 252 NT_STATUS_OK
ReadX 13881 86719 42 42 NT_STATUS_OK
ReadX 13881 86761 725 725 NT_STATUS_OK
ReadX 13881 2009 512 512 NT_STATUS_OK
ReadX 13881 3895 9 9 NT_STATUS_OK
ReadX 13881 3781 46 46 NT_STATUS_OK
ReadX 13881 4059 92 92 NT_STATUS_OK
ReadX 13881 3781 92 92 NT_STATUS_OK
ReadX 13881 3986 184 184 NT_STATUS_OK
ReadX 13881 3987 16384 16384 NT_STATUS_OK
ReadX 13881 3902 16384 16384 NT_STATUS_OK
ReadX 13881 3781 10240 10240 NT_STATUS_OK
ReadX 13881 3821 16384 16384 NT_STATUS_OK
ReadX 13881 3891 935 935 NT_STATUS_OK
ReadX 13881 4060 10240 10240 NT_STATUS_OK
ReadX 13881 4059 184 184 NT_STATUS_OK
ReadX 13881 256 184 184 NT_STATUS_OK
ReadX 13881 256 1026 1026 NT_STATUS_OK
ReadX 13881 3901 326 326 NT_STATUS_OK
ReadX 13881 3899 652 652 NT_STATUS_OK
ReadX 13881 256 2 2 NT_STATUS_OK
ReadX 13881 258 4948 4948 NT_STATUS_OK
Close 13881 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13896 NT_STATUS_OK
Close 13896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13899 NT_STATUS_OK
WriteX 13899 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 258 NT_STATUS_OK
WriteX 13899 0 65536 65536 NT_STATUS_OK
WriteX 13899 65536 65536 65536 NT_STATUS_OK
WriteX 13899 131072 65536 65536 NT_STATUS_OK
WriteX 13899 196608 65536 65536 NT_STATUS_OK
WriteX 13899 262144 65536 65536 NT_STATUS_OK
WriteX 13899 327680 65536 65536 NT_STATUS_OK
WriteX 13899 393216 65536 65536 NT_STATUS_OK
WriteX 13899 458752 65536 65536 NT_STATUS_OK
WriteX 13899 524288 65536 65536 NT_STATUS_OK
WriteX 13899 589824 35257 35257 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13901 NT_STATUS_OK
Close 13901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13904 NT_STATUS_OK
WriteX 13904 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 258 NT_STATUS_OK
WriteX 13904 0 65536 65536 NT_STATUS_OK
WriteX 13904 65536 65536 65536 NT_STATUS_OK
WriteX 13904 131072 65536 65536 NT_STATUS_OK
WriteX 13904 196608 65536 65536 NT_STATUS_OK
WriteX 13904 262144 65536 65536 NT_STATUS_OK
WriteX 13904 327680 65536 65536 NT_STATUS_OK
WriteX 13904 393216 65536 65536 NT_STATUS_OK
WriteX 13904 458752 65536 65536 NT_STATUS_OK
WriteX 13904 524288 65536 65536 NT_STATUS_OK
WriteX 13904 589824 57598 57598 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13906 NT_STATUS_OK
WriteX 13906 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13906 258 NT_STATUS_OK
WriteX 13906 0 12543 12543 NT_STATUS_OK
Flush 13906 NT_STATUS_OK
Close 13906 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13912 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 1005 NT_STATUS_OK
ReadX 13912 1938 24 24 NT_STATUS_OK
ReadX 13912 1920 276 276 NT_STATUS_OK
ReadX 13912 1918 14 14 NT_STATUS_OK
ReadX 13912 1918 7 7 NT_STATUS_OK
ReadX 13912 1919 12 12 NT_STATUS_OK
ReadX 13912 1919 8 8 NT_STATUS_OK
ReadX 13912 1917 15 15 NT_STATUS_OK
ReadX 13912 0 16 16 NT_STATUS_OK
ReadX 13912 16 2048 2048 NT_STATUS_OK
ReadX 13912 2064 2048 2048 NT_STATUS_OK
ReadX 13912 257 2048 2048 NT_STATUS_OK
ReadX 13912 385 2048 2048 NT_STATUS_OK
ReadX 13912 513 2048 2048 NT_STATUS_OK
ReadX 13912 641 2048 2048 NT_STATUS_OK
ReadX 13912 769 2048 2048 NT_STATUS_OK
ReadX 13912 897 2048 2048 NT_STATUS_OK
ReadX 13912 1025 2048 2048 NT_STATUS_OK
ReadX 13912 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13917 NT_STATUS_OK
WriteX 13917 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13917 258 NT_STATUS_OK
WriteX 13917 0 11588 11588 NT_STATUS_OK
Flush 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
Close 13912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13922 NT_STATUS_OK
WriteX 13922 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13922 258 NT_STATUS_OK
WriteX 13922 0 11615 11615 NT_STATUS_OK
Flush 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13931 NT_STATUS_OK
WriteX 13931 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 65536 65536 NT_STATUS_OK
WriteX 13931 65536 16050 16050 NT_STATUS_OK
Close 13931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13911 1939 64 64 NT_STATUS_OK
ReadX 13911 128 248 248 NT_STATUS_OK
ReadX 13911 128 568 568 NT_STATUS_OK
ReadX 13911 3872 1536 1536 NT_STATUS_OK
ReadX 13911 3456 2560 2560 NT_STATUS_OK
ReadX 13911 3136 512 512 NT_STATUS_OK
ReadX 13911 2880 4096 4096 NT_STATUS_OK
ReadX 13911 3264 3072 3072 NT_STATUS_OK
ReadX 13911 320 4096 4096 NT_STATUS_OK
ReadX 13911 1024 4096 4096 NT_STATUS_OK
ReadX 13911 3616 4096 4096 NT_STATUS_OK
ReadX 13911 1939 64 64 NT_STATUS_OK
ReadX 13911 128 248 248 NT_STATUS_OK
ReadX 13911 128 608 608 NT_STATUS_OK
ReadX 13911 2858 1024 1024 NT_STATUS_OK
ReadX 13911 2810 4096 4096 NT_STATUS_OK
ReadX 13911 2826 4096 4096 NT_STATUS_OK
ReadX 13911 2580 2048 2048 NT_STATUS_OK
ReadX 13911 2800 2560 2560 NT_STATUS_OK
ReadX 13911 2100 4096 4096 NT_STATUS_OK
ReadX 13911 2084 4096 4096 NT_STATUS_OK
ReadX 13911 868 4096 4096 NT_STATUS_OK
ReadX 13911 2324 4096 4096 NT_STATUS_OK
ReadX 13911 884 4096 4096 NT_STATUS_OK
ReadX 13911 2604 1024 1024 NT_STATUS_OK
ReadX 13911 580 4096 4096 NT_STATUS_OK
ReadX 13911 596 4096 4096 NT_STATUS_OK
ReadX 13911 2752 4096 4096 NT_STATUS_OK
ReadX 13911 2842 1024 1024 NT_STATUS_OK
ReadX 13911 660 4096 4096 NT_STATUS_OK
ReadX 13911 2720 4096 4096 NT_STATUS_OK
ReadX 13911 2736 4096 4096 NT_STATUS_OK
ReadX 13911 628 4096 4096 NT_STATUS_OK
ReadX 13911 2704 4096 4096 NT_STATUS_OK
ReadX 13911 1556 4096 4096 NT_STATUS_OK
ReadX 13911 576 4096 4096 NT_STATUS_OK
ReadX 13911 3168 1536 1536 NT_STATUS_OK
ReadX 13911 832 4096 4096 NT_STATUS_OK
ReadX 13911 1088 4096 4096 NT_STATUS_OK
ReadX 13911 1344 4096 4096 NT_STATUS_OK
ReadX 13911 1600 4096 4096 NT_STATUS_OK
ReadX 13911 1856 4096 4096 NT_STATUS_OK
ReadX 13911 2112 4096 4096 NT_STATUS_OK
ReadX 13911 1892 4096 4096 NT_STATUS_OK
ReadX 13911 820 4096 4096 NT_STATUS_OK
ReadX 13911 788 4096 4096 NT_STATUS_OK
ReadX 13911 1604 4096 4096 NT_STATUS_OK
ReadX 13911 3648 4096 4096 NT_STATUS_OK
ReadX 13911 2608 4096 4096 NT_STATUS_OK
ReadX 13911 548 4096 4096 NT_STATUS_OK
ReadX 13911 740 4096 4096 NT_STATUS_OK
ReadX 13911 1344 4096 4096 NT_STATUS_OK
ReadX 13911 3392 4096 4096 NT_STATUS_OK
ReadX 13911 3904 4096 4096 NT_STATUS_OK
ReadX 13911 644 4096 4096 NT_STATUS_OK
ReadX 13911 676 4096 4096 NT_STATUS_OK
ReadX 13911 2688 4096 4096 NT_STATUS_OK
ReadX 13911 320 4096 4096 NT_STATUS_OK
ReadX 13911 900 4096 4096 NT_STATUS_OK
ReadX 13911 1908 4096 4096 NT_STATUS_OK
ReadX 13911 852 4096 4096 NT_STATUS_OK
ReadX 13911 724 4096 4096 NT_STATUS_OK
ReadX 13911 2292 4096 4096 NT_STATUS_OK
ReadX 13911 612 4096 4096 NT_STATUS_OK
ReadX 13911 388 4096 4096 NT_STATUS_OK
ReadX 13911 2368 4096 4096 NT_STATUS_OK
ReadX 13911 2624 4096 4096 NT_STATUS_OK
ReadX 13911 500 4096 4096 NT_STATUS_OK
ReadX 13911 356 4096 4096 NT_STATUS_OK
ReadX 13911 1024 4096 4096 NT_STATUS_OK
ReadX 13911 576 4096 4096 NT_STATUS_OK
ReadX 13911 340 4096 4096 NT_STATUS_OK
ReadX 13911 420 4096 4096 NT_STATUS_OK
ReadX 13911 1600 4096 4096 NT_STATUS_OK
ReadX 13911 404 4096 4096 NT_STATUS_OK
ReadX 13911 1428 4096 4096 NT_STATUS_OK
ReadX 13911 2656 4096 4096 NT_STATUS_OK
ReadX 13911 2624 4096 4096 NT_STATUS_OK
ReadX 13911 452 4096 4096 NT_STATUS_OK
ReadX 13911 692 4096 4096 NT_STATUS_OK
ReadX 13911 564 4096 4096 NT_STATUS_OK
ReadX 13911 372 4096 4096 NT_STATUS_OK
ReadX 13911 468 4096 4096 NT_STATUS_OK
ReadX 13911 484 4096 4096 NT_STATUS_OK
ReadX 13911 1088 4096 4096 NT_STATUS_OK
ReadX 13911 1924 4096 4096 NT_STATUS_OK
ReadX 13911 2768 4096 4096 NT_STATUS_OK
ReadX 13911 832 4096 4096 NT_STATUS_OK
ReadX 13911 836 4096 4096 NT_STATUS_OK
ReadX 13911 1856 4096 4096 NT_STATUS_OK
ReadX 13911 2640 4096 4096 NT_STATUS_OK
ReadX 13911 436 4096 4096 NT_STATUS_OK
ReadX 13911 1828 4096 4096 NT_STATUS_OK
ReadX 13911 804 4096 4096 NT_STATUS_OK
ReadX 13911 1860 4096 4096 NT_STATUS_OK
ReadX 13911 1812 4096 4096 NT_STATUS_OK
ReadX 13911 756 4096 4096 NT_STATUS_OK
ReadX 13911 1636 4096 4096 NT_STATUS_OK
ReadX 13911 772 4096 4096 NT_STATUS_OK
ReadX 13911 2036 4096 4096 NT_STATUS_OK
ReadX 13911 1220 4096 4096 NT_STATUS_OK
ReadX 13911 1652 4096 4096 NT_STATUS_OK
ReadX 13911 2588 4096 4096 NT_STATUS_OK
ReadX 13911 916 4096 4096 NT_STATUS_OK
ReadX 13911 260 4096 4096 NT_STATUS_OK
ReadX 13911 932 4096 4096 NT_STATUS_OK
ReadX 13911 2624 4096 4096 NT_STATUS_OK
ReadX 13911 308 4096 4096 NT_STATUS_OK
ReadX 13911 292 4096 4096 NT_STATUS_OK
ReadX 13911 1140 4096 4096 NT_STATUS_OK
ReadX 13911 276 4096 4096 NT_STATUS_OK
ReadX 13911 2020 4096 4096 NT_STATUS_OK
ReadX 13911 2880 4096 4096 NT_STATUS_OK
ReadX 13911 516 4096 4096 NT_STATUS_OK
ReadX 13911 1844 4096 4096 NT_STATUS_OK
ReadX 13911 1124 4096 4096 NT_STATUS_OK
ReadX 13911 3136 4096 4096 NT_STATUS_OK
ReadX 13911 324 4096 4096 NT_STATUS_OK
ReadX 13911 1156 4096 4096 NT_STATUS_OK
ReadX 13911 1172 4096 4096 NT_STATUS_OK
ReadX 13911 2112 4096 4096 NT_STATUS_OK
ReadX 13911 2368 4096 4096 NT_STATUS_OK
ReadX 13911 964 4096 4096 NT_STATUS_OK
ReadX 13911 980 4096 4096 NT_STATUS_OK
ReadX 13911 1012 4096 4096 NT_STATUS_OK
ReadX 13911 532 4096 4096 NT_STATUS_OK
ReadX 13911 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13911 1620 4096 4096 NT_STATUS_OK
ReadX 13911 1604 4096 4096 NT_STATUS_OK
ReadX 13911 2116 4096 4096 NT_STATUS_OK
ReadX 13911 2132 4096 4096 NT_STATUS_OK
ReadX 13911 2148 4096 4096 NT_STATUS_OK
ReadX 13911 2276 4096 4096 NT_STATUS_OK
ReadX 13911 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13936 NT_STATUS_OK
QUERY_FILE_INFORMATION 13891 1004 NT_STATUS_OK
Close 13891 NT_STATUS_OK
WriteX 13936 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13936 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13893 1004 NT_STATUS_OK
Close 13893 NT_STATUS_OK
WriteX 13936 0 65536 65536 NT_STATUS_OK
WriteX 13936 65536 64850 64850 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13938 NT_STATUS_OK
WriteX 13938 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13938 258 NT_STATUS_OK
ReadX 13911 2068 4096 4096 NT_STATUS_OK
ReadX 13911 1588 4096 4096 NT_STATUS_OK
ReadX 13911 1572 4096 4096 NT_STATUS_OK
WriteX 13938 0 18630 18630 NT_STATUS_OK
Flush 13938 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13911 612 4096 4096 NT_STATUS_OK
ReadX 13911 564 4096 4096 NT_STATUS_OK
ReadX 13911 1876 4096 4096 NT_STATUS_OK
ReadX 13911 628 4096 4096 NT_STATUS_OK
ReadX 13911 740 4096 4096 NT_STATUS_OK
ReadX 13911 724 4096 4096 NT_STATUS_OK
ReadX 13911 644 4096 4096 NT_STATUS_OK
ReadX 13911 2324 4096 4096 NT_STATUS_OK
ReadX 13911 660 4096 4096 NT_STATUS_OK
ReadX 13911 852 4096 4096 NT_STATUS_OK
ReadX 13911 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13911 2368 4096 4096 NT_STATUS_OK
ReadX 13911 1024 4096 4096 NT_STATUS_OK
ReadX 13911 320 4096 4096 NT_STATUS_OK
ReadX 13911 580 4096 4096 NT_STATUS_OK
ReadX 13911 3136 512 512 NT_STATUS_OK
ReadX 13911 2880 4096 4096 NT_STATUS_OK
Close 13911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 61440 4096 4096 NT_STATUS_OK
ReadX 13943 126976 4096 4096 NT_STATUS_OK
WriteX 13943 0 65536 65536 NT_STATUS_OK
WriteX 13943 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 61440 4096 4096 NT_STATUS_OK
ReadX 13944 126976 4096 4096 NT_STATUS_OK
ReadX 13944 192512 4096 4096 NT_STATUS_OK
ReadX 13944 258048 4096 4096 NT_STATUS_OK
WriteX 13944 0 65536 65536 NT_STATUS_OK
WriteX 13944 65536 65536 65536 NT_STATUS_OK
WriteX 13944 131072 65536 65536 NT_STATUS_OK
WriteX 13944 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 61440 4096 4096 NT_STATUS_OK
ReadX 13945 126976 4096 4096 NT_STATUS_OK
ReadX 13945 192512 4096 4096 NT_STATUS_OK
ReadX 13945 258048 4096 4096 NT_STATUS_OK
ReadX 13945 323584 4096 4096 NT_STATUS_OK
ReadX 13945 389120 4096 4096 NT_STATUS_OK
ReadX 13945 454656 4096 4096 NT_STATUS_OK
ReadX 13945 520192 4096 4096 NT_STATUS_OK
WriteX 13945 0 65536 65536 NT_STATUS_OK
WriteX 13945 65536 65536 65536 NT_STATUS_OK
WriteX 13945 131072 65536 65536 NT_STATUS_OK
WriteX 13945 196608 65536 65536 NT_STATUS_OK
WriteX 13945 262144 65536 65536 NT_STATUS_OK
WriteX 13945 327680 65536 65536 NT_STATUS_OK
WriteX 13945 393216 65536 65536 NT_STATUS_OK
WriteX 13945 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13948 NT_STATUS_OK
WriteX 13948 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13948 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13946 0 8192 8192 NT_STATUS_OK
Flush 13946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13946 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13946 0 8192 8192 NT_STATUS_OK
Flush 13946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13946 0 8192 8192 NT_STATUS_OK
Flush 13946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13946 0 8192 8192 NT_STATUS_OK
Flush 13946 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Close 13910 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13953 NT_STATUS_OK
WriteX 13953 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13953 258 NT_STATUS_OK
WriteX 13953 0 62591 62591 NT_STATUS_OK
Close 13953 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13958 NT_STATUS_OK
WriteX 13958 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13958 258 NT_STATUS_OK
WriteX 13958 0 10845 10845 NT_STATUS_OK
Close 13958 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13960 NT_STATUS_OK
Close 13960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13963 NT_STATUS_OK
WriteX 13963 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13963 258 NT_STATUS_OK
WriteX 13963 0 30118 30118 NT_STATUS_OK
Close 13963 NT_STATUS_OK
WriteX 13946 0 4096 4096 NT_STATUS_OK
WriteX 13948 0 64 64 NT_STATUS_OK
Close 13948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 61440 61440 NT_STATUS_OK
ReadX 13965 61440 4096 4096 NT_STATUS_OK
ReadX 13965 65536 61440 61440 NT_STATUS_OK
ReadX 13965 126976 4096 4096 NT_STATUS_OK
ReadX 13965 131072 61440 61440 NT_STATUS_OK
ReadX 13965 192512 4096 4096 NT_STATUS_OK
ReadX 13965 196608 61440 61440 NT_STATUS_OK
ReadX 13965 258048 4096 4096 NT_STATUS_OK
ReadX 13965 262144 61440 61440 NT_STATUS_OK
ReadX 13965 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 0 61440 61440 NT_STATUS_OK
ReadX 13966 61440 4096 4096 NT_STATUS_OK
ReadX 13966 65536 61440 61440 NT_STATUS_OK
ReadX 13966 126976 4096 4096 NT_STATUS_OK
ReadX 13966 131072 61440 61440 NT_STATUS_OK
ReadX 13966 192512 4096 4096 NT_STATUS_OK
ReadX 13966 196608 61440 61440 NT_STATUS_OK
ReadX 13966 258048 4096 4096 NT_STATUS_OK
ReadX 13966 262144 61440 61440 NT_STATUS_OK
ReadX 13966 323584 4096 4096 NT_STATUS_OK
ReadX 13966 327680 61440 61440 NT_STATUS_OK
ReadX 13966 389120 4096 4096 NT_STATUS_OK
ReadX 13966 393216 61440 61440 NT_STATUS_OK
ReadX 13966 454656 4096 4096 NT_STATUS_OK
ReadX 13966 458752 61440 61440 NT_STATUS_OK
ReadX 13966 520192 4096 4096 NT_STATUS_OK
ReadX 13966 524288 61440 61440 NT_STATUS_OK
ReadX 13966 585728 4096 4096 NT_STATUS_OK
ReadX 13966 589824 61440 61440 NT_STATUS_OK
ReadX 13966 651264 4096 4096 NT_STATUS_OK
ReadX 13966 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 0 61440 61440 NT_STATUS_OK
ReadX 13967 61440 4096 4096 NT_STATUS_OK
ReadX 13967 65536 61440 61440 NT_STATUS_OK
ReadX 13967 126976 4096 4096 NT_STATUS_OK
ReadX 13967 131072 61440 61440 NT_STATUS_OK
ReadX 13967 192512 4096 4096 NT_STATUS_OK
ReadX 13967 196608 61440 61440 NT_STATUS_OK
ReadX 13967 258048 4096 4096 NT_STATUS_OK
ReadX 13967 262144 61440 61440 NT_STATUS_OK
ReadX 13967 323584 4096 4096 NT_STATUS_OK
ReadX 13967 327680 61440 61440 NT_STATUS_OK
ReadX 13967 389120 4096 4096 NT_STATUS_OK
ReadX 13967 393216 61440 61440 NT_STATUS_OK
ReadX 13967 454656 4096 4096 NT_STATUS_OK
ReadX 13967 458752 61440 61440 NT_STATUS_OK
ReadX 13967 520192 4096 4096 NT_STATUS_OK
ReadX 13967 524288 61440 61440 NT_STATUS_OK
ReadX 13967 585728 4096 4096 NT_STATUS_OK
ReadX 13967 589824 61440 61440 NT_STATUS_OK
ReadX 13967 651264 4096 4096 NT_STATUS_OK
ReadX 13967 655360 61440 61440 NT_STATUS_OK
ReadX 13967 716800 4096 4096 NT_STATUS_OK
ReadX 13967 720896 61440 61440 NT_STATUS_OK
ReadX 13967 782336 4096 4096 NT_STATUS_OK
ReadX 13967 786432 61440 61440 NT_STATUS_OK
ReadX 13967 847872 4096 4096 NT_STATUS_OK
ReadX 13967 851968 61440 61440 NT_STATUS_OK
ReadX 13967 913408 4096 4096 NT_STATUS_OK
ReadX 13967 917504 61440 61440 NT_STATUS_OK
ReadX 13967 978944 4096 4096 NT_STATUS_OK
ReadX 13967 983040 61440 61440 NT_STATUS_OK
ReadX 13967 1044480 4096 4096 NT_STATUS_OK
ReadX 13967 1048576 61440 61440 NT_STATUS_OK
ReadX 13967 1110016 4096 4096 NT_STATUS_OK
ReadX 13967 1114112 61440 61440 NT_STATUS_OK
ReadX 13967 1175552 4096 4096 NT_STATUS_OK
ReadX 13967 1179648 61440 61440 NT_STATUS_OK
ReadX 13967 1241088 4096 4096 NT_STATUS_OK
ReadX 13967 1245184 61440 61440 NT_STATUS_OK
ReadX 13967 1306624 4096 4096 NT_STATUS_OK
ReadX 13967 1310720 61440 61440 NT_STATUS_OK
ReadX 13967 1372160 4096 4096 NT_STATUS_OK
ReadX 13967 1376256 61440 61440 NT_STATUS_OK
ReadX 13967 1437696 4096 4096 NT_STATUS_OK
ReadX 13967 1441792 61440 61440 NT_STATUS_OK
ReadX 13967 1503232 4096 4096 NT_STATUS_OK
ReadX 13967 1507328 61440 61440 NT_STATUS_OK
ReadX 13967 1568768 4096 4096 NT_STATUS_OK
ReadX 13967 1572864 61440 61440 NT_STATUS_OK
ReadX 13967 1634304 4096 4096 NT_STATUS_OK
ReadX 13967 1638400 61440 61440 NT_STATUS_OK
ReadX 13967 1699840 4096 4096 NT_STATUS_OK
ReadX 13967 1703936 61440 61440 NT_STATUS_OK
ReadX 13967 1765376 4096 4096 NT_STATUS_OK
ReadX 13967 1769472 61440 61440 NT_STATUS_OK
ReadX 13967 1830912 4096 4096 NT_STATUS_OK
ReadX 13967 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
ReadX 13972 4096 4096 4096 NT_STATUS_OK
ReadX 13972 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13973 NT_STATUS_OK
Close 13973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13976 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 8192 8192 NT_STATUS_OK
ReadX 13980 8192 8192 8192 NT_STATUS_OK
ReadX 13980 16384 8192 8192 NT_STATUS_OK
ReadX 13980 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13982 NT_STATUS_OK
Close 13982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13985 NT_STATUS_OK
WriteX 13985 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13985 258 NT_STATUS_OK
WriteX 13985 0 10438 10438 NT_STATUS_OK
Close 13985 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13986 NT_STATUS_OK
Close 13986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13988 NT_STATUS_OK
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13989 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13990 NT_STATUS_OK
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13991 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
ReadX 13994 4096 4096 4096 NT_STATUS_OK
ReadX 13994 8192 4096 4096 NT_STATUS_OK
ReadX 13994 12288 8192 8192 NT_STATUS_OK
ReadX 13994 20480 8192 8192 NT_STATUS_OK
ReadX 13994 28672 8192 8192 NT_STATUS_OK
ReadX 13994 36864 8192 8192 NT_STATUS_OK
ReadX 13994 45056 8192 8192 NT_STATUS_OK
ReadX 13994 53248 8192 8192 NT_STATUS_OK
ReadX 13994 61440 8192 8192 NT_STATUS_OK
ReadX 13994 69632 8192 8192 NT_STATUS_OK
ReadX 13994 77824 8192 8192 NT_STATUS_OK
ReadX 13994 86016 8192 8192 NT_STATUS_OK
ReadX 13994 94208 8192 8192 NT_STATUS_OK
ReadX 13994 102400 8192 8192 NT_STATUS_OK
ReadX 13994 110592 8192 8192 NT_STATUS_OK
ReadX 13994 118784 8192 8192 NT_STATUS_OK
ReadX 13994 126976 8192 8192 NT_STATUS_OK
ReadX 13994 135168 8192 8192 NT_STATUS_OK
ReadX 13994 143360 8192 8192 NT_STATUS_OK
ReadX 13994 151552 8192 8192 NT_STATUS_OK
ReadX 13994 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13996 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13999 NT_STATUS_OK
WriteX 13999 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 258 NT_STATUS_OK
WriteX 13999 0 28489 28489 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 14000 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14002 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14003 NT_STATUS_OK
Close 14003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 8192 8192 NT_STATUS_OK
ReadX 14006 8192 8192 8192 NT_STATUS_OK
ReadX 14006 16384 8192 8192 NT_STATUS_OK
ReadX 14006 24576 8192 8192 NT_STATUS_OK
ReadX 14006 32768 16384 16384 NT_STATUS_OK
ReadX 14006 49152 8192 8192 NT_STATUS_OK
ReadX 14006 57344 8192 8192 NT_STATUS_OK
ReadX 14006 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14008 NT_STATUS_OK
Close 14008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14011 NT_STATUS_OK
WriteX 14011 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14011 258 NT_STATUS_OK
WriteX 14011 0 29253 29253 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14012 NT_STATUS_OK
Close 14012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 14014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14018 NT_STATUS_OK
WriteX 14018 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
WriteX 14018 0 30183 30183 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 14021 NT_STATUS_OK
WriteX 14021 0 510 510 NT_STATUS_OK
WriteX 14021 510 512 512 NT_STATUS_OK
WriteX 14021 1022 510 510 NT_STATUS_OK
WriteX 14021 1532 510 510 NT_STATUS_OK
WriteX 14021 2042 168 168 NT_STATUS_OK
Close 14021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14022 NT_STATUS_OK
Close 14022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
WriteX 14024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 61440 4096 4096 NT_STATUS_OK
ReadX 14025 126976 4096 4096 NT_STATUS_OK
WriteX 14025 0 65536 65536 NT_STATUS_OK
WriteX 14025 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 61440 4096 4096 NT_STATUS_OK
ReadX 14026 126976 4096 4096 NT_STATUS_OK
ReadX 14026 192512 4096 4096 NT_STATUS_OK
ReadX 14026 258048 4096 4096 NT_STATUS_OK
WriteX 14026 0 65536 65536 NT_STATUS_OK
WriteX 14026 65536 65536 65536 NT_STATUS_OK
WriteX 14026 131072 65536 65536 NT_STATUS_OK
WriteX 14026 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 61440 4096 4096 NT_STATUS_OK
ReadX 14027 126976 4096 4096 NT_STATUS_OK
ReadX 14027 192512 4096 4096 NT_STATUS_OK
ReadX 14027 258048 4096 4096 NT_STATUS_OK
ReadX 14027 323584 4096 4096 NT_STATUS_OK
ReadX 14027 389120 4096 4096 NT_STATUS_OK
ReadX 14027 454656 4096 4096 NT_STATUS_OK
ReadX 14027 520192 4096 4096 NT_STATUS_OK
WriteX 14027 0 65536 65536 NT_STATUS_OK
WriteX 14027 65536 65536 65536 NT_STATUS_OK
WriteX 14027 131072 65536 65536 NT_STATUS_OK
WriteX 14027 196608 65536 65536 NT_STATUS_OK
WriteX 14027 262144 65536 65536 NT_STATUS_OK
WriteX 14027 327680 65536 65536 NT_STATUS_OK
WriteX 14027 393216 65536 65536 NT_STATUS_OK
WriteX 14027 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 14028 NT_STATUS_OK
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 14030 NT_STATUS_OK
Close 14030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 14034 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 14039 NT_STATUS_OK
Close 14039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14043 NT_STATUS_OK
Close 14043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14048 NT_STATUS_OK
Close 14048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14052 NT_STATUS_OK
Close 14052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14057 NT_STATUS_OK
Close 14057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14062 NT_STATUS_OK
Close 14062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14067 NT_STATUS_OK
Close 14067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14072 NT_STATUS_OK
Close 14072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14082 NT_STATUS_OK
Close 14082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 14087 NT_STATUS_OK
Close 14087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 14090 NT_STATUS_OK
Close 14090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14093 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10129 NT_STATUS_OK
WriteX 10129 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10129 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10129 0 65536 65536 NT_STATUS_OK
WriteX 10129 65536 65536 65536 NT_STATUS_OK
WriteX 10129 131072 65536 65536 NT_STATUS_OK
WriteX 10129 196608 65536 65536 NT_STATUS_OK
WriteX 10129 262144 26634 26634 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10134 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10136 NT_STATUS_OK
ReadX 10136 0 4096 4096 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 4096 4096 NT_STATUS_OK
ReadX 10137 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10138 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10142 NT_STATUS_OK
Close 10142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10145 NT_STATUS_OK
Close 10145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10156 NT_STATUS_OK
Close 10156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10160 NT_STATUS_OK
Close 10160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10165 NT_STATUS_OK
Close 10165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10170 NT_STATUS_OK
Close 10170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10175 NT_STATUS_OK
Close 10175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10180 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10194 NT_STATUS_OK
Close 10194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10199 NT_STATUS_OK
Close 10199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10202 NT_STATUS_OK
Close 10202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10204 NT_STATUS_OK
Close 10204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10214 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10261 0 4096 4096 NT_STATUS_OK
Close 10261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
ReadX 10263 4096 4096 4096 NT_STATUS_OK
ReadX 10263 8192 4096 4096 NT_STATUS_OK
ReadX 10263 12288 4096 4096 NT_STATUS_OK
ReadX 10263 16384 4096 4096 NT_STATUS_OK
ReadX 10263 20480 4096 4096 NT_STATUS_OK
ReadX 10263 24576 4096 4096 NT_STATUS_OK
ReadX 10263 28672 4096 4096 NT_STATUS_OK
ReadX 10263 32768 4096 4096 NT_STATUS_OK
ReadX 10263 36864 4096 4096 NT_STATUS_OK
ReadX 10263 40960 4096 4096 NT_STATUS_OK
ReadX 10263 45056 4096 4096 NT_STATUS_OK
ReadX 10263 49152 4096 4096 NT_STATUS_OK
ReadX 10263 53248 4096 4096 NT_STATUS_OK
ReadX 10263 57344 4096 4096 NT_STATUS_OK
ReadX 10263 61440 4096 4096 NT_STATUS_OK
ReadX 10263 65536 4096 4096 NT_STATUS_OK
ReadX 10263 69632 4096 4096 NT_STATUS_OK
ReadX 10263 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10263 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
Close 10263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10264 NT_STATUS_OK
SET_FILE_INFORMATION 10264 1004 NT_STATUS_OK
Close 10264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10266 NT_STATUS_OK
Close 10266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10269 NT_STATUS_OK
WriteX 10269 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10269 258 NT_STATUS_OK
WriteX 10269 0 65536 65536 NT_STATUS_OK
WriteX 10269 65536 19979 19979 NT_STATUS_OK
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
Flush 10270 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
Flush 10270 NT_STATUS_OK
QUERY_FILE_INFORMATION 10270 1004 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
Flush 10270 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
Flush 10270 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
Flush 10270 NT_STATUS_OK
SET_FILE_INFORMATION 10270 1004 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
Flush 10270 NT_STATUS_OK
Close 10270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
Close 10271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 4096 4096 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10275 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10275 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10281 NT_STATUS_OK
WriteX 10281 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10281 258 NT_STATUS_OK
WriteX 10281 0 65536 65536 NT_STATUS_OK
WriteX 10281 65536 17654 17654 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
WriteX 10282 0 4096 4096 NT_STATUS_OK
Flush 10282 NT_STATUS_OK
WriteX 10282 0 4096 4096 NT_STATUS_OK
Flush 10282 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 0 4096 4096 NT_STATUS_OK
Flush 10282 NT_STATUS_OK
WriteX 10282 0 4096 4096 NT_STATUS_OK
Flush 10282 NT_STATUS_OK
WriteX 10282 0 4096 4096 NT_STATUS_OK
Flush 10282 NT_STATUS_OK
SET_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 0 4096 4096 NT_STATUS_OK
Flush 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10283 NT_STATUS_OK
SET_FILE_INFORMATION 10283 1004 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10285 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 4096 4096 NT_STATUS_OK
ReadX 10287 4096 4096 4096 NT_STATUS_OK
ReadX 10287 8192 4096 4096 NT_STATUS_OK
ReadX 10287 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10287 16384 4096 4096 NT_STATUS_OK
ReadX 10287 20480 4096 4096 NT_STATUS_OK
ReadX 10287 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 0 4096 4096 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10290 1004 NT_STATUS_OK
WriteX 10290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10291 NT_STATUS_OK
Close 10291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10296 NT_STATUS_OK
WriteX 10296 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10296 258 NT_STATUS_OK
WriteX 10296 0 65536 65536 NT_STATUS_OK
WriteX 10296 65536 19490 19490 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 4096 4096 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
QUERY_FILE_INFORMATION 10297 1004 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
SET_FILE_INFORMATION 10297 1004 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10298 NT_STATUS_OK
SET_FILE_INFORMATION 10298 1004 NT_STATUS_OK
Close 10298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10300 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10302 0 4096 4096 NT_STATUS_OK
Close 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
ReadX 10304 4096 4096 4096 NT_STATUS_OK
ReadX 10304 8192 4096 4096 NT_STATUS_OK
ReadX 10304 12288 4096 4096 NT_STATUS_OK
ReadX 10304 16384 4096 4096 NT_STATUS_OK
ReadX 10304 20480 4096 4096 NT_STATUS_OK
ReadX 10304 24576 4096 4096 NT_STATUS_OK
ReadX 10304 28672 4096 4096 NT_STATUS_OK
ReadX 10304 32768 4096 4096 NT_STATUS_OK
ReadX 10304 36864 4096 4096 NT_STATUS_OK
ReadX 10304 40960 4096 4096 NT_STATUS_OK
ReadX 10304 45056 4096 4096 NT_STATUS_OK
ReadX 10304 49152 4096 4096 NT_STATUS_OK
ReadX 10304 53248 4096 4096 NT_STATUS_OK
ReadX 10304 57344 4096 4096 NT_STATUS_OK
ReadX 10304 61440 4096 4096 NT_STATUS_OK
ReadX 10304 65536 4096 4096 NT_STATUS_OK
ReadX 10304 69632 4096 4096 NT_STATUS_OK
ReadX 10304 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10304 1004 NT_STATUS_OK
WriteX 10304 0 4096 4096 NT_STATUS_OK
Close 10304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10305 NT_STATUS_OK
SET_FILE_INFORMATION 10305 1004 NT_STATUS_OK
Close 10305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10307 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
WriteX 10310 0 65536 65536 NT_STATUS_OK
WriteX 10310 65536 8866 8866 NT_STATUS_OK
Close 10310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
WriteX 10311 0 4096 4096 NT_STATUS_OK
Flush 10311 NT_STATUS_OK
SET_FILE_INFORMATION 10311 1004 NT_STATUS_OK
WriteX 10311 0 4096 4096 NT_STATUS_OK
Flush 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
Close 10313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
Close 10314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
WriteX 10315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10321 NT_STATUS_OK
WriteX 10321 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10321 258 NT_STATUS_OK
WriteX 10321 0 65536 65536 NT_STATUS_OK
WriteX 10321 65536 9298 9298 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
WriteX 10322 0 4096 4096 NT_STATUS_OK
Flush 10322 NT_STATUS_OK
SET_FILE_INFORMATION 10322 1004 NT_STATUS_OK
WriteX 10322 0 4096 4096 NT_STATUS_OK
Flush 10322 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10323 NT_STATUS_OK
SET_FILE_INFORMATION 10323 1004 NT_STATUS_OK
Close 10323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10325 NT_STATUS_OK
Close 10325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10328 0 4096 4096 NT_STATUS_OK
Close 10328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10329 4096 4096 4096 NT_STATUS_OK
ReadX 10329 8192 4096 4096 NT_STATUS_OK
ReadX 10329 12288 4096 4096 NT_STATUS_OK
ReadX 10329 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
Close 10330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
Close 10331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10332 1004 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10333 NT_STATUS_OK
Close 10333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10338 NT_STATUS_OK
WriteX 10338 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
WriteX 10338 0 65536 65536 NT_STATUS_OK
WriteX 10338 65536 11540 11540 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
Flush 10339 NT_STATUS_OK
SET_FILE_INFORMATION 10339 1004 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
Flush 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10340 NT_STATUS_OK
SET_FILE_INFORMATION 10340 1004 NT_STATUS_OK
Close 10340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10342 NT_STATUS_OK
Close 10342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 61440 4096 4096 NT_STATUS_OK
ReadX 10344 126976 4096 4096 NT_STATUS_OK
WriteX 10344 0 65536 65536 NT_STATUS_OK
WriteX 10344 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 61440 4096 4096 NT_STATUS_OK
ReadX 10345 126976 4096 4096 NT_STATUS_OK
ReadX 10345 192512 4096 4096 NT_STATUS_OK
ReadX 10345 258048 4096 4096 NT_STATUS_OK
WriteX 10345 0 65536 65536 NT_STATUS_OK
WriteX 10345 65536 65536 65536 NT_STATUS_OK
WriteX 10345 131072 65536 65536 NT_STATUS_OK
WriteX 10345 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 61440 4096 4096 NT_STATUS_OK
ReadX 10346 126976 4096 4096 NT_STATUS_OK
ReadX 10346 192512 4096 4096 NT_STATUS_OK
ReadX 10346 258048 4096 4096 NT_STATUS_OK
ReadX 10346 323584 4096 4096 NT_STATUS_OK
ReadX 10346 389120 4096 4096 NT_STATUS_OK
ReadX 10346 454656 4096 4096 NT_STATUS_OK
ReadX 10346 520192 4096 4096 NT_STATUS_OK
WriteX 10346 0 65536 65536 NT_STATUS_OK
WriteX 10346 65536 65536 65536 NT_STATUS_OK
WriteX 10346 131072 65536 65536 NT_STATUS_OK
WriteX 10346 196608 65536 65536 NT_STATUS_OK
WriteX 10346 262144 65536 65536 NT_STATUS_OK
WriteX 10346 327680 65536 65536 NT_STATUS_OK
WriteX 10346 393216 65536 65536 NT_STATUS_OK
WriteX 10346 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
ReadX 10347 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10348 NT_STATUS_OK
WriteX 10348 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10348 258 NT_STATUS_OK
WriteX 10348 0 53 53 NT_STATUS_OK
Close 10348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10347 8192 4096 4096 NT_STATUS_OK
ReadX 10347 12288 4096 4096 NT_STATUS_OK
WriteX 10351 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
ReadX 10347 16384 4096 4096 NT_STATUS_OK
ReadX 10347 20480 4096 4096 NT_STATUS_OK
WriteX 10351 0 15360 15360 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10352 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10352 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
Close 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10353 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10355 NT_STATUS_OK
ReadX 10355 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10355 4096 4096 4096 NT_STATUS_OK
ReadX 10355 8192 4096 4096 NT_STATUS_OK
ReadX 10355 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
ReadX 10358 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
ReadX 10359 4096 4096 4096 NT_STATUS_OK
ReadX 10359 8192 4096 4096 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10360 NT_STATUS_OK
WriteX 10360 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 258 NT_STATUS_OK
WriteX 10360 0 15360 15360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10361 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10365 NT_STATUS_OK
SET_FILE_INFORMATION 10365 1004 NT_STATUS_OK
Close 10365 NT_STATUS_OK
WriteX 10361 0 4096 4096 NT_STATUS_OK
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
ReadX 10368 4096 4096 4096 NT_STATUS_OK
ReadX 10368 8192 4096 4096 NT_STATUS_OK
ReadX 10368 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10369 NT_STATUS_OK
ReadX 10369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10370 NT_STATUS_OK
WriteX 10370 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10370 258 NT_STATUS_OK
WriteX 10370 0 53 53 NT_STATUS_OK
Close 10370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10369 4096 4096 4096 NT_STATUS_OK
ReadX 10369 8192 4096 4096 NT_STATUS_OK
ReadX 10369 12288 4096 4096 NT_STATUS_OK
WriteX 10373 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 258 NT_STATUS_OK
WriteX 10373 0 12006 12006 NT_STATUS_OK
Close 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10374 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10374 1004 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10375 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10377 4096 4096 4096 NT_STATUS_OK
ReadX 10377 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10380 NT_STATUS_OK
WriteX 10380 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10380 258 NT_STATUS_OK
WriteX 10380 0 11991 11991 NT_STATUS_OK
Close 10380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10381 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10381 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10382 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10384 NT_STATUS_OK
ReadX 10384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10385 NT_STATUS_OK
SET_FILE_INFORMATION 10385 1004 NT_STATUS_OK
Close 10385 NT_STATUS_OK
WriteX 10381 0 4096 4096 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10386 NT_STATUS_OK
Close 10386 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10388 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10388 1004 NT_STATUS_OK
ReadX 10388 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10388 1004 NT_STATUS_OK
WriteX 10388 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10388 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10388 1004 NT_STATUS_OK
Close 10364 NT_STATUS_OK
WriteX 10368 0 19054 19054 NT_STATUS_OK
WriteX 10388 0 12288 12288 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10391 NT_STATUS_OK
Close 10391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 61440 61440 NT_STATUS_OK
ReadX 10395 61440 4096 4096 NT_STATUS_OK
ReadX 10395 65536 61440 61440 NT_STATUS_OK
ReadX 10395 126976 4096 4096 NT_STATUS_OK
ReadX 10395 131072 61440 61440 NT_STATUS_OK
ReadX 10395 192512 4096 4096 NT_STATUS_OK
ReadX 10395 196608 61440 61440 NT_STATUS_OK
ReadX 10395 258048 4096 4096 NT_STATUS_OK
ReadX 10395 262144 61440 61440 NT_STATUS_OK
ReadX 10395 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 61440 61440 NT_STATUS_OK
ReadX 10396 61440 4096 4096 NT_STATUS_OK
ReadX 10396 65536 61440 61440 NT_STATUS_OK
ReadX 10396 126976 4096 4096 NT_STATUS_OK
ReadX 10396 131072 61440 61440 NT_STATUS_OK
ReadX 10396 192512 4096 4096 NT_STATUS_OK
ReadX 10396 196608 61440 61440 NT_STATUS_OK
ReadX 10396 258048 4096 4096 NT_STATUS_OK
ReadX 10396 262144 61440 61440 NT_STATUS_OK
ReadX 10396 323584 4096 4096 NT_STATUS_OK
ReadX 10396 327680 61440 61440 NT_STATUS_OK
ReadX 10396 389120 4096 4096 NT_STATUS_OK
ReadX 10396 393216 61440 61440 NT_STATUS_OK
ReadX 10396 454656 4096 4096 NT_STATUS_OK
ReadX 10396 458752 61440 61440 NT_STATUS_OK
ReadX 10396 520192 4096 4096 NT_STATUS_OK
ReadX 10396 524288 61440 61440 NT_STATUS_OK
ReadX 10396 585728 4096 4096 NT_STATUS_OK
ReadX 10396 589824 61440 61440 NT_STATUS_OK
ReadX 10396 651264 4096 4096 NT_STATUS_OK
ReadX 10396 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 61440 61440 NT_STATUS_OK
ReadX 10397 61440 4096 4096 NT_STATUS_OK
ReadX 10397 65536 61440 61440 NT_STATUS_OK
ReadX 10397 126976 4096 4096 NT_STATUS_OK
ReadX 10397 131072 61440 61440 NT_STATUS_OK
ReadX 10397 192512 4096 4096 NT_STATUS_OK
ReadX 10397 196608 61440 61440 NT_STATUS_OK
ReadX 10397 258048 4096 4096 NT_STATUS_OK
ReadX 10397 262144 61440 61440 NT_STATUS_OK
ReadX 10397 323584 4096 4096 NT_STATUS_OK
ReadX 10397 327680 61440 61440 NT_STATUS_OK
ReadX 10397 389120 4096 4096 NT_STATUS_OK
ReadX 10397 393216 61440 61440 NT_STATUS_OK
ReadX 10397 454656 4096 4096 NT_STATUS_OK
ReadX 10397 458752 61440 61440 NT_STATUS_OK
ReadX 10397 520192 4096 4096 NT_STATUS_OK
ReadX 10397 524288 61440 61440 NT_STATUS_OK
ReadX 10397 585728 4096 4096 NT_STATUS_OK
ReadX 10397 589824 61440 61440 NT_STATUS_OK
ReadX 10397 651264 4096 4096 NT_STATUS_OK
ReadX 10397 655360 61440 61440 NT_STATUS_OK
ReadX 10397 716800 4096 4096 NT_STATUS_OK
ReadX 10397 720896 61440 61440 NT_STATUS_OK
ReadX 10397 782336 4096 4096 NT_STATUS_OK
ReadX 10397 786432 61440 61440 NT_STATUS_OK
ReadX 10397 847872 4096 4096 NT_STATUS_OK
ReadX 10397 851968 61440 61440 NT_STATUS_OK
ReadX 10397 913408 4096 4096 NT_STATUS_OK
ReadX 10397 917504 61440 61440 NT_STATUS_OK
ReadX 10397 978944 4096 4096 NT_STATUS_OK
ReadX 10397 983040 61440 61440 NT_STATUS_OK
ReadX 10397 1044480 4096 4096 NT_STATUS_OK
ReadX 10397 1048576 61440 61440 NT_STATUS_OK
ReadX 10397 1110016 4096 4096 NT_STATUS_OK
ReadX 10397 1114112 61440 61440 NT_STATUS_OK
ReadX 10397 1175552 4096 4096 NT_STATUS_OK
ReadX 10397 1179648 61440 61440 NT_STATUS_OK
ReadX 10397 1241088 4096 4096 NT_STATUS_OK
ReadX 10397 1245184 61440 61440 NT_STATUS_OK
ReadX 10397 1306624 4096 4096 NT_STATUS_OK
ReadX 10397 1310720 61440 61440 NT_STATUS_OK
ReadX 10397 1372160 4096 4096 NT_STATUS_OK
ReadX 10397 1376256 61440 61440 NT_STATUS_OK
ReadX 10397 1437696 4096 4096 NT_STATUS_OK
ReadX 10397 1441792 61440 61440 NT_STATUS_OK
ReadX 10397 1503232 4096 4096 NT_STATUS_OK
ReadX 10397 1507328 61440 61440 NT_STATUS_OK
ReadX 10397 1568768 4096 4096 NT_STATUS_OK
ReadX 10397 1572864 61440 61440 NT_STATUS_OK
ReadX 10397 1634304 4096 4096 NT_STATUS_OK
ReadX 10397 1638400 61440 61440 NT_STATUS_OK
ReadX 10397 1699840 4096 4096 NT_STATUS_OK
ReadX 10397 1703936 61440 61440 NT_STATUS_OK
ReadX 10397 1765376 4096 4096 NT_STATUS_OK
ReadX 10397 1769472 61440 61440 NT_STATUS_OK
ReadX 10397 1830912 4096 4096 NT_STATUS_OK
ReadX 10397 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10399 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10404 NT_STATUS_OK
QUERY_FILE_INFORMATION 10404 1004 NT_STATUS_OK
WriteX 10404 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10404 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10405 NT_STATUS_OK
Close 10405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10406 NT_STATUS_OK
WriteX 10406 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
WriteX 10406 0 491 491 NT_STATUS_OK
Close 10406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10404 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10410 NT_STATUS_OK
WriteX 10410 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 543 543 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10424 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 1004 NT_STATUS_OK
WriteX 10424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
WriteX 10424 0 2048 2048 NT_STATUS_OK
Close 10424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10425 NT_STATUS_OK
ReadX 10425 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10425 0 4096 4096 NT_STATUS_OK
Flush 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10430 NT_STATUS_OK
WriteX 10430 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 258 NT_STATUS_OK
WriteX 10430 0 2048 2048 NT_STATUS_OK
Close 10430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10435 NT_STATUS_OK
Close 10435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10436 NT_STATUS_OK
WriteX 10436 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10436 258 NT_STATUS_OK
WriteX 10436 0 2048 2048 NT_STATUS_OK
Close 10436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 2048 2048 NT_STATUS_OK
ReadX 10415 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10431 0 4096 4096 NT_STATUS_OK
WriteX 10415 0 8192 8192 NT_STATUS_OK
WriteX 10416 0 4096 4096 NT_STATUS_OK
WriteX 10417 0 4096 4096 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10441 NT_STATUS_OK
QUERY_FILE_INFORMATION 10441 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10444 NT_STATUS_OK
ReadX 10444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10447 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10456 NT_STATUS_OK
ReadX 10456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10461 NT_STATUS_OK
QUERY_FILE_INFORMATION 10461 1004 NT_STATUS_OK
WriteX 10461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10461 258 NT_STATUS_OK
WriteX 10461 0 2048 2048 NT_STATUS_OK
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10469 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 1004 NT_STATUS_OK
WriteX 10469 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 2048 2048 NT_STATUS_OK
Close 10469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10462 0 4096 4096 NT_STATUS_OK
Flush 10462 NT_STATUS_OK
WriteX 10470 0 4096 4096 NT_STATUS_OK
Flush 10470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10470 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10464 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10472 NT_STATUS_OK
WriteX 10472 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10472 258 NT_STATUS_OK
WriteX 10472 0 4096 4096 NT_STATUS_OK
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10474 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10475 NT_STATUS_OK
WriteX 10475 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10475 258 NT_STATUS_OK
WriteX 10475 0 4096 4096 NT_STATUS_OK
Close 10475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10476 0 4096 4096 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Close 10447 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10479 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10482 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10483 NT_STATUS_OK
WriteX 10483 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10483 258 NT_STATUS_OK
WriteX 10483 0 2048 2048 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10498 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10500 NT_STATUS_OK
QUERY_FILE_INFORMATION 10500 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10512 NT_STATUS_OK
ReadX 10512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10520 NT_STATUS_OK
QUERY_FILE_INFORMATION 10520 1004 NT_STATUS_OK
WriteX 10520 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10520 258 NT_STATUS_OK
WriteX 10520 0 2048 2048 NT_STATUS_OK
Close 10520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10532 NT_STATUS_OK
QUERY_FILE_INFORMATION 10532 1004 NT_STATUS_OK
WriteX 10532 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10532 258 NT_STATUS_OK
WriteX 10532 0 2048 2048 NT_STATUS_OK
Close 10532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10535 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10540 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 1004 NT_STATUS_OK
WriteX 10540 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 258 NT_STATUS_OK
WriteX 10540 0 2048 2048 NT_STATUS_OK
Close 10540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10541 NT_STATUS_OK
ReadX 10541 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10521 0 4096 4096 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Flush 10521 NT_STATUS_OK
Close 10515 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Close 10507 NT_STATUS_OK
Flush 10533 NT_STATUS_OK
WriteX 10541 0 4096 4096 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Flush 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10535 NT_STATUS_OK
WriteX 10521 0 4096 4096 NT_STATUS_OK
Close 10505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10514 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10513 NT_STATUS_OK
WriteX 10541 0 4096 4096 NT_STATUS_OK
Close 10510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10542 NT_STATUS_OK
Close 10511 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10551 NT_STATUS_OK
ReadX 10551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10553 NT_STATUS_OK
ReadX 10553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10554 NT_STATUS_OK
ReadX 10554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10555 NT_STATUS_OK
ReadX 10555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10556 NT_STATUS_OK
ReadX 10556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10559 NT_STATUS_OK
ReadX 10559 0 543 543 NT_STATUS_OK
ReadX 10555 4096 16384 16384 NT_STATUS_OK
ReadX 10542 4096 16384 16384 NT_STATUS_OK
ReadX 10547 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10560 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 2048 2048 NT_STATUS_OK
WriteX 10561 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10562 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10554 NT_STATUS_OK
Close 10546 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Close 10556 NT_STATUS_OK
Close 10557 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10564 NT_STATUS_OK
QUERY_FILE_INFORMATION 10564 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10566 NT_STATUS_OK
QUERY_FILE_INFORMATION 10566 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10569 4096 16384 16384 NT_STATUS_OK
WriteX 10569 0 4096 4096 NT_STATUS_OK
WriteX 10570 0 4096 4096 NT_STATUS_OK
WriteX 10571 0 4096 4096 NT_STATUS_OK
WriteX 10572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10576 NT_STATUS_OK
ReadX 10576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10584 NT_STATUS_OK
ReadX 10584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10585 NT_STATUS_OK
ReadX 10585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 8192 8192 NT_STATUS_OK
ReadX 10575 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10589 0 4096 4096 NT_STATUS_OK
ReadX 10589 4096 4096 4096 NT_STATUS_OK
ReadX 10589 8192 4096 4096 NT_STATUS_OK
WriteX 10575 0 4096 4096 NT_STATUS_OK
WriteX 10576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10590 0 4096 4096 NT_STATUS_OK
ReadX 10590 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10569 0 4096 4096 NT_STATUS_OK
WriteX 10570 0 4096 4096 NT_STATUS_OK
WriteX 10571 0 4096 4096 NT_STATUS_OK
WriteX 10572 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10595 NT_STATUS_OK
QUERY_FILE_INFORMATION 10595 1004 NT_STATUS_OK
WriteX 10595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10595 258 NT_STATUS_OK
WriteX 10595 0 2048 2048 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10596 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10596 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
ReadX 10598 4096 4096 4096 NT_STATUS_OK
WriteX 10598 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10596 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
ReadX 10600 4096 4096 4096 NT_STATUS_OK
WriteX 10600 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10601 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Close 10584 NT_STATUS_OK
Close 10585 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10575 NT_STATUS_OK
Close 10576 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10603 0 4096 4096 NT_STATUS_OK
ReadX 10603 4096 4096 4096 NT_STATUS_OK
ReadX 10603 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10606 NT_STATUS_OK
ReadX 10606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10609 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10612 NT_STATUS_OK
ReadX 10612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10614 NT_STATUS_OK
ReadX 10614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10616 NT_STATUS_OK
ReadX 10616 0 4096 4096 NT_STATUS_OK
ReadX 10604 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10621 NT_STATUS_OK
QUERY_FILE_INFORMATION 10621 1004 NT_STATUS_OK
WriteX 10621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10621 258 NT_STATUS_OK
WriteX 10621 0 2048 2048 NT_STATUS_OK
Close 10621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10622 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10627 NT_STATUS_OK
QUERY_FILE_INFORMATION 10627 1004 NT_STATUS_OK
WriteX 10627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10627 258 NT_STATUS_OK
WriteX 10627 0 2048 2048 NT_STATUS_OK
Close 10627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10611 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10629 NT_STATUS_OK
QUERY_FILE_INFORMATION 10629 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10615 NT_STATUS_OK
Close 10610 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Close 10604 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Close 10612 NT_STATUS_OK
Close 10613 NT_STATUS_OK
Close 10614 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10631 NT_STATUS_OK
QUERY_FILE_INFORMATION 10631 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 61440 4096 4096 NT_STATUS_OK
ReadX 10633 126976 4096 4096 NT_STATUS_OK
WriteX 10633 0 65536 65536 NT_STATUS_OK
WriteX 10633 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 61440 4096 4096 NT_STATUS_OK
ReadX 10634 126976 4096 4096 NT_STATUS_OK
ReadX 10634 192512 4096 4096 NT_STATUS_OK
ReadX 10634 258048 4096 4096 NT_STATUS_OK
WriteX 10634 0 65536 65536 NT_STATUS_OK
WriteX 10634 65536 65536 65536 NT_STATUS_OK
WriteX 10634 131072 65536 65536 NT_STATUS_OK
WriteX 10634 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 61440 4096 4096 NT_STATUS_OK
ReadX 10635 126976 4096 4096 NT_STATUS_OK
ReadX 10635 192512 4096 4096 NT_STATUS_OK
ReadX 10635 258048 4096 4096 NT_STATUS_OK
ReadX 10635 323584 4096 4096 NT_STATUS_OK
ReadX 10635 389120 4096 4096 NT_STATUS_OK
ReadX 10635 454656 4096 4096 NT_STATUS_OK
ReadX 10635 520192 4096 4096 NT_STATUS_OK
WriteX 10635 0 65536 65536 NT_STATUS_OK
WriteX 10635 65536 65536 65536 NT_STATUS_OK
WriteX 10635 131072 65536 65536 NT_STATUS_OK
WriteX 10635 196608 65536 65536 NT_STATUS_OK
WriteX 10635 262144 65536 65536 NT_STATUS_OK
WriteX 10635 327680 65536 65536 NT_STATUS_OK
WriteX 10635 393216 65536 65536 NT_STATUS_OK
WriteX 10635 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10636 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10636 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10636 8192 4096 4096 NT_STATUS_OK
ReadX 10636 12288 4096 4096 NT_STATUS_OK
ReadX 10636 16384 4096 4096 NT_STATUS_OK
ReadX 10636 20480 4096 4096 NT_STATUS_OK
ReadX 10636 24576 4096 4096 NT_STATUS_OK
ReadX 10636 28672 4096 4096 NT_STATUS_OK
ReadX 10636 32768 4096 4096 NT_STATUS_OK
ReadX 10636 36864 4096 4096 NT_STATUS_OK
ReadX 10636 40960 4096 4096 NT_STATUS_OK
ReadX 10636 45056 4096 4096 NT_STATUS_OK
ReadX 10636 49152 4096 4096 NT_STATUS_OK
ReadX 10636 53248 4096 4096 NT_STATUS_OK
ReadX 10636 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10636 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10637 NT_STATUS_OK
Close 10637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10639 NT_STATUS_OK
WriteX 10639 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10639 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10639 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10639 1004 NT_STATUS_OK
WriteX 10639 0 57088 57088 NT_STATUS_OK
WriteX 10639 0 4096 4096 NT_STATUS_OK
Flush 10639 NT_STATUS_OK
Close 10636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10640 NT_STATUS_OK
SET_FILE_INFORMATION 10640 1004 NT_STATUS_OK
Close 10640 NT_STATUS_OK
SET_FILE_INFORMATION 10639 1004 NT_STATUS_OK
WriteX 10639 0 4096 4096 NT_STATUS_OK
Close 10639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10643 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10644 NT_STATUS_OK
WriteX 10644 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10644 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10644 1004 NT_STATUS_OK
WriteX 10644 0 51456 51456 NT_STATUS_OK
WriteX 10644 0 4096 4096 NT_STATUS_OK
Flush 10644 NT_STATUS_OK
SET_FILE_INFORMATION 10644 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10644 1004 NT_STATUS_OK
WriteX 10644 0 4096 4096 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10646 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10648 NT_STATUS_OK
ReadX 10648 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10648 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10653 NT_STATUS_OK
WriteX 10653 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10653 258 NT_STATUS_OK
WriteX 10653 0 53077 53077 NT_STATUS_OK
Close 10653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10654 NT_STATUS_OK
WriteX 10654 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10654 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10654 1004 NT_STATUS_OK
WriteX 10654 0 65536 65536 NT_STATUS_OK
WriteX 10654 65536 1856 1856 NT_STATUS_OK
WriteX 10654 0 4096 4096 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
SET_FILE_INFORMATION 10654 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10654 1004 NT_STATUS_OK
WriteX 10654 0 4096 4096 NT_STATUS_OK
Close 10654 NT_STATUS_OK
Close 10648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10660 NT_STATUS_OK
Close 10660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10663 NT_STATUS_OK
WriteX 10663 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 258 NT_STATUS_OK
WriteX 10663 0 7983 7983 NT_STATUS_OK
Close 10663 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10668 NT_STATUS_OK
WriteX 10668 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10668 258 NT_STATUS_OK
WriteX 10668 0 65536 65536 NT_STATUS_OK
WriteX 10668 65536 65536 65536 NT_STATUS_OK
WriteX 10668 131072 65536 65536 NT_STATUS_OK
WriteX 10668 196608 65536 65536 NT_STATUS_OK
WriteX 10668 262144 65536 65536 NT_STATUS_OK
WriteX 10668 327680 65536 65536 NT_STATUS_OK
WriteX 10668 393216 65536 65536 NT_STATUS_OK
WriteX 10668 458752 46731 46731 NT_STATUS_OK
Close 10668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10669 NT_STATUS_OK
WriteX 10669 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10669 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10658 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10669 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10669 1004 NT_STATUS_OK
WriteX 10669 0 65536 65536 NT_STATUS_OK
WriteX 10669 65536 22848 22848 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
SET_FILE_INFORMATION 10669 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10669 1004 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10671 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10673 NT_STATUS_OK
ReadX 10673 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10673 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10674 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10674 1004 NT_STATUS_OK
ReadX 10674 8192 4096 4096 NT_STATUS_OK
ReadX 10674 12288 4096 4096 NT_STATUS_OK
ReadX 10674 16384 4096 4096 NT_STATUS_OK
ReadX 10674 20480 4096 4096 NT_STATUS_OK
ReadX 10674 24576 4096 4096 NT_STATUS_OK
ReadX 10674 28672 4096 4096 NT_STATUS_OK
ReadX 10674 32768 4096 4096 NT_STATUS_OK
ReadX 10674 36864 4096 4096 NT_STATUS_OK
ReadX 10674 40960 4096 4096 NT_STATUS_OK
ReadX 10674 45056 4096 4096 NT_STATUS_OK
ReadX 10674 49152 4096 4096 NT_STATUS_OK
ReadX 10674 53248 4096 4096 NT_STATUS_OK
ReadX 10674 57344 4096 4096 NT_STATUS_OK
ReadX 10674 61440 4096 4096 NT_STATUS_OK
ReadX 10674 65536 4096 4096 NT_STATUS_OK
ReadX 10674 69632 4096 4096 NT_STATUS_OK
ReadX 10674 73728 4096 4096 NT_STATUS_OK
ReadX 10674 77824 4096 4096 NT_STATUS_OK
ReadX 10674 81920 4096 4096 NT_STATUS_OK
ReadX 10674 86016 4096 4096 NT_STATUS_OK
ReadX 10674 90112 4096 4096 NT_STATUS_OK
ReadX 10674 94208 4096 4096 NT_STATUS_OK
ReadX 10674 98304 4096 4096 NT_STATUS_OK
ReadX 10674 102400 4096 4096 NT_STATUS_OK
ReadX 10674 106496 4096 4096 NT_STATUS_OK
ReadX 10674 110592 4096 4096 NT_STATUS_OK
ReadX 10674 114688 4096 4096 NT_STATUS_OK
ReadX 10674 118784 4096 4096 NT_STATUS_OK
ReadX 10674 122880 4096 4096 NT_STATUS_OK
ReadX 10674 126976 4096 4096 NT_STATUS_OK
ReadX 10674 131072 4096 4096 NT_STATUS_OK
ReadX 10674 135168 4096 4096 NT_STATUS_OK
ReadX 10674 139264 4096 4096 NT_STATUS_OK
ReadX 10674 143360 4096 4096 NT_STATUS_OK
ReadX 10674 147456 4096 4096 NT_STATUS_OK
ReadX 10674 151552 4096 4096 NT_STATUS_OK
ReadX 10674 155648 4096 4096 NT_STATUS_OK
ReadX 10674 159744 4096 4096 NT_STATUS_OK
ReadX 10674 163840 4096 4096 NT_STATUS_OK
ReadX 10674 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10674 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10673 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10677 NT_STATUS_OK
WriteX 10677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 258 NT_STATUS_OK
Close 10674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10678 NT_STATUS_OK
SET_FILE_INFORMATION 10678 1004 NT_STATUS_OK
Close 10678 NT_STATUS_OK
WriteX 10677 0 42388 42388 NT_STATUS_OK
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10679 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
ReadX 10681 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10682 NT_STATUS_OK
WriteX 10682 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10682 258 NT_STATUS_OK
SET_FILE_INFORMATION 10682 1004 NT_STATUS_OK
WriteX 10682 0 42652 42652 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10684 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10686 NT_STATUS_OK
ReadX 10686 0 4096 4096 NT_STATUS_OK
ReadX 10686 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10688 NT_STATUS_OK
Close 10688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10691 NT_STATUS_OK
WriteX 10691 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10691 258 NT_STATUS_OK
WriteX 10691 0 65536 65536 NT_STATUS_OK
WriteX 10691 65536 49 49 NT_STATUS_OK
Close 10691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 61440 61440 NT_STATUS_OK
ReadX 10692 61440 4096 4096 NT_STATUS_OK
ReadX 10692 65536 61440 61440 NT_STATUS_OK
ReadX 10692 126976 4096 4096 NT_STATUS_OK
ReadX 10692 131072 61440 61440 NT_STATUS_OK
ReadX 10692 192512 4096 4096 NT_STATUS_OK
ReadX 10692 196608 61440 61440 NT_STATUS_OK
ReadX 10692 258048 4096 4096 NT_STATUS_OK
ReadX 10692 262144 61440 61440 NT_STATUS_OK
ReadX 10692 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 61440 61440 NT_STATUS_OK
ReadX 10693 61440 4096 4096 NT_STATUS_OK
ReadX 10693 65536 61440 61440 NT_STATUS_OK
ReadX 10693 126976 4096 4096 NT_STATUS_OK
ReadX 10693 131072 61440 61440 NT_STATUS_OK
ReadX 10693 192512 4096 4096 NT_STATUS_OK
ReadX 10693 196608 61440 61440 NT_STATUS_OK
ReadX 10693 258048 4096 4096 NT_STATUS_OK
ReadX 10693 262144 61440 61440 NT_STATUS_OK
ReadX 10693 323584 4096 4096 NT_STATUS_OK
ReadX 10693 327680 61440 61440 NT_STATUS_OK
ReadX 10693 389120 4096 4096 NT_STATUS_OK
ReadX 10693 393216 61440 61440 NT_STATUS_OK
ReadX 10693 454656 4096 4096 NT_STATUS_OK
ReadX 10693 458752 61440 61440 NT_STATUS_OK
ReadX 10693 520192 4096 4096 NT_STATUS_OK
ReadX 10693 524288 61440 61440 NT_STATUS_OK
ReadX 10693 585728 4096 4096 NT_STATUS_OK
ReadX 10693 589824 61440 61440 NT_STATUS_OK
ReadX 10693 651264 4096 4096 NT_STATUS_OK
ReadX 10693 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 61440 61440 NT_STATUS_OK
ReadX 10694 61440 4096 4096 NT_STATUS_OK
ReadX 10694 65536 61440 61440 NT_STATUS_OK
ReadX 10694 126976 4096 4096 NT_STATUS_OK
ReadX 10694 131072 61440 61440 NT_STATUS_OK
ReadX 10694 192512 4096 4096 NT_STATUS_OK
ReadX 10694 196608 61440 61440 NT_STATUS_OK
ReadX 10694 258048 4096 4096 NT_STATUS_OK
ReadX 10694 262144 61440 61440 NT_STATUS_OK
ReadX 10694 323584 4096 4096 NT_STATUS_OK
ReadX 10694 327680 61440 61440 NT_STATUS_OK
ReadX 10694 389120 4096 4096 NT_STATUS_OK
ReadX 10694 393216 61440 61440 NT_STATUS_OK
ReadX 10694 454656 4096 4096 NT_STATUS_OK
ReadX 10694 458752 61440 61440 NT_STATUS_OK
ReadX 10694 520192 4096 4096 NT_STATUS_OK
ReadX 10694 524288 61440 61440 NT_STATUS_OK
ReadX 10694 585728 4096 4096 NT_STATUS_OK
ReadX 10694 589824 61440 61440 NT_STATUS_OK
ReadX 10694 651264 4096 4096 NT_STATUS_OK
ReadX 10694 655360 61440 61440 NT_STATUS_OK
ReadX 10694 716800 4096 4096 NT_STATUS_OK
ReadX 10694 720896 61440 61440 NT_STATUS_OK
ReadX 10694 782336 4096 4096 NT_STATUS_OK
ReadX 10694 786432 61440 61440 NT_STATUS_OK
ReadX 10694 847872 4096 4096 NT_STATUS_OK
ReadX 10694 851968 61440 61440 NT_STATUS_OK
ReadX 10694 913408 4096 4096 NT_STATUS_OK
ReadX 10694 917504 61440 61440 NT_STATUS_OK
ReadX 10694 978944 4096 4096 NT_STATUS_OK
ReadX 10694 983040 61440 61440 NT_STATUS_OK
ReadX 10694 1044480 4096 4096 NT_STATUS_OK
ReadX 10694 1048576 61440 61440 NT_STATUS_OK
ReadX 10694 1110016 4096 4096 NT_STATUS_OK
ReadX 10694 1114112 61440 61440 NT_STATUS_OK
ReadX 10694 1175552 4096 4096 NT_STATUS_OK
ReadX 10694 1179648 61440 61440 NT_STATUS_OK
ReadX 10694 1241088 4096 4096 NT_STATUS_OK
ReadX 10694 1245184 61440 61440 NT_STATUS_OK
ReadX 10694 1306624 4096 4096 NT_STATUS_OK
ReadX 10694 1310720 61440 61440 NT_STATUS_OK
ReadX 10694 1372160 4096 4096 NT_STATUS_OK
ReadX 10694 1376256 61440 61440 NT_STATUS_OK
ReadX 10694 1437696 4096 4096 NT_STATUS_OK
ReadX 10694 1441792 61440 61440 NT_STATUS_OK
ReadX 10694 1503232 4096 4096 NT_STATUS_OK
ReadX 10694 1507328 61440 61440 NT_STATUS_OK
ReadX 10694 1568768 4096 4096 NT_STATUS_OK
ReadX 10694 1572864 61440 61440 NT_STATUS_OK
ReadX 10694 1634304 4096 4096 NT_STATUS_OK
ReadX 10694 1638400 61440 61440 NT_STATUS_OK
ReadX 10694 1699840 4096 4096 NT_STATUS_OK
ReadX 10694 1703936 61440 61440 NT_STATUS_OK
ReadX 10694 1765376 4096 4096 NT_STATUS_OK
ReadX 10694 1769472 61440 61440 NT_STATUS_OK
ReadX 10694 1830912 4096 4096 NT_STATUS_OK
ReadX 10694 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10696 NT_STATUS_OK
QUERY_FILE_INFORMATION 10696 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10696 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10696 1005 NT_STATUS_OK
ReadX 10696 2156 24 24 NT_STATUS_OK
ReadX 10696 2139 276 276 NT_STATUS_OK
ReadX 10696 2136 14 14 NT_STATUS_OK
ReadX 10696 2136 7 7 NT_STATUS_OK
ReadX 10696 2138 12 12 NT_STATUS_OK
ReadX 10696 2137 8 8 NT_STATUS_OK
ReadX 10696 2135 15 15 NT_STATUS_OK
ReadX 10696 0 16 16 NT_STATUS_OK
ReadX 10696 16 2048 2048 NT_STATUS_OK
ReadX 10696 2064 2048 2048 NT_STATUS_OK
ReadX 10696 257 2048 2048 NT_STATUS_OK
ReadX 10696 385 2048 2048 NT_STATUS_OK
ReadX 10696 513 2048 2048 NT_STATUS_OK
ReadX 10696 641 2048 2048 NT_STATUS_OK
ReadX 10696 769 2048 2048 NT_STATUS_OK
ReadX 10696 897 2048 2048 NT_STATUS_OK
ReadX 10696 1025 2048 2048 NT_STATUS_OK
ReadX 10696 1153 2048 2048 NT_STATUS_OK
ReadX 10696 1281 2048 2048 NT_STATUS_OK
ReadX 10696 1409 2048 2048 NT_STATUS_OK
ReadX 10696 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10692 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Close 10694 NT_STATUS_OK
Close 10686 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10701 NT_STATUS_OK
WriteX 10701 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10701 258 NT_STATUS_OK
WriteX 10701 0 10575 10575 NT_STATUS_OK
Flush 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10706 NT_STATUS_OK
LockX 10706 2147483538 1 NT_STATUS_OK
UnlockX 10706 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 1005 NT_STATUS_OK
ReadX 10706 0 512 512 NT_STATUS_OK
ReadX 10706 512 512 512 NT_STATUS_OK
ReadX 10706 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 1004 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10707 NT_STATUS_OK
QUERY_FILE_INFORMATION 10707 1005 NT_STATUS_OK
ReadX 10707 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10708 NT_STATUS_OK
LockX 10708 2147483538 1 NT_STATUS_OK
UnlockX 10708 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10708 1005 NT_STATUS_OK
ReadX 10708 0 512 512 NT_STATUS_OK
ReadX 10708 512 512 512 NT_STATUS_OK
ReadX 10708 1024 512 512 NT_STATUS_OK
ReadX 10708 288 20 20 NT_STATUS_OK
ReadX 10708 308 2084 2084 NT_STATUS_OK
ReadX 10708 388 2084 2084 NT_STATUS_OK
ReadX 10708 388 2084 2084 NT_STATUS_OK
ReadX 10695 2157 1386 1386 NT_STATUS_OK
ReadX 10708 2472 399 399 NT_STATUS_OK
ReadX 10708 3072 1536 1536 NT_STATUS_OK
ReadX 10708 544 149 149 NT_STATUS_OK
ReadX 10708 693 485 485 NT_STATUS_OK
Close 10708 NT_STATUS_OK
ReadX 10695 2157 4096 4096 NT_STATUS_OK
ReadX 10695 6253 4096 4096 NT_STATUS_OK
ReadX 10695 10349 4096 4096 NT_STATUS_OK
ReadX 10695 14445 4096 4096 NT_STATUS_OK
ReadX 10695 18541 4096 4096 NT_STATUS_OK
ReadX 10695 22637 256 256 NT_STATUS_OK
ReadX 10695 22893 4096 4096 NT_STATUS_OK
ReadX 10695 26989 4096 4096 NT_STATUS_OK
ReadX 10695 31085 4096 4096 NT_STATUS_OK
ReadX 10695 35181 4096 4096 NT_STATUS_OK
ReadX 10695 39277 4096 4096 NT_STATUS_OK
ReadX 10695 43373 4096 4096 NT_STATUS_OK
ReadX 10695 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10695 2157 1024 1024 NT_STATUS_OK
ReadX 10695 1667 4688 4688 NT_STATUS_OK
ReadX 10695 6355 3516 3516 NT_STATUS_OK
ReadX 10695 9871 16384 16384 NT_STATUS_OK
ReadX 10695 26255 3771 3771 NT_STATUS_OK
ReadX 10695 30026 2048 2048 NT_STATUS_OK
ReadX 10695 32074 1024 1024 NT_STATUS_OK
ReadX 10695 33098 6652 6652 NT_STATUS_OK
ReadX 10695 39750 16384 16384 NT_STATUS_OK
ReadX 10695 56134 10496 10496 NT_STATUS_OK
ReadX 10695 66630 1784 1784 NT_STATUS_OK
ReadX 10695 68414 90 90 NT_STATUS_OK
ReadX 10695 68504 273 273 NT_STATUS_OK
ReadX 10695 68777 1600 1600 NT_STATUS_OK
ReadX 10695 70377 640 640 NT_STATUS_OK
ReadX 10695 71017 1280 1280 NT_STATUS_OK
ReadX 10695 72297 8464 8464 NT_STATUS_OK
ReadX 10695 80761 158 158 NT_STATUS_OK
ReadX 10695 80919 912 912 NT_STATUS_OK
ReadX 10695 81831 1980 1980 NT_STATUS_OK
ReadX 10695 83811 2256 2256 NT_STATUS_OK
ReadX 10695 86067 400 400 NT_STATUS_OK
ReadX 10695 86467 252 252 NT_STATUS_OK
ReadX 10695 86719 42 42 NT_STATUS_OK
ReadX 10695 86761 725 725 NT_STATUS_OK
ReadX 10695 2009 512 512 NT_STATUS_OK
ReadX 10695 3895 9 9 NT_STATUS_OK
ReadX 10695 3781 46 46 NT_STATUS_OK
ReadX 10695 4059 92 92 NT_STATUS_OK
ReadX 10695 3781 92 92 NT_STATUS_OK
ReadX 10695 3986 184 184 NT_STATUS_OK
ReadX 10695 3987 16384 16384 NT_STATUS_OK
ReadX 10695 3902 16384 16384 NT_STATUS_OK
ReadX 10695 3781 10240 10240 NT_STATUS_OK
ReadX 10695 3821 16384 16384 NT_STATUS_OK
ReadX 10695 3891 935 935 NT_STATUS_OK
ReadX 10695 4060 10240 10240 NT_STATUS_OK
ReadX 10695 4059 184 184 NT_STATUS_OK
ReadX 10695 256 184 184 NT_STATUS_OK
ReadX 10695 256 1026 1026 NT_STATUS_OK
ReadX 10695 3901 326 326 NT_STATUS_OK
ReadX 10695 3899 652 652 NT_STATUS_OK
ReadX 10695 256 2 2 NT_STATUS_OK
ReadX 10695 258 4948 4948 NT_STATUS_OK
Close 10695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10710 NT_STATUS_OK
Close 10710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10713 NT_STATUS_OK
WriteX 10713 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 258 NT_STATUS_OK
WriteX 10713 0 65536 65536 NT_STATUS_OK
WriteX 10713 65536 65536 65536 NT_STATUS_OK
WriteX 10713 131072 65536 65536 NT_STATUS_OK
WriteX 10713 196608 65536 65536 NT_STATUS_OK
WriteX 10713 262144 65536 65536 NT_STATUS_OK
WriteX 10713 327680 65536 65536 NT_STATUS_OK
WriteX 10713 393216 65536 65536 NT_STATUS_OK
WriteX 10713 458752 65536 65536 NT_STATUS_OK
WriteX 10713 524288 65536 65536 NT_STATUS_OK
WriteX 10713 589824 35257 35257 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10718 NT_STATUS_OK
WriteX 10718 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 258 NT_STATUS_OK
WriteX 10718 0 65536 65536 NT_STATUS_OK
WriteX 10718 65536 65536 65536 NT_STATUS_OK
WriteX 10718 131072 65536 65536 NT_STATUS_OK
WriteX 10718 196608 65536 65536 NT_STATUS_OK
WriteX 10718 262144 65536 65536 NT_STATUS_OK
WriteX 10718 327680 65536 65536 NT_STATUS_OK
WriteX 10718 393216 65536 65536 NT_STATUS_OK
WriteX 10718 458752 65536 65536 NT_STATUS_OK
WriteX 10718 524288 65536 65536 NT_STATUS_OK
WriteX 10718 589824 57598 57598 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10720 NT_STATUS_OK
WriteX 10720 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10720 258 NT_STATUS_OK
WriteX 10720 0 12543 12543 NT_STATUS_OK
Flush 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10722 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10726 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 1005 NT_STATUS_OK
ReadX 10726 1938 24 24 NT_STATUS_OK
ReadX 10726 1920 276 276 NT_STATUS_OK
ReadX 10726 1918 14 14 NT_STATUS_OK
ReadX 10726 1918 7 7 NT_STATUS_OK
ReadX 10726 1919 12 12 NT_STATUS_OK
ReadX 10726 1919 8 8 NT_STATUS_OK
ReadX 10726 1917 15 15 NT_STATUS_OK
ReadX 10726 0 16 16 NT_STATUS_OK
ReadX 10726 16 2048 2048 NT_STATUS_OK
ReadX 10726 2064 2048 2048 NT_STATUS_OK
ReadX 10726 257 2048 2048 NT_STATUS_OK
ReadX 10726 385 2048 2048 NT_STATUS_OK
ReadX 10726 513 2048 2048 NT_STATUS_OK
ReadX 10726 641 2048 2048 NT_STATUS_OK
ReadX 10726 769 2048 2048 NT_STATUS_OK
ReadX 10726 897 2048 2048 NT_STATUS_OK
ReadX 10726 1025 2048 2048 NT_STATUS_OK
ReadX 10726 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10731 NT_STATUS_OK
WriteX 10731 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10731 258 NT_STATUS_OK
WriteX 10731 0 11588 11588 NT_STATUS_OK
Flush 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10732 NT_STATUS_OK
Close 10732 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10736 NT_STATUS_OK
WriteX 10736 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10736 258 NT_STATUS_OK
WriteX 10736 0 11615 11615 NT_STATUS_OK
Flush 10736 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10745 NT_STATUS_OK
WriteX 10745 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10745 258 NT_STATUS_OK
WriteX 10745 0 65536 65536 NT_STATUS_OK
WriteX 10745 65536 16050 16050 NT_STATUS_OK
Close 10745 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10725 1939 64 64 NT_STATUS_OK
ReadX 10725 128 248 248 NT_STATUS_OK
ReadX 10725 128 568 568 NT_STATUS_OK
ReadX 10725 3872 1536 1536 NT_STATUS_OK
ReadX 10725 3456 2560 2560 NT_STATUS_OK
ReadX 10725 3136 512 512 NT_STATUS_OK
ReadX 10725 2880 4096 4096 NT_STATUS_OK
ReadX 10725 3264 3072 3072 NT_STATUS_OK
ReadX 10725 320 4096 4096 NT_STATUS_OK
ReadX 10725 1024 4096 4096 NT_STATUS_OK
ReadX 10725 3616 4096 4096 NT_STATUS_OK
ReadX 10725 1939 64 64 NT_STATUS_OK
ReadX 10725 128 248 248 NT_STATUS_OK
ReadX 10725 128 608 608 NT_STATUS_OK
ReadX 10725 2858 1024 1024 NT_STATUS_OK
ReadX 10725 2810 4096 4096 NT_STATUS_OK
ReadX 10725 2826 4096 4096 NT_STATUS_OK
ReadX 10725 2580 2048 2048 NT_STATUS_OK
ReadX 10725 2800 2560 2560 NT_STATUS_OK
ReadX 10725 2100 4096 4096 NT_STATUS_OK
ReadX 10725 2084 4096 4096 NT_STATUS_OK
ReadX 10725 868 4096 4096 NT_STATUS_OK
ReadX 10725 2324 4096 4096 NT_STATUS_OK
ReadX 10725 884 4096 4096 NT_STATUS_OK
ReadX 10725 2604 1024 1024 NT_STATUS_OK
ReadX 10725 580 4096 4096 NT_STATUS_OK
ReadX 10725 596 4096 4096 NT_STATUS_OK
ReadX 10725 2752 4096 4096 NT_STATUS_OK
ReadX 10725 2842 1024 1024 NT_STATUS_OK
ReadX 10725 660 4096 4096 NT_STATUS_OK
ReadX 10725 2720 4096 4096 NT_STATUS_OK
ReadX 10725 2736 4096 4096 NT_STATUS_OK
ReadX 10725 628 4096 4096 NT_STATUS_OK
ReadX 10725 2704 4096 4096 NT_STATUS_OK
ReadX 10725 1556 4096 4096 NT_STATUS_OK
ReadX 10725 576 4096 4096 NT_STATUS_OK
ReadX 10725 3168 1536 1536 NT_STATUS_OK
ReadX 10725 832 4096 4096 NT_STATUS_OK
ReadX 10725 1088 4096 4096 NT_STATUS_OK
ReadX 10725 1344 4096 4096 NT_STATUS_OK
ReadX 10725 1600 4096 4096 NT_STATUS_OK
ReadX 10725 1856 4096 4096 NT_STATUS_OK
ReadX 10725 2112 4096 4096 NT_STATUS_OK
ReadX 10725 1892 4096 4096 NT_STATUS_OK
ReadX 10725 820 4096 4096 NT_STATUS_OK
ReadX 10725 788 4096 4096 NT_STATUS_OK
ReadX 10725 1604 4096 4096 NT_STATUS_OK
ReadX 10725 3648 4096 4096 NT_STATUS_OK
ReadX 10725 2608 4096 4096 NT_STATUS_OK
ReadX 10725 548 4096 4096 NT_STATUS_OK
ReadX 10725 740 4096 4096 NT_STATUS_OK
ReadX 10725 1344 4096 4096 NT_STATUS_OK
ReadX 10725 3392 4096 4096 NT_STATUS_OK
ReadX 10725 3904 4096 4096 NT_STATUS_OK
ReadX 10725 644 4096 4096 NT_STATUS_OK
ReadX 10725 676 4096 4096 NT_STATUS_OK
ReadX 10725 2688 4096 4096 NT_STATUS_OK
ReadX 10725 320 4096 4096 NT_STATUS_OK
ReadX 10725 900 4096 4096 NT_STATUS_OK
ReadX 10725 1908 4096 4096 NT_STATUS_OK
ReadX 10725 852 4096 4096 NT_STATUS_OK
ReadX 10725 724 4096 4096 NT_STATUS_OK
ReadX 10725 2292 4096 4096 NT_STATUS_OK
ReadX 10725 612 4096 4096 NT_STATUS_OK
ReadX 10725 388 4096 4096 NT_STATUS_OK
ReadX 10725 2368 4096 4096 NT_STATUS_OK
ReadX 10725 2624 4096 4096 NT_STATUS_OK
ReadX 10725 500 4096 4096 NT_STATUS_OK
ReadX 10725 356 4096 4096 NT_STATUS_OK
ReadX 10725 1024 4096 4096 NT_STATUS_OK
ReadX 10725 576 4096 4096 NT_STATUS_OK
ReadX 10725 340 4096 4096 NT_STATUS_OK
ReadX 10725 420 4096 4096 NT_STATUS_OK
ReadX 10725 1600 4096 4096 NT_STATUS_OK
ReadX 10725 404 4096 4096 NT_STATUS_OK
ReadX 10725 1428 4096 4096 NT_STATUS_OK
ReadX 10725 2656 4096 4096 NT_STATUS_OK
ReadX 10725 2624 4096 4096 NT_STATUS_OK
ReadX 10725 452 4096 4096 NT_STATUS_OK
ReadX 10725 692 4096 4096 NT_STATUS_OK
ReadX 10725 564 4096 4096 NT_STATUS_OK
ReadX 10725 372 4096 4096 NT_STATUS_OK
ReadX 10725 468 4096 4096 NT_STATUS_OK
ReadX 10725 484 4096 4096 NT_STATUS_OK
ReadX 10725 1088 4096 4096 NT_STATUS_OK
ReadX 10725 1924 4096 4096 NT_STATUS_OK
ReadX 10725 2768 4096 4096 NT_STATUS_OK
ReadX 10725 832 4096 4096 NT_STATUS_OK
ReadX 10725 836 4096 4096 NT_STATUS_OK
ReadX 10725 1856 4096 4096 NT_STATUS_OK
ReadX 10725 2640 4096 4096 NT_STATUS_OK
ReadX 10725 436 4096 4096 NT_STATUS_OK
ReadX 10725 1828 4096 4096 NT_STATUS_OK
ReadX 10725 804 4096 4096 NT_STATUS_OK
ReadX 10725 1860 4096 4096 NT_STATUS_OK
ReadX 10725 1812 4096 4096 NT_STATUS_OK
ReadX 10725 756 4096 4096 NT_STATUS_OK
ReadX 10725 1636 4096 4096 NT_STATUS_OK
ReadX 10725 772 4096 4096 NT_STATUS_OK
ReadX 10725 2036 4096 4096 NT_STATUS_OK
ReadX 10725 1220 4096 4096 NT_STATUS_OK
ReadX 10725 1652 4096 4096 NT_STATUS_OK
ReadX 10725 2588 4096 4096 NT_STATUS_OK
ReadX 10725 916 4096 4096 NT_STATUS_OK
ReadX 10725 260 4096 4096 NT_STATUS_OK
ReadX 10725 932 4096 4096 NT_STATUS_OK
ReadX 10725 2624 4096 4096 NT_STATUS_OK
ReadX 10725 308 4096 4096 NT_STATUS_OK
ReadX 10725 292 4096 4096 NT_STATUS_OK
ReadX 10725 1140 4096 4096 NT_STATUS_OK
ReadX 10725 276 4096 4096 NT_STATUS_OK
ReadX 10725 2020 4096 4096 NT_STATUS_OK
ReadX 10725 2880 4096 4096 NT_STATUS_OK
ReadX 10725 516 4096 4096 NT_STATUS_OK
ReadX 10725 1844 4096 4096 NT_STATUS_OK
ReadX 10725 1124 4096 4096 NT_STATUS_OK
ReadX 10725 3136 4096 4096 NT_STATUS_OK
ReadX 10725 324 4096 4096 NT_STATUS_OK
ReadX 10725 1156 4096 4096 NT_STATUS_OK
ReadX 10725 1172 4096 4096 NT_STATUS_OK
ReadX 10725 2112 4096 4096 NT_STATUS_OK
ReadX 10725 2368 4096 4096 NT_STATUS_OK
ReadX 10725 964 4096 4096 NT_STATUS_OK
ReadX 10725 980 4096 4096 NT_STATUS_OK
ReadX 10725 1012 4096 4096 NT_STATUS_OK
ReadX 10725 532 4096 4096 NT_STATUS_OK
ReadX 10725 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10725 1620 4096 4096 NT_STATUS_OK
ReadX 10725 1604 4096 4096 NT_STATUS_OK
ReadX 10725 2116 4096 4096 NT_STATUS_OK
ReadX 10725 2132 4096 4096 NT_STATUS_OK
ReadX 10725 2148 4096 4096 NT_STATUS_OK
ReadX 10725 2276 4096 4096 NT_STATUS_OK
ReadX 10725 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10747 NT_STATUS_OK
Close 10747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10750 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 1004 NT_STATUS_OK
Close 10705 NT_STATUS_OK
WriteX 10750 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10750 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10707 1004 NT_STATUS_OK
Close 10707 NT_STATUS_OK
WriteX 10750 0 65536 65536 NT_STATUS_OK
WriteX 10750 65536 64850 64850 NT_STATUS_OK
Close 10750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10752 NT_STATUS_OK
WriteX 10752 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 258 NT_STATUS_OK
ReadX 10725 2068 4096 4096 NT_STATUS_OK
ReadX 10725 1588 4096 4096 NT_STATUS_OK
ReadX 10725 1572 4096 4096 NT_STATUS_OK
WriteX 10752 0 18630 18630 NT_STATUS_OK
Flush 10752 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10756 NT_STATUS_OK
ReadX 10756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10725 612 4096 4096 NT_STATUS_OK
ReadX 10725 564 4096 4096 NT_STATUS_OK
ReadX 10725 1876 4096 4096 NT_STATUS_OK
ReadX 10725 628 4096 4096 NT_STATUS_OK
ReadX 10725 740 4096 4096 NT_STATUS_OK
ReadX 10725 724 4096 4096 NT_STATUS_OK
ReadX 10725 644 4096 4096 NT_STATUS_OK
ReadX 10725 2324 4096 4096 NT_STATUS_OK
ReadX 10725 660 4096 4096 NT_STATUS_OK
ReadX 10725 852 4096 4096 NT_STATUS_OK
ReadX 10725 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10725 2368 4096 4096 NT_STATUS_OK
ReadX 10725 1024 4096 4096 NT_STATUS_OK
ReadX 10725 320 4096 4096 NT_STATUS_OK
ReadX 10725 580 4096 4096 NT_STATUS_OK
ReadX 10725 3136 512 512 NT_STATUS_OK
ReadX 10725 2880 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 61440 4096 4096 NT_STATUS_OK
ReadX 10757 126976 4096 4096 NT_STATUS_OK
WriteX 10757 0 65536 65536 NT_STATUS_OK
WriteX 10757 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 61440 4096 4096 NT_STATUS_OK
ReadX 10758 126976 4096 4096 NT_STATUS_OK
ReadX 10758 192512 4096 4096 NT_STATUS_OK
ReadX 10758 258048 4096 4096 NT_STATUS_OK
WriteX 10758 0 65536 65536 NT_STATUS_OK
WriteX 10758 65536 65536 65536 NT_STATUS_OK
WriteX 10758 131072 65536 65536 NT_STATUS_OK
WriteX 10758 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 61440 4096 4096 NT_STATUS_OK
ReadX 10759 126976 4096 4096 NT_STATUS_OK
ReadX 10759 192512 4096 4096 NT_STATUS_OK
ReadX 10759 258048 4096 4096 NT_STATUS_OK
ReadX 10759 323584 4096 4096 NT_STATUS_OK
ReadX 10759 389120 4096 4096 NT_STATUS_OK
ReadX 10759 454656 4096 4096 NT_STATUS_OK
ReadX 10759 520192 4096 4096 NT_STATUS_OK
WriteX 10759 0 65536 65536 NT_STATUS_OK
WriteX 10759 65536 65536 65536 NT_STATUS_OK
WriteX 10759 131072 65536 65536 NT_STATUS_OK
WriteX 10759 196608 65536 65536 NT_STATUS_OK
WriteX 10759 262144 65536 65536 NT_STATUS_OK
WriteX 10759 327680 65536 65536 NT_STATUS_OK
WriteX 10759 393216 65536 65536 NT_STATUS_OK
WriteX 10759 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10761 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10762 NT_STATUS_OK
WriteX 10762 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10760 0 8192 8192 NT_STATUS_OK
Flush 10760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10760 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10760 0 8192 8192 NT_STATUS_OK
Flush 10760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10760 0 8192 8192 NT_STATUS_OK
Flush 10760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10760 0 8192 8192 NT_STATUS_OK
Flush 10760 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10756 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Close 10759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10767 NT_STATUS_OK
WriteX 10767 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10767 258 NT_STATUS_OK
WriteX 10767 0 62591 62591 NT_STATUS_OK
Close 10767 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10772 NT_STATUS_OK
WriteX 10772 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10772 258 NT_STATUS_OK
WriteX 10772 0 10845 10845 NT_STATUS_OK
Close 10772 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10774 NT_STATUS_OK
Close 10774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10777 NT_STATUS_OK
WriteX 10777 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10777 258 NT_STATUS_OK
WriteX 10777 0 30118 30118 NT_STATUS_OK
Close 10777 NT_STATUS_OK
WriteX 10760 0 4096 4096 NT_STATUS_OK
WriteX 10762 0 64 64 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 61440 61440 NT_STATUS_OK
ReadX 10779 61440 4096 4096 NT_STATUS_OK
ReadX 10779 65536 61440 61440 NT_STATUS_OK
ReadX 10779 126976 4096 4096 NT_STATUS_OK
ReadX 10779 131072 61440 61440 NT_STATUS_OK
ReadX 10779 192512 4096 4096 NT_STATUS_OK
ReadX 10779 196608 61440 61440 NT_STATUS_OK
ReadX 10779 258048 4096 4096 NT_STATUS_OK
ReadX 10779 262144 61440 61440 NT_STATUS_OK
ReadX 10779 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 61440 61440 NT_STATUS_OK
ReadX 10780 61440 4096 4096 NT_STATUS_OK
ReadX 10780 65536 61440 61440 NT_STATUS_OK
ReadX 10780 126976 4096 4096 NT_STATUS_OK
ReadX 10780 131072 61440 61440 NT_STATUS_OK
ReadX 10780 192512 4096 4096 NT_STATUS_OK
ReadX 10780 196608 61440 61440 NT_STATUS_OK
ReadX 10780 258048 4096 4096 NT_STATUS_OK
ReadX 10780 262144 61440 61440 NT_STATUS_OK
ReadX 10780 323584 4096 4096 NT_STATUS_OK
ReadX 10780 327680 61440 61440 NT_STATUS_OK
ReadX 10780 389120 4096 4096 NT_STATUS_OK
ReadX 10780 393216 61440 61440 NT_STATUS_OK
ReadX 10780 454656 4096 4096 NT_STATUS_OK
ReadX 10780 458752 61440 61440 NT_STATUS_OK
ReadX 10780 520192 4096 4096 NT_STATUS_OK
ReadX 10780 524288 61440 61440 NT_STATUS_OK
ReadX 10780 585728 4096 4096 NT_STATUS_OK
ReadX 10780 589824 61440 61440 NT_STATUS_OK
ReadX 10780 651264 4096 4096 NT_STATUS_OK
ReadX 10780 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 0 61440 61440 NT_STATUS_OK
ReadX 10781 61440 4096 4096 NT_STATUS_OK
ReadX 10781 65536 61440 61440 NT_STATUS_OK
ReadX 10781 126976 4096 4096 NT_STATUS_OK
ReadX 10781 131072 61440 61440 NT_STATUS_OK
ReadX 10781 192512 4096 4096 NT_STATUS_OK
ReadX 10781 196608 61440 61440 NT_STATUS_OK
ReadX 10781 258048 4096 4096 NT_STATUS_OK
ReadX 10781 262144 61440 61440 NT_STATUS_OK
ReadX 10781 323584 4096 4096 NT_STATUS_OK
ReadX 10781 327680 61440 61440 NT_STATUS_OK
ReadX 10781 389120 4096 4096 NT_STATUS_OK
ReadX 10781 393216 61440 61440 NT_STATUS_OK
ReadX 10781 454656 4096 4096 NT_STATUS_OK
ReadX 10781 458752 61440 61440 NT_STATUS_OK
ReadX 10781 520192 4096 4096 NT_STATUS_OK
ReadX 10781 524288 61440 61440 NT_STATUS_OK
ReadX 10781 585728 4096 4096 NT_STATUS_OK
ReadX 10781 589824 61440 61440 NT_STATUS_OK
ReadX 10781 651264 4096 4096 NT_STATUS_OK
ReadX 10781 655360 61440 61440 NT_STATUS_OK
ReadX 10781 716800 4096 4096 NT_STATUS_OK
ReadX 10781 720896 61440 61440 NT_STATUS_OK
ReadX 10781 782336 4096 4096 NT_STATUS_OK
ReadX 10781 786432 61440 61440 NT_STATUS_OK
ReadX 10781 847872 4096 4096 NT_STATUS_OK
ReadX 10781 851968 61440 61440 NT_STATUS_OK
ReadX 10781 913408 4096 4096 NT_STATUS_OK
ReadX 10781 917504 61440 61440 NT_STATUS_OK
ReadX 10781 978944 4096 4096 NT_STATUS_OK
ReadX 10781 983040 61440 61440 NT_STATUS_OK
ReadX 10781 1044480 4096 4096 NT_STATUS_OK
ReadX 10781 1048576 61440 61440 NT_STATUS_OK
ReadX 10781 1110016 4096 4096 NT_STATUS_OK
ReadX 10781 1114112 61440 61440 NT_STATUS_OK
ReadX 10781 1175552 4096 4096 NT_STATUS_OK
ReadX 10781 1179648 61440 61440 NT_STATUS_OK
ReadX 10781 1241088 4096 4096 NT_STATUS_OK
ReadX 10781 1245184 61440 61440 NT_STATUS_OK
ReadX 10781 1306624 4096 4096 NT_STATUS_OK
ReadX 10781 1310720 61440 61440 NT_STATUS_OK
ReadX 10781 1372160 4096 4096 NT_STATUS_OK
ReadX 10781 1376256 61440 61440 NT_STATUS_OK
ReadX 10781 1437696 4096 4096 NT_STATUS_OK
ReadX 10781 1441792 61440 61440 NT_STATUS_OK
ReadX 10781 1503232 4096 4096 NT_STATUS_OK
ReadX 10781 1507328 61440 61440 NT_STATUS_OK
ReadX 10781 1568768 4096 4096 NT_STATUS_OK
ReadX 10781 1572864 61440 61440 NT_STATUS_OK
ReadX 10781 1634304 4096 4096 NT_STATUS_OK
ReadX 10781 1638400 61440 61440 NT_STATUS_OK
ReadX 10781 1699840 4096 4096 NT_STATUS_OK
ReadX 10781 1703936 61440 61440 NT_STATUS_OK
ReadX 10781 1765376 4096 4096 NT_STATUS_OK
ReadX 10781 1769472 61440 61440 NT_STATUS_OK
ReadX 10781 1830912 4096 4096 NT_STATUS_OK
ReadX 10781 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10782 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10779 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10784 NT_STATUS_OK
ReadX 10784 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
ReadX 10786 4096 4096 4096 NT_STATUS_OK
ReadX 10786 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10784 NT_STATUS_OK
Close 10785 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10790 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10791 NT_STATUS_OK
Close 10791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 8192 8192 NT_STATUS_OK
ReadX 10794 8192 8192 8192 NT_STATUS_OK
ReadX 10794 16384 8192 8192 NT_STATUS_OK
ReadX 10794 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10796 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10799 NT_STATUS_OK
WriteX 10799 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10799 258 NT_STATUS_OK
WriteX 10799 0 10438 10438 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10802 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10803 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10804 NT_STATUS_OK
Close 10804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10805 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10807 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10808 NT_STATUS_OK
ReadX 10808 0 4096 4096 NT_STATUS_OK
ReadX 10808 4096 4096 4096 NT_STATUS_OK
ReadX 10808 8192 4096 4096 NT_STATUS_OK
ReadX 10808 12288 8192 8192 NT_STATUS_OK
ReadX 10808 20480 8192 8192 NT_STATUS_OK
ReadX 10808 28672 8192 8192 NT_STATUS_OK
ReadX 10808 36864 8192 8192 NT_STATUS_OK
ReadX 10808 45056 8192 8192 NT_STATUS_OK
ReadX 10808 53248 8192 8192 NT_STATUS_OK
ReadX 10808 61440 8192 8192 NT_STATUS_OK
ReadX 10808 69632 8192 8192 NT_STATUS_OK
ReadX 10808 77824 8192 8192 NT_STATUS_OK
ReadX 10808 86016 8192 8192 NT_STATUS_OK
ReadX 10808 94208 8192 8192 NT_STATUS_OK
ReadX 10808 102400 8192 8192 NT_STATUS_OK
ReadX 10808 110592 8192 8192 NT_STATUS_OK
ReadX 10808 118784 8192 8192 NT_STATUS_OK
ReadX 10808 126976 8192 8192 NT_STATUS_OK
ReadX 10808 135168 8192 8192 NT_STATUS_OK
ReadX 10808 143360 8192 8192 NT_STATUS_OK
ReadX 10808 151552 8192 8192 NT_STATUS_OK
ReadX 10808 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10808 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Close 10805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10813 NT_STATUS_OK
WriteX 10813 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10813 258 NT_STATUS_OK
WriteX 10813 0 28489 28489 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10816 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10819 NT_STATUS_OK
ReadX 10819 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 8192 8192 NT_STATUS_OK
ReadX 10820 8192 8192 8192 NT_STATUS_OK
ReadX 10820 16384 8192 8192 NT_STATUS_OK
ReadX 10820 24576 8192 8192 NT_STATUS_OK
ReadX 10820 32768 16384 16384 NT_STATUS_OK
ReadX 10820 49152 8192 8192 NT_STATUS_OK
ReadX 10820 57344 8192 8192 NT_STATUS_OK
ReadX 10820 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10825 NT_STATUS_OK
WriteX 10825 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 258 NT_STATUS_OK
WriteX 10825 0 29253 29253 NT_STATUS_OK
Close 10825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10826 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10832 NT_STATUS_OK
WriteX 10832 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 258 NT_STATUS_OK
WriteX 10832 0 30183 30183 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10833 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10835 NT_STATUS_OK
WriteX 10835 0 510 510 NT_STATUS_OK
WriteX 10835 510 512 512 NT_STATUS_OK
WriteX 10835 1022 510 510 NT_STATUS_OK
WriteX 10835 1532 510 510 NT_STATUS_OK
WriteX 10835 2042 168 168 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10836 NT_STATUS_OK
Close 10836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
WriteX 10838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 61440 4096 4096 NT_STATUS_OK
ReadX 10839 126976 4096 4096 NT_STATUS_OK
WriteX 10839 0 65536 65536 NT_STATUS_OK
WriteX 10839 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 61440 4096 4096 NT_STATUS_OK
ReadX 10840 126976 4096 4096 NT_STATUS_OK
ReadX 10840 192512 4096 4096 NT_STATUS_OK
ReadX 10840 258048 4096 4096 NT_STATUS_OK
WriteX 10840 0 65536 65536 NT_STATUS_OK
WriteX 10840 65536 65536 65536 NT_STATUS_OK
WriteX 10840 131072 65536 65536 NT_STATUS_OK
WriteX 10840 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 61440 4096 4096 NT_STATUS_OK
ReadX 10841 126976 4096 4096 NT_STATUS_OK
ReadX 10841 192512 4096 4096 NT_STATUS_OK
ReadX 10841 258048 4096 4096 NT_STATUS_OK
ReadX 10841 323584 4096 4096 NT_STATUS_OK
ReadX 10841 389120 4096 4096 NT_STATUS_OK
ReadX 10841 454656 4096 4096 NT_STATUS_OK
ReadX 10841 520192 4096 4096 NT_STATUS_OK
WriteX 10841 0 65536 65536 NT_STATUS_OK
WriteX 10841 65536 65536 65536 NT_STATUS_OK
WriteX 10841 131072 65536 65536 NT_STATUS_OK
WriteX 10841 196608 65536 65536 NT_STATUS_OK
WriteX 10841 262144 65536 65536 NT_STATUS_OK
WriteX 10841 327680 65536 65536 NT_STATUS_OK
WriteX 10841 393216 65536 65536 NT_STATUS_OK
WriteX 10841 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10848 NT_STATUS_OK
Close 10848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10857 NT_STATUS_OK
Close 10857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10871 NT_STATUS_OK
Close 10871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10886 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10896 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10901 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10910 NT_STATUS_OK
WriteX 10910 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10910 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10910 0 65536 65536 NT_STATUS_OK
WriteX 10910 65536 65536 65536 NT_STATUS_OK
WriteX 10910 131072 65536 65536 NT_STATUS_OK
WriteX 10910 196608 65536 65536 NT_STATUS_OK
WriteX 10910 262144 26634 26634 NT_STATUS_OK
Close 10910 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10915 NT_STATUS_OK
Close 10915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
Close 10917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
ReadX 10918 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10919 NT_STATUS_OK
Close 10919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10923 NT_STATUS_OK
Close 10923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10926 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10928 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10935 NT_STATUS_OK
Close 10935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10937 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10946 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10961 NT_STATUS_OK
Close 10961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10966 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10970 NT_STATUS_OK
Close 10970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10980 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10983 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10985 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10995 NT_STATUS_OK
Close 10995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10996 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
Close 10997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
Close 10998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11009 NT_STATUS_OK
Close 11009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11011 NT_STATUS_OK
ReadX 11011 0 4096 4096 NT_STATUS_OK
Close 11011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11042 0 4096 4096 NT_STATUS_OK
Close 11042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 0 4096 4096 NT_STATUS_OK
ReadX 11044 4096 4096 4096 NT_STATUS_OK
ReadX 11044 8192 4096 4096 NT_STATUS_OK
ReadX 11044 12288 4096 4096 NT_STATUS_OK
ReadX 11044 16384 4096 4096 NT_STATUS_OK
ReadX 11044 20480 4096 4096 NT_STATUS_OK
ReadX 11044 24576 4096 4096 NT_STATUS_OK
ReadX 11044 28672 4096 4096 NT_STATUS_OK
ReadX 11044 32768 4096 4096 NT_STATUS_OK
ReadX 11044 36864 4096 4096 NT_STATUS_OK
ReadX 11044 40960 4096 4096 NT_STATUS_OK
ReadX 11044 45056 4096 4096 NT_STATUS_OK
ReadX 11044 49152 4096 4096 NT_STATUS_OK
ReadX 11044 53248 4096 4096 NT_STATUS_OK
ReadX 11044 57344 4096 4096 NT_STATUS_OK
ReadX 11044 61440 4096 4096 NT_STATUS_OK
ReadX 11044 65536 4096 4096 NT_STATUS_OK
ReadX 11044 69632 4096 4096 NT_STATUS_OK
ReadX 11044 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11044 1004 NT_STATUS_OK
WriteX 11044 0 4096 4096 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11045 NT_STATUS_OK
SET_FILE_INFORMATION 11045 1004 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11047 NT_STATUS_OK
Close 11047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11050 NT_STATUS_OK
WriteX 11050 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 258 NT_STATUS_OK
WriteX 11050 0 65536 65536 NT_STATUS_OK
WriteX 11050 65536 19979 19979 NT_STATUS_OK
Close 11050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
QUERY_FILE_INFORMATION 11051 1004 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11056 1004 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11057 NT_STATUS_OK
Close 11057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11059 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11062 NT_STATUS_OK
WriteX 11062 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11062 258 NT_STATUS_OK
WriteX 11062 0 65536 65536 NT_STATUS_OK
WriteX 11062 65536 17654 17654 NT_STATUS_OK
Close 11062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
Close 11063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11064 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
Close 11064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
ReadX 11068 4096 4096 4096 NT_STATUS_OK
ReadX 11068 8192 4096 4096 NT_STATUS_OK
ReadX 11068 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11068 16384 4096 4096 NT_STATUS_OK
ReadX 11068 20480 4096 4096 NT_STATUS_OK
ReadX 11068 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
Close 11069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
Close 11070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
WriteX 11071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11072 NT_STATUS_OK
Close 11072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11077 NT_STATUS_OK
WriteX 11077 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11077 258 NT_STATUS_OK
WriteX 11077 0 65536 65536 NT_STATUS_OK
WriteX 11077 65536 19490 19490 NT_STATUS_OK
Close 11077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
WriteX 11078 0 4096 4096 NT_STATUS_OK
Flush 11078 NT_STATUS_OK
WriteX 11078 0 4096 4096 NT_STATUS_OK
Flush 11078 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 1004 NT_STATUS_OK
WriteX 11078 0 4096 4096 NT_STATUS_OK
Flush 11078 NT_STATUS_OK
WriteX 11078 0 4096 4096 NT_STATUS_OK
Flush 11078 NT_STATUS_OK
WriteX 11078 0 4096 4096 NT_STATUS_OK
Flush 11078 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
WriteX 11078 0 4096 4096 NT_STATUS_OK
Flush 11078 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11079 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
Close 11079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11083 0 4096 4096 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 4096 4096 NT_STATUS_OK
ReadX 11085 4096 4096 4096 NT_STATUS_OK
ReadX 11085 8192 4096 4096 NT_STATUS_OK
ReadX 11085 12288 4096 4096 NT_STATUS_OK
ReadX 11085 16384 4096 4096 NT_STATUS_OK
ReadX 11085 20480 4096 4096 NT_STATUS_OK
ReadX 11085 24576 4096 4096 NT_STATUS_OK
ReadX 11085 28672 4096 4096 NT_STATUS_OK
ReadX 11085 32768 4096 4096 NT_STATUS_OK
ReadX 11085 36864 4096 4096 NT_STATUS_OK
ReadX 11085 40960 4096 4096 NT_STATUS_OK
ReadX 11085 45056 4096 4096 NT_STATUS_OK
ReadX 11085 49152 4096 4096 NT_STATUS_OK
ReadX 11085 53248 4096 4096 NT_STATUS_OK
ReadX 11085 57344 4096 4096 NT_STATUS_OK
ReadX 11085 61440 4096 4096 NT_STATUS_OK
ReadX 11085 65536 4096 4096 NT_STATUS_OK
ReadX 11085 69632 4096 4096 NT_STATUS_OK
ReadX 11085 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11085 1004 NT_STATUS_OK
WriteX 11085 0 4096 4096 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11086 NT_STATUS_OK
SET_FILE_INFORMATION 11086 1004 NT_STATUS_OK
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11088 NT_STATUS_OK
Close 11088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11091 NT_STATUS_OK
WriteX 11091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11091 258 NT_STATUS_OK
WriteX 11091 0 65536 65536 NT_STATUS_OK
WriteX 11091 65536 8866 8866 NT_STATUS_OK
Close 11091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
Flush 11092 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
Flush 11092 NT_STATUS_OK
Close 11092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
Close 11094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11096 1004 NT_STATUS_OK
WriteX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11099 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11102 NT_STATUS_OK
WriteX 11102 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11102 258 NT_STATUS_OK
WriteX 11102 0 65536 65536 NT_STATUS_OK
WriteX 11102 65536 9298 9298 NT_STATUS_OK
Close 11102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
WriteX 11103 0 4096 4096 NT_STATUS_OK
Flush 11103 NT_STATUS_OK
SET_FILE_INFORMATION 11103 1004 NT_STATUS_OK
WriteX 11103 0 4096 4096 NT_STATUS_OK
Flush 11103 NT_STATUS_OK
Close 11103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11104 NT_STATUS_OK
SET_FILE_INFORMATION 11104 1004 NT_STATUS_OK
Close 11104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11106 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11109 0 4096 4096 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11110 4096 4096 4096 NT_STATUS_OK
ReadX 11110 8192 4096 4096 NT_STATUS_OK
ReadX 11110 12288 4096 4096 NT_STATUS_OK
ReadX 11110 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 4096 4096 NT_STATUS_OK
Close 11112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11113 1004 NT_STATUS_OK
WriteX 11113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11114 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11110 NT_STATUS_OK
Close 11113 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11116 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11119 NT_STATUS_OK
WriteX 11119 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 258 NT_STATUS_OK
WriteX 11119 0 65536 65536 NT_STATUS_OK
WriteX 11119 65536 11540 11540 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
SET_FILE_INFORMATION 11120 1004 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11121 NT_STATUS_OK
SET_FILE_INFORMATION 11121 1004 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 61440 4096 4096 NT_STATUS_OK
ReadX 11125 126976 4096 4096 NT_STATUS_OK
WriteX 11125 0 65536 65536 NT_STATUS_OK
WriteX 11125 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 61440 4096 4096 NT_STATUS_OK
ReadX 11126 126976 4096 4096 NT_STATUS_OK
ReadX 11126 192512 4096 4096 NT_STATUS_OK
ReadX 11126 258048 4096 4096 NT_STATUS_OK
WriteX 11126 0 65536 65536 NT_STATUS_OK
WriteX 11126 65536 65536 65536 NT_STATUS_OK
WriteX 11126 131072 65536 65536 NT_STATUS_OK
WriteX 11126 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 61440 4096 4096 NT_STATUS_OK
ReadX 11127 126976 4096 4096 NT_STATUS_OK
ReadX 11127 192512 4096 4096 NT_STATUS_OK
ReadX 11127 258048 4096 4096 NT_STATUS_OK
ReadX 11127 323584 4096 4096 NT_STATUS_OK
ReadX 11127 389120 4096 4096 NT_STATUS_OK
ReadX 11127 454656 4096 4096 NT_STATUS_OK
ReadX 11127 520192 4096 4096 NT_STATUS_OK
WriteX 11127 0 65536 65536 NT_STATUS_OK
WriteX 11127 65536 65536 65536 NT_STATUS_OK
WriteX 11127 131072 65536 65536 NT_STATUS_OK
WriteX 11127 196608 65536 65536 NT_STATUS_OK
WriteX 11127 262144 65536 65536 NT_STATUS_OK
WriteX 11127 327680 65536 65536 NT_STATUS_OK
WriteX 11127 393216 65536 65536 NT_STATUS_OK
WriteX 11127 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
ReadX 11128 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11129 NT_STATUS_OK
WriteX 11129 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11129 258 NT_STATUS_OK
WriteX 11129 0 53 53 NT_STATUS_OK
Close 11129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11128 8192 4096 4096 NT_STATUS_OK
ReadX 11128 12288 4096 4096 NT_STATUS_OK
WriteX 11132 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11132 258 NT_STATUS_OK
ReadX 11128 16384 4096 4096 NT_STATUS_OK
ReadX 11128 20480 4096 4096 NT_STATUS_OK
WriteX 11132 0 15360 15360 NT_STATUS_OK
Close 11132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11133 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11133 1004 NT_STATUS_OK
WriteX 11133 0 4096 4096 NT_STATUS_OK
Close 11133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11136 4096 4096 4096 NT_STATUS_OK
ReadX 11136 8192 4096 4096 NT_STATUS_OK
ReadX 11136 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
ReadX 11139 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
ReadX 11140 4096 4096 4096 NT_STATUS_OK
ReadX 11140 8192 4096 4096 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
WriteX 11141 0 15360 15360 NT_STATUS_OK
Close 11141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11142 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11142 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11143 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11146 NT_STATUS_OK
SET_FILE_INFORMATION 11146 1004 NT_STATUS_OK
Close 11146 NT_STATUS_OK
WriteX 11142 0 4096 4096 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
ReadX 11149 4096 4096 4096 NT_STATUS_OK
ReadX 11149 8192 4096 4096 NT_STATUS_OK
ReadX 11149 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11149 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11149 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11151 NT_STATUS_OK
WriteX 11151 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 258 NT_STATUS_OK
WriteX 11151 0 53 53 NT_STATUS_OK
Close 11151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11150 4096 4096 4096 NT_STATUS_OK
ReadX 11150 8192 4096 4096 NT_STATUS_OK
ReadX 11150 12288 4096 4096 NT_STATUS_OK
WriteX 11154 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11154 258 NT_STATUS_OK
WriteX 11154 0 12006 12006 NT_STATUS_OK
Close 11154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11155 NT_STATUS_OK
ReadX 11155 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11155 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11155 1004 NT_STATUS_OK
WriteX 11155 0 4096 4096 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11158 4096 4096 4096 NT_STATUS_OK
ReadX 11158 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11161 NT_STATUS_OK
WriteX 11161 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11161 258 NT_STATUS_OK
WriteX 11161 0 11991 11991 NT_STATUS_OK
Close 11161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11162 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11162 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11163 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11166 NT_STATUS_OK
SET_FILE_INFORMATION 11166 1004 NT_STATUS_OK
Close 11166 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11167 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
WriteX 11149 0 19054 19054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11169 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
ReadX 11169 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
Close 11145 NT_STATUS_OK
WriteX 11169 0 12288 12288 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11149 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11174 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 61440 61440 NT_STATUS_OK
ReadX 11176 61440 4096 4096 NT_STATUS_OK
ReadX 11176 65536 61440 61440 NT_STATUS_OK
ReadX 11176 126976 4096 4096 NT_STATUS_OK
ReadX 11176 131072 61440 61440 NT_STATUS_OK
ReadX 11176 192512 4096 4096 NT_STATUS_OK
ReadX 11176 196608 61440 61440 NT_STATUS_OK
ReadX 11176 258048 4096 4096 NT_STATUS_OK
ReadX 11176 262144 61440 61440 NT_STATUS_OK
ReadX 11176 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 0 61440 61440 NT_STATUS_OK
ReadX 11177 61440 4096 4096 NT_STATUS_OK
ReadX 11177 65536 61440 61440 NT_STATUS_OK
ReadX 11177 126976 4096 4096 NT_STATUS_OK
ReadX 11177 131072 61440 61440 NT_STATUS_OK
ReadX 11177 192512 4096 4096 NT_STATUS_OK
ReadX 11177 196608 61440 61440 NT_STATUS_OK
ReadX 11177 258048 4096 4096 NT_STATUS_OK
ReadX 11177 262144 61440 61440 NT_STATUS_OK
ReadX 11177 323584 4096 4096 NT_STATUS_OK
ReadX 11177 327680 61440 61440 NT_STATUS_OK
ReadX 11177 389120 4096 4096 NT_STATUS_OK
ReadX 11177 393216 61440 61440 NT_STATUS_OK
ReadX 11177 454656 4096 4096 NT_STATUS_OK
ReadX 11177 458752 61440 61440 NT_STATUS_OK
ReadX 11177 520192 4096 4096 NT_STATUS_OK
ReadX 11177 524288 61440 61440 NT_STATUS_OK
ReadX 11177 585728 4096 4096 NT_STATUS_OK
ReadX 11177 589824 61440 61440 NT_STATUS_OK
ReadX 11177 651264 4096 4096 NT_STATUS_OK
ReadX 11177 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 61440 61440 NT_STATUS_OK
ReadX 11178 61440 4096 4096 NT_STATUS_OK
ReadX 11178 65536 61440 61440 NT_STATUS_OK
ReadX 11178 126976 4096 4096 NT_STATUS_OK
ReadX 11178 131072 61440 61440 NT_STATUS_OK
ReadX 11178 192512 4096 4096 NT_STATUS_OK
ReadX 11178 196608 61440 61440 NT_STATUS_OK
ReadX 11178 258048 4096 4096 NT_STATUS_OK
ReadX 11178 262144 61440 61440 NT_STATUS_OK
ReadX 11178 323584 4096 4096 NT_STATUS_OK
ReadX 11178 327680 61440 61440 NT_STATUS_OK
ReadX 11178 389120 4096 4096 NT_STATUS_OK
ReadX 11178 393216 61440 61440 NT_STATUS_OK
ReadX 11178 454656 4096 4096 NT_STATUS_OK
ReadX 11178 458752 61440 61440 NT_STATUS_OK
ReadX 11178 520192 4096 4096 NT_STATUS_OK
ReadX 11178 524288 61440 61440 NT_STATUS_OK
ReadX 11178 585728 4096 4096 NT_STATUS_OK
ReadX 11178 589824 61440 61440 NT_STATUS_OK
ReadX 11178 651264 4096 4096 NT_STATUS_OK
ReadX 11178 655360 61440 61440 NT_STATUS_OK
ReadX 11178 716800 4096 4096 NT_STATUS_OK
ReadX 11178 720896 61440 61440 NT_STATUS_OK
ReadX 11178 782336 4096 4096 NT_STATUS_OK
ReadX 11178 786432 61440 61440 NT_STATUS_OK
ReadX 11178 847872 4096 4096 NT_STATUS_OK
ReadX 11178 851968 61440 61440 NT_STATUS_OK
ReadX 11178 913408 4096 4096 NT_STATUS_OK
ReadX 11178 917504 61440 61440 NT_STATUS_OK
ReadX 11178 978944 4096 4096 NT_STATUS_OK
ReadX 11178 983040 61440 61440 NT_STATUS_OK
ReadX 11178 1044480 4096 4096 NT_STATUS_OK
ReadX 11178 1048576 61440 61440 NT_STATUS_OK
ReadX 11178 1110016 4096 4096 NT_STATUS_OK
ReadX 11178 1114112 61440 61440 NT_STATUS_OK
ReadX 11178 1175552 4096 4096 NT_STATUS_OK
ReadX 11178 1179648 61440 61440 NT_STATUS_OK
ReadX 11178 1241088 4096 4096 NT_STATUS_OK
ReadX 11178 1245184 61440 61440 NT_STATUS_OK
ReadX 11178 1306624 4096 4096 NT_STATUS_OK
ReadX 11178 1310720 61440 61440 NT_STATUS_OK
ReadX 11178 1372160 4096 4096 NT_STATUS_OK
ReadX 11178 1376256 61440 61440 NT_STATUS_OK
ReadX 11178 1437696 4096 4096 NT_STATUS_OK
ReadX 11178 1441792 61440 61440 NT_STATUS_OK
ReadX 11178 1503232 4096 4096 NT_STATUS_OK
ReadX 11178 1507328 61440 61440 NT_STATUS_OK
ReadX 11178 1568768 4096 4096 NT_STATUS_OK
ReadX 11178 1572864 61440 61440 NT_STATUS_OK
ReadX 11178 1634304 4096 4096 NT_STATUS_OK
ReadX 11178 1638400 61440 61440 NT_STATUS_OK
ReadX 11178 1699840 4096 4096 NT_STATUS_OK
ReadX 11178 1703936 61440 61440 NT_STATUS_OK
ReadX 11178 1765376 4096 4096 NT_STATUS_OK
ReadX 11178 1769472 61440 61440 NT_STATUS_OK
ReadX 11178 1830912 4096 4096 NT_STATUS_OK
ReadX 11178 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11185 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 1004 NT_STATUS_OK
WriteX 11185 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11187 NT_STATUS_OK
WriteX 11187 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
WriteX 11187 0 491 491 NT_STATUS_OK
Close 11187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11188 NT_STATUS_OK
ReadX 11188 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11185 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11190 NT_STATUS_OK
Close 11190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11191 NT_STATUS_OK
WriteX 11191 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11191 258 NT_STATUS_OK
WriteX 11191 0 543 543 NT_STATUS_OK
Close 11191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Close 11192 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11205 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
WriteX 11205 0 2048 2048 NT_STATUS_OK
Close 11205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11206 NT_STATUS_OK
ReadX 11206 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11206 0 4096 4096 NT_STATUS_OK
Flush 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11206 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11211 NT_STATUS_OK
WriteX 11211 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11211 258 NT_STATUS_OK
WriteX 11211 0 2048 2048 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11216 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11217 NT_STATUS_OK
WriteX 11217 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 2048 2048 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 2048 2048 NT_STATUS_OK
ReadX 11196 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
WriteX 11196 0 8192 8192 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
WriteX 11198 0 4096 4096 NT_STATUS_OK
ReadX 11212 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Close 11198 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11226 NT_STATUS_OK
ReadX 11226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11242 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 1004 NT_STATUS_OK
WriteX 11242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 258 NT_STATUS_OK
WriteX 11242 0 2048 2048 NT_STATUS_OK
Close 11242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11250 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 1004 NT_STATUS_OK
WriteX 11250 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 258 NT_STATUS_OK
WriteX 11250 0 2048 2048 NT_STATUS_OK
Close 11250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
Flush 11243 NT_STATUS_OK
WriteX 11251 0 4096 4096 NT_STATUS_OK
Flush 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11245 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11253 NT_STATUS_OK
WriteX 11253 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 258 NT_STATUS_OK
WriteX 11253 0 4096 4096 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11255 NT_STATUS_OK
Close 11255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11256 NT_STATUS_OK
WriteX 11256 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11256 258 NT_STATUS_OK
WriteX 11256 0 4096 4096 NT_STATUS_OK
Close 11256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11257 0 4096 4096 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11231 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11227 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11260 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11264 NT_STATUS_OK
WriteX 11264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 258 NT_STATUS_OK
WriteX 11264 0 2048 2048 NT_STATUS_OK
Close 11264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11265 NT_STATUS_OK
ReadX 11265 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11279 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Close 11265 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Close 11274 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11270 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11281 NT_STATUS_OK
QUERY_FILE_INFORMATION 11281 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11290 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 1004 NT_STATUS_OK
WriteX 11301 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 258 NT_STATUS_OK
WriteX 11301 0 2048 2048 NT_STATUS_OK
Close 11301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11302 NT_STATUS_OK
ReadX 11302 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11304 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11313 NT_STATUS_OK
QUERY_FILE_INFORMATION 11313 1004 NT_STATUS_OK
WriteX 11313 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11313 258 NT_STATUS_OK
WriteX 11313 0 2048 2048 NT_STATUS_OK
Close 11313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11314 NT_STATUS_OK
ReadX 11314 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11315 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11316 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11320 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11321 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 1004 NT_STATUS_OK
WriteX 11321 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 258 NT_STATUS_OK
WriteX 11321 0 2048 2048 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11322 NT_STATUS_OK
ReadX 11322 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11302 0 4096 4096 NT_STATUS_OK
Flush 11302 NT_STATUS_OK
WriteX 11314 0 4096 4096 NT_STATUS_OK
Flush 11314 NT_STATUS_OK
WriteX 11322 0 4096 4096 NT_STATUS_OK
Flush 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11302 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11322 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11304 4096 16384 16384 NT_STATUS_OK
ReadX 11284 4096 16384 16384 NT_STATUS_OK
ReadX 11316 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 2048 2048 NT_STATUS_OK
WriteX 11324 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11325 NT_STATUS_OK
QUERY_FILE_INFORMATION 11325 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11294 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11327 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11329 NT_STATUS_OK
QUERY_FILE_INFORMATION 11329 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11331 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11332 4096 16384 16384 NT_STATUS_OK
WriteX 11332 0 4096 4096 NT_STATUS_OK
WriteX 11333 0 4096 4096 NT_STATUS_OK
WriteX 11334 0 4096 4096 NT_STATUS_OK
WriteX 11335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11338 NT_STATUS_OK
ReadX 11338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11339 NT_STATUS_OK
ReadX 11339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11347 NT_STATUS_OK
ReadX 11347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11348 NT_STATUS_OK
ReadX 11348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 8192 8192 NT_STATUS_OK
ReadX 11338 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11352 0 4096 4096 NT_STATUS_OK
ReadX 11352 4096 4096 4096 NT_STATUS_OK
ReadX 11352 8192 4096 4096 NT_STATUS_OK
WriteX 11338 0 4096 4096 NT_STATUS_OK
WriteX 11339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11353 0 4096 4096 NT_STATUS_OK
ReadX 11353 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11332 0 4096 4096 NT_STATUS_OK
WriteX 11333 0 4096 4096 NT_STATUS_OK
WriteX 11334 0 4096 4096 NT_STATUS_OK
WriteX 11335 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11358 NT_STATUS_OK
QUERY_FILE_INFORMATION 11358 1004 NT_STATUS_OK
WriteX 11358 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11358 258 NT_STATUS_OK
WriteX 11358 0 2048 2048 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11359 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11359 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
ReadX 11361 4096 4096 4096 NT_STATUS_OK
WriteX 11361 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11359 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
ReadX 11363 4096 4096 4096 NT_STATUS_OK
WriteX 11363 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11364 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11349 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Close 11346 NT_STATUS_OK
Close 11347 NT_STATUS_OK
Close 11348 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11338 NT_STATUS_OK
Close 11339 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11366 0 4096 4096 NT_STATUS_OK
ReadX 11366 4096 4096 4096 NT_STATUS_OK
ReadX 11366 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11369 NT_STATUS_OK
ReadX 11369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11372 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11375 NT_STATUS_OK
ReadX 11375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11377 NT_STATUS_OK
ReadX 11377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11379 NT_STATUS_OK
ReadX 11379 0 4096 4096 NT_STATUS_OK
ReadX 11367 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11384 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1004 NT_STATUS_OK
WriteX 11384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 258 NT_STATUS_OK
WriteX 11384 0 2048 2048 NT_STATUS_OK
Close 11384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11385 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11390 NT_STATUS_OK
QUERY_FILE_INFORMATION 11390 1004 NT_STATUS_OK
WriteX 11390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11390 258 NT_STATUS_OK
WriteX 11390 0 2048 2048 NT_STATUS_OK
Close 11390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11374 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11392 NT_STATUS_OK
QUERY_FILE_INFORMATION 11392 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11378 NT_STATUS_OK
Close 11373 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Close 11367 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Close 11375 NT_STATUS_OK
Close 11376 NT_STATUS_OK
Close 11377 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11394 NT_STATUS_OK
QUERY_FILE_INFORMATION 11394 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 61440 4096 4096 NT_STATUS_OK
ReadX 11396 126976 4096 4096 NT_STATUS_OK
WriteX 11396 0 65536 65536 NT_STATUS_OK
WriteX 11396 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 61440 4096 4096 NT_STATUS_OK
ReadX 11397 126976 4096 4096 NT_STATUS_OK
ReadX 11397 192512 4096 4096 NT_STATUS_OK
ReadX 11397 258048 4096 4096 NT_STATUS_OK
WriteX 11397 0 65536 65536 NT_STATUS_OK
WriteX 11397 65536 65536 65536 NT_STATUS_OK
WriteX 11397 131072 65536 65536 NT_STATUS_OK
WriteX 11397 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 61440 4096 4096 NT_STATUS_OK
ReadX 11398 126976 4096 4096 NT_STATUS_OK
ReadX 11398 192512 4096 4096 NT_STATUS_OK
ReadX 11398 258048 4096 4096 NT_STATUS_OK
ReadX 11398 323584 4096 4096 NT_STATUS_OK
ReadX 11398 389120 4096 4096 NT_STATUS_OK
ReadX 11398 454656 4096 4096 NT_STATUS_OK
ReadX 11398 520192 4096 4096 NT_STATUS_OK
WriteX 11398 0 65536 65536 NT_STATUS_OK
WriteX 11398 65536 65536 65536 NT_STATUS_OK
WriteX 11398 131072 65536 65536 NT_STATUS_OK
WriteX 11398 196608 65536 65536 NT_STATUS_OK
WriteX 11398 262144 65536 65536 NT_STATUS_OK
WriteX 11398 327680 65536 65536 NT_STATUS_OK
WriteX 11398 393216 65536 65536 NT_STATUS_OK
WriteX 11398 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11399 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11399 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11399 8192 4096 4096 NT_STATUS_OK
ReadX 11399 12288 4096 4096 NT_STATUS_OK
ReadX 11399 16384 4096 4096 NT_STATUS_OK
ReadX 11399 20480 4096 4096 NT_STATUS_OK
ReadX 11399 24576 4096 4096 NT_STATUS_OK
ReadX 11399 28672 4096 4096 NT_STATUS_OK
ReadX 11399 32768 4096 4096 NT_STATUS_OK
ReadX 11399 36864 4096 4096 NT_STATUS_OK
ReadX 11399 40960 4096 4096 NT_STATUS_OK
ReadX 11399 45056 4096 4096 NT_STATUS_OK
ReadX 11399 49152 4096 4096 NT_STATUS_OK
ReadX 11399 53248 4096 4096 NT_STATUS_OK
ReadX 11399 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11399 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11402 NT_STATUS_OK
WriteX 11402 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11402 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11402 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11402 1004 NT_STATUS_OK
WriteX 11402 0 57088 57088 NT_STATUS_OK
WriteX 11402 0 4096 4096 NT_STATUS_OK
Flush 11402 NT_STATUS_OK
Close 11399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11403 NT_STATUS_OK
SET_FILE_INFORMATION 11403 1004 NT_STATUS_OK
Close 11403 NT_STATUS_OK
SET_FILE_INFORMATION 11402 1004 NT_STATUS_OK
WriteX 11402 0 4096 4096 NT_STATUS_OK
Close 11402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11406 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11407 NT_STATUS_OK
WriteX 11407 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11407 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11407 1004 NT_STATUS_OK
WriteX 11407 0 51456 51456 NT_STATUS_OK
WriteX 11407 0 4096 4096 NT_STATUS_OK
Flush 11407 NT_STATUS_OK
SET_FILE_INFORMATION 11407 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11407 1004 NT_STATUS_OK
WriteX 11407 0 4096 4096 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11409 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11411 NT_STATUS_OK
ReadX 11411 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11411 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11416 NT_STATUS_OK
WriteX 11416 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11416 258 NT_STATUS_OK
WriteX 11416 0 53077 53077 NT_STATUS_OK
Close 11416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11417 NT_STATUS_OK
WriteX 11417 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11417 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11417 1004 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 1856 1856 NT_STATUS_OK
WriteX 11417 0 4096 4096 NT_STATUS_OK
Flush 11417 NT_STATUS_OK
SET_FILE_INFORMATION 11417 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11417 1004 NT_STATUS_OK
WriteX 11417 0 4096 4096 NT_STATUS_OK
Close 11417 NT_STATUS_OK
Close 11411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11423 NT_STATUS_OK
Close 11423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11426 NT_STATUS_OK
WriteX 11426 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 258 NT_STATUS_OK
WriteX 11426 0 7983 7983 NT_STATUS_OK
Close 11426 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11431 NT_STATUS_OK
WriteX 11431 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11431 258 NT_STATUS_OK
WriteX 11431 0 65536 65536 NT_STATUS_OK
WriteX 11431 65536 65536 65536 NT_STATUS_OK
WriteX 11431 131072 65536 65536 NT_STATUS_OK
WriteX 11431 196608 65536 65536 NT_STATUS_OK
WriteX 11431 262144 65536 65536 NT_STATUS_OK
WriteX 11431 327680 65536 65536 NT_STATUS_OK
WriteX 11431 393216 65536 65536 NT_STATUS_OK
WriteX 11431 458752 46731 46731 NT_STATUS_OK
Close 11431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11432 NT_STATUS_OK
WriteX 11432 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11432 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11421 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11432 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11432 1004 NT_STATUS_OK
WriteX 11432 0 65536 65536 NT_STATUS_OK
WriteX 11432 65536 22848 22848 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
SET_FILE_INFORMATION 11432 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11432 1004 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11434 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11436 NT_STATUS_OK
ReadX 11436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11436 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11437 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11437 1004 NT_STATUS_OK
ReadX 11437 8192 4096 4096 NT_STATUS_OK
ReadX 11437 12288 4096 4096 NT_STATUS_OK
ReadX 11437 16384 4096 4096 NT_STATUS_OK
ReadX 11437 20480 4096 4096 NT_STATUS_OK
ReadX 11437 24576 4096 4096 NT_STATUS_OK
ReadX 11437 28672 4096 4096 NT_STATUS_OK
ReadX 11437 32768 4096 4096 NT_STATUS_OK
ReadX 11437 36864 4096 4096 NT_STATUS_OK
ReadX 11437 40960 4096 4096 NT_STATUS_OK
ReadX 11437 45056 4096 4096 NT_STATUS_OK
ReadX 11437 49152 4096 4096 NT_STATUS_OK
ReadX 11437 53248 4096 4096 NT_STATUS_OK
ReadX 11437 57344 4096 4096 NT_STATUS_OK
ReadX 11437 61440 4096 4096 NT_STATUS_OK
ReadX 11437 65536 4096 4096 NT_STATUS_OK
ReadX 11437 69632 4096 4096 NT_STATUS_OK
ReadX 11437 73728 4096 4096 NT_STATUS_OK
ReadX 11437 77824 4096 4096 NT_STATUS_OK
ReadX 11437 81920 4096 4096 NT_STATUS_OK
ReadX 11437 86016 4096 4096 NT_STATUS_OK
ReadX 11437 90112 4096 4096 NT_STATUS_OK
ReadX 11437 94208 4096 4096 NT_STATUS_OK
ReadX 11437 98304 4096 4096 NT_STATUS_OK
ReadX 11437 102400 4096 4096 NT_STATUS_OK
ReadX 11437 106496 4096 4096 NT_STATUS_OK
ReadX 11437 110592 4096 4096 NT_STATUS_OK
ReadX 11437 114688 4096 4096 NT_STATUS_OK
ReadX 11437 118784 4096 4096 NT_STATUS_OK
ReadX 11437 122880 4096 4096 NT_STATUS_OK
ReadX 11437 126976 4096 4096 NT_STATUS_OK
ReadX 11437 131072 4096 4096 NT_STATUS_OK
ReadX 11437 135168 4096 4096 NT_STATUS_OK
ReadX 11437 139264 4096 4096 NT_STATUS_OK
ReadX 11437 143360 4096 4096 NT_STATUS_OK
ReadX 11437 147456 4096 4096 NT_STATUS_OK
ReadX 11437 151552 4096 4096 NT_STATUS_OK
ReadX 11437 155648 4096 4096 NT_STATUS_OK
ReadX 11437 159744 4096 4096 NT_STATUS_OK
ReadX 11437 163840 4096 4096 NT_STATUS_OK
ReadX 11437 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11437 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11436 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11440 NT_STATUS_OK
WriteX 11440 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 258 NT_STATUS_OK
Close 11437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11441 NT_STATUS_OK
SET_FILE_INFORMATION 11441 1004 NT_STATUS_OK
Close 11441 NT_STATUS_OK
WriteX 11440 0 42388 42388 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11442 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
ReadX 11444 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11445 NT_STATUS_OK
WriteX 11445 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11445 258 NT_STATUS_OK
SET_FILE_INFORMATION 11445 1004 NT_STATUS_OK
WriteX 11445 0 42652 42652 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11447 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11449 NT_STATUS_OK
ReadX 11449 0 4096 4096 NT_STATUS_OK
ReadX 11449 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11451 NT_STATUS_OK
Close 11451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11454 NT_STATUS_OK
WriteX 11454 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11454 258 NT_STATUS_OK
WriteX 11454 0 65536 65536 NT_STATUS_OK
WriteX 11454 65536 49 49 NT_STATUS_OK
Close 11454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 61440 61440 NT_STATUS_OK
ReadX 11455 61440 4096 4096 NT_STATUS_OK
ReadX 11455 65536 61440 61440 NT_STATUS_OK
ReadX 11455 126976 4096 4096 NT_STATUS_OK
ReadX 11455 131072 61440 61440 NT_STATUS_OK
ReadX 11455 192512 4096 4096 NT_STATUS_OK
ReadX 11455 196608 61440 61440 NT_STATUS_OK
ReadX 11455 258048 4096 4096 NT_STATUS_OK
ReadX 11455 262144 61440 61440 NT_STATUS_OK
ReadX 11455 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 61440 61440 NT_STATUS_OK
ReadX 11456 61440 4096 4096 NT_STATUS_OK
ReadX 11456 65536 61440 61440 NT_STATUS_OK
ReadX 11456 126976 4096 4096 NT_STATUS_OK
ReadX 11456 131072 61440 61440 NT_STATUS_OK
ReadX 11456 192512 4096 4096 NT_STATUS_OK
ReadX 11456 196608 61440 61440 NT_STATUS_OK
ReadX 11456 258048 4096 4096 NT_STATUS_OK
ReadX 11456 262144 61440 61440 NT_STATUS_OK
ReadX 11456 323584 4096 4096 NT_STATUS_OK
ReadX 11456 327680 61440 61440 NT_STATUS_OK
ReadX 11456 389120 4096 4096 NT_STATUS_OK
ReadX 11456 393216 61440 61440 NT_STATUS_OK
ReadX 11456 454656 4096 4096 NT_STATUS_OK
ReadX 11456 458752 61440 61440 NT_STATUS_OK
ReadX 11456 520192 4096 4096 NT_STATUS_OK
ReadX 11456 524288 61440 61440 NT_STATUS_OK
ReadX 11456 585728 4096 4096 NT_STATUS_OK
ReadX 11456 589824 61440 61440 NT_STATUS_OK
ReadX 11456 651264 4096 4096 NT_STATUS_OK
ReadX 11456 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 61440 61440 NT_STATUS_OK
ReadX 11457 61440 4096 4096 NT_STATUS_OK
ReadX 11457 65536 61440 61440 NT_STATUS_OK
ReadX 11457 126976 4096 4096 NT_STATUS_OK
ReadX 11457 131072 61440 61440 NT_STATUS_OK
ReadX 11457 192512 4096 4096 NT_STATUS_OK
ReadX 11457 196608 61440 61440 NT_STATUS_OK
ReadX 11457 258048 4096 4096 NT_STATUS_OK
ReadX 11457 262144 61440 61440 NT_STATUS_OK
ReadX 11457 323584 4096 4096 NT_STATUS_OK
ReadX 11457 327680 61440 61440 NT_STATUS_OK
ReadX 11457 389120 4096 4096 NT_STATUS_OK
ReadX 11457 393216 61440 61440 NT_STATUS_OK
ReadX 11457 454656 4096 4096 NT_STATUS_OK
ReadX 11457 458752 61440 61440 NT_STATUS_OK
ReadX 11457 520192 4096 4096 NT_STATUS_OK
ReadX 11457 524288 61440 61440 NT_STATUS_OK
ReadX 11457 585728 4096 4096 NT_STATUS_OK
ReadX 11457 589824 61440 61440 NT_STATUS_OK
ReadX 11457 651264 4096 4096 NT_STATUS_OK
ReadX 11457 655360 61440 61440 NT_STATUS_OK
ReadX 11457 716800 4096 4096 NT_STATUS_OK
ReadX 11457 720896 61440 61440 NT_STATUS_OK
ReadX 11457 782336 4096 4096 NT_STATUS_OK
ReadX 11457 786432 61440 61440 NT_STATUS_OK
ReadX 11457 847872 4096 4096 NT_STATUS_OK
ReadX 11457 851968 61440 61440 NT_STATUS_OK
ReadX 11457 913408 4096 4096 NT_STATUS_OK
ReadX 11457 917504 61440 61440 NT_STATUS_OK
ReadX 11457 978944 4096 4096 NT_STATUS_OK
ReadX 11457 983040 61440 61440 NT_STATUS_OK
ReadX 11457 1044480 4096 4096 NT_STATUS_OK
ReadX 11457 1048576 61440 61440 NT_STATUS_OK
ReadX 11457 1110016 4096 4096 NT_STATUS_OK
ReadX 11457 1114112 61440 61440 NT_STATUS_OK
ReadX 11457 1175552 4096 4096 NT_STATUS_OK
ReadX 11457 1179648 61440 61440 NT_STATUS_OK
ReadX 11457 1241088 4096 4096 NT_STATUS_OK
ReadX 11457 1245184 61440 61440 NT_STATUS_OK
ReadX 11457 1306624 4096 4096 NT_STATUS_OK
ReadX 11457 1310720 61440 61440 NT_STATUS_OK
ReadX 11457 1372160 4096 4096 NT_STATUS_OK
ReadX 11457 1376256 61440 61440 NT_STATUS_OK
ReadX 11457 1437696 4096 4096 NT_STATUS_OK
ReadX 11457 1441792 61440 61440 NT_STATUS_OK
ReadX 11457 1503232 4096 4096 NT_STATUS_OK
ReadX 11457 1507328 61440 61440 NT_STATUS_OK
ReadX 11457 1568768 4096 4096 NT_STATUS_OK
ReadX 11457 1572864 61440 61440 NT_STATUS_OK
ReadX 11457 1634304 4096 4096 NT_STATUS_OK
ReadX 11457 1638400 61440 61440 NT_STATUS_OK
ReadX 11457 1699840 4096 4096 NT_STATUS_OK
ReadX 11457 1703936 61440 61440 NT_STATUS_OK
ReadX 11457 1765376 4096 4096 NT_STATUS_OK
ReadX 11457 1769472 61440 61440 NT_STATUS_OK
ReadX 11457 1830912 4096 4096 NT_STATUS_OK
ReadX 11457 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11459 NT_STATUS_OK
QUERY_FILE_INFORMATION 11459 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11459 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11459 1005 NT_STATUS_OK
ReadX 11459 2156 24 24 NT_STATUS_OK
ReadX 11459 2139 276 276 NT_STATUS_OK
ReadX 11459 2136 14 14 NT_STATUS_OK
ReadX 11459 2136 7 7 NT_STATUS_OK
ReadX 11459 2138 12 12 NT_STATUS_OK
ReadX 11459 2137 8 8 NT_STATUS_OK
ReadX 11459 2135 15 15 NT_STATUS_OK
ReadX 11459 0 16 16 NT_STATUS_OK
ReadX 11459 16 2048 2048 NT_STATUS_OK
ReadX 11459 2064 2048 2048 NT_STATUS_OK
ReadX 11459 257 2048 2048 NT_STATUS_OK
ReadX 11459 385 2048 2048 NT_STATUS_OK
ReadX 11459 513 2048 2048 NT_STATUS_OK
ReadX 11459 641 2048 2048 NT_STATUS_OK
ReadX 11459 769 2048 2048 NT_STATUS_OK
ReadX 11459 897 2048 2048 NT_STATUS_OK
ReadX 11459 1025 2048 2048 NT_STATUS_OK
ReadX 11459 1153 2048 2048 NT_STATUS_OK
ReadX 11459 1281 2048 2048 NT_STATUS_OK
ReadX 11459 1409 2048 2048 NT_STATUS_OK
ReadX 11459 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11461 NT_STATUS_OK
Close 11461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11455 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Close 11457 NT_STATUS_OK
Close 11449 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11464 NT_STATUS_OK
WriteX 11464 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11464 258 NT_STATUS_OK
WriteX 11464 0 10575 10575 NT_STATUS_OK
Flush 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11469 NT_STATUS_OK
LockX 11469 2147483538 1 NT_STATUS_OK
UnlockX 11469 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 1005 NT_STATUS_OK
ReadX 11469 0 512 512 NT_STATUS_OK
ReadX 11469 512 512 512 NT_STATUS_OK
ReadX 11469 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 1004 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11470 NT_STATUS_OK
QUERY_FILE_INFORMATION 11470 1005 NT_STATUS_OK
ReadX 11470 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11471 NT_STATUS_OK
LockX 11471 2147483538 1 NT_STATUS_OK
UnlockX 11471 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 1005 NT_STATUS_OK
ReadX 11471 0 512 512 NT_STATUS_OK
ReadX 11471 512 512 512 NT_STATUS_OK
ReadX 11471 1024 512 512 NT_STATUS_OK
ReadX 11471 288 20 20 NT_STATUS_OK
ReadX 11471 308 2084 2084 NT_STATUS_OK
ReadX 11471 388 2084 2084 NT_STATUS_OK
ReadX 11471 388 2084 2084 NT_STATUS_OK
ReadX 11458 2157 1386 1386 NT_STATUS_OK
ReadX 11471 2472 399 399 NT_STATUS_OK
ReadX 11471 3072 1536 1536 NT_STATUS_OK
ReadX 11471 544 149 149 NT_STATUS_OK
ReadX 11471 693 485 485 NT_STATUS_OK
Close 11471 NT_STATUS_OK
ReadX 11458 2157 4096 4096 NT_STATUS_OK
ReadX 11458 6253 4096 4096 NT_STATUS_OK
ReadX 11458 10349 4096 4096 NT_STATUS_OK
ReadX 11458 14445 4096 4096 NT_STATUS_OK
ReadX 11458 18541 4096 4096 NT_STATUS_OK
ReadX 11458 22637 256 256 NT_STATUS_OK
ReadX 11458 22893 4096 4096 NT_STATUS_OK
ReadX 11458 26989 4096 4096 NT_STATUS_OK
ReadX 11458 31085 4096 4096 NT_STATUS_OK
ReadX 11458 35181 4096 4096 NT_STATUS_OK
ReadX 11458 39277 4096 4096 NT_STATUS_OK
ReadX 11458 43373 4096 4096 NT_STATUS_OK
ReadX 11458 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11458 2157 1024 1024 NT_STATUS_OK
ReadX 11458 1667 4688 4688 NT_STATUS_OK
ReadX 11458 6355 3516 3516 NT_STATUS_OK
ReadX 11458 9871 16384 16384 NT_STATUS_OK
ReadX 11458 26255 3771 3771 NT_STATUS_OK
ReadX 11458 30026 2048 2048 NT_STATUS_OK
ReadX 11458 32074 1024 1024 NT_STATUS_OK
ReadX 11458 33098 6652 6652 NT_STATUS_OK
ReadX 11458 39750 16384 16384 NT_STATUS_OK
ReadX 11458 56134 10496 10496 NT_STATUS_OK
ReadX 11458 66630 1784 1784 NT_STATUS_OK
ReadX 11458 68414 90 90 NT_STATUS_OK
ReadX 11458 68504 273 273 NT_STATUS_OK
ReadX 11458 68777 1600 1600 NT_STATUS_OK
ReadX 11458 70377 640 640 NT_STATUS_OK
ReadX 11458 71017 1280 1280 NT_STATUS_OK
ReadX 11458 72297 8464 8464 NT_STATUS_OK
ReadX 11458 80761 158 158 NT_STATUS_OK
ReadX 11458 80919 912 912 NT_STATUS_OK
ReadX 11458 81831 1980 1980 NT_STATUS_OK
ReadX 11458 83811 2256 2256 NT_STATUS_OK
ReadX 11458 86067 400 400 NT_STATUS_OK
ReadX 11458 86467 252 252 NT_STATUS_OK
ReadX 11458 86719 42 42 NT_STATUS_OK
ReadX 11458 86761 725 725 NT_STATUS_OK
ReadX 11458 2009 512 512 NT_STATUS_OK
ReadX 11458 3895 9 9 NT_STATUS_OK
ReadX 11458 3781 46 46 NT_STATUS_OK
ReadX 11458 4059 92 92 NT_STATUS_OK
ReadX 11458 3781 92 92 NT_STATUS_OK
ReadX 11458 3986 184 184 NT_STATUS_OK
ReadX 11458 3987 16384 16384 NT_STATUS_OK
ReadX 11458 3902 16384 16384 NT_STATUS_OK
ReadX 11458 3781 10240 10240 NT_STATUS_OK
ReadX 11458 3821 16384 16384 NT_STATUS_OK
ReadX 11458 3891 935 935 NT_STATUS_OK
ReadX 11458 4060 10240 10240 NT_STATUS_OK
ReadX 11458 4059 184 184 NT_STATUS_OK
ReadX 11458 256 184 184 NT_STATUS_OK
ReadX 11458 256 1026 1026 NT_STATUS_OK
ReadX 11458 3901 326 326 NT_STATUS_OK
ReadX 11458 3899 652 652 NT_STATUS_OK
ReadX 11458 256 2 2 NT_STATUS_OK
ReadX 11458 258 4948 4948 NT_STATUS_OK
Close 11458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11473 NT_STATUS_OK
Close 11473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11476 NT_STATUS_OK
WriteX 11476 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 258 NT_STATUS_OK
WriteX 11476 0 65536 65536 NT_STATUS_OK
WriteX 11476 65536 65536 65536 NT_STATUS_OK
WriteX 11476 131072 65536 65536 NT_STATUS_OK
WriteX 11476 196608 65536 65536 NT_STATUS_OK
WriteX 11476 262144 65536 65536 NT_STATUS_OK
WriteX 11476 327680 65536 65536 NT_STATUS_OK
WriteX 11476 393216 65536 65536 NT_STATUS_OK
WriteX 11476 458752 65536 65536 NT_STATUS_OK
WriteX 11476 524288 65536 65536 NT_STATUS_OK
WriteX 11476 589824 35257 35257 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11481 NT_STATUS_OK
WriteX 11481 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 258 NT_STATUS_OK
WriteX 11481 0 65536 65536 NT_STATUS_OK
WriteX 11481 65536 65536 65536 NT_STATUS_OK
WriteX 11481 131072 65536 65536 NT_STATUS_OK
WriteX 11481 196608 65536 65536 NT_STATUS_OK
WriteX 11481 262144 65536 65536 NT_STATUS_OK
WriteX 11481 327680 65536 65536 NT_STATUS_OK
WriteX 11481 393216 65536 65536 NT_STATUS_OK
WriteX 11481 458752 65536 65536 NT_STATUS_OK
WriteX 11481 524288 65536 65536 NT_STATUS_OK
WriteX 11481 589824 57598 57598 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11483 NT_STATUS_OK
WriteX 11483 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11483 258 NT_STATUS_OK
WriteX 11483 0 12543 12543 NT_STATUS_OK
Flush 11483 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11485 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11489 NT_STATUS_OK
QUERY_FILE_INFORMATION 11489 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11489 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11489 1005 NT_STATUS_OK
ReadX 11489 1938 24 24 NT_STATUS_OK
ReadX 11489 1920 276 276 NT_STATUS_OK
ReadX 11489 1918 14 14 NT_STATUS_OK
ReadX 11489 1918 7 7 NT_STATUS_OK
ReadX 11489 1919 12 12 NT_STATUS_OK
ReadX 11489 1919 8 8 NT_STATUS_OK
ReadX 11489 1917 15 15 NT_STATUS_OK
ReadX 11489 0 16 16 NT_STATUS_OK
ReadX 11489 16 2048 2048 NT_STATUS_OK
ReadX 11489 2064 2048 2048 NT_STATUS_OK
ReadX 11489 257 2048 2048 NT_STATUS_OK
ReadX 11489 385 2048 2048 NT_STATUS_OK
ReadX 11489 513 2048 2048 NT_STATUS_OK
ReadX 11489 641 2048 2048 NT_STATUS_OK
ReadX 11489 769 2048 2048 NT_STATUS_OK
ReadX 11489 897 2048 2048 NT_STATUS_OK
ReadX 11489 1025 2048 2048 NT_STATUS_OK
ReadX 11489 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11494 NT_STATUS_OK
WriteX 11494 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11494 258 NT_STATUS_OK
WriteX 11494 0 11588 11588 NT_STATUS_OK
Flush 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11495 NT_STATUS_OK
Close 11495 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
Close 11489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11499 NT_STATUS_OK
WriteX 11499 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11499 258 NT_STATUS_OK
WriteX 11499 0 11615 11615 NT_STATUS_OK
Flush 11499 NT_STATUS_OK
Close 11499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11505 NT_STATUS_OK
Close 11505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11508 NT_STATUS_OK
WriteX 11508 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11508 258 NT_STATUS_OK
WriteX 11508 0 65536 65536 NT_STATUS_OK
WriteX 11508 65536 16050 16050 NT_STATUS_OK
Close 11508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11488 1939 64 64 NT_STATUS_OK
ReadX 11488 128 248 248 NT_STATUS_OK
ReadX 11488 128 568 568 NT_STATUS_OK
ReadX 11488 3872 1536 1536 NT_STATUS_OK
ReadX 11488 3456 2560 2560 NT_STATUS_OK
ReadX 11488 3136 512 512 NT_STATUS_OK
ReadX 11488 2880 4096 4096 NT_STATUS_OK
ReadX 11488 3264 3072 3072 NT_STATUS_OK
ReadX 11488 320 4096 4096 NT_STATUS_OK
ReadX 11488 1024 4096 4096 NT_STATUS_OK
ReadX 11488 3616 4096 4096 NT_STATUS_OK
ReadX 11488 1939 64 64 NT_STATUS_OK
ReadX 11488 128 248 248 NT_STATUS_OK
ReadX 11488 128 608 608 NT_STATUS_OK
ReadX 11488 2858 1024 1024 NT_STATUS_OK
ReadX 11488 2810 4096 4096 NT_STATUS_OK
ReadX 11488 2826 4096 4096 NT_STATUS_OK
ReadX 11488 2580 2048 2048 NT_STATUS_OK
ReadX 11488 2800 2560 2560 NT_STATUS_OK
ReadX 11488 2100 4096 4096 NT_STATUS_OK
ReadX 11488 2084 4096 4096 NT_STATUS_OK
ReadX 11488 868 4096 4096 NT_STATUS_OK
ReadX 11488 2324 4096 4096 NT_STATUS_OK
ReadX 11488 884 4096 4096 NT_STATUS_OK
ReadX 11488 2604 1024 1024 NT_STATUS_OK
ReadX 11488 580 4096 4096 NT_STATUS_OK
ReadX 11488 596 4096 4096 NT_STATUS_OK
ReadX 11488 2752 4096 4096 NT_STATUS_OK
ReadX 11488 2842 1024 1024 NT_STATUS_OK
ReadX 11488 660 4096 4096 NT_STATUS_OK
ReadX 11488 2720 4096 4096 NT_STATUS_OK
ReadX 11488 2736 4096 4096 NT_STATUS_OK
ReadX 11488 628 4096 4096 NT_STATUS_OK
ReadX 11488 2704 4096 4096 NT_STATUS_OK
ReadX 11488 1556 4096 4096 NT_STATUS_OK
ReadX 11488 576 4096 4096 NT_STATUS_OK
ReadX 11488 3168 1536 1536 NT_STATUS_OK
ReadX 11488 832 4096 4096 NT_STATUS_OK
ReadX 11488 1088 4096 4096 NT_STATUS_OK
ReadX 11488 1344 4096 4096 NT_STATUS_OK
ReadX 11488 1600 4096 4096 NT_STATUS_OK
ReadX 11488 1856 4096 4096 NT_STATUS_OK
ReadX 11488 2112 4096 4096 NT_STATUS_OK
ReadX 11488 1892 4096 4096 NT_STATUS_OK
ReadX 11488 820 4096 4096 NT_STATUS_OK
ReadX 11488 788 4096 4096 NT_STATUS_OK
ReadX 11488 1604 4096 4096 NT_STATUS_OK
ReadX 11488 3648 4096 4096 NT_STATUS_OK
ReadX 11488 2608 4096 4096 NT_STATUS_OK
ReadX 11488 548 4096 4096 NT_STATUS_OK
ReadX 11488 740 4096 4096 NT_STATUS_OK
ReadX 11488 1344 4096 4096 NT_STATUS_OK
ReadX 11488 3392 4096 4096 NT_STATUS_OK
ReadX 11488 3904 4096 4096 NT_STATUS_OK
ReadX 11488 644 4096 4096 NT_STATUS_OK
ReadX 11488 676 4096 4096 NT_STATUS_OK
ReadX 11488 2688 4096 4096 NT_STATUS_OK
ReadX 11488 320 4096 4096 NT_STATUS_OK
ReadX 11488 900 4096 4096 NT_STATUS_OK
ReadX 11488 1908 4096 4096 NT_STATUS_OK
ReadX 11488 852 4096 4096 NT_STATUS_OK
ReadX 11488 724 4096 4096 NT_STATUS_OK
ReadX 11488 2292 4096 4096 NT_STATUS_OK
ReadX 11488 612 4096 4096 NT_STATUS_OK
ReadX 11488 388 4096 4096 NT_STATUS_OK
ReadX 11488 2368 4096 4096 NT_STATUS_OK
ReadX 11488 2624 4096 4096 NT_STATUS_OK
ReadX 11488 500 4096 4096 NT_STATUS_OK
ReadX 11488 356 4096 4096 NT_STATUS_OK
ReadX 11488 1024 4096 4096 NT_STATUS_OK
ReadX 11488 576 4096 4096 NT_STATUS_OK
ReadX 11488 340 4096 4096 NT_STATUS_OK
ReadX 11488 420 4096 4096 NT_STATUS_OK
ReadX 11488 1600 4096 4096 NT_STATUS_OK
ReadX 11488 404 4096 4096 NT_STATUS_OK
ReadX 11488 1428 4096 4096 NT_STATUS_OK
ReadX 11488 2656 4096 4096 NT_STATUS_OK
ReadX 11488 2624 4096 4096 NT_STATUS_OK
ReadX 11488 452 4096 4096 NT_STATUS_OK
ReadX 11488 692 4096 4096 NT_STATUS_OK
ReadX 11488 564 4096 4096 NT_STATUS_OK
ReadX 11488 372 4096 4096 NT_STATUS_OK
ReadX 11488 468 4096 4096 NT_STATUS_OK
ReadX 11488 484 4096 4096 NT_STATUS_OK
ReadX 11488 1088 4096 4096 NT_STATUS_OK
ReadX 11488 1924 4096 4096 NT_STATUS_OK
ReadX 11488 2768 4096 4096 NT_STATUS_OK
ReadX 11488 832 4096 4096 NT_STATUS_OK
ReadX 11488 836 4096 4096 NT_STATUS_OK
ReadX 11488 1856 4096 4096 NT_STATUS_OK
ReadX 11488 2640 4096 4096 NT_STATUS_OK
ReadX 11488 436 4096 4096 NT_STATUS_OK
ReadX 11488 1828 4096 4096 NT_STATUS_OK
ReadX 11488 804 4096 4096 NT_STATUS_OK
ReadX 11488 1860 4096 4096 NT_STATUS_OK
ReadX 11488 1812 4096 4096 NT_STATUS_OK
ReadX 11488 756 4096 4096 NT_STATUS_OK
ReadX 11488 1636 4096 4096 NT_STATUS_OK
ReadX 11488 772 4096 4096 NT_STATUS_OK
ReadX 11488 2036 4096 4096 NT_STATUS_OK
ReadX 11488 1220 4096 4096 NT_STATUS_OK
ReadX 11488 1652 4096 4096 NT_STATUS_OK
ReadX 11488 2588 4096 4096 NT_STATUS_OK
ReadX 11488 916 4096 4096 NT_STATUS_OK
ReadX 11488 260 4096 4096 NT_STATUS_OK
ReadX 11488 932 4096 4096 NT_STATUS_OK
ReadX 11488 2624 4096 4096 NT_STATUS_OK
ReadX 11488 308 4096 4096 NT_STATUS_OK
ReadX 11488 292 4096 4096 NT_STATUS_OK
ReadX 11488 1140 4096 4096 NT_STATUS_OK
ReadX 11488 276 4096 4096 NT_STATUS_OK
ReadX 11488 2020 4096 4096 NT_STATUS_OK
ReadX 11488 2880 4096 4096 NT_STATUS_OK
ReadX 11488 516 4096 4096 NT_STATUS_OK
ReadX 11488 1844 4096 4096 NT_STATUS_OK
ReadX 11488 1124 4096 4096 NT_STATUS_OK
ReadX 11488 3136 4096 4096 NT_STATUS_OK
ReadX 11488 324 4096 4096 NT_STATUS_OK
ReadX 11488 1156 4096 4096 NT_STATUS_OK
ReadX 11488 1172 4096 4096 NT_STATUS_OK
ReadX 11488 2112 4096 4096 NT_STATUS_OK
ReadX 11488 2368 4096 4096 NT_STATUS_OK
ReadX 11488 964 4096 4096 NT_STATUS_OK
ReadX 11488 980 4096 4096 NT_STATUS_OK
ReadX 11488 1012 4096 4096 NT_STATUS_OK
ReadX 11488 532 4096 4096 NT_STATUS_OK
ReadX 11488 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11488 1620 4096 4096 NT_STATUS_OK
ReadX 11488 1604 4096 4096 NT_STATUS_OK
ReadX 11488 2116 4096 4096 NT_STATUS_OK
ReadX 11488 2132 4096 4096 NT_STATUS_OK
ReadX 11488 2148 4096 4096 NT_STATUS_OK
ReadX 11488 2276 4096 4096 NT_STATUS_OK
ReadX 11488 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11510 NT_STATUS_OK
Close 11510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11513 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 1004 NT_STATUS_OK
Close 11468 NT_STATUS_OK
WriteX 11513 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11513 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11470 1004 NT_STATUS_OK
Close 11470 NT_STATUS_OK
WriteX 11513 0 65536 65536 NT_STATUS_OK
WriteX 11513 65536 64850 64850 NT_STATUS_OK
Close 11513 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11515 NT_STATUS_OK
WriteX 11515 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 258 NT_STATUS_OK
ReadX 11488 2068 4096 4096 NT_STATUS_OK
ReadX 11488 1588 4096 4096 NT_STATUS_OK
ReadX 11488 1572 4096 4096 NT_STATUS_OK
WriteX 11515 0 18630 18630 NT_STATUS_OK
Flush 11515 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11519 NT_STATUS_OK
ReadX 11519 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11488 612 4096 4096 NT_STATUS_OK
ReadX 11488 564 4096 4096 NT_STATUS_OK
ReadX 11488 1876 4096 4096 NT_STATUS_OK
ReadX 11488 628 4096 4096 NT_STATUS_OK
ReadX 11488 740 4096 4096 NT_STATUS_OK
ReadX 11488 724 4096 4096 NT_STATUS_OK
ReadX 11488 644 4096 4096 NT_STATUS_OK
ReadX 11488 2324 4096 4096 NT_STATUS_OK
ReadX 11488 660 4096 4096 NT_STATUS_OK
ReadX 11488 852 4096 4096 NT_STATUS_OK
ReadX 11488 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11488 2368 4096 4096 NT_STATUS_OK
ReadX 11488 1024 4096 4096 NT_STATUS_OK
ReadX 11488 320 4096 4096 NT_STATUS_OK
ReadX 11488 580 4096 4096 NT_STATUS_OK
ReadX 11488 3136 512 512 NT_STATUS_OK
ReadX 11488 2880 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 61440 4096 4096 NT_STATUS_OK
ReadX 11520 126976 4096 4096 NT_STATUS_OK
WriteX 11520 0 65536 65536 NT_STATUS_OK
WriteX 11520 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 61440 4096 4096 NT_STATUS_OK
ReadX 11521 126976 4096 4096 NT_STATUS_OK
ReadX 11521 192512 4096 4096 NT_STATUS_OK
ReadX 11521 258048 4096 4096 NT_STATUS_OK
WriteX 11521 0 65536 65536 NT_STATUS_OK
WriteX 11521 65536 65536 65536 NT_STATUS_OK
WriteX 11521 131072 65536 65536 NT_STATUS_OK
WriteX 11521 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 61440 4096 4096 NT_STATUS_OK
ReadX 11522 126976 4096 4096 NT_STATUS_OK
ReadX 11522 192512 4096 4096 NT_STATUS_OK
ReadX 11522 258048 4096 4096 NT_STATUS_OK
ReadX 11522 323584 4096 4096 NT_STATUS_OK
ReadX 11522 389120 4096 4096 NT_STATUS_OK
ReadX 11522 454656 4096 4096 NT_STATUS_OK
ReadX 11522 520192 4096 4096 NT_STATUS_OK
WriteX 11522 0 65536 65536 NT_STATUS_OK
WriteX 11522 65536 65536 65536 NT_STATUS_OK
WriteX 11522 131072 65536 65536 NT_STATUS_OK
WriteX 11522 196608 65536 65536 NT_STATUS_OK
WriteX 11522 262144 65536 65536 NT_STATUS_OK
WriteX 11522 327680 65536 65536 NT_STATUS_OK
WriteX 11522 393216 65536 65536 NT_STATUS_OK
WriteX 11522 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11525 NT_STATUS_OK
WriteX 11525 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11523 0 8192 8192 NT_STATUS_OK
Flush 11523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11523 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11523 0 8192 8192 NT_STATUS_OK
Flush 11523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11523 0 8192 8192 NT_STATUS_OK
Flush 11523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11523 0 8192 8192 NT_STATUS_OK
Flush 11523 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11519 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Close 11522 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11530 NT_STATUS_OK
WriteX 11530 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11530 258 NT_STATUS_OK
WriteX 11530 0 62591 62591 NT_STATUS_OK
Close 11530 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11535 NT_STATUS_OK
WriteX 11535 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11535 258 NT_STATUS_OK
WriteX 11535 0 10845 10845 NT_STATUS_OK
Close 11535 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11537 NT_STATUS_OK
Close 11537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11540 NT_STATUS_OK
WriteX 11540 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11540 258 NT_STATUS_OK
WriteX 11540 0 30118 30118 NT_STATUS_OK
Close 11540 NT_STATUS_OK
WriteX 11523 0 4096 4096 NT_STATUS_OK
WriteX 11525 0 64 64 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 61440 61440 NT_STATUS_OK
ReadX 11542 61440 4096 4096 NT_STATUS_OK
ReadX 11542 65536 61440 61440 NT_STATUS_OK
ReadX 11542 126976 4096 4096 NT_STATUS_OK
ReadX 11542 131072 61440 61440 NT_STATUS_OK
ReadX 11542 192512 4096 4096 NT_STATUS_OK
ReadX 11542 196608 61440 61440 NT_STATUS_OK
ReadX 11542 258048 4096 4096 NT_STATUS_OK
ReadX 11542 262144 61440 61440 NT_STATUS_OK
ReadX 11542 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 61440 61440 NT_STATUS_OK
ReadX 11543 61440 4096 4096 NT_STATUS_OK
ReadX 11543 65536 61440 61440 NT_STATUS_OK
ReadX 11543 126976 4096 4096 NT_STATUS_OK
ReadX 11543 131072 61440 61440 NT_STATUS_OK
ReadX 11543 192512 4096 4096 NT_STATUS_OK
ReadX 11543 196608 61440 61440 NT_STATUS_OK
ReadX 11543 258048 4096 4096 NT_STATUS_OK
ReadX 11543 262144 61440 61440 NT_STATUS_OK
ReadX 11543 323584 4096 4096 NT_STATUS_OK
ReadX 11543 327680 61440 61440 NT_STATUS_OK
ReadX 11543 389120 4096 4096 NT_STATUS_OK
ReadX 11543 393216 61440 61440 NT_STATUS_OK
ReadX 11543 454656 4096 4096 NT_STATUS_OK
ReadX 11543 458752 61440 61440 NT_STATUS_OK
ReadX 11543 520192 4096 4096 NT_STATUS_OK
ReadX 11543 524288 61440 61440 NT_STATUS_OK
ReadX 11543 585728 4096 4096 NT_STATUS_OK
ReadX 11543 589824 61440 61440 NT_STATUS_OK
ReadX 11543 651264 4096 4096 NT_STATUS_OK
ReadX 11543 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 0 61440 61440 NT_STATUS_OK
ReadX 11544 61440 4096 4096 NT_STATUS_OK
ReadX 11544 65536 61440 61440 NT_STATUS_OK
ReadX 11544 126976 4096 4096 NT_STATUS_OK
ReadX 11544 131072 61440 61440 NT_STATUS_OK
ReadX 11544 192512 4096 4096 NT_STATUS_OK
ReadX 11544 196608 61440 61440 NT_STATUS_OK
ReadX 11544 258048 4096 4096 NT_STATUS_OK
ReadX 11544 262144 61440 61440 NT_STATUS_OK
ReadX 11544 323584 4096 4096 NT_STATUS_OK
ReadX 11544 327680 61440 61440 NT_STATUS_OK
ReadX 11544 389120 4096 4096 NT_STATUS_OK
ReadX 11544 393216 61440 61440 NT_STATUS_OK
ReadX 11544 454656 4096 4096 NT_STATUS_OK
ReadX 11544 458752 61440 61440 NT_STATUS_OK
ReadX 11544 520192 4096 4096 NT_STATUS_OK
ReadX 11544 524288 61440 61440 NT_STATUS_OK
ReadX 11544 585728 4096 4096 NT_STATUS_OK
ReadX 11544 589824 61440 61440 NT_STATUS_OK
ReadX 11544 651264 4096 4096 NT_STATUS_OK
ReadX 11544 655360 61440 61440 NT_STATUS_OK
ReadX 11544 716800 4096 4096 NT_STATUS_OK
ReadX 11544 720896 61440 61440 NT_STATUS_OK
ReadX 11544 782336 4096 4096 NT_STATUS_OK
ReadX 11544 786432 61440 61440 NT_STATUS_OK
ReadX 11544 847872 4096 4096 NT_STATUS_OK
ReadX 11544 851968 61440 61440 NT_STATUS_OK
ReadX 11544 913408 4096 4096 NT_STATUS_OK
ReadX 11544 917504 61440 61440 NT_STATUS_OK
ReadX 11544 978944 4096 4096 NT_STATUS_OK
ReadX 11544 983040 61440 61440 NT_STATUS_OK
ReadX 11544 1044480 4096 4096 NT_STATUS_OK
ReadX 11544 1048576 61440 61440 NT_STATUS_OK
ReadX 11544 1110016 4096 4096 NT_STATUS_OK
ReadX 11544 1114112 61440 61440 NT_STATUS_OK
ReadX 11544 1175552 4096 4096 NT_STATUS_OK
ReadX 11544 1179648 61440 61440 NT_STATUS_OK
ReadX 11544 1241088 4096 4096 NT_STATUS_OK
ReadX 11544 1245184 61440 61440 NT_STATUS_OK
ReadX 11544 1306624 4096 4096 NT_STATUS_OK
ReadX 11544 1310720 61440 61440 NT_STATUS_OK
ReadX 11544 1372160 4096 4096 NT_STATUS_OK
ReadX 11544 1376256 61440 61440 NT_STATUS_OK
ReadX 11544 1437696 4096 4096 NT_STATUS_OK
ReadX 11544 1441792 61440 61440 NT_STATUS_OK
ReadX 11544 1503232 4096 4096 NT_STATUS_OK
ReadX 11544 1507328 61440 61440 NT_STATUS_OK
ReadX 11544 1568768 4096 4096 NT_STATUS_OK
ReadX 11544 1572864 61440 61440 NT_STATUS_OK
ReadX 11544 1634304 4096 4096 NT_STATUS_OK
ReadX 11544 1638400 61440 61440 NT_STATUS_OK
ReadX 11544 1699840 4096 4096 NT_STATUS_OK
ReadX 11544 1703936 61440 61440 NT_STATUS_OK
ReadX 11544 1765376 4096 4096 NT_STATUS_OK
ReadX 11544 1769472 61440 61440 NT_STATUS_OK
ReadX 11544 1830912 4096 4096 NT_STATUS_OK
ReadX 11544 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11545 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11542 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11547 NT_STATUS_OK
ReadX 11547 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
ReadX 11549 4096 4096 4096 NT_STATUS_OK
ReadX 11549 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11547 NT_STATUS_OK
Close 11548 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11553 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11554 NT_STATUS_OK
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 8192 8192 NT_STATUS_OK
ReadX 11557 8192 8192 8192 NT_STATUS_OK
ReadX 11557 16384 8192 8192 NT_STATUS_OK
ReadX 11557 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11562 NT_STATUS_OK
WriteX 11562 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11562 258 NT_STATUS_OK
WriteX 11562 0 10438 10438 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11566 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11567 NT_STATUS_OK
Close 11567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11568 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11570 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11571 NT_STATUS_OK
ReadX 11571 0 4096 4096 NT_STATUS_OK
ReadX 11571 4096 4096 4096 NT_STATUS_OK
ReadX 11571 8192 4096 4096 NT_STATUS_OK
ReadX 11571 12288 8192 8192 NT_STATUS_OK
ReadX 11571 20480 8192 8192 NT_STATUS_OK
ReadX 11571 28672 8192 8192 NT_STATUS_OK
ReadX 11571 36864 8192 8192 NT_STATUS_OK
ReadX 11571 45056 8192 8192 NT_STATUS_OK
ReadX 11571 53248 8192 8192 NT_STATUS_OK
ReadX 11571 61440 8192 8192 NT_STATUS_OK
ReadX 11571 69632 8192 8192 NT_STATUS_OK
ReadX 11571 77824 8192 8192 NT_STATUS_OK
ReadX 11571 86016 8192 8192 NT_STATUS_OK
ReadX 11571 94208 8192 8192 NT_STATUS_OK
ReadX 11571 102400 8192 8192 NT_STATUS_OK
ReadX 11571 110592 8192 8192 NT_STATUS_OK
ReadX 11571 118784 8192 8192 NT_STATUS_OK
ReadX 11571 126976 8192 8192 NT_STATUS_OK
ReadX 11571 135168 8192 8192 NT_STATUS_OK
ReadX 11571 143360 8192 8192 NT_STATUS_OK
ReadX 11571 151552 8192 8192 NT_STATUS_OK
ReadX 11571 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11571 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Close 11568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11576 NT_STATUS_OK
WriteX 11576 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11576 258 NT_STATUS_OK
WriteX 11576 0 28489 28489 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11579 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11582 NT_STATUS_OK
ReadX 11582 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 8192 8192 NT_STATUS_OK
ReadX 11583 8192 8192 8192 NT_STATUS_OK
ReadX 11583 16384 8192 8192 NT_STATUS_OK
ReadX 11583 24576 8192 8192 NT_STATUS_OK
ReadX 11583 32768 16384 16384 NT_STATUS_OK
ReadX 11583 49152 8192 8192 NT_STATUS_OK
ReadX 11583 57344 8192 8192 NT_STATUS_OK
ReadX 11583 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11585 NT_STATUS_OK
Close 11585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11588 NT_STATUS_OK
WriteX 11588 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 258 NT_STATUS_OK
WriteX 11588 0 29253 29253 NT_STATUS_OK
Close 11588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11589 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11592 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11595 NT_STATUS_OK
WriteX 11595 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 258 NT_STATUS_OK
WriteX 11595 0 30183 30183 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11596 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11598 NT_STATUS_OK
WriteX 11598 0 510 510 NT_STATUS_OK
WriteX 11598 510 512 512 NT_STATUS_OK
WriteX 11598 1022 510 510 NT_STATUS_OK
WriteX 11598 1532 510 510 NT_STATUS_OK
WriteX 11598 2042 168 168 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
WriteX 11601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 61440 4096 4096 NT_STATUS_OK
ReadX 11602 126976 4096 4096 NT_STATUS_OK
WriteX 11602 0 65536 65536 NT_STATUS_OK
WriteX 11602 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 61440 4096 4096 NT_STATUS_OK
ReadX 11603 126976 4096 4096 NT_STATUS_OK
ReadX 11603 192512 4096 4096 NT_STATUS_OK
ReadX 11603 258048 4096 4096 NT_STATUS_OK
WriteX 11603 0 65536 65536 NT_STATUS_OK
WriteX 11603 65536 65536 65536 NT_STATUS_OK
WriteX 11603 131072 65536 65536 NT_STATUS_OK
WriteX 11603 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 61440 4096 4096 NT_STATUS_OK
ReadX 11604 126976 4096 4096 NT_STATUS_OK
ReadX 11604 192512 4096 4096 NT_STATUS_OK
ReadX 11604 258048 4096 4096 NT_STATUS_OK
ReadX 11604 323584 4096 4096 NT_STATUS_OK
ReadX 11604 389120 4096 4096 NT_STATUS_OK
ReadX 11604 454656 4096 4096 NT_STATUS_OK
ReadX 11604 520192 4096 4096 NT_STATUS_OK
WriteX 11604 0 65536 65536 NT_STATUS_OK
WriteX 11604 65536 65536 65536 NT_STATUS_OK
WriteX 11604 131072 65536 65536 NT_STATUS_OK
WriteX 11604 196608 65536 65536 NT_STATUS_OK
WriteX 11604 262144 65536 65536 NT_STATUS_OK
WriteX 11604 327680 65536 65536 NT_STATUS_OK
WriteX 11604 393216 65536 65536 NT_STATUS_OK
WriteX 11604 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11611 NT_STATUS_OK
Close 11611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11620 NT_STATUS_OK
Close 11620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11649 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11659 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11664 NT_STATUS_OK
Close 11664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11673 NT_STATUS_OK
WriteX 11673 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11673 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11673 0 65536 65536 NT_STATUS_OK
WriteX 11673 65536 65536 65536 NT_STATUS_OK
WriteX 11673 131072 65536 65536 NT_STATUS_OK
WriteX 11673 196608 65536 65536 NT_STATUS_OK
WriteX 11673 262144 26634 26634 NT_STATUS_OK
Close 11673 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11678 NT_STATUS_OK
Close 11678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
Close 11680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
ReadX 11681 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11682 NT_STATUS_OK
Close 11682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11686 NT_STATUS_OK
Close 11686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11689 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11691 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11698 NT_STATUS_OK
Close 11698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11700 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11704 NT_STATUS_OK
Close 11704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11709 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11714 NT_STATUS_OK
Close 11714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11724 NT_STATUS_OK
Close 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11729 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11733 NT_STATUS_OK
Close 11733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11743 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11748 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11758 NT_STATUS_OK
Close 11758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
Close 11760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
Close 11761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11772 NT_STATUS_OK
Close 11772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11774 NT_STATUS_OK
ReadX 11774 0 4096 4096 NT_STATUS_OK
Close 11774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11805 0 4096 4096 NT_STATUS_OK
Close 11805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 0 4096 4096 NT_STATUS_OK
ReadX 11807 4096 4096 4096 NT_STATUS_OK
ReadX 11807 8192 4096 4096 NT_STATUS_OK
ReadX 11807 12288 4096 4096 NT_STATUS_OK
ReadX 11807 16384 4096 4096 NT_STATUS_OK
ReadX 11807 20480 4096 4096 NT_STATUS_OK
ReadX 11807 24576 4096 4096 NT_STATUS_OK
ReadX 11807 28672 4096 4096 NT_STATUS_OK
ReadX 11807 32768 4096 4096 NT_STATUS_OK
ReadX 11807 36864 4096 4096 NT_STATUS_OK
ReadX 11807 40960 4096 4096 NT_STATUS_OK
ReadX 11807 45056 4096 4096 NT_STATUS_OK
ReadX 11807 49152 4096 4096 NT_STATUS_OK
ReadX 11807 53248 4096 4096 NT_STATUS_OK
ReadX 11807 57344 4096 4096 NT_STATUS_OK
ReadX 11807 61440 4096 4096 NT_STATUS_OK
ReadX 11807 65536 4096 4096 NT_STATUS_OK
ReadX 11807 69632 4096 4096 NT_STATUS_OK
ReadX 11807 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11807 1004 NT_STATUS_OK
WriteX 11807 0 4096 4096 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11808 NT_STATUS_OK
SET_FILE_INFORMATION 11808 1004 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11813 NT_STATUS_OK
WriteX 11813 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 258 NT_STATUS_OK
WriteX 11813 0 65536 65536 NT_STATUS_OK
WriteX 11813 65536 19979 19979 NT_STATUS_OK
Close 11813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
QUERY_FILE_INFORMATION 11814 1004 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11819 1004 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11820 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11822 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11825 NT_STATUS_OK
WriteX 11825 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11825 258 NT_STATUS_OK
WriteX 11825 0 65536 65536 NT_STATUS_OK
WriteX 11825 65536 17654 17654 NT_STATUS_OK
Close 11825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 1004 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
Close 11826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11827 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
Close 11827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11829 NT_STATUS_OK
Close 11829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
ReadX 11831 4096 4096 4096 NT_STATUS_OK
ReadX 11831 8192 4096 4096 NT_STATUS_OK
ReadX 11831 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11831 16384 4096 4096 NT_STATUS_OK
ReadX 11831 20480 4096 4096 NT_STATUS_OK
ReadX 11831 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
Close 11832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
Close 11833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
WriteX 11834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11835 NT_STATUS_OK
Close 11835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11840 NT_STATUS_OK
WriteX 11840 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11840 258 NT_STATUS_OK
WriteX 11840 0 65536 65536 NT_STATUS_OK
WriteX 11840 65536 19490 19490 NT_STATUS_OK
Close 11840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
WriteX 11841 0 4096 4096 NT_STATUS_OK
Flush 11841 NT_STATUS_OK
WriteX 11841 0 4096 4096 NT_STATUS_OK
Flush 11841 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 1004 NT_STATUS_OK
WriteX 11841 0 4096 4096 NT_STATUS_OK
Flush 11841 NT_STATUS_OK
WriteX 11841 0 4096 4096 NT_STATUS_OK
Flush 11841 NT_STATUS_OK
WriteX 11841 0 4096 4096 NT_STATUS_OK
Flush 11841 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
WriteX 11841 0 4096 4096 NT_STATUS_OK
Flush 11841 NT_STATUS_OK
Close 11841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11842 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11846 0 4096 4096 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11848 4096 4096 4096 NT_STATUS_OK
ReadX 11848 8192 4096 4096 NT_STATUS_OK
ReadX 11848 12288 4096 4096 NT_STATUS_OK
ReadX 11848 16384 4096 4096 NT_STATUS_OK
ReadX 11848 20480 4096 4096 NT_STATUS_OK
ReadX 11848 24576 4096 4096 NT_STATUS_OK
ReadX 11848 28672 4096 4096 NT_STATUS_OK
ReadX 11848 32768 4096 4096 NT_STATUS_OK
ReadX 11848 36864 4096 4096 NT_STATUS_OK
ReadX 11848 40960 4096 4096 NT_STATUS_OK
ReadX 11848 45056 4096 4096 NT_STATUS_OK
ReadX 11848 49152 4096 4096 NT_STATUS_OK
ReadX 11848 53248 4096 4096 NT_STATUS_OK
ReadX 11848 57344 4096 4096 NT_STATUS_OK
ReadX 11848 61440 4096 4096 NT_STATUS_OK
ReadX 11848 65536 4096 4096 NT_STATUS_OK
ReadX 11848 69632 4096 4096 NT_STATUS_OK
ReadX 11848 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11848 1004 NT_STATUS_OK
WriteX 11848 0 4096 4096 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11849 NT_STATUS_OK
SET_FILE_INFORMATION 11849 1004 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11851 NT_STATUS_OK
Close 11851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11854 NT_STATUS_OK
WriteX 11854 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11854 258 NT_STATUS_OK
WriteX 11854 0 65536 65536 NT_STATUS_OK
WriteX 11854 65536 8866 8866 NT_STATUS_OK
Close 11854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
Flush 11855 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
Flush 11855 NT_STATUS_OK
Close 11855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
Close 11857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11859 1004 NT_STATUS_OK
WriteX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11862 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11865 NT_STATUS_OK
WriteX 11865 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11865 258 NT_STATUS_OK
WriteX 11865 0 65536 65536 NT_STATUS_OK
WriteX 11865 65536 9298 9298 NT_STATUS_OK
Close 11865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
WriteX 11866 0 4096 4096 NT_STATUS_OK
Flush 11866 NT_STATUS_OK
SET_FILE_INFORMATION 11866 1004 NT_STATUS_OK
WriteX 11866 0 4096 4096 NT_STATUS_OK
Flush 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11867 NT_STATUS_OK
SET_FILE_INFORMATION 11867 1004 NT_STATUS_OK
Close 11867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11869 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11872 0 4096 4096 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11873 4096 4096 4096 NT_STATUS_OK
ReadX 11873 8192 4096 4096 NT_STATUS_OK
ReadX 11873 12288 4096 4096 NT_STATUS_OK
ReadX 11873 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 4096 4096 NT_STATUS_OK
Close 11875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11876 1004 NT_STATUS_OK
WriteX 11876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11877 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11873 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11879 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11882 NT_STATUS_OK
WriteX 11882 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 258 NT_STATUS_OK
WriteX 11882 0 65536 65536 NT_STATUS_OK
WriteX 11882 65536 11540 11540 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
SET_FILE_INFORMATION 11883 1004 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11884 NT_STATUS_OK
SET_FILE_INFORMATION 11884 1004 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 61440 4096 4096 NT_STATUS_OK
ReadX 11888 126976 4096 4096 NT_STATUS_OK
WriteX 11888 0 65536 65536 NT_STATUS_OK
WriteX 11888 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 61440 4096 4096 NT_STATUS_OK
ReadX 11889 126976 4096 4096 NT_STATUS_OK
ReadX 11889 192512 4096 4096 NT_STATUS_OK
ReadX 11889 258048 4096 4096 NT_STATUS_OK
WriteX 11889 0 65536 65536 NT_STATUS_OK
WriteX 11889 65536 65536 65536 NT_STATUS_OK
WriteX 11889 131072 65536 65536 NT_STATUS_OK
WriteX 11889 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 61440 4096 4096 NT_STATUS_OK
ReadX 11890 126976 4096 4096 NT_STATUS_OK
ReadX 11890 192512 4096 4096 NT_STATUS_OK
ReadX 11890 258048 4096 4096 NT_STATUS_OK
ReadX 11890 323584 4096 4096 NT_STATUS_OK
ReadX 11890 389120 4096 4096 NT_STATUS_OK
ReadX 11890 454656 4096 4096 NT_STATUS_OK
ReadX 11890 520192 4096 4096 NT_STATUS_OK
WriteX 11890 0 65536 65536 NT_STATUS_OK
WriteX 11890 65536 65536 65536 NT_STATUS_OK
WriteX 11890 131072 65536 65536 NT_STATUS_OK
WriteX 11890 196608 65536 65536 NT_STATUS_OK
WriteX 11890 262144 65536 65536 NT_STATUS_OK
WriteX 11890 327680 65536 65536 NT_STATUS_OK
WriteX 11890 393216 65536 65536 NT_STATUS_OK
WriteX 11890 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
ReadX 11891 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11892 NT_STATUS_OK
WriteX 11892 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11892 258 NT_STATUS_OK
WriteX 11892 0 53 53 NT_STATUS_OK
Close 11892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Close 11831 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11891 8192 4096 4096 NT_STATUS_OK
ReadX 11891 12288 4096 4096 NT_STATUS_OK
WriteX 11895 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11895 258 NT_STATUS_OK
ReadX 11891 16384 4096 4096 NT_STATUS_OK
ReadX 11891 20480 4096 4096 NT_STATUS_OK
WriteX 11895 0 15360 15360 NT_STATUS_OK
Close 11895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11896 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11896 1004 NT_STATUS_OK
WriteX 11896 0 4096 4096 NT_STATUS_OK
Close 11896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11899 4096 4096 4096 NT_STATUS_OK
ReadX 11899 8192 4096 4096 NT_STATUS_OK
ReadX 11899 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
ReadX 11902 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
ReadX 11903 4096 4096 4096 NT_STATUS_OK
ReadX 11903 8192 4096 4096 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
WriteX 11904 0 15360 15360 NT_STATUS_OK
Close 11904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11905 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11905 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11906 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11909 NT_STATUS_OK
SET_FILE_INFORMATION 11909 1004 NT_STATUS_OK
Close 11909 NT_STATUS_OK
WriteX 11905 0 4096 4096 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
ReadX 11912 4096 4096 4096 NT_STATUS_OK
ReadX 11912 8192 4096 4096 NT_STATUS_OK
ReadX 11912 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11912 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11912 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11914 NT_STATUS_OK
WriteX 11914 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 258 NT_STATUS_OK
WriteX 11914 0 53 53 NT_STATUS_OK
Close 11914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11913 4096 4096 4096 NT_STATUS_OK
ReadX 11913 8192 4096 4096 NT_STATUS_OK
ReadX 11913 12288 4096 4096 NT_STATUS_OK
WriteX 11917 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11917 258 NT_STATUS_OK
WriteX 11917 0 12006 12006 NT_STATUS_OK
Close 11917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11918 NT_STATUS_OK
ReadX 11918 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11918 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11918 1004 NT_STATUS_OK
WriteX 11918 0 4096 4096 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11919 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11921 4096 4096 4096 NT_STATUS_OK
ReadX 11921 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11924 NT_STATUS_OK
WriteX 11924 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11924 258 NT_STATUS_OK
WriteX 11924 0 11991 11991 NT_STATUS_OK
Close 11924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11925 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11925 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11926 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11929 NT_STATUS_OK
WriteX 11912 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11929 1004 NT_STATUS_OK
Close 11929 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11932 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
ReadX 11932 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
Close 11908 NT_STATUS_OK
WriteX 11932 0 12288 12288 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11912 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11937 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 61440 61440 NT_STATUS_OK
ReadX 11939 61440 4096 4096 NT_STATUS_OK
ReadX 11939 65536 61440 61440 NT_STATUS_OK
ReadX 11939 126976 4096 4096 NT_STATUS_OK
ReadX 11939 131072 61440 61440 NT_STATUS_OK
ReadX 11939 192512 4096 4096 NT_STATUS_OK
ReadX 11939 196608 61440 61440 NT_STATUS_OK
ReadX 11939 258048 4096 4096 NT_STATUS_OK
ReadX 11939 262144 61440 61440 NT_STATUS_OK
ReadX 11939 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 0 61440 61440 NT_STATUS_OK
ReadX 11940 61440 4096 4096 NT_STATUS_OK
ReadX 11940 65536 61440 61440 NT_STATUS_OK
ReadX 11940 126976 4096 4096 NT_STATUS_OK
ReadX 11940 131072 61440 61440 NT_STATUS_OK
ReadX 11940 192512 4096 4096 NT_STATUS_OK
ReadX 11940 196608 61440 61440 NT_STATUS_OK
ReadX 11940 258048 4096 4096 NT_STATUS_OK
ReadX 11940 262144 61440 61440 NT_STATUS_OK
ReadX 11940 323584 4096 4096 NT_STATUS_OK
ReadX 11940 327680 61440 61440 NT_STATUS_OK
ReadX 11940 389120 4096 4096 NT_STATUS_OK
ReadX 11940 393216 61440 61440 NT_STATUS_OK
ReadX 11940 454656 4096 4096 NT_STATUS_OK
ReadX 11940 458752 61440 61440 NT_STATUS_OK
ReadX 11940 520192 4096 4096 NT_STATUS_OK
ReadX 11940 524288 61440 61440 NT_STATUS_OK
ReadX 11940 585728 4096 4096 NT_STATUS_OK
ReadX 11940 589824 61440 61440 NT_STATUS_OK
ReadX 11940 651264 4096 4096 NT_STATUS_OK
ReadX 11940 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 61440 61440 NT_STATUS_OK
ReadX 11941 61440 4096 4096 NT_STATUS_OK
ReadX 11941 65536 61440 61440 NT_STATUS_OK
ReadX 11941 126976 4096 4096 NT_STATUS_OK
ReadX 11941 131072 61440 61440 NT_STATUS_OK
ReadX 11941 192512 4096 4096 NT_STATUS_OK
ReadX 11941 196608 61440 61440 NT_STATUS_OK
ReadX 11941 258048 4096 4096 NT_STATUS_OK
ReadX 11941 262144 61440 61440 NT_STATUS_OK
ReadX 11941 323584 4096 4096 NT_STATUS_OK
ReadX 11941 327680 61440 61440 NT_STATUS_OK
ReadX 11941 389120 4096 4096 NT_STATUS_OK
ReadX 11941 393216 61440 61440 NT_STATUS_OK
ReadX 11941 454656 4096 4096 NT_STATUS_OK
ReadX 11941 458752 61440 61440 NT_STATUS_OK
ReadX 11941 520192 4096 4096 NT_STATUS_OK
ReadX 11941 524288 61440 61440 NT_STATUS_OK
ReadX 11941 585728 4096 4096 NT_STATUS_OK
ReadX 11941 589824 61440 61440 NT_STATUS_OK
ReadX 11941 651264 4096 4096 NT_STATUS_OK
ReadX 11941 655360 61440 61440 NT_STATUS_OK
ReadX 11941 716800 4096 4096 NT_STATUS_OK
ReadX 11941 720896 61440 61440 NT_STATUS_OK
ReadX 11941 782336 4096 4096 NT_STATUS_OK
ReadX 11941 786432 61440 61440 NT_STATUS_OK
ReadX 11941 847872 4096 4096 NT_STATUS_OK
ReadX 11941 851968 61440 61440 NT_STATUS_OK
ReadX 11941 913408 4096 4096 NT_STATUS_OK
ReadX 11941 917504 61440 61440 NT_STATUS_OK
ReadX 11941 978944 4096 4096 NT_STATUS_OK
ReadX 11941 983040 61440 61440 NT_STATUS_OK
ReadX 11941 1044480 4096 4096 NT_STATUS_OK
ReadX 11941 1048576 61440 61440 NT_STATUS_OK
ReadX 11941 1110016 4096 4096 NT_STATUS_OK
ReadX 11941 1114112 61440 61440 NT_STATUS_OK
ReadX 11941 1175552 4096 4096 NT_STATUS_OK
ReadX 11941 1179648 61440 61440 NT_STATUS_OK
ReadX 11941 1241088 4096 4096 NT_STATUS_OK
ReadX 11941 1245184 61440 61440 NT_STATUS_OK
ReadX 11941 1306624 4096 4096 NT_STATUS_OK
ReadX 11941 1310720 61440 61440 NT_STATUS_OK
ReadX 11941 1372160 4096 4096 NT_STATUS_OK
ReadX 11941 1376256 61440 61440 NT_STATUS_OK
ReadX 11941 1437696 4096 4096 NT_STATUS_OK
ReadX 11941 1441792 61440 61440 NT_STATUS_OK
ReadX 11941 1503232 4096 4096 NT_STATUS_OK
ReadX 11941 1507328 61440 61440 NT_STATUS_OK
ReadX 11941 1568768 4096 4096 NT_STATUS_OK
ReadX 11941 1572864 61440 61440 NT_STATUS_OK
ReadX 11941 1634304 4096 4096 NT_STATUS_OK
ReadX 11941 1638400 61440 61440 NT_STATUS_OK
ReadX 11941 1699840 4096 4096 NT_STATUS_OK
ReadX 11941 1703936 61440 61440 NT_STATUS_OK
ReadX 11941 1765376 4096 4096 NT_STATUS_OK
ReadX 11941 1769472 61440 61440 NT_STATUS_OK
ReadX 11941 1830912 4096 4096 NT_STATUS_OK
ReadX 11941 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11948 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 1004 NT_STATUS_OK
WriteX 11948 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11950 NT_STATUS_OK
WriteX 11950 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
WriteX 11950 0 491 491 NT_STATUS_OK
Close 11950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11951 NT_STATUS_OK
ReadX 11951 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11948 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11953 NT_STATUS_OK
Close 11953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11954 NT_STATUS_OK
WriteX 11954 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11954 258 NT_STATUS_OK
WriteX 11954 0 543 543 NT_STATUS_OK
Close 11954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Close 11955 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11968 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 258 NT_STATUS_OK
WriteX 11968 0 2048 2048 NT_STATUS_OK
Close 11968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11969 NT_STATUS_OK
ReadX 11969 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11969 0 4096 4096 NT_STATUS_OK
Flush 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11969 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11974 NT_STATUS_OK
WriteX 11974 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11974 258 NT_STATUS_OK
WriteX 11974 0 2048 2048 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11979 NT_STATUS_OK
Close 11979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11980 NT_STATUS_OK
WriteX 11980 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 2048 2048 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 2048 2048 NT_STATUS_OK
ReadX 11959 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
WriteX 11959 0 8192 8192 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
WriteX 11961 0 4096 4096 NT_STATUS_OK
ReadX 11975 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11989 NT_STATUS_OK
ReadX 11989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 1004 NT_STATUS_OK
WriteX 12005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 258 NT_STATUS_OK
WriteX 12005 0 2048 2048 NT_STATUS_OK
Close 12005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12013 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 1004 NT_STATUS_OK
WriteX 12013 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 258 NT_STATUS_OK
WriteX 12013 0 2048 2048 NT_STATUS_OK
Close 12013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
Flush 12006 NT_STATUS_OK
WriteX 12014 0 4096 4096 NT_STATUS_OK
Flush 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12008 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12016 NT_STATUS_OK
WriteX 12016 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 258 NT_STATUS_OK
WriteX 12016 0 4096 4096 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12018 NT_STATUS_OK
Close 12018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12019 NT_STATUS_OK
WriteX 12019 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12019 258 NT_STATUS_OK
WriteX 12019 0 4096 4096 NT_STATUS_OK
Close 12019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12020 0 4096 4096 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 11994 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 11990 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12023 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12027 NT_STATUS_OK
WriteX 12027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 258 NT_STATUS_OK
WriteX 12027 0 2048 2048 NT_STATUS_OK
Close 12027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12028 NT_STATUS_OK
ReadX 12028 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12038 NT_STATUS_OK
ReadX 12038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12042 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Close 12028 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Close 12037 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12033 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12044 NT_STATUS_OK
QUERY_FILE_INFORMATION 12044 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12053 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 1004 NT_STATUS_OK
WriteX 12064 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 258 NT_STATUS_OK
WriteX 12064 0 2048 2048 NT_STATUS_OK
Close 12064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12065 NT_STATUS_OK
ReadX 12065 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12067 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12076 NT_STATUS_OK
QUERY_FILE_INFORMATION 12076 1004 NT_STATUS_OK
WriteX 12076 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12076 258 NT_STATUS_OK
WriteX 12076 0 2048 2048 NT_STATUS_OK
Close 12076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12077 NT_STATUS_OK
ReadX 12077 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12079 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12084 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 1004 NT_STATUS_OK
WriteX 12084 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 258 NT_STATUS_OK
WriteX 12084 0 2048 2048 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12085 NT_STATUS_OK
ReadX 12085 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12065 0 4096 4096 NT_STATUS_OK
Flush 12065 NT_STATUS_OK
WriteX 12077 0 4096 4096 NT_STATUS_OK
Flush 12077 NT_STATUS_OK
WriteX 12085 0 4096 4096 NT_STATUS_OK
Flush 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12065 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12085 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12067 4096 16384 16384 NT_STATUS_OK
ReadX 12047 4096 16384 16384 NT_STATUS_OK
ReadX 12079 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 2048 2048 NT_STATUS_OK
WriteX 12087 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12088 NT_STATUS_OK
QUERY_FILE_INFORMATION 12088 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Close 12057 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12090 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12092 NT_STATUS_OK
QUERY_FILE_INFORMATION 12092 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12095 4096 16384 16384 NT_STATUS_OK
WriteX 12095 0 4096 4096 NT_STATUS_OK
WriteX 12096 0 4096 4096 NT_STATUS_OK
WriteX 12097 0 4096 4096 NT_STATUS_OK
WriteX 12098 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12101 NT_STATUS_OK
ReadX 12101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12102 NT_STATUS_OK
ReadX 12102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12110 NT_STATUS_OK
ReadX 12110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12111 NT_STATUS_OK
ReadX 12111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 8192 8192 NT_STATUS_OK
ReadX 12101 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12115 0 4096 4096 NT_STATUS_OK
ReadX 12115 4096 4096 4096 NT_STATUS_OK
ReadX 12115 8192 4096 4096 NT_STATUS_OK
WriteX 12101 0 4096 4096 NT_STATUS_OK
WriteX 12102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12116 0 4096 4096 NT_STATUS_OK
ReadX 12116 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12095 0 4096 4096 NT_STATUS_OK
WriteX 12096 0 4096 4096 NT_STATUS_OK
WriteX 12097 0 4096 4096 NT_STATUS_OK
WriteX 12098 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12121 NT_STATUS_OK
QUERY_FILE_INFORMATION 12121 1004 NT_STATUS_OK
WriteX 12121 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12121 258 NT_STATUS_OK
WriteX 12121 0 2048 2048 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12122 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12122 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
ReadX 12124 4096 4096 4096 NT_STATUS_OK
WriteX 12124 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12122 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
ReadX 12126 4096 4096 4096 NT_STATUS_OK
WriteX 12126 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12127 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12112 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Close 12109 NT_STATUS_OK
Close 12110 NT_STATUS_OK
Close 12111 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12101 NT_STATUS_OK
Close 12102 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12116 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12129 0 4096 4096 NT_STATUS_OK
ReadX 12129 4096 4096 4096 NT_STATUS_OK
ReadX 12129 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12132 NT_STATUS_OK
ReadX 12132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12135 NT_STATUS_OK
ReadX 12135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12136 NT_STATUS_OK
ReadX 12136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12138 NT_STATUS_OK
ReadX 12138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12140 NT_STATUS_OK
ReadX 12140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12142 NT_STATUS_OK
ReadX 12142 0 4096 4096 NT_STATUS_OK
ReadX 12130 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12147 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1004 NT_STATUS_OK
WriteX 12147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 258 NT_STATUS_OK
WriteX 12147 0 2048 2048 NT_STATUS_OK
Close 12147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12148 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12153 NT_STATUS_OK
QUERY_FILE_INFORMATION 12153 1004 NT_STATUS_OK
WriteX 12153 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12153 258 NT_STATUS_OK
WriteX 12153 0 2048 2048 NT_STATUS_OK
Close 12153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12137 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12155 NT_STATUS_OK
QUERY_FILE_INFORMATION 12155 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12141 NT_STATUS_OK
Close 12136 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Close 12130 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Close 12138 NT_STATUS_OK
Close 12139 NT_STATUS_OK
Close 12140 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
Close 12154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12157 NT_STATUS_OK
QUERY_FILE_INFORMATION 12157 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 61440 4096 4096 NT_STATUS_OK
ReadX 12159 126976 4096 4096 NT_STATUS_OK
WriteX 12159 0 65536 65536 NT_STATUS_OK
WriteX 12159 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 61440 4096 4096 NT_STATUS_OK
ReadX 12160 126976 4096 4096 NT_STATUS_OK
ReadX 12160 192512 4096 4096 NT_STATUS_OK
ReadX 12160 258048 4096 4096 NT_STATUS_OK
WriteX 12160 0 65536 65536 NT_STATUS_OK
WriteX 12160 65536 65536 65536 NT_STATUS_OK
WriteX 12160 131072 65536 65536 NT_STATUS_OK
WriteX 12160 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 61440 4096 4096 NT_STATUS_OK
ReadX 12161 126976 4096 4096 NT_STATUS_OK
ReadX 12161 192512 4096 4096 NT_STATUS_OK
ReadX 12161 258048 4096 4096 NT_STATUS_OK
ReadX 12161 323584 4096 4096 NT_STATUS_OK
ReadX 12161 389120 4096 4096 NT_STATUS_OK
ReadX 12161 454656 4096 4096 NT_STATUS_OK
ReadX 12161 520192 4096 4096 NT_STATUS_OK
WriteX 12161 0 65536 65536 NT_STATUS_OK
WriteX 12161 65536 65536 65536 NT_STATUS_OK
WriteX 12161 131072 65536 65536 NT_STATUS_OK
WriteX 12161 196608 65536 65536 NT_STATUS_OK
WriteX 12161 262144 65536 65536 NT_STATUS_OK
WriteX 12161 327680 65536 65536 NT_STATUS_OK
WriteX 12161 393216 65536 65536 NT_STATUS_OK
WriteX 12161 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12162 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12162 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12162 8192 4096 4096 NT_STATUS_OK
ReadX 12162 12288 4096 4096 NT_STATUS_OK
ReadX 12162 16384 4096 4096 NT_STATUS_OK
ReadX 12162 20480 4096 4096 NT_STATUS_OK
ReadX 12162 24576 4096 4096 NT_STATUS_OK
ReadX 12162 28672 4096 4096 NT_STATUS_OK
ReadX 12162 32768 4096 4096 NT_STATUS_OK
ReadX 12162 36864 4096 4096 NT_STATUS_OK
ReadX 12162 40960 4096 4096 NT_STATUS_OK
ReadX 12162 45056 4096 4096 NT_STATUS_OK
ReadX 12162 49152 4096 4096 NT_STATUS_OK
ReadX 12162 53248 4096 4096 NT_STATUS_OK
ReadX 12162 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12162 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12165 NT_STATUS_OK
WriteX 12165 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12165 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12165 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12165 1004 NT_STATUS_OK
WriteX 12165 0 57088 57088 NT_STATUS_OK
WriteX 12165 0 4096 4096 NT_STATUS_OK
Flush 12165 NT_STATUS_OK
Close 12162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12166 NT_STATUS_OK
SET_FILE_INFORMATION 12166 1004 NT_STATUS_OK
Close 12166 NT_STATUS_OK
SET_FILE_INFORMATION 12165 1004 NT_STATUS_OK
WriteX 12165 0 4096 4096 NT_STATUS_OK
Close 12165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12169 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12170 NT_STATUS_OK
WriteX 12170 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12170 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12170 1004 NT_STATUS_OK
WriteX 12170 0 51456 51456 NT_STATUS_OK
WriteX 12170 0 4096 4096 NT_STATUS_OK
Flush 12170 NT_STATUS_OK
SET_FILE_INFORMATION 12170 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12170 1004 NT_STATUS_OK
WriteX 12170 0 4096 4096 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12172 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12174 NT_STATUS_OK
ReadX 12174 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12174 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12179 NT_STATUS_OK
WriteX 12179 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12179 258 NT_STATUS_OK
WriteX 12179 0 53077 53077 NT_STATUS_OK
Close 12179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12180 NT_STATUS_OK
WriteX 12180 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12180 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12180 1004 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 1856 1856 NT_STATUS_OK
WriteX 12180 0 4096 4096 NT_STATUS_OK
Flush 12180 NT_STATUS_OK
SET_FILE_INFORMATION 12180 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12180 1004 NT_STATUS_OK
WriteX 12180 0 4096 4096 NT_STATUS_OK
Close 12180 NT_STATUS_OK
Close 12174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12186 NT_STATUS_OK
Close 12186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12189 NT_STATUS_OK
WriteX 12189 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 258 NT_STATUS_OK
WriteX 12189 0 7983 7983 NT_STATUS_OK
Close 12189 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12194 NT_STATUS_OK
WriteX 12194 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12194 258 NT_STATUS_OK
WriteX 12194 0 65536 65536 NT_STATUS_OK
WriteX 12194 65536 65536 65536 NT_STATUS_OK
WriteX 12194 131072 65536 65536 NT_STATUS_OK
WriteX 12194 196608 65536 65536 NT_STATUS_OK
WriteX 12194 262144 65536 65536 NT_STATUS_OK
WriteX 12194 327680 65536 65536 NT_STATUS_OK
WriteX 12194 393216 65536 65536 NT_STATUS_OK
WriteX 12194 458752 46731 46731 NT_STATUS_OK
Close 12194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12195 NT_STATUS_OK
WriteX 12195 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12195 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12184 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12195 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12195 1004 NT_STATUS_OK
WriteX 12195 0 65536 65536 NT_STATUS_OK
WriteX 12195 65536 22848 22848 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
SET_FILE_INFORMATION 12195 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12195 1004 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12197 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12199 NT_STATUS_OK
ReadX 12199 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12199 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12200 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12200 1004 NT_STATUS_OK
ReadX 12200 8192 4096 4096 NT_STATUS_OK
ReadX 12200 12288 4096 4096 NT_STATUS_OK
ReadX 12200 16384 4096 4096 NT_STATUS_OK
ReadX 12200 20480 4096 4096 NT_STATUS_OK
ReadX 12200 24576 4096 4096 NT_STATUS_OK
ReadX 12200 28672 4096 4096 NT_STATUS_OK
ReadX 12200 32768 4096 4096 NT_STATUS_OK
ReadX 12200 36864 4096 4096 NT_STATUS_OK
ReadX 12200 40960 4096 4096 NT_STATUS_OK
ReadX 12200 45056 4096 4096 NT_STATUS_OK
ReadX 12200 49152 4096 4096 NT_STATUS_OK
ReadX 12200 53248 4096 4096 NT_STATUS_OK
ReadX 12200 57344 4096 4096 NT_STATUS_OK
ReadX 12200 61440 4096 4096 NT_STATUS_OK
ReadX 12200 65536 4096 4096 NT_STATUS_OK
ReadX 12200 69632 4096 4096 NT_STATUS_OK
ReadX 12200 73728 4096 4096 NT_STATUS_OK
ReadX 12200 77824 4096 4096 NT_STATUS_OK
ReadX 12200 81920 4096 4096 NT_STATUS_OK
ReadX 12200 86016 4096 4096 NT_STATUS_OK
ReadX 12200 90112 4096 4096 NT_STATUS_OK
ReadX 12200 94208 4096 4096 NT_STATUS_OK
ReadX 12200 98304 4096 4096 NT_STATUS_OK
ReadX 12200 102400 4096 4096 NT_STATUS_OK
ReadX 12200 106496 4096 4096 NT_STATUS_OK
ReadX 12200 110592 4096 4096 NT_STATUS_OK
ReadX 12200 114688 4096 4096 NT_STATUS_OK
ReadX 12200 118784 4096 4096 NT_STATUS_OK
ReadX 12200 122880 4096 4096 NT_STATUS_OK
ReadX 12200 126976 4096 4096 NT_STATUS_OK
ReadX 12200 131072 4096 4096 NT_STATUS_OK
ReadX 12200 135168 4096 4096 NT_STATUS_OK
ReadX 12200 139264 4096 4096 NT_STATUS_OK
ReadX 12200 143360 4096 4096 NT_STATUS_OK
ReadX 12200 147456 4096 4096 NT_STATUS_OK
ReadX 12200 151552 4096 4096 NT_STATUS_OK
ReadX 12200 155648 4096 4096 NT_STATUS_OK
ReadX 12200 159744 4096 4096 NT_STATUS_OK
ReadX 12200 163840 4096 4096 NT_STATUS_OK
ReadX 12200 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12200 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12199 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12203 NT_STATUS_OK
WriteX 12203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 258 NT_STATUS_OK
Close 12200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12204 NT_STATUS_OK
SET_FILE_INFORMATION 12204 1004 NT_STATUS_OK
Close 12204 NT_STATUS_OK
WriteX 12203 0 42388 42388 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12205 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
ReadX 12207 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12208 NT_STATUS_OK
WriteX 12208 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12208 258 NT_STATUS_OK
SET_FILE_INFORMATION 12208 1004 NT_STATUS_OK
WriteX 12208 0 42652 42652 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12210 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12212 NT_STATUS_OK
ReadX 12212 0 4096 4096 NT_STATUS_OK
ReadX 12212 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12214 NT_STATUS_OK
Close 12214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12217 NT_STATUS_OK
WriteX 12217 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12217 258 NT_STATUS_OK
WriteX 12217 0 65536 65536 NT_STATUS_OK
WriteX 12217 65536 49 49 NT_STATUS_OK
Close 12217 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 61440 61440 NT_STATUS_OK
ReadX 12218 61440 4096 4096 NT_STATUS_OK
ReadX 12218 65536 61440 61440 NT_STATUS_OK
ReadX 12218 126976 4096 4096 NT_STATUS_OK
ReadX 12218 131072 61440 61440 NT_STATUS_OK
ReadX 12218 192512 4096 4096 NT_STATUS_OK
ReadX 12218 196608 61440 61440 NT_STATUS_OK
ReadX 12218 258048 4096 4096 NT_STATUS_OK
ReadX 12218 262144 61440 61440 NT_STATUS_OK
ReadX 12218 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 61440 61440 NT_STATUS_OK
ReadX 12219 61440 4096 4096 NT_STATUS_OK
ReadX 12219 65536 61440 61440 NT_STATUS_OK
ReadX 12219 126976 4096 4096 NT_STATUS_OK
ReadX 12219 131072 61440 61440 NT_STATUS_OK
ReadX 12219 192512 4096 4096 NT_STATUS_OK
ReadX 12219 196608 61440 61440 NT_STATUS_OK
ReadX 12219 258048 4096 4096 NT_STATUS_OK
ReadX 12219 262144 61440 61440 NT_STATUS_OK
ReadX 12219 323584 4096 4096 NT_STATUS_OK
ReadX 12219 327680 61440 61440 NT_STATUS_OK
ReadX 12219 389120 4096 4096 NT_STATUS_OK
ReadX 12219 393216 61440 61440 NT_STATUS_OK
ReadX 12219 454656 4096 4096 NT_STATUS_OK
ReadX 12219 458752 61440 61440 NT_STATUS_OK
ReadX 12219 520192 4096 4096 NT_STATUS_OK
ReadX 12219 524288 61440 61440 NT_STATUS_OK
ReadX 12219 585728 4096 4096 NT_STATUS_OK
ReadX 12219 589824 61440 61440 NT_STATUS_OK
ReadX 12219 651264 4096 4096 NT_STATUS_OK
ReadX 12219 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 61440 61440 NT_STATUS_OK
ReadX 12220 61440 4096 4096 NT_STATUS_OK
ReadX 12220 65536 61440 61440 NT_STATUS_OK
ReadX 12220 126976 4096 4096 NT_STATUS_OK
ReadX 12220 131072 61440 61440 NT_STATUS_OK
ReadX 12220 192512 4096 4096 NT_STATUS_OK
ReadX 12220 196608 61440 61440 NT_STATUS_OK
ReadX 12220 258048 4096 4096 NT_STATUS_OK
ReadX 12220 262144 61440 61440 NT_STATUS_OK
ReadX 12220 323584 4096 4096 NT_STATUS_OK
ReadX 12220 327680 61440 61440 NT_STATUS_OK
ReadX 12220 389120 4096 4096 NT_STATUS_OK
ReadX 12220 393216 61440 61440 NT_STATUS_OK
ReadX 12220 454656 4096 4096 NT_STATUS_OK
ReadX 12220 458752 61440 61440 NT_STATUS_OK
ReadX 12220 520192 4096 4096 NT_STATUS_OK
ReadX 12220 524288 61440 61440 NT_STATUS_OK
ReadX 12220 585728 4096 4096 NT_STATUS_OK
ReadX 12220 589824 61440 61440 NT_STATUS_OK
ReadX 12220 651264 4096 4096 NT_STATUS_OK
ReadX 12220 655360 61440 61440 NT_STATUS_OK
ReadX 12220 716800 4096 4096 NT_STATUS_OK
ReadX 12220 720896 61440 61440 NT_STATUS_OK
ReadX 12220 782336 4096 4096 NT_STATUS_OK
ReadX 12220 786432 61440 61440 NT_STATUS_OK
ReadX 12220 847872 4096 4096 NT_STATUS_OK
ReadX 12220 851968 61440 61440 NT_STATUS_OK
ReadX 12220 913408 4096 4096 NT_STATUS_OK
ReadX 12220 917504 61440 61440 NT_STATUS_OK
ReadX 12220 978944 4096 4096 NT_STATUS_OK
ReadX 12220 983040 61440 61440 NT_STATUS_OK
ReadX 12220 1044480 4096 4096 NT_STATUS_OK
ReadX 12220 1048576 61440 61440 NT_STATUS_OK
ReadX 12220 1110016 4096 4096 NT_STATUS_OK
ReadX 12220 1114112 61440 61440 NT_STATUS_OK
ReadX 12220 1175552 4096 4096 NT_STATUS_OK
ReadX 12220 1179648 61440 61440 NT_STATUS_OK
ReadX 12220 1241088 4096 4096 NT_STATUS_OK
ReadX 12220 1245184 61440 61440 NT_STATUS_OK
ReadX 12220 1306624 4096 4096 NT_STATUS_OK
ReadX 12220 1310720 61440 61440 NT_STATUS_OK
ReadX 12220 1372160 4096 4096 NT_STATUS_OK
ReadX 12220 1376256 61440 61440 NT_STATUS_OK
ReadX 12220 1437696 4096 4096 NT_STATUS_OK
ReadX 12220 1441792 61440 61440 NT_STATUS_OK
ReadX 12220 1503232 4096 4096 NT_STATUS_OK
ReadX 12220 1507328 61440 61440 NT_STATUS_OK
ReadX 12220 1568768 4096 4096 NT_STATUS_OK
ReadX 12220 1572864 61440 61440 NT_STATUS_OK
ReadX 12220 1634304 4096 4096 NT_STATUS_OK
ReadX 12220 1638400 61440 61440 NT_STATUS_OK
ReadX 12220 1699840 4096 4096 NT_STATUS_OK
ReadX 12220 1703936 61440 61440 NT_STATUS_OK
ReadX 12220 1765376 4096 4096 NT_STATUS_OK
ReadX 12220 1769472 61440 61440 NT_STATUS_OK
ReadX 12220 1830912 4096 4096 NT_STATUS_OK
ReadX 12220 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12222 NT_STATUS_OK
QUERY_FILE_INFORMATION 12222 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12222 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12222 1005 NT_STATUS_OK
ReadX 12222 2156 24 24 NT_STATUS_OK
ReadX 12222 2139 276 276 NT_STATUS_OK
ReadX 12222 2136 14 14 NT_STATUS_OK
ReadX 12222 2136 7 7 NT_STATUS_OK
ReadX 12222 2138 12 12 NT_STATUS_OK
ReadX 12222 2137 8 8 NT_STATUS_OK
ReadX 12222 2135 15 15 NT_STATUS_OK
ReadX 12222 0 16 16 NT_STATUS_OK
ReadX 12222 16 2048 2048 NT_STATUS_OK
ReadX 12222 2064 2048 2048 NT_STATUS_OK
ReadX 12222 257 2048 2048 NT_STATUS_OK
ReadX 12222 385 2048 2048 NT_STATUS_OK
ReadX 12222 513 2048 2048 NT_STATUS_OK
ReadX 12222 641 2048 2048 NT_STATUS_OK
ReadX 12222 769 2048 2048 NT_STATUS_OK
ReadX 12222 897 2048 2048 NT_STATUS_OK
ReadX 12222 1025 2048 2048 NT_STATUS_OK
ReadX 12222 1153 2048 2048 NT_STATUS_OK
ReadX 12222 1281 2048 2048 NT_STATUS_OK
ReadX 12222 1409 2048 2048 NT_STATUS_OK
ReadX 12222 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12224 NT_STATUS_OK
Close 12224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12218 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12220 NT_STATUS_OK
Close 12212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12227 NT_STATUS_OK
WriteX 12227 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12227 258 NT_STATUS_OK
WriteX 12227 0 10575 10575 NT_STATUS_OK
Flush 12227 NT_STATUS_OK
Close 12227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12232 NT_STATUS_OK
LockX 12232 2147483538 1 NT_STATUS_OK
UnlockX 12232 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 1005 NT_STATUS_OK
ReadX 12232 0 512 512 NT_STATUS_OK
ReadX 12232 512 512 512 NT_STATUS_OK
ReadX 12232 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 1004 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12233 NT_STATUS_OK
QUERY_FILE_INFORMATION 12233 1005 NT_STATUS_OK
ReadX 12233 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12234 NT_STATUS_OK
LockX 12234 2147483538 1 NT_STATUS_OK
UnlockX 12234 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 1005 NT_STATUS_OK
ReadX 12234 0 512 512 NT_STATUS_OK
ReadX 12234 512 512 512 NT_STATUS_OK
ReadX 12234 1024 512 512 NT_STATUS_OK
ReadX 12234 288 20 20 NT_STATUS_OK
ReadX 12234 308 2084 2084 NT_STATUS_OK
ReadX 12234 388 2084 2084 NT_STATUS_OK
ReadX 12234 388 2084 2084 NT_STATUS_OK
ReadX 12221 2157 1386 1386 NT_STATUS_OK
ReadX 12234 2472 399 399 NT_STATUS_OK
ReadX 12234 3072 1536 1536 NT_STATUS_OK
ReadX 12234 544 149 149 NT_STATUS_OK
ReadX 12234 693 485 485 NT_STATUS_OK
Close 12234 NT_STATUS_OK
ReadX 12221 2157 4096 4096 NT_STATUS_OK
ReadX 12221 6253 4096 4096 NT_STATUS_OK
ReadX 12221 10349 4096 4096 NT_STATUS_OK
ReadX 12221 14445 4096 4096 NT_STATUS_OK
ReadX 12221 18541 4096 4096 NT_STATUS_OK
ReadX 12221 22637 256 256 NT_STATUS_OK
ReadX 12221 22893 4096 4096 NT_STATUS_OK
ReadX 12221 26989 4096 4096 NT_STATUS_OK
ReadX 12221 31085 4096 4096 NT_STATUS_OK
ReadX 12221 35181 4096 4096 NT_STATUS_OK
ReadX 12221 39277 4096 4096 NT_STATUS_OK
ReadX 12221 43373 4096 4096 NT_STATUS_OK
ReadX 12221 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12221 2157 1024 1024 NT_STATUS_OK
ReadX 12221 1667 4688 4688 NT_STATUS_OK
ReadX 12221 6355 3516 3516 NT_STATUS_OK
ReadX 12221 9871 16384 16384 NT_STATUS_OK
ReadX 12221 26255 3771 3771 NT_STATUS_OK
ReadX 12221 30026 2048 2048 NT_STATUS_OK
ReadX 12221 32074 1024 1024 NT_STATUS_OK
ReadX 12221 33098 6652 6652 NT_STATUS_OK
ReadX 12221 39750 16384 16384 NT_STATUS_OK
ReadX 12221 56134 10496 10496 NT_STATUS_OK
ReadX 12221 66630 1784 1784 NT_STATUS_OK
ReadX 12221 68414 90 90 NT_STATUS_OK
ReadX 12221 68504 273 273 NT_STATUS_OK
ReadX 12221 68777 1600 1600 NT_STATUS_OK
ReadX 12221 70377 640 640 NT_STATUS_OK
ReadX 12221 71017 1280 1280 NT_STATUS_OK
ReadX 12221 72297 8464 8464 NT_STATUS_OK
ReadX 12221 80761 158 158 NT_STATUS_OK
ReadX 12221 80919 912 912 NT_STATUS_OK
ReadX 12221 81831 1980 1980 NT_STATUS_OK
ReadX 12221 83811 2256 2256 NT_STATUS_OK
ReadX 12221 86067 400 400 NT_STATUS_OK
ReadX 12221 86467 252 252 NT_STATUS_OK
ReadX 12221 86719 42 42 NT_STATUS_OK
ReadX 12221 86761 725 725 NT_STATUS_OK
ReadX 12221 2009 512 512 NT_STATUS_OK
ReadX 12221 3895 9 9 NT_STATUS_OK
ReadX 12221 3781 46 46 NT_STATUS_OK
ReadX 12221 4059 92 92 NT_STATUS_OK
ReadX 12221 3781 92 92 NT_STATUS_OK
ReadX 12221 3986 184 184 NT_STATUS_OK
ReadX 12221 3987 16384 16384 NT_STATUS_OK
ReadX 12221 3902 16384 16384 NT_STATUS_OK
ReadX 12221 3781 10240 10240 NT_STATUS_OK
ReadX 12221 3821 16384 16384 NT_STATUS_OK
ReadX 12221 3891 935 935 NT_STATUS_OK
ReadX 12221 4060 10240 10240 NT_STATUS_OK
ReadX 12221 4059 184 184 NT_STATUS_OK
ReadX 12221 256 184 184 NT_STATUS_OK
ReadX 12221 256 1026 1026 NT_STATUS_OK
ReadX 12221 3901 326 326 NT_STATUS_OK
ReadX 12221 3899 652 652 NT_STATUS_OK
ReadX 12221 256 2 2 NT_STATUS_OK
ReadX 12221 258 4948 4948 NT_STATUS_OK
Close 12221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12236 NT_STATUS_OK
Close 12236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12239 NT_STATUS_OK
WriteX 12239 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 258 NT_STATUS_OK
WriteX 12239 0 65536 65536 NT_STATUS_OK
WriteX 12239 65536 65536 65536 NT_STATUS_OK
WriteX 12239 131072 65536 65536 NT_STATUS_OK
WriteX 12239 196608 65536 65536 NT_STATUS_OK
WriteX 12239 262144 65536 65536 NT_STATUS_OK
WriteX 12239 327680 65536 65536 NT_STATUS_OK
WriteX 12239 393216 65536 65536 NT_STATUS_OK
WriteX 12239 458752 65536 65536 NT_STATUS_OK
WriteX 12239 524288 65536 65536 NT_STATUS_OK
WriteX 12239 589824 35257 35257 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12244 NT_STATUS_OK
WriteX 12244 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 258 NT_STATUS_OK
WriteX 12244 0 65536 65536 NT_STATUS_OK
WriteX 12244 65536 65536 65536 NT_STATUS_OK
WriteX 12244 131072 65536 65536 NT_STATUS_OK
WriteX 12244 196608 65536 65536 NT_STATUS_OK
WriteX 12244 262144 65536 65536 NT_STATUS_OK
WriteX 12244 327680 65536 65536 NT_STATUS_OK
WriteX 12244 393216 65536 65536 NT_STATUS_OK
WriteX 12244 458752 65536 65536 NT_STATUS_OK
WriteX 12244 524288 65536 65536 NT_STATUS_OK
WriteX 12244 589824 57598 57598 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12246 NT_STATUS_OK
WriteX 12246 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12246 258 NT_STATUS_OK
WriteX 12246 0 12543 12543 NT_STATUS_OK
Flush 12246 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12248 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12252 NT_STATUS_OK
QUERY_FILE_INFORMATION 12252 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12252 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12252 1005 NT_STATUS_OK
ReadX 12252 1938 24 24 NT_STATUS_OK
ReadX 12252 1920 276 276 NT_STATUS_OK
ReadX 12252 1918 14 14 NT_STATUS_OK
ReadX 12252 1918 7 7 NT_STATUS_OK
ReadX 12252 1919 12 12 NT_STATUS_OK
ReadX 12252 1919 8 8 NT_STATUS_OK
ReadX 12252 1917 15 15 NT_STATUS_OK
ReadX 12252 0 16 16 NT_STATUS_OK
ReadX 12252 16 2048 2048 NT_STATUS_OK
ReadX 12252 2064 2048 2048 NT_STATUS_OK
ReadX 12252 257 2048 2048 NT_STATUS_OK
ReadX 12252 385 2048 2048 NT_STATUS_OK
ReadX 12252 513 2048 2048 NT_STATUS_OK
ReadX 12252 641 2048 2048 NT_STATUS_OK
ReadX 12252 769 2048 2048 NT_STATUS_OK
ReadX 12252 897 2048 2048 NT_STATUS_OK
ReadX 12252 1025 2048 2048 NT_STATUS_OK
ReadX 12252 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12257 NT_STATUS_OK
WriteX 12257 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12257 258 NT_STATUS_OK
WriteX 12257 0 11588 11588 NT_STATUS_OK
Flush 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12258 NT_STATUS_OK
Close 12258 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
Close 12252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12262 NT_STATUS_OK
WriteX 12262 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12262 258 NT_STATUS_OK
WriteX 12262 0 11615 11615 NT_STATUS_OK
Flush 12262 NT_STATUS_OK
Close 12262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12268 NT_STATUS_OK
Close 12268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12271 NT_STATUS_OK
WriteX 12271 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12271 258 NT_STATUS_OK
WriteX 12271 0 65536 65536 NT_STATUS_OK
WriteX 12271 65536 16050 16050 NT_STATUS_OK
Close 12271 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12251 1939 64 64 NT_STATUS_OK
ReadX 12251 128 248 248 NT_STATUS_OK
ReadX 12251 128 568 568 NT_STATUS_OK
ReadX 12251 3872 1536 1536 NT_STATUS_OK
ReadX 12251 3456 2560 2560 NT_STATUS_OK
ReadX 12251 3136 512 512 NT_STATUS_OK
ReadX 12251 2880 4096 4096 NT_STATUS_OK
ReadX 12251 3264 3072 3072 NT_STATUS_OK
ReadX 12251 320 4096 4096 NT_STATUS_OK
ReadX 12251 1024 4096 4096 NT_STATUS_OK
ReadX 12251 3616 4096 4096 NT_STATUS_OK
ReadX 12251 1939 64 64 NT_STATUS_OK
ReadX 12251 128 248 248 NT_STATUS_OK
ReadX 12251 128 608 608 NT_STATUS_OK
ReadX 12251 2858 1024 1024 NT_STATUS_OK
ReadX 12251 2810 4096 4096 NT_STATUS_OK
ReadX 12251 2826 4096 4096 NT_STATUS_OK
ReadX 12251 2580 2048 2048 NT_STATUS_OK
ReadX 12251 2800 2560 2560 NT_STATUS_OK
ReadX 12251 2100 4096 4096 NT_STATUS_OK
ReadX 12251 2084 4096 4096 NT_STATUS_OK
ReadX 12251 868 4096 4096 NT_STATUS_OK
ReadX 12251 2324 4096 4096 NT_STATUS_OK
ReadX 12251 884 4096 4096 NT_STATUS_OK
ReadX 12251 2604 1024 1024 NT_STATUS_OK
ReadX 12251 580 4096 4096 NT_STATUS_OK
ReadX 12251 596 4096 4096 NT_STATUS_OK
ReadX 12251 2752 4096 4096 NT_STATUS_OK
ReadX 12251 2842 1024 1024 NT_STATUS_OK
ReadX 12251 660 4096 4096 NT_STATUS_OK
ReadX 12251 2720 4096 4096 NT_STATUS_OK
ReadX 12251 2736 4096 4096 NT_STATUS_OK
ReadX 12251 628 4096 4096 NT_STATUS_OK
ReadX 12251 2704 4096 4096 NT_STATUS_OK
ReadX 12251 1556 4096 4096 NT_STATUS_OK
ReadX 12251 576 4096 4096 NT_STATUS_OK
ReadX 12251 3168 1536 1536 NT_STATUS_OK
ReadX 12251 832 4096 4096 NT_STATUS_OK
ReadX 12251 1088 4096 4096 NT_STATUS_OK
ReadX 12251 1344 4096 4096 NT_STATUS_OK
ReadX 12251 1600 4096 4096 NT_STATUS_OK
ReadX 12251 1856 4096 4096 NT_STATUS_OK
ReadX 12251 2112 4096 4096 NT_STATUS_OK
ReadX 12251 1892 4096 4096 NT_STATUS_OK
ReadX 12251 820 4096 4096 NT_STATUS_OK
ReadX 12251 788 4096 4096 NT_STATUS_OK
ReadX 12251 1604 4096 4096 NT_STATUS_OK
ReadX 12251 3648 4096 4096 NT_STATUS_OK
ReadX 12251 2608 4096 4096 NT_STATUS_OK
ReadX 12251 548 4096 4096 NT_STATUS_OK
ReadX 12251 740 4096 4096 NT_STATUS_OK
ReadX 12251 1344 4096 4096 NT_STATUS_OK
ReadX 12251 3392 4096 4096 NT_STATUS_OK
ReadX 12251 3904 4096 4096 NT_STATUS_OK
ReadX 12251 644 4096 4096 NT_STATUS_OK
ReadX 12251 676 4096 4096 NT_STATUS_OK
ReadX 12251 2688 4096 4096 NT_STATUS_OK
ReadX 12251 320 4096 4096 NT_STATUS_OK
ReadX 12251 900 4096 4096 NT_STATUS_OK
ReadX 12251 1908 4096 4096 NT_STATUS_OK
ReadX 12251 852 4096 4096 NT_STATUS_OK
ReadX 12251 724 4096 4096 NT_STATUS_OK
ReadX 12251 2292 4096 4096 NT_STATUS_OK
ReadX 12251 612 4096 4096 NT_STATUS_OK
ReadX 12251 388 4096 4096 NT_STATUS_OK
ReadX 12251 2368 4096 4096 NT_STATUS_OK
ReadX 12251 2624 4096 4096 NT_STATUS_OK
ReadX 12251 500 4096 4096 NT_STATUS_OK
ReadX 12251 356 4096 4096 NT_STATUS_OK
ReadX 12251 1024 4096 4096 NT_STATUS_OK
ReadX 12251 576 4096 4096 NT_STATUS_OK
ReadX 12251 340 4096 4096 NT_STATUS_OK
ReadX 12251 420 4096 4096 NT_STATUS_OK
ReadX 12251 1600 4096 4096 NT_STATUS_OK
ReadX 12251 404 4096 4096 NT_STATUS_OK
ReadX 12251 1428 4096 4096 NT_STATUS_OK
ReadX 12251 2656 4096 4096 NT_STATUS_OK
ReadX 12251 2624 4096 4096 NT_STATUS_OK
ReadX 12251 452 4096 4096 NT_STATUS_OK
ReadX 12251 692 4096 4096 NT_STATUS_OK
ReadX 12251 564 4096 4096 NT_STATUS_OK
ReadX 12251 372 4096 4096 NT_STATUS_OK
ReadX 12251 468 4096 4096 NT_STATUS_OK
ReadX 12251 484 4096 4096 NT_STATUS_OK
ReadX 12251 1088 4096 4096 NT_STATUS_OK
ReadX 12251 1924 4096 4096 NT_STATUS_OK
ReadX 12251 2768 4096 4096 NT_STATUS_OK
ReadX 12251 832 4096 4096 NT_STATUS_OK
ReadX 12251 836 4096 4096 NT_STATUS_OK
ReadX 12251 1856 4096 4096 NT_STATUS_OK
ReadX 12251 2640 4096 4096 NT_STATUS_OK
ReadX 12251 436 4096 4096 NT_STATUS_OK
ReadX 12251 1828 4096 4096 NT_STATUS_OK
ReadX 12251 804 4096 4096 NT_STATUS_OK
ReadX 12251 1860 4096 4096 NT_STATUS_OK
ReadX 12251 1812 4096 4096 NT_STATUS_OK
ReadX 12251 756 4096 4096 NT_STATUS_OK
ReadX 12251 1636 4096 4096 NT_STATUS_OK
ReadX 12251 772 4096 4096 NT_STATUS_OK
ReadX 12251 2036 4096 4096 NT_STATUS_OK
ReadX 12251 1220 4096 4096 NT_STATUS_OK
ReadX 12251 1652 4096 4096 NT_STATUS_OK
ReadX 12251 2588 4096 4096 NT_STATUS_OK
ReadX 12251 916 4096 4096 NT_STATUS_OK
ReadX 12251 260 4096 4096 NT_STATUS_OK
ReadX 12251 932 4096 4096 NT_STATUS_OK
ReadX 12251 2624 4096 4096 NT_STATUS_OK
ReadX 12251 308 4096 4096 NT_STATUS_OK
ReadX 12251 292 4096 4096 NT_STATUS_OK
ReadX 12251 1140 4096 4096 NT_STATUS_OK
ReadX 12251 276 4096 4096 NT_STATUS_OK
ReadX 12251 2020 4096 4096 NT_STATUS_OK
ReadX 12251 2880 4096 4096 NT_STATUS_OK
ReadX 12251 516 4096 4096 NT_STATUS_OK
ReadX 12251 1844 4096 4096 NT_STATUS_OK
ReadX 12251 1124 4096 4096 NT_STATUS_OK
ReadX 12251 3136 4096 4096 NT_STATUS_OK
ReadX 12251 324 4096 4096 NT_STATUS_OK
ReadX 12251 1156 4096 4096 NT_STATUS_OK
ReadX 12251 1172 4096 4096 NT_STATUS_OK
ReadX 12251 2112 4096 4096 NT_STATUS_OK
ReadX 12251 2368 4096 4096 NT_STATUS_OK
ReadX 12251 964 4096 4096 NT_STATUS_OK
ReadX 12251 980 4096 4096 NT_STATUS_OK
ReadX 12251 1012 4096 4096 NT_STATUS_OK
ReadX 12251 532 4096 4096 NT_STATUS_OK
ReadX 12251 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12251 1620 4096 4096 NT_STATUS_OK
ReadX 12251 1604 4096 4096 NT_STATUS_OK
ReadX 12251 2116 4096 4096 NT_STATUS_OK
ReadX 12251 2132 4096 4096 NT_STATUS_OK
ReadX 12251 2148 4096 4096 NT_STATUS_OK
ReadX 12251 2276 4096 4096 NT_STATUS_OK
ReadX 12251 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12273 NT_STATUS_OK
Close 12273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12276 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 1004 NT_STATUS_OK
Close 12231 NT_STATUS_OK
WriteX 12276 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12276 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12233 1004 NT_STATUS_OK
Close 12233 NT_STATUS_OK
WriteX 12276 0 65536 65536 NT_STATUS_OK
WriteX 12276 65536 64850 64850 NT_STATUS_OK
Close 12276 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12278 NT_STATUS_OK
WriteX 12278 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 258 NT_STATUS_OK
ReadX 12251 2068 4096 4096 NT_STATUS_OK
ReadX 12251 1588 4096 4096 NT_STATUS_OK
ReadX 12251 1572 4096 4096 NT_STATUS_OK
WriteX 12278 0 18630 18630 NT_STATUS_OK
Flush 12278 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12282 NT_STATUS_OK
ReadX 12282 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12251 612 4096 4096 NT_STATUS_OK
ReadX 12251 564 4096 4096 NT_STATUS_OK
ReadX 12251 1876 4096 4096 NT_STATUS_OK
ReadX 12251 628 4096 4096 NT_STATUS_OK
ReadX 12251 740 4096 4096 NT_STATUS_OK
ReadX 12251 724 4096 4096 NT_STATUS_OK
ReadX 12251 644 4096 4096 NT_STATUS_OK
ReadX 12251 2324 4096 4096 NT_STATUS_OK
ReadX 12251 660 4096 4096 NT_STATUS_OK
ReadX 12251 852 4096 4096 NT_STATUS_OK
ReadX 12251 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12251 2368 4096 4096 NT_STATUS_OK
ReadX 12251 1024 4096 4096 NT_STATUS_OK
ReadX 12251 320 4096 4096 NT_STATUS_OK
ReadX 12251 580 4096 4096 NT_STATUS_OK
ReadX 12251 3136 512 512 NT_STATUS_OK
ReadX 12251 2880 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 61440 4096 4096 NT_STATUS_OK
ReadX 12283 126976 4096 4096 NT_STATUS_OK
WriteX 12283 0 65536 65536 NT_STATUS_OK
WriteX 12283 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 61440 4096 4096 NT_STATUS_OK
ReadX 12284 126976 4096 4096 NT_STATUS_OK
ReadX 12284 192512 4096 4096 NT_STATUS_OK
ReadX 12284 258048 4096 4096 NT_STATUS_OK
WriteX 12284 0 65536 65536 NT_STATUS_OK
WriteX 12284 65536 65536 65536 NT_STATUS_OK
WriteX 12284 131072 65536 65536 NT_STATUS_OK
WriteX 12284 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 61440 4096 4096 NT_STATUS_OK
ReadX 12285 126976 4096 4096 NT_STATUS_OK
ReadX 12285 192512 4096 4096 NT_STATUS_OK
ReadX 12285 258048 4096 4096 NT_STATUS_OK
ReadX 12285 323584 4096 4096 NT_STATUS_OK
ReadX 12285 389120 4096 4096 NT_STATUS_OK
ReadX 12285 454656 4096 4096 NT_STATUS_OK
ReadX 12285 520192 4096 4096 NT_STATUS_OK
WriteX 12285 0 65536 65536 NT_STATUS_OK
WriteX 12285 65536 65536 65536 NT_STATUS_OK
WriteX 12285 131072 65536 65536 NT_STATUS_OK
WriteX 12285 196608 65536 65536 NT_STATUS_OK
WriteX 12285 262144 65536 65536 NT_STATUS_OK
WriteX 12285 327680 65536 65536 NT_STATUS_OK
WriteX 12285 393216 65536 65536 NT_STATUS_OK
WriteX 12285 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12288 NT_STATUS_OK
WriteX 12288 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12286 0 8192 8192 NT_STATUS_OK
Flush 12286 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12286 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12286 0 8192 8192 NT_STATUS_OK
Flush 12286 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12286 0 8192 8192 NT_STATUS_OK
Flush 12286 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12286 0 8192 8192 NT_STATUS_OK
Flush 12286 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12282 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Close 12285 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12293 NT_STATUS_OK
WriteX 12293 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12293 258 NT_STATUS_OK
WriteX 12293 0 62591 62591 NT_STATUS_OK
Close 12293 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12298 NT_STATUS_OK
WriteX 12298 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12298 258 NT_STATUS_OK
WriteX 12298 0 10845 10845 NT_STATUS_OK
Close 12298 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12300 NT_STATUS_OK
Close 12300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12303 NT_STATUS_OK
WriteX 12303 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12303 258 NT_STATUS_OK
WriteX 12303 0 30118 30118 NT_STATUS_OK
Close 12303 NT_STATUS_OK
WriteX 12286 0 4096 4096 NT_STATUS_OK
WriteX 12288 0 64 64 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 61440 61440 NT_STATUS_OK
ReadX 12305 61440 4096 4096 NT_STATUS_OK
ReadX 12305 65536 61440 61440 NT_STATUS_OK
ReadX 12305 126976 4096 4096 NT_STATUS_OK
ReadX 12305 131072 61440 61440 NT_STATUS_OK
ReadX 12305 192512 4096 4096 NT_STATUS_OK
ReadX 12305 196608 61440 61440 NT_STATUS_OK
ReadX 12305 258048 4096 4096 NT_STATUS_OK
ReadX 12305 262144 61440 61440 NT_STATUS_OK
ReadX 12305 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 61440 61440 NT_STATUS_OK
ReadX 12306 61440 4096 4096 NT_STATUS_OK
ReadX 12306 65536 61440 61440 NT_STATUS_OK
ReadX 12306 126976 4096 4096 NT_STATUS_OK
ReadX 12306 131072 61440 61440 NT_STATUS_OK
ReadX 12306 192512 4096 4096 NT_STATUS_OK
ReadX 12306 196608 61440 61440 NT_STATUS_OK
ReadX 12306 258048 4096 4096 NT_STATUS_OK
ReadX 12306 262144 61440 61440 NT_STATUS_OK
ReadX 12306 323584 4096 4096 NT_STATUS_OK
ReadX 12306 327680 61440 61440 NT_STATUS_OK
ReadX 12306 389120 4096 4096 NT_STATUS_OK
ReadX 12306 393216 61440 61440 NT_STATUS_OK
ReadX 12306 454656 4096 4096 NT_STATUS_OK
ReadX 12306 458752 61440 61440 NT_STATUS_OK
ReadX 12306 520192 4096 4096 NT_STATUS_OK
ReadX 12306 524288 61440 61440 NT_STATUS_OK
ReadX 12306 585728 4096 4096 NT_STATUS_OK
ReadX 12306 589824 61440 61440 NT_STATUS_OK
ReadX 12306 651264 4096 4096 NT_STATUS_OK
ReadX 12306 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 0 61440 61440 NT_STATUS_OK
ReadX 12307 61440 4096 4096 NT_STATUS_OK
ReadX 12307 65536 61440 61440 NT_STATUS_OK
ReadX 12307 126976 4096 4096 NT_STATUS_OK
ReadX 12307 131072 61440 61440 NT_STATUS_OK
ReadX 12307 192512 4096 4096 NT_STATUS_OK
ReadX 12307 196608 61440 61440 NT_STATUS_OK
ReadX 12307 258048 4096 4096 NT_STATUS_OK
ReadX 12307 262144 61440 61440 NT_STATUS_OK
ReadX 12307 323584 4096 4096 NT_STATUS_OK
ReadX 12307 327680 61440 61440 NT_STATUS_OK
ReadX 12307 389120 4096 4096 NT_STATUS_OK
ReadX 12307 393216 61440 61440 NT_STATUS_OK
ReadX 12307 454656 4096 4096 NT_STATUS_OK
ReadX 12307 458752 61440 61440 NT_STATUS_OK
ReadX 12307 520192 4096 4096 NT_STATUS_OK
ReadX 12307 524288 61440 61440 NT_STATUS_OK
ReadX 12307 585728 4096 4096 NT_STATUS_OK
ReadX 12307 589824 61440 61440 NT_STATUS_OK
ReadX 12307 651264 4096 4096 NT_STATUS_OK
ReadX 12307 655360 61440 61440 NT_STATUS_OK
ReadX 12307 716800 4096 4096 NT_STATUS_OK
ReadX 12307 720896 61440 61440 NT_STATUS_OK
ReadX 12307 782336 4096 4096 NT_STATUS_OK
ReadX 12307 786432 61440 61440 NT_STATUS_OK
ReadX 12307 847872 4096 4096 NT_STATUS_OK
ReadX 12307 851968 61440 61440 NT_STATUS_OK
ReadX 12307 913408 4096 4096 NT_STATUS_OK
ReadX 12307 917504 61440 61440 NT_STATUS_OK
ReadX 12307 978944 4096 4096 NT_STATUS_OK
ReadX 12307 983040 61440 61440 NT_STATUS_OK
ReadX 12307 1044480 4096 4096 NT_STATUS_OK
ReadX 12307 1048576 61440 61440 NT_STATUS_OK
ReadX 12307 1110016 4096 4096 NT_STATUS_OK
ReadX 12307 1114112 61440 61440 NT_STATUS_OK
ReadX 12307 1175552 4096 4096 NT_STATUS_OK
ReadX 12307 1179648 61440 61440 NT_STATUS_OK
ReadX 12307 1241088 4096 4096 NT_STATUS_OK
ReadX 12307 1245184 61440 61440 NT_STATUS_OK
ReadX 12307 1306624 4096 4096 NT_STATUS_OK
ReadX 12307 1310720 61440 61440 NT_STATUS_OK
ReadX 12307 1372160 4096 4096 NT_STATUS_OK
ReadX 12307 1376256 61440 61440 NT_STATUS_OK
ReadX 12307 1437696 4096 4096 NT_STATUS_OK
ReadX 12307 1441792 61440 61440 NT_STATUS_OK
ReadX 12307 1503232 4096 4096 NT_STATUS_OK
ReadX 12307 1507328 61440 61440 NT_STATUS_OK
ReadX 12307 1568768 4096 4096 NT_STATUS_OK
ReadX 12307 1572864 61440 61440 NT_STATUS_OK
ReadX 12307 1634304 4096 4096 NT_STATUS_OK
ReadX 12307 1638400 61440 61440 NT_STATUS_OK
ReadX 12307 1699840 4096 4096 NT_STATUS_OK
ReadX 12307 1703936 61440 61440 NT_STATUS_OK
ReadX 12307 1765376 4096 4096 NT_STATUS_OK
ReadX 12307 1769472 61440 61440 NT_STATUS_OK
ReadX 12307 1830912 4096 4096 NT_STATUS_OK
ReadX 12307 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12308 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12305 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12310 NT_STATUS_OK
ReadX 12310 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
ReadX 12312 4096 4096 4096 NT_STATUS_OK
ReadX 12312 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12310 NT_STATUS_OK
Close 12311 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12316 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12317 NT_STATUS_OK
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 8192 8192 NT_STATUS_OK
ReadX 12320 8192 8192 8192 NT_STATUS_OK
ReadX 12320 16384 8192 8192 NT_STATUS_OK
ReadX 12320 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12325 NT_STATUS_OK
WriteX 12325 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12325 258 NT_STATUS_OK
WriteX 12325 0 10438 10438 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12329 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12330 NT_STATUS_OK
Close 12330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12331 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12333 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12334 NT_STATUS_OK
ReadX 12334 0 4096 4096 NT_STATUS_OK
ReadX 12334 4096 4096 4096 NT_STATUS_OK
ReadX 12334 8192 4096 4096 NT_STATUS_OK
ReadX 12334 12288 8192 8192 NT_STATUS_OK
ReadX 12334 20480 8192 8192 NT_STATUS_OK
ReadX 12334 28672 8192 8192 NT_STATUS_OK
ReadX 12334 36864 8192 8192 NT_STATUS_OK
ReadX 12334 45056 8192 8192 NT_STATUS_OK
ReadX 12334 53248 8192 8192 NT_STATUS_OK
ReadX 12334 61440 8192 8192 NT_STATUS_OK
ReadX 12334 69632 8192 8192 NT_STATUS_OK
ReadX 12334 77824 8192 8192 NT_STATUS_OK
ReadX 12334 86016 8192 8192 NT_STATUS_OK
ReadX 12334 94208 8192 8192 NT_STATUS_OK
ReadX 12334 102400 8192 8192 NT_STATUS_OK
ReadX 12334 110592 8192 8192 NT_STATUS_OK
ReadX 12334 118784 8192 8192 NT_STATUS_OK
ReadX 12334 126976 8192 8192 NT_STATUS_OK
ReadX 12334 135168 8192 8192 NT_STATUS_OK
ReadX 12334 143360 8192 8192 NT_STATUS_OK
ReadX 12334 151552 8192 8192 NT_STATUS_OK
ReadX 12334 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12334 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12339 NT_STATUS_OK
WriteX 12339 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12339 258 NT_STATUS_OK
WriteX 12339 0 28489 28489 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12342 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12345 NT_STATUS_OK
ReadX 12345 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 8192 8192 NT_STATUS_OK
ReadX 12346 8192 8192 8192 NT_STATUS_OK
ReadX 12346 16384 8192 8192 NT_STATUS_OK
ReadX 12346 24576 8192 8192 NT_STATUS_OK
ReadX 12346 32768 16384 16384 NT_STATUS_OK
ReadX 12346 49152 8192 8192 NT_STATUS_OK
ReadX 12346 57344 8192 8192 NT_STATUS_OK
ReadX 12346 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12348 NT_STATUS_OK
Close 12348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12351 NT_STATUS_OK
WriteX 12351 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 258 NT_STATUS_OK
WriteX 12351 0 29253 29253 NT_STATUS_OK
Close 12351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12352 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12355 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12358 NT_STATUS_OK
WriteX 12358 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 258 NT_STATUS_OK
WriteX 12358 0 30183 30183 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12359 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12361 NT_STATUS_OK
WriteX 12361 0 510 510 NT_STATUS_OK
WriteX 12361 510 512 512 NT_STATUS_OK
WriteX 12361 1022 510 510 NT_STATUS_OK
WriteX 12361 1532 510 510 NT_STATUS_OK
WriteX 12361 2042 168 168 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
WriteX 12364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 61440 4096 4096 NT_STATUS_OK
ReadX 12365 126976 4096 4096 NT_STATUS_OK
WriteX 12365 0 65536 65536 NT_STATUS_OK
WriteX 12365 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 61440 4096 4096 NT_STATUS_OK
ReadX 12366 126976 4096 4096 NT_STATUS_OK
ReadX 12366 192512 4096 4096 NT_STATUS_OK
ReadX 12366 258048 4096 4096 NT_STATUS_OK
WriteX 12366 0 65536 65536 NT_STATUS_OK
WriteX 12366 65536 65536 65536 NT_STATUS_OK
WriteX 12366 131072 65536 65536 NT_STATUS_OK
WriteX 12366 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 61440 4096 4096 NT_STATUS_OK
ReadX 12367 126976 4096 4096 NT_STATUS_OK
ReadX 12367 192512 4096 4096 NT_STATUS_OK
ReadX 12367 258048 4096 4096 NT_STATUS_OK
ReadX 12367 323584 4096 4096 NT_STATUS_OK
ReadX 12367 389120 4096 4096 NT_STATUS_OK
ReadX 12367 454656 4096 4096 NT_STATUS_OK
ReadX 12367 520192 4096 4096 NT_STATUS_OK
WriteX 12367 0 65536 65536 NT_STATUS_OK
WriteX 12367 65536 65536 65536 NT_STATUS_OK
WriteX 12367 131072 65536 65536 NT_STATUS_OK
WriteX 12367 196608 65536 65536 NT_STATUS_OK
WriteX 12367 262144 65536 65536 NT_STATUS_OK
WriteX 12367 327680 65536 65536 NT_STATUS_OK
WriteX 12367 393216 65536 65536 NT_STATUS_OK
WriteX 12367 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12374 NT_STATUS_OK
Close 12374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12412 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12422 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12427 NT_STATUS_OK
Close 12427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12436 NT_STATUS_OK
WriteX 12436 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12436 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12436 0 65536 65536 NT_STATUS_OK
WriteX 12436 65536 65536 65536 NT_STATUS_OK
WriteX 12436 131072 65536 65536 NT_STATUS_OK
WriteX 12436 196608 65536 65536 NT_STATUS_OK
WriteX 12436 262144 26634 26634 NT_STATUS_OK
Close 12436 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12441 NT_STATUS_OK
Close 12441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
Close 12443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
ReadX 12444 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12445 NT_STATUS_OK
Close 12445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12449 NT_STATUS_OK
Close 12449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12452 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12454 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12461 NT_STATUS_OK
Close 12461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12463 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12467 NT_STATUS_OK
Close 12467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12472 NT_STATUS_OK
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12477 NT_STATUS_OK
Close 12477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12487 NT_STATUS_OK
Close 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12492 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12496 NT_STATUS_OK
Close 12496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12506 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12511 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12521 NT_STATUS_OK
Close 12521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
Close 12523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
Close 12524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12535 NT_STATUS_OK
Close 12535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12537 NT_STATUS_OK
ReadX 12537 0 4096 4096 NT_STATUS_OK
Close 12537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12568 0 4096 4096 NT_STATUS_OK
Close 12568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 4096 4096 NT_STATUS_OK
ReadX 12570 4096 4096 4096 NT_STATUS_OK
ReadX 12570 8192 4096 4096 NT_STATUS_OK
ReadX 12570 12288 4096 4096 NT_STATUS_OK
ReadX 12570 16384 4096 4096 NT_STATUS_OK
ReadX 12570 20480 4096 4096 NT_STATUS_OK
ReadX 12570 24576 4096 4096 NT_STATUS_OK
ReadX 12570 28672 4096 4096 NT_STATUS_OK
ReadX 12570 32768 4096 4096 NT_STATUS_OK
ReadX 12570 36864 4096 4096 NT_STATUS_OK
ReadX 12570 40960 4096 4096 NT_STATUS_OK
ReadX 12570 45056 4096 4096 NT_STATUS_OK
ReadX 12570 49152 4096 4096 NT_STATUS_OK
ReadX 12570 53248 4096 4096 NT_STATUS_OK
ReadX 12570 57344 4096 4096 NT_STATUS_OK
ReadX 12570 61440 4096 4096 NT_STATUS_OK
ReadX 12570 65536 4096 4096 NT_STATUS_OK
ReadX 12570 69632 4096 4096 NT_STATUS_OK
ReadX 12570 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12570 1004 NT_STATUS_OK
WriteX 12570 0 4096 4096 NT_STATUS_OK
Close 12570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12571 NT_STATUS_OK
SET_FILE_INFORMATION 12571 1004 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12576 NT_STATUS_OK
WriteX 12576 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 258 NT_STATUS_OK
WriteX 12576 0 65536 65536 NT_STATUS_OK
WriteX 12576 65536 19979 19979 NT_STATUS_OK
Close 12576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
QUERY_FILE_INFORMATION 12577 1004 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
Close 12581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12582 1004 NT_STATUS_OK
WriteX 12582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12583 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12585 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12588 NT_STATUS_OK
WriteX 12588 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12588 258 NT_STATUS_OK
WriteX 12588 0 65536 65536 NT_STATUS_OK
WriteX 12588 65536 17654 17654 NT_STATUS_OK
Close 12588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 1004 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
Close 12589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12590 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
Close 12590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12592 NT_STATUS_OK
Close 12592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
ReadX 12594 4096 4096 4096 NT_STATUS_OK
ReadX 12594 8192 4096 4096 NT_STATUS_OK
ReadX 12594 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12594 16384 4096 4096 NT_STATUS_OK
ReadX 12594 20480 4096 4096 NT_STATUS_OK
ReadX 12594 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
Close 12595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
Close 12596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
WriteX 12597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12598 NT_STATUS_OK
Close 12598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12603 NT_STATUS_OK
WriteX 12603 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12603 258 NT_STATUS_OK
WriteX 12603 0 65536 65536 NT_STATUS_OK
WriteX 12603 65536 19490 19490 NT_STATUS_OK
Close 12603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
WriteX 12604 0 4096 4096 NT_STATUS_OK
Flush 12604 NT_STATUS_OK
WriteX 12604 0 4096 4096 NT_STATUS_OK
Flush 12604 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 1004 NT_STATUS_OK
WriteX 12604 0 4096 4096 NT_STATUS_OK
Flush 12604 NT_STATUS_OK
WriteX 12604 0 4096 4096 NT_STATUS_OK
Flush 12604 NT_STATUS_OK
WriteX 12604 0 4096 4096 NT_STATUS_OK
Flush 12604 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
WriteX 12604 0 4096 4096 NT_STATUS_OK
Flush 12604 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12605 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12609 0 4096 4096 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 4096 4096 NT_STATUS_OK
ReadX 12611 4096 4096 4096 NT_STATUS_OK
ReadX 12611 8192 4096 4096 NT_STATUS_OK
ReadX 12611 12288 4096 4096 NT_STATUS_OK
ReadX 12611 16384 4096 4096 NT_STATUS_OK
ReadX 12611 20480 4096 4096 NT_STATUS_OK
ReadX 12611 24576 4096 4096 NT_STATUS_OK
ReadX 12611 28672 4096 4096 NT_STATUS_OK
ReadX 12611 32768 4096 4096 NT_STATUS_OK
ReadX 12611 36864 4096 4096 NT_STATUS_OK
ReadX 12611 40960 4096 4096 NT_STATUS_OK
ReadX 12611 45056 4096 4096 NT_STATUS_OK
ReadX 12611 49152 4096 4096 NT_STATUS_OK
ReadX 12611 53248 4096 4096 NT_STATUS_OK
ReadX 12611 57344 4096 4096 NT_STATUS_OK
ReadX 12611 61440 4096 4096 NT_STATUS_OK
ReadX 12611 65536 4096 4096 NT_STATUS_OK
ReadX 12611 69632 4096 4096 NT_STATUS_OK
ReadX 12611 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12611 1004 NT_STATUS_OK
WriteX 12611 0 4096 4096 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12612 NT_STATUS_OK
SET_FILE_INFORMATION 12612 1004 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12614 NT_STATUS_OK
Close 12614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12617 NT_STATUS_OK
WriteX 12617 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12617 258 NT_STATUS_OK
WriteX 12617 0 65536 65536 NT_STATUS_OK
WriteX 12617 65536 8866 8866 NT_STATUS_OK
Close 12617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
Flush 12618 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
Flush 12618 NT_STATUS_OK
Close 12618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
Close 12620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12622 1004 NT_STATUS_OK
WriteX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12623 NT_STATUS_OK
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12625 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12628 NT_STATUS_OK
WriteX 12628 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12628 258 NT_STATUS_OK
WriteX 12628 0 65536 65536 NT_STATUS_OK
WriteX 12628 65536 9298 9298 NT_STATUS_OK
Close 12628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
WriteX 12629 0 4096 4096 NT_STATUS_OK
Flush 12629 NT_STATUS_OK
SET_FILE_INFORMATION 12629 1004 NT_STATUS_OK
WriteX 12629 0 4096 4096 NT_STATUS_OK
Flush 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12630 NT_STATUS_OK
SET_FILE_INFORMATION 12630 1004 NT_STATUS_OK
Close 12630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12632 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12635 0 4096 4096 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12636 4096 4096 4096 NT_STATUS_OK
ReadX 12636 8192 4096 4096 NT_STATUS_OK
ReadX 12636 12288 4096 4096 NT_STATUS_OK
ReadX 12636 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 4096 4096 NT_STATUS_OK
Close 12638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12639 1004 NT_STATUS_OK
WriteX 12639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12636 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12642 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12645 NT_STATUS_OK
WriteX 12645 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 258 NT_STATUS_OK
WriteX 12645 0 65536 65536 NT_STATUS_OK
WriteX 12645 65536 11540 11540 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
SET_FILE_INFORMATION 12646 1004 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12647 NT_STATUS_OK
SET_FILE_INFORMATION 12647 1004 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 61440 4096 4096 NT_STATUS_OK
ReadX 12651 126976 4096 4096 NT_STATUS_OK
WriteX 12651 0 65536 65536 NT_STATUS_OK
WriteX 12651 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 61440 4096 4096 NT_STATUS_OK
ReadX 12652 126976 4096 4096 NT_STATUS_OK
ReadX 12652 192512 4096 4096 NT_STATUS_OK
ReadX 12652 258048 4096 4096 NT_STATUS_OK
WriteX 12652 0 65536 65536 NT_STATUS_OK
WriteX 12652 65536 65536 65536 NT_STATUS_OK
WriteX 12652 131072 65536 65536 NT_STATUS_OK
WriteX 12652 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 61440 4096 4096 NT_STATUS_OK
ReadX 12653 126976 4096 4096 NT_STATUS_OK
ReadX 12653 192512 4096 4096 NT_STATUS_OK
ReadX 12653 258048 4096 4096 NT_STATUS_OK
ReadX 12653 323584 4096 4096 NT_STATUS_OK
ReadX 12653 389120 4096 4096 NT_STATUS_OK
ReadX 12653 454656 4096 4096 NT_STATUS_OK
ReadX 12653 520192 4096 4096 NT_STATUS_OK
WriteX 12653 0 65536 65536 NT_STATUS_OK
WriteX 12653 65536 65536 65536 NT_STATUS_OK
WriteX 12653 131072 65536 65536 NT_STATUS_OK
WriteX 12653 196608 65536 65536 NT_STATUS_OK
WriteX 12653 262144 65536 65536 NT_STATUS_OK
WriteX 12653 327680 65536 65536 NT_STATUS_OK
WriteX 12653 393216 65536 65536 NT_STATUS_OK
WriteX 12653 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
ReadX 12654 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12655 NT_STATUS_OK
WriteX 12655 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12655 258 NT_STATUS_OK
WriteX 12655 0 53 53 NT_STATUS_OK
Close 12655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12594 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12654 8192 4096 4096 NT_STATUS_OK
ReadX 12654 12288 4096 4096 NT_STATUS_OK
WriteX 12658 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
ReadX 12654 16384 4096 4096 NT_STATUS_OK
ReadX 12654 20480 4096 4096 NT_STATUS_OK
WriteX 12658 0 15360 15360 NT_STATUS_OK
Close 12658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12659 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12659 1004 NT_STATUS_OK
WriteX 12659 0 4096 4096 NT_STATUS_OK
Close 12659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12662 4096 4096 4096 NT_STATUS_OK
ReadX 12662 8192 4096 4096 NT_STATUS_OK
ReadX 12662 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
ReadX 12665 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
ReadX 12666 4096 4096 4096 NT_STATUS_OK
ReadX 12666 8192 4096 4096 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 15360 15360 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12669 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12672 NT_STATUS_OK
SET_FILE_INFORMATION 12672 1004 NT_STATUS_OK
Close 12672 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Close 12668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
ReadX 12675 4096 4096 4096 NT_STATUS_OK
ReadX 12675 8192 4096 4096 NT_STATUS_OK
ReadX 12675 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12675 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12675 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12677 NT_STATUS_OK
WriteX 12677 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 53 53 NT_STATUS_OK
Close 12677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12678 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12676 4096 4096 4096 NT_STATUS_OK
ReadX 12676 8192 4096 4096 NT_STATUS_OK
ReadX 12676 12288 4096 4096 NT_STATUS_OK
WriteX 12680 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12680 258 NT_STATUS_OK
WriteX 12680 0 12006 12006 NT_STATUS_OK
Close 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12681 NT_STATUS_OK
ReadX 12681 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12681 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12681 1004 NT_STATUS_OK
WriteX 12681 0 4096 4096 NT_STATUS_OK
Close 12681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12682 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12684 4096 4096 4096 NT_STATUS_OK
ReadX 12684 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12687 NT_STATUS_OK
WriteX 12687 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12687 258 NT_STATUS_OK
WriteX 12687 0 11991 11991 NT_STATUS_OK
Close 12687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12688 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12688 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12689 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12692 NT_STATUS_OK
SET_FILE_INFORMATION 12692 1004 NT_STATUS_OK
Close 12692 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12695 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
ReadX 12695 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
Close 12671 NT_STATUS_OK
WriteX 12675 0 19054 19054 NT_STATUS_OK
WriteX 12695 0 12288 12288 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12675 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12700 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 61440 61440 NT_STATUS_OK
ReadX 12702 61440 4096 4096 NT_STATUS_OK
ReadX 12702 65536 61440 61440 NT_STATUS_OK
ReadX 12702 126976 4096 4096 NT_STATUS_OK
ReadX 12702 131072 61440 61440 NT_STATUS_OK
ReadX 12702 192512 4096 4096 NT_STATUS_OK
ReadX 12702 196608 61440 61440 NT_STATUS_OK
ReadX 12702 258048 4096 4096 NT_STATUS_OK
ReadX 12702 262144 61440 61440 NT_STATUS_OK
ReadX 12702 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 0 61440 61440 NT_STATUS_OK
ReadX 12703 61440 4096 4096 NT_STATUS_OK
ReadX 12703 65536 61440 61440 NT_STATUS_OK
ReadX 12703 126976 4096 4096 NT_STATUS_OK
ReadX 12703 131072 61440 61440 NT_STATUS_OK
ReadX 12703 192512 4096 4096 NT_STATUS_OK
ReadX 12703 196608 61440 61440 NT_STATUS_OK
ReadX 12703 258048 4096 4096 NT_STATUS_OK
ReadX 12703 262144 61440 61440 NT_STATUS_OK
ReadX 12703 323584 4096 4096 NT_STATUS_OK
ReadX 12703 327680 61440 61440 NT_STATUS_OK
ReadX 12703 389120 4096 4096 NT_STATUS_OK
ReadX 12703 393216 61440 61440 NT_STATUS_OK
ReadX 12703 454656 4096 4096 NT_STATUS_OK
ReadX 12703 458752 61440 61440 NT_STATUS_OK
ReadX 12703 520192 4096 4096 NT_STATUS_OK
ReadX 12703 524288 61440 61440 NT_STATUS_OK
ReadX 12703 585728 4096 4096 NT_STATUS_OK
ReadX 12703 589824 61440 61440 NT_STATUS_OK
ReadX 12703 651264 4096 4096 NT_STATUS_OK
ReadX 12703 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 61440 61440 NT_STATUS_OK
ReadX 12704 61440 4096 4096 NT_STATUS_OK
ReadX 12704 65536 61440 61440 NT_STATUS_OK
ReadX 12704 126976 4096 4096 NT_STATUS_OK
ReadX 12704 131072 61440 61440 NT_STATUS_OK
ReadX 12704 192512 4096 4096 NT_STATUS_OK
ReadX 12704 196608 61440 61440 NT_STATUS_OK
ReadX 12704 258048 4096 4096 NT_STATUS_OK
ReadX 12704 262144 61440 61440 NT_STATUS_OK
ReadX 12704 323584 4096 4096 NT_STATUS_OK
ReadX 12704 327680 61440 61440 NT_STATUS_OK
ReadX 12704 389120 4096 4096 NT_STATUS_OK
ReadX 12704 393216 61440 61440 NT_STATUS_OK
ReadX 12704 454656 4096 4096 NT_STATUS_OK
ReadX 12704 458752 61440 61440 NT_STATUS_OK
ReadX 12704 520192 4096 4096 NT_STATUS_OK
ReadX 12704 524288 61440 61440 NT_STATUS_OK
ReadX 12704 585728 4096 4096 NT_STATUS_OK
ReadX 12704 589824 61440 61440 NT_STATUS_OK
ReadX 12704 651264 4096 4096 NT_STATUS_OK
ReadX 12704 655360 61440 61440 NT_STATUS_OK
ReadX 12704 716800 4096 4096 NT_STATUS_OK
ReadX 12704 720896 61440 61440 NT_STATUS_OK
ReadX 12704 782336 4096 4096 NT_STATUS_OK
ReadX 12704 786432 61440 61440 NT_STATUS_OK
ReadX 12704 847872 4096 4096 NT_STATUS_OK
ReadX 12704 851968 61440 61440 NT_STATUS_OK
ReadX 12704 913408 4096 4096 NT_STATUS_OK
ReadX 12704 917504 61440 61440 NT_STATUS_OK
ReadX 12704 978944 4096 4096 NT_STATUS_OK
ReadX 12704 983040 61440 61440 NT_STATUS_OK
ReadX 12704 1044480 4096 4096 NT_STATUS_OK
ReadX 12704 1048576 61440 61440 NT_STATUS_OK
ReadX 12704 1110016 4096 4096 NT_STATUS_OK
ReadX 12704 1114112 61440 61440 NT_STATUS_OK
ReadX 12704 1175552 4096 4096 NT_STATUS_OK
ReadX 12704 1179648 61440 61440 NT_STATUS_OK
ReadX 12704 1241088 4096 4096 NT_STATUS_OK
ReadX 12704 1245184 61440 61440 NT_STATUS_OK
ReadX 12704 1306624 4096 4096 NT_STATUS_OK
ReadX 12704 1310720 61440 61440 NT_STATUS_OK
ReadX 12704 1372160 4096 4096 NT_STATUS_OK
ReadX 12704 1376256 61440 61440 NT_STATUS_OK
ReadX 12704 1437696 4096 4096 NT_STATUS_OK
ReadX 12704 1441792 61440 61440 NT_STATUS_OK
ReadX 12704 1503232 4096 4096 NT_STATUS_OK
ReadX 12704 1507328 61440 61440 NT_STATUS_OK
ReadX 12704 1568768 4096 4096 NT_STATUS_OK
ReadX 12704 1572864 61440 61440 NT_STATUS_OK
ReadX 12704 1634304 4096 4096 NT_STATUS_OK
ReadX 12704 1638400 61440 61440 NT_STATUS_OK
ReadX 12704 1699840 4096 4096 NT_STATUS_OK
ReadX 12704 1703936 61440 61440 NT_STATUS_OK
ReadX 12704 1765376 4096 4096 NT_STATUS_OK
ReadX 12704 1769472 61440 61440 NT_STATUS_OK
ReadX 12704 1830912 4096 4096 NT_STATUS_OK
ReadX 12704 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12706 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12711 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 1004 NT_STATUS_OK
WriteX 12711 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12713 NT_STATUS_OK
WriteX 12713 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 258 NT_STATUS_OK
WriteX 12713 0 491 491 NT_STATUS_OK
Close 12713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12714 NT_STATUS_OK
ReadX 12714 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12711 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12717 NT_STATUS_OK
WriteX 12717 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12717 258 NT_STATUS_OK
WriteX 12717 0 543 543 NT_STATUS_OK
Close 12717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Close 12718 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12731 NT_STATUS_OK
QUERY_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12731 258 NT_STATUS_OK
WriteX 12731 0 2048 2048 NT_STATUS_OK
Close 12731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12732 0 4096 4096 NT_STATUS_OK
Flush 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12732 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12737 NT_STATUS_OK
WriteX 12737 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12737 258 NT_STATUS_OK
WriteX 12737 0 2048 2048 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12743 NT_STATUS_OK
WriteX 12743 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 2048 2048 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 2048 2048 NT_STATUS_OK
ReadX 12722 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
WriteX 12722 0 8192 8192 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
WriteX 12724 0 4096 4096 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12752 NT_STATUS_OK
ReadX 12752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12768 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 1004 NT_STATUS_OK
WriteX 12768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 258 NT_STATUS_OK
WriteX 12768 0 2048 2048 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12776 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 1004 NT_STATUS_OK
WriteX 12776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
WriteX 12776 0 2048 2048 NT_STATUS_OK
Close 12776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
Flush 12769 NT_STATUS_OK
WriteX 12777 0 4096 4096 NT_STATUS_OK
Flush 12777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12771 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12779 NT_STATUS_OK
WriteX 12779 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 258 NT_STATUS_OK
WriteX 12779 0 4096 4096 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12781 NT_STATUS_OK
Close 12781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12782 NT_STATUS_OK
WriteX 12782 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12782 258 NT_STATUS_OK
WriteX 12782 0 4096 4096 NT_STATUS_OK
Close 12782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12783 0 4096 4096 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12757 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12786 NT_STATUS_OK
Close 12786 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12790 NT_STATUS_OK
WriteX 12790 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12790 258 NT_STATUS_OK
WriteX 12790 0 2048 2048 NT_STATUS_OK
Close 12790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12801 NT_STATUS_OK
ReadX 12801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12802 NT_STATUS_OK
ReadX 12802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12804 NT_STATUS_OK
ReadX 12804 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12805 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12800 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Close 12802 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12807 NT_STATUS_OK
QUERY_FILE_INFORMATION 12807 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12827 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 1004 NT_STATUS_OK
WriteX 12827 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 258 NT_STATUS_OK
WriteX 12827 0 2048 2048 NT_STATUS_OK
Close 12827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12828 NT_STATUS_OK
ReadX 12828 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12839 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 1004 NT_STATUS_OK
WriteX 12839 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
WriteX 12839 0 2048 2048 NT_STATUS_OK
Close 12839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12840 NT_STATUS_OK
ReadX 12840 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12842 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12847 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 1004 NT_STATUS_OK
WriteX 12847 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 258 NT_STATUS_OK
WriteX 12847 0 2048 2048 NT_STATUS_OK
Close 12847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12848 NT_STATUS_OK
ReadX 12848 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12828 0 4096 4096 NT_STATUS_OK
Flush 12828 NT_STATUS_OK
WriteX 12840 0 4096 4096 NT_STATUS_OK
Flush 12840 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Flush 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12828 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12830 4096 16384 16384 NT_STATUS_OK
ReadX 12810 4096 16384 16384 NT_STATUS_OK
ReadX 12842 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 2048 2048 NT_STATUS_OK
WriteX 12850 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12851 NT_STATUS_OK
QUERY_FILE_INFORMATION 12851 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Close 12832 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12820 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12853 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12855 NT_STATUS_OK
QUERY_FILE_INFORMATION 12855 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12858 4096 16384 16384 NT_STATUS_OK
WriteX 12858 0 4096 4096 NT_STATUS_OK
WriteX 12859 0 4096 4096 NT_STATUS_OK
WriteX 12860 0 4096 4096 NT_STATUS_OK
WriteX 12861 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12864 NT_STATUS_OK
ReadX 12864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12865 NT_STATUS_OK
ReadX 12865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12872 NT_STATUS_OK
ReadX 12872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12873 NT_STATUS_OK
ReadX 12873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12874 NT_STATUS_OK
ReadX 12874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 8192 8192 NT_STATUS_OK
ReadX 12864 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12878 0 4096 4096 NT_STATUS_OK
ReadX 12878 4096 4096 4096 NT_STATUS_OK
ReadX 12878 8192 4096 4096 NT_STATUS_OK
WriteX 12864 0 4096 4096 NT_STATUS_OK
WriteX 12865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12879 0 4096 4096 NT_STATUS_OK
ReadX 12879 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12858 0 4096 4096 NT_STATUS_OK
WriteX 12859 0 4096 4096 NT_STATUS_OK
WriteX 12860 0 4096 4096 NT_STATUS_OK
WriteX 12861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12884 NT_STATUS_OK
QUERY_FILE_INFORMATION 12884 1004 NT_STATUS_OK
WriteX 12884 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12884 258 NT_STATUS_OK
WriteX 12884 0 2048 2048 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12885 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12885 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
ReadX 12887 4096 4096 4096 NT_STATUS_OK
WriteX 12887 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12885 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
ReadX 12889 4096 4096 4096 NT_STATUS_OK
WriteX 12889 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12890 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12875 NT_STATUS_OK
Close 12871 NT_STATUS_OK
Close 12872 NT_STATUS_OK
Close 12873 NT_STATUS_OK
Close 12874 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12864 NT_STATUS_OK
Close 12865 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12879 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12892 0 4096 4096 NT_STATUS_OK
ReadX 12892 4096 4096 4096 NT_STATUS_OK
ReadX 12892 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12898 NT_STATUS_OK
ReadX 12898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12899 NT_STATUS_OK
ReadX 12899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12905 NT_STATUS_OK
ReadX 12905 0 4096 4096 NT_STATUS_OK
ReadX 12893 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12910 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1004 NT_STATUS_OK
WriteX 12910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 2048 2048 NT_STATUS_OK
Close 12910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12911 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12916 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1004 NT_STATUS_OK
WriteX 12916 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 258 NT_STATUS_OK
WriteX 12916 0 2048 2048 NT_STATUS_OK
Close 12916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12900 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12918 NT_STATUS_OK
QUERY_FILE_INFORMATION 12918 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12904 NT_STATUS_OK
Close 12899 NT_STATUS_OK
Close 12905 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Close 12896 NT_STATUS_OK
Close 12900 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12902 NT_STATUS_OK
Close 12903 NT_STATUS_OK
Close 12892 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12920 NT_STATUS_OK
QUERY_FILE_INFORMATION 12920 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 61440 4096 4096 NT_STATUS_OK
ReadX 12922 126976 4096 4096 NT_STATUS_OK
WriteX 12922 0 65536 65536 NT_STATUS_OK
WriteX 12922 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 61440 4096 4096 NT_STATUS_OK
ReadX 12923 126976 4096 4096 NT_STATUS_OK
ReadX 12923 192512 4096 4096 NT_STATUS_OK
ReadX 12923 258048 4096 4096 NT_STATUS_OK
WriteX 12923 0 65536 65536 NT_STATUS_OK
WriteX 12923 65536 65536 65536 NT_STATUS_OK
WriteX 12923 131072 65536 65536 NT_STATUS_OK
WriteX 12923 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 61440 4096 4096 NT_STATUS_OK
ReadX 12924 126976 4096 4096 NT_STATUS_OK
ReadX 12924 192512 4096 4096 NT_STATUS_OK
ReadX 12924 258048 4096 4096 NT_STATUS_OK
ReadX 12924 323584 4096 4096 NT_STATUS_OK
ReadX 12924 389120 4096 4096 NT_STATUS_OK
ReadX 12924 454656 4096 4096 NT_STATUS_OK
ReadX 12924 520192 4096 4096 NT_STATUS_OK
WriteX 12924 0 65536 65536 NT_STATUS_OK
WriteX 12924 65536 65536 65536 NT_STATUS_OK
WriteX 12924 131072 65536 65536 NT_STATUS_OK
WriteX 12924 196608 65536 65536 NT_STATUS_OK
WriteX 12924 262144 65536 65536 NT_STATUS_OK
WriteX 12924 327680 65536 65536 NT_STATUS_OK
WriteX 12924 393216 65536 65536 NT_STATUS_OK
WriteX 12924 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12925 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12925 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12925 8192 4096 4096 NT_STATUS_OK
ReadX 12925 12288 4096 4096 NT_STATUS_OK
ReadX 12925 16384 4096 4096 NT_STATUS_OK
ReadX 12925 20480 4096 4096 NT_STATUS_OK
ReadX 12925 24576 4096 4096 NT_STATUS_OK
ReadX 12925 28672 4096 4096 NT_STATUS_OK
ReadX 12925 32768 4096 4096 NT_STATUS_OK
ReadX 12925 36864 4096 4096 NT_STATUS_OK
ReadX 12925 40960 4096 4096 NT_STATUS_OK
ReadX 12925 45056 4096 4096 NT_STATUS_OK
ReadX 12925 49152 4096 4096 NT_STATUS_OK
ReadX 12925 53248 4096 4096 NT_STATUS_OK
ReadX 12925 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12925 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12926 NT_STATUS_OK
Close 12926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12928 NT_STATUS_OK
WriteX 12928 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12928 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12928 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12928 1004 NT_STATUS_OK
WriteX 12928 0 57088 57088 NT_STATUS_OK
WriteX 12928 0 4096 4096 NT_STATUS_OK
Flush 12928 NT_STATUS_OK
Close 12925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12929 NT_STATUS_OK
SET_FILE_INFORMATION 12929 1004 NT_STATUS_OK
Close 12929 NT_STATUS_OK
SET_FILE_INFORMATION 12928 1004 NT_STATUS_OK
WriteX 12928 0 4096 4096 NT_STATUS_OK
Close 12928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12932 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12933 NT_STATUS_OK
WriteX 12933 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12933 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12933 1004 NT_STATUS_OK
WriteX 12933 0 51456 51456 NT_STATUS_OK
WriteX 12933 0 4096 4096 NT_STATUS_OK
Flush 12933 NT_STATUS_OK
SET_FILE_INFORMATION 12933 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12933 1004 NT_STATUS_OK
WriteX 12933 0 4096 4096 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12935 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12937 NT_STATUS_OK
ReadX 12937 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12937 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12942 NT_STATUS_OK
WriteX 12942 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12942 258 NT_STATUS_OK
WriteX 12942 0 53077 53077 NT_STATUS_OK
Close 12942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12943 NT_STATUS_OK
WriteX 12943 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12943 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12943 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12943 1004 NT_STATUS_OK
WriteX 12943 0 65536 65536 NT_STATUS_OK
WriteX 12943 65536 1856 1856 NT_STATUS_OK
WriteX 12943 0 4096 4096 NT_STATUS_OK
Flush 12943 NT_STATUS_OK
SET_FILE_INFORMATION 12943 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12943 1004 NT_STATUS_OK
WriteX 12943 0 4096 4096 NT_STATUS_OK
Close 12943 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12949 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12952 NT_STATUS_OK
WriteX 12952 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 258 NT_STATUS_OK
WriteX 12952 0 7983 7983 NT_STATUS_OK
Close 12952 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12954 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12957 NT_STATUS_OK
WriteX 12957 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12957 258 NT_STATUS_OK
WriteX 12957 0 65536 65536 NT_STATUS_OK
WriteX 12957 65536 65536 65536 NT_STATUS_OK
WriteX 12957 131072 65536 65536 NT_STATUS_OK
WriteX 12957 196608 65536 65536 NT_STATUS_OK
WriteX 12957 262144 65536 65536 NT_STATUS_OK
WriteX 12957 327680 65536 65536 NT_STATUS_OK
WriteX 12957 393216 65536 65536 NT_STATUS_OK
WriteX 12957 458752 46731 46731 NT_STATUS_OK
Close 12957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12958 NT_STATUS_OK
WriteX 12958 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12958 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12947 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12958 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12958 1004 NT_STATUS_OK
WriteX 12958 0 65536 65536 NT_STATUS_OK
WriteX 12958 65536 22848 22848 NT_STATUS_OK
WriteX 12958 0 4096 4096 NT_STATUS_OK
Flush 12958 NT_STATUS_OK
SET_FILE_INFORMATION 12958 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12958 1004 NT_STATUS_OK
WriteX 12958 0 4096 4096 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12960 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12962 NT_STATUS_OK
ReadX 12962 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12962 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12963 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12963 1004 NT_STATUS_OK
ReadX 12963 8192 4096 4096 NT_STATUS_OK
ReadX 12963 12288 4096 4096 NT_STATUS_OK
ReadX 12963 16384 4096 4096 NT_STATUS_OK
ReadX 12963 20480 4096 4096 NT_STATUS_OK
ReadX 12963 24576 4096 4096 NT_STATUS_OK
ReadX 12963 28672 4096 4096 NT_STATUS_OK
ReadX 12963 32768 4096 4096 NT_STATUS_OK
ReadX 12963 36864 4096 4096 NT_STATUS_OK
ReadX 12963 40960 4096 4096 NT_STATUS_OK
ReadX 12963 45056 4096 4096 NT_STATUS_OK
ReadX 12963 49152 4096 4096 NT_STATUS_OK
ReadX 12963 53248 4096 4096 NT_STATUS_OK
ReadX 12963 57344 4096 4096 NT_STATUS_OK
ReadX 12963 61440 4096 4096 NT_STATUS_OK
ReadX 12963 65536 4096 4096 NT_STATUS_OK
ReadX 12963 69632 4096 4096 NT_STATUS_OK
ReadX 12963 73728 4096 4096 NT_STATUS_OK
ReadX 12963 77824 4096 4096 NT_STATUS_OK
ReadX 12963 81920 4096 4096 NT_STATUS_OK
ReadX 12963 86016 4096 4096 NT_STATUS_OK
ReadX 12963 90112 4096 4096 NT_STATUS_OK
ReadX 12963 94208 4096 4096 NT_STATUS_OK
ReadX 12963 98304 4096 4096 NT_STATUS_OK
ReadX 12963 102400 4096 4096 NT_STATUS_OK
ReadX 12963 106496 4096 4096 NT_STATUS_OK
ReadX 12963 110592 4096 4096 NT_STATUS_OK
ReadX 12963 114688 4096 4096 NT_STATUS_OK
ReadX 12963 118784 4096 4096 NT_STATUS_OK
ReadX 12963 122880 4096 4096 NT_STATUS_OK
ReadX 12963 126976 4096 4096 NT_STATUS_OK
ReadX 12963 131072 4096 4096 NT_STATUS_OK
ReadX 12963 135168 4096 4096 NT_STATUS_OK
ReadX 12963 139264 4096 4096 NT_STATUS_OK
ReadX 12963 143360 4096 4096 NT_STATUS_OK
ReadX 12963 147456 4096 4096 NT_STATUS_OK
ReadX 12963 151552 4096 4096 NT_STATUS_OK
ReadX 12963 155648 4096 4096 NT_STATUS_OK
ReadX 12963 159744 4096 4096 NT_STATUS_OK
ReadX 12963 163840 4096 4096 NT_STATUS_OK
ReadX 12963 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12963 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12964 NT_STATUS_OK
Close 12964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12966 NT_STATUS_OK
WriteX 12966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 258 NT_STATUS_OK
Close 12963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12967 NT_STATUS_OK
SET_FILE_INFORMATION 12967 1004 NT_STATUS_OK
Close 12967 NT_STATUS_OK
WriteX 12966 0 42388 42388 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12968 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
ReadX 12970 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12971 NT_STATUS_OK
WriteX 12971 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12971 258 NT_STATUS_OK
SET_FILE_INFORMATION 12971 1004 NT_STATUS_OK
WriteX 12971 0 42652 42652 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12975 NT_STATUS_OK
ReadX 12975 0 4096 4096 NT_STATUS_OK
ReadX 12975 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12977 NT_STATUS_OK
Close 12977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12980 NT_STATUS_OK
WriteX 12980 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12980 258 NT_STATUS_OK
WriteX 12980 0 65536 65536 NT_STATUS_OK
WriteX 12980 65536 49 49 NT_STATUS_OK
Close 12980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 61440 61440 NT_STATUS_OK
ReadX 12981 61440 4096 4096 NT_STATUS_OK
ReadX 12981 65536 61440 61440 NT_STATUS_OK
ReadX 12981 126976 4096 4096 NT_STATUS_OK
ReadX 12981 131072 61440 61440 NT_STATUS_OK
ReadX 12981 192512 4096 4096 NT_STATUS_OK
ReadX 12981 196608 61440 61440 NT_STATUS_OK
ReadX 12981 258048 4096 4096 NT_STATUS_OK
ReadX 12981 262144 61440 61440 NT_STATUS_OK
ReadX 12981 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 61440 61440 NT_STATUS_OK
ReadX 12982 61440 4096 4096 NT_STATUS_OK
ReadX 12982 65536 61440 61440 NT_STATUS_OK
ReadX 12982 126976 4096 4096 NT_STATUS_OK
ReadX 12982 131072 61440 61440 NT_STATUS_OK
ReadX 12982 192512 4096 4096 NT_STATUS_OK
ReadX 12982 196608 61440 61440 NT_STATUS_OK
ReadX 12982 258048 4096 4096 NT_STATUS_OK
ReadX 12982 262144 61440 61440 NT_STATUS_OK
ReadX 12982 323584 4096 4096 NT_STATUS_OK
ReadX 12982 327680 61440 61440 NT_STATUS_OK
ReadX 12982 389120 4096 4096 NT_STATUS_OK
ReadX 12982 393216 61440 61440 NT_STATUS_OK
ReadX 12982 454656 4096 4096 NT_STATUS_OK
ReadX 12982 458752 61440 61440 NT_STATUS_OK
ReadX 12982 520192 4096 4096 NT_STATUS_OK
ReadX 12982 524288 61440 61440 NT_STATUS_OK
ReadX 12982 585728 4096 4096 NT_STATUS_OK
ReadX 12982 589824 61440 61440 NT_STATUS_OK
ReadX 12982 651264 4096 4096 NT_STATUS_OK
ReadX 12982 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12983 NT_STATUS_OK
ReadX 12983 0 61440 61440 NT_STATUS_OK
ReadX 12983 61440 4096 4096 NT_STATUS_OK
ReadX 12983 65536 61440 61440 NT_STATUS_OK
ReadX 12983 126976 4096 4096 NT_STATUS_OK
ReadX 12983 131072 61440 61440 NT_STATUS_OK
ReadX 12983 192512 4096 4096 NT_STATUS_OK
ReadX 12983 196608 61440 61440 NT_STATUS_OK
ReadX 12983 258048 4096 4096 NT_STATUS_OK
ReadX 12983 262144 61440 61440 NT_STATUS_OK
ReadX 12983 323584 4096 4096 NT_STATUS_OK
ReadX 12983 327680 61440 61440 NT_STATUS_OK
ReadX 12983 389120 4096 4096 NT_STATUS_OK
ReadX 12983 393216 61440 61440 NT_STATUS_OK
ReadX 12983 454656 4096 4096 NT_STATUS_OK
ReadX 12983 458752 61440 61440 NT_STATUS_OK
ReadX 12983 520192 4096 4096 NT_STATUS_OK
ReadX 12983 524288 61440 61440 NT_STATUS_OK
ReadX 12983 585728 4096 4096 NT_STATUS_OK
ReadX 12983 589824 61440 61440 NT_STATUS_OK
ReadX 12983 651264 4096 4096 NT_STATUS_OK
ReadX 12983 655360 61440 61440 NT_STATUS_OK
ReadX 12983 716800 4096 4096 NT_STATUS_OK
ReadX 12983 720896 61440 61440 NT_STATUS_OK
ReadX 12983 782336 4096 4096 NT_STATUS_OK
ReadX 12983 786432 61440 61440 NT_STATUS_OK
ReadX 12983 847872 4096 4096 NT_STATUS_OK
ReadX 12983 851968 61440 61440 NT_STATUS_OK
ReadX 12983 913408 4096 4096 NT_STATUS_OK
ReadX 12983 917504 61440 61440 NT_STATUS_OK
ReadX 12983 978944 4096 4096 NT_STATUS_OK
ReadX 12983 983040 61440 61440 NT_STATUS_OK
ReadX 12983 1044480 4096 4096 NT_STATUS_OK
ReadX 12983 1048576 61440 61440 NT_STATUS_OK
ReadX 12983 1110016 4096 4096 NT_STATUS_OK
ReadX 12983 1114112 61440 61440 NT_STATUS_OK
ReadX 12983 1175552 4096 4096 NT_STATUS_OK
ReadX 12983 1179648 61440 61440 NT_STATUS_OK
ReadX 12983 1241088 4096 4096 NT_STATUS_OK
ReadX 12983 1245184 61440 61440 NT_STATUS_OK
ReadX 12983 1306624 4096 4096 NT_STATUS_OK
ReadX 12983 1310720 61440 61440 NT_STATUS_OK
ReadX 12983 1372160 4096 4096 NT_STATUS_OK
ReadX 12983 1376256 61440 61440 NT_STATUS_OK
ReadX 12983 1437696 4096 4096 NT_STATUS_OK
ReadX 12983 1441792 61440 61440 NT_STATUS_OK
ReadX 12983 1503232 4096 4096 NT_STATUS_OK
ReadX 12983 1507328 61440 61440 NT_STATUS_OK
ReadX 12983 1568768 4096 4096 NT_STATUS_OK
ReadX 12983 1572864 61440 61440 NT_STATUS_OK
ReadX 12983 1634304 4096 4096 NT_STATUS_OK
ReadX 12983 1638400 61440 61440 NT_STATUS_OK
ReadX 12983 1699840 4096 4096 NT_STATUS_OK
ReadX 12983 1703936 61440 61440 NT_STATUS_OK
ReadX 12983 1765376 4096 4096 NT_STATUS_OK
ReadX 12983 1769472 61440 61440 NT_STATUS_OK
ReadX 12983 1830912 4096 4096 NT_STATUS_OK
ReadX 12983 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12985 NT_STATUS_OK
QUERY_FILE_INFORMATION 12985 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12985 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12985 1005 NT_STATUS_OK
ReadX 12985 2156 24 24 NT_STATUS_OK
ReadX 12985 2139 276 276 NT_STATUS_OK
ReadX 12985 2136 14 14 NT_STATUS_OK
ReadX 12985 2136 7 7 NT_STATUS_OK
ReadX 12985 2138 12 12 NT_STATUS_OK
ReadX 12985 2137 8 8 NT_STATUS_OK
ReadX 12985 2135 15 15 NT_STATUS_OK
ReadX 12985 0 16 16 NT_STATUS_OK
ReadX 12985 16 2048 2048 NT_STATUS_OK
ReadX 12985 2064 2048 2048 NT_STATUS_OK
ReadX 12985 257 2048 2048 NT_STATUS_OK
ReadX 12985 385 2048 2048 NT_STATUS_OK
ReadX 12985 513 2048 2048 NT_STATUS_OK
ReadX 12985 641 2048 2048 NT_STATUS_OK
ReadX 12985 769 2048 2048 NT_STATUS_OK
ReadX 12985 897 2048 2048 NT_STATUS_OK
ReadX 12985 1025 2048 2048 NT_STATUS_OK
ReadX 12985 1153 2048 2048 NT_STATUS_OK
ReadX 12985 1281 2048 2048 NT_STATUS_OK
ReadX 12985 1409 2048 2048 NT_STATUS_OK
ReadX 12985 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12987 NT_STATUS_OK
Close 12987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12981 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Close 12983 NT_STATUS_OK
Close 12975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12990 NT_STATUS_OK
WriteX 12990 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12990 258 NT_STATUS_OK
WriteX 12990 0 10575 10575 NT_STATUS_OK
Flush 12990 NT_STATUS_OK
Close 12990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
Close 12985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12995 NT_STATUS_OK
LockX 12995 2147483538 1 NT_STATUS_OK
UnlockX 12995 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 1005 NT_STATUS_OK
ReadX 12995 0 512 512 NT_STATUS_OK
ReadX 12995 512 512 512 NT_STATUS_OK
ReadX 12995 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 1004 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12996 NT_STATUS_OK
QUERY_FILE_INFORMATION 12996 1005 NT_STATUS_OK
ReadX 12996 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12997 NT_STATUS_OK
LockX 12997 2147483538 1 NT_STATUS_OK
UnlockX 12997 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12997 1005 NT_STATUS_OK
ReadX 12997 0 512 512 NT_STATUS_OK
ReadX 12997 512 512 512 NT_STATUS_OK
ReadX 12997 1024 512 512 NT_STATUS_OK
ReadX 12997 288 20 20 NT_STATUS_OK
ReadX 12997 308 2084 2084 NT_STATUS_OK
ReadX 12997 388 2084 2084 NT_STATUS_OK
ReadX 12997 388 2084 2084 NT_STATUS_OK
ReadX 12984 2157 1386 1386 NT_STATUS_OK
ReadX 12997 2472 399 399 NT_STATUS_OK
ReadX 12997 3072 1536 1536 NT_STATUS_OK
ReadX 12997 544 149 149 NT_STATUS_OK
ReadX 12997 693 485 485 NT_STATUS_OK
Close 12997 NT_STATUS_OK
ReadX 12984 2157 4096 4096 NT_STATUS_OK
ReadX 12984 6253 4096 4096 NT_STATUS_OK
ReadX 12984 10349 4096 4096 NT_STATUS_OK
ReadX 12984 14445 4096 4096 NT_STATUS_OK
ReadX 12984 18541 4096 4096 NT_STATUS_OK
ReadX 12984 22637 256 256 NT_STATUS_OK
ReadX 12984 22893 4096 4096 NT_STATUS_OK
ReadX 12984 26989 4096 4096 NT_STATUS_OK
ReadX 12984 31085 4096 4096 NT_STATUS_OK
ReadX 12984 35181 4096 4096 NT_STATUS_OK
ReadX 12984 39277 4096 4096 NT_STATUS_OK
ReadX 12984 43373 4096 4096 NT_STATUS_OK
ReadX 12984 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12984 2157 1024 1024 NT_STATUS_OK
ReadX 12984 1667 4688 4688 NT_STATUS_OK
ReadX 12984 6355 3516 3516 NT_STATUS_OK
ReadX 12984 9871 16384 16384 NT_STATUS_OK
ReadX 12984 26255 3771 3771 NT_STATUS_OK
ReadX 12984 30026 2048 2048 NT_STATUS_OK
ReadX 12984 32074 1024 1024 NT_STATUS_OK
ReadX 12984 33098 6652 6652 NT_STATUS_OK
ReadX 12984 39750 16384 16384 NT_STATUS_OK
ReadX 12984 56134 10496 10496 NT_STATUS_OK
ReadX 12984 66630 1784 1784 NT_STATUS_OK
ReadX 12984 68414 90 90 NT_STATUS_OK
ReadX 12984 68504 273 273 NT_STATUS_OK
ReadX 12984 68777 1600 1600 NT_STATUS_OK
ReadX 12984 70377 640 640 NT_STATUS_OK
ReadX 12984 71017 1280 1280 NT_STATUS_OK
ReadX 12984 72297 8464 8464 NT_STATUS_OK
ReadX 12984 80761 158 158 NT_STATUS_OK
ReadX 12984 80919 912 912 NT_STATUS_OK
ReadX 12984 81831 1980 1980 NT_STATUS_OK
ReadX 12984 83811 2256 2256 NT_STATUS_OK
ReadX 12984 86067 400 400 NT_STATUS_OK
ReadX 12984 86467 252 252 NT_STATUS_OK
ReadX 12984 86719 42 42 NT_STATUS_OK
ReadX 12984 86761 725 725 NT_STATUS_OK
ReadX 12984 2009 512 512 NT_STATUS_OK
ReadX 12984 3895 9 9 NT_STATUS_OK
ReadX 12984 3781 46 46 NT_STATUS_OK
ReadX 12984 4059 92 92 NT_STATUS_OK
ReadX 12984 3781 92 92 NT_STATUS_OK
ReadX 12984 3986 184 184 NT_STATUS_OK
ReadX 12984 3987 16384 16384 NT_STATUS_OK
ReadX 12984 3902 16384 16384 NT_STATUS_OK
ReadX 12984 3781 10240 10240 NT_STATUS_OK
ReadX 12984 3821 16384 16384 NT_STATUS_OK
ReadX 12984 3891 935 935 NT_STATUS_OK
ReadX 12984 4060 10240 10240 NT_STATUS_OK
ReadX 12984 4059 184 184 NT_STATUS_OK
ReadX 12984 256 184 184 NT_STATUS_OK
ReadX 12984 256 1026 1026 NT_STATUS_OK
ReadX 12984 3901 326 326 NT_STATUS_OK
ReadX 12984 3899 652 652 NT_STATUS_OK
ReadX 12984 256 2 2 NT_STATUS_OK
ReadX 12984 258 4948 4948 NT_STATUS_OK
Close 12984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13002 NT_STATUS_OK
WriteX 13002 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 258 NT_STATUS_OK
WriteX 13002 0 65536 65536 NT_STATUS_OK
WriteX 13002 65536 65536 65536 NT_STATUS_OK
WriteX 13002 131072 65536 65536 NT_STATUS_OK
WriteX 13002 196608 65536 65536 NT_STATUS_OK
WriteX 13002 262144 65536 65536 NT_STATUS_OK
WriteX 13002 327680 65536 65536 NT_STATUS_OK
WriteX 13002 393216 65536 65536 NT_STATUS_OK
WriteX 13002 458752 65536 65536 NT_STATUS_OK
WriteX 13002 524288 65536 65536 NT_STATUS_OK
WriteX 13002 589824 35257 35257 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13007 NT_STATUS_OK
WriteX 13007 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 258 NT_STATUS_OK
WriteX 13007 0 65536 65536 NT_STATUS_OK
WriteX 13007 65536 65536 65536 NT_STATUS_OK
WriteX 13007 131072 65536 65536 NT_STATUS_OK
WriteX 13007 196608 65536 65536 NT_STATUS_OK
WriteX 13007 262144 65536 65536 NT_STATUS_OK
WriteX 13007 327680 65536 65536 NT_STATUS_OK
WriteX 13007 393216 65536 65536 NT_STATUS_OK
WriteX 13007 458752 65536 65536 NT_STATUS_OK
WriteX 13007 524288 65536 65536 NT_STATUS_OK
WriteX 13007 589824 57598 57598 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13009 NT_STATUS_OK
WriteX 13009 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13009 258 NT_STATUS_OK
WriteX 13009 0 12543 12543 NT_STATUS_OK
Flush 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13015 NT_STATUS_OK
QUERY_FILE_INFORMATION 13015 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13015 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13015 1005 NT_STATUS_OK
ReadX 13015 1938 24 24 NT_STATUS_OK
ReadX 13015 1920 276 276 NT_STATUS_OK
ReadX 13015 1918 14 14 NT_STATUS_OK
ReadX 13015 1918 7 7 NT_STATUS_OK
ReadX 13015 1919 12 12 NT_STATUS_OK
ReadX 13015 1919 8 8 NT_STATUS_OK
ReadX 13015 1917 15 15 NT_STATUS_OK
ReadX 13015 0 16 16 NT_STATUS_OK
ReadX 13015 16 2048 2048 NT_STATUS_OK
ReadX 13015 2064 2048 2048 NT_STATUS_OK
ReadX 13015 257 2048 2048 NT_STATUS_OK
ReadX 13015 385 2048 2048 NT_STATUS_OK
ReadX 13015 513 2048 2048 NT_STATUS_OK
ReadX 13015 641 2048 2048 NT_STATUS_OK
ReadX 13015 769 2048 2048 NT_STATUS_OK
ReadX 13015 897 2048 2048 NT_STATUS_OK
ReadX 13015 1025 2048 2048 NT_STATUS_OK
ReadX 13015 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13020 NT_STATUS_OK
WriteX 13020 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13020 258 NT_STATUS_OK
WriteX 13020 0 11588 11588 NT_STATUS_OK
Flush 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13021 NT_STATUS_OK
Close 13021 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
Close 13015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13025 NT_STATUS_OK
WriteX 13025 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13025 258 NT_STATUS_OK
WriteX 13025 0 11615 11615 NT_STATUS_OK
Flush 13025 NT_STATUS_OK
Close 13025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13027 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13031 NT_STATUS_OK
Close 13031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13034 NT_STATUS_OK
WriteX 13034 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13034 258 NT_STATUS_OK
WriteX 13034 0 65536 65536 NT_STATUS_OK
WriteX 13034 65536 16050 16050 NT_STATUS_OK
Close 13034 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13014 1939 64 64 NT_STATUS_OK
ReadX 13014 128 248 248 NT_STATUS_OK
ReadX 13014 128 568 568 NT_STATUS_OK
ReadX 13014 3872 1536 1536 NT_STATUS_OK
ReadX 13014 3456 2560 2560 NT_STATUS_OK
ReadX 13014 3136 512 512 NT_STATUS_OK
ReadX 13014 2880 4096 4096 NT_STATUS_OK
ReadX 13014 3264 3072 3072 NT_STATUS_OK
ReadX 13014 320 4096 4096 NT_STATUS_OK
ReadX 13014 1024 4096 4096 NT_STATUS_OK
ReadX 13014 3616 4096 4096 NT_STATUS_OK
ReadX 13014 1939 64 64 NT_STATUS_OK
ReadX 13014 128 248 248 NT_STATUS_OK
ReadX 13014 128 608 608 NT_STATUS_OK
ReadX 13014 2858 1024 1024 NT_STATUS_OK
ReadX 13014 2810 4096 4096 NT_STATUS_OK
ReadX 13014 2826 4096 4096 NT_STATUS_OK
ReadX 13014 2580 2048 2048 NT_STATUS_OK
ReadX 13014 2800 2560 2560 NT_STATUS_OK
ReadX 13014 2100 4096 4096 NT_STATUS_OK
ReadX 13014 2084 4096 4096 NT_STATUS_OK
ReadX 13014 868 4096 4096 NT_STATUS_OK
ReadX 13014 2324 4096 4096 NT_STATUS_OK
ReadX 13014 884 4096 4096 NT_STATUS_OK
ReadX 13014 2604 1024 1024 NT_STATUS_OK
ReadX 13014 580 4096 4096 NT_STATUS_OK
ReadX 13014 596 4096 4096 NT_STATUS_OK
ReadX 13014 2752 4096 4096 NT_STATUS_OK
ReadX 13014 2842 1024 1024 NT_STATUS_OK
ReadX 13014 660 4096 4096 NT_STATUS_OK
ReadX 13014 2720 4096 4096 NT_STATUS_OK
ReadX 13014 2736 4096 4096 NT_STATUS_OK
ReadX 13014 628 4096 4096 NT_STATUS_OK
ReadX 13014 2704 4096 4096 NT_STATUS_OK
ReadX 13014 1556 4096 4096 NT_STATUS_OK
ReadX 13014 576 4096 4096 NT_STATUS_OK
ReadX 13014 3168 1536 1536 NT_STATUS_OK
ReadX 13014 832 4096 4096 NT_STATUS_OK
ReadX 13014 1088 4096 4096 NT_STATUS_OK
ReadX 13014 1344 4096 4096 NT_STATUS_OK
ReadX 13014 1600 4096 4096 NT_STATUS_OK
ReadX 13014 1856 4096 4096 NT_STATUS_OK
ReadX 13014 2112 4096 4096 NT_STATUS_OK
ReadX 13014 1892 4096 4096 NT_STATUS_OK
ReadX 13014 820 4096 4096 NT_STATUS_OK
ReadX 13014 788 4096 4096 NT_STATUS_OK
ReadX 13014 1604 4096 4096 NT_STATUS_OK
ReadX 13014 3648 4096 4096 NT_STATUS_OK
ReadX 13014 2608 4096 4096 NT_STATUS_OK
ReadX 13014 548 4096 4096 NT_STATUS_OK
ReadX 13014 740 4096 4096 NT_STATUS_OK
ReadX 13014 1344 4096 4096 NT_STATUS_OK
ReadX 13014 3392 4096 4096 NT_STATUS_OK
ReadX 13014 3904 4096 4096 NT_STATUS_OK
ReadX 13014 644 4096 4096 NT_STATUS_OK
ReadX 13014 676 4096 4096 NT_STATUS_OK
ReadX 13014 2688 4096 4096 NT_STATUS_OK
ReadX 13014 320 4096 4096 NT_STATUS_OK
ReadX 13014 900 4096 4096 NT_STATUS_OK
ReadX 13014 1908 4096 4096 NT_STATUS_OK
ReadX 13014 852 4096 4096 NT_STATUS_OK
ReadX 13014 724 4096 4096 NT_STATUS_OK
ReadX 13014 2292 4096 4096 NT_STATUS_OK
ReadX 13014 612 4096 4096 NT_STATUS_OK
ReadX 13014 388 4096 4096 NT_STATUS_OK
ReadX 13014 2368 4096 4096 NT_STATUS_OK
ReadX 13014 2624 4096 4096 NT_STATUS_OK
ReadX 13014 500 4096 4096 NT_STATUS_OK
ReadX 13014 356 4096 4096 NT_STATUS_OK
ReadX 13014 1024 4096 4096 NT_STATUS_OK
ReadX 13014 576 4096 4096 NT_STATUS_OK
ReadX 13014 340 4096 4096 NT_STATUS_OK
ReadX 13014 420 4096 4096 NT_STATUS_OK
ReadX 13014 1600 4096 4096 NT_STATUS_OK
ReadX 13014 404 4096 4096 NT_STATUS_OK
ReadX 13014 1428 4096 4096 NT_STATUS_OK
ReadX 13014 2656 4096 4096 NT_STATUS_OK
ReadX 13014 2624 4096 4096 NT_STATUS_OK
ReadX 13014 452 4096 4096 NT_STATUS_OK
ReadX 13014 692 4096 4096 NT_STATUS_OK
ReadX 13014 564 4096 4096 NT_STATUS_OK
ReadX 13014 372 4096 4096 NT_STATUS_OK
ReadX 13014 468 4096 4096 NT_STATUS_OK
ReadX 13014 484 4096 4096 NT_STATUS_OK
ReadX 13014 1088 4096 4096 NT_STATUS_OK
ReadX 13014 1924 4096 4096 NT_STATUS_OK
ReadX 13014 2768 4096 4096 NT_STATUS_OK
ReadX 13014 832 4096 4096 NT_STATUS_OK
ReadX 13014 836 4096 4096 NT_STATUS_OK
ReadX 13014 1856 4096 4096 NT_STATUS_OK
ReadX 13014 2640 4096 4096 NT_STATUS_OK
ReadX 13014 436 4096 4096 NT_STATUS_OK
ReadX 13014 1828 4096 4096 NT_STATUS_OK
ReadX 13014 804 4096 4096 NT_STATUS_OK
ReadX 13014 1860 4096 4096 NT_STATUS_OK
ReadX 13014 1812 4096 4096 NT_STATUS_OK
ReadX 13014 756 4096 4096 NT_STATUS_OK
ReadX 13014 1636 4096 4096 NT_STATUS_OK
ReadX 13014 772 4096 4096 NT_STATUS_OK
ReadX 13014 2036 4096 4096 NT_STATUS_OK
ReadX 13014 1220 4096 4096 NT_STATUS_OK
ReadX 13014 1652 4096 4096 NT_STATUS_OK
ReadX 13014 2588 4096 4096 NT_STATUS_OK
ReadX 13014 916 4096 4096 NT_STATUS_OK
ReadX 13014 260 4096 4096 NT_STATUS_OK
ReadX 13014 932 4096 4096 NT_STATUS_OK
ReadX 13014 2624 4096 4096 NT_STATUS_OK
ReadX 13014 308 4096 4096 NT_STATUS_OK
ReadX 13014 292 4096 4096 NT_STATUS_OK
ReadX 13014 1140 4096 4096 NT_STATUS_OK
ReadX 13014 276 4096 4096 NT_STATUS_OK
ReadX 13014 2020 4096 4096 NT_STATUS_OK
ReadX 13014 2880 4096 4096 NT_STATUS_OK
ReadX 13014 516 4096 4096 NT_STATUS_OK
ReadX 13014 1844 4096 4096 NT_STATUS_OK
ReadX 13014 1124 4096 4096 NT_STATUS_OK
ReadX 13014 3136 4096 4096 NT_STATUS_OK
ReadX 13014 324 4096 4096 NT_STATUS_OK
ReadX 13014 1156 4096 4096 NT_STATUS_OK
ReadX 13014 1172 4096 4096 NT_STATUS_OK
ReadX 13014 2112 4096 4096 NT_STATUS_OK
ReadX 13014 2368 4096 4096 NT_STATUS_OK
ReadX 13014 964 4096 4096 NT_STATUS_OK
ReadX 13014 980 4096 4096 NT_STATUS_OK
ReadX 13014 1012 4096 4096 NT_STATUS_OK
ReadX 13014 532 4096 4096 NT_STATUS_OK
ReadX 13014 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13014 1620 4096 4096 NT_STATUS_OK
ReadX 13014 1604 4096 4096 NT_STATUS_OK
ReadX 13014 2116 4096 4096 NT_STATUS_OK
ReadX 13014 2132 4096 4096 NT_STATUS_OK
ReadX 13014 2148 4096 4096 NT_STATUS_OK
ReadX 13014 2276 4096 4096 NT_STATUS_OK
ReadX 13014 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13036 NT_STATUS_OK
Close 13036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13039 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 1004 NT_STATUS_OK
Close 12994 NT_STATUS_OK
WriteX 13039 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13039 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12996 1004 NT_STATUS_OK
Close 12996 NT_STATUS_OK
WriteX 13039 0 65536 65536 NT_STATUS_OK
WriteX 13039 65536 64850 64850 NT_STATUS_OK
Close 13039 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13041 NT_STATUS_OK
WriteX 13041 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 258 NT_STATUS_OK
ReadX 13014 2068 4096 4096 NT_STATUS_OK
ReadX 13014 1588 4096 4096 NT_STATUS_OK
ReadX 13014 1572 4096 4096 NT_STATUS_OK
WriteX 13041 0 18630 18630 NT_STATUS_OK
Flush 13041 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13045 NT_STATUS_OK
ReadX 13045 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13014 612 4096 4096 NT_STATUS_OK
ReadX 13014 564 4096 4096 NT_STATUS_OK
ReadX 13014 1876 4096 4096 NT_STATUS_OK
ReadX 13014 628 4096 4096 NT_STATUS_OK
ReadX 13014 740 4096 4096 NT_STATUS_OK
ReadX 13014 724 4096 4096 NT_STATUS_OK
ReadX 13014 644 4096 4096 NT_STATUS_OK
ReadX 13014 2324 4096 4096 NT_STATUS_OK
ReadX 13014 660 4096 4096 NT_STATUS_OK
ReadX 13014 852 4096 4096 NT_STATUS_OK
ReadX 13014 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13014 2368 4096 4096 NT_STATUS_OK
ReadX 13014 1024 4096 4096 NT_STATUS_OK
ReadX 13014 320 4096 4096 NT_STATUS_OK
ReadX 13014 580 4096 4096 NT_STATUS_OK
ReadX 13014 3136 512 512 NT_STATUS_OK
ReadX 13014 2880 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 61440 4096 4096 NT_STATUS_OK
ReadX 13046 126976 4096 4096 NT_STATUS_OK
WriteX 13046 0 65536 65536 NT_STATUS_OK
WriteX 13046 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 61440 4096 4096 NT_STATUS_OK
ReadX 13047 126976 4096 4096 NT_STATUS_OK
ReadX 13047 192512 4096 4096 NT_STATUS_OK
ReadX 13047 258048 4096 4096 NT_STATUS_OK
WriteX 13047 0 65536 65536 NT_STATUS_OK
WriteX 13047 65536 65536 65536 NT_STATUS_OK
WriteX 13047 131072 65536 65536 NT_STATUS_OK
WriteX 13047 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 61440 4096 4096 NT_STATUS_OK
ReadX 13048 126976 4096 4096 NT_STATUS_OK
ReadX 13048 192512 4096 4096 NT_STATUS_OK
ReadX 13048 258048 4096 4096 NT_STATUS_OK
ReadX 13048 323584 4096 4096 NT_STATUS_OK
ReadX 13048 389120 4096 4096 NT_STATUS_OK
ReadX 13048 454656 4096 4096 NT_STATUS_OK
ReadX 13048 520192 4096 4096 NT_STATUS_OK
WriteX 13048 0 65536 65536 NT_STATUS_OK
WriteX 13048 65536 65536 65536 NT_STATUS_OK
WriteX 13048 131072 65536 65536 NT_STATUS_OK
WriteX 13048 196608 65536 65536 NT_STATUS_OK
WriteX 13048 262144 65536 65536 NT_STATUS_OK
WriteX 13048 327680 65536 65536 NT_STATUS_OK
WriteX 13048 393216 65536 65536 NT_STATUS_OK
WriteX 13048 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13051 NT_STATUS_OK
WriteX 13051 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13049 0 8192 8192 NT_STATUS_OK
Flush 13049 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13049 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13049 0 8192 8192 NT_STATUS_OK
Flush 13049 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13049 0 8192 8192 NT_STATUS_OK
Flush 13049 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13049 0 8192 8192 NT_STATUS_OK
Flush 13049 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13045 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13056 NT_STATUS_OK
WriteX 13056 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13056 258 NT_STATUS_OK
WriteX 13056 0 62591 62591 NT_STATUS_OK
Close 13056 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13058 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13061 NT_STATUS_OK
WriteX 13061 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13061 258 NT_STATUS_OK
WriteX 13061 0 10845 10845 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13063 NT_STATUS_OK
Close 13063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13066 NT_STATUS_OK
WriteX 13066 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13066 258 NT_STATUS_OK
WriteX 13066 0 30118 30118 NT_STATUS_OK
Close 13066 NT_STATUS_OK
WriteX 13049 0 4096 4096 NT_STATUS_OK
WriteX 13051 0 64 64 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 61440 61440 NT_STATUS_OK
ReadX 13068 61440 4096 4096 NT_STATUS_OK
ReadX 13068 65536 61440 61440 NT_STATUS_OK
ReadX 13068 126976 4096 4096 NT_STATUS_OK
ReadX 13068 131072 61440 61440 NT_STATUS_OK
ReadX 13068 192512 4096 4096 NT_STATUS_OK
ReadX 13068 196608 61440 61440 NT_STATUS_OK
ReadX 13068 258048 4096 4096 NT_STATUS_OK
ReadX 13068 262144 61440 61440 NT_STATUS_OK
ReadX 13068 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 61440 61440 NT_STATUS_OK
ReadX 13069 61440 4096 4096 NT_STATUS_OK
ReadX 13069 65536 61440 61440 NT_STATUS_OK
ReadX 13069 126976 4096 4096 NT_STATUS_OK
ReadX 13069 131072 61440 61440 NT_STATUS_OK
ReadX 13069 192512 4096 4096 NT_STATUS_OK
ReadX 13069 196608 61440 61440 NT_STATUS_OK
ReadX 13069 258048 4096 4096 NT_STATUS_OK
ReadX 13069 262144 61440 61440 NT_STATUS_OK
ReadX 13069 323584 4096 4096 NT_STATUS_OK
ReadX 13069 327680 61440 61440 NT_STATUS_OK
ReadX 13069 389120 4096 4096 NT_STATUS_OK
ReadX 13069 393216 61440 61440 NT_STATUS_OK
ReadX 13069 454656 4096 4096 NT_STATUS_OK
ReadX 13069 458752 61440 61440 NT_STATUS_OK
ReadX 13069 520192 4096 4096 NT_STATUS_OK
ReadX 13069 524288 61440 61440 NT_STATUS_OK
ReadX 13069 585728 4096 4096 NT_STATUS_OK
ReadX 13069 589824 61440 61440 NT_STATUS_OK
ReadX 13069 651264 4096 4096 NT_STATUS_OK
ReadX 13069 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 61440 61440 NT_STATUS_OK
ReadX 13070 61440 4096 4096 NT_STATUS_OK
ReadX 13070 65536 61440 61440 NT_STATUS_OK
ReadX 13070 126976 4096 4096 NT_STATUS_OK
ReadX 13070 131072 61440 61440 NT_STATUS_OK
ReadX 13070 192512 4096 4096 NT_STATUS_OK
ReadX 13070 196608 61440 61440 NT_STATUS_OK
ReadX 13070 258048 4096 4096 NT_STATUS_OK
ReadX 13070 262144 61440 61440 NT_STATUS_OK
ReadX 13070 323584 4096 4096 NT_STATUS_OK
ReadX 13070 327680 61440 61440 NT_STATUS_OK
ReadX 13070 389120 4096 4096 NT_STATUS_OK
ReadX 13070 393216 61440 61440 NT_STATUS_OK
ReadX 13070 454656 4096 4096 NT_STATUS_OK
ReadX 13070 458752 61440 61440 NT_STATUS_OK
ReadX 13070 520192 4096 4096 NT_STATUS_OK
ReadX 13070 524288 61440 61440 NT_STATUS_OK
ReadX 13070 585728 4096 4096 NT_STATUS_OK
ReadX 13070 589824 61440 61440 NT_STATUS_OK
ReadX 13070 651264 4096 4096 NT_STATUS_OK
ReadX 13070 655360 61440 61440 NT_STATUS_OK
ReadX 13070 716800 4096 4096 NT_STATUS_OK
ReadX 13070 720896 61440 61440 NT_STATUS_OK
ReadX 13070 782336 4096 4096 NT_STATUS_OK
ReadX 13070 786432 61440 61440 NT_STATUS_OK
ReadX 13070 847872 4096 4096 NT_STATUS_OK
ReadX 13070 851968 61440 61440 NT_STATUS_OK
ReadX 13070 913408 4096 4096 NT_STATUS_OK
ReadX 13070 917504 61440 61440 NT_STATUS_OK
ReadX 13070 978944 4096 4096 NT_STATUS_OK
ReadX 13070 983040 61440 61440 NT_STATUS_OK
ReadX 13070 1044480 4096 4096 NT_STATUS_OK
ReadX 13070 1048576 61440 61440 NT_STATUS_OK
ReadX 13070 1110016 4096 4096 NT_STATUS_OK
ReadX 13070 1114112 61440 61440 NT_STATUS_OK
ReadX 13070 1175552 4096 4096 NT_STATUS_OK
ReadX 13070 1179648 61440 61440 NT_STATUS_OK
ReadX 13070 1241088 4096 4096 NT_STATUS_OK
ReadX 13070 1245184 61440 61440 NT_STATUS_OK
ReadX 13070 1306624 4096 4096 NT_STATUS_OK
ReadX 13070 1310720 61440 61440 NT_STATUS_OK
ReadX 13070 1372160 4096 4096 NT_STATUS_OK
ReadX 13070 1376256 61440 61440 NT_STATUS_OK
ReadX 13070 1437696 4096 4096 NT_STATUS_OK
ReadX 13070 1441792 61440 61440 NT_STATUS_OK
ReadX 13070 1503232 4096 4096 NT_STATUS_OK
ReadX 13070 1507328 61440 61440 NT_STATUS_OK
ReadX 13070 1568768 4096 4096 NT_STATUS_OK
ReadX 13070 1572864 61440 61440 NT_STATUS_OK
ReadX 13070 1634304 4096 4096 NT_STATUS_OK
ReadX 13070 1638400 61440 61440 NT_STATUS_OK
ReadX 13070 1699840 4096 4096 NT_STATUS_OK
ReadX 13070 1703936 61440 61440 NT_STATUS_OK
ReadX 13070 1765376 4096 4096 NT_STATUS_OK
ReadX 13070 1769472 61440 61440 NT_STATUS_OK
ReadX 13070 1830912 4096 4096 NT_STATUS_OK
ReadX 13070 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13068 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13073 NT_STATUS_OK
ReadX 13073 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
ReadX 13075 4096 4096 4096 NT_STATUS_OK
ReadX 13075 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13073 NT_STATUS_OK
Close 13074 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13079 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 8192 8192 NT_STATUS_OK
ReadX 13083 8192 8192 8192 NT_STATUS_OK
ReadX 13083 16384 8192 8192 NT_STATUS_OK
ReadX 13083 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13088 NT_STATUS_OK
WriteX 13088 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13088 258 NT_STATUS_OK
WriteX 13088 0 10438 10438 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13089 NT_STATUS_OK
Close 13089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13091 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13093 NT_STATUS_OK
Close 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13094 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13096 NT_STATUS_OK
Close 13096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13097 NT_STATUS_OK
ReadX 13097 0 4096 4096 NT_STATUS_OK
ReadX 13097 4096 4096 4096 NT_STATUS_OK
ReadX 13097 8192 4096 4096 NT_STATUS_OK
ReadX 13097 12288 8192 8192 NT_STATUS_OK
ReadX 13097 20480 8192 8192 NT_STATUS_OK
ReadX 13097 28672 8192 8192 NT_STATUS_OK
ReadX 13097 36864 8192 8192 NT_STATUS_OK
ReadX 13097 45056 8192 8192 NT_STATUS_OK
ReadX 13097 53248 8192 8192 NT_STATUS_OK
ReadX 13097 61440 8192 8192 NT_STATUS_OK
ReadX 13097 69632 8192 8192 NT_STATUS_OK
ReadX 13097 77824 8192 8192 NT_STATUS_OK
ReadX 13097 86016 8192 8192 NT_STATUS_OK
ReadX 13097 94208 8192 8192 NT_STATUS_OK
ReadX 13097 102400 8192 8192 NT_STATUS_OK
ReadX 13097 110592 8192 8192 NT_STATUS_OK
ReadX 13097 118784 8192 8192 NT_STATUS_OK
ReadX 13097 126976 8192 8192 NT_STATUS_OK
ReadX 13097 135168 8192 8192 NT_STATUS_OK
ReadX 13097 143360 8192 8192 NT_STATUS_OK
ReadX 13097 151552 8192 8192 NT_STATUS_OK
ReadX 13097 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13097 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13102 NT_STATUS_OK
WriteX 13102 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13102 258 NT_STATUS_OK
WriteX 13102 0 28489 28489 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13105 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13108 NT_STATUS_OK
ReadX 13108 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 8192 8192 NT_STATUS_OK
ReadX 13109 8192 8192 8192 NT_STATUS_OK
ReadX 13109 16384 8192 8192 NT_STATUS_OK
ReadX 13109 24576 8192 8192 NT_STATUS_OK
ReadX 13109 32768 16384 16384 NT_STATUS_OK
ReadX 13109 49152 8192 8192 NT_STATUS_OK
ReadX 13109 57344 8192 8192 NT_STATUS_OK
ReadX 13109 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13114 NT_STATUS_OK
WriteX 13114 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 258 NT_STATUS_OK
WriteX 13114 0 29253 29253 NT_STATUS_OK
Close 13114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13115 NT_STATUS_OK
Close 13115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13118 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13121 NT_STATUS_OK
WriteX 13121 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 258 NT_STATUS_OK
WriteX 13121 0 30183 30183 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13122 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13124 NT_STATUS_OK
WriteX 13124 0 510 510 NT_STATUS_OK
WriteX 13124 510 512 512 NT_STATUS_OK
WriteX 13124 1022 510 510 NT_STATUS_OK
WriteX 13124 1532 510 510 NT_STATUS_OK
WriteX 13124 2042 168 168 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
WriteX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 61440 4096 4096 NT_STATUS_OK
ReadX 13128 126976 4096 4096 NT_STATUS_OK
WriteX 13128 0 65536 65536 NT_STATUS_OK
WriteX 13128 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 61440 4096 4096 NT_STATUS_OK
ReadX 13129 126976 4096 4096 NT_STATUS_OK
ReadX 13129 192512 4096 4096 NT_STATUS_OK
ReadX 13129 258048 4096 4096 NT_STATUS_OK
WriteX 13129 0 65536 65536 NT_STATUS_OK
WriteX 13129 65536 65536 65536 NT_STATUS_OK
WriteX 13129 131072 65536 65536 NT_STATUS_OK
WriteX 13129 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 61440 4096 4096 NT_STATUS_OK
ReadX 13130 126976 4096 4096 NT_STATUS_OK
ReadX 13130 192512 4096 4096 NT_STATUS_OK
ReadX 13130 258048 4096 4096 NT_STATUS_OK
ReadX 13130 323584 4096 4096 NT_STATUS_OK
ReadX 13130 389120 4096 4096 NT_STATUS_OK
ReadX 13130 454656 4096 4096 NT_STATUS_OK
ReadX 13130 520192 4096 4096 NT_STATUS_OK
WriteX 13130 0 65536 65536 NT_STATUS_OK
WriteX 13130 65536 65536 65536 NT_STATUS_OK
WriteX 13130 131072 65536 65536 NT_STATUS_OK
WriteX 13130 196608 65536 65536 NT_STATUS_OK
WriteX 13130 262144 65536 65536 NT_STATUS_OK
WriteX 13130 327680 65536 65536 NT_STATUS_OK
WriteX 13130 393216 65536 65536 NT_STATUS_OK
WriteX 13130 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13131 NT_STATUS_OK
Close 13131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Close 13129 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13133 NT_STATUS_OK
Close 13133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13160 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13175 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13180 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13185 NT_STATUS_OK
Close 13185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13190 NT_STATUS_OK
Close 13190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13199 NT_STATUS_OK
WriteX 13199 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13199 0 65536 65536 NT_STATUS_OK
WriteX 13199 65536 65536 65536 NT_STATUS_OK
WriteX 13199 131072 65536 65536 NT_STATUS_OK
WriteX 13199 196608 65536 65536 NT_STATUS_OK
WriteX 13199 262144 26634 26634 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
Close 13206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
ReadX 13207 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13208 NT_STATUS_OK
Close 13208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13212 NT_STATUS_OK
Close 13212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13215 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13217 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13224 NT_STATUS_OK
Close 13224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13226 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13235 NT_STATUS_OK
Close 13235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13240 NT_STATUS_OK
Close 13240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13245 NT_STATUS_OK
Close 13245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13250 NT_STATUS_OK
Close 13250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13255 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13259 NT_STATUS_OK
Close 13259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13264 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13284 NT_STATUS_OK
Close 13284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13285 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13298 NT_STATUS_OK
Close 13298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13300 NT_STATUS_OK
ReadX 13300 0 4096 4096 NT_STATUS_OK
Close 13300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13331 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13331 0 4096 4096 NT_STATUS_OK
Close 13331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13332 NT_STATUS_OK
ReadX 13332 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 0 4096 4096 NT_STATUS_OK
ReadX 13333 4096 4096 4096 NT_STATUS_OK
ReadX 13333 8192 4096 4096 NT_STATUS_OK
ReadX 13333 12288 4096 4096 NT_STATUS_OK
ReadX 13333 16384 4096 4096 NT_STATUS_OK
ReadX 13333 20480 4096 4096 NT_STATUS_OK
ReadX 13333 24576 4096 4096 NT_STATUS_OK
ReadX 13333 28672 4096 4096 NT_STATUS_OK
ReadX 13333 32768 4096 4096 NT_STATUS_OK
ReadX 13333 36864 4096 4096 NT_STATUS_OK
ReadX 13333 40960 4096 4096 NT_STATUS_OK
ReadX 13333 45056 4096 4096 NT_STATUS_OK
ReadX 13333 49152 4096 4096 NT_STATUS_OK
ReadX 13333 53248 4096 4096 NT_STATUS_OK
ReadX 13333 57344 4096 4096 NT_STATUS_OK
ReadX 13333 61440 4096 4096 NT_STATUS_OK
ReadX 13333 65536 4096 4096 NT_STATUS_OK
ReadX 13333 69632 4096 4096 NT_STATUS_OK
ReadX 13333 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13333 1004 NT_STATUS_OK
WriteX 13333 0 4096 4096 NT_STATUS_OK
Close 13333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13334 NT_STATUS_OK
SET_FILE_INFORMATION 13334 1004 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13339 NT_STATUS_OK
WriteX 13339 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13339 258 NT_STATUS_OK
WriteX 13339 0 65536 65536 NT_STATUS_OK
WriteX 13339 65536 19979 19979 NT_STATUS_OK
Close 13339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 0 4096 4096 NT_STATUS_OK
WriteX 13340 0 4096 4096 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
WriteX 13340 0 4096 4096 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
QUERY_FILE_INFORMATION 13340 1004 NT_STATUS_OK
WriteX 13340 0 4096 4096 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
WriteX 13340 0 4096 4096 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
WriteX 13340 0 4096 4096 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
SET_FILE_INFORMATION 13340 1004 NT_STATUS_OK
WriteX 13340 0 4096 4096 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
Close 13344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13345 1004 NT_STATUS_OK
WriteX 13345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13348 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13351 NT_STATUS_OK
WriteX 13351 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13351 258 NT_STATUS_OK
WriteX 13351 0 65536 65536 NT_STATUS_OK
WriteX 13351 65536 17654 17654 NT_STATUS_OK
Close 13351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
Close 13352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13353 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
Close 13353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13355 NT_STATUS_OK
Close 13355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
ReadX 13357 4096 4096 4096 NT_STATUS_OK
ReadX 13357 8192 4096 4096 NT_STATUS_OK
ReadX 13357 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13357 16384 4096 4096 NT_STATUS_OK
ReadX 13357 20480 4096 4096 NT_STATUS_OK
ReadX 13357 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
Close 13358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
Close 13359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13360 1004 NT_STATUS_OK
WriteX 13360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13361 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13366 NT_STATUS_OK
WriteX 13366 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13366 258 NT_STATUS_OK
WriteX 13366 0 65536 65536 NT_STATUS_OK
WriteX 13366 65536 19490 19490 NT_STATUS_OK
Close 13366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
WriteX 13367 0 4096 4096 NT_STATUS_OK
Flush 13367 NT_STATUS_OK
WriteX 13367 0 4096 4096 NT_STATUS_OK
Flush 13367 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 1004 NT_STATUS_OK
WriteX 13367 0 4096 4096 NT_STATUS_OK
Flush 13367 NT_STATUS_OK
WriteX 13367 0 4096 4096 NT_STATUS_OK
Flush 13367 NT_STATUS_OK
WriteX 13367 0 4096 4096 NT_STATUS_OK
Flush 13367 NT_STATUS_OK
SET_FILE_INFORMATION 13367 1004 NT_STATUS_OK
WriteX 13367 0 4096 4096 NT_STATUS_OK
Flush 13367 NT_STATUS_OK
Close 13367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13368 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13370 NT_STATUS_OK
Close 13370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13372 0 4096 4096 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 4096 4096 NT_STATUS_OK
ReadX 13374 4096 4096 4096 NT_STATUS_OK
ReadX 13374 8192 4096 4096 NT_STATUS_OK
ReadX 13374 12288 4096 4096 NT_STATUS_OK
ReadX 13374 16384 4096 4096 NT_STATUS_OK
ReadX 13374 20480 4096 4096 NT_STATUS_OK
ReadX 13374 24576 4096 4096 NT_STATUS_OK
ReadX 13374 28672 4096 4096 NT_STATUS_OK
ReadX 13374 32768 4096 4096 NT_STATUS_OK
ReadX 13374 36864 4096 4096 NT_STATUS_OK
ReadX 13374 40960 4096 4096 NT_STATUS_OK
ReadX 13374 45056 4096 4096 NT_STATUS_OK
ReadX 13374 49152 4096 4096 NT_STATUS_OK
ReadX 13374 53248 4096 4096 NT_STATUS_OK
ReadX 13374 57344 4096 4096 NT_STATUS_OK
ReadX 13374 61440 4096 4096 NT_STATUS_OK
ReadX 13374 65536 4096 4096 NT_STATUS_OK
ReadX 13374 69632 4096 4096 NT_STATUS_OK
ReadX 13374 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13374 1004 NT_STATUS_OK
WriteX 13374 0 4096 4096 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13375 NT_STATUS_OK
SET_FILE_INFORMATION 13375 1004 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13376 NT_STATUS_OK
ReadX 13376 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13377 NT_STATUS_OK
Close 13377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13380 NT_STATUS_OK
WriteX 13380 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13380 258 NT_STATUS_OK
WriteX 13380 0 65536 65536 NT_STATUS_OK
WriteX 13380 65536 8866 8866 NT_STATUS_OK
Close 13380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
Flush 13381 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
Flush 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
Close 13383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
Close 13384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13385 1004 NT_STATUS_OK
WriteX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13386 NT_STATUS_OK
Close 13386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13388 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13391 NT_STATUS_OK
WriteX 13391 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13391 258 NT_STATUS_OK
WriteX 13391 0 65536 65536 NT_STATUS_OK
WriteX 13391 65536 9298 9298 NT_STATUS_OK
Close 13391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
WriteX 13392 0 4096 4096 NT_STATUS_OK
Flush 13392 NT_STATUS_OK
SET_FILE_INFORMATION 13392 1004 NT_STATUS_OK
WriteX 13392 0 4096 4096 NT_STATUS_OK
Flush 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13393 NT_STATUS_OK
SET_FILE_INFORMATION 13393 1004 NT_STATUS_OK
Close 13393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13398 0 4096 4096 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13399 4096 4096 4096 NT_STATUS_OK
ReadX 13399 8192 4096 4096 NT_STATUS_OK
ReadX 13399 12288 4096 4096 NT_STATUS_OK
ReadX 13399 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
Close 13401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13402 1004 NT_STATUS_OK
WriteX 13402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13399 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13405 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13408 NT_STATUS_OK
WriteX 13408 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 258 NT_STATUS_OK
WriteX 13408 0 65536 65536 NT_STATUS_OK
WriteX 13408 65536 11540 11540 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
SET_FILE_INFORMATION 13409 1004 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13410 NT_STATUS_OK
SET_FILE_INFORMATION 13410 1004 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 61440 4096 4096 NT_STATUS_OK
ReadX 13414 126976 4096 4096 NT_STATUS_OK
WriteX 13414 0 65536 65536 NT_STATUS_OK
WriteX 13414 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 61440 4096 4096 NT_STATUS_OK
ReadX 13415 126976 4096 4096 NT_STATUS_OK
ReadX 13415 192512 4096 4096 NT_STATUS_OK
ReadX 13415 258048 4096 4096 NT_STATUS_OK
WriteX 13415 0 65536 65536 NT_STATUS_OK
WriteX 13415 65536 65536 65536 NT_STATUS_OK
WriteX 13415 131072 65536 65536 NT_STATUS_OK
WriteX 13415 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 61440 4096 4096 NT_STATUS_OK
ReadX 13416 126976 4096 4096 NT_STATUS_OK
ReadX 13416 192512 4096 4096 NT_STATUS_OK
ReadX 13416 258048 4096 4096 NT_STATUS_OK
ReadX 13416 323584 4096 4096 NT_STATUS_OK
ReadX 13416 389120 4096 4096 NT_STATUS_OK
ReadX 13416 454656 4096 4096 NT_STATUS_OK
ReadX 13416 520192 4096 4096 NT_STATUS_OK
WriteX 13416 0 65536 65536 NT_STATUS_OK
WriteX 13416 65536 65536 65536 NT_STATUS_OK
WriteX 13416 131072 65536 65536 NT_STATUS_OK
WriteX 13416 196608 65536 65536 NT_STATUS_OK
WriteX 13416 262144 65536 65536 NT_STATUS_OK
WriteX 13416 327680 65536 65536 NT_STATUS_OK
WriteX 13416 393216 65536 65536 NT_STATUS_OK
WriteX 13416 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
ReadX 13417 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13418 NT_STATUS_OK
WriteX 13418 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13418 258 NT_STATUS_OK
WriteX 13418 0 53 53 NT_STATUS_OK
Close 13418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13417 8192 4096 4096 NT_STATUS_OK
ReadX 13417 12288 4096 4096 NT_STATUS_OK
WriteX 13421 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
ReadX 13417 16384 4096 4096 NT_STATUS_OK
ReadX 13417 20480 4096 4096 NT_STATUS_OK
WriteX 13421 0 15360 15360 NT_STATUS_OK
Close 13421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13422 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13422 1004 NT_STATUS_OK
WriteX 13422 0 4096 4096 NT_STATUS_OK
Close 13422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13425 4096 4096 4096 NT_STATUS_OK
ReadX 13425 8192 4096 4096 NT_STATUS_OK
ReadX 13425 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 4096 4096 NT_STATUS_OK
ReadX 13428 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
ReadX 13429 4096 4096 4096 NT_STATUS_OK
ReadX 13429 8192 4096 4096 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 15360 15360 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13432 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13435 NT_STATUS_OK
SET_FILE_INFORMATION 13435 1004 NT_STATUS_OK
Close 13435 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
ReadX 13438 4096 4096 4096 NT_STATUS_OK
ReadX 13438 8192 4096 4096 NT_STATUS_OK
ReadX 13438 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13438 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13438 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13440 NT_STATUS_OK
WriteX 13440 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13440 258 NT_STATUS_OK
WriteX 13440 0 53 53 NT_STATUS_OK
Close 13440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13441 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13439 4096 4096 4096 NT_STATUS_OK
ReadX 13439 8192 4096 4096 NT_STATUS_OK
ReadX 13439 12288 4096 4096 NT_STATUS_OK
WriteX 13443 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13443 258 NT_STATUS_OK
WriteX 13443 0 12006 12006 NT_STATUS_OK
Close 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13444 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13444 1004 NT_STATUS_OK
WriteX 13444 0 4096 4096 NT_STATUS_OK
Close 13444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13445 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13447 4096 4096 4096 NT_STATUS_OK
ReadX 13447 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13450 NT_STATUS_OK
WriteX 13450 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13450 258 NT_STATUS_OK
WriteX 13450 0 11991 11991 NT_STATUS_OK
Close 13450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13451 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13451 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13452 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13455 NT_STATUS_OK
SET_FILE_INFORMATION 13455 1004 NT_STATUS_OK
Close 13455 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13458 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
ReadX 13458 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
Close 13434 NT_STATUS_OK
WriteX 13438 0 19054 19054 NT_STATUS_OK
WriteX 13458 0 12288 12288 NT_STATUS_OK
Close 13454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13463 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 0 61440 61440 NT_STATUS_OK
ReadX 13465 61440 4096 4096 NT_STATUS_OK
ReadX 13465 65536 61440 61440 NT_STATUS_OK
ReadX 13465 126976 4096 4096 NT_STATUS_OK
ReadX 13465 131072 61440 61440 NT_STATUS_OK
ReadX 13465 192512 4096 4096 NT_STATUS_OK
ReadX 13465 196608 61440 61440 NT_STATUS_OK
ReadX 13465 258048 4096 4096 NT_STATUS_OK
ReadX 13465 262144 61440 61440 NT_STATUS_OK
ReadX 13465 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 0 61440 61440 NT_STATUS_OK
ReadX 13466 61440 4096 4096 NT_STATUS_OK
ReadX 13466 65536 61440 61440 NT_STATUS_OK
ReadX 13466 126976 4096 4096 NT_STATUS_OK
ReadX 13466 131072 61440 61440 NT_STATUS_OK
ReadX 13466 192512 4096 4096 NT_STATUS_OK
ReadX 13466 196608 61440 61440 NT_STATUS_OK
ReadX 13466 258048 4096 4096 NT_STATUS_OK
ReadX 13466 262144 61440 61440 NT_STATUS_OK
ReadX 13466 323584 4096 4096 NT_STATUS_OK
ReadX 13466 327680 61440 61440 NT_STATUS_OK
ReadX 13466 389120 4096 4096 NT_STATUS_OK
ReadX 13466 393216 61440 61440 NT_STATUS_OK
ReadX 13466 454656 4096 4096 NT_STATUS_OK
ReadX 13466 458752 61440 61440 NT_STATUS_OK
ReadX 13466 520192 4096 4096 NT_STATUS_OK
ReadX 13466 524288 61440 61440 NT_STATUS_OK
ReadX 13466 585728 4096 4096 NT_STATUS_OK
ReadX 13466 589824 61440 61440 NT_STATUS_OK
ReadX 13466 651264 4096 4096 NT_STATUS_OK
ReadX 13466 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 61440 61440 NT_STATUS_OK
ReadX 13467 61440 4096 4096 NT_STATUS_OK
ReadX 13467 65536 61440 61440 NT_STATUS_OK
ReadX 13467 126976 4096 4096 NT_STATUS_OK
ReadX 13467 131072 61440 61440 NT_STATUS_OK
ReadX 13467 192512 4096 4096 NT_STATUS_OK
ReadX 13467 196608 61440 61440 NT_STATUS_OK
ReadX 13467 258048 4096 4096 NT_STATUS_OK
ReadX 13467 262144 61440 61440 NT_STATUS_OK
ReadX 13467 323584 4096 4096 NT_STATUS_OK
ReadX 13467 327680 61440 61440 NT_STATUS_OK
ReadX 13467 389120 4096 4096 NT_STATUS_OK
ReadX 13467 393216 61440 61440 NT_STATUS_OK
ReadX 13467 454656 4096 4096 NT_STATUS_OK
ReadX 13467 458752 61440 61440 NT_STATUS_OK
ReadX 13467 520192 4096 4096 NT_STATUS_OK
ReadX 13467 524288 61440 61440 NT_STATUS_OK
ReadX 13467 585728 4096 4096 NT_STATUS_OK
ReadX 13467 589824 61440 61440 NT_STATUS_OK
ReadX 13467 651264 4096 4096 NT_STATUS_OK
ReadX 13467 655360 61440 61440 NT_STATUS_OK
ReadX 13467 716800 4096 4096 NT_STATUS_OK
ReadX 13467 720896 61440 61440 NT_STATUS_OK
ReadX 13467 782336 4096 4096 NT_STATUS_OK
ReadX 13467 786432 61440 61440 NT_STATUS_OK
ReadX 13467 847872 4096 4096 NT_STATUS_OK
ReadX 13467 851968 61440 61440 NT_STATUS_OK
ReadX 13467 913408 4096 4096 NT_STATUS_OK
ReadX 13467 917504 61440 61440 NT_STATUS_OK
ReadX 13467 978944 4096 4096 NT_STATUS_OK
ReadX 13467 983040 61440 61440 NT_STATUS_OK
ReadX 13467 1044480 4096 4096 NT_STATUS_OK
ReadX 13467 1048576 61440 61440 NT_STATUS_OK
ReadX 13467 1110016 4096 4096 NT_STATUS_OK
ReadX 13467 1114112 61440 61440 NT_STATUS_OK
ReadX 13467 1175552 4096 4096 NT_STATUS_OK
ReadX 13467 1179648 61440 61440 NT_STATUS_OK
ReadX 13467 1241088 4096 4096 NT_STATUS_OK
ReadX 13467 1245184 61440 61440 NT_STATUS_OK
ReadX 13467 1306624 4096 4096 NT_STATUS_OK
ReadX 13467 1310720 61440 61440 NT_STATUS_OK
ReadX 13467 1372160 4096 4096 NT_STATUS_OK
ReadX 13467 1376256 61440 61440 NT_STATUS_OK
ReadX 13467 1437696 4096 4096 NT_STATUS_OK
ReadX 13467 1441792 61440 61440 NT_STATUS_OK
ReadX 13467 1503232 4096 4096 NT_STATUS_OK
ReadX 13467 1507328 61440 61440 NT_STATUS_OK
ReadX 13467 1568768 4096 4096 NT_STATUS_OK
ReadX 13467 1572864 61440 61440 NT_STATUS_OK
ReadX 13467 1634304 4096 4096 NT_STATUS_OK
ReadX 13467 1638400 61440 61440 NT_STATUS_OK
ReadX 13467 1699840 4096 4096 NT_STATUS_OK
ReadX 13467 1703936 61440 61440 NT_STATUS_OK
ReadX 13467 1765376 4096 4096 NT_STATUS_OK
ReadX 13467 1769472 61440 61440 NT_STATUS_OK
ReadX 13467 1830912 4096 4096 NT_STATUS_OK
ReadX 13467 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13474 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 1004 NT_STATUS_OK
WriteX 13474 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13476 NT_STATUS_OK
WriteX 13476 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 258 NT_STATUS_OK
WriteX 13476 0 491 491 NT_STATUS_OK
Close 13476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13474 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13480 NT_STATUS_OK
WriteX 13480 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13480 258 NT_STATUS_OK
WriteX 13480 0 543 543 NT_STATUS_OK
Close 13480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13494 NT_STATUS_OK
QUERY_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13494 258 NT_STATUS_OK
WriteX 13494 0 2048 2048 NT_STATUS_OK
Close 13494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13495 0 4096 4096 NT_STATUS_OK
Flush 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13495 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13500 NT_STATUS_OK
WriteX 13500 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13500 258 NT_STATUS_OK
WriteX 13500 0 2048 2048 NT_STATUS_OK
Close 13500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13506 NT_STATUS_OK
WriteX 13506 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 2048 2048 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 2048 2048 NT_STATUS_OK
ReadX 13485 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
WriteX 13485 0 8192 8192 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
WriteX 13487 0 4096 4096 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13511 NT_STATUS_OK
QUERY_FILE_INFORMATION 13511 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13520 NT_STATUS_OK
ReadX 13520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13531 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 1004 NT_STATUS_OK
WriteX 13531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 258 NT_STATUS_OK
WriteX 13531 0 2048 2048 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13539 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 1004 NT_STATUS_OK
WriteX 13539 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
WriteX 13539 0 2048 2048 NT_STATUS_OK
Close 13539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13532 0 4096 4096 NT_STATUS_OK
Flush 13532 NT_STATUS_OK
WriteX 13540 0 4096 4096 NT_STATUS_OK
Flush 13540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13534 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13542 NT_STATUS_OK
WriteX 13542 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 258 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13544 NT_STATUS_OK
Close 13544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13545 NT_STATUS_OK
WriteX 13545 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13545 258 NT_STATUS_OK
WriteX 13545 0 4096 4096 NT_STATUS_OK
Close 13545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13546 0 4096 4096 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13520 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13549 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13553 NT_STATUS_OK
WriteX 13553 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13553 258 NT_STATUS_OK
WriteX 13553 0 2048 2048 NT_STATUS_OK
Close 13553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13564 NT_STATUS_OK
ReadX 13564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13565 NT_STATUS_OK
ReadX 13565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13567 NT_STATUS_OK
ReadX 13567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13568 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13563 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Close 13565 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13570 NT_STATUS_OK
QUERY_FILE_INFORMATION 13570 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13590 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 1004 NT_STATUS_OK
WriteX 13590 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 258 NT_STATUS_OK
WriteX 13590 0 2048 2048 NT_STATUS_OK
Close 13590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13591 NT_STATUS_OK
ReadX 13591 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13602 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 1004 NT_STATUS_OK
WriteX 13602 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
WriteX 13602 0 2048 2048 NT_STATUS_OK
Close 13602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13603 NT_STATUS_OK
ReadX 13603 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13605 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13610 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 1004 NT_STATUS_OK
WriteX 13610 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 258 NT_STATUS_OK
WriteX 13610 0 2048 2048 NT_STATUS_OK
Close 13610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13611 NT_STATUS_OK
ReadX 13611 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13591 0 4096 4096 NT_STATUS_OK
Flush 13591 NT_STATUS_OK
WriteX 13603 0 4096 4096 NT_STATUS_OK
Flush 13603 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Flush 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13591 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13603 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13593 4096 16384 16384 NT_STATUS_OK
ReadX 13573 4096 16384 16384 NT_STATUS_OK
ReadX 13605 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13612 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 2048 2048 NT_STATUS_OK
WriteX 13613 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13614 NT_STATUS_OK
QUERY_FILE_INFORMATION 13614 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Close 13595 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13583 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13616 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13618 NT_STATUS_OK
QUERY_FILE_INFORMATION 13618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13621 4096 16384 16384 NT_STATUS_OK
WriteX 13621 0 4096 4096 NT_STATUS_OK
WriteX 13622 0 4096 4096 NT_STATUS_OK
WriteX 13623 0 4096 4096 NT_STATUS_OK
WriteX 13624 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13627 NT_STATUS_OK
ReadX 13627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13628 NT_STATUS_OK
ReadX 13628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13635 NT_STATUS_OK
ReadX 13635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13636 NT_STATUS_OK
ReadX 13636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13637 NT_STATUS_OK
ReadX 13637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 8192 8192 NT_STATUS_OK
ReadX 13627 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13641 0 4096 4096 NT_STATUS_OK
ReadX 13641 4096 4096 4096 NT_STATUS_OK
ReadX 13641 8192 4096 4096 NT_STATUS_OK
WriteX 13627 0 4096 4096 NT_STATUS_OK
WriteX 13628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13642 0 4096 4096 NT_STATUS_OK
ReadX 13642 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13621 0 4096 4096 NT_STATUS_OK
WriteX 13622 0 4096 4096 NT_STATUS_OK
WriteX 13623 0 4096 4096 NT_STATUS_OK
WriteX 13624 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13647 NT_STATUS_OK
QUERY_FILE_INFORMATION 13647 1004 NT_STATUS_OK
WriteX 13647 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13647 258 NT_STATUS_OK
WriteX 13647 0 2048 2048 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13648 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13648 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13649 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
ReadX 13650 4096 4096 4096 NT_STATUS_OK
WriteX 13650 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13648 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
ReadX 13652 4096 4096 4096 NT_STATUS_OK
WriteX 13652 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13653 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13638 NT_STATUS_OK
Close 13634 NT_STATUS_OK
Close 13635 NT_STATUS_OK
Close 13636 NT_STATUS_OK
Close 13637 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13627 NT_STATUS_OK
Close 13628 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13642 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13655 0 4096 4096 NT_STATUS_OK
ReadX 13655 4096 4096 4096 NT_STATUS_OK
ReadX 13655 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13661 NT_STATUS_OK
ReadX 13661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13662 NT_STATUS_OK
ReadX 13662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13668 NT_STATUS_OK
ReadX 13668 0 4096 4096 NT_STATUS_OK
ReadX 13656 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13673 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1004 NT_STATUS_OK
WriteX 13673 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 2048 2048 NT_STATUS_OK
Close 13673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13674 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13679 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1004 NT_STATUS_OK
WriteX 13679 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 258 NT_STATUS_OK
WriteX 13679 0 2048 2048 NT_STATUS_OK
Close 13679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13663 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13681 NT_STATUS_OK
QUERY_FILE_INFORMATION 13681 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13667 NT_STATUS_OK
Close 13662 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Close 13663 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13665 NT_STATUS_OK
Close 13666 NT_STATUS_OK
Close 13655 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13683 NT_STATUS_OK
QUERY_FILE_INFORMATION 13683 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 61440 4096 4096 NT_STATUS_OK
ReadX 13685 126976 4096 4096 NT_STATUS_OK
WriteX 13685 0 65536 65536 NT_STATUS_OK
WriteX 13685 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 61440 4096 4096 NT_STATUS_OK
ReadX 13686 126976 4096 4096 NT_STATUS_OK
ReadX 13686 192512 4096 4096 NT_STATUS_OK
ReadX 13686 258048 4096 4096 NT_STATUS_OK
WriteX 13686 0 65536 65536 NT_STATUS_OK
WriteX 13686 65536 65536 65536 NT_STATUS_OK
WriteX 13686 131072 65536 65536 NT_STATUS_OK
WriteX 13686 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 61440 4096 4096 NT_STATUS_OK
ReadX 13687 126976 4096 4096 NT_STATUS_OK
ReadX 13687 192512 4096 4096 NT_STATUS_OK
ReadX 13687 258048 4096 4096 NT_STATUS_OK
ReadX 13687 323584 4096 4096 NT_STATUS_OK
ReadX 13687 389120 4096 4096 NT_STATUS_OK
ReadX 13687 454656 4096 4096 NT_STATUS_OK
ReadX 13687 520192 4096 4096 NT_STATUS_OK
WriteX 13687 0 65536 65536 NT_STATUS_OK
WriteX 13687 65536 65536 65536 NT_STATUS_OK
WriteX 13687 131072 65536 65536 NT_STATUS_OK
WriteX 13687 196608 65536 65536 NT_STATUS_OK
WriteX 13687 262144 65536 65536 NT_STATUS_OK
WriteX 13687 327680 65536 65536 NT_STATUS_OK
WriteX 13687 393216 65536 65536 NT_STATUS_OK
WriteX 13687 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13688 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13688 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13688 8192 4096 4096 NT_STATUS_OK
ReadX 13688 12288 4096 4096 NT_STATUS_OK
ReadX 13688 16384 4096 4096 NT_STATUS_OK
ReadX 13688 20480 4096 4096 NT_STATUS_OK
ReadX 13688 24576 4096 4096 NT_STATUS_OK
ReadX 13688 28672 4096 4096 NT_STATUS_OK
ReadX 13688 32768 4096 4096 NT_STATUS_OK
ReadX 13688 36864 4096 4096 NT_STATUS_OK
ReadX 13688 40960 4096 4096 NT_STATUS_OK
ReadX 13688 45056 4096 4096 NT_STATUS_OK
ReadX 13688 49152 4096 4096 NT_STATUS_OK
ReadX 13688 53248 4096 4096 NT_STATUS_OK
ReadX 13688 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13688 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13689 NT_STATUS_OK
Close 13689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13691 NT_STATUS_OK
WriteX 13691 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13691 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13691 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13691 1004 NT_STATUS_OK
WriteX 13691 0 57088 57088 NT_STATUS_OK
WriteX 13691 0 4096 4096 NT_STATUS_OK
Flush 13691 NT_STATUS_OK
Close 13688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13692 NT_STATUS_OK
SET_FILE_INFORMATION 13692 1004 NT_STATUS_OK
Close 13692 NT_STATUS_OK
SET_FILE_INFORMATION 13691 1004 NT_STATUS_OK
WriteX 13691 0 4096 4096 NT_STATUS_OK
Close 13691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13695 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13696 NT_STATUS_OK
WriteX 13696 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13696 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13696 1004 NT_STATUS_OK
WriteX 13696 0 51456 51456 NT_STATUS_OK
WriteX 13696 0 4096 4096 NT_STATUS_OK
Flush 13696 NT_STATUS_OK
SET_FILE_INFORMATION 13696 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13696 1004 NT_STATUS_OK
WriteX 13696 0 4096 4096 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13698 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13700 NT_STATUS_OK
ReadX 13700 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13700 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13705 NT_STATUS_OK
WriteX 13705 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13705 258 NT_STATUS_OK
WriteX 13705 0 53077 53077 NT_STATUS_OK
Close 13705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13706 NT_STATUS_OK
WriteX 13706 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13706 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13706 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13706 1004 NT_STATUS_OK
WriteX 13706 0 65536 65536 NT_STATUS_OK
WriteX 13706 65536 1856 1856 NT_STATUS_OK
WriteX 13706 0 4096 4096 NT_STATUS_OK
Flush 13706 NT_STATUS_OK
SET_FILE_INFORMATION 13706 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13706 1004 NT_STATUS_OK
WriteX 13706 0 4096 4096 NT_STATUS_OK
Close 13706 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13712 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13715 NT_STATUS_OK
WriteX 13715 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 258 NT_STATUS_OK
WriteX 13715 0 7983 7983 NT_STATUS_OK
Close 13715 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13717 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13720 NT_STATUS_OK
WriteX 13720 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13720 258 NT_STATUS_OK
WriteX 13720 0 65536 65536 NT_STATUS_OK
WriteX 13720 65536 65536 65536 NT_STATUS_OK
WriteX 13720 131072 65536 65536 NT_STATUS_OK
WriteX 13720 196608 65536 65536 NT_STATUS_OK
WriteX 13720 262144 65536 65536 NT_STATUS_OK
WriteX 13720 327680 65536 65536 NT_STATUS_OK
WriteX 13720 393216 65536 65536 NT_STATUS_OK
WriteX 13720 458752 46731 46731 NT_STATUS_OK
Close 13720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13721 NT_STATUS_OK
WriteX 13721 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13721 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13710 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13721 1004 NT_STATUS_OK
WriteX 13721 0 65536 65536 NT_STATUS_OK
WriteX 13721 65536 22848 22848 NT_STATUS_OK
WriteX 13721 0 4096 4096 NT_STATUS_OK
Flush 13721 NT_STATUS_OK
SET_FILE_INFORMATION 13721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13721 1004 NT_STATUS_OK
WriteX 13721 0 4096 4096 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13723 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13725 NT_STATUS_OK
ReadX 13725 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13725 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13726 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13726 1004 NT_STATUS_OK
ReadX 13726 8192 4096 4096 NT_STATUS_OK
ReadX 13726 12288 4096 4096 NT_STATUS_OK
ReadX 13726 16384 4096 4096 NT_STATUS_OK
ReadX 13726 20480 4096 4096 NT_STATUS_OK
ReadX 13726 24576 4096 4096 NT_STATUS_OK
ReadX 13726 28672 4096 4096 NT_STATUS_OK
ReadX 13726 32768 4096 4096 NT_STATUS_OK
ReadX 13726 36864 4096 4096 NT_STATUS_OK
ReadX 13726 40960 4096 4096 NT_STATUS_OK
ReadX 13726 45056 4096 4096 NT_STATUS_OK
ReadX 13726 49152 4096 4096 NT_STATUS_OK
ReadX 13726 53248 4096 4096 NT_STATUS_OK
ReadX 13726 57344 4096 4096 NT_STATUS_OK
ReadX 13726 61440 4096 4096 NT_STATUS_OK
ReadX 13726 65536 4096 4096 NT_STATUS_OK
ReadX 13726 69632 4096 4096 NT_STATUS_OK
ReadX 13726 73728 4096 4096 NT_STATUS_OK
ReadX 13726 77824 4096 4096 NT_STATUS_OK
ReadX 13726 81920 4096 4096 NT_STATUS_OK
ReadX 13726 86016 4096 4096 NT_STATUS_OK
ReadX 13726 90112 4096 4096 NT_STATUS_OK
ReadX 13726 94208 4096 4096 NT_STATUS_OK
ReadX 13726 98304 4096 4096 NT_STATUS_OK
ReadX 13726 102400 4096 4096 NT_STATUS_OK
ReadX 13726 106496 4096 4096 NT_STATUS_OK
ReadX 13726 110592 4096 4096 NT_STATUS_OK
ReadX 13726 114688 4096 4096 NT_STATUS_OK
ReadX 13726 118784 4096 4096 NT_STATUS_OK
ReadX 13726 122880 4096 4096 NT_STATUS_OK
ReadX 13726 126976 4096 4096 NT_STATUS_OK
ReadX 13726 131072 4096 4096 NT_STATUS_OK
ReadX 13726 135168 4096 4096 NT_STATUS_OK
ReadX 13726 139264 4096 4096 NT_STATUS_OK
ReadX 13726 143360 4096 4096 NT_STATUS_OK
ReadX 13726 147456 4096 4096 NT_STATUS_OK
ReadX 13726 151552 4096 4096 NT_STATUS_OK
ReadX 13726 155648 4096 4096 NT_STATUS_OK
ReadX 13726 159744 4096 4096 NT_STATUS_OK
ReadX 13726 163840 4096 4096 NT_STATUS_OK
ReadX 13726 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13726 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13727 NT_STATUS_OK
Close 13727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13729 NT_STATUS_OK
WriteX 13729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 258 NT_STATUS_OK
Close 13726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13730 NT_STATUS_OK
SET_FILE_INFORMATION 13730 1004 NT_STATUS_OK
Close 13730 NT_STATUS_OK
WriteX 13729 0 42388 42388 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13731 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
ReadX 13733 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13734 NT_STATUS_OK
WriteX 13734 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13734 258 NT_STATUS_OK
SET_FILE_INFORMATION 13734 1004 NT_STATUS_OK
WriteX 13734 0 42652 42652 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13738 NT_STATUS_OK
ReadX 13738 0 4096 4096 NT_STATUS_OK
ReadX 13738 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13740 NT_STATUS_OK
Close 13740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13743 NT_STATUS_OK
WriteX 13743 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13743 258 NT_STATUS_OK
WriteX 13743 0 65536 65536 NT_STATUS_OK
WriteX 13743 65536 49 49 NT_STATUS_OK
Close 13743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 61440 61440 NT_STATUS_OK
ReadX 13744 61440 4096 4096 NT_STATUS_OK
ReadX 13744 65536 61440 61440 NT_STATUS_OK
ReadX 13744 126976 4096 4096 NT_STATUS_OK
ReadX 13744 131072 61440 61440 NT_STATUS_OK
ReadX 13744 192512 4096 4096 NT_STATUS_OK
ReadX 13744 196608 61440 61440 NT_STATUS_OK
ReadX 13744 258048 4096 4096 NT_STATUS_OK
ReadX 13744 262144 61440 61440 NT_STATUS_OK
ReadX 13744 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 61440 61440 NT_STATUS_OK
ReadX 13745 61440 4096 4096 NT_STATUS_OK
ReadX 13745 65536 61440 61440 NT_STATUS_OK
ReadX 13745 126976 4096 4096 NT_STATUS_OK
ReadX 13745 131072 61440 61440 NT_STATUS_OK
ReadX 13745 192512 4096 4096 NT_STATUS_OK
ReadX 13745 196608 61440 61440 NT_STATUS_OK
ReadX 13745 258048 4096 4096 NT_STATUS_OK
ReadX 13745 262144 61440 61440 NT_STATUS_OK
ReadX 13745 323584 4096 4096 NT_STATUS_OK
ReadX 13745 327680 61440 61440 NT_STATUS_OK
ReadX 13745 389120 4096 4096 NT_STATUS_OK
ReadX 13745 393216 61440 61440 NT_STATUS_OK
ReadX 13745 454656 4096 4096 NT_STATUS_OK
ReadX 13745 458752 61440 61440 NT_STATUS_OK
ReadX 13745 520192 4096 4096 NT_STATUS_OK
ReadX 13745 524288 61440 61440 NT_STATUS_OK
ReadX 13745 585728 4096 4096 NT_STATUS_OK
ReadX 13745 589824 61440 61440 NT_STATUS_OK
ReadX 13745 651264 4096 4096 NT_STATUS_OK
ReadX 13745 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13746 NT_STATUS_OK
ReadX 13746 0 61440 61440 NT_STATUS_OK
ReadX 13746 61440 4096 4096 NT_STATUS_OK
ReadX 13746 65536 61440 61440 NT_STATUS_OK
ReadX 13746 126976 4096 4096 NT_STATUS_OK
ReadX 13746 131072 61440 61440 NT_STATUS_OK
ReadX 13746 192512 4096 4096 NT_STATUS_OK
ReadX 13746 196608 61440 61440 NT_STATUS_OK
ReadX 13746 258048 4096 4096 NT_STATUS_OK
ReadX 13746 262144 61440 61440 NT_STATUS_OK
ReadX 13746 323584 4096 4096 NT_STATUS_OK
ReadX 13746 327680 61440 61440 NT_STATUS_OK
ReadX 13746 389120 4096 4096 NT_STATUS_OK
ReadX 13746 393216 61440 61440 NT_STATUS_OK
ReadX 13746 454656 4096 4096 NT_STATUS_OK
ReadX 13746 458752 61440 61440 NT_STATUS_OK
ReadX 13746 520192 4096 4096 NT_STATUS_OK
ReadX 13746 524288 61440 61440 NT_STATUS_OK
ReadX 13746 585728 4096 4096 NT_STATUS_OK
ReadX 13746 589824 61440 61440 NT_STATUS_OK
ReadX 13746 651264 4096 4096 NT_STATUS_OK
ReadX 13746 655360 61440 61440 NT_STATUS_OK
ReadX 13746 716800 4096 4096 NT_STATUS_OK
ReadX 13746 720896 61440 61440 NT_STATUS_OK
ReadX 13746 782336 4096 4096 NT_STATUS_OK
ReadX 13746 786432 61440 61440 NT_STATUS_OK
ReadX 13746 847872 4096 4096 NT_STATUS_OK
ReadX 13746 851968 61440 61440 NT_STATUS_OK
ReadX 13746 913408 4096 4096 NT_STATUS_OK
ReadX 13746 917504 61440 61440 NT_STATUS_OK
ReadX 13746 978944 4096 4096 NT_STATUS_OK
ReadX 13746 983040 61440 61440 NT_STATUS_OK
ReadX 13746 1044480 4096 4096 NT_STATUS_OK
ReadX 13746 1048576 61440 61440 NT_STATUS_OK
ReadX 13746 1110016 4096 4096 NT_STATUS_OK
ReadX 13746 1114112 61440 61440 NT_STATUS_OK
ReadX 13746 1175552 4096 4096 NT_STATUS_OK
ReadX 13746 1179648 61440 61440 NT_STATUS_OK
ReadX 13746 1241088 4096 4096 NT_STATUS_OK
ReadX 13746 1245184 61440 61440 NT_STATUS_OK
ReadX 13746 1306624 4096 4096 NT_STATUS_OK
ReadX 13746 1310720 61440 61440 NT_STATUS_OK
ReadX 13746 1372160 4096 4096 NT_STATUS_OK
ReadX 13746 1376256 61440 61440 NT_STATUS_OK
ReadX 13746 1437696 4096 4096 NT_STATUS_OK
ReadX 13746 1441792 61440 61440 NT_STATUS_OK
ReadX 13746 1503232 4096 4096 NT_STATUS_OK
ReadX 13746 1507328 61440 61440 NT_STATUS_OK
ReadX 13746 1568768 4096 4096 NT_STATUS_OK
Close 13744 NT_STATUS_OK
ReadX 13746 1572864 61440 61440 NT_STATUS_OK
Close 13738 NT_STATUS_OK
ReadX 13746 1634304 4096 4096 NT_STATUS_OK
Close 13745 NT_STATUS_OK
ReadX 13746 1638400 61440 61440 NT_STATUS_OK
ReadX 13746 1699840 4096 4096 NT_STATUS_OK
ReadX 13746 1703936 61440 61440 NT_STATUS_OK
ReadX 13746 1765376 4096 4096 NT_STATUS_OK
ReadX 13746 1769472 61440 61440 NT_STATUS_OK
ReadX 13746 1830912 4096 4096 NT_STATUS_OK
ReadX 13746 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13748 NT_STATUS_OK
QUERY_FILE_INFORMATION 13748 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13748 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13748 1005 NT_STATUS_OK
ReadX 13748 2156 24 24 NT_STATUS_OK
ReadX 13748 2139 276 276 NT_STATUS_OK
ReadX 13748 2136 14 14 NT_STATUS_OK
ReadX 13748 2136 7 7 NT_STATUS_OK
ReadX 13748 2138 12 12 NT_STATUS_OK
ReadX 13748 2137 8 8 NT_STATUS_OK
ReadX 13748 2135 15 15 NT_STATUS_OK
ReadX 13748 0 16 16 NT_STATUS_OK
ReadX 13748 16 2048 2048 NT_STATUS_OK
ReadX 13748 2064 2048 2048 NT_STATUS_OK
ReadX 13748 257 2048 2048 NT_STATUS_OK
ReadX 13748 385 2048 2048 NT_STATUS_OK
ReadX 13748 513 2048 2048 NT_STATUS_OK
ReadX 13748 641 2048 2048 NT_STATUS_OK
ReadX 13748 769 2048 2048 NT_STATUS_OK
ReadX 13748 897 2048 2048 NT_STATUS_OK
ReadX 13748 1025 2048 2048 NT_STATUS_OK
ReadX 13748 1153 2048 2048 NT_STATUS_OK
ReadX 13748 1281 2048 2048 NT_STATUS_OK
ReadX 13748 1409 2048 2048 NT_STATUS_OK
ReadX 13748 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13750 NT_STATUS_OK
Close 13750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13746 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13753 NT_STATUS_OK
WriteX 13753 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13753 258 NT_STATUS_OK
WriteX 13753 0 10575 10575 NT_STATUS_OK
Flush 13753 NT_STATUS_OK
Close 13753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
Close 13748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13758 NT_STATUS_OK
LockX 13758 2147483538 1 NT_STATUS_OK
UnlockX 13758 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 1005 NT_STATUS_OK
ReadX 13758 0 512 512 NT_STATUS_OK
ReadX 13758 512 512 512 NT_STATUS_OK
ReadX 13758 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 1004 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13759 NT_STATUS_OK
QUERY_FILE_INFORMATION 13759 1005 NT_STATUS_OK
ReadX 13759 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13760 NT_STATUS_OK
LockX 13760 2147483538 1 NT_STATUS_OK
UnlockX 13760 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13760 1005 NT_STATUS_OK
ReadX 13760 0 512 512 NT_STATUS_OK
ReadX 13760 512 512 512 NT_STATUS_OK
ReadX 13760 1024 512 512 NT_STATUS_OK
ReadX 13760 288 20 20 NT_STATUS_OK
ReadX 13760 308 2084 2084 NT_STATUS_OK
ReadX 13760 388 2084 2084 NT_STATUS_OK
ReadX 13760 388 2084 2084 NT_STATUS_OK
ReadX 13747 2157 1386 1386 NT_STATUS_OK
ReadX 13760 2472 399 399 NT_STATUS_OK
ReadX 13760 3072 1536 1536 NT_STATUS_OK
ReadX 13760 544 149 149 NT_STATUS_OK
ReadX 13760 693 485 485 NT_STATUS_OK
Close 13760 NT_STATUS_OK
ReadX 13747 2157 4096 4096 NT_STATUS_OK
ReadX 13747 6253 4096 4096 NT_STATUS_OK
ReadX 13747 10349 4096 4096 NT_STATUS_OK
ReadX 13747 14445 4096 4096 NT_STATUS_OK
ReadX 13747 18541 4096 4096 NT_STATUS_OK
ReadX 13747 22637 256 256 NT_STATUS_OK
ReadX 13747 22893 4096 4096 NT_STATUS_OK
ReadX 13747 26989 4096 4096 NT_STATUS_OK
ReadX 13747 31085 4096 4096 NT_STATUS_OK
ReadX 13747 35181 4096 4096 NT_STATUS_OK
ReadX 13747 39277 4096 4096 NT_STATUS_OK
ReadX 13747 43373 4096 4096 NT_STATUS_OK
ReadX 13747 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13747 2157 1024 1024 NT_STATUS_OK
ReadX 13747 1667 4688 4688 NT_STATUS_OK
ReadX 13747 6355 3516 3516 NT_STATUS_OK
ReadX 13747 9871 16384 16384 NT_STATUS_OK
ReadX 13747 26255 3771 3771 NT_STATUS_OK
ReadX 13747 30026 2048 2048 NT_STATUS_OK
ReadX 13747 32074 1024 1024 NT_STATUS_OK
ReadX 13747 33098 6652 6652 NT_STATUS_OK
ReadX 13747 39750 16384 16384 NT_STATUS_OK
ReadX 13747 56134 10496 10496 NT_STATUS_OK
ReadX 13747 66630 1784 1784 NT_STATUS_OK
ReadX 13747 68414 90 90 NT_STATUS_OK
ReadX 13747 68504 273 273 NT_STATUS_OK
ReadX 13747 68777 1600 1600 NT_STATUS_OK
ReadX 13747 70377 640 640 NT_STATUS_OK
ReadX 13747 71017 1280 1280 NT_STATUS_OK
ReadX 13747 72297 8464 8464 NT_STATUS_OK
ReadX 13747 80761 158 158 NT_STATUS_OK
ReadX 13747 80919 912 912 NT_STATUS_OK
ReadX 13747 81831 1980 1980 NT_STATUS_OK
ReadX 13747 83811 2256 2256 NT_STATUS_OK
ReadX 13747 86067 400 400 NT_STATUS_OK
ReadX 13747 86467 252 252 NT_STATUS_OK
ReadX 13747 86719 42 42 NT_STATUS_OK
ReadX 13747 86761 725 725 NT_STATUS_OK
ReadX 13747 2009 512 512 NT_STATUS_OK
ReadX 13747 3895 9 9 NT_STATUS_OK
ReadX 13747 3781 46 46 NT_STATUS_OK
ReadX 13747 4059 92 92 NT_STATUS_OK
ReadX 13747 3781 92 92 NT_STATUS_OK
ReadX 13747 3986 184 184 NT_STATUS_OK
ReadX 13747 3987 16384 16384 NT_STATUS_OK
ReadX 13747 3902 16384 16384 NT_STATUS_OK
ReadX 13747 3781 10240 10240 NT_STATUS_OK
ReadX 13747 3821 16384 16384 NT_STATUS_OK
ReadX 13747 3891 935 935 NT_STATUS_OK
ReadX 13747 4060 10240 10240 NT_STATUS_OK
ReadX 13747 4059 184 184 NT_STATUS_OK
ReadX 13747 256 184 184 NT_STATUS_OK
ReadX 13747 256 1026 1026 NT_STATUS_OK
ReadX 13747 3901 326 326 NT_STATUS_OK
ReadX 13747 3899 652 652 NT_STATUS_OK
ReadX 13747 256 2 2 NT_STATUS_OK
ReadX 13747 258 4948 4948 NT_STATUS_OK
Close 13747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13765 NT_STATUS_OK
WriteX 13765 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 258 NT_STATUS_OK
WriteX 13765 0 65536 65536 NT_STATUS_OK
WriteX 13765 65536 65536 65536 NT_STATUS_OK
WriteX 13765 131072 65536 65536 NT_STATUS_OK
WriteX 13765 196608 65536 65536 NT_STATUS_OK
WriteX 13765 262144 65536 65536 NT_STATUS_OK
WriteX 13765 327680 65536 65536 NT_STATUS_OK
WriteX 13765 393216 65536 65536 NT_STATUS_OK
WriteX 13765 458752 65536 65536 NT_STATUS_OK
WriteX 13765 524288 65536 65536 NT_STATUS_OK
WriteX 13765 589824 35257 35257 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13770 NT_STATUS_OK
WriteX 13770 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 258 NT_STATUS_OK
WriteX 13770 0 65536 65536 NT_STATUS_OK
WriteX 13770 65536 65536 65536 NT_STATUS_OK
WriteX 13770 131072 65536 65536 NT_STATUS_OK
WriteX 13770 196608 65536 65536 NT_STATUS_OK
WriteX 13770 262144 65536 65536 NT_STATUS_OK
WriteX 13770 327680 65536 65536 NT_STATUS_OK
WriteX 13770 393216 65536 65536 NT_STATUS_OK
WriteX 13770 458752 65536 65536 NT_STATUS_OK
WriteX 13770 524288 65536 65536 NT_STATUS_OK
WriteX 13770 589824 57598 57598 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13772 NT_STATUS_OK
WriteX 13772 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13772 258 NT_STATUS_OK
WriteX 13772 0 12543 12543 NT_STATUS_OK
Flush 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13778 NT_STATUS_OK
QUERY_FILE_INFORMATION 13778 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13778 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13778 1005 NT_STATUS_OK
ReadX 13778 1938 24 24 NT_STATUS_OK
ReadX 13778 1920 276 276 NT_STATUS_OK
ReadX 13778 1918 14 14 NT_STATUS_OK
ReadX 13778 1918 7 7 NT_STATUS_OK
ReadX 13778 1919 12 12 NT_STATUS_OK
ReadX 13778 1919 8 8 NT_STATUS_OK
ReadX 13778 1917 15 15 NT_STATUS_OK
ReadX 13778 0 16 16 NT_STATUS_OK
ReadX 13778 16 2048 2048 NT_STATUS_OK
ReadX 13778 2064 2048 2048 NT_STATUS_OK
ReadX 13778 257 2048 2048 NT_STATUS_OK
ReadX 13778 385 2048 2048 NT_STATUS_OK
ReadX 13778 513 2048 2048 NT_STATUS_OK
ReadX 13778 641 2048 2048 NT_STATUS_OK
ReadX 13778 769 2048 2048 NT_STATUS_OK
ReadX 13778 897 2048 2048 NT_STATUS_OK
ReadX 13778 1025 2048 2048 NT_STATUS_OK
ReadX 13778 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13783 NT_STATUS_OK
WriteX 13783 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13783 258 NT_STATUS_OK
WriteX 13783 0 11588 11588 NT_STATUS_OK
Flush 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13784 NT_STATUS_OK
Close 13784 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
Close 13778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13788 NT_STATUS_OK
WriteX 13788 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13788 258 NT_STATUS_OK
WriteX 13788 0 11615 11615 NT_STATUS_OK
Flush 13788 NT_STATUS_OK
Close 13788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13790 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13794 NT_STATUS_OK
Close 13794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13797 NT_STATUS_OK
WriteX 13797 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13797 258 NT_STATUS_OK
WriteX 13797 0 65536 65536 NT_STATUS_OK
WriteX 13797 65536 16050 16050 NT_STATUS_OK
Close 13797 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13777 1939 64 64 NT_STATUS_OK
ReadX 13777 128 248 248 NT_STATUS_OK
ReadX 13777 128 568 568 NT_STATUS_OK
ReadX 13777 3872 1536 1536 NT_STATUS_OK
ReadX 13777 3456 2560 2560 NT_STATUS_OK
ReadX 13777 3136 512 512 NT_STATUS_OK
ReadX 13777 2880 4096 4096 NT_STATUS_OK
ReadX 13777 3264 3072 3072 NT_STATUS_OK
ReadX 13777 320 4096 4096 NT_STATUS_OK
ReadX 13777 1024 4096 4096 NT_STATUS_OK
ReadX 13777 3616 4096 4096 NT_STATUS_OK
ReadX 13777 1939 64 64 NT_STATUS_OK
ReadX 13777 128 248 248 NT_STATUS_OK
ReadX 13777 128 608 608 NT_STATUS_OK
ReadX 13777 2858 1024 1024 NT_STATUS_OK
ReadX 13777 2810 4096 4096 NT_STATUS_OK
ReadX 13777 2826 4096 4096 NT_STATUS_OK
ReadX 13777 2580 2048 2048 NT_STATUS_OK
ReadX 13777 2800 2560 2560 NT_STATUS_OK
ReadX 13777 2100 4096 4096 NT_STATUS_OK
ReadX 13777 2084 4096 4096 NT_STATUS_OK
ReadX 13777 868 4096 4096 NT_STATUS_OK
ReadX 13777 2324 4096 4096 NT_STATUS_OK
ReadX 13777 884 4096 4096 NT_STATUS_OK
ReadX 13777 2604 1024 1024 NT_STATUS_OK
ReadX 13777 580 4096 4096 NT_STATUS_OK
ReadX 13777 596 4096 4096 NT_STATUS_OK
ReadX 13777 2752 4096 4096 NT_STATUS_OK
ReadX 13777 2842 1024 1024 NT_STATUS_OK
ReadX 13777 660 4096 4096 NT_STATUS_OK
ReadX 13777 2720 4096 4096 NT_STATUS_OK
ReadX 13777 2736 4096 4096 NT_STATUS_OK
ReadX 13777 628 4096 4096 NT_STATUS_OK
ReadX 13777 2704 4096 4096 NT_STATUS_OK
ReadX 13777 1556 4096 4096 NT_STATUS_OK
ReadX 13777 576 4096 4096 NT_STATUS_OK
ReadX 13777 3168 1536 1536 NT_STATUS_OK
ReadX 13777 832 4096 4096 NT_STATUS_OK
ReadX 13777 1088 4096 4096 NT_STATUS_OK
ReadX 13777 1344 4096 4096 NT_STATUS_OK
ReadX 13777 1600 4096 4096 NT_STATUS_OK
ReadX 13777 1856 4096 4096 NT_STATUS_OK
ReadX 13777 2112 4096 4096 NT_STATUS_OK
ReadX 13777 1892 4096 4096 NT_STATUS_OK
ReadX 13777 820 4096 4096 NT_STATUS_OK
ReadX 13777 788 4096 4096 NT_STATUS_OK
ReadX 13777 1604 4096 4096 NT_STATUS_OK
ReadX 13777 3648 4096 4096 NT_STATUS_OK
ReadX 13777 2608 4096 4096 NT_STATUS_OK
ReadX 13777 548 4096 4096 NT_STATUS_OK
ReadX 13777 740 4096 4096 NT_STATUS_OK
ReadX 13777 1344 4096 4096 NT_STATUS_OK
ReadX 13777 3392 4096 4096 NT_STATUS_OK
ReadX 13777 3904 4096 4096 NT_STATUS_OK
ReadX 13777 644 4096 4096 NT_STATUS_OK
ReadX 13777 676 4096 4096 NT_STATUS_OK
ReadX 13777 2688 4096 4096 NT_STATUS_OK
ReadX 13777 320 4096 4096 NT_STATUS_OK
ReadX 13777 900 4096 4096 NT_STATUS_OK
ReadX 13777 1908 4096 4096 NT_STATUS_OK
ReadX 13777 852 4096 4096 NT_STATUS_OK
ReadX 13777 724 4096 4096 NT_STATUS_OK
ReadX 13777 2292 4096 4096 NT_STATUS_OK
ReadX 13777 612 4096 4096 NT_STATUS_OK
ReadX 13777 388 4096 4096 NT_STATUS_OK
ReadX 13777 2368 4096 4096 NT_STATUS_OK
ReadX 13777 2624 4096 4096 NT_STATUS_OK
ReadX 13777 500 4096 4096 NT_STATUS_OK
ReadX 13777 356 4096 4096 NT_STATUS_OK
ReadX 13777 1024 4096 4096 NT_STATUS_OK
ReadX 13777 576 4096 4096 NT_STATUS_OK
ReadX 13777 340 4096 4096 NT_STATUS_OK
ReadX 13777 420 4096 4096 NT_STATUS_OK
ReadX 13777 1600 4096 4096 NT_STATUS_OK
ReadX 13777 404 4096 4096 NT_STATUS_OK
ReadX 13777 1428 4096 4096 NT_STATUS_OK
ReadX 13777 2656 4096 4096 NT_STATUS_OK
ReadX 13777 2624 4096 4096 NT_STATUS_OK
ReadX 13777 452 4096 4096 NT_STATUS_OK
ReadX 13777 692 4096 4096 NT_STATUS_OK
ReadX 13777 564 4096 4096 NT_STATUS_OK
ReadX 13777 372 4096 4096 NT_STATUS_OK
ReadX 13777 468 4096 4096 NT_STATUS_OK
ReadX 13777 484 4096 4096 NT_STATUS_OK
ReadX 13777 1088 4096 4096 NT_STATUS_OK
ReadX 13777 1924 4096 4096 NT_STATUS_OK
ReadX 13777 2768 4096 4096 NT_STATUS_OK
ReadX 13777 832 4096 4096 NT_STATUS_OK
ReadX 13777 836 4096 4096 NT_STATUS_OK
ReadX 13777 1856 4096 4096 NT_STATUS_OK
ReadX 13777 2640 4096 4096 NT_STATUS_OK
ReadX 13777 436 4096 4096 NT_STATUS_OK
ReadX 13777 1828 4096 4096 NT_STATUS_OK
ReadX 13777 804 4096 4096 NT_STATUS_OK
ReadX 13777 1860 4096 4096 NT_STATUS_OK
ReadX 13777 1812 4096 4096 NT_STATUS_OK
ReadX 13777 756 4096 4096 NT_STATUS_OK
ReadX 13777 1636 4096 4096 NT_STATUS_OK
ReadX 13777 772 4096 4096 NT_STATUS_OK
ReadX 13777 2036 4096 4096 NT_STATUS_OK
ReadX 13777 1220 4096 4096 NT_STATUS_OK
ReadX 13777 1652 4096 4096 NT_STATUS_OK
ReadX 13777 2588 4096 4096 NT_STATUS_OK
ReadX 13777 916 4096 4096 NT_STATUS_OK
ReadX 13777 260 4096 4096 NT_STATUS_OK
ReadX 13777 932 4096 4096 NT_STATUS_OK
ReadX 13777 2624 4096 4096 NT_STATUS_OK
ReadX 13777 308 4096 4096 NT_STATUS_OK
ReadX 13777 292 4096 4096 NT_STATUS_OK
ReadX 13777 1140 4096 4096 NT_STATUS_OK
ReadX 13777 276 4096 4096 NT_STATUS_OK
ReadX 13777 2020 4096 4096 NT_STATUS_OK
ReadX 13777 2880 4096 4096 NT_STATUS_OK
ReadX 13777 516 4096 4096 NT_STATUS_OK
ReadX 13777 1844 4096 4096 NT_STATUS_OK
ReadX 13777 1124 4096 4096 NT_STATUS_OK
ReadX 13777 3136 4096 4096 NT_STATUS_OK
ReadX 13777 324 4096 4096 NT_STATUS_OK
ReadX 13777 1156 4096 4096 NT_STATUS_OK
ReadX 13777 1172 4096 4096 NT_STATUS_OK
ReadX 13777 2112 4096 4096 NT_STATUS_OK
ReadX 13777 2368 4096 4096 NT_STATUS_OK
ReadX 13777 964 4096 4096 NT_STATUS_OK
ReadX 13777 980 4096 4096 NT_STATUS_OK
ReadX 13777 1012 4096 4096 NT_STATUS_OK
ReadX 13777 532 4096 4096 NT_STATUS_OK
ReadX 13777 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13777 1620 4096 4096 NT_STATUS_OK
ReadX 13777 1604 4096 4096 NT_STATUS_OK
ReadX 13777 2116 4096 4096 NT_STATUS_OK
ReadX 13777 2132 4096 4096 NT_STATUS_OK
ReadX 13777 2148 4096 4096 NT_STATUS_OK
ReadX 13777 2276 4096 4096 NT_STATUS_OK
ReadX 13777 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13799 NT_STATUS_OK
Close 13799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13802 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 1004 NT_STATUS_OK
Close 13757 NT_STATUS_OK
WriteX 13802 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13802 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13759 1004 NT_STATUS_OK
Close 13759 NT_STATUS_OK
WriteX 13802 0 65536 65536 NT_STATUS_OK
WriteX 13802 65536 64850 64850 NT_STATUS_OK
Close 13802 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13804 NT_STATUS_OK
WriteX 13804 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 258 NT_STATUS_OK
ReadX 13777 2068 4096 4096 NT_STATUS_OK
ReadX 13777 1588 4096 4096 NT_STATUS_OK
ReadX 13777 1572 4096 4096 NT_STATUS_OK
WriteX 13804 0 18630 18630 NT_STATUS_OK
Flush 13804 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13808 NT_STATUS_OK
ReadX 13808 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13777 612 4096 4096 NT_STATUS_OK
ReadX 13777 564 4096 4096 NT_STATUS_OK
ReadX 13777 1876 4096 4096 NT_STATUS_OK
ReadX 13777 628 4096 4096 NT_STATUS_OK
ReadX 13777 740 4096 4096 NT_STATUS_OK
ReadX 13777 724 4096 4096 NT_STATUS_OK
ReadX 13777 644 4096 4096 NT_STATUS_OK
ReadX 13777 2324 4096 4096 NT_STATUS_OK
ReadX 13777 660 4096 4096 NT_STATUS_OK
ReadX 13777 852 4096 4096 NT_STATUS_OK
ReadX 13777 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13777 2368 4096 4096 NT_STATUS_OK
ReadX 13777 1024 4096 4096 NT_STATUS_OK
ReadX 13777 320 4096 4096 NT_STATUS_OK
ReadX 13777 580 4096 4096 NT_STATUS_OK
ReadX 13777 3136 512 512 NT_STATUS_OK
ReadX 13777 2880 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 61440 4096 4096 NT_STATUS_OK
ReadX 13809 126976 4096 4096 NT_STATUS_OK
WriteX 13809 0 65536 65536 NT_STATUS_OK
WriteX 13809 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 61440 4096 4096 NT_STATUS_OK
ReadX 13810 126976 4096 4096 NT_STATUS_OK
ReadX 13810 192512 4096 4096 NT_STATUS_OK
ReadX 13810 258048 4096 4096 NT_STATUS_OK
WriteX 13810 0 65536 65536 NT_STATUS_OK
WriteX 13810 65536 65536 65536 NT_STATUS_OK
WriteX 13810 131072 65536 65536 NT_STATUS_OK
WriteX 13810 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 61440 4096 4096 NT_STATUS_OK
ReadX 13811 126976 4096 4096 NT_STATUS_OK
ReadX 13811 192512 4096 4096 NT_STATUS_OK
ReadX 13811 258048 4096 4096 NT_STATUS_OK
ReadX 13811 323584 4096 4096 NT_STATUS_OK
ReadX 13811 389120 4096 4096 NT_STATUS_OK
ReadX 13811 454656 4096 4096 NT_STATUS_OK
ReadX 13811 520192 4096 4096 NT_STATUS_OK
WriteX 13811 0 65536 65536 NT_STATUS_OK
WriteX 13811 65536 65536 65536 NT_STATUS_OK
WriteX 13811 131072 65536 65536 NT_STATUS_OK
WriteX 13811 196608 65536 65536 NT_STATUS_OK
WriteX 13811 262144 65536 65536 NT_STATUS_OK
WriteX 13811 327680 65536 65536 NT_STATUS_OK
WriteX 13811 393216 65536 65536 NT_STATUS_OK
WriteX 13811 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13814 NT_STATUS_OK
WriteX 13814 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13812 0 8192 8192 NT_STATUS_OK
Flush 13812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13812 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13812 0 8192 8192 NT_STATUS_OK
Flush 13812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13812 0 8192 8192 NT_STATUS_OK
Flush 13812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13812 0 8192 8192 NT_STATUS_OK
Flush 13812 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13808 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13819 NT_STATUS_OK
WriteX 13819 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13819 258 NT_STATUS_OK
WriteX 13819 0 62591 62591 NT_STATUS_OK
Close 13819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13821 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13824 NT_STATUS_OK
WriteX 13824 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13824 258 NT_STATUS_OK
WriteX 13824 0 10845 10845 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13826 NT_STATUS_OK
Close 13826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13829 NT_STATUS_OK
WriteX 13829 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13829 258 NT_STATUS_OK
WriteX 13829 0 30118 30118 NT_STATUS_OK
Close 13829 NT_STATUS_OK
WriteX 13812 0 4096 4096 NT_STATUS_OK
WriteX 13814 0 64 64 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 61440 61440 NT_STATUS_OK
ReadX 13831 61440 4096 4096 NT_STATUS_OK
ReadX 13831 65536 61440 61440 NT_STATUS_OK
ReadX 13831 126976 4096 4096 NT_STATUS_OK
ReadX 13831 131072 61440 61440 NT_STATUS_OK
ReadX 13831 192512 4096 4096 NT_STATUS_OK
ReadX 13831 196608 61440 61440 NT_STATUS_OK
ReadX 13831 258048 4096 4096 NT_STATUS_OK
ReadX 13831 262144 61440 61440 NT_STATUS_OK
ReadX 13831 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 61440 61440 NT_STATUS_OK
ReadX 13832 61440 4096 4096 NT_STATUS_OK
ReadX 13832 65536 61440 61440 NT_STATUS_OK
ReadX 13832 126976 4096 4096 NT_STATUS_OK
ReadX 13832 131072 61440 61440 NT_STATUS_OK
ReadX 13832 192512 4096 4096 NT_STATUS_OK
ReadX 13832 196608 61440 61440 NT_STATUS_OK
ReadX 13832 258048 4096 4096 NT_STATUS_OK
ReadX 13832 262144 61440 61440 NT_STATUS_OK
ReadX 13832 323584 4096 4096 NT_STATUS_OK
ReadX 13832 327680 61440 61440 NT_STATUS_OK
ReadX 13832 389120 4096 4096 NT_STATUS_OK
ReadX 13832 393216 61440 61440 NT_STATUS_OK
ReadX 13832 454656 4096 4096 NT_STATUS_OK
ReadX 13832 458752 61440 61440 NT_STATUS_OK
ReadX 13832 520192 4096 4096 NT_STATUS_OK
ReadX 13832 524288 61440 61440 NT_STATUS_OK
ReadX 13832 585728 4096 4096 NT_STATUS_OK
ReadX 13832 589824 61440 61440 NT_STATUS_OK
ReadX 13832 651264 4096 4096 NT_STATUS_OK
ReadX 13832 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 61440 61440 NT_STATUS_OK
ReadX 13833 61440 4096 4096 NT_STATUS_OK
ReadX 13833 65536 61440 61440 NT_STATUS_OK
ReadX 13833 126976 4096 4096 NT_STATUS_OK
ReadX 13833 131072 61440 61440 NT_STATUS_OK
ReadX 13833 192512 4096 4096 NT_STATUS_OK
ReadX 13833 196608 61440 61440 NT_STATUS_OK
ReadX 13833 258048 4096 4096 NT_STATUS_OK
ReadX 13833 262144 61440 61440 NT_STATUS_OK
ReadX 13833 323584 4096 4096 NT_STATUS_OK
ReadX 13833 327680 61440 61440 NT_STATUS_OK
ReadX 13833 389120 4096 4096 NT_STATUS_OK
ReadX 13833 393216 61440 61440 NT_STATUS_OK
ReadX 13833 454656 4096 4096 NT_STATUS_OK
ReadX 13833 458752 61440 61440 NT_STATUS_OK
ReadX 13833 520192 4096 4096 NT_STATUS_OK
ReadX 13833 524288 61440 61440 NT_STATUS_OK
ReadX 13833 585728 4096 4096 NT_STATUS_OK
ReadX 13833 589824 61440 61440 NT_STATUS_OK
ReadX 13833 651264 4096 4096 NT_STATUS_OK
ReadX 13833 655360 61440 61440 NT_STATUS_OK
ReadX 13833 716800 4096 4096 NT_STATUS_OK
ReadX 13833 720896 61440 61440 NT_STATUS_OK
ReadX 13833 782336 4096 4096 NT_STATUS_OK
ReadX 13833 786432 61440 61440 NT_STATUS_OK
ReadX 13833 847872 4096 4096 NT_STATUS_OK
ReadX 13833 851968 61440 61440 NT_STATUS_OK
ReadX 13833 913408 4096 4096 NT_STATUS_OK
ReadX 13833 917504 61440 61440 NT_STATUS_OK
ReadX 13833 978944 4096 4096 NT_STATUS_OK
ReadX 13833 983040 61440 61440 NT_STATUS_OK
ReadX 13833 1044480 4096 4096 NT_STATUS_OK
ReadX 13833 1048576 61440 61440 NT_STATUS_OK
ReadX 13833 1110016 4096 4096 NT_STATUS_OK
ReadX 13833 1114112 61440 61440 NT_STATUS_OK
ReadX 13833 1175552 4096 4096 NT_STATUS_OK
ReadX 13833 1179648 61440 61440 NT_STATUS_OK
ReadX 13833 1241088 4096 4096 NT_STATUS_OK
ReadX 13833 1245184 61440 61440 NT_STATUS_OK
ReadX 13833 1306624 4096 4096 NT_STATUS_OK
ReadX 13833 1310720 61440 61440 NT_STATUS_OK
ReadX 13833 1372160 4096 4096 NT_STATUS_OK
ReadX 13833 1376256 61440 61440 NT_STATUS_OK
ReadX 13833 1437696 4096 4096 NT_STATUS_OK
ReadX 13833 1441792 61440 61440 NT_STATUS_OK
ReadX 13833 1503232 4096 4096 NT_STATUS_OK
ReadX 13833 1507328 61440 61440 NT_STATUS_OK
ReadX 13833 1568768 4096 4096 NT_STATUS_OK
ReadX 13833 1572864 61440 61440 NT_STATUS_OK
ReadX 13833 1634304 4096 4096 NT_STATUS_OK
ReadX 13833 1638400 61440 61440 NT_STATUS_OK
ReadX 13833 1699840 4096 4096 NT_STATUS_OK
ReadX 13833 1703936 61440 61440 NT_STATUS_OK
ReadX 13833 1765376 4096 4096 NT_STATUS_OK
ReadX 13833 1769472 61440 61440 NT_STATUS_OK
ReadX 13833 1830912 4096 4096 NT_STATUS_OK
ReadX 13833 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13831 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13836 NT_STATUS_OK
ReadX 13836 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
ReadX 13838 4096 4096 4096 NT_STATUS_OK
ReadX 13838 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13836 NT_STATUS_OK
Close 13837 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13842 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 8192 8192 NT_STATUS_OK
ReadX 13846 8192 8192 8192 NT_STATUS_OK
ReadX 13846 16384 8192 8192 NT_STATUS_OK
ReadX 13846 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13851 NT_STATUS_OK
WriteX 13851 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13851 258 NT_STATUS_OK
WriteX 13851 0 10438 10438 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13852 NT_STATUS_OK
Close 13852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13854 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13856 NT_STATUS_OK
Close 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13857 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13859 NT_STATUS_OK
Close 13859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13860 NT_STATUS_OK
ReadX 13860 0 4096 4096 NT_STATUS_OK
ReadX 13860 4096 4096 4096 NT_STATUS_OK
ReadX 13860 8192 4096 4096 NT_STATUS_OK
ReadX 13860 12288 8192 8192 NT_STATUS_OK
ReadX 13860 20480 8192 8192 NT_STATUS_OK
ReadX 13860 28672 8192 8192 NT_STATUS_OK
ReadX 13860 36864 8192 8192 NT_STATUS_OK
ReadX 13860 45056 8192 8192 NT_STATUS_OK
ReadX 13860 53248 8192 8192 NT_STATUS_OK
ReadX 13860 61440 8192 8192 NT_STATUS_OK
ReadX 13860 69632 8192 8192 NT_STATUS_OK
ReadX 13860 77824 8192 8192 NT_STATUS_OK
ReadX 13860 86016 8192 8192 NT_STATUS_OK
ReadX 13860 94208 8192 8192 NT_STATUS_OK
ReadX 13860 102400 8192 8192 NT_STATUS_OK
ReadX 13860 110592 8192 8192 NT_STATUS_OK
ReadX 13860 118784 8192 8192 NT_STATUS_OK
ReadX 13860 126976 8192 8192 NT_STATUS_OK
ReadX 13860 135168 8192 8192 NT_STATUS_OK
ReadX 13860 143360 8192 8192 NT_STATUS_OK
ReadX 13860 151552 8192 8192 NT_STATUS_OK
ReadX 13860 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13860 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Close 13857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13865 NT_STATUS_OK
WriteX 13865 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13865 258 NT_STATUS_OK
WriteX 13865 0 28489 28489 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13868 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13871 NT_STATUS_OK
ReadX 13871 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 8192 8192 NT_STATUS_OK
ReadX 13872 8192 8192 8192 NT_STATUS_OK
ReadX 13872 16384 8192 8192 NT_STATUS_OK
ReadX 13872 24576 8192 8192 NT_STATUS_OK
ReadX 13872 32768 16384 16384 NT_STATUS_OK
ReadX 13872 49152 8192 8192 NT_STATUS_OK
ReadX 13872 57344 8192 8192 NT_STATUS_OK
ReadX 13872 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13877 NT_STATUS_OK
WriteX 13877 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 258 NT_STATUS_OK
WriteX 13877 0 29253 29253 NT_STATUS_OK
Close 13877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13878 NT_STATUS_OK
Close 13878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13881 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13884 NT_STATUS_OK
WriteX 13884 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 258 NT_STATUS_OK
WriteX 13884 0 30183 30183 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13885 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13887 NT_STATUS_OK
WriteX 13887 0 510 510 NT_STATUS_OK
WriteX 13887 510 512 512 NT_STATUS_OK
WriteX 13887 1022 510 510 NT_STATUS_OK
WriteX 13887 1532 510 510 NT_STATUS_OK
WriteX 13887 2042 168 168 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
WriteX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 61440 4096 4096 NT_STATUS_OK
ReadX 13891 126976 4096 4096 NT_STATUS_OK
WriteX 13891 0 65536 65536 NT_STATUS_OK
WriteX 13891 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 61440 4096 4096 NT_STATUS_OK
ReadX 13892 126976 4096 4096 NT_STATUS_OK
ReadX 13892 192512 4096 4096 NT_STATUS_OK
ReadX 13892 258048 4096 4096 NT_STATUS_OK
WriteX 13892 0 65536 65536 NT_STATUS_OK
WriteX 13892 65536 65536 65536 NT_STATUS_OK
WriteX 13892 131072 65536 65536 NT_STATUS_OK
WriteX 13892 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 61440 4096 4096 NT_STATUS_OK
ReadX 13893 126976 4096 4096 NT_STATUS_OK
ReadX 13893 192512 4096 4096 NT_STATUS_OK
ReadX 13893 258048 4096 4096 NT_STATUS_OK
ReadX 13893 323584 4096 4096 NT_STATUS_OK
ReadX 13893 389120 4096 4096 NT_STATUS_OK
ReadX 13893 454656 4096 4096 NT_STATUS_OK
ReadX 13893 520192 4096 4096 NT_STATUS_OK
WriteX 13893 0 65536 65536 NT_STATUS_OK
WriteX 13893 65536 65536 65536 NT_STATUS_OK
WriteX 13893 131072 65536 65536 NT_STATUS_OK
WriteX 13893 196608 65536 65536 NT_STATUS_OK
WriteX 13893 262144 65536 65536 NT_STATUS_OK
WriteX 13893 327680 65536 65536 NT_STATUS_OK
WriteX 13893 393216 65536 65536 NT_STATUS_OK
WriteX 13893 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13894 NT_STATUS_OK
Close 13894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Close 13892 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13896 NT_STATUS_OK
Close 13896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13923 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13938 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13943 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13948 NT_STATUS_OK
Close 13948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13953 NT_STATUS_OK
Close 13953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13962 NT_STATUS_OK
WriteX 13962 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13962 0 65536 65536 NT_STATUS_OK
WriteX 13962 65536 65536 65536 NT_STATUS_OK
WriteX 13962 131072 65536 65536 NT_STATUS_OK
WriteX 13962 196608 65536 65536 NT_STATUS_OK
WriteX 13962 262144 26634 26634 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
Close 13969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
ReadX 13970 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13971 NT_STATUS_OK
Close 13971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13975 NT_STATUS_OK
Close 13975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13978 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13980 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13987 NT_STATUS_OK
Close 13987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13989 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13998 NT_STATUS_OK
Close 13998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14003 NT_STATUS_OK
Close 14003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14008 NT_STATUS_OK
Close 14008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14013 NT_STATUS_OK
Close 14013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14018 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14022 NT_STATUS_OK
Close 14022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14027 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14047 NT_STATUS_OK
Close 14047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14048 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14061 NT_STATUS_OK
Close 14061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14063 NT_STATUS_OK
ReadX 14063 0 4096 4096 NT_STATUS_OK
Close 14063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14094 0 4096 4096 NT_STATUS_OK
Close 14094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14095 NT_STATUS_OK
ReadX 14095 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
ReadX 10039 4096 4096 4096 NT_STATUS_OK
ReadX 10039 8192 4096 4096 NT_STATUS_OK
ReadX 10039 12288 4096 4096 NT_STATUS_OK
ReadX 10039 16384 4096 4096 NT_STATUS_OK
ReadX 10039 20480 4096 4096 NT_STATUS_OK
ReadX 10039 24576 4096 4096 NT_STATUS_OK
ReadX 10039 28672 4096 4096 NT_STATUS_OK
ReadX 10039 32768 4096 4096 NT_STATUS_OK
ReadX 10039 36864 4096 4096 NT_STATUS_OK
ReadX 10039 40960 4096 4096 NT_STATUS_OK
ReadX 10039 45056 4096 4096 NT_STATUS_OK
ReadX 10039 49152 4096 4096 NT_STATUS_OK
ReadX 10039 53248 4096 4096 NT_STATUS_OK
ReadX 10039 57344 4096 4096 NT_STATUS_OK
ReadX 10039 61440 4096 4096 NT_STATUS_OK
ReadX 10039 65536 4096 4096 NT_STATUS_OK
ReadX 10039 69632 4096 4096 NT_STATUS_OK
ReadX 10039 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Close 10039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10040 NT_STATUS_OK
SET_FILE_INFORMATION 10040 1004 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
WriteX 10045 0 65536 65536 NT_STATUS_OK
WriteX 10045 65536 19979 19979 NT_STATUS_OK
Close 10045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Flush 10046 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Flush 10046 NT_STATUS_OK
QUERY_FILE_INFORMATION 10046 1004 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Flush 10046 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Flush 10046 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Flush 10046 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Flush 10046 NT_STATUS_OK
Close 10046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10047 NT_STATUS_OK
ReadX 10047 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10050 NT_STATUS_OK
ReadX 10050 0 4096 4096 NT_STATUS_OK
Close 10050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10051 1004 NT_STATUS_OK
WriteX 10051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10052 NT_STATUS_OK
Close 10052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10048 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10057 NT_STATUS_OK
WriteX 10057 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10057 258 NT_STATUS_OK
WriteX 10057 0 65536 65536 NT_STATUS_OK
WriteX 10057 65536 17654 17654 NT_STATUS_OK
Close 10057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
QUERY_FILE_INFORMATION 10058 1004 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
SET_FILE_INFORMATION 10058 1004 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10059 NT_STATUS_OK
SET_FILE_INFORMATION 10059 1004 NT_STATUS_OK
Close 10059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10061 NT_STATUS_OK
Close 10061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
ReadX 10063 4096 4096 4096 NT_STATUS_OK
ReadX 10063 8192 4096 4096 NT_STATUS_OK
ReadX 10063 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10063 16384 4096 4096 NT_STATUS_OK
ReadX 10063 20480 4096 4096 NT_STATUS_OK
ReadX 10063 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
Close 10064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
Close 10065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10066 1004 NT_STATUS_OK
WriteX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10069 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10072 NT_STATUS_OK
WriteX 10072 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10072 258 NT_STATUS_OK
WriteX 10072 0 65536 65536 NT_STATUS_OK
WriteX 10072 65536 19490 19490 NT_STATUS_OK
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
QUERY_FILE_INFORMATION 10073 1004 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
SET_FILE_INFORMATION 10073 1004 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10074 NT_STATUS_OK
SET_FILE_INFORMATION 10074 1004 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10076 NT_STATUS_OK
Close 10076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10078 0 4096 4096 NT_STATUS_OK
Close 10078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10079 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10080 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
ReadX 10080 4096 4096 4096 NT_STATUS_OK
ReadX 10080 8192 4096 4096 NT_STATUS_OK
ReadX 10080 12288 4096 4096 NT_STATUS_OK
ReadX 10080 16384 4096 4096 NT_STATUS_OK
ReadX 10080 20480 4096 4096 NT_STATUS_OK
ReadX 10080 24576 4096 4096 NT_STATUS_OK
ReadX 10080 28672 4096 4096 NT_STATUS_OK
ReadX 10080 32768 4096 4096 NT_STATUS_OK
ReadX 10080 36864 4096 4096 NT_STATUS_OK
ReadX 10080 40960 4096 4096 NT_STATUS_OK
ReadX 10080 45056 4096 4096 NT_STATUS_OK
ReadX 10080 49152 4096 4096 NT_STATUS_OK
ReadX 10080 53248 4096 4096 NT_STATUS_OK
ReadX 10080 57344 4096 4096 NT_STATUS_OK
ReadX 10080 61440 4096 4096 NT_STATUS_OK
ReadX 10080 65536 4096 4096 NT_STATUS_OK
ReadX 10080 69632 4096 4096 NT_STATUS_OK
ReadX 10080 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10080 1004 NT_STATUS_OK
WriteX 10080 0 4096 4096 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10081 NT_STATUS_OK
SET_FILE_INFORMATION 10081 1004 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10075 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10086 NT_STATUS_OK
WriteX 10086 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10086 258 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 8866 8866 NT_STATUS_OK
Close 10086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 0 4096 4096 NT_STATUS_OK
WriteX 10087 0 4096 4096 NT_STATUS_OK
Flush 10087 NT_STATUS_OK
SET_FILE_INFORMATION 10087 1004 NT_STATUS_OK
WriteX 10087 0 4096 4096 NT_STATUS_OK
Flush 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 4096 4096 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10091 1004 NT_STATUS_OK
WriteX 10091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10091 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10094 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10097 NT_STATUS_OK
WriteX 10097 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 258 NT_STATUS_OK
WriteX 10097 0 65536 65536 NT_STATUS_OK
WriteX 10097 65536 9298 9298 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10098 NT_STATUS_OK
ReadX 10098 0 4096 4096 NT_STATUS_OK
WriteX 10098 0 4096 4096 NT_STATUS_OK
Flush 10098 NT_STATUS_OK
SET_FILE_INFORMATION 10098 1004 NT_STATUS_OK
WriteX 10098 0 4096 4096 NT_STATUS_OK
Flush 10098 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10099 NT_STATUS_OK
SET_FILE_INFORMATION 10099 1004 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10100 NT_STATUS_OK
ReadX 10100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10101 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10104 0 4096 4096 NT_STATUS_OK
Close 10104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10105 4096 4096 4096 NT_STATUS_OK
ReadX 10105 8192 4096 4096 NT_STATUS_OK
ReadX 10105 12288 4096 4096 NT_STATUS_OK
ReadX 10105 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 0 4096 4096 NT_STATUS_OK
Close 10106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10107 NT_STATUS_OK
ReadX 10107 0 4096 4096 NT_STATUS_OK
Close 10107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10108 NT_STATUS_OK
ReadX 10108 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10108 1004 NT_STATUS_OK
WriteX 10108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10111 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10114 NT_STATUS_OK
WriteX 10114 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10114 258 NT_STATUS_OK
WriteX 10114 0 65536 65536 NT_STATUS_OK
WriteX 10114 65536 11540 11540 NT_STATUS_OK
Close 10114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10115 NT_STATUS_OK
ReadX 10115 0 4096 4096 NT_STATUS_OK
WriteX 10115 0 4096 4096 NT_STATUS_OK
Flush 10115 NT_STATUS_OK
SET_FILE_INFORMATION 10115 1004 NT_STATUS_OK
WriteX 10115 0 4096 4096 NT_STATUS_OK
Flush 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10116 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
Close 10116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10118 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 61440 4096 4096 NT_STATUS_OK
ReadX 10120 126976 4096 4096 NT_STATUS_OK
WriteX 10120 0 65536 65536 NT_STATUS_OK
WriteX 10120 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 61440 4096 4096 NT_STATUS_OK
ReadX 10121 126976 4096 4096 NT_STATUS_OK
ReadX 10121 192512 4096 4096 NT_STATUS_OK
ReadX 10121 258048 4096 4096 NT_STATUS_OK
WriteX 10121 0 65536 65536 NT_STATUS_OK
WriteX 10121 65536 65536 65536 NT_STATUS_OK
WriteX 10121 131072 65536 65536 NT_STATUS_OK
WriteX 10121 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10122 NT_STATUS_OK
ReadX 10122 61440 4096 4096 NT_STATUS_OK
ReadX 10122 126976 4096 4096 NT_STATUS_OK
ReadX 10122 192512 4096 4096 NT_STATUS_OK
ReadX 10122 258048 4096 4096 NT_STATUS_OK
ReadX 10122 323584 4096 4096 NT_STATUS_OK
ReadX 10122 389120 4096 4096 NT_STATUS_OK
ReadX 10122 454656 4096 4096 NT_STATUS_OK
ReadX 10122 520192 4096 4096 NT_STATUS_OK
WriteX 10122 0 65536 65536 NT_STATUS_OK
WriteX 10122 65536 65536 65536 NT_STATUS_OK
WriteX 10122 131072 65536 65536 NT_STATUS_OK
WriteX 10122 196608 65536 65536 NT_STATUS_OK
WriteX 10122 262144 65536 65536 NT_STATUS_OK
WriteX 10122 327680 65536 65536 NT_STATUS_OK
WriteX 10122 393216 65536 65536 NT_STATUS_OK
WriteX 10122 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
ReadX 10123 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10124 NT_STATUS_OK
WriteX 10124 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10124 258 NT_STATUS_OK
WriteX 10124 0 53 53 NT_STATUS_OK
Close 10124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10125 NT_STATUS_OK
Close 10125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10117 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10123 8192 4096 4096 NT_STATUS_OK
ReadX 10123 12288 4096 4096 NT_STATUS_OK
WriteX 10127 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10127 258 NT_STATUS_OK
ReadX 10123 16384 4096 4096 NT_STATUS_OK
ReadX 10123 20480 4096 4096 NT_STATUS_OK
WriteX 10127 0 15360 15360 NT_STATUS_OK
Close 10127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10128 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10128 1004 NT_STATUS_OK
WriteX 10128 0 4096 4096 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10131 NT_STATUS_OK
ReadX 10131 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10131 4096 4096 4096 NT_STATUS_OK
ReadX 10131 8192 4096 4096 NT_STATUS_OK
ReadX 10131 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 0 4096 4096 NT_STATUS_OK
ReadX 10134 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10135 NT_STATUS_OK
ReadX 10135 0 4096 4096 NT_STATUS_OK
ReadX 10135 4096 4096 4096 NT_STATUS_OK
ReadX 10135 8192 4096 4096 NT_STATUS_OK
Close 10134 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10136 NT_STATUS_OK
WriteX 10136 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10136 258 NT_STATUS_OK
WriteX 10136 0 15360 15360 NT_STATUS_OK
Close 10136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10137 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10137 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10138 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10140 NT_STATUS_OK
ReadX 10140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10141 NT_STATUS_OK
SET_FILE_INFORMATION 10141 1004 NT_STATUS_OK
Close 10141 NT_STATUS_OK
WriteX 10137 0 4096 4096 NT_STATUS_OK
Close 10137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10142 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
ReadX 10144 4096 4096 4096 NT_STATUS_OK
ReadX 10144 8192 4096 4096 NT_STATUS_OK
ReadX 10144 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10144 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10144 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10146 NT_STATUS_OK
WriteX 10146 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
WriteX 10146 0 53 53 NT_STATUS_OK
Close 10146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10145 4096 4096 4096 NT_STATUS_OK
ReadX 10145 8192 4096 4096 NT_STATUS_OK
ReadX 10145 12288 4096 4096 NT_STATUS_OK
WriteX 10149 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 258 NT_STATUS_OK
WriteX 10149 0 12006 12006 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10150 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10150 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10150 1004 NT_STATUS_OK
WriteX 10150 0 4096 4096 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10153 4096 4096 4096 NT_STATUS_OK
ReadX 10153 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10156 NT_STATUS_OK
WriteX 10156 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10156 258 NT_STATUS_OK
WriteX 10156 0 11991 11991 NT_STATUS_OK
Close 10156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10157 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10157 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10158 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10161 NT_STATUS_OK
SET_FILE_INFORMATION 10161 1004 NT_STATUS_OK
Close 10161 NT_STATUS_OK
WriteX 10157 0 4096 4096 NT_STATUS_OK
Close 10157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10162 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10165 NT_STATUS_OK
Close 10165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10164 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10164 1004 NT_STATUS_OK
ReadX 10164 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10164 1004 NT_STATUS_OK
WriteX 10164 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10164 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10164 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10164 1004 NT_STATUS_OK
Close 10140 NT_STATUS_OK
WriteX 10144 0 19054 19054 NT_STATUS_OK
WriteX 10164 0 12288 12288 NT_STATUS_OK
Close 10160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10167 NT_STATUS_OK
Close 10167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 61440 61440 NT_STATUS_OK
ReadX 10171 61440 4096 4096 NT_STATUS_OK
ReadX 10171 65536 61440 61440 NT_STATUS_OK
ReadX 10171 126976 4096 4096 NT_STATUS_OK
ReadX 10171 131072 61440 61440 NT_STATUS_OK
ReadX 10171 192512 4096 4096 NT_STATUS_OK
ReadX 10171 196608 61440 61440 NT_STATUS_OK
ReadX 10171 258048 4096 4096 NT_STATUS_OK
ReadX 10171 262144 61440 61440 NT_STATUS_OK
ReadX 10171 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 61440 61440 NT_STATUS_OK
ReadX 10172 61440 4096 4096 NT_STATUS_OK
ReadX 10172 65536 61440 61440 NT_STATUS_OK
ReadX 10172 126976 4096 4096 NT_STATUS_OK
ReadX 10172 131072 61440 61440 NT_STATUS_OK
ReadX 10172 192512 4096 4096 NT_STATUS_OK
ReadX 10172 196608 61440 61440 NT_STATUS_OK
ReadX 10172 258048 4096 4096 NT_STATUS_OK
ReadX 10172 262144 61440 61440 NT_STATUS_OK
ReadX 10172 323584 4096 4096 NT_STATUS_OK
ReadX 10172 327680 61440 61440 NT_STATUS_OK
ReadX 10172 389120 4096 4096 NT_STATUS_OK
ReadX 10172 393216 61440 61440 NT_STATUS_OK
ReadX 10172 454656 4096 4096 NT_STATUS_OK
ReadX 10172 458752 61440 61440 NT_STATUS_OK
ReadX 10172 520192 4096 4096 NT_STATUS_OK
ReadX 10172 524288 61440 61440 NT_STATUS_OK
ReadX 10172 585728 4096 4096 NT_STATUS_OK
ReadX 10172 589824 61440 61440 NT_STATUS_OK
ReadX 10172 651264 4096 4096 NT_STATUS_OK
ReadX 10172 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 61440 61440 NT_STATUS_OK
ReadX 10173 61440 4096 4096 NT_STATUS_OK
ReadX 10173 65536 61440 61440 NT_STATUS_OK
ReadX 10173 126976 4096 4096 NT_STATUS_OK
ReadX 10173 131072 61440 61440 NT_STATUS_OK
ReadX 10173 192512 4096 4096 NT_STATUS_OK
ReadX 10173 196608 61440 61440 NT_STATUS_OK
ReadX 10173 258048 4096 4096 NT_STATUS_OK
ReadX 10173 262144 61440 61440 NT_STATUS_OK
ReadX 10173 323584 4096 4096 NT_STATUS_OK
ReadX 10173 327680 61440 61440 NT_STATUS_OK
ReadX 10173 389120 4096 4096 NT_STATUS_OK
ReadX 10173 393216 61440 61440 NT_STATUS_OK
ReadX 10173 454656 4096 4096 NT_STATUS_OK
ReadX 10173 458752 61440 61440 NT_STATUS_OK
ReadX 10173 520192 4096 4096 NT_STATUS_OK
ReadX 10173 524288 61440 61440 NT_STATUS_OK
ReadX 10173 585728 4096 4096 NT_STATUS_OK
ReadX 10173 589824 61440 61440 NT_STATUS_OK
ReadX 10173 651264 4096 4096 NT_STATUS_OK
ReadX 10173 655360 61440 61440 NT_STATUS_OK
ReadX 10173 716800 4096 4096 NT_STATUS_OK
ReadX 10173 720896 61440 61440 NT_STATUS_OK
ReadX 10173 782336 4096 4096 NT_STATUS_OK
ReadX 10173 786432 61440 61440 NT_STATUS_OK
ReadX 10173 847872 4096 4096 NT_STATUS_OK
ReadX 10173 851968 61440 61440 NT_STATUS_OK
ReadX 10173 913408 4096 4096 NT_STATUS_OK
ReadX 10173 917504 61440 61440 NT_STATUS_OK
ReadX 10173 978944 4096 4096 NT_STATUS_OK
ReadX 10173 983040 61440 61440 NT_STATUS_OK
ReadX 10173 1044480 4096 4096 NT_STATUS_OK
ReadX 10173 1048576 61440 61440 NT_STATUS_OK
ReadX 10173 1110016 4096 4096 NT_STATUS_OK
ReadX 10173 1114112 61440 61440 NT_STATUS_OK
ReadX 10173 1175552 4096 4096 NT_STATUS_OK
ReadX 10173 1179648 61440 61440 NT_STATUS_OK
ReadX 10173 1241088 4096 4096 NT_STATUS_OK
ReadX 10173 1245184 61440 61440 NT_STATUS_OK
ReadX 10173 1306624 4096 4096 NT_STATUS_OK
ReadX 10173 1310720 61440 61440 NT_STATUS_OK
ReadX 10173 1372160 4096 4096 NT_STATUS_OK
ReadX 10173 1376256 61440 61440 NT_STATUS_OK
ReadX 10173 1437696 4096 4096 NT_STATUS_OK
ReadX 10173 1441792 61440 61440 NT_STATUS_OK
ReadX 10173 1503232 4096 4096 NT_STATUS_OK
ReadX 10173 1507328 61440 61440 NT_STATUS_OK
ReadX 10173 1568768 4096 4096 NT_STATUS_OK
ReadX 10173 1572864 61440 61440 NT_STATUS_OK
ReadX 10173 1634304 4096 4096 NT_STATUS_OK
ReadX 10173 1638400 61440 61440 NT_STATUS_OK
ReadX 10173 1699840 4096 4096 NT_STATUS_OK
ReadX 10173 1703936 61440 61440 NT_STATUS_OK
ReadX 10173 1765376 4096 4096 NT_STATUS_OK
ReadX 10173 1769472 61440 61440 NT_STATUS_OK
ReadX 10173 1830912 4096 4096 NT_STATUS_OK
ReadX 10173 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10180 NT_STATUS_OK
QUERY_FILE_INFORMATION 10180 1004 NT_STATUS_OK
WriteX 10180 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10180 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10182 NT_STATUS_OK
WriteX 10182 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10182 258 NT_STATUS_OK
WriteX 10182 0 491 491 NT_STATUS_OK
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10180 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10186 NT_STATUS_OK
WriteX 10186 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10186 258 NT_STATUS_OK
WriteX 10186 0 543 543 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10190 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10200 NT_STATUS_OK
QUERY_FILE_INFORMATION 10200 1004 NT_STATUS_OK
WriteX 10200 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10200 258 NT_STATUS_OK
WriteX 10200 0 2048 2048 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10201 0 4096 4096 NT_STATUS_OK
Flush 10201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10201 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10206 NT_STATUS_OK
WriteX 10206 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10206 258 NT_STATUS_OK
WriteX 10206 0 2048 2048 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10211 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10212 NT_STATUS_OK
WriteX 10212 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10212 258 NT_STATUS_OK
WriteX 10212 0 2048 2048 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 2048 2048 NT_STATUS_OK
ReadX 10191 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10195 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10207 0 4096 4096 NT_STATUS_OK
WriteX 10191 0 8192 8192 NT_STATUS_OK
WriteX 10192 0 4096 4096 NT_STATUS_OK
WriteX 10193 0 4096 4096 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10217 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Close 10194 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10220 NT_STATUS_OK
ReadX 10220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10221 NT_STATUS_OK
ReadX 10221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10237 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 1004 NT_STATUS_OK
WriteX 10237 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 258 NT_STATUS_OK
WriteX 10237 0 2048 2048 NT_STATUS_OK
Close 10237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10239 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10245 NT_STATUS_OK
QUERY_FILE_INFORMATION 10245 1004 NT_STATUS_OK
WriteX 10245 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10245 258 NT_STATUS_OK
WriteX 10245 0 2048 2048 NT_STATUS_OK
Close 10245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
WriteX 10246 0 4096 4096 NT_STATUS_OK
Flush 10246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10246 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10240 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10248 NT_STATUS_OK
WriteX 10248 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 258 NT_STATUS_OK
WriteX 10248 0 4096 4096 NT_STATUS_OK
Close 10248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10250 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10251 NT_STATUS_OK
WriteX 10251 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 258 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10252 0 4096 4096 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10240 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10258 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10259 NT_STATUS_OK
WriteX 10259 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10259 258 NT_STATUS_OK
WriteX 10259 0 2048 2048 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10276 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10296 NT_STATUS_OK
QUERY_FILE_INFORMATION 10296 1004 NT_STATUS_OK
WriteX 10296 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10296 258 NT_STATUS_OK
WriteX 10296 0 2048 2048 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10307 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10308 NT_STATUS_OK
QUERY_FILE_INFORMATION 10308 1004 NT_STATUS_OK
WriteX 10308 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10308 258 NT_STATUS_OK
WriteX 10308 0 2048 2048 NT_STATUS_OK
Close 10308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10315 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10316 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
WriteX 10316 0 2048 2048 NT_STATUS_OK
Close 10316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
Flush 10297 NT_STATUS_OK
WriteX 10309 0 4096 4096 NT_STATUS_OK
Flush 10309 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10297 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10309 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10299 4096 16384 16384 NT_STATUS_OK
ReadX 10279 4096 16384 16384 NT_STATUS_OK
ReadX 10311 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 2048 2048 NT_STATUS_OK
WriteX 10319 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10320 NT_STATUS_OK
QUERY_FILE_INFORMATION 10320 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10283 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Close 10279 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10322 NT_STATUS_OK
QUERY_FILE_INFORMATION 10322 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10324 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10327 4096 16384 16384 NT_STATUS_OK
WriteX 10327 0 4096 4096 NT_STATUS_OK
WriteX 10328 0 4096 4096 NT_STATUS_OK
WriteX 10329 0 4096 4096 NT_STATUS_OK
WriteX 10330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 8192 8192 NT_STATUS_OK
ReadX 10333 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10347 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10347 0 4096 4096 NT_STATUS_OK
ReadX 10347 4096 4096 4096 NT_STATUS_OK
ReadX 10347 8192 4096 4096 NT_STATUS_OK
WriteX 10333 0 4096 4096 NT_STATUS_OK
WriteX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
ReadX 10348 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10327 0 4096 4096 NT_STATUS_OK
WriteX 10328 0 4096 4096 NT_STATUS_OK
WriteX 10329 0 4096 4096 NT_STATUS_OK
WriteX 10330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10353 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
WriteX 10353 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 258 NT_STATUS_OK
WriteX 10353 0 2048 2048 NT_STATUS_OK
Close 10353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10354 NT_STATUS_OK
ReadX 10354 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10354 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10354 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
ReadX 10356 4096 4096 4096 NT_STATUS_OK
WriteX 10356 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10354 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
ReadX 10358 4096 4096 4096 NT_STATUS_OK
WriteX 10358 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10359 NT_STATUS_OK
QUERY_FILE_INFORMATION 10359 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10347 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10361 0 4096 4096 NT_STATUS_OK
ReadX 10361 4096 4096 4096 NT_STATUS_OK
ReadX 10361 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10369 NT_STATUS_OK
ReadX 10369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
ReadX 10362 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10379 NT_STATUS_OK
QUERY_FILE_INFORMATION 10379 1004 NT_STATUS_OK
WriteX 10379 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10379 258 NT_STATUS_OK
WriteX 10379 0 2048 2048 NT_STATUS_OK
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10380 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10385 NT_STATUS_OK
QUERY_FILE_INFORMATION 10385 1004 NT_STATUS_OK
WriteX 10385 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10385 258 NT_STATUS_OK
WriteX 10385 0 2048 2048 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10386 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10369 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10387 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Close 10362 NT_STATUS_OK
Close 10363 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10389 NT_STATUS_OK
QUERY_FILE_INFORMATION 10389 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10391 NT_STATUS_OK
ReadX 10391 61440 4096 4096 NT_STATUS_OK
ReadX 10391 126976 4096 4096 NT_STATUS_OK
WriteX 10391 0 65536 65536 NT_STATUS_OK
WriteX 10391 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10392 NT_STATUS_OK
ReadX 10392 61440 4096 4096 NT_STATUS_OK
ReadX 10392 126976 4096 4096 NT_STATUS_OK
ReadX 10392 192512 4096 4096 NT_STATUS_OK
ReadX 10392 258048 4096 4096 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 65536 65536 NT_STATUS_OK
WriteX 10392 131072 65536 65536 NT_STATUS_OK
WriteX 10392 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 61440 4096 4096 NT_STATUS_OK
ReadX 10393 126976 4096 4096 NT_STATUS_OK
ReadX 10393 192512 4096 4096 NT_STATUS_OK
ReadX 10393 258048 4096 4096 NT_STATUS_OK
ReadX 10393 323584 4096 4096 NT_STATUS_OK
ReadX 10393 389120 4096 4096 NT_STATUS_OK
ReadX 10393 454656 4096 4096 NT_STATUS_OK
ReadX 10393 520192 4096 4096 NT_STATUS_OK
WriteX 10393 0 65536 65536 NT_STATUS_OK
WriteX 10393 65536 65536 65536 NT_STATUS_OK
WriteX 10393 131072 65536 65536 NT_STATUS_OK
WriteX 10393 196608 65536 65536 NT_STATUS_OK
WriteX 10393 262144 65536 65536 NT_STATUS_OK
WriteX 10393 327680 65536 65536 NT_STATUS_OK
WriteX 10393 393216 65536 65536 NT_STATUS_OK
WriteX 10393 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10394 NT_STATUS_OK
ReadX 10394 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10394 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10394 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10394 8192 4096 4096 NT_STATUS_OK
ReadX 10394 12288 4096 4096 NT_STATUS_OK
ReadX 10394 16384 4096 4096 NT_STATUS_OK
ReadX 10394 20480 4096 4096 NT_STATUS_OK
ReadX 10394 24576 4096 4096 NT_STATUS_OK
ReadX 10394 28672 4096 4096 NT_STATUS_OK
ReadX 10394 32768 4096 4096 NT_STATUS_OK
ReadX 10394 36864 4096 4096 NT_STATUS_OK
ReadX 10394 40960 4096 4096 NT_STATUS_OK
ReadX 10394 45056 4096 4096 NT_STATUS_OK
ReadX 10394 49152 4096 4096 NT_STATUS_OK
ReadX 10394 53248 4096 4096 NT_STATUS_OK
ReadX 10394 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10394 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10395 NT_STATUS_OK
Close 10395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10397 NT_STATUS_OK
WriteX 10397 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10397 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10397 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10397 1004 NT_STATUS_OK
WriteX 10397 0 57088 57088 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
Flush 10397 NT_STATUS_OK
Close 10394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10398 NT_STATUS_OK
SET_FILE_INFORMATION 10398 1004 NT_STATUS_OK
Close 10398 NT_STATUS_OK
SET_FILE_INFORMATION 10397 1004 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
Close 10397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10401 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10402 NT_STATUS_OK
WriteX 10402 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10402 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10402 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10402 1004 NT_STATUS_OK
WriteX 10402 0 51456 51456 NT_STATUS_OK
WriteX 10402 0 4096 4096 NT_STATUS_OK
Flush 10402 NT_STATUS_OK
SET_FILE_INFORMATION 10402 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10402 1004 NT_STATUS_OK
WriteX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Close 10401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10404 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10406 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10411 NT_STATUS_OK
WriteX 10411 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10411 258 NT_STATUS_OK
WriteX 10411 0 53077 53077 NT_STATUS_OK
Close 10411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10412 NT_STATUS_OK
WriteX 10412 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10412 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10412 1004 NT_STATUS_OK
WriteX 10412 0 65536 65536 NT_STATUS_OK
WriteX 10412 65536 1856 1856 NT_STATUS_OK
WriteX 10412 0 4096 4096 NT_STATUS_OK
Flush 10412 NT_STATUS_OK
SET_FILE_INFORMATION 10412 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10412 1004 NT_STATUS_OK
WriteX 10412 0 4096 4096 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10418 NT_STATUS_OK
Close 10418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10421 NT_STATUS_OK
WriteX 10421 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10421 258 NT_STATUS_OK
WriteX 10421 0 7983 7983 NT_STATUS_OK
Close 10421 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10426 NT_STATUS_OK
WriteX 10426 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10426 258 NT_STATUS_OK
WriteX 10426 0 65536 65536 NT_STATUS_OK
WriteX 10426 65536 65536 65536 NT_STATUS_OK
WriteX 10426 131072 65536 65536 NT_STATUS_OK
WriteX 10426 196608 65536 65536 NT_STATUS_OK
WriteX 10426 262144 65536 65536 NT_STATUS_OK
WriteX 10426 327680 65536 65536 NT_STATUS_OK
WriteX 10426 393216 65536 65536 NT_STATUS_OK
WriteX 10426 458752 46731 46731 NT_STATUS_OK
Close 10426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10427 NT_STATUS_OK
WriteX 10427 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10416 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 65536 65536 NT_STATUS_OK
WriteX 10427 65536 22848 22848 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Flush 10427 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10431 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10432 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
ReadX 10432 8192 4096 4096 NT_STATUS_OK
ReadX 10432 12288 4096 4096 NT_STATUS_OK
ReadX 10432 16384 4096 4096 NT_STATUS_OK
ReadX 10432 20480 4096 4096 NT_STATUS_OK
ReadX 10432 24576 4096 4096 NT_STATUS_OK
ReadX 10432 28672 4096 4096 NT_STATUS_OK
ReadX 10432 32768 4096 4096 NT_STATUS_OK
ReadX 10432 36864 4096 4096 NT_STATUS_OK
ReadX 10432 40960 4096 4096 NT_STATUS_OK
ReadX 10432 45056 4096 4096 NT_STATUS_OK
ReadX 10432 49152 4096 4096 NT_STATUS_OK
ReadX 10432 53248 4096 4096 NT_STATUS_OK
ReadX 10432 57344 4096 4096 NT_STATUS_OK
ReadX 10432 61440 4096 4096 NT_STATUS_OK
ReadX 10432 65536 4096 4096 NT_STATUS_OK
ReadX 10432 69632 4096 4096 NT_STATUS_OK
ReadX 10432 73728 4096 4096 NT_STATUS_OK
ReadX 10432 77824 4096 4096 NT_STATUS_OK
ReadX 10432 81920 4096 4096 NT_STATUS_OK
ReadX 10432 86016 4096 4096 NT_STATUS_OK
ReadX 10432 90112 4096 4096 NT_STATUS_OK
ReadX 10432 94208 4096 4096 NT_STATUS_OK
ReadX 10432 98304 4096 4096 NT_STATUS_OK
ReadX 10432 102400 4096 4096 NT_STATUS_OK
ReadX 10432 106496 4096 4096 NT_STATUS_OK
ReadX 10432 110592 4096 4096 NT_STATUS_OK
ReadX 10432 114688 4096 4096 NT_STATUS_OK
ReadX 10432 118784 4096 4096 NT_STATUS_OK
ReadX 10432 122880 4096 4096 NT_STATUS_OK
ReadX 10432 126976 4096 4096 NT_STATUS_OK
ReadX 10432 131072 4096 4096 NT_STATUS_OK
ReadX 10432 135168 4096 4096 NT_STATUS_OK
ReadX 10432 139264 4096 4096 NT_STATUS_OK
ReadX 10432 143360 4096 4096 NT_STATUS_OK
ReadX 10432 147456 4096 4096 NT_STATUS_OK
ReadX 10432 151552 4096 4096 NT_STATUS_OK
ReadX 10432 155648 4096 4096 NT_STATUS_OK
ReadX 10432 159744 4096 4096 NT_STATUS_OK
ReadX 10432 163840 4096 4096 NT_STATUS_OK
ReadX 10432 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10432 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10435 NT_STATUS_OK
WriteX 10435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10435 258 NT_STATUS_OK
Close 10432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10436 NT_STATUS_OK
SET_FILE_INFORMATION 10436 1004 NT_STATUS_OK
Close 10436 NT_STATUS_OK
WriteX 10435 0 42388 42388 NT_STATUS_OK
Close 10435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10437 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
ReadX 10439 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10440 NT_STATUS_OK
WriteX 10440 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10440 258 NT_STATUS_OK
SET_FILE_INFORMATION 10440 1004 NT_STATUS_OK
WriteX 10440 0 42652 42652 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10442 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10444 NT_STATUS_OK
ReadX 10444 0 4096 4096 NT_STATUS_OK
ReadX 10444 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10449 NT_STATUS_OK
WriteX 10449 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10449 258 NT_STATUS_OK
WriteX 10449 0 65536 65536 NT_STATUS_OK
WriteX 10449 65536 49 49 NT_STATUS_OK
Close 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 61440 61440 NT_STATUS_OK
ReadX 10450 61440 4096 4096 NT_STATUS_OK
ReadX 10450 65536 61440 61440 NT_STATUS_OK
ReadX 10450 126976 4096 4096 NT_STATUS_OK
ReadX 10450 131072 61440 61440 NT_STATUS_OK
ReadX 10450 192512 4096 4096 NT_STATUS_OK
ReadX 10450 196608 61440 61440 NT_STATUS_OK
ReadX 10450 258048 4096 4096 NT_STATUS_OK
ReadX 10450 262144 61440 61440 NT_STATUS_OK
ReadX 10450 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 61440 61440 NT_STATUS_OK
ReadX 10451 61440 4096 4096 NT_STATUS_OK
ReadX 10451 65536 61440 61440 NT_STATUS_OK
ReadX 10451 126976 4096 4096 NT_STATUS_OK
ReadX 10451 131072 61440 61440 NT_STATUS_OK
ReadX 10451 192512 4096 4096 NT_STATUS_OK
ReadX 10451 196608 61440 61440 NT_STATUS_OK
ReadX 10451 258048 4096 4096 NT_STATUS_OK
ReadX 10451 262144 61440 61440 NT_STATUS_OK
ReadX 10451 323584 4096 4096 NT_STATUS_OK
ReadX 10451 327680 61440 61440 NT_STATUS_OK
ReadX 10451 389120 4096 4096 NT_STATUS_OK
ReadX 10451 393216 61440 61440 NT_STATUS_OK
ReadX 10451 454656 4096 4096 NT_STATUS_OK
ReadX 10451 458752 61440 61440 NT_STATUS_OK
ReadX 10451 520192 4096 4096 NT_STATUS_OK
ReadX 10451 524288 61440 61440 NT_STATUS_OK
ReadX 10451 585728 4096 4096 NT_STATUS_OK
ReadX 10451 589824 61440 61440 NT_STATUS_OK
ReadX 10451 651264 4096 4096 NT_STATUS_OK
ReadX 10451 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 61440 61440 NT_STATUS_OK
ReadX 10452 61440 4096 4096 NT_STATUS_OK
ReadX 10452 65536 61440 61440 NT_STATUS_OK
ReadX 10452 126976 4096 4096 NT_STATUS_OK
ReadX 10452 131072 61440 61440 NT_STATUS_OK
ReadX 10452 192512 4096 4096 NT_STATUS_OK
ReadX 10452 196608 61440 61440 NT_STATUS_OK
ReadX 10452 258048 4096 4096 NT_STATUS_OK
ReadX 10452 262144 61440 61440 NT_STATUS_OK
ReadX 10452 323584 4096 4096 NT_STATUS_OK
ReadX 10452 327680 61440 61440 NT_STATUS_OK
ReadX 10452 389120 4096 4096 NT_STATUS_OK
ReadX 10452 393216 61440 61440 NT_STATUS_OK
ReadX 10452 454656 4096 4096 NT_STATUS_OK
ReadX 10452 458752 61440 61440 NT_STATUS_OK
ReadX 10452 520192 4096 4096 NT_STATUS_OK
ReadX 10452 524288 61440 61440 NT_STATUS_OK
ReadX 10452 585728 4096 4096 NT_STATUS_OK
ReadX 10452 589824 61440 61440 NT_STATUS_OK
ReadX 10452 651264 4096 4096 NT_STATUS_OK
ReadX 10452 655360 61440 61440 NT_STATUS_OK
ReadX 10452 716800 4096 4096 NT_STATUS_OK
ReadX 10452 720896 61440 61440 NT_STATUS_OK
ReadX 10452 782336 4096 4096 NT_STATUS_OK
ReadX 10452 786432 61440 61440 NT_STATUS_OK
ReadX 10452 847872 4096 4096 NT_STATUS_OK
ReadX 10452 851968 61440 61440 NT_STATUS_OK
ReadX 10452 913408 4096 4096 NT_STATUS_OK
ReadX 10452 917504 61440 61440 NT_STATUS_OK
ReadX 10452 978944 4096 4096 NT_STATUS_OK
ReadX 10452 983040 61440 61440 NT_STATUS_OK
ReadX 10452 1044480 4096 4096 NT_STATUS_OK
ReadX 10452 1048576 61440 61440 NT_STATUS_OK
ReadX 10452 1110016 4096 4096 NT_STATUS_OK
ReadX 10452 1114112 61440 61440 NT_STATUS_OK
ReadX 10452 1175552 4096 4096 NT_STATUS_OK
ReadX 10452 1179648 61440 61440 NT_STATUS_OK
ReadX 10452 1241088 4096 4096 NT_STATUS_OK
ReadX 10452 1245184 61440 61440 NT_STATUS_OK
ReadX 10452 1306624 4096 4096 NT_STATUS_OK
ReadX 10452 1310720 61440 61440 NT_STATUS_OK
ReadX 10452 1372160 4096 4096 NT_STATUS_OK
ReadX 10452 1376256 61440 61440 NT_STATUS_OK
ReadX 10452 1437696 4096 4096 NT_STATUS_OK
ReadX 10452 1441792 61440 61440 NT_STATUS_OK
ReadX 10452 1503232 4096 4096 NT_STATUS_OK
ReadX 10452 1507328 61440 61440 NT_STATUS_OK
ReadX 10452 1568768 4096 4096 NT_STATUS_OK
ReadX 10452 1572864 61440 61440 NT_STATUS_OK
ReadX 10452 1634304 4096 4096 NT_STATUS_OK
ReadX 10452 1638400 61440 61440 NT_STATUS_OK
ReadX 10452 1699840 4096 4096 NT_STATUS_OK
ReadX 10452 1703936 61440 61440 NT_STATUS_OK
ReadX 10452 1765376 4096 4096 NT_STATUS_OK
ReadX 10452 1769472 61440 61440 NT_STATUS_OK
ReadX 10452 1830912 4096 4096 NT_STATUS_OK
ReadX 10452 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10454 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 1005 NT_STATUS_OK
ReadX 10454 2156 24 24 NT_STATUS_OK
ReadX 10454 2139 276 276 NT_STATUS_OK
ReadX 10454 2136 14 14 NT_STATUS_OK
ReadX 10454 2136 7 7 NT_STATUS_OK
ReadX 10454 2138 12 12 NT_STATUS_OK
ReadX 10454 2137 8 8 NT_STATUS_OK
ReadX 10454 2135 15 15 NT_STATUS_OK
ReadX 10454 0 16 16 NT_STATUS_OK
ReadX 10454 16 2048 2048 NT_STATUS_OK
ReadX 10454 2064 2048 2048 NT_STATUS_OK
ReadX 10454 257 2048 2048 NT_STATUS_OK
ReadX 10454 385 2048 2048 NT_STATUS_OK
ReadX 10454 513 2048 2048 NT_STATUS_OK
ReadX 10454 641 2048 2048 NT_STATUS_OK
ReadX 10454 769 2048 2048 NT_STATUS_OK
ReadX 10454 897 2048 2048 NT_STATUS_OK
ReadX 10454 1025 2048 2048 NT_STATUS_OK
ReadX 10454 1153 2048 2048 NT_STATUS_OK
ReadX 10454 1281 2048 2048 NT_STATUS_OK
ReadX 10454 1409 2048 2048 NT_STATUS_OK
ReadX 10454 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10459 NT_STATUS_OK
WriteX 10459 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 258 NT_STATUS_OK
WriteX 10459 0 10575 10575 NT_STATUS_OK
Flush 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10464 NT_STATUS_OK
LockX 10464 2147483538 1 NT_STATUS_OK
UnlockX 10464 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10464 1005 NT_STATUS_OK
ReadX 10464 0 512 512 NT_STATUS_OK
ReadX 10464 512 512 512 NT_STATUS_OK
ReadX 10464 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10464 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10464 1004 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10465 NT_STATUS_OK
QUERY_FILE_INFORMATION 10465 1005 NT_STATUS_OK
ReadX 10465 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10466 NT_STATUS_OK
LockX 10466 2147483538 1 NT_STATUS_OK
UnlockX 10466 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10466 1005 NT_STATUS_OK
ReadX 10466 0 512 512 NT_STATUS_OK
ReadX 10466 512 512 512 NT_STATUS_OK
ReadX 10466 1024 512 512 NT_STATUS_OK
ReadX 10466 288 20 20 NT_STATUS_OK
ReadX 10466 308 2084 2084 NT_STATUS_OK
ReadX 10466 388 2084 2084 NT_STATUS_OK
ReadX 10466 388 2084 2084 NT_STATUS_OK
ReadX 10453 2157 1386 1386 NT_STATUS_OK
ReadX 10466 2472 399 399 NT_STATUS_OK
ReadX 10466 3072 1536 1536 NT_STATUS_OK
ReadX 10466 544 149 149 NT_STATUS_OK
ReadX 10466 693 485 485 NT_STATUS_OK
Close 10466 NT_STATUS_OK
ReadX 10453 2157 4096 4096 NT_STATUS_OK
ReadX 10453 6253 4096 4096 NT_STATUS_OK
ReadX 10453 10349 4096 4096 NT_STATUS_OK
ReadX 10453 14445 4096 4096 NT_STATUS_OK
ReadX 10453 18541 4096 4096 NT_STATUS_OK
ReadX 10453 22637 256 256 NT_STATUS_OK
ReadX 10453 22893 4096 4096 NT_STATUS_OK
ReadX 10453 26989 4096 4096 NT_STATUS_OK
ReadX 10453 31085 4096 4096 NT_STATUS_OK
ReadX 10453 35181 4096 4096 NT_STATUS_OK
ReadX 10453 39277 4096 4096 NT_STATUS_OK
ReadX 10453 43373 4096 4096 NT_STATUS_OK
ReadX 10453 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10453 2157 1024 1024 NT_STATUS_OK
ReadX 10453 1667 4688 4688 NT_STATUS_OK
ReadX 10453 6355 3516 3516 NT_STATUS_OK
ReadX 10453 9871 16384 16384 NT_STATUS_OK
ReadX 10453 26255 3771 3771 NT_STATUS_OK
ReadX 10453 30026 2048 2048 NT_STATUS_OK
ReadX 10453 32074 1024 1024 NT_STATUS_OK
ReadX 10453 33098 6652 6652 NT_STATUS_OK
ReadX 10453 39750 16384 16384 NT_STATUS_OK
ReadX 10453 56134 10496 10496 NT_STATUS_OK
ReadX 10453 66630 1784 1784 NT_STATUS_OK
ReadX 10453 68414 90 90 NT_STATUS_OK
ReadX 10453 68504 273 273 NT_STATUS_OK
ReadX 10453 68777 1600 1600 NT_STATUS_OK
ReadX 10453 70377 640 640 NT_STATUS_OK
ReadX 10453 71017 1280 1280 NT_STATUS_OK
ReadX 10453 72297 8464 8464 NT_STATUS_OK
ReadX 10453 80761 158 158 NT_STATUS_OK
ReadX 10453 80919 912 912 NT_STATUS_OK
ReadX 10453 81831 1980 1980 NT_STATUS_OK
ReadX 10453 83811 2256 2256 NT_STATUS_OK
ReadX 10453 86067 400 400 NT_STATUS_OK
ReadX 10453 86467 252 252 NT_STATUS_OK
ReadX 10453 86719 42 42 NT_STATUS_OK
ReadX 10453 86761 725 725 NT_STATUS_OK
ReadX 10453 2009 512 512 NT_STATUS_OK
ReadX 10453 3895 9 9 NT_STATUS_OK
ReadX 10453 3781 46 46 NT_STATUS_OK
ReadX 10453 4059 92 92 NT_STATUS_OK
ReadX 10453 3781 92 92 NT_STATUS_OK
ReadX 10453 3986 184 184 NT_STATUS_OK
ReadX 10453 3987 16384 16384 NT_STATUS_OK
ReadX 10453 3902 16384 16384 NT_STATUS_OK
ReadX 10453 3781 10240 10240 NT_STATUS_OK
ReadX 10453 3821 16384 16384 NT_STATUS_OK
ReadX 10453 3891 935 935 NT_STATUS_OK
ReadX 10453 4060 10240 10240 NT_STATUS_OK
ReadX 10453 4059 184 184 NT_STATUS_OK
ReadX 10453 256 184 184 NT_STATUS_OK
ReadX 10453 256 1026 1026 NT_STATUS_OK
ReadX 10453 3901 326 326 NT_STATUS_OK
ReadX 10453 3899 652 652 NT_STATUS_OK
ReadX 10453 256 2 2 NT_STATUS_OK
ReadX 10453 258 4948 4948 NT_STATUS_OK
Close 10453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10468 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10471 NT_STATUS_OK
WriteX 10471 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10471 258 NT_STATUS_OK
WriteX 10471 0 65536 65536 NT_STATUS_OK
WriteX 10471 65536 65536 65536 NT_STATUS_OK
WriteX 10471 131072 65536 65536 NT_STATUS_OK
WriteX 10471 196608 65536 65536 NT_STATUS_OK
WriteX 10471 262144 65536 65536 NT_STATUS_OK
WriteX 10471 327680 65536 65536 NT_STATUS_OK
WriteX 10471 393216 65536 65536 NT_STATUS_OK
WriteX 10471 458752 65536 65536 NT_STATUS_OK
WriteX 10471 524288 65536 65536 NT_STATUS_OK
WriteX 10471 589824 35257 35257 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10476 NT_STATUS_OK
WriteX 10476 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10476 258 NT_STATUS_OK
WriteX 10476 0 65536 65536 NT_STATUS_OK
WriteX 10476 65536 65536 65536 NT_STATUS_OK
WriteX 10476 131072 65536 65536 NT_STATUS_OK
WriteX 10476 196608 65536 65536 NT_STATUS_OK
WriteX 10476 262144 65536 65536 NT_STATUS_OK
WriteX 10476 327680 65536 65536 NT_STATUS_OK
WriteX 10476 393216 65536 65536 NT_STATUS_OK
WriteX 10476 458752 65536 65536 NT_STATUS_OK
WriteX 10476 524288 65536 65536 NT_STATUS_OK
WriteX 10476 589824 57598 57598 NT_STATUS_OK
Close 10476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10478 NT_STATUS_OK
WriteX 10478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 258 NT_STATUS_OK
WriteX 10478 0 4112 4112 NT_STATUS_OK
WriteX 10478 0 12543 12543 NT_STATUS_OK
Flush 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10480 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10484 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
ReadX 10484 1938 24 24 NT_STATUS_OK
ReadX 10484 1920 276 276 NT_STATUS_OK
ReadX 10484 1918 14 14 NT_STATUS_OK
ReadX 10484 1918 7 7 NT_STATUS_OK
ReadX 10484 1919 12 12 NT_STATUS_OK
ReadX 10484 1919 8 8 NT_STATUS_OK
ReadX 10484 1917 15 15 NT_STATUS_OK
ReadX 10484 0 16 16 NT_STATUS_OK
ReadX 10484 16 2048 2048 NT_STATUS_OK
ReadX 10484 2064 2048 2048 NT_STATUS_OK
ReadX 10484 257 2048 2048 NT_STATUS_OK
ReadX 10484 385 2048 2048 NT_STATUS_OK
ReadX 10484 513 2048 2048 NT_STATUS_OK
ReadX 10484 641 2048 2048 NT_STATUS_OK
ReadX 10484 769 2048 2048 NT_STATUS_OK
ReadX 10484 897 2048 2048 NT_STATUS_OK
ReadX 10484 1025 2048 2048 NT_STATUS_OK
ReadX 10484 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10486 NT_STATUS_OK
Close 10486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10489 NT_STATUS_OK
WriteX 10489 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 258 NT_STATUS_OK
WriteX 10489 0 11588 11588 NT_STATUS_OK
Flush 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10490 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10494 NT_STATUS_OK
WriteX 10494 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 258 NT_STATUS_OK
WriteX 10494 0 11615 11615 NT_STATUS_OK
Flush 10494 NT_STATUS_OK
Close 10494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10496 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10503 NT_STATUS_OK
WriteX 10503 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10503 258 NT_STATUS_OK
WriteX 10503 0 65536 65536 NT_STATUS_OK
WriteX 10503 65536 16050 16050 NT_STATUS_OK
Close 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10483 1939 64 64 NT_STATUS_OK
ReadX 10483 128 248 248 NT_STATUS_OK
ReadX 10483 128 568 568 NT_STATUS_OK
ReadX 10483 3872 1536 1536 NT_STATUS_OK
ReadX 10483 3456 2560 2560 NT_STATUS_OK
ReadX 10483 3136 512 512 NT_STATUS_OK
ReadX 10483 2880 4096 4096 NT_STATUS_OK
ReadX 10483 3264 3072 3072 NT_STATUS_OK
ReadX 10483 320 4096 4096 NT_STATUS_OK
ReadX 10483 1024 4096 4096 NT_STATUS_OK
ReadX 10483 3616 4096 4096 NT_STATUS_OK
ReadX 10483 1939 64 64 NT_STATUS_OK
ReadX 10483 128 248 248 NT_STATUS_OK
ReadX 10483 128 608 608 NT_STATUS_OK
ReadX 10483 2858 1024 1024 NT_STATUS_OK
ReadX 10483 2810 4096 4096 NT_STATUS_OK
ReadX 10483 2826 4096 4096 NT_STATUS_OK
ReadX 10483 2580 2048 2048 NT_STATUS_OK
ReadX 10483 2800 2560 2560 NT_STATUS_OK
ReadX 10483 2100 4096 4096 NT_STATUS_OK
ReadX 10483 2084 4096 4096 NT_STATUS_OK
ReadX 10483 868 4096 4096 NT_STATUS_OK
ReadX 10483 2324 4096 4096 NT_STATUS_OK
ReadX 10483 884 4096 4096 NT_STATUS_OK
ReadX 10483 2604 1024 1024 NT_STATUS_OK
ReadX 10483 580 4096 4096 NT_STATUS_OK
ReadX 10483 596 4096 4096 NT_STATUS_OK
ReadX 10483 2752 4096 4096 NT_STATUS_OK
ReadX 10483 2842 1024 1024 NT_STATUS_OK
ReadX 10483 660 4096 4096 NT_STATUS_OK
ReadX 10483 2720 4096 4096 NT_STATUS_OK
ReadX 10483 2736 4096 4096 NT_STATUS_OK
ReadX 10483 628 4096 4096 NT_STATUS_OK
ReadX 10483 2704 4096 4096 NT_STATUS_OK
ReadX 10483 1556 4096 4096 NT_STATUS_OK
ReadX 10483 576 4096 4096 NT_STATUS_OK
ReadX 10483 3168 1536 1536 NT_STATUS_OK
ReadX 10483 832 4096 4096 NT_STATUS_OK
ReadX 10483 1088 4096 4096 NT_STATUS_OK
ReadX 10483 1344 4096 4096 NT_STATUS_OK
ReadX 10483 1600 4096 4096 NT_STATUS_OK
ReadX 10483 1856 4096 4096 NT_STATUS_OK
ReadX 10483 2112 4096 4096 NT_STATUS_OK
ReadX 10483 1892 4096 4096 NT_STATUS_OK
ReadX 10483 820 4096 4096 NT_STATUS_OK
ReadX 10483 788 4096 4096 NT_STATUS_OK
ReadX 10483 1604 4096 4096 NT_STATUS_OK
ReadX 10483 3648 4096 4096 NT_STATUS_OK
ReadX 10483 2608 4096 4096 NT_STATUS_OK
ReadX 10483 548 4096 4096 NT_STATUS_OK
ReadX 10483 740 4096 4096 NT_STATUS_OK
ReadX 10483 1344 4096 4096 NT_STATUS_OK
ReadX 10483 3392 4096 4096 NT_STATUS_OK
ReadX 10483 3904 4096 4096 NT_STATUS_OK
ReadX 10483 644 4096 4096 NT_STATUS_OK
ReadX 10483 676 4096 4096 NT_STATUS_OK
ReadX 10483 2688 4096 4096 NT_STATUS_OK
ReadX 10483 320 4096 4096 NT_STATUS_OK
ReadX 10483 900 4096 4096 NT_STATUS_OK
ReadX 10483 1908 4096 4096 NT_STATUS_OK
ReadX 10483 852 4096 4096 NT_STATUS_OK
ReadX 10483 724 4096 4096 NT_STATUS_OK
ReadX 10483 2292 4096 4096 NT_STATUS_OK
ReadX 10483 612 4096 4096 NT_STATUS_OK
ReadX 10483 388 4096 4096 NT_STATUS_OK
ReadX 10483 2368 4096 4096 NT_STATUS_OK
ReadX 10483 2624 4096 4096 NT_STATUS_OK
ReadX 10483 500 4096 4096 NT_STATUS_OK
ReadX 10483 356 4096 4096 NT_STATUS_OK
ReadX 10483 1024 4096 4096 NT_STATUS_OK
ReadX 10483 576 4096 4096 NT_STATUS_OK
ReadX 10483 340 4096 4096 NT_STATUS_OK
ReadX 10483 420 4096 4096 NT_STATUS_OK
ReadX 10483 1600 4096 4096 NT_STATUS_OK
ReadX 10483 404 4096 4096 NT_STATUS_OK
ReadX 10483 1428 4096 4096 NT_STATUS_OK
ReadX 10483 2656 4096 4096 NT_STATUS_OK
ReadX 10483 2624 4096 4096 NT_STATUS_OK
ReadX 10483 452 4096 4096 NT_STATUS_OK
ReadX 10483 692 4096 4096 NT_STATUS_OK
ReadX 10483 564 4096 4096 NT_STATUS_OK
ReadX 10483 372 4096 4096 NT_STATUS_OK
ReadX 10483 468 4096 4096 NT_STATUS_OK
ReadX 10483 484 4096 4096 NT_STATUS_OK
ReadX 10483 1088 4096 4096 NT_STATUS_OK
ReadX 10483 1924 4096 4096 NT_STATUS_OK
ReadX 10483 2768 4096 4096 NT_STATUS_OK
ReadX 10483 832 4096 4096 NT_STATUS_OK
ReadX 10483 836 4096 4096 NT_STATUS_OK
ReadX 10483 1856 4096 4096 NT_STATUS_OK
ReadX 10483 2640 4096 4096 NT_STATUS_OK
ReadX 10483 436 4096 4096 NT_STATUS_OK
ReadX 10483 1828 4096 4096 NT_STATUS_OK
ReadX 10483 804 4096 4096 NT_STATUS_OK
ReadX 10483 1860 4096 4096 NT_STATUS_OK
ReadX 10483 1812 4096 4096 NT_STATUS_OK
ReadX 10483 756 4096 4096 NT_STATUS_OK
ReadX 10483 1636 4096 4096 NT_STATUS_OK
ReadX 10483 772 4096 4096 NT_STATUS_OK
ReadX 10483 2036 4096 4096 NT_STATUS_OK
ReadX 10483 1220 4096 4096 NT_STATUS_OK
ReadX 10483 1652 4096 4096 NT_STATUS_OK
ReadX 10483 2588 4096 4096 NT_STATUS_OK
ReadX 10483 916 4096 4096 NT_STATUS_OK
ReadX 10483 260 4096 4096 NT_STATUS_OK
ReadX 10483 932 4096 4096 NT_STATUS_OK
ReadX 10483 2624 4096 4096 NT_STATUS_OK
ReadX 10483 308 4096 4096 NT_STATUS_OK
ReadX 10483 292 4096 4096 NT_STATUS_OK
ReadX 10483 1140 4096 4096 NT_STATUS_OK
ReadX 10483 276 4096 4096 NT_STATUS_OK
ReadX 10483 2020 4096 4096 NT_STATUS_OK
ReadX 10483 2880 4096 4096 NT_STATUS_OK
ReadX 10483 516 4096 4096 NT_STATUS_OK
ReadX 10483 1844 4096 4096 NT_STATUS_OK
ReadX 10483 1124 4096 4096 NT_STATUS_OK
ReadX 10483 3136 4096 4096 NT_STATUS_OK
ReadX 10483 324 4096 4096 NT_STATUS_OK
ReadX 10483 1156 4096 4096 NT_STATUS_OK
ReadX 10483 1172 4096 4096 NT_STATUS_OK
ReadX 10483 2112 4096 4096 NT_STATUS_OK
ReadX 10483 2368 4096 4096 NT_STATUS_OK
ReadX 10483 964 4096 4096 NT_STATUS_OK
ReadX 10483 980 4096 4096 NT_STATUS_OK
ReadX 10483 1012 4096 4096 NT_STATUS_OK
ReadX 10483 532 4096 4096 NT_STATUS_OK
ReadX 10483 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10483 1620 4096 4096 NT_STATUS_OK
ReadX 10483 1604 4096 4096 NT_STATUS_OK
ReadX 10483 2116 4096 4096 NT_STATUS_OK
ReadX 10483 2132 4096 4096 NT_STATUS_OK
ReadX 10483 2148 4096 4096 NT_STATUS_OK
ReadX 10483 2276 4096 4096 NT_STATUS_OK
ReadX 10483 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10505 NT_STATUS_OK
Close 10505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10508 NT_STATUS_OK
QUERY_FILE_INFORMATION 10463 1004 NT_STATUS_OK
Close 10463 NT_STATUS_OK
WriteX 10508 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10508 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10465 1004 NT_STATUS_OK
Close 10465 NT_STATUS_OK
WriteX 10508 0 65536 65536 NT_STATUS_OK
WriteX 10508 65536 64850 64850 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10510 NT_STATUS_OK
WriteX 10510 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 258 NT_STATUS_OK
ReadX 10483 2068 4096 4096 NT_STATUS_OK
ReadX 10483 1588 4096 4096 NT_STATUS_OK
ReadX 10483 1572 4096 4096 NT_STATUS_OK
WriteX 10510 0 18630 18630 NT_STATUS_OK
Flush 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10483 612 4096 4096 NT_STATUS_OK
ReadX 10483 564 4096 4096 NT_STATUS_OK
ReadX 10483 1876 4096 4096 NT_STATUS_OK
ReadX 10483 628 4096 4096 NT_STATUS_OK
ReadX 10483 740 4096 4096 NT_STATUS_OK
ReadX 10483 724 4096 4096 NT_STATUS_OK
ReadX 10483 644 4096 4096 NT_STATUS_OK
ReadX 10483 2324 4096 4096 NT_STATUS_OK
ReadX 10483 660 4096 4096 NT_STATUS_OK
ReadX 10483 852 4096 4096 NT_STATUS_OK
ReadX 10483 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10483 2368 4096 4096 NT_STATUS_OK
ReadX 10483 1024 4096 4096 NT_STATUS_OK
ReadX 10483 320 4096 4096 NT_STATUS_OK
ReadX 10483 580 4096 4096 NT_STATUS_OK
ReadX 10483 3136 512 512 NT_STATUS_OK
ReadX 10483 2880 4096 4096 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 61440 4096 4096 NT_STATUS_OK
ReadX 10515 126976 4096 4096 NT_STATUS_OK
WriteX 10515 0 65536 65536 NT_STATUS_OK
WriteX 10515 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 61440 4096 4096 NT_STATUS_OK
ReadX 10516 126976 4096 4096 NT_STATUS_OK
ReadX 10516 192512 4096 4096 NT_STATUS_OK
ReadX 10516 258048 4096 4096 NT_STATUS_OK
WriteX 10516 0 65536 65536 NT_STATUS_OK
WriteX 10516 65536 65536 65536 NT_STATUS_OK
WriteX 10516 131072 65536 65536 NT_STATUS_OK
WriteX 10516 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 61440 4096 4096 NT_STATUS_OK
ReadX 10517 126976 4096 4096 NT_STATUS_OK
ReadX 10517 192512 4096 4096 NT_STATUS_OK
ReadX 10517 258048 4096 4096 NT_STATUS_OK
ReadX 10517 323584 4096 4096 NT_STATUS_OK
ReadX 10517 389120 4096 4096 NT_STATUS_OK
ReadX 10517 454656 4096 4096 NT_STATUS_OK
ReadX 10517 520192 4096 4096 NT_STATUS_OK
WriteX 10517 0 65536 65536 NT_STATUS_OK
WriteX 10517 65536 65536 65536 NT_STATUS_OK
WriteX 10517 131072 65536 65536 NT_STATUS_OK
WriteX 10517 196608 65536 65536 NT_STATUS_OK
WriteX 10517 262144 65536 65536 NT_STATUS_OK
WriteX 10517 327680 65536 65536 NT_STATUS_OK
WriteX 10517 393216 65536 65536 NT_STATUS_OK
WriteX 10517 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10519 NT_STATUS_OK
Close 10519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10520 NT_STATUS_OK
WriteX 10520 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10520 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10518 0 8192 8192 NT_STATUS_OK
Flush 10518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10518 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10518 0 8192 8192 NT_STATUS_OK
Flush 10518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10518 0 8192 8192 NT_STATUS_OK
Flush 10518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10518 0 8192 8192 NT_STATUS_OK
Flush 10518 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10522 NT_STATUS_OK
Close 10522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10515 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10525 NT_STATUS_OK
WriteX 10525 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10525 258 NT_STATUS_OK
WriteX 10525 0 62591 62591 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10530 NT_STATUS_OK
WriteX 10530 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 10845 10845 NT_STATUS_OK
Close 10530 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10532 NT_STATUS_OK
Close 10532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10535 NT_STATUS_OK
WriteX 10535 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 258 NT_STATUS_OK
WriteX 10535 0 30118 30118 NT_STATUS_OK
Close 10535 NT_STATUS_OK
WriteX 10518 0 4096 4096 NT_STATUS_OK
WriteX 10520 0 64 64 NT_STATUS_OK
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 61440 61440 NT_STATUS_OK
ReadX 10537 61440 4096 4096 NT_STATUS_OK
ReadX 10537 65536 61440 61440 NT_STATUS_OK
ReadX 10537 126976 4096 4096 NT_STATUS_OK
ReadX 10537 131072 61440 61440 NT_STATUS_OK
ReadX 10537 192512 4096 4096 NT_STATUS_OK
ReadX 10537 196608 61440 61440 NT_STATUS_OK
ReadX 10537 258048 4096 4096 NT_STATUS_OK
ReadX 10537 262144 61440 61440 NT_STATUS_OK
ReadX 10537 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10538 NT_STATUS_OK
ReadX 10538 0 61440 61440 NT_STATUS_OK
ReadX 10538 61440 4096 4096 NT_STATUS_OK
ReadX 10538 65536 61440 61440 NT_STATUS_OK
ReadX 10538 126976 4096 4096 NT_STATUS_OK
ReadX 10538 131072 61440 61440 NT_STATUS_OK
ReadX 10538 192512 4096 4096 NT_STATUS_OK
ReadX 10538 196608 61440 61440 NT_STATUS_OK
ReadX 10538 258048 4096 4096 NT_STATUS_OK
ReadX 10538 262144 61440 61440 NT_STATUS_OK
ReadX 10538 323584 4096 4096 NT_STATUS_OK
ReadX 10538 327680 61440 61440 NT_STATUS_OK
ReadX 10538 389120 4096 4096 NT_STATUS_OK
ReadX 10538 393216 61440 61440 NT_STATUS_OK
ReadX 10538 454656 4096 4096 NT_STATUS_OK
ReadX 10538 458752 61440 61440 NT_STATUS_OK
ReadX 10538 520192 4096 4096 NT_STATUS_OK
ReadX 10538 524288 61440 61440 NT_STATUS_OK
ReadX 10538 585728 4096 4096 NT_STATUS_OK
ReadX 10538 589824 61440 61440 NT_STATUS_OK
ReadX 10538 651264 4096 4096 NT_STATUS_OK
ReadX 10538 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10539 NT_STATUS_OK
ReadX 10539 0 61440 61440 NT_STATUS_OK
ReadX 10539 61440 4096 4096 NT_STATUS_OK
ReadX 10539 65536 61440 61440 NT_STATUS_OK
ReadX 10539 126976 4096 4096 NT_STATUS_OK
ReadX 10539 131072 61440 61440 NT_STATUS_OK
ReadX 10539 192512 4096 4096 NT_STATUS_OK
ReadX 10539 196608 61440 61440 NT_STATUS_OK
ReadX 10539 258048 4096 4096 NT_STATUS_OK
ReadX 10539 262144 61440 61440 NT_STATUS_OK
ReadX 10539 323584 4096 4096 NT_STATUS_OK
ReadX 10539 327680 61440 61440 NT_STATUS_OK
ReadX 10539 389120 4096 4096 NT_STATUS_OK
ReadX 10539 393216 61440 61440 NT_STATUS_OK
ReadX 10539 454656 4096 4096 NT_STATUS_OK
ReadX 10539 458752 61440 61440 NT_STATUS_OK
ReadX 10539 520192 4096 4096 NT_STATUS_OK
ReadX 10539 524288 61440 61440 NT_STATUS_OK
ReadX 10539 585728 4096 4096 NT_STATUS_OK
ReadX 10539 589824 61440 61440 NT_STATUS_OK
ReadX 10539 651264 4096 4096 NT_STATUS_OK
ReadX 10539 655360 61440 61440 NT_STATUS_OK
ReadX 10539 716800 4096 4096 NT_STATUS_OK
ReadX 10539 720896 61440 61440 NT_STATUS_OK
ReadX 10539 782336 4096 4096 NT_STATUS_OK
ReadX 10539 786432 61440 61440 NT_STATUS_OK
ReadX 10539 847872 4096 4096 NT_STATUS_OK
ReadX 10539 851968 61440 61440 NT_STATUS_OK
ReadX 10539 913408 4096 4096 NT_STATUS_OK
ReadX 10539 917504 61440 61440 NT_STATUS_OK
ReadX 10539 978944 4096 4096 NT_STATUS_OK
ReadX 10539 983040 61440 61440 NT_STATUS_OK
ReadX 10539 1044480 4096 4096 NT_STATUS_OK
ReadX 10539 1048576 61440 61440 NT_STATUS_OK
ReadX 10539 1110016 4096 4096 NT_STATUS_OK
ReadX 10539 1114112 61440 61440 NT_STATUS_OK
ReadX 10539 1175552 4096 4096 NT_STATUS_OK
ReadX 10539 1179648 61440 61440 NT_STATUS_OK
ReadX 10539 1241088 4096 4096 NT_STATUS_OK
ReadX 10539 1245184 61440 61440 NT_STATUS_OK
ReadX 10539 1306624 4096 4096 NT_STATUS_OK
ReadX 10539 1310720 61440 61440 NT_STATUS_OK
ReadX 10539 1372160 4096 4096 NT_STATUS_OK
ReadX 10539 1376256 61440 61440 NT_STATUS_OK
ReadX 10539 1437696 4096 4096 NT_STATUS_OK
ReadX 10539 1441792 61440 61440 NT_STATUS_OK
ReadX 10539 1503232 4096 4096 NT_STATUS_OK
ReadX 10539 1507328 61440 61440 NT_STATUS_OK
ReadX 10539 1568768 4096 4096 NT_STATUS_OK
ReadX 10539 1572864 61440 61440 NT_STATUS_OK
ReadX 10539 1634304 4096 4096 NT_STATUS_OK
ReadX 10539 1638400 61440 61440 NT_STATUS_OK
ReadX 10539 1699840 4096 4096 NT_STATUS_OK
ReadX 10539 1703936 61440 61440 NT_STATUS_OK
ReadX 10539 1765376 4096 4096 NT_STATUS_OK
ReadX 10539 1769472 61440 61440 NT_STATUS_OK
ReadX 10539 1830912 4096 4096 NT_STATUS_OK
ReadX 10539 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10540 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10537 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
ReadX 10544 4096 4096 4096 NT_STATUS_OK
ReadX 10544 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10545 NT_STATUS_OK
Close 10545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10548 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10549 NT_STATUS_OK
Close 10549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10551 NT_STATUS_OK
ReadX 10551 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 8192 8192 NT_STATUS_OK
ReadX 10552 8192 8192 8192 NT_STATUS_OK
ReadX 10552 16384 8192 8192 NT_STATUS_OK
ReadX 10552 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10557 NT_STATUS_OK
WriteX 10557 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
WriteX 10557 0 10438 10438 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10558 NT_STATUS_OK
Close 10558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10561 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10563 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10565 NT_STATUS_OK
Close 10565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
ReadX 10566 4096 4096 4096 NT_STATUS_OK
ReadX 10566 8192 4096 4096 NT_STATUS_OK
ReadX 10566 12288 8192 8192 NT_STATUS_OK
ReadX 10566 20480 8192 8192 NT_STATUS_OK
ReadX 10566 28672 8192 8192 NT_STATUS_OK
ReadX 10566 36864 8192 8192 NT_STATUS_OK
ReadX 10566 45056 8192 8192 NT_STATUS_OK
ReadX 10566 53248 8192 8192 NT_STATUS_OK
ReadX 10566 61440 8192 8192 NT_STATUS_OK
ReadX 10566 69632 8192 8192 NT_STATUS_OK
ReadX 10566 77824 8192 8192 NT_STATUS_OK
ReadX 10566 86016 8192 8192 NT_STATUS_OK
ReadX 10566 94208 8192 8192 NT_STATUS_OK
ReadX 10566 102400 8192 8192 NT_STATUS_OK
ReadX 10566 110592 8192 8192 NT_STATUS_OK
ReadX 10566 118784 8192 8192 NT_STATUS_OK
ReadX 10566 126976 8192 8192 NT_STATUS_OK
ReadX 10566 135168 8192 8192 NT_STATUS_OK
ReadX 10566 143360 8192 8192 NT_STATUS_OK
ReadX 10566 151552 8192 8192 NT_STATUS_OK
ReadX 10566 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10571 NT_STATUS_OK
WriteX 10571 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10571 258 NT_STATUS_OK
WriteX 10571 0 28489 28489 NT_STATUS_OK
Close 10571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10574 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 8192 8192 NT_STATUS_OK
ReadX 10578 8192 8192 8192 NT_STATUS_OK
ReadX 10578 16384 8192 8192 NT_STATUS_OK
ReadX 10578 24576 8192 8192 NT_STATUS_OK
ReadX 10578 32768 16384 16384 NT_STATUS_OK
ReadX 10578 49152 8192 8192 NT_STATUS_OK
ReadX 10578 57344 8192 8192 NT_STATUS_OK
ReadX 10578 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10580 NT_STATUS_OK
Close 10580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10583 NT_STATUS_OK
WriteX 10583 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10583 258 NT_STATUS_OK
WriteX 10583 0 29253 29253 NT_STATUS_OK
Close 10583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10590 NT_STATUS_OK
WriteX 10590 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 258 NT_STATUS_OK
WriteX 10590 0 30183 30183 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10591 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10593 NT_STATUS_OK
WriteX 10593 0 510 510 NT_STATUS_OK
WriteX 10593 510 512 512 NT_STATUS_OK
WriteX 10593 1022 510 510 NT_STATUS_OK
WriteX 10593 1532 510 510 NT_STATUS_OK
WriteX 10593 2042 168 168 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10594 NT_STATUS_OK
Close 10594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
WriteX 10596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10597 NT_STATUS_OK
ReadX 10597 61440 4096 4096 NT_STATUS_OK
ReadX 10597 126976 4096 4096 NT_STATUS_OK
WriteX 10597 0 65536 65536 NT_STATUS_OK
WriteX 10597 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 61440 4096 4096 NT_STATUS_OK
ReadX 10598 126976 4096 4096 NT_STATUS_OK
ReadX 10598 192512 4096 4096 NT_STATUS_OK
ReadX 10598 258048 4096 4096 NT_STATUS_OK
WriteX 10598 0 65536 65536 NT_STATUS_OK
WriteX 10598 65536 65536 65536 NT_STATUS_OK
WriteX 10598 131072 65536 65536 NT_STATUS_OK
WriteX 10598 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10599 NT_STATUS_OK
ReadX 10599 61440 4096 4096 NT_STATUS_OK
ReadX 10599 126976 4096 4096 NT_STATUS_OK
ReadX 10599 192512 4096 4096 NT_STATUS_OK
ReadX 10599 258048 4096 4096 NT_STATUS_OK
ReadX 10599 323584 4096 4096 NT_STATUS_OK
ReadX 10599 389120 4096 4096 NT_STATUS_OK
ReadX 10599 454656 4096 4096 NT_STATUS_OK
ReadX 10599 520192 4096 4096 NT_STATUS_OK
WriteX 10599 0 65536 65536 NT_STATUS_OK
WriteX 10599 65536 65536 65536 NT_STATUS_OK
WriteX 10599 131072 65536 65536 NT_STATUS_OK
WriteX 10599 196608 65536 65536 NT_STATUS_OK
WriteX 10599 262144 65536 65536 NT_STATUS_OK
WriteX 10599 327680 65536 65536 NT_STATUS_OK
WriteX 10599 393216 65536 65536 NT_STATUS_OK
WriteX 10599 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10599 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10606 NT_STATUS_OK
Close 10606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10618 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10629 NT_STATUS_OK
Close 10629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10634 NT_STATUS_OK
Close 10634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10644 NT_STATUS_OK
Close 10644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10649 NT_STATUS_OK
Close 10649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10654 NT_STATUS_OK
Close 10654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10662 NT_STATUS_OK
Close 10662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10668 NT_STATUS_OK
WriteX 10668 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10668 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10668 0 65536 65536 NT_STATUS_OK
WriteX 10668 65536 65536 65536 NT_STATUS_OK
WriteX 10668 131072 65536 65536 NT_STATUS_OK
WriteX 10668 196608 65536 65536 NT_STATUS_OK
WriteX 10668 262144 26634 26634 NT_STATUS_OK
Close 10668 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10674 NT_STATUS_OK
Close 10674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 4096 4096 NT_STATUS_OK
Close 10675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10676 NT_STATUS_OK
ReadX 10676 0 4096 4096 NT_STATUS_OK
ReadX 10676 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10677 NT_STATUS_OK
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10676 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10681 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10684 NT_STATUS_OK
Close 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10686 NT_STATUS_OK
Close 10686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10693 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10695 NT_STATUS_OK
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10699 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10714 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10724 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10741 NT_STATUS_OK
Close 10741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10743 NT_STATUS_OK
Close 10743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 4096 4096 NT_STATUS_OK
Close 10755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10756 NT_STATUS_OK
ReadX 10756 0 4096 4096 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10767 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
Close 10770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10771 NT_STATUS_OK
ReadX 10771 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10800 0 4096 4096 NT_STATUS_OK
Close 10800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
ReadX 10802 4096 4096 4096 NT_STATUS_OK
ReadX 10802 8192 4096 4096 NT_STATUS_OK
ReadX 10802 12288 4096 4096 NT_STATUS_OK
ReadX 10802 16384 4096 4096 NT_STATUS_OK
ReadX 10802 20480 4096 4096 NT_STATUS_OK
ReadX 10802 24576 4096 4096 NT_STATUS_OK
ReadX 10802 28672 4096 4096 NT_STATUS_OK
ReadX 10802 32768 4096 4096 NT_STATUS_OK
ReadX 10802 36864 4096 4096 NT_STATUS_OK
ReadX 10802 40960 4096 4096 NT_STATUS_OK
ReadX 10802 45056 4096 4096 NT_STATUS_OK
ReadX 10802 49152 4096 4096 NT_STATUS_OK
ReadX 10802 53248 4096 4096 NT_STATUS_OK
ReadX 10802 57344 4096 4096 NT_STATUS_OK
ReadX 10802 61440 4096 4096 NT_STATUS_OK
ReadX 10802 65536 4096 4096 NT_STATUS_OK
ReadX 10802 69632 4096 4096 NT_STATUS_OK
ReadX 10802 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10803 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 65536 65536 NT_STATUS_OK
WriteX 10808 65536 19979 19979 NT_STATUS_OK
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Flush 10809 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Flush 10809 NT_STATUS_OK
QUERY_FILE_INFORMATION 10809 1004 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Flush 10809 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Flush 10809 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Flush 10809 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Flush 10809 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 0 4096 4096 NT_STATUS_OK
Close 10813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10814 1004 NT_STATUS_OK
WriteX 10814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10815 NT_STATUS_OK
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10820 NT_STATUS_OK
WriteX 10820 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10820 258 NT_STATUS_OK
WriteX 10820 0 65536 65536 NT_STATUS_OK
WriteX 10820 65536 17654 17654 NT_STATUS_OK
Close 10820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
QUERY_FILE_INFORMATION 10821 1004 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10822 NT_STATUS_OK
SET_FILE_INFORMATION 10822 1004 NT_STATUS_OK
Close 10822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10824 NT_STATUS_OK
Close 10824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
ReadX 10826 4096 4096 4096 NT_STATUS_OK
ReadX 10826 8192 4096 4096 NT_STATUS_OK
ReadX 10826 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10826 16384 4096 4096 NT_STATUS_OK
ReadX 10826 20480 4096 4096 NT_STATUS_OK
ReadX 10826 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
Close 10827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
Close 10828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10829 1004 NT_STATUS_OK
WriteX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10835 NT_STATUS_OK
WriteX 10835 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10835 258 NT_STATUS_OK
WriteX 10835 0 65536 65536 NT_STATUS_OK
WriteX 10835 65536 19490 19490 NT_STATUS_OK
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
QUERY_FILE_INFORMATION 10836 1004 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
SET_FILE_INFORMATION 10836 1004 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10837 NT_STATUS_OK
SET_FILE_INFORMATION 10837 1004 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10839 NT_STATUS_OK
Close 10839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10841 0 4096 4096 NT_STATUS_OK
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
ReadX 10843 4096 4096 4096 NT_STATUS_OK
ReadX 10843 8192 4096 4096 NT_STATUS_OK
ReadX 10843 12288 4096 4096 NT_STATUS_OK
ReadX 10843 16384 4096 4096 NT_STATUS_OK
ReadX 10843 20480 4096 4096 NT_STATUS_OK
ReadX 10843 24576 4096 4096 NT_STATUS_OK
ReadX 10843 28672 4096 4096 NT_STATUS_OK
ReadX 10843 32768 4096 4096 NT_STATUS_OK
ReadX 10843 36864 4096 4096 NT_STATUS_OK
ReadX 10843 40960 4096 4096 NT_STATUS_OK
ReadX 10843 45056 4096 4096 NT_STATUS_OK
ReadX 10843 49152 4096 4096 NT_STATUS_OK
ReadX 10843 53248 4096 4096 NT_STATUS_OK
ReadX 10843 57344 4096 4096 NT_STATUS_OK
ReadX 10843 61440 4096 4096 NT_STATUS_OK
ReadX 10843 65536 4096 4096 NT_STATUS_OK
ReadX 10843 69632 4096 4096 NT_STATUS_OK
ReadX 10843 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10843 1004 NT_STATUS_OK
WriteX 10843 0 4096 4096 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10844 NT_STATUS_OK
SET_FILE_INFORMATION 10844 1004 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10849 NT_STATUS_OK
WriteX 10849 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10849 258 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 8866 8866 NT_STATUS_OK
Close 10849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 0 4096 4096 NT_STATUS_OK
WriteX 10850 0 4096 4096 NT_STATUS_OK
Flush 10850 NT_STATUS_OK
SET_FILE_INFORMATION 10850 1004 NT_STATUS_OK
WriteX 10850 0 4096 4096 NT_STATUS_OK
Flush 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10854 1004 NT_STATUS_OK
WriteX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10857 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10860 NT_STATUS_OK
WriteX 10860 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
WriteX 10860 0 65536 65536 NT_STATUS_OK
WriteX 10860 65536 9298 9298 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10861 NT_STATUS_OK
ReadX 10861 0 4096 4096 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
Flush 10861 NT_STATUS_OK
SET_FILE_INFORMATION 10861 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
Flush 10861 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10862 NT_STATUS_OK
SET_FILE_INFORMATION 10862 1004 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10863 NT_STATUS_OK
ReadX 10863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10864 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10867 0 4096 4096 NT_STATUS_OK
Close 10867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10868 4096 4096 4096 NT_STATUS_OK
ReadX 10868 8192 4096 4096 NT_STATUS_OK
ReadX 10868 12288 4096 4096 NT_STATUS_OK
ReadX 10868 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 0 4096 4096 NT_STATUS_OK
Close 10869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10870 NT_STATUS_OK
ReadX 10870 0 4096 4096 NT_STATUS_OK
Close 10870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10871 NT_STATUS_OK
ReadX 10871 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10871 1004 NT_STATUS_OK
WriteX 10871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10874 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10877 NT_STATUS_OK
WriteX 10877 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10877 258 NT_STATUS_OK
WriteX 10877 0 65536 65536 NT_STATUS_OK
WriteX 10877 65536 11540 11540 NT_STATUS_OK
Close 10877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10878 NT_STATUS_OK
ReadX 10878 0 4096 4096 NT_STATUS_OK
WriteX 10878 0 4096 4096 NT_STATUS_OK
Flush 10878 NT_STATUS_OK
SET_FILE_INFORMATION 10878 1004 NT_STATUS_OK
WriteX 10878 0 4096 4096 NT_STATUS_OK
Flush 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10879 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 61440 4096 4096 NT_STATUS_OK
ReadX 10883 126976 4096 4096 NT_STATUS_OK
WriteX 10883 0 65536 65536 NT_STATUS_OK
WriteX 10883 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 61440 4096 4096 NT_STATUS_OK
ReadX 10884 126976 4096 4096 NT_STATUS_OK
ReadX 10884 192512 4096 4096 NT_STATUS_OK
ReadX 10884 258048 4096 4096 NT_STATUS_OK
WriteX 10884 0 65536 65536 NT_STATUS_OK
WriteX 10884 65536 65536 65536 NT_STATUS_OK
WriteX 10884 131072 65536 65536 NT_STATUS_OK
WriteX 10884 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 61440 4096 4096 NT_STATUS_OK
ReadX 10885 126976 4096 4096 NT_STATUS_OK
ReadX 10885 192512 4096 4096 NT_STATUS_OK
ReadX 10885 258048 4096 4096 NT_STATUS_OK
ReadX 10885 323584 4096 4096 NT_STATUS_OK
ReadX 10885 389120 4096 4096 NT_STATUS_OK
ReadX 10885 454656 4096 4096 NT_STATUS_OK
ReadX 10885 520192 4096 4096 NT_STATUS_OK
WriteX 10885 0 65536 65536 NT_STATUS_OK
WriteX 10885 65536 65536 65536 NT_STATUS_OK
WriteX 10885 131072 65536 65536 NT_STATUS_OK
WriteX 10885 196608 65536 65536 NT_STATUS_OK
WriteX 10885 262144 65536 65536 NT_STATUS_OK
WriteX 10885 327680 65536 65536 NT_STATUS_OK
WriteX 10885 393216 65536 65536 NT_STATUS_OK
WriteX 10885 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
ReadX 10886 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10887 NT_STATUS_OK
WriteX 10887 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10887 258 NT_STATUS_OK
WriteX 10887 0 53 53 NT_STATUS_OK
Close 10887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10888 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10886 8192 4096 4096 NT_STATUS_OK
ReadX 10886 12288 4096 4096 NT_STATUS_OK
WriteX 10890 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10890 258 NT_STATUS_OK
ReadX 10886 16384 4096 4096 NT_STATUS_OK
ReadX 10886 20480 4096 4096 NT_STATUS_OK
WriteX 10890 0 15360 15360 NT_STATUS_OK
Close 10890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10891 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10891 1004 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10894 4096 4096 4096 NT_STATUS_OK
ReadX 10894 8192 4096 4096 NT_STATUS_OK
ReadX 10894 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
ReadX 10897 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 4096 4096 NT_STATUS_OK
ReadX 10898 4096 4096 4096 NT_STATUS_OK
ReadX 10898 8192 4096 4096 NT_STATUS_OK
Close 10897 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10899 NT_STATUS_OK
WriteX 10899 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10899 258 NT_STATUS_OK
WriteX 10899 0 15360 15360 NT_STATUS_OK
Close 10899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10900 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10900 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10901 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10903 NT_STATUS_OK
ReadX 10903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10904 NT_STATUS_OK
SET_FILE_INFORMATION 10904 1004 NT_STATUS_OK
Close 10904 NT_STATUS_OK
WriteX 10900 0 4096 4096 NT_STATUS_OK
Close 10900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10905 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
ReadX 10907 4096 4096 4096 NT_STATUS_OK
ReadX 10907 8192 4096 4096 NT_STATUS_OK
ReadX 10907 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10907 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10907 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10909 NT_STATUS_OK
WriteX 10909 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
WriteX 10909 0 53 53 NT_STATUS_OK
Close 10909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10908 4096 4096 4096 NT_STATUS_OK
ReadX 10908 8192 4096 4096 NT_STATUS_OK
ReadX 10908 12288 4096 4096 NT_STATUS_OK
WriteX 10912 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 258 NT_STATUS_OK
WriteX 10912 0 12006 12006 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10913 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10913 1004 NT_STATUS_OK
WriteX 10913 0 4096 4096 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10917 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10916 4096 4096 4096 NT_STATUS_OK
ReadX 10916 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10919 NT_STATUS_OK
WriteX 10919 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10919 258 NT_STATUS_OK
WriteX 10919 0 11991 11991 NT_STATUS_OK
Close 10919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10920 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10920 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10921 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10924 NT_STATUS_OK
SET_FILE_INFORMATION 10924 1004 NT_STATUS_OK
Close 10924 NT_STATUS_OK
WriteX 10920 0 4096 4096 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10925 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10928 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10927 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10927 1004 NT_STATUS_OK
ReadX 10927 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10927 1004 NT_STATUS_OK
WriteX 10927 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10927 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10927 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10927 1004 NT_STATUS_OK
Close 10903 NT_STATUS_OK
WriteX 10907 0 19054 19054 NT_STATUS_OK
WriteX 10927 0 12288 12288 NT_STATUS_OK
Close 10923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10930 NT_STATUS_OK
Close 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 61440 61440 NT_STATUS_OK
ReadX 10934 61440 4096 4096 NT_STATUS_OK
ReadX 10934 65536 61440 61440 NT_STATUS_OK
ReadX 10934 126976 4096 4096 NT_STATUS_OK
ReadX 10934 131072 61440 61440 NT_STATUS_OK
ReadX 10934 192512 4096 4096 NT_STATUS_OK
ReadX 10934 196608 61440 61440 NT_STATUS_OK
ReadX 10934 258048 4096 4096 NT_STATUS_OK
ReadX 10934 262144 61440 61440 NT_STATUS_OK
ReadX 10934 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 61440 61440 NT_STATUS_OK
ReadX 10935 61440 4096 4096 NT_STATUS_OK
ReadX 10935 65536 61440 61440 NT_STATUS_OK
ReadX 10935 126976 4096 4096 NT_STATUS_OK
ReadX 10935 131072 61440 61440 NT_STATUS_OK
ReadX 10935 192512 4096 4096 NT_STATUS_OK
ReadX 10935 196608 61440 61440 NT_STATUS_OK
ReadX 10935 258048 4096 4096 NT_STATUS_OK
ReadX 10935 262144 61440 61440 NT_STATUS_OK
ReadX 10935 323584 4096 4096 NT_STATUS_OK
ReadX 10935 327680 61440 61440 NT_STATUS_OK
ReadX 10935 389120 4096 4096 NT_STATUS_OK
ReadX 10935 393216 61440 61440 NT_STATUS_OK
ReadX 10935 454656 4096 4096 NT_STATUS_OK
ReadX 10935 458752 61440 61440 NT_STATUS_OK
ReadX 10935 520192 4096 4096 NT_STATUS_OK
ReadX 10935 524288 61440 61440 NT_STATUS_OK
ReadX 10935 585728 4096 4096 NT_STATUS_OK
ReadX 10935 589824 61440 61440 NT_STATUS_OK
ReadX 10935 651264 4096 4096 NT_STATUS_OK
ReadX 10935 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 61440 61440 NT_STATUS_OK
ReadX 10936 61440 4096 4096 NT_STATUS_OK
ReadX 10936 65536 61440 61440 NT_STATUS_OK
ReadX 10936 126976 4096 4096 NT_STATUS_OK
ReadX 10936 131072 61440 61440 NT_STATUS_OK
ReadX 10936 192512 4096 4096 NT_STATUS_OK
ReadX 10936 196608 61440 61440 NT_STATUS_OK
ReadX 10936 258048 4096 4096 NT_STATUS_OK
ReadX 10936 262144 61440 61440 NT_STATUS_OK
ReadX 10936 323584 4096 4096 NT_STATUS_OK
ReadX 10936 327680 61440 61440 NT_STATUS_OK
ReadX 10936 389120 4096 4096 NT_STATUS_OK
ReadX 10936 393216 61440 61440 NT_STATUS_OK
ReadX 10936 454656 4096 4096 NT_STATUS_OK
ReadX 10936 458752 61440 61440 NT_STATUS_OK
ReadX 10936 520192 4096 4096 NT_STATUS_OK
ReadX 10936 524288 61440 61440 NT_STATUS_OK
ReadX 10936 585728 4096 4096 NT_STATUS_OK
ReadX 10936 589824 61440 61440 NT_STATUS_OK
ReadX 10936 651264 4096 4096 NT_STATUS_OK
ReadX 10936 655360 61440 61440 NT_STATUS_OK
ReadX 10936 716800 4096 4096 NT_STATUS_OK
ReadX 10936 720896 61440 61440 NT_STATUS_OK
ReadX 10936 782336 4096 4096 NT_STATUS_OK
ReadX 10936 786432 61440 61440 NT_STATUS_OK
ReadX 10936 847872 4096 4096 NT_STATUS_OK
ReadX 10936 851968 61440 61440 NT_STATUS_OK
ReadX 10936 913408 4096 4096 NT_STATUS_OK
ReadX 10936 917504 61440 61440 NT_STATUS_OK
ReadX 10936 978944 4096 4096 NT_STATUS_OK
ReadX 10936 983040 61440 61440 NT_STATUS_OK
ReadX 10936 1044480 4096 4096 NT_STATUS_OK
ReadX 10936 1048576 61440 61440 NT_STATUS_OK
ReadX 10936 1110016 4096 4096 NT_STATUS_OK
ReadX 10936 1114112 61440 61440 NT_STATUS_OK
ReadX 10936 1175552 4096 4096 NT_STATUS_OK
ReadX 10936 1179648 61440 61440 NT_STATUS_OK
ReadX 10936 1241088 4096 4096 NT_STATUS_OK
ReadX 10936 1245184 61440 61440 NT_STATUS_OK
ReadX 10936 1306624 4096 4096 NT_STATUS_OK
ReadX 10936 1310720 61440 61440 NT_STATUS_OK
ReadX 10936 1372160 4096 4096 NT_STATUS_OK
ReadX 10936 1376256 61440 61440 NT_STATUS_OK
ReadX 10936 1437696 4096 4096 NT_STATUS_OK
ReadX 10936 1441792 61440 61440 NT_STATUS_OK
ReadX 10936 1503232 4096 4096 NT_STATUS_OK
ReadX 10936 1507328 61440 61440 NT_STATUS_OK
ReadX 10936 1568768 4096 4096 NT_STATUS_OK
ReadX 10936 1572864 61440 61440 NT_STATUS_OK
ReadX 10936 1634304 4096 4096 NT_STATUS_OK
ReadX 10936 1638400 61440 61440 NT_STATUS_OK
ReadX 10936 1699840 4096 4096 NT_STATUS_OK
ReadX 10936 1703936 61440 61440 NT_STATUS_OK
ReadX 10936 1765376 4096 4096 NT_STATUS_OK
ReadX 10936 1769472 61440 61440 NT_STATUS_OK
ReadX 10936 1830912 4096 4096 NT_STATUS_OK
ReadX 10936 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10943 NT_STATUS_OK
QUERY_FILE_INFORMATION 10943 1004 NT_STATUS_OK
WriteX 10943 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10943 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10945 NT_STATUS_OK
WriteX 10945 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10945 258 NT_STATUS_OK
WriteX 10945 0 491 491 NT_STATUS_OK
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10943 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10948 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10949 NT_STATUS_OK
WriteX 10949 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10949 258 NT_STATUS_OK
WriteX 10949 0 543 543 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10953 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10963 NT_STATUS_OK
QUERY_FILE_INFORMATION 10963 1004 NT_STATUS_OK
WriteX 10963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10963 258 NT_STATUS_OK
WriteX 10963 0 2048 2048 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10964 0 4096 4096 NT_STATUS_OK
Flush 10964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10964 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10969 NT_STATUS_OK
WriteX 10969 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10969 258 NT_STATUS_OK
WriteX 10969 0 2048 2048 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10974 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10975 NT_STATUS_OK
WriteX 10975 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10975 258 NT_STATUS_OK
WriteX 10975 0 2048 2048 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 2048 2048 NT_STATUS_OK
ReadX 10954 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10958 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10970 0 4096 4096 NT_STATUS_OK
WriteX 10954 0 8192 8192 NT_STATUS_OK
WriteX 10955 0 4096 4096 NT_STATUS_OK
WriteX 10956 0 4096 4096 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10980 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Close 10957 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10983 NT_STATUS_OK
ReadX 10983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10984 NT_STATUS_OK
ReadX 10984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11000 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 1004 NT_STATUS_OK
WriteX 11000 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 258 NT_STATUS_OK
WriteX 11000 0 2048 2048 NT_STATUS_OK
Close 11000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11008 NT_STATUS_OK
QUERY_FILE_INFORMATION 11008 1004 NT_STATUS_OK
WriteX 11008 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11008 258 NT_STATUS_OK
WriteX 11008 0 2048 2048 NT_STATUS_OK
Close 11008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
WriteX 11009 0 4096 4096 NT_STATUS_OK
Flush 11009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11009 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11003 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11011 NT_STATUS_OK
WriteX 11011 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 258 NT_STATUS_OK
WriteX 11011 0 4096 4096 NT_STATUS_OK
Close 11011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11013 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11014 NT_STATUS_OK
WriteX 11014 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 258 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11015 0 4096 4096 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 11003 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11021 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11022 NT_STATUS_OK
WriteX 11022 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11022 258 NT_STATUS_OK
WriteX 11022 0 2048 2048 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11039 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11047 NT_STATUS_OK
ReadX 11047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11050 NT_STATUS_OK
ReadX 11050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11059 NT_STATUS_OK
QUERY_FILE_INFORMATION 11059 1004 NT_STATUS_OK
WriteX 11059 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11059 258 NT_STATUS_OK
WriteX 11059 0 2048 2048 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11071 NT_STATUS_OK
QUERY_FILE_INFORMATION 11071 1004 NT_STATUS_OK
WriteX 11071 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11071 258 NT_STATUS_OK
WriteX 11071 0 2048 2048 NT_STATUS_OK
Close 11071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11079 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
WriteX 11079 0 2048 2048 NT_STATUS_OK
Close 11079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11060 0 4096 4096 NT_STATUS_OK
Flush 11060 NT_STATUS_OK
WriteX 11072 0 4096 4096 NT_STATUS_OK
Flush 11072 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11060 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11072 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11062 4096 16384 16384 NT_STATUS_OK
ReadX 11042 4096 16384 16384 NT_STATUS_OK
ReadX 11074 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 2048 2048 NT_STATUS_OK
WriteX 11082 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11083 NT_STATUS_OK
QUERY_FILE_INFORMATION 11083 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11082 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11046 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Close 11042 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11085 NT_STATUS_OK
QUERY_FILE_INFORMATION 11085 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11087 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11090 4096 16384 16384 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
WriteX 11091 0 4096 4096 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
WriteX 11093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 8192 8192 NT_STATUS_OK
ReadX 11096 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11110 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11110 0 4096 4096 NT_STATUS_OK
ReadX 11110 4096 4096 4096 NT_STATUS_OK
ReadX 11110 8192 4096 4096 NT_STATUS_OK
WriteX 11096 0 4096 4096 NT_STATUS_OK
WriteX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
ReadX 11111 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
WriteX 11091 0 4096 4096 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
WriteX 11093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11116 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
WriteX 11116 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 258 NT_STATUS_OK
WriteX 11116 0 2048 2048 NT_STATUS_OK
Close 11116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11117 NT_STATUS_OK
ReadX 11117 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11117 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11117 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11118 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 0 4096 4096 NT_STATUS_OK
ReadX 11119 4096 4096 4096 NT_STATUS_OK
WriteX 11119 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11117 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
ReadX 11121 4096 4096 4096 NT_STATUS_OK
WriteX 11121 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11122 NT_STATUS_OK
QUERY_FILE_INFORMATION 11122 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11110 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11124 0 4096 4096 NT_STATUS_OK
ReadX 11124 4096 4096 4096 NT_STATUS_OK
ReadX 11124 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
ReadX 11125 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11142 NT_STATUS_OK
QUERY_FILE_INFORMATION 11142 1004 NT_STATUS_OK
WriteX 11142 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11142 258 NT_STATUS_OK
WriteX 11142 0 2048 2048 NT_STATUS_OK
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11143 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11148 NT_STATUS_OK
QUERY_FILE_INFORMATION 11148 1004 NT_STATUS_OK
WriteX 11148 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11148 258 NT_STATUS_OK
WriteX 11148 0 2048 2048 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11149 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11132 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11150 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11152 NT_STATUS_OK
QUERY_FILE_INFORMATION 11152 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11154 NT_STATUS_OK
ReadX 11154 61440 4096 4096 NT_STATUS_OK
ReadX 11154 126976 4096 4096 NT_STATUS_OK
WriteX 11154 0 65536 65536 NT_STATUS_OK
WriteX 11154 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11155 NT_STATUS_OK
ReadX 11155 61440 4096 4096 NT_STATUS_OK
ReadX 11155 126976 4096 4096 NT_STATUS_OK
ReadX 11155 192512 4096 4096 NT_STATUS_OK
ReadX 11155 258048 4096 4096 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 65536 65536 NT_STATUS_OK
WriteX 11155 131072 65536 65536 NT_STATUS_OK
WriteX 11155 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 61440 4096 4096 NT_STATUS_OK
ReadX 11156 126976 4096 4096 NT_STATUS_OK
ReadX 11156 192512 4096 4096 NT_STATUS_OK
ReadX 11156 258048 4096 4096 NT_STATUS_OK
ReadX 11156 323584 4096 4096 NT_STATUS_OK
ReadX 11156 389120 4096 4096 NT_STATUS_OK
ReadX 11156 454656 4096 4096 NT_STATUS_OK
ReadX 11156 520192 4096 4096 NT_STATUS_OK
WriteX 11156 0 65536 65536 NT_STATUS_OK
WriteX 11156 65536 65536 65536 NT_STATUS_OK
WriteX 11156 131072 65536 65536 NT_STATUS_OK
WriteX 11156 196608 65536 65536 NT_STATUS_OK
WriteX 11156 262144 65536 65536 NT_STATUS_OK
WriteX 11156 327680 65536 65536 NT_STATUS_OK
WriteX 11156 393216 65536 65536 NT_STATUS_OK
WriteX 11156 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11157 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11157 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11157 8192 4096 4096 NT_STATUS_OK
ReadX 11157 12288 4096 4096 NT_STATUS_OK
ReadX 11157 16384 4096 4096 NT_STATUS_OK
ReadX 11157 20480 4096 4096 NT_STATUS_OK
ReadX 11157 24576 4096 4096 NT_STATUS_OK
ReadX 11157 28672 4096 4096 NT_STATUS_OK
ReadX 11157 32768 4096 4096 NT_STATUS_OK
ReadX 11157 36864 4096 4096 NT_STATUS_OK
ReadX 11157 40960 4096 4096 NT_STATUS_OK
ReadX 11157 45056 4096 4096 NT_STATUS_OK
ReadX 11157 49152 4096 4096 NT_STATUS_OK
ReadX 11157 53248 4096 4096 NT_STATUS_OK
ReadX 11157 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11157 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11160 NT_STATUS_OK
WriteX 11160 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11160 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11160 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11160 1004 NT_STATUS_OK
WriteX 11160 0 57088 57088 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
Flush 11160 NT_STATUS_OK
Close 11157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11161 NT_STATUS_OK
SET_FILE_INFORMATION 11161 1004 NT_STATUS_OK
Close 11161 NT_STATUS_OK
SET_FILE_INFORMATION 11160 1004 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
Close 11160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11164 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11165 NT_STATUS_OK
WriteX 11165 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11165 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11165 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11165 1004 NT_STATUS_OK
WriteX 11165 0 51456 51456 NT_STATUS_OK
WriteX 11165 0 4096 4096 NT_STATUS_OK
Flush 11165 NT_STATUS_OK
SET_FILE_INFORMATION 11165 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11165 1004 NT_STATUS_OK
WriteX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
Close 11164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11167 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11169 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11174 NT_STATUS_OK
WriteX 11174 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11174 258 NT_STATUS_OK
WriteX 11174 0 53077 53077 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11175 NT_STATUS_OK
WriteX 11175 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11175 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11175 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11175 1004 NT_STATUS_OK
WriteX 11175 0 65536 65536 NT_STATUS_OK
WriteX 11175 65536 1856 1856 NT_STATUS_OK
WriteX 11175 0 4096 4096 NT_STATUS_OK
Flush 11175 NT_STATUS_OK
SET_FILE_INFORMATION 11175 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11175 1004 NT_STATUS_OK
WriteX 11175 0 4096 4096 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11181 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11184 NT_STATUS_OK
WriteX 11184 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11184 258 NT_STATUS_OK
WriteX 11184 0 7983 7983 NT_STATUS_OK
Close 11184 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11189 NT_STATUS_OK
WriteX 11189 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11189 258 NT_STATUS_OK
WriteX 11189 0 65536 65536 NT_STATUS_OK
WriteX 11189 65536 65536 65536 NT_STATUS_OK
WriteX 11189 131072 65536 65536 NT_STATUS_OK
WriteX 11189 196608 65536 65536 NT_STATUS_OK
WriteX 11189 262144 65536 65536 NT_STATUS_OK
WriteX 11189 327680 65536 65536 NT_STATUS_OK
WriteX 11189 393216 65536 65536 NT_STATUS_OK
WriteX 11189 458752 46731 46731 NT_STATUS_OK
Close 11189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11190 NT_STATUS_OK
WriteX 11190 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11179 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 65536 65536 NT_STATUS_OK
WriteX 11190 65536 22848 22848 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Flush 11190 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11194 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11195 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
ReadX 11195 8192 4096 4096 NT_STATUS_OK
ReadX 11195 12288 4096 4096 NT_STATUS_OK
ReadX 11195 16384 4096 4096 NT_STATUS_OK
ReadX 11195 20480 4096 4096 NT_STATUS_OK
ReadX 11195 24576 4096 4096 NT_STATUS_OK
ReadX 11195 28672 4096 4096 NT_STATUS_OK
ReadX 11195 32768 4096 4096 NT_STATUS_OK
ReadX 11195 36864 4096 4096 NT_STATUS_OK
ReadX 11195 40960 4096 4096 NT_STATUS_OK
ReadX 11195 45056 4096 4096 NT_STATUS_OK
ReadX 11195 49152 4096 4096 NT_STATUS_OK
ReadX 11195 53248 4096 4096 NT_STATUS_OK
ReadX 11195 57344 4096 4096 NT_STATUS_OK
ReadX 11195 61440 4096 4096 NT_STATUS_OK
ReadX 11195 65536 4096 4096 NT_STATUS_OK
ReadX 11195 69632 4096 4096 NT_STATUS_OK
ReadX 11195 73728 4096 4096 NT_STATUS_OK
ReadX 11195 77824 4096 4096 NT_STATUS_OK
ReadX 11195 81920 4096 4096 NT_STATUS_OK
ReadX 11195 86016 4096 4096 NT_STATUS_OK
ReadX 11195 90112 4096 4096 NT_STATUS_OK
ReadX 11195 94208 4096 4096 NT_STATUS_OK
ReadX 11195 98304 4096 4096 NT_STATUS_OK
ReadX 11195 102400 4096 4096 NT_STATUS_OK
ReadX 11195 106496 4096 4096 NT_STATUS_OK
ReadX 11195 110592 4096 4096 NT_STATUS_OK
ReadX 11195 114688 4096 4096 NT_STATUS_OK
ReadX 11195 118784 4096 4096 NT_STATUS_OK
ReadX 11195 122880 4096 4096 NT_STATUS_OK
ReadX 11195 126976 4096 4096 NT_STATUS_OK
ReadX 11195 131072 4096 4096 NT_STATUS_OK
ReadX 11195 135168 4096 4096 NT_STATUS_OK
ReadX 11195 139264 4096 4096 NT_STATUS_OK
ReadX 11195 143360 4096 4096 NT_STATUS_OK
ReadX 11195 147456 4096 4096 NT_STATUS_OK
ReadX 11195 151552 4096 4096 NT_STATUS_OK
ReadX 11195 155648 4096 4096 NT_STATUS_OK
ReadX 11195 159744 4096 4096 NT_STATUS_OK
ReadX 11195 163840 4096 4096 NT_STATUS_OK
ReadX 11195 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11195 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11198 NT_STATUS_OK
WriteX 11198 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11198 258 NT_STATUS_OK
Close 11195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11199 NT_STATUS_OK
SET_FILE_INFORMATION 11199 1004 NT_STATUS_OK
Close 11199 NT_STATUS_OK
WriteX 11198 0 42388 42388 NT_STATUS_OK
Close 11198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11200 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
ReadX 11202 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11203 NT_STATUS_OK
WriteX 11203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11203 258 NT_STATUS_OK
SET_FILE_INFORMATION 11203 1004 NT_STATUS_OK
WriteX 11203 0 42652 42652 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11205 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11207 NT_STATUS_OK
ReadX 11207 0 4096 4096 NT_STATUS_OK
ReadX 11207 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11212 NT_STATUS_OK
WriteX 11212 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11212 258 NT_STATUS_OK
WriteX 11212 0 65536 65536 NT_STATUS_OK
WriteX 11212 65536 49 49 NT_STATUS_OK
Close 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 61440 61440 NT_STATUS_OK
ReadX 11213 61440 4096 4096 NT_STATUS_OK
ReadX 11213 65536 61440 61440 NT_STATUS_OK
ReadX 11213 126976 4096 4096 NT_STATUS_OK
ReadX 11213 131072 61440 61440 NT_STATUS_OK
ReadX 11213 192512 4096 4096 NT_STATUS_OK
ReadX 11213 196608 61440 61440 NT_STATUS_OK
ReadX 11213 258048 4096 4096 NT_STATUS_OK
ReadX 11213 262144 61440 61440 NT_STATUS_OK
ReadX 11213 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 61440 61440 NT_STATUS_OK
ReadX 11214 61440 4096 4096 NT_STATUS_OK
ReadX 11214 65536 61440 61440 NT_STATUS_OK
ReadX 11214 126976 4096 4096 NT_STATUS_OK
ReadX 11214 131072 61440 61440 NT_STATUS_OK
ReadX 11214 192512 4096 4096 NT_STATUS_OK
ReadX 11214 196608 61440 61440 NT_STATUS_OK
ReadX 11214 258048 4096 4096 NT_STATUS_OK
ReadX 11214 262144 61440 61440 NT_STATUS_OK
ReadX 11214 323584 4096 4096 NT_STATUS_OK
ReadX 11214 327680 61440 61440 NT_STATUS_OK
ReadX 11214 389120 4096 4096 NT_STATUS_OK
ReadX 11214 393216 61440 61440 NT_STATUS_OK
ReadX 11214 454656 4096 4096 NT_STATUS_OK
ReadX 11214 458752 61440 61440 NT_STATUS_OK
ReadX 11214 520192 4096 4096 NT_STATUS_OK
ReadX 11214 524288 61440 61440 NT_STATUS_OK
ReadX 11214 585728 4096 4096 NT_STATUS_OK
ReadX 11214 589824 61440 61440 NT_STATUS_OK
ReadX 11214 651264 4096 4096 NT_STATUS_OK
ReadX 11214 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 61440 61440 NT_STATUS_OK
ReadX 11215 61440 4096 4096 NT_STATUS_OK
ReadX 11215 65536 61440 61440 NT_STATUS_OK
ReadX 11215 126976 4096 4096 NT_STATUS_OK
ReadX 11215 131072 61440 61440 NT_STATUS_OK
ReadX 11215 192512 4096 4096 NT_STATUS_OK
ReadX 11215 196608 61440 61440 NT_STATUS_OK
ReadX 11215 258048 4096 4096 NT_STATUS_OK
ReadX 11215 262144 61440 61440 NT_STATUS_OK
ReadX 11215 323584 4096 4096 NT_STATUS_OK
ReadX 11215 327680 61440 61440 NT_STATUS_OK
ReadX 11215 389120 4096 4096 NT_STATUS_OK
ReadX 11215 393216 61440 61440 NT_STATUS_OK
ReadX 11215 454656 4096 4096 NT_STATUS_OK
ReadX 11215 458752 61440 61440 NT_STATUS_OK
ReadX 11215 520192 4096 4096 NT_STATUS_OK
ReadX 11215 524288 61440 61440 NT_STATUS_OK
ReadX 11215 585728 4096 4096 NT_STATUS_OK
ReadX 11215 589824 61440 61440 NT_STATUS_OK
ReadX 11215 651264 4096 4096 NT_STATUS_OK
ReadX 11215 655360 61440 61440 NT_STATUS_OK
ReadX 11215 716800 4096 4096 NT_STATUS_OK
ReadX 11215 720896 61440 61440 NT_STATUS_OK
ReadX 11215 782336 4096 4096 NT_STATUS_OK
ReadX 11215 786432 61440 61440 NT_STATUS_OK
ReadX 11215 847872 4096 4096 NT_STATUS_OK
ReadX 11215 851968 61440 61440 NT_STATUS_OK
ReadX 11215 913408 4096 4096 NT_STATUS_OK
ReadX 11215 917504 61440 61440 NT_STATUS_OK
ReadX 11215 978944 4096 4096 NT_STATUS_OK
ReadX 11215 983040 61440 61440 NT_STATUS_OK
ReadX 11215 1044480 4096 4096 NT_STATUS_OK
ReadX 11215 1048576 61440 61440 NT_STATUS_OK
ReadX 11215 1110016 4096 4096 NT_STATUS_OK
ReadX 11215 1114112 61440 61440 NT_STATUS_OK
ReadX 11215 1175552 4096 4096 NT_STATUS_OK
ReadX 11215 1179648 61440 61440 NT_STATUS_OK
ReadX 11215 1241088 4096 4096 NT_STATUS_OK
ReadX 11215 1245184 61440 61440 NT_STATUS_OK
ReadX 11215 1306624 4096 4096 NT_STATUS_OK
ReadX 11215 1310720 61440 61440 NT_STATUS_OK
ReadX 11215 1372160 4096 4096 NT_STATUS_OK
ReadX 11215 1376256 61440 61440 NT_STATUS_OK
ReadX 11215 1437696 4096 4096 NT_STATUS_OK
ReadX 11215 1441792 61440 61440 NT_STATUS_OK
ReadX 11215 1503232 4096 4096 NT_STATUS_OK
ReadX 11215 1507328 61440 61440 NT_STATUS_OK
ReadX 11215 1568768 4096 4096 NT_STATUS_OK
ReadX 11215 1572864 61440 61440 NT_STATUS_OK
ReadX 11215 1634304 4096 4096 NT_STATUS_OK
ReadX 11215 1638400 61440 61440 NT_STATUS_OK
ReadX 11215 1699840 4096 4096 NT_STATUS_OK
ReadX 11215 1703936 61440 61440 NT_STATUS_OK
ReadX 11215 1765376 4096 4096 NT_STATUS_OK
ReadX 11215 1769472 61440 61440 NT_STATUS_OK
ReadX 11215 1830912 4096 4096 NT_STATUS_OK
ReadX 11215 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11217 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 1005 NT_STATUS_OK
ReadX 11217 2156 24 24 NT_STATUS_OK
ReadX 11217 2139 276 276 NT_STATUS_OK
ReadX 11217 2136 14 14 NT_STATUS_OK
ReadX 11217 2136 7 7 NT_STATUS_OK
ReadX 11217 2138 12 12 NT_STATUS_OK
ReadX 11217 2137 8 8 NT_STATUS_OK
ReadX 11217 2135 15 15 NT_STATUS_OK
ReadX 11217 0 16 16 NT_STATUS_OK
ReadX 11217 16 2048 2048 NT_STATUS_OK
ReadX 11217 2064 2048 2048 NT_STATUS_OK
ReadX 11217 257 2048 2048 NT_STATUS_OK
ReadX 11217 385 2048 2048 NT_STATUS_OK
ReadX 11217 513 2048 2048 NT_STATUS_OK
ReadX 11217 641 2048 2048 NT_STATUS_OK
ReadX 11217 769 2048 2048 NT_STATUS_OK
ReadX 11217 897 2048 2048 NT_STATUS_OK
ReadX 11217 1025 2048 2048 NT_STATUS_OK
ReadX 11217 1153 2048 2048 NT_STATUS_OK
ReadX 11217 1281 2048 2048 NT_STATUS_OK
ReadX 11217 1409 2048 2048 NT_STATUS_OK
ReadX 11217 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11222 NT_STATUS_OK
WriteX 11222 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 258 NT_STATUS_OK
WriteX 11222 0 10575 10575 NT_STATUS_OK
Flush 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11227 NT_STATUS_OK
LockX 11227 2147483538 1 NT_STATUS_OK
UnlockX 11227 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11227 1005 NT_STATUS_OK
ReadX 11227 0 512 512 NT_STATUS_OK
ReadX 11227 512 512 512 NT_STATUS_OK
ReadX 11227 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11227 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11227 1004 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11228 NT_STATUS_OK
QUERY_FILE_INFORMATION 11228 1005 NT_STATUS_OK
ReadX 11228 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11229 NT_STATUS_OK
LockX 11229 2147483538 1 NT_STATUS_OK
UnlockX 11229 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11229 1005 NT_STATUS_OK
ReadX 11229 0 512 512 NT_STATUS_OK
ReadX 11229 512 512 512 NT_STATUS_OK
ReadX 11229 1024 512 512 NT_STATUS_OK
ReadX 11229 288 20 20 NT_STATUS_OK
ReadX 11229 308 2084 2084 NT_STATUS_OK
ReadX 11229 388 2084 2084 NT_STATUS_OK
ReadX 11229 388 2084 2084 NT_STATUS_OK
ReadX 11216 2157 1386 1386 NT_STATUS_OK
ReadX 11229 2472 399 399 NT_STATUS_OK
ReadX 11229 3072 1536 1536 NT_STATUS_OK
ReadX 11229 544 149 149 NT_STATUS_OK
ReadX 11229 693 485 485 NT_STATUS_OK
Close 11229 NT_STATUS_OK
ReadX 11216 2157 4096 4096 NT_STATUS_OK
ReadX 11216 6253 4096 4096 NT_STATUS_OK
ReadX 11216 10349 4096 4096 NT_STATUS_OK
ReadX 11216 14445 4096 4096 NT_STATUS_OK
ReadX 11216 18541 4096 4096 NT_STATUS_OK
ReadX 11216 22637 256 256 NT_STATUS_OK
ReadX 11216 22893 4096 4096 NT_STATUS_OK
ReadX 11216 26989 4096 4096 NT_STATUS_OK
ReadX 11216 31085 4096 4096 NT_STATUS_OK
ReadX 11216 35181 4096 4096 NT_STATUS_OK
ReadX 11216 39277 4096 4096 NT_STATUS_OK
ReadX 11216 43373 4096 4096 NT_STATUS_OK
ReadX 11216 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11216 2157 1024 1024 NT_STATUS_OK
ReadX 11216 1667 4688 4688 NT_STATUS_OK
ReadX 11216 6355 3516 3516 NT_STATUS_OK
ReadX 11216 9871 16384 16384 NT_STATUS_OK
ReadX 11216 26255 3771 3771 NT_STATUS_OK
ReadX 11216 30026 2048 2048 NT_STATUS_OK
ReadX 11216 32074 1024 1024 NT_STATUS_OK
ReadX 11216 33098 6652 6652 NT_STATUS_OK
ReadX 11216 39750 16384 16384 NT_STATUS_OK
ReadX 11216 56134 10496 10496 NT_STATUS_OK
ReadX 11216 66630 1784 1784 NT_STATUS_OK
ReadX 11216 68414 90 90 NT_STATUS_OK
ReadX 11216 68504 273 273 NT_STATUS_OK
ReadX 11216 68777 1600 1600 NT_STATUS_OK
ReadX 11216 70377 640 640 NT_STATUS_OK
ReadX 11216 71017 1280 1280 NT_STATUS_OK
ReadX 11216 72297 8464 8464 NT_STATUS_OK
ReadX 11216 80761 158 158 NT_STATUS_OK
ReadX 11216 80919 912 912 NT_STATUS_OK
ReadX 11216 81831 1980 1980 NT_STATUS_OK
ReadX 11216 83811 2256 2256 NT_STATUS_OK
ReadX 11216 86067 400 400 NT_STATUS_OK
ReadX 11216 86467 252 252 NT_STATUS_OK
ReadX 11216 86719 42 42 NT_STATUS_OK
ReadX 11216 86761 725 725 NT_STATUS_OK
ReadX 11216 2009 512 512 NT_STATUS_OK
ReadX 11216 3895 9 9 NT_STATUS_OK
ReadX 11216 3781 46 46 NT_STATUS_OK
ReadX 11216 4059 92 92 NT_STATUS_OK
ReadX 11216 3781 92 92 NT_STATUS_OK
ReadX 11216 3986 184 184 NT_STATUS_OK
ReadX 11216 3987 16384 16384 NT_STATUS_OK
ReadX 11216 3902 16384 16384 NT_STATUS_OK
ReadX 11216 3781 10240 10240 NT_STATUS_OK
ReadX 11216 3821 16384 16384 NT_STATUS_OK
ReadX 11216 3891 935 935 NT_STATUS_OK
ReadX 11216 4060 10240 10240 NT_STATUS_OK
ReadX 11216 4059 184 184 NT_STATUS_OK
ReadX 11216 256 184 184 NT_STATUS_OK
ReadX 11216 256 1026 1026 NT_STATUS_OK
ReadX 11216 3901 326 326 NT_STATUS_OK
ReadX 11216 3899 652 652 NT_STATUS_OK
ReadX 11216 256 2 2 NT_STATUS_OK
ReadX 11216 258 4948 4948 NT_STATUS_OK
Close 11216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11231 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11234 NT_STATUS_OK
WriteX 11234 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11234 258 NT_STATUS_OK
WriteX 11234 0 65536 65536 NT_STATUS_OK
WriteX 11234 65536 65536 65536 NT_STATUS_OK
WriteX 11234 131072 65536 65536 NT_STATUS_OK
WriteX 11234 196608 65536 65536 NT_STATUS_OK
WriteX 11234 262144 65536 65536 NT_STATUS_OK
WriteX 11234 327680 65536 65536 NT_STATUS_OK
WriteX 11234 393216 65536 65536 NT_STATUS_OK
WriteX 11234 458752 65536 65536 NT_STATUS_OK
WriteX 11234 524288 65536 65536 NT_STATUS_OK
WriteX 11234 589824 35257 35257 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11239 NT_STATUS_OK
WriteX 11239 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11239 258 NT_STATUS_OK
WriteX 11239 0 65536 65536 NT_STATUS_OK
WriteX 11239 65536 65536 65536 NT_STATUS_OK
WriteX 11239 131072 65536 65536 NT_STATUS_OK
WriteX 11239 196608 65536 65536 NT_STATUS_OK
WriteX 11239 262144 65536 65536 NT_STATUS_OK
WriteX 11239 327680 65536 65536 NT_STATUS_OK
WriteX 11239 393216 65536 65536 NT_STATUS_OK
WriteX 11239 458752 65536 65536 NT_STATUS_OK
WriteX 11239 524288 65536 65536 NT_STATUS_OK
WriteX 11239 589824 57598 57598 NT_STATUS_OK
Close 11239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11241 NT_STATUS_OK
WriteX 11241 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 258 NT_STATUS_OK
WriteX 11241 0 12543 12543 NT_STATUS_OK
Flush 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11243 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11247 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
ReadX 11247 1938 24 24 NT_STATUS_OK
ReadX 11247 1920 276 276 NT_STATUS_OK
ReadX 11247 1918 14 14 NT_STATUS_OK
ReadX 11247 1918 7 7 NT_STATUS_OK
ReadX 11247 1919 12 12 NT_STATUS_OK
ReadX 11247 1919 8 8 NT_STATUS_OK
ReadX 11247 1917 15 15 NT_STATUS_OK
ReadX 11247 0 16 16 NT_STATUS_OK
ReadX 11247 16 2048 2048 NT_STATUS_OK
ReadX 11247 2064 2048 2048 NT_STATUS_OK
ReadX 11247 257 2048 2048 NT_STATUS_OK
ReadX 11247 385 2048 2048 NT_STATUS_OK
ReadX 11247 513 2048 2048 NT_STATUS_OK
ReadX 11247 641 2048 2048 NT_STATUS_OK
ReadX 11247 769 2048 2048 NT_STATUS_OK
ReadX 11247 897 2048 2048 NT_STATUS_OK
ReadX 11247 1025 2048 2048 NT_STATUS_OK
ReadX 11247 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11249 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11252 NT_STATUS_OK
WriteX 11252 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11252 258 NT_STATUS_OK
WriteX 11252 0 11588 11588 NT_STATUS_OK
Flush 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11253 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
Close 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11257 NT_STATUS_OK
WriteX 11257 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 258 NT_STATUS_OK
WriteX 11257 0 11615 11615 NT_STATUS_OK
Flush 11257 NT_STATUS_OK
Close 11257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11259 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11261 NT_STATUS_OK
ReadX 11261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11266 NT_STATUS_OK
WriteX 11266 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11266 258 NT_STATUS_OK
WriteX 11266 0 65536 65536 NT_STATUS_OK
WriteX 11266 65536 16050 16050 NT_STATUS_OK
Close 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11246 1939 64 64 NT_STATUS_OK
ReadX 11246 128 248 248 NT_STATUS_OK
ReadX 11246 128 568 568 NT_STATUS_OK
ReadX 11246 3872 1536 1536 NT_STATUS_OK
ReadX 11246 3456 2560 2560 NT_STATUS_OK
ReadX 11246 3136 512 512 NT_STATUS_OK
ReadX 11246 2880 4096 4096 NT_STATUS_OK
ReadX 11246 3264 3072 3072 NT_STATUS_OK
ReadX 11246 320 4096 4096 NT_STATUS_OK
ReadX 11246 1024 4096 4096 NT_STATUS_OK
ReadX 11246 3616 4096 4096 NT_STATUS_OK
ReadX 11246 1939 64 64 NT_STATUS_OK
ReadX 11246 128 248 248 NT_STATUS_OK
ReadX 11246 128 608 608 NT_STATUS_OK
ReadX 11246 2858 1024 1024 NT_STATUS_OK
ReadX 11246 2810 4096 4096 NT_STATUS_OK
ReadX 11246 2826 4096 4096 NT_STATUS_OK
ReadX 11246 2580 2048 2048 NT_STATUS_OK
ReadX 11246 2800 2560 2560 NT_STATUS_OK
ReadX 11246 2100 4096 4096 NT_STATUS_OK
ReadX 11246 2084 4096 4096 NT_STATUS_OK
ReadX 11246 868 4096 4096 NT_STATUS_OK
ReadX 11246 2324 4096 4096 NT_STATUS_OK
ReadX 11246 884 4096 4096 NT_STATUS_OK
ReadX 11246 2604 1024 1024 NT_STATUS_OK
ReadX 11246 580 4096 4096 NT_STATUS_OK
ReadX 11246 596 4096 4096 NT_STATUS_OK
ReadX 11246 2752 4096 4096 NT_STATUS_OK
ReadX 11246 2842 1024 1024 NT_STATUS_OK
ReadX 11246 660 4096 4096 NT_STATUS_OK
ReadX 11246 2720 4096 4096 NT_STATUS_OK
ReadX 11246 2736 4096 4096 NT_STATUS_OK
ReadX 11246 628 4096 4096 NT_STATUS_OK
ReadX 11246 2704 4096 4096 NT_STATUS_OK
ReadX 11246 1556 4096 4096 NT_STATUS_OK
ReadX 11246 576 4096 4096 NT_STATUS_OK
ReadX 11246 3168 1536 1536 NT_STATUS_OK
ReadX 11246 832 4096 4096 NT_STATUS_OK
ReadX 11246 1088 4096 4096 NT_STATUS_OK
ReadX 11246 1344 4096 4096 NT_STATUS_OK
ReadX 11246 1600 4096 4096 NT_STATUS_OK
ReadX 11246 1856 4096 4096 NT_STATUS_OK
ReadX 11246 2112 4096 4096 NT_STATUS_OK
ReadX 11246 1892 4096 4096 NT_STATUS_OK
ReadX 11246 820 4096 4096 NT_STATUS_OK
ReadX 11246 788 4096 4096 NT_STATUS_OK
ReadX 11246 1604 4096 4096 NT_STATUS_OK
ReadX 11246 3648 4096 4096 NT_STATUS_OK
ReadX 11246 2608 4096 4096 NT_STATUS_OK
ReadX 11246 548 4096 4096 NT_STATUS_OK
ReadX 11246 740 4096 4096 NT_STATUS_OK
ReadX 11246 1344 4096 4096 NT_STATUS_OK
ReadX 11246 3392 4096 4096 NT_STATUS_OK
ReadX 11246 3904 4096 4096 NT_STATUS_OK
ReadX 11246 644 4096 4096 NT_STATUS_OK
ReadX 11246 676 4096 4096 NT_STATUS_OK
ReadX 11246 2688 4096 4096 NT_STATUS_OK
ReadX 11246 320 4096 4096 NT_STATUS_OK
ReadX 11246 900 4096 4096 NT_STATUS_OK
ReadX 11246 1908 4096 4096 NT_STATUS_OK
ReadX 11246 852 4096 4096 NT_STATUS_OK
ReadX 11246 724 4096 4096 NT_STATUS_OK
ReadX 11246 2292 4096 4096 NT_STATUS_OK
ReadX 11246 612 4096 4096 NT_STATUS_OK
ReadX 11246 388 4096 4096 NT_STATUS_OK
ReadX 11246 2368 4096 4096 NT_STATUS_OK
ReadX 11246 2624 4096 4096 NT_STATUS_OK
ReadX 11246 500 4096 4096 NT_STATUS_OK
ReadX 11246 356 4096 4096 NT_STATUS_OK
ReadX 11246 1024 4096 4096 NT_STATUS_OK
ReadX 11246 576 4096 4096 NT_STATUS_OK
ReadX 11246 340 4096 4096 NT_STATUS_OK
ReadX 11246 420 4096 4096 NT_STATUS_OK
ReadX 11246 1600 4096 4096 NT_STATUS_OK
ReadX 11246 404 4096 4096 NT_STATUS_OK
ReadX 11246 1428 4096 4096 NT_STATUS_OK
ReadX 11246 2656 4096 4096 NT_STATUS_OK
ReadX 11246 2624 4096 4096 NT_STATUS_OK
ReadX 11246 452 4096 4096 NT_STATUS_OK
ReadX 11246 692 4096 4096 NT_STATUS_OK
ReadX 11246 564 4096 4096 NT_STATUS_OK
ReadX 11246 372 4096 4096 NT_STATUS_OK
ReadX 11246 468 4096 4096 NT_STATUS_OK
ReadX 11246 484 4096 4096 NT_STATUS_OK
ReadX 11246 1088 4096 4096 NT_STATUS_OK
ReadX 11246 1924 4096 4096 NT_STATUS_OK
ReadX 11246 2768 4096 4096 NT_STATUS_OK
ReadX 11246 832 4096 4096 NT_STATUS_OK
ReadX 11246 836 4096 4096 NT_STATUS_OK
ReadX 11246 1856 4096 4096 NT_STATUS_OK
ReadX 11246 2640 4096 4096 NT_STATUS_OK
ReadX 11246 436 4096 4096 NT_STATUS_OK
ReadX 11246 1828 4096 4096 NT_STATUS_OK
ReadX 11246 804 4096 4096 NT_STATUS_OK
ReadX 11246 1860 4096 4096 NT_STATUS_OK
ReadX 11246 1812 4096 4096 NT_STATUS_OK
ReadX 11246 756 4096 4096 NT_STATUS_OK
ReadX 11246 1636 4096 4096 NT_STATUS_OK
ReadX 11246 772 4096 4096 NT_STATUS_OK
ReadX 11246 2036 4096 4096 NT_STATUS_OK
ReadX 11246 1220 4096 4096 NT_STATUS_OK
ReadX 11246 1652 4096 4096 NT_STATUS_OK
ReadX 11246 2588 4096 4096 NT_STATUS_OK
ReadX 11246 916 4096 4096 NT_STATUS_OK
ReadX 11246 260 4096 4096 NT_STATUS_OK
ReadX 11246 932 4096 4096 NT_STATUS_OK
ReadX 11246 2624 4096 4096 NT_STATUS_OK
ReadX 11246 308 4096 4096 NT_STATUS_OK
ReadX 11246 292 4096 4096 NT_STATUS_OK
ReadX 11246 1140 4096 4096 NT_STATUS_OK
ReadX 11246 276 4096 4096 NT_STATUS_OK
ReadX 11246 2020 4096 4096 NT_STATUS_OK
ReadX 11246 2880 4096 4096 NT_STATUS_OK
ReadX 11246 516 4096 4096 NT_STATUS_OK
ReadX 11246 1844 4096 4096 NT_STATUS_OK
ReadX 11246 1124 4096 4096 NT_STATUS_OK
ReadX 11246 3136 4096 4096 NT_STATUS_OK
ReadX 11246 324 4096 4096 NT_STATUS_OK
ReadX 11246 1156 4096 4096 NT_STATUS_OK
ReadX 11246 1172 4096 4096 NT_STATUS_OK
ReadX 11246 2112 4096 4096 NT_STATUS_OK
ReadX 11246 2368 4096 4096 NT_STATUS_OK
ReadX 11246 964 4096 4096 NT_STATUS_OK
ReadX 11246 980 4096 4096 NT_STATUS_OK
ReadX 11246 1012 4096 4096 NT_STATUS_OK
ReadX 11246 532 4096 4096 NT_STATUS_OK
ReadX 11246 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11246 1620 4096 4096 NT_STATUS_OK
ReadX 11246 1604 4096 4096 NT_STATUS_OK
ReadX 11246 2116 4096 4096 NT_STATUS_OK
ReadX 11246 2132 4096 4096 NT_STATUS_OK
ReadX 11246 2148 4096 4096 NT_STATUS_OK
ReadX 11246 2276 4096 4096 NT_STATUS_OK
ReadX 11246 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11268 NT_STATUS_OK
Close 11268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11271 NT_STATUS_OK
QUERY_FILE_INFORMATION 11226 1004 NT_STATUS_OK
Close 11226 NT_STATUS_OK
WriteX 11271 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11271 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11228 1004 NT_STATUS_OK
Close 11228 NT_STATUS_OK
WriteX 11271 0 65536 65536 NT_STATUS_OK
WriteX 11271 65536 64850 64850 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11273 NT_STATUS_OK
WriteX 11273 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 258 NT_STATUS_OK
ReadX 11246 2068 4096 4096 NT_STATUS_OK
ReadX 11246 1588 4096 4096 NT_STATUS_OK
ReadX 11246 1572 4096 4096 NT_STATUS_OK
WriteX 11273 0 18630 18630 NT_STATUS_OK
Flush 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11246 612 4096 4096 NT_STATUS_OK
ReadX 11246 564 4096 4096 NT_STATUS_OK
ReadX 11246 1876 4096 4096 NT_STATUS_OK
ReadX 11246 628 4096 4096 NT_STATUS_OK
ReadX 11246 740 4096 4096 NT_STATUS_OK
ReadX 11246 724 4096 4096 NT_STATUS_OK
ReadX 11246 644 4096 4096 NT_STATUS_OK
ReadX 11246 2324 4096 4096 NT_STATUS_OK
ReadX 11246 660 4096 4096 NT_STATUS_OK
ReadX 11246 852 4096 4096 NT_STATUS_OK
ReadX 11246 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11246 2368 4096 4096 NT_STATUS_OK
ReadX 11246 1024 4096 4096 NT_STATUS_OK
ReadX 11246 320 4096 4096 NT_STATUS_OK
ReadX 11246 580 4096 4096 NT_STATUS_OK
ReadX 11246 3136 512 512 NT_STATUS_OK
ReadX 11246 2880 4096 4096 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 61440 4096 4096 NT_STATUS_OK
ReadX 11278 126976 4096 4096 NT_STATUS_OK
WriteX 11278 0 65536 65536 NT_STATUS_OK
WriteX 11278 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 61440 4096 4096 NT_STATUS_OK
ReadX 11279 126976 4096 4096 NT_STATUS_OK
ReadX 11279 192512 4096 4096 NT_STATUS_OK
ReadX 11279 258048 4096 4096 NT_STATUS_OK
WriteX 11279 0 65536 65536 NT_STATUS_OK
WriteX 11279 65536 65536 65536 NT_STATUS_OK
WriteX 11279 131072 65536 65536 NT_STATUS_OK
WriteX 11279 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 61440 4096 4096 NT_STATUS_OK
ReadX 11280 126976 4096 4096 NT_STATUS_OK
ReadX 11280 192512 4096 4096 NT_STATUS_OK
ReadX 11280 258048 4096 4096 NT_STATUS_OK
ReadX 11280 323584 4096 4096 NT_STATUS_OK
ReadX 11280 389120 4096 4096 NT_STATUS_OK
ReadX 11280 454656 4096 4096 NT_STATUS_OK
ReadX 11280 520192 4096 4096 NT_STATUS_OK
WriteX 11280 0 65536 65536 NT_STATUS_OK
WriteX 11280 65536 65536 65536 NT_STATUS_OK
WriteX 11280 131072 65536 65536 NT_STATUS_OK
WriteX 11280 196608 65536 65536 NT_STATUS_OK
WriteX 11280 262144 65536 65536 NT_STATUS_OK
WriteX 11280 327680 65536 65536 NT_STATUS_OK
WriteX 11280 393216 65536 65536 NT_STATUS_OK
WriteX 11280 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11283 NT_STATUS_OK
WriteX 11283 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11283 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11281 0 8192 8192 NT_STATUS_OK
Flush 11281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11281 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11281 0 8192 8192 NT_STATUS_OK
Flush 11281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11281 0 8192 8192 NT_STATUS_OK
Flush 11281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11281 0 8192 8192 NT_STATUS_OK
Flush 11281 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11285 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11288 NT_STATUS_OK
WriteX 11288 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11288 258 NT_STATUS_OK
WriteX 11288 0 62591 62591 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11293 NT_STATUS_OK
WriteX 11293 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 10845 10845 NT_STATUS_OK
Close 11293 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11298 NT_STATUS_OK
WriteX 11298 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 258 NT_STATUS_OK
WriteX 11298 0 30118 30118 NT_STATUS_OK
Close 11298 NT_STATUS_OK
WriteX 11281 0 4096 4096 NT_STATUS_OK
WriteX 11283 0 64 64 NT_STATUS_OK
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 61440 61440 NT_STATUS_OK
ReadX 11300 61440 4096 4096 NT_STATUS_OK
ReadX 11300 65536 61440 61440 NT_STATUS_OK
ReadX 11300 126976 4096 4096 NT_STATUS_OK
ReadX 11300 131072 61440 61440 NT_STATUS_OK
ReadX 11300 192512 4096 4096 NT_STATUS_OK
ReadX 11300 196608 61440 61440 NT_STATUS_OK
ReadX 11300 258048 4096 4096 NT_STATUS_OK
ReadX 11300 262144 61440 61440 NT_STATUS_OK
ReadX 11300 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 61440 61440 NT_STATUS_OK
ReadX 11301 61440 4096 4096 NT_STATUS_OK
ReadX 11301 65536 61440 61440 NT_STATUS_OK
ReadX 11301 126976 4096 4096 NT_STATUS_OK
ReadX 11301 131072 61440 61440 NT_STATUS_OK
ReadX 11301 192512 4096 4096 NT_STATUS_OK
ReadX 11301 196608 61440 61440 NT_STATUS_OK
ReadX 11301 258048 4096 4096 NT_STATUS_OK
ReadX 11301 262144 61440 61440 NT_STATUS_OK
ReadX 11301 323584 4096 4096 NT_STATUS_OK
ReadX 11301 327680 61440 61440 NT_STATUS_OK
ReadX 11301 389120 4096 4096 NT_STATUS_OK
ReadX 11301 393216 61440 61440 NT_STATUS_OK
ReadX 11301 454656 4096 4096 NT_STATUS_OK
ReadX 11301 458752 61440 61440 NT_STATUS_OK
ReadX 11301 520192 4096 4096 NT_STATUS_OK
ReadX 11301 524288 61440 61440 NT_STATUS_OK
ReadX 11301 585728 4096 4096 NT_STATUS_OK
ReadX 11301 589824 61440 61440 NT_STATUS_OK
ReadX 11301 651264 4096 4096 NT_STATUS_OK
ReadX 11301 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11302 NT_STATUS_OK
ReadX 11302 0 61440 61440 NT_STATUS_OK
ReadX 11302 61440 4096 4096 NT_STATUS_OK
ReadX 11302 65536 61440 61440 NT_STATUS_OK
ReadX 11302 126976 4096 4096 NT_STATUS_OK
ReadX 11302 131072 61440 61440 NT_STATUS_OK
ReadX 11302 192512 4096 4096 NT_STATUS_OK
ReadX 11302 196608 61440 61440 NT_STATUS_OK
ReadX 11302 258048 4096 4096 NT_STATUS_OK
ReadX 11302 262144 61440 61440 NT_STATUS_OK
ReadX 11302 323584 4096 4096 NT_STATUS_OK
ReadX 11302 327680 61440 61440 NT_STATUS_OK
ReadX 11302 389120 4096 4096 NT_STATUS_OK
ReadX 11302 393216 61440 61440 NT_STATUS_OK
ReadX 11302 454656 4096 4096 NT_STATUS_OK
ReadX 11302 458752 61440 61440 NT_STATUS_OK
ReadX 11302 520192 4096 4096 NT_STATUS_OK
ReadX 11302 524288 61440 61440 NT_STATUS_OK
ReadX 11302 585728 4096 4096 NT_STATUS_OK
ReadX 11302 589824 61440 61440 NT_STATUS_OK
ReadX 11302 651264 4096 4096 NT_STATUS_OK
ReadX 11302 655360 61440 61440 NT_STATUS_OK
ReadX 11302 716800 4096 4096 NT_STATUS_OK
ReadX 11302 720896 61440 61440 NT_STATUS_OK
ReadX 11302 782336 4096 4096 NT_STATUS_OK
ReadX 11302 786432 61440 61440 NT_STATUS_OK
ReadX 11302 847872 4096 4096 NT_STATUS_OK
ReadX 11302 851968 61440 61440 NT_STATUS_OK
ReadX 11302 913408 4096 4096 NT_STATUS_OK
ReadX 11302 917504 61440 61440 NT_STATUS_OK
ReadX 11302 978944 4096 4096 NT_STATUS_OK
ReadX 11302 983040 61440 61440 NT_STATUS_OK
ReadX 11302 1044480 4096 4096 NT_STATUS_OK
ReadX 11302 1048576 61440 61440 NT_STATUS_OK
ReadX 11302 1110016 4096 4096 NT_STATUS_OK
ReadX 11302 1114112 61440 61440 NT_STATUS_OK
ReadX 11302 1175552 4096 4096 NT_STATUS_OK
ReadX 11302 1179648 61440 61440 NT_STATUS_OK
ReadX 11302 1241088 4096 4096 NT_STATUS_OK
ReadX 11302 1245184 61440 61440 NT_STATUS_OK
ReadX 11302 1306624 4096 4096 NT_STATUS_OK
ReadX 11302 1310720 61440 61440 NT_STATUS_OK
ReadX 11302 1372160 4096 4096 NT_STATUS_OK
ReadX 11302 1376256 61440 61440 NT_STATUS_OK
ReadX 11302 1437696 4096 4096 NT_STATUS_OK
ReadX 11302 1441792 61440 61440 NT_STATUS_OK
ReadX 11302 1503232 4096 4096 NT_STATUS_OK
ReadX 11302 1507328 61440 61440 NT_STATUS_OK
ReadX 11302 1568768 4096 4096 NT_STATUS_OK
ReadX 11302 1572864 61440 61440 NT_STATUS_OK
ReadX 11302 1634304 4096 4096 NT_STATUS_OK
ReadX 11302 1638400 61440 61440 NT_STATUS_OK
ReadX 11302 1699840 4096 4096 NT_STATUS_OK
ReadX 11302 1703936 61440 61440 NT_STATUS_OK
ReadX 11302 1765376 4096 4096 NT_STATUS_OK
ReadX 11302 1769472 61440 61440 NT_STATUS_OK
ReadX 11302 1830912 4096 4096 NT_STATUS_OK
ReadX 11302 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11303 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11300 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
ReadX 11307 4096 4096 4096 NT_STATUS_OK
ReadX 11307 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11311 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11312 NT_STATUS_OK
Close 11312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11314 NT_STATUS_OK
ReadX 11314 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11315 NT_STATUS_OK
ReadX 11315 0 8192 8192 NT_STATUS_OK
ReadX 11315 8192 8192 8192 NT_STATUS_OK
ReadX 11315 16384 8192 8192 NT_STATUS_OK
ReadX 11315 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11317 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11320 NT_STATUS_OK
WriteX 11320 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
WriteX 11320 0 10438 10438 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11321 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11324 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11326 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11328 NT_STATUS_OK
Close 11328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
ReadX 11329 4096 4096 4096 NT_STATUS_OK
ReadX 11329 8192 4096 4096 NT_STATUS_OK
ReadX 11329 12288 8192 8192 NT_STATUS_OK
ReadX 11329 20480 8192 8192 NT_STATUS_OK
ReadX 11329 28672 8192 8192 NT_STATUS_OK
ReadX 11329 36864 8192 8192 NT_STATUS_OK
ReadX 11329 45056 8192 8192 NT_STATUS_OK
ReadX 11329 53248 8192 8192 NT_STATUS_OK
ReadX 11329 61440 8192 8192 NT_STATUS_OK
ReadX 11329 69632 8192 8192 NT_STATUS_OK
ReadX 11329 77824 8192 8192 NT_STATUS_OK
ReadX 11329 86016 8192 8192 NT_STATUS_OK
ReadX 11329 94208 8192 8192 NT_STATUS_OK
ReadX 11329 102400 8192 8192 NT_STATUS_OK
ReadX 11329 110592 8192 8192 NT_STATUS_OK
ReadX 11329 118784 8192 8192 NT_STATUS_OK
ReadX 11329 126976 8192 8192 NT_STATUS_OK
ReadX 11329 135168 8192 8192 NT_STATUS_OK
ReadX 11329 143360 8192 8192 NT_STATUS_OK
ReadX 11329 151552 8192 8192 NT_STATUS_OK
ReadX 11329 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Close 11322 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11331 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11334 NT_STATUS_OK
WriteX 11334 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11334 258 NT_STATUS_OK
WriteX 11334 0 28489 28489 NT_STATUS_OK
Close 11334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11337 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 8192 8192 NT_STATUS_OK
ReadX 11341 8192 8192 8192 NT_STATUS_OK
ReadX 11341 16384 8192 8192 NT_STATUS_OK
ReadX 11341 24576 8192 8192 NT_STATUS_OK
ReadX 11341 32768 16384 16384 NT_STATUS_OK
ReadX 11341 49152 8192 8192 NT_STATUS_OK
ReadX 11341 57344 8192 8192 NT_STATUS_OK
ReadX 11341 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11343 NT_STATUS_OK
Close 11343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11346 NT_STATUS_OK
WriteX 11346 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11346 258 NT_STATUS_OK
WriteX 11346 0 29253 29253 NT_STATUS_OK
Close 11346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11353 NT_STATUS_OK
WriteX 11353 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11353 258 NT_STATUS_OK
WriteX 11353 0 30183 30183 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11354 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11356 NT_STATUS_OK
WriteX 11356 0 510 510 NT_STATUS_OK
WriteX 11356 510 512 512 NT_STATUS_OK
WriteX 11356 1022 510 510 NT_STATUS_OK
WriteX 11356 1532 510 510 NT_STATUS_OK
WriteX 11356 2042 168 168 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11357 NT_STATUS_OK
Close 11357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
WriteX 11359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11360 NT_STATUS_OK
ReadX 11360 61440 4096 4096 NT_STATUS_OK
ReadX 11360 126976 4096 4096 NT_STATUS_OK
WriteX 11360 0 65536 65536 NT_STATUS_OK
WriteX 11360 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 61440 4096 4096 NT_STATUS_OK
ReadX 11361 126976 4096 4096 NT_STATUS_OK
ReadX 11361 192512 4096 4096 NT_STATUS_OK
ReadX 11361 258048 4096 4096 NT_STATUS_OK
WriteX 11361 0 65536 65536 NT_STATUS_OK
WriteX 11361 65536 65536 65536 NT_STATUS_OK
WriteX 11361 131072 65536 65536 NT_STATUS_OK
WriteX 11361 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 61440 4096 4096 NT_STATUS_OK
ReadX 11362 126976 4096 4096 NT_STATUS_OK
ReadX 11362 192512 4096 4096 NT_STATUS_OK
ReadX 11362 258048 4096 4096 NT_STATUS_OK
ReadX 11362 323584 4096 4096 NT_STATUS_OK
ReadX 11362 389120 4096 4096 NT_STATUS_OK
ReadX 11362 454656 4096 4096 NT_STATUS_OK
ReadX 11362 520192 4096 4096 NT_STATUS_OK
WriteX 11362 0 65536 65536 NT_STATUS_OK
WriteX 11362 65536 65536 65536 NT_STATUS_OK
WriteX 11362 131072 65536 65536 NT_STATUS_OK
WriteX 11362 196608 65536 65536 NT_STATUS_OK
WriteX 11362 262144 65536 65536 NT_STATUS_OK
WriteX 11362 327680 65536 65536 NT_STATUS_OK
WriteX 11362 393216 65536 65536 NT_STATUS_OK
WriteX 11362 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11362 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11365 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11372 NT_STATUS_OK
Close 11372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11381 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11392 NT_STATUS_OK
Close 11392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11397 NT_STATUS_OK
Close 11397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11407 NT_STATUS_OK
Close 11407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11412 NT_STATUS_OK
Close 11412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11417 NT_STATUS_OK
Close 11417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11425 NT_STATUS_OK
Close 11425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11431 NT_STATUS_OK
WriteX 11431 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11431 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11431 0 65536 65536 NT_STATUS_OK
WriteX 11431 65536 65536 65536 NT_STATUS_OK
WriteX 11431 131072 65536 65536 NT_STATUS_OK
WriteX 11431 196608 65536 65536 NT_STATUS_OK
WriteX 11431 262144 26634 26634 NT_STATUS_OK
Close 11431 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11437 NT_STATUS_OK
Close 11437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 4096 4096 NT_STATUS_OK
Close 11438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 4096 4096 NT_STATUS_OK
ReadX 11439 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11440 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11444 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11447 NT_STATUS_OK
Close 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11449 NT_STATUS_OK
Close 11449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11453 NT_STATUS_OK
Close 11453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11456 NT_STATUS_OK
Close 11456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11458 NT_STATUS_OK
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11477 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11487 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11504 NT_STATUS_OK
Close 11504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11506 NT_STATUS_OK
Close 11506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 4096 4096 NT_STATUS_OK
Close 11518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11519 NT_STATUS_OK
ReadX 11519 0 4096 4096 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11530 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
Close 11533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11534 NT_STATUS_OK
ReadX 11534 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11563 0 4096 4096 NT_STATUS_OK
Close 11563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
ReadX 11565 4096 4096 4096 NT_STATUS_OK
ReadX 11565 8192 4096 4096 NT_STATUS_OK
ReadX 11565 12288 4096 4096 NT_STATUS_OK
ReadX 11565 16384 4096 4096 NT_STATUS_OK
ReadX 11565 20480 4096 4096 NT_STATUS_OK
ReadX 11565 24576 4096 4096 NT_STATUS_OK
ReadX 11565 28672 4096 4096 NT_STATUS_OK
ReadX 11565 32768 4096 4096 NT_STATUS_OK
ReadX 11565 36864 4096 4096 NT_STATUS_OK
ReadX 11565 40960 4096 4096 NT_STATUS_OK
ReadX 11565 45056 4096 4096 NT_STATUS_OK
ReadX 11565 49152 4096 4096 NT_STATUS_OK
ReadX 11565 53248 4096 4096 NT_STATUS_OK
ReadX 11565 57344 4096 4096 NT_STATUS_OK
ReadX 11565 61440 4096 4096 NT_STATUS_OK
ReadX 11565 65536 4096 4096 NT_STATUS_OK
ReadX 11565 69632 4096 4096 NT_STATUS_OK
ReadX 11565 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11566 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 65536 65536 NT_STATUS_OK
WriteX 11571 65536 19979 19979 NT_STATUS_OK
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Flush 11572 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Flush 11572 NT_STATUS_OK
QUERY_FILE_INFORMATION 11572 1004 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Flush 11572 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Flush 11572 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Flush 11572 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Flush 11572 NT_STATUS_OK
Close 11572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 0 4096 4096 NT_STATUS_OK
Close 11576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11577 1004 NT_STATUS_OK
WriteX 11577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11578 NT_STATUS_OK
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11583 NT_STATUS_OK
WriteX 11583 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11583 258 NT_STATUS_OK
WriteX 11583 0 65536 65536 NT_STATUS_OK
WriteX 11583 65536 17654 17654 NT_STATUS_OK
Close 11583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
QUERY_FILE_INFORMATION 11584 1004 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
SET_FILE_INFORMATION 11584 1004 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11585 NT_STATUS_OK
SET_FILE_INFORMATION 11585 1004 NT_STATUS_OK
Close 11585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11587 NT_STATUS_OK
Close 11587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
ReadX 11589 4096 4096 4096 NT_STATUS_OK
ReadX 11589 8192 4096 4096 NT_STATUS_OK
ReadX 11589 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11589 16384 4096 4096 NT_STATUS_OK
ReadX 11589 20480 4096 4096 NT_STATUS_OK
ReadX 11589 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
Close 11590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
Close 11591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11592 1004 NT_STATUS_OK
WriteX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11598 NT_STATUS_OK
WriteX 11598 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11598 258 NT_STATUS_OK
WriteX 11598 0 65536 65536 NT_STATUS_OK
WriteX 11598 65536 19490 19490 NT_STATUS_OK
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
QUERY_FILE_INFORMATION 11599 1004 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
SET_FILE_INFORMATION 11599 1004 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11600 NT_STATUS_OK
SET_FILE_INFORMATION 11600 1004 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11602 NT_STATUS_OK
Close 11602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11604 0 4096 4096 NT_STATUS_OK
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
ReadX 11606 4096 4096 4096 NT_STATUS_OK
ReadX 11606 8192 4096 4096 NT_STATUS_OK
ReadX 11606 12288 4096 4096 NT_STATUS_OK
ReadX 11606 16384 4096 4096 NT_STATUS_OK
ReadX 11606 20480 4096 4096 NT_STATUS_OK
ReadX 11606 24576 4096 4096 NT_STATUS_OK
ReadX 11606 28672 4096 4096 NT_STATUS_OK
ReadX 11606 32768 4096 4096 NT_STATUS_OK
ReadX 11606 36864 4096 4096 NT_STATUS_OK
ReadX 11606 40960 4096 4096 NT_STATUS_OK
ReadX 11606 45056 4096 4096 NT_STATUS_OK
ReadX 11606 49152 4096 4096 NT_STATUS_OK
ReadX 11606 53248 4096 4096 NT_STATUS_OK
ReadX 11606 57344 4096 4096 NT_STATUS_OK
ReadX 11606 61440 4096 4096 NT_STATUS_OK
ReadX 11606 65536 4096 4096 NT_STATUS_OK
ReadX 11606 69632 4096 4096 NT_STATUS_OK
ReadX 11606 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11606 1004 NT_STATUS_OK
WriteX 11606 0 4096 4096 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11607 NT_STATUS_OK
SET_FILE_INFORMATION 11607 1004 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11612 NT_STATUS_OK
WriteX 11612 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11612 258 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 8866 8866 NT_STATUS_OK
Close 11612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 4096 4096 NT_STATUS_OK
WriteX 11613 0 4096 4096 NT_STATUS_OK
Flush 11613 NT_STATUS_OK
SET_FILE_INFORMATION 11613 1004 NT_STATUS_OK
WriteX 11613 0 4096 4096 NT_STATUS_OK
Flush 11613 NT_STATUS_OK
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11617 1004 NT_STATUS_OK
WriteX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11618 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11620 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11623 NT_STATUS_OK
WriteX 11623 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
WriteX 11623 0 65536 65536 NT_STATUS_OK
WriteX 11623 65536 9298 9298 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11624 NT_STATUS_OK
ReadX 11624 0 4096 4096 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
Flush 11624 NT_STATUS_OK
SET_FILE_INFORMATION 11624 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
Flush 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11625 NT_STATUS_OK
SET_FILE_INFORMATION 11625 1004 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11626 NT_STATUS_OK
ReadX 11626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11627 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11630 0 4096 4096 NT_STATUS_OK
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11631 4096 4096 4096 NT_STATUS_OK
ReadX 11631 8192 4096 4096 NT_STATUS_OK
ReadX 11631 12288 4096 4096 NT_STATUS_OK
ReadX 11631 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11632 NT_STATUS_OK
ReadX 11632 0 4096 4096 NT_STATUS_OK
Close 11632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11633 NT_STATUS_OK
ReadX 11633 0 4096 4096 NT_STATUS_OK
Close 11633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11634 NT_STATUS_OK
ReadX 11634 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11634 1004 NT_STATUS_OK
WriteX 11634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11634 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11637 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11640 NT_STATUS_OK
WriteX 11640 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11640 258 NT_STATUS_OK
WriteX 11640 0 65536 65536 NT_STATUS_OK
WriteX 11640 65536 11540 11540 NT_STATUS_OK
Close 11640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11641 NT_STATUS_OK
ReadX 11641 0 4096 4096 NT_STATUS_OK
WriteX 11641 0 4096 4096 NT_STATUS_OK
Flush 11641 NT_STATUS_OK
SET_FILE_INFORMATION 11641 1004 NT_STATUS_OK
WriteX 11641 0 4096 4096 NT_STATUS_OK
Flush 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11642 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 61440 4096 4096 NT_STATUS_OK
ReadX 11646 126976 4096 4096 NT_STATUS_OK
WriteX 11646 0 65536 65536 NT_STATUS_OK
WriteX 11646 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 61440 4096 4096 NT_STATUS_OK
ReadX 11647 126976 4096 4096 NT_STATUS_OK
ReadX 11647 192512 4096 4096 NT_STATUS_OK
ReadX 11647 258048 4096 4096 NT_STATUS_OK
WriteX 11647 0 65536 65536 NT_STATUS_OK
WriteX 11647 65536 65536 65536 NT_STATUS_OK
WriteX 11647 131072 65536 65536 NT_STATUS_OK
WriteX 11647 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 61440 4096 4096 NT_STATUS_OK
ReadX 11648 126976 4096 4096 NT_STATUS_OK
ReadX 11648 192512 4096 4096 NT_STATUS_OK
ReadX 11648 258048 4096 4096 NT_STATUS_OK
ReadX 11648 323584 4096 4096 NT_STATUS_OK
ReadX 11648 389120 4096 4096 NT_STATUS_OK
ReadX 11648 454656 4096 4096 NT_STATUS_OK
ReadX 11648 520192 4096 4096 NT_STATUS_OK
WriteX 11648 0 65536 65536 NT_STATUS_OK
WriteX 11648 65536 65536 65536 NT_STATUS_OK
WriteX 11648 131072 65536 65536 NT_STATUS_OK
WriteX 11648 196608 65536 65536 NT_STATUS_OK
WriteX 11648 262144 65536 65536 NT_STATUS_OK
WriteX 11648 327680 65536 65536 NT_STATUS_OK
WriteX 11648 393216 65536 65536 NT_STATUS_OK
WriteX 11648 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
ReadX 11649 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11650 NT_STATUS_OK
WriteX 11650 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11650 258 NT_STATUS_OK
WriteX 11650 0 53 53 NT_STATUS_OK
Close 11650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11651 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11649 8192 4096 4096 NT_STATUS_OK
ReadX 11649 12288 4096 4096 NT_STATUS_OK
WriteX 11653 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11653 258 NT_STATUS_OK
ReadX 11649 16384 4096 4096 NT_STATUS_OK
ReadX 11649 20480 4096 4096 NT_STATUS_OK
WriteX 11653 0 15360 15360 NT_STATUS_OK
Close 11653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11654 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11654 1004 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11657 4096 4096 4096 NT_STATUS_OK
ReadX 11657 8192 4096 4096 NT_STATUS_OK
ReadX 11657 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
ReadX 11660 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 4096 4096 NT_STATUS_OK
ReadX 11661 4096 4096 4096 NT_STATUS_OK
ReadX 11661 8192 4096 4096 NT_STATUS_OK
Close 11660 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11662 NT_STATUS_OK
WriteX 11662 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11662 258 NT_STATUS_OK
WriteX 11662 0 15360 15360 NT_STATUS_OK
Close 11662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11663 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11663 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11664 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11666 NT_STATUS_OK
ReadX 11666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11667 NT_STATUS_OK
SET_FILE_INFORMATION 11667 1004 NT_STATUS_OK
Close 11667 NT_STATUS_OK
WriteX 11663 0 4096 4096 NT_STATUS_OK
Close 11663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11668 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
ReadX 11670 4096 4096 4096 NT_STATUS_OK
ReadX 11670 8192 4096 4096 NT_STATUS_OK
ReadX 11670 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11670 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11670 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11672 NT_STATUS_OK
WriteX 11672 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
WriteX 11672 0 53 53 NT_STATUS_OK
Close 11672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11671 4096 4096 4096 NT_STATUS_OK
ReadX 11671 8192 4096 4096 NT_STATUS_OK
ReadX 11671 12288 4096 4096 NT_STATUS_OK
WriteX 11675 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 258 NT_STATUS_OK
WriteX 11675 0 12006 12006 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11676 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11676 1004 NT_STATUS_OK
WriteX 11676 0 4096 4096 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11680 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11679 4096 4096 4096 NT_STATUS_OK
ReadX 11679 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11682 NT_STATUS_OK
WriteX 11682 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11682 258 NT_STATUS_OK
WriteX 11682 0 11991 11991 NT_STATUS_OK
Close 11682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11683 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11684 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11687 NT_STATUS_OK
SET_FILE_INFORMATION 11687 1004 NT_STATUS_OK
Close 11687 NT_STATUS_OK
WriteX 11683 0 4096 4096 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11691 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11690 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11690 1004 NT_STATUS_OK
ReadX 11690 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11690 1004 NT_STATUS_OK
WriteX 11690 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11690 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11690 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11690 1004 NT_STATUS_OK
Close 11666 NT_STATUS_OK
WriteX 11670 0 19054 19054 NT_STATUS_OK
WriteX 11690 0 12288 12288 NT_STATUS_OK
Close 11686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11693 NT_STATUS_OK
Close 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 61440 61440 NT_STATUS_OK
ReadX 11697 61440 4096 4096 NT_STATUS_OK
ReadX 11697 65536 61440 61440 NT_STATUS_OK
ReadX 11697 126976 4096 4096 NT_STATUS_OK
ReadX 11697 131072 61440 61440 NT_STATUS_OK
ReadX 11697 192512 4096 4096 NT_STATUS_OK
ReadX 11697 196608 61440 61440 NT_STATUS_OK
ReadX 11697 258048 4096 4096 NT_STATUS_OK
ReadX 11697 262144 61440 61440 NT_STATUS_OK
ReadX 11697 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 61440 61440 NT_STATUS_OK
ReadX 11698 61440 4096 4096 NT_STATUS_OK
ReadX 11698 65536 61440 61440 NT_STATUS_OK
ReadX 11698 126976 4096 4096 NT_STATUS_OK
ReadX 11698 131072 61440 61440 NT_STATUS_OK
ReadX 11698 192512 4096 4096 NT_STATUS_OK
ReadX 11698 196608 61440 61440 NT_STATUS_OK
ReadX 11698 258048 4096 4096 NT_STATUS_OK
ReadX 11698 262144 61440 61440 NT_STATUS_OK
ReadX 11698 323584 4096 4096 NT_STATUS_OK
ReadX 11698 327680 61440 61440 NT_STATUS_OK
ReadX 11698 389120 4096 4096 NT_STATUS_OK
ReadX 11698 393216 61440 61440 NT_STATUS_OK
ReadX 11698 454656 4096 4096 NT_STATUS_OK
ReadX 11698 458752 61440 61440 NT_STATUS_OK
ReadX 11698 520192 4096 4096 NT_STATUS_OK
ReadX 11698 524288 61440 61440 NT_STATUS_OK
ReadX 11698 585728 4096 4096 NT_STATUS_OK
ReadX 11698 589824 61440 61440 NT_STATUS_OK
ReadX 11698 651264 4096 4096 NT_STATUS_OK
ReadX 11698 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 61440 61440 NT_STATUS_OK
ReadX 11699 61440 4096 4096 NT_STATUS_OK
ReadX 11699 65536 61440 61440 NT_STATUS_OK
ReadX 11699 126976 4096 4096 NT_STATUS_OK
ReadX 11699 131072 61440 61440 NT_STATUS_OK
ReadX 11699 192512 4096 4096 NT_STATUS_OK
ReadX 11699 196608 61440 61440 NT_STATUS_OK
ReadX 11699 258048 4096 4096 NT_STATUS_OK
ReadX 11699 262144 61440 61440 NT_STATUS_OK
ReadX 11699 323584 4096 4096 NT_STATUS_OK
ReadX 11699 327680 61440 61440 NT_STATUS_OK
ReadX 11699 389120 4096 4096 NT_STATUS_OK
ReadX 11699 393216 61440 61440 NT_STATUS_OK
ReadX 11699 454656 4096 4096 NT_STATUS_OK
ReadX 11699 458752 61440 61440 NT_STATUS_OK
ReadX 11699 520192 4096 4096 NT_STATUS_OK
ReadX 11699 524288 61440 61440 NT_STATUS_OK
ReadX 11699 585728 4096 4096 NT_STATUS_OK
ReadX 11699 589824 61440 61440 NT_STATUS_OK
ReadX 11699 651264 4096 4096 NT_STATUS_OK
ReadX 11699 655360 61440 61440 NT_STATUS_OK
ReadX 11699 716800 4096 4096 NT_STATUS_OK
ReadX 11699 720896 61440 61440 NT_STATUS_OK
ReadX 11699 782336 4096 4096 NT_STATUS_OK
ReadX 11699 786432 61440 61440 NT_STATUS_OK
ReadX 11699 847872 4096 4096 NT_STATUS_OK
ReadX 11699 851968 61440 61440 NT_STATUS_OK
ReadX 11699 913408 4096 4096 NT_STATUS_OK
ReadX 11699 917504 61440 61440 NT_STATUS_OK
ReadX 11699 978944 4096 4096 NT_STATUS_OK
ReadX 11699 983040 61440 61440 NT_STATUS_OK
ReadX 11699 1044480 4096 4096 NT_STATUS_OK
ReadX 11699 1048576 61440 61440 NT_STATUS_OK
ReadX 11699 1110016 4096 4096 NT_STATUS_OK
ReadX 11699 1114112 61440 61440 NT_STATUS_OK
ReadX 11699 1175552 4096 4096 NT_STATUS_OK
ReadX 11699 1179648 61440 61440 NT_STATUS_OK
ReadX 11699 1241088 4096 4096 NT_STATUS_OK
ReadX 11699 1245184 61440 61440 NT_STATUS_OK
ReadX 11699 1306624 4096 4096 NT_STATUS_OK
ReadX 11699 1310720 61440 61440 NT_STATUS_OK
ReadX 11699 1372160 4096 4096 NT_STATUS_OK
ReadX 11699 1376256 61440 61440 NT_STATUS_OK
ReadX 11699 1437696 4096 4096 NT_STATUS_OK
ReadX 11699 1441792 61440 61440 NT_STATUS_OK
ReadX 11699 1503232 4096 4096 NT_STATUS_OK
ReadX 11699 1507328 61440 61440 NT_STATUS_OK
ReadX 11699 1568768 4096 4096 NT_STATUS_OK
ReadX 11699 1572864 61440 61440 NT_STATUS_OK
ReadX 11699 1634304 4096 4096 NT_STATUS_OK
ReadX 11699 1638400 61440 61440 NT_STATUS_OK
ReadX 11699 1699840 4096 4096 NT_STATUS_OK
ReadX 11699 1703936 61440 61440 NT_STATUS_OK
ReadX 11699 1765376 4096 4096 NT_STATUS_OK
ReadX 11699 1769472 61440 61440 NT_STATUS_OK
ReadX 11699 1830912 4096 4096 NT_STATUS_OK
ReadX 11699 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11706 NT_STATUS_OK
QUERY_FILE_INFORMATION 11706 1004 NT_STATUS_OK
WriteX 11706 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11706 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11708 NT_STATUS_OK
WriteX 11708 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11708 258 NT_STATUS_OK
WriteX 11708 0 491 491 NT_STATUS_OK
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11706 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11711 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11712 NT_STATUS_OK
WriteX 11712 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11712 258 NT_STATUS_OK
WriteX 11712 0 543 543 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11716 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11726 NT_STATUS_OK
QUERY_FILE_INFORMATION 11726 1004 NT_STATUS_OK
WriteX 11726 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11726 258 NT_STATUS_OK
WriteX 11726 0 2048 2048 NT_STATUS_OK
Close 11726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11727 0 4096 4096 NT_STATUS_OK
Flush 11727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11727 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11732 NT_STATUS_OK
WriteX 11732 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11732 258 NT_STATUS_OK
WriteX 11732 0 2048 2048 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11737 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11738 NT_STATUS_OK
WriteX 11738 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11738 258 NT_STATUS_OK
WriteX 11738 0 2048 2048 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 2048 2048 NT_STATUS_OK
ReadX 11717 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11721 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11733 0 4096 4096 NT_STATUS_OK
WriteX 11717 0 8192 8192 NT_STATUS_OK
WriteX 11718 0 4096 4096 NT_STATUS_OK
WriteX 11719 0 4096 4096 NT_STATUS_OK
ReadX 11733 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11743 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Close 11720 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11745 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11747 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11763 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 1004 NT_STATUS_OK
WriteX 11763 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 258 NT_STATUS_OK
WriteX 11763 0 2048 2048 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11765 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11771 NT_STATUS_OK
QUERY_FILE_INFORMATION 11771 1004 NT_STATUS_OK
WriteX 11771 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11771 258 NT_STATUS_OK
WriteX 11771 0 2048 2048 NT_STATUS_OK
Close 11771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
WriteX 11772 0 4096 4096 NT_STATUS_OK
Flush 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11772 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11766 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11774 NT_STATUS_OK
WriteX 11774 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 258 NT_STATUS_OK
WriteX 11774 0 4096 4096 NT_STATUS_OK
Close 11774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11776 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11777 NT_STATUS_OK
WriteX 11777 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11778 0 4096 4096 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11766 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11784 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11785 NT_STATUS_OK
WriteX 11785 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11785 258 NT_STATUS_OK
WriteX 11785 0 2048 2048 NT_STATUS_OK
Close 11785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11802 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11810 NT_STATUS_OK
ReadX 11810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11822 NT_STATUS_OK
QUERY_FILE_INFORMATION 11822 1004 NT_STATUS_OK
WriteX 11822 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11822 258 NT_STATUS_OK
WriteX 11822 0 2048 2048 NT_STATUS_OK
Close 11822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11824 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11834 NT_STATUS_OK
QUERY_FILE_INFORMATION 11834 1004 NT_STATUS_OK
WriteX 11834 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11834 258 NT_STATUS_OK
WriteX 11834 0 2048 2048 NT_STATUS_OK
Close 11834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11842 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 258 NT_STATUS_OK
WriteX 11842 0 2048 2048 NT_STATUS_OK
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11823 0 4096 4096 NT_STATUS_OK
Flush 11823 NT_STATUS_OK
WriteX 11835 0 4096 4096 NT_STATUS_OK
Flush 11835 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11823 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11835 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11825 4096 16384 16384 NT_STATUS_OK
ReadX 11805 4096 16384 16384 NT_STATUS_OK
ReadX 11837 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 2048 2048 NT_STATUS_OK
WriteX 11845 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11846 NT_STATUS_OK
QUERY_FILE_INFORMATION 11846 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11845 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11809 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Close 11813 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11848 NT_STATUS_OK
QUERY_FILE_INFORMATION 11848 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11850 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11853 4096 16384 16384 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
WriteX 11854 0 4096 4096 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
WriteX 11856 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 8192 8192 NT_STATUS_OK
ReadX 11859 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11873 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11873 0 4096 4096 NT_STATUS_OK
ReadX 11873 4096 4096 4096 NT_STATUS_OK
ReadX 11873 8192 4096 4096 NT_STATUS_OK
WriteX 11859 0 4096 4096 NT_STATUS_OK
WriteX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
ReadX 11874 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
WriteX 11854 0 4096 4096 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
WriteX 11856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11879 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
WriteX 11879 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 258 NT_STATUS_OK
WriteX 11879 0 2048 2048 NT_STATUS_OK
Close 11879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11880 NT_STATUS_OK
ReadX 11880 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11880 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11880 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11881 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 0 4096 4096 NT_STATUS_OK
ReadX 11882 4096 4096 4096 NT_STATUS_OK
WriteX 11882 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11880 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
ReadX 11884 4096 4096 4096 NT_STATUS_OK
WriteX 11884 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11885 NT_STATUS_OK
QUERY_FILE_INFORMATION 11885 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11873 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11887 0 4096 4096 NT_STATUS_OK
ReadX 11887 4096 4096 4096 NT_STATUS_OK
ReadX 11887 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
ReadX 11888 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11905 NT_STATUS_OK
QUERY_FILE_INFORMATION 11905 1004 NT_STATUS_OK
WriteX 11905 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11905 258 NT_STATUS_OK
WriteX 11905 0 2048 2048 NT_STATUS_OK
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11906 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11911 NT_STATUS_OK
QUERY_FILE_INFORMATION 11911 1004 NT_STATUS_OK
WriteX 11911 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11911 258 NT_STATUS_OK
WriteX 11911 0 2048 2048 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11912 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11895 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11913 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11915 NT_STATUS_OK
QUERY_FILE_INFORMATION 11915 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11917 NT_STATUS_OK
ReadX 11917 61440 4096 4096 NT_STATUS_OK
ReadX 11917 126976 4096 4096 NT_STATUS_OK
WriteX 11917 0 65536 65536 NT_STATUS_OK
WriteX 11917 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11918 NT_STATUS_OK
ReadX 11918 61440 4096 4096 NT_STATUS_OK
ReadX 11918 126976 4096 4096 NT_STATUS_OK
ReadX 11918 192512 4096 4096 NT_STATUS_OK
ReadX 11918 258048 4096 4096 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 65536 65536 NT_STATUS_OK
WriteX 11918 131072 65536 65536 NT_STATUS_OK
WriteX 11918 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 61440 4096 4096 NT_STATUS_OK
ReadX 11919 126976 4096 4096 NT_STATUS_OK
ReadX 11919 192512 4096 4096 NT_STATUS_OK
ReadX 11919 258048 4096 4096 NT_STATUS_OK
ReadX 11919 323584 4096 4096 NT_STATUS_OK
ReadX 11919 389120 4096 4096 NT_STATUS_OK
ReadX 11919 454656 4096 4096 NT_STATUS_OK
ReadX 11919 520192 4096 4096 NT_STATUS_OK
WriteX 11919 0 65536 65536 NT_STATUS_OK
WriteX 11919 65536 65536 65536 NT_STATUS_OK
WriteX 11919 131072 65536 65536 NT_STATUS_OK
WriteX 11919 196608 65536 65536 NT_STATUS_OK
WriteX 11919 262144 65536 65536 NT_STATUS_OK
WriteX 11919 327680 65536 65536 NT_STATUS_OK
WriteX 11919 393216 65536 65536 NT_STATUS_OK
WriteX 11919 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11920 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11920 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11920 8192 4096 4096 NT_STATUS_OK
ReadX 11920 12288 4096 4096 NT_STATUS_OK
ReadX 11920 16384 4096 4096 NT_STATUS_OK
ReadX 11920 20480 4096 4096 NT_STATUS_OK
ReadX 11920 24576 4096 4096 NT_STATUS_OK
ReadX 11920 28672 4096 4096 NT_STATUS_OK
ReadX 11920 32768 4096 4096 NT_STATUS_OK
ReadX 11920 36864 4096 4096 NT_STATUS_OK
ReadX 11920 40960 4096 4096 NT_STATUS_OK
ReadX 11920 45056 4096 4096 NT_STATUS_OK
ReadX 11920 49152 4096 4096 NT_STATUS_OK
ReadX 11920 53248 4096 4096 NT_STATUS_OK
ReadX 11920 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11920 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11923 NT_STATUS_OK
WriteX 11923 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11923 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11923 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11923 1004 NT_STATUS_OK
WriteX 11923 0 57088 57088 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
Flush 11923 NT_STATUS_OK
Close 11920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11924 NT_STATUS_OK
SET_FILE_INFORMATION 11924 1004 NT_STATUS_OK
Close 11924 NT_STATUS_OK
SET_FILE_INFORMATION 11923 1004 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
Close 11923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11927 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11928 NT_STATUS_OK
WriteX 11928 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11928 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11928 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11928 1004 NT_STATUS_OK
WriteX 11928 0 51456 51456 NT_STATUS_OK
WriteX 11928 0 4096 4096 NT_STATUS_OK
Flush 11928 NT_STATUS_OK
SET_FILE_INFORMATION 11928 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11928 1004 NT_STATUS_OK
WriteX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
Close 11927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11932 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11937 NT_STATUS_OK
WriteX 11937 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11937 258 NT_STATUS_OK
WriteX 11937 0 53077 53077 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11938 NT_STATUS_OK
WriteX 11938 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11938 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11938 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11938 1004 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 1856 1856 NT_STATUS_OK
WriteX 11938 0 4096 4096 NT_STATUS_OK
Flush 11938 NT_STATUS_OK
SET_FILE_INFORMATION 11938 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11938 1004 NT_STATUS_OK
WriteX 11938 0 4096 4096 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11944 NT_STATUS_OK
Close 11944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11947 NT_STATUS_OK
WriteX 11947 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11947 258 NT_STATUS_OK
WriteX 11947 0 7983 7983 NT_STATUS_OK
Close 11947 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11952 NT_STATUS_OK
WriteX 11952 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11952 258 NT_STATUS_OK
WriteX 11952 0 65536 65536 NT_STATUS_OK
WriteX 11952 65536 65536 65536 NT_STATUS_OK
WriteX 11952 131072 65536 65536 NT_STATUS_OK
WriteX 11952 196608 65536 65536 NT_STATUS_OK
WriteX 11952 262144 65536 65536 NT_STATUS_OK
WriteX 11952 327680 65536 65536 NT_STATUS_OK
WriteX 11952 393216 65536 65536 NT_STATUS_OK
WriteX 11952 458752 46731 46731 NT_STATUS_OK
Close 11952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11953 NT_STATUS_OK
WriteX 11953 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11942 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 65536 65536 NT_STATUS_OK
WriteX 11953 65536 22848 22848 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Flush 11953 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11957 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11958 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
ReadX 11958 8192 4096 4096 NT_STATUS_OK
ReadX 11958 12288 4096 4096 NT_STATUS_OK
ReadX 11958 16384 4096 4096 NT_STATUS_OK
ReadX 11958 20480 4096 4096 NT_STATUS_OK
ReadX 11958 24576 4096 4096 NT_STATUS_OK
ReadX 11958 28672 4096 4096 NT_STATUS_OK
ReadX 11958 32768 4096 4096 NT_STATUS_OK
ReadX 11958 36864 4096 4096 NT_STATUS_OK
ReadX 11958 40960 4096 4096 NT_STATUS_OK
ReadX 11958 45056 4096 4096 NT_STATUS_OK
ReadX 11958 49152 4096 4096 NT_STATUS_OK
ReadX 11958 53248 4096 4096 NT_STATUS_OK
ReadX 11958 57344 4096 4096 NT_STATUS_OK
ReadX 11958 61440 4096 4096 NT_STATUS_OK
ReadX 11958 65536 4096 4096 NT_STATUS_OK
ReadX 11958 69632 4096 4096 NT_STATUS_OK
ReadX 11958 73728 4096 4096 NT_STATUS_OK
ReadX 11958 77824 4096 4096 NT_STATUS_OK
ReadX 11958 81920 4096 4096 NT_STATUS_OK
ReadX 11958 86016 4096 4096 NT_STATUS_OK
ReadX 11958 90112 4096 4096 NT_STATUS_OK
ReadX 11958 94208 4096 4096 NT_STATUS_OK
ReadX 11958 98304 4096 4096 NT_STATUS_OK
ReadX 11958 102400 4096 4096 NT_STATUS_OK
ReadX 11958 106496 4096 4096 NT_STATUS_OK
ReadX 11958 110592 4096 4096 NT_STATUS_OK
ReadX 11958 114688 4096 4096 NT_STATUS_OK
ReadX 11958 118784 4096 4096 NT_STATUS_OK
ReadX 11958 122880 4096 4096 NT_STATUS_OK
ReadX 11958 126976 4096 4096 NT_STATUS_OK
ReadX 11958 131072 4096 4096 NT_STATUS_OK
ReadX 11958 135168 4096 4096 NT_STATUS_OK
ReadX 11958 139264 4096 4096 NT_STATUS_OK
ReadX 11958 143360 4096 4096 NT_STATUS_OK
ReadX 11958 147456 4096 4096 NT_STATUS_OK
ReadX 11958 151552 4096 4096 NT_STATUS_OK
ReadX 11958 155648 4096 4096 NT_STATUS_OK
ReadX 11958 159744 4096 4096 NT_STATUS_OK
ReadX 11958 163840 4096 4096 NT_STATUS_OK
ReadX 11958 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11958 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11961 NT_STATUS_OK
WriteX 11961 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11961 258 NT_STATUS_OK
Close 11958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11962 NT_STATUS_OK
SET_FILE_INFORMATION 11962 1004 NT_STATUS_OK
Close 11962 NT_STATUS_OK
WriteX 11961 0 42388 42388 NT_STATUS_OK
Close 11961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11963 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
ReadX 11965 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11966 NT_STATUS_OK
WriteX 11966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11966 258 NT_STATUS_OK
SET_FILE_INFORMATION 11966 1004 NT_STATUS_OK
WriteX 11966 0 42652 42652 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11968 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11970 NT_STATUS_OK
ReadX 11970 0 4096 4096 NT_STATUS_OK
ReadX 11970 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11975 NT_STATUS_OK
WriteX 11975 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11975 258 NT_STATUS_OK
WriteX 11975 0 65536 65536 NT_STATUS_OK
WriteX 11975 65536 49 49 NT_STATUS_OK
Close 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 61440 61440 NT_STATUS_OK
ReadX 11976 61440 4096 4096 NT_STATUS_OK
ReadX 11976 65536 61440 61440 NT_STATUS_OK
ReadX 11976 126976 4096 4096 NT_STATUS_OK
ReadX 11976 131072 61440 61440 NT_STATUS_OK
ReadX 11976 192512 4096 4096 NT_STATUS_OK
ReadX 11976 196608 61440 61440 NT_STATUS_OK
ReadX 11976 258048 4096 4096 NT_STATUS_OK
ReadX 11976 262144 61440 61440 NT_STATUS_OK
ReadX 11976 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 61440 61440 NT_STATUS_OK
ReadX 11977 61440 4096 4096 NT_STATUS_OK
ReadX 11977 65536 61440 61440 NT_STATUS_OK
ReadX 11977 126976 4096 4096 NT_STATUS_OK
ReadX 11977 131072 61440 61440 NT_STATUS_OK
ReadX 11977 192512 4096 4096 NT_STATUS_OK
ReadX 11977 196608 61440 61440 NT_STATUS_OK
ReadX 11977 258048 4096 4096 NT_STATUS_OK
ReadX 11977 262144 61440 61440 NT_STATUS_OK
ReadX 11977 323584 4096 4096 NT_STATUS_OK
ReadX 11977 327680 61440 61440 NT_STATUS_OK
ReadX 11977 389120 4096 4096 NT_STATUS_OK
ReadX 11977 393216 61440 61440 NT_STATUS_OK
ReadX 11977 454656 4096 4096 NT_STATUS_OK
ReadX 11977 458752 61440 61440 NT_STATUS_OK
ReadX 11977 520192 4096 4096 NT_STATUS_OK
ReadX 11977 524288 61440 61440 NT_STATUS_OK
ReadX 11977 585728 4096 4096 NT_STATUS_OK
ReadX 11977 589824 61440 61440 NT_STATUS_OK
ReadX 11977 651264 4096 4096 NT_STATUS_OK
ReadX 11977 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 61440 61440 NT_STATUS_OK
ReadX 11978 61440 4096 4096 NT_STATUS_OK
ReadX 11978 65536 61440 61440 NT_STATUS_OK
ReadX 11978 126976 4096 4096 NT_STATUS_OK
ReadX 11978 131072 61440 61440 NT_STATUS_OK
ReadX 11978 192512 4096 4096 NT_STATUS_OK
ReadX 11978 196608 61440 61440 NT_STATUS_OK
ReadX 11978 258048 4096 4096 NT_STATUS_OK
ReadX 11978 262144 61440 61440 NT_STATUS_OK
ReadX 11978 323584 4096 4096 NT_STATUS_OK
ReadX 11978 327680 61440 61440 NT_STATUS_OK
ReadX 11978 389120 4096 4096 NT_STATUS_OK
ReadX 11978 393216 61440 61440 NT_STATUS_OK
ReadX 11978 454656 4096 4096 NT_STATUS_OK
ReadX 11978 458752 61440 61440 NT_STATUS_OK
ReadX 11978 520192 4096 4096 NT_STATUS_OK
ReadX 11978 524288 61440 61440 NT_STATUS_OK
ReadX 11978 585728 4096 4096 NT_STATUS_OK
ReadX 11978 589824 61440 61440 NT_STATUS_OK
ReadX 11978 651264 4096 4096 NT_STATUS_OK
ReadX 11978 655360 61440 61440 NT_STATUS_OK
ReadX 11978 716800 4096 4096 NT_STATUS_OK
ReadX 11978 720896 61440 61440 NT_STATUS_OK
ReadX 11978 782336 4096 4096 NT_STATUS_OK
ReadX 11978 786432 61440 61440 NT_STATUS_OK
ReadX 11978 847872 4096 4096 NT_STATUS_OK
ReadX 11978 851968 61440 61440 NT_STATUS_OK
ReadX 11978 913408 4096 4096 NT_STATUS_OK
ReadX 11978 917504 61440 61440 NT_STATUS_OK
ReadX 11978 978944 4096 4096 NT_STATUS_OK
ReadX 11978 983040 61440 61440 NT_STATUS_OK
ReadX 11978 1044480 4096 4096 NT_STATUS_OK
ReadX 11978 1048576 61440 61440 NT_STATUS_OK
ReadX 11978 1110016 4096 4096 NT_STATUS_OK
ReadX 11978 1114112 61440 61440 NT_STATUS_OK
ReadX 11978 1175552 4096 4096 NT_STATUS_OK
ReadX 11978 1179648 61440 61440 NT_STATUS_OK
ReadX 11978 1241088 4096 4096 NT_STATUS_OK
ReadX 11978 1245184 61440 61440 NT_STATUS_OK
ReadX 11978 1306624 4096 4096 NT_STATUS_OK
ReadX 11978 1310720 61440 61440 NT_STATUS_OK
ReadX 11978 1372160 4096 4096 NT_STATUS_OK
ReadX 11978 1376256 61440 61440 NT_STATUS_OK
ReadX 11978 1437696 4096 4096 NT_STATUS_OK
ReadX 11978 1441792 61440 61440 NT_STATUS_OK
ReadX 11978 1503232 4096 4096 NT_STATUS_OK
ReadX 11978 1507328 61440 61440 NT_STATUS_OK
ReadX 11978 1568768 4096 4096 NT_STATUS_OK
ReadX 11978 1572864 61440 61440 NT_STATUS_OK
ReadX 11978 1634304 4096 4096 NT_STATUS_OK
ReadX 11978 1638400 61440 61440 NT_STATUS_OK
ReadX 11978 1699840 4096 4096 NT_STATUS_OK
ReadX 11978 1703936 61440 61440 NT_STATUS_OK
ReadX 11978 1765376 4096 4096 NT_STATUS_OK
ReadX 11978 1769472 61440 61440 NT_STATUS_OK
ReadX 11978 1830912 4096 4096 NT_STATUS_OK
ReadX 11978 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11980 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 1005 NT_STATUS_OK
ReadX 11980 2156 24 24 NT_STATUS_OK
ReadX 11980 2139 276 276 NT_STATUS_OK
ReadX 11980 2136 14 14 NT_STATUS_OK
ReadX 11980 2136 7 7 NT_STATUS_OK
ReadX 11980 2138 12 12 NT_STATUS_OK
ReadX 11980 2137 8 8 NT_STATUS_OK
ReadX 11980 2135 15 15 NT_STATUS_OK
ReadX 11980 0 16 16 NT_STATUS_OK
ReadX 11980 16 2048 2048 NT_STATUS_OK
ReadX 11980 2064 2048 2048 NT_STATUS_OK
ReadX 11980 257 2048 2048 NT_STATUS_OK
ReadX 11980 385 2048 2048 NT_STATUS_OK
ReadX 11980 513 2048 2048 NT_STATUS_OK
ReadX 11980 641 2048 2048 NT_STATUS_OK
ReadX 11980 769 2048 2048 NT_STATUS_OK
ReadX 11980 897 2048 2048 NT_STATUS_OK
ReadX 11980 1025 2048 2048 NT_STATUS_OK
ReadX 11980 1153 2048 2048 NT_STATUS_OK
ReadX 11980 1281 2048 2048 NT_STATUS_OK
ReadX 11980 1409 2048 2048 NT_STATUS_OK
ReadX 11980 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11985 NT_STATUS_OK
WriteX 11985 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 258 NT_STATUS_OK
WriteX 11985 0 10575 10575 NT_STATUS_OK
Flush 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11990 NT_STATUS_OK
LockX 11990 2147483538 1 NT_STATUS_OK
UnlockX 11990 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11990 1005 NT_STATUS_OK
ReadX 11990 0 512 512 NT_STATUS_OK
ReadX 11990 512 512 512 NT_STATUS_OK
ReadX 11990 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11990 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11990 1004 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11991 NT_STATUS_OK
QUERY_FILE_INFORMATION 11991 1005 NT_STATUS_OK
ReadX 11991 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11992 NT_STATUS_OK
LockX 11992 2147483538 1 NT_STATUS_OK
UnlockX 11992 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11992 1005 NT_STATUS_OK
ReadX 11992 0 512 512 NT_STATUS_OK
ReadX 11992 512 512 512 NT_STATUS_OK
ReadX 11992 1024 512 512 NT_STATUS_OK
ReadX 11992 288 20 20 NT_STATUS_OK
ReadX 11992 308 2084 2084 NT_STATUS_OK
ReadX 11992 388 2084 2084 NT_STATUS_OK
ReadX 11992 388 2084 2084 NT_STATUS_OK
ReadX 11979 2157 1386 1386 NT_STATUS_OK
ReadX 11992 2472 399 399 NT_STATUS_OK
ReadX 11992 3072 1536 1536 NT_STATUS_OK
ReadX 11992 544 149 149 NT_STATUS_OK
ReadX 11992 693 485 485 NT_STATUS_OK
Close 11992 NT_STATUS_OK
ReadX 11979 2157 4096 4096 NT_STATUS_OK
ReadX 11979 6253 4096 4096 NT_STATUS_OK
ReadX 11979 10349 4096 4096 NT_STATUS_OK
ReadX 11979 14445 4096 4096 NT_STATUS_OK
ReadX 11979 18541 4096 4096 NT_STATUS_OK
ReadX 11979 22637 256 256 NT_STATUS_OK
ReadX 11979 22893 4096 4096 NT_STATUS_OK
ReadX 11979 26989 4096 4096 NT_STATUS_OK
ReadX 11979 31085 4096 4096 NT_STATUS_OK
ReadX 11979 35181 4096 4096 NT_STATUS_OK
ReadX 11979 39277 4096 4096 NT_STATUS_OK
ReadX 11979 43373 4096 4096 NT_STATUS_OK
ReadX 11979 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11979 2157 1024 1024 NT_STATUS_OK
ReadX 11979 1667 4688 4688 NT_STATUS_OK
ReadX 11979 6355 3516 3516 NT_STATUS_OK
ReadX 11979 9871 16384 16384 NT_STATUS_OK
ReadX 11979 26255 3771 3771 NT_STATUS_OK
ReadX 11979 30026 2048 2048 NT_STATUS_OK
ReadX 11979 32074 1024 1024 NT_STATUS_OK
ReadX 11979 33098 6652 6652 NT_STATUS_OK
ReadX 11979 39750 16384 16384 NT_STATUS_OK
ReadX 11979 56134 10496 10496 NT_STATUS_OK
ReadX 11979 66630 1784 1784 NT_STATUS_OK
ReadX 11979 68414 90 90 NT_STATUS_OK
ReadX 11979 68504 273 273 NT_STATUS_OK
ReadX 11979 68777 1600 1600 NT_STATUS_OK
ReadX 11979 70377 640 640 NT_STATUS_OK
ReadX 11979 71017 1280 1280 NT_STATUS_OK
ReadX 11979 72297 8464 8464 NT_STATUS_OK
ReadX 11979 80761 158 158 NT_STATUS_OK
ReadX 11979 80919 912 912 NT_STATUS_OK
ReadX 11979 81831 1980 1980 NT_STATUS_OK
ReadX 11979 83811 2256 2256 NT_STATUS_OK
ReadX 11979 86067 400 400 NT_STATUS_OK
ReadX 11979 86467 252 252 NT_STATUS_OK
ReadX 11979 86719 42 42 NT_STATUS_OK
ReadX 11979 86761 725 725 NT_STATUS_OK
ReadX 11979 2009 512 512 NT_STATUS_OK
ReadX 11979 3895 9 9 NT_STATUS_OK
ReadX 11979 3781 46 46 NT_STATUS_OK
ReadX 11979 4059 92 92 NT_STATUS_OK
ReadX 11979 3781 92 92 NT_STATUS_OK
ReadX 11979 3986 184 184 NT_STATUS_OK
ReadX 11979 3987 16384 16384 NT_STATUS_OK
ReadX 11979 3902 16384 16384 NT_STATUS_OK
ReadX 11979 3781 10240 10240 NT_STATUS_OK
ReadX 11979 3821 16384 16384 NT_STATUS_OK
ReadX 11979 3891 935 935 NT_STATUS_OK
ReadX 11979 4060 10240 10240 NT_STATUS_OK
ReadX 11979 4059 184 184 NT_STATUS_OK
ReadX 11979 256 184 184 NT_STATUS_OK
ReadX 11979 256 1026 1026 NT_STATUS_OK
ReadX 11979 3901 326 326 NT_STATUS_OK
ReadX 11979 3899 652 652 NT_STATUS_OK
ReadX 11979 256 2 2 NT_STATUS_OK
ReadX 11979 258 4948 4948 NT_STATUS_OK
Close 11979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11994 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11997 NT_STATUS_OK
WriteX 11997 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11997 258 NT_STATUS_OK
WriteX 11997 0 65536 65536 NT_STATUS_OK
WriteX 11997 65536 65536 65536 NT_STATUS_OK
WriteX 11997 131072 65536 65536 NT_STATUS_OK
WriteX 11997 196608 65536 65536 NT_STATUS_OK
WriteX 11997 262144 65536 65536 NT_STATUS_OK
WriteX 11997 327680 65536 65536 NT_STATUS_OK
WriteX 11997 393216 65536 65536 NT_STATUS_OK
WriteX 11997 458752 65536 65536 NT_STATUS_OK
WriteX 11997 524288 65536 65536 NT_STATUS_OK
WriteX 11997 589824 35257 35257 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12002 NT_STATUS_OK
WriteX 12002 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12002 258 NT_STATUS_OK
WriteX 12002 0 65536 65536 NT_STATUS_OK
WriteX 12002 65536 65536 65536 NT_STATUS_OK
WriteX 12002 131072 65536 65536 NT_STATUS_OK
WriteX 12002 196608 65536 65536 NT_STATUS_OK
WriteX 12002 262144 65536 65536 NT_STATUS_OK
WriteX 12002 327680 65536 65536 NT_STATUS_OK
WriteX 12002 393216 65536 65536 NT_STATUS_OK
WriteX 12002 458752 65536 65536 NT_STATUS_OK
WriteX 12002 524288 65536 65536 NT_STATUS_OK
WriteX 12002 589824 57598 57598 NT_STATUS_OK
Close 12002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12004 NT_STATUS_OK
WriteX 12004 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 258 NT_STATUS_OK
WriteX 12004 0 12543 12543 NT_STATUS_OK
Flush 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 11988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12006 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12010 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
ReadX 12010 1938 24 24 NT_STATUS_OK
ReadX 12010 1920 276 276 NT_STATUS_OK
ReadX 12010 1918 14 14 NT_STATUS_OK
ReadX 12010 1918 7 7 NT_STATUS_OK
ReadX 12010 1919 12 12 NT_STATUS_OK
ReadX 12010 1919 8 8 NT_STATUS_OK
ReadX 12010 1917 15 15 NT_STATUS_OK
ReadX 12010 0 16 16 NT_STATUS_OK
ReadX 12010 16 2048 2048 NT_STATUS_OK
ReadX 12010 2064 2048 2048 NT_STATUS_OK
ReadX 12010 257 2048 2048 NT_STATUS_OK
ReadX 12010 385 2048 2048 NT_STATUS_OK
ReadX 12010 513 2048 2048 NT_STATUS_OK
ReadX 12010 641 2048 2048 NT_STATUS_OK
ReadX 12010 769 2048 2048 NT_STATUS_OK
ReadX 12010 897 2048 2048 NT_STATUS_OK
ReadX 12010 1025 2048 2048 NT_STATUS_OK
ReadX 12010 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12012 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12015 NT_STATUS_OK
WriteX 12015 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12015 258 NT_STATUS_OK
WriteX 12015 0 11588 11588 NT_STATUS_OK
Flush 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12016 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
Close 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12020 NT_STATUS_OK
WriteX 12020 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 258 NT_STATUS_OK
WriteX 12020 0 11615 11615 NT_STATUS_OK
Flush 12020 NT_STATUS_OK
Close 12020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12022 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12024 NT_STATUS_OK
ReadX 12024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12029 NT_STATUS_OK
WriteX 12029 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12029 258 NT_STATUS_OK
WriteX 12029 0 65536 65536 NT_STATUS_OK
WriteX 12029 65536 16050 16050 NT_STATUS_OK
Close 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12009 1939 64 64 NT_STATUS_OK
ReadX 12009 128 248 248 NT_STATUS_OK
ReadX 12009 128 568 568 NT_STATUS_OK
ReadX 12009 3872 1536 1536 NT_STATUS_OK
ReadX 12009 3456 2560 2560 NT_STATUS_OK
ReadX 12009 3136 512 512 NT_STATUS_OK
ReadX 12009 2880 4096 4096 NT_STATUS_OK
ReadX 12009 3264 3072 3072 NT_STATUS_OK
ReadX 12009 320 4096 4096 NT_STATUS_OK
ReadX 12009 1024 4096 4096 NT_STATUS_OK
ReadX 12009 3616 4096 4096 NT_STATUS_OK
ReadX 12009 1939 64 64 NT_STATUS_OK
ReadX 12009 128 248 248 NT_STATUS_OK
ReadX 12009 128 608 608 NT_STATUS_OK
ReadX 12009 2858 1024 1024 NT_STATUS_OK
ReadX 12009 2810 4096 4096 NT_STATUS_OK
ReadX 12009 2826 4096 4096 NT_STATUS_OK
ReadX 12009 2580 2048 2048 NT_STATUS_OK
ReadX 12009 2800 2560 2560 NT_STATUS_OK
ReadX 12009 2100 4096 4096 NT_STATUS_OK
ReadX 12009 2084 4096 4096 NT_STATUS_OK
ReadX 12009 868 4096 4096 NT_STATUS_OK
ReadX 12009 2324 4096 4096 NT_STATUS_OK
ReadX 12009 884 4096 4096 NT_STATUS_OK
ReadX 12009 2604 1024 1024 NT_STATUS_OK
ReadX 12009 580 4096 4096 NT_STATUS_OK
ReadX 12009 596 4096 4096 NT_STATUS_OK
ReadX 12009 2752 4096 4096 NT_STATUS_OK
ReadX 12009 2842 1024 1024 NT_STATUS_OK
ReadX 12009 660 4096 4096 NT_STATUS_OK
ReadX 12009 2720 4096 4096 NT_STATUS_OK
ReadX 12009 2736 4096 4096 NT_STATUS_OK
ReadX 12009 628 4096 4096 NT_STATUS_OK
ReadX 12009 2704 4096 4096 NT_STATUS_OK
ReadX 12009 1556 4096 4096 NT_STATUS_OK
ReadX 12009 576 4096 4096 NT_STATUS_OK
ReadX 12009 3168 1536 1536 NT_STATUS_OK
ReadX 12009 832 4096 4096 NT_STATUS_OK
ReadX 12009 1088 4096 4096 NT_STATUS_OK
ReadX 12009 1344 4096 4096 NT_STATUS_OK
ReadX 12009 1600 4096 4096 NT_STATUS_OK
ReadX 12009 1856 4096 4096 NT_STATUS_OK
ReadX 12009 2112 4096 4096 NT_STATUS_OK
ReadX 12009 1892 4096 4096 NT_STATUS_OK
ReadX 12009 820 4096 4096 NT_STATUS_OK
ReadX 12009 788 4096 4096 NT_STATUS_OK
ReadX 12009 1604 4096 4096 NT_STATUS_OK
ReadX 12009 3648 4096 4096 NT_STATUS_OK
ReadX 12009 2608 4096 4096 NT_STATUS_OK
ReadX 12009 548 4096 4096 NT_STATUS_OK
ReadX 12009 740 4096 4096 NT_STATUS_OK
ReadX 12009 1344 4096 4096 NT_STATUS_OK
ReadX 12009 3392 4096 4096 NT_STATUS_OK
ReadX 12009 3904 4096 4096 NT_STATUS_OK
ReadX 12009 644 4096 4096 NT_STATUS_OK
ReadX 12009 676 4096 4096 NT_STATUS_OK
ReadX 12009 2688 4096 4096 NT_STATUS_OK
ReadX 12009 320 4096 4096 NT_STATUS_OK
ReadX 12009 900 4096 4096 NT_STATUS_OK
ReadX 12009 1908 4096 4096 NT_STATUS_OK
ReadX 12009 852 4096 4096 NT_STATUS_OK
ReadX 12009 724 4096 4096 NT_STATUS_OK
ReadX 12009 2292 4096 4096 NT_STATUS_OK
ReadX 12009 612 4096 4096 NT_STATUS_OK
ReadX 12009 388 4096 4096 NT_STATUS_OK
ReadX 12009 2368 4096 4096 NT_STATUS_OK
ReadX 12009 2624 4096 4096 NT_STATUS_OK
ReadX 12009 500 4096 4096 NT_STATUS_OK
ReadX 12009 356 4096 4096 NT_STATUS_OK
ReadX 12009 1024 4096 4096 NT_STATUS_OK
ReadX 12009 576 4096 4096 NT_STATUS_OK
ReadX 12009 340 4096 4096 NT_STATUS_OK
ReadX 12009 420 4096 4096 NT_STATUS_OK
ReadX 12009 1600 4096 4096 NT_STATUS_OK
ReadX 12009 404 4096 4096 NT_STATUS_OK
ReadX 12009 1428 4096 4096 NT_STATUS_OK
ReadX 12009 2656 4096 4096 NT_STATUS_OK
ReadX 12009 2624 4096 4096 NT_STATUS_OK
ReadX 12009 452 4096 4096 NT_STATUS_OK
ReadX 12009 692 4096 4096 NT_STATUS_OK
ReadX 12009 564 4096 4096 NT_STATUS_OK
ReadX 12009 372 4096 4096 NT_STATUS_OK
ReadX 12009 468 4096 4096 NT_STATUS_OK
ReadX 12009 484 4096 4096 NT_STATUS_OK
ReadX 12009 1088 4096 4096 NT_STATUS_OK
ReadX 12009 1924 4096 4096 NT_STATUS_OK
ReadX 12009 2768 4096 4096 NT_STATUS_OK
ReadX 12009 832 4096 4096 NT_STATUS_OK
ReadX 12009 836 4096 4096 NT_STATUS_OK
ReadX 12009 1856 4096 4096 NT_STATUS_OK
ReadX 12009 2640 4096 4096 NT_STATUS_OK
ReadX 12009 436 4096 4096 NT_STATUS_OK
ReadX 12009 1828 4096 4096 NT_STATUS_OK
ReadX 12009 804 4096 4096 NT_STATUS_OK
ReadX 12009 1860 4096 4096 NT_STATUS_OK
ReadX 12009 1812 4096 4096 NT_STATUS_OK
ReadX 12009 756 4096 4096 NT_STATUS_OK
ReadX 12009 1636 4096 4096 NT_STATUS_OK
ReadX 12009 772 4096 4096 NT_STATUS_OK
ReadX 12009 2036 4096 4096 NT_STATUS_OK
ReadX 12009 1220 4096 4096 NT_STATUS_OK
ReadX 12009 1652 4096 4096 NT_STATUS_OK
ReadX 12009 2588 4096 4096 NT_STATUS_OK
ReadX 12009 916 4096 4096 NT_STATUS_OK
ReadX 12009 260 4096 4096 NT_STATUS_OK
ReadX 12009 932 4096 4096 NT_STATUS_OK
ReadX 12009 2624 4096 4096 NT_STATUS_OK
ReadX 12009 308 4096 4096 NT_STATUS_OK
ReadX 12009 292 4096 4096 NT_STATUS_OK
ReadX 12009 1140 4096 4096 NT_STATUS_OK
ReadX 12009 276 4096 4096 NT_STATUS_OK
ReadX 12009 2020 4096 4096 NT_STATUS_OK
ReadX 12009 2880 4096 4096 NT_STATUS_OK
ReadX 12009 516 4096 4096 NT_STATUS_OK
ReadX 12009 1844 4096 4096 NT_STATUS_OK
ReadX 12009 1124 4096 4096 NT_STATUS_OK
ReadX 12009 3136 4096 4096 NT_STATUS_OK
ReadX 12009 324 4096 4096 NT_STATUS_OK
ReadX 12009 1156 4096 4096 NT_STATUS_OK
ReadX 12009 1172 4096 4096 NT_STATUS_OK
ReadX 12009 2112 4096 4096 NT_STATUS_OK
ReadX 12009 2368 4096 4096 NT_STATUS_OK
ReadX 12009 964 4096 4096 NT_STATUS_OK
ReadX 12009 980 4096 4096 NT_STATUS_OK
ReadX 12009 1012 4096 4096 NT_STATUS_OK
ReadX 12009 532 4096 4096 NT_STATUS_OK
ReadX 12009 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12009 1620 4096 4096 NT_STATUS_OK
ReadX 12009 1604 4096 4096 NT_STATUS_OK
ReadX 12009 2116 4096 4096 NT_STATUS_OK
ReadX 12009 2132 4096 4096 NT_STATUS_OK
ReadX 12009 2148 4096 4096 NT_STATUS_OK
ReadX 12009 2276 4096 4096 NT_STATUS_OK
ReadX 12009 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12031 NT_STATUS_OK
Close 12031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12034 NT_STATUS_OK
QUERY_FILE_INFORMATION 11989 1004 NT_STATUS_OK
Close 11989 NT_STATUS_OK
WriteX 12034 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12034 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11991 1004 NT_STATUS_OK
Close 11991 NT_STATUS_OK
WriteX 12034 0 65536 65536 NT_STATUS_OK
WriteX 12034 65536 64850 64850 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12036 NT_STATUS_OK
WriteX 12036 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 258 NT_STATUS_OK
ReadX 12009 2068 4096 4096 NT_STATUS_OK
ReadX 12009 1588 4096 4096 NT_STATUS_OK
ReadX 12009 1572 4096 4096 NT_STATUS_OK
WriteX 12036 0 18630 18630 NT_STATUS_OK
Flush 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12009 612 4096 4096 NT_STATUS_OK
ReadX 12009 564 4096 4096 NT_STATUS_OK
ReadX 12009 1876 4096 4096 NT_STATUS_OK
ReadX 12009 628 4096 4096 NT_STATUS_OK
ReadX 12009 740 4096 4096 NT_STATUS_OK
ReadX 12009 724 4096 4096 NT_STATUS_OK
ReadX 12009 644 4096 4096 NT_STATUS_OK
ReadX 12009 2324 4096 4096 NT_STATUS_OK
ReadX 12009 660 4096 4096 NT_STATUS_OK
ReadX 12009 852 4096 4096 NT_STATUS_OK
ReadX 12009 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12009 2368 4096 4096 NT_STATUS_OK
ReadX 12009 1024 4096 4096 NT_STATUS_OK
ReadX 12009 320 4096 4096 NT_STATUS_OK
ReadX 12009 580 4096 4096 NT_STATUS_OK
ReadX 12009 3136 512 512 NT_STATUS_OK
ReadX 12009 2880 4096 4096 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 61440 4096 4096 NT_STATUS_OK
ReadX 12041 126976 4096 4096 NT_STATUS_OK
WriteX 12041 0 65536 65536 NT_STATUS_OK
WriteX 12041 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 61440 4096 4096 NT_STATUS_OK
ReadX 12042 126976 4096 4096 NT_STATUS_OK
ReadX 12042 192512 4096 4096 NT_STATUS_OK
ReadX 12042 258048 4096 4096 NT_STATUS_OK
WriteX 12042 0 65536 65536 NT_STATUS_OK
WriteX 12042 65536 65536 65536 NT_STATUS_OK
WriteX 12042 131072 65536 65536 NT_STATUS_OK
WriteX 12042 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 61440 4096 4096 NT_STATUS_OK
ReadX 12043 126976 4096 4096 NT_STATUS_OK
ReadX 12043 192512 4096 4096 NT_STATUS_OK
ReadX 12043 258048 4096 4096 NT_STATUS_OK
ReadX 12043 323584 4096 4096 NT_STATUS_OK
ReadX 12043 389120 4096 4096 NT_STATUS_OK
ReadX 12043 454656 4096 4096 NT_STATUS_OK
ReadX 12043 520192 4096 4096 NT_STATUS_OK
WriteX 12043 0 65536 65536 NT_STATUS_OK
WriteX 12043 65536 65536 65536 NT_STATUS_OK
WriteX 12043 131072 65536 65536 NT_STATUS_OK
WriteX 12043 196608 65536 65536 NT_STATUS_OK
WriteX 12043 262144 65536 65536 NT_STATUS_OK
WriteX 12043 327680 65536 65536 NT_STATUS_OK
WriteX 12043 393216 65536 65536 NT_STATUS_OK
WriteX 12043 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12046 NT_STATUS_OK
WriteX 12046 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12046 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12044 0 8192 8192 NT_STATUS_OK
Flush 12044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12044 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12044 0 8192 8192 NT_STATUS_OK
Flush 12044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12044 0 8192 8192 NT_STATUS_OK
Flush 12044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12044 0 8192 8192 NT_STATUS_OK
Flush 12044 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12051 NT_STATUS_OK
WriteX 12051 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12051 258 NT_STATUS_OK
WriteX 12051 0 62591 62591 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12056 NT_STATUS_OK
WriteX 12056 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 10845 10845 NT_STATUS_OK
Close 12056 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12061 NT_STATUS_OK
WriteX 12061 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 258 NT_STATUS_OK
WriteX 12061 0 30118 30118 NT_STATUS_OK
Close 12061 NT_STATUS_OK
WriteX 12044 0 4096 4096 NT_STATUS_OK
WriteX 12046 0 64 64 NT_STATUS_OK
Close 12046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 61440 61440 NT_STATUS_OK
ReadX 12063 61440 4096 4096 NT_STATUS_OK
ReadX 12063 65536 61440 61440 NT_STATUS_OK
ReadX 12063 126976 4096 4096 NT_STATUS_OK
ReadX 12063 131072 61440 61440 NT_STATUS_OK
ReadX 12063 192512 4096 4096 NT_STATUS_OK
ReadX 12063 196608 61440 61440 NT_STATUS_OK
ReadX 12063 258048 4096 4096 NT_STATUS_OK
ReadX 12063 262144 61440 61440 NT_STATUS_OK
ReadX 12063 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 61440 61440 NT_STATUS_OK
ReadX 12064 61440 4096 4096 NT_STATUS_OK
ReadX 12064 65536 61440 61440 NT_STATUS_OK
ReadX 12064 126976 4096 4096 NT_STATUS_OK
ReadX 12064 131072 61440 61440 NT_STATUS_OK
ReadX 12064 192512 4096 4096 NT_STATUS_OK
ReadX 12064 196608 61440 61440 NT_STATUS_OK
ReadX 12064 258048 4096 4096 NT_STATUS_OK
ReadX 12064 262144 61440 61440 NT_STATUS_OK
ReadX 12064 323584 4096 4096 NT_STATUS_OK
ReadX 12064 327680 61440 61440 NT_STATUS_OK
ReadX 12064 389120 4096 4096 NT_STATUS_OK
ReadX 12064 393216 61440 61440 NT_STATUS_OK
ReadX 12064 454656 4096 4096 NT_STATUS_OK
ReadX 12064 458752 61440 61440 NT_STATUS_OK
ReadX 12064 520192 4096 4096 NT_STATUS_OK
ReadX 12064 524288 61440 61440 NT_STATUS_OK
ReadX 12064 585728 4096 4096 NT_STATUS_OK
ReadX 12064 589824 61440 61440 NT_STATUS_OK
ReadX 12064 651264 4096 4096 NT_STATUS_OK
ReadX 12064 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12065 NT_STATUS_OK
ReadX 12065 0 61440 61440 NT_STATUS_OK
ReadX 12065 61440 4096 4096 NT_STATUS_OK
ReadX 12065 65536 61440 61440 NT_STATUS_OK
ReadX 12065 126976 4096 4096 NT_STATUS_OK
ReadX 12065 131072 61440 61440 NT_STATUS_OK
ReadX 12065 192512 4096 4096 NT_STATUS_OK
ReadX 12065 196608 61440 61440 NT_STATUS_OK
ReadX 12065 258048 4096 4096 NT_STATUS_OK
ReadX 12065 262144 61440 61440 NT_STATUS_OK
ReadX 12065 323584 4096 4096 NT_STATUS_OK
ReadX 12065 327680 61440 61440 NT_STATUS_OK
ReadX 12065 389120 4096 4096 NT_STATUS_OK
ReadX 12065 393216 61440 61440 NT_STATUS_OK
ReadX 12065 454656 4096 4096 NT_STATUS_OK
ReadX 12065 458752 61440 61440 NT_STATUS_OK
ReadX 12065 520192 4096 4096 NT_STATUS_OK
ReadX 12065 524288 61440 61440 NT_STATUS_OK
ReadX 12065 585728 4096 4096 NT_STATUS_OK
ReadX 12065 589824 61440 61440 NT_STATUS_OK
ReadX 12065 651264 4096 4096 NT_STATUS_OK
ReadX 12065 655360 61440 61440 NT_STATUS_OK
ReadX 12065 716800 4096 4096 NT_STATUS_OK
ReadX 12065 720896 61440 61440 NT_STATUS_OK
ReadX 12065 782336 4096 4096 NT_STATUS_OK
ReadX 12065 786432 61440 61440 NT_STATUS_OK
ReadX 12065 847872 4096 4096 NT_STATUS_OK
ReadX 12065 851968 61440 61440 NT_STATUS_OK
ReadX 12065 913408 4096 4096 NT_STATUS_OK
ReadX 12065 917504 61440 61440 NT_STATUS_OK
ReadX 12065 978944 4096 4096 NT_STATUS_OK
ReadX 12065 983040 61440 61440 NT_STATUS_OK
ReadX 12065 1044480 4096 4096 NT_STATUS_OK
ReadX 12065 1048576 61440 61440 NT_STATUS_OK
ReadX 12065 1110016 4096 4096 NT_STATUS_OK
ReadX 12065 1114112 61440 61440 NT_STATUS_OK
ReadX 12065 1175552 4096 4096 NT_STATUS_OK
ReadX 12065 1179648 61440 61440 NT_STATUS_OK
ReadX 12065 1241088 4096 4096 NT_STATUS_OK
ReadX 12065 1245184 61440 61440 NT_STATUS_OK
ReadX 12065 1306624 4096 4096 NT_STATUS_OK
ReadX 12065 1310720 61440 61440 NT_STATUS_OK
ReadX 12065 1372160 4096 4096 NT_STATUS_OK
ReadX 12065 1376256 61440 61440 NT_STATUS_OK
ReadX 12065 1437696 4096 4096 NT_STATUS_OK
ReadX 12065 1441792 61440 61440 NT_STATUS_OK
ReadX 12065 1503232 4096 4096 NT_STATUS_OK
ReadX 12065 1507328 61440 61440 NT_STATUS_OK
ReadX 12065 1568768 4096 4096 NT_STATUS_OK
ReadX 12065 1572864 61440 61440 NT_STATUS_OK
ReadX 12065 1634304 4096 4096 NT_STATUS_OK
ReadX 12065 1638400 61440 61440 NT_STATUS_OK
ReadX 12065 1699840 4096 4096 NT_STATUS_OK
ReadX 12065 1703936 61440 61440 NT_STATUS_OK
ReadX 12065 1765376 4096 4096 NT_STATUS_OK
ReadX 12065 1769472 61440 61440 NT_STATUS_OK
ReadX 12065 1830912 4096 4096 NT_STATUS_OK
ReadX 12065 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12066 NT_STATUS_OK
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12063 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
ReadX 12070 4096 4096 4096 NT_STATUS_OK
ReadX 12070 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12074 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12075 NT_STATUS_OK
Close 12075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12077 NT_STATUS_OK
ReadX 12077 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12078 NT_STATUS_OK
ReadX 12078 0 8192 8192 NT_STATUS_OK
ReadX 12078 8192 8192 8192 NT_STATUS_OK
ReadX 12078 16384 8192 8192 NT_STATUS_OK
ReadX 12078 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12080 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12083 NT_STATUS_OK
WriteX 12083 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
WriteX 12083 0 10438 10438 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12084 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12087 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12089 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12091 NT_STATUS_OK
Close 12091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
ReadX 12092 4096 4096 4096 NT_STATUS_OK
ReadX 12092 8192 4096 4096 NT_STATUS_OK
ReadX 12092 12288 8192 8192 NT_STATUS_OK
ReadX 12092 20480 8192 8192 NT_STATUS_OK
ReadX 12092 28672 8192 8192 NT_STATUS_OK
ReadX 12092 36864 8192 8192 NT_STATUS_OK
ReadX 12092 45056 8192 8192 NT_STATUS_OK
ReadX 12092 53248 8192 8192 NT_STATUS_OK
ReadX 12092 61440 8192 8192 NT_STATUS_OK
ReadX 12092 69632 8192 8192 NT_STATUS_OK
ReadX 12092 77824 8192 8192 NT_STATUS_OK
ReadX 12092 86016 8192 8192 NT_STATUS_OK
ReadX 12092 94208 8192 8192 NT_STATUS_OK
ReadX 12092 102400 8192 8192 NT_STATUS_OK
ReadX 12092 110592 8192 8192 NT_STATUS_OK
ReadX 12092 118784 8192 8192 NT_STATUS_OK
ReadX 12092 126976 8192 8192 NT_STATUS_OK
ReadX 12092 135168 8192 8192 NT_STATUS_OK
ReadX 12092 143360 8192 8192 NT_STATUS_OK
ReadX 12092 151552 8192 8192 NT_STATUS_OK
ReadX 12092 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Close 12085 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12094 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12097 NT_STATUS_OK
WriteX 12097 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12097 258 NT_STATUS_OK
WriteX 12097 0 28489 28489 NT_STATUS_OK
Close 12097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12100 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 8192 8192 NT_STATUS_OK
ReadX 12104 8192 8192 8192 NT_STATUS_OK
ReadX 12104 16384 8192 8192 NT_STATUS_OK
ReadX 12104 24576 8192 8192 NT_STATUS_OK
ReadX 12104 32768 16384 16384 NT_STATUS_OK
ReadX 12104 49152 8192 8192 NT_STATUS_OK
ReadX 12104 57344 8192 8192 NT_STATUS_OK
ReadX 12104 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12106 NT_STATUS_OK
Close 12106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12109 NT_STATUS_OK
WriteX 12109 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12109 258 NT_STATUS_OK
WriteX 12109 0 29253 29253 NT_STATUS_OK
Close 12109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12116 NT_STATUS_OK
WriteX 12116 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12116 258 NT_STATUS_OK
WriteX 12116 0 30183 30183 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12117 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12119 NT_STATUS_OK
WriteX 12119 0 510 510 NT_STATUS_OK
WriteX 12119 510 512 512 NT_STATUS_OK
WriteX 12119 1022 510 510 NT_STATUS_OK
WriteX 12119 1532 510 510 NT_STATUS_OK
WriteX 12119 2042 168 168 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12120 NT_STATUS_OK
Close 12120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
WriteX 12122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12123 NT_STATUS_OK
ReadX 12123 61440 4096 4096 NT_STATUS_OK
ReadX 12123 126976 4096 4096 NT_STATUS_OK
WriteX 12123 0 65536 65536 NT_STATUS_OK
WriteX 12123 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 61440 4096 4096 NT_STATUS_OK
ReadX 12124 126976 4096 4096 NT_STATUS_OK
ReadX 12124 192512 4096 4096 NT_STATUS_OK
ReadX 12124 258048 4096 4096 NT_STATUS_OK
WriteX 12124 0 65536 65536 NT_STATUS_OK
WriteX 12124 65536 65536 65536 NT_STATUS_OK
WriteX 12124 131072 65536 65536 NT_STATUS_OK
WriteX 12124 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 61440 4096 4096 NT_STATUS_OK
ReadX 12125 126976 4096 4096 NT_STATUS_OK
ReadX 12125 192512 4096 4096 NT_STATUS_OK
ReadX 12125 258048 4096 4096 NT_STATUS_OK
ReadX 12125 323584 4096 4096 NT_STATUS_OK
ReadX 12125 389120 4096 4096 NT_STATUS_OK
ReadX 12125 454656 4096 4096 NT_STATUS_OK
ReadX 12125 520192 4096 4096 NT_STATUS_OK
WriteX 12125 0 65536 65536 NT_STATUS_OK
WriteX 12125 65536 65536 65536 NT_STATUS_OK
WriteX 12125 131072 65536 65536 NT_STATUS_OK
WriteX 12125 196608 65536 65536 NT_STATUS_OK
WriteX 12125 262144 65536 65536 NT_STATUS_OK
WriteX 12125 327680 65536 65536 NT_STATUS_OK
WriteX 12125 393216 65536 65536 NT_STATUS_OK
WriteX 12125 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12125 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12128 NT_STATUS_OK
Close 12128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12135 NT_STATUS_OK
Close 12135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12144 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12155 NT_STATUS_OK
Close 12155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12160 NT_STATUS_OK
Close 12160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12170 NT_STATUS_OK
Close 12170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12175 NT_STATUS_OK
Close 12175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12180 NT_STATUS_OK
Close 12180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12188 NT_STATUS_OK
Close 12188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12194 NT_STATUS_OK
WriteX 12194 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12194 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12194 0 65536 65536 NT_STATUS_OK
WriteX 12194 65536 65536 65536 NT_STATUS_OK
WriteX 12194 131072 65536 65536 NT_STATUS_OK
WriteX 12194 196608 65536 65536 NT_STATUS_OK
WriteX 12194 262144 26634 26634 NT_STATUS_OK
Close 12194 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12200 NT_STATUS_OK
Close 12200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 4096 4096 NT_STATUS_OK
Close 12201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 4096 4096 NT_STATUS_OK
ReadX 12202 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12203 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12207 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12210 NT_STATUS_OK
Close 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12212 NT_STATUS_OK
Close 12212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12216 NT_STATUS_OK
Close 12216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12219 NT_STATUS_OK
Close 12219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12221 NT_STATUS_OK
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12240 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12250 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12267 NT_STATUS_OK
Close 12267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12269 NT_STATUS_OK
Close 12269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 4096 4096 NT_STATUS_OK
Close 12281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12282 NT_STATUS_OK
ReadX 12282 0 4096 4096 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12293 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
Close 12295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 4096 4096 NT_STATUS_OK
Close 12296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12297 NT_STATUS_OK
ReadX 12297 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12326 0 4096 4096 NT_STATUS_OK
Close 12326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
ReadX 12328 4096 4096 4096 NT_STATUS_OK
ReadX 12328 8192 4096 4096 NT_STATUS_OK
ReadX 12328 12288 4096 4096 NT_STATUS_OK
ReadX 12328 16384 4096 4096 NT_STATUS_OK
ReadX 12328 20480 4096 4096 NT_STATUS_OK
ReadX 12328 24576 4096 4096 NT_STATUS_OK
ReadX 12328 28672 4096 4096 NT_STATUS_OK
ReadX 12328 32768 4096 4096 NT_STATUS_OK
ReadX 12328 36864 4096 4096 NT_STATUS_OK
ReadX 12328 40960 4096 4096 NT_STATUS_OK
ReadX 12328 45056 4096 4096 NT_STATUS_OK
ReadX 12328 49152 4096 4096 NT_STATUS_OK
ReadX 12328 53248 4096 4096 NT_STATUS_OK
ReadX 12328 57344 4096 4096 NT_STATUS_OK
ReadX 12328 61440 4096 4096 NT_STATUS_OK
ReadX 12328 65536 4096 4096 NT_STATUS_OK
ReadX 12328 69632 4096 4096 NT_STATUS_OK
ReadX 12328 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12329 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 65536 65536 NT_STATUS_OK
WriteX 12334 65536 19979 19979 NT_STATUS_OK
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Flush 12335 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Flush 12335 NT_STATUS_OK
QUERY_FILE_INFORMATION 12335 1004 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Flush 12335 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Flush 12335 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Flush 12335 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Flush 12335 NT_STATUS_OK
Close 12335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 0 4096 4096 NT_STATUS_OK
Close 12339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12340 1004 NT_STATUS_OK
WriteX 12340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12341 NT_STATUS_OK
Close 12341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12346 NT_STATUS_OK
WriteX 12346 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12346 258 NT_STATUS_OK
WriteX 12346 0 65536 65536 NT_STATUS_OK
WriteX 12346 65536 17654 17654 NT_STATUS_OK
Close 12346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
QUERY_FILE_INFORMATION 12347 1004 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
SET_FILE_INFORMATION 12347 1004 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12348 NT_STATUS_OK
SET_FILE_INFORMATION 12348 1004 NT_STATUS_OK
Close 12348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
ReadX 12352 4096 4096 4096 NT_STATUS_OK
ReadX 12352 8192 4096 4096 NT_STATUS_OK
ReadX 12352 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12352 16384 4096 4096 NT_STATUS_OK
ReadX 12352 20480 4096 4096 NT_STATUS_OK
ReadX 12352 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
Close 12353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
Close 12354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12355 1004 NT_STATUS_OK
WriteX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12361 NT_STATUS_OK
WriteX 12361 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12361 258 NT_STATUS_OK
WriteX 12361 0 65536 65536 NT_STATUS_OK
WriteX 12361 65536 19490 19490 NT_STATUS_OK
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
QUERY_FILE_INFORMATION 12362 1004 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
SET_FILE_INFORMATION 12362 1004 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12363 NT_STATUS_OK
SET_FILE_INFORMATION 12363 1004 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12365 NT_STATUS_OK
Close 12365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12367 0 4096 4096 NT_STATUS_OK
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
ReadX 12369 4096 4096 4096 NT_STATUS_OK
ReadX 12369 8192 4096 4096 NT_STATUS_OK
ReadX 12369 12288 4096 4096 NT_STATUS_OK
ReadX 12369 16384 4096 4096 NT_STATUS_OK
ReadX 12369 20480 4096 4096 NT_STATUS_OK
ReadX 12369 24576 4096 4096 NT_STATUS_OK
ReadX 12369 28672 4096 4096 NT_STATUS_OK
ReadX 12369 32768 4096 4096 NT_STATUS_OK
ReadX 12369 36864 4096 4096 NT_STATUS_OK
ReadX 12369 40960 4096 4096 NT_STATUS_OK
ReadX 12369 45056 4096 4096 NT_STATUS_OK
ReadX 12369 49152 4096 4096 NT_STATUS_OK
ReadX 12369 53248 4096 4096 NT_STATUS_OK
ReadX 12369 57344 4096 4096 NT_STATUS_OK
ReadX 12369 61440 4096 4096 NT_STATUS_OK
ReadX 12369 65536 4096 4096 NT_STATUS_OK
ReadX 12369 69632 4096 4096 NT_STATUS_OK
ReadX 12369 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12369 1004 NT_STATUS_OK
WriteX 12369 0 4096 4096 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12370 NT_STATUS_OK
SET_FILE_INFORMATION 12370 1004 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12375 NT_STATUS_OK
WriteX 12375 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12375 258 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 8866 8866 NT_STATUS_OK
Close 12375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 0 4096 4096 NT_STATUS_OK
WriteX 12376 0 4096 4096 NT_STATUS_OK
Flush 12376 NT_STATUS_OK
SET_FILE_INFORMATION 12376 1004 NT_STATUS_OK
WriteX 12376 0 4096 4096 NT_STATUS_OK
Flush 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12380 1004 NT_STATUS_OK
WriteX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12381 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12386 NT_STATUS_OK
WriteX 12386 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
WriteX 12386 0 65536 65536 NT_STATUS_OK
WriteX 12386 65536 9298 9298 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12387 NT_STATUS_OK
ReadX 12387 0 4096 4096 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
Flush 12387 NT_STATUS_OK
SET_FILE_INFORMATION 12387 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
Flush 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12388 NT_STATUS_OK
SET_FILE_INFORMATION 12388 1004 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12389 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12390 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12393 0 4096 4096 NT_STATUS_OK
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12394 4096 4096 4096 NT_STATUS_OK
ReadX 12394 8192 4096 4096 NT_STATUS_OK
ReadX 12394 12288 4096 4096 NT_STATUS_OK
ReadX 12394 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12395 NT_STATUS_OK
ReadX 12395 0 4096 4096 NT_STATUS_OK
Close 12395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12396 NT_STATUS_OK
ReadX 12396 0 4096 4096 NT_STATUS_OK
Close 12396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12397 NT_STATUS_OK
ReadX 12397 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12397 1004 NT_STATUS_OK
WriteX 12397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12400 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12403 NT_STATUS_OK
WriteX 12403 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12403 258 NT_STATUS_OK
WriteX 12403 0 65536 65536 NT_STATUS_OK
WriteX 12403 65536 11540 11540 NT_STATUS_OK
Close 12403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12404 NT_STATUS_OK
ReadX 12404 0 4096 4096 NT_STATUS_OK
WriteX 12404 0 4096 4096 NT_STATUS_OK
Flush 12404 NT_STATUS_OK
SET_FILE_INFORMATION 12404 1004 NT_STATUS_OK
WriteX 12404 0 4096 4096 NT_STATUS_OK
Flush 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12405 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 61440 4096 4096 NT_STATUS_OK
ReadX 12409 126976 4096 4096 NT_STATUS_OK
WriteX 12409 0 65536 65536 NT_STATUS_OK
WriteX 12409 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 61440 4096 4096 NT_STATUS_OK
ReadX 12410 126976 4096 4096 NT_STATUS_OK
ReadX 12410 192512 4096 4096 NT_STATUS_OK
ReadX 12410 258048 4096 4096 NT_STATUS_OK
WriteX 12410 0 65536 65536 NT_STATUS_OK
WriteX 12410 65536 65536 65536 NT_STATUS_OK
WriteX 12410 131072 65536 65536 NT_STATUS_OK
WriteX 12410 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 61440 4096 4096 NT_STATUS_OK
ReadX 12411 126976 4096 4096 NT_STATUS_OK
ReadX 12411 192512 4096 4096 NT_STATUS_OK
ReadX 12411 258048 4096 4096 NT_STATUS_OK
ReadX 12411 323584 4096 4096 NT_STATUS_OK
ReadX 12411 389120 4096 4096 NT_STATUS_OK
ReadX 12411 454656 4096 4096 NT_STATUS_OK
ReadX 12411 520192 4096 4096 NT_STATUS_OK
WriteX 12411 0 65536 65536 NT_STATUS_OK
WriteX 12411 65536 65536 65536 NT_STATUS_OK
WriteX 12411 131072 65536 65536 NT_STATUS_OK
WriteX 12411 196608 65536 65536 NT_STATUS_OK
WriteX 12411 262144 65536 65536 NT_STATUS_OK
WriteX 12411 327680 65536 65536 NT_STATUS_OK
WriteX 12411 393216 65536 65536 NT_STATUS_OK
WriteX 12411 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
ReadX 12412 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12413 NT_STATUS_OK
WriteX 12413 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12413 258 NT_STATUS_OK
WriteX 12413 0 53 53 NT_STATUS_OK
Close 12413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12414 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12412 8192 4096 4096 NT_STATUS_OK
ReadX 12412 12288 4096 4096 NT_STATUS_OK
WriteX 12416 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12416 258 NT_STATUS_OK
ReadX 12412 16384 4096 4096 NT_STATUS_OK
ReadX 12412 20480 4096 4096 NT_STATUS_OK
WriteX 12416 0 15360 15360 NT_STATUS_OK
Close 12416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12417 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12417 1004 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12420 4096 4096 4096 NT_STATUS_OK
ReadX 12420 8192 4096 4096 NT_STATUS_OK
ReadX 12420 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
ReadX 12423 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 4096 4096 NT_STATUS_OK
ReadX 12424 4096 4096 4096 NT_STATUS_OK
ReadX 12424 8192 4096 4096 NT_STATUS_OK
Close 12423 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12425 NT_STATUS_OK
WriteX 12425 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12425 258 NT_STATUS_OK
WriteX 12425 0 15360 15360 NT_STATUS_OK
Close 12425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12426 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12426 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12427 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12429 NT_STATUS_OK
ReadX 12429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12430 NT_STATUS_OK
SET_FILE_INFORMATION 12430 1004 NT_STATUS_OK
Close 12430 NT_STATUS_OK
WriteX 12426 0 4096 4096 NT_STATUS_OK
Close 12426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12431 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
ReadX 12433 4096 4096 4096 NT_STATUS_OK
ReadX 12433 8192 4096 4096 NT_STATUS_OK
ReadX 12433 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12433 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12433 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12435 NT_STATUS_OK
WriteX 12435 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
WriteX 12435 0 53 53 NT_STATUS_OK
Close 12435 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12434 4096 4096 4096 NT_STATUS_OK
ReadX 12434 8192 4096 4096 NT_STATUS_OK
ReadX 12434 12288 4096 4096 NT_STATUS_OK
WriteX 12438 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 258 NT_STATUS_OK
WriteX 12438 0 12006 12006 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12439 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12439 1004 NT_STATUS_OK
WriteX 12439 0 4096 4096 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12443 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12442 4096 4096 4096 NT_STATUS_OK
ReadX 12442 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12445 NT_STATUS_OK
WriteX 12445 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12445 258 NT_STATUS_OK
WriteX 12445 0 11991 11991 NT_STATUS_OK
Close 12445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12446 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12447 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12450 NT_STATUS_OK
WriteX 12433 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 12450 1004 NT_STATUS_OK
Close 12450 NT_STATUS_OK
WriteX 12446 0 4096 4096 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12454 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12453 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12453 1004 NT_STATUS_OK
ReadX 12453 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12453 1004 NT_STATUS_OK
WriteX 12453 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12453 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12453 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12453 1004 NT_STATUS_OK
Close 12429 NT_STATUS_OK
WriteX 12453 0 12288 12288 NT_STATUS_OK
Close 12449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12456 NT_STATUS_OK
Close 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 61440 61440 NT_STATUS_OK
ReadX 12460 61440 4096 4096 NT_STATUS_OK
ReadX 12460 65536 61440 61440 NT_STATUS_OK
ReadX 12460 126976 4096 4096 NT_STATUS_OK
ReadX 12460 131072 61440 61440 NT_STATUS_OK
ReadX 12460 192512 4096 4096 NT_STATUS_OK
ReadX 12460 196608 61440 61440 NT_STATUS_OK
ReadX 12460 258048 4096 4096 NT_STATUS_OK
ReadX 12460 262144 61440 61440 NT_STATUS_OK
ReadX 12460 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 61440 61440 NT_STATUS_OK
ReadX 12461 61440 4096 4096 NT_STATUS_OK
ReadX 12461 65536 61440 61440 NT_STATUS_OK
ReadX 12461 126976 4096 4096 NT_STATUS_OK
ReadX 12461 131072 61440 61440 NT_STATUS_OK
ReadX 12461 192512 4096 4096 NT_STATUS_OK
ReadX 12461 196608 61440 61440 NT_STATUS_OK
ReadX 12461 258048 4096 4096 NT_STATUS_OK
ReadX 12461 262144 61440 61440 NT_STATUS_OK
ReadX 12461 323584 4096 4096 NT_STATUS_OK
ReadX 12461 327680 61440 61440 NT_STATUS_OK
ReadX 12461 389120 4096 4096 NT_STATUS_OK
ReadX 12461 393216 61440 61440 NT_STATUS_OK
ReadX 12461 454656 4096 4096 NT_STATUS_OK
ReadX 12461 458752 61440 61440 NT_STATUS_OK
ReadX 12461 520192 4096 4096 NT_STATUS_OK
ReadX 12461 524288 61440 61440 NT_STATUS_OK
ReadX 12461 585728 4096 4096 NT_STATUS_OK
ReadX 12461 589824 61440 61440 NT_STATUS_OK
ReadX 12461 651264 4096 4096 NT_STATUS_OK
ReadX 12461 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 61440 61440 NT_STATUS_OK
ReadX 12462 61440 4096 4096 NT_STATUS_OK
ReadX 12462 65536 61440 61440 NT_STATUS_OK
ReadX 12462 126976 4096 4096 NT_STATUS_OK
ReadX 12462 131072 61440 61440 NT_STATUS_OK
ReadX 12462 192512 4096 4096 NT_STATUS_OK
ReadX 12462 196608 61440 61440 NT_STATUS_OK
ReadX 12462 258048 4096 4096 NT_STATUS_OK
ReadX 12462 262144 61440 61440 NT_STATUS_OK
ReadX 12462 323584 4096 4096 NT_STATUS_OK
ReadX 12462 327680 61440 61440 NT_STATUS_OK
ReadX 12462 389120 4096 4096 NT_STATUS_OK
ReadX 12462 393216 61440 61440 NT_STATUS_OK
ReadX 12462 454656 4096 4096 NT_STATUS_OK
ReadX 12462 458752 61440 61440 NT_STATUS_OK
ReadX 12462 520192 4096 4096 NT_STATUS_OK
ReadX 12462 524288 61440 61440 NT_STATUS_OK
ReadX 12462 585728 4096 4096 NT_STATUS_OK
ReadX 12462 589824 61440 61440 NT_STATUS_OK
ReadX 12462 651264 4096 4096 NT_STATUS_OK
ReadX 12462 655360 61440 61440 NT_STATUS_OK
ReadX 12462 716800 4096 4096 NT_STATUS_OK
ReadX 12462 720896 61440 61440 NT_STATUS_OK
ReadX 12462 782336 4096 4096 NT_STATUS_OK
ReadX 12462 786432 61440 61440 NT_STATUS_OK
ReadX 12462 847872 4096 4096 NT_STATUS_OK
ReadX 12462 851968 61440 61440 NT_STATUS_OK
ReadX 12462 913408 4096 4096 NT_STATUS_OK
ReadX 12462 917504 61440 61440 NT_STATUS_OK
ReadX 12462 978944 4096 4096 NT_STATUS_OK
ReadX 12462 983040 61440 61440 NT_STATUS_OK
ReadX 12462 1044480 4096 4096 NT_STATUS_OK
ReadX 12462 1048576 61440 61440 NT_STATUS_OK
ReadX 12462 1110016 4096 4096 NT_STATUS_OK
ReadX 12462 1114112 61440 61440 NT_STATUS_OK
ReadX 12462 1175552 4096 4096 NT_STATUS_OK
ReadX 12462 1179648 61440 61440 NT_STATUS_OK
ReadX 12462 1241088 4096 4096 NT_STATUS_OK
ReadX 12462 1245184 61440 61440 NT_STATUS_OK
ReadX 12462 1306624 4096 4096 NT_STATUS_OK
ReadX 12462 1310720 61440 61440 NT_STATUS_OK
ReadX 12462 1372160 4096 4096 NT_STATUS_OK
ReadX 12462 1376256 61440 61440 NT_STATUS_OK
ReadX 12462 1437696 4096 4096 NT_STATUS_OK
ReadX 12462 1441792 61440 61440 NT_STATUS_OK
ReadX 12462 1503232 4096 4096 NT_STATUS_OK
ReadX 12462 1507328 61440 61440 NT_STATUS_OK
ReadX 12462 1568768 4096 4096 NT_STATUS_OK
ReadX 12462 1572864 61440 61440 NT_STATUS_OK
ReadX 12462 1634304 4096 4096 NT_STATUS_OK
ReadX 12462 1638400 61440 61440 NT_STATUS_OK
ReadX 12462 1699840 4096 4096 NT_STATUS_OK
ReadX 12462 1703936 61440 61440 NT_STATUS_OK
ReadX 12462 1765376 4096 4096 NT_STATUS_OK
ReadX 12462 1769472 61440 61440 NT_STATUS_OK
ReadX 12462 1830912 4096 4096 NT_STATUS_OK
ReadX 12462 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12469 NT_STATUS_OK
QUERY_FILE_INFORMATION 12469 1004 NT_STATUS_OK
WriteX 12469 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12469 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12471 NT_STATUS_OK
WriteX 12471 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12471 258 NT_STATUS_OK
WriteX 12471 0 491 491 NT_STATUS_OK
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12469 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12474 NT_STATUS_OK
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12475 NT_STATUS_OK
WriteX 12475 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12475 258 NT_STATUS_OK
WriteX 12475 0 543 543 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12479 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12489 NT_STATUS_OK
QUERY_FILE_INFORMATION 12489 1004 NT_STATUS_OK
WriteX 12489 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12489 258 NT_STATUS_OK
WriteX 12489 0 2048 2048 NT_STATUS_OK
Close 12489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12490 0 4096 4096 NT_STATUS_OK
Flush 12490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12490 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12495 NT_STATUS_OK
WriteX 12495 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12495 258 NT_STATUS_OK
WriteX 12495 0 2048 2048 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12500 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12501 NT_STATUS_OK
WriteX 12501 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12501 258 NT_STATUS_OK
WriteX 12501 0 2048 2048 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 2048 2048 NT_STATUS_OK
ReadX 12480 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12496 0 4096 4096 NT_STATUS_OK
WriteX 12480 0 8192 8192 NT_STATUS_OK
WriteX 12481 0 4096 4096 NT_STATUS_OK
WriteX 12482 0 4096 4096 NT_STATUS_OK
ReadX 12496 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12506 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12483 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12510 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12526 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 1004 NT_STATUS_OK
WriteX 12526 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 258 NT_STATUS_OK
WriteX 12526 0 2048 2048 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12534 NT_STATUS_OK
QUERY_FILE_INFORMATION 12534 1004 NT_STATUS_OK
WriteX 12534 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12534 258 NT_STATUS_OK
WriteX 12534 0 2048 2048 NT_STATUS_OK
Close 12534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
WriteX 12535 0 4096 4096 NT_STATUS_OK
Flush 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12535 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12529 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12537 NT_STATUS_OK
WriteX 12537 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 258 NT_STATUS_OK
WriteX 12537 0 4096 4096 NT_STATUS_OK
Close 12537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12539 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12540 NT_STATUS_OK
WriteX 12540 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12541 0 4096 4096 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12529 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12547 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12548 NT_STATUS_OK
WriteX 12548 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12548 258 NT_STATUS_OK
WriteX 12548 0 2048 2048 NT_STATUS_OK
Close 12548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12565 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12584 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12585 NT_STATUS_OK
QUERY_FILE_INFORMATION 12585 1004 NT_STATUS_OK
WriteX 12585 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12585 258 NT_STATUS_OK
WriteX 12585 0 2048 2048 NT_STATUS_OK
Close 12585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12587 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12597 NT_STATUS_OK
QUERY_FILE_INFORMATION 12597 1004 NT_STATUS_OK
WriteX 12597 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12597 258 NT_STATUS_OK
WriteX 12597 0 2048 2048 NT_STATUS_OK
Close 12597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12605 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 258 NT_STATUS_OK
WriteX 12605 0 2048 2048 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
Flush 12586 NT_STATUS_OK
WriteX 12598 0 4096 4096 NT_STATUS_OK
Flush 12598 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12598 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12588 4096 16384 16384 NT_STATUS_OK
ReadX 12568 4096 16384 16384 NT_STATUS_OK
ReadX 12600 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 2048 2048 NT_STATUS_OK
WriteX 12608 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12609 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12608 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Close 12576 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12611 NT_STATUS_OK
QUERY_FILE_INFORMATION 12611 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12613 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12616 4096 16384 16384 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
WriteX 12617 0 4096 4096 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
WriteX 12619 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 8192 8192 NT_STATUS_OK
ReadX 12622 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12636 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12636 0 4096 4096 NT_STATUS_OK
ReadX 12636 4096 4096 4096 NT_STATUS_OK
ReadX 12636 8192 4096 4096 NT_STATUS_OK
WriteX 12622 0 4096 4096 NT_STATUS_OK
WriteX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
ReadX 12637 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
WriteX 12617 0 4096 4096 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
WriteX 12619 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12642 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1004 NT_STATUS_OK
WriteX 12642 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 258 NT_STATUS_OK
WriteX 12642 0 2048 2048 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12643 NT_STATUS_OK
ReadX 12643 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12643 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12643 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12644 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 0 4096 4096 NT_STATUS_OK
ReadX 12645 4096 4096 4096 NT_STATUS_OK
WriteX 12645 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12643 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
ReadX 12647 4096 4096 4096 NT_STATUS_OK
WriteX 12647 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12648 NT_STATUS_OK
QUERY_FILE_INFORMATION 12648 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Close 12632 NT_STATUS_OK
Close 12634 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12636 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12650 0 4096 4096 NT_STATUS_OK
ReadX 12650 4096 4096 4096 NT_STATUS_OK
ReadX 12650 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
ReadX 12651 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12668 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 258 NT_STATUS_OK
WriteX 12668 0 2048 2048 NT_STATUS_OK
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12669 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12674 NT_STATUS_OK
QUERY_FILE_INFORMATION 12674 1004 NT_STATUS_OK
WriteX 12674 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12674 258 NT_STATUS_OK
WriteX 12674 0 2048 2048 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12675 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12658 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12676 NT_STATUS_OK
QUERY_FILE_INFORMATION 12676 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Close 12654 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12678 NT_STATUS_OK
QUERY_FILE_INFORMATION 12678 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12680 NT_STATUS_OK
ReadX 12680 61440 4096 4096 NT_STATUS_OK
ReadX 12680 126976 4096 4096 NT_STATUS_OK
WriteX 12680 0 65536 65536 NT_STATUS_OK
WriteX 12680 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12681 NT_STATUS_OK
ReadX 12681 61440 4096 4096 NT_STATUS_OK
ReadX 12681 126976 4096 4096 NT_STATUS_OK
ReadX 12681 192512 4096 4096 NT_STATUS_OK
ReadX 12681 258048 4096 4096 NT_STATUS_OK
WriteX 12681 0 65536 65536 NT_STATUS_OK
WriteX 12681 65536 65536 65536 NT_STATUS_OK
WriteX 12681 131072 65536 65536 NT_STATUS_OK
WriteX 12681 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 61440 4096 4096 NT_STATUS_OK
ReadX 12682 126976 4096 4096 NT_STATUS_OK
ReadX 12682 192512 4096 4096 NT_STATUS_OK
ReadX 12682 258048 4096 4096 NT_STATUS_OK
ReadX 12682 323584 4096 4096 NT_STATUS_OK
ReadX 12682 389120 4096 4096 NT_STATUS_OK
ReadX 12682 454656 4096 4096 NT_STATUS_OK
ReadX 12682 520192 4096 4096 NT_STATUS_OK
WriteX 12682 0 65536 65536 NT_STATUS_OK
WriteX 12682 65536 65536 65536 NT_STATUS_OK
WriteX 12682 131072 65536 65536 NT_STATUS_OK
WriteX 12682 196608 65536 65536 NT_STATUS_OK
WriteX 12682 262144 65536 65536 NT_STATUS_OK
WriteX 12682 327680 65536 65536 NT_STATUS_OK
WriteX 12682 393216 65536 65536 NT_STATUS_OK
WriteX 12682 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12683 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12683 8192 4096 4096 NT_STATUS_OK
ReadX 12683 12288 4096 4096 NT_STATUS_OK
ReadX 12683 16384 4096 4096 NT_STATUS_OK
ReadX 12683 20480 4096 4096 NT_STATUS_OK
ReadX 12683 24576 4096 4096 NT_STATUS_OK
ReadX 12683 28672 4096 4096 NT_STATUS_OK
ReadX 12683 32768 4096 4096 NT_STATUS_OK
ReadX 12683 36864 4096 4096 NT_STATUS_OK
ReadX 12683 40960 4096 4096 NT_STATUS_OK
ReadX 12683 45056 4096 4096 NT_STATUS_OK
ReadX 12683 49152 4096 4096 NT_STATUS_OK
ReadX 12683 53248 4096 4096 NT_STATUS_OK
ReadX 12683 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12683 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12684 NT_STATUS_OK
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12686 NT_STATUS_OK
WriteX 12686 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12686 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12686 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12686 1004 NT_STATUS_OK
WriteX 12686 0 57088 57088 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
Flush 12686 NT_STATUS_OK
Close 12683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12687 NT_STATUS_OK
SET_FILE_INFORMATION 12687 1004 NT_STATUS_OK
Close 12687 NT_STATUS_OK
SET_FILE_INFORMATION 12686 1004 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
Close 12686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12690 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12691 NT_STATUS_OK
WriteX 12691 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12691 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12691 1004 NT_STATUS_OK
WriteX 12691 0 51456 51456 NT_STATUS_OK
WriteX 12691 0 4096 4096 NT_STATUS_OK
Flush 12691 NT_STATUS_OK
SET_FILE_INFORMATION 12691 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12691 1004 NT_STATUS_OK
WriteX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
Close 12690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12695 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12700 NT_STATUS_OK
WriteX 12700 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12700 258 NT_STATUS_OK
WriteX 12700 0 53077 53077 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12701 NT_STATUS_OK
WriteX 12701 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12701 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12701 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12701 1004 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 1856 1856 NT_STATUS_OK
WriteX 12701 0 4096 4096 NT_STATUS_OK
Flush 12701 NT_STATUS_OK
SET_FILE_INFORMATION 12701 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12701 1004 NT_STATUS_OK
WriteX 12701 0 4096 4096 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12707 NT_STATUS_OK
Close 12707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12710 NT_STATUS_OK
WriteX 12710 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 258 NT_STATUS_OK
WriteX 12710 0 7983 7983 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12715 NT_STATUS_OK
WriteX 12715 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12715 258 NT_STATUS_OK
WriteX 12715 0 65536 65536 NT_STATUS_OK
WriteX 12715 65536 65536 65536 NT_STATUS_OK
WriteX 12715 131072 65536 65536 NT_STATUS_OK
WriteX 12715 196608 65536 65536 NT_STATUS_OK
WriteX 12715 262144 65536 65536 NT_STATUS_OK
WriteX 12715 327680 65536 65536 NT_STATUS_OK
WriteX 12715 393216 65536 65536 NT_STATUS_OK
WriteX 12715 458752 46731 46731 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12716 NT_STATUS_OK
WriteX 12716 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12705 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 65536 65536 NT_STATUS_OK
WriteX 12716 65536 22848 22848 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Flush 12716 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12720 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12721 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
ReadX 12721 8192 4096 4096 NT_STATUS_OK
ReadX 12721 12288 4096 4096 NT_STATUS_OK
ReadX 12721 16384 4096 4096 NT_STATUS_OK
ReadX 12721 20480 4096 4096 NT_STATUS_OK
ReadX 12721 24576 4096 4096 NT_STATUS_OK
ReadX 12721 28672 4096 4096 NT_STATUS_OK
ReadX 12721 32768 4096 4096 NT_STATUS_OK
ReadX 12721 36864 4096 4096 NT_STATUS_OK
ReadX 12721 40960 4096 4096 NT_STATUS_OK
ReadX 12721 45056 4096 4096 NT_STATUS_OK
ReadX 12721 49152 4096 4096 NT_STATUS_OK
ReadX 12721 53248 4096 4096 NT_STATUS_OK
ReadX 12721 57344 4096 4096 NT_STATUS_OK
ReadX 12721 61440 4096 4096 NT_STATUS_OK
ReadX 12721 65536 4096 4096 NT_STATUS_OK
ReadX 12721 69632 4096 4096 NT_STATUS_OK
ReadX 12721 73728 4096 4096 NT_STATUS_OK
ReadX 12721 77824 4096 4096 NT_STATUS_OK
ReadX 12721 81920 4096 4096 NT_STATUS_OK
ReadX 12721 86016 4096 4096 NT_STATUS_OK
ReadX 12721 90112 4096 4096 NT_STATUS_OK
ReadX 12721 94208 4096 4096 NT_STATUS_OK
ReadX 12721 98304 4096 4096 NT_STATUS_OK
ReadX 12721 102400 4096 4096 NT_STATUS_OK
ReadX 12721 106496 4096 4096 NT_STATUS_OK
ReadX 12721 110592 4096 4096 NT_STATUS_OK
ReadX 12721 114688 4096 4096 NT_STATUS_OK
ReadX 12721 118784 4096 4096 NT_STATUS_OK
ReadX 12721 122880 4096 4096 NT_STATUS_OK
ReadX 12721 126976 4096 4096 NT_STATUS_OK
ReadX 12721 131072 4096 4096 NT_STATUS_OK
ReadX 12721 135168 4096 4096 NT_STATUS_OK
ReadX 12721 139264 4096 4096 NT_STATUS_OK
ReadX 12721 143360 4096 4096 NT_STATUS_OK
ReadX 12721 147456 4096 4096 NT_STATUS_OK
ReadX 12721 151552 4096 4096 NT_STATUS_OK
ReadX 12721 155648 4096 4096 NT_STATUS_OK
ReadX 12721 159744 4096 4096 NT_STATUS_OK
ReadX 12721 163840 4096 4096 NT_STATUS_OK
ReadX 12721 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12721 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12724 NT_STATUS_OK
WriteX 12724 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12724 258 NT_STATUS_OK
Close 12721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12725 NT_STATUS_OK
SET_FILE_INFORMATION 12725 1004 NT_STATUS_OK
Close 12725 NT_STATUS_OK
WriteX 12724 0 42388 42388 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12726 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
ReadX 12728 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12729 NT_STATUS_OK
WriteX 12729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12729 258 NT_STATUS_OK
SET_FILE_INFORMATION 12729 1004 NT_STATUS_OK
WriteX 12729 0 42652 42652 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12731 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12733 NT_STATUS_OK
ReadX 12733 0 4096 4096 NT_STATUS_OK
ReadX 12733 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12735 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12738 NT_STATUS_OK
WriteX 12738 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12738 258 NT_STATUS_OK
WriteX 12738 0 65536 65536 NT_STATUS_OK
WriteX 12738 65536 49 49 NT_STATUS_OK
Close 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 61440 61440 NT_STATUS_OK
ReadX 12739 61440 4096 4096 NT_STATUS_OK
ReadX 12739 65536 61440 61440 NT_STATUS_OK
ReadX 12739 126976 4096 4096 NT_STATUS_OK
ReadX 12739 131072 61440 61440 NT_STATUS_OK
ReadX 12739 192512 4096 4096 NT_STATUS_OK
ReadX 12739 196608 61440 61440 NT_STATUS_OK
ReadX 12739 258048 4096 4096 NT_STATUS_OK
ReadX 12739 262144 61440 61440 NT_STATUS_OK
ReadX 12739 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 61440 61440 NT_STATUS_OK
ReadX 12740 61440 4096 4096 NT_STATUS_OK
ReadX 12740 65536 61440 61440 NT_STATUS_OK
ReadX 12740 126976 4096 4096 NT_STATUS_OK
ReadX 12740 131072 61440 61440 NT_STATUS_OK
ReadX 12740 192512 4096 4096 NT_STATUS_OK
ReadX 12740 196608 61440 61440 NT_STATUS_OK
ReadX 12740 258048 4096 4096 NT_STATUS_OK
ReadX 12740 262144 61440 61440 NT_STATUS_OK
ReadX 12740 323584 4096 4096 NT_STATUS_OK
ReadX 12740 327680 61440 61440 NT_STATUS_OK
ReadX 12740 389120 4096 4096 NT_STATUS_OK
ReadX 12740 393216 61440 61440 NT_STATUS_OK
ReadX 12740 454656 4096 4096 NT_STATUS_OK
ReadX 12740 458752 61440 61440 NT_STATUS_OK
ReadX 12740 520192 4096 4096 NT_STATUS_OK
ReadX 12740 524288 61440 61440 NT_STATUS_OK
ReadX 12740 585728 4096 4096 NT_STATUS_OK
ReadX 12740 589824 61440 61440 NT_STATUS_OK
ReadX 12740 651264 4096 4096 NT_STATUS_OK
ReadX 12740 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 61440 61440 NT_STATUS_OK
ReadX 12741 61440 4096 4096 NT_STATUS_OK
ReadX 12741 65536 61440 61440 NT_STATUS_OK
ReadX 12741 126976 4096 4096 NT_STATUS_OK
ReadX 12741 131072 61440 61440 NT_STATUS_OK
ReadX 12741 192512 4096 4096 NT_STATUS_OK
ReadX 12741 196608 61440 61440 NT_STATUS_OK
ReadX 12741 258048 4096 4096 NT_STATUS_OK
ReadX 12741 262144 61440 61440 NT_STATUS_OK
ReadX 12741 323584 4096 4096 NT_STATUS_OK
ReadX 12741 327680 61440 61440 NT_STATUS_OK
ReadX 12741 389120 4096 4096 NT_STATUS_OK
ReadX 12741 393216 61440 61440 NT_STATUS_OK
ReadX 12741 454656 4096 4096 NT_STATUS_OK
ReadX 12741 458752 61440 61440 NT_STATUS_OK
ReadX 12741 520192 4096 4096 NT_STATUS_OK
ReadX 12741 524288 61440 61440 NT_STATUS_OK
ReadX 12741 585728 4096 4096 NT_STATUS_OK
ReadX 12741 589824 61440 61440 NT_STATUS_OK
ReadX 12741 651264 4096 4096 NT_STATUS_OK
ReadX 12741 655360 61440 61440 NT_STATUS_OK
ReadX 12741 716800 4096 4096 NT_STATUS_OK
ReadX 12741 720896 61440 61440 NT_STATUS_OK
ReadX 12741 782336 4096 4096 NT_STATUS_OK
ReadX 12741 786432 61440 61440 NT_STATUS_OK
ReadX 12741 847872 4096 4096 NT_STATUS_OK
ReadX 12741 851968 61440 61440 NT_STATUS_OK
ReadX 12741 913408 4096 4096 NT_STATUS_OK
ReadX 12741 917504 61440 61440 NT_STATUS_OK
ReadX 12741 978944 4096 4096 NT_STATUS_OK
ReadX 12741 983040 61440 61440 NT_STATUS_OK
ReadX 12741 1044480 4096 4096 NT_STATUS_OK
ReadX 12741 1048576 61440 61440 NT_STATUS_OK
ReadX 12741 1110016 4096 4096 NT_STATUS_OK
ReadX 12741 1114112 61440 61440 NT_STATUS_OK
ReadX 12741 1175552 4096 4096 NT_STATUS_OK
ReadX 12741 1179648 61440 61440 NT_STATUS_OK
ReadX 12741 1241088 4096 4096 NT_STATUS_OK
ReadX 12741 1245184 61440 61440 NT_STATUS_OK
ReadX 12741 1306624 4096 4096 NT_STATUS_OK
ReadX 12741 1310720 61440 61440 NT_STATUS_OK
ReadX 12741 1372160 4096 4096 NT_STATUS_OK
ReadX 12741 1376256 61440 61440 NT_STATUS_OK
ReadX 12741 1437696 4096 4096 NT_STATUS_OK
ReadX 12741 1441792 61440 61440 NT_STATUS_OK
ReadX 12741 1503232 4096 4096 NT_STATUS_OK
ReadX 12741 1507328 61440 61440 NT_STATUS_OK
ReadX 12741 1568768 4096 4096 NT_STATUS_OK
ReadX 12741 1572864 61440 61440 NT_STATUS_OK
ReadX 12741 1634304 4096 4096 NT_STATUS_OK
ReadX 12741 1638400 61440 61440 NT_STATUS_OK
ReadX 12741 1699840 4096 4096 NT_STATUS_OK
ReadX 12741 1703936 61440 61440 NT_STATUS_OK
ReadX 12741 1765376 4096 4096 NT_STATUS_OK
ReadX 12741 1769472 61440 61440 NT_STATUS_OK
ReadX 12741 1830912 4096 4096 NT_STATUS_OK
ReadX 12741 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12743 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 1005 NT_STATUS_OK
ReadX 12743 2156 24 24 NT_STATUS_OK
ReadX 12743 2139 276 276 NT_STATUS_OK
ReadX 12743 2136 14 14 NT_STATUS_OK
ReadX 12743 2136 7 7 NT_STATUS_OK
ReadX 12743 2138 12 12 NT_STATUS_OK
ReadX 12743 2137 8 8 NT_STATUS_OK
ReadX 12743 2135 15 15 NT_STATUS_OK
ReadX 12743 0 16 16 NT_STATUS_OK
ReadX 12743 16 2048 2048 NT_STATUS_OK
ReadX 12743 2064 2048 2048 NT_STATUS_OK
ReadX 12743 257 2048 2048 NT_STATUS_OK
ReadX 12743 385 2048 2048 NT_STATUS_OK
ReadX 12743 513 2048 2048 NT_STATUS_OK
ReadX 12743 641 2048 2048 NT_STATUS_OK
ReadX 12743 769 2048 2048 NT_STATUS_OK
ReadX 12743 897 2048 2048 NT_STATUS_OK
ReadX 12743 1025 2048 2048 NT_STATUS_OK
ReadX 12743 1153 2048 2048 NT_STATUS_OK
ReadX 12743 1281 2048 2048 NT_STATUS_OK
ReadX 12743 1409 2048 2048 NT_STATUS_OK
ReadX 12743 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12748 NT_STATUS_OK
WriteX 12748 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 258 NT_STATUS_OK
WriteX 12748 0 10575 10575 NT_STATUS_OK
Flush 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12753 NT_STATUS_OK
LockX 12753 2147483538 1 NT_STATUS_OK
UnlockX 12753 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12753 1005 NT_STATUS_OK
ReadX 12753 0 512 512 NT_STATUS_OK
ReadX 12753 512 512 512 NT_STATUS_OK
ReadX 12753 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12753 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12753 1004 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12754 NT_STATUS_OK
QUERY_FILE_INFORMATION 12754 1005 NT_STATUS_OK
ReadX 12754 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12755 NT_STATUS_OK
LockX 12755 2147483538 1 NT_STATUS_OK
UnlockX 12755 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12755 1005 NT_STATUS_OK
ReadX 12755 0 512 512 NT_STATUS_OK
ReadX 12755 512 512 512 NT_STATUS_OK
ReadX 12755 1024 512 512 NT_STATUS_OK
ReadX 12755 288 20 20 NT_STATUS_OK
ReadX 12755 308 2084 2084 NT_STATUS_OK
ReadX 12755 388 2084 2084 NT_STATUS_OK
ReadX 12755 388 2084 2084 NT_STATUS_OK
ReadX 12742 2157 1386 1386 NT_STATUS_OK
ReadX 12755 2472 399 399 NT_STATUS_OK
ReadX 12755 3072 1536 1536 NT_STATUS_OK
ReadX 12755 544 149 149 NT_STATUS_OK
ReadX 12755 693 485 485 NT_STATUS_OK
Close 12755 NT_STATUS_OK
ReadX 12742 2157 4096 4096 NT_STATUS_OK
ReadX 12742 6253 4096 4096 NT_STATUS_OK
ReadX 12742 10349 4096 4096 NT_STATUS_OK
ReadX 12742 14445 4096 4096 NT_STATUS_OK
ReadX 12742 18541 4096 4096 NT_STATUS_OK
ReadX 12742 22637 256 256 NT_STATUS_OK
ReadX 12742 22893 4096 4096 NT_STATUS_OK
ReadX 12742 26989 4096 4096 NT_STATUS_OK
ReadX 12742 31085 4096 4096 NT_STATUS_OK
ReadX 12742 35181 4096 4096 NT_STATUS_OK
ReadX 12742 39277 4096 4096 NT_STATUS_OK
ReadX 12742 43373 4096 4096 NT_STATUS_OK
ReadX 12742 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12742 2157 1024 1024 NT_STATUS_OK
ReadX 12742 1667 4688 4688 NT_STATUS_OK
ReadX 12742 6355 3516 3516 NT_STATUS_OK
ReadX 12742 9871 16384 16384 NT_STATUS_OK
ReadX 12742 26255 3771 3771 NT_STATUS_OK
ReadX 12742 30026 2048 2048 NT_STATUS_OK
ReadX 12742 32074 1024 1024 NT_STATUS_OK
ReadX 12742 33098 6652 6652 NT_STATUS_OK
ReadX 12742 39750 16384 16384 NT_STATUS_OK
ReadX 12742 56134 10496 10496 NT_STATUS_OK
ReadX 12742 66630 1784 1784 NT_STATUS_OK
ReadX 12742 68414 90 90 NT_STATUS_OK
ReadX 12742 68504 273 273 NT_STATUS_OK
ReadX 12742 68777 1600 1600 NT_STATUS_OK
ReadX 12742 70377 640 640 NT_STATUS_OK
ReadX 12742 71017 1280 1280 NT_STATUS_OK
ReadX 12742 72297 8464 8464 NT_STATUS_OK
ReadX 12742 80761 158 158 NT_STATUS_OK
ReadX 12742 80919 912 912 NT_STATUS_OK
ReadX 12742 81831 1980 1980 NT_STATUS_OK
ReadX 12742 83811 2256 2256 NT_STATUS_OK
ReadX 12742 86067 400 400 NT_STATUS_OK
ReadX 12742 86467 252 252 NT_STATUS_OK
ReadX 12742 86719 42 42 NT_STATUS_OK
ReadX 12742 86761 725 725 NT_STATUS_OK
ReadX 12742 2009 512 512 NT_STATUS_OK
ReadX 12742 3895 9 9 NT_STATUS_OK
ReadX 12742 3781 46 46 NT_STATUS_OK
ReadX 12742 4059 92 92 NT_STATUS_OK
ReadX 12742 3781 92 92 NT_STATUS_OK
ReadX 12742 3986 184 184 NT_STATUS_OK
ReadX 12742 3987 16384 16384 NT_STATUS_OK
ReadX 12742 3902 16384 16384 NT_STATUS_OK
ReadX 12742 3781 10240 10240 NT_STATUS_OK
ReadX 12742 3821 16384 16384 NT_STATUS_OK
ReadX 12742 3891 935 935 NT_STATUS_OK
ReadX 12742 4060 10240 10240 NT_STATUS_OK
ReadX 12742 4059 184 184 NT_STATUS_OK
ReadX 12742 256 184 184 NT_STATUS_OK
ReadX 12742 256 1026 1026 NT_STATUS_OK
ReadX 12742 3901 326 326 NT_STATUS_OK
ReadX 12742 3899 652 652 NT_STATUS_OK
ReadX 12742 256 2 2 NT_STATUS_OK
ReadX 12742 258 4948 4948 NT_STATUS_OK
Close 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12757 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12760 NT_STATUS_OK
WriteX 12760 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12760 258 NT_STATUS_OK
WriteX 12760 0 65536 65536 NT_STATUS_OK
WriteX 12760 65536 65536 65536 NT_STATUS_OK
WriteX 12760 131072 65536 65536 NT_STATUS_OK
WriteX 12760 196608 65536 65536 NT_STATUS_OK
WriteX 12760 262144 65536 65536 NT_STATUS_OK
WriteX 12760 327680 65536 65536 NT_STATUS_OK
WriteX 12760 393216 65536 65536 NT_STATUS_OK
WriteX 12760 458752 65536 65536 NT_STATUS_OK
WriteX 12760 524288 65536 65536 NT_STATUS_OK
WriteX 12760 589824 35257 35257 NT_STATUS_OK
Close 12760 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12765 NT_STATUS_OK
WriteX 12765 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12765 258 NT_STATUS_OK
WriteX 12765 0 65536 65536 NT_STATUS_OK
WriteX 12765 65536 65536 65536 NT_STATUS_OK
WriteX 12765 131072 65536 65536 NT_STATUS_OK
WriteX 12765 196608 65536 65536 NT_STATUS_OK
WriteX 12765 262144 65536 65536 NT_STATUS_OK
WriteX 12765 327680 65536 65536 NT_STATUS_OK
WriteX 12765 393216 65536 65536 NT_STATUS_OK
WriteX 12765 458752 65536 65536 NT_STATUS_OK
WriteX 12765 524288 65536 65536 NT_STATUS_OK
WriteX 12765 589824 57598 57598 NT_STATUS_OK
Close 12765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12767 NT_STATUS_OK
WriteX 12767 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 258 NT_STATUS_OK
WriteX 12767 0 12543 12543 NT_STATUS_OK
Flush 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Close 12751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12769 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12773 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
ReadX 12773 1938 24 24 NT_STATUS_OK
ReadX 12773 1920 276 276 NT_STATUS_OK
ReadX 12773 1918 14 14 NT_STATUS_OK
ReadX 12773 1918 7 7 NT_STATUS_OK
ReadX 12773 1919 12 12 NT_STATUS_OK
ReadX 12773 1919 8 8 NT_STATUS_OK
ReadX 12773 1917 15 15 NT_STATUS_OK
ReadX 12773 0 16 16 NT_STATUS_OK
ReadX 12773 16 2048 2048 NT_STATUS_OK
ReadX 12773 2064 2048 2048 NT_STATUS_OK
ReadX 12773 257 2048 2048 NT_STATUS_OK
ReadX 12773 385 2048 2048 NT_STATUS_OK
ReadX 12773 513 2048 2048 NT_STATUS_OK
ReadX 12773 641 2048 2048 NT_STATUS_OK
ReadX 12773 769 2048 2048 NT_STATUS_OK
ReadX 12773 897 2048 2048 NT_STATUS_OK
ReadX 12773 1025 2048 2048 NT_STATUS_OK
ReadX 12773 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12775 NT_STATUS_OK
Close 12775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12778 NT_STATUS_OK
WriteX 12778 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12778 258 NT_STATUS_OK
WriteX 12778 0 11588 11588 NT_STATUS_OK
Flush 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12779 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
Close 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12783 NT_STATUS_OK
WriteX 12783 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 258 NT_STATUS_OK
WriteX 12783 0 11615 11615 NT_STATUS_OK
Flush 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12785 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12787 NT_STATUS_OK
ReadX 12787 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12792 NT_STATUS_OK
WriteX 12792 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12792 258 NT_STATUS_OK
WriteX 12792 0 65536 65536 NT_STATUS_OK
WriteX 12792 65536 16050 16050 NT_STATUS_OK
Close 12792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12772 1939 64 64 NT_STATUS_OK
ReadX 12772 128 248 248 NT_STATUS_OK
ReadX 12772 128 568 568 NT_STATUS_OK
ReadX 12772 3872 1536 1536 NT_STATUS_OK
ReadX 12772 3456 2560 2560 NT_STATUS_OK
ReadX 12772 3136 512 512 NT_STATUS_OK
ReadX 12772 2880 4096 4096 NT_STATUS_OK
ReadX 12772 3264 3072 3072 NT_STATUS_OK
ReadX 12772 320 4096 4096 NT_STATUS_OK
ReadX 12772 1024 4096 4096 NT_STATUS_OK
ReadX 12772 3616 4096 4096 NT_STATUS_OK
ReadX 12772 1939 64 64 NT_STATUS_OK
ReadX 12772 128 248 248 NT_STATUS_OK
ReadX 12772 128 608 608 NT_STATUS_OK
ReadX 12772 2858 1024 1024 NT_STATUS_OK
ReadX 12772 2810 4096 4096 NT_STATUS_OK
ReadX 12772 2826 4096 4096 NT_STATUS_OK
ReadX 12772 2580 2048 2048 NT_STATUS_OK
ReadX 12772 2800 2560 2560 NT_STATUS_OK
ReadX 12772 2100 4096 4096 NT_STATUS_OK
ReadX 12772 2084 4096 4096 NT_STATUS_OK
ReadX 12772 868 4096 4096 NT_STATUS_OK
ReadX 12772 2324 4096 4096 NT_STATUS_OK
ReadX 12772 884 4096 4096 NT_STATUS_OK
ReadX 12772 2604 1024 1024 NT_STATUS_OK
ReadX 12772 580 4096 4096 NT_STATUS_OK
ReadX 12772 596 4096 4096 NT_STATUS_OK
ReadX 12772 2752 4096 4096 NT_STATUS_OK
ReadX 12772 2842 1024 1024 NT_STATUS_OK
ReadX 12772 660 4096 4096 NT_STATUS_OK
ReadX 12772 2720 4096 4096 NT_STATUS_OK
ReadX 12772 2736 4096 4096 NT_STATUS_OK
ReadX 12772 628 4096 4096 NT_STATUS_OK
ReadX 12772 2704 4096 4096 NT_STATUS_OK
ReadX 12772 1556 4096 4096 NT_STATUS_OK
ReadX 12772 576 4096 4096 NT_STATUS_OK
ReadX 12772 3168 1536 1536 NT_STATUS_OK
ReadX 12772 832 4096 4096 NT_STATUS_OK
ReadX 12772 1088 4096 4096 NT_STATUS_OK
ReadX 12772 1344 4096 4096 NT_STATUS_OK
ReadX 12772 1600 4096 4096 NT_STATUS_OK
ReadX 12772 1856 4096 4096 NT_STATUS_OK
ReadX 12772 2112 4096 4096 NT_STATUS_OK
ReadX 12772 1892 4096 4096 NT_STATUS_OK
ReadX 12772 820 4096 4096 NT_STATUS_OK
ReadX 12772 788 4096 4096 NT_STATUS_OK
ReadX 12772 1604 4096 4096 NT_STATUS_OK
ReadX 12772 3648 4096 4096 NT_STATUS_OK
ReadX 12772 2608 4096 4096 NT_STATUS_OK
ReadX 12772 548 4096 4096 NT_STATUS_OK
ReadX 12772 740 4096 4096 NT_STATUS_OK
ReadX 12772 1344 4096 4096 NT_STATUS_OK
ReadX 12772 3392 4096 4096 NT_STATUS_OK
ReadX 12772 3904 4096 4096 NT_STATUS_OK
ReadX 12772 644 4096 4096 NT_STATUS_OK
ReadX 12772 676 4096 4096 NT_STATUS_OK
ReadX 12772 2688 4096 4096 NT_STATUS_OK
ReadX 12772 320 4096 4096 NT_STATUS_OK
ReadX 12772 900 4096 4096 NT_STATUS_OK
ReadX 12772 1908 4096 4096 NT_STATUS_OK
ReadX 12772 852 4096 4096 NT_STATUS_OK
ReadX 12772 724 4096 4096 NT_STATUS_OK
ReadX 12772 2292 4096 4096 NT_STATUS_OK
ReadX 12772 612 4096 4096 NT_STATUS_OK
ReadX 12772 388 4096 4096 NT_STATUS_OK
ReadX 12772 2368 4096 4096 NT_STATUS_OK
ReadX 12772 2624 4096 4096 NT_STATUS_OK
ReadX 12772 500 4096 4096 NT_STATUS_OK
ReadX 12772 356 4096 4096 NT_STATUS_OK
ReadX 12772 1024 4096 4096 NT_STATUS_OK
ReadX 12772 576 4096 4096 NT_STATUS_OK
ReadX 12772 340 4096 4096 NT_STATUS_OK
ReadX 12772 420 4096 4096 NT_STATUS_OK
ReadX 12772 1600 4096 4096 NT_STATUS_OK
ReadX 12772 404 4096 4096 NT_STATUS_OK
ReadX 12772 1428 4096 4096 NT_STATUS_OK
ReadX 12772 2656 4096 4096 NT_STATUS_OK
ReadX 12772 2624 4096 4096 NT_STATUS_OK
ReadX 12772 452 4096 4096 NT_STATUS_OK
ReadX 12772 692 4096 4096 NT_STATUS_OK
ReadX 12772 564 4096 4096 NT_STATUS_OK
ReadX 12772 372 4096 4096 NT_STATUS_OK
ReadX 12772 468 4096 4096 NT_STATUS_OK
ReadX 12772 484 4096 4096 NT_STATUS_OK
ReadX 12772 1088 4096 4096 NT_STATUS_OK
ReadX 12772 1924 4096 4096 NT_STATUS_OK
ReadX 12772 2768 4096 4096 NT_STATUS_OK
ReadX 12772 832 4096 4096 NT_STATUS_OK
ReadX 12772 836 4096 4096 NT_STATUS_OK
ReadX 12772 1856 4096 4096 NT_STATUS_OK
ReadX 12772 2640 4096 4096 NT_STATUS_OK
ReadX 12772 436 4096 4096 NT_STATUS_OK
ReadX 12772 1828 4096 4096 NT_STATUS_OK
ReadX 12772 804 4096 4096 NT_STATUS_OK
ReadX 12772 1860 4096 4096 NT_STATUS_OK
ReadX 12772 1812 4096 4096 NT_STATUS_OK
ReadX 12772 756 4096 4096 NT_STATUS_OK
ReadX 12772 1636 4096 4096 NT_STATUS_OK
ReadX 12772 772 4096 4096 NT_STATUS_OK
ReadX 12772 2036 4096 4096 NT_STATUS_OK
ReadX 12772 1220 4096 4096 NT_STATUS_OK
ReadX 12772 1652 4096 4096 NT_STATUS_OK
ReadX 12772 2588 4096 4096 NT_STATUS_OK
ReadX 12772 916 4096 4096 NT_STATUS_OK
ReadX 12772 260 4096 4096 NT_STATUS_OK
ReadX 12772 932 4096 4096 NT_STATUS_OK
ReadX 12772 2624 4096 4096 NT_STATUS_OK
ReadX 12772 308 4096 4096 NT_STATUS_OK
ReadX 12772 292 4096 4096 NT_STATUS_OK
ReadX 12772 1140 4096 4096 NT_STATUS_OK
ReadX 12772 276 4096 4096 NT_STATUS_OK
ReadX 12772 2020 4096 4096 NT_STATUS_OK
ReadX 12772 2880 4096 4096 NT_STATUS_OK
ReadX 12772 516 4096 4096 NT_STATUS_OK
ReadX 12772 1844 4096 4096 NT_STATUS_OK
ReadX 12772 1124 4096 4096 NT_STATUS_OK
ReadX 12772 3136 4096 4096 NT_STATUS_OK
ReadX 12772 324 4096 4096 NT_STATUS_OK
ReadX 12772 1156 4096 4096 NT_STATUS_OK
ReadX 12772 1172 4096 4096 NT_STATUS_OK
ReadX 12772 2112 4096 4096 NT_STATUS_OK
ReadX 12772 2368 4096 4096 NT_STATUS_OK
ReadX 12772 964 4096 4096 NT_STATUS_OK
ReadX 12772 980 4096 4096 NT_STATUS_OK
ReadX 12772 1012 4096 4096 NT_STATUS_OK
ReadX 12772 532 4096 4096 NT_STATUS_OK
ReadX 12772 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12772 1620 4096 4096 NT_STATUS_OK
ReadX 12772 1604 4096 4096 NT_STATUS_OK
ReadX 12772 2116 4096 4096 NT_STATUS_OK
ReadX 12772 2132 4096 4096 NT_STATUS_OK
ReadX 12772 2148 4096 4096 NT_STATUS_OK
ReadX 12772 2276 4096 4096 NT_STATUS_OK
ReadX 12772 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12794 NT_STATUS_OK
Close 12794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12797 NT_STATUS_OK
QUERY_FILE_INFORMATION 12752 1004 NT_STATUS_OK
Close 12752 NT_STATUS_OK
WriteX 12797 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12797 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12754 1004 NT_STATUS_OK
Close 12754 NT_STATUS_OK
WriteX 12797 0 65536 65536 NT_STATUS_OK
WriteX 12797 65536 64850 64850 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12799 NT_STATUS_OK
WriteX 12799 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12799 258 NT_STATUS_OK
ReadX 12772 2068 4096 4096 NT_STATUS_OK
ReadX 12772 1588 4096 4096 NT_STATUS_OK
ReadX 12772 1572 4096 4096 NT_STATUS_OK
WriteX 12799 0 18630 18630 NT_STATUS_OK
Flush 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12772 612 4096 4096 NT_STATUS_OK
ReadX 12772 564 4096 4096 NT_STATUS_OK
ReadX 12772 1876 4096 4096 NT_STATUS_OK
ReadX 12772 628 4096 4096 NT_STATUS_OK
ReadX 12772 740 4096 4096 NT_STATUS_OK
ReadX 12772 724 4096 4096 NT_STATUS_OK
ReadX 12772 644 4096 4096 NT_STATUS_OK
ReadX 12772 2324 4096 4096 NT_STATUS_OK
ReadX 12772 660 4096 4096 NT_STATUS_OK
ReadX 12772 852 4096 4096 NT_STATUS_OK
ReadX 12772 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12772 2368 4096 4096 NT_STATUS_OK
ReadX 12772 1024 4096 4096 NT_STATUS_OK
ReadX 12772 320 4096 4096 NT_STATUS_OK
ReadX 12772 580 4096 4096 NT_STATUS_OK
ReadX 12772 3136 512 512 NT_STATUS_OK
ReadX 12772 2880 4096 4096 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12804 NT_STATUS_OK
ReadX 12804 61440 4096 4096 NT_STATUS_OK
ReadX 12804 126976 4096 4096 NT_STATUS_OK
WriteX 12804 0 65536 65536 NT_STATUS_OK
WriteX 12804 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 61440 4096 4096 NT_STATUS_OK
ReadX 12805 126976 4096 4096 NT_STATUS_OK
ReadX 12805 192512 4096 4096 NT_STATUS_OK
ReadX 12805 258048 4096 4096 NT_STATUS_OK
WriteX 12805 0 65536 65536 NT_STATUS_OK
WriteX 12805 65536 65536 65536 NT_STATUS_OK
WriteX 12805 131072 65536 65536 NT_STATUS_OK
WriteX 12805 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12806 NT_STATUS_OK
ReadX 12806 61440 4096 4096 NT_STATUS_OK
ReadX 12806 126976 4096 4096 NT_STATUS_OK
ReadX 12806 192512 4096 4096 NT_STATUS_OK
ReadX 12806 258048 4096 4096 NT_STATUS_OK
ReadX 12806 323584 4096 4096 NT_STATUS_OK
ReadX 12806 389120 4096 4096 NT_STATUS_OK
ReadX 12806 454656 4096 4096 NT_STATUS_OK
ReadX 12806 520192 4096 4096 NT_STATUS_OK
WriteX 12806 0 65536 65536 NT_STATUS_OK
WriteX 12806 65536 65536 65536 NT_STATUS_OK
WriteX 12806 131072 65536 65536 NT_STATUS_OK
WriteX 12806 196608 65536 65536 NT_STATUS_OK
WriteX 12806 262144 65536 65536 NT_STATUS_OK
WriteX 12806 327680 65536 65536 NT_STATUS_OK
WriteX 12806 393216 65536 65536 NT_STATUS_OK
WriteX 12806 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12808 NT_STATUS_OK
Close 12808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12809 NT_STATUS_OK
WriteX 12809 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12809 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12807 0 8192 8192 NT_STATUS_OK
Flush 12807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12807 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12807 0 8192 8192 NT_STATUS_OK
Flush 12807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12807 0 8192 8192 NT_STATUS_OK
Flush 12807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12807 0 8192 8192 NT_STATUS_OK
Flush 12807 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12811 NT_STATUS_OK
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Close 12805 NT_STATUS_OK
Close 12806 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12814 NT_STATUS_OK
WriteX 12814 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12814 258 NT_STATUS_OK
WriteX 12814 0 62591 62591 NT_STATUS_OK
Close 12814 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12819 NT_STATUS_OK
WriteX 12819 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12819 258 NT_STATUS_OK
WriteX 12819 0 10845 10845 NT_STATUS_OK
Close 12819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12824 NT_STATUS_OK
WriteX 12824 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 258 NT_STATUS_OK
WriteX 12824 0 30118 30118 NT_STATUS_OK
Close 12824 NT_STATUS_OK
WriteX 12807 0 4096 4096 NT_STATUS_OK
WriteX 12809 0 64 64 NT_STATUS_OK
Close 12809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12826 NT_STATUS_OK
ReadX 12826 0 61440 61440 NT_STATUS_OK
ReadX 12826 61440 4096 4096 NT_STATUS_OK
ReadX 12826 65536 61440 61440 NT_STATUS_OK
ReadX 12826 126976 4096 4096 NT_STATUS_OK
ReadX 12826 131072 61440 61440 NT_STATUS_OK
ReadX 12826 192512 4096 4096 NT_STATUS_OK
ReadX 12826 196608 61440 61440 NT_STATUS_OK
ReadX 12826 258048 4096 4096 NT_STATUS_OK
ReadX 12826 262144 61440 61440 NT_STATUS_OK
ReadX 12826 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 61440 61440 NT_STATUS_OK
ReadX 12827 61440 4096 4096 NT_STATUS_OK
ReadX 12827 65536 61440 61440 NT_STATUS_OK
ReadX 12827 126976 4096 4096 NT_STATUS_OK
ReadX 12827 131072 61440 61440 NT_STATUS_OK
ReadX 12827 192512 4096 4096 NT_STATUS_OK
ReadX 12827 196608 61440 61440 NT_STATUS_OK
ReadX 12827 258048 4096 4096 NT_STATUS_OK
ReadX 12827 262144 61440 61440 NT_STATUS_OK
ReadX 12827 323584 4096 4096 NT_STATUS_OK
ReadX 12827 327680 61440 61440 NT_STATUS_OK
ReadX 12827 389120 4096 4096 NT_STATUS_OK
ReadX 12827 393216 61440 61440 NT_STATUS_OK
ReadX 12827 454656 4096 4096 NT_STATUS_OK
ReadX 12827 458752 61440 61440 NT_STATUS_OK
ReadX 12827 520192 4096 4096 NT_STATUS_OK
ReadX 12827 524288 61440 61440 NT_STATUS_OK
ReadX 12827 585728 4096 4096 NT_STATUS_OK
ReadX 12827 589824 61440 61440 NT_STATUS_OK
ReadX 12827 651264 4096 4096 NT_STATUS_OK
ReadX 12827 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12828 NT_STATUS_OK
ReadX 12828 0 61440 61440 NT_STATUS_OK
ReadX 12828 61440 4096 4096 NT_STATUS_OK
ReadX 12828 65536 61440 61440 NT_STATUS_OK
ReadX 12828 126976 4096 4096 NT_STATUS_OK
ReadX 12828 131072 61440 61440 NT_STATUS_OK
ReadX 12828 192512 4096 4096 NT_STATUS_OK
ReadX 12828 196608 61440 61440 NT_STATUS_OK
ReadX 12828 258048 4096 4096 NT_STATUS_OK
ReadX 12828 262144 61440 61440 NT_STATUS_OK
ReadX 12828 323584 4096 4096 NT_STATUS_OK
ReadX 12828 327680 61440 61440 NT_STATUS_OK
ReadX 12828 389120 4096 4096 NT_STATUS_OK
ReadX 12828 393216 61440 61440 NT_STATUS_OK
ReadX 12828 454656 4096 4096 NT_STATUS_OK
ReadX 12828 458752 61440 61440 NT_STATUS_OK
ReadX 12828 520192 4096 4096 NT_STATUS_OK
ReadX 12828 524288 61440 61440 NT_STATUS_OK
ReadX 12828 585728 4096 4096 NT_STATUS_OK
ReadX 12828 589824 61440 61440 NT_STATUS_OK
ReadX 12828 651264 4096 4096 NT_STATUS_OK
ReadX 12828 655360 61440 61440 NT_STATUS_OK
ReadX 12828 716800 4096 4096 NT_STATUS_OK
ReadX 12828 720896 61440 61440 NT_STATUS_OK
ReadX 12828 782336 4096 4096 NT_STATUS_OK
ReadX 12828 786432 61440 61440 NT_STATUS_OK
ReadX 12828 847872 4096 4096 NT_STATUS_OK
ReadX 12828 851968 61440 61440 NT_STATUS_OK
ReadX 12828 913408 4096 4096 NT_STATUS_OK
ReadX 12828 917504 61440 61440 NT_STATUS_OK
ReadX 12828 978944 4096 4096 NT_STATUS_OK
ReadX 12828 983040 61440 61440 NT_STATUS_OK
ReadX 12828 1044480 4096 4096 NT_STATUS_OK
ReadX 12828 1048576 61440 61440 NT_STATUS_OK
ReadX 12828 1110016 4096 4096 NT_STATUS_OK
ReadX 12828 1114112 61440 61440 NT_STATUS_OK
ReadX 12828 1175552 4096 4096 NT_STATUS_OK
ReadX 12828 1179648 61440 61440 NT_STATUS_OK
ReadX 12828 1241088 4096 4096 NT_STATUS_OK
ReadX 12828 1245184 61440 61440 NT_STATUS_OK
ReadX 12828 1306624 4096 4096 NT_STATUS_OK
ReadX 12828 1310720 61440 61440 NT_STATUS_OK
ReadX 12828 1372160 4096 4096 NT_STATUS_OK
ReadX 12828 1376256 61440 61440 NT_STATUS_OK
ReadX 12828 1437696 4096 4096 NT_STATUS_OK
ReadX 12828 1441792 61440 61440 NT_STATUS_OK
ReadX 12828 1503232 4096 4096 NT_STATUS_OK
ReadX 12828 1507328 61440 61440 NT_STATUS_OK
ReadX 12828 1568768 4096 4096 NT_STATUS_OK
ReadX 12828 1572864 61440 61440 NT_STATUS_OK
ReadX 12828 1634304 4096 4096 NT_STATUS_OK
ReadX 12828 1638400 61440 61440 NT_STATUS_OK
ReadX 12828 1699840 4096 4096 NT_STATUS_OK
ReadX 12828 1703936 61440 61440 NT_STATUS_OK
ReadX 12828 1765376 4096 4096 NT_STATUS_OK
ReadX 12828 1769472 61440 61440 NT_STATUS_OK
ReadX 12828 1830912 4096 4096 NT_STATUS_OK
ReadX 12828 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12829 NT_STATUS_OK
Close 12829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12826 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
ReadX 12833 4096 4096 4096 NT_STATUS_OK
ReadX 12833 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Close 12832 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12837 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12838 NT_STATUS_OK
Close 12838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12840 NT_STATUS_OK
ReadX 12840 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12841 NT_STATUS_OK
ReadX 12841 0 8192 8192 NT_STATUS_OK
ReadX 12841 8192 8192 8192 NT_STATUS_OK
ReadX 12841 16384 8192 8192 NT_STATUS_OK
ReadX 12841 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 10438 10438 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12847 NT_STATUS_OK
Close 12847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12850 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12852 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12854 NT_STATUS_OK
Close 12854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
ReadX 12855 4096 4096 4096 NT_STATUS_OK
ReadX 12855 8192 4096 4096 NT_STATUS_OK
ReadX 12855 12288 8192 8192 NT_STATUS_OK
ReadX 12855 20480 8192 8192 NT_STATUS_OK
ReadX 12855 28672 8192 8192 NT_STATUS_OK
ReadX 12855 36864 8192 8192 NT_STATUS_OK
ReadX 12855 45056 8192 8192 NT_STATUS_OK
ReadX 12855 53248 8192 8192 NT_STATUS_OK
ReadX 12855 61440 8192 8192 NT_STATUS_OK
ReadX 12855 69632 8192 8192 NT_STATUS_OK
ReadX 12855 77824 8192 8192 NT_STATUS_OK
ReadX 12855 86016 8192 8192 NT_STATUS_OK
ReadX 12855 94208 8192 8192 NT_STATUS_OK
ReadX 12855 102400 8192 8192 NT_STATUS_OK
ReadX 12855 110592 8192 8192 NT_STATUS_OK
ReadX 12855 118784 8192 8192 NT_STATUS_OK
ReadX 12855 126976 8192 8192 NT_STATUS_OK
ReadX 12855 135168 8192 8192 NT_STATUS_OK
ReadX 12855 143360 8192 8192 NT_STATUS_OK
ReadX 12855 151552 8192 8192 NT_STATUS_OK
ReadX 12855 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Close 12848 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12857 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12860 NT_STATUS_OK
WriteX 12860 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12860 258 NT_STATUS_OK
WriteX 12860 0 28489 28489 NT_STATUS_OK
Close 12860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12861 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12863 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 8192 8192 NT_STATUS_OK
ReadX 12867 8192 8192 8192 NT_STATUS_OK
ReadX 12867 16384 8192 8192 NT_STATUS_OK
ReadX 12867 24576 8192 8192 NT_STATUS_OK
ReadX 12867 32768 16384 16384 NT_STATUS_OK
ReadX 12867 49152 8192 8192 NT_STATUS_OK
ReadX 12867 57344 8192 8192 NT_STATUS_OK
ReadX 12867 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12869 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12872 NT_STATUS_OK
WriteX 12872 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12872 258 NT_STATUS_OK
WriteX 12872 0 29253 29253 NT_STATUS_OK
Close 12872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12879 NT_STATUS_OK
WriteX 12879 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12879 258 NT_STATUS_OK
WriteX 12879 0 30183 30183 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12882 NT_STATUS_OK
WriteX 12882 0 510 510 NT_STATUS_OK
WriteX 12882 510 512 512 NT_STATUS_OK
WriteX 12882 1022 510 510 NT_STATUS_OK
WriteX 12882 1532 510 510 NT_STATUS_OK
WriteX 12882 2042 168 168 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12883 NT_STATUS_OK
Close 12883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
WriteX 12885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12886 NT_STATUS_OK
ReadX 12886 61440 4096 4096 NT_STATUS_OK
ReadX 12886 126976 4096 4096 NT_STATUS_OK
WriteX 12886 0 65536 65536 NT_STATUS_OK
WriteX 12886 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 61440 4096 4096 NT_STATUS_OK
ReadX 12887 126976 4096 4096 NT_STATUS_OK
ReadX 12887 192512 4096 4096 NT_STATUS_OK
ReadX 12887 258048 4096 4096 NT_STATUS_OK
WriteX 12887 0 65536 65536 NT_STATUS_OK
WriteX 12887 65536 65536 65536 NT_STATUS_OK
WriteX 12887 131072 65536 65536 NT_STATUS_OK
WriteX 12887 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 61440 4096 4096 NT_STATUS_OK
ReadX 12888 126976 4096 4096 NT_STATUS_OK
ReadX 12888 192512 4096 4096 NT_STATUS_OK
ReadX 12888 258048 4096 4096 NT_STATUS_OK
ReadX 12888 323584 4096 4096 NT_STATUS_OK
ReadX 12888 389120 4096 4096 NT_STATUS_OK
ReadX 12888 454656 4096 4096 NT_STATUS_OK
ReadX 12888 520192 4096 4096 NT_STATUS_OK
WriteX 12888 0 65536 65536 NT_STATUS_OK
WriteX 12888 65536 65536 65536 NT_STATUS_OK
WriteX 12888 131072 65536 65536 NT_STATUS_OK
WriteX 12888 196608 65536 65536 NT_STATUS_OK
WriteX 12888 262144 65536 65536 NT_STATUS_OK
WriteX 12888 327680 65536 65536 NT_STATUS_OK
WriteX 12888 393216 65536 65536 NT_STATUS_OK
WriteX 12888 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12889 NT_STATUS_OK
Close 12889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12891 NT_STATUS_OK
Close 12891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12898 NT_STATUS_OK
Close 12898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12904 NT_STATUS_OK
Close 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12907 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12909 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12913 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12918 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12923 NT_STATUS_OK
Close 12923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12933 NT_STATUS_OK
Close 12933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12938 NT_STATUS_OK
Close 12938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12943 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12954 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12957 NT_STATUS_OK
WriteX 12957 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12957 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12957 0 65536 65536 NT_STATUS_OK
WriteX 12957 65536 65536 65536 NT_STATUS_OK
WriteX 12957 131072 65536 65536 NT_STATUS_OK
WriteX 12957 196608 65536 65536 NT_STATUS_OK
WriteX 12957 262144 26634 26634 NT_STATUS_OK
Close 12957 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12962 NT_STATUS_OK
Close 12962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 4096 4096 NT_STATUS_OK
Close 12964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
ReadX 12965 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12979 NT_STATUS_OK
Close 12979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12982 NT_STATUS_OK
Close 12982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12988 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12998 NT_STATUS_OK
Close 12998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13003 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13022 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13027 NT_STATUS_OK
Close 13027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13030 NT_STATUS_OK
Close 13030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13032 NT_STATUS_OK
Close 13032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13044 NT_STATUS_OK
ReadX 13044 0 4096 4096 NT_STATUS_OK
Close 13044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13045 NT_STATUS_OK
ReadX 13045 0 4096 4096 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13056 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
Close 13058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13059 NT_STATUS_OK
ReadX 13059 0 4096 4096 NT_STATUS_OK
Close 13059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13060 NT_STATUS_OK
ReadX 13060 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13089 0 4096 4096 NT_STATUS_OK
Close 13089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
ReadX 13091 4096 4096 4096 NT_STATUS_OK
ReadX 13091 8192 4096 4096 NT_STATUS_OK
ReadX 13091 12288 4096 4096 NT_STATUS_OK
ReadX 13091 16384 4096 4096 NT_STATUS_OK
ReadX 13091 20480 4096 4096 NT_STATUS_OK
ReadX 13091 24576 4096 4096 NT_STATUS_OK
ReadX 13091 28672 4096 4096 NT_STATUS_OK
ReadX 13091 32768 4096 4096 NT_STATUS_OK
ReadX 13091 36864 4096 4096 NT_STATUS_OK
ReadX 13091 40960 4096 4096 NT_STATUS_OK
ReadX 13091 45056 4096 4096 NT_STATUS_OK
ReadX 13091 49152 4096 4096 NT_STATUS_OK
ReadX 13091 53248 4096 4096 NT_STATUS_OK
ReadX 13091 57344 4096 4096 NT_STATUS_OK
ReadX 13091 61440 4096 4096 NT_STATUS_OK
ReadX 13091 65536 4096 4096 NT_STATUS_OK
ReadX 13091 69632 4096 4096 NT_STATUS_OK
ReadX 13091 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
WriteX 13091 0 4096 4096 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13092 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13093 NT_STATUS_OK
ReadX 13093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13094 NT_STATUS_OK
Close 13094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 65536 65536 NT_STATUS_OK
WriteX 13097 65536 19979 19979 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Flush 13098 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Flush 13098 NT_STATUS_OK
QUERY_FILE_INFORMATION 13098 1004 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Flush 13098 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Flush 13098 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Flush 13098 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Flush 13098 NT_STATUS_OK
Close 13098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13100 NT_STATUS_OK
ReadX 13100 0 4096 4096 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
Close 13102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13103 1004 NT_STATUS_OK
WriteX 13103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13104 NT_STATUS_OK
Close 13104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13100 NT_STATUS_OK
Close 13103 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13109 NT_STATUS_OK
WriteX 13109 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13109 258 NT_STATUS_OK
WriteX 13109 0 65536 65536 NT_STATUS_OK
WriteX 13109 65536 17654 17654 NT_STATUS_OK
Close 13109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
QUERY_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13111 NT_STATUS_OK
SET_FILE_INFORMATION 13111 1004 NT_STATUS_OK
Close 13111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 4096 4096 NT_STATUS_OK
ReadX 13115 4096 4096 4096 NT_STATUS_OK
ReadX 13115 8192 4096 4096 NT_STATUS_OK
ReadX 13115 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13115 16384 4096 4096 NT_STATUS_OK
ReadX 13115 20480 4096 4096 NT_STATUS_OK
ReadX 13115 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
Close 13116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
Close 13117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13118 1004 NT_STATUS_OK
WriteX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13121 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13124 NT_STATUS_OK
WriteX 13124 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13124 258 NT_STATUS_OK
WriteX 13124 0 65536 65536 NT_STATUS_OK
WriteX 13124 65536 19490 19490 NT_STATUS_OK
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
QUERY_FILE_INFORMATION 13125 1004 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
SET_FILE_INFORMATION 13125 1004 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13126 NT_STATUS_OK
SET_FILE_INFORMATION 13126 1004 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13130 0 4096 4096 NT_STATUS_OK
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
ReadX 13132 4096 4096 4096 NT_STATUS_OK
ReadX 13132 8192 4096 4096 NT_STATUS_OK
ReadX 13132 12288 4096 4096 NT_STATUS_OK
ReadX 13132 16384 4096 4096 NT_STATUS_OK
ReadX 13132 20480 4096 4096 NT_STATUS_OK
ReadX 13132 24576 4096 4096 NT_STATUS_OK
ReadX 13132 28672 4096 4096 NT_STATUS_OK
ReadX 13132 32768 4096 4096 NT_STATUS_OK
ReadX 13132 36864 4096 4096 NT_STATUS_OK
ReadX 13132 40960 4096 4096 NT_STATUS_OK
ReadX 13132 45056 4096 4096 NT_STATUS_OK
ReadX 13132 49152 4096 4096 NT_STATUS_OK
ReadX 13132 53248 4096 4096 NT_STATUS_OK
ReadX 13132 57344 4096 4096 NT_STATUS_OK
ReadX 13132 61440 4096 4096 NT_STATUS_OK
ReadX 13132 65536 4096 4096 NT_STATUS_OK
ReadX 13132 69632 4096 4096 NT_STATUS_OK
ReadX 13132 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13132 1004 NT_STATUS_OK
WriteX 13132 0 4096 4096 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13133 NT_STATUS_OK
SET_FILE_INFORMATION 13133 1004 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13138 NT_STATUS_OK
WriteX 13138 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13138 258 NT_STATUS_OK
WriteX 13138 0 65536 65536 NT_STATUS_OK
WriteX 13138 65536 8866 8866 NT_STATUS_OK
Close 13138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 0 4096 4096 NT_STATUS_OK
WriteX 13139 0 4096 4096 NT_STATUS_OK
Flush 13139 NT_STATUS_OK
SET_FILE_INFORMATION 13139 1004 NT_STATUS_OK
WriteX 13139 0 4096 4096 NT_STATUS_OK
Flush 13139 NT_STATUS_OK
Close 13139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13143 1004 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13149 NT_STATUS_OK
WriteX 13149 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 258 NT_STATUS_OK
WriteX 13149 0 65536 65536 NT_STATUS_OK
WriteX 13149 65536 9298 9298 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 4096 4096 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
Flush 13150 NT_STATUS_OK
SET_FILE_INFORMATION 13150 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
Flush 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13151 NT_STATUS_OK
SET_FILE_INFORMATION 13151 1004 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13152 NT_STATUS_OK
ReadX 13152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13153 NT_STATUS_OK
Close 13153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13156 0 4096 4096 NT_STATUS_OK
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13157 4096 4096 4096 NT_STATUS_OK
ReadX 13157 8192 4096 4096 NT_STATUS_OK
ReadX 13157 12288 4096 4096 NT_STATUS_OK
ReadX 13157 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13158 NT_STATUS_OK
ReadX 13158 0 4096 4096 NT_STATUS_OK
Close 13158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13159 NT_STATUS_OK
ReadX 13159 0 4096 4096 NT_STATUS_OK
Close 13159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13160 NT_STATUS_OK
ReadX 13160 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13160 1004 NT_STATUS_OK
WriteX 13160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13160 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13163 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13166 NT_STATUS_OK
WriteX 13166 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13166 258 NT_STATUS_OK
WriteX 13166 0 65536 65536 NT_STATUS_OK
WriteX 13166 65536 11540 11540 NT_STATUS_OK
Close 13166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13167 NT_STATUS_OK
ReadX 13167 0 4096 4096 NT_STATUS_OK
WriteX 13167 0 4096 4096 NT_STATUS_OK
Flush 13167 NT_STATUS_OK
SET_FILE_INFORMATION 13167 1004 NT_STATUS_OK
WriteX 13167 0 4096 4096 NT_STATUS_OK
Flush 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13168 NT_STATUS_OK
SET_FILE_INFORMATION 13168 1004 NT_STATUS_OK
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 61440 4096 4096 NT_STATUS_OK
ReadX 13172 126976 4096 4096 NT_STATUS_OK
WriteX 13172 0 65536 65536 NT_STATUS_OK
WriteX 13172 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 61440 4096 4096 NT_STATUS_OK
ReadX 13173 126976 4096 4096 NT_STATUS_OK
ReadX 13173 192512 4096 4096 NT_STATUS_OK
ReadX 13173 258048 4096 4096 NT_STATUS_OK
WriteX 13173 0 65536 65536 NT_STATUS_OK
WriteX 13173 65536 65536 65536 NT_STATUS_OK
WriteX 13173 131072 65536 65536 NT_STATUS_OK
WriteX 13173 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 61440 4096 4096 NT_STATUS_OK
ReadX 13174 126976 4096 4096 NT_STATUS_OK
ReadX 13174 192512 4096 4096 NT_STATUS_OK
ReadX 13174 258048 4096 4096 NT_STATUS_OK
ReadX 13174 323584 4096 4096 NT_STATUS_OK
ReadX 13174 389120 4096 4096 NT_STATUS_OK
ReadX 13174 454656 4096 4096 NT_STATUS_OK
ReadX 13174 520192 4096 4096 NT_STATUS_OK
WriteX 13174 0 65536 65536 NT_STATUS_OK
WriteX 13174 65536 65536 65536 NT_STATUS_OK
WriteX 13174 131072 65536 65536 NT_STATUS_OK
WriteX 13174 196608 65536 65536 NT_STATUS_OK
WriteX 13174 262144 65536 65536 NT_STATUS_OK
WriteX 13174 327680 65536 65536 NT_STATUS_OK
WriteX 13174 393216 65536 65536 NT_STATUS_OK
WriteX 13174 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
ReadX 13175 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13176 NT_STATUS_OK
WriteX 13176 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13176 258 NT_STATUS_OK
WriteX 13176 0 53 53 NT_STATUS_OK
Close 13176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13169 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13175 8192 4096 4096 NT_STATUS_OK
ReadX 13175 12288 4096 4096 NT_STATUS_OK
WriteX 13179 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13179 258 NT_STATUS_OK
ReadX 13175 16384 4096 4096 NT_STATUS_OK
ReadX 13175 20480 4096 4096 NT_STATUS_OK
WriteX 13179 0 15360 15360 NT_STATUS_OK
Close 13179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13183 4096 4096 4096 NT_STATUS_OK
ReadX 13183 8192 4096 4096 NT_STATUS_OK
ReadX 13183 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 0 4096 4096 NT_STATUS_OK
ReadX 13186 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 4096 4096 NT_STATUS_OK
ReadX 13187 4096 4096 4096 NT_STATUS_OK
ReadX 13187 8192 4096 4096 NT_STATUS_OK
Close 13186 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13188 NT_STATUS_OK
WriteX 13188 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13188 258 NT_STATUS_OK
WriteX 13188 0 15360 15360 NT_STATUS_OK
Close 13188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13189 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13189 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13189 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13190 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13193 NT_STATUS_OK
SET_FILE_INFORMATION 13193 1004 NT_STATUS_OK
Close 13193 NT_STATUS_OK
WriteX 13189 0 4096 4096 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13194 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
ReadX 13196 4096 4096 4096 NT_STATUS_OK
ReadX 13196 8192 4096 4096 NT_STATUS_OK
ReadX 13196 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13196 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13196 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13196 0 19054 19054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13198 NT_STATUS_OK
WriteX 13198 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13198 258 NT_STATUS_OK
WriteX 13198 0 53 53 NT_STATUS_OK
Close 13198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13197 4096 4096 4096 NT_STATUS_OK
ReadX 13197 8192 4096 4096 NT_STATUS_OK
ReadX 13197 12288 4096 4096 NT_STATUS_OK
WriteX 13201 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 12006 12006 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13202 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13202 1004 NT_STATUS_OK
WriteX 13202 0 4096 4096 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13203 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13205 NT_STATUS_OK
ReadX 13205 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13206 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13205 4096 4096 4096 NT_STATUS_OK
ReadX 13205 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13208 NT_STATUS_OK
WriteX 13208 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13208 258 NT_STATUS_OK
WriteX 13208 0 11991 11991 NT_STATUS_OK
Close 13208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13209 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13209 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13210 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13213 NT_STATUS_OK
SET_FILE_INFORMATION 13213 1004 NT_STATUS_OK
Close 13213 NT_STATUS_OK
WriteX 13209 0 4096 4096 NT_STATUS_OK
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13217 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13216 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13216 1004 NT_STATUS_OK
ReadX 13216 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13216 1004 NT_STATUS_OK
WriteX 13216 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13216 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13216 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13216 1004 NT_STATUS_OK
Close 13192 NT_STATUS_OK
WriteX 13216 0 12288 12288 NT_STATUS_OK
Close 13212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13219 NT_STATUS_OK
Close 13219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 61440 61440 NT_STATUS_OK
ReadX 13223 61440 4096 4096 NT_STATUS_OK
ReadX 13223 65536 61440 61440 NT_STATUS_OK
ReadX 13223 126976 4096 4096 NT_STATUS_OK
ReadX 13223 131072 61440 61440 NT_STATUS_OK
ReadX 13223 192512 4096 4096 NT_STATUS_OK
ReadX 13223 196608 61440 61440 NT_STATUS_OK
ReadX 13223 258048 4096 4096 NT_STATUS_OK
ReadX 13223 262144 61440 61440 NT_STATUS_OK
ReadX 13223 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 61440 61440 NT_STATUS_OK
ReadX 13224 61440 4096 4096 NT_STATUS_OK
ReadX 13224 65536 61440 61440 NT_STATUS_OK
ReadX 13224 126976 4096 4096 NT_STATUS_OK
ReadX 13224 131072 61440 61440 NT_STATUS_OK
ReadX 13224 192512 4096 4096 NT_STATUS_OK
ReadX 13224 196608 61440 61440 NT_STATUS_OK
ReadX 13224 258048 4096 4096 NT_STATUS_OK
ReadX 13224 262144 61440 61440 NT_STATUS_OK
ReadX 13224 323584 4096 4096 NT_STATUS_OK
ReadX 13224 327680 61440 61440 NT_STATUS_OK
ReadX 13224 389120 4096 4096 NT_STATUS_OK
ReadX 13224 393216 61440 61440 NT_STATUS_OK
ReadX 13224 454656 4096 4096 NT_STATUS_OK
ReadX 13224 458752 61440 61440 NT_STATUS_OK
ReadX 13224 520192 4096 4096 NT_STATUS_OK
ReadX 13224 524288 61440 61440 NT_STATUS_OK
ReadX 13224 585728 4096 4096 NT_STATUS_OK
ReadX 13224 589824 61440 61440 NT_STATUS_OK
ReadX 13224 651264 4096 4096 NT_STATUS_OK
ReadX 13224 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 61440 61440 NT_STATUS_OK
ReadX 13225 61440 4096 4096 NT_STATUS_OK
ReadX 13225 65536 61440 61440 NT_STATUS_OK
ReadX 13225 126976 4096 4096 NT_STATUS_OK
ReadX 13225 131072 61440 61440 NT_STATUS_OK
ReadX 13225 192512 4096 4096 NT_STATUS_OK
ReadX 13225 196608 61440 61440 NT_STATUS_OK
ReadX 13225 258048 4096 4096 NT_STATUS_OK
ReadX 13225 262144 61440 61440 NT_STATUS_OK
ReadX 13225 323584 4096 4096 NT_STATUS_OK
ReadX 13225 327680 61440 61440 NT_STATUS_OK
ReadX 13225 389120 4096 4096 NT_STATUS_OK
ReadX 13225 393216 61440 61440 NT_STATUS_OK
ReadX 13225 454656 4096 4096 NT_STATUS_OK
ReadX 13225 458752 61440 61440 NT_STATUS_OK
ReadX 13225 520192 4096 4096 NT_STATUS_OK
ReadX 13225 524288 61440 61440 NT_STATUS_OK
ReadX 13225 585728 4096 4096 NT_STATUS_OK
ReadX 13225 589824 61440 61440 NT_STATUS_OK
ReadX 13225 651264 4096 4096 NT_STATUS_OK
ReadX 13225 655360 61440 61440 NT_STATUS_OK
ReadX 13225 716800 4096 4096 NT_STATUS_OK
ReadX 13225 720896 61440 61440 NT_STATUS_OK
ReadX 13225 782336 4096 4096 NT_STATUS_OK
ReadX 13225 786432 61440 61440 NT_STATUS_OK
ReadX 13225 847872 4096 4096 NT_STATUS_OK
ReadX 13225 851968 61440 61440 NT_STATUS_OK
ReadX 13225 913408 4096 4096 NT_STATUS_OK
ReadX 13225 917504 61440 61440 NT_STATUS_OK
ReadX 13225 978944 4096 4096 NT_STATUS_OK
ReadX 13225 983040 61440 61440 NT_STATUS_OK
ReadX 13225 1044480 4096 4096 NT_STATUS_OK
ReadX 13225 1048576 61440 61440 NT_STATUS_OK
ReadX 13225 1110016 4096 4096 NT_STATUS_OK
ReadX 13225 1114112 61440 61440 NT_STATUS_OK
ReadX 13225 1175552 4096 4096 NT_STATUS_OK
ReadX 13225 1179648 61440 61440 NT_STATUS_OK
ReadX 13225 1241088 4096 4096 NT_STATUS_OK
ReadX 13225 1245184 61440 61440 NT_STATUS_OK
ReadX 13225 1306624 4096 4096 NT_STATUS_OK
ReadX 13225 1310720 61440 61440 NT_STATUS_OK
ReadX 13225 1372160 4096 4096 NT_STATUS_OK
ReadX 13225 1376256 61440 61440 NT_STATUS_OK
ReadX 13225 1437696 4096 4096 NT_STATUS_OK
ReadX 13225 1441792 61440 61440 NT_STATUS_OK
ReadX 13225 1503232 4096 4096 NT_STATUS_OK
ReadX 13225 1507328 61440 61440 NT_STATUS_OK
ReadX 13225 1568768 4096 4096 NT_STATUS_OK
ReadX 13225 1572864 61440 61440 NT_STATUS_OK
ReadX 13225 1634304 4096 4096 NT_STATUS_OK
ReadX 13225 1638400 61440 61440 NT_STATUS_OK
ReadX 13225 1699840 4096 4096 NT_STATUS_OK
ReadX 13225 1703936 61440 61440 NT_STATUS_OK
ReadX 13225 1765376 4096 4096 NT_STATUS_OK
ReadX 13225 1769472 61440 61440 NT_STATUS_OK
ReadX 13225 1830912 4096 4096 NT_STATUS_OK
ReadX 13225 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13232 NT_STATUS_OK
QUERY_FILE_INFORMATION 13232 1004 NT_STATUS_OK
WriteX 13232 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13232 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13233 NT_STATUS_OK
Close 13233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13234 NT_STATUS_OK
WriteX 13234 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13234 258 NT_STATUS_OK
WriteX 13234 0 491 491 NT_STATUS_OK
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13232 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13237 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13238 NT_STATUS_OK
WriteX 13238 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13238 258 NT_STATUS_OK
WriteX 13238 0 543 543 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13242 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13252 NT_STATUS_OK
QUERY_FILE_INFORMATION 13252 1004 NT_STATUS_OK
WriteX 13252 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13252 258 NT_STATUS_OK
WriteX 13252 0 2048 2048 NT_STATUS_OK
Close 13252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13253 0 4096 4096 NT_STATUS_OK
Flush 13253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13253 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13258 NT_STATUS_OK
WriteX 13258 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13258 258 NT_STATUS_OK
WriteX 13258 0 2048 2048 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13263 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13264 NT_STATUS_OK
WriteX 13264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 2048 2048 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 2048 2048 NT_STATUS_OK
ReadX 13243 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13259 0 4096 4096 NT_STATUS_OK
WriteX 13243 0 8192 8192 NT_STATUS_OK
WriteX 13244 0 4096 4096 NT_STATUS_OK
WriteX 13245 0 4096 4096 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13269 NT_STATUS_OK
QUERY_FILE_INFORMATION 13269 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13271 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13273 NT_STATUS_OK
ReadX 13273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13289 NT_STATUS_OK
QUERY_FILE_INFORMATION 13289 1004 NT_STATUS_OK
WriteX 13289 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13289 258 NT_STATUS_OK
WriteX 13289 0 2048 2048 NT_STATUS_OK
Close 13289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13297 NT_STATUS_OK
QUERY_FILE_INFORMATION 13297 1004 NT_STATUS_OK
WriteX 13297 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13297 258 NT_STATUS_OK
WriteX 13297 0 2048 2048 NT_STATUS_OK
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13290 0 4096 4096 NT_STATUS_OK
Flush 13290 NT_STATUS_OK
WriteX 13298 0 4096 4096 NT_STATUS_OK
Flush 13298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13290 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13298 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13292 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13300 NT_STATUS_OK
WriteX 13300 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 258 NT_STATUS_OK
WriteX 13300 0 4096 4096 NT_STATUS_OK
Close 13300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13302 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13303 NT_STATUS_OK
WriteX 13303 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13304 0 4096 4096 NT_STATUS_OK
Close 13301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Close 13273 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13310 NT_STATUS_OK
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13311 NT_STATUS_OK
WriteX 13311 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 258 NT_STATUS_OK
WriteX 13311 0 2048 2048 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13325 NT_STATUS_OK
ReadX 13325 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13326 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13328 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13332 NT_STATUS_OK
ReadX 13332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13347 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13348 NT_STATUS_OK
QUERY_FILE_INFORMATION 13348 1004 NT_STATUS_OK
WriteX 13348 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13348 258 NT_STATUS_OK
WriteX 13348 0 2048 2048 NT_STATUS_OK
Close 13348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13360 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 1004 NT_STATUS_OK
WriteX 13360 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 258 NT_STATUS_OK
WriteX 13360 0 2048 2048 NT_STATUS_OK
Close 13360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13363 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13368 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 258 NT_STATUS_OK
WriteX 13368 0 2048 2048 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
Flush 13349 NT_STATUS_OK
WriteX 13361 0 4096 4096 NT_STATUS_OK
Flush 13361 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13361 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13351 4096 16384 16384 NT_STATUS_OK
ReadX 13331 4096 16384 16384 NT_STATUS_OK
ReadX 13363 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 2048 2048 NT_STATUS_OK
WriteX 13371 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13372 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13371 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Close 13337 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Close 13339 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13332 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13374 NT_STATUS_OK
QUERY_FILE_INFORMATION 13374 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13376 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13379 NT_STATUS_OK
ReadX 13379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13379 4096 16384 16384 NT_STATUS_OK
WriteX 13379 0 4096 4096 NT_STATUS_OK
WriteX 13380 0 4096 4096 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
WriteX 13382 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13395 NT_STATUS_OK
ReadX 13395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 8192 8192 NT_STATUS_OK
ReadX 13385 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13399 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13399 0 4096 4096 NT_STATUS_OK
ReadX 13399 4096 4096 4096 NT_STATUS_OK
ReadX 13399 8192 4096 4096 NT_STATUS_OK
WriteX 13385 0 4096 4096 NT_STATUS_OK
WriteX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
ReadX 13400 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13379 0 4096 4096 NT_STATUS_OK
WriteX 13380 0 4096 4096 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
WriteX 13382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13405 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1004 NT_STATUS_OK
WriteX 13405 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 258 NT_STATUS_OK
WriteX 13405 0 2048 2048 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13406 NT_STATUS_OK
ReadX 13406 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13406 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
ReadX 13408 4096 4096 4096 NT_STATUS_OK
WriteX 13408 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
ReadX 13410 4096 4096 4096 NT_STATUS_OK
WriteX 13410 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13411 NT_STATUS_OK
QUERY_FILE_INFORMATION 13411 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13398 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13379 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13396 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13394 NT_STATUS_OK
Close 13395 NT_STATUS_OK
Close 13397 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13399 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13413 0 4096 4096 NT_STATUS_OK
ReadX 13413 4096 4096 4096 NT_STATUS_OK
ReadX 13413 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 4096 4096 NT_STATUS_OK
ReadX 13414 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13431 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 258 NT_STATUS_OK
WriteX 13431 0 2048 2048 NT_STATUS_OK
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13432 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13437 NT_STATUS_OK
QUERY_FILE_INFORMATION 13437 1004 NT_STATUS_OK
WriteX 13437 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13437 258 NT_STATUS_OK
WriteX 13437 0 2048 2048 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13438 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13421 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13439 NT_STATUS_OK
QUERY_FILE_INFORMATION 13439 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Close 13426 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Close 13417 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13441 NT_STATUS_OK
QUERY_FILE_INFORMATION 13441 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 61440 4096 4096 NT_STATUS_OK
ReadX 13443 126976 4096 4096 NT_STATUS_OK
WriteX 13443 0 65536 65536 NT_STATUS_OK
WriteX 13443 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 61440 4096 4096 NT_STATUS_OK
ReadX 13444 126976 4096 4096 NT_STATUS_OK
ReadX 13444 192512 4096 4096 NT_STATUS_OK
ReadX 13444 258048 4096 4096 NT_STATUS_OK
WriteX 13444 0 65536 65536 NT_STATUS_OK
WriteX 13444 65536 65536 65536 NT_STATUS_OK
WriteX 13444 131072 65536 65536 NT_STATUS_OK
WriteX 13444 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 61440 4096 4096 NT_STATUS_OK
ReadX 13445 126976 4096 4096 NT_STATUS_OK
ReadX 13445 192512 4096 4096 NT_STATUS_OK
ReadX 13445 258048 4096 4096 NT_STATUS_OK
ReadX 13445 323584 4096 4096 NT_STATUS_OK
ReadX 13445 389120 4096 4096 NT_STATUS_OK
ReadX 13445 454656 4096 4096 NT_STATUS_OK
ReadX 13445 520192 4096 4096 NT_STATUS_OK
WriteX 13445 0 65536 65536 NT_STATUS_OK
WriteX 13445 65536 65536 65536 NT_STATUS_OK
WriteX 13445 131072 65536 65536 NT_STATUS_OK
WriteX 13445 196608 65536 65536 NT_STATUS_OK
WriteX 13445 262144 65536 65536 NT_STATUS_OK
WriteX 13445 327680 65536 65536 NT_STATUS_OK
WriteX 13445 393216 65536 65536 NT_STATUS_OK
WriteX 13445 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13446 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13446 8192 4096 4096 NT_STATUS_OK
ReadX 13446 12288 4096 4096 NT_STATUS_OK
ReadX 13446 16384 4096 4096 NT_STATUS_OK
ReadX 13446 20480 4096 4096 NT_STATUS_OK
ReadX 13446 24576 4096 4096 NT_STATUS_OK
ReadX 13446 28672 4096 4096 NT_STATUS_OK
ReadX 13446 32768 4096 4096 NT_STATUS_OK
ReadX 13446 36864 4096 4096 NT_STATUS_OK
ReadX 13446 40960 4096 4096 NT_STATUS_OK
ReadX 13446 45056 4096 4096 NT_STATUS_OK
ReadX 13446 49152 4096 4096 NT_STATUS_OK
ReadX 13446 53248 4096 4096 NT_STATUS_OK
ReadX 13446 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13446 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13447 NT_STATUS_OK
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13449 NT_STATUS_OK
WriteX 13449 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13449 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13449 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13449 1004 NT_STATUS_OK
WriteX 13449 0 57088 57088 NT_STATUS_OK
WriteX 13449 0 4096 4096 NT_STATUS_OK
Flush 13449 NT_STATUS_OK
Close 13446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13450 NT_STATUS_OK
SET_FILE_INFORMATION 13450 1004 NT_STATUS_OK
Close 13450 NT_STATUS_OK
SET_FILE_INFORMATION 13449 1004 NT_STATUS_OK
WriteX 13449 0 4096 4096 NT_STATUS_OK
Close 13449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13453 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13454 NT_STATUS_OK
WriteX 13454 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13454 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13454 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13454 1004 NT_STATUS_OK
WriteX 13454 0 51456 51456 NT_STATUS_OK
WriteX 13454 0 4096 4096 NT_STATUS_OK
Flush 13454 NT_STATUS_OK
SET_FILE_INFORMATION 13454 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13454 1004 NT_STATUS_OK
WriteX 13454 0 4096 4096 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13458 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13463 NT_STATUS_OK
WriteX 13463 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13463 258 NT_STATUS_OK
WriteX 13463 0 53077 53077 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13464 NT_STATUS_OK
WriteX 13464 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13464 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13464 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13464 1004 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 1856 1856 NT_STATUS_OK
WriteX 13464 0 4096 4096 NT_STATUS_OK
Flush 13464 NT_STATUS_OK
SET_FILE_INFORMATION 13464 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13464 1004 NT_STATUS_OK
WriteX 13464 0 4096 4096 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13470 NT_STATUS_OK
Close 13470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13473 NT_STATUS_OK
WriteX 13473 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 258 NT_STATUS_OK
WriteX 13473 0 7983 7983 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13478 NT_STATUS_OK
WriteX 13478 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13478 258 NT_STATUS_OK
WriteX 13478 0 65536 65536 NT_STATUS_OK
WriteX 13478 65536 65536 65536 NT_STATUS_OK
WriteX 13478 131072 65536 65536 NT_STATUS_OK
WriteX 13478 196608 65536 65536 NT_STATUS_OK
WriteX 13478 262144 65536 65536 NT_STATUS_OK
WriteX 13478 327680 65536 65536 NT_STATUS_OK
WriteX 13478 393216 65536 65536 NT_STATUS_OK
WriteX 13478 458752 46731 46731 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13479 NT_STATUS_OK
WriteX 13479 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13468 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 65536 65536 NT_STATUS_OK
WriteX 13479 65536 22848 22848 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Flush 13479 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13483 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13484 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
ReadX 13484 8192 4096 4096 NT_STATUS_OK
ReadX 13484 12288 4096 4096 NT_STATUS_OK
ReadX 13484 16384 4096 4096 NT_STATUS_OK
ReadX 13484 20480 4096 4096 NT_STATUS_OK
ReadX 13484 24576 4096 4096 NT_STATUS_OK
ReadX 13484 28672 4096 4096 NT_STATUS_OK
ReadX 13484 32768 4096 4096 NT_STATUS_OK
ReadX 13484 36864 4096 4096 NT_STATUS_OK
ReadX 13484 40960 4096 4096 NT_STATUS_OK
ReadX 13484 45056 4096 4096 NT_STATUS_OK
ReadX 13484 49152 4096 4096 NT_STATUS_OK
ReadX 13484 53248 4096 4096 NT_STATUS_OK
ReadX 13484 57344 4096 4096 NT_STATUS_OK
ReadX 13484 61440 4096 4096 NT_STATUS_OK
ReadX 13484 65536 4096 4096 NT_STATUS_OK
ReadX 13484 69632 4096 4096 NT_STATUS_OK
ReadX 13484 73728 4096 4096 NT_STATUS_OK
ReadX 13484 77824 4096 4096 NT_STATUS_OK
ReadX 13484 81920 4096 4096 NT_STATUS_OK
ReadX 13484 86016 4096 4096 NT_STATUS_OK
ReadX 13484 90112 4096 4096 NT_STATUS_OK
ReadX 13484 94208 4096 4096 NT_STATUS_OK
ReadX 13484 98304 4096 4096 NT_STATUS_OK
ReadX 13484 102400 4096 4096 NT_STATUS_OK
ReadX 13484 106496 4096 4096 NT_STATUS_OK
ReadX 13484 110592 4096 4096 NT_STATUS_OK
ReadX 13484 114688 4096 4096 NT_STATUS_OK
ReadX 13484 118784 4096 4096 NT_STATUS_OK
ReadX 13484 122880 4096 4096 NT_STATUS_OK
ReadX 13484 126976 4096 4096 NT_STATUS_OK
ReadX 13484 131072 4096 4096 NT_STATUS_OK
ReadX 13484 135168 4096 4096 NT_STATUS_OK
ReadX 13484 139264 4096 4096 NT_STATUS_OK
ReadX 13484 143360 4096 4096 NT_STATUS_OK
ReadX 13484 147456 4096 4096 NT_STATUS_OK
ReadX 13484 151552 4096 4096 NT_STATUS_OK
ReadX 13484 155648 4096 4096 NT_STATUS_OK
ReadX 13484 159744 4096 4096 NT_STATUS_OK
ReadX 13484 163840 4096 4096 NT_STATUS_OK
ReadX 13484 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13484 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13487 NT_STATUS_OK
WriteX 13487 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13487 258 NT_STATUS_OK
Close 13484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13488 NT_STATUS_OK
SET_FILE_INFORMATION 13488 1004 NT_STATUS_OK
Close 13488 NT_STATUS_OK
WriteX 13487 0 42388 42388 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13489 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
ReadX 13491 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13492 NT_STATUS_OK
WriteX 13492 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13492 258 NT_STATUS_OK
SET_FILE_INFORMATION 13492 1004 NT_STATUS_OK
WriteX 13492 0 42652 42652 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13494 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 4096 4096 NT_STATUS_OK
ReadX 13496 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13498 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13501 NT_STATUS_OK
WriteX 13501 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13501 258 NT_STATUS_OK
WriteX 13501 0 65536 65536 NT_STATUS_OK
WriteX 13501 65536 49 49 NT_STATUS_OK
Close 13501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 61440 61440 NT_STATUS_OK
ReadX 13502 61440 4096 4096 NT_STATUS_OK
ReadX 13502 65536 61440 61440 NT_STATUS_OK
ReadX 13502 126976 4096 4096 NT_STATUS_OK
ReadX 13502 131072 61440 61440 NT_STATUS_OK
ReadX 13502 192512 4096 4096 NT_STATUS_OK
ReadX 13502 196608 61440 61440 NT_STATUS_OK
ReadX 13502 258048 4096 4096 NT_STATUS_OK
ReadX 13502 262144 61440 61440 NT_STATUS_OK
ReadX 13502 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 61440 61440 NT_STATUS_OK
ReadX 13503 61440 4096 4096 NT_STATUS_OK
ReadX 13503 65536 61440 61440 NT_STATUS_OK
ReadX 13503 126976 4096 4096 NT_STATUS_OK
ReadX 13503 131072 61440 61440 NT_STATUS_OK
ReadX 13503 192512 4096 4096 NT_STATUS_OK
ReadX 13503 196608 61440 61440 NT_STATUS_OK
ReadX 13503 258048 4096 4096 NT_STATUS_OK
ReadX 13503 262144 61440 61440 NT_STATUS_OK
ReadX 13503 323584 4096 4096 NT_STATUS_OK
ReadX 13503 327680 61440 61440 NT_STATUS_OK
ReadX 13503 389120 4096 4096 NT_STATUS_OK
ReadX 13503 393216 61440 61440 NT_STATUS_OK
ReadX 13503 454656 4096 4096 NT_STATUS_OK
ReadX 13503 458752 61440 61440 NT_STATUS_OK
ReadX 13503 520192 4096 4096 NT_STATUS_OK
ReadX 13503 524288 61440 61440 NT_STATUS_OK
ReadX 13503 585728 4096 4096 NT_STATUS_OK
ReadX 13503 589824 61440 61440 NT_STATUS_OK
ReadX 13503 651264 4096 4096 NT_STATUS_OK
ReadX 13503 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 61440 61440 NT_STATUS_OK
ReadX 13504 61440 4096 4096 NT_STATUS_OK
ReadX 13504 65536 61440 61440 NT_STATUS_OK
ReadX 13504 126976 4096 4096 NT_STATUS_OK
ReadX 13504 131072 61440 61440 NT_STATUS_OK
ReadX 13504 192512 4096 4096 NT_STATUS_OK
ReadX 13504 196608 61440 61440 NT_STATUS_OK
ReadX 13504 258048 4096 4096 NT_STATUS_OK
ReadX 13504 262144 61440 61440 NT_STATUS_OK
ReadX 13504 323584 4096 4096 NT_STATUS_OK
ReadX 13504 327680 61440 61440 NT_STATUS_OK
ReadX 13504 389120 4096 4096 NT_STATUS_OK
ReadX 13504 393216 61440 61440 NT_STATUS_OK
ReadX 13504 454656 4096 4096 NT_STATUS_OK
ReadX 13504 458752 61440 61440 NT_STATUS_OK
ReadX 13504 520192 4096 4096 NT_STATUS_OK
ReadX 13504 524288 61440 61440 NT_STATUS_OK
ReadX 13504 585728 4096 4096 NT_STATUS_OK
ReadX 13504 589824 61440 61440 NT_STATUS_OK
ReadX 13504 651264 4096 4096 NT_STATUS_OK
ReadX 13504 655360 61440 61440 NT_STATUS_OK
ReadX 13504 716800 4096 4096 NT_STATUS_OK
ReadX 13504 720896 61440 61440 NT_STATUS_OK
ReadX 13504 782336 4096 4096 NT_STATUS_OK
ReadX 13504 786432 61440 61440 NT_STATUS_OK
ReadX 13504 847872 4096 4096 NT_STATUS_OK
ReadX 13504 851968 61440 61440 NT_STATUS_OK
ReadX 13504 913408 4096 4096 NT_STATUS_OK
ReadX 13504 917504 61440 61440 NT_STATUS_OK
ReadX 13504 978944 4096 4096 NT_STATUS_OK
ReadX 13504 983040 61440 61440 NT_STATUS_OK
ReadX 13504 1044480 4096 4096 NT_STATUS_OK
ReadX 13504 1048576 61440 61440 NT_STATUS_OK
ReadX 13504 1110016 4096 4096 NT_STATUS_OK
ReadX 13504 1114112 61440 61440 NT_STATUS_OK
ReadX 13504 1175552 4096 4096 NT_STATUS_OK
ReadX 13504 1179648 61440 61440 NT_STATUS_OK
ReadX 13504 1241088 4096 4096 NT_STATUS_OK
ReadX 13504 1245184 61440 61440 NT_STATUS_OK
ReadX 13504 1306624 4096 4096 NT_STATUS_OK
ReadX 13504 1310720 61440 61440 NT_STATUS_OK
ReadX 13504 1372160 4096 4096 NT_STATUS_OK
ReadX 13504 1376256 61440 61440 NT_STATUS_OK
ReadX 13504 1437696 4096 4096 NT_STATUS_OK
ReadX 13504 1441792 61440 61440 NT_STATUS_OK
ReadX 13504 1503232 4096 4096 NT_STATUS_OK
ReadX 13504 1507328 61440 61440 NT_STATUS_OK
ReadX 13504 1568768 4096 4096 NT_STATUS_OK
ReadX 13504 1572864 61440 61440 NT_STATUS_OK
ReadX 13504 1634304 4096 4096 NT_STATUS_OK
ReadX 13504 1638400 61440 61440 NT_STATUS_OK
ReadX 13504 1699840 4096 4096 NT_STATUS_OK
ReadX 13504 1703936 61440 61440 NT_STATUS_OK
ReadX 13504 1765376 4096 4096 NT_STATUS_OK
ReadX 13504 1769472 61440 61440 NT_STATUS_OK
ReadX 13504 1830912 4096 4096 NT_STATUS_OK
ReadX 13504 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13506 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 1005 NT_STATUS_OK
ReadX 13506 2156 24 24 NT_STATUS_OK
ReadX 13506 2139 276 276 NT_STATUS_OK
ReadX 13506 2136 14 14 NT_STATUS_OK
ReadX 13506 2136 7 7 NT_STATUS_OK
ReadX 13506 2138 12 12 NT_STATUS_OK
ReadX 13506 2137 8 8 NT_STATUS_OK
ReadX 13506 2135 15 15 NT_STATUS_OK
ReadX 13506 0 16 16 NT_STATUS_OK
ReadX 13506 16 2048 2048 NT_STATUS_OK
ReadX 13506 2064 2048 2048 NT_STATUS_OK
ReadX 13506 257 2048 2048 NT_STATUS_OK
ReadX 13506 385 2048 2048 NT_STATUS_OK
ReadX 13506 513 2048 2048 NT_STATUS_OK
ReadX 13506 641 2048 2048 NT_STATUS_OK
ReadX 13506 769 2048 2048 NT_STATUS_OK
ReadX 13506 897 2048 2048 NT_STATUS_OK
ReadX 13506 1025 2048 2048 NT_STATUS_OK
ReadX 13506 1153 2048 2048 NT_STATUS_OK
ReadX 13506 1281 2048 2048 NT_STATUS_OK
ReadX 13506 1409 2048 2048 NT_STATUS_OK
ReadX 13506 1537 408 408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13511 NT_STATUS_OK
WriteX 13511 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13511 258 NT_STATUS_OK
WriteX 13511 0 10575 10575 NT_STATUS_OK
Flush 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13516 NT_STATUS_OK
LockX 13516 2147483538 1 NT_STATUS_OK
UnlockX 13516 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13516 1005 NT_STATUS_OK
ReadX 13516 0 512 512 NT_STATUS_OK
ReadX 13516 512 512 512 NT_STATUS_OK
ReadX 13516 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13516 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13516 1004 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13517 NT_STATUS_OK
QUERY_FILE_INFORMATION 13517 1005 NT_STATUS_OK
ReadX 13517 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13518 NT_STATUS_OK
LockX 13518 2147483538 1 NT_STATUS_OK
UnlockX 13518 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13518 1005 NT_STATUS_OK
ReadX 13518 0 512 512 NT_STATUS_OK
ReadX 13518 512 512 512 NT_STATUS_OK
ReadX 13518 1024 512 512 NT_STATUS_OK
ReadX 13518 288 20 20 NT_STATUS_OK
ReadX 13518 308 2084 2084 NT_STATUS_OK
ReadX 13518 388 2084 2084 NT_STATUS_OK
ReadX 13518 388 2084 2084 NT_STATUS_OK
ReadX 13505 2157 1386 1386 NT_STATUS_OK
ReadX 13518 2472 399 399 NT_STATUS_OK
ReadX 13518 3072 1536 1536 NT_STATUS_OK
ReadX 13518 544 149 149 NT_STATUS_OK
ReadX 13518 693 485 485 NT_STATUS_OK
Close 13518 NT_STATUS_OK
ReadX 13505 2157 4096 4096 NT_STATUS_OK
ReadX 13505 6253 4096 4096 NT_STATUS_OK
ReadX 13505 10349 4096 4096 NT_STATUS_OK
ReadX 13505 14445 4096 4096 NT_STATUS_OK
ReadX 13505 18541 4096 4096 NT_STATUS_OK
ReadX 13505 22637 256 256 NT_STATUS_OK
ReadX 13505 22893 4096 4096 NT_STATUS_OK
ReadX 13505 26989 4096 4096 NT_STATUS_OK
ReadX 13505 31085 4096 4096 NT_STATUS_OK
ReadX 13505 35181 4096 4096 NT_STATUS_OK
ReadX 13505 39277 4096 4096 NT_STATUS_OK
ReadX 13505 43373 4096 4096 NT_STATUS_OK
ReadX 13505 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13505 2157 1024 1024 NT_STATUS_OK
ReadX 13505 1667 4688 4688 NT_STATUS_OK
ReadX 13505 6355 3516 3516 NT_STATUS_OK
ReadX 13505 9871 16384 16384 NT_STATUS_OK
ReadX 13505 26255 3771 3771 NT_STATUS_OK
ReadX 13505 30026 2048 2048 NT_STATUS_OK
ReadX 13505 32074 1024 1024 NT_STATUS_OK
ReadX 13505 33098 6652 6652 NT_STATUS_OK
ReadX 13505 39750 16384 16384 NT_STATUS_OK
ReadX 13505 56134 10496 10496 NT_STATUS_OK
ReadX 13505 66630 1784 1784 NT_STATUS_OK
ReadX 13505 68414 90 90 NT_STATUS_OK
ReadX 13505 68504 273 273 NT_STATUS_OK
ReadX 13505 68777 1600 1600 NT_STATUS_OK
ReadX 13505 70377 640 640 NT_STATUS_OK
ReadX 13505 71017 1280 1280 NT_STATUS_OK
ReadX 13505 72297 8464 8464 NT_STATUS_OK
ReadX 13505 80761 158 158 NT_STATUS_OK
ReadX 13505 80919 912 912 NT_STATUS_OK
ReadX 13505 81831 1980 1980 NT_STATUS_OK
ReadX 13505 83811 2256 2256 NT_STATUS_OK
ReadX 13505 86067 400 400 NT_STATUS_OK
ReadX 13505 86467 252 252 NT_STATUS_OK
ReadX 13505 86719 42 42 NT_STATUS_OK
ReadX 13505 86761 725 725 NT_STATUS_OK
ReadX 13505 2009 512 512 NT_STATUS_OK
ReadX 13505 3895 9 9 NT_STATUS_OK
ReadX 13505 3781 46 46 NT_STATUS_OK
ReadX 13505 4059 92 92 NT_STATUS_OK
ReadX 13505 3781 92 92 NT_STATUS_OK
ReadX 13505 3986 184 184 NT_STATUS_OK
ReadX 13505 3987 16384 16384 NT_STATUS_OK
ReadX 13505 3902 16384 16384 NT_STATUS_OK
ReadX 13505 3781 10240 10240 NT_STATUS_OK
ReadX 13505 3821 16384 16384 NT_STATUS_OK
ReadX 13505 3891 935 935 NT_STATUS_OK
ReadX 13505 4060 10240 10240 NT_STATUS_OK
ReadX 13505 4059 184 184 NT_STATUS_OK
ReadX 13505 256 184 184 NT_STATUS_OK
ReadX 13505 256 1026 1026 NT_STATUS_OK
ReadX 13505 3901 326 326 NT_STATUS_OK
ReadX 13505 3899 652 652 NT_STATUS_OK
ReadX 13505 256 2 2 NT_STATUS_OK
ReadX 13505 258 4948 4948 NT_STATUS_OK
Close 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13520 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13523 NT_STATUS_OK
WriteX 13523 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13523 258 NT_STATUS_OK
WriteX 13523 0 65536 65536 NT_STATUS_OK
WriteX 13523 65536 65536 65536 NT_STATUS_OK
WriteX 13523 131072 65536 65536 NT_STATUS_OK
WriteX 13523 196608 65536 65536 NT_STATUS_OK
WriteX 13523 262144 65536 65536 NT_STATUS_OK
WriteX 13523 327680 65536 65536 NT_STATUS_OK
WriteX 13523 393216 65536 65536 NT_STATUS_OK
WriteX 13523 458752 65536 65536 NT_STATUS_OK
WriteX 13523 524288 65536 65536 NT_STATUS_OK
WriteX 13523 589824 35257 35257 NT_STATUS_OK
Close 13523 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13528 NT_STATUS_OK
WriteX 13528 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13528 258 NT_STATUS_OK
WriteX 13528 0 65536 65536 NT_STATUS_OK
WriteX 13528 65536 65536 65536 NT_STATUS_OK
WriteX 13528 131072 65536 65536 NT_STATUS_OK
WriteX 13528 196608 65536 65536 NT_STATUS_OK
WriteX 13528 262144 65536 65536 NT_STATUS_OK
WriteX 13528 327680 65536 65536 NT_STATUS_OK
WriteX 13528 393216 65536 65536 NT_STATUS_OK
WriteX 13528 458752 65536 65536 NT_STATUS_OK
WriteX 13528 524288 65536 65536 NT_STATUS_OK
WriteX 13528 589824 57598 57598 NT_STATUS_OK
Close 13528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13530 NT_STATUS_OK
WriteX 13530 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
WriteX 13530 0 12543 12543 NT_STATUS_OK
Flush 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Close 13514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13532 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13536 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
ReadX 13536 1938 24 24 NT_STATUS_OK
ReadX 13536 1920 276 276 NT_STATUS_OK
ReadX 13536 1918 14 14 NT_STATUS_OK
ReadX 13536 1918 7 7 NT_STATUS_OK
ReadX 13536 1919 12 12 NT_STATUS_OK
ReadX 13536 1919 8 8 NT_STATUS_OK
ReadX 13536 1917 15 15 NT_STATUS_OK
ReadX 13536 0 16 16 NT_STATUS_OK
ReadX 13536 16 2048 2048 NT_STATUS_OK
ReadX 13536 2064 2048 2048 NT_STATUS_OK
ReadX 13536 257 2048 2048 NT_STATUS_OK
ReadX 13536 385 2048 2048 NT_STATUS_OK
ReadX 13536 513 2048 2048 NT_STATUS_OK
ReadX 13536 641 2048 2048 NT_STATUS_OK
ReadX 13536 769 2048 2048 NT_STATUS_OK
ReadX 13536 897 2048 2048 NT_STATUS_OK
ReadX 13536 1025 2048 2048 NT_STATUS_OK
ReadX 13536 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13538 NT_STATUS_OK
Close 13538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13541 NT_STATUS_OK
WriteX 13541 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13541 258 NT_STATUS_OK
WriteX 13541 0 11588 11588 NT_STATUS_OK
Flush 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13542 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13546 NT_STATUS_OK
WriteX 13546 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 258 NT_STATUS_OK
WriteX 13546 0 11615 11615 NT_STATUS_OK
Flush 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13548 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13555 NT_STATUS_OK
WriteX 13555 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13555 258 NT_STATUS_OK
WriteX 13555 0 65536 65536 NT_STATUS_OK
WriteX 13555 65536 16050 16050 NT_STATUS_OK
Close 13555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13535 1939 64 64 NT_STATUS_OK
ReadX 13535 128 248 248 NT_STATUS_OK
ReadX 13535 128 568 568 NT_STATUS_OK
ReadX 13535 3872 1536 1536 NT_STATUS_OK
ReadX 13535 3456 2560 2560 NT_STATUS_OK
ReadX 13535 3136 512 512 NT_STATUS_OK
ReadX 13535 2880 4096 4096 NT_STATUS_OK
ReadX 13535 3264 3072 3072 NT_STATUS_OK
ReadX 13535 320 4096 4096 NT_STATUS_OK
ReadX 13535 1024 4096 4096 NT_STATUS_OK
ReadX 13535 3616 4096 4096 NT_STATUS_OK
ReadX 13535 1939 64 64 NT_STATUS_OK
ReadX 13535 128 248 248 NT_STATUS_OK
ReadX 13535 128 608 608 NT_STATUS_OK
ReadX 13535 2858 1024 1024 NT_STATUS_OK
ReadX 13535 2810 4096 4096 NT_STATUS_OK
ReadX 13535 2826 4096 4096 NT_STATUS_OK
ReadX 13535 2580 2048 2048 NT_STATUS_OK
ReadX 13535 2800 2560 2560 NT_STATUS_OK
ReadX 13535 2100 4096 4096 NT_STATUS_OK
ReadX 13535 2084 4096 4096 NT_STATUS_OK
ReadX 13535 868 4096 4096 NT_STATUS_OK
ReadX 13535 2324 4096 4096 NT_STATUS_OK
ReadX 13535 884 4096 4096 NT_STATUS_OK
ReadX 13535 2604 1024 1024 NT_STATUS_OK
ReadX 13535 580 4096 4096 NT_STATUS_OK
ReadX 13535 596 4096 4096 NT_STATUS_OK
ReadX 13535 2752 4096 4096 NT_STATUS_OK
ReadX 13535 2842 1024 1024 NT_STATUS_OK
ReadX 13535 660 4096 4096 NT_STATUS_OK
ReadX 13535 2720 4096 4096 NT_STATUS_OK
ReadX 13535 2736 4096 4096 NT_STATUS_OK
ReadX 13535 628 4096 4096 NT_STATUS_OK
ReadX 13535 2704 4096 4096 NT_STATUS_OK
ReadX 13535 1556 4096 4096 NT_STATUS_OK
ReadX 13535 576 4096 4096 NT_STATUS_OK
ReadX 13535 3168 1536 1536 NT_STATUS_OK
ReadX 13535 832 4096 4096 NT_STATUS_OK
ReadX 13535 1088 4096 4096 NT_STATUS_OK
ReadX 13535 1344 4096 4096 NT_STATUS_OK
ReadX 13535 1600 4096 4096 NT_STATUS_OK
ReadX 13535 1856 4096 4096 NT_STATUS_OK
ReadX 13535 2112 4096 4096 NT_STATUS_OK
ReadX 13535 1892 4096 4096 NT_STATUS_OK
ReadX 13535 820 4096 4096 NT_STATUS_OK
ReadX 13535 788 4096 4096 NT_STATUS_OK
ReadX 13535 1604 4096 4096 NT_STATUS_OK
ReadX 13535 3648 4096 4096 NT_STATUS_OK
ReadX 13535 2608 4096 4096 NT_STATUS_OK
ReadX 13535 548 4096 4096 NT_STATUS_OK
ReadX 13535 740 4096 4096 NT_STATUS_OK
ReadX 13535 1344 4096 4096 NT_STATUS_OK
ReadX 13535 3392 4096 4096 NT_STATUS_OK
ReadX 13535 3904 4096 4096 NT_STATUS_OK
ReadX 13535 644 4096 4096 NT_STATUS_OK
ReadX 13535 676 4096 4096 NT_STATUS_OK
ReadX 13535 2688 4096 4096 NT_STATUS_OK
ReadX 13535 320 4096 4096 NT_STATUS_OK
ReadX 13535 900 4096 4096 NT_STATUS_OK
ReadX 13535 1908 4096 4096 NT_STATUS_OK
ReadX 13535 852 4096 4096 NT_STATUS_OK
ReadX 13535 724 4096 4096 NT_STATUS_OK
ReadX 13535 2292 4096 4096 NT_STATUS_OK
ReadX 13535 612 4096 4096 NT_STATUS_OK
ReadX 13535 388 4096 4096 NT_STATUS_OK
ReadX 13535 2368 4096 4096 NT_STATUS_OK
ReadX 13535 2624 4096 4096 NT_STATUS_OK
ReadX 13535 500 4096 4096 NT_STATUS_OK
ReadX 13535 356 4096 4096 NT_STATUS_OK
ReadX 13535 1024 4096 4096 NT_STATUS_OK
ReadX 13535 576 4096 4096 NT_STATUS_OK
ReadX 13535 340 4096 4096 NT_STATUS_OK
ReadX 13535 420 4096 4096 NT_STATUS_OK
ReadX 13535 1600 4096 4096 NT_STATUS_OK
ReadX 13535 404 4096 4096 NT_STATUS_OK
ReadX 13535 1428 4096 4096 NT_STATUS_OK
ReadX 13535 2656 4096 4096 NT_STATUS_OK
ReadX 13535 2624 4096 4096 NT_STATUS_OK
ReadX 13535 452 4096 4096 NT_STATUS_OK
ReadX 13535 692 4096 4096 NT_STATUS_OK
ReadX 13535 564 4096 4096 NT_STATUS_OK
ReadX 13535 372 4096 4096 NT_STATUS_OK
ReadX 13535 468 4096 4096 NT_STATUS_OK
ReadX 13535 484 4096 4096 NT_STATUS_OK
ReadX 13535 1088 4096 4096 NT_STATUS_OK
ReadX 13535 1924 4096 4096 NT_STATUS_OK
ReadX 13535 2768 4096 4096 NT_STATUS_OK
ReadX 13535 832 4096 4096 NT_STATUS_OK
ReadX 13535 836 4096 4096 NT_STATUS_OK
ReadX 13535 1856 4096 4096 NT_STATUS_OK
ReadX 13535 2640 4096 4096 NT_STATUS_OK
ReadX 13535 436 4096 4096 NT_STATUS_OK
ReadX 13535 1828 4096 4096 NT_STATUS_OK
ReadX 13535 804 4096 4096 NT_STATUS_OK
ReadX 13535 1860 4096 4096 NT_STATUS_OK
ReadX 13535 1812 4096 4096 NT_STATUS_OK
ReadX 13535 756 4096 4096 NT_STATUS_OK
ReadX 13535 1636 4096 4096 NT_STATUS_OK
ReadX 13535 772 4096 4096 NT_STATUS_OK
ReadX 13535 2036 4096 4096 NT_STATUS_OK
ReadX 13535 1220 4096 4096 NT_STATUS_OK
ReadX 13535 1652 4096 4096 NT_STATUS_OK
ReadX 13535 2588 4096 4096 NT_STATUS_OK
ReadX 13535 916 4096 4096 NT_STATUS_OK
ReadX 13535 260 4096 4096 NT_STATUS_OK
ReadX 13535 932 4096 4096 NT_STATUS_OK
ReadX 13535 2624 4096 4096 NT_STATUS_OK
ReadX 13535 308 4096 4096 NT_STATUS_OK
ReadX 13535 292 4096 4096 NT_STATUS_OK
ReadX 13535 1140 4096 4096 NT_STATUS_OK
ReadX 13535 276 4096 4096 NT_STATUS_OK
ReadX 13535 2020 4096 4096 NT_STATUS_OK
ReadX 13535 2880 4096 4096 NT_STATUS_OK
ReadX 13535 516 4096 4096 NT_STATUS_OK
ReadX 13535 1844 4096 4096 NT_STATUS_OK
ReadX 13535 1124 4096 4096 NT_STATUS_OK
ReadX 13535 3136 4096 4096 NT_STATUS_OK
ReadX 13535 324 4096 4096 NT_STATUS_OK
ReadX 13535 1156 4096 4096 NT_STATUS_OK
ReadX 13535 1172 4096 4096 NT_STATUS_OK
ReadX 13535 2112 4096 4096 NT_STATUS_OK
ReadX 13535 2368 4096 4096 NT_STATUS_OK
ReadX 13535 964 4096 4096 NT_STATUS_OK
ReadX 13535 980 4096 4096 NT_STATUS_OK
ReadX 13535 1012 4096 4096 NT_STATUS_OK
ReadX 13535 532 4096 4096 NT_STATUS_OK
ReadX 13535 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13535 1620 4096 4096 NT_STATUS_OK
ReadX 13535 1604 4096 4096 NT_STATUS_OK
ReadX 13535 2116 4096 4096 NT_STATUS_OK
ReadX 13535 2132 4096 4096 NT_STATUS_OK
ReadX 13535 2148 4096 4096 NT_STATUS_OK
ReadX 13535 2276 4096 4096 NT_STATUS_OK
ReadX 13535 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13557 NT_STATUS_OK
Close 13557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13560 NT_STATUS_OK
QUERY_FILE_INFORMATION 13515 1004 NT_STATUS_OK
Close 13515 NT_STATUS_OK
WriteX 13560 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13560 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13517 1004 NT_STATUS_OK
Close 13517 NT_STATUS_OK
WriteX 13560 0 65536 65536 NT_STATUS_OK
WriteX 13560 65536 64850 64850 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13562 NT_STATUS_OK
WriteX 13562 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13562 258 NT_STATUS_OK
ReadX 13535 2068 4096 4096 NT_STATUS_OK
ReadX 13535 1588 4096 4096 NT_STATUS_OK
ReadX 13535 1572 4096 4096 NT_STATUS_OK
WriteX 13562 0 18630 18630 NT_STATUS_OK
Flush 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13535 612 4096 4096 NT_STATUS_OK
ReadX 13535 564 4096 4096 NT_STATUS_OK
ReadX 13535 1876 4096 4096 NT_STATUS_OK
ReadX 13535 628 4096 4096 NT_STATUS_OK
ReadX 13535 740 4096 4096 NT_STATUS_OK
ReadX 13535 724 4096 4096 NT_STATUS_OK
ReadX 13535 644 4096 4096 NT_STATUS_OK
ReadX 13535 2324 4096 4096 NT_STATUS_OK
ReadX 13535 660 4096 4096 NT_STATUS_OK
ReadX 13535 852 4096 4096 NT_STATUS_OK
ReadX 13535 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13535 2368 4096 4096 NT_STATUS_OK
ReadX 13535 1024 4096 4096 NT_STATUS_OK
ReadX 13535 320 4096 4096 NT_STATUS_OK
ReadX 13535 580 4096 4096 NT_STATUS_OK
ReadX 13535 3136 512 512 NT_STATUS_OK
ReadX 13535 2880 4096 4096 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13567 NT_STATUS_OK
ReadX 13567 61440 4096 4096 NT_STATUS_OK
ReadX 13567 126976 4096 4096 NT_STATUS_OK
WriteX 13567 0 65536 65536 NT_STATUS_OK
WriteX 13567 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 61440 4096 4096 NT_STATUS_OK
ReadX 13568 126976 4096 4096 NT_STATUS_OK
ReadX 13568 192512 4096 4096 NT_STATUS_OK
ReadX 13568 258048 4096 4096 NT_STATUS_OK
WriteX 13568 0 65536 65536 NT_STATUS_OK
WriteX 13568 65536 65536 65536 NT_STATUS_OK
WriteX 13568 131072 65536 65536 NT_STATUS_OK
WriteX 13568 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13569 NT_STATUS_OK
ReadX 13569 61440 4096 4096 NT_STATUS_OK
ReadX 13569 126976 4096 4096 NT_STATUS_OK
ReadX 13569 192512 4096 4096 NT_STATUS_OK
ReadX 13569 258048 4096 4096 NT_STATUS_OK
ReadX 13569 323584 4096 4096 NT_STATUS_OK
ReadX 13569 389120 4096 4096 NT_STATUS_OK
ReadX 13569 454656 4096 4096 NT_STATUS_OK
ReadX 13569 520192 4096 4096 NT_STATUS_OK
WriteX 13569 0 65536 65536 NT_STATUS_OK
WriteX 13569 65536 65536 65536 NT_STATUS_OK
WriteX 13569 131072 65536 65536 NT_STATUS_OK
WriteX 13569 196608 65536 65536 NT_STATUS_OK
WriteX 13569 262144 65536 65536 NT_STATUS_OK
WriteX 13569 327680 65536 65536 NT_STATUS_OK
WriteX 13569 393216 65536 65536 NT_STATUS_OK
WriteX 13569 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13571 NT_STATUS_OK
Close 13571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13572 NT_STATUS_OK
WriteX 13572 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13572 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13570 0 8192 8192 NT_STATUS_OK
Flush 13570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13570 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13570 0 8192 8192 NT_STATUS_OK
Flush 13570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13570 0 8192 8192 NT_STATUS_OK
Flush 13570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13570 0 8192 8192 NT_STATUS_OK
Flush 13570 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13574 NT_STATUS_OK
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Close 13568 NT_STATUS_OK
Close 13569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13577 NT_STATUS_OK
WriteX 13577 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13577 258 NT_STATUS_OK
WriteX 13577 0 62591 62591 NT_STATUS_OK
Close 13577 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13582 NT_STATUS_OK
WriteX 13582 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13582 258 NT_STATUS_OK
WriteX 13582 0 10845 10845 NT_STATUS_OK
Close 13582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13587 NT_STATUS_OK
WriteX 13587 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 258 NT_STATUS_OK
WriteX 13587 0 30118 30118 NT_STATUS_OK
Close 13587 NT_STATUS_OK
WriteX 13570 0 4096 4096 NT_STATUS_OK
WriteX 13572 0 64 64 NT_STATUS_OK
Close 13572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13589 NT_STATUS_OK
ReadX 13589 0 61440 61440 NT_STATUS_OK
ReadX 13589 61440 4096 4096 NT_STATUS_OK
ReadX 13589 65536 61440 61440 NT_STATUS_OK
ReadX 13589 126976 4096 4096 NT_STATUS_OK
ReadX 13589 131072 61440 61440 NT_STATUS_OK
ReadX 13589 192512 4096 4096 NT_STATUS_OK
ReadX 13589 196608 61440 61440 NT_STATUS_OK
ReadX 13589 258048 4096 4096 NT_STATUS_OK
ReadX 13589 262144 61440 61440 NT_STATUS_OK
ReadX 13589 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 61440 61440 NT_STATUS_OK
ReadX 13590 61440 4096 4096 NT_STATUS_OK
ReadX 13590 65536 61440 61440 NT_STATUS_OK
ReadX 13590 126976 4096 4096 NT_STATUS_OK
ReadX 13590 131072 61440 61440 NT_STATUS_OK
ReadX 13590 192512 4096 4096 NT_STATUS_OK
ReadX 13590 196608 61440 61440 NT_STATUS_OK
ReadX 13590 258048 4096 4096 NT_STATUS_OK
ReadX 13590 262144 61440 61440 NT_STATUS_OK
ReadX 13590 323584 4096 4096 NT_STATUS_OK
ReadX 13590 327680 61440 61440 NT_STATUS_OK
ReadX 13590 389120 4096 4096 NT_STATUS_OK
ReadX 13590 393216 61440 61440 NT_STATUS_OK
ReadX 13590 454656 4096 4096 NT_STATUS_OK
ReadX 13590 458752 61440 61440 NT_STATUS_OK
ReadX 13590 520192 4096 4096 NT_STATUS_OK
ReadX 13590 524288 61440 61440 NT_STATUS_OK
ReadX 13590 585728 4096 4096 NT_STATUS_OK
ReadX 13590 589824 61440 61440 NT_STATUS_OK
ReadX 13590 651264 4096 4096 NT_STATUS_OK
ReadX 13590 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13591 NT_STATUS_OK
ReadX 13591 0 61440 61440 NT_STATUS_OK
ReadX 13591 61440 4096 4096 NT_STATUS_OK
ReadX 13591 65536 61440 61440 NT_STATUS_OK
ReadX 13591 126976 4096 4096 NT_STATUS_OK
ReadX 13591 131072 61440 61440 NT_STATUS_OK
ReadX 13591 192512 4096 4096 NT_STATUS_OK
ReadX 13591 196608 61440 61440 NT_STATUS_OK
ReadX 13591 258048 4096 4096 NT_STATUS_OK
ReadX 13591 262144 61440 61440 NT_STATUS_OK
ReadX 13591 323584 4096 4096 NT_STATUS_OK
ReadX 13591 327680 61440 61440 NT_STATUS_OK
ReadX 13591 389120 4096 4096 NT_STATUS_OK
ReadX 13591 393216 61440 61440 NT_STATUS_OK
ReadX 13591 454656 4096 4096 NT_STATUS_OK
ReadX 13591 458752 61440 61440 NT_STATUS_OK
ReadX 13591 520192 4096 4096 NT_STATUS_OK
ReadX 13591 524288 61440 61440 NT_STATUS_OK
ReadX 13591 585728 4096 4096 NT_STATUS_OK
ReadX 13591 589824 61440 61440 NT_STATUS_OK
ReadX 13591 651264 4096 4096 NT_STATUS_OK
ReadX 13591 655360 61440 61440 NT_STATUS_OK
ReadX 13591 716800 4096 4096 NT_STATUS_OK
ReadX 13591 720896 61440 61440 NT_STATUS_OK
ReadX 13591 782336 4096 4096 NT_STATUS_OK
ReadX 13591 786432 61440 61440 NT_STATUS_OK
ReadX 13591 847872 4096 4096 NT_STATUS_OK
ReadX 13591 851968 61440 61440 NT_STATUS_OK
ReadX 13591 913408 4096 4096 NT_STATUS_OK
ReadX 13591 917504 61440 61440 NT_STATUS_OK
ReadX 13591 978944 4096 4096 NT_STATUS_OK
ReadX 13591 983040 61440 61440 NT_STATUS_OK
ReadX 13591 1044480 4096 4096 NT_STATUS_OK
ReadX 13591 1048576 61440 61440 NT_STATUS_OK
ReadX 13591 1110016 4096 4096 NT_STATUS_OK
ReadX 13591 1114112 61440 61440 NT_STATUS_OK
ReadX 13591 1175552 4096 4096 NT_STATUS_OK
ReadX 13591 1179648 61440 61440 NT_STATUS_OK
ReadX 13591 1241088 4096 4096 NT_STATUS_OK
ReadX 13591 1245184 61440 61440 NT_STATUS_OK
ReadX 13591 1306624 4096 4096 NT_STATUS_OK
ReadX 13591 1310720 61440 61440 NT_STATUS_OK
ReadX 13591 1372160 4096 4096 NT_STATUS_OK
ReadX 13591 1376256 61440 61440 NT_STATUS_OK
ReadX 13591 1437696 4096 4096 NT_STATUS_OK
ReadX 13591 1441792 61440 61440 NT_STATUS_OK
ReadX 13591 1503232 4096 4096 NT_STATUS_OK
ReadX 13591 1507328 61440 61440 NT_STATUS_OK
ReadX 13591 1568768 4096 4096 NT_STATUS_OK
ReadX 13591 1572864 61440 61440 NT_STATUS_OK
ReadX 13591 1634304 4096 4096 NT_STATUS_OK
ReadX 13591 1638400 61440 61440 NT_STATUS_OK
ReadX 13591 1699840 4096 4096 NT_STATUS_OK
ReadX 13591 1703936 61440 61440 NT_STATUS_OK
ReadX 13591 1765376 4096 4096 NT_STATUS_OK
ReadX 13591 1769472 61440 61440 NT_STATUS_OK
ReadX 13591 1830912 4096 4096 NT_STATUS_OK
ReadX 13591 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13592 NT_STATUS_OK
Close 13592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13589 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
ReadX 13596 4096 4096 4096 NT_STATUS_OK
ReadX 13596 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Close 13595 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13600 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13601 NT_STATUS_OK
Close 13601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13603 NT_STATUS_OK
ReadX 13603 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13604 NT_STATUS_OK
ReadX 13604 0 8192 8192 NT_STATUS_OK
ReadX 13604 8192 8192 8192 NT_STATUS_OK
ReadX 13604 16384 8192 8192 NT_STATUS_OK
ReadX 13604 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 10438 10438 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13610 NT_STATUS_OK
Close 13610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13613 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13615 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13617 NT_STATUS_OK
Close 13617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
ReadX 13618 4096 4096 4096 NT_STATUS_OK
ReadX 13618 8192 4096 4096 NT_STATUS_OK
ReadX 13618 12288 8192 8192 NT_STATUS_OK
ReadX 13618 20480 8192 8192 NT_STATUS_OK
ReadX 13618 28672 8192 8192 NT_STATUS_OK
ReadX 13618 36864 8192 8192 NT_STATUS_OK
ReadX 13618 45056 8192 8192 NT_STATUS_OK
ReadX 13618 53248 8192 8192 NT_STATUS_OK
ReadX 13618 61440 8192 8192 NT_STATUS_OK
ReadX 13618 69632 8192 8192 NT_STATUS_OK
ReadX 13618 77824 8192 8192 NT_STATUS_OK
ReadX 13618 86016 8192 8192 NT_STATUS_OK
ReadX 13618 94208 8192 8192 NT_STATUS_OK
ReadX 13618 102400 8192 8192 NT_STATUS_OK
ReadX 13618 110592 8192 8192 NT_STATUS_OK
ReadX 13618 118784 8192 8192 NT_STATUS_OK
ReadX 13618 126976 8192 8192 NT_STATUS_OK
ReadX 13618 135168 8192 8192 NT_STATUS_OK
ReadX 13618 143360 8192 8192 NT_STATUS_OK
ReadX 13618 151552 8192 8192 NT_STATUS_OK
ReadX 13618 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Close 13611 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13620 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13623 NT_STATUS_OK
WriteX 13623 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13623 258 NT_STATUS_OK
WriteX 13623 0 28489 28489 NT_STATUS_OK
Close 13623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13624 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13626 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 8192 8192 NT_STATUS_OK
ReadX 13630 8192 8192 8192 NT_STATUS_OK
ReadX 13630 16384 8192 8192 NT_STATUS_OK
ReadX 13630 24576 8192 8192 NT_STATUS_OK
ReadX 13630 32768 16384 16384 NT_STATUS_OK
ReadX 13630 49152 8192 8192 NT_STATUS_OK
ReadX 13630 57344 8192 8192 NT_STATUS_OK
ReadX 13630 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13632 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13635 NT_STATUS_OK
WriteX 13635 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13635 258 NT_STATUS_OK
WriteX 13635 0 29253 29253 NT_STATUS_OK
Close 13635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13642 NT_STATUS_OK
WriteX 13642 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13642 258 NT_STATUS_OK
WriteX 13642 0 30183 30183 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13645 NT_STATUS_OK
WriteX 13645 0 510 510 NT_STATUS_OK
WriteX 13645 510 512 512 NT_STATUS_OK
WriteX 13645 1022 510 510 NT_STATUS_OK
WriteX 13645 1532 510 510 NT_STATUS_OK
WriteX 13645 2042 168 168 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13646 NT_STATUS_OK
Close 13646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
WriteX 13648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13649 NT_STATUS_OK
ReadX 13649 61440 4096 4096 NT_STATUS_OK
ReadX 13649 126976 4096 4096 NT_STATUS_OK
WriteX 13649 0 65536 65536 NT_STATUS_OK
WriteX 13649 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 61440 4096 4096 NT_STATUS_OK
ReadX 13650 126976 4096 4096 NT_STATUS_OK
ReadX 13650 192512 4096 4096 NT_STATUS_OK
ReadX 13650 258048 4096 4096 NT_STATUS_OK
WriteX 13650 0 65536 65536 NT_STATUS_OK
WriteX 13650 65536 65536 65536 NT_STATUS_OK
WriteX 13650 131072 65536 65536 NT_STATUS_OK
WriteX 13650 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 61440 4096 4096 NT_STATUS_OK
ReadX 13651 126976 4096 4096 NT_STATUS_OK
ReadX 13651 192512 4096 4096 NT_STATUS_OK
ReadX 13651 258048 4096 4096 NT_STATUS_OK
ReadX 13651 323584 4096 4096 NT_STATUS_OK
ReadX 13651 389120 4096 4096 NT_STATUS_OK
ReadX 13651 454656 4096 4096 NT_STATUS_OK
ReadX 13651 520192 4096 4096 NT_STATUS_OK
WriteX 13651 0 65536 65536 NT_STATUS_OK
WriteX 13651 65536 65536 65536 NT_STATUS_OK
WriteX 13651 131072 65536 65536 NT_STATUS_OK
WriteX 13651 196608 65536 65536 NT_STATUS_OK
WriteX 13651 262144 65536 65536 NT_STATUS_OK
WriteX 13651 327680 65536 65536 NT_STATUS_OK
WriteX 13651 393216 65536 65536 NT_STATUS_OK
WriteX 13651 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13652 NT_STATUS_OK
Close 13652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13654 NT_STATUS_OK
Close 13654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13661 NT_STATUS_OK
Close 13661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13667 NT_STATUS_OK
Close 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13670 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13672 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13676 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13681 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13686 NT_STATUS_OK
Close 13686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13696 NT_STATUS_OK
Close 13696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13701 NT_STATUS_OK
Close 13701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13706 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13717 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13720 NT_STATUS_OK
WriteX 13720 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13720 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13720 0 65536 65536 NT_STATUS_OK
WriteX 13720 65536 65536 65536 NT_STATUS_OK
WriteX 13720 131072 65536 65536 NT_STATUS_OK
WriteX 13720 196608 65536 65536 NT_STATUS_OK
WriteX 13720 262144 26634 26634 NT_STATUS_OK
Close 13720 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13725 NT_STATUS_OK
Close 13725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 4096 4096 NT_STATUS_OK
Close 13727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
ReadX 13728 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13742 NT_STATUS_OK
Close 13742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13745 NT_STATUS_OK
Close 13745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13751 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13761 NT_STATUS_OK
Close 13761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13766 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13785 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13790 NT_STATUS_OK
Close 13790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13793 NT_STATUS_OK
Close 13793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13795 NT_STATUS_OK
Close 13795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13807 NT_STATUS_OK
ReadX 13807 0 4096 4096 NT_STATUS_OK
Close 13807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13808 NT_STATUS_OK
ReadX 13808 0 4096 4096 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13819 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
Close 13821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13822 NT_STATUS_OK
ReadX 13822 0 4096 4096 NT_STATUS_OK
Close 13822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13823 NT_STATUS_OK
ReadX 13823 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13852 0 4096 4096 NT_STATUS_OK
Close 13852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
ReadX 13854 4096 4096 4096 NT_STATUS_OK
ReadX 13854 8192 4096 4096 NT_STATUS_OK
ReadX 13854 12288 4096 4096 NT_STATUS_OK
ReadX 13854 16384 4096 4096 NT_STATUS_OK
ReadX 13854 20480 4096 4096 NT_STATUS_OK
ReadX 13854 24576 4096 4096 NT_STATUS_OK
ReadX 13854 28672 4096 4096 NT_STATUS_OK
ReadX 13854 32768 4096 4096 NT_STATUS_OK
ReadX 13854 36864 4096 4096 NT_STATUS_OK
ReadX 13854 40960 4096 4096 NT_STATUS_OK
ReadX 13854 45056 4096 4096 NT_STATUS_OK
ReadX 13854 49152 4096 4096 NT_STATUS_OK
ReadX 13854 53248 4096 4096 NT_STATUS_OK
ReadX 13854 57344 4096 4096 NT_STATUS_OK
ReadX 13854 61440 4096 4096 NT_STATUS_OK
ReadX 13854 65536 4096 4096 NT_STATUS_OK
ReadX 13854 69632 4096 4096 NT_STATUS_OK
ReadX 13854 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
WriteX 13854 0 4096 4096 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13855 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13856 NT_STATUS_OK
ReadX 13856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13857 NT_STATUS_OK
Close 13857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 65536 65536 NT_STATUS_OK
WriteX 13860 65536 19979 19979 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Flush 13861 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Flush 13861 NT_STATUS_OK
QUERY_FILE_INFORMATION 13861 1004 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Flush 13861 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Flush 13861 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Flush 13861 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Flush 13861 NT_STATUS_OK
Close 13861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13863 NT_STATUS_OK
ReadX 13863 0 4096 4096 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 0 4096 4096 NT_STATUS_OK
Close 13865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13866 1004 NT_STATUS_OK
WriteX 13866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13867 NT_STATUS_OK
Close 13867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13863 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Close 13856 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13872 NT_STATUS_OK
WriteX 13872 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13872 258 NT_STATUS_OK
WriteX 13872 0 65536 65536 NT_STATUS_OK
WriteX 13872 65536 17654 17654 NT_STATUS_OK
Close 13872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
QUERY_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13874 NT_STATUS_OK
SET_FILE_INFORMATION 13874 1004 NT_STATUS_OK
Close 13874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 4096 4096 NT_STATUS_OK
ReadX 13878 4096 4096 4096 NT_STATUS_OK
ReadX 13878 8192 4096 4096 NT_STATUS_OK
ReadX 13878 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13878 16384 4096 4096 NT_STATUS_OK
ReadX 13878 20480 4096 4096 NT_STATUS_OK
ReadX 13878 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
Close 13879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
Close 13880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13881 1004 NT_STATUS_OK
WriteX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13884 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13887 NT_STATUS_OK
WriteX 13887 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13887 258 NT_STATUS_OK
WriteX 13887 0 65536 65536 NT_STATUS_OK
WriteX 13887 65536 19490 19490 NT_STATUS_OK
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
QUERY_FILE_INFORMATION 13888 1004 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
SET_FILE_INFORMATION 13888 1004 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13889 NT_STATUS_OK
SET_FILE_INFORMATION 13889 1004 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13893 0 4096 4096 NT_STATUS_OK
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
ReadX 13895 4096 4096 4096 NT_STATUS_OK
ReadX 13895 8192 4096 4096 NT_STATUS_OK
ReadX 13895 12288 4096 4096 NT_STATUS_OK
ReadX 13895 16384 4096 4096 NT_STATUS_OK
ReadX 13895 20480 4096 4096 NT_STATUS_OK
ReadX 13895 24576 4096 4096 NT_STATUS_OK
ReadX 13895 28672 4096 4096 NT_STATUS_OK
ReadX 13895 32768 4096 4096 NT_STATUS_OK
ReadX 13895 36864 4096 4096 NT_STATUS_OK
ReadX 13895 40960 4096 4096 NT_STATUS_OK
ReadX 13895 45056 4096 4096 NT_STATUS_OK
ReadX 13895 49152 4096 4096 NT_STATUS_OK
ReadX 13895 53248 4096 4096 NT_STATUS_OK
ReadX 13895 57344 4096 4096 NT_STATUS_OK
ReadX 13895 61440 4096 4096 NT_STATUS_OK
ReadX 13895 65536 4096 4096 NT_STATUS_OK
ReadX 13895 69632 4096 4096 NT_STATUS_OK
ReadX 13895 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13895 1004 NT_STATUS_OK
WriteX 13895 0 4096 4096 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13896 NT_STATUS_OK
SET_FILE_INFORMATION 13896 1004 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13901 NT_STATUS_OK
WriteX 13901 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13901 258 NT_STATUS_OK
WriteX 13901 0 65536 65536 NT_STATUS_OK
WriteX 13901 65536 8866 8866 NT_STATUS_OK
Close 13901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 0 4096 4096 NT_STATUS_OK
WriteX 13902 0 4096 4096 NT_STATUS_OK
Flush 13902 NT_STATUS_OK
SET_FILE_INFORMATION 13902 1004 NT_STATUS_OK
WriteX 13902 0 4096 4096 NT_STATUS_OK
Flush 13902 NT_STATUS_OK
Close 13902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13906 1004 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13906 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13912 NT_STATUS_OK
WriteX 13912 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 258 NT_STATUS_OK
WriteX 13912 0 65536 65536 NT_STATUS_OK
WriteX 13912 65536 9298 9298 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 4096 4096 NT_STATUS_OK
WriteX 13913 0 4096 4096 NT_STATUS_OK
Flush 13913 NT_STATUS_OK
SET_FILE_INFORMATION 13913 1004 NT_STATUS_OK
WriteX 13913 0 4096 4096 NT_STATUS_OK
Flush 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13914 NT_STATUS_OK
SET_FILE_INFORMATION 13914 1004 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13915 NT_STATUS_OK
ReadX 13915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13916 NT_STATUS_OK
Close 13916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13919 0 4096 4096 NT_STATUS_OK
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13920 4096 4096 4096 NT_STATUS_OK
ReadX 13920 8192 4096 4096 NT_STATUS_OK
ReadX 13920 12288 4096 4096 NT_STATUS_OK
ReadX 13920 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13921 NT_STATUS_OK
ReadX 13921 0 4096 4096 NT_STATUS_OK
Close 13921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13922 NT_STATUS_OK
ReadX 13922 0 4096 4096 NT_STATUS_OK
Close 13922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13923 NT_STATUS_OK
ReadX 13923 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13923 1004 NT_STATUS_OK
WriteX 13923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13923 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13926 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13929 NT_STATUS_OK
WriteX 13929 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13929 258 NT_STATUS_OK
WriteX 13929 0 65536 65536 NT_STATUS_OK
WriteX 13929 65536 11540 11540 NT_STATUS_OK
Close 13929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13930 NT_STATUS_OK
ReadX 13930 0 4096 4096 NT_STATUS_OK
WriteX 13930 0 4096 4096 NT_STATUS_OK
Flush 13930 NT_STATUS_OK
SET_FILE_INFORMATION 13930 1004 NT_STATUS_OK
WriteX 13930 0 4096 4096 NT_STATUS_OK
Flush 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13931 NT_STATUS_OK
SET_FILE_INFORMATION 13931 1004 NT_STATUS_OK
Close 13931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 61440 4096 4096 NT_STATUS_OK
ReadX 13935 126976 4096 4096 NT_STATUS_OK
WriteX 13935 0 65536 65536 NT_STATUS_OK
WriteX 13935 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 61440 4096 4096 NT_STATUS_OK
ReadX 13936 126976 4096 4096 NT_STATUS_OK
ReadX 13936 192512 4096 4096 NT_STATUS_OK
ReadX 13936 258048 4096 4096 NT_STATUS_OK
WriteX 13936 0 65536 65536 NT_STATUS_OK
WriteX 13936 65536 65536 65536 NT_STATUS_OK
WriteX 13936 131072 65536 65536 NT_STATUS_OK
WriteX 13936 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 61440 4096 4096 NT_STATUS_OK
ReadX 13937 126976 4096 4096 NT_STATUS_OK
ReadX 13937 192512 4096 4096 NT_STATUS_OK
ReadX 13937 258048 4096 4096 NT_STATUS_OK
ReadX 13937 323584 4096 4096 NT_STATUS_OK
ReadX 13937 389120 4096 4096 NT_STATUS_OK
ReadX 13937 454656 4096 4096 NT_STATUS_OK
ReadX 13937 520192 4096 4096 NT_STATUS_OK
WriteX 13937 0 65536 65536 NT_STATUS_OK
WriteX 13937 65536 65536 65536 NT_STATUS_OK
WriteX 13937 131072 65536 65536 NT_STATUS_OK
WriteX 13937 196608 65536 65536 NT_STATUS_OK
WriteX 13937 262144 65536 65536 NT_STATUS_OK
WriteX 13937 327680 65536 65536 NT_STATUS_OK
WriteX 13937 393216 65536 65536 NT_STATUS_OK
WriteX 13937 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 4096 4096 NT_STATUS_OK
ReadX 13938 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13939 NT_STATUS_OK
WriteX 13939 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13939 258 NT_STATUS_OK
WriteX 13939 0 53 53 NT_STATUS_OK
Close 13939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13932 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13938 8192 4096 4096 NT_STATUS_OK
ReadX 13938 12288 4096 4096 NT_STATUS_OK
WriteX 13942 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13942 258 NT_STATUS_OK
ReadX 13938 16384 4096 4096 NT_STATUS_OK
ReadX 13938 20480 4096 4096 NT_STATUS_OK
WriteX 13942 0 15360 15360 NT_STATUS_OK
Close 13942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13946 4096 4096 4096 NT_STATUS_OK
ReadX 13946 8192 4096 4096 NT_STATUS_OK
ReadX 13946 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 0 4096 4096 NT_STATUS_OK
ReadX 13949 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 4096 4096 NT_STATUS_OK
ReadX 13950 4096 4096 4096 NT_STATUS_OK
ReadX 13950 8192 4096 4096 NT_STATUS_OK
Close 13949 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13951 NT_STATUS_OK
WriteX 13951 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13951 258 NT_STATUS_OK
WriteX 13951 0 15360 15360 NT_STATUS_OK
Close 13951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13952 NT_STATUS_OK
ReadX 13952 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13952 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13952 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13953 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13956 NT_STATUS_OK
SET_FILE_INFORMATION 13956 1004 NT_STATUS_OK
Close 13956 NT_STATUS_OK
WriteX 13952 0 4096 4096 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13957 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
ReadX 13959 4096 4096 4096 NT_STATUS_OK
ReadX 13959 8192 4096 4096 NT_STATUS_OK
ReadX 13959 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13959 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13959 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13961 NT_STATUS_OK
WriteX 13961 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13961 258 NT_STATUS_OK
WriteX 13961 0 53 53 NT_STATUS_OK
Close 13961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13962 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13960 4096 4096 4096 NT_STATUS_OK
ReadX 13960 8192 4096 4096 NT_STATUS_OK
ReadX 13960 12288 4096 4096 NT_STATUS_OK
WriteX 13964 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 12006 12006 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13965 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13965 1004 NT_STATUS_OK
WriteX 13965 0 4096 4096 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13966 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13968 NT_STATUS_OK
ReadX 13968 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13969 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13968 4096 4096 4096 NT_STATUS_OK
ReadX 13968 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13971 NT_STATUS_OK
WriteX 13971 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13971 258 NT_STATUS_OK
WriteX 13971 0 11991 11991 NT_STATUS_OK
Close 13971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13972 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13972 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13973 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13976 NT_STATUS_OK
SET_FILE_INFORMATION 13976 1004 NT_STATUS_OK
Close 13976 NT_STATUS_OK
WriteX 13972 0 4096 4096 NT_STATUS_OK
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13980 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13979 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13979 1004 NT_STATUS_OK
ReadX 13979 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13979 1004 NT_STATUS_OK
WriteX 13979 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13979 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13979 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13979 1004 NT_STATUS_OK
Close 13955 NT_STATUS_OK
WriteX 13959 0 19054 19054 NT_STATUS_OK
WriteX 13979 0 12288 12288 NT_STATUS_OK
Close 13975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13982 NT_STATUS_OK
Close 13982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 61440 61440 NT_STATUS_OK
ReadX 13986 61440 4096 4096 NT_STATUS_OK
ReadX 13986 65536 61440 61440 NT_STATUS_OK
ReadX 13986 126976 4096 4096 NT_STATUS_OK
ReadX 13986 131072 61440 61440 NT_STATUS_OK
ReadX 13986 192512 4096 4096 NT_STATUS_OK
ReadX 13986 196608 61440 61440 NT_STATUS_OK
ReadX 13986 258048 4096 4096 NT_STATUS_OK
ReadX 13986 262144 61440 61440 NT_STATUS_OK
ReadX 13986 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 61440 61440 NT_STATUS_OK
ReadX 13987 61440 4096 4096 NT_STATUS_OK
ReadX 13987 65536 61440 61440 NT_STATUS_OK
ReadX 13987 126976 4096 4096 NT_STATUS_OK
ReadX 13987 131072 61440 61440 NT_STATUS_OK
ReadX 13987 192512 4096 4096 NT_STATUS_OK
ReadX 13987 196608 61440 61440 NT_STATUS_OK
ReadX 13987 258048 4096 4096 NT_STATUS_OK
ReadX 13987 262144 61440 61440 NT_STATUS_OK
ReadX 13987 323584 4096 4096 NT_STATUS_OK
ReadX 13987 327680 61440 61440 NT_STATUS_OK
ReadX 13987 389120 4096 4096 NT_STATUS_OK
ReadX 13987 393216 61440 61440 NT_STATUS_OK
ReadX 13987 454656 4096 4096 NT_STATUS_OK
ReadX 13987 458752 61440 61440 NT_STATUS_OK
ReadX 13987 520192 4096 4096 NT_STATUS_OK
ReadX 13987 524288 61440 61440 NT_STATUS_OK
ReadX 13987 585728 4096 4096 NT_STATUS_OK
ReadX 13987 589824 61440 61440 NT_STATUS_OK
ReadX 13987 651264 4096 4096 NT_STATUS_OK
ReadX 13987 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 61440 61440 NT_STATUS_OK
ReadX 13988 61440 4096 4096 NT_STATUS_OK
ReadX 13988 65536 61440 61440 NT_STATUS_OK
ReadX 13988 126976 4096 4096 NT_STATUS_OK
ReadX 13988 131072 61440 61440 NT_STATUS_OK
ReadX 13988 192512 4096 4096 NT_STATUS_OK
ReadX 13988 196608 61440 61440 NT_STATUS_OK
ReadX 13988 258048 4096 4096 NT_STATUS_OK
ReadX 13988 262144 61440 61440 NT_STATUS_OK
ReadX 13988 323584 4096 4096 NT_STATUS_OK
ReadX 13988 327680 61440 61440 NT_STATUS_OK
ReadX 13988 389120 4096 4096 NT_STATUS_OK
ReadX 13988 393216 61440 61440 NT_STATUS_OK
ReadX 13988 454656 4096 4096 NT_STATUS_OK
ReadX 13988 458752 61440 61440 NT_STATUS_OK
ReadX 13988 520192 4096 4096 NT_STATUS_OK
ReadX 13988 524288 61440 61440 NT_STATUS_OK
ReadX 13988 585728 4096 4096 NT_STATUS_OK
ReadX 13988 589824 61440 61440 NT_STATUS_OK
ReadX 13988 651264 4096 4096 NT_STATUS_OK
ReadX 13988 655360 61440 61440 NT_STATUS_OK
ReadX 13988 716800 4096 4096 NT_STATUS_OK
ReadX 13988 720896 61440 61440 NT_STATUS_OK
ReadX 13988 782336 4096 4096 NT_STATUS_OK
ReadX 13988 786432 61440 61440 NT_STATUS_OK
ReadX 13988 847872 4096 4096 NT_STATUS_OK
ReadX 13988 851968 61440 61440 NT_STATUS_OK
ReadX 13988 913408 4096 4096 NT_STATUS_OK
ReadX 13988 917504 61440 61440 NT_STATUS_OK
ReadX 13988 978944 4096 4096 NT_STATUS_OK
ReadX 13988 983040 61440 61440 NT_STATUS_OK
ReadX 13988 1044480 4096 4096 NT_STATUS_OK
ReadX 13988 1048576 61440 61440 NT_STATUS_OK
ReadX 13988 1110016 4096 4096 NT_STATUS_OK
ReadX 13988 1114112 61440 61440 NT_STATUS_OK
ReadX 13988 1175552 4096 4096 NT_STATUS_OK
ReadX 13988 1179648 61440 61440 NT_STATUS_OK
ReadX 13988 1241088 4096 4096 NT_STATUS_OK
ReadX 13988 1245184 61440 61440 NT_STATUS_OK
ReadX 13988 1306624 4096 4096 NT_STATUS_OK
ReadX 13988 1310720 61440 61440 NT_STATUS_OK
ReadX 13988 1372160 4096 4096 NT_STATUS_OK
ReadX 13988 1376256 61440 61440 NT_STATUS_OK
ReadX 13988 1437696 4096 4096 NT_STATUS_OK
ReadX 13988 1441792 61440 61440 NT_STATUS_OK
ReadX 13988 1503232 4096 4096 NT_STATUS_OK
ReadX 13988 1507328 61440 61440 NT_STATUS_OK
ReadX 13988 1568768 4096 4096 NT_STATUS_OK
ReadX 13988 1572864 61440 61440 NT_STATUS_OK
ReadX 13988 1634304 4096 4096 NT_STATUS_OK
ReadX 13988 1638400 61440 61440 NT_STATUS_OK
ReadX 13988 1699840 4096 4096 NT_STATUS_OK
ReadX 13988 1703936 61440 61440 NT_STATUS_OK
ReadX 13988 1765376 4096 4096 NT_STATUS_OK
ReadX 13988 1769472 61440 61440 NT_STATUS_OK
ReadX 13988 1830912 4096 4096 NT_STATUS_OK
ReadX 13988 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13995 NT_STATUS_OK
QUERY_FILE_INFORMATION 13995 1004 NT_STATUS_OK
WriteX 13995 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13995 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13996 NT_STATUS_OK
Close 13996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13997 NT_STATUS_OK
WriteX 13997 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13997 258 NT_STATUS_OK
WriteX 13997 0 491 491 NT_STATUS_OK
Close 13997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13995 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 14000 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14001 NT_STATUS_OK
WriteX 14001 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14001 258 NT_STATUS_OK
WriteX 14001 0 543 543 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 13988 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14015 NT_STATUS_OK
QUERY_FILE_INFORMATION 14015 1004 NT_STATUS_OK
WriteX 14015 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14015 258 NT_STATUS_OK
WriteX 14015 0 2048 2048 NT_STATUS_OK
Close 14015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14016 0 4096 4096 NT_STATUS_OK
Flush 14016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14016 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 14020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14021 NT_STATUS_OK
WriteX 14021 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14021 258 NT_STATUS_OK
WriteX 14021 0 2048 2048 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 14026 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14027 NT_STATUS_OK
WriteX 14027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 2048 2048 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 2048 2048 NT_STATUS_OK
ReadX 14006 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 14010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 14022 0 4096 4096 NT_STATUS_OK
WriteX 14006 0 8192 8192 NT_STATUS_OK
WriteX 14007 0 4096 4096 NT_STATUS_OK
WriteX 14008 0 4096 4096 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14032 NT_STATUS_OK
QUERY_FILE_INFORMATION 14032 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14034 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14036 NT_STATUS_OK
ReadX 14036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14052 NT_STATUS_OK
QUERY_FILE_INFORMATION 14052 1004 NT_STATUS_OK
WriteX 14052 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14052 258 NT_STATUS_OK
WriteX 14052 0 2048 2048 NT_STATUS_OK
Close 14052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14060 NT_STATUS_OK
QUERY_FILE_INFORMATION 14060 1004 NT_STATUS_OK
WriteX 14060 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14060 258 NT_STATUS_OK
WriteX 14060 0 2048 2048 NT_STATUS_OK
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14053 0 4096 4096 NT_STATUS_OK
Flush 14053 NT_STATUS_OK
WriteX 14061 0 4096 4096 NT_STATUS_OK
Flush 14061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14053 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14061 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14055 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14063 NT_STATUS_OK
WriteX 14063 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 258 NT_STATUS_OK
WriteX 14063 0 4096 4096 NT_STATUS_OK
Close 14063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14065 NT_STATUS_OK
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14066 NT_STATUS_OK
WriteX 14066 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
WriteX 14066 0 4096 4096 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 14067 0 4096 4096 NT_STATUS_OK
Close 14064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Close 14036 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 14067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 14073 NT_STATUS_OK
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14074 NT_STATUS_OK
WriteX 14074 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14074 258 NT_STATUS_OK
WriteX 14074 0 2048 2048 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14088 NT_STATUS_OK
ReadX 14088 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14089 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14080 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14079 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14091 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14095 NT_STATUS_OK
ReadX 14095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10077 NT_STATUS_OK
ReadX 10077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10078 NT_STATUS_OK
ReadX 10078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10079 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10080 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10084 NT_STATUS_OK
ReadX 10084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10085 NT_STATUS_OK
ReadX 10085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10090 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 1004 NT_STATUS_OK
WriteX 10090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 258 NT_STATUS_OK
WriteX 10090 0 2048 2048 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10095 NT_STATUS_OK
ReadX 10095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10097 NT_STATUS_OK
ReadX 10097 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10101 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10102 NT_STATUS_OK
QUERY_FILE_INFORMATION 10102 1004 NT_STATUS_OK
WriteX 10102 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10102 258 NT_STATUS_OK
WriteX 10102 0 2048 2048 NT_STATUS_OK
Close 10102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10103 NT_STATUS_OK
ReadX 10103 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10105 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10110 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 1004 NT_STATUS_OK
WriteX 10110 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 258 NT_STATUS_OK
WriteX 10110 0 2048 2048 NT_STATUS_OK
Close 10110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10091 0 4096 4096 NT_STATUS_OK
Flush 10091 NT_STATUS_OK
WriteX 10103 0 4096 4096 NT_STATUS_OK
Flush 10103 NT_STATUS_OK
WriteX 10111 0 4096 4096 NT_STATUS_OK
Flush 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10103 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10111 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10093 4096 16384 16384 NT_STATUS_OK
ReadX 14094 4096 16384 16384 NT_STATUS_OK
ReadX 10105 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 2048 2048 NT_STATUS_OK
WriteX 10113 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10114 NT_STATUS_OK
QUERY_FILE_INFORMATION 10114 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10097 NT_STATUS_OK
Close 10085 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10084 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10079 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10080 NT_STATUS_OK
Close 10081 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 14095 NT_STATUS_OK
Close 10075 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10116 NT_STATUS_OK
QUERY_FILE_INFORMATION 10116 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10118 NT_STATUS_OK
QUERY_FILE_INFORMATION 10118 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10122 NT_STATUS_OK
ReadX 10122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10124 NT_STATUS_OK
ReadX 10124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10125 NT_STATUS_OK
ReadX 10125 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10121 4096 16384 16384 NT_STATUS_OK
WriteX 10121 0 4096 4096 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
WriteX 10123 0 4096 4096 NT_STATUS_OK
WriteX 10124 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10131 NT_STATUS_OK
ReadX 10131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10132 NT_STATUS_OK
ReadX 10132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10133 NT_STATUS_OK
ReadX 10133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10135 NT_STATUS_OK
ReadX 10135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10136 NT_STATUS_OK
ReadX 10136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10140 NT_STATUS_OK
ReadX 10140 0 8192 8192 NT_STATUS_OK
ReadX 10127 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10141 0 4096 4096 NT_STATUS_OK
ReadX 10141 4096 4096 4096 NT_STATUS_OK
ReadX 10141 8192 4096 4096 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
WriteX 10128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10142 0 4096 4096 NT_STATUS_OK
ReadX 10142 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10121 0 4096 4096 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
WriteX 10123 0 4096 4096 NT_STATUS_OK
WriteX 10124 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10147 NT_STATUS_OK
QUERY_FILE_INFORMATION 10147 1004 NT_STATUS_OK
WriteX 10147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10147 258 NT_STATUS_OK
WriteX 10147 0 2048 2048 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10148 NT_STATUS_OK
ReadX 10148 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10150 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
ReadX 10150 4096 4096 4096 NT_STATUS_OK
WriteX 10150 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10152 NT_STATUS_OK
ReadX 10152 0 4096 4096 NT_STATUS_OK
ReadX 10152 4096 4096 4096 NT_STATUS_OK
WriteX 10152 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10153 NT_STATUS_OK
QUERY_FILE_INFORMATION 10153 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10140 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10123 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Close 10133 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10134 NT_STATUS_OK
Close 10135 NT_STATUS_OK
Close 10136 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Close 10127 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10131 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Close 10141 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10155 0 4096 4096 NT_STATUS_OK
ReadX 10155 4096 4096 4096 NT_STATUS_OK
ReadX 10155 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
ReadX 10156 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10173 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 1004 NT_STATUS_OK
WriteX 10173 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 258 NT_STATUS_OK
WriteX 10173 0 2048 2048 NT_STATUS_OK
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10174 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10178 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10179 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1004 NT_STATUS_OK
WriteX 10179 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 258 NT_STATUS_OK
WriteX 10179 0 2048 2048 NT_STATUS_OK
Close 10179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10180 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10163 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10181 NT_STATUS_OK
QUERY_FILE_INFORMATION 10181 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10167 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10183 NT_STATUS_OK
QUERY_FILE_INFORMATION 10183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 61440 4096 4096 NT_STATUS_OK
ReadX 10185 126976 4096 4096 NT_STATUS_OK
WriteX 10185 0 65536 65536 NT_STATUS_OK
WriteX 10185 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 61440 4096 4096 NT_STATUS_OK
ReadX 10186 126976 4096 4096 NT_STATUS_OK
ReadX 10186 192512 4096 4096 NT_STATUS_OK
ReadX 10186 258048 4096 4096 NT_STATUS_OK
WriteX 10186 0 65536 65536 NT_STATUS_OK
WriteX 10186 65536 65536 65536 NT_STATUS_OK
WriteX 10186 131072 65536 65536 NT_STATUS_OK
WriteX 10186 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 61440 4096 4096 NT_STATUS_OK
ReadX 10187 126976 4096 4096 NT_STATUS_OK
ReadX 10187 192512 4096 4096 NT_STATUS_OK
ReadX 10187 258048 4096 4096 NT_STATUS_OK
ReadX 10187 323584 4096 4096 NT_STATUS_OK
ReadX 10187 389120 4096 4096 NT_STATUS_OK
ReadX 10187 454656 4096 4096 NT_STATUS_OK
ReadX 10187 520192 4096 4096 NT_STATUS_OK
WriteX 10187 0 65536 65536 NT_STATUS_OK
WriteX 10187 65536 65536 65536 NT_STATUS_OK
WriteX 10187 131072 65536 65536 NT_STATUS_OK
WriteX 10187 196608 65536 65536 NT_STATUS_OK
WriteX 10187 262144 65536 65536 NT_STATUS_OK
WriteX 10187 327680 65536 65536 NT_STATUS_OK
WriteX 10187 393216 65536 65536 NT_STATUS_OK
WriteX 10187 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10188 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10188 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10188 8192 4096 4096 NT_STATUS_OK
ReadX 10188 12288 4096 4096 NT_STATUS_OK
ReadX 10188 16384 4096 4096 NT_STATUS_OK
ReadX 10188 20480 4096 4096 NT_STATUS_OK
ReadX 10188 24576 4096 4096 NT_STATUS_OK
ReadX 10188 28672 4096 4096 NT_STATUS_OK
ReadX 10188 32768 4096 4096 NT_STATUS_OK
ReadX 10188 36864 4096 4096 NT_STATUS_OK
ReadX 10188 40960 4096 4096 NT_STATUS_OK
ReadX 10188 45056 4096 4096 NT_STATUS_OK
ReadX 10188 49152 4096 4096 NT_STATUS_OK
ReadX 10188 53248 4096 4096 NT_STATUS_OK
ReadX 10188 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10188 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10191 NT_STATUS_OK
WriteX 10191 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10191 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10191 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
WriteX 10191 0 57088 57088 NT_STATUS_OK
WriteX 10191 0 4096 4096 NT_STATUS_OK
Flush 10191 NT_STATUS_OK
Close 10188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10192 NT_STATUS_OK
SET_FILE_INFORMATION 10192 1004 NT_STATUS_OK
Close 10192 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
WriteX 10191 0 4096 4096 NT_STATUS_OK
Close 10191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10195 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10196 NT_STATUS_OK
WriteX 10196 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10196 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10196 1004 NT_STATUS_OK
WriteX 10196 0 51456 51456 NT_STATUS_OK
WriteX 10196 0 4096 4096 NT_STATUS_OK
Flush 10196 NT_STATUS_OK
SET_FILE_INFORMATION 10196 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10196 1004 NT_STATUS_OK
WriteX 10196 0 4096 4096 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10198 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10200 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10202 NT_STATUS_OK
Close 10202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10205 NT_STATUS_OK
WriteX 10205 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
WriteX 10205 0 53077 53077 NT_STATUS_OK
Close 10205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10206 NT_STATUS_OK
WriteX 10206 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10206 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10206 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10206 1004 NT_STATUS_OK
WriteX 10206 0 65536 65536 NT_STATUS_OK
WriteX 10206 65536 1856 1856 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Flush 10206 NT_STATUS_OK
SET_FILE_INFORMATION 10206 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10206 1004 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10215 NT_STATUS_OK
WriteX 10215 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10215 258 NT_STATUS_OK
WriteX 10215 0 7983 7983 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10217 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10220 NT_STATUS_OK
WriteX 10220 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10220 258 NT_STATUS_OK
WriteX 10220 0 65536 65536 NT_STATUS_OK
WriteX 10220 65536 65536 65536 NT_STATUS_OK
WriteX 10220 131072 65536 65536 NT_STATUS_OK
WriteX 10220 196608 65536 65536 NT_STATUS_OK
WriteX 10220 262144 65536 65536 NT_STATUS_OK
WriteX 10220 327680 65536 65536 NT_STATUS_OK
WriteX 10220 393216 65536 65536 NT_STATUS_OK
WriteX 10220 458752 46731 46731 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10221 NT_STATUS_OK
WriteX 10221 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10221 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10210 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10221 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10221 1004 NT_STATUS_OK
WriteX 10221 0 65536 65536 NT_STATUS_OK
WriteX 10221 65536 22848 22848 NT_STATUS_OK
WriteX 10221 0 4096 4096 NT_STATUS_OK
Flush 10221 NT_STATUS_OK
SET_FILE_INFORMATION 10221 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10221 1004 NT_STATUS_OK
WriteX 10221 0 4096 4096 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Close 10210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10223 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10225 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10226 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10226 1004 NT_STATUS_OK
ReadX 10226 8192 4096 4096 NT_STATUS_OK
ReadX 10226 12288 4096 4096 NT_STATUS_OK
ReadX 10226 16384 4096 4096 NT_STATUS_OK
ReadX 10226 20480 4096 4096 NT_STATUS_OK
ReadX 10226 24576 4096 4096 NT_STATUS_OK
ReadX 10226 28672 4096 4096 NT_STATUS_OK
ReadX 10226 32768 4096 4096 NT_STATUS_OK
ReadX 10226 36864 4096 4096 NT_STATUS_OK
ReadX 10226 40960 4096 4096 NT_STATUS_OK
ReadX 10226 45056 4096 4096 NT_STATUS_OK
ReadX 10226 49152 4096 4096 NT_STATUS_OK
ReadX 10226 53248 4096 4096 NT_STATUS_OK
ReadX 10226 57344 4096 4096 NT_STATUS_OK
ReadX 10226 61440 4096 4096 NT_STATUS_OK
ReadX 10226 65536 4096 4096 NT_STATUS_OK
ReadX 10226 69632 4096 4096 NT_STATUS_OK
ReadX 10226 73728 4096 4096 NT_STATUS_OK
ReadX 10226 77824 4096 4096 NT_STATUS_OK
ReadX 10226 81920 4096 4096 NT_STATUS_OK
ReadX 10226 86016 4096 4096 NT_STATUS_OK
ReadX 10226 90112 4096 4096 NT_STATUS_OK
ReadX 10226 94208 4096 4096 NT_STATUS_OK
ReadX 10226 98304 4096 4096 NT_STATUS_OK
ReadX 10226 102400 4096 4096 NT_STATUS_OK
ReadX 10226 106496 4096 4096 NT_STATUS_OK
ReadX 10226 110592 4096 4096 NT_STATUS_OK
ReadX 10226 114688 4096 4096 NT_STATUS_OK
ReadX 10226 118784 4096 4096 NT_STATUS_OK
ReadX 10226 122880 4096 4096 NT_STATUS_OK
ReadX 10226 126976 4096 4096 NT_STATUS_OK
ReadX 10226 131072 4096 4096 NT_STATUS_OK
ReadX 10226 135168 4096 4096 NT_STATUS_OK
ReadX 10226 139264 4096 4096 NT_STATUS_OK
ReadX 10226 143360 4096 4096 NT_STATUS_OK
ReadX 10226 147456 4096 4096 NT_STATUS_OK
ReadX 10226 151552 4096 4096 NT_STATUS_OK
ReadX 10226 155648 4096 4096 NT_STATUS_OK
ReadX 10226 159744 4096 4096 NT_STATUS_OK
ReadX 10226 163840 4096 4096 NT_STATUS_OK
ReadX 10226 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10226 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10229 NT_STATUS_OK
WriteX 10229 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10229 258 NT_STATUS_OK
Close 10226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10230 NT_STATUS_OK
SET_FILE_INFORMATION 10230 1004 NT_STATUS_OK
Close 10230 NT_STATUS_OK
WriteX 10229 0 42388 42388 NT_STATUS_OK
Close 10229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10231 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
ReadX 10233 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10234 NT_STATUS_OK
WriteX 10234 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10234 258 NT_STATUS_OK
SET_FILE_INFORMATION 10234 1004 NT_STATUS_OK
WriteX 10234 0 42652 42652 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10236 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
ReadX 10238 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10243 NT_STATUS_OK
WriteX 10243 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10243 258 NT_STATUS_OK
WriteX 10243 0 65536 65536 NT_STATUS_OK
WriteX 10243 65536 49 49 NT_STATUS_OK
Close 10243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 61440 61440 NT_STATUS_OK
ReadX 10244 61440 4096 4096 NT_STATUS_OK
ReadX 10244 65536 61440 61440 NT_STATUS_OK
ReadX 10244 126976 4096 4096 NT_STATUS_OK
ReadX 10244 131072 61440 61440 NT_STATUS_OK
ReadX 10244 192512 4096 4096 NT_STATUS_OK
ReadX 10244 196608 61440 61440 NT_STATUS_OK
ReadX 10244 258048 4096 4096 NT_STATUS_OK
ReadX 10244 262144 61440 61440 NT_STATUS_OK
ReadX 10244 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 61440 61440 NT_STATUS_OK
ReadX 10245 61440 4096 4096 NT_STATUS_OK
ReadX 10245 65536 61440 61440 NT_STATUS_OK
ReadX 10245 126976 4096 4096 NT_STATUS_OK
ReadX 10245 131072 61440 61440 NT_STATUS_OK
ReadX 10245 192512 4096 4096 NT_STATUS_OK
ReadX 10245 196608 61440 61440 NT_STATUS_OK
ReadX 10245 258048 4096 4096 NT_STATUS_OK
ReadX 10245 262144 61440 61440 NT_STATUS_OK
ReadX 10245 323584 4096 4096 NT_STATUS_OK
ReadX 10245 327680 61440 61440 NT_STATUS_OK
ReadX 10245 389120 4096 4096 NT_STATUS_OK
ReadX 10245 393216 61440 61440 NT_STATUS_OK
ReadX 10245 454656 4096 4096 NT_STATUS_OK
ReadX 10245 458752 61440 61440 NT_STATUS_OK
ReadX 10245 520192 4096 4096 NT_STATUS_OK
ReadX 10245 524288 61440 61440 NT_STATUS_OK
ReadX 10245 585728 4096 4096 NT_STATUS_OK
ReadX 10245 589824 61440 61440 NT_STATUS_OK
ReadX 10245 651264 4096 4096 NT_STATUS_OK
ReadX 10245 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 61440 61440 NT_STATUS_OK
ReadX 10246 61440 4096 4096 NT_STATUS_OK
ReadX 10246 65536 61440 61440 NT_STATUS_OK
ReadX 10246 126976 4096 4096 NT_STATUS_OK
ReadX 10246 131072 61440 61440 NT_STATUS_OK
ReadX 10246 192512 4096 4096 NT_STATUS_OK
ReadX 10246 196608 61440 61440 NT_STATUS_OK
ReadX 10246 258048 4096 4096 NT_STATUS_OK
ReadX 10246 262144 61440 61440 NT_STATUS_OK
ReadX 10246 323584 4096 4096 NT_STATUS_OK
ReadX 10246 327680 61440 61440 NT_STATUS_OK
ReadX 10246 389120 4096 4096 NT_STATUS_OK
ReadX 10246 393216 61440 61440 NT_STATUS_OK
ReadX 10246 454656 4096 4096 NT_STATUS_OK
ReadX 10246 458752 61440 61440 NT_STATUS_OK
ReadX 10246 520192 4096 4096 NT_STATUS_OK
ReadX 10246 524288 61440 61440 NT_STATUS_OK
ReadX 10246 585728 4096 4096 NT_STATUS_OK
ReadX 10246 589824 61440 61440 NT_STATUS_OK
ReadX 10246 651264 4096 4096 NT_STATUS_OK
ReadX 10246 655360 61440 61440 NT_STATUS_OK
ReadX 10246 716800 4096 4096 NT_STATUS_OK
ReadX 10246 720896 61440 61440 NT_STATUS_OK
ReadX 10246 782336 4096 4096 NT_STATUS_OK
ReadX 10246 786432 61440 61440 NT_STATUS_OK
ReadX 10246 847872 4096 4096 NT_STATUS_OK
ReadX 10246 851968 61440 61440 NT_STATUS_OK
ReadX 10246 913408 4096 4096 NT_STATUS_OK
ReadX 10246 917504 61440 61440 NT_STATUS_OK
ReadX 10246 978944 4096 4096 NT_STATUS_OK
ReadX 10246 983040 61440 61440 NT_STATUS_OK
ReadX 10246 1044480 4096 4096 NT_STATUS_OK
ReadX 10246 1048576 61440 61440 NT_STATUS_OK
ReadX 10246 1110016 4096 4096 NT_STATUS_OK
ReadX 10246 1114112 61440 61440 NT_STATUS_OK
ReadX 10246 1175552 4096 4096 NT_STATUS_OK
ReadX 10246 1179648 61440 61440 NT_STATUS_OK
ReadX 10246 1241088 4096 4096 NT_STATUS_OK
ReadX 10246 1245184 61440 61440 NT_STATUS_OK
ReadX 10246 1306624 4096 4096 NT_STATUS_OK
ReadX 10246 1310720 61440 61440 NT_STATUS_OK
ReadX 10246 1372160 4096 4096 NT_STATUS_OK
ReadX 10246 1376256 61440 61440 NT_STATUS_OK
ReadX 10246 1437696 4096 4096 NT_STATUS_OK
ReadX 10246 1441792 61440 61440 NT_STATUS_OK
ReadX 10246 1503232 4096 4096 NT_STATUS_OK
ReadX 10246 1507328 61440 61440 NT_STATUS_OK
ReadX 10246 1568768 4096 4096 NT_STATUS_OK
ReadX 10246 1572864 61440 61440 NT_STATUS_OK
ReadX 10246 1634304 4096 4096 NT_STATUS_OK
ReadX 10246 1638400 61440 61440 NT_STATUS_OK
ReadX 10246 1699840 4096 4096 NT_STATUS_OK
ReadX 10246 1703936 61440 61440 NT_STATUS_OK
ReadX 10246 1765376 4096 4096 NT_STATUS_OK
ReadX 10246 1769472 61440 61440 NT_STATUS_OK
ReadX 10246 1830912 4096 4096 NT_STATUS_OK
ReadX 10246 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10248 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 1005 NT_STATUS_OK
ReadX 10248 2156 24 24 NT_STATUS_OK
ReadX 10248 2139 276 276 NT_STATUS_OK
ReadX 10248 2136 14 14 NT_STATUS_OK
ReadX 10248 2136 7 7 NT_STATUS_OK
ReadX 10248 2138 12 12 NT_STATUS_OK
ReadX 10248 2137 8 8 NT_STATUS_OK
ReadX 10248 2135 15 15 NT_STATUS_OK
ReadX 10248 0 16 16 NT_STATUS_OK
ReadX 10248 16 2048 2048 NT_STATUS_OK
ReadX 10248 2064 2048 2048 NT_STATUS_OK
ReadX 10248 257 2048 2048 NT_STATUS_OK
ReadX 10248 385 2048 2048 NT_STATUS_OK
ReadX 10248 513 2048 2048 NT_STATUS_OK
ReadX 10248 641 2048 2048 NT_STATUS_OK
ReadX 10248 769 2048 2048 NT_STATUS_OK
ReadX 10248 897 2048 2048 NT_STATUS_OK
ReadX 10248 1025 2048 2048 NT_STATUS_OK
ReadX 10248 1153 2048 2048 NT_STATUS_OK
ReadX 10248 1281 2048 2048 NT_STATUS_OK
ReadX 10248 1409 2048 2048 NT_STATUS_OK
ReadX 10248 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10250 NT_STATUS_OK
Close 10250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10253 NT_STATUS_OK
WriteX 10253 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10253 258 NT_STATUS_OK
WriteX 10253 0 10575 10575 NT_STATUS_OK
Flush 10253 NT_STATUS_OK
Close 10253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10254 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
Close 10248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10258 NT_STATUS_OK
LockX 10258 2147483538 1 NT_STATUS_OK
UnlockX 10258 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10258 1005 NT_STATUS_OK
ReadX 10258 0 512 512 NT_STATUS_OK
ReadX 10258 512 512 512 NT_STATUS_OK
ReadX 10258 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10258 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10258 1004 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10259 NT_STATUS_OK
QUERY_FILE_INFORMATION 10259 1005 NT_STATUS_OK
ReadX 10259 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10260 NT_STATUS_OK
LockX 10260 2147483538 1 NT_STATUS_OK
UnlockX 10260 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10260 1005 NT_STATUS_OK
ReadX 10260 0 512 512 NT_STATUS_OK
ReadX 10260 512 512 512 NT_STATUS_OK
ReadX 10260 1024 512 512 NT_STATUS_OK
ReadX 10260 288 20 20 NT_STATUS_OK
ReadX 10260 308 2084 2084 NT_STATUS_OK
ReadX 10260 388 2084 2084 NT_STATUS_OK
ReadX 10260 388 2084 2084 NT_STATUS_OK
ReadX 10247 2157 1386 1386 NT_STATUS_OK
ReadX 10260 2472 399 399 NT_STATUS_OK
ReadX 10260 3072 1536 1536 NT_STATUS_OK
ReadX 10260 544 149 149 NT_STATUS_OK
ReadX 10260 693 485 485 NT_STATUS_OK
Close 10260 NT_STATUS_OK
ReadX 10247 2157 4096 4096 NT_STATUS_OK
ReadX 10247 6253 4096 4096 NT_STATUS_OK
ReadX 10247 10349 4096 4096 NT_STATUS_OK
ReadX 10247 14445 4096 4096 NT_STATUS_OK
ReadX 10247 18541 4096 4096 NT_STATUS_OK
ReadX 10247 22637 256 256 NT_STATUS_OK
ReadX 10247 22893 4096 4096 NT_STATUS_OK
ReadX 10247 26989 4096 4096 NT_STATUS_OK
ReadX 10247 31085 4096 4096 NT_STATUS_OK
ReadX 10247 35181 4096 4096 NT_STATUS_OK
ReadX 10247 39277 4096 4096 NT_STATUS_OK
ReadX 10247 43373 4096 4096 NT_STATUS_OK
ReadX 10247 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10247 2157 1024 1024 NT_STATUS_OK
ReadX 10247 1667 4688 4688 NT_STATUS_OK
ReadX 10247 6355 3516 3516 NT_STATUS_OK
ReadX 10247 9871 16384 16384 NT_STATUS_OK
ReadX 10247 26255 3771 3771 NT_STATUS_OK
ReadX 10247 30026 2048 2048 NT_STATUS_OK
ReadX 10247 32074 1024 1024 NT_STATUS_OK
ReadX 10247 33098 6652 6652 NT_STATUS_OK
ReadX 10247 39750 16384 16384 NT_STATUS_OK
ReadX 10247 56134 10496 10496 NT_STATUS_OK
ReadX 10247 66630 1784 1784 NT_STATUS_OK
ReadX 10247 68414 90 90 NT_STATUS_OK
ReadX 10247 68504 273 273 NT_STATUS_OK
ReadX 10247 68777 1600 1600 NT_STATUS_OK
ReadX 10247 70377 640 640 NT_STATUS_OK
ReadX 10247 71017 1280 1280 NT_STATUS_OK
ReadX 10247 72297 8464 8464 NT_STATUS_OK
ReadX 10247 80761 158 158 NT_STATUS_OK
ReadX 10247 80919 912 912 NT_STATUS_OK
ReadX 10247 81831 1980 1980 NT_STATUS_OK
ReadX 10247 83811 2256 2256 NT_STATUS_OK
ReadX 10247 86067 400 400 NT_STATUS_OK
ReadX 10247 86467 252 252 NT_STATUS_OK
ReadX 10247 86719 42 42 NT_STATUS_OK
ReadX 10247 86761 725 725 NT_STATUS_OK
ReadX 10247 2009 512 512 NT_STATUS_OK
ReadX 10247 3895 9 9 NT_STATUS_OK
ReadX 10247 3781 46 46 NT_STATUS_OK
ReadX 10247 4059 92 92 NT_STATUS_OK
ReadX 10247 3781 92 92 NT_STATUS_OK
ReadX 10247 3986 184 184 NT_STATUS_OK
ReadX 10247 3987 16384 16384 NT_STATUS_OK
ReadX 10247 3902 16384 16384 NT_STATUS_OK
ReadX 10247 3781 10240 10240 NT_STATUS_OK
ReadX 10247 3821 16384 16384 NT_STATUS_OK
ReadX 10247 3891 935 935 NT_STATUS_OK
ReadX 10247 4060 10240 10240 NT_STATUS_OK
ReadX 10247 4059 184 184 NT_STATUS_OK
ReadX 10247 256 184 184 NT_STATUS_OK
ReadX 10247 256 1026 1026 NT_STATUS_OK
ReadX 10247 3901 326 326 NT_STATUS_OK
ReadX 10247 3899 652 652 NT_STATUS_OK
ReadX 10247 256 2 2 NT_STATUS_OK
ReadX 10247 258 4948 4948 NT_STATUS_OK
Close 10247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10265 NT_STATUS_OK
WriteX 10265 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 258 NT_STATUS_OK
WriteX 10265 0 65536 65536 NT_STATUS_OK
WriteX 10265 65536 65536 65536 NT_STATUS_OK
WriteX 10265 131072 65536 65536 NT_STATUS_OK
WriteX 10265 196608 65536 65536 NT_STATUS_OK
WriteX 10265 262144 65536 65536 NT_STATUS_OK
WriteX 10265 327680 65536 65536 NT_STATUS_OK
WriteX 10265 393216 65536 65536 NT_STATUS_OK
WriteX 10265 458752 65536 65536 NT_STATUS_OK
WriteX 10265 524288 65536 65536 NT_STATUS_OK
WriteX 10265 589824 35257 35257 NT_STATUS_OK
Close 10265 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10267 NT_STATUS_OK
Close 10267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10270 NT_STATUS_OK
WriteX 10270 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10270 258 NT_STATUS_OK
WriteX 10270 0 65536 65536 NT_STATUS_OK
WriteX 10270 65536 65536 65536 NT_STATUS_OK
WriteX 10270 131072 65536 65536 NT_STATUS_OK
WriteX 10270 196608 65536 65536 NT_STATUS_OK
WriteX 10270 262144 65536 65536 NT_STATUS_OK
WriteX 10270 327680 65536 65536 NT_STATUS_OK
WriteX 10270 393216 65536 65536 NT_STATUS_OK
WriteX 10270 458752 65536 65536 NT_STATUS_OK
WriteX 10270 524288 65536 65536 NT_STATUS_OK
WriteX 10270 589824 57598 57598 NT_STATUS_OK
Close 10270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10272 NT_STATUS_OK
WriteX 10272 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10272 258 NT_STATUS_OK
WriteX 10272 0 12543 12543 NT_STATUS_OK
Flush 10272 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10274 NT_STATUS_OK
Close 10274 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10276 NT_STATUS_OK
ReadX 10276 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10278 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 1005 NT_STATUS_OK
ReadX 10278 1938 24 24 NT_STATUS_OK
ReadX 10278 1920 276 276 NT_STATUS_OK
ReadX 10278 1918 14 14 NT_STATUS_OK
ReadX 10278 1918 7 7 NT_STATUS_OK
ReadX 10278 1919 12 12 NT_STATUS_OK
ReadX 10278 1919 8 8 NT_STATUS_OK
ReadX 10278 1917 15 15 NT_STATUS_OK
ReadX 10278 0 16 16 NT_STATUS_OK
ReadX 10278 16 2048 2048 NT_STATUS_OK
ReadX 10278 2064 2048 2048 NT_STATUS_OK
ReadX 10278 257 2048 2048 NT_STATUS_OK
ReadX 10278 385 2048 2048 NT_STATUS_OK
ReadX 10278 513 2048 2048 NT_STATUS_OK
ReadX 10278 641 2048 2048 NT_STATUS_OK
ReadX 10278 769 2048 2048 NT_STATUS_OK
ReadX 10278 897 2048 2048 NT_STATUS_OK
ReadX 10278 1025 2048 2048 NT_STATUS_OK
ReadX 10278 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10283 NT_STATUS_OK
WriteX 10283 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10283 258 NT_STATUS_OK
WriteX 10283 0 11588 11588 NT_STATUS_OK
Flush 10283 NT_STATUS_OK
Close 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10284 NT_STATUS_OK
Close 10284 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10288 NT_STATUS_OK
WriteX 10288 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10288 258 NT_STATUS_OK
WriteX 10288 0 11615 11615 NT_STATUS_OK
Flush 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10294 NT_STATUS_OK
Close 10294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10297 NT_STATUS_OK
WriteX 10297 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10297 258 NT_STATUS_OK
WriteX 10297 0 65536 65536 NT_STATUS_OK
WriteX 10297 65536 16050 16050 NT_STATUS_OK
Close 10297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10277 1939 64 64 NT_STATUS_OK
ReadX 10277 128 248 248 NT_STATUS_OK
ReadX 10277 128 568 568 NT_STATUS_OK
ReadX 10277 3872 1536 1536 NT_STATUS_OK
ReadX 10277 3456 2560 2560 NT_STATUS_OK
ReadX 10277 3136 512 512 NT_STATUS_OK
ReadX 10277 2880 4096 4096 NT_STATUS_OK
ReadX 10277 3264 3072 3072 NT_STATUS_OK
ReadX 10277 320 4096 4096 NT_STATUS_OK
ReadX 10277 1024 4096 4096 NT_STATUS_OK
ReadX 10277 3616 4096 4096 NT_STATUS_OK
ReadX 10277 1939 64 64 NT_STATUS_OK
ReadX 10277 128 248 248 NT_STATUS_OK
ReadX 10277 128 608 608 NT_STATUS_OK
ReadX 10277 2858 1024 1024 NT_STATUS_OK
ReadX 10277 2810 4096 4096 NT_STATUS_OK
ReadX 10277 2826 4096 4096 NT_STATUS_OK
ReadX 10277 2580 2048 2048 NT_STATUS_OK
ReadX 10277 2800 2560 2560 NT_STATUS_OK
ReadX 10277 2100 4096 4096 NT_STATUS_OK
ReadX 10277 2084 4096 4096 NT_STATUS_OK
ReadX 10277 868 4096 4096 NT_STATUS_OK
ReadX 10277 2324 4096 4096 NT_STATUS_OK
ReadX 10277 884 4096 4096 NT_STATUS_OK
ReadX 10277 2604 1024 1024 NT_STATUS_OK
ReadX 10277 580 4096 4096 NT_STATUS_OK
ReadX 10277 596 4096 4096 NT_STATUS_OK
ReadX 10277 2752 4096 4096 NT_STATUS_OK
ReadX 10277 2842 1024 1024 NT_STATUS_OK
ReadX 10277 660 4096 4096 NT_STATUS_OK
ReadX 10277 2720 4096 4096 NT_STATUS_OK
ReadX 10277 2736 4096 4096 NT_STATUS_OK
ReadX 10277 628 4096 4096 NT_STATUS_OK
ReadX 10277 2704 4096 4096 NT_STATUS_OK
ReadX 10277 1556 4096 4096 NT_STATUS_OK
ReadX 10277 576 4096 4096 NT_STATUS_OK
ReadX 10277 3168 1536 1536 NT_STATUS_OK
ReadX 10277 832 4096 4096 NT_STATUS_OK
ReadX 10277 1088 4096 4096 NT_STATUS_OK
ReadX 10277 1344 4096 4096 NT_STATUS_OK
ReadX 10277 1600 4096 4096 NT_STATUS_OK
ReadX 10277 1856 4096 4096 NT_STATUS_OK
ReadX 10277 2112 4096 4096 NT_STATUS_OK
ReadX 10277 1892 4096 4096 NT_STATUS_OK
ReadX 10277 820 4096 4096 NT_STATUS_OK
ReadX 10277 788 4096 4096 NT_STATUS_OK
ReadX 10277 1604 4096 4096 NT_STATUS_OK
ReadX 10277 3648 4096 4096 NT_STATUS_OK
ReadX 10277 2608 4096 4096 NT_STATUS_OK
ReadX 10277 548 4096 4096 NT_STATUS_OK
ReadX 10277 740 4096 4096 NT_STATUS_OK
ReadX 10277 1344 4096 4096 NT_STATUS_OK
ReadX 10277 3392 4096 4096 NT_STATUS_OK
ReadX 10277 3904 4096 4096 NT_STATUS_OK
ReadX 10277 644 4096 4096 NT_STATUS_OK
ReadX 10277 676 4096 4096 NT_STATUS_OK
ReadX 10277 2688 4096 4096 NT_STATUS_OK
ReadX 10277 320 4096 4096 NT_STATUS_OK
ReadX 10277 900 4096 4096 NT_STATUS_OK
ReadX 10277 1908 4096 4096 NT_STATUS_OK
ReadX 10277 852 4096 4096 NT_STATUS_OK
ReadX 10277 724 4096 4096 NT_STATUS_OK
ReadX 10277 2292 4096 4096 NT_STATUS_OK
ReadX 10277 612 4096 4096 NT_STATUS_OK
ReadX 10277 388 4096 4096 NT_STATUS_OK
ReadX 10277 2368 4096 4096 NT_STATUS_OK
ReadX 10277 2624 4096 4096 NT_STATUS_OK
ReadX 10277 500 4096 4096 NT_STATUS_OK
ReadX 10277 356 4096 4096 NT_STATUS_OK
ReadX 10277 1024 4096 4096 NT_STATUS_OK
ReadX 10277 576 4096 4096 NT_STATUS_OK
ReadX 10277 340 4096 4096 NT_STATUS_OK
ReadX 10277 420 4096 4096 NT_STATUS_OK
ReadX 10277 1600 4096 4096 NT_STATUS_OK
ReadX 10277 404 4096 4096 NT_STATUS_OK
ReadX 10277 1428 4096 4096 NT_STATUS_OK
ReadX 10277 2656 4096 4096 NT_STATUS_OK
ReadX 10277 2624 4096 4096 NT_STATUS_OK
ReadX 10277 452 4096 4096 NT_STATUS_OK
ReadX 10277 692 4096 4096 NT_STATUS_OK
ReadX 10277 564 4096 4096 NT_STATUS_OK
ReadX 10277 372 4096 4096 NT_STATUS_OK
ReadX 10277 468 4096 4096 NT_STATUS_OK
ReadX 10277 484 4096 4096 NT_STATUS_OK
ReadX 10277 1088 4096 4096 NT_STATUS_OK
ReadX 10277 1924 4096 4096 NT_STATUS_OK
ReadX 10277 2768 4096 4096 NT_STATUS_OK
ReadX 10277 832 4096 4096 NT_STATUS_OK
ReadX 10277 836 4096 4096 NT_STATUS_OK
ReadX 10277 1856 4096 4096 NT_STATUS_OK
ReadX 10277 2640 4096 4096 NT_STATUS_OK
ReadX 10277 436 4096 4096 NT_STATUS_OK
ReadX 10277 1828 4096 4096 NT_STATUS_OK
ReadX 10277 804 4096 4096 NT_STATUS_OK
ReadX 10277 1860 4096 4096 NT_STATUS_OK
ReadX 10277 1812 4096 4096 NT_STATUS_OK
ReadX 10277 756 4096 4096 NT_STATUS_OK
ReadX 10277 1636 4096 4096 NT_STATUS_OK
ReadX 10277 772 4096 4096 NT_STATUS_OK
ReadX 10277 2036 4096 4096 NT_STATUS_OK
ReadX 10277 1220 4096 4096 NT_STATUS_OK
ReadX 10277 1652 4096 4096 NT_STATUS_OK
ReadX 10277 2588 4096 4096 NT_STATUS_OK
ReadX 10277 916 4096 4096 NT_STATUS_OK
ReadX 10277 260 4096 4096 NT_STATUS_OK
ReadX 10277 932 4096 4096 NT_STATUS_OK
ReadX 10277 2624 4096 4096 NT_STATUS_OK
ReadX 10277 308 4096 4096 NT_STATUS_OK
ReadX 10277 292 4096 4096 NT_STATUS_OK
ReadX 10277 1140 4096 4096 NT_STATUS_OK
ReadX 10277 276 4096 4096 NT_STATUS_OK
ReadX 10277 2020 4096 4096 NT_STATUS_OK
ReadX 10277 2880 4096 4096 NT_STATUS_OK
ReadX 10277 516 4096 4096 NT_STATUS_OK
ReadX 10277 1844 4096 4096 NT_STATUS_OK
ReadX 10277 1124 4096 4096 NT_STATUS_OK
ReadX 10277 3136 4096 4096 NT_STATUS_OK
ReadX 10277 324 4096 4096 NT_STATUS_OK
ReadX 10277 1156 4096 4096 NT_STATUS_OK
ReadX 10277 1172 4096 4096 NT_STATUS_OK
ReadX 10277 2112 4096 4096 NT_STATUS_OK
ReadX 10277 2368 4096 4096 NT_STATUS_OK
ReadX 10277 964 4096 4096 NT_STATUS_OK
ReadX 10277 980 4096 4096 NT_STATUS_OK
ReadX 10277 1012 4096 4096 NT_STATUS_OK
ReadX 10277 532 4096 4096 NT_STATUS_OK
ReadX 10277 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10277 1620 4096 4096 NT_STATUS_OK
ReadX 10277 1604 4096 4096 NT_STATUS_OK
ReadX 10277 2116 4096 4096 NT_STATUS_OK
ReadX 10277 2132 4096 4096 NT_STATUS_OK
ReadX 10277 2148 4096 4096 NT_STATUS_OK
ReadX 10277 2276 4096 4096 NT_STATUS_OK
ReadX 10277 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10299 NT_STATUS_OK
Close 10299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10302 NT_STATUS_OK
QUERY_FILE_INFORMATION 10257 1004 NT_STATUS_OK
Close 10257 NT_STATUS_OK
WriteX 10302 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10302 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10259 1004 NT_STATUS_OK
Close 10259 NT_STATUS_OK
WriteX 10302 0 65536 65536 NT_STATUS_OK
WriteX 10302 65536 64850 64850 NT_STATUS_OK
Close 10302 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10304 NT_STATUS_OK
WriteX 10304 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 258 NT_STATUS_OK
ReadX 10277 2068 4096 4096 NT_STATUS_OK
ReadX 10277 1588 4096 4096 NT_STATUS_OK
ReadX 10277 1572 4096 4096 NT_STATUS_OK
WriteX 10304 0 18630 18630 NT_STATUS_OK
Flush 10304 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10277 612 4096 4096 NT_STATUS_OK
ReadX 10277 564 4096 4096 NT_STATUS_OK
ReadX 10277 1876 4096 4096 NT_STATUS_OK
ReadX 10277 628 4096 4096 NT_STATUS_OK
ReadX 10277 740 4096 4096 NT_STATUS_OK
ReadX 10277 724 4096 4096 NT_STATUS_OK
ReadX 10277 644 4096 4096 NT_STATUS_OK
ReadX 10277 2324 4096 4096 NT_STATUS_OK
ReadX 10277 660 4096 4096 NT_STATUS_OK
ReadX 10277 852 4096 4096 NT_STATUS_OK
ReadX 10277 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10277 2368 4096 4096 NT_STATUS_OK
ReadX 10277 1024 4096 4096 NT_STATUS_OK
ReadX 10277 320 4096 4096 NT_STATUS_OK
ReadX 10277 580 4096 4096 NT_STATUS_OK
ReadX 10277 3136 512 512 NT_STATUS_OK
ReadX 10277 2880 4096 4096 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 61440 4096 4096 NT_STATUS_OK
ReadX 10309 126976 4096 4096 NT_STATUS_OK
WriteX 10309 0 65536 65536 NT_STATUS_OK
WriteX 10309 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 61440 4096 4096 NT_STATUS_OK
ReadX 10310 126976 4096 4096 NT_STATUS_OK
ReadX 10310 192512 4096 4096 NT_STATUS_OK
ReadX 10310 258048 4096 4096 NT_STATUS_OK
WriteX 10310 0 65536 65536 NT_STATUS_OK
WriteX 10310 65536 65536 65536 NT_STATUS_OK
WriteX 10310 131072 65536 65536 NT_STATUS_OK
WriteX 10310 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 61440 4096 4096 NT_STATUS_OK
ReadX 10311 126976 4096 4096 NT_STATUS_OK
ReadX 10311 192512 4096 4096 NT_STATUS_OK
ReadX 10311 258048 4096 4096 NT_STATUS_OK
ReadX 10311 323584 4096 4096 NT_STATUS_OK
ReadX 10311 389120 4096 4096 NT_STATUS_OK
ReadX 10311 454656 4096 4096 NT_STATUS_OK
ReadX 10311 520192 4096 4096 NT_STATUS_OK
WriteX 10311 0 65536 65536 NT_STATUS_OK
WriteX 10311 65536 65536 65536 NT_STATUS_OK
WriteX 10311 131072 65536 65536 NT_STATUS_OK
WriteX 10311 196608 65536 65536 NT_STATUS_OK
WriteX 10311 262144 65536 65536 NT_STATUS_OK
WriteX 10311 327680 65536 65536 NT_STATUS_OK
WriteX 10311 393216 65536 65536 NT_STATUS_OK
WriteX 10311 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10314 NT_STATUS_OK
WriteX 10314 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10314 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10312 0 8192 8192 NT_STATUS_OK
Flush 10312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10312 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10312 0 8192 8192 NT_STATUS_OK
Flush 10312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10312 0 8192 8192 NT_STATUS_OK
Flush 10312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10312 0 8192 8192 NT_STATUS_OK
Flush 10312 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10276 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10319 NT_STATUS_OK
WriteX 10319 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 62591 62591 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
WriteX 10324 0 10845 10845 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10329 NT_STATUS_OK
WriteX 10329 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10329 258 NT_STATUS_OK
WriteX 10329 0 30118 30118 NT_STATUS_OK
Close 10329 NT_STATUS_OK
WriteX 10312 0 4096 4096 NT_STATUS_OK
WriteX 10314 0 64 64 NT_STATUS_OK
Close 10314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 61440 61440 NT_STATUS_OK
ReadX 10331 61440 4096 4096 NT_STATUS_OK
ReadX 10331 65536 61440 61440 NT_STATUS_OK
ReadX 10331 126976 4096 4096 NT_STATUS_OK
ReadX 10331 131072 61440 61440 NT_STATUS_OK
ReadX 10331 192512 4096 4096 NT_STATUS_OK
ReadX 10331 196608 61440 61440 NT_STATUS_OK
ReadX 10331 258048 4096 4096 NT_STATUS_OK
ReadX 10331 262144 61440 61440 NT_STATUS_OK
ReadX 10331 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 61440 61440 NT_STATUS_OK
ReadX 10332 61440 4096 4096 NT_STATUS_OK
ReadX 10332 65536 61440 61440 NT_STATUS_OK
ReadX 10332 126976 4096 4096 NT_STATUS_OK
ReadX 10332 131072 61440 61440 NT_STATUS_OK
ReadX 10332 192512 4096 4096 NT_STATUS_OK
ReadX 10332 196608 61440 61440 NT_STATUS_OK
ReadX 10332 258048 4096 4096 NT_STATUS_OK
ReadX 10332 262144 61440 61440 NT_STATUS_OK
ReadX 10332 323584 4096 4096 NT_STATUS_OK
ReadX 10332 327680 61440 61440 NT_STATUS_OK
ReadX 10332 389120 4096 4096 NT_STATUS_OK
ReadX 10332 393216 61440 61440 NT_STATUS_OK
ReadX 10332 454656 4096 4096 NT_STATUS_OK
ReadX 10332 458752 61440 61440 NT_STATUS_OK
ReadX 10332 520192 4096 4096 NT_STATUS_OK
ReadX 10332 524288 61440 61440 NT_STATUS_OK
ReadX 10332 585728 4096 4096 NT_STATUS_OK
ReadX 10332 589824 61440 61440 NT_STATUS_OK
ReadX 10332 651264 4096 4096 NT_STATUS_OK
ReadX 10332 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 61440 61440 NT_STATUS_OK
ReadX 10333 61440 4096 4096 NT_STATUS_OK
ReadX 10333 65536 61440 61440 NT_STATUS_OK
ReadX 10333 126976 4096 4096 NT_STATUS_OK
ReadX 10333 131072 61440 61440 NT_STATUS_OK
ReadX 10333 192512 4096 4096 NT_STATUS_OK
ReadX 10333 196608 61440 61440 NT_STATUS_OK
ReadX 10333 258048 4096 4096 NT_STATUS_OK
ReadX 10333 262144 61440 61440 NT_STATUS_OK
ReadX 10333 323584 4096 4096 NT_STATUS_OK
ReadX 10333 327680 61440 61440 NT_STATUS_OK
ReadX 10333 389120 4096 4096 NT_STATUS_OK
ReadX 10333 393216 61440 61440 NT_STATUS_OK
ReadX 10333 454656 4096 4096 NT_STATUS_OK
ReadX 10333 458752 61440 61440 NT_STATUS_OK
ReadX 10333 520192 4096 4096 NT_STATUS_OK
ReadX 10333 524288 61440 61440 NT_STATUS_OK
ReadX 10333 585728 4096 4096 NT_STATUS_OK
ReadX 10333 589824 61440 61440 NT_STATUS_OK
ReadX 10333 651264 4096 4096 NT_STATUS_OK
ReadX 10333 655360 61440 61440 NT_STATUS_OK
ReadX 10333 716800 4096 4096 NT_STATUS_OK
ReadX 10333 720896 61440 61440 NT_STATUS_OK
ReadX 10333 782336 4096 4096 NT_STATUS_OK
ReadX 10333 786432 61440 61440 NT_STATUS_OK
ReadX 10333 847872 4096 4096 NT_STATUS_OK
ReadX 10333 851968 61440 61440 NT_STATUS_OK
ReadX 10333 913408 4096 4096 NT_STATUS_OK
ReadX 10333 917504 61440 61440 NT_STATUS_OK
ReadX 10333 978944 4096 4096 NT_STATUS_OK
ReadX 10333 983040 61440 61440 NT_STATUS_OK
ReadX 10333 1044480 4096 4096 NT_STATUS_OK
ReadX 10333 1048576 61440 61440 NT_STATUS_OK
ReadX 10333 1110016 4096 4096 NT_STATUS_OK
ReadX 10333 1114112 61440 61440 NT_STATUS_OK
ReadX 10333 1175552 4096 4096 NT_STATUS_OK
ReadX 10333 1179648 61440 61440 NT_STATUS_OK
ReadX 10333 1241088 4096 4096 NT_STATUS_OK
ReadX 10333 1245184 61440 61440 NT_STATUS_OK
ReadX 10333 1306624 4096 4096 NT_STATUS_OK
ReadX 10333 1310720 61440 61440 NT_STATUS_OK
ReadX 10333 1372160 4096 4096 NT_STATUS_OK
ReadX 10333 1376256 61440 61440 NT_STATUS_OK
ReadX 10333 1437696 4096 4096 NT_STATUS_OK
ReadX 10333 1441792 61440 61440 NT_STATUS_OK
ReadX 10333 1503232 4096 4096 NT_STATUS_OK
ReadX 10333 1507328 61440 61440 NT_STATUS_OK
ReadX 10333 1568768 4096 4096 NT_STATUS_OK
ReadX 10333 1572864 61440 61440 NT_STATUS_OK
ReadX 10333 1634304 4096 4096 NT_STATUS_OK
ReadX 10333 1638400 61440 61440 NT_STATUS_OK
ReadX 10333 1699840 4096 4096 NT_STATUS_OK
ReadX 10333 1703936 61440 61440 NT_STATUS_OK
ReadX 10333 1765376 4096 4096 NT_STATUS_OK
ReadX 10333 1769472 61440 61440 NT_STATUS_OK
ReadX 10333 1830912 4096 4096 NT_STATUS_OK
ReadX 10333 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10334 NT_STATUS_OK
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
ReadX 10338 4096 4096 4096 NT_STATUS_OK
ReadX 10338 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10342 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10343 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 8192 8192 NT_STATUS_OK
ReadX 10346 8192 8192 8192 NT_STATUS_OK
ReadX 10346 16384 8192 8192 NT_STATUS_OK
ReadX 10346 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10348 NT_STATUS_OK
Close 10348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10351 NT_STATUS_OK
WriteX 10351 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 8192 8192 NT_STATUS_OK
WriteX 10351 0 10438 10438 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10352 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10355 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10357 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10358 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10359 NT_STATUS_OK
Close 10359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
ReadX 10360 4096 4096 4096 NT_STATUS_OK
ReadX 10360 8192 4096 4096 NT_STATUS_OK
ReadX 10360 12288 8192 8192 NT_STATUS_OK
ReadX 10360 20480 8192 8192 NT_STATUS_OK
ReadX 10360 28672 8192 8192 NT_STATUS_OK
ReadX 10360 36864 8192 8192 NT_STATUS_OK
ReadX 10360 45056 8192 8192 NT_STATUS_OK
ReadX 10360 53248 8192 8192 NT_STATUS_OK
ReadX 10360 61440 8192 8192 NT_STATUS_OK
ReadX 10360 69632 8192 8192 NT_STATUS_OK
ReadX 10360 77824 8192 8192 NT_STATUS_OK
ReadX 10360 86016 8192 8192 NT_STATUS_OK
ReadX 10360 94208 8192 8192 NT_STATUS_OK
ReadX 10360 102400 8192 8192 NT_STATUS_OK
ReadX 10360 110592 8192 8192 NT_STATUS_OK
ReadX 10360 118784 8192 8192 NT_STATUS_OK
ReadX 10360 126976 8192 8192 NT_STATUS_OK
ReadX 10360 135168 8192 8192 NT_STATUS_OK
ReadX 10360 143360 8192 8192 NT_STATUS_OK
ReadX 10360 151552 8192 8192 NT_STATUS_OK
ReadX 10360 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Close 10355 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10365 NT_STATUS_OK
WriteX 10365 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10365 258 NT_STATUS_OK
WriteX 10365 0 28489 28489 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10368 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 8192 8192 NT_STATUS_OK
ReadX 10372 8192 8192 8192 NT_STATUS_OK
ReadX 10372 16384 8192 8192 NT_STATUS_OK
ReadX 10372 24576 8192 8192 NT_STATUS_OK
ReadX 10372 32768 16384 16384 NT_STATUS_OK
ReadX 10372 49152 8192 8192 NT_STATUS_OK
ReadX 10372 57344 8192 8192 NT_STATUS_OK
ReadX 10372 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10377 NT_STATUS_OK
WriteX 10377 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10377 258 NT_STATUS_OK
WriteX 10377 0 29253 29253 NT_STATUS_OK
Close 10377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10384 NT_STATUS_OK
WriteX 10384 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 30183 30183 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10387 NT_STATUS_OK
WriteX 10387 0 510 510 NT_STATUS_OK
WriteX 10387 510 512 512 NT_STATUS_OK
WriteX 10387 1022 510 510 NT_STATUS_OK
WriteX 10387 1532 510 510 NT_STATUS_OK
WriteX 10387 2042 168 168 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
WriteX 10390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10391 NT_STATUS_OK
ReadX 10391 61440 4096 4096 NT_STATUS_OK
ReadX 10391 126976 4096 4096 NT_STATUS_OK
WriteX 10391 0 65536 65536 NT_STATUS_OK
WriteX 10391 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10392 NT_STATUS_OK
ReadX 10392 61440 4096 4096 NT_STATUS_OK
ReadX 10392 126976 4096 4096 NT_STATUS_OK
ReadX 10392 192512 4096 4096 NT_STATUS_OK
ReadX 10392 258048 4096 4096 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 65536 65536 NT_STATUS_OK
WriteX 10392 131072 65536 65536 NT_STATUS_OK
WriteX 10392 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 61440 4096 4096 NT_STATUS_OK
ReadX 10393 126976 4096 4096 NT_STATUS_OK
ReadX 10393 192512 4096 4096 NT_STATUS_OK
ReadX 10393 258048 4096 4096 NT_STATUS_OK
ReadX 10393 323584 4096 4096 NT_STATUS_OK
ReadX 10393 389120 4096 4096 NT_STATUS_OK
ReadX 10393 454656 4096 4096 NT_STATUS_OK
ReadX 10393 520192 4096 4096 NT_STATUS_OK
WriteX 10393 0 65536 65536 NT_STATUS_OK
WriteX 10393 65536 65536 65536 NT_STATUS_OK
WriteX 10393 131072 65536 65536 NT_STATUS_OK
WriteX 10393 196608 65536 65536 NT_STATUS_OK
WriteX 10393 262144 65536 65536 NT_STATUS_OK
WriteX 10393 327680 65536 65536 NT_STATUS_OK
WriteX 10393 393216 65536 65536 NT_STATUS_OK
WriteX 10393 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10390 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10396 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10400 NT_STATUS_OK
Close 10400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10405 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10412 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10418 NT_STATUS_OK
Close 10418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10453 NT_STATUS_OK
Close 10453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10462 NT_STATUS_OK
WriteX 10462 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10462 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10462 0 65536 65536 NT_STATUS_OK
WriteX 10462 65536 65536 65536 NT_STATUS_OK
WriteX 10462 131072 65536 65536 NT_STATUS_OK
WriteX 10462 196608 65536 65536 NT_STATUS_OK
WriteX 10462 262144 26634 26634 NT_STATUS_OK
Close 10462 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10468 NT_STATUS_OK
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
Close 10469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 4096 4096 NT_STATUS_OK
ReadX 10470 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10471 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10475 NT_STATUS_OK
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10480 NT_STATUS_OK
Close 10480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10484 NT_STATUS_OK
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10487 NT_STATUS_OK
Close 10487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10493 NT_STATUS_OK
Close 10493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10522 NT_STATUS_OK
Close 10522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10532 NT_STATUS_OK
Close 10532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10537 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10547 NT_STATUS_OK
Close 10547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
Close 10550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10551 NT_STATUS_OK
ReadX 10551 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10561 NT_STATUS_OK
Close 10561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
Close 10563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10594 0 4096 4096 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
ReadX 10596 4096 4096 4096 NT_STATUS_OK
ReadX 10596 8192 4096 4096 NT_STATUS_OK
ReadX 10596 12288 4096 4096 NT_STATUS_OK
ReadX 10596 16384 4096 4096 NT_STATUS_OK
ReadX 10596 20480 4096 4096 NT_STATUS_OK
ReadX 10596 24576 4096 4096 NT_STATUS_OK
ReadX 10596 28672 4096 4096 NT_STATUS_OK
ReadX 10596 32768 4096 4096 NT_STATUS_OK
ReadX 10596 36864 4096 4096 NT_STATUS_OK
ReadX 10596 40960 4096 4096 NT_STATUS_OK
ReadX 10596 45056 4096 4096 NT_STATUS_OK
ReadX 10596 49152 4096 4096 NT_STATUS_OK
ReadX 10596 53248 4096 4096 NT_STATUS_OK
ReadX 10596 57344 4096 4096 NT_STATUS_OK
ReadX 10596 61440 4096 4096 NT_STATUS_OK
ReadX 10596 65536 4096 4096 NT_STATUS_OK
ReadX 10596 69632 4096 4096 NT_STATUS_OK
ReadX 10596 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10596 1004 NT_STATUS_OK
WriteX 10596 0 4096 4096 NT_STATUS_OK
Close 10596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10597 NT_STATUS_OK
SET_FILE_INFORMATION 10597 1004 NT_STATUS_OK
Close 10597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10599 NT_STATUS_OK
Close 10599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10602 NT_STATUS_OK
WriteX 10602 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10602 258 NT_STATUS_OK
WriteX 10602 0 65536 65536 NT_STATUS_OK
WriteX 10602 65536 19979 19979 NT_STATUS_OK
Close 10602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Flush 10603 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Flush 10603 NT_STATUS_OK
QUERY_FILE_INFORMATION 10603 1004 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Flush 10603 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Flush 10603 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Flush 10603 NT_STATUS_OK
SET_FILE_INFORMATION 10603 1004 NT_STATUS_OK
WriteX 10603 0 4096 4096 NT_STATUS_OK
Flush 10603 NT_STATUS_OK
Close 10603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10604 NT_STATUS_OK
ReadX 10604 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 4096 4096 NT_STATUS_OK
Close 10604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10606 NT_STATUS_OK
ReadX 10606 0 4096 4096 NT_STATUS_OK
Close 10606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 4096 4096 NT_STATUS_OK
Close 10607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
WriteX 10608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 65536 65536 NT_STATUS_OK
WriteX 10614 65536 17654 17654 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1004 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10616 NT_STATUS_OK
SET_FILE_INFORMATION 10616 1004 NT_STATUS_OK
Close 10616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10617 NT_STATUS_OK
ReadX 10617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10618 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10620 NT_STATUS_OK
ReadX 10620 0 4096 4096 NT_STATUS_OK
ReadX 10620 4096 4096 4096 NT_STATUS_OK
ReadX 10620 8192 4096 4096 NT_STATUS_OK
ReadX 10620 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10620 16384 4096 4096 NT_STATUS_OK
ReadX 10620 20480 4096 4096 NT_STATUS_OK
ReadX 10620 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10621 NT_STATUS_OK
ReadX 10621 0 4096 4096 NT_STATUS_OK
Close 10621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
Close 10622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10623 NT_STATUS_OK
ReadX 10623 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10623 1004 NT_STATUS_OK
WriteX 10623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10623 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10629 NT_STATUS_OK
WriteX 10629 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10629 258 NT_STATUS_OK
WriteX 10629 0 65536 65536 NT_STATUS_OK
WriteX 10629 65536 19490 19490 NT_STATUS_OK
Close 10629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 4096 4096 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
QUERY_FILE_INFORMATION 10630 1004 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
SET_FILE_INFORMATION 10630 1004 NT_STATUS_OK
WriteX 10630 0 4096 4096 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10631 NT_STATUS_OK
SET_FILE_INFORMATION 10631 1004 NT_STATUS_OK
Close 10631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10633 NT_STATUS_OK
Close 10633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10635 0 4096 4096 NT_STATUS_OK
Close 10635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10637 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
ReadX 10637 4096 4096 4096 NT_STATUS_OK
ReadX 10637 8192 4096 4096 NT_STATUS_OK
ReadX 10637 12288 4096 4096 NT_STATUS_OK
ReadX 10637 16384 4096 4096 NT_STATUS_OK
ReadX 10637 20480 4096 4096 NT_STATUS_OK
ReadX 10637 24576 4096 4096 NT_STATUS_OK
ReadX 10637 28672 4096 4096 NT_STATUS_OK
ReadX 10637 32768 4096 4096 NT_STATUS_OK
ReadX 10637 36864 4096 4096 NT_STATUS_OK
ReadX 10637 40960 4096 4096 NT_STATUS_OK
ReadX 10637 45056 4096 4096 NT_STATUS_OK
ReadX 10637 49152 4096 4096 NT_STATUS_OK
ReadX 10637 53248 4096 4096 NT_STATUS_OK
ReadX 10637 57344 4096 4096 NT_STATUS_OK
ReadX 10637 61440 4096 4096 NT_STATUS_OK
ReadX 10637 65536 4096 4096 NT_STATUS_OK
ReadX 10637 69632 4096 4096 NT_STATUS_OK
ReadX 10637 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10637 1004 NT_STATUS_OK
WriteX 10637 0 4096 4096 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10638 NT_STATUS_OK
SET_FILE_INFORMATION 10638 1004 NT_STATUS_OK
Close 10638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10643 NT_STATUS_OK
WriteX 10643 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10643 258 NT_STATUS_OK
WriteX 10643 0 65536 65536 NT_STATUS_OK
WriteX 10643 65536 8866 8866 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
WriteX 10644 0 4096 4096 NT_STATUS_OK
Flush 10644 NT_STATUS_OK
SET_FILE_INFORMATION 10644 1004 NT_STATUS_OK
WriteX 10644 0 4096 4096 NT_STATUS_OK
Flush 10644 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
Close 10646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10647 NT_STATUS_OK
ReadX 10647 0 4096 4096 NT_STATUS_OK
Close 10647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10648 NT_STATUS_OK
ReadX 10648 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10648 1004 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10649 NT_STATUS_OK
Close 10649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10648 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10654 NT_STATUS_OK
WriteX 10654 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 258 NT_STATUS_OK
WriteX 10654 0 65536 65536 NT_STATUS_OK
WriteX 10654 65536 9298 9298 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10655 NT_STATUS_OK
ReadX 10655 0 4096 4096 NT_STATUS_OK
WriteX 10655 0 4096 4096 NT_STATUS_OK
Flush 10655 NT_STATUS_OK
SET_FILE_INFORMATION 10655 1004 NT_STATUS_OK
WriteX 10655 0 4096 4096 NT_STATUS_OK
Flush 10655 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10656 NT_STATUS_OK
SET_FILE_INFORMATION 10656 1004 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10657 NT_STATUS_OK
ReadX 10657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10661 0 4096 4096 NT_STATUS_OK
Close 10661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10662 4096 4096 4096 NT_STATUS_OK
ReadX 10662 8192 4096 4096 NT_STATUS_OK
ReadX 10662 12288 4096 4096 NT_STATUS_OK
ReadX 10662 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10663 NT_STATUS_OK
ReadX 10663 0 4096 4096 NT_STATUS_OK
Close 10663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 4096 4096 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10665 1004 NT_STATUS_OK
WriteX 10665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10666 NT_STATUS_OK
Close 10666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10662 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10668 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10671 NT_STATUS_OK
WriteX 10671 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
WriteX 10671 0 65536 65536 NT_STATUS_OK
WriteX 10671 65536 11540 11540 NT_STATUS_OK
Close 10671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
WriteX 10672 0 4096 4096 NT_STATUS_OK
Flush 10672 NT_STATUS_OK
SET_FILE_INFORMATION 10672 1004 NT_STATUS_OK
WriteX 10672 0 4096 4096 NT_STATUS_OK
Flush 10672 NT_STATUS_OK
Close 10672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10673 NT_STATUS_OK
SET_FILE_INFORMATION 10673 1004 NT_STATUS_OK
Close 10673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10677 NT_STATUS_OK
ReadX 10677 61440 4096 4096 NT_STATUS_OK
ReadX 10677 126976 4096 4096 NT_STATUS_OK
WriteX 10677 0 65536 65536 NT_STATUS_OK
WriteX 10677 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 61440 4096 4096 NT_STATUS_OK
ReadX 10678 126976 4096 4096 NT_STATUS_OK
ReadX 10678 192512 4096 4096 NT_STATUS_OK
ReadX 10678 258048 4096 4096 NT_STATUS_OK
WriteX 10678 0 65536 65536 NT_STATUS_OK
WriteX 10678 65536 65536 65536 NT_STATUS_OK
WriteX 10678 131072 65536 65536 NT_STATUS_OK
WriteX 10678 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 61440 4096 4096 NT_STATUS_OK
ReadX 10679 126976 4096 4096 NT_STATUS_OK
ReadX 10679 192512 4096 4096 NT_STATUS_OK
ReadX 10679 258048 4096 4096 NT_STATUS_OK
ReadX 10679 323584 4096 4096 NT_STATUS_OK
ReadX 10679 389120 4096 4096 NT_STATUS_OK
ReadX 10679 454656 4096 4096 NT_STATUS_OK
ReadX 10679 520192 4096 4096 NT_STATUS_OK
WriteX 10679 0 65536 65536 NT_STATUS_OK
WriteX 10679 65536 65536 65536 NT_STATUS_OK
WriteX 10679 131072 65536 65536 NT_STATUS_OK
WriteX 10679 196608 65536 65536 NT_STATUS_OK
WriteX 10679 262144 65536 65536 NT_STATUS_OK
WriteX 10679 327680 65536 65536 NT_STATUS_OK
WriteX 10679 393216 65536 65536 NT_STATUS_OK
WriteX 10679 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
ReadX 10680 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10681 NT_STATUS_OK
WriteX 10681 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10681 258 NT_STATUS_OK
WriteX 10681 0 53 53 NT_STATUS_OK
Close 10681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Close 10677 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10680 8192 4096 4096 NT_STATUS_OK
ReadX 10680 12288 4096 4096 NT_STATUS_OK
WriteX 10684 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10684 258 NT_STATUS_OK
ReadX 10680 16384 4096 4096 NT_STATUS_OK
ReadX 10680 20480 4096 4096 NT_STATUS_OK
WriteX 10684 0 15360 15360 NT_STATUS_OK
Close 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10685 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10685 1004 NT_STATUS_OK
WriteX 10685 0 4096 4096 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10686 NT_STATUS_OK
Close 10686 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10689 NT_STATUS_OK
Close 10689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10688 4096 4096 4096 NT_STATUS_OK
ReadX 10688 8192 4096 4096 NT_STATUS_OK
ReadX 10688 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
ReadX 10691 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
ReadX 10692 4096 4096 4096 NT_STATUS_OK
ReadX 10692 8192 4096 4096 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Close 10692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10693 NT_STATUS_OK
WriteX 10693 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10693 258 NT_STATUS_OK
WriteX 10693 0 15360 15360 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10694 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10694 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10695 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10697 NT_STATUS_OK
ReadX 10697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10698 NT_STATUS_OK
SET_FILE_INFORMATION 10698 1004 NT_STATUS_OK
Close 10698 NT_STATUS_OK
WriteX 10694 0 4096 4096 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10699 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
ReadX 10701 4096 4096 4096 NT_STATUS_OK
ReadX 10701 8192 4096 4096 NT_STATUS_OK
ReadX 10701 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10703 NT_STATUS_OK
WriteX 10703 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 258 NT_STATUS_OK
WriteX 10703 0 53 53 NT_STATUS_OK
Close 10703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10702 4096 4096 4096 NT_STATUS_OK
ReadX 10702 8192 4096 4096 NT_STATUS_OK
ReadX 10702 12288 4096 4096 NT_STATUS_OK
WriteX 10706 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 258 NT_STATUS_OK
WriteX 10706 0 12006 12006 NT_STATUS_OK
Close 10706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10707 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10707 1004 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10710 4096 4096 4096 NT_STATUS_OK
ReadX 10710 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10713 NT_STATUS_OK
WriteX 10713 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 258 NT_STATUS_OK
WriteX 10713 0 11991 11991 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10714 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10714 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10718 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
Close 10718 NT_STATUS_OK
WriteX 10714 0 4096 4096 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10722 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10721 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10721 1004 NT_STATUS_OK
ReadX 10721 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10721 1004 NT_STATUS_OK
WriteX 10721 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10721 1004 NT_STATUS_OK
Close 10697 NT_STATUS_OK
WriteX 10701 0 19054 19054 NT_STATUS_OK
WriteX 10721 0 12288 12288 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10724 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10701 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10726 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 61440 61440 NT_STATUS_OK
ReadX 10728 61440 4096 4096 NT_STATUS_OK
ReadX 10728 65536 61440 61440 NT_STATUS_OK
ReadX 10728 126976 4096 4096 NT_STATUS_OK
ReadX 10728 131072 61440 61440 NT_STATUS_OK
ReadX 10728 192512 4096 4096 NT_STATUS_OK
ReadX 10728 196608 61440 61440 NT_STATUS_OK
ReadX 10728 258048 4096 4096 NT_STATUS_OK
ReadX 10728 262144 61440 61440 NT_STATUS_OK
ReadX 10728 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 61440 61440 NT_STATUS_OK
ReadX 10729 61440 4096 4096 NT_STATUS_OK
ReadX 10729 65536 61440 61440 NT_STATUS_OK
ReadX 10729 126976 4096 4096 NT_STATUS_OK
ReadX 10729 131072 61440 61440 NT_STATUS_OK
ReadX 10729 192512 4096 4096 NT_STATUS_OK
ReadX 10729 196608 61440 61440 NT_STATUS_OK
ReadX 10729 258048 4096 4096 NT_STATUS_OK
ReadX 10729 262144 61440 61440 NT_STATUS_OK
ReadX 10729 323584 4096 4096 NT_STATUS_OK
ReadX 10729 327680 61440 61440 NT_STATUS_OK
ReadX 10729 389120 4096 4096 NT_STATUS_OK
ReadX 10729 393216 61440 61440 NT_STATUS_OK
ReadX 10729 454656 4096 4096 NT_STATUS_OK
ReadX 10729 458752 61440 61440 NT_STATUS_OK
ReadX 10729 520192 4096 4096 NT_STATUS_OK
ReadX 10729 524288 61440 61440 NT_STATUS_OK
ReadX 10729 585728 4096 4096 NT_STATUS_OK
ReadX 10729 589824 61440 61440 NT_STATUS_OK
ReadX 10729 651264 4096 4096 NT_STATUS_OK
ReadX 10729 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 61440 61440 NT_STATUS_OK
ReadX 10730 61440 4096 4096 NT_STATUS_OK
ReadX 10730 65536 61440 61440 NT_STATUS_OK
ReadX 10730 126976 4096 4096 NT_STATUS_OK
ReadX 10730 131072 61440 61440 NT_STATUS_OK
ReadX 10730 192512 4096 4096 NT_STATUS_OK
ReadX 10730 196608 61440 61440 NT_STATUS_OK
ReadX 10730 258048 4096 4096 NT_STATUS_OK
ReadX 10730 262144 61440 61440 NT_STATUS_OK
ReadX 10730 323584 4096 4096 NT_STATUS_OK
ReadX 10730 327680 61440 61440 NT_STATUS_OK
ReadX 10730 389120 4096 4096 NT_STATUS_OK
ReadX 10730 393216 61440 61440 NT_STATUS_OK
ReadX 10730 454656 4096 4096 NT_STATUS_OK
ReadX 10730 458752 61440 61440 NT_STATUS_OK
ReadX 10730 520192 4096 4096 NT_STATUS_OK
ReadX 10730 524288 61440 61440 NT_STATUS_OK
ReadX 10730 585728 4096 4096 NT_STATUS_OK
ReadX 10730 589824 61440 61440 NT_STATUS_OK
ReadX 10730 651264 4096 4096 NT_STATUS_OK
ReadX 10730 655360 61440 61440 NT_STATUS_OK
ReadX 10730 716800 4096 4096 NT_STATUS_OK
ReadX 10730 720896 61440 61440 NT_STATUS_OK
ReadX 10730 782336 4096 4096 NT_STATUS_OK
ReadX 10730 786432 61440 61440 NT_STATUS_OK
ReadX 10730 847872 4096 4096 NT_STATUS_OK
ReadX 10730 851968 61440 61440 NT_STATUS_OK
ReadX 10730 913408 4096 4096 NT_STATUS_OK
ReadX 10730 917504 61440 61440 NT_STATUS_OK
ReadX 10730 978944 4096 4096 NT_STATUS_OK
ReadX 10730 983040 61440 61440 NT_STATUS_OK
ReadX 10730 1044480 4096 4096 NT_STATUS_OK
ReadX 10730 1048576 61440 61440 NT_STATUS_OK
ReadX 10730 1110016 4096 4096 NT_STATUS_OK
ReadX 10730 1114112 61440 61440 NT_STATUS_OK
ReadX 10730 1175552 4096 4096 NT_STATUS_OK
ReadX 10730 1179648 61440 61440 NT_STATUS_OK
ReadX 10730 1241088 4096 4096 NT_STATUS_OK
ReadX 10730 1245184 61440 61440 NT_STATUS_OK
ReadX 10730 1306624 4096 4096 NT_STATUS_OK
ReadX 10730 1310720 61440 61440 NT_STATUS_OK
ReadX 10730 1372160 4096 4096 NT_STATUS_OK
ReadX 10730 1376256 61440 61440 NT_STATUS_OK
ReadX 10730 1437696 4096 4096 NT_STATUS_OK
ReadX 10730 1441792 61440 61440 NT_STATUS_OK
ReadX 10730 1503232 4096 4096 NT_STATUS_OK
ReadX 10730 1507328 61440 61440 NT_STATUS_OK
ReadX 10730 1568768 4096 4096 NT_STATUS_OK
ReadX 10730 1572864 61440 61440 NT_STATUS_OK
ReadX 10730 1634304 4096 4096 NT_STATUS_OK
ReadX 10730 1638400 61440 61440 NT_STATUS_OK
ReadX 10730 1699840 4096 4096 NT_STATUS_OK
ReadX 10730 1703936 61440 61440 NT_STATUS_OK
ReadX 10730 1765376 4096 4096 NT_STATUS_OK
ReadX 10730 1769472 61440 61440 NT_STATUS_OK
ReadX 10730 1830912 4096 4096 NT_STATUS_OK
ReadX 10730 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10737 NT_STATUS_OK
QUERY_FILE_INFORMATION 10737 1004 NT_STATUS_OK
WriteX 10737 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10737 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10739 NT_STATUS_OK
WriteX 10739 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10739 258 NT_STATUS_OK
WriteX 10739 0 491 491 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10737 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10743 NT_STATUS_OK
WriteX 10743 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 258 NT_STATUS_OK
WriteX 10743 0 543 543 NT_STATUS_OK
Close 10743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Close 10732 NT_STATUS_OK
Close 10733 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10757 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 1004 NT_STATUS_OK
WriteX 10757 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 258 NT_STATUS_OK
WriteX 10757 0 2048 2048 NT_STATUS_OK
Close 10757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10758 0 4096 4096 NT_STATUS_OK
Flush 10758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10758 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10763 NT_STATUS_OK
WriteX 10763 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 258 NT_STATUS_OK
WriteX 10763 0 2048 2048 NT_STATUS_OK
Close 10763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10764 NT_STATUS_OK
ReadX 10764 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10768 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10769 NT_STATUS_OK
WriteX 10769 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
WriteX 10769 0 2048 2048 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 2048 2048 NT_STATUS_OK
ReadX 10748 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10764 0 4096 4096 NT_STATUS_OK
WriteX 10748 0 8192 8192 NT_STATUS_OK
WriteX 10749 0 4096 4096 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
ReadX 10764 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10774 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Close 10764 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10784 NT_STATUS_OK
ReadX 10784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10793 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10794 NT_STATUS_OK
QUERY_FILE_INFORMATION 10794 1004 NT_STATUS_OK
WriteX 10794 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10794 258 NT_STATUS_OK
WriteX 10794 0 2048 2048 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10797 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10802 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 258 NT_STATUS_OK
WriteX 10802 0 2048 2048 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
Flush 10795 NT_STATUS_OK
WriteX 10803 0 4096 4096 NT_STATUS_OK
Flush 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10803 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10797 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10805 NT_STATUS_OK
WriteX 10805 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10805 258 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Close 10805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10806 NT_STATUS_OK
ReadX 10806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10807 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10808 NT_STATUS_OK
WriteX 10808 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 4096 4096 NT_STATUS_OK
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Close 10797 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10784 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10782 NT_STATUS_OK
Close 10779 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10815 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10816 NT_STATUS_OK
WriteX 10816 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 258 NT_STATUS_OK
WriteX 10816 0 2048 2048 NT_STATUS_OK
Close 10816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10819 NT_STATUS_OK
ReadX 10819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10831 NT_STATUS_OK
QUERY_FILE_INFORMATION 10831 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Close 10817 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10833 NT_STATUS_OK
QUERY_FILE_INFORMATION 10833 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10848 NT_STATUS_OK
ReadX 10848 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10853 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 1004 NT_STATUS_OK
WriteX 10853 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 258 NT_STATUS_OK
WriteX 10853 0 2048 2048 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10858 NT_STATUS_OK
ReadX 10858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10860 NT_STATUS_OK
ReadX 10860 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10864 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10865 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 1004 NT_STATUS_OK
WriteX 10865 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 2048 2048 NT_STATUS_OK
Close 10865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10873 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 1004 NT_STATUS_OK
WriteX 10873 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 258 NT_STATUS_OK
WriteX 10873 0 2048 2048 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10854 0 4096 4096 NT_STATUS_OK
Flush 10854 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10874 0 4096 4096 NT_STATUS_OK
Flush 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10854 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10874 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10856 4096 16384 16384 NT_STATUS_OK
ReadX 10836 4096 16384 16384 NT_STATUS_OK
ReadX 10868 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 2048 2048 NT_STATUS_OK
WriteX 10876 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10877 NT_STATUS_OK
QUERY_FILE_INFORMATION 10877 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10860 NT_STATUS_OK
Close 10848 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10842 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10843 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10879 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10881 NT_STATUS_OK
QUERY_FILE_INFORMATION 10881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10884 4096 16384 16384 NT_STATUS_OK
WriteX 10884 0 4096 4096 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
WriteX 10886 0 4096 4096 NT_STATUS_OK
WriteX 10887 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10895 NT_STATUS_OK
ReadX 10895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10896 NT_STATUS_OK
ReadX 10896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10903 NT_STATUS_OK
ReadX 10903 0 8192 8192 NT_STATUS_OK
ReadX 10890 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10904 0 4096 4096 NT_STATUS_OK
ReadX 10904 4096 4096 4096 NT_STATUS_OK
ReadX 10904 8192 4096 4096 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
ReadX 10905 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10884 0 4096 4096 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
WriteX 10886 0 4096 4096 NT_STATUS_OK
WriteX 10887 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10910 NT_STATUS_OK
QUERY_FILE_INFORMATION 10910 1004 NT_STATUS_OK
WriteX 10910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10910 258 NT_STATUS_OK
WriteX 10910 0 2048 2048 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10911 NT_STATUS_OK
ReadX 10911 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
ReadX 10913 4096 4096 4096 NT_STATUS_OK
WriteX 10913 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 0 4096 4096 NT_STATUS_OK
ReadX 10915 4096 4096 4096 NT_STATUS_OK
WriteX 10915 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10916 NT_STATUS_OK
QUERY_FILE_INFORMATION 10916 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10903 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10886 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10896 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10897 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10899 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10894 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10918 0 4096 4096 NT_STATUS_OK
ReadX 10918 4096 4096 4096 NT_STATUS_OK
ReadX 10918 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
ReadX 10919 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10936 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 1004 NT_STATUS_OK
WriteX 10936 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 258 NT_STATUS_OK
WriteX 10936 0 2048 2048 NT_STATUS_OK
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10937 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10942 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1004 NT_STATUS_OK
WriteX 10942 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 258 NT_STATUS_OK
WriteX 10942 0 2048 2048 NT_STATUS_OK
Close 10942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10943 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10926 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10944 NT_STATUS_OK
QUERY_FILE_INFORMATION 10944 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10946 NT_STATUS_OK
QUERY_FILE_INFORMATION 10946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 61440 4096 4096 NT_STATUS_OK
ReadX 10948 126976 4096 4096 NT_STATUS_OK
WriteX 10948 0 65536 65536 NT_STATUS_OK
WriteX 10948 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 61440 4096 4096 NT_STATUS_OK
ReadX 10949 126976 4096 4096 NT_STATUS_OK
ReadX 10949 192512 4096 4096 NT_STATUS_OK
ReadX 10949 258048 4096 4096 NT_STATUS_OK
WriteX 10949 0 65536 65536 NT_STATUS_OK
WriteX 10949 65536 65536 65536 NT_STATUS_OK
WriteX 10949 131072 65536 65536 NT_STATUS_OK
WriteX 10949 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 61440 4096 4096 NT_STATUS_OK
ReadX 10950 126976 4096 4096 NT_STATUS_OK
ReadX 10950 192512 4096 4096 NT_STATUS_OK
ReadX 10950 258048 4096 4096 NT_STATUS_OK
ReadX 10950 323584 4096 4096 NT_STATUS_OK
ReadX 10950 389120 4096 4096 NT_STATUS_OK
ReadX 10950 454656 4096 4096 NT_STATUS_OK
ReadX 10950 520192 4096 4096 NT_STATUS_OK
WriteX 10950 0 65536 65536 NT_STATUS_OK
WriteX 10950 65536 65536 65536 NT_STATUS_OK
WriteX 10950 131072 65536 65536 NT_STATUS_OK
WriteX 10950 196608 65536 65536 NT_STATUS_OK
WriteX 10950 262144 65536 65536 NT_STATUS_OK
WriteX 10950 327680 65536 65536 NT_STATUS_OK
WriteX 10950 393216 65536 65536 NT_STATUS_OK
WriteX 10950 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10951 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10951 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10951 8192 4096 4096 NT_STATUS_OK
ReadX 10951 12288 4096 4096 NT_STATUS_OK
ReadX 10951 16384 4096 4096 NT_STATUS_OK
ReadX 10951 20480 4096 4096 NT_STATUS_OK
ReadX 10951 24576 4096 4096 NT_STATUS_OK
ReadX 10951 28672 4096 4096 NT_STATUS_OK
ReadX 10951 32768 4096 4096 NT_STATUS_OK
ReadX 10951 36864 4096 4096 NT_STATUS_OK
ReadX 10951 40960 4096 4096 NT_STATUS_OK
ReadX 10951 45056 4096 4096 NT_STATUS_OK
ReadX 10951 49152 4096 4096 NT_STATUS_OK
ReadX 10951 53248 4096 4096 NT_STATUS_OK
ReadX 10951 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10951 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10954 NT_STATUS_OK
WriteX 10954 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10954 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10954 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
WriteX 10954 0 57088 57088 NT_STATUS_OK
WriteX 10954 0 4096 4096 NT_STATUS_OK
Flush 10954 NT_STATUS_OK
Close 10951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10955 NT_STATUS_OK
SET_FILE_INFORMATION 10955 1004 NT_STATUS_OK
Close 10955 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
WriteX 10954 0 4096 4096 NT_STATUS_OK
Close 10954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10958 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10959 NT_STATUS_OK
WriteX 10959 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10959 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10959 1004 NT_STATUS_OK
WriteX 10959 0 51456 51456 NT_STATUS_OK
WriteX 10959 0 4096 4096 NT_STATUS_OK
Flush 10959 NT_STATUS_OK
SET_FILE_INFORMATION 10959 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10959 1004 NT_STATUS_OK
WriteX 10959 0 4096 4096 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10961 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10963 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10965 NT_STATUS_OK
Close 10965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10968 NT_STATUS_OK
WriteX 10968 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
WriteX 10968 0 53077 53077 NT_STATUS_OK
Close 10968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10969 NT_STATUS_OK
WriteX 10969 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10969 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10969 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10969 1004 NT_STATUS_OK
WriteX 10969 0 65536 65536 NT_STATUS_OK
WriteX 10969 65536 1856 1856 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Flush 10969 NT_STATUS_OK
SET_FILE_INFORMATION 10969 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10969 1004 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10978 NT_STATUS_OK
WriteX 10978 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10978 258 NT_STATUS_OK
WriteX 10978 0 7983 7983 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10980 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10983 NT_STATUS_OK
WriteX 10983 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10983 258 NT_STATUS_OK
WriteX 10983 0 65536 65536 NT_STATUS_OK
WriteX 10983 65536 65536 65536 NT_STATUS_OK
WriteX 10983 131072 65536 65536 NT_STATUS_OK
WriteX 10983 196608 65536 65536 NT_STATUS_OK
WriteX 10983 262144 65536 65536 NT_STATUS_OK
WriteX 10983 327680 65536 65536 NT_STATUS_OK
WriteX 10983 393216 65536 65536 NT_STATUS_OK
WriteX 10983 458752 46731 46731 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10984 NT_STATUS_OK
WriteX 10984 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10984 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10973 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10984 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10984 1004 NT_STATUS_OK
WriteX 10984 0 65536 65536 NT_STATUS_OK
WriteX 10984 65536 22848 22848 NT_STATUS_OK
WriteX 10984 0 4096 4096 NT_STATUS_OK
Flush 10984 NT_STATUS_OK
SET_FILE_INFORMATION 10984 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10984 1004 NT_STATUS_OK
WriteX 10984 0 4096 4096 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Close 10973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10986 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10988 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10989 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10989 1004 NT_STATUS_OK
ReadX 10989 8192 4096 4096 NT_STATUS_OK
ReadX 10989 12288 4096 4096 NT_STATUS_OK
ReadX 10989 16384 4096 4096 NT_STATUS_OK
ReadX 10989 20480 4096 4096 NT_STATUS_OK
ReadX 10989 24576 4096 4096 NT_STATUS_OK
ReadX 10989 28672 4096 4096 NT_STATUS_OK
ReadX 10989 32768 4096 4096 NT_STATUS_OK
ReadX 10989 36864 4096 4096 NT_STATUS_OK
ReadX 10989 40960 4096 4096 NT_STATUS_OK
ReadX 10989 45056 4096 4096 NT_STATUS_OK
ReadX 10989 49152 4096 4096 NT_STATUS_OK
ReadX 10989 53248 4096 4096 NT_STATUS_OK
ReadX 10989 57344 4096 4096 NT_STATUS_OK
ReadX 10989 61440 4096 4096 NT_STATUS_OK
ReadX 10989 65536 4096 4096 NT_STATUS_OK
ReadX 10989 69632 4096 4096 NT_STATUS_OK
ReadX 10989 73728 4096 4096 NT_STATUS_OK
ReadX 10989 77824 4096 4096 NT_STATUS_OK
ReadX 10989 81920 4096 4096 NT_STATUS_OK
ReadX 10989 86016 4096 4096 NT_STATUS_OK
ReadX 10989 90112 4096 4096 NT_STATUS_OK
ReadX 10989 94208 4096 4096 NT_STATUS_OK
ReadX 10989 98304 4096 4096 NT_STATUS_OK
ReadX 10989 102400 4096 4096 NT_STATUS_OK
ReadX 10989 106496 4096 4096 NT_STATUS_OK
ReadX 10989 110592 4096 4096 NT_STATUS_OK
ReadX 10989 114688 4096 4096 NT_STATUS_OK
ReadX 10989 118784 4096 4096 NT_STATUS_OK
ReadX 10989 122880 4096 4096 NT_STATUS_OK
ReadX 10989 126976 4096 4096 NT_STATUS_OK
ReadX 10989 131072 4096 4096 NT_STATUS_OK
ReadX 10989 135168 4096 4096 NT_STATUS_OK
ReadX 10989 139264 4096 4096 NT_STATUS_OK
ReadX 10989 143360 4096 4096 NT_STATUS_OK
ReadX 10989 147456 4096 4096 NT_STATUS_OK
ReadX 10989 151552 4096 4096 NT_STATUS_OK
ReadX 10989 155648 4096 4096 NT_STATUS_OK
ReadX 10989 159744 4096 4096 NT_STATUS_OK
ReadX 10989 163840 4096 4096 NT_STATUS_OK
ReadX 10989 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10989 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10992 NT_STATUS_OK
WriteX 10992 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10992 258 NT_STATUS_OK
Close 10989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10993 NT_STATUS_OK
SET_FILE_INFORMATION 10993 1004 NT_STATUS_OK
Close 10993 NT_STATUS_OK
WriteX 10992 0 42388 42388 NT_STATUS_OK
Close 10992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10994 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
ReadX 10996 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10997 NT_STATUS_OK
WriteX 10997 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10997 258 NT_STATUS_OK
SET_FILE_INFORMATION 10997 1004 NT_STATUS_OK
WriteX 10997 0 42652 42652 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10999 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
ReadX 11001 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11006 NT_STATUS_OK
WriteX 11006 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11006 258 NT_STATUS_OK
WriteX 11006 0 65536 65536 NT_STATUS_OK
WriteX 11006 65536 49 49 NT_STATUS_OK
Close 11006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 61440 61440 NT_STATUS_OK
ReadX 11007 61440 4096 4096 NT_STATUS_OK
ReadX 11007 65536 61440 61440 NT_STATUS_OK
ReadX 11007 126976 4096 4096 NT_STATUS_OK
ReadX 11007 131072 61440 61440 NT_STATUS_OK
ReadX 11007 192512 4096 4096 NT_STATUS_OK
ReadX 11007 196608 61440 61440 NT_STATUS_OK
ReadX 11007 258048 4096 4096 NT_STATUS_OK
ReadX 11007 262144 61440 61440 NT_STATUS_OK
ReadX 11007 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 61440 61440 NT_STATUS_OK
ReadX 11008 61440 4096 4096 NT_STATUS_OK
ReadX 11008 65536 61440 61440 NT_STATUS_OK
ReadX 11008 126976 4096 4096 NT_STATUS_OK
ReadX 11008 131072 61440 61440 NT_STATUS_OK
ReadX 11008 192512 4096 4096 NT_STATUS_OK
ReadX 11008 196608 61440 61440 NT_STATUS_OK
ReadX 11008 258048 4096 4096 NT_STATUS_OK
ReadX 11008 262144 61440 61440 NT_STATUS_OK
ReadX 11008 323584 4096 4096 NT_STATUS_OK
ReadX 11008 327680 61440 61440 NT_STATUS_OK
ReadX 11008 389120 4096 4096 NT_STATUS_OK
ReadX 11008 393216 61440 61440 NT_STATUS_OK
ReadX 11008 454656 4096 4096 NT_STATUS_OK
ReadX 11008 458752 61440 61440 NT_STATUS_OK
ReadX 11008 520192 4096 4096 NT_STATUS_OK
ReadX 11008 524288 61440 61440 NT_STATUS_OK
ReadX 11008 585728 4096 4096 NT_STATUS_OK
ReadX 11008 589824 61440 61440 NT_STATUS_OK
ReadX 11008 651264 4096 4096 NT_STATUS_OK
ReadX 11008 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 61440 61440 NT_STATUS_OK
ReadX 11009 61440 4096 4096 NT_STATUS_OK
ReadX 11009 65536 61440 61440 NT_STATUS_OK
ReadX 11009 126976 4096 4096 NT_STATUS_OK
ReadX 11009 131072 61440 61440 NT_STATUS_OK
ReadX 11009 192512 4096 4096 NT_STATUS_OK
ReadX 11009 196608 61440 61440 NT_STATUS_OK
ReadX 11009 258048 4096 4096 NT_STATUS_OK
ReadX 11009 262144 61440 61440 NT_STATUS_OK
ReadX 11009 323584 4096 4096 NT_STATUS_OK
ReadX 11009 327680 61440 61440 NT_STATUS_OK
ReadX 11009 389120 4096 4096 NT_STATUS_OK
ReadX 11009 393216 61440 61440 NT_STATUS_OK
ReadX 11009 454656 4096 4096 NT_STATUS_OK
ReadX 11009 458752 61440 61440 NT_STATUS_OK
ReadX 11009 520192 4096 4096 NT_STATUS_OK
ReadX 11009 524288 61440 61440 NT_STATUS_OK
ReadX 11009 585728 4096 4096 NT_STATUS_OK
ReadX 11009 589824 61440 61440 NT_STATUS_OK
ReadX 11009 651264 4096 4096 NT_STATUS_OK
ReadX 11009 655360 61440 61440 NT_STATUS_OK
ReadX 11009 716800 4096 4096 NT_STATUS_OK
ReadX 11009 720896 61440 61440 NT_STATUS_OK
ReadX 11009 782336 4096 4096 NT_STATUS_OK
ReadX 11009 786432 61440 61440 NT_STATUS_OK
ReadX 11009 847872 4096 4096 NT_STATUS_OK
ReadX 11009 851968 61440 61440 NT_STATUS_OK
ReadX 11009 913408 4096 4096 NT_STATUS_OK
ReadX 11009 917504 61440 61440 NT_STATUS_OK
ReadX 11009 978944 4096 4096 NT_STATUS_OK
ReadX 11009 983040 61440 61440 NT_STATUS_OK
ReadX 11009 1044480 4096 4096 NT_STATUS_OK
ReadX 11009 1048576 61440 61440 NT_STATUS_OK
ReadX 11009 1110016 4096 4096 NT_STATUS_OK
ReadX 11009 1114112 61440 61440 NT_STATUS_OK
ReadX 11009 1175552 4096 4096 NT_STATUS_OK
ReadX 11009 1179648 61440 61440 NT_STATUS_OK
ReadX 11009 1241088 4096 4096 NT_STATUS_OK
ReadX 11009 1245184 61440 61440 NT_STATUS_OK
ReadX 11009 1306624 4096 4096 NT_STATUS_OK
ReadX 11009 1310720 61440 61440 NT_STATUS_OK
ReadX 11009 1372160 4096 4096 NT_STATUS_OK
ReadX 11009 1376256 61440 61440 NT_STATUS_OK
ReadX 11009 1437696 4096 4096 NT_STATUS_OK
ReadX 11009 1441792 61440 61440 NT_STATUS_OK
ReadX 11009 1503232 4096 4096 NT_STATUS_OK
ReadX 11009 1507328 61440 61440 NT_STATUS_OK
ReadX 11009 1568768 4096 4096 NT_STATUS_OK
ReadX 11009 1572864 61440 61440 NT_STATUS_OK
ReadX 11009 1634304 4096 4096 NT_STATUS_OK
ReadX 11009 1638400 61440 61440 NT_STATUS_OK
ReadX 11009 1699840 4096 4096 NT_STATUS_OK
ReadX 11009 1703936 61440 61440 NT_STATUS_OK
ReadX 11009 1765376 4096 4096 NT_STATUS_OK
ReadX 11009 1769472 61440 61440 NT_STATUS_OK
ReadX 11009 1830912 4096 4096 NT_STATUS_OK
ReadX 11009 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11011 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 1005 NT_STATUS_OK
ReadX 11011 2156 24 24 NT_STATUS_OK
ReadX 11011 2139 276 276 NT_STATUS_OK
ReadX 11011 2136 14 14 NT_STATUS_OK
ReadX 11011 2136 7 7 NT_STATUS_OK
ReadX 11011 2138 12 12 NT_STATUS_OK
ReadX 11011 2137 8 8 NT_STATUS_OK
ReadX 11011 2135 15 15 NT_STATUS_OK
ReadX 11011 0 16 16 NT_STATUS_OK
ReadX 11011 16 2048 2048 NT_STATUS_OK
ReadX 11011 2064 2048 2048 NT_STATUS_OK
ReadX 11011 257 2048 2048 NT_STATUS_OK
ReadX 11011 385 2048 2048 NT_STATUS_OK
ReadX 11011 513 2048 2048 NT_STATUS_OK
ReadX 11011 641 2048 2048 NT_STATUS_OK
ReadX 11011 769 2048 2048 NT_STATUS_OK
ReadX 11011 897 2048 2048 NT_STATUS_OK
ReadX 11011 1025 2048 2048 NT_STATUS_OK
ReadX 11011 1153 2048 2048 NT_STATUS_OK
ReadX 11011 1281 2048 2048 NT_STATUS_OK
ReadX 11011 1409 2048 2048 NT_STATUS_OK
ReadX 11011 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11013 NT_STATUS_OK
Close 11013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11016 NT_STATUS_OK
WriteX 11016 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11016 258 NT_STATUS_OK
WriteX 11016 0 10575 10575 NT_STATUS_OK
Flush 11016 NT_STATUS_OK
Close 11016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11017 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
Close 11011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11021 NT_STATUS_OK
LockX 11021 2147483538 1 NT_STATUS_OK
UnlockX 11021 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11021 1005 NT_STATUS_OK
ReadX 11021 0 512 512 NT_STATUS_OK
ReadX 11021 512 512 512 NT_STATUS_OK
ReadX 11021 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11021 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11021 1004 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11022 NT_STATUS_OK
QUERY_FILE_INFORMATION 11022 1005 NT_STATUS_OK
ReadX 11022 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11023 NT_STATUS_OK
LockX 11023 2147483538 1 NT_STATUS_OK
UnlockX 11023 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11023 1005 NT_STATUS_OK
ReadX 11023 0 512 512 NT_STATUS_OK
ReadX 11023 512 512 512 NT_STATUS_OK
ReadX 11023 1024 512 512 NT_STATUS_OK
ReadX 11023 288 20 20 NT_STATUS_OK
ReadX 11023 308 2084 2084 NT_STATUS_OK
ReadX 11023 388 2084 2084 NT_STATUS_OK
ReadX 11023 388 2084 2084 NT_STATUS_OK
ReadX 11010 2157 1386 1386 NT_STATUS_OK
ReadX 11023 2472 399 399 NT_STATUS_OK
ReadX 11023 3072 1536 1536 NT_STATUS_OK
ReadX 11023 544 149 149 NT_STATUS_OK
ReadX 11023 693 485 485 NT_STATUS_OK
Close 11023 NT_STATUS_OK
ReadX 11010 2157 4096 4096 NT_STATUS_OK
ReadX 11010 6253 4096 4096 NT_STATUS_OK
ReadX 11010 10349 4096 4096 NT_STATUS_OK
ReadX 11010 14445 4096 4096 NT_STATUS_OK
ReadX 11010 18541 4096 4096 NT_STATUS_OK
ReadX 11010 22637 256 256 NT_STATUS_OK
ReadX 11010 22893 4096 4096 NT_STATUS_OK
ReadX 11010 26989 4096 4096 NT_STATUS_OK
ReadX 11010 31085 4096 4096 NT_STATUS_OK
ReadX 11010 35181 4096 4096 NT_STATUS_OK
ReadX 11010 39277 4096 4096 NT_STATUS_OK
ReadX 11010 43373 4096 4096 NT_STATUS_OK
ReadX 11010 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11010 2157 1024 1024 NT_STATUS_OK
ReadX 11010 1667 4688 4688 NT_STATUS_OK
ReadX 11010 6355 3516 3516 NT_STATUS_OK
ReadX 11010 9871 16384 16384 NT_STATUS_OK
ReadX 11010 26255 3771 3771 NT_STATUS_OK
ReadX 11010 30026 2048 2048 NT_STATUS_OK
ReadX 11010 32074 1024 1024 NT_STATUS_OK
ReadX 11010 33098 6652 6652 NT_STATUS_OK
ReadX 11010 39750 16384 16384 NT_STATUS_OK
ReadX 11010 56134 10496 10496 NT_STATUS_OK
ReadX 11010 66630 1784 1784 NT_STATUS_OK
ReadX 11010 68414 90 90 NT_STATUS_OK
ReadX 11010 68504 273 273 NT_STATUS_OK
ReadX 11010 68777 1600 1600 NT_STATUS_OK
ReadX 11010 70377 640 640 NT_STATUS_OK
ReadX 11010 71017 1280 1280 NT_STATUS_OK
ReadX 11010 72297 8464 8464 NT_STATUS_OK
ReadX 11010 80761 158 158 NT_STATUS_OK
ReadX 11010 80919 912 912 NT_STATUS_OK
ReadX 11010 81831 1980 1980 NT_STATUS_OK
ReadX 11010 83811 2256 2256 NT_STATUS_OK
ReadX 11010 86067 400 400 NT_STATUS_OK
ReadX 11010 86467 252 252 NT_STATUS_OK
ReadX 11010 86719 42 42 NT_STATUS_OK
ReadX 11010 86761 725 725 NT_STATUS_OK
ReadX 11010 2009 512 512 NT_STATUS_OK
ReadX 11010 3895 9 9 NT_STATUS_OK
ReadX 11010 3781 46 46 NT_STATUS_OK
ReadX 11010 4059 92 92 NT_STATUS_OK
ReadX 11010 3781 92 92 NT_STATUS_OK
ReadX 11010 3986 184 184 NT_STATUS_OK
ReadX 11010 3987 16384 16384 NT_STATUS_OK
ReadX 11010 3902 16384 16384 NT_STATUS_OK
ReadX 11010 3781 10240 10240 NT_STATUS_OK
ReadX 11010 3821 16384 16384 NT_STATUS_OK
ReadX 11010 3891 935 935 NT_STATUS_OK
ReadX 11010 4060 10240 10240 NT_STATUS_OK
ReadX 11010 4059 184 184 NT_STATUS_OK
ReadX 11010 256 184 184 NT_STATUS_OK
ReadX 11010 256 1026 1026 NT_STATUS_OK
ReadX 11010 3901 326 326 NT_STATUS_OK
ReadX 11010 3899 652 652 NT_STATUS_OK
ReadX 11010 256 2 2 NT_STATUS_OK
ReadX 11010 258 4948 4948 NT_STATUS_OK
Close 11010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11028 NT_STATUS_OK
WriteX 11028 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 258 NT_STATUS_OK
WriteX 11028 0 65536 65536 NT_STATUS_OK
WriteX 11028 65536 65536 65536 NT_STATUS_OK
WriteX 11028 131072 65536 65536 NT_STATUS_OK
WriteX 11028 196608 65536 65536 NT_STATUS_OK
WriteX 11028 262144 65536 65536 NT_STATUS_OK
WriteX 11028 327680 65536 65536 NT_STATUS_OK
WriteX 11028 393216 65536 65536 NT_STATUS_OK
WriteX 11028 458752 65536 65536 NT_STATUS_OK
WriteX 11028 524288 65536 65536 NT_STATUS_OK
WriteX 11028 589824 35257 35257 NT_STATUS_OK
Close 11028 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11030 NT_STATUS_OK
Close 11030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11033 NT_STATUS_OK
WriteX 11033 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11033 258 NT_STATUS_OK
WriteX 11033 0 65536 65536 NT_STATUS_OK
WriteX 11033 65536 65536 65536 NT_STATUS_OK
WriteX 11033 131072 65536 65536 NT_STATUS_OK
WriteX 11033 196608 65536 65536 NT_STATUS_OK
WriteX 11033 262144 65536 65536 NT_STATUS_OK
WriteX 11033 327680 65536 65536 NT_STATUS_OK
WriteX 11033 393216 65536 65536 NT_STATUS_OK
WriteX 11033 458752 65536 65536 NT_STATUS_OK
WriteX 11033 524288 65536 65536 NT_STATUS_OK
WriteX 11033 589824 57598 57598 NT_STATUS_OK
Close 11033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11035 NT_STATUS_OK
WriteX 11035 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11035 258 NT_STATUS_OK
WriteX 11035 0 12543 12543 NT_STATUS_OK
Flush 11035 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11037 NT_STATUS_OK
Close 11037 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11039 NT_STATUS_OK
ReadX 11039 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11041 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 1005 NT_STATUS_OK
ReadX 11041 1938 24 24 NT_STATUS_OK
ReadX 11041 1920 276 276 NT_STATUS_OK
ReadX 11041 1918 14 14 NT_STATUS_OK
ReadX 11041 1918 7 7 NT_STATUS_OK
ReadX 11041 1919 12 12 NT_STATUS_OK
ReadX 11041 1919 8 8 NT_STATUS_OK
ReadX 11041 1917 15 15 NT_STATUS_OK
ReadX 11041 0 16 16 NT_STATUS_OK
ReadX 11041 16 2048 2048 NT_STATUS_OK
ReadX 11041 2064 2048 2048 NT_STATUS_OK
ReadX 11041 257 2048 2048 NT_STATUS_OK
ReadX 11041 385 2048 2048 NT_STATUS_OK
ReadX 11041 513 2048 2048 NT_STATUS_OK
ReadX 11041 641 2048 2048 NT_STATUS_OK
ReadX 11041 769 2048 2048 NT_STATUS_OK
ReadX 11041 897 2048 2048 NT_STATUS_OK
ReadX 11041 1025 2048 2048 NT_STATUS_OK
ReadX 11041 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11046 NT_STATUS_OK
WriteX 11046 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11046 258 NT_STATUS_OK
WriteX 11046 0 11588 11588 NT_STATUS_OK
Flush 11046 NT_STATUS_OK
Close 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11047 NT_STATUS_OK
Close 11047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11051 NT_STATUS_OK
WriteX 11051 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11051 258 NT_STATUS_OK
WriteX 11051 0 11615 11615 NT_STATUS_OK
Flush 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11057 NT_STATUS_OK
Close 11057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11060 NT_STATUS_OK
WriteX 11060 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11060 258 NT_STATUS_OK
WriteX 11060 0 65536 65536 NT_STATUS_OK
WriteX 11060 65536 16050 16050 NT_STATUS_OK
Close 11060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11040 1939 64 64 NT_STATUS_OK
ReadX 11040 128 248 248 NT_STATUS_OK
ReadX 11040 128 568 568 NT_STATUS_OK
ReadX 11040 3872 1536 1536 NT_STATUS_OK
ReadX 11040 3456 2560 2560 NT_STATUS_OK
ReadX 11040 3136 512 512 NT_STATUS_OK
ReadX 11040 2880 4096 4096 NT_STATUS_OK
ReadX 11040 3264 3072 3072 NT_STATUS_OK
ReadX 11040 320 4096 4096 NT_STATUS_OK
ReadX 11040 1024 4096 4096 NT_STATUS_OK
ReadX 11040 3616 4096 4096 NT_STATUS_OK
ReadX 11040 1939 64 64 NT_STATUS_OK
ReadX 11040 128 248 248 NT_STATUS_OK
ReadX 11040 128 608 608 NT_STATUS_OK
ReadX 11040 2858 1024 1024 NT_STATUS_OK
ReadX 11040 2810 4096 4096 NT_STATUS_OK
ReadX 11040 2826 4096 4096 NT_STATUS_OK
ReadX 11040 2580 2048 2048 NT_STATUS_OK
ReadX 11040 2800 2560 2560 NT_STATUS_OK
ReadX 11040 2100 4096 4096 NT_STATUS_OK
ReadX 11040 2084 4096 4096 NT_STATUS_OK
ReadX 11040 868 4096 4096 NT_STATUS_OK
ReadX 11040 2324 4096 4096 NT_STATUS_OK
ReadX 11040 884 4096 4096 NT_STATUS_OK
ReadX 11040 2604 1024 1024 NT_STATUS_OK
ReadX 11040 580 4096 4096 NT_STATUS_OK
ReadX 11040 596 4096 4096 NT_STATUS_OK
ReadX 11040 2752 4096 4096 NT_STATUS_OK
ReadX 11040 2842 1024 1024 NT_STATUS_OK
ReadX 11040 660 4096 4096 NT_STATUS_OK
ReadX 11040 2720 4096 4096 NT_STATUS_OK
ReadX 11040 2736 4096 4096 NT_STATUS_OK
ReadX 11040 628 4096 4096 NT_STATUS_OK
ReadX 11040 2704 4096 4096 NT_STATUS_OK
ReadX 11040 1556 4096 4096 NT_STATUS_OK
ReadX 11040 576 4096 4096 NT_STATUS_OK
ReadX 11040 3168 1536 1536 NT_STATUS_OK
ReadX 11040 832 4096 4096 NT_STATUS_OK
ReadX 11040 1088 4096 4096 NT_STATUS_OK
ReadX 11040 1344 4096 4096 NT_STATUS_OK
ReadX 11040 1600 4096 4096 NT_STATUS_OK
ReadX 11040 1856 4096 4096 NT_STATUS_OK
ReadX 11040 2112 4096 4096 NT_STATUS_OK
ReadX 11040 1892 4096 4096 NT_STATUS_OK
ReadX 11040 820 4096 4096 NT_STATUS_OK
ReadX 11040 788 4096 4096 NT_STATUS_OK
ReadX 11040 1604 4096 4096 NT_STATUS_OK
ReadX 11040 3648 4096 4096 NT_STATUS_OK
ReadX 11040 2608 4096 4096 NT_STATUS_OK
ReadX 11040 548 4096 4096 NT_STATUS_OK
ReadX 11040 740 4096 4096 NT_STATUS_OK
ReadX 11040 1344 4096 4096 NT_STATUS_OK
ReadX 11040 3392 4096 4096 NT_STATUS_OK
ReadX 11040 3904 4096 4096 NT_STATUS_OK
ReadX 11040 644 4096 4096 NT_STATUS_OK
ReadX 11040 676 4096 4096 NT_STATUS_OK
ReadX 11040 2688 4096 4096 NT_STATUS_OK
ReadX 11040 320 4096 4096 NT_STATUS_OK
ReadX 11040 900 4096 4096 NT_STATUS_OK
ReadX 11040 1908 4096 4096 NT_STATUS_OK
ReadX 11040 852 4096 4096 NT_STATUS_OK
ReadX 11040 724 4096 4096 NT_STATUS_OK
ReadX 11040 2292 4096 4096 NT_STATUS_OK
ReadX 11040 612 4096 4096 NT_STATUS_OK
ReadX 11040 388 4096 4096 NT_STATUS_OK
ReadX 11040 2368 4096 4096 NT_STATUS_OK
ReadX 11040 2624 4096 4096 NT_STATUS_OK
ReadX 11040 500 4096 4096 NT_STATUS_OK
ReadX 11040 356 4096 4096 NT_STATUS_OK
ReadX 11040 1024 4096 4096 NT_STATUS_OK
ReadX 11040 576 4096 4096 NT_STATUS_OK
ReadX 11040 340 4096 4096 NT_STATUS_OK
ReadX 11040 420 4096 4096 NT_STATUS_OK
ReadX 11040 1600 4096 4096 NT_STATUS_OK
ReadX 11040 404 4096 4096 NT_STATUS_OK
ReadX 11040 1428 4096 4096 NT_STATUS_OK
ReadX 11040 2656 4096 4096 NT_STATUS_OK
ReadX 11040 2624 4096 4096 NT_STATUS_OK
ReadX 11040 452 4096 4096 NT_STATUS_OK
ReadX 11040 692 4096 4096 NT_STATUS_OK
ReadX 11040 564 4096 4096 NT_STATUS_OK
ReadX 11040 372 4096 4096 NT_STATUS_OK
ReadX 11040 468 4096 4096 NT_STATUS_OK
ReadX 11040 484 4096 4096 NT_STATUS_OK
ReadX 11040 1088 4096 4096 NT_STATUS_OK
ReadX 11040 1924 4096 4096 NT_STATUS_OK
ReadX 11040 2768 4096 4096 NT_STATUS_OK
ReadX 11040 832 4096 4096 NT_STATUS_OK
ReadX 11040 836 4096 4096 NT_STATUS_OK
ReadX 11040 1856 4096 4096 NT_STATUS_OK
ReadX 11040 2640 4096 4096 NT_STATUS_OK
ReadX 11040 436 4096 4096 NT_STATUS_OK
ReadX 11040 1828 4096 4096 NT_STATUS_OK
ReadX 11040 804 4096 4096 NT_STATUS_OK
ReadX 11040 1860 4096 4096 NT_STATUS_OK
ReadX 11040 1812 4096 4096 NT_STATUS_OK
ReadX 11040 756 4096 4096 NT_STATUS_OK
ReadX 11040 1636 4096 4096 NT_STATUS_OK
ReadX 11040 772 4096 4096 NT_STATUS_OK
ReadX 11040 2036 4096 4096 NT_STATUS_OK
ReadX 11040 1220 4096 4096 NT_STATUS_OK
ReadX 11040 1652 4096 4096 NT_STATUS_OK
ReadX 11040 2588 4096 4096 NT_STATUS_OK
ReadX 11040 916 4096 4096 NT_STATUS_OK
ReadX 11040 260 4096 4096 NT_STATUS_OK
ReadX 11040 932 4096 4096 NT_STATUS_OK
ReadX 11040 2624 4096 4096 NT_STATUS_OK
ReadX 11040 308 4096 4096 NT_STATUS_OK
ReadX 11040 292 4096 4096 NT_STATUS_OK
ReadX 11040 1140 4096 4096 NT_STATUS_OK
ReadX 11040 276 4096 4096 NT_STATUS_OK
ReadX 11040 2020 4096 4096 NT_STATUS_OK
ReadX 11040 2880 4096 4096 NT_STATUS_OK
ReadX 11040 516 4096 4096 NT_STATUS_OK
ReadX 11040 1844 4096 4096 NT_STATUS_OK
ReadX 11040 1124 4096 4096 NT_STATUS_OK
ReadX 11040 3136 4096 4096 NT_STATUS_OK
ReadX 11040 324 4096 4096 NT_STATUS_OK
ReadX 11040 1156 4096 4096 NT_STATUS_OK
ReadX 11040 1172 4096 4096 NT_STATUS_OK
ReadX 11040 2112 4096 4096 NT_STATUS_OK
ReadX 11040 2368 4096 4096 NT_STATUS_OK
ReadX 11040 964 4096 4096 NT_STATUS_OK
ReadX 11040 980 4096 4096 NT_STATUS_OK
ReadX 11040 1012 4096 4096 NT_STATUS_OK
ReadX 11040 532 4096 4096 NT_STATUS_OK
ReadX 11040 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11040 1620 4096 4096 NT_STATUS_OK
ReadX 11040 1604 4096 4096 NT_STATUS_OK
ReadX 11040 2116 4096 4096 NT_STATUS_OK
ReadX 11040 2132 4096 4096 NT_STATUS_OK
ReadX 11040 2148 4096 4096 NT_STATUS_OK
ReadX 11040 2276 4096 4096 NT_STATUS_OK
ReadX 11040 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11062 NT_STATUS_OK
Close 11062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11065 NT_STATUS_OK
QUERY_FILE_INFORMATION 11020 1004 NT_STATUS_OK
Close 11020 NT_STATUS_OK
WriteX 11065 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11065 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11022 1004 NT_STATUS_OK
Close 11022 NT_STATUS_OK
WriteX 11065 0 65536 65536 NT_STATUS_OK
WriteX 11065 65536 64850 64850 NT_STATUS_OK
Close 11065 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11067 NT_STATUS_OK
WriteX 11067 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 258 NT_STATUS_OK
ReadX 11040 2068 4096 4096 NT_STATUS_OK
ReadX 11040 1588 4096 4096 NT_STATUS_OK
ReadX 11040 1572 4096 4096 NT_STATUS_OK
WriteX 11067 0 18630 18630 NT_STATUS_OK
Flush 11067 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11040 612 4096 4096 NT_STATUS_OK
ReadX 11040 564 4096 4096 NT_STATUS_OK
ReadX 11040 1876 4096 4096 NT_STATUS_OK
ReadX 11040 628 4096 4096 NT_STATUS_OK
ReadX 11040 740 4096 4096 NT_STATUS_OK
ReadX 11040 724 4096 4096 NT_STATUS_OK
ReadX 11040 644 4096 4096 NT_STATUS_OK
ReadX 11040 2324 4096 4096 NT_STATUS_OK
ReadX 11040 660 4096 4096 NT_STATUS_OK
ReadX 11040 852 4096 4096 NT_STATUS_OK
ReadX 11040 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11040 2368 4096 4096 NT_STATUS_OK
ReadX 11040 1024 4096 4096 NT_STATUS_OK
ReadX 11040 320 4096 4096 NT_STATUS_OK
ReadX 11040 580 4096 4096 NT_STATUS_OK
ReadX 11040 3136 512 512 NT_STATUS_OK
ReadX 11040 2880 4096 4096 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 61440 4096 4096 NT_STATUS_OK
ReadX 11072 126976 4096 4096 NT_STATUS_OK
WriteX 11072 0 65536 65536 NT_STATUS_OK
WriteX 11072 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 61440 4096 4096 NT_STATUS_OK
ReadX 11073 126976 4096 4096 NT_STATUS_OK
ReadX 11073 192512 4096 4096 NT_STATUS_OK
ReadX 11073 258048 4096 4096 NT_STATUS_OK
WriteX 11073 0 65536 65536 NT_STATUS_OK
WriteX 11073 65536 65536 65536 NT_STATUS_OK
WriteX 11073 131072 65536 65536 NT_STATUS_OK
WriteX 11073 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 61440 4096 4096 NT_STATUS_OK
ReadX 11074 126976 4096 4096 NT_STATUS_OK
ReadX 11074 192512 4096 4096 NT_STATUS_OK
ReadX 11074 258048 4096 4096 NT_STATUS_OK
ReadX 11074 323584 4096 4096 NT_STATUS_OK
ReadX 11074 389120 4096 4096 NT_STATUS_OK
ReadX 11074 454656 4096 4096 NT_STATUS_OK
ReadX 11074 520192 4096 4096 NT_STATUS_OK
WriteX 11074 0 65536 65536 NT_STATUS_OK
WriteX 11074 65536 65536 65536 NT_STATUS_OK
WriteX 11074 131072 65536 65536 NT_STATUS_OK
WriteX 11074 196608 65536 65536 NT_STATUS_OK
WriteX 11074 262144 65536 65536 NT_STATUS_OK
WriteX 11074 327680 65536 65536 NT_STATUS_OK
WriteX 11074 393216 65536 65536 NT_STATUS_OK
WriteX 11074 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11077 NT_STATUS_OK
WriteX 11077 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11077 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11075 0 8192 8192 NT_STATUS_OK
Flush 11075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11075 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11075 0 8192 8192 NT_STATUS_OK
Flush 11075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11075 0 8192 8192 NT_STATUS_OK
Flush 11075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11075 0 8192 8192 NT_STATUS_OK
Flush 11075 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11039 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11082 NT_STATUS_OK
WriteX 11082 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 62591 62591 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
WriteX 11087 0 10845 10845 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11092 NT_STATUS_OK
WriteX 11092 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11092 258 NT_STATUS_OK
WriteX 11092 0 30118 30118 NT_STATUS_OK
Close 11092 NT_STATUS_OK
WriteX 11075 0 4096 4096 NT_STATUS_OK
WriteX 11077 0 64 64 NT_STATUS_OK
Close 11077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 61440 61440 NT_STATUS_OK
ReadX 11094 61440 4096 4096 NT_STATUS_OK
ReadX 11094 65536 61440 61440 NT_STATUS_OK
ReadX 11094 126976 4096 4096 NT_STATUS_OK
ReadX 11094 131072 61440 61440 NT_STATUS_OK
ReadX 11094 192512 4096 4096 NT_STATUS_OK
ReadX 11094 196608 61440 61440 NT_STATUS_OK
ReadX 11094 258048 4096 4096 NT_STATUS_OK
ReadX 11094 262144 61440 61440 NT_STATUS_OK
ReadX 11094 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 61440 61440 NT_STATUS_OK
ReadX 11095 61440 4096 4096 NT_STATUS_OK
ReadX 11095 65536 61440 61440 NT_STATUS_OK
ReadX 11095 126976 4096 4096 NT_STATUS_OK
ReadX 11095 131072 61440 61440 NT_STATUS_OK
ReadX 11095 192512 4096 4096 NT_STATUS_OK
ReadX 11095 196608 61440 61440 NT_STATUS_OK
ReadX 11095 258048 4096 4096 NT_STATUS_OK
ReadX 11095 262144 61440 61440 NT_STATUS_OK
ReadX 11095 323584 4096 4096 NT_STATUS_OK
ReadX 11095 327680 61440 61440 NT_STATUS_OK
ReadX 11095 389120 4096 4096 NT_STATUS_OK
ReadX 11095 393216 61440 61440 NT_STATUS_OK
ReadX 11095 454656 4096 4096 NT_STATUS_OK
ReadX 11095 458752 61440 61440 NT_STATUS_OK
ReadX 11095 520192 4096 4096 NT_STATUS_OK
ReadX 11095 524288 61440 61440 NT_STATUS_OK
ReadX 11095 585728 4096 4096 NT_STATUS_OK
ReadX 11095 589824 61440 61440 NT_STATUS_OK
ReadX 11095 651264 4096 4096 NT_STATUS_OK
ReadX 11095 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 61440 61440 NT_STATUS_OK
ReadX 11096 61440 4096 4096 NT_STATUS_OK
ReadX 11096 65536 61440 61440 NT_STATUS_OK
ReadX 11096 126976 4096 4096 NT_STATUS_OK
ReadX 11096 131072 61440 61440 NT_STATUS_OK
ReadX 11096 192512 4096 4096 NT_STATUS_OK
ReadX 11096 196608 61440 61440 NT_STATUS_OK
ReadX 11096 258048 4096 4096 NT_STATUS_OK
ReadX 11096 262144 61440 61440 NT_STATUS_OK
ReadX 11096 323584 4096 4096 NT_STATUS_OK
ReadX 11096 327680 61440 61440 NT_STATUS_OK
ReadX 11096 389120 4096 4096 NT_STATUS_OK
ReadX 11096 393216 61440 61440 NT_STATUS_OK
ReadX 11096 454656 4096 4096 NT_STATUS_OK
ReadX 11096 458752 61440 61440 NT_STATUS_OK
ReadX 11096 520192 4096 4096 NT_STATUS_OK
ReadX 11096 524288 61440 61440 NT_STATUS_OK
ReadX 11096 585728 4096 4096 NT_STATUS_OK
ReadX 11096 589824 61440 61440 NT_STATUS_OK
ReadX 11096 651264 4096 4096 NT_STATUS_OK
ReadX 11096 655360 61440 61440 NT_STATUS_OK
ReadX 11096 716800 4096 4096 NT_STATUS_OK
ReadX 11096 720896 61440 61440 NT_STATUS_OK
ReadX 11096 782336 4096 4096 NT_STATUS_OK
ReadX 11096 786432 61440 61440 NT_STATUS_OK
ReadX 11096 847872 4096 4096 NT_STATUS_OK
ReadX 11096 851968 61440 61440 NT_STATUS_OK
ReadX 11096 913408 4096 4096 NT_STATUS_OK
ReadX 11096 917504 61440 61440 NT_STATUS_OK
ReadX 11096 978944 4096 4096 NT_STATUS_OK
ReadX 11096 983040 61440 61440 NT_STATUS_OK
ReadX 11096 1044480 4096 4096 NT_STATUS_OK
ReadX 11096 1048576 61440 61440 NT_STATUS_OK
ReadX 11096 1110016 4096 4096 NT_STATUS_OK
ReadX 11096 1114112 61440 61440 NT_STATUS_OK
ReadX 11096 1175552 4096 4096 NT_STATUS_OK
ReadX 11096 1179648 61440 61440 NT_STATUS_OK
ReadX 11096 1241088 4096 4096 NT_STATUS_OK
ReadX 11096 1245184 61440 61440 NT_STATUS_OK
ReadX 11096 1306624 4096 4096 NT_STATUS_OK
ReadX 11096 1310720 61440 61440 NT_STATUS_OK
ReadX 11096 1372160 4096 4096 NT_STATUS_OK
ReadX 11096 1376256 61440 61440 NT_STATUS_OK
ReadX 11096 1437696 4096 4096 NT_STATUS_OK
ReadX 11096 1441792 61440 61440 NT_STATUS_OK
ReadX 11096 1503232 4096 4096 NT_STATUS_OK
ReadX 11096 1507328 61440 61440 NT_STATUS_OK
ReadX 11096 1568768 4096 4096 NT_STATUS_OK
ReadX 11096 1572864 61440 61440 NT_STATUS_OK
ReadX 11096 1634304 4096 4096 NT_STATUS_OK
ReadX 11096 1638400 61440 61440 NT_STATUS_OK
ReadX 11096 1699840 4096 4096 NT_STATUS_OK
ReadX 11096 1703936 61440 61440 NT_STATUS_OK
ReadX 11096 1765376 4096 4096 NT_STATUS_OK
ReadX 11096 1769472 61440 61440 NT_STATUS_OK
ReadX 11096 1830912 4096 4096 NT_STATUS_OK
ReadX 11096 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
ReadX 11101 4096 4096 4096 NT_STATUS_OK
ReadX 11101 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11105 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11106 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 8192 8192 NT_STATUS_OK
ReadX 11109 8192 8192 8192 NT_STATUS_OK
ReadX 11109 16384 8192 8192 NT_STATUS_OK
ReadX 11109 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11114 NT_STATUS_OK
WriteX 11114 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 10438 10438 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11115 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11118 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11120 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11121 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11122 NT_STATUS_OK
Close 11122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
ReadX 11123 4096 4096 4096 NT_STATUS_OK
ReadX 11123 8192 4096 4096 NT_STATUS_OK
ReadX 11123 12288 8192 8192 NT_STATUS_OK
ReadX 11123 20480 8192 8192 NT_STATUS_OK
ReadX 11123 28672 8192 8192 NT_STATUS_OK
ReadX 11123 36864 8192 8192 NT_STATUS_OK
ReadX 11123 45056 8192 8192 NT_STATUS_OK
ReadX 11123 53248 8192 8192 NT_STATUS_OK
ReadX 11123 61440 8192 8192 NT_STATUS_OK
ReadX 11123 69632 8192 8192 NT_STATUS_OK
ReadX 11123 77824 8192 8192 NT_STATUS_OK
ReadX 11123 86016 8192 8192 NT_STATUS_OK
ReadX 11123 94208 8192 8192 NT_STATUS_OK
ReadX 11123 102400 8192 8192 NT_STATUS_OK
ReadX 11123 110592 8192 8192 NT_STATUS_OK
ReadX 11123 118784 8192 8192 NT_STATUS_OK
ReadX 11123 126976 8192 8192 NT_STATUS_OK
ReadX 11123 135168 8192 8192 NT_STATUS_OK
ReadX 11123 143360 8192 8192 NT_STATUS_OK
ReadX 11123 151552 8192 8192 NT_STATUS_OK
ReadX 11123 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Close 11118 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11128 NT_STATUS_OK
WriteX 11128 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11128 258 NT_STATUS_OK
WriteX 11128 0 28489 28489 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11129 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11131 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 8192 8192 NT_STATUS_OK
ReadX 11135 8192 8192 8192 NT_STATUS_OK
ReadX 11135 16384 8192 8192 NT_STATUS_OK
ReadX 11135 24576 8192 8192 NT_STATUS_OK
ReadX 11135 32768 16384 16384 NT_STATUS_OK
ReadX 11135 49152 8192 8192 NT_STATUS_OK
ReadX 11135 57344 8192 8192 NT_STATUS_OK
ReadX 11135 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11140 NT_STATUS_OK
WriteX 11140 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11140 258 NT_STATUS_OK
WriteX 11140 0 29253 29253 NT_STATUS_OK
Close 11140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11141 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11147 NT_STATUS_OK
WriteX 11147 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 258 NT_STATUS_OK
WriteX 11147 0 30183 30183 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11150 NT_STATUS_OK
WriteX 11150 0 510 510 NT_STATUS_OK
WriteX 11150 510 512 512 NT_STATUS_OK
WriteX 11150 1022 510 510 NT_STATUS_OK
WriteX 11150 1532 510 510 NT_STATUS_OK
WriteX 11150 2042 168 168 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 4096 4096 NT_STATUS_OK
WriteX 11153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11154 NT_STATUS_OK
ReadX 11154 61440 4096 4096 NT_STATUS_OK
ReadX 11154 126976 4096 4096 NT_STATUS_OK
WriteX 11154 0 65536 65536 NT_STATUS_OK
WriteX 11154 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11155 NT_STATUS_OK
ReadX 11155 61440 4096 4096 NT_STATUS_OK
ReadX 11155 126976 4096 4096 NT_STATUS_OK
ReadX 11155 192512 4096 4096 NT_STATUS_OK
ReadX 11155 258048 4096 4096 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 65536 65536 NT_STATUS_OK
WriteX 11155 131072 65536 65536 NT_STATUS_OK
WriteX 11155 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 61440 4096 4096 NT_STATUS_OK
ReadX 11156 126976 4096 4096 NT_STATUS_OK
ReadX 11156 192512 4096 4096 NT_STATUS_OK
ReadX 11156 258048 4096 4096 NT_STATUS_OK
ReadX 11156 323584 4096 4096 NT_STATUS_OK
ReadX 11156 389120 4096 4096 NT_STATUS_OK
ReadX 11156 454656 4096 4096 NT_STATUS_OK
ReadX 11156 520192 4096 4096 NT_STATUS_OK
WriteX 11156 0 65536 65536 NT_STATUS_OK
WriteX 11156 65536 65536 65536 NT_STATUS_OK
WriteX 11156 131072 65536 65536 NT_STATUS_OK
WriteX 11156 196608 65536 65536 NT_STATUS_OK
WriteX 11156 262144 65536 65536 NT_STATUS_OK
WriteX 11156 327680 65536 65536 NT_STATUS_OK
WriteX 11156 393216 65536 65536 NT_STATUS_OK
WriteX 11156 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11153 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11163 NT_STATUS_OK
Close 11163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11168 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11175 NT_STATUS_OK
Close 11175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11181 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11216 NT_STATUS_OK
Close 11216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11225 NT_STATUS_OK
WriteX 11225 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11225 0 65536 65536 NT_STATUS_OK
WriteX 11225 65536 65536 65536 NT_STATUS_OK
WriteX 11225 131072 65536 65536 NT_STATUS_OK
WriteX 11225 196608 65536 65536 NT_STATUS_OK
WriteX 11225 262144 26634 26634 NT_STATUS_OK
Close 11225 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11231 NT_STATUS_OK
Close 11231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 4096 4096 NT_STATUS_OK
ReadX 11233 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11234 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11238 NT_STATUS_OK
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11243 NT_STATUS_OK
Close 11243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11247 NT_STATUS_OK
Close 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11250 NT_STATUS_OK
Close 11250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11256 NT_STATUS_OK
Close 11256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11285 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11298 NT_STATUS_OK
Close 11298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11300 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11310 NT_STATUS_OK
Close 11310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
Close 11313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11314 NT_STATUS_OK
ReadX 11314 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11324 NT_STATUS_OK
Close 11324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
Close 11326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11357 0 4096 4096 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
ReadX 11359 4096 4096 4096 NT_STATUS_OK
ReadX 11359 8192 4096 4096 NT_STATUS_OK
ReadX 11359 12288 4096 4096 NT_STATUS_OK
ReadX 11359 16384 4096 4096 NT_STATUS_OK
ReadX 11359 20480 4096 4096 NT_STATUS_OK
ReadX 11359 24576 4096 4096 NT_STATUS_OK
ReadX 11359 28672 4096 4096 NT_STATUS_OK
ReadX 11359 32768 4096 4096 NT_STATUS_OK
ReadX 11359 36864 4096 4096 NT_STATUS_OK
ReadX 11359 40960 4096 4096 NT_STATUS_OK
ReadX 11359 45056 4096 4096 NT_STATUS_OK
ReadX 11359 49152 4096 4096 NT_STATUS_OK
ReadX 11359 53248 4096 4096 NT_STATUS_OK
ReadX 11359 57344 4096 4096 NT_STATUS_OK
ReadX 11359 61440 4096 4096 NT_STATUS_OK
ReadX 11359 65536 4096 4096 NT_STATUS_OK
ReadX 11359 69632 4096 4096 NT_STATUS_OK
ReadX 11359 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11359 1004 NT_STATUS_OK
WriteX 11359 0 4096 4096 NT_STATUS_OK
Close 11359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11360 NT_STATUS_OK
SET_FILE_INFORMATION 11360 1004 NT_STATUS_OK
Close 11360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11362 NT_STATUS_OK
Close 11362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11365 NT_STATUS_OK
WriteX 11365 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 258 NT_STATUS_OK
WriteX 11365 0 65536 65536 NT_STATUS_OK
WriteX 11365 65536 19979 19979 NT_STATUS_OK
Close 11365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Flush 11366 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Flush 11366 NT_STATUS_OK
QUERY_FILE_INFORMATION 11366 1004 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Flush 11366 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Flush 11366 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Flush 11366 NT_STATUS_OK
SET_FILE_INFORMATION 11366 1004 NT_STATUS_OK
WriteX 11366 0 4096 4096 NT_STATUS_OK
Flush 11366 NT_STATUS_OK
Close 11366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11367 NT_STATUS_OK
ReadX 11367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 4096 4096 NT_STATUS_OK
Close 11367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11369 NT_STATUS_OK
ReadX 11369 0 4096 4096 NT_STATUS_OK
Close 11369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 4096 4096 NT_STATUS_OK
Close 11370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
WriteX 11371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11372 NT_STATUS_OK
Close 11372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11377 NT_STATUS_OK
WriteX 11377 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 65536 65536 NT_STATUS_OK
WriteX 11377 65536 17654 17654 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1004 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11379 NT_STATUS_OK
SET_FILE_INFORMATION 11379 1004 NT_STATUS_OK
Close 11379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11380 NT_STATUS_OK
ReadX 11380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11381 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11383 NT_STATUS_OK
ReadX 11383 0 4096 4096 NT_STATUS_OK
ReadX 11383 4096 4096 4096 NT_STATUS_OK
ReadX 11383 8192 4096 4096 NT_STATUS_OK
ReadX 11383 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11383 16384 4096 4096 NT_STATUS_OK
ReadX 11383 20480 4096 4096 NT_STATUS_OK
ReadX 11383 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11384 NT_STATUS_OK
ReadX 11384 0 4096 4096 NT_STATUS_OK
Close 11384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
Close 11385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11386 NT_STATUS_OK
ReadX 11386 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11386 1004 NT_STATUS_OK
WriteX 11386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11386 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11392 NT_STATUS_OK
WriteX 11392 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11392 258 NT_STATUS_OK
WriteX 11392 0 65536 65536 NT_STATUS_OK
WriteX 11392 65536 19490 19490 NT_STATUS_OK
Close 11392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 4096 4096 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
Flush 11393 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
Flush 11393 NT_STATUS_OK
QUERY_FILE_INFORMATION 11393 1004 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
Flush 11393 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
Flush 11393 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
Flush 11393 NT_STATUS_OK
SET_FILE_INFORMATION 11393 1004 NT_STATUS_OK
WriteX 11393 0 4096 4096 NT_STATUS_OK
Flush 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11394 NT_STATUS_OK
SET_FILE_INFORMATION 11394 1004 NT_STATUS_OK
Close 11394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11396 NT_STATUS_OK
Close 11396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11398 0 4096 4096 NT_STATUS_OK
Close 11398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11400 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
ReadX 11400 4096 4096 4096 NT_STATUS_OK
ReadX 11400 8192 4096 4096 NT_STATUS_OK
ReadX 11400 12288 4096 4096 NT_STATUS_OK
ReadX 11400 16384 4096 4096 NT_STATUS_OK
ReadX 11400 20480 4096 4096 NT_STATUS_OK
ReadX 11400 24576 4096 4096 NT_STATUS_OK
ReadX 11400 28672 4096 4096 NT_STATUS_OK
ReadX 11400 32768 4096 4096 NT_STATUS_OK
ReadX 11400 36864 4096 4096 NT_STATUS_OK
ReadX 11400 40960 4096 4096 NT_STATUS_OK
ReadX 11400 45056 4096 4096 NT_STATUS_OK
ReadX 11400 49152 4096 4096 NT_STATUS_OK
ReadX 11400 53248 4096 4096 NT_STATUS_OK
ReadX 11400 57344 4096 4096 NT_STATUS_OK
ReadX 11400 61440 4096 4096 NT_STATUS_OK
ReadX 11400 65536 4096 4096 NT_STATUS_OK
ReadX 11400 69632 4096 4096 NT_STATUS_OK
ReadX 11400 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11400 1004 NT_STATUS_OK
WriteX 11400 0 4096 4096 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11401 NT_STATUS_OK
SET_FILE_INFORMATION 11401 1004 NT_STATUS_OK
Close 11401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11406 NT_STATUS_OK
WriteX 11406 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11406 258 NT_STATUS_OK
WriteX 11406 0 65536 65536 NT_STATUS_OK
WriteX 11406 65536 8866 8866 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
WriteX 11407 0 4096 4096 NT_STATUS_OK
Flush 11407 NT_STATUS_OK
SET_FILE_INFORMATION 11407 1004 NT_STATUS_OK
WriteX 11407 0 4096 4096 NT_STATUS_OK
Flush 11407 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
Close 11409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11410 NT_STATUS_OK
ReadX 11410 0 4096 4096 NT_STATUS_OK
Close 11410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11411 NT_STATUS_OK
ReadX 11411 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11411 1004 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11412 NT_STATUS_OK
Close 11412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11411 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11417 NT_STATUS_OK
WriteX 11417 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 258 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 9298 9298 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 4096 4096 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
SET_FILE_INFORMATION 11418 1004 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
Close 11418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11419 NT_STATUS_OK
SET_FILE_INFORMATION 11419 1004 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11420 NT_STATUS_OK
ReadX 11420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11421 NT_STATUS_OK
Close 11421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11424 0 4096 4096 NT_STATUS_OK
Close 11424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11425 4096 4096 4096 NT_STATUS_OK
ReadX 11425 8192 4096 4096 NT_STATUS_OK
ReadX 11425 12288 4096 4096 NT_STATUS_OK
ReadX 11425 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11426 NT_STATUS_OK
ReadX 11426 0 4096 4096 NT_STATUS_OK
Close 11426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 4096 4096 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11428 1004 NT_STATUS_OK
WriteX 11428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11429 NT_STATUS_OK
Close 11429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11425 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11431 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11434 NT_STATUS_OK
WriteX 11434 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11434 258 NT_STATUS_OK
WriteX 11434 0 65536 65536 NT_STATUS_OK
WriteX 11434 65536 11540 11540 NT_STATUS_OK
Close 11434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
WriteX 11435 0 4096 4096 NT_STATUS_OK
Flush 11435 NT_STATUS_OK
SET_FILE_INFORMATION 11435 1004 NT_STATUS_OK
WriteX 11435 0 4096 4096 NT_STATUS_OK
Flush 11435 NT_STATUS_OK
Close 11435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11436 NT_STATUS_OK
SET_FILE_INFORMATION 11436 1004 NT_STATUS_OK
Close 11436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11440 NT_STATUS_OK
ReadX 11440 61440 4096 4096 NT_STATUS_OK
ReadX 11440 126976 4096 4096 NT_STATUS_OK
WriteX 11440 0 65536 65536 NT_STATUS_OK
WriteX 11440 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 61440 4096 4096 NT_STATUS_OK
ReadX 11441 126976 4096 4096 NT_STATUS_OK
ReadX 11441 192512 4096 4096 NT_STATUS_OK
ReadX 11441 258048 4096 4096 NT_STATUS_OK
WriteX 11441 0 65536 65536 NT_STATUS_OK
WriteX 11441 65536 65536 65536 NT_STATUS_OK
WriteX 11441 131072 65536 65536 NT_STATUS_OK
WriteX 11441 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 61440 4096 4096 NT_STATUS_OK
ReadX 11442 126976 4096 4096 NT_STATUS_OK
ReadX 11442 192512 4096 4096 NT_STATUS_OK
ReadX 11442 258048 4096 4096 NT_STATUS_OK
ReadX 11442 323584 4096 4096 NT_STATUS_OK
ReadX 11442 389120 4096 4096 NT_STATUS_OK
ReadX 11442 454656 4096 4096 NT_STATUS_OK
ReadX 11442 520192 4096 4096 NT_STATUS_OK
WriteX 11442 0 65536 65536 NT_STATUS_OK
WriteX 11442 65536 65536 65536 NT_STATUS_OK
WriteX 11442 131072 65536 65536 NT_STATUS_OK
WriteX 11442 196608 65536 65536 NT_STATUS_OK
WriteX 11442 262144 65536 65536 NT_STATUS_OK
WriteX 11442 327680 65536 65536 NT_STATUS_OK
WriteX 11442 393216 65536 65536 NT_STATUS_OK
WriteX 11442 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
ReadX 11443 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11444 NT_STATUS_OK
WriteX 11444 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11444 258 NT_STATUS_OK
WriteX 11444 0 53 53 NT_STATUS_OK
Close 11444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Close 11440 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11443 8192 4096 4096 NT_STATUS_OK
ReadX 11443 12288 4096 4096 NT_STATUS_OK
WriteX 11447 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11447 258 NT_STATUS_OK
ReadX 11443 16384 4096 4096 NT_STATUS_OK
ReadX 11443 20480 4096 4096 NT_STATUS_OK
WriteX 11447 0 15360 15360 NT_STATUS_OK
Close 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11448 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11448 1004 NT_STATUS_OK
WriteX 11448 0 4096 4096 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11449 NT_STATUS_OK
Close 11449 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11452 NT_STATUS_OK
Close 11452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11451 4096 4096 4096 NT_STATUS_OK
ReadX 11451 8192 4096 4096 NT_STATUS_OK
ReadX 11451 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
ReadX 11454 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
ReadX 11455 4096 4096 4096 NT_STATUS_OK
ReadX 11455 8192 4096 4096 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Close 11455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11456 NT_STATUS_OK
WriteX 11456 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11456 258 NT_STATUS_OK
WriteX 11456 0 15360 15360 NT_STATUS_OK
Close 11456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11457 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11457 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11458 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11460 NT_STATUS_OK
ReadX 11460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11461 NT_STATUS_OK
SET_FILE_INFORMATION 11461 1004 NT_STATUS_OK
Close 11461 NT_STATUS_OK
WriteX 11457 0 4096 4096 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
ReadX 11464 4096 4096 4096 NT_STATUS_OK
ReadX 11464 8192 4096 4096 NT_STATUS_OK
ReadX 11464 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11466 NT_STATUS_OK
WriteX 11466 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 258 NT_STATUS_OK
WriteX 11466 0 53 53 NT_STATUS_OK
Close 11466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11465 4096 4096 4096 NT_STATUS_OK
ReadX 11465 8192 4096 4096 NT_STATUS_OK
ReadX 11465 12288 4096 4096 NT_STATUS_OK
WriteX 11469 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 258 NT_STATUS_OK
WriteX 11469 0 12006 12006 NT_STATUS_OK
Close 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11470 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11470 1004 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11471 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11473 4096 4096 4096 NT_STATUS_OK
ReadX 11473 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11476 NT_STATUS_OK
WriteX 11476 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 258 NT_STATUS_OK
WriteX 11476 0 11991 11991 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11477 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11477 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11481 NT_STATUS_OK
WriteX 11464 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
Close 11481 NT_STATUS_OK
WriteX 11477 0 4096 4096 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11485 NT_STATUS_OK
Close 11485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11484 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11484 1004 NT_STATUS_OK
ReadX 11484 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11484 1004 NT_STATUS_OK
WriteX 11484 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11484 1004 NT_STATUS_OK
Close 11460 NT_STATUS_OK
WriteX 11484 0 12288 12288 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11487 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11464 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11489 NT_STATUS_OK
Close 11489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 61440 61440 NT_STATUS_OK
ReadX 11491 61440 4096 4096 NT_STATUS_OK
ReadX 11491 65536 61440 61440 NT_STATUS_OK
ReadX 11491 126976 4096 4096 NT_STATUS_OK
ReadX 11491 131072 61440 61440 NT_STATUS_OK
ReadX 11491 192512 4096 4096 NT_STATUS_OK
ReadX 11491 196608 61440 61440 NT_STATUS_OK
ReadX 11491 258048 4096 4096 NT_STATUS_OK
ReadX 11491 262144 61440 61440 NT_STATUS_OK
ReadX 11491 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 61440 61440 NT_STATUS_OK
ReadX 11492 61440 4096 4096 NT_STATUS_OK
ReadX 11492 65536 61440 61440 NT_STATUS_OK
ReadX 11492 126976 4096 4096 NT_STATUS_OK
ReadX 11492 131072 61440 61440 NT_STATUS_OK
ReadX 11492 192512 4096 4096 NT_STATUS_OK
ReadX 11492 196608 61440 61440 NT_STATUS_OK
ReadX 11492 258048 4096 4096 NT_STATUS_OK
ReadX 11492 262144 61440 61440 NT_STATUS_OK
ReadX 11492 323584 4096 4096 NT_STATUS_OK
ReadX 11492 327680 61440 61440 NT_STATUS_OK
ReadX 11492 389120 4096 4096 NT_STATUS_OK
ReadX 11492 393216 61440 61440 NT_STATUS_OK
ReadX 11492 454656 4096 4096 NT_STATUS_OK
ReadX 11492 458752 61440 61440 NT_STATUS_OK
ReadX 11492 520192 4096 4096 NT_STATUS_OK
ReadX 11492 524288 61440 61440 NT_STATUS_OK
ReadX 11492 585728 4096 4096 NT_STATUS_OK
ReadX 11492 589824 61440 61440 NT_STATUS_OK
ReadX 11492 651264 4096 4096 NT_STATUS_OK
ReadX 11492 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 61440 61440 NT_STATUS_OK
ReadX 11493 61440 4096 4096 NT_STATUS_OK
ReadX 11493 65536 61440 61440 NT_STATUS_OK
ReadX 11493 126976 4096 4096 NT_STATUS_OK
ReadX 11493 131072 61440 61440 NT_STATUS_OK
ReadX 11493 192512 4096 4096 NT_STATUS_OK
ReadX 11493 196608 61440 61440 NT_STATUS_OK
ReadX 11493 258048 4096 4096 NT_STATUS_OK
ReadX 11493 262144 61440 61440 NT_STATUS_OK
ReadX 11493 323584 4096 4096 NT_STATUS_OK
ReadX 11493 327680 61440 61440 NT_STATUS_OK
ReadX 11493 389120 4096 4096 NT_STATUS_OK
ReadX 11493 393216 61440 61440 NT_STATUS_OK
ReadX 11493 454656 4096 4096 NT_STATUS_OK
ReadX 11493 458752 61440 61440 NT_STATUS_OK
ReadX 11493 520192 4096 4096 NT_STATUS_OK
ReadX 11493 524288 61440 61440 NT_STATUS_OK
ReadX 11493 585728 4096 4096 NT_STATUS_OK
ReadX 11493 589824 61440 61440 NT_STATUS_OK
ReadX 11493 651264 4096 4096 NT_STATUS_OK
ReadX 11493 655360 61440 61440 NT_STATUS_OK
ReadX 11493 716800 4096 4096 NT_STATUS_OK
ReadX 11493 720896 61440 61440 NT_STATUS_OK
ReadX 11493 782336 4096 4096 NT_STATUS_OK
ReadX 11493 786432 61440 61440 NT_STATUS_OK
ReadX 11493 847872 4096 4096 NT_STATUS_OK
ReadX 11493 851968 61440 61440 NT_STATUS_OK
ReadX 11493 913408 4096 4096 NT_STATUS_OK
ReadX 11493 917504 61440 61440 NT_STATUS_OK
ReadX 11493 978944 4096 4096 NT_STATUS_OK
ReadX 11493 983040 61440 61440 NT_STATUS_OK
ReadX 11493 1044480 4096 4096 NT_STATUS_OK
ReadX 11493 1048576 61440 61440 NT_STATUS_OK
ReadX 11493 1110016 4096 4096 NT_STATUS_OK
ReadX 11493 1114112 61440 61440 NT_STATUS_OK
ReadX 11493 1175552 4096 4096 NT_STATUS_OK
ReadX 11493 1179648 61440 61440 NT_STATUS_OK
ReadX 11493 1241088 4096 4096 NT_STATUS_OK
ReadX 11493 1245184 61440 61440 NT_STATUS_OK
ReadX 11493 1306624 4096 4096 NT_STATUS_OK
ReadX 11493 1310720 61440 61440 NT_STATUS_OK
ReadX 11493 1372160 4096 4096 NT_STATUS_OK
ReadX 11493 1376256 61440 61440 NT_STATUS_OK
ReadX 11493 1437696 4096 4096 NT_STATUS_OK
ReadX 11493 1441792 61440 61440 NT_STATUS_OK
ReadX 11493 1503232 4096 4096 NT_STATUS_OK
ReadX 11493 1507328 61440 61440 NT_STATUS_OK
ReadX 11493 1568768 4096 4096 NT_STATUS_OK
ReadX 11493 1572864 61440 61440 NT_STATUS_OK
ReadX 11493 1634304 4096 4096 NT_STATUS_OK
ReadX 11493 1638400 61440 61440 NT_STATUS_OK
ReadX 11493 1699840 4096 4096 NT_STATUS_OK
ReadX 11493 1703936 61440 61440 NT_STATUS_OK
ReadX 11493 1765376 4096 4096 NT_STATUS_OK
ReadX 11493 1769472 61440 61440 NT_STATUS_OK
ReadX 11493 1830912 4096 4096 NT_STATUS_OK
ReadX 11493 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11500 NT_STATUS_OK
QUERY_FILE_INFORMATION 11500 1004 NT_STATUS_OK
WriteX 11500 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11500 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11502 NT_STATUS_OK
WriteX 11502 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11502 258 NT_STATUS_OK
WriteX 11502 0 491 491 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11500 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11505 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11506 NT_STATUS_OK
WriteX 11506 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 258 NT_STATUS_OK
WriteX 11506 0 543 543 NT_STATUS_OK
Close 11506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Close 11495 NT_STATUS_OK
Close 11496 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11520 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 1004 NT_STATUS_OK
WriteX 11520 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 258 NT_STATUS_OK
WriteX 11520 0 2048 2048 NT_STATUS_OK
Close 11520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11521 0 4096 4096 NT_STATUS_OK
Flush 11521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11521 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11526 NT_STATUS_OK
WriteX 11526 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 258 NT_STATUS_OK
WriteX 11526 0 2048 2048 NT_STATUS_OK
Close 11526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11527 NT_STATUS_OK
ReadX 11527 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11531 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11532 NT_STATUS_OK
WriteX 11532 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
WriteX 11532 0 2048 2048 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 2048 2048 NT_STATUS_OK
ReadX 11511 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11527 0 4096 4096 NT_STATUS_OK
WriteX 11511 0 8192 8192 NT_STATUS_OK
WriteX 11512 0 4096 4096 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
ReadX 11527 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11537 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Close 11527 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11547 NT_STATUS_OK
ReadX 11547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11556 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11557 NT_STATUS_OK
QUERY_FILE_INFORMATION 11557 1004 NT_STATUS_OK
WriteX 11557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11557 258 NT_STATUS_OK
WriteX 11557 0 2048 2048 NT_STATUS_OK
Close 11557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11560 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11565 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 258 NT_STATUS_OK
WriteX 11565 0 2048 2048 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
Flush 11558 NT_STATUS_OK
WriteX 11566 0 4096 4096 NT_STATUS_OK
Flush 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11566 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11560 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11568 NT_STATUS_OK
WriteX 11568 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 258 NT_STATUS_OK
WriteX 11568 0 4096 4096 NT_STATUS_OK
Close 11568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11569 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11570 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11571 NT_STATUS_OK
WriteX 11571 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 4096 4096 NT_STATUS_OK
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Close 11560 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11547 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11545 NT_STATUS_OK
Close 11542 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11578 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11579 NT_STATUS_OK
WriteX 11579 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 258 NT_STATUS_OK
WriteX 11579 0 2048 2048 NT_STATUS_OK
Close 11579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11582 NT_STATUS_OK
ReadX 11582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11585 NT_STATUS_OK
ReadX 11585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11594 NT_STATUS_OK
QUERY_FILE_INFORMATION 11594 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Close 11580 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11596 NT_STATUS_OK
QUERY_FILE_INFORMATION 11596 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11616 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 1004 NT_STATUS_OK
WriteX 11616 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 258 NT_STATUS_OK
WriteX 11616 0 2048 2048 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11623 NT_STATUS_OK
ReadX 11623 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11628 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 1004 NT_STATUS_OK
WriteX 11628 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 2048 2048 NT_STATUS_OK
Close 11628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11636 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 1004 NT_STATUS_OK
WriteX 11636 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 258 NT_STATUS_OK
WriteX 11636 0 2048 2048 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11617 0 4096 4096 NT_STATUS_OK
Flush 11617 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11637 0 4096 4096 NT_STATUS_OK
Flush 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11617 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11637 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11619 4096 16384 16384 NT_STATUS_OK
ReadX 11599 4096 16384 16384 NT_STATUS_OK
ReadX 11631 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 2048 2048 NT_STATUS_OK
WriteX 11639 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11640 NT_STATUS_OK
QUERY_FILE_INFORMATION 11640 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11623 NT_STATUS_OK
Close 11611 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11605 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11606 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11642 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11644 NT_STATUS_OK
QUERY_FILE_INFORMATION 11644 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11650 NT_STATUS_OK
ReadX 11650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11647 4096 16384 16384 NT_STATUS_OK
WriteX 11647 0 4096 4096 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
WriteX 11649 0 4096 4096 NT_STATUS_OK
WriteX 11650 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11658 NT_STATUS_OK
ReadX 11658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11659 NT_STATUS_OK
ReadX 11659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11666 NT_STATUS_OK
ReadX 11666 0 8192 8192 NT_STATUS_OK
ReadX 11653 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11667 0 4096 4096 NT_STATUS_OK
ReadX 11667 4096 4096 4096 NT_STATUS_OK
ReadX 11667 8192 4096 4096 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11668 0 4096 4096 NT_STATUS_OK
ReadX 11668 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11647 0 4096 4096 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
WriteX 11649 0 4096 4096 NT_STATUS_OK
WriteX 11650 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11673 NT_STATUS_OK
QUERY_FILE_INFORMATION 11673 1004 NT_STATUS_OK
WriteX 11673 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11673 258 NT_STATUS_OK
WriteX 11673 0 2048 2048 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11674 NT_STATUS_OK
ReadX 11674 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
ReadX 11676 4096 4096 4096 NT_STATUS_OK
WriteX 11676 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 0 4096 4096 NT_STATUS_OK
ReadX 11678 4096 4096 4096 NT_STATUS_OK
WriteX 11678 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11679 NT_STATUS_OK
QUERY_FILE_INFORMATION 11679 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11666 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11649 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11659 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11660 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11662 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11681 0 4096 4096 NT_STATUS_OK
ReadX 11681 4096 4096 4096 NT_STATUS_OK
ReadX 11681 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
ReadX 11682 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11699 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 1004 NT_STATUS_OK
WriteX 11699 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 258 NT_STATUS_OK
WriteX 11699 0 2048 2048 NT_STATUS_OK
Close 11699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11700 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11704 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11705 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1004 NT_STATUS_OK
WriteX 11705 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 258 NT_STATUS_OK
WriteX 11705 0 2048 2048 NT_STATUS_OK
Close 11705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11689 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11707 NT_STATUS_OK
QUERY_FILE_INFORMATION 11707 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 61440 4096 4096 NT_STATUS_OK
ReadX 11711 126976 4096 4096 NT_STATUS_OK
WriteX 11711 0 65536 65536 NT_STATUS_OK
WriteX 11711 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 61440 4096 4096 NT_STATUS_OK
ReadX 11712 126976 4096 4096 NT_STATUS_OK
ReadX 11712 192512 4096 4096 NT_STATUS_OK
ReadX 11712 258048 4096 4096 NT_STATUS_OK
WriteX 11712 0 65536 65536 NT_STATUS_OK
WriteX 11712 65536 65536 65536 NT_STATUS_OK
WriteX 11712 131072 65536 65536 NT_STATUS_OK
WriteX 11712 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 61440 4096 4096 NT_STATUS_OK
ReadX 11713 126976 4096 4096 NT_STATUS_OK
ReadX 11713 192512 4096 4096 NT_STATUS_OK
ReadX 11713 258048 4096 4096 NT_STATUS_OK
ReadX 11713 323584 4096 4096 NT_STATUS_OK
ReadX 11713 389120 4096 4096 NT_STATUS_OK
ReadX 11713 454656 4096 4096 NT_STATUS_OK
ReadX 11713 520192 4096 4096 NT_STATUS_OK
WriteX 11713 0 65536 65536 NT_STATUS_OK
WriteX 11713 65536 65536 65536 NT_STATUS_OK
WriteX 11713 131072 65536 65536 NT_STATUS_OK
WriteX 11713 196608 65536 65536 NT_STATUS_OK
WriteX 11713 262144 65536 65536 NT_STATUS_OK
WriteX 11713 327680 65536 65536 NT_STATUS_OK
WriteX 11713 393216 65536 65536 NT_STATUS_OK
WriteX 11713 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11714 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11714 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11714 8192 4096 4096 NT_STATUS_OK
ReadX 11714 12288 4096 4096 NT_STATUS_OK
ReadX 11714 16384 4096 4096 NT_STATUS_OK
ReadX 11714 20480 4096 4096 NT_STATUS_OK
ReadX 11714 24576 4096 4096 NT_STATUS_OK
ReadX 11714 28672 4096 4096 NT_STATUS_OK
ReadX 11714 32768 4096 4096 NT_STATUS_OK
ReadX 11714 36864 4096 4096 NT_STATUS_OK
ReadX 11714 40960 4096 4096 NT_STATUS_OK
ReadX 11714 45056 4096 4096 NT_STATUS_OK
ReadX 11714 49152 4096 4096 NT_STATUS_OK
ReadX 11714 53248 4096 4096 NT_STATUS_OK
ReadX 11714 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11714 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11717 NT_STATUS_OK
WriteX 11717 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11717 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11717 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
WriteX 11717 0 57088 57088 NT_STATUS_OK
WriteX 11717 0 4096 4096 NT_STATUS_OK
Flush 11717 NT_STATUS_OK
Close 11714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11718 NT_STATUS_OK
SET_FILE_INFORMATION 11718 1004 NT_STATUS_OK
Close 11718 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
WriteX 11717 0 4096 4096 NT_STATUS_OK
Close 11717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11721 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11722 NT_STATUS_OK
WriteX 11722 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11722 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11722 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11722 1004 NT_STATUS_OK
WriteX 11722 0 51456 51456 NT_STATUS_OK
WriteX 11722 0 4096 4096 NT_STATUS_OK
Flush 11722 NT_STATUS_OK
SET_FILE_INFORMATION 11722 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11722 1004 NT_STATUS_OK
WriteX 11722 0 4096 4096 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11724 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11726 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11728 NT_STATUS_OK
Close 11728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11731 NT_STATUS_OK
WriteX 11731 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
WriteX 11731 0 53077 53077 NT_STATUS_OK
Close 11731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11732 NT_STATUS_OK
WriteX 11732 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11732 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11732 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11732 1004 NT_STATUS_OK
WriteX 11732 0 65536 65536 NT_STATUS_OK
WriteX 11732 65536 1856 1856 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Flush 11732 NT_STATUS_OK
SET_FILE_INFORMATION 11732 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11732 1004 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11741 NT_STATUS_OK
WriteX 11741 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11741 258 NT_STATUS_OK
WriteX 11741 0 7983 7983 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11743 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11746 NT_STATUS_OK
WriteX 11746 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11746 258 NT_STATUS_OK
WriteX 11746 0 65536 65536 NT_STATUS_OK
WriteX 11746 65536 65536 65536 NT_STATUS_OK
WriteX 11746 131072 65536 65536 NT_STATUS_OK
WriteX 11746 196608 65536 65536 NT_STATUS_OK
WriteX 11746 262144 65536 65536 NT_STATUS_OK
WriteX 11746 327680 65536 65536 NT_STATUS_OK
WriteX 11746 393216 65536 65536 NT_STATUS_OK
WriteX 11746 458752 46731 46731 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11747 NT_STATUS_OK
WriteX 11747 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11747 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11736 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11747 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11747 1004 NT_STATUS_OK
WriteX 11747 0 65536 65536 NT_STATUS_OK
WriteX 11747 65536 22848 22848 NT_STATUS_OK
WriteX 11747 0 4096 4096 NT_STATUS_OK
Flush 11747 NT_STATUS_OK
SET_FILE_INFORMATION 11747 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11747 1004 NT_STATUS_OK
WriteX 11747 0 4096 4096 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11749 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11751 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11752 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11752 1004 NT_STATUS_OK
ReadX 11752 8192 4096 4096 NT_STATUS_OK
ReadX 11752 12288 4096 4096 NT_STATUS_OK
ReadX 11752 16384 4096 4096 NT_STATUS_OK
ReadX 11752 20480 4096 4096 NT_STATUS_OK
ReadX 11752 24576 4096 4096 NT_STATUS_OK
ReadX 11752 28672 4096 4096 NT_STATUS_OK
ReadX 11752 32768 4096 4096 NT_STATUS_OK
ReadX 11752 36864 4096 4096 NT_STATUS_OK
ReadX 11752 40960 4096 4096 NT_STATUS_OK
ReadX 11752 45056 4096 4096 NT_STATUS_OK
ReadX 11752 49152 4096 4096 NT_STATUS_OK
ReadX 11752 53248 4096 4096 NT_STATUS_OK
ReadX 11752 57344 4096 4096 NT_STATUS_OK
ReadX 11752 61440 4096 4096 NT_STATUS_OK
ReadX 11752 65536 4096 4096 NT_STATUS_OK
ReadX 11752 69632 4096 4096 NT_STATUS_OK
ReadX 11752 73728 4096 4096 NT_STATUS_OK
ReadX 11752 77824 4096 4096 NT_STATUS_OK
ReadX 11752 81920 4096 4096 NT_STATUS_OK
ReadX 11752 86016 4096 4096 NT_STATUS_OK
ReadX 11752 90112 4096 4096 NT_STATUS_OK
ReadX 11752 94208 4096 4096 NT_STATUS_OK
ReadX 11752 98304 4096 4096 NT_STATUS_OK
ReadX 11752 102400 4096 4096 NT_STATUS_OK
ReadX 11752 106496 4096 4096 NT_STATUS_OK
ReadX 11752 110592 4096 4096 NT_STATUS_OK
ReadX 11752 114688 4096 4096 NT_STATUS_OK
ReadX 11752 118784 4096 4096 NT_STATUS_OK
ReadX 11752 122880 4096 4096 NT_STATUS_OK
ReadX 11752 126976 4096 4096 NT_STATUS_OK
ReadX 11752 131072 4096 4096 NT_STATUS_OK
ReadX 11752 135168 4096 4096 NT_STATUS_OK
ReadX 11752 139264 4096 4096 NT_STATUS_OK
ReadX 11752 143360 4096 4096 NT_STATUS_OK
ReadX 11752 147456 4096 4096 NT_STATUS_OK
ReadX 11752 151552 4096 4096 NT_STATUS_OK
ReadX 11752 155648 4096 4096 NT_STATUS_OK
ReadX 11752 159744 4096 4096 NT_STATUS_OK
ReadX 11752 163840 4096 4096 NT_STATUS_OK
ReadX 11752 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11752 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11755 NT_STATUS_OK
WriteX 11755 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11755 258 NT_STATUS_OK
Close 11752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11756 NT_STATUS_OK
SET_FILE_INFORMATION 11756 1004 NT_STATUS_OK
Close 11756 NT_STATUS_OK
WriteX 11755 0 42388 42388 NT_STATUS_OK
Close 11755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11757 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
ReadX 11759 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11760 NT_STATUS_OK
WriteX 11760 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11760 258 NT_STATUS_OK
SET_FILE_INFORMATION 11760 1004 NT_STATUS_OK
WriteX 11760 0 42652 42652 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11762 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
ReadX 11764 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11769 NT_STATUS_OK
WriteX 11769 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11769 258 NT_STATUS_OK
WriteX 11769 0 65536 65536 NT_STATUS_OK
WriteX 11769 65536 49 49 NT_STATUS_OK
Close 11769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 61440 61440 NT_STATUS_OK
ReadX 11770 61440 4096 4096 NT_STATUS_OK
ReadX 11770 65536 61440 61440 NT_STATUS_OK
ReadX 11770 126976 4096 4096 NT_STATUS_OK
ReadX 11770 131072 61440 61440 NT_STATUS_OK
ReadX 11770 192512 4096 4096 NT_STATUS_OK
ReadX 11770 196608 61440 61440 NT_STATUS_OK
ReadX 11770 258048 4096 4096 NT_STATUS_OK
ReadX 11770 262144 61440 61440 NT_STATUS_OK
ReadX 11770 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 61440 61440 NT_STATUS_OK
ReadX 11771 61440 4096 4096 NT_STATUS_OK
ReadX 11771 65536 61440 61440 NT_STATUS_OK
ReadX 11771 126976 4096 4096 NT_STATUS_OK
ReadX 11771 131072 61440 61440 NT_STATUS_OK
ReadX 11771 192512 4096 4096 NT_STATUS_OK
ReadX 11771 196608 61440 61440 NT_STATUS_OK
ReadX 11771 258048 4096 4096 NT_STATUS_OK
ReadX 11771 262144 61440 61440 NT_STATUS_OK
ReadX 11771 323584 4096 4096 NT_STATUS_OK
ReadX 11771 327680 61440 61440 NT_STATUS_OK
ReadX 11771 389120 4096 4096 NT_STATUS_OK
ReadX 11771 393216 61440 61440 NT_STATUS_OK
ReadX 11771 454656 4096 4096 NT_STATUS_OK
ReadX 11771 458752 61440 61440 NT_STATUS_OK
ReadX 11771 520192 4096 4096 NT_STATUS_OK
ReadX 11771 524288 61440 61440 NT_STATUS_OK
ReadX 11771 585728 4096 4096 NT_STATUS_OK
ReadX 11771 589824 61440 61440 NT_STATUS_OK
ReadX 11771 651264 4096 4096 NT_STATUS_OK
ReadX 11771 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 61440 61440 NT_STATUS_OK
ReadX 11772 61440 4096 4096 NT_STATUS_OK
ReadX 11772 65536 61440 61440 NT_STATUS_OK
ReadX 11772 126976 4096 4096 NT_STATUS_OK
ReadX 11772 131072 61440 61440 NT_STATUS_OK
ReadX 11772 192512 4096 4096 NT_STATUS_OK
ReadX 11772 196608 61440 61440 NT_STATUS_OK
ReadX 11772 258048 4096 4096 NT_STATUS_OK
ReadX 11772 262144 61440 61440 NT_STATUS_OK
ReadX 11772 323584 4096 4096 NT_STATUS_OK
ReadX 11772 327680 61440 61440 NT_STATUS_OK
ReadX 11772 389120 4096 4096 NT_STATUS_OK
ReadX 11772 393216 61440 61440 NT_STATUS_OK
ReadX 11772 454656 4096 4096 NT_STATUS_OK
ReadX 11772 458752 61440 61440 NT_STATUS_OK
ReadX 11772 520192 4096 4096 NT_STATUS_OK
ReadX 11772 524288 61440 61440 NT_STATUS_OK
ReadX 11772 585728 4096 4096 NT_STATUS_OK
ReadX 11772 589824 61440 61440 NT_STATUS_OK
ReadX 11772 651264 4096 4096 NT_STATUS_OK
ReadX 11772 655360 61440 61440 NT_STATUS_OK
ReadX 11772 716800 4096 4096 NT_STATUS_OK
ReadX 11772 720896 61440 61440 NT_STATUS_OK
ReadX 11772 782336 4096 4096 NT_STATUS_OK
ReadX 11772 786432 61440 61440 NT_STATUS_OK
ReadX 11772 847872 4096 4096 NT_STATUS_OK
ReadX 11772 851968 61440 61440 NT_STATUS_OK
ReadX 11772 913408 4096 4096 NT_STATUS_OK
ReadX 11772 917504 61440 61440 NT_STATUS_OK
ReadX 11772 978944 4096 4096 NT_STATUS_OK
ReadX 11772 983040 61440 61440 NT_STATUS_OK
ReadX 11772 1044480 4096 4096 NT_STATUS_OK
ReadX 11772 1048576 61440 61440 NT_STATUS_OK
ReadX 11772 1110016 4096 4096 NT_STATUS_OK
ReadX 11772 1114112 61440 61440 NT_STATUS_OK
ReadX 11772 1175552 4096 4096 NT_STATUS_OK
ReadX 11772 1179648 61440 61440 NT_STATUS_OK
ReadX 11772 1241088 4096 4096 NT_STATUS_OK
ReadX 11772 1245184 61440 61440 NT_STATUS_OK
ReadX 11772 1306624 4096 4096 NT_STATUS_OK
ReadX 11772 1310720 61440 61440 NT_STATUS_OK
ReadX 11772 1372160 4096 4096 NT_STATUS_OK
ReadX 11772 1376256 61440 61440 NT_STATUS_OK
ReadX 11772 1437696 4096 4096 NT_STATUS_OK
ReadX 11772 1441792 61440 61440 NT_STATUS_OK
ReadX 11772 1503232 4096 4096 NT_STATUS_OK
ReadX 11772 1507328 61440 61440 NT_STATUS_OK
ReadX 11772 1568768 4096 4096 NT_STATUS_OK
ReadX 11772 1572864 61440 61440 NT_STATUS_OK
ReadX 11772 1634304 4096 4096 NT_STATUS_OK
ReadX 11772 1638400 61440 61440 NT_STATUS_OK
ReadX 11772 1699840 4096 4096 NT_STATUS_OK
ReadX 11772 1703936 61440 61440 NT_STATUS_OK
ReadX 11772 1765376 4096 4096 NT_STATUS_OK
ReadX 11772 1769472 61440 61440 NT_STATUS_OK
ReadX 11772 1830912 4096 4096 NT_STATUS_OK
ReadX 11772 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11774 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 1005 NT_STATUS_OK
ReadX 11774 2156 24 24 NT_STATUS_OK
ReadX 11774 2139 276 276 NT_STATUS_OK
ReadX 11774 2136 14 14 NT_STATUS_OK
ReadX 11774 2136 7 7 NT_STATUS_OK
ReadX 11774 2138 12 12 NT_STATUS_OK
ReadX 11774 2137 8 8 NT_STATUS_OK
ReadX 11774 2135 15 15 NT_STATUS_OK
ReadX 11774 0 16 16 NT_STATUS_OK
ReadX 11774 16 2048 2048 NT_STATUS_OK
ReadX 11774 2064 2048 2048 NT_STATUS_OK
ReadX 11774 257 2048 2048 NT_STATUS_OK
ReadX 11774 385 2048 2048 NT_STATUS_OK
ReadX 11774 513 2048 2048 NT_STATUS_OK
ReadX 11774 641 2048 2048 NT_STATUS_OK
ReadX 11774 769 2048 2048 NT_STATUS_OK
ReadX 11774 897 2048 2048 NT_STATUS_OK
ReadX 11774 1025 2048 2048 NT_STATUS_OK
ReadX 11774 1153 2048 2048 NT_STATUS_OK
ReadX 11774 1281 2048 2048 NT_STATUS_OK
ReadX 11774 1409 2048 2048 NT_STATUS_OK
ReadX 11774 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11776 NT_STATUS_OK
Close 11776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11779 NT_STATUS_OK
WriteX 11779 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11779 258 NT_STATUS_OK
WriteX 11779 0 10575 10575 NT_STATUS_OK
Flush 11779 NT_STATUS_OK
Close 11779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11780 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
Close 11774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11784 NT_STATUS_OK
LockX 11784 2147483538 1 NT_STATUS_OK
UnlockX 11784 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11784 1005 NT_STATUS_OK
ReadX 11784 0 512 512 NT_STATUS_OK
ReadX 11784 512 512 512 NT_STATUS_OK
ReadX 11784 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11784 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11784 1004 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11785 NT_STATUS_OK
QUERY_FILE_INFORMATION 11785 1005 NT_STATUS_OK
ReadX 11785 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11786 NT_STATUS_OK
LockX 11786 2147483538 1 NT_STATUS_OK
UnlockX 11786 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11786 1005 NT_STATUS_OK
ReadX 11786 0 512 512 NT_STATUS_OK
ReadX 11786 512 512 512 NT_STATUS_OK
ReadX 11786 1024 512 512 NT_STATUS_OK
ReadX 11786 288 20 20 NT_STATUS_OK
ReadX 11786 308 2084 2084 NT_STATUS_OK
ReadX 11786 388 2084 2084 NT_STATUS_OK
ReadX 11786 388 2084 2084 NT_STATUS_OK
ReadX 11773 2157 1386 1386 NT_STATUS_OK
ReadX 11786 2472 399 399 NT_STATUS_OK
ReadX 11786 3072 1536 1536 NT_STATUS_OK
ReadX 11786 544 149 149 NT_STATUS_OK
ReadX 11786 693 485 485 NT_STATUS_OK
Close 11786 NT_STATUS_OK
ReadX 11773 2157 4096 4096 NT_STATUS_OK
ReadX 11773 6253 4096 4096 NT_STATUS_OK
ReadX 11773 10349 4096 4096 NT_STATUS_OK
ReadX 11773 14445 4096 4096 NT_STATUS_OK
ReadX 11773 18541 4096 4096 NT_STATUS_OK
ReadX 11773 22637 256 256 NT_STATUS_OK
ReadX 11773 22893 4096 4096 NT_STATUS_OK
ReadX 11773 26989 4096 4096 NT_STATUS_OK
ReadX 11773 31085 4096 4096 NT_STATUS_OK
ReadX 11773 35181 4096 4096 NT_STATUS_OK
ReadX 11773 39277 4096 4096 NT_STATUS_OK
ReadX 11773 43373 4096 4096 NT_STATUS_OK
ReadX 11773 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11773 2157 1024 1024 NT_STATUS_OK
ReadX 11773 1667 4688 4688 NT_STATUS_OK
ReadX 11773 6355 3516 3516 NT_STATUS_OK
ReadX 11773 9871 16384 16384 NT_STATUS_OK
ReadX 11773 26255 3771 3771 NT_STATUS_OK
ReadX 11773 30026 2048 2048 NT_STATUS_OK
ReadX 11773 32074 1024 1024 NT_STATUS_OK
ReadX 11773 33098 6652 6652 NT_STATUS_OK
ReadX 11773 39750 16384 16384 NT_STATUS_OK
ReadX 11773 56134 10496 10496 NT_STATUS_OK
ReadX 11773 66630 1784 1784 NT_STATUS_OK
ReadX 11773 68414 90 90 NT_STATUS_OK
ReadX 11773 68504 273 273 NT_STATUS_OK
ReadX 11773 68777 1600 1600 NT_STATUS_OK
ReadX 11773 70377 640 640 NT_STATUS_OK
ReadX 11773 71017 1280 1280 NT_STATUS_OK
ReadX 11773 72297 8464 8464 NT_STATUS_OK
ReadX 11773 80761 158 158 NT_STATUS_OK
ReadX 11773 80919 912 912 NT_STATUS_OK
ReadX 11773 81831 1980 1980 NT_STATUS_OK
ReadX 11773 83811 2256 2256 NT_STATUS_OK
ReadX 11773 86067 400 400 NT_STATUS_OK
ReadX 11773 86467 252 252 NT_STATUS_OK
ReadX 11773 86719 42 42 NT_STATUS_OK
ReadX 11773 86761 725 725 NT_STATUS_OK
ReadX 11773 2009 512 512 NT_STATUS_OK
ReadX 11773 3895 9 9 NT_STATUS_OK
ReadX 11773 3781 46 46 NT_STATUS_OK
ReadX 11773 4059 92 92 NT_STATUS_OK
ReadX 11773 3781 92 92 NT_STATUS_OK
ReadX 11773 3986 184 184 NT_STATUS_OK
ReadX 11773 3987 16384 16384 NT_STATUS_OK
ReadX 11773 3902 16384 16384 NT_STATUS_OK
ReadX 11773 3781 10240 10240 NT_STATUS_OK
ReadX 11773 3821 16384 16384 NT_STATUS_OK
ReadX 11773 3891 935 935 NT_STATUS_OK
ReadX 11773 4060 10240 10240 NT_STATUS_OK
ReadX 11773 4059 184 184 NT_STATUS_OK
ReadX 11773 256 184 184 NT_STATUS_OK
ReadX 11773 256 1026 1026 NT_STATUS_OK
ReadX 11773 3901 326 326 NT_STATUS_OK
ReadX 11773 3899 652 652 NT_STATUS_OK
ReadX 11773 256 2 2 NT_STATUS_OK
ReadX 11773 258 4948 4948 NT_STATUS_OK
Close 11773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11791 NT_STATUS_OK
WriteX 11791 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 258 NT_STATUS_OK
WriteX 11791 0 65536 65536 NT_STATUS_OK
WriteX 11791 65536 65536 65536 NT_STATUS_OK
WriteX 11791 131072 65536 65536 NT_STATUS_OK
WriteX 11791 196608 65536 65536 NT_STATUS_OK
WriteX 11791 262144 65536 65536 NT_STATUS_OK
WriteX 11791 327680 65536 65536 NT_STATUS_OK
WriteX 11791 393216 65536 65536 NT_STATUS_OK
WriteX 11791 458752 65536 65536 NT_STATUS_OK
WriteX 11791 524288 65536 65536 NT_STATUS_OK
WriteX 11791 589824 35257 35257 NT_STATUS_OK
Close 11791 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11793 NT_STATUS_OK
Close 11793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11796 NT_STATUS_OK
WriteX 11796 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11796 258 NT_STATUS_OK
WriteX 11796 0 65536 65536 NT_STATUS_OK
WriteX 11796 65536 65536 65536 NT_STATUS_OK
WriteX 11796 131072 65536 65536 NT_STATUS_OK
WriteX 11796 196608 65536 65536 NT_STATUS_OK
WriteX 11796 262144 65536 65536 NT_STATUS_OK
WriteX 11796 327680 65536 65536 NT_STATUS_OK
WriteX 11796 393216 65536 65536 NT_STATUS_OK
WriteX 11796 458752 65536 65536 NT_STATUS_OK
WriteX 11796 524288 65536 65536 NT_STATUS_OK
WriteX 11796 589824 57598 57598 NT_STATUS_OK
Close 11796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11798 NT_STATUS_OK
WriteX 11798 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11798 258 NT_STATUS_OK
WriteX 11798 0 12543 12543 NT_STATUS_OK
Flush 11798 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11800 NT_STATUS_OK
Close 11800 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11802 NT_STATUS_OK
ReadX 11802 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11804 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 1005 NT_STATUS_OK
ReadX 11804 1938 24 24 NT_STATUS_OK
ReadX 11804 1920 276 276 NT_STATUS_OK
ReadX 11804 1918 14 14 NT_STATUS_OK
ReadX 11804 1918 7 7 NT_STATUS_OK
ReadX 11804 1919 12 12 NT_STATUS_OK
ReadX 11804 1919 8 8 NT_STATUS_OK
ReadX 11804 1917 15 15 NT_STATUS_OK
ReadX 11804 0 16 16 NT_STATUS_OK
ReadX 11804 16 2048 2048 NT_STATUS_OK
ReadX 11804 2064 2048 2048 NT_STATUS_OK
ReadX 11804 257 2048 2048 NT_STATUS_OK
ReadX 11804 385 2048 2048 NT_STATUS_OK
ReadX 11804 513 2048 2048 NT_STATUS_OK
ReadX 11804 641 2048 2048 NT_STATUS_OK
ReadX 11804 769 2048 2048 NT_STATUS_OK
ReadX 11804 897 2048 2048 NT_STATUS_OK
ReadX 11804 1025 2048 2048 NT_STATUS_OK
ReadX 11804 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11809 NT_STATUS_OK
WriteX 11809 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 258 NT_STATUS_OK
WriteX 11809 0 11588 11588 NT_STATUS_OK
Flush 11809 NT_STATUS_OK
Close 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11814 NT_STATUS_OK
WriteX 11814 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11814 258 NT_STATUS_OK
WriteX 11814 0 11615 11615 NT_STATUS_OK
Flush 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11816 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11820 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11823 NT_STATUS_OK
WriteX 11823 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11823 258 NT_STATUS_OK
WriteX 11823 0 65536 65536 NT_STATUS_OK
WriteX 11823 65536 16050 16050 NT_STATUS_OK
Close 11823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11803 1939 64 64 NT_STATUS_OK
ReadX 11803 128 248 248 NT_STATUS_OK
ReadX 11803 128 568 568 NT_STATUS_OK
ReadX 11803 3872 1536 1536 NT_STATUS_OK
ReadX 11803 3456 2560 2560 NT_STATUS_OK
ReadX 11803 3136 512 512 NT_STATUS_OK
ReadX 11803 2880 4096 4096 NT_STATUS_OK
ReadX 11803 3264 3072 3072 NT_STATUS_OK
ReadX 11803 320 4096 4096 NT_STATUS_OK
ReadX 11803 1024 4096 4096 NT_STATUS_OK
ReadX 11803 3616 4096 4096 NT_STATUS_OK
ReadX 11803 1939 64 64 NT_STATUS_OK
ReadX 11803 128 248 248 NT_STATUS_OK
ReadX 11803 128 608 608 NT_STATUS_OK
ReadX 11803 2858 1024 1024 NT_STATUS_OK
ReadX 11803 2810 4096 4096 NT_STATUS_OK
ReadX 11803 2826 4096 4096 NT_STATUS_OK
ReadX 11803 2580 2048 2048 NT_STATUS_OK
ReadX 11803 2800 2560 2560 NT_STATUS_OK
ReadX 11803 2100 4096 4096 NT_STATUS_OK
ReadX 11803 2084 4096 4096 NT_STATUS_OK
ReadX 11803 868 4096 4096 NT_STATUS_OK
ReadX 11803 2324 4096 4096 NT_STATUS_OK
ReadX 11803 884 4096 4096 NT_STATUS_OK
ReadX 11803 2604 1024 1024 NT_STATUS_OK
ReadX 11803 580 4096 4096 NT_STATUS_OK
ReadX 11803 596 4096 4096 NT_STATUS_OK
ReadX 11803 2752 4096 4096 NT_STATUS_OK
ReadX 11803 2842 1024 1024 NT_STATUS_OK
ReadX 11803 660 4096 4096 NT_STATUS_OK
ReadX 11803 2720 4096 4096 NT_STATUS_OK
ReadX 11803 2736 4096 4096 NT_STATUS_OK
ReadX 11803 628 4096 4096 NT_STATUS_OK
ReadX 11803 2704 4096 4096 NT_STATUS_OK
ReadX 11803 1556 4096 4096 NT_STATUS_OK
ReadX 11803 576 4096 4096 NT_STATUS_OK
ReadX 11803 3168 1536 1536 NT_STATUS_OK
ReadX 11803 832 4096 4096 NT_STATUS_OK
ReadX 11803 1088 4096 4096 NT_STATUS_OK
ReadX 11803 1344 4096 4096 NT_STATUS_OK
ReadX 11803 1600 4096 4096 NT_STATUS_OK
ReadX 11803 1856 4096 4096 NT_STATUS_OK
ReadX 11803 2112 4096 4096 NT_STATUS_OK
ReadX 11803 1892 4096 4096 NT_STATUS_OK
ReadX 11803 820 4096 4096 NT_STATUS_OK
ReadX 11803 788 4096 4096 NT_STATUS_OK
ReadX 11803 1604 4096 4096 NT_STATUS_OK
ReadX 11803 3648 4096 4096 NT_STATUS_OK
ReadX 11803 2608 4096 4096 NT_STATUS_OK
ReadX 11803 548 4096 4096 NT_STATUS_OK
ReadX 11803 740 4096 4096 NT_STATUS_OK
ReadX 11803 1344 4096 4096 NT_STATUS_OK
ReadX 11803 3392 4096 4096 NT_STATUS_OK
ReadX 11803 3904 4096 4096 NT_STATUS_OK
ReadX 11803 644 4096 4096 NT_STATUS_OK
ReadX 11803 676 4096 4096 NT_STATUS_OK
ReadX 11803 2688 4096 4096 NT_STATUS_OK
ReadX 11803 320 4096 4096 NT_STATUS_OK
ReadX 11803 900 4096 4096 NT_STATUS_OK
ReadX 11803 1908 4096 4096 NT_STATUS_OK
ReadX 11803 852 4096 4096 NT_STATUS_OK
ReadX 11803 724 4096 4096 NT_STATUS_OK
ReadX 11803 2292 4096 4096 NT_STATUS_OK
ReadX 11803 612 4096 4096 NT_STATUS_OK
ReadX 11803 388 4096 4096 NT_STATUS_OK
ReadX 11803 2368 4096 4096 NT_STATUS_OK
ReadX 11803 2624 4096 4096 NT_STATUS_OK
ReadX 11803 500 4096 4096 NT_STATUS_OK
ReadX 11803 356 4096 4096 NT_STATUS_OK
ReadX 11803 1024 4096 4096 NT_STATUS_OK
ReadX 11803 576 4096 4096 NT_STATUS_OK
ReadX 11803 340 4096 4096 NT_STATUS_OK
ReadX 11803 420 4096 4096 NT_STATUS_OK
ReadX 11803 1600 4096 4096 NT_STATUS_OK
ReadX 11803 404 4096 4096 NT_STATUS_OK
ReadX 11803 1428 4096 4096 NT_STATUS_OK
ReadX 11803 2656 4096 4096 NT_STATUS_OK
ReadX 11803 2624 4096 4096 NT_STATUS_OK
ReadX 11803 452 4096 4096 NT_STATUS_OK
ReadX 11803 692 4096 4096 NT_STATUS_OK
ReadX 11803 564 4096 4096 NT_STATUS_OK
ReadX 11803 372 4096 4096 NT_STATUS_OK
ReadX 11803 468 4096 4096 NT_STATUS_OK
ReadX 11803 484 4096 4096 NT_STATUS_OK
ReadX 11803 1088 4096 4096 NT_STATUS_OK
ReadX 11803 1924 4096 4096 NT_STATUS_OK
ReadX 11803 2768 4096 4096 NT_STATUS_OK
ReadX 11803 832 4096 4096 NT_STATUS_OK
ReadX 11803 836 4096 4096 NT_STATUS_OK
ReadX 11803 1856 4096 4096 NT_STATUS_OK
ReadX 11803 2640 4096 4096 NT_STATUS_OK
ReadX 11803 436 4096 4096 NT_STATUS_OK
ReadX 11803 1828 4096 4096 NT_STATUS_OK
ReadX 11803 804 4096 4096 NT_STATUS_OK
ReadX 11803 1860 4096 4096 NT_STATUS_OK
ReadX 11803 1812 4096 4096 NT_STATUS_OK
ReadX 11803 756 4096 4096 NT_STATUS_OK
ReadX 11803 1636 4096 4096 NT_STATUS_OK
ReadX 11803 772 4096 4096 NT_STATUS_OK
ReadX 11803 2036 4096 4096 NT_STATUS_OK
ReadX 11803 1220 4096 4096 NT_STATUS_OK
ReadX 11803 1652 4096 4096 NT_STATUS_OK
ReadX 11803 2588 4096 4096 NT_STATUS_OK
ReadX 11803 916 4096 4096 NT_STATUS_OK
ReadX 11803 260 4096 4096 NT_STATUS_OK
ReadX 11803 932 4096 4096 NT_STATUS_OK
ReadX 11803 2624 4096 4096 NT_STATUS_OK
ReadX 11803 308 4096 4096 NT_STATUS_OK
ReadX 11803 292 4096 4096 NT_STATUS_OK
ReadX 11803 1140 4096 4096 NT_STATUS_OK
ReadX 11803 276 4096 4096 NT_STATUS_OK
ReadX 11803 2020 4096 4096 NT_STATUS_OK
ReadX 11803 2880 4096 4096 NT_STATUS_OK
ReadX 11803 516 4096 4096 NT_STATUS_OK
ReadX 11803 1844 4096 4096 NT_STATUS_OK
ReadX 11803 1124 4096 4096 NT_STATUS_OK
ReadX 11803 3136 4096 4096 NT_STATUS_OK
ReadX 11803 324 4096 4096 NT_STATUS_OK
ReadX 11803 1156 4096 4096 NT_STATUS_OK
ReadX 11803 1172 4096 4096 NT_STATUS_OK
ReadX 11803 2112 4096 4096 NT_STATUS_OK
ReadX 11803 2368 4096 4096 NT_STATUS_OK
ReadX 11803 964 4096 4096 NT_STATUS_OK
ReadX 11803 980 4096 4096 NT_STATUS_OK
ReadX 11803 1012 4096 4096 NT_STATUS_OK
ReadX 11803 532 4096 4096 NT_STATUS_OK
ReadX 11803 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11803 1620 4096 4096 NT_STATUS_OK
ReadX 11803 1604 4096 4096 NT_STATUS_OK
ReadX 11803 2116 4096 4096 NT_STATUS_OK
ReadX 11803 2132 4096 4096 NT_STATUS_OK
ReadX 11803 2148 4096 4096 NT_STATUS_OK
ReadX 11803 2276 4096 4096 NT_STATUS_OK
ReadX 11803 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11825 NT_STATUS_OK
Close 11825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11828 NT_STATUS_OK
QUERY_FILE_INFORMATION 11783 1004 NT_STATUS_OK
Close 11783 NT_STATUS_OK
WriteX 11828 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11828 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11785 1004 NT_STATUS_OK
Close 11785 NT_STATUS_OK
WriteX 11828 0 65536 65536 NT_STATUS_OK
WriteX 11828 65536 64850 64850 NT_STATUS_OK
Close 11828 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11830 NT_STATUS_OK
WriteX 11830 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 258 NT_STATUS_OK
ReadX 11803 2068 4096 4096 NT_STATUS_OK
ReadX 11803 1588 4096 4096 NT_STATUS_OK
ReadX 11803 1572 4096 4096 NT_STATUS_OK
WriteX 11830 0 18630 18630 NT_STATUS_OK
Flush 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11803 612 4096 4096 NT_STATUS_OK
ReadX 11803 564 4096 4096 NT_STATUS_OK
ReadX 11803 1876 4096 4096 NT_STATUS_OK
ReadX 11803 628 4096 4096 NT_STATUS_OK
ReadX 11803 740 4096 4096 NT_STATUS_OK
ReadX 11803 724 4096 4096 NT_STATUS_OK
ReadX 11803 644 4096 4096 NT_STATUS_OK
ReadX 11803 2324 4096 4096 NT_STATUS_OK
ReadX 11803 660 4096 4096 NT_STATUS_OK
ReadX 11803 852 4096 4096 NT_STATUS_OK
ReadX 11803 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11803 2368 4096 4096 NT_STATUS_OK
ReadX 11803 1024 4096 4096 NT_STATUS_OK
ReadX 11803 320 4096 4096 NT_STATUS_OK
ReadX 11803 580 4096 4096 NT_STATUS_OK
ReadX 11803 3136 512 512 NT_STATUS_OK
ReadX 11803 2880 4096 4096 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 61440 4096 4096 NT_STATUS_OK
ReadX 11835 126976 4096 4096 NT_STATUS_OK
WriteX 11835 0 65536 65536 NT_STATUS_OK
WriteX 11835 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 61440 4096 4096 NT_STATUS_OK
ReadX 11836 126976 4096 4096 NT_STATUS_OK
ReadX 11836 192512 4096 4096 NT_STATUS_OK
ReadX 11836 258048 4096 4096 NT_STATUS_OK
WriteX 11836 0 65536 65536 NT_STATUS_OK
WriteX 11836 65536 65536 65536 NT_STATUS_OK
WriteX 11836 131072 65536 65536 NT_STATUS_OK
WriteX 11836 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 61440 4096 4096 NT_STATUS_OK
ReadX 11837 126976 4096 4096 NT_STATUS_OK
ReadX 11837 192512 4096 4096 NT_STATUS_OK
ReadX 11837 258048 4096 4096 NT_STATUS_OK
ReadX 11837 323584 4096 4096 NT_STATUS_OK
ReadX 11837 389120 4096 4096 NT_STATUS_OK
ReadX 11837 454656 4096 4096 NT_STATUS_OK
ReadX 11837 520192 4096 4096 NT_STATUS_OK
WriteX 11837 0 65536 65536 NT_STATUS_OK
WriteX 11837 65536 65536 65536 NT_STATUS_OK
WriteX 11837 131072 65536 65536 NT_STATUS_OK
WriteX 11837 196608 65536 65536 NT_STATUS_OK
WriteX 11837 262144 65536 65536 NT_STATUS_OK
WriteX 11837 327680 65536 65536 NT_STATUS_OK
WriteX 11837 393216 65536 65536 NT_STATUS_OK
WriteX 11837 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11838 NT_STATUS_OK
ReadX 11838 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11840 NT_STATUS_OK
WriteX 11840 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11840 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11838 0 8192 8192 NT_STATUS_OK
Flush 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11838 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11838 0 8192 8192 NT_STATUS_OK
Flush 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11838 0 8192 8192 NT_STATUS_OK
Flush 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11838 0 8192 8192 NT_STATUS_OK
Flush 11838 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11802 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11845 NT_STATUS_OK
WriteX 11845 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 62591 62591 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11847 NT_STATUS_OK
Close 11847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
WriteX 11850 0 10845 10845 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11855 NT_STATUS_OK
WriteX 11855 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11855 258 NT_STATUS_OK
WriteX 11855 0 30118 30118 NT_STATUS_OK
Close 11855 NT_STATUS_OK
WriteX 11838 0 4096 4096 NT_STATUS_OK
WriteX 11840 0 64 64 NT_STATUS_OK
Close 11840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 61440 61440 NT_STATUS_OK
ReadX 11857 61440 4096 4096 NT_STATUS_OK
ReadX 11857 65536 61440 61440 NT_STATUS_OK
ReadX 11857 126976 4096 4096 NT_STATUS_OK
ReadX 11857 131072 61440 61440 NT_STATUS_OK
ReadX 11857 192512 4096 4096 NT_STATUS_OK
ReadX 11857 196608 61440 61440 NT_STATUS_OK
ReadX 11857 258048 4096 4096 NT_STATUS_OK
ReadX 11857 262144 61440 61440 NT_STATUS_OK
ReadX 11857 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 61440 61440 NT_STATUS_OK
ReadX 11858 61440 4096 4096 NT_STATUS_OK
ReadX 11858 65536 61440 61440 NT_STATUS_OK
ReadX 11858 126976 4096 4096 NT_STATUS_OK
ReadX 11858 131072 61440 61440 NT_STATUS_OK
ReadX 11858 192512 4096 4096 NT_STATUS_OK
ReadX 11858 196608 61440 61440 NT_STATUS_OK
ReadX 11858 258048 4096 4096 NT_STATUS_OK
ReadX 11858 262144 61440 61440 NT_STATUS_OK
ReadX 11858 323584 4096 4096 NT_STATUS_OK
ReadX 11858 327680 61440 61440 NT_STATUS_OK
ReadX 11858 389120 4096 4096 NT_STATUS_OK
ReadX 11858 393216 61440 61440 NT_STATUS_OK
ReadX 11858 454656 4096 4096 NT_STATUS_OK
ReadX 11858 458752 61440 61440 NT_STATUS_OK
ReadX 11858 520192 4096 4096 NT_STATUS_OK
ReadX 11858 524288 61440 61440 NT_STATUS_OK
ReadX 11858 585728 4096 4096 NT_STATUS_OK
ReadX 11858 589824 61440 61440 NT_STATUS_OK
ReadX 11858 651264 4096 4096 NT_STATUS_OK
ReadX 11858 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 61440 61440 NT_STATUS_OK
ReadX 11859 61440 4096 4096 NT_STATUS_OK
ReadX 11859 65536 61440 61440 NT_STATUS_OK
ReadX 11859 126976 4096 4096 NT_STATUS_OK
ReadX 11859 131072 61440 61440 NT_STATUS_OK
ReadX 11859 192512 4096 4096 NT_STATUS_OK
ReadX 11859 196608 61440 61440 NT_STATUS_OK
ReadX 11859 258048 4096 4096 NT_STATUS_OK
ReadX 11859 262144 61440 61440 NT_STATUS_OK
ReadX 11859 323584 4096 4096 NT_STATUS_OK
ReadX 11859 327680 61440 61440 NT_STATUS_OK
ReadX 11859 389120 4096 4096 NT_STATUS_OK
ReadX 11859 393216 61440 61440 NT_STATUS_OK
ReadX 11859 454656 4096 4096 NT_STATUS_OK
ReadX 11859 458752 61440 61440 NT_STATUS_OK
ReadX 11859 520192 4096 4096 NT_STATUS_OK
ReadX 11859 524288 61440 61440 NT_STATUS_OK
ReadX 11859 585728 4096 4096 NT_STATUS_OK
ReadX 11859 589824 61440 61440 NT_STATUS_OK
ReadX 11859 651264 4096 4096 NT_STATUS_OK
ReadX 11859 655360 61440 61440 NT_STATUS_OK
ReadX 11859 716800 4096 4096 NT_STATUS_OK
ReadX 11859 720896 61440 61440 NT_STATUS_OK
ReadX 11859 782336 4096 4096 NT_STATUS_OK
ReadX 11859 786432 61440 61440 NT_STATUS_OK
ReadX 11859 847872 4096 4096 NT_STATUS_OK
ReadX 11859 851968 61440 61440 NT_STATUS_OK
ReadX 11859 913408 4096 4096 NT_STATUS_OK
ReadX 11859 917504 61440 61440 NT_STATUS_OK
ReadX 11859 978944 4096 4096 NT_STATUS_OK
ReadX 11859 983040 61440 61440 NT_STATUS_OK
ReadX 11859 1044480 4096 4096 NT_STATUS_OK
ReadX 11859 1048576 61440 61440 NT_STATUS_OK
ReadX 11859 1110016 4096 4096 NT_STATUS_OK
ReadX 11859 1114112 61440 61440 NT_STATUS_OK
ReadX 11859 1175552 4096 4096 NT_STATUS_OK
ReadX 11859 1179648 61440 61440 NT_STATUS_OK
ReadX 11859 1241088 4096 4096 NT_STATUS_OK
ReadX 11859 1245184 61440 61440 NT_STATUS_OK
ReadX 11859 1306624 4096 4096 NT_STATUS_OK
ReadX 11859 1310720 61440 61440 NT_STATUS_OK
ReadX 11859 1372160 4096 4096 NT_STATUS_OK
ReadX 11859 1376256 61440 61440 NT_STATUS_OK
ReadX 11859 1437696 4096 4096 NT_STATUS_OK
ReadX 11859 1441792 61440 61440 NT_STATUS_OK
ReadX 11859 1503232 4096 4096 NT_STATUS_OK
ReadX 11859 1507328 61440 61440 NT_STATUS_OK
ReadX 11859 1568768 4096 4096 NT_STATUS_OK
ReadX 11859 1572864 61440 61440 NT_STATUS_OK
ReadX 11859 1634304 4096 4096 NT_STATUS_OK
ReadX 11859 1638400 61440 61440 NT_STATUS_OK
ReadX 11859 1699840 4096 4096 NT_STATUS_OK
ReadX 11859 1703936 61440 61440 NT_STATUS_OK
ReadX 11859 1765376 4096 4096 NT_STATUS_OK
ReadX 11859 1769472 61440 61440 NT_STATUS_OK
ReadX 11859 1830912 4096 4096 NT_STATUS_OK
ReadX 11859 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
ReadX 11864 4096 4096 4096 NT_STATUS_OK
ReadX 11864 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11868 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11869 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 8192 8192 NT_STATUS_OK
ReadX 11872 8192 8192 8192 NT_STATUS_OK
ReadX 11872 16384 8192 8192 NT_STATUS_OK
ReadX 11872 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11877 NT_STATUS_OK
WriteX 11877 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 10438 10438 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11878 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11881 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11883 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11885 NT_STATUS_OK
Close 11885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
ReadX 11886 4096 4096 4096 NT_STATUS_OK
ReadX 11886 8192 4096 4096 NT_STATUS_OK
ReadX 11886 12288 8192 8192 NT_STATUS_OK
ReadX 11886 20480 8192 8192 NT_STATUS_OK
ReadX 11886 28672 8192 8192 NT_STATUS_OK
ReadX 11886 36864 8192 8192 NT_STATUS_OK
ReadX 11886 45056 8192 8192 NT_STATUS_OK
ReadX 11886 53248 8192 8192 NT_STATUS_OK
ReadX 11886 61440 8192 8192 NT_STATUS_OK
ReadX 11886 69632 8192 8192 NT_STATUS_OK
ReadX 11886 77824 8192 8192 NT_STATUS_OK
ReadX 11886 86016 8192 8192 NT_STATUS_OK
ReadX 11886 94208 8192 8192 NT_STATUS_OK
ReadX 11886 102400 8192 8192 NT_STATUS_OK
ReadX 11886 110592 8192 8192 NT_STATUS_OK
ReadX 11886 118784 8192 8192 NT_STATUS_OK
ReadX 11886 126976 8192 8192 NT_STATUS_OK
ReadX 11886 135168 8192 8192 NT_STATUS_OK
ReadX 11886 143360 8192 8192 NT_STATUS_OK
ReadX 11886 151552 8192 8192 NT_STATUS_OK
ReadX 11886 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Close 11881 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11891 NT_STATUS_OK
WriteX 11891 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11891 258 NT_STATUS_OK
WriteX 11891 0 28489 28489 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11892 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11894 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 8192 8192 NT_STATUS_OK
ReadX 11898 8192 8192 8192 NT_STATUS_OK
ReadX 11898 16384 8192 8192 NT_STATUS_OK
ReadX 11898 24576 8192 8192 NT_STATUS_OK
ReadX 11898 32768 16384 16384 NT_STATUS_OK
ReadX 11898 49152 8192 8192 NT_STATUS_OK
ReadX 11898 57344 8192 8192 NT_STATUS_OK
ReadX 11898 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11903 NT_STATUS_OK
WriteX 11903 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11903 258 NT_STATUS_OK
WriteX 11903 0 29253 29253 NT_STATUS_OK
Close 11903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11910 NT_STATUS_OK
WriteX 11910 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 258 NT_STATUS_OK
WriteX 11910 0 30183 30183 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11913 NT_STATUS_OK
WriteX 11913 0 510 510 NT_STATUS_OK
WriteX 11913 510 512 512 NT_STATUS_OK
WriteX 11913 1022 510 510 NT_STATUS_OK
WriteX 11913 1532 510 510 NT_STATUS_OK
WriteX 11913 2042 168 168 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 4096 4096 NT_STATUS_OK
WriteX 11916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11917 NT_STATUS_OK
ReadX 11917 61440 4096 4096 NT_STATUS_OK
ReadX 11917 126976 4096 4096 NT_STATUS_OK
WriteX 11917 0 65536 65536 NT_STATUS_OK
WriteX 11917 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11918 NT_STATUS_OK
ReadX 11918 61440 4096 4096 NT_STATUS_OK
ReadX 11918 126976 4096 4096 NT_STATUS_OK
ReadX 11918 192512 4096 4096 NT_STATUS_OK
ReadX 11918 258048 4096 4096 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 65536 65536 NT_STATUS_OK
WriteX 11918 131072 65536 65536 NT_STATUS_OK
WriteX 11918 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 61440 4096 4096 NT_STATUS_OK
ReadX 11919 126976 4096 4096 NT_STATUS_OK
ReadX 11919 192512 4096 4096 NT_STATUS_OK
ReadX 11919 258048 4096 4096 NT_STATUS_OK
ReadX 11919 323584 4096 4096 NT_STATUS_OK
ReadX 11919 389120 4096 4096 NT_STATUS_OK
ReadX 11919 454656 4096 4096 NT_STATUS_OK
ReadX 11919 520192 4096 4096 NT_STATUS_OK
WriteX 11919 0 65536 65536 NT_STATUS_OK
WriteX 11919 65536 65536 65536 NT_STATUS_OK
WriteX 11919 131072 65536 65536 NT_STATUS_OK
WriteX 11919 196608 65536 65536 NT_STATUS_OK
WriteX 11919 262144 65536 65536 NT_STATUS_OK
WriteX 11919 327680 65536 65536 NT_STATUS_OK
WriteX 11919 393216 65536 65536 NT_STATUS_OK
WriteX 11919 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11916 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11926 NT_STATUS_OK
Close 11926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11931 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11938 NT_STATUS_OK
Close 11938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11944 NT_STATUS_OK
Close 11944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11979 NT_STATUS_OK
Close 11979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11988 NT_STATUS_OK
WriteX 11988 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11988 0 65536 65536 NT_STATUS_OK
WriteX 11988 65536 65536 65536 NT_STATUS_OK
WriteX 11988 131072 65536 65536 NT_STATUS_OK
WriteX 11988 196608 65536 65536 NT_STATUS_OK
WriteX 11988 262144 26634 26634 NT_STATUS_OK
Close 11988 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11994 NT_STATUS_OK
Close 11994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 4096 4096 NT_STATUS_OK
ReadX 11996 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11997 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12001 NT_STATUS_OK
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12006 NT_STATUS_OK
Close 12006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12010 NT_STATUS_OK
Close 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12013 NT_STATUS_OK
Close 12013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12019 NT_STATUS_OK
Close 12019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12061 NT_STATUS_OK
Close 12061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12063 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12073 NT_STATUS_OK
Close 12073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
Close 12076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12077 NT_STATUS_OK
ReadX 12077 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12087 NT_STATUS_OK
Close 12087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
Close 12089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12120 0 4096 4096 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
ReadX 12122 4096 4096 4096 NT_STATUS_OK
ReadX 12122 8192 4096 4096 NT_STATUS_OK
ReadX 12122 12288 4096 4096 NT_STATUS_OK
ReadX 12122 16384 4096 4096 NT_STATUS_OK
ReadX 12122 20480 4096 4096 NT_STATUS_OK
ReadX 12122 24576 4096 4096 NT_STATUS_OK
ReadX 12122 28672 4096 4096 NT_STATUS_OK
ReadX 12122 32768 4096 4096 NT_STATUS_OK
ReadX 12122 36864 4096 4096 NT_STATUS_OK
ReadX 12122 40960 4096 4096 NT_STATUS_OK
ReadX 12122 45056 4096 4096 NT_STATUS_OK
ReadX 12122 49152 4096 4096 NT_STATUS_OK
ReadX 12122 53248 4096 4096 NT_STATUS_OK
ReadX 12122 57344 4096 4096 NT_STATUS_OK
ReadX 12122 61440 4096 4096 NT_STATUS_OK
ReadX 12122 65536 4096 4096 NT_STATUS_OK
ReadX 12122 69632 4096 4096 NT_STATUS_OK
ReadX 12122 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12122 1004 NT_STATUS_OK
WriteX 12122 0 4096 4096 NT_STATUS_OK
Close 12122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12123 NT_STATUS_OK
SET_FILE_INFORMATION 12123 1004 NT_STATUS_OK
Close 12123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12125 NT_STATUS_OK
Close 12125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12128 NT_STATUS_OK
WriteX 12128 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12128 258 NT_STATUS_OK
WriteX 12128 0 65536 65536 NT_STATUS_OK
WriteX 12128 65536 19979 19979 NT_STATUS_OK
Close 12128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Flush 12129 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Flush 12129 NT_STATUS_OK
QUERY_FILE_INFORMATION 12129 1004 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Flush 12129 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Flush 12129 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Flush 12129 NT_STATUS_OK
SET_FILE_INFORMATION 12129 1004 NT_STATUS_OK
WriteX 12129 0 4096 4096 NT_STATUS_OK
Flush 12129 NT_STATUS_OK
Close 12129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12130 NT_STATUS_OK
ReadX 12130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 4096 4096 NT_STATUS_OK
Close 12130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12132 NT_STATUS_OK
ReadX 12132 0 4096 4096 NT_STATUS_OK
Close 12132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 4096 4096 NT_STATUS_OK
Close 12133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
WriteX 12134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12135 NT_STATUS_OK
Close 12135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12140 NT_STATUS_OK
WriteX 12140 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 65536 65536 NT_STATUS_OK
WriteX 12140 65536 17654 17654 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1004 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12142 NT_STATUS_OK
SET_FILE_INFORMATION 12142 1004 NT_STATUS_OK
Close 12142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12143 NT_STATUS_OK
ReadX 12143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12144 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12146 NT_STATUS_OK
ReadX 12146 0 4096 4096 NT_STATUS_OK
ReadX 12146 4096 4096 4096 NT_STATUS_OK
ReadX 12146 8192 4096 4096 NT_STATUS_OK
ReadX 12146 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12146 16384 4096 4096 NT_STATUS_OK
ReadX 12146 20480 4096 4096 NT_STATUS_OK
ReadX 12146 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12147 NT_STATUS_OK
ReadX 12147 0 4096 4096 NT_STATUS_OK
Close 12147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
Close 12148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12149 NT_STATUS_OK
ReadX 12149 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12149 1004 NT_STATUS_OK
WriteX 12149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12149 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12155 NT_STATUS_OK
WriteX 12155 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12155 258 NT_STATUS_OK
WriteX 12155 0 65536 65536 NT_STATUS_OK
WriteX 12155 65536 19490 19490 NT_STATUS_OK
Close 12155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 4096 4096 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
Flush 12156 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
Flush 12156 NT_STATUS_OK
QUERY_FILE_INFORMATION 12156 1004 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
Flush 12156 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
Flush 12156 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
Flush 12156 NT_STATUS_OK
SET_FILE_INFORMATION 12156 1004 NT_STATUS_OK
WriteX 12156 0 4096 4096 NT_STATUS_OK
Flush 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12157 NT_STATUS_OK
SET_FILE_INFORMATION 12157 1004 NT_STATUS_OK
Close 12157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12159 NT_STATUS_OK
Close 12159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12161 0 4096 4096 NT_STATUS_OK
Close 12161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12163 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
ReadX 12163 4096 4096 4096 NT_STATUS_OK
ReadX 12163 8192 4096 4096 NT_STATUS_OK
ReadX 12163 12288 4096 4096 NT_STATUS_OK
ReadX 12163 16384 4096 4096 NT_STATUS_OK
ReadX 12163 20480 4096 4096 NT_STATUS_OK
ReadX 12163 24576 4096 4096 NT_STATUS_OK
ReadX 12163 28672 4096 4096 NT_STATUS_OK
ReadX 12163 32768 4096 4096 NT_STATUS_OK
ReadX 12163 36864 4096 4096 NT_STATUS_OK
ReadX 12163 40960 4096 4096 NT_STATUS_OK
ReadX 12163 45056 4096 4096 NT_STATUS_OK
ReadX 12163 49152 4096 4096 NT_STATUS_OK
ReadX 12163 53248 4096 4096 NT_STATUS_OK
ReadX 12163 57344 4096 4096 NT_STATUS_OK
ReadX 12163 61440 4096 4096 NT_STATUS_OK
ReadX 12163 65536 4096 4096 NT_STATUS_OK
ReadX 12163 69632 4096 4096 NT_STATUS_OK
ReadX 12163 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12163 1004 NT_STATUS_OK
WriteX 12163 0 4096 4096 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12164 NT_STATUS_OK
SET_FILE_INFORMATION 12164 1004 NT_STATUS_OK
Close 12164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12169 NT_STATUS_OK
WriteX 12169 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12169 258 NT_STATUS_OK
WriteX 12169 0 65536 65536 NT_STATUS_OK
WriteX 12169 65536 8866 8866 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
WriteX 12170 0 4096 4096 NT_STATUS_OK
Flush 12170 NT_STATUS_OK
SET_FILE_INFORMATION 12170 1004 NT_STATUS_OK
WriteX 12170 0 4096 4096 NT_STATUS_OK
Flush 12170 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
Close 12172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12173 NT_STATUS_OK
ReadX 12173 0 4096 4096 NT_STATUS_OK
Close 12173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12174 NT_STATUS_OK
ReadX 12174 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12174 1004 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12175 NT_STATUS_OK
Close 12175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12174 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12180 NT_STATUS_OK
WriteX 12180 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 258 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 9298 9298 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 4096 4096 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
SET_FILE_INFORMATION 12181 1004 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
Close 12181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12182 NT_STATUS_OK
SET_FILE_INFORMATION 12182 1004 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12183 NT_STATUS_OK
ReadX 12183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12184 NT_STATUS_OK
Close 12184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12187 0 4096 4096 NT_STATUS_OK
Close 12187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12188 4096 4096 4096 NT_STATUS_OK
ReadX 12188 8192 4096 4096 NT_STATUS_OK
ReadX 12188 12288 4096 4096 NT_STATUS_OK
ReadX 12188 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12189 NT_STATUS_OK
ReadX 12189 0 4096 4096 NT_STATUS_OK
Close 12189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 4096 4096 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12191 1004 NT_STATUS_OK
WriteX 12191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12192 NT_STATUS_OK
Close 12192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12188 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12194 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12197 NT_STATUS_OK
WriteX 12197 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12197 258 NT_STATUS_OK
WriteX 12197 0 65536 65536 NT_STATUS_OK
WriteX 12197 65536 11540 11540 NT_STATUS_OK
Close 12197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
WriteX 12198 0 4096 4096 NT_STATUS_OK
Flush 12198 NT_STATUS_OK
SET_FILE_INFORMATION 12198 1004 NT_STATUS_OK
WriteX 12198 0 4096 4096 NT_STATUS_OK
Flush 12198 NT_STATUS_OK
Close 12198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12199 NT_STATUS_OK
SET_FILE_INFORMATION 12199 1004 NT_STATUS_OK
Close 12199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12203 NT_STATUS_OK
ReadX 12203 61440 4096 4096 NT_STATUS_OK
ReadX 12203 126976 4096 4096 NT_STATUS_OK
WriteX 12203 0 65536 65536 NT_STATUS_OK
WriteX 12203 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 61440 4096 4096 NT_STATUS_OK
ReadX 12204 126976 4096 4096 NT_STATUS_OK
ReadX 12204 192512 4096 4096 NT_STATUS_OK
ReadX 12204 258048 4096 4096 NT_STATUS_OK
WriteX 12204 0 65536 65536 NT_STATUS_OK
WriteX 12204 65536 65536 65536 NT_STATUS_OK
WriteX 12204 131072 65536 65536 NT_STATUS_OK
WriteX 12204 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 61440 4096 4096 NT_STATUS_OK
ReadX 12205 126976 4096 4096 NT_STATUS_OK
ReadX 12205 192512 4096 4096 NT_STATUS_OK
ReadX 12205 258048 4096 4096 NT_STATUS_OK
ReadX 12205 323584 4096 4096 NT_STATUS_OK
ReadX 12205 389120 4096 4096 NT_STATUS_OK
ReadX 12205 454656 4096 4096 NT_STATUS_OK
ReadX 12205 520192 4096 4096 NT_STATUS_OK
WriteX 12205 0 65536 65536 NT_STATUS_OK
WriteX 12205 65536 65536 65536 NT_STATUS_OK
WriteX 12205 131072 65536 65536 NT_STATUS_OK
WriteX 12205 196608 65536 65536 NT_STATUS_OK
WriteX 12205 262144 65536 65536 NT_STATUS_OK
WriteX 12205 327680 65536 65536 NT_STATUS_OK
WriteX 12205 393216 65536 65536 NT_STATUS_OK
WriteX 12205 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
ReadX 12206 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12207 NT_STATUS_OK
WriteX 12207 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12207 258 NT_STATUS_OK
WriteX 12207 0 53 53 NT_STATUS_OK
Close 12207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Close 12203 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12206 8192 4096 4096 NT_STATUS_OK
ReadX 12206 12288 4096 4096 NT_STATUS_OK
WriteX 12210 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12210 258 NT_STATUS_OK
ReadX 12206 16384 4096 4096 NT_STATUS_OK
ReadX 12206 20480 4096 4096 NT_STATUS_OK
WriteX 12210 0 15360 15360 NT_STATUS_OK
Close 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12211 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12211 1004 NT_STATUS_OK
WriteX 12211 0 4096 4096 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12212 NT_STATUS_OK
Close 12212 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12214 4096 4096 4096 NT_STATUS_OK
ReadX 12214 8192 4096 4096 NT_STATUS_OK
ReadX 12214 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
ReadX 12217 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
ReadX 12218 4096 4096 4096 NT_STATUS_OK
ReadX 12218 8192 4096 4096 NT_STATUS_OK
Close 12217 NT_STATUS_OK
Close 12218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12219 NT_STATUS_OK
WriteX 12219 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12219 258 NT_STATUS_OK
WriteX 12219 0 15360 15360 NT_STATUS_OK
Close 12219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12220 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12221 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12223 NT_STATUS_OK
ReadX 12223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12224 NT_STATUS_OK
SET_FILE_INFORMATION 12224 1004 NT_STATUS_OK
Close 12224 NT_STATUS_OK
WriteX 12220 0 4096 4096 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
ReadX 12227 4096 4096 4096 NT_STATUS_OK
ReadX 12227 8192 4096 4096 NT_STATUS_OK
ReadX 12227 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12229 NT_STATUS_OK
WriteX 12229 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 258 NT_STATUS_OK
WriteX 12229 0 53 53 NT_STATUS_OK
Close 12229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12228 4096 4096 4096 NT_STATUS_OK
ReadX 12228 8192 4096 4096 NT_STATUS_OK
ReadX 12228 12288 4096 4096 NT_STATUS_OK
WriteX 12232 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 258 NT_STATUS_OK
WriteX 12232 0 12006 12006 NT_STATUS_OK
Close 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12233 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12233 1004 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12234 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12236 4096 4096 4096 NT_STATUS_OK
ReadX 12236 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12239 NT_STATUS_OK
WriteX 12239 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 258 NT_STATUS_OK
WriteX 12239 0 11991 11991 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12240 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12240 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12244 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
Close 12244 NT_STATUS_OK
WriteX 12240 0 4096 4096 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12248 NT_STATUS_OK
Close 12248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12247 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12247 1004 NT_STATUS_OK
ReadX 12247 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12247 1004 NT_STATUS_OK
WriteX 12247 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12247 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12247 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12247 1004 NT_STATUS_OK
Close 12223 NT_STATUS_OK
WriteX 12227 0 19054 19054 NT_STATUS_OK
WriteX 12247 0 12288 12288 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12250 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12227 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12252 NT_STATUS_OK
Close 12252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 61440 61440 NT_STATUS_OK
ReadX 12254 61440 4096 4096 NT_STATUS_OK
ReadX 12254 65536 61440 61440 NT_STATUS_OK
ReadX 12254 126976 4096 4096 NT_STATUS_OK
ReadX 12254 131072 61440 61440 NT_STATUS_OK
ReadX 12254 192512 4096 4096 NT_STATUS_OK
ReadX 12254 196608 61440 61440 NT_STATUS_OK
ReadX 12254 258048 4096 4096 NT_STATUS_OK
ReadX 12254 262144 61440 61440 NT_STATUS_OK
ReadX 12254 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 61440 61440 NT_STATUS_OK
ReadX 12255 61440 4096 4096 NT_STATUS_OK
ReadX 12255 65536 61440 61440 NT_STATUS_OK
ReadX 12255 126976 4096 4096 NT_STATUS_OK
ReadX 12255 131072 61440 61440 NT_STATUS_OK
ReadX 12255 192512 4096 4096 NT_STATUS_OK
ReadX 12255 196608 61440 61440 NT_STATUS_OK
ReadX 12255 258048 4096 4096 NT_STATUS_OK
ReadX 12255 262144 61440 61440 NT_STATUS_OK
ReadX 12255 323584 4096 4096 NT_STATUS_OK
ReadX 12255 327680 61440 61440 NT_STATUS_OK
ReadX 12255 389120 4096 4096 NT_STATUS_OK
ReadX 12255 393216 61440 61440 NT_STATUS_OK
ReadX 12255 454656 4096 4096 NT_STATUS_OK
ReadX 12255 458752 61440 61440 NT_STATUS_OK
ReadX 12255 520192 4096 4096 NT_STATUS_OK
ReadX 12255 524288 61440 61440 NT_STATUS_OK
ReadX 12255 585728 4096 4096 NT_STATUS_OK
ReadX 12255 589824 61440 61440 NT_STATUS_OK
ReadX 12255 651264 4096 4096 NT_STATUS_OK
ReadX 12255 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 61440 61440 NT_STATUS_OK
ReadX 12256 61440 4096 4096 NT_STATUS_OK
ReadX 12256 65536 61440 61440 NT_STATUS_OK
ReadX 12256 126976 4096 4096 NT_STATUS_OK
ReadX 12256 131072 61440 61440 NT_STATUS_OK
ReadX 12256 192512 4096 4096 NT_STATUS_OK
ReadX 12256 196608 61440 61440 NT_STATUS_OK
ReadX 12256 258048 4096 4096 NT_STATUS_OK
ReadX 12256 262144 61440 61440 NT_STATUS_OK
ReadX 12256 323584 4096 4096 NT_STATUS_OK
ReadX 12256 327680 61440 61440 NT_STATUS_OK
ReadX 12256 389120 4096 4096 NT_STATUS_OK
ReadX 12256 393216 61440 61440 NT_STATUS_OK
ReadX 12256 454656 4096 4096 NT_STATUS_OK
ReadX 12256 458752 61440 61440 NT_STATUS_OK
ReadX 12256 520192 4096 4096 NT_STATUS_OK
ReadX 12256 524288 61440 61440 NT_STATUS_OK
ReadX 12256 585728 4096 4096 NT_STATUS_OK
ReadX 12256 589824 61440 61440 NT_STATUS_OK
ReadX 12256 651264 4096 4096 NT_STATUS_OK
ReadX 12256 655360 61440 61440 NT_STATUS_OK
ReadX 12256 716800 4096 4096 NT_STATUS_OK
ReadX 12256 720896 61440 61440 NT_STATUS_OK
ReadX 12256 782336 4096 4096 NT_STATUS_OK
ReadX 12256 786432 61440 61440 NT_STATUS_OK
ReadX 12256 847872 4096 4096 NT_STATUS_OK
ReadX 12256 851968 61440 61440 NT_STATUS_OK
ReadX 12256 913408 4096 4096 NT_STATUS_OK
ReadX 12256 917504 61440 61440 NT_STATUS_OK
ReadX 12256 978944 4096 4096 NT_STATUS_OK
ReadX 12256 983040 61440 61440 NT_STATUS_OK
ReadX 12256 1044480 4096 4096 NT_STATUS_OK
ReadX 12256 1048576 61440 61440 NT_STATUS_OK
ReadX 12256 1110016 4096 4096 NT_STATUS_OK
ReadX 12256 1114112 61440 61440 NT_STATUS_OK
ReadX 12256 1175552 4096 4096 NT_STATUS_OK
ReadX 12256 1179648 61440 61440 NT_STATUS_OK
ReadX 12256 1241088 4096 4096 NT_STATUS_OK
ReadX 12256 1245184 61440 61440 NT_STATUS_OK
ReadX 12256 1306624 4096 4096 NT_STATUS_OK
ReadX 12256 1310720 61440 61440 NT_STATUS_OK
ReadX 12256 1372160 4096 4096 NT_STATUS_OK
ReadX 12256 1376256 61440 61440 NT_STATUS_OK
ReadX 12256 1437696 4096 4096 NT_STATUS_OK
ReadX 12256 1441792 61440 61440 NT_STATUS_OK
ReadX 12256 1503232 4096 4096 NT_STATUS_OK
ReadX 12256 1507328 61440 61440 NT_STATUS_OK
ReadX 12256 1568768 4096 4096 NT_STATUS_OK
ReadX 12256 1572864 61440 61440 NT_STATUS_OK
ReadX 12256 1634304 4096 4096 NT_STATUS_OK
ReadX 12256 1638400 61440 61440 NT_STATUS_OK
ReadX 12256 1699840 4096 4096 NT_STATUS_OK
ReadX 12256 1703936 61440 61440 NT_STATUS_OK
ReadX 12256 1765376 4096 4096 NT_STATUS_OK
ReadX 12256 1769472 61440 61440 NT_STATUS_OK
ReadX 12256 1830912 4096 4096 NT_STATUS_OK
ReadX 12256 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12263 NT_STATUS_OK
QUERY_FILE_INFORMATION 12263 1004 NT_STATUS_OK
WriteX 12263 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12263 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12265 NT_STATUS_OK
WriteX 12265 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12265 258 NT_STATUS_OK
WriteX 12265 0 491 491 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12263 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12268 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12269 NT_STATUS_OK
WriteX 12269 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 258 NT_STATUS_OK
WriteX 12269 0 543 543 NT_STATUS_OK
Close 12269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12270 NT_STATUS_OK
ReadX 12270 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Close 12258 NT_STATUS_OK
Close 12259 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12283 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 1004 NT_STATUS_OK
WriteX 12283 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 258 NT_STATUS_OK
WriteX 12283 0 2048 2048 NT_STATUS_OK
Close 12283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12284 0 4096 4096 NT_STATUS_OK
Flush 12284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12284 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12289 NT_STATUS_OK
WriteX 12289 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 258 NT_STATUS_OK
WriteX 12289 0 2048 2048 NT_STATUS_OK
Close 12289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12290 NT_STATUS_OK
ReadX 12290 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12294 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12295 NT_STATUS_OK
WriteX 12295 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12295 258 NT_STATUS_OK
WriteX 12295 0 2048 2048 NT_STATUS_OK
Close 12295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 2048 2048 NT_STATUS_OK
ReadX 12274 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12278 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12290 0 4096 4096 NT_STATUS_OK
WriteX 12274 0 8192 8192 NT_STATUS_OK
WriteX 12275 0 4096 4096 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
ReadX 12290 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12300 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12277 NT_STATUS_OK
Close 12290 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12310 NT_STATUS_OK
ReadX 12310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12320 NT_STATUS_OK
QUERY_FILE_INFORMATION 12320 1004 NT_STATUS_OK
WriteX 12320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12320 258 NT_STATUS_OK
WriteX 12320 0 2048 2048 NT_STATUS_OK
Close 12320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12328 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 258 NT_STATUS_OK
WriteX 12328 0 2048 2048 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
Flush 12321 NT_STATUS_OK
WriteX 12329 0 4096 4096 NT_STATUS_OK
Flush 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12323 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12331 NT_STATUS_OK
WriteX 12331 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 258 NT_STATUS_OK
WriteX 12331 0 4096 4096 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12332 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12333 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12334 NT_STATUS_OK
WriteX 12334 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 4096 4096 NT_STATUS_OK
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12309 NT_STATUS_OK
Close 12323 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Close 12310 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12308 NT_STATUS_OK
Close 12305 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12341 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12342 NT_STATUS_OK
WriteX 12342 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 258 NT_STATUS_OK
WriteX 12342 0 2048 2048 NT_STATUS_OK
Close 12342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12344 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12345 NT_STATUS_OK
ReadX 12345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12357 NT_STATUS_OK
QUERY_FILE_INFORMATION 12357 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Close 12343 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Close 12344 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12359 NT_STATUS_OK
QUERY_FILE_INFORMATION 12359 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12379 NT_STATUS_OK
QUERY_FILE_INFORMATION 12379 1004 NT_STATUS_OK
WriteX 12379 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12379 258 NT_STATUS_OK
WriteX 12379 0 2048 2048 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12382 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12386 NT_STATUS_OK
ReadX 12386 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12391 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 1004 NT_STATUS_OK
WriteX 12391 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 2048 2048 NT_STATUS_OK
Close 12391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12399 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 1004 NT_STATUS_OK
WriteX 12399 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 258 NT_STATUS_OK
WriteX 12399 0 2048 2048 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12380 0 4096 4096 NT_STATUS_OK
Flush 12380 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12400 0 4096 4096 NT_STATUS_OK
Flush 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12380 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12400 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12382 4096 16384 16384 NT_STATUS_OK
ReadX 12362 4096 16384 16384 NT_STATUS_OK
ReadX 12394 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 2048 2048 NT_STATUS_OK
WriteX 12402 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12403 NT_STATUS_OK
QUERY_FILE_INFORMATION 12403 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12386 NT_STATUS_OK
Close 12374 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12368 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12369 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12405 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12407 NT_STATUS_OK
QUERY_FILE_INFORMATION 12407 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12413 NT_STATUS_OK
ReadX 12413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12410 4096 16384 16384 NT_STATUS_OK
WriteX 12410 0 4096 4096 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
WriteX 12412 0 4096 4096 NT_STATUS_OK
WriteX 12413 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12421 NT_STATUS_OK
ReadX 12421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12422 NT_STATUS_OK
ReadX 12422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12429 NT_STATUS_OK
ReadX 12429 0 8192 8192 NT_STATUS_OK
ReadX 12416 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12430 0 4096 4096 NT_STATUS_OK
ReadX 12430 4096 4096 4096 NT_STATUS_OK
ReadX 12430 8192 4096 4096 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12431 0 4096 4096 NT_STATUS_OK
ReadX 12431 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12410 0 4096 4096 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
WriteX 12412 0 4096 4096 NT_STATUS_OK
WriteX 12413 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12435 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12436 NT_STATUS_OK
QUERY_FILE_INFORMATION 12436 1004 NT_STATUS_OK
WriteX 12436 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12436 258 NT_STATUS_OK
WriteX 12436 0 2048 2048 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12437 NT_STATUS_OK
ReadX 12437 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
ReadX 12439 4096 4096 4096 NT_STATUS_OK
WriteX 12439 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 0 4096 4096 NT_STATUS_OK
ReadX 12441 4096 4096 4096 NT_STATUS_OK
WriteX 12441 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12442 NT_STATUS_OK
QUERY_FILE_INFORMATION 12442 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12429 NT_STATUS_OK
Close 12414 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12412 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12422 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12423 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12425 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12444 0 4096 4096 NT_STATUS_OK
ReadX 12444 4096 4096 4096 NT_STATUS_OK
ReadX 12444 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
ReadX 12445 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12462 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 1004 NT_STATUS_OK
WriteX 12462 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 258 NT_STATUS_OK
WriteX 12462 0 2048 2048 NT_STATUS_OK
Close 12462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12463 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12467 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12468 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1004 NT_STATUS_OK
WriteX 12468 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 258 NT_STATUS_OK
WriteX 12468 0 2048 2048 NT_STATUS_OK
Close 12468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12452 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12470 NT_STATUS_OK
QUERY_FILE_INFORMATION 12470 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 61440 4096 4096 NT_STATUS_OK
ReadX 12474 126976 4096 4096 NT_STATUS_OK
WriteX 12474 0 65536 65536 NT_STATUS_OK
WriteX 12474 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 61440 4096 4096 NT_STATUS_OK
ReadX 12475 126976 4096 4096 NT_STATUS_OK
ReadX 12475 192512 4096 4096 NT_STATUS_OK
ReadX 12475 258048 4096 4096 NT_STATUS_OK
WriteX 12475 0 65536 65536 NT_STATUS_OK
WriteX 12475 65536 65536 65536 NT_STATUS_OK
WriteX 12475 131072 65536 65536 NT_STATUS_OK
WriteX 12475 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 61440 4096 4096 NT_STATUS_OK
ReadX 12476 126976 4096 4096 NT_STATUS_OK
ReadX 12476 192512 4096 4096 NT_STATUS_OK
ReadX 12476 258048 4096 4096 NT_STATUS_OK
ReadX 12476 323584 4096 4096 NT_STATUS_OK
ReadX 12476 389120 4096 4096 NT_STATUS_OK
ReadX 12476 454656 4096 4096 NT_STATUS_OK
ReadX 12476 520192 4096 4096 NT_STATUS_OK
WriteX 12476 0 65536 65536 NT_STATUS_OK
WriteX 12476 65536 65536 65536 NT_STATUS_OK
WriteX 12476 131072 65536 65536 NT_STATUS_OK
WriteX 12476 196608 65536 65536 NT_STATUS_OK
WriteX 12476 262144 65536 65536 NT_STATUS_OK
WriteX 12476 327680 65536 65536 NT_STATUS_OK
WriteX 12476 393216 65536 65536 NT_STATUS_OK
WriteX 12476 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12477 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12477 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12477 8192 4096 4096 NT_STATUS_OK
ReadX 12477 12288 4096 4096 NT_STATUS_OK
ReadX 12477 16384 4096 4096 NT_STATUS_OK
ReadX 12477 20480 4096 4096 NT_STATUS_OK
ReadX 12477 24576 4096 4096 NT_STATUS_OK
ReadX 12477 28672 4096 4096 NT_STATUS_OK
ReadX 12477 32768 4096 4096 NT_STATUS_OK
ReadX 12477 36864 4096 4096 NT_STATUS_OK
ReadX 12477 40960 4096 4096 NT_STATUS_OK
ReadX 12477 45056 4096 4096 NT_STATUS_OK
ReadX 12477 49152 4096 4096 NT_STATUS_OK
ReadX 12477 53248 4096 4096 NT_STATUS_OK
ReadX 12477 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12477 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12480 NT_STATUS_OK
WriteX 12480 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12480 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12480 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
WriteX 12480 0 57088 57088 NT_STATUS_OK
WriteX 12480 0 4096 4096 NT_STATUS_OK
Flush 12480 NT_STATUS_OK
Close 12477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12481 NT_STATUS_OK
SET_FILE_INFORMATION 12481 1004 NT_STATUS_OK
Close 12481 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
WriteX 12480 0 4096 4096 NT_STATUS_OK
Close 12480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12484 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12485 NT_STATUS_OK
WriteX 12485 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12485 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12485 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12485 1004 NT_STATUS_OK
WriteX 12485 0 51456 51456 NT_STATUS_OK
WriteX 12485 0 4096 4096 NT_STATUS_OK
Flush 12485 NT_STATUS_OK
SET_FILE_INFORMATION 12485 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12485 1004 NT_STATUS_OK
WriteX 12485 0 4096 4096 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12487 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12489 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12491 NT_STATUS_OK
Close 12491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12494 NT_STATUS_OK
WriteX 12494 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
WriteX 12494 0 53077 53077 NT_STATUS_OK
Close 12494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12495 NT_STATUS_OK
WriteX 12495 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12495 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12495 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12495 1004 NT_STATUS_OK
WriteX 12495 0 65536 65536 NT_STATUS_OK
WriteX 12495 65536 1856 1856 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Flush 12495 NT_STATUS_OK
SET_FILE_INFORMATION 12495 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12495 1004 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12504 NT_STATUS_OK
WriteX 12504 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12504 258 NT_STATUS_OK
WriteX 12504 0 7983 7983 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12506 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12509 NT_STATUS_OK
WriteX 12509 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12509 258 NT_STATUS_OK
WriteX 12509 0 65536 65536 NT_STATUS_OK
WriteX 12509 65536 65536 65536 NT_STATUS_OK
WriteX 12509 131072 65536 65536 NT_STATUS_OK
WriteX 12509 196608 65536 65536 NT_STATUS_OK
WriteX 12509 262144 65536 65536 NT_STATUS_OK
WriteX 12509 327680 65536 65536 NT_STATUS_OK
WriteX 12509 393216 65536 65536 NT_STATUS_OK
WriteX 12509 458752 46731 46731 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12510 NT_STATUS_OK
WriteX 12510 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12510 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12499 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12510 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12510 1004 NT_STATUS_OK
WriteX 12510 0 65536 65536 NT_STATUS_OK
WriteX 12510 65536 22848 22848 NT_STATUS_OK
WriteX 12510 0 4096 4096 NT_STATUS_OK
Flush 12510 NT_STATUS_OK
SET_FILE_INFORMATION 12510 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12510 1004 NT_STATUS_OK
WriteX 12510 0 4096 4096 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12512 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12514 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12515 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12515 1004 NT_STATUS_OK
ReadX 12515 8192 4096 4096 NT_STATUS_OK
ReadX 12515 12288 4096 4096 NT_STATUS_OK
ReadX 12515 16384 4096 4096 NT_STATUS_OK
ReadX 12515 20480 4096 4096 NT_STATUS_OK
ReadX 12515 24576 4096 4096 NT_STATUS_OK
ReadX 12515 28672 4096 4096 NT_STATUS_OK
ReadX 12515 32768 4096 4096 NT_STATUS_OK
ReadX 12515 36864 4096 4096 NT_STATUS_OK
ReadX 12515 40960 4096 4096 NT_STATUS_OK
ReadX 12515 45056 4096 4096 NT_STATUS_OK
ReadX 12515 49152 4096 4096 NT_STATUS_OK
ReadX 12515 53248 4096 4096 NT_STATUS_OK
ReadX 12515 57344 4096 4096 NT_STATUS_OK
ReadX 12515 61440 4096 4096 NT_STATUS_OK
ReadX 12515 65536 4096 4096 NT_STATUS_OK
ReadX 12515 69632 4096 4096 NT_STATUS_OK
ReadX 12515 73728 4096 4096 NT_STATUS_OK
ReadX 12515 77824 4096 4096 NT_STATUS_OK
ReadX 12515 81920 4096 4096 NT_STATUS_OK
ReadX 12515 86016 4096 4096 NT_STATUS_OK
ReadX 12515 90112 4096 4096 NT_STATUS_OK
ReadX 12515 94208 4096 4096 NT_STATUS_OK
ReadX 12515 98304 4096 4096 NT_STATUS_OK
ReadX 12515 102400 4096 4096 NT_STATUS_OK
ReadX 12515 106496 4096 4096 NT_STATUS_OK
ReadX 12515 110592 4096 4096 NT_STATUS_OK
ReadX 12515 114688 4096 4096 NT_STATUS_OK
ReadX 12515 118784 4096 4096 NT_STATUS_OK
ReadX 12515 122880 4096 4096 NT_STATUS_OK
ReadX 12515 126976 4096 4096 NT_STATUS_OK
ReadX 12515 131072 4096 4096 NT_STATUS_OK
ReadX 12515 135168 4096 4096 NT_STATUS_OK
ReadX 12515 139264 4096 4096 NT_STATUS_OK
ReadX 12515 143360 4096 4096 NT_STATUS_OK
ReadX 12515 147456 4096 4096 NT_STATUS_OK
ReadX 12515 151552 4096 4096 NT_STATUS_OK
ReadX 12515 155648 4096 4096 NT_STATUS_OK
ReadX 12515 159744 4096 4096 NT_STATUS_OK
ReadX 12515 163840 4096 4096 NT_STATUS_OK
ReadX 12515 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12515 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12518 NT_STATUS_OK
WriteX 12518 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12518 258 NT_STATUS_OK
Close 12515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12519 NT_STATUS_OK
SET_FILE_INFORMATION 12519 1004 NT_STATUS_OK
Close 12519 NT_STATUS_OK
WriteX 12518 0 42388 42388 NT_STATUS_OK
Close 12518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12520 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
ReadX 12522 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12523 NT_STATUS_OK
WriteX 12523 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12523 258 NT_STATUS_OK
SET_FILE_INFORMATION 12523 1004 NT_STATUS_OK
WriteX 12523 0 42652 42652 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12525 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
ReadX 12527 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12529 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12532 NT_STATUS_OK
WriteX 12532 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12532 258 NT_STATUS_OK
WriteX 12532 0 65536 65536 NT_STATUS_OK
WriteX 12532 65536 49 49 NT_STATUS_OK
Close 12532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 61440 61440 NT_STATUS_OK
ReadX 12533 61440 4096 4096 NT_STATUS_OK
ReadX 12533 65536 61440 61440 NT_STATUS_OK
ReadX 12533 126976 4096 4096 NT_STATUS_OK
ReadX 12533 131072 61440 61440 NT_STATUS_OK
ReadX 12533 192512 4096 4096 NT_STATUS_OK
ReadX 12533 196608 61440 61440 NT_STATUS_OK
ReadX 12533 258048 4096 4096 NT_STATUS_OK
ReadX 12533 262144 61440 61440 NT_STATUS_OK
ReadX 12533 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 61440 61440 NT_STATUS_OK
ReadX 12534 61440 4096 4096 NT_STATUS_OK
ReadX 12534 65536 61440 61440 NT_STATUS_OK
ReadX 12534 126976 4096 4096 NT_STATUS_OK
ReadX 12534 131072 61440 61440 NT_STATUS_OK
ReadX 12534 192512 4096 4096 NT_STATUS_OK
ReadX 12534 196608 61440 61440 NT_STATUS_OK
ReadX 12534 258048 4096 4096 NT_STATUS_OK
ReadX 12534 262144 61440 61440 NT_STATUS_OK
ReadX 12534 323584 4096 4096 NT_STATUS_OK
ReadX 12534 327680 61440 61440 NT_STATUS_OK
ReadX 12534 389120 4096 4096 NT_STATUS_OK
ReadX 12534 393216 61440 61440 NT_STATUS_OK
ReadX 12534 454656 4096 4096 NT_STATUS_OK
ReadX 12534 458752 61440 61440 NT_STATUS_OK
ReadX 12534 520192 4096 4096 NT_STATUS_OK
ReadX 12534 524288 61440 61440 NT_STATUS_OK
ReadX 12534 585728 4096 4096 NT_STATUS_OK
ReadX 12534 589824 61440 61440 NT_STATUS_OK
ReadX 12534 651264 4096 4096 NT_STATUS_OK
ReadX 12534 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 61440 61440 NT_STATUS_OK
ReadX 12535 61440 4096 4096 NT_STATUS_OK
ReadX 12535 65536 61440 61440 NT_STATUS_OK
ReadX 12535 126976 4096 4096 NT_STATUS_OK
ReadX 12535 131072 61440 61440 NT_STATUS_OK
ReadX 12535 192512 4096 4096 NT_STATUS_OK
ReadX 12535 196608 61440 61440 NT_STATUS_OK
ReadX 12535 258048 4096 4096 NT_STATUS_OK
ReadX 12535 262144 61440 61440 NT_STATUS_OK
ReadX 12535 323584 4096 4096 NT_STATUS_OK
ReadX 12535 327680 61440 61440 NT_STATUS_OK
ReadX 12535 389120 4096 4096 NT_STATUS_OK
ReadX 12535 393216 61440 61440 NT_STATUS_OK
ReadX 12535 454656 4096 4096 NT_STATUS_OK
ReadX 12535 458752 61440 61440 NT_STATUS_OK
ReadX 12535 520192 4096 4096 NT_STATUS_OK
ReadX 12535 524288 61440 61440 NT_STATUS_OK
ReadX 12535 585728 4096 4096 NT_STATUS_OK
ReadX 12535 589824 61440 61440 NT_STATUS_OK
ReadX 12535 651264 4096 4096 NT_STATUS_OK
ReadX 12535 655360 61440 61440 NT_STATUS_OK
ReadX 12535 716800 4096 4096 NT_STATUS_OK
ReadX 12535 720896 61440 61440 NT_STATUS_OK
ReadX 12535 782336 4096 4096 NT_STATUS_OK
ReadX 12535 786432 61440 61440 NT_STATUS_OK
ReadX 12535 847872 4096 4096 NT_STATUS_OK
ReadX 12535 851968 61440 61440 NT_STATUS_OK
ReadX 12535 913408 4096 4096 NT_STATUS_OK
ReadX 12535 917504 61440 61440 NT_STATUS_OK
ReadX 12535 978944 4096 4096 NT_STATUS_OK
ReadX 12535 983040 61440 61440 NT_STATUS_OK
ReadX 12535 1044480 4096 4096 NT_STATUS_OK
ReadX 12535 1048576 61440 61440 NT_STATUS_OK
ReadX 12535 1110016 4096 4096 NT_STATUS_OK
ReadX 12535 1114112 61440 61440 NT_STATUS_OK
ReadX 12535 1175552 4096 4096 NT_STATUS_OK
ReadX 12535 1179648 61440 61440 NT_STATUS_OK
ReadX 12535 1241088 4096 4096 NT_STATUS_OK
ReadX 12535 1245184 61440 61440 NT_STATUS_OK
ReadX 12535 1306624 4096 4096 NT_STATUS_OK
ReadX 12535 1310720 61440 61440 NT_STATUS_OK
ReadX 12535 1372160 4096 4096 NT_STATUS_OK
ReadX 12535 1376256 61440 61440 NT_STATUS_OK
ReadX 12535 1437696 4096 4096 NT_STATUS_OK
ReadX 12535 1441792 61440 61440 NT_STATUS_OK
ReadX 12535 1503232 4096 4096 NT_STATUS_OK
ReadX 12535 1507328 61440 61440 NT_STATUS_OK
ReadX 12535 1568768 4096 4096 NT_STATUS_OK
ReadX 12535 1572864 61440 61440 NT_STATUS_OK
ReadX 12535 1634304 4096 4096 NT_STATUS_OK
ReadX 12535 1638400 61440 61440 NT_STATUS_OK
ReadX 12535 1699840 4096 4096 NT_STATUS_OK
ReadX 12535 1703936 61440 61440 NT_STATUS_OK
ReadX 12535 1765376 4096 4096 NT_STATUS_OK
ReadX 12535 1769472 61440 61440 NT_STATUS_OK
ReadX 12535 1830912 4096 4096 NT_STATUS_OK
ReadX 12535 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12537 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 1005 NT_STATUS_OK
ReadX 12537 2156 24 24 NT_STATUS_OK
ReadX 12537 2139 276 276 NT_STATUS_OK
ReadX 12537 2136 14 14 NT_STATUS_OK
ReadX 12537 2136 7 7 NT_STATUS_OK
ReadX 12537 2138 12 12 NT_STATUS_OK
ReadX 12537 2137 8 8 NT_STATUS_OK
ReadX 12537 2135 15 15 NT_STATUS_OK
ReadX 12537 0 16 16 NT_STATUS_OK
ReadX 12537 16 2048 2048 NT_STATUS_OK
ReadX 12537 2064 2048 2048 NT_STATUS_OK
ReadX 12537 257 2048 2048 NT_STATUS_OK
ReadX 12537 385 2048 2048 NT_STATUS_OK
ReadX 12537 513 2048 2048 NT_STATUS_OK
ReadX 12537 641 2048 2048 NT_STATUS_OK
ReadX 12537 769 2048 2048 NT_STATUS_OK
ReadX 12537 897 2048 2048 NT_STATUS_OK
ReadX 12537 1025 2048 2048 NT_STATUS_OK
ReadX 12537 1153 2048 2048 NT_STATUS_OK
ReadX 12537 1281 2048 2048 NT_STATUS_OK
ReadX 12537 1409 2048 2048 NT_STATUS_OK
ReadX 12537 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12539 NT_STATUS_OK
Close 12539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12542 NT_STATUS_OK
WriteX 12542 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12542 258 NT_STATUS_OK
WriteX 12542 0 10575 10575 NT_STATUS_OK
Flush 12542 NT_STATUS_OK
Close 12542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12543 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
Close 12537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12547 NT_STATUS_OK
LockX 12547 2147483538 1 NT_STATUS_OK
UnlockX 12547 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12547 1005 NT_STATUS_OK
ReadX 12547 0 512 512 NT_STATUS_OK
ReadX 12547 512 512 512 NT_STATUS_OK
ReadX 12547 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12547 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12547 1004 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12548 NT_STATUS_OK
QUERY_FILE_INFORMATION 12548 1005 NT_STATUS_OK
ReadX 12548 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12549 NT_STATUS_OK
LockX 12549 2147483538 1 NT_STATUS_OK
UnlockX 12549 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12549 1005 NT_STATUS_OK
ReadX 12549 0 512 512 NT_STATUS_OK
ReadX 12549 512 512 512 NT_STATUS_OK
ReadX 12549 1024 512 512 NT_STATUS_OK
ReadX 12549 288 20 20 NT_STATUS_OK
ReadX 12549 308 2084 2084 NT_STATUS_OK
ReadX 12549 388 2084 2084 NT_STATUS_OK
ReadX 12549 388 2084 2084 NT_STATUS_OK
ReadX 12536 2157 1386 1386 NT_STATUS_OK
ReadX 12549 2472 399 399 NT_STATUS_OK
ReadX 12549 3072 1536 1536 NT_STATUS_OK
ReadX 12549 544 149 149 NT_STATUS_OK
ReadX 12549 693 485 485 NT_STATUS_OK
Close 12549 NT_STATUS_OK
ReadX 12536 2157 4096 4096 NT_STATUS_OK
ReadX 12536 6253 4096 4096 NT_STATUS_OK
ReadX 12536 10349 4096 4096 NT_STATUS_OK
ReadX 12536 14445 4096 4096 NT_STATUS_OK
ReadX 12536 18541 4096 4096 NT_STATUS_OK
ReadX 12536 22637 256 256 NT_STATUS_OK
ReadX 12536 22893 4096 4096 NT_STATUS_OK
ReadX 12536 26989 4096 4096 NT_STATUS_OK
ReadX 12536 31085 4096 4096 NT_STATUS_OK
ReadX 12536 35181 4096 4096 NT_STATUS_OK
ReadX 12536 39277 4096 4096 NT_STATUS_OK
ReadX 12536 43373 4096 4096 NT_STATUS_OK
ReadX 12536 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12536 2157 1024 1024 NT_STATUS_OK
ReadX 12536 1667 4688 4688 NT_STATUS_OK
ReadX 12536 6355 3516 3516 NT_STATUS_OK
ReadX 12536 9871 16384 16384 NT_STATUS_OK
ReadX 12536 26255 3771 3771 NT_STATUS_OK
ReadX 12536 30026 2048 2048 NT_STATUS_OK
ReadX 12536 32074 1024 1024 NT_STATUS_OK
ReadX 12536 33098 6652 6652 NT_STATUS_OK
ReadX 12536 39750 16384 16384 NT_STATUS_OK
ReadX 12536 56134 10496 10496 NT_STATUS_OK
ReadX 12536 66630 1784 1784 NT_STATUS_OK
ReadX 12536 68414 90 90 NT_STATUS_OK
ReadX 12536 68504 273 273 NT_STATUS_OK
ReadX 12536 68777 1600 1600 NT_STATUS_OK
ReadX 12536 70377 640 640 NT_STATUS_OK
ReadX 12536 71017 1280 1280 NT_STATUS_OK
ReadX 12536 72297 8464 8464 NT_STATUS_OK
ReadX 12536 80761 158 158 NT_STATUS_OK
ReadX 12536 80919 912 912 NT_STATUS_OK
ReadX 12536 81831 1980 1980 NT_STATUS_OK
ReadX 12536 83811 2256 2256 NT_STATUS_OK
ReadX 12536 86067 400 400 NT_STATUS_OK
ReadX 12536 86467 252 252 NT_STATUS_OK
ReadX 12536 86719 42 42 NT_STATUS_OK
ReadX 12536 86761 725 725 NT_STATUS_OK
ReadX 12536 2009 512 512 NT_STATUS_OK
ReadX 12536 3895 9 9 NT_STATUS_OK
ReadX 12536 3781 46 46 NT_STATUS_OK
ReadX 12536 4059 92 92 NT_STATUS_OK
ReadX 12536 3781 92 92 NT_STATUS_OK
ReadX 12536 3986 184 184 NT_STATUS_OK
ReadX 12536 3987 16384 16384 NT_STATUS_OK
ReadX 12536 3902 16384 16384 NT_STATUS_OK
ReadX 12536 3781 10240 10240 NT_STATUS_OK
ReadX 12536 3821 16384 16384 NT_STATUS_OK
ReadX 12536 3891 935 935 NT_STATUS_OK
ReadX 12536 4060 10240 10240 NT_STATUS_OK
ReadX 12536 4059 184 184 NT_STATUS_OK
ReadX 12536 256 184 184 NT_STATUS_OK
ReadX 12536 256 1026 1026 NT_STATUS_OK
ReadX 12536 3901 326 326 NT_STATUS_OK
ReadX 12536 3899 652 652 NT_STATUS_OK
ReadX 12536 256 2 2 NT_STATUS_OK
ReadX 12536 258 4948 4948 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12554 NT_STATUS_OK
WriteX 12554 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 258 NT_STATUS_OK
WriteX 12554 0 65536 65536 NT_STATUS_OK
WriteX 12554 65536 65536 65536 NT_STATUS_OK
WriteX 12554 131072 65536 65536 NT_STATUS_OK
WriteX 12554 196608 65536 65536 NT_STATUS_OK
WriteX 12554 262144 65536 65536 NT_STATUS_OK
WriteX 12554 327680 65536 65536 NT_STATUS_OK
WriteX 12554 393216 65536 65536 NT_STATUS_OK
WriteX 12554 458752 65536 65536 NT_STATUS_OK
WriteX 12554 524288 65536 65536 NT_STATUS_OK
WriteX 12554 589824 35257 35257 NT_STATUS_OK
Close 12554 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12556 NT_STATUS_OK
Close 12556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12559 NT_STATUS_OK
WriteX 12559 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12559 258 NT_STATUS_OK
WriteX 12559 0 65536 65536 NT_STATUS_OK
WriteX 12559 65536 65536 65536 NT_STATUS_OK
WriteX 12559 131072 65536 65536 NT_STATUS_OK
WriteX 12559 196608 65536 65536 NT_STATUS_OK
WriteX 12559 262144 65536 65536 NT_STATUS_OK
WriteX 12559 327680 65536 65536 NT_STATUS_OK
WriteX 12559 393216 65536 65536 NT_STATUS_OK
WriteX 12559 458752 65536 65536 NT_STATUS_OK
WriteX 12559 524288 65536 65536 NT_STATUS_OK
WriteX 12559 589824 57598 57598 NT_STATUS_OK
Close 12559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12561 NT_STATUS_OK
WriteX 12561 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12561 258 NT_STATUS_OK
WriteX 12561 0 12543 12543 NT_STATUS_OK
Flush 12561 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12563 NT_STATUS_OK
Close 12563 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12565 NT_STATUS_OK
ReadX 12565 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12567 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 1005 NT_STATUS_OK
ReadX 12567 1938 24 24 NT_STATUS_OK
ReadX 12567 1920 276 276 NT_STATUS_OK
ReadX 12567 1918 14 14 NT_STATUS_OK
ReadX 12567 1918 7 7 NT_STATUS_OK
ReadX 12567 1919 12 12 NT_STATUS_OK
ReadX 12567 1919 8 8 NT_STATUS_OK
ReadX 12567 1917 15 15 NT_STATUS_OK
ReadX 12567 0 16 16 NT_STATUS_OK
ReadX 12567 16 2048 2048 NT_STATUS_OK
ReadX 12567 2064 2048 2048 NT_STATUS_OK
ReadX 12567 257 2048 2048 NT_STATUS_OK
ReadX 12567 385 2048 2048 NT_STATUS_OK
ReadX 12567 513 2048 2048 NT_STATUS_OK
ReadX 12567 641 2048 2048 NT_STATUS_OK
ReadX 12567 769 2048 2048 NT_STATUS_OK
ReadX 12567 897 2048 2048 NT_STATUS_OK
ReadX 12567 1025 2048 2048 NT_STATUS_OK
ReadX 12567 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12572 NT_STATUS_OK
WriteX 12572 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 11588 11588 NT_STATUS_OK
Flush 12572 NT_STATUS_OK
Close 12572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12577 NT_STATUS_OK
WriteX 12577 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12577 258 NT_STATUS_OK
WriteX 12577 0 11615 11615 NT_STATUS_OK
Flush 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12579 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12583 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12586 NT_STATUS_OK
WriteX 12586 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12586 258 NT_STATUS_OK
WriteX 12586 0 65536 65536 NT_STATUS_OK
WriteX 12586 65536 16050 16050 NT_STATUS_OK
Close 12586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12566 1939 64 64 NT_STATUS_OK
ReadX 12566 128 248 248 NT_STATUS_OK
ReadX 12566 128 568 568 NT_STATUS_OK
ReadX 12566 3872 1536 1536 NT_STATUS_OK
ReadX 12566 3456 2560 2560 NT_STATUS_OK
ReadX 12566 3136 512 512 NT_STATUS_OK
ReadX 12566 2880 4096 4096 NT_STATUS_OK
ReadX 12566 3264 3072 3072 NT_STATUS_OK
ReadX 12566 320 4096 4096 NT_STATUS_OK
ReadX 12566 1024 4096 4096 NT_STATUS_OK
ReadX 12566 3616 4096 4096 NT_STATUS_OK
ReadX 12566 1939 64 64 NT_STATUS_OK
ReadX 12566 128 248 248 NT_STATUS_OK
ReadX 12566 128 608 608 NT_STATUS_OK
ReadX 12566 2858 1024 1024 NT_STATUS_OK
ReadX 12566 2810 4096 4096 NT_STATUS_OK
ReadX 12566 2826 4096 4096 NT_STATUS_OK
ReadX 12566 2580 2048 2048 NT_STATUS_OK
ReadX 12566 2800 2560 2560 NT_STATUS_OK
ReadX 12566 2100 4096 4096 NT_STATUS_OK
ReadX 12566 2084 4096 4096 NT_STATUS_OK
ReadX 12566 868 4096 4096 NT_STATUS_OK
ReadX 12566 2324 4096 4096 NT_STATUS_OK
ReadX 12566 884 4096 4096 NT_STATUS_OK
ReadX 12566 2604 1024 1024 NT_STATUS_OK
ReadX 12566 580 4096 4096 NT_STATUS_OK
ReadX 12566 596 4096 4096 NT_STATUS_OK
ReadX 12566 2752 4096 4096 NT_STATUS_OK
ReadX 12566 2842 1024 1024 NT_STATUS_OK
ReadX 12566 660 4096 4096 NT_STATUS_OK
ReadX 12566 2720 4096 4096 NT_STATUS_OK
ReadX 12566 2736 4096 4096 NT_STATUS_OK
ReadX 12566 628 4096 4096 NT_STATUS_OK
ReadX 12566 2704 4096 4096 NT_STATUS_OK
ReadX 12566 1556 4096 4096 NT_STATUS_OK
ReadX 12566 576 4096 4096 NT_STATUS_OK
ReadX 12566 3168 1536 1536 NT_STATUS_OK
ReadX 12566 832 4096 4096 NT_STATUS_OK
ReadX 12566 1088 4096 4096 NT_STATUS_OK
ReadX 12566 1344 4096 4096 NT_STATUS_OK
ReadX 12566 1600 4096 4096 NT_STATUS_OK
ReadX 12566 1856 4096 4096 NT_STATUS_OK
ReadX 12566 2112 4096 4096 NT_STATUS_OK
ReadX 12566 1892 4096 4096 NT_STATUS_OK
ReadX 12566 820 4096 4096 NT_STATUS_OK
ReadX 12566 788 4096 4096 NT_STATUS_OK
ReadX 12566 1604 4096 4096 NT_STATUS_OK
ReadX 12566 3648 4096 4096 NT_STATUS_OK
ReadX 12566 2608 4096 4096 NT_STATUS_OK
ReadX 12566 548 4096 4096 NT_STATUS_OK
ReadX 12566 740 4096 4096 NT_STATUS_OK
ReadX 12566 1344 4096 4096 NT_STATUS_OK
ReadX 12566 3392 4096 4096 NT_STATUS_OK
ReadX 12566 3904 4096 4096 NT_STATUS_OK
ReadX 12566 644 4096 4096 NT_STATUS_OK
ReadX 12566 676 4096 4096 NT_STATUS_OK
ReadX 12566 2688 4096 4096 NT_STATUS_OK
ReadX 12566 320 4096 4096 NT_STATUS_OK
ReadX 12566 900 4096 4096 NT_STATUS_OK
ReadX 12566 1908 4096 4096 NT_STATUS_OK
ReadX 12566 852 4096 4096 NT_STATUS_OK
ReadX 12566 724 4096 4096 NT_STATUS_OK
ReadX 12566 2292 4096 4096 NT_STATUS_OK
ReadX 12566 612 4096 4096 NT_STATUS_OK
ReadX 12566 388 4096 4096 NT_STATUS_OK
ReadX 12566 2368 4096 4096 NT_STATUS_OK
ReadX 12566 2624 4096 4096 NT_STATUS_OK
ReadX 12566 500 4096 4096 NT_STATUS_OK
ReadX 12566 356 4096 4096 NT_STATUS_OK
ReadX 12566 1024 4096 4096 NT_STATUS_OK
ReadX 12566 576 4096 4096 NT_STATUS_OK
ReadX 12566 340 4096 4096 NT_STATUS_OK
ReadX 12566 420 4096 4096 NT_STATUS_OK
ReadX 12566 1600 4096 4096 NT_STATUS_OK
ReadX 12566 404 4096 4096 NT_STATUS_OK
ReadX 12566 1428 4096 4096 NT_STATUS_OK
ReadX 12566 2656 4096 4096 NT_STATUS_OK
ReadX 12566 2624 4096 4096 NT_STATUS_OK
ReadX 12566 452 4096 4096 NT_STATUS_OK
ReadX 12566 692 4096 4096 NT_STATUS_OK
ReadX 12566 564 4096 4096 NT_STATUS_OK
ReadX 12566 372 4096 4096 NT_STATUS_OK
ReadX 12566 468 4096 4096 NT_STATUS_OK
ReadX 12566 484 4096 4096 NT_STATUS_OK
ReadX 12566 1088 4096 4096 NT_STATUS_OK
ReadX 12566 1924 4096 4096 NT_STATUS_OK
ReadX 12566 2768 4096 4096 NT_STATUS_OK
ReadX 12566 832 4096 4096 NT_STATUS_OK
ReadX 12566 836 4096 4096 NT_STATUS_OK
ReadX 12566 1856 4096 4096 NT_STATUS_OK
ReadX 12566 2640 4096 4096 NT_STATUS_OK
ReadX 12566 436 4096 4096 NT_STATUS_OK
ReadX 12566 1828 4096 4096 NT_STATUS_OK
ReadX 12566 804 4096 4096 NT_STATUS_OK
ReadX 12566 1860 4096 4096 NT_STATUS_OK
ReadX 12566 1812 4096 4096 NT_STATUS_OK
ReadX 12566 756 4096 4096 NT_STATUS_OK
ReadX 12566 1636 4096 4096 NT_STATUS_OK
ReadX 12566 772 4096 4096 NT_STATUS_OK
ReadX 12566 2036 4096 4096 NT_STATUS_OK
ReadX 12566 1220 4096 4096 NT_STATUS_OK
ReadX 12566 1652 4096 4096 NT_STATUS_OK
ReadX 12566 2588 4096 4096 NT_STATUS_OK
ReadX 12566 916 4096 4096 NT_STATUS_OK
ReadX 12566 260 4096 4096 NT_STATUS_OK
ReadX 12566 932 4096 4096 NT_STATUS_OK
ReadX 12566 2624 4096 4096 NT_STATUS_OK
ReadX 12566 308 4096 4096 NT_STATUS_OK
ReadX 12566 292 4096 4096 NT_STATUS_OK
ReadX 12566 1140 4096 4096 NT_STATUS_OK
ReadX 12566 276 4096 4096 NT_STATUS_OK
ReadX 12566 2020 4096 4096 NT_STATUS_OK
ReadX 12566 2880 4096 4096 NT_STATUS_OK
ReadX 12566 516 4096 4096 NT_STATUS_OK
ReadX 12566 1844 4096 4096 NT_STATUS_OK
ReadX 12566 1124 4096 4096 NT_STATUS_OK
ReadX 12566 3136 4096 4096 NT_STATUS_OK
ReadX 12566 324 4096 4096 NT_STATUS_OK
ReadX 12566 1156 4096 4096 NT_STATUS_OK
ReadX 12566 1172 4096 4096 NT_STATUS_OK
ReadX 12566 2112 4096 4096 NT_STATUS_OK
ReadX 12566 2368 4096 4096 NT_STATUS_OK
ReadX 12566 964 4096 4096 NT_STATUS_OK
ReadX 12566 980 4096 4096 NT_STATUS_OK
ReadX 12566 1012 4096 4096 NT_STATUS_OK
ReadX 12566 532 4096 4096 NT_STATUS_OK
ReadX 12566 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12566 1620 4096 4096 NT_STATUS_OK
ReadX 12566 1604 4096 4096 NT_STATUS_OK
ReadX 12566 2116 4096 4096 NT_STATUS_OK
ReadX 12566 2132 4096 4096 NT_STATUS_OK
ReadX 12566 2148 4096 4096 NT_STATUS_OK
ReadX 12566 2276 4096 4096 NT_STATUS_OK
ReadX 12566 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12588 NT_STATUS_OK
Close 12588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12591 NT_STATUS_OK
QUERY_FILE_INFORMATION 12546 1004 NT_STATUS_OK
Close 12546 NT_STATUS_OK
WriteX 12591 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12591 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12548 1004 NT_STATUS_OK
Close 12548 NT_STATUS_OK
WriteX 12591 0 65536 65536 NT_STATUS_OK
WriteX 12591 65536 64850 64850 NT_STATUS_OK
Close 12591 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12593 NT_STATUS_OK
WriteX 12593 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 258 NT_STATUS_OK
ReadX 12566 2068 4096 4096 NT_STATUS_OK
ReadX 12566 1588 4096 4096 NT_STATUS_OK
ReadX 12566 1572 4096 4096 NT_STATUS_OK
WriteX 12593 0 18630 18630 NT_STATUS_OK
Flush 12593 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12566 612 4096 4096 NT_STATUS_OK
ReadX 12566 564 4096 4096 NT_STATUS_OK
ReadX 12566 1876 4096 4096 NT_STATUS_OK
ReadX 12566 628 4096 4096 NT_STATUS_OK
ReadX 12566 740 4096 4096 NT_STATUS_OK
ReadX 12566 724 4096 4096 NT_STATUS_OK
ReadX 12566 644 4096 4096 NT_STATUS_OK
ReadX 12566 2324 4096 4096 NT_STATUS_OK
ReadX 12566 660 4096 4096 NT_STATUS_OK
ReadX 12566 852 4096 4096 NT_STATUS_OK
ReadX 12566 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12566 2368 4096 4096 NT_STATUS_OK
ReadX 12566 1024 4096 4096 NT_STATUS_OK
ReadX 12566 320 4096 4096 NT_STATUS_OK
ReadX 12566 580 4096 4096 NT_STATUS_OK
ReadX 12566 3136 512 512 NT_STATUS_OK
ReadX 12566 2880 4096 4096 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 61440 4096 4096 NT_STATUS_OK
ReadX 12598 126976 4096 4096 NT_STATUS_OK
WriteX 12598 0 65536 65536 NT_STATUS_OK
WriteX 12598 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 61440 4096 4096 NT_STATUS_OK
ReadX 12599 126976 4096 4096 NT_STATUS_OK
ReadX 12599 192512 4096 4096 NT_STATUS_OK
ReadX 12599 258048 4096 4096 NT_STATUS_OK
WriteX 12599 0 65536 65536 NT_STATUS_OK
WriteX 12599 65536 65536 65536 NT_STATUS_OK
WriteX 12599 131072 65536 65536 NT_STATUS_OK
WriteX 12599 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 61440 4096 4096 NT_STATUS_OK
ReadX 12600 126976 4096 4096 NT_STATUS_OK
ReadX 12600 192512 4096 4096 NT_STATUS_OK
ReadX 12600 258048 4096 4096 NT_STATUS_OK
ReadX 12600 323584 4096 4096 NT_STATUS_OK
ReadX 12600 389120 4096 4096 NT_STATUS_OK
ReadX 12600 454656 4096 4096 NT_STATUS_OK
ReadX 12600 520192 4096 4096 NT_STATUS_OK
WriteX 12600 0 65536 65536 NT_STATUS_OK
WriteX 12600 65536 65536 65536 NT_STATUS_OK
WriteX 12600 131072 65536 65536 NT_STATUS_OK
WriteX 12600 196608 65536 65536 NT_STATUS_OK
WriteX 12600 262144 65536 65536 NT_STATUS_OK
WriteX 12600 327680 65536 65536 NT_STATUS_OK
WriteX 12600 393216 65536 65536 NT_STATUS_OK
WriteX 12600 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12601 NT_STATUS_OK
ReadX 12601 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12603 NT_STATUS_OK
WriteX 12603 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12603 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12601 0 8192 8192 NT_STATUS_OK
Flush 12601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12601 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12601 0 8192 8192 NT_STATUS_OK
Flush 12601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12601 0 8192 8192 NT_STATUS_OK
Flush 12601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12601 0 8192 8192 NT_STATUS_OK
Flush 12601 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12565 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12608 NT_STATUS_OK
WriteX 12608 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12608 258 NT_STATUS_OK
WriteX 12608 0 62591 62591 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12610 NT_STATUS_OK
Close 12610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
WriteX 12613 0 10845 10845 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12618 NT_STATUS_OK
WriteX 12618 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12618 258 NT_STATUS_OK
WriteX 12618 0 30118 30118 NT_STATUS_OK
Close 12618 NT_STATUS_OK
WriteX 12601 0 4096 4096 NT_STATUS_OK
WriteX 12603 0 64 64 NT_STATUS_OK
Close 12603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 61440 61440 NT_STATUS_OK
ReadX 12620 61440 4096 4096 NT_STATUS_OK
ReadX 12620 65536 61440 61440 NT_STATUS_OK
ReadX 12620 126976 4096 4096 NT_STATUS_OK
ReadX 12620 131072 61440 61440 NT_STATUS_OK
ReadX 12620 192512 4096 4096 NT_STATUS_OK
ReadX 12620 196608 61440 61440 NT_STATUS_OK
ReadX 12620 258048 4096 4096 NT_STATUS_OK
ReadX 12620 262144 61440 61440 NT_STATUS_OK
ReadX 12620 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 61440 61440 NT_STATUS_OK
ReadX 12621 61440 4096 4096 NT_STATUS_OK
ReadX 12621 65536 61440 61440 NT_STATUS_OK
ReadX 12621 126976 4096 4096 NT_STATUS_OK
ReadX 12621 131072 61440 61440 NT_STATUS_OK
ReadX 12621 192512 4096 4096 NT_STATUS_OK
ReadX 12621 196608 61440 61440 NT_STATUS_OK
ReadX 12621 258048 4096 4096 NT_STATUS_OK
ReadX 12621 262144 61440 61440 NT_STATUS_OK
ReadX 12621 323584 4096 4096 NT_STATUS_OK
ReadX 12621 327680 61440 61440 NT_STATUS_OK
ReadX 12621 389120 4096 4096 NT_STATUS_OK
ReadX 12621 393216 61440 61440 NT_STATUS_OK
ReadX 12621 454656 4096 4096 NT_STATUS_OK
ReadX 12621 458752 61440 61440 NT_STATUS_OK
ReadX 12621 520192 4096 4096 NT_STATUS_OK
ReadX 12621 524288 61440 61440 NT_STATUS_OK
ReadX 12621 585728 4096 4096 NT_STATUS_OK
ReadX 12621 589824 61440 61440 NT_STATUS_OK
ReadX 12621 651264 4096 4096 NT_STATUS_OK
ReadX 12621 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 61440 61440 NT_STATUS_OK
ReadX 12622 61440 4096 4096 NT_STATUS_OK
ReadX 12622 65536 61440 61440 NT_STATUS_OK
ReadX 12622 126976 4096 4096 NT_STATUS_OK
ReadX 12622 131072 61440 61440 NT_STATUS_OK
ReadX 12622 192512 4096 4096 NT_STATUS_OK
ReadX 12622 196608 61440 61440 NT_STATUS_OK
ReadX 12622 258048 4096 4096 NT_STATUS_OK
ReadX 12622 262144 61440 61440 NT_STATUS_OK
ReadX 12622 323584 4096 4096 NT_STATUS_OK
ReadX 12622 327680 61440 61440 NT_STATUS_OK
ReadX 12622 389120 4096 4096 NT_STATUS_OK
ReadX 12622 393216 61440 61440 NT_STATUS_OK
ReadX 12622 454656 4096 4096 NT_STATUS_OK
ReadX 12622 458752 61440 61440 NT_STATUS_OK
ReadX 12622 520192 4096 4096 NT_STATUS_OK
ReadX 12622 524288 61440 61440 NT_STATUS_OK
ReadX 12622 585728 4096 4096 NT_STATUS_OK
ReadX 12622 589824 61440 61440 NT_STATUS_OK
ReadX 12622 651264 4096 4096 NT_STATUS_OK
ReadX 12622 655360 61440 61440 NT_STATUS_OK
ReadX 12622 716800 4096 4096 NT_STATUS_OK
ReadX 12622 720896 61440 61440 NT_STATUS_OK
ReadX 12622 782336 4096 4096 NT_STATUS_OK
ReadX 12622 786432 61440 61440 NT_STATUS_OK
ReadX 12622 847872 4096 4096 NT_STATUS_OK
ReadX 12622 851968 61440 61440 NT_STATUS_OK
ReadX 12622 913408 4096 4096 NT_STATUS_OK
ReadX 12622 917504 61440 61440 NT_STATUS_OK
ReadX 12622 978944 4096 4096 NT_STATUS_OK
ReadX 12622 983040 61440 61440 NT_STATUS_OK
ReadX 12622 1044480 4096 4096 NT_STATUS_OK
ReadX 12622 1048576 61440 61440 NT_STATUS_OK
ReadX 12622 1110016 4096 4096 NT_STATUS_OK
ReadX 12622 1114112 61440 61440 NT_STATUS_OK
ReadX 12622 1175552 4096 4096 NT_STATUS_OK
ReadX 12622 1179648 61440 61440 NT_STATUS_OK
ReadX 12622 1241088 4096 4096 NT_STATUS_OK
ReadX 12622 1245184 61440 61440 NT_STATUS_OK
ReadX 12622 1306624 4096 4096 NT_STATUS_OK
ReadX 12622 1310720 61440 61440 NT_STATUS_OK
ReadX 12622 1372160 4096 4096 NT_STATUS_OK
ReadX 12622 1376256 61440 61440 NT_STATUS_OK
ReadX 12622 1437696 4096 4096 NT_STATUS_OK
ReadX 12622 1441792 61440 61440 NT_STATUS_OK
ReadX 12622 1503232 4096 4096 NT_STATUS_OK
ReadX 12622 1507328 61440 61440 NT_STATUS_OK
ReadX 12622 1568768 4096 4096 NT_STATUS_OK
ReadX 12622 1572864 61440 61440 NT_STATUS_OK
ReadX 12622 1634304 4096 4096 NT_STATUS_OK
ReadX 12622 1638400 61440 61440 NT_STATUS_OK
ReadX 12622 1699840 4096 4096 NT_STATUS_OK
ReadX 12622 1703936 61440 61440 NT_STATUS_OK
ReadX 12622 1765376 4096 4096 NT_STATUS_OK
ReadX 12622 1769472 61440 61440 NT_STATUS_OK
ReadX 12622 1830912 4096 4096 NT_STATUS_OK
ReadX 12622 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12623 NT_STATUS_OK
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
ReadX 12627 4096 4096 4096 NT_STATUS_OK
ReadX 12627 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12631 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12632 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 8192 8192 NT_STATUS_OK
ReadX 12635 8192 8192 8192 NT_STATUS_OK
ReadX 12635 16384 8192 8192 NT_STATUS_OK
ReadX 12635 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Close 12634 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12640 NT_STATUS_OK
WriteX 12640 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 258 NT_STATUS_OK
WriteX 12640 0 10438 10438 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12641 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12644 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12646 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12647 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12648 NT_STATUS_OK
Close 12648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
ReadX 12649 4096 4096 4096 NT_STATUS_OK
ReadX 12649 8192 4096 4096 NT_STATUS_OK
ReadX 12649 12288 8192 8192 NT_STATUS_OK
ReadX 12649 20480 8192 8192 NT_STATUS_OK
ReadX 12649 28672 8192 8192 NT_STATUS_OK
ReadX 12649 36864 8192 8192 NT_STATUS_OK
ReadX 12649 45056 8192 8192 NT_STATUS_OK
ReadX 12649 53248 8192 8192 NT_STATUS_OK
ReadX 12649 61440 8192 8192 NT_STATUS_OK
ReadX 12649 69632 8192 8192 NT_STATUS_OK
ReadX 12649 77824 8192 8192 NT_STATUS_OK
ReadX 12649 86016 8192 8192 NT_STATUS_OK
ReadX 12649 94208 8192 8192 NT_STATUS_OK
ReadX 12649 102400 8192 8192 NT_STATUS_OK
ReadX 12649 110592 8192 8192 NT_STATUS_OK
ReadX 12649 118784 8192 8192 NT_STATUS_OK
ReadX 12649 126976 8192 8192 NT_STATUS_OK
ReadX 12649 135168 8192 8192 NT_STATUS_OK
ReadX 12649 143360 8192 8192 NT_STATUS_OK
ReadX 12649 151552 8192 8192 NT_STATUS_OK
ReadX 12649 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Close 12644 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12654 NT_STATUS_OK
WriteX 12654 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12654 258 NT_STATUS_OK
WriteX 12654 0 28489 28489 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12657 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 8192 8192 NT_STATUS_OK
ReadX 12661 8192 8192 8192 NT_STATUS_OK
ReadX 12661 16384 8192 8192 NT_STATUS_OK
ReadX 12661 24576 8192 8192 NT_STATUS_OK
ReadX 12661 32768 16384 16384 NT_STATUS_OK
ReadX 12661 49152 8192 8192 NT_STATUS_OK
ReadX 12661 57344 8192 8192 NT_STATUS_OK
ReadX 12661 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12666 NT_STATUS_OK
WriteX 12666 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12666 258 NT_STATUS_OK
WriteX 12666 0 29253 29253 NT_STATUS_OK
Close 12666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12673 NT_STATUS_OK
WriteX 12673 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12673 258 NT_STATUS_OK
WriteX 12673 0 30183 30183 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12676 NT_STATUS_OK
WriteX 12676 0 510 510 NT_STATUS_OK
WriteX 12676 510 512 512 NT_STATUS_OK
WriteX 12676 1022 510 510 NT_STATUS_OK
WriteX 12676 1532 510 510 NT_STATUS_OK
WriteX 12676 2042 168 168 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 4096 4096 NT_STATUS_OK
WriteX 12679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12680 NT_STATUS_OK
ReadX 12680 61440 4096 4096 NT_STATUS_OK
ReadX 12680 126976 4096 4096 NT_STATUS_OK
WriteX 12680 0 65536 65536 NT_STATUS_OK
WriteX 12680 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12681 NT_STATUS_OK
ReadX 12681 61440 4096 4096 NT_STATUS_OK
ReadX 12681 126976 4096 4096 NT_STATUS_OK
ReadX 12681 192512 4096 4096 NT_STATUS_OK
ReadX 12681 258048 4096 4096 NT_STATUS_OK
WriteX 12681 0 65536 65536 NT_STATUS_OK
WriteX 12681 65536 65536 65536 NT_STATUS_OK
WriteX 12681 131072 65536 65536 NT_STATUS_OK
WriteX 12681 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 61440 4096 4096 NT_STATUS_OK
ReadX 12682 126976 4096 4096 NT_STATUS_OK
ReadX 12682 192512 4096 4096 NT_STATUS_OK
ReadX 12682 258048 4096 4096 NT_STATUS_OK
ReadX 12682 323584 4096 4096 NT_STATUS_OK
ReadX 12682 389120 4096 4096 NT_STATUS_OK
ReadX 12682 454656 4096 4096 NT_STATUS_OK
ReadX 12682 520192 4096 4096 NT_STATUS_OK
WriteX 12682 0 65536 65536 NT_STATUS_OK
WriteX 12682 65536 65536 65536 NT_STATUS_OK
WriteX 12682 131072 65536 65536 NT_STATUS_OK
WriteX 12682 196608 65536 65536 NT_STATUS_OK
WriteX 12682 262144 65536 65536 NT_STATUS_OK
WriteX 12682 327680 65536 65536 NT_STATUS_OK
WriteX 12682 393216 65536 65536 NT_STATUS_OK
WriteX 12682 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12679 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12689 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12692 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12694 NT_STATUS_OK
Close 12694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12701 NT_STATUS_OK
Close 12701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12707 NT_STATUS_OK
Close 12707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12717 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12751 NT_STATUS_OK
WriteX 12751 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12751 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12751 0 65536 65536 NT_STATUS_OK
WriteX 12751 65536 65536 65536 NT_STATUS_OK
WriteX 12751 131072 65536 65536 NT_STATUS_OK
WriteX 12751 196608 65536 65536 NT_STATUS_OK
WriteX 12751 262144 26634 26634 NT_STATUS_OK
Close 12751 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12757 NT_STATUS_OK
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 4096 4096 NT_STATUS_OK
ReadX 12759 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12760 NT_STATUS_OK
Close 12760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12764 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12769 NT_STATUS_OK
Close 12769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12773 NT_STATUS_OK
Close 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12776 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12782 NT_STATUS_OK
Close 12782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12811 NT_STATUS_OK
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12824 NT_STATUS_OK
Close 12824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12826 NT_STATUS_OK
Close 12826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
Close 12839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12840 NT_STATUS_OK
ReadX 12840 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
Close 12852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12883 0 4096 4096 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
ReadX 12885 4096 4096 4096 NT_STATUS_OK
ReadX 12885 8192 4096 4096 NT_STATUS_OK
ReadX 12885 12288 4096 4096 NT_STATUS_OK
ReadX 12885 16384 4096 4096 NT_STATUS_OK
ReadX 12885 20480 4096 4096 NT_STATUS_OK
ReadX 12885 24576 4096 4096 NT_STATUS_OK
ReadX 12885 28672 4096 4096 NT_STATUS_OK
ReadX 12885 32768 4096 4096 NT_STATUS_OK
ReadX 12885 36864 4096 4096 NT_STATUS_OK
ReadX 12885 40960 4096 4096 NT_STATUS_OK
ReadX 12885 45056 4096 4096 NT_STATUS_OK
ReadX 12885 49152 4096 4096 NT_STATUS_OK
ReadX 12885 53248 4096 4096 NT_STATUS_OK
ReadX 12885 57344 4096 4096 NT_STATUS_OK
ReadX 12885 61440 4096 4096 NT_STATUS_OK
ReadX 12885 65536 4096 4096 NT_STATUS_OK
ReadX 12885 69632 4096 4096 NT_STATUS_OK
ReadX 12885 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12885 1004 NT_STATUS_OK
WriteX 12885 0 4096 4096 NT_STATUS_OK
Close 12885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12886 NT_STATUS_OK
SET_FILE_INFORMATION 12886 1004 NT_STATUS_OK
Close 12886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12888 NT_STATUS_OK
Close 12888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12891 NT_STATUS_OK
WriteX 12891 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 258 NT_STATUS_OK
WriteX 12891 0 65536 65536 NT_STATUS_OK
WriteX 12891 65536 19979 19979 NT_STATUS_OK
Close 12891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Flush 12892 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Flush 12892 NT_STATUS_OK
QUERY_FILE_INFORMATION 12892 1004 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Flush 12892 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Flush 12892 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Flush 12892 NT_STATUS_OK
SET_FILE_INFORMATION 12892 1004 NT_STATUS_OK
WriteX 12892 0 4096 4096 NT_STATUS_OK
Flush 12892 NT_STATUS_OK
Close 12892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12893 NT_STATUS_OK
ReadX 12893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 4096 4096 NT_STATUS_OK
Close 12893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
Close 12895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 4096 4096 NT_STATUS_OK
Close 12896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12897 1004 NT_STATUS_OK
WriteX 12897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12898 NT_STATUS_OK
Close 12898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12903 NT_STATUS_OK
WriteX 12903 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
WriteX 12903 0 65536 65536 NT_STATUS_OK
WriteX 12903 65536 17654 17654 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
QUERY_FILE_INFORMATION 12904 1004 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12905 NT_STATUS_OK
SET_FILE_INFORMATION 12905 1004 NT_STATUS_OK
Close 12905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12906 NT_STATUS_OK
ReadX 12906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12907 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12909 NT_STATUS_OK
ReadX 12909 0 4096 4096 NT_STATUS_OK
ReadX 12909 4096 4096 4096 NT_STATUS_OK
ReadX 12909 8192 4096 4096 NT_STATUS_OK
ReadX 12909 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12909 16384 4096 4096 NT_STATUS_OK
ReadX 12909 20480 4096 4096 NT_STATUS_OK
ReadX 12909 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12910 NT_STATUS_OK
ReadX 12910 0 4096 4096 NT_STATUS_OK
Close 12910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
Close 12911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12912 NT_STATUS_OK
ReadX 12912 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12912 1004 NT_STATUS_OK
WriteX 12912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12913 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12918 NT_STATUS_OK
WriteX 12918 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12918 258 NT_STATUS_OK
WriteX 12918 0 65536 65536 NT_STATUS_OK
WriteX 12918 65536 19490 19490 NT_STATUS_OK
Close 12918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 4096 4096 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
Flush 12919 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
Flush 12919 NT_STATUS_OK
QUERY_FILE_INFORMATION 12919 1004 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
Flush 12919 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
Flush 12919 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
Flush 12919 NT_STATUS_OK
SET_FILE_INFORMATION 12919 1004 NT_STATUS_OK
WriteX 12919 0 4096 4096 NT_STATUS_OK
Flush 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12920 NT_STATUS_OK
SET_FILE_INFORMATION 12920 1004 NT_STATUS_OK
Close 12920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12922 NT_STATUS_OK
Close 12922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12924 0 4096 4096 NT_STATUS_OK
Close 12924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12926 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
ReadX 12926 4096 4096 4096 NT_STATUS_OK
ReadX 12926 8192 4096 4096 NT_STATUS_OK
ReadX 12926 12288 4096 4096 NT_STATUS_OK
ReadX 12926 16384 4096 4096 NT_STATUS_OK
ReadX 12926 20480 4096 4096 NT_STATUS_OK
ReadX 12926 24576 4096 4096 NT_STATUS_OK
ReadX 12926 28672 4096 4096 NT_STATUS_OK
ReadX 12926 32768 4096 4096 NT_STATUS_OK
ReadX 12926 36864 4096 4096 NT_STATUS_OK
ReadX 12926 40960 4096 4096 NT_STATUS_OK
ReadX 12926 45056 4096 4096 NT_STATUS_OK
ReadX 12926 49152 4096 4096 NT_STATUS_OK
ReadX 12926 53248 4096 4096 NT_STATUS_OK
ReadX 12926 57344 4096 4096 NT_STATUS_OK
ReadX 12926 61440 4096 4096 NT_STATUS_OK
ReadX 12926 65536 4096 4096 NT_STATUS_OK
ReadX 12926 69632 4096 4096 NT_STATUS_OK
ReadX 12926 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12926 1004 NT_STATUS_OK
WriteX 12926 0 4096 4096 NT_STATUS_OK
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12927 NT_STATUS_OK
SET_FILE_INFORMATION 12927 1004 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12932 NT_STATUS_OK
WriteX 12932 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12932 258 NT_STATUS_OK
WriteX 12932 0 65536 65536 NT_STATUS_OK
WriteX 12932 65536 8866 8866 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
WriteX 12933 0 4096 4096 NT_STATUS_OK
Flush 12933 NT_STATUS_OK
SET_FILE_INFORMATION 12933 1004 NT_STATUS_OK
WriteX 12933 0 4096 4096 NT_STATUS_OK
Flush 12933 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
Close 12935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12936 NT_STATUS_OK
ReadX 12936 0 4096 4096 NT_STATUS_OK
Close 12936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12937 NT_STATUS_OK
ReadX 12937 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12937 1004 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12938 NT_STATUS_OK
Close 12938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12937 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12943 NT_STATUS_OK
WriteX 12943 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12943 258 NT_STATUS_OK
WriteX 12943 0 65536 65536 NT_STATUS_OK
WriteX 12943 65536 9298 9298 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 4096 4096 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
SET_FILE_INFORMATION 12944 1004 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
Close 12944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12945 NT_STATUS_OK
SET_FILE_INFORMATION 12945 1004 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12946 NT_STATUS_OK
ReadX 12946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12950 0 4096 4096 NT_STATUS_OK
Close 12950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12951 4096 4096 4096 NT_STATUS_OK
ReadX 12951 8192 4096 4096 NT_STATUS_OK
ReadX 12951 12288 4096 4096 NT_STATUS_OK
ReadX 12951 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12952 NT_STATUS_OK
ReadX 12952 0 4096 4096 NT_STATUS_OK
Close 12952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 4096 4096 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12954 1004 NT_STATUS_OK
WriteX 12954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12955 NT_STATUS_OK
Close 12955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12951 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12957 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12960 NT_STATUS_OK
WriteX 12960 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12960 258 NT_STATUS_OK
WriteX 12960 0 65536 65536 NT_STATUS_OK
WriteX 12960 65536 11540 11540 NT_STATUS_OK
Close 12960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
WriteX 12961 0 4096 4096 NT_STATUS_OK
Flush 12961 NT_STATUS_OK
SET_FILE_INFORMATION 12961 1004 NT_STATUS_OK
WriteX 12961 0 4096 4096 NT_STATUS_OK
Flush 12961 NT_STATUS_OK
Close 12961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12962 NT_STATUS_OK
SET_FILE_INFORMATION 12962 1004 NT_STATUS_OK
Close 12962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12964 NT_STATUS_OK
Close 12964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 61440 4096 4096 NT_STATUS_OK
ReadX 12966 126976 4096 4096 NT_STATUS_OK
WriteX 12966 0 65536 65536 NT_STATUS_OK
WriteX 12966 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 61440 4096 4096 NT_STATUS_OK
ReadX 12967 126976 4096 4096 NT_STATUS_OK
ReadX 12967 192512 4096 4096 NT_STATUS_OK
ReadX 12967 258048 4096 4096 NT_STATUS_OK
WriteX 12967 0 65536 65536 NT_STATUS_OK
WriteX 12967 65536 65536 65536 NT_STATUS_OK
WriteX 12967 131072 65536 65536 NT_STATUS_OK
WriteX 12967 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 61440 4096 4096 NT_STATUS_OK
ReadX 12968 126976 4096 4096 NT_STATUS_OK
ReadX 12968 192512 4096 4096 NT_STATUS_OK
ReadX 12968 258048 4096 4096 NT_STATUS_OK
ReadX 12968 323584 4096 4096 NT_STATUS_OK
ReadX 12968 389120 4096 4096 NT_STATUS_OK
ReadX 12968 454656 4096 4096 NT_STATUS_OK
ReadX 12968 520192 4096 4096 NT_STATUS_OK
WriteX 12968 0 65536 65536 NT_STATUS_OK
WriteX 12968 65536 65536 65536 NT_STATUS_OK
WriteX 12968 131072 65536 65536 NT_STATUS_OK
WriteX 12968 196608 65536 65536 NT_STATUS_OK
WriteX 12968 262144 65536 65536 NT_STATUS_OK
WriteX 12968 327680 65536 65536 NT_STATUS_OK
WriteX 12968 393216 65536 65536 NT_STATUS_OK
WriteX 12968 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
ReadX 12969 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12970 NT_STATUS_OK
WriteX 12970 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12970 258 NT_STATUS_OK
WriteX 12970 0 53 53 NT_STATUS_OK
Close 12970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12909 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12969 8192 4096 4096 NT_STATUS_OK
ReadX 12969 12288 4096 4096 NT_STATUS_OK
WriteX 12973 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12973 258 NT_STATUS_OK
ReadX 12969 16384 4096 4096 NT_STATUS_OK
ReadX 12969 20480 4096 4096 NT_STATUS_OK
WriteX 12973 0 15360 15360 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12974 NT_STATUS_OK
ReadX 12974 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12974 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12974 1004 NT_STATUS_OK
WriteX 12974 0 4096 4096 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12977 4096 4096 4096 NT_STATUS_OK
ReadX 12977 8192 4096 4096 NT_STATUS_OK
ReadX 12977 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
ReadX 12980 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
ReadX 12981 4096 4096 4096 NT_STATUS_OK
ReadX 12981 8192 4096 4096 NT_STATUS_OK
Close 12980 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12982 NT_STATUS_OK
WriteX 12982 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12982 258 NT_STATUS_OK
WriteX 12982 0 15360 15360 NT_STATUS_OK
Close 12982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12983 NT_STATUS_OK
ReadX 12983 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12983 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12986 NT_STATUS_OK
ReadX 12986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12987 NT_STATUS_OK
SET_FILE_INFORMATION 12987 1004 NT_STATUS_OK
Close 12987 NT_STATUS_OK
WriteX 12983 0 4096 4096 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12988 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
ReadX 12990 4096 4096 4096 NT_STATUS_OK
ReadX 12990 8192 4096 4096 NT_STATUS_OK
ReadX 12990 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12992 NT_STATUS_OK
WriteX 12992 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12992 258 NT_STATUS_OK
WriteX 12992 0 53 53 NT_STATUS_OK
Close 12992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12991 4096 4096 4096 NT_STATUS_OK
ReadX 12991 8192 4096 4096 NT_STATUS_OK
ReadX 12991 12288 4096 4096 NT_STATUS_OK
WriteX 12995 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 258 NT_STATUS_OK
WriteX 12995 0 12006 12006 NT_STATUS_OK
Close 12995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12996 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12996 1004 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12999 4096 4096 4096 NT_STATUS_OK
ReadX 12999 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13002 NT_STATUS_OK
WriteX 13002 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 258 NT_STATUS_OK
WriteX 13002 0 11991 11991 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13003 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13003 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13007 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
Close 13007 NT_STATUS_OK
WriteX 13003 0 4096 4096 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13010 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13010 1004 NT_STATUS_OK
ReadX 13010 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13010 1004 NT_STATUS_OK
WriteX 13010 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13010 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13010 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13010 1004 NT_STATUS_OK
Close 12986 NT_STATUS_OK
WriteX 12990 0 19054 19054 NT_STATUS_OK
WriteX 13010 0 12288 12288 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13015 NT_STATUS_OK
Close 13015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 61440 61440 NT_STATUS_OK
ReadX 13017 61440 4096 4096 NT_STATUS_OK
ReadX 13017 65536 61440 61440 NT_STATUS_OK
ReadX 13017 126976 4096 4096 NT_STATUS_OK
ReadX 13017 131072 61440 61440 NT_STATUS_OK
ReadX 13017 192512 4096 4096 NT_STATUS_OK
ReadX 13017 196608 61440 61440 NT_STATUS_OK
ReadX 13017 258048 4096 4096 NT_STATUS_OK
ReadX 13017 262144 61440 61440 NT_STATUS_OK
ReadX 13017 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 61440 61440 NT_STATUS_OK
ReadX 13018 61440 4096 4096 NT_STATUS_OK
ReadX 13018 65536 61440 61440 NT_STATUS_OK
ReadX 13018 126976 4096 4096 NT_STATUS_OK
ReadX 13018 131072 61440 61440 NT_STATUS_OK
ReadX 13018 192512 4096 4096 NT_STATUS_OK
ReadX 13018 196608 61440 61440 NT_STATUS_OK
ReadX 13018 258048 4096 4096 NT_STATUS_OK
ReadX 13018 262144 61440 61440 NT_STATUS_OK
ReadX 13018 323584 4096 4096 NT_STATUS_OK
ReadX 13018 327680 61440 61440 NT_STATUS_OK
ReadX 13018 389120 4096 4096 NT_STATUS_OK
ReadX 13018 393216 61440 61440 NT_STATUS_OK
ReadX 13018 454656 4096 4096 NT_STATUS_OK
ReadX 13018 458752 61440 61440 NT_STATUS_OK
ReadX 13018 520192 4096 4096 NT_STATUS_OK
ReadX 13018 524288 61440 61440 NT_STATUS_OK
ReadX 13018 585728 4096 4096 NT_STATUS_OK
ReadX 13018 589824 61440 61440 NT_STATUS_OK
ReadX 13018 651264 4096 4096 NT_STATUS_OK
ReadX 13018 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 61440 61440 NT_STATUS_OK
ReadX 13019 61440 4096 4096 NT_STATUS_OK
ReadX 13019 65536 61440 61440 NT_STATUS_OK
ReadX 13019 126976 4096 4096 NT_STATUS_OK
ReadX 13019 131072 61440 61440 NT_STATUS_OK
ReadX 13019 192512 4096 4096 NT_STATUS_OK
ReadX 13019 196608 61440 61440 NT_STATUS_OK
ReadX 13019 258048 4096 4096 NT_STATUS_OK
ReadX 13019 262144 61440 61440 NT_STATUS_OK
ReadX 13019 323584 4096 4096 NT_STATUS_OK
ReadX 13019 327680 61440 61440 NT_STATUS_OK
ReadX 13019 389120 4096 4096 NT_STATUS_OK
ReadX 13019 393216 61440 61440 NT_STATUS_OK
ReadX 13019 454656 4096 4096 NT_STATUS_OK
ReadX 13019 458752 61440 61440 NT_STATUS_OK
ReadX 13019 520192 4096 4096 NT_STATUS_OK
ReadX 13019 524288 61440 61440 NT_STATUS_OK
ReadX 13019 585728 4096 4096 NT_STATUS_OK
ReadX 13019 589824 61440 61440 NT_STATUS_OK
ReadX 13019 651264 4096 4096 NT_STATUS_OK
ReadX 13019 655360 61440 61440 NT_STATUS_OK
ReadX 13019 716800 4096 4096 NT_STATUS_OK
ReadX 13019 720896 61440 61440 NT_STATUS_OK
ReadX 13019 782336 4096 4096 NT_STATUS_OK
ReadX 13019 786432 61440 61440 NT_STATUS_OK
ReadX 13019 847872 4096 4096 NT_STATUS_OK
ReadX 13019 851968 61440 61440 NT_STATUS_OK
ReadX 13019 913408 4096 4096 NT_STATUS_OK
ReadX 13019 917504 61440 61440 NT_STATUS_OK
ReadX 13019 978944 4096 4096 NT_STATUS_OK
ReadX 13019 983040 61440 61440 NT_STATUS_OK
ReadX 13019 1044480 4096 4096 NT_STATUS_OK
ReadX 13019 1048576 61440 61440 NT_STATUS_OK
ReadX 13019 1110016 4096 4096 NT_STATUS_OK
ReadX 13019 1114112 61440 61440 NT_STATUS_OK
ReadX 13019 1175552 4096 4096 NT_STATUS_OK
ReadX 13019 1179648 61440 61440 NT_STATUS_OK
ReadX 13019 1241088 4096 4096 NT_STATUS_OK
ReadX 13019 1245184 61440 61440 NT_STATUS_OK
ReadX 13019 1306624 4096 4096 NT_STATUS_OK
ReadX 13019 1310720 61440 61440 NT_STATUS_OK
ReadX 13019 1372160 4096 4096 NT_STATUS_OK
ReadX 13019 1376256 61440 61440 NT_STATUS_OK
ReadX 13019 1437696 4096 4096 NT_STATUS_OK
ReadX 13019 1441792 61440 61440 NT_STATUS_OK
ReadX 13019 1503232 4096 4096 NT_STATUS_OK
ReadX 13019 1507328 61440 61440 NT_STATUS_OK
ReadX 13019 1568768 4096 4096 NT_STATUS_OK
ReadX 13019 1572864 61440 61440 NT_STATUS_OK
ReadX 13019 1634304 4096 4096 NT_STATUS_OK
ReadX 13019 1638400 61440 61440 NT_STATUS_OK
ReadX 13019 1699840 4096 4096 NT_STATUS_OK
ReadX 13019 1703936 61440 61440 NT_STATUS_OK
ReadX 13019 1765376 4096 4096 NT_STATUS_OK
ReadX 13019 1769472 61440 61440 NT_STATUS_OK
ReadX 13019 1830912 4096 4096 NT_STATUS_OK
ReadX 13019 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13026 NT_STATUS_OK
QUERY_FILE_INFORMATION 13026 1004 NT_STATUS_OK
WriteX 13026 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13026 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13027 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13028 NT_STATUS_OK
WriteX 13028 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13028 258 NT_STATUS_OK
WriteX 13028 0 491 491 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13026 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13031 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13032 NT_STATUS_OK
WriteX 13032 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 258 NT_STATUS_OK
WriteX 13032 0 543 543 NT_STATUS_OK
Close 13032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13033 NT_STATUS_OK
ReadX 13033 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Close 13033 NT_STATUS_OK
Close 13021 NT_STATUS_OK
Close 13022 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13046 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 1004 NT_STATUS_OK
WriteX 13046 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 258 NT_STATUS_OK
WriteX 13046 0 2048 2048 NT_STATUS_OK
Close 13046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
Flush 13047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13052 NT_STATUS_OK
WriteX 13052 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 258 NT_STATUS_OK
WriteX 13052 0 2048 2048 NT_STATUS_OK
Close 13052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13053 NT_STATUS_OK
ReadX 13053 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13058 NT_STATUS_OK
WriteX 13058 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13058 258 NT_STATUS_OK
WriteX 13058 0 2048 2048 NT_STATUS_OK
Close 13058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13059 NT_STATUS_OK
ReadX 13059 0 2048 2048 NT_STATUS_OK
ReadX 13037 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13053 0 4096 4096 NT_STATUS_OK
WriteX 13037 0 8192 8192 NT_STATUS_OK
WriteX 13038 0 4096 4096 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
ReadX 13053 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13063 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13040 NT_STATUS_OK
Close 13053 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13073 NT_STATUS_OK
ReadX 13073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13083 NT_STATUS_OK
QUERY_FILE_INFORMATION 13083 1004 NT_STATUS_OK
WriteX 13083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13083 258 NT_STATUS_OK
WriteX 13083 0 2048 2048 NT_STATUS_OK
Close 13083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13091 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 1004 NT_STATUS_OK
WriteX 13091 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 258 NT_STATUS_OK
WriteX 13091 0 2048 2048 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13084 0 4096 4096 NT_STATUS_OK
Flush 13084 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13086 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13094 NT_STATUS_OK
WriteX 13094 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13094 258 NT_STATUS_OK
WriteX 13094 0 4096 4096 NT_STATUS_OK
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13095 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13096 NT_STATUS_OK
Close 13096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13097 NT_STATUS_OK
WriteX 13097 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 4096 4096 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13098 0 4096 4096 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Close 13072 NT_STATUS_OK
Close 13086 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Close 13073 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13071 NT_STATUS_OK
Close 13068 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13101 NT_STATUS_OK
Close 13101 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13104 NT_STATUS_OK
Close 13104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13105 NT_STATUS_OK
WriteX 13105 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 2048 2048 NT_STATUS_OK
Close 13105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13108 NT_STATUS_OK
ReadX 13108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13111 NT_STATUS_OK
ReadX 13111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13120 NT_STATUS_OK
QUERY_FILE_INFORMATION 13120 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13103 NT_STATUS_OK
Close 13106 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13122 NT_STATUS_OK
QUERY_FILE_INFORMATION 13122 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13135 NT_STATUS_OK
ReadX 13135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13137 NT_STATUS_OK
ReadX 13137 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13142 NT_STATUS_OK
QUERY_FILE_INFORMATION 13142 1004 NT_STATUS_OK
WriteX 13142 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13142 258 NT_STATUS_OK
WriteX 13142 0 2048 2048 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13146 NT_STATUS_OK
ReadX 13146 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13149 NT_STATUS_OK
ReadX 13149 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13153 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13154 NT_STATUS_OK
QUERY_FILE_INFORMATION 13154 1004 NT_STATUS_OK
WriteX 13154 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13154 258 NT_STATUS_OK
WriteX 13154 0 2048 2048 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13155 NT_STATUS_OK
ReadX 13155 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13157 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13162 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 1004 NT_STATUS_OK
WriteX 13162 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 258 NT_STATUS_OK
WriteX 13162 0 2048 2048 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
Flush 13143 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13163 0 4096 4096 NT_STATUS_OK
Flush 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13163 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13145 4096 16384 16384 NT_STATUS_OK
ReadX 13125 4096 16384 16384 NT_STATUS_OK
ReadX 13157 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 2048 2048 NT_STATUS_OK
WriteX 13165 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13166 NT_STATUS_OK
QUERY_FILE_INFORMATION 13166 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13149 NT_STATUS_OK
Close 13137 NT_STATUS_OK
Close 13129 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Close 13147 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13131 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Close 13132 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13168 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13170 NT_STATUS_OK
QUERY_FILE_INFORMATION 13170 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13173 4096 16384 16384 NT_STATUS_OK
WriteX 13173 0 4096 4096 NT_STATUS_OK
WriteX 13174 0 4096 4096 NT_STATUS_OK
WriteX 13175 0 4096 4096 NT_STATUS_OK
WriteX 13176 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13184 NT_STATUS_OK
ReadX 13184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13185 NT_STATUS_OK
ReadX 13185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13189 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 8192 8192 NT_STATUS_OK
ReadX 13179 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13193 0 4096 4096 NT_STATUS_OK
ReadX 13193 4096 4096 4096 NT_STATUS_OK
ReadX 13193 8192 4096 4096 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13194 0 4096 4096 NT_STATUS_OK
ReadX 13194 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13173 0 4096 4096 NT_STATUS_OK
WriteX 13174 0 4096 4096 NT_STATUS_OK
WriteX 13175 0 4096 4096 NT_STATUS_OK
WriteX 13176 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13199 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 1004 NT_STATUS_OK
WriteX 13199 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 258 NT_STATUS_OK
WriteX 13199 0 2048 2048 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13200 NT_STATUS_OK
ReadX 13200 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
ReadX 13202 4096 4096 4096 NT_STATUS_OK
WriteX 13202 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13203 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 0 4096 4096 NT_STATUS_OK
ReadX 13204 4096 4096 4096 NT_STATUS_OK
WriteX 13204 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13205 NT_STATUS_OK
QUERY_FILE_INFORMATION 13205 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13192 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13175 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13185 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13186 NT_STATUS_OK
Close 13187 NT_STATUS_OK
Close 13188 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Close 13193 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13207 0 4096 4096 NT_STATUS_OK
ReadX 13207 4096 4096 4096 NT_STATUS_OK
ReadX 13207 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
ReadX 13208 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13225 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 1004 NT_STATUS_OK
WriteX 13225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 2048 2048 NT_STATUS_OK
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13231 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1004 NT_STATUS_OK
WriteX 13231 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 258 NT_STATUS_OK
WriteX 13231 0 2048 2048 NT_STATUS_OK
Close 13231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13215 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13233 NT_STATUS_OK
QUERY_FILE_INFORMATION 13233 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13235 NT_STATUS_OK
QUERY_FILE_INFORMATION 13235 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 61440 4096 4096 NT_STATUS_OK
ReadX 13237 126976 4096 4096 NT_STATUS_OK
WriteX 13237 0 65536 65536 NT_STATUS_OK
WriteX 13237 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 61440 4096 4096 NT_STATUS_OK
ReadX 13238 126976 4096 4096 NT_STATUS_OK
ReadX 13238 192512 4096 4096 NT_STATUS_OK
ReadX 13238 258048 4096 4096 NT_STATUS_OK
WriteX 13238 0 65536 65536 NT_STATUS_OK
WriteX 13238 65536 65536 65536 NT_STATUS_OK
WriteX 13238 131072 65536 65536 NT_STATUS_OK
WriteX 13238 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 61440 4096 4096 NT_STATUS_OK
ReadX 13239 126976 4096 4096 NT_STATUS_OK
ReadX 13239 192512 4096 4096 NT_STATUS_OK
ReadX 13239 258048 4096 4096 NT_STATUS_OK
ReadX 13239 323584 4096 4096 NT_STATUS_OK
ReadX 13239 389120 4096 4096 NT_STATUS_OK
ReadX 13239 454656 4096 4096 NT_STATUS_OK
ReadX 13239 520192 4096 4096 NT_STATUS_OK
WriteX 13239 0 65536 65536 NT_STATUS_OK
WriteX 13239 65536 65536 65536 NT_STATUS_OK
WriteX 13239 131072 65536 65536 NT_STATUS_OK
WriteX 13239 196608 65536 65536 NT_STATUS_OK
WriteX 13239 262144 65536 65536 NT_STATUS_OK
WriteX 13239 327680 65536 65536 NT_STATUS_OK
WriteX 13239 393216 65536 65536 NT_STATUS_OK
WriteX 13239 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13240 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13240 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13240 8192 4096 4096 NT_STATUS_OK
ReadX 13240 12288 4096 4096 NT_STATUS_OK
ReadX 13240 16384 4096 4096 NT_STATUS_OK
ReadX 13240 20480 4096 4096 NT_STATUS_OK
ReadX 13240 24576 4096 4096 NT_STATUS_OK
ReadX 13240 28672 4096 4096 NT_STATUS_OK
ReadX 13240 32768 4096 4096 NT_STATUS_OK
ReadX 13240 36864 4096 4096 NT_STATUS_OK
ReadX 13240 40960 4096 4096 NT_STATUS_OK
ReadX 13240 45056 4096 4096 NT_STATUS_OK
ReadX 13240 49152 4096 4096 NT_STATUS_OK
ReadX 13240 53248 4096 4096 NT_STATUS_OK
ReadX 13240 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13240 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13238 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13243 NT_STATUS_OK
WriteX 13243 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13243 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13243 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13243 1004 NT_STATUS_OK
WriteX 13243 0 57088 57088 NT_STATUS_OK
WriteX 13243 0 4096 4096 NT_STATUS_OK
Flush 13243 NT_STATUS_OK
Close 13240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13244 NT_STATUS_OK
SET_FILE_INFORMATION 13244 1004 NT_STATUS_OK
Close 13244 NT_STATUS_OK
SET_FILE_INFORMATION 13243 1004 NT_STATUS_OK
WriteX 13243 0 4096 4096 NT_STATUS_OK
Close 13243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13245 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13247 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13248 NT_STATUS_OK
WriteX 13248 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13248 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13248 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13248 1004 NT_STATUS_OK
WriteX 13248 0 51456 51456 NT_STATUS_OK
WriteX 13248 0 4096 4096 NT_STATUS_OK
Flush 13248 NT_STATUS_OK
SET_FILE_INFORMATION 13248 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13248 1004 NT_STATUS_OK
WriteX 13248 0 4096 4096 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13250 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13252 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13254 NT_STATUS_OK
Close 13254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13257 NT_STATUS_OK
WriteX 13257 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
WriteX 13257 0 53077 53077 NT_STATUS_OK
Close 13257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13258 NT_STATUS_OK
WriteX 13258 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13258 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13258 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13258 1004 NT_STATUS_OK
WriteX 13258 0 65536 65536 NT_STATUS_OK
WriteX 13258 65536 1856 1856 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Flush 13258 NT_STATUS_OK
SET_FILE_INFORMATION 13258 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13258 1004 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13264 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13267 NT_STATUS_OK
WriteX 13267 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13267 258 NT_STATUS_OK
WriteX 13267 0 7983 7983 NT_STATUS_OK
Close 13267 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13272 NT_STATUS_OK
WriteX 13272 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 258 NT_STATUS_OK
WriteX 13272 0 65536 65536 NT_STATUS_OK
WriteX 13272 65536 65536 65536 NT_STATUS_OK
WriteX 13272 131072 65536 65536 NT_STATUS_OK
WriteX 13272 196608 65536 65536 NT_STATUS_OK
WriteX 13272 262144 65536 65536 NT_STATUS_OK
WriteX 13272 327680 65536 65536 NT_STATUS_OK
WriteX 13272 393216 65536 65536 NT_STATUS_OK
WriteX 13272 458752 46731 46731 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13273 NT_STATUS_OK
WriteX 13273 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13273 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13262 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13273 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13273 1004 NT_STATUS_OK
WriteX 13273 0 65536 65536 NT_STATUS_OK
WriteX 13273 65536 22848 22848 NT_STATUS_OK
WriteX 13273 0 4096 4096 NT_STATUS_OK
Flush 13273 NT_STATUS_OK
SET_FILE_INFORMATION 13273 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13273 1004 NT_STATUS_OK
WriteX 13273 0 4096 4096 NT_STATUS_OK
Close 13273 NT_STATUS_OK
Close 13262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13275 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13277 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13278 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13278 1004 NT_STATUS_OK
ReadX 13278 8192 4096 4096 NT_STATUS_OK
ReadX 13278 12288 4096 4096 NT_STATUS_OK
ReadX 13278 16384 4096 4096 NT_STATUS_OK
ReadX 13278 20480 4096 4096 NT_STATUS_OK
ReadX 13278 24576 4096 4096 NT_STATUS_OK
ReadX 13278 28672 4096 4096 NT_STATUS_OK
ReadX 13278 32768 4096 4096 NT_STATUS_OK
ReadX 13278 36864 4096 4096 NT_STATUS_OK
ReadX 13278 40960 4096 4096 NT_STATUS_OK
ReadX 13278 45056 4096 4096 NT_STATUS_OK
ReadX 13278 49152 4096 4096 NT_STATUS_OK
ReadX 13278 53248 4096 4096 NT_STATUS_OK
ReadX 13278 57344 4096 4096 NT_STATUS_OK
ReadX 13278 61440 4096 4096 NT_STATUS_OK
ReadX 13278 65536 4096 4096 NT_STATUS_OK
ReadX 13278 69632 4096 4096 NT_STATUS_OK
ReadX 13278 73728 4096 4096 NT_STATUS_OK
ReadX 13278 77824 4096 4096 NT_STATUS_OK
ReadX 13278 81920 4096 4096 NT_STATUS_OK
ReadX 13278 86016 4096 4096 NT_STATUS_OK
ReadX 13278 90112 4096 4096 NT_STATUS_OK
ReadX 13278 94208 4096 4096 NT_STATUS_OK
ReadX 13278 98304 4096 4096 NT_STATUS_OK
ReadX 13278 102400 4096 4096 NT_STATUS_OK
ReadX 13278 106496 4096 4096 NT_STATUS_OK
ReadX 13278 110592 4096 4096 NT_STATUS_OK
ReadX 13278 114688 4096 4096 NT_STATUS_OK
ReadX 13278 118784 4096 4096 NT_STATUS_OK
ReadX 13278 122880 4096 4096 NT_STATUS_OK
ReadX 13278 126976 4096 4096 NT_STATUS_OK
ReadX 13278 131072 4096 4096 NT_STATUS_OK
ReadX 13278 135168 4096 4096 NT_STATUS_OK
ReadX 13278 139264 4096 4096 NT_STATUS_OK
ReadX 13278 143360 4096 4096 NT_STATUS_OK
ReadX 13278 147456 4096 4096 NT_STATUS_OK
ReadX 13278 151552 4096 4096 NT_STATUS_OK
ReadX 13278 155648 4096 4096 NT_STATUS_OK
ReadX 13278 159744 4096 4096 NT_STATUS_OK
ReadX 13278 163840 4096 4096 NT_STATUS_OK
ReadX 13278 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13278 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13279 NT_STATUS_OK
Close 13279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13281 NT_STATUS_OK
WriteX 13281 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13281 258 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13282 NT_STATUS_OK
SET_FILE_INFORMATION 13282 1004 NT_STATUS_OK
Close 13282 NT_STATUS_OK
WriteX 13281 0 42388 42388 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
ReadX 13285 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
SET_FILE_INFORMATION 13286 1004 NT_STATUS_OK
WriteX 13286 0 42652 42652 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13288 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
ReadX 13290 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13292 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13295 NT_STATUS_OK
WriteX 13295 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13295 258 NT_STATUS_OK
WriteX 13295 0 65536 65536 NT_STATUS_OK
WriteX 13295 65536 49 49 NT_STATUS_OK
Close 13295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 61440 61440 NT_STATUS_OK
ReadX 13296 61440 4096 4096 NT_STATUS_OK
ReadX 13296 65536 61440 61440 NT_STATUS_OK
ReadX 13296 126976 4096 4096 NT_STATUS_OK
ReadX 13296 131072 61440 61440 NT_STATUS_OK
ReadX 13296 192512 4096 4096 NT_STATUS_OK
ReadX 13296 196608 61440 61440 NT_STATUS_OK
ReadX 13296 258048 4096 4096 NT_STATUS_OK
ReadX 13296 262144 61440 61440 NT_STATUS_OK
ReadX 13296 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 61440 61440 NT_STATUS_OK
ReadX 13297 61440 4096 4096 NT_STATUS_OK
ReadX 13297 65536 61440 61440 NT_STATUS_OK
ReadX 13297 126976 4096 4096 NT_STATUS_OK
ReadX 13297 131072 61440 61440 NT_STATUS_OK
ReadX 13297 192512 4096 4096 NT_STATUS_OK
ReadX 13297 196608 61440 61440 NT_STATUS_OK
ReadX 13297 258048 4096 4096 NT_STATUS_OK
ReadX 13297 262144 61440 61440 NT_STATUS_OK
ReadX 13297 323584 4096 4096 NT_STATUS_OK
ReadX 13297 327680 61440 61440 NT_STATUS_OK
ReadX 13297 389120 4096 4096 NT_STATUS_OK
ReadX 13297 393216 61440 61440 NT_STATUS_OK
ReadX 13297 454656 4096 4096 NT_STATUS_OK
ReadX 13297 458752 61440 61440 NT_STATUS_OK
ReadX 13297 520192 4096 4096 NT_STATUS_OK
ReadX 13297 524288 61440 61440 NT_STATUS_OK
ReadX 13297 585728 4096 4096 NT_STATUS_OK
ReadX 13297 589824 61440 61440 NT_STATUS_OK
ReadX 13297 651264 4096 4096 NT_STATUS_OK
ReadX 13297 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 61440 61440 NT_STATUS_OK
ReadX 13298 61440 4096 4096 NT_STATUS_OK
ReadX 13298 65536 61440 61440 NT_STATUS_OK
ReadX 13298 126976 4096 4096 NT_STATUS_OK
ReadX 13298 131072 61440 61440 NT_STATUS_OK
ReadX 13298 192512 4096 4096 NT_STATUS_OK
ReadX 13298 196608 61440 61440 NT_STATUS_OK
ReadX 13298 258048 4096 4096 NT_STATUS_OK
ReadX 13298 262144 61440 61440 NT_STATUS_OK
ReadX 13298 323584 4096 4096 NT_STATUS_OK
ReadX 13298 327680 61440 61440 NT_STATUS_OK
ReadX 13298 389120 4096 4096 NT_STATUS_OK
ReadX 13298 393216 61440 61440 NT_STATUS_OK
ReadX 13298 454656 4096 4096 NT_STATUS_OK
ReadX 13298 458752 61440 61440 NT_STATUS_OK
ReadX 13298 520192 4096 4096 NT_STATUS_OK
ReadX 13298 524288 61440 61440 NT_STATUS_OK
ReadX 13298 585728 4096 4096 NT_STATUS_OK
ReadX 13298 589824 61440 61440 NT_STATUS_OK
ReadX 13298 651264 4096 4096 NT_STATUS_OK
ReadX 13298 655360 61440 61440 NT_STATUS_OK
ReadX 13298 716800 4096 4096 NT_STATUS_OK
ReadX 13298 720896 61440 61440 NT_STATUS_OK
ReadX 13298 782336 4096 4096 NT_STATUS_OK
ReadX 13298 786432 61440 61440 NT_STATUS_OK
ReadX 13298 847872 4096 4096 NT_STATUS_OK
ReadX 13298 851968 61440 61440 NT_STATUS_OK
ReadX 13298 913408 4096 4096 NT_STATUS_OK
ReadX 13298 917504 61440 61440 NT_STATUS_OK
ReadX 13298 978944 4096 4096 NT_STATUS_OK
ReadX 13298 983040 61440 61440 NT_STATUS_OK
ReadX 13298 1044480 4096 4096 NT_STATUS_OK
ReadX 13298 1048576 61440 61440 NT_STATUS_OK
ReadX 13298 1110016 4096 4096 NT_STATUS_OK
ReadX 13298 1114112 61440 61440 NT_STATUS_OK
ReadX 13298 1175552 4096 4096 NT_STATUS_OK
ReadX 13298 1179648 61440 61440 NT_STATUS_OK
ReadX 13298 1241088 4096 4096 NT_STATUS_OK
ReadX 13298 1245184 61440 61440 NT_STATUS_OK
ReadX 13298 1306624 4096 4096 NT_STATUS_OK
ReadX 13298 1310720 61440 61440 NT_STATUS_OK
ReadX 13298 1372160 4096 4096 NT_STATUS_OK
ReadX 13298 1376256 61440 61440 NT_STATUS_OK
ReadX 13298 1437696 4096 4096 NT_STATUS_OK
ReadX 13298 1441792 61440 61440 NT_STATUS_OK
ReadX 13298 1503232 4096 4096 NT_STATUS_OK
ReadX 13298 1507328 61440 61440 NT_STATUS_OK
ReadX 13298 1568768 4096 4096 NT_STATUS_OK
ReadX 13298 1572864 61440 61440 NT_STATUS_OK
ReadX 13298 1634304 4096 4096 NT_STATUS_OK
ReadX 13298 1638400 61440 61440 NT_STATUS_OK
ReadX 13298 1699840 4096 4096 NT_STATUS_OK
ReadX 13298 1703936 61440 61440 NT_STATUS_OK
ReadX 13298 1765376 4096 4096 NT_STATUS_OK
ReadX 13298 1769472 61440 61440 NT_STATUS_OK
ReadX 13298 1830912 4096 4096 NT_STATUS_OK
ReadX 13298 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13300 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 1005 NT_STATUS_OK
ReadX 13300 2156 24 24 NT_STATUS_OK
ReadX 13300 2139 276 276 NT_STATUS_OK
ReadX 13300 2136 14 14 NT_STATUS_OK
ReadX 13300 2136 7 7 NT_STATUS_OK
ReadX 13300 2138 12 12 NT_STATUS_OK
ReadX 13300 2137 8 8 NT_STATUS_OK
ReadX 13300 2135 15 15 NT_STATUS_OK
ReadX 13300 0 16 16 NT_STATUS_OK
ReadX 13300 16 2048 2048 NT_STATUS_OK
ReadX 13300 2064 2048 2048 NT_STATUS_OK
ReadX 13300 257 2048 2048 NT_STATUS_OK
ReadX 13300 385 2048 2048 NT_STATUS_OK
ReadX 13300 513 2048 2048 NT_STATUS_OK
ReadX 13300 641 2048 2048 NT_STATUS_OK
ReadX 13300 769 2048 2048 NT_STATUS_OK
ReadX 13300 897 2048 2048 NT_STATUS_OK
ReadX 13300 1025 2048 2048 NT_STATUS_OK
ReadX 13300 1153 2048 2048 NT_STATUS_OK
ReadX 13300 1281 2048 2048 NT_STATUS_OK
ReadX 13300 1409 2048 2048 NT_STATUS_OK
ReadX 13300 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13302 NT_STATUS_OK
Close 13302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13305 NT_STATUS_OK
WriteX 13305 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13305 258 NT_STATUS_OK
WriteX 13305 0 10575 10575 NT_STATUS_OK
Flush 13305 NT_STATUS_OK
Close 13305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
Close 13300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13310 NT_STATUS_OK
LockX 13310 2147483538 1 NT_STATUS_OK
UnlockX 13310 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13310 1005 NT_STATUS_OK
ReadX 13310 0 512 512 NT_STATUS_OK
ReadX 13310 512 512 512 NT_STATUS_OK
ReadX 13310 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13310 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13310 1004 NT_STATUS_OK
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13311 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 1005 NT_STATUS_OK
ReadX 13311 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13312 NT_STATUS_OK
LockX 13312 2147483538 1 NT_STATUS_OK
UnlockX 13312 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13312 1005 NT_STATUS_OK
ReadX 13312 0 512 512 NT_STATUS_OK
ReadX 13312 512 512 512 NT_STATUS_OK
ReadX 13312 1024 512 512 NT_STATUS_OK
ReadX 13312 288 20 20 NT_STATUS_OK
ReadX 13312 308 2084 2084 NT_STATUS_OK
ReadX 13312 388 2084 2084 NT_STATUS_OK
ReadX 13312 388 2084 2084 NT_STATUS_OK
ReadX 13299 2157 1386 1386 NT_STATUS_OK
ReadX 13312 2472 399 399 NT_STATUS_OK
ReadX 13312 3072 1536 1536 NT_STATUS_OK
ReadX 13312 544 149 149 NT_STATUS_OK
ReadX 13312 693 485 485 NT_STATUS_OK
Close 13312 NT_STATUS_OK
ReadX 13299 2157 4096 4096 NT_STATUS_OK
ReadX 13299 6253 4096 4096 NT_STATUS_OK
ReadX 13299 10349 4096 4096 NT_STATUS_OK
ReadX 13299 14445 4096 4096 NT_STATUS_OK
ReadX 13299 18541 4096 4096 NT_STATUS_OK
ReadX 13299 22637 256 256 NT_STATUS_OK
ReadX 13299 22893 4096 4096 NT_STATUS_OK
ReadX 13299 26989 4096 4096 NT_STATUS_OK
ReadX 13299 31085 4096 4096 NT_STATUS_OK
ReadX 13299 35181 4096 4096 NT_STATUS_OK
ReadX 13299 39277 4096 4096 NT_STATUS_OK
ReadX 13299 43373 4096 4096 NT_STATUS_OK
ReadX 13299 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13299 2157 1024 1024 NT_STATUS_OK
ReadX 13299 1667 4688 4688 NT_STATUS_OK
ReadX 13299 6355 3516 3516 NT_STATUS_OK
ReadX 13299 9871 16384 16384 NT_STATUS_OK
ReadX 13299 26255 3771 3771 NT_STATUS_OK
ReadX 13299 30026 2048 2048 NT_STATUS_OK
ReadX 13299 32074 1024 1024 NT_STATUS_OK
ReadX 13299 33098 6652 6652 NT_STATUS_OK
ReadX 13299 39750 16384 16384 NT_STATUS_OK
ReadX 13299 56134 10496 10496 NT_STATUS_OK
ReadX 13299 66630 1784 1784 NT_STATUS_OK
ReadX 13299 68414 90 90 NT_STATUS_OK
ReadX 13299 68504 273 273 NT_STATUS_OK
ReadX 13299 68777 1600 1600 NT_STATUS_OK
ReadX 13299 70377 640 640 NT_STATUS_OK
ReadX 13299 71017 1280 1280 NT_STATUS_OK
ReadX 13299 72297 8464 8464 NT_STATUS_OK
ReadX 13299 80761 158 158 NT_STATUS_OK
ReadX 13299 80919 912 912 NT_STATUS_OK
ReadX 13299 81831 1980 1980 NT_STATUS_OK
ReadX 13299 83811 2256 2256 NT_STATUS_OK
ReadX 13299 86067 400 400 NT_STATUS_OK
ReadX 13299 86467 252 252 NT_STATUS_OK
ReadX 13299 86719 42 42 NT_STATUS_OK
ReadX 13299 86761 725 725 NT_STATUS_OK
ReadX 13299 2009 512 512 NT_STATUS_OK
ReadX 13299 3895 9 9 NT_STATUS_OK
ReadX 13299 3781 46 46 NT_STATUS_OK
ReadX 13299 4059 92 92 NT_STATUS_OK
ReadX 13299 3781 92 92 NT_STATUS_OK
ReadX 13299 3986 184 184 NT_STATUS_OK
ReadX 13299 3987 16384 16384 NT_STATUS_OK
ReadX 13299 3902 16384 16384 NT_STATUS_OK
ReadX 13299 3781 10240 10240 NT_STATUS_OK
ReadX 13299 3821 16384 16384 NT_STATUS_OK
ReadX 13299 3891 935 935 NT_STATUS_OK
ReadX 13299 4060 10240 10240 NT_STATUS_OK
ReadX 13299 4059 184 184 NT_STATUS_OK
ReadX 13299 256 184 184 NT_STATUS_OK
ReadX 13299 256 1026 1026 NT_STATUS_OK
ReadX 13299 3901 326 326 NT_STATUS_OK
ReadX 13299 3899 652 652 NT_STATUS_OK
ReadX 13299 256 2 2 NT_STATUS_OK
ReadX 13299 258 4948 4948 NT_STATUS_OK
Close 13299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13317 NT_STATUS_OK
WriteX 13317 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13317 258 NT_STATUS_OK
WriteX 13317 0 65536 65536 NT_STATUS_OK
WriteX 13317 65536 65536 65536 NT_STATUS_OK
WriteX 13317 131072 65536 65536 NT_STATUS_OK
WriteX 13317 196608 65536 65536 NT_STATUS_OK
WriteX 13317 262144 65536 65536 NT_STATUS_OK
WriteX 13317 327680 65536 65536 NT_STATUS_OK
WriteX 13317 393216 65536 65536 NT_STATUS_OK
WriteX 13317 458752 65536 65536 NT_STATUS_OK
WriteX 13317 524288 65536 65536 NT_STATUS_OK
WriteX 13317 589824 35257 35257 NT_STATUS_OK
Close 13317 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13319 NT_STATUS_OK
Close 13319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13322 NT_STATUS_OK
WriteX 13322 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13322 258 NT_STATUS_OK
WriteX 13322 0 65536 65536 NT_STATUS_OK
WriteX 13322 65536 65536 65536 NT_STATUS_OK
WriteX 13322 131072 65536 65536 NT_STATUS_OK
WriteX 13322 196608 65536 65536 NT_STATUS_OK
WriteX 13322 262144 65536 65536 NT_STATUS_OK
WriteX 13322 327680 65536 65536 NT_STATUS_OK
WriteX 13322 393216 65536 65536 NT_STATUS_OK
WriteX 13322 458752 65536 65536 NT_STATUS_OK
WriteX 13322 524288 65536 65536 NT_STATUS_OK
WriteX 13322 589824 57598 57598 NT_STATUS_OK
Close 13322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13324 NT_STATUS_OK
WriteX 13324 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13324 258 NT_STATUS_OK
WriteX 13324 0 12543 12543 NT_STATUS_OK
Flush 13324 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13326 NT_STATUS_OK
Close 13326 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13330 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1005 NT_STATUS_OK
ReadX 13330 1938 24 24 NT_STATUS_OK
ReadX 13330 1920 276 276 NT_STATUS_OK
ReadX 13330 1918 14 14 NT_STATUS_OK
ReadX 13330 1918 7 7 NT_STATUS_OK
ReadX 13330 1919 12 12 NT_STATUS_OK
ReadX 13330 1919 8 8 NT_STATUS_OK
ReadX 13330 1917 15 15 NT_STATUS_OK
ReadX 13330 0 16 16 NT_STATUS_OK
ReadX 13330 16 2048 2048 NT_STATUS_OK
ReadX 13330 2064 2048 2048 NT_STATUS_OK
ReadX 13330 257 2048 2048 NT_STATUS_OK
ReadX 13330 385 2048 2048 NT_STATUS_OK
ReadX 13330 513 2048 2048 NT_STATUS_OK
ReadX 13330 641 2048 2048 NT_STATUS_OK
ReadX 13330 769 2048 2048 NT_STATUS_OK
ReadX 13330 897 2048 2048 NT_STATUS_OK
ReadX 13330 1025 2048 2048 NT_STATUS_OK
ReadX 13330 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13335 NT_STATUS_OK
WriteX 13335 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 11588 11588 NT_STATUS_OK
Flush 13335 NT_STATUS_OK
Close 13335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 4096 4096 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13340 NT_STATUS_OK
WriteX 13340 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13340 258 NT_STATUS_OK
WriteX 13340 0 11615 11615 NT_STATUS_OK
Flush 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13342 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13349 NT_STATUS_OK
WriteX 13349 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13349 258 NT_STATUS_OK
WriteX 13349 0 65536 65536 NT_STATUS_OK
WriteX 13349 65536 16050 16050 NT_STATUS_OK
Close 13349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13329 1939 64 64 NT_STATUS_OK
ReadX 13329 128 248 248 NT_STATUS_OK
ReadX 13329 128 568 568 NT_STATUS_OK
ReadX 13329 3872 1536 1536 NT_STATUS_OK
ReadX 13329 3456 2560 2560 NT_STATUS_OK
ReadX 13329 3136 512 512 NT_STATUS_OK
ReadX 13329 2880 4096 4096 NT_STATUS_OK
ReadX 13329 3264 3072 3072 NT_STATUS_OK
ReadX 13329 320 4096 4096 NT_STATUS_OK
ReadX 13329 1024 4096 4096 NT_STATUS_OK
ReadX 13329 3616 4096 4096 NT_STATUS_OK
ReadX 13329 1939 64 64 NT_STATUS_OK
ReadX 13329 128 248 248 NT_STATUS_OK
ReadX 13329 128 608 608 NT_STATUS_OK
ReadX 13329 2858 1024 1024 NT_STATUS_OK
ReadX 13329 2810 4096 4096 NT_STATUS_OK
ReadX 13329 2826 4096 4096 NT_STATUS_OK
ReadX 13329 2580 2048 2048 NT_STATUS_OK
ReadX 13329 2800 2560 2560 NT_STATUS_OK
ReadX 13329 2100 4096 4096 NT_STATUS_OK
ReadX 13329 2084 4096 4096 NT_STATUS_OK
ReadX 13329 868 4096 4096 NT_STATUS_OK
ReadX 13329 2324 4096 4096 NT_STATUS_OK
ReadX 13329 884 4096 4096 NT_STATUS_OK
ReadX 13329 2604 1024 1024 NT_STATUS_OK
ReadX 13329 580 4096 4096 NT_STATUS_OK
ReadX 13329 596 4096 4096 NT_STATUS_OK
ReadX 13329 2752 4096 4096 NT_STATUS_OK
ReadX 13329 2842 1024 1024 NT_STATUS_OK
ReadX 13329 660 4096 4096 NT_STATUS_OK
ReadX 13329 2720 4096 4096 NT_STATUS_OK
ReadX 13329 2736 4096 4096 NT_STATUS_OK
ReadX 13329 628 4096 4096 NT_STATUS_OK
ReadX 13329 2704 4096 4096 NT_STATUS_OK
ReadX 13329 1556 4096 4096 NT_STATUS_OK
ReadX 13329 576 4096 4096 NT_STATUS_OK
ReadX 13329 3168 1536 1536 NT_STATUS_OK
ReadX 13329 832 4096 4096 NT_STATUS_OK
ReadX 13329 1088 4096 4096 NT_STATUS_OK
ReadX 13329 1344 4096 4096 NT_STATUS_OK
ReadX 13329 1600 4096 4096 NT_STATUS_OK
ReadX 13329 1856 4096 4096 NT_STATUS_OK
ReadX 13329 2112 4096 4096 NT_STATUS_OK
ReadX 13329 1892 4096 4096 NT_STATUS_OK
ReadX 13329 820 4096 4096 NT_STATUS_OK
ReadX 13329 788 4096 4096 NT_STATUS_OK
ReadX 13329 1604 4096 4096 NT_STATUS_OK
ReadX 13329 3648 4096 4096 NT_STATUS_OK
ReadX 13329 2608 4096 4096 NT_STATUS_OK
ReadX 13329 548 4096 4096 NT_STATUS_OK
ReadX 13329 740 4096 4096 NT_STATUS_OK
ReadX 13329 1344 4096 4096 NT_STATUS_OK
ReadX 13329 3392 4096 4096 NT_STATUS_OK
ReadX 13329 3904 4096 4096 NT_STATUS_OK
ReadX 13329 644 4096 4096 NT_STATUS_OK
ReadX 13329 676 4096 4096 NT_STATUS_OK
ReadX 13329 2688 4096 4096 NT_STATUS_OK
ReadX 13329 320 4096 4096 NT_STATUS_OK
ReadX 13329 900 4096 4096 NT_STATUS_OK
ReadX 13329 1908 4096 4096 NT_STATUS_OK
ReadX 13329 852 4096 4096 NT_STATUS_OK
ReadX 13329 724 4096 4096 NT_STATUS_OK
ReadX 13329 2292 4096 4096 NT_STATUS_OK
ReadX 13329 612 4096 4096 NT_STATUS_OK
ReadX 13329 388 4096 4096 NT_STATUS_OK
ReadX 13329 2368 4096 4096 NT_STATUS_OK
ReadX 13329 2624 4096 4096 NT_STATUS_OK
ReadX 13329 500 4096 4096 NT_STATUS_OK
ReadX 13329 356 4096 4096 NT_STATUS_OK
ReadX 13329 1024 4096 4096 NT_STATUS_OK
ReadX 13329 576 4096 4096 NT_STATUS_OK
ReadX 13329 340 4096 4096 NT_STATUS_OK
ReadX 13329 420 4096 4096 NT_STATUS_OK
ReadX 13329 1600 4096 4096 NT_STATUS_OK
ReadX 13329 404 4096 4096 NT_STATUS_OK
ReadX 13329 1428 4096 4096 NT_STATUS_OK
ReadX 13329 2656 4096 4096 NT_STATUS_OK
ReadX 13329 2624 4096 4096 NT_STATUS_OK
ReadX 13329 452 4096 4096 NT_STATUS_OK
ReadX 13329 692 4096 4096 NT_STATUS_OK
ReadX 13329 564 4096 4096 NT_STATUS_OK
ReadX 13329 372 4096 4096 NT_STATUS_OK
ReadX 13329 468 4096 4096 NT_STATUS_OK
ReadX 13329 484 4096 4096 NT_STATUS_OK
ReadX 13329 1088 4096 4096 NT_STATUS_OK
ReadX 13329 1924 4096 4096 NT_STATUS_OK
ReadX 13329 2768 4096 4096 NT_STATUS_OK
ReadX 13329 832 4096 4096 NT_STATUS_OK
ReadX 13329 836 4096 4096 NT_STATUS_OK
ReadX 13329 1856 4096 4096 NT_STATUS_OK
ReadX 13329 2640 4096 4096 NT_STATUS_OK
ReadX 13329 436 4096 4096 NT_STATUS_OK
ReadX 13329 1828 4096 4096 NT_STATUS_OK
ReadX 13329 804 4096 4096 NT_STATUS_OK
ReadX 13329 1860 4096 4096 NT_STATUS_OK
ReadX 13329 1812 4096 4096 NT_STATUS_OK
ReadX 13329 756 4096 4096 NT_STATUS_OK
ReadX 13329 1636 4096 4096 NT_STATUS_OK
ReadX 13329 772 4096 4096 NT_STATUS_OK
ReadX 13329 2036 4096 4096 NT_STATUS_OK
ReadX 13329 1220 4096 4096 NT_STATUS_OK
ReadX 13329 1652 4096 4096 NT_STATUS_OK
ReadX 13329 2588 4096 4096 NT_STATUS_OK
ReadX 13329 916 4096 4096 NT_STATUS_OK
ReadX 13329 260 4096 4096 NT_STATUS_OK
ReadX 13329 932 4096 4096 NT_STATUS_OK
ReadX 13329 2624 4096 4096 NT_STATUS_OK
ReadX 13329 308 4096 4096 NT_STATUS_OK
ReadX 13329 292 4096 4096 NT_STATUS_OK
ReadX 13329 1140 4096 4096 NT_STATUS_OK
ReadX 13329 276 4096 4096 NT_STATUS_OK
ReadX 13329 2020 4096 4096 NT_STATUS_OK
ReadX 13329 2880 4096 4096 NT_STATUS_OK
ReadX 13329 516 4096 4096 NT_STATUS_OK
ReadX 13329 1844 4096 4096 NT_STATUS_OK
ReadX 13329 1124 4096 4096 NT_STATUS_OK
ReadX 13329 3136 4096 4096 NT_STATUS_OK
ReadX 13329 324 4096 4096 NT_STATUS_OK
ReadX 13329 1156 4096 4096 NT_STATUS_OK
ReadX 13329 1172 4096 4096 NT_STATUS_OK
ReadX 13329 2112 4096 4096 NT_STATUS_OK
ReadX 13329 2368 4096 4096 NT_STATUS_OK
ReadX 13329 964 4096 4096 NT_STATUS_OK
ReadX 13329 980 4096 4096 NT_STATUS_OK
ReadX 13329 1012 4096 4096 NT_STATUS_OK
ReadX 13329 532 4096 4096 NT_STATUS_OK
ReadX 13329 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13329 1620 4096 4096 NT_STATUS_OK
ReadX 13329 1604 4096 4096 NT_STATUS_OK
ReadX 13329 2116 4096 4096 NT_STATUS_OK
ReadX 13329 2132 4096 4096 NT_STATUS_OK
ReadX 13329 2148 4096 4096 NT_STATUS_OK
ReadX 13329 2276 4096 4096 NT_STATUS_OK
ReadX 13329 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13351 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13354 NT_STATUS_OK
QUERY_FILE_INFORMATION 13309 1004 NT_STATUS_OK
Close 13309 NT_STATUS_OK
WriteX 13354 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13354 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 1004 NT_STATUS_OK
Close 13311 NT_STATUS_OK
WriteX 13354 0 65536 65536 NT_STATUS_OK
WriteX 13354 65536 64850 64850 NT_STATUS_OK
Close 13354 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13356 NT_STATUS_OK
WriteX 13356 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 258 NT_STATUS_OK
ReadX 13329 2068 4096 4096 NT_STATUS_OK
ReadX 13329 1588 4096 4096 NT_STATUS_OK
ReadX 13329 1572 4096 4096 NT_STATUS_OK
WriteX 13356 0 18630 18630 NT_STATUS_OK
Flush 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13329 612 4096 4096 NT_STATUS_OK
ReadX 13329 564 4096 4096 NT_STATUS_OK
ReadX 13329 1876 4096 4096 NT_STATUS_OK
ReadX 13329 628 4096 4096 NT_STATUS_OK
ReadX 13329 740 4096 4096 NT_STATUS_OK
ReadX 13329 724 4096 4096 NT_STATUS_OK
ReadX 13329 644 4096 4096 NT_STATUS_OK
ReadX 13329 2324 4096 4096 NT_STATUS_OK
ReadX 13329 660 4096 4096 NT_STATUS_OK
ReadX 13329 852 4096 4096 NT_STATUS_OK
ReadX 13329 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13329 2368 4096 4096 NT_STATUS_OK
ReadX 13329 1024 4096 4096 NT_STATUS_OK
ReadX 13329 320 4096 4096 NT_STATUS_OK
ReadX 13329 580 4096 4096 NT_STATUS_OK
ReadX 13329 3136 512 512 NT_STATUS_OK
ReadX 13329 2880 4096 4096 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 61440 4096 4096 NT_STATUS_OK
ReadX 13361 126976 4096 4096 NT_STATUS_OK
WriteX 13361 0 65536 65536 NT_STATUS_OK
WriteX 13361 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 61440 4096 4096 NT_STATUS_OK
ReadX 13362 126976 4096 4096 NT_STATUS_OK
ReadX 13362 192512 4096 4096 NT_STATUS_OK
ReadX 13362 258048 4096 4096 NT_STATUS_OK
WriteX 13362 0 65536 65536 NT_STATUS_OK
WriteX 13362 65536 65536 65536 NT_STATUS_OK
WriteX 13362 131072 65536 65536 NT_STATUS_OK
WriteX 13362 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 61440 4096 4096 NT_STATUS_OK
ReadX 13363 126976 4096 4096 NT_STATUS_OK
ReadX 13363 192512 4096 4096 NT_STATUS_OK
ReadX 13363 258048 4096 4096 NT_STATUS_OK
ReadX 13363 323584 4096 4096 NT_STATUS_OK
ReadX 13363 389120 4096 4096 NT_STATUS_OK
ReadX 13363 454656 4096 4096 NT_STATUS_OK
ReadX 13363 520192 4096 4096 NT_STATUS_OK
WriteX 13363 0 65536 65536 NT_STATUS_OK
WriteX 13363 65536 65536 65536 NT_STATUS_OK
WriteX 13363 131072 65536 65536 NT_STATUS_OK
WriteX 13363 196608 65536 65536 NT_STATUS_OK
WriteX 13363 262144 65536 65536 NT_STATUS_OK
WriteX 13363 327680 65536 65536 NT_STATUS_OK
WriteX 13363 393216 65536 65536 NT_STATUS_OK
WriteX 13363 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13366 NT_STATUS_OK
WriteX 13366 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13366 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13364 0 8192 8192 NT_STATUS_OK
Flush 13364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13364 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13364 0 8192 8192 NT_STATUS_OK
Flush 13364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13364 0 8192 8192 NT_STATUS_OK
Flush 13364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13364 0 8192 8192 NT_STATUS_OK
Flush 13364 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13328 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13371 NT_STATUS_OK
WriteX 13371 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13371 258 NT_STATUS_OK
WriteX 13371 0 62591 62591 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13373 NT_STATUS_OK
Close 13373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
WriteX 13376 0 10845 10845 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13381 NT_STATUS_OK
WriteX 13381 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13381 258 NT_STATUS_OK
WriteX 13381 0 30118 30118 NT_STATUS_OK
Close 13381 NT_STATUS_OK
WriteX 13364 0 4096 4096 NT_STATUS_OK
WriteX 13366 0 64 64 NT_STATUS_OK
Close 13366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 61440 61440 NT_STATUS_OK
ReadX 13383 61440 4096 4096 NT_STATUS_OK
ReadX 13383 65536 61440 61440 NT_STATUS_OK
ReadX 13383 126976 4096 4096 NT_STATUS_OK
ReadX 13383 131072 61440 61440 NT_STATUS_OK
ReadX 13383 192512 4096 4096 NT_STATUS_OK
ReadX 13383 196608 61440 61440 NT_STATUS_OK
ReadX 13383 258048 4096 4096 NT_STATUS_OK
ReadX 13383 262144 61440 61440 NT_STATUS_OK
ReadX 13383 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 61440 61440 NT_STATUS_OK
ReadX 13384 61440 4096 4096 NT_STATUS_OK
ReadX 13384 65536 61440 61440 NT_STATUS_OK
ReadX 13384 126976 4096 4096 NT_STATUS_OK
ReadX 13384 131072 61440 61440 NT_STATUS_OK
ReadX 13384 192512 4096 4096 NT_STATUS_OK
ReadX 13384 196608 61440 61440 NT_STATUS_OK
ReadX 13384 258048 4096 4096 NT_STATUS_OK
ReadX 13384 262144 61440 61440 NT_STATUS_OK
ReadX 13384 323584 4096 4096 NT_STATUS_OK
ReadX 13384 327680 61440 61440 NT_STATUS_OK
ReadX 13384 389120 4096 4096 NT_STATUS_OK
ReadX 13384 393216 61440 61440 NT_STATUS_OK
ReadX 13384 454656 4096 4096 NT_STATUS_OK
ReadX 13384 458752 61440 61440 NT_STATUS_OK
ReadX 13384 520192 4096 4096 NT_STATUS_OK
ReadX 13384 524288 61440 61440 NT_STATUS_OK
ReadX 13384 585728 4096 4096 NT_STATUS_OK
ReadX 13384 589824 61440 61440 NT_STATUS_OK
ReadX 13384 651264 4096 4096 NT_STATUS_OK
ReadX 13384 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 61440 61440 NT_STATUS_OK
ReadX 13385 61440 4096 4096 NT_STATUS_OK
ReadX 13385 65536 61440 61440 NT_STATUS_OK
ReadX 13385 126976 4096 4096 NT_STATUS_OK
ReadX 13385 131072 61440 61440 NT_STATUS_OK
ReadX 13385 192512 4096 4096 NT_STATUS_OK
ReadX 13385 196608 61440 61440 NT_STATUS_OK
ReadX 13385 258048 4096 4096 NT_STATUS_OK
ReadX 13385 262144 61440 61440 NT_STATUS_OK
ReadX 13385 323584 4096 4096 NT_STATUS_OK
ReadX 13385 327680 61440 61440 NT_STATUS_OK
ReadX 13385 389120 4096 4096 NT_STATUS_OK
ReadX 13385 393216 61440 61440 NT_STATUS_OK
ReadX 13385 454656 4096 4096 NT_STATUS_OK
ReadX 13385 458752 61440 61440 NT_STATUS_OK
ReadX 13385 520192 4096 4096 NT_STATUS_OK
ReadX 13385 524288 61440 61440 NT_STATUS_OK
ReadX 13385 585728 4096 4096 NT_STATUS_OK
ReadX 13385 589824 61440 61440 NT_STATUS_OK
ReadX 13385 651264 4096 4096 NT_STATUS_OK
ReadX 13385 655360 61440 61440 NT_STATUS_OK
ReadX 13385 716800 4096 4096 NT_STATUS_OK
ReadX 13385 720896 61440 61440 NT_STATUS_OK
ReadX 13385 782336 4096 4096 NT_STATUS_OK
ReadX 13385 786432 61440 61440 NT_STATUS_OK
ReadX 13385 847872 4096 4096 NT_STATUS_OK
ReadX 13385 851968 61440 61440 NT_STATUS_OK
ReadX 13385 913408 4096 4096 NT_STATUS_OK
ReadX 13385 917504 61440 61440 NT_STATUS_OK
ReadX 13385 978944 4096 4096 NT_STATUS_OK
ReadX 13385 983040 61440 61440 NT_STATUS_OK
ReadX 13385 1044480 4096 4096 NT_STATUS_OK
ReadX 13385 1048576 61440 61440 NT_STATUS_OK
ReadX 13385 1110016 4096 4096 NT_STATUS_OK
ReadX 13385 1114112 61440 61440 NT_STATUS_OK
ReadX 13385 1175552 4096 4096 NT_STATUS_OK
ReadX 13385 1179648 61440 61440 NT_STATUS_OK
ReadX 13385 1241088 4096 4096 NT_STATUS_OK
ReadX 13385 1245184 61440 61440 NT_STATUS_OK
ReadX 13385 1306624 4096 4096 NT_STATUS_OK
ReadX 13385 1310720 61440 61440 NT_STATUS_OK
ReadX 13385 1372160 4096 4096 NT_STATUS_OK
ReadX 13385 1376256 61440 61440 NT_STATUS_OK
ReadX 13385 1437696 4096 4096 NT_STATUS_OK
ReadX 13385 1441792 61440 61440 NT_STATUS_OK
ReadX 13385 1503232 4096 4096 NT_STATUS_OK
ReadX 13385 1507328 61440 61440 NT_STATUS_OK
ReadX 13385 1568768 4096 4096 NT_STATUS_OK
ReadX 13385 1572864 61440 61440 NT_STATUS_OK
ReadX 13385 1634304 4096 4096 NT_STATUS_OK
ReadX 13385 1638400 61440 61440 NT_STATUS_OK
ReadX 13385 1699840 4096 4096 NT_STATUS_OK
ReadX 13385 1703936 61440 61440 NT_STATUS_OK
ReadX 13385 1765376 4096 4096 NT_STATUS_OK
ReadX 13385 1769472 61440 61440 NT_STATUS_OK
ReadX 13385 1830912 4096 4096 NT_STATUS_OK
ReadX 13385 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13386 NT_STATUS_OK
Close 13386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
ReadX 13390 4096 4096 4096 NT_STATUS_OK
ReadX 13390 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13394 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13394 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 8192 8192 NT_STATUS_OK
ReadX 13398 8192 8192 8192 NT_STATUS_OK
ReadX 13398 16384 8192 8192 NT_STATUS_OK
ReadX 13398 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13398 NT_STATUS_OK
Close 13397 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13403 NT_STATUS_OK
WriteX 13403 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 258 NT_STATUS_OK
WriteX 13403 0 10438 10438 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13404 NT_STATUS_OK
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13407 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13409 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13410 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13411 NT_STATUS_OK
Close 13411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
ReadX 13412 4096 4096 4096 NT_STATUS_OK
ReadX 13412 8192 4096 4096 NT_STATUS_OK
ReadX 13412 12288 8192 8192 NT_STATUS_OK
ReadX 13412 20480 8192 8192 NT_STATUS_OK
ReadX 13412 28672 8192 8192 NT_STATUS_OK
ReadX 13412 36864 8192 8192 NT_STATUS_OK
ReadX 13412 45056 8192 8192 NT_STATUS_OK
ReadX 13412 53248 8192 8192 NT_STATUS_OK
ReadX 13412 61440 8192 8192 NT_STATUS_OK
ReadX 13412 69632 8192 8192 NT_STATUS_OK
ReadX 13412 77824 8192 8192 NT_STATUS_OK
ReadX 13412 86016 8192 8192 NT_STATUS_OK
ReadX 13412 94208 8192 8192 NT_STATUS_OK
ReadX 13412 102400 8192 8192 NT_STATUS_OK
ReadX 13412 110592 8192 8192 NT_STATUS_OK
ReadX 13412 118784 8192 8192 NT_STATUS_OK
ReadX 13412 126976 8192 8192 NT_STATUS_OK
ReadX 13412 135168 8192 8192 NT_STATUS_OK
ReadX 13412 143360 8192 8192 NT_STATUS_OK
ReadX 13412 151552 8192 8192 NT_STATUS_OK
ReadX 13412 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Close 13407 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13417 NT_STATUS_OK
WriteX 13417 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13417 258 NT_STATUS_OK
WriteX 13417 0 28489 28489 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13420 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 8192 8192 NT_STATUS_OK
ReadX 13424 8192 8192 8192 NT_STATUS_OK
ReadX 13424 16384 8192 8192 NT_STATUS_OK
ReadX 13424 24576 8192 8192 NT_STATUS_OK
ReadX 13424 32768 16384 16384 NT_STATUS_OK
ReadX 13424 49152 8192 8192 NT_STATUS_OK
ReadX 13424 57344 8192 8192 NT_STATUS_OK
ReadX 13424 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13429 NT_STATUS_OK
WriteX 13429 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13429 258 NT_STATUS_OK
WriteX 13429 0 29253 29253 NT_STATUS_OK
Close 13429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13436 NT_STATUS_OK
WriteX 13436 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13436 258 NT_STATUS_OK
WriteX 13436 0 30183 30183 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13439 NT_STATUS_OK
WriteX 13439 0 510 510 NT_STATUS_OK
WriteX 13439 510 512 512 NT_STATUS_OK
WriteX 13439 1022 510 510 NT_STATUS_OK
WriteX 13439 1532 510 510 NT_STATUS_OK
WriteX 13439 2042 168 168 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
WriteX 13442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 61440 4096 4096 NT_STATUS_OK
ReadX 13443 126976 4096 4096 NT_STATUS_OK
WriteX 13443 0 65536 65536 NT_STATUS_OK
WriteX 13443 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 61440 4096 4096 NT_STATUS_OK
ReadX 13444 126976 4096 4096 NT_STATUS_OK
ReadX 13444 192512 4096 4096 NT_STATUS_OK
ReadX 13444 258048 4096 4096 NT_STATUS_OK
WriteX 13444 0 65536 65536 NT_STATUS_OK
WriteX 13444 65536 65536 65536 NT_STATUS_OK
WriteX 13444 131072 65536 65536 NT_STATUS_OK
WriteX 13444 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 61440 4096 4096 NT_STATUS_OK
ReadX 13445 126976 4096 4096 NT_STATUS_OK
ReadX 13445 192512 4096 4096 NT_STATUS_OK
ReadX 13445 258048 4096 4096 NT_STATUS_OK
ReadX 13445 323584 4096 4096 NT_STATUS_OK
ReadX 13445 389120 4096 4096 NT_STATUS_OK
ReadX 13445 454656 4096 4096 NT_STATUS_OK
ReadX 13445 520192 4096 4096 NT_STATUS_OK
WriteX 13445 0 65536 65536 NT_STATUS_OK
WriteX 13445 65536 65536 65536 NT_STATUS_OK
WriteX 13445 131072 65536 65536 NT_STATUS_OK
WriteX 13445 196608 65536 65536 NT_STATUS_OK
WriteX 13445 262144 65536 65536 NT_STATUS_OK
WriteX 13445 327680 65536 65536 NT_STATUS_OK
WriteX 13445 393216 65536 65536 NT_STATUS_OK
WriteX 13445 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13442 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13452 NT_STATUS_OK
Close 13452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13455 NT_STATUS_OK
Close 13455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13457 NT_STATUS_OK
Close 13457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13464 NT_STATUS_OK
Close 13464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13470 NT_STATUS_OK
Close 13470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13480 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13514 NT_STATUS_OK
WriteX 13514 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13514 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13514 0 65536 65536 NT_STATUS_OK
WriteX 13514 65536 65536 65536 NT_STATUS_OK
WriteX 13514 131072 65536 65536 NT_STATUS_OK
WriteX 13514 196608 65536 65536 NT_STATUS_OK
WriteX 13514 262144 26634 26634 NT_STATUS_OK
Close 13514 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13520 NT_STATUS_OK
Close 13520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 4096 4096 NT_STATUS_OK
ReadX 13522 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13523 NT_STATUS_OK
Close 13523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13527 NT_STATUS_OK
Close 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13532 NT_STATUS_OK
Close 13532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13536 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13539 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13545 NT_STATUS_OK
Close 13545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13574 NT_STATUS_OK
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13587 NT_STATUS_OK
Close 13587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13589 NT_STATUS_OK
Close 13589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
Close 13602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13603 NT_STATUS_OK
ReadX 13603 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
Close 13615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13646 0 4096 4096 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
ReadX 13648 4096 4096 4096 NT_STATUS_OK
ReadX 13648 8192 4096 4096 NT_STATUS_OK
ReadX 13648 12288 4096 4096 NT_STATUS_OK
ReadX 13648 16384 4096 4096 NT_STATUS_OK
ReadX 13648 20480 4096 4096 NT_STATUS_OK
ReadX 13648 24576 4096 4096 NT_STATUS_OK
ReadX 13648 28672 4096 4096 NT_STATUS_OK
ReadX 13648 32768 4096 4096 NT_STATUS_OK
ReadX 13648 36864 4096 4096 NT_STATUS_OK
ReadX 13648 40960 4096 4096 NT_STATUS_OK
ReadX 13648 45056 4096 4096 NT_STATUS_OK
ReadX 13648 49152 4096 4096 NT_STATUS_OK
ReadX 13648 53248 4096 4096 NT_STATUS_OK
ReadX 13648 57344 4096 4096 NT_STATUS_OK
ReadX 13648 61440 4096 4096 NT_STATUS_OK
ReadX 13648 65536 4096 4096 NT_STATUS_OK
ReadX 13648 69632 4096 4096 NT_STATUS_OK
ReadX 13648 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13648 1004 NT_STATUS_OK
WriteX 13648 0 4096 4096 NT_STATUS_OK
Close 13648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13649 NT_STATUS_OK
SET_FILE_INFORMATION 13649 1004 NT_STATUS_OK
Close 13649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13651 NT_STATUS_OK
Close 13651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13654 NT_STATUS_OK
WriteX 13654 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 258 NT_STATUS_OK
WriteX 13654 0 65536 65536 NT_STATUS_OK
WriteX 13654 65536 19979 19979 NT_STATUS_OK
Close 13654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Flush 13655 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Flush 13655 NT_STATUS_OK
QUERY_FILE_INFORMATION 13655 1004 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Flush 13655 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Flush 13655 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Flush 13655 NT_STATUS_OK
SET_FILE_INFORMATION 13655 1004 NT_STATUS_OK
WriteX 13655 0 4096 4096 NT_STATUS_OK
Flush 13655 NT_STATUS_OK
Close 13655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13656 NT_STATUS_OK
ReadX 13656 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 4096 4096 NT_STATUS_OK
Close 13656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
Close 13658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 4096 4096 NT_STATUS_OK
Close 13659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13660 1004 NT_STATUS_OK
WriteX 13660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13661 NT_STATUS_OK
Close 13661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13666 NT_STATUS_OK
WriteX 13666 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
WriteX 13666 0 65536 65536 NT_STATUS_OK
WriteX 13666 65536 17654 17654 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
QUERY_FILE_INFORMATION 13667 1004 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13668 NT_STATUS_OK
SET_FILE_INFORMATION 13668 1004 NT_STATUS_OK
Close 13668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13669 NT_STATUS_OK
ReadX 13669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13670 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13672 NT_STATUS_OK
ReadX 13672 0 4096 4096 NT_STATUS_OK
ReadX 13672 4096 4096 4096 NT_STATUS_OK
ReadX 13672 8192 4096 4096 NT_STATUS_OK
ReadX 13672 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13672 16384 4096 4096 NT_STATUS_OK
ReadX 13672 20480 4096 4096 NT_STATUS_OK
ReadX 13672 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13673 NT_STATUS_OK
ReadX 13673 0 4096 4096 NT_STATUS_OK
Close 13673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
Close 13674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13675 NT_STATUS_OK
ReadX 13675 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13675 1004 NT_STATUS_OK
WriteX 13675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13676 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13681 NT_STATUS_OK
WriteX 13681 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13681 258 NT_STATUS_OK
WriteX 13681 0 65536 65536 NT_STATUS_OK
WriteX 13681 65536 19490 19490 NT_STATUS_OK
Close 13681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 4096 4096 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
Flush 13682 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
Flush 13682 NT_STATUS_OK
QUERY_FILE_INFORMATION 13682 1004 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
Flush 13682 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
Flush 13682 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
Flush 13682 NT_STATUS_OK
SET_FILE_INFORMATION 13682 1004 NT_STATUS_OK
WriteX 13682 0 4096 4096 NT_STATUS_OK
Flush 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13683 NT_STATUS_OK
SET_FILE_INFORMATION 13683 1004 NT_STATUS_OK
Close 13683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13685 NT_STATUS_OK
Close 13685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13687 0 4096 4096 NT_STATUS_OK
Close 13687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13689 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
ReadX 13689 4096 4096 4096 NT_STATUS_OK
ReadX 13689 8192 4096 4096 NT_STATUS_OK
ReadX 13689 12288 4096 4096 NT_STATUS_OK
ReadX 13689 16384 4096 4096 NT_STATUS_OK
ReadX 13689 20480 4096 4096 NT_STATUS_OK
ReadX 13689 24576 4096 4096 NT_STATUS_OK
ReadX 13689 28672 4096 4096 NT_STATUS_OK
ReadX 13689 32768 4096 4096 NT_STATUS_OK
ReadX 13689 36864 4096 4096 NT_STATUS_OK
ReadX 13689 40960 4096 4096 NT_STATUS_OK
ReadX 13689 45056 4096 4096 NT_STATUS_OK
ReadX 13689 49152 4096 4096 NT_STATUS_OK
ReadX 13689 53248 4096 4096 NT_STATUS_OK
ReadX 13689 57344 4096 4096 NT_STATUS_OK
ReadX 13689 61440 4096 4096 NT_STATUS_OK
ReadX 13689 65536 4096 4096 NT_STATUS_OK
ReadX 13689 69632 4096 4096 NT_STATUS_OK
ReadX 13689 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13689 1004 NT_STATUS_OK
WriteX 13689 0 4096 4096 NT_STATUS_OK
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13690 NT_STATUS_OK
SET_FILE_INFORMATION 13690 1004 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13695 NT_STATUS_OK
WriteX 13695 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13695 258 NT_STATUS_OK
WriteX 13695 0 65536 65536 NT_STATUS_OK
WriteX 13695 65536 8866 8866 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
WriteX 13696 0 4096 4096 NT_STATUS_OK
Flush 13696 NT_STATUS_OK
SET_FILE_INFORMATION 13696 1004 NT_STATUS_OK
WriteX 13696 0 4096 4096 NT_STATUS_OK
Flush 13696 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
Close 13698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13699 NT_STATUS_OK
ReadX 13699 0 4096 4096 NT_STATUS_OK
Close 13699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13700 NT_STATUS_OK
ReadX 13700 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13700 1004 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13701 NT_STATUS_OK
Close 13701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13700 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13706 NT_STATUS_OK
WriteX 13706 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13706 258 NT_STATUS_OK
WriteX 13706 0 65536 65536 NT_STATUS_OK
WriteX 13706 65536 9298 9298 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 4096 4096 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
SET_FILE_INFORMATION 13707 1004 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
Close 13707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13708 NT_STATUS_OK
SET_FILE_INFORMATION 13708 1004 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13709 NT_STATUS_OK
ReadX 13709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13713 0 4096 4096 NT_STATUS_OK
Close 13713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13714 4096 4096 4096 NT_STATUS_OK
ReadX 13714 8192 4096 4096 NT_STATUS_OK
ReadX 13714 12288 4096 4096 NT_STATUS_OK
ReadX 13714 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13715 NT_STATUS_OK
ReadX 13715 0 4096 4096 NT_STATUS_OK
Close 13715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 4096 4096 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
Close 13714 NT_STATUS_OK
SET_FILE_INFORMATION 13717 1004 NT_STATUS_OK
WriteX 13717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13718 NT_STATUS_OK
Close 13718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13720 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13723 NT_STATUS_OK
WriteX 13723 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13723 258 NT_STATUS_OK
WriteX 13723 0 65536 65536 NT_STATUS_OK
WriteX 13723 65536 11540 11540 NT_STATUS_OK
Close 13723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
WriteX 13724 0 4096 4096 NT_STATUS_OK
Flush 13724 NT_STATUS_OK
SET_FILE_INFORMATION 13724 1004 NT_STATUS_OK
WriteX 13724 0 4096 4096 NT_STATUS_OK
Flush 13724 NT_STATUS_OK
Close 13724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13725 NT_STATUS_OK
SET_FILE_INFORMATION 13725 1004 NT_STATUS_OK
Close 13725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13727 NT_STATUS_OK
Close 13727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 61440 4096 4096 NT_STATUS_OK
ReadX 13729 126976 4096 4096 NT_STATUS_OK
WriteX 13729 0 65536 65536 NT_STATUS_OK
WriteX 13729 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 61440 4096 4096 NT_STATUS_OK
ReadX 13730 126976 4096 4096 NT_STATUS_OK
ReadX 13730 192512 4096 4096 NT_STATUS_OK
ReadX 13730 258048 4096 4096 NT_STATUS_OK
WriteX 13730 0 65536 65536 NT_STATUS_OK
WriteX 13730 65536 65536 65536 NT_STATUS_OK
WriteX 13730 131072 65536 65536 NT_STATUS_OK
WriteX 13730 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 61440 4096 4096 NT_STATUS_OK
ReadX 13731 126976 4096 4096 NT_STATUS_OK
ReadX 13731 192512 4096 4096 NT_STATUS_OK
ReadX 13731 258048 4096 4096 NT_STATUS_OK
ReadX 13731 323584 4096 4096 NT_STATUS_OK
ReadX 13731 389120 4096 4096 NT_STATUS_OK
ReadX 13731 454656 4096 4096 NT_STATUS_OK
ReadX 13731 520192 4096 4096 NT_STATUS_OK
WriteX 13731 0 65536 65536 NT_STATUS_OK
WriteX 13731 65536 65536 65536 NT_STATUS_OK
WriteX 13731 131072 65536 65536 NT_STATUS_OK
WriteX 13731 196608 65536 65536 NT_STATUS_OK
WriteX 13731 262144 65536 65536 NT_STATUS_OK
WriteX 13731 327680 65536 65536 NT_STATUS_OK
WriteX 13731 393216 65536 65536 NT_STATUS_OK
WriteX 13731 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
ReadX 13732 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13733 NT_STATUS_OK
WriteX 13733 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13733 258 NT_STATUS_OK
WriteX 13733 0 53 53 NT_STATUS_OK
Close 13733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13672 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13732 8192 4096 4096 NT_STATUS_OK
ReadX 13732 12288 4096 4096 NT_STATUS_OK
WriteX 13736 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13736 258 NT_STATUS_OK
ReadX 13732 16384 4096 4096 NT_STATUS_OK
ReadX 13732 20480 4096 4096 NT_STATUS_OK
WriteX 13736 0 15360 15360 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13737 NT_STATUS_OK
ReadX 13737 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13737 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13737 1004 NT_STATUS_OK
WriteX 13737 0 4096 4096 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13740 4096 4096 4096 NT_STATUS_OK
ReadX 13740 8192 4096 4096 NT_STATUS_OK
ReadX 13740 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
ReadX 13743 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
ReadX 13744 4096 4096 4096 NT_STATUS_OK
ReadX 13744 8192 4096 4096 NT_STATUS_OK
Close 13743 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13745 NT_STATUS_OK
WriteX 13745 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13745 258 NT_STATUS_OK
WriteX 13745 0 15360 15360 NT_STATUS_OK
Close 13745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13746 NT_STATUS_OK
ReadX 13746 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13746 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13746 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13749 NT_STATUS_OK
ReadX 13749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13750 NT_STATUS_OK
SET_FILE_INFORMATION 13750 1004 NT_STATUS_OK
Close 13750 NT_STATUS_OK
WriteX 13746 0 4096 4096 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13751 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
ReadX 13753 4096 4096 4096 NT_STATUS_OK
ReadX 13753 8192 4096 4096 NT_STATUS_OK
ReadX 13753 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13755 NT_STATUS_OK
WriteX 13755 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13755 258 NT_STATUS_OK
WriteX 13755 0 53 53 NT_STATUS_OK
Close 13755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13754 4096 4096 4096 NT_STATUS_OK
ReadX 13754 8192 4096 4096 NT_STATUS_OK
ReadX 13754 12288 4096 4096 NT_STATUS_OK
WriteX 13758 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 258 NT_STATUS_OK
WriteX 13758 0 12006 12006 NT_STATUS_OK
Close 13758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13759 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13759 1004 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13762 4096 4096 4096 NT_STATUS_OK
ReadX 13762 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13765 NT_STATUS_OK
WriteX 13765 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 258 NT_STATUS_OK
WriteX 13765 0 11991 11991 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13766 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13766 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13770 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
Close 13770 NT_STATUS_OK
WriteX 13766 0 4096 4096 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13773 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13773 1004 NT_STATUS_OK
ReadX 13773 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13773 1004 NT_STATUS_OK
WriteX 13773 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13773 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13773 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13773 1004 NT_STATUS_OK
Close 13749 NT_STATUS_OK
WriteX 13753 0 19054 19054 NT_STATUS_OK
WriteX 13773 0 12288 12288 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13778 NT_STATUS_OK
Close 13778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 61440 61440 NT_STATUS_OK
ReadX 13780 61440 4096 4096 NT_STATUS_OK
ReadX 13780 65536 61440 61440 NT_STATUS_OK
ReadX 13780 126976 4096 4096 NT_STATUS_OK
ReadX 13780 131072 61440 61440 NT_STATUS_OK
ReadX 13780 192512 4096 4096 NT_STATUS_OK
ReadX 13780 196608 61440 61440 NT_STATUS_OK
ReadX 13780 258048 4096 4096 NT_STATUS_OK
ReadX 13780 262144 61440 61440 NT_STATUS_OK
ReadX 13780 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 61440 61440 NT_STATUS_OK
ReadX 13781 61440 4096 4096 NT_STATUS_OK
ReadX 13781 65536 61440 61440 NT_STATUS_OK
ReadX 13781 126976 4096 4096 NT_STATUS_OK
ReadX 13781 131072 61440 61440 NT_STATUS_OK
ReadX 13781 192512 4096 4096 NT_STATUS_OK
ReadX 13781 196608 61440 61440 NT_STATUS_OK
ReadX 13781 258048 4096 4096 NT_STATUS_OK
ReadX 13781 262144 61440 61440 NT_STATUS_OK
ReadX 13781 323584 4096 4096 NT_STATUS_OK
ReadX 13781 327680 61440 61440 NT_STATUS_OK
ReadX 13781 389120 4096 4096 NT_STATUS_OK
ReadX 13781 393216 61440 61440 NT_STATUS_OK
ReadX 13781 454656 4096 4096 NT_STATUS_OK
ReadX 13781 458752 61440 61440 NT_STATUS_OK
ReadX 13781 520192 4096 4096 NT_STATUS_OK
ReadX 13781 524288 61440 61440 NT_STATUS_OK
ReadX 13781 585728 4096 4096 NT_STATUS_OK
ReadX 13781 589824 61440 61440 NT_STATUS_OK
ReadX 13781 651264 4096 4096 NT_STATUS_OK
ReadX 13781 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 61440 61440 NT_STATUS_OK
ReadX 13782 61440 4096 4096 NT_STATUS_OK
ReadX 13782 65536 61440 61440 NT_STATUS_OK
ReadX 13782 126976 4096 4096 NT_STATUS_OK
ReadX 13782 131072 61440 61440 NT_STATUS_OK
ReadX 13782 192512 4096 4096 NT_STATUS_OK
ReadX 13782 196608 61440 61440 NT_STATUS_OK
ReadX 13782 258048 4096 4096 NT_STATUS_OK
ReadX 13782 262144 61440 61440 NT_STATUS_OK
ReadX 13782 323584 4096 4096 NT_STATUS_OK
ReadX 13782 327680 61440 61440 NT_STATUS_OK
ReadX 13782 389120 4096 4096 NT_STATUS_OK
ReadX 13782 393216 61440 61440 NT_STATUS_OK
ReadX 13782 454656 4096 4096 NT_STATUS_OK
ReadX 13782 458752 61440 61440 NT_STATUS_OK
ReadX 13782 520192 4096 4096 NT_STATUS_OK
ReadX 13782 524288 61440 61440 NT_STATUS_OK
ReadX 13782 585728 4096 4096 NT_STATUS_OK
ReadX 13782 589824 61440 61440 NT_STATUS_OK
ReadX 13782 651264 4096 4096 NT_STATUS_OK
ReadX 13782 655360 61440 61440 NT_STATUS_OK
ReadX 13782 716800 4096 4096 NT_STATUS_OK
ReadX 13782 720896 61440 61440 NT_STATUS_OK
ReadX 13782 782336 4096 4096 NT_STATUS_OK
ReadX 13782 786432 61440 61440 NT_STATUS_OK
ReadX 13782 847872 4096 4096 NT_STATUS_OK
ReadX 13782 851968 61440 61440 NT_STATUS_OK
ReadX 13782 913408 4096 4096 NT_STATUS_OK
ReadX 13782 917504 61440 61440 NT_STATUS_OK
ReadX 13782 978944 4096 4096 NT_STATUS_OK
ReadX 13782 983040 61440 61440 NT_STATUS_OK
ReadX 13782 1044480 4096 4096 NT_STATUS_OK
ReadX 13782 1048576 61440 61440 NT_STATUS_OK
ReadX 13782 1110016 4096 4096 NT_STATUS_OK
ReadX 13782 1114112 61440 61440 NT_STATUS_OK
ReadX 13782 1175552 4096 4096 NT_STATUS_OK
ReadX 13782 1179648 61440 61440 NT_STATUS_OK
ReadX 13782 1241088 4096 4096 NT_STATUS_OK
ReadX 13782 1245184 61440 61440 NT_STATUS_OK
ReadX 13782 1306624 4096 4096 NT_STATUS_OK
ReadX 13782 1310720 61440 61440 NT_STATUS_OK
ReadX 13782 1372160 4096 4096 NT_STATUS_OK
ReadX 13782 1376256 61440 61440 NT_STATUS_OK
ReadX 13782 1437696 4096 4096 NT_STATUS_OK
ReadX 13782 1441792 61440 61440 NT_STATUS_OK
ReadX 13782 1503232 4096 4096 NT_STATUS_OK
ReadX 13782 1507328 61440 61440 NT_STATUS_OK
ReadX 13782 1568768 4096 4096 NT_STATUS_OK
ReadX 13782 1572864 61440 61440 NT_STATUS_OK
ReadX 13782 1634304 4096 4096 NT_STATUS_OK
ReadX 13782 1638400 61440 61440 NT_STATUS_OK
ReadX 13782 1699840 4096 4096 NT_STATUS_OK
ReadX 13782 1703936 61440 61440 NT_STATUS_OK
ReadX 13782 1765376 4096 4096 NT_STATUS_OK
ReadX 13782 1769472 61440 61440 NT_STATUS_OK
ReadX 13782 1830912 4096 4096 NT_STATUS_OK
ReadX 13782 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13789 NT_STATUS_OK
QUERY_FILE_INFORMATION 13789 1004 NT_STATUS_OK
WriteX 13789 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13789 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13790 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13791 NT_STATUS_OK
WriteX 13791 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13791 258 NT_STATUS_OK
WriteX 13791 0 491 491 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13789 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13794 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13795 NT_STATUS_OK
WriteX 13795 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 258 NT_STATUS_OK
WriteX 13795 0 543 543 NT_STATUS_OK
Close 13795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13796 NT_STATUS_OK
ReadX 13796 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Close 13796 NT_STATUS_OK
Close 13784 NT_STATUS_OK
Close 13785 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13809 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 1004 NT_STATUS_OK
WriteX 13809 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 258 NT_STATUS_OK
WriteX 13809 0 2048 2048 NT_STATUS_OK
Close 13809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
Flush 13810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13814 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13815 NT_STATUS_OK
WriteX 13815 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 258 NT_STATUS_OK
WriteX 13815 0 2048 2048 NT_STATUS_OK
Close 13815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13816 NT_STATUS_OK
ReadX 13816 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13821 NT_STATUS_OK
WriteX 13821 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13821 258 NT_STATUS_OK
WriteX 13821 0 2048 2048 NT_STATUS_OK
Close 13821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13822 NT_STATUS_OK
ReadX 13822 0 2048 2048 NT_STATUS_OK
ReadX 13800 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13816 0 4096 4096 NT_STATUS_OK
WriteX 13800 0 8192 8192 NT_STATUS_OK
WriteX 13801 0 4096 4096 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
ReadX 13816 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13826 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13803 NT_STATUS_OK
Close 13816 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13836 NT_STATUS_OK
ReadX 13836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13845 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13846 NT_STATUS_OK
QUERY_FILE_INFORMATION 13846 1004 NT_STATUS_OK
WriteX 13846 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13846 258 NT_STATUS_OK
WriteX 13846 0 2048 2048 NT_STATUS_OK
Close 13846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13854 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 1004 NT_STATUS_OK
WriteX 13854 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 258 NT_STATUS_OK
WriteX 13854 0 2048 2048 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13847 0 4096 4096 NT_STATUS_OK
Flush 13847 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13847 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13849 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13857 NT_STATUS_OK
WriteX 13857 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13857 258 NT_STATUS_OK
WriteX 13857 0 4096 4096 NT_STATUS_OK
Close 13857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13858 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13859 NT_STATUS_OK
Close 13859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13860 NT_STATUS_OK
WriteX 13860 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 4096 4096 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13861 0 4096 4096 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Close 13835 NT_STATUS_OK
Close 13849 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Close 13836 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13834 NT_STATUS_OK
Close 13831 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13864 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13867 NT_STATUS_OK
Close 13867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13868 NT_STATUS_OK
WriteX 13868 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
WriteX 13868 0 2048 2048 NT_STATUS_OK
Close 13868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13871 NT_STATUS_OK
ReadX 13871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13874 NT_STATUS_OK
ReadX 13874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13883 NT_STATUS_OK
QUERY_FILE_INFORMATION 13883 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Close 13869 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Close 13870 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Close 13874 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13885 NT_STATUS_OK
QUERY_FILE_INFORMATION 13885 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13898 NT_STATUS_OK
ReadX 13898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13900 NT_STATUS_OK
ReadX 13900 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13905 NT_STATUS_OK
QUERY_FILE_INFORMATION 13905 1004 NT_STATUS_OK
WriteX 13905 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13905 258 NT_STATUS_OK
WriteX 13905 0 2048 2048 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13909 NT_STATUS_OK
ReadX 13909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13912 NT_STATUS_OK
ReadX 13912 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13917 NT_STATUS_OK
QUERY_FILE_INFORMATION 13917 1004 NT_STATUS_OK
WriteX 13917 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13917 258 NT_STATUS_OK
WriteX 13917 0 2048 2048 NT_STATUS_OK
Close 13917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13918 NT_STATUS_OK
ReadX 13918 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13920 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13925 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 1004 NT_STATUS_OK
WriteX 13925 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 258 NT_STATUS_OK
WriteX 13925 0 2048 2048 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
Flush 13906 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13926 0 4096 4096 NT_STATUS_OK
Flush 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13926 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13908 4096 16384 16384 NT_STATUS_OK
ReadX 13888 4096 16384 16384 NT_STATUS_OK
ReadX 13920 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 2048 2048 NT_STATUS_OK
WriteX 13928 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13929 NT_STATUS_OK
QUERY_FILE_INFORMATION 13929 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13912 NT_STATUS_OK
Close 13900 NT_STATUS_OK
Close 13892 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Close 13910 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13894 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Close 13895 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13931 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13933 NT_STATUS_OK
QUERY_FILE_INFORMATION 13933 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13936 4096 16384 16384 NT_STATUS_OK
WriteX 13936 0 4096 4096 NT_STATUS_OK
WriteX 13937 0 4096 4096 NT_STATUS_OK
WriteX 13938 0 4096 4096 NT_STATUS_OK
WriteX 13939 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13947 NT_STATUS_OK
ReadX 13947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13948 NT_STATUS_OK
ReadX 13948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13952 NT_STATUS_OK
ReadX 13952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 8192 8192 NT_STATUS_OK
ReadX 13942 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13956 0 4096 4096 NT_STATUS_OK
ReadX 13956 4096 4096 4096 NT_STATUS_OK
ReadX 13956 8192 4096 4096 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13957 0 4096 4096 NT_STATUS_OK
ReadX 13957 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13936 0 4096 4096 NT_STATUS_OK
WriteX 13937 0 4096 4096 NT_STATUS_OK
WriteX 13938 0 4096 4096 NT_STATUS_OK
WriteX 13939 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13962 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 1004 NT_STATUS_OK
WriteX 13962 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 258 NT_STATUS_OK
WriteX 13962 0 2048 2048 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13963 NT_STATUS_OK
ReadX 13963 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13963 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13963 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
ReadX 13965 4096 4096 4096 NT_STATUS_OK
WriteX 13965 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13963 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13966 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 0 4096 4096 NT_STATUS_OK
ReadX 13967 4096 4096 4096 NT_STATUS_OK
WriteX 13967 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13968 NT_STATUS_OK
QUERY_FILE_INFORMATION 13968 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13955 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13938 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13948 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13949 NT_STATUS_OK
Close 13950 NT_STATUS_OK
Close 13951 NT_STATUS_OK
Close 13952 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Close 13956 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13970 0 4096 4096 NT_STATUS_OK
ReadX 13970 4096 4096 4096 NT_STATUS_OK
ReadX 13970 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13978 NT_STATUS_OK
ReadX 13978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
ReadX 13971 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13988 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 1004 NT_STATUS_OK
WriteX 13988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 2048 2048 NT_STATUS_OK
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13994 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1004 NT_STATUS_OK
WriteX 13994 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 258 NT_STATUS_OK
WriteX 13994 0 2048 2048 NT_STATUS_OK
Close 13994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13978 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13996 NT_STATUS_OK
QUERY_FILE_INFORMATION 13996 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13998 NT_STATUS_OK
QUERY_FILE_INFORMATION 13998 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 61440 4096 4096 NT_STATUS_OK
ReadX 14000 126976 4096 4096 NT_STATUS_OK
WriteX 14000 0 65536 65536 NT_STATUS_OK
WriteX 14000 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 61440 4096 4096 NT_STATUS_OK
ReadX 14001 126976 4096 4096 NT_STATUS_OK
ReadX 14001 192512 4096 4096 NT_STATUS_OK
ReadX 14001 258048 4096 4096 NT_STATUS_OK
WriteX 14001 0 65536 65536 NT_STATUS_OK
WriteX 14001 65536 65536 65536 NT_STATUS_OK
WriteX 14001 131072 65536 65536 NT_STATUS_OK
WriteX 14001 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 61440 4096 4096 NT_STATUS_OK
ReadX 14002 126976 4096 4096 NT_STATUS_OK
ReadX 14002 192512 4096 4096 NT_STATUS_OK
ReadX 14002 258048 4096 4096 NT_STATUS_OK
ReadX 14002 323584 4096 4096 NT_STATUS_OK
ReadX 14002 389120 4096 4096 NT_STATUS_OK
ReadX 14002 454656 4096 4096 NT_STATUS_OK
ReadX 14002 520192 4096 4096 NT_STATUS_OK
WriteX 14002 0 65536 65536 NT_STATUS_OK
WriteX 14002 65536 65536 65536 NT_STATUS_OK
WriteX 14002 131072 65536 65536 NT_STATUS_OK
WriteX 14002 196608 65536 65536 NT_STATUS_OK
WriteX 14002 262144 65536 65536 NT_STATUS_OK
WriteX 14002 327680 65536 65536 NT_STATUS_OK
WriteX 14002 393216 65536 65536 NT_STATUS_OK
WriteX 14002 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14003 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14003 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14003 8192 4096 4096 NT_STATUS_OK
ReadX 14003 12288 4096 4096 NT_STATUS_OK
ReadX 14003 16384 4096 4096 NT_STATUS_OK
ReadX 14003 20480 4096 4096 NT_STATUS_OK
ReadX 14003 24576 4096 4096 NT_STATUS_OK
ReadX 14003 28672 4096 4096 NT_STATUS_OK
ReadX 14003 32768 4096 4096 NT_STATUS_OK
ReadX 14003 36864 4096 4096 NT_STATUS_OK
ReadX 14003 40960 4096 4096 NT_STATUS_OK
ReadX 14003 45056 4096 4096 NT_STATUS_OK
ReadX 14003 49152 4096 4096 NT_STATUS_OK
ReadX 14003 53248 4096 4096 NT_STATUS_OK
ReadX 14003 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14003 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 14001 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 14006 NT_STATUS_OK
WriteX 14006 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14006 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14006 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14006 1004 NT_STATUS_OK
WriteX 14006 0 57088 57088 NT_STATUS_OK
WriteX 14006 0 4096 4096 NT_STATUS_OK
Flush 14006 NT_STATUS_OK
Close 14003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 14007 NT_STATUS_OK
SET_FILE_INFORMATION 14007 1004 NT_STATUS_OK
Close 14007 NT_STATUS_OK
SET_FILE_INFORMATION 14006 1004 NT_STATUS_OK
WriteX 14006 0 4096 4096 NT_STATUS_OK
Close 14006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 14008 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14010 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 14011 NT_STATUS_OK
WriteX 14011 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14011 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14011 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14011 1004 NT_STATUS_OK
WriteX 14011 0 51456 51456 NT_STATUS_OK
WriteX 14011 0 4096 4096 NT_STATUS_OK
Flush 14011 NT_STATUS_OK
SET_FILE_INFORMATION 14011 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14011 1004 NT_STATUS_OK
WriteX 14011 0 4096 4096 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 14013 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14015 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 14017 NT_STATUS_OK
Close 14017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 14020 NT_STATUS_OK
WriteX 14020 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
WriteX 14020 0 53077 53077 NT_STATUS_OK
Close 14020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 14021 NT_STATUS_OK
WriteX 14021 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14021 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14021 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14021 1004 NT_STATUS_OK
WriteX 14021 0 65536 65536 NT_STATUS_OK
WriteX 14021 65536 1856 1856 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
Flush 14021 NT_STATUS_OK
SET_FILE_INFORMATION 14021 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14021 1004 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 14027 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 14030 NT_STATUS_OK
WriteX 14030 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14030 258 NT_STATUS_OK
WriteX 14030 0 7983 7983 NT_STATUS_OK
Close 14030 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 14035 NT_STATUS_OK
WriteX 14035 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 258 NT_STATUS_OK
WriteX 14035 0 65536 65536 NT_STATUS_OK
WriteX 14035 65536 65536 65536 NT_STATUS_OK
WriteX 14035 131072 65536 65536 NT_STATUS_OK
WriteX 14035 196608 65536 65536 NT_STATUS_OK
WriteX 14035 262144 65536 65536 NT_STATUS_OK
WriteX 14035 327680 65536 65536 NT_STATUS_OK
WriteX 14035 393216 65536 65536 NT_STATUS_OK
WriteX 14035 458752 46731 46731 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 14036 NT_STATUS_OK
WriteX 14036 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14036 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14025 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 14036 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14036 1004 NT_STATUS_OK
WriteX 14036 0 65536 65536 NT_STATUS_OK
WriteX 14036 65536 22848 22848 NT_STATUS_OK
WriteX 14036 0 4096 4096 NT_STATUS_OK
Flush 14036 NT_STATUS_OK
SET_FILE_INFORMATION 14036 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14036 1004 NT_STATUS_OK
WriteX 14036 0 4096 4096 NT_STATUS_OK
Close 14036 NT_STATUS_OK
Close 14025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 14038 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14040 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14041 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14041 1004 NT_STATUS_OK
ReadX 14041 8192 4096 4096 NT_STATUS_OK
ReadX 14041 12288 4096 4096 NT_STATUS_OK
ReadX 14041 16384 4096 4096 NT_STATUS_OK
ReadX 14041 20480 4096 4096 NT_STATUS_OK
ReadX 14041 24576 4096 4096 NT_STATUS_OK
ReadX 14041 28672 4096 4096 NT_STATUS_OK
ReadX 14041 32768 4096 4096 NT_STATUS_OK
ReadX 14041 36864 4096 4096 NT_STATUS_OK
ReadX 14041 40960 4096 4096 NT_STATUS_OK
ReadX 14041 45056 4096 4096 NT_STATUS_OK
ReadX 14041 49152 4096 4096 NT_STATUS_OK
ReadX 14041 53248 4096 4096 NT_STATUS_OK
ReadX 14041 57344 4096 4096 NT_STATUS_OK
ReadX 14041 61440 4096 4096 NT_STATUS_OK
ReadX 14041 65536 4096 4096 NT_STATUS_OK
ReadX 14041 69632 4096 4096 NT_STATUS_OK
ReadX 14041 73728 4096 4096 NT_STATUS_OK
ReadX 14041 77824 4096 4096 NT_STATUS_OK
ReadX 14041 81920 4096 4096 NT_STATUS_OK
ReadX 14041 86016 4096 4096 NT_STATUS_OK
ReadX 14041 90112 4096 4096 NT_STATUS_OK
ReadX 14041 94208 4096 4096 NT_STATUS_OK
ReadX 14041 98304 4096 4096 NT_STATUS_OK
ReadX 14041 102400 4096 4096 NT_STATUS_OK
ReadX 14041 106496 4096 4096 NT_STATUS_OK
ReadX 14041 110592 4096 4096 NT_STATUS_OK
ReadX 14041 114688 4096 4096 NT_STATUS_OK
ReadX 14041 118784 4096 4096 NT_STATUS_OK
ReadX 14041 122880 4096 4096 NT_STATUS_OK
ReadX 14041 126976 4096 4096 NT_STATUS_OK
ReadX 14041 131072 4096 4096 NT_STATUS_OK
ReadX 14041 135168 4096 4096 NT_STATUS_OK
ReadX 14041 139264 4096 4096 NT_STATUS_OK
ReadX 14041 143360 4096 4096 NT_STATUS_OK
ReadX 14041 147456 4096 4096 NT_STATUS_OK
ReadX 14041 151552 4096 4096 NT_STATUS_OK
ReadX 14041 155648 4096 4096 NT_STATUS_OK
ReadX 14041 159744 4096 4096 NT_STATUS_OK
ReadX 14041 163840 4096 4096 NT_STATUS_OK
ReadX 14041 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14041 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 14042 NT_STATUS_OK
Close 14042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 14044 NT_STATUS_OK
WriteX 14044 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14044 258 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 14045 NT_STATUS_OK
SET_FILE_INFORMATION 14045 1004 NT_STATUS_OK
Close 14045 NT_STATUS_OK
WriteX 14044 0 42388 42388 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
ReadX 14048 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 14049 NT_STATUS_OK
WriteX 14049 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14049 258 NT_STATUS_OK
SET_FILE_INFORMATION 14049 1004 NT_STATUS_OK
WriteX 14049 0 42652 42652 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 14051 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
ReadX 14053 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 14055 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 14058 NT_STATUS_OK
WriteX 14058 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14058 258 NT_STATUS_OK
WriteX 14058 0 65536 65536 NT_STATUS_OK
WriteX 14058 65536 49 49 NT_STATUS_OK
Close 14058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 61440 61440 NT_STATUS_OK
ReadX 14059 61440 4096 4096 NT_STATUS_OK
ReadX 14059 65536 61440 61440 NT_STATUS_OK
ReadX 14059 126976 4096 4096 NT_STATUS_OK
ReadX 14059 131072 61440 61440 NT_STATUS_OK
ReadX 14059 192512 4096 4096 NT_STATUS_OK
ReadX 14059 196608 61440 61440 NT_STATUS_OK
ReadX 14059 258048 4096 4096 NT_STATUS_OK
ReadX 14059 262144 61440 61440 NT_STATUS_OK
ReadX 14059 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 61440 61440 NT_STATUS_OK
ReadX 14060 61440 4096 4096 NT_STATUS_OK
ReadX 14060 65536 61440 61440 NT_STATUS_OK
ReadX 14060 126976 4096 4096 NT_STATUS_OK
ReadX 14060 131072 61440 61440 NT_STATUS_OK
ReadX 14060 192512 4096 4096 NT_STATUS_OK
ReadX 14060 196608 61440 61440 NT_STATUS_OK
ReadX 14060 258048 4096 4096 NT_STATUS_OK
ReadX 14060 262144 61440 61440 NT_STATUS_OK
ReadX 14060 323584 4096 4096 NT_STATUS_OK
ReadX 14060 327680 61440 61440 NT_STATUS_OK
ReadX 14060 389120 4096 4096 NT_STATUS_OK
ReadX 14060 393216 61440 61440 NT_STATUS_OK
ReadX 14060 454656 4096 4096 NT_STATUS_OK
ReadX 14060 458752 61440 61440 NT_STATUS_OK
ReadX 14060 520192 4096 4096 NT_STATUS_OK
ReadX 14060 524288 61440 61440 NT_STATUS_OK
ReadX 14060 585728 4096 4096 NT_STATUS_OK
ReadX 14060 589824 61440 61440 NT_STATUS_OK
ReadX 14060 651264 4096 4096 NT_STATUS_OK
ReadX 14060 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 61440 61440 NT_STATUS_OK
ReadX 14061 61440 4096 4096 NT_STATUS_OK
ReadX 14061 65536 61440 61440 NT_STATUS_OK
ReadX 14061 126976 4096 4096 NT_STATUS_OK
ReadX 14061 131072 61440 61440 NT_STATUS_OK
ReadX 14061 192512 4096 4096 NT_STATUS_OK
ReadX 14061 196608 61440 61440 NT_STATUS_OK
ReadX 14061 258048 4096 4096 NT_STATUS_OK
ReadX 14061 262144 61440 61440 NT_STATUS_OK
ReadX 14061 323584 4096 4096 NT_STATUS_OK
ReadX 14061 327680 61440 61440 NT_STATUS_OK
ReadX 14061 389120 4096 4096 NT_STATUS_OK
ReadX 14061 393216 61440 61440 NT_STATUS_OK
ReadX 14061 454656 4096 4096 NT_STATUS_OK
ReadX 14061 458752 61440 61440 NT_STATUS_OK
ReadX 14061 520192 4096 4096 NT_STATUS_OK
ReadX 14061 524288 61440 61440 NT_STATUS_OK
ReadX 14061 585728 4096 4096 NT_STATUS_OK
ReadX 14061 589824 61440 61440 NT_STATUS_OK
ReadX 14061 651264 4096 4096 NT_STATUS_OK
ReadX 14061 655360 61440 61440 NT_STATUS_OK
ReadX 14061 716800 4096 4096 NT_STATUS_OK
ReadX 14061 720896 61440 61440 NT_STATUS_OK
ReadX 14061 782336 4096 4096 NT_STATUS_OK
ReadX 14061 786432 61440 61440 NT_STATUS_OK
ReadX 14061 847872 4096 4096 NT_STATUS_OK
ReadX 14061 851968 61440 61440 NT_STATUS_OK
ReadX 14061 913408 4096 4096 NT_STATUS_OK
ReadX 14061 917504 61440 61440 NT_STATUS_OK
ReadX 14061 978944 4096 4096 NT_STATUS_OK
ReadX 14061 983040 61440 61440 NT_STATUS_OK
ReadX 14061 1044480 4096 4096 NT_STATUS_OK
ReadX 14061 1048576 61440 61440 NT_STATUS_OK
ReadX 14061 1110016 4096 4096 NT_STATUS_OK
ReadX 14061 1114112 61440 61440 NT_STATUS_OK
ReadX 14061 1175552 4096 4096 NT_STATUS_OK
ReadX 14061 1179648 61440 61440 NT_STATUS_OK
ReadX 14061 1241088 4096 4096 NT_STATUS_OK
ReadX 14061 1245184 61440 61440 NT_STATUS_OK
ReadX 14061 1306624 4096 4096 NT_STATUS_OK
ReadX 14061 1310720 61440 61440 NT_STATUS_OK
ReadX 14061 1372160 4096 4096 NT_STATUS_OK
ReadX 14061 1376256 61440 61440 NT_STATUS_OK
ReadX 14061 1437696 4096 4096 NT_STATUS_OK
ReadX 14061 1441792 61440 61440 NT_STATUS_OK
ReadX 14061 1503232 4096 4096 NT_STATUS_OK
ReadX 14061 1507328 61440 61440 NT_STATUS_OK
ReadX 14061 1568768 4096 4096 NT_STATUS_OK
ReadX 14061 1572864 61440 61440 NT_STATUS_OK
ReadX 14061 1634304 4096 4096 NT_STATUS_OK
ReadX 14061 1638400 61440 61440 NT_STATUS_OK
ReadX 14061 1699840 4096 4096 NT_STATUS_OK
ReadX 14061 1703936 61440 61440 NT_STATUS_OK
ReadX 14061 1765376 4096 4096 NT_STATUS_OK
ReadX 14061 1769472 61440 61440 NT_STATUS_OK
ReadX 14061 1830912 4096 4096 NT_STATUS_OK
ReadX 14061 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 14062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 14063 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 1005 NT_STATUS_OK
ReadX 14063 2156 24 24 NT_STATUS_OK
ReadX 14063 2139 276 276 NT_STATUS_OK
ReadX 14063 2136 14 14 NT_STATUS_OK
ReadX 14063 2136 7 7 NT_STATUS_OK
ReadX 14063 2138 12 12 NT_STATUS_OK
ReadX 14063 2137 8 8 NT_STATUS_OK
ReadX 14063 2135 15 15 NT_STATUS_OK
ReadX 14063 0 16 16 NT_STATUS_OK
ReadX 14063 16 2048 2048 NT_STATUS_OK
ReadX 14063 2064 2048 2048 NT_STATUS_OK
ReadX 14063 257 2048 2048 NT_STATUS_OK
ReadX 14063 385 2048 2048 NT_STATUS_OK
ReadX 14063 513 2048 2048 NT_STATUS_OK
ReadX 14063 641 2048 2048 NT_STATUS_OK
ReadX 14063 769 2048 2048 NT_STATUS_OK
ReadX 14063 897 2048 2048 NT_STATUS_OK
ReadX 14063 1025 2048 2048 NT_STATUS_OK
ReadX 14063 1153 2048 2048 NT_STATUS_OK
ReadX 14063 1281 2048 2048 NT_STATUS_OK
ReadX 14063 1409 2048 2048 NT_STATUS_OK
ReadX 14063 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 14065 NT_STATUS_OK
Close 14065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14068 NT_STATUS_OK
WriteX 14068 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14068 258 NT_STATUS_OK
WriteX 14068 0 10575 10575 NT_STATUS_OK
Flush 14068 NT_STATUS_OK
Close 14068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
Close 14063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14073 NT_STATUS_OK
LockX 14073 2147483538 1 NT_STATUS_OK
UnlockX 14073 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14073 1005 NT_STATUS_OK
ReadX 14073 0 512 512 NT_STATUS_OK
ReadX 14073 512 512 512 NT_STATUS_OK
ReadX 14073 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 14073 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14073 1004 NT_STATUS_OK
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14074 NT_STATUS_OK
QUERY_FILE_INFORMATION 14074 1005 NT_STATUS_OK
ReadX 14074 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 14075 NT_STATUS_OK
LockX 14075 2147483538 1 NT_STATUS_OK
UnlockX 14075 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14075 1005 NT_STATUS_OK
ReadX 14075 0 512 512 NT_STATUS_OK
ReadX 14075 512 512 512 NT_STATUS_OK
ReadX 14075 1024 512 512 NT_STATUS_OK
ReadX 14075 288 20 20 NT_STATUS_OK
ReadX 14075 308 2084 2084 NT_STATUS_OK
ReadX 14075 388 2084 2084 NT_STATUS_OK
ReadX 14075 388 2084 2084 NT_STATUS_OK
ReadX 14062 2157 1386 1386 NT_STATUS_OK
ReadX 14075 2472 399 399 NT_STATUS_OK
ReadX 14075 3072 1536 1536 NT_STATUS_OK
ReadX 14075 544 149 149 NT_STATUS_OK
ReadX 14075 693 485 485 NT_STATUS_OK
Close 14075 NT_STATUS_OK
ReadX 14062 2157 4096 4096 NT_STATUS_OK
ReadX 14062 6253 4096 4096 NT_STATUS_OK
ReadX 14062 10349 4096 4096 NT_STATUS_OK
ReadX 14062 14445 4096 4096 NT_STATUS_OK
ReadX 14062 18541 4096 4096 NT_STATUS_OK
ReadX 14062 22637 256 256 NT_STATUS_OK
ReadX 14062 22893 4096 4096 NT_STATUS_OK
ReadX 14062 26989 4096 4096 NT_STATUS_OK
ReadX 14062 31085 4096 4096 NT_STATUS_OK
ReadX 14062 35181 4096 4096 NT_STATUS_OK
ReadX 14062 39277 4096 4096 NT_STATUS_OK
ReadX 14062 43373 4096 4096 NT_STATUS_OK
ReadX 14062 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14062 2157 1024 1024 NT_STATUS_OK
ReadX 14062 1667 4688 4688 NT_STATUS_OK
ReadX 14062 6355 3516 3516 NT_STATUS_OK
ReadX 14062 9871 16384 16384 NT_STATUS_OK
ReadX 14062 26255 3771 3771 NT_STATUS_OK
ReadX 14062 30026 2048 2048 NT_STATUS_OK
ReadX 14062 32074 1024 1024 NT_STATUS_OK
ReadX 14062 33098 6652 6652 NT_STATUS_OK
ReadX 14062 39750 16384 16384 NT_STATUS_OK
ReadX 14062 56134 10496 10496 NT_STATUS_OK
ReadX 14062 66630 1784 1784 NT_STATUS_OK
ReadX 14062 68414 90 90 NT_STATUS_OK
ReadX 14062 68504 273 273 NT_STATUS_OK
ReadX 14062 68777 1600 1600 NT_STATUS_OK
ReadX 14062 70377 640 640 NT_STATUS_OK
ReadX 14062 71017 1280 1280 NT_STATUS_OK
ReadX 14062 72297 8464 8464 NT_STATUS_OK
ReadX 14062 80761 158 158 NT_STATUS_OK
ReadX 14062 80919 912 912 NT_STATUS_OK
ReadX 14062 81831 1980 1980 NT_STATUS_OK
ReadX 14062 83811 2256 2256 NT_STATUS_OK
ReadX 14062 86067 400 400 NT_STATUS_OK
ReadX 14062 86467 252 252 NT_STATUS_OK
ReadX 14062 86719 42 42 NT_STATUS_OK
ReadX 14062 86761 725 725 NT_STATUS_OK
ReadX 14062 2009 512 512 NT_STATUS_OK
ReadX 14062 3895 9 9 NT_STATUS_OK
ReadX 14062 3781 46 46 NT_STATUS_OK
ReadX 14062 4059 92 92 NT_STATUS_OK
ReadX 14062 3781 92 92 NT_STATUS_OK
ReadX 14062 3986 184 184 NT_STATUS_OK
ReadX 14062 3987 16384 16384 NT_STATUS_OK
ReadX 14062 3902 16384 16384 NT_STATUS_OK
ReadX 14062 3781 10240 10240 NT_STATUS_OK
ReadX 14062 3821 16384 16384 NT_STATUS_OK
ReadX 14062 3891 935 935 NT_STATUS_OK
ReadX 14062 4060 10240 10240 NT_STATUS_OK
ReadX 14062 4059 184 184 NT_STATUS_OK
ReadX 14062 256 184 184 NT_STATUS_OK
ReadX 14062 256 1026 1026 NT_STATUS_OK
ReadX 14062 3901 326 326 NT_STATUS_OK
ReadX 14062 3899 652 652 NT_STATUS_OK
ReadX 14062 256 2 2 NT_STATUS_OK
ReadX 14062 258 4948 4948 NT_STATUS_OK
Close 14062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 14080 NT_STATUS_OK
WriteX 14080 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14080 258 NT_STATUS_OK
WriteX 14080 0 65536 65536 NT_STATUS_OK
WriteX 14080 65536 65536 65536 NT_STATUS_OK
WriteX 14080 131072 65536 65536 NT_STATUS_OK
WriteX 14080 196608 65536 65536 NT_STATUS_OK
WriteX 14080 262144 65536 65536 NT_STATUS_OK
WriteX 14080 327680 65536 65536 NT_STATUS_OK
WriteX 14080 393216 65536 65536 NT_STATUS_OK
WriteX 14080 458752 65536 65536 NT_STATUS_OK
WriteX 14080 524288 65536 65536 NT_STATUS_OK
WriteX 14080 589824 35257 35257 NT_STATUS_OK
Close 14080 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 14082 NT_STATUS_OK
Close 14082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 14085 NT_STATUS_OK
WriteX 14085 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14085 258 NT_STATUS_OK
WriteX 14085 0 65536 65536 NT_STATUS_OK
WriteX 14085 65536 65536 65536 NT_STATUS_OK
WriteX 14085 131072 65536 65536 NT_STATUS_OK
WriteX 14085 196608 65536 65536 NT_STATUS_OK
WriteX 14085 262144 65536 65536 NT_STATUS_OK
WriteX 14085 327680 65536 65536 NT_STATUS_OK
WriteX 14085 393216 65536 65536 NT_STATUS_OK
WriteX 14085 458752 65536 65536 NT_STATUS_OK
WriteX 14085 524288 65536 65536 NT_STATUS_OK
WriteX 14085 589824 57598 57598 NT_STATUS_OK
Close 14085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14087 NT_STATUS_OK
WriteX 14087 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14087 258 NT_STATUS_OK
WriteX 14087 0 12543 12543 NT_STATUS_OK
Flush 14087 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 14071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14089 NT_STATUS_OK
Close 14089 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 14092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 14093 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1005 NT_STATUS_OK
ReadX 14093 1938 24 24 NT_STATUS_OK
ReadX 14093 1920 276 276 NT_STATUS_OK
ReadX 14093 1918 14 14 NT_STATUS_OK
ReadX 14093 1918 7 7 NT_STATUS_OK
ReadX 14093 1919 12 12 NT_STATUS_OK
ReadX 14093 1919 8 8 NT_STATUS_OK
ReadX 14093 1917 15 15 NT_STATUS_OK
ReadX 14093 0 16 16 NT_STATUS_OK
ReadX 14093 16 2048 2048 NT_STATUS_OK
ReadX 14093 2064 2048 2048 NT_STATUS_OK
ReadX 14093 257 2048 2048 NT_STATUS_OK
ReadX 14093 385 2048 2048 NT_STATUS_OK
ReadX 14093 513 2048 2048 NT_STATUS_OK
ReadX 14093 641 2048 2048 NT_STATUS_OK
ReadX 14093 769 2048 2048 NT_STATUS_OK
ReadX 14093 897 2048 2048 NT_STATUS_OK
ReadX 14093 1025 2048 2048 NT_STATUS_OK
ReadX 14093 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9985 NT_STATUS_OK
WriteX 9985 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9985 258 NT_STATUS_OK
WriteX 9985 0 11588 11588 NT_STATUS_OK
Flush 9985 NT_STATUS_OK
Close 9985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9986 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9988 NT_STATUS_OK
ReadX 9988 0 4096 4096 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9990 NT_STATUS_OK
WriteX 9990 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9990 258 NT_STATUS_OK
WriteX 9990 0 11615 11615 NT_STATUS_OK
Flush 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9992 NT_STATUS_OK
Close 9992 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9996 NT_STATUS_OK
Close 9996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9999 NT_STATUS_OK
WriteX 9999 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 258 NT_STATUS_OK
WriteX 9999 0 65536 65536 NT_STATUS_OK
WriteX 9999 65536 16050 16050 NT_STATUS_OK
Close 9999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14092 1939 64 64 NT_STATUS_OK
ReadX 14092 128 248 248 NT_STATUS_OK
ReadX 14092 128 568 568 NT_STATUS_OK
ReadX 14092 3872 1536 1536 NT_STATUS_OK
ReadX 14092 3456 2560 2560 NT_STATUS_OK
ReadX 14092 3136 512 512 NT_STATUS_OK
ReadX 14092 2880 4096 4096 NT_STATUS_OK
ReadX 14092 3264 3072 3072 NT_STATUS_OK
ReadX 14092 320 4096 4096 NT_STATUS_OK
ReadX 14092 1024 4096 4096 NT_STATUS_OK
ReadX 14092 3616 4096 4096 NT_STATUS_OK
ReadX 14092 1939 64 64 NT_STATUS_OK
ReadX 14092 128 248 248 NT_STATUS_OK
ReadX 14092 128 608 608 NT_STATUS_OK
ReadX 14092 2858 1024 1024 NT_STATUS_OK
ReadX 14092 2810 4096 4096 NT_STATUS_OK
ReadX 14092 2826 4096 4096 NT_STATUS_OK
ReadX 14092 2580 2048 2048 NT_STATUS_OK
ReadX 14092 2800 2560 2560 NT_STATUS_OK
ReadX 14092 2100 4096 4096 NT_STATUS_OK
ReadX 14092 2084 4096 4096 NT_STATUS_OK
ReadX 14092 868 4096 4096 NT_STATUS_OK
ReadX 14092 2324 4096 4096 NT_STATUS_OK
ReadX 14092 884 4096 4096 NT_STATUS_OK
ReadX 14092 2604 1024 1024 NT_STATUS_OK
ReadX 14092 580 4096 4096 NT_STATUS_OK
ReadX 14092 596 4096 4096 NT_STATUS_OK
ReadX 14092 2752 4096 4096 NT_STATUS_OK
ReadX 14092 2842 1024 1024 NT_STATUS_OK
ReadX 14092 660 4096 4096 NT_STATUS_OK
ReadX 14092 2720 4096 4096 NT_STATUS_OK
ReadX 14092 2736 4096 4096 NT_STATUS_OK
ReadX 14092 628 4096 4096 NT_STATUS_OK
ReadX 14092 2704 4096 4096 NT_STATUS_OK
ReadX 14092 1556 4096 4096 NT_STATUS_OK
ReadX 14092 576 4096 4096 NT_STATUS_OK
ReadX 14092 3168 1536 1536 NT_STATUS_OK
ReadX 14092 832 4096 4096 NT_STATUS_OK
ReadX 14092 1088 4096 4096 NT_STATUS_OK
ReadX 14092 1344 4096 4096 NT_STATUS_OK
ReadX 14092 1600 4096 4096 NT_STATUS_OK
ReadX 14092 1856 4096 4096 NT_STATUS_OK
ReadX 14092 2112 4096 4096 NT_STATUS_OK
ReadX 14092 1892 4096 4096 NT_STATUS_OK
ReadX 14092 820 4096 4096 NT_STATUS_OK
ReadX 14092 788 4096 4096 NT_STATUS_OK
ReadX 14092 1604 4096 4096 NT_STATUS_OK
ReadX 14092 3648 4096 4096 NT_STATUS_OK
ReadX 14092 2608 4096 4096 NT_STATUS_OK
ReadX 14092 548 4096 4096 NT_STATUS_OK
ReadX 14092 740 4096 4096 NT_STATUS_OK
ReadX 14092 1344 4096 4096 NT_STATUS_OK
ReadX 14092 3392 4096 4096 NT_STATUS_OK
ReadX 14092 3904 4096 4096 NT_STATUS_OK
ReadX 14092 644 4096 4096 NT_STATUS_OK
ReadX 14092 676 4096 4096 NT_STATUS_OK
ReadX 14092 2688 4096 4096 NT_STATUS_OK
ReadX 14092 320 4096 4096 NT_STATUS_OK
ReadX 14092 900 4096 4096 NT_STATUS_OK
ReadX 14092 1908 4096 4096 NT_STATUS_OK
ReadX 14092 852 4096 4096 NT_STATUS_OK
ReadX 14092 724 4096 4096 NT_STATUS_OK
ReadX 14092 2292 4096 4096 NT_STATUS_OK
ReadX 14092 612 4096 4096 NT_STATUS_OK
ReadX 14092 388 4096 4096 NT_STATUS_OK
ReadX 14092 2368 4096 4096 NT_STATUS_OK
ReadX 14092 2624 4096 4096 NT_STATUS_OK
ReadX 14092 500 4096 4096 NT_STATUS_OK
ReadX 14092 356 4096 4096 NT_STATUS_OK
ReadX 14092 1024 4096 4096 NT_STATUS_OK
ReadX 14092 576 4096 4096 NT_STATUS_OK
ReadX 14092 340 4096 4096 NT_STATUS_OK
ReadX 14092 420 4096 4096 NT_STATUS_OK
ReadX 14092 1600 4096 4096 NT_STATUS_OK
ReadX 14092 404 4096 4096 NT_STATUS_OK
ReadX 14092 1428 4096 4096 NT_STATUS_OK
ReadX 14092 2656 4096 4096 NT_STATUS_OK
ReadX 14092 2624 4096 4096 NT_STATUS_OK
ReadX 14092 452 4096 4096 NT_STATUS_OK
ReadX 14092 692 4096 4096 NT_STATUS_OK
ReadX 14092 564 4096 4096 NT_STATUS_OK
ReadX 14092 372 4096 4096 NT_STATUS_OK
ReadX 14092 468 4096 4096 NT_STATUS_OK
ReadX 14092 484 4096 4096 NT_STATUS_OK
ReadX 14092 1088 4096 4096 NT_STATUS_OK
ReadX 14092 1924 4096 4096 NT_STATUS_OK
ReadX 14092 2768 4096 4096 NT_STATUS_OK
ReadX 14092 832 4096 4096 NT_STATUS_OK
ReadX 14092 836 4096 4096 NT_STATUS_OK
ReadX 14092 1856 4096 4096 NT_STATUS_OK
ReadX 14092 2640 4096 4096 NT_STATUS_OK
ReadX 14092 436 4096 4096 NT_STATUS_OK
ReadX 14092 1828 4096 4096 NT_STATUS_OK
ReadX 14092 804 4096 4096 NT_STATUS_OK
ReadX 14092 1860 4096 4096 NT_STATUS_OK
ReadX 14092 1812 4096 4096 NT_STATUS_OK
ReadX 14092 756 4096 4096 NT_STATUS_OK
ReadX 14092 1636 4096 4096 NT_STATUS_OK
ReadX 14092 772 4096 4096 NT_STATUS_OK
ReadX 14092 2036 4096 4096 NT_STATUS_OK
ReadX 14092 1220 4096 4096 NT_STATUS_OK
ReadX 14092 1652 4096 4096 NT_STATUS_OK
ReadX 14092 2588 4096 4096 NT_STATUS_OK
ReadX 14092 916 4096 4096 NT_STATUS_OK
ReadX 14092 260 4096 4096 NT_STATUS_OK
ReadX 14092 932 4096 4096 NT_STATUS_OK
ReadX 14092 2624 4096 4096 NT_STATUS_OK
ReadX 14092 308 4096 4096 NT_STATUS_OK
ReadX 14092 292 4096 4096 NT_STATUS_OK
ReadX 14092 1140 4096 4096 NT_STATUS_OK
ReadX 14092 276 4096 4096 NT_STATUS_OK
ReadX 14092 2020 4096 4096 NT_STATUS_OK
ReadX 14092 2880 4096 4096 NT_STATUS_OK
ReadX 14092 516 4096 4096 NT_STATUS_OK
ReadX 14092 1844 4096 4096 NT_STATUS_OK
ReadX 14092 1124 4096 4096 NT_STATUS_OK
ReadX 14092 3136 4096 4096 NT_STATUS_OK
ReadX 14092 324 4096 4096 NT_STATUS_OK
ReadX 14092 1156 4096 4096 NT_STATUS_OK
ReadX 14092 1172 4096 4096 NT_STATUS_OK
ReadX 14092 2112 4096 4096 NT_STATUS_OK
ReadX 14092 2368 4096 4096 NT_STATUS_OK
ReadX 14092 964 4096 4096 NT_STATUS_OK
ReadX 14092 980 4096 4096 NT_STATUS_OK
ReadX 14092 1012 4096 4096 NT_STATUS_OK
ReadX 14092 532 4096 4096 NT_STATUS_OK
ReadX 14092 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14092 1620 4096 4096 NT_STATUS_OK
ReadX 14092 1604 4096 4096 NT_STATUS_OK
ReadX 14092 2116 4096 4096 NT_STATUS_OK
ReadX 14092 2132 4096 4096 NT_STATUS_OK
ReadX 14092 2148 4096 4096 NT_STATUS_OK
ReadX 14092 2276 4096 4096 NT_STATUS_OK
ReadX 14092 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10001 NT_STATUS_OK
Close 10001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10004 NT_STATUS_OK
QUERY_FILE_INFORMATION 14072 1004 NT_STATUS_OK
Close 14072 NT_STATUS_OK
WriteX 10004 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10004 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 14074 1004 NT_STATUS_OK
Close 14074 NT_STATUS_OK
WriteX 10004 0 65536 65536 NT_STATUS_OK
WriteX 10004 65536 64850 64850 NT_STATUS_OK
Close 10004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10006 NT_STATUS_OK
WriteX 10006 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10006 258 NT_STATUS_OK
ReadX 14092 2068 4096 4096 NT_STATUS_OK
ReadX 14092 1588 4096 4096 NT_STATUS_OK
ReadX 14092 1572 4096 4096 NT_STATUS_OK
WriteX 10006 0 18630 18630 NT_STATUS_OK
Flush 10006 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14092 612 4096 4096 NT_STATUS_OK
ReadX 14092 564 4096 4096 NT_STATUS_OK
ReadX 14092 1876 4096 4096 NT_STATUS_OK
ReadX 14092 628 4096 4096 NT_STATUS_OK
ReadX 14092 740 4096 4096 NT_STATUS_OK
ReadX 14092 724 4096 4096 NT_STATUS_OK
ReadX 14092 644 4096 4096 NT_STATUS_OK
ReadX 14092 2324 4096 4096 NT_STATUS_OK
ReadX 14092 660 4096 4096 NT_STATUS_OK
ReadX 14092 852 4096 4096 NT_STATUS_OK
ReadX 14092 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14092 2368 4096 4096 NT_STATUS_OK
ReadX 14092 1024 4096 4096 NT_STATUS_OK
ReadX 14092 320 4096 4096 NT_STATUS_OK
ReadX 14092 580 4096 4096 NT_STATUS_OK
ReadX 14092 3136 512 512 NT_STATUS_OK
ReadX 14092 2880 4096 4096 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10011 NT_STATUS_OK
ReadX 10011 61440 4096 4096 NT_STATUS_OK
ReadX 10011 126976 4096 4096 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 61440 4096 4096 NT_STATUS_OK
ReadX 10012 126976 4096 4096 NT_STATUS_OK
ReadX 10012 192512 4096 4096 NT_STATUS_OK
ReadX 10012 258048 4096 4096 NT_STATUS_OK
WriteX 10012 0 65536 65536 NT_STATUS_OK
WriteX 10012 65536 65536 65536 NT_STATUS_OK
WriteX 10012 131072 65536 65536 NT_STATUS_OK
WriteX 10012 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 61440 4096 4096 NT_STATUS_OK
ReadX 10013 126976 4096 4096 NT_STATUS_OK
ReadX 10013 192512 4096 4096 NT_STATUS_OK
ReadX 10013 258048 4096 4096 NT_STATUS_OK
ReadX 10013 323584 4096 4096 NT_STATUS_OK
ReadX 10013 389120 4096 4096 NT_STATUS_OK
ReadX 10013 454656 4096 4096 NT_STATUS_OK
ReadX 10013 520192 4096 4096 NT_STATUS_OK
WriteX 10013 0 65536 65536 NT_STATUS_OK
WriteX 10013 65536 65536 65536 NT_STATUS_OK
WriteX 10013 131072 65536 65536 NT_STATUS_OK
WriteX 10013 196608 65536 65536 NT_STATUS_OK
WriteX 10013 262144 65536 65536 NT_STATUS_OK
WriteX 10013 327680 65536 65536 NT_STATUS_OK
WriteX 10013 393216 65536 65536 NT_STATUS_OK
WriteX 10013 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10015 NT_STATUS_OK
Close 10015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10016 NT_STATUS_OK
WriteX 10016 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10016 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10014 0 8192 8192 NT_STATUS_OK
Flush 10014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10014 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10014 0 8192 8192 NT_STATUS_OK
Flush 10014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10014 0 8192 8192 NT_STATUS_OK
Flush 10014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10014 0 8192 8192 NT_STATUS_OK
Flush 10014 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10010 NT_STATUS_OK
Close 14091 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Close 10012 NT_STATUS_OK
Close 10013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10021 NT_STATUS_OK
WriteX 10021 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10021 258 NT_STATUS_OK
WriteX 10021 0 62591 62591 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10023 NT_STATUS_OK
Close 10023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10026 NT_STATUS_OK
WriteX 10026 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10026 258 NT_STATUS_OK
WriteX 10026 0 10845 10845 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10028 NT_STATUS_OK
Close 10028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10031 NT_STATUS_OK
WriteX 10031 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10031 258 NT_STATUS_OK
WriteX 10031 0 30118 30118 NT_STATUS_OK
Close 10031 NT_STATUS_OK
WriteX 10014 0 4096 4096 NT_STATUS_OK
WriteX 10016 0 64 64 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 61440 61440 NT_STATUS_OK
ReadX 10033 61440 4096 4096 NT_STATUS_OK
ReadX 10033 65536 61440 61440 NT_STATUS_OK
ReadX 10033 126976 4096 4096 NT_STATUS_OK
ReadX 10033 131072 61440 61440 NT_STATUS_OK
ReadX 10033 192512 4096 4096 NT_STATUS_OK
ReadX 10033 196608 61440 61440 NT_STATUS_OK
ReadX 10033 258048 4096 4096 NT_STATUS_OK
ReadX 10033 262144 61440 61440 NT_STATUS_OK
ReadX 10033 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 61440 61440 NT_STATUS_OK
ReadX 10034 61440 4096 4096 NT_STATUS_OK
ReadX 10034 65536 61440 61440 NT_STATUS_OK
ReadX 10034 126976 4096 4096 NT_STATUS_OK
ReadX 10034 131072 61440 61440 NT_STATUS_OK
ReadX 10034 192512 4096 4096 NT_STATUS_OK
ReadX 10034 196608 61440 61440 NT_STATUS_OK
ReadX 10034 258048 4096 4096 NT_STATUS_OK
ReadX 10034 262144 61440 61440 NT_STATUS_OK
ReadX 10034 323584 4096 4096 NT_STATUS_OK
ReadX 10034 327680 61440 61440 NT_STATUS_OK
ReadX 10034 389120 4096 4096 NT_STATUS_OK
ReadX 10034 393216 61440 61440 NT_STATUS_OK
ReadX 10034 454656 4096 4096 NT_STATUS_OK
ReadX 10034 458752 61440 61440 NT_STATUS_OK
ReadX 10034 520192 4096 4096 NT_STATUS_OK
ReadX 10034 524288 61440 61440 NT_STATUS_OK
ReadX 10034 585728 4096 4096 NT_STATUS_OK
ReadX 10034 589824 61440 61440 NT_STATUS_OK
ReadX 10034 651264 4096 4096 NT_STATUS_OK
ReadX 10034 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 61440 61440 NT_STATUS_OK
ReadX 10035 61440 4096 4096 NT_STATUS_OK
ReadX 10035 65536 61440 61440 NT_STATUS_OK
ReadX 10035 126976 4096 4096 NT_STATUS_OK
ReadX 10035 131072 61440 61440 NT_STATUS_OK
ReadX 10035 192512 4096 4096 NT_STATUS_OK
ReadX 10035 196608 61440 61440 NT_STATUS_OK
ReadX 10035 258048 4096 4096 NT_STATUS_OK
ReadX 10035 262144 61440 61440 NT_STATUS_OK
ReadX 10035 323584 4096 4096 NT_STATUS_OK
ReadX 10035 327680 61440 61440 NT_STATUS_OK
ReadX 10035 389120 4096 4096 NT_STATUS_OK
ReadX 10035 393216 61440 61440 NT_STATUS_OK
ReadX 10035 454656 4096 4096 NT_STATUS_OK
ReadX 10035 458752 61440 61440 NT_STATUS_OK
ReadX 10035 520192 4096 4096 NT_STATUS_OK
ReadX 10035 524288 61440 61440 NT_STATUS_OK
ReadX 10035 585728 4096 4096 NT_STATUS_OK
ReadX 10035 589824 61440 61440 NT_STATUS_OK
ReadX 10035 651264 4096 4096 NT_STATUS_OK
ReadX 10035 655360 61440 61440 NT_STATUS_OK
ReadX 10035 716800 4096 4096 NT_STATUS_OK
ReadX 10035 720896 61440 61440 NT_STATUS_OK
ReadX 10035 782336 4096 4096 NT_STATUS_OK
ReadX 10035 786432 61440 61440 NT_STATUS_OK
ReadX 10035 847872 4096 4096 NT_STATUS_OK
ReadX 10035 851968 61440 61440 NT_STATUS_OK
ReadX 10035 913408 4096 4096 NT_STATUS_OK
ReadX 10035 917504 61440 61440 NT_STATUS_OK
ReadX 10035 978944 4096 4096 NT_STATUS_OK
ReadX 10035 983040 61440 61440 NT_STATUS_OK
ReadX 10035 1044480 4096 4096 NT_STATUS_OK
ReadX 10035 1048576 61440 61440 NT_STATUS_OK
ReadX 10035 1110016 4096 4096 NT_STATUS_OK
ReadX 10035 1114112 61440 61440 NT_STATUS_OK
ReadX 10035 1175552 4096 4096 NT_STATUS_OK
ReadX 10035 1179648 61440 61440 NT_STATUS_OK
ReadX 10035 1241088 4096 4096 NT_STATUS_OK
ReadX 10035 1245184 61440 61440 NT_STATUS_OK
ReadX 10035 1306624 4096 4096 NT_STATUS_OK
ReadX 10035 1310720 61440 61440 NT_STATUS_OK
ReadX 10035 1372160 4096 4096 NT_STATUS_OK
ReadX 10035 1376256 61440 61440 NT_STATUS_OK
ReadX 10035 1437696 4096 4096 NT_STATUS_OK
ReadX 10035 1441792 61440 61440 NT_STATUS_OK
ReadX 10035 1503232 4096 4096 NT_STATUS_OK
ReadX 10035 1507328 61440 61440 NT_STATUS_OK
ReadX 10035 1568768 4096 4096 NT_STATUS_OK
ReadX 10035 1572864 61440 61440 NT_STATUS_OK
ReadX 10035 1634304 4096 4096 NT_STATUS_OK
ReadX 10035 1638400 61440 61440 NT_STATUS_OK
ReadX 10035 1699840 4096 4096 NT_STATUS_OK
ReadX 10035 1703936 61440 61440 NT_STATUS_OK
ReadX 10035 1765376 4096 4096 NT_STATUS_OK
ReadX 10035 1769472 61440 61440 NT_STATUS_OK
ReadX 10035 1830912 4096 4096 NT_STATUS_OK
ReadX 10035 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10034 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
ReadX 10040 4096 4096 4096 NT_STATUS_OK
ReadX 10040 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10041 NT_STATUS_OK
Close 10041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Close 10039 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10043 NT_STATUS_OK
ReadX 10043 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10044 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10043 NT_STATUS_OK
Close 10044 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10047 NT_STATUS_OK
ReadX 10047 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 8192 8192 NT_STATUS_OK
ReadX 10048 8192 8192 8192 NT_STATUS_OK
ReadX 10048 16384 8192 8192 NT_STATUS_OK
ReadX 10048 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10048 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10053 NT_STATUS_OK
WriteX 10053 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10053 258 NT_STATUS_OK
WriteX 10053 0 10438 10438 NT_STATUS_OK
Close 10053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10057 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10059 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10061 NT_STATUS_OK
Close 10061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
ReadX 10062 4096 4096 4096 NT_STATUS_OK
ReadX 10062 8192 4096 4096 NT_STATUS_OK
ReadX 10062 12288 8192 8192 NT_STATUS_OK
ReadX 10062 20480 8192 8192 NT_STATUS_OK
ReadX 10062 28672 8192 8192 NT_STATUS_OK
ReadX 10062 36864 8192 8192 NT_STATUS_OK
ReadX 10062 45056 8192 8192 NT_STATUS_OK
ReadX 10062 53248 8192 8192 NT_STATUS_OK
ReadX 10062 61440 8192 8192 NT_STATUS_OK
ReadX 10062 69632 8192 8192 NT_STATUS_OK
ReadX 10062 77824 8192 8192 NT_STATUS_OK
ReadX 10062 86016 8192 8192 NT_STATUS_OK
ReadX 10062 94208 8192 8192 NT_STATUS_OK
ReadX 10062 102400 8192 8192 NT_STATUS_OK
ReadX 10062 110592 8192 8192 NT_STATUS_OK
ReadX 10062 118784 8192 8192 NT_STATUS_OK
ReadX 10062 126976 8192 8192 NT_STATUS_OK
ReadX 10062 135168 8192 8192 NT_STATUS_OK
ReadX 10062 143360 8192 8192 NT_STATUS_OK
ReadX 10062 151552 8192 8192 NT_STATUS_OK
ReadX 10062 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10055 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10067 NT_STATUS_OK
WriteX 10067 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10067 258 NT_STATUS_OK
WriteX 10067 0 28489 28489 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10068 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10070 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10071 NT_STATUS_OK
Close 10071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 8192 8192 NT_STATUS_OK
ReadX 10074 8192 8192 8192 NT_STATUS_OK
ReadX 10074 16384 8192 8192 NT_STATUS_OK
ReadX 10074 24576 8192 8192 NT_STATUS_OK
ReadX 10074 32768 16384 16384 NT_STATUS_OK
ReadX 10074 49152 8192 8192 NT_STATUS_OK
ReadX 10074 57344 8192 8192 NT_STATUS_OK
ReadX 10074 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10076 NT_STATUS_OK
Close 10076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10079 NT_STATUS_OK
WriteX 10079 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10079 258 NT_STATUS_OK
WriteX 10079 0 29253 29253 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10080 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10086 NT_STATUS_OK
WriteX 10086 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10086 258 NT_STATUS_OK
WriteX 10086 0 30183 30183 NT_STATUS_OK
Close 10086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10089 NT_STATUS_OK
WriteX 10089 0 510 510 NT_STATUS_OK
WriteX 10089 510 512 512 NT_STATUS_OK
WriteX 10089 1022 510 510 NT_STATUS_OK
WriteX 10089 1532 510 510 NT_STATUS_OK
WriteX 10089 2042 168 168 NT_STATUS_OK
Close 10089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 4096 4096 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10093 NT_STATUS_OK
ReadX 10093 61440 4096 4096 NT_STATUS_OK
ReadX 10093 126976 4096 4096 NT_STATUS_OK
WriteX 10093 0 65536 65536 NT_STATUS_OK
WriteX 10093 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 61440 4096 4096 NT_STATUS_OK
ReadX 10094 126976 4096 4096 NT_STATUS_OK
ReadX 10094 192512 4096 4096 NT_STATUS_OK
ReadX 10094 258048 4096 4096 NT_STATUS_OK
WriteX 10094 0 65536 65536 NT_STATUS_OK
WriteX 10094 65536 65536 65536 NT_STATUS_OK
WriteX 10094 131072 65536 65536 NT_STATUS_OK
WriteX 10094 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10095 NT_STATUS_OK
ReadX 10095 61440 4096 4096 NT_STATUS_OK
ReadX 10095 126976 4096 4096 NT_STATUS_OK
ReadX 10095 192512 4096 4096 NT_STATUS_OK
ReadX 10095 258048 4096 4096 NT_STATUS_OK
ReadX 10095 323584 4096 4096 NT_STATUS_OK
ReadX 10095 389120 4096 4096 NT_STATUS_OK
ReadX 10095 454656 4096 4096 NT_STATUS_OK
ReadX 10095 520192 4096 4096 NT_STATUS_OK
WriteX 10095 0 65536 65536 NT_STATUS_OK
WriteX 10095 65536 65536 65536 NT_STATUS_OK
WriteX 10095 131072 65536 65536 NT_STATUS_OK
WriteX 10095 196608 65536 65536 NT_STATUS_OK
WriteX 10095 262144 65536 65536 NT_STATUS_OK
WriteX 10095 327680 65536 65536 NT_STATUS_OK
WriteX 10095 393216 65536 65536 NT_STATUS_OK
WriteX 10095 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10096 NT_STATUS_OK
Close 10096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10098 NT_STATUS_OK
Close 10098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10105 NT_STATUS_OK
Close 10105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10111 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10114 NT_STATUS_OK
Close 10114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10120 NT_STATUS_OK
Close 10120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10125 NT_STATUS_OK
Close 10125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10130 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10145 NT_STATUS_OK
Close 10145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10150 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10158 NT_STATUS_OK
Close 10158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10161 NT_STATUS_OK
Close 10161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10164 NT_STATUS_OK
WriteX 10164 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10164 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10164 0 65536 65536 NT_STATUS_OK
WriteX 10164 65536 65536 65536 NT_STATUS_OK
WriteX 10164 131072 65536 65536 NT_STATUS_OK
WriteX 10164 196608 65536 65536 NT_STATUS_OK
WriteX 10164 262144 26634 26634 NT_STATUS_OK
Close 10164 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10170 NT_STATUS_OK
Close 10170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 4096 4096 NT_STATUS_OK
ReadX 10172 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10173 NT_STATUS_OK
Close 10173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10180 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10182 NT_STATUS_OK
Close 10182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10186 NT_STATUS_OK
Close 10186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10191 NT_STATUS_OK
Close 10191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10210 NT_STATUS_OK
Close 10210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10215 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10220 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10229 NT_STATUS_OK
Close 10229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
Close 10265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10296 0 4096 4096 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10298 NT_STATUS_OK
ReadX 10298 0 4096 4096 NT_STATUS_OK
ReadX 10298 4096 4096 4096 NT_STATUS_OK
ReadX 10298 8192 4096 4096 NT_STATUS_OK
ReadX 10298 12288 4096 4096 NT_STATUS_OK
ReadX 10298 16384 4096 4096 NT_STATUS_OK
ReadX 10298 20480 4096 4096 NT_STATUS_OK
ReadX 10298 24576 4096 4096 NT_STATUS_OK
ReadX 10298 28672 4096 4096 NT_STATUS_OK
ReadX 10298 32768 4096 4096 NT_STATUS_OK
ReadX 10298 36864 4096 4096 NT_STATUS_OK
ReadX 10298 40960 4096 4096 NT_STATUS_OK
ReadX 10298 45056 4096 4096 NT_STATUS_OK
ReadX 10298 49152 4096 4096 NT_STATUS_OK
ReadX 10298 53248 4096 4096 NT_STATUS_OK
ReadX 10298 57344 4096 4096 NT_STATUS_OK
ReadX 10298 61440 4096 4096 NT_STATUS_OK
ReadX 10298 65536 4096 4096 NT_STATUS_OK
ReadX 10298 69632 4096 4096 NT_STATUS_OK
ReadX 10298 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10298 1004 NT_STATUS_OK
WriteX 10298 0 4096 4096 NT_STATUS_OK
Close 10298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10299 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
Close 10299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10304 NT_STATUS_OK
WriteX 10304 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 258 NT_STATUS_OK
WriteX 10304 0 65536 65536 NT_STATUS_OK
WriteX 10304 65536 19979 19979 NT_STATUS_OK
Close 10304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
WriteX 10305 0 4096 4096 NT_STATUS_OK
Flush 10305 NT_STATUS_OK
WriteX 10305 0 4096 4096 NT_STATUS_OK
Flush 10305 NT_STATUS_OK
QUERY_FILE_INFORMATION 10305 1004 NT_STATUS_OK
WriteX 10305 0 4096 4096 NT_STATUS_OK
Flush 10305 NT_STATUS_OK
WriteX 10305 0 4096 4096 NT_STATUS_OK
Flush 10305 NT_STATUS_OK
WriteX 10305 0 4096 4096 NT_STATUS_OK
Flush 10305 NT_STATUS_OK
SET_FILE_INFORMATION 10305 1004 NT_STATUS_OK
WriteX 10305 0 4096 4096 NT_STATUS_OK
Flush 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 4096 4096 NT_STATUS_OK
Close 10306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
Close 10308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 4096 4096 NT_STATUS_OK
Close 10309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
WriteX 10310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10316 NT_STATUS_OK
WriteX 10316 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
WriteX 10316 0 65536 65536 NT_STATUS_OK
WriteX 10316 65536 17654 17654 NT_STATUS_OK
Close 10316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 4096 4096 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
QUERY_FILE_INFORMATION 10317 1004 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
SET_FILE_INFORMATION 10317 1004 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
Close 10317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10318 NT_STATUS_OK
SET_FILE_INFORMATION 10318 1004 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
ReadX 10322 4096 4096 4096 NT_STATUS_OK
ReadX 10322 8192 4096 4096 NT_STATUS_OK
ReadX 10322 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10322 16384 4096 4096 NT_STATUS_OK
ReadX 10322 20480 4096 4096 NT_STATUS_OK
ReadX 10322 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 4096 4096 NT_STATUS_OK
Close 10323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
Close 10324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10325 NT_STATUS_OK
ReadX 10325 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
WriteX 10325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10325 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10328 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10331 NT_STATUS_OK
WriteX 10331 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 258 NT_STATUS_OK
WriteX 10331 0 65536 65536 NT_STATUS_OK
WriteX 10331 65536 19490 19490 NT_STATUS_OK
Close 10331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
Flush 10332 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
Flush 10332 NT_STATUS_OK
QUERY_FILE_INFORMATION 10332 1004 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
Flush 10332 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
Flush 10332 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
Flush 10332 NT_STATUS_OK
SET_FILE_INFORMATION 10332 1004 NT_STATUS_OK
WriteX 10332 0 4096 4096 NT_STATUS_OK
Flush 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10333 NT_STATUS_OK
SET_FILE_INFORMATION 10333 1004 NT_STATUS_OK
Close 10333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10337 0 4096 4096 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
ReadX 10339 4096 4096 4096 NT_STATUS_OK
ReadX 10339 8192 4096 4096 NT_STATUS_OK
ReadX 10339 12288 4096 4096 NT_STATUS_OK
ReadX 10339 16384 4096 4096 NT_STATUS_OK
ReadX 10339 20480 4096 4096 NT_STATUS_OK
ReadX 10339 24576 4096 4096 NT_STATUS_OK
ReadX 10339 28672 4096 4096 NT_STATUS_OK
ReadX 10339 32768 4096 4096 NT_STATUS_OK
ReadX 10339 36864 4096 4096 NT_STATUS_OK
ReadX 10339 40960 4096 4096 NT_STATUS_OK
ReadX 10339 45056 4096 4096 NT_STATUS_OK
ReadX 10339 49152 4096 4096 NT_STATUS_OK
ReadX 10339 53248 4096 4096 NT_STATUS_OK
ReadX 10339 57344 4096 4096 NT_STATUS_OK
ReadX 10339 61440 4096 4096 NT_STATUS_OK
ReadX 10339 65536 4096 4096 NT_STATUS_OK
ReadX 10339 69632 4096 4096 NT_STATUS_OK
ReadX 10339 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10339 1004 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
Close 10339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10340 NT_STATUS_OK
SET_FILE_INFORMATION 10340 1004 NT_STATUS_OK
Close 10340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10342 NT_STATUS_OK
Close 10342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10345 NT_STATUS_OK
WriteX 10345 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 258 NT_STATUS_OK
WriteX 10345 0 65536 65536 NT_STATUS_OK
WriteX 10345 65536 8866 8866 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 4096 4096 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
Flush 10346 NT_STATUS_OK
SET_FILE_INFORMATION 10346 1004 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
Flush 10346 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 4096 4096 NT_STATUS_OK
Close 10349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10350 NT_STATUS_OK
ReadX 10350 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10350 1004 NT_STATUS_OK
WriteX 10350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10351 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10350 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10353 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10356 NT_STATUS_OK
WriteX 10356 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10356 258 NT_STATUS_OK
WriteX 10356 0 65536 65536 NT_STATUS_OK
WriteX 10356 65536 9298 9298 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
SET_FILE_INFORMATION 10357 1004 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10358 NT_STATUS_OK
SET_FILE_INFORMATION 10358 1004 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10364 4096 4096 4096 NT_STATUS_OK
ReadX 10364 8192 4096 4096 NT_STATUS_OK
ReadX 10364 12288 4096 4096 NT_STATUS_OK
ReadX 10364 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
Close 10366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10367 1004 NT_STATUS_OK
WriteX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10368 NT_STATUS_OK
Close 10368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10373 NT_STATUS_OK
WriteX 10373 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 258 NT_STATUS_OK
WriteX 10373 0 65536 65536 NT_STATUS_OK
WriteX 10373 65536 11540 11540 NT_STATUS_OK
Close 10373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
Flush 10374 NT_STATUS_OK
SET_FILE_INFORMATION 10374 1004 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
Flush 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10375 NT_STATUS_OK
SET_FILE_INFORMATION 10375 1004 NT_STATUS_OK
Close 10375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10377 NT_STATUS_OK
Close 10377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 61440 4096 4096 NT_STATUS_OK
ReadX 10379 126976 4096 4096 NT_STATUS_OK
WriteX 10379 0 65536 65536 NT_STATUS_OK
WriteX 10379 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 61440 4096 4096 NT_STATUS_OK
ReadX 10380 126976 4096 4096 NT_STATUS_OK
ReadX 10380 192512 4096 4096 NT_STATUS_OK
ReadX 10380 258048 4096 4096 NT_STATUS_OK
WriteX 10380 0 65536 65536 NT_STATUS_OK
WriteX 10380 65536 65536 65536 NT_STATUS_OK
WriteX 10380 131072 65536 65536 NT_STATUS_OK
WriteX 10380 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 61440 4096 4096 NT_STATUS_OK
ReadX 10381 126976 4096 4096 NT_STATUS_OK
ReadX 10381 192512 4096 4096 NT_STATUS_OK
ReadX 10381 258048 4096 4096 NT_STATUS_OK
ReadX 10381 323584 4096 4096 NT_STATUS_OK
ReadX 10381 389120 4096 4096 NT_STATUS_OK
ReadX 10381 454656 4096 4096 NT_STATUS_OK
ReadX 10381 520192 4096 4096 NT_STATUS_OK
WriteX 10381 0 65536 65536 NT_STATUS_OK
WriteX 10381 65536 65536 65536 NT_STATUS_OK
WriteX 10381 131072 65536 65536 NT_STATUS_OK
WriteX 10381 196608 65536 65536 NT_STATUS_OK
WriteX 10381 262144 65536 65536 NT_STATUS_OK
WriteX 10381 327680 65536 65536 NT_STATUS_OK
WriteX 10381 393216 65536 65536 NT_STATUS_OK
WriteX 10381 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
ReadX 10382 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10383 NT_STATUS_OK
WriteX 10383 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 53 53 NT_STATUS_OK
Close 10383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10322 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10382 8192 4096 4096 NT_STATUS_OK
ReadX 10382 12288 4096 4096 NT_STATUS_OK
WriteX 10386 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10386 258 NT_STATUS_OK
ReadX 10382 16384 4096 4096 NT_STATUS_OK
ReadX 10382 20480 4096 4096 NT_STATUS_OK
WriteX 10386 0 15360 15360 NT_STATUS_OK
Close 10386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10387 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10387 1004 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10391 NT_STATUS_OK
Close 10391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10390 4096 4096 4096 NT_STATUS_OK
ReadX 10390 8192 4096 4096 NT_STATUS_OK
ReadX 10390 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
ReadX 10393 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10394 NT_STATUS_OK
ReadX 10394 0 4096 4096 NT_STATUS_OK
ReadX 10394 4096 4096 4096 NT_STATUS_OK
ReadX 10394 8192 4096 4096 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10395 NT_STATUS_OK
WriteX 10395 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 15360 15360 NT_STATUS_OK
Close 10395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10397 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10400 NT_STATUS_OK
SET_FILE_INFORMATION 10400 1004 NT_STATUS_OK
Close 10400 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
ReadX 10403 4096 4096 4096 NT_STATUS_OK
ReadX 10403 8192 4096 4096 NT_STATUS_OK
ReadX 10403 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10403 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10403 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10405 NT_STATUS_OK
WriteX 10405 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10405 258 NT_STATUS_OK
WriteX 10405 0 53 53 NT_STATUS_OK
Close 10405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10406 NT_STATUS_OK
Close 10406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10404 4096 4096 4096 NT_STATUS_OK
ReadX 10404 8192 4096 4096 NT_STATUS_OK
ReadX 10404 12288 4096 4096 NT_STATUS_OK
WriteX 10408 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10408 258 NT_STATUS_OK
WriteX 10408 0 12006 12006 NT_STATUS_OK
Close 10408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10409 NT_STATUS_OK
ReadX 10409 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10409 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10409 1004 NT_STATUS_OK
WriteX 10409 0 4096 4096 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10410 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10413 NT_STATUS_OK
Close 10413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10412 4096 4096 4096 NT_STATUS_OK
ReadX 10412 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10415 NT_STATUS_OK
WriteX 10415 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 258 NT_STATUS_OK
WriteX 10415 0 11991 11991 NT_STATUS_OK
Close 10415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10416 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10416 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10417 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10420 NT_STATUS_OK
SET_FILE_INFORMATION 10420 1004 NT_STATUS_OK
Close 10420 NT_STATUS_OK
WriteX 10416 0 4096 4096 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10421 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10424 NT_STATUS_OK
Close 10424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10423 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10423 1004 NT_STATUS_OK
ReadX 10423 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10423 1004 NT_STATUS_OK
WriteX 10423 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10423 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10423 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10423 1004 NT_STATUS_OK
Close 10399 NT_STATUS_OK
WriteX 10403 0 19054 19054 NT_STATUS_OK
WriteX 10423 0 12288 12288 NT_STATUS_OK
Close 10419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10426 NT_STATUS_OK
Close 10426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10430 NT_STATUS_OK
ReadX 10430 0 61440 61440 NT_STATUS_OK
ReadX 10430 61440 4096 4096 NT_STATUS_OK
ReadX 10430 65536 61440 61440 NT_STATUS_OK
ReadX 10430 126976 4096 4096 NT_STATUS_OK
ReadX 10430 131072 61440 61440 NT_STATUS_OK
ReadX 10430 192512 4096 4096 NT_STATUS_OK
ReadX 10430 196608 61440 61440 NT_STATUS_OK
ReadX 10430 258048 4096 4096 NT_STATUS_OK
ReadX 10430 262144 61440 61440 NT_STATUS_OK
ReadX 10430 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 61440 61440 NT_STATUS_OK
ReadX 10431 61440 4096 4096 NT_STATUS_OK
ReadX 10431 65536 61440 61440 NT_STATUS_OK
ReadX 10431 126976 4096 4096 NT_STATUS_OK
ReadX 10431 131072 61440 61440 NT_STATUS_OK
ReadX 10431 192512 4096 4096 NT_STATUS_OK
ReadX 10431 196608 61440 61440 NT_STATUS_OK
ReadX 10431 258048 4096 4096 NT_STATUS_OK
ReadX 10431 262144 61440 61440 NT_STATUS_OK
ReadX 10431 323584 4096 4096 NT_STATUS_OK
ReadX 10431 327680 61440 61440 NT_STATUS_OK
ReadX 10431 389120 4096 4096 NT_STATUS_OK
ReadX 10431 393216 61440 61440 NT_STATUS_OK
ReadX 10431 454656 4096 4096 NT_STATUS_OK
ReadX 10431 458752 61440 61440 NT_STATUS_OK
ReadX 10431 520192 4096 4096 NT_STATUS_OK
ReadX 10431 524288 61440 61440 NT_STATUS_OK
ReadX 10431 585728 4096 4096 NT_STATUS_OK
ReadX 10431 589824 61440 61440 NT_STATUS_OK
ReadX 10431 651264 4096 4096 NT_STATUS_OK
ReadX 10431 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 61440 61440 NT_STATUS_OK
ReadX 10432 61440 4096 4096 NT_STATUS_OK
ReadX 10432 65536 61440 61440 NT_STATUS_OK
ReadX 10432 126976 4096 4096 NT_STATUS_OK
ReadX 10432 131072 61440 61440 NT_STATUS_OK
ReadX 10432 192512 4096 4096 NT_STATUS_OK
ReadX 10432 196608 61440 61440 NT_STATUS_OK
ReadX 10432 258048 4096 4096 NT_STATUS_OK
ReadX 10432 262144 61440 61440 NT_STATUS_OK
ReadX 10432 323584 4096 4096 NT_STATUS_OK
ReadX 10432 327680 61440 61440 NT_STATUS_OK
ReadX 10432 389120 4096 4096 NT_STATUS_OK
ReadX 10432 393216 61440 61440 NT_STATUS_OK
ReadX 10432 454656 4096 4096 NT_STATUS_OK
ReadX 10432 458752 61440 61440 NT_STATUS_OK
ReadX 10432 520192 4096 4096 NT_STATUS_OK
ReadX 10432 524288 61440 61440 NT_STATUS_OK
ReadX 10432 585728 4096 4096 NT_STATUS_OK
ReadX 10432 589824 61440 61440 NT_STATUS_OK
ReadX 10432 651264 4096 4096 NT_STATUS_OK
ReadX 10432 655360 61440 61440 NT_STATUS_OK
ReadX 10432 716800 4096 4096 NT_STATUS_OK
ReadX 10432 720896 61440 61440 NT_STATUS_OK
ReadX 10432 782336 4096 4096 NT_STATUS_OK
ReadX 10432 786432 61440 61440 NT_STATUS_OK
ReadX 10432 847872 4096 4096 NT_STATUS_OK
ReadX 10432 851968 61440 61440 NT_STATUS_OK
ReadX 10432 913408 4096 4096 NT_STATUS_OK
ReadX 10432 917504 61440 61440 NT_STATUS_OK
ReadX 10432 978944 4096 4096 NT_STATUS_OK
ReadX 10432 983040 61440 61440 NT_STATUS_OK
ReadX 10432 1044480 4096 4096 NT_STATUS_OK
ReadX 10432 1048576 61440 61440 NT_STATUS_OK
ReadX 10432 1110016 4096 4096 NT_STATUS_OK
ReadX 10432 1114112 61440 61440 NT_STATUS_OK
ReadX 10432 1175552 4096 4096 NT_STATUS_OK
ReadX 10432 1179648 61440 61440 NT_STATUS_OK
ReadX 10432 1241088 4096 4096 NT_STATUS_OK
ReadX 10432 1245184 61440 61440 NT_STATUS_OK
ReadX 10432 1306624 4096 4096 NT_STATUS_OK
ReadX 10432 1310720 61440 61440 NT_STATUS_OK
ReadX 10432 1372160 4096 4096 NT_STATUS_OK
ReadX 10432 1376256 61440 61440 NT_STATUS_OK
ReadX 10432 1437696 4096 4096 NT_STATUS_OK
ReadX 10432 1441792 61440 61440 NT_STATUS_OK
ReadX 10432 1503232 4096 4096 NT_STATUS_OK
ReadX 10432 1507328 61440 61440 NT_STATUS_OK
ReadX 10432 1568768 4096 4096 NT_STATUS_OK
ReadX 10432 1572864 61440 61440 NT_STATUS_OK
ReadX 10432 1634304 4096 4096 NT_STATUS_OK
ReadX 10432 1638400 61440 61440 NT_STATUS_OK
ReadX 10432 1699840 4096 4096 NT_STATUS_OK
ReadX 10432 1703936 61440 61440 NT_STATUS_OK
ReadX 10432 1765376 4096 4096 NT_STATUS_OK
ReadX 10432 1769472 61440 61440 NT_STATUS_OK
ReadX 10432 1830912 4096 4096 NT_STATUS_OK
ReadX 10432 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10439 NT_STATUS_OK
QUERY_FILE_INFORMATION 10439 1004 NT_STATUS_OK
WriteX 10439 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10439 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10441 NT_STATUS_OK
WriteX 10441 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10441 258 NT_STATUS_OK
WriteX 10441 0 491 491 NT_STATUS_OK
Close 10441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10439 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10445 NT_STATUS_OK
WriteX 10445 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10445 258 NT_STATUS_OK
WriteX 10445 0 543 543 NT_STATUS_OK
Close 10445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10459 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 1004 NT_STATUS_OK
WriteX 10459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 258 NT_STATUS_OK
WriteX 10459 0 2048 2048 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10460 NT_STATUS_OK
ReadX 10460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10465 NT_STATUS_OK
WriteX 10465 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10465 258 NT_STATUS_OK
WriteX 10465 0 2048 2048 NT_STATUS_OK
Close 10465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10471 NT_STATUS_OK
WriteX 10471 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10471 258 NT_STATUS_OK
WriteX 10471 0 2048 2048 NT_STATUS_OK
Close 10471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 2048 2048 NT_STATUS_OK
ReadX 10450 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10466 0 4096 4096 NT_STATUS_OK
WriteX 10450 0 8192 8192 NT_STATUS_OK
WriteX 10451 0 4096 4096 NT_STATUS_OK
WriteX 10452 0 4096 4096 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10476 NT_STATUS_OK
QUERY_FILE_INFORMATION 10476 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10478 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10483 NT_STATUS_OK
ReadX 10483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10496 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 1004 NT_STATUS_OK
WriteX 10496 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 258 NT_STATUS_OK
WriteX 10496 0 2048 2048 NT_STATUS_OK
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10497 0 4096 4096 NT_STATUS_OK
Flush 10497 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
Flush 10505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10497 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10499 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10507 NT_STATUS_OK
WriteX 10507 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10507 258 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10510 NT_STATUS_OK
WriteX 10510 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 258 NT_STATUS_OK
WriteX 10510 0 4096 4096 NT_STATUS_OK
Close 10510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10511 0 4096 4096 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10514 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10517 NT_STATUS_OK
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10518 NT_STATUS_OK
WriteX 10518 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10518 258 NT_STATUS_OK
WriteX 10518 0 2048 2048 NT_STATUS_OK
Close 10518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10533 NT_STATUS_OK
QUERY_FILE_INFORMATION 10533 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10531 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Close 10530 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10535 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10538 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10539 NT_STATUS_OK
ReadX 10539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10541 NT_STATUS_OK
ReadX 10541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10554 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10555 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 1004 NT_STATUS_OK
WriteX 10555 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 2048 2048 NT_STATUS_OK
Close 10555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10556 NT_STATUS_OK
ReadX 10556 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10557 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10559 NT_STATUS_OK
ReadX 10559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10560 NT_STATUS_OK
ReadX 10560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10567 NT_STATUS_OK
QUERY_FILE_INFORMATION 10567 1004 NT_STATUS_OK
WriteX 10567 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10567 258 NT_STATUS_OK
WriteX 10567 0 2048 2048 NT_STATUS_OK
Close 10567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10575 NT_STATUS_OK
QUERY_FILE_INFORMATION 10575 1004 NT_STATUS_OK
WriteX 10575 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10575 258 NT_STATUS_OK
WriteX 10575 0 2048 2048 NT_STATUS_OK
Close 10575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10576 NT_STATUS_OK
ReadX 10576 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
WriteX 10568 0 4096 4096 NT_STATUS_OK
Flush 10568 NT_STATUS_OK
WriteX 10576 0 4096 4096 NT_STATUS_OK
Flush 10576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10568 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10576 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10558 4096 16384 16384 NT_STATUS_OK
ReadX 10538 4096 16384 16384 NT_STATUS_OK
ReadX 10570 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10577 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 2048 2048 NT_STATUS_OK
WriteX 10578 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10579 NT_STATUS_OK
QUERY_FILE_INFORMATION 10579 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Close 10546 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10539 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Close 10541 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10581 NT_STATUS_OK
QUERY_FILE_INFORMATION 10581 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10583 NT_STATUS_OK
QUERY_FILE_INFORMATION 10583 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10590 NT_STATUS_OK
ReadX 10590 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10586 4096 16384 16384 NT_STATUS_OK
WriteX 10586 0 4096 4096 NT_STATUS_OK
WriteX 10587 0 4096 4096 NT_STATUS_OK
WriteX 10588 0 4096 4096 NT_STATUS_OK
WriteX 10589 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10591 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10593 NT_STATUS_OK
ReadX 10593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10594 NT_STATUS_OK
ReadX 10594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10597 NT_STATUS_OK
ReadX 10597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10599 NT_STATUS_OK
ReadX 10599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10604 NT_STATUS_OK
ReadX 10604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 8192 8192 NT_STATUS_OK
ReadX 10592 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10606 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10606 0 4096 4096 NT_STATUS_OK
ReadX 10606 4096 4096 4096 NT_STATUS_OK
ReadX 10606 8192 4096 4096 NT_STATUS_OK
WriteX 10592 0 4096 4096 NT_STATUS_OK
WriteX 10593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10607 0 4096 4096 NT_STATUS_OK
ReadX 10607 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10586 0 4096 4096 NT_STATUS_OK
WriteX 10587 0 4096 4096 NT_STATUS_OK
WriteX 10588 0 4096 4096 NT_STATUS_OK
WriteX 10589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10612 NT_STATUS_OK
QUERY_FILE_INFORMATION 10612 1004 NT_STATUS_OK
WriteX 10612 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10612 258 NT_STATUS_OK
WriteX 10612 0 2048 2048 NT_STATUS_OK
Close 10612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10613 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10613 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
ReadX 10615 4096 4096 4096 NT_STATUS_OK
WriteX 10615 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10613 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10617 NT_STATUS_OK
ReadX 10617 0 4096 4096 NT_STATUS_OK
ReadX 10617 4096 4096 4096 NT_STATUS_OK
WriteX 10617 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10618 NT_STATUS_OK
QUERY_FILE_INFORMATION 10618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Close 10590 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10599 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10604 NT_STATUS_OK
Close 10592 NT_STATUS_OK
Close 10593 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10594 NT_STATUS_OK
Close 10595 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10620 0 4096 4096 NT_STATUS_OK
ReadX 10620 4096 4096 4096 NT_STATUS_OK
ReadX 10620 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10623 NT_STATUS_OK
ReadX 10623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10624 NT_STATUS_OK
ReadX 10624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
ReadX 10621 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10638 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 1004 NT_STATUS_OK
WriteX 10638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 258 NT_STATUS_OK
WriteX 10638 0 2048 2048 NT_STATUS_OK
Close 10638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10639 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10644 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 1004 NT_STATUS_OK
WriteX 10644 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
WriteX 10644 0 2048 2048 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10645 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10628 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10646 NT_STATUS_OK
QUERY_FILE_INFORMATION 10646 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10621 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10623 NT_STATUS_OK
Close 10624 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10648 NT_STATUS_OK
QUERY_FILE_INFORMATION 10648 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 61440 4096 4096 NT_STATUS_OK
ReadX 10650 126976 4096 4096 NT_STATUS_OK
WriteX 10650 0 65536 65536 NT_STATUS_OK
WriteX 10650 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 61440 4096 4096 NT_STATUS_OK
ReadX 10651 126976 4096 4096 NT_STATUS_OK
ReadX 10651 192512 4096 4096 NT_STATUS_OK
ReadX 10651 258048 4096 4096 NT_STATUS_OK
WriteX 10651 0 65536 65536 NT_STATUS_OK
WriteX 10651 65536 65536 65536 NT_STATUS_OK
WriteX 10651 131072 65536 65536 NT_STATUS_OK
WriteX 10651 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 61440 4096 4096 NT_STATUS_OK
ReadX 10652 126976 4096 4096 NT_STATUS_OK
ReadX 10652 192512 4096 4096 NT_STATUS_OK
ReadX 10652 258048 4096 4096 NT_STATUS_OK
ReadX 10652 323584 4096 4096 NT_STATUS_OK
ReadX 10652 389120 4096 4096 NT_STATUS_OK
ReadX 10652 454656 4096 4096 NT_STATUS_OK
ReadX 10652 520192 4096 4096 NT_STATUS_OK
WriteX 10652 0 65536 65536 NT_STATUS_OK
WriteX 10652 65536 65536 65536 NT_STATUS_OK
WriteX 10652 131072 65536 65536 NT_STATUS_OK
WriteX 10652 196608 65536 65536 NT_STATUS_OK
WriteX 10652 262144 65536 65536 NT_STATUS_OK
WriteX 10652 327680 65536 65536 NT_STATUS_OK
WriteX 10652 393216 65536 65536 NT_STATUS_OK
WriteX 10652 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10653 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10653 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10653 8192 4096 4096 NT_STATUS_OK
ReadX 10653 12288 4096 4096 NT_STATUS_OK
ReadX 10653 16384 4096 4096 NT_STATUS_OK
ReadX 10653 20480 4096 4096 NT_STATUS_OK
ReadX 10653 24576 4096 4096 NT_STATUS_OK
ReadX 10653 28672 4096 4096 NT_STATUS_OK
ReadX 10653 32768 4096 4096 NT_STATUS_OK
ReadX 10653 36864 4096 4096 NT_STATUS_OK
ReadX 10653 40960 4096 4096 NT_STATUS_OK
ReadX 10653 45056 4096 4096 NT_STATUS_OK
ReadX 10653 49152 4096 4096 NT_STATUS_OK
ReadX 10653 53248 4096 4096 NT_STATUS_OK
ReadX 10653 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10653 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10654 NT_STATUS_OK
Close 10654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10656 NT_STATUS_OK
WriteX 10656 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10656 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10656 1004 NT_STATUS_OK
WriteX 10656 0 57088 57088 NT_STATUS_OK
WriteX 10656 0 4096 4096 NT_STATUS_OK
Flush 10656 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10657 NT_STATUS_OK
SET_FILE_INFORMATION 10657 1004 NT_STATUS_OK
Close 10657 NT_STATUS_OK
SET_FILE_INFORMATION 10656 1004 NT_STATUS_OK
WriteX 10656 0 4096 4096 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10660 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10661 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10661 1004 NT_STATUS_OK
WriteX 10661 0 51456 51456 NT_STATUS_OK
WriteX 10661 0 4096 4096 NT_STATUS_OK
Flush 10661 NT_STATUS_OK
SET_FILE_INFORMATION 10661 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10661 1004 NT_STATUS_OK
WriteX 10661 0 4096 4096 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Close 10660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10665 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10667 NT_STATUS_OK
Close 10667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10670 NT_STATUS_OK
WriteX 10670 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10670 258 NT_STATUS_OK
WriteX 10670 0 53077 53077 NT_STATUS_OK
Close 10670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10671 NT_STATUS_OK
WriteX 10671 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10671 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10671 1004 NT_STATUS_OK
WriteX 10671 0 65536 65536 NT_STATUS_OK
WriteX 10671 65536 1856 1856 NT_STATUS_OK
WriteX 10671 0 4096 4096 NT_STATUS_OK
Flush 10671 NT_STATUS_OK
SET_FILE_INFORMATION 10671 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10671 1004 NT_STATUS_OK
WriteX 10671 0 4096 4096 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10677 NT_STATUS_OK
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10680 NT_STATUS_OK
WriteX 10680 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10680 258 NT_STATUS_OK
WriteX 10680 0 7983 7983 NT_STATUS_OK
Close 10680 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10685 NT_STATUS_OK
WriteX 10685 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10685 258 NT_STATUS_OK
WriteX 10685 0 65536 65536 NT_STATUS_OK
WriteX 10685 65536 65536 65536 NT_STATUS_OK
WriteX 10685 131072 65536 65536 NT_STATUS_OK
WriteX 10685 196608 65536 65536 NT_STATUS_OK
WriteX 10685 262144 65536 65536 NT_STATUS_OK
WriteX 10685 327680 65536 65536 NT_STATUS_OK
WriteX 10685 393216 65536 65536 NT_STATUS_OK
WriteX 10685 458752 46731 46731 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10686 NT_STATUS_OK
WriteX 10686 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10686 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10675 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10686 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10686 1004 NT_STATUS_OK
WriteX 10686 0 65536 65536 NT_STATUS_OK
WriteX 10686 65536 22848 22848 NT_STATUS_OK
WriteX 10686 0 4096 4096 NT_STATUS_OK
Flush 10686 NT_STATUS_OK
SET_FILE_INFORMATION 10686 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10686 1004 NT_STATUS_OK
WriteX 10686 0 4096 4096 NT_STATUS_OK
Close 10686 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10688 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10690 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10691 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10691 1004 NT_STATUS_OK
ReadX 10691 8192 4096 4096 NT_STATUS_OK
ReadX 10691 12288 4096 4096 NT_STATUS_OK
ReadX 10691 16384 4096 4096 NT_STATUS_OK
ReadX 10691 20480 4096 4096 NT_STATUS_OK
ReadX 10691 24576 4096 4096 NT_STATUS_OK
ReadX 10691 28672 4096 4096 NT_STATUS_OK
ReadX 10691 32768 4096 4096 NT_STATUS_OK
ReadX 10691 36864 4096 4096 NT_STATUS_OK
ReadX 10691 40960 4096 4096 NT_STATUS_OK
ReadX 10691 45056 4096 4096 NT_STATUS_OK
ReadX 10691 49152 4096 4096 NT_STATUS_OK
ReadX 10691 53248 4096 4096 NT_STATUS_OK
ReadX 10691 57344 4096 4096 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 65536 4096 4096 NT_STATUS_OK
ReadX 10691 69632 4096 4096 NT_STATUS_OK
ReadX 10691 73728 4096 4096 NT_STATUS_OK
ReadX 10691 77824 4096 4096 NT_STATUS_OK
ReadX 10691 81920 4096 4096 NT_STATUS_OK
ReadX 10691 86016 4096 4096 NT_STATUS_OK
ReadX 10691 90112 4096 4096 NT_STATUS_OK
ReadX 10691 94208 4096 4096 NT_STATUS_OK
ReadX 10691 98304 4096 4096 NT_STATUS_OK
ReadX 10691 102400 4096 4096 NT_STATUS_OK
ReadX 10691 106496 4096 4096 NT_STATUS_OK
ReadX 10691 110592 4096 4096 NT_STATUS_OK
ReadX 10691 114688 4096 4096 NT_STATUS_OK
ReadX 10691 118784 4096 4096 NT_STATUS_OK
ReadX 10691 122880 4096 4096 NT_STATUS_OK
ReadX 10691 126976 4096 4096 NT_STATUS_OK
ReadX 10691 131072 4096 4096 NT_STATUS_OK
ReadX 10691 135168 4096 4096 NT_STATUS_OK
ReadX 10691 139264 4096 4096 NT_STATUS_OK
ReadX 10691 143360 4096 4096 NT_STATUS_OK
ReadX 10691 147456 4096 4096 NT_STATUS_OK
ReadX 10691 151552 4096 4096 NT_STATUS_OK
ReadX 10691 155648 4096 4096 NT_STATUS_OK
ReadX 10691 159744 4096 4096 NT_STATUS_OK
ReadX 10691 163840 4096 4096 NT_STATUS_OK
ReadX 10691 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10691 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10692 NT_STATUS_OK
Close 10692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10694 NT_STATUS_OK
WriteX 10694 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10694 258 NT_STATUS_OK
Close 10691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10695 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
Close 10695 NT_STATUS_OK
WriteX 10694 0 42388 42388 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
ReadX 10698 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10699 NT_STATUS_OK
WriteX 10699 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10699 258 NT_STATUS_OK
SET_FILE_INFORMATION 10699 1004 NT_STATUS_OK
WriteX 10699 0 42652 42652 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Close 10698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
ReadX 10703 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10705 NT_STATUS_OK
Close 10705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10708 NT_STATUS_OK
WriteX 10708 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10708 258 NT_STATUS_OK
WriteX 10708 0 65536 65536 NT_STATUS_OK
WriteX 10708 65536 49 49 NT_STATUS_OK
Close 10708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 61440 61440 NT_STATUS_OK
ReadX 10709 61440 4096 4096 NT_STATUS_OK
ReadX 10709 65536 61440 61440 NT_STATUS_OK
ReadX 10709 126976 4096 4096 NT_STATUS_OK
ReadX 10709 131072 61440 61440 NT_STATUS_OK
ReadX 10709 192512 4096 4096 NT_STATUS_OK
ReadX 10709 196608 61440 61440 NT_STATUS_OK
ReadX 10709 258048 4096 4096 NT_STATUS_OK
ReadX 10709 262144 61440 61440 NT_STATUS_OK
ReadX 10709 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 61440 61440 NT_STATUS_OK
ReadX 10710 61440 4096 4096 NT_STATUS_OK
ReadX 10710 65536 61440 61440 NT_STATUS_OK
ReadX 10710 126976 4096 4096 NT_STATUS_OK
ReadX 10710 131072 61440 61440 NT_STATUS_OK
ReadX 10710 192512 4096 4096 NT_STATUS_OK
ReadX 10710 196608 61440 61440 NT_STATUS_OK
ReadX 10710 258048 4096 4096 NT_STATUS_OK
ReadX 10710 262144 61440 61440 NT_STATUS_OK
ReadX 10710 323584 4096 4096 NT_STATUS_OK
ReadX 10710 327680 61440 61440 NT_STATUS_OK
ReadX 10710 389120 4096 4096 NT_STATUS_OK
ReadX 10710 393216 61440 61440 NT_STATUS_OK
ReadX 10710 454656 4096 4096 NT_STATUS_OK
ReadX 10710 458752 61440 61440 NT_STATUS_OK
ReadX 10710 520192 4096 4096 NT_STATUS_OK
ReadX 10710 524288 61440 61440 NT_STATUS_OK
ReadX 10710 585728 4096 4096 NT_STATUS_OK
ReadX 10710 589824 61440 61440 NT_STATUS_OK
ReadX 10710 651264 4096 4096 NT_STATUS_OK
ReadX 10710 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 61440 61440 NT_STATUS_OK
ReadX 10711 61440 4096 4096 NT_STATUS_OK
ReadX 10711 65536 61440 61440 NT_STATUS_OK
ReadX 10711 126976 4096 4096 NT_STATUS_OK
ReadX 10711 131072 61440 61440 NT_STATUS_OK
ReadX 10711 192512 4096 4096 NT_STATUS_OK
ReadX 10711 196608 61440 61440 NT_STATUS_OK
ReadX 10711 258048 4096 4096 NT_STATUS_OK
ReadX 10711 262144 61440 61440 NT_STATUS_OK
ReadX 10711 323584 4096 4096 NT_STATUS_OK
ReadX 10711 327680 61440 61440 NT_STATUS_OK
ReadX 10711 389120 4096 4096 NT_STATUS_OK
ReadX 10711 393216 61440 61440 NT_STATUS_OK
ReadX 10711 454656 4096 4096 NT_STATUS_OK
ReadX 10711 458752 61440 61440 NT_STATUS_OK
ReadX 10711 520192 4096 4096 NT_STATUS_OK
ReadX 10711 524288 61440 61440 NT_STATUS_OK
ReadX 10711 585728 4096 4096 NT_STATUS_OK
ReadX 10711 589824 61440 61440 NT_STATUS_OK
ReadX 10711 651264 4096 4096 NT_STATUS_OK
ReadX 10711 655360 61440 61440 NT_STATUS_OK
ReadX 10711 716800 4096 4096 NT_STATUS_OK
ReadX 10711 720896 61440 61440 NT_STATUS_OK
ReadX 10711 782336 4096 4096 NT_STATUS_OK
ReadX 10711 786432 61440 61440 NT_STATUS_OK
ReadX 10711 847872 4096 4096 NT_STATUS_OK
ReadX 10711 851968 61440 61440 NT_STATUS_OK
ReadX 10711 913408 4096 4096 NT_STATUS_OK
ReadX 10711 917504 61440 61440 NT_STATUS_OK
ReadX 10711 978944 4096 4096 NT_STATUS_OK
ReadX 10711 983040 61440 61440 NT_STATUS_OK
ReadX 10711 1044480 4096 4096 NT_STATUS_OK
ReadX 10711 1048576 61440 61440 NT_STATUS_OK
ReadX 10711 1110016 4096 4096 NT_STATUS_OK
ReadX 10711 1114112 61440 61440 NT_STATUS_OK
ReadX 10711 1175552 4096 4096 NT_STATUS_OK
ReadX 10711 1179648 61440 61440 NT_STATUS_OK
ReadX 10711 1241088 4096 4096 NT_STATUS_OK
ReadX 10711 1245184 61440 61440 NT_STATUS_OK
ReadX 10711 1306624 4096 4096 NT_STATUS_OK
ReadX 10711 1310720 61440 61440 NT_STATUS_OK
ReadX 10711 1372160 4096 4096 NT_STATUS_OK
ReadX 10711 1376256 61440 61440 NT_STATUS_OK
ReadX 10711 1437696 4096 4096 NT_STATUS_OK
ReadX 10711 1441792 61440 61440 NT_STATUS_OK
ReadX 10711 1503232 4096 4096 NT_STATUS_OK
ReadX 10711 1507328 61440 61440 NT_STATUS_OK
ReadX 10711 1568768 4096 4096 NT_STATUS_OK
ReadX 10711 1572864 61440 61440 NT_STATUS_OK
ReadX 10711 1634304 4096 4096 NT_STATUS_OK
ReadX 10711 1638400 61440 61440 NT_STATUS_OK
ReadX 10711 1699840 4096 4096 NT_STATUS_OK
ReadX 10711 1703936 61440 61440 NT_STATUS_OK
ReadX 10711 1765376 4096 4096 NT_STATUS_OK
ReadX 10711 1769472 61440 61440 NT_STATUS_OK
ReadX 10711 1830912 4096 4096 NT_STATUS_OK
ReadX 10711 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10713 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 1005 NT_STATUS_OK
ReadX 10713 2156 24 24 NT_STATUS_OK
ReadX 10713 2139 276 276 NT_STATUS_OK
ReadX 10713 2136 14 14 NT_STATUS_OK
ReadX 10713 2136 7 7 NT_STATUS_OK
ReadX 10713 2138 12 12 NT_STATUS_OK
ReadX 10713 2137 8 8 NT_STATUS_OK
ReadX 10713 2135 15 15 NT_STATUS_OK
ReadX 10713 0 16 16 NT_STATUS_OK
ReadX 10713 16 2048 2048 NT_STATUS_OK
ReadX 10713 2064 2048 2048 NT_STATUS_OK
ReadX 10713 257 2048 2048 NT_STATUS_OK
ReadX 10713 385 2048 2048 NT_STATUS_OK
ReadX 10713 513 2048 2048 NT_STATUS_OK
ReadX 10713 641 2048 2048 NT_STATUS_OK
ReadX 10713 769 2048 2048 NT_STATUS_OK
ReadX 10713 897 2048 2048 NT_STATUS_OK
ReadX 10713 1025 2048 2048 NT_STATUS_OK
ReadX 10713 1153 2048 2048 NT_STATUS_OK
ReadX 10713 1281 2048 2048 NT_STATUS_OK
ReadX 10713 1409 2048 2048 NT_STATUS_OK
ReadX 10713 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10711 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10718 NT_STATUS_OK
WriteX 10718 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 258 NT_STATUS_OK
WriteX 10718 0 10575 10575 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
Close 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10723 NT_STATUS_OK
LockX 10723 2147483538 1 NT_STATUS_OK
UnlockX 10723 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10723 1005 NT_STATUS_OK
ReadX 10723 0 512 512 NT_STATUS_OK
ReadX 10723 512 512 512 NT_STATUS_OK
ReadX 10723 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10723 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10723 1004 NT_STATUS_OK
Close 10723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10724 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 1005 NT_STATUS_OK
ReadX 10724 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10725 NT_STATUS_OK
LockX 10725 2147483538 1 NT_STATUS_OK
UnlockX 10725 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1005 NT_STATUS_OK
ReadX 10725 0 512 512 NT_STATUS_OK
ReadX 10725 512 512 512 NT_STATUS_OK
ReadX 10725 1024 512 512 NT_STATUS_OK
ReadX 10725 288 20 20 NT_STATUS_OK
ReadX 10725 308 2084 2084 NT_STATUS_OK
ReadX 10725 388 2084 2084 NT_STATUS_OK
ReadX 10725 388 2084 2084 NT_STATUS_OK
ReadX 10712 2157 1386 1386 NT_STATUS_OK
ReadX 10725 2472 399 399 NT_STATUS_OK
ReadX 10725 3072 1536 1536 NT_STATUS_OK
ReadX 10725 544 149 149 NT_STATUS_OK
ReadX 10725 693 485 485 NT_STATUS_OK
Close 10725 NT_STATUS_OK
ReadX 10712 2157 4096 4096 NT_STATUS_OK
ReadX 10712 6253 4096 4096 NT_STATUS_OK
ReadX 10712 10349 4096 4096 NT_STATUS_OK
ReadX 10712 14445 4096 4096 NT_STATUS_OK
ReadX 10712 18541 4096 4096 NT_STATUS_OK
ReadX 10712 22637 256 256 NT_STATUS_OK
ReadX 10712 22893 4096 4096 NT_STATUS_OK
ReadX 10712 26989 4096 4096 NT_STATUS_OK
ReadX 10712 31085 4096 4096 NT_STATUS_OK
ReadX 10712 35181 4096 4096 NT_STATUS_OK
ReadX 10712 39277 4096 4096 NT_STATUS_OK
ReadX 10712 43373 4096 4096 NT_STATUS_OK
ReadX 10712 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10712 2157 1024 1024 NT_STATUS_OK
ReadX 10712 1667 4688 4688 NT_STATUS_OK
ReadX 10712 6355 3516 3516 NT_STATUS_OK
ReadX 10712 9871 16384 16384 NT_STATUS_OK
ReadX 10712 26255 3771 3771 NT_STATUS_OK
ReadX 10712 30026 2048 2048 NT_STATUS_OK
ReadX 10712 32074 1024 1024 NT_STATUS_OK
ReadX 10712 33098 6652 6652 NT_STATUS_OK
ReadX 10712 39750 16384 16384 NT_STATUS_OK
ReadX 10712 56134 10496 10496 NT_STATUS_OK
ReadX 10712 66630 1784 1784 NT_STATUS_OK
ReadX 10712 68414 90 90 NT_STATUS_OK
ReadX 10712 68504 273 273 NT_STATUS_OK
ReadX 10712 68777 1600 1600 NT_STATUS_OK
ReadX 10712 70377 640 640 NT_STATUS_OK
ReadX 10712 71017 1280 1280 NT_STATUS_OK
ReadX 10712 72297 8464 8464 NT_STATUS_OK
ReadX 10712 80761 158 158 NT_STATUS_OK
ReadX 10712 80919 912 912 NT_STATUS_OK
ReadX 10712 81831 1980 1980 NT_STATUS_OK
ReadX 10712 83811 2256 2256 NT_STATUS_OK
ReadX 10712 86067 400 400 NT_STATUS_OK
ReadX 10712 86467 252 252 NT_STATUS_OK
ReadX 10712 86719 42 42 NT_STATUS_OK
ReadX 10712 86761 725 725 NT_STATUS_OK
ReadX 10712 2009 512 512 NT_STATUS_OK
ReadX 10712 3895 9 9 NT_STATUS_OK
ReadX 10712 3781 46 46 NT_STATUS_OK
ReadX 10712 4059 92 92 NT_STATUS_OK
ReadX 10712 3781 92 92 NT_STATUS_OK
ReadX 10712 3986 184 184 NT_STATUS_OK
ReadX 10712 3987 16384 16384 NT_STATUS_OK
ReadX 10712 3902 16384 16384 NT_STATUS_OK
ReadX 10712 3781 10240 10240 NT_STATUS_OK
ReadX 10712 3821 16384 16384 NT_STATUS_OK
ReadX 10712 3891 935 935 NT_STATUS_OK
ReadX 10712 4060 10240 10240 NT_STATUS_OK
ReadX 10712 4059 184 184 NT_STATUS_OK
ReadX 10712 256 184 184 NT_STATUS_OK
ReadX 10712 256 1026 1026 NT_STATUS_OK
ReadX 10712 3901 326 326 NT_STATUS_OK
ReadX 10712 3899 652 652 NT_STATUS_OK
ReadX 10712 256 2 2 NT_STATUS_OK
ReadX 10712 258 4948 4948 NT_STATUS_OK
Close 10712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10730 NT_STATUS_OK
WriteX 10730 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10730 258 NT_STATUS_OK
WriteX 10730 0 65536 65536 NT_STATUS_OK
WriteX 10730 65536 65536 65536 NT_STATUS_OK
WriteX 10730 131072 65536 65536 NT_STATUS_OK
WriteX 10730 196608 65536 65536 NT_STATUS_OK
WriteX 10730 262144 65536 65536 NT_STATUS_OK
WriteX 10730 327680 65536 65536 NT_STATUS_OK
WriteX 10730 393216 65536 65536 NT_STATUS_OK
WriteX 10730 458752 65536 65536 NT_STATUS_OK
WriteX 10730 524288 65536 65536 NT_STATUS_OK
WriteX 10730 589824 35257 35257 NT_STATUS_OK
Close 10730 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10732 NT_STATUS_OK
Close 10732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10735 NT_STATUS_OK
WriteX 10735 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10735 258 NT_STATUS_OK
WriteX 10735 0 65536 65536 NT_STATUS_OK
WriteX 10735 65536 65536 65536 NT_STATUS_OK
WriteX 10735 131072 65536 65536 NT_STATUS_OK
WriteX 10735 196608 65536 65536 NT_STATUS_OK
WriteX 10735 262144 65536 65536 NT_STATUS_OK
WriteX 10735 327680 65536 65536 NT_STATUS_OK
WriteX 10735 393216 65536 65536 NT_STATUS_OK
WriteX 10735 458752 65536 65536 NT_STATUS_OK
WriteX 10735 524288 65536 65536 NT_STATUS_OK
WriteX 10735 589824 57598 57598 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10737 NT_STATUS_OK
WriteX 10737 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10737 258 NT_STATUS_OK
WriteX 10737 0 12543 12543 NT_STATUS_OK
Flush 10737 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10743 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 1005 NT_STATUS_OK
ReadX 10743 1938 24 24 NT_STATUS_OK
ReadX 10743 1920 276 276 NT_STATUS_OK
ReadX 10743 1918 14 14 NT_STATUS_OK
ReadX 10743 1918 7 7 NT_STATUS_OK
ReadX 10743 1919 12 12 NT_STATUS_OK
ReadX 10743 1919 8 8 NT_STATUS_OK
ReadX 10743 1917 15 15 NT_STATUS_OK
ReadX 10743 0 16 16 NT_STATUS_OK
ReadX 10743 16 2048 2048 NT_STATUS_OK
ReadX 10743 2064 2048 2048 NT_STATUS_OK
ReadX 10743 257 2048 2048 NT_STATUS_OK
ReadX 10743 385 2048 2048 NT_STATUS_OK
ReadX 10743 513 2048 2048 NT_STATUS_OK
ReadX 10743 641 2048 2048 NT_STATUS_OK
ReadX 10743 769 2048 2048 NT_STATUS_OK
ReadX 10743 897 2048 2048 NT_STATUS_OK
ReadX 10743 1025 2048 2048 NT_STATUS_OK
ReadX 10743 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10748 NT_STATUS_OK
WriteX 10748 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10748 258 NT_STATUS_OK
WriteX 10748 0 11588 11588 NT_STATUS_OK
Flush 10748 NT_STATUS_OK
Close 10748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
Close 10743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10753 NT_STATUS_OK
WriteX 10753 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10753 258 NT_STATUS_OK
WriteX 10753 0 11615 11615 NT_STATUS_OK
Flush 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10755 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10759 NT_STATUS_OK
Close 10759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10762 NT_STATUS_OK
WriteX 10762 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 258 NT_STATUS_OK
WriteX 10762 0 65536 65536 NT_STATUS_OK
WriteX 10762 65536 16050 16050 NT_STATUS_OK
Close 10762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10742 1939 64 64 NT_STATUS_OK
ReadX 10742 128 248 248 NT_STATUS_OK
ReadX 10742 128 568 568 NT_STATUS_OK
ReadX 10742 3872 1536 1536 NT_STATUS_OK
ReadX 10742 3456 2560 2560 NT_STATUS_OK
ReadX 10742 3136 512 512 NT_STATUS_OK
ReadX 10742 2880 4096 4096 NT_STATUS_OK
ReadX 10742 3264 3072 3072 NT_STATUS_OK
ReadX 10742 320 4096 4096 NT_STATUS_OK
ReadX 10742 1024 4096 4096 NT_STATUS_OK
ReadX 10742 3616 4096 4096 NT_STATUS_OK
ReadX 10742 1939 64 64 NT_STATUS_OK
ReadX 10742 128 248 248 NT_STATUS_OK
ReadX 10742 128 608 608 NT_STATUS_OK
ReadX 10742 2858 1024 1024 NT_STATUS_OK
ReadX 10742 2810 4096 4096 NT_STATUS_OK
ReadX 10742 2826 4096 4096 NT_STATUS_OK
ReadX 10742 2580 2048 2048 NT_STATUS_OK
ReadX 10742 2800 2560 2560 NT_STATUS_OK
ReadX 10742 2100 4096 4096 NT_STATUS_OK
ReadX 10742 2084 4096 4096 NT_STATUS_OK
ReadX 10742 868 4096 4096 NT_STATUS_OK
ReadX 10742 2324 4096 4096 NT_STATUS_OK
ReadX 10742 884 4096 4096 NT_STATUS_OK
ReadX 10742 2604 1024 1024 NT_STATUS_OK
ReadX 10742 580 4096 4096 NT_STATUS_OK
ReadX 10742 596 4096 4096 NT_STATUS_OK
ReadX 10742 2752 4096 4096 NT_STATUS_OK
ReadX 10742 2842 1024 1024 NT_STATUS_OK
ReadX 10742 660 4096 4096 NT_STATUS_OK
ReadX 10742 2720 4096 4096 NT_STATUS_OK
ReadX 10742 2736 4096 4096 NT_STATUS_OK
ReadX 10742 628 4096 4096 NT_STATUS_OK
ReadX 10742 2704 4096 4096 NT_STATUS_OK
ReadX 10742 1556 4096 4096 NT_STATUS_OK
ReadX 10742 576 4096 4096 NT_STATUS_OK
ReadX 10742 3168 1536 1536 NT_STATUS_OK
ReadX 10742 832 4096 4096 NT_STATUS_OK
ReadX 10742 1088 4096 4096 NT_STATUS_OK
ReadX 10742 1344 4096 4096 NT_STATUS_OK
ReadX 10742 1600 4096 4096 NT_STATUS_OK
ReadX 10742 1856 4096 4096 NT_STATUS_OK
ReadX 10742 2112 4096 4096 NT_STATUS_OK
ReadX 10742 1892 4096 4096 NT_STATUS_OK
ReadX 10742 820 4096 4096 NT_STATUS_OK
ReadX 10742 788 4096 4096 NT_STATUS_OK
ReadX 10742 1604 4096 4096 NT_STATUS_OK
ReadX 10742 3648 4096 4096 NT_STATUS_OK
ReadX 10742 2608 4096 4096 NT_STATUS_OK
ReadX 10742 548 4096 4096 NT_STATUS_OK
ReadX 10742 740 4096 4096 NT_STATUS_OK
ReadX 10742 1344 4096 4096 NT_STATUS_OK
ReadX 10742 3392 4096 4096 NT_STATUS_OK
ReadX 10742 3904 4096 4096 NT_STATUS_OK
ReadX 10742 644 4096 4096 NT_STATUS_OK
ReadX 10742 676 4096 4096 NT_STATUS_OK
ReadX 10742 2688 4096 4096 NT_STATUS_OK
ReadX 10742 320 4096 4096 NT_STATUS_OK
ReadX 10742 900 4096 4096 NT_STATUS_OK
ReadX 10742 1908 4096 4096 NT_STATUS_OK
ReadX 10742 852 4096 4096 NT_STATUS_OK
ReadX 10742 724 4096 4096 NT_STATUS_OK
ReadX 10742 2292 4096 4096 NT_STATUS_OK
ReadX 10742 612 4096 4096 NT_STATUS_OK
ReadX 10742 388 4096 4096 NT_STATUS_OK
ReadX 10742 2368 4096 4096 NT_STATUS_OK
ReadX 10742 2624 4096 4096 NT_STATUS_OK
ReadX 10742 500 4096 4096 NT_STATUS_OK
ReadX 10742 356 4096 4096 NT_STATUS_OK
ReadX 10742 1024 4096 4096 NT_STATUS_OK
ReadX 10742 576 4096 4096 NT_STATUS_OK
ReadX 10742 340 4096 4096 NT_STATUS_OK
ReadX 10742 420 4096 4096 NT_STATUS_OK
ReadX 10742 1600 4096 4096 NT_STATUS_OK
ReadX 10742 404 4096 4096 NT_STATUS_OK
ReadX 10742 1428 4096 4096 NT_STATUS_OK
ReadX 10742 2656 4096 4096 NT_STATUS_OK
ReadX 10742 2624 4096 4096 NT_STATUS_OK
ReadX 10742 452 4096 4096 NT_STATUS_OK
ReadX 10742 692 4096 4096 NT_STATUS_OK
ReadX 10742 564 4096 4096 NT_STATUS_OK
ReadX 10742 372 4096 4096 NT_STATUS_OK
ReadX 10742 468 4096 4096 NT_STATUS_OK
ReadX 10742 484 4096 4096 NT_STATUS_OK
ReadX 10742 1088 4096 4096 NT_STATUS_OK
ReadX 10742 1924 4096 4096 NT_STATUS_OK
ReadX 10742 2768 4096 4096 NT_STATUS_OK
ReadX 10742 832 4096 4096 NT_STATUS_OK
ReadX 10742 836 4096 4096 NT_STATUS_OK
ReadX 10742 1856 4096 4096 NT_STATUS_OK
ReadX 10742 2640 4096 4096 NT_STATUS_OK
ReadX 10742 436 4096 4096 NT_STATUS_OK
ReadX 10742 1828 4096 4096 NT_STATUS_OK
ReadX 10742 804 4096 4096 NT_STATUS_OK
ReadX 10742 1860 4096 4096 NT_STATUS_OK
ReadX 10742 1812 4096 4096 NT_STATUS_OK
ReadX 10742 756 4096 4096 NT_STATUS_OK
ReadX 10742 1636 4096 4096 NT_STATUS_OK
ReadX 10742 772 4096 4096 NT_STATUS_OK
ReadX 10742 2036 4096 4096 NT_STATUS_OK
ReadX 10742 1220 4096 4096 NT_STATUS_OK
ReadX 10742 1652 4096 4096 NT_STATUS_OK
ReadX 10742 2588 4096 4096 NT_STATUS_OK
ReadX 10742 916 4096 4096 NT_STATUS_OK
ReadX 10742 260 4096 4096 NT_STATUS_OK
ReadX 10742 932 4096 4096 NT_STATUS_OK
ReadX 10742 2624 4096 4096 NT_STATUS_OK
ReadX 10742 308 4096 4096 NT_STATUS_OK
ReadX 10742 292 4096 4096 NT_STATUS_OK
ReadX 10742 1140 4096 4096 NT_STATUS_OK
ReadX 10742 276 4096 4096 NT_STATUS_OK
ReadX 10742 2020 4096 4096 NT_STATUS_OK
ReadX 10742 2880 4096 4096 NT_STATUS_OK
ReadX 10742 516 4096 4096 NT_STATUS_OK
ReadX 10742 1844 4096 4096 NT_STATUS_OK
ReadX 10742 1124 4096 4096 NT_STATUS_OK
ReadX 10742 3136 4096 4096 NT_STATUS_OK
ReadX 10742 324 4096 4096 NT_STATUS_OK
ReadX 10742 1156 4096 4096 NT_STATUS_OK
ReadX 10742 1172 4096 4096 NT_STATUS_OK
ReadX 10742 2112 4096 4096 NT_STATUS_OK
ReadX 10742 2368 4096 4096 NT_STATUS_OK
ReadX 10742 964 4096 4096 NT_STATUS_OK
ReadX 10742 980 4096 4096 NT_STATUS_OK
ReadX 10742 1012 4096 4096 NT_STATUS_OK
ReadX 10742 532 4096 4096 NT_STATUS_OK
ReadX 10742 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10742 1620 4096 4096 NT_STATUS_OK
ReadX 10742 1604 4096 4096 NT_STATUS_OK
ReadX 10742 2116 4096 4096 NT_STATUS_OK
ReadX 10742 2132 4096 4096 NT_STATUS_OK
ReadX 10742 2148 4096 4096 NT_STATUS_OK
ReadX 10742 2276 4096 4096 NT_STATUS_OK
ReadX 10742 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10767 NT_STATUS_OK
QUERY_FILE_INFORMATION 10722 1004 NT_STATUS_OK
Close 10722 NT_STATUS_OK
WriteX 10767 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10767 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 1004 NT_STATUS_OK
Close 10724 NT_STATUS_OK
WriteX 10767 0 65536 65536 NT_STATUS_OK
WriteX 10767 65536 64850 64850 NT_STATUS_OK
Close 10767 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10769 NT_STATUS_OK
WriteX 10769 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
ReadX 10742 2068 4096 4096 NT_STATUS_OK
ReadX 10742 1588 4096 4096 NT_STATUS_OK
ReadX 10742 1572 4096 4096 NT_STATUS_OK
WriteX 10769 0 18630 18630 NT_STATUS_OK
Flush 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10742 612 4096 4096 NT_STATUS_OK
ReadX 10742 564 4096 4096 NT_STATUS_OK
ReadX 10742 1876 4096 4096 NT_STATUS_OK
ReadX 10742 628 4096 4096 NT_STATUS_OK
ReadX 10742 740 4096 4096 NT_STATUS_OK
ReadX 10742 724 4096 4096 NT_STATUS_OK
ReadX 10742 644 4096 4096 NT_STATUS_OK
ReadX 10742 2324 4096 4096 NT_STATUS_OK
ReadX 10742 660 4096 4096 NT_STATUS_OK
ReadX 10742 852 4096 4096 NT_STATUS_OK
ReadX 10742 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10742 2368 4096 4096 NT_STATUS_OK
ReadX 10742 1024 4096 4096 NT_STATUS_OK
ReadX 10742 320 4096 4096 NT_STATUS_OK
ReadX 10742 580 4096 4096 NT_STATUS_OK
ReadX 10742 3136 512 512 NT_STATUS_OK
ReadX 10742 2880 4096 4096 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10774 NT_STATUS_OK
ReadX 10774 61440 4096 4096 NT_STATUS_OK
ReadX 10774 126976 4096 4096 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 61440 4096 4096 NT_STATUS_OK
ReadX 10775 126976 4096 4096 NT_STATUS_OK
ReadX 10775 192512 4096 4096 NT_STATUS_OK
ReadX 10775 258048 4096 4096 NT_STATUS_OK
WriteX 10775 0 65536 65536 NT_STATUS_OK
WriteX 10775 65536 65536 65536 NT_STATUS_OK
WriteX 10775 131072 65536 65536 NT_STATUS_OK
WriteX 10775 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 61440 4096 4096 NT_STATUS_OK
ReadX 10776 126976 4096 4096 NT_STATUS_OK
ReadX 10776 192512 4096 4096 NT_STATUS_OK
ReadX 10776 258048 4096 4096 NT_STATUS_OK
ReadX 10776 323584 4096 4096 NT_STATUS_OK
ReadX 10776 389120 4096 4096 NT_STATUS_OK
ReadX 10776 454656 4096 4096 NT_STATUS_OK
ReadX 10776 520192 4096 4096 NT_STATUS_OK
WriteX 10776 0 65536 65536 NT_STATUS_OK
WriteX 10776 65536 65536 65536 NT_STATUS_OK
WriteX 10776 131072 65536 65536 NT_STATUS_OK
WriteX 10776 196608 65536 65536 NT_STATUS_OK
WriteX 10776 262144 65536 65536 NT_STATUS_OK
WriteX 10776 327680 65536 65536 NT_STATUS_OK
WriteX 10776 393216 65536 65536 NT_STATUS_OK
WriteX 10776 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10779 NT_STATUS_OK
WriteX 10779 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10779 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10777 0 8192 8192 NT_STATUS_OK
Flush 10777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10777 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10777 0 8192 8192 NT_STATUS_OK
Flush 10777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10777 0 8192 8192 NT_STATUS_OK
Flush 10777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10777 0 8192 8192 NT_STATUS_OK
Flush 10777 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Close 10775 NT_STATUS_OK
Close 10776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10784 NT_STATUS_OK
WriteX 10784 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10784 258 NT_STATUS_OK
WriteX 10784 0 62591 62591 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10786 NT_STATUS_OK
Close 10786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10789 NT_STATUS_OK
WriteX 10789 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10789 258 NT_STATUS_OK
WriteX 10789 0 10845 10845 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10791 NT_STATUS_OK
Close 10791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10794 NT_STATUS_OK
WriteX 10794 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10794 258 NT_STATUS_OK
WriteX 10794 0 30118 30118 NT_STATUS_OK
Close 10794 NT_STATUS_OK
WriteX 10777 0 4096 4096 NT_STATUS_OK
WriteX 10779 0 64 64 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 61440 61440 NT_STATUS_OK
ReadX 10796 61440 4096 4096 NT_STATUS_OK
ReadX 10796 65536 61440 61440 NT_STATUS_OK
ReadX 10796 126976 4096 4096 NT_STATUS_OK
ReadX 10796 131072 61440 61440 NT_STATUS_OK
ReadX 10796 192512 4096 4096 NT_STATUS_OK
ReadX 10796 196608 61440 61440 NT_STATUS_OK
ReadX 10796 258048 4096 4096 NT_STATUS_OK
ReadX 10796 262144 61440 61440 NT_STATUS_OK
ReadX 10796 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 61440 61440 NT_STATUS_OK
ReadX 10797 61440 4096 4096 NT_STATUS_OK
ReadX 10797 65536 61440 61440 NT_STATUS_OK
ReadX 10797 126976 4096 4096 NT_STATUS_OK
ReadX 10797 131072 61440 61440 NT_STATUS_OK
ReadX 10797 192512 4096 4096 NT_STATUS_OK
ReadX 10797 196608 61440 61440 NT_STATUS_OK
ReadX 10797 258048 4096 4096 NT_STATUS_OK
ReadX 10797 262144 61440 61440 NT_STATUS_OK
ReadX 10797 323584 4096 4096 NT_STATUS_OK
ReadX 10797 327680 61440 61440 NT_STATUS_OK
ReadX 10797 389120 4096 4096 NT_STATUS_OK
ReadX 10797 393216 61440 61440 NT_STATUS_OK
ReadX 10797 454656 4096 4096 NT_STATUS_OK
ReadX 10797 458752 61440 61440 NT_STATUS_OK
ReadX 10797 520192 4096 4096 NT_STATUS_OK
ReadX 10797 524288 61440 61440 NT_STATUS_OK
ReadX 10797 585728 4096 4096 NT_STATUS_OK
ReadX 10797 589824 61440 61440 NT_STATUS_OK
ReadX 10797 651264 4096 4096 NT_STATUS_OK
ReadX 10797 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 61440 61440 NT_STATUS_OK
ReadX 10798 61440 4096 4096 NT_STATUS_OK
ReadX 10798 65536 61440 61440 NT_STATUS_OK
ReadX 10798 126976 4096 4096 NT_STATUS_OK
ReadX 10798 131072 61440 61440 NT_STATUS_OK
ReadX 10798 192512 4096 4096 NT_STATUS_OK
ReadX 10798 196608 61440 61440 NT_STATUS_OK
ReadX 10798 258048 4096 4096 NT_STATUS_OK
ReadX 10798 262144 61440 61440 NT_STATUS_OK
ReadX 10798 323584 4096 4096 NT_STATUS_OK
ReadX 10798 327680 61440 61440 NT_STATUS_OK
ReadX 10798 389120 4096 4096 NT_STATUS_OK
ReadX 10798 393216 61440 61440 NT_STATUS_OK
ReadX 10798 454656 4096 4096 NT_STATUS_OK
ReadX 10798 458752 61440 61440 NT_STATUS_OK
ReadX 10798 520192 4096 4096 NT_STATUS_OK
ReadX 10798 524288 61440 61440 NT_STATUS_OK
ReadX 10798 585728 4096 4096 NT_STATUS_OK
ReadX 10798 589824 61440 61440 NT_STATUS_OK
ReadX 10798 651264 4096 4096 NT_STATUS_OK
ReadX 10798 655360 61440 61440 NT_STATUS_OK
ReadX 10798 716800 4096 4096 NT_STATUS_OK
ReadX 10798 720896 61440 61440 NT_STATUS_OK
ReadX 10798 782336 4096 4096 NT_STATUS_OK
ReadX 10798 786432 61440 61440 NT_STATUS_OK
ReadX 10798 847872 4096 4096 NT_STATUS_OK
ReadX 10798 851968 61440 61440 NT_STATUS_OK
ReadX 10798 913408 4096 4096 NT_STATUS_OK
ReadX 10798 917504 61440 61440 NT_STATUS_OK
ReadX 10798 978944 4096 4096 NT_STATUS_OK
ReadX 10798 983040 61440 61440 NT_STATUS_OK
ReadX 10798 1044480 4096 4096 NT_STATUS_OK
ReadX 10798 1048576 61440 61440 NT_STATUS_OK
ReadX 10798 1110016 4096 4096 NT_STATUS_OK
ReadX 10798 1114112 61440 61440 NT_STATUS_OK
ReadX 10798 1175552 4096 4096 NT_STATUS_OK
ReadX 10798 1179648 61440 61440 NT_STATUS_OK
ReadX 10798 1241088 4096 4096 NT_STATUS_OK
ReadX 10798 1245184 61440 61440 NT_STATUS_OK
ReadX 10798 1306624 4096 4096 NT_STATUS_OK
ReadX 10798 1310720 61440 61440 NT_STATUS_OK
ReadX 10798 1372160 4096 4096 NT_STATUS_OK
ReadX 10798 1376256 61440 61440 NT_STATUS_OK
ReadX 10798 1437696 4096 4096 NT_STATUS_OK
ReadX 10798 1441792 61440 61440 NT_STATUS_OK
ReadX 10798 1503232 4096 4096 NT_STATUS_OK
ReadX 10798 1507328 61440 61440 NT_STATUS_OK
ReadX 10798 1568768 4096 4096 NT_STATUS_OK
ReadX 10798 1572864 61440 61440 NT_STATUS_OK
ReadX 10798 1634304 4096 4096 NT_STATUS_OK
ReadX 10798 1638400 61440 61440 NT_STATUS_OK
ReadX 10798 1699840 4096 4096 NT_STATUS_OK
ReadX 10798 1703936 61440 61440 NT_STATUS_OK
ReadX 10798 1765376 4096 4096 NT_STATUS_OK
ReadX 10798 1769472 61440 61440 NT_STATUS_OK
ReadX 10798 1830912 4096 4096 NT_STATUS_OK
ReadX 10798 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10797 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
ReadX 10803 4096 4096 4096 NT_STATUS_OK
ReadX 10803 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10804 NT_STATUS_OK
Close 10804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10806 NT_STATUS_OK
ReadX 10806 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10807 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10806 NT_STATUS_OK
Close 10807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 8192 8192 NT_STATUS_OK
ReadX 10811 8192 8192 8192 NT_STATUS_OK
ReadX 10811 16384 8192 8192 NT_STATUS_OK
ReadX 10811 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10816 NT_STATUS_OK
WriteX 10816 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 258 NT_STATUS_OK
WriteX 10816 0 10438 10438 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10820 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10822 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10824 NT_STATUS_OK
Close 10824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
ReadX 10825 4096 4096 4096 NT_STATUS_OK
ReadX 10825 8192 4096 4096 NT_STATUS_OK
ReadX 10825 12288 8192 8192 NT_STATUS_OK
ReadX 10825 20480 8192 8192 NT_STATUS_OK
ReadX 10825 28672 8192 8192 NT_STATUS_OK
ReadX 10825 36864 8192 8192 NT_STATUS_OK
ReadX 10825 45056 8192 8192 NT_STATUS_OK
ReadX 10825 53248 8192 8192 NT_STATUS_OK
ReadX 10825 61440 8192 8192 NT_STATUS_OK
ReadX 10825 69632 8192 8192 NT_STATUS_OK
ReadX 10825 77824 8192 8192 NT_STATUS_OK
ReadX 10825 86016 8192 8192 NT_STATUS_OK
ReadX 10825 94208 8192 8192 NT_STATUS_OK
ReadX 10825 102400 8192 8192 NT_STATUS_OK
ReadX 10825 110592 8192 8192 NT_STATUS_OK
ReadX 10825 118784 8192 8192 NT_STATUS_OK
ReadX 10825 126976 8192 8192 NT_STATUS_OK
ReadX 10825 135168 8192 8192 NT_STATUS_OK
ReadX 10825 143360 8192 8192 NT_STATUS_OK
ReadX 10825 151552 8192 8192 NT_STATUS_OK
ReadX 10825 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10830 NT_STATUS_OK
WriteX 10830 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10830 258 NT_STATUS_OK
WriteX 10830 0 28489 28489 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10831 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10833 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10834 NT_STATUS_OK
Close 10834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 8192 8192 NT_STATUS_OK
ReadX 10837 8192 8192 8192 NT_STATUS_OK
ReadX 10837 16384 8192 8192 NT_STATUS_OK
ReadX 10837 24576 8192 8192 NT_STATUS_OK
ReadX 10837 32768 16384 16384 NT_STATUS_OK
ReadX 10837 49152 8192 8192 NT_STATUS_OK
ReadX 10837 57344 8192 8192 NT_STATUS_OK
ReadX 10837 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10839 NT_STATUS_OK
Close 10839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10842 NT_STATUS_OK
WriteX 10842 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10842 258 NT_STATUS_OK
WriteX 10842 0 29253 29253 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10843 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10849 NT_STATUS_OK
WriteX 10849 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10849 258 NT_STATUS_OK
WriteX 10849 0 30183 30183 NT_STATUS_OK
Close 10849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10852 NT_STATUS_OK
WriteX 10852 0 510 510 NT_STATUS_OK
WriteX 10852 510 512 512 NT_STATUS_OK
WriteX 10852 1022 510 510 NT_STATUS_OK
WriteX 10852 1532 510 510 NT_STATUS_OK
WriteX 10852 2042 168 168 NT_STATUS_OK
Close 10852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 61440 4096 4096 NT_STATUS_OK
ReadX 10856 126976 4096 4096 NT_STATUS_OK
WriteX 10856 0 65536 65536 NT_STATUS_OK
WriteX 10856 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 61440 4096 4096 NT_STATUS_OK
ReadX 10857 126976 4096 4096 NT_STATUS_OK
ReadX 10857 192512 4096 4096 NT_STATUS_OK
ReadX 10857 258048 4096 4096 NT_STATUS_OK
WriteX 10857 0 65536 65536 NT_STATUS_OK
WriteX 10857 65536 65536 65536 NT_STATUS_OK
WriteX 10857 131072 65536 65536 NT_STATUS_OK
WriteX 10857 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10858 NT_STATUS_OK
ReadX 10858 61440 4096 4096 NT_STATUS_OK
ReadX 10858 126976 4096 4096 NT_STATUS_OK
ReadX 10858 192512 4096 4096 NT_STATUS_OK
ReadX 10858 258048 4096 4096 NT_STATUS_OK
ReadX 10858 323584 4096 4096 NT_STATUS_OK
ReadX 10858 389120 4096 4096 NT_STATUS_OK
ReadX 10858 454656 4096 4096 NT_STATUS_OK
ReadX 10858 520192 4096 4096 NT_STATUS_OK
WriteX 10858 0 65536 65536 NT_STATUS_OK
WriteX 10858 65536 65536 65536 NT_STATUS_OK
WriteX 10858 131072 65536 65536 NT_STATUS_OK
WriteX 10858 196608 65536 65536 NT_STATUS_OK
WriteX 10858 262144 65536 65536 NT_STATUS_OK
WriteX 10858 327680 65536 65536 NT_STATUS_OK
WriteX 10858 393216 65536 65536 NT_STATUS_OK
WriteX 10858 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10859 NT_STATUS_OK
Close 10859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10861 NT_STATUS_OK
Close 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10868 NT_STATUS_OK
Close 10868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10874 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10877 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10883 NT_STATUS_OK
Close 10883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10888 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10893 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10908 NT_STATUS_OK
Close 10908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10913 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10921 NT_STATUS_OK
Close 10921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10924 NT_STATUS_OK
Close 10924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10927 NT_STATUS_OK
WriteX 10927 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10927 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10927 0 65536 65536 NT_STATUS_OK
WriteX 10927 65536 65536 65536 NT_STATUS_OK
WriteX 10927 131072 65536 65536 NT_STATUS_OK
WriteX 10927 196608 65536 65536 NT_STATUS_OK
WriteX 10927 262144 26634 26634 NT_STATUS_OK
Close 10927 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10933 NT_STATUS_OK
Close 10933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
ReadX 10935 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10936 NT_STATUS_OK
Close 10936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10943 NT_STATUS_OK
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10945 NT_STATUS_OK
Close 10945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10949 NT_STATUS_OK
Close 10949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10954 NT_STATUS_OK
Close 10954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10973 NT_STATUS_OK
Close 10973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10978 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10983 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10992 NT_STATUS_OK
Close 10992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
Close 11028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11059 0 4096 4096 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
ReadX 11061 4096 4096 4096 NT_STATUS_OK
ReadX 11061 8192 4096 4096 NT_STATUS_OK
ReadX 11061 12288 4096 4096 NT_STATUS_OK
ReadX 11061 16384 4096 4096 NT_STATUS_OK
ReadX 11061 20480 4096 4096 NT_STATUS_OK
ReadX 11061 24576 4096 4096 NT_STATUS_OK
ReadX 11061 28672 4096 4096 NT_STATUS_OK
ReadX 11061 32768 4096 4096 NT_STATUS_OK
ReadX 11061 36864 4096 4096 NT_STATUS_OK
ReadX 11061 40960 4096 4096 NT_STATUS_OK
ReadX 11061 45056 4096 4096 NT_STATUS_OK
ReadX 11061 49152 4096 4096 NT_STATUS_OK
ReadX 11061 53248 4096 4096 NT_STATUS_OK
ReadX 11061 57344 4096 4096 NT_STATUS_OK
ReadX 11061 61440 4096 4096 NT_STATUS_OK
ReadX 11061 65536 4096 4096 NT_STATUS_OK
ReadX 11061 69632 4096 4096 NT_STATUS_OK
ReadX 11061 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11061 1004 NT_STATUS_OK
WriteX 11061 0 4096 4096 NT_STATUS_OK
Close 11061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11062 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
Close 11062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11067 NT_STATUS_OK
WriteX 11067 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 258 NT_STATUS_OK
WriteX 11067 0 65536 65536 NT_STATUS_OK
WriteX 11067 65536 19979 19979 NT_STATUS_OK
Close 11067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
WriteX 11068 0 4096 4096 NT_STATUS_OK
Flush 11068 NT_STATUS_OK
WriteX 11068 0 4096 4096 NT_STATUS_OK
Flush 11068 NT_STATUS_OK
QUERY_FILE_INFORMATION 11068 1004 NT_STATUS_OK
WriteX 11068 0 4096 4096 NT_STATUS_OK
Flush 11068 NT_STATUS_OK
WriteX 11068 0 4096 4096 NT_STATUS_OK
Flush 11068 NT_STATUS_OK
WriteX 11068 0 4096 4096 NT_STATUS_OK
Flush 11068 NT_STATUS_OK
SET_FILE_INFORMATION 11068 1004 NT_STATUS_OK
WriteX 11068 0 4096 4096 NT_STATUS_OK
Flush 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
Close 11069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
Close 11071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 4096 4096 NT_STATUS_OK
Close 11072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
WriteX 11073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11079 NT_STATUS_OK
WriteX 11079 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
WriteX 11079 0 65536 65536 NT_STATUS_OK
WriteX 11079 65536 17654 17654 NT_STATUS_OK
Close 11079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 4096 4096 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
QUERY_FILE_INFORMATION 11080 1004 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
SET_FILE_INFORMATION 11080 1004 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
Close 11080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11081 NT_STATUS_OK
SET_FILE_INFORMATION 11081 1004 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 4096 4096 NT_STATUS_OK
ReadX 11085 4096 4096 4096 NT_STATUS_OK
ReadX 11085 8192 4096 4096 NT_STATUS_OK
ReadX 11085 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11085 16384 4096 4096 NT_STATUS_OK
ReadX 11085 20480 4096 4096 NT_STATUS_OK
ReadX 11085 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 4096 4096 NT_STATUS_OK
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
Close 11087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11088 NT_STATUS_OK
ReadX 11088 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11091 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11094 NT_STATUS_OK
WriteX 11094 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 258 NT_STATUS_OK
WriteX 11094 0 65536 65536 NT_STATUS_OK
WriteX 11094 65536 19490 19490 NT_STATUS_OK
Close 11094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
WriteX 11095 0 4096 4096 NT_STATUS_OK
Flush 11095 NT_STATUS_OK
WriteX 11095 0 4096 4096 NT_STATUS_OK
Flush 11095 NT_STATUS_OK
QUERY_FILE_INFORMATION 11095 1004 NT_STATUS_OK
WriteX 11095 0 4096 4096 NT_STATUS_OK
Flush 11095 NT_STATUS_OK
WriteX 11095 0 4096 4096 NT_STATUS_OK
Flush 11095 NT_STATUS_OK
WriteX 11095 0 4096 4096 NT_STATUS_OK
Flush 11095 NT_STATUS_OK
SET_FILE_INFORMATION 11095 1004 NT_STATUS_OK
WriteX 11095 0 4096 4096 NT_STATUS_OK
Flush 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11096 NT_STATUS_OK
SET_FILE_INFORMATION 11096 1004 NT_STATUS_OK
Close 11096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11100 0 4096 4096 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
ReadX 11102 4096 4096 4096 NT_STATUS_OK
ReadX 11102 8192 4096 4096 NT_STATUS_OK
ReadX 11102 12288 4096 4096 NT_STATUS_OK
ReadX 11102 16384 4096 4096 NT_STATUS_OK
ReadX 11102 20480 4096 4096 NT_STATUS_OK
ReadX 11102 24576 4096 4096 NT_STATUS_OK
ReadX 11102 28672 4096 4096 NT_STATUS_OK
ReadX 11102 32768 4096 4096 NT_STATUS_OK
ReadX 11102 36864 4096 4096 NT_STATUS_OK
ReadX 11102 40960 4096 4096 NT_STATUS_OK
ReadX 11102 45056 4096 4096 NT_STATUS_OK
ReadX 11102 49152 4096 4096 NT_STATUS_OK
ReadX 11102 53248 4096 4096 NT_STATUS_OK
ReadX 11102 57344 4096 4096 NT_STATUS_OK
ReadX 11102 61440 4096 4096 NT_STATUS_OK
ReadX 11102 65536 4096 4096 NT_STATUS_OK
ReadX 11102 69632 4096 4096 NT_STATUS_OK
ReadX 11102 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11102 1004 NT_STATUS_OK
WriteX 11102 0 4096 4096 NT_STATUS_OK
Close 11102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11103 NT_STATUS_OK
SET_FILE_INFORMATION 11103 1004 NT_STATUS_OK
Close 11103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11105 NT_STATUS_OK
Close 11105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11108 NT_STATUS_OK
WriteX 11108 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 258 NT_STATUS_OK
WriteX 11108 0 65536 65536 NT_STATUS_OK
WriteX 11108 65536 8866 8866 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 4096 4096 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
Flush 11109 NT_STATUS_OK
SET_FILE_INFORMATION 11109 1004 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
Flush 11109 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 4096 4096 NT_STATUS_OK
Close 11112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11113 1004 NT_STATUS_OK
WriteX 11113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11114 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11113 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11116 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11119 NT_STATUS_OK
WriteX 11119 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 258 NT_STATUS_OK
WriteX 11119 0 65536 65536 NT_STATUS_OK
WriteX 11119 65536 9298 9298 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
SET_FILE_INFORMATION 11120 1004 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11121 NT_STATUS_OK
SET_FILE_INFORMATION 11121 1004 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11127 4096 4096 4096 NT_STATUS_OK
ReadX 11127 8192 4096 4096 NT_STATUS_OK
ReadX 11127 12288 4096 4096 NT_STATUS_OK
ReadX 11127 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
Close 11129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11130 1004 NT_STATUS_OK
WriteX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11131 NT_STATUS_OK
Close 11131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11136 NT_STATUS_OK
WriteX 11136 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 258 NT_STATUS_OK
WriteX 11136 0 65536 65536 NT_STATUS_OK
WriteX 11136 65536 11540 11540 NT_STATUS_OK
Close 11136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
WriteX 11137 0 4096 4096 NT_STATUS_OK
Flush 11137 NT_STATUS_OK
SET_FILE_INFORMATION 11137 1004 NT_STATUS_OK
WriteX 11137 0 4096 4096 NT_STATUS_OK
Flush 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11138 NT_STATUS_OK
SET_FILE_INFORMATION 11138 1004 NT_STATUS_OK
Close 11138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11140 NT_STATUS_OK
Close 11140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 61440 4096 4096 NT_STATUS_OK
ReadX 11142 126976 4096 4096 NT_STATUS_OK
WriteX 11142 0 65536 65536 NT_STATUS_OK
WriteX 11142 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 61440 4096 4096 NT_STATUS_OK
ReadX 11143 126976 4096 4096 NT_STATUS_OK
ReadX 11143 192512 4096 4096 NT_STATUS_OK
ReadX 11143 258048 4096 4096 NT_STATUS_OK
WriteX 11143 0 65536 65536 NT_STATUS_OK
WriteX 11143 65536 65536 65536 NT_STATUS_OK
WriteX 11143 131072 65536 65536 NT_STATUS_OK
WriteX 11143 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 61440 4096 4096 NT_STATUS_OK
ReadX 11144 126976 4096 4096 NT_STATUS_OK
ReadX 11144 192512 4096 4096 NT_STATUS_OK
ReadX 11144 258048 4096 4096 NT_STATUS_OK
ReadX 11144 323584 4096 4096 NT_STATUS_OK
ReadX 11144 389120 4096 4096 NT_STATUS_OK
ReadX 11144 454656 4096 4096 NT_STATUS_OK
ReadX 11144 520192 4096 4096 NT_STATUS_OK
WriteX 11144 0 65536 65536 NT_STATUS_OK
WriteX 11144 65536 65536 65536 NT_STATUS_OK
WriteX 11144 131072 65536 65536 NT_STATUS_OK
WriteX 11144 196608 65536 65536 NT_STATUS_OK
WriteX 11144 262144 65536 65536 NT_STATUS_OK
WriteX 11144 327680 65536 65536 NT_STATUS_OK
WriteX 11144 393216 65536 65536 NT_STATUS_OK
WriteX 11144 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
ReadX 11145 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11146 NT_STATUS_OK
WriteX 11146 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 53 53 NT_STATUS_OK
Close 11146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11085 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11145 8192 4096 4096 NT_STATUS_OK
ReadX 11145 12288 4096 4096 NT_STATUS_OK
WriteX 11149 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11149 258 NT_STATUS_OK
ReadX 11145 16384 4096 4096 NT_STATUS_OK
ReadX 11145 20480 4096 4096 NT_STATUS_OK
WriteX 11149 0 15360 15360 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11150 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11150 1004 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11154 NT_STATUS_OK
Close 11154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11153 4096 4096 4096 NT_STATUS_OK
ReadX 11153 8192 4096 4096 NT_STATUS_OK
ReadX 11153 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 0 4096 4096 NT_STATUS_OK
ReadX 11156 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
ReadX 11157 4096 4096 4096 NT_STATUS_OK
ReadX 11157 8192 4096 4096 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11158 NT_STATUS_OK
WriteX 11158 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11158 258 NT_STATUS_OK
WriteX 11158 0 15360 15360 NT_STATUS_OK
Close 11158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11159 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11159 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11160 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11163 NT_STATUS_OK
SET_FILE_INFORMATION 11163 1004 NT_STATUS_OK
Close 11163 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
ReadX 11166 4096 4096 4096 NT_STATUS_OK
ReadX 11166 8192 4096 4096 NT_STATUS_OK
ReadX 11166 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11166 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11166 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11168 NT_STATUS_OK
WriteX 11168 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11168 258 NT_STATUS_OK
WriteX 11168 0 53 53 NT_STATUS_OK
Close 11168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11169 NT_STATUS_OK
Close 11169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11167 4096 4096 4096 NT_STATUS_OK
ReadX 11167 8192 4096 4096 NT_STATUS_OK
ReadX 11167 12288 4096 4096 NT_STATUS_OK
WriteX 11171 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11171 258 NT_STATUS_OK
WriteX 11171 0 12006 12006 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11172 NT_STATUS_OK
ReadX 11172 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11172 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11172 1004 NT_STATUS_OK
WriteX 11172 0 4096 4096 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11173 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11176 NT_STATUS_OK
Close 11176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11175 4096 4096 4096 NT_STATUS_OK
ReadX 11175 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11178 NT_STATUS_OK
WriteX 11178 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 258 NT_STATUS_OK
WriteX 11178 0 11991 11991 NT_STATUS_OK
Close 11178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11179 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11179 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11180 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11183 NT_STATUS_OK
SET_FILE_INFORMATION 11183 1004 NT_STATUS_OK
Close 11183 NT_STATUS_OK
WriteX 11179 0 4096 4096 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11184 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11187 NT_STATUS_OK
Close 11187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11186 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11186 1004 NT_STATUS_OK
ReadX 11186 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11186 1004 NT_STATUS_OK
WriteX 11186 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11186 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11186 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11186 1004 NT_STATUS_OK
Close 11162 NT_STATUS_OK
WriteX 11166 0 19054 19054 NT_STATUS_OK
WriteX 11186 0 12288 12288 NT_STATUS_OK
Close 11182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11189 NT_STATUS_OK
Close 11189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11193 NT_STATUS_OK
ReadX 11193 0 61440 61440 NT_STATUS_OK
ReadX 11193 61440 4096 4096 NT_STATUS_OK
ReadX 11193 65536 61440 61440 NT_STATUS_OK
ReadX 11193 126976 4096 4096 NT_STATUS_OK
ReadX 11193 131072 61440 61440 NT_STATUS_OK
ReadX 11193 192512 4096 4096 NT_STATUS_OK
ReadX 11193 196608 61440 61440 NT_STATUS_OK
ReadX 11193 258048 4096 4096 NT_STATUS_OK
ReadX 11193 262144 61440 61440 NT_STATUS_OK
ReadX 11193 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 61440 61440 NT_STATUS_OK
ReadX 11194 61440 4096 4096 NT_STATUS_OK
ReadX 11194 65536 61440 61440 NT_STATUS_OK
ReadX 11194 126976 4096 4096 NT_STATUS_OK
ReadX 11194 131072 61440 61440 NT_STATUS_OK
ReadX 11194 192512 4096 4096 NT_STATUS_OK
ReadX 11194 196608 61440 61440 NT_STATUS_OK
ReadX 11194 258048 4096 4096 NT_STATUS_OK
ReadX 11194 262144 61440 61440 NT_STATUS_OK
ReadX 11194 323584 4096 4096 NT_STATUS_OK
ReadX 11194 327680 61440 61440 NT_STATUS_OK
ReadX 11194 389120 4096 4096 NT_STATUS_OK
ReadX 11194 393216 61440 61440 NT_STATUS_OK
ReadX 11194 454656 4096 4096 NT_STATUS_OK
ReadX 11194 458752 61440 61440 NT_STATUS_OK
ReadX 11194 520192 4096 4096 NT_STATUS_OK
ReadX 11194 524288 61440 61440 NT_STATUS_OK
ReadX 11194 585728 4096 4096 NT_STATUS_OK
ReadX 11194 589824 61440 61440 NT_STATUS_OK
ReadX 11194 651264 4096 4096 NT_STATUS_OK
ReadX 11194 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 61440 61440 NT_STATUS_OK
ReadX 11195 61440 4096 4096 NT_STATUS_OK
ReadX 11195 65536 61440 61440 NT_STATUS_OK
ReadX 11195 126976 4096 4096 NT_STATUS_OK
ReadX 11195 131072 61440 61440 NT_STATUS_OK
ReadX 11195 192512 4096 4096 NT_STATUS_OK
ReadX 11195 196608 61440 61440 NT_STATUS_OK
ReadX 11195 258048 4096 4096 NT_STATUS_OK
ReadX 11195 262144 61440 61440 NT_STATUS_OK
ReadX 11195 323584 4096 4096 NT_STATUS_OK
ReadX 11195 327680 61440 61440 NT_STATUS_OK
ReadX 11195 389120 4096 4096 NT_STATUS_OK
ReadX 11195 393216 61440 61440 NT_STATUS_OK
ReadX 11195 454656 4096 4096 NT_STATUS_OK
ReadX 11195 458752 61440 61440 NT_STATUS_OK
ReadX 11195 520192 4096 4096 NT_STATUS_OK
ReadX 11195 524288 61440 61440 NT_STATUS_OK
ReadX 11195 585728 4096 4096 NT_STATUS_OK
ReadX 11195 589824 61440 61440 NT_STATUS_OK
ReadX 11195 651264 4096 4096 NT_STATUS_OK
ReadX 11195 655360 61440 61440 NT_STATUS_OK
ReadX 11195 716800 4096 4096 NT_STATUS_OK
ReadX 11195 720896 61440 61440 NT_STATUS_OK
ReadX 11195 782336 4096 4096 NT_STATUS_OK
ReadX 11195 786432 61440 61440 NT_STATUS_OK
ReadX 11195 847872 4096 4096 NT_STATUS_OK
ReadX 11195 851968 61440 61440 NT_STATUS_OK
ReadX 11195 913408 4096 4096 NT_STATUS_OK
ReadX 11195 917504 61440 61440 NT_STATUS_OK
ReadX 11195 978944 4096 4096 NT_STATUS_OK
ReadX 11195 983040 61440 61440 NT_STATUS_OK
ReadX 11195 1044480 4096 4096 NT_STATUS_OK
ReadX 11195 1048576 61440 61440 NT_STATUS_OK
ReadX 11195 1110016 4096 4096 NT_STATUS_OK
ReadX 11195 1114112 61440 61440 NT_STATUS_OK
ReadX 11195 1175552 4096 4096 NT_STATUS_OK
ReadX 11195 1179648 61440 61440 NT_STATUS_OK
ReadX 11195 1241088 4096 4096 NT_STATUS_OK
ReadX 11195 1245184 61440 61440 NT_STATUS_OK
ReadX 11195 1306624 4096 4096 NT_STATUS_OK
ReadX 11195 1310720 61440 61440 NT_STATUS_OK
ReadX 11195 1372160 4096 4096 NT_STATUS_OK
ReadX 11195 1376256 61440 61440 NT_STATUS_OK
ReadX 11195 1437696 4096 4096 NT_STATUS_OK
ReadX 11195 1441792 61440 61440 NT_STATUS_OK
ReadX 11195 1503232 4096 4096 NT_STATUS_OK
ReadX 11195 1507328 61440 61440 NT_STATUS_OK
ReadX 11195 1568768 4096 4096 NT_STATUS_OK
ReadX 11195 1572864 61440 61440 NT_STATUS_OK
ReadX 11195 1634304 4096 4096 NT_STATUS_OK
ReadX 11195 1638400 61440 61440 NT_STATUS_OK
ReadX 11195 1699840 4096 4096 NT_STATUS_OK
ReadX 11195 1703936 61440 61440 NT_STATUS_OK
ReadX 11195 1765376 4096 4096 NT_STATUS_OK
ReadX 11195 1769472 61440 61440 NT_STATUS_OK
ReadX 11195 1830912 4096 4096 NT_STATUS_OK
ReadX 11195 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11197 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11202 NT_STATUS_OK
QUERY_FILE_INFORMATION 11202 1004 NT_STATUS_OK
WriteX 11202 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11202 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11203 NT_STATUS_OK
Close 11203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11204 NT_STATUS_OK
WriteX 11204 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11204 258 NT_STATUS_OK
WriteX 11204 0 491 491 NT_STATUS_OK
Close 11204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11202 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11208 NT_STATUS_OK
WriteX 11208 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11208 258 NT_STATUS_OK
WriteX 11208 0 543 543 NT_STATUS_OK
Close 11208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Close 11198 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11216 NT_STATUS_OK
ReadX 11216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
WriteX 11222 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 258 NT_STATUS_OK
WriteX 11222 0 2048 2048 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11223 NT_STATUS_OK
ReadX 11223 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11228 NT_STATUS_OK
WriteX 11228 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11228 258 NT_STATUS_OK
WriteX 11228 0 2048 2048 NT_STATUS_OK
Close 11228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11234 NT_STATUS_OK
WriteX 11234 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11234 258 NT_STATUS_OK
WriteX 11234 0 2048 2048 NT_STATUS_OK
Close 11234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 2048 2048 NT_STATUS_OK
ReadX 11213 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11229 0 4096 4096 NT_STATUS_OK
WriteX 11213 0 8192 8192 NT_STATUS_OK
WriteX 11214 0 4096 4096 NT_STATUS_OK
WriteX 11215 0 4096 4096 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11239 NT_STATUS_OK
QUERY_FILE_INFORMATION 11239 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11216 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11259 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 1004 NT_STATUS_OK
WriteX 11259 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 258 NT_STATUS_OK
WriteX 11259 0 2048 2048 NT_STATUS_OK
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11260 0 4096 4096 NT_STATUS_OK
Flush 11260 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
Flush 11268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11260 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11270 NT_STATUS_OK
WriteX 11270 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11270 258 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11273 NT_STATUS_OK
WriteX 11273 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 258 NT_STATUS_OK
WriteX 11273 0 4096 4096 NT_STATUS_OK
Close 11273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11274 0 4096 4096 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11277 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11280 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11281 NT_STATUS_OK
WriteX 11281 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11281 258 NT_STATUS_OK
WriteX 11281 0 2048 2048 NT_STATUS_OK
Close 11281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11290 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11296 NT_STATUS_OK
QUERY_FILE_INFORMATION 11296 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11294 NT_STATUS_OK
Close 11289 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11298 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11302 NT_STATUS_OK
ReadX 11302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11304 NT_STATUS_OK
ReadX 11304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11317 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11318 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 1004 NT_STATUS_OK
WriteX 11318 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 2048 2048 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11319 NT_STATUS_OK
ReadX 11319 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11320 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11322 NT_STATUS_OK
ReadX 11322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11323 NT_STATUS_OK
ReadX 11323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11330 NT_STATUS_OK
QUERY_FILE_INFORMATION 11330 1004 NT_STATUS_OK
WriteX 11330 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11330 258 NT_STATUS_OK
WriteX 11330 0 2048 2048 NT_STATUS_OK
Close 11330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11338 NT_STATUS_OK
QUERY_FILE_INFORMATION 11338 1004 NT_STATUS_OK
WriteX 11338 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11338 258 NT_STATUS_OK
WriteX 11338 0 2048 2048 NT_STATUS_OK
Close 11338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11339 NT_STATUS_OK
ReadX 11339 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
WriteX 11331 0 4096 4096 NT_STATUS_OK
Flush 11331 NT_STATUS_OK
WriteX 11339 0 4096 4096 NT_STATUS_OK
Flush 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11331 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11339 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11321 4096 16384 16384 NT_STATUS_OK
ReadX 11301 4096 16384 16384 NT_STATUS_OK
ReadX 11333 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 2048 2048 NT_STATUS_OK
WriteX 11341 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11342 NT_STATUS_OK
QUERY_FILE_INFORMATION 11342 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11322 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Close 11309 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11344 NT_STATUS_OK
QUERY_FILE_INFORMATION 11344 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11346 NT_STATUS_OK
QUERY_FILE_INFORMATION 11346 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11353 NT_STATUS_OK
ReadX 11353 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11349 4096 16384 16384 NT_STATUS_OK
WriteX 11349 0 4096 4096 NT_STATUS_OK
WriteX 11350 0 4096 4096 NT_STATUS_OK
WriteX 11351 0 4096 4096 NT_STATUS_OK
WriteX 11352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11354 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11356 NT_STATUS_OK
ReadX 11356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11357 NT_STATUS_OK
ReadX 11357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11360 NT_STATUS_OK
ReadX 11360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11367 NT_STATUS_OK
ReadX 11367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 8192 8192 NT_STATUS_OK
ReadX 11355 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11369 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11369 0 4096 4096 NT_STATUS_OK
ReadX 11369 4096 4096 4096 NT_STATUS_OK
ReadX 11369 8192 4096 4096 NT_STATUS_OK
WriteX 11355 0 4096 4096 NT_STATUS_OK
WriteX 11356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11370 0 4096 4096 NT_STATUS_OK
ReadX 11370 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11349 0 4096 4096 NT_STATUS_OK
WriteX 11350 0 4096 4096 NT_STATUS_OK
WriteX 11351 0 4096 4096 NT_STATUS_OK
WriteX 11352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11375 NT_STATUS_OK
QUERY_FILE_INFORMATION 11375 1004 NT_STATUS_OK
WriteX 11375 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11375 258 NT_STATUS_OK
WriteX 11375 0 2048 2048 NT_STATUS_OK
Close 11375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11376 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11376 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
ReadX 11378 4096 4096 4096 NT_STATUS_OK
WriteX 11378 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11376 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11380 NT_STATUS_OK
ReadX 11380 0 4096 4096 NT_STATUS_OK
ReadX 11380 4096 4096 4096 NT_STATUS_OK
WriteX 11380 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11381 NT_STATUS_OK
QUERY_FILE_INFORMATION 11381 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Close 11353 NT_STATUS_OK
Close 11349 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11362 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11367 NT_STATUS_OK
Close 11355 NT_STATUS_OK
Close 11356 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11357 NT_STATUS_OK
Close 11358 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11383 0 4096 4096 NT_STATUS_OK
ReadX 11383 4096 4096 4096 NT_STATUS_OK
ReadX 11383 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11386 NT_STATUS_OK
ReadX 11386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11387 NT_STATUS_OK
ReadX 11387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
ReadX 11384 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11401 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 1004 NT_STATUS_OK
WriteX 11401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 258 NT_STATUS_OK
WriteX 11401 0 2048 2048 NT_STATUS_OK
Close 11401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11402 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11407 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 1004 NT_STATUS_OK
WriteX 11407 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 258 NT_STATUS_OK
WriteX 11407 0 2048 2048 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11408 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11391 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11409 NT_STATUS_OK
QUERY_FILE_INFORMATION 11409 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11384 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11386 NT_STATUS_OK
Close 11387 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11411 NT_STATUS_OK
QUERY_FILE_INFORMATION 11411 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 61440 4096 4096 NT_STATUS_OK
ReadX 11413 126976 4096 4096 NT_STATUS_OK
WriteX 11413 0 65536 65536 NT_STATUS_OK
WriteX 11413 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 61440 4096 4096 NT_STATUS_OK
ReadX 11414 126976 4096 4096 NT_STATUS_OK
ReadX 11414 192512 4096 4096 NT_STATUS_OK
ReadX 11414 258048 4096 4096 NT_STATUS_OK
WriteX 11414 0 65536 65536 NT_STATUS_OK
WriteX 11414 65536 65536 65536 NT_STATUS_OK
WriteX 11414 131072 65536 65536 NT_STATUS_OK
WriteX 11414 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 61440 4096 4096 NT_STATUS_OK
ReadX 11415 126976 4096 4096 NT_STATUS_OK
ReadX 11415 192512 4096 4096 NT_STATUS_OK
ReadX 11415 258048 4096 4096 NT_STATUS_OK
ReadX 11415 323584 4096 4096 NT_STATUS_OK
ReadX 11415 389120 4096 4096 NT_STATUS_OK
ReadX 11415 454656 4096 4096 NT_STATUS_OK
ReadX 11415 520192 4096 4096 NT_STATUS_OK
WriteX 11415 0 65536 65536 NT_STATUS_OK
WriteX 11415 65536 65536 65536 NT_STATUS_OK
WriteX 11415 131072 65536 65536 NT_STATUS_OK
WriteX 11415 196608 65536 65536 NT_STATUS_OK
WriteX 11415 262144 65536 65536 NT_STATUS_OK
WriteX 11415 327680 65536 65536 NT_STATUS_OK
WriteX 11415 393216 65536 65536 NT_STATUS_OK
WriteX 11415 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11416 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11416 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11416 8192 4096 4096 NT_STATUS_OK
ReadX 11416 12288 4096 4096 NT_STATUS_OK
ReadX 11416 16384 4096 4096 NT_STATUS_OK
ReadX 11416 20480 4096 4096 NT_STATUS_OK
ReadX 11416 24576 4096 4096 NT_STATUS_OK
ReadX 11416 28672 4096 4096 NT_STATUS_OK
ReadX 11416 32768 4096 4096 NT_STATUS_OK
ReadX 11416 36864 4096 4096 NT_STATUS_OK
ReadX 11416 40960 4096 4096 NT_STATUS_OK
ReadX 11416 45056 4096 4096 NT_STATUS_OK
ReadX 11416 49152 4096 4096 NT_STATUS_OK
ReadX 11416 53248 4096 4096 NT_STATUS_OK
ReadX 11416 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11416 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11417 NT_STATUS_OK
Close 11417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11413 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11419 NT_STATUS_OK
WriteX 11419 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11419 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11419 1004 NT_STATUS_OK
WriteX 11419 0 57088 57088 NT_STATUS_OK
WriteX 11419 0 4096 4096 NT_STATUS_OK
Flush 11419 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11420 NT_STATUS_OK
SET_FILE_INFORMATION 11420 1004 NT_STATUS_OK
Close 11420 NT_STATUS_OK
SET_FILE_INFORMATION 11419 1004 NT_STATUS_OK
WriteX 11419 0 4096 4096 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11421 NT_STATUS_OK
Close 11421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11423 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11424 NT_STATUS_OK
WriteX 11424 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11424 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11424 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11424 1004 NT_STATUS_OK
WriteX 11424 0 51456 51456 NT_STATUS_OK
WriteX 11424 0 4096 4096 NT_STATUS_OK
Flush 11424 NT_STATUS_OK
SET_FILE_INFORMATION 11424 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11424 1004 NT_STATUS_OK
WriteX 11424 0 4096 4096 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Close 11423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11426 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11428 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11430 NT_STATUS_OK
Close 11430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11433 NT_STATUS_OK
WriteX 11433 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11433 258 NT_STATUS_OK
WriteX 11433 0 53077 53077 NT_STATUS_OK
Close 11433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11434 NT_STATUS_OK
WriteX 11434 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11434 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11434 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11434 1004 NT_STATUS_OK
WriteX 11434 0 65536 65536 NT_STATUS_OK
WriteX 11434 65536 1856 1856 NT_STATUS_OK
WriteX 11434 0 4096 4096 NT_STATUS_OK
Flush 11434 NT_STATUS_OK
SET_FILE_INFORMATION 11434 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11434 1004 NT_STATUS_OK
WriteX 11434 0 4096 4096 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11440 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11443 NT_STATUS_OK
WriteX 11443 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11443 258 NT_STATUS_OK
WriteX 11443 0 7983 7983 NT_STATUS_OK
Close 11443 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11448 NT_STATUS_OK
WriteX 11448 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11448 258 NT_STATUS_OK
WriteX 11448 0 65536 65536 NT_STATUS_OK
WriteX 11448 65536 65536 65536 NT_STATUS_OK
WriteX 11448 131072 65536 65536 NT_STATUS_OK
WriteX 11448 196608 65536 65536 NT_STATUS_OK
WriteX 11448 262144 65536 65536 NT_STATUS_OK
WriteX 11448 327680 65536 65536 NT_STATUS_OK
WriteX 11448 393216 65536 65536 NT_STATUS_OK
WriteX 11448 458752 46731 46731 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11449 NT_STATUS_OK
WriteX 11449 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11449 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11438 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11449 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11449 1004 NT_STATUS_OK
WriteX 11449 0 65536 65536 NT_STATUS_OK
WriteX 11449 65536 22848 22848 NT_STATUS_OK
WriteX 11449 0 4096 4096 NT_STATUS_OK
Flush 11449 NT_STATUS_OK
SET_FILE_INFORMATION 11449 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11449 1004 NT_STATUS_OK
WriteX 11449 0 4096 4096 NT_STATUS_OK
Close 11449 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11451 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11453 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11454 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11454 1004 NT_STATUS_OK
ReadX 11454 8192 4096 4096 NT_STATUS_OK
ReadX 11454 12288 4096 4096 NT_STATUS_OK
ReadX 11454 16384 4096 4096 NT_STATUS_OK
ReadX 11454 20480 4096 4096 NT_STATUS_OK
ReadX 11454 24576 4096 4096 NT_STATUS_OK
ReadX 11454 28672 4096 4096 NT_STATUS_OK
ReadX 11454 32768 4096 4096 NT_STATUS_OK
ReadX 11454 36864 4096 4096 NT_STATUS_OK
ReadX 11454 40960 4096 4096 NT_STATUS_OK
ReadX 11454 45056 4096 4096 NT_STATUS_OK
ReadX 11454 49152 4096 4096 NT_STATUS_OK
ReadX 11454 53248 4096 4096 NT_STATUS_OK
ReadX 11454 57344 4096 4096 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 65536 4096 4096 NT_STATUS_OK
ReadX 11454 69632 4096 4096 NT_STATUS_OK
ReadX 11454 73728 4096 4096 NT_STATUS_OK
ReadX 11454 77824 4096 4096 NT_STATUS_OK
ReadX 11454 81920 4096 4096 NT_STATUS_OK
ReadX 11454 86016 4096 4096 NT_STATUS_OK
ReadX 11454 90112 4096 4096 NT_STATUS_OK
ReadX 11454 94208 4096 4096 NT_STATUS_OK
ReadX 11454 98304 4096 4096 NT_STATUS_OK
ReadX 11454 102400 4096 4096 NT_STATUS_OK
ReadX 11454 106496 4096 4096 NT_STATUS_OK
ReadX 11454 110592 4096 4096 NT_STATUS_OK
ReadX 11454 114688 4096 4096 NT_STATUS_OK
ReadX 11454 118784 4096 4096 NT_STATUS_OK
ReadX 11454 122880 4096 4096 NT_STATUS_OK
ReadX 11454 126976 4096 4096 NT_STATUS_OK
ReadX 11454 131072 4096 4096 NT_STATUS_OK
ReadX 11454 135168 4096 4096 NT_STATUS_OK
ReadX 11454 139264 4096 4096 NT_STATUS_OK
ReadX 11454 143360 4096 4096 NT_STATUS_OK
ReadX 11454 147456 4096 4096 NT_STATUS_OK
ReadX 11454 151552 4096 4096 NT_STATUS_OK
ReadX 11454 155648 4096 4096 NT_STATUS_OK
ReadX 11454 159744 4096 4096 NT_STATUS_OK
ReadX 11454 163840 4096 4096 NT_STATUS_OK
ReadX 11454 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11454 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11455 NT_STATUS_OK
Close 11455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11457 NT_STATUS_OK
WriteX 11457 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11457 258 NT_STATUS_OK
Close 11454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11458 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
Close 11458 NT_STATUS_OK
WriteX 11457 0 42388 42388 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
ReadX 11461 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11462 NT_STATUS_OK
WriteX 11462 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11462 258 NT_STATUS_OK
SET_FILE_INFORMATION 11462 1004 NT_STATUS_OK
WriteX 11462 0 42652 42652 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Close 11461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
ReadX 11466 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11468 NT_STATUS_OK
Close 11468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11471 NT_STATUS_OK
WriteX 11471 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 258 NT_STATUS_OK
WriteX 11471 0 65536 65536 NT_STATUS_OK
WriteX 11471 65536 49 49 NT_STATUS_OK
Close 11471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 61440 61440 NT_STATUS_OK
ReadX 11472 61440 4096 4096 NT_STATUS_OK
ReadX 11472 65536 61440 61440 NT_STATUS_OK
ReadX 11472 126976 4096 4096 NT_STATUS_OK
ReadX 11472 131072 61440 61440 NT_STATUS_OK
ReadX 11472 192512 4096 4096 NT_STATUS_OK
ReadX 11472 196608 61440 61440 NT_STATUS_OK
ReadX 11472 258048 4096 4096 NT_STATUS_OK
ReadX 11472 262144 61440 61440 NT_STATUS_OK
ReadX 11472 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 61440 61440 NT_STATUS_OK
ReadX 11473 61440 4096 4096 NT_STATUS_OK
ReadX 11473 65536 61440 61440 NT_STATUS_OK
ReadX 11473 126976 4096 4096 NT_STATUS_OK
ReadX 11473 131072 61440 61440 NT_STATUS_OK
ReadX 11473 192512 4096 4096 NT_STATUS_OK
ReadX 11473 196608 61440 61440 NT_STATUS_OK
ReadX 11473 258048 4096 4096 NT_STATUS_OK
ReadX 11473 262144 61440 61440 NT_STATUS_OK
ReadX 11473 323584 4096 4096 NT_STATUS_OK
ReadX 11473 327680 61440 61440 NT_STATUS_OK
ReadX 11473 389120 4096 4096 NT_STATUS_OK
ReadX 11473 393216 61440 61440 NT_STATUS_OK
ReadX 11473 454656 4096 4096 NT_STATUS_OK
ReadX 11473 458752 61440 61440 NT_STATUS_OK
ReadX 11473 520192 4096 4096 NT_STATUS_OK
ReadX 11473 524288 61440 61440 NT_STATUS_OK
ReadX 11473 585728 4096 4096 NT_STATUS_OK
ReadX 11473 589824 61440 61440 NT_STATUS_OK
ReadX 11473 651264 4096 4096 NT_STATUS_OK
ReadX 11473 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 61440 61440 NT_STATUS_OK
ReadX 11474 61440 4096 4096 NT_STATUS_OK
ReadX 11474 65536 61440 61440 NT_STATUS_OK
ReadX 11474 126976 4096 4096 NT_STATUS_OK
ReadX 11474 131072 61440 61440 NT_STATUS_OK
ReadX 11474 192512 4096 4096 NT_STATUS_OK
ReadX 11474 196608 61440 61440 NT_STATUS_OK
ReadX 11474 258048 4096 4096 NT_STATUS_OK
ReadX 11474 262144 61440 61440 NT_STATUS_OK
ReadX 11474 323584 4096 4096 NT_STATUS_OK
ReadX 11474 327680 61440 61440 NT_STATUS_OK
ReadX 11474 389120 4096 4096 NT_STATUS_OK
ReadX 11474 393216 61440 61440 NT_STATUS_OK
ReadX 11474 454656 4096 4096 NT_STATUS_OK
ReadX 11474 458752 61440 61440 NT_STATUS_OK
ReadX 11474 520192 4096 4096 NT_STATUS_OK
ReadX 11474 524288 61440 61440 NT_STATUS_OK
ReadX 11474 585728 4096 4096 NT_STATUS_OK
ReadX 11474 589824 61440 61440 NT_STATUS_OK
ReadX 11474 651264 4096 4096 NT_STATUS_OK
ReadX 11474 655360 61440 61440 NT_STATUS_OK
ReadX 11474 716800 4096 4096 NT_STATUS_OK
ReadX 11474 720896 61440 61440 NT_STATUS_OK
ReadX 11474 782336 4096 4096 NT_STATUS_OK
ReadX 11474 786432 61440 61440 NT_STATUS_OK
ReadX 11474 847872 4096 4096 NT_STATUS_OK
ReadX 11474 851968 61440 61440 NT_STATUS_OK
ReadX 11474 913408 4096 4096 NT_STATUS_OK
ReadX 11474 917504 61440 61440 NT_STATUS_OK
ReadX 11474 978944 4096 4096 NT_STATUS_OK
ReadX 11474 983040 61440 61440 NT_STATUS_OK
ReadX 11474 1044480 4096 4096 NT_STATUS_OK
ReadX 11474 1048576 61440 61440 NT_STATUS_OK
ReadX 11474 1110016 4096 4096 NT_STATUS_OK
ReadX 11474 1114112 61440 61440 NT_STATUS_OK
ReadX 11474 1175552 4096 4096 NT_STATUS_OK
ReadX 11474 1179648 61440 61440 NT_STATUS_OK
ReadX 11474 1241088 4096 4096 NT_STATUS_OK
ReadX 11474 1245184 61440 61440 NT_STATUS_OK
ReadX 11474 1306624 4096 4096 NT_STATUS_OK
ReadX 11474 1310720 61440 61440 NT_STATUS_OK
ReadX 11474 1372160 4096 4096 NT_STATUS_OK
ReadX 11474 1376256 61440 61440 NT_STATUS_OK
ReadX 11474 1437696 4096 4096 NT_STATUS_OK
ReadX 11474 1441792 61440 61440 NT_STATUS_OK
ReadX 11474 1503232 4096 4096 NT_STATUS_OK
ReadX 11474 1507328 61440 61440 NT_STATUS_OK
ReadX 11474 1568768 4096 4096 NT_STATUS_OK
ReadX 11474 1572864 61440 61440 NT_STATUS_OK
ReadX 11474 1634304 4096 4096 NT_STATUS_OK
ReadX 11474 1638400 61440 61440 NT_STATUS_OK
ReadX 11474 1699840 4096 4096 NT_STATUS_OK
ReadX 11474 1703936 61440 61440 NT_STATUS_OK
ReadX 11474 1765376 4096 4096 NT_STATUS_OK
ReadX 11474 1769472 61440 61440 NT_STATUS_OK
ReadX 11474 1830912 4096 4096 NT_STATUS_OK
ReadX 11474 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11476 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 1005 NT_STATUS_OK
ReadX 11476 2156 24 24 NT_STATUS_OK
ReadX 11476 2139 276 276 NT_STATUS_OK
ReadX 11476 2136 14 14 NT_STATUS_OK
ReadX 11476 2136 7 7 NT_STATUS_OK
ReadX 11476 2138 12 12 NT_STATUS_OK
ReadX 11476 2137 8 8 NT_STATUS_OK
ReadX 11476 2135 15 15 NT_STATUS_OK
ReadX 11476 0 16 16 NT_STATUS_OK
ReadX 11476 16 2048 2048 NT_STATUS_OK
ReadX 11476 2064 2048 2048 NT_STATUS_OK
ReadX 11476 257 2048 2048 NT_STATUS_OK
ReadX 11476 385 2048 2048 NT_STATUS_OK
ReadX 11476 513 2048 2048 NT_STATUS_OK
ReadX 11476 641 2048 2048 NT_STATUS_OK
ReadX 11476 769 2048 2048 NT_STATUS_OK
ReadX 11476 897 2048 2048 NT_STATUS_OK
ReadX 11476 1025 2048 2048 NT_STATUS_OK
ReadX 11476 1153 2048 2048 NT_STATUS_OK
ReadX 11476 1281 2048 2048 NT_STATUS_OK
ReadX 11476 1409 2048 2048 NT_STATUS_OK
ReadX 11476 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11481 NT_STATUS_OK
WriteX 11481 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 258 NT_STATUS_OK
WriteX 11481 0 10575 10575 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
Close 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11486 NT_STATUS_OK
LockX 11486 2147483538 1 NT_STATUS_OK
UnlockX 11486 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11486 1005 NT_STATUS_OK
ReadX 11486 0 512 512 NT_STATUS_OK
ReadX 11486 512 512 512 NT_STATUS_OK
ReadX 11486 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11486 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11486 1004 NT_STATUS_OK
Close 11486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11487 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 1005 NT_STATUS_OK
ReadX 11487 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11488 NT_STATUS_OK
LockX 11488 2147483538 1 NT_STATUS_OK
UnlockX 11488 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1005 NT_STATUS_OK
ReadX 11488 0 512 512 NT_STATUS_OK
ReadX 11488 512 512 512 NT_STATUS_OK
ReadX 11488 1024 512 512 NT_STATUS_OK
ReadX 11488 288 20 20 NT_STATUS_OK
ReadX 11488 308 2084 2084 NT_STATUS_OK
ReadX 11488 388 2084 2084 NT_STATUS_OK
ReadX 11488 388 2084 2084 NT_STATUS_OK
ReadX 11475 2157 1386 1386 NT_STATUS_OK
ReadX 11488 2472 399 399 NT_STATUS_OK
ReadX 11488 3072 1536 1536 NT_STATUS_OK
ReadX 11488 544 149 149 NT_STATUS_OK
ReadX 11488 693 485 485 NT_STATUS_OK
Close 11488 NT_STATUS_OK
ReadX 11475 2157 4096 4096 NT_STATUS_OK
ReadX 11475 6253 4096 4096 NT_STATUS_OK
ReadX 11475 10349 4096 4096 NT_STATUS_OK
ReadX 11475 14445 4096 4096 NT_STATUS_OK
ReadX 11475 18541 4096 4096 NT_STATUS_OK
ReadX 11475 22637 256 256 NT_STATUS_OK
ReadX 11475 22893 4096 4096 NT_STATUS_OK
ReadX 11475 26989 4096 4096 NT_STATUS_OK
ReadX 11475 31085 4096 4096 NT_STATUS_OK
ReadX 11475 35181 4096 4096 NT_STATUS_OK
ReadX 11475 39277 4096 4096 NT_STATUS_OK
ReadX 11475 43373 4096 4096 NT_STATUS_OK
ReadX 11475 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11475 2157 1024 1024 NT_STATUS_OK
ReadX 11475 1667 4688 4688 NT_STATUS_OK
ReadX 11475 6355 3516 3516 NT_STATUS_OK
ReadX 11475 9871 16384 16384 NT_STATUS_OK
ReadX 11475 26255 3771 3771 NT_STATUS_OK
ReadX 11475 30026 2048 2048 NT_STATUS_OK
ReadX 11475 32074 1024 1024 NT_STATUS_OK
ReadX 11475 33098 6652 6652 NT_STATUS_OK
ReadX 11475 39750 16384 16384 NT_STATUS_OK
ReadX 11475 56134 10496 10496 NT_STATUS_OK
ReadX 11475 66630 1784 1784 NT_STATUS_OK
ReadX 11475 68414 90 90 NT_STATUS_OK
ReadX 11475 68504 273 273 NT_STATUS_OK
ReadX 11475 68777 1600 1600 NT_STATUS_OK
ReadX 11475 70377 640 640 NT_STATUS_OK
ReadX 11475 71017 1280 1280 NT_STATUS_OK
ReadX 11475 72297 8464 8464 NT_STATUS_OK
ReadX 11475 80761 158 158 NT_STATUS_OK
ReadX 11475 80919 912 912 NT_STATUS_OK
ReadX 11475 81831 1980 1980 NT_STATUS_OK
ReadX 11475 83811 2256 2256 NT_STATUS_OK
ReadX 11475 86067 400 400 NT_STATUS_OK
ReadX 11475 86467 252 252 NT_STATUS_OK
ReadX 11475 86719 42 42 NT_STATUS_OK
ReadX 11475 86761 725 725 NT_STATUS_OK
ReadX 11475 2009 512 512 NT_STATUS_OK
ReadX 11475 3895 9 9 NT_STATUS_OK
ReadX 11475 3781 46 46 NT_STATUS_OK
ReadX 11475 4059 92 92 NT_STATUS_OK
ReadX 11475 3781 92 92 NT_STATUS_OK
ReadX 11475 3986 184 184 NT_STATUS_OK
ReadX 11475 3987 16384 16384 NT_STATUS_OK
ReadX 11475 3902 16384 16384 NT_STATUS_OK
ReadX 11475 3781 10240 10240 NT_STATUS_OK
ReadX 11475 3821 16384 16384 NT_STATUS_OK
ReadX 11475 3891 935 935 NT_STATUS_OK
ReadX 11475 4060 10240 10240 NT_STATUS_OK
ReadX 11475 4059 184 184 NT_STATUS_OK
ReadX 11475 256 184 184 NT_STATUS_OK
ReadX 11475 256 1026 1026 NT_STATUS_OK
ReadX 11475 3901 326 326 NT_STATUS_OK
ReadX 11475 3899 652 652 NT_STATUS_OK
ReadX 11475 256 2 2 NT_STATUS_OK
ReadX 11475 258 4948 4948 NT_STATUS_OK
Close 11475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11493 NT_STATUS_OK
WriteX 11493 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11493 258 NT_STATUS_OK
WriteX 11493 0 65536 65536 NT_STATUS_OK
WriteX 11493 65536 65536 65536 NT_STATUS_OK
WriteX 11493 131072 65536 65536 NT_STATUS_OK
WriteX 11493 196608 65536 65536 NT_STATUS_OK
WriteX 11493 262144 65536 65536 NT_STATUS_OK
WriteX 11493 327680 65536 65536 NT_STATUS_OK
WriteX 11493 393216 65536 65536 NT_STATUS_OK
WriteX 11493 458752 65536 65536 NT_STATUS_OK
WriteX 11493 524288 65536 65536 NT_STATUS_OK
WriteX 11493 589824 35257 35257 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11495 NT_STATUS_OK
Close 11495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11498 NT_STATUS_OK
WriteX 11498 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11498 258 NT_STATUS_OK
WriteX 11498 0 65536 65536 NT_STATUS_OK
WriteX 11498 65536 65536 65536 NT_STATUS_OK
WriteX 11498 131072 65536 65536 NT_STATUS_OK
WriteX 11498 196608 65536 65536 NT_STATUS_OK
WriteX 11498 262144 65536 65536 NT_STATUS_OK
WriteX 11498 327680 65536 65536 NT_STATUS_OK
WriteX 11498 393216 65536 65536 NT_STATUS_OK
WriteX 11498 458752 65536 65536 NT_STATUS_OK
WriteX 11498 524288 65536 65536 NT_STATUS_OK
WriteX 11498 589824 57598 57598 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11500 NT_STATUS_OK
WriteX 11500 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11500 258 NT_STATUS_OK
WriteX 11500 0 12543 12543 NT_STATUS_OK
Flush 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11506 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 1005 NT_STATUS_OK
ReadX 11506 1938 24 24 NT_STATUS_OK
ReadX 11506 1920 276 276 NT_STATUS_OK
ReadX 11506 1918 14 14 NT_STATUS_OK
ReadX 11506 1918 7 7 NT_STATUS_OK
ReadX 11506 1919 12 12 NT_STATUS_OK
ReadX 11506 1919 8 8 NT_STATUS_OK
ReadX 11506 1917 15 15 NT_STATUS_OK
ReadX 11506 0 16 16 NT_STATUS_OK
ReadX 11506 16 2048 2048 NT_STATUS_OK
ReadX 11506 2064 2048 2048 NT_STATUS_OK
ReadX 11506 257 2048 2048 NT_STATUS_OK
ReadX 11506 385 2048 2048 NT_STATUS_OK
ReadX 11506 513 2048 2048 NT_STATUS_OK
ReadX 11506 641 2048 2048 NT_STATUS_OK
ReadX 11506 769 2048 2048 NT_STATUS_OK
ReadX 11506 897 2048 2048 NT_STATUS_OK
ReadX 11506 1025 2048 2048 NT_STATUS_OK
ReadX 11506 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11508 NT_STATUS_OK
Close 11508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11511 NT_STATUS_OK
WriteX 11511 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11511 258 NT_STATUS_OK
WriteX 11511 0 11588 11588 NT_STATUS_OK
Flush 11511 NT_STATUS_OK
Close 11511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
Close 11506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11516 NT_STATUS_OK
WriteX 11516 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11516 258 NT_STATUS_OK
WriteX 11516 0 11615 11615 NT_STATUS_OK
Flush 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11522 NT_STATUS_OK
Close 11522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11525 NT_STATUS_OK
WriteX 11525 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 258 NT_STATUS_OK
WriteX 11525 0 65536 65536 NT_STATUS_OK
WriteX 11525 65536 16050 16050 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11505 1939 64 64 NT_STATUS_OK
ReadX 11505 128 248 248 NT_STATUS_OK
ReadX 11505 128 568 568 NT_STATUS_OK
ReadX 11505 3872 1536 1536 NT_STATUS_OK
ReadX 11505 3456 2560 2560 NT_STATUS_OK
ReadX 11505 3136 512 512 NT_STATUS_OK
ReadX 11505 2880 4096 4096 NT_STATUS_OK
ReadX 11505 3264 3072 3072 NT_STATUS_OK
ReadX 11505 320 4096 4096 NT_STATUS_OK
ReadX 11505 1024 4096 4096 NT_STATUS_OK
ReadX 11505 3616 4096 4096 NT_STATUS_OK
ReadX 11505 1939 64 64 NT_STATUS_OK
ReadX 11505 128 248 248 NT_STATUS_OK
ReadX 11505 128 608 608 NT_STATUS_OK
ReadX 11505 2858 1024 1024 NT_STATUS_OK
ReadX 11505 2810 4096 4096 NT_STATUS_OK
ReadX 11505 2826 4096 4096 NT_STATUS_OK
ReadX 11505 2580 2048 2048 NT_STATUS_OK
ReadX 11505 2800 2560 2560 NT_STATUS_OK
ReadX 11505 2100 4096 4096 NT_STATUS_OK
ReadX 11505 2084 4096 4096 NT_STATUS_OK
ReadX 11505 868 4096 4096 NT_STATUS_OK
ReadX 11505 2324 4096 4096 NT_STATUS_OK
ReadX 11505 884 4096 4096 NT_STATUS_OK
ReadX 11505 2604 1024 1024 NT_STATUS_OK
ReadX 11505 580 4096 4096 NT_STATUS_OK
ReadX 11505 596 4096 4096 NT_STATUS_OK
ReadX 11505 2752 4096 4096 NT_STATUS_OK
ReadX 11505 2842 1024 1024 NT_STATUS_OK
ReadX 11505 660 4096 4096 NT_STATUS_OK
ReadX 11505 2720 4096 4096 NT_STATUS_OK
ReadX 11505 2736 4096 4096 NT_STATUS_OK
ReadX 11505 628 4096 4096 NT_STATUS_OK
ReadX 11505 2704 4096 4096 NT_STATUS_OK
ReadX 11505 1556 4096 4096 NT_STATUS_OK
ReadX 11505 576 4096 4096 NT_STATUS_OK
ReadX 11505 3168 1536 1536 NT_STATUS_OK
ReadX 11505 832 4096 4096 NT_STATUS_OK
ReadX 11505 1088 4096 4096 NT_STATUS_OK
ReadX 11505 1344 4096 4096 NT_STATUS_OK
ReadX 11505 1600 4096 4096 NT_STATUS_OK
ReadX 11505 1856 4096 4096 NT_STATUS_OK
ReadX 11505 2112 4096 4096 NT_STATUS_OK
ReadX 11505 1892 4096 4096 NT_STATUS_OK
ReadX 11505 820 4096 4096 NT_STATUS_OK
ReadX 11505 788 4096 4096 NT_STATUS_OK
ReadX 11505 1604 4096 4096 NT_STATUS_OK
ReadX 11505 3648 4096 4096 NT_STATUS_OK
ReadX 11505 2608 4096 4096 NT_STATUS_OK
ReadX 11505 548 4096 4096 NT_STATUS_OK
ReadX 11505 740 4096 4096 NT_STATUS_OK
ReadX 11505 1344 4096 4096 NT_STATUS_OK
ReadX 11505 3392 4096 4096 NT_STATUS_OK
ReadX 11505 3904 4096 4096 NT_STATUS_OK
ReadX 11505 644 4096 4096 NT_STATUS_OK
ReadX 11505 676 4096 4096 NT_STATUS_OK
ReadX 11505 2688 4096 4096 NT_STATUS_OK
ReadX 11505 320 4096 4096 NT_STATUS_OK
ReadX 11505 900 4096 4096 NT_STATUS_OK
ReadX 11505 1908 4096 4096 NT_STATUS_OK
ReadX 11505 852 4096 4096 NT_STATUS_OK
ReadX 11505 724 4096 4096 NT_STATUS_OK
ReadX 11505 2292 4096 4096 NT_STATUS_OK
ReadX 11505 612 4096 4096 NT_STATUS_OK
ReadX 11505 388 4096 4096 NT_STATUS_OK
ReadX 11505 2368 4096 4096 NT_STATUS_OK
ReadX 11505 2624 4096 4096 NT_STATUS_OK
ReadX 11505 500 4096 4096 NT_STATUS_OK
ReadX 11505 356 4096 4096 NT_STATUS_OK
ReadX 11505 1024 4096 4096 NT_STATUS_OK
ReadX 11505 576 4096 4096 NT_STATUS_OK
ReadX 11505 340 4096 4096 NT_STATUS_OK
ReadX 11505 420 4096 4096 NT_STATUS_OK
ReadX 11505 1600 4096 4096 NT_STATUS_OK
ReadX 11505 404 4096 4096 NT_STATUS_OK
ReadX 11505 1428 4096 4096 NT_STATUS_OK
ReadX 11505 2656 4096 4096 NT_STATUS_OK
ReadX 11505 2624 4096 4096 NT_STATUS_OK
ReadX 11505 452 4096 4096 NT_STATUS_OK
ReadX 11505 692 4096 4096 NT_STATUS_OK
ReadX 11505 564 4096 4096 NT_STATUS_OK
ReadX 11505 372 4096 4096 NT_STATUS_OK
ReadX 11505 468 4096 4096 NT_STATUS_OK
ReadX 11505 484 4096 4096 NT_STATUS_OK
ReadX 11505 1088 4096 4096 NT_STATUS_OK
ReadX 11505 1924 4096 4096 NT_STATUS_OK
ReadX 11505 2768 4096 4096 NT_STATUS_OK
ReadX 11505 832 4096 4096 NT_STATUS_OK
ReadX 11505 836 4096 4096 NT_STATUS_OK
ReadX 11505 1856 4096 4096 NT_STATUS_OK
ReadX 11505 2640 4096 4096 NT_STATUS_OK
ReadX 11505 436 4096 4096 NT_STATUS_OK
ReadX 11505 1828 4096 4096 NT_STATUS_OK
ReadX 11505 804 4096 4096 NT_STATUS_OK
ReadX 11505 1860 4096 4096 NT_STATUS_OK
ReadX 11505 1812 4096 4096 NT_STATUS_OK
ReadX 11505 756 4096 4096 NT_STATUS_OK
ReadX 11505 1636 4096 4096 NT_STATUS_OK
ReadX 11505 772 4096 4096 NT_STATUS_OK
ReadX 11505 2036 4096 4096 NT_STATUS_OK
ReadX 11505 1220 4096 4096 NT_STATUS_OK
ReadX 11505 1652 4096 4096 NT_STATUS_OK
ReadX 11505 2588 4096 4096 NT_STATUS_OK
ReadX 11505 916 4096 4096 NT_STATUS_OK
ReadX 11505 260 4096 4096 NT_STATUS_OK
ReadX 11505 932 4096 4096 NT_STATUS_OK
ReadX 11505 2624 4096 4096 NT_STATUS_OK
ReadX 11505 308 4096 4096 NT_STATUS_OK
ReadX 11505 292 4096 4096 NT_STATUS_OK
ReadX 11505 1140 4096 4096 NT_STATUS_OK
ReadX 11505 276 4096 4096 NT_STATUS_OK
ReadX 11505 2020 4096 4096 NT_STATUS_OK
ReadX 11505 2880 4096 4096 NT_STATUS_OK
ReadX 11505 516 4096 4096 NT_STATUS_OK
ReadX 11505 1844 4096 4096 NT_STATUS_OK
ReadX 11505 1124 4096 4096 NT_STATUS_OK
ReadX 11505 3136 4096 4096 NT_STATUS_OK
ReadX 11505 324 4096 4096 NT_STATUS_OK
ReadX 11505 1156 4096 4096 NT_STATUS_OK
ReadX 11505 1172 4096 4096 NT_STATUS_OK
ReadX 11505 2112 4096 4096 NT_STATUS_OK
ReadX 11505 2368 4096 4096 NT_STATUS_OK
ReadX 11505 964 4096 4096 NT_STATUS_OK
ReadX 11505 980 4096 4096 NT_STATUS_OK
ReadX 11505 1012 4096 4096 NT_STATUS_OK
ReadX 11505 532 4096 4096 NT_STATUS_OK
ReadX 11505 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11505 1620 4096 4096 NT_STATUS_OK
ReadX 11505 1604 4096 4096 NT_STATUS_OK
ReadX 11505 2116 4096 4096 NT_STATUS_OK
ReadX 11505 2132 4096 4096 NT_STATUS_OK
ReadX 11505 2148 4096 4096 NT_STATUS_OK
ReadX 11505 2276 4096 4096 NT_STATUS_OK
ReadX 11505 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11530 NT_STATUS_OK
QUERY_FILE_INFORMATION 11485 1004 NT_STATUS_OK
Close 11485 NT_STATUS_OK
WriteX 11530 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11530 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 1004 NT_STATUS_OK
Close 11487 NT_STATUS_OK
WriteX 11530 0 65536 65536 NT_STATUS_OK
WriteX 11530 65536 64850 64850 NT_STATUS_OK
Close 11530 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11532 NT_STATUS_OK
WriteX 11532 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
ReadX 11505 2068 4096 4096 NT_STATUS_OK
ReadX 11505 1588 4096 4096 NT_STATUS_OK
ReadX 11505 1572 4096 4096 NT_STATUS_OK
WriteX 11532 0 18630 18630 NT_STATUS_OK
Flush 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11505 612 4096 4096 NT_STATUS_OK
ReadX 11505 564 4096 4096 NT_STATUS_OK
ReadX 11505 1876 4096 4096 NT_STATUS_OK
ReadX 11505 628 4096 4096 NT_STATUS_OK
ReadX 11505 740 4096 4096 NT_STATUS_OK
ReadX 11505 724 4096 4096 NT_STATUS_OK
ReadX 11505 644 4096 4096 NT_STATUS_OK
ReadX 11505 2324 4096 4096 NT_STATUS_OK
ReadX 11505 660 4096 4096 NT_STATUS_OK
ReadX 11505 852 4096 4096 NT_STATUS_OK
ReadX 11505 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11505 2368 4096 4096 NT_STATUS_OK
ReadX 11505 1024 4096 4096 NT_STATUS_OK
ReadX 11505 320 4096 4096 NT_STATUS_OK
ReadX 11505 580 4096 4096 NT_STATUS_OK
ReadX 11505 3136 512 512 NT_STATUS_OK
ReadX 11505 2880 4096 4096 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11537 NT_STATUS_OK
ReadX 11537 61440 4096 4096 NT_STATUS_OK
ReadX 11537 126976 4096 4096 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 61440 4096 4096 NT_STATUS_OK
ReadX 11538 126976 4096 4096 NT_STATUS_OK
ReadX 11538 192512 4096 4096 NT_STATUS_OK
ReadX 11538 258048 4096 4096 NT_STATUS_OK
WriteX 11538 0 65536 65536 NT_STATUS_OK
WriteX 11538 65536 65536 65536 NT_STATUS_OK
WriteX 11538 131072 65536 65536 NT_STATUS_OK
WriteX 11538 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 61440 4096 4096 NT_STATUS_OK
ReadX 11539 126976 4096 4096 NT_STATUS_OK
ReadX 11539 192512 4096 4096 NT_STATUS_OK
ReadX 11539 258048 4096 4096 NT_STATUS_OK
ReadX 11539 323584 4096 4096 NT_STATUS_OK
ReadX 11539 389120 4096 4096 NT_STATUS_OK
ReadX 11539 454656 4096 4096 NT_STATUS_OK
ReadX 11539 520192 4096 4096 NT_STATUS_OK
WriteX 11539 0 65536 65536 NT_STATUS_OK
WriteX 11539 65536 65536 65536 NT_STATUS_OK
WriteX 11539 131072 65536 65536 NT_STATUS_OK
WriteX 11539 196608 65536 65536 NT_STATUS_OK
WriteX 11539 262144 65536 65536 NT_STATUS_OK
WriteX 11539 327680 65536 65536 NT_STATUS_OK
WriteX 11539 393216 65536 65536 NT_STATUS_OK
WriteX 11539 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11542 NT_STATUS_OK
WriteX 11542 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11542 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11540 0 8192 8192 NT_STATUS_OK
Flush 11540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11540 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11540 0 8192 8192 NT_STATUS_OK
Flush 11540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11540 0 8192 8192 NT_STATUS_OK
Flush 11540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11540 0 8192 8192 NT_STATUS_OK
Flush 11540 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11504 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Close 11538 NT_STATUS_OK
Close 11539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11547 NT_STATUS_OK
WriteX 11547 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11547 258 NT_STATUS_OK
WriteX 11547 0 62591 62591 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11549 NT_STATUS_OK
Close 11549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11552 NT_STATUS_OK
WriteX 11552 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11552 258 NT_STATUS_OK
WriteX 11552 0 10845 10845 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11554 NT_STATUS_OK
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11557 NT_STATUS_OK
WriteX 11557 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11557 258 NT_STATUS_OK
WriteX 11557 0 30118 30118 NT_STATUS_OK
Close 11557 NT_STATUS_OK
WriteX 11540 0 4096 4096 NT_STATUS_OK
WriteX 11542 0 64 64 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 61440 61440 NT_STATUS_OK
ReadX 11559 61440 4096 4096 NT_STATUS_OK
ReadX 11559 65536 61440 61440 NT_STATUS_OK
ReadX 11559 126976 4096 4096 NT_STATUS_OK
ReadX 11559 131072 61440 61440 NT_STATUS_OK
ReadX 11559 192512 4096 4096 NT_STATUS_OK
ReadX 11559 196608 61440 61440 NT_STATUS_OK
ReadX 11559 258048 4096 4096 NT_STATUS_OK
ReadX 11559 262144 61440 61440 NT_STATUS_OK
ReadX 11559 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 61440 61440 NT_STATUS_OK
ReadX 11560 61440 4096 4096 NT_STATUS_OK
ReadX 11560 65536 61440 61440 NT_STATUS_OK
ReadX 11560 126976 4096 4096 NT_STATUS_OK
ReadX 11560 131072 61440 61440 NT_STATUS_OK
ReadX 11560 192512 4096 4096 NT_STATUS_OK
ReadX 11560 196608 61440 61440 NT_STATUS_OK
ReadX 11560 258048 4096 4096 NT_STATUS_OK
ReadX 11560 262144 61440 61440 NT_STATUS_OK
ReadX 11560 323584 4096 4096 NT_STATUS_OK
ReadX 11560 327680 61440 61440 NT_STATUS_OK
ReadX 11560 389120 4096 4096 NT_STATUS_OK
ReadX 11560 393216 61440 61440 NT_STATUS_OK
ReadX 11560 454656 4096 4096 NT_STATUS_OK
ReadX 11560 458752 61440 61440 NT_STATUS_OK
ReadX 11560 520192 4096 4096 NT_STATUS_OK
ReadX 11560 524288 61440 61440 NT_STATUS_OK
ReadX 11560 585728 4096 4096 NT_STATUS_OK
ReadX 11560 589824 61440 61440 NT_STATUS_OK
ReadX 11560 651264 4096 4096 NT_STATUS_OK
ReadX 11560 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 61440 61440 NT_STATUS_OK
ReadX 11561 61440 4096 4096 NT_STATUS_OK
ReadX 11561 65536 61440 61440 NT_STATUS_OK
ReadX 11561 126976 4096 4096 NT_STATUS_OK
ReadX 11561 131072 61440 61440 NT_STATUS_OK
ReadX 11561 192512 4096 4096 NT_STATUS_OK
ReadX 11561 196608 61440 61440 NT_STATUS_OK
ReadX 11561 258048 4096 4096 NT_STATUS_OK
ReadX 11561 262144 61440 61440 NT_STATUS_OK
ReadX 11561 323584 4096 4096 NT_STATUS_OK
ReadX 11561 327680 61440 61440 NT_STATUS_OK
ReadX 11561 389120 4096 4096 NT_STATUS_OK
ReadX 11561 393216 61440 61440 NT_STATUS_OK
ReadX 11561 454656 4096 4096 NT_STATUS_OK
ReadX 11561 458752 61440 61440 NT_STATUS_OK
ReadX 11561 520192 4096 4096 NT_STATUS_OK
ReadX 11561 524288 61440 61440 NT_STATUS_OK
ReadX 11561 585728 4096 4096 NT_STATUS_OK
ReadX 11561 589824 61440 61440 NT_STATUS_OK
ReadX 11561 651264 4096 4096 NT_STATUS_OK
ReadX 11561 655360 61440 61440 NT_STATUS_OK
ReadX 11561 716800 4096 4096 NT_STATUS_OK
ReadX 11561 720896 61440 61440 NT_STATUS_OK
ReadX 11561 782336 4096 4096 NT_STATUS_OK
ReadX 11561 786432 61440 61440 NT_STATUS_OK
ReadX 11561 847872 4096 4096 NT_STATUS_OK
ReadX 11561 851968 61440 61440 NT_STATUS_OK
ReadX 11561 913408 4096 4096 NT_STATUS_OK
ReadX 11561 917504 61440 61440 NT_STATUS_OK
ReadX 11561 978944 4096 4096 NT_STATUS_OK
ReadX 11561 983040 61440 61440 NT_STATUS_OK
ReadX 11561 1044480 4096 4096 NT_STATUS_OK
ReadX 11561 1048576 61440 61440 NT_STATUS_OK
ReadX 11561 1110016 4096 4096 NT_STATUS_OK
ReadX 11561 1114112 61440 61440 NT_STATUS_OK
ReadX 11561 1175552 4096 4096 NT_STATUS_OK
ReadX 11561 1179648 61440 61440 NT_STATUS_OK
ReadX 11561 1241088 4096 4096 NT_STATUS_OK
ReadX 11561 1245184 61440 61440 NT_STATUS_OK
ReadX 11561 1306624 4096 4096 NT_STATUS_OK
ReadX 11561 1310720 61440 61440 NT_STATUS_OK
ReadX 11561 1372160 4096 4096 NT_STATUS_OK
ReadX 11561 1376256 61440 61440 NT_STATUS_OK
ReadX 11561 1437696 4096 4096 NT_STATUS_OK
ReadX 11561 1441792 61440 61440 NT_STATUS_OK
ReadX 11561 1503232 4096 4096 NT_STATUS_OK
ReadX 11561 1507328 61440 61440 NT_STATUS_OK
ReadX 11561 1568768 4096 4096 NT_STATUS_OK
ReadX 11561 1572864 61440 61440 NT_STATUS_OK
ReadX 11561 1634304 4096 4096 NT_STATUS_OK
ReadX 11561 1638400 61440 61440 NT_STATUS_OK
ReadX 11561 1699840 4096 4096 NT_STATUS_OK
ReadX 11561 1703936 61440 61440 NT_STATUS_OK
ReadX 11561 1765376 4096 4096 NT_STATUS_OK
ReadX 11561 1769472 61440 61440 NT_STATUS_OK
ReadX 11561 1830912 4096 4096 NT_STATUS_OK
ReadX 11561 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11560 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
ReadX 11566 4096 4096 4096 NT_STATUS_OK
ReadX 11566 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11567 NT_STATUS_OK
Close 11567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11569 NT_STATUS_OK
ReadX 11569 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11570 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11569 NT_STATUS_OK
Close 11570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 8192 8192 NT_STATUS_OK
ReadX 11574 8192 8192 8192 NT_STATUS_OK
ReadX 11574 16384 8192 8192 NT_STATUS_OK
ReadX 11574 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11579 NT_STATUS_OK
WriteX 11579 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 258 NT_STATUS_OK
WriteX 11579 0 10438 10438 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11583 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11585 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11587 NT_STATUS_OK
Close 11587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
ReadX 11588 4096 4096 4096 NT_STATUS_OK
ReadX 11588 8192 4096 4096 NT_STATUS_OK
ReadX 11588 12288 8192 8192 NT_STATUS_OK
ReadX 11588 20480 8192 8192 NT_STATUS_OK
ReadX 11588 28672 8192 8192 NT_STATUS_OK
ReadX 11588 36864 8192 8192 NT_STATUS_OK
ReadX 11588 45056 8192 8192 NT_STATUS_OK
ReadX 11588 53248 8192 8192 NT_STATUS_OK
ReadX 11588 61440 8192 8192 NT_STATUS_OK
ReadX 11588 69632 8192 8192 NT_STATUS_OK
ReadX 11588 77824 8192 8192 NT_STATUS_OK
ReadX 11588 86016 8192 8192 NT_STATUS_OK
ReadX 11588 94208 8192 8192 NT_STATUS_OK
ReadX 11588 102400 8192 8192 NT_STATUS_OK
ReadX 11588 110592 8192 8192 NT_STATUS_OK
ReadX 11588 118784 8192 8192 NT_STATUS_OK
ReadX 11588 126976 8192 8192 NT_STATUS_OK
ReadX 11588 135168 8192 8192 NT_STATUS_OK
ReadX 11588 143360 8192 8192 NT_STATUS_OK
ReadX 11588 151552 8192 8192 NT_STATUS_OK
ReadX 11588 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11593 NT_STATUS_OK
WriteX 11593 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11593 258 NT_STATUS_OK
WriteX 11593 0 28489 28489 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11594 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11596 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11597 NT_STATUS_OK
Close 11597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 8192 8192 NT_STATUS_OK
ReadX 11600 8192 8192 8192 NT_STATUS_OK
ReadX 11600 16384 8192 8192 NT_STATUS_OK
ReadX 11600 24576 8192 8192 NT_STATUS_OK
ReadX 11600 32768 16384 16384 NT_STATUS_OK
ReadX 11600 49152 8192 8192 NT_STATUS_OK
ReadX 11600 57344 8192 8192 NT_STATUS_OK
ReadX 11600 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11602 NT_STATUS_OK
Close 11602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11605 NT_STATUS_OK
WriteX 11605 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11605 258 NT_STATUS_OK
WriteX 11605 0 29253 29253 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11612 NT_STATUS_OK
WriteX 11612 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11612 258 NT_STATUS_OK
WriteX 11612 0 30183 30183 NT_STATUS_OK
Close 11612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11613 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11615 NT_STATUS_OK
WriteX 11615 0 510 510 NT_STATUS_OK
WriteX 11615 510 512 512 NT_STATUS_OK
WriteX 11615 1022 510 510 NT_STATUS_OK
WriteX 11615 1532 510 510 NT_STATUS_OK
WriteX 11615 2042 168 168 NT_STATUS_OK
Close 11615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 4096 4096 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 61440 4096 4096 NT_STATUS_OK
ReadX 11619 126976 4096 4096 NT_STATUS_OK
WriteX 11619 0 65536 65536 NT_STATUS_OK
WriteX 11619 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 61440 4096 4096 NT_STATUS_OK
ReadX 11620 126976 4096 4096 NT_STATUS_OK
ReadX 11620 192512 4096 4096 NT_STATUS_OK
ReadX 11620 258048 4096 4096 NT_STATUS_OK
WriteX 11620 0 65536 65536 NT_STATUS_OK
WriteX 11620 65536 65536 65536 NT_STATUS_OK
WriteX 11620 131072 65536 65536 NT_STATUS_OK
WriteX 11620 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 61440 4096 4096 NT_STATUS_OK
ReadX 11621 126976 4096 4096 NT_STATUS_OK
ReadX 11621 192512 4096 4096 NT_STATUS_OK
ReadX 11621 258048 4096 4096 NT_STATUS_OK
ReadX 11621 323584 4096 4096 NT_STATUS_OK
ReadX 11621 389120 4096 4096 NT_STATUS_OK
ReadX 11621 454656 4096 4096 NT_STATUS_OK
ReadX 11621 520192 4096 4096 NT_STATUS_OK
WriteX 11621 0 65536 65536 NT_STATUS_OK
WriteX 11621 65536 65536 65536 NT_STATUS_OK
WriteX 11621 131072 65536 65536 NT_STATUS_OK
WriteX 11621 196608 65536 65536 NT_STATUS_OK
WriteX 11621 262144 65536 65536 NT_STATUS_OK
WriteX 11621 327680 65536 65536 NT_STATUS_OK
WriteX 11621 393216 65536 65536 NT_STATUS_OK
WriteX 11621 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11622 NT_STATUS_OK
Close 11622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11631 NT_STATUS_OK
Close 11631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11637 NT_STATUS_OK
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11640 NT_STATUS_OK
Close 11640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11642 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11646 NT_STATUS_OK
Close 11646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11651 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11656 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11666 NT_STATUS_OK
Close 11666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11671 NT_STATUS_OK
Close 11671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11676 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11684 NT_STATUS_OK
Close 11684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11687 NT_STATUS_OK
Close 11687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11690 NT_STATUS_OK
WriteX 11690 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11690 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11690 0 65536 65536 NT_STATUS_OK
WriteX 11690 65536 65536 65536 NT_STATUS_OK
WriteX 11690 131072 65536 65536 NT_STATUS_OK
WriteX 11690 196608 65536 65536 NT_STATUS_OK
WriteX 11690 262144 26634 26634 NT_STATUS_OK
Close 11690 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11696 NT_STATUS_OK
Close 11696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
ReadX 11698 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11699 NT_STATUS_OK
Close 11699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11706 NT_STATUS_OK
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11708 NT_STATUS_OK
Close 11708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11712 NT_STATUS_OK
Close 11712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11736 NT_STATUS_OK
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11741 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11755 NT_STATUS_OK
Close 11755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11763 NT_STATUS_OK
Close 11763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11765 NT_STATUS_OK
Close 11765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
Close 11791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11822 0 4096 4096 NT_STATUS_OK
Close 11822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
ReadX 11824 4096 4096 4096 NT_STATUS_OK
ReadX 11824 8192 4096 4096 NT_STATUS_OK
ReadX 11824 12288 4096 4096 NT_STATUS_OK
ReadX 11824 16384 4096 4096 NT_STATUS_OK
ReadX 11824 20480 4096 4096 NT_STATUS_OK
ReadX 11824 24576 4096 4096 NT_STATUS_OK
ReadX 11824 28672 4096 4096 NT_STATUS_OK
ReadX 11824 32768 4096 4096 NT_STATUS_OK
ReadX 11824 36864 4096 4096 NT_STATUS_OK
ReadX 11824 40960 4096 4096 NT_STATUS_OK
ReadX 11824 45056 4096 4096 NT_STATUS_OK
ReadX 11824 49152 4096 4096 NT_STATUS_OK
ReadX 11824 53248 4096 4096 NT_STATUS_OK
ReadX 11824 57344 4096 4096 NT_STATUS_OK
ReadX 11824 61440 4096 4096 NT_STATUS_OK
ReadX 11824 65536 4096 4096 NT_STATUS_OK
ReadX 11824 69632 4096 4096 NT_STATUS_OK
ReadX 11824 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11824 1004 NT_STATUS_OK
WriteX 11824 0 4096 4096 NT_STATUS_OK
Close 11824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11825 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
Close 11825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11830 NT_STATUS_OK
WriteX 11830 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 258 NT_STATUS_OK
WriteX 11830 0 65536 65536 NT_STATUS_OK
WriteX 11830 65536 19979 19979 NT_STATUS_OK
Close 11830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
WriteX 11831 0 4096 4096 NT_STATUS_OK
Flush 11831 NT_STATUS_OK
WriteX 11831 0 4096 4096 NT_STATUS_OK
Flush 11831 NT_STATUS_OK
QUERY_FILE_INFORMATION 11831 1004 NT_STATUS_OK
WriteX 11831 0 4096 4096 NT_STATUS_OK
Flush 11831 NT_STATUS_OK
WriteX 11831 0 4096 4096 NT_STATUS_OK
Flush 11831 NT_STATUS_OK
WriteX 11831 0 4096 4096 NT_STATUS_OK
Flush 11831 NT_STATUS_OK
SET_FILE_INFORMATION 11831 1004 NT_STATUS_OK
WriteX 11831 0 4096 4096 NT_STATUS_OK
Flush 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
Close 11832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
Close 11834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 4096 4096 NT_STATUS_OK
Close 11835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
WriteX 11836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11833 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11842 NT_STATUS_OK
WriteX 11842 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 258 NT_STATUS_OK
WriteX 11842 0 65536 65536 NT_STATUS_OK
WriteX 11842 65536 17654 17654 NT_STATUS_OK
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 4096 4096 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 1004 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
SET_FILE_INFORMATION 11843 1004 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
Close 11843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11844 NT_STATUS_OK
SET_FILE_INFORMATION 11844 1004 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11848 4096 4096 4096 NT_STATUS_OK
ReadX 11848 8192 4096 4096 NT_STATUS_OK
ReadX 11848 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11848 16384 4096 4096 NT_STATUS_OK
ReadX 11848 20480 4096 4096 NT_STATUS_OK
ReadX 11848 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11849 NT_STATUS_OK
ReadX 11849 0 4096 4096 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
Close 11850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11851 NT_STATUS_OK
ReadX 11851 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11854 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11857 NT_STATUS_OK
WriteX 11857 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 258 NT_STATUS_OK
WriteX 11857 0 65536 65536 NT_STATUS_OK
WriteX 11857 65536 19490 19490 NT_STATUS_OK
Close 11857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
WriteX 11858 0 4096 4096 NT_STATUS_OK
Flush 11858 NT_STATUS_OK
WriteX 11858 0 4096 4096 NT_STATUS_OK
Flush 11858 NT_STATUS_OK
QUERY_FILE_INFORMATION 11858 1004 NT_STATUS_OK
WriteX 11858 0 4096 4096 NT_STATUS_OK
Flush 11858 NT_STATUS_OK
WriteX 11858 0 4096 4096 NT_STATUS_OK
Flush 11858 NT_STATUS_OK
WriteX 11858 0 4096 4096 NT_STATUS_OK
Flush 11858 NT_STATUS_OK
SET_FILE_INFORMATION 11858 1004 NT_STATUS_OK
WriteX 11858 0 4096 4096 NT_STATUS_OK
Flush 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11859 NT_STATUS_OK
SET_FILE_INFORMATION 11859 1004 NT_STATUS_OK
Close 11859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11863 0 4096 4096 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
ReadX 11865 4096 4096 4096 NT_STATUS_OK
ReadX 11865 8192 4096 4096 NT_STATUS_OK
ReadX 11865 12288 4096 4096 NT_STATUS_OK
ReadX 11865 16384 4096 4096 NT_STATUS_OK
ReadX 11865 20480 4096 4096 NT_STATUS_OK
ReadX 11865 24576 4096 4096 NT_STATUS_OK
ReadX 11865 28672 4096 4096 NT_STATUS_OK
ReadX 11865 32768 4096 4096 NT_STATUS_OK
ReadX 11865 36864 4096 4096 NT_STATUS_OK
ReadX 11865 40960 4096 4096 NT_STATUS_OK
ReadX 11865 45056 4096 4096 NT_STATUS_OK
ReadX 11865 49152 4096 4096 NT_STATUS_OK
ReadX 11865 53248 4096 4096 NT_STATUS_OK
ReadX 11865 57344 4096 4096 NT_STATUS_OK
ReadX 11865 61440 4096 4096 NT_STATUS_OK
ReadX 11865 65536 4096 4096 NT_STATUS_OK
ReadX 11865 69632 4096 4096 NT_STATUS_OK
ReadX 11865 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11865 1004 NT_STATUS_OK
WriteX 11865 0 4096 4096 NT_STATUS_OK
Close 11865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11866 NT_STATUS_OK
SET_FILE_INFORMATION 11866 1004 NT_STATUS_OK
Close 11866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11868 NT_STATUS_OK
Close 11868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11871 NT_STATUS_OK
WriteX 11871 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 258 NT_STATUS_OK
WriteX 11871 0 65536 65536 NT_STATUS_OK
WriteX 11871 65536 8866 8866 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 4096 4096 NT_STATUS_OK
WriteX 11872 0 4096 4096 NT_STATUS_OK
Flush 11872 NT_STATUS_OK
SET_FILE_INFORMATION 11872 1004 NT_STATUS_OK
WriteX 11872 0 4096 4096 NT_STATUS_OK
Flush 11872 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 4096 4096 NT_STATUS_OK
Close 11875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11876 1004 NT_STATUS_OK
WriteX 11876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11877 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11879 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11882 NT_STATUS_OK
WriteX 11882 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 258 NT_STATUS_OK
WriteX 11882 0 65536 65536 NT_STATUS_OK
WriteX 11882 65536 9298 9298 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
SET_FILE_INFORMATION 11883 1004 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11884 NT_STATUS_OK
SET_FILE_INFORMATION 11884 1004 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11890 4096 4096 4096 NT_STATUS_OK
ReadX 11890 8192 4096 4096 NT_STATUS_OK
ReadX 11890 12288 4096 4096 NT_STATUS_OK
ReadX 11890 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
Close 11892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11893 1004 NT_STATUS_OK
WriteX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11894 NT_STATUS_OK
Close 11894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11899 NT_STATUS_OK
WriteX 11899 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 258 NT_STATUS_OK
WriteX 11899 0 65536 65536 NT_STATUS_OK
WriteX 11899 65536 11540 11540 NT_STATUS_OK
Close 11899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
WriteX 11900 0 4096 4096 NT_STATUS_OK
Flush 11900 NT_STATUS_OK
SET_FILE_INFORMATION 11900 1004 NT_STATUS_OK
WriteX 11900 0 4096 4096 NT_STATUS_OK
Flush 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11901 NT_STATUS_OK
SET_FILE_INFORMATION 11901 1004 NT_STATUS_OK
Close 11901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11903 NT_STATUS_OK
Close 11903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 61440 4096 4096 NT_STATUS_OK
ReadX 11905 126976 4096 4096 NT_STATUS_OK
WriteX 11905 0 65536 65536 NT_STATUS_OK
WriteX 11905 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 61440 4096 4096 NT_STATUS_OK
ReadX 11906 126976 4096 4096 NT_STATUS_OK
ReadX 11906 192512 4096 4096 NT_STATUS_OK
ReadX 11906 258048 4096 4096 NT_STATUS_OK
WriteX 11906 0 65536 65536 NT_STATUS_OK
WriteX 11906 65536 65536 65536 NT_STATUS_OK
WriteX 11906 131072 65536 65536 NT_STATUS_OK
WriteX 11906 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 61440 4096 4096 NT_STATUS_OK
ReadX 11907 126976 4096 4096 NT_STATUS_OK
ReadX 11907 192512 4096 4096 NT_STATUS_OK
ReadX 11907 258048 4096 4096 NT_STATUS_OK
ReadX 11907 323584 4096 4096 NT_STATUS_OK
ReadX 11907 389120 4096 4096 NT_STATUS_OK
ReadX 11907 454656 4096 4096 NT_STATUS_OK
ReadX 11907 520192 4096 4096 NT_STATUS_OK
WriteX 11907 0 65536 65536 NT_STATUS_OK
WriteX 11907 65536 65536 65536 NT_STATUS_OK
WriteX 11907 131072 65536 65536 NT_STATUS_OK
WriteX 11907 196608 65536 65536 NT_STATUS_OK
WriteX 11907 262144 65536 65536 NT_STATUS_OK
WriteX 11907 327680 65536 65536 NT_STATUS_OK
WriteX 11907 393216 65536 65536 NT_STATUS_OK
WriteX 11907 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
ReadX 11908 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11909 NT_STATUS_OK
WriteX 11909 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 258 NT_STATUS_OK
WriteX 11909 0 53 53 NT_STATUS_OK
Close 11909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11848 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11908 8192 4096 4096 NT_STATUS_OK
ReadX 11908 12288 4096 4096 NT_STATUS_OK
WriteX 11912 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11912 258 NT_STATUS_OK
ReadX 11908 16384 4096 4096 NT_STATUS_OK
ReadX 11908 20480 4096 4096 NT_STATUS_OK
WriteX 11912 0 15360 15360 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11913 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11913 1004 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11917 NT_STATUS_OK
Close 11917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11916 4096 4096 4096 NT_STATUS_OK
ReadX 11916 8192 4096 4096 NT_STATUS_OK
ReadX 11916 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 0 4096 4096 NT_STATUS_OK
ReadX 11919 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
ReadX 11920 4096 4096 4096 NT_STATUS_OK
ReadX 11920 8192 4096 4096 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11921 NT_STATUS_OK
WriteX 11921 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11921 258 NT_STATUS_OK
WriteX 11921 0 15360 15360 NT_STATUS_OK
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11922 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11922 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11923 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11926 NT_STATUS_OK
SET_FILE_INFORMATION 11926 1004 NT_STATUS_OK
Close 11926 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
ReadX 11929 4096 4096 4096 NT_STATUS_OK
ReadX 11929 8192 4096 4096 NT_STATUS_OK
ReadX 11929 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11929 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11929 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11931 NT_STATUS_OK
WriteX 11931 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11931 258 NT_STATUS_OK
WriteX 11931 0 53 53 NT_STATUS_OK
Close 11931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11932 NT_STATUS_OK
Close 11932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11930 4096 4096 4096 NT_STATUS_OK
ReadX 11930 8192 4096 4096 NT_STATUS_OK
ReadX 11930 12288 4096 4096 NT_STATUS_OK
WriteX 11934 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11934 258 NT_STATUS_OK
WriteX 11934 0 12006 12006 NT_STATUS_OK
Close 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11935 NT_STATUS_OK
ReadX 11935 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11935 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11935 1004 NT_STATUS_OK
WriteX 11935 0 4096 4096 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11936 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11939 NT_STATUS_OK
Close 11939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11938 4096 4096 4096 NT_STATUS_OK
ReadX 11938 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11941 NT_STATUS_OK
WriteX 11941 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 258 NT_STATUS_OK
WriteX 11941 0 11991 11991 NT_STATUS_OK
Close 11941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11942 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11942 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11943 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11946 NT_STATUS_OK
SET_FILE_INFORMATION 11946 1004 NT_STATUS_OK
Close 11946 NT_STATUS_OK
WriteX 11942 0 4096 4096 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11947 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11950 NT_STATUS_OK
Close 11950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
WriteX 11929 0 19054 19054 NT_STATUS_OK
ReadX 11949 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11949 1004 NT_STATUS_OK
ReadX 11949 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11949 1004 NT_STATUS_OK
WriteX 11949 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11949 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11949 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11949 1004 NT_STATUS_OK
Close 11925 NT_STATUS_OK
WriteX 11949 0 12288 12288 NT_STATUS_OK
Close 11945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11956 NT_STATUS_OK
ReadX 11956 0 61440 61440 NT_STATUS_OK
ReadX 11956 61440 4096 4096 NT_STATUS_OK
ReadX 11956 65536 61440 61440 NT_STATUS_OK
ReadX 11956 126976 4096 4096 NT_STATUS_OK
ReadX 11956 131072 61440 61440 NT_STATUS_OK
ReadX 11956 192512 4096 4096 NT_STATUS_OK
ReadX 11956 196608 61440 61440 NT_STATUS_OK
ReadX 11956 258048 4096 4096 NT_STATUS_OK
ReadX 11956 262144 61440 61440 NT_STATUS_OK
ReadX 11956 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 61440 61440 NT_STATUS_OK
ReadX 11957 61440 4096 4096 NT_STATUS_OK
ReadX 11957 65536 61440 61440 NT_STATUS_OK
ReadX 11957 126976 4096 4096 NT_STATUS_OK
ReadX 11957 131072 61440 61440 NT_STATUS_OK
ReadX 11957 192512 4096 4096 NT_STATUS_OK
ReadX 11957 196608 61440 61440 NT_STATUS_OK
ReadX 11957 258048 4096 4096 NT_STATUS_OK
ReadX 11957 262144 61440 61440 NT_STATUS_OK
ReadX 11957 323584 4096 4096 NT_STATUS_OK
ReadX 11957 327680 61440 61440 NT_STATUS_OK
ReadX 11957 389120 4096 4096 NT_STATUS_OK
ReadX 11957 393216 61440 61440 NT_STATUS_OK
ReadX 11957 454656 4096 4096 NT_STATUS_OK
ReadX 11957 458752 61440 61440 NT_STATUS_OK
ReadX 11957 520192 4096 4096 NT_STATUS_OK
ReadX 11957 524288 61440 61440 NT_STATUS_OK
ReadX 11957 585728 4096 4096 NT_STATUS_OK
ReadX 11957 589824 61440 61440 NT_STATUS_OK
ReadX 11957 651264 4096 4096 NT_STATUS_OK
ReadX 11957 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 61440 61440 NT_STATUS_OK
ReadX 11958 61440 4096 4096 NT_STATUS_OK
ReadX 11958 65536 61440 61440 NT_STATUS_OK
ReadX 11958 126976 4096 4096 NT_STATUS_OK
ReadX 11958 131072 61440 61440 NT_STATUS_OK
ReadX 11958 192512 4096 4096 NT_STATUS_OK
ReadX 11958 196608 61440 61440 NT_STATUS_OK
ReadX 11958 258048 4096 4096 NT_STATUS_OK
ReadX 11958 262144 61440 61440 NT_STATUS_OK
ReadX 11958 323584 4096 4096 NT_STATUS_OK
ReadX 11958 327680 61440 61440 NT_STATUS_OK
ReadX 11958 389120 4096 4096 NT_STATUS_OK
ReadX 11958 393216 61440 61440 NT_STATUS_OK
ReadX 11958 454656 4096 4096 NT_STATUS_OK
ReadX 11958 458752 61440 61440 NT_STATUS_OK
ReadX 11958 520192 4096 4096 NT_STATUS_OK
ReadX 11958 524288 61440 61440 NT_STATUS_OK
ReadX 11958 585728 4096 4096 NT_STATUS_OK
ReadX 11958 589824 61440 61440 NT_STATUS_OK
ReadX 11958 651264 4096 4096 NT_STATUS_OK
ReadX 11958 655360 61440 61440 NT_STATUS_OK
ReadX 11958 716800 4096 4096 NT_STATUS_OK
ReadX 11958 720896 61440 61440 NT_STATUS_OK
ReadX 11958 782336 4096 4096 NT_STATUS_OK
ReadX 11958 786432 61440 61440 NT_STATUS_OK
ReadX 11958 847872 4096 4096 NT_STATUS_OK
ReadX 11958 851968 61440 61440 NT_STATUS_OK
ReadX 11958 913408 4096 4096 NT_STATUS_OK
ReadX 11958 917504 61440 61440 NT_STATUS_OK
ReadX 11958 978944 4096 4096 NT_STATUS_OK
ReadX 11958 983040 61440 61440 NT_STATUS_OK
ReadX 11958 1044480 4096 4096 NT_STATUS_OK
ReadX 11958 1048576 61440 61440 NT_STATUS_OK
ReadX 11958 1110016 4096 4096 NT_STATUS_OK
ReadX 11958 1114112 61440 61440 NT_STATUS_OK
ReadX 11958 1175552 4096 4096 NT_STATUS_OK
ReadX 11958 1179648 61440 61440 NT_STATUS_OK
ReadX 11958 1241088 4096 4096 NT_STATUS_OK
ReadX 11958 1245184 61440 61440 NT_STATUS_OK
ReadX 11958 1306624 4096 4096 NT_STATUS_OK
ReadX 11958 1310720 61440 61440 NT_STATUS_OK
ReadX 11958 1372160 4096 4096 NT_STATUS_OK
ReadX 11958 1376256 61440 61440 NT_STATUS_OK
ReadX 11958 1437696 4096 4096 NT_STATUS_OK
ReadX 11958 1441792 61440 61440 NT_STATUS_OK
ReadX 11958 1503232 4096 4096 NT_STATUS_OK
ReadX 11958 1507328 61440 61440 NT_STATUS_OK
ReadX 11958 1568768 4096 4096 NT_STATUS_OK
ReadX 11958 1572864 61440 61440 NT_STATUS_OK
ReadX 11958 1634304 4096 4096 NT_STATUS_OK
ReadX 11958 1638400 61440 61440 NT_STATUS_OK
ReadX 11958 1699840 4096 4096 NT_STATUS_OK
ReadX 11958 1703936 61440 61440 NT_STATUS_OK
ReadX 11958 1765376 4096 4096 NT_STATUS_OK
ReadX 11958 1769472 61440 61440 NT_STATUS_OK
ReadX 11958 1830912 4096 4096 NT_STATUS_OK
ReadX 11958 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11960 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11965 NT_STATUS_OK
QUERY_FILE_INFORMATION 11965 1004 NT_STATUS_OK
WriteX 11965 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11965 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11966 NT_STATUS_OK
Close 11966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11967 NT_STATUS_OK
WriteX 11967 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11967 258 NT_STATUS_OK
WriteX 11967 0 491 491 NT_STATUS_OK
Close 11967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11965 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11970 NT_STATUS_OK
Close 11970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11971 NT_STATUS_OK
WriteX 11971 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11971 258 NT_STATUS_OK
WriteX 11971 0 543 543 NT_STATUS_OK
Close 11971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11956 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11979 NT_STATUS_OK
ReadX 11979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
WriteX 11985 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 258 NT_STATUS_OK
WriteX 11985 0 2048 2048 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11986 NT_STATUS_OK
ReadX 11986 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11991 NT_STATUS_OK
WriteX 11991 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11991 258 NT_STATUS_OK
WriteX 11991 0 2048 2048 NT_STATUS_OK
Close 11991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11997 NT_STATUS_OK
WriteX 11997 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11997 258 NT_STATUS_OK
WriteX 11997 0 2048 2048 NT_STATUS_OK
Close 11997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 2048 2048 NT_STATUS_OK
ReadX 11976 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11992 0 4096 4096 NT_STATUS_OK
WriteX 11976 0 8192 8192 NT_STATUS_OK
WriteX 11977 0 4096 4096 NT_STATUS_OK
WriteX 11978 0 4096 4096 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12002 NT_STATUS_OK
QUERY_FILE_INFORMATION 12002 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12022 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 1004 NT_STATUS_OK
WriteX 12022 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 258 NT_STATUS_OK
WriteX 12022 0 2048 2048 NT_STATUS_OK
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12023 0 4096 4096 NT_STATUS_OK
Flush 12023 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
Flush 12031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12023 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12033 NT_STATUS_OK
WriteX 12033 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12033 258 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12036 NT_STATUS_OK
WriteX 12036 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 258 NT_STATUS_OK
WriteX 12036 0 4096 4096 NT_STATUS_OK
Close 12036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12037 0 4096 4096 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12040 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12043 NT_STATUS_OK
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12044 NT_STATUS_OK
WriteX 12044 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12044 258 NT_STATUS_OK
WriteX 12044 0 2048 2048 NT_STATUS_OK
Close 12044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12053 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12059 NT_STATUS_OK
QUERY_FILE_INFORMATION 12059 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12057 NT_STATUS_OK
Close 12052 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12061 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12065 NT_STATUS_OK
ReadX 12065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12067 NT_STATUS_OK
ReadX 12067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12080 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12081 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 1004 NT_STATUS_OK
WriteX 12081 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 2048 2048 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12082 NT_STATUS_OK
ReadX 12082 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12085 NT_STATUS_OK
ReadX 12085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12086 NT_STATUS_OK
ReadX 12086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12093 NT_STATUS_OK
QUERY_FILE_INFORMATION 12093 1004 NT_STATUS_OK
WriteX 12093 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12093 258 NT_STATUS_OK
WriteX 12093 0 2048 2048 NT_STATUS_OK
Close 12093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12101 NT_STATUS_OK
QUERY_FILE_INFORMATION 12101 1004 NT_STATUS_OK
WriteX 12101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12101 258 NT_STATUS_OK
WriteX 12101 0 2048 2048 NT_STATUS_OK
Close 12101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12102 NT_STATUS_OK
ReadX 12102 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
WriteX 12094 0 4096 4096 NT_STATUS_OK
Flush 12094 NT_STATUS_OK
WriteX 12102 0 4096 4096 NT_STATUS_OK
Flush 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12094 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12102 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12084 4096 16384 16384 NT_STATUS_OK
ReadX 12064 4096 16384 16384 NT_STATUS_OK
ReadX 12096 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 2048 2048 NT_STATUS_OK
WriteX 12104 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12105 NT_STATUS_OK
QUERY_FILE_INFORMATION 12105 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12085 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Close 12072 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12107 NT_STATUS_OK
QUERY_FILE_INFORMATION 12107 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12109 NT_STATUS_OK
QUERY_FILE_INFORMATION 12109 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12116 NT_STATUS_OK
ReadX 12116 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12112 4096 16384 16384 NT_STATUS_OK
WriteX 12112 0 4096 4096 NT_STATUS_OK
WriteX 12113 0 4096 4096 NT_STATUS_OK
WriteX 12114 0 4096 4096 NT_STATUS_OK
WriteX 12115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12119 NT_STATUS_OK
ReadX 12119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12120 NT_STATUS_OK
ReadX 12120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12123 NT_STATUS_OK
ReadX 12123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12130 NT_STATUS_OK
ReadX 12130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 8192 8192 NT_STATUS_OK
ReadX 12118 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12132 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12132 0 4096 4096 NT_STATUS_OK
ReadX 12132 4096 4096 4096 NT_STATUS_OK
ReadX 12132 8192 4096 4096 NT_STATUS_OK
WriteX 12118 0 4096 4096 NT_STATUS_OK
WriteX 12119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12133 0 4096 4096 NT_STATUS_OK
ReadX 12133 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12112 0 4096 4096 NT_STATUS_OK
WriteX 12113 0 4096 4096 NT_STATUS_OK
WriteX 12114 0 4096 4096 NT_STATUS_OK
WriteX 12115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12137 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12138 NT_STATUS_OK
QUERY_FILE_INFORMATION 12138 1004 NT_STATUS_OK
WriteX 12138 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12138 258 NT_STATUS_OK
WriteX 12138 0 2048 2048 NT_STATUS_OK
Close 12138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12139 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12139 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
ReadX 12141 4096 4096 4096 NT_STATUS_OK
WriteX 12141 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12139 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12143 NT_STATUS_OK
ReadX 12143 0 4096 4096 NT_STATUS_OK
ReadX 12143 4096 4096 4096 NT_STATUS_OK
WriteX 12143 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12144 NT_STATUS_OK
QUERY_FILE_INFORMATION 12144 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Close 12116 NT_STATUS_OK
Close 12112 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12125 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12130 NT_STATUS_OK
Close 12118 NT_STATUS_OK
Close 12119 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12120 NT_STATUS_OK
Close 12121 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12146 0 4096 4096 NT_STATUS_OK
ReadX 12146 4096 4096 4096 NT_STATUS_OK
ReadX 12146 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12147 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12149 NT_STATUS_OK
ReadX 12149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12150 NT_STATUS_OK
ReadX 12150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
ReadX 12147 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12164 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 1004 NT_STATUS_OK
WriteX 12164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 258 NT_STATUS_OK
WriteX 12164 0 2048 2048 NT_STATUS_OK
Close 12164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12165 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12170 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 1004 NT_STATUS_OK
WriteX 12170 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 258 NT_STATUS_OK
WriteX 12170 0 2048 2048 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12171 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12154 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12172 NT_STATUS_OK
QUERY_FILE_INFORMATION 12172 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12147 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12149 NT_STATUS_OK
Close 12150 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12174 NT_STATUS_OK
QUERY_FILE_INFORMATION 12174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 61440 4096 4096 NT_STATUS_OK
ReadX 12176 126976 4096 4096 NT_STATUS_OK
WriteX 12176 0 65536 65536 NT_STATUS_OK
WriteX 12176 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 61440 4096 4096 NT_STATUS_OK
ReadX 12177 126976 4096 4096 NT_STATUS_OK
ReadX 12177 192512 4096 4096 NT_STATUS_OK
ReadX 12177 258048 4096 4096 NT_STATUS_OK
WriteX 12177 0 65536 65536 NT_STATUS_OK
WriteX 12177 65536 65536 65536 NT_STATUS_OK
WriteX 12177 131072 65536 65536 NT_STATUS_OK
WriteX 12177 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 61440 4096 4096 NT_STATUS_OK
ReadX 12178 126976 4096 4096 NT_STATUS_OK
ReadX 12178 192512 4096 4096 NT_STATUS_OK
ReadX 12178 258048 4096 4096 NT_STATUS_OK
ReadX 12178 323584 4096 4096 NT_STATUS_OK
ReadX 12178 389120 4096 4096 NT_STATUS_OK
ReadX 12178 454656 4096 4096 NT_STATUS_OK
ReadX 12178 520192 4096 4096 NT_STATUS_OK
WriteX 12178 0 65536 65536 NT_STATUS_OK
WriteX 12178 65536 65536 65536 NT_STATUS_OK
WriteX 12178 131072 65536 65536 NT_STATUS_OK
WriteX 12178 196608 65536 65536 NT_STATUS_OK
WriteX 12178 262144 65536 65536 NT_STATUS_OK
WriteX 12178 327680 65536 65536 NT_STATUS_OK
WriteX 12178 393216 65536 65536 NT_STATUS_OK
WriteX 12178 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12179 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12179 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12179 8192 4096 4096 NT_STATUS_OK
ReadX 12179 12288 4096 4096 NT_STATUS_OK
ReadX 12179 16384 4096 4096 NT_STATUS_OK
ReadX 12179 20480 4096 4096 NT_STATUS_OK
ReadX 12179 24576 4096 4096 NT_STATUS_OK
ReadX 12179 28672 4096 4096 NT_STATUS_OK
ReadX 12179 32768 4096 4096 NT_STATUS_OK
ReadX 12179 36864 4096 4096 NT_STATUS_OK
ReadX 12179 40960 4096 4096 NT_STATUS_OK
ReadX 12179 45056 4096 4096 NT_STATUS_OK
ReadX 12179 49152 4096 4096 NT_STATUS_OK
ReadX 12179 53248 4096 4096 NT_STATUS_OK
ReadX 12179 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12179 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12180 NT_STATUS_OK
Close 12180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12176 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12182 NT_STATUS_OK
WriteX 12182 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12182 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12182 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12182 1004 NT_STATUS_OK
WriteX 12182 0 57088 57088 NT_STATUS_OK
WriteX 12182 0 4096 4096 NT_STATUS_OK
Flush 12182 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12183 NT_STATUS_OK
SET_FILE_INFORMATION 12183 1004 NT_STATUS_OK
Close 12183 NT_STATUS_OK
SET_FILE_INFORMATION 12182 1004 NT_STATUS_OK
WriteX 12182 0 4096 4096 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12184 NT_STATUS_OK
Close 12184 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12186 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12187 NT_STATUS_OK
WriteX 12187 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12187 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12187 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12187 1004 NT_STATUS_OK
WriteX 12187 0 51456 51456 NT_STATUS_OK
WriteX 12187 0 4096 4096 NT_STATUS_OK
Flush 12187 NT_STATUS_OK
SET_FILE_INFORMATION 12187 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12187 1004 NT_STATUS_OK
WriteX 12187 0 4096 4096 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Close 12186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12189 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12191 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12193 NT_STATUS_OK
Close 12193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12196 NT_STATUS_OK
WriteX 12196 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12196 258 NT_STATUS_OK
WriteX 12196 0 53077 53077 NT_STATUS_OK
Close 12196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12197 NT_STATUS_OK
WriteX 12197 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12197 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12197 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12197 1004 NT_STATUS_OK
WriteX 12197 0 65536 65536 NT_STATUS_OK
WriteX 12197 65536 1856 1856 NT_STATUS_OK
WriteX 12197 0 4096 4096 NT_STATUS_OK
Flush 12197 NT_STATUS_OK
SET_FILE_INFORMATION 12197 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12197 1004 NT_STATUS_OK
WriteX 12197 0 4096 4096 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12203 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12206 NT_STATUS_OK
WriteX 12206 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12206 258 NT_STATUS_OK
WriteX 12206 0 7983 7983 NT_STATUS_OK
Close 12206 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12211 NT_STATUS_OK
WriteX 12211 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12211 258 NT_STATUS_OK
WriteX 12211 0 65536 65536 NT_STATUS_OK
WriteX 12211 65536 65536 65536 NT_STATUS_OK
WriteX 12211 131072 65536 65536 NT_STATUS_OK
WriteX 12211 196608 65536 65536 NT_STATUS_OK
WriteX 12211 262144 65536 65536 NT_STATUS_OK
WriteX 12211 327680 65536 65536 NT_STATUS_OK
WriteX 12211 393216 65536 65536 NT_STATUS_OK
WriteX 12211 458752 46731 46731 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12212 NT_STATUS_OK
WriteX 12212 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12212 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12201 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12212 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12212 1004 NT_STATUS_OK
WriteX 12212 0 65536 65536 NT_STATUS_OK
WriteX 12212 65536 22848 22848 NT_STATUS_OK
WriteX 12212 0 4096 4096 NT_STATUS_OK
Flush 12212 NT_STATUS_OK
SET_FILE_INFORMATION 12212 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12212 1004 NT_STATUS_OK
WriteX 12212 0 4096 4096 NT_STATUS_OK
Close 12212 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12214 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12216 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12217 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12217 1004 NT_STATUS_OK
ReadX 12217 8192 4096 4096 NT_STATUS_OK
ReadX 12217 12288 4096 4096 NT_STATUS_OK
ReadX 12217 16384 4096 4096 NT_STATUS_OK
ReadX 12217 20480 4096 4096 NT_STATUS_OK
ReadX 12217 24576 4096 4096 NT_STATUS_OK
ReadX 12217 28672 4096 4096 NT_STATUS_OK
ReadX 12217 32768 4096 4096 NT_STATUS_OK
ReadX 12217 36864 4096 4096 NT_STATUS_OK
ReadX 12217 40960 4096 4096 NT_STATUS_OK
ReadX 12217 45056 4096 4096 NT_STATUS_OK
ReadX 12217 49152 4096 4096 NT_STATUS_OK
ReadX 12217 53248 4096 4096 NT_STATUS_OK
ReadX 12217 57344 4096 4096 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 65536 4096 4096 NT_STATUS_OK
ReadX 12217 69632 4096 4096 NT_STATUS_OK
ReadX 12217 73728 4096 4096 NT_STATUS_OK
ReadX 12217 77824 4096 4096 NT_STATUS_OK
ReadX 12217 81920 4096 4096 NT_STATUS_OK
ReadX 12217 86016 4096 4096 NT_STATUS_OK
ReadX 12217 90112 4096 4096 NT_STATUS_OK
ReadX 12217 94208 4096 4096 NT_STATUS_OK
ReadX 12217 98304 4096 4096 NT_STATUS_OK
ReadX 12217 102400 4096 4096 NT_STATUS_OK
ReadX 12217 106496 4096 4096 NT_STATUS_OK
ReadX 12217 110592 4096 4096 NT_STATUS_OK
ReadX 12217 114688 4096 4096 NT_STATUS_OK
ReadX 12217 118784 4096 4096 NT_STATUS_OK
ReadX 12217 122880 4096 4096 NT_STATUS_OK
ReadX 12217 126976 4096 4096 NT_STATUS_OK
ReadX 12217 131072 4096 4096 NT_STATUS_OK
ReadX 12217 135168 4096 4096 NT_STATUS_OK
ReadX 12217 139264 4096 4096 NT_STATUS_OK
ReadX 12217 143360 4096 4096 NT_STATUS_OK
ReadX 12217 147456 4096 4096 NT_STATUS_OK
ReadX 12217 151552 4096 4096 NT_STATUS_OK
ReadX 12217 155648 4096 4096 NT_STATUS_OK
ReadX 12217 159744 4096 4096 NT_STATUS_OK
ReadX 12217 163840 4096 4096 NT_STATUS_OK
ReadX 12217 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12217 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12218 NT_STATUS_OK
Close 12218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12220 NT_STATUS_OK
WriteX 12220 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12220 258 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12221 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
Close 12221 NT_STATUS_OK
WriteX 12220 0 42388 42388 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
ReadX 12224 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12225 NT_STATUS_OK
WriteX 12225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12225 258 NT_STATUS_OK
SET_FILE_INFORMATION 12225 1004 NT_STATUS_OK
WriteX 12225 0 42652 42652 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Close 12224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12227 NT_STATUS_OK
Close 12227 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
ReadX 12229 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12231 NT_STATUS_OK
Close 12231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12234 NT_STATUS_OK
WriteX 12234 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 258 NT_STATUS_OK
WriteX 12234 0 65536 65536 NT_STATUS_OK
WriteX 12234 65536 49 49 NT_STATUS_OK
Close 12234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 61440 61440 NT_STATUS_OK
ReadX 12235 61440 4096 4096 NT_STATUS_OK
ReadX 12235 65536 61440 61440 NT_STATUS_OK
ReadX 12235 126976 4096 4096 NT_STATUS_OK
ReadX 12235 131072 61440 61440 NT_STATUS_OK
ReadX 12235 192512 4096 4096 NT_STATUS_OK
ReadX 12235 196608 61440 61440 NT_STATUS_OK
ReadX 12235 258048 4096 4096 NT_STATUS_OK
ReadX 12235 262144 61440 61440 NT_STATUS_OK
ReadX 12235 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 61440 61440 NT_STATUS_OK
ReadX 12236 61440 4096 4096 NT_STATUS_OK
ReadX 12236 65536 61440 61440 NT_STATUS_OK
ReadX 12236 126976 4096 4096 NT_STATUS_OK
ReadX 12236 131072 61440 61440 NT_STATUS_OK
ReadX 12236 192512 4096 4096 NT_STATUS_OK
ReadX 12236 196608 61440 61440 NT_STATUS_OK
ReadX 12236 258048 4096 4096 NT_STATUS_OK
ReadX 12236 262144 61440 61440 NT_STATUS_OK
ReadX 12236 323584 4096 4096 NT_STATUS_OK
ReadX 12236 327680 61440 61440 NT_STATUS_OK
ReadX 12236 389120 4096 4096 NT_STATUS_OK
ReadX 12236 393216 61440 61440 NT_STATUS_OK
ReadX 12236 454656 4096 4096 NT_STATUS_OK
ReadX 12236 458752 61440 61440 NT_STATUS_OK
ReadX 12236 520192 4096 4096 NT_STATUS_OK
ReadX 12236 524288 61440 61440 NT_STATUS_OK
ReadX 12236 585728 4096 4096 NT_STATUS_OK
ReadX 12236 589824 61440 61440 NT_STATUS_OK
ReadX 12236 651264 4096 4096 NT_STATUS_OK
ReadX 12236 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 61440 61440 NT_STATUS_OK
ReadX 12237 61440 4096 4096 NT_STATUS_OK
ReadX 12237 65536 61440 61440 NT_STATUS_OK
ReadX 12237 126976 4096 4096 NT_STATUS_OK
ReadX 12237 131072 61440 61440 NT_STATUS_OK
ReadX 12237 192512 4096 4096 NT_STATUS_OK
ReadX 12237 196608 61440 61440 NT_STATUS_OK
ReadX 12237 258048 4096 4096 NT_STATUS_OK
ReadX 12237 262144 61440 61440 NT_STATUS_OK
ReadX 12237 323584 4096 4096 NT_STATUS_OK
ReadX 12237 327680 61440 61440 NT_STATUS_OK
ReadX 12237 389120 4096 4096 NT_STATUS_OK
ReadX 12237 393216 61440 61440 NT_STATUS_OK
ReadX 12237 454656 4096 4096 NT_STATUS_OK
ReadX 12237 458752 61440 61440 NT_STATUS_OK
ReadX 12237 520192 4096 4096 NT_STATUS_OK
ReadX 12237 524288 61440 61440 NT_STATUS_OK
ReadX 12237 585728 4096 4096 NT_STATUS_OK
ReadX 12237 589824 61440 61440 NT_STATUS_OK
ReadX 12237 651264 4096 4096 NT_STATUS_OK
ReadX 12237 655360 61440 61440 NT_STATUS_OK
ReadX 12237 716800 4096 4096 NT_STATUS_OK
ReadX 12237 720896 61440 61440 NT_STATUS_OK
ReadX 12237 782336 4096 4096 NT_STATUS_OK
ReadX 12237 786432 61440 61440 NT_STATUS_OK
ReadX 12237 847872 4096 4096 NT_STATUS_OK
ReadX 12237 851968 61440 61440 NT_STATUS_OK
ReadX 12237 913408 4096 4096 NT_STATUS_OK
ReadX 12237 917504 61440 61440 NT_STATUS_OK
ReadX 12237 978944 4096 4096 NT_STATUS_OK
ReadX 12237 983040 61440 61440 NT_STATUS_OK
ReadX 12237 1044480 4096 4096 NT_STATUS_OK
ReadX 12237 1048576 61440 61440 NT_STATUS_OK
ReadX 12237 1110016 4096 4096 NT_STATUS_OK
ReadX 12237 1114112 61440 61440 NT_STATUS_OK
ReadX 12237 1175552 4096 4096 NT_STATUS_OK
ReadX 12237 1179648 61440 61440 NT_STATUS_OK
ReadX 12237 1241088 4096 4096 NT_STATUS_OK
ReadX 12237 1245184 61440 61440 NT_STATUS_OK
ReadX 12237 1306624 4096 4096 NT_STATUS_OK
ReadX 12237 1310720 61440 61440 NT_STATUS_OK
ReadX 12237 1372160 4096 4096 NT_STATUS_OK
ReadX 12237 1376256 61440 61440 NT_STATUS_OK
ReadX 12237 1437696 4096 4096 NT_STATUS_OK
ReadX 12237 1441792 61440 61440 NT_STATUS_OK
ReadX 12237 1503232 4096 4096 NT_STATUS_OK
ReadX 12237 1507328 61440 61440 NT_STATUS_OK
ReadX 12237 1568768 4096 4096 NT_STATUS_OK
ReadX 12237 1572864 61440 61440 NT_STATUS_OK
ReadX 12237 1634304 4096 4096 NT_STATUS_OK
ReadX 12237 1638400 61440 61440 NT_STATUS_OK
ReadX 12237 1699840 4096 4096 NT_STATUS_OK
ReadX 12237 1703936 61440 61440 NT_STATUS_OK
ReadX 12237 1765376 4096 4096 NT_STATUS_OK
ReadX 12237 1769472 61440 61440 NT_STATUS_OK
ReadX 12237 1830912 4096 4096 NT_STATUS_OK
ReadX 12237 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12238 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12239 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 1005 NT_STATUS_OK
ReadX 12239 2156 24 24 NT_STATUS_OK
ReadX 12239 2139 276 276 NT_STATUS_OK
ReadX 12239 2136 14 14 NT_STATUS_OK
ReadX 12239 2136 7 7 NT_STATUS_OK
ReadX 12239 2138 12 12 NT_STATUS_OK
ReadX 12239 2137 8 8 NT_STATUS_OK
ReadX 12239 2135 15 15 NT_STATUS_OK
ReadX 12239 0 16 16 NT_STATUS_OK
ReadX 12239 16 2048 2048 NT_STATUS_OK
ReadX 12239 2064 2048 2048 NT_STATUS_OK
ReadX 12239 257 2048 2048 NT_STATUS_OK
ReadX 12239 385 2048 2048 NT_STATUS_OK
ReadX 12239 513 2048 2048 NT_STATUS_OK
ReadX 12239 641 2048 2048 NT_STATUS_OK
ReadX 12239 769 2048 2048 NT_STATUS_OK
ReadX 12239 897 2048 2048 NT_STATUS_OK
ReadX 12239 1025 2048 2048 NT_STATUS_OK
ReadX 12239 1153 2048 2048 NT_STATUS_OK
ReadX 12239 1281 2048 2048 NT_STATUS_OK
ReadX 12239 1409 2048 2048 NT_STATUS_OK
ReadX 12239 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12244 NT_STATUS_OK
WriteX 12244 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 258 NT_STATUS_OK
WriteX 12244 0 10575 10575 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
Close 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12249 NT_STATUS_OK
LockX 12249 2147483538 1 NT_STATUS_OK
UnlockX 12249 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12249 1005 NT_STATUS_OK
ReadX 12249 0 512 512 NT_STATUS_OK
ReadX 12249 512 512 512 NT_STATUS_OK
ReadX 12249 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12249 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12249 1004 NT_STATUS_OK
Close 12249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12250 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 1005 NT_STATUS_OK
ReadX 12250 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12251 NT_STATUS_OK
LockX 12251 2147483538 1 NT_STATUS_OK
UnlockX 12251 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1005 NT_STATUS_OK
ReadX 12251 0 512 512 NT_STATUS_OK
ReadX 12251 512 512 512 NT_STATUS_OK
ReadX 12251 1024 512 512 NT_STATUS_OK
ReadX 12251 288 20 20 NT_STATUS_OK
ReadX 12251 308 2084 2084 NT_STATUS_OK
ReadX 12251 388 2084 2084 NT_STATUS_OK
ReadX 12251 388 2084 2084 NT_STATUS_OK
ReadX 12238 2157 1386 1386 NT_STATUS_OK
ReadX 12251 2472 399 399 NT_STATUS_OK
ReadX 12251 3072 1536 1536 NT_STATUS_OK
ReadX 12251 544 149 149 NT_STATUS_OK
ReadX 12251 693 485 485 NT_STATUS_OK
Close 12251 NT_STATUS_OK
ReadX 12238 2157 4096 4096 NT_STATUS_OK
ReadX 12238 6253 4096 4096 NT_STATUS_OK
ReadX 12238 10349 4096 4096 NT_STATUS_OK
ReadX 12238 14445 4096 4096 NT_STATUS_OK
ReadX 12238 18541 4096 4096 NT_STATUS_OK
ReadX 12238 22637 256 256 NT_STATUS_OK
ReadX 12238 22893 4096 4096 NT_STATUS_OK
ReadX 12238 26989 4096 4096 NT_STATUS_OK
ReadX 12238 31085 4096 4096 NT_STATUS_OK
ReadX 12238 35181 4096 4096 NT_STATUS_OK
ReadX 12238 39277 4096 4096 NT_STATUS_OK
ReadX 12238 43373 4096 4096 NT_STATUS_OK
ReadX 12238 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12238 2157 1024 1024 NT_STATUS_OK
ReadX 12238 1667 4688 4688 NT_STATUS_OK
ReadX 12238 6355 3516 3516 NT_STATUS_OK
ReadX 12238 9871 16384 16384 NT_STATUS_OK
ReadX 12238 26255 3771 3771 NT_STATUS_OK
ReadX 12238 30026 2048 2048 NT_STATUS_OK
ReadX 12238 32074 1024 1024 NT_STATUS_OK
ReadX 12238 33098 6652 6652 NT_STATUS_OK
ReadX 12238 39750 16384 16384 NT_STATUS_OK
ReadX 12238 56134 10496 10496 NT_STATUS_OK
ReadX 12238 66630 1784 1784 NT_STATUS_OK
ReadX 12238 68414 90 90 NT_STATUS_OK
ReadX 12238 68504 273 273 NT_STATUS_OK
ReadX 12238 68777 1600 1600 NT_STATUS_OK
ReadX 12238 70377 640 640 NT_STATUS_OK
ReadX 12238 71017 1280 1280 NT_STATUS_OK
ReadX 12238 72297 8464 8464 NT_STATUS_OK
ReadX 12238 80761 158 158 NT_STATUS_OK
ReadX 12238 80919 912 912 NT_STATUS_OK
ReadX 12238 81831 1980 1980 NT_STATUS_OK
ReadX 12238 83811 2256 2256 NT_STATUS_OK
ReadX 12238 86067 400 400 NT_STATUS_OK
ReadX 12238 86467 252 252 NT_STATUS_OK
ReadX 12238 86719 42 42 NT_STATUS_OK
ReadX 12238 86761 725 725 NT_STATUS_OK
ReadX 12238 2009 512 512 NT_STATUS_OK
ReadX 12238 3895 9 9 NT_STATUS_OK
ReadX 12238 3781 46 46 NT_STATUS_OK
ReadX 12238 4059 92 92 NT_STATUS_OK
ReadX 12238 3781 92 92 NT_STATUS_OK
ReadX 12238 3986 184 184 NT_STATUS_OK
ReadX 12238 3987 16384 16384 NT_STATUS_OK
ReadX 12238 3902 16384 16384 NT_STATUS_OK
ReadX 12238 3781 10240 10240 NT_STATUS_OK
ReadX 12238 3821 16384 16384 NT_STATUS_OK
ReadX 12238 3891 935 935 NT_STATUS_OK
ReadX 12238 4060 10240 10240 NT_STATUS_OK
ReadX 12238 4059 184 184 NT_STATUS_OK
ReadX 12238 256 184 184 NT_STATUS_OK
ReadX 12238 256 1026 1026 NT_STATUS_OK
ReadX 12238 3901 326 326 NT_STATUS_OK
ReadX 12238 3899 652 652 NT_STATUS_OK
ReadX 12238 256 2 2 NT_STATUS_OK
ReadX 12238 258 4948 4948 NT_STATUS_OK
Close 12238 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12256 NT_STATUS_OK
WriteX 12256 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12256 258 NT_STATUS_OK
WriteX 12256 0 65536 65536 NT_STATUS_OK
WriteX 12256 65536 65536 65536 NT_STATUS_OK
WriteX 12256 131072 65536 65536 NT_STATUS_OK
WriteX 12256 196608 65536 65536 NT_STATUS_OK
WriteX 12256 262144 65536 65536 NT_STATUS_OK
WriteX 12256 327680 65536 65536 NT_STATUS_OK
WriteX 12256 393216 65536 65536 NT_STATUS_OK
WriteX 12256 458752 65536 65536 NT_STATUS_OK
WriteX 12256 524288 65536 65536 NT_STATUS_OK
WriteX 12256 589824 35257 35257 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12258 NT_STATUS_OK
Close 12258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12261 NT_STATUS_OK
WriteX 12261 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12261 258 NT_STATUS_OK
WriteX 12261 0 65536 65536 NT_STATUS_OK
WriteX 12261 65536 65536 65536 NT_STATUS_OK
WriteX 12261 131072 65536 65536 NT_STATUS_OK
WriteX 12261 196608 65536 65536 NT_STATUS_OK
WriteX 12261 262144 65536 65536 NT_STATUS_OK
WriteX 12261 327680 65536 65536 NT_STATUS_OK
WriteX 12261 393216 65536 65536 NT_STATUS_OK
WriteX 12261 458752 65536 65536 NT_STATUS_OK
WriteX 12261 524288 65536 65536 NT_STATUS_OK
WriteX 12261 589824 57598 57598 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12263 NT_STATUS_OK
WriteX 12263 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12263 258 NT_STATUS_OK
WriteX 12263 0 12543 12543 NT_STATUS_OK
Flush 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12269 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 1005 NT_STATUS_OK
ReadX 12269 1938 24 24 NT_STATUS_OK
ReadX 12269 1920 276 276 NT_STATUS_OK
ReadX 12269 1918 14 14 NT_STATUS_OK
ReadX 12269 1918 7 7 NT_STATUS_OK
ReadX 12269 1919 12 12 NT_STATUS_OK
ReadX 12269 1919 8 8 NT_STATUS_OK
ReadX 12269 1917 15 15 NT_STATUS_OK
ReadX 12269 0 16 16 NT_STATUS_OK
ReadX 12269 16 2048 2048 NT_STATUS_OK
ReadX 12269 2064 2048 2048 NT_STATUS_OK
ReadX 12269 257 2048 2048 NT_STATUS_OK
ReadX 12269 385 2048 2048 NT_STATUS_OK
ReadX 12269 513 2048 2048 NT_STATUS_OK
ReadX 12269 641 2048 2048 NT_STATUS_OK
ReadX 12269 769 2048 2048 NT_STATUS_OK
ReadX 12269 897 2048 2048 NT_STATUS_OK
ReadX 12269 1025 2048 2048 NT_STATUS_OK
ReadX 12269 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12274 NT_STATUS_OK
WriteX 12274 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12274 258 NT_STATUS_OK
WriteX 12274 0 11588 11588 NT_STATUS_OK
Flush 12274 NT_STATUS_OK
Close 12274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
Close 12269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12279 NT_STATUS_OK
WriteX 12279 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12279 258 NT_STATUS_OK
WriteX 12279 0 11615 11615 NT_STATUS_OK
Flush 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12281 NT_STATUS_OK
Close 12281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12285 NT_STATUS_OK
Close 12285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12288 NT_STATUS_OK
WriteX 12288 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 258 NT_STATUS_OK
WriteX 12288 0 65536 65536 NT_STATUS_OK
WriteX 12288 65536 16050 16050 NT_STATUS_OK
Close 12288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12268 1939 64 64 NT_STATUS_OK
ReadX 12268 128 248 248 NT_STATUS_OK
ReadX 12268 128 568 568 NT_STATUS_OK
ReadX 12268 3872 1536 1536 NT_STATUS_OK
ReadX 12268 3456 2560 2560 NT_STATUS_OK
ReadX 12268 3136 512 512 NT_STATUS_OK
ReadX 12268 2880 4096 4096 NT_STATUS_OK
ReadX 12268 3264 3072 3072 NT_STATUS_OK
ReadX 12268 320 4096 4096 NT_STATUS_OK
ReadX 12268 1024 4096 4096 NT_STATUS_OK
ReadX 12268 3616 4096 4096 NT_STATUS_OK
ReadX 12268 1939 64 64 NT_STATUS_OK
ReadX 12268 128 248 248 NT_STATUS_OK
ReadX 12268 128 608 608 NT_STATUS_OK
ReadX 12268 2858 1024 1024 NT_STATUS_OK
ReadX 12268 2810 4096 4096 NT_STATUS_OK
ReadX 12268 2826 4096 4096 NT_STATUS_OK
ReadX 12268 2580 2048 2048 NT_STATUS_OK
ReadX 12268 2800 2560 2560 NT_STATUS_OK
ReadX 12268 2100 4096 4096 NT_STATUS_OK
ReadX 12268 2084 4096 4096 NT_STATUS_OK
ReadX 12268 868 4096 4096 NT_STATUS_OK
ReadX 12268 2324 4096 4096 NT_STATUS_OK
ReadX 12268 884 4096 4096 NT_STATUS_OK
ReadX 12268 2604 1024 1024 NT_STATUS_OK
ReadX 12268 580 4096 4096 NT_STATUS_OK
ReadX 12268 596 4096 4096 NT_STATUS_OK
ReadX 12268 2752 4096 4096 NT_STATUS_OK
ReadX 12268 2842 1024 1024 NT_STATUS_OK
ReadX 12268 660 4096 4096 NT_STATUS_OK
ReadX 12268 2720 4096 4096 NT_STATUS_OK
ReadX 12268 2736 4096 4096 NT_STATUS_OK
ReadX 12268 628 4096 4096 NT_STATUS_OK
ReadX 12268 2704 4096 4096 NT_STATUS_OK
ReadX 12268 1556 4096 4096 NT_STATUS_OK
ReadX 12268 576 4096 4096 NT_STATUS_OK
ReadX 12268 3168 1536 1536 NT_STATUS_OK
ReadX 12268 832 4096 4096 NT_STATUS_OK
ReadX 12268 1088 4096 4096 NT_STATUS_OK
ReadX 12268 1344 4096 4096 NT_STATUS_OK
ReadX 12268 1600 4096 4096 NT_STATUS_OK
ReadX 12268 1856 4096 4096 NT_STATUS_OK
ReadX 12268 2112 4096 4096 NT_STATUS_OK
ReadX 12268 1892 4096 4096 NT_STATUS_OK
ReadX 12268 820 4096 4096 NT_STATUS_OK
ReadX 12268 788 4096 4096 NT_STATUS_OK
ReadX 12268 1604 4096 4096 NT_STATUS_OK
ReadX 12268 3648 4096 4096 NT_STATUS_OK
ReadX 12268 2608 4096 4096 NT_STATUS_OK
ReadX 12268 548 4096 4096 NT_STATUS_OK
ReadX 12268 740 4096 4096 NT_STATUS_OK
ReadX 12268 1344 4096 4096 NT_STATUS_OK
ReadX 12268 3392 4096 4096 NT_STATUS_OK
ReadX 12268 3904 4096 4096 NT_STATUS_OK
ReadX 12268 644 4096 4096 NT_STATUS_OK
ReadX 12268 676 4096 4096 NT_STATUS_OK
ReadX 12268 2688 4096 4096 NT_STATUS_OK
ReadX 12268 320 4096 4096 NT_STATUS_OK
ReadX 12268 900 4096 4096 NT_STATUS_OK
ReadX 12268 1908 4096 4096 NT_STATUS_OK
ReadX 12268 852 4096 4096 NT_STATUS_OK
ReadX 12268 724 4096 4096 NT_STATUS_OK
ReadX 12268 2292 4096 4096 NT_STATUS_OK
ReadX 12268 612 4096 4096 NT_STATUS_OK
ReadX 12268 388 4096 4096 NT_STATUS_OK
ReadX 12268 2368 4096 4096 NT_STATUS_OK
ReadX 12268 2624 4096 4096 NT_STATUS_OK
ReadX 12268 500 4096 4096 NT_STATUS_OK
ReadX 12268 356 4096 4096 NT_STATUS_OK
ReadX 12268 1024 4096 4096 NT_STATUS_OK
ReadX 12268 576 4096 4096 NT_STATUS_OK
ReadX 12268 340 4096 4096 NT_STATUS_OK
ReadX 12268 420 4096 4096 NT_STATUS_OK
ReadX 12268 1600 4096 4096 NT_STATUS_OK
ReadX 12268 404 4096 4096 NT_STATUS_OK
ReadX 12268 1428 4096 4096 NT_STATUS_OK
ReadX 12268 2656 4096 4096 NT_STATUS_OK
ReadX 12268 2624 4096 4096 NT_STATUS_OK
ReadX 12268 452 4096 4096 NT_STATUS_OK
ReadX 12268 692 4096 4096 NT_STATUS_OK
ReadX 12268 564 4096 4096 NT_STATUS_OK
ReadX 12268 372 4096 4096 NT_STATUS_OK
ReadX 12268 468 4096 4096 NT_STATUS_OK
ReadX 12268 484 4096 4096 NT_STATUS_OK
ReadX 12268 1088 4096 4096 NT_STATUS_OK
ReadX 12268 1924 4096 4096 NT_STATUS_OK
ReadX 12268 2768 4096 4096 NT_STATUS_OK
ReadX 12268 832 4096 4096 NT_STATUS_OK
ReadX 12268 836 4096 4096 NT_STATUS_OK
ReadX 12268 1856 4096 4096 NT_STATUS_OK
ReadX 12268 2640 4096 4096 NT_STATUS_OK
ReadX 12268 436 4096 4096 NT_STATUS_OK
ReadX 12268 1828 4096 4096 NT_STATUS_OK
ReadX 12268 804 4096 4096 NT_STATUS_OK
ReadX 12268 1860 4096 4096 NT_STATUS_OK
ReadX 12268 1812 4096 4096 NT_STATUS_OK
ReadX 12268 756 4096 4096 NT_STATUS_OK
ReadX 12268 1636 4096 4096 NT_STATUS_OK
ReadX 12268 772 4096 4096 NT_STATUS_OK
ReadX 12268 2036 4096 4096 NT_STATUS_OK
ReadX 12268 1220 4096 4096 NT_STATUS_OK
ReadX 12268 1652 4096 4096 NT_STATUS_OK
ReadX 12268 2588 4096 4096 NT_STATUS_OK
ReadX 12268 916 4096 4096 NT_STATUS_OK
ReadX 12268 260 4096 4096 NT_STATUS_OK
ReadX 12268 932 4096 4096 NT_STATUS_OK
ReadX 12268 2624 4096 4096 NT_STATUS_OK
ReadX 12268 308 4096 4096 NT_STATUS_OK
ReadX 12268 292 4096 4096 NT_STATUS_OK
ReadX 12268 1140 4096 4096 NT_STATUS_OK
ReadX 12268 276 4096 4096 NT_STATUS_OK
ReadX 12268 2020 4096 4096 NT_STATUS_OK
ReadX 12268 2880 4096 4096 NT_STATUS_OK
ReadX 12268 516 4096 4096 NT_STATUS_OK
ReadX 12268 1844 4096 4096 NT_STATUS_OK
ReadX 12268 1124 4096 4096 NT_STATUS_OK
ReadX 12268 3136 4096 4096 NT_STATUS_OK
ReadX 12268 324 4096 4096 NT_STATUS_OK
ReadX 12268 1156 4096 4096 NT_STATUS_OK
ReadX 12268 1172 4096 4096 NT_STATUS_OK
ReadX 12268 2112 4096 4096 NT_STATUS_OK
ReadX 12268 2368 4096 4096 NT_STATUS_OK
ReadX 12268 964 4096 4096 NT_STATUS_OK
ReadX 12268 980 4096 4096 NT_STATUS_OK
ReadX 12268 1012 4096 4096 NT_STATUS_OK
ReadX 12268 532 4096 4096 NT_STATUS_OK
ReadX 12268 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12268 1620 4096 4096 NT_STATUS_OK
ReadX 12268 1604 4096 4096 NT_STATUS_OK
ReadX 12268 2116 4096 4096 NT_STATUS_OK
ReadX 12268 2132 4096 4096 NT_STATUS_OK
ReadX 12268 2148 4096 4096 NT_STATUS_OK
ReadX 12268 2276 4096 4096 NT_STATUS_OK
ReadX 12268 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12293 NT_STATUS_OK
QUERY_FILE_INFORMATION 12248 1004 NT_STATUS_OK
Close 12248 NT_STATUS_OK
WriteX 12293 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12293 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 1004 NT_STATUS_OK
Close 12250 NT_STATUS_OK
WriteX 12293 0 65536 65536 NT_STATUS_OK
WriteX 12293 65536 64850 64850 NT_STATUS_OK
Close 12293 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12295 NT_STATUS_OK
WriteX 12295 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12295 258 NT_STATUS_OK
ReadX 12268 2068 4096 4096 NT_STATUS_OK
ReadX 12268 1588 4096 4096 NT_STATUS_OK
ReadX 12268 1572 4096 4096 NT_STATUS_OK
WriteX 12295 0 18630 18630 NT_STATUS_OK
Flush 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12268 612 4096 4096 NT_STATUS_OK
ReadX 12268 564 4096 4096 NT_STATUS_OK
ReadX 12268 1876 4096 4096 NT_STATUS_OK
ReadX 12268 628 4096 4096 NT_STATUS_OK
ReadX 12268 740 4096 4096 NT_STATUS_OK
ReadX 12268 724 4096 4096 NT_STATUS_OK
ReadX 12268 644 4096 4096 NT_STATUS_OK
ReadX 12268 2324 4096 4096 NT_STATUS_OK
ReadX 12268 660 4096 4096 NT_STATUS_OK
ReadX 12268 852 4096 4096 NT_STATUS_OK
ReadX 12268 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12268 2368 4096 4096 NT_STATUS_OK
ReadX 12268 1024 4096 4096 NT_STATUS_OK
ReadX 12268 320 4096 4096 NT_STATUS_OK
ReadX 12268 580 4096 4096 NT_STATUS_OK
ReadX 12268 3136 512 512 NT_STATUS_OK
ReadX 12268 2880 4096 4096 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 61440 4096 4096 NT_STATUS_OK
ReadX 12300 126976 4096 4096 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 61440 4096 4096 NT_STATUS_OK
ReadX 12301 126976 4096 4096 NT_STATUS_OK
ReadX 12301 192512 4096 4096 NT_STATUS_OK
ReadX 12301 258048 4096 4096 NT_STATUS_OK
WriteX 12301 0 65536 65536 NT_STATUS_OK
WriteX 12301 65536 65536 65536 NT_STATUS_OK
WriteX 12301 131072 65536 65536 NT_STATUS_OK
WriteX 12301 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 61440 4096 4096 NT_STATUS_OK
ReadX 12302 126976 4096 4096 NT_STATUS_OK
ReadX 12302 192512 4096 4096 NT_STATUS_OK
ReadX 12302 258048 4096 4096 NT_STATUS_OK
ReadX 12302 323584 4096 4096 NT_STATUS_OK
ReadX 12302 389120 4096 4096 NT_STATUS_OK
ReadX 12302 454656 4096 4096 NT_STATUS_OK
ReadX 12302 520192 4096 4096 NT_STATUS_OK
WriteX 12302 0 65536 65536 NT_STATUS_OK
WriteX 12302 65536 65536 65536 NT_STATUS_OK
WriteX 12302 131072 65536 65536 NT_STATUS_OK
WriteX 12302 196608 65536 65536 NT_STATUS_OK
WriteX 12302 262144 65536 65536 NT_STATUS_OK
WriteX 12302 327680 65536 65536 NT_STATUS_OK
WriteX 12302 393216 65536 65536 NT_STATUS_OK
WriteX 12302 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12305 NT_STATUS_OK
WriteX 12305 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12305 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12303 0 8192 8192 NT_STATUS_OK
Flush 12303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12303 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12303 0 8192 8192 NT_STATUS_OK
Flush 12303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12303 0 8192 8192 NT_STATUS_OK
Flush 12303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12303 0 8192 8192 NT_STATUS_OK
Flush 12303 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12267 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Close 12301 NT_STATUS_OK
Close 12302 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12310 NT_STATUS_OK
WriteX 12310 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12310 258 NT_STATUS_OK
WriteX 12310 0 62591 62591 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12312 NT_STATUS_OK
Close 12312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12315 NT_STATUS_OK
WriteX 12315 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12315 258 NT_STATUS_OK
WriteX 12315 0 10845 10845 NT_STATUS_OK
Close 12315 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12317 NT_STATUS_OK
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12320 NT_STATUS_OK
WriteX 12320 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12320 258 NT_STATUS_OK
WriteX 12320 0 30118 30118 NT_STATUS_OK
Close 12320 NT_STATUS_OK
WriteX 12303 0 4096 4096 NT_STATUS_OK
WriteX 12305 0 64 64 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 61440 61440 NT_STATUS_OK
ReadX 12322 61440 4096 4096 NT_STATUS_OK
ReadX 12322 65536 61440 61440 NT_STATUS_OK
ReadX 12322 126976 4096 4096 NT_STATUS_OK
ReadX 12322 131072 61440 61440 NT_STATUS_OK
ReadX 12322 192512 4096 4096 NT_STATUS_OK
ReadX 12322 196608 61440 61440 NT_STATUS_OK
ReadX 12322 258048 4096 4096 NT_STATUS_OK
ReadX 12322 262144 61440 61440 NT_STATUS_OK
ReadX 12322 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 61440 61440 NT_STATUS_OK
ReadX 12323 61440 4096 4096 NT_STATUS_OK
ReadX 12323 65536 61440 61440 NT_STATUS_OK
ReadX 12323 126976 4096 4096 NT_STATUS_OK
ReadX 12323 131072 61440 61440 NT_STATUS_OK
ReadX 12323 192512 4096 4096 NT_STATUS_OK
ReadX 12323 196608 61440 61440 NT_STATUS_OK
ReadX 12323 258048 4096 4096 NT_STATUS_OK
ReadX 12323 262144 61440 61440 NT_STATUS_OK
ReadX 12323 323584 4096 4096 NT_STATUS_OK
ReadX 12323 327680 61440 61440 NT_STATUS_OK
ReadX 12323 389120 4096 4096 NT_STATUS_OK
ReadX 12323 393216 61440 61440 NT_STATUS_OK
ReadX 12323 454656 4096 4096 NT_STATUS_OK
ReadX 12323 458752 61440 61440 NT_STATUS_OK
ReadX 12323 520192 4096 4096 NT_STATUS_OK
ReadX 12323 524288 61440 61440 NT_STATUS_OK
ReadX 12323 585728 4096 4096 NT_STATUS_OK
ReadX 12323 589824 61440 61440 NT_STATUS_OK
ReadX 12323 651264 4096 4096 NT_STATUS_OK
ReadX 12323 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 61440 61440 NT_STATUS_OK
ReadX 12324 61440 4096 4096 NT_STATUS_OK
ReadX 12324 65536 61440 61440 NT_STATUS_OK
ReadX 12324 126976 4096 4096 NT_STATUS_OK
ReadX 12324 131072 61440 61440 NT_STATUS_OK
ReadX 12324 192512 4096 4096 NT_STATUS_OK
ReadX 12324 196608 61440 61440 NT_STATUS_OK
ReadX 12324 258048 4096 4096 NT_STATUS_OK
ReadX 12324 262144 61440 61440 NT_STATUS_OK
ReadX 12324 323584 4096 4096 NT_STATUS_OK
ReadX 12324 327680 61440 61440 NT_STATUS_OK
ReadX 12324 389120 4096 4096 NT_STATUS_OK
ReadX 12324 393216 61440 61440 NT_STATUS_OK
ReadX 12324 454656 4096 4096 NT_STATUS_OK
ReadX 12324 458752 61440 61440 NT_STATUS_OK
ReadX 12324 520192 4096 4096 NT_STATUS_OK
ReadX 12324 524288 61440 61440 NT_STATUS_OK
ReadX 12324 585728 4096 4096 NT_STATUS_OK
ReadX 12324 589824 61440 61440 NT_STATUS_OK
ReadX 12324 651264 4096 4096 NT_STATUS_OK
ReadX 12324 655360 61440 61440 NT_STATUS_OK
ReadX 12324 716800 4096 4096 NT_STATUS_OK
ReadX 12324 720896 61440 61440 NT_STATUS_OK
ReadX 12324 782336 4096 4096 NT_STATUS_OK
ReadX 12324 786432 61440 61440 NT_STATUS_OK
ReadX 12324 847872 4096 4096 NT_STATUS_OK
ReadX 12324 851968 61440 61440 NT_STATUS_OK
ReadX 12324 913408 4096 4096 NT_STATUS_OK
ReadX 12324 917504 61440 61440 NT_STATUS_OK
ReadX 12324 978944 4096 4096 NT_STATUS_OK
ReadX 12324 983040 61440 61440 NT_STATUS_OK
ReadX 12324 1044480 4096 4096 NT_STATUS_OK
ReadX 12324 1048576 61440 61440 NT_STATUS_OK
ReadX 12324 1110016 4096 4096 NT_STATUS_OK
ReadX 12324 1114112 61440 61440 NT_STATUS_OK
ReadX 12324 1175552 4096 4096 NT_STATUS_OK
ReadX 12324 1179648 61440 61440 NT_STATUS_OK
ReadX 12324 1241088 4096 4096 NT_STATUS_OK
ReadX 12324 1245184 61440 61440 NT_STATUS_OK
ReadX 12324 1306624 4096 4096 NT_STATUS_OK
ReadX 12324 1310720 61440 61440 NT_STATUS_OK
ReadX 12324 1372160 4096 4096 NT_STATUS_OK
ReadX 12324 1376256 61440 61440 NT_STATUS_OK
ReadX 12324 1437696 4096 4096 NT_STATUS_OK
ReadX 12324 1441792 61440 61440 NT_STATUS_OK
ReadX 12324 1503232 4096 4096 NT_STATUS_OK
ReadX 12324 1507328 61440 61440 NT_STATUS_OK
ReadX 12324 1568768 4096 4096 NT_STATUS_OK
ReadX 12324 1572864 61440 61440 NT_STATUS_OK
ReadX 12324 1634304 4096 4096 NT_STATUS_OK
ReadX 12324 1638400 61440 61440 NT_STATUS_OK
ReadX 12324 1699840 4096 4096 NT_STATUS_OK
ReadX 12324 1703936 61440 61440 NT_STATUS_OK
ReadX 12324 1765376 4096 4096 NT_STATUS_OK
ReadX 12324 1769472 61440 61440 NT_STATUS_OK
ReadX 12324 1830912 4096 4096 NT_STATUS_OK
ReadX 12324 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12323 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 4096 4096 NT_STATUS_OK
ReadX 12329 4096 4096 4096 NT_STATUS_OK
ReadX 12329 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12330 NT_STATUS_OK
Close 12330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12332 NT_STATUS_OK
ReadX 12332 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12333 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12332 NT_STATUS_OK
Close 12333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 8192 8192 NT_STATUS_OK
ReadX 12337 8192 8192 8192 NT_STATUS_OK
ReadX 12337 16384 8192 8192 NT_STATUS_OK
ReadX 12337 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12342 NT_STATUS_OK
WriteX 12342 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 258 NT_STATUS_OK
WriteX 12342 0 10438 10438 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12344 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12346 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12348 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
ReadX 12351 4096 4096 4096 NT_STATUS_OK
ReadX 12351 8192 4096 4096 NT_STATUS_OK
ReadX 12351 12288 8192 8192 NT_STATUS_OK
ReadX 12351 20480 8192 8192 NT_STATUS_OK
ReadX 12351 28672 8192 8192 NT_STATUS_OK
ReadX 12351 36864 8192 8192 NT_STATUS_OK
ReadX 12351 45056 8192 8192 NT_STATUS_OK
ReadX 12351 53248 8192 8192 NT_STATUS_OK
ReadX 12351 61440 8192 8192 NT_STATUS_OK
ReadX 12351 69632 8192 8192 NT_STATUS_OK
ReadX 12351 77824 8192 8192 NT_STATUS_OK
ReadX 12351 86016 8192 8192 NT_STATUS_OK
ReadX 12351 94208 8192 8192 NT_STATUS_OK
ReadX 12351 102400 8192 8192 NT_STATUS_OK
ReadX 12351 110592 8192 8192 NT_STATUS_OK
ReadX 12351 118784 8192 8192 NT_STATUS_OK
ReadX 12351 126976 8192 8192 NT_STATUS_OK
ReadX 12351 135168 8192 8192 NT_STATUS_OK
ReadX 12351 143360 8192 8192 NT_STATUS_OK
ReadX 12351 151552 8192 8192 NT_STATUS_OK
ReadX 12351 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12344 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12356 NT_STATUS_OK
WriteX 12356 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12356 258 NT_STATUS_OK
WriteX 12356 0 28489 28489 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12357 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12359 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12360 NT_STATUS_OK
Close 12360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 8192 8192 NT_STATUS_OK
ReadX 12363 8192 8192 8192 NT_STATUS_OK
ReadX 12363 16384 8192 8192 NT_STATUS_OK
ReadX 12363 24576 8192 8192 NT_STATUS_OK
ReadX 12363 32768 16384 16384 NT_STATUS_OK
ReadX 12363 49152 8192 8192 NT_STATUS_OK
ReadX 12363 57344 8192 8192 NT_STATUS_OK
ReadX 12363 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12365 NT_STATUS_OK
Close 12365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12368 NT_STATUS_OK
WriteX 12368 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12368 258 NT_STATUS_OK
WriteX 12368 0 29253 29253 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12375 NT_STATUS_OK
WriteX 12375 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12375 258 NT_STATUS_OK
WriteX 12375 0 30183 30183 NT_STATUS_OK
Close 12375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12378 NT_STATUS_OK
WriteX 12378 0 510 510 NT_STATUS_OK
WriteX 12378 510 512 512 NT_STATUS_OK
WriteX 12378 1022 510 510 NT_STATUS_OK
WriteX 12378 1532 510 510 NT_STATUS_OK
WriteX 12378 2042 168 168 NT_STATUS_OK
Close 12378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 4096 4096 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 61440 4096 4096 NT_STATUS_OK
ReadX 12382 126976 4096 4096 NT_STATUS_OK
WriteX 12382 0 65536 65536 NT_STATUS_OK
WriteX 12382 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 61440 4096 4096 NT_STATUS_OK
ReadX 12383 126976 4096 4096 NT_STATUS_OK
ReadX 12383 192512 4096 4096 NT_STATUS_OK
ReadX 12383 258048 4096 4096 NT_STATUS_OK
WriteX 12383 0 65536 65536 NT_STATUS_OK
WriteX 12383 65536 65536 65536 NT_STATUS_OK
WriteX 12383 131072 65536 65536 NT_STATUS_OK
WriteX 12383 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 61440 4096 4096 NT_STATUS_OK
ReadX 12384 126976 4096 4096 NT_STATUS_OK
ReadX 12384 192512 4096 4096 NT_STATUS_OK
ReadX 12384 258048 4096 4096 NT_STATUS_OK
ReadX 12384 323584 4096 4096 NT_STATUS_OK
ReadX 12384 389120 4096 4096 NT_STATUS_OK
ReadX 12384 454656 4096 4096 NT_STATUS_OK
ReadX 12384 520192 4096 4096 NT_STATUS_OK
WriteX 12384 0 65536 65536 NT_STATUS_OK
WriteX 12384 65536 65536 65536 NT_STATUS_OK
WriteX 12384 131072 65536 65536 NT_STATUS_OK
WriteX 12384 196608 65536 65536 NT_STATUS_OK
WriteX 12384 262144 65536 65536 NT_STATUS_OK
WriteX 12384 327680 65536 65536 NT_STATUS_OK
WriteX 12384 393216 65536 65536 NT_STATUS_OK
WriteX 12384 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12385 NT_STATUS_OK
Close 12385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12394 NT_STATUS_OK
Close 12394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12400 NT_STATUS_OK
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12403 NT_STATUS_OK
Close 12403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12405 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12409 NT_STATUS_OK
Close 12409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12414 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12419 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12429 NT_STATUS_OK
Close 12429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12434 NT_STATUS_OK
Close 12434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12439 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12447 NT_STATUS_OK
Close 12447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12450 NT_STATUS_OK
Close 12450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12453 NT_STATUS_OK
WriteX 12453 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12453 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12453 0 65536 65536 NT_STATUS_OK
WriteX 12453 65536 65536 65536 NT_STATUS_OK
WriteX 12453 131072 65536 65536 NT_STATUS_OK
WriteX 12453 196608 65536 65536 NT_STATUS_OK
WriteX 12453 262144 26634 26634 NT_STATUS_OK
Close 12453 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12459 NT_STATUS_OK
Close 12459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
ReadX 12461 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12462 NT_STATUS_OK
Close 12462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12469 NT_STATUS_OK
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12471 NT_STATUS_OK
Close 12471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12475 NT_STATUS_OK
Close 12475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12499 NT_STATUS_OK
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12504 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12518 NT_STATUS_OK
Close 12518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12526 NT_STATUS_OK
Close 12526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12528 NT_STATUS_OK
Close 12528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12552 NT_STATUS_OK
Close 12552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
Close 12554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12585 0 4096 4096 NT_STATUS_OK
Close 12585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
ReadX 12587 4096 4096 4096 NT_STATUS_OK
ReadX 12587 8192 4096 4096 NT_STATUS_OK
ReadX 12587 12288 4096 4096 NT_STATUS_OK
ReadX 12587 16384 4096 4096 NT_STATUS_OK
ReadX 12587 20480 4096 4096 NT_STATUS_OK
ReadX 12587 24576 4096 4096 NT_STATUS_OK
ReadX 12587 28672 4096 4096 NT_STATUS_OK
ReadX 12587 32768 4096 4096 NT_STATUS_OK
ReadX 12587 36864 4096 4096 NT_STATUS_OK
ReadX 12587 40960 4096 4096 NT_STATUS_OK
ReadX 12587 45056 4096 4096 NT_STATUS_OK
ReadX 12587 49152 4096 4096 NT_STATUS_OK
ReadX 12587 53248 4096 4096 NT_STATUS_OK
ReadX 12587 57344 4096 4096 NT_STATUS_OK
ReadX 12587 61440 4096 4096 NT_STATUS_OK
ReadX 12587 65536 4096 4096 NT_STATUS_OK
ReadX 12587 69632 4096 4096 NT_STATUS_OK
ReadX 12587 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12587 1004 NT_STATUS_OK
WriteX 12587 0 4096 4096 NT_STATUS_OK
Close 12587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12588 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
Close 12588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12590 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12593 NT_STATUS_OK
WriteX 12593 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 258 NT_STATUS_OK
WriteX 12593 0 65536 65536 NT_STATUS_OK
WriteX 12593 65536 19979 19979 NT_STATUS_OK
Close 12593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
WriteX 12594 0 4096 4096 NT_STATUS_OK
Flush 12594 NT_STATUS_OK
WriteX 12594 0 4096 4096 NT_STATUS_OK
Flush 12594 NT_STATUS_OK
QUERY_FILE_INFORMATION 12594 1004 NT_STATUS_OK
WriteX 12594 0 4096 4096 NT_STATUS_OK
Flush 12594 NT_STATUS_OK
WriteX 12594 0 4096 4096 NT_STATUS_OK
Flush 12594 NT_STATUS_OK
WriteX 12594 0 4096 4096 NT_STATUS_OK
Flush 12594 NT_STATUS_OK
SET_FILE_INFORMATION 12594 1004 NT_STATUS_OK
WriteX 12594 0 4096 4096 NT_STATUS_OK
Flush 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
Close 12595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
Close 12597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
Close 12598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
WriteX 12599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12596 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12605 NT_STATUS_OK
WriteX 12605 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 258 NT_STATUS_OK
WriteX 12605 0 65536 65536 NT_STATUS_OK
WriteX 12605 65536 17654 17654 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 4096 4096 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 1004 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
SET_FILE_INFORMATION 12606 1004 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
Close 12606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12607 NT_STATUS_OK
SET_FILE_INFORMATION 12607 1004 NT_STATUS_OK
Close 12607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 4096 4096 NT_STATUS_OK
ReadX 12611 4096 4096 4096 NT_STATUS_OK
ReadX 12611 8192 4096 4096 NT_STATUS_OK
ReadX 12611 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12611 16384 4096 4096 NT_STATUS_OK
ReadX 12611 20480 4096 4096 NT_STATUS_OK
ReadX 12611 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 4096 4096 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 4096 4096 NT_STATUS_OK
Close 12613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12614 NT_STATUS_OK
ReadX 12614 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12617 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12620 NT_STATUS_OK
WriteX 12620 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 258 NT_STATUS_OK
WriteX 12620 0 65536 65536 NT_STATUS_OK
WriteX 12620 65536 19490 19490 NT_STATUS_OK
Close 12620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
WriteX 12621 0 4096 4096 NT_STATUS_OK
Flush 12621 NT_STATUS_OK
WriteX 12621 0 4096 4096 NT_STATUS_OK
Flush 12621 NT_STATUS_OK
QUERY_FILE_INFORMATION 12621 1004 NT_STATUS_OK
WriteX 12621 0 4096 4096 NT_STATUS_OK
Flush 12621 NT_STATUS_OK
WriteX 12621 0 4096 4096 NT_STATUS_OK
Flush 12621 NT_STATUS_OK
WriteX 12621 0 4096 4096 NT_STATUS_OK
Flush 12621 NT_STATUS_OK
SET_FILE_INFORMATION 12621 1004 NT_STATUS_OK
WriteX 12621 0 4096 4096 NT_STATUS_OK
Flush 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12622 NT_STATUS_OK
SET_FILE_INFORMATION 12622 1004 NT_STATUS_OK
Close 12622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12626 0 4096 4096 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
ReadX 12628 4096 4096 4096 NT_STATUS_OK
ReadX 12628 8192 4096 4096 NT_STATUS_OK
ReadX 12628 12288 4096 4096 NT_STATUS_OK
ReadX 12628 16384 4096 4096 NT_STATUS_OK
ReadX 12628 20480 4096 4096 NT_STATUS_OK
ReadX 12628 24576 4096 4096 NT_STATUS_OK
ReadX 12628 28672 4096 4096 NT_STATUS_OK
ReadX 12628 32768 4096 4096 NT_STATUS_OK
ReadX 12628 36864 4096 4096 NT_STATUS_OK
ReadX 12628 40960 4096 4096 NT_STATUS_OK
ReadX 12628 45056 4096 4096 NT_STATUS_OK
ReadX 12628 49152 4096 4096 NT_STATUS_OK
ReadX 12628 53248 4096 4096 NT_STATUS_OK
ReadX 12628 57344 4096 4096 NT_STATUS_OK
ReadX 12628 61440 4096 4096 NT_STATUS_OK
ReadX 12628 65536 4096 4096 NT_STATUS_OK
ReadX 12628 69632 4096 4096 NT_STATUS_OK
ReadX 12628 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12628 1004 NT_STATUS_OK
WriteX 12628 0 4096 4096 NT_STATUS_OK
Close 12628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12629 NT_STATUS_OK
SET_FILE_INFORMATION 12629 1004 NT_STATUS_OK
Close 12629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12631 NT_STATUS_OK
Close 12631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12634 NT_STATUS_OK
WriteX 12634 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12634 258 NT_STATUS_OK
WriteX 12634 0 65536 65536 NT_STATUS_OK
WriteX 12634 65536 8866 8866 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 4096 4096 NT_STATUS_OK
WriteX 12635 0 4096 4096 NT_STATUS_OK
Flush 12635 NT_STATUS_OK
SET_FILE_INFORMATION 12635 1004 NT_STATUS_OK
WriteX 12635 0 4096 4096 NT_STATUS_OK
Flush 12635 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 4096 4096 NT_STATUS_OK
Close 12638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12639 1004 NT_STATUS_OK
WriteX 12639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12642 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12645 NT_STATUS_OK
WriteX 12645 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 258 NT_STATUS_OK
WriteX 12645 0 65536 65536 NT_STATUS_OK
WriteX 12645 65536 9298 9298 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
SET_FILE_INFORMATION 12646 1004 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12647 NT_STATUS_OK
SET_FILE_INFORMATION 12647 1004 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12652 0 4096 4096 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12653 4096 4096 4096 NT_STATUS_OK
ReadX 12653 8192 4096 4096 NT_STATUS_OK
ReadX 12653 12288 4096 4096 NT_STATUS_OK
ReadX 12653 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
Close 12655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12656 1004 NT_STATUS_OK
WriteX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12657 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12659 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12662 NT_STATUS_OK
WriteX 12662 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 258 NT_STATUS_OK
WriteX 12662 0 65536 65536 NT_STATUS_OK
WriteX 12662 65536 11540 11540 NT_STATUS_OK
Close 12662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
WriteX 12663 0 4096 4096 NT_STATUS_OK
Flush 12663 NT_STATUS_OK
SET_FILE_INFORMATION 12663 1004 NT_STATUS_OK
WriteX 12663 0 4096 4096 NT_STATUS_OK
Flush 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12664 NT_STATUS_OK
SET_FILE_INFORMATION 12664 1004 NT_STATUS_OK
Close 12664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12666 NT_STATUS_OK
Close 12666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 61440 4096 4096 NT_STATUS_OK
ReadX 12668 126976 4096 4096 NT_STATUS_OK
WriteX 12668 0 65536 65536 NT_STATUS_OK
WriteX 12668 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 61440 4096 4096 NT_STATUS_OK
ReadX 12669 126976 4096 4096 NT_STATUS_OK
ReadX 12669 192512 4096 4096 NT_STATUS_OK
ReadX 12669 258048 4096 4096 NT_STATUS_OK
WriteX 12669 0 65536 65536 NT_STATUS_OK
WriteX 12669 65536 65536 65536 NT_STATUS_OK
WriteX 12669 131072 65536 65536 NT_STATUS_OK
WriteX 12669 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 61440 4096 4096 NT_STATUS_OK
ReadX 12670 126976 4096 4096 NT_STATUS_OK
ReadX 12670 192512 4096 4096 NT_STATUS_OK
ReadX 12670 258048 4096 4096 NT_STATUS_OK
ReadX 12670 323584 4096 4096 NT_STATUS_OK
ReadX 12670 389120 4096 4096 NT_STATUS_OK
ReadX 12670 454656 4096 4096 NT_STATUS_OK
ReadX 12670 520192 4096 4096 NT_STATUS_OK
WriteX 12670 0 65536 65536 NT_STATUS_OK
WriteX 12670 65536 65536 65536 NT_STATUS_OK
WriteX 12670 131072 65536 65536 NT_STATUS_OK
WriteX 12670 196608 65536 65536 NT_STATUS_OK
WriteX 12670 262144 65536 65536 NT_STATUS_OK
WriteX 12670 327680 65536 65536 NT_STATUS_OK
WriteX 12670 393216 65536 65536 NT_STATUS_OK
WriteX 12670 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
ReadX 12671 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12672 NT_STATUS_OK
WriteX 12672 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 53 53 NT_STATUS_OK
Close 12672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12611 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12671 8192 4096 4096 NT_STATUS_OK
ReadX 12671 12288 4096 4096 NT_STATUS_OK
WriteX 12675 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12675 258 NT_STATUS_OK
ReadX 12671 16384 4096 4096 NT_STATUS_OK
ReadX 12671 20480 4096 4096 NT_STATUS_OK
WriteX 12675 0 15360 15360 NT_STATUS_OK
Close 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12676 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12676 1004 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12680 NT_STATUS_OK
Close 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12679 4096 4096 4096 NT_STATUS_OK
ReadX 12679 8192 4096 4096 NT_STATUS_OK
ReadX 12679 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 0 4096 4096 NT_STATUS_OK
ReadX 12682 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
ReadX 12683 4096 4096 4096 NT_STATUS_OK
ReadX 12683 8192 4096 4096 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12684 NT_STATUS_OK
WriteX 12684 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12684 258 NT_STATUS_OK
WriteX 12684 0 15360 15360 NT_STATUS_OK
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12685 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12686 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12689 NT_STATUS_OK
SET_FILE_INFORMATION 12689 1004 NT_STATUS_OK
Close 12689 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
ReadX 12692 4096 4096 4096 NT_STATUS_OK
ReadX 12692 8192 4096 4096 NT_STATUS_OK
ReadX 12692 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12692 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12692 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12694 NT_STATUS_OK
WriteX 12694 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12694 258 NT_STATUS_OK
WriteX 12694 0 53 53 NT_STATUS_OK
Close 12694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12695 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12693 4096 4096 4096 NT_STATUS_OK
ReadX 12693 8192 4096 4096 NT_STATUS_OK
ReadX 12693 12288 4096 4096 NT_STATUS_OK
WriteX 12697 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12697 258 NT_STATUS_OK
WriteX 12697 0 12006 12006 NT_STATUS_OK
Close 12697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12698 NT_STATUS_OK
ReadX 12698 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12698 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12698 1004 NT_STATUS_OK
WriteX 12698 0 4096 4096 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12699 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12701 4096 4096 4096 NT_STATUS_OK
ReadX 12701 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12704 NT_STATUS_OK
WriteX 12704 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12704 258 NT_STATUS_OK
WriteX 12704 0 11991 11991 NT_STATUS_OK
Close 12704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12705 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12705 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12706 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12709 NT_STATUS_OK
SET_FILE_INFORMATION 12709 1004 NT_STATUS_OK
Close 12709 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12710 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12713 NT_STATUS_OK
Close 12713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12712 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12712 1004 NT_STATUS_OK
ReadX 12712 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12712 1004 NT_STATUS_OK
WriteX 12712 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12712 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12712 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12712 1004 NT_STATUS_OK
Close 12688 NT_STATUS_OK
WriteX 12692 0 19054 19054 NT_STATUS_OK
WriteX 12712 0 12288 12288 NT_STATUS_OK
Close 12708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12715 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12717 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12719 NT_STATUS_OK
ReadX 12719 0 61440 61440 NT_STATUS_OK
ReadX 12719 61440 4096 4096 NT_STATUS_OK
ReadX 12719 65536 61440 61440 NT_STATUS_OK
ReadX 12719 126976 4096 4096 NT_STATUS_OK
ReadX 12719 131072 61440 61440 NT_STATUS_OK
ReadX 12719 192512 4096 4096 NT_STATUS_OK
ReadX 12719 196608 61440 61440 NT_STATUS_OK
ReadX 12719 258048 4096 4096 NT_STATUS_OK
ReadX 12719 262144 61440 61440 NT_STATUS_OK
ReadX 12719 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 61440 61440 NT_STATUS_OK
ReadX 12720 61440 4096 4096 NT_STATUS_OK
ReadX 12720 65536 61440 61440 NT_STATUS_OK
ReadX 12720 126976 4096 4096 NT_STATUS_OK
ReadX 12720 131072 61440 61440 NT_STATUS_OK
ReadX 12720 192512 4096 4096 NT_STATUS_OK
ReadX 12720 196608 61440 61440 NT_STATUS_OK
ReadX 12720 258048 4096 4096 NT_STATUS_OK
ReadX 12720 262144 61440 61440 NT_STATUS_OK
ReadX 12720 323584 4096 4096 NT_STATUS_OK
ReadX 12720 327680 61440 61440 NT_STATUS_OK
ReadX 12720 389120 4096 4096 NT_STATUS_OK
ReadX 12720 393216 61440 61440 NT_STATUS_OK
ReadX 12720 454656 4096 4096 NT_STATUS_OK
ReadX 12720 458752 61440 61440 NT_STATUS_OK
ReadX 12720 520192 4096 4096 NT_STATUS_OK
ReadX 12720 524288 61440 61440 NT_STATUS_OK
ReadX 12720 585728 4096 4096 NT_STATUS_OK
ReadX 12720 589824 61440 61440 NT_STATUS_OK
ReadX 12720 651264 4096 4096 NT_STATUS_OK
ReadX 12720 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 61440 61440 NT_STATUS_OK
ReadX 12721 61440 4096 4096 NT_STATUS_OK
ReadX 12721 65536 61440 61440 NT_STATUS_OK
ReadX 12721 126976 4096 4096 NT_STATUS_OK
ReadX 12721 131072 61440 61440 NT_STATUS_OK
ReadX 12721 192512 4096 4096 NT_STATUS_OK
ReadX 12721 196608 61440 61440 NT_STATUS_OK
ReadX 12721 258048 4096 4096 NT_STATUS_OK
ReadX 12721 262144 61440 61440 NT_STATUS_OK
ReadX 12721 323584 4096 4096 NT_STATUS_OK
ReadX 12721 327680 61440 61440 NT_STATUS_OK
ReadX 12721 389120 4096 4096 NT_STATUS_OK
ReadX 12721 393216 61440 61440 NT_STATUS_OK
ReadX 12721 454656 4096 4096 NT_STATUS_OK
ReadX 12721 458752 61440 61440 NT_STATUS_OK
ReadX 12721 520192 4096 4096 NT_STATUS_OK
ReadX 12721 524288 61440 61440 NT_STATUS_OK
ReadX 12721 585728 4096 4096 NT_STATUS_OK
ReadX 12721 589824 61440 61440 NT_STATUS_OK
ReadX 12721 651264 4096 4096 NT_STATUS_OK
ReadX 12721 655360 61440 61440 NT_STATUS_OK
ReadX 12721 716800 4096 4096 NT_STATUS_OK
ReadX 12721 720896 61440 61440 NT_STATUS_OK
ReadX 12721 782336 4096 4096 NT_STATUS_OK
ReadX 12721 786432 61440 61440 NT_STATUS_OK
ReadX 12721 847872 4096 4096 NT_STATUS_OK
ReadX 12721 851968 61440 61440 NT_STATUS_OK
ReadX 12721 913408 4096 4096 NT_STATUS_OK
ReadX 12721 917504 61440 61440 NT_STATUS_OK
ReadX 12721 978944 4096 4096 NT_STATUS_OK
ReadX 12721 983040 61440 61440 NT_STATUS_OK
ReadX 12721 1044480 4096 4096 NT_STATUS_OK
ReadX 12721 1048576 61440 61440 NT_STATUS_OK
ReadX 12721 1110016 4096 4096 NT_STATUS_OK
ReadX 12721 1114112 61440 61440 NT_STATUS_OK
ReadX 12721 1175552 4096 4096 NT_STATUS_OK
ReadX 12721 1179648 61440 61440 NT_STATUS_OK
ReadX 12721 1241088 4096 4096 NT_STATUS_OK
ReadX 12721 1245184 61440 61440 NT_STATUS_OK
ReadX 12721 1306624 4096 4096 NT_STATUS_OK
ReadX 12721 1310720 61440 61440 NT_STATUS_OK
ReadX 12721 1372160 4096 4096 NT_STATUS_OK
ReadX 12721 1376256 61440 61440 NT_STATUS_OK
ReadX 12721 1437696 4096 4096 NT_STATUS_OK
ReadX 12721 1441792 61440 61440 NT_STATUS_OK
ReadX 12721 1503232 4096 4096 NT_STATUS_OK
ReadX 12721 1507328 61440 61440 NT_STATUS_OK
ReadX 12721 1568768 4096 4096 NT_STATUS_OK
ReadX 12721 1572864 61440 61440 NT_STATUS_OK
ReadX 12721 1634304 4096 4096 NT_STATUS_OK
ReadX 12721 1638400 61440 61440 NT_STATUS_OK
ReadX 12721 1699840 4096 4096 NT_STATUS_OK
ReadX 12721 1703936 61440 61440 NT_STATUS_OK
ReadX 12721 1765376 4096 4096 NT_STATUS_OK
Close 12719 NT_STATUS_OK
ReadX 12721 1769472 61440 61440 NT_STATUS_OK
Close 12720 NT_STATUS_OK
ReadX 12721 1830912 4096 4096 NT_STATUS_OK
ReadX 12721 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12723 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12728 NT_STATUS_OK
QUERY_FILE_INFORMATION 12728 1004 NT_STATUS_OK
WriteX 12728 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12728 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12730 NT_STATUS_OK
WriteX 12730 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12730 258 NT_STATUS_OK
WriteX 12730 0 491 491 NT_STATUS_OK
Close 12730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12728 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12733 NT_STATUS_OK
Close 12733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12734 NT_STATUS_OK
WriteX 12734 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 258 NT_STATUS_OK
WriteX 12734 0 543 543 NT_STATUS_OK
Close 12734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12742 NT_STATUS_OK
ReadX 12742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
WriteX 12748 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 258 NT_STATUS_OK
WriteX 12748 0 2048 2048 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12749 NT_STATUS_OK
ReadX 12749 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
Flush 12749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12754 NT_STATUS_OK
WriteX 12754 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12754 258 NT_STATUS_OK
WriteX 12754 0 2048 2048 NT_STATUS_OK
Close 12754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12759 NT_STATUS_OK
Close 12759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12760 NT_STATUS_OK
WriteX 12760 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12760 258 NT_STATUS_OK
WriteX 12760 0 2048 2048 NT_STATUS_OK
Close 12760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 2048 2048 NT_STATUS_OK
ReadX 12739 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12755 0 4096 4096 NT_STATUS_OK
WriteX 12739 0 8192 8192 NT_STATUS_OK
WriteX 12740 0 4096 4096 NT_STATUS_OK
WriteX 12741 0 4096 4096 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12765 NT_STATUS_OK
QUERY_FILE_INFORMATION 12765 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12785 NT_STATUS_OK
QUERY_FILE_INFORMATION 12785 1004 NT_STATUS_OK
WriteX 12785 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12785 258 NT_STATUS_OK
WriteX 12785 0 2048 2048 NT_STATUS_OK
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12793 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 1004 NT_STATUS_OK
WriteX 12793 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 258 NT_STATUS_OK
WriteX 12793 0 2048 2048 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12786 0 4096 4096 NT_STATUS_OK
Flush 12786 NT_STATUS_OK
WriteX 12794 0 4096 4096 NT_STATUS_OK
Flush 12794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12786 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12796 NT_STATUS_OK
WriteX 12796 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12796 258 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
Close 12796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12799 NT_STATUS_OK
WriteX 12799 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12799 258 NT_STATUS_OK
WriteX 12799 0 4096 4096 NT_STATUS_OK
Close 12799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12800 0 4096 4096 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12780 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Close 12778 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12803 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12806 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12807 NT_STATUS_OK
WriteX 12807 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12807 258 NT_STATUS_OK
WriteX 12807 0 2048 2048 NT_STATUS_OK
Close 12807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12822 NT_STATUS_OK
QUERY_FILE_INFORMATION 12822 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12805 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12820 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12824 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12828 NT_STATUS_OK
ReadX 12828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12829 NT_STATUS_OK
ReadX 12829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12830 NT_STATUS_OK
ReadX 12830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12843 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12844 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 1004 NT_STATUS_OK
WriteX 12844 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 258 NT_STATUS_OK
WriteX 12844 0 2048 2048 NT_STATUS_OK
Close 12844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12847 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12848 NT_STATUS_OK
ReadX 12848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12849 NT_STATUS_OK
ReadX 12849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12856 NT_STATUS_OK
QUERY_FILE_INFORMATION 12856 1004 NT_STATUS_OK
WriteX 12856 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12856 258 NT_STATUS_OK
WriteX 12856 0 2048 2048 NT_STATUS_OK
Close 12856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12864 NT_STATUS_OK
QUERY_FILE_INFORMATION 12864 1004 NT_STATUS_OK
WriteX 12864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12864 258 NT_STATUS_OK
WriteX 12864 0 2048 2048 NT_STATUS_OK
Close 12864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12865 NT_STATUS_OK
ReadX 12865 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12845 0 4096 4096 NT_STATUS_OK
Flush 12845 NT_STATUS_OK
WriteX 12857 0 4096 4096 NT_STATUS_OK
Flush 12857 NT_STATUS_OK
WriteX 12865 0 4096 4096 NT_STATUS_OK
Flush 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12845 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12857 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12865 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12847 4096 16384 16384 NT_STATUS_OK
ReadX 12827 4096 16384 16384 NT_STATUS_OK
ReadX 12859 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 2048 2048 NT_STATUS_OK
WriteX 12867 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12868 NT_STATUS_OK
QUERY_FILE_INFORMATION 12868 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12851 NT_STATUS_OK
Close 12839 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Close 12848 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12835 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Close 12829 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12870 NT_STATUS_OK
QUERY_FILE_INFORMATION 12870 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12872 NT_STATUS_OK
QUERY_FILE_INFORMATION 12872 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12879 NT_STATUS_OK
ReadX 12879 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12875 4096 16384 16384 NT_STATUS_OK
WriteX 12875 0 4096 4096 NT_STATUS_OK
WriteX 12876 0 4096 4096 NT_STATUS_OK
WriteX 12877 0 4096 4096 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12881 NT_STATUS_OK
ReadX 12881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12883 NT_STATUS_OK
ReadX 12883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12886 NT_STATUS_OK
ReadX 12886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12893 NT_STATUS_OK
ReadX 12893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 8192 8192 NT_STATUS_OK
ReadX 12881 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12895 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12895 0 4096 4096 NT_STATUS_OK
ReadX 12895 4096 4096 4096 NT_STATUS_OK
ReadX 12895 8192 4096 4096 NT_STATUS_OK
WriteX 12881 0 4096 4096 NT_STATUS_OK
WriteX 12882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12896 0 4096 4096 NT_STATUS_OK
ReadX 12896 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12875 0 4096 4096 NT_STATUS_OK
WriteX 12876 0 4096 4096 NT_STATUS_OK
WriteX 12877 0 4096 4096 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12901 NT_STATUS_OK
QUERY_FILE_INFORMATION 12901 1004 NT_STATUS_OK
WriteX 12901 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12901 258 NT_STATUS_OK
WriteX 12901 0 2048 2048 NT_STATUS_OK
Close 12901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12902 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
ReadX 12904 4096 4096 4096 NT_STATUS_OK
WriteX 12904 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12902 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12906 NT_STATUS_OK
ReadX 12906 0 4096 4096 NT_STATUS_OK
ReadX 12906 4096 4096 4096 NT_STATUS_OK
WriteX 12906 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12907 NT_STATUS_OK
QUERY_FILE_INFORMATION 12907 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Close 12879 NT_STATUS_OK
Close 12875 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Close 12892 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Close 12881 NT_STATUS_OK
Close 12882 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Close 12883 NT_STATUS_OK
Close 12884 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Close 12896 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12909 0 4096 4096 NT_STATUS_OK
ReadX 12909 4096 4096 4096 NT_STATUS_OK
ReadX 12909 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12912 NT_STATUS_OK
ReadX 12912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
ReadX 12910 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12927 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 1004 NT_STATUS_OK
WriteX 12927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
WriteX 12927 0 2048 2048 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12928 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12932 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12933 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 1004 NT_STATUS_OK
WriteX 12933 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 258 NT_STATUS_OK
WriteX 12933 0 2048 2048 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12934 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12917 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12935 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12910 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12912 NT_STATUS_OK
Close 12913 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12909 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12937 NT_STATUS_OK
QUERY_FILE_INFORMATION 12937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12939 NT_STATUS_OK
ReadX 12939 61440 4096 4096 NT_STATUS_OK
ReadX 12939 126976 4096 4096 NT_STATUS_OK
WriteX 12939 0 65536 65536 NT_STATUS_OK
WriteX 12939 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 61440 4096 4096 NT_STATUS_OK
ReadX 12940 126976 4096 4096 NT_STATUS_OK
ReadX 12940 192512 4096 4096 NT_STATUS_OK
ReadX 12940 258048 4096 4096 NT_STATUS_OK
WriteX 12940 0 65536 65536 NT_STATUS_OK
WriteX 12940 65536 65536 65536 NT_STATUS_OK
WriteX 12940 131072 65536 65536 NT_STATUS_OK
WriteX 12940 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 61440 4096 4096 NT_STATUS_OK
ReadX 12941 126976 4096 4096 NT_STATUS_OK
ReadX 12941 192512 4096 4096 NT_STATUS_OK
ReadX 12941 258048 4096 4096 NT_STATUS_OK
ReadX 12941 323584 4096 4096 NT_STATUS_OK
ReadX 12941 389120 4096 4096 NT_STATUS_OK
ReadX 12941 454656 4096 4096 NT_STATUS_OK
ReadX 12941 520192 4096 4096 NT_STATUS_OK
WriteX 12941 0 65536 65536 NT_STATUS_OK
WriteX 12941 65536 65536 65536 NT_STATUS_OK
WriteX 12941 131072 65536 65536 NT_STATUS_OK
WriteX 12941 196608 65536 65536 NT_STATUS_OK
WriteX 12941 262144 65536 65536 NT_STATUS_OK
WriteX 12941 327680 65536 65536 NT_STATUS_OK
WriteX 12941 393216 65536 65536 NT_STATUS_OK
WriteX 12941 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12942 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12942 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12942 8192 4096 4096 NT_STATUS_OK
ReadX 12942 12288 4096 4096 NT_STATUS_OK
ReadX 12942 16384 4096 4096 NT_STATUS_OK
ReadX 12942 20480 4096 4096 NT_STATUS_OK
ReadX 12942 24576 4096 4096 NT_STATUS_OK
ReadX 12942 28672 4096 4096 NT_STATUS_OK
ReadX 12942 32768 4096 4096 NT_STATUS_OK
ReadX 12942 36864 4096 4096 NT_STATUS_OK
ReadX 12942 40960 4096 4096 NT_STATUS_OK
ReadX 12942 45056 4096 4096 NT_STATUS_OK
ReadX 12942 49152 4096 4096 NT_STATUS_OK
ReadX 12942 53248 4096 4096 NT_STATUS_OK
ReadX 12942 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12942 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12943 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12939 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12945 NT_STATUS_OK
WriteX 12945 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12945 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12945 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12945 1004 NT_STATUS_OK
WriteX 12945 0 57088 57088 NT_STATUS_OK
WriteX 12945 0 4096 4096 NT_STATUS_OK
Flush 12945 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12946 NT_STATUS_OK
SET_FILE_INFORMATION 12946 1004 NT_STATUS_OK
Close 12946 NT_STATUS_OK
SET_FILE_INFORMATION 12945 1004 NT_STATUS_OK
WriteX 12945 0 4096 4096 NT_STATUS_OK
Close 12945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12949 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12950 NT_STATUS_OK
WriteX 12950 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12950 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12950 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12950 1004 NT_STATUS_OK
WriteX 12950 0 51456 51456 NT_STATUS_OK
WriteX 12950 0 4096 4096 NT_STATUS_OK
Flush 12950 NT_STATUS_OK
SET_FILE_INFORMATION 12950 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12950 1004 NT_STATUS_OK
WriteX 12950 0 4096 4096 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12952 NT_STATUS_OK
Close 12952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12954 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12956 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12959 NT_STATUS_OK
WriteX 12959 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12959 258 NT_STATUS_OK
WriteX 12959 0 53077 53077 NT_STATUS_OK
Close 12959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12960 NT_STATUS_OK
WriteX 12960 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12960 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12960 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12960 1004 NT_STATUS_OK
WriteX 12960 0 65536 65536 NT_STATUS_OK
WriteX 12960 65536 1856 1856 NT_STATUS_OK
WriteX 12960 0 4096 4096 NT_STATUS_OK
Flush 12960 NT_STATUS_OK
SET_FILE_INFORMATION 12960 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12960 1004 NT_STATUS_OK
WriteX 12960 0 4096 4096 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12962 NT_STATUS_OK
Close 12962 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12969 NT_STATUS_OK
WriteX 12969 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12969 258 NT_STATUS_OK
WriteX 12969 0 7983 7983 NT_STATUS_OK
Close 12969 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12974 NT_STATUS_OK
WriteX 12974 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12974 258 NT_STATUS_OK
WriteX 12974 0 65536 65536 NT_STATUS_OK
WriteX 12974 65536 65536 65536 NT_STATUS_OK
WriteX 12974 131072 65536 65536 NT_STATUS_OK
WriteX 12974 196608 65536 65536 NT_STATUS_OK
WriteX 12974 262144 65536 65536 NT_STATUS_OK
WriteX 12974 327680 65536 65536 NT_STATUS_OK
WriteX 12974 393216 65536 65536 NT_STATUS_OK
WriteX 12974 458752 46731 46731 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12975 NT_STATUS_OK
WriteX 12975 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12975 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12964 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12975 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12975 1004 NT_STATUS_OK
WriteX 12975 0 65536 65536 NT_STATUS_OK
WriteX 12975 65536 22848 22848 NT_STATUS_OK
WriteX 12975 0 4096 4096 NT_STATUS_OK
Flush 12975 NT_STATUS_OK
SET_FILE_INFORMATION 12975 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12975 1004 NT_STATUS_OK
WriteX 12975 0 4096 4096 NT_STATUS_OK
Close 12975 NT_STATUS_OK
Close 12964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12977 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12979 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12980 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12980 1004 NT_STATUS_OK
ReadX 12980 8192 4096 4096 NT_STATUS_OK
ReadX 12980 12288 4096 4096 NT_STATUS_OK
ReadX 12980 16384 4096 4096 NT_STATUS_OK
ReadX 12980 20480 4096 4096 NT_STATUS_OK
ReadX 12980 24576 4096 4096 NT_STATUS_OK
ReadX 12980 28672 4096 4096 NT_STATUS_OK
ReadX 12980 32768 4096 4096 NT_STATUS_OK
ReadX 12980 36864 4096 4096 NT_STATUS_OK
ReadX 12980 40960 4096 4096 NT_STATUS_OK
ReadX 12980 45056 4096 4096 NT_STATUS_OK
ReadX 12980 49152 4096 4096 NT_STATUS_OK
ReadX 12980 53248 4096 4096 NT_STATUS_OK
ReadX 12980 57344 4096 4096 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 65536 4096 4096 NT_STATUS_OK
ReadX 12980 69632 4096 4096 NT_STATUS_OK
ReadX 12980 73728 4096 4096 NT_STATUS_OK
ReadX 12980 77824 4096 4096 NT_STATUS_OK
ReadX 12980 81920 4096 4096 NT_STATUS_OK
ReadX 12980 86016 4096 4096 NT_STATUS_OK
ReadX 12980 90112 4096 4096 NT_STATUS_OK
ReadX 12980 94208 4096 4096 NT_STATUS_OK
ReadX 12980 98304 4096 4096 NT_STATUS_OK
ReadX 12980 102400 4096 4096 NT_STATUS_OK
ReadX 12980 106496 4096 4096 NT_STATUS_OK
ReadX 12980 110592 4096 4096 NT_STATUS_OK
ReadX 12980 114688 4096 4096 NT_STATUS_OK
ReadX 12980 118784 4096 4096 NT_STATUS_OK
ReadX 12980 122880 4096 4096 NT_STATUS_OK
ReadX 12980 126976 4096 4096 NT_STATUS_OK
ReadX 12980 131072 4096 4096 NT_STATUS_OK
ReadX 12980 135168 4096 4096 NT_STATUS_OK
ReadX 12980 139264 4096 4096 NT_STATUS_OK
ReadX 12980 143360 4096 4096 NT_STATUS_OK
ReadX 12980 147456 4096 4096 NT_STATUS_OK
ReadX 12980 151552 4096 4096 NT_STATUS_OK
ReadX 12980 155648 4096 4096 NT_STATUS_OK
ReadX 12980 159744 4096 4096 NT_STATUS_OK
ReadX 12980 163840 4096 4096 NT_STATUS_OK
ReadX 12980 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12980 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12981 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12983 NT_STATUS_OK
WriteX 12983 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12983 258 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12984 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
Close 12984 NT_STATUS_OK
WriteX 12983 0 42388 42388 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12985 NT_STATUS_OK
Close 12985 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
ReadX 12987 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12988 NT_STATUS_OK
WriteX 12988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12988 258 NT_STATUS_OK
SET_FILE_INFORMATION 12988 1004 NT_STATUS_OK
WriteX 12988 0 42652 42652 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Close 12987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12990 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
ReadX 12992 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12994 NT_STATUS_OK
Close 12994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12997 NT_STATUS_OK
WriteX 12997 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12997 258 NT_STATUS_OK
WriteX 12997 0 65536 65536 NT_STATUS_OK
WriteX 12997 65536 49 49 NT_STATUS_OK
Close 12997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 61440 61440 NT_STATUS_OK
ReadX 12998 61440 4096 4096 NT_STATUS_OK
ReadX 12998 65536 61440 61440 NT_STATUS_OK
ReadX 12998 126976 4096 4096 NT_STATUS_OK
ReadX 12998 131072 61440 61440 NT_STATUS_OK
ReadX 12998 192512 4096 4096 NT_STATUS_OK
ReadX 12998 196608 61440 61440 NT_STATUS_OK
ReadX 12998 258048 4096 4096 NT_STATUS_OK
ReadX 12998 262144 61440 61440 NT_STATUS_OK
ReadX 12998 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 61440 61440 NT_STATUS_OK
ReadX 12999 61440 4096 4096 NT_STATUS_OK
ReadX 12999 65536 61440 61440 NT_STATUS_OK
ReadX 12999 126976 4096 4096 NT_STATUS_OK
ReadX 12999 131072 61440 61440 NT_STATUS_OK
ReadX 12999 192512 4096 4096 NT_STATUS_OK
ReadX 12999 196608 61440 61440 NT_STATUS_OK
ReadX 12999 258048 4096 4096 NT_STATUS_OK
ReadX 12999 262144 61440 61440 NT_STATUS_OK
ReadX 12999 323584 4096 4096 NT_STATUS_OK
ReadX 12999 327680 61440 61440 NT_STATUS_OK
ReadX 12999 389120 4096 4096 NT_STATUS_OK
ReadX 12999 393216 61440 61440 NT_STATUS_OK
ReadX 12999 454656 4096 4096 NT_STATUS_OK
ReadX 12999 458752 61440 61440 NT_STATUS_OK
ReadX 12999 520192 4096 4096 NT_STATUS_OK
ReadX 12999 524288 61440 61440 NT_STATUS_OK
ReadX 12999 585728 4096 4096 NT_STATUS_OK
ReadX 12999 589824 61440 61440 NT_STATUS_OK
ReadX 12999 651264 4096 4096 NT_STATUS_OK
ReadX 12999 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 61440 61440 NT_STATUS_OK
ReadX 13000 61440 4096 4096 NT_STATUS_OK
ReadX 13000 65536 61440 61440 NT_STATUS_OK
ReadX 13000 126976 4096 4096 NT_STATUS_OK
ReadX 13000 131072 61440 61440 NT_STATUS_OK
ReadX 13000 192512 4096 4096 NT_STATUS_OK
ReadX 13000 196608 61440 61440 NT_STATUS_OK
ReadX 13000 258048 4096 4096 NT_STATUS_OK
ReadX 13000 262144 61440 61440 NT_STATUS_OK
ReadX 13000 323584 4096 4096 NT_STATUS_OK
ReadX 13000 327680 61440 61440 NT_STATUS_OK
ReadX 13000 389120 4096 4096 NT_STATUS_OK
ReadX 13000 393216 61440 61440 NT_STATUS_OK
ReadX 13000 454656 4096 4096 NT_STATUS_OK
ReadX 13000 458752 61440 61440 NT_STATUS_OK
ReadX 13000 520192 4096 4096 NT_STATUS_OK
ReadX 13000 524288 61440 61440 NT_STATUS_OK
ReadX 13000 585728 4096 4096 NT_STATUS_OK
ReadX 13000 589824 61440 61440 NT_STATUS_OK
ReadX 13000 651264 4096 4096 NT_STATUS_OK
ReadX 13000 655360 61440 61440 NT_STATUS_OK
ReadX 13000 716800 4096 4096 NT_STATUS_OK
ReadX 13000 720896 61440 61440 NT_STATUS_OK
ReadX 13000 782336 4096 4096 NT_STATUS_OK
ReadX 13000 786432 61440 61440 NT_STATUS_OK
ReadX 13000 847872 4096 4096 NT_STATUS_OK
ReadX 13000 851968 61440 61440 NT_STATUS_OK
ReadX 13000 913408 4096 4096 NT_STATUS_OK
ReadX 13000 917504 61440 61440 NT_STATUS_OK
ReadX 13000 978944 4096 4096 NT_STATUS_OK
ReadX 13000 983040 61440 61440 NT_STATUS_OK
ReadX 13000 1044480 4096 4096 NT_STATUS_OK
ReadX 13000 1048576 61440 61440 NT_STATUS_OK
ReadX 13000 1110016 4096 4096 NT_STATUS_OK
ReadX 13000 1114112 61440 61440 NT_STATUS_OK
ReadX 13000 1175552 4096 4096 NT_STATUS_OK
ReadX 13000 1179648 61440 61440 NT_STATUS_OK
ReadX 13000 1241088 4096 4096 NT_STATUS_OK
ReadX 13000 1245184 61440 61440 NT_STATUS_OK
ReadX 13000 1306624 4096 4096 NT_STATUS_OK
ReadX 13000 1310720 61440 61440 NT_STATUS_OK
ReadX 13000 1372160 4096 4096 NT_STATUS_OK
ReadX 13000 1376256 61440 61440 NT_STATUS_OK
ReadX 13000 1437696 4096 4096 NT_STATUS_OK
ReadX 13000 1441792 61440 61440 NT_STATUS_OK
ReadX 13000 1503232 4096 4096 NT_STATUS_OK
ReadX 13000 1507328 61440 61440 NT_STATUS_OK
ReadX 13000 1568768 4096 4096 NT_STATUS_OK
ReadX 13000 1572864 61440 61440 NT_STATUS_OK
ReadX 13000 1634304 4096 4096 NT_STATUS_OK
ReadX 13000 1638400 61440 61440 NT_STATUS_OK
ReadX 13000 1699840 4096 4096 NT_STATUS_OK
ReadX 13000 1703936 61440 61440 NT_STATUS_OK
ReadX 13000 1765376 4096 4096 NT_STATUS_OK
ReadX 13000 1769472 61440 61440 NT_STATUS_OK
ReadX 13000 1830912 4096 4096 NT_STATUS_OK
ReadX 13000 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13002 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 1005 NT_STATUS_OK
ReadX 13002 2156 24 24 NT_STATUS_OK
ReadX 13002 2139 276 276 NT_STATUS_OK
ReadX 13002 2136 14 14 NT_STATUS_OK
ReadX 13002 2136 7 7 NT_STATUS_OK
ReadX 13002 2138 12 12 NT_STATUS_OK
ReadX 13002 2137 8 8 NT_STATUS_OK
ReadX 13002 2135 15 15 NT_STATUS_OK
ReadX 13002 0 16 16 NT_STATUS_OK
ReadX 13002 16 2048 2048 NT_STATUS_OK
ReadX 13002 2064 2048 2048 NT_STATUS_OK
ReadX 13002 257 2048 2048 NT_STATUS_OK
ReadX 13002 385 2048 2048 NT_STATUS_OK
ReadX 13002 513 2048 2048 NT_STATUS_OK
ReadX 13002 641 2048 2048 NT_STATUS_OK
ReadX 13002 769 2048 2048 NT_STATUS_OK
ReadX 13002 897 2048 2048 NT_STATUS_OK
ReadX 13002 1025 2048 2048 NT_STATUS_OK
ReadX 13002 1153 2048 2048 NT_STATUS_OK
ReadX 13002 1281 2048 2048 NT_STATUS_OK
ReadX 13002 1409 2048 2048 NT_STATUS_OK
ReadX 13002 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13007 NT_STATUS_OK
WriteX 13007 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 258 NT_STATUS_OK
WriteX 13007 0 10575 10575 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
Close 13007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13012 NT_STATUS_OK
LockX 13012 2147483538 1 NT_STATUS_OK
UnlockX 13012 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13012 1005 NT_STATUS_OK
ReadX 13012 0 512 512 NT_STATUS_OK
ReadX 13012 512 512 512 NT_STATUS_OK
ReadX 13012 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13012 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13012 1004 NT_STATUS_OK
Close 13012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13013 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 1005 NT_STATUS_OK
ReadX 13013 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13014 NT_STATUS_OK
LockX 13014 2147483538 1 NT_STATUS_OK
UnlockX 13014 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1005 NT_STATUS_OK
ReadX 13014 0 512 512 NT_STATUS_OK
ReadX 13014 512 512 512 NT_STATUS_OK
ReadX 13014 1024 512 512 NT_STATUS_OK
ReadX 13014 288 20 20 NT_STATUS_OK
ReadX 13014 308 2084 2084 NT_STATUS_OK
ReadX 13014 388 2084 2084 NT_STATUS_OK
ReadX 13014 388 2084 2084 NT_STATUS_OK
ReadX 13001 2157 1386 1386 NT_STATUS_OK
ReadX 13014 2472 399 399 NT_STATUS_OK
ReadX 13014 3072 1536 1536 NT_STATUS_OK
ReadX 13014 544 149 149 NT_STATUS_OK
ReadX 13014 693 485 485 NT_STATUS_OK
Close 13014 NT_STATUS_OK
ReadX 13001 2157 4096 4096 NT_STATUS_OK
ReadX 13001 6253 4096 4096 NT_STATUS_OK
ReadX 13001 10349 4096 4096 NT_STATUS_OK
ReadX 13001 14445 4096 4096 NT_STATUS_OK
ReadX 13001 18541 4096 4096 NT_STATUS_OK
ReadX 13001 22637 256 256 NT_STATUS_OK
ReadX 13001 22893 4096 4096 NT_STATUS_OK
ReadX 13001 26989 4096 4096 NT_STATUS_OK
ReadX 13001 31085 4096 4096 NT_STATUS_OK
ReadX 13001 35181 4096 4096 NT_STATUS_OK
ReadX 13001 39277 4096 4096 NT_STATUS_OK
ReadX 13001 43373 4096 4096 NT_STATUS_OK
ReadX 13001 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13001 2157 1024 1024 NT_STATUS_OK
ReadX 13001 1667 4688 4688 NT_STATUS_OK
ReadX 13001 6355 3516 3516 NT_STATUS_OK
ReadX 13001 9871 16384 16384 NT_STATUS_OK
ReadX 13001 26255 3771 3771 NT_STATUS_OK
ReadX 13001 30026 2048 2048 NT_STATUS_OK
ReadX 13001 32074 1024 1024 NT_STATUS_OK
ReadX 13001 33098 6652 6652 NT_STATUS_OK
ReadX 13001 39750 16384 16384 NT_STATUS_OK
ReadX 13001 56134 10496 10496 NT_STATUS_OK
ReadX 13001 66630 1784 1784 NT_STATUS_OK
ReadX 13001 68414 90 90 NT_STATUS_OK
ReadX 13001 68504 273 273 NT_STATUS_OK
ReadX 13001 68777 1600 1600 NT_STATUS_OK
ReadX 13001 70377 640 640 NT_STATUS_OK
ReadX 13001 71017 1280 1280 NT_STATUS_OK
ReadX 13001 72297 8464 8464 NT_STATUS_OK
ReadX 13001 80761 158 158 NT_STATUS_OK
ReadX 13001 80919 912 912 NT_STATUS_OK
ReadX 13001 81831 1980 1980 NT_STATUS_OK
ReadX 13001 83811 2256 2256 NT_STATUS_OK
ReadX 13001 86067 400 400 NT_STATUS_OK
ReadX 13001 86467 252 252 NT_STATUS_OK
ReadX 13001 86719 42 42 NT_STATUS_OK
ReadX 13001 86761 725 725 NT_STATUS_OK
ReadX 13001 2009 512 512 NT_STATUS_OK
ReadX 13001 3895 9 9 NT_STATUS_OK
ReadX 13001 3781 46 46 NT_STATUS_OK
ReadX 13001 4059 92 92 NT_STATUS_OK
ReadX 13001 3781 92 92 NT_STATUS_OK
ReadX 13001 3986 184 184 NT_STATUS_OK
ReadX 13001 3987 16384 16384 NT_STATUS_OK
ReadX 13001 3902 16384 16384 NT_STATUS_OK
ReadX 13001 3781 10240 10240 NT_STATUS_OK
ReadX 13001 3821 16384 16384 NT_STATUS_OK
ReadX 13001 3891 935 935 NT_STATUS_OK
ReadX 13001 4060 10240 10240 NT_STATUS_OK
ReadX 13001 4059 184 184 NT_STATUS_OK
ReadX 13001 256 184 184 NT_STATUS_OK
ReadX 13001 256 1026 1026 NT_STATUS_OK
ReadX 13001 3901 326 326 NT_STATUS_OK
ReadX 13001 3899 652 652 NT_STATUS_OK
ReadX 13001 256 2 2 NT_STATUS_OK
ReadX 13001 258 4948 4948 NT_STATUS_OK
Close 13001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13019 NT_STATUS_OK
WriteX 13019 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13019 258 NT_STATUS_OK
WriteX 13019 0 65536 65536 NT_STATUS_OK
WriteX 13019 65536 65536 65536 NT_STATUS_OK
WriteX 13019 131072 65536 65536 NT_STATUS_OK
WriteX 13019 196608 65536 65536 NT_STATUS_OK
WriteX 13019 262144 65536 65536 NT_STATUS_OK
WriteX 13019 327680 65536 65536 NT_STATUS_OK
WriteX 13019 393216 65536 65536 NT_STATUS_OK
WriteX 13019 458752 65536 65536 NT_STATUS_OK
WriteX 13019 524288 65536 65536 NT_STATUS_OK
WriteX 13019 589824 35257 35257 NT_STATUS_OK
Close 13019 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13021 NT_STATUS_OK
Close 13021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13024 NT_STATUS_OK
WriteX 13024 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13024 258 NT_STATUS_OK
WriteX 13024 0 65536 65536 NT_STATUS_OK
WriteX 13024 65536 65536 65536 NT_STATUS_OK
WriteX 13024 131072 65536 65536 NT_STATUS_OK
WriteX 13024 196608 65536 65536 NT_STATUS_OK
WriteX 13024 262144 65536 65536 NT_STATUS_OK
WriteX 13024 327680 65536 65536 NT_STATUS_OK
WriteX 13024 393216 65536 65536 NT_STATUS_OK
WriteX 13024 458752 65536 65536 NT_STATUS_OK
WriteX 13024 524288 65536 65536 NT_STATUS_OK
WriteX 13024 589824 57598 57598 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13026 NT_STATUS_OK
WriteX 13026 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13026 258 NT_STATUS_OK
WriteX 13026 0 12543 12543 NT_STATUS_OK
Flush 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13032 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 1005 NT_STATUS_OK
ReadX 13032 1938 24 24 NT_STATUS_OK
ReadX 13032 1920 276 276 NT_STATUS_OK
ReadX 13032 1918 14 14 NT_STATUS_OK
ReadX 13032 1918 7 7 NT_STATUS_OK
ReadX 13032 1919 12 12 NT_STATUS_OK
ReadX 13032 1919 8 8 NT_STATUS_OK
ReadX 13032 1917 15 15 NT_STATUS_OK
ReadX 13032 0 16 16 NT_STATUS_OK
ReadX 13032 16 2048 2048 NT_STATUS_OK
ReadX 13032 2064 2048 2048 NT_STATUS_OK
ReadX 13032 257 2048 2048 NT_STATUS_OK
ReadX 13032 385 2048 2048 NT_STATUS_OK
ReadX 13032 513 2048 2048 NT_STATUS_OK
ReadX 13032 641 2048 2048 NT_STATUS_OK
ReadX 13032 769 2048 2048 NT_STATUS_OK
ReadX 13032 897 2048 2048 NT_STATUS_OK
ReadX 13032 1025 2048 2048 NT_STATUS_OK
ReadX 13032 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13034 NT_STATUS_OK
Close 13034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13037 NT_STATUS_OK
WriteX 13037 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13037 258 NT_STATUS_OK
WriteX 13037 0 11588 11588 NT_STATUS_OK
Flush 13037 NT_STATUS_OK
Close 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
Close 13032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13042 NT_STATUS_OK
WriteX 13042 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13042 258 NT_STATUS_OK
WriteX 13042 0 11615 11615 NT_STATUS_OK
Flush 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13044 NT_STATUS_OK
Close 13044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13048 NT_STATUS_OK
Close 13048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13051 NT_STATUS_OK
WriteX 13051 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 258 NT_STATUS_OK
WriteX 13051 0 65536 65536 NT_STATUS_OK
WriteX 13051 65536 16050 16050 NT_STATUS_OK
Close 13051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13031 1939 64 64 NT_STATUS_OK
ReadX 13031 128 248 248 NT_STATUS_OK
ReadX 13031 128 568 568 NT_STATUS_OK
ReadX 13031 3872 1536 1536 NT_STATUS_OK
ReadX 13031 3456 2560 2560 NT_STATUS_OK
ReadX 13031 3136 512 512 NT_STATUS_OK
ReadX 13031 2880 4096 4096 NT_STATUS_OK
ReadX 13031 3264 3072 3072 NT_STATUS_OK
ReadX 13031 320 4096 4096 NT_STATUS_OK
ReadX 13031 1024 4096 4096 NT_STATUS_OK
ReadX 13031 3616 4096 4096 NT_STATUS_OK
ReadX 13031 1939 64 64 NT_STATUS_OK
ReadX 13031 128 248 248 NT_STATUS_OK
ReadX 13031 128 608 608 NT_STATUS_OK
ReadX 13031 2858 1024 1024 NT_STATUS_OK
ReadX 13031 2810 4096 4096 NT_STATUS_OK
ReadX 13031 2826 4096 4096 NT_STATUS_OK
ReadX 13031 2580 2048 2048 NT_STATUS_OK
ReadX 13031 2800 2560 2560 NT_STATUS_OK
ReadX 13031 2100 4096 4096 NT_STATUS_OK
ReadX 13031 2084 4096 4096 NT_STATUS_OK
ReadX 13031 868 4096 4096 NT_STATUS_OK
ReadX 13031 2324 4096 4096 NT_STATUS_OK
ReadX 13031 884 4096 4096 NT_STATUS_OK
ReadX 13031 2604 1024 1024 NT_STATUS_OK
ReadX 13031 580 4096 4096 NT_STATUS_OK
ReadX 13031 596 4096 4096 NT_STATUS_OK
ReadX 13031 2752 4096 4096 NT_STATUS_OK
ReadX 13031 2842 1024 1024 NT_STATUS_OK
ReadX 13031 660 4096 4096 NT_STATUS_OK
ReadX 13031 2720 4096 4096 NT_STATUS_OK
ReadX 13031 2736 4096 4096 NT_STATUS_OK
ReadX 13031 628 4096 4096 NT_STATUS_OK
ReadX 13031 2704 4096 4096 NT_STATUS_OK
ReadX 13031 1556 4096 4096 NT_STATUS_OK
ReadX 13031 576 4096 4096 NT_STATUS_OK
ReadX 13031 3168 1536 1536 NT_STATUS_OK
ReadX 13031 832 4096 4096 NT_STATUS_OK
ReadX 13031 1088 4096 4096 NT_STATUS_OK
ReadX 13031 1344 4096 4096 NT_STATUS_OK
ReadX 13031 1600 4096 4096 NT_STATUS_OK
ReadX 13031 1856 4096 4096 NT_STATUS_OK
ReadX 13031 2112 4096 4096 NT_STATUS_OK
ReadX 13031 1892 4096 4096 NT_STATUS_OK
ReadX 13031 820 4096 4096 NT_STATUS_OK
ReadX 13031 788 4096 4096 NT_STATUS_OK
ReadX 13031 1604 4096 4096 NT_STATUS_OK
ReadX 13031 3648 4096 4096 NT_STATUS_OK
ReadX 13031 2608 4096 4096 NT_STATUS_OK
ReadX 13031 548 4096 4096 NT_STATUS_OK
ReadX 13031 740 4096 4096 NT_STATUS_OK
ReadX 13031 1344 4096 4096 NT_STATUS_OK
ReadX 13031 3392 4096 4096 NT_STATUS_OK
ReadX 13031 3904 4096 4096 NT_STATUS_OK
ReadX 13031 644 4096 4096 NT_STATUS_OK
ReadX 13031 676 4096 4096 NT_STATUS_OK
ReadX 13031 2688 4096 4096 NT_STATUS_OK
ReadX 13031 320 4096 4096 NT_STATUS_OK
ReadX 13031 900 4096 4096 NT_STATUS_OK
ReadX 13031 1908 4096 4096 NT_STATUS_OK
ReadX 13031 852 4096 4096 NT_STATUS_OK
ReadX 13031 724 4096 4096 NT_STATUS_OK
ReadX 13031 2292 4096 4096 NT_STATUS_OK
ReadX 13031 612 4096 4096 NT_STATUS_OK
ReadX 13031 388 4096 4096 NT_STATUS_OK
ReadX 13031 2368 4096 4096 NT_STATUS_OK
ReadX 13031 2624 4096 4096 NT_STATUS_OK
ReadX 13031 500 4096 4096 NT_STATUS_OK
ReadX 13031 356 4096 4096 NT_STATUS_OK
ReadX 13031 1024 4096 4096 NT_STATUS_OK
ReadX 13031 576 4096 4096 NT_STATUS_OK
ReadX 13031 340 4096 4096 NT_STATUS_OK
ReadX 13031 420 4096 4096 NT_STATUS_OK
ReadX 13031 1600 4096 4096 NT_STATUS_OK
ReadX 13031 404 4096 4096 NT_STATUS_OK
ReadX 13031 1428 4096 4096 NT_STATUS_OK
ReadX 13031 2656 4096 4096 NT_STATUS_OK
ReadX 13031 2624 4096 4096 NT_STATUS_OK
ReadX 13031 452 4096 4096 NT_STATUS_OK
ReadX 13031 692 4096 4096 NT_STATUS_OK
ReadX 13031 564 4096 4096 NT_STATUS_OK
ReadX 13031 372 4096 4096 NT_STATUS_OK
ReadX 13031 468 4096 4096 NT_STATUS_OK
ReadX 13031 484 4096 4096 NT_STATUS_OK
ReadX 13031 1088 4096 4096 NT_STATUS_OK
ReadX 13031 1924 4096 4096 NT_STATUS_OK
ReadX 13031 2768 4096 4096 NT_STATUS_OK
ReadX 13031 832 4096 4096 NT_STATUS_OK
ReadX 13031 836 4096 4096 NT_STATUS_OK
ReadX 13031 1856 4096 4096 NT_STATUS_OK
ReadX 13031 2640 4096 4096 NT_STATUS_OK
ReadX 13031 436 4096 4096 NT_STATUS_OK
ReadX 13031 1828 4096 4096 NT_STATUS_OK
ReadX 13031 804 4096 4096 NT_STATUS_OK
ReadX 13031 1860 4096 4096 NT_STATUS_OK
ReadX 13031 1812 4096 4096 NT_STATUS_OK
ReadX 13031 756 4096 4096 NT_STATUS_OK
ReadX 13031 1636 4096 4096 NT_STATUS_OK
ReadX 13031 772 4096 4096 NT_STATUS_OK
ReadX 13031 2036 4096 4096 NT_STATUS_OK
ReadX 13031 1220 4096 4096 NT_STATUS_OK
ReadX 13031 1652 4096 4096 NT_STATUS_OK
ReadX 13031 2588 4096 4096 NT_STATUS_OK
ReadX 13031 916 4096 4096 NT_STATUS_OK
ReadX 13031 260 4096 4096 NT_STATUS_OK
ReadX 13031 932 4096 4096 NT_STATUS_OK
ReadX 13031 2624 4096 4096 NT_STATUS_OK
ReadX 13031 308 4096 4096 NT_STATUS_OK
ReadX 13031 292 4096 4096 NT_STATUS_OK
ReadX 13031 1140 4096 4096 NT_STATUS_OK
ReadX 13031 276 4096 4096 NT_STATUS_OK
ReadX 13031 2020 4096 4096 NT_STATUS_OK
ReadX 13031 2880 4096 4096 NT_STATUS_OK
ReadX 13031 516 4096 4096 NT_STATUS_OK
ReadX 13031 1844 4096 4096 NT_STATUS_OK
ReadX 13031 1124 4096 4096 NT_STATUS_OK
ReadX 13031 3136 4096 4096 NT_STATUS_OK
ReadX 13031 324 4096 4096 NT_STATUS_OK
ReadX 13031 1156 4096 4096 NT_STATUS_OK
ReadX 13031 1172 4096 4096 NT_STATUS_OK
ReadX 13031 2112 4096 4096 NT_STATUS_OK
ReadX 13031 2368 4096 4096 NT_STATUS_OK
ReadX 13031 964 4096 4096 NT_STATUS_OK
ReadX 13031 980 4096 4096 NT_STATUS_OK
ReadX 13031 1012 4096 4096 NT_STATUS_OK
ReadX 13031 532 4096 4096 NT_STATUS_OK
ReadX 13031 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13031 1620 4096 4096 NT_STATUS_OK
ReadX 13031 1604 4096 4096 NT_STATUS_OK
ReadX 13031 2116 4096 4096 NT_STATUS_OK
ReadX 13031 2132 4096 4096 NT_STATUS_OK
ReadX 13031 2148 4096 4096 NT_STATUS_OK
ReadX 13031 2276 4096 4096 NT_STATUS_OK
ReadX 13031 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13056 NT_STATUS_OK
QUERY_FILE_INFORMATION 13011 1004 NT_STATUS_OK
Close 13011 NT_STATUS_OK
WriteX 13056 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13056 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 1004 NT_STATUS_OK
Close 13013 NT_STATUS_OK
WriteX 13056 0 65536 65536 NT_STATUS_OK
WriteX 13056 65536 64850 64850 NT_STATUS_OK
Close 13056 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13058 NT_STATUS_OK
WriteX 13058 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13058 258 NT_STATUS_OK
ReadX 13031 2068 4096 4096 NT_STATUS_OK
ReadX 13031 1588 4096 4096 NT_STATUS_OK
ReadX 13031 1572 4096 4096 NT_STATUS_OK
WriteX 13058 0 18630 18630 NT_STATUS_OK
Flush 13058 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13031 612 4096 4096 NT_STATUS_OK
ReadX 13031 564 4096 4096 NT_STATUS_OK
ReadX 13031 1876 4096 4096 NT_STATUS_OK
ReadX 13031 628 4096 4096 NT_STATUS_OK
ReadX 13031 740 4096 4096 NT_STATUS_OK
ReadX 13031 724 4096 4096 NT_STATUS_OK
ReadX 13031 644 4096 4096 NT_STATUS_OK
ReadX 13031 2324 4096 4096 NT_STATUS_OK
ReadX 13031 660 4096 4096 NT_STATUS_OK
ReadX 13031 852 4096 4096 NT_STATUS_OK
ReadX 13031 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13031 2368 4096 4096 NT_STATUS_OK
ReadX 13031 1024 4096 4096 NT_STATUS_OK
ReadX 13031 320 4096 4096 NT_STATUS_OK
ReadX 13031 580 4096 4096 NT_STATUS_OK
ReadX 13031 3136 512 512 NT_STATUS_OK
ReadX 13031 2880 4096 4096 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 61440 4096 4096 NT_STATUS_OK
ReadX 13063 126976 4096 4096 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 61440 4096 4096 NT_STATUS_OK
ReadX 13064 126976 4096 4096 NT_STATUS_OK
ReadX 13064 192512 4096 4096 NT_STATUS_OK
ReadX 13064 258048 4096 4096 NT_STATUS_OK
WriteX 13064 0 65536 65536 NT_STATUS_OK
WriteX 13064 65536 65536 65536 NT_STATUS_OK
WriteX 13064 131072 65536 65536 NT_STATUS_OK
WriteX 13064 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 61440 4096 4096 NT_STATUS_OK
ReadX 13065 126976 4096 4096 NT_STATUS_OK
ReadX 13065 192512 4096 4096 NT_STATUS_OK
ReadX 13065 258048 4096 4096 NT_STATUS_OK
ReadX 13065 323584 4096 4096 NT_STATUS_OK
ReadX 13065 389120 4096 4096 NT_STATUS_OK
ReadX 13065 454656 4096 4096 NT_STATUS_OK
ReadX 13065 520192 4096 4096 NT_STATUS_OK
WriteX 13065 0 65536 65536 NT_STATUS_OK
WriteX 13065 65536 65536 65536 NT_STATUS_OK
WriteX 13065 131072 65536 65536 NT_STATUS_OK
WriteX 13065 196608 65536 65536 NT_STATUS_OK
WriteX 13065 262144 65536 65536 NT_STATUS_OK
WriteX 13065 327680 65536 65536 NT_STATUS_OK
WriteX 13065 393216 65536 65536 NT_STATUS_OK
WriteX 13065 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13068 NT_STATUS_OK
WriteX 13068 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13068 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13066 0 8192 8192 NT_STATUS_OK
Flush 13066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13066 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13066 0 8192 8192 NT_STATUS_OK
Flush 13066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13066 0 8192 8192 NT_STATUS_OK
Flush 13066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13066 0 8192 8192 NT_STATUS_OK
Flush 13066 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13030 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Close 13064 NT_STATUS_OK
Close 13065 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13073 NT_STATUS_OK
WriteX 13073 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13073 258 NT_STATUS_OK
WriteX 13073 0 62591 62591 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13078 NT_STATUS_OK
WriteX 13078 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13078 258 NT_STATUS_OK
WriteX 13078 0 10845 10845 NT_STATUS_OK
Close 13078 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13083 NT_STATUS_OK
WriteX 13083 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13083 258 NT_STATUS_OK
WriteX 13083 0 30118 30118 NT_STATUS_OK
Close 13083 NT_STATUS_OK
WriteX 13066 0 4096 4096 NT_STATUS_OK
WriteX 13068 0 64 64 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 61440 61440 NT_STATUS_OK
ReadX 13085 61440 4096 4096 NT_STATUS_OK
ReadX 13085 65536 61440 61440 NT_STATUS_OK
ReadX 13085 126976 4096 4096 NT_STATUS_OK
ReadX 13085 131072 61440 61440 NT_STATUS_OK
ReadX 13085 192512 4096 4096 NT_STATUS_OK
ReadX 13085 196608 61440 61440 NT_STATUS_OK
ReadX 13085 258048 4096 4096 NT_STATUS_OK
ReadX 13085 262144 61440 61440 NT_STATUS_OK
ReadX 13085 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 61440 61440 NT_STATUS_OK
ReadX 13086 61440 4096 4096 NT_STATUS_OK
ReadX 13086 65536 61440 61440 NT_STATUS_OK
ReadX 13086 126976 4096 4096 NT_STATUS_OK
ReadX 13086 131072 61440 61440 NT_STATUS_OK
ReadX 13086 192512 4096 4096 NT_STATUS_OK
ReadX 13086 196608 61440 61440 NT_STATUS_OK
ReadX 13086 258048 4096 4096 NT_STATUS_OK
ReadX 13086 262144 61440 61440 NT_STATUS_OK
ReadX 13086 323584 4096 4096 NT_STATUS_OK
ReadX 13086 327680 61440 61440 NT_STATUS_OK
ReadX 13086 389120 4096 4096 NT_STATUS_OK
ReadX 13086 393216 61440 61440 NT_STATUS_OK
ReadX 13086 454656 4096 4096 NT_STATUS_OK
ReadX 13086 458752 61440 61440 NT_STATUS_OK
ReadX 13086 520192 4096 4096 NT_STATUS_OK
ReadX 13086 524288 61440 61440 NT_STATUS_OK
ReadX 13086 585728 4096 4096 NT_STATUS_OK
ReadX 13086 589824 61440 61440 NT_STATUS_OK
ReadX 13086 651264 4096 4096 NT_STATUS_OK
ReadX 13086 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13087 NT_STATUS_OK
ReadX 13087 0 61440 61440 NT_STATUS_OK
ReadX 13087 61440 4096 4096 NT_STATUS_OK
ReadX 13087 65536 61440 61440 NT_STATUS_OK
ReadX 13087 126976 4096 4096 NT_STATUS_OK
ReadX 13087 131072 61440 61440 NT_STATUS_OK
ReadX 13087 192512 4096 4096 NT_STATUS_OK
ReadX 13087 196608 61440 61440 NT_STATUS_OK
ReadX 13087 258048 4096 4096 NT_STATUS_OK
ReadX 13087 262144 61440 61440 NT_STATUS_OK
ReadX 13087 323584 4096 4096 NT_STATUS_OK
ReadX 13087 327680 61440 61440 NT_STATUS_OK
ReadX 13087 389120 4096 4096 NT_STATUS_OK
ReadX 13087 393216 61440 61440 NT_STATUS_OK
ReadX 13087 454656 4096 4096 NT_STATUS_OK
ReadX 13087 458752 61440 61440 NT_STATUS_OK
ReadX 13087 520192 4096 4096 NT_STATUS_OK
ReadX 13087 524288 61440 61440 NT_STATUS_OK
ReadX 13087 585728 4096 4096 NT_STATUS_OK
ReadX 13087 589824 61440 61440 NT_STATUS_OK
ReadX 13087 651264 4096 4096 NT_STATUS_OK
ReadX 13087 655360 61440 61440 NT_STATUS_OK
ReadX 13087 716800 4096 4096 NT_STATUS_OK
ReadX 13087 720896 61440 61440 NT_STATUS_OK
ReadX 13087 782336 4096 4096 NT_STATUS_OK
ReadX 13087 786432 61440 61440 NT_STATUS_OK
ReadX 13087 847872 4096 4096 NT_STATUS_OK
ReadX 13087 851968 61440 61440 NT_STATUS_OK
ReadX 13087 913408 4096 4096 NT_STATUS_OK
ReadX 13087 917504 61440 61440 NT_STATUS_OK
ReadX 13087 978944 4096 4096 NT_STATUS_OK
ReadX 13087 983040 61440 61440 NT_STATUS_OK
ReadX 13087 1044480 4096 4096 NT_STATUS_OK
ReadX 13087 1048576 61440 61440 NT_STATUS_OK
ReadX 13087 1110016 4096 4096 NT_STATUS_OK
ReadX 13087 1114112 61440 61440 NT_STATUS_OK
ReadX 13087 1175552 4096 4096 NT_STATUS_OK
ReadX 13087 1179648 61440 61440 NT_STATUS_OK
ReadX 13087 1241088 4096 4096 NT_STATUS_OK
ReadX 13087 1245184 61440 61440 NT_STATUS_OK
ReadX 13087 1306624 4096 4096 NT_STATUS_OK
ReadX 13087 1310720 61440 61440 NT_STATUS_OK
ReadX 13087 1372160 4096 4096 NT_STATUS_OK
ReadX 13087 1376256 61440 61440 NT_STATUS_OK
ReadX 13087 1437696 4096 4096 NT_STATUS_OK
ReadX 13087 1441792 61440 61440 NT_STATUS_OK
ReadX 13087 1503232 4096 4096 NT_STATUS_OK
ReadX 13087 1507328 61440 61440 NT_STATUS_OK
ReadX 13087 1568768 4096 4096 NT_STATUS_OK
ReadX 13087 1572864 61440 61440 NT_STATUS_OK
ReadX 13087 1634304 4096 4096 NT_STATUS_OK
ReadX 13087 1638400 61440 61440 NT_STATUS_OK
ReadX 13087 1699840 4096 4096 NT_STATUS_OK
ReadX 13087 1703936 61440 61440 NT_STATUS_OK
ReadX 13087 1765376 4096 4096 NT_STATUS_OK
ReadX 13087 1769472 61440 61440 NT_STATUS_OK
ReadX 13087 1830912 4096 4096 NT_STATUS_OK
ReadX 13087 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13086 NT_STATUS_OK
Close 13087 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
ReadX 13092 4096 4096 4096 NT_STATUS_OK
ReadX 13092 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13093 NT_STATUS_OK
Close 13093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Close 13091 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13095 NT_STATUS_OK
ReadX 13095 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13096 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13095 NT_STATUS_OK
Close 13096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13100 NT_STATUS_OK
ReadX 13100 0 8192 8192 NT_STATUS_OK
ReadX 13100 8192 8192 8192 NT_STATUS_OK
ReadX 13100 16384 8192 8192 NT_STATUS_OK
ReadX 13100 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13100 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 10438 10438 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13109 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13111 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
ReadX 13114 4096 4096 4096 NT_STATUS_OK
ReadX 13114 8192 4096 4096 NT_STATUS_OK
ReadX 13114 12288 8192 8192 NT_STATUS_OK
ReadX 13114 20480 8192 8192 NT_STATUS_OK
ReadX 13114 28672 8192 8192 NT_STATUS_OK
ReadX 13114 36864 8192 8192 NT_STATUS_OK
ReadX 13114 45056 8192 8192 NT_STATUS_OK
ReadX 13114 53248 8192 8192 NT_STATUS_OK
ReadX 13114 61440 8192 8192 NT_STATUS_OK
ReadX 13114 69632 8192 8192 NT_STATUS_OK
ReadX 13114 77824 8192 8192 NT_STATUS_OK
ReadX 13114 86016 8192 8192 NT_STATUS_OK
ReadX 13114 94208 8192 8192 NT_STATUS_OK
ReadX 13114 102400 8192 8192 NT_STATUS_OK
ReadX 13114 110592 8192 8192 NT_STATUS_OK
ReadX 13114 118784 8192 8192 NT_STATUS_OK
ReadX 13114 126976 8192 8192 NT_STATUS_OK
ReadX 13114 135168 8192 8192 NT_STATUS_OK
ReadX 13114 143360 8192 8192 NT_STATUS_OK
ReadX 13114 151552 8192 8192 NT_STATUS_OK
ReadX 13114 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13119 NT_STATUS_OK
WriteX 13119 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 258 NT_STATUS_OK
WriteX 13119 0 28489 28489 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13120 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13122 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13122 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13123 NT_STATUS_OK
Close 13123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 8192 8192 NT_STATUS_OK
ReadX 13126 8192 8192 8192 NT_STATUS_OK
ReadX 13126 16384 8192 8192 NT_STATUS_OK
ReadX 13126 24576 8192 8192 NT_STATUS_OK
ReadX 13126 32768 16384 16384 NT_STATUS_OK
ReadX 13126 49152 8192 8192 NT_STATUS_OK
ReadX 13126 57344 8192 8192 NT_STATUS_OK
ReadX 13126 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13131 NT_STATUS_OK
WriteX 13131 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13131 258 NT_STATUS_OK
WriteX 13131 0 29253 29253 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13138 NT_STATUS_OK
WriteX 13138 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13138 258 NT_STATUS_OK
WriteX 13138 0 30183 30183 NT_STATUS_OK
Close 13138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13139 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13141 NT_STATUS_OK
WriteX 13141 0 510 510 NT_STATUS_OK
WriteX 13141 510 512 512 NT_STATUS_OK
WriteX 13141 1022 510 510 NT_STATUS_OK
WriteX 13141 1532 510 510 NT_STATUS_OK
WriteX 13141 2042 168 168 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
WriteX 13144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 61440 4096 4096 NT_STATUS_OK
ReadX 13145 126976 4096 4096 NT_STATUS_OK
WriteX 13145 0 65536 65536 NT_STATUS_OK
WriteX 13145 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13146 NT_STATUS_OK
ReadX 13146 61440 4096 4096 NT_STATUS_OK
ReadX 13146 126976 4096 4096 NT_STATUS_OK
ReadX 13146 192512 4096 4096 NT_STATUS_OK
ReadX 13146 258048 4096 4096 NT_STATUS_OK
WriteX 13146 0 65536 65536 NT_STATUS_OK
WriteX 13146 65536 65536 65536 NT_STATUS_OK
WriteX 13146 131072 65536 65536 NT_STATUS_OK
WriteX 13146 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 61440 4096 4096 NT_STATUS_OK
ReadX 13147 126976 4096 4096 NT_STATUS_OK
ReadX 13147 192512 4096 4096 NT_STATUS_OK
ReadX 13147 258048 4096 4096 NT_STATUS_OK
ReadX 13147 323584 4096 4096 NT_STATUS_OK
ReadX 13147 389120 4096 4096 NT_STATUS_OK
ReadX 13147 454656 4096 4096 NT_STATUS_OK
ReadX 13147 520192 4096 4096 NT_STATUS_OK
WriteX 13147 0 65536 65536 NT_STATUS_OK
WriteX 13147 65536 65536 65536 NT_STATUS_OK
WriteX 13147 131072 65536 65536 NT_STATUS_OK
WriteX 13147 196608 65536 65536 NT_STATUS_OK
WriteX 13147 262144 65536 65536 NT_STATUS_OK
WriteX 13147 327680 65536 65536 NT_STATUS_OK
WriteX 13147 393216 65536 65536 NT_STATUS_OK
WriteX 13147 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13148 NT_STATUS_OK
Close 13148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Close 13147 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13163 NT_STATUS_OK
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13166 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13168 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13172 NT_STATUS_OK
Close 13172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13182 NT_STATUS_OK
Close 13182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13197 NT_STATUS_OK
Close 13197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13202 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13210 NT_STATUS_OK
Close 13210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13213 NT_STATUS_OK
Close 13213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13216 NT_STATUS_OK
WriteX 13216 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13216 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13216 0 65536 65536 NT_STATUS_OK
WriteX 13216 65536 65536 65536 NT_STATUS_OK
WriteX 13216 131072 65536 65536 NT_STATUS_OK
WriteX 13216 196608 65536 65536 NT_STATUS_OK
WriteX 13216 262144 26634 26634 NT_STATUS_OK
Close 13216 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13222 NT_STATUS_OK
Close 13222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
Close 13223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
ReadX 13224 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13225 NT_STATUS_OK
Close 13225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13229 NT_STATUS_OK
Close 13229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13232 NT_STATUS_OK
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13234 NT_STATUS_OK
Close 13234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13238 NT_STATUS_OK
Close 13238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13257 NT_STATUS_OK
Close 13257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13262 NT_STATUS_OK
Close 13262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13267 NT_STATUS_OK
Close 13267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13276 NT_STATUS_OK
Close 13276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13289 NT_STATUS_OK
Close 13289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13291 NT_STATUS_OK
Close 13291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
Close 13317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13348 0 4096 4096 NT_STATUS_OK
Close 13348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 4096 4096 NT_STATUS_OK
ReadX 13350 4096 4096 4096 NT_STATUS_OK
ReadX 13350 8192 4096 4096 NT_STATUS_OK
ReadX 13350 12288 4096 4096 NT_STATUS_OK
ReadX 13350 16384 4096 4096 NT_STATUS_OK
ReadX 13350 20480 4096 4096 NT_STATUS_OK
ReadX 13350 24576 4096 4096 NT_STATUS_OK
ReadX 13350 28672 4096 4096 NT_STATUS_OK
ReadX 13350 32768 4096 4096 NT_STATUS_OK
ReadX 13350 36864 4096 4096 NT_STATUS_OK
ReadX 13350 40960 4096 4096 NT_STATUS_OK
ReadX 13350 45056 4096 4096 NT_STATUS_OK
ReadX 13350 49152 4096 4096 NT_STATUS_OK
ReadX 13350 53248 4096 4096 NT_STATUS_OK
ReadX 13350 57344 4096 4096 NT_STATUS_OK
ReadX 13350 61440 4096 4096 NT_STATUS_OK
ReadX 13350 65536 4096 4096 NT_STATUS_OK
ReadX 13350 69632 4096 4096 NT_STATUS_OK
ReadX 13350 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13350 1004 NT_STATUS_OK
WriteX 13350 0 4096 4096 NT_STATUS_OK
Close 13350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13351 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
Close 13351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13353 NT_STATUS_OK
Close 13353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13356 NT_STATUS_OK
WriteX 13356 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 258 NT_STATUS_OK
WriteX 13356 0 65536 65536 NT_STATUS_OK
WriteX 13356 65536 19979 19979 NT_STATUS_OK
Close 13356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
WriteX 13357 0 4096 4096 NT_STATUS_OK
Flush 13357 NT_STATUS_OK
WriteX 13357 0 4096 4096 NT_STATUS_OK
Flush 13357 NT_STATUS_OK
QUERY_FILE_INFORMATION 13357 1004 NT_STATUS_OK
WriteX 13357 0 4096 4096 NT_STATUS_OK
Flush 13357 NT_STATUS_OK
WriteX 13357 0 4096 4096 NT_STATUS_OK
Flush 13357 NT_STATUS_OK
WriteX 13357 0 4096 4096 NT_STATUS_OK
Flush 13357 NT_STATUS_OK
SET_FILE_INFORMATION 13357 1004 NT_STATUS_OK
WriteX 13357 0 4096 4096 NT_STATUS_OK
Flush 13357 NT_STATUS_OK
Close 13357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
Close 13358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
Close 13360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
Close 13361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
WriteX 13362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13359 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13368 NT_STATUS_OK
WriteX 13368 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 258 NT_STATUS_OK
WriteX 13368 0 65536 65536 NT_STATUS_OK
WriteX 13368 65536 17654 17654 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 4096 4096 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
QUERY_FILE_INFORMATION 13369 1004 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
SET_FILE_INFORMATION 13369 1004 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
Close 13369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13370 NT_STATUS_OK
SET_FILE_INFORMATION 13370 1004 NT_STATUS_OK
Close 13370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 4096 4096 NT_STATUS_OK
ReadX 13374 4096 4096 4096 NT_STATUS_OK
ReadX 13374 8192 4096 4096 NT_STATUS_OK
ReadX 13374 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13374 16384 4096 4096 NT_STATUS_OK
ReadX 13374 20480 4096 4096 NT_STATUS_OK
ReadX 13374 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 4096 4096 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13376 NT_STATUS_OK
ReadX 13376 0 4096 4096 NT_STATUS_OK
Close 13376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13377 NT_STATUS_OK
ReadX 13377 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
WriteX 13377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13380 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13383 NT_STATUS_OK
WriteX 13383 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13383 258 NT_STATUS_OK
WriteX 13383 0 65536 65536 NT_STATUS_OK
WriteX 13383 65536 19490 19490 NT_STATUS_OK
Close 13383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
Flush 13384 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
Flush 13384 NT_STATUS_OK
QUERY_FILE_INFORMATION 13384 1004 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
Flush 13384 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
Flush 13384 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
Flush 13384 NT_STATUS_OK
SET_FILE_INFORMATION 13384 1004 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
Flush 13384 NT_STATUS_OK
Close 13384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13385 NT_STATUS_OK
SET_FILE_INFORMATION 13385 1004 NT_STATUS_OK
Close 13385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13389 0 4096 4096 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
ReadX 13391 4096 4096 4096 NT_STATUS_OK
ReadX 13391 8192 4096 4096 NT_STATUS_OK
ReadX 13391 12288 4096 4096 NT_STATUS_OK
ReadX 13391 16384 4096 4096 NT_STATUS_OK
ReadX 13391 20480 4096 4096 NT_STATUS_OK
ReadX 13391 24576 4096 4096 NT_STATUS_OK
ReadX 13391 28672 4096 4096 NT_STATUS_OK
ReadX 13391 32768 4096 4096 NT_STATUS_OK
ReadX 13391 36864 4096 4096 NT_STATUS_OK
ReadX 13391 40960 4096 4096 NT_STATUS_OK
ReadX 13391 45056 4096 4096 NT_STATUS_OK
ReadX 13391 49152 4096 4096 NT_STATUS_OK
ReadX 13391 53248 4096 4096 NT_STATUS_OK
ReadX 13391 57344 4096 4096 NT_STATUS_OK
ReadX 13391 61440 4096 4096 NT_STATUS_OK
ReadX 13391 65536 4096 4096 NT_STATUS_OK
ReadX 13391 69632 4096 4096 NT_STATUS_OK
ReadX 13391 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13391 1004 NT_STATUS_OK
WriteX 13391 0 4096 4096 NT_STATUS_OK
Close 13391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13392 NT_STATUS_OK
SET_FILE_INFORMATION 13392 1004 NT_STATUS_OK
Close 13392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13394 NT_STATUS_OK
Close 13394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13397 NT_STATUS_OK
WriteX 13397 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13397 258 NT_STATUS_OK
WriteX 13397 0 65536 65536 NT_STATUS_OK
WriteX 13397 65536 8866 8866 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 4096 4096 NT_STATUS_OK
WriteX 13398 0 4096 4096 NT_STATUS_OK
Flush 13398 NT_STATUS_OK
SET_FILE_INFORMATION 13398 1004 NT_STATUS_OK
WriteX 13398 0 4096 4096 NT_STATUS_OK
Flush 13398 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
Close 13401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13402 1004 NT_STATUS_OK
WriteX 13402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13405 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13408 NT_STATUS_OK
WriteX 13408 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 258 NT_STATUS_OK
WriteX 13408 0 65536 65536 NT_STATUS_OK
WriteX 13408 65536 9298 9298 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
SET_FILE_INFORMATION 13409 1004 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13410 NT_STATUS_OK
SET_FILE_INFORMATION 13410 1004 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13415 0 4096 4096 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13416 4096 4096 4096 NT_STATUS_OK
ReadX 13416 8192 4096 4096 NT_STATUS_OK
ReadX 13416 12288 4096 4096 NT_STATUS_OK
ReadX 13416 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
Close 13418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13419 1004 NT_STATUS_OK
WriteX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13420 NT_STATUS_OK
Close 13420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13422 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13425 NT_STATUS_OK
WriteX 13425 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 258 NT_STATUS_OK
WriteX 13425 0 65536 65536 NT_STATUS_OK
WriteX 13425 65536 11540 11540 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 4096 4096 NT_STATUS_OK
WriteX 13426 0 4096 4096 NT_STATUS_OK
Flush 13426 NT_STATUS_OK
SET_FILE_INFORMATION 13426 1004 NT_STATUS_OK
WriteX 13426 0 4096 4096 NT_STATUS_OK
Flush 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13427 NT_STATUS_OK
SET_FILE_INFORMATION 13427 1004 NT_STATUS_OK
Close 13427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13429 NT_STATUS_OK
Close 13429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 61440 4096 4096 NT_STATUS_OK
ReadX 13431 126976 4096 4096 NT_STATUS_OK
WriteX 13431 0 65536 65536 NT_STATUS_OK
WriteX 13431 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 61440 4096 4096 NT_STATUS_OK
ReadX 13432 126976 4096 4096 NT_STATUS_OK
ReadX 13432 192512 4096 4096 NT_STATUS_OK
ReadX 13432 258048 4096 4096 NT_STATUS_OK
WriteX 13432 0 65536 65536 NT_STATUS_OK
WriteX 13432 65536 65536 65536 NT_STATUS_OK
WriteX 13432 131072 65536 65536 NT_STATUS_OK
WriteX 13432 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13433 NT_STATUS_OK
ReadX 13433 61440 4096 4096 NT_STATUS_OK
ReadX 13433 126976 4096 4096 NT_STATUS_OK
ReadX 13433 192512 4096 4096 NT_STATUS_OK
ReadX 13433 258048 4096 4096 NT_STATUS_OK
ReadX 13433 323584 4096 4096 NT_STATUS_OK
ReadX 13433 389120 4096 4096 NT_STATUS_OK
ReadX 13433 454656 4096 4096 NT_STATUS_OK
ReadX 13433 520192 4096 4096 NT_STATUS_OK
WriteX 13433 0 65536 65536 NT_STATUS_OK
WriteX 13433 65536 65536 65536 NT_STATUS_OK
WriteX 13433 131072 65536 65536 NT_STATUS_OK
WriteX 13433 196608 65536 65536 NT_STATUS_OK
WriteX 13433 262144 65536 65536 NT_STATUS_OK
WriteX 13433 327680 65536 65536 NT_STATUS_OK
WriteX 13433 393216 65536 65536 NT_STATUS_OK
WriteX 13433 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
ReadX 13434 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13435 NT_STATUS_OK
WriteX 13435 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 53 53 NT_STATUS_OK
Close 13435 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13374 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13434 8192 4096 4096 NT_STATUS_OK
ReadX 13434 12288 4096 4096 NT_STATUS_OK
WriteX 13438 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13438 258 NT_STATUS_OK
ReadX 13434 16384 4096 4096 NT_STATUS_OK
ReadX 13434 20480 4096 4096 NT_STATUS_OK
WriteX 13438 0 15360 15360 NT_STATUS_OK
Close 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13439 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13439 1004 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13443 NT_STATUS_OK
Close 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13442 4096 4096 4096 NT_STATUS_OK
ReadX 13442 8192 4096 4096 NT_STATUS_OK
ReadX 13442 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
ReadX 13445 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
ReadX 13446 4096 4096 4096 NT_STATUS_OK
ReadX 13446 8192 4096 4096 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13447 NT_STATUS_OK
WriteX 13447 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13447 258 NT_STATUS_OK
WriteX 13447 0 15360 15360 NT_STATUS_OK
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13448 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13449 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13452 NT_STATUS_OK
SET_FILE_INFORMATION 13452 1004 NT_STATUS_OK
Close 13452 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13453 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
ReadX 13455 4096 4096 4096 NT_STATUS_OK
ReadX 13455 8192 4096 4096 NT_STATUS_OK
ReadX 13455 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13455 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13455 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13457 NT_STATUS_OK
WriteX 13457 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13457 258 NT_STATUS_OK
WriteX 13457 0 53 53 NT_STATUS_OK
Close 13457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13458 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13456 4096 4096 4096 NT_STATUS_OK
ReadX 13456 8192 4096 4096 NT_STATUS_OK
ReadX 13456 12288 4096 4096 NT_STATUS_OK
WriteX 13460 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13460 258 NT_STATUS_OK
WriteX 13460 0 12006 12006 NT_STATUS_OK
Close 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13461 NT_STATUS_OK
ReadX 13461 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13461 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13461 1004 NT_STATUS_OK
WriteX 13461 0 4096 4096 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13462 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13464 4096 4096 4096 NT_STATUS_OK
ReadX 13464 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13467 NT_STATUS_OK
WriteX 13467 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13467 258 NT_STATUS_OK
WriteX 13467 0 11991 11991 NT_STATUS_OK
Close 13467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13468 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13468 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13472 NT_STATUS_OK
SET_FILE_INFORMATION 13472 1004 NT_STATUS_OK
Close 13472 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13473 NT_STATUS_OK
Close 13473 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13476 NT_STATUS_OK
Close 13476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13475 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13475 1004 NT_STATUS_OK
ReadX 13475 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13475 1004 NT_STATUS_OK
WriteX 13475 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13475 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13475 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13475 1004 NT_STATUS_OK
Close 13451 NT_STATUS_OK
WriteX 13455 0 19054 19054 NT_STATUS_OK
WriteX 13475 0 12288 12288 NT_STATUS_OK
Close 13471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13478 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13480 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13482 NT_STATUS_OK
ReadX 13482 0 61440 61440 NT_STATUS_OK
ReadX 13482 61440 4096 4096 NT_STATUS_OK
ReadX 13482 65536 61440 61440 NT_STATUS_OK
ReadX 13482 126976 4096 4096 NT_STATUS_OK
ReadX 13482 131072 61440 61440 NT_STATUS_OK
ReadX 13482 192512 4096 4096 NT_STATUS_OK
ReadX 13482 196608 61440 61440 NT_STATUS_OK
ReadX 13482 258048 4096 4096 NT_STATUS_OK
ReadX 13482 262144 61440 61440 NT_STATUS_OK
ReadX 13482 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 61440 61440 NT_STATUS_OK
ReadX 13483 61440 4096 4096 NT_STATUS_OK
ReadX 13483 65536 61440 61440 NT_STATUS_OK
ReadX 13483 126976 4096 4096 NT_STATUS_OK
ReadX 13483 131072 61440 61440 NT_STATUS_OK
ReadX 13483 192512 4096 4096 NT_STATUS_OK
ReadX 13483 196608 61440 61440 NT_STATUS_OK
ReadX 13483 258048 4096 4096 NT_STATUS_OK
ReadX 13483 262144 61440 61440 NT_STATUS_OK
ReadX 13483 323584 4096 4096 NT_STATUS_OK
ReadX 13483 327680 61440 61440 NT_STATUS_OK
ReadX 13483 389120 4096 4096 NT_STATUS_OK
ReadX 13483 393216 61440 61440 NT_STATUS_OK
ReadX 13483 454656 4096 4096 NT_STATUS_OK
ReadX 13483 458752 61440 61440 NT_STATUS_OK
ReadX 13483 520192 4096 4096 NT_STATUS_OK
ReadX 13483 524288 61440 61440 NT_STATUS_OK
ReadX 13483 585728 4096 4096 NT_STATUS_OK
ReadX 13483 589824 61440 61440 NT_STATUS_OK
ReadX 13483 651264 4096 4096 NT_STATUS_OK
ReadX 13483 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 61440 61440 NT_STATUS_OK
ReadX 13484 61440 4096 4096 NT_STATUS_OK
ReadX 13484 65536 61440 61440 NT_STATUS_OK
ReadX 13484 126976 4096 4096 NT_STATUS_OK
ReadX 13484 131072 61440 61440 NT_STATUS_OK
ReadX 13484 192512 4096 4096 NT_STATUS_OK
ReadX 13484 196608 61440 61440 NT_STATUS_OK
ReadX 13484 258048 4096 4096 NT_STATUS_OK
ReadX 13484 262144 61440 61440 NT_STATUS_OK
ReadX 13484 323584 4096 4096 NT_STATUS_OK
ReadX 13484 327680 61440 61440 NT_STATUS_OK
ReadX 13484 389120 4096 4096 NT_STATUS_OK
ReadX 13484 393216 61440 61440 NT_STATUS_OK
ReadX 13484 454656 4096 4096 NT_STATUS_OK
ReadX 13484 458752 61440 61440 NT_STATUS_OK
ReadX 13484 520192 4096 4096 NT_STATUS_OK
ReadX 13484 524288 61440 61440 NT_STATUS_OK
ReadX 13484 585728 4096 4096 NT_STATUS_OK
ReadX 13484 589824 61440 61440 NT_STATUS_OK
ReadX 13484 651264 4096 4096 NT_STATUS_OK
ReadX 13484 655360 61440 61440 NT_STATUS_OK
ReadX 13484 716800 4096 4096 NT_STATUS_OK
ReadX 13484 720896 61440 61440 NT_STATUS_OK
ReadX 13484 782336 4096 4096 NT_STATUS_OK
ReadX 13484 786432 61440 61440 NT_STATUS_OK
ReadX 13484 847872 4096 4096 NT_STATUS_OK
ReadX 13484 851968 61440 61440 NT_STATUS_OK
ReadX 13484 913408 4096 4096 NT_STATUS_OK
ReadX 13484 917504 61440 61440 NT_STATUS_OK
ReadX 13484 978944 4096 4096 NT_STATUS_OK
ReadX 13484 983040 61440 61440 NT_STATUS_OK
ReadX 13484 1044480 4096 4096 NT_STATUS_OK
ReadX 13484 1048576 61440 61440 NT_STATUS_OK
ReadX 13484 1110016 4096 4096 NT_STATUS_OK
ReadX 13484 1114112 61440 61440 NT_STATUS_OK
ReadX 13484 1175552 4096 4096 NT_STATUS_OK
ReadX 13484 1179648 61440 61440 NT_STATUS_OK
ReadX 13484 1241088 4096 4096 NT_STATUS_OK
ReadX 13484 1245184 61440 61440 NT_STATUS_OK
ReadX 13484 1306624 4096 4096 NT_STATUS_OK
ReadX 13484 1310720 61440 61440 NT_STATUS_OK
ReadX 13484 1372160 4096 4096 NT_STATUS_OK
ReadX 13484 1376256 61440 61440 NT_STATUS_OK
ReadX 13484 1437696 4096 4096 NT_STATUS_OK
ReadX 13484 1441792 61440 61440 NT_STATUS_OK
ReadX 13484 1503232 4096 4096 NT_STATUS_OK
ReadX 13484 1507328 61440 61440 NT_STATUS_OK
ReadX 13484 1568768 4096 4096 NT_STATUS_OK
ReadX 13484 1572864 61440 61440 NT_STATUS_OK
ReadX 13484 1634304 4096 4096 NT_STATUS_OK
ReadX 13484 1638400 61440 61440 NT_STATUS_OK
ReadX 13484 1699840 4096 4096 NT_STATUS_OK
ReadX 13484 1703936 61440 61440 NT_STATUS_OK
ReadX 13484 1765376 4096 4096 NT_STATUS_OK
ReadX 13484 1769472 61440 61440 NT_STATUS_OK
ReadX 13484 1830912 4096 4096 NT_STATUS_OK
ReadX 13484 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13486 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13490 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13491 NT_STATUS_OK
QUERY_FILE_INFORMATION 13491 1004 NT_STATUS_OK
WriteX 13491 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13491 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13493 NT_STATUS_OK
WriteX 13493 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13493 258 NT_STATUS_OK
WriteX 13493 0 491 491 NT_STATUS_OK
Close 13493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13491 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13496 NT_STATUS_OK
Close 13496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13497 NT_STATUS_OK
WriteX 13497 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 258 NT_STATUS_OK
WriteX 13497 0 543 543 NT_STATUS_OK
Close 13497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13482 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13505 NT_STATUS_OK
ReadX 13505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13511 NT_STATUS_OK
QUERY_FILE_INFORMATION 13511 1004 NT_STATUS_OK
WriteX 13511 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13511 258 NT_STATUS_OK
WriteX 13511 0 2048 2048 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13512 NT_STATUS_OK
ReadX 13512 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13512 0 4096 4096 NT_STATUS_OK
Flush 13512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13512 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13517 NT_STATUS_OK
WriteX 13517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13517 258 NT_STATUS_OK
WriteX 13517 0 2048 2048 NT_STATUS_OK
Close 13517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13522 NT_STATUS_OK
Close 13522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13523 NT_STATUS_OK
WriteX 13523 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13523 258 NT_STATUS_OK
WriteX 13523 0 2048 2048 NT_STATUS_OK
Close 13523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 2048 2048 NT_STATUS_OK
ReadX 13502 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13518 0 4096 4096 NT_STATUS_OK
WriteX 13502 0 8192 8192 NT_STATUS_OK
WriteX 13503 0 4096 4096 NT_STATUS_OK
WriteX 13504 0 4096 4096 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13528 NT_STATUS_OK
QUERY_FILE_INFORMATION 13528 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13538 NT_STATUS_OK
ReadX 13538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13539 NT_STATUS_OK
ReadX 13539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13548 NT_STATUS_OK
QUERY_FILE_INFORMATION 13548 1004 NT_STATUS_OK
WriteX 13548 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13548 258 NT_STATUS_OK
WriteX 13548 0 2048 2048 NT_STATUS_OK
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13556 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 1004 NT_STATUS_OK
WriteX 13556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 258 NT_STATUS_OK
WriteX 13556 0 2048 2048 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13549 0 4096 4096 NT_STATUS_OK
Flush 13549 NT_STATUS_OK
WriteX 13557 0 4096 4096 NT_STATUS_OK
Flush 13557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13549 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13551 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13559 NT_STATUS_OK
WriteX 13559 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13559 258 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
Close 13559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13562 NT_STATUS_OK
WriteX 13562 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13562 258 NT_STATUS_OK
WriteX 13562 0 4096 4096 NT_STATUS_OK
Close 13562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13563 0 4096 4096 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13538 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13566 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13569 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13570 NT_STATUS_OK
WriteX 13570 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13570 258 NT_STATUS_OK
WriteX 13570 0 2048 2048 NT_STATUS_OK
Close 13570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13585 NT_STATUS_OK
QUERY_FILE_INFORMATION 13585 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13568 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13583 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13587 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13591 NT_STATUS_OK
ReadX 13591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13592 NT_STATUS_OK
ReadX 13592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13593 NT_STATUS_OK
ReadX 13593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13606 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13607 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 1004 NT_STATUS_OK
WriteX 13607 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 258 NT_STATUS_OK
WriteX 13607 0 2048 2048 NT_STATUS_OK
Close 13607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13610 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13611 NT_STATUS_OK
ReadX 13611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13612 NT_STATUS_OK
ReadX 13612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13619 NT_STATUS_OK
QUERY_FILE_INFORMATION 13619 1004 NT_STATUS_OK
WriteX 13619 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13619 258 NT_STATUS_OK
WriteX 13619 0 2048 2048 NT_STATUS_OK
Close 13619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13627 NT_STATUS_OK
QUERY_FILE_INFORMATION 13627 1004 NT_STATUS_OK
WriteX 13627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13627 258 NT_STATUS_OK
WriteX 13627 0 2048 2048 NT_STATUS_OK
Close 13627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13628 NT_STATUS_OK
ReadX 13628 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13608 0 4096 4096 NT_STATUS_OK
Flush 13608 NT_STATUS_OK
WriteX 13620 0 4096 4096 NT_STATUS_OK
Flush 13620 NT_STATUS_OK
WriteX 13628 0 4096 4096 NT_STATUS_OK
Flush 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13608 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13620 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13610 4096 16384 16384 NT_STATUS_OK
ReadX 13590 4096 16384 16384 NT_STATUS_OK
ReadX 13622 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 2048 2048 NT_STATUS_OK
WriteX 13630 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13631 NT_STATUS_OK
QUERY_FILE_INFORMATION 13631 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13614 NT_STATUS_OK
Close 13602 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Close 13611 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13598 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Close 13592 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13633 NT_STATUS_OK
QUERY_FILE_INFORMATION 13633 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13635 NT_STATUS_OK
QUERY_FILE_INFORMATION 13635 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13642 NT_STATUS_OK
ReadX 13642 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13638 4096 16384 16384 NT_STATUS_OK
WriteX 13638 0 4096 4096 NT_STATUS_OK
WriteX 13639 0 4096 4096 NT_STATUS_OK
WriteX 13640 0 4096 4096 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13644 NT_STATUS_OK
ReadX 13644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13646 NT_STATUS_OK
ReadX 13646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13649 NT_STATUS_OK
ReadX 13649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13656 NT_STATUS_OK
ReadX 13656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 8192 8192 NT_STATUS_OK
ReadX 13644 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13658 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13658 0 4096 4096 NT_STATUS_OK
ReadX 13658 4096 4096 4096 NT_STATUS_OK
ReadX 13658 8192 4096 4096 NT_STATUS_OK
WriteX 13644 0 4096 4096 NT_STATUS_OK
WriteX 13645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13659 0 4096 4096 NT_STATUS_OK
ReadX 13659 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13638 0 4096 4096 NT_STATUS_OK
WriteX 13639 0 4096 4096 NT_STATUS_OK
WriteX 13640 0 4096 4096 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13664 NT_STATUS_OK
QUERY_FILE_INFORMATION 13664 1004 NT_STATUS_OK
WriteX 13664 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13664 258 NT_STATUS_OK
WriteX 13664 0 2048 2048 NT_STATUS_OK
Close 13664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13665 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
ReadX 13667 4096 4096 4096 NT_STATUS_OK
WriteX 13667 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13665 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13669 NT_STATUS_OK
ReadX 13669 0 4096 4096 NT_STATUS_OK
ReadX 13669 4096 4096 4096 NT_STATUS_OK
WriteX 13669 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13670 NT_STATUS_OK
QUERY_FILE_INFORMATION 13670 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Close 13642 NT_STATUS_OK
Close 13638 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13655 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Close 13644 NT_STATUS_OK
Close 13645 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13646 NT_STATUS_OK
Close 13647 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13672 0 4096 4096 NT_STATUS_OK
ReadX 13672 4096 4096 4096 NT_STATUS_OK
ReadX 13672 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13675 NT_STATUS_OK
ReadX 13675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
ReadX 13673 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13690 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 1004 NT_STATUS_OK
WriteX 13690 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
WriteX 13690 0 2048 2048 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13691 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13695 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13696 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 1004 NT_STATUS_OK
WriteX 13696 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 258 NT_STATUS_OK
WriteX 13696 0 2048 2048 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13697 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13680 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13698 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13673 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13675 NT_STATUS_OK
Close 13676 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13672 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13700 NT_STATUS_OK
QUERY_FILE_INFORMATION 13700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13702 NT_STATUS_OK
ReadX 13702 61440 4096 4096 NT_STATUS_OK
ReadX 13702 126976 4096 4096 NT_STATUS_OK
WriteX 13702 0 65536 65536 NT_STATUS_OK
WriteX 13702 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 61440 4096 4096 NT_STATUS_OK
ReadX 13703 126976 4096 4096 NT_STATUS_OK
ReadX 13703 192512 4096 4096 NT_STATUS_OK
ReadX 13703 258048 4096 4096 NT_STATUS_OK
WriteX 13703 0 65536 65536 NT_STATUS_OK
WriteX 13703 65536 65536 65536 NT_STATUS_OK
WriteX 13703 131072 65536 65536 NT_STATUS_OK
WriteX 13703 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 61440 4096 4096 NT_STATUS_OK
ReadX 13704 126976 4096 4096 NT_STATUS_OK
ReadX 13704 192512 4096 4096 NT_STATUS_OK
ReadX 13704 258048 4096 4096 NT_STATUS_OK
ReadX 13704 323584 4096 4096 NT_STATUS_OK
ReadX 13704 389120 4096 4096 NT_STATUS_OK
ReadX 13704 454656 4096 4096 NT_STATUS_OK
ReadX 13704 520192 4096 4096 NT_STATUS_OK
WriteX 13704 0 65536 65536 NT_STATUS_OK
WriteX 13704 65536 65536 65536 NT_STATUS_OK
WriteX 13704 131072 65536 65536 NT_STATUS_OK
WriteX 13704 196608 65536 65536 NT_STATUS_OK
WriteX 13704 262144 65536 65536 NT_STATUS_OK
WriteX 13704 327680 65536 65536 NT_STATUS_OK
WriteX 13704 393216 65536 65536 NT_STATUS_OK
WriteX 13704 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13705 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13705 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13705 8192 4096 4096 NT_STATUS_OK
ReadX 13705 12288 4096 4096 NT_STATUS_OK
ReadX 13705 16384 4096 4096 NT_STATUS_OK
ReadX 13705 20480 4096 4096 NT_STATUS_OK
ReadX 13705 24576 4096 4096 NT_STATUS_OK
ReadX 13705 28672 4096 4096 NT_STATUS_OK
ReadX 13705 32768 4096 4096 NT_STATUS_OK
ReadX 13705 36864 4096 4096 NT_STATUS_OK
ReadX 13705 40960 4096 4096 NT_STATUS_OK
ReadX 13705 45056 4096 4096 NT_STATUS_OK
ReadX 13705 49152 4096 4096 NT_STATUS_OK
ReadX 13705 53248 4096 4096 NT_STATUS_OK
ReadX 13705 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13705 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13706 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13702 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13708 NT_STATUS_OK
WriteX 13708 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13708 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13708 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13708 1004 NT_STATUS_OK
WriteX 13708 0 57088 57088 NT_STATUS_OK
WriteX 13708 0 4096 4096 NT_STATUS_OK
Flush 13708 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13709 NT_STATUS_OK
SET_FILE_INFORMATION 13709 1004 NT_STATUS_OK
Close 13709 NT_STATUS_OK
SET_FILE_INFORMATION 13708 1004 NT_STATUS_OK
WriteX 13708 0 4096 4096 NT_STATUS_OK
Close 13708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13712 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13713 NT_STATUS_OK
WriteX 13713 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13713 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13713 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13713 1004 NT_STATUS_OK
WriteX 13713 0 51456 51456 NT_STATUS_OK
WriteX 13713 0 4096 4096 NT_STATUS_OK
Flush 13713 NT_STATUS_OK
SET_FILE_INFORMATION 13713 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13713 1004 NT_STATUS_OK
WriteX 13713 0 4096 4096 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13715 NT_STATUS_OK
Close 13715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13717 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13719 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13722 NT_STATUS_OK
WriteX 13722 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13722 258 NT_STATUS_OK
WriteX 13722 0 53077 53077 NT_STATUS_OK
Close 13722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13723 NT_STATUS_OK
WriteX 13723 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13723 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13723 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13723 1004 NT_STATUS_OK
WriteX 13723 0 65536 65536 NT_STATUS_OK
WriteX 13723 65536 1856 1856 NT_STATUS_OK
WriteX 13723 0 4096 4096 NT_STATUS_OK
Flush 13723 NT_STATUS_OK
SET_FILE_INFORMATION 13723 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13723 1004 NT_STATUS_OK
WriteX 13723 0 4096 4096 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13725 NT_STATUS_OK
Close 13725 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13732 NT_STATUS_OK
WriteX 13732 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13732 258 NT_STATUS_OK
WriteX 13732 0 7983 7983 NT_STATUS_OK
Close 13732 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13737 NT_STATUS_OK
WriteX 13737 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13737 258 NT_STATUS_OK
WriteX 13737 0 65536 65536 NT_STATUS_OK
WriteX 13737 65536 65536 65536 NT_STATUS_OK
WriteX 13737 131072 65536 65536 NT_STATUS_OK
WriteX 13737 196608 65536 65536 NT_STATUS_OK
WriteX 13737 262144 65536 65536 NT_STATUS_OK
WriteX 13737 327680 65536 65536 NT_STATUS_OK
WriteX 13737 393216 65536 65536 NT_STATUS_OK
WriteX 13737 458752 46731 46731 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13738 NT_STATUS_OK
WriteX 13738 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13738 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13727 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13738 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13738 1004 NT_STATUS_OK
WriteX 13738 0 65536 65536 NT_STATUS_OK
WriteX 13738 65536 22848 22848 NT_STATUS_OK
WriteX 13738 0 4096 4096 NT_STATUS_OK
Flush 13738 NT_STATUS_OK
SET_FILE_INFORMATION 13738 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13738 1004 NT_STATUS_OK
WriteX 13738 0 4096 4096 NT_STATUS_OK
Close 13738 NT_STATUS_OK
Close 13727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13740 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13742 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13743 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13743 1004 NT_STATUS_OK
ReadX 13743 8192 4096 4096 NT_STATUS_OK
ReadX 13743 12288 4096 4096 NT_STATUS_OK
ReadX 13743 16384 4096 4096 NT_STATUS_OK
ReadX 13743 20480 4096 4096 NT_STATUS_OK
ReadX 13743 24576 4096 4096 NT_STATUS_OK
ReadX 13743 28672 4096 4096 NT_STATUS_OK
ReadX 13743 32768 4096 4096 NT_STATUS_OK
ReadX 13743 36864 4096 4096 NT_STATUS_OK
ReadX 13743 40960 4096 4096 NT_STATUS_OK
ReadX 13743 45056 4096 4096 NT_STATUS_OK
ReadX 13743 49152 4096 4096 NT_STATUS_OK
ReadX 13743 53248 4096 4096 NT_STATUS_OK
ReadX 13743 57344 4096 4096 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 65536 4096 4096 NT_STATUS_OK
ReadX 13743 69632 4096 4096 NT_STATUS_OK
ReadX 13743 73728 4096 4096 NT_STATUS_OK
ReadX 13743 77824 4096 4096 NT_STATUS_OK
ReadX 13743 81920 4096 4096 NT_STATUS_OK
ReadX 13743 86016 4096 4096 NT_STATUS_OK
ReadX 13743 90112 4096 4096 NT_STATUS_OK
ReadX 13743 94208 4096 4096 NT_STATUS_OK
ReadX 13743 98304 4096 4096 NT_STATUS_OK
ReadX 13743 102400 4096 4096 NT_STATUS_OK
ReadX 13743 106496 4096 4096 NT_STATUS_OK
ReadX 13743 110592 4096 4096 NT_STATUS_OK
ReadX 13743 114688 4096 4096 NT_STATUS_OK
ReadX 13743 118784 4096 4096 NT_STATUS_OK
ReadX 13743 122880 4096 4096 NT_STATUS_OK
ReadX 13743 126976 4096 4096 NT_STATUS_OK
ReadX 13743 131072 4096 4096 NT_STATUS_OK
ReadX 13743 135168 4096 4096 NT_STATUS_OK
ReadX 13743 139264 4096 4096 NT_STATUS_OK
ReadX 13743 143360 4096 4096 NT_STATUS_OK
ReadX 13743 147456 4096 4096 NT_STATUS_OK
ReadX 13743 151552 4096 4096 NT_STATUS_OK
ReadX 13743 155648 4096 4096 NT_STATUS_OK
ReadX 13743 159744 4096 4096 NT_STATUS_OK
ReadX 13743 163840 4096 4096 NT_STATUS_OK
ReadX 13743 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13743 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13744 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13746 NT_STATUS_OK
WriteX 13746 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13746 258 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13747 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
Close 13747 NT_STATUS_OK
WriteX 13746 0 42388 42388 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13748 NT_STATUS_OK
Close 13748 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
ReadX 13750 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13751 NT_STATUS_OK
WriteX 13751 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13751 258 NT_STATUS_OK
SET_FILE_INFORMATION 13751 1004 NT_STATUS_OK
WriteX 13751 0 42652 42652 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Close 13750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13753 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
ReadX 13755 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13757 NT_STATUS_OK
Close 13757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13760 NT_STATUS_OK
WriteX 13760 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13760 258 NT_STATUS_OK
WriteX 13760 0 65536 65536 NT_STATUS_OK
WriteX 13760 65536 49 49 NT_STATUS_OK
Close 13760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 61440 61440 NT_STATUS_OK
ReadX 13761 61440 4096 4096 NT_STATUS_OK
ReadX 13761 65536 61440 61440 NT_STATUS_OK
ReadX 13761 126976 4096 4096 NT_STATUS_OK
ReadX 13761 131072 61440 61440 NT_STATUS_OK
ReadX 13761 192512 4096 4096 NT_STATUS_OK
ReadX 13761 196608 61440 61440 NT_STATUS_OK
ReadX 13761 258048 4096 4096 NT_STATUS_OK
ReadX 13761 262144 61440 61440 NT_STATUS_OK
ReadX 13761 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 61440 61440 NT_STATUS_OK
ReadX 13762 61440 4096 4096 NT_STATUS_OK
ReadX 13762 65536 61440 61440 NT_STATUS_OK
ReadX 13762 126976 4096 4096 NT_STATUS_OK
ReadX 13762 131072 61440 61440 NT_STATUS_OK
ReadX 13762 192512 4096 4096 NT_STATUS_OK
ReadX 13762 196608 61440 61440 NT_STATUS_OK
ReadX 13762 258048 4096 4096 NT_STATUS_OK
ReadX 13762 262144 61440 61440 NT_STATUS_OK
ReadX 13762 323584 4096 4096 NT_STATUS_OK
ReadX 13762 327680 61440 61440 NT_STATUS_OK
ReadX 13762 389120 4096 4096 NT_STATUS_OK
ReadX 13762 393216 61440 61440 NT_STATUS_OK
ReadX 13762 454656 4096 4096 NT_STATUS_OK
ReadX 13762 458752 61440 61440 NT_STATUS_OK
ReadX 13762 520192 4096 4096 NT_STATUS_OK
ReadX 13762 524288 61440 61440 NT_STATUS_OK
ReadX 13762 585728 4096 4096 NT_STATUS_OK
ReadX 13762 589824 61440 61440 NT_STATUS_OK
ReadX 13762 651264 4096 4096 NT_STATUS_OK
ReadX 13762 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 61440 61440 NT_STATUS_OK
ReadX 13763 61440 4096 4096 NT_STATUS_OK
ReadX 13763 65536 61440 61440 NT_STATUS_OK
ReadX 13763 126976 4096 4096 NT_STATUS_OK
ReadX 13763 131072 61440 61440 NT_STATUS_OK
ReadX 13763 192512 4096 4096 NT_STATUS_OK
ReadX 13763 196608 61440 61440 NT_STATUS_OK
ReadX 13763 258048 4096 4096 NT_STATUS_OK
ReadX 13763 262144 61440 61440 NT_STATUS_OK
ReadX 13763 323584 4096 4096 NT_STATUS_OK
ReadX 13763 327680 61440 61440 NT_STATUS_OK
ReadX 13763 389120 4096 4096 NT_STATUS_OK
ReadX 13763 393216 61440 61440 NT_STATUS_OK
ReadX 13763 454656 4096 4096 NT_STATUS_OK
ReadX 13763 458752 61440 61440 NT_STATUS_OK
ReadX 13763 520192 4096 4096 NT_STATUS_OK
ReadX 13763 524288 61440 61440 NT_STATUS_OK
ReadX 13763 585728 4096 4096 NT_STATUS_OK
ReadX 13763 589824 61440 61440 NT_STATUS_OK
ReadX 13763 651264 4096 4096 NT_STATUS_OK
ReadX 13763 655360 61440 61440 NT_STATUS_OK
ReadX 13763 716800 4096 4096 NT_STATUS_OK
ReadX 13763 720896 61440 61440 NT_STATUS_OK
ReadX 13763 782336 4096 4096 NT_STATUS_OK
ReadX 13763 786432 61440 61440 NT_STATUS_OK
ReadX 13763 847872 4096 4096 NT_STATUS_OK
ReadX 13763 851968 61440 61440 NT_STATUS_OK
ReadX 13763 913408 4096 4096 NT_STATUS_OK
ReadX 13763 917504 61440 61440 NT_STATUS_OK
ReadX 13763 978944 4096 4096 NT_STATUS_OK
ReadX 13763 983040 61440 61440 NT_STATUS_OK
ReadX 13763 1044480 4096 4096 NT_STATUS_OK
ReadX 13763 1048576 61440 61440 NT_STATUS_OK
ReadX 13763 1110016 4096 4096 NT_STATUS_OK
ReadX 13763 1114112 61440 61440 NT_STATUS_OK
ReadX 13763 1175552 4096 4096 NT_STATUS_OK
ReadX 13763 1179648 61440 61440 NT_STATUS_OK
ReadX 13763 1241088 4096 4096 NT_STATUS_OK
ReadX 13763 1245184 61440 61440 NT_STATUS_OK
ReadX 13763 1306624 4096 4096 NT_STATUS_OK
ReadX 13763 1310720 61440 61440 NT_STATUS_OK
ReadX 13763 1372160 4096 4096 NT_STATUS_OK
ReadX 13763 1376256 61440 61440 NT_STATUS_OK
ReadX 13763 1437696 4096 4096 NT_STATUS_OK
ReadX 13763 1441792 61440 61440 NT_STATUS_OK
ReadX 13763 1503232 4096 4096 NT_STATUS_OK
ReadX 13763 1507328 61440 61440 NT_STATUS_OK
ReadX 13763 1568768 4096 4096 NT_STATUS_OK
ReadX 13763 1572864 61440 61440 NT_STATUS_OK
ReadX 13763 1634304 4096 4096 NT_STATUS_OK
ReadX 13763 1638400 61440 61440 NT_STATUS_OK
ReadX 13763 1699840 4096 4096 NT_STATUS_OK
ReadX 13763 1703936 61440 61440 NT_STATUS_OK
ReadX 13763 1765376 4096 4096 NT_STATUS_OK
ReadX 13763 1769472 61440 61440 NT_STATUS_OK
ReadX 13763 1830912 4096 4096 NT_STATUS_OK
ReadX 13763 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13765 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 1005 NT_STATUS_OK
ReadX 13765 2156 24 24 NT_STATUS_OK
ReadX 13765 2139 276 276 NT_STATUS_OK
ReadX 13765 2136 14 14 NT_STATUS_OK
ReadX 13765 2136 7 7 NT_STATUS_OK
ReadX 13765 2138 12 12 NT_STATUS_OK
ReadX 13765 2137 8 8 NT_STATUS_OK
ReadX 13765 2135 15 15 NT_STATUS_OK
ReadX 13765 0 16 16 NT_STATUS_OK
ReadX 13765 16 2048 2048 NT_STATUS_OK
ReadX 13765 2064 2048 2048 NT_STATUS_OK
ReadX 13765 257 2048 2048 NT_STATUS_OK
ReadX 13765 385 2048 2048 NT_STATUS_OK
ReadX 13765 513 2048 2048 NT_STATUS_OK
ReadX 13765 641 2048 2048 NT_STATUS_OK
ReadX 13765 769 2048 2048 NT_STATUS_OK
ReadX 13765 897 2048 2048 NT_STATUS_OK
ReadX 13765 1025 2048 2048 NT_STATUS_OK
ReadX 13765 1153 2048 2048 NT_STATUS_OK
ReadX 13765 1281 2048 2048 NT_STATUS_OK
ReadX 13765 1409 2048 2048 NT_STATUS_OK
ReadX 13765 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13770 NT_STATUS_OK
WriteX 13770 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 258 NT_STATUS_OK
WriteX 13770 0 10575 10575 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
Close 13770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13775 NT_STATUS_OK
LockX 13775 2147483538 1 NT_STATUS_OK
UnlockX 13775 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13775 1005 NT_STATUS_OK
ReadX 13775 0 512 512 NT_STATUS_OK
ReadX 13775 512 512 512 NT_STATUS_OK
ReadX 13775 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13775 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13775 1004 NT_STATUS_OK
Close 13775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13776 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 1005 NT_STATUS_OK
ReadX 13776 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13777 NT_STATUS_OK
LockX 13777 2147483538 1 NT_STATUS_OK
UnlockX 13777 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1005 NT_STATUS_OK
ReadX 13777 0 512 512 NT_STATUS_OK
ReadX 13777 512 512 512 NT_STATUS_OK
ReadX 13777 1024 512 512 NT_STATUS_OK
ReadX 13777 288 20 20 NT_STATUS_OK
ReadX 13777 308 2084 2084 NT_STATUS_OK
ReadX 13777 388 2084 2084 NT_STATUS_OK
ReadX 13777 388 2084 2084 NT_STATUS_OK
ReadX 13764 2157 1386 1386 NT_STATUS_OK
ReadX 13777 2472 399 399 NT_STATUS_OK
ReadX 13777 3072 1536 1536 NT_STATUS_OK
ReadX 13777 544 149 149 NT_STATUS_OK
ReadX 13777 693 485 485 NT_STATUS_OK
Close 13777 NT_STATUS_OK
ReadX 13764 2157 4096 4096 NT_STATUS_OK
ReadX 13764 6253 4096 4096 NT_STATUS_OK
ReadX 13764 10349 4096 4096 NT_STATUS_OK
ReadX 13764 14445 4096 4096 NT_STATUS_OK
ReadX 13764 18541 4096 4096 NT_STATUS_OK
ReadX 13764 22637 256 256 NT_STATUS_OK
ReadX 13764 22893 4096 4096 NT_STATUS_OK
ReadX 13764 26989 4096 4096 NT_STATUS_OK
ReadX 13764 31085 4096 4096 NT_STATUS_OK
ReadX 13764 35181 4096 4096 NT_STATUS_OK
ReadX 13764 39277 4096 4096 NT_STATUS_OK
ReadX 13764 43373 4096 4096 NT_STATUS_OK
ReadX 13764 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13764 2157 1024 1024 NT_STATUS_OK
ReadX 13764 1667 4688 4688 NT_STATUS_OK
ReadX 13764 6355 3516 3516 NT_STATUS_OK
ReadX 13764 9871 16384 16384 NT_STATUS_OK
ReadX 13764 26255 3771 3771 NT_STATUS_OK
ReadX 13764 30026 2048 2048 NT_STATUS_OK
ReadX 13764 32074 1024 1024 NT_STATUS_OK
ReadX 13764 33098 6652 6652 NT_STATUS_OK
ReadX 13764 39750 16384 16384 NT_STATUS_OK
ReadX 13764 56134 10496 10496 NT_STATUS_OK
ReadX 13764 66630 1784 1784 NT_STATUS_OK
ReadX 13764 68414 90 90 NT_STATUS_OK
ReadX 13764 68504 273 273 NT_STATUS_OK
ReadX 13764 68777 1600 1600 NT_STATUS_OK
ReadX 13764 70377 640 640 NT_STATUS_OK
ReadX 13764 71017 1280 1280 NT_STATUS_OK
ReadX 13764 72297 8464 8464 NT_STATUS_OK
ReadX 13764 80761 158 158 NT_STATUS_OK
ReadX 13764 80919 912 912 NT_STATUS_OK
ReadX 13764 81831 1980 1980 NT_STATUS_OK
ReadX 13764 83811 2256 2256 NT_STATUS_OK
ReadX 13764 86067 400 400 NT_STATUS_OK
ReadX 13764 86467 252 252 NT_STATUS_OK
ReadX 13764 86719 42 42 NT_STATUS_OK
ReadX 13764 86761 725 725 NT_STATUS_OK
ReadX 13764 2009 512 512 NT_STATUS_OK
ReadX 13764 3895 9 9 NT_STATUS_OK
ReadX 13764 3781 46 46 NT_STATUS_OK
ReadX 13764 4059 92 92 NT_STATUS_OK
ReadX 13764 3781 92 92 NT_STATUS_OK
ReadX 13764 3986 184 184 NT_STATUS_OK
ReadX 13764 3987 16384 16384 NT_STATUS_OK
ReadX 13764 3902 16384 16384 NT_STATUS_OK
ReadX 13764 3781 10240 10240 NT_STATUS_OK
ReadX 13764 3821 16384 16384 NT_STATUS_OK
ReadX 13764 3891 935 935 NT_STATUS_OK
ReadX 13764 4060 10240 10240 NT_STATUS_OK
ReadX 13764 4059 184 184 NT_STATUS_OK
ReadX 13764 256 184 184 NT_STATUS_OK
ReadX 13764 256 1026 1026 NT_STATUS_OK
ReadX 13764 3901 326 326 NT_STATUS_OK
ReadX 13764 3899 652 652 NT_STATUS_OK
ReadX 13764 256 2 2 NT_STATUS_OK
ReadX 13764 258 4948 4948 NT_STATUS_OK
Close 13764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13782 NT_STATUS_OK
WriteX 13782 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13782 258 NT_STATUS_OK
WriteX 13782 0 65536 65536 NT_STATUS_OK
WriteX 13782 65536 65536 65536 NT_STATUS_OK
WriteX 13782 131072 65536 65536 NT_STATUS_OK
WriteX 13782 196608 65536 65536 NT_STATUS_OK
WriteX 13782 262144 65536 65536 NT_STATUS_OK
WriteX 13782 327680 65536 65536 NT_STATUS_OK
WriteX 13782 393216 65536 65536 NT_STATUS_OK
WriteX 13782 458752 65536 65536 NT_STATUS_OK
WriteX 13782 524288 65536 65536 NT_STATUS_OK
WriteX 13782 589824 35257 35257 NT_STATUS_OK
Close 13782 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13784 NT_STATUS_OK
Close 13784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13787 NT_STATUS_OK
WriteX 13787 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13787 258 NT_STATUS_OK
WriteX 13787 0 65536 65536 NT_STATUS_OK
WriteX 13787 65536 65536 65536 NT_STATUS_OK
WriteX 13787 131072 65536 65536 NT_STATUS_OK
WriteX 13787 196608 65536 65536 NT_STATUS_OK
WriteX 13787 262144 65536 65536 NT_STATUS_OK
WriteX 13787 327680 65536 65536 NT_STATUS_OK
WriteX 13787 393216 65536 65536 NT_STATUS_OK
WriteX 13787 458752 65536 65536 NT_STATUS_OK
WriteX 13787 524288 65536 65536 NT_STATUS_OK
WriteX 13787 589824 57598 57598 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13789 NT_STATUS_OK
WriteX 13789 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13789 258 NT_STATUS_OK
WriteX 13789 0 12543 12543 NT_STATUS_OK
Flush 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13794 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13795 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 1005 NT_STATUS_OK
ReadX 13795 1938 24 24 NT_STATUS_OK
ReadX 13795 1920 276 276 NT_STATUS_OK
ReadX 13795 1918 14 14 NT_STATUS_OK
ReadX 13795 1918 7 7 NT_STATUS_OK
ReadX 13795 1919 12 12 NT_STATUS_OK
ReadX 13795 1919 8 8 NT_STATUS_OK
ReadX 13795 1917 15 15 NT_STATUS_OK
ReadX 13795 0 16 16 NT_STATUS_OK
ReadX 13795 16 2048 2048 NT_STATUS_OK
ReadX 13795 2064 2048 2048 NT_STATUS_OK
ReadX 13795 257 2048 2048 NT_STATUS_OK
ReadX 13795 385 2048 2048 NT_STATUS_OK
ReadX 13795 513 2048 2048 NT_STATUS_OK
ReadX 13795 641 2048 2048 NT_STATUS_OK
ReadX 13795 769 2048 2048 NT_STATUS_OK
ReadX 13795 897 2048 2048 NT_STATUS_OK
ReadX 13795 1025 2048 2048 NT_STATUS_OK
ReadX 13795 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13797 NT_STATUS_OK
Close 13797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13800 NT_STATUS_OK
WriteX 13800 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13800 258 NT_STATUS_OK
WriteX 13800 0 11588 11588 NT_STATUS_OK
Flush 13800 NT_STATUS_OK
Close 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
Close 13795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13805 NT_STATUS_OK
WriteX 13805 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13805 258 NT_STATUS_OK
WriteX 13805 0 11615 11615 NT_STATUS_OK
Flush 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13807 NT_STATUS_OK
Close 13807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13811 NT_STATUS_OK
Close 13811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13814 NT_STATUS_OK
WriteX 13814 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 258 NT_STATUS_OK
WriteX 13814 0 65536 65536 NT_STATUS_OK
WriteX 13814 65536 16050 16050 NT_STATUS_OK
Close 13814 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13794 1939 64 64 NT_STATUS_OK
ReadX 13794 128 248 248 NT_STATUS_OK
ReadX 13794 128 568 568 NT_STATUS_OK
ReadX 13794 3872 1536 1536 NT_STATUS_OK
ReadX 13794 3456 2560 2560 NT_STATUS_OK
ReadX 13794 3136 512 512 NT_STATUS_OK
ReadX 13794 2880 4096 4096 NT_STATUS_OK
ReadX 13794 3264 3072 3072 NT_STATUS_OK
ReadX 13794 320 4096 4096 NT_STATUS_OK
ReadX 13794 1024 4096 4096 NT_STATUS_OK
ReadX 13794 3616 4096 4096 NT_STATUS_OK
ReadX 13794 1939 64 64 NT_STATUS_OK
ReadX 13794 128 248 248 NT_STATUS_OK
ReadX 13794 128 608 608 NT_STATUS_OK
ReadX 13794 2858 1024 1024 NT_STATUS_OK
ReadX 13794 2810 4096 4096 NT_STATUS_OK
ReadX 13794 2826 4096 4096 NT_STATUS_OK
ReadX 13794 2580 2048 2048 NT_STATUS_OK
ReadX 13794 2800 2560 2560 NT_STATUS_OK
ReadX 13794 2100 4096 4096 NT_STATUS_OK
ReadX 13794 2084 4096 4096 NT_STATUS_OK
ReadX 13794 868 4096 4096 NT_STATUS_OK
ReadX 13794 2324 4096 4096 NT_STATUS_OK
ReadX 13794 884 4096 4096 NT_STATUS_OK
ReadX 13794 2604 1024 1024 NT_STATUS_OK
ReadX 13794 580 4096 4096 NT_STATUS_OK
ReadX 13794 596 4096 4096 NT_STATUS_OK
ReadX 13794 2752 4096 4096 NT_STATUS_OK
ReadX 13794 2842 1024 1024 NT_STATUS_OK
ReadX 13794 660 4096 4096 NT_STATUS_OK
ReadX 13794 2720 4096 4096 NT_STATUS_OK
ReadX 13794 2736 4096 4096 NT_STATUS_OK
ReadX 13794 628 4096 4096 NT_STATUS_OK
ReadX 13794 2704 4096 4096 NT_STATUS_OK
ReadX 13794 1556 4096 4096 NT_STATUS_OK
ReadX 13794 576 4096 4096 NT_STATUS_OK
ReadX 13794 3168 1536 1536 NT_STATUS_OK
ReadX 13794 832 4096 4096 NT_STATUS_OK
ReadX 13794 1088 4096 4096 NT_STATUS_OK
ReadX 13794 1344 4096 4096 NT_STATUS_OK
ReadX 13794 1600 4096 4096 NT_STATUS_OK
ReadX 13794 1856 4096 4096 NT_STATUS_OK
ReadX 13794 2112 4096 4096 NT_STATUS_OK
ReadX 13794 1892 4096 4096 NT_STATUS_OK
ReadX 13794 820 4096 4096 NT_STATUS_OK
ReadX 13794 788 4096 4096 NT_STATUS_OK
ReadX 13794 1604 4096 4096 NT_STATUS_OK
ReadX 13794 3648 4096 4096 NT_STATUS_OK
ReadX 13794 2608 4096 4096 NT_STATUS_OK
ReadX 13794 548 4096 4096 NT_STATUS_OK
ReadX 13794 740 4096 4096 NT_STATUS_OK
ReadX 13794 1344 4096 4096 NT_STATUS_OK
ReadX 13794 3392 4096 4096 NT_STATUS_OK
ReadX 13794 3904 4096 4096 NT_STATUS_OK
ReadX 13794 644 4096 4096 NT_STATUS_OK
ReadX 13794 676 4096 4096 NT_STATUS_OK
ReadX 13794 2688 4096 4096 NT_STATUS_OK
ReadX 13794 320 4096 4096 NT_STATUS_OK
ReadX 13794 900 4096 4096 NT_STATUS_OK
ReadX 13794 1908 4096 4096 NT_STATUS_OK
ReadX 13794 852 4096 4096 NT_STATUS_OK
ReadX 13794 724 4096 4096 NT_STATUS_OK
ReadX 13794 2292 4096 4096 NT_STATUS_OK
ReadX 13794 612 4096 4096 NT_STATUS_OK
ReadX 13794 388 4096 4096 NT_STATUS_OK
ReadX 13794 2368 4096 4096 NT_STATUS_OK
ReadX 13794 2624 4096 4096 NT_STATUS_OK
ReadX 13794 500 4096 4096 NT_STATUS_OK
ReadX 13794 356 4096 4096 NT_STATUS_OK
ReadX 13794 1024 4096 4096 NT_STATUS_OK
ReadX 13794 576 4096 4096 NT_STATUS_OK
ReadX 13794 340 4096 4096 NT_STATUS_OK
ReadX 13794 420 4096 4096 NT_STATUS_OK
ReadX 13794 1600 4096 4096 NT_STATUS_OK
ReadX 13794 404 4096 4096 NT_STATUS_OK
ReadX 13794 1428 4096 4096 NT_STATUS_OK
ReadX 13794 2656 4096 4096 NT_STATUS_OK
ReadX 13794 2624 4096 4096 NT_STATUS_OK
ReadX 13794 452 4096 4096 NT_STATUS_OK
ReadX 13794 692 4096 4096 NT_STATUS_OK
ReadX 13794 564 4096 4096 NT_STATUS_OK
ReadX 13794 372 4096 4096 NT_STATUS_OK
ReadX 13794 468 4096 4096 NT_STATUS_OK
ReadX 13794 484 4096 4096 NT_STATUS_OK
ReadX 13794 1088 4096 4096 NT_STATUS_OK
ReadX 13794 1924 4096 4096 NT_STATUS_OK
ReadX 13794 2768 4096 4096 NT_STATUS_OK
ReadX 13794 832 4096 4096 NT_STATUS_OK
ReadX 13794 836 4096 4096 NT_STATUS_OK
ReadX 13794 1856 4096 4096 NT_STATUS_OK
ReadX 13794 2640 4096 4096 NT_STATUS_OK
ReadX 13794 436 4096 4096 NT_STATUS_OK
ReadX 13794 1828 4096 4096 NT_STATUS_OK
ReadX 13794 804 4096 4096 NT_STATUS_OK
ReadX 13794 1860 4096 4096 NT_STATUS_OK
ReadX 13794 1812 4096 4096 NT_STATUS_OK
ReadX 13794 756 4096 4096 NT_STATUS_OK
ReadX 13794 1636 4096 4096 NT_STATUS_OK
ReadX 13794 772 4096 4096 NT_STATUS_OK
ReadX 13794 2036 4096 4096 NT_STATUS_OK
ReadX 13794 1220 4096 4096 NT_STATUS_OK
ReadX 13794 1652 4096 4096 NT_STATUS_OK
ReadX 13794 2588 4096 4096 NT_STATUS_OK
ReadX 13794 916 4096 4096 NT_STATUS_OK
ReadX 13794 260 4096 4096 NT_STATUS_OK
ReadX 13794 932 4096 4096 NT_STATUS_OK
ReadX 13794 2624 4096 4096 NT_STATUS_OK
ReadX 13794 308 4096 4096 NT_STATUS_OK
ReadX 13794 292 4096 4096 NT_STATUS_OK
ReadX 13794 1140 4096 4096 NT_STATUS_OK
ReadX 13794 276 4096 4096 NT_STATUS_OK
ReadX 13794 2020 4096 4096 NT_STATUS_OK
ReadX 13794 2880 4096 4096 NT_STATUS_OK
ReadX 13794 516 4096 4096 NT_STATUS_OK
ReadX 13794 1844 4096 4096 NT_STATUS_OK
ReadX 13794 1124 4096 4096 NT_STATUS_OK
ReadX 13794 3136 4096 4096 NT_STATUS_OK
ReadX 13794 324 4096 4096 NT_STATUS_OK
ReadX 13794 1156 4096 4096 NT_STATUS_OK
ReadX 13794 1172 4096 4096 NT_STATUS_OK
ReadX 13794 2112 4096 4096 NT_STATUS_OK
ReadX 13794 2368 4096 4096 NT_STATUS_OK
ReadX 13794 964 4096 4096 NT_STATUS_OK
ReadX 13794 980 4096 4096 NT_STATUS_OK
ReadX 13794 1012 4096 4096 NT_STATUS_OK
ReadX 13794 532 4096 4096 NT_STATUS_OK
ReadX 13794 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13794 1620 4096 4096 NT_STATUS_OK
ReadX 13794 1604 4096 4096 NT_STATUS_OK
ReadX 13794 2116 4096 4096 NT_STATUS_OK
ReadX 13794 2132 4096 4096 NT_STATUS_OK
ReadX 13794 2148 4096 4096 NT_STATUS_OK
ReadX 13794 2276 4096 4096 NT_STATUS_OK
ReadX 13794 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13819 NT_STATUS_OK
QUERY_FILE_INFORMATION 13774 1004 NT_STATUS_OK
Close 13774 NT_STATUS_OK
WriteX 13819 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13819 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 1004 NT_STATUS_OK
Close 13776 NT_STATUS_OK
WriteX 13819 0 65536 65536 NT_STATUS_OK
WriteX 13819 65536 64850 64850 NT_STATUS_OK
Close 13819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13821 NT_STATUS_OK
WriteX 13821 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13821 258 NT_STATUS_OK
ReadX 13794 2068 4096 4096 NT_STATUS_OK
ReadX 13794 1588 4096 4096 NT_STATUS_OK
ReadX 13794 1572 4096 4096 NT_STATUS_OK
WriteX 13821 0 18630 18630 NT_STATUS_OK
Flush 13821 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13794 612 4096 4096 NT_STATUS_OK
ReadX 13794 564 4096 4096 NT_STATUS_OK
ReadX 13794 1876 4096 4096 NT_STATUS_OK
ReadX 13794 628 4096 4096 NT_STATUS_OK
ReadX 13794 740 4096 4096 NT_STATUS_OK
ReadX 13794 724 4096 4096 NT_STATUS_OK
ReadX 13794 644 4096 4096 NT_STATUS_OK
ReadX 13794 2324 4096 4096 NT_STATUS_OK
ReadX 13794 660 4096 4096 NT_STATUS_OK
ReadX 13794 852 4096 4096 NT_STATUS_OK
ReadX 13794 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13794 2368 4096 4096 NT_STATUS_OK
ReadX 13794 1024 4096 4096 NT_STATUS_OK
ReadX 13794 320 4096 4096 NT_STATUS_OK
ReadX 13794 580 4096 4096 NT_STATUS_OK
ReadX 13794 3136 512 512 NT_STATUS_OK
ReadX 13794 2880 4096 4096 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 61440 4096 4096 NT_STATUS_OK
ReadX 13826 126976 4096 4096 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 61440 4096 4096 NT_STATUS_OK
ReadX 13827 126976 4096 4096 NT_STATUS_OK
ReadX 13827 192512 4096 4096 NT_STATUS_OK
ReadX 13827 258048 4096 4096 NT_STATUS_OK
WriteX 13827 0 65536 65536 NT_STATUS_OK
WriteX 13827 65536 65536 65536 NT_STATUS_OK
WriteX 13827 131072 65536 65536 NT_STATUS_OK
WriteX 13827 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 61440 4096 4096 NT_STATUS_OK
ReadX 13828 126976 4096 4096 NT_STATUS_OK
ReadX 13828 192512 4096 4096 NT_STATUS_OK
ReadX 13828 258048 4096 4096 NT_STATUS_OK
ReadX 13828 323584 4096 4096 NT_STATUS_OK
ReadX 13828 389120 4096 4096 NT_STATUS_OK
ReadX 13828 454656 4096 4096 NT_STATUS_OK
ReadX 13828 520192 4096 4096 NT_STATUS_OK
WriteX 13828 0 65536 65536 NT_STATUS_OK
WriteX 13828 65536 65536 65536 NT_STATUS_OK
WriteX 13828 131072 65536 65536 NT_STATUS_OK
WriteX 13828 196608 65536 65536 NT_STATUS_OK
WriteX 13828 262144 65536 65536 NT_STATUS_OK
WriteX 13828 327680 65536 65536 NT_STATUS_OK
WriteX 13828 393216 65536 65536 NT_STATUS_OK
WriteX 13828 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13831 NT_STATUS_OK
WriteX 13831 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13831 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13829 0 8192 8192 NT_STATUS_OK
Flush 13829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13829 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13829 0 8192 8192 NT_STATUS_OK
Flush 13829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13829 0 8192 8192 NT_STATUS_OK
Flush 13829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13829 0 8192 8192 NT_STATUS_OK
Flush 13829 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13793 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Close 13827 NT_STATUS_OK
Close 13828 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13836 NT_STATUS_OK
WriteX 13836 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13836 258 NT_STATUS_OK
WriteX 13836 0 62591 62591 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13841 NT_STATUS_OK
WriteX 13841 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13841 258 NT_STATUS_OK
WriteX 13841 0 10845 10845 NT_STATUS_OK
Close 13841 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13846 NT_STATUS_OK
WriteX 13846 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13846 258 NT_STATUS_OK
WriteX 13846 0 30118 30118 NT_STATUS_OK
Close 13846 NT_STATUS_OK
WriteX 13829 0 4096 4096 NT_STATUS_OK
WriteX 13831 0 64 64 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 61440 61440 NT_STATUS_OK
ReadX 13848 61440 4096 4096 NT_STATUS_OK
ReadX 13848 65536 61440 61440 NT_STATUS_OK
ReadX 13848 126976 4096 4096 NT_STATUS_OK
ReadX 13848 131072 61440 61440 NT_STATUS_OK
ReadX 13848 192512 4096 4096 NT_STATUS_OK
ReadX 13848 196608 61440 61440 NT_STATUS_OK
ReadX 13848 258048 4096 4096 NT_STATUS_OK
ReadX 13848 262144 61440 61440 NT_STATUS_OK
ReadX 13848 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 61440 61440 NT_STATUS_OK
ReadX 13849 61440 4096 4096 NT_STATUS_OK
ReadX 13849 65536 61440 61440 NT_STATUS_OK
ReadX 13849 126976 4096 4096 NT_STATUS_OK
ReadX 13849 131072 61440 61440 NT_STATUS_OK
ReadX 13849 192512 4096 4096 NT_STATUS_OK
ReadX 13849 196608 61440 61440 NT_STATUS_OK
ReadX 13849 258048 4096 4096 NT_STATUS_OK
ReadX 13849 262144 61440 61440 NT_STATUS_OK
ReadX 13849 323584 4096 4096 NT_STATUS_OK
ReadX 13849 327680 61440 61440 NT_STATUS_OK
ReadX 13849 389120 4096 4096 NT_STATUS_OK
ReadX 13849 393216 61440 61440 NT_STATUS_OK
ReadX 13849 454656 4096 4096 NT_STATUS_OK
ReadX 13849 458752 61440 61440 NT_STATUS_OK
ReadX 13849 520192 4096 4096 NT_STATUS_OK
ReadX 13849 524288 61440 61440 NT_STATUS_OK
ReadX 13849 585728 4096 4096 NT_STATUS_OK
ReadX 13849 589824 61440 61440 NT_STATUS_OK
ReadX 13849 651264 4096 4096 NT_STATUS_OK
ReadX 13849 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13850 NT_STATUS_OK
ReadX 13850 0 61440 61440 NT_STATUS_OK
ReadX 13850 61440 4096 4096 NT_STATUS_OK
ReadX 13850 65536 61440 61440 NT_STATUS_OK
ReadX 13850 126976 4096 4096 NT_STATUS_OK
ReadX 13850 131072 61440 61440 NT_STATUS_OK
ReadX 13850 192512 4096 4096 NT_STATUS_OK
ReadX 13850 196608 61440 61440 NT_STATUS_OK
ReadX 13850 258048 4096 4096 NT_STATUS_OK
ReadX 13850 262144 61440 61440 NT_STATUS_OK
ReadX 13850 323584 4096 4096 NT_STATUS_OK
ReadX 13850 327680 61440 61440 NT_STATUS_OK
ReadX 13850 389120 4096 4096 NT_STATUS_OK
ReadX 13850 393216 61440 61440 NT_STATUS_OK
ReadX 13850 454656 4096 4096 NT_STATUS_OK
ReadX 13850 458752 61440 61440 NT_STATUS_OK
ReadX 13850 520192 4096 4096 NT_STATUS_OK
ReadX 13850 524288 61440 61440 NT_STATUS_OK
ReadX 13850 585728 4096 4096 NT_STATUS_OK
ReadX 13850 589824 61440 61440 NT_STATUS_OK
ReadX 13850 651264 4096 4096 NT_STATUS_OK
ReadX 13850 655360 61440 61440 NT_STATUS_OK
ReadX 13850 716800 4096 4096 NT_STATUS_OK
ReadX 13850 720896 61440 61440 NT_STATUS_OK
ReadX 13850 782336 4096 4096 NT_STATUS_OK
ReadX 13850 786432 61440 61440 NT_STATUS_OK
ReadX 13850 847872 4096 4096 NT_STATUS_OK
ReadX 13850 851968 61440 61440 NT_STATUS_OK
ReadX 13850 913408 4096 4096 NT_STATUS_OK
ReadX 13850 917504 61440 61440 NT_STATUS_OK
ReadX 13850 978944 4096 4096 NT_STATUS_OK
ReadX 13850 983040 61440 61440 NT_STATUS_OK
ReadX 13850 1044480 4096 4096 NT_STATUS_OK
ReadX 13850 1048576 61440 61440 NT_STATUS_OK
ReadX 13850 1110016 4096 4096 NT_STATUS_OK
ReadX 13850 1114112 61440 61440 NT_STATUS_OK
ReadX 13850 1175552 4096 4096 NT_STATUS_OK
ReadX 13850 1179648 61440 61440 NT_STATUS_OK
ReadX 13850 1241088 4096 4096 NT_STATUS_OK
ReadX 13850 1245184 61440 61440 NT_STATUS_OK
ReadX 13850 1306624 4096 4096 NT_STATUS_OK
ReadX 13850 1310720 61440 61440 NT_STATUS_OK
ReadX 13850 1372160 4096 4096 NT_STATUS_OK
ReadX 13850 1376256 61440 61440 NT_STATUS_OK
ReadX 13850 1437696 4096 4096 NT_STATUS_OK
ReadX 13850 1441792 61440 61440 NT_STATUS_OK
ReadX 13850 1503232 4096 4096 NT_STATUS_OK
ReadX 13850 1507328 61440 61440 NT_STATUS_OK
ReadX 13850 1568768 4096 4096 NT_STATUS_OK
ReadX 13850 1572864 61440 61440 NT_STATUS_OK
ReadX 13850 1634304 4096 4096 NT_STATUS_OK
ReadX 13850 1638400 61440 61440 NT_STATUS_OK
ReadX 13850 1699840 4096 4096 NT_STATUS_OK
ReadX 13850 1703936 61440 61440 NT_STATUS_OK
ReadX 13850 1765376 4096 4096 NT_STATUS_OK
ReadX 13850 1769472 61440 61440 NT_STATUS_OK
ReadX 13850 1830912 4096 4096 NT_STATUS_OK
ReadX 13850 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13849 NT_STATUS_OK
Close 13850 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
ReadX 13855 4096 4096 4096 NT_STATUS_OK
ReadX 13855 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13856 NT_STATUS_OK
Close 13856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Close 13854 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13858 NT_STATUS_OK
ReadX 13858 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13859 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13858 NT_STATUS_OK
Close 13859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13863 NT_STATUS_OK
ReadX 13863 0 8192 8192 NT_STATUS_OK
ReadX 13863 8192 8192 8192 NT_STATUS_OK
ReadX 13863 16384 8192 8192 NT_STATUS_OK
ReadX 13863 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13863 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13868 NT_STATUS_OK
WriteX 13868 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
WriteX 13868 0 10438 10438 NT_STATUS_OK
Close 13868 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13872 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13874 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
ReadX 13877 4096 4096 4096 NT_STATUS_OK
ReadX 13877 8192 4096 4096 NT_STATUS_OK
ReadX 13877 12288 8192 8192 NT_STATUS_OK
ReadX 13877 20480 8192 8192 NT_STATUS_OK
ReadX 13877 28672 8192 8192 NT_STATUS_OK
ReadX 13877 36864 8192 8192 NT_STATUS_OK
ReadX 13877 45056 8192 8192 NT_STATUS_OK
ReadX 13877 53248 8192 8192 NT_STATUS_OK
ReadX 13877 61440 8192 8192 NT_STATUS_OK
ReadX 13877 69632 8192 8192 NT_STATUS_OK
ReadX 13877 77824 8192 8192 NT_STATUS_OK
ReadX 13877 86016 8192 8192 NT_STATUS_OK
ReadX 13877 94208 8192 8192 NT_STATUS_OK
ReadX 13877 102400 8192 8192 NT_STATUS_OK
ReadX 13877 110592 8192 8192 NT_STATUS_OK
ReadX 13877 118784 8192 8192 NT_STATUS_OK
ReadX 13877 126976 8192 8192 NT_STATUS_OK
ReadX 13877 135168 8192 8192 NT_STATUS_OK
ReadX 13877 143360 8192 8192 NT_STATUS_OK
ReadX 13877 151552 8192 8192 NT_STATUS_OK
ReadX 13877 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13870 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13882 NT_STATUS_OK
WriteX 13882 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 258 NT_STATUS_OK
WriteX 13882 0 28489 28489 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13883 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13885 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13886 NT_STATUS_OK
Close 13886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 8192 8192 NT_STATUS_OK
ReadX 13889 8192 8192 8192 NT_STATUS_OK
ReadX 13889 16384 8192 8192 NT_STATUS_OK
ReadX 13889 24576 8192 8192 NT_STATUS_OK
ReadX 13889 32768 16384 16384 NT_STATUS_OK
ReadX 13889 49152 8192 8192 NT_STATUS_OK
ReadX 13889 57344 8192 8192 NT_STATUS_OK
ReadX 13889 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13894 NT_STATUS_OK
WriteX 13894 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13894 258 NT_STATUS_OK
WriteX 13894 0 29253 29253 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13901 NT_STATUS_OK
WriteX 13901 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13901 258 NT_STATUS_OK
WriteX 13901 0 30183 30183 NT_STATUS_OK
Close 13901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13902 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13904 NT_STATUS_OK
WriteX 13904 0 510 510 NT_STATUS_OK
WriteX 13904 510 512 512 NT_STATUS_OK
WriteX 13904 1022 510 510 NT_STATUS_OK
WriteX 13904 1532 510 510 NT_STATUS_OK
WriteX 13904 2042 168 168 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
WriteX 13907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 61440 4096 4096 NT_STATUS_OK
ReadX 13908 126976 4096 4096 NT_STATUS_OK
WriteX 13908 0 65536 65536 NT_STATUS_OK
WriteX 13908 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13909 NT_STATUS_OK
ReadX 13909 61440 4096 4096 NT_STATUS_OK
ReadX 13909 126976 4096 4096 NT_STATUS_OK
ReadX 13909 192512 4096 4096 NT_STATUS_OK
ReadX 13909 258048 4096 4096 NT_STATUS_OK
WriteX 13909 0 65536 65536 NT_STATUS_OK
WriteX 13909 65536 65536 65536 NT_STATUS_OK
WriteX 13909 131072 65536 65536 NT_STATUS_OK
WriteX 13909 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 61440 4096 4096 NT_STATUS_OK
ReadX 13910 126976 4096 4096 NT_STATUS_OK
ReadX 13910 192512 4096 4096 NT_STATUS_OK
ReadX 13910 258048 4096 4096 NT_STATUS_OK
ReadX 13910 323584 4096 4096 NT_STATUS_OK
ReadX 13910 389120 4096 4096 NT_STATUS_OK
ReadX 13910 454656 4096 4096 NT_STATUS_OK
ReadX 13910 520192 4096 4096 NT_STATUS_OK
WriteX 13910 0 65536 65536 NT_STATUS_OK
WriteX 13910 65536 65536 65536 NT_STATUS_OK
WriteX 13910 131072 65536 65536 NT_STATUS_OK
WriteX 13910 196608 65536 65536 NT_STATUS_OK
WriteX 13910 262144 65536 65536 NT_STATUS_OK
WriteX 13910 327680 65536 65536 NT_STATUS_OK
WriteX 13910 393216 65536 65536 NT_STATUS_OK
WriteX 13910 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13911 NT_STATUS_OK
Close 13911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Close 13910 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13926 NT_STATUS_OK
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13929 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13931 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13935 NT_STATUS_OK
Close 13935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13945 NT_STATUS_OK
Close 13945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13960 NT_STATUS_OK
Close 13960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13965 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13973 NT_STATUS_OK
Close 13973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13976 NT_STATUS_OK
Close 13976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13979 NT_STATUS_OK
WriteX 13979 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13979 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13979 0 65536 65536 NT_STATUS_OK
WriteX 13979 65536 65536 65536 NT_STATUS_OK
WriteX 13979 131072 65536 65536 NT_STATUS_OK
WriteX 13979 196608 65536 65536 NT_STATUS_OK
WriteX 13979 262144 26634 26634 NT_STATUS_OK
Close 13979 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13985 NT_STATUS_OK
Close 13985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
Close 13986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
ReadX 13987 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13988 NT_STATUS_OK
Close 13988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13992 NT_STATUS_OK
Close 13992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13995 NT_STATUS_OK
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13997 NT_STATUS_OK
Close 13997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14001 NT_STATUS_OK
Close 14001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14020 NT_STATUS_OK
Close 14020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14025 NT_STATUS_OK
Close 14025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14030 NT_STATUS_OK
Close 14030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14039 NT_STATUS_OK
Close 14039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 14052 NT_STATUS_OK
Close 14052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 14054 NT_STATUS_OK
Close 14054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
Close 14080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9971 0 4096 4096 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9972 NT_STATUS_OK
ReadX 9972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9973 NT_STATUS_OK
ReadX 9973 0 4096 4096 NT_STATUS_OK
ReadX 9973 4096 4096 4096 NT_STATUS_OK
ReadX 9973 8192 4096 4096 NT_STATUS_OK
ReadX 9973 12288 4096 4096 NT_STATUS_OK
ReadX 9973 16384 4096 4096 NT_STATUS_OK
ReadX 9973 20480 4096 4096 NT_STATUS_OK
ReadX 9973 24576 4096 4096 NT_STATUS_OK
ReadX 9973 28672 4096 4096 NT_STATUS_OK
ReadX 9973 32768 4096 4096 NT_STATUS_OK
ReadX 9973 36864 4096 4096 NT_STATUS_OK
ReadX 9973 40960 4096 4096 NT_STATUS_OK
ReadX 9973 45056 4096 4096 NT_STATUS_OK
ReadX 9973 49152 4096 4096 NT_STATUS_OK
ReadX 9973 53248 4096 4096 NT_STATUS_OK
ReadX 9973 57344 4096 4096 NT_STATUS_OK
ReadX 9973 61440 4096 4096 NT_STATUS_OK
ReadX 9973 65536 4096 4096 NT_STATUS_OK
ReadX 9973 69632 4096 4096 NT_STATUS_OK
ReadX 9973 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9973 1004 NT_STATUS_OK
WriteX 9973 0 4096 4096 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9974 NT_STATUS_OK
SET_FILE_INFORMATION 9974 1004 NT_STATUS_OK
Close 9974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9975 NT_STATUS_OK
ReadX 9975 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9979 NT_STATUS_OK
WriteX 9979 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 258 NT_STATUS_OK
WriteX 9979 0 65536 65536 NT_STATUS_OK
WriteX 9979 65536 19979 19979 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
Close 9980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9981 NT_STATUS_OK
ReadX 9981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9982 NT_STATUS_OK
ReadX 9982 0 4096 4096 NT_STATUS_OK
Close 9981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9983 NT_STATUS_OK
ReadX 9983 0 4096 4096 NT_STATUS_OK
Close 9983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9985 1004 NT_STATUS_OK
WriteX 9985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9986 NT_STATUS_OK
Close 9986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9982 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9991 NT_STATUS_OK
WriteX 9991 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 65536 65536 NT_STATUS_OK
WriteX 9991 65536 17654 17654 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 4096 4096 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
QUERY_FILE_INFORMATION 9992 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
SET_FILE_INFORMATION 9992 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9993 NT_STATUS_OK
SET_FILE_INFORMATION 9993 1004 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9995 NT_STATUS_OK
Close 9995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
ReadX 9997 4096 4096 4096 NT_STATUS_OK
ReadX 9997 8192 4096 4096 NT_STATUS_OK
ReadX 9997 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9997 16384 4096 4096 NT_STATUS_OK
ReadX 9997 20480 4096 4096 NT_STATUS_OK
ReadX 9997 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9998 NT_STATUS_OK
ReadX 9998 0 4096 4096 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9999 NT_STATUS_OK
ReadX 9999 0 4096 4096 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10000 NT_STATUS_OK
ReadX 10000 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10000 1004 NT_STATUS_OK
WriteX 10000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10001 NT_STATUS_OK
Close 10001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10006 NT_STATUS_OK
WriteX 10006 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10006 258 NT_STATUS_OK
WriteX 10006 0 65536 65536 NT_STATUS_OK
WriteX 10006 65536 19490 19490 NT_STATUS_OK
Close 10006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10007 NT_STATUS_OK
ReadX 10007 0 4096 4096 NT_STATUS_OK
WriteX 10007 0 4096 4096 NT_STATUS_OK
Flush 10007 NT_STATUS_OK
WriteX 10007 0 4096 4096 NT_STATUS_OK
Flush 10007 NT_STATUS_OK
QUERY_FILE_INFORMATION 10007 1004 NT_STATUS_OK
WriteX 10007 0 4096 4096 NT_STATUS_OK
Flush 10007 NT_STATUS_OK
WriteX 10007 0 4096 4096 NT_STATUS_OK
Flush 10007 NT_STATUS_OK
WriteX 10007 0 4096 4096 NT_STATUS_OK
Flush 10007 NT_STATUS_OK
SET_FILE_INFORMATION 10007 1004 NT_STATUS_OK
WriteX 10007 0 4096 4096 NT_STATUS_OK
Flush 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10008 NT_STATUS_OK
SET_FILE_INFORMATION 10008 1004 NT_STATUS_OK
Close 10008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10009 NT_STATUS_OK
ReadX 10009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10010 NT_STATUS_OK
Close 10010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10012 0 4096 4096 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 4096 4096 NT_STATUS_OK
ReadX 10014 4096 4096 4096 NT_STATUS_OK
ReadX 10014 8192 4096 4096 NT_STATUS_OK
ReadX 10014 12288 4096 4096 NT_STATUS_OK
ReadX 10014 16384 4096 4096 NT_STATUS_OK
ReadX 10014 20480 4096 4096 NT_STATUS_OK
ReadX 10014 24576 4096 4096 NT_STATUS_OK
ReadX 10014 28672 4096 4096 NT_STATUS_OK
ReadX 10014 32768 4096 4096 NT_STATUS_OK
ReadX 10014 36864 4096 4096 NT_STATUS_OK
ReadX 10014 40960 4096 4096 NT_STATUS_OK
ReadX 10014 45056 4096 4096 NT_STATUS_OK
ReadX 10014 49152 4096 4096 NT_STATUS_OK
ReadX 10014 53248 4096 4096 NT_STATUS_OK
ReadX 10014 57344 4096 4096 NT_STATUS_OK
ReadX 10014 61440 4096 4096 NT_STATUS_OK
ReadX 10014 65536 4096 4096 NT_STATUS_OK
ReadX 10014 69632 4096 4096 NT_STATUS_OK
ReadX 10014 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10014 1004 NT_STATUS_OK
WriteX 10014 0 4096 4096 NT_STATUS_OK
Close 10014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10015 NT_STATUS_OK
SET_FILE_INFORMATION 10015 1004 NT_STATUS_OK
Close 10015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10016 NT_STATUS_OK
ReadX 10016 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10017 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10020 NT_STATUS_OK
WriteX 10020 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10020 258 NT_STATUS_OK
WriteX 10020 0 65536 65536 NT_STATUS_OK
WriteX 10020 65536 8866 8866 NT_STATUS_OK
Close 10020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10021 NT_STATUS_OK
ReadX 10021 0 4096 4096 NT_STATUS_OK
WriteX 10021 0 4096 4096 NT_STATUS_OK
Flush 10021 NT_STATUS_OK
SET_FILE_INFORMATION 10021 1004 NT_STATUS_OK
WriteX 10021 0 4096 4096 NT_STATUS_OK
Flush 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
Close 10023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10025 NT_STATUS_OK
ReadX 10025 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10025 1004 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10026 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Close 10016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10028 NT_STATUS_OK
Close 10028 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10031 NT_STATUS_OK
WriteX 10031 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10031 258 NT_STATUS_OK
WriteX 10031 0 65536 65536 NT_STATUS_OK
WriteX 10031 65536 9298 9298 NT_STATUS_OK
Close 10031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
Flush 10032 NT_STATUS_OK
SET_FILE_INFORMATION 10032 1004 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
Flush 10032 NT_STATUS_OK
Close 10032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10033 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
Close 10033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10038 0 4096 4096 NT_STATUS_OK
Close 10038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10039 4096 4096 4096 NT_STATUS_OK
ReadX 10039 8192 4096 4096 NT_STATUS_OK
ReadX 10039 12288 4096 4096 NT_STATUS_OK
ReadX 10039 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 4096 4096 NT_STATUS_OK
Close 10041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10042 1004 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10043 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10039 NT_STATUS_OK
Close 10042 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10048 NT_STATUS_OK
WriteX 10048 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 258 NT_STATUS_OK
WriteX 10048 0 65536 65536 NT_STATUS_OK
WriteX 10048 65536 11540 11540 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
Flush 10049 NT_STATUS_OK
SET_FILE_INFORMATION 10049 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
Flush 10049 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10050 NT_STATUS_OK
SET_FILE_INFORMATION 10050 1004 NT_STATUS_OK
Close 10050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10052 NT_STATUS_OK
Close 10052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10054 NT_STATUS_OK
ReadX 10054 61440 4096 4096 NT_STATUS_OK
ReadX 10054 126976 4096 4096 NT_STATUS_OK
WriteX 10054 0 65536 65536 NT_STATUS_OK
WriteX 10054 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 61440 4096 4096 NT_STATUS_OK
ReadX 10055 126976 4096 4096 NT_STATUS_OK
ReadX 10055 192512 4096 4096 NT_STATUS_OK
ReadX 10055 258048 4096 4096 NT_STATUS_OK
WriteX 10055 0 65536 65536 NT_STATUS_OK
WriteX 10055 65536 65536 65536 NT_STATUS_OK
WriteX 10055 131072 65536 65536 NT_STATUS_OK
WriteX 10055 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10056 NT_STATUS_OK
ReadX 10056 61440 4096 4096 NT_STATUS_OK
ReadX 10056 126976 4096 4096 NT_STATUS_OK
ReadX 10056 192512 4096 4096 NT_STATUS_OK
ReadX 10056 258048 4096 4096 NT_STATUS_OK
ReadX 10056 323584 4096 4096 NT_STATUS_OK
ReadX 10056 389120 4096 4096 NT_STATUS_OK
ReadX 10056 454656 4096 4096 NT_STATUS_OK
ReadX 10056 520192 4096 4096 NT_STATUS_OK
WriteX 10056 0 65536 65536 NT_STATUS_OK
WriteX 10056 65536 65536 65536 NT_STATUS_OK
WriteX 10056 131072 65536 65536 NT_STATUS_OK
WriteX 10056 196608 65536 65536 NT_STATUS_OK
WriteX 10056 262144 65536 65536 NT_STATUS_OK
WriteX 10056 327680 65536 65536 NT_STATUS_OK
WriteX 10056 393216 65536 65536 NT_STATUS_OK
WriteX 10056 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10057 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
ReadX 10057 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10058 NT_STATUS_OK
WriteX 10058 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10058 258 NT_STATUS_OK
WriteX 10058 0 53 53 NT_STATUS_OK
Close 10058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10059 NT_STATUS_OK
Close 10059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Close 10054 NT_STATUS_OK
Close 10055 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10057 8192 4096 4096 NT_STATUS_OK
ReadX 10057 12288 4096 4096 NT_STATUS_OK
WriteX 10061 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10061 258 NT_STATUS_OK
ReadX 10057 16384 4096 4096 NT_STATUS_OK
ReadX 10057 20480 4096 4096 NT_STATUS_OK
WriteX 10061 0 15360 15360 NT_STATUS_OK
Close 10061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
WriteX 10062 0 4096 4096 NT_STATUS_OK
Close 10062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10063 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10066 NT_STATUS_OK
Close 10066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10065 4096 4096 4096 NT_STATUS_OK
ReadX 10065 8192 4096 4096 NT_STATUS_OK
ReadX 10065 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10068 NT_STATUS_OK
ReadX 10068 0 4096 4096 NT_STATUS_OK
ReadX 10068 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 4096 4096 NT_STATUS_OK
ReadX 10069 4096 4096 4096 NT_STATUS_OK
ReadX 10069 8192 4096 4096 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10070 NT_STATUS_OK
WriteX 10070 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10070 258 NT_STATUS_OK
WriteX 10070 0 15360 15360 NT_STATUS_OK
Close 10070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10071 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10075 NT_STATUS_OK
SET_FILE_INFORMATION 10075 1004 NT_STATUS_OK
Close 10075 NT_STATUS_OK
WriteX 10071 0 4096 4096 NT_STATUS_OK
Close 10071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10076 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10078 NT_STATUS_OK
ReadX 10078 0 4096 4096 NT_STATUS_OK
ReadX 10078 4096 4096 4096 NT_STATUS_OK
ReadX 10078 8192 4096 4096 NT_STATUS_OK
ReadX 10078 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10078 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10079 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10080 NT_STATUS_OK
WriteX 10080 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 53 53 NT_STATUS_OK
Close 10080 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10079 4096 4096 4096 NT_STATUS_OK
ReadX 10079 8192 4096 4096 NT_STATUS_OK
ReadX 10079 12288 4096 4096 NT_STATUS_OK
WriteX 10083 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10083 258 NT_STATUS_OK
WriteX 10083 0 12006 12006 NT_STATUS_OK
Close 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10084 NT_STATUS_OK
ReadX 10084 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10084 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10084 1004 NT_STATUS_OK
WriteX 10084 0 4096 4096 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10085 NT_STATUS_OK
Close 10085 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10088 NT_STATUS_OK
Close 10088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10087 4096 4096 4096 NT_STATUS_OK
ReadX 10087 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10090 NT_STATUS_OK
WriteX 10090 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 258 NT_STATUS_OK
WriteX 10090 0 11991 11991 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10091 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10091 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10095 NT_STATUS_OK
SET_FILE_INFORMATION 10095 1004 NT_STATUS_OK
Close 10095 NT_STATUS_OK
WriteX 10091 0 4096 4096 NT_STATUS_OK
Close 10091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10096 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10098 NT_STATUS_OK
ReadX 10098 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10098 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10098 1004 NT_STATUS_OK
ReadX 10098 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10098 1004 NT_STATUS_OK
WriteX 10098 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10098 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10098 1004 NT_STATUS_OK
Close 10074 NT_STATUS_OK
WriteX 10078 0 19054 19054 NT_STATUS_OK
WriteX 10098 0 12288 12288 NT_STATUS_OK
Close 10094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10101 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10078 NT_STATUS_OK
Close 10098 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 61440 61440 NT_STATUS_OK
ReadX 10105 61440 4096 4096 NT_STATUS_OK
ReadX 10105 65536 61440 61440 NT_STATUS_OK
ReadX 10105 126976 4096 4096 NT_STATUS_OK
ReadX 10105 131072 61440 61440 NT_STATUS_OK
ReadX 10105 192512 4096 4096 NT_STATUS_OK
ReadX 10105 196608 61440 61440 NT_STATUS_OK
ReadX 10105 258048 4096 4096 NT_STATUS_OK
ReadX 10105 262144 61440 61440 NT_STATUS_OK
ReadX 10105 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 0 61440 61440 NT_STATUS_OK
ReadX 10106 61440 4096 4096 NT_STATUS_OK
ReadX 10106 65536 61440 61440 NT_STATUS_OK
ReadX 10106 126976 4096 4096 NT_STATUS_OK
ReadX 10106 131072 61440 61440 NT_STATUS_OK
ReadX 10106 192512 4096 4096 NT_STATUS_OK
ReadX 10106 196608 61440 61440 NT_STATUS_OK
ReadX 10106 258048 4096 4096 NT_STATUS_OK
ReadX 10106 262144 61440 61440 NT_STATUS_OK
ReadX 10106 323584 4096 4096 NT_STATUS_OK
ReadX 10106 327680 61440 61440 NT_STATUS_OK
ReadX 10106 389120 4096 4096 NT_STATUS_OK
ReadX 10106 393216 61440 61440 NT_STATUS_OK
ReadX 10106 454656 4096 4096 NT_STATUS_OK
ReadX 10106 458752 61440 61440 NT_STATUS_OK
ReadX 10106 520192 4096 4096 NT_STATUS_OK
ReadX 10106 524288 61440 61440 NT_STATUS_OK
ReadX 10106 585728 4096 4096 NT_STATUS_OK
ReadX 10106 589824 61440 61440 NT_STATUS_OK
ReadX 10106 651264 4096 4096 NT_STATUS_OK
ReadX 10106 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10107 NT_STATUS_OK
ReadX 10107 0 61440 61440 NT_STATUS_OK
ReadX 10107 61440 4096 4096 NT_STATUS_OK
ReadX 10107 65536 61440 61440 NT_STATUS_OK
ReadX 10107 126976 4096 4096 NT_STATUS_OK
ReadX 10107 131072 61440 61440 NT_STATUS_OK
ReadX 10107 192512 4096 4096 NT_STATUS_OK
ReadX 10107 196608 61440 61440 NT_STATUS_OK
ReadX 10107 258048 4096 4096 NT_STATUS_OK
ReadX 10107 262144 61440 61440 NT_STATUS_OK
ReadX 10107 323584 4096 4096 NT_STATUS_OK
ReadX 10107 327680 61440 61440 NT_STATUS_OK
ReadX 10107 389120 4096 4096 NT_STATUS_OK
ReadX 10107 393216 61440 61440 NT_STATUS_OK
ReadX 10107 454656 4096 4096 NT_STATUS_OK
ReadX 10107 458752 61440 61440 NT_STATUS_OK
ReadX 10107 520192 4096 4096 NT_STATUS_OK
ReadX 10107 524288 61440 61440 NT_STATUS_OK
ReadX 10107 585728 4096 4096 NT_STATUS_OK
ReadX 10107 589824 61440 61440 NT_STATUS_OK
ReadX 10107 651264 4096 4096 NT_STATUS_OK
ReadX 10107 655360 61440 61440 NT_STATUS_OK
ReadX 10107 716800 4096 4096 NT_STATUS_OK
ReadX 10107 720896 61440 61440 NT_STATUS_OK
ReadX 10107 782336 4096 4096 NT_STATUS_OK
ReadX 10107 786432 61440 61440 NT_STATUS_OK
ReadX 10107 847872 4096 4096 NT_STATUS_OK
ReadX 10107 851968 61440 61440 NT_STATUS_OK
ReadX 10107 913408 4096 4096 NT_STATUS_OK
ReadX 10107 917504 61440 61440 NT_STATUS_OK
ReadX 10107 978944 4096 4096 NT_STATUS_OK
ReadX 10107 983040 61440 61440 NT_STATUS_OK
ReadX 10107 1044480 4096 4096 NT_STATUS_OK
ReadX 10107 1048576 61440 61440 NT_STATUS_OK
ReadX 10107 1110016 4096 4096 NT_STATUS_OK
ReadX 10107 1114112 61440 61440 NT_STATUS_OK
ReadX 10107 1175552 4096 4096 NT_STATUS_OK
ReadX 10107 1179648 61440 61440 NT_STATUS_OK
ReadX 10107 1241088 4096 4096 NT_STATUS_OK
ReadX 10107 1245184 61440 61440 NT_STATUS_OK
ReadX 10107 1306624 4096 4096 NT_STATUS_OK
ReadX 10107 1310720 61440 61440 NT_STATUS_OK
ReadX 10107 1372160 4096 4096 NT_STATUS_OK
ReadX 10107 1376256 61440 61440 NT_STATUS_OK
ReadX 10107 1437696 4096 4096 NT_STATUS_OK
ReadX 10107 1441792 61440 61440 NT_STATUS_OK
ReadX 10107 1503232 4096 4096 NT_STATUS_OK
ReadX 10107 1507328 61440 61440 NT_STATUS_OK
ReadX 10107 1568768 4096 4096 NT_STATUS_OK
ReadX 10107 1572864 61440 61440 NT_STATUS_OK
ReadX 10107 1634304 4096 4096 NT_STATUS_OK
ReadX 10107 1638400 61440 61440 NT_STATUS_OK
ReadX 10107 1699840 4096 4096 NT_STATUS_OK
ReadX 10107 1703936 61440 61440 NT_STATUS_OK
ReadX 10107 1765376 4096 4096 NT_STATUS_OK
ReadX 10107 1769472 61440 61440 NT_STATUS_OK
ReadX 10107 1830912 4096 4096 NT_STATUS_OK
ReadX 10107 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10114 NT_STATUS_OK
QUERY_FILE_INFORMATION 10114 1004 NT_STATUS_OK
WriteX 10114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10114 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10116 NT_STATUS_OK
WriteX 10116 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10116 258 NT_STATUS_OK
WriteX 10116 0 491 491 NT_STATUS_OK
Close 10116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10114 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10119 NT_STATUS_OK
Close 10119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10120 NT_STATUS_OK
WriteX 10120 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10120 258 NT_STATUS_OK
WriteX 10120 0 543 543 NT_STATUS_OK
Close 10120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10106 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10125 NT_STATUS_OK
ReadX 10125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10134 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 1004 NT_STATUS_OK
WriteX 10134 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 258 NT_STATUS_OK
WriteX 10134 0 2048 2048 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10135 NT_STATUS_OK
ReadX 10135 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
Flush 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10140 NT_STATUS_OK
WriteX 10140 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10140 258 NT_STATUS_OK
WriteX 10140 0 2048 2048 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10141 NT_STATUS_OK
ReadX 10141 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10145 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10146 NT_STATUS_OK
WriteX 10146 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
WriteX 10146 0 2048 2048 NT_STATUS_OK
Close 10146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10147 NT_STATUS_OK
ReadX 10147 0 2048 2048 NT_STATUS_OK
ReadX 10125 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10141 0 4096 4096 NT_STATUS_OK
WriteX 10125 0 8192 8192 NT_STATUS_OK
WriteX 10126 0 4096 4096 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10150 NT_STATUS_OK
ReadX 10150 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10151 NT_STATUS_OK
QUERY_FILE_INFORMATION 10151 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Close 10127 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10141 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10153 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10154 NT_STATUS_OK
ReadX 10154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10171 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 1004 NT_STATUS_OK
WriteX 10171 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 258 NT_STATUS_OK
WriteX 10171 0 2048 2048 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10173 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10179 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1004 NT_STATUS_OK
WriteX 10179 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 258 NT_STATUS_OK
WriteX 10179 0 2048 2048 NT_STATUS_OK
Close 10179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10172 0 4096 4096 NT_STATUS_OK
Flush 10172 NT_STATUS_OK
WriteX 10180 0 4096 4096 NT_STATUS_OK
Flush 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10172 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10180 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10174 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10182 NT_STATUS_OK
WriteX 10182 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10182 258 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10185 NT_STATUS_OK
WriteX 10185 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 258 NT_STATUS_OK
WriteX 10185 0 4096 4096 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10186 0 4096 4096 NT_STATUS_OK
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10154 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10192 NT_STATUS_OK
Close 10192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10193 NT_STATUS_OK
WriteX 10193 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 258 NT_STATUS_OK
WriteX 10193 0 2048 2048 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10196 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10203 NT_STATUS_OK
ReadX 10203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10204 NT_STATUS_OK
ReadX 10204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10205 NT_STATUS_OK
ReadX 10205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10208 NT_STATUS_OK
QUERY_FILE_INFORMATION 10208 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10194 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10203 NT_STATUS_OK
Close 10204 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Close 10195 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10210 NT_STATUS_OK
QUERY_FILE_INFORMATION 10210 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10219 NT_STATUS_OK
ReadX 10219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10220 NT_STATUS_OK
ReadX 10220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10221 NT_STATUS_OK
ReadX 10221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10230 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 1004 NT_STATUS_OK
WriteX 10230 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 258 NT_STATUS_OK
WriteX 10230 0 2048 2048 NT_STATUS_OK
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10233 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 258 NT_STATUS_OK
WriteX 10242 0 2048 2048 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10250 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 1004 NT_STATUS_OK
WriteX 10250 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 2048 2048 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
Flush 10231 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
Flush 10243 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Flush 10251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10233 4096 16384 16384 NT_STATUS_OK
ReadX 10213 4096 16384 16384 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 2048 2048 NT_STATUS_OK
WriteX 10253 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10254 NT_STATUS_OK
QUERY_FILE_INFORMATION 10254 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10219 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Close 10214 NT_STATUS_OK
Close 10215 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10256 NT_STATUS_OK
QUERY_FILE_INFORMATION 10256 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10258 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10261 4096 16384 16384 NT_STATUS_OK
WriteX 10261 0 4096 4096 NT_STATUS_OK
WriteX 10262 0 4096 4096 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
WriteX 10264 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10276 NT_STATUS_OK
ReadX 10276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10277 NT_STATUS_OK
ReadX 10277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10278 NT_STATUS_OK
ReadX 10278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 0 8192 8192 NT_STATUS_OK
ReadX 10267 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10281 0 4096 4096 NT_STATUS_OK
ReadX 10281 4096 4096 4096 NT_STATUS_OK
ReadX 10281 8192 4096 4096 NT_STATUS_OK
WriteX 10267 0 4096 4096 NT_STATUS_OK
WriteX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
ReadX 10282 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10261 0 4096 4096 NT_STATUS_OK
WriteX 10262 0 4096 4096 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
WriteX 10264 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10286 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10287 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 1004 NT_STATUS_OK
WriteX 10287 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 258 NT_STATUS_OK
WriteX 10287 0 2048 2048 NT_STATUS_OK
Close 10287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10288 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10288 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
ReadX 10290 4096 4096 4096 NT_STATUS_OK
WriteX 10290 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10288 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
ReadX 10292 4096 4096 4096 NT_STATUS_OK
WriteX 10292 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10293 NT_STATUS_OK
QUERY_FILE_INFORMATION 10293 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Close 10278 NT_STATUS_OK
Close 10274 NT_STATUS_OK
Close 10275 NT_STATUS_OK
Close 10276 NT_STATUS_OK
Close 10277 NT_STATUS_OK
Close 10279 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10295 0 4096 4096 NT_STATUS_OK
ReadX 10295 4096 4096 4096 NT_STATUS_OK
ReadX 10295 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10298 NT_STATUS_OK
ReadX 10298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
ReadX 10296 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10313 NT_STATUS_OK
QUERY_FILE_INFORMATION 10313 1004 NT_STATUS_OK
WriteX 10313 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10313 258 NT_STATUS_OK
WriteX 10313 0 2048 2048 NT_STATUS_OK
Close 10313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10319 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 1004 NT_STATUS_OK
WriteX 10319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 2048 2048 NT_STATUS_OK
Close 10319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10303 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10321 NT_STATUS_OK
QUERY_FILE_INFORMATION 10321 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10298 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10304 NT_STATUS_OK
Close 10305 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10323 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10325 NT_STATUS_OK
ReadX 10325 61440 4096 4096 NT_STATUS_OK
ReadX 10325 126976 4096 4096 NT_STATUS_OK
WriteX 10325 0 65536 65536 NT_STATUS_OK
WriteX 10325 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10326 NT_STATUS_OK
ReadX 10326 61440 4096 4096 NT_STATUS_OK
ReadX 10326 126976 4096 4096 NT_STATUS_OK
ReadX 10326 192512 4096 4096 NT_STATUS_OK
ReadX 10326 258048 4096 4096 NT_STATUS_OK
WriteX 10326 0 65536 65536 NT_STATUS_OK
WriteX 10326 65536 65536 65536 NT_STATUS_OK
WriteX 10326 131072 65536 65536 NT_STATUS_OK
WriteX 10326 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 61440 4096 4096 NT_STATUS_OK
ReadX 10327 126976 4096 4096 NT_STATUS_OK
ReadX 10327 192512 4096 4096 NT_STATUS_OK
ReadX 10327 258048 4096 4096 NT_STATUS_OK
ReadX 10327 323584 4096 4096 NT_STATUS_OK
ReadX 10327 389120 4096 4096 NT_STATUS_OK
ReadX 10327 454656 4096 4096 NT_STATUS_OK
ReadX 10327 520192 4096 4096 NT_STATUS_OK
WriteX 10327 0 65536 65536 NT_STATUS_OK
WriteX 10327 65536 65536 65536 NT_STATUS_OK
WriteX 10327 131072 65536 65536 NT_STATUS_OK
WriteX 10327 196608 65536 65536 NT_STATUS_OK
WriteX 10327 262144 65536 65536 NT_STATUS_OK
WriteX 10327 327680 65536 65536 NT_STATUS_OK
WriteX 10327 393216 65536 65536 NT_STATUS_OK
WriteX 10327 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10328 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10328 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10328 8192 4096 4096 NT_STATUS_OK
ReadX 10328 12288 4096 4096 NT_STATUS_OK
ReadX 10328 16384 4096 4096 NT_STATUS_OK
ReadX 10328 20480 4096 4096 NT_STATUS_OK
ReadX 10328 24576 4096 4096 NT_STATUS_OK
ReadX 10328 28672 4096 4096 NT_STATUS_OK
ReadX 10328 32768 4096 4096 NT_STATUS_OK
ReadX 10328 36864 4096 4096 NT_STATUS_OK
ReadX 10328 40960 4096 4096 NT_STATUS_OK
ReadX 10328 45056 4096 4096 NT_STATUS_OK
ReadX 10328 49152 4096 4096 NT_STATUS_OK
ReadX 10328 53248 4096 4096 NT_STATUS_OK
ReadX 10328 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10328 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10329 NT_STATUS_OK
Close 10329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10325 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10331 NT_STATUS_OK
WriteX 10331 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10331 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10331 1004 NT_STATUS_OK
WriteX 10331 0 57088 57088 NT_STATUS_OK
WriteX 10331 0 4096 4096 NT_STATUS_OK
Flush 10331 NT_STATUS_OK
Close 10328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10332 NT_STATUS_OK
SET_FILE_INFORMATION 10332 1004 NT_STATUS_OK
Close 10332 NT_STATUS_OK
SET_FILE_INFORMATION 10331 1004 NT_STATUS_OK
WriteX 10331 0 4096 4096 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10333 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10335 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10336 NT_STATUS_OK
WriteX 10336 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10336 1004 NT_STATUS_OK
WriteX 10336 0 51456 51456 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
SET_FILE_INFORMATION 10336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10336 1004 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10338 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10340 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10342 NT_STATUS_OK
Close 10342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10345 NT_STATUS_OK
WriteX 10345 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 258 NT_STATUS_OK
WriteX 10345 0 53077 53077 NT_STATUS_OK
Close 10345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10346 NT_STATUS_OK
WriteX 10346 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10346 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10346 1004 NT_STATUS_OK
WriteX 10346 0 65536 65536 NT_STATUS_OK
WriteX 10346 65536 1856 1856 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
Flush 10346 NT_STATUS_OK
SET_FILE_INFORMATION 10346 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10346 1004 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10348 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10350 NT_STATUS_OK
ReadX 10350 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10352 NT_STATUS_OK
Close 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10355 NT_STATUS_OK
WriteX 10355 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 258 NT_STATUS_OK
WriteX 10355 0 7983 7983 NT_STATUS_OK
Close 10355 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10360 NT_STATUS_OK
WriteX 10360 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 258 NT_STATUS_OK
WriteX 10360 0 65536 65536 NT_STATUS_OK
WriteX 10360 65536 65536 65536 NT_STATUS_OK
WriteX 10360 131072 65536 65536 NT_STATUS_OK
WriteX 10360 196608 65536 65536 NT_STATUS_OK
WriteX 10360 262144 65536 65536 NT_STATUS_OK
WriteX 10360 327680 65536 65536 NT_STATUS_OK
WriteX 10360 393216 65536 65536 NT_STATUS_OK
WriteX 10360 458752 46731 46731 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10361 NT_STATUS_OK
WriteX 10361 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10350 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10361 1004 NT_STATUS_OK
WriteX 10361 0 65536 65536 NT_STATUS_OK
WriteX 10361 65536 22848 22848 NT_STATUS_OK
WriteX 10361 0 4096 4096 NT_STATUS_OK
Flush 10361 NT_STATUS_OK
SET_FILE_INFORMATION 10361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10361 1004 NT_STATUS_OK
WriteX 10361 0 4096 4096 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10363 NT_STATUS_OK
Close 10363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10365 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10366 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10366 1004 NT_STATUS_OK
ReadX 10366 8192 4096 4096 NT_STATUS_OK
ReadX 10366 12288 4096 4096 NT_STATUS_OK
ReadX 10366 16384 4096 4096 NT_STATUS_OK
ReadX 10366 20480 4096 4096 NT_STATUS_OK
ReadX 10366 24576 4096 4096 NT_STATUS_OK
ReadX 10366 28672 4096 4096 NT_STATUS_OK
ReadX 10366 32768 4096 4096 NT_STATUS_OK
ReadX 10366 36864 4096 4096 NT_STATUS_OK
ReadX 10366 40960 4096 4096 NT_STATUS_OK
ReadX 10366 45056 4096 4096 NT_STATUS_OK
ReadX 10366 49152 4096 4096 NT_STATUS_OK
ReadX 10366 53248 4096 4096 NT_STATUS_OK
ReadX 10366 57344 4096 4096 NT_STATUS_OK
ReadX 10366 61440 4096 4096 NT_STATUS_OK
ReadX 10366 65536 4096 4096 NT_STATUS_OK
ReadX 10366 69632 4096 4096 NT_STATUS_OK
ReadX 10366 73728 4096 4096 NT_STATUS_OK
ReadX 10366 77824 4096 4096 NT_STATUS_OK
ReadX 10366 81920 4096 4096 NT_STATUS_OK
ReadX 10366 86016 4096 4096 NT_STATUS_OK
ReadX 10366 90112 4096 4096 NT_STATUS_OK
ReadX 10366 94208 4096 4096 NT_STATUS_OK
ReadX 10366 98304 4096 4096 NT_STATUS_OK
ReadX 10366 102400 4096 4096 NT_STATUS_OK
ReadX 10366 106496 4096 4096 NT_STATUS_OK
ReadX 10366 110592 4096 4096 NT_STATUS_OK
ReadX 10366 114688 4096 4096 NT_STATUS_OK
ReadX 10366 118784 4096 4096 NT_STATUS_OK
ReadX 10366 122880 4096 4096 NT_STATUS_OK
ReadX 10366 126976 4096 4096 NT_STATUS_OK
ReadX 10366 131072 4096 4096 NT_STATUS_OK
ReadX 10366 135168 4096 4096 NT_STATUS_OK
ReadX 10366 139264 4096 4096 NT_STATUS_OK
ReadX 10366 143360 4096 4096 NT_STATUS_OK
ReadX 10366 147456 4096 4096 NT_STATUS_OK
ReadX 10366 151552 4096 4096 NT_STATUS_OK
ReadX 10366 155648 4096 4096 NT_STATUS_OK
ReadX 10366 159744 4096 4096 NT_STATUS_OK
ReadX 10366 163840 4096 4096 NT_STATUS_OK
ReadX 10366 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10366 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10369 NT_STATUS_OK
WriteX 10369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 258 NT_STATUS_OK
Close 10366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10370 NT_STATUS_OK
SET_FILE_INFORMATION 10370 1004 NT_STATUS_OK
Close 10370 NT_STATUS_OK
WriteX 10369 0 42388 42388 NT_STATUS_OK
Close 10369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
ReadX 10373 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10374 NT_STATUS_OK
WriteX 10374 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10374 258 NT_STATUS_OK
SET_FILE_INFORMATION 10374 1004 NT_STATUS_OK
WriteX 10374 0 42652 42652 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Close 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
ReadX 10378 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10380 NT_STATUS_OK
Close 10380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10383 NT_STATUS_OK
WriteX 10383 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 65536 65536 NT_STATUS_OK
WriteX 10383 65536 49 49 NT_STATUS_OK
Close 10383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10384 NT_STATUS_OK
ReadX 10384 0 61440 61440 NT_STATUS_OK
ReadX 10384 61440 4096 4096 NT_STATUS_OK
ReadX 10384 65536 61440 61440 NT_STATUS_OK
ReadX 10384 126976 4096 4096 NT_STATUS_OK
ReadX 10384 131072 61440 61440 NT_STATUS_OK
ReadX 10384 192512 4096 4096 NT_STATUS_OK
ReadX 10384 196608 61440 61440 NT_STATUS_OK
ReadX 10384 258048 4096 4096 NT_STATUS_OK
ReadX 10384 262144 61440 61440 NT_STATUS_OK
ReadX 10384 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 61440 61440 NT_STATUS_OK
ReadX 10385 61440 4096 4096 NT_STATUS_OK
ReadX 10385 65536 61440 61440 NT_STATUS_OK
ReadX 10385 126976 4096 4096 NT_STATUS_OK
ReadX 10385 131072 61440 61440 NT_STATUS_OK
ReadX 10385 192512 4096 4096 NT_STATUS_OK
ReadX 10385 196608 61440 61440 NT_STATUS_OK
ReadX 10385 258048 4096 4096 NT_STATUS_OK
ReadX 10385 262144 61440 61440 NT_STATUS_OK
ReadX 10385 323584 4096 4096 NT_STATUS_OK
ReadX 10385 327680 61440 61440 NT_STATUS_OK
ReadX 10385 389120 4096 4096 NT_STATUS_OK
ReadX 10385 393216 61440 61440 NT_STATUS_OK
ReadX 10385 454656 4096 4096 NT_STATUS_OK
ReadX 10385 458752 61440 61440 NT_STATUS_OK
ReadX 10385 520192 4096 4096 NT_STATUS_OK
ReadX 10385 524288 61440 61440 NT_STATUS_OK
ReadX 10385 585728 4096 4096 NT_STATUS_OK
ReadX 10385 589824 61440 61440 NT_STATUS_OK
ReadX 10385 651264 4096 4096 NT_STATUS_OK
ReadX 10385 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 61440 61440 NT_STATUS_OK
ReadX 10386 61440 4096 4096 NT_STATUS_OK
ReadX 10386 65536 61440 61440 NT_STATUS_OK
ReadX 10386 126976 4096 4096 NT_STATUS_OK
ReadX 10386 131072 61440 61440 NT_STATUS_OK
ReadX 10386 192512 4096 4096 NT_STATUS_OK
ReadX 10386 196608 61440 61440 NT_STATUS_OK
ReadX 10386 258048 4096 4096 NT_STATUS_OK
ReadX 10386 262144 61440 61440 NT_STATUS_OK
ReadX 10386 323584 4096 4096 NT_STATUS_OK
ReadX 10386 327680 61440 61440 NT_STATUS_OK
ReadX 10386 389120 4096 4096 NT_STATUS_OK
ReadX 10386 393216 61440 61440 NT_STATUS_OK
ReadX 10386 454656 4096 4096 NT_STATUS_OK
ReadX 10386 458752 61440 61440 NT_STATUS_OK
ReadX 10386 520192 4096 4096 NT_STATUS_OK
ReadX 10386 524288 61440 61440 NT_STATUS_OK
ReadX 10386 585728 4096 4096 NT_STATUS_OK
ReadX 10386 589824 61440 61440 NT_STATUS_OK
ReadX 10386 651264 4096 4096 NT_STATUS_OK
ReadX 10386 655360 61440 61440 NT_STATUS_OK
ReadX 10386 716800 4096 4096 NT_STATUS_OK
ReadX 10386 720896 61440 61440 NT_STATUS_OK
ReadX 10386 782336 4096 4096 NT_STATUS_OK
ReadX 10386 786432 61440 61440 NT_STATUS_OK
ReadX 10386 847872 4096 4096 NT_STATUS_OK
ReadX 10386 851968 61440 61440 NT_STATUS_OK
ReadX 10386 913408 4096 4096 NT_STATUS_OK
ReadX 10386 917504 61440 61440 NT_STATUS_OK
ReadX 10386 978944 4096 4096 NT_STATUS_OK
ReadX 10386 983040 61440 61440 NT_STATUS_OK
ReadX 10386 1044480 4096 4096 NT_STATUS_OK
ReadX 10386 1048576 61440 61440 NT_STATUS_OK
ReadX 10386 1110016 4096 4096 NT_STATUS_OK
ReadX 10386 1114112 61440 61440 NT_STATUS_OK
ReadX 10386 1175552 4096 4096 NT_STATUS_OK
ReadX 10386 1179648 61440 61440 NT_STATUS_OK
ReadX 10386 1241088 4096 4096 NT_STATUS_OK
ReadX 10386 1245184 61440 61440 NT_STATUS_OK
ReadX 10386 1306624 4096 4096 NT_STATUS_OK
ReadX 10386 1310720 61440 61440 NT_STATUS_OK
ReadX 10386 1372160 4096 4096 NT_STATUS_OK
ReadX 10386 1376256 61440 61440 NT_STATUS_OK
ReadX 10386 1437696 4096 4096 NT_STATUS_OK
ReadX 10386 1441792 61440 61440 NT_STATUS_OK
ReadX 10386 1503232 4096 4096 NT_STATUS_OK
ReadX 10386 1507328 61440 61440 NT_STATUS_OK
ReadX 10386 1568768 4096 4096 NT_STATUS_OK
ReadX 10386 1572864 61440 61440 NT_STATUS_OK
ReadX 10386 1634304 4096 4096 NT_STATUS_OK
ReadX 10386 1638400 61440 61440 NT_STATUS_OK
ReadX 10386 1699840 4096 4096 NT_STATUS_OK
ReadX 10386 1703936 61440 61440 NT_STATUS_OK
ReadX 10386 1765376 4096 4096 NT_STATUS_OK
ReadX 10386 1769472 61440 61440 NT_STATUS_OK
ReadX 10386 1830912 4096 4096 NT_STATUS_OK
ReadX 10386 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10388 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1005 NT_STATUS_OK
ReadX 10388 2156 24 24 NT_STATUS_OK
ReadX 10388 2139 276 276 NT_STATUS_OK
ReadX 10388 2136 14 14 NT_STATUS_OK
ReadX 10388 2136 7 7 NT_STATUS_OK
ReadX 10388 2138 12 12 NT_STATUS_OK
ReadX 10388 2137 8 8 NT_STATUS_OK
ReadX 10388 2135 15 15 NT_STATUS_OK
ReadX 10388 0 16 16 NT_STATUS_OK
ReadX 10388 16 2048 2048 NT_STATUS_OK
ReadX 10388 2064 2048 2048 NT_STATUS_OK
ReadX 10388 257 2048 2048 NT_STATUS_OK
ReadX 10388 385 2048 2048 NT_STATUS_OK
ReadX 10388 513 2048 2048 NT_STATUS_OK
ReadX 10388 641 2048 2048 NT_STATUS_OK
ReadX 10388 769 2048 2048 NT_STATUS_OK
ReadX 10388 897 2048 2048 NT_STATUS_OK
ReadX 10388 1025 2048 2048 NT_STATUS_OK
ReadX 10388 1153 2048 2048 NT_STATUS_OK
ReadX 10388 1281 2048 2048 NT_STATUS_OK
ReadX 10388 1409 2048 2048 NT_STATUS_OK
ReadX 10388 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10384 NT_STATUS_OK
Close 10385 NT_STATUS_OK
Close 10386 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10393 NT_STATUS_OK
WriteX 10393 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 258 NT_STATUS_OK
WriteX 10393 0 10575 10575 NT_STATUS_OK
Flush 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10398 NT_STATUS_OK
LockX 10398 2147483538 1 NT_STATUS_OK
UnlockX 10398 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10398 1005 NT_STATUS_OK
ReadX 10398 0 512 512 NT_STATUS_OK
ReadX 10398 512 512 512 NT_STATUS_OK
ReadX 10398 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10398 1004 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10399 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 1005 NT_STATUS_OK
ReadX 10399 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10400 NT_STATUS_OK
LockX 10400 2147483538 1 NT_STATUS_OK
UnlockX 10400 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10400 1005 NT_STATUS_OK
ReadX 10400 0 512 512 NT_STATUS_OK
ReadX 10400 512 512 512 NT_STATUS_OK
ReadX 10400 1024 512 512 NT_STATUS_OK
ReadX 10400 288 20 20 NT_STATUS_OK
ReadX 10400 308 2084 2084 NT_STATUS_OK
ReadX 10400 388 2084 2084 NT_STATUS_OK
ReadX 10400 388 2084 2084 NT_STATUS_OK
ReadX 10387 2157 1386 1386 NT_STATUS_OK
ReadX 10400 2472 399 399 NT_STATUS_OK
ReadX 10400 3072 1536 1536 NT_STATUS_OK
ReadX 10400 544 149 149 NT_STATUS_OK
ReadX 10400 693 485 485 NT_STATUS_OK
Close 10400 NT_STATUS_OK
ReadX 10387 2157 4096 4096 NT_STATUS_OK
ReadX 10387 6253 4096 4096 NT_STATUS_OK
ReadX 10387 10349 4096 4096 NT_STATUS_OK
ReadX 10387 14445 4096 4096 NT_STATUS_OK
ReadX 10387 18541 4096 4096 NT_STATUS_OK
ReadX 10387 22637 256 256 NT_STATUS_OK
ReadX 10387 22893 4096 4096 NT_STATUS_OK
ReadX 10387 26989 4096 4096 NT_STATUS_OK
ReadX 10387 31085 4096 4096 NT_STATUS_OK
ReadX 10387 35181 4096 4096 NT_STATUS_OK
ReadX 10387 39277 4096 4096 NT_STATUS_OK
ReadX 10387 43373 4096 4096 NT_STATUS_OK
ReadX 10387 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10387 2157 1024 1024 NT_STATUS_OK
ReadX 10387 1667 4688 4688 NT_STATUS_OK
ReadX 10387 6355 3516 3516 NT_STATUS_OK
ReadX 10387 9871 16384 16384 NT_STATUS_OK
ReadX 10387 26255 3771 3771 NT_STATUS_OK
ReadX 10387 30026 2048 2048 NT_STATUS_OK
ReadX 10387 32074 1024 1024 NT_STATUS_OK
ReadX 10387 33098 6652 6652 NT_STATUS_OK
ReadX 10387 39750 16384 16384 NT_STATUS_OK
ReadX 10387 56134 10496 10496 NT_STATUS_OK
ReadX 10387 66630 1784 1784 NT_STATUS_OK
ReadX 10387 68414 90 90 NT_STATUS_OK
ReadX 10387 68504 273 273 NT_STATUS_OK
ReadX 10387 68777 1600 1600 NT_STATUS_OK
ReadX 10387 70377 640 640 NT_STATUS_OK
ReadX 10387 71017 1280 1280 NT_STATUS_OK
ReadX 10387 72297 8464 8464 NT_STATUS_OK
ReadX 10387 80761 158 158 NT_STATUS_OK
ReadX 10387 80919 912 912 NT_STATUS_OK
ReadX 10387 81831 1980 1980 NT_STATUS_OK
ReadX 10387 83811 2256 2256 NT_STATUS_OK
ReadX 10387 86067 400 400 NT_STATUS_OK
ReadX 10387 86467 252 252 NT_STATUS_OK
ReadX 10387 86719 42 42 NT_STATUS_OK
ReadX 10387 86761 725 725 NT_STATUS_OK
ReadX 10387 2009 512 512 NT_STATUS_OK
ReadX 10387 3895 9 9 NT_STATUS_OK
ReadX 10387 3781 46 46 NT_STATUS_OK
ReadX 10387 4059 92 92 NT_STATUS_OK
ReadX 10387 3781 92 92 NT_STATUS_OK
ReadX 10387 3986 184 184 NT_STATUS_OK
ReadX 10387 3987 16384 16384 NT_STATUS_OK
ReadX 10387 3902 16384 16384 NT_STATUS_OK
ReadX 10387 3781 10240 10240 NT_STATUS_OK
ReadX 10387 3821 16384 16384 NT_STATUS_OK
ReadX 10387 3891 935 935 NT_STATUS_OK
ReadX 10387 4060 10240 10240 NT_STATUS_OK
ReadX 10387 4059 184 184 NT_STATUS_OK
ReadX 10387 256 184 184 NT_STATUS_OK
ReadX 10387 256 1026 1026 NT_STATUS_OK
ReadX 10387 3901 326 326 NT_STATUS_OK
ReadX 10387 3899 652 652 NT_STATUS_OK
ReadX 10387 256 2 2 NT_STATUS_OK
ReadX 10387 258 4948 4948 NT_STATUS_OK
Close 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10402 NT_STATUS_OK
Close 10402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10405 NT_STATUS_OK
WriteX 10405 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10405 258 NT_STATUS_OK
WriteX 10405 0 65536 65536 NT_STATUS_OK
WriteX 10405 65536 65536 65536 NT_STATUS_OK
WriteX 10405 131072 65536 65536 NT_STATUS_OK
WriteX 10405 196608 65536 65536 NT_STATUS_OK
WriteX 10405 262144 65536 65536 NT_STATUS_OK
WriteX 10405 327680 65536 65536 NT_STATUS_OK
WriteX 10405 393216 65536 65536 NT_STATUS_OK
WriteX 10405 458752 65536 65536 NT_STATUS_OK
WriteX 10405 524288 65536 65536 NT_STATUS_OK
WriteX 10405 589824 35257 35257 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10410 NT_STATUS_OK
WriteX 10410 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 65536 65536 NT_STATUS_OK
WriteX 10410 65536 65536 65536 NT_STATUS_OK
WriteX 10410 131072 65536 65536 NT_STATUS_OK
WriteX 10410 196608 65536 65536 NT_STATUS_OK
WriteX 10410 262144 65536 65536 NT_STATUS_OK
WriteX 10410 327680 65536 65536 NT_STATUS_OK
WriteX 10410 393216 65536 65536 NT_STATUS_OK
WriteX 10410 458752 65536 65536 NT_STATUS_OK
WriteX 10410 524288 65536 65536 NT_STATUS_OK
WriteX 10410 589824 57598 57598 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10412 NT_STATUS_OK
WriteX 10412 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 258 NT_STATUS_OK
WriteX 10412 0 12543 12543 NT_STATUS_OK
Flush 10412 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10418 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 1005 NT_STATUS_OK
ReadX 10418 1938 24 24 NT_STATUS_OK
ReadX 10418 1920 276 276 NT_STATUS_OK
ReadX 10418 1918 14 14 NT_STATUS_OK
ReadX 10418 1918 7 7 NT_STATUS_OK
ReadX 10418 1919 12 12 NT_STATUS_OK
ReadX 10418 1919 8 8 NT_STATUS_OK
ReadX 10418 1917 15 15 NT_STATUS_OK
ReadX 10418 0 16 16 NT_STATUS_OK
ReadX 10418 16 2048 2048 NT_STATUS_OK
ReadX 10418 2064 2048 2048 NT_STATUS_OK
ReadX 10418 257 2048 2048 NT_STATUS_OK
ReadX 10418 385 2048 2048 NT_STATUS_OK
ReadX 10418 513 2048 2048 NT_STATUS_OK
ReadX 10418 641 2048 2048 NT_STATUS_OK
ReadX 10418 769 2048 2048 NT_STATUS_OK
ReadX 10418 897 2048 2048 NT_STATUS_OK
ReadX 10418 1025 2048 2048 NT_STATUS_OK
ReadX 10418 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10420 NT_STATUS_OK
Close 10420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10423 NT_STATUS_OK
WriteX 10423 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10423 258 NT_STATUS_OK
WriteX 10423 0 11588 11588 NT_STATUS_OK
Flush 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10424 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
Close 10418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10428 NT_STATUS_OK
WriteX 10428 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10428 258 NT_STATUS_OK
WriteX 10428 0 11615 11615 NT_STATUS_OK
Flush 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10437 NT_STATUS_OK
WriteX 10437 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10437 258 NT_STATUS_OK
WriteX 10437 0 65536 65536 NT_STATUS_OK
WriteX 10437 65536 16050 16050 NT_STATUS_OK
Close 10437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10417 1939 64 64 NT_STATUS_OK
ReadX 10417 128 248 248 NT_STATUS_OK
ReadX 10417 128 568 568 NT_STATUS_OK
ReadX 10417 3872 1536 1536 NT_STATUS_OK
ReadX 10417 3456 2560 2560 NT_STATUS_OK
ReadX 10417 3136 512 512 NT_STATUS_OK
ReadX 10417 2880 4096 4096 NT_STATUS_OK
ReadX 10417 3264 3072 3072 NT_STATUS_OK
ReadX 10417 320 4096 4096 NT_STATUS_OK
ReadX 10417 1024 4096 4096 NT_STATUS_OK
ReadX 10417 3616 4096 4096 NT_STATUS_OK
ReadX 10417 1939 64 64 NT_STATUS_OK
ReadX 10417 128 248 248 NT_STATUS_OK
ReadX 10417 128 608 608 NT_STATUS_OK
ReadX 10417 2858 1024 1024 NT_STATUS_OK
ReadX 10417 2810 4096 4096 NT_STATUS_OK
ReadX 10417 2826 4096 4096 NT_STATUS_OK
ReadX 10417 2580 2048 2048 NT_STATUS_OK
ReadX 10417 2800 2560 2560 NT_STATUS_OK
ReadX 10417 2100 4096 4096 NT_STATUS_OK
ReadX 10417 2084 4096 4096 NT_STATUS_OK
ReadX 10417 868 4096 4096 NT_STATUS_OK
ReadX 10417 2324 4096 4096 NT_STATUS_OK
ReadX 10417 884 4096 4096 NT_STATUS_OK
ReadX 10417 2604 1024 1024 NT_STATUS_OK
ReadX 10417 580 4096 4096 NT_STATUS_OK
ReadX 10417 596 4096 4096 NT_STATUS_OK
ReadX 10417 2752 4096 4096 NT_STATUS_OK
ReadX 10417 2842 1024 1024 NT_STATUS_OK
ReadX 10417 660 4096 4096 NT_STATUS_OK
ReadX 10417 2720 4096 4096 NT_STATUS_OK
ReadX 10417 2736 4096 4096 NT_STATUS_OK
ReadX 10417 628 4096 4096 NT_STATUS_OK
ReadX 10417 2704 4096 4096 NT_STATUS_OK
ReadX 10417 1556 4096 4096 NT_STATUS_OK
ReadX 10417 576 4096 4096 NT_STATUS_OK
ReadX 10417 3168 1536 1536 NT_STATUS_OK
ReadX 10417 832 4096 4096 NT_STATUS_OK
ReadX 10417 1088 4096 4096 NT_STATUS_OK
ReadX 10417 1344 4096 4096 NT_STATUS_OK
ReadX 10417 1600 4096 4096 NT_STATUS_OK
ReadX 10417 1856 4096 4096 NT_STATUS_OK
ReadX 10417 2112 4096 4096 NT_STATUS_OK
ReadX 10417 1892 4096 4096 NT_STATUS_OK
ReadX 10417 820 4096 4096 NT_STATUS_OK
ReadX 10417 788 4096 4096 NT_STATUS_OK
ReadX 10417 1604 4096 4096 NT_STATUS_OK
ReadX 10417 3648 4096 4096 NT_STATUS_OK
ReadX 10417 2608 4096 4096 NT_STATUS_OK
ReadX 10417 548 4096 4096 NT_STATUS_OK
ReadX 10417 740 4096 4096 NT_STATUS_OK
ReadX 10417 1344 4096 4096 NT_STATUS_OK
ReadX 10417 3392 4096 4096 NT_STATUS_OK
ReadX 10417 3904 4096 4096 NT_STATUS_OK
ReadX 10417 644 4096 4096 NT_STATUS_OK
ReadX 10417 676 4096 4096 NT_STATUS_OK
ReadX 10417 2688 4096 4096 NT_STATUS_OK
ReadX 10417 320 4096 4096 NT_STATUS_OK
ReadX 10417 900 4096 4096 NT_STATUS_OK
ReadX 10417 1908 4096 4096 NT_STATUS_OK
ReadX 10417 852 4096 4096 NT_STATUS_OK
ReadX 10417 724 4096 4096 NT_STATUS_OK
ReadX 10417 2292 4096 4096 NT_STATUS_OK
ReadX 10417 612 4096 4096 NT_STATUS_OK
ReadX 10417 388 4096 4096 NT_STATUS_OK
ReadX 10417 2368 4096 4096 NT_STATUS_OK
ReadX 10417 2624 4096 4096 NT_STATUS_OK
ReadX 10417 500 4096 4096 NT_STATUS_OK
ReadX 10417 356 4096 4096 NT_STATUS_OK
ReadX 10417 1024 4096 4096 NT_STATUS_OK
ReadX 10417 576 4096 4096 NT_STATUS_OK
ReadX 10417 340 4096 4096 NT_STATUS_OK
ReadX 10417 420 4096 4096 NT_STATUS_OK
ReadX 10417 1600 4096 4096 NT_STATUS_OK
ReadX 10417 404 4096 4096 NT_STATUS_OK
ReadX 10417 1428 4096 4096 NT_STATUS_OK
ReadX 10417 2656 4096 4096 NT_STATUS_OK
ReadX 10417 2624 4096 4096 NT_STATUS_OK
ReadX 10417 452 4096 4096 NT_STATUS_OK
ReadX 10417 692 4096 4096 NT_STATUS_OK
ReadX 10417 564 4096 4096 NT_STATUS_OK
ReadX 10417 372 4096 4096 NT_STATUS_OK
ReadX 10417 468 4096 4096 NT_STATUS_OK
ReadX 10417 484 4096 4096 NT_STATUS_OK
ReadX 10417 1088 4096 4096 NT_STATUS_OK
ReadX 10417 1924 4096 4096 NT_STATUS_OK
ReadX 10417 2768 4096 4096 NT_STATUS_OK
ReadX 10417 832 4096 4096 NT_STATUS_OK
ReadX 10417 836 4096 4096 NT_STATUS_OK
ReadX 10417 1856 4096 4096 NT_STATUS_OK
ReadX 10417 2640 4096 4096 NT_STATUS_OK
ReadX 10417 436 4096 4096 NT_STATUS_OK
ReadX 10417 1828 4096 4096 NT_STATUS_OK
ReadX 10417 804 4096 4096 NT_STATUS_OK
ReadX 10417 1860 4096 4096 NT_STATUS_OK
ReadX 10417 1812 4096 4096 NT_STATUS_OK
ReadX 10417 756 4096 4096 NT_STATUS_OK
ReadX 10417 1636 4096 4096 NT_STATUS_OK
ReadX 10417 772 4096 4096 NT_STATUS_OK
ReadX 10417 2036 4096 4096 NT_STATUS_OK
ReadX 10417 1220 4096 4096 NT_STATUS_OK
ReadX 10417 1652 4096 4096 NT_STATUS_OK
ReadX 10417 2588 4096 4096 NT_STATUS_OK
ReadX 10417 916 4096 4096 NT_STATUS_OK
ReadX 10417 260 4096 4096 NT_STATUS_OK
ReadX 10417 932 4096 4096 NT_STATUS_OK
ReadX 10417 2624 4096 4096 NT_STATUS_OK
ReadX 10417 308 4096 4096 NT_STATUS_OK
ReadX 10417 292 4096 4096 NT_STATUS_OK
ReadX 10417 1140 4096 4096 NT_STATUS_OK
ReadX 10417 276 4096 4096 NT_STATUS_OK
ReadX 10417 2020 4096 4096 NT_STATUS_OK
ReadX 10417 2880 4096 4096 NT_STATUS_OK
ReadX 10417 516 4096 4096 NT_STATUS_OK
ReadX 10417 1844 4096 4096 NT_STATUS_OK
ReadX 10417 1124 4096 4096 NT_STATUS_OK
ReadX 10417 3136 4096 4096 NT_STATUS_OK
ReadX 10417 324 4096 4096 NT_STATUS_OK
ReadX 10417 1156 4096 4096 NT_STATUS_OK
ReadX 10417 1172 4096 4096 NT_STATUS_OK
ReadX 10417 2112 4096 4096 NT_STATUS_OK
ReadX 10417 2368 4096 4096 NT_STATUS_OK
ReadX 10417 964 4096 4096 NT_STATUS_OK
ReadX 10417 980 4096 4096 NT_STATUS_OK
ReadX 10417 1012 4096 4096 NT_STATUS_OK
ReadX 10417 532 4096 4096 NT_STATUS_OK
ReadX 10417 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10417 1620 4096 4096 NT_STATUS_OK
ReadX 10417 1604 4096 4096 NT_STATUS_OK
ReadX 10417 2116 4096 4096 NT_STATUS_OK
ReadX 10417 2132 4096 4096 NT_STATUS_OK
ReadX 10417 2148 4096 4096 NT_STATUS_OK
ReadX 10417 2276 4096 4096 NT_STATUS_OK
ReadX 10417 1540 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10439 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10442 NT_STATUS_OK
QUERY_FILE_INFORMATION 10397 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
WriteX 10442 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 1004 NT_STATUS_OK
Close 10399 NT_STATUS_OK
WriteX 10442 0 65536 65536 NT_STATUS_OK
WriteX 10442 65536 64850 64850 NT_STATUS_OK
Close 10442 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
ReadX 10417 2068 4096 4096 NT_STATUS_OK
ReadX 10417 1588 4096 4096 NT_STATUS_OK
ReadX 10417 1572 4096 4096 NT_STATUS_OK
WriteX 10444 0 18630 18630 NT_STATUS_OK
Flush 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10417 612 4096 4096 NT_STATUS_OK
ReadX 10417 564 4096 4096 NT_STATUS_OK
ReadX 10417 1876 4096 4096 NT_STATUS_OK
ReadX 10417 628 4096 4096 NT_STATUS_OK
ReadX 10417 740 4096 4096 NT_STATUS_OK
ReadX 10417 724 4096 4096 NT_STATUS_OK
ReadX 10417 644 4096 4096 NT_STATUS_OK
ReadX 10417 2324 4096 4096 NT_STATUS_OK
ReadX 10417 660 4096 4096 NT_STATUS_OK
ReadX 10417 852 4096 4096 NT_STATUS_OK
ReadX 10417 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10417 2368 4096 4096 NT_STATUS_OK
ReadX 10417 1024 4096 4096 NT_STATUS_OK
ReadX 10417 320 4096 4096 NT_STATUS_OK
ReadX 10417 580 4096 4096 NT_STATUS_OK
ReadX 10417 3136 512 512 NT_STATUS_OK
ReadX 10417 2880 4096 4096 NT_STATUS_OK
Close 10417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 61440 4096 4096 NT_STATUS_OK
ReadX 10449 126976 4096 4096 NT_STATUS_OK
WriteX 10449 0 65536 65536 NT_STATUS_OK
WriteX 10449 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 61440 4096 4096 NT_STATUS_OK
ReadX 10450 126976 4096 4096 NT_STATUS_OK
ReadX 10450 192512 4096 4096 NT_STATUS_OK
ReadX 10450 258048 4096 4096 NT_STATUS_OK
WriteX 10450 0 65536 65536 NT_STATUS_OK
WriteX 10450 65536 65536 65536 NT_STATUS_OK
WriteX 10450 131072 65536 65536 NT_STATUS_OK
WriteX 10450 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 61440 4096 4096 NT_STATUS_OK
ReadX 10451 126976 4096 4096 NT_STATUS_OK
ReadX 10451 192512 4096 4096 NT_STATUS_OK
ReadX 10451 258048 4096 4096 NT_STATUS_OK
ReadX 10451 323584 4096 4096 NT_STATUS_OK
ReadX 10451 389120 4096 4096 NT_STATUS_OK
ReadX 10451 454656 4096 4096 NT_STATUS_OK
ReadX 10451 520192 4096 4096 NT_STATUS_OK
WriteX 10451 0 65536 65536 NT_STATUS_OK
WriteX 10451 65536 65536 65536 NT_STATUS_OK
WriteX 10451 131072 65536 65536 NT_STATUS_OK
WriteX 10451 196608 65536 65536 NT_STATUS_OK
WriteX 10451 262144 65536 65536 NT_STATUS_OK
WriteX 10451 327680 65536 65536 NT_STATUS_OK
WriteX 10451 393216 65536 65536 NT_STATUS_OK
WriteX 10451 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10453 NT_STATUS_OK
Close 10453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10454 NT_STATUS_OK
WriteX 10454 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10452 0 8192 8192 NT_STATUS_OK
Flush 10452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10452 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10452 0 8192 8192 NT_STATUS_OK
Flush 10452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10452 0 8192 8192 NT_STATUS_OK
Flush 10452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10452 0 8192 8192 NT_STATUS_OK
Flush 10452 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10459 NT_STATUS_OK
WriteX 10459 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 258 NT_STATUS_OK
WriteX 10459 0 62591 62591 NT_STATUS_OK
Close 10459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10461 NT_STATUS_OK
Close 10461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10464 NT_STATUS_OK
WriteX 10464 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10464 258 NT_STATUS_OK
WriteX 10464 0 10845 10845 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 30118 30118 NT_STATUS_OK
Close 10469 NT_STATUS_OK
WriteX 10452 0 4096 4096 NT_STATUS_OK
WriteX 10454 0 64 64 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 61440 61440 NT_STATUS_OK
ReadX 10471 61440 4096 4096 NT_STATUS_OK
ReadX 10471 65536 61440 61440 NT_STATUS_OK
ReadX 10471 126976 4096 4096 NT_STATUS_OK
ReadX 10471 131072 61440 61440 NT_STATUS_OK
ReadX 10471 192512 4096 4096 NT_STATUS_OK
ReadX 10471 196608 61440 61440 NT_STATUS_OK
ReadX 10471 258048 4096 4096 NT_STATUS_OK
ReadX 10471 262144 61440 61440 NT_STATUS_OK
ReadX 10471 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 61440 61440 NT_STATUS_OK
ReadX 10472 61440 4096 4096 NT_STATUS_OK
ReadX 10472 65536 61440 61440 NT_STATUS_OK
ReadX 10472 126976 4096 4096 NT_STATUS_OK
ReadX 10472 131072 61440 61440 NT_STATUS_OK
ReadX 10472 192512 4096 4096 NT_STATUS_OK
ReadX 10472 196608 61440 61440 NT_STATUS_OK
ReadX 10472 258048 4096 4096 NT_STATUS_OK
ReadX 10472 262144 61440 61440 NT_STATUS_OK
ReadX 10472 323584 4096 4096 NT_STATUS_OK
ReadX 10472 327680 61440 61440 NT_STATUS_OK
ReadX 10472 389120 4096 4096 NT_STATUS_OK
ReadX 10472 393216 61440 61440 NT_STATUS_OK
ReadX 10472 454656 4096 4096 NT_STATUS_OK
ReadX 10472 458752 61440 61440 NT_STATUS_OK
ReadX 10472 520192 4096 4096 NT_STATUS_OK
ReadX 10472 524288 61440 61440 NT_STATUS_OK
ReadX 10472 585728 4096 4096 NT_STATUS_OK
ReadX 10472 589824 61440 61440 NT_STATUS_OK
ReadX 10472 651264 4096 4096 NT_STATUS_OK
ReadX 10472 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 61440 61440 NT_STATUS_OK
ReadX 10473 61440 4096 4096 NT_STATUS_OK
ReadX 10473 65536 61440 61440 NT_STATUS_OK
ReadX 10473 126976 4096 4096 NT_STATUS_OK
ReadX 10473 131072 61440 61440 NT_STATUS_OK
ReadX 10473 192512 4096 4096 NT_STATUS_OK
ReadX 10473 196608 61440 61440 NT_STATUS_OK
ReadX 10473 258048 4096 4096 NT_STATUS_OK
ReadX 10473 262144 61440 61440 NT_STATUS_OK
ReadX 10473 323584 4096 4096 NT_STATUS_OK
ReadX 10473 327680 61440 61440 NT_STATUS_OK
ReadX 10473 389120 4096 4096 NT_STATUS_OK
ReadX 10473 393216 61440 61440 NT_STATUS_OK
ReadX 10473 454656 4096 4096 NT_STATUS_OK
ReadX 10473 458752 61440 61440 NT_STATUS_OK
ReadX 10473 520192 4096 4096 NT_STATUS_OK
ReadX 10473 524288 61440 61440 NT_STATUS_OK
ReadX 10473 585728 4096 4096 NT_STATUS_OK
ReadX 10473 589824 61440 61440 NT_STATUS_OK
ReadX 10473 651264 4096 4096 NT_STATUS_OK
ReadX 10473 655360 61440 61440 NT_STATUS_OK
ReadX 10473 716800 4096 4096 NT_STATUS_OK
ReadX 10473 720896 61440 61440 NT_STATUS_OK
ReadX 10473 782336 4096 4096 NT_STATUS_OK
ReadX 10473 786432 61440 61440 NT_STATUS_OK
ReadX 10473 847872 4096 4096 NT_STATUS_OK
ReadX 10473 851968 61440 61440 NT_STATUS_OK
ReadX 10473 913408 4096 4096 NT_STATUS_OK
ReadX 10473 917504 61440 61440 NT_STATUS_OK
ReadX 10473 978944 4096 4096 NT_STATUS_OK
ReadX 10473 983040 61440 61440 NT_STATUS_OK
ReadX 10473 1044480 4096 4096 NT_STATUS_OK
ReadX 10473 1048576 61440 61440 NT_STATUS_OK
ReadX 10473 1110016 4096 4096 NT_STATUS_OK
ReadX 10473 1114112 61440 61440 NT_STATUS_OK
ReadX 10473 1175552 4096 4096 NT_STATUS_OK
ReadX 10473 1179648 61440 61440 NT_STATUS_OK
ReadX 10473 1241088 4096 4096 NT_STATUS_OK
ReadX 10473 1245184 61440 61440 NT_STATUS_OK
ReadX 10473 1306624 4096 4096 NT_STATUS_OK
ReadX 10473 1310720 61440 61440 NT_STATUS_OK
ReadX 10473 1372160 4096 4096 NT_STATUS_OK
ReadX 10473 1376256 61440 61440 NT_STATUS_OK
ReadX 10473 1437696 4096 4096 NT_STATUS_OK
ReadX 10473 1441792 61440 61440 NT_STATUS_OK
ReadX 10473 1503232 4096 4096 NT_STATUS_OK
ReadX 10473 1507328 61440 61440 NT_STATUS_OK
ReadX 10473 1568768 4096 4096 NT_STATUS_OK
ReadX 10473 1572864 61440 61440 NT_STATUS_OK
ReadX 10473 1634304 4096 4096 NT_STATUS_OK
ReadX 10473 1638400 61440 61440 NT_STATUS_OK
ReadX 10473 1699840 4096 4096 NT_STATUS_OK
ReadX 10473 1703936 61440 61440 NT_STATUS_OK
ReadX 10473 1765376 4096 4096 NT_STATUS_OK
ReadX 10473 1769472 61440 61440 NT_STATUS_OK
ReadX 10473 1830912 4096 4096 NT_STATUS_OK
ReadX 10473 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10474 NT_STATUS_OK
Close 10474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10477 NT_STATUS_OK
ReadX 10477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
ReadX 10478 4096 4096 4096 NT_STATUS_OK
ReadX 10478 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10479 NT_STATUS_OK
Close 10479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Close 10477 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10482 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 8192 8192 NT_STATUS_OK
ReadX 10486 8192 8192 8192 NT_STATUS_OK
ReadX 10486 16384 8192 8192 NT_STATUS_OK
ReadX 10486 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10491 NT_STATUS_OK
WriteX 10491 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10491 258 NT_STATUS_OK
WriteX 10491 0 10438 10438 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10492 NT_STATUS_OK
Close 10492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10494 NT_STATUS_OK
Close 10494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10496 NT_STATUS_OK
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10497 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10499 NT_STATUS_OK
Close 10499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10500 NT_STATUS_OK
ReadX 10500 0 4096 4096 NT_STATUS_OK
ReadX 10500 4096 4096 4096 NT_STATUS_OK
ReadX 10500 8192 4096 4096 NT_STATUS_OK
ReadX 10500 12288 8192 8192 NT_STATUS_OK
ReadX 10500 20480 8192 8192 NT_STATUS_OK
ReadX 10500 28672 8192 8192 NT_STATUS_OK
ReadX 10500 36864 8192 8192 NT_STATUS_OK
ReadX 10500 45056 8192 8192 NT_STATUS_OK
ReadX 10500 53248 8192 8192 NT_STATUS_OK
ReadX 10500 61440 8192 8192 NT_STATUS_OK
ReadX 10500 69632 8192 8192 NT_STATUS_OK
ReadX 10500 77824 8192 8192 NT_STATUS_OK
ReadX 10500 86016 8192 8192 NT_STATUS_OK
ReadX 10500 94208 8192 8192 NT_STATUS_OK
ReadX 10500 102400 8192 8192 NT_STATUS_OK
ReadX 10500 110592 8192 8192 NT_STATUS_OK
ReadX 10500 118784 8192 8192 NT_STATUS_OK
ReadX 10500 126976 8192 8192 NT_STATUS_OK
ReadX 10500 135168 8192 8192 NT_STATUS_OK
ReadX 10500 143360 8192 8192 NT_STATUS_OK
ReadX 10500 151552 8192 8192 NT_STATUS_OK
ReadX 10500 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10500 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10502 NT_STATUS_OK
Close 10502 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10505 NT_STATUS_OK
WriteX 10505 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10505 258 NT_STATUS_OK
WriteX 10505 0 28489 28489 NT_STATUS_OK
Close 10505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10508 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10512 NT_STATUS_OK
ReadX 10512 0 8192 8192 NT_STATUS_OK
ReadX 10512 8192 8192 8192 NT_STATUS_OK
ReadX 10512 16384 8192 8192 NT_STATUS_OK
ReadX 10512 24576 8192 8192 NT_STATUS_OK
ReadX 10512 32768 16384 16384 NT_STATUS_OK
ReadX 10512 49152 8192 8192 NT_STATUS_OK
ReadX 10512 57344 8192 8192 NT_STATUS_OK
ReadX 10512 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10514 NT_STATUS_OK
Close 10514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Close 10511 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10517 NT_STATUS_OK
WriteX 10517 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10517 258 NT_STATUS_OK
WriteX 10517 0 29253 29253 NT_STATUS_OK
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10521 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10524 NT_STATUS_OK
WriteX 10524 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10524 258 NT_STATUS_OK
WriteX 10524 0 30183 30183 NT_STATUS_OK
Close 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10525 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10527 NT_STATUS_OK
WriteX 10527 0 510 510 NT_STATUS_OK
WriteX 10527 510 512 512 NT_STATUS_OK
WriteX 10527 1022 510 510 NT_STATUS_OK
WriteX 10527 1532 510 510 NT_STATUS_OK
WriteX 10527 2042 168 168 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
WriteX 10530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 61440 4096 4096 NT_STATUS_OK
ReadX 10531 126976 4096 4096 NT_STATUS_OK
WriteX 10531 0 65536 65536 NT_STATUS_OK
WriteX 10531 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 61440 4096 4096 NT_STATUS_OK
ReadX 10532 126976 4096 4096 NT_STATUS_OK
ReadX 10532 192512 4096 4096 NT_STATUS_OK
ReadX 10532 258048 4096 4096 NT_STATUS_OK
WriteX 10532 0 65536 65536 NT_STATUS_OK
WriteX 10532 65536 65536 65536 NT_STATUS_OK
WriteX 10532 131072 65536 65536 NT_STATUS_OK
WriteX 10532 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 61440 4096 4096 NT_STATUS_OK
ReadX 10533 126976 4096 4096 NT_STATUS_OK
ReadX 10533 192512 4096 4096 NT_STATUS_OK
ReadX 10533 258048 4096 4096 NT_STATUS_OK
ReadX 10533 323584 4096 4096 NT_STATUS_OK
ReadX 10533 389120 4096 4096 NT_STATUS_OK
ReadX 10533 454656 4096 4096 NT_STATUS_OK
ReadX 10533 520192 4096 4096 NT_STATUS_OK
WriteX 10533 0 65536 65536 NT_STATUS_OK
WriteX 10533 65536 65536 65536 NT_STATUS_OK
WriteX 10533 131072 65536 65536 NT_STATUS_OK
WriteX 10533 196608 65536 65536 NT_STATUS_OK
WriteX 10533 262144 65536 65536 NT_STATUS_OK
WriteX 10533 327680 65536 65536 NT_STATUS_OK
WriteX 10533 393216 65536 65536 NT_STATUS_OK
WriteX 10533 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10530 NT_STATUS_OK
Close 10531 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Close 10533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10536 NT_STATUS_OK
Close 10536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10540 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10545 NT_STATUS_OK
Close 10545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10549 NT_STATUS_OK
Close 10549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10558 NT_STATUS_OK
Close 10558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10599 NT_STATUS_OK
Close 10599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10602 NT_STATUS_OK
WriteX 10602 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10602 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10602 0 65536 65536 NT_STATUS_OK
WriteX 10602 65536 65536 65536 NT_STATUS_OK
WriteX 10602 131072 65536 65536 NT_STATUS_OK
WriteX 10602 196608 65536 65536 NT_STATUS_OK
WriteX 10602 262144 26634 26634 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10607 NT_STATUS_OK
Close 10607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10608 NT_STATUS_OK
Close 10608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10609 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
Close 10609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 4096 4096 NT_STATUS_OK
ReadX 10610 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10610 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10618 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10629 NT_STATUS_OK
Close 10629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10633 NT_STATUS_OK
Close 10633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10638 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10648 NT_STATUS_OK
Close 10648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10653 NT_STATUS_OK
Close 10653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10662 NT_STATUS_OK
Close 10662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10667 NT_STATUS_OK
Close 10667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10672 NT_STATUS_OK
Close 10672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10677 NT_STATUS_OK
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10687 NT_STATUS_OK
Close 10687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10688 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
Close 10689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
Close 10690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
Close 10703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10705 NT_STATUS_OK
ReadX 10705 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Close 10705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10734 0 4096 4096 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
ReadX 10736 4096 4096 4096 NT_STATUS_OK
ReadX 10736 8192 4096 4096 NT_STATUS_OK
ReadX 10736 12288 4096 4096 NT_STATUS_OK
ReadX 10736 16384 4096 4096 NT_STATUS_OK
ReadX 10736 20480 4096 4096 NT_STATUS_OK
ReadX 10736 24576 4096 4096 NT_STATUS_OK
ReadX 10736 28672 4096 4096 NT_STATUS_OK
ReadX 10736 32768 4096 4096 NT_STATUS_OK
ReadX 10736 36864 4096 4096 NT_STATUS_OK
ReadX 10736 40960 4096 4096 NT_STATUS_OK
ReadX 10736 45056 4096 4096 NT_STATUS_OK
ReadX 10736 49152 4096 4096 NT_STATUS_OK
ReadX 10736 53248 4096 4096 NT_STATUS_OK
ReadX 10736 57344 4096 4096 NT_STATUS_OK
ReadX 10736 61440 4096 4096 NT_STATUS_OK
ReadX 10736 65536 4096 4096 NT_STATUS_OK
ReadX 10736 69632 4096 4096 NT_STATUS_OK
ReadX 10736 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10736 1004 NT_STATUS_OK
WriteX 10736 0 4096 4096 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10737 NT_STATUS_OK
SET_FILE_INFORMATION 10737 1004 NT_STATUS_OK
Close 10737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10738 NT_STATUS_OK
ReadX 10738 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10742 NT_STATUS_OK
WriteX 10742 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10742 258 NT_STATUS_OK
WriteX 10742 0 65536 65536 NT_STATUS_OK
WriteX 10742 65536 19979 19979 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
Close 10743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
Close 10744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
Close 10746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10748 1004 NT_STATUS_OK
WriteX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10754 NT_STATUS_OK
WriteX 10754 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 258 NT_STATUS_OK
WriteX 10754 0 65536 65536 NT_STATUS_OK
WriteX 10754 65536 17654 17654 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 4096 4096 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
QUERY_FILE_INFORMATION 10755 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
SET_FILE_INFORMATION 10755 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
Close 10755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10756 NT_STATUS_OK
SET_FILE_INFORMATION 10756 1004 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
ReadX 10760 4096 4096 4096 NT_STATUS_OK
ReadX 10760 8192 4096 4096 NT_STATUS_OK
ReadX 10760 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10760 16384 4096 4096 NT_STATUS_OK
ReadX 10760 20480 4096 4096 NT_STATUS_OK
ReadX 10760 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10761 NT_STATUS_OK
ReadX 10761 0 4096 4096 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10762 NT_STATUS_OK
ReadX 10762 0 4096 4096 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10763 NT_STATUS_OK
ReadX 10763 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10763 1004 NT_STATUS_OK
WriteX 10763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10769 NT_STATUS_OK
WriteX 10769 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
WriteX 10769 0 65536 65536 NT_STATUS_OK
WriteX 10769 65536 19490 19490 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
WriteX 10770 0 4096 4096 NT_STATUS_OK
Flush 10770 NT_STATUS_OK
WriteX 10770 0 4096 4096 NT_STATUS_OK
Flush 10770 NT_STATUS_OK
QUERY_FILE_INFORMATION 10770 1004 NT_STATUS_OK
WriteX 10770 0 4096 4096 NT_STATUS_OK
Flush 10770 NT_STATUS_OK
WriteX 10770 0 4096 4096 NT_STATUS_OK
Flush 10770 NT_STATUS_OK
WriteX 10770 0 4096 4096 NT_STATUS_OK
Flush 10770 NT_STATUS_OK
SET_FILE_INFORMATION 10770 1004 NT_STATUS_OK
WriteX 10770 0 4096 4096 NT_STATUS_OK
Flush 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10771 NT_STATUS_OK
SET_FILE_INFORMATION 10771 1004 NT_STATUS_OK
Close 10771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10772 NT_STATUS_OK
ReadX 10772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10773 NT_STATUS_OK
Close 10773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10775 0 4096 4096 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
ReadX 10777 4096 4096 4096 NT_STATUS_OK
ReadX 10777 8192 4096 4096 NT_STATUS_OK
ReadX 10777 12288 4096 4096 NT_STATUS_OK
ReadX 10777 16384 4096 4096 NT_STATUS_OK
ReadX 10777 20480 4096 4096 NT_STATUS_OK
ReadX 10777 24576 4096 4096 NT_STATUS_OK
ReadX 10777 28672 4096 4096 NT_STATUS_OK
ReadX 10777 32768 4096 4096 NT_STATUS_OK
ReadX 10777 36864 4096 4096 NT_STATUS_OK
ReadX 10777 40960 4096 4096 NT_STATUS_OK
ReadX 10777 45056 4096 4096 NT_STATUS_OK
ReadX 10777 49152 4096 4096 NT_STATUS_OK
ReadX 10777 53248 4096 4096 NT_STATUS_OK
ReadX 10777 57344 4096 4096 NT_STATUS_OK
ReadX 10777 61440 4096 4096 NT_STATUS_OK
ReadX 10777 65536 4096 4096 NT_STATUS_OK
ReadX 10777 69632 4096 4096 NT_STATUS_OK
ReadX 10777 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10777 1004 NT_STATUS_OK
WriteX 10777 0 4096 4096 NT_STATUS_OK
Close 10777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10778 NT_STATUS_OK
SET_FILE_INFORMATION 10778 1004 NT_STATUS_OK
Close 10778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10783 NT_STATUS_OK
WriteX 10783 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10783 258 NT_STATUS_OK
WriteX 10783 0 65536 65536 NT_STATUS_OK
WriteX 10783 65536 8866 8866 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10784 NT_STATUS_OK
ReadX 10784 0 4096 4096 NT_STATUS_OK
WriteX 10784 0 4096 4096 NT_STATUS_OK
Flush 10784 NT_STATUS_OK
SET_FILE_INFORMATION 10784 1004 NT_STATUS_OK
WriteX 10784 0 4096 4096 NT_STATUS_OK
Flush 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10789 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10791 NT_STATUS_OK
Close 10791 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10794 NT_STATUS_OK
WriteX 10794 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10794 258 NT_STATUS_OK
WriteX 10794 0 65536 65536 NT_STATUS_OK
WriteX 10794 65536 9298 9298 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
Flush 10795 NT_STATUS_OK
SET_FILE_INFORMATION 10795 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
Flush 10795 NT_STATUS_OK
Close 10795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10796 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
Close 10796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10801 0 4096 4096 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10802 4096 4096 4096 NT_STATUS_OK
ReadX 10802 8192 4096 4096 NT_STATUS_OK
ReadX 10802 12288 4096 4096 NT_STATUS_OK
ReadX 10802 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
Close 10804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10805 1004 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10806 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10811 NT_STATUS_OK
WriteX 10811 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 258 NT_STATUS_OK
WriteX 10811 0 65536 65536 NT_STATUS_OK
WriteX 10811 65536 11540 11540 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
Flush 10812 NT_STATUS_OK
SET_FILE_INFORMATION 10812 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
Flush 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10813 NT_STATUS_OK
SET_FILE_INFORMATION 10813 1004 NT_STATUS_OK
Close 10813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10815 NT_STATUS_OK
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 61440 4096 4096 NT_STATUS_OK
ReadX 10817 126976 4096 4096 NT_STATUS_OK
WriteX 10817 0 65536 65536 NT_STATUS_OK
WriteX 10817 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 61440 4096 4096 NT_STATUS_OK
ReadX 10818 126976 4096 4096 NT_STATUS_OK
ReadX 10818 192512 4096 4096 NT_STATUS_OK
ReadX 10818 258048 4096 4096 NT_STATUS_OK
WriteX 10818 0 65536 65536 NT_STATUS_OK
WriteX 10818 65536 65536 65536 NT_STATUS_OK
WriteX 10818 131072 65536 65536 NT_STATUS_OK
WriteX 10818 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10819 NT_STATUS_OK
ReadX 10819 61440 4096 4096 NT_STATUS_OK
ReadX 10819 126976 4096 4096 NT_STATUS_OK
ReadX 10819 192512 4096 4096 NT_STATUS_OK
ReadX 10819 258048 4096 4096 NT_STATUS_OK
ReadX 10819 323584 4096 4096 NT_STATUS_OK
ReadX 10819 389120 4096 4096 NT_STATUS_OK
ReadX 10819 454656 4096 4096 NT_STATUS_OK
ReadX 10819 520192 4096 4096 NT_STATUS_OK
WriteX 10819 0 65536 65536 NT_STATUS_OK
WriteX 10819 65536 65536 65536 NT_STATUS_OK
WriteX 10819 131072 65536 65536 NT_STATUS_OK
WriteX 10819 196608 65536 65536 NT_STATUS_OK
WriteX 10819 262144 65536 65536 NT_STATUS_OK
WriteX 10819 327680 65536 65536 NT_STATUS_OK
WriteX 10819 393216 65536 65536 NT_STATUS_OK
WriteX 10819 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
ReadX 10820 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10821 NT_STATUS_OK
WriteX 10821 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10821 258 NT_STATUS_OK
WriteX 10821 0 53 53 NT_STATUS_OK
Close 10821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Close 10817 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10820 8192 4096 4096 NT_STATUS_OK
ReadX 10820 12288 4096 4096 NT_STATUS_OK
WriteX 10824 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10824 258 NT_STATUS_OK
ReadX 10820 16384 4096 4096 NT_STATUS_OK
ReadX 10820 20480 4096 4096 NT_STATUS_OK
WriteX 10824 0 15360 15360 NT_STATUS_OK
Close 10824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
WriteX 10825 0 4096 4096 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10826 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10828 4096 4096 4096 NT_STATUS_OK
ReadX 10828 8192 4096 4096 NT_STATUS_OK
ReadX 10828 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
ReadX 10831 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
ReadX 10832 4096 4096 4096 NT_STATUS_OK
ReadX 10832 8192 4096 4096 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10833 NT_STATUS_OK
WriteX 10833 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10833 258 NT_STATUS_OK
WriteX 10833 0 15360 15360 NT_STATUS_OK
Close 10833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10834 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10834 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10838 NT_STATUS_OK
SET_FILE_INFORMATION 10838 1004 NT_STATUS_OK
Close 10838 NT_STATUS_OK
WriteX 10834 0 4096 4096 NT_STATUS_OK
Close 10834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10839 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
ReadX 10841 4096 4096 4096 NT_STATUS_OK
ReadX 10841 8192 4096 4096 NT_STATUS_OK
ReadX 10841 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10841 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10843 NT_STATUS_OK
WriteX 10843 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 53 53 NT_STATUS_OK
Close 10843 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10842 4096 4096 4096 NT_STATUS_OK
ReadX 10842 8192 4096 4096 NT_STATUS_OK
ReadX 10842 12288 4096 4096 NT_STATUS_OK
WriteX 10846 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10846 258 NT_STATUS_OK
WriteX 10846 0 12006 12006 NT_STATUS_OK
Close 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10847 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10847 1004 NT_STATUS_OK
WriteX 10847 0 4096 4096 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10848 NT_STATUS_OK
Close 10848 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10850 4096 4096 4096 NT_STATUS_OK
ReadX 10850 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10853 NT_STATUS_OK
WriteX 10853 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 258 NT_STATUS_OK
WriteX 10853 0 11991 11991 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10854 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10854 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10858 NT_STATUS_OK
SET_FILE_INFORMATION 10858 1004 NT_STATUS_OK
Close 10858 NT_STATUS_OK
WriteX 10854 0 4096 4096 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10859 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10861 NT_STATUS_OK
ReadX 10861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10861 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10861 1004 NT_STATUS_OK
ReadX 10861 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10861 1004 NT_STATUS_OK
WriteX 10861 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10861 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10861 1004 NT_STATUS_OK
Close 10837 NT_STATUS_OK
WriteX 10841 0 19054 19054 NT_STATUS_OK
WriteX 10861 0 12288 12288 NT_STATUS_OK
Close 10857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10864 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Close 10861 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 61440 61440 NT_STATUS_OK
ReadX 10868 61440 4096 4096 NT_STATUS_OK
ReadX 10868 65536 61440 61440 NT_STATUS_OK
ReadX 10868 126976 4096 4096 NT_STATUS_OK
ReadX 10868 131072 61440 61440 NT_STATUS_OK
ReadX 10868 192512 4096 4096 NT_STATUS_OK
ReadX 10868 196608 61440 61440 NT_STATUS_OK
ReadX 10868 258048 4096 4096 NT_STATUS_OK
ReadX 10868 262144 61440 61440 NT_STATUS_OK
ReadX 10868 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 0 61440 61440 NT_STATUS_OK
ReadX 10869 61440 4096 4096 NT_STATUS_OK
ReadX 10869 65536 61440 61440 NT_STATUS_OK
ReadX 10869 126976 4096 4096 NT_STATUS_OK
ReadX 10869 131072 61440 61440 NT_STATUS_OK
ReadX 10869 192512 4096 4096 NT_STATUS_OK
ReadX 10869 196608 61440 61440 NT_STATUS_OK
ReadX 10869 258048 4096 4096 NT_STATUS_OK
ReadX 10869 262144 61440 61440 NT_STATUS_OK
ReadX 10869 323584 4096 4096 NT_STATUS_OK
ReadX 10869 327680 61440 61440 NT_STATUS_OK
ReadX 10869 389120 4096 4096 NT_STATUS_OK
ReadX 10869 393216 61440 61440 NT_STATUS_OK
ReadX 10869 454656 4096 4096 NT_STATUS_OK
ReadX 10869 458752 61440 61440 NT_STATUS_OK
ReadX 10869 520192 4096 4096 NT_STATUS_OK
ReadX 10869 524288 61440 61440 NT_STATUS_OK
ReadX 10869 585728 4096 4096 NT_STATUS_OK
ReadX 10869 589824 61440 61440 NT_STATUS_OK
ReadX 10869 651264 4096 4096 NT_STATUS_OK
ReadX 10869 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10870 NT_STATUS_OK
ReadX 10870 0 61440 61440 NT_STATUS_OK
ReadX 10870 61440 4096 4096 NT_STATUS_OK
ReadX 10870 65536 61440 61440 NT_STATUS_OK
ReadX 10870 126976 4096 4096 NT_STATUS_OK
ReadX 10870 131072 61440 61440 NT_STATUS_OK
ReadX 10870 192512 4096 4096 NT_STATUS_OK
ReadX 10870 196608 61440 61440 NT_STATUS_OK
ReadX 10870 258048 4096 4096 NT_STATUS_OK
ReadX 10870 262144 61440 61440 NT_STATUS_OK
ReadX 10870 323584 4096 4096 NT_STATUS_OK
ReadX 10870 327680 61440 61440 NT_STATUS_OK
ReadX 10870 389120 4096 4096 NT_STATUS_OK
ReadX 10870 393216 61440 61440 NT_STATUS_OK
ReadX 10870 454656 4096 4096 NT_STATUS_OK
ReadX 10870 458752 61440 61440 NT_STATUS_OK
ReadX 10870 520192 4096 4096 NT_STATUS_OK
ReadX 10870 524288 61440 61440 NT_STATUS_OK
ReadX 10870 585728 4096 4096 NT_STATUS_OK
ReadX 10870 589824 61440 61440 NT_STATUS_OK
ReadX 10870 651264 4096 4096 NT_STATUS_OK
ReadX 10870 655360 61440 61440 NT_STATUS_OK
ReadX 10870 716800 4096 4096 NT_STATUS_OK
ReadX 10870 720896 61440 61440 NT_STATUS_OK
ReadX 10870 782336 4096 4096 NT_STATUS_OK
ReadX 10870 786432 61440 61440 NT_STATUS_OK
ReadX 10870 847872 4096 4096 NT_STATUS_OK
ReadX 10870 851968 61440 61440 NT_STATUS_OK
ReadX 10870 913408 4096 4096 NT_STATUS_OK
ReadX 10870 917504 61440 61440 NT_STATUS_OK
ReadX 10870 978944 4096 4096 NT_STATUS_OK
ReadX 10870 983040 61440 61440 NT_STATUS_OK
ReadX 10870 1044480 4096 4096 NT_STATUS_OK
ReadX 10870 1048576 61440 61440 NT_STATUS_OK
ReadX 10870 1110016 4096 4096 NT_STATUS_OK
ReadX 10870 1114112 61440 61440 NT_STATUS_OK
ReadX 10870 1175552 4096 4096 NT_STATUS_OK
ReadX 10870 1179648 61440 61440 NT_STATUS_OK
ReadX 10870 1241088 4096 4096 NT_STATUS_OK
ReadX 10870 1245184 61440 61440 NT_STATUS_OK
ReadX 10870 1306624 4096 4096 NT_STATUS_OK
ReadX 10870 1310720 61440 61440 NT_STATUS_OK
ReadX 10870 1372160 4096 4096 NT_STATUS_OK
ReadX 10870 1376256 61440 61440 NT_STATUS_OK
ReadX 10870 1437696 4096 4096 NT_STATUS_OK
ReadX 10870 1441792 61440 61440 NT_STATUS_OK
ReadX 10870 1503232 4096 4096 NT_STATUS_OK
ReadX 10870 1507328 61440 61440 NT_STATUS_OK
ReadX 10870 1568768 4096 4096 NT_STATUS_OK
ReadX 10870 1572864 61440 61440 NT_STATUS_OK
ReadX 10870 1634304 4096 4096 NT_STATUS_OK
ReadX 10870 1638400 61440 61440 NT_STATUS_OK
ReadX 10870 1699840 4096 4096 NT_STATUS_OK
ReadX 10870 1703936 61440 61440 NT_STATUS_OK
ReadX 10870 1765376 4096 4096 NT_STATUS_OK
ReadX 10870 1769472 61440 61440 NT_STATUS_OK
ReadX 10870 1830912 4096 4096 NT_STATUS_OK
ReadX 10870 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10877 NT_STATUS_OK
QUERY_FILE_INFORMATION 10877 1004 NT_STATUS_OK
WriteX 10877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10877 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10879 NT_STATUS_OK
WriteX 10879 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 491 491 NT_STATUS_OK
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10877 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10882 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10883 NT_STATUS_OK
WriteX 10883 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10883 258 NT_STATUS_OK
WriteX 10883 0 543 543 NT_STATUS_OK
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10869 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10897 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 258 NT_STATUS_OK
WriteX 10897 0 2048 2048 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10903 NT_STATUS_OK
WriteX 10903 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10903 258 NT_STATUS_OK
WriteX 10903 0 2048 2048 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10908 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10909 NT_STATUS_OK
WriteX 10909 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
WriteX 10909 0 2048 2048 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 2048 2048 NT_STATUS_OK
ReadX 10888 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10904 0 4096 4096 NT_STATUS_OK
WriteX 10888 0 8192 8192 NT_STATUS_OK
WriteX 10889 0 4096 4096 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10914 NT_STATUS_OK
QUERY_FILE_INFORMATION 10914 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10934 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 1004 NT_STATUS_OK
WriteX 10934 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 258 NT_STATUS_OK
WriteX 10934 0 2048 2048 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10936 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10942 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1004 NT_STATUS_OK
WriteX 10942 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 258 NT_STATUS_OK
WriteX 10942 0 2048 2048 NT_STATUS_OK
Close 10942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10935 0 4096 4096 NT_STATUS_OK
Flush 10935 NT_STATUS_OK
WriteX 10943 0 4096 4096 NT_STATUS_OK
Flush 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10935 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10943 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10937 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10945 NT_STATUS_OK
WriteX 10945 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10945 258 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10948 NT_STATUS_OK
WriteX 10948 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 258 NT_STATUS_OK
WriteX 10948 0 4096 4096 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10949 0 4096 4096 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10917 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10955 NT_STATUS_OK
Close 10955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10956 NT_STATUS_OK
WriteX 10956 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 258 NT_STATUS_OK
WriteX 10956 0 2048 2048 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10959 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10966 NT_STATUS_OK
ReadX 10966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10967 NT_STATUS_OK
ReadX 10967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10968 NT_STATUS_OK
ReadX 10968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10971 NT_STATUS_OK
QUERY_FILE_INFORMATION 10971 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10957 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10966 NT_STATUS_OK
Close 10967 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Close 10958 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10973 NT_STATUS_OK
QUERY_FILE_INFORMATION 10973 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10982 NT_STATUS_OK
ReadX 10982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10983 NT_STATUS_OK
ReadX 10983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10984 NT_STATUS_OK
ReadX 10984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10993 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 1004 NT_STATUS_OK
WriteX 10993 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 258 NT_STATUS_OK
WriteX 10993 0 2048 2048 NT_STATUS_OK
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10996 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 258 NT_STATUS_OK
WriteX 11005 0 2048 2048 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11013 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 1004 NT_STATUS_OK
WriteX 11013 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 2048 2048 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
Flush 10994 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
Flush 11006 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Flush 11014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10996 4096 16384 16384 NT_STATUS_OK
ReadX 10976 4096 16384 16384 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 2048 2048 NT_STATUS_OK
WriteX 11016 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11017 NT_STATUS_OK
QUERY_FILE_INFORMATION 11017 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 10982 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Close 10977 NT_STATUS_OK
Close 10978 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11019 NT_STATUS_OK
QUERY_FILE_INFORMATION 11019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11021 NT_STATUS_OK
QUERY_FILE_INFORMATION 11021 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11024 4096 16384 16384 NT_STATUS_OK
WriteX 11024 0 4096 4096 NT_STATUS_OK
WriteX 11025 0 4096 4096 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
WriteX 11027 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11037 NT_STATUS_OK
ReadX 11037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11039 NT_STATUS_OK
ReadX 11039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11040 NT_STATUS_OK
ReadX 11040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11041 NT_STATUS_OK
ReadX 11041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 0 8192 8192 NT_STATUS_OK
ReadX 11030 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11044 0 4096 4096 NT_STATUS_OK
ReadX 11044 4096 4096 4096 NT_STATUS_OK
ReadX 11044 8192 4096 4096 NT_STATUS_OK
WriteX 11030 0 4096 4096 NT_STATUS_OK
WriteX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
ReadX 11045 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11024 0 4096 4096 NT_STATUS_OK
WriteX 11025 0 4096 4096 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
WriteX 11027 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11049 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11050 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 1004 NT_STATUS_OK
WriteX 11050 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 258 NT_STATUS_OK
WriteX 11050 0 2048 2048 NT_STATUS_OK
Close 11050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
ReadX 11053 4096 4096 4096 NT_STATUS_OK
WriteX 11053 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
ReadX 11055 4096 4096 4096 NT_STATUS_OK
WriteX 11055 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11056 NT_STATUS_OK
QUERY_FILE_INFORMATION 11056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Close 11041 NT_STATUS_OK
Close 11037 NT_STATUS_OK
Close 11038 NT_STATUS_OK
Close 11039 NT_STATUS_OK
Close 11040 NT_STATUS_OK
Close 11042 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11058 0 4096 4096 NT_STATUS_OK
ReadX 11058 4096 4096 4096 NT_STATUS_OK
ReadX 11058 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
ReadX 11059 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11076 NT_STATUS_OK
QUERY_FILE_INFORMATION 11076 1004 NT_STATUS_OK
WriteX 11076 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11076 258 NT_STATUS_OK
WriteX 11076 0 2048 2048 NT_STATUS_OK
Close 11076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11082 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 1004 NT_STATUS_OK
WriteX 11082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 2048 2048 NT_STATUS_OK
Close 11082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11066 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11084 NT_STATUS_OK
QUERY_FILE_INFORMATION 11084 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11061 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11067 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11086 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11088 NT_STATUS_OK
ReadX 11088 61440 4096 4096 NT_STATUS_OK
ReadX 11088 126976 4096 4096 NT_STATUS_OK
WriteX 11088 0 65536 65536 NT_STATUS_OK
WriteX 11088 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11089 NT_STATUS_OK
ReadX 11089 61440 4096 4096 NT_STATUS_OK
ReadX 11089 126976 4096 4096 NT_STATUS_OK
ReadX 11089 192512 4096 4096 NT_STATUS_OK
ReadX 11089 258048 4096 4096 NT_STATUS_OK
WriteX 11089 0 65536 65536 NT_STATUS_OK
WriteX 11089 65536 65536 65536 NT_STATUS_OK
WriteX 11089 131072 65536 65536 NT_STATUS_OK
WriteX 11089 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 61440 4096 4096 NT_STATUS_OK
ReadX 11090 126976 4096 4096 NT_STATUS_OK
ReadX 11090 192512 4096 4096 NT_STATUS_OK
ReadX 11090 258048 4096 4096 NT_STATUS_OK
ReadX 11090 323584 4096 4096 NT_STATUS_OK
ReadX 11090 389120 4096 4096 NT_STATUS_OK
ReadX 11090 454656 4096 4096 NT_STATUS_OK
ReadX 11090 520192 4096 4096 NT_STATUS_OK
WriteX 11090 0 65536 65536 NT_STATUS_OK
WriteX 11090 65536 65536 65536 NT_STATUS_OK
WriteX 11090 131072 65536 65536 NT_STATUS_OK
WriteX 11090 196608 65536 65536 NT_STATUS_OK
WriteX 11090 262144 65536 65536 NT_STATUS_OK
WriteX 11090 327680 65536 65536 NT_STATUS_OK
WriteX 11090 393216 65536 65536 NT_STATUS_OK
WriteX 11090 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11091 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11091 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11091 8192 4096 4096 NT_STATUS_OK
ReadX 11091 12288 4096 4096 NT_STATUS_OK
ReadX 11091 16384 4096 4096 NT_STATUS_OK
ReadX 11091 20480 4096 4096 NT_STATUS_OK
ReadX 11091 24576 4096 4096 NT_STATUS_OK
ReadX 11091 28672 4096 4096 NT_STATUS_OK
ReadX 11091 32768 4096 4096 NT_STATUS_OK
ReadX 11091 36864 4096 4096 NT_STATUS_OK
ReadX 11091 40960 4096 4096 NT_STATUS_OK
ReadX 11091 45056 4096 4096 NT_STATUS_OK
ReadX 11091 49152 4096 4096 NT_STATUS_OK
ReadX 11091 53248 4096 4096 NT_STATUS_OK
ReadX 11091 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11091 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11092 NT_STATUS_OK
Close 11092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11088 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11094 NT_STATUS_OK
WriteX 11094 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11094 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11094 1004 NT_STATUS_OK
WriteX 11094 0 57088 57088 NT_STATUS_OK
WriteX 11094 0 4096 4096 NT_STATUS_OK
Flush 11094 NT_STATUS_OK
Close 11091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11095 NT_STATUS_OK
SET_FILE_INFORMATION 11095 1004 NT_STATUS_OK
Close 11095 NT_STATUS_OK
SET_FILE_INFORMATION 11094 1004 NT_STATUS_OK
WriteX 11094 0 4096 4096 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11096 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11098 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11099 NT_STATUS_OK
WriteX 11099 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11099 1004 NT_STATUS_OK
WriteX 11099 0 51456 51456 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
SET_FILE_INFORMATION 11099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11099 1004 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11101 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11103 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11105 NT_STATUS_OK
Close 11105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11108 NT_STATUS_OK
WriteX 11108 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 258 NT_STATUS_OK
WriteX 11108 0 53077 53077 NT_STATUS_OK
Close 11108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11109 NT_STATUS_OK
WriteX 11109 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11109 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11109 1004 NT_STATUS_OK
WriteX 11109 0 65536 65536 NT_STATUS_OK
WriteX 11109 65536 1856 1856 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
Flush 11109 NT_STATUS_OK
SET_FILE_INFORMATION 11109 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11109 1004 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Close 11103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11115 NT_STATUS_OK
Close 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11118 NT_STATUS_OK
WriteX 11118 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 258 NT_STATUS_OK
WriteX 11118 0 7983 7983 NT_STATUS_OK
Close 11118 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11123 NT_STATUS_OK
WriteX 11123 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11123 258 NT_STATUS_OK
WriteX 11123 0 65536 65536 NT_STATUS_OK
WriteX 11123 65536 65536 65536 NT_STATUS_OK
WriteX 11123 131072 65536 65536 NT_STATUS_OK
WriteX 11123 196608 65536 65536 NT_STATUS_OK
WriteX 11123 262144 65536 65536 NT_STATUS_OK
WriteX 11123 327680 65536 65536 NT_STATUS_OK
WriteX 11123 393216 65536 65536 NT_STATUS_OK
WriteX 11123 458752 46731 46731 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11124 NT_STATUS_OK
WriteX 11124 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11113 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11124 1004 NT_STATUS_OK
WriteX 11124 0 65536 65536 NT_STATUS_OK
WriteX 11124 65536 22848 22848 NT_STATUS_OK
WriteX 11124 0 4096 4096 NT_STATUS_OK
Flush 11124 NT_STATUS_OK
SET_FILE_INFORMATION 11124 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11124 1004 NT_STATUS_OK
WriteX 11124 0 4096 4096 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11126 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11128 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11129 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11129 1004 NT_STATUS_OK
ReadX 11129 8192 4096 4096 NT_STATUS_OK
ReadX 11129 12288 4096 4096 NT_STATUS_OK
ReadX 11129 16384 4096 4096 NT_STATUS_OK
ReadX 11129 20480 4096 4096 NT_STATUS_OK
ReadX 11129 24576 4096 4096 NT_STATUS_OK
ReadX 11129 28672 4096 4096 NT_STATUS_OK
ReadX 11129 32768 4096 4096 NT_STATUS_OK
ReadX 11129 36864 4096 4096 NT_STATUS_OK
ReadX 11129 40960 4096 4096 NT_STATUS_OK
ReadX 11129 45056 4096 4096 NT_STATUS_OK
ReadX 11129 49152 4096 4096 NT_STATUS_OK
ReadX 11129 53248 4096 4096 NT_STATUS_OK
ReadX 11129 57344 4096 4096 NT_STATUS_OK
ReadX 11129 61440 4096 4096 NT_STATUS_OK
ReadX 11129 65536 4096 4096 NT_STATUS_OK
ReadX 11129 69632 4096 4096 NT_STATUS_OK
ReadX 11129 73728 4096 4096 NT_STATUS_OK
ReadX 11129 77824 4096 4096 NT_STATUS_OK
ReadX 11129 81920 4096 4096 NT_STATUS_OK
ReadX 11129 86016 4096 4096 NT_STATUS_OK
ReadX 11129 90112 4096 4096 NT_STATUS_OK
ReadX 11129 94208 4096 4096 NT_STATUS_OK
ReadX 11129 98304 4096 4096 NT_STATUS_OK
ReadX 11129 102400 4096 4096 NT_STATUS_OK
ReadX 11129 106496 4096 4096 NT_STATUS_OK
ReadX 11129 110592 4096 4096 NT_STATUS_OK
ReadX 11129 114688 4096 4096 NT_STATUS_OK
ReadX 11129 118784 4096 4096 NT_STATUS_OK
ReadX 11129 122880 4096 4096 NT_STATUS_OK
ReadX 11129 126976 4096 4096 NT_STATUS_OK
ReadX 11129 131072 4096 4096 NT_STATUS_OK
ReadX 11129 135168 4096 4096 NT_STATUS_OK
ReadX 11129 139264 4096 4096 NT_STATUS_OK
ReadX 11129 143360 4096 4096 NT_STATUS_OK
ReadX 11129 147456 4096 4096 NT_STATUS_OK
ReadX 11129 151552 4096 4096 NT_STATUS_OK
ReadX 11129 155648 4096 4096 NT_STATUS_OK
ReadX 11129 159744 4096 4096 NT_STATUS_OK
ReadX 11129 163840 4096 4096 NT_STATUS_OK
ReadX 11129 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11129 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11132 NT_STATUS_OK
WriteX 11132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11132 258 NT_STATUS_OK
Close 11129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11133 NT_STATUS_OK
SET_FILE_INFORMATION 11133 1004 NT_STATUS_OK
Close 11133 NT_STATUS_OK
WriteX 11132 0 42388 42388 NT_STATUS_OK
Close 11132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
ReadX 11136 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11137 NT_STATUS_OK
WriteX 11137 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 258 NT_STATUS_OK
SET_FILE_INFORMATION 11137 1004 NT_STATUS_OK
WriteX 11137 0 42652 42652 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Close 11136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
ReadX 11141 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11143 NT_STATUS_OK
Close 11143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11146 NT_STATUS_OK
WriteX 11146 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 65536 65536 NT_STATUS_OK
WriteX 11146 65536 49 49 NT_STATUS_OK
Close 11146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11147 NT_STATUS_OK
ReadX 11147 0 61440 61440 NT_STATUS_OK
ReadX 11147 61440 4096 4096 NT_STATUS_OK
ReadX 11147 65536 61440 61440 NT_STATUS_OK
ReadX 11147 126976 4096 4096 NT_STATUS_OK
ReadX 11147 131072 61440 61440 NT_STATUS_OK
ReadX 11147 192512 4096 4096 NT_STATUS_OK
ReadX 11147 196608 61440 61440 NT_STATUS_OK
ReadX 11147 258048 4096 4096 NT_STATUS_OK
ReadX 11147 262144 61440 61440 NT_STATUS_OK
ReadX 11147 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11148 NT_STATUS_OK
ReadX 11148 0 61440 61440 NT_STATUS_OK
ReadX 11148 61440 4096 4096 NT_STATUS_OK
ReadX 11148 65536 61440 61440 NT_STATUS_OK
ReadX 11148 126976 4096 4096 NT_STATUS_OK
ReadX 11148 131072 61440 61440 NT_STATUS_OK
ReadX 11148 192512 4096 4096 NT_STATUS_OK
ReadX 11148 196608 61440 61440 NT_STATUS_OK
ReadX 11148 258048 4096 4096 NT_STATUS_OK
ReadX 11148 262144 61440 61440 NT_STATUS_OK
ReadX 11148 323584 4096 4096 NT_STATUS_OK
ReadX 11148 327680 61440 61440 NT_STATUS_OK
ReadX 11148 389120 4096 4096 NT_STATUS_OK
ReadX 11148 393216 61440 61440 NT_STATUS_OK
ReadX 11148 454656 4096 4096 NT_STATUS_OK
ReadX 11148 458752 61440 61440 NT_STATUS_OK
ReadX 11148 520192 4096 4096 NT_STATUS_OK
ReadX 11148 524288 61440 61440 NT_STATUS_OK
ReadX 11148 585728 4096 4096 NT_STATUS_OK
ReadX 11148 589824 61440 61440 NT_STATUS_OK
ReadX 11148 651264 4096 4096 NT_STATUS_OK
ReadX 11148 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 61440 61440 NT_STATUS_OK
ReadX 11149 61440 4096 4096 NT_STATUS_OK
ReadX 11149 65536 61440 61440 NT_STATUS_OK
ReadX 11149 126976 4096 4096 NT_STATUS_OK
ReadX 11149 131072 61440 61440 NT_STATUS_OK
ReadX 11149 192512 4096 4096 NT_STATUS_OK
ReadX 11149 196608 61440 61440 NT_STATUS_OK
ReadX 11149 258048 4096 4096 NT_STATUS_OK
ReadX 11149 262144 61440 61440 NT_STATUS_OK
ReadX 11149 323584 4096 4096 NT_STATUS_OK
ReadX 11149 327680 61440 61440 NT_STATUS_OK
ReadX 11149 389120 4096 4096 NT_STATUS_OK
ReadX 11149 393216 61440 61440 NT_STATUS_OK
ReadX 11149 454656 4096 4096 NT_STATUS_OK
ReadX 11149 458752 61440 61440 NT_STATUS_OK
ReadX 11149 520192 4096 4096 NT_STATUS_OK
ReadX 11149 524288 61440 61440 NT_STATUS_OK
ReadX 11149 585728 4096 4096 NT_STATUS_OK
ReadX 11149 589824 61440 61440 NT_STATUS_OK
ReadX 11149 651264 4096 4096 NT_STATUS_OK
ReadX 11149 655360 61440 61440 NT_STATUS_OK
ReadX 11149 716800 4096 4096 NT_STATUS_OK
ReadX 11149 720896 61440 61440 NT_STATUS_OK
ReadX 11149 782336 4096 4096 NT_STATUS_OK
ReadX 11149 786432 61440 61440 NT_STATUS_OK
ReadX 11149 847872 4096 4096 NT_STATUS_OK
ReadX 11149 851968 61440 61440 NT_STATUS_OK
ReadX 11149 913408 4096 4096 NT_STATUS_OK
ReadX 11149 917504 61440 61440 NT_STATUS_OK
ReadX 11149 978944 4096 4096 NT_STATUS_OK
ReadX 11149 983040 61440 61440 NT_STATUS_OK
ReadX 11149 1044480 4096 4096 NT_STATUS_OK
ReadX 11149 1048576 61440 61440 NT_STATUS_OK
ReadX 11149 1110016 4096 4096 NT_STATUS_OK
ReadX 11149 1114112 61440 61440 NT_STATUS_OK
ReadX 11149 1175552 4096 4096 NT_STATUS_OK
ReadX 11149 1179648 61440 61440 NT_STATUS_OK
ReadX 11149 1241088 4096 4096 NT_STATUS_OK
ReadX 11149 1245184 61440 61440 NT_STATUS_OK
ReadX 11149 1306624 4096 4096 NT_STATUS_OK
ReadX 11149 1310720 61440 61440 NT_STATUS_OK
ReadX 11149 1372160 4096 4096 NT_STATUS_OK
ReadX 11149 1376256 61440 61440 NT_STATUS_OK
ReadX 11149 1437696 4096 4096 NT_STATUS_OK
ReadX 11149 1441792 61440 61440 NT_STATUS_OK
ReadX 11149 1503232 4096 4096 NT_STATUS_OK
ReadX 11149 1507328 61440 61440 NT_STATUS_OK
ReadX 11149 1568768 4096 4096 NT_STATUS_OK
ReadX 11149 1572864 61440 61440 NT_STATUS_OK
ReadX 11149 1634304 4096 4096 NT_STATUS_OK
ReadX 11149 1638400 61440 61440 NT_STATUS_OK
ReadX 11149 1699840 4096 4096 NT_STATUS_OK
ReadX 11149 1703936 61440 61440 NT_STATUS_OK
ReadX 11149 1765376 4096 4096 NT_STATUS_OK
ReadX 11149 1769472 61440 61440 NT_STATUS_OK
ReadX 11149 1830912 4096 4096 NT_STATUS_OK
ReadX 11149 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11151 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 1005 NT_STATUS_OK
ReadX 11151 2156 24 24 NT_STATUS_OK
ReadX 11151 2139 276 276 NT_STATUS_OK
ReadX 11151 2136 14 14 NT_STATUS_OK
ReadX 11151 2136 7 7 NT_STATUS_OK
ReadX 11151 2138 12 12 NT_STATUS_OK
ReadX 11151 2137 8 8 NT_STATUS_OK
ReadX 11151 2135 15 15 NT_STATUS_OK
ReadX 11151 0 16 16 NT_STATUS_OK
ReadX 11151 16 2048 2048 NT_STATUS_OK
ReadX 11151 2064 2048 2048 NT_STATUS_OK
ReadX 11151 257 2048 2048 NT_STATUS_OK
ReadX 11151 385 2048 2048 NT_STATUS_OK
ReadX 11151 513 2048 2048 NT_STATUS_OK
ReadX 11151 641 2048 2048 NT_STATUS_OK
ReadX 11151 769 2048 2048 NT_STATUS_OK
ReadX 11151 897 2048 2048 NT_STATUS_OK
ReadX 11151 1025 2048 2048 NT_STATUS_OK
ReadX 11151 1153 2048 2048 NT_STATUS_OK
ReadX 11151 1281 2048 2048 NT_STATUS_OK
ReadX 11151 1409 2048 2048 NT_STATUS_OK
ReadX 11151 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11147 NT_STATUS_OK
Close 11148 NT_STATUS_OK
Close 11149 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11156 NT_STATUS_OK
WriteX 11156 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 258 NT_STATUS_OK
WriteX 11156 0 10575 10575 NT_STATUS_OK
Flush 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11161 NT_STATUS_OK
LockX 11161 2147483538 1 NT_STATUS_OK
UnlockX 11161 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11161 1005 NT_STATUS_OK
ReadX 11161 0 512 512 NT_STATUS_OK
ReadX 11161 512 512 512 NT_STATUS_OK
ReadX 11161 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11161 1004 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11162 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 1005 NT_STATUS_OK
ReadX 11162 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11163 NT_STATUS_OK
LockX 11163 2147483538 1 NT_STATUS_OK
UnlockX 11163 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11163 1005 NT_STATUS_OK
ReadX 11163 0 512 512 NT_STATUS_OK
ReadX 11163 512 512 512 NT_STATUS_OK
ReadX 11163 1024 512 512 NT_STATUS_OK
ReadX 11163 288 20 20 NT_STATUS_OK
ReadX 11163 308 2084 2084 NT_STATUS_OK
ReadX 11163 388 2084 2084 NT_STATUS_OK
ReadX 11163 388 2084 2084 NT_STATUS_OK
ReadX 11150 2157 1386 1386 NT_STATUS_OK
ReadX 11163 2472 399 399 NT_STATUS_OK
ReadX 11163 3072 1536 1536 NT_STATUS_OK
ReadX 11163 544 149 149 NT_STATUS_OK
ReadX 11163 693 485 485 NT_STATUS_OK
Close 11163 NT_STATUS_OK
ReadX 11150 2157 4096 4096 NT_STATUS_OK
ReadX 11150 6253 4096 4096 NT_STATUS_OK
ReadX 11150 10349 4096 4096 NT_STATUS_OK
ReadX 11150 14445 4096 4096 NT_STATUS_OK
ReadX 11150 18541 4096 4096 NT_STATUS_OK
ReadX 11150 22637 256 256 NT_STATUS_OK
ReadX 11150 22893 4096 4096 NT_STATUS_OK
ReadX 11150 26989 4096 4096 NT_STATUS_OK
ReadX 11150 31085 4096 4096 NT_STATUS_OK
ReadX 11150 35181 4096 4096 NT_STATUS_OK
ReadX 11150 39277 4096 4096 NT_STATUS_OK
ReadX 11150 43373 4096 4096 NT_STATUS_OK
ReadX 11150 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11150 2157 1024 1024 NT_STATUS_OK
ReadX 11150 1667 4688 4688 NT_STATUS_OK
ReadX 11150 6355 3516 3516 NT_STATUS_OK
ReadX 11150 9871 16384 16384 NT_STATUS_OK
ReadX 11150 26255 3771 3771 NT_STATUS_OK
ReadX 11150 30026 2048 2048 NT_STATUS_OK
ReadX 11150 32074 1024 1024 NT_STATUS_OK
ReadX 11150 33098 6652 6652 NT_STATUS_OK
ReadX 11150 39750 16384 16384 NT_STATUS_OK
ReadX 11150 56134 10496 10496 NT_STATUS_OK
ReadX 11150 66630 1784 1784 NT_STATUS_OK
ReadX 11150 68414 90 90 NT_STATUS_OK
ReadX 11150 68504 273 273 NT_STATUS_OK
ReadX 11150 68777 1600 1600 NT_STATUS_OK
ReadX 11150 70377 640 640 NT_STATUS_OK
ReadX 11150 71017 1280 1280 NT_STATUS_OK
ReadX 11150 72297 8464 8464 NT_STATUS_OK
ReadX 11150 80761 158 158 NT_STATUS_OK
ReadX 11150 80919 912 912 NT_STATUS_OK
ReadX 11150 81831 1980 1980 NT_STATUS_OK
ReadX 11150 83811 2256 2256 NT_STATUS_OK
ReadX 11150 86067 400 400 NT_STATUS_OK
ReadX 11150 86467 252 252 NT_STATUS_OK
ReadX 11150 86719 42 42 NT_STATUS_OK
ReadX 11150 86761 725 725 NT_STATUS_OK
ReadX 11150 2009 512 512 NT_STATUS_OK
ReadX 11150 3895 9 9 NT_STATUS_OK
ReadX 11150 3781 46 46 NT_STATUS_OK
ReadX 11150 4059 92 92 NT_STATUS_OK
ReadX 11150 3781 92 92 NT_STATUS_OK
ReadX 11150 3986 184 184 NT_STATUS_OK
ReadX 11150 3987 16384 16384 NT_STATUS_OK
ReadX 11150 3902 16384 16384 NT_STATUS_OK
ReadX 11150 3781 10240 10240 NT_STATUS_OK
ReadX 11150 3821 16384 16384 NT_STATUS_OK
ReadX 11150 3891 935 935 NT_STATUS_OK
ReadX 11150 4060 10240 10240 NT_STATUS_OK
ReadX 11150 4059 184 184 NT_STATUS_OK
ReadX 11150 256 184 184 NT_STATUS_OK
ReadX 11150 256 1026 1026 NT_STATUS_OK
ReadX 11150 3901 326 326 NT_STATUS_OK
ReadX 11150 3899 652 652 NT_STATUS_OK
ReadX 11150 256 2 2 NT_STATUS_OK
ReadX 11150 258 4948 4948 NT_STATUS_OK
Close 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11165 NT_STATUS_OK
Close 11165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11168 NT_STATUS_OK
WriteX 11168 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11168 258 NT_STATUS_OK
WriteX 11168 0 65536 65536 NT_STATUS_OK
WriteX 11168 65536 65536 65536 NT_STATUS_OK
WriteX 11168 131072 65536 65536 NT_STATUS_OK
WriteX 11168 196608 65536 65536 NT_STATUS_OK
WriteX 11168 262144 65536 65536 NT_STATUS_OK
WriteX 11168 327680 65536 65536 NT_STATUS_OK
WriteX 11168 393216 65536 65536 NT_STATUS_OK
WriteX 11168 458752 65536 65536 NT_STATUS_OK
WriteX 11168 524288 65536 65536 NT_STATUS_OK
WriteX 11168 589824 35257 35257 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11173 NT_STATUS_OK
WriteX 11173 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11173 258 NT_STATUS_OK
WriteX 11173 0 65536 65536 NT_STATUS_OK
WriteX 11173 65536 65536 65536 NT_STATUS_OK
WriteX 11173 131072 65536 65536 NT_STATUS_OK
WriteX 11173 196608 65536 65536 NT_STATUS_OK
WriteX 11173 262144 65536 65536 NT_STATUS_OK
WriteX 11173 327680 65536 65536 NT_STATUS_OK
WriteX 11173 393216 65536 65536 NT_STATUS_OK
WriteX 11173 458752 65536 65536 NT_STATUS_OK
WriteX 11173 524288 65536 65536 NT_STATUS_OK
WriteX 11173 589824 57598 57598 NT_STATUS_OK
Close 11173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11175 NT_STATUS_OK
WriteX 11175 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11175 258 NT_STATUS_OK
WriteX 11175 0 12543 12543 NT_STATUS_OK
Flush 11175 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11181 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 1005 NT_STATUS_OK
ReadX 11181 1938 24 24 NT_STATUS_OK
ReadX 11181 1920 276 276 NT_STATUS_OK
ReadX 11181 1918 14 14 NT_STATUS_OK
ReadX 11181 1918 7 7 NT_STATUS_OK
ReadX 11181 1919 12 12 NT_STATUS_OK
ReadX 11181 1919 8 8 NT_STATUS_OK
ReadX 11181 1917 15 15 NT_STATUS_OK
ReadX 11181 0 16 16 NT_STATUS_OK
ReadX 11181 16 2048 2048 NT_STATUS_OK
ReadX 11181 2064 2048 2048 NT_STATUS_OK
ReadX 11181 257 2048 2048 NT_STATUS_OK
ReadX 11181 385 2048 2048 NT_STATUS_OK
ReadX 11181 513 2048 2048 NT_STATUS_OK
ReadX 11181 641 2048 2048 NT_STATUS_OK
ReadX 11181 769 2048 2048 NT_STATUS_OK
ReadX 11181 897 2048 2048 NT_STATUS_OK
ReadX 11181 1025 2048 2048 NT_STATUS_OK
ReadX 11181 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11183 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11186 NT_STATUS_OK
WriteX 11186 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11186 258 NT_STATUS_OK
WriteX 11186 0 11588 11588 NT_STATUS_OK
Flush 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11187 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11191 NT_STATUS_OK
WriteX 11191 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11191 258 NT_STATUS_OK
WriteX 11191 0 11615 11615 NT_STATUS_OK
Flush 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11200 NT_STATUS_OK
WriteX 11200 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11200 258 NT_STATUS_OK
WriteX 11200 0 65536 65536 NT_STATUS_OK
WriteX 11200 65536 16050 16050 NT_STATUS_OK
Close 11200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11180 1939 64 64 NT_STATUS_OK
ReadX 11180 128 248 248 NT_STATUS_OK
ReadX 11180 128 568 568 NT_STATUS_OK
ReadX 11180 3872 1536 1536 NT_STATUS_OK
ReadX 11180 3456 2560 2560 NT_STATUS_OK
ReadX 11180 3136 512 512 NT_STATUS_OK
ReadX 11180 2880 4096 4096 NT_STATUS_OK
ReadX 11180 3264 3072 3072 NT_STATUS_OK
ReadX 11180 320 4096 4096 NT_STATUS_OK
ReadX 11180 1024 4096 4096 NT_STATUS_OK
ReadX 11180 3616 4096 4096 NT_STATUS_OK
ReadX 11180 1939 64 64 NT_STATUS_OK
ReadX 11180 128 248 248 NT_STATUS_OK
ReadX 11180 128 608 608 NT_STATUS_OK
ReadX 11180 2858 1024 1024 NT_STATUS_OK
ReadX 11180 2810 4096 4096 NT_STATUS_OK
ReadX 11180 2826 4096 4096 NT_STATUS_OK
ReadX 11180 2580 2048 2048 NT_STATUS_OK
ReadX 11180 2800 2560 2560 NT_STATUS_OK
ReadX 11180 2100 4096 4096 NT_STATUS_OK
ReadX 11180 2084 4096 4096 NT_STATUS_OK
ReadX 11180 868 4096 4096 NT_STATUS_OK
ReadX 11180 2324 4096 4096 NT_STATUS_OK
ReadX 11180 884 4096 4096 NT_STATUS_OK
ReadX 11180 2604 1024 1024 NT_STATUS_OK
ReadX 11180 580 4096 4096 NT_STATUS_OK
ReadX 11180 596 4096 4096 NT_STATUS_OK
ReadX 11180 2752 4096 4096 NT_STATUS_OK
ReadX 11180 2842 1024 1024 NT_STATUS_OK
ReadX 11180 660 4096 4096 NT_STATUS_OK
ReadX 11180 2720 4096 4096 NT_STATUS_OK
ReadX 11180 2736 4096 4096 NT_STATUS_OK
ReadX 11180 628 4096 4096 NT_STATUS_OK
ReadX 11180 2704 4096 4096 NT_STATUS_OK
ReadX 11180 1556 4096 4096 NT_STATUS_OK
ReadX 11180 576 4096 4096 NT_STATUS_OK
ReadX 11180 3168 1536 1536 NT_STATUS_OK
ReadX 11180 832 4096 4096 NT_STATUS_OK
ReadX 11180 1088 4096 4096 NT_STATUS_OK
ReadX 11180 1344 4096 4096 NT_STATUS_OK
ReadX 11180 1600 4096 4096 NT_STATUS_OK
ReadX 11180 1856 4096 4096 NT_STATUS_OK
ReadX 11180 2112 4096 4096 NT_STATUS_OK
ReadX 11180 1892 4096 4096 NT_STATUS_OK
ReadX 11180 820 4096 4096 NT_STATUS_OK
ReadX 11180 788 4096 4096 NT_STATUS_OK
ReadX 11180 1604 4096 4096 NT_STATUS_OK
ReadX 11180 3648 4096 4096 NT_STATUS_OK
ReadX 11180 2608 4096 4096 NT_STATUS_OK
ReadX 11180 548 4096 4096 NT_STATUS_OK
ReadX 11180 740 4096 4096 NT_STATUS_OK
ReadX 11180 1344 4096 4096 NT_STATUS_OK
ReadX 11180 3392 4096 4096 NT_STATUS_OK
ReadX 11180 3904 4096 4096 NT_STATUS_OK
ReadX 11180 644 4096 4096 NT_STATUS_OK
ReadX 11180 676 4096 4096 NT_STATUS_OK
ReadX 11180 2688 4096 4096 NT_STATUS_OK
ReadX 11180 320 4096 4096 NT_STATUS_OK
ReadX 11180 900 4096 4096 NT_STATUS_OK
ReadX 11180 1908 4096 4096 NT_STATUS_OK
ReadX 11180 852 4096 4096 NT_STATUS_OK
ReadX 11180 724 4096 4096 NT_STATUS_OK
ReadX 11180 2292 4096 4096 NT_STATUS_OK
ReadX 11180 612 4096 4096 NT_STATUS_OK
ReadX 11180 388 4096 4096 NT_STATUS_OK
ReadX 11180 2368 4096 4096 NT_STATUS_OK
ReadX 11180 2624 4096 4096 NT_STATUS_OK
ReadX 11180 500 4096 4096 NT_STATUS_OK
ReadX 11180 356 4096 4096 NT_STATUS_OK
ReadX 11180 1024 4096 4096 NT_STATUS_OK
ReadX 11180 576 4096 4096 NT_STATUS_OK
ReadX 11180 340 4096 4096 NT_STATUS_OK
ReadX 11180 420 4096 4096 NT_STATUS_OK
ReadX 11180 1600 4096 4096 NT_STATUS_OK
ReadX 11180 404 4096 4096 NT_STATUS_OK
ReadX 11180 1428 4096 4096 NT_STATUS_OK
ReadX 11180 2656 4096 4096 NT_STATUS_OK
ReadX 11180 2624 4096 4096 NT_STATUS_OK
ReadX 11180 452 4096 4096 NT_STATUS_OK
ReadX 11180 692 4096 4096 NT_STATUS_OK
ReadX 11180 564 4096 4096 NT_STATUS_OK
ReadX 11180 372 4096 4096 NT_STATUS_OK
ReadX 11180 468 4096 4096 NT_STATUS_OK
ReadX 11180 484 4096 4096 NT_STATUS_OK
ReadX 11180 1088 4096 4096 NT_STATUS_OK
ReadX 11180 1924 4096 4096 NT_STATUS_OK
ReadX 11180 2768 4096 4096 NT_STATUS_OK
ReadX 11180 832 4096 4096 NT_STATUS_OK
ReadX 11180 836 4096 4096 NT_STATUS_OK
ReadX 11180 1856 4096 4096 NT_STATUS_OK
ReadX 11180 2640 4096 4096 NT_STATUS_OK
ReadX 11180 436 4096 4096 NT_STATUS_OK
ReadX 11180 1828 4096 4096 NT_STATUS_OK
ReadX 11180 804 4096 4096 NT_STATUS_OK
ReadX 11180 1860 4096 4096 NT_STATUS_OK
ReadX 11180 1812 4096 4096 NT_STATUS_OK
ReadX 11180 756 4096 4096 NT_STATUS_OK
ReadX 11180 1636 4096 4096 NT_STATUS_OK
ReadX 11180 772 4096 4096 NT_STATUS_OK
ReadX 11180 2036 4096 4096 NT_STATUS_OK
ReadX 11180 1220 4096 4096 NT_STATUS_OK
ReadX 11180 1652 4096 4096 NT_STATUS_OK
ReadX 11180 2588 4096 4096 NT_STATUS_OK
ReadX 11180 916 4096 4096 NT_STATUS_OK
ReadX 11180 260 4096 4096 NT_STATUS_OK
ReadX 11180 932 4096 4096 NT_STATUS_OK
ReadX 11180 2624 4096 4096 NT_STATUS_OK
ReadX 11180 308 4096 4096 NT_STATUS_OK
ReadX 11180 292 4096 4096 NT_STATUS_OK
ReadX 11180 1140 4096 4096 NT_STATUS_OK
ReadX 11180 276 4096 4096 NT_STATUS_OK
ReadX 11180 2020 4096 4096 NT_STATUS_OK
ReadX 11180 2880 4096 4096 NT_STATUS_OK
ReadX 11180 516 4096 4096 NT_STATUS_OK
ReadX 11180 1844 4096 4096 NT_STATUS_OK
ReadX 11180 1124 4096 4096 NT_STATUS_OK
ReadX 11180 3136 4096 4096 NT_STATUS_OK
ReadX 11180 324 4096 4096 NT_STATUS_OK
ReadX 11180 1156 4096 4096 NT_STATUS_OK
ReadX 11180 1172 4096 4096 NT_STATUS_OK
ReadX 11180 2112 4096 4096 NT_STATUS_OK
ReadX 11180 2368 4096 4096 NT_STATUS_OK
ReadX 11180 964 4096 4096 NT_STATUS_OK
ReadX 11180 980 4096 4096 NT_STATUS_OK
ReadX 11180 1012 4096 4096 NT_STATUS_OK
ReadX 11180 532 4096 4096 NT_STATUS_OK
ReadX 11180 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11180 1620 4096 4096 NT_STATUS_OK
ReadX 11180 1604 4096 4096 NT_STATUS_OK
ReadX 11180 2116 4096 4096 NT_STATUS_OK
ReadX 11180 2132 4096 4096 NT_STATUS_OK
ReadX 11180 2148 4096 4096 NT_STATUS_OK
ReadX 11180 2276 4096 4096 NT_STATUS_OK
ReadX 11180 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11205 NT_STATUS_OK
QUERY_FILE_INFORMATION 11160 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
WriteX 11205 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 1004 NT_STATUS_OK
Close 11162 NT_STATUS_OK
WriteX 11205 0 65536 65536 NT_STATUS_OK
WriteX 11205 65536 64850 64850 NT_STATUS_OK
Close 11205 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
ReadX 11180 2068 4096 4096 NT_STATUS_OK
ReadX 11180 1588 4096 4096 NT_STATUS_OK
ReadX 11180 1572 4096 4096 NT_STATUS_OK
WriteX 11207 0 18630 18630 NT_STATUS_OK
Flush 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11180 612 4096 4096 NT_STATUS_OK
ReadX 11180 564 4096 4096 NT_STATUS_OK
ReadX 11180 1876 4096 4096 NT_STATUS_OK
ReadX 11180 628 4096 4096 NT_STATUS_OK
ReadX 11180 740 4096 4096 NT_STATUS_OK
ReadX 11180 724 4096 4096 NT_STATUS_OK
ReadX 11180 644 4096 4096 NT_STATUS_OK
ReadX 11180 2324 4096 4096 NT_STATUS_OK
ReadX 11180 660 4096 4096 NT_STATUS_OK
ReadX 11180 852 4096 4096 NT_STATUS_OK
ReadX 11180 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11180 2368 4096 4096 NT_STATUS_OK
ReadX 11180 1024 4096 4096 NT_STATUS_OK
ReadX 11180 320 4096 4096 NT_STATUS_OK
ReadX 11180 580 4096 4096 NT_STATUS_OK
ReadX 11180 3136 512 512 NT_STATUS_OK
ReadX 11180 2880 4096 4096 NT_STATUS_OK
Close 11180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 61440 4096 4096 NT_STATUS_OK
ReadX 11212 126976 4096 4096 NT_STATUS_OK
WriteX 11212 0 65536 65536 NT_STATUS_OK
WriteX 11212 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 61440 4096 4096 NT_STATUS_OK
ReadX 11213 126976 4096 4096 NT_STATUS_OK
ReadX 11213 192512 4096 4096 NT_STATUS_OK
ReadX 11213 258048 4096 4096 NT_STATUS_OK
WriteX 11213 0 65536 65536 NT_STATUS_OK
WriteX 11213 65536 65536 65536 NT_STATUS_OK
WriteX 11213 131072 65536 65536 NT_STATUS_OK
WriteX 11213 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 61440 4096 4096 NT_STATUS_OK
ReadX 11214 126976 4096 4096 NT_STATUS_OK
ReadX 11214 192512 4096 4096 NT_STATUS_OK
ReadX 11214 258048 4096 4096 NT_STATUS_OK
ReadX 11214 323584 4096 4096 NT_STATUS_OK
ReadX 11214 389120 4096 4096 NT_STATUS_OK
ReadX 11214 454656 4096 4096 NT_STATUS_OK
ReadX 11214 520192 4096 4096 NT_STATUS_OK
WriteX 11214 0 65536 65536 NT_STATUS_OK
WriteX 11214 65536 65536 65536 NT_STATUS_OK
WriteX 11214 131072 65536 65536 NT_STATUS_OK
WriteX 11214 196608 65536 65536 NT_STATUS_OK
WriteX 11214 262144 65536 65536 NT_STATUS_OK
WriteX 11214 327680 65536 65536 NT_STATUS_OK
WriteX 11214 393216 65536 65536 NT_STATUS_OK
WriteX 11214 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11216 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11217 NT_STATUS_OK
WriteX 11217 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11215 0 8192 8192 NT_STATUS_OK
Flush 11215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11215 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11215 0 8192 8192 NT_STATUS_OK
Flush 11215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11215 0 8192 8192 NT_STATUS_OK
Flush 11215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11215 0 8192 8192 NT_STATUS_OK
Flush 11215 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11222 NT_STATUS_OK
WriteX 11222 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 258 NT_STATUS_OK
WriteX 11222 0 62591 62591 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11224 NT_STATUS_OK
Close 11224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11227 NT_STATUS_OK
WriteX 11227 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11227 258 NT_STATUS_OK
WriteX 11227 0 10845 10845 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
WriteX 11232 0 30118 30118 NT_STATUS_OK
Close 11232 NT_STATUS_OK
WriteX 11215 0 4096 4096 NT_STATUS_OK
WriteX 11217 0 64 64 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 61440 61440 NT_STATUS_OK
ReadX 11234 61440 4096 4096 NT_STATUS_OK
ReadX 11234 65536 61440 61440 NT_STATUS_OK
ReadX 11234 126976 4096 4096 NT_STATUS_OK
ReadX 11234 131072 61440 61440 NT_STATUS_OK
ReadX 11234 192512 4096 4096 NT_STATUS_OK
ReadX 11234 196608 61440 61440 NT_STATUS_OK
ReadX 11234 258048 4096 4096 NT_STATUS_OK
ReadX 11234 262144 61440 61440 NT_STATUS_OK
ReadX 11234 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 61440 61440 NT_STATUS_OK
ReadX 11235 61440 4096 4096 NT_STATUS_OK
ReadX 11235 65536 61440 61440 NT_STATUS_OK
ReadX 11235 126976 4096 4096 NT_STATUS_OK
ReadX 11235 131072 61440 61440 NT_STATUS_OK
ReadX 11235 192512 4096 4096 NT_STATUS_OK
ReadX 11235 196608 61440 61440 NT_STATUS_OK
ReadX 11235 258048 4096 4096 NT_STATUS_OK
ReadX 11235 262144 61440 61440 NT_STATUS_OK
ReadX 11235 323584 4096 4096 NT_STATUS_OK
ReadX 11235 327680 61440 61440 NT_STATUS_OK
ReadX 11235 389120 4096 4096 NT_STATUS_OK
ReadX 11235 393216 61440 61440 NT_STATUS_OK
ReadX 11235 454656 4096 4096 NT_STATUS_OK
ReadX 11235 458752 61440 61440 NT_STATUS_OK
ReadX 11235 520192 4096 4096 NT_STATUS_OK
ReadX 11235 524288 61440 61440 NT_STATUS_OK
ReadX 11235 585728 4096 4096 NT_STATUS_OK
ReadX 11235 589824 61440 61440 NT_STATUS_OK
ReadX 11235 651264 4096 4096 NT_STATUS_OK
ReadX 11235 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 61440 61440 NT_STATUS_OK
ReadX 11236 61440 4096 4096 NT_STATUS_OK
ReadX 11236 65536 61440 61440 NT_STATUS_OK
ReadX 11236 126976 4096 4096 NT_STATUS_OK
ReadX 11236 131072 61440 61440 NT_STATUS_OK
ReadX 11236 192512 4096 4096 NT_STATUS_OK
ReadX 11236 196608 61440 61440 NT_STATUS_OK
ReadX 11236 258048 4096 4096 NT_STATUS_OK
ReadX 11236 262144 61440 61440 NT_STATUS_OK
ReadX 11236 323584 4096 4096 NT_STATUS_OK
ReadX 11236 327680 61440 61440 NT_STATUS_OK
ReadX 11236 389120 4096 4096 NT_STATUS_OK
ReadX 11236 393216 61440 61440 NT_STATUS_OK
ReadX 11236 454656 4096 4096 NT_STATUS_OK
ReadX 11236 458752 61440 61440 NT_STATUS_OK
ReadX 11236 520192 4096 4096 NT_STATUS_OK
ReadX 11236 524288 61440 61440 NT_STATUS_OK
ReadX 11236 585728 4096 4096 NT_STATUS_OK
ReadX 11236 589824 61440 61440 NT_STATUS_OK
ReadX 11236 651264 4096 4096 NT_STATUS_OK
ReadX 11236 655360 61440 61440 NT_STATUS_OK
ReadX 11236 716800 4096 4096 NT_STATUS_OK
ReadX 11236 720896 61440 61440 NT_STATUS_OK
ReadX 11236 782336 4096 4096 NT_STATUS_OK
ReadX 11236 786432 61440 61440 NT_STATUS_OK
ReadX 11236 847872 4096 4096 NT_STATUS_OK
ReadX 11236 851968 61440 61440 NT_STATUS_OK
ReadX 11236 913408 4096 4096 NT_STATUS_OK
ReadX 11236 917504 61440 61440 NT_STATUS_OK
ReadX 11236 978944 4096 4096 NT_STATUS_OK
ReadX 11236 983040 61440 61440 NT_STATUS_OK
ReadX 11236 1044480 4096 4096 NT_STATUS_OK
ReadX 11236 1048576 61440 61440 NT_STATUS_OK
ReadX 11236 1110016 4096 4096 NT_STATUS_OK
ReadX 11236 1114112 61440 61440 NT_STATUS_OK
ReadX 11236 1175552 4096 4096 NT_STATUS_OK
ReadX 11236 1179648 61440 61440 NT_STATUS_OK
ReadX 11236 1241088 4096 4096 NT_STATUS_OK
ReadX 11236 1245184 61440 61440 NT_STATUS_OK
ReadX 11236 1306624 4096 4096 NT_STATUS_OK
ReadX 11236 1310720 61440 61440 NT_STATUS_OK
ReadX 11236 1372160 4096 4096 NT_STATUS_OK
ReadX 11236 1376256 61440 61440 NT_STATUS_OK
ReadX 11236 1437696 4096 4096 NT_STATUS_OK
ReadX 11236 1441792 61440 61440 NT_STATUS_OK
ReadX 11236 1503232 4096 4096 NT_STATUS_OK
ReadX 11236 1507328 61440 61440 NT_STATUS_OK
ReadX 11236 1568768 4096 4096 NT_STATUS_OK
ReadX 11236 1572864 61440 61440 NT_STATUS_OK
ReadX 11236 1634304 4096 4096 NT_STATUS_OK
ReadX 11236 1638400 61440 61440 NT_STATUS_OK
ReadX 11236 1699840 4096 4096 NT_STATUS_OK
ReadX 11236 1703936 61440 61440 NT_STATUS_OK
ReadX 11236 1765376 4096 4096 NT_STATUS_OK
ReadX 11236 1769472 61440 61440 NT_STATUS_OK
ReadX 11236 1830912 4096 4096 NT_STATUS_OK
ReadX 11236 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11237 NT_STATUS_OK
Close 11237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11240 NT_STATUS_OK
ReadX 11240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
ReadX 11241 4096 4096 4096 NT_STATUS_OK
ReadX 11241 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11242 NT_STATUS_OK
Close 11242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Close 11240 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11245 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 0 8192 8192 NT_STATUS_OK
ReadX 11249 8192 8192 8192 NT_STATUS_OK
ReadX 11249 16384 8192 8192 NT_STATUS_OK
ReadX 11249 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11254 NT_STATUS_OK
WriteX 11254 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11254 258 NT_STATUS_OK
WriteX 11254 0 10438 10438 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11255 NT_STATUS_OK
Close 11255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11257 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11259 NT_STATUS_OK
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11260 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11262 NT_STATUS_OK
Close 11262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11263 NT_STATUS_OK
ReadX 11263 0 4096 4096 NT_STATUS_OK
ReadX 11263 4096 4096 4096 NT_STATUS_OK
ReadX 11263 8192 4096 4096 NT_STATUS_OK
ReadX 11263 12288 8192 8192 NT_STATUS_OK
ReadX 11263 20480 8192 8192 NT_STATUS_OK
ReadX 11263 28672 8192 8192 NT_STATUS_OK
ReadX 11263 36864 8192 8192 NT_STATUS_OK
ReadX 11263 45056 8192 8192 NT_STATUS_OK
ReadX 11263 53248 8192 8192 NT_STATUS_OK
ReadX 11263 61440 8192 8192 NT_STATUS_OK
ReadX 11263 69632 8192 8192 NT_STATUS_OK
ReadX 11263 77824 8192 8192 NT_STATUS_OK
ReadX 11263 86016 8192 8192 NT_STATUS_OK
ReadX 11263 94208 8192 8192 NT_STATUS_OK
ReadX 11263 102400 8192 8192 NT_STATUS_OK
ReadX 11263 110592 8192 8192 NT_STATUS_OK
ReadX 11263 118784 8192 8192 NT_STATUS_OK
ReadX 11263 126976 8192 8192 NT_STATUS_OK
ReadX 11263 135168 8192 8192 NT_STATUS_OK
ReadX 11263 143360 8192 8192 NT_STATUS_OK
ReadX 11263 151552 8192 8192 NT_STATUS_OK
ReadX 11263 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11263 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11265 NT_STATUS_OK
Close 11265 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11268 NT_STATUS_OK
WriteX 11268 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11268 258 NT_STATUS_OK
WriteX 11268 0 28489 28489 NT_STATUS_OK
Close 11268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11271 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11271 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 0 8192 8192 NT_STATUS_OK
ReadX 11275 8192 8192 8192 NT_STATUS_OK
ReadX 11275 16384 8192 8192 NT_STATUS_OK
ReadX 11275 24576 8192 8192 NT_STATUS_OK
ReadX 11275 32768 16384 16384 NT_STATUS_OK
ReadX 11275 49152 8192 8192 NT_STATUS_OK
ReadX 11275 57344 8192 8192 NT_STATUS_OK
ReadX 11275 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11277 NT_STATUS_OK
Close 11277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11274 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11280 NT_STATUS_OK
WriteX 11280 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11280 258 NT_STATUS_OK
WriteX 11280 0 29253 29253 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11284 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11287 NT_STATUS_OK
WriteX 11287 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11287 258 NT_STATUS_OK
WriteX 11287 0 30183 30183 NT_STATUS_OK
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11288 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11290 NT_STATUS_OK
WriteX 11290 0 510 510 NT_STATUS_OK
WriteX 11290 510 512 512 NT_STATUS_OK
WriteX 11290 1022 510 510 NT_STATUS_OK
WriteX 11290 1532 510 510 NT_STATUS_OK
WriteX 11290 2042 168 168 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
WriteX 11293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 61440 4096 4096 NT_STATUS_OK
ReadX 11294 126976 4096 4096 NT_STATUS_OK
WriteX 11294 0 65536 65536 NT_STATUS_OK
WriteX 11294 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 61440 4096 4096 NT_STATUS_OK
ReadX 11295 126976 4096 4096 NT_STATUS_OK
ReadX 11295 192512 4096 4096 NT_STATUS_OK
ReadX 11295 258048 4096 4096 NT_STATUS_OK
WriteX 11295 0 65536 65536 NT_STATUS_OK
WriteX 11295 65536 65536 65536 NT_STATUS_OK
WriteX 11295 131072 65536 65536 NT_STATUS_OK
WriteX 11295 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 61440 4096 4096 NT_STATUS_OK
ReadX 11296 126976 4096 4096 NT_STATUS_OK
ReadX 11296 192512 4096 4096 NT_STATUS_OK
ReadX 11296 258048 4096 4096 NT_STATUS_OK
ReadX 11296 323584 4096 4096 NT_STATUS_OK
ReadX 11296 389120 4096 4096 NT_STATUS_OK
ReadX 11296 454656 4096 4096 NT_STATUS_OK
ReadX 11296 520192 4096 4096 NT_STATUS_OK
WriteX 11296 0 65536 65536 NT_STATUS_OK
WriteX 11296 65536 65536 65536 NT_STATUS_OK
WriteX 11296 131072 65536 65536 NT_STATUS_OK
WriteX 11296 196608 65536 65536 NT_STATUS_OK
WriteX 11296 262144 65536 65536 NT_STATUS_OK
WriteX 11296 327680 65536 65536 NT_STATUS_OK
WriteX 11296 393216 65536 65536 NT_STATUS_OK
WriteX 11296 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11294 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11299 NT_STATUS_OK
Close 11299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11303 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11312 NT_STATUS_OK
Close 11312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11317 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11321 NT_STATUS_OK
Close 11321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11331 NT_STATUS_OK
Close 11331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11341 NT_STATUS_OK
Close 11341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11362 NT_STATUS_OK
Close 11362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11365 NT_STATUS_OK
WriteX 11365 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11365 0 65536 65536 NT_STATUS_OK
WriteX 11365 65536 65536 65536 NT_STATUS_OK
WriteX 11365 131072 65536 65536 NT_STATUS_OK
WriteX 11365 196608 65536 65536 NT_STATUS_OK
WriteX 11365 262144 26634 26634 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11370 NT_STATUS_OK
Close 11370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11371 NT_STATUS_OK
Close 11371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11372 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
Close 11372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 4096 4096 NT_STATUS_OK
ReadX 11373 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11381 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11392 NT_STATUS_OK
Close 11392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11396 NT_STATUS_OK
Close 11396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11401 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11411 NT_STATUS_OK
Close 11411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11416 NT_STATUS_OK
Close 11416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11421 NT_STATUS_OK
Close 11421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11425 NT_STATUS_OK
Close 11425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11430 NT_STATUS_OK
Close 11430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11435 NT_STATUS_OK
Close 11435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11440 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11450 NT_STATUS_OK
Close 11450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
Close 11452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
Close 11453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
Close 11466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11468 NT_STATUS_OK
ReadX 11468 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Close 11468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11497 0 4096 4096 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
ReadX 11499 4096 4096 4096 NT_STATUS_OK
ReadX 11499 8192 4096 4096 NT_STATUS_OK
ReadX 11499 12288 4096 4096 NT_STATUS_OK
ReadX 11499 16384 4096 4096 NT_STATUS_OK
ReadX 11499 20480 4096 4096 NT_STATUS_OK
ReadX 11499 24576 4096 4096 NT_STATUS_OK
ReadX 11499 28672 4096 4096 NT_STATUS_OK
ReadX 11499 32768 4096 4096 NT_STATUS_OK
ReadX 11499 36864 4096 4096 NT_STATUS_OK
ReadX 11499 40960 4096 4096 NT_STATUS_OK
ReadX 11499 45056 4096 4096 NT_STATUS_OK
ReadX 11499 49152 4096 4096 NT_STATUS_OK
ReadX 11499 53248 4096 4096 NT_STATUS_OK
ReadX 11499 57344 4096 4096 NT_STATUS_OK
ReadX 11499 61440 4096 4096 NT_STATUS_OK
ReadX 11499 65536 4096 4096 NT_STATUS_OK
ReadX 11499 69632 4096 4096 NT_STATUS_OK
ReadX 11499 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11499 1004 NT_STATUS_OK
WriteX 11499 0 4096 4096 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11500 NT_STATUS_OK
SET_FILE_INFORMATION 11500 1004 NT_STATUS_OK
Close 11500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11501 NT_STATUS_OK
ReadX 11501 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11505 NT_STATUS_OK
WriteX 11505 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11505 258 NT_STATUS_OK
WriteX 11505 0 65536 65536 NT_STATUS_OK
WriteX 11505 65536 19979 19979 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
Close 11506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
Close 11507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
Close 11509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11511 1004 NT_STATUS_OK
WriteX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11514 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11517 NT_STATUS_OK
WriteX 11517 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 258 NT_STATUS_OK
WriteX 11517 0 65536 65536 NT_STATUS_OK
WriteX 11517 65536 17654 17654 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 4096 4096 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
QUERY_FILE_INFORMATION 11518 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
SET_FILE_INFORMATION 11518 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11519 NT_STATUS_OK
SET_FILE_INFORMATION 11519 1004 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
ReadX 11523 4096 4096 4096 NT_STATUS_OK
ReadX 11523 8192 4096 4096 NT_STATUS_OK
ReadX 11523 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11523 16384 4096 4096 NT_STATUS_OK
ReadX 11523 20480 4096 4096 NT_STATUS_OK
ReadX 11523 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11524 NT_STATUS_OK
ReadX 11524 0 4096 4096 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11525 NT_STATUS_OK
ReadX 11525 0 4096 4096 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11526 NT_STATUS_OK
ReadX 11526 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11526 1004 NT_STATUS_OK
WriteX 11526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11532 NT_STATUS_OK
WriteX 11532 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
WriteX 11532 0 65536 65536 NT_STATUS_OK
WriteX 11532 65536 19490 19490 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
WriteX 11533 0 4096 4096 NT_STATUS_OK
Flush 11533 NT_STATUS_OK
WriteX 11533 0 4096 4096 NT_STATUS_OK
Flush 11533 NT_STATUS_OK
QUERY_FILE_INFORMATION 11533 1004 NT_STATUS_OK
WriteX 11533 0 4096 4096 NT_STATUS_OK
Flush 11533 NT_STATUS_OK
WriteX 11533 0 4096 4096 NT_STATUS_OK
Flush 11533 NT_STATUS_OK
WriteX 11533 0 4096 4096 NT_STATUS_OK
Flush 11533 NT_STATUS_OK
SET_FILE_INFORMATION 11533 1004 NT_STATUS_OK
WriteX 11533 0 4096 4096 NT_STATUS_OK
Flush 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11534 NT_STATUS_OK
SET_FILE_INFORMATION 11534 1004 NT_STATUS_OK
Close 11534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11535 NT_STATUS_OK
ReadX 11535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11536 NT_STATUS_OK
Close 11536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11538 0 4096 4096 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
ReadX 11540 4096 4096 4096 NT_STATUS_OK
ReadX 11540 8192 4096 4096 NT_STATUS_OK
ReadX 11540 12288 4096 4096 NT_STATUS_OK
ReadX 11540 16384 4096 4096 NT_STATUS_OK
ReadX 11540 20480 4096 4096 NT_STATUS_OK
ReadX 11540 24576 4096 4096 NT_STATUS_OK
ReadX 11540 28672 4096 4096 NT_STATUS_OK
ReadX 11540 32768 4096 4096 NT_STATUS_OK
ReadX 11540 36864 4096 4096 NT_STATUS_OK
ReadX 11540 40960 4096 4096 NT_STATUS_OK
ReadX 11540 45056 4096 4096 NT_STATUS_OK
ReadX 11540 49152 4096 4096 NT_STATUS_OK
ReadX 11540 53248 4096 4096 NT_STATUS_OK
ReadX 11540 57344 4096 4096 NT_STATUS_OK
ReadX 11540 61440 4096 4096 NT_STATUS_OK
ReadX 11540 65536 4096 4096 NT_STATUS_OK
ReadX 11540 69632 4096 4096 NT_STATUS_OK
ReadX 11540 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11540 1004 NT_STATUS_OK
WriteX 11540 0 4096 4096 NT_STATUS_OK
Close 11540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11541 NT_STATUS_OK
SET_FILE_INFORMATION 11541 1004 NT_STATUS_OK
Close 11541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11543 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11546 NT_STATUS_OK
WriteX 11546 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11546 258 NT_STATUS_OK
WriteX 11546 0 65536 65536 NT_STATUS_OK
WriteX 11546 65536 8866 8866 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11547 NT_STATUS_OK
ReadX 11547 0 4096 4096 NT_STATUS_OK
WriteX 11547 0 4096 4096 NT_STATUS_OK
Flush 11547 NT_STATUS_OK
SET_FILE_INFORMATION 11547 1004 NT_STATUS_OK
WriteX 11547 0 4096 4096 NT_STATUS_OK
Flush 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
Close 11549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
Close 11550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11552 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11542 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11554 NT_STATUS_OK
Close 11554 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11557 NT_STATUS_OK
WriteX 11557 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11557 258 NT_STATUS_OK
WriteX 11557 0 65536 65536 NT_STATUS_OK
WriteX 11557 65536 9298 9298 NT_STATUS_OK
Close 11557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
Flush 11558 NT_STATUS_OK
SET_FILE_INFORMATION 11558 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
Flush 11558 NT_STATUS_OK
Close 11558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11559 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
Close 11559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11564 0 4096 4096 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11565 4096 4096 4096 NT_STATUS_OK
ReadX 11565 8192 4096 4096 NT_STATUS_OK
ReadX 11565 12288 4096 4096 NT_STATUS_OK
ReadX 11565 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
Close 11567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11568 1004 NT_STATUS_OK
WriteX 11568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11569 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11574 NT_STATUS_OK
WriteX 11574 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 258 NT_STATUS_OK
WriteX 11574 0 65536 65536 NT_STATUS_OK
WriteX 11574 65536 11540 11540 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
Flush 11575 NT_STATUS_OK
SET_FILE_INFORMATION 11575 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
Flush 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11576 NT_STATUS_OK
SET_FILE_INFORMATION 11576 1004 NT_STATUS_OK
Close 11576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11578 NT_STATUS_OK
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 61440 4096 4096 NT_STATUS_OK
ReadX 11580 126976 4096 4096 NT_STATUS_OK
WriteX 11580 0 65536 65536 NT_STATUS_OK
WriteX 11580 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 61440 4096 4096 NT_STATUS_OK
ReadX 11581 126976 4096 4096 NT_STATUS_OK
ReadX 11581 192512 4096 4096 NT_STATUS_OK
ReadX 11581 258048 4096 4096 NT_STATUS_OK
WriteX 11581 0 65536 65536 NT_STATUS_OK
WriteX 11581 65536 65536 65536 NT_STATUS_OK
WriteX 11581 131072 65536 65536 NT_STATUS_OK
WriteX 11581 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11582 NT_STATUS_OK
ReadX 11582 61440 4096 4096 NT_STATUS_OK
ReadX 11582 126976 4096 4096 NT_STATUS_OK
ReadX 11582 192512 4096 4096 NT_STATUS_OK
ReadX 11582 258048 4096 4096 NT_STATUS_OK
ReadX 11582 323584 4096 4096 NT_STATUS_OK
ReadX 11582 389120 4096 4096 NT_STATUS_OK
ReadX 11582 454656 4096 4096 NT_STATUS_OK
ReadX 11582 520192 4096 4096 NT_STATUS_OK
WriteX 11582 0 65536 65536 NT_STATUS_OK
WriteX 11582 65536 65536 65536 NT_STATUS_OK
WriteX 11582 131072 65536 65536 NT_STATUS_OK
WriteX 11582 196608 65536 65536 NT_STATUS_OK
WriteX 11582 262144 65536 65536 NT_STATUS_OK
WriteX 11582 327680 65536 65536 NT_STATUS_OK
WriteX 11582 393216 65536 65536 NT_STATUS_OK
WriteX 11582 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
ReadX 11583 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11584 NT_STATUS_OK
WriteX 11584 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11584 258 NT_STATUS_OK
WriteX 11584 0 53 53 NT_STATUS_OK
Close 11584 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11585 NT_STATUS_OK
Close 11585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Close 11580 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11583 8192 4096 4096 NT_STATUS_OK
ReadX 11583 12288 4096 4096 NT_STATUS_OK
WriteX 11587 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11587 258 NT_STATUS_OK
ReadX 11583 16384 4096 4096 NT_STATUS_OK
ReadX 11583 20480 4096 4096 NT_STATUS_OK
WriteX 11587 0 15360 15360 NT_STATUS_OK
Close 11587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
WriteX 11588 0 4096 4096 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11589 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11592 NT_STATUS_OK
Close 11592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11591 4096 4096 4096 NT_STATUS_OK
ReadX 11591 8192 4096 4096 NT_STATUS_OK
ReadX 11591 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
ReadX 11594 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
ReadX 11595 4096 4096 4096 NT_STATUS_OK
ReadX 11595 8192 4096 4096 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11596 NT_STATUS_OK
WriteX 11596 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11596 258 NT_STATUS_OK
WriteX 11596 0 15360 15360 NT_STATUS_OK
Close 11596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11597 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11597 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11601 NT_STATUS_OK
SET_FILE_INFORMATION 11601 1004 NT_STATUS_OK
Close 11601 NT_STATUS_OK
WriteX 11597 0 4096 4096 NT_STATUS_OK
Close 11597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11602 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
ReadX 11604 4096 4096 4096 NT_STATUS_OK
ReadX 11604 8192 4096 4096 NT_STATUS_OK
ReadX 11604 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11604 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11606 NT_STATUS_OK
WriteX 11606 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 53 53 NT_STATUS_OK
Close 11606 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11605 4096 4096 4096 NT_STATUS_OK
ReadX 11605 8192 4096 4096 NT_STATUS_OK
ReadX 11605 12288 4096 4096 NT_STATUS_OK
WriteX 11609 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11609 258 NT_STATUS_OK
WriteX 11609 0 12006 12006 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11610 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11610 1004 NT_STATUS_OK
WriteX 11610 0 4096 4096 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11611 NT_STATUS_OK
Close 11611 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11613 4096 4096 4096 NT_STATUS_OK
ReadX 11613 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11616 NT_STATUS_OK
WriteX 11616 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 258 NT_STATUS_OK
WriteX 11616 0 11991 11991 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11617 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11617 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11618 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11621 NT_STATUS_OK
SET_FILE_INFORMATION 11621 1004 NT_STATUS_OK
Close 11621 NT_STATUS_OK
WriteX 11617 0 4096 4096 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11622 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11624 NT_STATUS_OK
ReadX 11624 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11624 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11624 1004 NT_STATUS_OK
ReadX 11624 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11624 1004 NT_STATUS_OK
WriteX 11624 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11624 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11624 1004 NT_STATUS_OK
Close 11600 NT_STATUS_OK
WriteX 11604 0 19054 19054 NT_STATUS_OK
WriteX 11624 0 12288 12288 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11627 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Close 11624 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 61440 61440 NT_STATUS_OK
ReadX 11631 61440 4096 4096 NT_STATUS_OK
ReadX 11631 65536 61440 61440 NT_STATUS_OK
ReadX 11631 126976 4096 4096 NT_STATUS_OK
ReadX 11631 131072 61440 61440 NT_STATUS_OK
ReadX 11631 192512 4096 4096 NT_STATUS_OK
ReadX 11631 196608 61440 61440 NT_STATUS_OK
ReadX 11631 258048 4096 4096 NT_STATUS_OK
ReadX 11631 262144 61440 61440 NT_STATUS_OK
ReadX 11631 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11632 NT_STATUS_OK
ReadX 11632 0 61440 61440 NT_STATUS_OK
ReadX 11632 61440 4096 4096 NT_STATUS_OK
ReadX 11632 65536 61440 61440 NT_STATUS_OK
ReadX 11632 126976 4096 4096 NT_STATUS_OK
ReadX 11632 131072 61440 61440 NT_STATUS_OK
ReadX 11632 192512 4096 4096 NT_STATUS_OK
ReadX 11632 196608 61440 61440 NT_STATUS_OK
ReadX 11632 258048 4096 4096 NT_STATUS_OK
ReadX 11632 262144 61440 61440 NT_STATUS_OK
ReadX 11632 323584 4096 4096 NT_STATUS_OK
ReadX 11632 327680 61440 61440 NT_STATUS_OK
ReadX 11632 389120 4096 4096 NT_STATUS_OK
ReadX 11632 393216 61440 61440 NT_STATUS_OK
ReadX 11632 454656 4096 4096 NT_STATUS_OK
ReadX 11632 458752 61440 61440 NT_STATUS_OK
ReadX 11632 520192 4096 4096 NT_STATUS_OK
ReadX 11632 524288 61440 61440 NT_STATUS_OK
ReadX 11632 585728 4096 4096 NT_STATUS_OK
ReadX 11632 589824 61440 61440 NT_STATUS_OK
ReadX 11632 651264 4096 4096 NT_STATUS_OK
ReadX 11632 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11633 NT_STATUS_OK
ReadX 11633 0 61440 61440 NT_STATUS_OK
ReadX 11633 61440 4096 4096 NT_STATUS_OK
ReadX 11633 65536 61440 61440 NT_STATUS_OK
ReadX 11633 126976 4096 4096 NT_STATUS_OK
ReadX 11633 131072 61440 61440 NT_STATUS_OK
ReadX 11633 192512 4096 4096 NT_STATUS_OK
ReadX 11633 196608 61440 61440 NT_STATUS_OK
ReadX 11633 258048 4096 4096 NT_STATUS_OK
ReadX 11633 262144 61440 61440 NT_STATUS_OK
ReadX 11633 323584 4096 4096 NT_STATUS_OK
ReadX 11633 327680 61440 61440 NT_STATUS_OK
ReadX 11633 389120 4096 4096 NT_STATUS_OK
ReadX 11633 393216 61440 61440 NT_STATUS_OK
ReadX 11633 454656 4096 4096 NT_STATUS_OK
ReadX 11633 458752 61440 61440 NT_STATUS_OK
ReadX 11633 520192 4096 4096 NT_STATUS_OK
ReadX 11633 524288 61440 61440 NT_STATUS_OK
ReadX 11633 585728 4096 4096 NT_STATUS_OK
ReadX 11633 589824 61440 61440 NT_STATUS_OK
ReadX 11633 651264 4096 4096 NT_STATUS_OK
ReadX 11633 655360 61440 61440 NT_STATUS_OK
ReadX 11633 716800 4096 4096 NT_STATUS_OK
ReadX 11633 720896 61440 61440 NT_STATUS_OK
ReadX 11633 782336 4096 4096 NT_STATUS_OK
ReadX 11633 786432 61440 61440 NT_STATUS_OK
ReadX 11633 847872 4096 4096 NT_STATUS_OK
ReadX 11633 851968 61440 61440 NT_STATUS_OK
ReadX 11633 913408 4096 4096 NT_STATUS_OK
ReadX 11633 917504 61440 61440 NT_STATUS_OK
ReadX 11633 978944 4096 4096 NT_STATUS_OK
ReadX 11633 983040 61440 61440 NT_STATUS_OK
ReadX 11633 1044480 4096 4096 NT_STATUS_OK
ReadX 11633 1048576 61440 61440 NT_STATUS_OK
ReadX 11633 1110016 4096 4096 NT_STATUS_OK
ReadX 11633 1114112 61440 61440 NT_STATUS_OK
ReadX 11633 1175552 4096 4096 NT_STATUS_OK
ReadX 11633 1179648 61440 61440 NT_STATUS_OK
ReadX 11633 1241088 4096 4096 NT_STATUS_OK
ReadX 11633 1245184 61440 61440 NT_STATUS_OK
ReadX 11633 1306624 4096 4096 NT_STATUS_OK
ReadX 11633 1310720 61440 61440 NT_STATUS_OK
ReadX 11633 1372160 4096 4096 NT_STATUS_OK
ReadX 11633 1376256 61440 61440 NT_STATUS_OK
ReadX 11633 1437696 4096 4096 NT_STATUS_OK
ReadX 11633 1441792 61440 61440 NT_STATUS_OK
ReadX 11633 1503232 4096 4096 NT_STATUS_OK
ReadX 11633 1507328 61440 61440 NT_STATUS_OK
ReadX 11633 1568768 4096 4096 NT_STATUS_OK
ReadX 11633 1572864 61440 61440 NT_STATUS_OK
ReadX 11633 1634304 4096 4096 NT_STATUS_OK
ReadX 11633 1638400 61440 61440 NT_STATUS_OK
ReadX 11633 1699840 4096 4096 NT_STATUS_OK
ReadX 11633 1703936 61440 61440 NT_STATUS_OK
ReadX 11633 1765376 4096 4096 NT_STATUS_OK
ReadX 11633 1769472 61440 61440 NT_STATUS_OK
ReadX 11633 1830912 4096 4096 NT_STATUS_OK
ReadX 11633 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11640 NT_STATUS_OK
QUERY_FILE_INFORMATION 11640 1004 NT_STATUS_OK
WriteX 11640 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11640 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11642 NT_STATUS_OK
WriteX 11642 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 491 491 NT_STATUS_OK
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11640 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11645 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11646 NT_STATUS_OK
WriteX 11646 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11646 258 NT_STATUS_OK
WriteX 11646 0 543 543 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11632 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11660 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 1004 NT_STATUS_OK
WriteX 11660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 258 NT_STATUS_OK
WriteX 11660 0 2048 2048 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11666 NT_STATUS_OK
WriteX 11666 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11666 258 NT_STATUS_OK
WriteX 11666 0 2048 2048 NT_STATUS_OK
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11671 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11672 NT_STATUS_OK
WriteX 11672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
WriteX 11672 0 2048 2048 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 2048 2048 NT_STATUS_OK
ReadX 11651 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11667 0 4096 4096 NT_STATUS_OK
WriteX 11651 0 8192 8192 NT_STATUS_OK
WriteX 11652 0 4096 4096 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11677 NT_STATUS_OK
QUERY_FILE_INFORMATION 11677 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11679 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11697 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 1004 NT_STATUS_OK
WriteX 11697 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 258 NT_STATUS_OK
WriteX 11697 0 2048 2048 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11699 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11705 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1004 NT_STATUS_OK
WriteX 11705 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 258 NT_STATUS_OK
WriteX 11705 0 2048 2048 NT_STATUS_OK
Close 11705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11698 0 4096 4096 NT_STATUS_OK
Flush 11698 NT_STATUS_OK
WriteX 11706 0 4096 4096 NT_STATUS_OK
Flush 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11698 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11706 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11700 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11708 NT_STATUS_OK
WriteX 11708 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11708 258 NT_STATUS_OK
WriteX 11708 0 4096 4096 NT_STATUS_OK
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11711 NT_STATUS_OK
WriteX 11711 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 258 NT_STATUS_OK
WriteX 11711 0 4096 4096 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11712 0 4096 4096 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11680 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11718 NT_STATUS_OK
Close 11718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11719 NT_STATUS_OK
WriteX 11719 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11719 258 NT_STATUS_OK
WriteX 11719 0 2048 2048 NT_STATUS_OK
Close 11719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11722 NT_STATUS_OK
ReadX 11722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11729 NT_STATUS_OK
ReadX 11729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11730 NT_STATUS_OK
ReadX 11730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11731 NT_STATUS_OK
ReadX 11731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11734 NT_STATUS_OK
QUERY_FILE_INFORMATION 11734 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11720 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Close 11730 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Close 11721 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11736 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11740 NT_STATUS_OK
ReadX 11740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11747 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11756 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 1004 NT_STATUS_OK
WriteX 11756 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 258 NT_STATUS_OK
WriteX 11756 0 2048 2048 NT_STATUS_OK
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11776 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 1004 NT_STATUS_OK
WriteX 11776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 258 NT_STATUS_OK
WriteX 11776 0 2048 2048 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
Flush 11757 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
Flush 11769 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
Flush 11777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11759 4096 16384 16384 NT_STATUS_OK
ReadX 11739 4096 16384 16384 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 2048 2048 NT_STATUS_OK
WriteX 11779 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11780 NT_STATUS_OK
QUERY_FILE_INFORMATION 11780 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Close 11740 NT_STATUS_OK
Close 11741 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11782 NT_STATUS_OK
QUERY_FILE_INFORMATION 11782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11784 NT_STATUS_OK
QUERY_FILE_INFORMATION 11784 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11787 4096 16384 16384 NT_STATUS_OK
WriteX 11787 0 4096 4096 NT_STATUS_OK
WriteX 11788 0 4096 4096 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
WriteX 11790 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11802 NT_STATUS_OK
ReadX 11802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11804 NT_STATUS_OK
ReadX 11804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 0 8192 8192 NT_STATUS_OK
ReadX 11793 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11807 0 4096 4096 NT_STATUS_OK
ReadX 11807 4096 4096 4096 NT_STATUS_OK
ReadX 11807 8192 4096 4096 NT_STATUS_OK
WriteX 11793 0 4096 4096 NT_STATUS_OK
WriteX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
ReadX 11808 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11787 0 4096 4096 NT_STATUS_OK
WriteX 11788 0 4096 4096 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
WriteX 11790 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11813 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 1004 NT_STATUS_OK
WriteX 11813 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 258 NT_STATUS_OK
WriteX 11813 0 2048 2048 NT_STATUS_OK
Close 11813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
ReadX 11816 4096 4096 4096 NT_STATUS_OK
WriteX 11816 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
ReadX 11818 4096 4096 4096 NT_STATUS_OK
WriteX 11818 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11819 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Close 11804 NT_STATUS_OK
Close 11800 NT_STATUS_OK
Close 11801 NT_STATUS_OK
Close 11802 NT_STATUS_OK
Close 11803 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11821 0 4096 4096 NT_STATUS_OK
ReadX 11821 4096 4096 4096 NT_STATUS_OK
ReadX 11821 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
ReadX 11822 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11839 NT_STATUS_OK
QUERY_FILE_INFORMATION 11839 1004 NT_STATUS_OK
WriteX 11839 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11839 258 NT_STATUS_OK
WriteX 11839 0 2048 2048 NT_STATUS_OK
Close 11839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11845 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 1004 NT_STATUS_OK
WriteX 11845 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 2048 2048 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11821 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11829 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11849 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11847 NT_STATUS_OK
Close 11848 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11824 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11830 NT_STATUS_OK
Close 11831 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11851 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 61440 4096 4096 NT_STATUS_OK
ReadX 11853 126976 4096 4096 NT_STATUS_OK
WriteX 11853 0 65536 65536 NT_STATUS_OK
WriteX 11853 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 61440 4096 4096 NT_STATUS_OK
ReadX 11854 126976 4096 4096 NT_STATUS_OK
ReadX 11854 192512 4096 4096 NT_STATUS_OK
ReadX 11854 258048 4096 4096 NT_STATUS_OK
WriteX 11854 0 65536 65536 NT_STATUS_OK
WriteX 11854 65536 65536 65536 NT_STATUS_OK
WriteX 11854 131072 65536 65536 NT_STATUS_OK
WriteX 11854 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 61440 4096 4096 NT_STATUS_OK
ReadX 11855 126976 4096 4096 NT_STATUS_OK
ReadX 11855 192512 4096 4096 NT_STATUS_OK
ReadX 11855 258048 4096 4096 NT_STATUS_OK
ReadX 11855 323584 4096 4096 NT_STATUS_OK
ReadX 11855 389120 4096 4096 NT_STATUS_OK
ReadX 11855 454656 4096 4096 NT_STATUS_OK
ReadX 11855 520192 4096 4096 NT_STATUS_OK
WriteX 11855 0 65536 65536 NT_STATUS_OK
WriteX 11855 65536 65536 65536 NT_STATUS_OK
WriteX 11855 131072 65536 65536 NT_STATUS_OK
WriteX 11855 196608 65536 65536 NT_STATUS_OK
WriteX 11855 262144 65536 65536 NT_STATUS_OK
WriteX 11855 327680 65536 65536 NT_STATUS_OK
WriteX 11855 393216 65536 65536 NT_STATUS_OK
WriteX 11855 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11856 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11856 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11856 8192 4096 4096 NT_STATUS_OK
ReadX 11856 12288 4096 4096 NT_STATUS_OK
ReadX 11856 16384 4096 4096 NT_STATUS_OK
ReadX 11856 20480 4096 4096 NT_STATUS_OK
ReadX 11856 24576 4096 4096 NT_STATUS_OK
ReadX 11856 28672 4096 4096 NT_STATUS_OK
ReadX 11856 32768 4096 4096 NT_STATUS_OK
ReadX 11856 36864 4096 4096 NT_STATUS_OK
ReadX 11856 40960 4096 4096 NT_STATUS_OK
ReadX 11856 45056 4096 4096 NT_STATUS_OK
ReadX 11856 49152 4096 4096 NT_STATUS_OK
ReadX 11856 53248 4096 4096 NT_STATUS_OK
ReadX 11856 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11856 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11859 NT_STATUS_OK
WriteX 11859 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11859 1004 NT_STATUS_OK
WriteX 11859 0 57088 57088 NT_STATUS_OK
WriteX 11859 0 4096 4096 NT_STATUS_OK
Flush 11859 NT_STATUS_OK
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11860 NT_STATUS_OK
SET_FILE_INFORMATION 11860 1004 NT_STATUS_OK
Close 11860 NT_STATUS_OK
SET_FILE_INFORMATION 11859 1004 NT_STATUS_OK
WriteX 11859 0 4096 4096 NT_STATUS_OK
Close 11859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11863 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11864 NT_STATUS_OK
WriteX 11864 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11864 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
WriteX 11864 0 51456 51456 NT_STATUS_OK
WriteX 11864 0 4096 4096 NT_STATUS_OK
Flush 11864 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
WriteX 11864 0 4096 4096 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11868 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11873 NT_STATUS_OK
WriteX 11873 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11873 258 NT_STATUS_OK
WriteX 11873 0 53077 53077 NT_STATUS_OK
Close 11873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11874 NT_STATUS_OK
WriteX 11874 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11874 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11874 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11874 1004 NT_STATUS_OK
WriteX 11874 0 65536 65536 NT_STATUS_OK
WriteX 11874 65536 1856 1856 NT_STATUS_OK
WriteX 11874 0 4096 4096 NT_STATUS_OK
Flush 11874 NT_STATUS_OK
SET_FILE_INFORMATION 11874 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11874 1004 NT_STATUS_OK
WriteX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Close 11868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11883 NT_STATUS_OK
WriteX 11883 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11883 258 NT_STATUS_OK
WriteX 11883 0 7983 7983 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11885 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11888 NT_STATUS_OK
WriteX 11888 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 258 NT_STATUS_OK
WriteX 11888 0 65536 65536 NT_STATUS_OK
WriteX 11888 65536 65536 65536 NT_STATUS_OK
WriteX 11888 131072 65536 65536 NT_STATUS_OK
WriteX 11888 196608 65536 65536 NT_STATUS_OK
WriteX 11888 262144 65536 65536 NT_STATUS_OK
WriteX 11888 327680 65536 65536 NT_STATUS_OK
WriteX 11888 393216 65536 65536 NT_STATUS_OK
WriteX 11888 458752 46731 46731 NT_STATUS_OK
Close 11888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11878 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 65536 65536 NT_STATUS_OK
WriteX 11889 65536 22848 22848 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Flush 11889 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11893 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11894 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
ReadX 11894 8192 4096 4096 NT_STATUS_OK
ReadX 11894 12288 4096 4096 NT_STATUS_OK
ReadX 11894 16384 4096 4096 NT_STATUS_OK
ReadX 11894 20480 4096 4096 NT_STATUS_OK
ReadX 11894 24576 4096 4096 NT_STATUS_OK
ReadX 11894 28672 4096 4096 NT_STATUS_OK
ReadX 11894 32768 4096 4096 NT_STATUS_OK
ReadX 11894 36864 4096 4096 NT_STATUS_OK
ReadX 11894 40960 4096 4096 NT_STATUS_OK
ReadX 11894 45056 4096 4096 NT_STATUS_OK
ReadX 11894 49152 4096 4096 NT_STATUS_OK
ReadX 11894 53248 4096 4096 NT_STATUS_OK
ReadX 11894 57344 4096 4096 NT_STATUS_OK
ReadX 11894 61440 4096 4096 NT_STATUS_OK
ReadX 11894 65536 4096 4096 NT_STATUS_OK
ReadX 11894 69632 4096 4096 NT_STATUS_OK
ReadX 11894 73728 4096 4096 NT_STATUS_OK
ReadX 11894 77824 4096 4096 NT_STATUS_OK
ReadX 11894 81920 4096 4096 NT_STATUS_OK
ReadX 11894 86016 4096 4096 NT_STATUS_OK
ReadX 11894 90112 4096 4096 NT_STATUS_OK
ReadX 11894 94208 4096 4096 NT_STATUS_OK
ReadX 11894 98304 4096 4096 NT_STATUS_OK
ReadX 11894 102400 4096 4096 NT_STATUS_OK
ReadX 11894 106496 4096 4096 NT_STATUS_OK
ReadX 11894 110592 4096 4096 NT_STATUS_OK
ReadX 11894 114688 4096 4096 NT_STATUS_OK
ReadX 11894 118784 4096 4096 NT_STATUS_OK
ReadX 11894 122880 4096 4096 NT_STATUS_OK
ReadX 11894 126976 4096 4096 NT_STATUS_OK
ReadX 11894 131072 4096 4096 NT_STATUS_OK
ReadX 11894 135168 4096 4096 NT_STATUS_OK
ReadX 11894 139264 4096 4096 NT_STATUS_OK
ReadX 11894 143360 4096 4096 NT_STATUS_OK
ReadX 11894 147456 4096 4096 NT_STATUS_OK
ReadX 11894 151552 4096 4096 NT_STATUS_OK
ReadX 11894 155648 4096 4096 NT_STATUS_OK
ReadX 11894 159744 4096 4096 NT_STATUS_OK
ReadX 11894 163840 4096 4096 NT_STATUS_OK
ReadX 11894 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11894 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11897 NT_STATUS_OK
WriteX 11897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11897 258 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11898 NT_STATUS_OK
SET_FILE_INFORMATION 11898 1004 NT_STATUS_OK
Close 11898 NT_STATUS_OK
WriteX 11897 0 42388 42388 NT_STATUS_OK
Close 11897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11899 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
ReadX 11901 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11902 NT_STATUS_OK
WriteX 11902 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11902 258 NT_STATUS_OK
SET_FILE_INFORMATION 11902 1004 NT_STATUS_OK
WriteX 11902 0 42652 42652 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
ReadX 11906 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11908 NT_STATUS_OK
Close 11908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11911 NT_STATUS_OK
WriteX 11911 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11911 258 NT_STATUS_OK
WriteX 11911 0 65536 65536 NT_STATUS_OK
WriteX 11911 65536 49 49 NT_STATUS_OK
Close 11911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 61440 61440 NT_STATUS_OK
ReadX 11912 61440 4096 4096 NT_STATUS_OK
ReadX 11912 65536 61440 61440 NT_STATUS_OK
ReadX 11912 126976 4096 4096 NT_STATUS_OK
ReadX 11912 131072 61440 61440 NT_STATUS_OK
ReadX 11912 192512 4096 4096 NT_STATUS_OK
ReadX 11912 196608 61440 61440 NT_STATUS_OK
ReadX 11912 258048 4096 4096 NT_STATUS_OK
ReadX 11912 262144 61440 61440 NT_STATUS_OK
ReadX 11912 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 61440 61440 NT_STATUS_OK
ReadX 11913 61440 4096 4096 NT_STATUS_OK
ReadX 11913 65536 61440 61440 NT_STATUS_OK
ReadX 11913 126976 4096 4096 NT_STATUS_OK
ReadX 11913 131072 61440 61440 NT_STATUS_OK
ReadX 11913 192512 4096 4096 NT_STATUS_OK
ReadX 11913 196608 61440 61440 NT_STATUS_OK
ReadX 11913 258048 4096 4096 NT_STATUS_OK
ReadX 11913 262144 61440 61440 NT_STATUS_OK
ReadX 11913 323584 4096 4096 NT_STATUS_OK
ReadX 11913 327680 61440 61440 NT_STATUS_OK
ReadX 11913 389120 4096 4096 NT_STATUS_OK
ReadX 11913 393216 61440 61440 NT_STATUS_OK
ReadX 11913 454656 4096 4096 NT_STATUS_OK
ReadX 11913 458752 61440 61440 NT_STATUS_OK
ReadX 11913 520192 4096 4096 NT_STATUS_OK
ReadX 11913 524288 61440 61440 NT_STATUS_OK
ReadX 11913 585728 4096 4096 NT_STATUS_OK
ReadX 11913 589824 61440 61440 NT_STATUS_OK
ReadX 11913 651264 4096 4096 NT_STATUS_OK
ReadX 11913 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 61440 61440 NT_STATUS_OK
ReadX 11914 61440 4096 4096 NT_STATUS_OK
ReadX 11914 65536 61440 61440 NT_STATUS_OK
ReadX 11914 126976 4096 4096 NT_STATUS_OK
ReadX 11914 131072 61440 61440 NT_STATUS_OK
ReadX 11914 192512 4096 4096 NT_STATUS_OK
ReadX 11914 196608 61440 61440 NT_STATUS_OK
ReadX 11914 258048 4096 4096 NT_STATUS_OK
ReadX 11914 262144 61440 61440 NT_STATUS_OK
ReadX 11914 323584 4096 4096 NT_STATUS_OK
ReadX 11914 327680 61440 61440 NT_STATUS_OK
ReadX 11914 389120 4096 4096 NT_STATUS_OK
ReadX 11914 393216 61440 61440 NT_STATUS_OK
ReadX 11914 454656 4096 4096 NT_STATUS_OK
ReadX 11914 458752 61440 61440 NT_STATUS_OK
ReadX 11914 520192 4096 4096 NT_STATUS_OK
ReadX 11914 524288 61440 61440 NT_STATUS_OK
ReadX 11914 585728 4096 4096 NT_STATUS_OK
ReadX 11914 589824 61440 61440 NT_STATUS_OK
ReadX 11914 651264 4096 4096 NT_STATUS_OK
ReadX 11914 655360 61440 61440 NT_STATUS_OK
ReadX 11914 716800 4096 4096 NT_STATUS_OK
ReadX 11914 720896 61440 61440 NT_STATUS_OK
ReadX 11914 782336 4096 4096 NT_STATUS_OK
ReadX 11914 786432 61440 61440 NT_STATUS_OK
ReadX 11914 847872 4096 4096 NT_STATUS_OK
ReadX 11914 851968 61440 61440 NT_STATUS_OK
ReadX 11914 913408 4096 4096 NT_STATUS_OK
ReadX 11914 917504 61440 61440 NT_STATUS_OK
ReadX 11914 978944 4096 4096 NT_STATUS_OK
ReadX 11914 983040 61440 61440 NT_STATUS_OK
ReadX 11914 1044480 4096 4096 NT_STATUS_OK
ReadX 11914 1048576 61440 61440 NT_STATUS_OK
ReadX 11914 1110016 4096 4096 NT_STATUS_OK
ReadX 11914 1114112 61440 61440 NT_STATUS_OK
ReadX 11914 1175552 4096 4096 NT_STATUS_OK
ReadX 11914 1179648 61440 61440 NT_STATUS_OK
ReadX 11914 1241088 4096 4096 NT_STATUS_OK
ReadX 11914 1245184 61440 61440 NT_STATUS_OK
ReadX 11914 1306624 4096 4096 NT_STATUS_OK
ReadX 11914 1310720 61440 61440 NT_STATUS_OK
ReadX 11914 1372160 4096 4096 NT_STATUS_OK
ReadX 11914 1376256 61440 61440 NT_STATUS_OK
ReadX 11914 1437696 4096 4096 NT_STATUS_OK
ReadX 11914 1441792 61440 61440 NT_STATUS_OK
ReadX 11914 1503232 4096 4096 NT_STATUS_OK
ReadX 11914 1507328 61440 61440 NT_STATUS_OK
ReadX 11914 1568768 4096 4096 NT_STATUS_OK
ReadX 11914 1572864 61440 61440 NT_STATUS_OK
ReadX 11914 1634304 4096 4096 NT_STATUS_OK
ReadX 11914 1638400 61440 61440 NT_STATUS_OK
ReadX 11914 1699840 4096 4096 NT_STATUS_OK
ReadX 11914 1703936 61440 61440 NT_STATUS_OK
ReadX 11914 1765376 4096 4096 NT_STATUS_OK
ReadX 11914 1769472 61440 61440 NT_STATUS_OK
ReadX 11914 1830912 4096 4096 NT_STATUS_OK
ReadX 11914 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11916 NT_STATUS_OK
QUERY_FILE_INFORMATION 11916 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11916 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11916 1005 NT_STATUS_OK
ReadX 11916 2156 24 24 NT_STATUS_OK
ReadX 11916 2139 276 276 NT_STATUS_OK
ReadX 11916 2136 14 14 NT_STATUS_OK
ReadX 11916 2136 7 7 NT_STATUS_OK
ReadX 11916 2138 12 12 NT_STATUS_OK
ReadX 11916 2137 8 8 NT_STATUS_OK
ReadX 11916 2135 15 15 NT_STATUS_OK
ReadX 11916 0 16 16 NT_STATUS_OK
ReadX 11916 16 2048 2048 NT_STATUS_OK
ReadX 11916 2064 2048 2048 NT_STATUS_OK
ReadX 11916 257 2048 2048 NT_STATUS_OK
ReadX 11916 385 2048 2048 NT_STATUS_OK
ReadX 11916 513 2048 2048 NT_STATUS_OK
ReadX 11916 641 2048 2048 NT_STATUS_OK
ReadX 11916 769 2048 2048 NT_STATUS_OK
ReadX 11916 897 2048 2048 NT_STATUS_OK
ReadX 11916 1025 2048 2048 NT_STATUS_OK
ReadX 11916 1153 2048 2048 NT_STATUS_OK
ReadX 11916 1281 2048 2048 NT_STATUS_OK
ReadX 11916 1409 2048 2048 NT_STATUS_OK
ReadX 11916 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11912 NT_STATUS_OK
Close 11913 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11921 NT_STATUS_OK
WriteX 11921 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11921 258 NT_STATUS_OK
WriteX 11921 0 10575 10575 NT_STATUS_OK
Flush 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11926 NT_STATUS_OK
LockX 11926 2147483538 1 NT_STATUS_OK
UnlockX 11926 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11926 1005 NT_STATUS_OK
ReadX 11926 0 512 512 NT_STATUS_OK
ReadX 11926 512 512 512 NT_STATUS_OK
ReadX 11926 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11926 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11926 1004 NT_STATUS_OK
Close 11926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11927 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 1005 NT_STATUS_OK
ReadX 11927 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11928 NT_STATUS_OK
LockX 11928 2147483538 1 NT_STATUS_OK
UnlockX 11928 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11928 1005 NT_STATUS_OK
ReadX 11928 0 512 512 NT_STATUS_OK
ReadX 11928 512 512 512 NT_STATUS_OK
ReadX 11928 1024 512 512 NT_STATUS_OK
ReadX 11928 288 20 20 NT_STATUS_OK
ReadX 11928 308 2084 2084 NT_STATUS_OK
ReadX 11928 388 2084 2084 NT_STATUS_OK
ReadX 11928 388 2084 2084 NT_STATUS_OK
ReadX 11915 2157 1386 1386 NT_STATUS_OK
ReadX 11928 2472 399 399 NT_STATUS_OK
ReadX 11928 3072 1536 1536 NT_STATUS_OK
ReadX 11928 544 149 149 NT_STATUS_OK
ReadX 11928 693 485 485 NT_STATUS_OK
Close 11928 NT_STATUS_OK
ReadX 11915 2157 4096 4096 NT_STATUS_OK
ReadX 11915 6253 4096 4096 NT_STATUS_OK
ReadX 11915 10349 4096 4096 NT_STATUS_OK
ReadX 11915 14445 4096 4096 NT_STATUS_OK
ReadX 11915 18541 4096 4096 NT_STATUS_OK
ReadX 11915 22637 256 256 NT_STATUS_OK
ReadX 11915 22893 4096 4096 NT_STATUS_OK
ReadX 11915 26989 4096 4096 NT_STATUS_OK
ReadX 11915 31085 4096 4096 NT_STATUS_OK
ReadX 11915 35181 4096 4096 NT_STATUS_OK
ReadX 11915 39277 4096 4096 NT_STATUS_OK
ReadX 11915 43373 4096 4096 NT_STATUS_OK
ReadX 11915 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11915 2157 1024 1024 NT_STATUS_OK
ReadX 11915 1667 4688 4688 NT_STATUS_OK
ReadX 11915 6355 3516 3516 NT_STATUS_OK
ReadX 11915 9871 16384 16384 NT_STATUS_OK
ReadX 11915 26255 3771 3771 NT_STATUS_OK
ReadX 11915 30026 2048 2048 NT_STATUS_OK
ReadX 11915 32074 1024 1024 NT_STATUS_OK
ReadX 11915 33098 6652 6652 NT_STATUS_OK
ReadX 11915 39750 16384 16384 NT_STATUS_OK
ReadX 11915 56134 10496 10496 NT_STATUS_OK
ReadX 11915 66630 1784 1784 NT_STATUS_OK
ReadX 11915 68414 90 90 NT_STATUS_OK
ReadX 11915 68504 273 273 NT_STATUS_OK
ReadX 11915 68777 1600 1600 NT_STATUS_OK
ReadX 11915 70377 640 640 NT_STATUS_OK
ReadX 11915 71017 1280 1280 NT_STATUS_OK
ReadX 11915 72297 8464 8464 NT_STATUS_OK
ReadX 11915 80761 158 158 NT_STATUS_OK
ReadX 11915 80919 912 912 NT_STATUS_OK
ReadX 11915 81831 1980 1980 NT_STATUS_OK
ReadX 11915 83811 2256 2256 NT_STATUS_OK
ReadX 11915 86067 400 400 NT_STATUS_OK
ReadX 11915 86467 252 252 NT_STATUS_OK
ReadX 11915 86719 42 42 NT_STATUS_OK
ReadX 11915 86761 725 725 NT_STATUS_OK
ReadX 11915 2009 512 512 NT_STATUS_OK
ReadX 11915 3895 9 9 NT_STATUS_OK
ReadX 11915 3781 46 46 NT_STATUS_OK
ReadX 11915 4059 92 92 NT_STATUS_OK
ReadX 11915 3781 92 92 NT_STATUS_OK
ReadX 11915 3986 184 184 NT_STATUS_OK
ReadX 11915 3987 16384 16384 NT_STATUS_OK
ReadX 11915 3902 16384 16384 NT_STATUS_OK
ReadX 11915 3781 10240 10240 NT_STATUS_OK
ReadX 11915 3821 16384 16384 NT_STATUS_OK
ReadX 11915 3891 935 935 NT_STATUS_OK
ReadX 11915 4060 10240 10240 NT_STATUS_OK
ReadX 11915 4059 184 184 NT_STATUS_OK
ReadX 11915 256 184 184 NT_STATUS_OK
ReadX 11915 256 1026 1026 NT_STATUS_OK
ReadX 11915 3901 326 326 NT_STATUS_OK
ReadX 11915 3899 652 652 NT_STATUS_OK
ReadX 11915 256 2 2 NT_STATUS_OK
ReadX 11915 258 4948 4948 NT_STATUS_OK
Close 11915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11933 NT_STATUS_OK
WriteX 11933 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11933 258 NT_STATUS_OK
WriteX 11933 0 65536 65536 NT_STATUS_OK
WriteX 11933 65536 65536 65536 NT_STATUS_OK
WriteX 11933 131072 65536 65536 NT_STATUS_OK
WriteX 11933 196608 65536 65536 NT_STATUS_OK
WriteX 11933 262144 65536 65536 NT_STATUS_OK
WriteX 11933 327680 65536 65536 NT_STATUS_OK
WriteX 11933 393216 65536 65536 NT_STATUS_OK
WriteX 11933 458752 65536 65536 NT_STATUS_OK
WriteX 11933 524288 65536 65536 NT_STATUS_OK
WriteX 11933 589824 35257 35257 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11938 NT_STATUS_OK
WriteX 11938 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11938 258 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 65536 65536 NT_STATUS_OK
WriteX 11938 131072 65536 65536 NT_STATUS_OK
WriteX 11938 196608 65536 65536 NT_STATUS_OK
WriteX 11938 262144 65536 65536 NT_STATUS_OK
WriteX 11938 327680 65536 65536 NT_STATUS_OK
WriteX 11938 393216 65536 65536 NT_STATUS_OK
WriteX 11938 458752 65536 65536 NT_STATUS_OK
WriteX 11938 524288 65536 65536 NT_STATUS_OK
WriteX 11938 589824 57598 57598 NT_STATUS_OK
Close 11938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11940 NT_STATUS_OK
WriteX 11940 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11940 258 NT_STATUS_OK
WriteX 11940 0 12543 12543 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11946 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
ReadX 11946 1938 24 24 NT_STATUS_OK
ReadX 11946 1920 276 276 NT_STATUS_OK
ReadX 11946 1918 14 14 NT_STATUS_OK
ReadX 11946 1918 7 7 NT_STATUS_OK
ReadX 11946 1919 12 12 NT_STATUS_OK
ReadX 11946 1919 8 8 NT_STATUS_OK
ReadX 11946 1917 15 15 NT_STATUS_OK
ReadX 11946 0 16 16 NT_STATUS_OK
ReadX 11946 16 2048 2048 NT_STATUS_OK
ReadX 11946 2064 2048 2048 NT_STATUS_OK
ReadX 11946 257 2048 2048 NT_STATUS_OK
ReadX 11946 385 2048 2048 NT_STATUS_OK
ReadX 11946 513 2048 2048 NT_STATUS_OK
ReadX 11946 641 2048 2048 NT_STATUS_OK
ReadX 11946 769 2048 2048 NT_STATUS_OK
ReadX 11946 897 2048 2048 NT_STATUS_OK
ReadX 11946 1025 2048 2048 NT_STATUS_OK
ReadX 11946 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11948 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11951 NT_STATUS_OK
WriteX 11951 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
WriteX 11951 0 11588 11588 NT_STATUS_OK
Flush 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11956 NT_STATUS_OK
WriteX 11956 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 258 NT_STATUS_OK
WriteX 11956 0 11615 11615 NT_STATUS_OK
Flush 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11958 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11965 NT_STATUS_OK
WriteX 11965 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11965 258 NT_STATUS_OK
WriteX 11965 0 65536 65536 NT_STATUS_OK
WriteX 11965 65536 16050 16050 NT_STATUS_OK
Close 11965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11945 1939 64 64 NT_STATUS_OK
ReadX 11945 128 248 248 NT_STATUS_OK
ReadX 11945 128 568 568 NT_STATUS_OK
ReadX 11945 3872 1536 1536 NT_STATUS_OK
ReadX 11945 3456 2560 2560 NT_STATUS_OK
ReadX 11945 3136 512 512 NT_STATUS_OK
ReadX 11945 2880 4096 4096 NT_STATUS_OK
ReadX 11945 3264 3072 3072 NT_STATUS_OK
ReadX 11945 320 4096 4096 NT_STATUS_OK
ReadX 11945 1024 4096 4096 NT_STATUS_OK
ReadX 11945 3616 4096 4096 NT_STATUS_OK
ReadX 11945 1939 64 64 NT_STATUS_OK
ReadX 11945 128 248 248 NT_STATUS_OK
ReadX 11945 128 608 608 NT_STATUS_OK
ReadX 11945 2858 1024 1024 NT_STATUS_OK
ReadX 11945 2810 4096 4096 NT_STATUS_OK
ReadX 11945 2826 4096 4096 NT_STATUS_OK
ReadX 11945 2580 2048 2048 NT_STATUS_OK
ReadX 11945 2800 2560 2560 NT_STATUS_OK
ReadX 11945 2100 4096 4096 NT_STATUS_OK
ReadX 11945 2084 4096 4096 NT_STATUS_OK
ReadX 11945 868 4096 4096 NT_STATUS_OK
ReadX 11945 2324 4096 4096 NT_STATUS_OK
ReadX 11945 884 4096 4096 NT_STATUS_OK
ReadX 11945 2604 1024 1024 NT_STATUS_OK
ReadX 11945 580 4096 4096 NT_STATUS_OK
ReadX 11945 596 4096 4096 NT_STATUS_OK
ReadX 11945 2752 4096 4096 NT_STATUS_OK
ReadX 11945 2842 1024 1024 NT_STATUS_OK
ReadX 11945 660 4096 4096 NT_STATUS_OK
ReadX 11945 2720 4096 4096 NT_STATUS_OK
ReadX 11945 2736 4096 4096 NT_STATUS_OK
ReadX 11945 628 4096 4096 NT_STATUS_OK
ReadX 11945 2704 4096 4096 NT_STATUS_OK
ReadX 11945 1556 4096 4096 NT_STATUS_OK
ReadX 11945 576 4096 4096 NT_STATUS_OK
ReadX 11945 3168 1536 1536 NT_STATUS_OK
ReadX 11945 832 4096 4096 NT_STATUS_OK
ReadX 11945 1088 4096 4096 NT_STATUS_OK
ReadX 11945 1344 4096 4096 NT_STATUS_OK
ReadX 11945 1600 4096 4096 NT_STATUS_OK
ReadX 11945 1856 4096 4096 NT_STATUS_OK
ReadX 11945 2112 4096 4096 NT_STATUS_OK
ReadX 11945 1892 4096 4096 NT_STATUS_OK
ReadX 11945 820 4096 4096 NT_STATUS_OK
ReadX 11945 788 4096 4096 NT_STATUS_OK
ReadX 11945 1604 4096 4096 NT_STATUS_OK
ReadX 11945 3648 4096 4096 NT_STATUS_OK
ReadX 11945 2608 4096 4096 NT_STATUS_OK
ReadX 11945 548 4096 4096 NT_STATUS_OK
ReadX 11945 740 4096 4096 NT_STATUS_OK
ReadX 11945 1344 4096 4096 NT_STATUS_OK
ReadX 11945 3392 4096 4096 NT_STATUS_OK
ReadX 11945 3904 4096 4096 NT_STATUS_OK
ReadX 11945 644 4096 4096 NT_STATUS_OK
ReadX 11945 676 4096 4096 NT_STATUS_OK
ReadX 11945 2688 4096 4096 NT_STATUS_OK
ReadX 11945 320 4096 4096 NT_STATUS_OK
ReadX 11945 900 4096 4096 NT_STATUS_OK
ReadX 11945 1908 4096 4096 NT_STATUS_OK
ReadX 11945 852 4096 4096 NT_STATUS_OK
ReadX 11945 724 4096 4096 NT_STATUS_OK
ReadX 11945 2292 4096 4096 NT_STATUS_OK
ReadX 11945 612 4096 4096 NT_STATUS_OK
ReadX 11945 388 4096 4096 NT_STATUS_OK
ReadX 11945 2368 4096 4096 NT_STATUS_OK
ReadX 11945 2624 4096 4096 NT_STATUS_OK
ReadX 11945 500 4096 4096 NT_STATUS_OK
ReadX 11945 356 4096 4096 NT_STATUS_OK
ReadX 11945 1024 4096 4096 NT_STATUS_OK
ReadX 11945 576 4096 4096 NT_STATUS_OK
ReadX 11945 340 4096 4096 NT_STATUS_OK
ReadX 11945 420 4096 4096 NT_STATUS_OK
ReadX 11945 1600 4096 4096 NT_STATUS_OK
ReadX 11945 404 4096 4096 NT_STATUS_OK
ReadX 11945 1428 4096 4096 NT_STATUS_OK
ReadX 11945 2656 4096 4096 NT_STATUS_OK
ReadX 11945 2624 4096 4096 NT_STATUS_OK
ReadX 11945 452 4096 4096 NT_STATUS_OK
ReadX 11945 692 4096 4096 NT_STATUS_OK
ReadX 11945 564 4096 4096 NT_STATUS_OK
ReadX 11945 372 4096 4096 NT_STATUS_OK
ReadX 11945 468 4096 4096 NT_STATUS_OK
ReadX 11945 484 4096 4096 NT_STATUS_OK
ReadX 11945 1088 4096 4096 NT_STATUS_OK
ReadX 11945 1924 4096 4096 NT_STATUS_OK
ReadX 11945 2768 4096 4096 NT_STATUS_OK
ReadX 11945 832 4096 4096 NT_STATUS_OK
ReadX 11945 836 4096 4096 NT_STATUS_OK
ReadX 11945 1856 4096 4096 NT_STATUS_OK
ReadX 11945 2640 4096 4096 NT_STATUS_OK
ReadX 11945 436 4096 4096 NT_STATUS_OK
ReadX 11945 1828 4096 4096 NT_STATUS_OK
ReadX 11945 804 4096 4096 NT_STATUS_OK
ReadX 11945 1860 4096 4096 NT_STATUS_OK
ReadX 11945 1812 4096 4096 NT_STATUS_OK
ReadX 11945 756 4096 4096 NT_STATUS_OK
ReadX 11945 1636 4096 4096 NT_STATUS_OK
ReadX 11945 772 4096 4096 NT_STATUS_OK
ReadX 11945 2036 4096 4096 NT_STATUS_OK
ReadX 11945 1220 4096 4096 NT_STATUS_OK
ReadX 11945 1652 4096 4096 NT_STATUS_OK
ReadX 11945 2588 4096 4096 NT_STATUS_OK
ReadX 11945 916 4096 4096 NT_STATUS_OK
ReadX 11945 260 4096 4096 NT_STATUS_OK
ReadX 11945 932 4096 4096 NT_STATUS_OK
ReadX 11945 2624 4096 4096 NT_STATUS_OK
ReadX 11945 308 4096 4096 NT_STATUS_OK
ReadX 11945 292 4096 4096 NT_STATUS_OK
ReadX 11945 1140 4096 4096 NT_STATUS_OK
ReadX 11945 276 4096 4096 NT_STATUS_OK
ReadX 11945 2020 4096 4096 NT_STATUS_OK
ReadX 11945 2880 4096 4096 NT_STATUS_OK
ReadX 11945 516 4096 4096 NT_STATUS_OK
ReadX 11945 1844 4096 4096 NT_STATUS_OK
ReadX 11945 1124 4096 4096 NT_STATUS_OK
ReadX 11945 3136 4096 4096 NT_STATUS_OK
ReadX 11945 324 4096 4096 NT_STATUS_OK
ReadX 11945 1156 4096 4096 NT_STATUS_OK
ReadX 11945 1172 4096 4096 NT_STATUS_OK
ReadX 11945 2112 4096 4096 NT_STATUS_OK
ReadX 11945 2368 4096 4096 NT_STATUS_OK
ReadX 11945 964 4096 4096 NT_STATUS_OK
ReadX 11945 980 4096 4096 NT_STATUS_OK
ReadX 11945 1012 4096 4096 NT_STATUS_OK
ReadX 11945 532 4096 4096 NT_STATUS_OK
ReadX 11945 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11945 1620 4096 4096 NT_STATUS_OK
ReadX 11945 1604 4096 4096 NT_STATUS_OK
ReadX 11945 2116 4096 4096 NT_STATUS_OK
ReadX 11945 2132 4096 4096 NT_STATUS_OK
ReadX 11945 2148 4096 4096 NT_STATUS_OK
ReadX 11945 2276 4096 4096 NT_STATUS_OK
ReadX 11945 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11967 NT_STATUS_OK
Close 11967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11970 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 1004 NT_STATUS_OK
Close 11925 NT_STATUS_OK
WriteX 11970 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 1004 NT_STATUS_OK
Close 11927 NT_STATUS_OK
WriteX 11970 0 65536 65536 NT_STATUS_OK
WriteX 11970 65536 64850 64850 NT_STATUS_OK
Close 11970 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11972 NT_STATUS_OK
WriteX 11972 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11972 258 NT_STATUS_OK
ReadX 11945 2068 4096 4096 NT_STATUS_OK
ReadX 11945 1588 4096 4096 NT_STATUS_OK
ReadX 11945 1572 4096 4096 NT_STATUS_OK
WriteX 11972 0 18630 18630 NT_STATUS_OK
Flush 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11945 612 4096 4096 NT_STATUS_OK
ReadX 11945 564 4096 4096 NT_STATUS_OK
ReadX 11945 1876 4096 4096 NT_STATUS_OK
ReadX 11945 628 4096 4096 NT_STATUS_OK
ReadX 11945 740 4096 4096 NT_STATUS_OK
ReadX 11945 724 4096 4096 NT_STATUS_OK
ReadX 11945 644 4096 4096 NT_STATUS_OK
ReadX 11945 2324 4096 4096 NT_STATUS_OK
ReadX 11945 660 4096 4096 NT_STATUS_OK
ReadX 11945 852 4096 4096 NT_STATUS_OK
ReadX 11945 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11945 2368 4096 4096 NT_STATUS_OK
ReadX 11945 1024 4096 4096 NT_STATUS_OK
ReadX 11945 320 4096 4096 NT_STATUS_OK
ReadX 11945 580 4096 4096 NT_STATUS_OK
ReadX 11945 3136 512 512 NT_STATUS_OK
ReadX 11945 2880 4096 4096 NT_STATUS_OK
Close 11945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 61440 4096 4096 NT_STATUS_OK
ReadX 11977 126976 4096 4096 NT_STATUS_OK
WriteX 11977 0 65536 65536 NT_STATUS_OK
WriteX 11977 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 61440 4096 4096 NT_STATUS_OK
ReadX 11978 126976 4096 4096 NT_STATUS_OK
ReadX 11978 192512 4096 4096 NT_STATUS_OK
ReadX 11978 258048 4096 4096 NT_STATUS_OK
WriteX 11978 0 65536 65536 NT_STATUS_OK
WriteX 11978 65536 65536 65536 NT_STATUS_OK
WriteX 11978 131072 65536 65536 NT_STATUS_OK
WriteX 11978 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11979 NT_STATUS_OK
ReadX 11979 61440 4096 4096 NT_STATUS_OK
ReadX 11979 126976 4096 4096 NT_STATUS_OK
ReadX 11979 192512 4096 4096 NT_STATUS_OK
ReadX 11979 258048 4096 4096 NT_STATUS_OK
ReadX 11979 323584 4096 4096 NT_STATUS_OK
ReadX 11979 389120 4096 4096 NT_STATUS_OK
ReadX 11979 454656 4096 4096 NT_STATUS_OK
ReadX 11979 520192 4096 4096 NT_STATUS_OK
WriteX 11979 0 65536 65536 NT_STATUS_OK
WriteX 11979 65536 65536 65536 NT_STATUS_OK
WriteX 11979 131072 65536 65536 NT_STATUS_OK
WriteX 11979 196608 65536 65536 NT_STATUS_OK
WriteX 11979 262144 65536 65536 NT_STATUS_OK
WriteX 11979 327680 65536 65536 NT_STATUS_OK
WriteX 11979 393216 65536 65536 NT_STATUS_OK
WriteX 11979 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11982 NT_STATUS_OK
WriteX 11982 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11982 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11980 0 8192 8192 NT_STATUS_OK
Flush 11980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11980 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11980 0 8192 8192 NT_STATUS_OK
Flush 11980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11980 0 8192 8192 NT_STATUS_OK
Flush 11980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11980 0 8192 8192 NT_STATUS_OK
Flush 11980 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11984 NT_STATUS_OK
Close 11984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11987 NT_STATUS_OK
WriteX 11987 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11987 258 NT_STATUS_OK
WriteX 11987 0 62591 62591 NT_STATUS_OK
Close 11987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11992 NT_STATUS_OK
WriteX 11992 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11992 258 NT_STATUS_OK
WriteX 11992 0 10845 10845 NT_STATUS_OK
Close 11992 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11994 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11997 NT_STATUS_OK
WriteX 11997 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11997 258 NT_STATUS_OK
WriteX 11997 0 30118 30118 NT_STATUS_OK
Close 11997 NT_STATUS_OK
WriteX 11980 0 4096 4096 NT_STATUS_OK
WriteX 11982 0 64 64 NT_STATUS_OK
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 61440 61440 NT_STATUS_OK
ReadX 11999 61440 4096 4096 NT_STATUS_OK
ReadX 11999 65536 61440 61440 NT_STATUS_OK
ReadX 11999 126976 4096 4096 NT_STATUS_OK
ReadX 11999 131072 61440 61440 NT_STATUS_OK
ReadX 11999 192512 4096 4096 NT_STATUS_OK
ReadX 11999 196608 61440 61440 NT_STATUS_OK
ReadX 11999 258048 4096 4096 NT_STATUS_OK
ReadX 11999 262144 61440 61440 NT_STATUS_OK
ReadX 11999 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 61440 61440 NT_STATUS_OK
ReadX 12000 61440 4096 4096 NT_STATUS_OK
ReadX 12000 65536 61440 61440 NT_STATUS_OK
ReadX 12000 126976 4096 4096 NT_STATUS_OK
ReadX 12000 131072 61440 61440 NT_STATUS_OK
ReadX 12000 192512 4096 4096 NT_STATUS_OK
ReadX 12000 196608 61440 61440 NT_STATUS_OK
ReadX 12000 258048 4096 4096 NT_STATUS_OK
ReadX 12000 262144 61440 61440 NT_STATUS_OK
ReadX 12000 323584 4096 4096 NT_STATUS_OK
ReadX 12000 327680 61440 61440 NT_STATUS_OK
ReadX 12000 389120 4096 4096 NT_STATUS_OK
ReadX 12000 393216 61440 61440 NT_STATUS_OK
ReadX 12000 454656 4096 4096 NT_STATUS_OK
ReadX 12000 458752 61440 61440 NT_STATUS_OK
ReadX 12000 520192 4096 4096 NT_STATUS_OK
ReadX 12000 524288 61440 61440 NT_STATUS_OK
ReadX 12000 585728 4096 4096 NT_STATUS_OK
ReadX 12000 589824 61440 61440 NT_STATUS_OK
ReadX 12000 651264 4096 4096 NT_STATUS_OK
ReadX 12000 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 61440 61440 NT_STATUS_OK
ReadX 12001 61440 4096 4096 NT_STATUS_OK
ReadX 12001 65536 61440 61440 NT_STATUS_OK
ReadX 12001 126976 4096 4096 NT_STATUS_OK
ReadX 12001 131072 61440 61440 NT_STATUS_OK
ReadX 12001 192512 4096 4096 NT_STATUS_OK
ReadX 12001 196608 61440 61440 NT_STATUS_OK
ReadX 12001 258048 4096 4096 NT_STATUS_OK
ReadX 12001 262144 61440 61440 NT_STATUS_OK
ReadX 12001 323584 4096 4096 NT_STATUS_OK
ReadX 12001 327680 61440 61440 NT_STATUS_OK
ReadX 12001 389120 4096 4096 NT_STATUS_OK
ReadX 12001 393216 61440 61440 NT_STATUS_OK
ReadX 12001 454656 4096 4096 NT_STATUS_OK
ReadX 12001 458752 61440 61440 NT_STATUS_OK
ReadX 12001 520192 4096 4096 NT_STATUS_OK
ReadX 12001 524288 61440 61440 NT_STATUS_OK
ReadX 12001 585728 4096 4096 NT_STATUS_OK
ReadX 12001 589824 61440 61440 NT_STATUS_OK
ReadX 12001 651264 4096 4096 NT_STATUS_OK
ReadX 12001 655360 61440 61440 NT_STATUS_OK
ReadX 12001 716800 4096 4096 NT_STATUS_OK
ReadX 12001 720896 61440 61440 NT_STATUS_OK
ReadX 12001 782336 4096 4096 NT_STATUS_OK
ReadX 12001 786432 61440 61440 NT_STATUS_OK
ReadX 12001 847872 4096 4096 NT_STATUS_OK
ReadX 12001 851968 61440 61440 NT_STATUS_OK
ReadX 12001 913408 4096 4096 NT_STATUS_OK
ReadX 12001 917504 61440 61440 NT_STATUS_OK
ReadX 12001 978944 4096 4096 NT_STATUS_OK
ReadX 12001 983040 61440 61440 NT_STATUS_OK
ReadX 12001 1044480 4096 4096 NT_STATUS_OK
ReadX 12001 1048576 61440 61440 NT_STATUS_OK
ReadX 12001 1110016 4096 4096 NT_STATUS_OK
ReadX 12001 1114112 61440 61440 NT_STATUS_OK
ReadX 12001 1175552 4096 4096 NT_STATUS_OK
ReadX 12001 1179648 61440 61440 NT_STATUS_OK
ReadX 12001 1241088 4096 4096 NT_STATUS_OK
ReadX 12001 1245184 61440 61440 NT_STATUS_OK
ReadX 12001 1306624 4096 4096 NT_STATUS_OK
ReadX 12001 1310720 61440 61440 NT_STATUS_OK
ReadX 12001 1372160 4096 4096 NT_STATUS_OK
ReadX 12001 1376256 61440 61440 NT_STATUS_OK
ReadX 12001 1437696 4096 4096 NT_STATUS_OK
ReadX 12001 1441792 61440 61440 NT_STATUS_OK
ReadX 12001 1503232 4096 4096 NT_STATUS_OK
ReadX 12001 1507328 61440 61440 NT_STATUS_OK
ReadX 12001 1568768 4096 4096 NT_STATUS_OK
ReadX 12001 1572864 61440 61440 NT_STATUS_OK
ReadX 12001 1634304 4096 4096 NT_STATUS_OK
ReadX 12001 1638400 61440 61440 NT_STATUS_OK
ReadX 12001 1699840 4096 4096 NT_STATUS_OK
ReadX 12001 1703936 61440 61440 NT_STATUS_OK
ReadX 12001 1765376 4096 4096 NT_STATUS_OK
ReadX 12001 1769472 61440 61440 NT_STATUS_OK
ReadX 12001 1830912 4096 4096 NT_STATUS_OK
ReadX 12001 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
ReadX 12006 4096 4096 4096 NT_STATUS_OK
ReadX 12006 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12007 NT_STATUS_OK
Close 12007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12010 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 8192 8192 NT_STATUS_OK
ReadX 12014 8192 8192 8192 NT_STATUS_OK
ReadX 12014 16384 8192 8192 NT_STATUS_OK
ReadX 12014 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12016 NT_STATUS_OK
Close 12016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12019 NT_STATUS_OK
WriteX 12019 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12019 258 NT_STATUS_OK
WriteX 12019 0 10438 10438 NT_STATUS_OK
Close 12019 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12020 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12022 NT_STATUS_OK
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12023 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12025 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12027 NT_STATUS_OK
Close 12027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12028 NT_STATUS_OK
ReadX 12028 0 4096 4096 NT_STATUS_OK
ReadX 12028 4096 4096 4096 NT_STATUS_OK
ReadX 12028 8192 4096 4096 NT_STATUS_OK
ReadX 12028 12288 8192 8192 NT_STATUS_OK
ReadX 12028 20480 8192 8192 NT_STATUS_OK
ReadX 12028 28672 8192 8192 NT_STATUS_OK
ReadX 12028 36864 8192 8192 NT_STATUS_OK
ReadX 12028 45056 8192 8192 NT_STATUS_OK
ReadX 12028 53248 8192 8192 NT_STATUS_OK
ReadX 12028 61440 8192 8192 NT_STATUS_OK
ReadX 12028 69632 8192 8192 NT_STATUS_OK
ReadX 12028 77824 8192 8192 NT_STATUS_OK
ReadX 12028 86016 8192 8192 NT_STATUS_OK
ReadX 12028 94208 8192 8192 NT_STATUS_OK
ReadX 12028 102400 8192 8192 NT_STATUS_OK
ReadX 12028 110592 8192 8192 NT_STATUS_OK
ReadX 12028 118784 8192 8192 NT_STATUS_OK
ReadX 12028 126976 8192 8192 NT_STATUS_OK
ReadX 12028 135168 8192 8192 NT_STATUS_OK
ReadX 12028 143360 8192 8192 NT_STATUS_OK
ReadX 12028 151552 8192 8192 NT_STATUS_OK
ReadX 12028 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12028 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Close 12025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12033 NT_STATUS_OK
WriteX 12033 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12033 258 NT_STATUS_OK
WriteX 12033 0 28489 28489 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12036 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12037 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 8192 8192 NT_STATUS_OK
ReadX 12040 8192 8192 8192 NT_STATUS_OK
ReadX 12040 16384 8192 8192 NT_STATUS_OK
ReadX 12040 24576 8192 8192 NT_STATUS_OK
ReadX 12040 32768 16384 16384 NT_STATUS_OK
ReadX 12040 49152 8192 8192 NT_STATUS_OK
ReadX 12040 57344 8192 8192 NT_STATUS_OK
ReadX 12040 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12045 NT_STATUS_OK
WriteX 12045 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12045 258 NT_STATUS_OK
WriteX 12045 0 29253 29253 NT_STATUS_OK
Close 12045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12049 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12052 NT_STATUS_OK
WriteX 12052 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12052 258 NT_STATUS_OK
WriteX 12052 0 30183 30183 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12055 NT_STATUS_OK
WriteX 12055 0 510 510 NT_STATUS_OK
WriteX 12055 510 512 512 NT_STATUS_OK
WriteX 12055 1022 510 510 NT_STATUS_OK
WriteX 12055 1532 510 510 NT_STATUS_OK
WriteX 12055 2042 168 168 NT_STATUS_OK
Close 12055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12056 NT_STATUS_OK
Close 12056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
WriteX 12058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 61440 4096 4096 NT_STATUS_OK
ReadX 12059 126976 4096 4096 NT_STATUS_OK
WriteX 12059 0 65536 65536 NT_STATUS_OK
WriteX 12059 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12060 NT_STATUS_OK
ReadX 12060 61440 4096 4096 NT_STATUS_OK
ReadX 12060 126976 4096 4096 NT_STATUS_OK
ReadX 12060 192512 4096 4096 NT_STATUS_OK
ReadX 12060 258048 4096 4096 NT_STATUS_OK
WriteX 12060 0 65536 65536 NT_STATUS_OK
WriteX 12060 65536 65536 65536 NT_STATUS_OK
WriteX 12060 131072 65536 65536 NT_STATUS_OK
WriteX 12060 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12061 NT_STATUS_OK
ReadX 12061 61440 4096 4096 NT_STATUS_OK
ReadX 12061 126976 4096 4096 NT_STATUS_OK
ReadX 12061 192512 4096 4096 NT_STATUS_OK
ReadX 12061 258048 4096 4096 NT_STATUS_OK
ReadX 12061 323584 4096 4096 NT_STATUS_OK
ReadX 12061 389120 4096 4096 NT_STATUS_OK
ReadX 12061 454656 4096 4096 NT_STATUS_OK
ReadX 12061 520192 4096 4096 NT_STATUS_OK
WriteX 12061 0 65536 65536 NT_STATUS_OK
WriteX 12061 65536 65536 65536 NT_STATUS_OK
WriteX 12061 131072 65536 65536 NT_STATUS_OK
WriteX 12061 196608 65536 65536 NT_STATUS_OK
WriteX 12061 262144 65536 65536 NT_STATUS_OK
WriteX 12061 327680 65536 65536 NT_STATUS_OK
WriteX 12061 393216 65536 65536 NT_STATUS_OK
WriteX 12061 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12062 NT_STATUS_OK
Close 12062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Close 12061 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12073 NT_STATUS_OK
Close 12073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12080 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12091 NT_STATUS_OK
Close 12091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12106 NT_STATUS_OK
Close 12106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12111 NT_STATUS_OK
Close 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12121 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12124 NT_STATUS_OK
Close 12124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12127 NT_STATUS_OK
Close 12127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12130 NT_STATUS_OK
WriteX 12130 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12130 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12130 0 65536 65536 NT_STATUS_OK
WriteX 12130 65536 65536 65536 NT_STATUS_OK
WriteX 12130 131072 65536 65536 NT_STATUS_OK
WriteX 12130 196608 65536 65536 NT_STATUS_OK
WriteX 12130 262144 26634 26634 NT_STATUS_OK
Close 12130 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12135 NT_STATUS_OK
Close 12135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
Close 12137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12138 NT_STATUS_OK
ReadX 12138 0 4096 4096 NT_STATUS_OK
ReadX 12138 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12139 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12138 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12155 NT_STATUS_OK
Close 12155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12161 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12171 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12181 NT_STATUS_OK
Close 12181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12186 NT_STATUS_OK
Close 12186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12200 NT_STATUS_OK
Close 12200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12203 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12205 NT_STATUS_OK
Close 12205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12229 NT_STATUS_OK
Close 12229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12231 NT_STATUS_OK
ReadX 12231 0 4096 4096 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12233 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12262 0 4096 4096 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12264 NT_STATUS_OK
ReadX 12264 0 4096 4096 NT_STATUS_OK
ReadX 12264 4096 4096 4096 NT_STATUS_OK
ReadX 12264 8192 4096 4096 NT_STATUS_OK
ReadX 12264 12288 4096 4096 NT_STATUS_OK
ReadX 12264 16384 4096 4096 NT_STATUS_OK
ReadX 12264 20480 4096 4096 NT_STATUS_OK
ReadX 12264 24576 4096 4096 NT_STATUS_OK
ReadX 12264 28672 4096 4096 NT_STATUS_OK
ReadX 12264 32768 4096 4096 NT_STATUS_OK
ReadX 12264 36864 4096 4096 NT_STATUS_OK
ReadX 12264 40960 4096 4096 NT_STATUS_OK
ReadX 12264 45056 4096 4096 NT_STATUS_OK
ReadX 12264 49152 4096 4096 NT_STATUS_OK
ReadX 12264 53248 4096 4096 NT_STATUS_OK
ReadX 12264 57344 4096 4096 NT_STATUS_OK
ReadX 12264 61440 4096 4096 NT_STATUS_OK
ReadX 12264 65536 4096 4096 NT_STATUS_OK
ReadX 12264 69632 4096 4096 NT_STATUS_OK
ReadX 12264 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12264 1004 NT_STATUS_OK
WriteX 12264 0 4096 4096 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12265 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12267 NT_STATUS_OK
Close 12267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12270 NT_STATUS_OK
WriteX 12270 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12270 258 NT_STATUS_OK
WriteX 12270 0 65536 65536 NT_STATUS_OK
WriteX 12270 65536 19979 19979 NT_STATUS_OK
Close 12270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
WriteX 12271 0 4096 4096 NT_STATUS_OK
Flush 12271 NT_STATUS_OK
WriteX 12271 0 4096 4096 NT_STATUS_OK
Flush 12271 NT_STATUS_OK
QUERY_FILE_INFORMATION 12271 1004 NT_STATUS_OK
WriteX 12271 0 4096 4096 NT_STATUS_OK
Flush 12271 NT_STATUS_OK
WriteX 12271 0 4096 4096 NT_STATUS_OK
Flush 12271 NT_STATUS_OK
WriteX 12271 0 4096 4096 NT_STATUS_OK
Flush 12271 NT_STATUS_OK
SET_FILE_INFORMATION 12271 1004 NT_STATUS_OK
WriteX 12271 0 4096 4096 NT_STATUS_OK
Flush 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
Close 12272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
Close 12274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12276 1004 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12277 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12282 NT_STATUS_OK
WriteX 12282 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12282 258 NT_STATUS_OK
WriteX 12282 0 65536 65536 NT_STATUS_OK
WriteX 12282 65536 17654 17654 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 1004 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
SET_FILE_INFORMATION 12283 1004 NT_STATUS_OK
WriteX 12283 0 4096 4096 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12284 NT_STATUS_OK
SET_FILE_INFORMATION 12284 1004 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12286 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12288 NT_STATUS_OK
ReadX 12288 0 4096 4096 NT_STATUS_OK
ReadX 12288 4096 4096 4096 NT_STATUS_OK
ReadX 12288 8192 4096 4096 NT_STATUS_OK
ReadX 12288 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12288 16384 4096 4096 NT_STATUS_OK
ReadX 12288 20480 4096 4096 NT_STATUS_OK
ReadX 12288 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12289 NT_STATUS_OK
ReadX 12289 0 4096 4096 NT_STATUS_OK
Close 12289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12290 NT_STATUS_OK
ReadX 12290 0 4096 4096 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12291 NT_STATUS_OK
ReadX 12291 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12291 1004 NT_STATUS_OK
WriteX 12291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12291 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12294 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12297 NT_STATUS_OK
WriteX 12297 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12297 258 NT_STATUS_OK
WriteX 12297 0 65536 65536 NT_STATUS_OK
WriteX 12297 65536 19490 19490 NT_STATUS_OK
Close 12297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12298 NT_STATUS_OK
ReadX 12298 0 4096 4096 NT_STATUS_OK
WriteX 12298 0 4096 4096 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
WriteX 12298 0 4096 4096 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
QUERY_FILE_INFORMATION 12298 1004 NT_STATUS_OK
WriteX 12298 0 4096 4096 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
WriteX 12298 0 4096 4096 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
WriteX 12298 0 4096 4096 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
SET_FILE_INFORMATION 12298 1004 NT_STATUS_OK
WriteX 12298 0 4096 4096 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
Close 12298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12299 NT_STATUS_OK
SET_FILE_INFORMATION 12299 1004 NT_STATUS_OK
Close 12299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12303 0 4096 4096 NT_STATUS_OK
Close 12303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
ReadX 12305 4096 4096 4096 NT_STATUS_OK
ReadX 12305 8192 4096 4096 NT_STATUS_OK
ReadX 12305 12288 4096 4096 NT_STATUS_OK
ReadX 12305 16384 4096 4096 NT_STATUS_OK
ReadX 12305 20480 4096 4096 NT_STATUS_OK
ReadX 12305 24576 4096 4096 NT_STATUS_OK
ReadX 12305 28672 4096 4096 NT_STATUS_OK
ReadX 12305 32768 4096 4096 NT_STATUS_OK
ReadX 12305 36864 4096 4096 NT_STATUS_OK
ReadX 12305 40960 4096 4096 NT_STATUS_OK
ReadX 12305 45056 4096 4096 NT_STATUS_OK
ReadX 12305 49152 4096 4096 NT_STATUS_OK
ReadX 12305 53248 4096 4096 NT_STATUS_OK
ReadX 12305 57344 4096 4096 NT_STATUS_OK
ReadX 12305 61440 4096 4096 NT_STATUS_OK
ReadX 12305 65536 4096 4096 NT_STATUS_OK
ReadX 12305 69632 4096 4096 NT_STATUS_OK
ReadX 12305 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12305 1004 NT_STATUS_OK
WriteX 12305 0 4096 4096 NT_STATUS_OK
Close 12305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12306 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
Close 12306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12308 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12311 NT_STATUS_OK
WriteX 12311 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12311 258 NT_STATUS_OK
WriteX 12311 0 65536 65536 NT_STATUS_OK
WriteX 12311 65536 8866 8866 NT_STATUS_OK
Close 12311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
Flush 12312 NT_STATUS_OK
SET_FILE_INFORMATION 12312 1004 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
Flush 12312 NT_STATUS_OK
Close 12312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
Close 12314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
Close 12315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12316 NT_STATUS_OK
ReadX 12316 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12316 1004 NT_STATUS_OK
WriteX 12316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12317 NT_STATUS_OK
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12319 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12322 NT_STATUS_OK
WriteX 12322 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12322 258 NT_STATUS_OK
WriteX 12322 0 65536 65536 NT_STATUS_OK
WriteX 12322 65536 9298 9298 NT_STATUS_OK
Close 12322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
WriteX 12323 0 4096 4096 NT_STATUS_OK
Flush 12323 NT_STATUS_OK
SET_FILE_INFORMATION 12323 1004 NT_STATUS_OK
WriteX 12323 0 4096 4096 NT_STATUS_OK
Flush 12323 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12324 NT_STATUS_OK
SET_FILE_INFORMATION 12324 1004 NT_STATUS_OK
Close 12324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12329 0 4096 4096 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12330 4096 4096 4096 NT_STATUS_OK
ReadX 12330 8192 4096 4096 NT_STATUS_OK
ReadX 12330 12288 4096 4096 NT_STATUS_OK
ReadX 12330 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12332 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
Close 12332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12333 NT_STATUS_OK
ReadX 12333 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12333 1004 NT_STATUS_OK
WriteX 12333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12339 NT_STATUS_OK
WriteX 12339 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12339 258 NT_STATUS_OK
WriteX 12339 0 65536 65536 NT_STATUS_OK
WriteX 12339 65536 11540 11540 NT_STATUS_OK
Close 12339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
WriteX 12340 0 4096 4096 NT_STATUS_OK
Flush 12340 NT_STATUS_OK
SET_FILE_INFORMATION 12340 1004 NT_STATUS_OK
WriteX 12340 0 4096 4096 NT_STATUS_OK
Flush 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12341 NT_STATUS_OK
SET_FILE_INFORMATION 12341 1004 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12345 NT_STATUS_OK
ReadX 12345 61440 4096 4096 NT_STATUS_OK
ReadX 12345 126976 4096 4096 NT_STATUS_OK
WriteX 12345 0 65536 65536 NT_STATUS_OK
WriteX 12345 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 61440 4096 4096 NT_STATUS_OK
ReadX 12346 126976 4096 4096 NT_STATUS_OK
ReadX 12346 192512 4096 4096 NT_STATUS_OK
ReadX 12346 258048 4096 4096 NT_STATUS_OK
WriteX 12346 0 65536 65536 NT_STATUS_OK
WriteX 12346 65536 65536 65536 NT_STATUS_OK
WriteX 12346 131072 65536 65536 NT_STATUS_OK
WriteX 12346 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 61440 4096 4096 NT_STATUS_OK
ReadX 12347 126976 4096 4096 NT_STATUS_OK
ReadX 12347 192512 4096 4096 NT_STATUS_OK
ReadX 12347 258048 4096 4096 NT_STATUS_OK
ReadX 12347 323584 4096 4096 NT_STATUS_OK
ReadX 12347 389120 4096 4096 NT_STATUS_OK
ReadX 12347 454656 4096 4096 NT_STATUS_OK
ReadX 12347 520192 4096 4096 NT_STATUS_OK
WriteX 12347 0 65536 65536 NT_STATUS_OK
WriteX 12347 65536 65536 65536 NT_STATUS_OK
WriteX 12347 131072 65536 65536 NT_STATUS_OK
WriteX 12347 196608 65536 65536 NT_STATUS_OK
WriteX 12347 262144 65536 65536 NT_STATUS_OK
WriteX 12347 327680 65536 65536 NT_STATUS_OK
WriteX 12347 393216 65536 65536 NT_STATUS_OK
WriteX 12347 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
ReadX 12348 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12349 NT_STATUS_OK
WriteX 12349 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12349 258 NT_STATUS_OK
WriteX 12349 0 53 53 NT_STATUS_OK
Close 12349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Close 12288 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12348 8192 4096 4096 NT_STATUS_OK
ReadX 12348 12288 4096 4096 NT_STATUS_OK
WriteX 12352 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12352 258 NT_STATUS_OK
ReadX 12348 16384 4096 4096 NT_STATUS_OK
ReadX 12348 20480 4096 4096 NT_STATUS_OK
WriteX 12352 0 15360 15360 NT_STATUS_OK
Close 12352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12353 1004 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12357 NT_STATUS_OK
Close 12357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12356 4096 4096 4096 NT_STATUS_OK
ReadX 12356 8192 4096 4096 NT_STATUS_OK
ReadX 12356 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 4096 4096 NT_STATUS_OK
ReadX 12359 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
ReadX 12360 4096 4096 4096 NT_STATUS_OK
ReadX 12360 8192 4096 4096 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12361 NT_STATUS_OK
WriteX 12361 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12361 258 NT_STATUS_OK
WriteX 12361 0 15360 15360 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12362 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12366 NT_STATUS_OK
SET_FILE_INFORMATION 12366 1004 NT_STATUS_OK
Close 12366 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Close 12362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
ReadX 12369 4096 4096 4096 NT_STATUS_OK
ReadX 12369 8192 4096 4096 NT_STATUS_OK
ReadX 12369 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12369 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12369 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12371 NT_STATUS_OK
WriteX 12371 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12371 258 NT_STATUS_OK
WriteX 12371 0 53 53 NT_STATUS_OK
Close 12371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12370 4096 4096 4096 NT_STATUS_OK
ReadX 12370 8192 4096 4096 NT_STATUS_OK
ReadX 12370 12288 4096 4096 NT_STATUS_OK
WriteX 12374 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12374 258 NT_STATUS_OK
WriteX 12374 0 12006 12006 NT_STATUS_OK
Close 12374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12375 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12375 1004 NT_STATUS_OK
WriteX 12375 0 4096 4096 NT_STATUS_OK
Close 12375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12378 4096 4096 4096 NT_STATUS_OK
ReadX 12378 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
WriteX 12381 0 11991 11991 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12382 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12382 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12386 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
Close 12386 NT_STATUS_OK
WriteX 12382 0 4096 4096 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12389 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12390 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12389 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12389 1004 NT_STATUS_OK
ReadX 12389 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12389 1004 NT_STATUS_OK
WriteX 12389 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12389 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12389 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12389 1004 NT_STATUS_OK
Close 12365 NT_STATUS_OK
WriteX 12369 0 19054 19054 NT_STATUS_OK
WriteX 12389 0 12288 12288 NT_STATUS_OK
Close 12385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12369 NT_STATUS_OK
Close 12389 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12394 NT_STATUS_OK
Close 12394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12396 NT_STATUS_OK
ReadX 12396 0 61440 61440 NT_STATUS_OK
ReadX 12396 61440 4096 4096 NT_STATUS_OK
ReadX 12396 65536 61440 61440 NT_STATUS_OK
ReadX 12396 126976 4096 4096 NT_STATUS_OK
ReadX 12396 131072 61440 61440 NT_STATUS_OK
ReadX 12396 192512 4096 4096 NT_STATUS_OK
ReadX 12396 196608 61440 61440 NT_STATUS_OK
ReadX 12396 258048 4096 4096 NT_STATUS_OK
ReadX 12396 262144 61440 61440 NT_STATUS_OK
ReadX 12396 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12397 NT_STATUS_OK
ReadX 12397 0 61440 61440 NT_STATUS_OK
ReadX 12397 61440 4096 4096 NT_STATUS_OK
ReadX 12397 65536 61440 61440 NT_STATUS_OK
ReadX 12397 126976 4096 4096 NT_STATUS_OK
ReadX 12397 131072 61440 61440 NT_STATUS_OK
ReadX 12397 192512 4096 4096 NT_STATUS_OK
ReadX 12397 196608 61440 61440 NT_STATUS_OK
ReadX 12397 258048 4096 4096 NT_STATUS_OK
ReadX 12397 262144 61440 61440 NT_STATUS_OK
ReadX 12397 323584 4096 4096 NT_STATUS_OK
ReadX 12397 327680 61440 61440 NT_STATUS_OK
ReadX 12397 389120 4096 4096 NT_STATUS_OK
ReadX 12397 393216 61440 61440 NT_STATUS_OK
ReadX 12397 454656 4096 4096 NT_STATUS_OK
ReadX 12397 458752 61440 61440 NT_STATUS_OK
ReadX 12397 520192 4096 4096 NT_STATUS_OK
ReadX 12397 524288 61440 61440 NT_STATUS_OK
ReadX 12397 585728 4096 4096 NT_STATUS_OK
ReadX 12397 589824 61440 61440 NT_STATUS_OK
ReadX 12397 651264 4096 4096 NT_STATUS_OK
ReadX 12397 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 61440 61440 NT_STATUS_OK
ReadX 12398 61440 4096 4096 NT_STATUS_OK
ReadX 12398 65536 61440 61440 NT_STATUS_OK
ReadX 12398 126976 4096 4096 NT_STATUS_OK
ReadX 12398 131072 61440 61440 NT_STATUS_OK
ReadX 12398 192512 4096 4096 NT_STATUS_OK
ReadX 12398 196608 61440 61440 NT_STATUS_OK
ReadX 12398 258048 4096 4096 NT_STATUS_OK
ReadX 12398 262144 61440 61440 NT_STATUS_OK
ReadX 12398 323584 4096 4096 NT_STATUS_OK
ReadX 12398 327680 61440 61440 NT_STATUS_OK
ReadX 12398 389120 4096 4096 NT_STATUS_OK
ReadX 12398 393216 61440 61440 NT_STATUS_OK
ReadX 12398 454656 4096 4096 NT_STATUS_OK
ReadX 12398 458752 61440 61440 NT_STATUS_OK
ReadX 12398 520192 4096 4096 NT_STATUS_OK
ReadX 12398 524288 61440 61440 NT_STATUS_OK
ReadX 12398 585728 4096 4096 NT_STATUS_OK
ReadX 12398 589824 61440 61440 NT_STATUS_OK
ReadX 12398 651264 4096 4096 NT_STATUS_OK
ReadX 12398 655360 61440 61440 NT_STATUS_OK
ReadX 12398 716800 4096 4096 NT_STATUS_OK
ReadX 12398 720896 61440 61440 NT_STATUS_OK
ReadX 12398 782336 4096 4096 NT_STATUS_OK
ReadX 12398 786432 61440 61440 NT_STATUS_OK
ReadX 12398 847872 4096 4096 NT_STATUS_OK
ReadX 12398 851968 61440 61440 NT_STATUS_OK
ReadX 12398 913408 4096 4096 NT_STATUS_OK
ReadX 12398 917504 61440 61440 NT_STATUS_OK
ReadX 12398 978944 4096 4096 NT_STATUS_OK
ReadX 12398 983040 61440 61440 NT_STATUS_OK
ReadX 12398 1044480 4096 4096 NT_STATUS_OK
ReadX 12398 1048576 61440 61440 NT_STATUS_OK
ReadX 12398 1110016 4096 4096 NT_STATUS_OK
ReadX 12398 1114112 61440 61440 NT_STATUS_OK
ReadX 12398 1175552 4096 4096 NT_STATUS_OK
ReadX 12398 1179648 61440 61440 NT_STATUS_OK
ReadX 12398 1241088 4096 4096 NT_STATUS_OK
ReadX 12398 1245184 61440 61440 NT_STATUS_OK
ReadX 12398 1306624 4096 4096 NT_STATUS_OK
ReadX 12398 1310720 61440 61440 NT_STATUS_OK
ReadX 12398 1372160 4096 4096 NT_STATUS_OK
ReadX 12398 1376256 61440 61440 NT_STATUS_OK
ReadX 12398 1437696 4096 4096 NT_STATUS_OK
ReadX 12398 1441792 61440 61440 NT_STATUS_OK
ReadX 12398 1503232 4096 4096 NT_STATUS_OK
ReadX 12398 1507328 61440 61440 NT_STATUS_OK
ReadX 12398 1568768 4096 4096 NT_STATUS_OK
ReadX 12398 1572864 61440 61440 NT_STATUS_OK
ReadX 12398 1634304 4096 4096 NT_STATUS_OK
ReadX 12398 1638400 61440 61440 NT_STATUS_OK
ReadX 12398 1699840 4096 4096 NT_STATUS_OK
ReadX 12398 1703936 61440 61440 NT_STATUS_OK
ReadX 12398 1765376 4096 4096 NT_STATUS_OK
ReadX 12398 1769472 61440 61440 NT_STATUS_OK
ReadX 12398 1830912 4096 4096 NT_STATUS_OK
ReadX 12398 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12399 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12405 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 1004 NT_STATUS_OK
WriteX 12405 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12407 NT_STATUS_OK
WriteX 12407 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12407 258 NT_STATUS_OK
WriteX 12407 0 491 491 NT_STATUS_OK
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12405 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12410 NT_STATUS_OK
Close 12410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12411 NT_STATUS_OK
WriteX 12411 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
WriteX 12411 0 543 543 NT_STATUS_OK
Close 12411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Close 12412 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12425 NT_STATUS_OK
QUERY_FILE_INFORMATION 12425 1004 NT_STATUS_OK
WriteX 12425 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12425 258 NT_STATUS_OK
WriteX 12425 0 2048 2048 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12426 0 4096 4096 NT_STATUS_OK
Flush 12426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12426 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12431 NT_STATUS_OK
WriteX 12431 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12431 258 NT_STATUS_OK
WriteX 12431 0 2048 2048 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 2048 2048 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 2048 2048 NT_STATUS_OK
ReadX 12416 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12432 0 4096 4096 NT_STATUS_OK
WriteX 12416 0 8192 8192 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
WriteX 12418 0 4096 4096 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12442 NT_STATUS_OK
QUERY_FILE_INFORMATION 12442 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12432 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12462 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 1004 NT_STATUS_OK
WriteX 12462 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 258 NT_STATUS_OK
WriteX 12462 0 2048 2048 NT_STATUS_OK
Close 12462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12470 NT_STATUS_OK
QUERY_FILE_INFORMATION 12470 1004 NT_STATUS_OK
WriteX 12470 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12470 258 NT_STATUS_OK
WriteX 12470 0 2048 2048 NT_STATUS_OK
Close 12470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12463 0 4096 4096 NT_STATUS_OK
Flush 12463 NT_STATUS_OK
WriteX 12471 0 4096 4096 NT_STATUS_OK
Flush 12471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12463 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12471 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12465 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12473 NT_STATUS_OK
WriteX 12473 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12473 258 NT_STATUS_OK
WriteX 12473 0 4096 4096 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12475 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12476 NT_STATUS_OK
WriteX 12476 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12476 258 NT_STATUS_OK
WriteX 12476 0 4096 4096 NT_STATUS_OK
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12477 0 4096 4096 NT_STATUS_OK
Close 12474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12483 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12484 NT_STATUS_OK
WriteX 12484 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12484 258 NT_STATUS_OK
WriteX 12484 0 2048 2048 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12485 NT_STATUS_OK
ReadX 12485 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12486 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12492 NT_STATUS_OK
ReadX 12492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12493 NT_STATUS_OK
ReadX 12493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12494 NT_STATUS_OK
ReadX 12494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12499 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Close 12493 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12501 NT_STATUS_OK
QUERY_FILE_INFORMATION 12501 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12510 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12521 NT_STATUS_OK
QUERY_FILE_INFORMATION 12521 1004 NT_STATUS_OK
WriteX 12521 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12521 258 NT_STATUS_OK
WriteX 12521 0 2048 2048 NT_STATUS_OK
Close 12521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12533 NT_STATUS_OK
QUERY_FILE_INFORMATION 12533 1004 NT_STATUS_OK
WriteX 12533 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12533 258 NT_STATUS_OK
WriteX 12533 0 2048 2048 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12541 NT_STATUS_OK
QUERY_FILE_INFORMATION 12541 1004 NT_STATUS_OK
WriteX 12541 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12541 258 NT_STATUS_OK
WriteX 12541 0 2048 2048 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12522 0 4096 4096 NT_STATUS_OK
Flush 12522 NT_STATUS_OK
WriteX 12534 0 4096 4096 NT_STATUS_OK
Flush 12534 NT_STATUS_OK
WriteX 12542 0 4096 4096 NT_STATUS_OK
Flush 12542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12522 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12534 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12542 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12524 4096 16384 16384 NT_STATUS_OK
ReadX 12504 4096 16384 16384 NT_STATUS_OK
ReadX 12536 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 2048 2048 NT_STATUS_OK
WriteX 12544 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12545 NT_STATUS_OK
QUERY_FILE_INFORMATION 12545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12504 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12547 NT_STATUS_OK
QUERY_FILE_INFORMATION 12547 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12549 NT_STATUS_OK
QUERY_FILE_INFORMATION 12549 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12552 4096 16384 16384 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
WriteX 12553 0 4096 4096 NT_STATUS_OK
WriteX 12554 0 4096 4096 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12557 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12565 NT_STATUS_OK
ReadX 12565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 8192 8192 NT_STATUS_OK
ReadX 12558 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12572 0 4096 4096 NT_STATUS_OK
ReadX 12572 4096 4096 4096 NT_STATUS_OK
ReadX 12572 8192 4096 4096 NT_STATUS_OK
WriteX 12558 0 4096 4096 NT_STATUS_OK
WriteX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12573 0 4096 4096 NT_STATUS_OK
ReadX 12573 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
WriteX 12553 0 4096 4096 NT_STATUS_OK
WriteX 12554 0 4096 4096 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12578 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 1004 NT_STATUS_OK
WriteX 12578 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 258 NT_STATUS_OK
WriteX 12578 0 2048 2048 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12579 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12580 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
ReadX 12581 4096 4096 4096 NT_STATUS_OK
WriteX 12581 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
ReadX 12583 4096 4096 4096 NT_STATUS_OK
WriteX 12583 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12584 NT_STATUS_OK
QUERY_FILE_INFORMATION 12584 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12564 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Close 12565 NT_STATUS_OK
Close 12566 NT_STATUS_OK
Close 12567 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Close 12563 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Close 12573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12586 0 4096 4096 NT_STATUS_OK
ReadX 12586 4096 4096 4096 NT_STATUS_OK
ReadX 12586 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12587 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
ReadX 12587 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12604 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 1004 NT_STATUS_OK
WriteX 12604 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 258 NT_STATUS_OK
WriteX 12604 0 2048 2048 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12610 NT_STATUS_OK
QUERY_FILE_INFORMATION 12610 1004 NT_STATUS_OK
WriteX 12610 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12610 258 NT_STATUS_OK
WriteX 12610 0 2048 2048 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12611 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12594 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12612 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12593 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12594 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Close 12596 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12614 NT_STATUS_OK
QUERY_FILE_INFORMATION 12614 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 61440 4096 4096 NT_STATUS_OK
ReadX 12616 126976 4096 4096 NT_STATUS_OK
WriteX 12616 0 65536 65536 NT_STATUS_OK
WriteX 12616 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 61440 4096 4096 NT_STATUS_OK
ReadX 12617 126976 4096 4096 NT_STATUS_OK
ReadX 12617 192512 4096 4096 NT_STATUS_OK
ReadX 12617 258048 4096 4096 NT_STATUS_OK
WriteX 12617 0 65536 65536 NT_STATUS_OK
WriteX 12617 65536 65536 65536 NT_STATUS_OK
WriteX 12617 131072 65536 65536 NT_STATUS_OK
WriteX 12617 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 61440 4096 4096 NT_STATUS_OK
ReadX 12618 126976 4096 4096 NT_STATUS_OK
ReadX 12618 192512 4096 4096 NT_STATUS_OK
ReadX 12618 258048 4096 4096 NT_STATUS_OK
ReadX 12618 323584 4096 4096 NT_STATUS_OK
ReadX 12618 389120 4096 4096 NT_STATUS_OK
ReadX 12618 454656 4096 4096 NT_STATUS_OK
ReadX 12618 520192 4096 4096 NT_STATUS_OK
WriteX 12618 0 65536 65536 NT_STATUS_OK
WriteX 12618 65536 65536 65536 NT_STATUS_OK
WriteX 12618 131072 65536 65536 NT_STATUS_OK
WriteX 12618 196608 65536 65536 NT_STATUS_OK
WriteX 12618 262144 65536 65536 NT_STATUS_OK
WriteX 12618 327680 65536 65536 NT_STATUS_OK
WriteX 12618 393216 65536 65536 NT_STATUS_OK
WriteX 12618 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12619 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12619 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12619 8192 4096 4096 NT_STATUS_OK
ReadX 12619 12288 4096 4096 NT_STATUS_OK
ReadX 12619 16384 4096 4096 NT_STATUS_OK
ReadX 12619 20480 4096 4096 NT_STATUS_OK
ReadX 12619 24576 4096 4096 NT_STATUS_OK
ReadX 12619 28672 4096 4096 NT_STATUS_OK
ReadX 12619 32768 4096 4096 NT_STATUS_OK
ReadX 12619 36864 4096 4096 NT_STATUS_OK
ReadX 12619 40960 4096 4096 NT_STATUS_OK
ReadX 12619 45056 4096 4096 NT_STATUS_OK
ReadX 12619 49152 4096 4096 NT_STATUS_OK
ReadX 12619 53248 4096 4096 NT_STATUS_OK
ReadX 12619 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12619 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12622 NT_STATUS_OK
WriteX 12622 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12622 1004 NT_STATUS_OK
WriteX 12622 0 57088 57088 NT_STATUS_OK
WriteX 12622 0 4096 4096 NT_STATUS_OK
Flush 12622 NT_STATUS_OK
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12623 NT_STATUS_OK
SET_FILE_INFORMATION 12623 1004 NT_STATUS_OK
Close 12623 NT_STATUS_OK
SET_FILE_INFORMATION 12622 1004 NT_STATUS_OK
WriteX 12622 0 4096 4096 NT_STATUS_OK
Close 12622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12626 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12627 NT_STATUS_OK
WriteX 12627 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12627 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
WriteX 12627 0 51456 51456 NT_STATUS_OK
WriteX 12627 0 4096 4096 NT_STATUS_OK
Flush 12627 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
WriteX 12627 0 4096 4096 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12631 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12636 NT_STATUS_OK
WriteX 12636 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12636 258 NT_STATUS_OK
WriteX 12636 0 53077 53077 NT_STATUS_OK
Close 12636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12637 NT_STATUS_OK
WriteX 12637 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12637 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12637 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12637 1004 NT_STATUS_OK
WriteX 12637 0 65536 65536 NT_STATUS_OK
WriteX 12637 65536 1856 1856 NT_STATUS_OK
WriteX 12637 0 4096 4096 NT_STATUS_OK
Flush 12637 NT_STATUS_OK
SET_FILE_INFORMATION 12637 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12637 1004 NT_STATUS_OK
WriteX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Close 12631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12639 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12641 NT_STATUS_OK
ReadX 12641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12646 NT_STATUS_OK
WriteX 12646 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12646 258 NT_STATUS_OK
WriteX 12646 0 7983 7983 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12648 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12651 NT_STATUS_OK
WriteX 12651 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 258 NT_STATUS_OK
WriteX 12651 0 65536 65536 NT_STATUS_OK
WriteX 12651 65536 65536 65536 NT_STATUS_OK
WriteX 12651 131072 65536 65536 NT_STATUS_OK
WriteX 12651 196608 65536 65536 NT_STATUS_OK
WriteX 12651 262144 65536 65536 NT_STATUS_OK
WriteX 12651 327680 65536 65536 NT_STATUS_OK
WriteX 12651 393216 65536 65536 NT_STATUS_OK
WriteX 12651 458752 46731 46731 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12652 NT_STATUS_OK
WriteX 12652 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12641 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12652 1004 NT_STATUS_OK
WriteX 12652 0 65536 65536 NT_STATUS_OK
WriteX 12652 65536 22848 22848 NT_STATUS_OK
WriteX 12652 0 4096 4096 NT_STATUS_OK
Flush 12652 NT_STATUS_OK
SET_FILE_INFORMATION 12652 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12652 1004 NT_STATUS_OK
WriteX 12652 0 4096 4096 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12656 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12657 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12657 1004 NT_STATUS_OK
ReadX 12657 8192 4096 4096 NT_STATUS_OK
ReadX 12657 12288 4096 4096 NT_STATUS_OK
ReadX 12657 16384 4096 4096 NT_STATUS_OK
ReadX 12657 20480 4096 4096 NT_STATUS_OK
ReadX 12657 24576 4096 4096 NT_STATUS_OK
ReadX 12657 28672 4096 4096 NT_STATUS_OK
ReadX 12657 32768 4096 4096 NT_STATUS_OK
ReadX 12657 36864 4096 4096 NT_STATUS_OK
ReadX 12657 40960 4096 4096 NT_STATUS_OK
ReadX 12657 45056 4096 4096 NT_STATUS_OK
ReadX 12657 49152 4096 4096 NT_STATUS_OK
ReadX 12657 53248 4096 4096 NT_STATUS_OK
ReadX 12657 57344 4096 4096 NT_STATUS_OK
ReadX 12657 61440 4096 4096 NT_STATUS_OK
ReadX 12657 65536 4096 4096 NT_STATUS_OK
ReadX 12657 69632 4096 4096 NT_STATUS_OK
ReadX 12657 73728 4096 4096 NT_STATUS_OK
ReadX 12657 77824 4096 4096 NT_STATUS_OK
ReadX 12657 81920 4096 4096 NT_STATUS_OK
ReadX 12657 86016 4096 4096 NT_STATUS_OK
ReadX 12657 90112 4096 4096 NT_STATUS_OK
ReadX 12657 94208 4096 4096 NT_STATUS_OK
ReadX 12657 98304 4096 4096 NT_STATUS_OK
ReadX 12657 102400 4096 4096 NT_STATUS_OK
ReadX 12657 106496 4096 4096 NT_STATUS_OK
ReadX 12657 110592 4096 4096 NT_STATUS_OK
ReadX 12657 114688 4096 4096 NT_STATUS_OK
ReadX 12657 118784 4096 4096 NT_STATUS_OK
ReadX 12657 122880 4096 4096 NT_STATUS_OK
ReadX 12657 126976 4096 4096 NT_STATUS_OK
ReadX 12657 131072 4096 4096 NT_STATUS_OK
ReadX 12657 135168 4096 4096 NT_STATUS_OK
ReadX 12657 139264 4096 4096 NT_STATUS_OK
ReadX 12657 143360 4096 4096 NT_STATUS_OK
ReadX 12657 147456 4096 4096 NT_STATUS_OK
ReadX 12657 151552 4096 4096 NT_STATUS_OK
ReadX 12657 155648 4096 4096 NT_STATUS_OK
ReadX 12657 159744 4096 4096 NT_STATUS_OK
ReadX 12657 163840 4096 4096 NT_STATUS_OK
ReadX 12657 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12657 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12660 NT_STATUS_OK
WriteX 12660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12660 258 NT_STATUS_OK
Close 12657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12661 NT_STATUS_OK
SET_FILE_INFORMATION 12661 1004 NT_STATUS_OK
Close 12661 NT_STATUS_OK
WriteX 12660 0 42388 42388 NT_STATUS_OK
Close 12660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12662 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
ReadX 12664 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12665 NT_STATUS_OK
WriteX 12665 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12665 258 NT_STATUS_OK
SET_FILE_INFORMATION 12665 1004 NT_STATUS_OK
WriteX 12665 0 42652 42652 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
ReadX 12669 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12671 NT_STATUS_OK
Close 12671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12674 NT_STATUS_OK
WriteX 12674 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12674 258 NT_STATUS_OK
WriteX 12674 0 65536 65536 NT_STATUS_OK
WriteX 12674 65536 49 49 NT_STATUS_OK
Close 12674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 61440 61440 NT_STATUS_OK
ReadX 12675 61440 4096 4096 NT_STATUS_OK
ReadX 12675 65536 61440 61440 NT_STATUS_OK
ReadX 12675 126976 4096 4096 NT_STATUS_OK
ReadX 12675 131072 61440 61440 NT_STATUS_OK
ReadX 12675 192512 4096 4096 NT_STATUS_OK
ReadX 12675 196608 61440 61440 NT_STATUS_OK
ReadX 12675 258048 4096 4096 NT_STATUS_OK
ReadX 12675 262144 61440 61440 NT_STATUS_OK
ReadX 12675 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 61440 61440 NT_STATUS_OK
ReadX 12676 61440 4096 4096 NT_STATUS_OK
ReadX 12676 65536 61440 61440 NT_STATUS_OK
ReadX 12676 126976 4096 4096 NT_STATUS_OK
ReadX 12676 131072 61440 61440 NT_STATUS_OK
ReadX 12676 192512 4096 4096 NT_STATUS_OK
ReadX 12676 196608 61440 61440 NT_STATUS_OK
ReadX 12676 258048 4096 4096 NT_STATUS_OK
ReadX 12676 262144 61440 61440 NT_STATUS_OK
ReadX 12676 323584 4096 4096 NT_STATUS_OK
ReadX 12676 327680 61440 61440 NT_STATUS_OK
ReadX 12676 389120 4096 4096 NT_STATUS_OK
ReadX 12676 393216 61440 61440 NT_STATUS_OK
ReadX 12676 454656 4096 4096 NT_STATUS_OK
ReadX 12676 458752 61440 61440 NT_STATUS_OK
ReadX 12676 520192 4096 4096 NT_STATUS_OK
ReadX 12676 524288 61440 61440 NT_STATUS_OK
ReadX 12676 585728 4096 4096 NT_STATUS_OK
ReadX 12676 589824 61440 61440 NT_STATUS_OK
ReadX 12676 651264 4096 4096 NT_STATUS_OK
ReadX 12676 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 61440 61440 NT_STATUS_OK
ReadX 12677 61440 4096 4096 NT_STATUS_OK
ReadX 12677 65536 61440 61440 NT_STATUS_OK
ReadX 12677 126976 4096 4096 NT_STATUS_OK
ReadX 12677 131072 61440 61440 NT_STATUS_OK
ReadX 12677 192512 4096 4096 NT_STATUS_OK
ReadX 12677 196608 61440 61440 NT_STATUS_OK
ReadX 12677 258048 4096 4096 NT_STATUS_OK
ReadX 12677 262144 61440 61440 NT_STATUS_OK
ReadX 12677 323584 4096 4096 NT_STATUS_OK
ReadX 12677 327680 61440 61440 NT_STATUS_OK
ReadX 12677 389120 4096 4096 NT_STATUS_OK
ReadX 12677 393216 61440 61440 NT_STATUS_OK
ReadX 12677 454656 4096 4096 NT_STATUS_OK
ReadX 12677 458752 61440 61440 NT_STATUS_OK
ReadX 12677 520192 4096 4096 NT_STATUS_OK
ReadX 12677 524288 61440 61440 NT_STATUS_OK
ReadX 12677 585728 4096 4096 NT_STATUS_OK
ReadX 12677 589824 61440 61440 NT_STATUS_OK
ReadX 12677 651264 4096 4096 NT_STATUS_OK
ReadX 12677 655360 61440 61440 NT_STATUS_OK
ReadX 12677 716800 4096 4096 NT_STATUS_OK
ReadX 12677 720896 61440 61440 NT_STATUS_OK
ReadX 12677 782336 4096 4096 NT_STATUS_OK
ReadX 12677 786432 61440 61440 NT_STATUS_OK
ReadX 12677 847872 4096 4096 NT_STATUS_OK
ReadX 12677 851968 61440 61440 NT_STATUS_OK
ReadX 12677 913408 4096 4096 NT_STATUS_OK
ReadX 12677 917504 61440 61440 NT_STATUS_OK
ReadX 12677 978944 4096 4096 NT_STATUS_OK
ReadX 12677 983040 61440 61440 NT_STATUS_OK
ReadX 12677 1044480 4096 4096 NT_STATUS_OK
ReadX 12677 1048576 61440 61440 NT_STATUS_OK
ReadX 12677 1110016 4096 4096 NT_STATUS_OK
ReadX 12677 1114112 61440 61440 NT_STATUS_OK
ReadX 12677 1175552 4096 4096 NT_STATUS_OK
ReadX 12677 1179648 61440 61440 NT_STATUS_OK
ReadX 12677 1241088 4096 4096 NT_STATUS_OK
ReadX 12677 1245184 61440 61440 NT_STATUS_OK
ReadX 12677 1306624 4096 4096 NT_STATUS_OK
ReadX 12677 1310720 61440 61440 NT_STATUS_OK
ReadX 12677 1372160 4096 4096 NT_STATUS_OK
ReadX 12677 1376256 61440 61440 NT_STATUS_OK
ReadX 12677 1437696 4096 4096 NT_STATUS_OK
ReadX 12677 1441792 61440 61440 NT_STATUS_OK
ReadX 12677 1503232 4096 4096 NT_STATUS_OK
ReadX 12677 1507328 61440 61440 NT_STATUS_OK
ReadX 12677 1568768 4096 4096 NT_STATUS_OK
ReadX 12677 1572864 61440 61440 NT_STATUS_OK
ReadX 12677 1634304 4096 4096 NT_STATUS_OK
ReadX 12677 1638400 61440 61440 NT_STATUS_OK
ReadX 12677 1699840 4096 4096 NT_STATUS_OK
ReadX 12677 1703936 61440 61440 NT_STATUS_OK
ReadX 12677 1765376 4096 4096 NT_STATUS_OK
ReadX 12677 1769472 61440 61440 NT_STATUS_OK
ReadX 12677 1830912 4096 4096 NT_STATUS_OK
ReadX 12677 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12678 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12679 NT_STATUS_OK
QUERY_FILE_INFORMATION 12679 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12679 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12679 1005 NT_STATUS_OK
ReadX 12679 2156 24 24 NT_STATUS_OK
ReadX 12679 2139 276 276 NT_STATUS_OK
ReadX 12679 2136 14 14 NT_STATUS_OK
ReadX 12679 2136 7 7 NT_STATUS_OK
ReadX 12679 2138 12 12 NT_STATUS_OK
ReadX 12679 2137 8 8 NT_STATUS_OK
ReadX 12679 2135 15 15 NT_STATUS_OK
ReadX 12679 0 16 16 NT_STATUS_OK
ReadX 12679 16 2048 2048 NT_STATUS_OK
ReadX 12679 2064 2048 2048 NT_STATUS_OK
ReadX 12679 257 2048 2048 NT_STATUS_OK
ReadX 12679 385 2048 2048 NT_STATUS_OK
ReadX 12679 513 2048 2048 NT_STATUS_OK
ReadX 12679 641 2048 2048 NT_STATUS_OK
ReadX 12679 769 2048 2048 NT_STATUS_OK
ReadX 12679 897 2048 2048 NT_STATUS_OK
ReadX 12679 1025 2048 2048 NT_STATUS_OK
ReadX 12679 1153 2048 2048 NT_STATUS_OK
ReadX 12679 1281 2048 2048 NT_STATUS_OK
ReadX 12679 1409 2048 2048 NT_STATUS_OK
ReadX 12679 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12675 NT_STATUS_OK
Close 12676 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12684 NT_STATUS_OK
WriteX 12684 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12684 258 NT_STATUS_OK
WriteX 12684 0 10575 10575 NT_STATUS_OK
Flush 12684 NT_STATUS_OK
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12689 NT_STATUS_OK
LockX 12689 2147483538 1 NT_STATUS_OK
UnlockX 12689 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12689 1005 NT_STATUS_OK
ReadX 12689 0 512 512 NT_STATUS_OK
ReadX 12689 512 512 512 NT_STATUS_OK
ReadX 12689 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12689 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12689 1004 NT_STATUS_OK
Close 12689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12690 NT_STATUS_OK
QUERY_FILE_INFORMATION 12690 1005 NT_STATUS_OK
ReadX 12690 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12691 NT_STATUS_OK
LockX 12691 2147483538 1 NT_STATUS_OK
UnlockX 12691 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 1005 NT_STATUS_OK
ReadX 12691 0 512 512 NT_STATUS_OK
ReadX 12691 512 512 512 NT_STATUS_OK
ReadX 12691 1024 512 512 NT_STATUS_OK
ReadX 12691 288 20 20 NT_STATUS_OK
ReadX 12691 308 2084 2084 NT_STATUS_OK
ReadX 12691 388 2084 2084 NT_STATUS_OK
ReadX 12691 388 2084 2084 NT_STATUS_OK
ReadX 12678 2157 1386 1386 NT_STATUS_OK
ReadX 12691 2472 399 399 NT_STATUS_OK
ReadX 12691 3072 1536 1536 NT_STATUS_OK
ReadX 12691 544 149 149 NT_STATUS_OK
ReadX 12691 693 485 485 NT_STATUS_OK
Close 12691 NT_STATUS_OK
ReadX 12678 2157 4096 4096 NT_STATUS_OK
ReadX 12678 6253 4096 4096 NT_STATUS_OK
ReadX 12678 10349 4096 4096 NT_STATUS_OK
ReadX 12678 14445 4096 4096 NT_STATUS_OK
ReadX 12678 18541 4096 4096 NT_STATUS_OK
ReadX 12678 22637 256 256 NT_STATUS_OK
ReadX 12678 22893 4096 4096 NT_STATUS_OK
ReadX 12678 26989 4096 4096 NT_STATUS_OK
ReadX 12678 31085 4096 4096 NT_STATUS_OK
ReadX 12678 35181 4096 4096 NT_STATUS_OK
ReadX 12678 39277 4096 4096 NT_STATUS_OK
ReadX 12678 43373 4096 4096 NT_STATUS_OK
ReadX 12678 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12678 2157 1024 1024 NT_STATUS_OK
ReadX 12678 1667 4688 4688 NT_STATUS_OK
ReadX 12678 6355 3516 3516 NT_STATUS_OK
ReadX 12678 9871 16384 16384 NT_STATUS_OK
ReadX 12678 26255 3771 3771 NT_STATUS_OK
ReadX 12678 30026 2048 2048 NT_STATUS_OK
ReadX 12678 32074 1024 1024 NT_STATUS_OK
ReadX 12678 33098 6652 6652 NT_STATUS_OK
ReadX 12678 39750 16384 16384 NT_STATUS_OK
ReadX 12678 56134 10496 10496 NT_STATUS_OK
ReadX 12678 66630 1784 1784 NT_STATUS_OK
ReadX 12678 68414 90 90 NT_STATUS_OK
ReadX 12678 68504 273 273 NT_STATUS_OK
ReadX 12678 68777 1600 1600 NT_STATUS_OK
ReadX 12678 70377 640 640 NT_STATUS_OK
ReadX 12678 71017 1280 1280 NT_STATUS_OK
ReadX 12678 72297 8464 8464 NT_STATUS_OK
ReadX 12678 80761 158 158 NT_STATUS_OK
ReadX 12678 80919 912 912 NT_STATUS_OK
ReadX 12678 81831 1980 1980 NT_STATUS_OK
ReadX 12678 83811 2256 2256 NT_STATUS_OK
ReadX 12678 86067 400 400 NT_STATUS_OK
ReadX 12678 86467 252 252 NT_STATUS_OK
ReadX 12678 86719 42 42 NT_STATUS_OK
ReadX 12678 86761 725 725 NT_STATUS_OK
ReadX 12678 2009 512 512 NT_STATUS_OK
ReadX 12678 3895 9 9 NT_STATUS_OK
ReadX 12678 3781 46 46 NT_STATUS_OK
ReadX 12678 4059 92 92 NT_STATUS_OK
ReadX 12678 3781 92 92 NT_STATUS_OK
ReadX 12678 3986 184 184 NT_STATUS_OK
ReadX 12678 3987 16384 16384 NT_STATUS_OK
ReadX 12678 3902 16384 16384 NT_STATUS_OK
ReadX 12678 3781 10240 10240 NT_STATUS_OK
ReadX 12678 3821 16384 16384 NT_STATUS_OK
ReadX 12678 3891 935 935 NT_STATUS_OK
ReadX 12678 4060 10240 10240 NT_STATUS_OK
ReadX 12678 4059 184 184 NT_STATUS_OK
ReadX 12678 256 184 184 NT_STATUS_OK
ReadX 12678 256 1026 1026 NT_STATUS_OK
ReadX 12678 3901 326 326 NT_STATUS_OK
ReadX 12678 3899 652 652 NT_STATUS_OK
ReadX 12678 256 2 2 NT_STATUS_OK
ReadX 12678 258 4948 4948 NT_STATUS_OK
Close 12678 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12696 NT_STATUS_OK
WriteX 12696 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12696 258 NT_STATUS_OK
WriteX 12696 0 65536 65536 NT_STATUS_OK
WriteX 12696 65536 65536 65536 NT_STATUS_OK
WriteX 12696 131072 65536 65536 NT_STATUS_OK
WriteX 12696 196608 65536 65536 NT_STATUS_OK
WriteX 12696 262144 65536 65536 NT_STATUS_OK
WriteX 12696 327680 65536 65536 NT_STATUS_OK
WriteX 12696 393216 65536 65536 NT_STATUS_OK
WriteX 12696 458752 65536 65536 NT_STATUS_OK
WriteX 12696 524288 65536 65536 NT_STATUS_OK
WriteX 12696 589824 35257 35257 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12701 NT_STATUS_OK
WriteX 12701 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12701 258 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 65536 65536 NT_STATUS_OK
WriteX 12701 131072 65536 65536 NT_STATUS_OK
WriteX 12701 196608 65536 65536 NT_STATUS_OK
WriteX 12701 262144 65536 65536 NT_STATUS_OK
WriteX 12701 327680 65536 65536 NT_STATUS_OK
WriteX 12701 393216 65536 65536 NT_STATUS_OK
WriteX 12701 458752 65536 65536 NT_STATUS_OK
WriteX 12701 524288 65536 65536 NT_STATUS_OK
WriteX 12701 589824 57598 57598 NT_STATUS_OK
Close 12701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12703 NT_STATUS_OK
WriteX 12703 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12703 258 NT_STATUS_OK
WriteX 12703 0 12543 12543 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12709 NT_STATUS_OK
QUERY_FILE_INFORMATION 12709 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12709 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12709 1005 NT_STATUS_OK
ReadX 12709 1938 24 24 NT_STATUS_OK
ReadX 12709 1920 276 276 NT_STATUS_OK
ReadX 12709 1918 14 14 NT_STATUS_OK
ReadX 12709 1918 7 7 NT_STATUS_OK
ReadX 12709 1919 12 12 NT_STATUS_OK
ReadX 12709 1919 8 8 NT_STATUS_OK
ReadX 12709 1917 15 15 NT_STATUS_OK
ReadX 12709 0 16 16 NT_STATUS_OK
ReadX 12709 16 2048 2048 NT_STATUS_OK
ReadX 12709 2064 2048 2048 NT_STATUS_OK
ReadX 12709 257 2048 2048 NT_STATUS_OK
ReadX 12709 385 2048 2048 NT_STATUS_OK
ReadX 12709 513 2048 2048 NT_STATUS_OK
ReadX 12709 641 2048 2048 NT_STATUS_OK
ReadX 12709 769 2048 2048 NT_STATUS_OK
ReadX 12709 897 2048 2048 NT_STATUS_OK
ReadX 12709 1025 2048 2048 NT_STATUS_OK
ReadX 12709 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12711 NT_STATUS_OK
Close 12711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12714 NT_STATUS_OK
WriteX 12714 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 258 NT_STATUS_OK
WriteX 12714 0 11588 11588 NT_STATUS_OK
Flush 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12715 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 4096 4096 NT_STATUS_OK
Close 12709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12719 NT_STATUS_OK
WriteX 12719 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 258 NT_STATUS_OK
WriteX 12719 0 11615 11615 NT_STATUS_OK
Flush 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12721 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12728 NT_STATUS_OK
WriteX 12728 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12728 258 NT_STATUS_OK
WriteX 12728 0 65536 65536 NT_STATUS_OK
WriteX 12728 65536 16050 16050 NT_STATUS_OK
Close 12728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12708 1939 64 64 NT_STATUS_OK
ReadX 12708 128 248 248 NT_STATUS_OK
ReadX 12708 128 568 568 NT_STATUS_OK
ReadX 12708 3872 1536 1536 NT_STATUS_OK
ReadX 12708 3456 2560 2560 NT_STATUS_OK
ReadX 12708 3136 512 512 NT_STATUS_OK
ReadX 12708 2880 4096 4096 NT_STATUS_OK
ReadX 12708 3264 3072 3072 NT_STATUS_OK
ReadX 12708 320 4096 4096 NT_STATUS_OK
ReadX 12708 1024 4096 4096 NT_STATUS_OK
ReadX 12708 3616 4096 4096 NT_STATUS_OK
ReadX 12708 1939 64 64 NT_STATUS_OK
ReadX 12708 128 248 248 NT_STATUS_OK
ReadX 12708 128 608 608 NT_STATUS_OK
ReadX 12708 2858 1024 1024 NT_STATUS_OK
ReadX 12708 2810 4096 4096 NT_STATUS_OK
ReadX 12708 2826 4096 4096 NT_STATUS_OK
ReadX 12708 2580 2048 2048 NT_STATUS_OK
ReadX 12708 2800 2560 2560 NT_STATUS_OK
ReadX 12708 2100 4096 4096 NT_STATUS_OK
ReadX 12708 2084 4096 4096 NT_STATUS_OK
ReadX 12708 868 4096 4096 NT_STATUS_OK
ReadX 12708 2324 4096 4096 NT_STATUS_OK
ReadX 12708 884 4096 4096 NT_STATUS_OK
ReadX 12708 2604 1024 1024 NT_STATUS_OK
ReadX 12708 580 4096 4096 NT_STATUS_OK
ReadX 12708 596 4096 4096 NT_STATUS_OK
ReadX 12708 2752 4096 4096 NT_STATUS_OK
ReadX 12708 2842 1024 1024 NT_STATUS_OK
ReadX 12708 660 4096 4096 NT_STATUS_OK
ReadX 12708 2720 4096 4096 NT_STATUS_OK
ReadX 12708 2736 4096 4096 NT_STATUS_OK
ReadX 12708 628 4096 4096 NT_STATUS_OK
ReadX 12708 2704 4096 4096 NT_STATUS_OK
ReadX 12708 1556 4096 4096 NT_STATUS_OK
ReadX 12708 576 4096 4096 NT_STATUS_OK
ReadX 12708 3168 1536 1536 NT_STATUS_OK
ReadX 12708 832 4096 4096 NT_STATUS_OK
ReadX 12708 1088 4096 4096 NT_STATUS_OK
ReadX 12708 1344 4096 4096 NT_STATUS_OK
ReadX 12708 1600 4096 4096 NT_STATUS_OK
ReadX 12708 1856 4096 4096 NT_STATUS_OK
ReadX 12708 2112 4096 4096 NT_STATUS_OK
ReadX 12708 1892 4096 4096 NT_STATUS_OK
ReadX 12708 820 4096 4096 NT_STATUS_OK
ReadX 12708 788 4096 4096 NT_STATUS_OK
ReadX 12708 1604 4096 4096 NT_STATUS_OK
ReadX 12708 3648 4096 4096 NT_STATUS_OK
ReadX 12708 2608 4096 4096 NT_STATUS_OK
ReadX 12708 548 4096 4096 NT_STATUS_OK
ReadX 12708 740 4096 4096 NT_STATUS_OK
ReadX 12708 1344 4096 4096 NT_STATUS_OK
ReadX 12708 3392 4096 4096 NT_STATUS_OK
ReadX 12708 3904 4096 4096 NT_STATUS_OK
ReadX 12708 644 4096 4096 NT_STATUS_OK
ReadX 12708 676 4096 4096 NT_STATUS_OK
ReadX 12708 2688 4096 4096 NT_STATUS_OK
ReadX 12708 320 4096 4096 NT_STATUS_OK
ReadX 12708 900 4096 4096 NT_STATUS_OK
ReadX 12708 1908 4096 4096 NT_STATUS_OK
ReadX 12708 852 4096 4096 NT_STATUS_OK
ReadX 12708 724 4096 4096 NT_STATUS_OK
ReadX 12708 2292 4096 4096 NT_STATUS_OK
ReadX 12708 612 4096 4096 NT_STATUS_OK
ReadX 12708 388 4096 4096 NT_STATUS_OK
ReadX 12708 2368 4096 4096 NT_STATUS_OK
ReadX 12708 2624 4096 4096 NT_STATUS_OK
ReadX 12708 500 4096 4096 NT_STATUS_OK
ReadX 12708 356 4096 4096 NT_STATUS_OK
ReadX 12708 1024 4096 4096 NT_STATUS_OK
ReadX 12708 576 4096 4096 NT_STATUS_OK
ReadX 12708 340 4096 4096 NT_STATUS_OK
ReadX 12708 420 4096 4096 NT_STATUS_OK
ReadX 12708 1600 4096 4096 NT_STATUS_OK
ReadX 12708 404 4096 4096 NT_STATUS_OK
ReadX 12708 1428 4096 4096 NT_STATUS_OK
ReadX 12708 2656 4096 4096 NT_STATUS_OK
ReadX 12708 2624 4096 4096 NT_STATUS_OK
ReadX 12708 452 4096 4096 NT_STATUS_OK
ReadX 12708 692 4096 4096 NT_STATUS_OK
ReadX 12708 564 4096 4096 NT_STATUS_OK
ReadX 12708 372 4096 4096 NT_STATUS_OK
ReadX 12708 468 4096 4096 NT_STATUS_OK
ReadX 12708 484 4096 4096 NT_STATUS_OK
ReadX 12708 1088 4096 4096 NT_STATUS_OK
ReadX 12708 1924 4096 4096 NT_STATUS_OK
ReadX 12708 2768 4096 4096 NT_STATUS_OK
ReadX 12708 832 4096 4096 NT_STATUS_OK
ReadX 12708 836 4096 4096 NT_STATUS_OK
ReadX 12708 1856 4096 4096 NT_STATUS_OK
ReadX 12708 2640 4096 4096 NT_STATUS_OK
ReadX 12708 436 4096 4096 NT_STATUS_OK
ReadX 12708 1828 4096 4096 NT_STATUS_OK
ReadX 12708 804 4096 4096 NT_STATUS_OK
ReadX 12708 1860 4096 4096 NT_STATUS_OK
ReadX 12708 1812 4096 4096 NT_STATUS_OK
ReadX 12708 756 4096 4096 NT_STATUS_OK
ReadX 12708 1636 4096 4096 NT_STATUS_OK
ReadX 12708 772 4096 4096 NT_STATUS_OK
ReadX 12708 2036 4096 4096 NT_STATUS_OK
ReadX 12708 1220 4096 4096 NT_STATUS_OK
ReadX 12708 1652 4096 4096 NT_STATUS_OK
ReadX 12708 2588 4096 4096 NT_STATUS_OK
ReadX 12708 916 4096 4096 NT_STATUS_OK
ReadX 12708 260 4096 4096 NT_STATUS_OK
ReadX 12708 932 4096 4096 NT_STATUS_OK
ReadX 12708 2624 4096 4096 NT_STATUS_OK
ReadX 12708 308 4096 4096 NT_STATUS_OK
ReadX 12708 292 4096 4096 NT_STATUS_OK
ReadX 12708 1140 4096 4096 NT_STATUS_OK
ReadX 12708 276 4096 4096 NT_STATUS_OK
ReadX 12708 2020 4096 4096 NT_STATUS_OK
ReadX 12708 2880 4096 4096 NT_STATUS_OK
ReadX 12708 516 4096 4096 NT_STATUS_OK
ReadX 12708 1844 4096 4096 NT_STATUS_OK
ReadX 12708 1124 4096 4096 NT_STATUS_OK
ReadX 12708 3136 4096 4096 NT_STATUS_OK
ReadX 12708 324 4096 4096 NT_STATUS_OK
ReadX 12708 1156 4096 4096 NT_STATUS_OK
ReadX 12708 1172 4096 4096 NT_STATUS_OK
ReadX 12708 2112 4096 4096 NT_STATUS_OK
ReadX 12708 2368 4096 4096 NT_STATUS_OK
ReadX 12708 964 4096 4096 NT_STATUS_OK
ReadX 12708 980 4096 4096 NT_STATUS_OK
ReadX 12708 1012 4096 4096 NT_STATUS_OK
ReadX 12708 532 4096 4096 NT_STATUS_OK
ReadX 12708 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12708 1620 4096 4096 NT_STATUS_OK
ReadX 12708 1604 4096 4096 NT_STATUS_OK
ReadX 12708 2116 4096 4096 NT_STATUS_OK
ReadX 12708 2132 4096 4096 NT_STATUS_OK
ReadX 12708 2148 4096 4096 NT_STATUS_OK
ReadX 12708 2276 4096 4096 NT_STATUS_OK
ReadX 12708 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12730 NT_STATUS_OK
Close 12730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12733 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 1004 NT_STATUS_OK
Close 12688 NT_STATUS_OK
WriteX 12733 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12733 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12690 1004 NT_STATUS_OK
Close 12690 NT_STATUS_OK
WriteX 12733 0 65536 65536 NT_STATUS_OK
WriteX 12733 65536 64850 64850 NT_STATUS_OK
Close 12733 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12735 NT_STATUS_OK
WriteX 12735 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12735 258 NT_STATUS_OK
ReadX 12708 2068 4096 4096 NT_STATUS_OK
ReadX 12708 1588 4096 4096 NT_STATUS_OK
ReadX 12708 1572 4096 4096 NT_STATUS_OK
WriteX 12735 0 18630 18630 NT_STATUS_OK
Flush 12735 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12708 612 4096 4096 NT_STATUS_OK
ReadX 12708 564 4096 4096 NT_STATUS_OK
ReadX 12708 1876 4096 4096 NT_STATUS_OK
ReadX 12708 628 4096 4096 NT_STATUS_OK
ReadX 12708 740 4096 4096 NT_STATUS_OK
ReadX 12708 724 4096 4096 NT_STATUS_OK
ReadX 12708 644 4096 4096 NT_STATUS_OK
ReadX 12708 2324 4096 4096 NT_STATUS_OK
ReadX 12708 660 4096 4096 NT_STATUS_OK
ReadX 12708 852 4096 4096 NT_STATUS_OK
ReadX 12708 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12708 2368 4096 4096 NT_STATUS_OK
ReadX 12708 1024 4096 4096 NT_STATUS_OK
ReadX 12708 320 4096 4096 NT_STATUS_OK
ReadX 12708 580 4096 4096 NT_STATUS_OK
ReadX 12708 3136 512 512 NT_STATUS_OK
ReadX 12708 2880 4096 4096 NT_STATUS_OK
Close 12708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 61440 4096 4096 NT_STATUS_OK
ReadX 12740 126976 4096 4096 NT_STATUS_OK
WriteX 12740 0 65536 65536 NT_STATUS_OK
WriteX 12740 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 61440 4096 4096 NT_STATUS_OK
ReadX 12741 126976 4096 4096 NT_STATUS_OK
ReadX 12741 192512 4096 4096 NT_STATUS_OK
ReadX 12741 258048 4096 4096 NT_STATUS_OK
WriteX 12741 0 65536 65536 NT_STATUS_OK
WriteX 12741 65536 65536 65536 NT_STATUS_OK
WriteX 12741 131072 65536 65536 NT_STATUS_OK
WriteX 12741 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12742 NT_STATUS_OK
ReadX 12742 61440 4096 4096 NT_STATUS_OK
ReadX 12742 126976 4096 4096 NT_STATUS_OK
ReadX 12742 192512 4096 4096 NT_STATUS_OK
ReadX 12742 258048 4096 4096 NT_STATUS_OK
ReadX 12742 323584 4096 4096 NT_STATUS_OK
ReadX 12742 389120 4096 4096 NT_STATUS_OK
ReadX 12742 454656 4096 4096 NT_STATUS_OK
ReadX 12742 520192 4096 4096 NT_STATUS_OK
WriteX 12742 0 65536 65536 NT_STATUS_OK
WriteX 12742 65536 65536 65536 NT_STATUS_OK
WriteX 12742 131072 65536 65536 NT_STATUS_OK
WriteX 12742 196608 65536 65536 NT_STATUS_OK
WriteX 12742 262144 65536 65536 NT_STATUS_OK
WriteX 12742 327680 65536 65536 NT_STATUS_OK
WriteX 12742 393216 65536 65536 NT_STATUS_OK
WriteX 12742 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12744 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12745 NT_STATUS_OK
WriteX 12745 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12745 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12743 0 8192 8192 NT_STATUS_OK
Flush 12743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12743 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12743 0 8192 8192 NT_STATUS_OK
Flush 12743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12743 0 8192 8192 NT_STATUS_OK
Flush 12743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12743 0 8192 8192 NT_STATUS_OK
Flush 12743 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12747 NT_STATUS_OK
Close 12747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12750 NT_STATUS_OK
WriteX 12750 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12750 258 NT_STATUS_OK
WriteX 12750 0 62591 62591 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12755 NT_STATUS_OK
WriteX 12755 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12755 258 NT_STATUS_OK
WriteX 12755 0 10845 10845 NT_STATUS_OK
Close 12755 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12757 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12760 NT_STATUS_OK
WriteX 12760 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12760 258 NT_STATUS_OK
WriteX 12760 0 30118 30118 NT_STATUS_OK
Close 12760 NT_STATUS_OK
WriteX 12743 0 4096 4096 NT_STATUS_OK
WriteX 12745 0 64 64 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 61440 61440 NT_STATUS_OK
ReadX 12762 61440 4096 4096 NT_STATUS_OK
ReadX 12762 65536 61440 61440 NT_STATUS_OK
ReadX 12762 126976 4096 4096 NT_STATUS_OK
ReadX 12762 131072 61440 61440 NT_STATUS_OK
ReadX 12762 192512 4096 4096 NT_STATUS_OK
ReadX 12762 196608 61440 61440 NT_STATUS_OK
ReadX 12762 258048 4096 4096 NT_STATUS_OK
ReadX 12762 262144 61440 61440 NT_STATUS_OK
ReadX 12762 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 61440 61440 NT_STATUS_OK
ReadX 12763 61440 4096 4096 NT_STATUS_OK
ReadX 12763 65536 61440 61440 NT_STATUS_OK
ReadX 12763 126976 4096 4096 NT_STATUS_OK
ReadX 12763 131072 61440 61440 NT_STATUS_OK
ReadX 12763 192512 4096 4096 NT_STATUS_OK
ReadX 12763 196608 61440 61440 NT_STATUS_OK
ReadX 12763 258048 4096 4096 NT_STATUS_OK
ReadX 12763 262144 61440 61440 NT_STATUS_OK
ReadX 12763 323584 4096 4096 NT_STATUS_OK
ReadX 12763 327680 61440 61440 NT_STATUS_OK
ReadX 12763 389120 4096 4096 NT_STATUS_OK
ReadX 12763 393216 61440 61440 NT_STATUS_OK
ReadX 12763 454656 4096 4096 NT_STATUS_OK
ReadX 12763 458752 61440 61440 NT_STATUS_OK
ReadX 12763 520192 4096 4096 NT_STATUS_OK
ReadX 12763 524288 61440 61440 NT_STATUS_OK
ReadX 12763 585728 4096 4096 NT_STATUS_OK
ReadX 12763 589824 61440 61440 NT_STATUS_OK
ReadX 12763 651264 4096 4096 NT_STATUS_OK
ReadX 12763 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 61440 61440 NT_STATUS_OK
ReadX 12764 61440 4096 4096 NT_STATUS_OK
ReadX 12764 65536 61440 61440 NT_STATUS_OK
ReadX 12764 126976 4096 4096 NT_STATUS_OK
ReadX 12764 131072 61440 61440 NT_STATUS_OK
ReadX 12764 192512 4096 4096 NT_STATUS_OK
ReadX 12764 196608 61440 61440 NT_STATUS_OK
ReadX 12764 258048 4096 4096 NT_STATUS_OK
ReadX 12764 262144 61440 61440 NT_STATUS_OK
ReadX 12764 323584 4096 4096 NT_STATUS_OK
ReadX 12764 327680 61440 61440 NT_STATUS_OK
ReadX 12764 389120 4096 4096 NT_STATUS_OK
ReadX 12764 393216 61440 61440 NT_STATUS_OK
ReadX 12764 454656 4096 4096 NT_STATUS_OK
ReadX 12764 458752 61440 61440 NT_STATUS_OK
ReadX 12764 520192 4096 4096 NT_STATUS_OK
ReadX 12764 524288 61440 61440 NT_STATUS_OK
ReadX 12764 585728 4096 4096 NT_STATUS_OK
ReadX 12764 589824 61440 61440 NT_STATUS_OK
ReadX 12764 651264 4096 4096 NT_STATUS_OK
ReadX 12764 655360 61440 61440 NT_STATUS_OK
ReadX 12764 716800 4096 4096 NT_STATUS_OK
ReadX 12764 720896 61440 61440 NT_STATUS_OK
ReadX 12764 782336 4096 4096 NT_STATUS_OK
ReadX 12764 786432 61440 61440 NT_STATUS_OK
ReadX 12764 847872 4096 4096 NT_STATUS_OK
ReadX 12764 851968 61440 61440 NT_STATUS_OK
ReadX 12764 913408 4096 4096 NT_STATUS_OK
ReadX 12764 917504 61440 61440 NT_STATUS_OK
ReadX 12764 978944 4096 4096 NT_STATUS_OK
ReadX 12764 983040 61440 61440 NT_STATUS_OK
ReadX 12764 1044480 4096 4096 NT_STATUS_OK
ReadX 12764 1048576 61440 61440 NT_STATUS_OK
ReadX 12764 1110016 4096 4096 NT_STATUS_OK
ReadX 12764 1114112 61440 61440 NT_STATUS_OK
ReadX 12764 1175552 4096 4096 NT_STATUS_OK
ReadX 12764 1179648 61440 61440 NT_STATUS_OK
ReadX 12764 1241088 4096 4096 NT_STATUS_OK
ReadX 12764 1245184 61440 61440 NT_STATUS_OK
ReadX 12764 1306624 4096 4096 NT_STATUS_OK
ReadX 12764 1310720 61440 61440 NT_STATUS_OK
ReadX 12764 1372160 4096 4096 NT_STATUS_OK
ReadX 12764 1376256 61440 61440 NT_STATUS_OK
ReadX 12764 1437696 4096 4096 NT_STATUS_OK
ReadX 12764 1441792 61440 61440 NT_STATUS_OK
ReadX 12764 1503232 4096 4096 NT_STATUS_OK
ReadX 12764 1507328 61440 61440 NT_STATUS_OK
ReadX 12764 1568768 4096 4096 NT_STATUS_OK
ReadX 12764 1572864 61440 61440 NT_STATUS_OK
ReadX 12764 1634304 4096 4096 NT_STATUS_OK
ReadX 12764 1638400 61440 61440 NT_STATUS_OK
ReadX 12764 1699840 4096 4096 NT_STATUS_OK
ReadX 12764 1703936 61440 61440 NT_STATUS_OK
ReadX 12764 1765376 4096 4096 NT_STATUS_OK
ReadX 12764 1769472 61440 61440 NT_STATUS_OK
ReadX 12764 1830912 4096 4096 NT_STATUS_OK
ReadX 12764 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
ReadX 12769 4096 4096 4096 NT_STATUS_OK
ReadX 12769 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12770 NT_STATUS_OK
Close 12770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12773 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12774 NT_STATUS_OK
Close 12774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 8192 8192 NT_STATUS_OK
ReadX 12777 8192 8192 8192 NT_STATUS_OK
ReadX 12777 16384 8192 8192 NT_STATUS_OK
ReadX 12777 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12779 NT_STATUS_OK
Close 12779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12782 NT_STATUS_OK
WriteX 12782 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12782 258 NT_STATUS_OK
WriteX 12782 0 10438 10438 NT_STATUS_OK
Close 12782 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12785 NT_STATUS_OK
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12786 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12788 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12789 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12790 NT_STATUS_OK
Close 12790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
ReadX 12791 4096 4096 4096 NT_STATUS_OK
ReadX 12791 8192 4096 4096 NT_STATUS_OK
ReadX 12791 12288 8192 8192 NT_STATUS_OK
ReadX 12791 20480 8192 8192 NT_STATUS_OK
ReadX 12791 28672 8192 8192 NT_STATUS_OK
ReadX 12791 36864 8192 8192 NT_STATUS_OK
ReadX 12791 45056 8192 8192 NT_STATUS_OK
ReadX 12791 53248 8192 8192 NT_STATUS_OK
ReadX 12791 61440 8192 8192 NT_STATUS_OK
ReadX 12791 69632 8192 8192 NT_STATUS_OK
ReadX 12791 77824 8192 8192 NT_STATUS_OK
ReadX 12791 86016 8192 8192 NT_STATUS_OK
ReadX 12791 94208 8192 8192 NT_STATUS_OK
ReadX 12791 102400 8192 8192 NT_STATUS_OK
ReadX 12791 110592 8192 8192 NT_STATUS_OK
ReadX 12791 118784 8192 8192 NT_STATUS_OK
ReadX 12791 126976 8192 8192 NT_STATUS_OK
ReadX 12791 135168 8192 8192 NT_STATUS_OK
ReadX 12791 143360 8192 8192 NT_STATUS_OK
ReadX 12791 151552 8192 8192 NT_STATUS_OK
ReadX 12791 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12786 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12796 NT_STATUS_OK
WriteX 12796 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12796 258 NT_STATUS_OK
WriteX 12796 0 28489 28489 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12799 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12800 NT_STATUS_OK
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12802 NT_STATUS_OK
ReadX 12802 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 8192 8192 NT_STATUS_OK
ReadX 12803 8192 8192 8192 NT_STATUS_OK
ReadX 12803 16384 8192 8192 NT_STATUS_OK
ReadX 12803 24576 8192 8192 NT_STATUS_OK
ReadX 12803 32768 16384 16384 NT_STATUS_OK
ReadX 12803 49152 8192 8192 NT_STATUS_OK
ReadX 12803 57344 8192 8192 NT_STATUS_OK
ReadX 12803 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12802 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12808 NT_STATUS_OK
WriteX 12808 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12808 258 NT_STATUS_OK
WriteX 12808 0 29253 29253 NT_STATUS_OK
Close 12808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12809 NT_STATUS_OK
Close 12809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12815 NT_STATUS_OK
WriteX 12815 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12815 258 NT_STATUS_OK
WriteX 12815 0 30183 30183 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12818 NT_STATUS_OK
WriteX 12818 0 510 510 NT_STATUS_OK
WriteX 12818 510 512 512 NT_STATUS_OK
WriteX 12818 1022 510 510 NT_STATUS_OK
WriteX 12818 1532 510 510 NT_STATUS_OK
WriteX 12818 2042 168 168 NT_STATUS_OK
Close 12818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12819 NT_STATUS_OK
Close 12819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
WriteX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 61440 4096 4096 NT_STATUS_OK
ReadX 12822 126976 4096 4096 NT_STATUS_OK
WriteX 12822 0 65536 65536 NT_STATUS_OK
WriteX 12822 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12823 NT_STATUS_OK
ReadX 12823 61440 4096 4096 NT_STATUS_OK
ReadX 12823 126976 4096 4096 NT_STATUS_OK
ReadX 12823 192512 4096 4096 NT_STATUS_OK
ReadX 12823 258048 4096 4096 NT_STATUS_OK
WriteX 12823 0 65536 65536 NT_STATUS_OK
WriteX 12823 65536 65536 65536 NT_STATUS_OK
WriteX 12823 131072 65536 65536 NT_STATUS_OK
WriteX 12823 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 61440 4096 4096 NT_STATUS_OK
ReadX 12824 126976 4096 4096 NT_STATUS_OK
ReadX 12824 192512 4096 4096 NT_STATUS_OK
ReadX 12824 258048 4096 4096 NT_STATUS_OK
ReadX 12824 323584 4096 4096 NT_STATUS_OK
ReadX 12824 389120 4096 4096 NT_STATUS_OK
ReadX 12824 454656 4096 4096 NT_STATUS_OK
ReadX 12824 520192 4096 4096 NT_STATUS_OK
WriteX 12824 0 65536 65536 NT_STATUS_OK
WriteX 12824 65536 65536 65536 NT_STATUS_OK
WriteX 12824 131072 65536 65536 NT_STATUS_OK
WriteX 12824 196608 65536 65536 NT_STATUS_OK
WriteX 12824 262144 65536 65536 NT_STATUS_OK
WriteX 12824 327680 65536 65536 NT_STATUS_OK
WriteX 12824 393216 65536 65536 NT_STATUS_OK
WriteX 12824 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12823 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12854 NT_STATUS_OK
Close 12854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12869 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12890 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12893 NT_STATUS_OK
WriteX 12893 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12893 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12893 0 65536 65536 NT_STATUS_OK
WriteX 12893 65536 65536 65536 NT_STATUS_OK
WriteX 12893 131072 65536 65536 NT_STATUS_OK
WriteX 12893 196608 65536 65536 NT_STATUS_OK
WriteX 12893 262144 26634 26634 NT_STATUS_OK
Close 12893 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12898 NT_STATUS_OK
Close 12898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
Close 12900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 4096 4096 NT_STATUS_OK
ReadX 12901 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12902 NT_STATUS_OK
Close 12902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12909 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12918 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12934 NT_STATUS_OK
Close 12934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12944 NT_STATUS_OK
Close 12944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12949 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12968 NT_STATUS_OK
Close 12968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Close 12996 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13025 0 4096 4096 NT_STATUS_OK
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
ReadX 13027 4096 4096 4096 NT_STATUS_OK
ReadX 13027 8192 4096 4096 NT_STATUS_OK
ReadX 13027 12288 4096 4096 NT_STATUS_OK
ReadX 13027 16384 4096 4096 NT_STATUS_OK
ReadX 13027 20480 4096 4096 NT_STATUS_OK
ReadX 13027 24576 4096 4096 NT_STATUS_OK
ReadX 13027 28672 4096 4096 NT_STATUS_OK
ReadX 13027 32768 4096 4096 NT_STATUS_OK
ReadX 13027 36864 4096 4096 NT_STATUS_OK
ReadX 13027 40960 4096 4096 NT_STATUS_OK
ReadX 13027 45056 4096 4096 NT_STATUS_OK
ReadX 13027 49152 4096 4096 NT_STATUS_OK
ReadX 13027 53248 4096 4096 NT_STATUS_OK
ReadX 13027 57344 4096 4096 NT_STATUS_OK
ReadX 13027 61440 4096 4096 NT_STATUS_OK
ReadX 13027 65536 4096 4096 NT_STATUS_OK
ReadX 13027 69632 4096 4096 NT_STATUS_OK
ReadX 13027 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13027 1004 NT_STATUS_OK
WriteX 13027 0 4096 4096 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13028 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13030 NT_STATUS_OK
Close 13030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13033 NT_STATUS_OK
WriteX 13033 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13033 258 NT_STATUS_OK
WriteX 13033 0 65536 65536 NT_STATUS_OK
WriteX 13033 65536 19979 19979 NT_STATUS_OK
Close 13033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13034 NT_STATUS_OK
ReadX 13034 0 4096 4096 NT_STATUS_OK
WriteX 13034 0 4096 4096 NT_STATUS_OK
Flush 13034 NT_STATUS_OK
WriteX 13034 0 4096 4096 NT_STATUS_OK
Flush 13034 NT_STATUS_OK
QUERY_FILE_INFORMATION 13034 1004 NT_STATUS_OK
WriteX 13034 0 4096 4096 NT_STATUS_OK
Flush 13034 NT_STATUS_OK
WriteX 13034 0 4096 4096 NT_STATUS_OK
Flush 13034 NT_STATUS_OK
WriteX 13034 0 4096 4096 NT_STATUS_OK
Flush 13034 NT_STATUS_OK
SET_FILE_INFORMATION 13034 1004 NT_STATUS_OK
WriteX 13034 0 4096 4096 NT_STATUS_OK
Flush 13034 NT_STATUS_OK
Close 13034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13035 NT_STATUS_OK
ReadX 13035 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
Close 13037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13039 1004 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13040 NT_STATUS_OK
Close 13040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13045 NT_STATUS_OK
WriteX 13045 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13045 258 NT_STATUS_OK
WriteX 13045 0 65536 65536 NT_STATUS_OK
WriteX 13045 65536 17654 17654 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 1004 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
SET_FILE_INFORMATION 13046 1004 NT_STATUS_OK
WriteX 13046 0 4096 4096 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13047 NT_STATUS_OK
SET_FILE_INFORMATION 13047 1004 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13049 NT_STATUS_OK
Close 13049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13051 NT_STATUS_OK
ReadX 13051 0 4096 4096 NT_STATUS_OK
ReadX 13051 4096 4096 4096 NT_STATUS_OK
ReadX 13051 8192 4096 4096 NT_STATUS_OK
ReadX 13051 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13051 16384 4096 4096 NT_STATUS_OK
ReadX 13051 20480 4096 4096 NT_STATUS_OK
ReadX 13051 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13052 NT_STATUS_OK
ReadX 13052 0 4096 4096 NT_STATUS_OK
Close 13052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13053 NT_STATUS_OK
ReadX 13053 0 4096 4096 NT_STATUS_OK
Close 13053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13054 NT_STATUS_OK
ReadX 13054 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13054 1004 NT_STATUS_OK
WriteX 13054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13060 NT_STATUS_OK
WriteX 13060 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13060 258 NT_STATUS_OK
WriteX 13060 0 65536 65536 NT_STATUS_OK
WriteX 13060 65536 19490 19490 NT_STATUS_OK
Close 13060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13061 NT_STATUS_OK
ReadX 13061 0 4096 4096 NT_STATUS_OK
WriteX 13061 0 4096 4096 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
WriteX 13061 0 4096 4096 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
QUERY_FILE_INFORMATION 13061 1004 NT_STATUS_OK
WriteX 13061 0 4096 4096 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
WriteX 13061 0 4096 4096 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
WriteX 13061 0 4096 4096 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
SET_FILE_INFORMATION 13061 1004 NT_STATUS_OK
WriteX 13061 0 4096 4096 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13062 NT_STATUS_OK
SET_FILE_INFORMATION 13062 1004 NT_STATUS_OK
Close 13062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13064 NT_STATUS_OK
Close 13064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13066 0 4096 4096 NT_STATUS_OK
Close 13066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
ReadX 13068 4096 4096 4096 NT_STATUS_OK
ReadX 13068 8192 4096 4096 NT_STATUS_OK
ReadX 13068 12288 4096 4096 NT_STATUS_OK
ReadX 13068 16384 4096 4096 NT_STATUS_OK
ReadX 13068 20480 4096 4096 NT_STATUS_OK
ReadX 13068 24576 4096 4096 NT_STATUS_OK
ReadX 13068 28672 4096 4096 NT_STATUS_OK
ReadX 13068 32768 4096 4096 NT_STATUS_OK
ReadX 13068 36864 4096 4096 NT_STATUS_OK
ReadX 13068 40960 4096 4096 NT_STATUS_OK
ReadX 13068 45056 4096 4096 NT_STATUS_OK
ReadX 13068 49152 4096 4096 NT_STATUS_OK
ReadX 13068 53248 4096 4096 NT_STATUS_OK
ReadX 13068 57344 4096 4096 NT_STATUS_OK
ReadX 13068 61440 4096 4096 NT_STATUS_OK
ReadX 13068 65536 4096 4096 NT_STATUS_OK
ReadX 13068 69632 4096 4096 NT_STATUS_OK
ReadX 13068 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13068 1004 NT_STATUS_OK
WriteX 13068 0 4096 4096 NT_STATUS_OK
Close 13068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13069 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
Close 13069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13074 NT_STATUS_OK
WriteX 13074 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13074 258 NT_STATUS_OK
WriteX 13074 0 65536 65536 NT_STATUS_OK
WriteX 13074 65536 8866 8866 NT_STATUS_OK
Close 13074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
WriteX 13075 0 4096 4096 NT_STATUS_OK
Flush 13075 NT_STATUS_OK
SET_FILE_INFORMATION 13075 1004 NT_STATUS_OK
WriteX 13075 0 4096 4096 NT_STATUS_OK
Flush 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
Close 13077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
Close 13078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13079 1004 NT_STATUS_OK
WriteX 13079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13082 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13085 NT_STATUS_OK
WriteX 13085 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13085 258 NT_STATUS_OK
WriteX 13085 0 65536 65536 NT_STATUS_OK
WriteX 13085 65536 9298 9298 NT_STATUS_OK
Close 13085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
WriteX 13086 0 4096 4096 NT_STATUS_OK
Flush 13086 NT_STATUS_OK
SET_FILE_INFORMATION 13086 1004 NT_STATUS_OK
WriteX 13086 0 4096 4096 NT_STATUS_OK
Flush 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13087 NT_STATUS_OK
SET_FILE_INFORMATION 13087 1004 NT_STATUS_OK
Close 13087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13088 NT_STATUS_OK
ReadX 13088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13089 NT_STATUS_OK
Close 13089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13092 0 4096 4096 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13093 NT_STATUS_OK
ReadX 13093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13093 4096 4096 4096 NT_STATUS_OK
ReadX 13093 8192 4096 4096 NT_STATUS_OK
ReadX 13093 12288 4096 4096 NT_STATUS_OK
ReadX 13093 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13095 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
Close 13095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13096 NT_STATUS_OK
ReadX 13096 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13096 1004 NT_STATUS_OK
WriteX 13096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Close 13096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13102 NT_STATUS_OK
WriteX 13102 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13102 258 NT_STATUS_OK
WriteX 13102 0 65536 65536 NT_STATUS_OK
WriteX 13102 65536 11540 11540 NT_STATUS_OK
Close 13102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
WriteX 13103 0 4096 4096 NT_STATUS_OK
Flush 13103 NT_STATUS_OK
SET_FILE_INFORMATION 13103 1004 NT_STATUS_OK
WriteX 13103 0 4096 4096 NT_STATUS_OK
Flush 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13104 NT_STATUS_OK
SET_FILE_INFORMATION 13104 1004 NT_STATUS_OK
Close 13104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13108 NT_STATUS_OK
ReadX 13108 61440 4096 4096 NT_STATUS_OK
ReadX 13108 126976 4096 4096 NT_STATUS_OK
WriteX 13108 0 65536 65536 NT_STATUS_OK
WriteX 13108 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 61440 4096 4096 NT_STATUS_OK
ReadX 13109 126976 4096 4096 NT_STATUS_OK
ReadX 13109 192512 4096 4096 NT_STATUS_OK
ReadX 13109 258048 4096 4096 NT_STATUS_OK
WriteX 13109 0 65536 65536 NT_STATUS_OK
WriteX 13109 65536 65536 65536 NT_STATUS_OK
WriteX 13109 131072 65536 65536 NT_STATUS_OK
WriteX 13109 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 61440 4096 4096 NT_STATUS_OK
ReadX 13110 126976 4096 4096 NT_STATUS_OK
ReadX 13110 192512 4096 4096 NT_STATUS_OK
ReadX 13110 258048 4096 4096 NT_STATUS_OK
ReadX 13110 323584 4096 4096 NT_STATUS_OK
ReadX 13110 389120 4096 4096 NT_STATUS_OK
ReadX 13110 454656 4096 4096 NT_STATUS_OK
ReadX 13110 520192 4096 4096 NT_STATUS_OK
WriteX 13110 0 65536 65536 NT_STATUS_OK
WriteX 13110 65536 65536 65536 NT_STATUS_OK
WriteX 13110 131072 65536 65536 NT_STATUS_OK
WriteX 13110 196608 65536 65536 NT_STATUS_OK
WriteX 13110 262144 65536 65536 NT_STATUS_OK
WriteX 13110 327680 65536 65536 NT_STATUS_OK
WriteX 13110 393216 65536 65536 NT_STATUS_OK
WriteX 13110 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13111 NT_STATUS_OK
ReadX 13111 0 4096 4096 NT_STATUS_OK
ReadX 13111 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13112 NT_STATUS_OK
WriteX 13112 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13112 258 NT_STATUS_OK
WriteX 13112 0 53 53 NT_STATUS_OK
Close 13112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Close 13051 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13111 8192 4096 4096 NT_STATUS_OK
ReadX 13111 12288 4096 4096 NT_STATUS_OK
WriteX 13115 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13115 258 NT_STATUS_OK
ReadX 13111 16384 4096 4096 NT_STATUS_OK
ReadX 13111 20480 4096 4096 NT_STATUS_OK
WriteX 13115 0 15360 15360 NT_STATUS_OK
Close 13115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13116 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13116 1004 NT_STATUS_OK
WriteX 13116 0 4096 4096 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13120 NT_STATUS_OK
Close 13120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13119 4096 4096 4096 NT_STATUS_OK
ReadX 13119 8192 4096 4096 NT_STATUS_OK
ReadX 13119 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 4096 4096 NT_STATUS_OK
ReadX 13122 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 4096 4096 NT_STATUS_OK
ReadX 13123 4096 4096 4096 NT_STATUS_OK
ReadX 13123 8192 4096 4096 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13124 NT_STATUS_OK
WriteX 13124 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13124 258 NT_STATUS_OK
WriteX 13124 0 15360 15360 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13125 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13125 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13126 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13129 NT_STATUS_OK
SET_FILE_INFORMATION 13129 1004 NT_STATUS_OK
Close 13129 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Close 13125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
ReadX 13132 4096 4096 4096 NT_STATUS_OK
ReadX 13132 8192 4096 4096 NT_STATUS_OK
ReadX 13132 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13132 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13132 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13134 NT_STATUS_OK
WriteX 13134 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13134 258 NT_STATUS_OK
WriteX 13134 0 53 53 NT_STATUS_OK
Close 13134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13133 4096 4096 4096 NT_STATUS_OK
ReadX 13133 8192 4096 4096 NT_STATUS_OK
ReadX 13133 12288 4096 4096 NT_STATUS_OK
WriteX 13137 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13137 258 NT_STATUS_OK
WriteX 13137 0 12006 12006 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13138 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13138 1004 NT_STATUS_OK
WriteX 13138 0 4096 4096 NT_STATUS_OK
Close 13138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13139 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13141 4096 4096 4096 NT_STATUS_OK
ReadX 13141 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13144 NT_STATUS_OK
WriteX 13144 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13144 258 NT_STATUS_OK
WriteX 13144 0 11991 11991 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13145 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13145 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13149 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
Close 13149 NT_STATUS_OK
WriteX 13145 0 4096 4096 NT_STATUS_OK
Close 13145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13152 NT_STATUS_OK
ReadX 13152 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13153 NT_STATUS_OK
Close 13153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13152 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13152 1004 NT_STATUS_OK
ReadX 13152 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13152 1004 NT_STATUS_OK
WriteX 13152 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13152 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13152 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13152 1004 NT_STATUS_OK
Close 13128 NT_STATUS_OK
WriteX 13132 0 19054 19054 NT_STATUS_OK
WriteX 13152 0 12288 12288 NT_STATUS_OK
Close 13148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13132 NT_STATUS_OK
Close 13152 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13159 NT_STATUS_OK
ReadX 13159 0 61440 61440 NT_STATUS_OK
ReadX 13159 61440 4096 4096 NT_STATUS_OK
ReadX 13159 65536 61440 61440 NT_STATUS_OK
ReadX 13159 126976 4096 4096 NT_STATUS_OK
ReadX 13159 131072 61440 61440 NT_STATUS_OK
ReadX 13159 192512 4096 4096 NT_STATUS_OK
ReadX 13159 196608 61440 61440 NT_STATUS_OK
ReadX 13159 258048 4096 4096 NT_STATUS_OK
ReadX 13159 262144 61440 61440 NT_STATUS_OK
ReadX 13159 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13160 NT_STATUS_OK
ReadX 13160 0 61440 61440 NT_STATUS_OK
ReadX 13160 61440 4096 4096 NT_STATUS_OK
ReadX 13160 65536 61440 61440 NT_STATUS_OK
ReadX 13160 126976 4096 4096 NT_STATUS_OK
ReadX 13160 131072 61440 61440 NT_STATUS_OK
ReadX 13160 192512 4096 4096 NT_STATUS_OK
ReadX 13160 196608 61440 61440 NT_STATUS_OK
ReadX 13160 258048 4096 4096 NT_STATUS_OK
ReadX 13160 262144 61440 61440 NT_STATUS_OK
ReadX 13160 323584 4096 4096 NT_STATUS_OK
ReadX 13160 327680 61440 61440 NT_STATUS_OK
ReadX 13160 389120 4096 4096 NT_STATUS_OK
ReadX 13160 393216 61440 61440 NT_STATUS_OK
ReadX 13160 454656 4096 4096 NT_STATUS_OK
ReadX 13160 458752 61440 61440 NT_STATUS_OK
ReadX 13160 520192 4096 4096 NT_STATUS_OK
ReadX 13160 524288 61440 61440 NT_STATUS_OK
ReadX 13160 585728 4096 4096 NT_STATUS_OK
ReadX 13160 589824 61440 61440 NT_STATUS_OK
ReadX 13160 651264 4096 4096 NT_STATUS_OK
ReadX 13160 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 61440 61440 NT_STATUS_OK
ReadX 13161 61440 4096 4096 NT_STATUS_OK
ReadX 13161 65536 61440 61440 NT_STATUS_OK
ReadX 13161 126976 4096 4096 NT_STATUS_OK
ReadX 13161 131072 61440 61440 NT_STATUS_OK
ReadX 13161 192512 4096 4096 NT_STATUS_OK
ReadX 13161 196608 61440 61440 NT_STATUS_OK
ReadX 13161 258048 4096 4096 NT_STATUS_OK
ReadX 13161 262144 61440 61440 NT_STATUS_OK
ReadX 13161 323584 4096 4096 NT_STATUS_OK
ReadX 13161 327680 61440 61440 NT_STATUS_OK
ReadX 13161 389120 4096 4096 NT_STATUS_OK
ReadX 13161 393216 61440 61440 NT_STATUS_OK
ReadX 13161 454656 4096 4096 NT_STATUS_OK
ReadX 13161 458752 61440 61440 NT_STATUS_OK
ReadX 13161 520192 4096 4096 NT_STATUS_OK
ReadX 13161 524288 61440 61440 NT_STATUS_OK
ReadX 13161 585728 4096 4096 NT_STATUS_OK
ReadX 13161 589824 61440 61440 NT_STATUS_OK
ReadX 13161 651264 4096 4096 NT_STATUS_OK
ReadX 13161 655360 61440 61440 NT_STATUS_OK
ReadX 13161 716800 4096 4096 NT_STATUS_OK
ReadX 13161 720896 61440 61440 NT_STATUS_OK
ReadX 13161 782336 4096 4096 NT_STATUS_OK
ReadX 13161 786432 61440 61440 NT_STATUS_OK
ReadX 13161 847872 4096 4096 NT_STATUS_OK
ReadX 13161 851968 61440 61440 NT_STATUS_OK
ReadX 13161 913408 4096 4096 NT_STATUS_OK
ReadX 13161 917504 61440 61440 NT_STATUS_OK
ReadX 13161 978944 4096 4096 NT_STATUS_OK
ReadX 13161 983040 61440 61440 NT_STATUS_OK
ReadX 13161 1044480 4096 4096 NT_STATUS_OK
ReadX 13161 1048576 61440 61440 NT_STATUS_OK
ReadX 13161 1110016 4096 4096 NT_STATUS_OK
ReadX 13161 1114112 61440 61440 NT_STATUS_OK
ReadX 13161 1175552 4096 4096 NT_STATUS_OK
ReadX 13161 1179648 61440 61440 NT_STATUS_OK
ReadX 13161 1241088 4096 4096 NT_STATUS_OK
ReadX 13161 1245184 61440 61440 NT_STATUS_OK
ReadX 13161 1306624 4096 4096 NT_STATUS_OK
ReadX 13161 1310720 61440 61440 NT_STATUS_OK
ReadX 13161 1372160 4096 4096 NT_STATUS_OK
ReadX 13161 1376256 61440 61440 NT_STATUS_OK
ReadX 13161 1437696 4096 4096 NT_STATUS_OK
ReadX 13161 1441792 61440 61440 NT_STATUS_OK
ReadX 13161 1503232 4096 4096 NT_STATUS_OK
ReadX 13161 1507328 61440 61440 NT_STATUS_OK
ReadX 13161 1568768 4096 4096 NT_STATUS_OK
ReadX 13161 1572864 61440 61440 NT_STATUS_OK
ReadX 13161 1634304 4096 4096 NT_STATUS_OK
ReadX 13161 1638400 61440 61440 NT_STATUS_OK
ReadX 13161 1699840 4096 4096 NT_STATUS_OK
ReadX 13161 1703936 61440 61440 NT_STATUS_OK
ReadX 13161 1765376 4096 4096 NT_STATUS_OK
ReadX 13161 1769472 61440 61440 NT_STATUS_OK
ReadX 13161 1830912 4096 4096 NT_STATUS_OK
ReadX 13161 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13162 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13167 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13168 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 1004 NT_STATUS_OK
WriteX 13168 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13169 NT_STATUS_OK
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13170 NT_STATUS_OK
WriteX 13170 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13170 258 NT_STATUS_OK
WriteX 13170 0 491 491 NT_STATUS_OK
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13168 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13173 NT_STATUS_OK
Close 13173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13174 NT_STATUS_OK
WriteX 13174 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13174 258 NT_STATUS_OK
WriteX 13174 0 543 543 NT_STATUS_OK
Close 13174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Close 13160 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Close 13175 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13188 NT_STATUS_OK
QUERY_FILE_INFORMATION 13188 1004 NT_STATUS_OK
WriteX 13188 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13188 258 NT_STATUS_OK
WriteX 13188 0 2048 2048 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13189 NT_STATUS_OK
ReadX 13189 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13189 0 4096 4096 NT_STATUS_OK
Flush 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13189 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13194 NT_STATUS_OK
WriteX 13194 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13194 258 NT_STATUS_OK
WriteX 13194 0 2048 2048 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13200 NT_STATUS_OK
WriteX 13200 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 2048 2048 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 2048 2048 NT_STATUS_OK
ReadX 13179 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13195 0 4096 4096 NT_STATUS_OK
WriteX 13179 0 8192 8192 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
WriteX 13181 0 4096 4096 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13205 NT_STATUS_OK
QUERY_FILE_INFORMATION 13205 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13195 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13225 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 1004 NT_STATUS_OK
WriteX 13225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 2048 2048 NT_STATUS_OK
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13233 NT_STATUS_OK
QUERY_FILE_INFORMATION 13233 1004 NT_STATUS_OK
WriteX 13233 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13233 258 NT_STATUS_OK
WriteX 13233 0 2048 2048 NT_STATUS_OK
Close 13233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
Flush 13226 NT_STATUS_OK
WriteX 13234 0 4096 4096 NT_STATUS_OK
Flush 13234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13234 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13228 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13236 NT_STATUS_OK
WriteX 13236 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 258 NT_STATUS_OK
WriteX 13236 0 4096 4096 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13238 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13239 NT_STATUS_OK
WriteX 13239 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13239 258 NT_STATUS_OK
WriteX 13239 0 4096 4096 NT_STATUS_OK
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13240 0 4096 4096 NT_STATUS_OK
Close 13237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13246 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13247 NT_STATUS_OK
WriteX 13247 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13247 258 NT_STATUS_OK
WriteX 13247 0 2048 2048 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13248 NT_STATUS_OK
ReadX 13248 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13256 NT_STATUS_OK
ReadX 13256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13257 NT_STATUS_OK
ReadX 13257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13262 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Close 13256 NT_STATUS_OK
Close 13257 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13254 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13264 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13267 NT_STATUS_OK
ReadX 13267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13270 NT_STATUS_OK
ReadX 13270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13273 NT_STATUS_OK
ReadX 13273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13284 NT_STATUS_OK
QUERY_FILE_INFORMATION 13284 1004 NT_STATUS_OK
WriteX 13284 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13284 258 NT_STATUS_OK
WriteX 13284 0 2048 2048 NT_STATUS_OK
Close 13284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13286 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13287 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13296 NT_STATUS_OK
QUERY_FILE_INFORMATION 13296 1004 NT_STATUS_OK
WriteX 13296 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13296 258 NT_STATUS_OK
WriteX 13296 0 2048 2048 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13304 NT_STATUS_OK
QUERY_FILE_INFORMATION 13304 1004 NT_STATUS_OK
WriteX 13304 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13304 258 NT_STATUS_OK
WriteX 13304 0 2048 2048 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13285 0 4096 4096 NT_STATUS_OK
Flush 13285 NT_STATUS_OK
WriteX 13297 0 4096 4096 NT_STATUS_OK
Flush 13297 NT_STATUS_OK
WriteX 13305 0 4096 4096 NT_STATUS_OK
Flush 13305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13285 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13297 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13305 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13287 4096 16384 16384 NT_STATUS_OK
ReadX 13267 4096 16384 16384 NT_STATUS_OK
ReadX 13299 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 2048 2048 NT_STATUS_OK
WriteX 13307 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13308 NT_STATUS_OK
QUERY_FILE_INFORMATION 13308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13271 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13273 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Close 13267 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13270 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13310 NT_STATUS_OK
QUERY_FILE_INFORMATION 13310 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13312 NT_STATUS_OK
QUERY_FILE_INFORMATION 13312 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13315 4096 16384 16384 NT_STATUS_OK
WriteX 13315 0 4096 4096 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
WriteX 13317 0 4096 4096 NT_STATUS_OK
WriteX 13318 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13320 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13325 NT_STATUS_OK
ReadX 13325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13326 NT_STATUS_OK
ReadX 13326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13327 NT_STATUS_OK
ReadX 13327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13330 NT_STATUS_OK
ReadX 13330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13332 NT_STATUS_OK
ReadX 13332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 8192 8192 NT_STATUS_OK
ReadX 13321 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13335 0 4096 4096 NT_STATUS_OK
ReadX 13335 4096 4096 4096 NT_STATUS_OK
ReadX 13335 8192 4096 4096 NT_STATUS_OK
WriteX 13321 0 4096 4096 NT_STATUS_OK
WriteX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13336 0 4096 4096 NT_STATUS_OK
ReadX 13336 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13315 0 4096 4096 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
WriteX 13317 0 4096 4096 NT_STATUS_OK
WriteX 13318 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13341 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 1004 NT_STATUS_OK
WriteX 13341 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 258 NT_STATUS_OK
WriteX 13341 0 2048 2048 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13342 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13343 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
ReadX 13344 4096 4096 4096 NT_STATUS_OK
WriteX 13344 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
ReadX 13346 4096 4096 4096 NT_STATUS_OK
WriteX 13346 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13347 NT_STATUS_OK
QUERY_FILE_INFORMATION 13347 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13327 NT_STATUS_OK
Close 13332 NT_STATUS_OK
Close 13328 NT_STATUS_OK
Close 13329 NT_STATUS_OK
Close 13330 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Close 13326 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13349 0 4096 4096 NT_STATUS_OK
ReadX 13349 4096 4096 4096 NT_STATUS_OK
ReadX 13349 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
ReadX 13350 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13367 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 1004 NT_STATUS_OK
WriteX 13367 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 258 NT_STATUS_OK
WriteX 13367 0 2048 2048 NT_STATUS_OK
Close 13367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13368 NT_STATUS_OK
ReadX 13368 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13373 NT_STATUS_OK
QUERY_FILE_INFORMATION 13373 1004 NT_STATUS_OK
WriteX 13373 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13373 258 NT_STATUS_OK
WriteX 13373 0 2048 2048 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13374 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13357 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13375 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13350 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13359 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13377 NT_STATUS_OK
QUERY_FILE_INFORMATION 13377 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13379 NT_STATUS_OK
ReadX 13379 61440 4096 4096 NT_STATUS_OK
ReadX 13379 126976 4096 4096 NT_STATUS_OK
WriteX 13379 0 65536 65536 NT_STATUS_OK
WriteX 13379 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 61440 4096 4096 NT_STATUS_OK
ReadX 13380 126976 4096 4096 NT_STATUS_OK
ReadX 13380 192512 4096 4096 NT_STATUS_OK
ReadX 13380 258048 4096 4096 NT_STATUS_OK
WriteX 13380 0 65536 65536 NT_STATUS_OK
WriteX 13380 65536 65536 65536 NT_STATUS_OK
WriteX 13380 131072 65536 65536 NT_STATUS_OK
WriteX 13380 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 61440 4096 4096 NT_STATUS_OK
ReadX 13381 126976 4096 4096 NT_STATUS_OK
ReadX 13381 192512 4096 4096 NT_STATUS_OK
ReadX 13381 258048 4096 4096 NT_STATUS_OK
ReadX 13381 323584 4096 4096 NT_STATUS_OK
ReadX 13381 389120 4096 4096 NT_STATUS_OK
ReadX 13381 454656 4096 4096 NT_STATUS_OK
ReadX 13381 520192 4096 4096 NT_STATUS_OK
WriteX 13381 0 65536 65536 NT_STATUS_OK
WriteX 13381 65536 65536 65536 NT_STATUS_OK
WriteX 13381 131072 65536 65536 NT_STATUS_OK
WriteX 13381 196608 65536 65536 NT_STATUS_OK
WriteX 13381 262144 65536 65536 NT_STATUS_OK
WriteX 13381 327680 65536 65536 NT_STATUS_OK
WriteX 13381 393216 65536 65536 NT_STATUS_OK
WriteX 13381 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13382 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13382 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13382 8192 4096 4096 NT_STATUS_OK
ReadX 13382 12288 4096 4096 NT_STATUS_OK
ReadX 13382 16384 4096 4096 NT_STATUS_OK
ReadX 13382 20480 4096 4096 NT_STATUS_OK
ReadX 13382 24576 4096 4096 NT_STATUS_OK
ReadX 13382 28672 4096 4096 NT_STATUS_OK
ReadX 13382 32768 4096 4096 NT_STATUS_OK
ReadX 13382 36864 4096 4096 NT_STATUS_OK
ReadX 13382 40960 4096 4096 NT_STATUS_OK
ReadX 13382 45056 4096 4096 NT_STATUS_OK
ReadX 13382 49152 4096 4096 NT_STATUS_OK
ReadX 13382 53248 4096 4096 NT_STATUS_OK
ReadX 13382 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13382 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13379 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13385 NT_STATUS_OK
WriteX 13385 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13385 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13385 1004 NT_STATUS_OK
WriteX 13385 0 57088 57088 NT_STATUS_OK
WriteX 13385 0 4096 4096 NT_STATUS_OK
Flush 13385 NT_STATUS_OK
Close 13382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13386 NT_STATUS_OK
SET_FILE_INFORMATION 13386 1004 NT_STATUS_OK
Close 13386 NT_STATUS_OK
SET_FILE_INFORMATION 13385 1004 NT_STATUS_OK
WriteX 13385 0 4096 4096 NT_STATUS_OK
Close 13385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13389 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13390 NT_STATUS_OK
WriteX 13390 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13390 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
WriteX 13390 0 51456 51456 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
Flush 13390 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13394 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13399 NT_STATUS_OK
WriteX 13399 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13399 258 NT_STATUS_OK
WriteX 13399 0 53077 53077 NT_STATUS_OK
Close 13399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13400 NT_STATUS_OK
WriteX 13400 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13400 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13400 1004 NT_STATUS_OK
WriteX 13400 0 65536 65536 NT_STATUS_OK
WriteX 13400 65536 1856 1856 NT_STATUS_OK
WriteX 13400 0 4096 4096 NT_STATUS_OK
Flush 13400 NT_STATUS_OK
SET_FILE_INFORMATION 13400 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13400 1004 NT_STATUS_OK
WriteX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13402 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13404 NT_STATUS_OK
ReadX 13404 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13409 NT_STATUS_OK
WriteX 13409 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13409 258 NT_STATUS_OK
WriteX 13409 0 7983 7983 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13411 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13414 NT_STATUS_OK
WriteX 13414 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 258 NT_STATUS_OK
WriteX 13414 0 65536 65536 NT_STATUS_OK
WriteX 13414 65536 65536 65536 NT_STATUS_OK
WriteX 13414 131072 65536 65536 NT_STATUS_OK
WriteX 13414 196608 65536 65536 NT_STATUS_OK
WriteX 13414 262144 65536 65536 NT_STATUS_OK
WriteX 13414 327680 65536 65536 NT_STATUS_OK
WriteX 13414 393216 65536 65536 NT_STATUS_OK
WriteX 13414 458752 46731 46731 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13415 NT_STATUS_OK
WriteX 13415 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13404 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13415 1004 NT_STATUS_OK
WriteX 13415 0 65536 65536 NT_STATUS_OK
WriteX 13415 65536 22848 22848 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
Flush 13415 NT_STATUS_OK
SET_FILE_INFORMATION 13415 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13415 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13419 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13420 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13420 1004 NT_STATUS_OK
Close 13419 NT_STATUS_OK
ReadX 13420 8192 4096 4096 NT_STATUS_OK
ReadX 13420 12288 4096 4096 NT_STATUS_OK
ReadX 13420 16384 4096 4096 NT_STATUS_OK
ReadX 13420 20480 4096 4096 NT_STATUS_OK
ReadX 13420 24576 4096 4096 NT_STATUS_OK
ReadX 13420 28672 4096 4096 NT_STATUS_OK
ReadX 13420 32768 4096 4096 NT_STATUS_OK
ReadX 13420 36864 4096 4096 NT_STATUS_OK
ReadX 13420 40960 4096 4096 NT_STATUS_OK
ReadX 13420 45056 4096 4096 NT_STATUS_OK
ReadX 13420 49152 4096 4096 NT_STATUS_OK
ReadX 13420 53248 4096 4096 NT_STATUS_OK
ReadX 13420 57344 4096 4096 NT_STATUS_OK
ReadX 13420 61440 4096 4096 NT_STATUS_OK
ReadX 13420 65536 4096 4096 NT_STATUS_OK
ReadX 13420 69632 4096 4096 NT_STATUS_OK
ReadX 13420 73728 4096 4096 NT_STATUS_OK
ReadX 13420 77824 4096 4096 NT_STATUS_OK
ReadX 13420 81920 4096 4096 NT_STATUS_OK
ReadX 13420 86016 4096 4096 NT_STATUS_OK
ReadX 13420 90112 4096 4096 NT_STATUS_OK
ReadX 13420 94208 4096 4096 NT_STATUS_OK
ReadX 13420 98304 4096 4096 NT_STATUS_OK
ReadX 13420 102400 4096 4096 NT_STATUS_OK
ReadX 13420 106496 4096 4096 NT_STATUS_OK
ReadX 13420 110592 4096 4096 NT_STATUS_OK
ReadX 13420 114688 4096 4096 NT_STATUS_OK
ReadX 13420 118784 4096 4096 NT_STATUS_OK
ReadX 13420 122880 4096 4096 NT_STATUS_OK
ReadX 13420 126976 4096 4096 NT_STATUS_OK
ReadX 13420 131072 4096 4096 NT_STATUS_OK
ReadX 13420 135168 4096 4096 NT_STATUS_OK
ReadX 13420 139264 4096 4096 NT_STATUS_OK
ReadX 13420 143360 4096 4096 NT_STATUS_OK
ReadX 13420 147456 4096 4096 NT_STATUS_OK
ReadX 13420 151552 4096 4096 NT_STATUS_OK
ReadX 13420 155648 4096 4096 NT_STATUS_OK
ReadX 13420 159744 4096 4096 NT_STATUS_OK
ReadX 13420 163840 4096 4096 NT_STATUS_OK
ReadX 13420 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13420 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13423 NT_STATUS_OK
WriteX 13423 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13423 258 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13424 NT_STATUS_OK
SET_FILE_INFORMATION 13424 1004 NT_STATUS_OK
Close 13424 NT_STATUS_OK
WriteX 13423 0 42388 42388 NT_STATUS_OK
Close 13423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13425 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 4096 4096 NT_STATUS_OK
ReadX 13427 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13428 NT_STATUS_OK
WriteX 13428 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13428 258 NT_STATUS_OK
SET_FILE_INFORMATION 13428 1004 NT_STATUS_OK
WriteX 13428 0 42652 42652 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
ReadX 13432 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13434 NT_STATUS_OK
Close 13434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13437 NT_STATUS_OK
WriteX 13437 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13437 258 NT_STATUS_OK
WriteX 13437 0 65536 65536 NT_STATUS_OK
WriteX 13437 65536 49 49 NT_STATUS_OK
Close 13437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 61440 61440 NT_STATUS_OK
ReadX 13438 61440 4096 4096 NT_STATUS_OK
ReadX 13438 65536 61440 61440 NT_STATUS_OK
ReadX 13438 126976 4096 4096 NT_STATUS_OK
ReadX 13438 131072 61440 61440 NT_STATUS_OK
ReadX 13438 192512 4096 4096 NT_STATUS_OK
ReadX 13438 196608 61440 61440 NT_STATUS_OK
ReadX 13438 258048 4096 4096 NT_STATUS_OK
ReadX 13438 262144 61440 61440 NT_STATUS_OK
ReadX 13438 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 61440 61440 NT_STATUS_OK
ReadX 13439 61440 4096 4096 NT_STATUS_OK
ReadX 13439 65536 61440 61440 NT_STATUS_OK
ReadX 13439 126976 4096 4096 NT_STATUS_OK
ReadX 13439 131072 61440 61440 NT_STATUS_OK
ReadX 13439 192512 4096 4096 NT_STATUS_OK
ReadX 13439 196608 61440 61440 NT_STATUS_OK
ReadX 13439 258048 4096 4096 NT_STATUS_OK
ReadX 13439 262144 61440 61440 NT_STATUS_OK
ReadX 13439 323584 4096 4096 NT_STATUS_OK
ReadX 13439 327680 61440 61440 NT_STATUS_OK
ReadX 13439 389120 4096 4096 NT_STATUS_OK
ReadX 13439 393216 61440 61440 NT_STATUS_OK
ReadX 13439 454656 4096 4096 NT_STATUS_OK
ReadX 13439 458752 61440 61440 NT_STATUS_OK
ReadX 13439 520192 4096 4096 NT_STATUS_OK
ReadX 13439 524288 61440 61440 NT_STATUS_OK
ReadX 13439 585728 4096 4096 NT_STATUS_OK
ReadX 13439 589824 61440 61440 NT_STATUS_OK
ReadX 13439 651264 4096 4096 NT_STATUS_OK
ReadX 13439 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 61440 61440 NT_STATUS_OK
ReadX 13440 61440 4096 4096 NT_STATUS_OK
ReadX 13440 65536 61440 61440 NT_STATUS_OK
ReadX 13440 126976 4096 4096 NT_STATUS_OK
ReadX 13440 131072 61440 61440 NT_STATUS_OK
ReadX 13440 192512 4096 4096 NT_STATUS_OK
ReadX 13440 196608 61440 61440 NT_STATUS_OK
ReadX 13440 258048 4096 4096 NT_STATUS_OK
ReadX 13440 262144 61440 61440 NT_STATUS_OK
ReadX 13440 323584 4096 4096 NT_STATUS_OK
ReadX 13440 327680 61440 61440 NT_STATUS_OK
ReadX 13440 389120 4096 4096 NT_STATUS_OK
ReadX 13440 393216 61440 61440 NT_STATUS_OK
ReadX 13440 454656 4096 4096 NT_STATUS_OK
ReadX 13440 458752 61440 61440 NT_STATUS_OK
ReadX 13440 520192 4096 4096 NT_STATUS_OK
ReadX 13440 524288 61440 61440 NT_STATUS_OK
ReadX 13440 585728 4096 4096 NT_STATUS_OK
ReadX 13440 589824 61440 61440 NT_STATUS_OK
ReadX 13440 651264 4096 4096 NT_STATUS_OK
ReadX 13440 655360 61440 61440 NT_STATUS_OK
ReadX 13440 716800 4096 4096 NT_STATUS_OK
ReadX 13440 720896 61440 61440 NT_STATUS_OK
ReadX 13440 782336 4096 4096 NT_STATUS_OK
ReadX 13440 786432 61440 61440 NT_STATUS_OK
ReadX 13440 847872 4096 4096 NT_STATUS_OK
ReadX 13440 851968 61440 61440 NT_STATUS_OK
ReadX 13440 913408 4096 4096 NT_STATUS_OK
ReadX 13440 917504 61440 61440 NT_STATUS_OK
ReadX 13440 978944 4096 4096 NT_STATUS_OK
ReadX 13440 983040 61440 61440 NT_STATUS_OK
ReadX 13440 1044480 4096 4096 NT_STATUS_OK
ReadX 13440 1048576 61440 61440 NT_STATUS_OK
ReadX 13440 1110016 4096 4096 NT_STATUS_OK
ReadX 13440 1114112 61440 61440 NT_STATUS_OK
ReadX 13440 1175552 4096 4096 NT_STATUS_OK
ReadX 13440 1179648 61440 61440 NT_STATUS_OK
ReadX 13440 1241088 4096 4096 NT_STATUS_OK
ReadX 13440 1245184 61440 61440 NT_STATUS_OK
ReadX 13440 1306624 4096 4096 NT_STATUS_OK
ReadX 13440 1310720 61440 61440 NT_STATUS_OK
ReadX 13440 1372160 4096 4096 NT_STATUS_OK
ReadX 13440 1376256 61440 61440 NT_STATUS_OK
ReadX 13440 1437696 4096 4096 NT_STATUS_OK
ReadX 13440 1441792 61440 61440 NT_STATUS_OK
ReadX 13440 1503232 4096 4096 NT_STATUS_OK
ReadX 13440 1507328 61440 61440 NT_STATUS_OK
ReadX 13440 1568768 4096 4096 NT_STATUS_OK
ReadX 13440 1572864 61440 61440 NT_STATUS_OK
ReadX 13440 1634304 4096 4096 NT_STATUS_OK
ReadX 13440 1638400 61440 61440 NT_STATUS_OK
ReadX 13440 1699840 4096 4096 NT_STATUS_OK
ReadX 13440 1703936 61440 61440 NT_STATUS_OK
ReadX 13440 1765376 4096 4096 NT_STATUS_OK
ReadX 13440 1769472 61440 61440 NT_STATUS_OK
ReadX 13440 1830912 4096 4096 NT_STATUS_OK
ReadX 13440 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13441 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13442 NT_STATUS_OK
QUERY_FILE_INFORMATION 13442 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13442 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13442 1005 NT_STATUS_OK
ReadX 13442 2156 24 24 NT_STATUS_OK
ReadX 13442 2139 276 276 NT_STATUS_OK
ReadX 13442 2136 14 14 NT_STATUS_OK
ReadX 13442 2136 7 7 NT_STATUS_OK
ReadX 13442 2138 12 12 NT_STATUS_OK
ReadX 13442 2137 8 8 NT_STATUS_OK
ReadX 13442 2135 15 15 NT_STATUS_OK
ReadX 13442 0 16 16 NT_STATUS_OK
ReadX 13442 16 2048 2048 NT_STATUS_OK
ReadX 13442 2064 2048 2048 NT_STATUS_OK
ReadX 13442 257 2048 2048 NT_STATUS_OK
ReadX 13442 385 2048 2048 NT_STATUS_OK
ReadX 13442 513 2048 2048 NT_STATUS_OK
ReadX 13442 641 2048 2048 NT_STATUS_OK
ReadX 13442 769 2048 2048 NT_STATUS_OK
ReadX 13442 897 2048 2048 NT_STATUS_OK
ReadX 13442 1025 2048 2048 NT_STATUS_OK
ReadX 13442 1153 2048 2048 NT_STATUS_OK
ReadX 13442 1281 2048 2048 NT_STATUS_OK
ReadX 13442 1409 2048 2048 NT_STATUS_OK
ReadX 13442 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13447 NT_STATUS_OK
WriteX 13447 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13447 258 NT_STATUS_OK
WriteX 13447 0 10575 10575 NT_STATUS_OK
Flush 13447 NT_STATUS_OK
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13452 NT_STATUS_OK
LockX 13452 2147483538 1 NT_STATUS_OK
UnlockX 13452 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13452 1005 NT_STATUS_OK
ReadX 13452 0 512 512 NT_STATUS_OK
ReadX 13452 512 512 512 NT_STATUS_OK
ReadX 13452 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13452 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13452 1004 NT_STATUS_OK
Close 13452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13453 NT_STATUS_OK
QUERY_FILE_INFORMATION 13453 1005 NT_STATUS_OK
ReadX 13453 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13454 NT_STATUS_OK
LockX 13454 2147483538 1 NT_STATUS_OK
UnlockX 13454 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13454 1005 NT_STATUS_OK
ReadX 13454 0 512 512 NT_STATUS_OK
ReadX 13454 512 512 512 NT_STATUS_OK
ReadX 13454 1024 512 512 NT_STATUS_OK
ReadX 13454 288 20 20 NT_STATUS_OK
ReadX 13454 308 2084 2084 NT_STATUS_OK
ReadX 13454 388 2084 2084 NT_STATUS_OK
ReadX 13454 388 2084 2084 NT_STATUS_OK
ReadX 13441 2157 1386 1386 NT_STATUS_OK
ReadX 13454 2472 399 399 NT_STATUS_OK
ReadX 13454 3072 1536 1536 NT_STATUS_OK
ReadX 13454 544 149 149 NT_STATUS_OK
ReadX 13454 693 485 485 NT_STATUS_OK
Close 13454 NT_STATUS_OK
ReadX 13441 2157 4096 4096 NT_STATUS_OK
ReadX 13441 6253 4096 4096 NT_STATUS_OK
ReadX 13441 10349 4096 4096 NT_STATUS_OK
ReadX 13441 14445 4096 4096 NT_STATUS_OK
ReadX 13441 18541 4096 4096 NT_STATUS_OK
ReadX 13441 22637 256 256 NT_STATUS_OK
ReadX 13441 22893 4096 4096 NT_STATUS_OK
ReadX 13441 26989 4096 4096 NT_STATUS_OK
ReadX 13441 31085 4096 4096 NT_STATUS_OK
ReadX 13441 35181 4096 4096 NT_STATUS_OK
ReadX 13441 39277 4096 4096 NT_STATUS_OK
ReadX 13441 43373 4096 4096 NT_STATUS_OK
ReadX 13441 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13441 2157 1024 1024 NT_STATUS_OK
ReadX 13441 1667 4688 4688 NT_STATUS_OK
ReadX 13441 6355 3516 3516 NT_STATUS_OK
ReadX 13441 9871 16384 16384 NT_STATUS_OK
ReadX 13441 26255 3771 3771 NT_STATUS_OK
ReadX 13441 30026 2048 2048 NT_STATUS_OK
ReadX 13441 32074 1024 1024 NT_STATUS_OK
ReadX 13441 33098 6652 6652 NT_STATUS_OK
ReadX 13441 39750 16384 16384 NT_STATUS_OK
ReadX 13441 56134 10496 10496 NT_STATUS_OK
ReadX 13441 66630 1784 1784 NT_STATUS_OK
ReadX 13441 68414 90 90 NT_STATUS_OK
ReadX 13441 68504 273 273 NT_STATUS_OK
ReadX 13441 68777 1600 1600 NT_STATUS_OK
ReadX 13441 70377 640 640 NT_STATUS_OK
ReadX 13441 71017 1280 1280 NT_STATUS_OK
ReadX 13441 72297 8464 8464 NT_STATUS_OK
ReadX 13441 80761 158 158 NT_STATUS_OK
ReadX 13441 80919 912 912 NT_STATUS_OK
ReadX 13441 81831 1980 1980 NT_STATUS_OK
ReadX 13441 83811 2256 2256 NT_STATUS_OK
ReadX 13441 86067 400 400 NT_STATUS_OK
ReadX 13441 86467 252 252 NT_STATUS_OK
ReadX 13441 86719 42 42 NT_STATUS_OK
ReadX 13441 86761 725 725 NT_STATUS_OK
ReadX 13441 2009 512 512 NT_STATUS_OK
ReadX 13441 3895 9 9 NT_STATUS_OK
ReadX 13441 3781 46 46 NT_STATUS_OK
ReadX 13441 4059 92 92 NT_STATUS_OK
ReadX 13441 3781 92 92 NT_STATUS_OK
ReadX 13441 3986 184 184 NT_STATUS_OK
ReadX 13441 3987 16384 16384 NT_STATUS_OK
ReadX 13441 3902 16384 16384 NT_STATUS_OK
ReadX 13441 3781 10240 10240 NT_STATUS_OK
ReadX 13441 3821 16384 16384 NT_STATUS_OK
ReadX 13441 3891 935 935 NT_STATUS_OK
ReadX 13441 4060 10240 10240 NT_STATUS_OK
ReadX 13441 4059 184 184 NT_STATUS_OK
ReadX 13441 256 184 184 NT_STATUS_OK
ReadX 13441 256 1026 1026 NT_STATUS_OK
ReadX 13441 3901 326 326 NT_STATUS_OK
ReadX 13441 3899 652 652 NT_STATUS_OK
ReadX 13441 256 2 2 NT_STATUS_OK
ReadX 13441 258 4948 4948 NT_STATUS_OK
Close 13441 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13459 NT_STATUS_OK
WriteX 13459 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
WriteX 13459 0 65536 65536 NT_STATUS_OK
WriteX 13459 65536 65536 65536 NT_STATUS_OK
WriteX 13459 131072 65536 65536 NT_STATUS_OK
WriteX 13459 196608 65536 65536 NT_STATUS_OK
WriteX 13459 262144 65536 65536 NT_STATUS_OK
WriteX 13459 327680 65536 65536 NT_STATUS_OK
WriteX 13459 393216 65536 65536 NT_STATUS_OK
WriteX 13459 458752 65536 65536 NT_STATUS_OK
WriteX 13459 524288 65536 65536 NT_STATUS_OK
WriteX 13459 589824 35257 35257 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13464 NT_STATUS_OK
WriteX 13464 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13464 258 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 65536 65536 NT_STATUS_OK
WriteX 13464 131072 65536 65536 NT_STATUS_OK
WriteX 13464 196608 65536 65536 NT_STATUS_OK
WriteX 13464 262144 65536 65536 NT_STATUS_OK
WriteX 13464 327680 65536 65536 NT_STATUS_OK
WriteX 13464 393216 65536 65536 NT_STATUS_OK
WriteX 13464 458752 65536 65536 NT_STATUS_OK
WriteX 13464 524288 65536 65536 NT_STATUS_OK
WriteX 13464 589824 57598 57598 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13466 NT_STATUS_OK
WriteX 13466 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13466 258 NT_STATUS_OK
WriteX 13466 0 12543 12543 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Close 13450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13472 NT_STATUS_OK
QUERY_FILE_INFORMATION 13472 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13472 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13472 1005 NT_STATUS_OK
ReadX 13472 1938 24 24 NT_STATUS_OK
ReadX 13472 1920 276 276 NT_STATUS_OK
ReadX 13472 1918 14 14 NT_STATUS_OK
ReadX 13472 1918 7 7 NT_STATUS_OK
ReadX 13472 1919 12 12 NT_STATUS_OK
ReadX 13472 1919 8 8 NT_STATUS_OK
ReadX 13472 1917 15 15 NT_STATUS_OK
ReadX 13472 0 16 16 NT_STATUS_OK
ReadX 13472 16 2048 2048 NT_STATUS_OK
ReadX 13472 2064 2048 2048 NT_STATUS_OK
ReadX 13472 257 2048 2048 NT_STATUS_OK
ReadX 13472 385 2048 2048 NT_STATUS_OK
ReadX 13472 513 2048 2048 NT_STATUS_OK
ReadX 13472 641 2048 2048 NT_STATUS_OK
ReadX 13472 769 2048 2048 NT_STATUS_OK
ReadX 13472 897 2048 2048 NT_STATUS_OK
ReadX 13472 1025 2048 2048 NT_STATUS_OK
ReadX 13472 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13474 NT_STATUS_OK
Close 13474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13477 NT_STATUS_OK
WriteX 13477 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13477 258 NT_STATUS_OK
WriteX 13477 0 11588 11588 NT_STATUS_OK
Flush 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13478 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
Close 13472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13482 NT_STATUS_OK
WriteX 13482 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 258 NT_STATUS_OK
WriteX 13482 0 11615 11615 NT_STATUS_OK
Flush 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13484 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13491 NT_STATUS_OK
WriteX 13491 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13491 258 NT_STATUS_OK
WriteX 13491 0 65536 65536 NT_STATUS_OK
WriteX 13491 65536 16050 16050 NT_STATUS_OK
Close 13491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13471 1939 64 64 NT_STATUS_OK
ReadX 13471 128 248 248 NT_STATUS_OK
ReadX 13471 128 568 568 NT_STATUS_OK
ReadX 13471 3872 1536 1536 NT_STATUS_OK
ReadX 13471 3456 2560 2560 NT_STATUS_OK
ReadX 13471 3136 512 512 NT_STATUS_OK
ReadX 13471 2880 4096 4096 NT_STATUS_OK
ReadX 13471 3264 3072 3072 NT_STATUS_OK
ReadX 13471 320 4096 4096 NT_STATUS_OK
ReadX 13471 1024 4096 4096 NT_STATUS_OK
ReadX 13471 3616 4096 4096 NT_STATUS_OK
ReadX 13471 1939 64 64 NT_STATUS_OK
ReadX 13471 128 248 248 NT_STATUS_OK
ReadX 13471 128 608 608 NT_STATUS_OK
ReadX 13471 2858 1024 1024 NT_STATUS_OK
ReadX 13471 2810 4096 4096 NT_STATUS_OK
ReadX 13471 2826 4096 4096 NT_STATUS_OK
ReadX 13471 2580 2048 2048 NT_STATUS_OK
ReadX 13471 2800 2560 2560 NT_STATUS_OK
ReadX 13471 2100 4096 4096 NT_STATUS_OK
ReadX 13471 2084 4096 4096 NT_STATUS_OK
ReadX 13471 868 4096 4096 NT_STATUS_OK
ReadX 13471 2324 4096 4096 NT_STATUS_OK
ReadX 13471 884 4096 4096 NT_STATUS_OK
ReadX 13471 2604 1024 1024 NT_STATUS_OK
ReadX 13471 580 4096 4096 NT_STATUS_OK
ReadX 13471 596 4096 4096 NT_STATUS_OK
ReadX 13471 2752 4096 4096 NT_STATUS_OK
ReadX 13471 2842 1024 1024 NT_STATUS_OK
ReadX 13471 660 4096 4096 NT_STATUS_OK
ReadX 13471 2720 4096 4096 NT_STATUS_OK
ReadX 13471 2736 4096 4096 NT_STATUS_OK
ReadX 13471 628 4096 4096 NT_STATUS_OK
ReadX 13471 2704 4096 4096 NT_STATUS_OK
ReadX 13471 1556 4096 4096 NT_STATUS_OK
ReadX 13471 576 4096 4096 NT_STATUS_OK
ReadX 13471 3168 1536 1536 NT_STATUS_OK
ReadX 13471 832 4096 4096 NT_STATUS_OK
ReadX 13471 1088 4096 4096 NT_STATUS_OK
ReadX 13471 1344 4096 4096 NT_STATUS_OK
ReadX 13471 1600 4096 4096 NT_STATUS_OK
ReadX 13471 1856 4096 4096 NT_STATUS_OK
ReadX 13471 2112 4096 4096 NT_STATUS_OK
ReadX 13471 1892 4096 4096 NT_STATUS_OK
ReadX 13471 820 4096 4096 NT_STATUS_OK
ReadX 13471 788 4096 4096 NT_STATUS_OK
ReadX 13471 1604 4096 4096 NT_STATUS_OK
ReadX 13471 3648 4096 4096 NT_STATUS_OK
ReadX 13471 2608 4096 4096 NT_STATUS_OK
ReadX 13471 548 4096 4096 NT_STATUS_OK
ReadX 13471 740 4096 4096 NT_STATUS_OK
ReadX 13471 1344 4096 4096 NT_STATUS_OK
ReadX 13471 3392 4096 4096 NT_STATUS_OK
ReadX 13471 3904 4096 4096 NT_STATUS_OK
ReadX 13471 644 4096 4096 NT_STATUS_OK
ReadX 13471 676 4096 4096 NT_STATUS_OK
ReadX 13471 2688 4096 4096 NT_STATUS_OK
ReadX 13471 320 4096 4096 NT_STATUS_OK
ReadX 13471 900 4096 4096 NT_STATUS_OK
ReadX 13471 1908 4096 4096 NT_STATUS_OK
ReadX 13471 852 4096 4096 NT_STATUS_OK
ReadX 13471 724 4096 4096 NT_STATUS_OK
ReadX 13471 2292 4096 4096 NT_STATUS_OK
ReadX 13471 612 4096 4096 NT_STATUS_OK
ReadX 13471 388 4096 4096 NT_STATUS_OK
ReadX 13471 2368 4096 4096 NT_STATUS_OK
ReadX 13471 2624 4096 4096 NT_STATUS_OK
ReadX 13471 500 4096 4096 NT_STATUS_OK
ReadX 13471 356 4096 4096 NT_STATUS_OK
ReadX 13471 1024 4096 4096 NT_STATUS_OK
ReadX 13471 576 4096 4096 NT_STATUS_OK
ReadX 13471 340 4096 4096 NT_STATUS_OK
ReadX 13471 420 4096 4096 NT_STATUS_OK
ReadX 13471 1600 4096 4096 NT_STATUS_OK
ReadX 13471 404 4096 4096 NT_STATUS_OK
ReadX 13471 1428 4096 4096 NT_STATUS_OK
ReadX 13471 2656 4096 4096 NT_STATUS_OK
ReadX 13471 2624 4096 4096 NT_STATUS_OK
ReadX 13471 452 4096 4096 NT_STATUS_OK
ReadX 13471 692 4096 4096 NT_STATUS_OK
ReadX 13471 564 4096 4096 NT_STATUS_OK
ReadX 13471 372 4096 4096 NT_STATUS_OK
ReadX 13471 468 4096 4096 NT_STATUS_OK
ReadX 13471 484 4096 4096 NT_STATUS_OK
ReadX 13471 1088 4096 4096 NT_STATUS_OK
ReadX 13471 1924 4096 4096 NT_STATUS_OK
ReadX 13471 2768 4096 4096 NT_STATUS_OK
ReadX 13471 832 4096 4096 NT_STATUS_OK
ReadX 13471 836 4096 4096 NT_STATUS_OK
ReadX 13471 1856 4096 4096 NT_STATUS_OK
ReadX 13471 2640 4096 4096 NT_STATUS_OK
ReadX 13471 436 4096 4096 NT_STATUS_OK
ReadX 13471 1828 4096 4096 NT_STATUS_OK
ReadX 13471 804 4096 4096 NT_STATUS_OK
ReadX 13471 1860 4096 4096 NT_STATUS_OK
ReadX 13471 1812 4096 4096 NT_STATUS_OK
ReadX 13471 756 4096 4096 NT_STATUS_OK
ReadX 13471 1636 4096 4096 NT_STATUS_OK
ReadX 13471 772 4096 4096 NT_STATUS_OK
ReadX 13471 2036 4096 4096 NT_STATUS_OK
ReadX 13471 1220 4096 4096 NT_STATUS_OK
ReadX 13471 1652 4096 4096 NT_STATUS_OK
ReadX 13471 2588 4096 4096 NT_STATUS_OK
ReadX 13471 916 4096 4096 NT_STATUS_OK
ReadX 13471 260 4096 4096 NT_STATUS_OK
ReadX 13471 932 4096 4096 NT_STATUS_OK
ReadX 13471 2624 4096 4096 NT_STATUS_OK
ReadX 13471 308 4096 4096 NT_STATUS_OK
ReadX 13471 292 4096 4096 NT_STATUS_OK
ReadX 13471 1140 4096 4096 NT_STATUS_OK
ReadX 13471 276 4096 4096 NT_STATUS_OK
ReadX 13471 2020 4096 4096 NT_STATUS_OK
ReadX 13471 2880 4096 4096 NT_STATUS_OK
ReadX 13471 516 4096 4096 NT_STATUS_OK
ReadX 13471 1844 4096 4096 NT_STATUS_OK
ReadX 13471 1124 4096 4096 NT_STATUS_OK
ReadX 13471 3136 4096 4096 NT_STATUS_OK
ReadX 13471 324 4096 4096 NT_STATUS_OK
ReadX 13471 1156 4096 4096 NT_STATUS_OK
ReadX 13471 1172 4096 4096 NT_STATUS_OK
ReadX 13471 2112 4096 4096 NT_STATUS_OK
ReadX 13471 2368 4096 4096 NT_STATUS_OK
ReadX 13471 964 4096 4096 NT_STATUS_OK
ReadX 13471 980 4096 4096 NT_STATUS_OK
ReadX 13471 1012 4096 4096 NT_STATUS_OK
ReadX 13471 532 4096 4096 NT_STATUS_OK
ReadX 13471 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13471 1620 4096 4096 NT_STATUS_OK
ReadX 13471 1604 4096 4096 NT_STATUS_OK
ReadX 13471 2116 4096 4096 NT_STATUS_OK
ReadX 13471 2132 4096 4096 NT_STATUS_OK
ReadX 13471 2148 4096 4096 NT_STATUS_OK
ReadX 13471 2276 4096 4096 NT_STATUS_OK
ReadX 13471 1540 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13493 NT_STATUS_OK
Close 13493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13496 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 1004 NT_STATUS_OK
Close 13451 NT_STATUS_OK
WriteX 13496 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13496 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13453 1004 NT_STATUS_OK
Close 13453 NT_STATUS_OK
WriteX 13496 0 65536 65536 NT_STATUS_OK
WriteX 13496 65536 64850 64850 NT_STATUS_OK
Close 13496 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13498 NT_STATUS_OK
WriteX 13498 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13498 258 NT_STATUS_OK
ReadX 13471 2068 4096 4096 NT_STATUS_OK
ReadX 13471 1588 4096 4096 NT_STATUS_OK
ReadX 13471 1572 4096 4096 NT_STATUS_OK
WriteX 13498 0 18630 18630 NT_STATUS_OK
Flush 13498 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13471 612 4096 4096 NT_STATUS_OK
ReadX 13471 564 4096 4096 NT_STATUS_OK
ReadX 13471 1876 4096 4096 NT_STATUS_OK
ReadX 13471 628 4096 4096 NT_STATUS_OK
ReadX 13471 740 4096 4096 NT_STATUS_OK
ReadX 13471 724 4096 4096 NT_STATUS_OK
ReadX 13471 644 4096 4096 NT_STATUS_OK
ReadX 13471 2324 4096 4096 NT_STATUS_OK
ReadX 13471 660 4096 4096 NT_STATUS_OK
ReadX 13471 852 4096 4096 NT_STATUS_OK
ReadX 13471 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13471 2368 4096 4096 NT_STATUS_OK
ReadX 13471 1024 4096 4096 NT_STATUS_OK
ReadX 13471 320 4096 4096 NT_STATUS_OK
ReadX 13471 580 4096 4096 NT_STATUS_OK
ReadX 13471 3136 512 512 NT_STATUS_OK
ReadX 13471 2880 4096 4096 NT_STATUS_OK
Close 13471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 61440 4096 4096 NT_STATUS_OK
ReadX 13503 126976 4096 4096 NT_STATUS_OK
WriteX 13503 0 65536 65536 NT_STATUS_OK
WriteX 13503 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 61440 4096 4096 NT_STATUS_OK
ReadX 13504 126976 4096 4096 NT_STATUS_OK
ReadX 13504 192512 4096 4096 NT_STATUS_OK
ReadX 13504 258048 4096 4096 NT_STATUS_OK
WriteX 13504 0 65536 65536 NT_STATUS_OK
WriteX 13504 65536 65536 65536 NT_STATUS_OK
WriteX 13504 131072 65536 65536 NT_STATUS_OK
WriteX 13504 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13505 NT_STATUS_OK
ReadX 13505 61440 4096 4096 NT_STATUS_OK
ReadX 13505 126976 4096 4096 NT_STATUS_OK
ReadX 13505 192512 4096 4096 NT_STATUS_OK
ReadX 13505 258048 4096 4096 NT_STATUS_OK
ReadX 13505 323584 4096 4096 NT_STATUS_OK
ReadX 13505 389120 4096 4096 NT_STATUS_OK
ReadX 13505 454656 4096 4096 NT_STATUS_OK
ReadX 13505 520192 4096 4096 NT_STATUS_OK
WriteX 13505 0 65536 65536 NT_STATUS_OK
WriteX 13505 65536 65536 65536 NT_STATUS_OK
WriteX 13505 131072 65536 65536 NT_STATUS_OK
WriteX 13505 196608 65536 65536 NT_STATUS_OK
WriteX 13505 262144 65536 65536 NT_STATUS_OK
WriteX 13505 327680 65536 65536 NT_STATUS_OK
WriteX 13505 393216 65536 65536 NT_STATUS_OK
WriteX 13505 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13507 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13508 NT_STATUS_OK
WriteX 13508 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13508 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13506 0 8192 8192 NT_STATUS_OK
Flush 13506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13506 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13506 0 8192 8192 NT_STATUS_OK
Flush 13506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13506 0 8192 8192 NT_STATUS_OK
Flush 13506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13506 0 8192 8192 NT_STATUS_OK
Flush 13506 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13510 NT_STATUS_OK
Close 13510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13513 NT_STATUS_OK
WriteX 13513 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13513 258 NT_STATUS_OK
WriteX 13513 0 62591 62591 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13518 NT_STATUS_OK
WriteX 13518 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13518 258 NT_STATUS_OK
WriteX 13518 0 10845 10845 NT_STATUS_OK
Close 13518 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13520 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13523 NT_STATUS_OK
WriteX 13523 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13523 258 NT_STATUS_OK
WriteX 13523 0 30118 30118 NT_STATUS_OK
Close 13523 NT_STATUS_OK
WriteX 13506 0 4096 4096 NT_STATUS_OK
WriteX 13508 0 64 64 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 61440 61440 NT_STATUS_OK
ReadX 13525 61440 4096 4096 NT_STATUS_OK
ReadX 13525 65536 61440 61440 NT_STATUS_OK
ReadX 13525 126976 4096 4096 NT_STATUS_OK
ReadX 13525 131072 61440 61440 NT_STATUS_OK
ReadX 13525 192512 4096 4096 NT_STATUS_OK
ReadX 13525 196608 61440 61440 NT_STATUS_OK
ReadX 13525 258048 4096 4096 NT_STATUS_OK
ReadX 13525 262144 61440 61440 NT_STATUS_OK
ReadX 13525 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 61440 61440 NT_STATUS_OK
ReadX 13526 61440 4096 4096 NT_STATUS_OK
ReadX 13526 65536 61440 61440 NT_STATUS_OK
ReadX 13526 126976 4096 4096 NT_STATUS_OK
ReadX 13526 131072 61440 61440 NT_STATUS_OK
ReadX 13526 192512 4096 4096 NT_STATUS_OK
ReadX 13526 196608 61440 61440 NT_STATUS_OK
ReadX 13526 258048 4096 4096 NT_STATUS_OK
ReadX 13526 262144 61440 61440 NT_STATUS_OK
ReadX 13526 323584 4096 4096 NT_STATUS_OK
ReadX 13526 327680 61440 61440 NT_STATUS_OK
ReadX 13526 389120 4096 4096 NT_STATUS_OK
ReadX 13526 393216 61440 61440 NT_STATUS_OK
ReadX 13526 454656 4096 4096 NT_STATUS_OK
ReadX 13526 458752 61440 61440 NT_STATUS_OK
ReadX 13526 520192 4096 4096 NT_STATUS_OK
ReadX 13526 524288 61440 61440 NT_STATUS_OK
ReadX 13526 585728 4096 4096 NT_STATUS_OK
ReadX 13526 589824 61440 61440 NT_STATUS_OK
ReadX 13526 651264 4096 4096 NT_STATUS_OK
ReadX 13526 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 61440 61440 NT_STATUS_OK
ReadX 13527 61440 4096 4096 NT_STATUS_OK
ReadX 13527 65536 61440 61440 NT_STATUS_OK
ReadX 13527 126976 4096 4096 NT_STATUS_OK
ReadX 13527 131072 61440 61440 NT_STATUS_OK
ReadX 13527 192512 4096 4096 NT_STATUS_OK
ReadX 13527 196608 61440 61440 NT_STATUS_OK
ReadX 13527 258048 4096 4096 NT_STATUS_OK
ReadX 13527 262144 61440 61440 NT_STATUS_OK
ReadX 13527 323584 4096 4096 NT_STATUS_OK
ReadX 13527 327680 61440 61440 NT_STATUS_OK
ReadX 13527 389120 4096 4096 NT_STATUS_OK
ReadX 13527 393216 61440 61440 NT_STATUS_OK
ReadX 13527 454656 4096 4096 NT_STATUS_OK
ReadX 13527 458752 61440 61440 NT_STATUS_OK
ReadX 13527 520192 4096 4096 NT_STATUS_OK
ReadX 13527 524288 61440 61440 NT_STATUS_OK
ReadX 13527 585728 4096 4096 NT_STATUS_OK
ReadX 13527 589824 61440 61440 NT_STATUS_OK
ReadX 13527 651264 4096 4096 NT_STATUS_OK
ReadX 13527 655360 61440 61440 NT_STATUS_OK
ReadX 13527 716800 4096 4096 NT_STATUS_OK
ReadX 13527 720896 61440 61440 NT_STATUS_OK
ReadX 13527 782336 4096 4096 NT_STATUS_OK
ReadX 13527 786432 61440 61440 NT_STATUS_OK
ReadX 13527 847872 4096 4096 NT_STATUS_OK
ReadX 13527 851968 61440 61440 NT_STATUS_OK
ReadX 13527 913408 4096 4096 NT_STATUS_OK
ReadX 13527 917504 61440 61440 NT_STATUS_OK
ReadX 13527 978944 4096 4096 NT_STATUS_OK
ReadX 13527 983040 61440 61440 NT_STATUS_OK
ReadX 13527 1044480 4096 4096 NT_STATUS_OK
ReadX 13527 1048576 61440 61440 NT_STATUS_OK
ReadX 13527 1110016 4096 4096 NT_STATUS_OK
ReadX 13527 1114112 61440 61440 NT_STATUS_OK
ReadX 13527 1175552 4096 4096 NT_STATUS_OK
ReadX 13527 1179648 61440 61440 NT_STATUS_OK
ReadX 13527 1241088 4096 4096 NT_STATUS_OK
ReadX 13527 1245184 61440 61440 NT_STATUS_OK
ReadX 13527 1306624 4096 4096 NT_STATUS_OK
ReadX 13527 1310720 61440 61440 NT_STATUS_OK
ReadX 13527 1372160 4096 4096 NT_STATUS_OK
ReadX 13527 1376256 61440 61440 NT_STATUS_OK
ReadX 13527 1437696 4096 4096 NT_STATUS_OK
ReadX 13527 1441792 61440 61440 NT_STATUS_OK
ReadX 13527 1503232 4096 4096 NT_STATUS_OK
ReadX 13527 1507328 61440 61440 NT_STATUS_OK
ReadX 13527 1568768 4096 4096 NT_STATUS_OK
ReadX 13527 1572864 61440 61440 NT_STATUS_OK
ReadX 13527 1634304 4096 4096 NT_STATUS_OK
ReadX 13527 1638400 61440 61440 NT_STATUS_OK
ReadX 13527 1699840 4096 4096 NT_STATUS_OK
ReadX 13527 1703936 61440 61440 NT_STATUS_OK
ReadX 13527 1765376 4096 4096 NT_STATUS_OK
ReadX 13527 1769472 61440 61440 NT_STATUS_OK
ReadX 13527 1830912 4096 4096 NT_STATUS_OK
ReadX 13527 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13530 NT_STATUS_OK
ReadX 13530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 4096 4096 NT_STATUS_OK
ReadX 13532 4096 4096 4096 NT_STATUS_OK
ReadX 13532 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13533 NT_STATUS_OK
Close 13533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13536 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13537 NT_STATUS_OK
Close 13537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13539 NT_STATUS_OK
ReadX 13539 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 0 8192 8192 NT_STATUS_OK
ReadX 13540 8192 8192 8192 NT_STATUS_OK
ReadX 13540 16384 8192 8192 NT_STATUS_OK
ReadX 13540 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13542 NT_STATUS_OK
Close 13542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Close 13539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13545 NT_STATUS_OK
WriteX 13545 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13545 258 NT_STATUS_OK
WriteX 13545 0 10438 10438 NT_STATUS_OK
Close 13545 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13548 NT_STATUS_OK
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13549 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13551 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13552 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13553 NT_STATUS_OK
Close 13553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
ReadX 13554 4096 4096 4096 NT_STATUS_OK
ReadX 13554 8192 4096 4096 NT_STATUS_OK
ReadX 13554 12288 8192 8192 NT_STATUS_OK
ReadX 13554 20480 8192 8192 NT_STATUS_OK
ReadX 13554 28672 8192 8192 NT_STATUS_OK
ReadX 13554 36864 8192 8192 NT_STATUS_OK
ReadX 13554 45056 8192 8192 NT_STATUS_OK
ReadX 13554 53248 8192 8192 NT_STATUS_OK
ReadX 13554 61440 8192 8192 NT_STATUS_OK
ReadX 13554 69632 8192 8192 NT_STATUS_OK
ReadX 13554 77824 8192 8192 NT_STATUS_OK
ReadX 13554 86016 8192 8192 NT_STATUS_OK
ReadX 13554 94208 8192 8192 NT_STATUS_OK
ReadX 13554 102400 8192 8192 NT_STATUS_OK
ReadX 13554 110592 8192 8192 NT_STATUS_OK
ReadX 13554 118784 8192 8192 NT_STATUS_OK
ReadX 13554 126976 8192 8192 NT_STATUS_OK
ReadX 13554 135168 8192 8192 NT_STATUS_OK
ReadX 13554 143360 8192 8192 NT_STATUS_OK
ReadX 13554 151552 8192 8192 NT_STATUS_OK
ReadX 13554 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Close 13551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13559 NT_STATUS_OK
WriteX 13559 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13559 258 NT_STATUS_OK
WriteX 13559 0 28489 28489 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13562 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13563 NT_STATUS_OK
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13565 NT_STATUS_OK
ReadX 13565 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 8192 8192 NT_STATUS_OK
ReadX 13566 8192 8192 8192 NT_STATUS_OK
ReadX 13566 16384 8192 8192 NT_STATUS_OK
ReadX 13566 24576 8192 8192 NT_STATUS_OK
ReadX 13566 32768 16384 16384 NT_STATUS_OK
ReadX 13566 49152 8192 8192 NT_STATUS_OK
ReadX 13566 57344 8192 8192 NT_STATUS_OK
ReadX 13566 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13571 NT_STATUS_OK
WriteX 13571 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13571 258 NT_STATUS_OK
WriteX 13571 0 29253 29253 NT_STATUS_OK
Close 13571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13572 NT_STATUS_OK
Close 13572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13578 NT_STATUS_OK
WriteX 13578 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13578 258 NT_STATUS_OK
WriteX 13578 0 30183 30183 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13581 NT_STATUS_OK
WriteX 13581 0 510 510 NT_STATUS_OK
WriteX 13581 510 512 512 NT_STATUS_OK
WriteX 13581 1022 510 510 NT_STATUS_OK
WriteX 13581 1532 510 510 NT_STATUS_OK
WriteX 13581 2042 168 168 NT_STATUS_OK
Close 13581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13582 NT_STATUS_OK
Close 13582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
WriteX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 61440 4096 4096 NT_STATUS_OK
ReadX 13585 126976 4096 4096 NT_STATUS_OK
WriteX 13585 0 65536 65536 NT_STATUS_OK
WriteX 13585 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13586 NT_STATUS_OK
ReadX 13586 61440 4096 4096 NT_STATUS_OK
ReadX 13586 126976 4096 4096 NT_STATUS_OK
ReadX 13586 192512 4096 4096 NT_STATUS_OK
ReadX 13586 258048 4096 4096 NT_STATUS_OK
WriteX 13586 0 65536 65536 NT_STATUS_OK
WriteX 13586 65536 65536 65536 NT_STATUS_OK
WriteX 13586 131072 65536 65536 NT_STATUS_OK
WriteX 13586 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 61440 4096 4096 NT_STATUS_OK
ReadX 13587 126976 4096 4096 NT_STATUS_OK
ReadX 13587 192512 4096 4096 NT_STATUS_OK
ReadX 13587 258048 4096 4096 NT_STATUS_OK
ReadX 13587 323584 4096 4096 NT_STATUS_OK
ReadX 13587 389120 4096 4096 NT_STATUS_OK
ReadX 13587 454656 4096 4096 NT_STATUS_OK
ReadX 13587 520192 4096 4096 NT_STATUS_OK
WriteX 13587 0 65536 65536 NT_STATUS_OK
WriteX 13587 65536 65536 65536 NT_STATUS_OK
WriteX 13587 131072 65536 65536 NT_STATUS_OK
WriteX 13587 196608 65536 65536 NT_STATUS_OK
WriteX 13587 262144 65536 65536 NT_STATUS_OK
WriteX 13587 327680 65536 65536 NT_STATUS_OK
WriteX 13587 393216 65536 65536 NT_STATUS_OK
WriteX 13587 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13586 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13617 NT_STATUS_OK
Close 13617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13632 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13653 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13656 NT_STATUS_OK
WriteX 13656 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13656 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13656 0 65536 65536 NT_STATUS_OK
WriteX 13656 65536 65536 65536 NT_STATUS_OK
WriteX 13656 131072 65536 65536 NT_STATUS_OK
WriteX 13656 196608 65536 65536 NT_STATUS_OK
WriteX 13656 262144 26634 26634 NT_STATUS_OK
Close 13656 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13661 NT_STATUS_OK
Close 13661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
Close 13663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 4096 4096 NT_STATUS_OK
ReadX 13664 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13665 NT_STATUS_OK
Close 13665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13672 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13681 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13697 NT_STATUS_OK
Close 13697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13707 NT_STATUS_OK
Close 13707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13712 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13731 NT_STATUS_OK
Close 13731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Close 13759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13788 0 4096 4096 NT_STATUS_OK
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
ReadX 13790 4096 4096 4096 NT_STATUS_OK
ReadX 13790 8192 4096 4096 NT_STATUS_OK
ReadX 13790 12288 4096 4096 NT_STATUS_OK
ReadX 13790 16384 4096 4096 NT_STATUS_OK
ReadX 13790 20480 4096 4096 NT_STATUS_OK
ReadX 13790 24576 4096 4096 NT_STATUS_OK
ReadX 13790 28672 4096 4096 NT_STATUS_OK
ReadX 13790 32768 4096 4096 NT_STATUS_OK
ReadX 13790 36864 4096 4096 NT_STATUS_OK
ReadX 13790 40960 4096 4096 NT_STATUS_OK
ReadX 13790 45056 4096 4096 NT_STATUS_OK
ReadX 13790 49152 4096 4096 NT_STATUS_OK
ReadX 13790 53248 4096 4096 NT_STATUS_OK
ReadX 13790 57344 4096 4096 NT_STATUS_OK
ReadX 13790 61440 4096 4096 NT_STATUS_OK
ReadX 13790 65536 4096 4096 NT_STATUS_OK
ReadX 13790 69632 4096 4096 NT_STATUS_OK
ReadX 13790 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13790 1004 NT_STATUS_OK
WriteX 13790 0 4096 4096 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13791 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13793 NT_STATUS_OK
Close 13793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13796 NT_STATUS_OK
WriteX 13796 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13796 258 NT_STATUS_OK
WriteX 13796 0 65536 65536 NT_STATUS_OK
WriteX 13796 65536 19979 19979 NT_STATUS_OK
Close 13796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13797 NT_STATUS_OK
ReadX 13797 0 4096 4096 NT_STATUS_OK
WriteX 13797 0 4096 4096 NT_STATUS_OK
Flush 13797 NT_STATUS_OK
WriteX 13797 0 4096 4096 NT_STATUS_OK
Flush 13797 NT_STATUS_OK
QUERY_FILE_INFORMATION 13797 1004 NT_STATUS_OK
WriteX 13797 0 4096 4096 NT_STATUS_OK
Flush 13797 NT_STATUS_OK
WriteX 13797 0 4096 4096 NT_STATUS_OK
Flush 13797 NT_STATUS_OK
WriteX 13797 0 4096 4096 NT_STATUS_OK
Flush 13797 NT_STATUS_OK
SET_FILE_INFORMATION 13797 1004 NT_STATUS_OK
WriteX 13797 0 4096 4096 NT_STATUS_OK
Flush 13797 NT_STATUS_OK
Close 13797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13798 NT_STATUS_OK
ReadX 13798 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
Close 13800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13802 1004 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13803 NT_STATUS_OK
Close 13803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13799 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13808 NT_STATUS_OK
WriteX 13808 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13808 258 NT_STATUS_OK
WriteX 13808 0 65536 65536 NT_STATUS_OK
WriteX 13808 65536 17654 17654 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 1004 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
SET_FILE_INFORMATION 13809 1004 NT_STATUS_OK
WriteX 13809 0 4096 4096 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13810 NT_STATUS_OK
SET_FILE_INFORMATION 13810 1004 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13812 NT_STATUS_OK
Close 13812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13814 NT_STATUS_OK
ReadX 13814 0 4096 4096 NT_STATUS_OK
ReadX 13814 4096 4096 4096 NT_STATUS_OK
ReadX 13814 8192 4096 4096 NT_STATUS_OK
ReadX 13814 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13814 16384 4096 4096 NT_STATUS_OK
ReadX 13814 20480 4096 4096 NT_STATUS_OK
ReadX 13814 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13815 NT_STATUS_OK
ReadX 13815 0 4096 4096 NT_STATUS_OK
Close 13815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13816 NT_STATUS_OK
ReadX 13816 0 4096 4096 NT_STATUS_OK
Close 13816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13817 NT_STATUS_OK
ReadX 13817 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13817 1004 NT_STATUS_OK
WriteX 13817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13823 NT_STATUS_OK
WriteX 13823 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13823 258 NT_STATUS_OK
WriteX 13823 0 65536 65536 NT_STATUS_OK
WriteX 13823 65536 19490 19490 NT_STATUS_OK
Close 13823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13824 NT_STATUS_OK
ReadX 13824 0 4096 4096 NT_STATUS_OK
WriteX 13824 0 4096 4096 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
WriteX 13824 0 4096 4096 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
QUERY_FILE_INFORMATION 13824 1004 NT_STATUS_OK
WriteX 13824 0 4096 4096 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
WriteX 13824 0 4096 4096 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
WriteX 13824 0 4096 4096 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
SET_FILE_INFORMATION 13824 1004 NT_STATUS_OK
WriteX 13824 0 4096 4096 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13825 NT_STATUS_OK
SET_FILE_INFORMATION 13825 1004 NT_STATUS_OK
Close 13825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13827 NT_STATUS_OK
Close 13827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13829 0 4096 4096 NT_STATUS_OK
Close 13829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
ReadX 13831 4096 4096 4096 NT_STATUS_OK
ReadX 13831 8192 4096 4096 NT_STATUS_OK
ReadX 13831 12288 4096 4096 NT_STATUS_OK
ReadX 13831 16384 4096 4096 NT_STATUS_OK
ReadX 13831 20480 4096 4096 NT_STATUS_OK
ReadX 13831 24576 4096 4096 NT_STATUS_OK
ReadX 13831 28672 4096 4096 NT_STATUS_OK
ReadX 13831 32768 4096 4096 NT_STATUS_OK
ReadX 13831 36864 4096 4096 NT_STATUS_OK
ReadX 13831 40960 4096 4096 NT_STATUS_OK
ReadX 13831 45056 4096 4096 NT_STATUS_OK
ReadX 13831 49152 4096 4096 NT_STATUS_OK
ReadX 13831 53248 4096 4096 NT_STATUS_OK
ReadX 13831 57344 4096 4096 NT_STATUS_OK
ReadX 13831 61440 4096 4096 NT_STATUS_OK
ReadX 13831 65536 4096 4096 NT_STATUS_OK
ReadX 13831 69632 4096 4096 NT_STATUS_OK
ReadX 13831 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13831 1004 NT_STATUS_OK
WriteX 13831 0 4096 4096 NT_STATUS_OK
Close 13831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13832 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
Close 13832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13837 NT_STATUS_OK
WriteX 13837 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13837 258 NT_STATUS_OK
WriteX 13837 0 65536 65536 NT_STATUS_OK
WriteX 13837 65536 8866 8866 NT_STATUS_OK
Close 13837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
WriteX 13838 0 4096 4096 NT_STATUS_OK
Flush 13838 NT_STATUS_OK
SET_FILE_INFORMATION 13838 1004 NT_STATUS_OK
WriteX 13838 0 4096 4096 NT_STATUS_OK
Flush 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
Close 13840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
Close 13841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13842 1004 NT_STATUS_OK
WriteX 13842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13845 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13848 NT_STATUS_OK
WriteX 13848 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13848 258 NT_STATUS_OK
WriteX 13848 0 65536 65536 NT_STATUS_OK
WriteX 13848 65536 9298 9298 NT_STATUS_OK
Close 13848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
WriteX 13849 0 4096 4096 NT_STATUS_OK
Flush 13849 NT_STATUS_OK
SET_FILE_INFORMATION 13849 1004 NT_STATUS_OK
WriteX 13849 0 4096 4096 NT_STATUS_OK
Flush 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13850 NT_STATUS_OK
SET_FILE_INFORMATION 13850 1004 NT_STATUS_OK
Close 13850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13851 NT_STATUS_OK
ReadX 13851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13852 NT_STATUS_OK
Close 13852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13855 0 4096 4096 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13856 NT_STATUS_OK
ReadX 13856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13856 4096 4096 4096 NT_STATUS_OK
ReadX 13856 8192 4096 4096 NT_STATUS_OK
ReadX 13856 12288 4096 4096 NT_STATUS_OK
ReadX 13856 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
Close 13857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13858 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
Close 13858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13859 NT_STATUS_OK
ReadX 13859 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13859 1004 NT_STATUS_OK
WriteX 13859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13856 NT_STATUS_OK
Close 13859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13865 NT_STATUS_OK
WriteX 13865 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13865 258 NT_STATUS_OK
WriteX 13865 0 65536 65536 NT_STATUS_OK
WriteX 13865 65536 11540 11540 NT_STATUS_OK
Close 13865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
WriteX 13866 0 4096 4096 NT_STATUS_OK
Flush 13866 NT_STATUS_OK
SET_FILE_INFORMATION 13866 1004 NT_STATUS_OK
WriteX 13866 0 4096 4096 NT_STATUS_OK
Flush 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13867 NT_STATUS_OK
SET_FILE_INFORMATION 13867 1004 NT_STATUS_OK
Close 13867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13871 NT_STATUS_OK
ReadX 13871 61440 4096 4096 NT_STATUS_OK
ReadX 13871 126976 4096 4096 NT_STATUS_OK
WriteX 13871 0 65536 65536 NT_STATUS_OK
WriteX 13871 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 61440 4096 4096 NT_STATUS_OK
ReadX 13872 126976 4096 4096 NT_STATUS_OK
ReadX 13872 192512 4096 4096 NT_STATUS_OK
ReadX 13872 258048 4096 4096 NT_STATUS_OK
WriteX 13872 0 65536 65536 NT_STATUS_OK
WriteX 13872 65536 65536 65536 NT_STATUS_OK
WriteX 13872 131072 65536 65536 NT_STATUS_OK
WriteX 13872 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 61440 4096 4096 NT_STATUS_OK
ReadX 13873 126976 4096 4096 NT_STATUS_OK
ReadX 13873 192512 4096 4096 NT_STATUS_OK
ReadX 13873 258048 4096 4096 NT_STATUS_OK
ReadX 13873 323584 4096 4096 NT_STATUS_OK
ReadX 13873 389120 4096 4096 NT_STATUS_OK
ReadX 13873 454656 4096 4096 NT_STATUS_OK
ReadX 13873 520192 4096 4096 NT_STATUS_OK
WriteX 13873 0 65536 65536 NT_STATUS_OK
WriteX 13873 65536 65536 65536 NT_STATUS_OK
WriteX 13873 131072 65536 65536 NT_STATUS_OK
WriteX 13873 196608 65536 65536 NT_STATUS_OK
WriteX 13873 262144 65536 65536 NT_STATUS_OK
WriteX 13873 327680 65536 65536 NT_STATUS_OK
WriteX 13873 393216 65536 65536 NT_STATUS_OK
WriteX 13873 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13874 NT_STATUS_OK
ReadX 13874 0 4096 4096 NT_STATUS_OK
ReadX 13874 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13875 NT_STATUS_OK
WriteX 13875 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13875 258 NT_STATUS_OK
WriteX 13875 0 53 53 NT_STATUS_OK
Close 13875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Close 13814 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13874 8192 4096 4096 NT_STATUS_OK
ReadX 13874 12288 4096 4096 NT_STATUS_OK
WriteX 13878 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13878 258 NT_STATUS_OK
ReadX 13874 16384 4096 4096 NT_STATUS_OK
ReadX 13874 20480 4096 4096 NT_STATUS_OK
WriteX 13878 0 15360 15360 NT_STATUS_OK
Close 13878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13879 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13879 1004 NT_STATUS_OK
WriteX 13879 0 4096 4096 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13883 NT_STATUS_OK
Close 13883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13882 4096 4096 4096 NT_STATUS_OK
ReadX 13882 8192 4096 4096 NT_STATUS_OK
ReadX 13882 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 4096 4096 NT_STATUS_OK
ReadX 13885 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 4096 4096 NT_STATUS_OK
ReadX 13886 4096 4096 4096 NT_STATUS_OK
ReadX 13886 8192 4096 4096 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Close 13886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13887 NT_STATUS_OK
WriteX 13887 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13887 258 NT_STATUS_OK
WriteX 13887 0 15360 15360 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13888 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13888 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13889 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13892 NT_STATUS_OK
SET_FILE_INFORMATION 13892 1004 NT_STATUS_OK
Close 13892 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Close 13888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
ReadX 13895 4096 4096 4096 NT_STATUS_OK
ReadX 13895 8192 4096 4096 NT_STATUS_OK
ReadX 13895 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13895 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13895 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13897 NT_STATUS_OK
WriteX 13897 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13897 258 NT_STATUS_OK
WriteX 13897 0 53 53 NT_STATUS_OK
Close 13897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13896 4096 4096 4096 NT_STATUS_OK
ReadX 13896 8192 4096 4096 NT_STATUS_OK
ReadX 13896 12288 4096 4096 NT_STATUS_OK
WriteX 13900 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13900 258 NT_STATUS_OK
WriteX 13900 0 12006 12006 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13901 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13901 1004 NT_STATUS_OK
WriteX 13901 0 4096 4096 NT_STATUS_OK
Close 13901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13902 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13904 4096 4096 4096 NT_STATUS_OK
ReadX 13904 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13907 NT_STATUS_OK
WriteX 13907 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13907 258 NT_STATUS_OK
WriteX 13907 0 11991 11991 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13908 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13908 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13912 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
Close 13912 NT_STATUS_OK
WriteX 13908 0 4096 4096 NT_STATUS_OK
Close 13908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13915 NT_STATUS_OK
ReadX 13915 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13916 NT_STATUS_OK
Close 13916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
WriteX 13895 0 19054 19054 NT_STATUS_OK
ReadX 13915 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13915 1004 NT_STATUS_OK
ReadX 13915 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13915 1004 NT_STATUS_OK
WriteX 13915 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13915 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13915 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13915 1004 NT_STATUS_OK
Close 13891 NT_STATUS_OK
WriteX 13915 0 12288 12288 NT_STATUS_OK
Close 13911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13895 NT_STATUS_OK
Close 13915 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13922 NT_STATUS_OK
ReadX 13922 0 61440 61440 NT_STATUS_OK
ReadX 13922 61440 4096 4096 NT_STATUS_OK
ReadX 13922 65536 61440 61440 NT_STATUS_OK
ReadX 13922 126976 4096 4096 NT_STATUS_OK
ReadX 13922 131072 61440 61440 NT_STATUS_OK
ReadX 13922 192512 4096 4096 NT_STATUS_OK
ReadX 13922 196608 61440 61440 NT_STATUS_OK
ReadX 13922 258048 4096 4096 NT_STATUS_OK
ReadX 13922 262144 61440 61440 NT_STATUS_OK
ReadX 13922 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13923 NT_STATUS_OK
ReadX 13923 0 61440 61440 NT_STATUS_OK
ReadX 13923 61440 4096 4096 NT_STATUS_OK
ReadX 13923 65536 61440 61440 NT_STATUS_OK
ReadX 13923 126976 4096 4096 NT_STATUS_OK
ReadX 13923 131072 61440 61440 NT_STATUS_OK
ReadX 13923 192512 4096 4096 NT_STATUS_OK
ReadX 13923 196608 61440 61440 NT_STATUS_OK
ReadX 13923 258048 4096 4096 NT_STATUS_OK
ReadX 13923 262144 61440 61440 NT_STATUS_OK
ReadX 13923 323584 4096 4096 NT_STATUS_OK
ReadX 13923 327680 61440 61440 NT_STATUS_OK
ReadX 13923 389120 4096 4096 NT_STATUS_OK
ReadX 13923 393216 61440 61440 NT_STATUS_OK
ReadX 13923 454656 4096 4096 NT_STATUS_OK
ReadX 13923 458752 61440 61440 NT_STATUS_OK
ReadX 13923 520192 4096 4096 NT_STATUS_OK
ReadX 13923 524288 61440 61440 NT_STATUS_OK
ReadX 13923 585728 4096 4096 NT_STATUS_OK
ReadX 13923 589824 61440 61440 NT_STATUS_OK
ReadX 13923 651264 4096 4096 NT_STATUS_OK
ReadX 13923 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 61440 61440 NT_STATUS_OK
ReadX 13924 61440 4096 4096 NT_STATUS_OK
ReadX 13924 65536 61440 61440 NT_STATUS_OK
ReadX 13924 126976 4096 4096 NT_STATUS_OK
ReadX 13924 131072 61440 61440 NT_STATUS_OK
ReadX 13924 192512 4096 4096 NT_STATUS_OK
ReadX 13924 196608 61440 61440 NT_STATUS_OK
ReadX 13924 258048 4096 4096 NT_STATUS_OK
ReadX 13924 262144 61440 61440 NT_STATUS_OK
ReadX 13924 323584 4096 4096 NT_STATUS_OK
ReadX 13924 327680 61440 61440 NT_STATUS_OK
ReadX 13924 389120 4096 4096 NT_STATUS_OK
ReadX 13924 393216 61440 61440 NT_STATUS_OK
ReadX 13924 454656 4096 4096 NT_STATUS_OK
ReadX 13924 458752 61440 61440 NT_STATUS_OK
ReadX 13924 520192 4096 4096 NT_STATUS_OK
ReadX 13924 524288 61440 61440 NT_STATUS_OK
ReadX 13924 585728 4096 4096 NT_STATUS_OK
ReadX 13924 589824 61440 61440 NT_STATUS_OK
ReadX 13924 651264 4096 4096 NT_STATUS_OK
ReadX 13924 655360 61440 61440 NT_STATUS_OK
ReadX 13924 716800 4096 4096 NT_STATUS_OK
ReadX 13924 720896 61440 61440 NT_STATUS_OK
ReadX 13924 782336 4096 4096 NT_STATUS_OK
ReadX 13924 786432 61440 61440 NT_STATUS_OK
ReadX 13924 847872 4096 4096 NT_STATUS_OK
ReadX 13924 851968 61440 61440 NT_STATUS_OK
ReadX 13924 913408 4096 4096 NT_STATUS_OK
ReadX 13924 917504 61440 61440 NT_STATUS_OK
ReadX 13924 978944 4096 4096 NT_STATUS_OK
ReadX 13924 983040 61440 61440 NT_STATUS_OK
ReadX 13924 1044480 4096 4096 NT_STATUS_OK
ReadX 13924 1048576 61440 61440 NT_STATUS_OK
ReadX 13924 1110016 4096 4096 NT_STATUS_OK
ReadX 13924 1114112 61440 61440 NT_STATUS_OK
ReadX 13924 1175552 4096 4096 NT_STATUS_OK
ReadX 13924 1179648 61440 61440 NT_STATUS_OK
ReadX 13924 1241088 4096 4096 NT_STATUS_OK
ReadX 13924 1245184 61440 61440 NT_STATUS_OK
ReadX 13924 1306624 4096 4096 NT_STATUS_OK
ReadX 13924 1310720 61440 61440 NT_STATUS_OK
ReadX 13924 1372160 4096 4096 NT_STATUS_OK
ReadX 13924 1376256 61440 61440 NT_STATUS_OK
ReadX 13924 1437696 4096 4096 NT_STATUS_OK
ReadX 13924 1441792 61440 61440 NT_STATUS_OK
ReadX 13924 1503232 4096 4096 NT_STATUS_OK
ReadX 13924 1507328 61440 61440 NT_STATUS_OK
ReadX 13924 1568768 4096 4096 NT_STATUS_OK
ReadX 13924 1572864 61440 61440 NT_STATUS_OK
ReadX 13924 1634304 4096 4096 NT_STATUS_OK
ReadX 13924 1638400 61440 61440 NT_STATUS_OK
ReadX 13924 1699840 4096 4096 NT_STATUS_OK
ReadX 13924 1703936 61440 61440 NT_STATUS_OK
ReadX 13924 1765376 4096 4096 NT_STATUS_OK
ReadX 13924 1769472 61440 61440 NT_STATUS_OK
ReadX 13924 1830912 4096 4096 NT_STATUS_OK
ReadX 13924 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13925 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13930 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13931 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 1004 NT_STATUS_OK
WriteX 13931 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13932 NT_STATUS_OK
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13933 NT_STATUS_OK
WriteX 13933 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13933 258 NT_STATUS_OK
WriteX 13933 0 491 491 NT_STATUS_OK
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13931 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13936 NT_STATUS_OK
Close 13936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13937 NT_STATUS_OK
WriteX 13937 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13937 258 NT_STATUS_OK
WriteX 13937 0 543 543 NT_STATUS_OK
Close 13937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Close 13923 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Close 13938 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13951 NT_STATUS_OK
QUERY_FILE_INFORMATION 13951 1004 NT_STATUS_OK
WriteX 13951 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13951 258 NT_STATUS_OK
WriteX 13951 0 2048 2048 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13952 NT_STATUS_OK
ReadX 13952 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13952 0 4096 4096 NT_STATUS_OK
Flush 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13952 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13957 NT_STATUS_OK
WriteX 13957 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13957 258 NT_STATUS_OK
WriteX 13957 0 2048 2048 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13962 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13963 NT_STATUS_OK
WriteX 13963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13963 258 NT_STATUS_OK
WriteX 13963 0 2048 2048 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 2048 2048 NT_STATUS_OK
ReadX 13942 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13958 0 4096 4096 NT_STATUS_OK
WriteX 13942 0 8192 8192 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
WriteX 13944 0 4096 4096 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13968 NT_STATUS_OK
QUERY_FILE_INFORMATION 13968 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13958 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13978 NT_STATUS_OK
ReadX 13978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13988 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 1004 NT_STATUS_OK
WriteX 13988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 2048 2048 NT_STATUS_OK
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13996 NT_STATUS_OK
QUERY_FILE_INFORMATION 13996 1004 NT_STATUS_OK
WriteX 13996 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13996 258 NT_STATUS_OK
WriteX 13996 0 2048 2048 NT_STATUS_OK
Close 13996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13997 NT_STATUS_OK
ReadX 13997 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
Flush 13989 NT_STATUS_OK
WriteX 13997 0 4096 4096 NT_STATUS_OK
Flush 13997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13997 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13991 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13999 NT_STATUS_OK
WriteX 13999 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 258 NT_STATUS_OK
WriteX 13999 0 4096 4096 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14001 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14002 NT_STATUS_OK
WriteX 14002 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14002 258 NT_STATUS_OK
WriteX 14002 0 4096 4096 NT_STATUS_OK
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 14003 0 4096 4096 NT_STATUS_OK
Close 14000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 14003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 14009 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14010 NT_STATUS_OK
WriteX 14010 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14010 258 NT_STATUS_OK
WriteX 14010 0 2048 2048 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14011 NT_STATUS_OK
ReadX 14011 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14019 NT_STATUS_OK
ReadX 14019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14020 NT_STATUS_OK
ReadX 14020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14025 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Close 14019 NT_STATUS_OK
Close 14020 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14016 NT_STATUS_OK
Close 14017 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14027 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14030 NT_STATUS_OK
ReadX 14030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14033 NT_STATUS_OK
ReadX 14033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14036 NT_STATUS_OK
ReadX 14036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14047 NT_STATUS_OK
QUERY_FILE_INFORMATION 14047 1004 NT_STATUS_OK
WriteX 14047 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14047 258 NT_STATUS_OK
WriteX 14047 0 2048 2048 NT_STATUS_OK
Close 14047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14049 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14059 NT_STATUS_OK
QUERY_FILE_INFORMATION 14059 1004 NT_STATUS_OK
WriteX 14059 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14059 258 NT_STATUS_OK
WriteX 14059 0 2048 2048 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14067 NT_STATUS_OK
QUERY_FILE_INFORMATION 14067 1004 NT_STATUS_OK
WriteX 14067 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14067 258 NT_STATUS_OK
WriteX 14067 0 2048 2048 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14048 0 4096 4096 NT_STATUS_OK
Flush 14048 NT_STATUS_OK
WriteX 14060 0 4096 4096 NT_STATUS_OK
Flush 14060 NT_STATUS_OK
WriteX 14068 0 4096 4096 NT_STATUS_OK
Flush 14068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14048 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14060 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14068 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14050 4096 16384 16384 NT_STATUS_OK
ReadX 14030 4096 16384 16384 NT_STATUS_OK
ReadX 14062 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14069 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 2048 2048 NT_STATUS_OK
WriteX 14070 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14071 NT_STATUS_OK
QUERY_FILE_INFORMATION 14071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14034 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14036 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Close 14030 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14033 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14073 NT_STATUS_OK
QUERY_FILE_INFORMATION 14073 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14075 NT_STATUS_OK
QUERY_FILE_INFORMATION 14075 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14078 4096 16384 16384 NT_STATUS_OK
WriteX 14078 0 4096 4096 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
WriteX 14080 0 4096 4096 NT_STATUS_OK
WriteX 14081 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14088 NT_STATUS_OK
ReadX 14088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14089 NT_STATUS_OK
ReadX 14089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14090 NT_STATUS_OK
ReadX 14090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14093 NT_STATUS_OK
ReadX 14093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14095 NT_STATUS_OK
ReadX 14095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9991 NT_STATUS_OK
ReadX 9991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 8192 8192 NT_STATUS_OK
ReadX 14084 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9993 0 4096 4096 NT_STATUS_OK
ReadX 9993 4096 4096 4096 NT_STATUS_OK
ReadX 9993 8192 4096 4096 NT_STATUS_OK
WriteX 14084 0 4096 4096 NT_STATUS_OK
WriteX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
ReadX 9994 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14078 0 4096 4096 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
WriteX 14080 0 4096 4096 NT_STATUS_OK
WriteX 14081 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9999 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1004 NT_STATUS_OK
WriteX 9999 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 258 NT_STATUS_OK
WriteX 9999 0 2048 2048 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10000 NT_STATUS_OK
ReadX 10000 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10000 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10002 NT_STATUS_OK
ReadX 10002 0 4096 4096 NT_STATUS_OK
ReadX 10002 4096 4096 4096 NT_STATUS_OK
WriteX 10002 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10000 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
ReadX 10004 4096 4096 4096 NT_STATUS_OK
WriteX 10004 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10005 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9992 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14079 NT_STATUS_OK
Close 14080 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14090 NT_STATUS_OK
Close 14095 NT_STATUS_OK
Close 14091 NT_STATUS_OK
Close 14092 NT_STATUS_OK
Close 14093 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 9991 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Close 14089 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 10004 NT_STATUS_OK
Close 9993 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10007 0 4096 4096 NT_STATUS_OK
ReadX 10007 4096 4096 4096 NT_STATUS_OK
ReadX 10007 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10009 NT_STATUS_OK
ReadX 10009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10011 NT_STATUS_OK
ReadX 10011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10016 NT_STATUS_OK
ReadX 10016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10018 NT_STATUS_OK
ReadX 10018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10019 NT_STATUS_OK
ReadX 10019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10020 NT_STATUS_OK
ReadX 10020 0 4096 4096 NT_STATUS_OK
ReadX 10008 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10025 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 1004 NT_STATUS_OK
WriteX 10025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
WriteX 10025 0 2048 2048 NT_STATUS_OK
Close 10025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10026 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10030 NT_STATUS_OK
Close 10030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10031 NT_STATUS_OK
QUERY_FILE_INFORMATION 10031 1004 NT_STATUS_OK
WriteX 10031 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10031 258 NT_STATUS_OK
WriteX 10031 0 2048 2048 NT_STATUS_OK
Close 10031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10015 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10033 NT_STATUS_OK
QUERY_FILE_INFORMATION 10033 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10019 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Close 10008 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Close 10012 NT_STATUS_OK
Close 10013 NT_STATUS_OK
Close 10010 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Close 10016 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Close 10007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10035 NT_STATUS_OK
QUERY_FILE_INFORMATION 10035 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10037 NT_STATUS_OK
ReadX 10037 61440 4096 4096 NT_STATUS_OK
ReadX 10037 126976 4096 4096 NT_STATUS_OK
WriteX 10037 0 65536 65536 NT_STATUS_OK
WriteX 10037 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 61440 4096 4096 NT_STATUS_OK
ReadX 10038 126976 4096 4096 NT_STATUS_OK
ReadX 10038 192512 4096 4096 NT_STATUS_OK
ReadX 10038 258048 4096 4096 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 65536 65536 NT_STATUS_OK
WriteX 10038 131072 65536 65536 NT_STATUS_OK
WriteX 10038 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 61440 4096 4096 NT_STATUS_OK
ReadX 10039 126976 4096 4096 NT_STATUS_OK
ReadX 10039 192512 4096 4096 NT_STATUS_OK
ReadX 10039 258048 4096 4096 NT_STATUS_OK
ReadX 10039 323584 4096 4096 NT_STATUS_OK
ReadX 10039 389120 4096 4096 NT_STATUS_OK
ReadX 10039 454656 4096 4096 NT_STATUS_OK
ReadX 10039 520192 4096 4096 NT_STATUS_OK
WriteX 10039 0 65536 65536 NT_STATUS_OK
WriteX 10039 65536 65536 65536 NT_STATUS_OK
WriteX 10039 131072 65536 65536 NT_STATUS_OK
WriteX 10039 196608 65536 65536 NT_STATUS_OK
WriteX 10039 262144 65536 65536 NT_STATUS_OK
WriteX 10039 327680 65536 65536 NT_STATUS_OK
WriteX 10039 393216 65536 65536 NT_STATUS_OK
WriteX 10039 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10040 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10040 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10040 8192 4096 4096 NT_STATUS_OK
ReadX 10040 12288 4096 4096 NT_STATUS_OK
ReadX 10040 16384 4096 4096 NT_STATUS_OK
ReadX 10040 20480 4096 4096 NT_STATUS_OK
ReadX 10040 24576 4096 4096 NT_STATUS_OK
ReadX 10040 28672 4096 4096 NT_STATUS_OK
ReadX 10040 32768 4096 4096 NT_STATUS_OK
ReadX 10040 36864 4096 4096 NT_STATUS_OK
ReadX 10040 40960 4096 4096 NT_STATUS_OK
ReadX 10040 45056 4096 4096 NT_STATUS_OK
ReadX 10040 49152 4096 4096 NT_STATUS_OK
ReadX 10040 53248 4096 4096 NT_STATUS_OK
ReadX 10040 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10040 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10041 NT_STATUS_OK
Close 10041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10037 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Close 10039 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10043 NT_STATUS_OK
WriteX 10043 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10043 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10043 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10043 1004 NT_STATUS_OK
WriteX 10043 0 57088 57088 NT_STATUS_OK
WriteX 10043 0 4096 4096 NT_STATUS_OK
Flush 10043 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10044 NT_STATUS_OK
SET_FILE_INFORMATION 10044 1004 NT_STATUS_OK
Close 10044 NT_STATUS_OK
SET_FILE_INFORMATION 10043 1004 NT_STATUS_OK
WriteX 10043 0 4096 4096 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10047 NT_STATUS_OK
ReadX 10047 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10047 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10048 NT_STATUS_OK
WriteX 10048 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 0 51456 51456 NT_STATUS_OK
WriteX 10048 0 4096 4096 NT_STATUS_OK
Flush 10048 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 0 4096 4096 NT_STATUS_OK
Close 10048 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10052 NT_STATUS_OK
ReadX 10052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10052 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10057 NT_STATUS_OK
WriteX 10057 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10057 258 NT_STATUS_OK
WriteX 10057 0 53077 53077 NT_STATUS_OK
Close 10057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10058 NT_STATUS_OK
WriteX 10058 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10058 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10058 1004 NT_STATUS_OK
WriteX 10058 0 65536 65536 NT_STATUS_OK
WriteX 10058 65536 1856 1856 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Flush 10058 NT_STATUS_OK
SET_FILE_INFORMATION 10058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10058 1004 NT_STATUS_OK
WriteX 10058 0 4096 4096 NT_STATUS_OK
Close 10058 NT_STATUS_OK
Close 10052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10067 NT_STATUS_OK
WriteX 10067 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10067 258 NT_STATUS_OK
WriteX 10067 0 7983 7983 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10069 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10072 NT_STATUS_OK
WriteX 10072 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10072 258 NT_STATUS_OK
WriteX 10072 0 65536 65536 NT_STATUS_OK
WriteX 10072 65536 65536 65536 NT_STATUS_OK
WriteX 10072 131072 65536 65536 NT_STATUS_OK
WriteX 10072 196608 65536 65536 NT_STATUS_OK
WriteX 10072 262144 65536 65536 NT_STATUS_OK
WriteX 10072 327680 65536 65536 NT_STATUS_OK
WriteX 10072 393216 65536 65536 NT_STATUS_OK
WriteX 10072 458752 46731 46731 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10073 NT_STATUS_OK
WriteX 10073 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10073 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10062 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10073 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10073 1004 NT_STATUS_OK
WriteX 10073 0 65536 65536 NT_STATUS_OK
WriteX 10073 65536 22848 22848 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Flush 10073 NT_STATUS_OK
SET_FILE_INFORMATION 10073 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10073 1004 NT_STATUS_OK
WriteX 10073 0 4096 4096 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Close 10062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10077 NT_STATUS_OK
ReadX 10077 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10077 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10078 NT_STATUS_OK
ReadX 10078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10078 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10078 1004 NT_STATUS_OK
ReadX 10078 8192 4096 4096 NT_STATUS_OK
ReadX 10078 12288 4096 4096 NT_STATUS_OK
ReadX 10078 16384 4096 4096 NT_STATUS_OK
ReadX 10078 20480 4096 4096 NT_STATUS_OK
ReadX 10078 24576 4096 4096 NT_STATUS_OK
ReadX 10078 28672 4096 4096 NT_STATUS_OK
ReadX 10078 32768 4096 4096 NT_STATUS_OK
ReadX 10078 36864 4096 4096 NT_STATUS_OK
ReadX 10078 40960 4096 4096 NT_STATUS_OK
ReadX 10078 45056 4096 4096 NT_STATUS_OK
ReadX 10078 49152 4096 4096 NT_STATUS_OK
ReadX 10078 53248 4096 4096 NT_STATUS_OK
ReadX 10078 57344 4096 4096 NT_STATUS_OK
ReadX 10078 61440 4096 4096 NT_STATUS_OK
ReadX 10078 65536 4096 4096 NT_STATUS_OK
ReadX 10078 69632 4096 4096 NT_STATUS_OK
ReadX 10078 73728 4096 4096 NT_STATUS_OK
ReadX 10078 77824 4096 4096 NT_STATUS_OK
ReadX 10078 81920 4096 4096 NT_STATUS_OK
ReadX 10078 86016 4096 4096 NT_STATUS_OK
ReadX 10078 90112 4096 4096 NT_STATUS_OK
ReadX 10078 94208 4096 4096 NT_STATUS_OK
ReadX 10078 98304 4096 4096 NT_STATUS_OK
ReadX 10078 102400 4096 4096 NT_STATUS_OK
ReadX 10078 106496 4096 4096 NT_STATUS_OK
ReadX 10078 110592 4096 4096 NT_STATUS_OK
ReadX 10078 114688 4096 4096 NT_STATUS_OK
ReadX 10078 118784 4096 4096 NT_STATUS_OK
ReadX 10078 122880 4096 4096 NT_STATUS_OK
ReadX 10078 126976 4096 4096 NT_STATUS_OK
ReadX 10078 131072 4096 4096 NT_STATUS_OK
ReadX 10078 135168 4096 4096 NT_STATUS_OK
ReadX 10078 139264 4096 4096 NT_STATUS_OK
ReadX 10078 143360 4096 4096 NT_STATUS_OK
ReadX 10078 147456 4096 4096 NT_STATUS_OK
ReadX 10078 151552 4096 4096 NT_STATUS_OK
ReadX 10078 155648 4096 4096 NT_STATUS_OK
ReadX 10078 159744 4096 4096 NT_STATUS_OK
ReadX 10078 163840 4096 4096 NT_STATUS_OK
ReadX 10078 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10078 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10079 NT_STATUS_OK
Close 10079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10081 NT_STATUS_OK
WriteX 10081 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10081 258 NT_STATUS_OK
Close 10078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10082 NT_STATUS_OK
SET_FILE_INFORMATION 10082 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
WriteX 10081 0 42388 42388 NT_STATUS_OK
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10085 NT_STATUS_OK
ReadX 10085 0 4096 4096 NT_STATUS_OK
ReadX 10085 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10086 NT_STATUS_OK
WriteX 10086 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10086 258 NT_STATUS_OK
SET_FILE_INFORMATION 10086 1004 NT_STATUS_OK
WriteX 10086 0 42652 42652 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10088 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 4096 4096 NT_STATUS_OK
ReadX 10090 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10095 NT_STATUS_OK
WriteX 10095 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10095 258 NT_STATUS_OK
WriteX 10095 0 65536 65536 NT_STATUS_OK
WriteX 10095 65536 49 49 NT_STATUS_OK
Close 10095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 61440 61440 NT_STATUS_OK
ReadX 10096 61440 4096 4096 NT_STATUS_OK
ReadX 10096 65536 61440 61440 NT_STATUS_OK
ReadX 10096 126976 4096 4096 NT_STATUS_OK
ReadX 10096 131072 61440 61440 NT_STATUS_OK
ReadX 10096 192512 4096 4096 NT_STATUS_OK
ReadX 10096 196608 61440 61440 NT_STATUS_OK
ReadX 10096 258048 4096 4096 NT_STATUS_OK
ReadX 10096 262144 61440 61440 NT_STATUS_OK
ReadX 10096 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10097 NT_STATUS_OK
ReadX 10097 0 61440 61440 NT_STATUS_OK
ReadX 10097 61440 4096 4096 NT_STATUS_OK
ReadX 10097 65536 61440 61440 NT_STATUS_OK
ReadX 10097 126976 4096 4096 NT_STATUS_OK
ReadX 10097 131072 61440 61440 NT_STATUS_OK
ReadX 10097 192512 4096 4096 NT_STATUS_OK
ReadX 10097 196608 61440 61440 NT_STATUS_OK
ReadX 10097 258048 4096 4096 NT_STATUS_OK
ReadX 10097 262144 61440 61440 NT_STATUS_OK
ReadX 10097 323584 4096 4096 NT_STATUS_OK
ReadX 10097 327680 61440 61440 NT_STATUS_OK
ReadX 10097 389120 4096 4096 NT_STATUS_OK
ReadX 10097 393216 61440 61440 NT_STATUS_OK
ReadX 10097 454656 4096 4096 NT_STATUS_OK
ReadX 10097 458752 61440 61440 NT_STATUS_OK
ReadX 10097 520192 4096 4096 NT_STATUS_OK
ReadX 10097 524288 61440 61440 NT_STATUS_OK
ReadX 10097 585728 4096 4096 NT_STATUS_OK
ReadX 10097 589824 61440 61440 NT_STATUS_OK
ReadX 10097 651264 4096 4096 NT_STATUS_OK
ReadX 10097 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10098 NT_STATUS_OK
ReadX 10098 0 61440 61440 NT_STATUS_OK
ReadX 10098 61440 4096 4096 NT_STATUS_OK
ReadX 10098 65536 61440 61440 NT_STATUS_OK
ReadX 10098 126976 4096 4096 NT_STATUS_OK
ReadX 10098 131072 61440 61440 NT_STATUS_OK
ReadX 10098 192512 4096 4096 NT_STATUS_OK
ReadX 10098 196608 61440 61440 NT_STATUS_OK
ReadX 10098 258048 4096 4096 NT_STATUS_OK
ReadX 10098 262144 61440 61440 NT_STATUS_OK
ReadX 10098 323584 4096 4096 NT_STATUS_OK
ReadX 10098 327680 61440 61440 NT_STATUS_OK
ReadX 10098 389120 4096 4096 NT_STATUS_OK
ReadX 10098 393216 61440 61440 NT_STATUS_OK
ReadX 10098 454656 4096 4096 NT_STATUS_OK
ReadX 10098 458752 61440 61440 NT_STATUS_OK
ReadX 10098 520192 4096 4096 NT_STATUS_OK
ReadX 10098 524288 61440 61440 NT_STATUS_OK
ReadX 10098 585728 4096 4096 NT_STATUS_OK
ReadX 10098 589824 61440 61440 NT_STATUS_OK
ReadX 10098 651264 4096 4096 NT_STATUS_OK
ReadX 10098 655360 61440 61440 NT_STATUS_OK
ReadX 10098 716800 4096 4096 NT_STATUS_OK
ReadX 10098 720896 61440 61440 NT_STATUS_OK
ReadX 10098 782336 4096 4096 NT_STATUS_OK
ReadX 10098 786432 61440 61440 NT_STATUS_OK
ReadX 10098 847872 4096 4096 NT_STATUS_OK
ReadX 10098 851968 61440 61440 NT_STATUS_OK
ReadX 10098 913408 4096 4096 NT_STATUS_OK
ReadX 10098 917504 61440 61440 NT_STATUS_OK
ReadX 10098 978944 4096 4096 NT_STATUS_OK
ReadX 10098 983040 61440 61440 NT_STATUS_OK
ReadX 10098 1044480 4096 4096 NT_STATUS_OK
ReadX 10098 1048576 61440 61440 NT_STATUS_OK
ReadX 10098 1110016 4096 4096 NT_STATUS_OK
ReadX 10098 1114112 61440 61440 NT_STATUS_OK
ReadX 10098 1175552 4096 4096 NT_STATUS_OK
ReadX 10098 1179648 61440 61440 NT_STATUS_OK
ReadX 10098 1241088 4096 4096 NT_STATUS_OK
ReadX 10098 1245184 61440 61440 NT_STATUS_OK
ReadX 10098 1306624 4096 4096 NT_STATUS_OK
ReadX 10098 1310720 61440 61440 NT_STATUS_OK
ReadX 10098 1372160 4096 4096 NT_STATUS_OK
ReadX 10098 1376256 61440 61440 NT_STATUS_OK
ReadX 10098 1437696 4096 4096 NT_STATUS_OK
ReadX 10098 1441792 61440 61440 NT_STATUS_OK
ReadX 10098 1503232 4096 4096 NT_STATUS_OK
ReadX 10098 1507328 61440 61440 NT_STATUS_OK
ReadX 10098 1568768 4096 4096 NT_STATUS_OK
ReadX 10098 1572864 61440 61440 NT_STATUS_OK
ReadX 10098 1634304 4096 4096 NT_STATUS_OK
ReadX 10098 1638400 61440 61440 NT_STATUS_OK
ReadX 10098 1699840 4096 4096 NT_STATUS_OK
ReadX 10098 1703936 61440 61440 NT_STATUS_OK
ReadX 10098 1765376 4096 4096 NT_STATUS_OK
ReadX 10098 1769472 61440 61440 NT_STATUS_OK
ReadX 10098 1830912 4096 4096 NT_STATUS_OK
ReadX 10098 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10100 NT_STATUS_OK
QUERY_FILE_INFORMATION 10100 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10100 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10100 1005 NT_STATUS_OK
ReadX 10100 2156 24 24 NT_STATUS_OK
ReadX 10100 2139 276 276 NT_STATUS_OK
ReadX 10100 2136 14 14 NT_STATUS_OK
ReadX 10100 2136 7 7 NT_STATUS_OK
ReadX 10100 2138 12 12 NT_STATUS_OK
ReadX 10100 2137 8 8 NT_STATUS_OK
ReadX 10100 2135 15 15 NT_STATUS_OK
ReadX 10100 0 16 16 NT_STATUS_OK
ReadX 10100 16 2048 2048 NT_STATUS_OK
ReadX 10100 2064 2048 2048 NT_STATUS_OK
ReadX 10100 257 2048 2048 NT_STATUS_OK
ReadX 10100 385 2048 2048 NT_STATUS_OK
ReadX 10100 513 2048 2048 NT_STATUS_OK
ReadX 10100 641 2048 2048 NT_STATUS_OK
ReadX 10100 769 2048 2048 NT_STATUS_OK
ReadX 10100 897 2048 2048 NT_STATUS_OK
ReadX 10100 1025 2048 2048 NT_STATUS_OK
ReadX 10100 1153 2048 2048 NT_STATUS_OK
ReadX 10100 1281 2048 2048 NT_STATUS_OK
ReadX 10100 1409 2048 2048 NT_STATUS_OK
ReadX 10100 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10097 NT_STATUS_OK
Close 10098 NT_STATUS_OK
Close 10090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10105 NT_STATUS_OK
WriteX 10105 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10105 258 NT_STATUS_OK
WriteX 10105 0 10575 10575 NT_STATUS_OK
Flush 10105 NT_STATUS_OK
Close 10105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10106 NT_STATUS_OK
Close 10106 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10108 NT_STATUS_OK
ReadX 10108 0 4096 4096 NT_STATUS_OK
Close 10100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10110 NT_STATUS_OK
LockX 10110 2147483538 1 NT_STATUS_OK
UnlockX 10110 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 1005 NT_STATUS_OK
ReadX 10110 0 512 512 NT_STATUS_OK
ReadX 10110 512 512 512 NT_STATUS_OK
ReadX 10110 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 1004 NT_STATUS_OK
Close 10110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10111 NT_STATUS_OK
QUERY_FILE_INFORMATION 10111 1005 NT_STATUS_OK
ReadX 10111 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10112 NT_STATUS_OK
LockX 10112 2147483538 1 NT_STATUS_OK
UnlockX 10112 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10112 1005 NT_STATUS_OK
ReadX 10112 0 512 512 NT_STATUS_OK
ReadX 10112 512 512 512 NT_STATUS_OK
ReadX 10112 1024 512 512 NT_STATUS_OK
ReadX 10112 288 20 20 NT_STATUS_OK
ReadX 10112 308 2084 2084 NT_STATUS_OK
ReadX 10112 388 2084 2084 NT_STATUS_OK
ReadX 10112 388 2084 2084 NT_STATUS_OK
ReadX 10099 2157 1386 1386 NT_STATUS_OK
ReadX 10112 2472 399 399 NT_STATUS_OK
ReadX 10112 3072 1536 1536 NT_STATUS_OK
ReadX 10112 544 149 149 NT_STATUS_OK
ReadX 10112 693 485 485 NT_STATUS_OK
Close 10112 NT_STATUS_OK
ReadX 10099 2157 4096 4096 NT_STATUS_OK
ReadX 10099 6253 4096 4096 NT_STATUS_OK
ReadX 10099 10349 4096 4096 NT_STATUS_OK
ReadX 10099 14445 4096 4096 NT_STATUS_OK
ReadX 10099 18541 4096 4096 NT_STATUS_OK
ReadX 10099 22637 256 256 NT_STATUS_OK
ReadX 10099 22893 4096 4096 NT_STATUS_OK
ReadX 10099 26989 4096 4096 NT_STATUS_OK
ReadX 10099 31085 4096 4096 NT_STATUS_OK
ReadX 10099 35181 4096 4096 NT_STATUS_OK
ReadX 10099 39277 4096 4096 NT_STATUS_OK
ReadX 10099 43373 4096 4096 NT_STATUS_OK
ReadX 10099 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10099 2157 1024 1024 NT_STATUS_OK
ReadX 10099 1667 4688 4688 NT_STATUS_OK
ReadX 10099 6355 3516 3516 NT_STATUS_OK
ReadX 10099 9871 16384 16384 NT_STATUS_OK
ReadX 10099 26255 3771 3771 NT_STATUS_OK
ReadX 10099 30026 2048 2048 NT_STATUS_OK
ReadX 10099 32074 1024 1024 NT_STATUS_OK
ReadX 10099 33098 6652 6652 NT_STATUS_OK
ReadX 10099 39750 16384 16384 NT_STATUS_OK
ReadX 10099 56134 10496 10496 NT_STATUS_OK
ReadX 10099 66630 1784 1784 NT_STATUS_OK
ReadX 10099 68414 90 90 NT_STATUS_OK
ReadX 10099 68504 273 273 NT_STATUS_OK
ReadX 10099 68777 1600 1600 NT_STATUS_OK
ReadX 10099 70377 640 640 NT_STATUS_OK
ReadX 10099 71017 1280 1280 NT_STATUS_OK
ReadX 10099 72297 8464 8464 NT_STATUS_OK
ReadX 10099 80761 158 158 NT_STATUS_OK
ReadX 10099 80919 912 912 NT_STATUS_OK
ReadX 10099 81831 1980 1980 NT_STATUS_OK
ReadX 10099 83811 2256 2256 NT_STATUS_OK
ReadX 10099 86067 400 400 NT_STATUS_OK
ReadX 10099 86467 252 252 NT_STATUS_OK
ReadX 10099 86719 42 42 NT_STATUS_OK
ReadX 10099 86761 725 725 NT_STATUS_OK
ReadX 10099 2009 512 512 NT_STATUS_OK
ReadX 10099 3895 9 9 NT_STATUS_OK
ReadX 10099 3781 46 46 NT_STATUS_OK
ReadX 10099 4059 92 92 NT_STATUS_OK
ReadX 10099 3781 92 92 NT_STATUS_OK
ReadX 10099 3986 184 184 NT_STATUS_OK
ReadX 10099 3987 16384 16384 NT_STATUS_OK
ReadX 10099 3902 16384 16384 NT_STATUS_OK
ReadX 10099 3781 10240 10240 NT_STATUS_OK
ReadX 10099 3821 16384 16384 NT_STATUS_OK
ReadX 10099 3891 935 935 NT_STATUS_OK
ReadX 10099 4060 10240 10240 NT_STATUS_OK
ReadX 10099 4059 184 184 NT_STATUS_OK
ReadX 10099 256 184 184 NT_STATUS_OK
ReadX 10099 256 1026 1026 NT_STATUS_OK
ReadX 10099 3901 326 326 NT_STATUS_OK
ReadX 10099 3899 652 652 NT_STATUS_OK
ReadX 10099 256 2 2 NT_STATUS_OK
ReadX 10099 258 4948 4948 NT_STATUS_OK
Close 10099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10114 NT_STATUS_OK
Close 10114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10117 NT_STATUS_OK
WriteX 10117 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10117 258 NT_STATUS_OK
WriteX 10117 0 65536 65536 NT_STATUS_OK
WriteX 10117 65536 65536 65536 NT_STATUS_OK
WriteX 10117 131072 65536 65536 NT_STATUS_OK
WriteX 10117 196608 65536 65536 NT_STATUS_OK
WriteX 10117 262144 65536 65536 NT_STATUS_OK
WriteX 10117 327680 65536 65536 NT_STATUS_OK
WriteX 10117 393216 65536 65536 NT_STATUS_OK
WriteX 10117 458752 65536 65536 NT_STATUS_OK
WriteX 10117 524288 65536 65536 NT_STATUS_OK
WriteX 10117 589824 35257 35257 NT_STATUS_OK
Close 10117 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10119 NT_STATUS_OK
Close 10119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
WriteX 10122 0 65536 65536 NT_STATUS_OK
WriteX 10122 65536 65536 65536 NT_STATUS_OK
WriteX 10122 131072 65536 65536 NT_STATUS_OK
WriteX 10122 196608 65536 65536 NT_STATUS_OK
WriteX 10122 262144 65536 65536 NT_STATUS_OK
WriteX 10122 327680 65536 65536 NT_STATUS_OK
WriteX 10122 393216 65536 65536 NT_STATUS_OK
WriteX 10122 458752 65536 65536 NT_STATUS_OK
WriteX 10122 524288 65536 65536 NT_STATUS_OK
WriteX 10122 589824 57598 57598 NT_STATUS_OK
Close 10122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10124 NT_STATUS_OK
WriteX 10124 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10124 258 NT_STATUS_OK
WriteX 10124 0 12543 12543 NT_STATUS_OK
Flush 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Close 10108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10130 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 1005 NT_STATUS_OK
ReadX 10130 1938 24 24 NT_STATUS_OK
ReadX 10130 1920 276 276 NT_STATUS_OK
ReadX 10130 1918 14 14 NT_STATUS_OK
ReadX 10130 1918 7 7 NT_STATUS_OK
ReadX 10130 1919 12 12 NT_STATUS_OK
ReadX 10130 1919 8 8 NT_STATUS_OK
ReadX 10130 1917 15 15 NT_STATUS_OK
ReadX 10130 0 16 16 NT_STATUS_OK
ReadX 10130 16 2048 2048 NT_STATUS_OK
ReadX 10130 2064 2048 2048 NT_STATUS_OK
ReadX 10130 257 2048 2048 NT_STATUS_OK
ReadX 10130 385 2048 2048 NT_STATUS_OK
ReadX 10130 513 2048 2048 NT_STATUS_OK
ReadX 10130 641 2048 2048 NT_STATUS_OK
ReadX 10130 769 2048 2048 NT_STATUS_OK
ReadX 10130 897 2048 2048 NT_STATUS_OK
ReadX 10130 1025 2048 2048 NT_STATUS_OK
ReadX 10130 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10135 NT_STATUS_OK
WriteX 10135 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
WriteX 10135 0 11588 11588 NT_STATUS_OK
Flush 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10136 NT_STATUS_OK
Close 10136 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10140 NT_STATUS_OK
WriteX 10140 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10140 258 NT_STATUS_OK
WriteX 10140 0 11615 11615 NT_STATUS_OK
Flush 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10142 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10146 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10149 NT_STATUS_OK
WriteX 10149 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 258 NT_STATUS_OK
WriteX 10149 0 65536 65536 NT_STATUS_OK
WriteX 10149 65536 16050 16050 NT_STATUS_OK
Close 10149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 1939 64 64 NT_STATUS_OK
ReadX 10129 128 248 248 NT_STATUS_OK
ReadX 10129 128 568 568 NT_STATUS_OK
ReadX 10129 3872 1536 1536 NT_STATUS_OK
ReadX 10129 3456 2560 2560 NT_STATUS_OK
ReadX 10129 3136 512 512 NT_STATUS_OK
ReadX 10129 2880 4096 4096 NT_STATUS_OK
ReadX 10129 3264 3072 3072 NT_STATUS_OK
ReadX 10129 320 4096 4096 NT_STATUS_OK
ReadX 10129 1024 4096 4096 NT_STATUS_OK
ReadX 10129 3616 4096 4096 NT_STATUS_OK
ReadX 10129 1939 64 64 NT_STATUS_OK
ReadX 10129 128 248 248 NT_STATUS_OK
ReadX 10129 128 608 608 NT_STATUS_OK
ReadX 10129 2858 1024 1024 NT_STATUS_OK
ReadX 10129 2810 4096 4096 NT_STATUS_OK
ReadX 10129 2826 4096 4096 NT_STATUS_OK
ReadX 10129 2580 2048 2048 NT_STATUS_OK
ReadX 10129 2800 2560 2560 NT_STATUS_OK
ReadX 10129 2100 4096 4096 NT_STATUS_OK
ReadX 10129 2084 4096 4096 NT_STATUS_OK
ReadX 10129 868 4096 4096 NT_STATUS_OK
ReadX 10129 2324 4096 4096 NT_STATUS_OK
ReadX 10129 884 4096 4096 NT_STATUS_OK
ReadX 10129 2604 1024 1024 NT_STATUS_OK
ReadX 10129 580 4096 4096 NT_STATUS_OK
ReadX 10129 596 4096 4096 NT_STATUS_OK
ReadX 10129 2752 4096 4096 NT_STATUS_OK
ReadX 10129 2842 1024 1024 NT_STATUS_OK
ReadX 10129 660 4096 4096 NT_STATUS_OK
ReadX 10129 2720 4096 4096 NT_STATUS_OK
ReadX 10129 2736 4096 4096 NT_STATUS_OK
ReadX 10129 628 4096 4096 NT_STATUS_OK
ReadX 10129 2704 4096 4096 NT_STATUS_OK
ReadX 10129 1556 4096 4096 NT_STATUS_OK
ReadX 10129 576 4096 4096 NT_STATUS_OK
ReadX 10129 3168 1536 1536 NT_STATUS_OK
ReadX 10129 832 4096 4096 NT_STATUS_OK
ReadX 10129 1088 4096 4096 NT_STATUS_OK
ReadX 10129 1344 4096 4096 NT_STATUS_OK
ReadX 10129 1600 4096 4096 NT_STATUS_OK
ReadX 10129 1856 4096 4096 NT_STATUS_OK
ReadX 10129 2112 4096 4096 NT_STATUS_OK
ReadX 10129 1892 4096 4096 NT_STATUS_OK
ReadX 10129 820 4096 4096 NT_STATUS_OK
ReadX 10129 788 4096 4096 NT_STATUS_OK
ReadX 10129 1604 4096 4096 NT_STATUS_OK
ReadX 10129 3648 4096 4096 NT_STATUS_OK
ReadX 10129 2608 4096 4096 NT_STATUS_OK
ReadX 10129 548 4096 4096 NT_STATUS_OK
ReadX 10129 740 4096 4096 NT_STATUS_OK
ReadX 10129 1344 4096 4096 NT_STATUS_OK
ReadX 10129 3392 4096 4096 NT_STATUS_OK
ReadX 10129 3904 4096 4096 NT_STATUS_OK
ReadX 10129 644 4096 4096 NT_STATUS_OK
ReadX 10129 676 4096 4096 NT_STATUS_OK
ReadX 10129 2688 4096 4096 NT_STATUS_OK
ReadX 10129 320 4096 4096 NT_STATUS_OK
ReadX 10129 900 4096 4096 NT_STATUS_OK
ReadX 10129 1908 4096 4096 NT_STATUS_OK
ReadX 10129 852 4096 4096 NT_STATUS_OK
ReadX 10129 724 4096 4096 NT_STATUS_OK
ReadX 10129 2292 4096 4096 NT_STATUS_OK
ReadX 10129 612 4096 4096 NT_STATUS_OK
ReadX 10129 388 4096 4096 NT_STATUS_OK
ReadX 10129 2368 4096 4096 NT_STATUS_OK
ReadX 10129 2624 4096 4096 NT_STATUS_OK
ReadX 10129 500 4096 4096 NT_STATUS_OK
ReadX 10129 356 4096 4096 NT_STATUS_OK
ReadX 10129 1024 4096 4096 NT_STATUS_OK
ReadX 10129 576 4096 4096 NT_STATUS_OK
ReadX 10129 340 4096 4096 NT_STATUS_OK
ReadX 10129 420 4096 4096 NT_STATUS_OK
ReadX 10129 1600 4096 4096 NT_STATUS_OK
ReadX 10129 404 4096 4096 NT_STATUS_OK
ReadX 10129 1428 4096 4096 NT_STATUS_OK
ReadX 10129 2656 4096 4096 NT_STATUS_OK
ReadX 10129 2624 4096 4096 NT_STATUS_OK
ReadX 10129 452 4096 4096 NT_STATUS_OK
ReadX 10129 692 4096 4096 NT_STATUS_OK
ReadX 10129 564 4096 4096 NT_STATUS_OK
ReadX 10129 372 4096 4096 NT_STATUS_OK
ReadX 10129 468 4096 4096 NT_STATUS_OK
ReadX 10129 484 4096 4096 NT_STATUS_OK
ReadX 10129 1088 4096 4096 NT_STATUS_OK
ReadX 10129 1924 4096 4096 NT_STATUS_OK
ReadX 10129 2768 4096 4096 NT_STATUS_OK
ReadX 10129 832 4096 4096 NT_STATUS_OK
ReadX 10129 836 4096 4096 NT_STATUS_OK
ReadX 10129 1856 4096 4096 NT_STATUS_OK
ReadX 10129 2640 4096 4096 NT_STATUS_OK
ReadX 10129 436 4096 4096 NT_STATUS_OK
ReadX 10129 1828 4096 4096 NT_STATUS_OK
ReadX 10129 804 4096 4096 NT_STATUS_OK
ReadX 10129 1860 4096 4096 NT_STATUS_OK
ReadX 10129 1812 4096 4096 NT_STATUS_OK
ReadX 10129 756 4096 4096 NT_STATUS_OK
ReadX 10129 1636 4096 4096 NT_STATUS_OK
ReadX 10129 772 4096 4096 NT_STATUS_OK
ReadX 10129 2036 4096 4096 NT_STATUS_OK
ReadX 10129 1220 4096 4096 NT_STATUS_OK
ReadX 10129 1652 4096 4096 NT_STATUS_OK
ReadX 10129 2588 4096 4096 NT_STATUS_OK
ReadX 10129 916 4096 4096 NT_STATUS_OK
ReadX 10129 260 4096 4096 NT_STATUS_OK
ReadX 10129 932 4096 4096 NT_STATUS_OK
ReadX 10129 2624 4096 4096 NT_STATUS_OK
ReadX 10129 308 4096 4096 NT_STATUS_OK
ReadX 10129 292 4096 4096 NT_STATUS_OK
ReadX 10129 1140 4096 4096 NT_STATUS_OK
ReadX 10129 276 4096 4096 NT_STATUS_OK
ReadX 10129 2020 4096 4096 NT_STATUS_OK
ReadX 10129 2880 4096 4096 NT_STATUS_OK
ReadX 10129 516 4096 4096 NT_STATUS_OK
ReadX 10129 1844 4096 4096 NT_STATUS_OK
ReadX 10129 1124 4096 4096 NT_STATUS_OK
ReadX 10129 3136 4096 4096 NT_STATUS_OK
ReadX 10129 324 4096 4096 NT_STATUS_OK
ReadX 10129 1156 4096 4096 NT_STATUS_OK
ReadX 10129 1172 4096 4096 NT_STATUS_OK
ReadX 10129 2112 4096 4096 NT_STATUS_OK
ReadX 10129 2368 4096 4096 NT_STATUS_OK
ReadX 10129 964 4096 4096 NT_STATUS_OK
ReadX 10129 980 4096 4096 NT_STATUS_OK
ReadX 10129 1012 4096 4096 NT_STATUS_OK
ReadX 10129 532 4096 4096 NT_STATUS_OK
ReadX 10129 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10129 1620 4096 4096 NT_STATUS_OK
ReadX 10129 1604 4096 4096 NT_STATUS_OK
ReadX 10129 2116 4096 4096 NT_STATUS_OK
ReadX 10129 2132 4096 4096 NT_STATUS_OK
ReadX 10129 2148 4096 4096 NT_STATUS_OK
ReadX 10129 2276 4096 4096 NT_STATUS_OK
ReadX 10129 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10154 NT_STATUS_OK
QUERY_FILE_INFORMATION 10109 1004 NT_STATUS_OK
Close 10109 NT_STATUS_OK
WriteX 10154 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10154 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10111 1004 NT_STATUS_OK
Close 10111 NT_STATUS_OK
WriteX 10154 0 65536 65536 NT_STATUS_OK
WriteX 10154 65536 64850 64850 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10156 NT_STATUS_OK
WriteX 10156 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10156 258 NT_STATUS_OK
ReadX 10129 2068 4096 4096 NT_STATUS_OK
ReadX 10129 1588 4096 4096 NT_STATUS_OK
ReadX 10129 1572 4096 4096 NT_STATUS_OK
WriteX 10156 0 18630 18630 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
Close 10156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10158 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10129 612 4096 4096 NT_STATUS_OK
ReadX 10129 564 4096 4096 NT_STATUS_OK
ReadX 10129 1876 4096 4096 NT_STATUS_OK
ReadX 10129 628 4096 4096 NT_STATUS_OK
ReadX 10129 740 4096 4096 NT_STATUS_OK
ReadX 10129 724 4096 4096 NT_STATUS_OK
ReadX 10129 644 4096 4096 NT_STATUS_OK
ReadX 10129 2324 4096 4096 NT_STATUS_OK
ReadX 10129 660 4096 4096 NT_STATUS_OK
ReadX 10129 852 4096 4096 NT_STATUS_OK
ReadX 10129 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10129 2368 4096 4096 NT_STATUS_OK
ReadX 10129 1024 4096 4096 NT_STATUS_OK
ReadX 10129 320 4096 4096 NT_STATUS_OK
ReadX 10129 580 4096 4096 NT_STATUS_OK
ReadX 10129 3136 512 512 NT_STATUS_OK
ReadX 10129 2880 4096 4096 NT_STATUS_OK
Close 10129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 61440 4096 4096 NT_STATUS_OK
ReadX 10161 126976 4096 4096 NT_STATUS_OK
WriteX 10161 0 65536 65536 NT_STATUS_OK
WriteX 10161 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 61440 4096 4096 NT_STATUS_OK
ReadX 10162 126976 4096 4096 NT_STATUS_OK
ReadX 10162 192512 4096 4096 NT_STATUS_OK
ReadX 10162 258048 4096 4096 NT_STATUS_OK
WriteX 10162 0 65536 65536 NT_STATUS_OK
WriteX 10162 65536 65536 65536 NT_STATUS_OK
WriteX 10162 131072 65536 65536 NT_STATUS_OK
WriteX 10162 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 61440 4096 4096 NT_STATUS_OK
ReadX 10163 126976 4096 4096 NT_STATUS_OK
ReadX 10163 192512 4096 4096 NT_STATUS_OK
ReadX 10163 258048 4096 4096 NT_STATUS_OK
ReadX 10163 323584 4096 4096 NT_STATUS_OK
ReadX 10163 389120 4096 4096 NT_STATUS_OK
ReadX 10163 454656 4096 4096 NT_STATUS_OK
ReadX 10163 520192 4096 4096 NT_STATUS_OK
WriteX 10163 0 65536 65536 NT_STATUS_OK
WriteX 10163 65536 65536 65536 NT_STATUS_OK
WriteX 10163 131072 65536 65536 NT_STATUS_OK
WriteX 10163 196608 65536 65536 NT_STATUS_OK
WriteX 10163 262144 65536 65536 NT_STATUS_OK
WriteX 10163 327680 65536 65536 NT_STATUS_OK
WriteX 10163 393216 65536 65536 NT_STATUS_OK
WriteX 10163 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10165 NT_STATUS_OK
Close 10165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10166 NT_STATUS_OK
WriteX 10166 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10164 0 8192 8192 NT_STATUS_OK
Flush 10164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10164 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10164 0 8192 8192 NT_STATUS_OK
Flush 10164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10164 0 8192 8192 NT_STATUS_OK
Flush 10164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10164 0 8192 8192 NT_STATUS_OK
Flush 10164 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10168 NT_STATUS_OK
Close 10168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10171 NT_STATUS_OK
WriteX 10171 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 258 NT_STATUS_OK
WriteX 10171 0 62591 62591 NT_STATUS_OK
Close 10171 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10173 NT_STATUS_OK
Close 10173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10176 NT_STATUS_OK
WriteX 10176 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10176 258 NT_STATUS_OK
WriteX 10176 0 10845 10845 NT_STATUS_OK
Close 10176 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10178 NT_STATUS_OK
Close 10178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10181 NT_STATUS_OK
WriteX 10181 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10181 258 NT_STATUS_OK
WriteX 10181 0 30118 30118 NT_STATUS_OK
Close 10181 NT_STATUS_OK
WriteX 10164 0 4096 4096 NT_STATUS_OK
WriteX 10166 0 64 64 NT_STATUS_OK
Close 10166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 61440 61440 NT_STATUS_OK
ReadX 10183 61440 4096 4096 NT_STATUS_OK
ReadX 10183 65536 61440 61440 NT_STATUS_OK
ReadX 10183 126976 4096 4096 NT_STATUS_OK
ReadX 10183 131072 61440 61440 NT_STATUS_OK
ReadX 10183 192512 4096 4096 NT_STATUS_OK
ReadX 10183 196608 61440 61440 NT_STATUS_OK
ReadX 10183 258048 4096 4096 NT_STATUS_OK
ReadX 10183 262144 61440 61440 NT_STATUS_OK
ReadX 10183 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 61440 61440 NT_STATUS_OK
ReadX 10184 61440 4096 4096 NT_STATUS_OK
ReadX 10184 65536 61440 61440 NT_STATUS_OK
ReadX 10184 126976 4096 4096 NT_STATUS_OK
ReadX 10184 131072 61440 61440 NT_STATUS_OK
ReadX 10184 192512 4096 4096 NT_STATUS_OK
ReadX 10184 196608 61440 61440 NT_STATUS_OK
ReadX 10184 258048 4096 4096 NT_STATUS_OK
ReadX 10184 262144 61440 61440 NT_STATUS_OK
ReadX 10184 323584 4096 4096 NT_STATUS_OK
ReadX 10184 327680 61440 61440 NT_STATUS_OK
ReadX 10184 389120 4096 4096 NT_STATUS_OK
ReadX 10184 393216 61440 61440 NT_STATUS_OK
ReadX 10184 454656 4096 4096 NT_STATUS_OK
ReadX 10184 458752 61440 61440 NT_STATUS_OK
ReadX 10184 520192 4096 4096 NT_STATUS_OK
ReadX 10184 524288 61440 61440 NT_STATUS_OK
ReadX 10184 585728 4096 4096 NT_STATUS_OK
ReadX 10184 589824 61440 61440 NT_STATUS_OK
ReadX 10184 651264 4096 4096 NT_STATUS_OK
ReadX 10184 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 61440 61440 NT_STATUS_OK
ReadX 10185 61440 4096 4096 NT_STATUS_OK
ReadX 10185 65536 61440 61440 NT_STATUS_OK
ReadX 10185 126976 4096 4096 NT_STATUS_OK
ReadX 10185 131072 61440 61440 NT_STATUS_OK
ReadX 10185 192512 4096 4096 NT_STATUS_OK
ReadX 10185 196608 61440 61440 NT_STATUS_OK
ReadX 10185 258048 4096 4096 NT_STATUS_OK
ReadX 10185 262144 61440 61440 NT_STATUS_OK
ReadX 10185 323584 4096 4096 NT_STATUS_OK
ReadX 10185 327680 61440 61440 NT_STATUS_OK
ReadX 10185 389120 4096 4096 NT_STATUS_OK
ReadX 10185 393216 61440 61440 NT_STATUS_OK
ReadX 10185 454656 4096 4096 NT_STATUS_OK
ReadX 10185 458752 61440 61440 NT_STATUS_OK
ReadX 10185 520192 4096 4096 NT_STATUS_OK
ReadX 10185 524288 61440 61440 NT_STATUS_OK
ReadX 10185 585728 4096 4096 NT_STATUS_OK
ReadX 10185 589824 61440 61440 NT_STATUS_OK
ReadX 10185 651264 4096 4096 NT_STATUS_OK
ReadX 10185 655360 61440 61440 NT_STATUS_OK
ReadX 10185 716800 4096 4096 NT_STATUS_OK
ReadX 10185 720896 61440 61440 NT_STATUS_OK
ReadX 10185 782336 4096 4096 NT_STATUS_OK
ReadX 10185 786432 61440 61440 NT_STATUS_OK
ReadX 10185 847872 4096 4096 NT_STATUS_OK
ReadX 10185 851968 61440 61440 NT_STATUS_OK
ReadX 10185 913408 4096 4096 NT_STATUS_OK
ReadX 10185 917504 61440 61440 NT_STATUS_OK
ReadX 10185 978944 4096 4096 NT_STATUS_OK
ReadX 10185 983040 61440 61440 NT_STATUS_OK
ReadX 10185 1044480 4096 4096 NT_STATUS_OK
ReadX 10185 1048576 61440 61440 NT_STATUS_OK
ReadX 10185 1110016 4096 4096 NT_STATUS_OK
ReadX 10185 1114112 61440 61440 NT_STATUS_OK
ReadX 10185 1175552 4096 4096 NT_STATUS_OK
ReadX 10185 1179648 61440 61440 NT_STATUS_OK
ReadX 10185 1241088 4096 4096 NT_STATUS_OK
ReadX 10185 1245184 61440 61440 NT_STATUS_OK
ReadX 10185 1306624 4096 4096 NT_STATUS_OK
ReadX 10185 1310720 61440 61440 NT_STATUS_OK
ReadX 10185 1372160 4096 4096 NT_STATUS_OK
ReadX 10185 1376256 61440 61440 NT_STATUS_OK
ReadX 10185 1437696 4096 4096 NT_STATUS_OK
ReadX 10185 1441792 61440 61440 NT_STATUS_OK
ReadX 10185 1503232 4096 4096 NT_STATUS_OK
ReadX 10185 1507328 61440 61440 NT_STATUS_OK
ReadX 10185 1568768 4096 4096 NT_STATUS_OK
ReadX 10185 1572864 61440 61440 NT_STATUS_OK
ReadX 10185 1634304 4096 4096 NT_STATUS_OK
ReadX 10185 1638400 61440 61440 NT_STATUS_OK
ReadX 10185 1699840 4096 4096 NT_STATUS_OK
ReadX 10185 1703936 61440 61440 NT_STATUS_OK
ReadX 10185 1765376 4096 4096 NT_STATUS_OK
ReadX 10185 1769472 61440 61440 NT_STATUS_OK
ReadX 10185 1830912 4096 4096 NT_STATUS_OK
ReadX 10185 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10186 NT_STATUS_OK
Close 10186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10183 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
ReadX 10190 4096 4096 4096 NT_STATUS_OK
ReadX 10190 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10191 NT_STATUS_OK
Close 10191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10194 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Close 10194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 8192 8192 NT_STATUS_OK
ReadX 10198 8192 8192 8192 NT_STATUS_OK
ReadX 10198 16384 8192 8192 NT_STATUS_OK
ReadX 10198 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10203 NT_STATUS_OK
WriteX 10203 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
WriteX 10203 0 10438 10438 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10204 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10206 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10207 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10209 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10211 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 0 4096 4096 NT_STATUS_OK
ReadX 10212 4096 4096 4096 NT_STATUS_OK
ReadX 10212 8192 4096 4096 NT_STATUS_OK
ReadX 10212 12288 8192 8192 NT_STATUS_OK
ReadX 10212 20480 8192 8192 NT_STATUS_OK
ReadX 10212 28672 8192 8192 NT_STATUS_OK
ReadX 10212 36864 8192 8192 NT_STATUS_OK
ReadX 10212 45056 8192 8192 NT_STATUS_OK
ReadX 10212 53248 8192 8192 NT_STATUS_OK
ReadX 10212 61440 8192 8192 NT_STATUS_OK
ReadX 10212 69632 8192 8192 NT_STATUS_OK
ReadX 10212 77824 8192 8192 NT_STATUS_OK
ReadX 10212 86016 8192 8192 NT_STATUS_OK
ReadX 10212 94208 8192 8192 NT_STATUS_OK
ReadX 10212 102400 8192 8192 NT_STATUS_OK
ReadX 10212 110592 8192 8192 NT_STATUS_OK
ReadX 10212 118784 8192 8192 NT_STATUS_OK
ReadX 10212 126976 8192 8192 NT_STATUS_OK
ReadX 10212 135168 8192 8192 NT_STATUS_OK
ReadX 10212 143360 8192 8192 NT_STATUS_OK
ReadX 10212 151552 8192 8192 NT_STATUS_OK
ReadX 10212 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10212 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10214 NT_STATUS_OK
Close 10214 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10217 NT_STATUS_OK
WriteX 10217 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 258 NT_STATUS_OK
WriteX 10217 0 28489 28489 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10218 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10220 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 8192 8192 NT_STATUS_OK
ReadX 10224 8192 8192 8192 NT_STATUS_OK
ReadX 10224 16384 8192 8192 NT_STATUS_OK
ReadX 10224 24576 8192 8192 NT_STATUS_OK
ReadX 10224 32768 16384 16384 NT_STATUS_OK
ReadX 10224 49152 8192 8192 NT_STATUS_OK
ReadX 10224 57344 8192 8192 NT_STATUS_OK
ReadX 10224 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10226 NT_STATUS_OK
Close 10226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10229 NT_STATUS_OK
WriteX 10229 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10229 258 NT_STATUS_OK
WriteX 10229 0 29253 29253 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10233 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10236 NT_STATUS_OK
WriteX 10236 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10236 258 NT_STATUS_OK
WriteX 10236 0 30183 30183 NT_STATUS_OK
Close 10236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10239 NT_STATUS_OK
WriteX 10239 0 510 510 NT_STATUS_OK
WriteX 10239 510 512 512 NT_STATUS_OK
WriteX 10239 1022 510 510 NT_STATUS_OK
WriteX 10239 1532 510 510 NT_STATUS_OK
WriteX 10239 2042 168 168 NT_STATUS_OK
Close 10239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
WriteX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 61440 4096 4096 NT_STATUS_OK
ReadX 10243 126976 4096 4096 NT_STATUS_OK
WriteX 10243 0 65536 65536 NT_STATUS_OK
WriteX 10243 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 61440 4096 4096 NT_STATUS_OK
ReadX 10244 126976 4096 4096 NT_STATUS_OK
ReadX 10244 192512 4096 4096 NT_STATUS_OK
ReadX 10244 258048 4096 4096 NT_STATUS_OK
WriteX 10244 0 65536 65536 NT_STATUS_OK
WriteX 10244 65536 65536 65536 NT_STATUS_OK
WriteX 10244 131072 65536 65536 NT_STATUS_OK
WriteX 10244 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 61440 4096 4096 NT_STATUS_OK
ReadX 10245 126976 4096 4096 NT_STATUS_OK
ReadX 10245 192512 4096 4096 NT_STATUS_OK
ReadX 10245 258048 4096 4096 NT_STATUS_OK
ReadX 10245 323584 4096 4096 NT_STATUS_OK
ReadX 10245 389120 4096 4096 NT_STATUS_OK
ReadX 10245 454656 4096 4096 NT_STATUS_OK
ReadX 10245 520192 4096 4096 NT_STATUS_OK
WriteX 10245 0 65536 65536 NT_STATUS_OK
WriteX 10245 65536 65536 65536 NT_STATUS_OK
WriteX 10245 131072 65536 65536 NT_STATUS_OK
WriteX 10245 196608 65536 65536 NT_STATUS_OK
WriteX 10245 262144 65536 65536 NT_STATUS_OK
WriteX 10245 327680 65536 65536 NT_STATUS_OK
WriteX 10245 393216 65536 65536 NT_STATUS_OK
WriteX 10245 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10246 NT_STATUS_OK
Close 10246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10248 NT_STATUS_OK
Close 10248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10261 NT_STATUS_OK
Close 10261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10264 NT_STATUS_OK
Close 10264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10266 NT_STATUS_OK
Close 10266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10270 NT_STATUS_OK
Close 10270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10275 NT_STATUS_OK
Close 10275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10285 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10300 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10308 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10314 NT_STATUS_OK
WriteX 10314 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10314 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10314 0 65536 65536 NT_STATUS_OK
WriteX 10314 65536 65536 65536 NT_STATUS_OK
WriteX 10314 131072 65536 65536 NT_STATUS_OK
WriteX 10314 196608 65536 65536 NT_STATUS_OK
WriteX 10314 262144 26634 26634 NT_STATUS_OK
Close 10314 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10319 NT_STATUS_OK
Close 10319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
ReadX 10322 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10323 NT_STATUS_OK
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10322 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10327 NT_STATUS_OK
Close 10327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10330 NT_STATUS_OK
Close 10330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10336 NT_STATUS_OK
Close 10336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10341 NT_STATUS_OK
Close 10341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10345 NT_STATUS_OK
Close 10345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10355 NT_STATUS_OK
Close 10355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10413 NT_STATUS_OK
Close 10413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
Close 10415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10446 0 4096 4096 NT_STATUS_OK
Close 10446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10447 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
ReadX 10448 4096 4096 4096 NT_STATUS_OK
ReadX 10448 8192 4096 4096 NT_STATUS_OK
ReadX 10448 12288 4096 4096 NT_STATUS_OK
ReadX 10448 16384 4096 4096 NT_STATUS_OK
ReadX 10448 20480 4096 4096 NT_STATUS_OK
ReadX 10448 24576 4096 4096 NT_STATUS_OK
ReadX 10448 28672 4096 4096 NT_STATUS_OK
ReadX 10448 32768 4096 4096 NT_STATUS_OK
ReadX 10448 36864 4096 4096 NT_STATUS_OK
ReadX 10448 40960 4096 4096 NT_STATUS_OK
ReadX 10448 45056 4096 4096 NT_STATUS_OK
ReadX 10448 49152 4096 4096 NT_STATUS_OK
ReadX 10448 53248 4096 4096 NT_STATUS_OK
ReadX 10448 57344 4096 4096 NT_STATUS_OK
ReadX 10448 61440 4096 4096 NT_STATUS_OK
ReadX 10448 65536 4096 4096 NT_STATUS_OK
ReadX 10448 69632 4096 4096 NT_STATUS_OK
ReadX 10448 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10449 NT_STATUS_OK
SET_FILE_INFORMATION 10449 1004 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10451 NT_STATUS_OK
Close 10451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10454 NT_STATUS_OK
WriteX 10454 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
WriteX 10454 0 65536 65536 NT_STATUS_OK
WriteX 10454 65536 19979 19979 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 1004 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10456 NT_STATUS_OK
ReadX 10456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10457 NT_STATUS_OK
ReadX 10457 0 4096 4096 NT_STATUS_OK
Close 10456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10459 NT_STATUS_OK
ReadX 10459 0 4096 4096 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10460 NT_STATUS_OK
ReadX 10460 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10460 1004 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10461 NT_STATUS_OK
Close 10461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Close 10460 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10466 NT_STATUS_OK
WriteX 10466 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10466 258 NT_STATUS_OK
WriteX 10466 0 65536 65536 NT_STATUS_OK
WriteX 10466 65536 17654 17654 NT_STATUS_OK
Close 10466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 4096 4096 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
Flush 10467 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
Flush 10467 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 1004 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
Flush 10467 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
Flush 10467 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
Flush 10467 NT_STATUS_OK
SET_FILE_INFORMATION 10467 1004 NT_STATUS_OK
WriteX 10467 0 4096 4096 NT_STATUS_OK
Flush 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10468 NT_STATUS_OK
SET_FILE_INFORMATION 10468 1004 NT_STATUS_OK
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 4096 4096 NT_STATUS_OK
ReadX 10472 4096 4096 4096 NT_STATUS_OK
ReadX 10472 8192 4096 4096 NT_STATUS_OK
ReadX 10472 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10472 16384 4096 4096 NT_STATUS_OK
ReadX 10472 20480 4096 4096 NT_STATUS_OK
ReadX 10472 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
Close 10473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10475 1004 NT_STATUS_OK
WriteX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10481 NT_STATUS_OK
WriteX 10481 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10481 258 NT_STATUS_OK
WriteX 10481 0 65536 65536 NT_STATUS_OK
WriteX 10481 65536 19490 19490 NT_STATUS_OK
Close 10481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 4096 4096 NT_STATUS_OK
WriteX 10482 0 4096 4096 NT_STATUS_OK
Flush 10482 NT_STATUS_OK
WriteX 10482 0 4096 4096 NT_STATUS_OK
Flush 10482 NT_STATUS_OK
QUERY_FILE_INFORMATION 10482 1004 NT_STATUS_OK
WriteX 10482 0 4096 4096 NT_STATUS_OK
Flush 10482 NT_STATUS_OK
WriteX 10482 0 4096 4096 NT_STATUS_OK
Flush 10482 NT_STATUS_OK
WriteX 10482 0 4096 4096 NT_STATUS_OK
Flush 10482 NT_STATUS_OK
SET_FILE_INFORMATION 10482 1004 NT_STATUS_OK
WriteX 10482 0 4096 4096 NT_STATUS_OK
Flush 10482 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10483 NT_STATUS_OK
SET_FILE_INFORMATION 10483 1004 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10487 0 4096 4096 NT_STATUS_OK
Close 10487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
ReadX 10489 4096 4096 4096 NT_STATUS_OK
ReadX 10489 8192 4096 4096 NT_STATUS_OK
ReadX 10489 12288 4096 4096 NT_STATUS_OK
ReadX 10489 16384 4096 4096 NT_STATUS_OK
ReadX 10489 20480 4096 4096 NT_STATUS_OK
ReadX 10489 24576 4096 4096 NT_STATUS_OK
ReadX 10489 28672 4096 4096 NT_STATUS_OK
ReadX 10489 32768 4096 4096 NT_STATUS_OK
ReadX 10489 36864 4096 4096 NT_STATUS_OK
ReadX 10489 40960 4096 4096 NT_STATUS_OK
ReadX 10489 45056 4096 4096 NT_STATUS_OK
ReadX 10489 49152 4096 4096 NT_STATUS_OK
ReadX 10489 53248 4096 4096 NT_STATUS_OK
ReadX 10489 57344 4096 4096 NT_STATUS_OK
ReadX 10489 61440 4096 4096 NT_STATUS_OK
ReadX 10489 65536 4096 4096 NT_STATUS_OK
ReadX 10489 69632 4096 4096 NT_STATUS_OK
ReadX 10489 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10489 1004 NT_STATUS_OK
WriteX 10489 0 4096 4096 NT_STATUS_OK
Close 10489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10490 NT_STATUS_OK
SET_FILE_INFORMATION 10490 1004 NT_STATUS_OK
Close 10490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10492 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10495 NT_STATUS_OK
WriteX 10495 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 258 NT_STATUS_OK
WriteX 10495 0 65536 65536 NT_STATUS_OK
WriteX 10495 65536 8866 8866 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
WriteX 10496 0 4096 4096 NT_STATUS_OK
Flush 10496 NT_STATUS_OK
SET_FILE_INFORMATION 10496 1004 NT_STATUS_OK
WriteX 10496 0 4096 4096 NT_STATUS_OK
Flush 10496 NT_STATUS_OK
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
Close 10499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10500 NT_STATUS_OK
ReadX 10500 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10500 1004 NT_STATUS_OK
WriteX 10500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10501 NT_STATUS_OK
Close 10501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10500 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10506 NT_STATUS_OK
WriteX 10506 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10506 258 NT_STATUS_OK
WriteX 10506 0 65536 65536 NT_STATUS_OK
WriteX 10506 65536 9298 9298 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
Flush 10507 NT_STATUS_OK
SET_FILE_INFORMATION 10507 1004 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
Flush 10507 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10508 NT_STATUS_OK
SET_FILE_INFORMATION 10508 1004 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10513 0 4096 4096 NT_STATUS_OK
Close 10513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10514 4096 4096 4096 NT_STATUS_OK
ReadX 10514 8192 4096 4096 NT_STATUS_OK
ReadX 10514 12288 4096 4096 NT_STATUS_OK
ReadX 10514 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10517 1004 NT_STATUS_OK
WriteX 10517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10523 NT_STATUS_OK
WriteX 10523 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 258 NT_STATUS_OK
WriteX 10523 0 65536 65536 NT_STATUS_OK
WriteX 10523 65536 11540 11540 NT_STATUS_OK
Close 10523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
Flush 10524 NT_STATUS_OK
SET_FILE_INFORMATION 10524 1004 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
Flush 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10525 NT_STATUS_OK
SET_FILE_INFORMATION 10525 1004 NT_STATUS_OK
Close 10525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 61440 4096 4096 NT_STATUS_OK
ReadX 10529 126976 4096 4096 NT_STATUS_OK
WriteX 10529 0 65536 65536 NT_STATUS_OK
WriteX 10529 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 61440 4096 4096 NT_STATUS_OK
ReadX 10530 126976 4096 4096 NT_STATUS_OK
ReadX 10530 192512 4096 4096 NT_STATUS_OK
ReadX 10530 258048 4096 4096 NT_STATUS_OK
WriteX 10530 0 65536 65536 NT_STATUS_OK
WriteX 10530 65536 65536 65536 NT_STATUS_OK
WriteX 10530 131072 65536 65536 NT_STATUS_OK
WriteX 10530 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 61440 4096 4096 NT_STATUS_OK
ReadX 10531 126976 4096 4096 NT_STATUS_OK
ReadX 10531 192512 4096 4096 NT_STATUS_OK
ReadX 10531 258048 4096 4096 NT_STATUS_OK
ReadX 10531 323584 4096 4096 NT_STATUS_OK
ReadX 10531 389120 4096 4096 NT_STATUS_OK
ReadX 10531 454656 4096 4096 NT_STATUS_OK
ReadX 10531 520192 4096 4096 NT_STATUS_OK
WriteX 10531 0 65536 65536 NT_STATUS_OK
WriteX 10531 65536 65536 65536 NT_STATUS_OK
WriteX 10531 131072 65536 65536 NT_STATUS_OK
WriteX 10531 196608 65536 65536 NT_STATUS_OK
WriteX 10531 262144 65536 65536 NT_STATUS_OK
WriteX 10531 327680 65536 65536 NT_STATUS_OK
WriteX 10531 393216 65536 65536 NT_STATUS_OK
WriteX 10531 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
ReadX 10532 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10533 NT_STATUS_OK
WriteX 10533 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10533 258 NT_STATUS_OK
WriteX 10533 0 53 53 NT_STATUS_OK
Close 10533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Close 10530 NT_STATUS_OK
Close 10531 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10532 8192 4096 4096 NT_STATUS_OK
ReadX 10532 12288 4096 4096 NT_STATUS_OK
WriteX 10536 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 258 NT_STATUS_OK
ReadX 10532 16384 4096 4096 NT_STATUS_OK
ReadX 10532 20480 4096 4096 NT_STATUS_OK
WriteX 10536 0 15360 15360 NT_STATUS_OK
Close 10536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10537 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10537 1004 NT_STATUS_OK
WriteX 10537 0 4096 4096 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10540 4096 4096 4096 NT_STATUS_OK
ReadX 10540 8192 4096 4096 NT_STATUS_OK
ReadX 10540 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 4096 4096 NT_STATUS_OK
ReadX 10543 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
ReadX 10544 4096 4096 4096 NT_STATUS_OK
ReadX 10544 8192 4096 4096 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10545 NT_STATUS_OK
WriteX 10545 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10545 258 NT_STATUS_OK
WriteX 10545 0 15360 15360 NT_STATUS_OK
Close 10545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10546 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10546 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10547 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10550 NT_STATUS_OK
SET_FILE_INFORMATION 10550 1004 NT_STATUS_OK
Close 10550 NT_STATUS_OK
WriteX 10546 0 4096 4096 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10551 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10553 NT_STATUS_OK
ReadX 10553 0 4096 4096 NT_STATUS_OK
ReadX 10553 4096 4096 4096 NT_STATUS_OK
ReadX 10553 8192 4096 4096 NT_STATUS_OK
ReadX 10553 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10554 NT_STATUS_OK
ReadX 10554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 53 53 NT_STATUS_OK
Close 10555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10554 4096 4096 4096 NT_STATUS_OK
ReadX 10554 8192 4096 4096 NT_STATUS_OK
ReadX 10554 12288 4096 4096 NT_STATUS_OK
WriteX 10558 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10558 258 NT_STATUS_OK
WriteX 10558 0 12006 12006 NT_STATUS_OK
Close 10558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10559 NT_STATUS_OK
ReadX 10559 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10559 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10559 1004 NT_STATUS_OK
WriteX 10559 0 4096 4096 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10562 4096 4096 4096 NT_STATUS_OK
ReadX 10562 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10565 NT_STATUS_OK
WriteX 10565 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10565 258 NT_STATUS_OK
WriteX 10565 0 11991 11991 NT_STATUS_OK
Close 10565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10566 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10566 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10567 NT_STATUS_OK
WriteX 10553 0 19054 19054 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10570 NT_STATUS_OK
SET_FILE_INFORMATION 10570 1004 NT_STATUS_OK
Close 10570 NT_STATUS_OK
WriteX 10566 0 4096 4096 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10571 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10573 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
ReadX 10573 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
WriteX 10573 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10573 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
Close 10549 NT_STATUS_OK
WriteX 10573 0 12288 12288 NT_STATUS_OK
Close 10569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10576 NT_STATUS_OK
Close 10576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 61440 61440 NT_STATUS_OK
ReadX 10580 61440 4096 4096 NT_STATUS_OK
ReadX 10580 65536 61440 61440 NT_STATUS_OK
ReadX 10580 126976 4096 4096 NT_STATUS_OK
ReadX 10580 131072 61440 61440 NT_STATUS_OK
ReadX 10580 192512 4096 4096 NT_STATUS_OK
ReadX 10580 196608 61440 61440 NT_STATUS_OK
ReadX 10580 258048 4096 4096 NT_STATUS_OK
ReadX 10580 262144 61440 61440 NT_STATUS_OK
ReadX 10580 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 61440 61440 NT_STATUS_OK
ReadX 10581 61440 4096 4096 NT_STATUS_OK
ReadX 10581 65536 61440 61440 NT_STATUS_OK
ReadX 10581 126976 4096 4096 NT_STATUS_OK
ReadX 10581 131072 61440 61440 NT_STATUS_OK
ReadX 10581 192512 4096 4096 NT_STATUS_OK
ReadX 10581 196608 61440 61440 NT_STATUS_OK
ReadX 10581 258048 4096 4096 NT_STATUS_OK
ReadX 10581 262144 61440 61440 NT_STATUS_OK
ReadX 10581 323584 4096 4096 NT_STATUS_OK
ReadX 10581 327680 61440 61440 NT_STATUS_OK
ReadX 10581 389120 4096 4096 NT_STATUS_OK
ReadX 10581 393216 61440 61440 NT_STATUS_OK
ReadX 10581 454656 4096 4096 NT_STATUS_OK
ReadX 10581 458752 61440 61440 NT_STATUS_OK
ReadX 10581 520192 4096 4096 NT_STATUS_OK
ReadX 10581 524288 61440 61440 NT_STATUS_OK
ReadX 10581 585728 4096 4096 NT_STATUS_OK
ReadX 10581 589824 61440 61440 NT_STATUS_OK
ReadX 10581 651264 4096 4096 NT_STATUS_OK
ReadX 10581 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 61440 61440 NT_STATUS_OK
ReadX 10582 61440 4096 4096 NT_STATUS_OK
ReadX 10582 65536 61440 61440 NT_STATUS_OK
ReadX 10582 126976 4096 4096 NT_STATUS_OK
ReadX 10582 131072 61440 61440 NT_STATUS_OK
ReadX 10582 192512 4096 4096 NT_STATUS_OK
ReadX 10582 196608 61440 61440 NT_STATUS_OK
ReadX 10582 258048 4096 4096 NT_STATUS_OK
ReadX 10582 262144 61440 61440 NT_STATUS_OK
ReadX 10582 323584 4096 4096 NT_STATUS_OK
ReadX 10582 327680 61440 61440 NT_STATUS_OK
ReadX 10582 389120 4096 4096 NT_STATUS_OK
ReadX 10582 393216 61440 61440 NT_STATUS_OK
ReadX 10582 454656 4096 4096 NT_STATUS_OK
ReadX 10582 458752 61440 61440 NT_STATUS_OK
ReadX 10582 520192 4096 4096 NT_STATUS_OK
ReadX 10582 524288 61440 61440 NT_STATUS_OK
ReadX 10582 585728 4096 4096 NT_STATUS_OK
ReadX 10582 589824 61440 61440 NT_STATUS_OK
ReadX 10582 651264 4096 4096 NT_STATUS_OK
ReadX 10582 655360 61440 61440 NT_STATUS_OK
ReadX 10582 716800 4096 4096 NT_STATUS_OK
ReadX 10582 720896 61440 61440 NT_STATUS_OK
ReadX 10582 782336 4096 4096 NT_STATUS_OK
ReadX 10582 786432 61440 61440 NT_STATUS_OK
ReadX 10582 847872 4096 4096 NT_STATUS_OK
ReadX 10582 851968 61440 61440 NT_STATUS_OK
ReadX 10582 913408 4096 4096 NT_STATUS_OK
ReadX 10582 917504 61440 61440 NT_STATUS_OK
ReadX 10582 978944 4096 4096 NT_STATUS_OK
ReadX 10582 983040 61440 61440 NT_STATUS_OK
ReadX 10582 1044480 4096 4096 NT_STATUS_OK
ReadX 10582 1048576 61440 61440 NT_STATUS_OK
ReadX 10582 1110016 4096 4096 NT_STATUS_OK
ReadX 10582 1114112 61440 61440 NT_STATUS_OK
ReadX 10582 1175552 4096 4096 NT_STATUS_OK
ReadX 10582 1179648 61440 61440 NT_STATUS_OK
ReadX 10582 1241088 4096 4096 NT_STATUS_OK
ReadX 10582 1245184 61440 61440 NT_STATUS_OK
ReadX 10582 1306624 4096 4096 NT_STATUS_OK
ReadX 10582 1310720 61440 61440 NT_STATUS_OK
ReadX 10582 1372160 4096 4096 NT_STATUS_OK
ReadX 10582 1376256 61440 61440 NT_STATUS_OK
ReadX 10582 1437696 4096 4096 NT_STATUS_OK
ReadX 10582 1441792 61440 61440 NT_STATUS_OK
ReadX 10582 1503232 4096 4096 NT_STATUS_OK
ReadX 10582 1507328 61440 61440 NT_STATUS_OK
ReadX 10582 1568768 4096 4096 NT_STATUS_OK
ReadX 10582 1572864 61440 61440 NT_STATUS_OK
ReadX 10582 1634304 4096 4096 NT_STATUS_OK
ReadX 10582 1638400 61440 61440 NT_STATUS_OK
ReadX 10582 1699840 4096 4096 NT_STATUS_OK
ReadX 10582 1703936 61440 61440 NT_STATUS_OK
ReadX 10582 1765376 4096 4096 NT_STATUS_OK
ReadX 10582 1769472 61440 61440 NT_STATUS_OK
ReadX 10582 1830912 4096 4096 NT_STATUS_OK
ReadX 10582 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10584 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10585 NT_STATUS_OK
ReadX 10585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10589 NT_STATUS_OK
QUERY_FILE_INFORMATION 10589 1004 NT_STATUS_OK
WriteX 10589 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10589 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10591 NT_STATUS_OK
WriteX 10591 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10591 258 NT_STATUS_OK
WriteX 10591 0 491 491 NT_STATUS_OK
Close 10591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10589 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10594 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10595 NT_STATUS_OK
WriteX 10595 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10595 258 NT_STATUS_OK
WriteX 10595 0 543 543 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10584 NT_STATUS_OK
Close 10585 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10604 NT_STATUS_OK
ReadX 10604 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10609 NT_STATUS_OK
QUERY_FILE_INFORMATION 10609 1004 NT_STATUS_OK
WriteX 10609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10609 258 NT_STATUS_OK
WriteX 10609 0 2048 2048 NT_STATUS_OK
Close 10609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10615 NT_STATUS_OK
WriteX 10615 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 258 NT_STATUS_OK
WriteX 10615 0 2048 2048 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10616 NT_STATUS_OK
ReadX 10616 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10621 NT_STATUS_OK
WriteX 10621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10621 258 NT_STATUS_OK
WriteX 10621 0 2048 2048 NT_STATUS_OK
Close 10621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 2048 2048 NT_STATUS_OK
ReadX 10600 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10616 0 4096 4096 NT_STATUS_OK
WriteX 10600 0 8192 8192 NT_STATUS_OK
WriteX 10601 0 4096 4096 NT_STATUS_OK
WriteX 10602 0 4096 4096 NT_STATUS_OK
ReadX 10616 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10626 NT_STATUS_OK
QUERY_FILE_INFORMATION 10626 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10637 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10638 NT_STATUS_OK
ReadX 10638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10640 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10646 NT_STATUS_OK
QUERY_FILE_INFORMATION 10646 1004 NT_STATUS_OK
WriteX 10646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10646 258 NT_STATUS_OK
WriteX 10646 0 2048 2048 NT_STATUS_OK
Close 10646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10647 NT_STATUS_OK
ReadX 10647 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10649 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10653 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10654 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 1004 NT_STATUS_OK
WriteX 10654 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 258 NT_STATUS_OK
WriteX 10654 0 2048 2048 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10655 NT_STATUS_OK
ReadX 10655 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10647 0 4096 4096 NT_STATUS_OK
Flush 10647 NT_STATUS_OK
WriteX 10655 0 4096 4096 NT_STATUS_OK
Flush 10655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10655 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10649 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10657 NT_STATUS_OK
WriteX 10657 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 258 NT_STATUS_OK
WriteX 10657 0 4096 4096 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10660 NT_STATUS_OK
WriteX 10660 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10660 258 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Close 10660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10661 0 4096 4096 NT_STATUS_OK
Close 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Close 10638 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10664 NT_STATUS_OK
Close 10664 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10667 NT_STATUS_OK
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10668 NT_STATUS_OK
WriteX 10668 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10668 258 NT_STATUS_OK
WriteX 10668 0 2048 2048 NT_STATUS_OK
Close 10668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10673 NT_STATUS_OK
ReadX 10673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10676 NT_STATUS_OK
ReadX 10676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10677 NT_STATUS_OK
ReadX 10677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10682 NT_STATUS_OK
ReadX 10682 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10683 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10681 NT_STATUS_OK
Close 10676 NT_STATUS_OK
Close 10677 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Close 10670 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Close 10672 NT_STATUS_OK
Close 10673 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10685 NT_STATUS_OK
QUERY_FILE_INFORMATION 10685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10696 NT_STATUS_OK
ReadX 10696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10697 NT_STATUS_OK
ReadX 10697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10705 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 1004 NT_STATUS_OK
WriteX 10705 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 258 NT_STATUS_OK
WriteX 10705 0 2048 2048 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10716 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10717 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 1004 NT_STATUS_OK
WriteX 10717 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 258 NT_STATUS_OK
WriteX 10717 0 2048 2048 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10725 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 258 NT_STATUS_OK
WriteX 10725 0 2048 2048 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10726 0 4096 4096 NT_STATUS_OK
Flush 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10726 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10708 4096 16384 16384 NT_STATUS_OK
ReadX 10688 4096 16384 16384 NT_STATUS_OK
ReadX 10720 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 2048 2048 NT_STATUS_OK
WriteX 10728 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10729 NT_STATUS_OK
QUERY_FILE_INFORMATION 10729 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10692 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10711 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Close 10694 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Close 10696 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10731 NT_STATUS_OK
QUERY_FILE_INFORMATION 10731 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10733 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10738 NT_STATUS_OK
ReadX 10738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10736 4096 16384 16384 NT_STATUS_OK
WriteX 10736 0 4096 4096 NT_STATUS_OK
WriteX 10737 0 4096 4096 NT_STATUS_OK
WriteX 10738 0 4096 4096 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10753 NT_STATUS_OK
ReadX 10753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10754 NT_STATUS_OK
ReadX 10754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 8192 8192 NT_STATUS_OK
ReadX 10742 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10756 0 4096 4096 NT_STATUS_OK
ReadX 10756 4096 4096 4096 NT_STATUS_OK
ReadX 10756 8192 4096 4096 NT_STATUS_OK
WriteX 10742 0 4096 4096 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
ReadX 10757 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10736 0 4096 4096 NT_STATUS_OK
WriteX 10737 0 4096 4096 NT_STATUS_OK
WriteX 10738 0 4096 4096 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10762 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1004 NT_STATUS_OK
WriteX 10762 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 258 NT_STATUS_OK
WriteX 10762 0 2048 2048 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10763 NT_STATUS_OK
ReadX 10763 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10763 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10765 NT_STATUS_OK
ReadX 10765 0 4096 4096 NT_STATUS_OK
ReadX 10765 4096 4096 4096 NT_STATUS_OK
WriteX 10765 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10763 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
ReadX 10767 4096 4096 4096 NT_STATUS_OK
WriteX 10767 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10768 NT_STATUS_OK
QUERY_FILE_INFORMATION 10768 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Close 10736 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10753 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Close 10752 NT_STATUS_OK
Close 10754 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10767 NT_STATUS_OK
Close 10756 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10770 0 4096 4096 NT_STATUS_OK
ReadX 10770 4096 4096 4096 NT_STATUS_OK
ReadX 10770 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10772 NT_STATUS_OK
ReadX 10772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10774 NT_STATUS_OK
ReadX 10774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
ReadX 10771 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10788 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 1004 NT_STATUS_OK
WriteX 10788 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
WriteX 10788 0 2048 2048 NT_STATUS_OK
Close 10788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10789 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10793 NT_STATUS_OK
Close 10793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10794 NT_STATUS_OK
QUERY_FILE_INFORMATION 10794 1004 NT_STATUS_OK
WriteX 10794 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10794 258 NT_STATUS_OK
WriteX 10794 0 2048 2048 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10778 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10796 NT_STATUS_OK
QUERY_FILE_INFORMATION 10796 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10782 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Close 10771 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Close 10775 NT_STATUS_OK
Close 10776 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Close 10779 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10798 NT_STATUS_OK
QUERY_FILE_INFORMATION 10798 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 61440 4096 4096 NT_STATUS_OK
ReadX 10800 126976 4096 4096 NT_STATUS_OK
WriteX 10800 0 65536 65536 NT_STATUS_OK
WriteX 10800 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 61440 4096 4096 NT_STATUS_OK
ReadX 10801 126976 4096 4096 NT_STATUS_OK
ReadX 10801 192512 4096 4096 NT_STATUS_OK
ReadX 10801 258048 4096 4096 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 65536 65536 NT_STATUS_OK
WriteX 10801 131072 65536 65536 NT_STATUS_OK
WriteX 10801 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 61440 4096 4096 NT_STATUS_OK
ReadX 10802 126976 4096 4096 NT_STATUS_OK
ReadX 10802 192512 4096 4096 NT_STATUS_OK
ReadX 10802 258048 4096 4096 NT_STATUS_OK
ReadX 10802 323584 4096 4096 NT_STATUS_OK
ReadX 10802 389120 4096 4096 NT_STATUS_OK
ReadX 10802 454656 4096 4096 NT_STATUS_OK
ReadX 10802 520192 4096 4096 NT_STATUS_OK
WriteX 10802 0 65536 65536 NT_STATUS_OK
WriteX 10802 65536 65536 65536 NT_STATUS_OK
WriteX 10802 131072 65536 65536 NT_STATUS_OK
WriteX 10802 196608 65536 65536 NT_STATUS_OK
WriteX 10802 262144 65536 65536 NT_STATUS_OK
WriteX 10802 327680 65536 65536 NT_STATUS_OK
WriteX 10802 393216 65536 65536 NT_STATUS_OK
WriteX 10802 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10803 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10803 8192 4096 4096 NT_STATUS_OK
ReadX 10803 12288 4096 4096 NT_STATUS_OK
ReadX 10803 16384 4096 4096 NT_STATUS_OK
ReadX 10803 20480 4096 4096 NT_STATUS_OK
ReadX 10803 24576 4096 4096 NT_STATUS_OK
ReadX 10803 28672 4096 4096 NT_STATUS_OK
ReadX 10803 32768 4096 4096 NT_STATUS_OK
ReadX 10803 36864 4096 4096 NT_STATUS_OK
ReadX 10803 40960 4096 4096 NT_STATUS_OK
ReadX 10803 45056 4096 4096 NT_STATUS_OK
ReadX 10803 49152 4096 4096 NT_STATUS_OK
ReadX 10803 53248 4096 4096 NT_STATUS_OK
ReadX 10803 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10803 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10804 NT_STATUS_OK
Close 10804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10800 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10806 NT_STATUS_OK
WriteX 10806 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10806 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10806 1004 NT_STATUS_OK
WriteX 10806 0 57088 57088 NT_STATUS_OK
WriteX 10806 0 4096 4096 NT_STATUS_OK
Flush 10806 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10807 NT_STATUS_OK
SET_FILE_INFORMATION 10807 1004 NT_STATUS_OK
Close 10807 NT_STATUS_OK
SET_FILE_INFORMATION 10806 1004 NT_STATUS_OK
WriteX 10806 0 4096 4096 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10810 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10811 NT_STATUS_OK
WriteX 10811 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 0 51456 51456 NT_STATUS_OK
WriteX 10811 0 4096 4096 NT_STATUS_OK
Flush 10811 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 0 4096 4096 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10815 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10820 NT_STATUS_OK
WriteX 10820 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10820 258 NT_STATUS_OK
WriteX 10820 0 53077 53077 NT_STATUS_OK
Close 10820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10821 NT_STATUS_OK
WriteX 10821 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10821 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
WriteX 10821 0 65536 65536 NT_STATUS_OK
WriteX 10821 65536 1856 1856 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Flush 10821 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
WriteX 10821 0 4096 4096 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10830 NT_STATUS_OK
WriteX 10830 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10830 258 NT_STATUS_OK
WriteX 10830 0 7983 7983 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10835 NT_STATUS_OK
WriteX 10835 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10835 258 NT_STATUS_OK
WriteX 10835 0 65536 65536 NT_STATUS_OK
WriteX 10835 65536 65536 65536 NT_STATUS_OK
WriteX 10835 131072 65536 65536 NT_STATUS_OK
WriteX 10835 196608 65536 65536 NT_STATUS_OK
WriteX 10835 262144 65536 65536 NT_STATUS_OK
WriteX 10835 327680 65536 65536 NT_STATUS_OK
WriteX 10835 393216 65536 65536 NT_STATUS_OK
WriteX 10835 458752 46731 46731 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10836 NT_STATUS_OK
WriteX 10836 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10836 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10825 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10836 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10836 1004 NT_STATUS_OK
WriteX 10836 0 65536 65536 NT_STATUS_OK
WriteX 10836 65536 22848 22848 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Flush 10836 NT_STATUS_OK
SET_FILE_INFORMATION 10836 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10836 1004 NT_STATUS_OK
WriteX 10836 0 4096 4096 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10840 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10841 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10841 1004 NT_STATUS_OK
ReadX 10841 8192 4096 4096 NT_STATUS_OK
ReadX 10841 12288 4096 4096 NT_STATUS_OK
ReadX 10841 16384 4096 4096 NT_STATUS_OK
ReadX 10841 20480 4096 4096 NT_STATUS_OK
ReadX 10841 24576 4096 4096 NT_STATUS_OK
ReadX 10841 28672 4096 4096 NT_STATUS_OK
ReadX 10841 32768 4096 4096 NT_STATUS_OK
ReadX 10841 36864 4096 4096 NT_STATUS_OK
ReadX 10841 40960 4096 4096 NT_STATUS_OK
ReadX 10841 45056 4096 4096 NT_STATUS_OK
ReadX 10841 49152 4096 4096 NT_STATUS_OK
ReadX 10841 53248 4096 4096 NT_STATUS_OK
ReadX 10841 57344 4096 4096 NT_STATUS_OK
ReadX 10841 61440 4096 4096 NT_STATUS_OK
ReadX 10841 65536 4096 4096 NT_STATUS_OK
ReadX 10841 69632 4096 4096 NT_STATUS_OK
ReadX 10841 73728 4096 4096 NT_STATUS_OK
ReadX 10841 77824 4096 4096 NT_STATUS_OK
ReadX 10841 81920 4096 4096 NT_STATUS_OK
ReadX 10841 86016 4096 4096 NT_STATUS_OK
ReadX 10841 90112 4096 4096 NT_STATUS_OK
ReadX 10841 94208 4096 4096 NT_STATUS_OK
ReadX 10841 98304 4096 4096 NT_STATUS_OK
ReadX 10841 102400 4096 4096 NT_STATUS_OK
ReadX 10841 106496 4096 4096 NT_STATUS_OK
ReadX 10841 110592 4096 4096 NT_STATUS_OK
ReadX 10841 114688 4096 4096 NT_STATUS_OK
ReadX 10841 118784 4096 4096 NT_STATUS_OK
ReadX 10841 122880 4096 4096 NT_STATUS_OK
ReadX 10841 126976 4096 4096 NT_STATUS_OK
ReadX 10841 131072 4096 4096 NT_STATUS_OK
ReadX 10841 135168 4096 4096 NT_STATUS_OK
ReadX 10841 139264 4096 4096 NT_STATUS_OK
ReadX 10841 143360 4096 4096 NT_STATUS_OK
ReadX 10841 147456 4096 4096 NT_STATUS_OK
ReadX 10841 151552 4096 4096 NT_STATUS_OK
ReadX 10841 155648 4096 4096 NT_STATUS_OK
ReadX 10841 159744 4096 4096 NT_STATUS_OK
ReadX 10841 163840 4096 4096 NT_STATUS_OK
ReadX 10841 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10841 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10844 NT_STATUS_OK
WriteX 10844 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10844 258 NT_STATUS_OK
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10845 NT_STATUS_OK
SET_FILE_INFORMATION 10845 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
WriteX 10844 0 42388 42388 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10848 NT_STATUS_OK
ReadX 10848 0 4096 4096 NT_STATUS_OK
ReadX 10848 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10849 NT_STATUS_OK
WriteX 10849 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10849 258 NT_STATUS_OK
SET_FILE_INFORMATION 10849 1004 NT_STATUS_OK
WriteX 10849 0 42652 42652 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
ReadX 10853 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10858 NT_STATUS_OK
WriteX 10858 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10858 258 NT_STATUS_OK
WriteX 10858 0 65536 65536 NT_STATUS_OK
WriteX 10858 65536 49 49 NT_STATUS_OK
Close 10858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 61440 61440 NT_STATUS_OK
ReadX 10859 61440 4096 4096 NT_STATUS_OK
ReadX 10859 65536 61440 61440 NT_STATUS_OK
ReadX 10859 126976 4096 4096 NT_STATUS_OK
ReadX 10859 131072 61440 61440 NT_STATUS_OK
ReadX 10859 192512 4096 4096 NT_STATUS_OK
ReadX 10859 196608 61440 61440 NT_STATUS_OK
ReadX 10859 258048 4096 4096 NT_STATUS_OK
ReadX 10859 262144 61440 61440 NT_STATUS_OK
ReadX 10859 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10860 NT_STATUS_OK
ReadX 10860 0 61440 61440 NT_STATUS_OK
ReadX 10860 61440 4096 4096 NT_STATUS_OK
ReadX 10860 65536 61440 61440 NT_STATUS_OK
ReadX 10860 126976 4096 4096 NT_STATUS_OK
ReadX 10860 131072 61440 61440 NT_STATUS_OK
ReadX 10860 192512 4096 4096 NT_STATUS_OK
ReadX 10860 196608 61440 61440 NT_STATUS_OK
ReadX 10860 258048 4096 4096 NT_STATUS_OK
ReadX 10860 262144 61440 61440 NT_STATUS_OK
ReadX 10860 323584 4096 4096 NT_STATUS_OK
ReadX 10860 327680 61440 61440 NT_STATUS_OK
ReadX 10860 389120 4096 4096 NT_STATUS_OK
ReadX 10860 393216 61440 61440 NT_STATUS_OK
ReadX 10860 454656 4096 4096 NT_STATUS_OK
ReadX 10860 458752 61440 61440 NT_STATUS_OK
ReadX 10860 520192 4096 4096 NT_STATUS_OK
ReadX 10860 524288 61440 61440 NT_STATUS_OK
ReadX 10860 585728 4096 4096 NT_STATUS_OK
ReadX 10860 589824 61440 61440 NT_STATUS_OK
ReadX 10860 651264 4096 4096 NT_STATUS_OK
ReadX 10860 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10861 NT_STATUS_OK
ReadX 10861 0 61440 61440 NT_STATUS_OK
ReadX 10861 61440 4096 4096 NT_STATUS_OK
ReadX 10861 65536 61440 61440 NT_STATUS_OK
ReadX 10861 126976 4096 4096 NT_STATUS_OK
ReadX 10861 131072 61440 61440 NT_STATUS_OK
ReadX 10861 192512 4096 4096 NT_STATUS_OK
ReadX 10861 196608 61440 61440 NT_STATUS_OK
ReadX 10861 258048 4096 4096 NT_STATUS_OK
ReadX 10861 262144 61440 61440 NT_STATUS_OK
ReadX 10861 323584 4096 4096 NT_STATUS_OK
ReadX 10861 327680 61440 61440 NT_STATUS_OK
ReadX 10861 389120 4096 4096 NT_STATUS_OK
ReadX 10861 393216 61440 61440 NT_STATUS_OK
ReadX 10861 454656 4096 4096 NT_STATUS_OK
ReadX 10861 458752 61440 61440 NT_STATUS_OK
ReadX 10861 520192 4096 4096 NT_STATUS_OK
ReadX 10861 524288 61440 61440 NT_STATUS_OK
ReadX 10861 585728 4096 4096 NT_STATUS_OK
ReadX 10861 589824 61440 61440 NT_STATUS_OK
ReadX 10861 651264 4096 4096 NT_STATUS_OK
ReadX 10861 655360 61440 61440 NT_STATUS_OK
ReadX 10861 716800 4096 4096 NT_STATUS_OK
ReadX 10861 720896 61440 61440 NT_STATUS_OK
ReadX 10861 782336 4096 4096 NT_STATUS_OK
ReadX 10861 786432 61440 61440 NT_STATUS_OK
ReadX 10861 847872 4096 4096 NT_STATUS_OK
ReadX 10861 851968 61440 61440 NT_STATUS_OK
ReadX 10861 913408 4096 4096 NT_STATUS_OK
ReadX 10861 917504 61440 61440 NT_STATUS_OK
ReadX 10861 978944 4096 4096 NT_STATUS_OK
ReadX 10861 983040 61440 61440 NT_STATUS_OK
ReadX 10861 1044480 4096 4096 NT_STATUS_OK
ReadX 10861 1048576 61440 61440 NT_STATUS_OK
ReadX 10861 1110016 4096 4096 NT_STATUS_OK
ReadX 10861 1114112 61440 61440 NT_STATUS_OK
ReadX 10861 1175552 4096 4096 NT_STATUS_OK
ReadX 10861 1179648 61440 61440 NT_STATUS_OK
ReadX 10861 1241088 4096 4096 NT_STATUS_OK
ReadX 10861 1245184 61440 61440 NT_STATUS_OK
ReadX 10861 1306624 4096 4096 NT_STATUS_OK
ReadX 10861 1310720 61440 61440 NT_STATUS_OK
ReadX 10861 1372160 4096 4096 NT_STATUS_OK
ReadX 10861 1376256 61440 61440 NT_STATUS_OK
ReadX 10861 1437696 4096 4096 NT_STATUS_OK
ReadX 10861 1441792 61440 61440 NT_STATUS_OK
ReadX 10861 1503232 4096 4096 NT_STATUS_OK
ReadX 10861 1507328 61440 61440 NT_STATUS_OK
ReadX 10861 1568768 4096 4096 NT_STATUS_OK
ReadX 10861 1572864 61440 61440 NT_STATUS_OK
ReadX 10861 1634304 4096 4096 NT_STATUS_OK
ReadX 10861 1638400 61440 61440 NT_STATUS_OK
ReadX 10861 1699840 4096 4096 NT_STATUS_OK
ReadX 10861 1703936 61440 61440 NT_STATUS_OK
ReadX 10861 1765376 4096 4096 NT_STATUS_OK
ReadX 10861 1769472 61440 61440 NT_STATUS_OK
ReadX 10861 1830912 4096 4096 NT_STATUS_OK
ReadX 10861 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10863 NT_STATUS_OK
QUERY_FILE_INFORMATION 10863 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10863 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10863 1005 NT_STATUS_OK
ReadX 10863 2156 24 24 NT_STATUS_OK
ReadX 10863 2139 276 276 NT_STATUS_OK
ReadX 10863 2136 14 14 NT_STATUS_OK
ReadX 10863 2136 7 7 NT_STATUS_OK
ReadX 10863 2138 12 12 NT_STATUS_OK
ReadX 10863 2137 8 8 NT_STATUS_OK
ReadX 10863 2135 15 15 NT_STATUS_OK
ReadX 10863 0 16 16 NT_STATUS_OK
ReadX 10863 16 2048 2048 NT_STATUS_OK
ReadX 10863 2064 2048 2048 NT_STATUS_OK
ReadX 10863 257 2048 2048 NT_STATUS_OK
ReadX 10863 385 2048 2048 NT_STATUS_OK
ReadX 10863 513 2048 2048 NT_STATUS_OK
ReadX 10863 641 2048 2048 NT_STATUS_OK
ReadX 10863 769 2048 2048 NT_STATUS_OK
ReadX 10863 897 2048 2048 NT_STATUS_OK
ReadX 10863 1025 2048 2048 NT_STATUS_OK
ReadX 10863 1153 2048 2048 NT_STATUS_OK
ReadX 10863 1281 2048 2048 NT_STATUS_OK
ReadX 10863 1409 2048 2048 NT_STATUS_OK
ReadX 10863 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10860 NT_STATUS_OK
Close 10861 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10868 NT_STATUS_OK
WriteX 10868 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10868 258 NT_STATUS_OK
WriteX 10868 0 10575 10575 NT_STATUS_OK
Flush 10868 NT_STATUS_OK
Close 10868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10871 NT_STATUS_OK
ReadX 10871 0 4096 4096 NT_STATUS_OK
Close 10863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10873 NT_STATUS_OK
LockX 10873 2147483538 1 NT_STATUS_OK
UnlockX 10873 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 1005 NT_STATUS_OK
ReadX 10873 0 512 512 NT_STATUS_OK
ReadX 10873 512 512 512 NT_STATUS_OK
ReadX 10873 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 1004 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10874 NT_STATUS_OK
QUERY_FILE_INFORMATION 10874 1005 NT_STATUS_OK
ReadX 10874 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10875 NT_STATUS_OK
LockX 10875 2147483538 1 NT_STATUS_OK
UnlockX 10875 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10875 1005 NT_STATUS_OK
ReadX 10875 0 512 512 NT_STATUS_OK
ReadX 10875 512 512 512 NT_STATUS_OK
ReadX 10875 1024 512 512 NT_STATUS_OK
ReadX 10875 288 20 20 NT_STATUS_OK
ReadX 10875 308 2084 2084 NT_STATUS_OK
ReadX 10875 388 2084 2084 NT_STATUS_OK
ReadX 10875 388 2084 2084 NT_STATUS_OK
ReadX 10862 2157 1386 1386 NT_STATUS_OK
ReadX 10875 2472 399 399 NT_STATUS_OK
ReadX 10875 3072 1536 1536 NT_STATUS_OK
ReadX 10875 544 149 149 NT_STATUS_OK
ReadX 10875 693 485 485 NT_STATUS_OK
Close 10875 NT_STATUS_OK
ReadX 10862 2157 4096 4096 NT_STATUS_OK
ReadX 10862 6253 4096 4096 NT_STATUS_OK
ReadX 10862 10349 4096 4096 NT_STATUS_OK
ReadX 10862 14445 4096 4096 NT_STATUS_OK
ReadX 10862 18541 4096 4096 NT_STATUS_OK
ReadX 10862 22637 256 256 NT_STATUS_OK
ReadX 10862 22893 4096 4096 NT_STATUS_OK
ReadX 10862 26989 4096 4096 NT_STATUS_OK
ReadX 10862 31085 4096 4096 NT_STATUS_OK
ReadX 10862 35181 4096 4096 NT_STATUS_OK
ReadX 10862 39277 4096 4096 NT_STATUS_OK
ReadX 10862 43373 4096 4096 NT_STATUS_OK
ReadX 10862 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10862 2157 1024 1024 NT_STATUS_OK
ReadX 10862 1667 4688 4688 NT_STATUS_OK
ReadX 10862 6355 3516 3516 NT_STATUS_OK
ReadX 10862 9871 16384 16384 NT_STATUS_OK
ReadX 10862 26255 3771 3771 NT_STATUS_OK
ReadX 10862 30026 2048 2048 NT_STATUS_OK
ReadX 10862 32074 1024 1024 NT_STATUS_OK
ReadX 10862 33098 6652 6652 NT_STATUS_OK
ReadX 10862 39750 16384 16384 NT_STATUS_OK
ReadX 10862 56134 10496 10496 NT_STATUS_OK
ReadX 10862 66630 1784 1784 NT_STATUS_OK
ReadX 10862 68414 90 90 NT_STATUS_OK
ReadX 10862 68504 273 273 NT_STATUS_OK
ReadX 10862 68777 1600 1600 NT_STATUS_OK
ReadX 10862 70377 640 640 NT_STATUS_OK
ReadX 10862 71017 1280 1280 NT_STATUS_OK
ReadX 10862 72297 8464 8464 NT_STATUS_OK
ReadX 10862 80761 158 158 NT_STATUS_OK
ReadX 10862 80919 912 912 NT_STATUS_OK
ReadX 10862 81831 1980 1980 NT_STATUS_OK
ReadX 10862 83811 2256 2256 NT_STATUS_OK
ReadX 10862 86067 400 400 NT_STATUS_OK
ReadX 10862 86467 252 252 NT_STATUS_OK
ReadX 10862 86719 42 42 NT_STATUS_OK
ReadX 10862 86761 725 725 NT_STATUS_OK
ReadX 10862 2009 512 512 NT_STATUS_OK
ReadX 10862 3895 9 9 NT_STATUS_OK
ReadX 10862 3781 46 46 NT_STATUS_OK
ReadX 10862 4059 92 92 NT_STATUS_OK
ReadX 10862 3781 92 92 NT_STATUS_OK
ReadX 10862 3986 184 184 NT_STATUS_OK
ReadX 10862 3987 16384 16384 NT_STATUS_OK
ReadX 10862 3902 16384 16384 NT_STATUS_OK
ReadX 10862 3781 10240 10240 NT_STATUS_OK
ReadX 10862 3821 16384 16384 NT_STATUS_OK
ReadX 10862 3891 935 935 NT_STATUS_OK
ReadX 10862 4060 10240 10240 NT_STATUS_OK
ReadX 10862 4059 184 184 NT_STATUS_OK
ReadX 10862 256 184 184 NT_STATUS_OK
ReadX 10862 256 1026 1026 NT_STATUS_OK
ReadX 10862 3901 326 326 NT_STATUS_OK
ReadX 10862 3899 652 652 NT_STATUS_OK
ReadX 10862 256 2 2 NT_STATUS_OK
ReadX 10862 258 4948 4948 NT_STATUS_OK
Close 10862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10877 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10880 NT_STATUS_OK
WriteX 10880 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10880 258 NT_STATUS_OK
WriteX 10880 0 65536 65536 NT_STATUS_OK
WriteX 10880 65536 65536 65536 NT_STATUS_OK
WriteX 10880 131072 65536 65536 NT_STATUS_OK
WriteX 10880 196608 65536 65536 NT_STATUS_OK
WriteX 10880 262144 65536 65536 NT_STATUS_OK
WriteX 10880 327680 65536 65536 NT_STATUS_OK
WriteX 10880 393216 65536 65536 NT_STATUS_OK
WriteX 10880 458752 65536 65536 NT_STATUS_OK
WriteX 10880 524288 65536 65536 NT_STATUS_OK
WriteX 10880 589824 35257 35257 NT_STATUS_OK
Close 10880 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10882 NT_STATUS_OK
Close 10882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
WriteX 10885 0 65536 65536 NT_STATUS_OK
WriteX 10885 65536 65536 65536 NT_STATUS_OK
WriteX 10885 131072 65536 65536 NT_STATUS_OK
WriteX 10885 196608 65536 65536 NT_STATUS_OK
WriteX 10885 262144 65536 65536 NT_STATUS_OK
WriteX 10885 327680 65536 65536 NT_STATUS_OK
WriteX 10885 393216 65536 65536 NT_STATUS_OK
WriteX 10885 458752 65536 65536 NT_STATUS_OK
WriteX 10885 524288 65536 65536 NT_STATUS_OK
WriteX 10885 589824 57598 57598 NT_STATUS_OK
Close 10885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10887 NT_STATUS_OK
WriteX 10887 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10887 258 NT_STATUS_OK
WriteX 10887 0 12543 12543 NT_STATUS_OK
Flush 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10893 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 1005 NT_STATUS_OK
ReadX 10893 1938 24 24 NT_STATUS_OK
ReadX 10893 1920 276 276 NT_STATUS_OK
ReadX 10893 1918 14 14 NT_STATUS_OK
ReadX 10893 1918 7 7 NT_STATUS_OK
ReadX 10893 1919 12 12 NT_STATUS_OK
ReadX 10893 1919 8 8 NT_STATUS_OK
ReadX 10893 1917 15 15 NT_STATUS_OK
ReadX 10893 0 16 16 NT_STATUS_OK
ReadX 10893 16 2048 2048 NT_STATUS_OK
ReadX 10893 2064 2048 2048 NT_STATUS_OK
ReadX 10893 257 2048 2048 NT_STATUS_OK
ReadX 10893 385 2048 2048 NT_STATUS_OK
ReadX 10893 513 2048 2048 NT_STATUS_OK
ReadX 10893 641 2048 2048 NT_STATUS_OK
ReadX 10893 769 2048 2048 NT_STATUS_OK
ReadX 10893 897 2048 2048 NT_STATUS_OK
ReadX 10893 1025 2048 2048 NT_STATUS_OK
ReadX 10893 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10898 NT_STATUS_OK
WriteX 10898 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
WriteX 10898 0 11588 11588 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10899 NT_STATUS_OK
Close 10899 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10903 NT_STATUS_OK
WriteX 10903 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10903 258 NT_STATUS_OK
WriteX 10903 0 11615 11615 NT_STATUS_OK
Flush 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10905 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10909 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10912 NT_STATUS_OK
WriteX 10912 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 258 NT_STATUS_OK
WriteX 10912 0 65536 65536 NT_STATUS_OK
WriteX 10912 65536 16050 16050 NT_STATUS_OK
Close 10912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 1939 64 64 NT_STATUS_OK
ReadX 10892 128 248 248 NT_STATUS_OK
ReadX 10892 128 568 568 NT_STATUS_OK
ReadX 10892 3872 1536 1536 NT_STATUS_OK
ReadX 10892 3456 2560 2560 NT_STATUS_OK
ReadX 10892 3136 512 512 NT_STATUS_OK
ReadX 10892 2880 4096 4096 NT_STATUS_OK
ReadX 10892 3264 3072 3072 NT_STATUS_OK
ReadX 10892 320 4096 4096 NT_STATUS_OK
ReadX 10892 1024 4096 4096 NT_STATUS_OK
ReadX 10892 3616 4096 4096 NT_STATUS_OK
ReadX 10892 1939 64 64 NT_STATUS_OK
ReadX 10892 128 248 248 NT_STATUS_OK
ReadX 10892 128 608 608 NT_STATUS_OK
ReadX 10892 2858 1024 1024 NT_STATUS_OK
ReadX 10892 2810 4096 4096 NT_STATUS_OK
ReadX 10892 2826 4096 4096 NT_STATUS_OK
ReadX 10892 2580 2048 2048 NT_STATUS_OK
ReadX 10892 2800 2560 2560 NT_STATUS_OK
ReadX 10892 2100 4096 4096 NT_STATUS_OK
ReadX 10892 2084 4096 4096 NT_STATUS_OK
ReadX 10892 868 4096 4096 NT_STATUS_OK
ReadX 10892 2324 4096 4096 NT_STATUS_OK
ReadX 10892 884 4096 4096 NT_STATUS_OK
ReadX 10892 2604 1024 1024 NT_STATUS_OK
ReadX 10892 580 4096 4096 NT_STATUS_OK
ReadX 10892 596 4096 4096 NT_STATUS_OK
ReadX 10892 2752 4096 4096 NT_STATUS_OK
ReadX 10892 2842 1024 1024 NT_STATUS_OK
ReadX 10892 660 4096 4096 NT_STATUS_OK
ReadX 10892 2720 4096 4096 NT_STATUS_OK
ReadX 10892 2736 4096 4096 NT_STATUS_OK
ReadX 10892 628 4096 4096 NT_STATUS_OK
ReadX 10892 2704 4096 4096 NT_STATUS_OK
ReadX 10892 1556 4096 4096 NT_STATUS_OK
ReadX 10892 576 4096 4096 NT_STATUS_OK
ReadX 10892 3168 1536 1536 NT_STATUS_OK
ReadX 10892 832 4096 4096 NT_STATUS_OK
ReadX 10892 1088 4096 4096 NT_STATUS_OK
ReadX 10892 1344 4096 4096 NT_STATUS_OK
ReadX 10892 1600 4096 4096 NT_STATUS_OK
ReadX 10892 1856 4096 4096 NT_STATUS_OK
ReadX 10892 2112 4096 4096 NT_STATUS_OK
ReadX 10892 1892 4096 4096 NT_STATUS_OK
ReadX 10892 820 4096 4096 NT_STATUS_OK
ReadX 10892 788 4096 4096 NT_STATUS_OK
ReadX 10892 1604 4096 4096 NT_STATUS_OK
ReadX 10892 3648 4096 4096 NT_STATUS_OK
ReadX 10892 2608 4096 4096 NT_STATUS_OK
ReadX 10892 548 4096 4096 NT_STATUS_OK
ReadX 10892 740 4096 4096 NT_STATUS_OK
ReadX 10892 1344 4096 4096 NT_STATUS_OK
ReadX 10892 3392 4096 4096 NT_STATUS_OK
ReadX 10892 3904 4096 4096 NT_STATUS_OK
ReadX 10892 644 4096 4096 NT_STATUS_OK
ReadX 10892 676 4096 4096 NT_STATUS_OK
ReadX 10892 2688 4096 4096 NT_STATUS_OK
ReadX 10892 320 4096 4096 NT_STATUS_OK
ReadX 10892 900 4096 4096 NT_STATUS_OK
ReadX 10892 1908 4096 4096 NT_STATUS_OK
ReadX 10892 852 4096 4096 NT_STATUS_OK
ReadX 10892 724 4096 4096 NT_STATUS_OK
ReadX 10892 2292 4096 4096 NT_STATUS_OK
ReadX 10892 612 4096 4096 NT_STATUS_OK
ReadX 10892 388 4096 4096 NT_STATUS_OK
ReadX 10892 2368 4096 4096 NT_STATUS_OK
ReadX 10892 2624 4096 4096 NT_STATUS_OK
ReadX 10892 500 4096 4096 NT_STATUS_OK
ReadX 10892 356 4096 4096 NT_STATUS_OK
ReadX 10892 1024 4096 4096 NT_STATUS_OK
ReadX 10892 576 4096 4096 NT_STATUS_OK
ReadX 10892 340 4096 4096 NT_STATUS_OK
ReadX 10892 420 4096 4096 NT_STATUS_OK
ReadX 10892 1600 4096 4096 NT_STATUS_OK
ReadX 10892 404 4096 4096 NT_STATUS_OK
ReadX 10892 1428 4096 4096 NT_STATUS_OK
ReadX 10892 2656 4096 4096 NT_STATUS_OK
ReadX 10892 2624 4096 4096 NT_STATUS_OK
ReadX 10892 452 4096 4096 NT_STATUS_OK
ReadX 10892 692 4096 4096 NT_STATUS_OK
ReadX 10892 564 4096 4096 NT_STATUS_OK
ReadX 10892 372 4096 4096 NT_STATUS_OK
ReadX 10892 468 4096 4096 NT_STATUS_OK
ReadX 10892 484 4096 4096 NT_STATUS_OK
ReadX 10892 1088 4096 4096 NT_STATUS_OK
ReadX 10892 1924 4096 4096 NT_STATUS_OK
ReadX 10892 2768 4096 4096 NT_STATUS_OK
ReadX 10892 832 4096 4096 NT_STATUS_OK
ReadX 10892 836 4096 4096 NT_STATUS_OK
ReadX 10892 1856 4096 4096 NT_STATUS_OK
ReadX 10892 2640 4096 4096 NT_STATUS_OK
ReadX 10892 436 4096 4096 NT_STATUS_OK
ReadX 10892 1828 4096 4096 NT_STATUS_OK
ReadX 10892 804 4096 4096 NT_STATUS_OK
ReadX 10892 1860 4096 4096 NT_STATUS_OK
ReadX 10892 1812 4096 4096 NT_STATUS_OK
ReadX 10892 756 4096 4096 NT_STATUS_OK
ReadX 10892 1636 4096 4096 NT_STATUS_OK
ReadX 10892 772 4096 4096 NT_STATUS_OK
ReadX 10892 2036 4096 4096 NT_STATUS_OK
ReadX 10892 1220 4096 4096 NT_STATUS_OK
ReadX 10892 1652 4096 4096 NT_STATUS_OK
ReadX 10892 2588 4096 4096 NT_STATUS_OK
ReadX 10892 916 4096 4096 NT_STATUS_OK
ReadX 10892 260 4096 4096 NT_STATUS_OK
ReadX 10892 932 4096 4096 NT_STATUS_OK
ReadX 10892 2624 4096 4096 NT_STATUS_OK
ReadX 10892 308 4096 4096 NT_STATUS_OK
ReadX 10892 292 4096 4096 NT_STATUS_OK
ReadX 10892 1140 4096 4096 NT_STATUS_OK
ReadX 10892 276 4096 4096 NT_STATUS_OK
ReadX 10892 2020 4096 4096 NT_STATUS_OK
ReadX 10892 2880 4096 4096 NT_STATUS_OK
ReadX 10892 516 4096 4096 NT_STATUS_OK
ReadX 10892 1844 4096 4096 NT_STATUS_OK
ReadX 10892 1124 4096 4096 NT_STATUS_OK
ReadX 10892 3136 4096 4096 NT_STATUS_OK
ReadX 10892 324 4096 4096 NT_STATUS_OK
ReadX 10892 1156 4096 4096 NT_STATUS_OK
ReadX 10892 1172 4096 4096 NT_STATUS_OK
ReadX 10892 2112 4096 4096 NT_STATUS_OK
ReadX 10892 2368 4096 4096 NT_STATUS_OK
ReadX 10892 964 4096 4096 NT_STATUS_OK
ReadX 10892 980 4096 4096 NT_STATUS_OK
ReadX 10892 1012 4096 4096 NT_STATUS_OK
ReadX 10892 532 4096 4096 NT_STATUS_OK
ReadX 10892 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10892 1620 4096 4096 NT_STATUS_OK
ReadX 10892 1604 4096 4096 NT_STATUS_OK
ReadX 10892 2116 4096 4096 NT_STATUS_OK
ReadX 10892 2132 4096 4096 NT_STATUS_OK
ReadX 10892 2148 4096 4096 NT_STATUS_OK
ReadX 10892 2276 4096 4096 NT_STATUS_OK
ReadX 10892 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10917 NT_STATUS_OK
QUERY_FILE_INFORMATION 10872 1004 NT_STATUS_OK
Close 10872 NT_STATUS_OK
WriteX 10917 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10874 1004 NT_STATUS_OK
Close 10874 NT_STATUS_OK
WriteX 10917 0 65536 65536 NT_STATUS_OK
WriteX 10917 65536 64850 64850 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10919 NT_STATUS_OK
WriteX 10919 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10919 258 NT_STATUS_OK
ReadX 10892 2068 4096 4096 NT_STATUS_OK
ReadX 10892 1588 4096 4096 NT_STATUS_OK
ReadX 10892 1572 4096 4096 NT_STATUS_OK
WriteX 10919 0 18630 18630 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
Close 10919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10921 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10892 612 4096 4096 NT_STATUS_OK
ReadX 10892 564 4096 4096 NT_STATUS_OK
ReadX 10892 1876 4096 4096 NT_STATUS_OK
ReadX 10892 628 4096 4096 NT_STATUS_OK
ReadX 10892 740 4096 4096 NT_STATUS_OK
ReadX 10892 724 4096 4096 NT_STATUS_OK
ReadX 10892 644 4096 4096 NT_STATUS_OK
ReadX 10892 2324 4096 4096 NT_STATUS_OK
ReadX 10892 660 4096 4096 NT_STATUS_OK
ReadX 10892 852 4096 4096 NT_STATUS_OK
ReadX 10892 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10892 2368 4096 4096 NT_STATUS_OK
ReadX 10892 1024 4096 4096 NT_STATUS_OK
ReadX 10892 320 4096 4096 NT_STATUS_OK
ReadX 10892 580 4096 4096 NT_STATUS_OK
ReadX 10892 3136 512 512 NT_STATUS_OK
ReadX 10892 2880 4096 4096 NT_STATUS_OK
Close 10892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 61440 4096 4096 NT_STATUS_OK
ReadX 10924 126976 4096 4096 NT_STATUS_OK
WriteX 10924 0 65536 65536 NT_STATUS_OK
WriteX 10924 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 61440 4096 4096 NT_STATUS_OK
ReadX 10925 126976 4096 4096 NT_STATUS_OK
ReadX 10925 192512 4096 4096 NT_STATUS_OK
ReadX 10925 258048 4096 4096 NT_STATUS_OK
WriteX 10925 0 65536 65536 NT_STATUS_OK
WriteX 10925 65536 65536 65536 NT_STATUS_OK
WriteX 10925 131072 65536 65536 NT_STATUS_OK
WriteX 10925 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 61440 4096 4096 NT_STATUS_OK
ReadX 10926 126976 4096 4096 NT_STATUS_OK
ReadX 10926 192512 4096 4096 NT_STATUS_OK
ReadX 10926 258048 4096 4096 NT_STATUS_OK
ReadX 10926 323584 4096 4096 NT_STATUS_OK
ReadX 10926 389120 4096 4096 NT_STATUS_OK
ReadX 10926 454656 4096 4096 NT_STATUS_OK
ReadX 10926 520192 4096 4096 NT_STATUS_OK
WriteX 10926 0 65536 65536 NT_STATUS_OK
WriteX 10926 65536 65536 65536 NT_STATUS_OK
WriteX 10926 131072 65536 65536 NT_STATUS_OK
WriteX 10926 196608 65536 65536 NT_STATUS_OK
WriteX 10926 262144 65536 65536 NT_STATUS_OK
WriteX 10926 327680 65536 65536 NT_STATUS_OK
WriteX 10926 393216 65536 65536 NT_STATUS_OK
WriteX 10926 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10928 NT_STATUS_OK
Close 10928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10929 NT_STATUS_OK
WriteX 10929 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10927 0 8192 8192 NT_STATUS_OK
Flush 10927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10927 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10927 0 8192 8192 NT_STATUS_OK
Flush 10927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10927 0 8192 8192 NT_STATUS_OK
Flush 10927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10927 0 8192 8192 NT_STATUS_OK
Flush 10927 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10934 NT_STATUS_OK
WriteX 10934 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 258 NT_STATUS_OK
WriteX 10934 0 62591 62591 NT_STATUS_OK
Close 10934 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10936 NT_STATUS_OK
Close 10936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10939 NT_STATUS_OK
WriteX 10939 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10939 258 NT_STATUS_OK
WriteX 10939 0 10845 10845 NT_STATUS_OK
Close 10939 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10944 NT_STATUS_OK
WriteX 10944 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10944 258 NT_STATUS_OK
WriteX 10944 0 30118 30118 NT_STATUS_OK
Close 10944 NT_STATUS_OK
WriteX 10927 0 4096 4096 NT_STATUS_OK
WriteX 10929 0 64 64 NT_STATUS_OK
Close 10929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 61440 61440 NT_STATUS_OK
ReadX 10946 61440 4096 4096 NT_STATUS_OK
ReadX 10946 65536 61440 61440 NT_STATUS_OK
ReadX 10946 126976 4096 4096 NT_STATUS_OK
ReadX 10946 131072 61440 61440 NT_STATUS_OK
ReadX 10946 192512 4096 4096 NT_STATUS_OK
ReadX 10946 196608 61440 61440 NT_STATUS_OK
ReadX 10946 258048 4096 4096 NT_STATUS_OK
ReadX 10946 262144 61440 61440 NT_STATUS_OK
ReadX 10946 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 61440 61440 NT_STATUS_OK
ReadX 10947 61440 4096 4096 NT_STATUS_OK
ReadX 10947 65536 61440 61440 NT_STATUS_OK
ReadX 10947 126976 4096 4096 NT_STATUS_OK
ReadX 10947 131072 61440 61440 NT_STATUS_OK
ReadX 10947 192512 4096 4096 NT_STATUS_OK
ReadX 10947 196608 61440 61440 NT_STATUS_OK
ReadX 10947 258048 4096 4096 NT_STATUS_OK
ReadX 10947 262144 61440 61440 NT_STATUS_OK
ReadX 10947 323584 4096 4096 NT_STATUS_OK
ReadX 10947 327680 61440 61440 NT_STATUS_OK
ReadX 10947 389120 4096 4096 NT_STATUS_OK
ReadX 10947 393216 61440 61440 NT_STATUS_OK
ReadX 10947 454656 4096 4096 NT_STATUS_OK
ReadX 10947 458752 61440 61440 NT_STATUS_OK
ReadX 10947 520192 4096 4096 NT_STATUS_OK
ReadX 10947 524288 61440 61440 NT_STATUS_OK
ReadX 10947 585728 4096 4096 NT_STATUS_OK
ReadX 10947 589824 61440 61440 NT_STATUS_OK
ReadX 10947 651264 4096 4096 NT_STATUS_OK
ReadX 10947 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 61440 61440 NT_STATUS_OK
ReadX 10948 61440 4096 4096 NT_STATUS_OK
ReadX 10948 65536 61440 61440 NT_STATUS_OK
ReadX 10948 126976 4096 4096 NT_STATUS_OK
ReadX 10948 131072 61440 61440 NT_STATUS_OK
ReadX 10948 192512 4096 4096 NT_STATUS_OK
ReadX 10948 196608 61440 61440 NT_STATUS_OK
ReadX 10948 258048 4096 4096 NT_STATUS_OK
ReadX 10948 262144 61440 61440 NT_STATUS_OK
ReadX 10948 323584 4096 4096 NT_STATUS_OK
ReadX 10948 327680 61440 61440 NT_STATUS_OK
ReadX 10948 389120 4096 4096 NT_STATUS_OK
ReadX 10948 393216 61440 61440 NT_STATUS_OK
ReadX 10948 454656 4096 4096 NT_STATUS_OK
ReadX 10948 458752 61440 61440 NT_STATUS_OK
ReadX 10948 520192 4096 4096 NT_STATUS_OK
ReadX 10948 524288 61440 61440 NT_STATUS_OK
ReadX 10948 585728 4096 4096 NT_STATUS_OK
ReadX 10948 589824 61440 61440 NT_STATUS_OK
ReadX 10948 651264 4096 4096 NT_STATUS_OK
ReadX 10948 655360 61440 61440 NT_STATUS_OK
ReadX 10948 716800 4096 4096 NT_STATUS_OK
ReadX 10948 720896 61440 61440 NT_STATUS_OK
ReadX 10948 782336 4096 4096 NT_STATUS_OK
ReadX 10948 786432 61440 61440 NT_STATUS_OK
ReadX 10948 847872 4096 4096 NT_STATUS_OK
ReadX 10948 851968 61440 61440 NT_STATUS_OK
ReadX 10948 913408 4096 4096 NT_STATUS_OK
ReadX 10948 917504 61440 61440 NT_STATUS_OK
ReadX 10948 978944 4096 4096 NT_STATUS_OK
ReadX 10948 983040 61440 61440 NT_STATUS_OK
ReadX 10948 1044480 4096 4096 NT_STATUS_OK
ReadX 10948 1048576 61440 61440 NT_STATUS_OK
ReadX 10948 1110016 4096 4096 NT_STATUS_OK
ReadX 10948 1114112 61440 61440 NT_STATUS_OK
ReadX 10948 1175552 4096 4096 NT_STATUS_OK
ReadX 10948 1179648 61440 61440 NT_STATUS_OK
ReadX 10948 1241088 4096 4096 NT_STATUS_OK
ReadX 10948 1245184 61440 61440 NT_STATUS_OK
ReadX 10948 1306624 4096 4096 NT_STATUS_OK
ReadX 10948 1310720 61440 61440 NT_STATUS_OK
ReadX 10948 1372160 4096 4096 NT_STATUS_OK
ReadX 10948 1376256 61440 61440 NT_STATUS_OK
ReadX 10948 1437696 4096 4096 NT_STATUS_OK
ReadX 10948 1441792 61440 61440 NT_STATUS_OK
ReadX 10948 1503232 4096 4096 NT_STATUS_OK
ReadX 10948 1507328 61440 61440 NT_STATUS_OK
ReadX 10948 1568768 4096 4096 NT_STATUS_OK
ReadX 10948 1572864 61440 61440 NT_STATUS_OK
ReadX 10948 1634304 4096 4096 NT_STATUS_OK
ReadX 10948 1638400 61440 61440 NT_STATUS_OK
ReadX 10948 1699840 4096 4096 NT_STATUS_OK
ReadX 10948 1703936 61440 61440 NT_STATUS_OK
ReadX 10948 1765376 4096 4096 NT_STATUS_OK
ReadX 10948 1769472 61440 61440 NT_STATUS_OK
ReadX 10948 1830912 4096 4096 NT_STATUS_OK
ReadX 10948 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10949 NT_STATUS_OK
Close 10949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10946 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
ReadX 10953 4096 4096 4096 NT_STATUS_OK
ReadX 10953 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10954 NT_STATUS_OK
Close 10954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10957 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Close 10957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 8192 8192 NT_STATUS_OK
ReadX 10961 8192 8192 8192 NT_STATUS_OK
ReadX 10961 16384 8192 8192 NT_STATUS_OK
ReadX 10961 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10966 NT_STATUS_OK
WriteX 10966 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
WriteX 10966 0 10438 10438 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10967 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10969 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10970 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10972 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10974 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 0 4096 4096 NT_STATUS_OK
ReadX 10975 4096 4096 4096 NT_STATUS_OK
ReadX 10975 8192 4096 4096 NT_STATUS_OK
ReadX 10975 12288 8192 8192 NT_STATUS_OK
ReadX 10975 20480 8192 8192 NT_STATUS_OK
ReadX 10975 28672 8192 8192 NT_STATUS_OK
ReadX 10975 36864 8192 8192 NT_STATUS_OK
ReadX 10975 45056 8192 8192 NT_STATUS_OK
ReadX 10975 53248 8192 8192 NT_STATUS_OK
ReadX 10975 61440 8192 8192 NT_STATUS_OK
ReadX 10975 69632 8192 8192 NT_STATUS_OK
ReadX 10975 77824 8192 8192 NT_STATUS_OK
ReadX 10975 86016 8192 8192 NT_STATUS_OK
ReadX 10975 94208 8192 8192 NT_STATUS_OK
ReadX 10975 102400 8192 8192 NT_STATUS_OK
ReadX 10975 110592 8192 8192 NT_STATUS_OK
ReadX 10975 118784 8192 8192 NT_STATUS_OK
ReadX 10975 126976 8192 8192 NT_STATUS_OK
ReadX 10975 135168 8192 8192 NT_STATUS_OK
ReadX 10975 143360 8192 8192 NT_STATUS_OK
ReadX 10975 151552 8192 8192 NT_STATUS_OK
ReadX 10975 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10975 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10977 NT_STATUS_OK
Close 10977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10980 NT_STATUS_OK
WriteX 10980 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 258 NT_STATUS_OK
WriteX 10980 0 28489 28489 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10981 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10983 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 8192 8192 NT_STATUS_OK
ReadX 10987 8192 8192 8192 NT_STATUS_OK
ReadX 10987 16384 8192 8192 NT_STATUS_OK
ReadX 10987 24576 8192 8192 NT_STATUS_OK
ReadX 10987 32768 16384 16384 NT_STATUS_OK
ReadX 10987 49152 8192 8192 NT_STATUS_OK
ReadX 10987 57344 8192 8192 NT_STATUS_OK
ReadX 10987 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10989 NT_STATUS_OK
Close 10989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10992 NT_STATUS_OK
WriteX 10992 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10992 258 NT_STATUS_OK
WriteX 10992 0 29253 29253 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10996 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10999 NT_STATUS_OK
WriteX 10999 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10999 258 NT_STATUS_OK
WriteX 10999 0 30183 30183 NT_STATUS_OK
Close 10999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11002 NT_STATUS_OK
WriteX 11002 0 510 510 NT_STATUS_OK
WriteX 11002 510 512 512 NT_STATUS_OK
WriteX 11002 1022 510 510 NT_STATUS_OK
WriteX 11002 1532 510 510 NT_STATUS_OK
WriteX 11002 2042 168 168 NT_STATUS_OK
Close 11002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
WriteX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 61440 4096 4096 NT_STATUS_OK
ReadX 11006 126976 4096 4096 NT_STATUS_OK
WriteX 11006 0 65536 65536 NT_STATUS_OK
WriteX 11006 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 61440 4096 4096 NT_STATUS_OK
ReadX 11007 126976 4096 4096 NT_STATUS_OK
ReadX 11007 192512 4096 4096 NT_STATUS_OK
ReadX 11007 258048 4096 4096 NT_STATUS_OK
WriteX 11007 0 65536 65536 NT_STATUS_OK
WriteX 11007 65536 65536 65536 NT_STATUS_OK
WriteX 11007 131072 65536 65536 NT_STATUS_OK
WriteX 11007 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 61440 4096 4096 NT_STATUS_OK
ReadX 11008 126976 4096 4096 NT_STATUS_OK
ReadX 11008 192512 4096 4096 NT_STATUS_OK
ReadX 11008 258048 4096 4096 NT_STATUS_OK
ReadX 11008 323584 4096 4096 NT_STATUS_OK
ReadX 11008 389120 4096 4096 NT_STATUS_OK
ReadX 11008 454656 4096 4096 NT_STATUS_OK
ReadX 11008 520192 4096 4096 NT_STATUS_OK
WriteX 11008 0 65536 65536 NT_STATUS_OK
WriteX 11008 65536 65536 65536 NT_STATUS_OK
WriteX 11008 131072 65536 65536 NT_STATUS_OK
WriteX 11008 196608 65536 65536 NT_STATUS_OK
WriteX 11008 262144 65536 65536 NT_STATUS_OK
WriteX 11008 327680 65536 65536 NT_STATUS_OK
WriteX 11008 393216 65536 65536 NT_STATUS_OK
WriteX 11008 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11009 NT_STATUS_OK
Close 11009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11011 NT_STATUS_OK
Close 11011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11024 NT_STATUS_OK
Close 11024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11027 NT_STATUS_OK
Close 11027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11029 NT_STATUS_OK
Close 11029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11033 NT_STATUS_OK
Close 11033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11038 NT_STATUS_OK
Close 11038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11048 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11063 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11071 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11077 NT_STATUS_OK
WriteX 11077 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11077 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11077 0 65536 65536 NT_STATUS_OK
WriteX 11077 65536 65536 65536 NT_STATUS_OK
WriteX 11077 131072 65536 65536 NT_STATUS_OK
WriteX 11077 196608 65536 65536 NT_STATUS_OK
WriteX 11077 262144 26634 26634 NT_STATUS_OK
Close 11077 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11082 NT_STATUS_OK
Close 11082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 4096 4096 NT_STATUS_OK
ReadX 11085 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11086 NT_STATUS_OK
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11090 NT_STATUS_OK
Close 11090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11093 NT_STATUS_OK
Close 11093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11099 NT_STATUS_OK
Close 11099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11104 NT_STATUS_OK
Close 11104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11108 NT_STATUS_OK
Close 11108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11118 NT_STATUS_OK
Close 11118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11176 NT_STATUS_OK
Close 11176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11209 0 4096 4096 NT_STATUS_OK
Close 11209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11210 NT_STATUS_OK
ReadX 11210 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
ReadX 11211 4096 4096 4096 NT_STATUS_OK
ReadX 11211 8192 4096 4096 NT_STATUS_OK
ReadX 11211 12288 4096 4096 NT_STATUS_OK
ReadX 11211 16384 4096 4096 NT_STATUS_OK
ReadX 11211 20480 4096 4096 NT_STATUS_OK
ReadX 11211 24576 4096 4096 NT_STATUS_OK
ReadX 11211 28672 4096 4096 NT_STATUS_OK
ReadX 11211 32768 4096 4096 NT_STATUS_OK
ReadX 11211 36864 4096 4096 NT_STATUS_OK
ReadX 11211 40960 4096 4096 NT_STATUS_OK
ReadX 11211 45056 4096 4096 NT_STATUS_OK
ReadX 11211 49152 4096 4096 NT_STATUS_OK
ReadX 11211 53248 4096 4096 NT_STATUS_OK
ReadX 11211 57344 4096 4096 NT_STATUS_OK
ReadX 11211 61440 4096 4096 NT_STATUS_OK
ReadX 11211 65536 4096 4096 NT_STATUS_OK
ReadX 11211 69632 4096 4096 NT_STATUS_OK
ReadX 11211 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11212 NT_STATUS_OK
SET_FILE_INFORMATION 11212 1004 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11214 NT_STATUS_OK
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11217 NT_STATUS_OK
WriteX 11217 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 65536 65536 NT_STATUS_OK
WriteX 11217 65536 19979 19979 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 1004 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11220 NT_STATUS_OK
ReadX 11220 0 4096 4096 NT_STATUS_OK
Close 11219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11222 NT_STATUS_OK
ReadX 11222 0 4096 4096 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11223 NT_STATUS_OK
ReadX 11223 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11223 1004 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11224 NT_STATUS_OK
Close 11224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Close 11223 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11229 NT_STATUS_OK
WriteX 11229 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11229 258 NT_STATUS_OK
WriteX 11229 0 65536 65536 NT_STATUS_OK
WriteX 11229 65536 17654 17654 NT_STATUS_OK
Close 11229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 4096 4096 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
Flush 11230 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
Flush 11230 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 1004 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
Flush 11230 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
Flush 11230 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
Flush 11230 NT_STATUS_OK
SET_FILE_INFORMATION 11230 1004 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
Flush 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11231 NT_STATUS_OK
SET_FILE_INFORMATION 11231 1004 NT_STATUS_OK
Close 11231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
ReadX 11235 4096 4096 4096 NT_STATUS_OK
ReadX 11235 8192 4096 4096 NT_STATUS_OK
ReadX 11235 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11235 16384 4096 4096 NT_STATUS_OK
ReadX 11235 20480 4096 4096 NT_STATUS_OK
ReadX 11235 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
Close 11236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11238 1004 NT_STATUS_OK
WriteX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11244 NT_STATUS_OK
WriteX 11244 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11244 258 NT_STATUS_OK
WriteX 11244 0 65536 65536 NT_STATUS_OK
WriteX 11244 65536 19490 19490 NT_STATUS_OK
Close 11244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
WriteX 11245 0 4096 4096 NT_STATUS_OK
Flush 11245 NT_STATUS_OK
WriteX 11245 0 4096 4096 NT_STATUS_OK
Flush 11245 NT_STATUS_OK
QUERY_FILE_INFORMATION 11245 1004 NT_STATUS_OK
WriteX 11245 0 4096 4096 NT_STATUS_OK
Flush 11245 NT_STATUS_OK
WriteX 11245 0 4096 4096 NT_STATUS_OK
Flush 11245 NT_STATUS_OK
WriteX 11245 0 4096 4096 NT_STATUS_OK
Flush 11245 NT_STATUS_OK
SET_FILE_INFORMATION 11245 1004 NT_STATUS_OK
WriteX 11245 0 4096 4096 NT_STATUS_OK
Flush 11245 NT_STATUS_OK
Close 11245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11246 NT_STATUS_OK
SET_FILE_INFORMATION 11246 1004 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11250 0 4096 4096 NT_STATUS_OK
Close 11250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
ReadX 11252 4096 4096 4096 NT_STATUS_OK
ReadX 11252 8192 4096 4096 NT_STATUS_OK
ReadX 11252 12288 4096 4096 NT_STATUS_OK
ReadX 11252 16384 4096 4096 NT_STATUS_OK
ReadX 11252 20480 4096 4096 NT_STATUS_OK
ReadX 11252 24576 4096 4096 NT_STATUS_OK
ReadX 11252 28672 4096 4096 NT_STATUS_OK
ReadX 11252 32768 4096 4096 NT_STATUS_OK
ReadX 11252 36864 4096 4096 NT_STATUS_OK
ReadX 11252 40960 4096 4096 NT_STATUS_OK
ReadX 11252 45056 4096 4096 NT_STATUS_OK
ReadX 11252 49152 4096 4096 NT_STATUS_OK
ReadX 11252 53248 4096 4096 NT_STATUS_OK
ReadX 11252 57344 4096 4096 NT_STATUS_OK
ReadX 11252 61440 4096 4096 NT_STATUS_OK
ReadX 11252 65536 4096 4096 NT_STATUS_OK
ReadX 11252 69632 4096 4096 NT_STATUS_OK
ReadX 11252 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11252 1004 NT_STATUS_OK
WriteX 11252 0 4096 4096 NT_STATUS_OK
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11253 NT_STATUS_OK
SET_FILE_INFORMATION 11253 1004 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11255 NT_STATUS_OK
Close 11255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11258 NT_STATUS_OK
WriteX 11258 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 258 NT_STATUS_OK
WriteX 11258 0 65536 65536 NT_STATUS_OK
WriteX 11258 65536 8866 8866 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
WriteX 11259 0 4096 4096 NT_STATUS_OK
Flush 11259 NT_STATUS_OK
SET_FILE_INFORMATION 11259 1004 NT_STATUS_OK
WriteX 11259 0 4096 4096 NT_STATUS_OK
Flush 11259 NT_STATUS_OK
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11261 NT_STATUS_OK
ReadX 11261 0 4096 4096 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
Close 11262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11263 NT_STATUS_OK
ReadX 11263 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11263 1004 NT_STATUS_OK
WriteX 11263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11264 NT_STATUS_OK
Close 11264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11263 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11269 NT_STATUS_OK
WriteX 11269 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11269 258 NT_STATUS_OK
WriteX 11269 0 65536 65536 NT_STATUS_OK
WriteX 11269 65536 9298 9298 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
Flush 11270 NT_STATUS_OK
SET_FILE_INFORMATION 11270 1004 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
Flush 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11271 NT_STATUS_OK
SET_FILE_INFORMATION 11271 1004 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11276 0 4096 4096 NT_STATUS_OK
Close 11276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11277 4096 4096 4096 NT_STATUS_OK
ReadX 11277 8192 4096 4096 NT_STATUS_OK
ReadX 11277 12288 4096 4096 NT_STATUS_OK
ReadX 11277 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11280 1004 NT_STATUS_OK
WriteX 11280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11286 NT_STATUS_OK
WriteX 11286 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 258 NT_STATUS_OK
WriteX 11286 0 65536 65536 NT_STATUS_OK
WriteX 11286 65536 11540 11540 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
Flush 11287 NT_STATUS_OK
SET_FILE_INFORMATION 11287 1004 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
Flush 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11288 NT_STATUS_OK
SET_FILE_INFORMATION 11288 1004 NT_STATUS_OK
Close 11288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 61440 4096 4096 NT_STATUS_OK
ReadX 11292 126976 4096 4096 NT_STATUS_OK
WriteX 11292 0 65536 65536 NT_STATUS_OK
WriteX 11292 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 61440 4096 4096 NT_STATUS_OK
ReadX 11293 126976 4096 4096 NT_STATUS_OK
ReadX 11293 192512 4096 4096 NT_STATUS_OK
ReadX 11293 258048 4096 4096 NT_STATUS_OK
WriteX 11293 0 65536 65536 NT_STATUS_OK
WriteX 11293 65536 65536 65536 NT_STATUS_OK
WriteX 11293 131072 65536 65536 NT_STATUS_OK
WriteX 11293 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 61440 4096 4096 NT_STATUS_OK
ReadX 11294 126976 4096 4096 NT_STATUS_OK
ReadX 11294 192512 4096 4096 NT_STATUS_OK
ReadX 11294 258048 4096 4096 NT_STATUS_OK
ReadX 11294 323584 4096 4096 NT_STATUS_OK
ReadX 11294 389120 4096 4096 NT_STATUS_OK
ReadX 11294 454656 4096 4096 NT_STATUS_OK
ReadX 11294 520192 4096 4096 NT_STATUS_OK
WriteX 11294 0 65536 65536 NT_STATUS_OK
WriteX 11294 65536 65536 65536 NT_STATUS_OK
WriteX 11294 131072 65536 65536 NT_STATUS_OK
WriteX 11294 196608 65536 65536 NT_STATUS_OK
WriteX 11294 262144 65536 65536 NT_STATUS_OK
WriteX 11294 327680 65536 65536 NT_STATUS_OK
WriteX 11294 393216 65536 65536 NT_STATUS_OK
WriteX 11294 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
ReadX 11295 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11296 NT_STATUS_OK
WriteX 11296 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11296 258 NT_STATUS_OK
WriteX 11296 0 53 53 NT_STATUS_OK
Close 11296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11289 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11295 8192 4096 4096 NT_STATUS_OK
ReadX 11295 12288 4096 4096 NT_STATUS_OK
WriteX 11299 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 258 NT_STATUS_OK
ReadX 11295 16384 4096 4096 NT_STATUS_OK
ReadX 11295 20480 4096 4096 NT_STATUS_OK
WriteX 11299 0 15360 15360 NT_STATUS_OK
Close 11299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11300 1004 NT_STATUS_OK
WriteX 11300 0 4096 4096 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11303 4096 4096 4096 NT_STATUS_OK
ReadX 11303 8192 4096 4096 NT_STATUS_OK
ReadX 11303 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
ReadX 11306 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
ReadX 11307 4096 4096 4096 NT_STATUS_OK
ReadX 11307 8192 4096 4096 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11308 NT_STATUS_OK
WriteX 11308 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11308 258 NT_STATUS_OK
WriteX 11308 0 15360 15360 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11309 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11309 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11310 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11313 NT_STATUS_OK
SET_FILE_INFORMATION 11313 1004 NT_STATUS_OK
Close 11313 NT_STATUS_OK
WriteX 11309 0 4096 4096 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11316 NT_STATUS_OK
ReadX 11316 0 4096 4096 NT_STATUS_OK
ReadX 11316 4096 4096 4096 NT_STATUS_OK
ReadX 11316 8192 4096 4096 NT_STATUS_OK
ReadX 11316 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11317 NT_STATUS_OK
ReadX 11317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11318 NT_STATUS_OK
WriteX 11318 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 53 53 NT_STATUS_OK
Close 11318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11317 4096 4096 4096 NT_STATUS_OK
ReadX 11317 8192 4096 4096 NT_STATUS_OK
ReadX 11317 12288 4096 4096 NT_STATUS_OK
WriteX 11321 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 258 NT_STATUS_OK
WriteX 11321 0 12006 12006 NT_STATUS_OK
Close 11321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11322 NT_STATUS_OK
ReadX 11322 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11322 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11322 1004 NT_STATUS_OK
WriteX 11322 0 4096 4096 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11325 4096 4096 4096 NT_STATUS_OK
ReadX 11325 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11328 NT_STATUS_OK
WriteX 11328 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11328 258 NT_STATUS_OK
WriteX 11328 0 11991 11991 NT_STATUS_OK
Close 11328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11329 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11329 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11330 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11333 NT_STATUS_OK
SET_FILE_INFORMATION 11333 1004 NT_STATUS_OK
Close 11333 NT_STATUS_OK
WriteX 11329 0 4096 4096 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11334 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11336 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
ReadX 11336 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
WriteX 11336 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
Close 11312 NT_STATUS_OK
WriteX 11316 0 19054 19054 NT_STATUS_OK
WriteX 11336 0 12288 12288 NT_STATUS_OK
Close 11332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11339 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11341 NT_STATUS_OK
Close 11341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 61440 61440 NT_STATUS_OK
ReadX 11343 61440 4096 4096 NT_STATUS_OK
ReadX 11343 65536 61440 61440 NT_STATUS_OK
ReadX 11343 126976 4096 4096 NT_STATUS_OK
ReadX 11343 131072 61440 61440 NT_STATUS_OK
ReadX 11343 192512 4096 4096 NT_STATUS_OK
ReadX 11343 196608 61440 61440 NT_STATUS_OK
ReadX 11343 258048 4096 4096 NT_STATUS_OK
ReadX 11343 262144 61440 61440 NT_STATUS_OK
ReadX 11343 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 61440 61440 NT_STATUS_OK
ReadX 11344 61440 4096 4096 NT_STATUS_OK
ReadX 11344 65536 61440 61440 NT_STATUS_OK
ReadX 11344 126976 4096 4096 NT_STATUS_OK
ReadX 11344 131072 61440 61440 NT_STATUS_OK
ReadX 11344 192512 4096 4096 NT_STATUS_OK
ReadX 11344 196608 61440 61440 NT_STATUS_OK
ReadX 11344 258048 4096 4096 NT_STATUS_OK
ReadX 11344 262144 61440 61440 NT_STATUS_OK
ReadX 11344 323584 4096 4096 NT_STATUS_OK
ReadX 11344 327680 61440 61440 NT_STATUS_OK
ReadX 11344 389120 4096 4096 NT_STATUS_OK
ReadX 11344 393216 61440 61440 NT_STATUS_OK
ReadX 11344 454656 4096 4096 NT_STATUS_OK
ReadX 11344 458752 61440 61440 NT_STATUS_OK
ReadX 11344 520192 4096 4096 NT_STATUS_OK
ReadX 11344 524288 61440 61440 NT_STATUS_OK
ReadX 11344 585728 4096 4096 NT_STATUS_OK
ReadX 11344 589824 61440 61440 NT_STATUS_OK
ReadX 11344 651264 4096 4096 NT_STATUS_OK
ReadX 11344 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 61440 61440 NT_STATUS_OK
ReadX 11345 61440 4096 4096 NT_STATUS_OK
ReadX 11345 65536 61440 61440 NT_STATUS_OK
ReadX 11345 126976 4096 4096 NT_STATUS_OK
ReadX 11345 131072 61440 61440 NT_STATUS_OK
ReadX 11345 192512 4096 4096 NT_STATUS_OK
ReadX 11345 196608 61440 61440 NT_STATUS_OK
ReadX 11345 258048 4096 4096 NT_STATUS_OK
ReadX 11345 262144 61440 61440 NT_STATUS_OK
ReadX 11345 323584 4096 4096 NT_STATUS_OK
ReadX 11345 327680 61440 61440 NT_STATUS_OK
ReadX 11345 389120 4096 4096 NT_STATUS_OK
ReadX 11345 393216 61440 61440 NT_STATUS_OK
ReadX 11345 454656 4096 4096 NT_STATUS_OK
ReadX 11345 458752 61440 61440 NT_STATUS_OK
ReadX 11345 520192 4096 4096 NT_STATUS_OK
ReadX 11345 524288 61440 61440 NT_STATUS_OK
ReadX 11345 585728 4096 4096 NT_STATUS_OK
ReadX 11345 589824 61440 61440 NT_STATUS_OK
ReadX 11345 651264 4096 4096 NT_STATUS_OK
ReadX 11345 655360 61440 61440 NT_STATUS_OK
ReadX 11345 716800 4096 4096 NT_STATUS_OK
ReadX 11345 720896 61440 61440 NT_STATUS_OK
ReadX 11345 782336 4096 4096 NT_STATUS_OK
ReadX 11345 786432 61440 61440 NT_STATUS_OK
ReadX 11345 847872 4096 4096 NT_STATUS_OK
ReadX 11345 851968 61440 61440 NT_STATUS_OK
ReadX 11345 913408 4096 4096 NT_STATUS_OK
ReadX 11345 917504 61440 61440 NT_STATUS_OK
ReadX 11345 978944 4096 4096 NT_STATUS_OK
ReadX 11345 983040 61440 61440 NT_STATUS_OK
ReadX 11345 1044480 4096 4096 NT_STATUS_OK
ReadX 11345 1048576 61440 61440 NT_STATUS_OK
ReadX 11345 1110016 4096 4096 NT_STATUS_OK
ReadX 11345 1114112 61440 61440 NT_STATUS_OK
ReadX 11345 1175552 4096 4096 NT_STATUS_OK
ReadX 11345 1179648 61440 61440 NT_STATUS_OK
ReadX 11345 1241088 4096 4096 NT_STATUS_OK
ReadX 11345 1245184 61440 61440 NT_STATUS_OK
ReadX 11345 1306624 4096 4096 NT_STATUS_OK
ReadX 11345 1310720 61440 61440 NT_STATUS_OK
ReadX 11345 1372160 4096 4096 NT_STATUS_OK
ReadX 11345 1376256 61440 61440 NT_STATUS_OK
ReadX 11345 1437696 4096 4096 NT_STATUS_OK
ReadX 11345 1441792 61440 61440 NT_STATUS_OK
ReadX 11345 1503232 4096 4096 NT_STATUS_OK
ReadX 11345 1507328 61440 61440 NT_STATUS_OK
ReadX 11345 1568768 4096 4096 NT_STATUS_OK
ReadX 11345 1572864 61440 61440 NT_STATUS_OK
ReadX 11345 1634304 4096 4096 NT_STATUS_OK
ReadX 11345 1638400 61440 61440 NT_STATUS_OK
ReadX 11345 1699840 4096 4096 NT_STATUS_OK
ReadX 11345 1703936 61440 61440 NT_STATUS_OK
ReadX 11345 1765376 4096 4096 NT_STATUS_OK
ReadX 11345 1769472 61440 61440 NT_STATUS_OK
ReadX 11345 1830912 4096 4096 NT_STATUS_OK
ReadX 11345 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11347 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11348 NT_STATUS_OK
ReadX 11348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11352 NT_STATUS_OK
QUERY_FILE_INFORMATION 11352 1004 NT_STATUS_OK
WriteX 11352 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11352 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11354 NT_STATUS_OK
WriteX 11354 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 258 NT_STATUS_OK
WriteX 11354 0 491 491 NT_STATUS_OK
Close 11354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11357 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11358 NT_STATUS_OK
WriteX 11358 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11358 258 NT_STATUS_OK
WriteX 11358 0 543 543 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11347 NT_STATUS_OK
Close 11348 NT_STATUS_OK
Close 11349 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11367 NT_STATUS_OK
ReadX 11367 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11372 NT_STATUS_OK
QUERY_FILE_INFORMATION 11372 1004 NT_STATUS_OK
WriteX 11372 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11372 258 NT_STATUS_OK
WriteX 11372 0 2048 2048 NT_STATUS_OK
Close 11372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11378 NT_STATUS_OK
WriteX 11378 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 258 NT_STATUS_OK
WriteX 11378 0 2048 2048 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11379 NT_STATUS_OK
ReadX 11379 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11384 NT_STATUS_OK
WriteX 11384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 258 NT_STATUS_OK
WriteX 11384 0 2048 2048 NT_STATUS_OK
Close 11384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 2048 2048 NT_STATUS_OK
ReadX 11363 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11379 0 4096 4096 NT_STATUS_OK
WriteX 11363 0 8192 8192 NT_STATUS_OK
WriteX 11364 0 4096 4096 NT_STATUS_OK
WriteX 11365 0 4096 4096 NT_STATUS_OK
ReadX 11379 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11389 NT_STATUS_OK
QUERY_FILE_INFORMATION 11389 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11400 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11401 NT_STATUS_OK
ReadX 11401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11403 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11409 NT_STATUS_OK
QUERY_FILE_INFORMATION 11409 1004 NT_STATUS_OK
WriteX 11409 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11409 258 NT_STATUS_OK
WriteX 11409 0 2048 2048 NT_STATUS_OK
Close 11409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11410 NT_STATUS_OK
ReadX 11410 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11412 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11417 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 1004 NT_STATUS_OK
WriteX 11417 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 258 NT_STATUS_OK
WriteX 11417 0 2048 2048 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11410 0 4096 4096 NT_STATUS_OK
Flush 11410 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11412 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11420 NT_STATUS_OK
WriteX 11420 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 258 NT_STATUS_OK
WriteX 11420 0 4096 4096 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11423 NT_STATUS_OK
WriteX 11423 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11423 258 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Close 11423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11424 0 4096 4096 NT_STATUS_OK
Close 11421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Close 11401 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11430 NT_STATUS_OK
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11431 NT_STATUS_OK
WriteX 11431 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11431 258 NT_STATUS_OK
WriteX 11431 0 2048 2048 NT_STATUS_OK
Close 11431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11436 NT_STATUS_OK
ReadX 11436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11440 NT_STATUS_OK
ReadX 11440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11445 NT_STATUS_OK
ReadX 11445 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11446 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Close 11440 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Close 11433 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Close 11435 NT_STATUS_OK
Close 11436 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11448 NT_STATUS_OK
QUERY_FILE_INFORMATION 11448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11459 NT_STATUS_OK
ReadX 11459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11460 NT_STATUS_OK
ReadX 11460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11468 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 1004 NT_STATUS_OK
WriteX 11468 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 258 NT_STATUS_OK
WriteX 11468 0 2048 2048 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11470 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11479 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11480 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 1004 NT_STATUS_OK
WriteX 11480 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 258 NT_STATUS_OK
WriteX 11480 0 2048 2048 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11488 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 258 NT_STATUS_OK
WriteX 11488 0 2048 2048 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11489 0 4096 4096 NT_STATUS_OK
Flush 11489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11489 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11471 4096 16384 16384 NT_STATUS_OK
ReadX 11451 4096 16384 16384 NT_STATUS_OK
ReadX 11483 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11490 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 2048 2048 NT_STATUS_OK
WriteX 11491 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11492 NT_STATUS_OK
QUERY_FILE_INFORMATION 11492 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11455 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Close 11457 NT_STATUS_OK
Close 11460 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Close 11459 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11494 NT_STATUS_OK
QUERY_FILE_INFORMATION 11494 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11496 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11501 NT_STATUS_OK
ReadX 11501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11499 4096 16384 16384 NT_STATUS_OK
WriteX 11499 0 4096 4096 NT_STATUS_OK
WriteX 11500 0 4096 4096 NT_STATUS_OK
WriteX 11501 0 4096 4096 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11516 NT_STATUS_OK
ReadX 11516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11517 NT_STATUS_OK
ReadX 11517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 8192 8192 NT_STATUS_OK
ReadX 11505 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11519 0 4096 4096 NT_STATUS_OK
ReadX 11519 4096 4096 4096 NT_STATUS_OK
ReadX 11519 8192 4096 4096 NT_STATUS_OK
WriteX 11505 0 4096 4096 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
ReadX 11520 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11499 0 4096 4096 NT_STATUS_OK
WriteX 11500 0 4096 4096 NT_STATUS_OK
WriteX 11501 0 4096 4096 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11525 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1004 NT_STATUS_OK
WriteX 11525 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 258 NT_STATUS_OK
WriteX 11525 0 2048 2048 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11526 NT_STATUS_OK
ReadX 11526 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11526 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11527 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11528 NT_STATUS_OK
ReadX 11528 0 4096 4096 NT_STATUS_OK
ReadX 11528 4096 4096 4096 NT_STATUS_OK
WriteX 11528 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11526 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
ReadX 11530 4096 4096 4096 NT_STATUS_OK
WriteX 11530 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11531 NT_STATUS_OK
QUERY_FILE_INFORMATION 11531 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11518 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11516 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Close 11515 NT_STATUS_OK
Close 11517 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11530 NT_STATUS_OK
Close 11519 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11533 0 4096 4096 NT_STATUS_OK
ReadX 11533 4096 4096 4096 NT_STATUS_OK
ReadX 11533 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11535 NT_STATUS_OK
ReadX 11535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11537 NT_STATUS_OK
ReadX 11537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
ReadX 11534 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11551 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 1004 NT_STATUS_OK
WriteX 11551 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
WriteX 11551 0 2048 2048 NT_STATUS_OK
Close 11551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11552 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11556 NT_STATUS_OK
Close 11556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11557 NT_STATUS_OK
QUERY_FILE_INFORMATION 11557 1004 NT_STATUS_OK
WriteX 11557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11557 258 NT_STATUS_OK
WriteX 11557 0 2048 2048 NT_STATUS_OK
Close 11557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11541 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11559 NT_STATUS_OK
QUERY_FILE_INFORMATION 11559 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11545 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Close 11534 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Close 11538 NT_STATUS_OK
Close 11539 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Close 11542 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11561 NT_STATUS_OK
QUERY_FILE_INFORMATION 11561 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 61440 4096 4096 NT_STATUS_OK
ReadX 11563 126976 4096 4096 NT_STATUS_OK
WriteX 11563 0 65536 65536 NT_STATUS_OK
WriteX 11563 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 61440 4096 4096 NT_STATUS_OK
ReadX 11564 126976 4096 4096 NT_STATUS_OK
ReadX 11564 192512 4096 4096 NT_STATUS_OK
ReadX 11564 258048 4096 4096 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 65536 65536 NT_STATUS_OK
WriteX 11564 131072 65536 65536 NT_STATUS_OK
WriteX 11564 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 61440 4096 4096 NT_STATUS_OK
ReadX 11565 126976 4096 4096 NT_STATUS_OK
ReadX 11565 192512 4096 4096 NT_STATUS_OK
ReadX 11565 258048 4096 4096 NT_STATUS_OK
ReadX 11565 323584 4096 4096 NT_STATUS_OK
ReadX 11565 389120 4096 4096 NT_STATUS_OK
ReadX 11565 454656 4096 4096 NT_STATUS_OK
ReadX 11565 520192 4096 4096 NT_STATUS_OK
WriteX 11565 0 65536 65536 NT_STATUS_OK
WriteX 11565 65536 65536 65536 NT_STATUS_OK
WriteX 11565 131072 65536 65536 NT_STATUS_OK
WriteX 11565 196608 65536 65536 NT_STATUS_OK
WriteX 11565 262144 65536 65536 NT_STATUS_OK
WriteX 11565 327680 65536 65536 NT_STATUS_OK
WriteX 11565 393216 65536 65536 NT_STATUS_OK
WriteX 11565 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11566 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11566 8192 4096 4096 NT_STATUS_OK
ReadX 11566 12288 4096 4096 NT_STATUS_OK
ReadX 11566 16384 4096 4096 NT_STATUS_OK
ReadX 11566 20480 4096 4096 NT_STATUS_OK
ReadX 11566 24576 4096 4096 NT_STATUS_OK
ReadX 11566 28672 4096 4096 NT_STATUS_OK
ReadX 11566 32768 4096 4096 NT_STATUS_OK
ReadX 11566 36864 4096 4096 NT_STATUS_OK
ReadX 11566 40960 4096 4096 NT_STATUS_OK
ReadX 11566 45056 4096 4096 NT_STATUS_OK
ReadX 11566 49152 4096 4096 NT_STATUS_OK
ReadX 11566 53248 4096 4096 NT_STATUS_OK
ReadX 11566 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11566 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11567 NT_STATUS_OK
Close 11567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11563 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11569 NT_STATUS_OK
WriteX 11569 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11569 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11569 1004 NT_STATUS_OK
WriteX 11569 0 57088 57088 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11570 NT_STATUS_OK
SET_FILE_INFORMATION 11570 1004 NT_STATUS_OK
Close 11570 NT_STATUS_OK
SET_FILE_INFORMATION 11569 1004 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11573 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11574 NT_STATUS_OK
WriteX 11574 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11574 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 0 51456 51456 NT_STATUS_OK
WriteX 11574 0 4096 4096 NT_STATUS_OK
Flush 11574 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 0 4096 4096 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11578 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11583 NT_STATUS_OK
WriteX 11583 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11583 258 NT_STATUS_OK
WriteX 11583 0 53077 53077 NT_STATUS_OK
Close 11583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11584 NT_STATUS_OK
WriteX 11584 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11584 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11584 1004 NT_STATUS_OK
WriteX 11584 0 65536 65536 NT_STATUS_OK
WriteX 11584 65536 1856 1856 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Flush 11584 NT_STATUS_OK
SET_FILE_INFORMATION 11584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11584 1004 NT_STATUS_OK
WriteX 11584 0 4096 4096 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11593 NT_STATUS_OK
WriteX 11593 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11593 258 NT_STATUS_OK
WriteX 11593 0 7983 7983 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11598 NT_STATUS_OK
WriteX 11598 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11598 258 NT_STATUS_OK
WriteX 11598 0 65536 65536 NT_STATUS_OK
WriteX 11598 65536 65536 65536 NT_STATUS_OK
WriteX 11598 131072 65536 65536 NT_STATUS_OK
WriteX 11598 196608 65536 65536 NT_STATUS_OK
WriteX 11598 262144 65536 65536 NT_STATUS_OK
WriteX 11598 327680 65536 65536 NT_STATUS_OK
WriteX 11598 393216 65536 65536 NT_STATUS_OK
WriteX 11598 458752 46731 46731 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11599 NT_STATUS_OK
WriteX 11599 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11599 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11588 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11599 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11599 1004 NT_STATUS_OK
WriteX 11599 0 65536 65536 NT_STATUS_OK
WriteX 11599 65536 22848 22848 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Flush 11599 NT_STATUS_OK
SET_FILE_INFORMATION 11599 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11599 1004 NT_STATUS_OK
WriteX 11599 0 4096 4096 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11603 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11604 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11604 1004 NT_STATUS_OK
ReadX 11604 8192 4096 4096 NT_STATUS_OK
ReadX 11604 12288 4096 4096 NT_STATUS_OK
ReadX 11604 16384 4096 4096 NT_STATUS_OK
ReadX 11604 20480 4096 4096 NT_STATUS_OK
ReadX 11604 24576 4096 4096 NT_STATUS_OK
ReadX 11604 28672 4096 4096 NT_STATUS_OK
ReadX 11604 32768 4096 4096 NT_STATUS_OK
ReadX 11604 36864 4096 4096 NT_STATUS_OK
ReadX 11604 40960 4096 4096 NT_STATUS_OK
ReadX 11604 45056 4096 4096 NT_STATUS_OK
ReadX 11604 49152 4096 4096 NT_STATUS_OK
ReadX 11604 53248 4096 4096 NT_STATUS_OK
ReadX 11604 57344 4096 4096 NT_STATUS_OK
ReadX 11604 61440 4096 4096 NT_STATUS_OK
ReadX 11604 65536 4096 4096 NT_STATUS_OK
ReadX 11604 69632 4096 4096 NT_STATUS_OK
ReadX 11604 73728 4096 4096 NT_STATUS_OK
ReadX 11604 77824 4096 4096 NT_STATUS_OK
ReadX 11604 81920 4096 4096 NT_STATUS_OK
ReadX 11604 86016 4096 4096 NT_STATUS_OK
ReadX 11604 90112 4096 4096 NT_STATUS_OK
ReadX 11604 94208 4096 4096 NT_STATUS_OK
ReadX 11604 98304 4096 4096 NT_STATUS_OK
ReadX 11604 102400 4096 4096 NT_STATUS_OK
ReadX 11604 106496 4096 4096 NT_STATUS_OK
ReadX 11604 110592 4096 4096 NT_STATUS_OK
ReadX 11604 114688 4096 4096 NT_STATUS_OK
ReadX 11604 118784 4096 4096 NT_STATUS_OK
ReadX 11604 122880 4096 4096 NT_STATUS_OK
ReadX 11604 126976 4096 4096 NT_STATUS_OK
ReadX 11604 131072 4096 4096 NT_STATUS_OK
ReadX 11604 135168 4096 4096 NT_STATUS_OK
ReadX 11604 139264 4096 4096 NT_STATUS_OK
ReadX 11604 143360 4096 4096 NT_STATUS_OK
ReadX 11604 147456 4096 4096 NT_STATUS_OK
ReadX 11604 151552 4096 4096 NT_STATUS_OK
ReadX 11604 155648 4096 4096 NT_STATUS_OK
ReadX 11604 159744 4096 4096 NT_STATUS_OK
ReadX 11604 163840 4096 4096 NT_STATUS_OK
ReadX 11604 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11604 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11607 NT_STATUS_OK
WriteX 11607 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11607 258 NT_STATUS_OK
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11608 NT_STATUS_OK
SET_FILE_INFORMATION 11608 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
WriteX 11607 0 42388 42388 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 4096 4096 NT_STATUS_OK
ReadX 11611 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11612 NT_STATUS_OK
WriteX 11612 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11612 258 NT_STATUS_OK
SET_FILE_INFORMATION 11612 1004 NT_STATUS_OK
WriteX 11612 0 42652 42652 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
ReadX 11616 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11618 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11621 NT_STATUS_OK
WriteX 11621 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11621 258 NT_STATUS_OK
WriteX 11621 0 65536 65536 NT_STATUS_OK
WriteX 11621 65536 49 49 NT_STATUS_OK
Close 11621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 61440 61440 NT_STATUS_OK
ReadX 11622 61440 4096 4096 NT_STATUS_OK
ReadX 11622 65536 61440 61440 NT_STATUS_OK
ReadX 11622 126976 4096 4096 NT_STATUS_OK
ReadX 11622 131072 61440 61440 NT_STATUS_OK
ReadX 11622 192512 4096 4096 NT_STATUS_OK
ReadX 11622 196608 61440 61440 NT_STATUS_OK
ReadX 11622 258048 4096 4096 NT_STATUS_OK
ReadX 11622 262144 61440 61440 NT_STATUS_OK
ReadX 11622 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11623 NT_STATUS_OK
ReadX 11623 0 61440 61440 NT_STATUS_OK
ReadX 11623 61440 4096 4096 NT_STATUS_OK
ReadX 11623 65536 61440 61440 NT_STATUS_OK
ReadX 11623 126976 4096 4096 NT_STATUS_OK
ReadX 11623 131072 61440 61440 NT_STATUS_OK
ReadX 11623 192512 4096 4096 NT_STATUS_OK
ReadX 11623 196608 61440 61440 NT_STATUS_OK
ReadX 11623 258048 4096 4096 NT_STATUS_OK
ReadX 11623 262144 61440 61440 NT_STATUS_OK
ReadX 11623 323584 4096 4096 NT_STATUS_OK
ReadX 11623 327680 61440 61440 NT_STATUS_OK
ReadX 11623 389120 4096 4096 NT_STATUS_OK
ReadX 11623 393216 61440 61440 NT_STATUS_OK
ReadX 11623 454656 4096 4096 NT_STATUS_OK
ReadX 11623 458752 61440 61440 NT_STATUS_OK
ReadX 11623 520192 4096 4096 NT_STATUS_OK
ReadX 11623 524288 61440 61440 NT_STATUS_OK
ReadX 11623 585728 4096 4096 NT_STATUS_OK
ReadX 11623 589824 61440 61440 NT_STATUS_OK
ReadX 11623 651264 4096 4096 NT_STATUS_OK
ReadX 11623 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11624 NT_STATUS_OK
ReadX 11624 0 61440 61440 NT_STATUS_OK
ReadX 11624 61440 4096 4096 NT_STATUS_OK
ReadX 11624 65536 61440 61440 NT_STATUS_OK
ReadX 11624 126976 4096 4096 NT_STATUS_OK
ReadX 11624 131072 61440 61440 NT_STATUS_OK
ReadX 11624 192512 4096 4096 NT_STATUS_OK
ReadX 11624 196608 61440 61440 NT_STATUS_OK
ReadX 11624 258048 4096 4096 NT_STATUS_OK
ReadX 11624 262144 61440 61440 NT_STATUS_OK
ReadX 11624 323584 4096 4096 NT_STATUS_OK
ReadX 11624 327680 61440 61440 NT_STATUS_OK
ReadX 11624 389120 4096 4096 NT_STATUS_OK
ReadX 11624 393216 61440 61440 NT_STATUS_OK
ReadX 11624 454656 4096 4096 NT_STATUS_OK
ReadX 11624 458752 61440 61440 NT_STATUS_OK
ReadX 11624 520192 4096 4096 NT_STATUS_OK
ReadX 11624 524288 61440 61440 NT_STATUS_OK
ReadX 11624 585728 4096 4096 NT_STATUS_OK
ReadX 11624 589824 61440 61440 NT_STATUS_OK
ReadX 11624 651264 4096 4096 NT_STATUS_OK
ReadX 11624 655360 61440 61440 NT_STATUS_OK
ReadX 11624 716800 4096 4096 NT_STATUS_OK
ReadX 11624 720896 61440 61440 NT_STATUS_OK
ReadX 11624 782336 4096 4096 NT_STATUS_OK
ReadX 11624 786432 61440 61440 NT_STATUS_OK
ReadX 11624 847872 4096 4096 NT_STATUS_OK
ReadX 11624 851968 61440 61440 NT_STATUS_OK
ReadX 11624 913408 4096 4096 NT_STATUS_OK
ReadX 11624 917504 61440 61440 NT_STATUS_OK
ReadX 11624 978944 4096 4096 NT_STATUS_OK
ReadX 11624 983040 61440 61440 NT_STATUS_OK
ReadX 11624 1044480 4096 4096 NT_STATUS_OK
ReadX 11624 1048576 61440 61440 NT_STATUS_OK
ReadX 11624 1110016 4096 4096 NT_STATUS_OK
ReadX 11624 1114112 61440 61440 NT_STATUS_OK
ReadX 11624 1175552 4096 4096 NT_STATUS_OK
ReadX 11624 1179648 61440 61440 NT_STATUS_OK
ReadX 11624 1241088 4096 4096 NT_STATUS_OK
ReadX 11624 1245184 61440 61440 NT_STATUS_OK
ReadX 11624 1306624 4096 4096 NT_STATUS_OK
ReadX 11624 1310720 61440 61440 NT_STATUS_OK
ReadX 11624 1372160 4096 4096 NT_STATUS_OK
ReadX 11624 1376256 61440 61440 NT_STATUS_OK
ReadX 11624 1437696 4096 4096 NT_STATUS_OK
ReadX 11624 1441792 61440 61440 NT_STATUS_OK
ReadX 11624 1503232 4096 4096 NT_STATUS_OK
ReadX 11624 1507328 61440 61440 NT_STATUS_OK
ReadX 11624 1568768 4096 4096 NT_STATUS_OK
ReadX 11624 1572864 61440 61440 NT_STATUS_OK
ReadX 11624 1634304 4096 4096 NT_STATUS_OK
ReadX 11624 1638400 61440 61440 NT_STATUS_OK
ReadX 11624 1699840 4096 4096 NT_STATUS_OK
ReadX 11624 1703936 61440 61440 NT_STATUS_OK
ReadX 11624 1765376 4096 4096 NT_STATUS_OK
ReadX 11624 1769472 61440 61440 NT_STATUS_OK
ReadX 11624 1830912 4096 4096 NT_STATUS_OK
ReadX 11624 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11626 NT_STATUS_OK
QUERY_FILE_INFORMATION 11626 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11626 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11626 1005 NT_STATUS_OK
ReadX 11626 2156 24 24 NT_STATUS_OK
ReadX 11626 2139 276 276 NT_STATUS_OK
ReadX 11626 2136 14 14 NT_STATUS_OK
ReadX 11626 2136 7 7 NT_STATUS_OK
ReadX 11626 2138 12 12 NT_STATUS_OK
ReadX 11626 2137 8 8 NT_STATUS_OK
ReadX 11626 2135 15 15 NT_STATUS_OK
ReadX 11626 0 16 16 NT_STATUS_OK
ReadX 11626 16 2048 2048 NT_STATUS_OK
ReadX 11626 2064 2048 2048 NT_STATUS_OK
ReadX 11626 257 2048 2048 NT_STATUS_OK
ReadX 11626 385 2048 2048 NT_STATUS_OK
ReadX 11626 513 2048 2048 NT_STATUS_OK
ReadX 11626 641 2048 2048 NT_STATUS_OK
ReadX 11626 769 2048 2048 NT_STATUS_OK
ReadX 11626 897 2048 2048 NT_STATUS_OK
ReadX 11626 1025 2048 2048 NT_STATUS_OK
ReadX 11626 1153 2048 2048 NT_STATUS_OK
ReadX 11626 1281 2048 2048 NT_STATUS_OK
ReadX 11626 1409 2048 2048 NT_STATUS_OK
ReadX 11626 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11623 NT_STATUS_OK
Close 11624 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11631 NT_STATUS_OK
WriteX 11631 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11631 258 NT_STATUS_OK
WriteX 11631 0 10575 10575 NT_STATUS_OK
Flush 11631 NT_STATUS_OK
Close 11631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11632 NT_STATUS_OK
Close 11632 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11634 NT_STATUS_OK
ReadX 11634 0 4096 4096 NT_STATUS_OK
Close 11626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11636 NT_STATUS_OK
LockX 11636 2147483538 1 NT_STATUS_OK
UnlockX 11636 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 1005 NT_STATUS_OK
ReadX 11636 0 512 512 NT_STATUS_OK
ReadX 11636 512 512 512 NT_STATUS_OK
ReadX 11636 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 1004 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11637 NT_STATUS_OK
QUERY_FILE_INFORMATION 11637 1005 NT_STATUS_OK
ReadX 11637 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11638 NT_STATUS_OK
LockX 11638 2147483538 1 NT_STATUS_OK
UnlockX 11638 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11638 1005 NT_STATUS_OK
ReadX 11638 0 512 512 NT_STATUS_OK
ReadX 11638 512 512 512 NT_STATUS_OK
ReadX 11638 1024 512 512 NT_STATUS_OK
ReadX 11638 288 20 20 NT_STATUS_OK
ReadX 11638 308 2084 2084 NT_STATUS_OK
ReadX 11638 388 2084 2084 NT_STATUS_OK
ReadX 11638 388 2084 2084 NT_STATUS_OK
ReadX 11625 2157 1386 1386 NT_STATUS_OK
ReadX 11638 2472 399 399 NT_STATUS_OK
ReadX 11638 3072 1536 1536 NT_STATUS_OK
ReadX 11638 544 149 149 NT_STATUS_OK
ReadX 11638 693 485 485 NT_STATUS_OK
Close 11638 NT_STATUS_OK
ReadX 11625 2157 4096 4096 NT_STATUS_OK
ReadX 11625 6253 4096 4096 NT_STATUS_OK
ReadX 11625 10349 4096 4096 NT_STATUS_OK
ReadX 11625 14445 4096 4096 NT_STATUS_OK
ReadX 11625 18541 4096 4096 NT_STATUS_OK
ReadX 11625 22637 256 256 NT_STATUS_OK
ReadX 11625 22893 4096 4096 NT_STATUS_OK
ReadX 11625 26989 4096 4096 NT_STATUS_OK
ReadX 11625 31085 4096 4096 NT_STATUS_OK
ReadX 11625 35181 4096 4096 NT_STATUS_OK
ReadX 11625 39277 4096 4096 NT_STATUS_OK
ReadX 11625 43373 4096 4096 NT_STATUS_OK
ReadX 11625 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11625 2157 1024 1024 NT_STATUS_OK
ReadX 11625 1667 4688 4688 NT_STATUS_OK
ReadX 11625 6355 3516 3516 NT_STATUS_OK
ReadX 11625 9871 16384 16384 NT_STATUS_OK
ReadX 11625 26255 3771 3771 NT_STATUS_OK
ReadX 11625 30026 2048 2048 NT_STATUS_OK
ReadX 11625 32074 1024 1024 NT_STATUS_OK
ReadX 11625 33098 6652 6652 NT_STATUS_OK
ReadX 11625 39750 16384 16384 NT_STATUS_OK
ReadX 11625 56134 10496 10496 NT_STATUS_OK
ReadX 11625 66630 1784 1784 NT_STATUS_OK
ReadX 11625 68414 90 90 NT_STATUS_OK
ReadX 11625 68504 273 273 NT_STATUS_OK
ReadX 11625 68777 1600 1600 NT_STATUS_OK
ReadX 11625 70377 640 640 NT_STATUS_OK
ReadX 11625 71017 1280 1280 NT_STATUS_OK
ReadX 11625 72297 8464 8464 NT_STATUS_OK
ReadX 11625 80761 158 158 NT_STATUS_OK
ReadX 11625 80919 912 912 NT_STATUS_OK
ReadX 11625 81831 1980 1980 NT_STATUS_OK
ReadX 11625 83811 2256 2256 NT_STATUS_OK
ReadX 11625 86067 400 400 NT_STATUS_OK
ReadX 11625 86467 252 252 NT_STATUS_OK
ReadX 11625 86719 42 42 NT_STATUS_OK
ReadX 11625 86761 725 725 NT_STATUS_OK
ReadX 11625 2009 512 512 NT_STATUS_OK
ReadX 11625 3895 9 9 NT_STATUS_OK
ReadX 11625 3781 46 46 NT_STATUS_OK
ReadX 11625 4059 92 92 NT_STATUS_OK
ReadX 11625 3781 92 92 NT_STATUS_OK
ReadX 11625 3986 184 184 NT_STATUS_OK
ReadX 11625 3987 16384 16384 NT_STATUS_OK
ReadX 11625 3902 16384 16384 NT_STATUS_OK
ReadX 11625 3781 10240 10240 NT_STATUS_OK
ReadX 11625 3821 16384 16384 NT_STATUS_OK
ReadX 11625 3891 935 935 NT_STATUS_OK
ReadX 11625 4060 10240 10240 NT_STATUS_OK
ReadX 11625 4059 184 184 NT_STATUS_OK
ReadX 11625 256 184 184 NT_STATUS_OK
ReadX 11625 256 1026 1026 NT_STATUS_OK
ReadX 11625 3901 326 326 NT_STATUS_OK
ReadX 11625 3899 652 652 NT_STATUS_OK
ReadX 11625 256 2 2 NT_STATUS_OK
ReadX 11625 258 4948 4948 NT_STATUS_OK
Close 11625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11640 NT_STATUS_OK
Close 11640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11643 NT_STATUS_OK
WriteX 11643 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11643 258 NT_STATUS_OK
WriteX 11643 0 65536 65536 NT_STATUS_OK
WriteX 11643 65536 65536 65536 NT_STATUS_OK
WriteX 11643 131072 65536 65536 NT_STATUS_OK
WriteX 11643 196608 65536 65536 NT_STATUS_OK
WriteX 11643 262144 65536 65536 NT_STATUS_OK
WriteX 11643 327680 65536 65536 NT_STATUS_OK
WriteX 11643 393216 65536 65536 NT_STATUS_OK
WriteX 11643 458752 65536 65536 NT_STATUS_OK
WriteX 11643 524288 65536 65536 NT_STATUS_OK
WriteX 11643 589824 35257 35257 NT_STATUS_OK
Close 11643 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11645 NT_STATUS_OK
Close 11645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
WriteX 11648 0 65536 65536 NT_STATUS_OK
WriteX 11648 65536 65536 65536 NT_STATUS_OK
WriteX 11648 131072 65536 65536 NT_STATUS_OK
WriteX 11648 196608 65536 65536 NT_STATUS_OK
WriteX 11648 262144 65536 65536 NT_STATUS_OK
WriteX 11648 327680 65536 65536 NT_STATUS_OK
WriteX 11648 393216 65536 65536 NT_STATUS_OK
WriteX 11648 458752 65536 65536 NT_STATUS_OK
WriteX 11648 524288 65536 65536 NT_STATUS_OK
WriteX 11648 589824 57598 57598 NT_STATUS_OK
Close 11648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11650 NT_STATUS_OK
WriteX 11650 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11650 258 NT_STATUS_OK
WriteX 11650 0 12543 12543 NT_STATUS_OK
Flush 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11656 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 1005 NT_STATUS_OK
ReadX 11656 1938 24 24 NT_STATUS_OK
ReadX 11656 1920 276 276 NT_STATUS_OK
ReadX 11656 1918 14 14 NT_STATUS_OK
ReadX 11656 1918 7 7 NT_STATUS_OK
ReadX 11656 1919 12 12 NT_STATUS_OK
ReadX 11656 1919 8 8 NT_STATUS_OK
ReadX 11656 1917 15 15 NT_STATUS_OK
ReadX 11656 0 16 16 NT_STATUS_OK
ReadX 11656 16 2048 2048 NT_STATUS_OK
ReadX 11656 2064 2048 2048 NT_STATUS_OK
ReadX 11656 257 2048 2048 NT_STATUS_OK
ReadX 11656 385 2048 2048 NT_STATUS_OK
ReadX 11656 513 2048 2048 NT_STATUS_OK
ReadX 11656 641 2048 2048 NT_STATUS_OK
ReadX 11656 769 2048 2048 NT_STATUS_OK
ReadX 11656 897 2048 2048 NT_STATUS_OK
ReadX 11656 1025 2048 2048 NT_STATUS_OK
ReadX 11656 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11661 NT_STATUS_OK
WriteX 11661 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
WriteX 11661 0 11588 11588 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11662 NT_STATUS_OK
Close 11662 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11666 NT_STATUS_OK
WriteX 11666 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11666 258 NT_STATUS_OK
WriteX 11666 0 11615 11615 NT_STATUS_OK
Flush 11666 NT_STATUS_OK
Close 11666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11668 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11672 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11675 NT_STATUS_OK
WriteX 11675 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 258 NT_STATUS_OK
WriteX 11675 0 65536 65536 NT_STATUS_OK
WriteX 11675 65536 16050 16050 NT_STATUS_OK
Close 11675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 1939 64 64 NT_STATUS_OK
ReadX 11655 128 248 248 NT_STATUS_OK
ReadX 11655 128 568 568 NT_STATUS_OK
ReadX 11655 3872 1536 1536 NT_STATUS_OK
ReadX 11655 3456 2560 2560 NT_STATUS_OK
ReadX 11655 3136 512 512 NT_STATUS_OK
ReadX 11655 2880 4096 4096 NT_STATUS_OK
ReadX 11655 3264 3072 3072 NT_STATUS_OK
ReadX 11655 320 4096 4096 NT_STATUS_OK
ReadX 11655 1024 4096 4096 NT_STATUS_OK
ReadX 11655 3616 4096 4096 NT_STATUS_OK
ReadX 11655 1939 64 64 NT_STATUS_OK
ReadX 11655 128 248 248 NT_STATUS_OK
ReadX 11655 128 608 608 NT_STATUS_OK
ReadX 11655 2858 1024 1024 NT_STATUS_OK
ReadX 11655 2810 4096 4096 NT_STATUS_OK
ReadX 11655 2826 4096 4096 NT_STATUS_OK
ReadX 11655 2580 2048 2048 NT_STATUS_OK
ReadX 11655 2800 2560 2560 NT_STATUS_OK
ReadX 11655 2100 4096 4096 NT_STATUS_OK
ReadX 11655 2084 4096 4096 NT_STATUS_OK
ReadX 11655 868 4096 4096 NT_STATUS_OK
ReadX 11655 2324 4096 4096 NT_STATUS_OK
ReadX 11655 884 4096 4096 NT_STATUS_OK
ReadX 11655 2604 1024 1024 NT_STATUS_OK
ReadX 11655 580 4096 4096 NT_STATUS_OK
ReadX 11655 596 4096 4096 NT_STATUS_OK
ReadX 11655 2752 4096 4096 NT_STATUS_OK
ReadX 11655 2842 1024 1024 NT_STATUS_OK
ReadX 11655 660 4096 4096 NT_STATUS_OK
ReadX 11655 2720 4096 4096 NT_STATUS_OK
ReadX 11655 2736 4096 4096 NT_STATUS_OK
ReadX 11655 628 4096 4096 NT_STATUS_OK
ReadX 11655 2704 4096 4096 NT_STATUS_OK
ReadX 11655 1556 4096 4096 NT_STATUS_OK
ReadX 11655 576 4096 4096 NT_STATUS_OK
ReadX 11655 3168 1536 1536 NT_STATUS_OK
ReadX 11655 832 4096 4096 NT_STATUS_OK
ReadX 11655 1088 4096 4096 NT_STATUS_OK
ReadX 11655 1344 4096 4096 NT_STATUS_OK
ReadX 11655 1600 4096 4096 NT_STATUS_OK
ReadX 11655 1856 4096 4096 NT_STATUS_OK
ReadX 11655 2112 4096 4096 NT_STATUS_OK
ReadX 11655 1892 4096 4096 NT_STATUS_OK
ReadX 11655 820 4096 4096 NT_STATUS_OK
ReadX 11655 788 4096 4096 NT_STATUS_OK
ReadX 11655 1604 4096 4096 NT_STATUS_OK
ReadX 11655 3648 4096 4096 NT_STATUS_OK
ReadX 11655 2608 4096 4096 NT_STATUS_OK
ReadX 11655 548 4096 4096 NT_STATUS_OK
ReadX 11655 740 4096 4096 NT_STATUS_OK
ReadX 11655 1344 4096 4096 NT_STATUS_OK
ReadX 11655 3392 4096 4096 NT_STATUS_OK
ReadX 11655 3904 4096 4096 NT_STATUS_OK
ReadX 11655 644 4096 4096 NT_STATUS_OK
ReadX 11655 676 4096 4096 NT_STATUS_OK
ReadX 11655 2688 4096 4096 NT_STATUS_OK
ReadX 11655 320 4096 4096 NT_STATUS_OK
ReadX 11655 900 4096 4096 NT_STATUS_OK
ReadX 11655 1908 4096 4096 NT_STATUS_OK
ReadX 11655 852 4096 4096 NT_STATUS_OK
ReadX 11655 724 4096 4096 NT_STATUS_OK
ReadX 11655 2292 4096 4096 NT_STATUS_OK
ReadX 11655 612 4096 4096 NT_STATUS_OK
ReadX 11655 388 4096 4096 NT_STATUS_OK
ReadX 11655 2368 4096 4096 NT_STATUS_OK
ReadX 11655 2624 4096 4096 NT_STATUS_OK
ReadX 11655 500 4096 4096 NT_STATUS_OK
ReadX 11655 356 4096 4096 NT_STATUS_OK
ReadX 11655 1024 4096 4096 NT_STATUS_OK
ReadX 11655 576 4096 4096 NT_STATUS_OK
ReadX 11655 340 4096 4096 NT_STATUS_OK
ReadX 11655 420 4096 4096 NT_STATUS_OK
ReadX 11655 1600 4096 4096 NT_STATUS_OK
ReadX 11655 404 4096 4096 NT_STATUS_OK
ReadX 11655 1428 4096 4096 NT_STATUS_OK
ReadX 11655 2656 4096 4096 NT_STATUS_OK
ReadX 11655 2624 4096 4096 NT_STATUS_OK
ReadX 11655 452 4096 4096 NT_STATUS_OK
ReadX 11655 692 4096 4096 NT_STATUS_OK
ReadX 11655 564 4096 4096 NT_STATUS_OK
ReadX 11655 372 4096 4096 NT_STATUS_OK
ReadX 11655 468 4096 4096 NT_STATUS_OK
ReadX 11655 484 4096 4096 NT_STATUS_OK
ReadX 11655 1088 4096 4096 NT_STATUS_OK
ReadX 11655 1924 4096 4096 NT_STATUS_OK
ReadX 11655 2768 4096 4096 NT_STATUS_OK
ReadX 11655 832 4096 4096 NT_STATUS_OK
ReadX 11655 836 4096 4096 NT_STATUS_OK
ReadX 11655 1856 4096 4096 NT_STATUS_OK
ReadX 11655 2640 4096 4096 NT_STATUS_OK
ReadX 11655 436 4096 4096 NT_STATUS_OK
ReadX 11655 1828 4096 4096 NT_STATUS_OK
ReadX 11655 804 4096 4096 NT_STATUS_OK
ReadX 11655 1860 4096 4096 NT_STATUS_OK
ReadX 11655 1812 4096 4096 NT_STATUS_OK
ReadX 11655 756 4096 4096 NT_STATUS_OK
ReadX 11655 1636 4096 4096 NT_STATUS_OK
ReadX 11655 772 4096 4096 NT_STATUS_OK
ReadX 11655 2036 4096 4096 NT_STATUS_OK
ReadX 11655 1220 4096 4096 NT_STATUS_OK
ReadX 11655 1652 4096 4096 NT_STATUS_OK
ReadX 11655 2588 4096 4096 NT_STATUS_OK
ReadX 11655 916 4096 4096 NT_STATUS_OK
ReadX 11655 260 4096 4096 NT_STATUS_OK
ReadX 11655 932 4096 4096 NT_STATUS_OK
ReadX 11655 2624 4096 4096 NT_STATUS_OK
ReadX 11655 308 4096 4096 NT_STATUS_OK
ReadX 11655 292 4096 4096 NT_STATUS_OK
ReadX 11655 1140 4096 4096 NT_STATUS_OK
ReadX 11655 276 4096 4096 NT_STATUS_OK
ReadX 11655 2020 4096 4096 NT_STATUS_OK
ReadX 11655 2880 4096 4096 NT_STATUS_OK
ReadX 11655 516 4096 4096 NT_STATUS_OK
ReadX 11655 1844 4096 4096 NT_STATUS_OK
ReadX 11655 1124 4096 4096 NT_STATUS_OK
ReadX 11655 3136 4096 4096 NT_STATUS_OK
ReadX 11655 324 4096 4096 NT_STATUS_OK
ReadX 11655 1156 4096 4096 NT_STATUS_OK
ReadX 11655 1172 4096 4096 NT_STATUS_OK
ReadX 11655 2112 4096 4096 NT_STATUS_OK
ReadX 11655 2368 4096 4096 NT_STATUS_OK
ReadX 11655 964 4096 4096 NT_STATUS_OK
ReadX 11655 980 4096 4096 NT_STATUS_OK
ReadX 11655 1012 4096 4096 NT_STATUS_OK
ReadX 11655 532 4096 4096 NT_STATUS_OK
ReadX 11655 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11655 1620 4096 4096 NT_STATUS_OK
ReadX 11655 1604 4096 4096 NT_STATUS_OK
ReadX 11655 2116 4096 4096 NT_STATUS_OK
ReadX 11655 2132 4096 4096 NT_STATUS_OK
ReadX 11655 2148 4096 4096 NT_STATUS_OK
ReadX 11655 2276 4096 4096 NT_STATUS_OK
ReadX 11655 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11680 NT_STATUS_OK
QUERY_FILE_INFORMATION 11635 1004 NT_STATUS_OK
Close 11635 NT_STATUS_OK
WriteX 11680 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11637 1004 NT_STATUS_OK
Close 11637 NT_STATUS_OK
WriteX 11680 0 65536 65536 NT_STATUS_OK
WriteX 11680 65536 64850 64850 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11682 NT_STATUS_OK
WriteX 11682 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11682 258 NT_STATUS_OK
ReadX 11655 2068 4096 4096 NT_STATUS_OK
ReadX 11655 1588 4096 4096 NT_STATUS_OK
ReadX 11655 1572 4096 4096 NT_STATUS_OK
WriteX 11682 0 18630 18630 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
Close 11682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11684 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11655 612 4096 4096 NT_STATUS_OK
ReadX 11655 564 4096 4096 NT_STATUS_OK
ReadX 11655 1876 4096 4096 NT_STATUS_OK
ReadX 11655 628 4096 4096 NT_STATUS_OK
ReadX 11655 740 4096 4096 NT_STATUS_OK
ReadX 11655 724 4096 4096 NT_STATUS_OK
ReadX 11655 644 4096 4096 NT_STATUS_OK
ReadX 11655 2324 4096 4096 NT_STATUS_OK
ReadX 11655 660 4096 4096 NT_STATUS_OK
ReadX 11655 852 4096 4096 NT_STATUS_OK
ReadX 11655 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11655 2368 4096 4096 NT_STATUS_OK
ReadX 11655 1024 4096 4096 NT_STATUS_OK
ReadX 11655 320 4096 4096 NT_STATUS_OK
ReadX 11655 580 4096 4096 NT_STATUS_OK
ReadX 11655 3136 512 512 NT_STATUS_OK
ReadX 11655 2880 4096 4096 NT_STATUS_OK
Close 11655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 61440 4096 4096 NT_STATUS_OK
ReadX 11687 126976 4096 4096 NT_STATUS_OK
WriteX 11687 0 65536 65536 NT_STATUS_OK
WriteX 11687 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 61440 4096 4096 NT_STATUS_OK
ReadX 11688 126976 4096 4096 NT_STATUS_OK
ReadX 11688 192512 4096 4096 NT_STATUS_OK
ReadX 11688 258048 4096 4096 NT_STATUS_OK
WriteX 11688 0 65536 65536 NT_STATUS_OK
WriteX 11688 65536 65536 65536 NT_STATUS_OK
WriteX 11688 131072 65536 65536 NT_STATUS_OK
WriteX 11688 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 61440 4096 4096 NT_STATUS_OK
ReadX 11689 126976 4096 4096 NT_STATUS_OK
ReadX 11689 192512 4096 4096 NT_STATUS_OK
ReadX 11689 258048 4096 4096 NT_STATUS_OK
ReadX 11689 323584 4096 4096 NT_STATUS_OK
ReadX 11689 389120 4096 4096 NT_STATUS_OK
ReadX 11689 454656 4096 4096 NT_STATUS_OK
ReadX 11689 520192 4096 4096 NT_STATUS_OK
WriteX 11689 0 65536 65536 NT_STATUS_OK
WriteX 11689 65536 65536 65536 NT_STATUS_OK
WriteX 11689 131072 65536 65536 NT_STATUS_OK
WriteX 11689 196608 65536 65536 NT_STATUS_OK
WriteX 11689 262144 65536 65536 NT_STATUS_OK
WriteX 11689 327680 65536 65536 NT_STATUS_OK
WriteX 11689 393216 65536 65536 NT_STATUS_OK
WriteX 11689 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11691 NT_STATUS_OK
Close 11691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11692 NT_STATUS_OK
WriteX 11692 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11690 0 8192 8192 NT_STATUS_OK
Flush 11690 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11690 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11690 0 8192 8192 NT_STATUS_OK
Flush 11690 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11690 0 8192 8192 NT_STATUS_OK
Flush 11690 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11690 0 8192 8192 NT_STATUS_OK
Flush 11690 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11697 NT_STATUS_OK
WriteX 11697 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 258 NT_STATUS_OK
WriteX 11697 0 62591 62591 NT_STATUS_OK
Close 11697 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11699 NT_STATUS_OK
Close 11699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11702 NT_STATUS_OK
WriteX 11702 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11702 258 NT_STATUS_OK
WriteX 11702 0 10845 10845 NT_STATUS_OK
Close 11702 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11704 NT_STATUS_OK
Close 11704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11707 NT_STATUS_OK
WriteX 11707 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11707 258 NT_STATUS_OK
WriteX 11707 0 30118 30118 NT_STATUS_OK
Close 11707 NT_STATUS_OK
WriteX 11690 0 4096 4096 NT_STATUS_OK
WriteX 11692 0 64 64 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 61440 61440 NT_STATUS_OK
ReadX 11709 61440 4096 4096 NT_STATUS_OK
ReadX 11709 65536 61440 61440 NT_STATUS_OK
ReadX 11709 126976 4096 4096 NT_STATUS_OK
ReadX 11709 131072 61440 61440 NT_STATUS_OK
ReadX 11709 192512 4096 4096 NT_STATUS_OK
ReadX 11709 196608 61440 61440 NT_STATUS_OK
ReadX 11709 258048 4096 4096 NT_STATUS_OK
ReadX 11709 262144 61440 61440 NT_STATUS_OK
ReadX 11709 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 61440 61440 NT_STATUS_OK
ReadX 11710 61440 4096 4096 NT_STATUS_OK
ReadX 11710 65536 61440 61440 NT_STATUS_OK
ReadX 11710 126976 4096 4096 NT_STATUS_OK
ReadX 11710 131072 61440 61440 NT_STATUS_OK
ReadX 11710 192512 4096 4096 NT_STATUS_OK
ReadX 11710 196608 61440 61440 NT_STATUS_OK
ReadX 11710 258048 4096 4096 NT_STATUS_OK
ReadX 11710 262144 61440 61440 NT_STATUS_OK
ReadX 11710 323584 4096 4096 NT_STATUS_OK
ReadX 11710 327680 61440 61440 NT_STATUS_OK
ReadX 11710 389120 4096 4096 NT_STATUS_OK
ReadX 11710 393216 61440 61440 NT_STATUS_OK
ReadX 11710 454656 4096 4096 NT_STATUS_OK
ReadX 11710 458752 61440 61440 NT_STATUS_OK
ReadX 11710 520192 4096 4096 NT_STATUS_OK
ReadX 11710 524288 61440 61440 NT_STATUS_OK
ReadX 11710 585728 4096 4096 NT_STATUS_OK
ReadX 11710 589824 61440 61440 NT_STATUS_OK
ReadX 11710 651264 4096 4096 NT_STATUS_OK
ReadX 11710 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 61440 61440 NT_STATUS_OK
ReadX 11711 61440 4096 4096 NT_STATUS_OK
ReadX 11711 65536 61440 61440 NT_STATUS_OK
ReadX 11711 126976 4096 4096 NT_STATUS_OK
ReadX 11711 131072 61440 61440 NT_STATUS_OK
ReadX 11711 192512 4096 4096 NT_STATUS_OK
ReadX 11711 196608 61440 61440 NT_STATUS_OK
ReadX 11711 258048 4096 4096 NT_STATUS_OK
ReadX 11711 262144 61440 61440 NT_STATUS_OK
ReadX 11711 323584 4096 4096 NT_STATUS_OK
ReadX 11711 327680 61440 61440 NT_STATUS_OK
ReadX 11711 389120 4096 4096 NT_STATUS_OK
ReadX 11711 393216 61440 61440 NT_STATUS_OK
ReadX 11711 454656 4096 4096 NT_STATUS_OK
ReadX 11711 458752 61440 61440 NT_STATUS_OK
ReadX 11711 520192 4096 4096 NT_STATUS_OK
ReadX 11711 524288 61440 61440 NT_STATUS_OK
ReadX 11711 585728 4096 4096 NT_STATUS_OK
ReadX 11711 589824 61440 61440 NT_STATUS_OK
ReadX 11711 651264 4096 4096 NT_STATUS_OK
ReadX 11711 655360 61440 61440 NT_STATUS_OK
ReadX 11711 716800 4096 4096 NT_STATUS_OK
ReadX 11711 720896 61440 61440 NT_STATUS_OK
ReadX 11711 782336 4096 4096 NT_STATUS_OK
ReadX 11711 786432 61440 61440 NT_STATUS_OK
ReadX 11711 847872 4096 4096 NT_STATUS_OK
ReadX 11711 851968 61440 61440 NT_STATUS_OK
ReadX 11711 913408 4096 4096 NT_STATUS_OK
ReadX 11711 917504 61440 61440 NT_STATUS_OK
ReadX 11711 978944 4096 4096 NT_STATUS_OK
ReadX 11711 983040 61440 61440 NT_STATUS_OK
ReadX 11711 1044480 4096 4096 NT_STATUS_OK
ReadX 11711 1048576 61440 61440 NT_STATUS_OK
ReadX 11711 1110016 4096 4096 NT_STATUS_OK
ReadX 11711 1114112 61440 61440 NT_STATUS_OK
ReadX 11711 1175552 4096 4096 NT_STATUS_OK
ReadX 11711 1179648 61440 61440 NT_STATUS_OK
ReadX 11711 1241088 4096 4096 NT_STATUS_OK
ReadX 11711 1245184 61440 61440 NT_STATUS_OK
ReadX 11711 1306624 4096 4096 NT_STATUS_OK
ReadX 11711 1310720 61440 61440 NT_STATUS_OK
ReadX 11711 1372160 4096 4096 NT_STATUS_OK
ReadX 11711 1376256 61440 61440 NT_STATUS_OK
ReadX 11711 1437696 4096 4096 NT_STATUS_OK
ReadX 11711 1441792 61440 61440 NT_STATUS_OK
ReadX 11711 1503232 4096 4096 NT_STATUS_OK
ReadX 11711 1507328 61440 61440 NT_STATUS_OK
ReadX 11711 1568768 4096 4096 NT_STATUS_OK
ReadX 11711 1572864 61440 61440 NT_STATUS_OK
ReadX 11711 1634304 4096 4096 NT_STATUS_OK
ReadX 11711 1638400 61440 61440 NT_STATUS_OK
ReadX 11711 1699840 4096 4096 NT_STATUS_OK
ReadX 11711 1703936 61440 61440 NT_STATUS_OK
ReadX 11711 1765376 4096 4096 NT_STATUS_OK
ReadX 11711 1769472 61440 61440 NT_STATUS_OK
ReadX 11711 1830912 4096 4096 NT_STATUS_OK
ReadX 11711 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11712 NT_STATUS_OK
Close 11712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11709 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
ReadX 11716 4096 4096 4096 NT_STATUS_OK
ReadX 11716 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11720 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Close 11720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 8192 8192 NT_STATUS_OK
ReadX 11724 8192 8192 8192 NT_STATUS_OK
ReadX 11724 16384 8192 8192 NT_STATUS_OK
ReadX 11724 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11729 NT_STATUS_OK
WriteX 11729 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
WriteX 11729 0 10438 10438 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11730 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11732 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11733 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11735 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11737 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 4096 4096 NT_STATUS_OK
ReadX 11738 4096 4096 4096 NT_STATUS_OK
ReadX 11738 8192 4096 4096 NT_STATUS_OK
ReadX 11738 12288 8192 8192 NT_STATUS_OK
ReadX 11738 20480 8192 8192 NT_STATUS_OK
ReadX 11738 28672 8192 8192 NT_STATUS_OK
ReadX 11738 36864 8192 8192 NT_STATUS_OK
ReadX 11738 45056 8192 8192 NT_STATUS_OK
ReadX 11738 53248 8192 8192 NT_STATUS_OK
ReadX 11738 61440 8192 8192 NT_STATUS_OK
ReadX 11738 69632 8192 8192 NT_STATUS_OK
ReadX 11738 77824 8192 8192 NT_STATUS_OK
ReadX 11738 86016 8192 8192 NT_STATUS_OK
ReadX 11738 94208 8192 8192 NT_STATUS_OK
ReadX 11738 102400 8192 8192 NT_STATUS_OK
ReadX 11738 110592 8192 8192 NT_STATUS_OK
ReadX 11738 118784 8192 8192 NT_STATUS_OK
ReadX 11738 126976 8192 8192 NT_STATUS_OK
ReadX 11738 135168 8192 8192 NT_STATUS_OK
ReadX 11738 143360 8192 8192 NT_STATUS_OK
ReadX 11738 151552 8192 8192 NT_STATUS_OK
ReadX 11738 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11740 NT_STATUS_OK
Close 11740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11743 NT_STATUS_OK
WriteX 11743 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 258 NT_STATUS_OK
WriteX 11743 0 28489 28489 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11744 NT_STATUS_OK
Close 11744 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11746 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 8192 8192 NT_STATUS_OK
ReadX 11750 8192 8192 8192 NT_STATUS_OK
ReadX 11750 16384 8192 8192 NT_STATUS_OK
ReadX 11750 24576 8192 8192 NT_STATUS_OK
ReadX 11750 32768 16384 16384 NT_STATUS_OK
ReadX 11750 49152 8192 8192 NT_STATUS_OK
ReadX 11750 57344 8192 8192 NT_STATUS_OK
ReadX 11750 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11752 NT_STATUS_OK
Close 11752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11755 NT_STATUS_OK
WriteX 11755 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11755 258 NT_STATUS_OK
WriteX 11755 0 29253 29253 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11756 NT_STATUS_OK
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11759 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11762 NT_STATUS_OK
WriteX 11762 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11762 258 NT_STATUS_OK
WriteX 11762 0 30183 30183 NT_STATUS_OK
Close 11762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11763 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11765 NT_STATUS_OK
WriteX 11765 0 510 510 NT_STATUS_OK
WriteX 11765 510 512 512 NT_STATUS_OK
WriteX 11765 1022 510 510 NT_STATUS_OK
WriteX 11765 1532 510 510 NT_STATUS_OK
WriteX 11765 2042 168 168 NT_STATUS_OK
Close 11765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
WriteX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 61440 4096 4096 NT_STATUS_OK
ReadX 11769 126976 4096 4096 NT_STATUS_OK
WriteX 11769 0 65536 65536 NT_STATUS_OK
WriteX 11769 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 61440 4096 4096 NT_STATUS_OK
ReadX 11770 126976 4096 4096 NT_STATUS_OK
ReadX 11770 192512 4096 4096 NT_STATUS_OK
ReadX 11770 258048 4096 4096 NT_STATUS_OK
WriteX 11770 0 65536 65536 NT_STATUS_OK
WriteX 11770 65536 65536 65536 NT_STATUS_OK
WriteX 11770 131072 65536 65536 NT_STATUS_OK
WriteX 11770 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 61440 4096 4096 NT_STATUS_OK
ReadX 11771 126976 4096 4096 NT_STATUS_OK
ReadX 11771 192512 4096 4096 NT_STATUS_OK
ReadX 11771 258048 4096 4096 NT_STATUS_OK
ReadX 11771 323584 4096 4096 NT_STATUS_OK
ReadX 11771 389120 4096 4096 NT_STATUS_OK
ReadX 11771 454656 4096 4096 NT_STATUS_OK
ReadX 11771 520192 4096 4096 NT_STATUS_OK
WriteX 11771 0 65536 65536 NT_STATUS_OK
WriteX 11771 65536 65536 65536 NT_STATUS_OK
WriteX 11771 131072 65536 65536 NT_STATUS_OK
WriteX 11771 196608 65536 65536 NT_STATUS_OK
WriteX 11771 262144 65536 65536 NT_STATUS_OK
WriteX 11771 327680 65536 65536 NT_STATUS_OK
WriteX 11771 393216 65536 65536 NT_STATUS_OK
WriteX 11771 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11772 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11774 NT_STATUS_OK
Close 11774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11787 NT_STATUS_OK
Close 11787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11790 NT_STATUS_OK
Close 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11796 NT_STATUS_OK
Close 11796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11811 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11816 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11826 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11834 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11840 NT_STATUS_OK
WriteX 11840 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11840 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11840 0 65536 65536 NT_STATUS_OK
WriteX 11840 65536 65536 65536 NT_STATUS_OK
WriteX 11840 131072 65536 65536 NT_STATUS_OK
WriteX 11840 196608 65536 65536 NT_STATUS_OK
WriteX 11840 262144 26634 26634 NT_STATUS_OK
Close 11840 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11845 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11848 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11849 NT_STATUS_OK
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11848 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11853 NT_STATUS_OK
Close 11853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11856 NT_STATUS_OK
Close 11856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11862 NT_STATUS_OK
Close 11862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11867 NT_STATUS_OK
Close 11867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11871 NT_STATUS_OK
Close 11871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11881 NT_STATUS_OK
Close 11881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11939 NT_STATUS_OK
Close 11939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11972 0 4096 4096 NT_STATUS_OK
Close 11972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11973 NT_STATUS_OK
ReadX 11973 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
ReadX 11974 4096 4096 4096 NT_STATUS_OK
ReadX 11974 8192 4096 4096 NT_STATUS_OK
ReadX 11974 12288 4096 4096 NT_STATUS_OK
ReadX 11974 16384 4096 4096 NT_STATUS_OK
ReadX 11974 20480 4096 4096 NT_STATUS_OK
ReadX 11974 24576 4096 4096 NT_STATUS_OK
ReadX 11974 28672 4096 4096 NT_STATUS_OK
ReadX 11974 32768 4096 4096 NT_STATUS_OK
ReadX 11974 36864 4096 4096 NT_STATUS_OK
ReadX 11974 40960 4096 4096 NT_STATUS_OK
ReadX 11974 45056 4096 4096 NT_STATUS_OK
ReadX 11974 49152 4096 4096 NT_STATUS_OK
ReadX 11974 53248 4096 4096 NT_STATUS_OK
ReadX 11974 57344 4096 4096 NT_STATUS_OK
ReadX 11974 61440 4096 4096 NT_STATUS_OK
ReadX 11974 65536 4096 4096 NT_STATUS_OK
ReadX 11974 69632 4096 4096 NT_STATUS_OK
ReadX 11974 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11975 NT_STATUS_OK
SET_FILE_INFORMATION 11975 1004 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11977 NT_STATUS_OK
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11980 NT_STATUS_OK
WriteX 11980 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 65536 65536 NT_STATUS_OK
WriteX 11980 65536 19979 19979 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 1004 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11983 NT_STATUS_OK
ReadX 11983 0 4096 4096 NT_STATUS_OK
Close 11982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11985 NT_STATUS_OK
ReadX 11985 0 4096 4096 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11986 NT_STATUS_OK
ReadX 11986 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11986 1004 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11987 NT_STATUS_OK
Close 11987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Close 11986 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11992 NT_STATUS_OK
WriteX 11992 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11992 258 NT_STATUS_OK
WriteX 11992 0 65536 65536 NT_STATUS_OK
WriteX 11992 65536 17654 17654 NT_STATUS_OK
Close 11992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 4096 4096 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
Flush 11993 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
Flush 11993 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 1004 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
Flush 11993 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
Flush 11993 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
Flush 11993 NT_STATUS_OK
SET_FILE_INFORMATION 11993 1004 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
Flush 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11994 NT_STATUS_OK
SET_FILE_INFORMATION 11994 1004 NT_STATUS_OK
Close 11994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
ReadX 11998 4096 4096 4096 NT_STATUS_OK
ReadX 11998 8192 4096 4096 NT_STATUS_OK
ReadX 11998 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11998 16384 4096 4096 NT_STATUS_OK
ReadX 11998 20480 4096 4096 NT_STATUS_OK
ReadX 11998 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
Close 11999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12001 1004 NT_STATUS_OK
WriteX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12007 NT_STATUS_OK
WriteX 12007 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12007 258 NT_STATUS_OK
WriteX 12007 0 65536 65536 NT_STATUS_OK
WriteX 12007 65536 19490 19490 NT_STATUS_OK
Close 12007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
WriteX 12008 0 4096 4096 NT_STATUS_OK
Flush 12008 NT_STATUS_OK
WriteX 12008 0 4096 4096 NT_STATUS_OK
Flush 12008 NT_STATUS_OK
QUERY_FILE_INFORMATION 12008 1004 NT_STATUS_OK
WriteX 12008 0 4096 4096 NT_STATUS_OK
Flush 12008 NT_STATUS_OK
WriteX 12008 0 4096 4096 NT_STATUS_OK
Flush 12008 NT_STATUS_OK
WriteX 12008 0 4096 4096 NT_STATUS_OK
Flush 12008 NT_STATUS_OK
SET_FILE_INFORMATION 12008 1004 NT_STATUS_OK
WriteX 12008 0 4096 4096 NT_STATUS_OK
Flush 12008 NT_STATUS_OK
Close 12008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12009 NT_STATUS_OK
SET_FILE_INFORMATION 12009 1004 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12013 0 4096 4096 NT_STATUS_OK
Close 12013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
ReadX 12015 4096 4096 4096 NT_STATUS_OK
ReadX 12015 8192 4096 4096 NT_STATUS_OK
ReadX 12015 12288 4096 4096 NT_STATUS_OK
ReadX 12015 16384 4096 4096 NT_STATUS_OK
ReadX 12015 20480 4096 4096 NT_STATUS_OK
ReadX 12015 24576 4096 4096 NT_STATUS_OK
ReadX 12015 28672 4096 4096 NT_STATUS_OK
ReadX 12015 32768 4096 4096 NT_STATUS_OK
ReadX 12015 36864 4096 4096 NT_STATUS_OK
ReadX 12015 40960 4096 4096 NT_STATUS_OK
ReadX 12015 45056 4096 4096 NT_STATUS_OK
ReadX 12015 49152 4096 4096 NT_STATUS_OK
ReadX 12015 53248 4096 4096 NT_STATUS_OK
ReadX 12015 57344 4096 4096 NT_STATUS_OK
ReadX 12015 61440 4096 4096 NT_STATUS_OK
ReadX 12015 65536 4096 4096 NT_STATUS_OK
ReadX 12015 69632 4096 4096 NT_STATUS_OK
ReadX 12015 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12015 1004 NT_STATUS_OK
WriteX 12015 0 4096 4096 NT_STATUS_OK
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12016 NT_STATUS_OK
SET_FILE_INFORMATION 12016 1004 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12018 NT_STATUS_OK
Close 12018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12021 NT_STATUS_OK
WriteX 12021 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 258 NT_STATUS_OK
WriteX 12021 0 65536 65536 NT_STATUS_OK
WriteX 12021 65536 8866 8866 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
WriteX 12022 0 4096 4096 NT_STATUS_OK
Flush 12022 NT_STATUS_OK
SET_FILE_INFORMATION 12022 1004 NT_STATUS_OK
WriteX 12022 0 4096 4096 NT_STATUS_OK
Flush 12022 NT_STATUS_OK
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12024 NT_STATUS_OK
ReadX 12024 0 4096 4096 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
Close 12025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12026 NT_STATUS_OK
ReadX 12026 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12026 1004 NT_STATUS_OK
WriteX 12026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12027 NT_STATUS_OK
Close 12027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12026 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12032 NT_STATUS_OK
WriteX 12032 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12032 258 NT_STATUS_OK
WriteX 12032 0 65536 65536 NT_STATUS_OK
WriteX 12032 65536 9298 9298 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
Flush 12033 NT_STATUS_OK
SET_FILE_INFORMATION 12033 1004 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
Flush 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12034 NT_STATUS_OK
SET_FILE_INFORMATION 12034 1004 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12039 0 4096 4096 NT_STATUS_OK
Close 12039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12040 4096 4096 4096 NT_STATUS_OK
ReadX 12040 8192 4096 4096 NT_STATUS_OK
ReadX 12040 12288 4096 4096 NT_STATUS_OK
ReadX 12040 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12043 1004 NT_STATUS_OK
WriteX 12043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12049 NT_STATUS_OK
WriteX 12049 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 258 NT_STATUS_OK
WriteX 12049 0 65536 65536 NT_STATUS_OK
WriteX 12049 65536 11540 11540 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
Flush 12050 NT_STATUS_OK
SET_FILE_INFORMATION 12050 1004 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
Flush 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12051 NT_STATUS_OK
SET_FILE_INFORMATION 12051 1004 NT_STATUS_OK
Close 12051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 61440 4096 4096 NT_STATUS_OK
ReadX 12055 126976 4096 4096 NT_STATUS_OK
WriteX 12055 0 65536 65536 NT_STATUS_OK
WriteX 12055 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 61440 4096 4096 NT_STATUS_OK
ReadX 12056 126976 4096 4096 NT_STATUS_OK
ReadX 12056 192512 4096 4096 NT_STATUS_OK
ReadX 12056 258048 4096 4096 NT_STATUS_OK
WriteX 12056 0 65536 65536 NT_STATUS_OK
WriteX 12056 65536 65536 65536 NT_STATUS_OK
WriteX 12056 131072 65536 65536 NT_STATUS_OK
WriteX 12056 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 61440 4096 4096 NT_STATUS_OK
ReadX 12057 126976 4096 4096 NT_STATUS_OK
ReadX 12057 192512 4096 4096 NT_STATUS_OK
ReadX 12057 258048 4096 4096 NT_STATUS_OK
ReadX 12057 323584 4096 4096 NT_STATUS_OK
ReadX 12057 389120 4096 4096 NT_STATUS_OK
ReadX 12057 454656 4096 4096 NT_STATUS_OK
ReadX 12057 520192 4096 4096 NT_STATUS_OK
WriteX 12057 0 65536 65536 NT_STATUS_OK
WriteX 12057 65536 65536 65536 NT_STATUS_OK
WriteX 12057 131072 65536 65536 NT_STATUS_OK
WriteX 12057 196608 65536 65536 NT_STATUS_OK
WriteX 12057 262144 65536 65536 NT_STATUS_OK
WriteX 12057 327680 65536 65536 NT_STATUS_OK
WriteX 12057 393216 65536 65536 NT_STATUS_OK
WriteX 12057 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
ReadX 12058 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12059 NT_STATUS_OK
WriteX 12059 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12059 258 NT_STATUS_OK
WriteX 12059 0 53 53 NT_STATUS_OK
Close 12059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12052 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Close 12057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12058 8192 4096 4096 NT_STATUS_OK
ReadX 12058 12288 4096 4096 NT_STATUS_OK
WriteX 12062 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 258 NT_STATUS_OK
ReadX 12058 16384 4096 4096 NT_STATUS_OK
ReadX 12058 20480 4096 4096 NT_STATUS_OK
WriteX 12062 0 15360 15360 NT_STATUS_OK
Close 12062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12063 1004 NT_STATUS_OK
WriteX 12063 0 4096 4096 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12066 4096 4096 4096 NT_STATUS_OK
ReadX 12066 8192 4096 4096 NT_STATUS_OK
ReadX 12066 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
ReadX 12069 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
ReadX 12070 4096 4096 4096 NT_STATUS_OK
ReadX 12070 8192 4096 4096 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12071 NT_STATUS_OK
WriteX 12071 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12071 258 NT_STATUS_OK
WriteX 12071 0 15360 15360 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12072 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12072 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12073 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12076 NT_STATUS_OK
SET_FILE_INFORMATION 12076 1004 NT_STATUS_OK
Close 12076 NT_STATUS_OK
WriteX 12072 0 4096 4096 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12079 NT_STATUS_OK
ReadX 12079 0 4096 4096 NT_STATUS_OK
ReadX 12079 4096 4096 4096 NT_STATUS_OK
ReadX 12079 8192 4096 4096 NT_STATUS_OK
ReadX 12079 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12080 NT_STATUS_OK
ReadX 12080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12081 NT_STATUS_OK
WriteX 12081 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 53 53 NT_STATUS_OK
Close 12081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12080 4096 4096 4096 NT_STATUS_OK
ReadX 12080 8192 4096 4096 NT_STATUS_OK
ReadX 12080 12288 4096 4096 NT_STATUS_OK
WriteX 12084 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 258 NT_STATUS_OK
WriteX 12084 0 12006 12006 NT_STATUS_OK
Close 12084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12085 NT_STATUS_OK
ReadX 12085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12085 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12085 1004 NT_STATUS_OK
WriteX 12085 0 4096 4096 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12088 4096 4096 4096 NT_STATUS_OK
ReadX 12088 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12091 NT_STATUS_OK
WriteX 12091 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12091 258 NT_STATUS_OK
WriteX 12091 0 11991 11991 NT_STATUS_OK
Close 12091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12092 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12093 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12096 NT_STATUS_OK
SET_FILE_INFORMATION 12096 1004 NT_STATUS_OK
Close 12096 NT_STATUS_OK
WriteX 12092 0 4096 4096 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12097 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12099 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
ReadX 12099 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
WriteX 12099 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
Close 12075 NT_STATUS_OK
WriteX 12079 0 19054 19054 NT_STATUS_OK
WriteX 12099 0 12288 12288 NT_STATUS_OK
Close 12095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12102 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12104 NT_STATUS_OK
Close 12104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 61440 61440 NT_STATUS_OK
ReadX 12106 61440 4096 4096 NT_STATUS_OK
ReadX 12106 65536 61440 61440 NT_STATUS_OK
ReadX 12106 126976 4096 4096 NT_STATUS_OK
ReadX 12106 131072 61440 61440 NT_STATUS_OK
ReadX 12106 192512 4096 4096 NT_STATUS_OK
ReadX 12106 196608 61440 61440 NT_STATUS_OK
ReadX 12106 258048 4096 4096 NT_STATUS_OK
ReadX 12106 262144 61440 61440 NT_STATUS_OK
ReadX 12106 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 61440 61440 NT_STATUS_OK
ReadX 12107 61440 4096 4096 NT_STATUS_OK
ReadX 12107 65536 61440 61440 NT_STATUS_OK
ReadX 12107 126976 4096 4096 NT_STATUS_OK
ReadX 12107 131072 61440 61440 NT_STATUS_OK
ReadX 12107 192512 4096 4096 NT_STATUS_OK
ReadX 12107 196608 61440 61440 NT_STATUS_OK
ReadX 12107 258048 4096 4096 NT_STATUS_OK
ReadX 12107 262144 61440 61440 NT_STATUS_OK
ReadX 12107 323584 4096 4096 NT_STATUS_OK
ReadX 12107 327680 61440 61440 NT_STATUS_OK
ReadX 12107 389120 4096 4096 NT_STATUS_OK
ReadX 12107 393216 61440 61440 NT_STATUS_OK
ReadX 12107 454656 4096 4096 NT_STATUS_OK
ReadX 12107 458752 61440 61440 NT_STATUS_OK
ReadX 12107 520192 4096 4096 NT_STATUS_OK
ReadX 12107 524288 61440 61440 NT_STATUS_OK
ReadX 12107 585728 4096 4096 NT_STATUS_OK
ReadX 12107 589824 61440 61440 NT_STATUS_OK
ReadX 12107 651264 4096 4096 NT_STATUS_OK
ReadX 12107 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 61440 61440 NT_STATUS_OK
ReadX 12108 61440 4096 4096 NT_STATUS_OK
ReadX 12108 65536 61440 61440 NT_STATUS_OK
ReadX 12108 126976 4096 4096 NT_STATUS_OK
ReadX 12108 131072 61440 61440 NT_STATUS_OK
ReadX 12108 192512 4096 4096 NT_STATUS_OK
ReadX 12108 196608 61440 61440 NT_STATUS_OK
ReadX 12108 258048 4096 4096 NT_STATUS_OK
ReadX 12108 262144 61440 61440 NT_STATUS_OK
ReadX 12108 323584 4096 4096 NT_STATUS_OK
ReadX 12108 327680 61440 61440 NT_STATUS_OK
ReadX 12108 389120 4096 4096 NT_STATUS_OK
ReadX 12108 393216 61440 61440 NT_STATUS_OK
ReadX 12108 454656 4096 4096 NT_STATUS_OK
ReadX 12108 458752 61440 61440 NT_STATUS_OK
ReadX 12108 520192 4096 4096 NT_STATUS_OK
ReadX 12108 524288 61440 61440 NT_STATUS_OK
ReadX 12108 585728 4096 4096 NT_STATUS_OK
ReadX 12108 589824 61440 61440 NT_STATUS_OK
ReadX 12108 651264 4096 4096 NT_STATUS_OK
ReadX 12108 655360 61440 61440 NT_STATUS_OK
ReadX 12108 716800 4096 4096 NT_STATUS_OK
ReadX 12108 720896 61440 61440 NT_STATUS_OK
ReadX 12108 782336 4096 4096 NT_STATUS_OK
ReadX 12108 786432 61440 61440 NT_STATUS_OK
ReadX 12108 847872 4096 4096 NT_STATUS_OK
ReadX 12108 851968 61440 61440 NT_STATUS_OK
ReadX 12108 913408 4096 4096 NT_STATUS_OK
ReadX 12108 917504 61440 61440 NT_STATUS_OK
ReadX 12108 978944 4096 4096 NT_STATUS_OK
ReadX 12108 983040 61440 61440 NT_STATUS_OK
ReadX 12108 1044480 4096 4096 NT_STATUS_OK
ReadX 12108 1048576 61440 61440 NT_STATUS_OK
ReadX 12108 1110016 4096 4096 NT_STATUS_OK
ReadX 12108 1114112 61440 61440 NT_STATUS_OK
ReadX 12108 1175552 4096 4096 NT_STATUS_OK
ReadX 12108 1179648 61440 61440 NT_STATUS_OK
ReadX 12108 1241088 4096 4096 NT_STATUS_OK
ReadX 12108 1245184 61440 61440 NT_STATUS_OK
ReadX 12108 1306624 4096 4096 NT_STATUS_OK
ReadX 12108 1310720 61440 61440 NT_STATUS_OK
ReadX 12108 1372160 4096 4096 NT_STATUS_OK
ReadX 12108 1376256 61440 61440 NT_STATUS_OK
ReadX 12108 1437696 4096 4096 NT_STATUS_OK
ReadX 12108 1441792 61440 61440 NT_STATUS_OK
ReadX 12108 1503232 4096 4096 NT_STATUS_OK
ReadX 12108 1507328 61440 61440 NT_STATUS_OK
ReadX 12108 1568768 4096 4096 NT_STATUS_OK
ReadX 12108 1572864 61440 61440 NT_STATUS_OK
ReadX 12108 1634304 4096 4096 NT_STATUS_OK
ReadX 12108 1638400 61440 61440 NT_STATUS_OK
ReadX 12108 1699840 4096 4096 NT_STATUS_OK
ReadX 12108 1703936 61440 61440 NT_STATUS_OK
ReadX 12108 1765376 4096 4096 NT_STATUS_OK
ReadX 12108 1769472 61440 61440 NT_STATUS_OK
ReadX 12108 1830912 4096 4096 NT_STATUS_OK
ReadX 12108 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12110 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12111 NT_STATUS_OK
ReadX 12111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12115 NT_STATUS_OK
QUERY_FILE_INFORMATION 12115 1004 NT_STATUS_OK
WriteX 12115 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12115 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12117 NT_STATUS_OK
WriteX 12117 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 258 NT_STATUS_OK
WriteX 12117 0 491 491 NT_STATUS_OK
Close 12117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12120 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12121 NT_STATUS_OK
WriteX 12121 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12121 258 NT_STATUS_OK
WriteX 12121 0 543 543 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12110 NT_STATUS_OK
Close 12111 NT_STATUS_OK
Close 12112 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12130 NT_STATUS_OK
ReadX 12130 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12135 NT_STATUS_OK
QUERY_FILE_INFORMATION 12135 1004 NT_STATUS_OK
WriteX 12135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12135 258 NT_STATUS_OK
WriteX 12135 0 2048 2048 NT_STATUS_OK
Close 12135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12136 NT_STATUS_OK
ReadX 12136 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12136 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12141 NT_STATUS_OK
WriteX 12141 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 258 NT_STATUS_OK
WriteX 12141 0 2048 2048 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12142 NT_STATUS_OK
ReadX 12142 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12147 NT_STATUS_OK
WriteX 12147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 258 NT_STATUS_OK
WriteX 12147 0 2048 2048 NT_STATUS_OK
Close 12147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 2048 2048 NT_STATUS_OK
ReadX 12126 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12142 0 4096 4096 NT_STATUS_OK
WriteX 12126 0 8192 8192 NT_STATUS_OK
WriteX 12127 0 4096 4096 NT_STATUS_OK
WriteX 12128 0 4096 4096 NT_STATUS_OK
ReadX 12142 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12152 NT_STATUS_OK
QUERY_FILE_INFORMATION 12152 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12163 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12164 NT_STATUS_OK
ReadX 12164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12166 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12172 NT_STATUS_OK
QUERY_FILE_INFORMATION 12172 1004 NT_STATUS_OK
WriteX 12172 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12172 258 NT_STATUS_OK
WriteX 12172 0 2048 2048 NT_STATUS_OK
Close 12172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12173 NT_STATUS_OK
ReadX 12173 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12180 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 1004 NT_STATUS_OK
WriteX 12180 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 258 NT_STATUS_OK
WriteX 12180 0 2048 2048 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12173 0 4096 4096 NT_STATUS_OK
Flush 12173 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12175 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12183 NT_STATUS_OK
WriteX 12183 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 258 NT_STATUS_OK
WriteX 12183 0 4096 4096 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12186 NT_STATUS_OK
WriteX 12186 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12186 258 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Close 12186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12187 0 4096 4096 NT_STATUS_OK
Close 12184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Close 12164 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12193 NT_STATUS_OK
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12194 NT_STATUS_OK
WriteX 12194 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12194 258 NT_STATUS_OK
WriteX 12194 0 2048 2048 NT_STATUS_OK
Close 12194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12199 NT_STATUS_OK
ReadX 12199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12203 NT_STATUS_OK
ReadX 12203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12208 NT_STATUS_OK
ReadX 12208 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12209 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Close 12203 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Close 12196 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Close 12198 NT_STATUS_OK
Close 12199 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12211 NT_STATUS_OK
QUERY_FILE_INFORMATION 12211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12222 NT_STATUS_OK
ReadX 12222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12223 NT_STATUS_OK
ReadX 12223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12231 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 1004 NT_STATUS_OK
WriteX 12231 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 258 NT_STATUS_OK
WriteX 12231 0 2048 2048 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12233 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12242 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12243 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 1004 NT_STATUS_OK
WriteX 12243 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 258 NT_STATUS_OK
WriteX 12243 0 2048 2048 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12251 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 258 NT_STATUS_OK
WriteX 12251 0 2048 2048 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12252 0 4096 4096 NT_STATUS_OK
Flush 12252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12234 4096 16384 16384 NT_STATUS_OK
ReadX 12214 4096 16384 16384 NT_STATUS_OK
ReadX 12246 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 2048 2048 NT_STATUS_OK
WriteX 12254 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12255 NT_STATUS_OK
QUERY_FILE_INFORMATION 12255 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12226 NT_STATUS_OK
Close 12218 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Close 12220 NT_STATUS_OK
Close 12223 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Close 12222 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12257 NT_STATUS_OK
QUERY_FILE_INFORMATION 12257 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12259 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12264 NT_STATUS_OK
ReadX 12264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12262 4096 16384 16384 NT_STATUS_OK
WriteX 12262 0 4096 4096 NT_STATUS_OK
WriteX 12263 0 4096 4096 NT_STATUS_OK
WriteX 12264 0 4096 4096 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12270 NT_STATUS_OK
ReadX 12270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12279 NT_STATUS_OK
ReadX 12279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12280 NT_STATUS_OK
ReadX 12280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 8192 8192 NT_STATUS_OK
ReadX 12268 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12282 0 4096 4096 NT_STATUS_OK
ReadX 12282 4096 4096 4096 NT_STATUS_OK
ReadX 12282 8192 4096 4096 NT_STATUS_OK
WriteX 12268 0 4096 4096 NT_STATUS_OK
WriteX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
ReadX 12283 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12262 0 4096 4096 NT_STATUS_OK
WriteX 12263 0 4096 4096 NT_STATUS_OK
WriteX 12264 0 4096 4096 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12287 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12288 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1004 NT_STATUS_OK
WriteX 12288 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 258 NT_STATUS_OK
WriteX 12288 0 2048 2048 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12289 NT_STATUS_OK
ReadX 12289 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12289 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12289 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12290 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12291 NT_STATUS_OK
ReadX 12291 0 4096 4096 NT_STATUS_OK
ReadX 12291 4096 4096 4096 NT_STATUS_OK
WriteX 12291 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12289 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
ReadX 12293 4096 4096 4096 NT_STATUS_OK
WriteX 12293 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12294 NT_STATUS_OK
QUERY_FILE_INFORMATION 12294 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12281 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12279 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12277 NT_STATUS_OK
Close 12278 NT_STATUS_OK
Close 12280 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Close 12293 NT_STATUS_OK
Close 12282 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12296 0 4096 4096 NT_STATUS_OK
ReadX 12296 4096 4096 4096 NT_STATUS_OK
ReadX 12296 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12298 NT_STATUS_OK
ReadX 12298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
ReadX 12297 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12314 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 1004 NT_STATUS_OK
WriteX 12314 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
WriteX 12314 0 2048 2048 NT_STATUS_OK
Close 12314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12315 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12319 NT_STATUS_OK
Close 12319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12320 NT_STATUS_OK
QUERY_FILE_INFORMATION 12320 1004 NT_STATUS_OK
WriteX 12320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12320 258 NT_STATUS_OK
WriteX 12320 0 2048 2048 NT_STATUS_OK
Close 12320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12304 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12322 NT_STATUS_OK
QUERY_FILE_INFORMATION 12322 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12308 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12309 NT_STATUS_OK
Close 12297 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Close 12301 NT_STATUS_OK
Close 12302 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Close 12305 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12324 NT_STATUS_OK
QUERY_FILE_INFORMATION 12324 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 61440 4096 4096 NT_STATUS_OK
ReadX 12326 126976 4096 4096 NT_STATUS_OK
WriteX 12326 0 65536 65536 NT_STATUS_OK
WriteX 12326 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 61440 4096 4096 NT_STATUS_OK
ReadX 12327 126976 4096 4096 NT_STATUS_OK
ReadX 12327 192512 4096 4096 NT_STATUS_OK
ReadX 12327 258048 4096 4096 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 65536 65536 NT_STATUS_OK
WriteX 12327 131072 65536 65536 NT_STATUS_OK
WriteX 12327 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 61440 4096 4096 NT_STATUS_OK
ReadX 12328 126976 4096 4096 NT_STATUS_OK
ReadX 12328 192512 4096 4096 NT_STATUS_OK
ReadX 12328 258048 4096 4096 NT_STATUS_OK
ReadX 12328 323584 4096 4096 NT_STATUS_OK
ReadX 12328 389120 4096 4096 NT_STATUS_OK
ReadX 12328 454656 4096 4096 NT_STATUS_OK
ReadX 12328 520192 4096 4096 NT_STATUS_OK
WriteX 12328 0 65536 65536 NT_STATUS_OK
WriteX 12328 65536 65536 65536 NT_STATUS_OK
WriteX 12328 131072 65536 65536 NT_STATUS_OK
WriteX 12328 196608 65536 65536 NT_STATUS_OK
WriteX 12328 262144 65536 65536 NT_STATUS_OK
WriteX 12328 327680 65536 65536 NT_STATUS_OK
WriteX 12328 393216 65536 65536 NT_STATUS_OK
WriteX 12328 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12329 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12329 8192 4096 4096 NT_STATUS_OK
ReadX 12329 12288 4096 4096 NT_STATUS_OK
ReadX 12329 16384 4096 4096 NT_STATUS_OK
ReadX 12329 20480 4096 4096 NT_STATUS_OK
ReadX 12329 24576 4096 4096 NT_STATUS_OK
ReadX 12329 28672 4096 4096 NT_STATUS_OK
ReadX 12329 32768 4096 4096 NT_STATUS_OK
ReadX 12329 36864 4096 4096 NT_STATUS_OK
ReadX 12329 40960 4096 4096 NT_STATUS_OK
ReadX 12329 45056 4096 4096 NT_STATUS_OK
ReadX 12329 49152 4096 4096 NT_STATUS_OK
ReadX 12329 53248 4096 4096 NT_STATUS_OK
ReadX 12329 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12329 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12330 NT_STATUS_OK
Close 12330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12326 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12332 NT_STATUS_OK
WriteX 12332 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12332 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12332 1004 NT_STATUS_OK
WriteX 12332 0 57088 57088 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12333 NT_STATUS_OK
SET_FILE_INFORMATION 12333 1004 NT_STATUS_OK
Close 12333 NT_STATUS_OK
SET_FILE_INFORMATION 12332 1004 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12336 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12337 NT_STATUS_OK
WriteX 12337 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12337 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 0 51456 51456 NT_STATUS_OK
WriteX 12337 0 4096 4096 NT_STATUS_OK
Flush 12337 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 0 4096 4096 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12341 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12346 NT_STATUS_OK
WriteX 12346 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12346 258 NT_STATUS_OK
WriteX 12346 0 53077 53077 NT_STATUS_OK
Close 12346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12347 NT_STATUS_OK
WriteX 12347 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12347 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12347 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12347 1004 NT_STATUS_OK
WriteX 12347 0 65536 65536 NT_STATUS_OK
WriteX 12347 65536 1856 1856 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Flush 12347 NT_STATUS_OK
SET_FILE_INFORMATION 12347 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12347 1004 NT_STATUS_OK
WriteX 12347 0 4096 4096 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Close 12341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12356 NT_STATUS_OK
WriteX 12356 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12356 258 NT_STATUS_OK
WriteX 12356 0 7983 7983 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12361 NT_STATUS_OK
WriteX 12361 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12361 258 NT_STATUS_OK
WriteX 12361 0 65536 65536 NT_STATUS_OK
WriteX 12361 65536 65536 65536 NT_STATUS_OK
WriteX 12361 131072 65536 65536 NT_STATUS_OK
WriteX 12361 196608 65536 65536 NT_STATUS_OK
WriteX 12361 262144 65536 65536 NT_STATUS_OK
WriteX 12361 327680 65536 65536 NT_STATUS_OK
WriteX 12361 393216 65536 65536 NT_STATUS_OK
WriteX 12361 458752 46731 46731 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12362 NT_STATUS_OK
WriteX 12362 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12362 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12351 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12362 1004 NT_STATUS_OK
WriteX 12362 0 65536 65536 NT_STATUS_OK
WriteX 12362 65536 22848 22848 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Flush 12362 NT_STATUS_OK
SET_FILE_INFORMATION 12362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12362 1004 NT_STATUS_OK
WriteX 12362 0 4096 4096 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12366 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12367 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12367 1004 NT_STATUS_OK
ReadX 12367 8192 4096 4096 NT_STATUS_OK
ReadX 12367 12288 4096 4096 NT_STATUS_OK
ReadX 12367 16384 4096 4096 NT_STATUS_OK
ReadX 12367 20480 4096 4096 NT_STATUS_OK
ReadX 12367 24576 4096 4096 NT_STATUS_OK
ReadX 12367 28672 4096 4096 NT_STATUS_OK
ReadX 12367 32768 4096 4096 NT_STATUS_OK
ReadX 12367 36864 4096 4096 NT_STATUS_OK
ReadX 12367 40960 4096 4096 NT_STATUS_OK
ReadX 12367 45056 4096 4096 NT_STATUS_OK
ReadX 12367 49152 4096 4096 NT_STATUS_OK
ReadX 12367 53248 4096 4096 NT_STATUS_OK
ReadX 12367 57344 4096 4096 NT_STATUS_OK
ReadX 12367 61440 4096 4096 NT_STATUS_OK
ReadX 12367 65536 4096 4096 NT_STATUS_OK
ReadX 12367 69632 4096 4096 NT_STATUS_OK
ReadX 12367 73728 4096 4096 NT_STATUS_OK
ReadX 12367 77824 4096 4096 NT_STATUS_OK
ReadX 12367 81920 4096 4096 NT_STATUS_OK
ReadX 12367 86016 4096 4096 NT_STATUS_OK
ReadX 12367 90112 4096 4096 NT_STATUS_OK
ReadX 12367 94208 4096 4096 NT_STATUS_OK
ReadX 12367 98304 4096 4096 NT_STATUS_OK
ReadX 12367 102400 4096 4096 NT_STATUS_OK
ReadX 12367 106496 4096 4096 NT_STATUS_OK
ReadX 12367 110592 4096 4096 NT_STATUS_OK
ReadX 12367 114688 4096 4096 NT_STATUS_OK
ReadX 12367 118784 4096 4096 NT_STATUS_OK
ReadX 12367 122880 4096 4096 NT_STATUS_OK
ReadX 12367 126976 4096 4096 NT_STATUS_OK
ReadX 12367 131072 4096 4096 NT_STATUS_OK
ReadX 12367 135168 4096 4096 NT_STATUS_OK
ReadX 12367 139264 4096 4096 NT_STATUS_OK
ReadX 12367 143360 4096 4096 NT_STATUS_OK
ReadX 12367 147456 4096 4096 NT_STATUS_OK
ReadX 12367 151552 4096 4096 NT_STATUS_OK
ReadX 12367 155648 4096 4096 NT_STATUS_OK
ReadX 12367 159744 4096 4096 NT_STATUS_OK
ReadX 12367 163840 4096 4096 NT_STATUS_OK
ReadX 12367 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12367 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12370 NT_STATUS_OK
WriteX 12370 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12370 258 NT_STATUS_OK
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12371 NT_STATUS_OK
SET_FILE_INFORMATION 12371 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
WriteX 12370 0 42388 42388 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 4096 4096 NT_STATUS_OK
ReadX 12374 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12375 NT_STATUS_OK
WriteX 12375 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12375 258 NT_STATUS_OK
SET_FILE_INFORMATION 12375 1004 NT_STATUS_OK
WriteX 12375 0 42652 42652 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
ReadX 12379 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12381 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12384 NT_STATUS_OK
WriteX 12384 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12384 258 NT_STATUS_OK
WriteX 12384 0 65536 65536 NT_STATUS_OK
WriteX 12384 65536 49 49 NT_STATUS_OK
Close 12384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 61440 61440 NT_STATUS_OK
ReadX 12385 61440 4096 4096 NT_STATUS_OK
ReadX 12385 65536 61440 61440 NT_STATUS_OK
ReadX 12385 126976 4096 4096 NT_STATUS_OK
ReadX 12385 131072 61440 61440 NT_STATUS_OK
ReadX 12385 192512 4096 4096 NT_STATUS_OK
ReadX 12385 196608 61440 61440 NT_STATUS_OK
ReadX 12385 258048 4096 4096 NT_STATUS_OK
ReadX 12385 262144 61440 61440 NT_STATUS_OK
ReadX 12385 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12386 NT_STATUS_OK
ReadX 12386 0 61440 61440 NT_STATUS_OK
ReadX 12386 61440 4096 4096 NT_STATUS_OK
ReadX 12386 65536 61440 61440 NT_STATUS_OK
ReadX 12386 126976 4096 4096 NT_STATUS_OK
ReadX 12386 131072 61440 61440 NT_STATUS_OK
ReadX 12386 192512 4096 4096 NT_STATUS_OK
ReadX 12386 196608 61440 61440 NT_STATUS_OK
ReadX 12386 258048 4096 4096 NT_STATUS_OK
ReadX 12386 262144 61440 61440 NT_STATUS_OK
ReadX 12386 323584 4096 4096 NT_STATUS_OK
ReadX 12386 327680 61440 61440 NT_STATUS_OK
ReadX 12386 389120 4096 4096 NT_STATUS_OK
ReadX 12386 393216 61440 61440 NT_STATUS_OK
ReadX 12386 454656 4096 4096 NT_STATUS_OK
ReadX 12386 458752 61440 61440 NT_STATUS_OK
ReadX 12386 520192 4096 4096 NT_STATUS_OK
ReadX 12386 524288 61440 61440 NT_STATUS_OK
ReadX 12386 585728 4096 4096 NT_STATUS_OK
ReadX 12386 589824 61440 61440 NT_STATUS_OK
ReadX 12386 651264 4096 4096 NT_STATUS_OK
ReadX 12386 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12387 NT_STATUS_OK
ReadX 12387 0 61440 61440 NT_STATUS_OK
ReadX 12387 61440 4096 4096 NT_STATUS_OK
ReadX 12387 65536 61440 61440 NT_STATUS_OK
ReadX 12387 126976 4096 4096 NT_STATUS_OK
ReadX 12387 131072 61440 61440 NT_STATUS_OK
ReadX 12387 192512 4096 4096 NT_STATUS_OK
ReadX 12387 196608 61440 61440 NT_STATUS_OK
ReadX 12387 258048 4096 4096 NT_STATUS_OK
ReadX 12387 262144 61440 61440 NT_STATUS_OK
ReadX 12387 323584 4096 4096 NT_STATUS_OK
ReadX 12387 327680 61440 61440 NT_STATUS_OK
ReadX 12387 389120 4096 4096 NT_STATUS_OK
ReadX 12387 393216 61440 61440 NT_STATUS_OK
ReadX 12387 454656 4096 4096 NT_STATUS_OK
ReadX 12387 458752 61440 61440 NT_STATUS_OK
ReadX 12387 520192 4096 4096 NT_STATUS_OK
ReadX 12387 524288 61440 61440 NT_STATUS_OK
ReadX 12387 585728 4096 4096 NT_STATUS_OK
ReadX 12387 589824 61440 61440 NT_STATUS_OK
ReadX 12387 651264 4096 4096 NT_STATUS_OK
ReadX 12387 655360 61440 61440 NT_STATUS_OK
ReadX 12387 716800 4096 4096 NT_STATUS_OK
ReadX 12387 720896 61440 61440 NT_STATUS_OK
ReadX 12387 782336 4096 4096 NT_STATUS_OK
ReadX 12387 786432 61440 61440 NT_STATUS_OK
ReadX 12387 847872 4096 4096 NT_STATUS_OK
ReadX 12387 851968 61440 61440 NT_STATUS_OK
ReadX 12387 913408 4096 4096 NT_STATUS_OK
ReadX 12387 917504 61440 61440 NT_STATUS_OK
ReadX 12387 978944 4096 4096 NT_STATUS_OK
ReadX 12387 983040 61440 61440 NT_STATUS_OK
ReadX 12387 1044480 4096 4096 NT_STATUS_OK
ReadX 12387 1048576 61440 61440 NT_STATUS_OK
ReadX 12387 1110016 4096 4096 NT_STATUS_OK
ReadX 12387 1114112 61440 61440 NT_STATUS_OK
ReadX 12387 1175552 4096 4096 NT_STATUS_OK
ReadX 12387 1179648 61440 61440 NT_STATUS_OK
ReadX 12387 1241088 4096 4096 NT_STATUS_OK
ReadX 12387 1245184 61440 61440 NT_STATUS_OK
ReadX 12387 1306624 4096 4096 NT_STATUS_OK
ReadX 12387 1310720 61440 61440 NT_STATUS_OK
ReadX 12387 1372160 4096 4096 NT_STATUS_OK
ReadX 12387 1376256 61440 61440 NT_STATUS_OK
ReadX 12387 1437696 4096 4096 NT_STATUS_OK
ReadX 12387 1441792 61440 61440 NT_STATUS_OK
ReadX 12387 1503232 4096 4096 NT_STATUS_OK
ReadX 12387 1507328 61440 61440 NT_STATUS_OK
ReadX 12387 1568768 4096 4096 NT_STATUS_OK
ReadX 12387 1572864 61440 61440 NT_STATUS_OK
ReadX 12387 1634304 4096 4096 NT_STATUS_OK
ReadX 12387 1638400 61440 61440 NT_STATUS_OK
ReadX 12387 1699840 4096 4096 NT_STATUS_OK
ReadX 12387 1703936 61440 61440 NT_STATUS_OK
ReadX 12387 1765376 4096 4096 NT_STATUS_OK
ReadX 12387 1769472 61440 61440 NT_STATUS_OK
ReadX 12387 1830912 4096 4096 NT_STATUS_OK
ReadX 12387 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12389 NT_STATUS_OK
QUERY_FILE_INFORMATION 12389 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12389 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12389 1005 NT_STATUS_OK
ReadX 12389 2156 24 24 NT_STATUS_OK
ReadX 12389 2139 276 276 NT_STATUS_OK
ReadX 12389 2136 14 14 NT_STATUS_OK
ReadX 12389 2136 7 7 NT_STATUS_OK
ReadX 12389 2138 12 12 NT_STATUS_OK
ReadX 12389 2137 8 8 NT_STATUS_OK
ReadX 12389 2135 15 15 NT_STATUS_OK
ReadX 12389 0 16 16 NT_STATUS_OK
ReadX 12389 16 2048 2048 NT_STATUS_OK
ReadX 12389 2064 2048 2048 NT_STATUS_OK
ReadX 12389 257 2048 2048 NT_STATUS_OK
ReadX 12389 385 2048 2048 NT_STATUS_OK
ReadX 12389 513 2048 2048 NT_STATUS_OK
ReadX 12389 641 2048 2048 NT_STATUS_OK
ReadX 12389 769 2048 2048 NT_STATUS_OK
ReadX 12389 897 2048 2048 NT_STATUS_OK
ReadX 12389 1025 2048 2048 NT_STATUS_OK
ReadX 12389 1153 2048 2048 NT_STATUS_OK
ReadX 12389 1281 2048 2048 NT_STATUS_OK
ReadX 12389 1409 2048 2048 NT_STATUS_OK
ReadX 12389 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12386 NT_STATUS_OK
Close 12387 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12394 NT_STATUS_OK
WriteX 12394 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12394 258 NT_STATUS_OK
WriteX 12394 0 10575 10575 NT_STATUS_OK
Flush 12394 NT_STATUS_OK
Close 12394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12395 NT_STATUS_OK
Close 12395 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12397 NT_STATUS_OK
ReadX 12397 0 4096 4096 NT_STATUS_OK
Close 12389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12399 NT_STATUS_OK
LockX 12399 2147483538 1 NT_STATUS_OK
UnlockX 12399 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 1005 NT_STATUS_OK
ReadX 12399 0 512 512 NT_STATUS_OK
ReadX 12399 512 512 512 NT_STATUS_OK
ReadX 12399 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 1004 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12400 NT_STATUS_OK
QUERY_FILE_INFORMATION 12400 1005 NT_STATUS_OK
ReadX 12400 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12401 NT_STATUS_OK
LockX 12401 2147483538 1 NT_STATUS_OK
UnlockX 12401 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12401 1005 NT_STATUS_OK
ReadX 12401 0 512 512 NT_STATUS_OK
ReadX 12401 512 512 512 NT_STATUS_OK
ReadX 12401 1024 512 512 NT_STATUS_OK
ReadX 12401 288 20 20 NT_STATUS_OK
ReadX 12401 308 2084 2084 NT_STATUS_OK
ReadX 12401 388 2084 2084 NT_STATUS_OK
ReadX 12401 388 2084 2084 NT_STATUS_OK
ReadX 12388 2157 1386 1386 NT_STATUS_OK
ReadX 12401 2472 399 399 NT_STATUS_OK
ReadX 12401 3072 1536 1536 NT_STATUS_OK
ReadX 12401 544 149 149 NT_STATUS_OK
ReadX 12401 693 485 485 NT_STATUS_OK
Close 12401 NT_STATUS_OK
ReadX 12388 2157 4096 4096 NT_STATUS_OK
ReadX 12388 6253 4096 4096 NT_STATUS_OK
ReadX 12388 10349 4096 4096 NT_STATUS_OK
ReadX 12388 14445 4096 4096 NT_STATUS_OK
ReadX 12388 18541 4096 4096 NT_STATUS_OK
ReadX 12388 22637 256 256 NT_STATUS_OK
ReadX 12388 22893 4096 4096 NT_STATUS_OK
ReadX 12388 26989 4096 4096 NT_STATUS_OK
ReadX 12388 31085 4096 4096 NT_STATUS_OK
ReadX 12388 35181 4096 4096 NT_STATUS_OK
ReadX 12388 39277 4096 4096 NT_STATUS_OK
ReadX 12388 43373 4096 4096 NT_STATUS_OK
ReadX 12388 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12388 2157 1024 1024 NT_STATUS_OK
ReadX 12388 1667 4688 4688 NT_STATUS_OK
ReadX 12388 6355 3516 3516 NT_STATUS_OK
ReadX 12388 9871 16384 16384 NT_STATUS_OK
ReadX 12388 26255 3771 3771 NT_STATUS_OK
ReadX 12388 30026 2048 2048 NT_STATUS_OK
ReadX 12388 32074 1024 1024 NT_STATUS_OK
ReadX 12388 33098 6652 6652 NT_STATUS_OK
ReadX 12388 39750 16384 16384 NT_STATUS_OK
ReadX 12388 56134 10496 10496 NT_STATUS_OK
ReadX 12388 66630 1784 1784 NT_STATUS_OK
ReadX 12388 68414 90 90 NT_STATUS_OK
ReadX 12388 68504 273 273 NT_STATUS_OK
ReadX 12388 68777 1600 1600 NT_STATUS_OK
ReadX 12388 70377 640 640 NT_STATUS_OK
ReadX 12388 71017 1280 1280 NT_STATUS_OK
ReadX 12388 72297 8464 8464 NT_STATUS_OK
ReadX 12388 80761 158 158 NT_STATUS_OK
ReadX 12388 80919 912 912 NT_STATUS_OK
ReadX 12388 81831 1980 1980 NT_STATUS_OK
ReadX 12388 83811 2256 2256 NT_STATUS_OK
ReadX 12388 86067 400 400 NT_STATUS_OK
ReadX 12388 86467 252 252 NT_STATUS_OK
ReadX 12388 86719 42 42 NT_STATUS_OK
ReadX 12388 86761 725 725 NT_STATUS_OK
ReadX 12388 2009 512 512 NT_STATUS_OK
ReadX 12388 3895 9 9 NT_STATUS_OK
ReadX 12388 3781 46 46 NT_STATUS_OK
ReadX 12388 4059 92 92 NT_STATUS_OK
ReadX 12388 3781 92 92 NT_STATUS_OK
ReadX 12388 3986 184 184 NT_STATUS_OK
ReadX 12388 3987 16384 16384 NT_STATUS_OK
ReadX 12388 3902 16384 16384 NT_STATUS_OK
ReadX 12388 3781 10240 10240 NT_STATUS_OK
ReadX 12388 3821 16384 16384 NT_STATUS_OK
ReadX 12388 3891 935 935 NT_STATUS_OK
ReadX 12388 4060 10240 10240 NT_STATUS_OK
ReadX 12388 4059 184 184 NT_STATUS_OK
ReadX 12388 256 184 184 NT_STATUS_OK
ReadX 12388 256 1026 1026 NT_STATUS_OK
ReadX 12388 3901 326 326 NT_STATUS_OK
ReadX 12388 3899 652 652 NT_STATUS_OK
ReadX 12388 256 2 2 NT_STATUS_OK
ReadX 12388 258 4948 4948 NT_STATUS_OK
Close 12388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12403 NT_STATUS_OK
Close 12403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12406 NT_STATUS_OK
WriteX 12406 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12406 258 NT_STATUS_OK
WriteX 12406 0 65536 65536 NT_STATUS_OK
WriteX 12406 65536 65536 65536 NT_STATUS_OK
WriteX 12406 131072 65536 65536 NT_STATUS_OK
WriteX 12406 196608 65536 65536 NT_STATUS_OK
WriteX 12406 262144 65536 65536 NT_STATUS_OK
WriteX 12406 327680 65536 65536 NT_STATUS_OK
WriteX 12406 393216 65536 65536 NT_STATUS_OK
WriteX 12406 458752 65536 65536 NT_STATUS_OK
WriteX 12406 524288 65536 65536 NT_STATUS_OK
WriteX 12406 589824 35257 35257 NT_STATUS_OK
Close 12406 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12408 NT_STATUS_OK
Close 12408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
WriteX 12411 0 65536 65536 NT_STATUS_OK
WriteX 12411 65536 65536 65536 NT_STATUS_OK
WriteX 12411 131072 65536 65536 NT_STATUS_OK
WriteX 12411 196608 65536 65536 NT_STATUS_OK
WriteX 12411 262144 65536 65536 NT_STATUS_OK
WriteX 12411 327680 65536 65536 NT_STATUS_OK
WriteX 12411 393216 65536 65536 NT_STATUS_OK
WriteX 12411 458752 65536 65536 NT_STATUS_OK
WriteX 12411 524288 65536 65536 NT_STATUS_OK
WriteX 12411 589824 57598 57598 NT_STATUS_OK
Close 12411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12413 NT_STATUS_OK
WriteX 12413 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12413 258 NT_STATUS_OK
WriteX 12413 0 12543 12543 NT_STATUS_OK
Flush 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12419 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 1005 NT_STATUS_OK
ReadX 12419 1938 24 24 NT_STATUS_OK
ReadX 12419 1920 276 276 NT_STATUS_OK
ReadX 12419 1918 14 14 NT_STATUS_OK
ReadX 12419 1918 7 7 NT_STATUS_OK
ReadX 12419 1919 12 12 NT_STATUS_OK
ReadX 12419 1919 8 8 NT_STATUS_OK
ReadX 12419 1917 15 15 NT_STATUS_OK
ReadX 12419 0 16 16 NT_STATUS_OK
ReadX 12419 16 2048 2048 NT_STATUS_OK
ReadX 12419 2064 2048 2048 NT_STATUS_OK
ReadX 12419 257 2048 2048 NT_STATUS_OK
ReadX 12419 385 2048 2048 NT_STATUS_OK
ReadX 12419 513 2048 2048 NT_STATUS_OK
ReadX 12419 641 2048 2048 NT_STATUS_OK
ReadX 12419 769 2048 2048 NT_STATUS_OK
ReadX 12419 897 2048 2048 NT_STATUS_OK
ReadX 12419 1025 2048 2048 NT_STATUS_OK
ReadX 12419 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12424 NT_STATUS_OK
WriteX 12424 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
WriteX 12424 0 11588 11588 NT_STATUS_OK
Flush 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12425 NT_STATUS_OK
Close 12425 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12429 NT_STATUS_OK
WriteX 12429 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12429 258 NT_STATUS_OK
WriteX 12429 0 11615 11615 NT_STATUS_OK
Flush 12429 NT_STATUS_OK
Close 12429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12431 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12435 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12438 NT_STATUS_OK
WriteX 12438 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 258 NT_STATUS_OK
WriteX 12438 0 65536 65536 NT_STATUS_OK
WriteX 12438 65536 16050 16050 NT_STATUS_OK
Close 12438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 1939 64 64 NT_STATUS_OK
ReadX 12418 128 248 248 NT_STATUS_OK
ReadX 12418 128 568 568 NT_STATUS_OK
ReadX 12418 3872 1536 1536 NT_STATUS_OK
ReadX 12418 3456 2560 2560 NT_STATUS_OK
ReadX 12418 3136 512 512 NT_STATUS_OK
ReadX 12418 2880 4096 4096 NT_STATUS_OK
ReadX 12418 3264 3072 3072 NT_STATUS_OK
ReadX 12418 320 4096 4096 NT_STATUS_OK
ReadX 12418 1024 4096 4096 NT_STATUS_OK
ReadX 12418 3616 4096 4096 NT_STATUS_OK
ReadX 12418 1939 64 64 NT_STATUS_OK
ReadX 12418 128 248 248 NT_STATUS_OK
ReadX 12418 128 608 608 NT_STATUS_OK
ReadX 12418 2858 1024 1024 NT_STATUS_OK
ReadX 12418 2810 4096 4096 NT_STATUS_OK
ReadX 12418 2826 4096 4096 NT_STATUS_OK
ReadX 12418 2580 2048 2048 NT_STATUS_OK
ReadX 12418 2800 2560 2560 NT_STATUS_OK
ReadX 12418 2100 4096 4096 NT_STATUS_OK
ReadX 12418 2084 4096 4096 NT_STATUS_OK
ReadX 12418 868 4096 4096 NT_STATUS_OK
ReadX 12418 2324 4096 4096 NT_STATUS_OK
ReadX 12418 884 4096 4096 NT_STATUS_OK
ReadX 12418 2604 1024 1024 NT_STATUS_OK
ReadX 12418 580 4096 4096 NT_STATUS_OK
ReadX 12418 596 4096 4096 NT_STATUS_OK
ReadX 12418 2752 4096 4096 NT_STATUS_OK
ReadX 12418 2842 1024 1024 NT_STATUS_OK
ReadX 12418 660 4096 4096 NT_STATUS_OK
ReadX 12418 2720 4096 4096 NT_STATUS_OK
ReadX 12418 2736 4096 4096 NT_STATUS_OK
ReadX 12418 628 4096 4096 NT_STATUS_OK
ReadX 12418 2704 4096 4096 NT_STATUS_OK
ReadX 12418 1556 4096 4096 NT_STATUS_OK
ReadX 12418 576 4096 4096 NT_STATUS_OK
ReadX 12418 3168 1536 1536 NT_STATUS_OK
ReadX 12418 832 4096 4096 NT_STATUS_OK
ReadX 12418 1088 4096 4096 NT_STATUS_OK
ReadX 12418 1344 4096 4096 NT_STATUS_OK
ReadX 12418 1600 4096 4096 NT_STATUS_OK
ReadX 12418 1856 4096 4096 NT_STATUS_OK
ReadX 12418 2112 4096 4096 NT_STATUS_OK
ReadX 12418 1892 4096 4096 NT_STATUS_OK
ReadX 12418 820 4096 4096 NT_STATUS_OK
ReadX 12418 788 4096 4096 NT_STATUS_OK
ReadX 12418 1604 4096 4096 NT_STATUS_OK
ReadX 12418 3648 4096 4096 NT_STATUS_OK
ReadX 12418 2608 4096 4096 NT_STATUS_OK
ReadX 12418 548 4096 4096 NT_STATUS_OK
ReadX 12418 740 4096 4096 NT_STATUS_OK
ReadX 12418 1344 4096 4096 NT_STATUS_OK
ReadX 12418 3392 4096 4096 NT_STATUS_OK
ReadX 12418 3904 4096 4096 NT_STATUS_OK
ReadX 12418 644 4096 4096 NT_STATUS_OK
ReadX 12418 676 4096 4096 NT_STATUS_OK
ReadX 12418 2688 4096 4096 NT_STATUS_OK
ReadX 12418 320 4096 4096 NT_STATUS_OK
ReadX 12418 900 4096 4096 NT_STATUS_OK
ReadX 12418 1908 4096 4096 NT_STATUS_OK
ReadX 12418 852 4096 4096 NT_STATUS_OK
ReadX 12418 724 4096 4096 NT_STATUS_OK
ReadX 12418 2292 4096 4096 NT_STATUS_OK
ReadX 12418 612 4096 4096 NT_STATUS_OK
ReadX 12418 388 4096 4096 NT_STATUS_OK
ReadX 12418 2368 4096 4096 NT_STATUS_OK
ReadX 12418 2624 4096 4096 NT_STATUS_OK
ReadX 12418 500 4096 4096 NT_STATUS_OK
ReadX 12418 356 4096 4096 NT_STATUS_OK
ReadX 12418 1024 4096 4096 NT_STATUS_OK
ReadX 12418 576 4096 4096 NT_STATUS_OK
ReadX 12418 340 4096 4096 NT_STATUS_OK
ReadX 12418 420 4096 4096 NT_STATUS_OK
ReadX 12418 1600 4096 4096 NT_STATUS_OK
ReadX 12418 404 4096 4096 NT_STATUS_OK
ReadX 12418 1428 4096 4096 NT_STATUS_OK
ReadX 12418 2656 4096 4096 NT_STATUS_OK
ReadX 12418 2624 4096 4096 NT_STATUS_OK
ReadX 12418 452 4096 4096 NT_STATUS_OK
ReadX 12418 692 4096 4096 NT_STATUS_OK
ReadX 12418 564 4096 4096 NT_STATUS_OK
ReadX 12418 372 4096 4096 NT_STATUS_OK
ReadX 12418 468 4096 4096 NT_STATUS_OK
ReadX 12418 484 4096 4096 NT_STATUS_OK
ReadX 12418 1088 4096 4096 NT_STATUS_OK
ReadX 12418 1924 4096 4096 NT_STATUS_OK
ReadX 12418 2768 4096 4096 NT_STATUS_OK
ReadX 12418 832 4096 4096 NT_STATUS_OK
ReadX 12418 836 4096 4096 NT_STATUS_OK
ReadX 12418 1856 4096 4096 NT_STATUS_OK
ReadX 12418 2640 4096 4096 NT_STATUS_OK
ReadX 12418 436 4096 4096 NT_STATUS_OK
ReadX 12418 1828 4096 4096 NT_STATUS_OK
ReadX 12418 804 4096 4096 NT_STATUS_OK
ReadX 12418 1860 4096 4096 NT_STATUS_OK
ReadX 12418 1812 4096 4096 NT_STATUS_OK
ReadX 12418 756 4096 4096 NT_STATUS_OK
ReadX 12418 1636 4096 4096 NT_STATUS_OK
ReadX 12418 772 4096 4096 NT_STATUS_OK
ReadX 12418 2036 4096 4096 NT_STATUS_OK
ReadX 12418 1220 4096 4096 NT_STATUS_OK
ReadX 12418 1652 4096 4096 NT_STATUS_OK
ReadX 12418 2588 4096 4096 NT_STATUS_OK
ReadX 12418 916 4096 4096 NT_STATUS_OK
ReadX 12418 260 4096 4096 NT_STATUS_OK
ReadX 12418 932 4096 4096 NT_STATUS_OK
ReadX 12418 2624 4096 4096 NT_STATUS_OK
ReadX 12418 308 4096 4096 NT_STATUS_OK
ReadX 12418 292 4096 4096 NT_STATUS_OK
ReadX 12418 1140 4096 4096 NT_STATUS_OK
ReadX 12418 276 4096 4096 NT_STATUS_OK
ReadX 12418 2020 4096 4096 NT_STATUS_OK
ReadX 12418 2880 4096 4096 NT_STATUS_OK
ReadX 12418 516 4096 4096 NT_STATUS_OK
ReadX 12418 1844 4096 4096 NT_STATUS_OK
ReadX 12418 1124 4096 4096 NT_STATUS_OK
ReadX 12418 3136 4096 4096 NT_STATUS_OK
ReadX 12418 324 4096 4096 NT_STATUS_OK
ReadX 12418 1156 4096 4096 NT_STATUS_OK
ReadX 12418 1172 4096 4096 NT_STATUS_OK
ReadX 12418 2112 4096 4096 NT_STATUS_OK
ReadX 12418 2368 4096 4096 NT_STATUS_OK
ReadX 12418 964 4096 4096 NT_STATUS_OK
ReadX 12418 980 4096 4096 NT_STATUS_OK
ReadX 12418 1012 4096 4096 NT_STATUS_OK
ReadX 12418 532 4096 4096 NT_STATUS_OK
ReadX 12418 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12418 1620 4096 4096 NT_STATUS_OK
ReadX 12418 1604 4096 4096 NT_STATUS_OK
ReadX 12418 2116 4096 4096 NT_STATUS_OK
ReadX 12418 2132 4096 4096 NT_STATUS_OK
ReadX 12418 2148 4096 4096 NT_STATUS_OK
ReadX 12418 2276 4096 4096 NT_STATUS_OK
ReadX 12418 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12443 NT_STATUS_OK
QUERY_FILE_INFORMATION 12398 1004 NT_STATUS_OK
Close 12398 NT_STATUS_OK
WriteX 12443 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12400 1004 NT_STATUS_OK
Close 12400 NT_STATUS_OK
WriteX 12443 0 65536 65536 NT_STATUS_OK
WriteX 12443 65536 64850 64850 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12445 NT_STATUS_OK
WriteX 12445 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12445 258 NT_STATUS_OK
ReadX 12418 2068 4096 4096 NT_STATUS_OK
ReadX 12418 1588 4096 4096 NT_STATUS_OK
ReadX 12418 1572 4096 4096 NT_STATUS_OK
WriteX 12445 0 18630 18630 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
Close 12445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12447 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12418 612 4096 4096 NT_STATUS_OK
ReadX 12418 564 4096 4096 NT_STATUS_OK
ReadX 12418 1876 4096 4096 NT_STATUS_OK
ReadX 12418 628 4096 4096 NT_STATUS_OK
ReadX 12418 740 4096 4096 NT_STATUS_OK
ReadX 12418 724 4096 4096 NT_STATUS_OK
ReadX 12418 644 4096 4096 NT_STATUS_OK
ReadX 12418 2324 4096 4096 NT_STATUS_OK
ReadX 12418 660 4096 4096 NT_STATUS_OK
ReadX 12418 852 4096 4096 NT_STATUS_OK
ReadX 12418 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12418 2368 4096 4096 NT_STATUS_OK
ReadX 12418 1024 4096 4096 NT_STATUS_OK
ReadX 12418 320 4096 4096 NT_STATUS_OK
ReadX 12418 580 4096 4096 NT_STATUS_OK
ReadX 12418 3136 512 512 NT_STATUS_OK
ReadX 12418 2880 4096 4096 NT_STATUS_OK
Close 12418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 61440 4096 4096 NT_STATUS_OK
ReadX 12450 126976 4096 4096 NT_STATUS_OK
WriteX 12450 0 65536 65536 NT_STATUS_OK
WriteX 12450 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 61440 4096 4096 NT_STATUS_OK
ReadX 12451 126976 4096 4096 NT_STATUS_OK
ReadX 12451 192512 4096 4096 NT_STATUS_OK
ReadX 12451 258048 4096 4096 NT_STATUS_OK
WriteX 12451 0 65536 65536 NT_STATUS_OK
WriteX 12451 65536 65536 65536 NT_STATUS_OK
WriteX 12451 131072 65536 65536 NT_STATUS_OK
WriteX 12451 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 61440 4096 4096 NT_STATUS_OK
ReadX 12452 126976 4096 4096 NT_STATUS_OK
ReadX 12452 192512 4096 4096 NT_STATUS_OK
ReadX 12452 258048 4096 4096 NT_STATUS_OK
ReadX 12452 323584 4096 4096 NT_STATUS_OK
ReadX 12452 389120 4096 4096 NT_STATUS_OK
ReadX 12452 454656 4096 4096 NT_STATUS_OK
ReadX 12452 520192 4096 4096 NT_STATUS_OK
WriteX 12452 0 65536 65536 NT_STATUS_OK
WriteX 12452 65536 65536 65536 NT_STATUS_OK
WriteX 12452 131072 65536 65536 NT_STATUS_OK
WriteX 12452 196608 65536 65536 NT_STATUS_OK
WriteX 12452 262144 65536 65536 NT_STATUS_OK
WriteX 12452 327680 65536 65536 NT_STATUS_OK
WriteX 12452 393216 65536 65536 NT_STATUS_OK
WriteX 12452 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12454 NT_STATUS_OK
Close 12454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12455 NT_STATUS_OK
WriteX 12455 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12453 0 8192 8192 NT_STATUS_OK
Flush 12453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12453 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12453 0 8192 8192 NT_STATUS_OK
Flush 12453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12453 0 8192 8192 NT_STATUS_OK
Flush 12453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12453 0 8192 8192 NT_STATUS_OK
Flush 12453 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12460 NT_STATUS_OK
WriteX 12460 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12460 258 NT_STATUS_OK
WriteX 12460 0 62591 62591 NT_STATUS_OK
Close 12460 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12462 NT_STATUS_OK
Close 12462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12465 NT_STATUS_OK
WriteX 12465 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12465 258 NT_STATUS_OK
WriteX 12465 0 10845 10845 NT_STATUS_OK
Close 12465 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12467 NT_STATUS_OK
Close 12467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12470 NT_STATUS_OK
WriteX 12470 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12470 258 NT_STATUS_OK
WriteX 12470 0 30118 30118 NT_STATUS_OK
Close 12470 NT_STATUS_OK
WriteX 12453 0 4096 4096 NT_STATUS_OK
WriteX 12455 0 64 64 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 61440 61440 NT_STATUS_OK
ReadX 12472 61440 4096 4096 NT_STATUS_OK
ReadX 12472 65536 61440 61440 NT_STATUS_OK
ReadX 12472 126976 4096 4096 NT_STATUS_OK
ReadX 12472 131072 61440 61440 NT_STATUS_OK
ReadX 12472 192512 4096 4096 NT_STATUS_OK
ReadX 12472 196608 61440 61440 NT_STATUS_OK
ReadX 12472 258048 4096 4096 NT_STATUS_OK
ReadX 12472 262144 61440 61440 NT_STATUS_OK
ReadX 12472 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 61440 61440 NT_STATUS_OK
ReadX 12473 61440 4096 4096 NT_STATUS_OK
ReadX 12473 65536 61440 61440 NT_STATUS_OK
ReadX 12473 126976 4096 4096 NT_STATUS_OK
ReadX 12473 131072 61440 61440 NT_STATUS_OK
ReadX 12473 192512 4096 4096 NT_STATUS_OK
ReadX 12473 196608 61440 61440 NT_STATUS_OK
ReadX 12473 258048 4096 4096 NT_STATUS_OK
ReadX 12473 262144 61440 61440 NT_STATUS_OK
ReadX 12473 323584 4096 4096 NT_STATUS_OK
ReadX 12473 327680 61440 61440 NT_STATUS_OK
ReadX 12473 389120 4096 4096 NT_STATUS_OK
ReadX 12473 393216 61440 61440 NT_STATUS_OK
ReadX 12473 454656 4096 4096 NT_STATUS_OK
ReadX 12473 458752 61440 61440 NT_STATUS_OK
ReadX 12473 520192 4096 4096 NT_STATUS_OK
ReadX 12473 524288 61440 61440 NT_STATUS_OK
ReadX 12473 585728 4096 4096 NT_STATUS_OK
ReadX 12473 589824 61440 61440 NT_STATUS_OK
ReadX 12473 651264 4096 4096 NT_STATUS_OK
ReadX 12473 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 61440 61440 NT_STATUS_OK
ReadX 12474 61440 4096 4096 NT_STATUS_OK
ReadX 12474 65536 61440 61440 NT_STATUS_OK
ReadX 12474 126976 4096 4096 NT_STATUS_OK
ReadX 12474 131072 61440 61440 NT_STATUS_OK
ReadX 12474 192512 4096 4096 NT_STATUS_OK
ReadX 12474 196608 61440 61440 NT_STATUS_OK
ReadX 12474 258048 4096 4096 NT_STATUS_OK
ReadX 12474 262144 61440 61440 NT_STATUS_OK
ReadX 12474 323584 4096 4096 NT_STATUS_OK
ReadX 12474 327680 61440 61440 NT_STATUS_OK
ReadX 12474 389120 4096 4096 NT_STATUS_OK
ReadX 12474 393216 61440 61440 NT_STATUS_OK
ReadX 12474 454656 4096 4096 NT_STATUS_OK
ReadX 12474 458752 61440 61440 NT_STATUS_OK
ReadX 12474 520192 4096 4096 NT_STATUS_OK
ReadX 12474 524288 61440 61440 NT_STATUS_OK
ReadX 12474 585728 4096 4096 NT_STATUS_OK
ReadX 12474 589824 61440 61440 NT_STATUS_OK
ReadX 12474 651264 4096 4096 NT_STATUS_OK
ReadX 12474 655360 61440 61440 NT_STATUS_OK
ReadX 12474 716800 4096 4096 NT_STATUS_OK
ReadX 12474 720896 61440 61440 NT_STATUS_OK
ReadX 12474 782336 4096 4096 NT_STATUS_OK
ReadX 12474 786432 61440 61440 NT_STATUS_OK
ReadX 12474 847872 4096 4096 NT_STATUS_OK
ReadX 12474 851968 61440 61440 NT_STATUS_OK
ReadX 12474 913408 4096 4096 NT_STATUS_OK
ReadX 12474 917504 61440 61440 NT_STATUS_OK
ReadX 12474 978944 4096 4096 NT_STATUS_OK
ReadX 12474 983040 61440 61440 NT_STATUS_OK
ReadX 12474 1044480 4096 4096 NT_STATUS_OK
ReadX 12474 1048576 61440 61440 NT_STATUS_OK
ReadX 12474 1110016 4096 4096 NT_STATUS_OK
ReadX 12474 1114112 61440 61440 NT_STATUS_OK
ReadX 12474 1175552 4096 4096 NT_STATUS_OK
ReadX 12474 1179648 61440 61440 NT_STATUS_OK
ReadX 12474 1241088 4096 4096 NT_STATUS_OK
ReadX 12474 1245184 61440 61440 NT_STATUS_OK
ReadX 12474 1306624 4096 4096 NT_STATUS_OK
ReadX 12474 1310720 61440 61440 NT_STATUS_OK
ReadX 12474 1372160 4096 4096 NT_STATUS_OK
ReadX 12474 1376256 61440 61440 NT_STATUS_OK
ReadX 12474 1437696 4096 4096 NT_STATUS_OK
ReadX 12474 1441792 61440 61440 NT_STATUS_OK
ReadX 12474 1503232 4096 4096 NT_STATUS_OK
ReadX 12474 1507328 61440 61440 NT_STATUS_OK
ReadX 12474 1568768 4096 4096 NT_STATUS_OK
ReadX 12474 1572864 61440 61440 NT_STATUS_OK
ReadX 12474 1634304 4096 4096 NT_STATUS_OK
ReadX 12474 1638400 61440 61440 NT_STATUS_OK
ReadX 12474 1699840 4096 4096 NT_STATUS_OK
ReadX 12474 1703936 61440 61440 NT_STATUS_OK
ReadX 12474 1765376 4096 4096 NT_STATUS_OK
ReadX 12474 1769472 61440 61440 NT_STATUS_OK
ReadX 12474 1830912 4096 4096 NT_STATUS_OK
ReadX 12474 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12475 NT_STATUS_OK
Close 12475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12472 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
ReadX 12479 4096 4096 4096 NT_STATUS_OK
ReadX 12479 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12483 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 8192 8192 NT_STATUS_OK
ReadX 12487 8192 8192 8192 NT_STATUS_OK
ReadX 12487 16384 8192 8192 NT_STATUS_OK
ReadX 12487 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12492 NT_STATUS_OK
WriteX 12492 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
WriteX 12492 0 10438 10438 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12493 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12495 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12496 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12498 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12500 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 4096 4096 NT_STATUS_OK
ReadX 12501 4096 4096 4096 NT_STATUS_OK
ReadX 12501 8192 4096 4096 NT_STATUS_OK
ReadX 12501 12288 8192 8192 NT_STATUS_OK
ReadX 12501 20480 8192 8192 NT_STATUS_OK
ReadX 12501 28672 8192 8192 NT_STATUS_OK
ReadX 12501 36864 8192 8192 NT_STATUS_OK
ReadX 12501 45056 8192 8192 NT_STATUS_OK
ReadX 12501 53248 8192 8192 NT_STATUS_OK
ReadX 12501 61440 8192 8192 NT_STATUS_OK
ReadX 12501 69632 8192 8192 NT_STATUS_OK
ReadX 12501 77824 8192 8192 NT_STATUS_OK
ReadX 12501 86016 8192 8192 NT_STATUS_OK
ReadX 12501 94208 8192 8192 NT_STATUS_OK
ReadX 12501 102400 8192 8192 NT_STATUS_OK
ReadX 12501 110592 8192 8192 NT_STATUS_OK
ReadX 12501 118784 8192 8192 NT_STATUS_OK
ReadX 12501 126976 8192 8192 NT_STATUS_OK
ReadX 12501 135168 8192 8192 NT_STATUS_OK
ReadX 12501 143360 8192 8192 NT_STATUS_OK
ReadX 12501 151552 8192 8192 NT_STATUS_OK
ReadX 12501 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12503 NT_STATUS_OK
Close 12503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12506 NT_STATUS_OK
WriteX 12506 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 258 NT_STATUS_OK
WriteX 12506 0 28489 28489 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12507 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12509 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 8192 8192 NT_STATUS_OK
ReadX 12513 8192 8192 8192 NT_STATUS_OK
ReadX 12513 16384 8192 8192 NT_STATUS_OK
ReadX 12513 24576 8192 8192 NT_STATUS_OK
ReadX 12513 32768 16384 16384 NT_STATUS_OK
ReadX 12513 49152 8192 8192 NT_STATUS_OK
ReadX 12513 57344 8192 8192 NT_STATUS_OK
ReadX 12513 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12515 NT_STATUS_OK
Close 12515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12518 NT_STATUS_OK
WriteX 12518 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12518 258 NT_STATUS_OK
WriteX 12518 0 29253 29253 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12519 NT_STATUS_OK
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12522 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12525 NT_STATUS_OK
WriteX 12525 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12525 258 NT_STATUS_OK
WriteX 12525 0 30183 30183 NT_STATUS_OK
Close 12525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12526 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12528 NT_STATUS_OK
WriteX 12528 0 510 510 NT_STATUS_OK
WriteX 12528 510 512 512 NT_STATUS_OK
WriteX 12528 1022 510 510 NT_STATUS_OK
WriteX 12528 1532 510 510 NT_STATUS_OK
WriteX 12528 2042 168 168 NT_STATUS_OK
Close 12528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12529 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
WriteX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 61440 4096 4096 NT_STATUS_OK
ReadX 12532 126976 4096 4096 NT_STATUS_OK
WriteX 12532 0 65536 65536 NT_STATUS_OK
WriteX 12532 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 61440 4096 4096 NT_STATUS_OK
ReadX 12533 126976 4096 4096 NT_STATUS_OK
ReadX 12533 192512 4096 4096 NT_STATUS_OK
ReadX 12533 258048 4096 4096 NT_STATUS_OK
WriteX 12533 0 65536 65536 NT_STATUS_OK
WriteX 12533 65536 65536 65536 NT_STATUS_OK
WriteX 12533 131072 65536 65536 NT_STATUS_OK
WriteX 12533 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 61440 4096 4096 NT_STATUS_OK
ReadX 12534 126976 4096 4096 NT_STATUS_OK
ReadX 12534 192512 4096 4096 NT_STATUS_OK
ReadX 12534 258048 4096 4096 NT_STATUS_OK
ReadX 12534 323584 4096 4096 NT_STATUS_OK
ReadX 12534 389120 4096 4096 NT_STATUS_OK
ReadX 12534 454656 4096 4096 NT_STATUS_OK
ReadX 12534 520192 4096 4096 NT_STATUS_OK
WriteX 12534 0 65536 65536 NT_STATUS_OK
WriteX 12534 65536 65536 65536 NT_STATUS_OK
WriteX 12534 131072 65536 65536 NT_STATUS_OK
WriteX 12534 196608 65536 65536 NT_STATUS_OK
WriteX 12534 262144 65536 65536 NT_STATUS_OK
WriteX 12534 327680 65536 65536 NT_STATUS_OK
WriteX 12534 393216 65536 65536 NT_STATUS_OK
WriteX 12534 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12535 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12537 NT_STATUS_OK
Close 12537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12550 NT_STATUS_OK
Close 12550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12553 NT_STATUS_OK
Close 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12559 NT_STATUS_OK
Close 12559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12574 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12579 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12589 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12597 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12603 NT_STATUS_OK
WriteX 12603 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12603 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12603 0 65536 65536 NT_STATUS_OK
WriteX 12603 65536 65536 65536 NT_STATUS_OK
WriteX 12603 131072 65536 65536 NT_STATUS_OK
WriteX 12603 196608 65536 65536 NT_STATUS_OK
WriteX 12603 262144 26634 26634 NT_STATUS_OK
Close 12603 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12608 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 4096 4096 NT_STATUS_OK
ReadX 12611 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12612 NT_STATUS_OK
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12611 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12616 NT_STATUS_OK
Close 12616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12619 NT_STATUS_OK
Close 12619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12625 NT_STATUS_OK
Close 12625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12630 NT_STATUS_OK
Close 12630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12634 NT_STATUS_OK
Close 12634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12639 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12644 NT_STATUS_OK
Close 12644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12659 NT_STATUS_OK
Close 12659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12678 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12735 0 4096 4096 NT_STATUS_OK
Close 12735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12736 NT_STATUS_OK
ReadX 12736 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
ReadX 12737 4096 4096 4096 NT_STATUS_OK
ReadX 12737 8192 4096 4096 NT_STATUS_OK
ReadX 12737 12288 4096 4096 NT_STATUS_OK
ReadX 12737 16384 4096 4096 NT_STATUS_OK
ReadX 12737 20480 4096 4096 NT_STATUS_OK
ReadX 12737 24576 4096 4096 NT_STATUS_OK
ReadX 12737 28672 4096 4096 NT_STATUS_OK
ReadX 12737 32768 4096 4096 NT_STATUS_OK
ReadX 12737 36864 4096 4096 NT_STATUS_OK
ReadX 12737 40960 4096 4096 NT_STATUS_OK
ReadX 12737 45056 4096 4096 NT_STATUS_OK
ReadX 12737 49152 4096 4096 NT_STATUS_OK
ReadX 12737 53248 4096 4096 NT_STATUS_OK
ReadX 12737 57344 4096 4096 NT_STATUS_OK
ReadX 12737 61440 4096 4096 NT_STATUS_OK
ReadX 12737 65536 4096 4096 NT_STATUS_OK
ReadX 12737 69632 4096 4096 NT_STATUS_OK
ReadX 12737 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12738 NT_STATUS_OK
SET_FILE_INFORMATION 12738 1004 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12740 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12743 NT_STATUS_OK
WriteX 12743 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 65536 65536 NT_STATUS_OK
WriteX 12743 65536 19979 19979 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Flush 12744 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Flush 12744 NT_STATUS_OK
QUERY_FILE_INFORMATION 12744 1004 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Flush 12744 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Flush 12744 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Flush 12744 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Flush 12744 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12746 NT_STATUS_OK
ReadX 12746 0 4096 4096 NT_STATUS_OK
Close 12745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12748 NT_STATUS_OK
ReadX 12748 0 4096 4096 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12749 NT_STATUS_OK
ReadX 12749 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12749 1004 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Close 12749 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12755 NT_STATUS_OK
WriteX 12755 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12755 258 NT_STATUS_OK
WriteX 12755 0 65536 65536 NT_STATUS_OK
WriteX 12755 65536 17654 17654 NT_STATUS_OK
Close 12755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 4096 4096 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
Flush 12756 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
Flush 12756 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 1004 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
Flush 12756 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
Flush 12756 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
Flush 12756 NT_STATUS_OK
SET_FILE_INFORMATION 12756 1004 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
Flush 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12757 NT_STATUS_OK
SET_FILE_INFORMATION 12757 1004 NT_STATUS_OK
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12759 NT_STATUS_OK
Close 12759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
ReadX 12761 4096 4096 4096 NT_STATUS_OK
ReadX 12761 8192 4096 4096 NT_STATUS_OK
ReadX 12761 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12761 16384 4096 4096 NT_STATUS_OK
ReadX 12761 20480 4096 4096 NT_STATUS_OK
ReadX 12761 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
Close 12762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12764 1004 NT_STATUS_OK
WriteX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12770 NT_STATUS_OK
WriteX 12770 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12770 258 NT_STATUS_OK
WriteX 12770 0 65536 65536 NT_STATUS_OK
WriteX 12770 65536 19490 19490 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
WriteX 12771 0 4096 4096 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
WriteX 12771 0 4096 4096 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
QUERY_FILE_INFORMATION 12771 1004 NT_STATUS_OK
WriteX 12771 0 4096 4096 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
WriteX 12771 0 4096 4096 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
WriteX 12771 0 4096 4096 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
SET_FILE_INFORMATION 12771 1004 NT_STATUS_OK
WriteX 12771 0 4096 4096 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
Close 12771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12772 NT_STATUS_OK
SET_FILE_INFORMATION 12772 1004 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12774 NT_STATUS_OK
Close 12774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12776 0 4096 4096 NT_STATUS_OK
Close 12776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
ReadX 12778 4096 4096 4096 NT_STATUS_OK
ReadX 12778 8192 4096 4096 NT_STATUS_OK
ReadX 12778 12288 4096 4096 NT_STATUS_OK
ReadX 12778 16384 4096 4096 NT_STATUS_OK
ReadX 12778 20480 4096 4096 NT_STATUS_OK
ReadX 12778 24576 4096 4096 NT_STATUS_OK
ReadX 12778 28672 4096 4096 NT_STATUS_OK
ReadX 12778 32768 4096 4096 NT_STATUS_OK
ReadX 12778 36864 4096 4096 NT_STATUS_OK
ReadX 12778 40960 4096 4096 NT_STATUS_OK
ReadX 12778 45056 4096 4096 NT_STATUS_OK
ReadX 12778 49152 4096 4096 NT_STATUS_OK
ReadX 12778 53248 4096 4096 NT_STATUS_OK
ReadX 12778 57344 4096 4096 NT_STATUS_OK
ReadX 12778 61440 4096 4096 NT_STATUS_OK
ReadX 12778 65536 4096 4096 NT_STATUS_OK
ReadX 12778 69632 4096 4096 NT_STATUS_OK
ReadX 12778 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12778 1004 NT_STATUS_OK
WriteX 12778 0 4096 4096 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12779 NT_STATUS_OK
SET_FILE_INFORMATION 12779 1004 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12781 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12784 NT_STATUS_OK
WriteX 12784 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 258 NT_STATUS_OK
WriteX 12784 0 65536 65536 NT_STATUS_OK
WriteX 12784 65536 8866 8866 NT_STATUS_OK
Close 12784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
WriteX 12785 0 4096 4096 NT_STATUS_OK
Flush 12785 NT_STATUS_OK
SET_FILE_INFORMATION 12785 1004 NT_STATUS_OK
WriteX 12785 0 4096 4096 NT_STATUS_OK
Flush 12785 NT_STATUS_OK
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12787 NT_STATUS_OK
ReadX 12787 0 4096 4096 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12789 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12789 1004 NT_STATUS_OK
WriteX 12789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12790 NT_STATUS_OK
Close 12790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12780 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12795 NT_STATUS_OK
WriteX 12795 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12795 258 NT_STATUS_OK
WriteX 12795 0 65536 65536 NT_STATUS_OK
WriteX 12795 65536 9298 9298 NT_STATUS_OK
Close 12795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
Flush 12796 NT_STATUS_OK
SET_FILE_INFORMATION 12796 1004 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
Flush 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12797 NT_STATUS_OK
SET_FILE_INFORMATION 12797 1004 NT_STATUS_OK
Close 12797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12802 0 4096 4096 NT_STATUS_OK
Close 12802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12803 4096 4096 4096 NT_STATUS_OK
ReadX 12803 8192 4096 4096 NT_STATUS_OK
ReadX 12803 12288 4096 4096 NT_STATUS_OK
ReadX 12803 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12804 NT_STATUS_OK
ReadX 12804 0 4096 4096 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12806 NT_STATUS_OK
ReadX 12806 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12806 1004 NT_STATUS_OK
WriteX 12806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12806 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12809 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12812 NT_STATUS_OK
WriteX 12812 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12812 258 NT_STATUS_OK
WriteX 12812 0 65536 65536 NT_STATUS_OK
WriteX 12812 65536 11540 11540 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
WriteX 12813 0 4096 4096 NT_STATUS_OK
Flush 12813 NT_STATUS_OK
SET_FILE_INFORMATION 12813 1004 NT_STATUS_OK
WriteX 12813 0 4096 4096 NT_STATUS_OK
Flush 12813 NT_STATUS_OK
Close 12813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12814 NT_STATUS_OK
SET_FILE_INFORMATION 12814 1004 NT_STATUS_OK
Close 12814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 61440 4096 4096 NT_STATUS_OK
ReadX 12818 126976 4096 4096 NT_STATUS_OK
WriteX 12818 0 65536 65536 NT_STATUS_OK
WriteX 12818 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 61440 4096 4096 NT_STATUS_OK
ReadX 12819 126976 4096 4096 NT_STATUS_OK
ReadX 12819 192512 4096 4096 NT_STATUS_OK
ReadX 12819 258048 4096 4096 NT_STATUS_OK
WriteX 12819 0 65536 65536 NT_STATUS_OK
WriteX 12819 65536 65536 65536 NT_STATUS_OK
WriteX 12819 131072 65536 65536 NT_STATUS_OK
WriteX 12819 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 61440 4096 4096 NT_STATUS_OK
ReadX 12820 126976 4096 4096 NT_STATUS_OK
ReadX 12820 192512 4096 4096 NT_STATUS_OK
ReadX 12820 258048 4096 4096 NT_STATUS_OK
ReadX 12820 323584 4096 4096 NT_STATUS_OK
ReadX 12820 389120 4096 4096 NT_STATUS_OK
ReadX 12820 454656 4096 4096 NT_STATUS_OK
ReadX 12820 520192 4096 4096 NT_STATUS_OK
WriteX 12820 0 65536 65536 NT_STATUS_OK
WriteX 12820 65536 65536 65536 NT_STATUS_OK
WriteX 12820 131072 65536 65536 NT_STATUS_OK
WriteX 12820 196608 65536 65536 NT_STATUS_OK
WriteX 12820 262144 65536 65536 NT_STATUS_OK
WriteX 12820 327680 65536 65536 NT_STATUS_OK
WriteX 12820 393216 65536 65536 NT_STATUS_OK
WriteX 12820 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
ReadX 12821 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12822 NT_STATUS_OK
WriteX 12822 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12822 258 NT_STATUS_OK
WriteX 12822 0 53 53 NT_STATUS_OK
Close 12822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12823 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12821 8192 4096 4096 NT_STATUS_OK
ReadX 12821 12288 4096 4096 NT_STATUS_OK
WriteX 12825 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12825 258 NT_STATUS_OK
ReadX 12821 16384 4096 4096 NT_STATUS_OK
ReadX 12821 20480 4096 4096 NT_STATUS_OK
WriteX 12825 0 15360 15360 NT_STATUS_OK
Close 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12826 NT_STATUS_OK
ReadX 12826 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12826 1004 NT_STATUS_OK
WriteX 12826 0 4096 4096 NT_STATUS_OK
Close 12826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12829 NT_STATUS_OK
ReadX 12829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12829 4096 4096 4096 NT_STATUS_OK
ReadX 12829 8192 4096 4096 NT_STATUS_OK
ReadX 12829 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
ReadX 12832 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
ReadX 12833 4096 4096 4096 NT_STATUS_OK
ReadX 12833 8192 4096 4096 NT_STATUS_OK
Close 12832 NT_STATUS_OK
Close 12833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12834 NT_STATUS_OK
WriteX 12834 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12834 258 NT_STATUS_OK
WriteX 12834 0 15360 15360 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12835 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12835 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12839 NT_STATUS_OK
SET_FILE_INFORMATION 12839 1004 NT_STATUS_OK
Close 12839 NT_STATUS_OK
WriteX 12835 0 4096 4096 NT_STATUS_OK
Close 12835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 0 4096 4096 NT_STATUS_OK
ReadX 12842 4096 4096 4096 NT_STATUS_OK
ReadX 12842 8192 4096 4096 NT_STATUS_OK
ReadX 12842 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12842 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12844 NT_STATUS_OK
WriteX 12844 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 258 NT_STATUS_OK
WriteX 12844 0 53 53 NT_STATUS_OK
Close 12844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12843 4096 4096 4096 NT_STATUS_OK
ReadX 12843 8192 4096 4096 NT_STATUS_OK
ReadX 12843 12288 4096 4096 NT_STATUS_OK
WriteX 12847 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 258 NT_STATUS_OK
WriteX 12847 0 12006 12006 NT_STATUS_OK
Close 12847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12848 NT_STATUS_OK
ReadX 12848 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12851 4096 4096 4096 NT_STATUS_OK
ReadX 12851 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12854 NT_STATUS_OK
WriteX 12854 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12854 258 NT_STATUS_OK
WriteX 12854 0 11991 11991 NT_STATUS_OK
Close 12854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12855 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12859 NT_STATUS_OK
SET_FILE_INFORMATION 12859 1004 NT_STATUS_OK
Close 12859 NT_STATUS_OK
WriteX 12855 0 4096 4096 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12860 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12863 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12862 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
ReadX 12862 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
WriteX 12862 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12862 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
Close 12838 NT_STATUS_OK
WriteX 12842 0 19054 19054 NT_STATUS_OK
WriteX 12862 0 12288 12288 NT_STATUS_OK
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 61440 61440 NT_STATUS_OK
ReadX 12869 61440 4096 4096 NT_STATUS_OK
ReadX 12869 65536 61440 61440 NT_STATUS_OK
ReadX 12869 126976 4096 4096 NT_STATUS_OK
ReadX 12869 131072 61440 61440 NT_STATUS_OK
ReadX 12869 192512 4096 4096 NT_STATUS_OK
ReadX 12869 196608 61440 61440 NT_STATUS_OK
ReadX 12869 258048 4096 4096 NT_STATUS_OK
ReadX 12869 262144 61440 61440 NT_STATUS_OK
ReadX 12869 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 61440 61440 NT_STATUS_OK
ReadX 12870 61440 4096 4096 NT_STATUS_OK
ReadX 12870 65536 61440 61440 NT_STATUS_OK
ReadX 12870 126976 4096 4096 NT_STATUS_OK
ReadX 12870 131072 61440 61440 NT_STATUS_OK
ReadX 12870 192512 4096 4096 NT_STATUS_OK
ReadX 12870 196608 61440 61440 NT_STATUS_OK
ReadX 12870 258048 4096 4096 NT_STATUS_OK
ReadX 12870 262144 61440 61440 NT_STATUS_OK
ReadX 12870 323584 4096 4096 NT_STATUS_OK
ReadX 12870 327680 61440 61440 NT_STATUS_OK
ReadX 12870 389120 4096 4096 NT_STATUS_OK
ReadX 12870 393216 61440 61440 NT_STATUS_OK
ReadX 12870 454656 4096 4096 NT_STATUS_OK
ReadX 12870 458752 61440 61440 NT_STATUS_OK
ReadX 12870 520192 4096 4096 NT_STATUS_OK
ReadX 12870 524288 61440 61440 NT_STATUS_OK
ReadX 12870 585728 4096 4096 NT_STATUS_OK
ReadX 12870 589824 61440 61440 NT_STATUS_OK
ReadX 12870 651264 4096 4096 NT_STATUS_OK
ReadX 12870 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 61440 61440 NT_STATUS_OK
ReadX 12871 61440 4096 4096 NT_STATUS_OK
ReadX 12871 65536 61440 61440 NT_STATUS_OK
ReadX 12871 126976 4096 4096 NT_STATUS_OK
ReadX 12871 131072 61440 61440 NT_STATUS_OK
ReadX 12871 192512 4096 4096 NT_STATUS_OK
ReadX 12871 196608 61440 61440 NT_STATUS_OK
ReadX 12871 258048 4096 4096 NT_STATUS_OK
ReadX 12871 262144 61440 61440 NT_STATUS_OK
ReadX 12871 323584 4096 4096 NT_STATUS_OK
ReadX 12871 327680 61440 61440 NT_STATUS_OK
ReadX 12871 389120 4096 4096 NT_STATUS_OK
ReadX 12871 393216 61440 61440 NT_STATUS_OK
ReadX 12871 454656 4096 4096 NT_STATUS_OK
ReadX 12871 458752 61440 61440 NT_STATUS_OK
ReadX 12871 520192 4096 4096 NT_STATUS_OK
ReadX 12871 524288 61440 61440 NT_STATUS_OK
ReadX 12871 585728 4096 4096 NT_STATUS_OK
ReadX 12871 589824 61440 61440 NT_STATUS_OK
ReadX 12871 651264 4096 4096 NT_STATUS_OK
ReadX 12871 655360 61440 61440 NT_STATUS_OK
ReadX 12871 716800 4096 4096 NT_STATUS_OK
ReadX 12871 720896 61440 61440 NT_STATUS_OK
ReadX 12871 782336 4096 4096 NT_STATUS_OK
ReadX 12871 786432 61440 61440 NT_STATUS_OK
ReadX 12871 847872 4096 4096 NT_STATUS_OK
ReadX 12871 851968 61440 61440 NT_STATUS_OK
ReadX 12871 913408 4096 4096 NT_STATUS_OK
ReadX 12871 917504 61440 61440 NT_STATUS_OK
ReadX 12871 978944 4096 4096 NT_STATUS_OK
ReadX 12871 983040 61440 61440 NT_STATUS_OK
ReadX 12871 1044480 4096 4096 NT_STATUS_OK
ReadX 12871 1048576 61440 61440 NT_STATUS_OK
ReadX 12871 1110016 4096 4096 NT_STATUS_OK
ReadX 12871 1114112 61440 61440 NT_STATUS_OK
ReadX 12871 1175552 4096 4096 NT_STATUS_OK
ReadX 12871 1179648 61440 61440 NT_STATUS_OK
ReadX 12871 1241088 4096 4096 NT_STATUS_OK
ReadX 12871 1245184 61440 61440 NT_STATUS_OK
ReadX 12871 1306624 4096 4096 NT_STATUS_OK
ReadX 12871 1310720 61440 61440 NT_STATUS_OK
ReadX 12871 1372160 4096 4096 NT_STATUS_OK
ReadX 12871 1376256 61440 61440 NT_STATUS_OK
ReadX 12871 1437696 4096 4096 NT_STATUS_OK
ReadX 12871 1441792 61440 61440 NT_STATUS_OK
ReadX 12871 1503232 4096 4096 NT_STATUS_OK
ReadX 12871 1507328 61440 61440 NT_STATUS_OK
ReadX 12871 1568768 4096 4096 NT_STATUS_OK
ReadX 12871 1572864 61440 61440 NT_STATUS_OK
ReadX 12871 1634304 4096 4096 NT_STATUS_OK
ReadX 12871 1638400 61440 61440 NT_STATUS_OK
ReadX 12871 1699840 4096 4096 NT_STATUS_OK
ReadX 12871 1703936 61440 61440 NT_STATUS_OK
ReadX 12871 1765376 4096 4096 NT_STATUS_OK
ReadX 12871 1769472 61440 61440 NT_STATUS_OK
ReadX 12871 1830912 4096 4096 NT_STATUS_OK
ReadX 12871 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12873 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12874 NT_STATUS_OK
ReadX 12874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12878 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12880 NT_STATUS_OK
WriteX 12880 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 258 NT_STATUS_OK
WriteX 12880 0 491 491 NT_STATUS_OK
Close 12880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12881 NT_STATUS_OK
ReadX 12881 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12883 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12884 NT_STATUS_OK
WriteX 12884 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12884 258 NT_STATUS_OK
WriteX 12884 0 543 543 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12871 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Close 12873 NT_STATUS_OK
Close 12874 NT_STATUS_OK
Close 12875 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12893 NT_STATUS_OK
ReadX 12893 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12898 NT_STATUS_OK
QUERY_FILE_INFORMATION 12898 1004 NT_STATUS_OK
WriteX 12898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12898 258 NT_STATUS_OK
WriteX 12898 0 2048 2048 NT_STATUS_OK
Close 12898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12899 NT_STATUS_OK
ReadX 12899 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
Flush 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12899 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12904 NT_STATUS_OK
WriteX 12904 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12904 258 NT_STATUS_OK
WriteX 12904 0 2048 2048 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12905 NT_STATUS_OK
ReadX 12905 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12909 NT_STATUS_OK
Close 12909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12910 NT_STATUS_OK
WriteX 12910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 2048 2048 NT_STATUS_OK
Close 12910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 2048 2048 NT_STATUS_OK
ReadX 12889 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12905 0 4096 4096 NT_STATUS_OK
WriteX 12889 0 8192 8192 NT_STATUS_OK
WriteX 12890 0 4096 4096 NT_STATUS_OK
WriteX 12891 0 4096 4096 NT_STATUS_OK
ReadX 12905 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12915 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12892 NT_STATUS_OK
Close 12905 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12926 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12927 NT_STATUS_OK
ReadX 12927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12929 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12935 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1004 NT_STATUS_OK
WriteX 12935 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 258 NT_STATUS_OK
WriteX 12935 0 2048 2048 NT_STATUS_OK
Close 12935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12936 NT_STATUS_OK
ReadX 12936 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12943 NT_STATUS_OK
QUERY_FILE_INFORMATION 12943 1004 NT_STATUS_OK
WriteX 12943 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12943 258 NT_STATUS_OK
WriteX 12943 0 2048 2048 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12936 0 4096 4096 NT_STATUS_OK
Flush 12936 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12938 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12946 NT_STATUS_OK
WriteX 12946 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 258 NT_STATUS_OK
WriteX 12946 0 4096 4096 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12949 NT_STATUS_OK
WriteX 12949 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12949 258 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Close 12949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12950 0 4096 4096 NT_STATUS_OK
Close 12947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Close 12927 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12956 NT_STATUS_OK
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12957 NT_STATUS_OK
WriteX 12957 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12957 258 NT_STATUS_OK
WriteX 12957 0 2048 2048 NT_STATUS_OK
Close 12957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12962 NT_STATUS_OK
ReadX 12962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12971 NT_STATUS_OK
ReadX 12971 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12972 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12955 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Close 12959 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Close 12961 NT_STATUS_OK
Close 12962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12974 NT_STATUS_OK
QUERY_FILE_INFORMATION 12974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12983 NT_STATUS_OK
ReadX 12983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12984 NT_STATUS_OK
ReadX 12984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12985 NT_STATUS_OK
ReadX 12985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12986 NT_STATUS_OK
ReadX 12986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12994 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 1004 NT_STATUS_OK
WriteX 12994 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 258 NT_STATUS_OK
WriteX 12994 0 2048 2048 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12996 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13006 NT_STATUS_OK
QUERY_FILE_INFORMATION 13006 1004 NT_STATUS_OK
WriteX 13006 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13006 258 NT_STATUS_OK
WriteX 13006 0 2048 2048 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13009 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13014 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 258 NT_STATUS_OK
WriteX 13014 0 2048 2048 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13015 0 4096 4096 NT_STATUS_OK
Flush 13015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12997 4096 16384 16384 NT_STATUS_OK
ReadX 12977 4096 16384 16384 NT_STATUS_OK
ReadX 13009 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 2048 2048 NT_STATUS_OK
WriteX 13017 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13018 NT_STATUS_OK
QUERY_FILE_INFORMATION 13018 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12981 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Close 13009 NT_STATUS_OK
Close 12983 NT_STATUS_OK
Close 12986 NT_STATUS_OK
Close 12987 NT_STATUS_OK
Close 12984 NT_STATUS_OK
Close 12985 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13020 NT_STATUS_OK
QUERY_FILE_INFORMATION 13020 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13022 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13025 4096 16384 16384 NT_STATUS_OK
WriteX 13025 0 4096 4096 NT_STATUS_OK
WriteX 13026 0 4096 4096 NT_STATUS_OK
WriteX 13027 0 4096 4096 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13033 NT_STATUS_OK
ReadX 13033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13034 NT_STATUS_OK
ReadX 13034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13035 NT_STATUS_OK
ReadX 13035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13042 NT_STATUS_OK
ReadX 13042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13043 NT_STATUS_OK
ReadX 13043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13044 NT_STATUS_OK
ReadX 13044 0 8192 8192 NT_STATUS_OK
ReadX 13031 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13045 0 4096 4096 NT_STATUS_OK
ReadX 13045 4096 4096 4096 NT_STATUS_OK
ReadX 13045 8192 4096 4096 NT_STATUS_OK
WriteX 13031 0 4096 4096 NT_STATUS_OK
WriteX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
ReadX 13046 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13025 0 4096 4096 NT_STATUS_OK
WriteX 13026 0 4096 4096 NT_STATUS_OK
WriteX 13027 0 4096 4096 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13051 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1004 NT_STATUS_OK
WriteX 13051 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 258 NT_STATUS_OK
WriteX 13051 0 2048 2048 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13052 NT_STATUS_OK
ReadX 13052 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13052 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13054 NT_STATUS_OK
ReadX 13054 0 4096 4096 NT_STATUS_OK
ReadX 13054 4096 4096 4096 NT_STATUS_OK
WriteX 13054 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
ReadX 13056 4096 4096 4096 NT_STATUS_OK
WriteX 13056 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13057 NT_STATUS_OK
QUERY_FILE_INFORMATION 13057 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13044 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Close 13026 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13040 NT_STATUS_OK
Close 13041 NT_STATUS_OK
Close 13043 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
Close 13033 NT_STATUS_OK
Close 13034 NT_STATUS_OK
Close 13056 NT_STATUS_OK
Close 13045 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13059 0 4096 4096 NT_STATUS_OK
ReadX 13059 4096 4096 4096 NT_STATUS_OK
ReadX 13059 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13061 NT_STATUS_OK
ReadX 13061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
ReadX 13060 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13077 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
WriteX 13077 0 2048 2048 NT_STATUS_OK
Close 13077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13078 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13082 NT_STATUS_OK
Close 13082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13083 NT_STATUS_OK
QUERY_FILE_INFORMATION 13083 1004 NT_STATUS_OK
WriteX 13083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13083 258 NT_STATUS_OK
WriteX 13083 0 2048 2048 NT_STATUS_OK
Close 13083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13067 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13085 NT_STATUS_OK
QUERY_FILE_INFORMATION 13085 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13071 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13072 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Close 13064 NT_STATUS_OK
Close 13065 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13068 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13087 NT_STATUS_OK
QUERY_FILE_INFORMATION 13087 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 61440 4096 4096 NT_STATUS_OK
ReadX 13089 126976 4096 4096 NT_STATUS_OK
WriteX 13089 0 65536 65536 NT_STATUS_OK
WriteX 13089 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 61440 4096 4096 NT_STATUS_OK
ReadX 13090 126976 4096 4096 NT_STATUS_OK
ReadX 13090 192512 4096 4096 NT_STATUS_OK
ReadX 13090 258048 4096 4096 NT_STATUS_OK
WriteX 13090 0 65536 65536 NT_STATUS_OK
WriteX 13090 65536 65536 65536 NT_STATUS_OK
WriteX 13090 131072 65536 65536 NT_STATUS_OK
WriteX 13090 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 61440 4096 4096 NT_STATUS_OK
ReadX 13091 126976 4096 4096 NT_STATUS_OK
ReadX 13091 192512 4096 4096 NT_STATUS_OK
ReadX 13091 258048 4096 4096 NT_STATUS_OK
ReadX 13091 323584 4096 4096 NT_STATUS_OK
ReadX 13091 389120 4096 4096 NT_STATUS_OK
ReadX 13091 454656 4096 4096 NT_STATUS_OK
ReadX 13091 520192 4096 4096 NT_STATUS_OK
WriteX 13091 0 65536 65536 NT_STATUS_OK
WriteX 13091 65536 65536 65536 NT_STATUS_OK
WriteX 13091 131072 65536 65536 NT_STATUS_OK
WriteX 13091 196608 65536 65536 NT_STATUS_OK
WriteX 13091 262144 65536 65536 NT_STATUS_OK
WriteX 13091 327680 65536 65536 NT_STATUS_OK
WriteX 13091 393216 65536 65536 NT_STATUS_OK
WriteX 13091 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13092 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13092 8192 4096 4096 NT_STATUS_OK
ReadX 13092 12288 4096 4096 NT_STATUS_OK
ReadX 13092 16384 4096 4096 NT_STATUS_OK
ReadX 13092 20480 4096 4096 NT_STATUS_OK
ReadX 13092 24576 4096 4096 NT_STATUS_OK
ReadX 13092 28672 4096 4096 NT_STATUS_OK
ReadX 13092 32768 4096 4096 NT_STATUS_OK
ReadX 13092 36864 4096 4096 NT_STATUS_OK
ReadX 13092 40960 4096 4096 NT_STATUS_OK
ReadX 13092 45056 4096 4096 NT_STATUS_OK
ReadX 13092 49152 4096 4096 NT_STATUS_OK
ReadX 13092 53248 4096 4096 NT_STATUS_OK
ReadX 13092 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13092 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13093 NT_STATUS_OK
Close 13093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13089 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Close 13091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13095 NT_STATUS_OK
WriteX 13095 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13095 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13095 1004 NT_STATUS_OK
WriteX 13095 0 57088 57088 NT_STATUS_OK
WriteX 13095 0 4096 4096 NT_STATUS_OK
Flush 13095 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13096 NT_STATUS_OK
SET_FILE_INFORMATION 13096 1004 NT_STATUS_OK
Close 13096 NT_STATUS_OK
SET_FILE_INFORMATION 13095 1004 NT_STATUS_OK
WriteX 13095 0 4096 4096 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13099 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13100 NT_STATUS_OK
WriteX 13100 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13100 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13100 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
WriteX 13100 0 51456 51456 NT_STATUS_OK
WriteX 13100 0 4096 4096 NT_STATUS_OK
Flush 13100 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
WriteX 13100 0 4096 4096 NT_STATUS_OK
Close 13100 NT_STATUS_OK
Close 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13104 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13109 NT_STATUS_OK
WriteX 13109 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13109 258 NT_STATUS_OK
WriteX 13109 0 53077 53077 NT_STATUS_OK
Close 13109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13110 NT_STATUS_OK
WriteX 13110 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13110 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13110 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 65536 65536 NT_STATUS_OK
WriteX 13110 65536 1856 1856 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Flush 13110 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13119 NT_STATUS_OK
WriteX 13119 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 258 NT_STATUS_OK
WriteX 13119 0 7983 7983 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13121 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13124 NT_STATUS_OK
WriteX 13124 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13124 258 NT_STATUS_OK
WriteX 13124 0 65536 65536 NT_STATUS_OK
WriteX 13124 65536 65536 65536 NT_STATUS_OK
WriteX 13124 131072 65536 65536 NT_STATUS_OK
WriteX 13124 196608 65536 65536 NT_STATUS_OK
WriteX 13124 262144 65536 65536 NT_STATUS_OK
WriteX 13124 327680 65536 65536 NT_STATUS_OK
WriteX 13124 393216 65536 65536 NT_STATUS_OK
WriteX 13124 458752 46731 46731 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13125 NT_STATUS_OK
WriteX 13125 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13125 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13114 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13125 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13125 1004 NT_STATUS_OK
WriteX 13125 0 65536 65536 NT_STATUS_OK
WriteX 13125 65536 22848 22848 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Flush 13125 NT_STATUS_OK
SET_FILE_INFORMATION 13125 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13125 1004 NT_STATUS_OK
WriteX 13125 0 4096 4096 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13129 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13130 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13130 1004 NT_STATUS_OK
ReadX 13130 8192 4096 4096 NT_STATUS_OK
ReadX 13130 12288 4096 4096 NT_STATUS_OK
ReadX 13130 16384 4096 4096 NT_STATUS_OK
ReadX 13130 20480 4096 4096 NT_STATUS_OK
ReadX 13130 24576 4096 4096 NT_STATUS_OK
ReadX 13130 28672 4096 4096 NT_STATUS_OK
ReadX 13130 32768 4096 4096 NT_STATUS_OK
ReadX 13130 36864 4096 4096 NT_STATUS_OK
ReadX 13130 40960 4096 4096 NT_STATUS_OK
ReadX 13130 45056 4096 4096 NT_STATUS_OK
ReadX 13130 49152 4096 4096 NT_STATUS_OK
ReadX 13130 53248 4096 4096 NT_STATUS_OK
ReadX 13130 57344 4096 4096 NT_STATUS_OK
ReadX 13130 61440 4096 4096 NT_STATUS_OK
ReadX 13130 65536 4096 4096 NT_STATUS_OK
ReadX 13130 69632 4096 4096 NT_STATUS_OK
ReadX 13130 73728 4096 4096 NT_STATUS_OK
ReadX 13130 77824 4096 4096 NT_STATUS_OK
ReadX 13130 81920 4096 4096 NT_STATUS_OK
ReadX 13130 86016 4096 4096 NT_STATUS_OK
ReadX 13130 90112 4096 4096 NT_STATUS_OK
ReadX 13130 94208 4096 4096 NT_STATUS_OK
ReadX 13130 98304 4096 4096 NT_STATUS_OK
ReadX 13130 102400 4096 4096 NT_STATUS_OK
ReadX 13130 106496 4096 4096 NT_STATUS_OK
ReadX 13130 110592 4096 4096 NT_STATUS_OK
ReadX 13130 114688 4096 4096 NT_STATUS_OK
ReadX 13130 118784 4096 4096 NT_STATUS_OK
ReadX 13130 122880 4096 4096 NT_STATUS_OK
ReadX 13130 126976 4096 4096 NT_STATUS_OK
ReadX 13130 131072 4096 4096 NT_STATUS_OK
ReadX 13130 135168 4096 4096 NT_STATUS_OK
ReadX 13130 139264 4096 4096 NT_STATUS_OK
ReadX 13130 143360 4096 4096 NT_STATUS_OK
ReadX 13130 147456 4096 4096 NT_STATUS_OK
ReadX 13130 151552 4096 4096 NT_STATUS_OK
ReadX 13130 155648 4096 4096 NT_STATUS_OK
ReadX 13130 159744 4096 4096 NT_STATUS_OK
ReadX 13130 163840 4096 4096 NT_STATUS_OK
ReadX 13130 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13130 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13131 NT_STATUS_OK
Close 13131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13129 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13133 NT_STATUS_OK
WriteX 13133 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13133 258 NT_STATUS_OK
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13134 NT_STATUS_OK
SET_FILE_INFORMATION 13134 1004 NT_STATUS_OK
Close 13134 NT_STATUS_OK
WriteX 13133 0 42388 42388 NT_STATUS_OK
Close 13133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13137 NT_STATUS_OK
ReadX 13137 0 4096 4096 NT_STATUS_OK
ReadX 13137 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13138 NT_STATUS_OK
WriteX 13138 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13138 258 NT_STATUS_OK
SET_FILE_INFORMATION 13138 1004 NT_STATUS_OK
WriteX 13138 0 42652 42652 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
ReadX 13142 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13147 NT_STATUS_OK
WriteX 13147 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13147 258 NT_STATUS_OK
WriteX 13147 0 65536 65536 NT_STATUS_OK
WriteX 13147 65536 49 49 NT_STATUS_OK
Close 13147 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 61440 61440 NT_STATUS_OK
ReadX 13148 61440 4096 4096 NT_STATUS_OK
ReadX 13148 65536 61440 61440 NT_STATUS_OK
ReadX 13148 126976 4096 4096 NT_STATUS_OK
ReadX 13148 131072 61440 61440 NT_STATUS_OK
ReadX 13148 192512 4096 4096 NT_STATUS_OK
ReadX 13148 196608 61440 61440 NT_STATUS_OK
ReadX 13148 258048 4096 4096 NT_STATUS_OK
ReadX 13148 262144 61440 61440 NT_STATUS_OK
ReadX 13148 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13149 NT_STATUS_OK
ReadX 13149 0 61440 61440 NT_STATUS_OK
ReadX 13149 61440 4096 4096 NT_STATUS_OK
ReadX 13149 65536 61440 61440 NT_STATUS_OK
ReadX 13149 126976 4096 4096 NT_STATUS_OK
ReadX 13149 131072 61440 61440 NT_STATUS_OK
ReadX 13149 192512 4096 4096 NT_STATUS_OK
ReadX 13149 196608 61440 61440 NT_STATUS_OK
ReadX 13149 258048 4096 4096 NT_STATUS_OK
ReadX 13149 262144 61440 61440 NT_STATUS_OK
ReadX 13149 323584 4096 4096 NT_STATUS_OK
ReadX 13149 327680 61440 61440 NT_STATUS_OK
ReadX 13149 389120 4096 4096 NT_STATUS_OK
ReadX 13149 393216 61440 61440 NT_STATUS_OK
ReadX 13149 454656 4096 4096 NT_STATUS_OK
ReadX 13149 458752 61440 61440 NT_STATUS_OK
ReadX 13149 520192 4096 4096 NT_STATUS_OK
ReadX 13149 524288 61440 61440 NT_STATUS_OK
ReadX 13149 585728 4096 4096 NT_STATUS_OK
ReadX 13149 589824 61440 61440 NT_STATUS_OK
ReadX 13149 651264 4096 4096 NT_STATUS_OK
ReadX 13149 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 61440 61440 NT_STATUS_OK
ReadX 13150 61440 4096 4096 NT_STATUS_OK
ReadX 13150 65536 61440 61440 NT_STATUS_OK
ReadX 13150 126976 4096 4096 NT_STATUS_OK
ReadX 13150 131072 61440 61440 NT_STATUS_OK
ReadX 13150 192512 4096 4096 NT_STATUS_OK
ReadX 13150 196608 61440 61440 NT_STATUS_OK
ReadX 13150 258048 4096 4096 NT_STATUS_OK
ReadX 13150 262144 61440 61440 NT_STATUS_OK
ReadX 13150 323584 4096 4096 NT_STATUS_OK
ReadX 13150 327680 61440 61440 NT_STATUS_OK
ReadX 13150 389120 4096 4096 NT_STATUS_OK
ReadX 13150 393216 61440 61440 NT_STATUS_OK
ReadX 13150 454656 4096 4096 NT_STATUS_OK
ReadX 13150 458752 61440 61440 NT_STATUS_OK
ReadX 13150 520192 4096 4096 NT_STATUS_OK
ReadX 13150 524288 61440 61440 NT_STATUS_OK
ReadX 13150 585728 4096 4096 NT_STATUS_OK
ReadX 13150 589824 61440 61440 NT_STATUS_OK
ReadX 13150 651264 4096 4096 NT_STATUS_OK
ReadX 13150 655360 61440 61440 NT_STATUS_OK
ReadX 13150 716800 4096 4096 NT_STATUS_OK
ReadX 13150 720896 61440 61440 NT_STATUS_OK
ReadX 13150 782336 4096 4096 NT_STATUS_OK
ReadX 13150 786432 61440 61440 NT_STATUS_OK
ReadX 13150 847872 4096 4096 NT_STATUS_OK
ReadX 13150 851968 61440 61440 NT_STATUS_OK
ReadX 13150 913408 4096 4096 NT_STATUS_OK
ReadX 13150 917504 61440 61440 NT_STATUS_OK
ReadX 13150 978944 4096 4096 NT_STATUS_OK
ReadX 13150 983040 61440 61440 NT_STATUS_OK
ReadX 13150 1044480 4096 4096 NT_STATUS_OK
ReadX 13150 1048576 61440 61440 NT_STATUS_OK
ReadX 13150 1110016 4096 4096 NT_STATUS_OK
ReadX 13150 1114112 61440 61440 NT_STATUS_OK
ReadX 13150 1175552 4096 4096 NT_STATUS_OK
ReadX 13150 1179648 61440 61440 NT_STATUS_OK
ReadX 13150 1241088 4096 4096 NT_STATUS_OK
ReadX 13150 1245184 61440 61440 NT_STATUS_OK
ReadX 13150 1306624 4096 4096 NT_STATUS_OK
ReadX 13150 1310720 61440 61440 NT_STATUS_OK
ReadX 13150 1372160 4096 4096 NT_STATUS_OK
ReadX 13150 1376256 61440 61440 NT_STATUS_OK
ReadX 13150 1437696 4096 4096 NT_STATUS_OK
ReadX 13150 1441792 61440 61440 NT_STATUS_OK
ReadX 13150 1503232 4096 4096 NT_STATUS_OK
ReadX 13150 1507328 61440 61440 NT_STATUS_OK
ReadX 13150 1568768 4096 4096 NT_STATUS_OK
ReadX 13150 1572864 61440 61440 NT_STATUS_OK
ReadX 13150 1634304 4096 4096 NT_STATUS_OK
ReadX 13150 1638400 61440 61440 NT_STATUS_OK
ReadX 13150 1699840 4096 4096 NT_STATUS_OK
ReadX 13150 1703936 61440 61440 NT_STATUS_OK
ReadX 13150 1765376 4096 4096 NT_STATUS_OK
ReadX 13150 1769472 61440 61440 NT_STATUS_OK
ReadX 13150 1830912 4096 4096 NT_STATUS_OK
ReadX 13150 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13152 NT_STATUS_OK
QUERY_FILE_INFORMATION 13152 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13152 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13152 1005 NT_STATUS_OK
ReadX 13152 2156 24 24 NT_STATUS_OK
ReadX 13152 2139 276 276 NT_STATUS_OK
ReadX 13152 2136 14 14 NT_STATUS_OK
ReadX 13152 2136 7 7 NT_STATUS_OK
ReadX 13152 2138 12 12 NT_STATUS_OK
ReadX 13152 2137 8 8 NT_STATUS_OK
ReadX 13152 2135 15 15 NT_STATUS_OK
ReadX 13152 0 16 16 NT_STATUS_OK
ReadX 13152 16 2048 2048 NT_STATUS_OK
ReadX 13152 2064 2048 2048 NT_STATUS_OK
ReadX 13152 257 2048 2048 NT_STATUS_OK
ReadX 13152 385 2048 2048 NT_STATUS_OK
ReadX 13152 513 2048 2048 NT_STATUS_OK
ReadX 13152 641 2048 2048 NT_STATUS_OK
ReadX 13152 769 2048 2048 NT_STATUS_OK
ReadX 13152 897 2048 2048 NT_STATUS_OK
ReadX 13152 1025 2048 2048 NT_STATUS_OK
ReadX 13152 1153 2048 2048 NT_STATUS_OK
ReadX 13152 1281 2048 2048 NT_STATUS_OK
ReadX 13152 1409 2048 2048 NT_STATUS_OK
ReadX 13152 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13149 NT_STATUS_OK
Close 13150 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13157 NT_STATUS_OK
WriteX 13157 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13157 258 NT_STATUS_OK
WriteX 13157 0 10575 10575 NT_STATUS_OK
Flush 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13158 NT_STATUS_OK
Close 13158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13160 NT_STATUS_OK
ReadX 13160 0 4096 4096 NT_STATUS_OK
Close 13152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13162 NT_STATUS_OK
LockX 13162 2147483538 1 NT_STATUS_OK
UnlockX 13162 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 1005 NT_STATUS_OK
ReadX 13162 0 512 512 NT_STATUS_OK
ReadX 13162 512 512 512 NT_STATUS_OK
ReadX 13162 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 1004 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13163 NT_STATUS_OK
QUERY_FILE_INFORMATION 13163 1005 NT_STATUS_OK
ReadX 13163 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13164 NT_STATUS_OK
LockX 13164 2147483538 1 NT_STATUS_OK
UnlockX 13164 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13164 1005 NT_STATUS_OK
ReadX 13164 0 512 512 NT_STATUS_OK
ReadX 13164 512 512 512 NT_STATUS_OK
ReadX 13164 1024 512 512 NT_STATUS_OK
ReadX 13164 288 20 20 NT_STATUS_OK
ReadX 13164 308 2084 2084 NT_STATUS_OK
ReadX 13164 388 2084 2084 NT_STATUS_OK
ReadX 13164 388 2084 2084 NT_STATUS_OK
ReadX 13151 2157 1386 1386 NT_STATUS_OK
ReadX 13164 2472 399 399 NT_STATUS_OK
ReadX 13164 3072 1536 1536 NT_STATUS_OK
ReadX 13164 544 149 149 NT_STATUS_OK
ReadX 13164 693 485 485 NT_STATUS_OK
Close 13164 NT_STATUS_OK
ReadX 13151 2157 4096 4096 NT_STATUS_OK
ReadX 13151 6253 4096 4096 NT_STATUS_OK
ReadX 13151 10349 4096 4096 NT_STATUS_OK
ReadX 13151 14445 4096 4096 NT_STATUS_OK
ReadX 13151 18541 4096 4096 NT_STATUS_OK
ReadX 13151 22637 256 256 NT_STATUS_OK
ReadX 13151 22893 4096 4096 NT_STATUS_OK
ReadX 13151 26989 4096 4096 NT_STATUS_OK
ReadX 13151 31085 4096 4096 NT_STATUS_OK
ReadX 13151 35181 4096 4096 NT_STATUS_OK
ReadX 13151 39277 4096 4096 NT_STATUS_OK
ReadX 13151 43373 4096 4096 NT_STATUS_OK
ReadX 13151 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13151 2157 1024 1024 NT_STATUS_OK
ReadX 13151 1667 4688 4688 NT_STATUS_OK
ReadX 13151 6355 3516 3516 NT_STATUS_OK
ReadX 13151 9871 16384 16384 NT_STATUS_OK
ReadX 13151 26255 3771 3771 NT_STATUS_OK
ReadX 13151 30026 2048 2048 NT_STATUS_OK
ReadX 13151 32074 1024 1024 NT_STATUS_OK
ReadX 13151 33098 6652 6652 NT_STATUS_OK
ReadX 13151 39750 16384 16384 NT_STATUS_OK
ReadX 13151 56134 10496 10496 NT_STATUS_OK
ReadX 13151 66630 1784 1784 NT_STATUS_OK
ReadX 13151 68414 90 90 NT_STATUS_OK
ReadX 13151 68504 273 273 NT_STATUS_OK
ReadX 13151 68777 1600 1600 NT_STATUS_OK
ReadX 13151 70377 640 640 NT_STATUS_OK
ReadX 13151 71017 1280 1280 NT_STATUS_OK
ReadX 13151 72297 8464 8464 NT_STATUS_OK
ReadX 13151 80761 158 158 NT_STATUS_OK
ReadX 13151 80919 912 912 NT_STATUS_OK
ReadX 13151 81831 1980 1980 NT_STATUS_OK
ReadX 13151 83811 2256 2256 NT_STATUS_OK
ReadX 13151 86067 400 400 NT_STATUS_OK
ReadX 13151 86467 252 252 NT_STATUS_OK
ReadX 13151 86719 42 42 NT_STATUS_OK
ReadX 13151 86761 725 725 NT_STATUS_OK
ReadX 13151 2009 512 512 NT_STATUS_OK
ReadX 13151 3895 9 9 NT_STATUS_OK
ReadX 13151 3781 46 46 NT_STATUS_OK
ReadX 13151 4059 92 92 NT_STATUS_OK
ReadX 13151 3781 92 92 NT_STATUS_OK
ReadX 13151 3986 184 184 NT_STATUS_OK
ReadX 13151 3987 16384 16384 NT_STATUS_OK
ReadX 13151 3902 16384 16384 NT_STATUS_OK
ReadX 13151 3781 10240 10240 NT_STATUS_OK
ReadX 13151 3821 16384 16384 NT_STATUS_OK
ReadX 13151 3891 935 935 NT_STATUS_OK
ReadX 13151 4060 10240 10240 NT_STATUS_OK
ReadX 13151 4059 184 184 NT_STATUS_OK
ReadX 13151 256 184 184 NT_STATUS_OK
ReadX 13151 256 1026 1026 NT_STATUS_OK
ReadX 13151 3901 326 326 NT_STATUS_OK
ReadX 13151 3899 652 652 NT_STATUS_OK
ReadX 13151 256 2 2 NT_STATUS_OK
ReadX 13151 258 4948 4948 NT_STATUS_OK
Close 13151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13166 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13169 NT_STATUS_OK
WriteX 13169 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13169 258 NT_STATUS_OK
WriteX 13169 0 65536 65536 NT_STATUS_OK
WriteX 13169 65536 65536 65536 NT_STATUS_OK
WriteX 13169 131072 65536 65536 NT_STATUS_OK
WriteX 13169 196608 65536 65536 NT_STATUS_OK
WriteX 13169 262144 65536 65536 NT_STATUS_OK
WriteX 13169 327680 65536 65536 NT_STATUS_OK
WriteX 13169 393216 65536 65536 NT_STATUS_OK
WriteX 13169 458752 65536 65536 NT_STATUS_OK
WriteX 13169 524288 65536 65536 NT_STATUS_OK
WriteX 13169 589824 35257 35257 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13171 NT_STATUS_OK
Close 13171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13174 NT_STATUS_OK
WriteX 13174 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13174 258 NT_STATUS_OK
WriteX 13174 0 65536 65536 NT_STATUS_OK
WriteX 13174 65536 65536 65536 NT_STATUS_OK
WriteX 13174 131072 65536 65536 NT_STATUS_OK
WriteX 13174 196608 65536 65536 NT_STATUS_OK
WriteX 13174 262144 65536 65536 NT_STATUS_OK
WriteX 13174 327680 65536 65536 NT_STATUS_OK
WriteX 13174 393216 65536 65536 NT_STATUS_OK
WriteX 13174 458752 65536 65536 NT_STATUS_OK
WriteX 13174 524288 65536 65536 NT_STATUS_OK
WriteX 13174 589824 57598 57598 NT_STATUS_OK
Close 13174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13176 NT_STATUS_OK
WriteX 13176 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13176 258 NT_STATUS_OK
WriteX 13176 0 12543 12543 NT_STATUS_OK
Flush 13176 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13178 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13182 NT_STATUS_OK
QUERY_FILE_INFORMATION 13182 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13182 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13182 1005 NT_STATUS_OK
ReadX 13182 1938 24 24 NT_STATUS_OK
ReadX 13182 1920 276 276 NT_STATUS_OK
ReadX 13182 1918 14 14 NT_STATUS_OK
ReadX 13182 1918 7 7 NT_STATUS_OK
ReadX 13182 1919 12 12 NT_STATUS_OK
ReadX 13182 1919 8 8 NT_STATUS_OK
ReadX 13182 1917 15 15 NT_STATUS_OK
ReadX 13182 0 16 16 NT_STATUS_OK
ReadX 13182 16 2048 2048 NT_STATUS_OK
ReadX 13182 2064 2048 2048 NT_STATUS_OK
ReadX 13182 257 2048 2048 NT_STATUS_OK
ReadX 13182 385 2048 2048 NT_STATUS_OK
ReadX 13182 513 2048 2048 NT_STATUS_OK
ReadX 13182 641 2048 2048 NT_STATUS_OK
ReadX 13182 769 2048 2048 NT_STATUS_OK
ReadX 13182 897 2048 2048 NT_STATUS_OK
ReadX 13182 1025 2048 2048 NT_STATUS_OK
ReadX 13182 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13187 NT_STATUS_OK
WriteX 13187 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
WriteX 13187 0 11588 11588 NT_STATUS_OK
Flush 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13188 NT_STATUS_OK
Close 13188 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
Close 13182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13192 NT_STATUS_OK
WriteX 13192 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13192 258 NT_STATUS_OK
WriteX 13192 0 11615 11615 NT_STATUS_OK
Flush 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13194 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13198 NT_STATUS_OK
Close 13198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13201 NT_STATUS_OK
WriteX 13201 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 65536 65536 NT_STATUS_OK
WriteX 13201 65536 16050 16050 NT_STATUS_OK
Close 13201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 1939 64 64 NT_STATUS_OK
ReadX 13181 128 248 248 NT_STATUS_OK
ReadX 13181 128 568 568 NT_STATUS_OK
ReadX 13181 3872 1536 1536 NT_STATUS_OK
ReadX 13181 3456 2560 2560 NT_STATUS_OK
ReadX 13181 3136 512 512 NT_STATUS_OK
ReadX 13181 2880 4096 4096 NT_STATUS_OK
ReadX 13181 3264 3072 3072 NT_STATUS_OK
ReadX 13181 320 4096 4096 NT_STATUS_OK
ReadX 13181 1024 4096 4096 NT_STATUS_OK
ReadX 13181 3616 4096 4096 NT_STATUS_OK
ReadX 13181 1939 64 64 NT_STATUS_OK
ReadX 13181 128 248 248 NT_STATUS_OK
ReadX 13181 128 608 608 NT_STATUS_OK
ReadX 13181 2858 1024 1024 NT_STATUS_OK
ReadX 13181 2810 4096 4096 NT_STATUS_OK
ReadX 13181 2826 4096 4096 NT_STATUS_OK
ReadX 13181 2580 2048 2048 NT_STATUS_OK
ReadX 13181 2800 2560 2560 NT_STATUS_OK
ReadX 13181 2100 4096 4096 NT_STATUS_OK
ReadX 13181 2084 4096 4096 NT_STATUS_OK
ReadX 13181 868 4096 4096 NT_STATUS_OK
ReadX 13181 2324 4096 4096 NT_STATUS_OK
ReadX 13181 884 4096 4096 NT_STATUS_OK
ReadX 13181 2604 1024 1024 NT_STATUS_OK
ReadX 13181 580 4096 4096 NT_STATUS_OK
ReadX 13181 596 4096 4096 NT_STATUS_OK
ReadX 13181 2752 4096 4096 NT_STATUS_OK
ReadX 13181 2842 1024 1024 NT_STATUS_OK
ReadX 13181 660 4096 4096 NT_STATUS_OK
ReadX 13181 2720 4096 4096 NT_STATUS_OK
ReadX 13181 2736 4096 4096 NT_STATUS_OK
ReadX 13181 628 4096 4096 NT_STATUS_OK
ReadX 13181 2704 4096 4096 NT_STATUS_OK
ReadX 13181 1556 4096 4096 NT_STATUS_OK
ReadX 13181 576 4096 4096 NT_STATUS_OK
ReadX 13181 3168 1536 1536 NT_STATUS_OK
ReadX 13181 832 4096 4096 NT_STATUS_OK
ReadX 13181 1088 4096 4096 NT_STATUS_OK
ReadX 13181 1344 4096 4096 NT_STATUS_OK
ReadX 13181 1600 4096 4096 NT_STATUS_OK
ReadX 13181 1856 4096 4096 NT_STATUS_OK
ReadX 13181 2112 4096 4096 NT_STATUS_OK
ReadX 13181 1892 4096 4096 NT_STATUS_OK
ReadX 13181 820 4096 4096 NT_STATUS_OK
ReadX 13181 788 4096 4096 NT_STATUS_OK
ReadX 13181 1604 4096 4096 NT_STATUS_OK
ReadX 13181 3648 4096 4096 NT_STATUS_OK
ReadX 13181 2608 4096 4096 NT_STATUS_OK
ReadX 13181 548 4096 4096 NT_STATUS_OK
ReadX 13181 740 4096 4096 NT_STATUS_OK
ReadX 13181 1344 4096 4096 NT_STATUS_OK
ReadX 13181 3392 4096 4096 NT_STATUS_OK
ReadX 13181 3904 4096 4096 NT_STATUS_OK
ReadX 13181 644 4096 4096 NT_STATUS_OK
ReadX 13181 676 4096 4096 NT_STATUS_OK
ReadX 13181 2688 4096 4096 NT_STATUS_OK
ReadX 13181 320 4096 4096 NT_STATUS_OK
ReadX 13181 900 4096 4096 NT_STATUS_OK
ReadX 13181 1908 4096 4096 NT_STATUS_OK
ReadX 13181 852 4096 4096 NT_STATUS_OK
ReadX 13181 724 4096 4096 NT_STATUS_OK
ReadX 13181 2292 4096 4096 NT_STATUS_OK
ReadX 13181 612 4096 4096 NT_STATUS_OK
ReadX 13181 388 4096 4096 NT_STATUS_OK
ReadX 13181 2368 4096 4096 NT_STATUS_OK
ReadX 13181 2624 4096 4096 NT_STATUS_OK
ReadX 13181 500 4096 4096 NT_STATUS_OK
ReadX 13181 356 4096 4096 NT_STATUS_OK
ReadX 13181 1024 4096 4096 NT_STATUS_OK
ReadX 13181 576 4096 4096 NT_STATUS_OK
ReadX 13181 340 4096 4096 NT_STATUS_OK
ReadX 13181 420 4096 4096 NT_STATUS_OK
ReadX 13181 1600 4096 4096 NT_STATUS_OK
ReadX 13181 404 4096 4096 NT_STATUS_OK
ReadX 13181 1428 4096 4096 NT_STATUS_OK
ReadX 13181 2656 4096 4096 NT_STATUS_OK
ReadX 13181 2624 4096 4096 NT_STATUS_OK
ReadX 13181 452 4096 4096 NT_STATUS_OK
ReadX 13181 692 4096 4096 NT_STATUS_OK
ReadX 13181 564 4096 4096 NT_STATUS_OK
ReadX 13181 372 4096 4096 NT_STATUS_OK
ReadX 13181 468 4096 4096 NT_STATUS_OK
ReadX 13181 484 4096 4096 NT_STATUS_OK
ReadX 13181 1088 4096 4096 NT_STATUS_OK
ReadX 13181 1924 4096 4096 NT_STATUS_OK
ReadX 13181 2768 4096 4096 NT_STATUS_OK
ReadX 13181 832 4096 4096 NT_STATUS_OK
ReadX 13181 836 4096 4096 NT_STATUS_OK
ReadX 13181 1856 4096 4096 NT_STATUS_OK
ReadX 13181 2640 4096 4096 NT_STATUS_OK
ReadX 13181 436 4096 4096 NT_STATUS_OK
ReadX 13181 1828 4096 4096 NT_STATUS_OK
ReadX 13181 804 4096 4096 NT_STATUS_OK
ReadX 13181 1860 4096 4096 NT_STATUS_OK
ReadX 13181 1812 4096 4096 NT_STATUS_OK
ReadX 13181 756 4096 4096 NT_STATUS_OK
ReadX 13181 1636 4096 4096 NT_STATUS_OK
ReadX 13181 772 4096 4096 NT_STATUS_OK
ReadX 13181 2036 4096 4096 NT_STATUS_OK
ReadX 13181 1220 4096 4096 NT_STATUS_OK
ReadX 13181 1652 4096 4096 NT_STATUS_OK
ReadX 13181 2588 4096 4096 NT_STATUS_OK
ReadX 13181 916 4096 4096 NT_STATUS_OK
ReadX 13181 260 4096 4096 NT_STATUS_OK
ReadX 13181 932 4096 4096 NT_STATUS_OK
ReadX 13181 2624 4096 4096 NT_STATUS_OK
ReadX 13181 308 4096 4096 NT_STATUS_OK
ReadX 13181 292 4096 4096 NT_STATUS_OK
ReadX 13181 1140 4096 4096 NT_STATUS_OK
ReadX 13181 276 4096 4096 NT_STATUS_OK
ReadX 13181 2020 4096 4096 NT_STATUS_OK
ReadX 13181 2880 4096 4096 NT_STATUS_OK
ReadX 13181 516 4096 4096 NT_STATUS_OK
ReadX 13181 1844 4096 4096 NT_STATUS_OK
ReadX 13181 1124 4096 4096 NT_STATUS_OK
ReadX 13181 3136 4096 4096 NT_STATUS_OK
ReadX 13181 324 4096 4096 NT_STATUS_OK
ReadX 13181 1156 4096 4096 NT_STATUS_OK
ReadX 13181 1172 4096 4096 NT_STATUS_OK
ReadX 13181 2112 4096 4096 NT_STATUS_OK
ReadX 13181 2368 4096 4096 NT_STATUS_OK
ReadX 13181 964 4096 4096 NT_STATUS_OK
ReadX 13181 980 4096 4096 NT_STATUS_OK
ReadX 13181 1012 4096 4096 NT_STATUS_OK
ReadX 13181 532 4096 4096 NT_STATUS_OK
ReadX 13181 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13181 1620 4096 4096 NT_STATUS_OK
ReadX 13181 1604 4096 4096 NT_STATUS_OK
ReadX 13181 2116 4096 4096 NT_STATUS_OK
ReadX 13181 2132 4096 4096 NT_STATUS_OK
ReadX 13181 2148 4096 4096 NT_STATUS_OK
ReadX 13181 2276 4096 4096 NT_STATUS_OK
ReadX 13181 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13203 NT_STATUS_OK
Close 13203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13206 NT_STATUS_OK
QUERY_FILE_INFORMATION 13161 1004 NT_STATUS_OK
Close 13161 NT_STATUS_OK
WriteX 13206 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13163 1004 NT_STATUS_OK
Close 13163 NT_STATUS_OK
WriteX 13206 0 65536 65536 NT_STATUS_OK
WriteX 13206 65536 64850 64850 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13208 NT_STATUS_OK
WriteX 13208 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13208 258 NT_STATUS_OK
ReadX 13181 2068 4096 4096 NT_STATUS_OK
ReadX 13181 1588 4096 4096 NT_STATUS_OK
ReadX 13181 1572 4096 4096 NT_STATUS_OK
WriteX 13208 0 18630 18630 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
Close 13208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13210 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13181 612 4096 4096 NT_STATUS_OK
ReadX 13181 564 4096 4096 NT_STATUS_OK
ReadX 13181 1876 4096 4096 NT_STATUS_OK
ReadX 13181 628 4096 4096 NT_STATUS_OK
ReadX 13181 740 4096 4096 NT_STATUS_OK
ReadX 13181 724 4096 4096 NT_STATUS_OK
ReadX 13181 644 4096 4096 NT_STATUS_OK
ReadX 13181 2324 4096 4096 NT_STATUS_OK
ReadX 13181 660 4096 4096 NT_STATUS_OK
ReadX 13181 852 4096 4096 NT_STATUS_OK
ReadX 13181 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13181 2368 4096 4096 NT_STATUS_OK
ReadX 13181 1024 4096 4096 NT_STATUS_OK
ReadX 13181 320 4096 4096 NT_STATUS_OK
ReadX 13181 580 4096 4096 NT_STATUS_OK
ReadX 13181 3136 512 512 NT_STATUS_OK
ReadX 13181 2880 4096 4096 NT_STATUS_OK
Close 13181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 61440 4096 4096 NT_STATUS_OK
ReadX 13213 126976 4096 4096 NT_STATUS_OK
WriteX 13213 0 65536 65536 NT_STATUS_OK
WriteX 13213 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 61440 4096 4096 NT_STATUS_OK
ReadX 13214 126976 4096 4096 NT_STATUS_OK
ReadX 13214 192512 4096 4096 NT_STATUS_OK
ReadX 13214 258048 4096 4096 NT_STATUS_OK
WriteX 13214 0 65536 65536 NT_STATUS_OK
WriteX 13214 65536 65536 65536 NT_STATUS_OK
WriteX 13214 131072 65536 65536 NT_STATUS_OK
WriteX 13214 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 61440 4096 4096 NT_STATUS_OK
ReadX 13215 126976 4096 4096 NT_STATUS_OK
ReadX 13215 192512 4096 4096 NT_STATUS_OK
ReadX 13215 258048 4096 4096 NT_STATUS_OK
ReadX 13215 323584 4096 4096 NT_STATUS_OK
ReadX 13215 389120 4096 4096 NT_STATUS_OK
ReadX 13215 454656 4096 4096 NT_STATUS_OK
ReadX 13215 520192 4096 4096 NT_STATUS_OK
WriteX 13215 0 65536 65536 NT_STATUS_OK
WriteX 13215 65536 65536 65536 NT_STATUS_OK
WriteX 13215 131072 65536 65536 NT_STATUS_OK
WriteX 13215 196608 65536 65536 NT_STATUS_OK
WriteX 13215 262144 65536 65536 NT_STATUS_OK
WriteX 13215 327680 65536 65536 NT_STATUS_OK
WriteX 13215 393216 65536 65536 NT_STATUS_OK
WriteX 13215 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13217 NT_STATUS_OK
Close 13217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13218 NT_STATUS_OK
WriteX 13218 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13218 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13216 0 8192 8192 NT_STATUS_OK
Flush 13216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13216 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13216 0 8192 8192 NT_STATUS_OK
Flush 13216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13216 0 8192 8192 NT_STATUS_OK
Flush 13216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13216 0 8192 8192 NT_STATUS_OK
Flush 13216 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13220 NT_STATUS_OK
Close 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13223 NT_STATUS_OK
WriteX 13223 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13223 258 NT_STATUS_OK
WriteX 13223 0 62591 62591 NT_STATUS_OK
Close 13223 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13225 NT_STATUS_OK
Close 13225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13228 NT_STATUS_OK
WriteX 13228 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13228 258 NT_STATUS_OK
WriteX 13228 0 10845 10845 NT_STATUS_OK
Close 13228 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13233 NT_STATUS_OK
WriteX 13233 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13233 258 NT_STATUS_OK
WriteX 13233 0 30118 30118 NT_STATUS_OK
Close 13233 NT_STATUS_OK
WriteX 13216 0 4096 4096 NT_STATUS_OK
WriteX 13218 0 64 64 NT_STATUS_OK
Close 13218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 61440 61440 NT_STATUS_OK
ReadX 13235 61440 4096 4096 NT_STATUS_OK
ReadX 13235 65536 61440 61440 NT_STATUS_OK
ReadX 13235 126976 4096 4096 NT_STATUS_OK
ReadX 13235 131072 61440 61440 NT_STATUS_OK
ReadX 13235 192512 4096 4096 NT_STATUS_OK
ReadX 13235 196608 61440 61440 NT_STATUS_OK
ReadX 13235 258048 4096 4096 NT_STATUS_OK
ReadX 13235 262144 61440 61440 NT_STATUS_OK
ReadX 13235 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 61440 61440 NT_STATUS_OK
ReadX 13236 61440 4096 4096 NT_STATUS_OK
ReadX 13236 65536 61440 61440 NT_STATUS_OK
ReadX 13236 126976 4096 4096 NT_STATUS_OK
ReadX 13236 131072 61440 61440 NT_STATUS_OK
ReadX 13236 192512 4096 4096 NT_STATUS_OK
ReadX 13236 196608 61440 61440 NT_STATUS_OK
ReadX 13236 258048 4096 4096 NT_STATUS_OK
ReadX 13236 262144 61440 61440 NT_STATUS_OK
ReadX 13236 323584 4096 4096 NT_STATUS_OK
ReadX 13236 327680 61440 61440 NT_STATUS_OK
ReadX 13236 389120 4096 4096 NT_STATUS_OK
ReadX 13236 393216 61440 61440 NT_STATUS_OK
ReadX 13236 454656 4096 4096 NT_STATUS_OK
ReadX 13236 458752 61440 61440 NT_STATUS_OK
ReadX 13236 520192 4096 4096 NT_STATUS_OK
ReadX 13236 524288 61440 61440 NT_STATUS_OK
ReadX 13236 585728 4096 4096 NT_STATUS_OK
ReadX 13236 589824 61440 61440 NT_STATUS_OK
ReadX 13236 651264 4096 4096 NT_STATUS_OK
ReadX 13236 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 61440 61440 NT_STATUS_OK
ReadX 13237 61440 4096 4096 NT_STATUS_OK
ReadX 13237 65536 61440 61440 NT_STATUS_OK
ReadX 13237 126976 4096 4096 NT_STATUS_OK
ReadX 13237 131072 61440 61440 NT_STATUS_OK
ReadX 13237 192512 4096 4096 NT_STATUS_OK
ReadX 13237 196608 61440 61440 NT_STATUS_OK
ReadX 13237 258048 4096 4096 NT_STATUS_OK
ReadX 13237 262144 61440 61440 NT_STATUS_OK
ReadX 13237 323584 4096 4096 NT_STATUS_OK
ReadX 13237 327680 61440 61440 NT_STATUS_OK
ReadX 13237 389120 4096 4096 NT_STATUS_OK
ReadX 13237 393216 61440 61440 NT_STATUS_OK
ReadX 13237 454656 4096 4096 NT_STATUS_OK
ReadX 13237 458752 61440 61440 NT_STATUS_OK
ReadX 13237 520192 4096 4096 NT_STATUS_OK
ReadX 13237 524288 61440 61440 NT_STATUS_OK
ReadX 13237 585728 4096 4096 NT_STATUS_OK
ReadX 13237 589824 61440 61440 NT_STATUS_OK
ReadX 13237 651264 4096 4096 NT_STATUS_OK
ReadX 13237 655360 61440 61440 NT_STATUS_OK
ReadX 13237 716800 4096 4096 NT_STATUS_OK
ReadX 13237 720896 61440 61440 NT_STATUS_OK
ReadX 13237 782336 4096 4096 NT_STATUS_OK
ReadX 13237 786432 61440 61440 NT_STATUS_OK
ReadX 13237 847872 4096 4096 NT_STATUS_OK
ReadX 13237 851968 61440 61440 NT_STATUS_OK
ReadX 13237 913408 4096 4096 NT_STATUS_OK
ReadX 13237 917504 61440 61440 NT_STATUS_OK
ReadX 13237 978944 4096 4096 NT_STATUS_OK
ReadX 13237 983040 61440 61440 NT_STATUS_OK
ReadX 13237 1044480 4096 4096 NT_STATUS_OK
ReadX 13237 1048576 61440 61440 NT_STATUS_OK
ReadX 13237 1110016 4096 4096 NT_STATUS_OK
ReadX 13237 1114112 61440 61440 NT_STATUS_OK
ReadX 13237 1175552 4096 4096 NT_STATUS_OK
ReadX 13237 1179648 61440 61440 NT_STATUS_OK
ReadX 13237 1241088 4096 4096 NT_STATUS_OK
ReadX 13237 1245184 61440 61440 NT_STATUS_OK
ReadX 13237 1306624 4096 4096 NT_STATUS_OK
ReadX 13237 1310720 61440 61440 NT_STATUS_OK
ReadX 13237 1372160 4096 4096 NT_STATUS_OK
ReadX 13237 1376256 61440 61440 NT_STATUS_OK
ReadX 13237 1437696 4096 4096 NT_STATUS_OK
ReadX 13237 1441792 61440 61440 NT_STATUS_OK
ReadX 13237 1503232 4096 4096 NT_STATUS_OK
ReadX 13237 1507328 61440 61440 NT_STATUS_OK
ReadX 13237 1568768 4096 4096 NT_STATUS_OK
ReadX 13237 1572864 61440 61440 NT_STATUS_OK
ReadX 13237 1634304 4096 4096 NT_STATUS_OK
ReadX 13237 1638400 61440 61440 NT_STATUS_OK
ReadX 13237 1699840 4096 4096 NT_STATUS_OK
ReadX 13237 1703936 61440 61440 NT_STATUS_OK
ReadX 13237 1765376 4096 4096 NT_STATUS_OK
ReadX 13237 1769472 61440 61440 NT_STATUS_OK
ReadX 13237 1830912 4096 4096 NT_STATUS_OK
ReadX 13237 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13238 NT_STATUS_OK
Close 13238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13236 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
ReadX 13242 4096 4096 4096 NT_STATUS_OK
ReadX 13242 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13246 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 8192 8192 NT_STATUS_OK
ReadX 13250 8192 8192 8192 NT_STATUS_OK
ReadX 13250 16384 8192 8192 NT_STATUS_OK
ReadX 13250 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13255 NT_STATUS_OK
WriteX 13255 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
WriteX 13255 0 10438 10438 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13258 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13261 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13263 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
ReadX 13264 4096 4096 4096 NT_STATUS_OK
ReadX 13264 8192 4096 4096 NT_STATUS_OK
ReadX 13264 12288 8192 8192 NT_STATUS_OK
ReadX 13264 20480 8192 8192 NT_STATUS_OK
ReadX 13264 28672 8192 8192 NT_STATUS_OK
ReadX 13264 36864 8192 8192 NT_STATUS_OK
ReadX 13264 45056 8192 8192 NT_STATUS_OK
ReadX 13264 53248 8192 8192 NT_STATUS_OK
ReadX 13264 61440 8192 8192 NT_STATUS_OK
ReadX 13264 69632 8192 8192 NT_STATUS_OK
ReadX 13264 77824 8192 8192 NT_STATUS_OK
ReadX 13264 86016 8192 8192 NT_STATUS_OK
ReadX 13264 94208 8192 8192 NT_STATUS_OK
ReadX 13264 102400 8192 8192 NT_STATUS_OK
ReadX 13264 110592 8192 8192 NT_STATUS_OK
ReadX 13264 118784 8192 8192 NT_STATUS_OK
ReadX 13264 126976 8192 8192 NT_STATUS_OK
ReadX 13264 135168 8192 8192 NT_STATUS_OK
ReadX 13264 143360 8192 8192 NT_STATUS_OK
ReadX 13264 151552 8192 8192 NT_STATUS_OK
ReadX 13264 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Close 13257 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13269 NT_STATUS_OK
WriteX 13269 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13269 258 NT_STATUS_OK
WriteX 13269 0 28489 28489 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13270 NT_STATUS_OK
Close 13270 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13272 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13272 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13273 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 8192 8192 NT_STATUS_OK
ReadX 13276 8192 8192 8192 NT_STATUS_OK
ReadX 13276 16384 8192 8192 NT_STATUS_OK
ReadX 13276 24576 8192 8192 NT_STATUS_OK
ReadX 13276 32768 16384 16384 NT_STATUS_OK
ReadX 13276 49152 8192 8192 NT_STATUS_OK
ReadX 13276 57344 8192 8192 NT_STATUS_OK
ReadX 13276 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13278 NT_STATUS_OK
Close 13278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13281 NT_STATUS_OK
WriteX 13281 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13281 258 NT_STATUS_OK
WriteX 13281 0 29253 29253 NT_STATUS_OK
Close 13281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13282 NT_STATUS_OK
Close 13282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13285 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13288 NT_STATUS_OK
WriteX 13288 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13288 258 NT_STATUS_OK
WriteX 13288 0 30183 30183 NT_STATUS_OK
Close 13288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13289 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13291 NT_STATUS_OK
WriteX 13291 0 510 510 NT_STATUS_OK
WriteX 13291 510 512 512 NT_STATUS_OK
WriteX 13291 1022 510 510 NT_STATUS_OK
WriteX 13291 1532 510 510 NT_STATUS_OK
WriteX 13291 2042 168 168 NT_STATUS_OK
Close 13291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13292 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
WriteX 13294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 61440 4096 4096 NT_STATUS_OK
ReadX 13295 126976 4096 4096 NT_STATUS_OK
WriteX 13295 0 65536 65536 NT_STATUS_OK
WriteX 13295 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 61440 4096 4096 NT_STATUS_OK
ReadX 13296 126976 4096 4096 NT_STATUS_OK
ReadX 13296 192512 4096 4096 NT_STATUS_OK
ReadX 13296 258048 4096 4096 NT_STATUS_OK
WriteX 13296 0 65536 65536 NT_STATUS_OK
WriteX 13296 65536 65536 65536 NT_STATUS_OK
WriteX 13296 131072 65536 65536 NT_STATUS_OK
WriteX 13296 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 61440 4096 4096 NT_STATUS_OK
ReadX 13297 126976 4096 4096 NT_STATUS_OK
ReadX 13297 192512 4096 4096 NT_STATUS_OK
ReadX 13297 258048 4096 4096 NT_STATUS_OK
ReadX 13297 323584 4096 4096 NT_STATUS_OK
ReadX 13297 389120 4096 4096 NT_STATUS_OK
ReadX 13297 454656 4096 4096 NT_STATUS_OK
ReadX 13297 520192 4096 4096 NT_STATUS_OK
WriteX 13297 0 65536 65536 NT_STATUS_OK
WriteX 13297 65536 65536 65536 NT_STATUS_OK
WriteX 13297 131072 65536 65536 NT_STATUS_OK
WriteX 13297 196608 65536 65536 NT_STATUS_OK
WriteX 13297 262144 65536 65536 NT_STATUS_OK
WriteX 13297 327680 65536 65536 NT_STATUS_OK
WriteX 13297 393216 65536 65536 NT_STATUS_OK
WriteX 13297 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13298 NT_STATUS_OK
Close 13298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13300 NT_STATUS_OK
Close 13300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13313 NT_STATUS_OK
Close 13313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13316 NT_STATUS_OK
Close 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13318 NT_STATUS_OK
Close 13318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13322 NT_STATUS_OK
Close 13322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13337 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13342 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13352 NT_STATUS_OK
Close 13352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13357 NT_STATUS_OK
Close 13357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13360 NT_STATUS_OK
Close 13360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13366 NT_STATUS_OK
WriteX 13366 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13366 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13366 0 65536 65536 NT_STATUS_OK
WriteX 13366 65536 65536 65536 NT_STATUS_OK
WriteX 13366 131072 65536 65536 NT_STATUS_OK
WriteX 13366 196608 65536 65536 NT_STATUS_OK
WriteX 13366 262144 26634 26634 NT_STATUS_OK
Close 13366 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13371 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 4096 4096 NT_STATUS_OK
ReadX 13374 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13375 NT_STATUS_OK
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13374 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13382 NT_STATUS_OK
Close 13382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13384 NT_STATUS_OK
Close 13384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13388 NT_STATUS_OK
Close 13388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13393 NT_STATUS_OK
Close 13393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13397 NT_STATUS_OK
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13402 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13407 NT_STATUS_OK
Close 13407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13422 NT_STATUS_OK
Close 13422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13441 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
Close 13454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 4096 4096 NT_STATUS_OK
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 4096 4096 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13498 0 4096 4096 NT_STATUS_OK
Close 13498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
ReadX 13500 4096 4096 4096 NT_STATUS_OK
ReadX 13500 8192 4096 4096 NT_STATUS_OK
ReadX 13500 12288 4096 4096 NT_STATUS_OK
ReadX 13500 16384 4096 4096 NT_STATUS_OK
ReadX 13500 20480 4096 4096 NT_STATUS_OK
ReadX 13500 24576 4096 4096 NT_STATUS_OK
ReadX 13500 28672 4096 4096 NT_STATUS_OK
ReadX 13500 32768 4096 4096 NT_STATUS_OK
ReadX 13500 36864 4096 4096 NT_STATUS_OK
ReadX 13500 40960 4096 4096 NT_STATUS_OK
ReadX 13500 45056 4096 4096 NT_STATUS_OK
ReadX 13500 49152 4096 4096 NT_STATUS_OK
ReadX 13500 53248 4096 4096 NT_STATUS_OK
ReadX 13500 57344 4096 4096 NT_STATUS_OK
ReadX 13500 61440 4096 4096 NT_STATUS_OK
ReadX 13500 65536 4096 4096 NT_STATUS_OK
ReadX 13500 69632 4096 4096 NT_STATUS_OK
ReadX 13500 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
WriteX 13500 0 4096 4096 NT_STATUS_OK
Close 13500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13501 NT_STATUS_OK
SET_FILE_INFORMATION 13501 1004 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13503 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13506 NT_STATUS_OK
WriteX 13506 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 65536 65536 NT_STATUS_OK
WriteX 13506 65536 19979 19979 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Flush 13507 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Flush 13507 NT_STATUS_OK
QUERY_FILE_INFORMATION 13507 1004 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Flush 13507 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Flush 13507 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Flush 13507 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Flush 13507 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13509 NT_STATUS_OK
ReadX 13509 0 4096 4096 NT_STATUS_OK
Close 13508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 4096 4096 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13512 NT_STATUS_OK
ReadX 13512 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13512 1004 NT_STATUS_OK
WriteX 13512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Close 13512 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13518 NT_STATUS_OK
WriteX 13518 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13518 258 NT_STATUS_OK
WriteX 13518 0 65536 65536 NT_STATUS_OK
WriteX 13518 65536 17654 17654 NT_STATUS_OK
Close 13518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 4096 4096 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
Flush 13519 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
Flush 13519 NT_STATUS_OK
QUERY_FILE_INFORMATION 13519 1004 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
Flush 13519 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
Flush 13519 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
Flush 13519 NT_STATUS_OK
SET_FILE_INFORMATION 13519 1004 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
Flush 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13520 NT_STATUS_OK
SET_FILE_INFORMATION 13520 1004 NT_STATUS_OK
Close 13520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13522 NT_STATUS_OK
Close 13522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
ReadX 13524 4096 4096 4096 NT_STATUS_OK
ReadX 13524 8192 4096 4096 NT_STATUS_OK
ReadX 13524 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13524 16384 4096 4096 NT_STATUS_OK
ReadX 13524 20480 4096 4096 NT_STATUS_OK
ReadX 13524 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
Close 13525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13527 1004 NT_STATUS_OK
WriteX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13533 NT_STATUS_OK
WriteX 13533 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13533 258 NT_STATUS_OK
WriteX 13533 0 65536 65536 NT_STATUS_OK
WriteX 13533 65536 19490 19490 NT_STATUS_OK
Close 13533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
WriteX 13534 0 4096 4096 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
WriteX 13534 0 4096 4096 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
QUERY_FILE_INFORMATION 13534 1004 NT_STATUS_OK
WriteX 13534 0 4096 4096 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
WriteX 13534 0 4096 4096 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
WriteX 13534 0 4096 4096 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
SET_FILE_INFORMATION 13534 1004 NT_STATUS_OK
WriteX 13534 0 4096 4096 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
Close 13534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13535 NT_STATUS_OK
SET_FILE_INFORMATION 13535 1004 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13537 NT_STATUS_OK
Close 13537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13539 0 4096 4096 NT_STATUS_OK
Close 13539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
ReadX 13541 4096 4096 4096 NT_STATUS_OK
ReadX 13541 8192 4096 4096 NT_STATUS_OK
ReadX 13541 12288 4096 4096 NT_STATUS_OK
ReadX 13541 16384 4096 4096 NT_STATUS_OK
ReadX 13541 20480 4096 4096 NT_STATUS_OK
ReadX 13541 24576 4096 4096 NT_STATUS_OK
ReadX 13541 28672 4096 4096 NT_STATUS_OK
ReadX 13541 32768 4096 4096 NT_STATUS_OK
ReadX 13541 36864 4096 4096 NT_STATUS_OK
ReadX 13541 40960 4096 4096 NT_STATUS_OK
ReadX 13541 45056 4096 4096 NT_STATUS_OK
ReadX 13541 49152 4096 4096 NT_STATUS_OK
ReadX 13541 53248 4096 4096 NT_STATUS_OK
ReadX 13541 57344 4096 4096 NT_STATUS_OK
ReadX 13541 61440 4096 4096 NT_STATUS_OK
ReadX 13541 65536 4096 4096 NT_STATUS_OK
ReadX 13541 69632 4096 4096 NT_STATUS_OK
ReadX 13541 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13541 1004 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13542 NT_STATUS_OK
SET_FILE_INFORMATION 13542 1004 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13544 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13547 NT_STATUS_OK
WriteX 13547 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 258 NT_STATUS_OK
WriteX 13547 0 65536 65536 NT_STATUS_OK
WriteX 13547 65536 8866 8866 NT_STATUS_OK
Close 13547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
Flush 13548 NT_STATUS_OK
SET_FILE_INFORMATION 13548 1004 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
Flush 13548 NT_STATUS_OK
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
Close 13551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13552 1004 NT_STATUS_OK
WriteX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13553 NT_STATUS_OK
Close 13553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13558 NT_STATUS_OK
WriteX 13558 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13558 258 NT_STATUS_OK
WriteX 13558 0 65536 65536 NT_STATUS_OK
WriteX 13558 65536 9298 9298 NT_STATUS_OK
Close 13558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
Flush 13559 NT_STATUS_OK
SET_FILE_INFORMATION 13559 1004 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
Flush 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13560 NT_STATUS_OK
SET_FILE_INFORMATION 13560 1004 NT_STATUS_OK
Close 13560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13565 0 4096 4096 NT_STATUS_OK
Close 13565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13566 4096 4096 4096 NT_STATUS_OK
ReadX 13566 8192 4096 4096 NT_STATUS_OK
ReadX 13566 12288 4096 4096 NT_STATUS_OK
ReadX 13566 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13567 NT_STATUS_OK
ReadX 13567 0 4096 4096 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13569 NT_STATUS_OK
ReadX 13569 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13569 1004 NT_STATUS_OK
WriteX 13569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13572 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13575 NT_STATUS_OK
WriteX 13575 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13575 258 NT_STATUS_OK
WriteX 13575 0 65536 65536 NT_STATUS_OK
WriteX 13575 65536 11540 11540 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
WriteX 13576 0 4096 4096 NT_STATUS_OK
Flush 13576 NT_STATUS_OK
SET_FILE_INFORMATION 13576 1004 NT_STATUS_OK
WriteX 13576 0 4096 4096 NT_STATUS_OK
Flush 13576 NT_STATUS_OK
Close 13576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13577 NT_STATUS_OK
SET_FILE_INFORMATION 13577 1004 NT_STATUS_OK
Close 13577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 61440 4096 4096 NT_STATUS_OK
ReadX 13581 126976 4096 4096 NT_STATUS_OK
WriteX 13581 0 65536 65536 NT_STATUS_OK
WriteX 13581 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 61440 4096 4096 NT_STATUS_OK
ReadX 13582 126976 4096 4096 NT_STATUS_OK
ReadX 13582 192512 4096 4096 NT_STATUS_OK
ReadX 13582 258048 4096 4096 NT_STATUS_OK
WriteX 13582 0 65536 65536 NT_STATUS_OK
WriteX 13582 65536 65536 65536 NT_STATUS_OK
WriteX 13582 131072 65536 65536 NT_STATUS_OK
WriteX 13582 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 61440 4096 4096 NT_STATUS_OK
ReadX 13583 126976 4096 4096 NT_STATUS_OK
ReadX 13583 192512 4096 4096 NT_STATUS_OK
ReadX 13583 258048 4096 4096 NT_STATUS_OK
ReadX 13583 323584 4096 4096 NT_STATUS_OK
ReadX 13583 389120 4096 4096 NT_STATUS_OK
ReadX 13583 454656 4096 4096 NT_STATUS_OK
ReadX 13583 520192 4096 4096 NT_STATUS_OK
WriteX 13583 0 65536 65536 NT_STATUS_OK
WriteX 13583 65536 65536 65536 NT_STATUS_OK
WriteX 13583 131072 65536 65536 NT_STATUS_OK
WriteX 13583 196608 65536 65536 NT_STATUS_OK
WriteX 13583 262144 65536 65536 NT_STATUS_OK
WriteX 13583 327680 65536 65536 NT_STATUS_OK
WriteX 13583 393216 65536 65536 NT_STATUS_OK
WriteX 13583 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
ReadX 13584 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13585 NT_STATUS_OK
WriteX 13585 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13585 258 NT_STATUS_OK
WriteX 13585 0 53 53 NT_STATUS_OK
Close 13585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13586 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13584 8192 4096 4096 NT_STATUS_OK
ReadX 13584 12288 4096 4096 NT_STATUS_OK
WriteX 13588 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13588 258 NT_STATUS_OK
ReadX 13584 16384 4096 4096 NT_STATUS_OK
ReadX 13584 20480 4096 4096 NT_STATUS_OK
WriteX 13588 0 15360 15360 NT_STATUS_OK
Close 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13589 NT_STATUS_OK
ReadX 13589 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13589 1004 NT_STATUS_OK
WriteX 13589 0 4096 4096 NT_STATUS_OK
Close 13589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13592 NT_STATUS_OK
ReadX 13592 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13592 4096 4096 4096 NT_STATUS_OK
ReadX 13592 8192 4096 4096 NT_STATUS_OK
ReadX 13592 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
ReadX 13595 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
ReadX 13596 4096 4096 4096 NT_STATUS_OK
ReadX 13596 8192 4096 4096 NT_STATUS_OK
Close 13595 NT_STATUS_OK
Close 13596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13597 NT_STATUS_OK
WriteX 13597 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13597 258 NT_STATUS_OK
WriteX 13597 0 15360 15360 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13598 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13598 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13602 NT_STATUS_OK
SET_FILE_INFORMATION 13602 1004 NT_STATUS_OK
Close 13602 NT_STATUS_OK
WriteX 13598 0 4096 4096 NT_STATUS_OK
Close 13598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 0 4096 4096 NT_STATUS_OK
ReadX 13605 4096 4096 4096 NT_STATUS_OK
ReadX 13605 8192 4096 4096 NT_STATUS_OK
ReadX 13605 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13605 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13607 NT_STATUS_OK
WriteX 13607 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 258 NT_STATUS_OK
WriteX 13607 0 53 53 NT_STATUS_OK
Close 13607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13606 4096 4096 4096 NT_STATUS_OK
ReadX 13606 8192 4096 4096 NT_STATUS_OK
ReadX 13606 12288 4096 4096 NT_STATUS_OK
WriteX 13610 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 258 NT_STATUS_OK
WriteX 13610 0 12006 12006 NT_STATUS_OK
Close 13610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13611 NT_STATUS_OK
ReadX 13611 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13614 4096 4096 4096 NT_STATUS_OK
ReadX 13614 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13617 NT_STATUS_OK
WriteX 13617 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13617 258 NT_STATUS_OK
WriteX 13617 0 11991 11991 NT_STATUS_OK
Close 13617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13618 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13622 NT_STATUS_OK
SET_FILE_INFORMATION 13622 1004 NT_STATUS_OK
Close 13622 NT_STATUS_OK
WriteX 13618 0 4096 4096 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13623 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13626 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13625 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
ReadX 13625 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
WriteX 13625 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13625 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
Close 13601 NT_STATUS_OK
WriteX 13605 0 19054 19054 NT_STATUS_OK
WriteX 13625 0 12288 12288 NT_STATUS_OK
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 61440 61440 NT_STATUS_OK
ReadX 13632 61440 4096 4096 NT_STATUS_OK
ReadX 13632 65536 61440 61440 NT_STATUS_OK
ReadX 13632 126976 4096 4096 NT_STATUS_OK
ReadX 13632 131072 61440 61440 NT_STATUS_OK
ReadX 13632 192512 4096 4096 NT_STATUS_OK
ReadX 13632 196608 61440 61440 NT_STATUS_OK
ReadX 13632 258048 4096 4096 NT_STATUS_OK
ReadX 13632 262144 61440 61440 NT_STATUS_OK
ReadX 13632 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 61440 61440 NT_STATUS_OK
ReadX 13633 61440 4096 4096 NT_STATUS_OK
ReadX 13633 65536 61440 61440 NT_STATUS_OK
ReadX 13633 126976 4096 4096 NT_STATUS_OK
ReadX 13633 131072 61440 61440 NT_STATUS_OK
ReadX 13633 192512 4096 4096 NT_STATUS_OK
ReadX 13633 196608 61440 61440 NT_STATUS_OK
ReadX 13633 258048 4096 4096 NT_STATUS_OK
ReadX 13633 262144 61440 61440 NT_STATUS_OK
ReadX 13633 323584 4096 4096 NT_STATUS_OK
ReadX 13633 327680 61440 61440 NT_STATUS_OK
ReadX 13633 389120 4096 4096 NT_STATUS_OK
ReadX 13633 393216 61440 61440 NT_STATUS_OK
ReadX 13633 454656 4096 4096 NT_STATUS_OK
ReadX 13633 458752 61440 61440 NT_STATUS_OK
ReadX 13633 520192 4096 4096 NT_STATUS_OK
ReadX 13633 524288 61440 61440 NT_STATUS_OK
ReadX 13633 585728 4096 4096 NT_STATUS_OK
ReadX 13633 589824 61440 61440 NT_STATUS_OK
ReadX 13633 651264 4096 4096 NT_STATUS_OK
ReadX 13633 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 61440 61440 NT_STATUS_OK
ReadX 13634 61440 4096 4096 NT_STATUS_OK
ReadX 13634 65536 61440 61440 NT_STATUS_OK
ReadX 13634 126976 4096 4096 NT_STATUS_OK
ReadX 13634 131072 61440 61440 NT_STATUS_OK
ReadX 13634 192512 4096 4096 NT_STATUS_OK
ReadX 13634 196608 61440 61440 NT_STATUS_OK
ReadX 13634 258048 4096 4096 NT_STATUS_OK
ReadX 13634 262144 61440 61440 NT_STATUS_OK
ReadX 13634 323584 4096 4096 NT_STATUS_OK
ReadX 13634 327680 61440 61440 NT_STATUS_OK
ReadX 13634 389120 4096 4096 NT_STATUS_OK
ReadX 13634 393216 61440 61440 NT_STATUS_OK
ReadX 13634 454656 4096 4096 NT_STATUS_OK
ReadX 13634 458752 61440 61440 NT_STATUS_OK
ReadX 13634 520192 4096 4096 NT_STATUS_OK
ReadX 13634 524288 61440 61440 NT_STATUS_OK
ReadX 13634 585728 4096 4096 NT_STATUS_OK
ReadX 13634 589824 61440 61440 NT_STATUS_OK
ReadX 13634 651264 4096 4096 NT_STATUS_OK
ReadX 13634 655360 61440 61440 NT_STATUS_OK
ReadX 13634 716800 4096 4096 NT_STATUS_OK
ReadX 13634 720896 61440 61440 NT_STATUS_OK
ReadX 13634 782336 4096 4096 NT_STATUS_OK
ReadX 13634 786432 61440 61440 NT_STATUS_OK
ReadX 13634 847872 4096 4096 NT_STATUS_OK
ReadX 13634 851968 61440 61440 NT_STATUS_OK
ReadX 13634 913408 4096 4096 NT_STATUS_OK
ReadX 13634 917504 61440 61440 NT_STATUS_OK
ReadX 13634 978944 4096 4096 NT_STATUS_OK
ReadX 13634 983040 61440 61440 NT_STATUS_OK
ReadX 13634 1044480 4096 4096 NT_STATUS_OK
ReadX 13634 1048576 61440 61440 NT_STATUS_OK
ReadX 13634 1110016 4096 4096 NT_STATUS_OK
ReadX 13634 1114112 61440 61440 NT_STATUS_OK
ReadX 13634 1175552 4096 4096 NT_STATUS_OK
ReadX 13634 1179648 61440 61440 NT_STATUS_OK
ReadX 13634 1241088 4096 4096 NT_STATUS_OK
ReadX 13634 1245184 61440 61440 NT_STATUS_OK
ReadX 13634 1306624 4096 4096 NT_STATUS_OK
ReadX 13634 1310720 61440 61440 NT_STATUS_OK
ReadX 13634 1372160 4096 4096 NT_STATUS_OK
ReadX 13634 1376256 61440 61440 NT_STATUS_OK
ReadX 13634 1437696 4096 4096 NT_STATUS_OK
ReadX 13634 1441792 61440 61440 NT_STATUS_OK
ReadX 13634 1503232 4096 4096 NT_STATUS_OK
ReadX 13634 1507328 61440 61440 NT_STATUS_OK
ReadX 13634 1568768 4096 4096 NT_STATUS_OK
ReadX 13634 1572864 61440 61440 NT_STATUS_OK
ReadX 13634 1634304 4096 4096 NT_STATUS_OK
ReadX 13634 1638400 61440 61440 NT_STATUS_OK
ReadX 13634 1699840 4096 4096 NT_STATUS_OK
ReadX 13634 1703936 61440 61440 NT_STATUS_OK
ReadX 13634 1765376 4096 4096 NT_STATUS_OK
ReadX 13634 1769472 61440 61440 NT_STATUS_OK
ReadX 13634 1830912 4096 4096 NT_STATUS_OK
ReadX 13634 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13636 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13637 NT_STATUS_OK
ReadX 13637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13641 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13643 NT_STATUS_OK
WriteX 13643 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 258 NT_STATUS_OK
WriteX 13643 0 491 491 NT_STATUS_OK
Close 13643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13644 NT_STATUS_OK
ReadX 13644 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13641 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13646 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13647 NT_STATUS_OK
WriteX 13647 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13647 258 NT_STATUS_OK
WriteX 13647 0 543 543 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13634 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13636 NT_STATUS_OK
Close 13637 NT_STATUS_OK
Close 13638 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13656 NT_STATUS_OK
ReadX 13656 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13661 NT_STATUS_OK
QUERY_FILE_INFORMATION 13661 1004 NT_STATUS_OK
WriteX 13661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13661 258 NT_STATUS_OK
WriteX 13661 0 2048 2048 NT_STATUS_OK
Close 13661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13662 NT_STATUS_OK
ReadX 13662 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
Flush 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13667 NT_STATUS_OK
WriteX 13667 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13667 258 NT_STATUS_OK
WriteX 13667 0 2048 2048 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13668 NT_STATUS_OK
ReadX 13668 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13672 NT_STATUS_OK
Close 13672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13673 NT_STATUS_OK
WriteX 13673 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 2048 2048 NT_STATUS_OK
Close 13673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 2048 2048 NT_STATUS_OK
ReadX 13652 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13668 0 4096 4096 NT_STATUS_OK
WriteX 13652 0 8192 8192 NT_STATUS_OK
WriteX 13653 0 4096 4096 NT_STATUS_OK
WriteX 13654 0 4096 4096 NT_STATUS_OK
ReadX 13668 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13678 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13655 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13689 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13690 NT_STATUS_OK
ReadX 13690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13692 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13698 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1004 NT_STATUS_OK
WriteX 13698 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 258 NT_STATUS_OK
WriteX 13698 0 2048 2048 NT_STATUS_OK
Close 13698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13699 NT_STATUS_OK
ReadX 13699 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13706 NT_STATUS_OK
QUERY_FILE_INFORMATION 13706 1004 NT_STATUS_OK
WriteX 13706 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13706 258 NT_STATUS_OK
WriteX 13706 0 2048 2048 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13699 0 4096 4096 NT_STATUS_OK
Flush 13699 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13701 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13709 NT_STATUS_OK
WriteX 13709 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 258 NT_STATUS_OK
WriteX 13709 0 4096 4096 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13712 NT_STATUS_OK
WriteX 13712 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13712 258 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Close 13712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13713 0 4096 4096 NT_STATUS_OK
Close 13710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Close 13690 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13719 NT_STATUS_OK
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13720 NT_STATUS_OK
WriteX 13720 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13720 258 NT_STATUS_OK
WriteX 13720 0 2048 2048 NT_STATUS_OK
Close 13720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13725 NT_STATUS_OK
ReadX 13725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13734 NT_STATUS_OK
ReadX 13734 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13735 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13718 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Close 13722 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Close 13724 NT_STATUS_OK
Close 13725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13737 NT_STATUS_OK
QUERY_FILE_INFORMATION 13737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13746 NT_STATUS_OK
ReadX 13746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13747 NT_STATUS_OK
ReadX 13747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13748 NT_STATUS_OK
ReadX 13748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13749 NT_STATUS_OK
ReadX 13749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13757 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 1004 NT_STATUS_OK
WriteX 13757 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 258 NT_STATUS_OK
WriteX 13757 0 2048 2048 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13769 NT_STATUS_OK
QUERY_FILE_INFORMATION 13769 1004 NT_STATUS_OK
WriteX 13769 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13769 258 NT_STATUS_OK
WriteX 13769 0 2048 2048 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13772 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13777 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 258 NT_STATUS_OK
WriteX 13777 0 2048 2048 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13778 0 4096 4096 NT_STATUS_OK
Flush 13778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13778 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13760 4096 16384 16384 NT_STATUS_OK
ReadX 13740 4096 16384 16384 NT_STATUS_OK
ReadX 13772 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13779 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 2048 2048 NT_STATUS_OK
WriteX 13780 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13781 NT_STATUS_OK
QUERY_FILE_INFORMATION 13781 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13744 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Close 13772 NT_STATUS_OK
Close 13746 NT_STATUS_OK
Close 13749 NT_STATUS_OK
Close 13750 NT_STATUS_OK
Close 13747 NT_STATUS_OK
Close 13748 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13783 NT_STATUS_OK
QUERY_FILE_INFORMATION 13783 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13785 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13788 4096 16384 16384 NT_STATUS_OK
WriteX 13788 0 4096 4096 NT_STATUS_OK
WriteX 13789 0 4096 4096 NT_STATUS_OK
WriteX 13790 0 4096 4096 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13793 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13796 NT_STATUS_OK
ReadX 13796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13797 NT_STATUS_OK
ReadX 13797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13798 NT_STATUS_OK
ReadX 13798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13805 NT_STATUS_OK
ReadX 13805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13806 NT_STATUS_OK
ReadX 13806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13807 NT_STATUS_OK
ReadX 13807 0 8192 8192 NT_STATUS_OK
ReadX 13794 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13808 0 4096 4096 NT_STATUS_OK
ReadX 13808 4096 4096 4096 NT_STATUS_OK
ReadX 13808 8192 4096 4096 NT_STATUS_OK
WriteX 13794 0 4096 4096 NT_STATUS_OK
WriteX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
ReadX 13809 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13788 0 4096 4096 NT_STATUS_OK
WriteX 13789 0 4096 4096 NT_STATUS_OK
WriteX 13790 0 4096 4096 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13814 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1004 NT_STATUS_OK
WriteX 13814 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 258 NT_STATUS_OK
WriteX 13814 0 2048 2048 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13815 NT_STATUS_OK
ReadX 13815 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13815 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13815 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13817 NT_STATUS_OK
ReadX 13817 0 4096 4096 NT_STATUS_OK
ReadX 13817 4096 4096 4096 NT_STATUS_OK
WriteX 13817 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13815 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
ReadX 13819 4096 4096 4096 NT_STATUS_OK
WriteX 13819 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13820 NT_STATUS_OK
QUERY_FILE_INFORMATION 13820 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13807 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Close 13789 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13803 NT_STATUS_OK
Close 13804 NT_STATUS_OK
Close 13806 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Close 13799 NT_STATUS_OK
Close 13796 NT_STATUS_OK
Close 13797 NT_STATUS_OK
Close 13819 NT_STATUS_OK
Close 13808 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13822 0 4096 4096 NT_STATUS_OK
ReadX 13822 4096 4096 4096 NT_STATUS_OK
ReadX 13822 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13824 NT_STATUS_OK
ReadX 13824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
ReadX 13823 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13840 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
WriteX 13840 0 2048 2048 NT_STATUS_OK
Close 13840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13841 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13845 NT_STATUS_OK
Close 13845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13846 NT_STATUS_OK
QUERY_FILE_INFORMATION 13846 1004 NT_STATUS_OK
WriteX 13846 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13846 258 NT_STATUS_OK
WriteX 13846 0 2048 2048 NT_STATUS_OK
Close 13846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13847 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13830 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13848 NT_STATUS_OK
QUERY_FILE_INFORMATION 13848 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13834 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13835 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Close 13827 NT_STATUS_OK
Close 13828 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13831 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13822 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13850 NT_STATUS_OK
QUERY_FILE_INFORMATION 13850 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13852 NT_STATUS_OK
ReadX 13852 61440 4096 4096 NT_STATUS_OK
ReadX 13852 126976 4096 4096 NT_STATUS_OK
WriteX 13852 0 65536 65536 NT_STATUS_OK
WriteX 13852 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 61440 4096 4096 NT_STATUS_OK
ReadX 13853 126976 4096 4096 NT_STATUS_OK
ReadX 13853 192512 4096 4096 NT_STATUS_OK
ReadX 13853 258048 4096 4096 NT_STATUS_OK
WriteX 13853 0 65536 65536 NT_STATUS_OK
WriteX 13853 65536 65536 65536 NT_STATUS_OK
WriteX 13853 131072 65536 65536 NT_STATUS_OK
WriteX 13853 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 61440 4096 4096 NT_STATUS_OK
ReadX 13854 126976 4096 4096 NT_STATUS_OK
ReadX 13854 192512 4096 4096 NT_STATUS_OK
ReadX 13854 258048 4096 4096 NT_STATUS_OK
ReadX 13854 323584 4096 4096 NT_STATUS_OK
ReadX 13854 389120 4096 4096 NT_STATUS_OK
ReadX 13854 454656 4096 4096 NT_STATUS_OK
ReadX 13854 520192 4096 4096 NT_STATUS_OK
WriteX 13854 0 65536 65536 NT_STATUS_OK
WriteX 13854 65536 65536 65536 NT_STATUS_OK
WriteX 13854 131072 65536 65536 NT_STATUS_OK
WriteX 13854 196608 65536 65536 NT_STATUS_OK
WriteX 13854 262144 65536 65536 NT_STATUS_OK
WriteX 13854 327680 65536 65536 NT_STATUS_OK
WriteX 13854 393216 65536 65536 NT_STATUS_OK
WriteX 13854 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13855 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13855 8192 4096 4096 NT_STATUS_OK
ReadX 13855 12288 4096 4096 NT_STATUS_OK
ReadX 13855 16384 4096 4096 NT_STATUS_OK
ReadX 13855 20480 4096 4096 NT_STATUS_OK
ReadX 13855 24576 4096 4096 NT_STATUS_OK
ReadX 13855 28672 4096 4096 NT_STATUS_OK
ReadX 13855 32768 4096 4096 NT_STATUS_OK
ReadX 13855 36864 4096 4096 NT_STATUS_OK
ReadX 13855 40960 4096 4096 NT_STATUS_OK
ReadX 13855 45056 4096 4096 NT_STATUS_OK
ReadX 13855 49152 4096 4096 NT_STATUS_OK
ReadX 13855 53248 4096 4096 NT_STATUS_OK
ReadX 13855 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13855 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13856 NT_STATUS_OK
Close 13856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13852 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Close 13854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13858 NT_STATUS_OK
WriteX 13858 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13858 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13858 1004 NT_STATUS_OK
WriteX 13858 0 57088 57088 NT_STATUS_OK
WriteX 13858 0 4096 4096 NT_STATUS_OK
Flush 13858 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13859 NT_STATUS_OK
SET_FILE_INFORMATION 13859 1004 NT_STATUS_OK
Close 13859 NT_STATUS_OK
SET_FILE_INFORMATION 13858 1004 NT_STATUS_OK
WriteX 13858 0 4096 4096 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13862 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13863 NT_STATUS_OK
WriteX 13863 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13863 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
WriteX 13863 0 51456 51456 NT_STATUS_OK
WriteX 13863 0 4096 4096 NT_STATUS_OK
Flush 13863 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
WriteX 13863 0 4096 4096 NT_STATUS_OK
Close 13863 NT_STATUS_OK
Close 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13867 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13872 NT_STATUS_OK
WriteX 13872 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13872 258 NT_STATUS_OK
WriteX 13872 0 53077 53077 NT_STATUS_OK
Close 13872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13873 NT_STATUS_OK
WriteX 13873 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13873 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13873 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 65536 65536 NT_STATUS_OK
WriteX 13873 65536 1856 1856 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Flush 13873 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13882 NT_STATUS_OK
WriteX 13882 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 258 NT_STATUS_OK
WriteX 13882 0 7983 7983 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13884 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13887 NT_STATUS_OK
WriteX 13887 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13887 258 NT_STATUS_OK
WriteX 13887 0 65536 65536 NT_STATUS_OK
WriteX 13887 65536 65536 65536 NT_STATUS_OK
WriteX 13887 131072 65536 65536 NT_STATUS_OK
WriteX 13887 196608 65536 65536 NT_STATUS_OK
WriteX 13887 262144 65536 65536 NT_STATUS_OK
WriteX 13887 327680 65536 65536 NT_STATUS_OK
WriteX 13887 393216 65536 65536 NT_STATUS_OK
WriteX 13887 458752 46731 46731 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13888 NT_STATUS_OK
WriteX 13888 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13888 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13877 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13888 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13888 1004 NT_STATUS_OK
WriteX 13888 0 65536 65536 NT_STATUS_OK
WriteX 13888 65536 22848 22848 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Flush 13888 NT_STATUS_OK
SET_FILE_INFORMATION 13888 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13888 1004 NT_STATUS_OK
WriteX 13888 0 4096 4096 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13892 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13893 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13893 1004 NT_STATUS_OK
ReadX 13893 8192 4096 4096 NT_STATUS_OK
ReadX 13893 12288 4096 4096 NT_STATUS_OK
ReadX 13893 16384 4096 4096 NT_STATUS_OK
ReadX 13893 20480 4096 4096 NT_STATUS_OK
ReadX 13893 24576 4096 4096 NT_STATUS_OK
ReadX 13893 28672 4096 4096 NT_STATUS_OK
ReadX 13893 32768 4096 4096 NT_STATUS_OK
ReadX 13893 36864 4096 4096 NT_STATUS_OK
ReadX 13893 40960 4096 4096 NT_STATUS_OK
ReadX 13893 45056 4096 4096 NT_STATUS_OK
ReadX 13893 49152 4096 4096 NT_STATUS_OK
ReadX 13893 53248 4096 4096 NT_STATUS_OK
ReadX 13893 57344 4096 4096 NT_STATUS_OK
ReadX 13893 61440 4096 4096 NT_STATUS_OK
ReadX 13893 65536 4096 4096 NT_STATUS_OK
ReadX 13893 69632 4096 4096 NT_STATUS_OK
ReadX 13893 73728 4096 4096 NT_STATUS_OK
ReadX 13893 77824 4096 4096 NT_STATUS_OK
ReadX 13893 81920 4096 4096 NT_STATUS_OK
ReadX 13893 86016 4096 4096 NT_STATUS_OK
ReadX 13893 90112 4096 4096 NT_STATUS_OK
ReadX 13893 94208 4096 4096 NT_STATUS_OK
ReadX 13893 98304 4096 4096 NT_STATUS_OK
ReadX 13893 102400 4096 4096 NT_STATUS_OK
ReadX 13893 106496 4096 4096 NT_STATUS_OK
ReadX 13893 110592 4096 4096 NT_STATUS_OK
ReadX 13893 114688 4096 4096 NT_STATUS_OK
ReadX 13893 118784 4096 4096 NT_STATUS_OK
ReadX 13893 122880 4096 4096 NT_STATUS_OK
ReadX 13893 126976 4096 4096 NT_STATUS_OK
ReadX 13893 131072 4096 4096 NT_STATUS_OK
ReadX 13893 135168 4096 4096 NT_STATUS_OK
ReadX 13893 139264 4096 4096 NT_STATUS_OK
ReadX 13893 143360 4096 4096 NT_STATUS_OK
ReadX 13893 147456 4096 4096 NT_STATUS_OK
ReadX 13893 151552 4096 4096 NT_STATUS_OK
ReadX 13893 155648 4096 4096 NT_STATUS_OK
ReadX 13893 159744 4096 4096 NT_STATUS_OK
ReadX 13893 163840 4096 4096 NT_STATUS_OK
ReadX 13893 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13893 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13894 NT_STATUS_OK
Close 13894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13892 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13896 NT_STATUS_OK
WriteX 13896 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13896 258 NT_STATUS_OK
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13897 NT_STATUS_OK
SET_FILE_INFORMATION 13897 1004 NT_STATUS_OK
Close 13897 NT_STATUS_OK
WriteX 13896 0 42388 42388 NT_STATUS_OK
Close 13896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13900 NT_STATUS_OK
ReadX 13900 0 4096 4096 NT_STATUS_OK
ReadX 13900 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13901 NT_STATUS_OK
WriteX 13901 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13901 258 NT_STATUS_OK
SET_FILE_INFORMATION 13901 1004 NT_STATUS_OK
WriteX 13901 0 42652 42652 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
ReadX 13905 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13910 NT_STATUS_OK
WriteX 13910 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13910 258 NT_STATUS_OK
WriteX 13910 0 65536 65536 NT_STATUS_OK
WriteX 13910 65536 49 49 NT_STATUS_OK
Close 13910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 61440 61440 NT_STATUS_OK
ReadX 13911 61440 4096 4096 NT_STATUS_OK
ReadX 13911 65536 61440 61440 NT_STATUS_OK
ReadX 13911 126976 4096 4096 NT_STATUS_OK
ReadX 13911 131072 61440 61440 NT_STATUS_OK
ReadX 13911 192512 4096 4096 NT_STATUS_OK
ReadX 13911 196608 61440 61440 NT_STATUS_OK
ReadX 13911 258048 4096 4096 NT_STATUS_OK
ReadX 13911 262144 61440 61440 NT_STATUS_OK
ReadX 13911 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13912 NT_STATUS_OK
ReadX 13912 0 61440 61440 NT_STATUS_OK
ReadX 13912 61440 4096 4096 NT_STATUS_OK
ReadX 13912 65536 61440 61440 NT_STATUS_OK
ReadX 13912 126976 4096 4096 NT_STATUS_OK
ReadX 13912 131072 61440 61440 NT_STATUS_OK
ReadX 13912 192512 4096 4096 NT_STATUS_OK
ReadX 13912 196608 61440 61440 NT_STATUS_OK
ReadX 13912 258048 4096 4096 NT_STATUS_OK
ReadX 13912 262144 61440 61440 NT_STATUS_OK
ReadX 13912 323584 4096 4096 NT_STATUS_OK
ReadX 13912 327680 61440 61440 NT_STATUS_OK
ReadX 13912 389120 4096 4096 NT_STATUS_OK
ReadX 13912 393216 61440 61440 NT_STATUS_OK
ReadX 13912 454656 4096 4096 NT_STATUS_OK
ReadX 13912 458752 61440 61440 NT_STATUS_OK
ReadX 13912 520192 4096 4096 NT_STATUS_OK
ReadX 13912 524288 61440 61440 NT_STATUS_OK
ReadX 13912 585728 4096 4096 NT_STATUS_OK
ReadX 13912 589824 61440 61440 NT_STATUS_OK
ReadX 13912 651264 4096 4096 NT_STATUS_OK
ReadX 13912 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 61440 61440 NT_STATUS_OK
ReadX 13913 61440 4096 4096 NT_STATUS_OK
ReadX 13913 65536 61440 61440 NT_STATUS_OK
ReadX 13913 126976 4096 4096 NT_STATUS_OK
ReadX 13913 131072 61440 61440 NT_STATUS_OK
ReadX 13913 192512 4096 4096 NT_STATUS_OK
ReadX 13913 196608 61440 61440 NT_STATUS_OK
ReadX 13913 258048 4096 4096 NT_STATUS_OK
ReadX 13913 262144 61440 61440 NT_STATUS_OK
ReadX 13913 323584 4096 4096 NT_STATUS_OK
ReadX 13913 327680 61440 61440 NT_STATUS_OK
ReadX 13913 389120 4096 4096 NT_STATUS_OK
ReadX 13913 393216 61440 61440 NT_STATUS_OK
ReadX 13913 454656 4096 4096 NT_STATUS_OK
ReadX 13913 458752 61440 61440 NT_STATUS_OK
ReadX 13913 520192 4096 4096 NT_STATUS_OK
ReadX 13913 524288 61440 61440 NT_STATUS_OK
ReadX 13913 585728 4096 4096 NT_STATUS_OK
ReadX 13913 589824 61440 61440 NT_STATUS_OK
ReadX 13913 651264 4096 4096 NT_STATUS_OK
ReadX 13913 655360 61440 61440 NT_STATUS_OK
ReadX 13913 716800 4096 4096 NT_STATUS_OK
ReadX 13913 720896 61440 61440 NT_STATUS_OK
ReadX 13913 782336 4096 4096 NT_STATUS_OK
ReadX 13913 786432 61440 61440 NT_STATUS_OK
ReadX 13913 847872 4096 4096 NT_STATUS_OK
ReadX 13913 851968 61440 61440 NT_STATUS_OK
ReadX 13913 913408 4096 4096 NT_STATUS_OK
ReadX 13913 917504 61440 61440 NT_STATUS_OK
ReadX 13913 978944 4096 4096 NT_STATUS_OK
ReadX 13913 983040 61440 61440 NT_STATUS_OK
ReadX 13913 1044480 4096 4096 NT_STATUS_OK
ReadX 13913 1048576 61440 61440 NT_STATUS_OK
ReadX 13913 1110016 4096 4096 NT_STATUS_OK
ReadX 13913 1114112 61440 61440 NT_STATUS_OK
ReadX 13913 1175552 4096 4096 NT_STATUS_OK
ReadX 13913 1179648 61440 61440 NT_STATUS_OK
ReadX 13913 1241088 4096 4096 NT_STATUS_OK
ReadX 13913 1245184 61440 61440 NT_STATUS_OK
ReadX 13913 1306624 4096 4096 NT_STATUS_OK
ReadX 13913 1310720 61440 61440 NT_STATUS_OK
ReadX 13913 1372160 4096 4096 NT_STATUS_OK
ReadX 13913 1376256 61440 61440 NT_STATUS_OK
ReadX 13913 1437696 4096 4096 NT_STATUS_OK
ReadX 13913 1441792 61440 61440 NT_STATUS_OK
ReadX 13913 1503232 4096 4096 NT_STATUS_OK
ReadX 13913 1507328 61440 61440 NT_STATUS_OK
ReadX 13913 1568768 4096 4096 NT_STATUS_OK
ReadX 13913 1572864 61440 61440 NT_STATUS_OK
ReadX 13913 1634304 4096 4096 NT_STATUS_OK
ReadX 13913 1638400 61440 61440 NT_STATUS_OK
ReadX 13913 1699840 4096 4096 NT_STATUS_OK
ReadX 13913 1703936 61440 61440 NT_STATUS_OK
ReadX 13913 1765376 4096 4096 NT_STATUS_OK
ReadX 13913 1769472 61440 61440 NT_STATUS_OK
ReadX 13913 1830912 4096 4096 NT_STATUS_OK
ReadX 13913 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13915 NT_STATUS_OK
QUERY_FILE_INFORMATION 13915 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13915 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13915 1005 NT_STATUS_OK
ReadX 13915 2156 24 24 NT_STATUS_OK
ReadX 13915 2139 276 276 NT_STATUS_OK
ReadX 13915 2136 14 14 NT_STATUS_OK
ReadX 13915 2136 7 7 NT_STATUS_OK
ReadX 13915 2138 12 12 NT_STATUS_OK
ReadX 13915 2137 8 8 NT_STATUS_OK
ReadX 13915 2135 15 15 NT_STATUS_OK
ReadX 13915 0 16 16 NT_STATUS_OK
ReadX 13915 16 2048 2048 NT_STATUS_OK
ReadX 13915 2064 2048 2048 NT_STATUS_OK
ReadX 13915 257 2048 2048 NT_STATUS_OK
ReadX 13915 385 2048 2048 NT_STATUS_OK
ReadX 13915 513 2048 2048 NT_STATUS_OK
ReadX 13915 641 2048 2048 NT_STATUS_OK
ReadX 13915 769 2048 2048 NT_STATUS_OK
ReadX 13915 897 2048 2048 NT_STATUS_OK
ReadX 13915 1025 2048 2048 NT_STATUS_OK
ReadX 13915 1153 2048 2048 NT_STATUS_OK
ReadX 13915 1281 2048 2048 NT_STATUS_OK
ReadX 13915 1409 2048 2048 NT_STATUS_OK
ReadX 13915 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13912 NT_STATUS_OK
Close 13913 NT_STATUS_OK
Close 13905 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13920 NT_STATUS_OK
WriteX 13920 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13920 258 NT_STATUS_OK
WriteX 13920 0 10575 10575 NT_STATUS_OK
Flush 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13921 NT_STATUS_OK
Close 13921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13923 NT_STATUS_OK
ReadX 13923 0 4096 4096 NT_STATUS_OK
Close 13915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13925 NT_STATUS_OK
LockX 13925 2147483538 1 NT_STATUS_OK
UnlockX 13925 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 1005 NT_STATUS_OK
ReadX 13925 0 512 512 NT_STATUS_OK
ReadX 13925 512 512 512 NT_STATUS_OK
ReadX 13925 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 1004 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13926 NT_STATUS_OK
QUERY_FILE_INFORMATION 13926 1005 NT_STATUS_OK
ReadX 13926 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13927 NT_STATUS_OK
LockX 13927 2147483538 1 NT_STATUS_OK
UnlockX 13927 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13927 1005 NT_STATUS_OK
ReadX 13927 0 512 512 NT_STATUS_OK
ReadX 13927 512 512 512 NT_STATUS_OK
ReadX 13927 1024 512 512 NT_STATUS_OK
ReadX 13927 288 20 20 NT_STATUS_OK
ReadX 13927 308 2084 2084 NT_STATUS_OK
ReadX 13927 388 2084 2084 NT_STATUS_OK
ReadX 13927 388 2084 2084 NT_STATUS_OK
ReadX 13914 2157 1386 1386 NT_STATUS_OK
ReadX 13927 2472 399 399 NT_STATUS_OK
ReadX 13927 3072 1536 1536 NT_STATUS_OK
ReadX 13927 544 149 149 NT_STATUS_OK
ReadX 13927 693 485 485 NT_STATUS_OK
Close 13927 NT_STATUS_OK
ReadX 13914 2157 4096 4096 NT_STATUS_OK
ReadX 13914 6253 4096 4096 NT_STATUS_OK
ReadX 13914 10349 4096 4096 NT_STATUS_OK
ReadX 13914 14445 4096 4096 NT_STATUS_OK
ReadX 13914 18541 4096 4096 NT_STATUS_OK
ReadX 13914 22637 256 256 NT_STATUS_OK
ReadX 13914 22893 4096 4096 NT_STATUS_OK
ReadX 13914 26989 4096 4096 NT_STATUS_OK
ReadX 13914 31085 4096 4096 NT_STATUS_OK
ReadX 13914 35181 4096 4096 NT_STATUS_OK
ReadX 13914 39277 4096 4096 NT_STATUS_OK
ReadX 13914 43373 4096 4096 NT_STATUS_OK
ReadX 13914 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13914 2157 1024 1024 NT_STATUS_OK
ReadX 13914 1667 4688 4688 NT_STATUS_OK
ReadX 13914 6355 3516 3516 NT_STATUS_OK
ReadX 13914 9871 16384 16384 NT_STATUS_OK
ReadX 13914 26255 3771 3771 NT_STATUS_OK
ReadX 13914 30026 2048 2048 NT_STATUS_OK
ReadX 13914 32074 1024 1024 NT_STATUS_OK
ReadX 13914 33098 6652 6652 NT_STATUS_OK
ReadX 13914 39750 16384 16384 NT_STATUS_OK
ReadX 13914 56134 10496 10496 NT_STATUS_OK
ReadX 13914 66630 1784 1784 NT_STATUS_OK
ReadX 13914 68414 90 90 NT_STATUS_OK
ReadX 13914 68504 273 273 NT_STATUS_OK
ReadX 13914 68777 1600 1600 NT_STATUS_OK
ReadX 13914 70377 640 640 NT_STATUS_OK
ReadX 13914 71017 1280 1280 NT_STATUS_OK
ReadX 13914 72297 8464 8464 NT_STATUS_OK
ReadX 13914 80761 158 158 NT_STATUS_OK
ReadX 13914 80919 912 912 NT_STATUS_OK
ReadX 13914 81831 1980 1980 NT_STATUS_OK
ReadX 13914 83811 2256 2256 NT_STATUS_OK
ReadX 13914 86067 400 400 NT_STATUS_OK
ReadX 13914 86467 252 252 NT_STATUS_OK
ReadX 13914 86719 42 42 NT_STATUS_OK
ReadX 13914 86761 725 725 NT_STATUS_OK
ReadX 13914 2009 512 512 NT_STATUS_OK
ReadX 13914 3895 9 9 NT_STATUS_OK
ReadX 13914 3781 46 46 NT_STATUS_OK
ReadX 13914 4059 92 92 NT_STATUS_OK
ReadX 13914 3781 92 92 NT_STATUS_OK
ReadX 13914 3986 184 184 NT_STATUS_OK
ReadX 13914 3987 16384 16384 NT_STATUS_OK
ReadX 13914 3902 16384 16384 NT_STATUS_OK
ReadX 13914 3781 10240 10240 NT_STATUS_OK
ReadX 13914 3821 16384 16384 NT_STATUS_OK
ReadX 13914 3891 935 935 NT_STATUS_OK
ReadX 13914 4060 10240 10240 NT_STATUS_OK
ReadX 13914 4059 184 184 NT_STATUS_OK
ReadX 13914 256 184 184 NT_STATUS_OK
ReadX 13914 256 1026 1026 NT_STATUS_OK
ReadX 13914 3901 326 326 NT_STATUS_OK
ReadX 13914 3899 652 652 NT_STATUS_OK
ReadX 13914 256 2 2 NT_STATUS_OK
ReadX 13914 258 4948 4948 NT_STATUS_OK
Close 13914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13929 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13932 NT_STATUS_OK
WriteX 13932 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13932 258 NT_STATUS_OK
WriteX 13932 0 65536 65536 NT_STATUS_OK
WriteX 13932 65536 65536 65536 NT_STATUS_OK
WriteX 13932 131072 65536 65536 NT_STATUS_OK
WriteX 13932 196608 65536 65536 NT_STATUS_OK
WriteX 13932 262144 65536 65536 NT_STATUS_OK
WriteX 13932 327680 65536 65536 NT_STATUS_OK
WriteX 13932 393216 65536 65536 NT_STATUS_OK
WriteX 13932 458752 65536 65536 NT_STATUS_OK
WriteX 13932 524288 65536 65536 NT_STATUS_OK
WriteX 13932 589824 35257 35257 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13934 NT_STATUS_OK
Close 13934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13937 NT_STATUS_OK
WriteX 13937 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13937 258 NT_STATUS_OK
WriteX 13937 0 65536 65536 NT_STATUS_OK
WriteX 13937 65536 65536 65536 NT_STATUS_OK
WriteX 13937 131072 65536 65536 NT_STATUS_OK
WriteX 13937 196608 65536 65536 NT_STATUS_OK
WriteX 13937 262144 65536 65536 NT_STATUS_OK
WriteX 13937 327680 65536 65536 NT_STATUS_OK
WriteX 13937 393216 65536 65536 NT_STATUS_OK
WriteX 13937 458752 65536 65536 NT_STATUS_OK
WriteX 13937 524288 65536 65536 NT_STATUS_OK
WriteX 13937 589824 57598 57598 NT_STATUS_OK
Close 13937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13939 NT_STATUS_OK
WriteX 13939 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13939 258 NT_STATUS_OK
WriteX 13939 0 12543 12543 NT_STATUS_OK
Flush 13939 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13941 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13945 NT_STATUS_OK
QUERY_FILE_INFORMATION 13945 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13945 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13945 1005 NT_STATUS_OK
ReadX 13945 1938 24 24 NT_STATUS_OK
ReadX 13945 1920 276 276 NT_STATUS_OK
ReadX 13945 1918 14 14 NT_STATUS_OK
ReadX 13945 1918 7 7 NT_STATUS_OK
ReadX 13945 1919 12 12 NT_STATUS_OK
ReadX 13945 1919 8 8 NT_STATUS_OK
ReadX 13945 1917 15 15 NT_STATUS_OK
ReadX 13945 0 16 16 NT_STATUS_OK
ReadX 13945 16 2048 2048 NT_STATUS_OK
ReadX 13945 2064 2048 2048 NT_STATUS_OK
ReadX 13945 257 2048 2048 NT_STATUS_OK
ReadX 13945 385 2048 2048 NT_STATUS_OK
ReadX 13945 513 2048 2048 NT_STATUS_OK
ReadX 13945 641 2048 2048 NT_STATUS_OK
ReadX 13945 769 2048 2048 NT_STATUS_OK
ReadX 13945 897 2048 2048 NT_STATUS_OK
ReadX 13945 1025 2048 2048 NT_STATUS_OK
ReadX 13945 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13950 NT_STATUS_OK
WriteX 13950 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
WriteX 13950 0 11588 11588 NT_STATUS_OK
Flush 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13951 NT_STATUS_OK
Close 13951 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
Close 13945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13955 NT_STATUS_OK
WriteX 13955 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13955 258 NT_STATUS_OK
WriteX 13955 0 11615 11615 NT_STATUS_OK
Flush 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13957 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13961 NT_STATUS_OK
Close 13961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13964 NT_STATUS_OK
WriteX 13964 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 65536 65536 NT_STATUS_OK
WriteX 13964 65536 16050 16050 NT_STATUS_OK
Close 13964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 1939 64 64 NT_STATUS_OK
ReadX 13944 128 248 248 NT_STATUS_OK
ReadX 13944 128 568 568 NT_STATUS_OK
ReadX 13944 3872 1536 1536 NT_STATUS_OK
ReadX 13944 3456 2560 2560 NT_STATUS_OK
ReadX 13944 3136 512 512 NT_STATUS_OK
ReadX 13944 2880 4096 4096 NT_STATUS_OK
ReadX 13944 3264 3072 3072 NT_STATUS_OK
ReadX 13944 320 4096 4096 NT_STATUS_OK
ReadX 13944 1024 4096 4096 NT_STATUS_OK
ReadX 13944 3616 4096 4096 NT_STATUS_OK
ReadX 13944 1939 64 64 NT_STATUS_OK
ReadX 13944 128 248 248 NT_STATUS_OK
ReadX 13944 128 608 608 NT_STATUS_OK
ReadX 13944 2858 1024 1024 NT_STATUS_OK
ReadX 13944 2810 4096 4096 NT_STATUS_OK
ReadX 13944 2826 4096 4096 NT_STATUS_OK
ReadX 13944 2580 2048 2048 NT_STATUS_OK
ReadX 13944 2800 2560 2560 NT_STATUS_OK
ReadX 13944 2100 4096 4096 NT_STATUS_OK
ReadX 13944 2084 4096 4096 NT_STATUS_OK
ReadX 13944 868 4096 4096 NT_STATUS_OK
ReadX 13944 2324 4096 4096 NT_STATUS_OK
ReadX 13944 884 4096 4096 NT_STATUS_OK
ReadX 13944 2604 1024 1024 NT_STATUS_OK
ReadX 13944 580 4096 4096 NT_STATUS_OK
ReadX 13944 596 4096 4096 NT_STATUS_OK
ReadX 13944 2752 4096 4096 NT_STATUS_OK
ReadX 13944 2842 1024 1024 NT_STATUS_OK
ReadX 13944 660 4096 4096 NT_STATUS_OK
ReadX 13944 2720 4096 4096 NT_STATUS_OK
ReadX 13944 2736 4096 4096 NT_STATUS_OK
ReadX 13944 628 4096 4096 NT_STATUS_OK
ReadX 13944 2704 4096 4096 NT_STATUS_OK
ReadX 13944 1556 4096 4096 NT_STATUS_OK
ReadX 13944 576 4096 4096 NT_STATUS_OK
ReadX 13944 3168 1536 1536 NT_STATUS_OK
ReadX 13944 832 4096 4096 NT_STATUS_OK
ReadX 13944 1088 4096 4096 NT_STATUS_OK
ReadX 13944 1344 4096 4096 NT_STATUS_OK
ReadX 13944 1600 4096 4096 NT_STATUS_OK
ReadX 13944 1856 4096 4096 NT_STATUS_OK
ReadX 13944 2112 4096 4096 NT_STATUS_OK
ReadX 13944 1892 4096 4096 NT_STATUS_OK
ReadX 13944 820 4096 4096 NT_STATUS_OK
ReadX 13944 788 4096 4096 NT_STATUS_OK
ReadX 13944 1604 4096 4096 NT_STATUS_OK
ReadX 13944 3648 4096 4096 NT_STATUS_OK
ReadX 13944 2608 4096 4096 NT_STATUS_OK
ReadX 13944 548 4096 4096 NT_STATUS_OK
ReadX 13944 740 4096 4096 NT_STATUS_OK
ReadX 13944 1344 4096 4096 NT_STATUS_OK
ReadX 13944 3392 4096 4096 NT_STATUS_OK
ReadX 13944 3904 4096 4096 NT_STATUS_OK
ReadX 13944 644 4096 4096 NT_STATUS_OK
ReadX 13944 676 4096 4096 NT_STATUS_OK
ReadX 13944 2688 4096 4096 NT_STATUS_OK
ReadX 13944 320 4096 4096 NT_STATUS_OK
ReadX 13944 900 4096 4096 NT_STATUS_OK
ReadX 13944 1908 4096 4096 NT_STATUS_OK
ReadX 13944 852 4096 4096 NT_STATUS_OK
ReadX 13944 724 4096 4096 NT_STATUS_OK
ReadX 13944 2292 4096 4096 NT_STATUS_OK
ReadX 13944 612 4096 4096 NT_STATUS_OK
ReadX 13944 388 4096 4096 NT_STATUS_OK
ReadX 13944 2368 4096 4096 NT_STATUS_OK
ReadX 13944 2624 4096 4096 NT_STATUS_OK
ReadX 13944 500 4096 4096 NT_STATUS_OK
ReadX 13944 356 4096 4096 NT_STATUS_OK
ReadX 13944 1024 4096 4096 NT_STATUS_OK
ReadX 13944 576 4096 4096 NT_STATUS_OK
ReadX 13944 340 4096 4096 NT_STATUS_OK
ReadX 13944 420 4096 4096 NT_STATUS_OK
ReadX 13944 1600 4096 4096 NT_STATUS_OK
ReadX 13944 404 4096 4096 NT_STATUS_OK
ReadX 13944 1428 4096 4096 NT_STATUS_OK
ReadX 13944 2656 4096 4096 NT_STATUS_OK
ReadX 13944 2624 4096 4096 NT_STATUS_OK
ReadX 13944 452 4096 4096 NT_STATUS_OK
ReadX 13944 692 4096 4096 NT_STATUS_OK
ReadX 13944 564 4096 4096 NT_STATUS_OK
ReadX 13944 372 4096 4096 NT_STATUS_OK
ReadX 13944 468 4096 4096 NT_STATUS_OK
ReadX 13944 484 4096 4096 NT_STATUS_OK
ReadX 13944 1088 4096 4096 NT_STATUS_OK
ReadX 13944 1924 4096 4096 NT_STATUS_OK
ReadX 13944 2768 4096 4096 NT_STATUS_OK
ReadX 13944 832 4096 4096 NT_STATUS_OK
ReadX 13944 836 4096 4096 NT_STATUS_OK
ReadX 13944 1856 4096 4096 NT_STATUS_OK
ReadX 13944 2640 4096 4096 NT_STATUS_OK
ReadX 13944 436 4096 4096 NT_STATUS_OK
ReadX 13944 1828 4096 4096 NT_STATUS_OK
ReadX 13944 804 4096 4096 NT_STATUS_OK
ReadX 13944 1860 4096 4096 NT_STATUS_OK
ReadX 13944 1812 4096 4096 NT_STATUS_OK
ReadX 13944 756 4096 4096 NT_STATUS_OK
ReadX 13944 1636 4096 4096 NT_STATUS_OK
ReadX 13944 772 4096 4096 NT_STATUS_OK
ReadX 13944 2036 4096 4096 NT_STATUS_OK
ReadX 13944 1220 4096 4096 NT_STATUS_OK
ReadX 13944 1652 4096 4096 NT_STATUS_OK
ReadX 13944 2588 4096 4096 NT_STATUS_OK
ReadX 13944 916 4096 4096 NT_STATUS_OK
ReadX 13944 260 4096 4096 NT_STATUS_OK
ReadX 13944 932 4096 4096 NT_STATUS_OK
ReadX 13944 2624 4096 4096 NT_STATUS_OK
ReadX 13944 308 4096 4096 NT_STATUS_OK
ReadX 13944 292 4096 4096 NT_STATUS_OK
ReadX 13944 1140 4096 4096 NT_STATUS_OK
ReadX 13944 276 4096 4096 NT_STATUS_OK
ReadX 13944 2020 4096 4096 NT_STATUS_OK
ReadX 13944 2880 4096 4096 NT_STATUS_OK
ReadX 13944 516 4096 4096 NT_STATUS_OK
ReadX 13944 1844 4096 4096 NT_STATUS_OK
ReadX 13944 1124 4096 4096 NT_STATUS_OK
ReadX 13944 3136 4096 4096 NT_STATUS_OK
ReadX 13944 324 4096 4096 NT_STATUS_OK
ReadX 13944 1156 4096 4096 NT_STATUS_OK
ReadX 13944 1172 4096 4096 NT_STATUS_OK
ReadX 13944 2112 4096 4096 NT_STATUS_OK
ReadX 13944 2368 4096 4096 NT_STATUS_OK
ReadX 13944 964 4096 4096 NT_STATUS_OK
ReadX 13944 980 4096 4096 NT_STATUS_OK
ReadX 13944 1012 4096 4096 NT_STATUS_OK
ReadX 13944 532 4096 4096 NT_STATUS_OK
ReadX 13944 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13944 1620 4096 4096 NT_STATUS_OK
ReadX 13944 1604 4096 4096 NT_STATUS_OK
ReadX 13944 2116 4096 4096 NT_STATUS_OK
ReadX 13944 2132 4096 4096 NT_STATUS_OK
ReadX 13944 2148 4096 4096 NT_STATUS_OK
ReadX 13944 2276 4096 4096 NT_STATUS_OK
ReadX 13944 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13966 NT_STATUS_OK
Close 13966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13969 NT_STATUS_OK
QUERY_FILE_INFORMATION 13924 1004 NT_STATUS_OK
Close 13924 NT_STATUS_OK
WriteX 13969 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13926 1004 NT_STATUS_OK
Close 13926 NT_STATUS_OK
WriteX 13969 0 65536 65536 NT_STATUS_OK
WriteX 13969 65536 64850 64850 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13971 NT_STATUS_OK
WriteX 13971 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13971 258 NT_STATUS_OK
ReadX 13944 2068 4096 4096 NT_STATUS_OK
ReadX 13944 1588 4096 4096 NT_STATUS_OK
ReadX 13944 1572 4096 4096 NT_STATUS_OK
WriteX 13971 0 18630 18630 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
Close 13971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13973 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13944 612 4096 4096 NT_STATUS_OK
ReadX 13944 564 4096 4096 NT_STATUS_OK
ReadX 13944 1876 4096 4096 NT_STATUS_OK
ReadX 13944 628 4096 4096 NT_STATUS_OK
ReadX 13944 740 4096 4096 NT_STATUS_OK
ReadX 13944 724 4096 4096 NT_STATUS_OK
ReadX 13944 644 4096 4096 NT_STATUS_OK
ReadX 13944 2324 4096 4096 NT_STATUS_OK
ReadX 13944 660 4096 4096 NT_STATUS_OK
ReadX 13944 852 4096 4096 NT_STATUS_OK
ReadX 13944 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13944 2368 4096 4096 NT_STATUS_OK
ReadX 13944 1024 4096 4096 NT_STATUS_OK
ReadX 13944 320 4096 4096 NT_STATUS_OK
ReadX 13944 580 4096 4096 NT_STATUS_OK
ReadX 13944 3136 512 512 NT_STATUS_OK
ReadX 13944 2880 4096 4096 NT_STATUS_OK
Close 13944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 61440 4096 4096 NT_STATUS_OK
ReadX 13976 126976 4096 4096 NT_STATUS_OK
WriteX 13976 0 65536 65536 NT_STATUS_OK
WriteX 13976 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 61440 4096 4096 NT_STATUS_OK
ReadX 13977 126976 4096 4096 NT_STATUS_OK
ReadX 13977 192512 4096 4096 NT_STATUS_OK
ReadX 13977 258048 4096 4096 NT_STATUS_OK
WriteX 13977 0 65536 65536 NT_STATUS_OK
WriteX 13977 65536 65536 65536 NT_STATUS_OK
WriteX 13977 131072 65536 65536 NT_STATUS_OK
WriteX 13977 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13978 NT_STATUS_OK
ReadX 13978 61440 4096 4096 NT_STATUS_OK
ReadX 13978 126976 4096 4096 NT_STATUS_OK
ReadX 13978 192512 4096 4096 NT_STATUS_OK
ReadX 13978 258048 4096 4096 NT_STATUS_OK
ReadX 13978 323584 4096 4096 NT_STATUS_OK
ReadX 13978 389120 4096 4096 NT_STATUS_OK
ReadX 13978 454656 4096 4096 NT_STATUS_OK
ReadX 13978 520192 4096 4096 NT_STATUS_OK
WriteX 13978 0 65536 65536 NT_STATUS_OK
WriteX 13978 65536 65536 65536 NT_STATUS_OK
WriteX 13978 131072 65536 65536 NT_STATUS_OK
WriteX 13978 196608 65536 65536 NT_STATUS_OK
WriteX 13978 262144 65536 65536 NT_STATUS_OK
WriteX 13978 327680 65536 65536 NT_STATUS_OK
WriteX 13978 393216 65536 65536 NT_STATUS_OK
WriteX 13978 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13980 NT_STATUS_OK
Close 13980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13981 NT_STATUS_OK
WriteX 13981 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13981 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13979 0 8192 8192 NT_STATUS_OK
Flush 13979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13979 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13979 0 8192 8192 NT_STATUS_OK
Flush 13979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13979 0 8192 8192 NT_STATUS_OK
Flush 13979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13979 0 8192 8192 NT_STATUS_OK
Flush 13979 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13983 NT_STATUS_OK
Close 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13986 NT_STATUS_OK
WriteX 13986 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13986 258 NT_STATUS_OK
WriteX 13986 0 62591 62591 NT_STATUS_OK
Close 13986 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13988 NT_STATUS_OK
Close 13988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13991 NT_STATUS_OK
WriteX 13991 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13991 258 NT_STATUS_OK
WriteX 13991 0 10845 10845 NT_STATUS_OK
Close 13991 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13996 NT_STATUS_OK
WriteX 13996 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13996 258 NT_STATUS_OK
WriteX 13996 0 30118 30118 NT_STATUS_OK
Close 13996 NT_STATUS_OK
WriteX 13979 0 4096 4096 NT_STATUS_OK
WriteX 13981 0 64 64 NT_STATUS_OK
Close 13981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 61440 61440 NT_STATUS_OK
ReadX 13998 61440 4096 4096 NT_STATUS_OK
ReadX 13998 65536 61440 61440 NT_STATUS_OK
ReadX 13998 126976 4096 4096 NT_STATUS_OK
ReadX 13998 131072 61440 61440 NT_STATUS_OK
ReadX 13998 192512 4096 4096 NT_STATUS_OK
ReadX 13998 196608 61440 61440 NT_STATUS_OK
ReadX 13998 258048 4096 4096 NT_STATUS_OK
ReadX 13998 262144 61440 61440 NT_STATUS_OK
ReadX 13998 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 61440 61440 NT_STATUS_OK
ReadX 13999 61440 4096 4096 NT_STATUS_OK
ReadX 13999 65536 61440 61440 NT_STATUS_OK
ReadX 13999 126976 4096 4096 NT_STATUS_OK
ReadX 13999 131072 61440 61440 NT_STATUS_OK
ReadX 13999 192512 4096 4096 NT_STATUS_OK
ReadX 13999 196608 61440 61440 NT_STATUS_OK
ReadX 13999 258048 4096 4096 NT_STATUS_OK
ReadX 13999 262144 61440 61440 NT_STATUS_OK
ReadX 13999 323584 4096 4096 NT_STATUS_OK
ReadX 13999 327680 61440 61440 NT_STATUS_OK
ReadX 13999 389120 4096 4096 NT_STATUS_OK
ReadX 13999 393216 61440 61440 NT_STATUS_OK
ReadX 13999 454656 4096 4096 NT_STATUS_OK
ReadX 13999 458752 61440 61440 NT_STATUS_OK
ReadX 13999 520192 4096 4096 NT_STATUS_OK
ReadX 13999 524288 61440 61440 NT_STATUS_OK
ReadX 13999 585728 4096 4096 NT_STATUS_OK
ReadX 13999 589824 61440 61440 NT_STATUS_OK
ReadX 13999 651264 4096 4096 NT_STATUS_OK
ReadX 13999 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 61440 61440 NT_STATUS_OK
ReadX 14000 61440 4096 4096 NT_STATUS_OK
ReadX 14000 65536 61440 61440 NT_STATUS_OK
ReadX 14000 126976 4096 4096 NT_STATUS_OK
ReadX 14000 131072 61440 61440 NT_STATUS_OK
ReadX 14000 192512 4096 4096 NT_STATUS_OK
ReadX 14000 196608 61440 61440 NT_STATUS_OK
ReadX 14000 258048 4096 4096 NT_STATUS_OK
ReadX 14000 262144 61440 61440 NT_STATUS_OK
ReadX 14000 323584 4096 4096 NT_STATUS_OK
ReadX 14000 327680 61440 61440 NT_STATUS_OK
ReadX 14000 389120 4096 4096 NT_STATUS_OK
ReadX 14000 393216 61440 61440 NT_STATUS_OK
ReadX 14000 454656 4096 4096 NT_STATUS_OK
ReadX 14000 458752 61440 61440 NT_STATUS_OK
ReadX 14000 520192 4096 4096 NT_STATUS_OK
ReadX 14000 524288 61440 61440 NT_STATUS_OK
ReadX 14000 585728 4096 4096 NT_STATUS_OK
ReadX 14000 589824 61440 61440 NT_STATUS_OK
ReadX 14000 651264 4096 4096 NT_STATUS_OK
ReadX 14000 655360 61440 61440 NT_STATUS_OK
ReadX 14000 716800 4096 4096 NT_STATUS_OK
ReadX 14000 720896 61440 61440 NT_STATUS_OK
ReadX 14000 782336 4096 4096 NT_STATUS_OK
ReadX 14000 786432 61440 61440 NT_STATUS_OK
ReadX 14000 847872 4096 4096 NT_STATUS_OK
ReadX 14000 851968 61440 61440 NT_STATUS_OK
ReadX 14000 913408 4096 4096 NT_STATUS_OK
ReadX 14000 917504 61440 61440 NT_STATUS_OK
ReadX 14000 978944 4096 4096 NT_STATUS_OK
ReadX 14000 983040 61440 61440 NT_STATUS_OK
ReadX 14000 1044480 4096 4096 NT_STATUS_OK
ReadX 14000 1048576 61440 61440 NT_STATUS_OK
ReadX 14000 1110016 4096 4096 NT_STATUS_OK
ReadX 14000 1114112 61440 61440 NT_STATUS_OK
ReadX 14000 1175552 4096 4096 NT_STATUS_OK
ReadX 14000 1179648 61440 61440 NT_STATUS_OK
ReadX 14000 1241088 4096 4096 NT_STATUS_OK
ReadX 14000 1245184 61440 61440 NT_STATUS_OK
ReadX 14000 1306624 4096 4096 NT_STATUS_OK
ReadX 14000 1310720 61440 61440 NT_STATUS_OK
ReadX 14000 1372160 4096 4096 NT_STATUS_OK
ReadX 14000 1376256 61440 61440 NT_STATUS_OK
ReadX 14000 1437696 4096 4096 NT_STATUS_OK
ReadX 14000 1441792 61440 61440 NT_STATUS_OK
ReadX 14000 1503232 4096 4096 NT_STATUS_OK
ReadX 14000 1507328 61440 61440 NT_STATUS_OK
ReadX 14000 1568768 4096 4096 NT_STATUS_OK
ReadX 14000 1572864 61440 61440 NT_STATUS_OK
ReadX 14000 1634304 4096 4096 NT_STATUS_OK
ReadX 14000 1638400 61440 61440 NT_STATUS_OK
ReadX 14000 1699840 4096 4096 NT_STATUS_OK
ReadX 14000 1703936 61440 61440 NT_STATUS_OK
ReadX 14000 1765376 4096 4096 NT_STATUS_OK
ReadX 14000 1769472 61440 61440 NT_STATUS_OK
ReadX 14000 1830912 4096 4096 NT_STATUS_OK
ReadX 14000 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14001 NT_STATUS_OK
Close 14001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 13999 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
ReadX 14005 4096 4096 4096 NT_STATUS_OK
ReadX 14005 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 14009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14009 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 8192 8192 NT_STATUS_OK
ReadX 14013 8192 8192 8192 NT_STATUS_OK
ReadX 14013 16384 8192 8192 NT_STATUS_OK
ReadX 14013 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14018 NT_STATUS_OK
WriteX 14018 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
WriteX 14018 0 10438 10438 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 14020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 14021 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 14022 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 14024 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14026 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
ReadX 14027 4096 4096 4096 NT_STATUS_OK
ReadX 14027 8192 4096 4096 NT_STATUS_OK
ReadX 14027 12288 8192 8192 NT_STATUS_OK
ReadX 14027 20480 8192 8192 NT_STATUS_OK
ReadX 14027 28672 8192 8192 NT_STATUS_OK
ReadX 14027 36864 8192 8192 NT_STATUS_OK
ReadX 14027 45056 8192 8192 NT_STATUS_OK
ReadX 14027 53248 8192 8192 NT_STATUS_OK
ReadX 14027 61440 8192 8192 NT_STATUS_OK
ReadX 14027 69632 8192 8192 NT_STATUS_OK
ReadX 14027 77824 8192 8192 NT_STATUS_OK
ReadX 14027 86016 8192 8192 NT_STATUS_OK
ReadX 14027 94208 8192 8192 NT_STATUS_OK
ReadX 14027 102400 8192 8192 NT_STATUS_OK
ReadX 14027 110592 8192 8192 NT_STATUS_OK
ReadX 14027 118784 8192 8192 NT_STATUS_OK
ReadX 14027 126976 8192 8192 NT_STATUS_OK
ReadX 14027 135168 8192 8192 NT_STATUS_OK
ReadX 14027 143360 8192 8192 NT_STATUS_OK
ReadX 14027 151552 8192 8192 NT_STATUS_OK
ReadX 14027 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Close 14020 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14032 NT_STATUS_OK
WriteX 14032 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14032 258 NT_STATUS_OK
WriteX 14032 0 28489 28489 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 14033 NT_STATUS_OK
Close 14033 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14035 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14035 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14036 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 8192 8192 NT_STATUS_OK
ReadX 14039 8192 8192 8192 NT_STATUS_OK
ReadX 14039 16384 8192 8192 NT_STATUS_OK
ReadX 14039 24576 8192 8192 NT_STATUS_OK
ReadX 14039 32768 16384 16384 NT_STATUS_OK
ReadX 14039 49152 8192 8192 NT_STATUS_OK
ReadX 14039 57344 8192 8192 NT_STATUS_OK
ReadX 14039 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14041 NT_STATUS_OK
Close 14041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14044 NT_STATUS_OK
WriteX 14044 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14044 258 NT_STATUS_OK
WriteX 14044 0 29253 29253 NT_STATUS_OK
Close 14044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14045 NT_STATUS_OK
Close 14045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 14047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 14048 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14051 NT_STATUS_OK
WriteX 14051 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14051 258 NT_STATUS_OK
WriteX 14051 0 30183 30183 NT_STATUS_OK
Close 14051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 14052 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 14054 NT_STATUS_OK
WriteX 14054 0 510 510 NT_STATUS_OK
WriteX 14054 510 512 512 NT_STATUS_OK
WriteX 14054 1022 510 510 NT_STATUS_OK
WriteX 14054 1532 510 510 NT_STATUS_OK
WriteX 14054 2042 168 168 NT_STATUS_OK
Close 14054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14055 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
WriteX 14057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 61440 4096 4096 NT_STATUS_OK
ReadX 14058 126976 4096 4096 NT_STATUS_OK
WriteX 14058 0 65536 65536 NT_STATUS_OK
WriteX 14058 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 61440 4096 4096 NT_STATUS_OK
ReadX 14059 126976 4096 4096 NT_STATUS_OK
ReadX 14059 192512 4096 4096 NT_STATUS_OK
ReadX 14059 258048 4096 4096 NT_STATUS_OK
WriteX 14059 0 65536 65536 NT_STATUS_OK
WriteX 14059 65536 65536 65536 NT_STATUS_OK
WriteX 14059 131072 65536 65536 NT_STATUS_OK
WriteX 14059 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 61440 4096 4096 NT_STATUS_OK
ReadX 14060 126976 4096 4096 NT_STATUS_OK
ReadX 14060 192512 4096 4096 NT_STATUS_OK
ReadX 14060 258048 4096 4096 NT_STATUS_OK
ReadX 14060 323584 4096 4096 NT_STATUS_OK
ReadX 14060 389120 4096 4096 NT_STATUS_OK
ReadX 14060 454656 4096 4096 NT_STATUS_OK
ReadX 14060 520192 4096 4096 NT_STATUS_OK
WriteX 14060 0 65536 65536 NT_STATUS_OK
WriteX 14060 65536 65536 65536 NT_STATUS_OK
WriteX 14060 131072 65536 65536 NT_STATUS_OK
WriteX 14060 196608 65536 65536 NT_STATUS_OK
WriteX 14060 262144 65536 65536 NT_STATUS_OK
WriteX 14060 327680 65536 65536 NT_STATUS_OK
WriteX 14060 393216 65536 65536 NT_STATUS_OK
WriteX 14060 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 14061 NT_STATUS_OK
Close 14061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 14063 NT_STATUS_OK
Close 14063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 14067 NT_STATUS_OK
Close 14067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 14072 NT_STATUS_OK
Close 14072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14076 NT_STATUS_OK
Close 14076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14079 NT_STATUS_OK
Close 14079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14081 NT_STATUS_OK
Close 14081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14085 NT_STATUS_OK
Close 14085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14090 NT_STATUS_OK
Close 14090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9391 NT_STATUS_OK
Close 9391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9396 NT_STATUS_OK
Close 9396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9401 NT_STATUS_OK
Close 9401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9406 NT_STATUS_OK
Close 9406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 9411 NT_STATUS_OK
Close 9411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 9414 NT_STATUS_OK
Close 9414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9417 NT_STATUS_OK
Close 9417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9420 NT_STATUS_OK
WriteX 9420 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9420 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 9420 0 65536 65536 NT_STATUS_OK
WriteX 9420 65536 65536 65536 NT_STATUS_OK
WriteX 9420 131072 65536 65536 NT_STATUS_OK
WriteX 9420 196608 65536 65536 NT_STATUS_OK
WriteX 9420 262144 26634 26634 NT_STATUS_OK
Close 9420 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9425 NT_STATUS_OK
Close 9425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9426 NT_STATUS_OK
Close 9426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9427 NT_STATUS_OK
ReadX 9427 0 4096 4096 NT_STATUS_OK
Close 9427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9428 NT_STATUS_OK
ReadX 9428 0 4096 4096 NT_STATUS_OK
ReadX 9428 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9429 NT_STATUS_OK
Close 9429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 9428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9433 NT_STATUS_OK
Close 9433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9436 NT_STATUS_OK
Close 9436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9438 NT_STATUS_OK
Close 9438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9442 NT_STATUS_OK
Close 9442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9445 NT_STATUS_OK
Close 9445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9447 NT_STATUS_OK
Close 9447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9451 NT_STATUS_OK
Close 9451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9456 NT_STATUS_OK
Close 9456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9461 NT_STATUS_OK
Close 9461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9466 NT_STATUS_OK
Close 9466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9471 NT_STATUS_OK
Close 9471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9476 NT_STATUS_OK
Close 9476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9480 NT_STATUS_OK
Close 9480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9485 NT_STATUS_OK
Close 9485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9490 NT_STATUS_OK
Close 9490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9493 NT_STATUS_OK
Close 9493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9495 NT_STATUS_OK
Close 9495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9505 NT_STATUS_OK
Close 9505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9507 NT_STATUS_OK
ReadX 9507 0 4096 4096 NT_STATUS_OK
Close 9507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9508 NT_STATUS_OK
ReadX 9508 0 4096 4096 NT_STATUS_OK
Close 9508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9509 NT_STATUS_OK
ReadX 9509 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9519 NT_STATUS_OK
Close 9519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9521 NT_STATUS_OK
ReadX 9521 0 4096 4096 NT_STATUS_OK
Close 9521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9522 NT_STATUS_OK
ReadX 9522 0 4096 4096 NT_STATUS_OK
Close 9522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9523 NT_STATUS_OK
ReadX 9523 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9509 NT_STATUS_OK
Close 9523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9552 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9552 0 4096 4096 NT_STATUS_OK
Close 9552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9553 NT_STATUS_OK
ReadX 9553 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9554 NT_STATUS_OK
ReadX 9554 0 4096 4096 NT_STATUS_OK
ReadX 9554 4096 4096 4096 NT_STATUS_OK
ReadX 9554 8192 4096 4096 NT_STATUS_OK
ReadX 9554 12288 4096 4096 NT_STATUS_OK
ReadX 9554 16384 4096 4096 NT_STATUS_OK
ReadX 9554 20480 4096 4096 NT_STATUS_OK
ReadX 9554 24576 4096 4096 NT_STATUS_OK
ReadX 9554 28672 4096 4096 NT_STATUS_OK
ReadX 9554 32768 4096 4096 NT_STATUS_OK
ReadX 9554 36864 4096 4096 NT_STATUS_OK
ReadX 9554 40960 4096 4096 NT_STATUS_OK
ReadX 9554 45056 4096 4096 NT_STATUS_OK
ReadX 9554 49152 4096 4096 NT_STATUS_OK
ReadX 9554 53248 4096 4096 NT_STATUS_OK
ReadX 9554 57344 4096 4096 NT_STATUS_OK
ReadX 9554 61440 4096 4096 NT_STATUS_OK
ReadX 9554 65536 4096 4096 NT_STATUS_OK
ReadX 9554 69632 4096 4096 NT_STATUS_OK
ReadX 9554 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9554 1004 NT_STATUS_OK
WriteX 9554 0 4096 4096 NT_STATUS_OK
Close 9554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9555 NT_STATUS_OK
SET_FILE_INFORMATION 9555 1004 NT_STATUS_OK
Close 9555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9556 NT_STATUS_OK
ReadX 9556 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9557 NT_STATUS_OK
Close 9557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9560 NT_STATUS_OK
WriteX 9560 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9560 258 NT_STATUS_OK
WriteX 9560 0 65536 65536 NT_STATUS_OK
WriteX 9560 65536 19979 19979 NT_STATUS_OK
Close 9560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9561 NT_STATUS_OK
ReadX 9561 0 4096 4096 NT_STATUS_OK
WriteX 9561 0 4096 4096 NT_STATUS_OK
Flush 9561 NT_STATUS_OK
WriteX 9561 0 4096 4096 NT_STATUS_OK
Flush 9561 NT_STATUS_OK
QUERY_FILE_INFORMATION 9561 1004 NT_STATUS_OK
WriteX 9561 0 4096 4096 NT_STATUS_OK
Flush 9561 NT_STATUS_OK
WriteX 9561 0 4096 4096 NT_STATUS_OK
Flush 9561 NT_STATUS_OK
WriteX 9561 0 4096 4096 NT_STATUS_OK
Flush 9561 NT_STATUS_OK
SET_FILE_INFORMATION 9561 1004 NT_STATUS_OK
WriteX 9561 0 4096 4096 NT_STATUS_OK
Flush 9561 NT_STATUS_OK
Close 9561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9562 NT_STATUS_OK
ReadX 9562 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9563 NT_STATUS_OK
ReadX 9563 0 4096 4096 NT_STATUS_OK
Close 9562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9564 NT_STATUS_OK
ReadX 9564 0 4096 4096 NT_STATUS_OK
Close 9564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9565 NT_STATUS_OK
ReadX 9565 0 4096 4096 NT_STATUS_OK
Close 9565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9566 NT_STATUS_OK
ReadX 9566 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9566 1004 NT_STATUS_OK
WriteX 9566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9567 NT_STATUS_OK
Close 9567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9563 NT_STATUS_OK
Close 9566 NT_STATUS_OK
Close 9556 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9569 NT_STATUS_OK
Close 9569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9572 NT_STATUS_OK
WriteX 9572 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9572 258 NT_STATUS_OK
WriteX 9572 0 65536 65536 NT_STATUS_OK
WriteX 9572 65536 17654 17654 NT_STATUS_OK
Close 9572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9573 NT_STATUS_OK
ReadX 9573 0 4096 4096 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Flush 9573 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Flush 9573 NT_STATUS_OK
QUERY_FILE_INFORMATION 9573 1004 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Flush 9573 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Flush 9573 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Flush 9573 NT_STATUS_OK
SET_FILE_INFORMATION 9573 1004 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Flush 9573 NT_STATUS_OK
Close 9573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9574 NT_STATUS_OK
SET_FILE_INFORMATION 9574 1004 NT_STATUS_OK
Close 9574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9575 NT_STATUS_OK
ReadX 9575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9576 NT_STATUS_OK
Close 9576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9578 NT_STATUS_OK
ReadX 9578 0 4096 4096 NT_STATUS_OK
ReadX 9578 4096 4096 4096 NT_STATUS_OK
ReadX 9578 8192 4096 4096 NT_STATUS_OK
ReadX 9578 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9578 16384 4096 4096 NT_STATUS_OK
ReadX 9578 20480 4096 4096 NT_STATUS_OK
ReadX 9578 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9579 NT_STATUS_OK
ReadX 9579 0 4096 4096 NT_STATUS_OK
Close 9579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9580 NT_STATUS_OK
ReadX 9580 0 4096 4096 NT_STATUS_OK
Close 9580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9581 NT_STATUS_OK
ReadX 9581 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9581 1004 NT_STATUS_OK
WriteX 9581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9582 NT_STATUS_OK
Close 9582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9581 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9584 NT_STATUS_OK
Close 9584 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9587 NT_STATUS_OK
WriteX 9587 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9587 258 NT_STATUS_OK
WriteX 9587 0 65536 65536 NT_STATUS_OK
WriteX 9587 65536 19490 19490 NT_STATUS_OK
Close 9587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9588 NT_STATUS_OK
ReadX 9588 0 4096 4096 NT_STATUS_OK
WriteX 9588 0 4096 4096 NT_STATUS_OK
Flush 9588 NT_STATUS_OK
WriteX 9588 0 4096 4096 NT_STATUS_OK
Flush 9588 NT_STATUS_OK
QUERY_FILE_INFORMATION 9588 1004 NT_STATUS_OK
WriteX 9588 0 4096 4096 NT_STATUS_OK
Flush 9588 NT_STATUS_OK
WriteX 9588 0 4096 4096 NT_STATUS_OK
Flush 9588 NT_STATUS_OK
WriteX 9588 0 4096 4096 NT_STATUS_OK
Flush 9588 NT_STATUS_OK
SET_FILE_INFORMATION 9588 1004 NT_STATUS_OK
WriteX 9588 0 4096 4096 NT_STATUS_OK
Flush 9588 NT_STATUS_OK
Close 9588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9589 NT_STATUS_OK
SET_FILE_INFORMATION 9589 1004 NT_STATUS_OK
Close 9589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9590 NT_STATUS_OK
ReadX 9590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9591 NT_STATUS_OK
Close 9591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9593 0 4096 4096 NT_STATUS_OK
Close 9593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9594 NT_STATUS_OK
ReadX 9594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9595 NT_STATUS_OK
ReadX 9595 0 4096 4096 NT_STATUS_OK
ReadX 9595 4096 4096 4096 NT_STATUS_OK
ReadX 9595 8192 4096 4096 NT_STATUS_OK
ReadX 9595 12288 4096 4096 NT_STATUS_OK
ReadX 9595 16384 4096 4096 NT_STATUS_OK
ReadX 9595 20480 4096 4096 NT_STATUS_OK
ReadX 9595 24576 4096 4096 NT_STATUS_OK
ReadX 9595 28672 4096 4096 NT_STATUS_OK
ReadX 9595 32768 4096 4096 NT_STATUS_OK
ReadX 9595 36864 4096 4096 NT_STATUS_OK
ReadX 9595 40960 4096 4096 NT_STATUS_OK
ReadX 9595 45056 4096 4096 NT_STATUS_OK
ReadX 9595 49152 4096 4096 NT_STATUS_OK
ReadX 9595 53248 4096 4096 NT_STATUS_OK
ReadX 9595 57344 4096 4096 NT_STATUS_OK
ReadX 9595 61440 4096 4096 NT_STATUS_OK
ReadX 9595 65536 4096 4096 NT_STATUS_OK
ReadX 9595 69632 4096 4096 NT_STATUS_OK
ReadX 9595 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9595 1004 NT_STATUS_OK
WriteX 9595 0 4096 4096 NT_STATUS_OK
Close 9595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9596 NT_STATUS_OK
SET_FILE_INFORMATION 9596 1004 NT_STATUS_OK
Close 9596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9597 NT_STATUS_OK
ReadX 9597 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9598 NT_STATUS_OK
Close 9598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9601 NT_STATUS_OK
WriteX 9601 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9601 258 NT_STATUS_OK
WriteX 9601 0 65536 65536 NT_STATUS_OK
WriteX 9601 65536 8866 8866 NT_STATUS_OK
Close 9601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9602 NT_STATUS_OK
ReadX 9602 0 4096 4096 NT_STATUS_OK
WriteX 9602 0 4096 4096 NT_STATUS_OK
Flush 9602 NT_STATUS_OK
SET_FILE_INFORMATION 9602 1004 NT_STATUS_OK
WriteX 9602 0 4096 4096 NT_STATUS_OK
Flush 9602 NT_STATUS_OK
Close 9602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9603 NT_STATUS_OK
ReadX 9603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9604 NT_STATUS_OK
ReadX 9604 0 4096 4096 NT_STATUS_OK
Close 9604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9605 NT_STATUS_OK
ReadX 9605 0 4096 4096 NT_STATUS_OK
Close 9605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9606 NT_STATUS_OK
ReadX 9606 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9606 1004 NT_STATUS_OK
WriteX 9606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9607 NT_STATUS_OK
Close 9607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9606 NT_STATUS_OK
Close 9597 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9609 NT_STATUS_OK
Close 9609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9612 NT_STATUS_OK
WriteX 9612 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9612 258 NT_STATUS_OK
WriteX 9612 0 65536 65536 NT_STATUS_OK
WriteX 9612 65536 9298 9298 NT_STATUS_OK
Close 9612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9613 NT_STATUS_OK
ReadX 9613 0 4096 4096 NT_STATUS_OK
WriteX 9613 0 4096 4096 NT_STATUS_OK
Flush 9613 NT_STATUS_OK
SET_FILE_INFORMATION 9613 1004 NT_STATUS_OK
WriteX 9613 0 4096 4096 NT_STATUS_OK
Flush 9613 NT_STATUS_OK
Close 9613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9614 NT_STATUS_OK
SET_FILE_INFORMATION 9614 1004 NT_STATUS_OK
Close 9614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9615 NT_STATUS_OK
ReadX 9615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9616 NT_STATUS_OK
Close 9616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9619 0 4096 4096 NT_STATUS_OK
Close 9619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9620 NT_STATUS_OK
ReadX 9620 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9620 4096 4096 4096 NT_STATUS_OK
ReadX 9620 8192 4096 4096 NT_STATUS_OK
ReadX 9620 12288 4096 4096 NT_STATUS_OK
ReadX 9620 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9621 NT_STATUS_OK
ReadX 9621 0 4096 4096 NT_STATUS_OK
Close 9621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9622 NT_STATUS_OK
ReadX 9622 0 4096 4096 NT_STATUS_OK
Close 9622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9623 NT_STATUS_OK
ReadX 9623 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9623 1004 NT_STATUS_OK
WriteX 9623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9624 NT_STATUS_OK
Close 9624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9620 NT_STATUS_OK
Close 9623 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9626 NT_STATUS_OK
Close 9626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9629 NT_STATUS_OK
WriteX 9629 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9629 258 NT_STATUS_OK
WriteX 9629 0 65536 65536 NT_STATUS_OK
WriteX 9629 65536 11540 11540 NT_STATUS_OK
Close 9629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9630 NT_STATUS_OK
ReadX 9630 0 4096 4096 NT_STATUS_OK
WriteX 9630 0 4096 4096 NT_STATUS_OK
Flush 9630 NT_STATUS_OK
SET_FILE_INFORMATION 9630 1004 NT_STATUS_OK
WriteX 9630 0 4096 4096 NT_STATUS_OK
Flush 9630 NT_STATUS_OK
Close 9630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9631 NT_STATUS_OK
SET_FILE_INFORMATION 9631 1004 NT_STATUS_OK
Close 9631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9632 NT_STATUS_OK
ReadX 9632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 9633 NT_STATUS_OK
Close 9633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9635 NT_STATUS_OK
ReadX 9635 61440 4096 4096 NT_STATUS_OK
ReadX 9635 126976 4096 4096 NT_STATUS_OK
WriteX 9635 0 65536 65536 NT_STATUS_OK
WriteX 9635 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9636 NT_STATUS_OK
ReadX 9636 61440 4096 4096 NT_STATUS_OK
ReadX 9636 126976 4096 4096 NT_STATUS_OK
ReadX 9636 192512 4096 4096 NT_STATUS_OK
ReadX 9636 258048 4096 4096 NT_STATUS_OK
WriteX 9636 0 65536 65536 NT_STATUS_OK
WriteX 9636 65536 65536 65536 NT_STATUS_OK
WriteX 9636 131072 65536 65536 NT_STATUS_OK
WriteX 9636 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9637 NT_STATUS_OK
ReadX 9637 61440 4096 4096 NT_STATUS_OK
ReadX 9637 126976 4096 4096 NT_STATUS_OK
ReadX 9637 192512 4096 4096 NT_STATUS_OK
ReadX 9637 258048 4096 4096 NT_STATUS_OK
ReadX 9637 323584 4096 4096 NT_STATUS_OK
ReadX 9637 389120 4096 4096 NT_STATUS_OK
ReadX 9637 454656 4096 4096 NT_STATUS_OK
ReadX 9637 520192 4096 4096 NT_STATUS_OK
WriteX 9637 0 65536 65536 NT_STATUS_OK
WriteX 9637 65536 65536 65536 NT_STATUS_OK
WriteX 9637 131072 65536 65536 NT_STATUS_OK
WriteX 9637 196608 65536 65536 NT_STATUS_OK
WriteX 9637 262144 65536 65536 NT_STATUS_OK
WriteX 9637 327680 65536 65536 NT_STATUS_OK
WriteX 9637 393216 65536 65536 NT_STATUS_OK
WriteX 9637 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9638 NT_STATUS_OK
ReadX 9638 0 4096 4096 NT_STATUS_OK
ReadX 9638 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9639 NT_STATUS_OK
WriteX 9639 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9639 258 NT_STATUS_OK
WriteX 9639 0 53 53 NT_STATUS_OK
Close 9639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9640 NT_STATUS_OK
Close 9640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9632 NT_STATUS_OK
Close 9578 NT_STATUS_OK
Close 9635 NT_STATUS_OK
Close 9636 NT_STATUS_OK
Close 9637 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9638 8192 4096 4096 NT_STATUS_OK
ReadX 9638 12288 4096 4096 NT_STATUS_OK
WriteX 9642 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9642 258 NT_STATUS_OK
ReadX 9638 16384 4096 4096 NT_STATUS_OK
ReadX 9638 20480 4096 4096 NT_STATUS_OK
WriteX 9642 0 15360 15360 NT_STATUS_OK
Close 9642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9643 NT_STATUS_OK
ReadX 9643 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9643 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9643 1004 NT_STATUS_OK
WriteX 9643 0 4096 4096 NT_STATUS_OK
Close 9643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9644 NT_STATUS_OK
Close 9644 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9646 NT_STATUS_OK
ReadX 9646 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9647 NT_STATUS_OK
Close 9647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9646 4096 4096 4096 NT_STATUS_OK
ReadX 9646 8192 4096 4096 NT_STATUS_OK
ReadX 9646 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9649 NT_STATUS_OK
ReadX 9649 0 4096 4096 NT_STATUS_OK
ReadX 9649 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9650 NT_STATUS_OK
ReadX 9650 0 4096 4096 NT_STATUS_OK
ReadX 9650 4096 4096 4096 NT_STATUS_OK
ReadX 9650 8192 4096 4096 NT_STATUS_OK
Close 9649 NT_STATUS_OK
Close 9650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9651 NT_STATUS_OK
WriteX 9651 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9651 258 NT_STATUS_OK
WriteX 9651 0 15360 15360 NT_STATUS_OK
Close 9651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9652 NT_STATUS_OK
ReadX 9652 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9652 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9652 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9653 NT_STATUS_OK
Close 9653 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9655 NT_STATUS_OK
ReadX 9655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9656 NT_STATUS_OK
SET_FILE_INFORMATION 9656 1004 NT_STATUS_OK
Close 9656 NT_STATUS_OK
WriteX 9652 0 4096 4096 NT_STATUS_OK
Close 9652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9657 NT_STATUS_OK
Close 9657 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9659 NT_STATUS_OK
ReadX 9659 0 4096 4096 NT_STATUS_OK
ReadX 9659 4096 4096 4096 NT_STATUS_OK
ReadX 9659 8192 4096 4096 NT_STATUS_OK
ReadX 9659 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9659 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9659 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9660 NT_STATUS_OK
ReadX 9660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9661 NT_STATUS_OK
WriteX 9661 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9661 258 NT_STATUS_OK
WriteX 9661 0 53 53 NT_STATUS_OK
Close 9661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9662 NT_STATUS_OK
Close 9662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9660 4096 4096 4096 NT_STATUS_OK
ReadX 9660 8192 4096 4096 NT_STATUS_OK
ReadX 9660 12288 4096 4096 NT_STATUS_OK
WriteX 9664 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9664 258 NT_STATUS_OK
WriteX 9664 0 12006 12006 NT_STATUS_OK
Close 9664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9665 NT_STATUS_OK
ReadX 9665 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9665 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9665 1004 NT_STATUS_OK
WriteX 9665 0 4096 4096 NT_STATUS_OK
Close 9665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9666 NT_STATUS_OK
Close 9666 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9668 NT_STATUS_OK
ReadX 9668 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9669 NT_STATUS_OK
Close 9669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9668 4096 4096 4096 NT_STATUS_OK
ReadX 9668 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9671 NT_STATUS_OK
WriteX 9671 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9671 258 NT_STATUS_OK
WriteX 9671 0 11991 11991 NT_STATUS_OK
Close 9671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9672 NT_STATUS_OK
ReadX 9672 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9672 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9672 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9673 NT_STATUS_OK
Close 9673 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9675 NT_STATUS_OK
ReadX 9675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9676 NT_STATUS_OK
WriteX 9659 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 9676 1004 NT_STATUS_OK
Close 9676 NT_STATUS_OK
WriteX 9672 0 4096 4096 NT_STATUS_OK
Close 9672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9677 NT_STATUS_OK
Close 9677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9679 NT_STATUS_OK
ReadX 9679 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9680 NT_STATUS_OK
Close 9680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9679 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9679 1004 NT_STATUS_OK
ReadX 9679 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9679 1004 NT_STATUS_OK
WriteX 9679 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9679 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9679 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9679 1004 NT_STATUS_OK
Close 9655 NT_STATUS_OK
WriteX 9679 0 12288 12288 NT_STATUS_OK
Close 9675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9682 NT_STATUS_OK
Close 9682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9659 NT_STATUS_OK
Close 9679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9684 NT_STATUS_OK
Close 9684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9686 NT_STATUS_OK
ReadX 9686 0 61440 61440 NT_STATUS_OK
ReadX 9686 61440 4096 4096 NT_STATUS_OK
ReadX 9686 65536 61440 61440 NT_STATUS_OK
ReadX 9686 126976 4096 4096 NT_STATUS_OK
ReadX 9686 131072 61440 61440 NT_STATUS_OK
ReadX 9686 192512 4096 4096 NT_STATUS_OK
ReadX 9686 196608 61440 61440 NT_STATUS_OK
ReadX 9686 258048 4096 4096 NT_STATUS_OK
ReadX 9686 262144 61440 61440 NT_STATUS_OK
ReadX 9686 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9687 NT_STATUS_OK
ReadX 9687 0 61440 61440 NT_STATUS_OK
ReadX 9687 61440 4096 4096 NT_STATUS_OK
ReadX 9687 65536 61440 61440 NT_STATUS_OK
ReadX 9687 126976 4096 4096 NT_STATUS_OK
ReadX 9687 131072 61440 61440 NT_STATUS_OK
ReadX 9687 192512 4096 4096 NT_STATUS_OK
ReadX 9687 196608 61440 61440 NT_STATUS_OK
ReadX 9687 258048 4096 4096 NT_STATUS_OK
ReadX 9687 262144 61440 61440 NT_STATUS_OK
ReadX 9687 323584 4096 4096 NT_STATUS_OK
ReadX 9687 327680 61440 61440 NT_STATUS_OK
ReadX 9687 389120 4096 4096 NT_STATUS_OK
ReadX 9687 393216 61440 61440 NT_STATUS_OK
ReadX 9687 454656 4096 4096 NT_STATUS_OK
ReadX 9687 458752 61440 61440 NT_STATUS_OK
ReadX 9687 520192 4096 4096 NT_STATUS_OK
ReadX 9687 524288 61440 61440 NT_STATUS_OK
ReadX 9687 585728 4096 4096 NT_STATUS_OK
ReadX 9687 589824 61440 61440 NT_STATUS_OK
ReadX 9687 651264 4096 4096 NT_STATUS_OK
ReadX 9687 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9688 NT_STATUS_OK
ReadX 9688 0 61440 61440 NT_STATUS_OK
ReadX 9688 61440 4096 4096 NT_STATUS_OK
ReadX 9688 65536 61440 61440 NT_STATUS_OK
ReadX 9688 126976 4096 4096 NT_STATUS_OK
ReadX 9688 131072 61440 61440 NT_STATUS_OK
ReadX 9688 192512 4096 4096 NT_STATUS_OK
ReadX 9688 196608 61440 61440 NT_STATUS_OK
ReadX 9688 258048 4096 4096 NT_STATUS_OK
ReadX 9688 262144 61440 61440 NT_STATUS_OK
ReadX 9688 323584 4096 4096 NT_STATUS_OK
ReadX 9688 327680 61440 61440 NT_STATUS_OK
ReadX 9688 389120 4096 4096 NT_STATUS_OK
ReadX 9688 393216 61440 61440 NT_STATUS_OK
ReadX 9688 454656 4096 4096 NT_STATUS_OK
ReadX 9688 458752 61440 61440 NT_STATUS_OK
ReadX 9688 520192 4096 4096 NT_STATUS_OK
ReadX 9688 524288 61440 61440 NT_STATUS_OK
ReadX 9688 585728 4096 4096 NT_STATUS_OK
ReadX 9688 589824 61440 61440 NT_STATUS_OK
ReadX 9688 651264 4096 4096 NT_STATUS_OK
ReadX 9688 655360 61440 61440 NT_STATUS_OK
ReadX 9688 716800 4096 4096 NT_STATUS_OK
ReadX 9688 720896 61440 61440 NT_STATUS_OK
ReadX 9688 782336 4096 4096 NT_STATUS_OK
ReadX 9688 786432 61440 61440 NT_STATUS_OK
ReadX 9688 847872 4096 4096 NT_STATUS_OK
ReadX 9688 851968 61440 61440 NT_STATUS_OK
ReadX 9688 913408 4096 4096 NT_STATUS_OK
ReadX 9688 917504 61440 61440 NT_STATUS_OK
ReadX 9688 978944 4096 4096 NT_STATUS_OK
ReadX 9688 983040 61440 61440 NT_STATUS_OK
ReadX 9688 1044480 4096 4096 NT_STATUS_OK
ReadX 9688 1048576 61440 61440 NT_STATUS_OK
ReadX 9688 1110016 4096 4096 NT_STATUS_OK
ReadX 9688 1114112 61440 61440 NT_STATUS_OK
ReadX 9688 1175552 4096 4096 NT_STATUS_OK
ReadX 9688 1179648 61440 61440 NT_STATUS_OK
ReadX 9688 1241088 4096 4096 NT_STATUS_OK
ReadX 9688 1245184 61440 61440 NT_STATUS_OK
ReadX 9688 1306624 4096 4096 NT_STATUS_OK
ReadX 9688 1310720 61440 61440 NT_STATUS_OK
ReadX 9688 1372160 4096 4096 NT_STATUS_OK
ReadX 9688 1376256 61440 61440 NT_STATUS_OK
ReadX 9688 1437696 4096 4096 NT_STATUS_OK
ReadX 9688 1441792 61440 61440 NT_STATUS_OK
ReadX 9688 1503232 4096 4096 NT_STATUS_OK
ReadX 9688 1507328 61440 61440 NT_STATUS_OK
ReadX 9688 1568768 4096 4096 NT_STATUS_OK
ReadX 9688 1572864 61440 61440 NT_STATUS_OK
ReadX 9688 1634304 4096 4096 NT_STATUS_OK
ReadX 9688 1638400 61440 61440 NT_STATUS_OK
ReadX 9688 1699840 4096 4096 NT_STATUS_OK
ReadX 9688 1703936 61440 61440 NT_STATUS_OK
ReadX 9688 1765376 4096 4096 NT_STATUS_OK
ReadX 9688 1769472 61440 61440 NT_STATUS_OK
ReadX 9688 1830912 4096 4096 NT_STATUS_OK
ReadX 9688 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9690 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9691 NT_STATUS_OK
ReadX 9691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9692 NT_STATUS_OK
ReadX 9692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9693 NT_STATUS_OK
ReadX 9693 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9695 NT_STATUS_OK
QUERY_FILE_INFORMATION 9695 1004 NT_STATUS_OK
WriteX 9695 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9695 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9696 NT_STATUS_OK
Close 9696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9697 NT_STATUS_OK
WriteX 9697 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9697 258 NT_STATUS_OK
WriteX 9697 0 491 491 NT_STATUS_OK
Close 9697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9698 NT_STATUS_OK
ReadX 9698 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9695 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9700 NT_STATUS_OK
Close 9700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9701 NT_STATUS_OK
WriteX 9701 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9701 258 NT_STATUS_OK
WriteX 9701 0 543 543 NT_STATUS_OK
Close 9701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9702 NT_STATUS_OK
ReadX 9702 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9686 NT_STATUS_OK
Close 9687 NT_STATUS_OK
Close 9688 NT_STATUS_OK
Close 9702 NT_STATUS_OK
Close 9690 NT_STATUS_OK
Close 9691 NT_STATUS_OK
Close 9692 NT_STATUS_OK
Close 9693 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9706 NT_STATUS_OK
ReadX 9706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9707 NT_STATUS_OK
ReadX 9707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9708 NT_STATUS_OK
ReadX 9708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9709 NT_STATUS_OK
ReadX 9709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9710 NT_STATUS_OK
ReadX 9710 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9715 NT_STATUS_OK
QUERY_FILE_INFORMATION 9715 1004 NT_STATUS_OK
WriteX 9715 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9715 258 NT_STATUS_OK
WriteX 9715 0 2048 2048 NT_STATUS_OK
Close 9715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9716 NT_STATUS_OK
ReadX 9716 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9716 0 4096 4096 NT_STATUS_OK
Flush 9716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9716 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9721 NT_STATUS_OK
WriteX 9721 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9721 258 NT_STATUS_OK
WriteX 9721 0 2048 2048 NT_STATUS_OK
Close 9721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9722 NT_STATUS_OK
ReadX 9722 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9726 NT_STATUS_OK
Close 9726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9727 NT_STATUS_OK
WriteX 9727 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9727 258 NT_STATUS_OK
WriteX 9727 0 2048 2048 NT_STATUS_OK
Close 9727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9728 NT_STATUS_OK
ReadX 9728 0 2048 2048 NT_STATUS_OK
ReadX 9706 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9710 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9722 0 4096 4096 NT_STATUS_OK
WriteX 9706 0 8192 8192 NT_STATUS_OK
WriteX 9707 0 4096 4096 NT_STATUS_OK
WriteX 9708 0 4096 4096 NT_STATUS_OK
ReadX 9722 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9731 NT_STATUS_OK
ReadX 9731 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9732 NT_STATUS_OK
QUERY_FILE_INFORMATION 9732 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9731 NT_STATUS_OK
Close 9707 NT_STATUS_OK
Close 9708 NT_STATUS_OK
Close 9709 NT_STATUS_OK
Close 9722 NT_STATUS_OK
Close 9706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9735 NT_STATUS_OK
ReadX 9735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9736 NT_STATUS_OK
ReadX 9736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9737 NT_STATUS_OK
ReadX 9737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9738 NT_STATUS_OK
ReadX 9738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9739 NT_STATUS_OK
ReadX 9739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9740 NT_STATUS_OK
ReadX 9740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9741 NT_STATUS_OK
ReadX 9741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9742 NT_STATUS_OK
ReadX 9742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9743 NT_STATUS_OK
ReadX 9743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9744 NT_STATUS_OK
ReadX 9744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9745 NT_STATUS_OK
ReadX 9745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9746 NT_STATUS_OK
ReadX 9746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9747 NT_STATUS_OK
ReadX 9747 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9752 NT_STATUS_OK
QUERY_FILE_INFORMATION 9752 1004 NT_STATUS_OK
WriteX 9752 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9752 258 NT_STATUS_OK
WriteX 9752 0 2048 2048 NT_STATUS_OK
Close 9752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9753 NT_STATUS_OK
ReadX 9753 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9755 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9760 NT_STATUS_OK
QUERY_FILE_INFORMATION 9760 1004 NT_STATUS_OK
WriteX 9760 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9760 258 NT_STATUS_OK
WriteX 9760 0 2048 2048 NT_STATUS_OK
Close 9760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9761 NT_STATUS_OK
ReadX 9761 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9753 0 4096 4096 NT_STATUS_OK
Flush 9753 NT_STATUS_OK
WriteX 9761 0 4096 4096 NT_STATUS_OK
Flush 9761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9753 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9761 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9755 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9763 NT_STATUS_OK
WriteX 9763 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9763 258 NT_STATUS_OK
WriteX 9763 0 4096 4096 NT_STATUS_OK
Close 9763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9764 NT_STATUS_OK
ReadX 9764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9765 NT_STATUS_OK
Close 9765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9766 NT_STATUS_OK
WriteX 9766 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9766 258 NT_STATUS_OK
WriteX 9766 0 4096 4096 NT_STATUS_OK
Close 9766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9767 NT_STATUS_OK
ReadX 9767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9767 0 4096 4096 NT_STATUS_OK
Close 9764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9747 NT_STATUS_OK
Close 9741 NT_STATUS_OK
Close 9755 NT_STATUS_OK
Close 9744 NT_STATUS_OK
Close 9745 NT_STATUS_OK
Close 9746 NT_STATUS_OK
Close 9742 NT_STATUS_OK
Close 9735 NT_STATUS_OK
Close 9736 NT_STATUS_OK
Close 9739 NT_STATUS_OK
Close 9740 NT_STATUS_OK
Close 9737 NT_STATUS_OK
Close 9738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9770 NT_STATUS_OK
Close 9770 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9772 NT_STATUS_OK
ReadX 9772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9773 NT_STATUS_OK
Close 9773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9774 NT_STATUS_OK
WriteX 9774 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9774 258 NT_STATUS_OK
WriteX 9774 0 2048 2048 NT_STATUS_OK
Close 9774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9775 NT_STATUS_OK
ReadX 9775 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9777 NT_STATUS_OK
ReadX 9777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9778 NT_STATUS_OK
ReadX 9778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9779 NT_STATUS_OK
ReadX 9779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9780 NT_STATUS_OK
ReadX 9780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9781 NT_STATUS_OK
ReadX 9781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9782 NT_STATUS_OK
ReadX 9782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9783 NT_STATUS_OK
ReadX 9783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9784 NT_STATUS_OK
ReadX 9784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9785 NT_STATUS_OK
ReadX 9785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9786 NT_STATUS_OK
ReadX 9786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9787 NT_STATUS_OK
ReadX 9787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9788 NT_STATUS_OK
ReadX 9788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9789 NT_STATUS_OK
QUERY_FILE_INFORMATION 9789 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9772 NT_STATUS_OK
Close 9775 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Close 9782 NT_STATUS_OK
Close 9783 NT_STATUS_OK
Close 9784 NT_STATUS_OK
Close 9785 NT_STATUS_OK
Close 9786 NT_STATUS_OK
Close 9788 NT_STATUS_OK
Close 9776 NT_STATUS_OK
Close 9777 NT_STATUS_OK
Close 9780 NT_STATUS_OK
Close 9781 NT_STATUS_OK
Close 9778 NT_STATUS_OK
Close 9779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9791 NT_STATUS_OK
QUERY_FILE_INFORMATION 9791 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9793 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9794 NT_STATUS_OK
ReadX 9794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9795 NT_STATUS_OK
ReadX 9795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9796 NT_STATUS_OK
ReadX 9796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9797 NT_STATUS_OK
ReadX 9797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9798 NT_STATUS_OK
ReadX 9798 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9799 NT_STATUS_OK
ReadX 9799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9800 NT_STATUS_OK
ReadX 9800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9801 NT_STATUS_OK
ReadX 9801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9802 NT_STATUS_OK
ReadX 9802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9803 NT_STATUS_OK
ReadX 9803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9805 NT_STATUS_OK
ReadX 9805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9806 NT_STATUS_OK
ReadX 9806 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9811 NT_STATUS_OK
QUERY_FILE_INFORMATION 9811 1004 NT_STATUS_OK
WriteX 9811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9811 258 NT_STATUS_OK
WriteX 9811 0 2048 2048 NT_STATUS_OK
Close 9811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9812 NT_STATUS_OK
ReadX 9812 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9814 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9815 NT_STATUS_OK
ReadX 9815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9816 NT_STATUS_OK
ReadX 9816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9818 NT_STATUS_OK
ReadX 9818 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 9822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9823 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 1004 NT_STATUS_OK
WriteX 9823 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 258 NT_STATUS_OK
WriteX 9823 0 2048 2048 NT_STATUS_OK
Close 9823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9824 NT_STATUS_OK
ReadX 9824 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9826 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9831 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 1004 NT_STATUS_OK
WriteX 9831 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 258 NT_STATUS_OK
WriteX 9831 0 2048 2048 NT_STATUS_OK
Close 9831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9812 0 4096 4096 NT_STATUS_OK
Flush 9812 NT_STATUS_OK
WriteX 9824 0 4096 4096 NT_STATUS_OK
Flush 9824 NT_STATUS_OK
WriteX 9832 0 4096 4096 NT_STATUS_OK
Flush 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 9824 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9832 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9814 4096 16384 16384 NT_STATUS_OK
ReadX 9794 4096 16384 16384 NT_STATUS_OK
ReadX 9826 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9834 NT_STATUS_OK
ReadX 9834 0 2048 2048 NT_STATUS_OK
WriteX 9834 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9835 NT_STATUS_OK
QUERY_FILE_INFORMATION 9835 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9834 NT_STATUS_OK
Close 9818 NT_STATUS_OK
Close 9806 NT_STATUS_OK
Close 9798 NT_STATUS_OK
Close 9814 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9816 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Close 9805 NT_STATUS_OK
Close 9826 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9803 NT_STATUS_OK
Close 9804 NT_STATUS_OK
Close 9801 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Close 9794 NT_STATUS_OK
Close 9795 NT_STATUS_OK
Close 9796 NT_STATUS_OK
Close 9797 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9837 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9839 NT_STATUS_OK
QUERY_FILE_INFORMATION 9839 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9842 NT_STATUS_OK
ReadX 9842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9843 NT_STATUS_OK
ReadX 9843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9844 NT_STATUS_OK
ReadX 9844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9846 NT_STATUS_OK
ReadX 9846 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9842 4096 16384 16384 NT_STATUS_OK
WriteX 9842 0 4096 4096 NT_STATUS_OK
WriteX 9843 0 4096 4096 NT_STATUS_OK
WriteX 9844 0 4096 4096 NT_STATUS_OK
WriteX 9845 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9847 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9848 NT_STATUS_OK
ReadX 9848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9849 NT_STATUS_OK
ReadX 9849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9851 NT_STATUS_OK
ReadX 9851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9853 NT_STATUS_OK
ReadX 9853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9854 NT_STATUS_OK
ReadX 9854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9856 NT_STATUS_OK
ReadX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9857 NT_STATUS_OK
ReadX 9857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9858 NT_STATUS_OK
ReadX 9858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9860 NT_STATUS_OK
ReadX 9860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9861 NT_STATUS_OK
ReadX 9861 0 8192 8192 NT_STATUS_OK
ReadX 9848 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9862 0 4096 4096 NT_STATUS_OK
ReadX 9862 4096 4096 4096 NT_STATUS_OK
ReadX 9862 8192 4096 4096 NT_STATUS_OK
WriteX 9848 0 4096 4096 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9863 0 4096 4096 NT_STATUS_OK
ReadX 9863 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9842 0 4096 4096 NT_STATUS_OK
WriteX 9843 0 4096 4096 NT_STATUS_OK
WriteX 9844 0 4096 4096 NT_STATUS_OK
WriteX 9845 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9868 NT_STATUS_OK
QUERY_FILE_INFORMATION 9868 1004 NT_STATUS_OK
WriteX 9868 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9868 258 NT_STATUS_OK
WriteX 9868 0 2048 2048 NT_STATUS_OK
Close 9868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9869 NT_STATUS_OK
ReadX 9869 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9869 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9869 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9871 NT_STATUS_OK
ReadX 9871 0 4096 4096 NT_STATUS_OK
ReadX 9871 4096 4096 4096 NT_STATUS_OK
WriteX 9871 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9869 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9873 NT_STATUS_OK
ReadX 9873 0 4096 4096 NT_STATUS_OK
ReadX 9873 4096 4096 4096 NT_STATUS_OK
WriteX 9873 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9874 NT_STATUS_OK
QUERY_FILE_INFORMATION 9874 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9861 NT_STATUS_OK
Close 9846 NT_STATUS_OK
Close 9842 NT_STATUS_OK
Close 9843 NT_STATUS_OK
Close 9844 NT_STATUS_OK
Close 9845 NT_STATUS_OK
Close 9854 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Close 9855 NT_STATUS_OK
Close 9856 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Close 9858 NT_STATUS_OK
Close 9860 NT_STATUS_OK
Close 9848 NT_STATUS_OK
Close 9849 NT_STATUS_OK
Close 9852 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Close 9850 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9873 NT_STATUS_OK
Close 9862 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9876 0 4096 4096 NT_STATUS_OK
ReadX 9876 4096 4096 4096 NT_STATUS_OK
ReadX 9876 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9879 NT_STATUS_OK
ReadX 9879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9881 NT_STATUS_OK
ReadX 9881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9883 NT_STATUS_OK
ReadX 9883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9884 NT_STATUS_OK
ReadX 9884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9885 NT_STATUS_OK
ReadX 9885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
ReadX 9877 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9894 NT_STATUS_OK
QUERY_FILE_INFORMATION 9894 1004 NT_STATUS_OK
WriteX 9894 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9894 258 NT_STATUS_OK
WriteX 9894 0 2048 2048 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9895 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9899 NT_STATUS_OK
Close 9899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9900 NT_STATUS_OK
QUERY_FILE_INFORMATION 9900 1004 NT_STATUS_OK
WriteX 9900 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9900 258 NT_STATUS_OK
WriteX 9900 0 2048 2048 NT_STATUS_OK
Close 9900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9901 NT_STATUS_OK
ReadX 9901 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9901 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9884 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9902 NT_STATUS_OK
QUERY_FILE_INFORMATION 9902 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9888 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9877 NT_STATUS_OK
Close 9878 NT_STATUS_OK
Close 9881 NT_STATUS_OK
Close 9882 NT_STATUS_OK
Close 9879 NT_STATUS_OK
Close 9880 NT_STATUS_OK
Close 9884 NT_STATUS_OK
Close 9885 NT_STATUS_OK
Close 9886 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9876 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9904 NT_STATUS_OK
QUERY_FILE_INFORMATION 9904 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 61440 4096 4096 NT_STATUS_OK
ReadX 9906 126976 4096 4096 NT_STATUS_OK
WriteX 9906 0 65536 65536 NT_STATUS_OK
WriteX 9906 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9907 NT_STATUS_OK
ReadX 9907 61440 4096 4096 NT_STATUS_OK
ReadX 9907 126976 4096 4096 NT_STATUS_OK
ReadX 9907 192512 4096 4096 NT_STATUS_OK
ReadX 9907 258048 4096 4096 NT_STATUS_OK
WriteX 9907 0 65536 65536 NT_STATUS_OK
WriteX 9907 65536 65536 65536 NT_STATUS_OK
WriteX 9907 131072 65536 65536 NT_STATUS_OK
WriteX 9907 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 61440 4096 4096 NT_STATUS_OK
ReadX 9908 126976 4096 4096 NT_STATUS_OK
ReadX 9908 192512 4096 4096 NT_STATUS_OK
ReadX 9908 258048 4096 4096 NT_STATUS_OK
ReadX 9908 323584 4096 4096 NT_STATUS_OK
ReadX 9908 389120 4096 4096 NT_STATUS_OK
ReadX 9908 454656 4096 4096 NT_STATUS_OK
ReadX 9908 520192 4096 4096 NT_STATUS_OK
WriteX 9908 0 65536 65536 NT_STATUS_OK
WriteX 9908 65536 65536 65536 NT_STATUS_OK
WriteX 9908 131072 65536 65536 NT_STATUS_OK
WriteX 9908 196608 65536 65536 NT_STATUS_OK
WriteX 9908 262144 65536 65536 NT_STATUS_OK
WriteX 9908 327680 65536 65536 NT_STATUS_OK
WriteX 9908 393216 65536 65536 NT_STATUS_OK
WriteX 9908 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9909 NT_STATUS_OK
ReadX 9909 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9909 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9909 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9909 8192 4096 4096 NT_STATUS_OK
ReadX 9909 12288 4096 4096 NT_STATUS_OK
ReadX 9909 16384 4096 4096 NT_STATUS_OK
ReadX 9909 20480 4096 4096 NT_STATUS_OK
ReadX 9909 24576 4096 4096 NT_STATUS_OK
ReadX 9909 28672 4096 4096 NT_STATUS_OK
ReadX 9909 32768 4096 4096 NT_STATUS_OK
ReadX 9909 36864 4096 4096 NT_STATUS_OK
ReadX 9909 40960 4096 4096 NT_STATUS_OK
ReadX 9909 45056 4096 4096 NT_STATUS_OK
ReadX 9909 49152 4096 4096 NT_STATUS_OK
ReadX 9909 53248 4096 4096 NT_STATUS_OK
ReadX 9909 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9909 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9910 NT_STATUS_OK
Close 9910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Close 9907 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9912 NT_STATUS_OK
WriteX 9912 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9912 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9912 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9912 1004 NT_STATUS_OK
WriteX 9912 0 57088 57088 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
Close 9909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9913 NT_STATUS_OK
SET_FILE_INFORMATION 9913 1004 NT_STATUS_OK
Close 9913 NT_STATUS_OK
SET_FILE_INFORMATION 9912 1004 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Close 9912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9914 NT_STATUS_OK
Close 9914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9916 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9917 NT_STATUS_OK
WriteX 9917 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9917 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9917 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9917 1004 NT_STATUS_OK
WriteX 9917 0 51456 51456 NT_STATUS_OK
WriteX 9917 0 4096 4096 NT_STATUS_OK
Flush 9917 NT_STATUS_OK
SET_FILE_INFORMATION 9917 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9917 1004 NT_STATUS_OK
WriteX 9917 0 4096 4096 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Close 9916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9919 NT_STATUS_OK
Close 9919 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9921 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9923 NT_STATUS_OK
Close 9923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9926 NT_STATUS_OK
WriteX 9926 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9926 258 NT_STATUS_OK
WriteX 9926 0 53077 53077 NT_STATUS_OK
Close 9926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9927 NT_STATUS_OK
WriteX 9927 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9927 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9927 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9927 1004 NT_STATUS_OK
WriteX 9927 0 65536 65536 NT_STATUS_OK
WriteX 9927 65536 1856 1856 NT_STATUS_OK
WriteX 9927 0 4096 4096 NT_STATUS_OK
Flush 9927 NT_STATUS_OK
SET_FILE_INFORMATION 9927 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9927 1004 NT_STATUS_OK
WriteX 9927 0 4096 4096 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9929 NT_STATUS_OK
Close 9929 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9931 NT_STATUS_OK
ReadX 9931 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9936 NT_STATUS_OK
WriteX 9936 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9936 258 NT_STATUS_OK
WriteX 9936 0 7983 7983 NT_STATUS_OK
Close 9936 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9938 NT_STATUS_OK
Close 9938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9941 NT_STATUS_OK
WriteX 9941 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9941 258 NT_STATUS_OK
WriteX 9941 0 65536 65536 NT_STATUS_OK
WriteX 9941 65536 65536 65536 NT_STATUS_OK
WriteX 9941 131072 65536 65536 NT_STATUS_OK
WriteX 9941 196608 65536 65536 NT_STATUS_OK
WriteX 9941 262144 65536 65536 NT_STATUS_OK
WriteX 9941 327680 65536 65536 NT_STATUS_OK
WriteX 9941 393216 65536 65536 NT_STATUS_OK
WriteX 9941 458752 46731 46731 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9942 NT_STATUS_OK
WriteX 9942 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9942 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9931 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9942 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9942 1004 NT_STATUS_OK
WriteX 9942 0 65536 65536 NT_STATUS_OK
WriteX 9942 65536 22848 22848 NT_STATUS_OK
WriteX 9942 0 4096 4096 NT_STATUS_OK
Flush 9942 NT_STATUS_OK
SET_FILE_INFORMATION 9942 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9942 1004 NT_STATUS_OK
WriteX 9942 0 4096 4096 NT_STATUS_OK
Close 9942 NT_STATUS_OK
Close 9931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9944 NT_STATUS_OK
Close 9944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9946 NT_STATUS_OK
ReadX 9946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9946 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9947 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
ReadX 9947 8192 4096 4096 NT_STATUS_OK
ReadX 9947 12288 4096 4096 NT_STATUS_OK
ReadX 9947 16384 4096 4096 NT_STATUS_OK
ReadX 9947 20480 4096 4096 NT_STATUS_OK
ReadX 9947 24576 4096 4096 NT_STATUS_OK
ReadX 9947 28672 4096 4096 NT_STATUS_OK
ReadX 9947 32768 4096 4096 NT_STATUS_OK
ReadX 9947 36864 4096 4096 NT_STATUS_OK
ReadX 9947 40960 4096 4096 NT_STATUS_OK
ReadX 9947 45056 4096 4096 NT_STATUS_OK
ReadX 9947 49152 4096 4096 NT_STATUS_OK
ReadX 9947 53248 4096 4096 NT_STATUS_OK
ReadX 9947 57344 4096 4096 NT_STATUS_OK
ReadX 9947 61440 4096 4096 NT_STATUS_OK
ReadX 9947 65536 4096 4096 NT_STATUS_OK
ReadX 9947 69632 4096 4096 NT_STATUS_OK
ReadX 9947 73728 4096 4096 NT_STATUS_OK
ReadX 9947 77824 4096 4096 NT_STATUS_OK
ReadX 9947 81920 4096 4096 NT_STATUS_OK
ReadX 9947 86016 4096 4096 NT_STATUS_OK
ReadX 9947 90112 4096 4096 NT_STATUS_OK
ReadX 9947 94208 4096 4096 NT_STATUS_OK
ReadX 9947 98304 4096 4096 NT_STATUS_OK
ReadX 9947 102400 4096 4096 NT_STATUS_OK
ReadX 9947 106496 4096 4096 NT_STATUS_OK
ReadX 9947 110592 4096 4096 NT_STATUS_OK
ReadX 9947 114688 4096 4096 NT_STATUS_OK
ReadX 9947 118784 4096 4096 NT_STATUS_OK
ReadX 9947 122880 4096 4096 NT_STATUS_OK
ReadX 9947 126976 4096 4096 NT_STATUS_OK
ReadX 9947 131072 4096 4096 NT_STATUS_OK
ReadX 9947 135168 4096 4096 NT_STATUS_OK
ReadX 9947 139264 4096 4096 NT_STATUS_OK
ReadX 9947 143360 4096 4096 NT_STATUS_OK
ReadX 9947 147456 4096 4096 NT_STATUS_OK
ReadX 9947 151552 4096 4096 NT_STATUS_OK
ReadX 9947 155648 4096 4096 NT_STATUS_OK
ReadX 9947 159744 4096 4096 NT_STATUS_OK
ReadX 9947 163840 4096 4096 NT_STATUS_OK
ReadX 9947 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9947 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9950 NT_STATUS_OK
WriteX 9950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9950 258 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9951 NT_STATUS_OK
SET_FILE_INFORMATION 9951 1004 NT_STATUS_OK
Close 9951 NT_STATUS_OK
WriteX 9950 0 42388 42388 NT_STATUS_OK
Close 9950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9952 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
ReadX 9954 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9955 NT_STATUS_OK
WriteX 9955 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9955 258 NT_STATUS_OK
SET_FILE_INFORMATION 9955 1004 NT_STATUS_OK
WriteX 9955 0 42652 42652 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Close 9954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9957 NT_STATUS_OK
Close 9957 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9959 NT_STATUS_OK
ReadX 9959 0 4096 4096 NT_STATUS_OK
ReadX 9959 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9961 NT_STATUS_OK
Close 9961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9964 NT_STATUS_OK
WriteX 9964 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9964 258 NT_STATUS_OK
WriteX 9964 0 65536 65536 NT_STATUS_OK
WriteX 9964 65536 49 49 NT_STATUS_OK
Close 9964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 61440 61440 NT_STATUS_OK
ReadX 9965 61440 4096 4096 NT_STATUS_OK
ReadX 9965 65536 61440 61440 NT_STATUS_OK
ReadX 9965 126976 4096 4096 NT_STATUS_OK
ReadX 9965 131072 61440 61440 NT_STATUS_OK
ReadX 9965 192512 4096 4096 NT_STATUS_OK
ReadX 9965 196608 61440 61440 NT_STATUS_OK
ReadX 9965 258048 4096 4096 NT_STATUS_OK
ReadX 9965 262144 61440 61440 NT_STATUS_OK
ReadX 9965 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 61440 61440 NT_STATUS_OK
ReadX 9966 61440 4096 4096 NT_STATUS_OK
ReadX 9966 65536 61440 61440 NT_STATUS_OK
ReadX 9966 126976 4096 4096 NT_STATUS_OK
ReadX 9966 131072 61440 61440 NT_STATUS_OK
ReadX 9966 192512 4096 4096 NT_STATUS_OK
ReadX 9966 196608 61440 61440 NT_STATUS_OK
ReadX 9966 258048 4096 4096 NT_STATUS_OK
ReadX 9966 262144 61440 61440 NT_STATUS_OK
ReadX 9966 323584 4096 4096 NT_STATUS_OK
ReadX 9966 327680 61440 61440 NT_STATUS_OK
ReadX 9966 389120 4096 4096 NT_STATUS_OK
ReadX 9966 393216 61440 61440 NT_STATUS_OK
ReadX 9966 454656 4096 4096 NT_STATUS_OK
ReadX 9966 458752 61440 61440 NT_STATUS_OK
ReadX 9966 520192 4096 4096 NT_STATUS_OK
ReadX 9966 524288 61440 61440 NT_STATUS_OK
ReadX 9966 585728 4096 4096 NT_STATUS_OK
ReadX 9966 589824 61440 61440 NT_STATUS_OK
ReadX 9966 651264 4096 4096 NT_STATUS_OK
ReadX 9966 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 61440 61440 NT_STATUS_OK
ReadX 9967 61440 4096 4096 NT_STATUS_OK
ReadX 9967 65536 61440 61440 NT_STATUS_OK
ReadX 9967 126976 4096 4096 NT_STATUS_OK
ReadX 9967 131072 61440 61440 NT_STATUS_OK
ReadX 9967 192512 4096 4096 NT_STATUS_OK
ReadX 9967 196608 61440 61440 NT_STATUS_OK
ReadX 9967 258048 4096 4096 NT_STATUS_OK
ReadX 9967 262144 61440 61440 NT_STATUS_OK
ReadX 9967 323584 4096 4096 NT_STATUS_OK
ReadX 9967 327680 61440 61440 NT_STATUS_OK
ReadX 9967 389120 4096 4096 NT_STATUS_OK
ReadX 9967 393216 61440 61440 NT_STATUS_OK
ReadX 9967 454656 4096 4096 NT_STATUS_OK
ReadX 9967 458752 61440 61440 NT_STATUS_OK
ReadX 9967 520192 4096 4096 NT_STATUS_OK
ReadX 9967 524288 61440 61440 NT_STATUS_OK
ReadX 9967 585728 4096 4096 NT_STATUS_OK
ReadX 9967 589824 61440 61440 NT_STATUS_OK
ReadX 9967 651264 4096 4096 NT_STATUS_OK
ReadX 9967 655360 61440 61440 NT_STATUS_OK
ReadX 9967 716800 4096 4096 NT_STATUS_OK
ReadX 9967 720896 61440 61440 NT_STATUS_OK
ReadX 9967 782336 4096 4096 NT_STATUS_OK
ReadX 9967 786432 61440 61440 NT_STATUS_OK
ReadX 9967 847872 4096 4096 NT_STATUS_OK
ReadX 9967 851968 61440 61440 NT_STATUS_OK
ReadX 9967 913408 4096 4096 NT_STATUS_OK
ReadX 9967 917504 61440 61440 NT_STATUS_OK
ReadX 9967 978944 4096 4096 NT_STATUS_OK
ReadX 9967 983040 61440 61440 NT_STATUS_OK
ReadX 9967 1044480 4096 4096 NT_STATUS_OK
ReadX 9967 1048576 61440 61440 NT_STATUS_OK
ReadX 9967 1110016 4096 4096 NT_STATUS_OK
ReadX 9967 1114112 61440 61440 NT_STATUS_OK
ReadX 9967 1175552 4096 4096 NT_STATUS_OK
ReadX 9967 1179648 61440 61440 NT_STATUS_OK
ReadX 9967 1241088 4096 4096 NT_STATUS_OK
ReadX 9967 1245184 61440 61440 NT_STATUS_OK
ReadX 9967 1306624 4096 4096 NT_STATUS_OK
ReadX 9967 1310720 61440 61440 NT_STATUS_OK
ReadX 9967 1372160 4096 4096 NT_STATUS_OK
ReadX 9967 1376256 61440 61440 NT_STATUS_OK
ReadX 9967 1437696 4096 4096 NT_STATUS_OK
ReadX 9967 1441792 61440 61440 NT_STATUS_OK
ReadX 9967 1503232 4096 4096 NT_STATUS_OK
ReadX 9967 1507328 61440 61440 NT_STATUS_OK
ReadX 9967 1568768 4096 4096 NT_STATUS_OK
ReadX 9967 1572864 61440 61440 NT_STATUS_OK
ReadX 9967 1634304 4096 4096 NT_STATUS_OK
ReadX 9967 1638400 61440 61440 NT_STATUS_OK
ReadX 9967 1699840 4096 4096 NT_STATUS_OK
ReadX 9967 1703936 61440 61440 NT_STATUS_OK
ReadX 9967 1765376 4096 4096 NT_STATUS_OK
ReadX 9967 1769472 61440 61440 NT_STATUS_OK
ReadX 9967 1830912 4096 4096 NT_STATUS_OK
ReadX 9967 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9969 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 1005 NT_STATUS_OK
ReadX 9969 2156 24 24 NT_STATUS_OK
ReadX 9969 2139 276 276 NT_STATUS_OK
ReadX 9969 2136 14 14 NT_STATUS_OK
ReadX 9969 2136 7 7 NT_STATUS_OK
ReadX 9969 2138 12 12 NT_STATUS_OK
ReadX 9969 2137 8 8 NT_STATUS_OK
ReadX 9969 2135 15 15 NT_STATUS_OK
ReadX 9969 0 16 16 NT_STATUS_OK
ReadX 9969 16 2048 2048 NT_STATUS_OK
ReadX 9969 2064 2048 2048 NT_STATUS_OK
ReadX 9969 257 2048 2048 NT_STATUS_OK
ReadX 9969 385 2048 2048 NT_STATUS_OK
ReadX 9969 513 2048 2048 NT_STATUS_OK
ReadX 9969 641 2048 2048 NT_STATUS_OK
ReadX 9969 769 2048 2048 NT_STATUS_OK
ReadX 9969 897 2048 2048 NT_STATUS_OK
ReadX 9969 1025 2048 2048 NT_STATUS_OK
ReadX 9969 1153 2048 2048 NT_STATUS_OK
ReadX 9969 1281 2048 2048 NT_STATUS_OK
ReadX 9969 1409 2048 2048 NT_STATUS_OK
ReadX 9969 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9971 NT_STATUS_OK
Close 9971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Close 9959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9974 NT_STATUS_OK
WriteX 9974 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9974 258 NT_STATUS_OK
WriteX 9974 0 10575 10575 NT_STATUS_OK
Flush 9974 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9975 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
Close 9969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9979 NT_STATUS_OK
LockX 9979 2147483538 1 NT_STATUS_OK
UnlockX 9979 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 1005 NT_STATUS_OK
ReadX 9979 0 512 512 NT_STATUS_OK
ReadX 9979 512 512 512 NT_STATUS_OK
ReadX 9979 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 1004 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9980 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 1005 NT_STATUS_OK
ReadX 9980 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9981 NT_STATUS_OK
LockX 9981 2147483538 1 NT_STATUS_OK
UnlockX 9981 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9981 1005 NT_STATUS_OK
ReadX 9981 0 512 512 NT_STATUS_OK
ReadX 9981 512 512 512 NT_STATUS_OK
ReadX 9981 1024 512 512 NT_STATUS_OK
ReadX 9981 288 20 20 NT_STATUS_OK
ReadX 9981 308 2084 2084 NT_STATUS_OK
ReadX 9981 388 2084 2084 NT_STATUS_OK
ReadX 9981 388 2084 2084 NT_STATUS_OK
ReadX 9968 2157 1386 1386 NT_STATUS_OK
ReadX 9981 2472 399 399 NT_STATUS_OK
ReadX 9981 3072 1536 1536 NT_STATUS_OK
ReadX 9981 544 149 149 NT_STATUS_OK
ReadX 9981 693 485 485 NT_STATUS_OK
Close 9981 NT_STATUS_OK
ReadX 9968 2157 4096 4096 NT_STATUS_OK
ReadX 9968 6253 4096 4096 NT_STATUS_OK
ReadX 9968 10349 4096 4096 NT_STATUS_OK
ReadX 9968 14445 4096 4096 NT_STATUS_OK
ReadX 9968 18541 4096 4096 NT_STATUS_OK
ReadX 9968 22637 256 256 NT_STATUS_OK
ReadX 9968 22893 4096 4096 NT_STATUS_OK
ReadX 9968 26989 4096 4096 NT_STATUS_OK
ReadX 9968 31085 4096 4096 NT_STATUS_OK
ReadX 9968 35181 4096 4096 NT_STATUS_OK
ReadX 9968 39277 4096 4096 NT_STATUS_OK
ReadX 9968 43373 4096 4096 NT_STATUS_OK
ReadX 9968 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9968 2157 1024 1024 NT_STATUS_OK
ReadX 9968 1667 4688 4688 NT_STATUS_OK
ReadX 9968 6355 3516 3516 NT_STATUS_OK
ReadX 9968 9871 16384 16384 NT_STATUS_OK
ReadX 9968 26255 3771 3771 NT_STATUS_OK
ReadX 9968 30026 2048 2048 NT_STATUS_OK
ReadX 9968 32074 1024 1024 NT_STATUS_OK
ReadX 9968 33098 6652 6652 NT_STATUS_OK
ReadX 9968 39750 16384 16384 NT_STATUS_OK
ReadX 9968 56134 10496 10496 NT_STATUS_OK
ReadX 9968 66630 1784 1784 NT_STATUS_OK
ReadX 9968 68414 90 90 NT_STATUS_OK
ReadX 9968 68504 273 273 NT_STATUS_OK
ReadX 9968 68777 1600 1600 NT_STATUS_OK
ReadX 9968 70377 640 640 NT_STATUS_OK
ReadX 9968 71017 1280 1280 NT_STATUS_OK
ReadX 9968 72297 8464 8464 NT_STATUS_OK
ReadX 9968 80761 158 158 NT_STATUS_OK
ReadX 9968 80919 912 912 NT_STATUS_OK
ReadX 9968 81831 1980 1980 NT_STATUS_OK
ReadX 9968 83811 2256 2256 NT_STATUS_OK
ReadX 9968 86067 400 400 NT_STATUS_OK
ReadX 9968 86467 252 252 NT_STATUS_OK
ReadX 9968 86719 42 42 NT_STATUS_OK
ReadX 9968 86761 725 725 NT_STATUS_OK
ReadX 9968 2009 512 512 NT_STATUS_OK
ReadX 9968 3895 9 9 NT_STATUS_OK
ReadX 9968 3781 46 46 NT_STATUS_OK
ReadX 9968 4059 92 92 NT_STATUS_OK
ReadX 9968 3781 92 92 NT_STATUS_OK
ReadX 9968 3986 184 184 NT_STATUS_OK
ReadX 9968 3987 16384 16384 NT_STATUS_OK
ReadX 9968 3902 16384 16384 NT_STATUS_OK
ReadX 9968 3781 10240 10240 NT_STATUS_OK
ReadX 9968 3821 16384 16384 NT_STATUS_OK
ReadX 9968 3891 935 935 NT_STATUS_OK
ReadX 9968 4060 10240 10240 NT_STATUS_OK
ReadX 9968 4059 184 184 NT_STATUS_OK
ReadX 9968 256 184 184 NT_STATUS_OK
ReadX 9968 256 1026 1026 NT_STATUS_OK
ReadX 9968 3901 326 326 NT_STATUS_OK
ReadX 9968 3899 652 652 NT_STATUS_OK
ReadX 9968 256 2 2 NT_STATUS_OK
ReadX 9968 258 4948 4948 NT_STATUS_OK
Close 9968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9983 NT_STATUS_OK
Close 9983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 65536 65536 NT_STATUS_OK
WriteX 9986 262144 65536 65536 NT_STATUS_OK
WriteX 9986 327680 65536 65536 NT_STATUS_OK
WriteX 9986 393216 65536 65536 NT_STATUS_OK
WriteX 9986 458752 65536 65536 NT_STATUS_OK
WriteX 9986 524288 65536 65536 NT_STATUS_OK
WriteX 9986 589824 35257 35257 NT_STATUS_OK
Close 9986 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9991 NT_STATUS_OK
WriteX 9991 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 65536 65536 NT_STATUS_OK
WriteX 9991 65536 65536 65536 NT_STATUS_OK
WriteX 9991 131072 65536 65536 NT_STATUS_OK
WriteX 9991 196608 65536 65536 NT_STATUS_OK
WriteX 9991 262144 65536 65536 NT_STATUS_OK
WriteX 9991 327680 65536 65536 NT_STATUS_OK
WriteX 9991 393216 65536 65536 NT_STATUS_OK
WriteX 9991 458752 65536 65536 NT_STATUS_OK
WriteX 9991 524288 65536 65536 NT_STATUS_OK
WriteX 9991 589824 57598 57598 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9993 NT_STATUS_OK
WriteX 9993 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9993 258 NT_STATUS_OK
WriteX 9993 0 12543 12543 NT_STATUS_OK
Flush 9993 NT_STATUS_OK
Close 9993 NT_STATUS_OK
Close 9977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9995 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9999 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
ReadX 9999 1938 24 24 NT_STATUS_OK
ReadX 9999 1920 276 276 NT_STATUS_OK
ReadX 9999 1918 14 14 NT_STATUS_OK
ReadX 9999 1918 7 7 NT_STATUS_OK
ReadX 9999 1919 12 12 NT_STATUS_OK
ReadX 9999 1919 8 8 NT_STATUS_OK
ReadX 9999 1917 15 15 NT_STATUS_OK
ReadX 9999 0 16 16 NT_STATUS_OK
ReadX 9999 16 2048 2048 NT_STATUS_OK
ReadX 9999 2064 2048 2048 NT_STATUS_OK
ReadX 9999 257 2048 2048 NT_STATUS_OK
ReadX 9999 385 2048 2048 NT_STATUS_OK
ReadX 9999 513 2048 2048 NT_STATUS_OK
ReadX 9999 641 2048 2048 NT_STATUS_OK
ReadX 9999 769 2048 2048 NT_STATUS_OK
ReadX 9999 897 2048 2048 NT_STATUS_OK
ReadX 9999 1025 2048 2048 NT_STATUS_OK
ReadX 9999 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10001 NT_STATUS_OK
Close 10001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10004 NT_STATUS_OK
WriteX 10004 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10004 258 NT_STATUS_OK
WriteX 10004 0 11588 11588 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10005 NT_STATUS_OK
Close 10005 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10007 NT_STATUS_OK
ReadX 10007 0 4096 4096 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10009 NT_STATUS_OK
WriteX 10009 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10009 258 NT_STATUS_OK
WriteX 10009 0 11615 11615 NT_STATUS_OK
Flush 10009 NT_STATUS_OK
Close 10009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10011 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10015 NT_STATUS_OK
Close 10015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10018 NT_STATUS_OK
WriteX 10018 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10018 258 NT_STATUS_OK
WriteX 10018 0 65536 65536 NT_STATUS_OK
WriteX 10018 65536 16050 16050 NT_STATUS_OK
Close 10018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9998 1939 64 64 NT_STATUS_OK
ReadX 9998 128 248 248 NT_STATUS_OK
ReadX 9998 128 568 568 NT_STATUS_OK
ReadX 9998 3872 1536 1536 NT_STATUS_OK
ReadX 9998 3456 2560 2560 NT_STATUS_OK
ReadX 9998 3136 512 512 NT_STATUS_OK
ReadX 9998 2880 4096 4096 NT_STATUS_OK
ReadX 9998 3264 3072 3072 NT_STATUS_OK
ReadX 9998 320 4096 4096 NT_STATUS_OK
ReadX 9998 1024 4096 4096 NT_STATUS_OK
ReadX 9998 3616 4096 4096 NT_STATUS_OK
ReadX 9998 1939 64 64 NT_STATUS_OK
ReadX 9998 128 248 248 NT_STATUS_OK
ReadX 9998 128 608 608 NT_STATUS_OK
ReadX 9998 2858 1024 1024 NT_STATUS_OK
ReadX 9998 2810 4096 4096 NT_STATUS_OK
ReadX 9998 2826 4096 4096 NT_STATUS_OK
ReadX 9998 2580 2048 2048 NT_STATUS_OK
ReadX 9998 2800 2560 2560 NT_STATUS_OK
ReadX 9998 2100 4096 4096 NT_STATUS_OK
ReadX 9998 2084 4096 4096 NT_STATUS_OK
ReadX 9998 868 4096 4096 NT_STATUS_OK
ReadX 9998 2324 4096 4096 NT_STATUS_OK
ReadX 9998 884 4096 4096 NT_STATUS_OK
ReadX 9998 2604 1024 1024 NT_STATUS_OK
ReadX 9998 580 4096 4096 NT_STATUS_OK
ReadX 9998 596 4096 4096 NT_STATUS_OK
ReadX 9998 2752 4096 4096 NT_STATUS_OK
ReadX 9998 2842 1024 1024 NT_STATUS_OK
ReadX 9998 660 4096 4096 NT_STATUS_OK
ReadX 9998 2720 4096 4096 NT_STATUS_OK
ReadX 9998 2736 4096 4096 NT_STATUS_OK
ReadX 9998 628 4096 4096 NT_STATUS_OK
ReadX 9998 2704 4096 4096 NT_STATUS_OK
ReadX 9998 1556 4096 4096 NT_STATUS_OK
ReadX 9998 576 4096 4096 NT_STATUS_OK
ReadX 9998 3168 1536 1536 NT_STATUS_OK
ReadX 9998 832 4096 4096 NT_STATUS_OK
ReadX 9998 1088 4096 4096 NT_STATUS_OK
ReadX 9998 1344 4096 4096 NT_STATUS_OK
ReadX 9998 1600 4096 4096 NT_STATUS_OK
ReadX 9998 1856 4096 4096 NT_STATUS_OK
ReadX 9998 2112 4096 4096 NT_STATUS_OK
ReadX 9998 1892 4096 4096 NT_STATUS_OK
ReadX 9998 820 4096 4096 NT_STATUS_OK
ReadX 9998 788 4096 4096 NT_STATUS_OK
ReadX 9998 1604 4096 4096 NT_STATUS_OK
ReadX 9998 3648 4096 4096 NT_STATUS_OK
ReadX 9998 2608 4096 4096 NT_STATUS_OK
ReadX 9998 548 4096 4096 NT_STATUS_OK
ReadX 9998 740 4096 4096 NT_STATUS_OK
ReadX 9998 1344 4096 4096 NT_STATUS_OK
ReadX 9998 3392 4096 4096 NT_STATUS_OK
ReadX 9998 3904 4096 4096 NT_STATUS_OK
ReadX 9998 644 4096 4096 NT_STATUS_OK
ReadX 9998 676 4096 4096 NT_STATUS_OK
ReadX 9998 2688 4096 4096 NT_STATUS_OK
ReadX 9998 320 4096 4096 NT_STATUS_OK
ReadX 9998 900 4096 4096 NT_STATUS_OK
ReadX 9998 1908 4096 4096 NT_STATUS_OK
ReadX 9998 852 4096 4096 NT_STATUS_OK
ReadX 9998 724 4096 4096 NT_STATUS_OK
ReadX 9998 2292 4096 4096 NT_STATUS_OK
ReadX 9998 612 4096 4096 NT_STATUS_OK
ReadX 9998 388 4096 4096 NT_STATUS_OK
ReadX 9998 2368 4096 4096 NT_STATUS_OK
ReadX 9998 2624 4096 4096 NT_STATUS_OK
ReadX 9998 500 4096 4096 NT_STATUS_OK
ReadX 9998 356 4096 4096 NT_STATUS_OK
ReadX 9998 1024 4096 4096 NT_STATUS_OK
ReadX 9998 576 4096 4096 NT_STATUS_OK
ReadX 9998 340 4096 4096 NT_STATUS_OK
ReadX 9998 420 4096 4096 NT_STATUS_OK
ReadX 9998 1600 4096 4096 NT_STATUS_OK
ReadX 9998 404 4096 4096 NT_STATUS_OK
ReadX 9998 1428 4096 4096 NT_STATUS_OK
ReadX 9998 2656 4096 4096 NT_STATUS_OK
ReadX 9998 2624 4096 4096 NT_STATUS_OK
ReadX 9998 452 4096 4096 NT_STATUS_OK
ReadX 9998 692 4096 4096 NT_STATUS_OK
ReadX 9998 564 4096 4096 NT_STATUS_OK
ReadX 9998 372 4096 4096 NT_STATUS_OK
ReadX 9998 468 4096 4096 NT_STATUS_OK
ReadX 9998 484 4096 4096 NT_STATUS_OK
ReadX 9998 1088 4096 4096 NT_STATUS_OK
ReadX 9998 1924 4096 4096 NT_STATUS_OK
ReadX 9998 2768 4096 4096 NT_STATUS_OK
ReadX 9998 832 4096 4096 NT_STATUS_OK
ReadX 9998 836 4096 4096 NT_STATUS_OK
ReadX 9998 1856 4096 4096 NT_STATUS_OK
ReadX 9998 2640 4096 4096 NT_STATUS_OK
ReadX 9998 436 4096 4096 NT_STATUS_OK
ReadX 9998 1828 4096 4096 NT_STATUS_OK
ReadX 9998 804 4096 4096 NT_STATUS_OK
ReadX 9998 1860 4096 4096 NT_STATUS_OK
ReadX 9998 1812 4096 4096 NT_STATUS_OK
ReadX 9998 756 4096 4096 NT_STATUS_OK
ReadX 9998 1636 4096 4096 NT_STATUS_OK
ReadX 9998 772 4096 4096 NT_STATUS_OK
ReadX 9998 2036 4096 4096 NT_STATUS_OK
ReadX 9998 1220 4096 4096 NT_STATUS_OK
ReadX 9998 1652 4096 4096 NT_STATUS_OK
ReadX 9998 2588 4096 4096 NT_STATUS_OK
ReadX 9998 916 4096 4096 NT_STATUS_OK
ReadX 9998 260 4096 4096 NT_STATUS_OK
ReadX 9998 932 4096 4096 NT_STATUS_OK
ReadX 9998 2624 4096 4096 NT_STATUS_OK
ReadX 9998 308 4096 4096 NT_STATUS_OK
ReadX 9998 292 4096 4096 NT_STATUS_OK
ReadX 9998 1140 4096 4096 NT_STATUS_OK
ReadX 9998 276 4096 4096 NT_STATUS_OK
ReadX 9998 2020 4096 4096 NT_STATUS_OK
ReadX 9998 2880 4096 4096 NT_STATUS_OK
ReadX 9998 516 4096 4096 NT_STATUS_OK
ReadX 9998 1844 4096 4096 NT_STATUS_OK
ReadX 9998 1124 4096 4096 NT_STATUS_OK
ReadX 9998 3136 4096 4096 NT_STATUS_OK
ReadX 9998 324 4096 4096 NT_STATUS_OK
ReadX 9998 1156 4096 4096 NT_STATUS_OK
ReadX 9998 1172 4096 4096 NT_STATUS_OK
ReadX 9998 2112 4096 4096 NT_STATUS_OK
ReadX 9998 2368 4096 4096 NT_STATUS_OK
ReadX 9998 964 4096 4096 NT_STATUS_OK
ReadX 9998 980 4096 4096 NT_STATUS_OK
ReadX 9998 1012 4096 4096 NT_STATUS_OK
ReadX 9998 532 4096 4096 NT_STATUS_OK
ReadX 9998 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9998 1620 4096 4096 NT_STATUS_OK
ReadX 9998 1604 4096 4096 NT_STATUS_OK
ReadX 9998 2116 4096 4096 NT_STATUS_OK
ReadX 9998 2132 4096 4096 NT_STATUS_OK
ReadX 9998 2148 4096 4096 NT_STATUS_OK
ReadX 9998 2276 4096 4096 NT_STATUS_OK
ReadX 9998 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10023 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 1004 NT_STATUS_OK
Close 9978 NT_STATUS_OK
WriteX 10023 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10023 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 1004 NT_STATUS_OK
Close 9980 NT_STATUS_OK
WriteX 10023 0 65536 65536 NT_STATUS_OK
WriteX 10023 65536 64850 64850 NT_STATUS_OK
Close 10023 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10025 NT_STATUS_OK
WriteX 10025 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
ReadX 9998 2068 4096 4096 NT_STATUS_OK
ReadX 9998 1588 4096 4096 NT_STATUS_OK
ReadX 9998 1572 4096 4096 NT_STATUS_OK
WriteX 10025 0 18630 18630 NT_STATUS_OK
Flush 10025 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9998 612 4096 4096 NT_STATUS_OK
ReadX 9998 564 4096 4096 NT_STATUS_OK
ReadX 9998 1876 4096 4096 NT_STATUS_OK
ReadX 9998 628 4096 4096 NT_STATUS_OK
ReadX 9998 740 4096 4096 NT_STATUS_OK
ReadX 9998 724 4096 4096 NT_STATUS_OK
ReadX 9998 644 4096 4096 NT_STATUS_OK
ReadX 9998 2324 4096 4096 NT_STATUS_OK
ReadX 9998 660 4096 4096 NT_STATUS_OK
ReadX 9998 852 4096 4096 NT_STATUS_OK
ReadX 9998 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9998 2368 4096 4096 NT_STATUS_OK
ReadX 9998 1024 4096 4096 NT_STATUS_OK
ReadX 9998 320 4096 4096 NT_STATUS_OK
ReadX 9998 580 4096 4096 NT_STATUS_OK
ReadX 9998 3136 512 512 NT_STATUS_OK
ReadX 9998 2880 4096 4096 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 61440 4096 4096 NT_STATUS_OK
ReadX 10030 126976 4096 4096 NT_STATUS_OK
WriteX 10030 0 65536 65536 NT_STATUS_OK
WriteX 10030 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 61440 4096 4096 NT_STATUS_OK
ReadX 10031 126976 4096 4096 NT_STATUS_OK
ReadX 10031 192512 4096 4096 NT_STATUS_OK
ReadX 10031 258048 4096 4096 NT_STATUS_OK
WriteX 10031 0 65536 65536 NT_STATUS_OK
WriteX 10031 65536 65536 65536 NT_STATUS_OK
WriteX 10031 131072 65536 65536 NT_STATUS_OK
WriteX 10031 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 61440 4096 4096 NT_STATUS_OK
ReadX 10032 126976 4096 4096 NT_STATUS_OK
ReadX 10032 192512 4096 4096 NT_STATUS_OK
ReadX 10032 258048 4096 4096 NT_STATUS_OK
ReadX 10032 323584 4096 4096 NT_STATUS_OK
ReadX 10032 389120 4096 4096 NT_STATUS_OK
ReadX 10032 454656 4096 4096 NT_STATUS_OK
ReadX 10032 520192 4096 4096 NT_STATUS_OK
WriteX 10032 0 65536 65536 NT_STATUS_OK
WriteX 10032 65536 65536 65536 NT_STATUS_OK
WriteX 10032 131072 65536 65536 NT_STATUS_OK
WriteX 10032 196608 65536 65536 NT_STATUS_OK
WriteX 10032 262144 65536 65536 NT_STATUS_OK
WriteX 10032 327680 65536 65536 NT_STATUS_OK
WriteX 10032 393216 65536 65536 NT_STATUS_OK
WriteX 10032 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10034 NT_STATUS_OK
Close 10034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10035 NT_STATUS_OK
WriteX 10035 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10035 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10033 0 8192 8192 NT_STATUS_OK
Flush 10033 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10033 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10033 0 8192 8192 NT_STATUS_OK
Flush 10033 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10033 0 8192 8192 NT_STATUS_OK
Flush 10033 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10033 0 8192 8192 NT_STATUS_OK
Flush 10033 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10037 NT_STATUS_OK
Close 10037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Close 10030 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10040 NT_STATUS_OK
WriteX 10040 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10040 258 NT_STATUS_OK
WriteX 10040 0 62591 62591 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
WriteX 10045 0 10845 10845 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10050 NT_STATUS_OK
WriteX 10050 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10050 258 NT_STATUS_OK
WriteX 10050 0 30118 30118 NT_STATUS_OK
Close 10050 NT_STATUS_OK
WriteX 10033 0 4096 4096 NT_STATUS_OK
WriteX 10035 0 64 64 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10052 NT_STATUS_OK
ReadX 10052 0 61440 61440 NT_STATUS_OK
ReadX 10052 61440 4096 4096 NT_STATUS_OK
ReadX 10052 65536 61440 61440 NT_STATUS_OK
ReadX 10052 126976 4096 4096 NT_STATUS_OK
ReadX 10052 131072 61440 61440 NT_STATUS_OK
ReadX 10052 192512 4096 4096 NT_STATUS_OK
ReadX 10052 196608 61440 61440 NT_STATUS_OK
ReadX 10052 258048 4096 4096 NT_STATUS_OK
ReadX 10052 262144 61440 61440 NT_STATUS_OK
ReadX 10052 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 61440 61440 NT_STATUS_OK
ReadX 10053 61440 4096 4096 NT_STATUS_OK
ReadX 10053 65536 61440 61440 NT_STATUS_OK
ReadX 10053 126976 4096 4096 NT_STATUS_OK
ReadX 10053 131072 61440 61440 NT_STATUS_OK
ReadX 10053 192512 4096 4096 NT_STATUS_OK
ReadX 10053 196608 61440 61440 NT_STATUS_OK
ReadX 10053 258048 4096 4096 NT_STATUS_OK
ReadX 10053 262144 61440 61440 NT_STATUS_OK
ReadX 10053 323584 4096 4096 NT_STATUS_OK
ReadX 10053 327680 61440 61440 NT_STATUS_OK
ReadX 10053 389120 4096 4096 NT_STATUS_OK
ReadX 10053 393216 61440 61440 NT_STATUS_OK
ReadX 10053 454656 4096 4096 NT_STATUS_OK
ReadX 10053 458752 61440 61440 NT_STATUS_OK
ReadX 10053 520192 4096 4096 NT_STATUS_OK
ReadX 10053 524288 61440 61440 NT_STATUS_OK
ReadX 10053 585728 4096 4096 NT_STATUS_OK
ReadX 10053 589824 61440 61440 NT_STATUS_OK
ReadX 10053 651264 4096 4096 NT_STATUS_OK
ReadX 10053 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10054 NT_STATUS_OK
ReadX 10054 0 61440 61440 NT_STATUS_OK
ReadX 10054 61440 4096 4096 NT_STATUS_OK
ReadX 10054 65536 61440 61440 NT_STATUS_OK
ReadX 10054 126976 4096 4096 NT_STATUS_OK
ReadX 10054 131072 61440 61440 NT_STATUS_OK
ReadX 10054 192512 4096 4096 NT_STATUS_OK
ReadX 10054 196608 61440 61440 NT_STATUS_OK
ReadX 10054 258048 4096 4096 NT_STATUS_OK
ReadX 10054 262144 61440 61440 NT_STATUS_OK
ReadX 10054 323584 4096 4096 NT_STATUS_OK
ReadX 10054 327680 61440 61440 NT_STATUS_OK
ReadX 10054 389120 4096 4096 NT_STATUS_OK
ReadX 10054 393216 61440 61440 NT_STATUS_OK
ReadX 10054 454656 4096 4096 NT_STATUS_OK
ReadX 10054 458752 61440 61440 NT_STATUS_OK
ReadX 10054 520192 4096 4096 NT_STATUS_OK
ReadX 10054 524288 61440 61440 NT_STATUS_OK
ReadX 10054 585728 4096 4096 NT_STATUS_OK
ReadX 10054 589824 61440 61440 NT_STATUS_OK
ReadX 10054 651264 4096 4096 NT_STATUS_OK
ReadX 10054 655360 61440 61440 NT_STATUS_OK
ReadX 10054 716800 4096 4096 NT_STATUS_OK
ReadX 10054 720896 61440 61440 NT_STATUS_OK
ReadX 10054 782336 4096 4096 NT_STATUS_OK
ReadX 10054 786432 61440 61440 NT_STATUS_OK
ReadX 10054 847872 4096 4096 NT_STATUS_OK
ReadX 10054 851968 61440 61440 NT_STATUS_OK
ReadX 10054 913408 4096 4096 NT_STATUS_OK
ReadX 10054 917504 61440 61440 NT_STATUS_OK
ReadX 10054 978944 4096 4096 NT_STATUS_OK
ReadX 10054 983040 61440 61440 NT_STATUS_OK
ReadX 10054 1044480 4096 4096 NT_STATUS_OK
ReadX 10054 1048576 61440 61440 NT_STATUS_OK
ReadX 10054 1110016 4096 4096 NT_STATUS_OK
ReadX 10054 1114112 61440 61440 NT_STATUS_OK
ReadX 10054 1175552 4096 4096 NT_STATUS_OK
ReadX 10054 1179648 61440 61440 NT_STATUS_OK
ReadX 10054 1241088 4096 4096 NT_STATUS_OK
ReadX 10054 1245184 61440 61440 NT_STATUS_OK
ReadX 10054 1306624 4096 4096 NT_STATUS_OK
ReadX 10054 1310720 61440 61440 NT_STATUS_OK
ReadX 10054 1372160 4096 4096 NT_STATUS_OK
ReadX 10054 1376256 61440 61440 NT_STATUS_OK
ReadX 10054 1437696 4096 4096 NT_STATUS_OK
ReadX 10054 1441792 61440 61440 NT_STATUS_OK
ReadX 10054 1503232 4096 4096 NT_STATUS_OK
ReadX 10054 1507328 61440 61440 NT_STATUS_OK
ReadX 10054 1568768 4096 4096 NT_STATUS_OK
ReadX 10054 1572864 61440 61440 NT_STATUS_OK
ReadX 10054 1634304 4096 4096 NT_STATUS_OK
ReadX 10054 1638400 61440 61440 NT_STATUS_OK
ReadX 10054 1699840 4096 4096 NT_STATUS_OK
ReadX 10054 1703936 61440 61440 NT_STATUS_OK
ReadX 10054 1765376 4096 4096 NT_STATUS_OK
ReadX 10054 1769472 61440 61440 NT_STATUS_OK
ReadX 10054 1830912 4096 4096 NT_STATUS_OK
ReadX 10054 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10055 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10052 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Close 10054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10057 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10059 NT_STATUS_OK
ReadX 10059 0 4096 4096 NT_STATUS_OK
ReadX 10059 4096 4096 4096 NT_STATUS_OK
ReadX 10059 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10058 NT_STATUS_OK
Close 10059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10063 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 8192 8192 NT_STATUS_OK
ReadX 10067 8192 8192 8192 NT_STATUS_OK
ReadX 10067 16384 8192 8192 NT_STATUS_OK
ReadX 10067 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10069 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10072 NT_STATUS_OK
WriteX 10072 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10072 258 NT_STATUS_OK
WriteX 10072 0 10438 10438 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10073 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10076 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10077 NT_STATUS_OK
Close 10077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10078 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10080 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
ReadX 10081 4096 4096 4096 NT_STATUS_OK
ReadX 10081 8192 4096 4096 NT_STATUS_OK
ReadX 10081 12288 8192 8192 NT_STATUS_OK
ReadX 10081 20480 8192 8192 NT_STATUS_OK
ReadX 10081 28672 8192 8192 NT_STATUS_OK
ReadX 10081 36864 8192 8192 NT_STATUS_OK
ReadX 10081 45056 8192 8192 NT_STATUS_OK
ReadX 10081 53248 8192 8192 NT_STATUS_OK
ReadX 10081 61440 8192 8192 NT_STATUS_OK
ReadX 10081 69632 8192 8192 NT_STATUS_OK
ReadX 10081 77824 8192 8192 NT_STATUS_OK
ReadX 10081 86016 8192 8192 NT_STATUS_OK
ReadX 10081 94208 8192 8192 NT_STATUS_OK
ReadX 10081 102400 8192 8192 NT_STATUS_OK
ReadX 10081 110592 8192 8192 NT_STATUS_OK
ReadX 10081 118784 8192 8192 NT_STATUS_OK
ReadX 10081 126976 8192 8192 NT_STATUS_OK
ReadX 10081 135168 8192 8192 NT_STATUS_OK
ReadX 10081 143360 8192 8192 NT_STATUS_OK
ReadX 10081 151552 8192 8192 NT_STATUS_OK
ReadX 10081 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10081 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Close 10078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10086 NT_STATUS_OK
WriteX 10086 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10086 258 NT_STATUS_OK
WriteX 10086 0 28489 28489 NT_STATUS_OK
Close 10086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10089 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10089 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10093 NT_STATUS_OK
ReadX 10093 0 8192 8192 NT_STATUS_OK
ReadX 10093 8192 8192 8192 NT_STATUS_OK
ReadX 10093 16384 8192 8192 NT_STATUS_OK
ReadX 10093 24576 8192 8192 NT_STATUS_OK
ReadX 10093 32768 16384 16384 NT_STATUS_OK
ReadX 10093 49152 8192 8192 NT_STATUS_OK
ReadX 10093 57344 8192 8192 NT_STATUS_OK
ReadX 10093 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10098 NT_STATUS_OK
WriteX 10098 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 258 NT_STATUS_OK
WriteX 10098 0 29253 29253 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10105 NT_STATUS_OK
WriteX 10105 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10105 258 NT_STATUS_OK
WriteX 10105 0 30183 30183 NT_STATUS_OK
Close 10105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10106 NT_STATUS_OK
Close 10106 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10108 NT_STATUS_OK
WriteX 10108 0 510 510 NT_STATUS_OK
WriteX 10108 510 512 512 NT_STATUS_OK
WriteX 10108 1022 510 510 NT_STATUS_OK
WriteX 10108 1532 510 510 NT_STATUS_OK
WriteX 10108 2042 168 168 NT_STATUS_OK
Close 10108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
WriteX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 61440 4096 4096 NT_STATUS_OK
ReadX 10112 126976 4096 4096 NT_STATUS_OK
WriteX 10112 0 65536 65536 NT_STATUS_OK
WriteX 10112 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 61440 4096 4096 NT_STATUS_OK
ReadX 10113 126976 4096 4096 NT_STATUS_OK
ReadX 10113 192512 4096 4096 NT_STATUS_OK
ReadX 10113 258048 4096 4096 NT_STATUS_OK
WriteX 10113 0 65536 65536 NT_STATUS_OK
WriteX 10113 65536 65536 65536 NT_STATUS_OK
WriteX 10113 131072 65536 65536 NT_STATUS_OK
WriteX 10113 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10114 NT_STATUS_OK
ReadX 10114 61440 4096 4096 NT_STATUS_OK
ReadX 10114 126976 4096 4096 NT_STATUS_OK
ReadX 10114 192512 4096 4096 NT_STATUS_OK
ReadX 10114 258048 4096 4096 NT_STATUS_OK
ReadX 10114 323584 4096 4096 NT_STATUS_OK
ReadX 10114 389120 4096 4096 NT_STATUS_OK
ReadX 10114 454656 4096 4096 NT_STATUS_OK
ReadX 10114 520192 4096 4096 NT_STATUS_OK
WriteX 10114 0 65536 65536 NT_STATUS_OK
WriteX 10114 65536 65536 65536 NT_STATUS_OK
WriteX 10114 131072 65536 65536 NT_STATUS_OK
WriteX 10114 196608 65536 65536 NT_STATUS_OK
WriteX 10114 262144 65536 65536 NT_STATUS_OK
WriteX 10114 327680 65536 65536 NT_STATUS_OK
WriteX 10114 393216 65536 65536 NT_STATUS_OK
WriteX 10114 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10114 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10117 NT_STATUS_OK
Close 10117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10121 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10130 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10133 NT_STATUS_OK
Close 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10139 NT_STATUS_OK
Close 10139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10149 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10159 NT_STATUS_OK
Close 10159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10164 NT_STATUS_OK
Close 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10174 NT_STATUS_OK
Close 10174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10180 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10183 NT_STATUS_OK
WriteX 10183 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10183 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10183 0 65536 65536 NT_STATUS_OK
WriteX 10183 65536 65536 65536 NT_STATUS_OK
WriteX 10183 131072 65536 65536 NT_STATUS_OK
WriteX 10183 196608 65536 65536 NT_STATUS_OK
WriteX 10183 262144 26634 26634 NT_STATUS_OK
Close 10183 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10188 NT_STATUS_OK
Close 10188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
ReadX 10191 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10192 NT_STATUS_OK
Close 10192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10196 NT_STATUS_OK
Close 10196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10199 NT_STATUS_OK
Close 10199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10201 NT_STATUS_OK
Close 10201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10210 NT_STATUS_OK
Close 10210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10214 NT_STATUS_OK
Close 10214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10229 NT_STATUS_OK
Close 10229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10248 NT_STATUS_OK
Close 10248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10253 NT_STATUS_OK
Close 10253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10256 NT_STATUS_OK
Close 10256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10258 NT_STATUS_OK
Close 10258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
Close 10270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
Close 10271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 4096 4096 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
Close 10285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10315 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10315 0 4096 4096 NT_STATUS_OK
Close 10315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10316 NT_STATUS_OK
ReadX 10316 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 4096 4096 NT_STATUS_OK
ReadX 10317 4096 4096 4096 NT_STATUS_OK
ReadX 10317 8192 4096 4096 NT_STATUS_OK
ReadX 10317 12288 4096 4096 NT_STATUS_OK
ReadX 10317 16384 4096 4096 NT_STATUS_OK
ReadX 10317 20480 4096 4096 NT_STATUS_OK
ReadX 10317 24576 4096 4096 NT_STATUS_OK
ReadX 10317 28672 4096 4096 NT_STATUS_OK
ReadX 10317 32768 4096 4096 NT_STATUS_OK
ReadX 10317 36864 4096 4096 NT_STATUS_OK
ReadX 10317 40960 4096 4096 NT_STATUS_OK
ReadX 10317 45056 4096 4096 NT_STATUS_OK
ReadX 10317 49152 4096 4096 NT_STATUS_OK
ReadX 10317 53248 4096 4096 NT_STATUS_OK
ReadX 10317 57344 4096 4096 NT_STATUS_OK
ReadX 10317 61440 4096 4096 NT_STATUS_OK
ReadX 10317 65536 4096 4096 NT_STATUS_OK
ReadX 10317 69632 4096 4096 NT_STATUS_OK
ReadX 10317 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10317 1004 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
Close 10317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10318 NT_STATUS_OK
SET_FILE_INFORMATION 10318 1004 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10323 NT_STATUS_OK
WriteX 10323 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 258 NT_STATUS_OK
WriteX 10323 0 65536 65536 NT_STATUS_OK
WriteX 10323 65536 19979 19979 NT_STATUS_OK
Close 10323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 1004 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
Close 10324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10325 NT_STATUS_OK
ReadX 10325 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10326 NT_STATUS_OK
ReadX 10326 0 4096 4096 NT_STATUS_OK
Close 10325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
Close 10327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
Close 10328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
WriteX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10330 NT_STATUS_OK
Close 10330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10335 NT_STATUS_OK
WriteX 10335 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10335 258 NT_STATUS_OK
WriteX 10335 0 65536 65536 NT_STATUS_OK
WriteX 10335 65536 17654 17654 NT_STATUS_OK
Close 10335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 1004 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
SET_FILE_INFORMATION 10336 1004 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Flush 10336 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10337 NT_STATUS_OK
SET_FILE_INFORMATION 10337 1004 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
ReadX 10341 4096 4096 4096 NT_STATUS_OK
ReadX 10341 8192 4096 4096 NT_STATUS_OK
ReadX 10341 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10341 16384 4096 4096 NT_STATUS_OK
ReadX 10341 20480 4096 4096 NT_STATUS_OK
ReadX 10341 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
Close 10342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
Close 10343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10345 NT_STATUS_OK
Close 10345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10347 NT_STATUS_OK
Close 10347 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10350 NT_STATUS_OK
WriteX 10350 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10350 258 NT_STATUS_OK
WriteX 10350 0 65536 65536 NT_STATUS_OK
WriteX 10350 65536 19490 19490 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10351 NT_STATUS_OK
ReadX 10351 0 4096 4096 NT_STATUS_OK
WriteX 10351 0 4096 4096 NT_STATUS_OK
Flush 10351 NT_STATUS_OK
WriteX 10351 0 4096 4096 NT_STATUS_OK
Flush 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 0 4096 4096 NT_STATUS_OK
Flush 10351 NT_STATUS_OK
WriteX 10351 0 4096 4096 NT_STATUS_OK
Flush 10351 NT_STATUS_OK
WriteX 10351 0 4096 4096 NT_STATUS_OK
Flush 10351 NT_STATUS_OK
SET_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 0 4096 4096 NT_STATUS_OK
Flush 10351 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10352 NT_STATUS_OK
SET_FILE_INFORMATION 10352 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10353 NT_STATUS_OK
ReadX 10353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10356 0 4096 4096 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
ReadX 10358 4096 4096 4096 NT_STATUS_OK
ReadX 10358 8192 4096 4096 NT_STATUS_OK
ReadX 10358 12288 4096 4096 NT_STATUS_OK
ReadX 10358 16384 4096 4096 NT_STATUS_OK
ReadX 10358 20480 4096 4096 NT_STATUS_OK
ReadX 10358 24576 4096 4096 NT_STATUS_OK
ReadX 10358 28672 4096 4096 NT_STATUS_OK
ReadX 10358 32768 4096 4096 NT_STATUS_OK
ReadX 10358 36864 4096 4096 NT_STATUS_OK
ReadX 10358 40960 4096 4096 NT_STATUS_OK
ReadX 10358 45056 4096 4096 NT_STATUS_OK
ReadX 10358 49152 4096 4096 NT_STATUS_OK
ReadX 10358 53248 4096 4096 NT_STATUS_OK
ReadX 10358 57344 4096 4096 NT_STATUS_OK
ReadX 10358 61440 4096 4096 NT_STATUS_OK
ReadX 10358 65536 4096 4096 NT_STATUS_OK
ReadX 10358 69632 4096 4096 NT_STATUS_OK
ReadX 10358 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10358 1004 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10359 NT_STATUS_OK
SET_FILE_INFORMATION 10359 1004 NT_STATUS_OK
Close 10359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10361 NT_STATUS_OK
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10364 NT_STATUS_OK
WriteX 10364 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10364 258 NT_STATUS_OK
WriteX 10364 0 65536 65536 NT_STATUS_OK
WriteX 10364 65536 8866 8866 NT_STATUS_OK
Close 10364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
WriteX 10365 0 4096 4096 NT_STATUS_OK
Flush 10365 NT_STATUS_OK
SET_FILE_INFORMATION 10365 1004 NT_STATUS_OK
WriteX 10365 0 4096 4096 NT_STATUS_OK
Flush 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
Close 10367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10369 NT_STATUS_OK
ReadX 10369 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10369 1004 NT_STATUS_OK
WriteX 10369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10372 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10375 NT_STATUS_OK
WriteX 10375 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10375 258 NT_STATUS_OK
WriteX 10375 0 65536 65536 NT_STATUS_OK
WriteX 10375 65536 9298 9298 NT_STATUS_OK
Close 10375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
WriteX 10376 0 4096 4096 NT_STATUS_OK
Flush 10376 NT_STATUS_OK
SET_FILE_INFORMATION 10376 1004 NT_STATUS_OK
WriteX 10376 0 4096 4096 NT_STATUS_OK
Flush 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10377 NT_STATUS_OK
SET_FILE_INFORMATION 10377 1004 NT_STATUS_OK
Close 10377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10382 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10382 0 4096 4096 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10383 4096 4096 4096 NT_STATUS_OK
ReadX 10383 8192 4096 4096 NT_STATUS_OK
ReadX 10383 12288 4096 4096 NT_STATUS_OK
ReadX 10383 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10384 NT_STATUS_OK
ReadX 10384 0 4096 4096 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10386 1004 NT_STATUS_OK
WriteX 10386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Close 10386 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 11540 11540 NT_STATUS_OK
Close 10392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Flush 10393 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Flush 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10394 NT_STATUS_OK
SET_FILE_INFORMATION 10394 1004 NT_STATUS_OK
Close 10394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10396 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 61440 4096 4096 NT_STATUS_OK
ReadX 10398 126976 4096 4096 NT_STATUS_OK
WriteX 10398 0 65536 65536 NT_STATUS_OK
WriteX 10398 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 61440 4096 4096 NT_STATUS_OK
ReadX 10399 126976 4096 4096 NT_STATUS_OK
ReadX 10399 192512 4096 4096 NT_STATUS_OK
ReadX 10399 258048 4096 4096 NT_STATUS_OK
WriteX 10399 0 65536 65536 NT_STATUS_OK
WriteX 10399 65536 65536 65536 NT_STATUS_OK
WriteX 10399 131072 65536 65536 NT_STATUS_OK
WriteX 10399 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 61440 4096 4096 NT_STATUS_OK
ReadX 10400 126976 4096 4096 NT_STATUS_OK
ReadX 10400 192512 4096 4096 NT_STATUS_OK
ReadX 10400 258048 4096 4096 NT_STATUS_OK
ReadX 10400 323584 4096 4096 NT_STATUS_OK
ReadX 10400 389120 4096 4096 NT_STATUS_OK
ReadX 10400 454656 4096 4096 NT_STATUS_OK
ReadX 10400 520192 4096 4096 NT_STATUS_OK
WriteX 10400 0 65536 65536 NT_STATUS_OK
WriteX 10400 65536 65536 65536 NT_STATUS_OK
WriteX 10400 131072 65536 65536 NT_STATUS_OK
WriteX 10400 196608 65536 65536 NT_STATUS_OK
WriteX 10400 262144 65536 65536 NT_STATUS_OK
WriteX 10400 327680 65536 65536 NT_STATUS_OK
WriteX 10400 393216 65536 65536 NT_STATUS_OK
WriteX 10400 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
ReadX 10401 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10402 NT_STATUS_OK
WriteX 10402 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10402 258 NT_STATUS_OK
WriteX 10402 0 53 53 NT_STATUS_OK
Close 10402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10401 8192 4096 4096 NT_STATUS_OK
ReadX 10401 12288 4096 4096 NT_STATUS_OK
WriteX 10405 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10405 258 NT_STATUS_OK
ReadX 10401 16384 4096 4096 NT_STATUS_OK
ReadX 10401 20480 4096 4096 NT_STATUS_OK
WriteX 10405 0 15360 15360 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 4096 4096 NT_STATUS_OK
Close 10406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10409 NT_STATUS_OK
ReadX 10409 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10410 NT_STATUS_OK
Close 10410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10409 4096 4096 4096 NT_STATUS_OK
ReadX 10409 8192 4096 4096 NT_STATUS_OK
ReadX 10409 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
ReadX 10412 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
ReadX 10413 4096 4096 4096 NT_STATUS_OK
ReadX 10413 8192 4096 4096 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10414 NT_STATUS_OK
WriteX 10414 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10414 258 NT_STATUS_OK
WriteX 10414 0 15360 15360 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10415 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10415 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10419 NT_STATUS_OK
SET_FILE_INFORMATION 10419 1004 NT_STATUS_OK
Close 10419 NT_STATUS_OK
WriteX 10415 0 4096 4096 NT_STATUS_OK
Close 10415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10420 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
ReadX 10422 4096 4096 4096 NT_STATUS_OK
ReadX 10422 8192 4096 4096 NT_STATUS_OK
ReadX 10422 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10422 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10422 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10424 NT_STATUS_OK
WriteX 10424 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
WriteX 10424 0 53 53 NT_STATUS_OK
Close 10424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10423 4096 4096 4096 NT_STATUS_OK
ReadX 10423 8192 4096 4096 NT_STATUS_OK
ReadX 10423 12288 4096 4096 NT_STATUS_OK
WriteX 10427 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
WriteX 10427 0 12006 12006 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10428 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10428 1004 NT_STATUS_OK
WriteX 10428 0 4096 4096 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10432 NT_STATUS_OK
Close 10432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10431 4096 4096 4096 NT_STATUS_OK
ReadX 10431 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10434 NT_STATUS_OK
WriteX 10434 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10434 258 NT_STATUS_OK
WriteX 10434 0 11991 11991 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10439 NT_STATUS_OK
SET_FILE_INFORMATION 10439 1004 NT_STATUS_OK
Close 10439 NT_STATUS_OK
WriteX 10435 0 4096 4096 NT_STATUS_OK
Close 10435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10442 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
ReadX 10442 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
WriteX 10442 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
Close 10418 NT_STATUS_OK
WriteX 10422 0 19054 19054 NT_STATUS_OK
WriteX 10442 0 12288 12288 NT_STATUS_OK
Close 10438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10447 NT_STATUS_OK
Close 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 61440 61440 NT_STATUS_OK
ReadX 10449 61440 4096 4096 NT_STATUS_OK
ReadX 10449 65536 61440 61440 NT_STATUS_OK
ReadX 10449 126976 4096 4096 NT_STATUS_OK
ReadX 10449 131072 61440 61440 NT_STATUS_OK
ReadX 10449 192512 4096 4096 NT_STATUS_OK
ReadX 10449 196608 61440 61440 NT_STATUS_OK
ReadX 10449 258048 4096 4096 NT_STATUS_OK
ReadX 10449 262144 61440 61440 NT_STATUS_OK
ReadX 10449 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 61440 61440 NT_STATUS_OK
ReadX 10450 61440 4096 4096 NT_STATUS_OK
ReadX 10450 65536 61440 61440 NT_STATUS_OK
ReadX 10450 126976 4096 4096 NT_STATUS_OK
ReadX 10450 131072 61440 61440 NT_STATUS_OK
ReadX 10450 192512 4096 4096 NT_STATUS_OK
ReadX 10450 196608 61440 61440 NT_STATUS_OK
ReadX 10450 258048 4096 4096 NT_STATUS_OK
ReadX 10450 262144 61440 61440 NT_STATUS_OK
ReadX 10450 323584 4096 4096 NT_STATUS_OK
ReadX 10450 327680 61440 61440 NT_STATUS_OK
ReadX 10450 389120 4096 4096 NT_STATUS_OK
ReadX 10450 393216 61440 61440 NT_STATUS_OK
ReadX 10450 454656 4096 4096 NT_STATUS_OK
ReadX 10450 458752 61440 61440 NT_STATUS_OK
ReadX 10450 520192 4096 4096 NT_STATUS_OK
ReadX 10450 524288 61440 61440 NT_STATUS_OK
ReadX 10450 585728 4096 4096 NT_STATUS_OK
ReadX 10450 589824 61440 61440 NT_STATUS_OK
ReadX 10450 651264 4096 4096 NT_STATUS_OK
ReadX 10450 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 61440 61440 NT_STATUS_OK
ReadX 10451 61440 4096 4096 NT_STATUS_OK
ReadX 10451 65536 61440 61440 NT_STATUS_OK
ReadX 10451 126976 4096 4096 NT_STATUS_OK
ReadX 10451 131072 61440 61440 NT_STATUS_OK
ReadX 10451 192512 4096 4096 NT_STATUS_OK
ReadX 10451 196608 61440 61440 NT_STATUS_OK
ReadX 10451 258048 4096 4096 NT_STATUS_OK
ReadX 10451 262144 61440 61440 NT_STATUS_OK
ReadX 10451 323584 4096 4096 NT_STATUS_OK
ReadX 10451 327680 61440 61440 NT_STATUS_OK
ReadX 10451 389120 4096 4096 NT_STATUS_OK
ReadX 10451 393216 61440 61440 NT_STATUS_OK
ReadX 10451 454656 4096 4096 NT_STATUS_OK
ReadX 10451 458752 61440 61440 NT_STATUS_OK
ReadX 10451 520192 4096 4096 NT_STATUS_OK
ReadX 10451 524288 61440 61440 NT_STATUS_OK
ReadX 10451 585728 4096 4096 NT_STATUS_OK
ReadX 10451 589824 61440 61440 NT_STATUS_OK
ReadX 10451 651264 4096 4096 NT_STATUS_OK
ReadX 10451 655360 61440 61440 NT_STATUS_OK
ReadX 10451 716800 4096 4096 NT_STATUS_OK
ReadX 10451 720896 61440 61440 NT_STATUS_OK
ReadX 10451 782336 4096 4096 NT_STATUS_OK
ReadX 10451 786432 61440 61440 NT_STATUS_OK
ReadX 10451 847872 4096 4096 NT_STATUS_OK
ReadX 10451 851968 61440 61440 NT_STATUS_OK
ReadX 10451 913408 4096 4096 NT_STATUS_OK
ReadX 10451 917504 61440 61440 NT_STATUS_OK
ReadX 10451 978944 4096 4096 NT_STATUS_OK
ReadX 10451 983040 61440 61440 NT_STATUS_OK
ReadX 10451 1044480 4096 4096 NT_STATUS_OK
ReadX 10451 1048576 61440 61440 NT_STATUS_OK
ReadX 10451 1110016 4096 4096 NT_STATUS_OK
ReadX 10451 1114112 61440 61440 NT_STATUS_OK
ReadX 10451 1175552 4096 4096 NT_STATUS_OK
ReadX 10451 1179648 61440 61440 NT_STATUS_OK
ReadX 10451 1241088 4096 4096 NT_STATUS_OK
ReadX 10451 1245184 61440 61440 NT_STATUS_OK
ReadX 10451 1306624 4096 4096 NT_STATUS_OK
ReadX 10451 1310720 61440 61440 NT_STATUS_OK
ReadX 10451 1372160 4096 4096 NT_STATUS_OK
ReadX 10451 1376256 61440 61440 NT_STATUS_OK
ReadX 10451 1437696 4096 4096 NT_STATUS_OK
ReadX 10451 1441792 61440 61440 NT_STATUS_OK
ReadX 10451 1503232 4096 4096 NT_STATUS_OK
ReadX 10451 1507328 61440 61440 NT_STATUS_OK
ReadX 10451 1568768 4096 4096 NT_STATUS_OK
ReadX 10451 1572864 61440 61440 NT_STATUS_OK
ReadX 10451 1634304 4096 4096 NT_STATUS_OK
ReadX 10451 1638400 61440 61440 NT_STATUS_OK
ReadX 10451 1699840 4096 4096 NT_STATUS_OK
ReadX 10451 1703936 61440 61440 NT_STATUS_OK
ReadX 10451 1765376 4096 4096 NT_STATUS_OK
ReadX 10451 1769472 61440 61440 NT_STATUS_OK
ReadX 10451 1830912 4096 4096 NT_STATUS_OK
ReadX 10451 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10456 NT_STATUS_OK
ReadX 10456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10458 NT_STATUS_OK
QUERY_FILE_INFORMATION 10458 1004 NT_STATUS_OK
WriteX 10458 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10458 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10460 NT_STATUS_OK
WriteX 10460 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 491 491 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10461 NT_STATUS_OK
ReadX 10461 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10458 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10464 NT_STATUS_OK
WriteX 10464 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10464 258 NT_STATUS_OK
WriteX 10464 0 543 543 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10465 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10478 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 1004 NT_STATUS_OK
WriteX 10478 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 258 NT_STATUS_OK
WriteX 10478 0 2048 2048 NT_STATUS_OK
Close 10478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
Flush 10479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10484 NT_STATUS_OK
WriteX 10484 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 258 NT_STATUS_OK
WriteX 10484 0 2048 2048 NT_STATUS_OK
Close 10484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10490 NT_STATUS_OK
WriteX 10490 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10490 258 NT_STATUS_OK
WriteX 10490 0 2048 2048 NT_STATUS_OK
Close 10490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 2048 2048 NT_STATUS_OK
ReadX 10469 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
WriteX 10469 0 8192 8192 NT_STATUS_OK
WriteX 10470 0 4096 4096 NT_STATUS_OK
WriteX 10471 0 4096 4096 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10500 NT_STATUS_OK
ReadX 10500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10501 NT_STATUS_OK
ReadX 10501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10502 NT_STATUS_OK
ReadX 10502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10515 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 1004 NT_STATUS_OK
WriteX 10515 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 258 NT_STATUS_OK
WriteX 10515 0 2048 2048 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10523 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 1004 NT_STATUS_OK
WriteX 10523 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 258 NT_STATUS_OK
WriteX 10523 0 2048 2048 NT_STATUS_OK
Close 10523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
Flush 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10518 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10526 NT_STATUS_OK
WriteX 10526 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10526 258 NT_STATUS_OK
WriteX 10526 0 4096 4096 NT_STATUS_OK
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10529 NT_STATUS_OK
WriteX 10529 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10529 258 NT_STATUS_OK
WriteX 10529 0 4096 4096 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10530 0 4096 4096 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Close 10504 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10507 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Close 10502 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Close 10500 NT_STATUS_OK
Close 10501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10533 NT_STATUS_OK
Close 10533 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10535 NT_STATUS_OK
ReadX 10535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10536 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10537 NT_STATUS_OK
WriteX 10537 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10537 258 NT_STATUS_OK
WriteX 10537 0 2048 2048 NT_STATUS_OK
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10538 NT_STATUS_OK
ReadX 10538 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10541 NT_STATUS_OK
ReadX 10541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10551 NT_STATUS_OK
ReadX 10551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10552 NT_STATUS_OK
QUERY_FILE_INFORMATION 10552 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10535 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Close 10546 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Close 10539 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10541 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10554 NT_STATUS_OK
QUERY_FILE_INFORMATION 10554 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10556 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10559 NT_STATUS_OK
ReadX 10559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10560 NT_STATUS_OK
ReadX 10560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10574 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1004 NT_STATUS_OK
WriteX 10574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 258 NT_STATUS_OK
WriteX 10574 0 2048 2048 NT_STATUS_OK
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10577 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10586 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 1004 NT_STATUS_OK
WriteX 10586 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 258 NT_STATUS_OK
WriteX 10586 0 2048 2048 NT_STATUS_OK
Close 10586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10594 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1004 NT_STATUS_OK
WriteX 10594 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 2048 2048 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10575 0 4096 4096 NT_STATUS_OK
Flush 10575 NT_STATUS_OK
WriteX 10587 0 4096 4096 NT_STATUS_OK
Flush 10587 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Flush 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10587 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10577 4096 16384 16384 NT_STATUS_OK
ReadX 10557 4096 16384 16384 NT_STATUS_OK
ReadX 10589 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10597 NT_STATUS_OK
ReadX 10597 0 2048 2048 NT_STATUS_OK
WriteX 10597 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10598 NT_STATUS_OK
QUERY_FILE_INFORMATION 10598 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Close 10557 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10600 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10602 NT_STATUS_OK
QUERY_FILE_INFORMATION 10602 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10606 NT_STATUS_OK
ReadX 10606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10609 NT_STATUS_OK
ReadX 10609 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10605 4096 16384 16384 NT_STATUS_OK
WriteX 10605 0 4096 4096 NT_STATUS_OK
WriteX 10606 0 4096 4096 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
WriteX 10608 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10610 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10612 NT_STATUS_OK
ReadX 10612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10614 NT_STATUS_OK
ReadX 10614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10616 NT_STATUS_OK
ReadX 10616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10617 NT_STATUS_OK
ReadX 10617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10619 NT_STATUS_OK
ReadX 10619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10620 NT_STATUS_OK
ReadX 10620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10621 NT_STATUS_OK
ReadX 10621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10623 NT_STATUS_OK
ReadX 10623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10624 NT_STATUS_OK
ReadX 10624 0 8192 8192 NT_STATUS_OK
ReadX 10611 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10625 0 4096 4096 NT_STATUS_OK
ReadX 10625 4096 4096 4096 NT_STATUS_OK
ReadX 10625 8192 4096 4096 NT_STATUS_OK
WriteX 10611 0 4096 4096 NT_STATUS_OK
WriteX 10612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
ReadX 10626 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10605 0 4096 4096 NT_STATUS_OK
WriteX 10606 0 4096 4096 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
WriteX 10608 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10631 NT_STATUS_OK
QUERY_FILE_INFORMATION 10631 1004 NT_STATUS_OK
WriteX 10631 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10631 258 NT_STATUS_OK
WriteX 10631 0 2048 2048 NT_STATUS_OK
Close 10631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10632 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10632 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
ReadX 10634 4096 4096 4096 NT_STATUS_OK
WriteX 10634 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10632 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
ReadX 10636 4096 4096 4096 NT_STATUS_OK
WriteX 10636 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10637 NT_STATUS_OK
QUERY_FILE_INFORMATION 10637 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10624 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Close 10618 NT_STATUS_OK
Close 10619 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Close 10621 NT_STATUS_OK
Close 10623 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Close 10612 NT_STATUS_OK
Close 10615 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Close 10613 NT_STATUS_OK
Close 10614 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10639 0 4096 4096 NT_STATUS_OK
ReadX 10639 4096 4096 4096 NT_STATUS_OK
ReadX 10639 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10647 NT_STATUS_OK
ReadX 10647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10648 NT_STATUS_OK
ReadX 10648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
ReadX 10640 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10657 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 1004 NT_STATUS_OK
WriteX 10657 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 258 NT_STATUS_OK
WriteX 10657 0 2048 2048 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10658 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10662 NT_STATUS_OK
Close 10662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10663 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 1004 NT_STATUS_OK
WriteX 10663 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 258 NT_STATUS_OK
WriteX 10663 0 2048 2048 NT_STATUS_OK
Close 10663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10664 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10647 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10665 NT_STATUS_OK
QUERY_FILE_INFORMATION 10665 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Close 10647 NT_STATUS_OK
Close 10648 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10667 NT_STATUS_OK
QUERY_FILE_INFORMATION 10667 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 61440 4096 4096 NT_STATUS_OK
ReadX 10669 126976 4096 4096 NT_STATUS_OK
WriteX 10669 0 65536 65536 NT_STATUS_OK
WriteX 10669 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10670 NT_STATUS_OK
ReadX 10670 61440 4096 4096 NT_STATUS_OK
ReadX 10670 126976 4096 4096 NT_STATUS_OK
ReadX 10670 192512 4096 4096 NT_STATUS_OK
ReadX 10670 258048 4096 4096 NT_STATUS_OK
WriteX 10670 0 65536 65536 NT_STATUS_OK
WriteX 10670 65536 65536 65536 NT_STATUS_OK
WriteX 10670 131072 65536 65536 NT_STATUS_OK
WriteX 10670 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 61440 4096 4096 NT_STATUS_OK
ReadX 10671 126976 4096 4096 NT_STATUS_OK
ReadX 10671 192512 4096 4096 NT_STATUS_OK
ReadX 10671 258048 4096 4096 NT_STATUS_OK
ReadX 10671 323584 4096 4096 NT_STATUS_OK
ReadX 10671 389120 4096 4096 NT_STATUS_OK
ReadX 10671 454656 4096 4096 NT_STATUS_OK
ReadX 10671 520192 4096 4096 NT_STATUS_OK
WriteX 10671 0 65536 65536 NT_STATUS_OK
WriteX 10671 65536 65536 65536 NT_STATUS_OK
WriteX 10671 131072 65536 65536 NT_STATUS_OK
WriteX 10671 196608 65536 65536 NT_STATUS_OK
WriteX 10671 262144 65536 65536 NT_STATUS_OK
WriteX 10671 327680 65536 65536 NT_STATUS_OK
WriteX 10671 393216 65536 65536 NT_STATUS_OK
WriteX 10671 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10672 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10672 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10672 8192 4096 4096 NT_STATUS_OK
ReadX 10672 12288 4096 4096 NT_STATUS_OK
ReadX 10672 16384 4096 4096 NT_STATUS_OK
ReadX 10672 20480 4096 4096 NT_STATUS_OK
ReadX 10672 24576 4096 4096 NT_STATUS_OK
ReadX 10672 28672 4096 4096 NT_STATUS_OK
ReadX 10672 32768 4096 4096 NT_STATUS_OK
ReadX 10672 36864 4096 4096 NT_STATUS_OK
ReadX 10672 40960 4096 4096 NT_STATUS_OK
ReadX 10672 45056 4096 4096 NT_STATUS_OK
ReadX 10672 49152 4096 4096 NT_STATUS_OK
ReadX 10672 53248 4096 4096 NT_STATUS_OK
ReadX 10672 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10672 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10670 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10675 NT_STATUS_OK
WriteX 10675 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10675 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10675 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10675 1004 NT_STATUS_OK
WriteX 10675 0 57088 57088 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
Close 10672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10676 NT_STATUS_OK
SET_FILE_INFORMATION 10676 1004 NT_STATUS_OK
Close 10676 NT_STATUS_OK
SET_FILE_INFORMATION 10675 1004 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10677 NT_STATUS_OK
Close 10677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10679 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10680 NT_STATUS_OK
WriteX 10680 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10680 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10680 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10680 1004 NT_STATUS_OK
WriteX 10680 0 51456 51456 NT_STATUS_OK
WriteX 10680 0 4096 4096 NT_STATUS_OK
Flush 10680 NT_STATUS_OK
SET_FILE_INFORMATION 10680 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10680 1004 NT_STATUS_OK
WriteX 10680 0 4096 4096 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Close 10679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10684 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10686 NT_STATUS_OK
Close 10686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10689 NT_STATUS_OK
WriteX 10689 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10689 258 NT_STATUS_OK
WriteX 10689 0 53077 53077 NT_STATUS_OK
Close 10689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10690 NT_STATUS_OK
WriteX 10690 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10690 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10690 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10690 1004 NT_STATUS_OK
WriteX 10690 0 65536 65536 NT_STATUS_OK
WriteX 10690 65536 1856 1856 NT_STATUS_OK
WriteX 10690 0 4096 4096 NT_STATUS_OK
Flush 10690 NT_STATUS_OK
SET_FILE_INFORMATION 10690 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10690 1004 NT_STATUS_OK
WriteX 10690 0 4096 4096 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10692 NT_STATUS_OK
Close 10692 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10699 NT_STATUS_OK
WriteX 10699 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10699 258 NT_STATUS_OK
WriteX 10699 0 7983 7983 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10704 NT_STATUS_OK
WriteX 10704 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10704 258 NT_STATUS_OK
WriteX 10704 0 65536 65536 NT_STATUS_OK
WriteX 10704 65536 65536 65536 NT_STATUS_OK
WriteX 10704 131072 65536 65536 NT_STATUS_OK
WriteX 10704 196608 65536 65536 NT_STATUS_OK
WriteX 10704 262144 65536 65536 NT_STATUS_OK
WriteX 10704 327680 65536 65536 NT_STATUS_OK
WriteX 10704 393216 65536 65536 NT_STATUS_OK
WriteX 10704 458752 46731 46731 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10705 NT_STATUS_OK
WriteX 10705 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10694 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10705 1004 NT_STATUS_OK
WriteX 10705 0 65536 65536 NT_STATUS_OK
WriteX 10705 65536 22848 22848 NT_STATUS_OK
WriteX 10705 0 4096 4096 NT_STATUS_OK
Flush 10705 NT_STATUS_OK
SET_FILE_INFORMATION 10705 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10705 1004 NT_STATUS_OK
WriteX 10705 0 4096 4096 NT_STATUS_OK
Close 10705 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10709 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10710 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
ReadX 10710 8192 4096 4096 NT_STATUS_OK
ReadX 10710 12288 4096 4096 NT_STATUS_OK
ReadX 10710 16384 4096 4096 NT_STATUS_OK
ReadX 10710 20480 4096 4096 NT_STATUS_OK
ReadX 10710 24576 4096 4096 NT_STATUS_OK
ReadX 10710 28672 4096 4096 NT_STATUS_OK
ReadX 10710 32768 4096 4096 NT_STATUS_OK
ReadX 10710 36864 4096 4096 NT_STATUS_OK
ReadX 10710 40960 4096 4096 NT_STATUS_OK
ReadX 10710 45056 4096 4096 NT_STATUS_OK
ReadX 10710 49152 4096 4096 NT_STATUS_OK
ReadX 10710 53248 4096 4096 NT_STATUS_OK
ReadX 10710 57344 4096 4096 NT_STATUS_OK
ReadX 10710 61440 4096 4096 NT_STATUS_OK
ReadX 10710 65536 4096 4096 NT_STATUS_OK
ReadX 10710 69632 4096 4096 NT_STATUS_OK
ReadX 10710 73728 4096 4096 NT_STATUS_OK
ReadX 10710 77824 4096 4096 NT_STATUS_OK
ReadX 10710 81920 4096 4096 NT_STATUS_OK
ReadX 10710 86016 4096 4096 NT_STATUS_OK
ReadX 10710 90112 4096 4096 NT_STATUS_OK
ReadX 10710 94208 4096 4096 NT_STATUS_OK
ReadX 10710 98304 4096 4096 NT_STATUS_OK
ReadX 10710 102400 4096 4096 NT_STATUS_OK
ReadX 10710 106496 4096 4096 NT_STATUS_OK
ReadX 10710 110592 4096 4096 NT_STATUS_OK
ReadX 10710 114688 4096 4096 NT_STATUS_OK
ReadX 10710 118784 4096 4096 NT_STATUS_OK
ReadX 10710 122880 4096 4096 NT_STATUS_OK
ReadX 10710 126976 4096 4096 NT_STATUS_OK
ReadX 10710 131072 4096 4096 NT_STATUS_OK
ReadX 10710 135168 4096 4096 NT_STATUS_OK
ReadX 10710 139264 4096 4096 NT_STATUS_OK
ReadX 10710 143360 4096 4096 NT_STATUS_OK
ReadX 10710 147456 4096 4096 NT_STATUS_OK
ReadX 10710 151552 4096 4096 NT_STATUS_OK
ReadX 10710 155648 4096 4096 NT_STATUS_OK
ReadX 10710 159744 4096 4096 NT_STATUS_OK
ReadX 10710 163840 4096 4096 NT_STATUS_OK
ReadX 10710 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10710 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10713 NT_STATUS_OK
WriteX 10713 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10713 258 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10714 NT_STATUS_OK
SET_FILE_INFORMATION 10714 1004 NT_STATUS_OK
Close 10714 NT_STATUS_OK
WriteX 10713 0 42388 42388 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
ReadX 10717 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10718 NT_STATUS_OK
WriteX 10718 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 258 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 42652 42652 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Close 10717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
ReadX 10722 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10724 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10727 NT_STATUS_OK
WriteX 10727 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10727 258 NT_STATUS_OK
WriteX 10727 0 65536 65536 NT_STATUS_OK
WriteX 10727 65536 49 49 NT_STATUS_OK
Close 10727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 61440 61440 NT_STATUS_OK
ReadX 10728 61440 4096 4096 NT_STATUS_OK
ReadX 10728 65536 61440 61440 NT_STATUS_OK
ReadX 10728 126976 4096 4096 NT_STATUS_OK
ReadX 10728 131072 61440 61440 NT_STATUS_OK
ReadX 10728 192512 4096 4096 NT_STATUS_OK
ReadX 10728 196608 61440 61440 NT_STATUS_OK
ReadX 10728 258048 4096 4096 NT_STATUS_OK
ReadX 10728 262144 61440 61440 NT_STATUS_OK
ReadX 10728 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 61440 61440 NT_STATUS_OK
ReadX 10729 61440 4096 4096 NT_STATUS_OK
ReadX 10729 65536 61440 61440 NT_STATUS_OK
ReadX 10729 126976 4096 4096 NT_STATUS_OK
ReadX 10729 131072 61440 61440 NT_STATUS_OK
ReadX 10729 192512 4096 4096 NT_STATUS_OK
ReadX 10729 196608 61440 61440 NT_STATUS_OK
ReadX 10729 258048 4096 4096 NT_STATUS_OK
ReadX 10729 262144 61440 61440 NT_STATUS_OK
ReadX 10729 323584 4096 4096 NT_STATUS_OK
ReadX 10729 327680 61440 61440 NT_STATUS_OK
ReadX 10729 389120 4096 4096 NT_STATUS_OK
ReadX 10729 393216 61440 61440 NT_STATUS_OK
ReadX 10729 454656 4096 4096 NT_STATUS_OK
ReadX 10729 458752 61440 61440 NT_STATUS_OK
ReadX 10729 520192 4096 4096 NT_STATUS_OK
ReadX 10729 524288 61440 61440 NT_STATUS_OK
ReadX 10729 585728 4096 4096 NT_STATUS_OK
ReadX 10729 589824 61440 61440 NT_STATUS_OK
ReadX 10729 651264 4096 4096 NT_STATUS_OK
ReadX 10729 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 61440 61440 NT_STATUS_OK
ReadX 10730 61440 4096 4096 NT_STATUS_OK
ReadX 10730 65536 61440 61440 NT_STATUS_OK
ReadX 10730 126976 4096 4096 NT_STATUS_OK
ReadX 10730 131072 61440 61440 NT_STATUS_OK
ReadX 10730 192512 4096 4096 NT_STATUS_OK
ReadX 10730 196608 61440 61440 NT_STATUS_OK
ReadX 10730 258048 4096 4096 NT_STATUS_OK
ReadX 10730 262144 61440 61440 NT_STATUS_OK
ReadX 10730 323584 4096 4096 NT_STATUS_OK
ReadX 10730 327680 61440 61440 NT_STATUS_OK
ReadX 10730 389120 4096 4096 NT_STATUS_OK
ReadX 10730 393216 61440 61440 NT_STATUS_OK
ReadX 10730 454656 4096 4096 NT_STATUS_OK
ReadX 10730 458752 61440 61440 NT_STATUS_OK
ReadX 10730 520192 4096 4096 NT_STATUS_OK
ReadX 10730 524288 61440 61440 NT_STATUS_OK
ReadX 10730 585728 4096 4096 NT_STATUS_OK
ReadX 10730 589824 61440 61440 NT_STATUS_OK
ReadX 10730 651264 4096 4096 NT_STATUS_OK
ReadX 10730 655360 61440 61440 NT_STATUS_OK
ReadX 10730 716800 4096 4096 NT_STATUS_OK
ReadX 10730 720896 61440 61440 NT_STATUS_OK
ReadX 10730 782336 4096 4096 NT_STATUS_OK
ReadX 10730 786432 61440 61440 NT_STATUS_OK
ReadX 10730 847872 4096 4096 NT_STATUS_OK
ReadX 10730 851968 61440 61440 NT_STATUS_OK
ReadX 10730 913408 4096 4096 NT_STATUS_OK
ReadX 10730 917504 61440 61440 NT_STATUS_OK
ReadX 10730 978944 4096 4096 NT_STATUS_OK
ReadX 10730 983040 61440 61440 NT_STATUS_OK
ReadX 10730 1044480 4096 4096 NT_STATUS_OK
ReadX 10730 1048576 61440 61440 NT_STATUS_OK
ReadX 10730 1110016 4096 4096 NT_STATUS_OK
ReadX 10730 1114112 61440 61440 NT_STATUS_OK
ReadX 10730 1175552 4096 4096 NT_STATUS_OK
ReadX 10730 1179648 61440 61440 NT_STATUS_OK
ReadX 10730 1241088 4096 4096 NT_STATUS_OK
ReadX 10730 1245184 61440 61440 NT_STATUS_OK
ReadX 10730 1306624 4096 4096 NT_STATUS_OK
ReadX 10730 1310720 61440 61440 NT_STATUS_OK
ReadX 10730 1372160 4096 4096 NT_STATUS_OK
ReadX 10730 1376256 61440 61440 NT_STATUS_OK
ReadX 10730 1437696 4096 4096 NT_STATUS_OK
ReadX 10730 1441792 61440 61440 NT_STATUS_OK
ReadX 10730 1503232 4096 4096 NT_STATUS_OK
ReadX 10730 1507328 61440 61440 NT_STATUS_OK
ReadX 10730 1568768 4096 4096 NT_STATUS_OK
ReadX 10730 1572864 61440 61440 NT_STATUS_OK
ReadX 10730 1634304 4096 4096 NT_STATUS_OK
ReadX 10730 1638400 61440 61440 NT_STATUS_OK
ReadX 10730 1699840 4096 4096 NT_STATUS_OK
ReadX 10730 1703936 61440 61440 NT_STATUS_OK
ReadX 10730 1765376 4096 4096 NT_STATUS_OK
ReadX 10730 1769472 61440 61440 NT_STATUS_OK
ReadX 10730 1830912 4096 4096 NT_STATUS_OK
ReadX 10730 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10732 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 1005 NT_STATUS_OK
ReadX 10732 2156 24 24 NT_STATUS_OK
ReadX 10732 2139 276 276 NT_STATUS_OK
ReadX 10732 2136 14 14 NT_STATUS_OK
ReadX 10732 2136 7 7 NT_STATUS_OK
ReadX 10732 2138 12 12 NT_STATUS_OK
ReadX 10732 2137 8 8 NT_STATUS_OK
ReadX 10732 2135 15 15 NT_STATUS_OK
ReadX 10732 0 16 16 NT_STATUS_OK
ReadX 10732 16 2048 2048 NT_STATUS_OK
ReadX 10732 2064 2048 2048 NT_STATUS_OK
ReadX 10732 257 2048 2048 NT_STATUS_OK
ReadX 10732 385 2048 2048 NT_STATUS_OK
ReadX 10732 513 2048 2048 NT_STATUS_OK
ReadX 10732 641 2048 2048 NT_STATUS_OK
ReadX 10732 769 2048 2048 NT_STATUS_OK
ReadX 10732 897 2048 2048 NT_STATUS_OK
ReadX 10732 1025 2048 2048 NT_STATUS_OK
ReadX 10732 1153 2048 2048 NT_STATUS_OK
ReadX 10732 1281 2048 2048 NT_STATUS_OK
ReadX 10732 1409 2048 2048 NT_STATUS_OK
ReadX 10732 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10737 NT_STATUS_OK
WriteX 10737 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10737 258 NT_STATUS_OK
WriteX 10737 0 10575 10575 NT_STATUS_OK
Flush 10737 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
Close 10732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10742 NT_STATUS_OK
LockX 10742 2147483538 1 NT_STATUS_OK
UnlockX 10742 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10742 1005 NT_STATUS_OK
ReadX 10742 0 512 512 NT_STATUS_OK
ReadX 10742 512 512 512 NT_STATUS_OK
ReadX 10742 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10742 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10742 1004 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10743 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 1005 NT_STATUS_OK
ReadX 10743 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10744 NT_STATUS_OK
LockX 10744 2147483538 1 NT_STATUS_OK
UnlockX 10744 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10744 1005 NT_STATUS_OK
ReadX 10744 0 512 512 NT_STATUS_OK
ReadX 10744 512 512 512 NT_STATUS_OK
ReadX 10744 1024 512 512 NT_STATUS_OK
ReadX 10744 288 20 20 NT_STATUS_OK
ReadX 10744 308 2084 2084 NT_STATUS_OK
ReadX 10744 388 2084 2084 NT_STATUS_OK
ReadX 10744 388 2084 2084 NT_STATUS_OK
ReadX 10731 2157 1386 1386 NT_STATUS_OK
ReadX 10744 2472 399 399 NT_STATUS_OK
ReadX 10744 3072 1536 1536 NT_STATUS_OK
ReadX 10744 544 149 149 NT_STATUS_OK
ReadX 10744 693 485 485 NT_STATUS_OK
Close 10744 NT_STATUS_OK
ReadX 10731 2157 4096 4096 NT_STATUS_OK
ReadX 10731 6253 4096 4096 NT_STATUS_OK
ReadX 10731 10349 4096 4096 NT_STATUS_OK
ReadX 10731 14445 4096 4096 NT_STATUS_OK
ReadX 10731 18541 4096 4096 NT_STATUS_OK
ReadX 10731 22637 256 256 NT_STATUS_OK
ReadX 10731 22893 4096 4096 NT_STATUS_OK
ReadX 10731 26989 4096 4096 NT_STATUS_OK
ReadX 10731 31085 4096 4096 NT_STATUS_OK
ReadX 10731 35181 4096 4096 NT_STATUS_OK
ReadX 10731 39277 4096 4096 NT_STATUS_OK
ReadX 10731 43373 4096 4096 NT_STATUS_OK
ReadX 10731 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10731 2157 1024 1024 NT_STATUS_OK
ReadX 10731 1667 4688 4688 NT_STATUS_OK
ReadX 10731 6355 3516 3516 NT_STATUS_OK
ReadX 10731 9871 16384 16384 NT_STATUS_OK
ReadX 10731 26255 3771 3771 NT_STATUS_OK
ReadX 10731 30026 2048 2048 NT_STATUS_OK
ReadX 10731 32074 1024 1024 NT_STATUS_OK
ReadX 10731 33098 6652 6652 NT_STATUS_OK
ReadX 10731 39750 16384 16384 NT_STATUS_OK
ReadX 10731 56134 10496 10496 NT_STATUS_OK
ReadX 10731 66630 1784 1784 NT_STATUS_OK
ReadX 10731 68414 90 90 NT_STATUS_OK
ReadX 10731 68504 273 273 NT_STATUS_OK
ReadX 10731 68777 1600 1600 NT_STATUS_OK
ReadX 10731 70377 640 640 NT_STATUS_OK
ReadX 10731 71017 1280 1280 NT_STATUS_OK
ReadX 10731 72297 8464 8464 NT_STATUS_OK
ReadX 10731 80761 158 158 NT_STATUS_OK
ReadX 10731 80919 912 912 NT_STATUS_OK
ReadX 10731 81831 1980 1980 NT_STATUS_OK
ReadX 10731 83811 2256 2256 NT_STATUS_OK
ReadX 10731 86067 400 400 NT_STATUS_OK
ReadX 10731 86467 252 252 NT_STATUS_OK
ReadX 10731 86719 42 42 NT_STATUS_OK
ReadX 10731 86761 725 725 NT_STATUS_OK
ReadX 10731 2009 512 512 NT_STATUS_OK
ReadX 10731 3895 9 9 NT_STATUS_OK
ReadX 10731 3781 46 46 NT_STATUS_OK
ReadX 10731 4059 92 92 NT_STATUS_OK
ReadX 10731 3781 92 92 NT_STATUS_OK
ReadX 10731 3986 184 184 NT_STATUS_OK
ReadX 10731 3987 16384 16384 NT_STATUS_OK
ReadX 10731 3902 16384 16384 NT_STATUS_OK
ReadX 10731 3781 10240 10240 NT_STATUS_OK
ReadX 10731 3821 16384 16384 NT_STATUS_OK
ReadX 10731 3891 935 935 NT_STATUS_OK
ReadX 10731 4060 10240 10240 NT_STATUS_OK
ReadX 10731 4059 184 184 NT_STATUS_OK
ReadX 10731 256 184 184 NT_STATUS_OK
ReadX 10731 256 1026 1026 NT_STATUS_OK
ReadX 10731 3901 326 326 NT_STATUS_OK
ReadX 10731 3899 652 652 NT_STATUS_OK
ReadX 10731 256 2 2 NT_STATUS_OK
ReadX 10731 258 4948 4948 NT_STATUS_OK
Close 10731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10746 NT_STATUS_OK
Close 10746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10749 NT_STATUS_OK
WriteX 10749 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10749 258 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 65536 65536 NT_STATUS_OK
WriteX 10749 131072 65536 65536 NT_STATUS_OK
WriteX 10749 196608 65536 65536 NT_STATUS_OK
WriteX 10749 262144 65536 65536 NT_STATUS_OK
WriteX 10749 327680 65536 65536 NT_STATUS_OK
WriteX 10749 393216 65536 65536 NT_STATUS_OK
WriteX 10749 458752 65536 65536 NT_STATUS_OK
WriteX 10749 524288 65536 65536 NT_STATUS_OK
WriteX 10749 589824 35257 35257 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10754 NT_STATUS_OK
WriteX 10754 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 258 NT_STATUS_OK
WriteX 10754 0 65536 65536 NT_STATUS_OK
WriteX 10754 65536 65536 65536 NT_STATUS_OK
WriteX 10754 131072 65536 65536 NT_STATUS_OK
WriteX 10754 196608 65536 65536 NT_STATUS_OK
WriteX 10754 262144 65536 65536 NT_STATUS_OK
WriteX 10754 327680 65536 65536 NT_STATUS_OK
WriteX 10754 393216 65536 65536 NT_STATUS_OK
WriteX 10754 458752 65536 65536 NT_STATUS_OK
WriteX 10754 524288 65536 65536 NT_STATUS_OK
WriteX 10754 589824 57598 57598 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10756 NT_STATUS_OK
WriteX 10756 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10756 258 NT_STATUS_OK
WriteX 10756 0 12543 12543 NT_STATUS_OK
Flush 10756 NT_STATUS_OK
Close 10756 NT_STATUS_OK
Close 10740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10762 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
ReadX 10762 1938 24 24 NT_STATUS_OK
ReadX 10762 1920 276 276 NT_STATUS_OK
ReadX 10762 1918 14 14 NT_STATUS_OK
ReadX 10762 1918 7 7 NT_STATUS_OK
ReadX 10762 1919 12 12 NT_STATUS_OK
ReadX 10762 1919 8 8 NT_STATUS_OK
ReadX 10762 1917 15 15 NT_STATUS_OK
ReadX 10762 0 16 16 NT_STATUS_OK
ReadX 10762 16 2048 2048 NT_STATUS_OK
ReadX 10762 2064 2048 2048 NT_STATUS_OK
ReadX 10762 257 2048 2048 NT_STATUS_OK
ReadX 10762 385 2048 2048 NT_STATUS_OK
ReadX 10762 513 2048 2048 NT_STATUS_OK
ReadX 10762 641 2048 2048 NT_STATUS_OK
ReadX 10762 769 2048 2048 NT_STATUS_OK
ReadX 10762 897 2048 2048 NT_STATUS_OK
ReadX 10762 1025 2048 2048 NT_STATUS_OK
ReadX 10762 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10767 NT_STATUS_OK
WriteX 10767 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10767 258 NT_STATUS_OK
WriteX 10767 0 11588 11588 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
Close 10767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10768 NT_STATUS_OK
Close 10768 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10772 NT_STATUS_OK
WriteX 10772 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10772 258 NT_STATUS_OK
WriteX 10772 0 11615 11615 NT_STATUS_OK
Flush 10772 NT_STATUS_OK
Close 10772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10774 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10781 NT_STATUS_OK
WriteX 10781 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10781 258 NT_STATUS_OK
WriteX 10781 0 65536 65536 NT_STATUS_OK
WriteX 10781 65536 16050 16050 NT_STATUS_OK
Close 10781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10761 1939 64 64 NT_STATUS_OK
ReadX 10761 128 248 248 NT_STATUS_OK
ReadX 10761 128 568 568 NT_STATUS_OK
ReadX 10761 3872 1536 1536 NT_STATUS_OK
ReadX 10761 3456 2560 2560 NT_STATUS_OK
ReadX 10761 3136 512 512 NT_STATUS_OK
ReadX 10761 2880 4096 4096 NT_STATUS_OK
ReadX 10761 3264 3072 3072 NT_STATUS_OK
ReadX 10761 320 4096 4096 NT_STATUS_OK
ReadX 10761 1024 4096 4096 NT_STATUS_OK
ReadX 10761 3616 4096 4096 NT_STATUS_OK
ReadX 10761 1939 64 64 NT_STATUS_OK
ReadX 10761 128 248 248 NT_STATUS_OK
ReadX 10761 128 608 608 NT_STATUS_OK
ReadX 10761 2858 1024 1024 NT_STATUS_OK
ReadX 10761 2810 4096 4096 NT_STATUS_OK
ReadX 10761 2826 4096 4096 NT_STATUS_OK
ReadX 10761 2580 2048 2048 NT_STATUS_OK
ReadX 10761 2800 2560 2560 NT_STATUS_OK
ReadX 10761 2100 4096 4096 NT_STATUS_OK
ReadX 10761 2084 4096 4096 NT_STATUS_OK
ReadX 10761 868 4096 4096 NT_STATUS_OK
ReadX 10761 2324 4096 4096 NT_STATUS_OK
ReadX 10761 884 4096 4096 NT_STATUS_OK
ReadX 10761 2604 1024 1024 NT_STATUS_OK
ReadX 10761 580 4096 4096 NT_STATUS_OK
ReadX 10761 596 4096 4096 NT_STATUS_OK
ReadX 10761 2752 4096 4096 NT_STATUS_OK
ReadX 10761 2842 1024 1024 NT_STATUS_OK
ReadX 10761 660 4096 4096 NT_STATUS_OK
ReadX 10761 2720 4096 4096 NT_STATUS_OK
ReadX 10761 2736 4096 4096 NT_STATUS_OK
ReadX 10761 628 4096 4096 NT_STATUS_OK
ReadX 10761 2704 4096 4096 NT_STATUS_OK
ReadX 10761 1556 4096 4096 NT_STATUS_OK
ReadX 10761 576 4096 4096 NT_STATUS_OK
ReadX 10761 3168 1536 1536 NT_STATUS_OK
ReadX 10761 832 4096 4096 NT_STATUS_OK
ReadX 10761 1088 4096 4096 NT_STATUS_OK
ReadX 10761 1344 4096 4096 NT_STATUS_OK
ReadX 10761 1600 4096 4096 NT_STATUS_OK
ReadX 10761 1856 4096 4096 NT_STATUS_OK
ReadX 10761 2112 4096 4096 NT_STATUS_OK
ReadX 10761 1892 4096 4096 NT_STATUS_OK
ReadX 10761 820 4096 4096 NT_STATUS_OK
ReadX 10761 788 4096 4096 NT_STATUS_OK
ReadX 10761 1604 4096 4096 NT_STATUS_OK
ReadX 10761 3648 4096 4096 NT_STATUS_OK
ReadX 10761 2608 4096 4096 NT_STATUS_OK
ReadX 10761 548 4096 4096 NT_STATUS_OK
ReadX 10761 740 4096 4096 NT_STATUS_OK
ReadX 10761 1344 4096 4096 NT_STATUS_OK
ReadX 10761 3392 4096 4096 NT_STATUS_OK
ReadX 10761 3904 4096 4096 NT_STATUS_OK
ReadX 10761 644 4096 4096 NT_STATUS_OK
ReadX 10761 676 4096 4096 NT_STATUS_OK
ReadX 10761 2688 4096 4096 NT_STATUS_OK
ReadX 10761 320 4096 4096 NT_STATUS_OK
ReadX 10761 900 4096 4096 NT_STATUS_OK
ReadX 10761 1908 4096 4096 NT_STATUS_OK
ReadX 10761 852 4096 4096 NT_STATUS_OK
ReadX 10761 724 4096 4096 NT_STATUS_OK
ReadX 10761 2292 4096 4096 NT_STATUS_OK
ReadX 10761 612 4096 4096 NT_STATUS_OK
ReadX 10761 388 4096 4096 NT_STATUS_OK
ReadX 10761 2368 4096 4096 NT_STATUS_OK
ReadX 10761 2624 4096 4096 NT_STATUS_OK
ReadX 10761 500 4096 4096 NT_STATUS_OK
ReadX 10761 356 4096 4096 NT_STATUS_OK
ReadX 10761 1024 4096 4096 NT_STATUS_OK
ReadX 10761 576 4096 4096 NT_STATUS_OK
ReadX 10761 340 4096 4096 NT_STATUS_OK
ReadX 10761 420 4096 4096 NT_STATUS_OK
ReadX 10761 1600 4096 4096 NT_STATUS_OK
ReadX 10761 404 4096 4096 NT_STATUS_OK
ReadX 10761 1428 4096 4096 NT_STATUS_OK
ReadX 10761 2656 4096 4096 NT_STATUS_OK
ReadX 10761 2624 4096 4096 NT_STATUS_OK
ReadX 10761 452 4096 4096 NT_STATUS_OK
ReadX 10761 692 4096 4096 NT_STATUS_OK
ReadX 10761 564 4096 4096 NT_STATUS_OK
ReadX 10761 372 4096 4096 NT_STATUS_OK
ReadX 10761 468 4096 4096 NT_STATUS_OK
ReadX 10761 484 4096 4096 NT_STATUS_OK
ReadX 10761 1088 4096 4096 NT_STATUS_OK
ReadX 10761 1924 4096 4096 NT_STATUS_OK
ReadX 10761 2768 4096 4096 NT_STATUS_OK
ReadX 10761 832 4096 4096 NT_STATUS_OK
ReadX 10761 836 4096 4096 NT_STATUS_OK
ReadX 10761 1856 4096 4096 NT_STATUS_OK
ReadX 10761 2640 4096 4096 NT_STATUS_OK
ReadX 10761 436 4096 4096 NT_STATUS_OK
ReadX 10761 1828 4096 4096 NT_STATUS_OK
ReadX 10761 804 4096 4096 NT_STATUS_OK
ReadX 10761 1860 4096 4096 NT_STATUS_OK
ReadX 10761 1812 4096 4096 NT_STATUS_OK
ReadX 10761 756 4096 4096 NT_STATUS_OK
ReadX 10761 1636 4096 4096 NT_STATUS_OK
ReadX 10761 772 4096 4096 NT_STATUS_OK
ReadX 10761 2036 4096 4096 NT_STATUS_OK
ReadX 10761 1220 4096 4096 NT_STATUS_OK
ReadX 10761 1652 4096 4096 NT_STATUS_OK
ReadX 10761 2588 4096 4096 NT_STATUS_OK
ReadX 10761 916 4096 4096 NT_STATUS_OK
ReadX 10761 260 4096 4096 NT_STATUS_OK
ReadX 10761 932 4096 4096 NT_STATUS_OK
ReadX 10761 2624 4096 4096 NT_STATUS_OK
ReadX 10761 308 4096 4096 NT_STATUS_OK
ReadX 10761 292 4096 4096 NT_STATUS_OK
ReadX 10761 1140 4096 4096 NT_STATUS_OK
ReadX 10761 276 4096 4096 NT_STATUS_OK
ReadX 10761 2020 4096 4096 NT_STATUS_OK
ReadX 10761 2880 4096 4096 NT_STATUS_OK
ReadX 10761 516 4096 4096 NT_STATUS_OK
ReadX 10761 1844 4096 4096 NT_STATUS_OK
ReadX 10761 1124 4096 4096 NT_STATUS_OK
ReadX 10761 3136 4096 4096 NT_STATUS_OK
ReadX 10761 324 4096 4096 NT_STATUS_OK
ReadX 10761 1156 4096 4096 NT_STATUS_OK
ReadX 10761 1172 4096 4096 NT_STATUS_OK
ReadX 10761 2112 4096 4096 NT_STATUS_OK
ReadX 10761 2368 4096 4096 NT_STATUS_OK
ReadX 10761 964 4096 4096 NT_STATUS_OK
ReadX 10761 980 4096 4096 NT_STATUS_OK
ReadX 10761 1012 4096 4096 NT_STATUS_OK
ReadX 10761 532 4096 4096 NT_STATUS_OK
ReadX 10761 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10761 1620 4096 4096 NT_STATUS_OK
ReadX 10761 1604 4096 4096 NT_STATUS_OK
ReadX 10761 2116 4096 4096 NT_STATUS_OK
ReadX 10761 2132 4096 4096 NT_STATUS_OK
ReadX 10761 2148 4096 4096 NT_STATUS_OK
ReadX 10761 2276 4096 4096 NT_STATUS_OK
ReadX 10761 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10786 NT_STATUS_OK
QUERY_FILE_INFORMATION 10741 1004 NT_STATUS_OK
Close 10741 NT_STATUS_OK
WriteX 10786 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10786 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 1004 NT_STATUS_OK
Close 10743 NT_STATUS_OK
WriteX 10786 0 65536 65536 NT_STATUS_OK
WriteX 10786 65536 64850 64850 NT_STATUS_OK
Close 10786 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10788 NT_STATUS_OK
WriteX 10788 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
ReadX 10761 2068 4096 4096 NT_STATUS_OK
ReadX 10761 1588 4096 4096 NT_STATUS_OK
ReadX 10761 1572 4096 4096 NT_STATUS_OK
WriteX 10788 0 18630 18630 NT_STATUS_OK
Flush 10788 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10761 612 4096 4096 NT_STATUS_OK
ReadX 10761 564 4096 4096 NT_STATUS_OK
ReadX 10761 1876 4096 4096 NT_STATUS_OK
ReadX 10761 628 4096 4096 NT_STATUS_OK
ReadX 10761 740 4096 4096 NT_STATUS_OK
ReadX 10761 724 4096 4096 NT_STATUS_OK
ReadX 10761 644 4096 4096 NT_STATUS_OK
ReadX 10761 2324 4096 4096 NT_STATUS_OK
ReadX 10761 660 4096 4096 NT_STATUS_OK
ReadX 10761 852 4096 4096 NT_STATUS_OK
ReadX 10761 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10761 2368 4096 4096 NT_STATUS_OK
ReadX 10761 1024 4096 4096 NT_STATUS_OK
ReadX 10761 320 4096 4096 NT_STATUS_OK
ReadX 10761 580 4096 4096 NT_STATUS_OK
ReadX 10761 3136 512 512 NT_STATUS_OK
ReadX 10761 2880 4096 4096 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 61440 4096 4096 NT_STATUS_OK
ReadX 10793 126976 4096 4096 NT_STATUS_OK
WriteX 10793 0 65536 65536 NT_STATUS_OK
WriteX 10793 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 61440 4096 4096 NT_STATUS_OK
ReadX 10794 126976 4096 4096 NT_STATUS_OK
ReadX 10794 192512 4096 4096 NT_STATUS_OK
ReadX 10794 258048 4096 4096 NT_STATUS_OK
WriteX 10794 0 65536 65536 NT_STATUS_OK
WriteX 10794 65536 65536 65536 NT_STATUS_OK
WriteX 10794 131072 65536 65536 NT_STATUS_OK
WriteX 10794 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 61440 4096 4096 NT_STATUS_OK
ReadX 10795 126976 4096 4096 NT_STATUS_OK
ReadX 10795 192512 4096 4096 NT_STATUS_OK
ReadX 10795 258048 4096 4096 NT_STATUS_OK
ReadX 10795 323584 4096 4096 NT_STATUS_OK
ReadX 10795 389120 4096 4096 NT_STATUS_OK
ReadX 10795 454656 4096 4096 NT_STATUS_OK
ReadX 10795 520192 4096 4096 NT_STATUS_OK
WriteX 10795 0 65536 65536 NT_STATUS_OK
WriteX 10795 65536 65536 65536 NT_STATUS_OK
WriteX 10795 131072 65536 65536 NT_STATUS_OK
WriteX 10795 196608 65536 65536 NT_STATUS_OK
WriteX 10795 262144 65536 65536 NT_STATUS_OK
WriteX 10795 327680 65536 65536 NT_STATUS_OK
WriteX 10795 393216 65536 65536 NT_STATUS_OK
WriteX 10795 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10797 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10798 NT_STATUS_OK
WriteX 10798 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10798 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10796 0 8192 8192 NT_STATUS_OK
Flush 10796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10796 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10796 0 8192 8192 NT_STATUS_OK
Flush 10796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10796 0 8192 8192 NT_STATUS_OK
Flush 10796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10796 0 8192 8192 NT_STATUS_OK
Flush 10796 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10803 NT_STATUS_OK
WriteX 10803 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10803 258 NT_STATUS_OK
WriteX 10803 0 62591 62591 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 10845 10845 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10813 NT_STATUS_OK
WriteX 10813 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10813 258 NT_STATUS_OK
WriteX 10813 0 30118 30118 NT_STATUS_OK
Close 10813 NT_STATUS_OK
WriteX 10796 0 4096 4096 NT_STATUS_OK
WriteX 10798 0 64 64 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 0 61440 61440 NT_STATUS_OK
ReadX 10815 61440 4096 4096 NT_STATUS_OK
ReadX 10815 65536 61440 61440 NT_STATUS_OK
ReadX 10815 126976 4096 4096 NT_STATUS_OK
ReadX 10815 131072 61440 61440 NT_STATUS_OK
ReadX 10815 192512 4096 4096 NT_STATUS_OK
ReadX 10815 196608 61440 61440 NT_STATUS_OK
ReadX 10815 258048 4096 4096 NT_STATUS_OK
ReadX 10815 262144 61440 61440 NT_STATUS_OK
ReadX 10815 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 61440 61440 NT_STATUS_OK
ReadX 10816 61440 4096 4096 NT_STATUS_OK
ReadX 10816 65536 61440 61440 NT_STATUS_OK
ReadX 10816 126976 4096 4096 NT_STATUS_OK
ReadX 10816 131072 61440 61440 NT_STATUS_OK
ReadX 10816 192512 4096 4096 NT_STATUS_OK
ReadX 10816 196608 61440 61440 NT_STATUS_OK
ReadX 10816 258048 4096 4096 NT_STATUS_OK
ReadX 10816 262144 61440 61440 NT_STATUS_OK
ReadX 10816 323584 4096 4096 NT_STATUS_OK
ReadX 10816 327680 61440 61440 NT_STATUS_OK
ReadX 10816 389120 4096 4096 NT_STATUS_OK
ReadX 10816 393216 61440 61440 NT_STATUS_OK
ReadX 10816 454656 4096 4096 NT_STATUS_OK
ReadX 10816 458752 61440 61440 NT_STATUS_OK
ReadX 10816 520192 4096 4096 NT_STATUS_OK
ReadX 10816 524288 61440 61440 NT_STATUS_OK
ReadX 10816 585728 4096 4096 NT_STATUS_OK
ReadX 10816 589824 61440 61440 NT_STATUS_OK
ReadX 10816 651264 4096 4096 NT_STATUS_OK
ReadX 10816 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 61440 61440 NT_STATUS_OK
ReadX 10817 61440 4096 4096 NT_STATUS_OK
ReadX 10817 65536 61440 61440 NT_STATUS_OK
ReadX 10817 126976 4096 4096 NT_STATUS_OK
ReadX 10817 131072 61440 61440 NT_STATUS_OK
ReadX 10817 192512 4096 4096 NT_STATUS_OK
ReadX 10817 196608 61440 61440 NT_STATUS_OK
ReadX 10817 258048 4096 4096 NT_STATUS_OK
ReadX 10817 262144 61440 61440 NT_STATUS_OK
ReadX 10817 323584 4096 4096 NT_STATUS_OK
ReadX 10817 327680 61440 61440 NT_STATUS_OK
ReadX 10817 389120 4096 4096 NT_STATUS_OK
ReadX 10817 393216 61440 61440 NT_STATUS_OK
ReadX 10817 454656 4096 4096 NT_STATUS_OK
ReadX 10817 458752 61440 61440 NT_STATUS_OK
ReadX 10817 520192 4096 4096 NT_STATUS_OK
ReadX 10817 524288 61440 61440 NT_STATUS_OK
ReadX 10817 585728 4096 4096 NT_STATUS_OK
ReadX 10817 589824 61440 61440 NT_STATUS_OK
ReadX 10817 651264 4096 4096 NT_STATUS_OK
ReadX 10817 655360 61440 61440 NT_STATUS_OK
ReadX 10817 716800 4096 4096 NT_STATUS_OK
ReadX 10817 720896 61440 61440 NT_STATUS_OK
ReadX 10817 782336 4096 4096 NT_STATUS_OK
ReadX 10817 786432 61440 61440 NT_STATUS_OK
ReadX 10817 847872 4096 4096 NT_STATUS_OK
ReadX 10817 851968 61440 61440 NT_STATUS_OK
ReadX 10817 913408 4096 4096 NT_STATUS_OK
ReadX 10817 917504 61440 61440 NT_STATUS_OK
ReadX 10817 978944 4096 4096 NT_STATUS_OK
ReadX 10817 983040 61440 61440 NT_STATUS_OK
ReadX 10817 1044480 4096 4096 NT_STATUS_OK
ReadX 10817 1048576 61440 61440 NT_STATUS_OK
ReadX 10817 1110016 4096 4096 NT_STATUS_OK
ReadX 10817 1114112 61440 61440 NT_STATUS_OK
ReadX 10817 1175552 4096 4096 NT_STATUS_OK
ReadX 10817 1179648 61440 61440 NT_STATUS_OK
ReadX 10817 1241088 4096 4096 NT_STATUS_OK
ReadX 10817 1245184 61440 61440 NT_STATUS_OK
ReadX 10817 1306624 4096 4096 NT_STATUS_OK
ReadX 10817 1310720 61440 61440 NT_STATUS_OK
ReadX 10817 1372160 4096 4096 NT_STATUS_OK
ReadX 10817 1376256 61440 61440 NT_STATUS_OK
ReadX 10817 1437696 4096 4096 NT_STATUS_OK
ReadX 10817 1441792 61440 61440 NT_STATUS_OK
ReadX 10817 1503232 4096 4096 NT_STATUS_OK
ReadX 10817 1507328 61440 61440 NT_STATUS_OK
ReadX 10817 1568768 4096 4096 NT_STATUS_OK
ReadX 10817 1572864 61440 61440 NT_STATUS_OK
ReadX 10817 1634304 4096 4096 NT_STATUS_OK
ReadX 10817 1638400 61440 61440 NT_STATUS_OK
ReadX 10817 1699840 4096 4096 NT_STATUS_OK
ReadX 10817 1703936 61440 61440 NT_STATUS_OK
ReadX 10817 1765376 4096 4096 NT_STATUS_OK
ReadX 10817 1769472 61440 61440 NT_STATUS_OK
ReadX 10817 1830912 4096 4096 NT_STATUS_OK
ReadX 10817 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10818 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10815 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Close 10817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
ReadX 10822 4096 4096 4096 NT_STATUS_OK
ReadX 10822 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10826 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 8192 8192 NT_STATUS_OK
ReadX 10830 8192 8192 8192 NT_STATUS_OK
ReadX 10830 16384 8192 8192 NT_STATUS_OK
ReadX 10830 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10835 NT_STATUS_OK
WriteX 10835 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10835 258 NT_STATUS_OK
WriteX 10835 0 10438 10438 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10836 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10839 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10840 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10841 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10843 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
ReadX 10844 4096 4096 4096 NT_STATUS_OK
ReadX 10844 8192 4096 4096 NT_STATUS_OK
ReadX 10844 12288 8192 8192 NT_STATUS_OK
ReadX 10844 20480 8192 8192 NT_STATUS_OK
ReadX 10844 28672 8192 8192 NT_STATUS_OK
ReadX 10844 36864 8192 8192 NT_STATUS_OK
ReadX 10844 45056 8192 8192 NT_STATUS_OK
ReadX 10844 53248 8192 8192 NT_STATUS_OK
ReadX 10844 61440 8192 8192 NT_STATUS_OK
ReadX 10844 69632 8192 8192 NT_STATUS_OK
ReadX 10844 77824 8192 8192 NT_STATUS_OK
ReadX 10844 86016 8192 8192 NT_STATUS_OK
ReadX 10844 94208 8192 8192 NT_STATUS_OK
ReadX 10844 102400 8192 8192 NT_STATUS_OK
ReadX 10844 110592 8192 8192 NT_STATUS_OK
ReadX 10844 118784 8192 8192 NT_STATUS_OK
ReadX 10844 126976 8192 8192 NT_STATUS_OK
ReadX 10844 135168 8192 8192 NT_STATUS_OK
ReadX 10844 143360 8192 8192 NT_STATUS_OK
ReadX 10844 151552 8192 8192 NT_STATUS_OK
ReadX 10844 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10849 NT_STATUS_OK
WriteX 10849 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10849 258 NT_STATUS_OK
WriteX 10849 0 28489 28489 NT_STATUS_OK
Close 10849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10852 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 0 8192 8192 NT_STATUS_OK
ReadX 10856 8192 8192 8192 NT_STATUS_OK
ReadX 10856 16384 8192 8192 NT_STATUS_OK
ReadX 10856 24576 8192 8192 NT_STATUS_OK
ReadX 10856 32768 16384 16384 NT_STATUS_OK
ReadX 10856 49152 8192 8192 NT_STATUS_OK
ReadX 10856 57344 8192 8192 NT_STATUS_OK
ReadX 10856 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10861 NT_STATUS_OK
WriteX 10861 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 258 NT_STATUS_OK
WriteX 10861 0 29253 29253 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10868 NT_STATUS_OK
WriteX 10868 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10868 258 NT_STATUS_OK
WriteX 10868 0 30183 30183 NT_STATUS_OK
Close 10868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10871 NT_STATUS_OK
WriteX 10871 0 510 510 NT_STATUS_OK
WriteX 10871 510 512 512 NT_STATUS_OK
WriteX 10871 1022 510 510 NT_STATUS_OK
WriteX 10871 1532 510 510 NT_STATUS_OK
WriteX 10871 2042 168 168 NT_STATUS_OK
Close 10871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
WriteX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 61440 4096 4096 NT_STATUS_OK
ReadX 10875 126976 4096 4096 NT_STATUS_OK
WriteX 10875 0 65536 65536 NT_STATUS_OK
WriteX 10875 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 61440 4096 4096 NT_STATUS_OK
ReadX 10876 126976 4096 4096 NT_STATUS_OK
ReadX 10876 192512 4096 4096 NT_STATUS_OK
ReadX 10876 258048 4096 4096 NT_STATUS_OK
WriteX 10876 0 65536 65536 NT_STATUS_OK
WriteX 10876 65536 65536 65536 NT_STATUS_OK
WriteX 10876 131072 65536 65536 NT_STATUS_OK
WriteX 10876 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10877 NT_STATUS_OK
ReadX 10877 61440 4096 4096 NT_STATUS_OK
ReadX 10877 126976 4096 4096 NT_STATUS_OK
ReadX 10877 192512 4096 4096 NT_STATUS_OK
ReadX 10877 258048 4096 4096 NT_STATUS_OK
ReadX 10877 323584 4096 4096 NT_STATUS_OK
ReadX 10877 389120 4096 4096 NT_STATUS_OK
ReadX 10877 454656 4096 4096 NT_STATUS_OK
ReadX 10877 520192 4096 4096 NT_STATUS_OK
WriteX 10877 0 65536 65536 NT_STATUS_OK
WriteX 10877 65536 65536 65536 NT_STATUS_OK
WriteX 10877 131072 65536 65536 NT_STATUS_OK
WriteX 10877 196608 65536 65536 NT_STATUS_OK
WriteX 10877 262144 65536 65536 NT_STATUS_OK
WriteX 10877 327680 65536 65536 NT_STATUS_OK
WriteX 10877 393216 65536 65536 NT_STATUS_OK
WriteX 10877 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10877 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10880 NT_STATUS_OK
Close 10880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10884 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10893 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10896 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10902 NT_STATUS_OK
Close 10902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10912 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10917 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10927 NT_STATUS_OK
Close 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10937 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10943 NT_STATUS_OK
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10946 NT_STATUS_OK
WriteX 10946 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10946 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10946 0 65536 65536 NT_STATUS_OK
WriteX 10946 65536 65536 65536 NT_STATUS_OK
WriteX 10946 131072 65536 65536 NT_STATUS_OK
WriteX 10946 196608 65536 65536 NT_STATUS_OK
WriteX 10946 262144 26634 26634 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
ReadX 10954 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10955 NT_STATUS_OK
Close 10955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10959 NT_STATUS_OK
Close 10959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10962 NT_STATUS_OK
Close 10962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10964 NT_STATUS_OK
Close 10964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10973 NT_STATUS_OK
Close 10973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10977 NT_STATUS_OK
Close 10977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10992 NT_STATUS_OK
Close 10992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11011 NT_STATUS_OK
Close 11011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11016 NT_STATUS_OK
Close 11016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11019 NT_STATUS_OK
Close 11019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11021 NT_STATUS_OK
Close 11021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
Close 11033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
Close 11034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11047 NT_STATUS_OK
ReadX 11047 0 4096 4096 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
Close 11048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11078 0 4096 4096 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11079 NT_STATUS_OK
ReadX 11079 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 4096 4096 NT_STATUS_OK
ReadX 11080 4096 4096 4096 NT_STATUS_OK
ReadX 11080 8192 4096 4096 NT_STATUS_OK
ReadX 11080 12288 4096 4096 NT_STATUS_OK
ReadX 11080 16384 4096 4096 NT_STATUS_OK
ReadX 11080 20480 4096 4096 NT_STATUS_OK
ReadX 11080 24576 4096 4096 NT_STATUS_OK
ReadX 11080 28672 4096 4096 NT_STATUS_OK
ReadX 11080 32768 4096 4096 NT_STATUS_OK
ReadX 11080 36864 4096 4096 NT_STATUS_OK
ReadX 11080 40960 4096 4096 NT_STATUS_OK
ReadX 11080 45056 4096 4096 NT_STATUS_OK
ReadX 11080 49152 4096 4096 NT_STATUS_OK
ReadX 11080 53248 4096 4096 NT_STATUS_OK
ReadX 11080 57344 4096 4096 NT_STATUS_OK
ReadX 11080 61440 4096 4096 NT_STATUS_OK
ReadX 11080 65536 4096 4096 NT_STATUS_OK
ReadX 11080 69632 4096 4096 NT_STATUS_OK
ReadX 11080 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11080 1004 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
Close 11080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11081 NT_STATUS_OK
SET_FILE_INFORMATION 11081 1004 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11086 NT_STATUS_OK
WriteX 11086 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 258 NT_STATUS_OK
WriteX 11086 0 65536 65536 NT_STATUS_OK
WriteX 11086 65536 19979 19979 NT_STATUS_OK
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 1004 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
Close 11087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11088 NT_STATUS_OK
ReadX 11088 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11089 NT_STATUS_OK
ReadX 11089 0 4096 4096 NT_STATUS_OK
Close 11088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
Close 11090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
Close 11091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11093 NT_STATUS_OK
Close 11093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11082 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11098 NT_STATUS_OK
WriteX 11098 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11098 258 NT_STATUS_OK
WriteX 11098 0 65536 65536 NT_STATUS_OK
WriteX 11098 65536 17654 17654 NT_STATUS_OK
Close 11098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 1004 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
SET_FILE_INFORMATION 11099 1004 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Flush 11099 NT_STATUS_OK
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11100 NT_STATUS_OK
SET_FILE_INFORMATION 11100 1004 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
ReadX 11104 4096 4096 4096 NT_STATUS_OK
ReadX 11104 8192 4096 4096 NT_STATUS_OK
ReadX 11104 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11104 16384 4096 4096 NT_STATUS_OK
ReadX 11104 20480 4096 4096 NT_STATUS_OK
ReadX 11104 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
Close 11105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
Close 11106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11108 NT_STATUS_OK
Close 11108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11110 NT_STATUS_OK
Close 11110 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11113 NT_STATUS_OK
WriteX 11113 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11113 258 NT_STATUS_OK
WriteX 11113 0 65536 65536 NT_STATUS_OK
WriteX 11113 65536 19490 19490 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11114 NT_STATUS_OK
ReadX 11114 0 4096 4096 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
Flush 11114 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
Flush 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
Flush 11114 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
Flush 11114 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
Flush 11114 NT_STATUS_OK
SET_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
Flush 11114 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11115 NT_STATUS_OK
SET_FILE_INFORMATION 11115 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11116 NT_STATUS_OK
ReadX 11116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11119 0 4096 4096 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
ReadX 11121 4096 4096 4096 NT_STATUS_OK
ReadX 11121 8192 4096 4096 NT_STATUS_OK
ReadX 11121 12288 4096 4096 NT_STATUS_OK
ReadX 11121 16384 4096 4096 NT_STATUS_OK
ReadX 11121 20480 4096 4096 NT_STATUS_OK
ReadX 11121 24576 4096 4096 NT_STATUS_OK
ReadX 11121 28672 4096 4096 NT_STATUS_OK
ReadX 11121 32768 4096 4096 NT_STATUS_OK
ReadX 11121 36864 4096 4096 NT_STATUS_OK
ReadX 11121 40960 4096 4096 NT_STATUS_OK
ReadX 11121 45056 4096 4096 NT_STATUS_OK
ReadX 11121 49152 4096 4096 NT_STATUS_OK
ReadX 11121 53248 4096 4096 NT_STATUS_OK
ReadX 11121 57344 4096 4096 NT_STATUS_OK
ReadX 11121 61440 4096 4096 NT_STATUS_OK
ReadX 11121 65536 4096 4096 NT_STATUS_OK
ReadX 11121 69632 4096 4096 NT_STATUS_OK
ReadX 11121 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11121 1004 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11122 NT_STATUS_OK
SET_FILE_INFORMATION 11122 1004 NT_STATUS_OK
Close 11122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11124 NT_STATUS_OK
Close 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11127 NT_STATUS_OK
WriteX 11127 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11127 258 NT_STATUS_OK
WriteX 11127 0 65536 65536 NT_STATUS_OK
WriteX 11127 65536 8866 8866 NT_STATUS_OK
Close 11127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
WriteX 11128 0 4096 4096 NT_STATUS_OK
Flush 11128 NT_STATUS_OK
SET_FILE_INFORMATION 11128 1004 NT_STATUS_OK
WriteX 11128 0 4096 4096 NT_STATUS_OK
Flush 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
Close 11130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
Close 11131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11132 1004 NT_STATUS_OK
WriteX 11132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11135 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11138 NT_STATUS_OK
WriteX 11138 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11138 258 NT_STATUS_OK
WriteX 11138 0 65536 65536 NT_STATUS_OK
WriteX 11138 65536 9298 9298 NT_STATUS_OK
Close 11138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
WriteX 11139 0 4096 4096 NT_STATUS_OK
Flush 11139 NT_STATUS_OK
SET_FILE_INFORMATION 11139 1004 NT_STATUS_OK
WriteX 11139 0 4096 4096 NT_STATUS_OK
Flush 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11140 NT_STATUS_OK
SET_FILE_INFORMATION 11140 1004 NT_STATUS_OK
Close 11140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11145 0 4096 4096 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11146 4096 4096 4096 NT_STATUS_OK
ReadX 11146 8192 4096 4096 NT_STATUS_OK
ReadX 11146 12288 4096 4096 NT_STATUS_OK
ReadX 11146 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11147 NT_STATUS_OK
ReadX 11147 0 4096 4096 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11148 NT_STATUS_OK
ReadX 11148 0 4096 4096 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11149 1004 NT_STATUS_OK
WriteX 11149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11146 NT_STATUS_OK
Close 11149 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 11540 11540 NT_STATUS_OK
Close 11155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 0 4096 4096 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Flush 11156 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Flush 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11157 NT_STATUS_OK
SET_FILE_INFORMATION 11157 1004 NT_STATUS_OK
Close 11157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 61440 4096 4096 NT_STATUS_OK
ReadX 11161 126976 4096 4096 NT_STATUS_OK
WriteX 11161 0 65536 65536 NT_STATUS_OK
WriteX 11161 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 61440 4096 4096 NT_STATUS_OK
ReadX 11162 126976 4096 4096 NT_STATUS_OK
ReadX 11162 192512 4096 4096 NT_STATUS_OK
ReadX 11162 258048 4096 4096 NT_STATUS_OK
WriteX 11162 0 65536 65536 NT_STATUS_OK
WriteX 11162 65536 65536 65536 NT_STATUS_OK
WriteX 11162 131072 65536 65536 NT_STATUS_OK
WriteX 11162 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 61440 4096 4096 NT_STATUS_OK
ReadX 11163 126976 4096 4096 NT_STATUS_OK
ReadX 11163 192512 4096 4096 NT_STATUS_OK
ReadX 11163 258048 4096 4096 NT_STATUS_OK
ReadX 11163 323584 4096 4096 NT_STATUS_OK
ReadX 11163 389120 4096 4096 NT_STATUS_OK
ReadX 11163 454656 4096 4096 NT_STATUS_OK
ReadX 11163 520192 4096 4096 NT_STATUS_OK
WriteX 11163 0 65536 65536 NT_STATUS_OK
WriteX 11163 65536 65536 65536 NT_STATUS_OK
WriteX 11163 131072 65536 65536 NT_STATUS_OK
WriteX 11163 196608 65536 65536 NT_STATUS_OK
WriteX 11163 262144 65536 65536 NT_STATUS_OK
WriteX 11163 327680 65536 65536 NT_STATUS_OK
WriteX 11163 393216 65536 65536 NT_STATUS_OK
WriteX 11163 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
ReadX 11164 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11165 NT_STATUS_OK
WriteX 11165 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11165 258 NT_STATUS_OK
WriteX 11165 0 53 53 NT_STATUS_OK
Close 11165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11164 8192 4096 4096 NT_STATUS_OK
ReadX 11164 12288 4096 4096 NT_STATUS_OK
WriteX 11168 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11168 258 NT_STATUS_OK
ReadX 11164 16384 4096 4096 NT_STATUS_OK
ReadX 11164 20480 4096 4096 NT_STATUS_OK
WriteX 11168 0 15360 15360 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 4096 4096 NT_STATUS_OK
Close 11169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11172 NT_STATUS_OK
ReadX 11172 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11173 NT_STATUS_OK
Close 11173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11172 4096 4096 4096 NT_STATUS_OK
ReadX 11172 8192 4096 4096 NT_STATUS_OK
ReadX 11172 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
ReadX 11175 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
ReadX 11176 4096 4096 4096 NT_STATUS_OK
ReadX 11176 8192 4096 4096 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11177 NT_STATUS_OK
WriteX 11177 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11177 258 NT_STATUS_OK
WriteX 11177 0 15360 15360 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11178 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11178 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11182 NT_STATUS_OK
SET_FILE_INFORMATION 11182 1004 NT_STATUS_OK
Close 11182 NT_STATUS_OK
WriteX 11178 0 4096 4096 NT_STATUS_OK
Close 11178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11183 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
ReadX 11185 4096 4096 4096 NT_STATUS_OK
ReadX 11185 8192 4096 4096 NT_STATUS_OK
ReadX 11185 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11185 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11185 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11187 NT_STATUS_OK
WriteX 11187 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
WriteX 11187 0 53 53 NT_STATUS_OK
Close 11187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11186 4096 4096 4096 NT_STATUS_OK
ReadX 11186 8192 4096 4096 NT_STATUS_OK
ReadX 11186 12288 4096 4096 NT_STATUS_OK
WriteX 11190 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
WriteX 11190 0 12006 12006 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11191 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11191 1004 NT_STATUS_OK
WriteX 11191 0 4096 4096 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11195 NT_STATUS_OK
Close 11195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11194 4096 4096 4096 NT_STATUS_OK
ReadX 11194 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11197 NT_STATUS_OK
WriteX 11197 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11197 258 NT_STATUS_OK
WriteX 11197 0 11991 11991 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11202 NT_STATUS_OK
SET_FILE_INFORMATION 11202 1004 NT_STATUS_OK
Close 11202 NT_STATUS_OK
WriteX 11198 0 4096 4096 NT_STATUS_OK
Close 11198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11203 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11205 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
ReadX 11205 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
Close 11181 NT_STATUS_OK
WriteX 11185 0 19054 19054 NT_STATUS_OK
WriteX 11205 0 12288 12288 NT_STATUS_OK
Close 11201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11210 NT_STATUS_OK
Close 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 61440 61440 NT_STATUS_OK
ReadX 11212 61440 4096 4096 NT_STATUS_OK
ReadX 11212 65536 61440 61440 NT_STATUS_OK
ReadX 11212 126976 4096 4096 NT_STATUS_OK
ReadX 11212 131072 61440 61440 NT_STATUS_OK
ReadX 11212 192512 4096 4096 NT_STATUS_OK
ReadX 11212 196608 61440 61440 NT_STATUS_OK
ReadX 11212 258048 4096 4096 NT_STATUS_OK
ReadX 11212 262144 61440 61440 NT_STATUS_OK
ReadX 11212 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 61440 61440 NT_STATUS_OK
ReadX 11213 61440 4096 4096 NT_STATUS_OK
ReadX 11213 65536 61440 61440 NT_STATUS_OK
ReadX 11213 126976 4096 4096 NT_STATUS_OK
ReadX 11213 131072 61440 61440 NT_STATUS_OK
ReadX 11213 192512 4096 4096 NT_STATUS_OK
ReadX 11213 196608 61440 61440 NT_STATUS_OK
ReadX 11213 258048 4096 4096 NT_STATUS_OK
ReadX 11213 262144 61440 61440 NT_STATUS_OK
ReadX 11213 323584 4096 4096 NT_STATUS_OK
ReadX 11213 327680 61440 61440 NT_STATUS_OK
ReadX 11213 389120 4096 4096 NT_STATUS_OK
ReadX 11213 393216 61440 61440 NT_STATUS_OK
ReadX 11213 454656 4096 4096 NT_STATUS_OK
ReadX 11213 458752 61440 61440 NT_STATUS_OK
ReadX 11213 520192 4096 4096 NT_STATUS_OK
ReadX 11213 524288 61440 61440 NT_STATUS_OK
ReadX 11213 585728 4096 4096 NT_STATUS_OK
ReadX 11213 589824 61440 61440 NT_STATUS_OK
ReadX 11213 651264 4096 4096 NT_STATUS_OK
ReadX 11213 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 61440 61440 NT_STATUS_OK
ReadX 11214 61440 4096 4096 NT_STATUS_OK
ReadX 11214 65536 61440 61440 NT_STATUS_OK
ReadX 11214 126976 4096 4096 NT_STATUS_OK
ReadX 11214 131072 61440 61440 NT_STATUS_OK
ReadX 11214 192512 4096 4096 NT_STATUS_OK
ReadX 11214 196608 61440 61440 NT_STATUS_OK
ReadX 11214 258048 4096 4096 NT_STATUS_OK
ReadX 11214 262144 61440 61440 NT_STATUS_OK
ReadX 11214 323584 4096 4096 NT_STATUS_OK
ReadX 11214 327680 61440 61440 NT_STATUS_OK
ReadX 11214 389120 4096 4096 NT_STATUS_OK
ReadX 11214 393216 61440 61440 NT_STATUS_OK
ReadX 11214 454656 4096 4096 NT_STATUS_OK
ReadX 11214 458752 61440 61440 NT_STATUS_OK
ReadX 11214 520192 4096 4096 NT_STATUS_OK
ReadX 11214 524288 61440 61440 NT_STATUS_OK
ReadX 11214 585728 4096 4096 NT_STATUS_OK
ReadX 11214 589824 61440 61440 NT_STATUS_OK
ReadX 11214 651264 4096 4096 NT_STATUS_OK
ReadX 11214 655360 61440 61440 NT_STATUS_OK
ReadX 11214 716800 4096 4096 NT_STATUS_OK
ReadX 11214 720896 61440 61440 NT_STATUS_OK
ReadX 11214 782336 4096 4096 NT_STATUS_OK
ReadX 11214 786432 61440 61440 NT_STATUS_OK
ReadX 11214 847872 4096 4096 NT_STATUS_OK
ReadX 11214 851968 61440 61440 NT_STATUS_OK
ReadX 11214 913408 4096 4096 NT_STATUS_OK
ReadX 11214 917504 61440 61440 NT_STATUS_OK
ReadX 11214 978944 4096 4096 NT_STATUS_OK
ReadX 11214 983040 61440 61440 NT_STATUS_OK
ReadX 11214 1044480 4096 4096 NT_STATUS_OK
ReadX 11214 1048576 61440 61440 NT_STATUS_OK
ReadX 11214 1110016 4096 4096 NT_STATUS_OK
ReadX 11214 1114112 61440 61440 NT_STATUS_OK
ReadX 11214 1175552 4096 4096 NT_STATUS_OK
ReadX 11214 1179648 61440 61440 NT_STATUS_OK
ReadX 11214 1241088 4096 4096 NT_STATUS_OK
ReadX 11214 1245184 61440 61440 NT_STATUS_OK
ReadX 11214 1306624 4096 4096 NT_STATUS_OK
ReadX 11214 1310720 61440 61440 NT_STATUS_OK
ReadX 11214 1372160 4096 4096 NT_STATUS_OK
ReadX 11214 1376256 61440 61440 NT_STATUS_OK
ReadX 11214 1437696 4096 4096 NT_STATUS_OK
ReadX 11214 1441792 61440 61440 NT_STATUS_OK
ReadX 11214 1503232 4096 4096 NT_STATUS_OK
ReadX 11214 1507328 61440 61440 NT_STATUS_OK
ReadX 11214 1568768 4096 4096 NT_STATUS_OK
ReadX 11214 1572864 61440 61440 NT_STATUS_OK
ReadX 11214 1634304 4096 4096 NT_STATUS_OK
ReadX 11214 1638400 61440 61440 NT_STATUS_OK
ReadX 11214 1699840 4096 4096 NT_STATUS_OK
ReadX 11214 1703936 61440 61440 NT_STATUS_OK
ReadX 11214 1765376 4096 4096 NT_STATUS_OK
ReadX 11214 1769472 61440 61440 NT_STATUS_OK
ReadX 11214 1830912 4096 4096 NT_STATUS_OK
ReadX 11214 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11221 NT_STATUS_OK
QUERY_FILE_INFORMATION 11221 1004 NT_STATUS_OK
WriteX 11221 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11221 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11223 NT_STATUS_OK
WriteX 11223 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 491 491 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11224 NT_STATUS_OK
ReadX 11224 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11221 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11227 NT_STATUS_OK
WriteX 11227 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11227 258 NT_STATUS_OK
WriteX 11227 0 543 543 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Close 11216 NT_STATUS_OK
Close 11217 NT_STATUS_OK
Close 11218 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11241 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 1004 NT_STATUS_OK
WriteX 11241 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 258 NT_STATUS_OK
WriteX 11241 0 2048 2048 NT_STATUS_OK
Close 11241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
Flush 11242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11247 NT_STATUS_OK
WriteX 11247 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 258 NT_STATUS_OK
WriteX 11247 0 2048 2048 NT_STATUS_OK
Close 11247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11253 NT_STATUS_OK
WriteX 11253 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 258 NT_STATUS_OK
WriteX 11253 0 2048 2048 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 2048 2048 NT_STATUS_OK
ReadX 11232 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
WriteX 11232 0 8192 8192 NT_STATUS_OK
WriteX 11233 0 4096 4096 NT_STATUS_OK
WriteX 11234 0 4096 4096 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11261 NT_STATUS_OK
ReadX 11261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11263 NT_STATUS_OK
ReadX 11263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11264 NT_STATUS_OK
ReadX 11264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11265 NT_STATUS_OK
ReadX 11265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11278 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 1004 NT_STATUS_OK
WriteX 11278 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 258 NT_STATUS_OK
WriteX 11278 0 2048 2048 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11285 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11286 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 1004 NT_STATUS_OK
WriteX 11286 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 258 NT_STATUS_OK
WriteX 11286 0 2048 2048 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
Flush 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11281 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11289 NT_STATUS_OK
WriteX 11289 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11289 258 NT_STATUS_OK
WriteX 11289 0 4096 4096 NT_STATUS_OK
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11290 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11292 NT_STATUS_OK
WriteX 11292 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11292 258 NT_STATUS_OK
WriteX 11292 0 4096 4096 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11293 0 4096 4096 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11270 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Close 11265 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11263 NT_STATUS_OK
Close 11264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11296 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11298 NT_STATUS_OK
ReadX 11298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11299 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11300 NT_STATUS_OK
WriteX 11300 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11300 258 NT_STATUS_OK
WriteX 11300 0 2048 2048 NT_STATUS_OK
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11304 NT_STATUS_OK
ReadX 11304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11314 NT_STATUS_OK
ReadX 11314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11315 NT_STATUS_OK
QUERY_FILE_INFORMATION 11315 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11298 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Close 11309 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11317 NT_STATUS_OK
QUERY_FILE_INFORMATION 11317 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11320 NT_STATUS_OK
ReadX 11320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11322 NT_STATUS_OK
ReadX 11322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11323 NT_STATUS_OK
ReadX 11323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11337 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1004 NT_STATUS_OK
WriteX 11337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 258 NT_STATUS_OK
WriteX 11337 0 2048 2048 NT_STATUS_OK
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11338 NT_STATUS_OK
ReadX 11338 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11349 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 1004 NT_STATUS_OK
WriteX 11349 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
WriteX 11349 0 2048 2048 NT_STATUS_OK
Close 11349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11357 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1004 NT_STATUS_OK
WriteX 11357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 2048 2048 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11338 0 4096 4096 NT_STATUS_OK
Flush 11338 NT_STATUS_OK
WriteX 11350 0 4096 4096 NT_STATUS_OK
Flush 11350 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Flush 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11350 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11340 4096 16384 16384 NT_STATUS_OK
ReadX 11320 4096 16384 16384 NT_STATUS_OK
ReadX 11352 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11360 NT_STATUS_OK
ReadX 11360 0 2048 2048 NT_STATUS_OK
WriteX 11360 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11361 NT_STATUS_OK
QUERY_FILE_INFORMATION 11361 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Close 11320 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11322 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11363 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11365 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11369 NT_STATUS_OK
ReadX 11369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11372 NT_STATUS_OK
ReadX 11372 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11368 4096 16384 16384 NT_STATUS_OK
WriteX 11368 0 4096 4096 NT_STATUS_OK
WriteX 11369 0 4096 4096 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
WriteX 11371 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11373 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11375 NT_STATUS_OK
ReadX 11375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11377 NT_STATUS_OK
ReadX 11377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11379 NT_STATUS_OK
ReadX 11379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11380 NT_STATUS_OK
ReadX 11380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11381 NT_STATUS_OK
ReadX 11381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11382 NT_STATUS_OK
ReadX 11382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11383 NT_STATUS_OK
ReadX 11383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11384 NT_STATUS_OK
ReadX 11384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11386 NT_STATUS_OK
ReadX 11386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11387 NT_STATUS_OK
ReadX 11387 0 8192 8192 NT_STATUS_OK
ReadX 11374 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11388 0 4096 4096 NT_STATUS_OK
ReadX 11388 4096 4096 4096 NT_STATUS_OK
ReadX 11388 8192 4096 4096 NT_STATUS_OK
WriteX 11374 0 4096 4096 NT_STATUS_OK
WriteX 11375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
ReadX 11389 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11368 0 4096 4096 NT_STATUS_OK
WriteX 11369 0 4096 4096 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
WriteX 11371 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11394 NT_STATUS_OK
QUERY_FILE_INFORMATION 11394 1004 NT_STATUS_OK
WriteX 11394 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11394 258 NT_STATUS_OK
WriteX 11394 0 2048 2048 NT_STATUS_OK
Close 11394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11395 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11395 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11396 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
ReadX 11397 4096 4096 4096 NT_STATUS_OK
WriteX 11397 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11395 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
ReadX 11399 4096 4096 4096 NT_STATUS_OK
WriteX 11399 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11400 NT_STATUS_OK
QUERY_FILE_INFORMATION 11400 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11387 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Close 11381 NT_STATUS_OK
Close 11382 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Close 11384 NT_STATUS_OK
Close 11386 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Close 11375 NT_STATUS_OK
Close 11378 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Close 11376 NT_STATUS_OK
Close 11377 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11402 0 4096 4096 NT_STATUS_OK
ReadX 11402 4096 4096 4096 NT_STATUS_OK
ReadX 11402 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11410 NT_STATUS_OK
ReadX 11410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11411 NT_STATUS_OK
ReadX 11411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
ReadX 11403 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11420 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 1004 NT_STATUS_OK
WriteX 11420 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 258 NT_STATUS_OK
WriteX 11420 0 2048 2048 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11425 NT_STATUS_OK
Close 11425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11426 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 1004 NT_STATUS_OK
WriteX 11426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 258 NT_STATUS_OK
WriteX 11426 0 2048 2048 NT_STATUS_OK
Close 11426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11410 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11428 NT_STATUS_OK
QUERY_FILE_INFORMATION 11428 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Close 11410 NT_STATUS_OK
Close 11411 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Close 11413 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11430 NT_STATUS_OK
QUERY_FILE_INFORMATION 11430 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 61440 4096 4096 NT_STATUS_OK
ReadX 11432 126976 4096 4096 NT_STATUS_OK
WriteX 11432 0 65536 65536 NT_STATUS_OK
WriteX 11432 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11433 NT_STATUS_OK
ReadX 11433 61440 4096 4096 NT_STATUS_OK
ReadX 11433 126976 4096 4096 NT_STATUS_OK
ReadX 11433 192512 4096 4096 NT_STATUS_OK
ReadX 11433 258048 4096 4096 NT_STATUS_OK
WriteX 11433 0 65536 65536 NT_STATUS_OK
WriteX 11433 65536 65536 65536 NT_STATUS_OK
WriteX 11433 131072 65536 65536 NT_STATUS_OK
WriteX 11433 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 61440 4096 4096 NT_STATUS_OK
ReadX 11434 126976 4096 4096 NT_STATUS_OK
ReadX 11434 192512 4096 4096 NT_STATUS_OK
ReadX 11434 258048 4096 4096 NT_STATUS_OK
ReadX 11434 323584 4096 4096 NT_STATUS_OK
ReadX 11434 389120 4096 4096 NT_STATUS_OK
ReadX 11434 454656 4096 4096 NT_STATUS_OK
ReadX 11434 520192 4096 4096 NT_STATUS_OK
WriteX 11434 0 65536 65536 NT_STATUS_OK
WriteX 11434 65536 65536 65536 NT_STATUS_OK
WriteX 11434 131072 65536 65536 NT_STATUS_OK
WriteX 11434 196608 65536 65536 NT_STATUS_OK
WriteX 11434 262144 65536 65536 NT_STATUS_OK
WriteX 11434 327680 65536 65536 NT_STATUS_OK
WriteX 11434 393216 65536 65536 NT_STATUS_OK
WriteX 11434 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11435 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11435 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11435 8192 4096 4096 NT_STATUS_OK
ReadX 11435 12288 4096 4096 NT_STATUS_OK
ReadX 11435 16384 4096 4096 NT_STATUS_OK
ReadX 11435 20480 4096 4096 NT_STATUS_OK
ReadX 11435 24576 4096 4096 NT_STATUS_OK
ReadX 11435 28672 4096 4096 NT_STATUS_OK
ReadX 11435 32768 4096 4096 NT_STATUS_OK
ReadX 11435 36864 4096 4096 NT_STATUS_OK
ReadX 11435 40960 4096 4096 NT_STATUS_OK
ReadX 11435 45056 4096 4096 NT_STATUS_OK
ReadX 11435 49152 4096 4096 NT_STATUS_OK
ReadX 11435 53248 4096 4096 NT_STATUS_OK
ReadX 11435 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11435 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11433 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11438 NT_STATUS_OK
WriteX 11438 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11438 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11438 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11438 1004 NT_STATUS_OK
WriteX 11438 0 57088 57088 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
Close 11435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11439 NT_STATUS_OK
SET_FILE_INFORMATION 11439 1004 NT_STATUS_OK
Close 11439 NT_STATUS_OK
SET_FILE_INFORMATION 11438 1004 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11440 NT_STATUS_OK
Close 11440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11442 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11443 NT_STATUS_OK
WriteX 11443 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11443 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11443 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11443 1004 NT_STATUS_OK
WriteX 11443 0 51456 51456 NT_STATUS_OK
WriteX 11443 0 4096 4096 NT_STATUS_OK
Flush 11443 NT_STATUS_OK
SET_FILE_INFORMATION 11443 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11443 1004 NT_STATUS_OK
WriteX 11443 0 4096 4096 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11447 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11449 NT_STATUS_OK
Close 11449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11452 NT_STATUS_OK
WriteX 11452 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11452 258 NT_STATUS_OK
WriteX 11452 0 53077 53077 NT_STATUS_OK
Close 11452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11453 NT_STATUS_OK
WriteX 11453 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11453 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11453 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11453 1004 NT_STATUS_OK
WriteX 11453 0 65536 65536 NT_STATUS_OK
WriteX 11453 65536 1856 1856 NT_STATUS_OK
WriteX 11453 0 4096 4096 NT_STATUS_OK
Flush 11453 NT_STATUS_OK
SET_FILE_INFORMATION 11453 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11453 1004 NT_STATUS_OK
WriteX 11453 0 4096 4096 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11455 NT_STATUS_OK
Close 11455 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11462 NT_STATUS_OK
WriteX 11462 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11462 258 NT_STATUS_OK
WriteX 11462 0 7983 7983 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11467 NT_STATUS_OK
WriteX 11467 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11467 258 NT_STATUS_OK
WriteX 11467 0 65536 65536 NT_STATUS_OK
WriteX 11467 65536 65536 65536 NT_STATUS_OK
WriteX 11467 131072 65536 65536 NT_STATUS_OK
WriteX 11467 196608 65536 65536 NT_STATUS_OK
WriteX 11467 262144 65536 65536 NT_STATUS_OK
WriteX 11467 327680 65536 65536 NT_STATUS_OK
WriteX 11467 393216 65536 65536 NT_STATUS_OK
WriteX 11467 458752 46731 46731 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11468 NT_STATUS_OK
WriteX 11468 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11457 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11468 1004 NT_STATUS_OK
WriteX 11468 0 65536 65536 NT_STATUS_OK
WriteX 11468 65536 22848 22848 NT_STATUS_OK
WriteX 11468 0 4096 4096 NT_STATUS_OK
Flush 11468 NT_STATUS_OK
SET_FILE_INFORMATION 11468 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11468 1004 NT_STATUS_OK
WriteX 11468 0 4096 4096 NT_STATUS_OK
Close 11468 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11472 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11473 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
ReadX 11473 8192 4096 4096 NT_STATUS_OK
ReadX 11473 12288 4096 4096 NT_STATUS_OK
ReadX 11473 16384 4096 4096 NT_STATUS_OK
ReadX 11473 20480 4096 4096 NT_STATUS_OK
ReadX 11473 24576 4096 4096 NT_STATUS_OK
ReadX 11473 28672 4096 4096 NT_STATUS_OK
ReadX 11473 32768 4096 4096 NT_STATUS_OK
ReadX 11473 36864 4096 4096 NT_STATUS_OK
ReadX 11473 40960 4096 4096 NT_STATUS_OK
ReadX 11473 45056 4096 4096 NT_STATUS_OK
ReadX 11473 49152 4096 4096 NT_STATUS_OK
ReadX 11473 53248 4096 4096 NT_STATUS_OK
ReadX 11473 57344 4096 4096 NT_STATUS_OK
ReadX 11473 61440 4096 4096 NT_STATUS_OK
ReadX 11473 65536 4096 4096 NT_STATUS_OK
ReadX 11473 69632 4096 4096 NT_STATUS_OK
ReadX 11473 73728 4096 4096 NT_STATUS_OK
ReadX 11473 77824 4096 4096 NT_STATUS_OK
ReadX 11473 81920 4096 4096 NT_STATUS_OK
ReadX 11473 86016 4096 4096 NT_STATUS_OK
ReadX 11473 90112 4096 4096 NT_STATUS_OK
ReadX 11473 94208 4096 4096 NT_STATUS_OK
ReadX 11473 98304 4096 4096 NT_STATUS_OK
ReadX 11473 102400 4096 4096 NT_STATUS_OK
ReadX 11473 106496 4096 4096 NT_STATUS_OK
ReadX 11473 110592 4096 4096 NT_STATUS_OK
ReadX 11473 114688 4096 4096 NT_STATUS_OK
ReadX 11473 118784 4096 4096 NT_STATUS_OK
ReadX 11473 122880 4096 4096 NT_STATUS_OK
ReadX 11473 126976 4096 4096 NT_STATUS_OK
ReadX 11473 131072 4096 4096 NT_STATUS_OK
ReadX 11473 135168 4096 4096 NT_STATUS_OK
ReadX 11473 139264 4096 4096 NT_STATUS_OK
ReadX 11473 143360 4096 4096 NT_STATUS_OK
ReadX 11473 147456 4096 4096 NT_STATUS_OK
ReadX 11473 151552 4096 4096 NT_STATUS_OK
ReadX 11473 155648 4096 4096 NT_STATUS_OK
ReadX 11473 159744 4096 4096 NT_STATUS_OK
ReadX 11473 163840 4096 4096 NT_STATUS_OK
ReadX 11473 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11473 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11476 NT_STATUS_OK
WriteX 11476 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11476 258 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11477 NT_STATUS_OK
SET_FILE_INFORMATION 11477 1004 NT_STATUS_OK
Close 11477 NT_STATUS_OK
WriteX 11476 0 42388 42388 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
ReadX 11480 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11481 NT_STATUS_OK
WriteX 11481 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 258 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 42652 42652 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Close 11480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11483 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
ReadX 11485 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11487 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11490 NT_STATUS_OK
WriteX 11490 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11490 258 NT_STATUS_OK
WriteX 11490 0 65536 65536 NT_STATUS_OK
WriteX 11490 65536 49 49 NT_STATUS_OK
Close 11490 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 61440 61440 NT_STATUS_OK
ReadX 11491 61440 4096 4096 NT_STATUS_OK
ReadX 11491 65536 61440 61440 NT_STATUS_OK
ReadX 11491 126976 4096 4096 NT_STATUS_OK
ReadX 11491 131072 61440 61440 NT_STATUS_OK
ReadX 11491 192512 4096 4096 NT_STATUS_OK
ReadX 11491 196608 61440 61440 NT_STATUS_OK
ReadX 11491 258048 4096 4096 NT_STATUS_OK
ReadX 11491 262144 61440 61440 NT_STATUS_OK
ReadX 11491 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 61440 61440 NT_STATUS_OK
ReadX 11492 61440 4096 4096 NT_STATUS_OK
ReadX 11492 65536 61440 61440 NT_STATUS_OK
ReadX 11492 126976 4096 4096 NT_STATUS_OK
ReadX 11492 131072 61440 61440 NT_STATUS_OK
ReadX 11492 192512 4096 4096 NT_STATUS_OK
ReadX 11492 196608 61440 61440 NT_STATUS_OK
ReadX 11492 258048 4096 4096 NT_STATUS_OK
ReadX 11492 262144 61440 61440 NT_STATUS_OK
ReadX 11492 323584 4096 4096 NT_STATUS_OK
ReadX 11492 327680 61440 61440 NT_STATUS_OK
ReadX 11492 389120 4096 4096 NT_STATUS_OK
ReadX 11492 393216 61440 61440 NT_STATUS_OK
ReadX 11492 454656 4096 4096 NT_STATUS_OK
ReadX 11492 458752 61440 61440 NT_STATUS_OK
ReadX 11492 520192 4096 4096 NT_STATUS_OK
ReadX 11492 524288 61440 61440 NT_STATUS_OK
ReadX 11492 585728 4096 4096 NT_STATUS_OK
ReadX 11492 589824 61440 61440 NT_STATUS_OK
ReadX 11492 651264 4096 4096 NT_STATUS_OK
ReadX 11492 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 61440 61440 NT_STATUS_OK
ReadX 11493 61440 4096 4096 NT_STATUS_OK
ReadX 11493 65536 61440 61440 NT_STATUS_OK
ReadX 11493 126976 4096 4096 NT_STATUS_OK
ReadX 11493 131072 61440 61440 NT_STATUS_OK
ReadX 11493 192512 4096 4096 NT_STATUS_OK
ReadX 11493 196608 61440 61440 NT_STATUS_OK
ReadX 11493 258048 4096 4096 NT_STATUS_OK
ReadX 11493 262144 61440 61440 NT_STATUS_OK
ReadX 11493 323584 4096 4096 NT_STATUS_OK
ReadX 11493 327680 61440 61440 NT_STATUS_OK
ReadX 11493 389120 4096 4096 NT_STATUS_OK
ReadX 11493 393216 61440 61440 NT_STATUS_OK
ReadX 11493 454656 4096 4096 NT_STATUS_OK
ReadX 11493 458752 61440 61440 NT_STATUS_OK
ReadX 11493 520192 4096 4096 NT_STATUS_OK
ReadX 11493 524288 61440 61440 NT_STATUS_OK
ReadX 11493 585728 4096 4096 NT_STATUS_OK
ReadX 11493 589824 61440 61440 NT_STATUS_OK
ReadX 11493 651264 4096 4096 NT_STATUS_OK
ReadX 11493 655360 61440 61440 NT_STATUS_OK
ReadX 11493 716800 4096 4096 NT_STATUS_OK
ReadX 11493 720896 61440 61440 NT_STATUS_OK
ReadX 11493 782336 4096 4096 NT_STATUS_OK
ReadX 11493 786432 61440 61440 NT_STATUS_OK
ReadX 11493 847872 4096 4096 NT_STATUS_OK
ReadX 11493 851968 61440 61440 NT_STATUS_OK
ReadX 11493 913408 4096 4096 NT_STATUS_OK
ReadX 11493 917504 61440 61440 NT_STATUS_OK
ReadX 11493 978944 4096 4096 NT_STATUS_OK
ReadX 11493 983040 61440 61440 NT_STATUS_OK
ReadX 11493 1044480 4096 4096 NT_STATUS_OK
ReadX 11493 1048576 61440 61440 NT_STATUS_OK
ReadX 11493 1110016 4096 4096 NT_STATUS_OK
ReadX 11493 1114112 61440 61440 NT_STATUS_OK
ReadX 11493 1175552 4096 4096 NT_STATUS_OK
ReadX 11493 1179648 61440 61440 NT_STATUS_OK
ReadX 11493 1241088 4096 4096 NT_STATUS_OK
ReadX 11493 1245184 61440 61440 NT_STATUS_OK
ReadX 11493 1306624 4096 4096 NT_STATUS_OK
ReadX 11493 1310720 61440 61440 NT_STATUS_OK
ReadX 11493 1372160 4096 4096 NT_STATUS_OK
ReadX 11493 1376256 61440 61440 NT_STATUS_OK
ReadX 11493 1437696 4096 4096 NT_STATUS_OK
ReadX 11493 1441792 61440 61440 NT_STATUS_OK
ReadX 11493 1503232 4096 4096 NT_STATUS_OK
ReadX 11493 1507328 61440 61440 NT_STATUS_OK
ReadX 11493 1568768 4096 4096 NT_STATUS_OK
ReadX 11493 1572864 61440 61440 NT_STATUS_OK
ReadX 11493 1634304 4096 4096 NT_STATUS_OK
ReadX 11493 1638400 61440 61440 NT_STATUS_OK
ReadX 11493 1699840 4096 4096 NT_STATUS_OK
ReadX 11493 1703936 61440 61440 NT_STATUS_OK
ReadX 11493 1765376 4096 4096 NT_STATUS_OK
ReadX 11493 1769472 61440 61440 NT_STATUS_OK
ReadX 11493 1830912 4096 4096 NT_STATUS_OK
ReadX 11493 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11495 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 1005 NT_STATUS_OK
ReadX 11495 2156 24 24 NT_STATUS_OK
ReadX 11495 2139 276 276 NT_STATUS_OK
ReadX 11495 2136 14 14 NT_STATUS_OK
ReadX 11495 2136 7 7 NT_STATUS_OK
ReadX 11495 2138 12 12 NT_STATUS_OK
ReadX 11495 2137 8 8 NT_STATUS_OK
ReadX 11495 2135 15 15 NT_STATUS_OK
ReadX 11495 0 16 16 NT_STATUS_OK
ReadX 11495 16 2048 2048 NT_STATUS_OK
ReadX 11495 2064 2048 2048 NT_STATUS_OK
ReadX 11495 257 2048 2048 NT_STATUS_OK
ReadX 11495 385 2048 2048 NT_STATUS_OK
ReadX 11495 513 2048 2048 NT_STATUS_OK
ReadX 11495 641 2048 2048 NT_STATUS_OK
ReadX 11495 769 2048 2048 NT_STATUS_OK
ReadX 11495 897 2048 2048 NT_STATUS_OK
ReadX 11495 1025 2048 2048 NT_STATUS_OK
ReadX 11495 1153 2048 2048 NT_STATUS_OK
ReadX 11495 1281 2048 2048 NT_STATUS_OK
ReadX 11495 1409 2048 2048 NT_STATUS_OK
ReadX 11495 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11500 NT_STATUS_OK
WriteX 11500 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11500 258 NT_STATUS_OK
WriteX 11500 0 10575 10575 NT_STATUS_OK
Flush 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
Close 11495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11505 NT_STATUS_OK
LockX 11505 2147483538 1 NT_STATUS_OK
UnlockX 11505 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11505 1005 NT_STATUS_OK
ReadX 11505 0 512 512 NT_STATUS_OK
ReadX 11505 512 512 512 NT_STATUS_OK
ReadX 11505 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11505 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11505 1004 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11506 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 1005 NT_STATUS_OK
ReadX 11506 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11507 NT_STATUS_OK
LockX 11507 2147483538 1 NT_STATUS_OK
UnlockX 11507 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11507 1005 NT_STATUS_OK
ReadX 11507 0 512 512 NT_STATUS_OK
ReadX 11507 512 512 512 NT_STATUS_OK
ReadX 11507 1024 512 512 NT_STATUS_OK
ReadX 11507 288 20 20 NT_STATUS_OK
ReadX 11507 308 2084 2084 NT_STATUS_OK
ReadX 11507 388 2084 2084 NT_STATUS_OK
ReadX 11507 388 2084 2084 NT_STATUS_OK
ReadX 11494 2157 1386 1386 NT_STATUS_OK
ReadX 11507 2472 399 399 NT_STATUS_OK
ReadX 11507 3072 1536 1536 NT_STATUS_OK
ReadX 11507 544 149 149 NT_STATUS_OK
ReadX 11507 693 485 485 NT_STATUS_OK
Close 11507 NT_STATUS_OK
ReadX 11494 2157 4096 4096 NT_STATUS_OK
ReadX 11494 6253 4096 4096 NT_STATUS_OK
ReadX 11494 10349 4096 4096 NT_STATUS_OK
ReadX 11494 14445 4096 4096 NT_STATUS_OK
ReadX 11494 18541 4096 4096 NT_STATUS_OK
ReadX 11494 22637 256 256 NT_STATUS_OK
ReadX 11494 22893 4096 4096 NT_STATUS_OK
ReadX 11494 26989 4096 4096 NT_STATUS_OK
ReadX 11494 31085 4096 4096 NT_STATUS_OK
ReadX 11494 35181 4096 4096 NT_STATUS_OK
ReadX 11494 39277 4096 4096 NT_STATUS_OK
ReadX 11494 43373 4096 4096 NT_STATUS_OK
ReadX 11494 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11494 2157 1024 1024 NT_STATUS_OK
ReadX 11494 1667 4688 4688 NT_STATUS_OK
ReadX 11494 6355 3516 3516 NT_STATUS_OK
ReadX 11494 9871 16384 16384 NT_STATUS_OK
ReadX 11494 26255 3771 3771 NT_STATUS_OK
ReadX 11494 30026 2048 2048 NT_STATUS_OK
ReadX 11494 32074 1024 1024 NT_STATUS_OK
ReadX 11494 33098 6652 6652 NT_STATUS_OK
ReadX 11494 39750 16384 16384 NT_STATUS_OK
ReadX 11494 56134 10496 10496 NT_STATUS_OK
ReadX 11494 66630 1784 1784 NT_STATUS_OK
ReadX 11494 68414 90 90 NT_STATUS_OK
ReadX 11494 68504 273 273 NT_STATUS_OK
ReadX 11494 68777 1600 1600 NT_STATUS_OK
ReadX 11494 70377 640 640 NT_STATUS_OK
ReadX 11494 71017 1280 1280 NT_STATUS_OK
ReadX 11494 72297 8464 8464 NT_STATUS_OK
ReadX 11494 80761 158 158 NT_STATUS_OK
ReadX 11494 80919 912 912 NT_STATUS_OK
ReadX 11494 81831 1980 1980 NT_STATUS_OK
ReadX 11494 83811 2256 2256 NT_STATUS_OK
ReadX 11494 86067 400 400 NT_STATUS_OK
ReadX 11494 86467 252 252 NT_STATUS_OK
ReadX 11494 86719 42 42 NT_STATUS_OK
ReadX 11494 86761 725 725 NT_STATUS_OK
ReadX 11494 2009 512 512 NT_STATUS_OK
ReadX 11494 3895 9 9 NT_STATUS_OK
ReadX 11494 3781 46 46 NT_STATUS_OK
ReadX 11494 4059 92 92 NT_STATUS_OK
ReadX 11494 3781 92 92 NT_STATUS_OK
ReadX 11494 3986 184 184 NT_STATUS_OK
ReadX 11494 3987 16384 16384 NT_STATUS_OK
ReadX 11494 3902 16384 16384 NT_STATUS_OK
ReadX 11494 3781 10240 10240 NT_STATUS_OK
ReadX 11494 3821 16384 16384 NT_STATUS_OK
ReadX 11494 3891 935 935 NT_STATUS_OK
ReadX 11494 4060 10240 10240 NT_STATUS_OK
ReadX 11494 4059 184 184 NT_STATUS_OK
ReadX 11494 256 184 184 NT_STATUS_OK
ReadX 11494 256 1026 1026 NT_STATUS_OK
ReadX 11494 3901 326 326 NT_STATUS_OK
ReadX 11494 3899 652 652 NT_STATUS_OK
ReadX 11494 256 2 2 NT_STATUS_OK
ReadX 11494 258 4948 4948 NT_STATUS_OK
Close 11494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11509 NT_STATUS_OK
Close 11509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11512 NT_STATUS_OK
WriteX 11512 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11512 258 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 65536 65536 NT_STATUS_OK
WriteX 11512 131072 65536 65536 NT_STATUS_OK
WriteX 11512 196608 65536 65536 NT_STATUS_OK
WriteX 11512 262144 65536 65536 NT_STATUS_OK
WriteX 11512 327680 65536 65536 NT_STATUS_OK
WriteX 11512 393216 65536 65536 NT_STATUS_OK
WriteX 11512 458752 65536 65536 NT_STATUS_OK
WriteX 11512 524288 65536 65536 NT_STATUS_OK
WriteX 11512 589824 35257 35257 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11514 NT_STATUS_OK
Close 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11517 NT_STATUS_OK
WriteX 11517 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 258 NT_STATUS_OK
WriteX 11517 0 65536 65536 NT_STATUS_OK
WriteX 11517 65536 65536 65536 NT_STATUS_OK
WriteX 11517 131072 65536 65536 NT_STATUS_OK
WriteX 11517 196608 65536 65536 NT_STATUS_OK
WriteX 11517 262144 65536 65536 NT_STATUS_OK
WriteX 11517 327680 65536 65536 NT_STATUS_OK
WriteX 11517 393216 65536 65536 NT_STATUS_OK
WriteX 11517 458752 65536 65536 NT_STATUS_OK
WriteX 11517 524288 65536 65536 NT_STATUS_OK
WriteX 11517 589824 57598 57598 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11519 NT_STATUS_OK
WriteX 11519 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11519 258 NT_STATUS_OK
WriteX 11519 0 12543 12543 NT_STATUS_OK
Flush 11519 NT_STATUS_OK
Close 11519 NT_STATUS_OK
Close 11503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11525 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
ReadX 11525 1938 24 24 NT_STATUS_OK
ReadX 11525 1920 276 276 NT_STATUS_OK
ReadX 11525 1918 14 14 NT_STATUS_OK
ReadX 11525 1918 7 7 NT_STATUS_OK
ReadX 11525 1919 12 12 NT_STATUS_OK
ReadX 11525 1919 8 8 NT_STATUS_OK
ReadX 11525 1917 15 15 NT_STATUS_OK
ReadX 11525 0 16 16 NT_STATUS_OK
ReadX 11525 16 2048 2048 NT_STATUS_OK
ReadX 11525 2064 2048 2048 NT_STATUS_OK
ReadX 11525 257 2048 2048 NT_STATUS_OK
ReadX 11525 385 2048 2048 NT_STATUS_OK
ReadX 11525 513 2048 2048 NT_STATUS_OK
ReadX 11525 641 2048 2048 NT_STATUS_OK
ReadX 11525 769 2048 2048 NT_STATUS_OK
ReadX 11525 897 2048 2048 NT_STATUS_OK
ReadX 11525 1025 2048 2048 NT_STATUS_OK
ReadX 11525 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11530 NT_STATUS_OK
WriteX 11530 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11530 258 NT_STATUS_OK
WriteX 11530 0 11588 11588 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
Close 11530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11531 NT_STATUS_OK
Close 11531 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11535 NT_STATUS_OK
WriteX 11535 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11535 258 NT_STATUS_OK
WriteX 11535 0 11615 11615 NT_STATUS_OK
Flush 11535 NT_STATUS_OK
Close 11535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11537 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11544 NT_STATUS_OK
WriteX 11544 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11544 258 NT_STATUS_OK
WriteX 11544 0 65536 65536 NT_STATUS_OK
WriteX 11544 65536 16050 16050 NT_STATUS_OK
Close 11544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11524 1939 64 64 NT_STATUS_OK
ReadX 11524 128 248 248 NT_STATUS_OK
ReadX 11524 128 568 568 NT_STATUS_OK
ReadX 11524 3872 1536 1536 NT_STATUS_OK
ReadX 11524 3456 2560 2560 NT_STATUS_OK
ReadX 11524 3136 512 512 NT_STATUS_OK
ReadX 11524 2880 4096 4096 NT_STATUS_OK
ReadX 11524 3264 3072 3072 NT_STATUS_OK
ReadX 11524 320 4096 4096 NT_STATUS_OK
ReadX 11524 1024 4096 4096 NT_STATUS_OK
ReadX 11524 3616 4096 4096 NT_STATUS_OK
ReadX 11524 1939 64 64 NT_STATUS_OK
ReadX 11524 128 248 248 NT_STATUS_OK
ReadX 11524 128 608 608 NT_STATUS_OK
ReadX 11524 2858 1024 1024 NT_STATUS_OK
ReadX 11524 2810 4096 4096 NT_STATUS_OK
ReadX 11524 2826 4096 4096 NT_STATUS_OK
ReadX 11524 2580 2048 2048 NT_STATUS_OK
ReadX 11524 2800 2560 2560 NT_STATUS_OK
ReadX 11524 2100 4096 4096 NT_STATUS_OK
ReadX 11524 2084 4096 4096 NT_STATUS_OK
ReadX 11524 868 4096 4096 NT_STATUS_OK
ReadX 11524 2324 4096 4096 NT_STATUS_OK
ReadX 11524 884 4096 4096 NT_STATUS_OK
ReadX 11524 2604 1024 1024 NT_STATUS_OK
ReadX 11524 580 4096 4096 NT_STATUS_OK
ReadX 11524 596 4096 4096 NT_STATUS_OK
ReadX 11524 2752 4096 4096 NT_STATUS_OK
ReadX 11524 2842 1024 1024 NT_STATUS_OK
ReadX 11524 660 4096 4096 NT_STATUS_OK
ReadX 11524 2720 4096 4096 NT_STATUS_OK
ReadX 11524 2736 4096 4096 NT_STATUS_OK
ReadX 11524 628 4096 4096 NT_STATUS_OK
ReadX 11524 2704 4096 4096 NT_STATUS_OK
ReadX 11524 1556 4096 4096 NT_STATUS_OK
ReadX 11524 576 4096 4096 NT_STATUS_OK
ReadX 11524 3168 1536 1536 NT_STATUS_OK
ReadX 11524 832 4096 4096 NT_STATUS_OK
ReadX 11524 1088 4096 4096 NT_STATUS_OK
ReadX 11524 1344 4096 4096 NT_STATUS_OK
ReadX 11524 1600 4096 4096 NT_STATUS_OK
ReadX 11524 1856 4096 4096 NT_STATUS_OK
ReadX 11524 2112 4096 4096 NT_STATUS_OK
ReadX 11524 1892 4096 4096 NT_STATUS_OK
ReadX 11524 820 4096 4096 NT_STATUS_OK
ReadX 11524 788 4096 4096 NT_STATUS_OK
ReadX 11524 1604 4096 4096 NT_STATUS_OK
ReadX 11524 3648 4096 4096 NT_STATUS_OK
ReadX 11524 2608 4096 4096 NT_STATUS_OK
ReadX 11524 548 4096 4096 NT_STATUS_OK
ReadX 11524 740 4096 4096 NT_STATUS_OK
ReadX 11524 1344 4096 4096 NT_STATUS_OK
ReadX 11524 3392 4096 4096 NT_STATUS_OK
ReadX 11524 3904 4096 4096 NT_STATUS_OK
ReadX 11524 644 4096 4096 NT_STATUS_OK
ReadX 11524 676 4096 4096 NT_STATUS_OK
ReadX 11524 2688 4096 4096 NT_STATUS_OK
ReadX 11524 320 4096 4096 NT_STATUS_OK
ReadX 11524 900 4096 4096 NT_STATUS_OK
ReadX 11524 1908 4096 4096 NT_STATUS_OK
ReadX 11524 852 4096 4096 NT_STATUS_OK
ReadX 11524 724 4096 4096 NT_STATUS_OK
ReadX 11524 2292 4096 4096 NT_STATUS_OK
ReadX 11524 612 4096 4096 NT_STATUS_OK
ReadX 11524 388 4096 4096 NT_STATUS_OK
ReadX 11524 2368 4096 4096 NT_STATUS_OK
ReadX 11524 2624 4096 4096 NT_STATUS_OK
ReadX 11524 500 4096 4096 NT_STATUS_OK
ReadX 11524 356 4096 4096 NT_STATUS_OK
ReadX 11524 1024 4096 4096 NT_STATUS_OK
ReadX 11524 576 4096 4096 NT_STATUS_OK
ReadX 11524 340 4096 4096 NT_STATUS_OK
ReadX 11524 420 4096 4096 NT_STATUS_OK
ReadX 11524 1600 4096 4096 NT_STATUS_OK
ReadX 11524 404 4096 4096 NT_STATUS_OK
ReadX 11524 1428 4096 4096 NT_STATUS_OK
ReadX 11524 2656 4096 4096 NT_STATUS_OK
ReadX 11524 2624 4096 4096 NT_STATUS_OK
ReadX 11524 452 4096 4096 NT_STATUS_OK
ReadX 11524 692 4096 4096 NT_STATUS_OK
ReadX 11524 564 4096 4096 NT_STATUS_OK
ReadX 11524 372 4096 4096 NT_STATUS_OK
ReadX 11524 468 4096 4096 NT_STATUS_OK
ReadX 11524 484 4096 4096 NT_STATUS_OK
ReadX 11524 1088 4096 4096 NT_STATUS_OK
ReadX 11524 1924 4096 4096 NT_STATUS_OK
ReadX 11524 2768 4096 4096 NT_STATUS_OK
ReadX 11524 832 4096 4096 NT_STATUS_OK
ReadX 11524 836 4096 4096 NT_STATUS_OK
ReadX 11524 1856 4096 4096 NT_STATUS_OK
ReadX 11524 2640 4096 4096 NT_STATUS_OK
ReadX 11524 436 4096 4096 NT_STATUS_OK
ReadX 11524 1828 4096 4096 NT_STATUS_OK
ReadX 11524 804 4096 4096 NT_STATUS_OK
ReadX 11524 1860 4096 4096 NT_STATUS_OK
ReadX 11524 1812 4096 4096 NT_STATUS_OK
ReadX 11524 756 4096 4096 NT_STATUS_OK
ReadX 11524 1636 4096 4096 NT_STATUS_OK
ReadX 11524 772 4096 4096 NT_STATUS_OK
ReadX 11524 2036 4096 4096 NT_STATUS_OK
ReadX 11524 1220 4096 4096 NT_STATUS_OK
ReadX 11524 1652 4096 4096 NT_STATUS_OK
ReadX 11524 2588 4096 4096 NT_STATUS_OK
ReadX 11524 916 4096 4096 NT_STATUS_OK
ReadX 11524 260 4096 4096 NT_STATUS_OK
ReadX 11524 932 4096 4096 NT_STATUS_OK
ReadX 11524 2624 4096 4096 NT_STATUS_OK
ReadX 11524 308 4096 4096 NT_STATUS_OK
ReadX 11524 292 4096 4096 NT_STATUS_OK
ReadX 11524 1140 4096 4096 NT_STATUS_OK
ReadX 11524 276 4096 4096 NT_STATUS_OK
ReadX 11524 2020 4096 4096 NT_STATUS_OK
ReadX 11524 2880 4096 4096 NT_STATUS_OK
ReadX 11524 516 4096 4096 NT_STATUS_OK
ReadX 11524 1844 4096 4096 NT_STATUS_OK
ReadX 11524 1124 4096 4096 NT_STATUS_OK
ReadX 11524 3136 4096 4096 NT_STATUS_OK
ReadX 11524 324 4096 4096 NT_STATUS_OK
ReadX 11524 1156 4096 4096 NT_STATUS_OK
ReadX 11524 1172 4096 4096 NT_STATUS_OK
ReadX 11524 2112 4096 4096 NT_STATUS_OK
ReadX 11524 2368 4096 4096 NT_STATUS_OK
ReadX 11524 964 4096 4096 NT_STATUS_OK
ReadX 11524 980 4096 4096 NT_STATUS_OK
ReadX 11524 1012 4096 4096 NT_STATUS_OK
ReadX 11524 532 4096 4096 NT_STATUS_OK
ReadX 11524 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11524 1620 4096 4096 NT_STATUS_OK
ReadX 11524 1604 4096 4096 NT_STATUS_OK
ReadX 11524 2116 4096 4096 NT_STATUS_OK
ReadX 11524 2132 4096 4096 NT_STATUS_OK
ReadX 11524 2148 4096 4096 NT_STATUS_OK
ReadX 11524 2276 4096 4096 NT_STATUS_OK
ReadX 11524 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11549 NT_STATUS_OK
QUERY_FILE_INFORMATION 11504 1004 NT_STATUS_OK
Close 11504 NT_STATUS_OK
WriteX 11549 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11549 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 1004 NT_STATUS_OK
Close 11506 NT_STATUS_OK
WriteX 11549 0 65536 65536 NT_STATUS_OK
WriteX 11549 65536 64850 64850 NT_STATUS_OK
Close 11549 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11551 NT_STATUS_OK
WriteX 11551 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
ReadX 11524 2068 4096 4096 NT_STATUS_OK
ReadX 11524 1588 4096 4096 NT_STATUS_OK
ReadX 11524 1572 4096 4096 NT_STATUS_OK
WriteX 11551 0 18630 18630 NT_STATUS_OK
Flush 11551 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11524 612 4096 4096 NT_STATUS_OK
ReadX 11524 564 4096 4096 NT_STATUS_OK
ReadX 11524 1876 4096 4096 NT_STATUS_OK
ReadX 11524 628 4096 4096 NT_STATUS_OK
ReadX 11524 740 4096 4096 NT_STATUS_OK
ReadX 11524 724 4096 4096 NT_STATUS_OK
ReadX 11524 644 4096 4096 NT_STATUS_OK
ReadX 11524 2324 4096 4096 NT_STATUS_OK
ReadX 11524 660 4096 4096 NT_STATUS_OK
ReadX 11524 852 4096 4096 NT_STATUS_OK
ReadX 11524 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11524 2368 4096 4096 NT_STATUS_OK
ReadX 11524 1024 4096 4096 NT_STATUS_OK
ReadX 11524 320 4096 4096 NT_STATUS_OK
ReadX 11524 580 4096 4096 NT_STATUS_OK
ReadX 11524 3136 512 512 NT_STATUS_OK
ReadX 11524 2880 4096 4096 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 61440 4096 4096 NT_STATUS_OK
ReadX 11556 126976 4096 4096 NT_STATUS_OK
WriteX 11556 0 65536 65536 NT_STATUS_OK
WriteX 11556 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 61440 4096 4096 NT_STATUS_OK
ReadX 11557 126976 4096 4096 NT_STATUS_OK
ReadX 11557 192512 4096 4096 NT_STATUS_OK
ReadX 11557 258048 4096 4096 NT_STATUS_OK
WriteX 11557 0 65536 65536 NT_STATUS_OK
WriteX 11557 65536 65536 65536 NT_STATUS_OK
WriteX 11557 131072 65536 65536 NT_STATUS_OK
WriteX 11557 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 61440 4096 4096 NT_STATUS_OK
ReadX 11558 126976 4096 4096 NT_STATUS_OK
ReadX 11558 192512 4096 4096 NT_STATUS_OK
ReadX 11558 258048 4096 4096 NT_STATUS_OK
ReadX 11558 323584 4096 4096 NT_STATUS_OK
ReadX 11558 389120 4096 4096 NT_STATUS_OK
ReadX 11558 454656 4096 4096 NT_STATUS_OK
ReadX 11558 520192 4096 4096 NT_STATUS_OK
WriteX 11558 0 65536 65536 NT_STATUS_OK
WriteX 11558 65536 65536 65536 NT_STATUS_OK
WriteX 11558 131072 65536 65536 NT_STATUS_OK
WriteX 11558 196608 65536 65536 NT_STATUS_OK
WriteX 11558 262144 65536 65536 NT_STATUS_OK
WriteX 11558 327680 65536 65536 NT_STATUS_OK
WriteX 11558 393216 65536 65536 NT_STATUS_OK
WriteX 11558 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11560 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11561 NT_STATUS_OK
WriteX 11561 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11561 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11559 0 8192 8192 NT_STATUS_OK
Flush 11559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11559 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11559 0 8192 8192 NT_STATUS_OK
Flush 11559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11559 0 8192 8192 NT_STATUS_OK
Flush 11559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11559 0 8192 8192 NT_STATUS_OK
Flush 11559 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11566 NT_STATUS_OK
WriteX 11566 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11566 258 NT_STATUS_OK
WriteX 11566 0 62591 62591 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 10845 10845 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11576 NT_STATUS_OK
WriteX 11576 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11576 258 NT_STATUS_OK
WriteX 11576 0 30118 30118 NT_STATUS_OK
Close 11576 NT_STATUS_OK
WriteX 11559 0 4096 4096 NT_STATUS_OK
WriteX 11561 0 64 64 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 0 61440 61440 NT_STATUS_OK
ReadX 11578 61440 4096 4096 NT_STATUS_OK
ReadX 11578 65536 61440 61440 NT_STATUS_OK
ReadX 11578 126976 4096 4096 NT_STATUS_OK
ReadX 11578 131072 61440 61440 NT_STATUS_OK
ReadX 11578 192512 4096 4096 NT_STATUS_OK
ReadX 11578 196608 61440 61440 NT_STATUS_OK
ReadX 11578 258048 4096 4096 NT_STATUS_OK
ReadX 11578 262144 61440 61440 NT_STATUS_OK
ReadX 11578 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 61440 61440 NT_STATUS_OK
ReadX 11579 61440 4096 4096 NT_STATUS_OK
ReadX 11579 65536 61440 61440 NT_STATUS_OK
ReadX 11579 126976 4096 4096 NT_STATUS_OK
ReadX 11579 131072 61440 61440 NT_STATUS_OK
ReadX 11579 192512 4096 4096 NT_STATUS_OK
ReadX 11579 196608 61440 61440 NT_STATUS_OK
ReadX 11579 258048 4096 4096 NT_STATUS_OK
ReadX 11579 262144 61440 61440 NT_STATUS_OK
ReadX 11579 323584 4096 4096 NT_STATUS_OK
ReadX 11579 327680 61440 61440 NT_STATUS_OK
ReadX 11579 389120 4096 4096 NT_STATUS_OK
ReadX 11579 393216 61440 61440 NT_STATUS_OK
ReadX 11579 454656 4096 4096 NT_STATUS_OK
ReadX 11579 458752 61440 61440 NT_STATUS_OK
ReadX 11579 520192 4096 4096 NT_STATUS_OK
ReadX 11579 524288 61440 61440 NT_STATUS_OK
ReadX 11579 585728 4096 4096 NT_STATUS_OK
ReadX 11579 589824 61440 61440 NT_STATUS_OK
ReadX 11579 651264 4096 4096 NT_STATUS_OK
ReadX 11579 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 61440 61440 NT_STATUS_OK
ReadX 11580 61440 4096 4096 NT_STATUS_OK
ReadX 11580 65536 61440 61440 NT_STATUS_OK
ReadX 11580 126976 4096 4096 NT_STATUS_OK
ReadX 11580 131072 61440 61440 NT_STATUS_OK
ReadX 11580 192512 4096 4096 NT_STATUS_OK
ReadX 11580 196608 61440 61440 NT_STATUS_OK
ReadX 11580 258048 4096 4096 NT_STATUS_OK
ReadX 11580 262144 61440 61440 NT_STATUS_OK
ReadX 11580 323584 4096 4096 NT_STATUS_OK
ReadX 11580 327680 61440 61440 NT_STATUS_OK
ReadX 11580 389120 4096 4096 NT_STATUS_OK
ReadX 11580 393216 61440 61440 NT_STATUS_OK
ReadX 11580 454656 4096 4096 NT_STATUS_OK
ReadX 11580 458752 61440 61440 NT_STATUS_OK
ReadX 11580 520192 4096 4096 NT_STATUS_OK
ReadX 11580 524288 61440 61440 NT_STATUS_OK
ReadX 11580 585728 4096 4096 NT_STATUS_OK
ReadX 11580 589824 61440 61440 NT_STATUS_OK
ReadX 11580 651264 4096 4096 NT_STATUS_OK
ReadX 11580 655360 61440 61440 NT_STATUS_OK
ReadX 11580 716800 4096 4096 NT_STATUS_OK
ReadX 11580 720896 61440 61440 NT_STATUS_OK
ReadX 11580 782336 4096 4096 NT_STATUS_OK
ReadX 11580 786432 61440 61440 NT_STATUS_OK
ReadX 11580 847872 4096 4096 NT_STATUS_OK
ReadX 11580 851968 61440 61440 NT_STATUS_OK
ReadX 11580 913408 4096 4096 NT_STATUS_OK
ReadX 11580 917504 61440 61440 NT_STATUS_OK
ReadX 11580 978944 4096 4096 NT_STATUS_OK
ReadX 11580 983040 61440 61440 NT_STATUS_OK
ReadX 11580 1044480 4096 4096 NT_STATUS_OK
ReadX 11580 1048576 61440 61440 NT_STATUS_OK
ReadX 11580 1110016 4096 4096 NT_STATUS_OK
ReadX 11580 1114112 61440 61440 NT_STATUS_OK
ReadX 11580 1175552 4096 4096 NT_STATUS_OK
ReadX 11580 1179648 61440 61440 NT_STATUS_OK
ReadX 11580 1241088 4096 4096 NT_STATUS_OK
ReadX 11580 1245184 61440 61440 NT_STATUS_OK
ReadX 11580 1306624 4096 4096 NT_STATUS_OK
ReadX 11580 1310720 61440 61440 NT_STATUS_OK
ReadX 11580 1372160 4096 4096 NT_STATUS_OK
ReadX 11580 1376256 61440 61440 NT_STATUS_OK
ReadX 11580 1437696 4096 4096 NT_STATUS_OK
ReadX 11580 1441792 61440 61440 NT_STATUS_OK
ReadX 11580 1503232 4096 4096 NT_STATUS_OK
ReadX 11580 1507328 61440 61440 NT_STATUS_OK
ReadX 11580 1568768 4096 4096 NT_STATUS_OK
ReadX 11580 1572864 61440 61440 NT_STATUS_OK
ReadX 11580 1634304 4096 4096 NT_STATUS_OK
ReadX 11580 1638400 61440 61440 NT_STATUS_OK
ReadX 11580 1699840 4096 4096 NT_STATUS_OK
ReadX 11580 1703936 61440 61440 NT_STATUS_OK
ReadX 11580 1765376 4096 4096 NT_STATUS_OK
ReadX 11580 1769472 61440 61440 NT_STATUS_OK
ReadX 11580 1830912 4096 4096 NT_STATUS_OK
ReadX 11580 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11578 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Close 11580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11585 NT_STATUS_OK
ReadX 11585 0 4096 4096 NT_STATUS_OK
ReadX 11585 4096 4096 4096 NT_STATUS_OK
ReadX 11585 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11589 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 8192 8192 NT_STATUS_OK
ReadX 11593 8192 8192 8192 NT_STATUS_OK
ReadX 11593 16384 8192 8192 NT_STATUS_OK
ReadX 11593 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11598 NT_STATUS_OK
WriteX 11598 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11598 258 NT_STATUS_OK
WriteX 11598 0 10438 10438 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11602 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11603 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11604 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
ReadX 11607 4096 4096 4096 NT_STATUS_OK
ReadX 11607 8192 4096 4096 NT_STATUS_OK
ReadX 11607 12288 8192 8192 NT_STATUS_OK
ReadX 11607 20480 8192 8192 NT_STATUS_OK
ReadX 11607 28672 8192 8192 NT_STATUS_OK
ReadX 11607 36864 8192 8192 NT_STATUS_OK
ReadX 11607 45056 8192 8192 NT_STATUS_OK
ReadX 11607 53248 8192 8192 NT_STATUS_OK
ReadX 11607 61440 8192 8192 NT_STATUS_OK
ReadX 11607 69632 8192 8192 NT_STATUS_OK
ReadX 11607 77824 8192 8192 NT_STATUS_OK
ReadX 11607 86016 8192 8192 NT_STATUS_OK
ReadX 11607 94208 8192 8192 NT_STATUS_OK
ReadX 11607 102400 8192 8192 NT_STATUS_OK
ReadX 11607 110592 8192 8192 NT_STATUS_OK
ReadX 11607 118784 8192 8192 NT_STATUS_OK
ReadX 11607 126976 8192 8192 NT_STATUS_OK
ReadX 11607 135168 8192 8192 NT_STATUS_OK
ReadX 11607 143360 8192 8192 NT_STATUS_OK
ReadX 11607 151552 8192 8192 NT_STATUS_OK
ReadX 11607 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11612 NT_STATUS_OK
WriteX 11612 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11612 258 NT_STATUS_OK
WriteX 11612 0 28489 28489 NT_STATUS_OK
Close 11612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11613 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11615 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11615 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 0 8192 8192 NT_STATUS_OK
ReadX 11619 8192 8192 8192 NT_STATUS_OK
ReadX 11619 16384 8192 8192 NT_STATUS_OK
ReadX 11619 24576 8192 8192 NT_STATUS_OK
ReadX 11619 32768 16384 16384 NT_STATUS_OK
ReadX 11619 49152 8192 8192 NT_STATUS_OK
ReadX 11619 57344 8192 8192 NT_STATUS_OK
ReadX 11619 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11624 NT_STATUS_OK
WriteX 11624 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 258 NT_STATUS_OK
WriteX 11624 0 29253 29253 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11631 NT_STATUS_OK
WriteX 11631 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11631 258 NT_STATUS_OK
WriteX 11631 0 30183 30183 NT_STATUS_OK
Close 11631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11632 NT_STATUS_OK
Close 11632 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11634 NT_STATUS_OK
WriteX 11634 0 510 510 NT_STATUS_OK
WriteX 11634 510 512 512 NT_STATUS_OK
WriteX 11634 1022 510 510 NT_STATUS_OK
WriteX 11634 1532 510 510 NT_STATUS_OK
WriteX 11634 2042 168 168 NT_STATUS_OK
Close 11634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
WriteX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 61440 4096 4096 NT_STATUS_OK
ReadX 11638 126976 4096 4096 NT_STATUS_OK
WriteX 11638 0 65536 65536 NT_STATUS_OK
WriteX 11638 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 61440 4096 4096 NT_STATUS_OK
ReadX 11639 126976 4096 4096 NT_STATUS_OK
ReadX 11639 192512 4096 4096 NT_STATUS_OK
ReadX 11639 258048 4096 4096 NT_STATUS_OK
WriteX 11639 0 65536 65536 NT_STATUS_OK
WriteX 11639 65536 65536 65536 NT_STATUS_OK
WriteX 11639 131072 65536 65536 NT_STATUS_OK
WriteX 11639 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 61440 4096 4096 NT_STATUS_OK
ReadX 11640 126976 4096 4096 NT_STATUS_OK
ReadX 11640 192512 4096 4096 NT_STATUS_OK
ReadX 11640 258048 4096 4096 NT_STATUS_OK
ReadX 11640 323584 4096 4096 NT_STATUS_OK
ReadX 11640 389120 4096 4096 NT_STATUS_OK
ReadX 11640 454656 4096 4096 NT_STATUS_OK
ReadX 11640 520192 4096 4096 NT_STATUS_OK
WriteX 11640 0 65536 65536 NT_STATUS_OK
WriteX 11640 65536 65536 65536 NT_STATUS_OK
WriteX 11640 131072 65536 65536 NT_STATUS_OK
WriteX 11640 196608 65536 65536 NT_STATUS_OK
WriteX 11640 262144 65536 65536 NT_STATUS_OK
WriteX 11640 327680 65536 65536 NT_STATUS_OK
WriteX 11640 393216 65536 65536 NT_STATUS_OK
WriteX 11640 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11647 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11656 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11659 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11675 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11680 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11690 NT_STATUS_OK
Close 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11700 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11706 NT_STATUS_OK
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11709 NT_STATUS_OK
WriteX 11709 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11709 0 65536 65536 NT_STATUS_OK
WriteX 11709 65536 65536 65536 NT_STATUS_OK
WriteX 11709 131072 65536 65536 NT_STATUS_OK
WriteX 11709 196608 65536 65536 NT_STATUS_OK
WriteX 11709 262144 26634 26634 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11714 NT_STATUS_OK
Close 11714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
ReadX 11717 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11718 NT_STATUS_OK
Close 11718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11722 NT_STATUS_OK
Close 11722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11725 NT_STATUS_OK
Close 11725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11727 NT_STATUS_OK
Close 11727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11736 NT_STATUS_OK
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11740 NT_STATUS_OK
Close 11740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11755 NT_STATUS_OK
Close 11755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11765 NT_STATUS_OK
Close 11765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11774 NT_STATUS_OK
Close 11774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11779 NT_STATUS_OK
Close 11779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11782 NT_STATUS_OK
Close 11782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11784 NT_STATUS_OK
Close 11784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
Close 11796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
Close 11797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11810 NT_STATUS_OK
ReadX 11810 0 4096 4096 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
Close 11811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11841 0 4096 4096 NT_STATUS_OK
Close 11841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11842 NT_STATUS_OK
ReadX 11842 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 4096 4096 NT_STATUS_OK
ReadX 11843 4096 4096 4096 NT_STATUS_OK
ReadX 11843 8192 4096 4096 NT_STATUS_OK
ReadX 11843 12288 4096 4096 NT_STATUS_OK
ReadX 11843 16384 4096 4096 NT_STATUS_OK
ReadX 11843 20480 4096 4096 NT_STATUS_OK
ReadX 11843 24576 4096 4096 NT_STATUS_OK
ReadX 11843 28672 4096 4096 NT_STATUS_OK
ReadX 11843 32768 4096 4096 NT_STATUS_OK
ReadX 11843 36864 4096 4096 NT_STATUS_OK
ReadX 11843 40960 4096 4096 NT_STATUS_OK
ReadX 11843 45056 4096 4096 NT_STATUS_OK
ReadX 11843 49152 4096 4096 NT_STATUS_OK
ReadX 11843 53248 4096 4096 NT_STATUS_OK
ReadX 11843 57344 4096 4096 NT_STATUS_OK
ReadX 11843 61440 4096 4096 NT_STATUS_OK
ReadX 11843 65536 4096 4096 NT_STATUS_OK
ReadX 11843 69632 4096 4096 NT_STATUS_OK
ReadX 11843 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11843 1004 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
Close 11843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11844 NT_STATUS_OK
SET_FILE_INFORMATION 11844 1004 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11849 NT_STATUS_OK
WriteX 11849 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 258 NT_STATUS_OK
WriteX 11849 0 65536 65536 NT_STATUS_OK
WriteX 11849 65536 19979 19979 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 1004 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
Close 11850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11851 NT_STATUS_OK
ReadX 11851 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11852 NT_STATUS_OK
ReadX 11852 0 4096 4096 NT_STATUS_OK
Close 11851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 4096 4096 NT_STATUS_OK
Close 11853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
Close 11854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11856 NT_STATUS_OK
Close 11856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11845 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11861 NT_STATUS_OK
WriteX 11861 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11861 258 NT_STATUS_OK
WriteX 11861 0 65536 65536 NT_STATUS_OK
WriteX 11861 65536 17654 17654 NT_STATUS_OK
Close 11861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Flush 11862 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Flush 11862 NT_STATUS_OK
QUERY_FILE_INFORMATION 11862 1004 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Flush 11862 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Flush 11862 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Flush 11862 NT_STATUS_OK
SET_FILE_INFORMATION 11862 1004 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Flush 11862 NT_STATUS_OK
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11863 NT_STATUS_OK
SET_FILE_INFORMATION 11863 1004 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
ReadX 11867 4096 4096 4096 NT_STATUS_OK
ReadX 11867 8192 4096 4096 NT_STATUS_OK
ReadX 11867 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11867 16384 4096 4096 NT_STATUS_OK
ReadX 11867 20480 4096 4096 NT_STATUS_OK
ReadX 11867 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
Close 11868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
Close 11869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11871 NT_STATUS_OK
Close 11871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11873 NT_STATUS_OK
Close 11873 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11876 NT_STATUS_OK
WriteX 11876 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11876 258 NT_STATUS_OK
WriteX 11876 0 65536 65536 NT_STATUS_OK
WriteX 11876 65536 19490 19490 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11877 NT_STATUS_OK
ReadX 11877 0 4096 4096 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
Flush 11877 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
Flush 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
Flush 11877 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
Flush 11877 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
Flush 11877 NT_STATUS_OK
SET_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
Flush 11877 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11878 NT_STATUS_OK
SET_FILE_INFORMATION 11878 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11879 NT_STATUS_OK
ReadX 11879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11882 0 4096 4096 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
ReadX 11884 4096 4096 4096 NT_STATUS_OK
ReadX 11884 8192 4096 4096 NT_STATUS_OK
ReadX 11884 12288 4096 4096 NT_STATUS_OK
ReadX 11884 16384 4096 4096 NT_STATUS_OK
ReadX 11884 20480 4096 4096 NT_STATUS_OK
ReadX 11884 24576 4096 4096 NT_STATUS_OK
ReadX 11884 28672 4096 4096 NT_STATUS_OK
ReadX 11884 32768 4096 4096 NT_STATUS_OK
ReadX 11884 36864 4096 4096 NT_STATUS_OK
ReadX 11884 40960 4096 4096 NT_STATUS_OK
ReadX 11884 45056 4096 4096 NT_STATUS_OK
ReadX 11884 49152 4096 4096 NT_STATUS_OK
ReadX 11884 53248 4096 4096 NT_STATUS_OK
ReadX 11884 57344 4096 4096 NT_STATUS_OK
ReadX 11884 61440 4096 4096 NT_STATUS_OK
ReadX 11884 65536 4096 4096 NT_STATUS_OK
ReadX 11884 69632 4096 4096 NT_STATUS_OK
ReadX 11884 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11884 1004 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11885 NT_STATUS_OK
SET_FILE_INFORMATION 11885 1004 NT_STATUS_OK
Close 11885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11887 NT_STATUS_OK
Close 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11890 NT_STATUS_OK
WriteX 11890 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11890 258 NT_STATUS_OK
WriteX 11890 0 65536 65536 NT_STATUS_OK
WriteX 11890 65536 8866 8866 NT_STATUS_OK
Close 11890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
WriteX 11891 0 4096 4096 NT_STATUS_OK
Flush 11891 NT_STATUS_OK
SET_FILE_INFORMATION 11891 1004 NT_STATUS_OK
WriteX 11891 0 4096 4096 NT_STATUS_OK
Flush 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
Close 11893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11895 1004 NT_STATUS_OK
WriteX 11895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11898 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11901 NT_STATUS_OK
WriteX 11901 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11901 258 NT_STATUS_OK
WriteX 11901 0 65536 65536 NT_STATUS_OK
WriteX 11901 65536 9298 9298 NT_STATUS_OK
Close 11901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
WriteX 11902 0 4096 4096 NT_STATUS_OK
Flush 11902 NT_STATUS_OK
SET_FILE_INFORMATION 11902 1004 NT_STATUS_OK
WriteX 11902 0 4096 4096 NT_STATUS_OK
Flush 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11903 NT_STATUS_OK
SET_FILE_INFORMATION 11903 1004 NT_STATUS_OK
Close 11903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11908 0 4096 4096 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11909 4096 4096 4096 NT_STATUS_OK
ReadX 11909 8192 4096 4096 NT_STATUS_OK
ReadX 11909 12288 4096 4096 NT_STATUS_OK
ReadX 11909 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11910 NT_STATUS_OK
ReadX 11910 0 4096 4096 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11911 NT_STATUS_OK
ReadX 11911 0 4096 4096 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11912 1004 NT_STATUS_OK
WriteX 11912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11909 NT_STATUS_OK
Close 11912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 11540 11540 NT_STATUS_OK
Close 11918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 0 4096 4096 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Flush 11919 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Flush 11919 NT_STATUS_OK
Close 11919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11920 NT_STATUS_OK
SET_FILE_INFORMATION 11920 1004 NT_STATUS_OK
Close 11920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 61440 4096 4096 NT_STATUS_OK
ReadX 11924 126976 4096 4096 NT_STATUS_OK
WriteX 11924 0 65536 65536 NT_STATUS_OK
WriteX 11924 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 61440 4096 4096 NT_STATUS_OK
ReadX 11925 126976 4096 4096 NT_STATUS_OK
ReadX 11925 192512 4096 4096 NT_STATUS_OK
ReadX 11925 258048 4096 4096 NT_STATUS_OK
WriteX 11925 0 65536 65536 NT_STATUS_OK
WriteX 11925 65536 65536 65536 NT_STATUS_OK
WriteX 11925 131072 65536 65536 NT_STATUS_OK
WriteX 11925 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 61440 4096 4096 NT_STATUS_OK
ReadX 11926 126976 4096 4096 NT_STATUS_OK
ReadX 11926 192512 4096 4096 NT_STATUS_OK
ReadX 11926 258048 4096 4096 NT_STATUS_OK
ReadX 11926 323584 4096 4096 NT_STATUS_OK
ReadX 11926 389120 4096 4096 NT_STATUS_OK
ReadX 11926 454656 4096 4096 NT_STATUS_OK
ReadX 11926 520192 4096 4096 NT_STATUS_OK
WriteX 11926 0 65536 65536 NT_STATUS_OK
WriteX 11926 65536 65536 65536 NT_STATUS_OK
WriteX 11926 131072 65536 65536 NT_STATUS_OK
WriteX 11926 196608 65536 65536 NT_STATUS_OK
WriteX 11926 262144 65536 65536 NT_STATUS_OK
WriteX 11926 327680 65536 65536 NT_STATUS_OK
WriteX 11926 393216 65536 65536 NT_STATUS_OK
WriteX 11926 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
ReadX 11927 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11928 NT_STATUS_OK
WriteX 11928 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11928 258 NT_STATUS_OK
WriteX 11928 0 53 53 NT_STATUS_OK
Close 11928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11927 8192 4096 4096 NT_STATUS_OK
ReadX 11927 12288 4096 4096 NT_STATUS_OK
WriteX 11931 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11931 258 NT_STATUS_OK
ReadX 11927 16384 4096 4096 NT_STATUS_OK
ReadX 11927 20480 4096 4096 NT_STATUS_OK
WriteX 11931 0 15360 15360 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 4096 4096 NT_STATUS_OK
Close 11932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11935 NT_STATUS_OK
ReadX 11935 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11936 NT_STATUS_OK
Close 11936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11935 4096 4096 4096 NT_STATUS_OK
ReadX 11935 8192 4096 4096 NT_STATUS_OK
ReadX 11935 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
ReadX 11938 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
ReadX 11939 4096 4096 4096 NT_STATUS_OK
ReadX 11939 8192 4096 4096 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11940 NT_STATUS_OK
WriteX 11940 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11940 258 NT_STATUS_OK
WriteX 11940 0 15360 15360 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11941 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11941 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11945 NT_STATUS_OK
SET_FILE_INFORMATION 11945 1004 NT_STATUS_OK
Close 11945 NT_STATUS_OK
WriteX 11941 0 4096 4096 NT_STATUS_OK
Close 11941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11946 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
ReadX 11948 4096 4096 4096 NT_STATUS_OK
ReadX 11948 8192 4096 4096 NT_STATUS_OK
ReadX 11948 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11948 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11948 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11950 NT_STATUS_OK
WriteX 11950 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
WriteX 11950 0 53 53 NT_STATUS_OK
Close 11950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11949 4096 4096 4096 NT_STATUS_OK
ReadX 11949 8192 4096 4096 NT_STATUS_OK
ReadX 11949 12288 4096 4096 NT_STATUS_OK
WriteX 11953 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
WriteX 11953 0 12006 12006 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11954 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11954 1004 NT_STATUS_OK
WriteX 11954 0 4096 4096 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11958 NT_STATUS_OK
Close 11958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11957 4096 4096 4096 NT_STATUS_OK
ReadX 11957 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11960 NT_STATUS_OK
WriteX 11960 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11960 258 NT_STATUS_OK
WriteX 11960 0 11991 11991 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11965 NT_STATUS_OK
SET_FILE_INFORMATION 11965 1004 NT_STATUS_OK
Close 11965 NT_STATUS_OK
WriteX 11961 0 4096 4096 NT_STATUS_OK
Close 11961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11966 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11968 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
ReadX 11968 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
Close 11944 NT_STATUS_OK
WriteX 11948 0 19054 19054 NT_STATUS_OK
WriteX 11968 0 12288 12288 NT_STATUS_OK
Close 11964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11973 NT_STATUS_OK
Close 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 61440 61440 NT_STATUS_OK
ReadX 11975 61440 4096 4096 NT_STATUS_OK
ReadX 11975 65536 61440 61440 NT_STATUS_OK
ReadX 11975 126976 4096 4096 NT_STATUS_OK
ReadX 11975 131072 61440 61440 NT_STATUS_OK
ReadX 11975 192512 4096 4096 NT_STATUS_OK
ReadX 11975 196608 61440 61440 NT_STATUS_OK
ReadX 11975 258048 4096 4096 NT_STATUS_OK
ReadX 11975 262144 61440 61440 NT_STATUS_OK
ReadX 11975 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 61440 61440 NT_STATUS_OK
ReadX 11976 61440 4096 4096 NT_STATUS_OK
ReadX 11976 65536 61440 61440 NT_STATUS_OK
ReadX 11976 126976 4096 4096 NT_STATUS_OK
ReadX 11976 131072 61440 61440 NT_STATUS_OK
ReadX 11976 192512 4096 4096 NT_STATUS_OK
ReadX 11976 196608 61440 61440 NT_STATUS_OK
ReadX 11976 258048 4096 4096 NT_STATUS_OK
ReadX 11976 262144 61440 61440 NT_STATUS_OK
ReadX 11976 323584 4096 4096 NT_STATUS_OK
ReadX 11976 327680 61440 61440 NT_STATUS_OK
ReadX 11976 389120 4096 4096 NT_STATUS_OK
ReadX 11976 393216 61440 61440 NT_STATUS_OK
ReadX 11976 454656 4096 4096 NT_STATUS_OK
ReadX 11976 458752 61440 61440 NT_STATUS_OK
ReadX 11976 520192 4096 4096 NT_STATUS_OK
ReadX 11976 524288 61440 61440 NT_STATUS_OK
ReadX 11976 585728 4096 4096 NT_STATUS_OK
ReadX 11976 589824 61440 61440 NT_STATUS_OK
ReadX 11976 651264 4096 4096 NT_STATUS_OK
ReadX 11976 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 61440 61440 NT_STATUS_OK
ReadX 11977 61440 4096 4096 NT_STATUS_OK
ReadX 11977 65536 61440 61440 NT_STATUS_OK
ReadX 11977 126976 4096 4096 NT_STATUS_OK
ReadX 11977 131072 61440 61440 NT_STATUS_OK
ReadX 11977 192512 4096 4096 NT_STATUS_OK
ReadX 11977 196608 61440 61440 NT_STATUS_OK
ReadX 11977 258048 4096 4096 NT_STATUS_OK
ReadX 11977 262144 61440 61440 NT_STATUS_OK
ReadX 11977 323584 4096 4096 NT_STATUS_OK
ReadX 11977 327680 61440 61440 NT_STATUS_OK
ReadX 11977 389120 4096 4096 NT_STATUS_OK
ReadX 11977 393216 61440 61440 NT_STATUS_OK
ReadX 11977 454656 4096 4096 NT_STATUS_OK
ReadX 11977 458752 61440 61440 NT_STATUS_OK
ReadX 11977 520192 4096 4096 NT_STATUS_OK
ReadX 11977 524288 61440 61440 NT_STATUS_OK
ReadX 11977 585728 4096 4096 NT_STATUS_OK
ReadX 11977 589824 61440 61440 NT_STATUS_OK
ReadX 11977 651264 4096 4096 NT_STATUS_OK
ReadX 11977 655360 61440 61440 NT_STATUS_OK
ReadX 11977 716800 4096 4096 NT_STATUS_OK
ReadX 11977 720896 61440 61440 NT_STATUS_OK
ReadX 11977 782336 4096 4096 NT_STATUS_OK
ReadX 11977 786432 61440 61440 NT_STATUS_OK
ReadX 11977 847872 4096 4096 NT_STATUS_OK
ReadX 11977 851968 61440 61440 NT_STATUS_OK
ReadX 11977 913408 4096 4096 NT_STATUS_OK
ReadX 11977 917504 61440 61440 NT_STATUS_OK
ReadX 11977 978944 4096 4096 NT_STATUS_OK
ReadX 11977 983040 61440 61440 NT_STATUS_OK
ReadX 11977 1044480 4096 4096 NT_STATUS_OK
ReadX 11977 1048576 61440 61440 NT_STATUS_OK
ReadX 11977 1110016 4096 4096 NT_STATUS_OK
ReadX 11977 1114112 61440 61440 NT_STATUS_OK
ReadX 11977 1175552 4096 4096 NT_STATUS_OK
ReadX 11977 1179648 61440 61440 NT_STATUS_OK
ReadX 11977 1241088 4096 4096 NT_STATUS_OK
ReadX 11977 1245184 61440 61440 NT_STATUS_OK
ReadX 11977 1306624 4096 4096 NT_STATUS_OK
ReadX 11977 1310720 61440 61440 NT_STATUS_OK
ReadX 11977 1372160 4096 4096 NT_STATUS_OK
ReadX 11977 1376256 61440 61440 NT_STATUS_OK
ReadX 11977 1437696 4096 4096 NT_STATUS_OK
ReadX 11977 1441792 61440 61440 NT_STATUS_OK
ReadX 11977 1503232 4096 4096 NT_STATUS_OK
ReadX 11977 1507328 61440 61440 NT_STATUS_OK
ReadX 11977 1568768 4096 4096 NT_STATUS_OK
ReadX 11977 1572864 61440 61440 NT_STATUS_OK
ReadX 11977 1634304 4096 4096 NT_STATUS_OK
ReadX 11977 1638400 61440 61440 NT_STATUS_OK
ReadX 11977 1699840 4096 4096 NT_STATUS_OK
ReadX 11977 1703936 61440 61440 NT_STATUS_OK
ReadX 11977 1765376 4096 4096 NT_STATUS_OK
ReadX 11977 1769472 61440 61440 NT_STATUS_OK
ReadX 11977 1830912 4096 4096 NT_STATUS_OK
ReadX 11977 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11984 1004 NT_STATUS_OK
WriteX 11984 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11984 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11986 NT_STATUS_OK
WriteX 11986 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 491 491 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11987 NT_STATUS_OK
ReadX 11987 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11984 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11990 NT_STATUS_OK
WriteX 11990 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11990 258 NT_STATUS_OK
WriteX 11990 0 543 543 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Close 11981 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12004 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 1004 NT_STATUS_OK
WriteX 12004 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 258 NT_STATUS_OK
WriteX 12004 0 2048 2048 NT_STATUS_OK
Close 12004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
Flush 12005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12010 NT_STATUS_OK
WriteX 12010 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 258 NT_STATUS_OK
WriteX 12010 0 2048 2048 NT_STATUS_OK
Close 12010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12016 NT_STATUS_OK
WriteX 12016 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 258 NT_STATUS_OK
WriteX 12016 0 2048 2048 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 2048 2048 NT_STATUS_OK
ReadX 11995 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
WriteX 11995 0 8192 8192 NT_STATUS_OK
WriteX 11996 0 4096 4096 NT_STATUS_OK
WriteX 11997 0 4096 4096 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12021 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12024 NT_STATUS_OK
ReadX 12024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12026 NT_STATUS_OK
ReadX 12026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12027 NT_STATUS_OK
ReadX 12027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12028 NT_STATUS_OK
ReadX 12028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12041 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 1004 NT_STATUS_OK
WriteX 12041 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 258 NT_STATUS_OK
WriteX 12041 0 2048 2048 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12048 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12049 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 1004 NT_STATUS_OK
WriteX 12049 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 258 NT_STATUS_OK
WriteX 12049 0 2048 2048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
Flush 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12044 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12052 NT_STATUS_OK
WriteX 12052 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12052 258 NT_STATUS_OK
WriteX 12052 0 4096 4096 NT_STATUS_OK
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12053 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12055 NT_STATUS_OK
WriteX 12055 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12055 258 NT_STATUS_OK
WriteX 12055 0 4096 4096 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12056 0 4096 4096 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12033 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Close 12028 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12026 NT_STATUS_OK
Close 12027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12059 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12061 NT_STATUS_OK
ReadX 12061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12062 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12063 NT_STATUS_OK
WriteX 12063 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12063 258 NT_STATUS_OK
WriteX 12063 0 2048 2048 NT_STATUS_OK
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12067 NT_STATUS_OK
ReadX 12067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12077 NT_STATUS_OK
ReadX 12077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12078 NT_STATUS_OK
QUERY_FILE_INFORMATION 12078 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12061 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Close 12072 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12080 NT_STATUS_OK
QUERY_FILE_INFORMATION 12080 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12083 NT_STATUS_OK
ReadX 12083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12085 NT_STATUS_OK
ReadX 12085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12086 NT_STATUS_OK
ReadX 12086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12100 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1004 NT_STATUS_OK
WriteX 12100 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 258 NT_STATUS_OK
WriteX 12100 0 2048 2048 NT_STATUS_OK
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12101 NT_STATUS_OK
ReadX 12101 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12112 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 1004 NT_STATUS_OK
WriteX 12112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
WriteX 12112 0 2048 2048 NT_STATUS_OK
Close 12112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12120 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1004 NT_STATUS_OK
WriteX 12120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 2048 2048 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12101 0 4096 4096 NT_STATUS_OK
Flush 12101 NT_STATUS_OK
WriteX 12113 0 4096 4096 NT_STATUS_OK
Flush 12113 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Flush 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12101 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12113 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12103 4096 16384 16384 NT_STATUS_OK
ReadX 12083 4096 16384 16384 NT_STATUS_OK
ReadX 12115 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12122 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12123 NT_STATUS_OK
ReadX 12123 0 2048 2048 NT_STATUS_OK
WriteX 12123 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12124 NT_STATUS_OK
QUERY_FILE_INFORMATION 12124 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Close 12083 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12085 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12126 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12128 NT_STATUS_OK
QUERY_FILE_INFORMATION 12128 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12132 NT_STATUS_OK
ReadX 12132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12135 NT_STATUS_OK
ReadX 12135 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12131 4096 16384 16384 NT_STATUS_OK
WriteX 12131 0 4096 4096 NT_STATUS_OK
WriteX 12132 0 4096 4096 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
WriteX 12134 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12136 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12138 NT_STATUS_OK
ReadX 12138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12140 NT_STATUS_OK
ReadX 12140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12142 NT_STATUS_OK
ReadX 12142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12143 NT_STATUS_OK
ReadX 12143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12144 NT_STATUS_OK
ReadX 12144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12145 NT_STATUS_OK
ReadX 12145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12146 NT_STATUS_OK
ReadX 12146 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12147 NT_STATUS_OK
ReadX 12147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12149 NT_STATUS_OK
ReadX 12149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12150 NT_STATUS_OK
ReadX 12150 0 8192 8192 NT_STATUS_OK
ReadX 12137 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12151 0 4096 4096 NT_STATUS_OK
ReadX 12151 4096 4096 4096 NT_STATUS_OK
ReadX 12151 8192 4096 4096 NT_STATUS_OK
WriteX 12137 0 4096 4096 NT_STATUS_OK
WriteX 12138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12152 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
ReadX 12152 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12131 0 4096 4096 NT_STATUS_OK
WriteX 12132 0 4096 4096 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
WriteX 12134 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12157 NT_STATUS_OK
QUERY_FILE_INFORMATION 12157 1004 NT_STATUS_OK
WriteX 12157 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12157 258 NT_STATUS_OK
WriteX 12157 0 2048 2048 NT_STATUS_OK
Close 12157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12158 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12158 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
ReadX 12160 4096 4096 4096 NT_STATUS_OK
WriteX 12160 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12158 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
ReadX 12162 4096 4096 4096 NT_STATUS_OK
WriteX 12162 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12163 NT_STATUS_OK
QUERY_FILE_INFORMATION 12163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12150 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Close 12144 NT_STATUS_OK
Close 12145 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Close 12147 NT_STATUS_OK
Close 12149 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Close 12138 NT_STATUS_OK
Close 12141 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Close 12139 NT_STATUS_OK
Close 12140 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12165 0 4096 4096 NT_STATUS_OK
ReadX 12165 4096 4096 4096 NT_STATUS_OK
ReadX 12165 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12166 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12173 NT_STATUS_OK
ReadX 12173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12174 NT_STATUS_OK
ReadX 12174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
ReadX 12166 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12183 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 1004 NT_STATUS_OK
WriteX 12183 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 258 NT_STATUS_OK
WriteX 12183 0 2048 2048 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12184 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12188 NT_STATUS_OK
Close 12188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12189 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 1004 NT_STATUS_OK
WriteX 12189 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 258 NT_STATUS_OK
WriteX 12189 0 2048 2048 NT_STATUS_OK
Close 12189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12190 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12173 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12191 NT_STATUS_OK
QUERY_FILE_INFORMATION 12191 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Close 12173 NT_STATUS_OK
Close 12174 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Close 12176 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12193 NT_STATUS_OK
QUERY_FILE_INFORMATION 12193 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 61440 4096 4096 NT_STATUS_OK
ReadX 12195 126976 4096 4096 NT_STATUS_OK
WriteX 12195 0 65536 65536 NT_STATUS_OK
WriteX 12195 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12196 NT_STATUS_OK
ReadX 12196 61440 4096 4096 NT_STATUS_OK
ReadX 12196 126976 4096 4096 NT_STATUS_OK
ReadX 12196 192512 4096 4096 NT_STATUS_OK
ReadX 12196 258048 4096 4096 NT_STATUS_OK
WriteX 12196 0 65536 65536 NT_STATUS_OK
WriteX 12196 65536 65536 65536 NT_STATUS_OK
WriteX 12196 131072 65536 65536 NT_STATUS_OK
WriteX 12196 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 61440 4096 4096 NT_STATUS_OK
ReadX 12197 126976 4096 4096 NT_STATUS_OK
ReadX 12197 192512 4096 4096 NT_STATUS_OK
ReadX 12197 258048 4096 4096 NT_STATUS_OK
ReadX 12197 323584 4096 4096 NT_STATUS_OK
ReadX 12197 389120 4096 4096 NT_STATUS_OK
ReadX 12197 454656 4096 4096 NT_STATUS_OK
ReadX 12197 520192 4096 4096 NT_STATUS_OK
WriteX 12197 0 65536 65536 NT_STATUS_OK
WriteX 12197 65536 65536 65536 NT_STATUS_OK
WriteX 12197 131072 65536 65536 NT_STATUS_OK
WriteX 12197 196608 65536 65536 NT_STATUS_OK
WriteX 12197 262144 65536 65536 NT_STATUS_OK
WriteX 12197 327680 65536 65536 NT_STATUS_OK
WriteX 12197 393216 65536 65536 NT_STATUS_OK
WriteX 12197 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12198 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12198 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12198 8192 4096 4096 NT_STATUS_OK
ReadX 12198 12288 4096 4096 NT_STATUS_OK
ReadX 12198 16384 4096 4096 NT_STATUS_OK
ReadX 12198 20480 4096 4096 NT_STATUS_OK
ReadX 12198 24576 4096 4096 NT_STATUS_OK
ReadX 12198 28672 4096 4096 NT_STATUS_OK
ReadX 12198 32768 4096 4096 NT_STATUS_OK
ReadX 12198 36864 4096 4096 NT_STATUS_OK
ReadX 12198 40960 4096 4096 NT_STATUS_OK
ReadX 12198 45056 4096 4096 NT_STATUS_OK
ReadX 12198 49152 4096 4096 NT_STATUS_OK
ReadX 12198 53248 4096 4096 NT_STATUS_OK
ReadX 12198 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12198 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12196 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12201 NT_STATUS_OK
WriteX 12201 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12201 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12201 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12201 1004 NT_STATUS_OK
WriteX 12201 0 57088 57088 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
Close 12198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12202 NT_STATUS_OK
SET_FILE_INFORMATION 12202 1004 NT_STATUS_OK
Close 12202 NT_STATUS_OK
SET_FILE_INFORMATION 12201 1004 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12203 NT_STATUS_OK
Close 12203 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12205 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12206 NT_STATUS_OK
WriteX 12206 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12206 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12206 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12206 1004 NT_STATUS_OK
WriteX 12206 0 51456 51456 NT_STATUS_OK
WriteX 12206 0 4096 4096 NT_STATUS_OK
Flush 12206 NT_STATUS_OK
SET_FILE_INFORMATION 12206 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12206 1004 NT_STATUS_OK
WriteX 12206 0 4096 4096 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12210 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12212 NT_STATUS_OK
Close 12212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12215 NT_STATUS_OK
WriteX 12215 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12215 258 NT_STATUS_OK
WriteX 12215 0 53077 53077 NT_STATUS_OK
Close 12215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12216 NT_STATUS_OK
WriteX 12216 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12216 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12216 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12216 1004 NT_STATUS_OK
WriteX 12216 0 65536 65536 NT_STATUS_OK
WriteX 12216 65536 1856 1856 NT_STATUS_OK
WriteX 12216 0 4096 4096 NT_STATUS_OK
Flush 12216 NT_STATUS_OK
SET_FILE_INFORMATION 12216 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12216 1004 NT_STATUS_OK
WriteX 12216 0 4096 4096 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12218 NT_STATUS_OK
Close 12218 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12225 NT_STATUS_OK
WriteX 12225 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12225 258 NT_STATUS_OK
WriteX 12225 0 7983 7983 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12227 NT_STATUS_OK
Close 12227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12230 NT_STATUS_OK
WriteX 12230 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12230 258 NT_STATUS_OK
WriteX 12230 0 65536 65536 NT_STATUS_OK
WriteX 12230 65536 65536 65536 NT_STATUS_OK
WriteX 12230 131072 65536 65536 NT_STATUS_OK
WriteX 12230 196608 65536 65536 NT_STATUS_OK
WriteX 12230 262144 65536 65536 NT_STATUS_OK
WriteX 12230 327680 65536 65536 NT_STATUS_OK
WriteX 12230 393216 65536 65536 NT_STATUS_OK
WriteX 12230 458752 46731 46731 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12231 NT_STATUS_OK
WriteX 12231 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12220 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12231 1004 NT_STATUS_OK
WriteX 12231 0 65536 65536 NT_STATUS_OK
WriteX 12231 65536 22848 22848 NT_STATUS_OK
WriteX 12231 0 4096 4096 NT_STATUS_OK
Flush 12231 NT_STATUS_OK
SET_FILE_INFORMATION 12231 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12231 1004 NT_STATUS_OK
WriteX 12231 0 4096 4096 NT_STATUS_OK
Close 12231 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12235 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12236 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
ReadX 12236 8192 4096 4096 NT_STATUS_OK
ReadX 12236 12288 4096 4096 NT_STATUS_OK
ReadX 12236 16384 4096 4096 NT_STATUS_OK
ReadX 12236 20480 4096 4096 NT_STATUS_OK
ReadX 12236 24576 4096 4096 NT_STATUS_OK
ReadX 12236 28672 4096 4096 NT_STATUS_OK
ReadX 12236 32768 4096 4096 NT_STATUS_OK
ReadX 12236 36864 4096 4096 NT_STATUS_OK
ReadX 12236 40960 4096 4096 NT_STATUS_OK
ReadX 12236 45056 4096 4096 NT_STATUS_OK
ReadX 12236 49152 4096 4096 NT_STATUS_OK
ReadX 12236 53248 4096 4096 NT_STATUS_OK
ReadX 12236 57344 4096 4096 NT_STATUS_OK
ReadX 12236 61440 4096 4096 NT_STATUS_OK
ReadX 12236 65536 4096 4096 NT_STATUS_OK
ReadX 12236 69632 4096 4096 NT_STATUS_OK
ReadX 12236 73728 4096 4096 NT_STATUS_OK
ReadX 12236 77824 4096 4096 NT_STATUS_OK
ReadX 12236 81920 4096 4096 NT_STATUS_OK
ReadX 12236 86016 4096 4096 NT_STATUS_OK
ReadX 12236 90112 4096 4096 NT_STATUS_OK
ReadX 12236 94208 4096 4096 NT_STATUS_OK
ReadX 12236 98304 4096 4096 NT_STATUS_OK
ReadX 12236 102400 4096 4096 NT_STATUS_OK
ReadX 12236 106496 4096 4096 NT_STATUS_OK
ReadX 12236 110592 4096 4096 NT_STATUS_OK
ReadX 12236 114688 4096 4096 NT_STATUS_OK
ReadX 12236 118784 4096 4096 NT_STATUS_OK
ReadX 12236 122880 4096 4096 NT_STATUS_OK
ReadX 12236 126976 4096 4096 NT_STATUS_OK
ReadX 12236 131072 4096 4096 NT_STATUS_OK
ReadX 12236 135168 4096 4096 NT_STATUS_OK
ReadX 12236 139264 4096 4096 NT_STATUS_OK
ReadX 12236 143360 4096 4096 NT_STATUS_OK
ReadX 12236 147456 4096 4096 NT_STATUS_OK
ReadX 12236 151552 4096 4096 NT_STATUS_OK
ReadX 12236 155648 4096 4096 NT_STATUS_OK
ReadX 12236 159744 4096 4096 NT_STATUS_OK
ReadX 12236 163840 4096 4096 NT_STATUS_OK
ReadX 12236 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12236 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12239 NT_STATUS_OK
WriteX 12239 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12239 258 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12240 NT_STATUS_OK
SET_FILE_INFORMATION 12240 1004 NT_STATUS_OK
Close 12240 NT_STATUS_OK
WriteX 12239 0 42388 42388 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
ReadX 12243 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12244 NT_STATUS_OK
WriteX 12244 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 258 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 42652 42652 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Close 12243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12246 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
ReadX 12248 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12250 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12253 NT_STATUS_OK
WriteX 12253 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12253 258 NT_STATUS_OK
WriteX 12253 0 65536 65536 NT_STATUS_OK
WriteX 12253 65536 49 49 NT_STATUS_OK
Close 12253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 61440 61440 NT_STATUS_OK
ReadX 12254 61440 4096 4096 NT_STATUS_OK
ReadX 12254 65536 61440 61440 NT_STATUS_OK
ReadX 12254 126976 4096 4096 NT_STATUS_OK
ReadX 12254 131072 61440 61440 NT_STATUS_OK
ReadX 12254 192512 4096 4096 NT_STATUS_OK
ReadX 12254 196608 61440 61440 NT_STATUS_OK
ReadX 12254 258048 4096 4096 NT_STATUS_OK
ReadX 12254 262144 61440 61440 NT_STATUS_OK
ReadX 12254 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 61440 61440 NT_STATUS_OK
ReadX 12255 61440 4096 4096 NT_STATUS_OK
ReadX 12255 65536 61440 61440 NT_STATUS_OK
ReadX 12255 126976 4096 4096 NT_STATUS_OK
ReadX 12255 131072 61440 61440 NT_STATUS_OK
ReadX 12255 192512 4096 4096 NT_STATUS_OK
ReadX 12255 196608 61440 61440 NT_STATUS_OK
ReadX 12255 258048 4096 4096 NT_STATUS_OK
ReadX 12255 262144 61440 61440 NT_STATUS_OK
ReadX 12255 323584 4096 4096 NT_STATUS_OK
ReadX 12255 327680 61440 61440 NT_STATUS_OK
ReadX 12255 389120 4096 4096 NT_STATUS_OK
ReadX 12255 393216 61440 61440 NT_STATUS_OK
ReadX 12255 454656 4096 4096 NT_STATUS_OK
ReadX 12255 458752 61440 61440 NT_STATUS_OK
ReadX 12255 520192 4096 4096 NT_STATUS_OK
ReadX 12255 524288 61440 61440 NT_STATUS_OK
ReadX 12255 585728 4096 4096 NT_STATUS_OK
ReadX 12255 589824 61440 61440 NT_STATUS_OK
ReadX 12255 651264 4096 4096 NT_STATUS_OK
ReadX 12255 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 61440 61440 NT_STATUS_OK
ReadX 12256 61440 4096 4096 NT_STATUS_OK
ReadX 12256 65536 61440 61440 NT_STATUS_OK
ReadX 12256 126976 4096 4096 NT_STATUS_OK
ReadX 12256 131072 61440 61440 NT_STATUS_OK
ReadX 12256 192512 4096 4096 NT_STATUS_OK
ReadX 12256 196608 61440 61440 NT_STATUS_OK
ReadX 12256 258048 4096 4096 NT_STATUS_OK
ReadX 12256 262144 61440 61440 NT_STATUS_OK
ReadX 12256 323584 4096 4096 NT_STATUS_OK
ReadX 12256 327680 61440 61440 NT_STATUS_OK
ReadX 12256 389120 4096 4096 NT_STATUS_OK
ReadX 12256 393216 61440 61440 NT_STATUS_OK
ReadX 12256 454656 4096 4096 NT_STATUS_OK
ReadX 12256 458752 61440 61440 NT_STATUS_OK
ReadX 12256 520192 4096 4096 NT_STATUS_OK
ReadX 12256 524288 61440 61440 NT_STATUS_OK
ReadX 12256 585728 4096 4096 NT_STATUS_OK
ReadX 12256 589824 61440 61440 NT_STATUS_OK
ReadX 12256 651264 4096 4096 NT_STATUS_OK
ReadX 12256 655360 61440 61440 NT_STATUS_OK
ReadX 12256 716800 4096 4096 NT_STATUS_OK
ReadX 12256 720896 61440 61440 NT_STATUS_OK
ReadX 12256 782336 4096 4096 NT_STATUS_OK
ReadX 12256 786432 61440 61440 NT_STATUS_OK
ReadX 12256 847872 4096 4096 NT_STATUS_OK
ReadX 12256 851968 61440 61440 NT_STATUS_OK
ReadX 12256 913408 4096 4096 NT_STATUS_OK
ReadX 12256 917504 61440 61440 NT_STATUS_OK
ReadX 12256 978944 4096 4096 NT_STATUS_OK
ReadX 12256 983040 61440 61440 NT_STATUS_OK
ReadX 12256 1044480 4096 4096 NT_STATUS_OK
ReadX 12256 1048576 61440 61440 NT_STATUS_OK
ReadX 12256 1110016 4096 4096 NT_STATUS_OK
ReadX 12256 1114112 61440 61440 NT_STATUS_OK
ReadX 12256 1175552 4096 4096 NT_STATUS_OK
ReadX 12256 1179648 61440 61440 NT_STATUS_OK
ReadX 12256 1241088 4096 4096 NT_STATUS_OK
ReadX 12256 1245184 61440 61440 NT_STATUS_OK
ReadX 12256 1306624 4096 4096 NT_STATUS_OK
ReadX 12256 1310720 61440 61440 NT_STATUS_OK
ReadX 12256 1372160 4096 4096 NT_STATUS_OK
ReadX 12256 1376256 61440 61440 NT_STATUS_OK
ReadX 12256 1437696 4096 4096 NT_STATUS_OK
ReadX 12256 1441792 61440 61440 NT_STATUS_OK
ReadX 12256 1503232 4096 4096 NT_STATUS_OK
ReadX 12256 1507328 61440 61440 NT_STATUS_OK
ReadX 12256 1568768 4096 4096 NT_STATUS_OK
ReadX 12256 1572864 61440 61440 NT_STATUS_OK
ReadX 12256 1634304 4096 4096 NT_STATUS_OK
ReadX 12256 1638400 61440 61440 NT_STATUS_OK
ReadX 12256 1699840 4096 4096 NT_STATUS_OK
ReadX 12256 1703936 61440 61440 NT_STATUS_OK
ReadX 12256 1765376 4096 4096 NT_STATUS_OK
ReadX 12256 1769472 61440 61440 NT_STATUS_OK
ReadX 12256 1830912 4096 4096 NT_STATUS_OK
ReadX 12256 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 1005 NT_STATUS_OK
ReadX 12258 2156 24 24 NT_STATUS_OK
ReadX 12258 2139 276 276 NT_STATUS_OK
ReadX 12258 2136 14 14 NT_STATUS_OK
ReadX 12258 2136 7 7 NT_STATUS_OK
ReadX 12258 2138 12 12 NT_STATUS_OK
ReadX 12258 2137 8 8 NT_STATUS_OK
ReadX 12258 2135 15 15 NT_STATUS_OK
ReadX 12258 0 16 16 NT_STATUS_OK
ReadX 12258 16 2048 2048 NT_STATUS_OK
ReadX 12258 2064 2048 2048 NT_STATUS_OK
ReadX 12258 257 2048 2048 NT_STATUS_OK
ReadX 12258 385 2048 2048 NT_STATUS_OK
ReadX 12258 513 2048 2048 NT_STATUS_OK
ReadX 12258 641 2048 2048 NT_STATUS_OK
ReadX 12258 769 2048 2048 NT_STATUS_OK
ReadX 12258 897 2048 2048 NT_STATUS_OK
ReadX 12258 1025 2048 2048 NT_STATUS_OK
ReadX 12258 1153 2048 2048 NT_STATUS_OK
ReadX 12258 1281 2048 2048 NT_STATUS_OK
ReadX 12258 1409 2048 2048 NT_STATUS_OK
ReadX 12258 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12263 NT_STATUS_OK
WriteX 12263 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12263 258 NT_STATUS_OK
WriteX 12263 0 10575 10575 NT_STATUS_OK
Flush 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
Close 12258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12268 NT_STATUS_OK
LockX 12268 2147483538 1 NT_STATUS_OK
UnlockX 12268 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12268 1005 NT_STATUS_OK
ReadX 12268 0 512 512 NT_STATUS_OK
ReadX 12268 512 512 512 NT_STATUS_OK
ReadX 12268 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12268 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12268 1004 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12269 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 1005 NT_STATUS_OK
ReadX 12269 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12270 NT_STATUS_OK
LockX 12270 2147483538 1 NT_STATUS_OK
UnlockX 12270 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12270 1005 NT_STATUS_OK
ReadX 12270 0 512 512 NT_STATUS_OK
ReadX 12270 512 512 512 NT_STATUS_OK
ReadX 12270 1024 512 512 NT_STATUS_OK
ReadX 12270 288 20 20 NT_STATUS_OK
ReadX 12270 308 2084 2084 NT_STATUS_OK
ReadX 12270 388 2084 2084 NT_STATUS_OK
ReadX 12270 388 2084 2084 NT_STATUS_OK
ReadX 12257 2157 1386 1386 NT_STATUS_OK
ReadX 12270 2472 399 399 NT_STATUS_OK
ReadX 12270 3072 1536 1536 NT_STATUS_OK
ReadX 12270 544 149 149 NT_STATUS_OK
ReadX 12270 693 485 485 NT_STATUS_OK
Close 12270 NT_STATUS_OK
ReadX 12257 2157 4096 4096 NT_STATUS_OK
ReadX 12257 6253 4096 4096 NT_STATUS_OK
ReadX 12257 10349 4096 4096 NT_STATUS_OK
ReadX 12257 14445 4096 4096 NT_STATUS_OK
ReadX 12257 18541 4096 4096 NT_STATUS_OK
ReadX 12257 22637 256 256 NT_STATUS_OK
ReadX 12257 22893 4096 4096 NT_STATUS_OK
ReadX 12257 26989 4096 4096 NT_STATUS_OK
ReadX 12257 31085 4096 4096 NT_STATUS_OK
ReadX 12257 35181 4096 4096 NT_STATUS_OK
ReadX 12257 39277 4096 4096 NT_STATUS_OK
ReadX 12257 43373 4096 4096 NT_STATUS_OK
ReadX 12257 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12257 2157 1024 1024 NT_STATUS_OK
ReadX 12257 1667 4688 4688 NT_STATUS_OK
ReadX 12257 6355 3516 3516 NT_STATUS_OK
ReadX 12257 9871 16384 16384 NT_STATUS_OK
ReadX 12257 26255 3771 3771 NT_STATUS_OK
ReadX 12257 30026 2048 2048 NT_STATUS_OK
ReadX 12257 32074 1024 1024 NT_STATUS_OK
ReadX 12257 33098 6652 6652 NT_STATUS_OK
ReadX 12257 39750 16384 16384 NT_STATUS_OK
ReadX 12257 56134 10496 10496 NT_STATUS_OK
ReadX 12257 66630 1784 1784 NT_STATUS_OK
ReadX 12257 68414 90 90 NT_STATUS_OK
ReadX 12257 68504 273 273 NT_STATUS_OK
ReadX 12257 68777 1600 1600 NT_STATUS_OK
ReadX 12257 70377 640 640 NT_STATUS_OK
ReadX 12257 71017 1280 1280 NT_STATUS_OK
ReadX 12257 72297 8464 8464 NT_STATUS_OK
ReadX 12257 80761 158 158 NT_STATUS_OK
ReadX 12257 80919 912 912 NT_STATUS_OK
ReadX 12257 81831 1980 1980 NT_STATUS_OK
ReadX 12257 83811 2256 2256 NT_STATUS_OK
ReadX 12257 86067 400 400 NT_STATUS_OK
ReadX 12257 86467 252 252 NT_STATUS_OK
ReadX 12257 86719 42 42 NT_STATUS_OK
ReadX 12257 86761 725 725 NT_STATUS_OK
ReadX 12257 2009 512 512 NT_STATUS_OK
ReadX 12257 3895 9 9 NT_STATUS_OK
ReadX 12257 3781 46 46 NT_STATUS_OK
ReadX 12257 4059 92 92 NT_STATUS_OK
ReadX 12257 3781 92 92 NT_STATUS_OK
ReadX 12257 3986 184 184 NT_STATUS_OK
ReadX 12257 3987 16384 16384 NT_STATUS_OK
ReadX 12257 3902 16384 16384 NT_STATUS_OK
ReadX 12257 3781 10240 10240 NT_STATUS_OK
ReadX 12257 3821 16384 16384 NT_STATUS_OK
ReadX 12257 3891 935 935 NT_STATUS_OK
ReadX 12257 4060 10240 10240 NT_STATUS_OK
ReadX 12257 4059 184 184 NT_STATUS_OK
ReadX 12257 256 184 184 NT_STATUS_OK
ReadX 12257 256 1026 1026 NT_STATUS_OK
ReadX 12257 3901 326 326 NT_STATUS_OK
ReadX 12257 3899 652 652 NT_STATUS_OK
ReadX 12257 256 2 2 NT_STATUS_OK
ReadX 12257 258 4948 4948 NT_STATUS_OK
Close 12257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12272 NT_STATUS_OK
Close 12272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12275 NT_STATUS_OK
WriteX 12275 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12275 258 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 65536 65536 NT_STATUS_OK
WriteX 12275 131072 65536 65536 NT_STATUS_OK
WriteX 12275 196608 65536 65536 NT_STATUS_OK
WriteX 12275 262144 65536 65536 NT_STATUS_OK
WriteX 12275 327680 65536 65536 NT_STATUS_OK
WriteX 12275 393216 65536 65536 NT_STATUS_OK
WriteX 12275 458752 65536 65536 NT_STATUS_OK
WriteX 12275 524288 65536 65536 NT_STATUS_OK
WriteX 12275 589824 35257 35257 NT_STATUS_OK
Close 12275 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12277 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12280 NT_STATUS_OK
WriteX 12280 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 258 NT_STATUS_OK
WriteX 12280 0 65536 65536 NT_STATUS_OK
WriteX 12280 65536 65536 65536 NT_STATUS_OK
WriteX 12280 131072 65536 65536 NT_STATUS_OK
WriteX 12280 196608 65536 65536 NT_STATUS_OK
WriteX 12280 262144 65536 65536 NT_STATUS_OK
WriteX 12280 327680 65536 65536 NT_STATUS_OK
WriteX 12280 393216 65536 65536 NT_STATUS_OK
WriteX 12280 458752 65536 65536 NT_STATUS_OK
WriteX 12280 524288 65536 65536 NT_STATUS_OK
WriteX 12280 589824 57598 57598 NT_STATUS_OK
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12282 NT_STATUS_OK
WriteX 12282 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12282 258 NT_STATUS_OK
WriteX 12282 0 12543 12543 NT_STATUS_OK
Flush 12282 NT_STATUS_OK
Close 12282 NT_STATUS_OK
Close 12266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12287 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12288 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
ReadX 12288 1938 24 24 NT_STATUS_OK
ReadX 12288 1920 276 276 NT_STATUS_OK
ReadX 12288 1918 14 14 NT_STATUS_OK
ReadX 12288 1918 7 7 NT_STATUS_OK
ReadX 12288 1919 12 12 NT_STATUS_OK
ReadX 12288 1919 8 8 NT_STATUS_OK
ReadX 12288 1917 15 15 NT_STATUS_OK
ReadX 12288 0 16 16 NT_STATUS_OK
ReadX 12288 16 2048 2048 NT_STATUS_OK
ReadX 12288 2064 2048 2048 NT_STATUS_OK
ReadX 12288 257 2048 2048 NT_STATUS_OK
ReadX 12288 385 2048 2048 NT_STATUS_OK
ReadX 12288 513 2048 2048 NT_STATUS_OK
ReadX 12288 641 2048 2048 NT_STATUS_OK
ReadX 12288 769 2048 2048 NT_STATUS_OK
ReadX 12288 897 2048 2048 NT_STATUS_OK
ReadX 12288 1025 2048 2048 NT_STATUS_OK
ReadX 12288 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12293 NT_STATUS_OK
WriteX 12293 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12293 258 NT_STATUS_OK
WriteX 12293 0 11588 11588 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
Close 12293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12294 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 4096 4096 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12298 NT_STATUS_OK
WriteX 12298 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12298 258 NT_STATUS_OK
WriteX 12298 0 11615 11615 NT_STATUS_OK
Flush 12298 NT_STATUS_OK
Close 12298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12300 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12307 NT_STATUS_OK
WriteX 12307 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12307 258 NT_STATUS_OK
WriteX 12307 0 65536 65536 NT_STATUS_OK
WriteX 12307 65536 16050 16050 NT_STATUS_OK
Close 12307 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12287 1939 64 64 NT_STATUS_OK
ReadX 12287 128 248 248 NT_STATUS_OK
ReadX 12287 128 568 568 NT_STATUS_OK
ReadX 12287 3872 1536 1536 NT_STATUS_OK
ReadX 12287 3456 2560 2560 NT_STATUS_OK
ReadX 12287 3136 512 512 NT_STATUS_OK
ReadX 12287 2880 4096 4096 NT_STATUS_OK
ReadX 12287 3264 3072 3072 NT_STATUS_OK
ReadX 12287 320 4096 4096 NT_STATUS_OK
ReadX 12287 1024 4096 4096 NT_STATUS_OK
ReadX 12287 3616 4096 4096 NT_STATUS_OK
ReadX 12287 1939 64 64 NT_STATUS_OK
ReadX 12287 128 248 248 NT_STATUS_OK
ReadX 12287 128 608 608 NT_STATUS_OK
ReadX 12287 2858 1024 1024 NT_STATUS_OK
ReadX 12287 2810 4096 4096 NT_STATUS_OK
ReadX 12287 2826 4096 4096 NT_STATUS_OK
ReadX 12287 2580 2048 2048 NT_STATUS_OK
ReadX 12287 2800 2560 2560 NT_STATUS_OK
ReadX 12287 2100 4096 4096 NT_STATUS_OK
ReadX 12287 2084 4096 4096 NT_STATUS_OK
ReadX 12287 868 4096 4096 NT_STATUS_OK
ReadX 12287 2324 4096 4096 NT_STATUS_OK
ReadX 12287 884 4096 4096 NT_STATUS_OK
ReadX 12287 2604 1024 1024 NT_STATUS_OK
ReadX 12287 580 4096 4096 NT_STATUS_OK
ReadX 12287 596 4096 4096 NT_STATUS_OK
ReadX 12287 2752 4096 4096 NT_STATUS_OK
ReadX 12287 2842 1024 1024 NT_STATUS_OK
ReadX 12287 660 4096 4096 NT_STATUS_OK
ReadX 12287 2720 4096 4096 NT_STATUS_OK
ReadX 12287 2736 4096 4096 NT_STATUS_OK
ReadX 12287 628 4096 4096 NT_STATUS_OK
ReadX 12287 2704 4096 4096 NT_STATUS_OK
ReadX 12287 1556 4096 4096 NT_STATUS_OK
ReadX 12287 576 4096 4096 NT_STATUS_OK
ReadX 12287 3168 1536 1536 NT_STATUS_OK
ReadX 12287 832 4096 4096 NT_STATUS_OK
ReadX 12287 1088 4096 4096 NT_STATUS_OK
ReadX 12287 1344 4096 4096 NT_STATUS_OK
ReadX 12287 1600 4096 4096 NT_STATUS_OK
ReadX 12287 1856 4096 4096 NT_STATUS_OK
ReadX 12287 2112 4096 4096 NT_STATUS_OK
ReadX 12287 1892 4096 4096 NT_STATUS_OK
ReadX 12287 820 4096 4096 NT_STATUS_OK
ReadX 12287 788 4096 4096 NT_STATUS_OK
ReadX 12287 1604 4096 4096 NT_STATUS_OK
ReadX 12287 3648 4096 4096 NT_STATUS_OK
ReadX 12287 2608 4096 4096 NT_STATUS_OK
ReadX 12287 548 4096 4096 NT_STATUS_OK
ReadX 12287 740 4096 4096 NT_STATUS_OK
ReadX 12287 1344 4096 4096 NT_STATUS_OK
ReadX 12287 3392 4096 4096 NT_STATUS_OK
ReadX 12287 3904 4096 4096 NT_STATUS_OK
ReadX 12287 644 4096 4096 NT_STATUS_OK
ReadX 12287 676 4096 4096 NT_STATUS_OK
ReadX 12287 2688 4096 4096 NT_STATUS_OK
ReadX 12287 320 4096 4096 NT_STATUS_OK
ReadX 12287 900 4096 4096 NT_STATUS_OK
ReadX 12287 1908 4096 4096 NT_STATUS_OK
ReadX 12287 852 4096 4096 NT_STATUS_OK
ReadX 12287 724 4096 4096 NT_STATUS_OK
ReadX 12287 2292 4096 4096 NT_STATUS_OK
ReadX 12287 612 4096 4096 NT_STATUS_OK
ReadX 12287 388 4096 4096 NT_STATUS_OK
ReadX 12287 2368 4096 4096 NT_STATUS_OK
ReadX 12287 2624 4096 4096 NT_STATUS_OK
ReadX 12287 500 4096 4096 NT_STATUS_OK
ReadX 12287 356 4096 4096 NT_STATUS_OK
ReadX 12287 1024 4096 4096 NT_STATUS_OK
ReadX 12287 576 4096 4096 NT_STATUS_OK
ReadX 12287 340 4096 4096 NT_STATUS_OK
ReadX 12287 420 4096 4096 NT_STATUS_OK
ReadX 12287 1600 4096 4096 NT_STATUS_OK
ReadX 12287 404 4096 4096 NT_STATUS_OK
ReadX 12287 1428 4096 4096 NT_STATUS_OK
ReadX 12287 2656 4096 4096 NT_STATUS_OK
ReadX 12287 2624 4096 4096 NT_STATUS_OK
ReadX 12287 452 4096 4096 NT_STATUS_OK
ReadX 12287 692 4096 4096 NT_STATUS_OK
ReadX 12287 564 4096 4096 NT_STATUS_OK
ReadX 12287 372 4096 4096 NT_STATUS_OK
ReadX 12287 468 4096 4096 NT_STATUS_OK
ReadX 12287 484 4096 4096 NT_STATUS_OK
ReadX 12287 1088 4096 4096 NT_STATUS_OK
ReadX 12287 1924 4096 4096 NT_STATUS_OK
ReadX 12287 2768 4096 4096 NT_STATUS_OK
ReadX 12287 832 4096 4096 NT_STATUS_OK
ReadX 12287 836 4096 4096 NT_STATUS_OK
ReadX 12287 1856 4096 4096 NT_STATUS_OK
ReadX 12287 2640 4096 4096 NT_STATUS_OK
ReadX 12287 436 4096 4096 NT_STATUS_OK
ReadX 12287 1828 4096 4096 NT_STATUS_OK
ReadX 12287 804 4096 4096 NT_STATUS_OK
ReadX 12287 1860 4096 4096 NT_STATUS_OK
ReadX 12287 1812 4096 4096 NT_STATUS_OK
ReadX 12287 756 4096 4096 NT_STATUS_OK
ReadX 12287 1636 4096 4096 NT_STATUS_OK
ReadX 12287 772 4096 4096 NT_STATUS_OK
ReadX 12287 2036 4096 4096 NT_STATUS_OK
ReadX 12287 1220 4096 4096 NT_STATUS_OK
ReadX 12287 1652 4096 4096 NT_STATUS_OK
ReadX 12287 2588 4096 4096 NT_STATUS_OK
ReadX 12287 916 4096 4096 NT_STATUS_OK
ReadX 12287 260 4096 4096 NT_STATUS_OK
ReadX 12287 932 4096 4096 NT_STATUS_OK
ReadX 12287 2624 4096 4096 NT_STATUS_OK
ReadX 12287 308 4096 4096 NT_STATUS_OK
ReadX 12287 292 4096 4096 NT_STATUS_OK
ReadX 12287 1140 4096 4096 NT_STATUS_OK
ReadX 12287 276 4096 4096 NT_STATUS_OK
ReadX 12287 2020 4096 4096 NT_STATUS_OK
ReadX 12287 2880 4096 4096 NT_STATUS_OK
ReadX 12287 516 4096 4096 NT_STATUS_OK
ReadX 12287 1844 4096 4096 NT_STATUS_OK
ReadX 12287 1124 4096 4096 NT_STATUS_OK
ReadX 12287 3136 4096 4096 NT_STATUS_OK
ReadX 12287 324 4096 4096 NT_STATUS_OK
ReadX 12287 1156 4096 4096 NT_STATUS_OK
ReadX 12287 1172 4096 4096 NT_STATUS_OK
ReadX 12287 2112 4096 4096 NT_STATUS_OK
ReadX 12287 2368 4096 4096 NT_STATUS_OK
ReadX 12287 964 4096 4096 NT_STATUS_OK
ReadX 12287 980 4096 4096 NT_STATUS_OK
ReadX 12287 1012 4096 4096 NT_STATUS_OK
ReadX 12287 532 4096 4096 NT_STATUS_OK
ReadX 12287 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12287 1620 4096 4096 NT_STATUS_OK
ReadX 12287 1604 4096 4096 NT_STATUS_OK
ReadX 12287 2116 4096 4096 NT_STATUS_OK
ReadX 12287 2132 4096 4096 NT_STATUS_OK
ReadX 12287 2148 4096 4096 NT_STATUS_OK
ReadX 12287 2276 4096 4096 NT_STATUS_OK
ReadX 12287 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12312 NT_STATUS_OK
QUERY_FILE_INFORMATION 12267 1004 NT_STATUS_OK
Close 12267 NT_STATUS_OK
WriteX 12312 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12312 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 1004 NT_STATUS_OK
Close 12269 NT_STATUS_OK
WriteX 12312 0 65536 65536 NT_STATUS_OK
WriteX 12312 65536 64850 64850 NT_STATUS_OK
Close 12312 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12314 NT_STATUS_OK
WriteX 12314 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
ReadX 12287 2068 4096 4096 NT_STATUS_OK
ReadX 12287 1588 4096 4096 NT_STATUS_OK
ReadX 12287 1572 4096 4096 NT_STATUS_OK
WriteX 12314 0 18630 18630 NT_STATUS_OK
Flush 12314 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12287 612 4096 4096 NT_STATUS_OK
ReadX 12287 564 4096 4096 NT_STATUS_OK
ReadX 12287 1876 4096 4096 NT_STATUS_OK
ReadX 12287 628 4096 4096 NT_STATUS_OK
ReadX 12287 740 4096 4096 NT_STATUS_OK
ReadX 12287 724 4096 4096 NT_STATUS_OK
ReadX 12287 644 4096 4096 NT_STATUS_OK
ReadX 12287 2324 4096 4096 NT_STATUS_OK
ReadX 12287 660 4096 4096 NT_STATUS_OK
ReadX 12287 852 4096 4096 NT_STATUS_OK
ReadX 12287 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12287 2368 4096 4096 NT_STATUS_OK
ReadX 12287 1024 4096 4096 NT_STATUS_OK
ReadX 12287 320 4096 4096 NT_STATUS_OK
ReadX 12287 580 4096 4096 NT_STATUS_OK
ReadX 12287 3136 512 512 NT_STATUS_OK
ReadX 12287 2880 4096 4096 NT_STATUS_OK
Close 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 61440 4096 4096 NT_STATUS_OK
ReadX 12319 126976 4096 4096 NT_STATUS_OK
WriteX 12319 0 65536 65536 NT_STATUS_OK
WriteX 12319 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 61440 4096 4096 NT_STATUS_OK
ReadX 12320 126976 4096 4096 NT_STATUS_OK
ReadX 12320 192512 4096 4096 NT_STATUS_OK
ReadX 12320 258048 4096 4096 NT_STATUS_OK
WriteX 12320 0 65536 65536 NT_STATUS_OK
WriteX 12320 65536 65536 65536 NT_STATUS_OK
WriteX 12320 131072 65536 65536 NT_STATUS_OK
WriteX 12320 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 61440 4096 4096 NT_STATUS_OK
ReadX 12321 126976 4096 4096 NT_STATUS_OK
ReadX 12321 192512 4096 4096 NT_STATUS_OK
ReadX 12321 258048 4096 4096 NT_STATUS_OK
ReadX 12321 323584 4096 4096 NT_STATUS_OK
ReadX 12321 389120 4096 4096 NT_STATUS_OK
ReadX 12321 454656 4096 4096 NT_STATUS_OK
ReadX 12321 520192 4096 4096 NT_STATUS_OK
WriteX 12321 0 65536 65536 NT_STATUS_OK
WriteX 12321 65536 65536 65536 NT_STATUS_OK
WriteX 12321 131072 65536 65536 NT_STATUS_OK
WriteX 12321 196608 65536 65536 NT_STATUS_OK
WriteX 12321 262144 65536 65536 NT_STATUS_OK
WriteX 12321 327680 65536 65536 NT_STATUS_OK
WriteX 12321 393216 65536 65536 NT_STATUS_OK
WriteX 12321 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12323 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12324 NT_STATUS_OK
WriteX 12324 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12324 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12322 0 8192 8192 NT_STATUS_OK
Flush 12322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12322 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12322 0 8192 8192 NT_STATUS_OK
Flush 12322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12322 0 8192 8192 NT_STATUS_OK
Flush 12322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12322 0 8192 8192 NT_STATUS_OK
Flush 12322 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12329 NT_STATUS_OK
WriteX 12329 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12329 258 NT_STATUS_OK
WriteX 12329 0 62591 62591 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 10845 10845 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12339 NT_STATUS_OK
WriteX 12339 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12339 258 NT_STATUS_OK
WriteX 12339 0 30118 30118 NT_STATUS_OK
Close 12339 NT_STATUS_OK
WriteX 12322 0 4096 4096 NT_STATUS_OK
WriteX 12324 0 64 64 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 0 61440 61440 NT_STATUS_OK
ReadX 12341 61440 4096 4096 NT_STATUS_OK
ReadX 12341 65536 61440 61440 NT_STATUS_OK
ReadX 12341 126976 4096 4096 NT_STATUS_OK
ReadX 12341 131072 61440 61440 NT_STATUS_OK
ReadX 12341 192512 4096 4096 NT_STATUS_OK
ReadX 12341 196608 61440 61440 NT_STATUS_OK
ReadX 12341 258048 4096 4096 NT_STATUS_OK
ReadX 12341 262144 61440 61440 NT_STATUS_OK
ReadX 12341 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 61440 61440 NT_STATUS_OK
ReadX 12342 61440 4096 4096 NT_STATUS_OK
ReadX 12342 65536 61440 61440 NT_STATUS_OK
ReadX 12342 126976 4096 4096 NT_STATUS_OK
ReadX 12342 131072 61440 61440 NT_STATUS_OK
ReadX 12342 192512 4096 4096 NT_STATUS_OK
ReadX 12342 196608 61440 61440 NT_STATUS_OK
ReadX 12342 258048 4096 4096 NT_STATUS_OK
ReadX 12342 262144 61440 61440 NT_STATUS_OK
ReadX 12342 323584 4096 4096 NT_STATUS_OK
ReadX 12342 327680 61440 61440 NT_STATUS_OK
ReadX 12342 389120 4096 4096 NT_STATUS_OK
ReadX 12342 393216 61440 61440 NT_STATUS_OK
ReadX 12342 454656 4096 4096 NT_STATUS_OK
ReadX 12342 458752 61440 61440 NT_STATUS_OK
ReadX 12342 520192 4096 4096 NT_STATUS_OK
ReadX 12342 524288 61440 61440 NT_STATUS_OK
ReadX 12342 585728 4096 4096 NT_STATUS_OK
ReadX 12342 589824 61440 61440 NT_STATUS_OK
ReadX 12342 651264 4096 4096 NT_STATUS_OK
ReadX 12342 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 61440 61440 NT_STATUS_OK
ReadX 12343 61440 4096 4096 NT_STATUS_OK
ReadX 12343 65536 61440 61440 NT_STATUS_OK
ReadX 12343 126976 4096 4096 NT_STATUS_OK
ReadX 12343 131072 61440 61440 NT_STATUS_OK
ReadX 12343 192512 4096 4096 NT_STATUS_OK
ReadX 12343 196608 61440 61440 NT_STATUS_OK
ReadX 12343 258048 4096 4096 NT_STATUS_OK
ReadX 12343 262144 61440 61440 NT_STATUS_OK
ReadX 12343 323584 4096 4096 NT_STATUS_OK
ReadX 12343 327680 61440 61440 NT_STATUS_OK
ReadX 12343 389120 4096 4096 NT_STATUS_OK
ReadX 12343 393216 61440 61440 NT_STATUS_OK
ReadX 12343 454656 4096 4096 NT_STATUS_OK
ReadX 12343 458752 61440 61440 NT_STATUS_OK
ReadX 12343 520192 4096 4096 NT_STATUS_OK
ReadX 12343 524288 61440 61440 NT_STATUS_OK
ReadX 12343 585728 4096 4096 NT_STATUS_OK
ReadX 12343 589824 61440 61440 NT_STATUS_OK
ReadX 12343 651264 4096 4096 NT_STATUS_OK
ReadX 12343 655360 61440 61440 NT_STATUS_OK
ReadX 12343 716800 4096 4096 NT_STATUS_OK
ReadX 12343 720896 61440 61440 NT_STATUS_OK
ReadX 12343 782336 4096 4096 NT_STATUS_OK
ReadX 12343 786432 61440 61440 NT_STATUS_OK
ReadX 12343 847872 4096 4096 NT_STATUS_OK
ReadX 12343 851968 61440 61440 NT_STATUS_OK
ReadX 12343 913408 4096 4096 NT_STATUS_OK
ReadX 12343 917504 61440 61440 NT_STATUS_OK
ReadX 12343 978944 4096 4096 NT_STATUS_OK
ReadX 12343 983040 61440 61440 NT_STATUS_OK
ReadX 12343 1044480 4096 4096 NT_STATUS_OK
ReadX 12343 1048576 61440 61440 NT_STATUS_OK
ReadX 12343 1110016 4096 4096 NT_STATUS_OK
ReadX 12343 1114112 61440 61440 NT_STATUS_OK
ReadX 12343 1175552 4096 4096 NT_STATUS_OK
ReadX 12343 1179648 61440 61440 NT_STATUS_OK
ReadX 12343 1241088 4096 4096 NT_STATUS_OK
ReadX 12343 1245184 61440 61440 NT_STATUS_OK
ReadX 12343 1306624 4096 4096 NT_STATUS_OK
ReadX 12343 1310720 61440 61440 NT_STATUS_OK
ReadX 12343 1372160 4096 4096 NT_STATUS_OK
ReadX 12343 1376256 61440 61440 NT_STATUS_OK
ReadX 12343 1437696 4096 4096 NT_STATUS_OK
ReadX 12343 1441792 61440 61440 NT_STATUS_OK
ReadX 12343 1503232 4096 4096 NT_STATUS_OK
ReadX 12343 1507328 61440 61440 NT_STATUS_OK
ReadX 12343 1568768 4096 4096 NT_STATUS_OK
ReadX 12343 1572864 61440 61440 NT_STATUS_OK
ReadX 12343 1634304 4096 4096 NT_STATUS_OK
ReadX 12343 1638400 61440 61440 NT_STATUS_OK
ReadX 12343 1699840 4096 4096 NT_STATUS_OK
ReadX 12343 1703936 61440 61440 NT_STATUS_OK
ReadX 12343 1765376 4096 4096 NT_STATUS_OK
ReadX 12343 1769472 61440 61440 NT_STATUS_OK
ReadX 12343 1830912 4096 4096 NT_STATUS_OK
ReadX 12343 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12341 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Close 12343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
ReadX 12348 4096 4096 4096 NT_STATUS_OK
ReadX 12348 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12352 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 8192 8192 NT_STATUS_OK
ReadX 12356 8192 8192 8192 NT_STATUS_OK
ReadX 12356 16384 8192 8192 NT_STATUS_OK
ReadX 12356 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12361 NT_STATUS_OK
WriteX 12361 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12361 258 NT_STATUS_OK
WriteX 12361 0 10438 10438 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12365 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12366 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12367 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
ReadX 12370 4096 4096 4096 NT_STATUS_OK
ReadX 12370 8192 4096 4096 NT_STATUS_OK
ReadX 12370 12288 8192 8192 NT_STATUS_OK
ReadX 12370 20480 8192 8192 NT_STATUS_OK
ReadX 12370 28672 8192 8192 NT_STATUS_OK
ReadX 12370 36864 8192 8192 NT_STATUS_OK
ReadX 12370 45056 8192 8192 NT_STATUS_OK
ReadX 12370 53248 8192 8192 NT_STATUS_OK
ReadX 12370 61440 8192 8192 NT_STATUS_OK
ReadX 12370 69632 8192 8192 NT_STATUS_OK
ReadX 12370 77824 8192 8192 NT_STATUS_OK
ReadX 12370 86016 8192 8192 NT_STATUS_OK
ReadX 12370 94208 8192 8192 NT_STATUS_OK
ReadX 12370 102400 8192 8192 NT_STATUS_OK
ReadX 12370 110592 8192 8192 NT_STATUS_OK
ReadX 12370 118784 8192 8192 NT_STATUS_OK
ReadX 12370 126976 8192 8192 NT_STATUS_OK
ReadX 12370 135168 8192 8192 NT_STATUS_OK
ReadX 12370 143360 8192 8192 NT_STATUS_OK
ReadX 12370 151552 8192 8192 NT_STATUS_OK
ReadX 12370 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12375 NT_STATUS_OK
WriteX 12375 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12375 258 NT_STATUS_OK
WriteX 12375 0 28489 28489 NT_STATUS_OK
Close 12375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12378 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 0 8192 8192 NT_STATUS_OK
ReadX 12382 8192 8192 8192 NT_STATUS_OK
ReadX 12382 16384 8192 8192 NT_STATUS_OK
ReadX 12382 24576 8192 8192 NT_STATUS_OK
ReadX 12382 32768 16384 16384 NT_STATUS_OK
ReadX 12382 49152 8192 8192 NT_STATUS_OK
ReadX 12382 57344 8192 8192 NT_STATUS_OK
ReadX 12382 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12387 NT_STATUS_OK
WriteX 12387 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 258 NT_STATUS_OK
WriteX 12387 0 29253 29253 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12394 NT_STATUS_OK
WriteX 12394 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12394 258 NT_STATUS_OK
WriteX 12394 0 30183 30183 NT_STATUS_OK
Close 12394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12395 NT_STATUS_OK
Close 12395 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12397 NT_STATUS_OK
WriteX 12397 0 510 510 NT_STATUS_OK
WriteX 12397 510 512 512 NT_STATUS_OK
WriteX 12397 1022 510 510 NT_STATUS_OK
WriteX 12397 1532 510 510 NT_STATUS_OK
WriteX 12397 2042 168 168 NT_STATUS_OK
Close 12397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
WriteX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 61440 4096 4096 NT_STATUS_OK
ReadX 12401 126976 4096 4096 NT_STATUS_OK
WriteX 12401 0 65536 65536 NT_STATUS_OK
WriteX 12401 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 61440 4096 4096 NT_STATUS_OK
ReadX 12402 126976 4096 4096 NT_STATUS_OK
ReadX 12402 192512 4096 4096 NT_STATUS_OK
ReadX 12402 258048 4096 4096 NT_STATUS_OK
WriteX 12402 0 65536 65536 NT_STATUS_OK
WriteX 12402 65536 65536 65536 NT_STATUS_OK
WriteX 12402 131072 65536 65536 NT_STATUS_OK
WriteX 12402 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 61440 4096 4096 NT_STATUS_OK
ReadX 12403 126976 4096 4096 NT_STATUS_OK
ReadX 12403 192512 4096 4096 NT_STATUS_OK
ReadX 12403 258048 4096 4096 NT_STATUS_OK
ReadX 12403 323584 4096 4096 NT_STATUS_OK
ReadX 12403 389120 4096 4096 NT_STATUS_OK
ReadX 12403 454656 4096 4096 NT_STATUS_OK
ReadX 12403 520192 4096 4096 NT_STATUS_OK
WriteX 12403 0 65536 65536 NT_STATUS_OK
WriteX 12403 65536 65536 65536 NT_STATUS_OK
WriteX 12403 131072 65536 65536 NT_STATUS_OK
WriteX 12403 196608 65536 65536 NT_STATUS_OK
WriteX 12403 262144 65536 65536 NT_STATUS_OK
WriteX 12403 327680 65536 65536 NT_STATUS_OK
WriteX 12403 393216 65536 65536 NT_STATUS_OK
WriteX 12403 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12410 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12419 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12422 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12438 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12443 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12453 NT_STATUS_OK
Close 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12463 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12469 NT_STATUS_OK
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12472 NT_STATUS_OK
WriteX 12472 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12472 0 65536 65536 NT_STATUS_OK
WriteX 12472 65536 65536 65536 NT_STATUS_OK
WriteX 12472 131072 65536 65536 NT_STATUS_OK
WriteX 12472 196608 65536 65536 NT_STATUS_OK
WriteX 12472 262144 26634 26634 NT_STATUS_OK
Close 12472 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12477 NT_STATUS_OK
Close 12477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
ReadX 12480 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12481 NT_STATUS_OK
Close 12481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12485 NT_STATUS_OK
Close 12485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12488 NT_STATUS_OK
Close 12488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12490 NT_STATUS_OK
Close 12490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12499 NT_STATUS_OK
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12503 NT_STATUS_OK
Close 12503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12518 NT_STATUS_OK
Close 12518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12528 NT_STATUS_OK
Close 12528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12537 NT_STATUS_OK
Close 12537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12542 NT_STATUS_OK
Close 12542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12545 NT_STATUS_OK
Close 12545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12547 NT_STATUS_OK
Close 12547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
Close 12559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
Close 12560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12571 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 4096 4096 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
Close 12574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12604 0 4096 4096 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 4096 4096 NT_STATUS_OK
ReadX 12606 4096 4096 4096 NT_STATUS_OK
ReadX 12606 8192 4096 4096 NT_STATUS_OK
ReadX 12606 12288 4096 4096 NT_STATUS_OK
ReadX 12606 16384 4096 4096 NT_STATUS_OK
ReadX 12606 20480 4096 4096 NT_STATUS_OK
ReadX 12606 24576 4096 4096 NT_STATUS_OK
ReadX 12606 28672 4096 4096 NT_STATUS_OK
ReadX 12606 32768 4096 4096 NT_STATUS_OK
ReadX 12606 36864 4096 4096 NT_STATUS_OK
ReadX 12606 40960 4096 4096 NT_STATUS_OK
ReadX 12606 45056 4096 4096 NT_STATUS_OK
ReadX 12606 49152 4096 4096 NT_STATUS_OK
ReadX 12606 53248 4096 4096 NT_STATUS_OK
ReadX 12606 57344 4096 4096 NT_STATUS_OK
ReadX 12606 61440 4096 4096 NT_STATUS_OK
ReadX 12606 65536 4096 4096 NT_STATUS_OK
ReadX 12606 69632 4096 4096 NT_STATUS_OK
ReadX 12606 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12606 1004 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
Close 12606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12607 NT_STATUS_OK
SET_FILE_INFORMATION 12607 1004 NT_STATUS_OK
Close 12607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12612 NT_STATUS_OK
WriteX 12612 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 258 NT_STATUS_OK
WriteX 12612 0 65536 65536 NT_STATUS_OK
WriteX 12612 65536 19979 19979 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 4096 4096 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 1004 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
Close 12613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12614 NT_STATUS_OK
ReadX 12614 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12615 NT_STATUS_OK
ReadX 12615 0 4096 4096 NT_STATUS_OK
Close 12614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 4096 4096 NT_STATUS_OK
Close 12616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
Close 12617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12619 NT_STATUS_OK
Close 12619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12608 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12624 NT_STATUS_OK
WriteX 12624 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12624 258 NT_STATUS_OK
WriteX 12624 0 65536 65536 NT_STATUS_OK
WriteX 12624 65536 17654 17654 NT_STATUS_OK
Close 12624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Flush 12625 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Flush 12625 NT_STATUS_OK
QUERY_FILE_INFORMATION 12625 1004 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Flush 12625 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Flush 12625 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Flush 12625 NT_STATUS_OK
SET_FILE_INFORMATION 12625 1004 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Flush 12625 NT_STATUS_OK
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12626 NT_STATUS_OK
SET_FILE_INFORMATION 12626 1004 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
ReadX 12630 4096 4096 4096 NT_STATUS_OK
ReadX 12630 8192 4096 4096 NT_STATUS_OK
ReadX 12630 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12630 16384 4096 4096 NT_STATUS_OK
ReadX 12630 20480 4096 4096 NT_STATUS_OK
ReadX 12630 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
Close 12631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
Close 12632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12634 NT_STATUS_OK
Close 12634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12636 NT_STATUS_OK
Close 12636 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12639 NT_STATUS_OK
WriteX 12639 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12639 258 NT_STATUS_OK
WriteX 12639 0 65536 65536 NT_STATUS_OK
WriteX 12639 65536 19490 19490 NT_STATUS_OK
Close 12639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12640 NT_STATUS_OK
ReadX 12640 0 4096 4096 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Flush 12640 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Flush 12640 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1004 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Flush 12640 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Flush 12640 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Flush 12640 NT_STATUS_OK
SET_FILE_INFORMATION 12640 1004 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Flush 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12641 NT_STATUS_OK
SET_FILE_INFORMATION 12641 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12645 0 4096 4096 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
ReadX 12647 4096 4096 4096 NT_STATUS_OK
ReadX 12647 8192 4096 4096 NT_STATUS_OK
ReadX 12647 12288 4096 4096 NT_STATUS_OK
ReadX 12647 16384 4096 4096 NT_STATUS_OK
ReadX 12647 20480 4096 4096 NT_STATUS_OK
ReadX 12647 24576 4096 4096 NT_STATUS_OK
ReadX 12647 28672 4096 4096 NT_STATUS_OK
ReadX 12647 32768 4096 4096 NT_STATUS_OK
ReadX 12647 36864 4096 4096 NT_STATUS_OK
ReadX 12647 40960 4096 4096 NT_STATUS_OK
ReadX 12647 45056 4096 4096 NT_STATUS_OK
ReadX 12647 49152 4096 4096 NT_STATUS_OK
ReadX 12647 53248 4096 4096 NT_STATUS_OK
ReadX 12647 57344 4096 4096 NT_STATUS_OK
ReadX 12647 61440 4096 4096 NT_STATUS_OK
ReadX 12647 65536 4096 4096 NT_STATUS_OK
ReadX 12647 69632 4096 4096 NT_STATUS_OK
ReadX 12647 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12647 1004 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12648 NT_STATUS_OK
SET_FILE_INFORMATION 12648 1004 NT_STATUS_OK
Close 12648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12650 NT_STATUS_OK
Close 12650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12653 NT_STATUS_OK
WriteX 12653 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 258 NT_STATUS_OK
WriteX 12653 0 65536 65536 NT_STATUS_OK
WriteX 12653 65536 8866 8866 NT_STATUS_OK
Close 12653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
WriteX 12654 0 4096 4096 NT_STATUS_OK
Flush 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12654 1004 NT_STATUS_OK
WriteX 12654 0 4096 4096 NT_STATUS_OK
Flush 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
Close 12656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
Close 12657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12659 NT_STATUS_OK
Close 12659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12661 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12664 NT_STATUS_OK
WriteX 12664 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12664 258 NT_STATUS_OK
WriteX 12664 0 65536 65536 NT_STATUS_OK
WriteX 12664 65536 9298 9298 NT_STATUS_OK
Close 12664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
WriteX 12665 0 4096 4096 NT_STATUS_OK
Flush 12665 NT_STATUS_OK
SET_FILE_INFORMATION 12665 1004 NT_STATUS_OK
WriteX 12665 0 4096 4096 NT_STATUS_OK
Flush 12665 NT_STATUS_OK
Close 12665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12666 NT_STATUS_OK
SET_FILE_INFORMATION 12666 1004 NT_STATUS_OK
Close 12666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12671 0 4096 4096 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12672 4096 4096 4096 NT_STATUS_OK
ReadX 12672 8192 4096 4096 NT_STATUS_OK
ReadX 12672 12288 4096 4096 NT_STATUS_OK
ReadX 12672 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12673 NT_STATUS_OK
ReadX 12673 0 4096 4096 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12674 NT_STATUS_OK
ReadX 12674 0 4096 4096 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12675 1004 NT_STATUS_OK
WriteX 12675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12672 NT_STATUS_OK
Close 12675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12678 NT_STATUS_OK
Close 12678 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12681 NT_STATUS_OK
WriteX 12681 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12681 258 NT_STATUS_OK
WriteX 12681 0 65536 65536 NT_STATUS_OK
WriteX 12681 65536 11540 11540 NT_STATUS_OK
Close 12681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 0 4096 4096 NT_STATUS_OK
WriteX 12682 0 4096 4096 NT_STATUS_OK
Flush 12682 NT_STATUS_OK
SET_FILE_INFORMATION 12682 1004 NT_STATUS_OK
WriteX 12682 0 4096 4096 NT_STATUS_OK
Flush 12682 NT_STATUS_OK
Close 12682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12683 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
Close 12683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 61440 4096 4096 NT_STATUS_OK
ReadX 12687 126976 4096 4096 NT_STATUS_OK
WriteX 12687 0 65536 65536 NT_STATUS_OK
WriteX 12687 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 61440 4096 4096 NT_STATUS_OK
ReadX 12688 126976 4096 4096 NT_STATUS_OK
ReadX 12688 192512 4096 4096 NT_STATUS_OK
ReadX 12688 258048 4096 4096 NT_STATUS_OK
WriteX 12688 0 65536 65536 NT_STATUS_OK
WriteX 12688 65536 65536 65536 NT_STATUS_OK
WriteX 12688 131072 65536 65536 NT_STATUS_OK
WriteX 12688 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 61440 4096 4096 NT_STATUS_OK
ReadX 12689 126976 4096 4096 NT_STATUS_OK
ReadX 12689 192512 4096 4096 NT_STATUS_OK
ReadX 12689 258048 4096 4096 NT_STATUS_OK
ReadX 12689 323584 4096 4096 NT_STATUS_OK
ReadX 12689 389120 4096 4096 NT_STATUS_OK
ReadX 12689 454656 4096 4096 NT_STATUS_OK
ReadX 12689 520192 4096 4096 NT_STATUS_OK
WriteX 12689 0 65536 65536 NT_STATUS_OK
WriteX 12689 65536 65536 65536 NT_STATUS_OK
WriteX 12689 131072 65536 65536 NT_STATUS_OK
WriteX 12689 196608 65536 65536 NT_STATUS_OK
WriteX 12689 262144 65536 65536 NT_STATUS_OK
WriteX 12689 327680 65536 65536 NT_STATUS_OK
WriteX 12689 393216 65536 65536 NT_STATUS_OK
WriteX 12689 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
ReadX 12690 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12691 NT_STATUS_OK
WriteX 12691 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
WriteX 12691 0 53 53 NT_STATUS_OK
Close 12691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12692 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12690 8192 4096 4096 NT_STATUS_OK
ReadX 12690 12288 4096 4096 NT_STATUS_OK
WriteX 12694 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12694 258 NT_STATUS_OK
ReadX 12690 16384 4096 4096 NT_STATUS_OK
ReadX 12690 20480 4096 4096 NT_STATUS_OK
WriteX 12694 0 15360 15360 NT_STATUS_OK
Close 12694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 4096 4096 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12698 NT_STATUS_OK
ReadX 12698 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12699 NT_STATUS_OK
Close 12699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12698 4096 4096 4096 NT_STATUS_OK
ReadX 12698 8192 4096 4096 NT_STATUS_OK
ReadX 12698 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
ReadX 12701 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
ReadX 12702 4096 4096 4096 NT_STATUS_OK
ReadX 12702 8192 4096 4096 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12703 NT_STATUS_OK
WriteX 12703 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12703 258 NT_STATUS_OK
WriteX 12703 0 15360 15360 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12704 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12704 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12708 NT_STATUS_OK
SET_FILE_INFORMATION 12708 1004 NT_STATUS_OK
Close 12708 NT_STATUS_OK
WriteX 12704 0 4096 4096 NT_STATUS_OK
Close 12704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12709 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
ReadX 12711 4096 4096 4096 NT_STATUS_OK
ReadX 12711 8192 4096 4096 NT_STATUS_OK
ReadX 12711 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12711 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12711 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12713 NT_STATUS_OK
WriteX 12713 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 258 NT_STATUS_OK
WriteX 12713 0 53 53 NT_STATUS_OK
Close 12713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12712 4096 4096 4096 NT_STATUS_OK
ReadX 12712 8192 4096 4096 NT_STATUS_OK
ReadX 12712 12288 4096 4096 NT_STATUS_OK
WriteX 12716 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
WriteX 12716 0 12006 12006 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12717 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12717 1004 NT_STATUS_OK
WriteX 12717 0 4096 4096 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12721 NT_STATUS_OK
Close 12721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12720 4096 4096 4096 NT_STATUS_OK
ReadX 12720 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12723 NT_STATUS_OK
WriteX 12723 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12723 258 NT_STATUS_OK
WriteX 12723 0 11991 11991 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12728 NT_STATUS_OK
WriteX 12711 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 12728 1004 NT_STATUS_OK
Close 12728 NT_STATUS_OK
WriteX 12724 0 4096 4096 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12731 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
ReadX 12731 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
Close 12707 NT_STATUS_OK
WriteX 12731 0 12288 12288 NT_STATUS_OK
Close 12727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 61440 61440 NT_STATUS_OK
ReadX 12738 61440 4096 4096 NT_STATUS_OK
ReadX 12738 65536 61440 61440 NT_STATUS_OK
ReadX 12738 126976 4096 4096 NT_STATUS_OK
ReadX 12738 131072 61440 61440 NT_STATUS_OK
ReadX 12738 192512 4096 4096 NT_STATUS_OK
ReadX 12738 196608 61440 61440 NT_STATUS_OK
ReadX 12738 258048 4096 4096 NT_STATUS_OK
ReadX 12738 262144 61440 61440 NT_STATUS_OK
ReadX 12738 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 61440 61440 NT_STATUS_OK
ReadX 12739 61440 4096 4096 NT_STATUS_OK
ReadX 12739 65536 61440 61440 NT_STATUS_OK
ReadX 12739 126976 4096 4096 NT_STATUS_OK
ReadX 12739 131072 61440 61440 NT_STATUS_OK
ReadX 12739 192512 4096 4096 NT_STATUS_OK
ReadX 12739 196608 61440 61440 NT_STATUS_OK
ReadX 12739 258048 4096 4096 NT_STATUS_OK
ReadX 12739 262144 61440 61440 NT_STATUS_OK
ReadX 12739 323584 4096 4096 NT_STATUS_OK
ReadX 12739 327680 61440 61440 NT_STATUS_OK
ReadX 12739 389120 4096 4096 NT_STATUS_OK
ReadX 12739 393216 61440 61440 NT_STATUS_OK
ReadX 12739 454656 4096 4096 NT_STATUS_OK
ReadX 12739 458752 61440 61440 NT_STATUS_OK
ReadX 12739 520192 4096 4096 NT_STATUS_OK
ReadX 12739 524288 61440 61440 NT_STATUS_OK
ReadX 12739 585728 4096 4096 NT_STATUS_OK
ReadX 12739 589824 61440 61440 NT_STATUS_OK
ReadX 12739 651264 4096 4096 NT_STATUS_OK
ReadX 12739 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 61440 61440 NT_STATUS_OK
ReadX 12740 61440 4096 4096 NT_STATUS_OK
ReadX 12740 65536 61440 61440 NT_STATUS_OK
ReadX 12740 126976 4096 4096 NT_STATUS_OK
ReadX 12740 131072 61440 61440 NT_STATUS_OK
ReadX 12740 192512 4096 4096 NT_STATUS_OK
ReadX 12740 196608 61440 61440 NT_STATUS_OK
ReadX 12740 258048 4096 4096 NT_STATUS_OK
ReadX 12740 262144 61440 61440 NT_STATUS_OK
ReadX 12740 323584 4096 4096 NT_STATUS_OK
ReadX 12740 327680 61440 61440 NT_STATUS_OK
ReadX 12740 389120 4096 4096 NT_STATUS_OK
ReadX 12740 393216 61440 61440 NT_STATUS_OK
ReadX 12740 454656 4096 4096 NT_STATUS_OK
ReadX 12740 458752 61440 61440 NT_STATUS_OK
ReadX 12740 520192 4096 4096 NT_STATUS_OK
ReadX 12740 524288 61440 61440 NT_STATUS_OK
ReadX 12740 585728 4096 4096 NT_STATUS_OK
ReadX 12740 589824 61440 61440 NT_STATUS_OK
ReadX 12740 651264 4096 4096 NT_STATUS_OK
ReadX 12740 655360 61440 61440 NT_STATUS_OK
ReadX 12740 716800 4096 4096 NT_STATUS_OK
ReadX 12740 720896 61440 61440 NT_STATUS_OK
ReadX 12740 782336 4096 4096 NT_STATUS_OK
ReadX 12740 786432 61440 61440 NT_STATUS_OK
ReadX 12740 847872 4096 4096 NT_STATUS_OK
ReadX 12740 851968 61440 61440 NT_STATUS_OK
ReadX 12740 913408 4096 4096 NT_STATUS_OK
ReadX 12740 917504 61440 61440 NT_STATUS_OK
ReadX 12740 978944 4096 4096 NT_STATUS_OK
ReadX 12740 983040 61440 61440 NT_STATUS_OK
ReadX 12740 1044480 4096 4096 NT_STATUS_OK
ReadX 12740 1048576 61440 61440 NT_STATUS_OK
ReadX 12740 1110016 4096 4096 NT_STATUS_OK
ReadX 12740 1114112 61440 61440 NT_STATUS_OK
ReadX 12740 1175552 4096 4096 NT_STATUS_OK
ReadX 12740 1179648 61440 61440 NT_STATUS_OK
ReadX 12740 1241088 4096 4096 NT_STATUS_OK
ReadX 12740 1245184 61440 61440 NT_STATUS_OK
ReadX 12740 1306624 4096 4096 NT_STATUS_OK
ReadX 12740 1310720 61440 61440 NT_STATUS_OK
ReadX 12740 1372160 4096 4096 NT_STATUS_OK
ReadX 12740 1376256 61440 61440 NT_STATUS_OK
ReadX 12740 1437696 4096 4096 NT_STATUS_OK
ReadX 12740 1441792 61440 61440 NT_STATUS_OK
ReadX 12740 1503232 4096 4096 NT_STATUS_OK
ReadX 12740 1507328 61440 61440 NT_STATUS_OK
ReadX 12740 1568768 4096 4096 NT_STATUS_OK
ReadX 12740 1572864 61440 61440 NT_STATUS_OK
ReadX 12740 1634304 4096 4096 NT_STATUS_OK
ReadX 12740 1638400 61440 61440 NT_STATUS_OK
ReadX 12740 1699840 4096 4096 NT_STATUS_OK
ReadX 12740 1703936 61440 61440 NT_STATUS_OK
ReadX 12740 1765376 4096 4096 NT_STATUS_OK
ReadX 12740 1769472 61440 61440 NT_STATUS_OK
ReadX 12740 1830912 4096 4096 NT_STATUS_OK
ReadX 12740 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12747 NT_STATUS_OK
QUERY_FILE_INFORMATION 12747 1004 NT_STATUS_OK
WriteX 12747 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12747 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12749 NT_STATUS_OK
WriteX 12749 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12749 258 NT_STATUS_OK
WriteX 12749 0 491 491 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12750 NT_STATUS_OK
ReadX 12750 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12747 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12753 NT_STATUS_OK
WriteX 12753 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12753 258 NT_STATUS_OK
WriteX 12753 0 543 543 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Close 12744 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12767 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 1004 NT_STATUS_OK
WriteX 12767 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 258 NT_STATUS_OK
WriteX 12767 0 2048 2048 NT_STATUS_OK
Close 12767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
Flush 12768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12773 NT_STATUS_OK
WriteX 12773 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 258 NT_STATUS_OK
WriteX 12773 0 2048 2048 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12779 NT_STATUS_OK
WriteX 12779 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 258 NT_STATUS_OK
WriteX 12779 0 2048 2048 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 2048 2048 NT_STATUS_OK
ReadX 12758 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12758 0 8192 8192 NT_STATUS_OK
WriteX 12759 0 4096 4096 NT_STATUS_OK
WriteX 12760 0 4096 4096 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12784 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12783 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12787 NT_STATUS_OK
ReadX 12787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12789 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12790 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12792 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
WriteX 12804 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 258 NT_STATUS_OK
WriteX 12804 0 2048 2048 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12812 NT_STATUS_OK
QUERY_FILE_INFORMATION 12812 1004 NT_STATUS_OK
WriteX 12812 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12812 258 NT_STATUS_OK
WriteX 12812 0 2048 2048 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12813 0 4096 4096 NT_STATUS_OK
Flush 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12813 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12807 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12814 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12815 NT_STATUS_OK
WriteX 12815 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12815 258 NT_STATUS_OK
WriteX 12815 0 4096 4096 NT_STATUS_OK
Close 12815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12817 NT_STATUS_OK
Close 12817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12818 NT_STATUS_OK
WriteX 12818 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12818 258 NT_STATUS_OK
WriteX 12818 0 4096 4096 NT_STATUS_OK
Close 12818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12819 0 4096 4096 NT_STATUS_OK
Close 12816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12787 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12822 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12826 NT_STATUS_OK
WriteX 12826 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12826 258 NT_STATUS_OK
WriteX 12826 0 2048 2048 NT_STATUS_OK
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12829 NT_STATUS_OK
ReadX 12829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12830 NT_STATUS_OK
ReadX 12830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12840 NT_STATUS_OK
ReadX 12840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12841 NT_STATUS_OK
QUERY_FILE_INFORMATION 12841 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Close 12839 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12835 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Close 12829 NT_STATUS_OK
Close 12832 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12843 NT_STATUS_OK
QUERY_FILE_INFORMATION 12843 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12845 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12846 NT_STATUS_OK
ReadX 12846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12848 NT_STATUS_OK
ReadX 12848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12849 NT_STATUS_OK
ReadX 12849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12863 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 258 NT_STATUS_OK
WriteX 12863 0 2048 2048 NT_STATUS_OK
Close 12863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12864 NT_STATUS_OK
ReadX 12864 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12875 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 1004 NT_STATUS_OK
WriteX 12875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 258 NT_STATUS_OK
WriteX 12875 0 2048 2048 NT_STATUS_OK
Close 12875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12883 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1004 NT_STATUS_OK
WriteX 12883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 2048 2048 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12864 0 4096 4096 NT_STATUS_OK
Flush 12864 NT_STATUS_OK
WriteX 12876 0 4096 4096 NT_STATUS_OK
Flush 12876 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
Flush 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12864 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12876 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12866 4096 16384 16384 NT_STATUS_OK
ReadX 12846 4096 16384 16384 NT_STATUS_OK
ReadX 12878 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12886 NT_STATUS_OK
ReadX 12886 0 2048 2048 NT_STATUS_OK
WriteX 12886 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12887 NT_STATUS_OK
QUERY_FILE_INFORMATION 12887 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12846 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Close 12848 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12889 NT_STATUS_OK
QUERY_FILE_INFORMATION 12889 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12891 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12898 NT_STATUS_OK
ReadX 12898 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12894 4096 16384 16384 NT_STATUS_OK
WriteX 12894 0 4096 4096 NT_STATUS_OK
WriteX 12895 0 4096 4096 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
WriteX 12897 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12905 NT_STATUS_OK
ReadX 12905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12906 NT_STATUS_OK
ReadX 12906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12907 NT_STATUS_OK
ReadX 12907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12908 NT_STATUS_OK
ReadX 12908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12909 NT_STATUS_OK
ReadX 12909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12910 NT_STATUS_OK
ReadX 12910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12912 NT_STATUS_OK
ReadX 12912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 8192 8192 NT_STATUS_OK
ReadX 12900 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12914 0 4096 4096 NT_STATUS_OK
ReadX 12914 4096 4096 4096 NT_STATUS_OK
ReadX 12914 8192 4096 4096 NT_STATUS_OK
WriteX 12900 0 4096 4096 NT_STATUS_OK
WriteX 12901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
ReadX 12915 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12894 0 4096 4096 NT_STATUS_OK
WriteX 12895 0 4096 4096 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
WriteX 12897 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12920 NT_STATUS_OK
QUERY_FILE_INFORMATION 12920 1004 NT_STATUS_OK
WriteX 12920 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12920 258 NT_STATUS_OK
WriteX 12920 0 2048 2048 NT_STATUS_OK
Close 12920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12921 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12922 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
ReadX 12923 4096 4096 4096 NT_STATUS_OK
WriteX 12923 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12921 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
ReadX 12925 4096 4096 4096 NT_STATUS_OK
WriteX 12925 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12926 NT_STATUS_OK
QUERY_FILE_INFORMATION 12926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12913 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Close 12896 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Close 12907 NT_STATUS_OK
Close 12908 NT_STATUS_OK
Close 12909 NT_STATUS_OK
Close 12910 NT_STATUS_OK
Close 12912 NT_STATUS_OK
Close 12900 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12904 NT_STATUS_OK
Close 12905 NT_STATUS_OK
Close 12902 NT_STATUS_OK
Close 12903 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12928 0 4096 4096 NT_STATUS_OK
ReadX 12928 4096 4096 4096 NT_STATUS_OK
ReadX 12928 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12929 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12936 NT_STATUS_OK
ReadX 12936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12937 NT_STATUS_OK
ReadX 12937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12938 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12939 NT_STATUS_OK
ReadX 12939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
ReadX 12929 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12946 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 1004 NT_STATUS_OK
WriteX 12946 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 258 NT_STATUS_OK
WriteX 12946 0 2048 2048 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12947 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12952 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 1004 NT_STATUS_OK
WriteX 12952 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 258 NT_STATUS_OK
WriteX 12952 0 2048 2048 NT_STATUS_OK
Close 12952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12953 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12936 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12954 NT_STATUS_OK
QUERY_FILE_INFORMATION 12954 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Close 12936 NT_STATUS_OK
Close 12937 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Close 12939 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12956 NT_STATUS_OK
QUERY_FILE_INFORMATION 12956 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 61440 4096 4096 NT_STATUS_OK
ReadX 12958 126976 4096 4096 NT_STATUS_OK
WriteX 12958 0 65536 65536 NT_STATUS_OK
WriteX 12958 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12959 NT_STATUS_OK
ReadX 12959 61440 4096 4096 NT_STATUS_OK
ReadX 12959 126976 4096 4096 NT_STATUS_OK
ReadX 12959 192512 4096 4096 NT_STATUS_OK
ReadX 12959 258048 4096 4096 NT_STATUS_OK
WriteX 12959 0 65536 65536 NT_STATUS_OK
WriteX 12959 65536 65536 65536 NT_STATUS_OK
WriteX 12959 131072 65536 65536 NT_STATUS_OK
WriteX 12959 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 61440 4096 4096 NT_STATUS_OK
ReadX 12960 126976 4096 4096 NT_STATUS_OK
ReadX 12960 192512 4096 4096 NT_STATUS_OK
ReadX 12960 258048 4096 4096 NT_STATUS_OK
ReadX 12960 323584 4096 4096 NT_STATUS_OK
ReadX 12960 389120 4096 4096 NT_STATUS_OK
ReadX 12960 454656 4096 4096 NT_STATUS_OK
ReadX 12960 520192 4096 4096 NT_STATUS_OK
WriteX 12960 0 65536 65536 NT_STATUS_OK
WriteX 12960 65536 65536 65536 NT_STATUS_OK
WriteX 12960 131072 65536 65536 NT_STATUS_OK
WriteX 12960 196608 65536 65536 NT_STATUS_OK
WriteX 12960 262144 65536 65536 NT_STATUS_OK
WriteX 12960 327680 65536 65536 NT_STATUS_OK
WriteX 12960 393216 65536 65536 NT_STATUS_OK
WriteX 12960 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12961 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12961 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12961 8192 4096 4096 NT_STATUS_OK
ReadX 12961 12288 4096 4096 NT_STATUS_OK
ReadX 12961 16384 4096 4096 NT_STATUS_OK
ReadX 12961 20480 4096 4096 NT_STATUS_OK
ReadX 12961 24576 4096 4096 NT_STATUS_OK
ReadX 12961 28672 4096 4096 NT_STATUS_OK
ReadX 12961 32768 4096 4096 NT_STATUS_OK
ReadX 12961 36864 4096 4096 NT_STATUS_OK
ReadX 12961 40960 4096 4096 NT_STATUS_OK
ReadX 12961 45056 4096 4096 NT_STATUS_OK
ReadX 12961 49152 4096 4096 NT_STATUS_OK
ReadX 12961 53248 4096 4096 NT_STATUS_OK
ReadX 12961 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12961 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12962 NT_STATUS_OK
Close 12962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12959 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12964 NT_STATUS_OK
WriteX 12964 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12964 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12964 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12964 1004 NT_STATUS_OK
WriteX 12964 0 57088 57088 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
Close 12961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12965 NT_STATUS_OK
SET_FILE_INFORMATION 12965 1004 NT_STATUS_OK
Close 12965 NT_STATUS_OK
SET_FILE_INFORMATION 12964 1004 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Close 12964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12968 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12969 NT_STATUS_OK
WriteX 12969 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12969 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12969 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12969 1004 NT_STATUS_OK
WriteX 12969 0 51456 51456 NT_STATUS_OK
WriteX 12969 0 4096 4096 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
SET_FILE_INFORMATION 12969 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12969 1004 NT_STATUS_OK
WriteX 12969 0 4096 4096 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12973 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12978 NT_STATUS_OK
WriteX 12978 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12978 258 NT_STATUS_OK
WriteX 12978 0 53077 53077 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12979 NT_STATUS_OK
WriteX 12979 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12979 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12979 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12979 1004 NT_STATUS_OK
WriteX 12979 0 65536 65536 NT_STATUS_OK
WriteX 12979 65536 1856 1856 NT_STATUS_OK
WriteX 12979 0 4096 4096 NT_STATUS_OK
Flush 12979 NT_STATUS_OK
SET_FILE_INFORMATION 12979 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12979 1004 NT_STATUS_OK
WriteX 12979 0 4096 4096 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12981 NT_STATUS_OK
Close 12981 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12983 NT_STATUS_OK
ReadX 12983 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12985 NT_STATUS_OK
Close 12985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12988 NT_STATUS_OK
WriteX 12988 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12988 258 NT_STATUS_OK
WriteX 12988 0 7983 7983 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12990 NT_STATUS_OK
Close 12990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12993 NT_STATUS_OK
WriteX 12993 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12993 258 NT_STATUS_OK
WriteX 12993 0 65536 65536 NT_STATUS_OK
WriteX 12993 65536 65536 65536 NT_STATUS_OK
WriteX 12993 131072 65536 65536 NT_STATUS_OK
WriteX 12993 196608 65536 65536 NT_STATUS_OK
WriteX 12993 262144 65536 65536 NT_STATUS_OK
WriteX 12993 327680 65536 65536 NT_STATUS_OK
WriteX 12993 393216 65536 65536 NT_STATUS_OK
WriteX 12993 458752 46731 46731 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12994 NT_STATUS_OK
WriteX 12994 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12983 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12994 1004 NT_STATUS_OK
WriteX 12994 0 65536 65536 NT_STATUS_OK
WriteX 12994 65536 22848 22848 NT_STATUS_OK
WriteX 12994 0 4096 4096 NT_STATUS_OK
Flush 12994 NT_STATUS_OK
SET_FILE_INFORMATION 12994 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12994 1004 NT_STATUS_OK
WriteX 12994 0 4096 4096 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12998 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12999 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
ReadX 12999 8192 4096 4096 NT_STATUS_OK
ReadX 12999 12288 4096 4096 NT_STATUS_OK
ReadX 12999 16384 4096 4096 NT_STATUS_OK
ReadX 12999 20480 4096 4096 NT_STATUS_OK
ReadX 12999 24576 4096 4096 NT_STATUS_OK
ReadX 12999 28672 4096 4096 NT_STATUS_OK
ReadX 12999 32768 4096 4096 NT_STATUS_OK
ReadX 12999 36864 4096 4096 NT_STATUS_OK
ReadX 12999 40960 4096 4096 NT_STATUS_OK
ReadX 12999 45056 4096 4096 NT_STATUS_OK
ReadX 12999 49152 4096 4096 NT_STATUS_OK
ReadX 12999 53248 4096 4096 NT_STATUS_OK
ReadX 12999 57344 4096 4096 NT_STATUS_OK
ReadX 12999 61440 4096 4096 NT_STATUS_OK
ReadX 12999 65536 4096 4096 NT_STATUS_OK
ReadX 12999 69632 4096 4096 NT_STATUS_OK
ReadX 12999 73728 4096 4096 NT_STATUS_OK
ReadX 12999 77824 4096 4096 NT_STATUS_OK
ReadX 12999 81920 4096 4096 NT_STATUS_OK
ReadX 12999 86016 4096 4096 NT_STATUS_OK
ReadX 12999 90112 4096 4096 NT_STATUS_OK
ReadX 12999 94208 4096 4096 NT_STATUS_OK
ReadX 12999 98304 4096 4096 NT_STATUS_OK
ReadX 12999 102400 4096 4096 NT_STATUS_OK
ReadX 12999 106496 4096 4096 NT_STATUS_OK
ReadX 12999 110592 4096 4096 NT_STATUS_OK
ReadX 12999 114688 4096 4096 NT_STATUS_OK
ReadX 12999 118784 4096 4096 NT_STATUS_OK
ReadX 12999 122880 4096 4096 NT_STATUS_OK
ReadX 12999 126976 4096 4096 NT_STATUS_OK
ReadX 12999 131072 4096 4096 NT_STATUS_OK
ReadX 12999 135168 4096 4096 NT_STATUS_OK
ReadX 12999 139264 4096 4096 NT_STATUS_OK
ReadX 12999 143360 4096 4096 NT_STATUS_OK
ReadX 12999 147456 4096 4096 NT_STATUS_OK
ReadX 12999 151552 4096 4096 NT_STATUS_OK
ReadX 12999 155648 4096 4096 NT_STATUS_OK
ReadX 12999 159744 4096 4096 NT_STATUS_OK
ReadX 12999 163840 4096 4096 NT_STATUS_OK
ReadX 12999 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12999 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13002 NT_STATUS_OK
WriteX 13002 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13002 258 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13003 NT_STATUS_OK
SET_FILE_INFORMATION 13003 1004 NT_STATUS_OK
Close 13003 NT_STATUS_OK
WriteX 13002 0 42388 42388 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
ReadX 13006 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13007 NT_STATUS_OK
WriteX 13007 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 258 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 42652 42652 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Close 13006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
ReadX 13011 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13016 NT_STATUS_OK
WriteX 13016 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13016 258 NT_STATUS_OK
WriteX 13016 0 65536 65536 NT_STATUS_OK
WriteX 13016 65536 49 49 NT_STATUS_OK
Close 13016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 61440 61440 NT_STATUS_OK
ReadX 13017 61440 4096 4096 NT_STATUS_OK
ReadX 13017 65536 61440 61440 NT_STATUS_OK
ReadX 13017 126976 4096 4096 NT_STATUS_OK
ReadX 13017 131072 61440 61440 NT_STATUS_OK
ReadX 13017 192512 4096 4096 NT_STATUS_OK
ReadX 13017 196608 61440 61440 NT_STATUS_OK
ReadX 13017 258048 4096 4096 NT_STATUS_OK
ReadX 13017 262144 61440 61440 NT_STATUS_OK
ReadX 13017 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 61440 61440 NT_STATUS_OK
ReadX 13018 61440 4096 4096 NT_STATUS_OK
ReadX 13018 65536 61440 61440 NT_STATUS_OK
ReadX 13018 126976 4096 4096 NT_STATUS_OK
ReadX 13018 131072 61440 61440 NT_STATUS_OK
ReadX 13018 192512 4096 4096 NT_STATUS_OK
ReadX 13018 196608 61440 61440 NT_STATUS_OK
ReadX 13018 258048 4096 4096 NT_STATUS_OK
ReadX 13018 262144 61440 61440 NT_STATUS_OK
ReadX 13018 323584 4096 4096 NT_STATUS_OK
ReadX 13018 327680 61440 61440 NT_STATUS_OK
ReadX 13018 389120 4096 4096 NT_STATUS_OK
ReadX 13018 393216 61440 61440 NT_STATUS_OK
ReadX 13018 454656 4096 4096 NT_STATUS_OK
ReadX 13018 458752 61440 61440 NT_STATUS_OK
ReadX 13018 520192 4096 4096 NT_STATUS_OK
ReadX 13018 524288 61440 61440 NT_STATUS_OK
ReadX 13018 585728 4096 4096 NT_STATUS_OK
ReadX 13018 589824 61440 61440 NT_STATUS_OK
ReadX 13018 651264 4096 4096 NT_STATUS_OK
ReadX 13018 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 61440 61440 NT_STATUS_OK
ReadX 13019 61440 4096 4096 NT_STATUS_OK
ReadX 13019 65536 61440 61440 NT_STATUS_OK
ReadX 13019 126976 4096 4096 NT_STATUS_OK
ReadX 13019 131072 61440 61440 NT_STATUS_OK
ReadX 13019 192512 4096 4096 NT_STATUS_OK
ReadX 13019 196608 61440 61440 NT_STATUS_OK
ReadX 13019 258048 4096 4096 NT_STATUS_OK
ReadX 13019 262144 61440 61440 NT_STATUS_OK
ReadX 13019 323584 4096 4096 NT_STATUS_OK
ReadX 13019 327680 61440 61440 NT_STATUS_OK
ReadX 13019 389120 4096 4096 NT_STATUS_OK
ReadX 13019 393216 61440 61440 NT_STATUS_OK
ReadX 13019 454656 4096 4096 NT_STATUS_OK
ReadX 13019 458752 61440 61440 NT_STATUS_OK
ReadX 13019 520192 4096 4096 NT_STATUS_OK
ReadX 13019 524288 61440 61440 NT_STATUS_OK
ReadX 13019 585728 4096 4096 NT_STATUS_OK
ReadX 13019 589824 61440 61440 NT_STATUS_OK
ReadX 13019 651264 4096 4096 NT_STATUS_OK
ReadX 13019 655360 61440 61440 NT_STATUS_OK
ReadX 13019 716800 4096 4096 NT_STATUS_OK
ReadX 13019 720896 61440 61440 NT_STATUS_OK
ReadX 13019 782336 4096 4096 NT_STATUS_OK
ReadX 13019 786432 61440 61440 NT_STATUS_OK
ReadX 13019 847872 4096 4096 NT_STATUS_OK
ReadX 13019 851968 61440 61440 NT_STATUS_OK
ReadX 13019 913408 4096 4096 NT_STATUS_OK
ReadX 13019 917504 61440 61440 NT_STATUS_OK
ReadX 13019 978944 4096 4096 NT_STATUS_OK
ReadX 13019 983040 61440 61440 NT_STATUS_OK
ReadX 13019 1044480 4096 4096 NT_STATUS_OK
ReadX 13019 1048576 61440 61440 NT_STATUS_OK
ReadX 13019 1110016 4096 4096 NT_STATUS_OK
ReadX 13019 1114112 61440 61440 NT_STATUS_OK
ReadX 13019 1175552 4096 4096 NT_STATUS_OK
ReadX 13019 1179648 61440 61440 NT_STATUS_OK
ReadX 13019 1241088 4096 4096 NT_STATUS_OK
ReadX 13019 1245184 61440 61440 NT_STATUS_OK
ReadX 13019 1306624 4096 4096 NT_STATUS_OK
ReadX 13019 1310720 61440 61440 NT_STATUS_OK
ReadX 13019 1372160 4096 4096 NT_STATUS_OK
ReadX 13019 1376256 61440 61440 NT_STATUS_OK
ReadX 13019 1437696 4096 4096 NT_STATUS_OK
ReadX 13019 1441792 61440 61440 NT_STATUS_OK
ReadX 13019 1503232 4096 4096 NT_STATUS_OK
ReadX 13019 1507328 61440 61440 NT_STATUS_OK
ReadX 13019 1568768 4096 4096 NT_STATUS_OK
ReadX 13019 1572864 61440 61440 NT_STATUS_OK
ReadX 13019 1634304 4096 4096 NT_STATUS_OK
ReadX 13019 1638400 61440 61440 NT_STATUS_OK
ReadX 13019 1699840 4096 4096 NT_STATUS_OK
ReadX 13019 1703936 61440 61440 NT_STATUS_OK
ReadX 13019 1765376 4096 4096 NT_STATUS_OK
ReadX 13019 1769472 61440 61440 NT_STATUS_OK
ReadX 13019 1830912 4096 4096 NT_STATUS_OK
ReadX 13019 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13021 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 1005 NT_STATUS_OK
ReadX 13021 2156 24 24 NT_STATUS_OK
ReadX 13021 2139 276 276 NT_STATUS_OK
ReadX 13021 2136 14 14 NT_STATUS_OK
ReadX 13021 2136 7 7 NT_STATUS_OK
ReadX 13021 2138 12 12 NT_STATUS_OK
ReadX 13021 2137 8 8 NT_STATUS_OK
ReadX 13021 2135 15 15 NT_STATUS_OK
ReadX 13021 0 16 16 NT_STATUS_OK
ReadX 13021 16 2048 2048 NT_STATUS_OK
ReadX 13021 2064 2048 2048 NT_STATUS_OK
ReadX 13021 257 2048 2048 NT_STATUS_OK
ReadX 13021 385 2048 2048 NT_STATUS_OK
ReadX 13021 513 2048 2048 NT_STATUS_OK
ReadX 13021 641 2048 2048 NT_STATUS_OK
ReadX 13021 769 2048 2048 NT_STATUS_OK
ReadX 13021 897 2048 2048 NT_STATUS_OK
ReadX 13021 1025 2048 2048 NT_STATUS_OK
ReadX 13021 1153 2048 2048 NT_STATUS_OK
ReadX 13021 1281 2048 2048 NT_STATUS_OK
ReadX 13021 1409 2048 2048 NT_STATUS_OK
ReadX 13021 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13026 NT_STATUS_OK
WriteX 13026 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13026 258 NT_STATUS_OK
WriteX 13026 0 10575 10575 NT_STATUS_OK
Flush 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13027 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
Close 13021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13031 NT_STATUS_OK
LockX 13031 2147483538 1 NT_STATUS_OK
UnlockX 13031 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13031 1005 NT_STATUS_OK
ReadX 13031 0 512 512 NT_STATUS_OK
ReadX 13031 512 512 512 NT_STATUS_OK
ReadX 13031 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13031 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13031 1004 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13032 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 1005 NT_STATUS_OK
ReadX 13032 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13033 NT_STATUS_OK
LockX 13033 2147483538 1 NT_STATUS_OK
UnlockX 13033 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13033 1005 NT_STATUS_OK
ReadX 13033 0 512 512 NT_STATUS_OK
ReadX 13033 512 512 512 NT_STATUS_OK
ReadX 13033 1024 512 512 NT_STATUS_OK
ReadX 13033 288 20 20 NT_STATUS_OK
ReadX 13033 308 2084 2084 NT_STATUS_OK
ReadX 13033 388 2084 2084 NT_STATUS_OK
ReadX 13033 388 2084 2084 NT_STATUS_OK
ReadX 13020 2157 1386 1386 NT_STATUS_OK
ReadX 13033 2472 399 399 NT_STATUS_OK
ReadX 13033 3072 1536 1536 NT_STATUS_OK
ReadX 13033 544 149 149 NT_STATUS_OK
ReadX 13033 693 485 485 NT_STATUS_OK
Close 13033 NT_STATUS_OK
ReadX 13020 2157 4096 4096 NT_STATUS_OK
ReadX 13020 6253 4096 4096 NT_STATUS_OK
ReadX 13020 10349 4096 4096 NT_STATUS_OK
ReadX 13020 14445 4096 4096 NT_STATUS_OK
ReadX 13020 18541 4096 4096 NT_STATUS_OK
ReadX 13020 22637 256 256 NT_STATUS_OK
ReadX 13020 22893 4096 4096 NT_STATUS_OK
ReadX 13020 26989 4096 4096 NT_STATUS_OK
ReadX 13020 31085 4096 4096 NT_STATUS_OK
ReadX 13020 35181 4096 4096 NT_STATUS_OK
ReadX 13020 39277 4096 4096 NT_STATUS_OK
ReadX 13020 43373 4096 4096 NT_STATUS_OK
ReadX 13020 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13020 2157 1024 1024 NT_STATUS_OK
ReadX 13020 1667 4688 4688 NT_STATUS_OK
ReadX 13020 6355 3516 3516 NT_STATUS_OK
ReadX 13020 9871 16384 16384 NT_STATUS_OK
ReadX 13020 26255 3771 3771 NT_STATUS_OK
ReadX 13020 30026 2048 2048 NT_STATUS_OK
ReadX 13020 32074 1024 1024 NT_STATUS_OK
ReadX 13020 33098 6652 6652 NT_STATUS_OK
ReadX 13020 39750 16384 16384 NT_STATUS_OK
ReadX 13020 56134 10496 10496 NT_STATUS_OK
ReadX 13020 66630 1784 1784 NT_STATUS_OK
ReadX 13020 68414 90 90 NT_STATUS_OK
ReadX 13020 68504 273 273 NT_STATUS_OK
ReadX 13020 68777 1600 1600 NT_STATUS_OK
ReadX 13020 70377 640 640 NT_STATUS_OK
ReadX 13020 71017 1280 1280 NT_STATUS_OK
ReadX 13020 72297 8464 8464 NT_STATUS_OK
ReadX 13020 80761 158 158 NT_STATUS_OK
ReadX 13020 80919 912 912 NT_STATUS_OK
ReadX 13020 81831 1980 1980 NT_STATUS_OK
ReadX 13020 83811 2256 2256 NT_STATUS_OK
ReadX 13020 86067 400 400 NT_STATUS_OK
ReadX 13020 86467 252 252 NT_STATUS_OK
ReadX 13020 86719 42 42 NT_STATUS_OK
ReadX 13020 86761 725 725 NT_STATUS_OK
ReadX 13020 2009 512 512 NT_STATUS_OK
ReadX 13020 3895 9 9 NT_STATUS_OK
ReadX 13020 3781 46 46 NT_STATUS_OK
ReadX 13020 4059 92 92 NT_STATUS_OK
ReadX 13020 3781 92 92 NT_STATUS_OK
ReadX 13020 3986 184 184 NT_STATUS_OK
ReadX 13020 3987 16384 16384 NT_STATUS_OK
ReadX 13020 3902 16384 16384 NT_STATUS_OK
ReadX 13020 3781 10240 10240 NT_STATUS_OK
ReadX 13020 3821 16384 16384 NT_STATUS_OK
ReadX 13020 3891 935 935 NT_STATUS_OK
ReadX 13020 4060 10240 10240 NT_STATUS_OK
ReadX 13020 4059 184 184 NT_STATUS_OK
ReadX 13020 256 184 184 NT_STATUS_OK
ReadX 13020 256 1026 1026 NT_STATUS_OK
ReadX 13020 3901 326 326 NT_STATUS_OK
ReadX 13020 3899 652 652 NT_STATUS_OK
ReadX 13020 256 2 2 NT_STATUS_OK
ReadX 13020 258 4948 4948 NT_STATUS_OK
Close 13020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13038 NT_STATUS_OK
WriteX 13038 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13038 258 NT_STATUS_OK
WriteX 13038 0 65536 65536 NT_STATUS_OK
WriteX 13038 65536 65536 65536 NT_STATUS_OK
WriteX 13038 131072 65536 65536 NT_STATUS_OK
WriteX 13038 196608 65536 65536 NT_STATUS_OK
WriteX 13038 262144 65536 65536 NT_STATUS_OK
WriteX 13038 327680 65536 65536 NT_STATUS_OK
WriteX 13038 393216 65536 65536 NT_STATUS_OK
WriteX 13038 458752 65536 65536 NT_STATUS_OK
WriteX 13038 524288 65536 65536 NT_STATUS_OK
WriteX 13038 589824 35257 35257 NT_STATUS_OK
Close 13038 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13040 NT_STATUS_OK
Close 13040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13043 NT_STATUS_OK
WriteX 13043 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13043 258 NT_STATUS_OK
WriteX 13043 0 65536 65536 NT_STATUS_OK
WriteX 13043 65536 65536 65536 NT_STATUS_OK
WriteX 13043 131072 65536 65536 NT_STATUS_OK
WriteX 13043 196608 65536 65536 NT_STATUS_OK
WriteX 13043 262144 65536 65536 NT_STATUS_OK
WriteX 13043 327680 65536 65536 NT_STATUS_OK
WriteX 13043 393216 65536 65536 NT_STATUS_OK
WriteX 13043 458752 65536 65536 NT_STATUS_OK
WriteX 13043 524288 65536 65536 NT_STATUS_OK
WriteX 13043 589824 57598 57598 NT_STATUS_OK
Close 13043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13045 NT_STATUS_OK
WriteX 13045 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13045 258 NT_STATUS_OK
WriteX 13045 0 12543 12543 NT_STATUS_OK
Flush 13045 NT_STATUS_OK
Close 13045 NT_STATUS_OK
Close 13029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13051 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
ReadX 13051 1938 24 24 NT_STATUS_OK
ReadX 13051 1920 276 276 NT_STATUS_OK
ReadX 13051 1918 14 14 NT_STATUS_OK
ReadX 13051 1918 7 7 NT_STATUS_OK
ReadX 13051 1919 12 12 NT_STATUS_OK
ReadX 13051 1919 8 8 NT_STATUS_OK
ReadX 13051 1917 15 15 NT_STATUS_OK
ReadX 13051 0 16 16 NT_STATUS_OK
ReadX 13051 16 2048 2048 NT_STATUS_OK
ReadX 13051 2064 2048 2048 NT_STATUS_OK
ReadX 13051 257 2048 2048 NT_STATUS_OK
ReadX 13051 385 2048 2048 NT_STATUS_OK
ReadX 13051 513 2048 2048 NT_STATUS_OK
ReadX 13051 641 2048 2048 NT_STATUS_OK
ReadX 13051 769 2048 2048 NT_STATUS_OK
ReadX 13051 897 2048 2048 NT_STATUS_OK
ReadX 13051 1025 2048 2048 NT_STATUS_OK
ReadX 13051 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13056 NT_STATUS_OK
WriteX 13056 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13056 258 NT_STATUS_OK
WriteX 13056 0 11588 11588 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
Close 13056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13059 NT_STATUS_OK
ReadX 13059 0 4096 4096 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13061 NT_STATUS_OK
WriteX 13061 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13061 258 NT_STATUS_OK
WriteX 13061 0 11615 11615 NT_STATUS_OK
Flush 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13063 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13070 NT_STATUS_OK
WriteX 13070 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13070 258 NT_STATUS_OK
WriteX 13070 0 65536 65536 NT_STATUS_OK
WriteX 13070 65536 16050 16050 NT_STATUS_OK
Close 13070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13050 1939 64 64 NT_STATUS_OK
ReadX 13050 128 248 248 NT_STATUS_OK
ReadX 13050 128 568 568 NT_STATUS_OK
ReadX 13050 3872 1536 1536 NT_STATUS_OK
ReadX 13050 3456 2560 2560 NT_STATUS_OK
ReadX 13050 3136 512 512 NT_STATUS_OK
ReadX 13050 2880 4096 4096 NT_STATUS_OK
ReadX 13050 3264 3072 3072 NT_STATUS_OK
ReadX 13050 320 4096 4096 NT_STATUS_OK
ReadX 13050 1024 4096 4096 NT_STATUS_OK
ReadX 13050 3616 4096 4096 NT_STATUS_OK
ReadX 13050 1939 64 64 NT_STATUS_OK
ReadX 13050 128 248 248 NT_STATUS_OK
ReadX 13050 128 608 608 NT_STATUS_OK
ReadX 13050 2858 1024 1024 NT_STATUS_OK
ReadX 13050 2810 4096 4096 NT_STATUS_OK
ReadX 13050 2826 4096 4096 NT_STATUS_OK
ReadX 13050 2580 2048 2048 NT_STATUS_OK
ReadX 13050 2800 2560 2560 NT_STATUS_OK
ReadX 13050 2100 4096 4096 NT_STATUS_OK
ReadX 13050 2084 4096 4096 NT_STATUS_OK
ReadX 13050 868 4096 4096 NT_STATUS_OK
ReadX 13050 2324 4096 4096 NT_STATUS_OK
ReadX 13050 884 4096 4096 NT_STATUS_OK
ReadX 13050 2604 1024 1024 NT_STATUS_OK
ReadX 13050 580 4096 4096 NT_STATUS_OK
ReadX 13050 596 4096 4096 NT_STATUS_OK
ReadX 13050 2752 4096 4096 NT_STATUS_OK
ReadX 13050 2842 1024 1024 NT_STATUS_OK
ReadX 13050 660 4096 4096 NT_STATUS_OK
ReadX 13050 2720 4096 4096 NT_STATUS_OK
ReadX 13050 2736 4096 4096 NT_STATUS_OK
ReadX 13050 628 4096 4096 NT_STATUS_OK
ReadX 13050 2704 4096 4096 NT_STATUS_OK
ReadX 13050 1556 4096 4096 NT_STATUS_OK
ReadX 13050 576 4096 4096 NT_STATUS_OK
ReadX 13050 3168 1536 1536 NT_STATUS_OK
ReadX 13050 832 4096 4096 NT_STATUS_OK
ReadX 13050 1088 4096 4096 NT_STATUS_OK
ReadX 13050 1344 4096 4096 NT_STATUS_OK
ReadX 13050 1600 4096 4096 NT_STATUS_OK
ReadX 13050 1856 4096 4096 NT_STATUS_OK
ReadX 13050 2112 4096 4096 NT_STATUS_OK
ReadX 13050 1892 4096 4096 NT_STATUS_OK
ReadX 13050 820 4096 4096 NT_STATUS_OK
ReadX 13050 788 4096 4096 NT_STATUS_OK
ReadX 13050 1604 4096 4096 NT_STATUS_OK
ReadX 13050 3648 4096 4096 NT_STATUS_OK
ReadX 13050 2608 4096 4096 NT_STATUS_OK
ReadX 13050 548 4096 4096 NT_STATUS_OK
ReadX 13050 740 4096 4096 NT_STATUS_OK
ReadX 13050 1344 4096 4096 NT_STATUS_OK
ReadX 13050 3392 4096 4096 NT_STATUS_OK
ReadX 13050 3904 4096 4096 NT_STATUS_OK
ReadX 13050 644 4096 4096 NT_STATUS_OK
ReadX 13050 676 4096 4096 NT_STATUS_OK
ReadX 13050 2688 4096 4096 NT_STATUS_OK
ReadX 13050 320 4096 4096 NT_STATUS_OK
ReadX 13050 900 4096 4096 NT_STATUS_OK
ReadX 13050 1908 4096 4096 NT_STATUS_OK
ReadX 13050 852 4096 4096 NT_STATUS_OK
ReadX 13050 724 4096 4096 NT_STATUS_OK
ReadX 13050 2292 4096 4096 NT_STATUS_OK
ReadX 13050 612 4096 4096 NT_STATUS_OK
ReadX 13050 388 4096 4096 NT_STATUS_OK
ReadX 13050 2368 4096 4096 NT_STATUS_OK
ReadX 13050 2624 4096 4096 NT_STATUS_OK
ReadX 13050 500 4096 4096 NT_STATUS_OK
ReadX 13050 356 4096 4096 NT_STATUS_OK
ReadX 13050 1024 4096 4096 NT_STATUS_OK
ReadX 13050 576 4096 4096 NT_STATUS_OK
ReadX 13050 340 4096 4096 NT_STATUS_OK
ReadX 13050 420 4096 4096 NT_STATUS_OK
ReadX 13050 1600 4096 4096 NT_STATUS_OK
ReadX 13050 404 4096 4096 NT_STATUS_OK
ReadX 13050 1428 4096 4096 NT_STATUS_OK
ReadX 13050 2656 4096 4096 NT_STATUS_OK
ReadX 13050 2624 4096 4096 NT_STATUS_OK
ReadX 13050 452 4096 4096 NT_STATUS_OK
ReadX 13050 692 4096 4096 NT_STATUS_OK
ReadX 13050 564 4096 4096 NT_STATUS_OK
ReadX 13050 372 4096 4096 NT_STATUS_OK
ReadX 13050 468 4096 4096 NT_STATUS_OK
ReadX 13050 484 4096 4096 NT_STATUS_OK
ReadX 13050 1088 4096 4096 NT_STATUS_OK
ReadX 13050 1924 4096 4096 NT_STATUS_OK
ReadX 13050 2768 4096 4096 NT_STATUS_OK
ReadX 13050 832 4096 4096 NT_STATUS_OK
ReadX 13050 836 4096 4096 NT_STATUS_OK
ReadX 13050 1856 4096 4096 NT_STATUS_OK
ReadX 13050 2640 4096 4096 NT_STATUS_OK
ReadX 13050 436 4096 4096 NT_STATUS_OK
ReadX 13050 1828 4096 4096 NT_STATUS_OK
ReadX 13050 804 4096 4096 NT_STATUS_OK
ReadX 13050 1860 4096 4096 NT_STATUS_OK
ReadX 13050 1812 4096 4096 NT_STATUS_OK
ReadX 13050 756 4096 4096 NT_STATUS_OK
ReadX 13050 1636 4096 4096 NT_STATUS_OK
ReadX 13050 772 4096 4096 NT_STATUS_OK
ReadX 13050 2036 4096 4096 NT_STATUS_OK
ReadX 13050 1220 4096 4096 NT_STATUS_OK
ReadX 13050 1652 4096 4096 NT_STATUS_OK
ReadX 13050 2588 4096 4096 NT_STATUS_OK
ReadX 13050 916 4096 4096 NT_STATUS_OK
ReadX 13050 260 4096 4096 NT_STATUS_OK
ReadX 13050 932 4096 4096 NT_STATUS_OK
ReadX 13050 2624 4096 4096 NT_STATUS_OK
ReadX 13050 308 4096 4096 NT_STATUS_OK
ReadX 13050 292 4096 4096 NT_STATUS_OK
ReadX 13050 1140 4096 4096 NT_STATUS_OK
ReadX 13050 276 4096 4096 NT_STATUS_OK
ReadX 13050 2020 4096 4096 NT_STATUS_OK
ReadX 13050 2880 4096 4096 NT_STATUS_OK
ReadX 13050 516 4096 4096 NT_STATUS_OK
ReadX 13050 1844 4096 4096 NT_STATUS_OK
ReadX 13050 1124 4096 4096 NT_STATUS_OK
ReadX 13050 3136 4096 4096 NT_STATUS_OK
ReadX 13050 324 4096 4096 NT_STATUS_OK
ReadX 13050 1156 4096 4096 NT_STATUS_OK
ReadX 13050 1172 4096 4096 NT_STATUS_OK
ReadX 13050 2112 4096 4096 NT_STATUS_OK
ReadX 13050 2368 4096 4096 NT_STATUS_OK
ReadX 13050 964 4096 4096 NT_STATUS_OK
ReadX 13050 980 4096 4096 NT_STATUS_OK
ReadX 13050 1012 4096 4096 NT_STATUS_OK
ReadX 13050 532 4096 4096 NT_STATUS_OK
ReadX 13050 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13050 1620 4096 4096 NT_STATUS_OK
ReadX 13050 1604 4096 4096 NT_STATUS_OK
ReadX 13050 2116 4096 4096 NT_STATUS_OK
ReadX 13050 2132 4096 4096 NT_STATUS_OK
ReadX 13050 2148 4096 4096 NT_STATUS_OK
ReadX 13050 2276 4096 4096 NT_STATUS_OK
ReadX 13050 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13072 NT_STATUS_OK
Close 13072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13075 NT_STATUS_OK
QUERY_FILE_INFORMATION 13030 1004 NT_STATUS_OK
Close 13030 NT_STATUS_OK
WriteX 13075 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13075 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 1004 NT_STATUS_OK
Close 13032 NT_STATUS_OK
WriteX 13075 0 65536 65536 NT_STATUS_OK
WriteX 13075 65536 64850 64850 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13077 NT_STATUS_OK
WriteX 13077 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
ReadX 13050 2068 4096 4096 NT_STATUS_OK
ReadX 13050 1588 4096 4096 NT_STATUS_OK
ReadX 13050 1572 4096 4096 NT_STATUS_OK
WriteX 13077 0 18630 18630 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13050 612 4096 4096 NT_STATUS_OK
ReadX 13050 564 4096 4096 NT_STATUS_OK
ReadX 13050 1876 4096 4096 NT_STATUS_OK
ReadX 13050 628 4096 4096 NT_STATUS_OK
ReadX 13050 740 4096 4096 NT_STATUS_OK
ReadX 13050 724 4096 4096 NT_STATUS_OK
ReadX 13050 644 4096 4096 NT_STATUS_OK
ReadX 13050 2324 4096 4096 NT_STATUS_OK
ReadX 13050 660 4096 4096 NT_STATUS_OK
ReadX 13050 852 4096 4096 NT_STATUS_OK
ReadX 13050 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13050 2368 4096 4096 NT_STATUS_OK
ReadX 13050 1024 4096 4096 NT_STATUS_OK
ReadX 13050 320 4096 4096 NT_STATUS_OK
ReadX 13050 580 4096 4096 NT_STATUS_OK
ReadX 13050 3136 512 512 NT_STATUS_OK
ReadX 13050 2880 4096 4096 NT_STATUS_OK
Close 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 61440 4096 4096 NT_STATUS_OK
ReadX 13082 126976 4096 4096 NT_STATUS_OK
WriteX 13082 0 65536 65536 NT_STATUS_OK
WriteX 13082 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 61440 4096 4096 NT_STATUS_OK
ReadX 13083 126976 4096 4096 NT_STATUS_OK
ReadX 13083 192512 4096 4096 NT_STATUS_OK
ReadX 13083 258048 4096 4096 NT_STATUS_OK
WriteX 13083 0 65536 65536 NT_STATUS_OK
WriteX 13083 65536 65536 65536 NT_STATUS_OK
WriteX 13083 131072 65536 65536 NT_STATUS_OK
WriteX 13083 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 61440 4096 4096 NT_STATUS_OK
ReadX 13084 126976 4096 4096 NT_STATUS_OK
ReadX 13084 192512 4096 4096 NT_STATUS_OK
ReadX 13084 258048 4096 4096 NT_STATUS_OK
ReadX 13084 323584 4096 4096 NT_STATUS_OK
ReadX 13084 389120 4096 4096 NT_STATUS_OK
ReadX 13084 454656 4096 4096 NT_STATUS_OK
ReadX 13084 520192 4096 4096 NT_STATUS_OK
WriteX 13084 0 65536 65536 NT_STATUS_OK
WriteX 13084 65536 65536 65536 NT_STATUS_OK
WriteX 13084 131072 65536 65536 NT_STATUS_OK
WriteX 13084 196608 65536 65536 NT_STATUS_OK
WriteX 13084 262144 65536 65536 NT_STATUS_OK
WriteX 13084 327680 65536 65536 NT_STATUS_OK
WriteX 13084 393216 65536 65536 NT_STATUS_OK
WriteX 13084 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13087 NT_STATUS_OK
WriteX 13087 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13087 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 8192 8192 NT_STATUS_OK
Flush 13085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13085 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 8192 8192 NT_STATUS_OK
Flush 13085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 8192 8192 NT_STATUS_OK
Flush 13085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 8192 8192 NT_STATUS_OK
Flush 13085 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13089 NT_STATUS_OK
Close 13089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13081 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13092 NT_STATUS_OK
WriteX 13092 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13092 258 NT_STATUS_OK
WriteX 13092 0 62591 62591 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13094 NT_STATUS_OK
Close 13094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 10845 10845 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13102 NT_STATUS_OK
WriteX 13102 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13102 258 NT_STATUS_OK
WriteX 13102 0 30118 30118 NT_STATUS_OK
Close 13102 NT_STATUS_OK
WriteX 13085 0 4096 4096 NT_STATUS_OK
WriteX 13087 0 64 64 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 0 61440 61440 NT_STATUS_OK
ReadX 13104 61440 4096 4096 NT_STATUS_OK
ReadX 13104 65536 61440 61440 NT_STATUS_OK
ReadX 13104 126976 4096 4096 NT_STATUS_OK
ReadX 13104 131072 61440 61440 NT_STATUS_OK
ReadX 13104 192512 4096 4096 NT_STATUS_OK
ReadX 13104 196608 61440 61440 NT_STATUS_OK
ReadX 13104 258048 4096 4096 NT_STATUS_OK
ReadX 13104 262144 61440 61440 NT_STATUS_OK
ReadX 13104 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 61440 61440 NT_STATUS_OK
ReadX 13105 61440 4096 4096 NT_STATUS_OK
ReadX 13105 65536 61440 61440 NT_STATUS_OK
ReadX 13105 126976 4096 4096 NT_STATUS_OK
ReadX 13105 131072 61440 61440 NT_STATUS_OK
ReadX 13105 192512 4096 4096 NT_STATUS_OK
ReadX 13105 196608 61440 61440 NT_STATUS_OK
ReadX 13105 258048 4096 4096 NT_STATUS_OK
ReadX 13105 262144 61440 61440 NT_STATUS_OK
ReadX 13105 323584 4096 4096 NT_STATUS_OK
ReadX 13105 327680 61440 61440 NT_STATUS_OK
ReadX 13105 389120 4096 4096 NT_STATUS_OK
ReadX 13105 393216 61440 61440 NT_STATUS_OK
ReadX 13105 454656 4096 4096 NT_STATUS_OK
ReadX 13105 458752 61440 61440 NT_STATUS_OK
ReadX 13105 520192 4096 4096 NT_STATUS_OK
ReadX 13105 524288 61440 61440 NT_STATUS_OK
ReadX 13105 585728 4096 4096 NT_STATUS_OK
ReadX 13105 589824 61440 61440 NT_STATUS_OK
ReadX 13105 651264 4096 4096 NT_STATUS_OK
ReadX 13105 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 61440 61440 NT_STATUS_OK
ReadX 13106 61440 4096 4096 NT_STATUS_OK
ReadX 13106 65536 61440 61440 NT_STATUS_OK
ReadX 13106 126976 4096 4096 NT_STATUS_OK
ReadX 13106 131072 61440 61440 NT_STATUS_OK
ReadX 13106 192512 4096 4096 NT_STATUS_OK
ReadX 13106 196608 61440 61440 NT_STATUS_OK
ReadX 13106 258048 4096 4096 NT_STATUS_OK
ReadX 13106 262144 61440 61440 NT_STATUS_OK
ReadX 13106 323584 4096 4096 NT_STATUS_OK
ReadX 13106 327680 61440 61440 NT_STATUS_OK
ReadX 13106 389120 4096 4096 NT_STATUS_OK
ReadX 13106 393216 61440 61440 NT_STATUS_OK
ReadX 13106 454656 4096 4096 NT_STATUS_OK
ReadX 13106 458752 61440 61440 NT_STATUS_OK
ReadX 13106 520192 4096 4096 NT_STATUS_OK
ReadX 13106 524288 61440 61440 NT_STATUS_OK
ReadX 13106 585728 4096 4096 NT_STATUS_OK
ReadX 13106 589824 61440 61440 NT_STATUS_OK
ReadX 13106 651264 4096 4096 NT_STATUS_OK
ReadX 13106 655360 61440 61440 NT_STATUS_OK
ReadX 13106 716800 4096 4096 NT_STATUS_OK
ReadX 13106 720896 61440 61440 NT_STATUS_OK
ReadX 13106 782336 4096 4096 NT_STATUS_OK
ReadX 13106 786432 61440 61440 NT_STATUS_OK
ReadX 13106 847872 4096 4096 NT_STATUS_OK
ReadX 13106 851968 61440 61440 NT_STATUS_OK
ReadX 13106 913408 4096 4096 NT_STATUS_OK
ReadX 13106 917504 61440 61440 NT_STATUS_OK
ReadX 13106 978944 4096 4096 NT_STATUS_OK
ReadX 13106 983040 61440 61440 NT_STATUS_OK
ReadX 13106 1044480 4096 4096 NT_STATUS_OK
ReadX 13106 1048576 61440 61440 NT_STATUS_OK
ReadX 13106 1110016 4096 4096 NT_STATUS_OK
ReadX 13106 1114112 61440 61440 NT_STATUS_OK
ReadX 13106 1175552 4096 4096 NT_STATUS_OK
ReadX 13106 1179648 61440 61440 NT_STATUS_OK
ReadX 13106 1241088 4096 4096 NT_STATUS_OK
ReadX 13106 1245184 61440 61440 NT_STATUS_OK
ReadX 13106 1306624 4096 4096 NT_STATUS_OK
ReadX 13106 1310720 61440 61440 NT_STATUS_OK
ReadX 13106 1372160 4096 4096 NT_STATUS_OK
ReadX 13106 1376256 61440 61440 NT_STATUS_OK
ReadX 13106 1437696 4096 4096 NT_STATUS_OK
ReadX 13106 1441792 61440 61440 NT_STATUS_OK
ReadX 13106 1503232 4096 4096 NT_STATUS_OK
ReadX 13106 1507328 61440 61440 NT_STATUS_OK
ReadX 13106 1568768 4096 4096 NT_STATUS_OK
ReadX 13106 1572864 61440 61440 NT_STATUS_OK
ReadX 13106 1634304 4096 4096 NT_STATUS_OK
ReadX 13106 1638400 61440 61440 NT_STATUS_OK
ReadX 13106 1699840 4096 4096 NT_STATUS_OK
ReadX 13106 1703936 61440 61440 NT_STATUS_OK
ReadX 13106 1765376 4096 4096 NT_STATUS_OK
ReadX 13106 1769472 61440 61440 NT_STATUS_OK
ReadX 13106 1830912 4096 4096 NT_STATUS_OK
ReadX 13106 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13104 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Close 13106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13111 NT_STATUS_OK
ReadX 13111 0 4096 4096 NT_STATUS_OK
ReadX 13111 4096 4096 4096 NT_STATUS_OK
ReadX 13111 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13115 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 8192 8192 NT_STATUS_OK
ReadX 13119 8192 8192 8192 NT_STATUS_OK
ReadX 13119 16384 8192 8192 NT_STATUS_OK
ReadX 13119 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13121 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13124 NT_STATUS_OK
WriteX 13124 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13124 258 NT_STATUS_OK
WriteX 13124 0 10438 10438 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13128 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13129 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13130 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
ReadX 13133 4096 4096 4096 NT_STATUS_OK
ReadX 13133 8192 4096 4096 NT_STATUS_OK
ReadX 13133 12288 8192 8192 NT_STATUS_OK
ReadX 13133 20480 8192 8192 NT_STATUS_OK
ReadX 13133 28672 8192 8192 NT_STATUS_OK
ReadX 13133 36864 8192 8192 NT_STATUS_OK
ReadX 13133 45056 8192 8192 NT_STATUS_OK
ReadX 13133 53248 8192 8192 NT_STATUS_OK
ReadX 13133 61440 8192 8192 NT_STATUS_OK
ReadX 13133 69632 8192 8192 NT_STATUS_OK
ReadX 13133 77824 8192 8192 NT_STATUS_OK
ReadX 13133 86016 8192 8192 NT_STATUS_OK
ReadX 13133 94208 8192 8192 NT_STATUS_OK
ReadX 13133 102400 8192 8192 NT_STATUS_OK
ReadX 13133 110592 8192 8192 NT_STATUS_OK
ReadX 13133 118784 8192 8192 NT_STATUS_OK
ReadX 13133 126976 8192 8192 NT_STATUS_OK
ReadX 13133 135168 8192 8192 NT_STATUS_OK
ReadX 13133 143360 8192 8192 NT_STATUS_OK
ReadX 13133 151552 8192 8192 NT_STATUS_OK
ReadX 13133 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13138 NT_STATUS_OK
WriteX 13138 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13138 258 NT_STATUS_OK
WriteX 13138 0 28489 28489 NT_STATUS_OK
Close 13138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13139 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13141 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 8192 8192 NT_STATUS_OK
ReadX 13145 8192 8192 8192 NT_STATUS_OK
ReadX 13145 16384 8192 8192 NT_STATUS_OK
ReadX 13145 24576 8192 8192 NT_STATUS_OK
ReadX 13145 32768 16384 16384 NT_STATUS_OK
ReadX 13145 49152 8192 8192 NT_STATUS_OK
ReadX 13145 57344 8192 8192 NT_STATUS_OK
ReadX 13145 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13147 NT_STATUS_OK
Close 13147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13150 NT_STATUS_OK
WriteX 13150 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 258 NT_STATUS_OK
WriteX 13150 0 29253 29253 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13152 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13157 NT_STATUS_OK
WriteX 13157 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13157 258 NT_STATUS_OK
WriteX 13157 0 30183 30183 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13158 NT_STATUS_OK
Close 13158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13160 NT_STATUS_OK
WriteX 13160 0 510 510 NT_STATUS_OK
WriteX 13160 510 512 512 NT_STATUS_OK
WriteX 13160 1022 510 510 NT_STATUS_OK
WriteX 13160 1532 510 510 NT_STATUS_OK
WriteX 13160 2042 168 168 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
WriteX 13163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 61440 4096 4096 NT_STATUS_OK
ReadX 13164 126976 4096 4096 NT_STATUS_OK
WriteX 13164 0 65536 65536 NT_STATUS_OK
WriteX 13164 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 61440 4096 4096 NT_STATUS_OK
ReadX 13165 126976 4096 4096 NT_STATUS_OK
ReadX 13165 192512 4096 4096 NT_STATUS_OK
ReadX 13165 258048 4096 4096 NT_STATUS_OK
WriteX 13165 0 65536 65536 NT_STATUS_OK
WriteX 13165 65536 65536 65536 NT_STATUS_OK
WriteX 13165 131072 65536 65536 NT_STATUS_OK
WriteX 13165 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 61440 4096 4096 NT_STATUS_OK
ReadX 13166 126976 4096 4096 NT_STATUS_OK
ReadX 13166 192512 4096 4096 NT_STATUS_OK
ReadX 13166 258048 4096 4096 NT_STATUS_OK
ReadX 13166 323584 4096 4096 NT_STATUS_OK
ReadX 13166 389120 4096 4096 NT_STATUS_OK
ReadX 13166 454656 4096 4096 NT_STATUS_OK
ReadX 13166 520192 4096 4096 NT_STATUS_OK
WriteX 13166 0 65536 65536 NT_STATUS_OK
WriteX 13166 65536 65536 65536 NT_STATUS_OK
WriteX 13166 131072 65536 65536 NT_STATUS_OK
WriteX 13166 196608 65536 65536 NT_STATUS_OK
WriteX 13166 262144 65536 65536 NT_STATUS_OK
WriteX 13166 327680 65536 65536 NT_STATUS_OK
WriteX 13166 393216 65536 65536 NT_STATUS_OK
WriteX 13166 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13169 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13173 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13176 NT_STATUS_OK
Close 13176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13178 NT_STATUS_OK
Close 13178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13182 NT_STATUS_OK
Close 13182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13185 NT_STATUS_OK
Close 13185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13191 NT_STATUS_OK
Close 13191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13201 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13206 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13216 NT_STATUS_OK
Close 13216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13226 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13229 NT_STATUS_OK
Close 13229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13232 NT_STATUS_OK
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13235 NT_STATUS_OK
WriteX 13235 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13235 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13235 0 65536 65536 NT_STATUS_OK
WriteX 13235 65536 65536 65536 NT_STATUS_OK
WriteX 13235 131072 65536 65536 NT_STATUS_OK
WriteX 13235 196608 65536 65536 NT_STATUS_OK
WriteX 13235 262144 26634 26634 NT_STATUS_OK
Close 13235 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13240 NT_STATUS_OK
Close 13240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
Close 13242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
ReadX 13243 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13244 NT_STATUS_OK
Close 13244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13248 NT_STATUS_OK
Close 13248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13251 NT_STATUS_OK
Close 13251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13253 NT_STATUS_OK
Close 13253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13257 NT_STATUS_OK
Close 13257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13262 NT_STATUS_OK
Close 13262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13276 NT_STATUS_OK
Close 13276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13291 NT_STATUS_OK
Close 13291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13295 NT_STATUS_OK
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13300 NT_STATUS_OK
Close 13300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13305 NT_STATUS_OK
Close 13305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13308 NT_STATUS_OK
Close 13308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13310 NT_STATUS_OK
Close 13310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
Close 13322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
Close 13323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13334 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 4096 4096 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13367 0 4096 4096 NT_STATUS_OK
Close 13367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13368 NT_STATUS_OK
ReadX 13368 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 4096 4096 NT_STATUS_OK
ReadX 13369 4096 4096 4096 NT_STATUS_OK
ReadX 13369 8192 4096 4096 NT_STATUS_OK
ReadX 13369 12288 4096 4096 NT_STATUS_OK
ReadX 13369 16384 4096 4096 NT_STATUS_OK
ReadX 13369 20480 4096 4096 NT_STATUS_OK
ReadX 13369 24576 4096 4096 NT_STATUS_OK
ReadX 13369 28672 4096 4096 NT_STATUS_OK
ReadX 13369 32768 4096 4096 NT_STATUS_OK
ReadX 13369 36864 4096 4096 NT_STATUS_OK
ReadX 13369 40960 4096 4096 NT_STATUS_OK
ReadX 13369 45056 4096 4096 NT_STATUS_OK
ReadX 13369 49152 4096 4096 NT_STATUS_OK
ReadX 13369 53248 4096 4096 NT_STATUS_OK
ReadX 13369 57344 4096 4096 NT_STATUS_OK
ReadX 13369 61440 4096 4096 NT_STATUS_OK
ReadX 13369 65536 4096 4096 NT_STATUS_OK
ReadX 13369 69632 4096 4096 NT_STATUS_OK
ReadX 13369 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13369 1004 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
Close 13369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13370 NT_STATUS_OK
SET_FILE_INFORMATION 13370 1004 NT_STATUS_OK
Close 13370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13375 NT_STATUS_OK
WriteX 13375 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 258 NT_STATUS_OK
WriteX 13375 0 65536 65536 NT_STATUS_OK
WriteX 13375 65536 19979 19979 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13376 NT_STATUS_OK
ReadX 13376 0 4096 4096 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 1004 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
Close 13376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13377 NT_STATUS_OK
ReadX 13377 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13378 NT_STATUS_OK
ReadX 13378 0 4096 4096 NT_STATUS_OK
Close 13377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13379 NT_STATUS_OK
ReadX 13379 0 4096 4096 NT_STATUS_OK
Close 13379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
Close 13380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13382 NT_STATUS_OK
Close 13382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13384 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13387 NT_STATUS_OK
WriteX 13387 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13387 258 NT_STATUS_OK
WriteX 13387 0 65536 65536 NT_STATUS_OK
WriteX 13387 65536 17654 17654 NT_STATUS_OK
Close 13387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Flush 13388 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Flush 13388 NT_STATUS_OK
QUERY_FILE_INFORMATION 13388 1004 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Flush 13388 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Flush 13388 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Flush 13388 NT_STATUS_OK
SET_FILE_INFORMATION 13388 1004 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Flush 13388 NT_STATUS_OK
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13389 NT_STATUS_OK
SET_FILE_INFORMATION 13389 1004 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
ReadX 13393 4096 4096 4096 NT_STATUS_OK
ReadX 13393 8192 4096 4096 NT_STATUS_OK
ReadX 13393 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13393 16384 4096 4096 NT_STATUS_OK
ReadX 13393 20480 4096 4096 NT_STATUS_OK
ReadX 13393 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
Close 13394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13395 NT_STATUS_OK
ReadX 13395 0 4096 4096 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13397 NT_STATUS_OK
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13396 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13399 NT_STATUS_OK
Close 13399 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13402 NT_STATUS_OK
WriteX 13402 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13402 258 NT_STATUS_OK
WriteX 13402 0 65536 65536 NT_STATUS_OK
WriteX 13402 65536 19490 19490 NT_STATUS_OK
Close 13402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13403 NT_STATUS_OK
ReadX 13403 0 4096 4096 NT_STATUS_OK
WriteX 13403 0 4096 4096 NT_STATUS_OK
Flush 13403 NT_STATUS_OK
WriteX 13403 0 4096 4096 NT_STATUS_OK
Flush 13403 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1004 NT_STATUS_OK
WriteX 13403 0 4096 4096 NT_STATUS_OK
Flush 13403 NT_STATUS_OK
WriteX 13403 0 4096 4096 NT_STATUS_OK
Flush 13403 NT_STATUS_OK
WriteX 13403 0 4096 4096 NT_STATUS_OK
Flush 13403 NT_STATUS_OK
SET_FILE_INFORMATION 13403 1004 NT_STATUS_OK
WriteX 13403 0 4096 4096 NT_STATUS_OK
Flush 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13404 NT_STATUS_OK
SET_FILE_INFORMATION 13404 1004 NT_STATUS_OK
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13408 0 4096 4096 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
ReadX 13410 4096 4096 4096 NT_STATUS_OK
ReadX 13410 8192 4096 4096 NT_STATUS_OK
ReadX 13410 12288 4096 4096 NT_STATUS_OK
ReadX 13410 16384 4096 4096 NT_STATUS_OK
ReadX 13410 20480 4096 4096 NT_STATUS_OK
ReadX 13410 24576 4096 4096 NT_STATUS_OK
ReadX 13410 28672 4096 4096 NT_STATUS_OK
ReadX 13410 32768 4096 4096 NT_STATUS_OK
ReadX 13410 36864 4096 4096 NT_STATUS_OK
ReadX 13410 40960 4096 4096 NT_STATUS_OK
ReadX 13410 45056 4096 4096 NT_STATUS_OK
ReadX 13410 49152 4096 4096 NT_STATUS_OK
ReadX 13410 53248 4096 4096 NT_STATUS_OK
ReadX 13410 57344 4096 4096 NT_STATUS_OK
ReadX 13410 61440 4096 4096 NT_STATUS_OK
ReadX 13410 65536 4096 4096 NT_STATUS_OK
ReadX 13410 69632 4096 4096 NT_STATUS_OK
ReadX 13410 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13410 1004 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13411 NT_STATUS_OK
SET_FILE_INFORMATION 13411 1004 NT_STATUS_OK
Close 13411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13413 NT_STATUS_OK
Close 13413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13416 NT_STATUS_OK
WriteX 13416 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 258 NT_STATUS_OK
WriteX 13416 0 65536 65536 NT_STATUS_OK
WriteX 13416 65536 8866 8866 NT_STATUS_OK
Close 13416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
WriteX 13417 0 4096 4096 NT_STATUS_OK
Flush 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13417 1004 NT_STATUS_OK
WriteX 13417 0 4096 4096 NT_STATUS_OK
Flush 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
Close 13419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13422 NT_STATUS_OK
Close 13422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13424 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13427 NT_STATUS_OK
WriteX 13427 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13427 258 NT_STATUS_OK
WriteX 13427 0 65536 65536 NT_STATUS_OK
WriteX 13427 65536 9298 9298 NT_STATUS_OK
Close 13427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 4096 4096 NT_STATUS_OK
WriteX 13428 0 4096 4096 NT_STATUS_OK
Flush 13428 NT_STATUS_OK
SET_FILE_INFORMATION 13428 1004 NT_STATUS_OK
WriteX 13428 0 4096 4096 NT_STATUS_OK
Flush 13428 NT_STATUS_OK
Close 13428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13429 NT_STATUS_OK
SET_FILE_INFORMATION 13429 1004 NT_STATUS_OK
Close 13429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13434 0 4096 4096 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13435 4096 4096 4096 NT_STATUS_OK
ReadX 13435 8192 4096 4096 NT_STATUS_OK
ReadX 13435 12288 4096 4096 NT_STATUS_OK
ReadX 13435 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 4096 4096 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13438 1004 NT_STATUS_OK
WriteX 13438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13435 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13441 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13444 NT_STATUS_OK
WriteX 13444 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13444 258 NT_STATUS_OK
WriteX 13444 0 65536 65536 NT_STATUS_OK
WriteX 13444 65536 11540 11540 NT_STATUS_OK
Close 13444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
WriteX 13445 0 4096 4096 NT_STATUS_OK
Flush 13445 NT_STATUS_OK
SET_FILE_INFORMATION 13445 1004 NT_STATUS_OK
WriteX 13445 0 4096 4096 NT_STATUS_OK
Flush 13445 NT_STATUS_OK
Close 13445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13446 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
Close 13446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 61440 4096 4096 NT_STATUS_OK
ReadX 13450 126976 4096 4096 NT_STATUS_OK
WriteX 13450 0 65536 65536 NT_STATUS_OK
WriteX 13450 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 61440 4096 4096 NT_STATUS_OK
ReadX 13451 126976 4096 4096 NT_STATUS_OK
ReadX 13451 192512 4096 4096 NT_STATUS_OK
ReadX 13451 258048 4096 4096 NT_STATUS_OK
WriteX 13451 0 65536 65536 NT_STATUS_OK
WriteX 13451 65536 65536 65536 NT_STATUS_OK
WriteX 13451 131072 65536 65536 NT_STATUS_OK
WriteX 13451 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 61440 4096 4096 NT_STATUS_OK
ReadX 13452 126976 4096 4096 NT_STATUS_OK
ReadX 13452 192512 4096 4096 NT_STATUS_OK
ReadX 13452 258048 4096 4096 NT_STATUS_OK
ReadX 13452 323584 4096 4096 NT_STATUS_OK
ReadX 13452 389120 4096 4096 NT_STATUS_OK
ReadX 13452 454656 4096 4096 NT_STATUS_OK
ReadX 13452 520192 4096 4096 NT_STATUS_OK
WriteX 13452 0 65536 65536 NT_STATUS_OK
WriteX 13452 65536 65536 65536 NT_STATUS_OK
WriteX 13452 131072 65536 65536 NT_STATUS_OK
WriteX 13452 196608 65536 65536 NT_STATUS_OK
WriteX 13452 262144 65536 65536 NT_STATUS_OK
WriteX 13452 327680 65536 65536 NT_STATUS_OK
WriteX 13452 393216 65536 65536 NT_STATUS_OK
WriteX 13452 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
ReadX 13453 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13454 NT_STATUS_OK
WriteX 13454 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13454 258 NT_STATUS_OK
WriteX 13454 0 53 53 NT_STATUS_OK
Close 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13455 NT_STATUS_OK
Close 13455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13453 8192 4096 4096 NT_STATUS_OK
ReadX 13453 12288 4096 4096 NT_STATUS_OK
WriteX 13457 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13457 258 NT_STATUS_OK
ReadX 13453 16384 4096 4096 NT_STATUS_OK
ReadX 13453 20480 4096 4096 NT_STATUS_OK
WriteX 13457 0 15360 15360 NT_STATUS_OK
Close 13457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 4096 4096 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13461 NT_STATUS_OK
ReadX 13461 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13462 NT_STATUS_OK
Close 13462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13461 4096 4096 4096 NT_STATUS_OK
ReadX 13461 8192 4096 4096 NT_STATUS_OK
ReadX 13461 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 0 4096 4096 NT_STATUS_OK
ReadX 13464 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 0 4096 4096 NT_STATUS_OK
ReadX 13465 4096 4096 4096 NT_STATUS_OK
ReadX 13465 8192 4096 4096 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13466 NT_STATUS_OK
WriteX 13466 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13466 258 NT_STATUS_OK
WriteX 13466 0 15360 15360 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13467 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13467 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13471 NT_STATUS_OK
SET_FILE_INFORMATION 13471 1004 NT_STATUS_OK
Close 13471 NT_STATUS_OK
WriteX 13467 0 4096 4096 NT_STATUS_OK
Close 13467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13472 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 4096 4096 NT_STATUS_OK
ReadX 13474 4096 4096 4096 NT_STATUS_OK
ReadX 13474 8192 4096 4096 NT_STATUS_OK
ReadX 13474 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13474 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13474 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13476 NT_STATUS_OK
WriteX 13476 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 258 NT_STATUS_OK
WriteX 13476 0 53 53 NT_STATUS_OK
Close 13476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13475 4096 4096 4096 NT_STATUS_OK
ReadX 13475 8192 4096 4096 NT_STATUS_OK
ReadX 13475 12288 4096 4096 NT_STATUS_OK
WriteX 13479 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
WriteX 13479 0 12006 12006 NT_STATUS_OK
Close 13479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13480 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13480 1004 NT_STATUS_OK
WriteX 13480 0 4096 4096 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13484 NT_STATUS_OK
Close 13484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13483 4096 4096 4096 NT_STATUS_OK
ReadX 13483 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13486 NT_STATUS_OK
WriteX 13486 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13486 258 NT_STATUS_OK
WriteX 13486 0 11991 11991 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13491 NT_STATUS_OK
SET_FILE_INFORMATION 13491 1004 NT_STATUS_OK
Close 13491 NT_STATUS_OK
WriteX 13487 0 4096 4096 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13494 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
ReadX 13494 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
Close 13470 NT_STATUS_OK
WriteX 13474 0 19054 19054 NT_STATUS_OK
WriteX 13494 0 12288 12288 NT_STATUS_OK
Close 13490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 61440 61440 NT_STATUS_OK
ReadX 13501 61440 4096 4096 NT_STATUS_OK
ReadX 13501 65536 61440 61440 NT_STATUS_OK
ReadX 13501 126976 4096 4096 NT_STATUS_OK
ReadX 13501 131072 61440 61440 NT_STATUS_OK
ReadX 13501 192512 4096 4096 NT_STATUS_OK
ReadX 13501 196608 61440 61440 NT_STATUS_OK
ReadX 13501 258048 4096 4096 NT_STATUS_OK
ReadX 13501 262144 61440 61440 NT_STATUS_OK
ReadX 13501 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 61440 61440 NT_STATUS_OK
ReadX 13502 61440 4096 4096 NT_STATUS_OK
ReadX 13502 65536 61440 61440 NT_STATUS_OK
ReadX 13502 126976 4096 4096 NT_STATUS_OK
ReadX 13502 131072 61440 61440 NT_STATUS_OK
ReadX 13502 192512 4096 4096 NT_STATUS_OK
ReadX 13502 196608 61440 61440 NT_STATUS_OK
ReadX 13502 258048 4096 4096 NT_STATUS_OK
ReadX 13502 262144 61440 61440 NT_STATUS_OK
ReadX 13502 323584 4096 4096 NT_STATUS_OK
ReadX 13502 327680 61440 61440 NT_STATUS_OK
ReadX 13502 389120 4096 4096 NT_STATUS_OK
ReadX 13502 393216 61440 61440 NT_STATUS_OK
ReadX 13502 454656 4096 4096 NT_STATUS_OK
ReadX 13502 458752 61440 61440 NT_STATUS_OK
ReadX 13502 520192 4096 4096 NT_STATUS_OK
ReadX 13502 524288 61440 61440 NT_STATUS_OK
ReadX 13502 585728 4096 4096 NT_STATUS_OK
ReadX 13502 589824 61440 61440 NT_STATUS_OK
ReadX 13502 651264 4096 4096 NT_STATUS_OK
ReadX 13502 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 61440 61440 NT_STATUS_OK
ReadX 13503 61440 4096 4096 NT_STATUS_OK
ReadX 13503 65536 61440 61440 NT_STATUS_OK
ReadX 13503 126976 4096 4096 NT_STATUS_OK
ReadX 13503 131072 61440 61440 NT_STATUS_OK
ReadX 13503 192512 4096 4096 NT_STATUS_OK
ReadX 13503 196608 61440 61440 NT_STATUS_OK
ReadX 13503 258048 4096 4096 NT_STATUS_OK
ReadX 13503 262144 61440 61440 NT_STATUS_OK
ReadX 13503 323584 4096 4096 NT_STATUS_OK
ReadX 13503 327680 61440 61440 NT_STATUS_OK
ReadX 13503 389120 4096 4096 NT_STATUS_OK
ReadX 13503 393216 61440 61440 NT_STATUS_OK
ReadX 13503 454656 4096 4096 NT_STATUS_OK
ReadX 13503 458752 61440 61440 NT_STATUS_OK
ReadX 13503 520192 4096 4096 NT_STATUS_OK
ReadX 13503 524288 61440 61440 NT_STATUS_OK
ReadX 13503 585728 4096 4096 NT_STATUS_OK
ReadX 13503 589824 61440 61440 NT_STATUS_OK
ReadX 13503 651264 4096 4096 NT_STATUS_OK
ReadX 13503 655360 61440 61440 NT_STATUS_OK
ReadX 13503 716800 4096 4096 NT_STATUS_OK
ReadX 13503 720896 61440 61440 NT_STATUS_OK
ReadX 13503 782336 4096 4096 NT_STATUS_OK
ReadX 13503 786432 61440 61440 NT_STATUS_OK
ReadX 13503 847872 4096 4096 NT_STATUS_OK
ReadX 13503 851968 61440 61440 NT_STATUS_OK
ReadX 13503 913408 4096 4096 NT_STATUS_OK
ReadX 13503 917504 61440 61440 NT_STATUS_OK
ReadX 13503 978944 4096 4096 NT_STATUS_OK
ReadX 13503 983040 61440 61440 NT_STATUS_OK
ReadX 13503 1044480 4096 4096 NT_STATUS_OK
ReadX 13503 1048576 61440 61440 NT_STATUS_OK
ReadX 13503 1110016 4096 4096 NT_STATUS_OK
ReadX 13503 1114112 61440 61440 NT_STATUS_OK
ReadX 13503 1175552 4096 4096 NT_STATUS_OK
ReadX 13503 1179648 61440 61440 NT_STATUS_OK
ReadX 13503 1241088 4096 4096 NT_STATUS_OK
ReadX 13503 1245184 61440 61440 NT_STATUS_OK
ReadX 13503 1306624 4096 4096 NT_STATUS_OK
ReadX 13503 1310720 61440 61440 NT_STATUS_OK
ReadX 13503 1372160 4096 4096 NT_STATUS_OK
ReadX 13503 1376256 61440 61440 NT_STATUS_OK
ReadX 13503 1437696 4096 4096 NT_STATUS_OK
ReadX 13503 1441792 61440 61440 NT_STATUS_OK
ReadX 13503 1503232 4096 4096 NT_STATUS_OK
ReadX 13503 1507328 61440 61440 NT_STATUS_OK
ReadX 13503 1568768 4096 4096 NT_STATUS_OK
ReadX 13503 1572864 61440 61440 NT_STATUS_OK
ReadX 13503 1634304 4096 4096 NT_STATUS_OK
ReadX 13503 1638400 61440 61440 NT_STATUS_OK
ReadX 13503 1699840 4096 4096 NT_STATUS_OK
ReadX 13503 1703936 61440 61440 NT_STATUS_OK
ReadX 13503 1765376 4096 4096 NT_STATUS_OK
ReadX 13503 1769472 61440 61440 NT_STATUS_OK
ReadX 13503 1830912 4096 4096 NT_STATUS_OK
ReadX 13503 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1004 NT_STATUS_OK
WriteX 13510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13512 NT_STATUS_OK
WriteX 13512 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13512 258 NT_STATUS_OK
WriteX 13512 0 491 491 NT_STATUS_OK
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13513 NT_STATUS_OK
ReadX 13513 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13510 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13516 NT_STATUS_OK
WriteX 13516 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13516 258 NT_STATUS_OK
WriteX 13516 0 543 543 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Close 13506 NT_STATUS_OK
Close 13507 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
Close 13530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
Flush 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13536 NT_STATUS_OK
WriteX 13536 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 258 NT_STATUS_OK
WriteX 13536 0 2048 2048 NT_STATUS_OK
Close 13536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13542 NT_STATUS_OK
WriteX 13542 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 258 NT_STATUS_OK
WriteX 13542 0 2048 2048 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 2048 2048 NT_STATUS_OK
ReadX 13521 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13521 0 8192 8192 NT_STATUS_OK
WriteX 13522 0 4096 4096 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13547 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13546 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
WriteX 13567 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 258 NT_STATUS_OK
WriteX 13567 0 2048 2048 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13575 NT_STATUS_OK
QUERY_FILE_INFORMATION 13575 1004 NT_STATUS_OK
WriteX 13575 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13575 258 NT_STATUS_OK
WriteX 13575 0 2048 2048 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13576 0 4096 4096 NT_STATUS_OK
Flush 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13576 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13570 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13577 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13578 NT_STATUS_OK
WriteX 13578 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13578 258 NT_STATUS_OK
WriteX 13578 0 4096 4096 NT_STATUS_OK
Close 13578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13580 NT_STATUS_OK
Close 13580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13581 NT_STATUS_OK
WriteX 13581 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13581 258 NT_STATUS_OK
WriteX 13581 0 4096 4096 NT_STATUS_OK
Close 13581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13582 0 4096 4096 NT_STATUS_OK
Close 13579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13585 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13589 NT_STATUS_OK
WriteX 13589 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13589 258 NT_STATUS_OK
WriteX 13589 0 2048 2048 NT_STATUS_OK
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13591 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13592 NT_STATUS_OK
ReadX 13592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13593 NT_STATUS_OK
ReadX 13593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13603 NT_STATUS_OK
ReadX 13603 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13604 NT_STATUS_OK
QUERY_FILE_INFORMATION 13604 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Close 13602 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13598 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Close 13592 NT_STATUS_OK
Close 13595 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13606 NT_STATUS_OK
QUERY_FILE_INFORMATION 13606 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13609 NT_STATUS_OK
ReadX 13609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13611 NT_STATUS_OK
ReadX 13611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13612 NT_STATUS_OK
ReadX 13612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13626 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 258 NT_STATUS_OK
WriteX 13626 0 2048 2048 NT_STATUS_OK
Close 13626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13627 NT_STATUS_OK
ReadX 13627 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13638 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 1004 NT_STATUS_OK
WriteX 13638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 258 NT_STATUS_OK
WriteX 13638 0 2048 2048 NT_STATUS_OK
Close 13638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13646 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1004 NT_STATUS_OK
WriteX 13646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 2048 2048 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13627 0 4096 4096 NT_STATUS_OK
Flush 13627 NT_STATUS_OK
WriteX 13639 0 4096 4096 NT_STATUS_OK
Flush 13639 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
Flush 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13627 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13639 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13629 4096 16384 16384 NT_STATUS_OK
ReadX 13609 4096 16384 16384 NT_STATUS_OK
ReadX 13641 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13649 NT_STATUS_OK
ReadX 13649 0 2048 2048 NT_STATUS_OK
WriteX 13649 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13650 NT_STATUS_OK
QUERY_FILE_INFORMATION 13650 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13609 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Close 13611 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13652 NT_STATUS_OK
QUERY_FILE_INFORMATION 13652 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13654 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13661 NT_STATUS_OK
ReadX 13661 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13657 4096 16384 16384 NT_STATUS_OK
WriteX 13657 0 4096 4096 NT_STATUS_OK
WriteX 13658 0 4096 4096 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
WriteX 13660 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13668 NT_STATUS_OK
ReadX 13668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13669 NT_STATUS_OK
ReadX 13669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13670 NT_STATUS_OK
ReadX 13670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13671 NT_STATUS_OK
ReadX 13671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13672 NT_STATUS_OK
ReadX 13672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13673 NT_STATUS_OK
ReadX 13673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13675 NT_STATUS_OK
ReadX 13675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 8192 8192 NT_STATUS_OK
ReadX 13663 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13677 0 4096 4096 NT_STATUS_OK
ReadX 13677 4096 4096 4096 NT_STATUS_OK
ReadX 13677 8192 4096 4096 NT_STATUS_OK
WriteX 13663 0 4096 4096 NT_STATUS_OK
WriteX 13664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13678 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
ReadX 13678 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13657 0 4096 4096 NT_STATUS_OK
WriteX 13658 0 4096 4096 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
WriteX 13660 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13683 NT_STATUS_OK
QUERY_FILE_INFORMATION 13683 1004 NT_STATUS_OK
WriteX 13683 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13683 258 NT_STATUS_OK
WriteX 13683 0 2048 2048 NT_STATUS_OK
Close 13683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13684 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13685 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
ReadX 13686 4096 4096 4096 NT_STATUS_OK
WriteX 13686 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13684 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
ReadX 13688 4096 4096 4096 NT_STATUS_OK
WriteX 13688 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13689 NT_STATUS_OK
QUERY_FILE_INFORMATION 13689 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13676 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Close 13670 NT_STATUS_OK
Close 13671 NT_STATUS_OK
Close 13672 NT_STATUS_OK
Close 13673 NT_STATUS_OK
Close 13675 NT_STATUS_OK
Close 13663 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13667 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Close 13665 NT_STATUS_OK
Close 13666 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13691 0 4096 4096 NT_STATUS_OK
ReadX 13691 4096 4096 4096 NT_STATUS_OK
ReadX 13691 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13692 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13699 NT_STATUS_OK
ReadX 13699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13700 NT_STATUS_OK
ReadX 13700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13701 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13702 NT_STATUS_OK
ReadX 13702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
ReadX 13692 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13709 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 1004 NT_STATUS_OK
WriteX 13709 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 258 NT_STATUS_OK
WriteX 13709 0 2048 2048 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13710 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13715 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 1004 NT_STATUS_OK
WriteX 13715 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 258 NT_STATUS_OK
WriteX 13715 0 2048 2048 NT_STATUS_OK
Close 13715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13716 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13699 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13717 NT_STATUS_OK
QUERY_FILE_INFORMATION 13717 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Close 13699 NT_STATUS_OK
Close 13700 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Close 13702 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13719 NT_STATUS_OK
QUERY_FILE_INFORMATION 13719 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 61440 4096 4096 NT_STATUS_OK
ReadX 13721 126976 4096 4096 NT_STATUS_OK
WriteX 13721 0 65536 65536 NT_STATUS_OK
WriteX 13721 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13722 NT_STATUS_OK
ReadX 13722 61440 4096 4096 NT_STATUS_OK
ReadX 13722 126976 4096 4096 NT_STATUS_OK
ReadX 13722 192512 4096 4096 NT_STATUS_OK
ReadX 13722 258048 4096 4096 NT_STATUS_OK
WriteX 13722 0 65536 65536 NT_STATUS_OK
WriteX 13722 65536 65536 65536 NT_STATUS_OK
WriteX 13722 131072 65536 65536 NT_STATUS_OK
WriteX 13722 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 61440 4096 4096 NT_STATUS_OK
ReadX 13723 126976 4096 4096 NT_STATUS_OK
ReadX 13723 192512 4096 4096 NT_STATUS_OK
ReadX 13723 258048 4096 4096 NT_STATUS_OK
ReadX 13723 323584 4096 4096 NT_STATUS_OK
ReadX 13723 389120 4096 4096 NT_STATUS_OK
ReadX 13723 454656 4096 4096 NT_STATUS_OK
ReadX 13723 520192 4096 4096 NT_STATUS_OK
WriteX 13723 0 65536 65536 NT_STATUS_OK
WriteX 13723 65536 65536 65536 NT_STATUS_OK
WriteX 13723 131072 65536 65536 NT_STATUS_OK
WriteX 13723 196608 65536 65536 NT_STATUS_OK
WriteX 13723 262144 65536 65536 NT_STATUS_OK
WriteX 13723 327680 65536 65536 NT_STATUS_OK
WriteX 13723 393216 65536 65536 NT_STATUS_OK
WriteX 13723 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13724 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13724 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13724 8192 4096 4096 NT_STATUS_OK
ReadX 13724 12288 4096 4096 NT_STATUS_OK
ReadX 13724 16384 4096 4096 NT_STATUS_OK
ReadX 13724 20480 4096 4096 NT_STATUS_OK
ReadX 13724 24576 4096 4096 NT_STATUS_OK
ReadX 13724 28672 4096 4096 NT_STATUS_OK
ReadX 13724 32768 4096 4096 NT_STATUS_OK
ReadX 13724 36864 4096 4096 NT_STATUS_OK
ReadX 13724 40960 4096 4096 NT_STATUS_OK
ReadX 13724 45056 4096 4096 NT_STATUS_OK
ReadX 13724 49152 4096 4096 NT_STATUS_OK
ReadX 13724 53248 4096 4096 NT_STATUS_OK
ReadX 13724 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13724 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13725 NT_STATUS_OK
Close 13725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13722 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13727 NT_STATUS_OK
WriteX 13727 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13727 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13727 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13727 1004 NT_STATUS_OK
WriteX 13727 0 57088 57088 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
Close 13724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13728 NT_STATUS_OK
SET_FILE_INFORMATION 13728 1004 NT_STATUS_OK
Close 13728 NT_STATUS_OK
SET_FILE_INFORMATION 13727 1004 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Close 13727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13731 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13732 NT_STATUS_OK
WriteX 13732 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13732 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13732 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13732 1004 NT_STATUS_OK
WriteX 13732 0 51456 51456 NT_STATUS_OK
WriteX 13732 0 4096 4096 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
SET_FILE_INFORMATION 13732 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13732 1004 NT_STATUS_OK
WriteX 13732 0 4096 4096 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13736 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13741 NT_STATUS_OK
WriteX 13741 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13741 258 NT_STATUS_OK
WriteX 13741 0 53077 53077 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13742 NT_STATUS_OK
WriteX 13742 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13742 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13742 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13742 1004 NT_STATUS_OK
WriteX 13742 0 65536 65536 NT_STATUS_OK
WriteX 13742 65536 1856 1856 NT_STATUS_OK
WriteX 13742 0 4096 4096 NT_STATUS_OK
Flush 13742 NT_STATUS_OK
SET_FILE_INFORMATION 13742 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13742 1004 NT_STATUS_OK
WriteX 13742 0 4096 4096 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13744 NT_STATUS_OK
Close 13744 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13746 NT_STATUS_OK
ReadX 13746 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13748 NT_STATUS_OK
Close 13748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13751 NT_STATUS_OK
WriteX 13751 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13751 258 NT_STATUS_OK
WriteX 13751 0 7983 7983 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13753 NT_STATUS_OK
Close 13753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13756 NT_STATUS_OK
WriteX 13756 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13756 258 NT_STATUS_OK
WriteX 13756 0 65536 65536 NT_STATUS_OK
WriteX 13756 65536 65536 65536 NT_STATUS_OK
WriteX 13756 131072 65536 65536 NT_STATUS_OK
WriteX 13756 196608 65536 65536 NT_STATUS_OK
WriteX 13756 262144 65536 65536 NT_STATUS_OK
WriteX 13756 327680 65536 65536 NT_STATUS_OK
WriteX 13756 393216 65536 65536 NT_STATUS_OK
WriteX 13756 458752 46731 46731 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13757 NT_STATUS_OK
WriteX 13757 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13746 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13757 1004 NT_STATUS_OK
WriteX 13757 0 65536 65536 NT_STATUS_OK
WriteX 13757 65536 22848 22848 NT_STATUS_OK
WriteX 13757 0 4096 4096 NT_STATUS_OK
Flush 13757 NT_STATUS_OK
SET_FILE_INFORMATION 13757 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13757 1004 NT_STATUS_OK
WriteX 13757 0 4096 4096 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13761 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13762 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
ReadX 13762 8192 4096 4096 NT_STATUS_OK
ReadX 13762 12288 4096 4096 NT_STATUS_OK
ReadX 13762 16384 4096 4096 NT_STATUS_OK
ReadX 13762 20480 4096 4096 NT_STATUS_OK
ReadX 13762 24576 4096 4096 NT_STATUS_OK
ReadX 13762 28672 4096 4096 NT_STATUS_OK
ReadX 13762 32768 4096 4096 NT_STATUS_OK
ReadX 13762 36864 4096 4096 NT_STATUS_OK
ReadX 13762 40960 4096 4096 NT_STATUS_OK
ReadX 13762 45056 4096 4096 NT_STATUS_OK
ReadX 13762 49152 4096 4096 NT_STATUS_OK
ReadX 13762 53248 4096 4096 NT_STATUS_OK
ReadX 13762 57344 4096 4096 NT_STATUS_OK
ReadX 13762 61440 4096 4096 NT_STATUS_OK
ReadX 13762 65536 4096 4096 NT_STATUS_OK
ReadX 13762 69632 4096 4096 NT_STATUS_OK
ReadX 13762 73728 4096 4096 NT_STATUS_OK
ReadX 13762 77824 4096 4096 NT_STATUS_OK
ReadX 13762 81920 4096 4096 NT_STATUS_OK
ReadX 13762 86016 4096 4096 NT_STATUS_OK
ReadX 13762 90112 4096 4096 NT_STATUS_OK
ReadX 13762 94208 4096 4096 NT_STATUS_OK
ReadX 13762 98304 4096 4096 NT_STATUS_OK
ReadX 13762 102400 4096 4096 NT_STATUS_OK
ReadX 13762 106496 4096 4096 NT_STATUS_OK
ReadX 13762 110592 4096 4096 NT_STATUS_OK
ReadX 13762 114688 4096 4096 NT_STATUS_OK
ReadX 13762 118784 4096 4096 NT_STATUS_OK
ReadX 13762 122880 4096 4096 NT_STATUS_OK
ReadX 13762 126976 4096 4096 NT_STATUS_OK
ReadX 13762 131072 4096 4096 NT_STATUS_OK
ReadX 13762 135168 4096 4096 NT_STATUS_OK
ReadX 13762 139264 4096 4096 NT_STATUS_OK
ReadX 13762 143360 4096 4096 NT_STATUS_OK
ReadX 13762 147456 4096 4096 NT_STATUS_OK
ReadX 13762 151552 4096 4096 NT_STATUS_OK
ReadX 13762 155648 4096 4096 NT_STATUS_OK
ReadX 13762 159744 4096 4096 NT_STATUS_OK
ReadX 13762 163840 4096 4096 NT_STATUS_OK
ReadX 13762 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13762 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13765 NT_STATUS_OK
WriteX 13765 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13765 258 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13766 NT_STATUS_OK
SET_FILE_INFORMATION 13766 1004 NT_STATUS_OK
Close 13766 NT_STATUS_OK
WriteX 13765 0 42388 42388 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
ReadX 13769 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13770 NT_STATUS_OK
WriteX 13770 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 258 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 42652 42652 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Close 13769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
ReadX 13774 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13779 NT_STATUS_OK
WriteX 13779 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13779 258 NT_STATUS_OK
WriteX 13779 0 65536 65536 NT_STATUS_OK
WriteX 13779 65536 49 49 NT_STATUS_OK
Close 13779 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 61440 61440 NT_STATUS_OK
ReadX 13780 61440 4096 4096 NT_STATUS_OK
ReadX 13780 65536 61440 61440 NT_STATUS_OK
ReadX 13780 126976 4096 4096 NT_STATUS_OK
ReadX 13780 131072 61440 61440 NT_STATUS_OK
ReadX 13780 192512 4096 4096 NT_STATUS_OK
ReadX 13780 196608 61440 61440 NT_STATUS_OK
ReadX 13780 258048 4096 4096 NT_STATUS_OK
ReadX 13780 262144 61440 61440 NT_STATUS_OK
ReadX 13780 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 61440 61440 NT_STATUS_OK
ReadX 13781 61440 4096 4096 NT_STATUS_OK
ReadX 13781 65536 61440 61440 NT_STATUS_OK
ReadX 13781 126976 4096 4096 NT_STATUS_OK
ReadX 13781 131072 61440 61440 NT_STATUS_OK
ReadX 13781 192512 4096 4096 NT_STATUS_OK
ReadX 13781 196608 61440 61440 NT_STATUS_OK
ReadX 13781 258048 4096 4096 NT_STATUS_OK
ReadX 13781 262144 61440 61440 NT_STATUS_OK
ReadX 13781 323584 4096 4096 NT_STATUS_OK
ReadX 13781 327680 61440 61440 NT_STATUS_OK
ReadX 13781 389120 4096 4096 NT_STATUS_OK
ReadX 13781 393216 61440 61440 NT_STATUS_OK
ReadX 13781 454656 4096 4096 NT_STATUS_OK
ReadX 13781 458752 61440 61440 NT_STATUS_OK
ReadX 13781 520192 4096 4096 NT_STATUS_OK
ReadX 13781 524288 61440 61440 NT_STATUS_OK
ReadX 13781 585728 4096 4096 NT_STATUS_OK
ReadX 13781 589824 61440 61440 NT_STATUS_OK
ReadX 13781 651264 4096 4096 NT_STATUS_OK
ReadX 13781 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 61440 61440 NT_STATUS_OK
ReadX 13782 61440 4096 4096 NT_STATUS_OK
ReadX 13782 65536 61440 61440 NT_STATUS_OK
ReadX 13782 126976 4096 4096 NT_STATUS_OK
ReadX 13782 131072 61440 61440 NT_STATUS_OK
ReadX 13782 192512 4096 4096 NT_STATUS_OK
ReadX 13782 196608 61440 61440 NT_STATUS_OK
ReadX 13782 258048 4096 4096 NT_STATUS_OK
ReadX 13782 262144 61440 61440 NT_STATUS_OK
ReadX 13782 323584 4096 4096 NT_STATUS_OK
ReadX 13782 327680 61440 61440 NT_STATUS_OK
ReadX 13782 389120 4096 4096 NT_STATUS_OK
ReadX 13782 393216 61440 61440 NT_STATUS_OK
ReadX 13782 454656 4096 4096 NT_STATUS_OK
ReadX 13782 458752 61440 61440 NT_STATUS_OK
ReadX 13782 520192 4096 4096 NT_STATUS_OK
ReadX 13782 524288 61440 61440 NT_STATUS_OK
ReadX 13782 585728 4096 4096 NT_STATUS_OK
ReadX 13782 589824 61440 61440 NT_STATUS_OK
ReadX 13782 651264 4096 4096 NT_STATUS_OK
ReadX 13782 655360 61440 61440 NT_STATUS_OK
ReadX 13782 716800 4096 4096 NT_STATUS_OK
ReadX 13782 720896 61440 61440 NT_STATUS_OK
ReadX 13782 782336 4096 4096 NT_STATUS_OK
ReadX 13782 786432 61440 61440 NT_STATUS_OK
ReadX 13782 847872 4096 4096 NT_STATUS_OK
ReadX 13782 851968 61440 61440 NT_STATUS_OK
ReadX 13782 913408 4096 4096 NT_STATUS_OK
ReadX 13782 917504 61440 61440 NT_STATUS_OK
ReadX 13782 978944 4096 4096 NT_STATUS_OK
ReadX 13782 983040 61440 61440 NT_STATUS_OK
ReadX 13782 1044480 4096 4096 NT_STATUS_OK
ReadX 13782 1048576 61440 61440 NT_STATUS_OK
ReadX 13782 1110016 4096 4096 NT_STATUS_OK
ReadX 13782 1114112 61440 61440 NT_STATUS_OK
ReadX 13782 1175552 4096 4096 NT_STATUS_OK
ReadX 13782 1179648 61440 61440 NT_STATUS_OK
ReadX 13782 1241088 4096 4096 NT_STATUS_OK
ReadX 13782 1245184 61440 61440 NT_STATUS_OK
ReadX 13782 1306624 4096 4096 NT_STATUS_OK
ReadX 13782 1310720 61440 61440 NT_STATUS_OK
ReadX 13782 1372160 4096 4096 NT_STATUS_OK
ReadX 13782 1376256 61440 61440 NT_STATUS_OK
ReadX 13782 1437696 4096 4096 NT_STATUS_OK
ReadX 13782 1441792 61440 61440 NT_STATUS_OK
ReadX 13782 1503232 4096 4096 NT_STATUS_OK
ReadX 13782 1507328 61440 61440 NT_STATUS_OK
ReadX 13782 1568768 4096 4096 NT_STATUS_OK
ReadX 13782 1572864 61440 61440 NT_STATUS_OK
ReadX 13782 1634304 4096 4096 NT_STATUS_OK
ReadX 13782 1638400 61440 61440 NT_STATUS_OK
ReadX 13782 1699840 4096 4096 NT_STATUS_OK
ReadX 13782 1703936 61440 61440 NT_STATUS_OK
ReadX 13782 1765376 4096 4096 NT_STATUS_OK
ReadX 13782 1769472 61440 61440 NT_STATUS_OK
ReadX 13782 1830912 4096 4096 NT_STATUS_OK
ReadX 13782 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13784 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 1005 NT_STATUS_OK
ReadX 13784 2156 24 24 NT_STATUS_OK
ReadX 13784 2139 276 276 NT_STATUS_OK
ReadX 13784 2136 14 14 NT_STATUS_OK
ReadX 13784 2136 7 7 NT_STATUS_OK
ReadX 13784 2138 12 12 NT_STATUS_OK
ReadX 13784 2137 8 8 NT_STATUS_OK
ReadX 13784 2135 15 15 NT_STATUS_OK
ReadX 13784 0 16 16 NT_STATUS_OK
ReadX 13784 16 2048 2048 NT_STATUS_OK
ReadX 13784 2064 2048 2048 NT_STATUS_OK
ReadX 13784 257 2048 2048 NT_STATUS_OK
ReadX 13784 385 2048 2048 NT_STATUS_OK
ReadX 13784 513 2048 2048 NT_STATUS_OK
ReadX 13784 641 2048 2048 NT_STATUS_OK
ReadX 13784 769 2048 2048 NT_STATUS_OK
ReadX 13784 897 2048 2048 NT_STATUS_OK
ReadX 13784 1025 2048 2048 NT_STATUS_OK
ReadX 13784 1153 2048 2048 NT_STATUS_OK
ReadX 13784 1281 2048 2048 NT_STATUS_OK
ReadX 13784 1409 2048 2048 NT_STATUS_OK
ReadX 13784 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13789 NT_STATUS_OK
WriteX 13789 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13789 258 NT_STATUS_OK
WriteX 13789 0 10575 10575 NT_STATUS_OK
Flush 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13790 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
Close 13784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13794 NT_STATUS_OK
LockX 13794 2147483538 1 NT_STATUS_OK
UnlockX 13794 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13794 1005 NT_STATUS_OK
ReadX 13794 0 512 512 NT_STATUS_OK
ReadX 13794 512 512 512 NT_STATUS_OK
ReadX 13794 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13794 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13794 1004 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13795 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 1005 NT_STATUS_OK
ReadX 13795 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13796 NT_STATUS_OK
LockX 13796 2147483538 1 NT_STATUS_OK
UnlockX 13796 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13796 1005 NT_STATUS_OK
ReadX 13796 0 512 512 NT_STATUS_OK
ReadX 13796 512 512 512 NT_STATUS_OK
ReadX 13796 1024 512 512 NT_STATUS_OK
ReadX 13796 288 20 20 NT_STATUS_OK
ReadX 13796 308 2084 2084 NT_STATUS_OK
ReadX 13796 388 2084 2084 NT_STATUS_OK
ReadX 13796 388 2084 2084 NT_STATUS_OK
ReadX 13783 2157 1386 1386 NT_STATUS_OK
ReadX 13796 2472 399 399 NT_STATUS_OK
ReadX 13796 3072 1536 1536 NT_STATUS_OK
ReadX 13796 544 149 149 NT_STATUS_OK
ReadX 13796 693 485 485 NT_STATUS_OK
Close 13796 NT_STATUS_OK
ReadX 13783 2157 4096 4096 NT_STATUS_OK
ReadX 13783 6253 4096 4096 NT_STATUS_OK
ReadX 13783 10349 4096 4096 NT_STATUS_OK
ReadX 13783 14445 4096 4096 NT_STATUS_OK
ReadX 13783 18541 4096 4096 NT_STATUS_OK
ReadX 13783 22637 256 256 NT_STATUS_OK
ReadX 13783 22893 4096 4096 NT_STATUS_OK
ReadX 13783 26989 4096 4096 NT_STATUS_OK
ReadX 13783 31085 4096 4096 NT_STATUS_OK
ReadX 13783 35181 4096 4096 NT_STATUS_OK
ReadX 13783 39277 4096 4096 NT_STATUS_OK
ReadX 13783 43373 4096 4096 NT_STATUS_OK
ReadX 13783 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13783 2157 1024 1024 NT_STATUS_OK
ReadX 13783 1667 4688 4688 NT_STATUS_OK
ReadX 13783 6355 3516 3516 NT_STATUS_OK
ReadX 13783 9871 16384 16384 NT_STATUS_OK
ReadX 13783 26255 3771 3771 NT_STATUS_OK
ReadX 13783 30026 2048 2048 NT_STATUS_OK
ReadX 13783 32074 1024 1024 NT_STATUS_OK
ReadX 13783 33098 6652 6652 NT_STATUS_OK
ReadX 13783 39750 16384 16384 NT_STATUS_OK
ReadX 13783 56134 10496 10496 NT_STATUS_OK
ReadX 13783 66630 1784 1784 NT_STATUS_OK
ReadX 13783 68414 90 90 NT_STATUS_OK
ReadX 13783 68504 273 273 NT_STATUS_OK
ReadX 13783 68777 1600 1600 NT_STATUS_OK
ReadX 13783 70377 640 640 NT_STATUS_OK
ReadX 13783 71017 1280 1280 NT_STATUS_OK
ReadX 13783 72297 8464 8464 NT_STATUS_OK
ReadX 13783 80761 158 158 NT_STATUS_OK
ReadX 13783 80919 912 912 NT_STATUS_OK
ReadX 13783 81831 1980 1980 NT_STATUS_OK
ReadX 13783 83811 2256 2256 NT_STATUS_OK
ReadX 13783 86067 400 400 NT_STATUS_OK
ReadX 13783 86467 252 252 NT_STATUS_OK
ReadX 13783 86719 42 42 NT_STATUS_OK
ReadX 13783 86761 725 725 NT_STATUS_OK
ReadX 13783 2009 512 512 NT_STATUS_OK
ReadX 13783 3895 9 9 NT_STATUS_OK
ReadX 13783 3781 46 46 NT_STATUS_OK
ReadX 13783 4059 92 92 NT_STATUS_OK
ReadX 13783 3781 92 92 NT_STATUS_OK
ReadX 13783 3986 184 184 NT_STATUS_OK
ReadX 13783 3987 16384 16384 NT_STATUS_OK
ReadX 13783 3902 16384 16384 NT_STATUS_OK
ReadX 13783 3781 10240 10240 NT_STATUS_OK
ReadX 13783 3821 16384 16384 NT_STATUS_OK
ReadX 13783 3891 935 935 NT_STATUS_OK
ReadX 13783 4060 10240 10240 NT_STATUS_OK
ReadX 13783 4059 184 184 NT_STATUS_OK
ReadX 13783 256 184 184 NT_STATUS_OK
ReadX 13783 256 1026 1026 NT_STATUS_OK
ReadX 13783 3901 326 326 NT_STATUS_OK
ReadX 13783 3899 652 652 NT_STATUS_OK
ReadX 13783 256 2 2 NT_STATUS_OK
ReadX 13783 258 4948 4948 NT_STATUS_OK
Close 13783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13801 NT_STATUS_OK
WriteX 13801 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13801 258 NT_STATUS_OK
WriteX 13801 0 65536 65536 NT_STATUS_OK
WriteX 13801 65536 65536 65536 NT_STATUS_OK
WriteX 13801 131072 65536 65536 NT_STATUS_OK
WriteX 13801 196608 65536 65536 NT_STATUS_OK
WriteX 13801 262144 65536 65536 NT_STATUS_OK
WriteX 13801 327680 65536 65536 NT_STATUS_OK
WriteX 13801 393216 65536 65536 NT_STATUS_OK
WriteX 13801 458752 65536 65536 NT_STATUS_OK
WriteX 13801 524288 65536 65536 NT_STATUS_OK
WriteX 13801 589824 35257 35257 NT_STATUS_OK
Close 13801 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13803 NT_STATUS_OK
Close 13803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13806 NT_STATUS_OK
WriteX 13806 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13806 258 NT_STATUS_OK
WriteX 13806 0 65536 65536 NT_STATUS_OK
WriteX 13806 65536 65536 65536 NT_STATUS_OK
WriteX 13806 131072 65536 65536 NT_STATUS_OK
WriteX 13806 196608 65536 65536 NT_STATUS_OK
WriteX 13806 262144 65536 65536 NT_STATUS_OK
WriteX 13806 327680 65536 65536 NT_STATUS_OK
WriteX 13806 393216 65536 65536 NT_STATUS_OK
WriteX 13806 458752 65536 65536 NT_STATUS_OK
WriteX 13806 524288 65536 65536 NT_STATUS_OK
WriteX 13806 589824 57598 57598 NT_STATUS_OK
Close 13806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13808 NT_STATUS_OK
WriteX 13808 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13808 258 NT_STATUS_OK
WriteX 13808 0 12543 12543 NT_STATUS_OK
Flush 13808 NT_STATUS_OK
Close 13808 NT_STATUS_OK
Close 13792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13814 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
ReadX 13814 1938 24 24 NT_STATUS_OK
ReadX 13814 1920 276 276 NT_STATUS_OK
ReadX 13814 1918 14 14 NT_STATUS_OK
ReadX 13814 1918 7 7 NT_STATUS_OK
ReadX 13814 1919 12 12 NT_STATUS_OK
ReadX 13814 1919 8 8 NT_STATUS_OK
ReadX 13814 1917 15 15 NT_STATUS_OK
ReadX 13814 0 16 16 NT_STATUS_OK
ReadX 13814 16 2048 2048 NT_STATUS_OK
ReadX 13814 2064 2048 2048 NT_STATUS_OK
ReadX 13814 257 2048 2048 NT_STATUS_OK
ReadX 13814 385 2048 2048 NT_STATUS_OK
ReadX 13814 513 2048 2048 NT_STATUS_OK
ReadX 13814 641 2048 2048 NT_STATUS_OK
ReadX 13814 769 2048 2048 NT_STATUS_OK
ReadX 13814 897 2048 2048 NT_STATUS_OK
ReadX 13814 1025 2048 2048 NT_STATUS_OK
ReadX 13814 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13819 NT_STATUS_OK
WriteX 13819 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13819 258 NT_STATUS_OK
WriteX 13819 0 11588 11588 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
Close 13819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13822 NT_STATUS_OK
ReadX 13822 0 4096 4096 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13824 NT_STATUS_OK
WriteX 13824 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13824 258 NT_STATUS_OK
WriteX 13824 0 11615 11615 NT_STATUS_OK
Flush 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13826 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13833 NT_STATUS_OK
WriteX 13833 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13833 258 NT_STATUS_OK
WriteX 13833 0 65536 65536 NT_STATUS_OK
WriteX 13833 65536 16050 16050 NT_STATUS_OK
Close 13833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13813 1939 64 64 NT_STATUS_OK
ReadX 13813 128 248 248 NT_STATUS_OK
ReadX 13813 128 568 568 NT_STATUS_OK
ReadX 13813 3872 1536 1536 NT_STATUS_OK
ReadX 13813 3456 2560 2560 NT_STATUS_OK
ReadX 13813 3136 512 512 NT_STATUS_OK
ReadX 13813 2880 4096 4096 NT_STATUS_OK
ReadX 13813 3264 3072 3072 NT_STATUS_OK
ReadX 13813 320 4096 4096 NT_STATUS_OK
ReadX 13813 1024 4096 4096 NT_STATUS_OK
ReadX 13813 3616 4096 4096 NT_STATUS_OK
ReadX 13813 1939 64 64 NT_STATUS_OK
ReadX 13813 128 248 248 NT_STATUS_OK
ReadX 13813 128 608 608 NT_STATUS_OK
ReadX 13813 2858 1024 1024 NT_STATUS_OK
ReadX 13813 2810 4096 4096 NT_STATUS_OK
ReadX 13813 2826 4096 4096 NT_STATUS_OK
ReadX 13813 2580 2048 2048 NT_STATUS_OK
ReadX 13813 2800 2560 2560 NT_STATUS_OK
ReadX 13813 2100 4096 4096 NT_STATUS_OK
ReadX 13813 2084 4096 4096 NT_STATUS_OK
ReadX 13813 868 4096 4096 NT_STATUS_OK
ReadX 13813 2324 4096 4096 NT_STATUS_OK
ReadX 13813 884 4096 4096 NT_STATUS_OK
ReadX 13813 2604 1024 1024 NT_STATUS_OK
ReadX 13813 580 4096 4096 NT_STATUS_OK
ReadX 13813 596 4096 4096 NT_STATUS_OK
ReadX 13813 2752 4096 4096 NT_STATUS_OK
ReadX 13813 2842 1024 1024 NT_STATUS_OK
ReadX 13813 660 4096 4096 NT_STATUS_OK
ReadX 13813 2720 4096 4096 NT_STATUS_OK
ReadX 13813 2736 4096 4096 NT_STATUS_OK
ReadX 13813 628 4096 4096 NT_STATUS_OK
ReadX 13813 2704 4096 4096 NT_STATUS_OK
ReadX 13813 1556 4096 4096 NT_STATUS_OK
ReadX 13813 576 4096 4096 NT_STATUS_OK
ReadX 13813 3168 1536 1536 NT_STATUS_OK
ReadX 13813 832 4096 4096 NT_STATUS_OK
ReadX 13813 1088 4096 4096 NT_STATUS_OK
ReadX 13813 1344 4096 4096 NT_STATUS_OK
ReadX 13813 1600 4096 4096 NT_STATUS_OK
ReadX 13813 1856 4096 4096 NT_STATUS_OK
ReadX 13813 2112 4096 4096 NT_STATUS_OK
ReadX 13813 1892 4096 4096 NT_STATUS_OK
ReadX 13813 820 4096 4096 NT_STATUS_OK
ReadX 13813 788 4096 4096 NT_STATUS_OK
ReadX 13813 1604 4096 4096 NT_STATUS_OK
ReadX 13813 3648 4096 4096 NT_STATUS_OK
ReadX 13813 2608 4096 4096 NT_STATUS_OK
ReadX 13813 548 4096 4096 NT_STATUS_OK
ReadX 13813 740 4096 4096 NT_STATUS_OK
ReadX 13813 1344 4096 4096 NT_STATUS_OK
ReadX 13813 3392 4096 4096 NT_STATUS_OK
ReadX 13813 3904 4096 4096 NT_STATUS_OK
ReadX 13813 644 4096 4096 NT_STATUS_OK
ReadX 13813 676 4096 4096 NT_STATUS_OK
ReadX 13813 2688 4096 4096 NT_STATUS_OK
ReadX 13813 320 4096 4096 NT_STATUS_OK
ReadX 13813 900 4096 4096 NT_STATUS_OK
ReadX 13813 1908 4096 4096 NT_STATUS_OK
ReadX 13813 852 4096 4096 NT_STATUS_OK
ReadX 13813 724 4096 4096 NT_STATUS_OK
ReadX 13813 2292 4096 4096 NT_STATUS_OK
ReadX 13813 612 4096 4096 NT_STATUS_OK
ReadX 13813 388 4096 4096 NT_STATUS_OK
ReadX 13813 2368 4096 4096 NT_STATUS_OK
ReadX 13813 2624 4096 4096 NT_STATUS_OK
ReadX 13813 500 4096 4096 NT_STATUS_OK
ReadX 13813 356 4096 4096 NT_STATUS_OK
ReadX 13813 1024 4096 4096 NT_STATUS_OK
ReadX 13813 576 4096 4096 NT_STATUS_OK
ReadX 13813 340 4096 4096 NT_STATUS_OK
ReadX 13813 420 4096 4096 NT_STATUS_OK
ReadX 13813 1600 4096 4096 NT_STATUS_OK
ReadX 13813 404 4096 4096 NT_STATUS_OK
ReadX 13813 1428 4096 4096 NT_STATUS_OK
ReadX 13813 2656 4096 4096 NT_STATUS_OK
ReadX 13813 2624 4096 4096 NT_STATUS_OK
ReadX 13813 452 4096 4096 NT_STATUS_OK
ReadX 13813 692 4096 4096 NT_STATUS_OK
ReadX 13813 564 4096 4096 NT_STATUS_OK
ReadX 13813 372 4096 4096 NT_STATUS_OK
ReadX 13813 468 4096 4096 NT_STATUS_OK
ReadX 13813 484 4096 4096 NT_STATUS_OK
ReadX 13813 1088 4096 4096 NT_STATUS_OK
ReadX 13813 1924 4096 4096 NT_STATUS_OK
ReadX 13813 2768 4096 4096 NT_STATUS_OK
ReadX 13813 832 4096 4096 NT_STATUS_OK
ReadX 13813 836 4096 4096 NT_STATUS_OK
ReadX 13813 1856 4096 4096 NT_STATUS_OK
ReadX 13813 2640 4096 4096 NT_STATUS_OK
ReadX 13813 436 4096 4096 NT_STATUS_OK
ReadX 13813 1828 4096 4096 NT_STATUS_OK
ReadX 13813 804 4096 4096 NT_STATUS_OK
ReadX 13813 1860 4096 4096 NT_STATUS_OK
ReadX 13813 1812 4096 4096 NT_STATUS_OK
ReadX 13813 756 4096 4096 NT_STATUS_OK
ReadX 13813 1636 4096 4096 NT_STATUS_OK
ReadX 13813 772 4096 4096 NT_STATUS_OK
ReadX 13813 2036 4096 4096 NT_STATUS_OK
ReadX 13813 1220 4096 4096 NT_STATUS_OK
ReadX 13813 1652 4096 4096 NT_STATUS_OK
ReadX 13813 2588 4096 4096 NT_STATUS_OK
ReadX 13813 916 4096 4096 NT_STATUS_OK
ReadX 13813 260 4096 4096 NT_STATUS_OK
ReadX 13813 932 4096 4096 NT_STATUS_OK
ReadX 13813 2624 4096 4096 NT_STATUS_OK
ReadX 13813 308 4096 4096 NT_STATUS_OK
ReadX 13813 292 4096 4096 NT_STATUS_OK
ReadX 13813 1140 4096 4096 NT_STATUS_OK
ReadX 13813 276 4096 4096 NT_STATUS_OK
ReadX 13813 2020 4096 4096 NT_STATUS_OK
ReadX 13813 2880 4096 4096 NT_STATUS_OK
ReadX 13813 516 4096 4096 NT_STATUS_OK
ReadX 13813 1844 4096 4096 NT_STATUS_OK
ReadX 13813 1124 4096 4096 NT_STATUS_OK
ReadX 13813 3136 4096 4096 NT_STATUS_OK
ReadX 13813 324 4096 4096 NT_STATUS_OK
ReadX 13813 1156 4096 4096 NT_STATUS_OK
ReadX 13813 1172 4096 4096 NT_STATUS_OK
ReadX 13813 2112 4096 4096 NT_STATUS_OK
ReadX 13813 2368 4096 4096 NT_STATUS_OK
ReadX 13813 964 4096 4096 NT_STATUS_OK
ReadX 13813 980 4096 4096 NT_STATUS_OK
ReadX 13813 1012 4096 4096 NT_STATUS_OK
ReadX 13813 532 4096 4096 NT_STATUS_OK
ReadX 13813 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13813 1620 4096 4096 NT_STATUS_OK
ReadX 13813 1604 4096 4096 NT_STATUS_OK
ReadX 13813 2116 4096 4096 NT_STATUS_OK
ReadX 13813 2132 4096 4096 NT_STATUS_OK
ReadX 13813 2148 4096 4096 NT_STATUS_OK
ReadX 13813 2276 4096 4096 NT_STATUS_OK
ReadX 13813 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13835 NT_STATUS_OK
Close 13835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13838 NT_STATUS_OK
QUERY_FILE_INFORMATION 13793 1004 NT_STATUS_OK
Close 13793 NT_STATUS_OK
WriteX 13838 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13838 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 1004 NT_STATUS_OK
Close 13795 NT_STATUS_OK
WriteX 13838 0 65536 65536 NT_STATUS_OK
WriteX 13838 65536 64850 64850 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13840 NT_STATUS_OK
WriteX 13840 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
ReadX 13813 2068 4096 4096 NT_STATUS_OK
ReadX 13813 1588 4096 4096 NT_STATUS_OK
ReadX 13813 1572 4096 4096 NT_STATUS_OK
WriteX 13840 0 18630 18630 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13813 612 4096 4096 NT_STATUS_OK
ReadX 13813 564 4096 4096 NT_STATUS_OK
ReadX 13813 1876 4096 4096 NT_STATUS_OK
ReadX 13813 628 4096 4096 NT_STATUS_OK
ReadX 13813 740 4096 4096 NT_STATUS_OK
ReadX 13813 724 4096 4096 NT_STATUS_OK
ReadX 13813 644 4096 4096 NT_STATUS_OK
ReadX 13813 2324 4096 4096 NT_STATUS_OK
ReadX 13813 660 4096 4096 NT_STATUS_OK
ReadX 13813 852 4096 4096 NT_STATUS_OK
ReadX 13813 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13813 2368 4096 4096 NT_STATUS_OK
ReadX 13813 1024 4096 4096 NT_STATUS_OK
ReadX 13813 320 4096 4096 NT_STATUS_OK
ReadX 13813 580 4096 4096 NT_STATUS_OK
ReadX 13813 3136 512 512 NT_STATUS_OK
ReadX 13813 2880 4096 4096 NT_STATUS_OK
Close 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 61440 4096 4096 NT_STATUS_OK
ReadX 13845 126976 4096 4096 NT_STATUS_OK
WriteX 13845 0 65536 65536 NT_STATUS_OK
WriteX 13845 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 61440 4096 4096 NT_STATUS_OK
ReadX 13846 126976 4096 4096 NT_STATUS_OK
ReadX 13846 192512 4096 4096 NT_STATUS_OK
ReadX 13846 258048 4096 4096 NT_STATUS_OK
WriteX 13846 0 65536 65536 NT_STATUS_OK
WriteX 13846 65536 65536 65536 NT_STATUS_OK
WriteX 13846 131072 65536 65536 NT_STATUS_OK
WriteX 13846 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 61440 4096 4096 NT_STATUS_OK
ReadX 13847 126976 4096 4096 NT_STATUS_OK
ReadX 13847 192512 4096 4096 NT_STATUS_OK
ReadX 13847 258048 4096 4096 NT_STATUS_OK
ReadX 13847 323584 4096 4096 NT_STATUS_OK
ReadX 13847 389120 4096 4096 NT_STATUS_OK
ReadX 13847 454656 4096 4096 NT_STATUS_OK
ReadX 13847 520192 4096 4096 NT_STATUS_OK
WriteX 13847 0 65536 65536 NT_STATUS_OK
WriteX 13847 65536 65536 65536 NT_STATUS_OK
WriteX 13847 131072 65536 65536 NT_STATUS_OK
WriteX 13847 196608 65536 65536 NT_STATUS_OK
WriteX 13847 262144 65536 65536 NT_STATUS_OK
WriteX 13847 327680 65536 65536 NT_STATUS_OK
WriteX 13847 393216 65536 65536 NT_STATUS_OK
WriteX 13847 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13850 NT_STATUS_OK
WriteX 13850 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13850 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13848 0 8192 8192 NT_STATUS_OK
Flush 13848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13848 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13848 0 8192 8192 NT_STATUS_OK
Flush 13848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13848 0 8192 8192 NT_STATUS_OK
Flush 13848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13848 0 8192 8192 NT_STATUS_OK
Flush 13848 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13852 NT_STATUS_OK
Close 13852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13844 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13855 NT_STATUS_OK
WriteX 13855 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13855 258 NT_STATUS_OK
WriteX 13855 0 62591 62591 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13857 NT_STATUS_OK
Close 13857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 10845 10845 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13865 NT_STATUS_OK
WriteX 13865 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13865 258 NT_STATUS_OK
WriteX 13865 0 30118 30118 NT_STATUS_OK
Close 13865 NT_STATUS_OK
WriteX 13848 0 4096 4096 NT_STATUS_OK
WriteX 13850 0 64 64 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 0 61440 61440 NT_STATUS_OK
ReadX 13867 61440 4096 4096 NT_STATUS_OK
ReadX 13867 65536 61440 61440 NT_STATUS_OK
ReadX 13867 126976 4096 4096 NT_STATUS_OK
ReadX 13867 131072 61440 61440 NT_STATUS_OK
ReadX 13867 192512 4096 4096 NT_STATUS_OK
ReadX 13867 196608 61440 61440 NT_STATUS_OK
ReadX 13867 258048 4096 4096 NT_STATUS_OK
ReadX 13867 262144 61440 61440 NT_STATUS_OK
ReadX 13867 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 61440 61440 NT_STATUS_OK
ReadX 13868 61440 4096 4096 NT_STATUS_OK
ReadX 13868 65536 61440 61440 NT_STATUS_OK
ReadX 13868 126976 4096 4096 NT_STATUS_OK
ReadX 13868 131072 61440 61440 NT_STATUS_OK
ReadX 13868 192512 4096 4096 NT_STATUS_OK
ReadX 13868 196608 61440 61440 NT_STATUS_OK
ReadX 13868 258048 4096 4096 NT_STATUS_OK
ReadX 13868 262144 61440 61440 NT_STATUS_OK
ReadX 13868 323584 4096 4096 NT_STATUS_OK
ReadX 13868 327680 61440 61440 NT_STATUS_OK
ReadX 13868 389120 4096 4096 NT_STATUS_OK
ReadX 13868 393216 61440 61440 NT_STATUS_OK
ReadX 13868 454656 4096 4096 NT_STATUS_OK
ReadX 13868 458752 61440 61440 NT_STATUS_OK
ReadX 13868 520192 4096 4096 NT_STATUS_OK
ReadX 13868 524288 61440 61440 NT_STATUS_OK
ReadX 13868 585728 4096 4096 NT_STATUS_OK
ReadX 13868 589824 61440 61440 NT_STATUS_OK
ReadX 13868 651264 4096 4096 NT_STATUS_OK
ReadX 13868 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 61440 61440 NT_STATUS_OK
ReadX 13869 61440 4096 4096 NT_STATUS_OK
ReadX 13869 65536 61440 61440 NT_STATUS_OK
ReadX 13869 126976 4096 4096 NT_STATUS_OK
ReadX 13869 131072 61440 61440 NT_STATUS_OK
ReadX 13869 192512 4096 4096 NT_STATUS_OK
ReadX 13869 196608 61440 61440 NT_STATUS_OK
ReadX 13869 258048 4096 4096 NT_STATUS_OK
ReadX 13869 262144 61440 61440 NT_STATUS_OK
ReadX 13869 323584 4096 4096 NT_STATUS_OK
ReadX 13869 327680 61440 61440 NT_STATUS_OK
ReadX 13869 389120 4096 4096 NT_STATUS_OK
ReadX 13869 393216 61440 61440 NT_STATUS_OK
ReadX 13869 454656 4096 4096 NT_STATUS_OK
ReadX 13869 458752 61440 61440 NT_STATUS_OK
ReadX 13869 520192 4096 4096 NT_STATUS_OK
ReadX 13869 524288 61440 61440 NT_STATUS_OK
ReadX 13869 585728 4096 4096 NT_STATUS_OK
ReadX 13869 589824 61440 61440 NT_STATUS_OK
ReadX 13869 651264 4096 4096 NT_STATUS_OK
ReadX 13869 655360 61440 61440 NT_STATUS_OK
ReadX 13869 716800 4096 4096 NT_STATUS_OK
ReadX 13869 720896 61440 61440 NT_STATUS_OK
ReadX 13869 782336 4096 4096 NT_STATUS_OK
ReadX 13869 786432 61440 61440 NT_STATUS_OK
ReadX 13869 847872 4096 4096 NT_STATUS_OK
ReadX 13869 851968 61440 61440 NT_STATUS_OK
ReadX 13869 913408 4096 4096 NT_STATUS_OK
ReadX 13869 917504 61440 61440 NT_STATUS_OK
ReadX 13869 978944 4096 4096 NT_STATUS_OK
ReadX 13869 983040 61440 61440 NT_STATUS_OK
ReadX 13869 1044480 4096 4096 NT_STATUS_OK
ReadX 13869 1048576 61440 61440 NT_STATUS_OK
ReadX 13869 1110016 4096 4096 NT_STATUS_OK
ReadX 13869 1114112 61440 61440 NT_STATUS_OK
ReadX 13869 1175552 4096 4096 NT_STATUS_OK
ReadX 13869 1179648 61440 61440 NT_STATUS_OK
ReadX 13869 1241088 4096 4096 NT_STATUS_OK
ReadX 13869 1245184 61440 61440 NT_STATUS_OK
ReadX 13869 1306624 4096 4096 NT_STATUS_OK
ReadX 13869 1310720 61440 61440 NT_STATUS_OK
ReadX 13869 1372160 4096 4096 NT_STATUS_OK
ReadX 13869 1376256 61440 61440 NT_STATUS_OK
ReadX 13869 1437696 4096 4096 NT_STATUS_OK
ReadX 13869 1441792 61440 61440 NT_STATUS_OK
ReadX 13869 1503232 4096 4096 NT_STATUS_OK
ReadX 13869 1507328 61440 61440 NT_STATUS_OK
ReadX 13869 1568768 4096 4096 NT_STATUS_OK
ReadX 13869 1572864 61440 61440 NT_STATUS_OK
ReadX 13869 1634304 4096 4096 NT_STATUS_OK
ReadX 13869 1638400 61440 61440 NT_STATUS_OK
ReadX 13869 1699840 4096 4096 NT_STATUS_OK
ReadX 13869 1703936 61440 61440 NT_STATUS_OK
ReadX 13869 1765376 4096 4096 NT_STATUS_OK
ReadX 13869 1769472 61440 61440 NT_STATUS_OK
ReadX 13869 1830912 4096 4096 NT_STATUS_OK
ReadX 13869 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13870 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13867 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Close 13869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13874 NT_STATUS_OK
ReadX 13874 0 4096 4096 NT_STATUS_OK
ReadX 13874 4096 4096 4096 NT_STATUS_OK
ReadX 13874 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13874 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13878 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 8192 8192 NT_STATUS_OK
ReadX 13882 8192 8192 8192 NT_STATUS_OK
ReadX 13882 16384 8192 8192 NT_STATUS_OK
ReadX 13882 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13884 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13887 NT_STATUS_OK
WriteX 13887 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13887 258 NT_STATUS_OK
WriteX 13887 0 10438 10438 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13891 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13892 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13893 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
ReadX 13896 4096 4096 4096 NT_STATUS_OK
ReadX 13896 8192 4096 4096 NT_STATUS_OK
ReadX 13896 12288 8192 8192 NT_STATUS_OK
ReadX 13896 20480 8192 8192 NT_STATUS_OK
ReadX 13896 28672 8192 8192 NT_STATUS_OK
ReadX 13896 36864 8192 8192 NT_STATUS_OK
ReadX 13896 45056 8192 8192 NT_STATUS_OK
ReadX 13896 53248 8192 8192 NT_STATUS_OK
ReadX 13896 61440 8192 8192 NT_STATUS_OK
ReadX 13896 69632 8192 8192 NT_STATUS_OK
ReadX 13896 77824 8192 8192 NT_STATUS_OK
ReadX 13896 86016 8192 8192 NT_STATUS_OK
ReadX 13896 94208 8192 8192 NT_STATUS_OK
ReadX 13896 102400 8192 8192 NT_STATUS_OK
ReadX 13896 110592 8192 8192 NT_STATUS_OK
ReadX 13896 118784 8192 8192 NT_STATUS_OK
ReadX 13896 126976 8192 8192 NT_STATUS_OK
ReadX 13896 135168 8192 8192 NT_STATUS_OK
ReadX 13896 143360 8192 8192 NT_STATUS_OK
ReadX 13896 151552 8192 8192 NT_STATUS_OK
ReadX 13896 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13901 NT_STATUS_OK
WriteX 13901 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13901 258 NT_STATUS_OK
WriteX 13901 0 28489 28489 NT_STATUS_OK
Close 13901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13902 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13904 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 8192 8192 NT_STATUS_OK
ReadX 13908 8192 8192 8192 NT_STATUS_OK
ReadX 13908 16384 8192 8192 NT_STATUS_OK
ReadX 13908 24576 8192 8192 NT_STATUS_OK
ReadX 13908 32768 16384 16384 NT_STATUS_OK
ReadX 13908 49152 8192 8192 NT_STATUS_OK
ReadX 13908 57344 8192 8192 NT_STATUS_OK
ReadX 13908 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13910 NT_STATUS_OK
Close 13910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13913 NT_STATUS_OK
WriteX 13913 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 258 NT_STATUS_OK
WriteX 13913 0 29253 29253 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13920 NT_STATUS_OK
WriteX 13920 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13920 258 NT_STATUS_OK
WriteX 13920 0 30183 30183 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13921 NT_STATUS_OK
Close 13921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13923 NT_STATUS_OK
WriteX 13923 0 510 510 NT_STATUS_OK
WriteX 13923 510 512 512 NT_STATUS_OK
WriteX 13923 1022 510 510 NT_STATUS_OK
WriteX 13923 1532 510 510 NT_STATUS_OK
WriteX 13923 2042 168 168 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
WriteX 13926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 61440 4096 4096 NT_STATUS_OK
ReadX 13927 126976 4096 4096 NT_STATUS_OK
WriteX 13927 0 65536 65536 NT_STATUS_OK
WriteX 13927 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 61440 4096 4096 NT_STATUS_OK
ReadX 13928 126976 4096 4096 NT_STATUS_OK
ReadX 13928 192512 4096 4096 NT_STATUS_OK
ReadX 13928 258048 4096 4096 NT_STATUS_OK
WriteX 13928 0 65536 65536 NT_STATUS_OK
WriteX 13928 65536 65536 65536 NT_STATUS_OK
WriteX 13928 131072 65536 65536 NT_STATUS_OK
WriteX 13928 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 61440 4096 4096 NT_STATUS_OK
ReadX 13929 126976 4096 4096 NT_STATUS_OK
ReadX 13929 192512 4096 4096 NT_STATUS_OK
ReadX 13929 258048 4096 4096 NT_STATUS_OK
ReadX 13929 323584 4096 4096 NT_STATUS_OK
ReadX 13929 389120 4096 4096 NT_STATUS_OK
ReadX 13929 454656 4096 4096 NT_STATUS_OK
ReadX 13929 520192 4096 4096 NT_STATUS_OK
WriteX 13929 0 65536 65536 NT_STATUS_OK
WriteX 13929 65536 65536 65536 NT_STATUS_OK
WriteX 13929 131072 65536 65536 NT_STATUS_OK
WriteX 13929 196608 65536 65536 NT_STATUS_OK
WriteX 13929 262144 65536 65536 NT_STATUS_OK
WriteX 13929 327680 65536 65536 NT_STATUS_OK
WriteX 13929 393216 65536 65536 NT_STATUS_OK
WriteX 13929 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13932 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13936 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13939 NT_STATUS_OK
Close 13939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13941 NT_STATUS_OK
Close 13941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13945 NT_STATUS_OK
Close 13945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13948 NT_STATUS_OK
Close 13948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13954 NT_STATUS_OK
Close 13954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13964 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13969 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13979 NT_STATUS_OK
Close 13979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13989 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13992 NT_STATUS_OK
Close 13992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13995 NT_STATUS_OK
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13998 NT_STATUS_OK
WriteX 13998 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13998 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13998 0 65536 65536 NT_STATUS_OK
WriteX 13998 65536 65536 65536 NT_STATUS_OK
WriteX 13998 131072 65536 65536 NT_STATUS_OK
WriteX 13998 196608 65536 65536 NT_STATUS_OK
WriteX 13998 262144 26634 26634 NT_STATUS_OK
Close 13998 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14003 NT_STATUS_OK
Close 14003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
Close 14005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
ReadX 14006 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14007 NT_STATUS_OK
Close 14007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14011 NT_STATUS_OK
Close 14011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14014 NT_STATUS_OK
Close 14014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14016 NT_STATUS_OK
Close 14016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14020 NT_STATUS_OK
Close 14020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14025 NT_STATUS_OK
Close 14025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14034 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14039 NT_STATUS_OK
Close 14039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14054 NT_STATUS_OK
Close 14054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14058 NT_STATUS_OK
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14063 NT_STATUS_OK
Close 14063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14068 NT_STATUS_OK
Close 14068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 14071 NT_STATUS_OK
Close 14071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 14073 NT_STATUS_OK
Close 14073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14083 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
Close 14085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
Close 14086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9420 NT_STATUS_OK
Close 9420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9421 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9422 NT_STATUS_OK
ReadX 9422 0 4096 4096 NT_STATUS_OK
Close 9422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9423 NT_STATUS_OK
ReadX 9423 0 4096 4096 NT_STATUS_OK
Close 9423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9424 NT_STATUS_OK
ReadX 9424 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 9424 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9453 0 4096 4096 NT_STATUS_OK
Close 9453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9454 NT_STATUS_OK
ReadX 9454 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9455 NT_STATUS_OK
ReadX 9455 0 4096 4096 NT_STATUS_OK
ReadX 9455 4096 4096 4096 NT_STATUS_OK
ReadX 9455 8192 4096 4096 NT_STATUS_OK
ReadX 9455 12288 4096 4096 NT_STATUS_OK
ReadX 9455 16384 4096 4096 NT_STATUS_OK
ReadX 9455 20480 4096 4096 NT_STATUS_OK
ReadX 9455 24576 4096 4096 NT_STATUS_OK
ReadX 9455 28672 4096 4096 NT_STATUS_OK
ReadX 9455 32768 4096 4096 NT_STATUS_OK
ReadX 9455 36864 4096 4096 NT_STATUS_OK
ReadX 9455 40960 4096 4096 NT_STATUS_OK
ReadX 9455 45056 4096 4096 NT_STATUS_OK
ReadX 9455 49152 4096 4096 NT_STATUS_OK
ReadX 9455 53248 4096 4096 NT_STATUS_OK
ReadX 9455 57344 4096 4096 NT_STATUS_OK
ReadX 9455 61440 4096 4096 NT_STATUS_OK
ReadX 9455 65536 4096 4096 NT_STATUS_OK
ReadX 9455 69632 4096 4096 NT_STATUS_OK
ReadX 9455 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9455 1004 NT_STATUS_OK
WriteX 9455 0 4096 4096 NT_STATUS_OK
Close 9455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9456 NT_STATUS_OK
SET_FILE_INFORMATION 9456 1004 NT_STATUS_OK
Close 9456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9457 NT_STATUS_OK
ReadX 9457 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9458 NT_STATUS_OK
Close 9458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9461 NT_STATUS_OK
WriteX 9461 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9461 258 NT_STATUS_OK
WriteX 9461 0 65536 65536 NT_STATUS_OK
WriteX 9461 65536 19979 19979 NT_STATUS_OK
Close 9461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9462 NT_STATUS_OK
ReadX 9462 0 4096 4096 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
QUERY_FILE_INFORMATION 9462 1004 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
SET_FILE_INFORMATION 9462 1004 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
Close 9462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9463 NT_STATUS_OK
ReadX 9463 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9464 NT_STATUS_OK
ReadX 9464 0 4096 4096 NT_STATUS_OK
Close 9463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9465 NT_STATUS_OK
ReadX 9465 0 4096 4096 NT_STATUS_OK
Close 9465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9466 NT_STATUS_OK
ReadX 9466 0 4096 4096 NT_STATUS_OK
Close 9466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9467 NT_STATUS_OK
ReadX 9467 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9467 1004 NT_STATUS_OK
WriteX 9467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9468 NT_STATUS_OK
Close 9468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9464 NT_STATUS_OK
Close 9467 NT_STATUS_OK
Close 9457 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9470 NT_STATUS_OK
Close 9470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9473 NT_STATUS_OK
WriteX 9473 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9473 258 NT_STATUS_OK
WriteX 9473 0 65536 65536 NT_STATUS_OK
WriteX 9473 65536 17654 17654 NT_STATUS_OK
Close 9473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9474 NT_STATUS_OK
ReadX 9474 0 4096 4096 NT_STATUS_OK
WriteX 9474 0 4096 4096 NT_STATUS_OK
Flush 9474 NT_STATUS_OK
WriteX 9474 0 4096 4096 NT_STATUS_OK
Flush 9474 NT_STATUS_OK
QUERY_FILE_INFORMATION 9474 1004 NT_STATUS_OK
WriteX 9474 0 4096 4096 NT_STATUS_OK
Flush 9474 NT_STATUS_OK
WriteX 9474 0 4096 4096 NT_STATUS_OK
Flush 9474 NT_STATUS_OK
WriteX 9474 0 4096 4096 NT_STATUS_OK
Flush 9474 NT_STATUS_OK
SET_FILE_INFORMATION 9474 1004 NT_STATUS_OK
WriteX 9474 0 4096 4096 NT_STATUS_OK
Flush 9474 NT_STATUS_OK
Close 9474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9475 NT_STATUS_OK
SET_FILE_INFORMATION 9475 1004 NT_STATUS_OK
Close 9475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9476 NT_STATUS_OK
ReadX 9476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9477 NT_STATUS_OK
Close 9477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9479 NT_STATUS_OK
ReadX 9479 0 4096 4096 NT_STATUS_OK
ReadX 9479 4096 4096 4096 NT_STATUS_OK
ReadX 9479 8192 4096 4096 NT_STATUS_OK
ReadX 9479 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9479 16384 4096 4096 NT_STATUS_OK
ReadX 9479 20480 4096 4096 NT_STATUS_OK
ReadX 9479 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9480 NT_STATUS_OK
ReadX 9480 0 4096 4096 NT_STATUS_OK
Close 9480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9481 NT_STATUS_OK
ReadX 9481 0 4096 4096 NT_STATUS_OK
Close 9481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9482 NT_STATUS_OK
ReadX 9482 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9482 1004 NT_STATUS_OK
WriteX 9482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9483 NT_STATUS_OK
Close 9483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9482 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9485 NT_STATUS_OK
Close 9485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9488 NT_STATUS_OK
WriteX 9488 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9488 258 NT_STATUS_OK
WriteX 9488 0 65536 65536 NT_STATUS_OK
WriteX 9488 65536 19490 19490 NT_STATUS_OK
Close 9488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9489 NT_STATUS_OK
ReadX 9489 0 4096 4096 NT_STATUS_OK
WriteX 9489 0 4096 4096 NT_STATUS_OK
Flush 9489 NT_STATUS_OK
WriteX 9489 0 4096 4096 NT_STATUS_OK
Flush 9489 NT_STATUS_OK
QUERY_FILE_INFORMATION 9489 1004 NT_STATUS_OK
WriteX 9489 0 4096 4096 NT_STATUS_OK
Flush 9489 NT_STATUS_OK
WriteX 9489 0 4096 4096 NT_STATUS_OK
Flush 9489 NT_STATUS_OK
WriteX 9489 0 4096 4096 NT_STATUS_OK
Flush 9489 NT_STATUS_OK
SET_FILE_INFORMATION 9489 1004 NT_STATUS_OK
WriteX 9489 0 4096 4096 NT_STATUS_OK
Flush 9489 NT_STATUS_OK
Close 9489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9490 NT_STATUS_OK
SET_FILE_INFORMATION 9490 1004 NT_STATUS_OK
Close 9490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9491 NT_STATUS_OK
ReadX 9491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9492 NT_STATUS_OK
Close 9492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9494 0 4096 4096 NT_STATUS_OK
Close 9494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9495 NT_STATUS_OK
ReadX 9495 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9496 NT_STATUS_OK
ReadX 9496 0 4096 4096 NT_STATUS_OK
ReadX 9496 4096 4096 4096 NT_STATUS_OK
ReadX 9496 8192 4096 4096 NT_STATUS_OK
ReadX 9496 12288 4096 4096 NT_STATUS_OK
ReadX 9496 16384 4096 4096 NT_STATUS_OK
ReadX 9496 20480 4096 4096 NT_STATUS_OK
ReadX 9496 24576 4096 4096 NT_STATUS_OK
ReadX 9496 28672 4096 4096 NT_STATUS_OK
ReadX 9496 32768 4096 4096 NT_STATUS_OK
ReadX 9496 36864 4096 4096 NT_STATUS_OK
ReadX 9496 40960 4096 4096 NT_STATUS_OK
ReadX 9496 45056 4096 4096 NT_STATUS_OK
ReadX 9496 49152 4096 4096 NT_STATUS_OK
ReadX 9496 53248 4096 4096 NT_STATUS_OK
ReadX 9496 57344 4096 4096 NT_STATUS_OK
ReadX 9496 61440 4096 4096 NT_STATUS_OK
ReadX 9496 65536 4096 4096 NT_STATUS_OK
ReadX 9496 69632 4096 4096 NT_STATUS_OK
ReadX 9496 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9496 1004 NT_STATUS_OK
WriteX 9496 0 4096 4096 NT_STATUS_OK
Close 9496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9497 NT_STATUS_OK
SET_FILE_INFORMATION 9497 1004 NT_STATUS_OK
Close 9497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9498 NT_STATUS_OK
ReadX 9498 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9499 NT_STATUS_OK
Close 9499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9502 NT_STATUS_OK
WriteX 9502 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9502 258 NT_STATUS_OK
WriteX 9502 0 65536 65536 NT_STATUS_OK
WriteX 9502 65536 8866 8866 NT_STATUS_OK
Close 9502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9503 NT_STATUS_OK
ReadX 9503 0 4096 4096 NT_STATUS_OK
WriteX 9503 0 4096 4096 NT_STATUS_OK
Flush 9503 NT_STATUS_OK
SET_FILE_INFORMATION 9503 1004 NT_STATUS_OK
WriteX 9503 0 4096 4096 NT_STATUS_OK
Flush 9503 NT_STATUS_OK
Close 9503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9504 NT_STATUS_OK
ReadX 9504 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9505 NT_STATUS_OK
ReadX 9505 0 4096 4096 NT_STATUS_OK
Close 9505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9506 NT_STATUS_OK
ReadX 9506 0 4096 4096 NT_STATUS_OK
Close 9506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9507 NT_STATUS_OK
ReadX 9507 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9507 1004 NT_STATUS_OK
WriteX 9507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9508 NT_STATUS_OK
Close 9508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9507 NT_STATUS_OK
Close 9498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9510 NT_STATUS_OK
Close 9510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9513 NT_STATUS_OK
WriteX 9513 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9513 258 NT_STATUS_OK
WriteX 9513 0 65536 65536 NT_STATUS_OK
WriteX 9513 65536 9298 9298 NT_STATUS_OK
Close 9513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9514 NT_STATUS_OK
ReadX 9514 0 4096 4096 NT_STATUS_OK
WriteX 9514 0 4096 4096 NT_STATUS_OK
Flush 9514 NT_STATUS_OK
SET_FILE_INFORMATION 9514 1004 NT_STATUS_OK
WriteX 9514 0 4096 4096 NT_STATUS_OK
Flush 9514 NT_STATUS_OK
Close 9514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9515 NT_STATUS_OK
SET_FILE_INFORMATION 9515 1004 NT_STATUS_OK
Close 9515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9516 NT_STATUS_OK
ReadX 9516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9517 NT_STATUS_OK
Close 9517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9520 0 4096 4096 NT_STATUS_OK
Close 9520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9521 NT_STATUS_OK
ReadX 9521 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9521 4096 4096 4096 NT_STATUS_OK
ReadX 9521 8192 4096 4096 NT_STATUS_OK
ReadX 9521 12288 4096 4096 NT_STATUS_OK
ReadX 9521 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9522 NT_STATUS_OK
ReadX 9522 0 4096 4096 NT_STATUS_OK
Close 9522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9523 NT_STATUS_OK
ReadX 9523 0 4096 4096 NT_STATUS_OK
Close 9523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9524 NT_STATUS_OK
ReadX 9524 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9524 1004 NT_STATUS_OK
WriteX 9524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9525 NT_STATUS_OK
Close 9525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9521 NT_STATUS_OK
Close 9524 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9527 NT_STATUS_OK
Close 9527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9530 NT_STATUS_OK
WriteX 9530 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9530 258 NT_STATUS_OK
WriteX 9530 0 65536 65536 NT_STATUS_OK
WriteX 9530 65536 11540 11540 NT_STATUS_OK
Close 9530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9531 NT_STATUS_OK
ReadX 9531 0 4096 4096 NT_STATUS_OK
WriteX 9531 0 4096 4096 NT_STATUS_OK
Flush 9531 NT_STATUS_OK
SET_FILE_INFORMATION 9531 1004 NT_STATUS_OK
WriteX 9531 0 4096 4096 NT_STATUS_OK
Flush 9531 NT_STATUS_OK
Close 9531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9532 NT_STATUS_OK
SET_FILE_INFORMATION 9532 1004 NT_STATUS_OK
Close 9532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9533 NT_STATUS_OK
ReadX 9533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 9534 NT_STATUS_OK
Close 9534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9536 NT_STATUS_OK
ReadX 9536 61440 4096 4096 NT_STATUS_OK
ReadX 9536 126976 4096 4096 NT_STATUS_OK
WriteX 9536 0 65536 65536 NT_STATUS_OK
WriteX 9536 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9537 NT_STATUS_OK
ReadX 9537 61440 4096 4096 NT_STATUS_OK
ReadX 9537 126976 4096 4096 NT_STATUS_OK
ReadX 9537 192512 4096 4096 NT_STATUS_OK
ReadX 9537 258048 4096 4096 NT_STATUS_OK
WriteX 9537 0 65536 65536 NT_STATUS_OK
WriteX 9537 65536 65536 65536 NT_STATUS_OK
WriteX 9537 131072 65536 65536 NT_STATUS_OK
WriteX 9537 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9538 NT_STATUS_OK
ReadX 9538 61440 4096 4096 NT_STATUS_OK
ReadX 9538 126976 4096 4096 NT_STATUS_OK
ReadX 9538 192512 4096 4096 NT_STATUS_OK
ReadX 9538 258048 4096 4096 NT_STATUS_OK
ReadX 9538 323584 4096 4096 NT_STATUS_OK
ReadX 9538 389120 4096 4096 NT_STATUS_OK
ReadX 9538 454656 4096 4096 NT_STATUS_OK
ReadX 9538 520192 4096 4096 NT_STATUS_OK
WriteX 9538 0 65536 65536 NT_STATUS_OK
WriteX 9538 65536 65536 65536 NT_STATUS_OK
WriteX 9538 131072 65536 65536 NT_STATUS_OK
WriteX 9538 196608 65536 65536 NT_STATUS_OK
WriteX 9538 262144 65536 65536 NT_STATUS_OK
WriteX 9538 327680 65536 65536 NT_STATUS_OK
WriteX 9538 393216 65536 65536 NT_STATUS_OK
WriteX 9538 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9539 NT_STATUS_OK
ReadX 9539 0 4096 4096 NT_STATUS_OK
ReadX 9539 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9540 NT_STATUS_OK
WriteX 9540 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9540 258 NT_STATUS_OK
WriteX 9540 0 53 53 NT_STATUS_OK
Close 9540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9541 NT_STATUS_OK
Close 9541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9533 NT_STATUS_OK
Close 9479 NT_STATUS_OK
Close 9536 NT_STATUS_OK
Close 9537 NT_STATUS_OK
Close 9538 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9539 8192 4096 4096 NT_STATUS_OK
ReadX 9539 12288 4096 4096 NT_STATUS_OK
WriteX 9543 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9543 258 NT_STATUS_OK
ReadX 9539 16384 4096 4096 NT_STATUS_OK
ReadX 9539 20480 4096 4096 NT_STATUS_OK
WriteX 9543 0 15360 15360 NT_STATUS_OK
Close 9543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9544 NT_STATUS_OK
ReadX 9544 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9544 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9544 1004 NT_STATUS_OK
WriteX 9544 0 4096 4096 NT_STATUS_OK
Close 9544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9545 NT_STATUS_OK
Close 9545 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9547 NT_STATUS_OK
ReadX 9547 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9548 NT_STATUS_OK
Close 9548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9547 4096 4096 4096 NT_STATUS_OK
ReadX 9547 8192 4096 4096 NT_STATUS_OK
ReadX 9547 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9550 NT_STATUS_OK
ReadX 9550 0 4096 4096 NT_STATUS_OK
ReadX 9550 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9551 NT_STATUS_OK
ReadX 9551 0 4096 4096 NT_STATUS_OK
ReadX 9551 4096 4096 4096 NT_STATUS_OK
ReadX 9551 8192 4096 4096 NT_STATUS_OK
Close 9550 NT_STATUS_OK
Close 9551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9552 NT_STATUS_OK
WriteX 9552 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9552 258 NT_STATUS_OK
WriteX 9552 0 15360 15360 NT_STATUS_OK
Close 9552 NT_STATUS_OK
Close 9539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9553 NT_STATUS_OK
ReadX 9553 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9553 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9554 NT_STATUS_OK
Close 9554 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9556 NT_STATUS_OK
ReadX 9556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9557 NT_STATUS_OK
SET_FILE_INFORMATION 9557 1004 NT_STATUS_OK
Close 9557 NT_STATUS_OK
WriteX 9553 0 4096 4096 NT_STATUS_OK
Close 9553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9558 NT_STATUS_OK
Close 9558 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9560 NT_STATUS_OK
ReadX 9560 0 4096 4096 NT_STATUS_OK
ReadX 9560 4096 4096 4096 NT_STATUS_OK
ReadX 9560 8192 4096 4096 NT_STATUS_OK
ReadX 9560 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9560 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9560 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9561 NT_STATUS_OK
ReadX 9561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9562 NT_STATUS_OK
WriteX 9562 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9562 258 NT_STATUS_OK
WriteX 9562 0 53 53 NT_STATUS_OK
Close 9562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9563 NT_STATUS_OK
Close 9563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9561 4096 4096 4096 NT_STATUS_OK
ReadX 9561 8192 4096 4096 NT_STATUS_OK
ReadX 9561 12288 4096 4096 NT_STATUS_OK
WriteX 9565 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9565 258 NT_STATUS_OK
WriteX 9565 0 12006 12006 NT_STATUS_OK
Close 9565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9566 NT_STATUS_OK
ReadX 9566 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9566 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9566 1004 NT_STATUS_OK
WriteX 9566 0 4096 4096 NT_STATUS_OK
Close 9566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9567 NT_STATUS_OK
Close 9567 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9569 NT_STATUS_OK
ReadX 9569 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9570 NT_STATUS_OK
Close 9570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9569 4096 4096 4096 NT_STATUS_OK
ReadX 9569 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9572 NT_STATUS_OK
WriteX 9572 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9572 258 NT_STATUS_OK
WriteX 9572 0 11991 11991 NT_STATUS_OK
Close 9572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9573 NT_STATUS_OK
ReadX 9573 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9573 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9573 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9574 NT_STATUS_OK
Close 9574 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9576 NT_STATUS_OK
ReadX 9576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9577 NT_STATUS_OK
SET_FILE_INFORMATION 9577 1004 NT_STATUS_OK
Close 9577 NT_STATUS_OK
WriteX 9573 0 4096 4096 NT_STATUS_OK
Close 9573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9578 NT_STATUS_OK
Close 9578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9580 NT_STATUS_OK
ReadX 9580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9581 NT_STATUS_OK
Close 9581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9580 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9580 1004 NT_STATUS_OK
ReadX 9580 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9580 1004 NT_STATUS_OK
WriteX 9580 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9580 1004 NT_STATUS_OK
Close 9556 NT_STATUS_OK
WriteX 9560 0 19054 19054 NT_STATUS_OK
WriteX 9580 0 12288 12288 NT_STATUS_OK
Close 9576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9583 NT_STATUS_OK
Close 9583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9560 NT_STATUS_OK
Close 9580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9585 NT_STATUS_OK
Close 9585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9587 NT_STATUS_OK
ReadX 9587 0 61440 61440 NT_STATUS_OK
ReadX 9587 61440 4096 4096 NT_STATUS_OK
ReadX 9587 65536 61440 61440 NT_STATUS_OK
ReadX 9587 126976 4096 4096 NT_STATUS_OK
ReadX 9587 131072 61440 61440 NT_STATUS_OK
ReadX 9587 192512 4096 4096 NT_STATUS_OK
ReadX 9587 196608 61440 61440 NT_STATUS_OK
ReadX 9587 258048 4096 4096 NT_STATUS_OK
ReadX 9587 262144 61440 61440 NT_STATUS_OK
ReadX 9587 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9588 NT_STATUS_OK
ReadX 9588 0 61440 61440 NT_STATUS_OK
ReadX 9588 61440 4096 4096 NT_STATUS_OK
ReadX 9588 65536 61440 61440 NT_STATUS_OK
ReadX 9588 126976 4096 4096 NT_STATUS_OK
ReadX 9588 131072 61440 61440 NT_STATUS_OK
ReadX 9588 192512 4096 4096 NT_STATUS_OK
ReadX 9588 196608 61440 61440 NT_STATUS_OK
ReadX 9588 258048 4096 4096 NT_STATUS_OK
ReadX 9588 262144 61440 61440 NT_STATUS_OK
ReadX 9588 323584 4096 4096 NT_STATUS_OK
ReadX 9588 327680 61440 61440 NT_STATUS_OK
ReadX 9588 389120 4096 4096 NT_STATUS_OK
ReadX 9588 393216 61440 61440 NT_STATUS_OK
ReadX 9588 454656 4096 4096 NT_STATUS_OK
ReadX 9588 458752 61440 61440 NT_STATUS_OK
ReadX 9588 520192 4096 4096 NT_STATUS_OK
ReadX 9588 524288 61440 61440 NT_STATUS_OK
ReadX 9588 585728 4096 4096 NT_STATUS_OK
ReadX 9588 589824 61440 61440 NT_STATUS_OK
ReadX 9588 651264 4096 4096 NT_STATUS_OK
ReadX 9588 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9589 NT_STATUS_OK
ReadX 9589 0 61440 61440 NT_STATUS_OK
ReadX 9589 61440 4096 4096 NT_STATUS_OK
ReadX 9589 65536 61440 61440 NT_STATUS_OK
ReadX 9589 126976 4096 4096 NT_STATUS_OK
ReadX 9589 131072 61440 61440 NT_STATUS_OK
ReadX 9589 192512 4096 4096 NT_STATUS_OK
ReadX 9589 196608 61440 61440 NT_STATUS_OK
ReadX 9589 258048 4096 4096 NT_STATUS_OK
ReadX 9589 262144 61440 61440 NT_STATUS_OK
ReadX 9589 323584 4096 4096 NT_STATUS_OK
ReadX 9589 327680 61440 61440 NT_STATUS_OK
ReadX 9589 389120 4096 4096 NT_STATUS_OK
ReadX 9589 393216 61440 61440 NT_STATUS_OK
ReadX 9589 454656 4096 4096 NT_STATUS_OK
ReadX 9589 458752 61440 61440 NT_STATUS_OK
ReadX 9589 520192 4096 4096 NT_STATUS_OK
ReadX 9589 524288 61440 61440 NT_STATUS_OK
ReadX 9589 585728 4096 4096 NT_STATUS_OK
ReadX 9589 589824 61440 61440 NT_STATUS_OK
ReadX 9589 651264 4096 4096 NT_STATUS_OK
ReadX 9589 655360 61440 61440 NT_STATUS_OK
ReadX 9589 716800 4096 4096 NT_STATUS_OK
ReadX 9589 720896 61440 61440 NT_STATUS_OK
ReadX 9589 782336 4096 4096 NT_STATUS_OK
ReadX 9589 786432 61440 61440 NT_STATUS_OK
ReadX 9589 847872 4096 4096 NT_STATUS_OK
ReadX 9589 851968 61440 61440 NT_STATUS_OK
ReadX 9589 913408 4096 4096 NT_STATUS_OK
ReadX 9589 917504 61440 61440 NT_STATUS_OK
ReadX 9589 978944 4096 4096 NT_STATUS_OK
ReadX 9589 983040 61440 61440 NT_STATUS_OK
ReadX 9589 1044480 4096 4096 NT_STATUS_OK
ReadX 9589 1048576 61440 61440 NT_STATUS_OK
ReadX 9589 1110016 4096 4096 NT_STATUS_OK
ReadX 9589 1114112 61440 61440 NT_STATUS_OK
ReadX 9589 1175552 4096 4096 NT_STATUS_OK
ReadX 9589 1179648 61440 61440 NT_STATUS_OK
ReadX 9589 1241088 4096 4096 NT_STATUS_OK
ReadX 9589 1245184 61440 61440 NT_STATUS_OK
ReadX 9589 1306624 4096 4096 NT_STATUS_OK
ReadX 9589 1310720 61440 61440 NT_STATUS_OK
ReadX 9589 1372160 4096 4096 NT_STATUS_OK
ReadX 9589 1376256 61440 61440 NT_STATUS_OK
ReadX 9589 1437696 4096 4096 NT_STATUS_OK
ReadX 9589 1441792 61440 61440 NT_STATUS_OK
ReadX 9589 1503232 4096 4096 NT_STATUS_OK
ReadX 9589 1507328 61440 61440 NT_STATUS_OK
ReadX 9589 1568768 4096 4096 NT_STATUS_OK
ReadX 9589 1572864 61440 61440 NT_STATUS_OK
ReadX 9589 1634304 4096 4096 NT_STATUS_OK
ReadX 9589 1638400 61440 61440 NT_STATUS_OK
ReadX 9589 1699840 4096 4096 NT_STATUS_OK
ReadX 9589 1703936 61440 61440 NT_STATUS_OK
ReadX 9589 1765376 4096 4096 NT_STATUS_OK
ReadX 9589 1769472 61440 61440 NT_STATUS_OK
ReadX 9589 1830912 4096 4096 NT_STATUS_OK
ReadX 9589 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9591 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9592 NT_STATUS_OK
ReadX 9592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9593 NT_STATUS_OK
ReadX 9593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9594 NT_STATUS_OK
ReadX 9594 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9595 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9596 NT_STATUS_OK
QUERY_FILE_INFORMATION 9596 1004 NT_STATUS_OK
WriteX 9596 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9596 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9597 NT_STATUS_OK
Close 9597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9598 NT_STATUS_OK
WriteX 9598 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9598 258 NT_STATUS_OK
WriteX 9598 0 491 491 NT_STATUS_OK
Close 9598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9599 NT_STATUS_OK
ReadX 9599 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9596 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9601 NT_STATUS_OK
Close 9601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9602 NT_STATUS_OK
WriteX 9602 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9602 258 NT_STATUS_OK
WriteX 9602 0 543 543 NT_STATUS_OK
Close 9602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9603 NT_STATUS_OK
ReadX 9603 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9587 NT_STATUS_OK
Close 9588 NT_STATUS_OK
Close 9589 NT_STATUS_OK
Close 9603 NT_STATUS_OK
Close 9591 NT_STATUS_OK
Close 9592 NT_STATUS_OK
Close 9593 NT_STATUS_OK
Close 9594 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9606 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9607 NT_STATUS_OK
ReadX 9607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9608 NT_STATUS_OK
ReadX 9608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9609 NT_STATUS_OK
ReadX 9609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9610 NT_STATUS_OK
ReadX 9610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9611 NT_STATUS_OK
ReadX 9611 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9616 NT_STATUS_OK
QUERY_FILE_INFORMATION 9616 1004 NT_STATUS_OK
WriteX 9616 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9616 258 NT_STATUS_OK
WriteX 9616 0 2048 2048 NT_STATUS_OK
Close 9616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9617 NT_STATUS_OK
ReadX 9617 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9617 0 4096 4096 NT_STATUS_OK
Flush 9617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9617 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9622 NT_STATUS_OK
WriteX 9622 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9622 258 NT_STATUS_OK
WriteX 9622 0 2048 2048 NT_STATUS_OK
Close 9622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9623 NT_STATUS_OK
ReadX 9623 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9627 NT_STATUS_OK
Close 9627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9628 NT_STATUS_OK
WriteX 9628 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9628 258 NT_STATUS_OK
WriteX 9628 0 2048 2048 NT_STATUS_OK
Close 9628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9629 NT_STATUS_OK
ReadX 9629 0 2048 2048 NT_STATUS_OK
ReadX 9607 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9611 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9623 0 4096 4096 NT_STATUS_OK
WriteX 9607 0 8192 8192 NT_STATUS_OK
WriteX 9608 0 4096 4096 NT_STATUS_OK
WriteX 9609 0 4096 4096 NT_STATUS_OK
ReadX 9623 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9632 NT_STATUS_OK
ReadX 9632 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9633 NT_STATUS_OK
QUERY_FILE_INFORMATION 9633 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9632 NT_STATUS_OK
Close 9608 NT_STATUS_OK
Close 9609 NT_STATUS_OK
Close 9610 NT_STATUS_OK
Close 9623 NT_STATUS_OK
Close 9607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9636 NT_STATUS_OK
ReadX 9636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9637 NT_STATUS_OK
ReadX 9637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9638 NT_STATUS_OK
ReadX 9638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9639 NT_STATUS_OK
ReadX 9639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9640 NT_STATUS_OK
ReadX 9640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9641 NT_STATUS_OK
ReadX 9641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9642 NT_STATUS_OK
ReadX 9642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9643 NT_STATUS_OK
ReadX 9643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9644 NT_STATUS_OK
ReadX 9644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9645 NT_STATUS_OK
ReadX 9645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9646 NT_STATUS_OK
ReadX 9646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9647 NT_STATUS_OK
ReadX 9647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9648 NT_STATUS_OK
ReadX 9648 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9653 NT_STATUS_OK
QUERY_FILE_INFORMATION 9653 1004 NT_STATUS_OK
WriteX 9653 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9653 258 NT_STATUS_OK
WriteX 9653 0 2048 2048 NT_STATUS_OK
Close 9653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9654 NT_STATUS_OK
ReadX 9654 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9656 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9661 NT_STATUS_OK
QUERY_FILE_INFORMATION 9661 1004 NT_STATUS_OK
WriteX 9661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9661 258 NT_STATUS_OK
WriteX 9661 0 2048 2048 NT_STATUS_OK
Close 9661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9662 NT_STATUS_OK
ReadX 9662 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9654 0 4096 4096 NT_STATUS_OK
Flush 9654 NT_STATUS_OK
WriteX 9662 0 4096 4096 NT_STATUS_OK
Flush 9662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9654 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9656 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9664 NT_STATUS_OK
WriteX 9664 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9664 258 NT_STATUS_OK
WriteX 9664 0 4096 4096 NT_STATUS_OK
Close 9664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9665 NT_STATUS_OK
ReadX 9665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9666 NT_STATUS_OK
Close 9666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9667 NT_STATUS_OK
WriteX 9667 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9667 258 NT_STATUS_OK
WriteX 9667 0 4096 4096 NT_STATUS_OK
Close 9667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9668 NT_STATUS_OK
ReadX 9668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9668 0 4096 4096 NT_STATUS_OK
Close 9665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9648 NT_STATUS_OK
Close 9642 NT_STATUS_OK
Close 9656 NT_STATUS_OK
Close 9645 NT_STATUS_OK
Close 9646 NT_STATUS_OK
Close 9647 NT_STATUS_OK
Close 9643 NT_STATUS_OK
Close 9636 NT_STATUS_OK
Close 9637 NT_STATUS_OK
Close 9640 NT_STATUS_OK
Close 9641 NT_STATUS_OK
Close 9638 NT_STATUS_OK
Close 9639 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9671 NT_STATUS_OK
Close 9671 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9673 NT_STATUS_OK
ReadX 9673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9674 NT_STATUS_OK
Close 9674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9675 NT_STATUS_OK
WriteX 9675 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9675 258 NT_STATUS_OK
WriteX 9675 0 2048 2048 NT_STATUS_OK
Close 9675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9676 NT_STATUS_OK
ReadX 9676 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9678 NT_STATUS_OK
ReadX 9678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9679 NT_STATUS_OK
ReadX 9679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9680 NT_STATUS_OK
ReadX 9680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9681 NT_STATUS_OK
ReadX 9681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9682 NT_STATUS_OK
ReadX 9682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9683 NT_STATUS_OK
ReadX 9683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9684 NT_STATUS_OK
ReadX 9684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9685 NT_STATUS_OK
ReadX 9685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9686 NT_STATUS_OK
ReadX 9686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9687 NT_STATUS_OK
ReadX 9687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9688 NT_STATUS_OK
ReadX 9688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9689 NT_STATUS_OK
ReadX 9689 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9690 NT_STATUS_OK
QUERY_FILE_INFORMATION 9690 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9673 NT_STATUS_OK
Close 9676 NT_STATUS_OK
Close 9688 NT_STATUS_OK
Close 9683 NT_STATUS_OK
Close 9684 NT_STATUS_OK
Close 9685 NT_STATUS_OK
Close 9686 NT_STATUS_OK
Close 9687 NT_STATUS_OK
Close 9689 NT_STATUS_OK
Close 9677 NT_STATUS_OK
Close 9678 NT_STATUS_OK
Close 9681 NT_STATUS_OK
Close 9682 NT_STATUS_OK
Close 9679 NT_STATUS_OK
Close 9680 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9692 NT_STATUS_OK
QUERY_FILE_INFORMATION 9692 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9695 NT_STATUS_OK
ReadX 9695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9696 NT_STATUS_OK
ReadX 9696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9697 NT_STATUS_OK
ReadX 9697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9698 NT_STATUS_OK
ReadX 9698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9699 NT_STATUS_OK
ReadX 9699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9700 NT_STATUS_OK
ReadX 9700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9701 NT_STATUS_OK
ReadX 9701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9702 NT_STATUS_OK
ReadX 9702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9703 NT_STATUS_OK
ReadX 9703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9704 NT_STATUS_OK
ReadX 9704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9705 NT_STATUS_OK
ReadX 9705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9706 NT_STATUS_OK
ReadX 9706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9707 NT_STATUS_OK
ReadX 9707 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9712 NT_STATUS_OK
QUERY_FILE_INFORMATION 9712 1004 NT_STATUS_OK
WriteX 9712 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9712 258 NT_STATUS_OK
WriteX 9712 0 2048 2048 NT_STATUS_OK
Close 9712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9713 NT_STATUS_OK
ReadX 9713 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9716 NT_STATUS_OK
ReadX 9716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9717 NT_STATUS_OK
ReadX 9717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9718 NT_STATUS_OK
ReadX 9718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9719 NT_STATUS_OK
ReadX 9719 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 9723 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9724 NT_STATUS_OK
QUERY_FILE_INFORMATION 9724 1004 NT_STATUS_OK
WriteX 9724 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9724 258 NT_STATUS_OK
WriteX 9724 0 2048 2048 NT_STATUS_OK
Close 9724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9725 NT_STATUS_OK
ReadX 9725 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9727 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9732 NT_STATUS_OK
QUERY_FILE_INFORMATION 9732 1004 NT_STATUS_OK
WriteX 9732 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9732 258 NT_STATUS_OK
WriteX 9732 0 2048 2048 NT_STATUS_OK
Close 9732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9733 NT_STATUS_OK
ReadX 9733 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9713 0 4096 4096 NT_STATUS_OK
Flush 9713 NT_STATUS_OK
WriteX 9725 0 4096 4096 NT_STATUS_OK
Flush 9725 NT_STATUS_OK
WriteX 9733 0 4096 4096 NT_STATUS_OK
Flush 9733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9713 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 9725 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9733 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9715 4096 16384 16384 NT_STATUS_OK
ReadX 9695 4096 16384 16384 NT_STATUS_OK
ReadX 9727 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9735 NT_STATUS_OK
ReadX 9735 0 2048 2048 NT_STATUS_OK
WriteX 9735 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9736 NT_STATUS_OK
QUERY_FILE_INFORMATION 9736 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9735 NT_STATUS_OK
Close 9719 NT_STATUS_OK
Close 9707 NT_STATUS_OK
Close 9699 NT_STATUS_OK
Close 9715 NT_STATUS_OK
Close 9716 NT_STATUS_OK
Close 9717 NT_STATUS_OK
Close 9718 NT_STATUS_OK
Close 9706 NT_STATUS_OK
Close 9727 NT_STATUS_OK
Close 9701 NT_STATUS_OK
Close 9704 NT_STATUS_OK
Close 9705 NT_STATUS_OK
Close 9702 NT_STATUS_OK
Close 9703 NT_STATUS_OK
Close 9695 NT_STATUS_OK
Close 9696 NT_STATUS_OK
Close 9697 NT_STATUS_OK
Close 9698 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9738 NT_STATUS_OK
QUERY_FILE_INFORMATION 9738 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9740 NT_STATUS_OK
QUERY_FILE_INFORMATION 9740 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9743 NT_STATUS_OK
ReadX 9743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9744 NT_STATUS_OK
ReadX 9744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9745 NT_STATUS_OK
ReadX 9745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9746 NT_STATUS_OK
ReadX 9746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9747 NT_STATUS_OK
ReadX 9747 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9743 4096 16384 16384 NT_STATUS_OK
WriteX 9743 0 4096 4096 NT_STATUS_OK
WriteX 9744 0 4096 4096 NT_STATUS_OK
WriteX 9745 0 4096 4096 NT_STATUS_OK
WriteX 9746 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9748 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9749 NT_STATUS_OK
ReadX 9749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9750 NT_STATUS_OK
ReadX 9750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9751 NT_STATUS_OK
ReadX 9751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9752 NT_STATUS_OK
ReadX 9752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9753 NT_STATUS_OK
ReadX 9753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9754 NT_STATUS_OK
ReadX 9754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9755 NT_STATUS_OK
ReadX 9755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9756 NT_STATUS_OK
ReadX 9756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9757 NT_STATUS_OK
ReadX 9757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9758 NT_STATUS_OK
ReadX 9758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9759 NT_STATUS_OK
ReadX 9759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9760 NT_STATUS_OK
ReadX 9760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9761 NT_STATUS_OK
ReadX 9761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9762 NT_STATUS_OK
ReadX 9762 0 8192 8192 NT_STATUS_OK
ReadX 9749 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9763 0 4096 4096 NT_STATUS_OK
ReadX 9763 4096 4096 4096 NT_STATUS_OK
ReadX 9763 8192 4096 4096 NT_STATUS_OK
WriteX 9749 0 4096 4096 NT_STATUS_OK
WriteX 9750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9764 0 4096 4096 NT_STATUS_OK
ReadX 9764 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9743 0 4096 4096 NT_STATUS_OK
WriteX 9744 0 4096 4096 NT_STATUS_OK
WriteX 9745 0 4096 4096 NT_STATUS_OK
WriteX 9746 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9769 NT_STATUS_OK
QUERY_FILE_INFORMATION 9769 1004 NT_STATUS_OK
WriteX 9769 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9769 258 NT_STATUS_OK
WriteX 9769 0 2048 2048 NT_STATUS_OK
Close 9769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9770 NT_STATUS_OK
ReadX 9770 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9772 NT_STATUS_OK
ReadX 9772 0 4096 4096 NT_STATUS_OK
ReadX 9772 4096 4096 4096 NT_STATUS_OK
WriteX 9772 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9774 NT_STATUS_OK
ReadX 9774 0 4096 4096 NT_STATUS_OK
ReadX 9774 4096 4096 4096 NT_STATUS_OK
WriteX 9774 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9775 NT_STATUS_OK
QUERY_FILE_INFORMATION 9775 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9762 NT_STATUS_OK
Close 9747 NT_STATUS_OK
Close 9743 NT_STATUS_OK
Close 9744 NT_STATUS_OK
Close 9745 NT_STATUS_OK
Close 9746 NT_STATUS_OK
Close 9755 NT_STATUS_OK
Close 9760 NT_STATUS_OK
Close 9756 NT_STATUS_OK
Close 9757 NT_STATUS_OK
Close 9758 NT_STATUS_OK
Close 9759 NT_STATUS_OK
Close 9761 NT_STATUS_OK
Close 9749 NT_STATUS_OK
Close 9750 NT_STATUS_OK
Close 9753 NT_STATUS_OK
Close 9754 NT_STATUS_OK
Close 9751 NT_STATUS_OK
Close 9752 NT_STATUS_OK
Close 9774 NT_STATUS_OK
Close 9763 NT_STATUS_OK
Close 9764 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9777 0 4096 4096 NT_STATUS_OK
ReadX 9777 4096 4096 4096 NT_STATUS_OK
ReadX 9777 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9779 NT_STATUS_OK
ReadX 9779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9780 NT_STATUS_OK
ReadX 9780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9781 NT_STATUS_OK
ReadX 9781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9782 NT_STATUS_OK
ReadX 9782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9783 NT_STATUS_OK
ReadX 9783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9784 NT_STATUS_OK
ReadX 9784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9785 NT_STATUS_OK
ReadX 9785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9786 NT_STATUS_OK
ReadX 9786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9787 NT_STATUS_OK
ReadX 9787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9788 NT_STATUS_OK
ReadX 9788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9789 NT_STATUS_OK
ReadX 9789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9790 NT_STATUS_OK
ReadX 9790 0 4096 4096 NT_STATUS_OK
ReadX 9778 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9794 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9795 NT_STATUS_OK
QUERY_FILE_INFORMATION 9795 1004 NT_STATUS_OK
WriteX 9795 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9795 258 NT_STATUS_OK
WriteX 9795 0 2048 2048 NT_STATUS_OK
Close 9795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9796 NT_STATUS_OK
ReadX 9796 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9800 NT_STATUS_OK
Close 9800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9801 NT_STATUS_OK
QUERY_FILE_INFORMATION 9801 1004 NT_STATUS_OK
WriteX 9801 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9801 258 NT_STATUS_OK
WriteX 9801 0 2048 2048 NT_STATUS_OK
Close 9801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9802 NT_STATUS_OK
ReadX 9802 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9802 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9785 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9803 NT_STATUS_OK
QUERY_FILE_INFORMATION 9803 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9789 NT_STATUS_OK
Close 9784 NT_STATUS_OK
Close 9790 NT_STATUS_OK
Close 9778 NT_STATUS_OK
Close 9779 NT_STATUS_OK
Close 9782 NT_STATUS_OK
Close 9783 NT_STATUS_OK
Close 9780 NT_STATUS_OK
Close 9781 NT_STATUS_OK
Close 9785 NT_STATUS_OK
Close 9786 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Close 9788 NT_STATUS_OK
Close 9777 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9805 NT_STATUS_OK
QUERY_FILE_INFORMATION 9805 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9807 NT_STATUS_OK
ReadX 9807 61440 4096 4096 NT_STATUS_OK
ReadX 9807 126976 4096 4096 NT_STATUS_OK
WriteX 9807 0 65536 65536 NT_STATUS_OK
WriteX 9807 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9808 NT_STATUS_OK
ReadX 9808 61440 4096 4096 NT_STATUS_OK
ReadX 9808 126976 4096 4096 NT_STATUS_OK
ReadX 9808 192512 4096 4096 NT_STATUS_OK
ReadX 9808 258048 4096 4096 NT_STATUS_OK
WriteX 9808 0 65536 65536 NT_STATUS_OK
WriteX 9808 65536 65536 65536 NT_STATUS_OK
WriteX 9808 131072 65536 65536 NT_STATUS_OK
WriteX 9808 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9809 NT_STATUS_OK
ReadX 9809 61440 4096 4096 NT_STATUS_OK
ReadX 9809 126976 4096 4096 NT_STATUS_OK
ReadX 9809 192512 4096 4096 NT_STATUS_OK
ReadX 9809 258048 4096 4096 NT_STATUS_OK
ReadX 9809 323584 4096 4096 NT_STATUS_OK
ReadX 9809 389120 4096 4096 NT_STATUS_OK
ReadX 9809 454656 4096 4096 NT_STATUS_OK
ReadX 9809 520192 4096 4096 NT_STATUS_OK
WriteX 9809 0 65536 65536 NT_STATUS_OK
WriteX 9809 65536 65536 65536 NT_STATUS_OK
WriteX 9809 131072 65536 65536 NT_STATUS_OK
WriteX 9809 196608 65536 65536 NT_STATUS_OK
WriteX 9809 262144 65536 65536 NT_STATUS_OK
WriteX 9809 327680 65536 65536 NT_STATUS_OK
WriteX 9809 393216 65536 65536 NT_STATUS_OK
WriteX 9809 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9810 NT_STATUS_OK
ReadX 9810 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9810 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9810 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9810 8192 4096 4096 NT_STATUS_OK
ReadX 9810 12288 4096 4096 NT_STATUS_OK
ReadX 9810 16384 4096 4096 NT_STATUS_OK
ReadX 9810 20480 4096 4096 NT_STATUS_OK
ReadX 9810 24576 4096 4096 NT_STATUS_OK
ReadX 9810 28672 4096 4096 NT_STATUS_OK
ReadX 9810 32768 4096 4096 NT_STATUS_OK
ReadX 9810 36864 4096 4096 NT_STATUS_OK
ReadX 9810 40960 4096 4096 NT_STATUS_OK
ReadX 9810 45056 4096 4096 NT_STATUS_OK
ReadX 9810 49152 4096 4096 NT_STATUS_OK
ReadX 9810 53248 4096 4096 NT_STATUS_OK
ReadX 9810 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9810 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9811 NT_STATUS_OK
Close 9811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9807 NT_STATUS_OK
Close 9808 NT_STATUS_OK
Close 9809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9813 NT_STATUS_OK
WriteX 9813 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9813 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9813 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9813 1004 NT_STATUS_OK
WriteX 9813 0 57088 57088 NT_STATUS_OK
WriteX 9813 0 4096 4096 NT_STATUS_OK
Flush 9813 NT_STATUS_OK
Close 9810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9814 NT_STATUS_OK
SET_FILE_INFORMATION 9814 1004 NT_STATUS_OK
Close 9814 NT_STATUS_OK
SET_FILE_INFORMATION 9813 1004 NT_STATUS_OK
WriteX 9813 0 4096 4096 NT_STATUS_OK
Close 9813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9815 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9817 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9818 NT_STATUS_OK
WriteX 9818 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9818 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9818 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9818 1004 NT_STATUS_OK
WriteX 9818 0 51456 51456 NT_STATUS_OK
WriteX 9818 0 4096 4096 NT_STATUS_OK
Flush 9818 NT_STATUS_OK
SET_FILE_INFORMATION 9818 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9818 1004 NT_STATUS_OK
WriteX 9818 0 4096 4096 NT_STATUS_OK
Close 9818 NT_STATUS_OK
Close 9817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9820 NT_STATUS_OK
Close 9820 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9822 NT_STATUS_OK
ReadX 9822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9822 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9824 NT_STATUS_OK
Close 9824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9827 NT_STATUS_OK
WriteX 9827 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 258 NT_STATUS_OK
WriteX 9827 0 53077 53077 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9828 NT_STATUS_OK
WriteX 9828 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9828 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9828 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9828 1004 NT_STATUS_OK
WriteX 9828 0 65536 65536 NT_STATUS_OK
WriteX 9828 65536 1856 1856 NT_STATUS_OK
WriteX 9828 0 4096 4096 NT_STATUS_OK
Flush 9828 NT_STATUS_OK
SET_FILE_INFORMATION 9828 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9828 1004 NT_STATUS_OK
WriteX 9828 0 4096 4096 NT_STATUS_OK
Close 9828 NT_STATUS_OK
Close 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9834 NT_STATUS_OK
Close 9834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9837 NT_STATUS_OK
WriteX 9837 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 258 NT_STATUS_OK
WriteX 9837 0 7983 7983 NT_STATUS_OK
Close 9837 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9839 NT_STATUS_OK
Close 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9842 NT_STATUS_OK
WriteX 9842 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 258 NT_STATUS_OK
WriteX 9842 0 65536 65536 NT_STATUS_OK
WriteX 9842 65536 65536 65536 NT_STATUS_OK
WriteX 9842 131072 65536 65536 NT_STATUS_OK
WriteX 9842 196608 65536 65536 NT_STATUS_OK
WriteX 9842 262144 65536 65536 NT_STATUS_OK
WriteX 9842 327680 65536 65536 NT_STATUS_OK
WriteX 9842 393216 65536 65536 NT_STATUS_OK
WriteX 9842 458752 46731 46731 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9843 NT_STATUS_OK
WriteX 9843 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9843 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9832 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9843 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9843 1004 NT_STATUS_OK
WriteX 9843 0 65536 65536 NT_STATUS_OK
WriteX 9843 65536 22848 22848 NT_STATUS_OK
WriteX 9843 0 4096 4096 NT_STATUS_OK
Flush 9843 NT_STATUS_OK
SET_FILE_INFORMATION 9843 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9843 1004 NT_STATUS_OK
WriteX 9843 0 4096 4096 NT_STATUS_OK
Close 9843 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9845 NT_STATUS_OK
Close 9845 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9847 NT_STATUS_OK
ReadX 9847 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9847 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9848 NT_STATUS_OK
ReadX 9848 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9848 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9848 1004 NT_STATUS_OK
ReadX 9848 8192 4096 4096 NT_STATUS_OK
ReadX 9848 12288 4096 4096 NT_STATUS_OK
ReadX 9848 16384 4096 4096 NT_STATUS_OK
ReadX 9848 20480 4096 4096 NT_STATUS_OK
ReadX 9848 24576 4096 4096 NT_STATUS_OK
ReadX 9848 28672 4096 4096 NT_STATUS_OK
ReadX 9848 32768 4096 4096 NT_STATUS_OK
ReadX 9848 36864 4096 4096 NT_STATUS_OK
ReadX 9848 40960 4096 4096 NT_STATUS_OK
ReadX 9848 45056 4096 4096 NT_STATUS_OK
ReadX 9848 49152 4096 4096 NT_STATUS_OK
ReadX 9848 53248 4096 4096 NT_STATUS_OK
ReadX 9848 57344 4096 4096 NT_STATUS_OK
ReadX 9848 61440 4096 4096 NT_STATUS_OK
ReadX 9848 65536 4096 4096 NT_STATUS_OK
ReadX 9848 69632 4096 4096 NT_STATUS_OK
ReadX 9848 73728 4096 4096 NT_STATUS_OK
ReadX 9848 77824 4096 4096 NT_STATUS_OK
ReadX 9848 81920 4096 4096 NT_STATUS_OK
ReadX 9848 86016 4096 4096 NT_STATUS_OK
ReadX 9848 90112 4096 4096 NT_STATUS_OK
ReadX 9848 94208 4096 4096 NT_STATUS_OK
ReadX 9848 98304 4096 4096 NT_STATUS_OK
ReadX 9848 102400 4096 4096 NT_STATUS_OK
ReadX 9848 106496 4096 4096 NT_STATUS_OK
ReadX 9848 110592 4096 4096 NT_STATUS_OK
ReadX 9848 114688 4096 4096 NT_STATUS_OK
ReadX 9848 118784 4096 4096 NT_STATUS_OK
ReadX 9848 122880 4096 4096 NT_STATUS_OK
ReadX 9848 126976 4096 4096 NT_STATUS_OK
ReadX 9848 131072 4096 4096 NT_STATUS_OK
ReadX 9848 135168 4096 4096 NT_STATUS_OK
ReadX 9848 139264 4096 4096 NT_STATUS_OK
ReadX 9848 143360 4096 4096 NT_STATUS_OK
ReadX 9848 147456 4096 4096 NT_STATUS_OK
ReadX 9848 151552 4096 4096 NT_STATUS_OK
ReadX 9848 155648 4096 4096 NT_STATUS_OK
ReadX 9848 159744 4096 4096 NT_STATUS_OK
ReadX 9848 163840 4096 4096 NT_STATUS_OK
ReadX 9848 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9848 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9849 NT_STATUS_OK
Close 9849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9847 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9851 NT_STATUS_OK
WriteX 9851 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 258 NT_STATUS_OK
Close 9848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9852 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
Close 9852 NT_STATUS_OK
WriteX 9851 0 42388 42388 NT_STATUS_OK
Close 9851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9853 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
ReadX 9855 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9856 NT_STATUS_OK
WriteX 9856 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9856 258 NT_STATUS_OK
SET_FILE_INFORMATION 9856 1004 NT_STATUS_OK
WriteX 9856 0 42652 42652 NT_STATUS_OK
Close 9856 NT_STATUS_OK
Close 9855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9858 NT_STATUS_OK
Close 9858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9860 NT_STATUS_OK
ReadX 9860 0 4096 4096 NT_STATUS_OK
ReadX 9860 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9862 NT_STATUS_OK
Close 9862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9865 NT_STATUS_OK
WriteX 9865 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9865 258 NT_STATUS_OK
WriteX 9865 0 65536 65536 NT_STATUS_OK
WriteX 9865 65536 49 49 NT_STATUS_OK
Close 9865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 61440 61440 NT_STATUS_OK
ReadX 9866 61440 4096 4096 NT_STATUS_OK
ReadX 9866 65536 61440 61440 NT_STATUS_OK
ReadX 9866 126976 4096 4096 NT_STATUS_OK
ReadX 9866 131072 61440 61440 NT_STATUS_OK
ReadX 9866 192512 4096 4096 NT_STATUS_OK
ReadX 9866 196608 61440 61440 NT_STATUS_OK
ReadX 9866 258048 4096 4096 NT_STATUS_OK
ReadX 9866 262144 61440 61440 NT_STATUS_OK
ReadX 9866 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 61440 61440 NT_STATUS_OK
ReadX 9867 61440 4096 4096 NT_STATUS_OK
ReadX 9867 65536 61440 61440 NT_STATUS_OK
ReadX 9867 126976 4096 4096 NT_STATUS_OK
ReadX 9867 131072 61440 61440 NT_STATUS_OK
ReadX 9867 192512 4096 4096 NT_STATUS_OK
ReadX 9867 196608 61440 61440 NT_STATUS_OK
ReadX 9867 258048 4096 4096 NT_STATUS_OK
ReadX 9867 262144 61440 61440 NT_STATUS_OK
ReadX 9867 323584 4096 4096 NT_STATUS_OK
ReadX 9867 327680 61440 61440 NT_STATUS_OK
ReadX 9867 389120 4096 4096 NT_STATUS_OK
ReadX 9867 393216 61440 61440 NT_STATUS_OK
ReadX 9867 454656 4096 4096 NT_STATUS_OK
ReadX 9867 458752 61440 61440 NT_STATUS_OK
ReadX 9867 520192 4096 4096 NT_STATUS_OK
ReadX 9867 524288 61440 61440 NT_STATUS_OK
ReadX 9867 585728 4096 4096 NT_STATUS_OK
ReadX 9867 589824 61440 61440 NT_STATUS_OK
ReadX 9867 651264 4096 4096 NT_STATUS_OK
ReadX 9867 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 61440 61440 NT_STATUS_OK
ReadX 9868 61440 4096 4096 NT_STATUS_OK
ReadX 9868 65536 61440 61440 NT_STATUS_OK
ReadX 9868 126976 4096 4096 NT_STATUS_OK
ReadX 9868 131072 61440 61440 NT_STATUS_OK
ReadX 9868 192512 4096 4096 NT_STATUS_OK
ReadX 9868 196608 61440 61440 NT_STATUS_OK
ReadX 9868 258048 4096 4096 NT_STATUS_OK
ReadX 9868 262144 61440 61440 NT_STATUS_OK
ReadX 9868 323584 4096 4096 NT_STATUS_OK
ReadX 9868 327680 61440 61440 NT_STATUS_OK
ReadX 9868 389120 4096 4096 NT_STATUS_OK
ReadX 9868 393216 61440 61440 NT_STATUS_OK
ReadX 9868 454656 4096 4096 NT_STATUS_OK
ReadX 9868 458752 61440 61440 NT_STATUS_OK
ReadX 9868 520192 4096 4096 NT_STATUS_OK
ReadX 9868 524288 61440 61440 NT_STATUS_OK
ReadX 9868 585728 4096 4096 NT_STATUS_OK
ReadX 9868 589824 61440 61440 NT_STATUS_OK
ReadX 9868 651264 4096 4096 NT_STATUS_OK
ReadX 9868 655360 61440 61440 NT_STATUS_OK
ReadX 9868 716800 4096 4096 NT_STATUS_OK
ReadX 9868 720896 61440 61440 NT_STATUS_OK
ReadX 9868 782336 4096 4096 NT_STATUS_OK
ReadX 9868 786432 61440 61440 NT_STATUS_OK
ReadX 9868 847872 4096 4096 NT_STATUS_OK
ReadX 9868 851968 61440 61440 NT_STATUS_OK
ReadX 9868 913408 4096 4096 NT_STATUS_OK
ReadX 9868 917504 61440 61440 NT_STATUS_OK
ReadX 9868 978944 4096 4096 NT_STATUS_OK
ReadX 9868 983040 61440 61440 NT_STATUS_OK
ReadX 9868 1044480 4096 4096 NT_STATUS_OK
ReadX 9868 1048576 61440 61440 NT_STATUS_OK
ReadX 9868 1110016 4096 4096 NT_STATUS_OK
ReadX 9868 1114112 61440 61440 NT_STATUS_OK
ReadX 9868 1175552 4096 4096 NT_STATUS_OK
ReadX 9868 1179648 61440 61440 NT_STATUS_OK
ReadX 9868 1241088 4096 4096 NT_STATUS_OK
ReadX 9868 1245184 61440 61440 NT_STATUS_OK
ReadX 9868 1306624 4096 4096 NT_STATUS_OK
ReadX 9868 1310720 61440 61440 NT_STATUS_OK
ReadX 9868 1372160 4096 4096 NT_STATUS_OK
ReadX 9868 1376256 61440 61440 NT_STATUS_OK
ReadX 9868 1437696 4096 4096 NT_STATUS_OK
ReadX 9868 1441792 61440 61440 NT_STATUS_OK
ReadX 9868 1503232 4096 4096 NT_STATUS_OK
ReadX 9868 1507328 61440 61440 NT_STATUS_OK
ReadX 9868 1568768 4096 4096 NT_STATUS_OK
ReadX 9868 1572864 61440 61440 NT_STATUS_OK
ReadX 9868 1634304 4096 4096 NT_STATUS_OK
ReadX 9868 1638400 61440 61440 NT_STATUS_OK
ReadX 9868 1699840 4096 4096 NT_STATUS_OK
ReadX 9868 1703936 61440 61440 NT_STATUS_OK
ReadX 9868 1765376 4096 4096 NT_STATUS_OK
ReadX 9868 1769472 61440 61440 NT_STATUS_OK
ReadX 9868 1830912 4096 4096 NT_STATUS_OK
ReadX 9868 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9870 NT_STATUS_OK
QUERY_FILE_INFORMATION 9870 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9870 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9870 1005 NT_STATUS_OK
ReadX 9870 2156 24 24 NT_STATUS_OK
ReadX 9870 2139 276 276 NT_STATUS_OK
ReadX 9870 2136 14 14 NT_STATUS_OK
ReadX 9870 2136 7 7 NT_STATUS_OK
ReadX 9870 2138 12 12 NT_STATUS_OK
ReadX 9870 2137 8 8 NT_STATUS_OK
ReadX 9870 2135 15 15 NT_STATUS_OK
ReadX 9870 0 16 16 NT_STATUS_OK
ReadX 9870 16 2048 2048 NT_STATUS_OK
ReadX 9870 2064 2048 2048 NT_STATUS_OK
ReadX 9870 257 2048 2048 NT_STATUS_OK
ReadX 9870 385 2048 2048 NT_STATUS_OK
ReadX 9870 513 2048 2048 NT_STATUS_OK
ReadX 9870 641 2048 2048 NT_STATUS_OK
ReadX 9870 769 2048 2048 NT_STATUS_OK
ReadX 9870 897 2048 2048 NT_STATUS_OK
ReadX 9870 1025 2048 2048 NT_STATUS_OK
ReadX 9870 1153 2048 2048 NT_STATUS_OK
ReadX 9870 1281 2048 2048 NT_STATUS_OK
ReadX 9870 1409 2048 2048 NT_STATUS_OK
ReadX 9870 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9872 NT_STATUS_OK
Close 9872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9860 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9875 NT_STATUS_OK
WriteX 9875 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
WriteX 9875 0 10575 10575 NT_STATUS_OK
Flush 9875 NT_STATUS_OK
Close 9875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9876 NT_STATUS_OK
Close 9876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
Close 9870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9880 NT_STATUS_OK
LockX 9880 2147483538 1 NT_STATUS_OK
UnlockX 9880 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9880 1005 NT_STATUS_OK
ReadX 9880 0 512 512 NT_STATUS_OK
ReadX 9880 512 512 512 NT_STATUS_OK
ReadX 9880 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9880 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9880 1004 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9881 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 1005 NT_STATUS_OK
ReadX 9881 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9882 NT_STATUS_OK
LockX 9882 2147483538 1 NT_STATUS_OK
UnlockX 9882 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9882 1005 NT_STATUS_OK
ReadX 9882 0 512 512 NT_STATUS_OK
ReadX 9882 512 512 512 NT_STATUS_OK
ReadX 9882 1024 512 512 NT_STATUS_OK
ReadX 9882 288 20 20 NT_STATUS_OK
ReadX 9882 308 2084 2084 NT_STATUS_OK
ReadX 9882 388 2084 2084 NT_STATUS_OK
ReadX 9882 388 2084 2084 NT_STATUS_OK
ReadX 9869 2157 1386 1386 NT_STATUS_OK
ReadX 9882 2472 399 399 NT_STATUS_OK
ReadX 9882 3072 1536 1536 NT_STATUS_OK
ReadX 9882 544 149 149 NT_STATUS_OK
ReadX 9882 693 485 485 NT_STATUS_OK
Close 9882 NT_STATUS_OK
ReadX 9869 2157 4096 4096 NT_STATUS_OK
ReadX 9869 6253 4096 4096 NT_STATUS_OK
ReadX 9869 10349 4096 4096 NT_STATUS_OK
ReadX 9869 14445 4096 4096 NT_STATUS_OK
ReadX 9869 18541 4096 4096 NT_STATUS_OK
ReadX 9869 22637 256 256 NT_STATUS_OK
ReadX 9869 22893 4096 4096 NT_STATUS_OK
ReadX 9869 26989 4096 4096 NT_STATUS_OK
ReadX 9869 31085 4096 4096 NT_STATUS_OK
ReadX 9869 35181 4096 4096 NT_STATUS_OK
ReadX 9869 39277 4096 4096 NT_STATUS_OK
ReadX 9869 43373 4096 4096 NT_STATUS_OK
ReadX 9869 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9869 2157 1024 1024 NT_STATUS_OK
ReadX 9869 1667 4688 4688 NT_STATUS_OK
ReadX 9869 6355 3516 3516 NT_STATUS_OK
ReadX 9869 9871 16384 16384 NT_STATUS_OK
ReadX 9869 26255 3771 3771 NT_STATUS_OK
ReadX 9869 30026 2048 2048 NT_STATUS_OK
ReadX 9869 32074 1024 1024 NT_STATUS_OK
ReadX 9869 33098 6652 6652 NT_STATUS_OK
ReadX 9869 39750 16384 16384 NT_STATUS_OK
ReadX 9869 56134 10496 10496 NT_STATUS_OK
ReadX 9869 66630 1784 1784 NT_STATUS_OK
ReadX 9869 68414 90 90 NT_STATUS_OK
ReadX 9869 68504 273 273 NT_STATUS_OK
ReadX 9869 68777 1600 1600 NT_STATUS_OK
ReadX 9869 70377 640 640 NT_STATUS_OK
ReadX 9869 71017 1280 1280 NT_STATUS_OK
ReadX 9869 72297 8464 8464 NT_STATUS_OK
ReadX 9869 80761 158 158 NT_STATUS_OK
ReadX 9869 80919 912 912 NT_STATUS_OK
ReadX 9869 81831 1980 1980 NT_STATUS_OK
ReadX 9869 83811 2256 2256 NT_STATUS_OK
ReadX 9869 86067 400 400 NT_STATUS_OK
ReadX 9869 86467 252 252 NT_STATUS_OK
ReadX 9869 86719 42 42 NT_STATUS_OK
ReadX 9869 86761 725 725 NT_STATUS_OK
ReadX 9869 2009 512 512 NT_STATUS_OK
ReadX 9869 3895 9 9 NT_STATUS_OK
ReadX 9869 3781 46 46 NT_STATUS_OK
ReadX 9869 4059 92 92 NT_STATUS_OK
ReadX 9869 3781 92 92 NT_STATUS_OK
ReadX 9869 3986 184 184 NT_STATUS_OK
ReadX 9869 3987 16384 16384 NT_STATUS_OK
ReadX 9869 3902 16384 16384 NT_STATUS_OK
ReadX 9869 3781 10240 10240 NT_STATUS_OK
ReadX 9869 3821 16384 16384 NT_STATUS_OK
ReadX 9869 3891 935 935 NT_STATUS_OK
ReadX 9869 4060 10240 10240 NT_STATUS_OK
ReadX 9869 4059 184 184 NT_STATUS_OK
ReadX 9869 256 184 184 NT_STATUS_OK
ReadX 9869 256 1026 1026 NT_STATUS_OK
ReadX 9869 3901 326 326 NT_STATUS_OK
ReadX 9869 3899 652 652 NT_STATUS_OK
ReadX 9869 256 2 2 NT_STATUS_OK
ReadX 9869 258 4948 4948 NT_STATUS_OK
Close 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9884 NT_STATUS_OK
Close 9884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9887 NT_STATUS_OK
WriteX 9887 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9887 258 NT_STATUS_OK
WriteX 9887 0 65536 65536 NT_STATUS_OK
WriteX 9887 65536 65536 65536 NT_STATUS_OK
WriteX 9887 131072 65536 65536 NT_STATUS_OK
WriteX 9887 196608 65536 65536 NT_STATUS_OK
WriteX 9887 262144 65536 65536 NT_STATUS_OK
WriteX 9887 327680 65536 65536 NT_STATUS_OK
WriteX 9887 393216 65536 65536 NT_STATUS_OK
WriteX 9887 458752 65536 65536 NT_STATUS_OK
WriteX 9887 524288 65536 65536 NT_STATUS_OK
WriteX 9887 589824 35257 35257 NT_STATUS_OK
Close 9887 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9889 NT_STATUS_OK
Close 9889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9892 NT_STATUS_OK
WriteX 9892 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9892 258 NT_STATUS_OK
WriteX 9892 0 65536 65536 NT_STATUS_OK
WriteX 9892 65536 65536 65536 NT_STATUS_OK
WriteX 9892 131072 65536 65536 NT_STATUS_OK
WriteX 9892 196608 65536 65536 NT_STATUS_OK
WriteX 9892 262144 65536 65536 NT_STATUS_OK
WriteX 9892 327680 65536 65536 NT_STATUS_OK
WriteX 9892 393216 65536 65536 NT_STATUS_OK
WriteX 9892 458752 65536 65536 NT_STATUS_OK
WriteX 9892 524288 65536 65536 NT_STATUS_OK
WriteX 9892 589824 57598 57598 NT_STATUS_OK
Close 9892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9894 NT_STATUS_OK
WriteX 9894 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9894 258 NT_STATUS_OK
WriteX 9894 0 12543 12543 NT_STATUS_OK
Flush 9894 NT_STATUS_OK
Close 9894 NT_STATUS_OK
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9896 NT_STATUS_OK
Close 9896 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9898 NT_STATUS_OK
ReadX 9898 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9900 NT_STATUS_OK
QUERY_FILE_INFORMATION 9900 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9900 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9900 1005 NT_STATUS_OK
ReadX 9900 1938 24 24 NT_STATUS_OK
ReadX 9900 1920 276 276 NT_STATUS_OK
ReadX 9900 1918 14 14 NT_STATUS_OK
ReadX 9900 1918 7 7 NT_STATUS_OK
ReadX 9900 1919 12 12 NT_STATUS_OK
ReadX 9900 1919 8 8 NT_STATUS_OK
ReadX 9900 1917 15 15 NT_STATUS_OK
ReadX 9900 0 16 16 NT_STATUS_OK
ReadX 9900 16 2048 2048 NT_STATUS_OK
ReadX 9900 2064 2048 2048 NT_STATUS_OK
ReadX 9900 257 2048 2048 NT_STATUS_OK
ReadX 9900 385 2048 2048 NT_STATUS_OK
ReadX 9900 513 2048 2048 NT_STATUS_OK
ReadX 9900 641 2048 2048 NT_STATUS_OK
ReadX 9900 769 2048 2048 NT_STATUS_OK
ReadX 9900 897 2048 2048 NT_STATUS_OK
ReadX 9900 1025 2048 2048 NT_STATUS_OK
ReadX 9900 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9902 NT_STATUS_OK
Close 9902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9905 NT_STATUS_OK
WriteX 9905 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9905 258 NT_STATUS_OK
WriteX 9905 0 11588 11588 NT_STATUS_OK
Flush 9905 NT_STATUS_OK
Close 9905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9906 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 4096 4096 NT_STATUS_OK
Close 9900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9910 NT_STATUS_OK
WriteX 9910 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9910 258 NT_STATUS_OK
WriteX 9910 0 11615 11615 NT_STATUS_OK
Flush 9910 NT_STATUS_OK
Close 9910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9912 NT_STATUS_OK
Close 9912 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9914 NT_STATUS_OK
ReadX 9914 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9916 NT_STATUS_OK
Close 9916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9919 NT_STATUS_OK
WriteX 9919 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9919 258 NT_STATUS_OK
WriteX 9919 0 65536 65536 NT_STATUS_OK
WriteX 9919 65536 16050 16050 NT_STATUS_OK
Close 9919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9899 1939 64 64 NT_STATUS_OK
ReadX 9899 128 248 248 NT_STATUS_OK
ReadX 9899 128 568 568 NT_STATUS_OK
ReadX 9899 3872 1536 1536 NT_STATUS_OK
ReadX 9899 3456 2560 2560 NT_STATUS_OK
ReadX 9899 3136 512 512 NT_STATUS_OK
ReadX 9899 2880 4096 4096 NT_STATUS_OK
ReadX 9899 3264 3072 3072 NT_STATUS_OK
ReadX 9899 320 4096 4096 NT_STATUS_OK
ReadX 9899 1024 4096 4096 NT_STATUS_OK
ReadX 9899 3616 4096 4096 NT_STATUS_OK
ReadX 9899 1939 64 64 NT_STATUS_OK
ReadX 9899 128 248 248 NT_STATUS_OK
ReadX 9899 128 608 608 NT_STATUS_OK
ReadX 9899 2858 1024 1024 NT_STATUS_OK
ReadX 9899 2810 4096 4096 NT_STATUS_OK
ReadX 9899 2826 4096 4096 NT_STATUS_OK
ReadX 9899 2580 2048 2048 NT_STATUS_OK
ReadX 9899 2800 2560 2560 NT_STATUS_OK
ReadX 9899 2100 4096 4096 NT_STATUS_OK
ReadX 9899 2084 4096 4096 NT_STATUS_OK
ReadX 9899 868 4096 4096 NT_STATUS_OK
ReadX 9899 2324 4096 4096 NT_STATUS_OK
ReadX 9899 884 4096 4096 NT_STATUS_OK
ReadX 9899 2604 1024 1024 NT_STATUS_OK
ReadX 9899 580 4096 4096 NT_STATUS_OK
ReadX 9899 596 4096 4096 NT_STATUS_OK
ReadX 9899 2752 4096 4096 NT_STATUS_OK
ReadX 9899 2842 1024 1024 NT_STATUS_OK
ReadX 9899 660 4096 4096 NT_STATUS_OK
ReadX 9899 2720 4096 4096 NT_STATUS_OK
ReadX 9899 2736 4096 4096 NT_STATUS_OK
ReadX 9899 628 4096 4096 NT_STATUS_OK
ReadX 9899 2704 4096 4096 NT_STATUS_OK
ReadX 9899 1556 4096 4096 NT_STATUS_OK
ReadX 9899 576 4096 4096 NT_STATUS_OK
ReadX 9899 3168 1536 1536 NT_STATUS_OK
ReadX 9899 832 4096 4096 NT_STATUS_OK
ReadX 9899 1088 4096 4096 NT_STATUS_OK
ReadX 9899 1344 4096 4096 NT_STATUS_OK
ReadX 9899 1600 4096 4096 NT_STATUS_OK
ReadX 9899 1856 4096 4096 NT_STATUS_OK
ReadX 9899 2112 4096 4096 NT_STATUS_OK
ReadX 9899 1892 4096 4096 NT_STATUS_OK
ReadX 9899 820 4096 4096 NT_STATUS_OK
ReadX 9899 788 4096 4096 NT_STATUS_OK
ReadX 9899 1604 4096 4096 NT_STATUS_OK
ReadX 9899 3648 4096 4096 NT_STATUS_OK
ReadX 9899 2608 4096 4096 NT_STATUS_OK
ReadX 9899 548 4096 4096 NT_STATUS_OK
ReadX 9899 740 4096 4096 NT_STATUS_OK
ReadX 9899 1344 4096 4096 NT_STATUS_OK
ReadX 9899 3392 4096 4096 NT_STATUS_OK
ReadX 9899 3904 4096 4096 NT_STATUS_OK
ReadX 9899 644 4096 4096 NT_STATUS_OK
ReadX 9899 676 4096 4096 NT_STATUS_OK
ReadX 9899 2688 4096 4096 NT_STATUS_OK
ReadX 9899 320 4096 4096 NT_STATUS_OK
ReadX 9899 900 4096 4096 NT_STATUS_OK
ReadX 9899 1908 4096 4096 NT_STATUS_OK
ReadX 9899 852 4096 4096 NT_STATUS_OK
ReadX 9899 724 4096 4096 NT_STATUS_OK
ReadX 9899 2292 4096 4096 NT_STATUS_OK
ReadX 9899 612 4096 4096 NT_STATUS_OK
ReadX 9899 388 4096 4096 NT_STATUS_OK
ReadX 9899 2368 4096 4096 NT_STATUS_OK
ReadX 9899 2624 4096 4096 NT_STATUS_OK
ReadX 9899 500 4096 4096 NT_STATUS_OK
ReadX 9899 356 4096 4096 NT_STATUS_OK
ReadX 9899 1024 4096 4096 NT_STATUS_OK
ReadX 9899 576 4096 4096 NT_STATUS_OK
ReadX 9899 340 4096 4096 NT_STATUS_OK
ReadX 9899 420 4096 4096 NT_STATUS_OK
ReadX 9899 1600 4096 4096 NT_STATUS_OK
ReadX 9899 404 4096 4096 NT_STATUS_OK
ReadX 9899 1428 4096 4096 NT_STATUS_OK
ReadX 9899 2656 4096 4096 NT_STATUS_OK
ReadX 9899 2624 4096 4096 NT_STATUS_OK
ReadX 9899 452 4096 4096 NT_STATUS_OK
ReadX 9899 692 4096 4096 NT_STATUS_OK
ReadX 9899 564 4096 4096 NT_STATUS_OK
ReadX 9899 372 4096 4096 NT_STATUS_OK
ReadX 9899 468 4096 4096 NT_STATUS_OK
ReadX 9899 484 4096 4096 NT_STATUS_OK
ReadX 9899 1088 4096 4096 NT_STATUS_OK
ReadX 9899 1924 4096 4096 NT_STATUS_OK
ReadX 9899 2768 4096 4096 NT_STATUS_OK
ReadX 9899 832 4096 4096 NT_STATUS_OK
ReadX 9899 836 4096 4096 NT_STATUS_OK
ReadX 9899 1856 4096 4096 NT_STATUS_OK
ReadX 9899 2640 4096 4096 NT_STATUS_OK
ReadX 9899 436 4096 4096 NT_STATUS_OK
ReadX 9899 1828 4096 4096 NT_STATUS_OK
ReadX 9899 804 4096 4096 NT_STATUS_OK
ReadX 9899 1860 4096 4096 NT_STATUS_OK
ReadX 9899 1812 4096 4096 NT_STATUS_OK
ReadX 9899 756 4096 4096 NT_STATUS_OK
ReadX 9899 1636 4096 4096 NT_STATUS_OK
ReadX 9899 772 4096 4096 NT_STATUS_OK
ReadX 9899 2036 4096 4096 NT_STATUS_OK
ReadX 9899 1220 4096 4096 NT_STATUS_OK
ReadX 9899 1652 4096 4096 NT_STATUS_OK
ReadX 9899 2588 4096 4096 NT_STATUS_OK
ReadX 9899 916 4096 4096 NT_STATUS_OK
ReadX 9899 260 4096 4096 NT_STATUS_OK
ReadX 9899 932 4096 4096 NT_STATUS_OK
ReadX 9899 2624 4096 4096 NT_STATUS_OK
ReadX 9899 308 4096 4096 NT_STATUS_OK
ReadX 9899 292 4096 4096 NT_STATUS_OK
ReadX 9899 1140 4096 4096 NT_STATUS_OK
ReadX 9899 276 4096 4096 NT_STATUS_OK
ReadX 9899 2020 4096 4096 NT_STATUS_OK
ReadX 9899 2880 4096 4096 NT_STATUS_OK
ReadX 9899 516 4096 4096 NT_STATUS_OK
ReadX 9899 1844 4096 4096 NT_STATUS_OK
ReadX 9899 1124 4096 4096 NT_STATUS_OK
ReadX 9899 3136 4096 4096 NT_STATUS_OK
ReadX 9899 324 4096 4096 NT_STATUS_OK
ReadX 9899 1156 4096 4096 NT_STATUS_OK
ReadX 9899 1172 4096 4096 NT_STATUS_OK
ReadX 9899 2112 4096 4096 NT_STATUS_OK
ReadX 9899 2368 4096 4096 NT_STATUS_OK
ReadX 9899 964 4096 4096 NT_STATUS_OK
ReadX 9899 980 4096 4096 NT_STATUS_OK
ReadX 9899 1012 4096 4096 NT_STATUS_OK
ReadX 9899 532 4096 4096 NT_STATUS_OK
ReadX 9899 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9899 1620 4096 4096 NT_STATUS_OK
ReadX 9899 1604 4096 4096 NT_STATUS_OK
ReadX 9899 2116 4096 4096 NT_STATUS_OK
ReadX 9899 2132 4096 4096 NT_STATUS_OK
ReadX 9899 2148 4096 4096 NT_STATUS_OK
ReadX 9899 2276 4096 4096 NT_STATUS_OK
ReadX 9899 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9921 NT_STATUS_OK
Close 9921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9924 NT_STATUS_OK
QUERY_FILE_INFORMATION 9879 1004 NT_STATUS_OK
Close 9879 NT_STATUS_OK
WriteX 9924 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9924 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 1004 NT_STATUS_OK
Close 9881 NT_STATUS_OK
WriteX 9924 0 65536 65536 NT_STATUS_OK
WriteX 9924 65536 64850 64850 NT_STATUS_OK
Close 9924 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9926 NT_STATUS_OK
WriteX 9926 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9926 258 NT_STATUS_OK
ReadX 9899 2068 4096 4096 NT_STATUS_OK
ReadX 9899 1588 4096 4096 NT_STATUS_OK
ReadX 9899 1572 4096 4096 NT_STATUS_OK
WriteX 9926 0 18630 18630 NT_STATUS_OK
Flush 9926 NT_STATUS_OK
Close 9926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9928 NT_STATUS_OK
Close 9928 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9899 612 4096 4096 NT_STATUS_OK
ReadX 9899 564 4096 4096 NT_STATUS_OK
ReadX 9899 1876 4096 4096 NT_STATUS_OK
ReadX 9899 628 4096 4096 NT_STATUS_OK
ReadX 9899 740 4096 4096 NT_STATUS_OK
ReadX 9899 724 4096 4096 NT_STATUS_OK
ReadX 9899 644 4096 4096 NT_STATUS_OK
ReadX 9899 2324 4096 4096 NT_STATUS_OK
ReadX 9899 660 4096 4096 NT_STATUS_OK
ReadX 9899 852 4096 4096 NT_STATUS_OK
ReadX 9899 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9899 2368 4096 4096 NT_STATUS_OK
ReadX 9899 1024 4096 4096 NT_STATUS_OK
ReadX 9899 320 4096 4096 NT_STATUS_OK
ReadX 9899 580 4096 4096 NT_STATUS_OK
ReadX 9899 3136 512 512 NT_STATUS_OK
ReadX 9899 2880 4096 4096 NT_STATUS_OK
Close 9899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9931 NT_STATUS_OK
ReadX 9931 61440 4096 4096 NT_STATUS_OK
ReadX 9931 126976 4096 4096 NT_STATUS_OK
WriteX 9931 0 65536 65536 NT_STATUS_OK
WriteX 9931 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9932 NT_STATUS_OK
ReadX 9932 61440 4096 4096 NT_STATUS_OK
ReadX 9932 126976 4096 4096 NT_STATUS_OK
ReadX 9932 192512 4096 4096 NT_STATUS_OK
ReadX 9932 258048 4096 4096 NT_STATUS_OK
WriteX 9932 0 65536 65536 NT_STATUS_OK
WriteX 9932 65536 65536 65536 NT_STATUS_OK
WriteX 9932 131072 65536 65536 NT_STATUS_OK
WriteX 9932 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9933 NT_STATUS_OK
ReadX 9933 61440 4096 4096 NT_STATUS_OK
ReadX 9933 126976 4096 4096 NT_STATUS_OK
ReadX 9933 192512 4096 4096 NT_STATUS_OK
ReadX 9933 258048 4096 4096 NT_STATUS_OK
ReadX 9933 323584 4096 4096 NT_STATUS_OK
ReadX 9933 389120 4096 4096 NT_STATUS_OK
ReadX 9933 454656 4096 4096 NT_STATUS_OK
ReadX 9933 520192 4096 4096 NT_STATUS_OK
WriteX 9933 0 65536 65536 NT_STATUS_OK
WriteX 9933 65536 65536 65536 NT_STATUS_OK
WriteX 9933 131072 65536 65536 NT_STATUS_OK
WriteX 9933 196608 65536 65536 NT_STATUS_OK
WriteX 9933 262144 65536 65536 NT_STATUS_OK
WriteX 9933 327680 65536 65536 NT_STATUS_OK
WriteX 9933 393216 65536 65536 NT_STATUS_OK
WriteX 9933 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9934 NT_STATUS_OK
ReadX 9934 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9936 NT_STATUS_OK
WriteX 9936 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9936 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9934 0 8192 8192 NT_STATUS_OK
Flush 9934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9934 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9934 0 8192 8192 NT_STATUS_OK
Flush 9934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9934 0 8192 8192 NT_STATUS_OK
Flush 9934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9934 0 8192 8192 NT_STATUS_OK
Flush 9934 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9938 NT_STATUS_OK
Close 9938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Close 9898 NT_STATUS_OK
Close 9931 NT_STATUS_OK
Close 9932 NT_STATUS_OK
Close 9933 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9941 NT_STATUS_OK
WriteX 9941 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9941 258 NT_STATUS_OK
WriteX 9941 0 62591 62591 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 10845 10845 NT_STATUS_OK
Close 9946 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9951 NT_STATUS_OK
WriteX 9951 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9951 258 NT_STATUS_OK
WriteX 9951 0 30118 30118 NT_STATUS_OK
Close 9951 NT_STATUS_OK
WriteX 9934 0 4096 4096 NT_STATUS_OK
WriteX 9936 0 64 64 NT_STATUS_OK
Close 9936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9953 NT_STATUS_OK
ReadX 9953 0 61440 61440 NT_STATUS_OK
ReadX 9953 61440 4096 4096 NT_STATUS_OK
ReadX 9953 65536 61440 61440 NT_STATUS_OK
ReadX 9953 126976 4096 4096 NT_STATUS_OK
ReadX 9953 131072 61440 61440 NT_STATUS_OK
ReadX 9953 192512 4096 4096 NT_STATUS_OK
ReadX 9953 196608 61440 61440 NT_STATUS_OK
ReadX 9953 258048 4096 4096 NT_STATUS_OK
ReadX 9953 262144 61440 61440 NT_STATUS_OK
ReadX 9953 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 61440 61440 NT_STATUS_OK
ReadX 9954 61440 4096 4096 NT_STATUS_OK
ReadX 9954 65536 61440 61440 NT_STATUS_OK
ReadX 9954 126976 4096 4096 NT_STATUS_OK
ReadX 9954 131072 61440 61440 NT_STATUS_OK
ReadX 9954 192512 4096 4096 NT_STATUS_OK
ReadX 9954 196608 61440 61440 NT_STATUS_OK
ReadX 9954 258048 4096 4096 NT_STATUS_OK
ReadX 9954 262144 61440 61440 NT_STATUS_OK
ReadX 9954 323584 4096 4096 NT_STATUS_OK
ReadX 9954 327680 61440 61440 NT_STATUS_OK
ReadX 9954 389120 4096 4096 NT_STATUS_OK
ReadX 9954 393216 61440 61440 NT_STATUS_OK
ReadX 9954 454656 4096 4096 NT_STATUS_OK
ReadX 9954 458752 61440 61440 NT_STATUS_OK
ReadX 9954 520192 4096 4096 NT_STATUS_OK
ReadX 9954 524288 61440 61440 NT_STATUS_OK
ReadX 9954 585728 4096 4096 NT_STATUS_OK
ReadX 9954 589824 61440 61440 NT_STATUS_OK
ReadX 9954 651264 4096 4096 NT_STATUS_OK
ReadX 9954 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 61440 61440 NT_STATUS_OK
ReadX 9955 61440 4096 4096 NT_STATUS_OK
ReadX 9955 65536 61440 61440 NT_STATUS_OK
ReadX 9955 126976 4096 4096 NT_STATUS_OK
ReadX 9955 131072 61440 61440 NT_STATUS_OK
ReadX 9955 192512 4096 4096 NT_STATUS_OK
ReadX 9955 196608 61440 61440 NT_STATUS_OK
ReadX 9955 258048 4096 4096 NT_STATUS_OK
ReadX 9955 262144 61440 61440 NT_STATUS_OK
ReadX 9955 323584 4096 4096 NT_STATUS_OK
ReadX 9955 327680 61440 61440 NT_STATUS_OK
ReadX 9955 389120 4096 4096 NT_STATUS_OK
ReadX 9955 393216 61440 61440 NT_STATUS_OK
ReadX 9955 454656 4096 4096 NT_STATUS_OK
ReadX 9955 458752 61440 61440 NT_STATUS_OK
ReadX 9955 520192 4096 4096 NT_STATUS_OK
ReadX 9955 524288 61440 61440 NT_STATUS_OK
ReadX 9955 585728 4096 4096 NT_STATUS_OK
ReadX 9955 589824 61440 61440 NT_STATUS_OK
ReadX 9955 651264 4096 4096 NT_STATUS_OK
ReadX 9955 655360 61440 61440 NT_STATUS_OK
ReadX 9955 716800 4096 4096 NT_STATUS_OK
ReadX 9955 720896 61440 61440 NT_STATUS_OK
ReadX 9955 782336 4096 4096 NT_STATUS_OK
ReadX 9955 786432 61440 61440 NT_STATUS_OK
ReadX 9955 847872 4096 4096 NT_STATUS_OK
ReadX 9955 851968 61440 61440 NT_STATUS_OK
ReadX 9955 913408 4096 4096 NT_STATUS_OK
ReadX 9955 917504 61440 61440 NT_STATUS_OK
ReadX 9955 978944 4096 4096 NT_STATUS_OK
ReadX 9955 983040 61440 61440 NT_STATUS_OK
ReadX 9955 1044480 4096 4096 NT_STATUS_OK
ReadX 9955 1048576 61440 61440 NT_STATUS_OK
ReadX 9955 1110016 4096 4096 NT_STATUS_OK
ReadX 9955 1114112 61440 61440 NT_STATUS_OK
ReadX 9955 1175552 4096 4096 NT_STATUS_OK
ReadX 9955 1179648 61440 61440 NT_STATUS_OK
ReadX 9955 1241088 4096 4096 NT_STATUS_OK
ReadX 9955 1245184 61440 61440 NT_STATUS_OK
ReadX 9955 1306624 4096 4096 NT_STATUS_OK
ReadX 9955 1310720 61440 61440 NT_STATUS_OK
ReadX 9955 1372160 4096 4096 NT_STATUS_OK
ReadX 9955 1376256 61440 61440 NT_STATUS_OK
ReadX 9955 1437696 4096 4096 NT_STATUS_OK
ReadX 9955 1441792 61440 61440 NT_STATUS_OK
ReadX 9955 1503232 4096 4096 NT_STATUS_OK
ReadX 9955 1507328 61440 61440 NT_STATUS_OK
ReadX 9955 1568768 4096 4096 NT_STATUS_OK
ReadX 9955 1572864 61440 61440 NT_STATUS_OK
ReadX 9955 1634304 4096 4096 NT_STATUS_OK
ReadX 9955 1638400 61440 61440 NT_STATUS_OK
ReadX 9955 1699840 4096 4096 NT_STATUS_OK
ReadX 9955 1703936 61440 61440 NT_STATUS_OK
ReadX 9955 1765376 4096 4096 NT_STATUS_OK
ReadX 9955 1769472 61440 61440 NT_STATUS_OK
ReadX 9955 1830912 4096 4096 NT_STATUS_OK
ReadX 9955 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9953 NT_STATUS_OK
Close 9954 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9959 NT_STATUS_OK
ReadX 9959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9960 NT_STATUS_OK
ReadX 9960 0 4096 4096 NT_STATUS_OK
ReadX 9960 4096 4096 4096 NT_STATUS_OK
ReadX 9960 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9961 NT_STATUS_OK
Close 9961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Close 9959 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9963 NT_STATUS_OK
ReadX 9963 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9964 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9963 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 8192 8192 NT_STATUS_OK
ReadX 9968 8192 8192 8192 NT_STATUS_OK
ReadX 9968 16384 8192 8192 NT_STATUS_OK
ReadX 9968 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9970 NT_STATUS_OK
Close 9970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9968 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9973 NT_STATUS_OK
WriteX 9973 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9973 258 NT_STATUS_OK
WriteX 9973 0 10438 10438 NT_STATUS_OK
Close 9973 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9974 NT_STATUS_OK
Close 9974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9977 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9978 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9979 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9982 NT_STATUS_OK
ReadX 9982 0 4096 4096 NT_STATUS_OK
ReadX 9982 4096 4096 4096 NT_STATUS_OK
ReadX 9982 8192 4096 4096 NT_STATUS_OK
ReadX 9982 12288 8192 8192 NT_STATUS_OK
ReadX 9982 20480 8192 8192 NT_STATUS_OK
ReadX 9982 28672 8192 8192 NT_STATUS_OK
ReadX 9982 36864 8192 8192 NT_STATUS_OK
ReadX 9982 45056 8192 8192 NT_STATUS_OK
ReadX 9982 53248 8192 8192 NT_STATUS_OK
ReadX 9982 61440 8192 8192 NT_STATUS_OK
ReadX 9982 69632 8192 8192 NT_STATUS_OK
ReadX 9982 77824 8192 8192 NT_STATUS_OK
ReadX 9982 86016 8192 8192 NT_STATUS_OK
ReadX 9982 94208 8192 8192 NT_STATUS_OK
ReadX 9982 102400 8192 8192 NT_STATUS_OK
ReadX 9982 110592 8192 8192 NT_STATUS_OK
ReadX 9982 118784 8192 8192 NT_STATUS_OK
ReadX 9982 126976 8192 8192 NT_STATUS_OK
ReadX 9982 135168 8192 8192 NT_STATUS_OK
ReadX 9982 143360 8192 8192 NT_STATUS_OK
ReadX 9982 151552 8192 8192 NT_STATUS_OK
ReadX 9982 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9982 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9984 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9987 NT_STATUS_OK
WriteX 9987 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9987 258 NT_STATUS_OK
WriteX 9987 0 28489 28489 NT_STATUS_OK
Close 9987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9990 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9990 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9993 NT_STATUS_OK
ReadX 9993 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 8192 8192 NT_STATUS_OK
ReadX 9994 8192 8192 8192 NT_STATUS_OK
ReadX 9994 16384 8192 8192 NT_STATUS_OK
ReadX 9994 24576 8192 8192 NT_STATUS_OK
ReadX 9994 32768 16384 16384 NT_STATUS_OK
ReadX 9994 49152 8192 8192 NT_STATUS_OK
ReadX 9994 57344 8192 8192 NT_STATUS_OK
ReadX 9994 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9996 NT_STATUS_OK
Close 9996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9999 NT_STATUS_OK
WriteX 9999 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 258 NT_STATUS_OK
WriteX 9999 0 29253 29253 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10000 NT_STATUS_OK
Close 10000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10006 NT_STATUS_OK
WriteX 10006 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10006 258 NT_STATUS_OK
WriteX 10006 0 30183 30183 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10009 NT_STATUS_OK
WriteX 10009 0 510 510 NT_STATUS_OK
WriteX 10009 510 512 512 NT_STATUS_OK
WriteX 10009 1022 510 510 NT_STATUS_OK
WriteX 10009 1532 510 510 NT_STATUS_OK
WriteX 10009 2042 168 168 NT_STATUS_OK
Close 10009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10010 NT_STATUS_OK
Close 10010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 61440 4096 4096 NT_STATUS_OK
ReadX 10013 126976 4096 4096 NT_STATUS_OK
WriteX 10013 0 65536 65536 NT_STATUS_OK
WriteX 10013 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 61440 4096 4096 NT_STATUS_OK
ReadX 10014 126976 4096 4096 NT_STATUS_OK
ReadX 10014 192512 4096 4096 NT_STATUS_OK
ReadX 10014 258048 4096 4096 NT_STATUS_OK
WriteX 10014 0 65536 65536 NT_STATUS_OK
WriteX 10014 65536 65536 65536 NT_STATUS_OK
WriteX 10014 131072 65536 65536 NT_STATUS_OK
WriteX 10014 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 61440 4096 4096 NT_STATUS_OK
ReadX 10015 126976 4096 4096 NT_STATUS_OK
ReadX 10015 192512 4096 4096 NT_STATUS_OK
ReadX 10015 258048 4096 4096 NT_STATUS_OK
ReadX 10015 323584 4096 4096 NT_STATUS_OK
ReadX 10015 389120 4096 4096 NT_STATUS_OK
ReadX 10015 454656 4096 4096 NT_STATUS_OK
ReadX 10015 520192 4096 4096 NT_STATUS_OK
WriteX 10015 0 65536 65536 NT_STATUS_OK
WriteX 10015 65536 65536 65536 NT_STATUS_OK
WriteX 10015 131072 65536 65536 NT_STATUS_OK
WriteX 10015 196608 65536 65536 NT_STATUS_OK
WriteX 10015 262144 65536 65536 NT_STATUS_OK
WriteX 10015 327680 65536 65536 NT_STATUS_OK
WriteX 10015 393216 65536 65536 NT_STATUS_OK
WriteX 10015 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10016 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10012 NT_STATUS_OK
Close 10013 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10022 NT_STATUS_OK
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10025 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10034 NT_STATUS_OK
Close 10034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10055 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10065 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10070 NT_STATUS_OK
Close 10070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10078 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10084 NT_STATUS_OK
WriteX 10084 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10084 0 65536 65536 NT_STATUS_OK
WriteX 10084 65536 65536 65536 NT_STATUS_OK
WriteX 10084 131072 65536 65536 NT_STATUS_OK
WriteX 10084 196608 65536 65536 NT_STATUS_OK
WriteX 10084 262144 26634 26634 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10089 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
Close 10091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 4096 4096 NT_STATUS_OK
ReadX 10092 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10093 NT_STATUS_OK
Close 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10106 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10111 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10120 NT_STATUS_OK
Close 10120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10125 NT_STATUS_OK
Close 10125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10130 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10149 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10157 NT_STATUS_OK
Close 10157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10159 NT_STATUS_OK
Close 10159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 4096 4096 NT_STATUS_OK
Close 10172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10183 NT_STATUS_OK
Close 10183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
ReadX 10218 4096 4096 4096 NT_STATUS_OK
ReadX 10218 8192 4096 4096 NT_STATUS_OK
ReadX 10218 12288 4096 4096 NT_STATUS_OK
ReadX 10218 16384 4096 4096 NT_STATUS_OK
ReadX 10218 20480 4096 4096 NT_STATUS_OK
ReadX 10218 24576 4096 4096 NT_STATUS_OK
ReadX 10218 28672 4096 4096 NT_STATUS_OK
ReadX 10218 32768 4096 4096 NT_STATUS_OK
ReadX 10218 36864 4096 4096 NT_STATUS_OK
ReadX 10218 40960 4096 4096 NT_STATUS_OK
ReadX 10218 45056 4096 4096 NT_STATUS_OK
ReadX 10218 49152 4096 4096 NT_STATUS_OK
ReadX 10218 53248 4096 4096 NT_STATUS_OK
ReadX 10218 57344 4096 4096 NT_STATUS_OK
ReadX 10218 61440 4096 4096 NT_STATUS_OK
ReadX 10218 65536 4096 4096 NT_STATUS_OK
ReadX 10218 69632 4096 4096 NT_STATUS_OK
ReadX 10218 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10218 1004 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
Close 10218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10219 NT_STATUS_OK
SET_FILE_INFORMATION 10219 1004 NT_STATUS_OK
Close 10219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10220 NT_STATUS_OK
ReadX 10220 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10224 NT_STATUS_OK
WriteX 10224 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 258 NT_STATUS_OK
WriteX 10224 0 65536 65536 NT_STATUS_OK
WriteX 10224 65536 19979 19979 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 1004 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
SET_FILE_INFORMATION 10225 1004 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
Close 10226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
Close 10228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10230 1004 NT_STATUS_OK
WriteX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10231 NT_STATUS_OK
Close 10231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10233 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10236 NT_STATUS_OK
WriteX 10236 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10236 258 NT_STATUS_OK
WriteX 10236 0 65536 65536 NT_STATUS_OK
WriteX 10236 65536 17654 17654 NT_STATUS_OK
Close 10236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
Flush 10237 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
Flush 10237 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 1004 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
Flush 10237 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
Flush 10237 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
Flush 10237 NT_STATUS_OK
SET_FILE_INFORMATION 10237 1004 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
Flush 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10238 NT_STATUS_OK
SET_FILE_INFORMATION 10238 1004 NT_STATUS_OK
Close 10238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
ReadX 10242 4096 4096 4096 NT_STATUS_OK
ReadX 10242 8192 4096 4096 NT_STATUS_OK
ReadX 10242 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10242 16384 4096 4096 NT_STATUS_OK
ReadX 10242 20480 4096 4096 NT_STATUS_OK
ReadX 10242 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 4096 4096 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 4096 4096 NT_STATUS_OK
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10245 1004 NT_STATUS_OK
WriteX 10245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10246 NT_STATUS_OK
Close 10246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10248 NT_STATUS_OK
Close 10248 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10251 NT_STATUS_OK
WriteX 10251 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 258 NT_STATUS_OK
WriteX 10251 0 65536 65536 NT_STATUS_OK
WriteX 10251 65536 19490 19490 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
Flush 10252 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
Flush 10252 NT_STATUS_OK
QUERY_FILE_INFORMATION 10252 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
Flush 10252 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
Flush 10252 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
Flush 10252 NT_STATUS_OK
SET_FILE_INFORMATION 10252 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
Flush 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10253 NT_STATUS_OK
SET_FILE_INFORMATION 10253 1004 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10257 0 4096 4096 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 4096 4096 NT_STATUS_OK
ReadX 10259 8192 4096 4096 NT_STATUS_OK
ReadX 10259 12288 4096 4096 NT_STATUS_OK
ReadX 10259 16384 4096 4096 NT_STATUS_OK
ReadX 10259 20480 4096 4096 NT_STATUS_OK
ReadX 10259 24576 4096 4096 NT_STATUS_OK
ReadX 10259 28672 4096 4096 NT_STATUS_OK
ReadX 10259 32768 4096 4096 NT_STATUS_OK
ReadX 10259 36864 4096 4096 NT_STATUS_OK
ReadX 10259 40960 4096 4096 NT_STATUS_OK
ReadX 10259 45056 4096 4096 NT_STATUS_OK
ReadX 10259 49152 4096 4096 NT_STATUS_OK
ReadX 10259 53248 4096 4096 NT_STATUS_OK
ReadX 10259 57344 4096 4096 NT_STATUS_OK
ReadX 10259 61440 4096 4096 NT_STATUS_OK
ReadX 10259 65536 4096 4096 NT_STATUS_OK
ReadX 10259 69632 4096 4096 NT_STATUS_OK
ReadX 10259 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10259 1004 NT_STATUS_OK
WriteX 10259 0 4096 4096 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10260 NT_STATUS_OK
SET_FILE_INFORMATION 10260 1004 NT_STATUS_OK
Close 10260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10265 NT_STATUS_OK
WriteX 10265 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 258 NT_STATUS_OK
WriteX 10265 0 65536 65536 NT_STATUS_OK
WriteX 10265 65536 8866 8866 NT_STATUS_OK
Close 10265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10270 1004 NT_STATUS_OK
WriteX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10271 NT_STATUS_OK
Close 10271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10276 NT_STATUS_OK
WriteX 10276 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 258 NT_STATUS_OK
WriteX 10276 0 65536 65536 NT_STATUS_OK
WriteX 10276 65536 9298 9298 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10277 NT_STATUS_OK
ReadX 10277 0 4096 4096 NT_STATUS_OK
WriteX 10277 0 4096 4096 NT_STATUS_OK
Flush 10277 NT_STATUS_OK
SET_FILE_INFORMATION 10277 1004 NT_STATUS_OK
WriteX 10277 0 4096 4096 NT_STATUS_OK
Flush 10277 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10278 NT_STATUS_OK
SET_FILE_INFORMATION 10278 1004 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 0 4096 4096 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10284 4096 4096 4096 NT_STATUS_OK
ReadX 10284 8192 4096 4096 NT_STATUS_OK
ReadX 10284 12288 4096 4096 NT_STATUS_OK
ReadX 10284 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
Close 10285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
Close 10286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10287 1004 NT_STATUS_OK
WriteX 10287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10284 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10293 NT_STATUS_OK
WriteX 10293 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10293 258 NT_STATUS_OK
WriteX 10293 0 65536 65536 NT_STATUS_OK
WriteX 10293 65536 11540 11540 NT_STATUS_OK
Close 10293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
Flush 10294 NT_STATUS_OK
SET_FILE_INFORMATION 10294 1004 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
Flush 10294 NT_STATUS_OK
Close 10294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10295 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
Close 10295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 61440 4096 4096 NT_STATUS_OK
ReadX 10299 126976 4096 4096 NT_STATUS_OK
WriteX 10299 0 65536 65536 NT_STATUS_OK
WriteX 10299 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 61440 4096 4096 NT_STATUS_OK
ReadX 10300 126976 4096 4096 NT_STATUS_OK
ReadX 10300 192512 4096 4096 NT_STATUS_OK
ReadX 10300 258048 4096 4096 NT_STATUS_OK
WriteX 10300 0 65536 65536 NT_STATUS_OK
WriteX 10300 65536 65536 65536 NT_STATUS_OK
WriteX 10300 131072 65536 65536 NT_STATUS_OK
WriteX 10300 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 61440 4096 4096 NT_STATUS_OK
ReadX 10301 126976 4096 4096 NT_STATUS_OK
ReadX 10301 192512 4096 4096 NT_STATUS_OK
ReadX 10301 258048 4096 4096 NT_STATUS_OK
ReadX 10301 323584 4096 4096 NT_STATUS_OK
ReadX 10301 389120 4096 4096 NT_STATUS_OK
ReadX 10301 454656 4096 4096 NT_STATUS_OK
ReadX 10301 520192 4096 4096 NT_STATUS_OK
WriteX 10301 0 65536 65536 NT_STATUS_OK
WriteX 10301 65536 65536 65536 NT_STATUS_OK
WriteX 10301 131072 65536 65536 NT_STATUS_OK
WriteX 10301 196608 65536 65536 NT_STATUS_OK
WriteX 10301 262144 65536 65536 NT_STATUS_OK
WriteX 10301 327680 65536 65536 NT_STATUS_OK
WriteX 10301 393216 65536 65536 NT_STATUS_OK
WriteX 10301 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
ReadX 10302 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10303 NT_STATUS_OK
WriteX 10303 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10303 258 NT_STATUS_OK
WriteX 10303 0 53 53 NT_STATUS_OK
Close 10303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10304 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10302 8192 4096 4096 NT_STATUS_OK
ReadX 10302 12288 4096 4096 NT_STATUS_OK
WriteX 10306 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10306 258 NT_STATUS_OK
ReadX 10302 16384 4096 4096 NT_STATUS_OK
ReadX 10302 20480 4096 4096 NT_STATUS_OK
WriteX 10306 0 15360 15360 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10307 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10307 1004 NT_STATUS_OK
WriteX 10307 0 4096 4096 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10308 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10310 4096 4096 4096 NT_STATUS_OK
ReadX 10310 8192 4096 4096 NT_STATUS_OK
ReadX 10310 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
ReadX 10313 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
ReadX 10314 4096 4096 4096 NT_STATUS_OK
ReadX 10314 8192 4096 4096 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10315 NT_STATUS_OK
WriteX 10315 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 258 NT_STATUS_OK
WriteX 10315 0 15360 15360 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10316 NT_STATUS_OK
ReadX 10316 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10317 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10320 NT_STATUS_OK
SET_FILE_INFORMATION 10320 1004 NT_STATUS_OK
Close 10320 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 4096 4096 NT_STATUS_OK
ReadX 10323 4096 4096 4096 NT_STATUS_OK
ReadX 10323 8192 4096 4096 NT_STATUS_OK
ReadX 10323 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10323 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10323 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10325 NT_STATUS_OK
WriteX 10325 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 258 NT_STATUS_OK
WriteX 10325 0 53 53 NT_STATUS_OK
Close 10325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10324 4096 4096 4096 NT_STATUS_OK
ReadX 10324 8192 4096 4096 NT_STATUS_OK
ReadX 10324 12288 4096 4096 NT_STATUS_OK
WriteX 10328 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10328 258 NT_STATUS_OK
WriteX 10328 0 12006 12006 NT_STATUS_OK
Close 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
WriteX 10329 0 4096 4096 NT_STATUS_OK
Close 10329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10330 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10333 NT_STATUS_OK
Close 10333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10332 4096 4096 4096 NT_STATUS_OK
ReadX 10332 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10335 NT_STATUS_OK
WriteX 10335 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10335 258 NT_STATUS_OK
WriteX 10335 0 11991 11991 NT_STATUS_OK
Close 10335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10336 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10337 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10340 NT_STATUS_OK
SET_FILE_INFORMATION 10340 1004 NT_STATUS_OK
Close 10340 NT_STATUS_OK
WriteX 10336 0 4096 4096 NT_STATUS_OK
Close 10336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10341 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10343 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10343 1004 NT_STATUS_OK
ReadX 10343 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10343 1004 NT_STATUS_OK
WriteX 10343 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10343 1004 NT_STATUS_OK
Close 10319 NT_STATUS_OK
WriteX 10323 0 19054 19054 NT_STATUS_OK
WriteX 10343 0 12288 12288 NT_STATUS_OK
Close 10339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10346 NT_STATUS_OK
Close 10346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10348 NT_STATUS_OK
Close 10348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10350 NT_STATUS_OK
ReadX 10350 0 61440 61440 NT_STATUS_OK
ReadX 10350 61440 4096 4096 NT_STATUS_OK
ReadX 10350 65536 61440 61440 NT_STATUS_OK
ReadX 10350 126976 4096 4096 NT_STATUS_OK
ReadX 10350 131072 61440 61440 NT_STATUS_OK
ReadX 10350 192512 4096 4096 NT_STATUS_OK
ReadX 10350 196608 61440 61440 NT_STATUS_OK
ReadX 10350 258048 4096 4096 NT_STATUS_OK
ReadX 10350 262144 61440 61440 NT_STATUS_OK
ReadX 10350 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10351 NT_STATUS_OK
ReadX 10351 0 61440 61440 NT_STATUS_OK
ReadX 10351 61440 4096 4096 NT_STATUS_OK
ReadX 10351 65536 61440 61440 NT_STATUS_OK
ReadX 10351 126976 4096 4096 NT_STATUS_OK
ReadX 10351 131072 61440 61440 NT_STATUS_OK
ReadX 10351 192512 4096 4096 NT_STATUS_OK
ReadX 10351 196608 61440 61440 NT_STATUS_OK
ReadX 10351 258048 4096 4096 NT_STATUS_OK
ReadX 10351 262144 61440 61440 NT_STATUS_OK
ReadX 10351 323584 4096 4096 NT_STATUS_OK
ReadX 10351 327680 61440 61440 NT_STATUS_OK
ReadX 10351 389120 4096 4096 NT_STATUS_OK
ReadX 10351 393216 61440 61440 NT_STATUS_OK
ReadX 10351 454656 4096 4096 NT_STATUS_OK
ReadX 10351 458752 61440 61440 NT_STATUS_OK
ReadX 10351 520192 4096 4096 NT_STATUS_OK
ReadX 10351 524288 61440 61440 NT_STATUS_OK
ReadX 10351 585728 4096 4096 NT_STATUS_OK
ReadX 10351 589824 61440 61440 NT_STATUS_OK
ReadX 10351 651264 4096 4096 NT_STATUS_OK
ReadX 10351 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 61440 61440 NT_STATUS_OK
ReadX 10352 61440 4096 4096 NT_STATUS_OK
ReadX 10352 65536 61440 61440 NT_STATUS_OK
ReadX 10352 126976 4096 4096 NT_STATUS_OK
ReadX 10352 131072 61440 61440 NT_STATUS_OK
ReadX 10352 192512 4096 4096 NT_STATUS_OK
ReadX 10352 196608 61440 61440 NT_STATUS_OK
ReadX 10352 258048 4096 4096 NT_STATUS_OK
ReadX 10352 262144 61440 61440 NT_STATUS_OK
ReadX 10352 323584 4096 4096 NT_STATUS_OK
ReadX 10352 327680 61440 61440 NT_STATUS_OK
ReadX 10352 389120 4096 4096 NT_STATUS_OK
ReadX 10352 393216 61440 61440 NT_STATUS_OK
ReadX 10352 454656 4096 4096 NT_STATUS_OK
ReadX 10352 458752 61440 61440 NT_STATUS_OK
ReadX 10352 520192 4096 4096 NT_STATUS_OK
ReadX 10352 524288 61440 61440 NT_STATUS_OK
ReadX 10352 585728 4096 4096 NT_STATUS_OK
ReadX 10352 589824 61440 61440 NT_STATUS_OK
ReadX 10352 651264 4096 4096 NT_STATUS_OK
ReadX 10352 655360 61440 61440 NT_STATUS_OK
ReadX 10352 716800 4096 4096 NT_STATUS_OK
ReadX 10352 720896 61440 61440 NT_STATUS_OK
ReadX 10352 782336 4096 4096 NT_STATUS_OK
ReadX 10352 786432 61440 61440 NT_STATUS_OK
ReadX 10352 847872 4096 4096 NT_STATUS_OK
ReadX 10352 851968 61440 61440 NT_STATUS_OK
ReadX 10352 913408 4096 4096 NT_STATUS_OK
ReadX 10352 917504 61440 61440 NT_STATUS_OK
ReadX 10352 978944 4096 4096 NT_STATUS_OK
ReadX 10352 983040 61440 61440 NT_STATUS_OK
ReadX 10352 1044480 4096 4096 NT_STATUS_OK
ReadX 10352 1048576 61440 61440 NT_STATUS_OK
ReadX 10352 1110016 4096 4096 NT_STATUS_OK
ReadX 10352 1114112 61440 61440 NT_STATUS_OK
ReadX 10352 1175552 4096 4096 NT_STATUS_OK
ReadX 10352 1179648 61440 61440 NT_STATUS_OK
ReadX 10352 1241088 4096 4096 NT_STATUS_OK
ReadX 10352 1245184 61440 61440 NT_STATUS_OK
ReadX 10352 1306624 4096 4096 NT_STATUS_OK
ReadX 10352 1310720 61440 61440 NT_STATUS_OK
ReadX 10352 1372160 4096 4096 NT_STATUS_OK
ReadX 10352 1376256 61440 61440 NT_STATUS_OK
ReadX 10352 1437696 4096 4096 NT_STATUS_OK
ReadX 10352 1441792 61440 61440 NT_STATUS_OK
ReadX 10352 1503232 4096 4096 NT_STATUS_OK
ReadX 10352 1507328 61440 61440 NT_STATUS_OK
ReadX 10352 1568768 4096 4096 NT_STATUS_OK
ReadX 10352 1572864 61440 61440 NT_STATUS_OK
ReadX 10352 1634304 4096 4096 NT_STATUS_OK
ReadX 10352 1638400 61440 61440 NT_STATUS_OK
ReadX 10352 1699840 4096 4096 NT_STATUS_OK
ReadX 10352 1703936 61440 61440 NT_STATUS_OK
ReadX 10352 1765376 4096 4096 NT_STATUS_OK
ReadX 10352 1769472 61440 61440 NT_STATUS_OK
ReadX 10352 1830912 4096 4096 NT_STATUS_OK
ReadX 10352 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10354 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10355 NT_STATUS_OK
ReadX 10355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10358 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10359 NT_STATUS_OK
QUERY_FILE_INFORMATION 10359 1004 NT_STATUS_OK
WriteX 10359 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10359 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10361 NT_STATUS_OK
WriteX 10361 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 258 NT_STATUS_OK
WriteX 10361 0 491 491 NT_STATUS_OK
Close 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10359 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10364 NT_STATUS_OK
Close 10364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10365 NT_STATUS_OK
WriteX 10365 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10365 258 NT_STATUS_OK
WriteX 10365 0 543 543 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10350 NT_STATUS_OK
Close 10351 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Close 10354 NT_STATUS_OK
Close 10355 NT_STATUS_OK
Close 10356 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10369 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10379 NT_STATUS_OK
QUERY_FILE_INFORMATION 10379 1004 NT_STATUS_OK
WriteX 10379 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10379 258 NT_STATUS_OK
WriteX 10379 0 2048 2048 NT_STATUS_OK
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10380 0 4096 4096 NT_STATUS_OK
Flush 10380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10380 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10385 NT_STATUS_OK
WriteX 10385 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10385 258 NT_STATUS_OK
WriteX 10385 0 2048 2048 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10391 NT_STATUS_OK
WriteX 10391 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10391 258 NT_STATUS_OK
WriteX 10391 0 2048 2048 NT_STATUS_OK
Close 10391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10392 NT_STATUS_OK
ReadX 10392 0 2048 2048 NT_STATUS_OK
ReadX 10370 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10386 0 4096 4096 NT_STATUS_OK
WriteX 10370 0 8192 8192 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
WriteX 10372 0 4096 4096 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10396 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10386 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10408 NT_STATUS_OK
ReadX 10408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10409 NT_STATUS_OK
ReadX 10409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10416 NT_STATUS_OK
QUERY_FILE_INFORMATION 10416 1004 NT_STATUS_OK
WriteX 10416 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10416 258 NT_STATUS_OK
WriteX 10416 0 2048 2048 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10424 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 1004 NT_STATUS_OK
WriteX 10424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
WriteX 10424 0 2048 2048 NT_STATUS_OK
Close 10424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10425 NT_STATUS_OK
ReadX 10425 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10417 0 4096 4096 NT_STATUS_OK
Flush 10417 NT_STATUS_OK
WriteX 10425 0 4096 4096 NT_STATUS_OK
Flush 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10417 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10419 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10427 NT_STATUS_OK
WriteX 10427 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Close 10427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10430 NT_STATUS_OK
WriteX 10430 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 258 NT_STATUS_OK
WriteX 10430 0 4096 4096 NT_STATUS_OK
Close 10430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10431 0 4096 4096 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10437 NT_STATUS_OK
Close 10437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10438 NT_STATUS_OK
WriteX 10438 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10438 258 NT_STATUS_OK
WriteX 10438 0 2048 2048 NT_STATUS_OK
Close 10438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10443 NT_STATUS_OK
ReadX 10443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10444 NT_STATUS_OK
ReadX 10444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10447 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10453 NT_STATUS_OK
QUERY_FILE_INFORMATION 10453 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Close 10447 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10443 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10455 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10459 NT_STATUS_OK
ReadX 10459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10460 NT_STATUS_OK
ReadX 10460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10461 NT_STATUS_OK
ReadX 10461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10468 NT_STATUS_OK
ReadX 10468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10475 NT_STATUS_OK
QUERY_FILE_INFORMATION 10475 1004 NT_STATUS_OK
WriteX 10475 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10475 258 NT_STATUS_OK
WriteX 10475 0 2048 2048 NT_STATUS_OK
Close 10475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10478 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10486 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10487 NT_STATUS_OK
QUERY_FILE_INFORMATION 10487 1004 NT_STATUS_OK
WriteX 10487 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10487 258 NT_STATUS_OK
WriteX 10487 0 2048 2048 NT_STATUS_OK
Close 10487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10490 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
WriteX 10495 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 258 NT_STATUS_OK
WriteX 10495 0 2048 2048 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10476 0 4096 4096 NT_STATUS_OK
Flush 10476 NT_STATUS_OK
WriteX 10488 0 4096 4096 NT_STATUS_OK
Flush 10488 NT_STATUS_OK
WriteX 10496 0 4096 4096 NT_STATUS_OK
Flush 10496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10476 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10488 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10496 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10478 4096 16384 16384 NT_STATUS_OK
ReadX 10458 4096 16384 16384 NT_STATUS_OK
ReadX 10490 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 0 2048 2048 NT_STATUS_OK
WriteX 10498 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10499 NT_STATUS_OK
QUERY_FILE_INFORMATION 10499 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10468 NT_STATUS_OK
Close 10465 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Close 10458 NT_STATUS_OK
Close 10459 NT_STATUS_OK
Close 10460 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10501 NT_STATUS_OK
QUERY_FILE_INFORMATION 10501 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10503 NT_STATUS_OK
QUERY_FILE_INFORMATION 10503 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10506 4096 16384 16384 NT_STATUS_OK
WriteX 10506 0 4096 4096 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
WriteX 10508 0 4096 4096 NT_STATUS_OK
WriteX 10509 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10511 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10512 NT_STATUS_OK
ReadX 10512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 8192 8192 NT_STATUS_OK
ReadX 10512 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10526 0 4096 4096 NT_STATUS_OK
ReadX 10526 4096 4096 4096 NT_STATUS_OK
ReadX 10526 8192 4096 4096 NT_STATUS_OK
WriteX 10512 0 4096 4096 NT_STATUS_OK
WriteX 10513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10527 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
ReadX 10527 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10506 0 4096 4096 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
WriteX 10508 0 4096 4096 NT_STATUS_OK
WriteX 10509 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10532 NT_STATUS_OK
QUERY_FILE_INFORMATION 10532 1004 NT_STATUS_OK
WriteX 10532 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10532 258 NT_STATUS_OK
WriteX 10532 0 2048 2048 NT_STATUS_OK
Close 10532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10535 NT_STATUS_OK
ReadX 10535 0 4096 4096 NT_STATUS_OK
ReadX 10535 4096 4096 4096 NT_STATUS_OK
WriteX 10535 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
ReadX 10537 4096 4096 4096 NT_STATUS_OK
WriteX 10537 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10538 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Close 10507 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10515 NT_STATUS_OK
Close 10537 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10540 0 4096 4096 NT_STATUS_OK
ReadX 10540 4096 4096 4096 NT_STATUS_OK
ReadX 10540 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10551 NT_STATUS_OK
ReadX 10551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10553 NT_STATUS_OK
ReadX 10553 0 4096 4096 NT_STATUS_OK
ReadX 10541 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10557 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10558 NT_STATUS_OK
QUERY_FILE_INFORMATION 10558 1004 NT_STATUS_OK
WriteX 10558 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10558 258 NT_STATUS_OK
WriteX 10558 0 2048 2048 NT_STATUS_OK
Close 10558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10559 NT_STATUS_OK
ReadX 10559 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10564 NT_STATUS_OK
QUERY_FILE_INFORMATION 10564 1004 NT_STATUS_OK
WriteX 10564 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10564 258 NT_STATUS_OK
WriteX 10564 0 2048 2048 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10565 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10548 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10566 NT_STATUS_OK
QUERY_FILE_INFORMATION 10566 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10541 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Close 10546 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Close 10551 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10568 NT_STATUS_OK
QUERY_FILE_INFORMATION 10568 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 61440 4096 4096 NT_STATUS_OK
ReadX 10570 126976 4096 4096 NT_STATUS_OK
WriteX 10570 0 65536 65536 NT_STATUS_OK
WriteX 10570 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 61440 4096 4096 NT_STATUS_OK
ReadX 10571 126976 4096 4096 NT_STATUS_OK
ReadX 10571 192512 4096 4096 NT_STATUS_OK
ReadX 10571 258048 4096 4096 NT_STATUS_OK
WriteX 10571 0 65536 65536 NT_STATUS_OK
WriteX 10571 65536 65536 65536 NT_STATUS_OK
WriteX 10571 131072 65536 65536 NT_STATUS_OK
WriteX 10571 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 61440 4096 4096 NT_STATUS_OK
ReadX 10572 126976 4096 4096 NT_STATUS_OK
ReadX 10572 192512 4096 4096 NT_STATUS_OK
ReadX 10572 258048 4096 4096 NT_STATUS_OK
ReadX 10572 323584 4096 4096 NT_STATUS_OK
ReadX 10572 389120 4096 4096 NT_STATUS_OK
ReadX 10572 454656 4096 4096 NT_STATUS_OK
ReadX 10572 520192 4096 4096 NT_STATUS_OK
WriteX 10572 0 65536 65536 NT_STATUS_OK
WriteX 10572 65536 65536 65536 NT_STATUS_OK
WriteX 10572 131072 65536 65536 NT_STATUS_OK
WriteX 10572 196608 65536 65536 NT_STATUS_OK
WriteX 10572 262144 65536 65536 NT_STATUS_OK
WriteX 10572 327680 65536 65536 NT_STATUS_OK
WriteX 10572 393216 65536 65536 NT_STATUS_OK
WriteX 10572 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10573 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10573 8192 4096 4096 NT_STATUS_OK
ReadX 10573 12288 4096 4096 NT_STATUS_OK
ReadX 10573 16384 4096 4096 NT_STATUS_OK
ReadX 10573 20480 4096 4096 NT_STATUS_OK
ReadX 10573 24576 4096 4096 NT_STATUS_OK
ReadX 10573 28672 4096 4096 NT_STATUS_OK
ReadX 10573 32768 4096 4096 NT_STATUS_OK
ReadX 10573 36864 4096 4096 NT_STATUS_OK
ReadX 10573 40960 4096 4096 NT_STATUS_OK
ReadX 10573 45056 4096 4096 NT_STATUS_OK
ReadX 10573 49152 4096 4096 NT_STATUS_OK
ReadX 10573 53248 4096 4096 NT_STATUS_OK
ReadX 10573 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10573 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10576 NT_STATUS_OK
WriteX 10576 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10576 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10576 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10576 1004 NT_STATUS_OK
WriteX 10576 0 57088 57088 NT_STATUS_OK
WriteX 10576 0 4096 4096 NT_STATUS_OK
Flush 10576 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10577 NT_STATUS_OK
SET_FILE_INFORMATION 10577 1004 NT_STATUS_OK
Close 10577 NT_STATUS_OK
SET_FILE_INFORMATION 10576 1004 NT_STATUS_OK
WriteX 10576 0 4096 4096 NT_STATUS_OK
Close 10576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10580 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10581 NT_STATUS_OK
WriteX 10581 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10581 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10581 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10581 1004 NT_STATUS_OK
WriteX 10581 0 51456 51456 NT_STATUS_OK
WriteX 10581 0 4096 4096 NT_STATUS_OK
Flush 10581 NT_STATUS_OK
SET_FILE_INFORMATION 10581 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10581 1004 NT_STATUS_OK
WriteX 10581 0 4096 4096 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10585 NT_STATUS_OK
ReadX 10585 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10585 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10590 NT_STATUS_OK
WriteX 10590 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 258 NT_STATUS_OK
WriteX 10590 0 53077 53077 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10591 NT_STATUS_OK
WriteX 10591 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10591 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10591 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10591 1004 NT_STATUS_OK
WriteX 10591 0 65536 65536 NT_STATUS_OK
WriteX 10591 65536 1856 1856 NT_STATUS_OK
WriteX 10591 0 4096 4096 NT_STATUS_OK
Flush 10591 NT_STATUS_OK
SET_FILE_INFORMATION 10591 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10591 1004 NT_STATUS_OK
WriteX 10591 0 4096 4096 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Close 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10597 NT_STATUS_OK
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10600 NT_STATUS_OK
WriteX 10600 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 258 NT_STATUS_OK
WriteX 10600 0 7983 7983 NT_STATUS_OK
Close 10600 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10605 NT_STATUS_OK
WriteX 10605 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 258 NT_STATUS_OK
WriteX 10605 0 65536 65536 NT_STATUS_OK
WriteX 10605 65536 65536 65536 NT_STATUS_OK
WriteX 10605 131072 65536 65536 NT_STATUS_OK
WriteX 10605 196608 65536 65536 NT_STATUS_OK
WriteX 10605 262144 65536 65536 NT_STATUS_OK
WriteX 10605 327680 65536 65536 NT_STATUS_OK
WriteX 10605 393216 65536 65536 NT_STATUS_OK
WriteX 10605 458752 46731 46731 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10606 NT_STATUS_OK
WriteX 10606 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10595 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10606 1004 NT_STATUS_OK
WriteX 10606 0 65536 65536 NT_STATUS_OK
WriteX 10606 65536 22848 22848 NT_STATUS_OK
WriteX 10606 0 4096 4096 NT_STATUS_OK
Flush 10606 NT_STATUS_OK
SET_FILE_INFORMATION 10606 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10606 1004 NT_STATUS_OK
WriteX 10606 0 4096 4096 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10608 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10610 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10611 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10611 1004 NT_STATUS_OK
ReadX 10611 8192 4096 4096 NT_STATUS_OK
ReadX 10611 12288 4096 4096 NT_STATUS_OK
ReadX 10611 16384 4096 4096 NT_STATUS_OK
ReadX 10611 20480 4096 4096 NT_STATUS_OK
ReadX 10611 24576 4096 4096 NT_STATUS_OK
ReadX 10611 28672 4096 4096 NT_STATUS_OK
ReadX 10611 32768 4096 4096 NT_STATUS_OK
ReadX 10611 36864 4096 4096 NT_STATUS_OK
ReadX 10611 40960 4096 4096 NT_STATUS_OK
ReadX 10611 45056 4096 4096 NT_STATUS_OK
ReadX 10611 49152 4096 4096 NT_STATUS_OK
ReadX 10611 53248 4096 4096 NT_STATUS_OK
ReadX 10611 57344 4096 4096 NT_STATUS_OK
ReadX 10611 61440 4096 4096 NT_STATUS_OK
ReadX 10611 65536 4096 4096 NT_STATUS_OK
ReadX 10611 69632 4096 4096 NT_STATUS_OK
ReadX 10611 73728 4096 4096 NT_STATUS_OK
ReadX 10611 77824 4096 4096 NT_STATUS_OK
ReadX 10611 81920 4096 4096 NT_STATUS_OK
ReadX 10611 86016 4096 4096 NT_STATUS_OK
ReadX 10611 90112 4096 4096 NT_STATUS_OK
ReadX 10611 94208 4096 4096 NT_STATUS_OK
ReadX 10611 98304 4096 4096 NT_STATUS_OK
ReadX 10611 102400 4096 4096 NT_STATUS_OK
ReadX 10611 106496 4096 4096 NT_STATUS_OK
ReadX 10611 110592 4096 4096 NT_STATUS_OK
ReadX 10611 114688 4096 4096 NT_STATUS_OK
ReadX 10611 118784 4096 4096 NT_STATUS_OK
ReadX 10611 122880 4096 4096 NT_STATUS_OK
ReadX 10611 126976 4096 4096 NT_STATUS_OK
ReadX 10611 131072 4096 4096 NT_STATUS_OK
ReadX 10611 135168 4096 4096 NT_STATUS_OK
ReadX 10611 139264 4096 4096 NT_STATUS_OK
ReadX 10611 143360 4096 4096 NT_STATUS_OK
ReadX 10611 147456 4096 4096 NT_STATUS_OK
ReadX 10611 151552 4096 4096 NT_STATUS_OK
ReadX 10611 155648 4096 4096 NT_STATUS_OK
ReadX 10611 159744 4096 4096 NT_STATUS_OK
ReadX 10611 163840 4096 4096 NT_STATUS_OK
ReadX 10611 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10611 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10612 NT_STATUS_OK
Close 10612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10610 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
Close 10611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10615 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
WriteX 10614 0 42388 42388 NT_STATUS_OK
Close 10614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
ReadX 10618 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10619 NT_STATUS_OK
WriteX 10619 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10619 258 NT_STATUS_OK
SET_FILE_INFORMATION 10619 1004 NT_STATUS_OK
WriteX 10619 0 42652 42652 NT_STATUS_OK
Close 10619 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10621 NT_STATUS_OK
Close 10621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10623 NT_STATUS_OK
ReadX 10623 0 4096 4096 NT_STATUS_OK
ReadX 10623 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10628 NT_STATUS_OK
WriteX 10628 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10628 258 NT_STATUS_OK
WriteX 10628 0 65536 65536 NT_STATUS_OK
WriteX 10628 65536 49 49 NT_STATUS_OK
Close 10628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 61440 61440 NT_STATUS_OK
ReadX 10629 61440 4096 4096 NT_STATUS_OK
ReadX 10629 65536 61440 61440 NT_STATUS_OK
ReadX 10629 126976 4096 4096 NT_STATUS_OK
ReadX 10629 131072 61440 61440 NT_STATUS_OK
ReadX 10629 192512 4096 4096 NT_STATUS_OK
ReadX 10629 196608 61440 61440 NT_STATUS_OK
ReadX 10629 258048 4096 4096 NT_STATUS_OK
ReadX 10629 262144 61440 61440 NT_STATUS_OK
ReadX 10629 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 61440 61440 NT_STATUS_OK
ReadX 10630 61440 4096 4096 NT_STATUS_OK
ReadX 10630 65536 61440 61440 NT_STATUS_OK
ReadX 10630 126976 4096 4096 NT_STATUS_OK
ReadX 10630 131072 61440 61440 NT_STATUS_OK
ReadX 10630 192512 4096 4096 NT_STATUS_OK
ReadX 10630 196608 61440 61440 NT_STATUS_OK
ReadX 10630 258048 4096 4096 NT_STATUS_OK
ReadX 10630 262144 61440 61440 NT_STATUS_OK
ReadX 10630 323584 4096 4096 NT_STATUS_OK
ReadX 10630 327680 61440 61440 NT_STATUS_OK
ReadX 10630 389120 4096 4096 NT_STATUS_OK
ReadX 10630 393216 61440 61440 NT_STATUS_OK
ReadX 10630 454656 4096 4096 NT_STATUS_OK
ReadX 10630 458752 61440 61440 NT_STATUS_OK
ReadX 10630 520192 4096 4096 NT_STATUS_OK
ReadX 10630 524288 61440 61440 NT_STATUS_OK
ReadX 10630 585728 4096 4096 NT_STATUS_OK
ReadX 10630 589824 61440 61440 NT_STATUS_OK
ReadX 10630 651264 4096 4096 NT_STATUS_OK
ReadX 10630 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 61440 61440 NT_STATUS_OK
ReadX 10631 61440 4096 4096 NT_STATUS_OK
ReadX 10631 65536 61440 61440 NT_STATUS_OK
ReadX 10631 126976 4096 4096 NT_STATUS_OK
ReadX 10631 131072 61440 61440 NT_STATUS_OK
ReadX 10631 192512 4096 4096 NT_STATUS_OK
ReadX 10631 196608 61440 61440 NT_STATUS_OK
ReadX 10631 258048 4096 4096 NT_STATUS_OK
ReadX 10631 262144 61440 61440 NT_STATUS_OK
ReadX 10631 323584 4096 4096 NT_STATUS_OK
ReadX 10631 327680 61440 61440 NT_STATUS_OK
ReadX 10631 389120 4096 4096 NT_STATUS_OK
ReadX 10631 393216 61440 61440 NT_STATUS_OK
ReadX 10631 454656 4096 4096 NT_STATUS_OK
ReadX 10631 458752 61440 61440 NT_STATUS_OK
ReadX 10631 520192 4096 4096 NT_STATUS_OK
ReadX 10631 524288 61440 61440 NT_STATUS_OK
ReadX 10631 585728 4096 4096 NT_STATUS_OK
ReadX 10631 589824 61440 61440 NT_STATUS_OK
ReadX 10631 651264 4096 4096 NT_STATUS_OK
ReadX 10631 655360 61440 61440 NT_STATUS_OK
ReadX 10631 716800 4096 4096 NT_STATUS_OK
ReadX 10631 720896 61440 61440 NT_STATUS_OK
ReadX 10631 782336 4096 4096 NT_STATUS_OK
ReadX 10631 786432 61440 61440 NT_STATUS_OK
ReadX 10631 847872 4096 4096 NT_STATUS_OK
ReadX 10631 851968 61440 61440 NT_STATUS_OK
ReadX 10631 913408 4096 4096 NT_STATUS_OK
ReadX 10631 917504 61440 61440 NT_STATUS_OK
ReadX 10631 978944 4096 4096 NT_STATUS_OK
ReadX 10631 983040 61440 61440 NT_STATUS_OK
ReadX 10631 1044480 4096 4096 NT_STATUS_OK
ReadX 10631 1048576 61440 61440 NT_STATUS_OK
ReadX 10631 1110016 4096 4096 NT_STATUS_OK
ReadX 10631 1114112 61440 61440 NT_STATUS_OK
ReadX 10631 1175552 4096 4096 NT_STATUS_OK
ReadX 10631 1179648 61440 61440 NT_STATUS_OK
ReadX 10631 1241088 4096 4096 NT_STATUS_OK
ReadX 10631 1245184 61440 61440 NT_STATUS_OK
ReadX 10631 1306624 4096 4096 NT_STATUS_OK
ReadX 10631 1310720 61440 61440 NT_STATUS_OK
ReadX 10631 1372160 4096 4096 NT_STATUS_OK
ReadX 10631 1376256 61440 61440 NT_STATUS_OK
ReadX 10631 1437696 4096 4096 NT_STATUS_OK
ReadX 10631 1441792 61440 61440 NT_STATUS_OK
ReadX 10631 1503232 4096 4096 NT_STATUS_OK
ReadX 10631 1507328 61440 61440 NT_STATUS_OK
ReadX 10631 1568768 4096 4096 NT_STATUS_OK
ReadX 10631 1572864 61440 61440 NT_STATUS_OK
ReadX 10631 1634304 4096 4096 NT_STATUS_OK
ReadX 10631 1638400 61440 61440 NT_STATUS_OK
ReadX 10631 1699840 4096 4096 NT_STATUS_OK
ReadX 10631 1703936 61440 61440 NT_STATUS_OK
ReadX 10631 1765376 4096 4096 NT_STATUS_OK
ReadX 10631 1769472 61440 61440 NT_STATUS_OK
ReadX 10631 1830912 4096 4096 NT_STATUS_OK
ReadX 10631 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10632 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10633 NT_STATUS_OK
QUERY_FILE_INFORMATION 10633 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10633 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10633 1005 NT_STATUS_OK
ReadX 10633 2156 24 24 NT_STATUS_OK
ReadX 10633 2139 276 276 NT_STATUS_OK
ReadX 10633 2136 14 14 NT_STATUS_OK
ReadX 10633 2136 7 7 NT_STATUS_OK
ReadX 10633 2138 12 12 NT_STATUS_OK
ReadX 10633 2137 8 8 NT_STATUS_OK
ReadX 10633 2135 15 15 NT_STATUS_OK
ReadX 10633 0 16 16 NT_STATUS_OK
ReadX 10633 16 2048 2048 NT_STATUS_OK
ReadX 10633 2064 2048 2048 NT_STATUS_OK
ReadX 10633 257 2048 2048 NT_STATUS_OK
ReadX 10633 385 2048 2048 NT_STATUS_OK
ReadX 10633 513 2048 2048 NT_STATUS_OK
ReadX 10633 641 2048 2048 NT_STATUS_OK
ReadX 10633 769 2048 2048 NT_STATUS_OK
ReadX 10633 897 2048 2048 NT_STATUS_OK
ReadX 10633 1025 2048 2048 NT_STATUS_OK
ReadX 10633 1153 2048 2048 NT_STATUS_OK
ReadX 10633 1281 2048 2048 NT_STATUS_OK
ReadX 10633 1409 2048 2048 NT_STATUS_OK
ReadX 10633 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10635 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10623 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10638 NT_STATUS_OK
WriteX 10638 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 258 NT_STATUS_OK
WriteX 10638 0 10575 10575 NT_STATUS_OK
Flush 10638 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
Close 10633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10643 NT_STATUS_OK
LockX 10643 2147483538 1 NT_STATUS_OK
UnlockX 10643 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10643 1005 NT_STATUS_OK
ReadX 10643 0 512 512 NT_STATUS_OK
ReadX 10643 512 512 512 NT_STATUS_OK
ReadX 10643 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10643 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10643 1004 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10644 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 1005 NT_STATUS_OK
ReadX 10644 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10645 NT_STATUS_OK
LockX 10645 2147483538 1 NT_STATUS_OK
UnlockX 10645 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10645 1005 NT_STATUS_OK
ReadX 10645 0 512 512 NT_STATUS_OK
ReadX 10645 512 512 512 NT_STATUS_OK
ReadX 10645 1024 512 512 NT_STATUS_OK
ReadX 10645 288 20 20 NT_STATUS_OK
ReadX 10645 308 2084 2084 NT_STATUS_OK
ReadX 10645 388 2084 2084 NT_STATUS_OK
ReadX 10645 388 2084 2084 NT_STATUS_OK
ReadX 10632 2157 1386 1386 NT_STATUS_OK
ReadX 10645 2472 399 399 NT_STATUS_OK
ReadX 10645 3072 1536 1536 NT_STATUS_OK
ReadX 10645 544 149 149 NT_STATUS_OK
ReadX 10645 693 485 485 NT_STATUS_OK
Close 10645 NT_STATUS_OK
ReadX 10632 2157 4096 4096 NT_STATUS_OK
ReadX 10632 6253 4096 4096 NT_STATUS_OK
ReadX 10632 10349 4096 4096 NT_STATUS_OK
ReadX 10632 14445 4096 4096 NT_STATUS_OK
ReadX 10632 18541 4096 4096 NT_STATUS_OK
ReadX 10632 22637 256 256 NT_STATUS_OK
ReadX 10632 22893 4096 4096 NT_STATUS_OK
ReadX 10632 26989 4096 4096 NT_STATUS_OK
ReadX 10632 31085 4096 4096 NT_STATUS_OK
ReadX 10632 35181 4096 4096 NT_STATUS_OK
ReadX 10632 39277 4096 4096 NT_STATUS_OK
ReadX 10632 43373 4096 4096 NT_STATUS_OK
ReadX 10632 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10632 2157 1024 1024 NT_STATUS_OK
ReadX 10632 1667 4688 4688 NT_STATUS_OK
ReadX 10632 6355 3516 3516 NT_STATUS_OK
ReadX 10632 9871 16384 16384 NT_STATUS_OK
ReadX 10632 26255 3771 3771 NT_STATUS_OK
ReadX 10632 30026 2048 2048 NT_STATUS_OK
ReadX 10632 32074 1024 1024 NT_STATUS_OK
ReadX 10632 33098 6652 6652 NT_STATUS_OK
ReadX 10632 39750 16384 16384 NT_STATUS_OK
ReadX 10632 56134 10496 10496 NT_STATUS_OK
ReadX 10632 66630 1784 1784 NT_STATUS_OK
ReadX 10632 68414 90 90 NT_STATUS_OK
ReadX 10632 68504 273 273 NT_STATUS_OK
ReadX 10632 68777 1600 1600 NT_STATUS_OK
ReadX 10632 70377 640 640 NT_STATUS_OK
ReadX 10632 71017 1280 1280 NT_STATUS_OK
ReadX 10632 72297 8464 8464 NT_STATUS_OK
ReadX 10632 80761 158 158 NT_STATUS_OK
ReadX 10632 80919 912 912 NT_STATUS_OK
ReadX 10632 81831 1980 1980 NT_STATUS_OK
ReadX 10632 83811 2256 2256 NT_STATUS_OK
ReadX 10632 86067 400 400 NT_STATUS_OK
ReadX 10632 86467 252 252 NT_STATUS_OK
ReadX 10632 86719 42 42 NT_STATUS_OK
ReadX 10632 86761 725 725 NT_STATUS_OK
ReadX 10632 2009 512 512 NT_STATUS_OK
ReadX 10632 3895 9 9 NT_STATUS_OK
ReadX 10632 3781 46 46 NT_STATUS_OK
ReadX 10632 4059 92 92 NT_STATUS_OK
ReadX 10632 3781 92 92 NT_STATUS_OK
ReadX 10632 3986 184 184 NT_STATUS_OK
ReadX 10632 3987 16384 16384 NT_STATUS_OK
ReadX 10632 3902 16384 16384 NT_STATUS_OK
ReadX 10632 3781 10240 10240 NT_STATUS_OK
ReadX 10632 3821 16384 16384 NT_STATUS_OK
ReadX 10632 3891 935 935 NT_STATUS_OK
ReadX 10632 4060 10240 10240 NT_STATUS_OK
ReadX 10632 4059 184 184 NT_STATUS_OK
ReadX 10632 256 184 184 NT_STATUS_OK
ReadX 10632 256 1026 1026 NT_STATUS_OK
ReadX 10632 3901 326 326 NT_STATUS_OK
ReadX 10632 3899 652 652 NT_STATUS_OK
ReadX 10632 256 2 2 NT_STATUS_OK
ReadX 10632 258 4948 4948 NT_STATUS_OK
Close 10632 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10650 NT_STATUS_OK
WriteX 10650 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10650 258 NT_STATUS_OK
WriteX 10650 0 65536 65536 NT_STATUS_OK
WriteX 10650 65536 65536 65536 NT_STATUS_OK
WriteX 10650 131072 65536 65536 NT_STATUS_OK
WriteX 10650 196608 65536 65536 NT_STATUS_OK
WriteX 10650 262144 65536 65536 NT_STATUS_OK
WriteX 10650 327680 65536 65536 NT_STATUS_OK
WriteX 10650 393216 65536 65536 NT_STATUS_OK
WriteX 10650 458752 65536 65536 NT_STATUS_OK
WriteX 10650 524288 65536 65536 NT_STATUS_OK
WriteX 10650 589824 35257 35257 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10652 NT_STATUS_OK
Close 10652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10655 NT_STATUS_OK
WriteX 10655 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10655 258 NT_STATUS_OK
WriteX 10655 0 65536 65536 NT_STATUS_OK
WriteX 10655 65536 65536 65536 NT_STATUS_OK
WriteX 10655 131072 65536 65536 NT_STATUS_OK
WriteX 10655 196608 65536 65536 NT_STATUS_OK
WriteX 10655 262144 65536 65536 NT_STATUS_OK
WriteX 10655 327680 65536 65536 NT_STATUS_OK
WriteX 10655 393216 65536 65536 NT_STATUS_OK
WriteX 10655 458752 65536 65536 NT_STATUS_OK
WriteX 10655 524288 65536 65536 NT_STATUS_OK
WriteX 10655 589824 57598 57598 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10657 NT_STATUS_OK
WriteX 10657 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 258 NT_STATUS_OK
WriteX 10657 0 12543 12543 NT_STATUS_OK
Flush 10657 NT_STATUS_OK
Close 10657 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10663 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 1005 NT_STATUS_OK
ReadX 10663 1938 24 24 NT_STATUS_OK
ReadX 10663 1920 276 276 NT_STATUS_OK
ReadX 10663 1918 14 14 NT_STATUS_OK
ReadX 10663 1918 7 7 NT_STATUS_OK
ReadX 10663 1919 12 12 NT_STATUS_OK
ReadX 10663 1919 8 8 NT_STATUS_OK
ReadX 10663 1917 15 15 NT_STATUS_OK
ReadX 10663 0 16 16 NT_STATUS_OK
ReadX 10663 16 2048 2048 NT_STATUS_OK
ReadX 10663 2064 2048 2048 NT_STATUS_OK
ReadX 10663 257 2048 2048 NT_STATUS_OK
ReadX 10663 385 2048 2048 NT_STATUS_OK
ReadX 10663 513 2048 2048 NT_STATUS_OK
ReadX 10663 641 2048 2048 NT_STATUS_OK
ReadX 10663 769 2048 2048 NT_STATUS_OK
ReadX 10663 897 2048 2048 NT_STATUS_OK
ReadX 10663 1025 2048 2048 NT_STATUS_OK
ReadX 10663 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10668 NT_STATUS_OK
WriteX 10668 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10668 258 NT_STATUS_OK
WriteX 10668 0 11588 11588 NT_STATUS_OK
Flush 10668 NT_STATUS_OK
Close 10668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
Close 10663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10673 NT_STATUS_OK
WriteX 10673 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10673 258 NT_STATUS_OK
WriteX 10673 0 11615 11615 NT_STATUS_OK
Flush 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10677 NT_STATUS_OK
ReadX 10677 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10679 NT_STATUS_OK
Close 10679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10682 NT_STATUS_OK
WriteX 10682 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10682 258 NT_STATUS_OK
WriteX 10682 0 65536 65536 NT_STATUS_OK
WriteX 10682 65536 16050 16050 NT_STATUS_OK
Close 10682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10662 1939 64 64 NT_STATUS_OK
ReadX 10662 128 248 248 NT_STATUS_OK
ReadX 10662 128 568 568 NT_STATUS_OK
ReadX 10662 3872 1536 1536 NT_STATUS_OK
ReadX 10662 3456 2560 2560 NT_STATUS_OK
ReadX 10662 3136 512 512 NT_STATUS_OK
ReadX 10662 2880 4096 4096 NT_STATUS_OK
ReadX 10662 3264 3072 3072 NT_STATUS_OK
ReadX 10662 320 4096 4096 NT_STATUS_OK
ReadX 10662 1024 4096 4096 NT_STATUS_OK
ReadX 10662 3616 4096 4096 NT_STATUS_OK
ReadX 10662 1939 64 64 NT_STATUS_OK
ReadX 10662 128 248 248 NT_STATUS_OK
ReadX 10662 128 608 608 NT_STATUS_OK
ReadX 10662 2858 1024 1024 NT_STATUS_OK
ReadX 10662 2810 4096 4096 NT_STATUS_OK
ReadX 10662 2826 4096 4096 NT_STATUS_OK
ReadX 10662 2580 2048 2048 NT_STATUS_OK
ReadX 10662 2800 2560 2560 NT_STATUS_OK
ReadX 10662 2100 4096 4096 NT_STATUS_OK
ReadX 10662 2084 4096 4096 NT_STATUS_OK
ReadX 10662 868 4096 4096 NT_STATUS_OK
ReadX 10662 2324 4096 4096 NT_STATUS_OK
ReadX 10662 884 4096 4096 NT_STATUS_OK
ReadX 10662 2604 1024 1024 NT_STATUS_OK
ReadX 10662 580 4096 4096 NT_STATUS_OK
ReadX 10662 596 4096 4096 NT_STATUS_OK
ReadX 10662 2752 4096 4096 NT_STATUS_OK
ReadX 10662 2842 1024 1024 NT_STATUS_OK
ReadX 10662 660 4096 4096 NT_STATUS_OK
ReadX 10662 2720 4096 4096 NT_STATUS_OK
ReadX 10662 2736 4096 4096 NT_STATUS_OK
ReadX 10662 628 4096 4096 NT_STATUS_OK
ReadX 10662 2704 4096 4096 NT_STATUS_OK
ReadX 10662 1556 4096 4096 NT_STATUS_OK
ReadX 10662 576 4096 4096 NT_STATUS_OK
ReadX 10662 3168 1536 1536 NT_STATUS_OK
ReadX 10662 832 4096 4096 NT_STATUS_OK
ReadX 10662 1088 4096 4096 NT_STATUS_OK
ReadX 10662 1344 4096 4096 NT_STATUS_OK
ReadX 10662 1600 4096 4096 NT_STATUS_OK
ReadX 10662 1856 4096 4096 NT_STATUS_OK
ReadX 10662 2112 4096 4096 NT_STATUS_OK
ReadX 10662 1892 4096 4096 NT_STATUS_OK
ReadX 10662 820 4096 4096 NT_STATUS_OK
ReadX 10662 788 4096 4096 NT_STATUS_OK
ReadX 10662 1604 4096 4096 NT_STATUS_OK
ReadX 10662 3648 4096 4096 NT_STATUS_OK
ReadX 10662 2608 4096 4096 NT_STATUS_OK
ReadX 10662 548 4096 4096 NT_STATUS_OK
ReadX 10662 740 4096 4096 NT_STATUS_OK
ReadX 10662 1344 4096 4096 NT_STATUS_OK
ReadX 10662 3392 4096 4096 NT_STATUS_OK
ReadX 10662 3904 4096 4096 NT_STATUS_OK
ReadX 10662 644 4096 4096 NT_STATUS_OK
ReadX 10662 676 4096 4096 NT_STATUS_OK
ReadX 10662 2688 4096 4096 NT_STATUS_OK
ReadX 10662 320 4096 4096 NT_STATUS_OK
ReadX 10662 900 4096 4096 NT_STATUS_OK
ReadX 10662 1908 4096 4096 NT_STATUS_OK
ReadX 10662 852 4096 4096 NT_STATUS_OK
ReadX 10662 724 4096 4096 NT_STATUS_OK
ReadX 10662 2292 4096 4096 NT_STATUS_OK
ReadX 10662 612 4096 4096 NT_STATUS_OK
ReadX 10662 388 4096 4096 NT_STATUS_OK
ReadX 10662 2368 4096 4096 NT_STATUS_OK
ReadX 10662 2624 4096 4096 NT_STATUS_OK
ReadX 10662 500 4096 4096 NT_STATUS_OK
ReadX 10662 356 4096 4096 NT_STATUS_OK
ReadX 10662 1024 4096 4096 NT_STATUS_OK
ReadX 10662 576 4096 4096 NT_STATUS_OK
ReadX 10662 340 4096 4096 NT_STATUS_OK
ReadX 10662 420 4096 4096 NT_STATUS_OK
ReadX 10662 1600 4096 4096 NT_STATUS_OK
ReadX 10662 404 4096 4096 NT_STATUS_OK
ReadX 10662 1428 4096 4096 NT_STATUS_OK
ReadX 10662 2656 4096 4096 NT_STATUS_OK
ReadX 10662 2624 4096 4096 NT_STATUS_OK
ReadX 10662 452 4096 4096 NT_STATUS_OK
ReadX 10662 692 4096 4096 NT_STATUS_OK
ReadX 10662 564 4096 4096 NT_STATUS_OK
ReadX 10662 372 4096 4096 NT_STATUS_OK
ReadX 10662 468 4096 4096 NT_STATUS_OK
ReadX 10662 484 4096 4096 NT_STATUS_OK
ReadX 10662 1088 4096 4096 NT_STATUS_OK
ReadX 10662 1924 4096 4096 NT_STATUS_OK
ReadX 10662 2768 4096 4096 NT_STATUS_OK
ReadX 10662 832 4096 4096 NT_STATUS_OK
ReadX 10662 836 4096 4096 NT_STATUS_OK
ReadX 10662 1856 4096 4096 NT_STATUS_OK
ReadX 10662 2640 4096 4096 NT_STATUS_OK
ReadX 10662 436 4096 4096 NT_STATUS_OK
ReadX 10662 1828 4096 4096 NT_STATUS_OK
ReadX 10662 804 4096 4096 NT_STATUS_OK
ReadX 10662 1860 4096 4096 NT_STATUS_OK
ReadX 10662 1812 4096 4096 NT_STATUS_OK
ReadX 10662 756 4096 4096 NT_STATUS_OK
ReadX 10662 1636 4096 4096 NT_STATUS_OK
ReadX 10662 772 4096 4096 NT_STATUS_OK
ReadX 10662 2036 4096 4096 NT_STATUS_OK
ReadX 10662 1220 4096 4096 NT_STATUS_OK
ReadX 10662 1652 4096 4096 NT_STATUS_OK
ReadX 10662 2588 4096 4096 NT_STATUS_OK
ReadX 10662 916 4096 4096 NT_STATUS_OK
ReadX 10662 260 4096 4096 NT_STATUS_OK
ReadX 10662 932 4096 4096 NT_STATUS_OK
ReadX 10662 2624 4096 4096 NT_STATUS_OK
ReadX 10662 308 4096 4096 NT_STATUS_OK
ReadX 10662 292 4096 4096 NT_STATUS_OK
ReadX 10662 1140 4096 4096 NT_STATUS_OK
ReadX 10662 276 4096 4096 NT_STATUS_OK
ReadX 10662 2020 4096 4096 NT_STATUS_OK
ReadX 10662 2880 4096 4096 NT_STATUS_OK
ReadX 10662 516 4096 4096 NT_STATUS_OK
ReadX 10662 1844 4096 4096 NT_STATUS_OK
ReadX 10662 1124 4096 4096 NT_STATUS_OK
ReadX 10662 3136 4096 4096 NT_STATUS_OK
ReadX 10662 324 4096 4096 NT_STATUS_OK
ReadX 10662 1156 4096 4096 NT_STATUS_OK
ReadX 10662 1172 4096 4096 NT_STATUS_OK
ReadX 10662 2112 4096 4096 NT_STATUS_OK
ReadX 10662 2368 4096 4096 NT_STATUS_OK
ReadX 10662 964 4096 4096 NT_STATUS_OK
ReadX 10662 980 4096 4096 NT_STATUS_OK
ReadX 10662 1012 4096 4096 NT_STATUS_OK
ReadX 10662 532 4096 4096 NT_STATUS_OK
ReadX 10662 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10662 1620 4096 4096 NT_STATUS_OK
ReadX 10662 1604 4096 4096 NT_STATUS_OK
ReadX 10662 2116 4096 4096 NT_STATUS_OK
ReadX 10662 2132 4096 4096 NT_STATUS_OK
ReadX 10662 2148 4096 4096 NT_STATUS_OK
ReadX 10662 2276 4096 4096 NT_STATUS_OK
ReadX 10662 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10684 NT_STATUS_OK
Close 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10687 NT_STATUS_OK
QUERY_FILE_INFORMATION 10642 1004 NT_STATUS_OK
Close 10642 NT_STATUS_OK
WriteX 10687 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10687 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 1004 NT_STATUS_OK
Close 10644 NT_STATUS_OK
WriteX 10687 0 65536 65536 NT_STATUS_OK
WriteX 10687 65536 64850 64850 NT_STATUS_OK
Close 10687 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10689 NT_STATUS_OK
WriteX 10689 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10689 258 NT_STATUS_OK
ReadX 10662 2068 4096 4096 NT_STATUS_OK
ReadX 10662 1588 4096 4096 NT_STATUS_OK
ReadX 10662 1572 4096 4096 NT_STATUS_OK
WriteX 10689 0 18630 18630 NT_STATUS_OK
Flush 10689 NT_STATUS_OK
Close 10689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10691 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10662 612 4096 4096 NT_STATUS_OK
ReadX 10662 564 4096 4096 NT_STATUS_OK
ReadX 10662 1876 4096 4096 NT_STATUS_OK
ReadX 10662 628 4096 4096 NT_STATUS_OK
ReadX 10662 740 4096 4096 NT_STATUS_OK
ReadX 10662 724 4096 4096 NT_STATUS_OK
ReadX 10662 644 4096 4096 NT_STATUS_OK
ReadX 10662 2324 4096 4096 NT_STATUS_OK
ReadX 10662 660 4096 4096 NT_STATUS_OK
ReadX 10662 852 4096 4096 NT_STATUS_OK
ReadX 10662 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10662 2368 4096 4096 NT_STATUS_OK
ReadX 10662 1024 4096 4096 NT_STATUS_OK
ReadX 10662 320 4096 4096 NT_STATUS_OK
ReadX 10662 580 4096 4096 NT_STATUS_OK
ReadX 10662 3136 512 512 NT_STATUS_OK
ReadX 10662 2880 4096 4096 NT_STATUS_OK
Close 10662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 61440 4096 4096 NT_STATUS_OK
ReadX 10694 126976 4096 4096 NT_STATUS_OK
WriteX 10694 0 65536 65536 NT_STATUS_OK
WriteX 10694 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 61440 4096 4096 NT_STATUS_OK
ReadX 10695 126976 4096 4096 NT_STATUS_OK
ReadX 10695 192512 4096 4096 NT_STATUS_OK
ReadX 10695 258048 4096 4096 NT_STATUS_OK
WriteX 10695 0 65536 65536 NT_STATUS_OK
WriteX 10695 65536 65536 65536 NT_STATUS_OK
WriteX 10695 131072 65536 65536 NT_STATUS_OK
WriteX 10695 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10696 NT_STATUS_OK
ReadX 10696 61440 4096 4096 NT_STATUS_OK
ReadX 10696 126976 4096 4096 NT_STATUS_OK
ReadX 10696 192512 4096 4096 NT_STATUS_OK
ReadX 10696 258048 4096 4096 NT_STATUS_OK
ReadX 10696 323584 4096 4096 NT_STATUS_OK
ReadX 10696 389120 4096 4096 NT_STATUS_OK
ReadX 10696 454656 4096 4096 NT_STATUS_OK
ReadX 10696 520192 4096 4096 NT_STATUS_OK
WriteX 10696 0 65536 65536 NT_STATUS_OK
WriteX 10696 65536 65536 65536 NT_STATUS_OK
WriteX 10696 131072 65536 65536 NT_STATUS_OK
WriteX 10696 196608 65536 65536 NT_STATUS_OK
WriteX 10696 262144 65536 65536 NT_STATUS_OK
WriteX 10696 327680 65536 65536 NT_STATUS_OK
WriteX 10696 393216 65536 65536 NT_STATUS_OK
WriteX 10696 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10697 NT_STATUS_OK
ReadX 10697 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10699 NT_STATUS_OK
WriteX 10699 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10699 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10697 0 8192 8192 NT_STATUS_OK
Flush 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10697 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10697 0 8192 8192 NT_STATUS_OK
Flush 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10697 0 8192 8192 NT_STATUS_OK
Flush 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10697 0 8192 8192 NT_STATUS_OK
Flush 10697 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Close 10694 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Close 10696 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10704 NT_STATUS_OK
WriteX 10704 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10704 258 NT_STATUS_OK
WriteX 10704 0 62591 62591 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 10845 10845 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10714 NT_STATUS_OK
WriteX 10714 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10714 258 NT_STATUS_OK
WriteX 10714 0 30118 30118 NT_STATUS_OK
Close 10714 NT_STATUS_OK
WriteX 10697 0 4096 4096 NT_STATUS_OK
WriteX 10699 0 64 64 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10716 NT_STATUS_OK
ReadX 10716 0 61440 61440 NT_STATUS_OK
ReadX 10716 61440 4096 4096 NT_STATUS_OK
ReadX 10716 65536 61440 61440 NT_STATUS_OK
ReadX 10716 126976 4096 4096 NT_STATUS_OK
ReadX 10716 131072 61440 61440 NT_STATUS_OK
ReadX 10716 192512 4096 4096 NT_STATUS_OK
ReadX 10716 196608 61440 61440 NT_STATUS_OK
ReadX 10716 258048 4096 4096 NT_STATUS_OK
ReadX 10716 262144 61440 61440 NT_STATUS_OK
ReadX 10716 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 61440 61440 NT_STATUS_OK
ReadX 10717 61440 4096 4096 NT_STATUS_OK
ReadX 10717 65536 61440 61440 NT_STATUS_OK
ReadX 10717 126976 4096 4096 NT_STATUS_OK
ReadX 10717 131072 61440 61440 NT_STATUS_OK
ReadX 10717 192512 4096 4096 NT_STATUS_OK
ReadX 10717 196608 61440 61440 NT_STATUS_OK
ReadX 10717 258048 4096 4096 NT_STATUS_OK
ReadX 10717 262144 61440 61440 NT_STATUS_OK
ReadX 10717 323584 4096 4096 NT_STATUS_OK
ReadX 10717 327680 61440 61440 NT_STATUS_OK
ReadX 10717 389120 4096 4096 NT_STATUS_OK
ReadX 10717 393216 61440 61440 NT_STATUS_OK
ReadX 10717 454656 4096 4096 NT_STATUS_OK
ReadX 10717 458752 61440 61440 NT_STATUS_OK
ReadX 10717 520192 4096 4096 NT_STATUS_OK
ReadX 10717 524288 61440 61440 NT_STATUS_OK
ReadX 10717 585728 4096 4096 NT_STATUS_OK
ReadX 10717 589824 61440 61440 NT_STATUS_OK
ReadX 10717 651264 4096 4096 NT_STATUS_OK
ReadX 10717 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 61440 61440 NT_STATUS_OK
ReadX 10718 61440 4096 4096 NT_STATUS_OK
ReadX 10718 65536 61440 61440 NT_STATUS_OK
ReadX 10718 126976 4096 4096 NT_STATUS_OK
ReadX 10718 131072 61440 61440 NT_STATUS_OK
ReadX 10718 192512 4096 4096 NT_STATUS_OK
ReadX 10718 196608 61440 61440 NT_STATUS_OK
ReadX 10718 258048 4096 4096 NT_STATUS_OK
ReadX 10718 262144 61440 61440 NT_STATUS_OK
ReadX 10718 323584 4096 4096 NT_STATUS_OK
ReadX 10718 327680 61440 61440 NT_STATUS_OK
ReadX 10718 389120 4096 4096 NT_STATUS_OK
ReadX 10718 393216 61440 61440 NT_STATUS_OK
ReadX 10718 454656 4096 4096 NT_STATUS_OK
ReadX 10718 458752 61440 61440 NT_STATUS_OK
ReadX 10718 520192 4096 4096 NT_STATUS_OK
ReadX 10718 524288 61440 61440 NT_STATUS_OK
ReadX 10718 585728 4096 4096 NT_STATUS_OK
ReadX 10718 589824 61440 61440 NT_STATUS_OK
ReadX 10718 651264 4096 4096 NT_STATUS_OK
ReadX 10718 655360 61440 61440 NT_STATUS_OK
ReadX 10718 716800 4096 4096 NT_STATUS_OK
ReadX 10718 720896 61440 61440 NT_STATUS_OK
ReadX 10718 782336 4096 4096 NT_STATUS_OK
ReadX 10718 786432 61440 61440 NT_STATUS_OK
ReadX 10718 847872 4096 4096 NT_STATUS_OK
ReadX 10718 851968 61440 61440 NT_STATUS_OK
ReadX 10718 913408 4096 4096 NT_STATUS_OK
ReadX 10718 917504 61440 61440 NT_STATUS_OK
ReadX 10718 978944 4096 4096 NT_STATUS_OK
ReadX 10718 983040 61440 61440 NT_STATUS_OK
ReadX 10718 1044480 4096 4096 NT_STATUS_OK
ReadX 10718 1048576 61440 61440 NT_STATUS_OK
ReadX 10718 1110016 4096 4096 NT_STATUS_OK
ReadX 10718 1114112 61440 61440 NT_STATUS_OK
ReadX 10718 1175552 4096 4096 NT_STATUS_OK
ReadX 10718 1179648 61440 61440 NT_STATUS_OK
ReadX 10718 1241088 4096 4096 NT_STATUS_OK
ReadX 10718 1245184 61440 61440 NT_STATUS_OK
ReadX 10718 1306624 4096 4096 NT_STATUS_OK
ReadX 10718 1310720 61440 61440 NT_STATUS_OK
ReadX 10718 1372160 4096 4096 NT_STATUS_OK
ReadX 10718 1376256 61440 61440 NT_STATUS_OK
ReadX 10718 1437696 4096 4096 NT_STATUS_OK
ReadX 10718 1441792 61440 61440 NT_STATUS_OK
ReadX 10718 1503232 4096 4096 NT_STATUS_OK
ReadX 10718 1507328 61440 61440 NT_STATUS_OK
ReadX 10718 1568768 4096 4096 NT_STATUS_OK
ReadX 10718 1572864 61440 61440 NT_STATUS_OK
ReadX 10718 1634304 4096 4096 NT_STATUS_OK
ReadX 10718 1638400 61440 61440 NT_STATUS_OK
ReadX 10718 1699840 4096 4096 NT_STATUS_OK
ReadX 10718 1703936 61440 61440 NT_STATUS_OK
ReadX 10718 1765376 4096 4096 NT_STATUS_OK
ReadX 10718 1769472 61440 61440 NT_STATUS_OK
ReadX 10718 1830912 4096 4096 NT_STATUS_OK
ReadX 10718 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10716 NT_STATUS_OK
Close 10717 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
ReadX 10723 4096 4096 4096 NT_STATUS_OK
ReadX 10723 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10724 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10727 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 8192 8192 NT_STATUS_OK
ReadX 10731 8192 8192 8192 NT_STATUS_OK
ReadX 10731 16384 8192 8192 NT_STATUS_OK
ReadX 10731 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10731 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10736 NT_STATUS_OK
WriteX 10736 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10736 258 NT_STATUS_OK
WriteX 10736 0 10438 10438 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10737 NT_STATUS_OK
Close 10737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10740 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10741 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10742 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
ReadX 10745 4096 4096 4096 NT_STATUS_OK
ReadX 10745 8192 4096 4096 NT_STATUS_OK
ReadX 10745 12288 8192 8192 NT_STATUS_OK
ReadX 10745 20480 8192 8192 NT_STATUS_OK
ReadX 10745 28672 8192 8192 NT_STATUS_OK
ReadX 10745 36864 8192 8192 NT_STATUS_OK
ReadX 10745 45056 8192 8192 NT_STATUS_OK
ReadX 10745 53248 8192 8192 NT_STATUS_OK
ReadX 10745 61440 8192 8192 NT_STATUS_OK
ReadX 10745 69632 8192 8192 NT_STATUS_OK
ReadX 10745 77824 8192 8192 NT_STATUS_OK
ReadX 10745 86016 8192 8192 NT_STATUS_OK
ReadX 10745 94208 8192 8192 NT_STATUS_OK
ReadX 10745 102400 8192 8192 NT_STATUS_OK
ReadX 10745 110592 8192 8192 NT_STATUS_OK
ReadX 10745 118784 8192 8192 NT_STATUS_OK
ReadX 10745 126976 8192 8192 NT_STATUS_OK
ReadX 10745 135168 8192 8192 NT_STATUS_OK
ReadX 10745 143360 8192 8192 NT_STATUS_OK
ReadX 10745 151552 8192 8192 NT_STATUS_OK
ReadX 10745 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10747 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10750 NT_STATUS_OK
WriteX 10750 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10750 258 NT_STATUS_OK
WriteX 10750 0 28489 28489 NT_STATUS_OK
Close 10750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10753 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10753 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10756 NT_STATUS_OK
ReadX 10756 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 8192 8192 NT_STATUS_OK
ReadX 10757 8192 8192 8192 NT_STATUS_OK
ReadX 10757 16384 8192 8192 NT_STATUS_OK
ReadX 10757 24576 8192 8192 NT_STATUS_OK
ReadX 10757 32768 16384 16384 NT_STATUS_OK
ReadX 10757 49152 8192 8192 NT_STATUS_OK
ReadX 10757 57344 8192 8192 NT_STATUS_OK
ReadX 10757 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10759 NT_STATUS_OK
Close 10759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10756 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10762 NT_STATUS_OK
WriteX 10762 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 258 NT_STATUS_OK
WriteX 10762 0 29253 29253 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10763 NT_STATUS_OK
Close 10763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10769 NT_STATUS_OK
WriteX 10769 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
WriteX 10769 0 30183 30183 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10772 NT_STATUS_OK
WriteX 10772 0 510 510 NT_STATUS_OK
WriteX 10772 510 512 512 NT_STATUS_OK
WriteX 10772 1022 510 510 NT_STATUS_OK
WriteX 10772 1532 510 510 NT_STATUS_OK
WriteX 10772 2042 168 168 NT_STATUS_OK
Close 10772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10773 NT_STATUS_OK
Close 10773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 61440 4096 4096 NT_STATUS_OK
ReadX 10776 126976 4096 4096 NT_STATUS_OK
WriteX 10776 0 65536 65536 NT_STATUS_OK
WriteX 10776 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 61440 4096 4096 NT_STATUS_OK
ReadX 10777 126976 4096 4096 NT_STATUS_OK
ReadX 10777 192512 4096 4096 NT_STATUS_OK
ReadX 10777 258048 4096 4096 NT_STATUS_OK
WriteX 10777 0 65536 65536 NT_STATUS_OK
WriteX 10777 65536 65536 65536 NT_STATUS_OK
WriteX 10777 131072 65536 65536 NT_STATUS_OK
WriteX 10777 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 61440 4096 4096 NT_STATUS_OK
ReadX 10778 126976 4096 4096 NT_STATUS_OK
ReadX 10778 192512 4096 4096 NT_STATUS_OK
ReadX 10778 258048 4096 4096 NT_STATUS_OK
ReadX 10778 323584 4096 4096 NT_STATUS_OK
ReadX 10778 389120 4096 4096 NT_STATUS_OK
ReadX 10778 454656 4096 4096 NT_STATUS_OK
ReadX 10778 520192 4096 4096 NT_STATUS_OK
WriteX 10778 0 65536 65536 NT_STATUS_OK
WriteX 10778 65536 65536 65536 NT_STATUS_OK
WriteX 10778 131072 65536 65536 NT_STATUS_OK
WriteX 10778 196608 65536 65536 NT_STATUS_OK
WriteX 10778 262144 65536 65536 NT_STATUS_OK
WriteX 10778 327680 65536 65536 NT_STATUS_OK
WriteX 10778 393216 65536 65536 NT_STATUS_OK
WriteX 10778 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10779 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10775 NT_STATUS_OK
Close 10776 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10788 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10797 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10818 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10828 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10833 NT_STATUS_OK
Close 10833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10847 NT_STATUS_OK
WriteX 10847 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10847 0 65536 65536 NT_STATUS_OK
WriteX 10847 65536 65536 65536 NT_STATUS_OK
WriteX 10847 131072 65536 65536 NT_STATUS_OK
WriteX 10847 196608 65536 65536 NT_STATUS_OK
WriteX 10847 262144 26634 26634 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10852 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
Close 10854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
ReadX 10855 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10856 NT_STATUS_OK
Close 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10874 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10883 NT_STATUS_OK
Close 10883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10888 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10893 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10912 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10917 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10920 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
Close 10935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10946 NT_STATUS_OK
Close 10946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
ReadX 10981 4096 4096 4096 NT_STATUS_OK
ReadX 10981 8192 4096 4096 NT_STATUS_OK
ReadX 10981 12288 4096 4096 NT_STATUS_OK
ReadX 10981 16384 4096 4096 NT_STATUS_OK
ReadX 10981 20480 4096 4096 NT_STATUS_OK
ReadX 10981 24576 4096 4096 NT_STATUS_OK
ReadX 10981 28672 4096 4096 NT_STATUS_OK
ReadX 10981 32768 4096 4096 NT_STATUS_OK
ReadX 10981 36864 4096 4096 NT_STATUS_OK
ReadX 10981 40960 4096 4096 NT_STATUS_OK
ReadX 10981 45056 4096 4096 NT_STATUS_OK
ReadX 10981 49152 4096 4096 NT_STATUS_OK
ReadX 10981 53248 4096 4096 NT_STATUS_OK
ReadX 10981 57344 4096 4096 NT_STATUS_OK
ReadX 10981 61440 4096 4096 NT_STATUS_OK
ReadX 10981 65536 4096 4096 NT_STATUS_OK
ReadX 10981 69632 4096 4096 NT_STATUS_OK
ReadX 10981 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10981 1004 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
Close 10981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10982 NT_STATUS_OK
SET_FILE_INFORMATION 10982 1004 NT_STATUS_OK
Close 10982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10983 NT_STATUS_OK
ReadX 10983 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10987 NT_STATUS_OK
WriteX 10987 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 258 NT_STATUS_OK
WriteX 10987 0 65536 65536 NT_STATUS_OK
WriteX 10987 65536 19979 19979 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 1004 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
SET_FILE_INFORMATION 10988 1004 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
Close 10989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
Close 10991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10993 1004 NT_STATUS_OK
WriteX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10994 NT_STATUS_OK
Close 10994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10996 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10999 NT_STATUS_OK
WriteX 10999 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10999 258 NT_STATUS_OK
WriteX 10999 0 65536 65536 NT_STATUS_OK
WriteX 10999 65536 17654 17654 NT_STATUS_OK
Close 10999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
Flush 11000 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
Flush 11000 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 1004 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
Flush 11000 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
Flush 11000 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
Flush 11000 NT_STATUS_OK
SET_FILE_INFORMATION 11000 1004 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
Flush 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11001 NT_STATUS_OK
SET_FILE_INFORMATION 11001 1004 NT_STATUS_OK
Close 11001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
ReadX 11005 4096 4096 4096 NT_STATUS_OK
ReadX 11005 8192 4096 4096 NT_STATUS_OK
ReadX 11005 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11005 16384 4096 4096 NT_STATUS_OK
ReadX 11005 20480 4096 4096 NT_STATUS_OK
ReadX 11005 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 4096 4096 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 4096 4096 NT_STATUS_OK
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11008 1004 NT_STATUS_OK
WriteX 11008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11009 NT_STATUS_OK
Close 11009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11011 NT_STATUS_OK
Close 11011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11014 NT_STATUS_OK
WriteX 11014 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 258 NT_STATUS_OK
WriteX 11014 0 65536 65536 NT_STATUS_OK
WriteX 11014 65536 19490 19490 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
Flush 11015 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
Flush 11015 NT_STATUS_OK
QUERY_FILE_INFORMATION 11015 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
Flush 11015 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
Flush 11015 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
Flush 11015 NT_STATUS_OK
SET_FILE_INFORMATION 11015 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
Flush 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11016 NT_STATUS_OK
SET_FILE_INFORMATION 11016 1004 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11020 0 4096 4096 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 4096 4096 NT_STATUS_OK
ReadX 11022 8192 4096 4096 NT_STATUS_OK
ReadX 11022 12288 4096 4096 NT_STATUS_OK
ReadX 11022 16384 4096 4096 NT_STATUS_OK
ReadX 11022 20480 4096 4096 NT_STATUS_OK
ReadX 11022 24576 4096 4096 NT_STATUS_OK
ReadX 11022 28672 4096 4096 NT_STATUS_OK
ReadX 11022 32768 4096 4096 NT_STATUS_OK
ReadX 11022 36864 4096 4096 NT_STATUS_OK
ReadX 11022 40960 4096 4096 NT_STATUS_OK
ReadX 11022 45056 4096 4096 NT_STATUS_OK
ReadX 11022 49152 4096 4096 NT_STATUS_OK
ReadX 11022 53248 4096 4096 NT_STATUS_OK
ReadX 11022 57344 4096 4096 NT_STATUS_OK
ReadX 11022 61440 4096 4096 NT_STATUS_OK
ReadX 11022 65536 4096 4096 NT_STATUS_OK
ReadX 11022 69632 4096 4096 NT_STATUS_OK
ReadX 11022 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11022 1004 NT_STATUS_OK
WriteX 11022 0 4096 4096 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11023 NT_STATUS_OK
SET_FILE_INFORMATION 11023 1004 NT_STATUS_OK
Close 11023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11028 NT_STATUS_OK
WriteX 11028 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 258 NT_STATUS_OK
WriteX 11028 0 65536 65536 NT_STATUS_OK
WriteX 11028 65536 8866 8866 NT_STATUS_OK
Close 11028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11033 1004 NT_STATUS_OK
WriteX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11034 NT_STATUS_OK
Close 11034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11039 NT_STATUS_OK
WriteX 11039 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 258 NT_STATUS_OK
WriteX 11039 0 65536 65536 NT_STATUS_OK
WriteX 11039 65536 9298 9298 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11040 NT_STATUS_OK
ReadX 11040 0 4096 4096 NT_STATUS_OK
WriteX 11040 0 4096 4096 NT_STATUS_OK
Flush 11040 NT_STATUS_OK
SET_FILE_INFORMATION 11040 1004 NT_STATUS_OK
WriteX 11040 0 4096 4096 NT_STATUS_OK
Flush 11040 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11041 NT_STATUS_OK
SET_FILE_INFORMATION 11041 1004 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 0 4096 4096 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11047 NT_STATUS_OK
ReadX 11047 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11047 4096 4096 4096 NT_STATUS_OK
ReadX 11047 8192 4096 4096 NT_STATUS_OK
ReadX 11047 12288 4096 4096 NT_STATUS_OK
ReadX 11047 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
Close 11048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
Close 11049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11050 NT_STATUS_OK
ReadX 11050 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11050 1004 NT_STATUS_OK
WriteX 11050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11047 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11056 NT_STATUS_OK
WriteX 11056 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11056 258 NT_STATUS_OK
WriteX 11056 0 65536 65536 NT_STATUS_OK
WriteX 11056 65536 11540 11540 NT_STATUS_OK
Close 11056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
Flush 11057 NT_STATUS_OK
SET_FILE_INFORMATION 11057 1004 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
Flush 11057 NT_STATUS_OK
Close 11057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11058 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
Close 11058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 61440 4096 4096 NT_STATUS_OK
ReadX 11062 126976 4096 4096 NT_STATUS_OK
WriteX 11062 0 65536 65536 NT_STATUS_OK
WriteX 11062 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 61440 4096 4096 NT_STATUS_OK
ReadX 11063 126976 4096 4096 NT_STATUS_OK
ReadX 11063 192512 4096 4096 NT_STATUS_OK
ReadX 11063 258048 4096 4096 NT_STATUS_OK
WriteX 11063 0 65536 65536 NT_STATUS_OK
WriteX 11063 65536 65536 65536 NT_STATUS_OK
WriteX 11063 131072 65536 65536 NT_STATUS_OK
WriteX 11063 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 61440 4096 4096 NT_STATUS_OK
ReadX 11064 126976 4096 4096 NT_STATUS_OK
ReadX 11064 192512 4096 4096 NT_STATUS_OK
ReadX 11064 258048 4096 4096 NT_STATUS_OK
ReadX 11064 323584 4096 4096 NT_STATUS_OK
ReadX 11064 389120 4096 4096 NT_STATUS_OK
ReadX 11064 454656 4096 4096 NT_STATUS_OK
ReadX 11064 520192 4096 4096 NT_STATUS_OK
WriteX 11064 0 65536 65536 NT_STATUS_OK
WriteX 11064 65536 65536 65536 NT_STATUS_OK
WriteX 11064 131072 65536 65536 NT_STATUS_OK
WriteX 11064 196608 65536 65536 NT_STATUS_OK
WriteX 11064 262144 65536 65536 NT_STATUS_OK
WriteX 11064 327680 65536 65536 NT_STATUS_OK
WriteX 11064 393216 65536 65536 NT_STATUS_OK
WriteX 11064 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
ReadX 11065 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11066 NT_STATUS_OK
WriteX 11066 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11066 258 NT_STATUS_OK
WriteX 11066 0 53 53 NT_STATUS_OK
Close 11066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11067 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11065 8192 4096 4096 NT_STATUS_OK
ReadX 11065 12288 4096 4096 NT_STATUS_OK
WriteX 11069 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11069 258 NT_STATUS_OK
ReadX 11065 16384 4096 4096 NT_STATUS_OK
ReadX 11065 20480 4096 4096 NT_STATUS_OK
WriteX 11069 0 15360 15360 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11070 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11070 1004 NT_STATUS_OK
WriteX 11070 0 4096 4096 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11071 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11073 4096 4096 4096 NT_STATUS_OK
ReadX 11073 8192 4096 4096 NT_STATUS_OK
ReadX 11073 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
ReadX 11076 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
ReadX 11077 4096 4096 4096 NT_STATUS_OK
ReadX 11077 8192 4096 4096 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11078 NT_STATUS_OK
WriteX 11078 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 258 NT_STATUS_OK
WriteX 11078 0 15360 15360 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11079 NT_STATUS_OK
ReadX 11079 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11080 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11083 NT_STATUS_OK
SET_FILE_INFORMATION 11083 1004 NT_STATUS_OK
Close 11083 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 4096 4096 NT_STATUS_OK
ReadX 11086 4096 4096 4096 NT_STATUS_OK
ReadX 11086 8192 4096 4096 NT_STATUS_OK
ReadX 11086 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11086 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11086 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11088 NT_STATUS_OK
WriteX 11088 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 258 NT_STATUS_OK
WriteX 11088 0 53 53 NT_STATUS_OK
Close 11088 NT_STATUS_OK
WriteX 11086 0 19054 19054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11087 4096 4096 4096 NT_STATUS_OK
ReadX 11087 8192 4096 4096 NT_STATUS_OK
ReadX 11087 12288 4096 4096 NT_STATUS_OK
WriteX 11091 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11091 258 NT_STATUS_OK
WriteX 11091 0 12006 12006 NT_STATUS_OK
Close 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
Close 11092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11093 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11096 NT_STATUS_OK
Close 11096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11095 4096 4096 4096 NT_STATUS_OK
ReadX 11095 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11098 NT_STATUS_OK
WriteX 11098 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11098 258 NT_STATUS_OK
WriteX 11098 0 11991 11991 NT_STATUS_OK
Close 11098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11099 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11100 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11103 NT_STATUS_OK
SET_FILE_INFORMATION 11103 1004 NT_STATUS_OK
Close 11103 NT_STATUS_OK
WriteX 11099 0 4096 4096 NT_STATUS_OK
Close 11099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11104 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11106 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11106 1004 NT_STATUS_OK
ReadX 11106 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11106 1004 NT_STATUS_OK
WriteX 11106 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11106 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11106 1004 NT_STATUS_OK
Close 11082 NT_STATUS_OK
WriteX 11106 0 12288 12288 NT_STATUS_OK
Close 11102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11109 NT_STATUS_OK
Close 11109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11086 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 61440 61440 NT_STATUS_OK
ReadX 11113 61440 4096 4096 NT_STATUS_OK
ReadX 11113 65536 61440 61440 NT_STATUS_OK
ReadX 11113 126976 4096 4096 NT_STATUS_OK
ReadX 11113 131072 61440 61440 NT_STATUS_OK
ReadX 11113 192512 4096 4096 NT_STATUS_OK
ReadX 11113 196608 61440 61440 NT_STATUS_OK
ReadX 11113 258048 4096 4096 NT_STATUS_OK
ReadX 11113 262144 61440 61440 NT_STATUS_OK
ReadX 11113 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11114 NT_STATUS_OK
ReadX 11114 0 61440 61440 NT_STATUS_OK
ReadX 11114 61440 4096 4096 NT_STATUS_OK
ReadX 11114 65536 61440 61440 NT_STATUS_OK
ReadX 11114 126976 4096 4096 NT_STATUS_OK
ReadX 11114 131072 61440 61440 NT_STATUS_OK
ReadX 11114 192512 4096 4096 NT_STATUS_OK
ReadX 11114 196608 61440 61440 NT_STATUS_OK
ReadX 11114 258048 4096 4096 NT_STATUS_OK
ReadX 11114 262144 61440 61440 NT_STATUS_OK
ReadX 11114 323584 4096 4096 NT_STATUS_OK
ReadX 11114 327680 61440 61440 NT_STATUS_OK
ReadX 11114 389120 4096 4096 NT_STATUS_OK
ReadX 11114 393216 61440 61440 NT_STATUS_OK
ReadX 11114 454656 4096 4096 NT_STATUS_OK
ReadX 11114 458752 61440 61440 NT_STATUS_OK
ReadX 11114 520192 4096 4096 NT_STATUS_OK
ReadX 11114 524288 61440 61440 NT_STATUS_OK
ReadX 11114 585728 4096 4096 NT_STATUS_OK
ReadX 11114 589824 61440 61440 NT_STATUS_OK
ReadX 11114 651264 4096 4096 NT_STATUS_OK
ReadX 11114 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 61440 61440 NT_STATUS_OK
ReadX 11115 61440 4096 4096 NT_STATUS_OK
ReadX 11115 65536 61440 61440 NT_STATUS_OK
ReadX 11115 126976 4096 4096 NT_STATUS_OK
ReadX 11115 131072 61440 61440 NT_STATUS_OK
ReadX 11115 192512 4096 4096 NT_STATUS_OK
ReadX 11115 196608 61440 61440 NT_STATUS_OK
ReadX 11115 258048 4096 4096 NT_STATUS_OK
ReadX 11115 262144 61440 61440 NT_STATUS_OK
ReadX 11115 323584 4096 4096 NT_STATUS_OK
ReadX 11115 327680 61440 61440 NT_STATUS_OK
ReadX 11115 389120 4096 4096 NT_STATUS_OK
ReadX 11115 393216 61440 61440 NT_STATUS_OK
ReadX 11115 454656 4096 4096 NT_STATUS_OK
ReadX 11115 458752 61440 61440 NT_STATUS_OK
ReadX 11115 520192 4096 4096 NT_STATUS_OK
ReadX 11115 524288 61440 61440 NT_STATUS_OK
ReadX 11115 585728 4096 4096 NT_STATUS_OK
ReadX 11115 589824 61440 61440 NT_STATUS_OK
ReadX 11115 651264 4096 4096 NT_STATUS_OK
ReadX 11115 655360 61440 61440 NT_STATUS_OK
ReadX 11115 716800 4096 4096 NT_STATUS_OK
ReadX 11115 720896 61440 61440 NT_STATUS_OK
ReadX 11115 782336 4096 4096 NT_STATUS_OK
ReadX 11115 786432 61440 61440 NT_STATUS_OK
ReadX 11115 847872 4096 4096 NT_STATUS_OK
ReadX 11115 851968 61440 61440 NT_STATUS_OK
ReadX 11115 913408 4096 4096 NT_STATUS_OK
ReadX 11115 917504 61440 61440 NT_STATUS_OK
ReadX 11115 978944 4096 4096 NT_STATUS_OK
ReadX 11115 983040 61440 61440 NT_STATUS_OK
ReadX 11115 1044480 4096 4096 NT_STATUS_OK
ReadX 11115 1048576 61440 61440 NT_STATUS_OK
ReadX 11115 1110016 4096 4096 NT_STATUS_OK
ReadX 11115 1114112 61440 61440 NT_STATUS_OK
ReadX 11115 1175552 4096 4096 NT_STATUS_OK
ReadX 11115 1179648 61440 61440 NT_STATUS_OK
ReadX 11115 1241088 4096 4096 NT_STATUS_OK
ReadX 11115 1245184 61440 61440 NT_STATUS_OK
ReadX 11115 1306624 4096 4096 NT_STATUS_OK
ReadX 11115 1310720 61440 61440 NT_STATUS_OK
ReadX 11115 1372160 4096 4096 NT_STATUS_OK
ReadX 11115 1376256 61440 61440 NT_STATUS_OK
ReadX 11115 1437696 4096 4096 NT_STATUS_OK
ReadX 11115 1441792 61440 61440 NT_STATUS_OK
ReadX 11115 1503232 4096 4096 NT_STATUS_OK
ReadX 11115 1507328 61440 61440 NT_STATUS_OK
ReadX 11115 1568768 4096 4096 NT_STATUS_OK
ReadX 11115 1572864 61440 61440 NT_STATUS_OK
ReadX 11115 1634304 4096 4096 NT_STATUS_OK
ReadX 11115 1638400 61440 61440 NT_STATUS_OK
ReadX 11115 1699840 4096 4096 NT_STATUS_OK
ReadX 11115 1703936 61440 61440 NT_STATUS_OK
ReadX 11115 1765376 4096 4096 NT_STATUS_OK
ReadX 11115 1769472 61440 61440 NT_STATUS_OK
ReadX 11115 1830912 4096 4096 NT_STATUS_OK
ReadX 11115 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11118 NT_STATUS_OK
ReadX 11118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11121 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11122 NT_STATUS_OK
QUERY_FILE_INFORMATION 11122 1004 NT_STATUS_OK
WriteX 11122 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11122 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11124 NT_STATUS_OK
WriteX 11124 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 258 NT_STATUS_OK
WriteX 11124 0 491 491 NT_STATUS_OK
Close 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11122 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11127 NT_STATUS_OK
Close 11127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11128 NT_STATUS_OK
WriteX 11128 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11128 258 NT_STATUS_OK
WriteX 11128 0 543 543 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11113 NT_STATUS_OK
Close 11114 NT_STATUS_OK
Close 11115 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11117 NT_STATUS_OK
Close 11118 NT_STATUS_OK
Close 11119 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11132 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11142 NT_STATUS_OK
QUERY_FILE_INFORMATION 11142 1004 NT_STATUS_OK
WriteX 11142 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11142 258 NT_STATUS_OK
WriteX 11142 0 2048 2048 NT_STATUS_OK
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11143 0 4096 4096 NT_STATUS_OK
Flush 11143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11143 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11147 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11148 NT_STATUS_OK
WriteX 11148 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11148 258 NT_STATUS_OK
WriteX 11148 0 2048 2048 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11154 NT_STATUS_OK
WriteX 11154 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11154 258 NT_STATUS_OK
WriteX 11154 0 2048 2048 NT_STATUS_OK
Close 11154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11155 NT_STATUS_OK
ReadX 11155 0 2048 2048 NT_STATUS_OK
ReadX 11133 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11149 0 4096 4096 NT_STATUS_OK
WriteX 11133 0 8192 8192 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
WriteX 11135 0 4096 4096 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11159 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11149 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11171 NT_STATUS_OK
ReadX 11171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11172 NT_STATUS_OK
ReadX 11172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11179 NT_STATUS_OK
QUERY_FILE_INFORMATION 11179 1004 NT_STATUS_OK
WriteX 11179 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11179 258 NT_STATUS_OK
WriteX 11179 0 2048 2048 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11187 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 1004 NT_STATUS_OK
WriteX 11187 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
WriteX 11187 0 2048 2048 NT_STATUS_OK
Close 11187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11188 NT_STATUS_OK
ReadX 11188 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11180 0 4096 4096 NT_STATUS_OK
Flush 11180 NT_STATUS_OK
WriteX 11188 0 4096 4096 NT_STATUS_OK
Flush 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11180 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11188 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11182 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11190 NT_STATUS_OK
WriteX 11190 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Close 11190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11193 NT_STATUS_OK
WriteX 11193 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 258 NT_STATUS_OK
WriteX 11193 0 4096 4096 NT_STATUS_OK
Close 11193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11194 0 4096 4096 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11174 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11171 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Close 11165 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11200 NT_STATUS_OK
Close 11200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11201 NT_STATUS_OK
WriteX 11201 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11201 258 NT_STATUS_OK
WriteX 11201 0 2048 2048 NT_STATUS_OK
Close 11201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11203 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11206 NT_STATUS_OK
ReadX 11206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11207 NT_STATUS_OK
ReadX 11207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11208 NT_STATUS_OK
ReadX 11208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11210 NT_STATUS_OK
ReadX 11210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11216 NT_STATUS_OK
QUERY_FILE_INFORMATION 11216 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Close 11210 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11206 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11218 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11222 NT_STATUS_OK
ReadX 11222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11223 NT_STATUS_OK
ReadX 11223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11224 NT_STATUS_OK
ReadX 11224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11226 NT_STATUS_OK
ReadX 11226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11238 NT_STATUS_OK
QUERY_FILE_INFORMATION 11238 1004 NT_STATUS_OK
WriteX 11238 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11238 258 NT_STATUS_OK
WriteX 11238 0 2048 2048 NT_STATUS_OK
Close 11238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11250 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 1004 NT_STATUS_OK
WriteX 11250 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 258 NT_STATUS_OK
WriteX 11250 0 2048 2048 NT_STATUS_OK
Close 11250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1004 NT_STATUS_OK
WriteX 11258 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 258 NT_STATUS_OK
WriteX 11258 0 2048 2048 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11239 0 4096 4096 NT_STATUS_OK
Flush 11239 NT_STATUS_OK
WriteX 11251 0 4096 4096 NT_STATUS_OK
Flush 11251 NT_STATUS_OK
WriteX 11259 0 4096 4096 NT_STATUS_OK
Flush 11259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11251 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11259 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11241 4096 16384 16384 NT_STATUS_OK
ReadX 11221 4096 16384 16384 NT_STATUS_OK
ReadX 11253 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11261 NT_STATUS_OK
ReadX 11261 0 2048 2048 NT_STATUS_OK
WriteX 11261 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11262 NT_STATUS_OK
QUERY_FILE_INFORMATION 11262 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11227 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11231 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Close 11222 NT_STATUS_OK
Close 11223 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11264 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11266 NT_STATUS_OK
QUERY_FILE_INFORMATION 11266 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11269 4096 16384 16384 NT_STATUS_OK
WriteX 11269 0 4096 4096 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
WriteX 11271 0 4096 4096 NT_STATUS_OK
WriteX 11272 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11274 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 8192 8192 NT_STATUS_OK
ReadX 11275 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11289 0 4096 4096 NT_STATUS_OK
ReadX 11289 4096 4096 4096 NT_STATUS_OK
ReadX 11289 8192 4096 4096 NT_STATUS_OK
WriteX 11275 0 4096 4096 NT_STATUS_OK
WriteX 11276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11290 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
ReadX 11290 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11269 0 4096 4096 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
WriteX 11271 0 4096 4096 NT_STATUS_OK
WriteX 11272 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11295 NT_STATUS_OK
QUERY_FILE_INFORMATION 11295 1004 NT_STATUS_OK
WriteX 11295 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11295 258 NT_STATUS_OK
WriteX 11295 0 2048 2048 NT_STATUS_OK
Close 11295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11296 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11298 NT_STATUS_OK
ReadX 11298 0 4096 4096 NT_STATUS_OK
ReadX 11298 4096 4096 4096 NT_STATUS_OK
WriteX 11298 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 4096 4096 NT_STATUS_OK
ReadX 11300 4096 4096 4096 NT_STATUS_OK
WriteX 11300 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Close 11270 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Close 11300 NT_STATUS_OK
Close 11289 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11303 0 4096 4096 NT_STATUS_OK
ReadX 11303 4096 4096 4096 NT_STATUS_OK
ReadX 11303 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11304 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11314 NT_STATUS_OK
ReadX 11314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11315 NT_STATUS_OK
ReadX 11315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11316 NT_STATUS_OK
ReadX 11316 0 4096 4096 NT_STATUS_OK
ReadX 11304 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11320 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11321 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 1004 NT_STATUS_OK
WriteX 11321 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 258 NT_STATUS_OK
WriteX 11321 0 2048 2048 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11322 NT_STATUS_OK
ReadX 11322 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11327 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1004 NT_STATUS_OK
WriteX 11327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 258 NT_STATUS_OK
WriteX 11327 0 2048 2048 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11328 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11311 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11329 NT_STATUS_OK
QUERY_FILE_INFORMATION 11329 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Close 11309 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11331 NT_STATUS_OK
QUERY_FILE_INFORMATION 11331 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 61440 4096 4096 NT_STATUS_OK
ReadX 11333 126976 4096 4096 NT_STATUS_OK
WriteX 11333 0 65536 65536 NT_STATUS_OK
WriteX 11333 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 61440 4096 4096 NT_STATUS_OK
ReadX 11334 126976 4096 4096 NT_STATUS_OK
ReadX 11334 192512 4096 4096 NT_STATUS_OK
ReadX 11334 258048 4096 4096 NT_STATUS_OK
WriteX 11334 0 65536 65536 NT_STATUS_OK
WriteX 11334 65536 65536 65536 NT_STATUS_OK
WriteX 11334 131072 65536 65536 NT_STATUS_OK
WriteX 11334 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 61440 4096 4096 NT_STATUS_OK
ReadX 11335 126976 4096 4096 NT_STATUS_OK
ReadX 11335 192512 4096 4096 NT_STATUS_OK
ReadX 11335 258048 4096 4096 NT_STATUS_OK
ReadX 11335 323584 4096 4096 NT_STATUS_OK
ReadX 11335 389120 4096 4096 NT_STATUS_OK
ReadX 11335 454656 4096 4096 NT_STATUS_OK
ReadX 11335 520192 4096 4096 NT_STATUS_OK
WriteX 11335 0 65536 65536 NT_STATUS_OK
WriteX 11335 65536 65536 65536 NT_STATUS_OK
WriteX 11335 131072 65536 65536 NT_STATUS_OK
WriteX 11335 196608 65536 65536 NT_STATUS_OK
WriteX 11335 262144 65536 65536 NT_STATUS_OK
WriteX 11335 327680 65536 65536 NT_STATUS_OK
WriteX 11335 393216 65536 65536 NT_STATUS_OK
WriteX 11335 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11336 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11336 8192 4096 4096 NT_STATUS_OK
ReadX 11336 12288 4096 4096 NT_STATUS_OK
ReadX 11336 16384 4096 4096 NT_STATUS_OK
ReadX 11336 20480 4096 4096 NT_STATUS_OK
ReadX 11336 24576 4096 4096 NT_STATUS_OK
ReadX 11336 28672 4096 4096 NT_STATUS_OK
ReadX 11336 32768 4096 4096 NT_STATUS_OK
ReadX 11336 36864 4096 4096 NT_STATUS_OK
ReadX 11336 40960 4096 4096 NT_STATUS_OK
ReadX 11336 45056 4096 4096 NT_STATUS_OK
ReadX 11336 49152 4096 4096 NT_STATUS_OK
ReadX 11336 53248 4096 4096 NT_STATUS_OK
ReadX 11336 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11336 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11339 NT_STATUS_OK
WriteX 11339 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11339 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11339 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11339 1004 NT_STATUS_OK
WriteX 11339 0 57088 57088 NT_STATUS_OK
WriteX 11339 0 4096 4096 NT_STATUS_OK
Flush 11339 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11340 NT_STATUS_OK
SET_FILE_INFORMATION 11340 1004 NT_STATUS_OK
Close 11340 NT_STATUS_OK
SET_FILE_INFORMATION 11339 1004 NT_STATUS_OK
WriteX 11339 0 4096 4096 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11341 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11343 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11344 NT_STATUS_OK
WriteX 11344 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11344 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11344 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11344 1004 NT_STATUS_OK
WriteX 11344 0 51456 51456 NT_STATUS_OK
WriteX 11344 0 4096 4096 NT_STATUS_OK
Flush 11344 NT_STATUS_OK
SET_FILE_INFORMATION 11344 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11344 1004 NT_STATUS_OK
WriteX 11344 0 4096 4096 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11348 NT_STATUS_OK
ReadX 11348 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11348 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11353 NT_STATUS_OK
WriteX 11353 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11353 258 NT_STATUS_OK
WriteX 11353 0 53077 53077 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11354 NT_STATUS_OK
WriteX 11354 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11354 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11354 1004 NT_STATUS_OK
WriteX 11354 0 65536 65536 NT_STATUS_OK
WriteX 11354 65536 1856 1856 NT_STATUS_OK
WriteX 11354 0 4096 4096 NT_STATUS_OK
Flush 11354 NT_STATUS_OK
SET_FILE_INFORMATION 11354 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11354 1004 NT_STATUS_OK
WriteX 11354 0 4096 4096 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Close 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11363 NT_STATUS_OK
WriteX 11363 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 258 NT_STATUS_OK
WriteX 11363 0 7983 7983 NT_STATUS_OK
Close 11363 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11365 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11368 NT_STATUS_OK
WriteX 11368 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 258 NT_STATUS_OK
WriteX 11368 0 65536 65536 NT_STATUS_OK
WriteX 11368 65536 65536 65536 NT_STATUS_OK
WriteX 11368 131072 65536 65536 NT_STATUS_OK
WriteX 11368 196608 65536 65536 NT_STATUS_OK
WriteX 11368 262144 65536 65536 NT_STATUS_OK
WriteX 11368 327680 65536 65536 NT_STATUS_OK
WriteX 11368 393216 65536 65536 NT_STATUS_OK
WriteX 11368 458752 46731 46731 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11369 NT_STATUS_OK
WriteX 11369 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11358 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11369 1004 NT_STATUS_OK
WriteX 11369 0 65536 65536 NT_STATUS_OK
WriteX 11369 65536 22848 22848 NT_STATUS_OK
WriteX 11369 0 4096 4096 NT_STATUS_OK
Flush 11369 NT_STATUS_OK
SET_FILE_INFORMATION 11369 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11369 1004 NT_STATUS_OK
WriteX 11369 0 4096 4096 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11371 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11373 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11374 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11374 1004 NT_STATUS_OK
ReadX 11374 8192 4096 4096 NT_STATUS_OK
ReadX 11374 12288 4096 4096 NT_STATUS_OK
ReadX 11374 16384 4096 4096 NT_STATUS_OK
ReadX 11374 20480 4096 4096 NT_STATUS_OK
ReadX 11374 24576 4096 4096 NT_STATUS_OK
ReadX 11374 28672 4096 4096 NT_STATUS_OK
ReadX 11374 32768 4096 4096 NT_STATUS_OK
ReadX 11374 36864 4096 4096 NT_STATUS_OK
ReadX 11374 40960 4096 4096 NT_STATUS_OK
ReadX 11374 45056 4096 4096 NT_STATUS_OK
ReadX 11374 49152 4096 4096 NT_STATUS_OK
ReadX 11374 53248 4096 4096 NT_STATUS_OK
ReadX 11374 57344 4096 4096 NT_STATUS_OK
ReadX 11374 61440 4096 4096 NT_STATUS_OK
ReadX 11374 65536 4096 4096 NT_STATUS_OK
ReadX 11374 69632 4096 4096 NT_STATUS_OK
ReadX 11374 73728 4096 4096 NT_STATUS_OK
ReadX 11374 77824 4096 4096 NT_STATUS_OK
ReadX 11374 81920 4096 4096 NT_STATUS_OK
ReadX 11374 86016 4096 4096 NT_STATUS_OK
ReadX 11374 90112 4096 4096 NT_STATUS_OK
ReadX 11374 94208 4096 4096 NT_STATUS_OK
ReadX 11374 98304 4096 4096 NT_STATUS_OK
ReadX 11374 102400 4096 4096 NT_STATUS_OK
ReadX 11374 106496 4096 4096 NT_STATUS_OK
ReadX 11374 110592 4096 4096 NT_STATUS_OK
ReadX 11374 114688 4096 4096 NT_STATUS_OK
ReadX 11374 118784 4096 4096 NT_STATUS_OK
ReadX 11374 122880 4096 4096 NT_STATUS_OK
ReadX 11374 126976 4096 4096 NT_STATUS_OK
ReadX 11374 131072 4096 4096 NT_STATUS_OK
ReadX 11374 135168 4096 4096 NT_STATUS_OK
ReadX 11374 139264 4096 4096 NT_STATUS_OK
ReadX 11374 143360 4096 4096 NT_STATUS_OK
ReadX 11374 147456 4096 4096 NT_STATUS_OK
ReadX 11374 151552 4096 4096 NT_STATUS_OK
ReadX 11374 155648 4096 4096 NT_STATUS_OK
ReadX 11374 159744 4096 4096 NT_STATUS_OK
ReadX 11374 163840 4096 4096 NT_STATUS_OK
ReadX 11374 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11374 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11377 NT_STATUS_OK
WriteX 11377 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
Close 11374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11378 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
WriteX 11377 0 42388 42388 NT_STATUS_OK
Close 11377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11381 NT_STATUS_OK
ReadX 11381 0 4096 4096 NT_STATUS_OK
ReadX 11381 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11382 NT_STATUS_OK
WriteX 11382 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11382 258 NT_STATUS_OK
SET_FILE_INFORMATION 11382 1004 NT_STATUS_OK
WriteX 11382 0 42652 42652 NT_STATUS_OK
Close 11382 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11384 NT_STATUS_OK
Close 11384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11386 NT_STATUS_OK
ReadX 11386 0 4096 4096 NT_STATUS_OK
ReadX 11386 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11391 NT_STATUS_OK
WriteX 11391 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11391 258 NT_STATUS_OK
WriteX 11391 0 65536 65536 NT_STATUS_OK
WriteX 11391 65536 49 49 NT_STATUS_OK
Close 11391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 61440 61440 NT_STATUS_OK
ReadX 11392 61440 4096 4096 NT_STATUS_OK
ReadX 11392 65536 61440 61440 NT_STATUS_OK
ReadX 11392 126976 4096 4096 NT_STATUS_OK
ReadX 11392 131072 61440 61440 NT_STATUS_OK
ReadX 11392 192512 4096 4096 NT_STATUS_OK
ReadX 11392 196608 61440 61440 NT_STATUS_OK
ReadX 11392 258048 4096 4096 NT_STATUS_OK
ReadX 11392 262144 61440 61440 NT_STATUS_OK
ReadX 11392 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 61440 61440 NT_STATUS_OK
ReadX 11393 61440 4096 4096 NT_STATUS_OK
ReadX 11393 65536 61440 61440 NT_STATUS_OK
ReadX 11393 126976 4096 4096 NT_STATUS_OK
ReadX 11393 131072 61440 61440 NT_STATUS_OK
ReadX 11393 192512 4096 4096 NT_STATUS_OK
ReadX 11393 196608 61440 61440 NT_STATUS_OK
ReadX 11393 258048 4096 4096 NT_STATUS_OK
ReadX 11393 262144 61440 61440 NT_STATUS_OK
ReadX 11393 323584 4096 4096 NT_STATUS_OK
ReadX 11393 327680 61440 61440 NT_STATUS_OK
ReadX 11393 389120 4096 4096 NT_STATUS_OK
ReadX 11393 393216 61440 61440 NT_STATUS_OK
ReadX 11393 454656 4096 4096 NT_STATUS_OK
ReadX 11393 458752 61440 61440 NT_STATUS_OK
ReadX 11393 520192 4096 4096 NT_STATUS_OK
ReadX 11393 524288 61440 61440 NT_STATUS_OK
ReadX 11393 585728 4096 4096 NT_STATUS_OK
ReadX 11393 589824 61440 61440 NT_STATUS_OK
ReadX 11393 651264 4096 4096 NT_STATUS_OK
ReadX 11393 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 61440 61440 NT_STATUS_OK
ReadX 11394 61440 4096 4096 NT_STATUS_OK
ReadX 11394 65536 61440 61440 NT_STATUS_OK
ReadX 11394 126976 4096 4096 NT_STATUS_OK
ReadX 11394 131072 61440 61440 NT_STATUS_OK
ReadX 11394 192512 4096 4096 NT_STATUS_OK
ReadX 11394 196608 61440 61440 NT_STATUS_OK
ReadX 11394 258048 4096 4096 NT_STATUS_OK
ReadX 11394 262144 61440 61440 NT_STATUS_OK
ReadX 11394 323584 4096 4096 NT_STATUS_OK
ReadX 11394 327680 61440 61440 NT_STATUS_OK
ReadX 11394 389120 4096 4096 NT_STATUS_OK
ReadX 11394 393216 61440 61440 NT_STATUS_OK
ReadX 11394 454656 4096 4096 NT_STATUS_OK
ReadX 11394 458752 61440 61440 NT_STATUS_OK
ReadX 11394 520192 4096 4096 NT_STATUS_OK
ReadX 11394 524288 61440 61440 NT_STATUS_OK
ReadX 11394 585728 4096 4096 NT_STATUS_OK
ReadX 11394 589824 61440 61440 NT_STATUS_OK
ReadX 11394 651264 4096 4096 NT_STATUS_OK
ReadX 11394 655360 61440 61440 NT_STATUS_OK
ReadX 11394 716800 4096 4096 NT_STATUS_OK
ReadX 11394 720896 61440 61440 NT_STATUS_OK
ReadX 11394 782336 4096 4096 NT_STATUS_OK
ReadX 11394 786432 61440 61440 NT_STATUS_OK
ReadX 11394 847872 4096 4096 NT_STATUS_OK
ReadX 11394 851968 61440 61440 NT_STATUS_OK
ReadX 11394 913408 4096 4096 NT_STATUS_OK
ReadX 11394 917504 61440 61440 NT_STATUS_OK
ReadX 11394 978944 4096 4096 NT_STATUS_OK
ReadX 11394 983040 61440 61440 NT_STATUS_OK
ReadX 11394 1044480 4096 4096 NT_STATUS_OK
ReadX 11394 1048576 61440 61440 NT_STATUS_OK
ReadX 11394 1110016 4096 4096 NT_STATUS_OK
ReadX 11394 1114112 61440 61440 NT_STATUS_OK
ReadX 11394 1175552 4096 4096 NT_STATUS_OK
ReadX 11394 1179648 61440 61440 NT_STATUS_OK
ReadX 11394 1241088 4096 4096 NT_STATUS_OK
ReadX 11394 1245184 61440 61440 NT_STATUS_OK
ReadX 11394 1306624 4096 4096 NT_STATUS_OK
ReadX 11394 1310720 61440 61440 NT_STATUS_OK
ReadX 11394 1372160 4096 4096 NT_STATUS_OK
ReadX 11394 1376256 61440 61440 NT_STATUS_OK
ReadX 11394 1437696 4096 4096 NT_STATUS_OK
ReadX 11394 1441792 61440 61440 NT_STATUS_OK
ReadX 11394 1503232 4096 4096 NT_STATUS_OK
ReadX 11394 1507328 61440 61440 NT_STATUS_OK
ReadX 11394 1568768 4096 4096 NT_STATUS_OK
ReadX 11394 1572864 61440 61440 NT_STATUS_OK
ReadX 11394 1634304 4096 4096 NT_STATUS_OK
ReadX 11394 1638400 61440 61440 NT_STATUS_OK
ReadX 11394 1699840 4096 4096 NT_STATUS_OK
ReadX 11394 1703936 61440 61440 NT_STATUS_OK
ReadX 11394 1765376 4096 4096 NT_STATUS_OK
ReadX 11394 1769472 61440 61440 NT_STATUS_OK
ReadX 11394 1830912 4096 4096 NT_STATUS_OK
ReadX 11394 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11396 NT_STATUS_OK
QUERY_FILE_INFORMATION 11396 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11396 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11396 1005 NT_STATUS_OK
ReadX 11396 2156 24 24 NT_STATUS_OK
ReadX 11396 2139 276 276 NT_STATUS_OK
ReadX 11396 2136 14 14 NT_STATUS_OK
ReadX 11396 2136 7 7 NT_STATUS_OK
ReadX 11396 2138 12 12 NT_STATUS_OK
ReadX 11396 2137 8 8 NT_STATUS_OK
ReadX 11396 2135 15 15 NT_STATUS_OK
ReadX 11396 0 16 16 NT_STATUS_OK
ReadX 11396 16 2048 2048 NT_STATUS_OK
ReadX 11396 2064 2048 2048 NT_STATUS_OK
ReadX 11396 257 2048 2048 NT_STATUS_OK
ReadX 11396 385 2048 2048 NT_STATUS_OK
ReadX 11396 513 2048 2048 NT_STATUS_OK
ReadX 11396 641 2048 2048 NT_STATUS_OK
ReadX 11396 769 2048 2048 NT_STATUS_OK
ReadX 11396 897 2048 2048 NT_STATUS_OK
ReadX 11396 1025 2048 2048 NT_STATUS_OK
ReadX 11396 1153 2048 2048 NT_STATUS_OK
ReadX 11396 1281 2048 2048 NT_STATUS_OK
ReadX 11396 1409 2048 2048 NT_STATUS_OK
ReadX 11396 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11398 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11386 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11401 NT_STATUS_OK
WriteX 11401 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 258 NT_STATUS_OK
WriteX 11401 0 10575 10575 NT_STATUS_OK
Flush 11401 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
Close 11396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11406 NT_STATUS_OK
LockX 11406 2147483538 1 NT_STATUS_OK
UnlockX 11406 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11406 1005 NT_STATUS_OK
ReadX 11406 0 512 512 NT_STATUS_OK
ReadX 11406 512 512 512 NT_STATUS_OK
ReadX 11406 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11406 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11406 1004 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11407 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 1005 NT_STATUS_OK
ReadX 11407 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11408 NT_STATUS_OK
LockX 11408 2147483538 1 NT_STATUS_OK
UnlockX 11408 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 1005 NT_STATUS_OK
ReadX 11408 0 512 512 NT_STATUS_OK
ReadX 11408 512 512 512 NT_STATUS_OK
ReadX 11408 1024 512 512 NT_STATUS_OK
ReadX 11408 288 20 20 NT_STATUS_OK
ReadX 11408 308 2084 2084 NT_STATUS_OK
ReadX 11408 388 2084 2084 NT_STATUS_OK
ReadX 11408 388 2084 2084 NT_STATUS_OK
ReadX 11395 2157 1386 1386 NT_STATUS_OK
ReadX 11408 2472 399 399 NT_STATUS_OK
ReadX 11408 3072 1536 1536 NT_STATUS_OK
ReadX 11408 544 149 149 NT_STATUS_OK
ReadX 11408 693 485 485 NT_STATUS_OK
Close 11408 NT_STATUS_OK
ReadX 11395 2157 4096 4096 NT_STATUS_OK
ReadX 11395 6253 4096 4096 NT_STATUS_OK
ReadX 11395 10349 4096 4096 NT_STATUS_OK
ReadX 11395 14445 4096 4096 NT_STATUS_OK
ReadX 11395 18541 4096 4096 NT_STATUS_OK
ReadX 11395 22637 256 256 NT_STATUS_OK
ReadX 11395 22893 4096 4096 NT_STATUS_OK
ReadX 11395 26989 4096 4096 NT_STATUS_OK
ReadX 11395 31085 4096 4096 NT_STATUS_OK
ReadX 11395 35181 4096 4096 NT_STATUS_OK
ReadX 11395 39277 4096 4096 NT_STATUS_OK
ReadX 11395 43373 4096 4096 NT_STATUS_OK
ReadX 11395 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11395 2157 1024 1024 NT_STATUS_OK
ReadX 11395 1667 4688 4688 NT_STATUS_OK
ReadX 11395 6355 3516 3516 NT_STATUS_OK
ReadX 11395 9871 16384 16384 NT_STATUS_OK
ReadX 11395 26255 3771 3771 NT_STATUS_OK
ReadX 11395 30026 2048 2048 NT_STATUS_OK
ReadX 11395 32074 1024 1024 NT_STATUS_OK
ReadX 11395 33098 6652 6652 NT_STATUS_OK
ReadX 11395 39750 16384 16384 NT_STATUS_OK
ReadX 11395 56134 10496 10496 NT_STATUS_OK
ReadX 11395 66630 1784 1784 NT_STATUS_OK
ReadX 11395 68414 90 90 NT_STATUS_OK
ReadX 11395 68504 273 273 NT_STATUS_OK
ReadX 11395 68777 1600 1600 NT_STATUS_OK
ReadX 11395 70377 640 640 NT_STATUS_OK
ReadX 11395 71017 1280 1280 NT_STATUS_OK
ReadX 11395 72297 8464 8464 NT_STATUS_OK
ReadX 11395 80761 158 158 NT_STATUS_OK
ReadX 11395 80919 912 912 NT_STATUS_OK
ReadX 11395 81831 1980 1980 NT_STATUS_OK
ReadX 11395 83811 2256 2256 NT_STATUS_OK
ReadX 11395 86067 400 400 NT_STATUS_OK
ReadX 11395 86467 252 252 NT_STATUS_OK
ReadX 11395 86719 42 42 NT_STATUS_OK
ReadX 11395 86761 725 725 NT_STATUS_OK
ReadX 11395 2009 512 512 NT_STATUS_OK
ReadX 11395 3895 9 9 NT_STATUS_OK
ReadX 11395 3781 46 46 NT_STATUS_OK
ReadX 11395 4059 92 92 NT_STATUS_OK
ReadX 11395 3781 92 92 NT_STATUS_OK
ReadX 11395 3986 184 184 NT_STATUS_OK
ReadX 11395 3987 16384 16384 NT_STATUS_OK
ReadX 11395 3902 16384 16384 NT_STATUS_OK
ReadX 11395 3781 10240 10240 NT_STATUS_OK
ReadX 11395 3821 16384 16384 NT_STATUS_OK
ReadX 11395 3891 935 935 NT_STATUS_OK
ReadX 11395 4060 10240 10240 NT_STATUS_OK
ReadX 11395 4059 184 184 NT_STATUS_OK
ReadX 11395 256 184 184 NT_STATUS_OK
ReadX 11395 256 1026 1026 NT_STATUS_OK
ReadX 11395 3901 326 326 NT_STATUS_OK
ReadX 11395 3899 652 652 NT_STATUS_OK
ReadX 11395 256 2 2 NT_STATUS_OK
ReadX 11395 258 4948 4948 NT_STATUS_OK
Close 11395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11413 NT_STATUS_OK
WriteX 11413 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11413 258 NT_STATUS_OK
WriteX 11413 0 65536 65536 NT_STATUS_OK
WriteX 11413 65536 65536 65536 NT_STATUS_OK
WriteX 11413 131072 65536 65536 NT_STATUS_OK
WriteX 11413 196608 65536 65536 NT_STATUS_OK
WriteX 11413 262144 65536 65536 NT_STATUS_OK
WriteX 11413 327680 65536 65536 NT_STATUS_OK
WriteX 11413 393216 65536 65536 NT_STATUS_OK
WriteX 11413 458752 65536 65536 NT_STATUS_OK
WriteX 11413 524288 65536 65536 NT_STATUS_OK
WriteX 11413 589824 35257 35257 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11415 NT_STATUS_OK
Close 11415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11418 NT_STATUS_OK
WriteX 11418 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11418 258 NT_STATUS_OK
WriteX 11418 0 65536 65536 NT_STATUS_OK
WriteX 11418 65536 65536 65536 NT_STATUS_OK
WriteX 11418 131072 65536 65536 NT_STATUS_OK
WriteX 11418 196608 65536 65536 NT_STATUS_OK
WriteX 11418 262144 65536 65536 NT_STATUS_OK
WriteX 11418 327680 65536 65536 NT_STATUS_OK
WriteX 11418 393216 65536 65536 NT_STATUS_OK
WriteX 11418 458752 65536 65536 NT_STATUS_OK
WriteX 11418 524288 65536 65536 NT_STATUS_OK
WriteX 11418 589824 57598 57598 NT_STATUS_OK
Close 11418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11420 NT_STATUS_OK
WriteX 11420 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 258 NT_STATUS_OK
WriteX 11420 0 12543 12543 NT_STATUS_OK
Flush 11420 NT_STATUS_OK
Close 11420 NT_STATUS_OK
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11426 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 1005 NT_STATUS_OK
ReadX 11426 1938 24 24 NT_STATUS_OK
ReadX 11426 1920 276 276 NT_STATUS_OK
ReadX 11426 1918 14 14 NT_STATUS_OK
ReadX 11426 1918 7 7 NT_STATUS_OK
ReadX 11426 1919 12 12 NT_STATUS_OK
ReadX 11426 1919 8 8 NT_STATUS_OK
ReadX 11426 1917 15 15 NT_STATUS_OK
ReadX 11426 0 16 16 NT_STATUS_OK
ReadX 11426 16 2048 2048 NT_STATUS_OK
ReadX 11426 2064 2048 2048 NT_STATUS_OK
ReadX 11426 257 2048 2048 NT_STATUS_OK
ReadX 11426 385 2048 2048 NT_STATUS_OK
ReadX 11426 513 2048 2048 NT_STATUS_OK
ReadX 11426 641 2048 2048 NT_STATUS_OK
ReadX 11426 769 2048 2048 NT_STATUS_OK
ReadX 11426 897 2048 2048 NT_STATUS_OK
ReadX 11426 1025 2048 2048 NT_STATUS_OK
ReadX 11426 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11431 NT_STATUS_OK
WriteX 11431 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11431 258 NT_STATUS_OK
WriteX 11431 0 11588 11588 NT_STATUS_OK
Flush 11431 NT_STATUS_OK
Close 11431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
Close 11426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11436 NT_STATUS_OK
WriteX 11436 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11436 258 NT_STATUS_OK
WriteX 11436 0 11615 11615 NT_STATUS_OK
Flush 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11440 NT_STATUS_OK
ReadX 11440 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11442 NT_STATUS_OK
Close 11442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11445 NT_STATUS_OK
WriteX 11445 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11445 258 NT_STATUS_OK
WriteX 11445 0 65536 65536 NT_STATUS_OK
WriteX 11445 65536 16050 16050 NT_STATUS_OK
Close 11445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11425 1939 64 64 NT_STATUS_OK
ReadX 11425 128 248 248 NT_STATUS_OK
ReadX 11425 128 568 568 NT_STATUS_OK
ReadX 11425 3872 1536 1536 NT_STATUS_OK
ReadX 11425 3456 2560 2560 NT_STATUS_OK
ReadX 11425 3136 512 512 NT_STATUS_OK
ReadX 11425 2880 4096 4096 NT_STATUS_OK
ReadX 11425 3264 3072 3072 NT_STATUS_OK
ReadX 11425 320 4096 4096 NT_STATUS_OK
ReadX 11425 1024 4096 4096 NT_STATUS_OK
ReadX 11425 3616 4096 4096 NT_STATUS_OK
ReadX 11425 1939 64 64 NT_STATUS_OK
ReadX 11425 128 248 248 NT_STATUS_OK
ReadX 11425 128 608 608 NT_STATUS_OK
ReadX 11425 2858 1024 1024 NT_STATUS_OK
ReadX 11425 2810 4096 4096 NT_STATUS_OK
ReadX 11425 2826 4096 4096 NT_STATUS_OK
ReadX 11425 2580 2048 2048 NT_STATUS_OK
ReadX 11425 2800 2560 2560 NT_STATUS_OK
ReadX 11425 2100 4096 4096 NT_STATUS_OK
ReadX 11425 2084 4096 4096 NT_STATUS_OK
ReadX 11425 868 4096 4096 NT_STATUS_OK
ReadX 11425 2324 4096 4096 NT_STATUS_OK
ReadX 11425 884 4096 4096 NT_STATUS_OK
ReadX 11425 2604 1024 1024 NT_STATUS_OK
ReadX 11425 580 4096 4096 NT_STATUS_OK
ReadX 11425 596 4096 4096 NT_STATUS_OK
ReadX 11425 2752 4096 4096 NT_STATUS_OK
ReadX 11425 2842 1024 1024 NT_STATUS_OK
ReadX 11425 660 4096 4096 NT_STATUS_OK
ReadX 11425 2720 4096 4096 NT_STATUS_OK
ReadX 11425 2736 4096 4096 NT_STATUS_OK
ReadX 11425 628 4096 4096 NT_STATUS_OK
ReadX 11425 2704 4096 4096 NT_STATUS_OK
ReadX 11425 1556 4096 4096 NT_STATUS_OK
ReadX 11425 576 4096 4096 NT_STATUS_OK
ReadX 11425 3168 1536 1536 NT_STATUS_OK
ReadX 11425 832 4096 4096 NT_STATUS_OK
ReadX 11425 1088 4096 4096 NT_STATUS_OK
ReadX 11425 1344 4096 4096 NT_STATUS_OK
ReadX 11425 1600 4096 4096 NT_STATUS_OK
ReadX 11425 1856 4096 4096 NT_STATUS_OK
ReadX 11425 2112 4096 4096 NT_STATUS_OK
ReadX 11425 1892 4096 4096 NT_STATUS_OK
ReadX 11425 820 4096 4096 NT_STATUS_OK
ReadX 11425 788 4096 4096 NT_STATUS_OK
ReadX 11425 1604 4096 4096 NT_STATUS_OK
ReadX 11425 3648 4096 4096 NT_STATUS_OK
ReadX 11425 2608 4096 4096 NT_STATUS_OK
ReadX 11425 548 4096 4096 NT_STATUS_OK
ReadX 11425 740 4096 4096 NT_STATUS_OK
ReadX 11425 1344 4096 4096 NT_STATUS_OK
ReadX 11425 3392 4096 4096 NT_STATUS_OK
ReadX 11425 3904 4096 4096 NT_STATUS_OK
ReadX 11425 644 4096 4096 NT_STATUS_OK
ReadX 11425 676 4096 4096 NT_STATUS_OK
ReadX 11425 2688 4096 4096 NT_STATUS_OK
ReadX 11425 320 4096 4096 NT_STATUS_OK
ReadX 11425 900 4096 4096 NT_STATUS_OK
ReadX 11425 1908 4096 4096 NT_STATUS_OK
ReadX 11425 852 4096 4096 NT_STATUS_OK
ReadX 11425 724 4096 4096 NT_STATUS_OK
ReadX 11425 2292 4096 4096 NT_STATUS_OK
ReadX 11425 612 4096 4096 NT_STATUS_OK
ReadX 11425 388 4096 4096 NT_STATUS_OK
ReadX 11425 2368 4096 4096 NT_STATUS_OK
ReadX 11425 2624 4096 4096 NT_STATUS_OK
ReadX 11425 500 4096 4096 NT_STATUS_OK
ReadX 11425 356 4096 4096 NT_STATUS_OK
ReadX 11425 1024 4096 4096 NT_STATUS_OK
ReadX 11425 576 4096 4096 NT_STATUS_OK
ReadX 11425 340 4096 4096 NT_STATUS_OK
ReadX 11425 420 4096 4096 NT_STATUS_OK
ReadX 11425 1600 4096 4096 NT_STATUS_OK
ReadX 11425 404 4096 4096 NT_STATUS_OK
ReadX 11425 1428 4096 4096 NT_STATUS_OK
ReadX 11425 2656 4096 4096 NT_STATUS_OK
ReadX 11425 2624 4096 4096 NT_STATUS_OK
ReadX 11425 452 4096 4096 NT_STATUS_OK
ReadX 11425 692 4096 4096 NT_STATUS_OK
ReadX 11425 564 4096 4096 NT_STATUS_OK
ReadX 11425 372 4096 4096 NT_STATUS_OK
ReadX 11425 468 4096 4096 NT_STATUS_OK
ReadX 11425 484 4096 4096 NT_STATUS_OK
ReadX 11425 1088 4096 4096 NT_STATUS_OK
ReadX 11425 1924 4096 4096 NT_STATUS_OK
ReadX 11425 2768 4096 4096 NT_STATUS_OK
ReadX 11425 832 4096 4096 NT_STATUS_OK
ReadX 11425 836 4096 4096 NT_STATUS_OK
ReadX 11425 1856 4096 4096 NT_STATUS_OK
ReadX 11425 2640 4096 4096 NT_STATUS_OK
ReadX 11425 436 4096 4096 NT_STATUS_OK
ReadX 11425 1828 4096 4096 NT_STATUS_OK
ReadX 11425 804 4096 4096 NT_STATUS_OK
ReadX 11425 1860 4096 4096 NT_STATUS_OK
ReadX 11425 1812 4096 4096 NT_STATUS_OK
ReadX 11425 756 4096 4096 NT_STATUS_OK
ReadX 11425 1636 4096 4096 NT_STATUS_OK
ReadX 11425 772 4096 4096 NT_STATUS_OK
ReadX 11425 2036 4096 4096 NT_STATUS_OK
ReadX 11425 1220 4096 4096 NT_STATUS_OK
ReadX 11425 1652 4096 4096 NT_STATUS_OK
ReadX 11425 2588 4096 4096 NT_STATUS_OK
ReadX 11425 916 4096 4096 NT_STATUS_OK
ReadX 11425 260 4096 4096 NT_STATUS_OK
ReadX 11425 932 4096 4096 NT_STATUS_OK
ReadX 11425 2624 4096 4096 NT_STATUS_OK
ReadX 11425 308 4096 4096 NT_STATUS_OK
ReadX 11425 292 4096 4096 NT_STATUS_OK
ReadX 11425 1140 4096 4096 NT_STATUS_OK
ReadX 11425 276 4096 4096 NT_STATUS_OK
ReadX 11425 2020 4096 4096 NT_STATUS_OK
ReadX 11425 2880 4096 4096 NT_STATUS_OK
ReadX 11425 516 4096 4096 NT_STATUS_OK
ReadX 11425 1844 4096 4096 NT_STATUS_OK
ReadX 11425 1124 4096 4096 NT_STATUS_OK
ReadX 11425 3136 4096 4096 NT_STATUS_OK
ReadX 11425 324 4096 4096 NT_STATUS_OK
ReadX 11425 1156 4096 4096 NT_STATUS_OK
ReadX 11425 1172 4096 4096 NT_STATUS_OK
ReadX 11425 2112 4096 4096 NT_STATUS_OK
ReadX 11425 2368 4096 4096 NT_STATUS_OK
ReadX 11425 964 4096 4096 NT_STATUS_OK
ReadX 11425 980 4096 4096 NT_STATUS_OK
ReadX 11425 1012 4096 4096 NT_STATUS_OK
ReadX 11425 532 4096 4096 NT_STATUS_OK
ReadX 11425 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11425 1620 4096 4096 NT_STATUS_OK
ReadX 11425 1604 4096 4096 NT_STATUS_OK
ReadX 11425 2116 4096 4096 NT_STATUS_OK
ReadX 11425 2132 4096 4096 NT_STATUS_OK
ReadX 11425 2148 4096 4096 NT_STATUS_OK
ReadX 11425 2276 4096 4096 NT_STATUS_OK
ReadX 11425 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11447 NT_STATUS_OK
Close 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11450 NT_STATUS_OK
QUERY_FILE_INFORMATION 11405 1004 NT_STATUS_OK
Close 11405 NT_STATUS_OK
WriteX 11450 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11450 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 1004 NT_STATUS_OK
Close 11407 NT_STATUS_OK
WriteX 11450 0 65536 65536 NT_STATUS_OK
WriteX 11450 65536 64850 64850 NT_STATUS_OK
Close 11450 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11452 NT_STATUS_OK
WriteX 11452 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11452 258 NT_STATUS_OK
ReadX 11425 2068 4096 4096 NT_STATUS_OK
ReadX 11425 1588 4096 4096 NT_STATUS_OK
ReadX 11425 1572 4096 4096 NT_STATUS_OK
WriteX 11452 0 18630 18630 NT_STATUS_OK
Flush 11452 NT_STATUS_OK
Close 11452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11454 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11425 612 4096 4096 NT_STATUS_OK
ReadX 11425 564 4096 4096 NT_STATUS_OK
ReadX 11425 1876 4096 4096 NT_STATUS_OK
ReadX 11425 628 4096 4096 NT_STATUS_OK
ReadX 11425 740 4096 4096 NT_STATUS_OK
ReadX 11425 724 4096 4096 NT_STATUS_OK
ReadX 11425 644 4096 4096 NT_STATUS_OK
ReadX 11425 2324 4096 4096 NT_STATUS_OK
ReadX 11425 660 4096 4096 NT_STATUS_OK
ReadX 11425 852 4096 4096 NT_STATUS_OK
ReadX 11425 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11425 2368 4096 4096 NT_STATUS_OK
ReadX 11425 1024 4096 4096 NT_STATUS_OK
ReadX 11425 320 4096 4096 NT_STATUS_OK
ReadX 11425 580 4096 4096 NT_STATUS_OK
ReadX 11425 3136 512 512 NT_STATUS_OK
ReadX 11425 2880 4096 4096 NT_STATUS_OK
Close 11425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 61440 4096 4096 NT_STATUS_OK
ReadX 11457 126976 4096 4096 NT_STATUS_OK
WriteX 11457 0 65536 65536 NT_STATUS_OK
WriteX 11457 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 61440 4096 4096 NT_STATUS_OK
ReadX 11458 126976 4096 4096 NT_STATUS_OK
ReadX 11458 192512 4096 4096 NT_STATUS_OK
ReadX 11458 258048 4096 4096 NT_STATUS_OK
WriteX 11458 0 65536 65536 NT_STATUS_OK
WriteX 11458 65536 65536 65536 NT_STATUS_OK
WriteX 11458 131072 65536 65536 NT_STATUS_OK
WriteX 11458 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11459 NT_STATUS_OK
ReadX 11459 61440 4096 4096 NT_STATUS_OK
ReadX 11459 126976 4096 4096 NT_STATUS_OK
ReadX 11459 192512 4096 4096 NT_STATUS_OK
ReadX 11459 258048 4096 4096 NT_STATUS_OK
ReadX 11459 323584 4096 4096 NT_STATUS_OK
ReadX 11459 389120 4096 4096 NT_STATUS_OK
ReadX 11459 454656 4096 4096 NT_STATUS_OK
ReadX 11459 520192 4096 4096 NT_STATUS_OK
WriteX 11459 0 65536 65536 NT_STATUS_OK
WriteX 11459 65536 65536 65536 NT_STATUS_OK
WriteX 11459 131072 65536 65536 NT_STATUS_OK
WriteX 11459 196608 65536 65536 NT_STATUS_OK
WriteX 11459 262144 65536 65536 NT_STATUS_OK
WriteX 11459 327680 65536 65536 NT_STATUS_OK
WriteX 11459 393216 65536 65536 NT_STATUS_OK
WriteX 11459 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11460 NT_STATUS_OK
ReadX 11460 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11461 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11462 NT_STATUS_OK
WriteX 11462 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11462 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11460 0 8192 8192 NT_STATUS_OK
Flush 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11460 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11460 0 8192 8192 NT_STATUS_OK
Flush 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11460 0 8192 8192 NT_STATUS_OK
Flush 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11460 0 8192 8192 NT_STATUS_OK
Flush 11460 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Close 11457 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Close 11459 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11467 NT_STATUS_OK
WriteX 11467 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11467 258 NT_STATUS_OK
WriteX 11467 0 62591 62591 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 10845 10845 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11477 NT_STATUS_OK
WriteX 11477 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11477 258 NT_STATUS_OK
WriteX 11477 0 30118 30118 NT_STATUS_OK
Close 11477 NT_STATUS_OK
WriteX 11460 0 4096 4096 NT_STATUS_OK
WriteX 11462 0 64 64 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11460 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11479 NT_STATUS_OK
ReadX 11479 0 61440 61440 NT_STATUS_OK
ReadX 11479 61440 4096 4096 NT_STATUS_OK
ReadX 11479 65536 61440 61440 NT_STATUS_OK
ReadX 11479 126976 4096 4096 NT_STATUS_OK
ReadX 11479 131072 61440 61440 NT_STATUS_OK
ReadX 11479 192512 4096 4096 NT_STATUS_OK
ReadX 11479 196608 61440 61440 NT_STATUS_OK
ReadX 11479 258048 4096 4096 NT_STATUS_OK
ReadX 11479 262144 61440 61440 NT_STATUS_OK
ReadX 11479 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 61440 61440 NT_STATUS_OK
ReadX 11480 61440 4096 4096 NT_STATUS_OK
ReadX 11480 65536 61440 61440 NT_STATUS_OK
ReadX 11480 126976 4096 4096 NT_STATUS_OK
ReadX 11480 131072 61440 61440 NT_STATUS_OK
ReadX 11480 192512 4096 4096 NT_STATUS_OK
ReadX 11480 196608 61440 61440 NT_STATUS_OK
ReadX 11480 258048 4096 4096 NT_STATUS_OK
ReadX 11480 262144 61440 61440 NT_STATUS_OK
ReadX 11480 323584 4096 4096 NT_STATUS_OK
ReadX 11480 327680 61440 61440 NT_STATUS_OK
ReadX 11480 389120 4096 4096 NT_STATUS_OK
ReadX 11480 393216 61440 61440 NT_STATUS_OK
ReadX 11480 454656 4096 4096 NT_STATUS_OK
ReadX 11480 458752 61440 61440 NT_STATUS_OK
ReadX 11480 520192 4096 4096 NT_STATUS_OK
ReadX 11480 524288 61440 61440 NT_STATUS_OK
ReadX 11480 585728 4096 4096 NT_STATUS_OK
ReadX 11480 589824 61440 61440 NT_STATUS_OK
ReadX 11480 651264 4096 4096 NT_STATUS_OK
ReadX 11480 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 61440 61440 NT_STATUS_OK
ReadX 11481 61440 4096 4096 NT_STATUS_OK
ReadX 11481 65536 61440 61440 NT_STATUS_OK
ReadX 11481 126976 4096 4096 NT_STATUS_OK
ReadX 11481 131072 61440 61440 NT_STATUS_OK
ReadX 11481 192512 4096 4096 NT_STATUS_OK
ReadX 11481 196608 61440 61440 NT_STATUS_OK
ReadX 11481 258048 4096 4096 NT_STATUS_OK
ReadX 11481 262144 61440 61440 NT_STATUS_OK
ReadX 11481 323584 4096 4096 NT_STATUS_OK
ReadX 11481 327680 61440 61440 NT_STATUS_OK
ReadX 11481 389120 4096 4096 NT_STATUS_OK
ReadX 11481 393216 61440 61440 NT_STATUS_OK
ReadX 11481 454656 4096 4096 NT_STATUS_OK
ReadX 11481 458752 61440 61440 NT_STATUS_OK
ReadX 11481 520192 4096 4096 NT_STATUS_OK
ReadX 11481 524288 61440 61440 NT_STATUS_OK
ReadX 11481 585728 4096 4096 NT_STATUS_OK
ReadX 11481 589824 61440 61440 NT_STATUS_OK
ReadX 11481 651264 4096 4096 NT_STATUS_OK
ReadX 11481 655360 61440 61440 NT_STATUS_OK
ReadX 11481 716800 4096 4096 NT_STATUS_OK
ReadX 11481 720896 61440 61440 NT_STATUS_OK
ReadX 11481 782336 4096 4096 NT_STATUS_OK
ReadX 11481 786432 61440 61440 NT_STATUS_OK
ReadX 11481 847872 4096 4096 NT_STATUS_OK
ReadX 11481 851968 61440 61440 NT_STATUS_OK
ReadX 11481 913408 4096 4096 NT_STATUS_OK
ReadX 11481 917504 61440 61440 NT_STATUS_OK
ReadX 11481 978944 4096 4096 NT_STATUS_OK
ReadX 11481 983040 61440 61440 NT_STATUS_OK
ReadX 11481 1044480 4096 4096 NT_STATUS_OK
ReadX 11481 1048576 61440 61440 NT_STATUS_OK
ReadX 11481 1110016 4096 4096 NT_STATUS_OK
ReadX 11481 1114112 61440 61440 NT_STATUS_OK
ReadX 11481 1175552 4096 4096 NT_STATUS_OK
ReadX 11481 1179648 61440 61440 NT_STATUS_OK
ReadX 11481 1241088 4096 4096 NT_STATUS_OK
ReadX 11481 1245184 61440 61440 NT_STATUS_OK
ReadX 11481 1306624 4096 4096 NT_STATUS_OK
ReadX 11481 1310720 61440 61440 NT_STATUS_OK
ReadX 11481 1372160 4096 4096 NT_STATUS_OK
ReadX 11481 1376256 61440 61440 NT_STATUS_OK
ReadX 11481 1437696 4096 4096 NT_STATUS_OK
ReadX 11481 1441792 61440 61440 NT_STATUS_OK
ReadX 11481 1503232 4096 4096 NT_STATUS_OK
ReadX 11481 1507328 61440 61440 NT_STATUS_OK
ReadX 11481 1568768 4096 4096 NT_STATUS_OK
ReadX 11481 1572864 61440 61440 NT_STATUS_OK
ReadX 11481 1634304 4096 4096 NT_STATUS_OK
ReadX 11481 1638400 61440 61440 NT_STATUS_OK
ReadX 11481 1699840 4096 4096 NT_STATUS_OK
ReadX 11481 1703936 61440 61440 NT_STATUS_OK
ReadX 11481 1765376 4096 4096 NT_STATUS_OK
ReadX 11481 1769472 61440 61440 NT_STATUS_OK
ReadX 11481 1830912 4096 4096 NT_STATUS_OK
ReadX 11481 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11479 NT_STATUS_OK
Close 11480 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
ReadX 11486 4096 4096 4096 NT_STATUS_OK
ReadX 11486 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11487 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11490 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11490 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 8192 8192 NT_STATUS_OK
ReadX 11494 8192 8192 8192 NT_STATUS_OK
ReadX 11494 16384 8192 8192 NT_STATUS_OK
ReadX 11494 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11494 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11499 NT_STATUS_OK
WriteX 11499 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11499 258 NT_STATUS_OK
WriteX 11499 0 10438 10438 NT_STATUS_OK
Close 11499 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11503 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11504 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11505 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
ReadX 11508 4096 4096 4096 NT_STATUS_OK
ReadX 11508 8192 4096 4096 NT_STATUS_OK
ReadX 11508 12288 8192 8192 NT_STATUS_OK
ReadX 11508 20480 8192 8192 NT_STATUS_OK
ReadX 11508 28672 8192 8192 NT_STATUS_OK
ReadX 11508 36864 8192 8192 NT_STATUS_OK
ReadX 11508 45056 8192 8192 NT_STATUS_OK
ReadX 11508 53248 8192 8192 NT_STATUS_OK
ReadX 11508 61440 8192 8192 NT_STATUS_OK
ReadX 11508 69632 8192 8192 NT_STATUS_OK
ReadX 11508 77824 8192 8192 NT_STATUS_OK
ReadX 11508 86016 8192 8192 NT_STATUS_OK
ReadX 11508 94208 8192 8192 NT_STATUS_OK
ReadX 11508 102400 8192 8192 NT_STATUS_OK
ReadX 11508 110592 8192 8192 NT_STATUS_OK
ReadX 11508 118784 8192 8192 NT_STATUS_OK
ReadX 11508 126976 8192 8192 NT_STATUS_OK
ReadX 11508 135168 8192 8192 NT_STATUS_OK
ReadX 11508 143360 8192 8192 NT_STATUS_OK
ReadX 11508 151552 8192 8192 NT_STATUS_OK
ReadX 11508 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11510 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11513 NT_STATUS_OK
WriteX 11513 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11513 258 NT_STATUS_OK
WriteX 11513 0 28489 28489 NT_STATUS_OK
Close 11513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11514 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11516 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11516 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11519 NT_STATUS_OK
ReadX 11519 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 8192 8192 NT_STATUS_OK
ReadX 11520 8192 8192 8192 NT_STATUS_OK
ReadX 11520 16384 8192 8192 NT_STATUS_OK
ReadX 11520 24576 8192 8192 NT_STATUS_OK
ReadX 11520 32768 16384 16384 NT_STATUS_OK
ReadX 11520 49152 8192 8192 NT_STATUS_OK
ReadX 11520 57344 8192 8192 NT_STATUS_OK
ReadX 11520 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11522 NT_STATUS_OK
Close 11522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11519 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11525 NT_STATUS_OK
WriteX 11525 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 258 NT_STATUS_OK
WriteX 11525 0 29253 29253 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11526 NT_STATUS_OK
Close 11526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11527 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11532 NT_STATUS_OK
WriteX 11532 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
WriteX 11532 0 30183 30183 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11535 NT_STATUS_OK
WriteX 11535 0 510 510 NT_STATUS_OK
WriteX 11535 510 512 512 NT_STATUS_OK
WriteX 11535 1022 510 510 NT_STATUS_OK
WriteX 11535 1532 510 510 NT_STATUS_OK
WriteX 11535 2042 168 168 NT_STATUS_OK
Close 11535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11536 NT_STATUS_OK
Close 11536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 61440 4096 4096 NT_STATUS_OK
ReadX 11539 126976 4096 4096 NT_STATUS_OK
WriteX 11539 0 65536 65536 NT_STATUS_OK
WriteX 11539 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 61440 4096 4096 NT_STATUS_OK
ReadX 11540 126976 4096 4096 NT_STATUS_OK
ReadX 11540 192512 4096 4096 NT_STATUS_OK
ReadX 11540 258048 4096 4096 NT_STATUS_OK
WriteX 11540 0 65536 65536 NT_STATUS_OK
WriteX 11540 65536 65536 65536 NT_STATUS_OK
WriteX 11540 131072 65536 65536 NT_STATUS_OK
WriteX 11540 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 61440 4096 4096 NT_STATUS_OK
ReadX 11541 126976 4096 4096 NT_STATUS_OK
ReadX 11541 192512 4096 4096 NT_STATUS_OK
ReadX 11541 258048 4096 4096 NT_STATUS_OK
ReadX 11541 323584 4096 4096 NT_STATUS_OK
ReadX 11541 389120 4096 4096 NT_STATUS_OK
ReadX 11541 454656 4096 4096 NT_STATUS_OK
ReadX 11541 520192 4096 4096 NT_STATUS_OK
WriteX 11541 0 65536 65536 NT_STATUS_OK
WriteX 11541 65536 65536 65536 NT_STATUS_OK
WriteX 11541 131072 65536 65536 NT_STATUS_OK
WriteX 11541 196608 65536 65536 NT_STATUS_OK
WriteX 11541 262144 65536 65536 NT_STATUS_OK
WriteX 11541 327680 65536 65536 NT_STATUS_OK
WriteX 11541 393216 65536 65536 NT_STATUS_OK
WriteX 11541 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11542 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11538 NT_STATUS_OK
Close 11539 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11548 NT_STATUS_OK
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11551 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11560 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11591 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11596 NT_STATUS_OK
Close 11596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11610 NT_STATUS_OK
WriteX 11610 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11610 0 65536 65536 NT_STATUS_OK
WriteX 11610 65536 65536 65536 NT_STATUS_OK
WriteX 11610 131072 65536 65536 NT_STATUS_OK
WriteX 11610 196608 65536 65536 NT_STATUS_OK
WriteX 11610 262144 26634 26634 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11615 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
Close 11617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 4096 4096 NT_STATUS_OK
ReadX 11618 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11632 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11637 NT_STATUS_OK
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11646 NT_STATUS_OK
Close 11646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11651 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11656 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11666 NT_STATUS_OK
Close 11666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11675 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11680 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11683 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
Close 11698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11709 NT_STATUS_OK
Close 11709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11742 0 4096 4096 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
ReadX 11744 4096 4096 4096 NT_STATUS_OK
ReadX 11744 8192 4096 4096 NT_STATUS_OK
ReadX 11744 12288 4096 4096 NT_STATUS_OK
ReadX 11744 16384 4096 4096 NT_STATUS_OK
ReadX 11744 20480 4096 4096 NT_STATUS_OK
ReadX 11744 24576 4096 4096 NT_STATUS_OK
ReadX 11744 28672 4096 4096 NT_STATUS_OK
ReadX 11744 32768 4096 4096 NT_STATUS_OK
ReadX 11744 36864 4096 4096 NT_STATUS_OK
ReadX 11744 40960 4096 4096 NT_STATUS_OK
ReadX 11744 45056 4096 4096 NT_STATUS_OK
ReadX 11744 49152 4096 4096 NT_STATUS_OK
ReadX 11744 53248 4096 4096 NT_STATUS_OK
ReadX 11744 57344 4096 4096 NT_STATUS_OK
ReadX 11744 61440 4096 4096 NT_STATUS_OK
ReadX 11744 65536 4096 4096 NT_STATUS_OK
ReadX 11744 69632 4096 4096 NT_STATUS_OK
ReadX 11744 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11744 1004 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
Close 11744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11745 NT_STATUS_OK
SET_FILE_INFORMATION 11745 1004 NT_STATUS_OK
Close 11745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11750 NT_STATUS_OK
WriteX 11750 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 258 NT_STATUS_OK
WriteX 11750 0 65536 65536 NT_STATUS_OK
WriteX 11750 65536 19979 19979 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 1004 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
SET_FILE_INFORMATION 11751 1004 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
Close 11752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
Close 11754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11756 1004 NT_STATUS_OK
WriteX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11757 NT_STATUS_OK
Close 11757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11759 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11762 NT_STATUS_OK
WriteX 11762 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11762 258 NT_STATUS_OK
WriteX 11762 0 65536 65536 NT_STATUS_OK
WriteX 11762 65536 17654 17654 NT_STATUS_OK
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
Flush 11763 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
Flush 11763 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 1004 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
Flush 11763 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
Flush 11763 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
Flush 11763 NT_STATUS_OK
SET_FILE_INFORMATION 11763 1004 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
Flush 11763 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11764 NT_STATUS_OK
SET_FILE_INFORMATION 11764 1004 NT_STATUS_OK
Close 11764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
ReadX 11768 4096 4096 4096 NT_STATUS_OK
ReadX 11768 8192 4096 4096 NT_STATUS_OK
ReadX 11768 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11768 16384 4096 4096 NT_STATUS_OK
ReadX 11768 20480 4096 4096 NT_STATUS_OK
ReadX 11768 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 4096 4096 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 4096 4096 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11771 1004 NT_STATUS_OK
WriteX 11771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11772 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11774 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11777 NT_STATUS_OK
WriteX 11777 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
WriteX 11777 0 65536 65536 NT_STATUS_OK
WriteX 11777 65536 19490 19490 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
QUERY_FILE_INFORMATION 11778 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
SET_FILE_INFORMATION 11778 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11779 NT_STATUS_OK
SET_FILE_INFORMATION 11779 1004 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11783 0 4096 4096 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
ReadX 11785 4096 4096 4096 NT_STATUS_OK
ReadX 11785 8192 4096 4096 NT_STATUS_OK
ReadX 11785 12288 4096 4096 NT_STATUS_OK
ReadX 11785 16384 4096 4096 NT_STATUS_OK
ReadX 11785 20480 4096 4096 NT_STATUS_OK
ReadX 11785 24576 4096 4096 NT_STATUS_OK
ReadX 11785 28672 4096 4096 NT_STATUS_OK
ReadX 11785 32768 4096 4096 NT_STATUS_OK
ReadX 11785 36864 4096 4096 NT_STATUS_OK
ReadX 11785 40960 4096 4096 NT_STATUS_OK
ReadX 11785 45056 4096 4096 NT_STATUS_OK
ReadX 11785 49152 4096 4096 NT_STATUS_OK
ReadX 11785 53248 4096 4096 NT_STATUS_OK
ReadX 11785 57344 4096 4096 NT_STATUS_OK
ReadX 11785 61440 4096 4096 NT_STATUS_OK
ReadX 11785 65536 4096 4096 NT_STATUS_OK
ReadX 11785 69632 4096 4096 NT_STATUS_OK
ReadX 11785 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11785 1004 NT_STATUS_OK
WriteX 11785 0 4096 4096 NT_STATUS_OK
Close 11785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11786 NT_STATUS_OK
SET_FILE_INFORMATION 11786 1004 NT_STATUS_OK
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11791 NT_STATUS_OK
WriteX 11791 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 258 NT_STATUS_OK
WriteX 11791 0 65536 65536 NT_STATUS_OK
WriteX 11791 65536 8866 8866 NT_STATUS_OK
Close 11791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11796 1004 NT_STATUS_OK
WriteX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11797 NT_STATUS_OK
Close 11797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11802 NT_STATUS_OK
WriteX 11802 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 258 NT_STATUS_OK
WriteX 11802 0 65536 65536 NT_STATUS_OK
WriteX 11802 65536 9298 9298 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
WriteX 11803 0 4096 4096 NT_STATUS_OK
Flush 11803 NT_STATUS_OK
SET_FILE_INFORMATION 11803 1004 NT_STATUS_OK
WriteX 11803 0 4096 4096 NT_STATUS_OK
Flush 11803 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11804 NT_STATUS_OK
SET_FILE_INFORMATION 11804 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 0 4096 4096 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11810 NT_STATUS_OK
ReadX 11810 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11810 4096 4096 4096 NT_STATUS_OK
ReadX 11810 8192 4096 4096 NT_STATUS_OK
ReadX 11810 12288 4096 4096 NT_STATUS_OK
ReadX 11810 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
Close 11811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
Close 11812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
WriteX 11813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11810 NT_STATUS_OK
Close 11813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11816 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11819 NT_STATUS_OK
WriteX 11819 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 258 NT_STATUS_OK
WriteX 11819 0 65536 65536 NT_STATUS_OK
WriteX 11819 65536 11540 11540 NT_STATUS_OK
Close 11819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Flush 11820 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Flush 11820 NT_STATUS_OK
Close 11820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11821 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
Close 11821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 61440 4096 4096 NT_STATUS_OK
ReadX 11825 126976 4096 4096 NT_STATUS_OK
WriteX 11825 0 65536 65536 NT_STATUS_OK
WriteX 11825 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 61440 4096 4096 NT_STATUS_OK
ReadX 11826 126976 4096 4096 NT_STATUS_OK
ReadX 11826 192512 4096 4096 NT_STATUS_OK
ReadX 11826 258048 4096 4096 NT_STATUS_OK
WriteX 11826 0 65536 65536 NT_STATUS_OK
WriteX 11826 65536 65536 65536 NT_STATUS_OK
WriteX 11826 131072 65536 65536 NT_STATUS_OK
WriteX 11826 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 61440 4096 4096 NT_STATUS_OK
ReadX 11827 126976 4096 4096 NT_STATUS_OK
ReadX 11827 192512 4096 4096 NT_STATUS_OK
ReadX 11827 258048 4096 4096 NT_STATUS_OK
ReadX 11827 323584 4096 4096 NT_STATUS_OK
ReadX 11827 389120 4096 4096 NT_STATUS_OK
ReadX 11827 454656 4096 4096 NT_STATUS_OK
ReadX 11827 520192 4096 4096 NT_STATUS_OK
WriteX 11827 0 65536 65536 NT_STATUS_OK
WriteX 11827 65536 65536 65536 NT_STATUS_OK
WriteX 11827 131072 65536 65536 NT_STATUS_OK
WriteX 11827 196608 65536 65536 NT_STATUS_OK
WriteX 11827 262144 65536 65536 NT_STATUS_OK
WriteX 11827 327680 65536 65536 NT_STATUS_OK
WriteX 11827 393216 65536 65536 NT_STATUS_OK
WriteX 11827 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
ReadX 11828 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11829 NT_STATUS_OK
WriteX 11829 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11829 258 NT_STATUS_OK
WriteX 11829 0 53 53 NT_STATUS_OK
Close 11829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11828 8192 4096 4096 NT_STATUS_OK
ReadX 11828 12288 4096 4096 NT_STATUS_OK
WriteX 11832 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11832 258 NT_STATUS_OK
ReadX 11828 16384 4096 4096 NT_STATUS_OK
ReadX 11828 20480 4096 4096 NT_STATUS_OK
WriteX 11832 0 15360 15360 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11833 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11833 1004 NT_STATUS_OK
WriteX 11833 0 4096 4096 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11834 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11836 4096 4096 4096 NT_STATUS_OK
ReadX 11836 8192 4096 4096 NT_STATUS_OK
ReadX 11836 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
ReadX 11839 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
ReadX 11840 4096 4096 4096 NT_STATUS_OK
ReadX 11840 8192 4096 4096 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11841 NT_STATUS_OK
WriteX 11841 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 258 NT_STATUS_OK
WriteX 11841 0 15360 15360 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11842 NT_STATUS_OK
ReadX 11842 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11843 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11846 NT_STATUS_OK
SET_FILE_INFORMATION 11846 1004 NT_STATUS_OK
Close 11846 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11847 NT_STATUS_OK
Close 11847 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11849 NT_STATUS_OK
ReadX 11849 0 4096 4096 NT_STATUS_OK
ReadX 11849 4096 4096 4096 NT_STATUS_OK
ReadX 11849 8192 4096 4096 NT_STATUS_OK
ReadX 11849 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11849 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11849 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11851 NT_STATUS_OK
WriteX 11851 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 258 NT_STATUS_OK
WriteX 11851 0 53 53 NT_STATUS_OK
Close 11851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11850 4096 4096 4096 NT_STATUS_OK
ReadX 11850 8192 4096 4096 NT_STATUS_OK
ReadX 11850 12288 4096 4096 NT_STATUS_OK
WriteX 11854 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11854 258 NT_STATUS_OK
WriteX 11854 0 12006 12006 NT_STATUS_OK
Close 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
Close 11855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11856 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11859 NT_STATUS_OK
Close 11859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11858 4096 4096 4096 NT_STATUS_OK
ReadX 11858 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11861 NT_STATUS_OK
WriteX 11861 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11861 258 NT_STATUS_OK
WriteX 11861 0 11991 11991 NT_STATUS_OK
Close 11861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11862 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11862 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11863 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11866 NT_STATUS_OK
SET_FILE_INFORMATION 11866 1004 NT_STATUS_OK
Close 11866 NT_STATUS_OK
WriteX 11862 0 4096 4096 NT_STATUS_OK
Close 11862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11867 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11869 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11869 1004 NT_STATUS_OK
ReadX 11869 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11869 1004 NT_STATUS_OK
WriteX 11869 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11869 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11869 1004 NT_STATUS_OK
Close 11845 NT_STATUS_OK
WriteX 11849 0 19054 19054 NT_STATUS_OK
WriteX 11869 0 12288 12288 NT_STATUS_OK
Close 11865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11872 NT_STATUS_OK
Close 11872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11849 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 61440 61440 NT_STATUS_OK
ReadX 11876 61440 4096 4096 NT_STATUS_OK
ReadX 11876 65536 61440 61440 NT_STATUS_OK
ReadX 11876 126976 4096 4096 NT_STATUS_OK
ReadX 11876 131072 61440 61440 NT_STATUS_OK
ReadX 11876 192512 4096 4096 NT_STATUS_OK
ReadX 11876 196608 61440 61440 NT_STATUS_OK
ReadX 11876 258048 4096 4096 NT_STATUS_OK
ReadX 11876 262144 61440 61440 NT_STATUS_OK
ReadX 11876 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11877 NT_STATUS_OK
ReadX 11877 0 61440 61440 NT_STATUS_OK
ReadX 11877 61440 4096 4096 NT_STATUS_OK
ReadX 11877 65536 61440 61440 NT_STATUS_OK
ReadX 11877 126976 4096 4096 NT_STATUS_OK
ReadX 11877 131072 61440 61440 NT_STATUS_OK
ReadX 11877 192512 4096 4096 NT_STATUS_OK
ReadX 11877 196608 61440 61440 NT_STATUS_OK
ReadX 11877 258048 4096 4096 NT_STATUS_OK
ReadX 11877 262144 61440 61440 NT_STATUS_OK
ReadX 11877 323584 4096 4096 NT_STATUS_OK
ReadX 11877 327680 61440 61440 NT_STATUS_OK
ReadX 11877 389120 4096 4096 NT_STATUS_OK
ReadX 11877 393216 61440 61440 NT_STATUS_OK
ReadX 11877 454656 4096 4096 NT_STATUS_OK
ReadX 11877 458752 61440 61440 NT_STATUS_OK
ReadX 11877 520192 4096 4096 NT_STATUS_OK
ReadX 11877 524288 61440 61440 NT_STATUS_OK
ReadX 11877 585728 4096 4096 NT_STATUS_OK
ReadX 11877 589824 61440 61440 NT_STATUS_OK
ReadX 11877 651264 4096 4096 NT_STATUS_OK
ReadX 11877 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 61440 61440 NT_STATUS_OK
ReadX 11878 61440 4096 4096 NT_STATUS_OK
ReadX 11878 65536 61440 61440 NT_STATUS_OK
ReadX 11878 126976 4096 4096 NT_STATUS_OK
ReadX 11878 131072 61440 61440 NT_STATUS_OK
ReadX 11878 192512 4096 4096 NT_STATUS_OK
ReadX 11878 196608 61440 61440 NT_STATUS_OK
ReadX 11878 258048 4096 4096 NT_STATUS_OK
ReadX 11878 262144 61440 61440 NT_STATUS_OK
ReadX 11878 323584 4096 4096 NT_STATUS_OK
ReadX 11878 327680 61440 61440 NT_STATUS_OK
ReadX 11878 389120 4096 4096 NT_STATUS_OK
ReadX 11878 393216 61440 61440 NT_STATUS_OK
ReadX 11878 454656 4096 4096 NT_STATUS_OK
ReadX 11878 458752 61440 61440 NT_STATUS_OK
ReadX 11878 520192 4096 4096 NT_STATUS_OK
ReadX 11878 524288 61440 61440 NT_STATUS_OK
ReadX 11878 585728 4096 4096 NT_STATUS_OK
ReadX 11878 589824 61440 61440 NT_STATUS_OK
ReadX 11878 651264 4096 4096 NT_STATUS_OK
ReadX 11878 655360 61440 61440 NT_STATUS_OK
ReadX 11878 716800 4096 4096 NT_STATUS_OK
ReadX 11878 720896 61440 61440 NT_STATUS_OK
ReadX 11878 782336 4096 4096 NT_STATUS_OK
ReadX 11878 786432 61440 61440 NT_STATUS_OK
ReadX 11878 847872 4096 4096 NT_STATUS_OK
ReadX 11878 851968 61440 61440 NT_STATUS_OK
ReadX 11878 913408 4096 4096 NT_STATUS_OK
ReadX 11878 917504 61440 61440 NT_STATUS_OK
ReadX 11878 978944 4096 4096 NT_STATUS_OK
ReadX 11878 983040 61440 61440 NT_STATUS_OK
ReadX 11878 1044480 4096 4096 NT_STATUS_OK
ReadX 11878 1048576 61440 61440 NT_STATUS_OK
ReadX 11878 1110016 4096 4096 NT_STATUS_OK
ReadX 11878 1114112 61440 61440 NT_STATUS_OK
ReadX 11878 1175552 4096 4096 NT_STATUS_OK
ReadX 11878 1179648 61440 61440 NT_STATUS_OK
ReadX 11878 1241088 4096 4096 NT_STATUS_OK
ReadX 11878 1245184 61440 61440 NT_STATUS_OK
ReadX 11878 1306624 4096 4096 NT_STATUS_OK
ReadX 11878 1310720 61440 61440 NT_STATUS_OK
ReadX 11878 1372160 4096 4096 NT_STATUS_OK
ReadX 11878 1376256 61440 61440 NT_STATUS_OK
ReadX 11878 1437696 4096 4096 NT_STATUS_OK
ReadX 11878 1441792 61440 61440 NT_STATUS_OK
ReadX 11878 1503232 4096 4096 NT_STATUS_OK
ReadX 11878 1507328 61440 61440 NT_STATUS_OK
ReadX 11878 1568768 4096 4096 NT_STATUS_OK
ReadX 11878 1572864 61440 61440 NT_STATUS_OK
ReadX 11878 1634304 4096 4096 NT_STATUS_OK
ReadX 11878 1638400 61440 61440 NT_STATUS_OK
ReadX 11878 1699840 4096 4096 NT_STATUS_OK
ReadX 11878 1703936 61440 61440 NT_STATUS_OK
ReadX 11878 1765376 4096 4096 NT_STATUS_OK
ReadX 11878 1769472 61440 61440 NT_STATUS_OK
ReadX 11878 1830912 4096 4096 NT_STATUS_OK
ReadX 11878 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11881 NT_STATUS_OK
ReadX 11881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11885 NT_STATUS_OK
QUERY_FILE_INFORMATION 11885 1004 NT_STATUS_OK
WriteX 11885 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11885 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11887 NT_STATUS_OK
WriteX 11887 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 258 NT_STATUS_OK
WriteX 11887 0 491 491 NT_STATUS_OK
Close 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11885 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11890 NT_STATUS_OK
Close 11890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11891 NT_STATUS_OK
WriteX 11891 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11891 258 NT_STATUS_OK
WriteX 11891 0 543 543 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Close 11877 NT_STATUS_OK
Close 11878 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11880 NT_STATUS_OK
Close 11881 NT_STATUS_OK
Close 11882 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11895 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11905 NT_STATUS_OK
QUERY_FILE_INFORMATION 11905 1004 NT_STATUS_OK
WriteX 11905 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11905 258 NT_STATUS_OK
WriteX 11905 0 2048 2048 NT_STATUS_OK
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11906 0 4096 4096 NT_STATUS_OK
Flush 11906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11906 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11911 NT_STATUS_OK
WriteX 11911 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11911 258 NT_STATUS_OK
WriteX 11911 0 2048 2048 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11917 NT_STATUS_OK
WriteX 11917 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11917 258 NT_STATUS_OK
WriteX 11917 0 2048 2048 NT_STATUS_OK
Close 11917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11918 NT_STATUS_OK
ReadX 11918 0 2048 2048 NT_STATUS_OK
ReadX 11896 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11912 0 4096 4096 NT_STATUS_OK
WriteX 11896 0 8192 8192 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
WriteX 11898 0 4096 4096 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11922 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11912 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11934 NT_STATUS_OK
ReadX 11934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11935 NT_STATUS_OK
ReadX 11935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11942 NT_STATUS_OK
QUERY_FILE_INFORMATION 11942 1004 NT_STATUS_OK
WriteX 11942 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11942 258 NT_STATUS_OK
WriteX 11942 0 2048 2048 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11950 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 1004 NT_STATUS_OK
WriteX 11950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
WriteX 11950 0 2048 2048 NT_STATUS_OK
Close 11950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11951 NT_STATUS_OK
ReadX 11951 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11943 0 4096 4096 NT_STATUS_OK
Flush 11943 NT_STATUS_OK
WriteX 11951 0 4096 4096 NT_STATUS_OK
Flush 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11943 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11951 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11945 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11953 NT_STATUS_OK
WriteX 11953 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Close 11953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11956 NT_STATUS_OK
WriteX 11956 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 258 NT_STATUS_OK
WriteX 11956 0 4096 4096 NT_STATUS_OK
Close 11956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11957 0 4096 4096 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Close 11928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11963 NT_STATUS_OK
Close 11963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11964 NT_STATUS_OK
WriteX 11964 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11964 258 NT_STATUS_OK
WriteX 11964 0 2048 2048 NT_STATUS_OK
Close 11964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11966 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11969 NT_STATUS_OK
ReadX 11969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11970 NT_STATUS_OK
ReadX 11970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11971 NT_STATUS_OK
ReadX 11971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11973 NT_STATUS_OK
ReadX 11973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11979 NT_STATUS_OK
QUERY_FILE_INFORMATION 11979 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Close 11973 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11969 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11981 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11985 NT_STATUS_OK
ReadX 11985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11986 NT_STATUS_OK
ReadX 11986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11987 NT_STATUS_OK
ReadX 11987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11989 NT_STATUS_OK
ReadX 11989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12001 NT_STATUS_OK
QUERY_FILE_INFORMATION 12001 1004 NT_STATUS_OK
WriteX 12001 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12001 258 NT_STATUS_OK
WriteX 12001 0 2048 2048 NT_STATUS_OK
Close 12001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12013 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 1004 NT_STATUS_OK
WriteX 12013 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 258 NT_STATUS_OK
WriteX 12013 0 2048 2048 NT_STATUS_OK
Close 12013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12021 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1004 NT_STATUS_OK
WriteX 12021 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 258 NT_STATUS_OK
WriteX 12021 0 2048 2048 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12002 0 4096 4096 NT_STATUS_OK
Flush 12002 NT_STATUS_OK
WriteX 12014 0 4096 4096 NT_STATUS_OK
Flush 12014 NT_STATUS_OK
WriteX 12022 0 4096 4096 NT_STATUS_OK
Flush 12022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12014 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12004 4096 16384 16384 NT_STATUS_OK
ReadX 11984 4096 16384 16384 NT_STATUS_OK
ReadX 12016 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12024 NT_STATUS_OK
ReadX 12024 0 2048 2048 NT_STATUS_OK
WriteX 12024 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12025 NT_STATUS_OK
QUERY_FILE_INFORMATION 12025 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 11990 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 11994 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Close 11985 NT_STATUS_OK
Close 11986 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12027 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12029 NT_STATUS_OK
QUERY_FILE_INFORMATION 12029 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12032 4096 16384 16384 NT_STATUS_OK
WriteX 12032 0 4096 4096 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
WriteX 12034 0 4096 4096 NT_STATUS_OK
WriteX 12035 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12037 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12038 NT_STATUS_OK
ReadX 12038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 8192 8192 NT_STATUS_OK
ReadX 12038 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12052 0 4096 4096 NT_STATUS_OK
ReadX 12052 4096 4096 4096 NT_STATUS_OK
ReadX 12052 8192 4096 4096 NT_STATUS_OK
WriteX 12038 0 4096 4096 NT_STATUS_OK
WriteX 12039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
ReadX 12053 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12032 0 4096 4096 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
WriteX 12034 0 4096 4096 NT_STATUS_OK
WriteX 12035 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12058 NT_STATUS_OK
QUERY_FILE_INFORMATION 12058 1004 NT_STATUS_OK
WriteX 12058 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12058 258 NT_STATUS_OK
WriteX 12058 0 2048 2048 NT_STATUS_OK
Close 12058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12059 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12061 NT_STATUS_OK
ReadX 12061 0 4096 4096 NT_STATUS_OK
ReadX 12061 4096 4096 4096 NT_STATUS_OK
WriteX 12061 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 4096 4096 NT_STATUS_OK
ReadX 12063 4096 4096 4096 NT_STATUS_OK
WriteX 12063 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Close 12033 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Close 12063 NT_STATUS_OK
Close 12052 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12066 0 4096 4096 NT_STATUS_OK
ReadX 12066 4096 4096 4096 NT_STATUS_OK
ReadX 12066 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12067 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12077 NT_STATUS_OK
ReadX 12077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12078 NT_STATUS_OK
ReadX 12078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12079 NT_STATUS_OK
ReadX 12079 0 4096 4096 NT_STATUS_OK
ReadX 12067 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12084 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 1004 NT_STATUS_OK
WriteX 12084 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 258 NT_STATUS_OK
WriteX 12084 0 2048 2048 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12085 NT_STATUS_OK
ReadX 12085 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12090 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1004 NT_STATUS_OK
WriteX 12090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 258 NT_STATUS_OK
WriteX 12090 0 2048 2048 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12074 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12092 NT_STATUS_OK
QUERY_FILE_INFORMATION 12092 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Close 12072 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12094 NT_STATUS_OK
QUERY_FILE_INFORMATION 12094 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 61440 4096 4096 NT_STATUS_OK
ReadX 12096 126976 4096 4096 NT_STATUS_OK
WriteX 12096 0 65536 65536 NT_STATUS_OK
WriteX 12096 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 61440 4096 4096 NT_STATUS_OK
ReadX 12097 126976 4096 4096 NT_STATUS_OK
ReadX 12097 192512 4096 4096 NT_STATUS_OK
ReadX 12097 258048 4096 4096 NT_STATUS_OK
WriteX 12097 0 65536 65536 NT_STATUS_OK
WriteX 12097 65536 65536 65536 NT_STATUS_OK
WriteX 12097 131072 65536 65536 NT_STATUS_OK
WriteX 12097 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 61440 4096 4096 NT_STATUS_OK
ReadX 12098 126976 4096 4096 NT_STATUS_OK
ReadX 12098 192512 4096 4096 NT_STATUS_OK
ReadX 12098 258048 4096 4096 NT_STATUS_OK
ReadX 12098 323584 4096 4096 NT_STATUS_OK
ReadX 12098 389120 4096 4096 NT_STATUS_OK
ReadX 12098 454656 4096 4096 NT_STATUS_OK
ReadX 12098 520192 4096 4096 NT_STATUS_OK
WriteX 12098 0 65536 65536 NT_STATUS_OK
WriteX 12098 65536 65536 65536 NT_STATUS_OK
WriteX 12098 131072 65536 65536 NT_STATUS_OK
WriteX 12098 196608 65536 65536 NT_STATUS_OK
WriteX 12098 262144 65536 65536 NT_STATUS_OK
WriteX 12098 327680 65536 65536 NT_STATUS_OK
WriteX 12098 393216 65536 65536 NT_STATUS_OK
WriteX 12098 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12099 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12099 8192 4096 4096 NT_STATUS_OK
ReadX 12099 12288 4096 4096 NT_STATUS_OK
ReadX 12099 16384 4096 4096 NT_STATUS_OK
ReadX 12099 20480 4096 4096 NT_STATUS_OK
ReadX 12099 24576 4096 4096 NT_STATUS_OK
ReadX 12099 28672 4096 4096 NT_STATUS_OK
ReadX 12099 32768 4096 4096 NT_STATUS_OK
ReadX 12099 36864 4096 4096 NT_STATUS_OK
ReadX 12099 40960 4096 4096 NT_STATUS_OK
ReadX 12099 45056 4096 4096 NT_STATUS_OK
ReadX 12099 49152 4096 4096 NT_STATUS_OK
ReadX 12099 53248 4096 4096 NT_STATUS_OK
ReadX 12099 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12099 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12102 NT_STATUS_OK
WriteX 12102 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12102 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12102 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12102 1004 NT_STATUS_OK
WriteX 12102 0 57088 57088 NT_STATUS_OK
WriteX 12102 0 4096 4096 NT_STATUS_OK
Flush 12102 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12103 NT_STATUS_OK
SET_FILE_INFORMATION 12103 1004 NT_STATUS_OK
Close 12103 NT_STATUS_OK
SET_FILE_INFORMATION 12102 1004 NT_STATUS_OK
WriteX 12102 0 4096 4096 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12104 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12106 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12107 NT_STATUS_OK
WriteX 12107 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12107 1004 NT_STATUS_OK
WriteX 12107 0 51456 51456 NT_STATUS_OK
WriteX 12107 0 4096 4096 NT_STATUS_OK
Flush 12107 NT_STATUS_OK
SET_FILE_INFORMATION 12107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12107 1004 NT_STATUS_OK
WriteX 12107 0 4096 4096 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12111 NT_STATUS_OK
ReadX 12111 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12111 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12116 NT_STATUS_OK
WriteX 12116 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12116 258 NT_STATUS_OK
WriteX 12116 0 53077 53077 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12117 NT_STATUS_OK
WriteX 12117 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12117 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12117 1004 NT_STATUS_OK
WriteX 12117 0 65536 65536 NT_STATUS_OK
WriteX 12117 65536 1856 1856 NT_STATUS_OK
WriteX 12117 0 4096 4096 NT_STATUS_OK
Flush 12117 NT_STATUS_OK
SET_FILE_INFORMATION 12117 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12117 1004 NT_STATUS_OK
WriteX 12117 0 4096 4096 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Close 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12126 NT_STATUS_OK
WriteX 12126 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 258 NT_STATUS_OK
WriteX 12126 0 7983 7983 NT_STATUS_OK
Close 12126 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12128 NT_STATUS_OK
Close 12128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12131 NT_STATUS_OK
WriteX 12131 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 258 NT_STATUS_OK
WriteX 12131 0 65536 65536 NT_STATUS_OK
WriteX 12131 65536 65536 65536 NT_STATUS_OK
WriteX 12131 131072 65536 65536 NT_STATUS_OK
WriteX 12131 196608 65536 65536 NT_STATUS_OK
WriteX 12131 262144 65536 65536 NT_STATUS_OK
WriteX 12131 327680 65536 65536 NT_STATUS_OK
WriteX 12131 393216 65536 65536 NT_STATUS_OK
WriteX 12131 458752 46731 46731 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12132 NT_STATUS_OK
WriteX 12132 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12121 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12132 1004 NT_STATUS_OK
WriteX 12132 0 65536 65536 NT_STATUS_OK
WriteX 12132 65536 22848 22848 NT_STATUS_OK
WriteX 12132 0 4096 4096 NT_STATUS_OK
Flush 12132 NT_STATUS_OK
SET_FILE_INFORMATION 12132 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12132 1004 NT_STATUS_OK
WriteX 12132 0 4096 4096 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12134 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12136 NT_STATUS_OK
ReadX 12136 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12136 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12137 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12137 1004 NT_STATUS_OK
ReadX 12137 8192 4096 4096 NT_STATUS_OK
ReadX 12137 12288 4096 4096 NT_STATUS_OK
ReadX 12137 16384 4096 4096 NT_STATUS_OK
ReadX 12137 20480 4096 4096 NT_STATUS_OK
ReadX 12137 24576 4096 4096 NT_STATUS_OK
ReadX 12137 28672 4096 4096 NT_STATUS_OK
ReadX 12137 32768 4096 4096 NT_STATUS_OK
ReadX 12137 36864 4096 4096 NT_STATUS_OK
ReadX 12137 40960 4096 4096 NT_STATUS_OK
ReadX 12137 45056 4096 4096 NT_STATUS_OK
ReadX 12137 49152 4096 4096 NT_STATUS_OK
ReadX 12137 53248 4096 4096 NT_STATUS_OK
ReadX 12137 57344 4096 4096 NT_STATUS_OK
ReadX 12137 61440 4096 4096 NT_STATUS_OK
ReadX 12137 65536 4096 4096 NT_STATUS_OK
ReadX 12137 69632 4096 4096 NT_STATUS_OK
ReadX 12137 73728 4096 4096 NT_STATUS_OK
ReadX 12137 77824 4096 4096 NT_STATUS_OK
ReadX 12137 81920 4096 4096 NT_STATUS_OK
ReadX 12137 86016 4096 4096 NT_STATUS_OK
ReadX 12137 90112 4096 4096 NT_STATUS_OK
ReadX 12137 94208 4096 4096 NT_STATUS_OK
ReadX 12137 98304 4096 4096 NT_STATUS_OK
ReadX 12137 102400 4096 4096 NT_STATUS_OK
ReadX 12137 106496 4096 4096 NT_STATUS_OK
ReadX 12137 110592 4096 4096 NT_STATUS_OK
ReadX 12137 114688 4096 4096 NT_STATUS_OK
ReadX 12137 118784 4096 4096 NT_STATUS_OK
ReadX 12137 122880 4096 4096 NT_STATUS_OK
ReadX 12137 126976 4096 4096 NT_STATUS_OK
ReadX 12137 131072 4096 4096 NT_STATUS_OK
ReadX 12137 135168 4096 4096 NT_STATUS_OK
ReadX 12137 139264 4096 4096 NT_STATUS_OK
ReadX 12137 143360 4096 4096 NT_STATUS_OK
ReadX 12137 147456 4096 4096 NT_STATUS_OK
ReadX 12137 151552 4096 4096 NT_STATUS_OK
ReadX 12137 155648 4096 4096 NT_STATUS_OK
ReadX 12137 159744 4096 4096 NT_STATUS_OK
ReadX 12137 163840 4096 4096 NT_STATUS_OK
ReadX 12137 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12137 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12140 NT_STATUS_OK
WriteX 12140 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
Close 12137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12141 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
WriteX 12140 0 42388 42388 NT_STATUS_OK
Close 12140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12144 NT_STATUS_OK
ReadX 12144 0 4096 4096 NT_STATUS_OK
ReadX 12144 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12145 NT_STATUS_OK
WriteX 12145 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12145 258 NT_STATUS_OK
SET_FILE_INFORMATION 12145 1004 NT_STATUS_OK
WriteX 12145 0 42652 42652 NT_STATUS_OK
Close 12145 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12147 NT_STATUS_OK
Close 12147 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12149 NT_STATUS_OK
ReadX 12149 0 4096 4096 NT_STATUS_OK
ReadX 12149 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12154 NT_STATUS_OK
WriteX 12154 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12154 258 NT_STATUS_OK
WriteX 12154 0 65536 65536 NT_STATUS_OK
WriteX 12154 65536 49 49 NT_STATUS_OK
Close 12154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 61440 61440 NT_STATUS_OK
ReadX 12155 61440 4096 4096 NT_STATUS_OK
ReadX 12155 65536 61440 61440 NT_STATUS_OK
ReadX 12155 126976 4096 4096 NT_STATUS_OK
ReadX 12155 131072 61440 61440 NT_STATUS_OK
ReadX 12155 192512 4096 4096 NT_STATUS_OK
ReadX 12155 196608 61440 61440 NT_STATUS_OK
ReadX 12155 258048 4096 4096 NT_STATUS_OK
ReadX 12155 262144 61440 61440 NT_STATUS_OK
ReadX 12155 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 61440 61440 NT_STATUS_OK
ReadX 12156 61440 4096 4096 NT_STATUS_OK
ReadX 12156 65536 61440 61440 NT_STATUS_OK
ReadX 12156 126976 4096 4096 NT_STATUS_OK
ReadX 12156 131072 61440 61440 NT_STATUS_OK
ReadX 12156 192512 4096 4096 NT_STATUS_OK
ReadX 12156 196608 61440 61440 NT_STATUS_OK
ReadX 12156 258048 4096 4096 NT_STATUS_OK
ReadX 12156 262144 61440 61440 NT_STATUS_OK
ReadX 12156 323584 4096 4096 NT_STATUS_OK
ReadX 12156 327680 61440 61440 NT_STATUS_OK
ReadX 12156 389120 4096 4096 NT_STATUS_OK
ReadX 12156 393216 61440 61440 NT_STATUS_OK
ReadX 12156 454656 4096 4096 NT_STATUS_OK
ReadX 12156 458752 61440 61440 NT_STATUS_OK
ReadX 12156 520192 4096 4096 NT_STATUS_OK
ReadX 12156 524288 61440 61440 NT_STATUS_OK
ReadX 12156 585728 4096 4096 NT_STATUS_OK
ReadX 12156 589824 61440 61440 NT_STATUS_OK
ReadX 12156 651264 4096 4096 NT_STATUS_OK
ReadX 12156 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 61440 61440 NT_STATUS_OK
ReadX 12157 61440 4096 4096 NT_STATUS_OK
ReadX 12157 65536 61440 61440 NT_STATUS_OK
ReadX 12157 126976 4096 4096 NT_STATUS_OK
ReadX 12157 131072 61440 61440 NT_STATUS_OK
ReadX 12157 192512 4096 4096 NT_STATUS_OK
ReadX 12157 196608 61440 61440 NT_STATUS_OK
ReadX 12157 258048 4096 4096 NT_STATUS_OK
ReadX 12157 262144 61440 61440 NT_STATUS_OK
ReadX 12157 323584 4096 4096 NT_STATUS_OK
ReadX 12157 327680 61440 61440 NT_STATUS_OK
ReadX 12157 389120 4096 4096 NT_STATUS_OK
ReadX 12157 393216 61440 61440 NT_STATUS_OK
ReadX 12157 454656 4096 4096 NT_STATUS_OK
ReadX 12157 458752 61440 61440 NT_STATUS_OK
ReadX 12157 520192 4096 4096 NT_STATUS_OK
ReadX 12157 524288 61440 61440 NT_STATUS_OK
ReadX 12157 585728 4096 4096 NT_STATUS_OK
ReadX 12157 589824 61440 61440 NT_STATUS_OK
ReadX 12157 651264 4096 4096 NT_STATUS_OK
ReadX 12157 655360 61440 61440 NT_STATUS_OK
ReadX 12157 716800 4096 4096 NT_STATUS_OK
ReadX 12157 720896 61440 61440 NT_STATUS_OK
ReadX 12157 782336 4096 4096 NT_STATUS_OK
ReadX 12157 786432 61440 61440 NT_STATUS_OK
ReadX 12157 847872 4096 4096 NT_STATUS_OK
ReadX 12157 851968 61440 61440 NT_STATUS_OK
ReadX 12157 913408 4096 4096 NT_STATUS_OK
ReadX 12157 917504 61440 61440 NT_STATUS_OK
ReadX 12157 978944 4096 4096 NT_STATUS_OK
ReadX 12157 983040 61440 61440 NT_STATUS_OK
ReadX 12157 1044480 4096 4096 NT_STATUS_OK
ReadX 12157 1048576 61440 61440 NT_STATUS_OK
ReadX 12157 1110016 4096 4096 NT_STATUS_OK
ReadX 12157 1114112 61440 61440 NT_STATUS_OK
ReadX 12157 1175552 4096 4096 NT_STATUS_OK
ReadX 12157 1179648 61440 61440 NT_STATUS_OK
ReadX 12157 1241088 4096 4096 NT_STATUS_OK
ReadX 12157 1245184 61440 61440 NT_STATUS_OK
ReadX 12157 1306624 4096 4096 NT_STATUS_OK
ReadX 12157 1310720 61440 61440 NT_STATUS_OK
ReadX 12157 1372160 4096 4096 NT_STATUS_OK
ReadX 12157 1376256 61440 61440 NT_STATUS_OK
ReadX 12157 1437696 4096 4096 NT_STATUS_OK
ReadX 12157 1441792 61440 61440 NT_STATUS_OK
ReadX 12157 1503232 4096 4096 NT_STATUS_OK
ReadX 12157 1507328 61440 61440 NT_STATUS_OK
ReadX 12157 1568768 4096 4096 NT_STATUS_OK
ReadX 12157 1572864 61440 61440 NT_STATUS_OK
ReadX 12157 1634304 4096 4096 NT_STATUS_OK
ReadX 12157 1638400 61440 61440 NT_STATUS_OK
ReadX 12157 1699840 4096 4096 NT_STATUS_OK
ReadX 12157 1703936 61440 61440 NT_STATUS_OK
ReadX 12157 1765376 4096 4096 NT_STATUS_OK
ReadX 12157 1769472 61440 61440 NT_STATUS_OK
ReadX 12157 1830912 4096 4096 NT_STATUS_OK
ReadX 12157 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12159 NT_STATUS_OK
QUERY_FILE_INFORMATION 12159 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12159 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12159 1005 NT_STATUS_OK
ReadX 12159 2156 24 24 NT_STATUS_OK
ReadX 12159 2139 276 276 NT_STATUS_OK
ReadX 12159 2136 14 14 NT_STATUS_OK
ReadX 12159 2136 7 7 NT_STATUS_OK
ReadX 12159 2138 12 12 NT_STATUS_OK
ReadX 12159 2137 8 8 NT_STATUS_OK
ReadX 12159 2135 15 15 NT_STATUS_OK
ReadX 12159 0 16 16 NT_STATUS_OK
ReadX 12159 16 2048 2048 NT_STATUS_OK
ReadX 12159 2064 2048 2048 NT_STATUS_OK
ReadX 12159 257 2048 2048 NT_STATUS_OK
ReadX 12159 385 2048 2048 NT_STATUS_OK
ReadX 12159 513 2048 2048 NT_STATUS_OK
ReadX 12159 641 2048 2048 NT_STATUS_OK
ReadX 12159 769 2048 2048 NT_STATUS_OK
ReadX 12159 897 2048 2048 NT_STATUS_OK
ReadX 12159 1025 2048 2048 NT_STATUS_OK
ReadX 12159 1153 2048 2048 NT_STATUS_OK
ReadX 12159 1281 2048 2048 NT_STATUS_OK
ReadX 12159 1409 2048 2048 NT_STATUS_OK
ReadX 12159 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12161 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12149 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12164 NT_STATUS_OK
WriteX 12164 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 258 NT_STATUS_OK
WriteX 12164 0 10575 10575 NT_STATUS_OK
Flush 12164 NT_STATUS_OK
Close 12164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
Close 12159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12169 NT_STATUS_OK
LockX 12169 2147483538 1 NT_STATUS_OK
UnlockX 12169 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12169 1005 NT_STATUS_OK
ReadX 12169 0 512 512 NT_STATUS_OK
ReadX 12169 512 512 512 NT_STATUS_OK
ReadX 12169 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12169 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12169 1004 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12170 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 1005 NT_STATUS_OK
ReadX 12170 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12171 NT_STATUS_OK
LockX 12171 2147483538 1 NT_STATUS_OK
UnlockX 12171 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 1005 NT_STATUS_OK
ReadX 12171 0 512 512 NT_STATUS_OK
ReadX 12171 512 512 512 NT_STATUS_OK
ReadX 12171 1024 512 512 NT_STATUS_OK
ReadX 12171 288 20 20 NT_STATUS_OK
ReadX 12171 308 2084 2084 NT_STATUS_OK
ReadX 12171 388 2084 2084 NT_STATUS_OK
ReadX 12171 388 2084 2084 NT_STATUS_OK
ReadX 12158 2157 1386 1386 NT_STATUS_OK
ReadX 12171 2472 399 399 NT_STATUS_OK
ReadX 12171 3072 1536 1536 NT_STATUS_OK
ReadX 12171 544 149 149 NT_STATUS_OK
ReadX 12171 693 485 485 NT_STATUS_OK
Close 12171 NT_STATUS_OK
ReadX 12158 2157 4096 4096 NT_STATUS_OK
ReadX 12158 6253 4096 4096 NT_STATUS_OK
ReadX 12158 10349 4096 4096 NT_STATUS_OK
ReadX 12158 14445 4096 4096 NT_STATUS_OK
ReadX 12158 18541 4096 4096 NT_STATUS_OK
ReadX 12158 22637 256 256 NT_STATUS_OK
ReadX 12158 22893 4096 4096 NT_STATUS_OK
ReadX 12158 26989 4096 4096 NT_STATUS_OK
ReadX 12158 31085 4096 4096 NT_STATUS_OK
ReadX 12158 35181 4096 4096 NT_STATUS_OK
ReadX 12158 39277 4096 4096 NT_STATUS_OK
ReadX 12158 43373 4096 4096 NT_STATUS_OK
ReadX 12158 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12158 2157 1024 1024 NT_STATUS_OK
ReadX 12158 1667 4688 4688 NT_STATUS_OK
ReadX 12158 6355 3516 3516 NT_STATUS_OK
ReadX 12158 9871 16384 16384 NT_STATUS_OK
ReadX 12158 26255 3771 3771 NT_STATUS_OK
ReadX 12158 30026 2048 2048 NT_STATUS_OK
ReadX 12158 32074 1024 1024 NT_STATUS_OK
ReadX 12158 33098 6652 6652 NT_STATUS_OK
ReadX 12158 39750 16384 16384 NT_STATUS_OK
ReadX 12158 56134 10496 10496 NT_STATUS_OK
ReadX 12158 66630 1784 1784 NT_STATUS_OK
ReadX 12158 68414 90 90 NT_STATUS_OK
ReadX 12158 68504 273 273 NT_STATUS_OK
ReadX 12158 68777 1600 1600 NT_STATUS_OK
ReadX 12158 70377 640 640 NT_STATUS_OK
ReadX 12158 71017 1280 1280 NT_STATUS_OK
ReadX 12158 72297 8464 8464 NT_STATUS_OK
ReadX 12158 80761 158 158 NT_STATUS_OK
ReadX 12158 80919 912 912 NT_STATUS_OK
ReadX 12158 81831 1980 1980 NT_STATUS_OK
ReadX 12158 83811 2256 2256 NT_STATUS_OK
ReadX 12158 86067 400 400 NT_STATUS_OK
ReadX 12158 86467 252 252 NT_STATUS_OK
ReadX 12158 86719 42 42 NT_STATUS_OK
ReadX 12158 86761 725 725 NT_STATUS_OK
ReadX 12158 2009 512 512 NT_STATUS_OK
ReadX 12158 3895 9 9 NT_STATUS_OK
ReadX 12158 3781 46 46 NT_STATUS_OK
ReadX 12158 4059 92 92 NT_STATUS_OK
ReadX 12158 3781 92 92 NT_STATUS_OK
ReadX 12158 3986 184 184 NT_STATUS_OK
ReadX 12158 3987 16384 16384 NT_STATUS_OK
ReadX 12158 3902 16384 16384 NT_STATUS_OK
ReadX 12158 3781 10240 10240 NT_STATUS_OK
ReadX 12158 3821 16384 16384 NT_STATUS_OK
ReadX 12158 3891 935 935 NT_STATUS_OK
ReadX 12158 4060 10240 10240 NT_STATUS_OK
ReadX 12158 4059 184 184 NT_STATUS_OK
ReadX 12158 256 184 184 NT_STATUS_OK
ReadX 12158 256 1026 1026 NT_STATUS_OK
ReadX 12158 3901 326 326 NT_STATUS_OK
ReadX 12158 3899 652 652 NT_STATUS_OK
ReadX 12158 256 2 2 NT_STATUS_OK
ReadX 12158 258 4948 4948 NT_STATUS_OK
Close 12158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12176 NT_STATUS_OK
WriteX 12176 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12176 258 NT_STATUS_OK
WriteX 12176 0 65536 65536 NT_STATUS_OK
WriteX 12176 65536 65536 65536 NT_STATUS_OK
WriteX 12176 131072 65536 65536 NT_STATUS_OK
WriteX 12176 196608 65536 65536 NT_STATUS_OK
WriteX 12176 262144 65536 65536 NT_STATUS_OK
WriteX 12176 327680 65536 65536 NT_STATUS_OK
WriteX 12176 393216 65536 65536 NT_STATUS_OK
WriteX 12176 458752 65536 65536 NT_STATUS_OK
WriteX 12176 524288 65536 65536 NT_STATUS_OK
WriteX 12176 589824 35257 35257 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12178 NT_STATUS_OK
Close 12178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12181 NT_STATUS_OK
WriteX 12181 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12181 258 NT_STATUS_OK
WriteX 12181 0 65536 65536 NT_STATUS_OK
WriteX 12181 65536 65536 65536 NT_STATUS_OK
WriteX 12181 131072 65536 65536 NT_STATUS_OK
WriteX 12181 196608 65536 65536 NT_STATUS_OK
WriteX 12181 262144 65536 65536 NT_STATUS_OK
WriteX 12181 327680 65536 65536 NT_STATUS_OK
WriteX 12181 393216 65536 65536 NT_STATUS_OK
WriteX 12181 458752 65536 65536 NT_STATUS_OK
WriteX 12181 524288 65536 65536 NT_STATUS_OK
WriteX 12181 589824 57598 57598 NT_STATUS_OK
Close 12181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12183 NT_STATUS_OK
WriteX 12183 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 258 NT_STATUS_OK
WriteX 12183 0 12543 12543 NT_STATUS_OK
Flush 12183 NT_STATUS_OK
Close 12183 NT_STATUS_OK
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12189 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 1005 NT_STATUS_OK
ReadX 12189 1938 24 24 NT_STATUS_OK
ReadX 12189 1920 276 276 NT_STATUS_OK
ReadX 12189 1918 14 14 NT_STATUS_OK
ReadX 12189 1918 7 7 NT_STATUS_OK
ReadX 12189 1919 12 12 NT_STATUS_OK
ReadX 12189 1919 8 8 NT_STATUS_OK
ReadX 12189 1917 15 15 NT_STATUS_OK
ReadX 12189 0 16 16 NT_STATUS_OK
ReadX 12189 16 2048 2048 NT_STATUS_OK
ReadX 12189 2064 2048 2048 NT_STATUS_OK
ReadX 12189 257 2048 2048 NT_STATUS_OK
ReadX 12189 385 2048 2048 NT_STATUS_OK
ReadX 12189 513 2048 2048 NT_STATUS_OK
ReadX 12189 641 2048 2048 NT_STATUS_OK
ReadX 12189 769 2048 2048 NT_STATUS_OK
ReadX 12189 897 2048 2048 NT_STATUS_OK
ReadX 12189 1025 2048 2048 NT_STATUS_OK
ReadX 12189 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12194 NT_STATUS_OK
WriteX 12194 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12194 258 NT_STATUS_OK
WriteX 12194 0 11588 11588 NT_STATUS_OK
Flush 12194 NT_STATUS_OK
Close 12194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
Close 12189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12199 NT_STATUS_OK
WriteX 12199 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12199 258 NT_STATUS_OK
WriteX 12199 0 11615 11615 NT_STATUS_OK
Flush 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12203 NT_STATUS_OK
ReadX 12203 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12205 NT_STATUS_OK
Close 12205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12208 NT_STATUS_OK
WriteX 12208 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12208 258 NT_STATUS_OK
WriteX 12208 0 65536 65536 NT_STATUS_OK
WriteX 12208 65536 16050 16050 NT_STATUS_OK
Close 12208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12188 1939 64 64 NT_STATUS_OK
ReadX 12188 128 248 248 NT_STATUS_OK
ReadX 12188 128 568 568 NT_STATUS_OK
ReadX 12188 3872 1536 1536 NT_STATUS_OK
ReadX 12188 3456 2560 2560 NT_STATUS_OK
ReadX 12188 3136 512 512 NT_STATUS_OK
ReadX 12188 2880 4096 4096 NT_STATUS_OK
ReadX 12188 3264 3072 3072 NT_STATUS_OK
ReadX 12188 320 4096 4096 NT_STATUS_OK
ReadX 12188 1024 4096 4096 NT_STATUS_OK
ReadX 12188 3616 4096 4096 NT_STATUS_OK
ReadX 12188 1939 64 64 NT_STATUS_OK
ReadX 12188 128 248 248 NT_STATUS_OK
ReadX 12188 128 608 608 NT_STATUS_OK
ReadX 12188 2858 1024 1024 NT_STATUS_OK
ReadX 12188 2810 4096 4096 NT_STATUS_OK
ReadX 12188 2826 4096 4096 NT_STATUS_OK
ReadX 12188 2580 2048 2048 NT_STATUS_OK
ReadX 12188 2800 2560 2560 NT_STATUS_OK
ReadX 12188 2100 4096 4096 NT_STATUS_OK
ReadX 12188 2084 4096 4096 NT_STATUS_OK
ReadX 12188 868 4096 4096 NT_STATUS_OK
ReadX 12188 2324 4096 4096 NT_STATUS_OK
ReadX 12188 884 4096 4096 NT_STATUS_OK
ReadX 12188 2604 1024 1024 NT_STATUS_OK
ReadX 12188 580 4096 4096 NT_STATUS_OK
ReadX 12188 596 4096 4096 NT_STATUS_OK
ReadX 12188 2752 4096 4096 NT_STATUS_OK
ReadX 12188 2842 1024 1024 NT_STATUS_OK
ReadX 12188 660 4096 4096 NT_STATUS_OK
ReadX 12188 2720 4096 4096 NT_STATUS_OK
ReadX 12188 2736 4096 4096 NT_STATUS_OK
ReadX 12188 628 4096 4096 NT_STATUS_OK
ReadX 12188 2704 4096 4096 NT_STATUS_OK
ReadX 12188 1556 4096 4096 NT_STATUS_OK
ReadX 12188 576 4096 4096 NT_STATUS_OK
ReadX 12188 3168 1536 1536 NT_STATUS_OK
ReadX 12188 832 4096 4096 NT_STATUS_OK
ReadX 12188 1088 4096 4096 NT_STATUS_OK
ReadX 12188 1344 4096 4096 NT_STATUS_OK
ReadX 12188 1600 4096 4096 NT_STATUS_OK
ReadX 12188 1856 4096 4096 NT_STATUS_OK
ReadX 12188 2112 4096 4096 NT_STATUS_OK
ReadX 12188 1892 4096 4096 NT_STATUS_OK
ReadX 12188 820 4096 4096 NT_STATUS_OK
ReadX 12188 788 4096 4096 NT_STATUS_OK
ReadX 12188 1604 4096 4096 NT_STATUS_OK
ReadX 12188 3648 4096 4096 NT_STATUS_OK
ReadX 12188 2608 4096 4096 NT_STATUS_OK
ReadX 12188 548 4096 4096 NT_STATUS_OK
ReadX 12188 740 4096 4096 NT_STATUS_OK
ReadX 12188 1344 4096 4096 NT_STATUS_OK
ReadX 12188 3392 4096 4096 NT_STATUS_OK
ReadX 12188 3904 4096 4096 NT_STATUS_OK
ReadX 12188 644 4096 4096 NT_STATUS_OK
ReadX 12188 676 4096 4096 NT_STATUS_OK
ReadX 12188 2688 4096 4096 NT_STATUS_OK
ReadX 12188 320 4096 4096 NT_STATUS_OK
ReadX 12188 900 4096 4096 NT_STATUS_OK
ReadX 12188 1908 4096 4096 NT_STATUS_OK
ReadX 12188 852 4096 4096 NT_STATUS_OK
ReadX 12188 724 4096 4096 NT_STATUS_OK
ReadX 12188 2292 4096 4096 NT_STATUS_OK
ReadX 12188 612 4096 4096 NT_STATUS_OK
ReadX 12188 388 4096 4096 NT_STATUS_OK
ReadX 12188 2368 4096 4096 NT_STATUS_OK
ReadX 12188 2624 4096 4096 NT_STATUS_OK
ReadX 12188 500 4096 4096 NT_STATUS_OK
ReadX 12188 356 4096 4096 NT_STATUS_OK
ReadX 12188 1024 4096 4096 NT_STATUS_OK
ReadX 12188 576 4096 4096 NT_STATUS_OK
ReadX 12188 340 4096 4096 NT_STATUS_OK
ReadX 12188 420 4096 4096 NT_STATUS_OK
ReadX 12188 1600 4096 4096 NT_STATUS_OK
ReadX 12188 404 4096 4096 NT_STATUS_OK
ReadX 12188 1428 4096 4096 NT_STATUS_OK
ReadX 12188 2656 4096 4096 NT_STATUS_OK
ReadX 12188 2624 4096 4096 NT_STATUS_OK
ReadX 12188 452 4096 4096 NT_STATUS_OK
ReadX 12188 692 4096 4096 NT_STATUS_OK
ReadX 12188 564 4096 4096 NT_STATUS_OK
ReadX 12188 372 4096 4096 NT_STATUS_OK
ReadX 12188 468 4096 4096 NT_STATUS_OK
ReadX 12188 484 4096 4096 NT_STATUS_OK
ReadX 12188 1088 4096 4096 NT_STATUS_OK
ReadX 12188 1924 4096 4096 NT_STATUS_OK
ReadX 12188 2768 4096 4096 NT_STATUS_OK
ReadX 12188 832 4096 4096 NT_STATUS_OK
ReadX 12188 836 4096 4096 NT_STATUS_OK
ReadX 12188 1856 4096 4096 NT_STATUS_OK
ReadX 12188 2640 4096 4096 NT_STATUS_OK
ReadX 12188 436 4096 4096 NT_STATUS_OK
ReadX 12188 1828 4096 4096 NT_STATUS_OK
ReadX 12188 804 4096 4096 NT_STATUS_OK
ReadX 12188 1860 4096 4096 NT_STATUS_OK
ReadX 12188 1812 4096 4096 NT_STATUS_OK
ReadX 12188 756 4096 4096 NT_STATUS_OK
ReadX 12188 1636 4096 4096 NT_STATUS_OK
ReadX 12188 772 4096 4096 NT_STATUS_OK
ReadX 12188 2036 4096 4096 NT_STATUS_OK
ReadX 12188 1220 4096 4096 NT_STATUS_OK
ReadX 12188 1652 4096 4096 NT_STATUS_OK
ReadX 12188 2588 4096 4096 NT_STATUS_OK
ReadX 12188 916 4096 4096 NT_STATUS_OK
ReadX 12188 260 4096 4096 NT_STATUS_OK
ReadX 12188 932 4096 4096 NT_STATUS_OK
ReadX 12188 2624 4096 4096 NT_STATUS_OK
ReadX 12188 308 4096 4096 NT_STATUS_OK
ReadX 12188 292 4096 4096 NT_STATUS_OK
ReadX 12188 1140 4096 4096 NT_STATUS_OK
ReadX 12188 276 4096 4096 NT_STATUS_OK
ReadX 12188 2020 4096 4096 NT_STATUS_OK
ReadX 12188 2880 4096 4096 NT_STATUS_OK
ReadX 12188 516 4096 4096 NT_STATUS_OK
ReadX 12188 1844 4096 4096 NT_STATUS_OK
ReadX 12188 1124 4096 4096 NT_STATUS_OK
ReadX 12188 3136 4096 4096 NT_STATUS_OK
ReadX 12188 324 4096 4096 NT_STATUS_OK
ReadX 12188 1156 4096 4096 NT_STATUS_OK
ReadX 12188 1172 4096 4096 NT_STATUS_OK
ReadX 12188 2112 4096 4096 NT_STATUS_OK
ReadX 12188 2368 4096 4096 NT_STATUS_OK
ReadX 12188 964 4096 4096 NT_STATUS_OK
ReadX 12188 980 4096 4096 NT_STATUS_OK
ReadX 12188 1012 4096 4096 NT_STATUS_OK
ReadX 12188 532 4096 4096 NT_STATUS_OK
ReadX 12188 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12188 1620 4096 4096 NT_STATUS_OK
ReadX 12188 1604 4096 4096 NT_STATUS_OK
ReadX 12188 2116 4096 4096 NT_STATUS_OK
ReadX 12188 2132 4096 4096 NT_STATUS_OK
ReadX 12188 2148 4096 4096 NT_STATUS_OK
ReadX 12188 2276 4096 4096 NT_STATUS_OK
ReadX 12188 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12210 NT_STATUS_OK
Close 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12213 NT_STATUS_OK
QUERY_FILE_INFORMATION 12168 1004 NT_STATUS_OK
Close 12168 NT_STATUS_OK
WriteX 12213 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12213 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 1004 NT_STATUS_OK
Close 12170 NT_STATUS_OK
WriteX 12213 0 65536 65536 NT_STATUS_OK
WriteX 12213 65536 64850 64850 NT_STATUS_OK
Close 12213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12215 NT_STATUS_OK
WriteX 12215 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12215 258 NT_STATUS_OK
ReadX 12188 2068 4096 4096 NT_STATUS_OK
ReadX 12188 1588 4096 4096 NT_STATUS_OK
ReadX 12188 1572 4096 4096 NT_STATUS_OK
WriteX 12215 0 18630 18630 NT_STATUS_OK
Flush 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12217 NT_STATUS_OK
Close 12217 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12188 612 4096 4096 NT_STATUS_OK
ReadX 12188 564 4096 4096 NT_STATUS_OK
ReadX 12188 1876 4096 4096 NT_STATUS_OK
ReadX 12188 628 4096 4096 NT_STATUS_OK
ReadX 12188 740 4096 4096 NT_STATUS_OK
ReadX 12188 724 4096 4096 NT_STATUS_OK
ReadX 12188 644 4096 4096 NT_STATUS_OK
ReadX 12188 2324 4096 4096 NT_STATUS_OK
ReadX 12188 660 4096 4096 NT_STATUS_OK
ReadX 12188 852 4096 4096 NT_STATUS_OK
ReadX 12188 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12188 2368 4096 4096 NT_STATUS_OK
ReadX 12188 1024 4096 4096 NT_STATUS_OK
ReadX 12188 320 4096 4096 NT_STATUS_OK
ReadX 12188 580 4096 4096 NT_STATUS_OK
ReadX 12188 3136 512 512 NT_STATUS_OK
ReadX 12188 2880 4096 4096 NT_STATUS_OK
Close 12188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 61440 4096 4096 NT_STATUS_OK
ReadX 12220 126976 4096 4096 NT_STATUS_OK
WriteX 12220 0 65536 65536 NT_STATUS_OK
WriteX 12220 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 61440 4096 4096 NT_STATUS_OK
ReadX 12221 126976 4096 4096 NT_STATUS_OK
ReadX 12221 192512 4096 4096 NT_STATUS_OK
ReadX 12221 258048 4096 4096 NT_STATUS_OK
WriteX 12221 0 65536 65536 NT_STATUS_OK
WriteX 12221 65536 65536 65536 NT_STATUS_OK
WriteX 12221 131072 65536 65536 NT_STATUS_OK
WriteX 12221 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12222 NT_STATUS_OK
ReadX 12222 61440 4096 4096 NT_STATUS_OK
ReadX 12222 126976 4096 4096 NT_STATUS_OK
ReadX 12222 192512 4096 4096 NT_STATUS_OK
ReadX 12222 258048 4096 4096 NT_STATUS_OK
ReadX 12222 323584 4096 4096 NT_STATUS_OK
ReadX 12222 389120 4096 4096 NT_STATUS_OK
ReadX 12222 454656 4096 4096 NT_STATUS_OK
ReadX 12222 520192 4096 4096 NT_STATUS_OK
WriteX 12222 0 65536 65536 NT_STATUS_OK
WriteX 12222 65536 65536 65536 NT_STATUS_OK
WriteX 12222 131072 65536 65536 NT_STATUS_OK
WriteX 12222 196608 65536 65536 NT_STATUS_OK
WriteX 12222 262144 65536 65536 NT_STATUS_OK
WriteX 12222 327680 65536 65536 NT_STATUS_OK
WriteX 12222 393216 65536 65536 NT_STATUS_OK
WriteX 12222 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12223 NT_STATUS_OK
ReadX 12223 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12224 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12225 NT_STATUS_OK
WriteX 12225 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12225 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12223 0 8192 8192 NT_STATUS_OK
Flush 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12223 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12223 0 8192 8192 NT_STATUS_OK
Flush 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12223 0 8192 8192 NT_STATUS_OK
Flush 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12223 0 8192 8192 NT_STATUS_OK
Flush 12223 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12227 NT_STATUS_OK
Close 12227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Close 12220 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Close 12222 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12230 NT_STATUS_OK
WriteX 12230 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12230 258 NT_STATUS_OK
WriteX 12230 0 62591 62591 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 10845 10845 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12240 NT_STATUS_OK
WriteX 12240 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12240 258 NT_STATUS_OK
WriteX 12240 0 30118 30118 NT_STATUS_OK
Close 12240 NT_STATUS_OK
WriteX 12223 0 4096 4096 NT_STATUS_OK
WriteX 12225 0 64 64 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12223 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12242 NT_STATUS_OK
ReadX 12242 0 61440 61440 NT_STATUS_OK
ReadX 12242 61440 4096 4096 NT_STATUS_OK
ReadX 12242 65536 61440 61440 NT_STATUS_OK
ReadX 12242 126976 4096 4096 NT_STATUS_OK
ReadX 12242 131072 61440 61440 NT_STATUS_OK
ReadX 12242 192512 4096 4096 NT_STATUS_OK
ReadX 12242 196608 61440 61440 NT_STATUS_OK
ReadX 12242 258048 4096 4096 NT_STATUS_OK
ReadX 12242 262144 61440 61440 NT_STATUS_OK
ReadX 12242 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 61440 61440 NT_STATUS_OK
ReadX 12243 61440 4096 4096 NT_STATUS_OK
ReadX 12243 65536 61440 61440 NT_STATUS_OK
ReadX 12243 126976 4096 4096 NT_STATUS_OK
ReadX 12243 131072 61440 61440 NT_STATUS_OK
ReadX 12243 192512 4096 4096 NT_STATUS_OK
ReadX 12243 196608 61440 61440 NT_STATUS_OK
ReadX 12243 258048 4096 4096 NT_STATUS_OK
ReadX 12243 262144 61440 61440 NT_STATUS_OK
ReadX 12243 323584 4096 4096 NT_STATUS_OK
ReadX 12243 327680 61440 61440 NT_STATUS_OK
ReadX 12243 389120 4096 4096 NT_STATUS_OK
ReadX 12243 393216 61440 61440 NT_STATUS_OK
ReadX 12243 454656 4096 4096 NT_STATUS_OK
ReadX 12243 458752 61440 61440 NT_STATUS_OK
ReadX 12243 520192 4096 4096 NT_STATUS_OK
ReadX 12243 524288 61440 61440 NT_STATUS_OK
ReadX 12243 585728 4096 4096 NT_STATUS_OK
ReadX 12243 589824 61440 61440 NT_STATUS_OK
ReadX 12243 651264 4096 4096 NT_STATUS_OK
ReadX 12243 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 61440 61440 NT_STATUS_OK
ReadX 12244 61440 4096 4096 NT_STATUS_OK
ReadX 12244 65536 61440 61440 NT_STATUS_OK
ReadX 12244 126976 4096 4096 NT_STATUS_OK
ReadX 12244 131072 61440 61440 NT_STATUS_OK
ReadX 12244 192512 4096 4096 NT_STATUS_OK
ReadX 12244 196608 61440 61440 NT_STATUS_OK
ReadX 12244 258048 4096 4096 NT_STATUS_OK
ReadX 12244 262144 61440 61440 NT_STATUS_OK
ReadX 12244 323584 4096 4096 NT_STATUS_OK
ReadX 12244 327680 61440 61440 NT_STATUS_OK
ReadX 12244 389120 4096 4096 NT_STATUS_OK
ReadX 12244 393216 61440 61440 NT_STATUS_OK
ReadX 12244 454656 4096 4096 NT_STATUS_OK
ReadX 12244 458752 61440 61440 NT_STATUS_OK
ReadX 12244 520192 4096 4096 NT_STATUS_OK
ReadX 12244 524288 61440 61440 NT_STATUS_OK
ReadX 12244 585728 4096 4096 NT_STATUS_OK
ReadX 12244 589824 61440 61440 NT_STATUS_OK
ReadX 12244 651264 4096 4096 NT_STATUS_OK
ReadX 12244 655360 61440 61440 NT_STATUS_OK
ReadX 12244 716800 4096 4096 NT_STATUS_OK
ReadX 12244 720896 61440 61440 NT_STATUS_OK
ReadX 12244 782336 4096 4096 NT_STATUS_OK
ReadX 12244 786432 61440 61440 NT_STATUS_OK
ReadX 12244 847872 4096 4096 NT_STATUS_OK
ReadX 12244 851968 61440 61440 NT_STATUS_OK
ReadX 12244 913408 4096 4096 NT_STATUS_OK
ReadX 12244 917504 61440 61440 NT_STATUS_OK
ReadX 12244 978944 4096 4096 NT_STATUS_OK
ReadX 12244 983040 61440 61440 NT_STATUS_OK
ReadX 12244 1044480 4096 4096 NT_STATUS_OK
ReadX 12244 1048576 61440 61440 NT_STATUS_OK
ReadX 12244 1110016 4096 4096 NT_STATUS_OK
ReadX 12244 1114112 61440 61440 NT_STATUS_OK
ReadX 12244 1175552 4096 4096 NT_STATUS_OK
ReadX 12244 1179648 61440 61440 NT_STATUS_OK
ReadX 12244 1241088 4096 4096 NT_STATUS_OK
ReadX 12244 1245184 61440 61440 NT_STATUS_OK
ReadX 12244 1306624 4096 4096 NT_STATUS_OK
ReadX 12244 1310720 61440 61440 NT_STATUS_OK
ReadX 12244 1372160 4096 4096 NT_STATUS_OK
ReadX 12244 1376256 61440 61440 NT_STATUS_OK
ReadX 12244 1437696 4096 4096 NT_STATUS_OK
ReadX 12244 1441792 61440 61440 NT_STATUS_OK
ReadX 12244 1503232 4096 4096 NT_STATUS_OK
ReadX 12244 1507328 61440 61440 NT_STATUS_OK
ReadX 12244 1568768 4096 4096 NT_STATUS_OK
ReadX 12244 1572864 61440 61440 NT_STATUS_OK
ReadX 12244 1634304 4096 4096 NT_STATUS_OK
ReadX 12244 1638400 61440 61440 NT_STATUS_OK
ReadX 12244 1699840 4096 4096 NT_STATUS_OK
ReadX 12244 1703936 61440 61440 NT_STATUS_OK
ReadX 12244 1765376 4096 4096 NT_STATUS_OK
ReadX 12244 1769472 61440 61440 NT_STATUS_OK
ReadX 12244 1830912 4096 4096 NT_STATUS_OK
ReadX 12244 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12242 NT_STATUS_OK
Close 12243 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
ReadX 12249 4096 4096 4096 NT_STATUS_OK
ReadX 12249 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12250 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12253 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 8192 8192 NT_STATUS_OK
ReadX 12257 8192 8192 8192 NT_STATUS_OK
ReadX 12257 16384 8192 8192 NT_STATUS_OK
ReadX 12257 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12257 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12262 NT_STATUS_OK
WriteX 12262 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12262 258 NT_STATUS_OK
WriteX 12262 0 10438 10438 NT_STATUS_OK
Close 12262 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12266 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12267 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12268 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
ReadX 12271 4096 4096 4096 NT_STATUS_OK
ReadX 12271 8192 4096 4096 NT_STATUS_OK
ReadX 12271 12288 8192 8192 NT_STATUS_OK
ReadX 12271 20480 8192 8192 NT_STATUS_OK
ReadX 12271 28672 8192 8192 NT_STATUS_OK
ReadX 12271 36864 8192 8192 NT_STATUS_OK
ReadX 12271 45056 8192 8192 NT_STATUS_OK
ReadX 12271 53248 8192 8192 NT_STATUS_OK
ReadX 12271 61440 8192 8192 NT_STATUS_OK
ReadX 12271 69632 8192 8192 NT_STATUS_OK
ReadX 12271 77824 8192 8192 NT_STATUS_OK
ReadX 12271 86016 8192 8192 NT_STATUS_OK
ReadX 12271 94208 8192 8192 NT_STATUS_OK
ReadX 12271 102400 8192 8192 NT_STATUS_OK
ReadX 12271 110592 8192 8192 NT_STATUS_OK
ReadX 12271 118784 8192 8192 NT_STATUS_OK
ReadX 12271 126976 8192 8192 NT_STATUS_OK
ReadX 12271 135168 8192 8192 NT_STATUS_OK
ReadX 12271 143360 8192 8192 NT_STATUS_OK
ReadX 12271 151552 8192 8192 NT_STATUS_OK
ReadX 12271 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12273 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12276 NT_STATUS_OK
WriteX 12276 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12276 258 NT_STATUS_OK
WriteX 12276 0 28489 28489 NT_STATUS_OK
Close 12276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12277 NT_STATUS_OK
Close 12277 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12279 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12279 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12279 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12282 NT_STATUS_OK
ReadX 12282 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 8192 8192 NT_STATUS_OK
ReadX 12283 8192 8192 8192 NT_STATUS_OK
ReadX 12283 16384 8192 8192 NT_STATUS_OK
ReadX 12283 24576 8192 8192 NT_STATUS_OK
ReadX 12283 32768 16384 16384 NT_STATUS_OK
ReadX 12283 49152 8192 8192 NT_STATUS_OK
ReadX 12283 57344 8192 8192 NT_STATUS_OK
ReadX 12283 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12285 NT_STATUS_OK
Close 12285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12288 NT_STATUS_OK
WriteX 12288 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 258 NT_STATUS_OK
WriteX 12288 0 29253 29253 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12289 NT_STATUS_OK
Close 12289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12290 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12295 NT_STATUS_OK
WriteX 12295 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12295 258 NT_STATUS_OK
WriteX 12295 0 30183 30183 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12298 NT_STATUS_OK
WriteX 12298 0 510 510 NT_STATUS_OK
WriteX 12298 510 512 512 NT_STATUS_OK
WriteX 12298 1022 510 510 NT_STATUS_OK
WriteX 12298 1532 510 510 NT_STATUS_OK
WriteX 12298 2042 168 168 NT_STATUS_OK
Close 12298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12299 NT_STATUS_OK
Close 12299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 61440 4096 4096 NT_STATUS_OK
ReadX 12302 126976 4096 4096 NT_STATUS_OK
WriteX 12302 0 65536 65536 NT_STATUS_OK
WriteX 12302 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 61440 4096 4096 NT_STATUS_OK
ReadX 12303 126976 4096 4096 NT_STATUS_OK
ReadX 12303 192512 4096 4096 NT_STATUS_OK
ReadX 12303 258048 4096 4096 NT_STATUS_OK
WriteX 12303 0 65536 65536 NT_STATUS_OK
WriteX 12303 65536 65536 65536 NT_STATUS_OK
WriteX 12303 131072 65536 65536 NT_STATUS_OK
WriteX 12303 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 61440 4096 4096 NT_STATUS_OK
ReadX 12304 126976 4096 4096 NT_STATUS_OK
ReadX 12304 192512 4096 4096 NT_STATUS_OK
ReadX 12304 258048 4096 4096 NT_STATUS_OK
ReadX 12304 323584 4096 4096 NT_STATUS_OK
ReadX 12304 389120 4096 4096 NT_STATUS_OK
ReadX 12304 454656 4096 4096 NT_STATUS_OK
ReadX 12304 520192 4096 4096 NT_STATUS_OK
WriteX 12304 0 65536 65536 NT_STATUS_OK
WriteX 12304 65536 65536 65536 NT_STATUS_OK
WriteX 12304 131072 65536 65536 NT_STATUS_OK
WriteX 12304 196608 65536 65536 NT_STATUS_OK
WriteX 12304 262144 65536 65536 NT_STATUS_OK
WriteX 12304 327680 65536 65536 NT_STATUS_OK
WriteX 12304 393216 65536 65536 NT_STATUS_OK
WriteX 12304 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12305 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12301 NT_STATUS_OK
Close 12302 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12311 NT_STATUS_OK
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12314 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12323 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12359 NT_STATUS_OK
Close 12359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12373 NT_STATUS_OK
WriteX 12373 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12373 0 65536 65536 NT_STATUS_OK
WriteX 12373 65536 65536 65536 NT_STATUS_OK
WriteX 12373 131072 65536 65536 NT_STATUS_OK
WriteX 12373 196608 65536 65536 NT_STATUS_OK
WriteX 12373 262144 26634 26634 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12378 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
Close 12380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 4096 4096 NT_STATUS_OK
ReadX 12381 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12395 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12400 NT_STATUS_OK
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12409 NT_STATUS_OK
Close 12409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12414 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12419 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12429 NT_STATUS_OK
Close 12429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12438 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12443 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12446 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
Close 12461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12472 NT_STATUS_OK
Close 12472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12505 0 4096 4096 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
ReadX 12507 4096 4096 4096 NT_STATUS_OK
ReadX 12507 8192 4096 4096 NT_STATUS_OK
ReadX 12507 12288 4096 4096 NT_STATUS_OK
ReadX 12507 16384 4096 4096 NT_STATUS_OK
ReadX 12507 20480 4096 4096 NT_STATUS_OK
ReadX 12507 24576 4096 4096 NT_STATUS_OK
ReadX 12507 28672 4096 4096 NT_STATUS_OK
ReadX 12507 32768 4096 4096 NT_STATUS_OK
ReadX 12507 36864 4096 4096 NT_STATUS_OK
ReadX 12507 40960 4096 4096 NT_STATUS_OK
ReadX 12507 45056 4096 4096 NT_STATUS_OK
ReadX 12507 49152 4096 4096 NT_STATUS_OK
ReadX 12507 53248 4096 4096 NT_STATUS_OK
ReadX 12507 57344 4096 4096 NT_STATUS_OK
ReadX 12507 61440 4096 4096 NT_STATUS_OK
ReadX 12507 65536 4096 4096 NT_STATUS_OK
ReadX 12507 69632 4096 4096 NT_STATUS_OK
ReadX 12507 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12507 1004 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
Close 12507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12508 NT_STATUS_OK
SET_FILE_INFORMATION 12508 1004 NT_STATUS_OK
Close 12508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12513 NT_STATUS_OK
WriteX 12513 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 258 NT_STATUS_OK
WriteX 12513 0 65536 65536 NT_STATUS_OK
WriteX 12513 65536 19979 19979 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
QUERY_FILE_INFORMATION 12514 1004 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
SET_FILE_INFORMATION 12514 1004 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
Close 12515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
Close 12517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12519 1004 NT_STATUS_OK
WriteX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12520 NT_STATUS_OK
Close 12520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12522 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12525 NT_STATUS_OK
WriteX 12525 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12525 258 NT_STATUS_OK
WriteX 12525 0 65536 65536 NT_STATUS_OK
WriteX 12525 65536 17654 17654 NT_STATUS_OK
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
Flush 12526 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
Flush 12526 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 1004 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
Flush 12526 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
Flush 12526 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
Flush 12526 NT_STATUS_OK
SET_FILE_INFORMATION 12526 1004 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
Flush 12526 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12527 NT_STATUS_OK
SET_FILE_INFORMATION 12527 1004 NT_STATUS_OK
Close 12527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12529 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
ReadX 12531 4096 4096 4096 NT_STATUS_OK
ReadX 12531 8192 4096 4096 NT_STATUS_OK
ReadX 12531 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12531 16384 4096 4096 NT_STATUS_OK
ReadX 12531 20480 4096 4096 NT_STATUS_OK
ReadX 12531 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 4096 4096 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 4096 4096 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12534 1004 NT_STATUS_OK
WriteX 12534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12535 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12537 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12540 NT_STATUS_OK
WriteX 12540 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
WriteX 12540 0 65536 65536 NT_STATUS_OK
WriteX 12540 65536 19490 19490 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
QUERY_FILE_INFORMATION 12541 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
SET_FILE_INFORMATION 12541 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12542 NT_STATUS_OK
SET_FILE_INFORMATION 12542 1004 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12546 0 4096 4096 NT_STATUS_OK
Close 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
ReadX 12548 4096 4096 4096 NT_STATUS_OK
ReadX 12548 8192 4096 4096 NT_STATUS_OK
ReadX 12548 12288 4096 4096 NT_STATUS_OK
ReadX 12548 16384 4096 4096 NT_STATUS_OK
ReadX 12548 20480 4096 4096 NT_STATUS_OK
ReadX 12548 24576 4096 4096 NT_STATUS_OK
ReadX 12548 28672 4096 4096 NT_STATUS_OK
ReadX 12548 32768 4096 4096 NT_STATUS_OK
ReadX 12548 36864 4096 4096 NT_STATUS_OK
ReadX 12548 40960 4096 4096 NT_STATUS_OK
ReadX 12548 45056 4096 4096 NT_STATUS_OK
ReadX 12548 49152 4096 4096 NT_STATUS_OK
ReadX 12548 53248 4096 4096 NT_STATUS_OK
ReadX 12548 57344 4096 4096 NT_STATUS_OK
ReadX 12548 61440 4096 4096 NT_STATUS_OK
ReadX 12548 65536 4096 4096 NT_STATUS_OK
ReadX 12548 69632 4096 4096 NT_STATUS_OK
ReadX 12548 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12548 1004 NT_STATUS_OK
WriteX 12548 0 4096 4096 NT_STATUS_OK
Close 12548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12549 NT_STATUS_OK
SET_FILE_INFORMATION 12549 1004 NT_STATUS_OK
Close 12549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12554 NT_STATUS_OK
WriteX 12554 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 258 NT_STATUS_OK
WriteX 12554 0 65536 65536 NT_STATUS_OK
WriteX 12554 65536 8866 8866 NT_STATUS_OK
Close 12554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12559 1004 NT_STATUS_OK
WriteX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12560 NT_STATUS_OK
Close 12560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12565 NT_STATUS_OK
WriteX 12565 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 258 NT_STATUS_OK
WriteX 12565 0 65536 65536 NT_STATUS_OK
WriteX 12565 65536 9298 9298 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
WriteX 12566 0 4096 4096 NT_STATUS_OK
Flush 12566 NT_STATUS_OK
SET_FILE_INFORMATION 12566 1004 NT_STATUS_OK
WriteX 12566 0 4096 4096 NT_STATUS_OK
Flush 12566 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12567 NT_STATUS_OK
SET_FILE_INFORMATION 12567 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 0 4096 4096 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12573 4096 4096 4096 NT_STATUS_OK
ReadX 12573 8192 4096 4096 NT_STATUS_OK
ReadX 12573 12288 4096 4096 NT_STATUS_OK
ReadX 12573 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
Close 12574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
Close 12575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
WriteX 12576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12573 NT_STATUS_OK
Close 12576 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12579 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12582 NT_STATUS_OK
WriteX 12582 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 258 NT_STATUS_OK
WriteX 12582 0 65536 65536 NT_STATUS_OK
WriteX 12582 65536 11540 11540 NT_STATUS_OK
Close 12582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Flush 12583 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Flush 12583 NT_STATUS_OK
Close 12583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12584 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
Close 12584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 61440 4096 4096 NT_STATUS_OK
ReadX 12588 126976 4096 4096 NT_STATUS_OK
WriteX 12588 0 65536 65536 NT_STATUS_OK
WriteX 12588 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 61440 4096 4096 NT_STATUS_OK
ReadX 12589 126976 4096 4096 NT_STATUS_OK
ReadX 12589 192512 4096 4096 NT_STATUS_OK
ReadX 12589 258048 4096 4096 NT_STATUS_OK
WriteX 12589 0 65536 65536 NT_STATUS_OK
WriteX 12589 65536 65536 65536 NT_STATUS_OK
WriteX 12589 131072 65536 65536 NT_STATUS_OK
WriteX 12589 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 61440 4096 4096 NT_STATUS_OK
ReadX 12590 126976 4096 4096 NT_STATUS_OK
ReadX 12590 192512 4096 4096 NT_STATUS_OK
ReadX 12590 258048 4096 4096 NT_STATUS_OK
ReadX 12590 323584 4096 4096 NT_STATUS_OK
ReadX 12590 389120 4096 4096 NT_STATUS_OK
ReadX 12590 454656 4096 4096 NT_STATUS_OK
ReadX 12590 520192 4096 4096 NT_STATUS_OK
WriteX 12590 0 65536 65536 NT_STATUS_OK
WriteX 12590 65536 65536 65536 NT_STATUS_OK
WriteX 12590 131072 65536 65536 NT_STATUS_OK
WriteX 12590 196608 65536 65536 NT_STATUS_OK
WriteX 12590 262144 65536 65536 NT_STATUS_OK
WriteX 12590 327680 65536 65536 NT_STATUS_OK
WriteX 12590 393216 65536 65536 NT_STATUS_OK
WriteX 12590 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
ReadX 12591 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12592 NT_STATUS_OK
WriteX 12592 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12592 258 NT_STATUS_OK
WriteX 12592 0 53 53 NT_STATUS_OK
Close 12592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12593 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12591 8192 4096 4096 NT_STATUS_OK
ReadX 12591 12288 4096 4096 NT_STATUS_OK
WriteX 12595 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12595 258 NT_STATUS_OK
ReadX 12591 16384 4096 4096 NT_STATUS_OK
ReadX 12591 20480 4096 4096 NT_STATUS_OK
WriteX 12595 0 15360 15360 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12596 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12596 1004 NT_STATUS_OK
WriteX 12596 0 4096 4096 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12597 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12599 4096 4096 4096 NT_STATUS_OK
ReadX 12599 8192 4096 4096 NT_STATUS_OK
ReadX 12599 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
ReadX 12602 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
ReadX 12603 4096 4096 4096 NT_STATUS_OK
ReadX 12603 8192 4096 4096 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12604 NT_STATUS_OK
WriteX 12604 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 258 NT_STATUS_OK
WriteX 12604 0 15360 15360 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12606 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12609 NT_STATUS_OK
SET_FILE_INFORMATION 12609 1004 NT_STATUS_OK
Close 12609 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12610 NT_STATUS_OK
Close 12610 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 4096 4096 NT_STATUS_OK
ReadX 12612 4096 4096 4096 NT_STATUS_OK
ReadX 12612 8192 4096 4096 NT_STATUS_OK
ReadX 12612 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12612 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12612 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12614 NT_STATUS_OK
WriteX 12614 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12614 258 NT_STATUS_OK
WriteX 12614 0 53 53 NT_STATUS_OK
Close 12614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12613 4096 4096 4096 NT_STATUS_OK
ReadX 12613 8192 4096 4096 NT_STATUS_OK
ReadX 12613 12288 4096 4096 NT_STATUS_OK
WriteX 12617 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12617 258 NT_STATUS_OK
WriteX 12617 0 12006 12006 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
Close 12618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12619 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12622 NT_STATUS_OK
Close 12622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12621 4096 4096 4096 NT_STATUS_OK
ReadX 12621 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12624 NT_STATUS_OK
WriteX 12624 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12624 258 NT_STATUS_OK
WriteX 12624 0 11991 11991 NT_STATUS_OK
Close 12624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12625 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12625 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12626 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12629 NT_STATUS_OK
WriteX 12612 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 12629 1004 NT_STATUS_OK
Close 12629 NT_STATUS_OK
WriteX 12625 0 4096 4096 NT_STATUS_OK
Close 12625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12630 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12632 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12632 1004 NT_STATUS_OK
ReadX 12632 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12632 1004 NT_STATUS_OK
WriteX 12632 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12632 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12632 1004 NT_STATUS_OK
Close 12608 NT_STATUS_OK
WriteX 12632 0 12288 12288 NT_STATUS_OK
Close 12628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12635 NT_STATUS_OK
Close 12635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12612 NT_STATUS_OK
Close 12632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 61440 61440 NT_STATUS_OK
ReadX 12639 61440 4096 4096 NT_STATUS_OK
ReadX 12639 65536 61440 61440 NT_STATUS_OK
ReadX 12639 126976 4096 4096 NT_STATUS_OK
ReadX 12639 131072 61440 61440 NT_STATUS_OK
ReadX 12639 192512 4096 4096 NT_STATUS_OK
ReadX 12639 196608 61440 61440 NT_STATUS_OK
ReadX 12639 258048 4096 4096 NT_STATUS_OK
ReadX 12639 262144 61440 61440 NT_STATUS_OK
ReadX 12639 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12640 NT_STATUS_OK
ReadX 12640 0 61440 61440 NT_STATUS_OK
ReadX 12640 61440 4096 4096 NT_STATUS_OK
ReadX 12640 65536 61440 61440 NT_STATUS_OK
ReadX 12640 126976 4096 4096 NT_STATUS_OK
ReadX 12640 131072 61440 61440 NT_STATUS_OK
ReadX 12640 192512 4096 4096 NT_STATUS_OK
ReadX 12640 196608 61440 61440 NT_STATUS_OK
ReadX 12640 258048 4096 4096 NT_STATUS_OK
ReadX 12640 262144 61440 61440 NT_STATUS_OK
ReadX 12640 323584 4096 4096 NT_STATUS_OK
ReadX 12640 327680 61440 61440 NT_STATUS_OK
ReadX 12640 389120 4096 4096 NT_STATUS_OK
ReadX 12640 393216 61440 61440 NT_STATUS_OK
ReadX 12640 454656 4096 4096 NT_STATUS_OK
ReadX 12640 458752 61440 61440 NT_STATUS_OK
ReadX 12640 520192 4096 4096 NT_STATUS_OK
ReadX 12640 524288 61440 61440 NT_STATUS_OK
ReadX 12640 585728 4096 4096 NT_STATUS_OK
ReadX 12640 589824 61440 61440 NT_STATUS_OK
ReadX 12640 651264 4096 4096 NT_STATUS_OK
ReadX 12640 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12641 NT_STATUS_OK
ReadX 12641 0 61440 61440 NT_STATUS_OK
ReadX 12641 61440 4096 4096 NT_STATUS_OK
ReadX 12641 65536 61440 61440 NT_STATUS_OK
ReadX 12641 126976 4096 4096 NT_STATUS_OK
ReadX 12641 131072 61440 61440 NT_STATUS_OK
ReadX 12641 192512 4096 4096 NT_STATUS_OK
ReadX 12641 196608 61440 61440 NT_STATUS_OK
ReadX 12641 258048 4096 4096 NT_STATUS_OK
ReadX 12641 262144 61440 61440 NT_STATUS_OK
ReadX 12641 323584 4096 4096 NT_STATUS_OK
ReadX 12641 327680 61440 61440 NT_STATUS_OK
ReadX 12641 389120 4096 4096 NT_STATUS_OK
ReadX 12641 393216 61440 61440 NT_STATUS_OK
ReadX 12641 454656 4096 4096 NT_STATUS_OK
ReadX 12641 458752 61440 61440 NT_STATUS_OK
ReadX 12641 520192 4096 4096 NT_STATUS_OK
ReadX 12641 524288 61440 61440 NT_STATUS_OK
ReadX 12641 585728 4096 4096 NT_STATUS_OK
ReadX 12641 589824 61440 61440 NT_STATUS_OK
ReadX 12641 651264 4096 4096 NT_STATUS_OK
ReadX 12641 655360 61440 61440 NT_STATUS_OK
ReadX 12641 716800 4096 4096 NT_STATUS_OK
ReadX 12641 720896 61440 61440 NT_STATUS_OK
ReadX 12641 782336 4096 4096 NT_STATUS_OK
ReadX 12641 786432 61440 61440 NT_STATUS_OK
ReadX 12641 847872 4096 4096 NT_STATUS_OK
ReadX 12641 851968 61440 61440 NT_STATUS_OK
ReadX 12641 913408 4096 4096 NT_STATUS_OK
ReadX 12641 917504 61440 61440 NT_STATUS_OK
ReadX 12641 978944 4096 4096 NT_STATUS_OK
ReadX 12641 983040 61440 61440 NT_STATUS_OK
ReadX 12641 1044480 4096 4096 NT_STATUS_OK
ReadX 12641 1048576 61440 61440 NT_STATUS_OK
ReadX 12641 1110016 4096 4096 NT_STATUS_OK
ReadX 12641 1114112 61440 61440 NT_STATUS_OK
ReadX 12641 1175552 4096 4096 NT_STATUS_OK
ReadX 12641 1179648 61440 61440 NT_STATUS_OK
ReadX 12641 1241088 4096 4096 NT_STATUS_OK
ReadX 12641 1245184 61440 61440 NT_STATUS_OK
ReadX 12641 1306624 4096 4096 NT_STATUS_OK
ReadX 12641 1310720 61440 61440 NT_STATUS_OK
ReadX 12641 1372160 4096 4096 NT_STATUS_OK
ReadX 12641 1376256 61440 61440 NT_STATUS_OK
ReadX 12641 1437696 4096 4096 NT_STATUS_OK
ReadX 12641 1441792 61440 61440 NT_STATUS_OK
ReadX 12641 1503232 4096 4096 NT_STATUS_OK
ReadX 12641 1507328 61440 61440 NT_STATUS_OK
ReadX 12641 1568768 4096 4096 NT_STATUS_OK
ReadX 12641 1572864 61440 61440 NT_STATUS_OK
ReadX 12641 1634304 4096 4096 NT_STATUS_OK
ReadX 12641 1638400 61440 61440 NT_STATUS_OK
ReadX 12641 1699840 4096 4096 NT_STATUS_OK
ReadX 12641 1703936 61440 61440 NT_STATUS_OK
ReadX 12641 1765376 4096 4096 NT_STATUS_OK
ReadX 12641 1769472 61440 61440 NT_STATUS_OK
ReadX 12641 1830912 4096 4096 NT_STATUS_OK
ReadX 12641 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12644 NT_STATUS_OK
ReadX 12644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12647 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12648 NT_STATUS_OK
QUERY_FILE_INFORMATION 12648 1004 NT_STATUS_OK
WriteX 12648 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12648 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12650 NT_STATUS_OK
WriteX 12650 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 258 NT_STATUS_OK
WriteX 12650 0 491 491 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12648 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12653 NT_STATUS_OK
Close 12653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12654 NT_STATUS_OK
WriteX 12654 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12654 258 NT_STATUS_OK
WriteX 12654 0 543 543 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Close 12640 NT_STATUS_OK
Close 12641 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12643 NT_STATUS_OK
Close 12644 NT_STATUS_OK
Close 12645 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12658 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12668 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 258 NT_STATUS_OK
WriteX 12668 0 2048 2048 NT_STATUS_OK
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12669 0 4096 4096 NT_STATUS_OK
Flush 12669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12674 NT_STATUS_OK
WriteX 12674 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12674 258 NT_STATUS_OK
WriteX 12674 0 2048 2048 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12680 NT_STATUS_OK
WriteX 12680 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12680 258 NT_STATUS_OK
WriteX 12680 0 2048 2048 NT_STATUS_OK
Close 12680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12681 NT_STATUS_OK
ReadX 12681 0 2048 2048 NT_STATUS_OK
ReadX 12659 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12675 0 4096 4096 NT_STATUS_OK
WriteX 12659 0 8192 8192 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
WriteX 12661 0 4096 4096 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12685 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12675 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12697 NT_STATUS_OK
ReadX 12697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12698 NT_STATUS_OK
ReadX 12698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12705 NT_STATUS_OK
QUERY_FILE_INFORMATION 12705 1004 NT_STATUS_OK
WriteX 12705 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12705 258 NT_STATUS_OK
WriteX 12705 0 2048 2048 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12713 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 1004 NT_STATUS_OK
WriteX 12713 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 258 NT_STATUS_OK
WriteX 12713 0 2048 2048 NT_STATUS_OK
Close 12713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12714 NT_STATUS_OK
ReadX 12714 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12706 0 4096 4096 NT_STATUS_OK
Flush 12706 NT_STATUS_OK
WriteX 12714 0 4096 4096 NT_STATUS_OK
Flush 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12714 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12708 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12716 NT_STATUS_OK
WriteX 12716 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Close 12716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12719 NT_STATUS_OK
WriteX 12719 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 258 NT_STATUS_OK
WriteX 12719 0 4096 4096 NT_STATUS_OK
Close 12719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12720 0 4096 4096 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Close 12691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12726 NT_STATUS_OK
Close 12726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12727 NT_STATUS_OK
WriteX 12727 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12727 258 NT_STATUS_OK
WriteX 12727 0 2048 2048 NT_STATUS_OK
Close 12727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12729 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12733 NT_STATUS_OK
ReadX 12733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12734 NT_STATUS_OK
ReadX 12734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12736 NT_STATUS_OK
ReadX 12736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12742 NT_STATUS_OK
QUERY_FILE_INFORMATION 12742 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Close 12736 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12732 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12744 NT_STATUS_OK
QUERY_FILE_INFORMATION 12744 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12748 NT_STATUS_OK
ReadX 12748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12749 NT_STATUS_OK
ReadX 12749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12750 NT_STATUS_OK
ReadX 12750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12752 NT_STATUS_OK
ReadX 12752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 1004 NT_STATUS_OK
WriteX 12764 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 258 NT_STATUS_OK
WriteX 12764 0 2048 2048 NT_STATUS_OK
Close 12764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12776 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 1004 NT_STATUS_OK
WriteX 12776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
WriteX 12776 0 2048 2048 NT_STATUS_OK
Close 12776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12779 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12784 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1004 NT_STATUS_OK
WriteX 12784 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 258 NT_STATUS_OK
WriteX 12784 0 2048 2048 NT_STATUS_OK
Close 12784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12765 0 4096 4096 NT_STATUS_OK
Flush 12765 NT_STATUS_OK
WriteX 12777 0 4096 4096 NT_STATUS_OK
Flush 12777 NT_STATUS_OK
WriteX 12785 0 4096 4096 NT_STATUS_OK
Flush 12785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12777 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12785 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12767 4096 16384 16384 NT_STATUS_OK
ReadX 12747 4096 16384 16384 NT_STATUS_OK
ReadX 12779 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12787 NT_STATUS_OK
ReadX 12787 0 2048 2048 NT_STATUS_OK
WriteX 12787 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12788 NT_STATUS_OK
QUERY_FILE_INFORMATION 12788 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12787 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12757 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Close 12748 NT_STATUS_OK
Close 12749 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12790 NT_STATUS_OK
QUERY_FILE_INFORMATION 12790 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12792 NT_STATUS_OK
QUERY_FILE_INFORMATION 12792 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12794 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12795 4096 16384 16384 NT_STATUS_OK
WriteX 12795 0 4096 4096 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
WriteX 12797 0 4096 4096 NT_STATUS_OK
WriteX 12798 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12801 NT_STATUS_OK
ReadX 12801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12802 NT_STATUS_OK
ReadX 12802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12804 NT_STATUS_OK
ReadX 12804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12806 NT_STATUS_OK
ReadX 12806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 8192 8192 NT_STATUS_OK
ReadX 12801 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12815 0 4096 4096 NT_STATUS_OK
ReadX 12815 4096 4096 4096 NT_STATUS_OK
ReadX 12815 8192 4096 4096 NT_STATUS_OK
WriteX 12801 0 4096 4096 NT_STATUS_OK
WriteX 12802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
ReadX 12816 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12795 0 4096 4096 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
WriteX 12797 0 4096 4096 NT_STATUS_OK
WriteX 12798 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12821 NT_STATUS_OK
QUERY_FILE_INFORMATION 12821 1004 NT_STATUS_OK
WriteX 12821 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12821 258 NT_STATUS_OK
WriteX 12821 0 2048 2048 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12822 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 0 4096 4096 NT_STATUS_OK
ReadX 12824 4096 4096 4096 NT_STATUS_OK
WriteX 12824 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12826 NT_STATUS_OK
ReadX 12826 0 4096 4096 NT_STATUS_OK
ReadX 12826 4096 4096 4096 NT_STATUS_OK
WriteX 12826 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12827 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Close 12802 NT_STATUS_OK
Close 12805 NT_STATUS_OK
Close 12806 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Close 12826 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12829 0 4096 4096 NT_STATUS_OK
ReadX 12829 4096 4096 4096 NT_STATUS_OK
ReadX 12829 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12840 NT_STATUS_OK
ReadX 12840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12841 NT_STATUS_OK
ReadX 12841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 0 4096 4096 NT_STATUS_OK
ReadX 12830 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12847 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 1004 NT_STATUS_OK
WriteX 12847 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 258 NT_STATUS_OK
WriteX 12847 0 2048 2048 NT_STATUS_OK
Close 12847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12848 NT_STATUS_OK
ReadX 12848 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12853 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 258 NT_STATUS_OK
WriteX 12853 0 2048 2048 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12854 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12837 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12855 NT_STATUS_OK
QUERY_FILE_INFORMATION 12855 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12835 NT_STATUS_OK
Close 12832 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12839 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Close 12829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12857 NT_STATUS_OK
QUERY_FILE_INFORMATION 12857 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 61440 4096 4096 NT_STATUS_OK
ReadX 12859 126976 4096 4096 NT_STATUS_OK
WriteX 12859 0 65536 65536 NT_STATUS_OK
WriteX 12859 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 61440 4096 4096 NT_STATUS_OK
ReadX 12860 126976 4096 4096 NT_STATUS_OK
ReadX 12860 192512 4096 4096 NT_STATUS_OK
ReadX 12860 258048 4096 4096 NT_STATUS_OK
WriteX 12860 0 65536 65536 NT_STATUS_OK
WriteX 12860 65536 65536 65536 NT_STATUS_OK
WriteX 12860 131072 65536 65536 NT_STATUS_OK
WriteX 12860 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 61440 4096 4096 NT_STATUS_OK
ReadX 12861 126976 4096 4096 NT_STATUS_OK
ReadX 12861 192512 4096 4096 NT_STATUS_OK
ReadX 12861 258048 4096 4096 NT_STATUS_OK
ReadX 12861 323584 4096 4096 NT_STATUS_OK
ReadX 12861 389120 4096 4096 NT_STATUS_OK
ReadX 12861 454656 4096 4096 NT_STATUS_OK
ReadX 12861 520192 4096 4096 NT_STATUS_OK
WriteX 12861 0 65536 65536 NT_STATUS_OK
WriteX 12861 65536 65536 65536 NT_STATUS_OK
WriteX 12861 131072 65536 65536 NT_STATUS_OK
WriteX 12861 196608 65536 65536 NT_STATUS_OK
WriteX 12861 262144 65536 65536 NT_STATUS_OK
WriteX 12861 327680 65536 65536 NT_STATUS_OK
WriteX 12861 393216 65536 65536 NT_STATUS_OK
WriteX 12861 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12862 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12862 8192 4096 4096 NT_STATUS_OK
ReadX 12862 12288 4096 4096 NT_STATUS_OK
ReadX 12862 16384 4096 4096 NT_STATUS_OK
ReadX 12862 20480 4096 4096 NT_STATUS_OK
ReadX 12862 24576 4096 4096 NT_STATUS_OK
ReadX 12862 28672 4096 4096 NT_STATUS_OK
ReadX 12862 32768 4096 4096 NT_STATUS_OK
ReadX 12862 36864 4096 4096 NT_STATUS_OK
ReadX 12862 40960 4096 4096 NT_STATUS_OK
ReadX 12862 45056 4096 4096 NT_STATUS_OK
ReadX 12862 49152 4096 4096 NT_STATUS_OK
ReadX 12862 53248 4096 4096 NT_STATUS_OK
ReadX 12862 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12862 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12863 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12865 NT_STATUS_OK
WriteX 12865 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12865 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12865 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12865 1004 NT_STATUS_OK
WriteX 12865 0 57088 57088 NT_STATUS_OK
WriteX 12865 0 4096 4096 NT_STATUS_OK
Flush 12865 NT_STATUS_OK
Close 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12866 NT_STATUS_OK
SET_FILE_INFORMATION 12866 1004 NT_STATUS_OK
Close 12866 NT_STATUS_OK
SET_FILE_INFORMATION 12865 1004 NT_STATUS_OK
WriteX 12865 0 4096 4096 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12869 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12870 NT_STATUS_OK
WriteX 12870 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12870 1004 NT_STATUS_OK
WriteX 12870 0 51456 51456 NT_STATUS_OK
WriteX 12870 0 4096 4096 NT_STATUS_OK
Flush 12870 NT_STATUS_OK
SET_FILE_INFORMATION 12870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12870 1004 NT_STATUS_OK
WriteX 12870 0 4096 4096 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12874 NT_STATUS_OK
ReadX 12874 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12874 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12879 NT_STATUS_OK
WriteX 12879 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12879 258 NT_STATUS_OK
WriteX 12879 0 53077 53077 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12880 NT_STATUS_OK
WriteX 12880 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12880 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12880 1004 NT_STATUS_OK
WriteX 12880 0 65536 65536 NT_STATUS_OK
WriteX 12880 65536 1856 1856 NT_STATUS_OK
WriteX 12880 0 4096 4096 NT_STATUS_OK
Flush 12880 NT_STATUS_OK
SET_FILE_INFORMATION 12880 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12880 1004 NT_STATUS_OK
WriteX 12880 0 4096 4096 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12886 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12889 NT_STATUS_OK
WriteX 12889 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12889 258 NT_STATUS_OK
WriteX 12889 0 7983 7983 NT_STATUS_OK
Close 12889 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12891 NT_STATUS_OK
Close 12891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12894 NT_STATUS_OK
WriteX 12894 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12894 258 NT_STATUS_OK
WriteX 12894 0 65536 65536 NT_STATUS_OK
WriteX 12894 65536 65536 65536 NT_STATUS_OK
WriteX 12894 131072 65536 65536 NT_STATUS_OK
WriteX 12894 196608 65536 65536 NT_STATUS_OK
WriteX 12894 262144 65536 65536 NT_STATUS_OK
WriteX 12894 327680 65536 65536 NT_STATUS_OK
WriteX 12894 393216 65536 65536 NT_STATUS_OK
WriteX 12894 458752 46731 46731 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12895 NT_STATUS_OK
WriteX 12895 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12884 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12895 1004 NT_STATUS_OK
WriteX 12895 0 65536 65536 NT_STATUS_OK
WriteX 12895 65536 22848 22848 NT_STATUS_OK
WriteX 12895 0 4096 4096 NT_STATUS_OK
Flush 12895 NT_STATUS_OK
SET_FILE_INFORMATION 12895 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12895 1004 NT_STATUS_OK
WriteX 12895 0 4096 4096 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12899 NT_STATUS_OK
ReadX 12899 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12899 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12900 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12900 1004 NT_STATUS_OK
ReadX 12900 8192 4096 4096 NT_STATUS_OK
ReadX 12900 12288 4096 4096 NT_STATUS_OK
ReadX 12900 16384 4096 4096 NT_STATUS_OK
ReadX 12900 20480 4096 4096 NT_STATUS_OK
ReadX 12900 24576 4096 4096 NT_STATUS_OK
ReadX 12900 28672 4096 4096 NT_STATUS_OK
ReadX 12900 32768 4096 4096 NT_STATUS_OK
ReadX 12900 36864 4096 4096 NT_STATUS_OK
ReadX 12900 40960 4096 4096 NT_STATUS_OK
ReadX 12900 45056 4096 4096 NT_STATUS_OK
ReadX 12900 49152 4096 4096 NT_STATUS_OK
ReadX 12900 53248 4096 4096 NT_STATUS_OK
ReadX 12900 57344 4096 4096 NT_STATUS_OK
ReadX 12900 61440 4096 4096 NT_STATUS_OK
ReadX 12900 65536 4096 4096 NT_STATUS_OK
ReadX 12900 69632 4096 4096 NT_STATUS_OK
ReadX 12900 73728 4096 4096 NT_STATUS_OK
ReadX 12900 77824 4096 4096 NT_STATUS_OK
ReadX 12900 81920 4096 4096 NT_STATUS_OK
ReadX 12900 86016 4096 4096 NT_STATUS_OK
ReadX 12900 90112 4096 4096 NT_STATUS_OK
ReadX 12900 94208 4096 4096 NT_STATUS_OK
ReadX 12900 98304 4096 4096 NT_STATUS_OK
ReadX 12900 102400 4096 4096 NT_STATUS_OK
ReadX 12900 106496 4096 4096 NT_STATUS_OK
ReadX 12900 110592 4096 4096 NT_STATUS_OK
ReadX 12900 114688 4096 4096 NT_STATUS_OK
ReadX 12900 118784 4096 4096 NT_STATUS_OK
ReadX 12900 122880 4096 4096 NT_STATUS_OK
ReadX 12900 126976 4096 4096 NT_STATUS_OK
ReadX 12900 131072 4096 4096 NT_STATUS_OK
ReadX 12900 135168 4096 4096 NT_STATUS_OK
ReadX 12900 139264 4096 4096 NT_STATUS_OK
ReadX 12900 143360 4096 4096 NT_STATUS_OK
ReadX 12900 147456 4096 4096 NT_STATUS_OK
ReadX 12900 151552 4096 4096 NT_STATUS_OK
ReadX 12900 155648 4096 4096 NT_STATUS_OK
ReadX 12900 159744 4096 4096 NT_STATUS_OK
ReadX 12900 163840 4096 4096 NT_STATUS_OK
ReadX 12900 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12900 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12901 NT_STATUS_OK
Close 12901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12903 NT_STATUS_OK
WriteX 12903 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
Close 12900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12904 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
Close 12904 NT_STATUS_OK
WriteX 12903 0 42388 42388 NT_STATUS_OK
Close 12903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12907 NT_STATUS_OK
ReadX 12907 0 4096 4096 NT_STATUS_OK
ReadX 12907 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12908 NT_STATUS_OK
WriteX 12908 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12908 258 NT_STATUS_OK
SET_FILE_INFORMATION 12908 1004 NT_STATUS_OK
WriteX 12908 0 42652 42652 NT_STATUS_OK
Close 12908 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12912 NT_STATUS_OK
ReadX 12912 0 4096 4096 NT_STATUS_OK
ReadX 12912 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12914 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12917 NT_STATUS_OK
WriteX 12917 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12917 258 NT_STATUS_OK
WriteX 12917 0 65536 65536 NT_STATUS_OK
WriteX 12917 65536 49 49 NT_STATUS_OK
Close 12917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 61440 61440 NT_STATUS_OK
ReadX 12918 61440 4096 4096 NT_STATUS_OK
ReadX 12918 65536 61440 61440 NT_STATUS_OK
ReadX 12918 126976 4096 4096 NT_STATUS_OK
ReadX 12918 131072 61440 61440 NT_STATUS_OK
ReadX 12918 192512 4096 4096 NT_STATUS_OK
ReadX 12918 196608 61440 61440 NT_STATUS_OK
ReadX 12918 258048 4096 4096 NT_STATUS_OK
ReadX 12918 262144 61440 61440 NT_STATUS_OK
ReadX 12918 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 61440 61440 NT_STATUS_OK
ReadX 12919 61440 4096 4096 NT_STATUS_OK
ReadX 12919 65536 61440 61440 NT_STATUS_OK
ReadX 12919 126976 4096 4096 NT_STATUS_OK
ReadX 12919 131072 61440 61440 NT_STATUS_OK
ReadX 12919 192512 4096 4096 NT_STATUS_OK
ReadX 12919 196608 61440 61440 NT_STATUS_OK
ReadX 12919 258048 4096 4096 NT_STATUS_OK
ReadX 12919 262144 61440 61440 NT_STATUS_OK
ReadX 12919 323584 4096 4096 NT_STATUS_OK
ReadX 12919 327680 61440 61440 NT_STATUS_OK
ReadX 12919 389120 4096 4096 NT_STATUS_OK
ReadX 12919 393216 61440 61440 NT_STATUS_OK
ReadX 12919 454656 4096 4096 NT_STATUS_OK
ReadX 12919 458752 61440 61440 NT_STATUS_OK
ReadX 12919 520192 4096 4096 NT_STATUS_OK
ReadX 12919 524288 61440 61440 NT_STATUS_OK
ReadX 12919 585728 4096 4096 NT_STATUS_OK
ReadX 12919 589824 61440 61440 NT_STATUS_OK
ReadX 12919 651264 4096 4096 NT_STATUS_OK
ReadX 12919 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 61440 61440 NT_STATUS_OK
ReadX 12920 61440 4096 4096 NT_STATUS_OK
ReadX 12920 65536 61440 61440 NT_STATUS_OK
ReadX 12920 126976 4096 4096 NT_STATUS_OK
ReadX 12920 131072 61440 61440 NT_STATUS_OK
ReadX 12920 192512 4096 4096 NT_STATUS_OK
ReadX 12920 196608 61440 61440 NT_STATUS_OK
ReadX 12920 258048 4096 4096 NT_STATUS_OK
ReadX 12920 262144 61440 61440 NT_STATUS_OK
ReadX 12920 323584 4096 4096 NT_STATUS_OK
ReadX 12920 327680 61440 61440 NT_STATUS_OK
ReadX 12920 389120 4096 4096 NT_STATUS_OK
ReadX 12920 393216 61440 61440 NT_STATUS_OK
ReadX 12920 454656 4096 4096 NT_STATUS_OK
ReadX 12920 458752 61440 61440 NT_STATUS_OK
ReadX 12920 520192 4096 4096 NT_STATUS_OK
ReadX 12920 524288 61440 61440 NT_STATUS_OK
ReadX 12920 585728 4096 4096 NT_STATUS_OK
ReadX 12920 589824 61440 61440 NT_STATUS_OK
ReadX 12920 651264 4096 4096 NT_STATUS_OK
ReadX 12920 655360 61440 61440 NT_STATUS_OK
ReadX 12920 716800 4096 4096 NT_STATUS_OK
ReadX 12920 720896 61440 61440 NT_STATUS_OK
ReadX 12920 782336 4096 4096 NT_STATUS_OK
ReadX 12920 786432 61440 61440 NT_STATUS_OK
ReadX 12920 847872 4096 4096 NT_STATUS_OK
ReadX 12920 851968 61440 61440 NT_STATUS_OK
ReadX 12920 913408 4096 4096 NT_STATUS_OK
ReadX 12920 917504 61440 61440 NT_STATUS_OK
ReadX 12920 978944 4096 4096 NT_STATUS_OK
ReadX 12920 983040 61440 61440 NT_STATUS_OK
ReadX 12920 1044480 4096 4096 NT_STATUS_OK
ReadX 12920 1048576 61440 61440 NT_STATUS_OK
ReadX 12920 1110016 4096 4096 NT_STATUS_OK
ReadX 12920 1114112 61440 61440 NT_STATUS_OK
ReadX 12920 1175552 4096 4096 NT_STATUS_OK
ReadX 12920 1179648 61440 61440 NT_STATUS_OK
ReadX 12920 1241088 4096 4096 NT_STATUS_OK
ReadX 12920 1245184 61440 61440 NT_STATUS_OK
ReadX 12920 1306624 4096 4096 NT_STATUS_OK
ReadX 12920 1310720 61440 61440 NT_STATUS_OK
ReadX 12920 1372160 4096 4096 NT_STATUS_OK
ReadX 12920 1376256 61440 61440 NT_STATUS_OK
ReadX 12920 1437696 4096 4096 NT_STATUS_OK
ReadX 12920 1441792 61440 61440 NT_STATUS_OK
ReadX 12920 1503232 4096 4096 NT_STATUS_OK
ReadX 12920 1507328 61440 61440 NT_STATUS_OK
ReadX 12920 1568768 4096 4096 NT_STATUS_OK
ReadX 12920 1572864 61440 61440 NT_STATUS_OK
ReadX 12920 1634304 4096 4096 NT_STATUS_OK
ReadX 12920 1638400 61440 61440 NT_STATUS_OK
ReadX 12920 1699840 4096 4096 NT_STATUS_OK
ReadX 12920 1703936 61440 61440 NT_STATUS_OK
ReadX 12920 1765376 4096 4096 NT_STATUS_OK
ReadX 12920 1769472 61440 61440 NT_STATUS_OK
ReadX 12920 1830912 4096 4096 NT_STATUS_OK
ReadX 12920 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12922 NT_STATUS_OK
QUERY_FILE_INFORMATION 12922 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12922 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12922 1005 NT_STATUS_OK
ReadX 12922 2156 24 24 NT_STATUS_OK
ReadX 12922 2139 276 276 NT_STATUS_OK
ReadX 12922 2136 14 14 NT_STATUS_OK
ReadX 12922 2136 7 7 NT_STATUS_OK
ReadX 12922 2138 12 12 NT_STATUS_OK
ReadX 12922 2137 8 8 NT_STATUS_OK
ReadX 12922 2135 15 15 NT_STATUS_OK
ReadX 12922 0 16 16 NT_STATUS_OK
ReadX 12922 16 2048 2048 NT_STATUS_OK
ReadX 12922 2064 2048 2048 NT_STATUS_OK
ReadX 12922 257 2048 2048 NT_STATUS_OK
ReadX 12922 385 2048 2048 NT_STATUS_OK
ReadX 12922 513 2048 2048 NT_STATUS_OK
ReadX 12922 641 2048 2048 NT_STATUS_OK
ReadX 12922 769 2048 2048 NT_STATUS_OK
ReadX 12922 897 2048 2048 NT_STATUS_OK
ReadX 12922 1025 2048 2048 NT_STATUS_OK
ReadX 12922 1153 2048 2048 NT_STATUS_OK
ReadX 12922 1281 2048 2048 NT_STATUS_OK
ReadX 12922 1409 2048 2048 NT_STATUS_OK
ReadX 12922 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12927 NT_STATUS_OK
WriteX 12927 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
WriteX 12927 0 10575 10575 NT_STATUS_OK
Flush 12927 NT_STATUS_OK
Close 12927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
Close 12922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12932 NT_STATUS_OK
LockX 12932 2147483538 1 NT_STATUS_OK
UnlockX 12932 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12932 1005 NT_STATUS_OK
ReadX 12932 0 512 512 NT_STATUS_OK
ReadX 12932 512 512 512 NT_STATUS_OK
ReadX 12932 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12932 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12932 1004 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12933 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 1005 NT_STATUS_OK
ReadX 12933 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12934 NT_STATUS_OK
LockX 12934 2147483538 1 NT_STATUS_OK
UnlockX 12934 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12934 1005 NT_STATUS_OK
ReadX 12934 0 512 512 NT_STATUS_OK
ReadX 12934 512 512 512 NT_STATUS_OK
ReadX 12934 1024 512 512 NT_STATUS_OK
ReadX 12934 288 20 20 NT_STATUS_OK
ReadX 12934 308 2084 2084 NT_STATUS_OK
ReadX 12934 388 2084 2084 NT_STATUS_OK
ReadX 12934 388 2084 2084 NT_STATUS_OK
ReadX 12921 2157 1386 1386 NT_STATUS_OK
ReadX 12934 2472 399 399 NT_STATUS_OK
ReadX 12934 3072 1536 1536 NT_STATUS_OK
ReadX 12934 544 149 149 NT_STATUS_OK
ReadX 12934 693 485 485 NT_STATUS_OK
Close 12934 NT_STATUS_OK
ReadX 12921 2157 4096 4096 NT_STATUS_OK
ReadX 12921 6253 4096 4096 NT_STATUS_OK
ReadX 12921 10349 4096 4096 NT_STATUS_OK
ReadX 12921 14445 4096 4096 NT_STATUS_OK
ReadX 12921 18541 4096 4096 NT_STATUS_OK
ReadX 12921 22637 256 256 NT_STATUS_OK
ReadX 12921 22893 4096 4096 NT_STATUS_OK
ReadX 12921 26989 4096 4096 NT_STATUS_OK
ReadX 12921 31085 4096 4096 NT_STATUS_OK
ReadX 12921 35181 4096 4096 NT_STATUS_OK
ReadX 12921 39277 4096 4096 NT_STATUS_OK
ReadX 12921 43373 4096 4096 NT_STATUS_OK
ReadX 12921 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12921 2157 1024 1024 NT_STATUS_OK
ReadX 12921 1667 4688 4688 NT_STATUS_OK
ReadX 12921 6355 3516 3516 NT_STATUS_OK
ReadX 12921 9871 16384 16384 NT_STATUS_OK
ReadX 12921 26255 3771 3771 NT_STATUS_OK
ReadX 12921 30026 2048 2048 NT_STATUS_OK
ReadX 12921 32074 1024 1024 NT_STATUS_OK
ReadX 12921 33098 6652 6652 NT_STATUS_OK
ReadX 12921 39750 16384 16384 NT_STATUS_OK
ReadX 12921 56134 10496 10496 NT_STATUS_OK
ReadX 12921 66630 1784 1784 NT_STATUS_OK
ReadX 12921 68414 90 90 NT_STATUS_OK
ReadX 12921 68504 273 273 NT_STATUS_OK
ReadX 12921 68777 1600 1600 NT_STATUS_OK
ReadX 12921 70377 640 640 NT_STATUS_OK
ReadX 12921 71017 1280 1280 NT_STATUS_OK
ReadX 12921 72297 8464 8464 NT_STATUS_OK
ReadX 12921 80761 158 158 NT_STATUS_OK
ReadX 12921 80919 912 912 NT_STATUS_OK
ReadX 12921 81831 1980 1980 NT_STATUS_OK
ReadX 12921 83811 2256 2256 NT_STATUS_OK
ReadX 12921 86067 400 400 NT_STATUS_OK
ReadX 12921 86467 252 252 NT_STATUS_OK
ReadX 12921 86719 42 42 NT_STATUS_OK
ReadX 12921 86761 725 725 NT_STATUS_OK
ReadX 12921 2009 512 512 NT_STATUS_OK
ReadX 12921 3895 9 9 NT_STATUS_OK
ReadX 12921 3781 46 46 NT_STATUS_OK
ReadX 12921 4059 92 92 NT_STATUS_OK
ReadX 12921 3781 92 92 NT_STATUS_OK
ReadX 12921 3986 184 184 NT_STATUS_OK
ReadX 12921 3987 16384 16384 NT_STATUS_OK
ReadX 12921 3902 16384 16384 NT_STATUS_OK
ReadX 12921 3781 10240 10240 NT_STATUS_OK
ReadX 12921 3821 16384 16384 NT_STATUS_OK
ReadX 12921 3891 935 935 NT_STATUS_OK
ReadX 12921 4060 10240 10240 NT_STATUS_OK
ReadX 12921 4059 184 184 NT_STATUS_OK
ReadX 12921 256 184 184 NT_STATUS_OK
ReadX 12921 256 1026 1026 NT_STATUS_OK
ReadX 12921 3901 326 326 NT_STATUS_OK
ReadX 12921 3899 652 652 NT_STATUS_OK
ReadX 12921 256 2 2 NT_STATUS_OK
ReadX 12921 258 4948 4948 NT_STATUS_OK
Close 12921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12936 NT_STATUS_OK
Close 12936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12939 NT_STATUS_OK
WriteX 12939 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12939 258 NT_STATUS_OK
WriteX 12939 0 65536 65536 NT_STATUS_OK
WriteX 12939 65536 65536 65536 NT_STATUS_OK
WriteX 12939 131072 65536 65536 NT_STATUS_OK
WriteX 12939 196608 65536 65536 NT_STATUS_OK
WriteX 12939 262144 65536 65536 NT_STATUS_OK
WriteX 12939 327680 65536 65536 NT_STATUS_OK
WriteX 12939 393216 65536 65536 NT_STATUS_OK
WriteX 12939 458752 65536 65536 NT_STATUS_OK
WriteX 12939 524288 65536 65536 NT_STATUS_OK
WriteX 12939 589824 35257 35257 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12941 NT_STATUS_OK
Close 12941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12944 NT_STATUS_OK
WriteX 12944 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12944 258 NT_STATUS_OK
WriteX 12944 0 65536 65536 NT_STATUS_OK
WriteX 12944 65536 65536 65536 NT_STATUS_OK
WriteX 12944 131072 65536 65536 NT_STATUS_OK
WriteX 12944 196608 65536 65536 NT_STATUS_OK
WriteX 12944 262144 65536 65536 NT_STATUS_OK
WriteX 12944 327680 65536 65536 NT_STATUS_OK
WriteX 12944 393216 65536 65536 NT_STATUS_OK
WriteX 12944 458752 65536 65536 NT_STATUS_OK
WriteX 12944 524288 65536 65536 NT_STATUS_OK
WriteX 12944 589824 57598 57598 NT_STATUS_OK
Close 12944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12946 NT_STATUS_OK
WriteX 12946 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 258 NT_STATUS_OK
WriteX 12946 0 12543 12543 NT_STATUS_OK
Flush 12946 NT_STATUS_OK
Close 12946 NT_STATUS_OK
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12952 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 1005 NT_STATUS_OK
ReadX 12952 1938 24 24 NT_STATUS_OK
ReadX 12952 1920 276 276 NT_STATUS_OK
ReadX 12952 1918 14 14 NT_STATUS_OK
ReadX 12952 1918 7 7 NT_STATUS_OK
ReadX 12952 1919 12 12 NT_STATUS_OK
ReadX 12952 1919 8 8 NT_STATUS_OK
ReadX 12952 1917 15 15 NT_STATUS_OK
ReadX 12952 0 16 16 NT_STATUS_OK
ReadX 12952 16 2048 2048 NT_STATUS_OK
ReadX 12952 2064 2048 2048 NT_STATUS_OK
ReadX 12952 257 2048 2048 NT_STATUS_OK
ReadX 12952 385 2048 2048 NT_STATUS_OK
ReadX 12952 513 2048 2048 NT_STATUS_OK
ReadX 12952 641 2048 2048 NT_STATUS_OK
ReadX 12952 769 2048 2048 NT_STATUS_OK
ReadX 12952 897 2048 2048 NT_STATUS_OK
ReadX 12952 1025 2048 2048 NT_STATUS_OK
ReadX 12952 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12954 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12957 NT_STATUS_OK
WriteX 12957 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12957 258 NT_STATUS_OK
WriteX 12957 0 11588 11588 NT_STATUS_OK
Flush 12957 NT_STATUS_OK
Close 12957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
Close 12952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12962 NT_STATUS_OK
WriteX 12962 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12962 258 NT_STATUS_OK
WriteX 12962 0 11615 11615 NT_STATUS_OK
Flush 12962 NT_STATUS_OK
Close 12962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12964 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12968 NT_STATUS_OK
Close 12968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12971 NT_STATUS_OK
WriteX 12971 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12971 258 NT_STATUS_OK
WriteX 12971 0 65536 65536 NT_STATUS_OK
WriteX 12971 65536 16050 16050 NT_STATUS_OK
Close 12971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12951 1939 64 64 NT_STATUS_OK
ReadX 12951 128 248 248 NT_STATUS_OK
ReadX 12951 128 568 568 NT_STATUS_OK
ReadX 12951 3872 1536 1536 NT_STATUS_OK
ReadX 12951 3456 2560 2560 NT_STATUS_OK
ReadX 12951 3136 512 512 NT_STATUS_OK
ReadX 12951 2880 4096 4096 NT_STATUS_OK
ReadX 12951 3264 3072 3072 NT_STATUS_OK
ReadX 12951 320 4096 4096 NT_STATUS_OK
ReadX 12951 1024 4096 4096 NT_STATUS_OK
ReadX 12951 3616 4096 4096 NT_STATUS_OK
ReadX 12951 1939 64 64 NT_STATUS_OK
ReadX 12951 128 248 248 NT_STATUS_OK
ReadX 12951 128 608 608 NT_STATUS_OK
ReadX 12951 2858 1024 1024 NT_STATUS_OK
ReadX 12951 2810 4096 4096 NT_STATUS_OK
ReadX 12951 2826 4096 4096 NT_STATUS_OK
ReadX 12951 2580 2048 2048 NT_STATUS_OK
ReadX 12951 2800 2560 2560 NT_STATUS_OK
ReadX 12951 2100 4096 4096 NT_STATUS_OK
ReadX 12951 2084 4096 4096 NT_STATUS_OK
ReadX 12951 868 4096 4096 NT_STATUS_OK
ReadX 12951 2324 4096 4096 NT_STATUS_OK
ReadX 12951 884 4096 4096 NT_STATUS_OK
ReadX 12951 2604 1024 1024 NT_STATUS_OK
ReadX 12951 580 4096 4096 NT_STATUS_OK
ReadX 12951 596 4096 4096 NT_STATUS_OK
ReadX 12951 2752 4096 4096 NT_STATUS_OK
ReadX 12951 2842 1024 1024 NT_STATUS_OK
ReadX 12951 660 4096 4096 NT_STATUS_OK
ReadX 12951 2720 4096 4096 NT_STATUS_OK
ReadX 12951 2736 4096 4096 NT_STATUS_OK
ReadX 12951 628 4096 4096 NT_STATUS_OK
ReadX 12951 2704 4096 4096 NT_STATUS_OK
ReadX 12951 1556 4096 4096 NT_STATUS_OK
ReadX 12951 576 4096 4096 NT_STATUS_OK
ReadX 12951 3168 1536 1536 NT_STATUS_OK
ReadX 12951 832 4096 4096 NT_STATUS_OK
ReadX 12951 1088 4096 4096 NT_STATUS_OK
ReadX 12951 1344 4096 4096 NT_STATUS_OK
ReadX 12951 1600 4096 4096 NT_STATUS_OK
ReadX 12951 1856 4096 4096 NT_STATUS_OK
ReadX 12951 2112 4096 4096 NT_STATUS_OK
ReadX 12951 1892 4096 4096 NT_STATUS_OK
ReadX 12951 820 4096 4096 NT_STATUS_OK
ReadX 12951 788 4096 4096 NT_STATUS_OK
ReadX 12951 1604 4096 4096 NT_STATUS_OK
ReadX 12951 3648 4096 4096 NT_STATUS_OK
ReadX 12951 2608 4096 4096 NT_STATUS_OK
ReadX 12951 548 4096 4096 NT_STATUS_OK
ReadX 12951 740 4096 4096 NT_STATUS_OK
ReadX 12951 1344 4096 4096 NT_STATUS_OK
ReadX 12951 3392 4096 4096 NT_STATUS_OK
ReadX 12951 3904 4096 4096 NT_STATUS_OK
ReadX 12951 644 4096 4096 NT_STATUS_OK
ReadX 12951 676 4096 4096 NT_STATUS_OK
ReadX 12951 2688 4096 4096 NT_STATUS_OK
ReadX 12951 320 4096 4096 NT_STATUS_OK
ReadX 12951 900 4096 4096 NT_STATUS_OK
ReadX 12951 1908 4096 4096 NT_STATUS_OK
ReadX 12951 852 4096 4096 NT_STATUS_OK
ReadX 12951 724 4096 4096 NT_STATUS_OK
ReadX 12951 2292 4096 4096 NT_STATUS_OK
ReadX 12951 612 4096 4096 NT_STATUS_OK
ReadX 12951 388 4096 4096 NT_STATUS_OK
ReadX 12951 2368 4096 4096 NT_STATUS_OK
ReadX 12951 2624 4096 4096 NT_STATUS_OK
ReadX 12951 500 4096 4096 NT_STATUS_OK
ReadX 12951 356 4096 4096 NT_STATUS_OK
ReadX 12951 1024 4096 4096 NT_STATUS_OK
ReadX 12951 576 4096 4096 NT_STATUS_OK
ReadX 12951 340 4096 4096 NT_STATUS_OK
ReadX 12951 420 4096 4096 NT_STATUS_OK
ReadX 12951 1600 4096 4096 NT_STATUS_OK
ReadX 12951 404 4096 4096 NT_STATUS_OK
ReadX 12951 1428 4096 4096 NT_STATUS_OK
ReadX 12951 2656 4096 4096 NT_STATUS_OK
ReadX 12951 2624 4096 4096 NT_STATUS_OK
ReadX 12951 452 4096 4096 NT_STATUS_OK
ReadX 12951 692 4096 4096 NT_STATUS_OK
ReadX 12951 564 4096 4096 NT_STATUS_OK
ReadX 12951 372 4096 4096 NT_STATUS_OK
ReadX 12951 468 4096 4096 NT_STATUS_OK
ReadX 12951 484 4096 4096 NT_STATUS_OK
ReadX 12951 1088 4096 4096 NT_STATUS_OK
ReadX 12951 1924 4096 4096 NT_STATUS_OK
ReadX 12951 2768 4096 4096 NT_STATUS_OK
ReadX 12951 832 4096 4096 NT_STATUS_OK
ReadX 12951 836 4096 4096 NT_STATUS_OK
ReadX 12951 1856 4096 4096 NT_STATUS_OK
ReadX 12951 2640 4096 4096 NT_STATUS_OK
ReadX 12951 436 4096 4096 NT_STATUS_OK
ReadX 12951 1828 4096 4096 NT_STATUS_OK
ReadX 12951 804 4096 4096 NT_STATUS_OK
ReadX 12951 1860 4096 4096 NT_STATUS_OK
ReadX 12951 1812 4096 4096 NT_STATUS_OK
ReadX 12951 756 4096 4096 NT_STATUS_OK
ReadX 12951 1636 4096 4096 NT_STATUS_OK
ReadX 12951 772 4096 4096 NT_STATUS_OK
ReadX 12951 2036 4096 4096 NT_STATUS_OK
ReadX 12951 1220 4096 4096 NT_STATUS_OK
ReadX 12951 1652 4096 4096 NT_STATUS_OK
ReadX 12951 2588 4096 4096 NT_STATUS_OK
ReadX 12951 916 4096 4096 NT_STATUS_OK
ReadX 12951 260 4096 4096 NT_STATUS_OK
ReadX 12951 932 4096 4096 NT_STATUS_OK
ReadX 12951 2624 4096 4096 NT_STATUS_OK
ReadX 12951 308 4096 4096 NT_STATUS_OK
ReadX 12951 292 4096 4096 NT_STATUS_OK
ReadX 12951 1140 4096 4096 NT_STATUS_OK
ReadX 12951 276 4096 4096 NT_STATUS_OK
ReadX 12951 2020 4096 4096 NT_STATUS_OK
ReadX 12951 2880 4096 4096 NT_STATUS_OK
ReadX 12951 516 4096 4096 NT_STATUS_OK
ReadX 12951 1844 4096 4096 NT_STATUS_OK
ReadX 12951 1124 4096 4096 NT_STATUS_OK
ReadX 12951 3136 4096 4096 NT_STATUS_OK
ReadX 12951 324 4096 4096 NT_STATUS_OK
ReadX 12951 1156 4096 4096 NT_STATUS_OK
ReadX 12951 1172 4096 4096 NT_STATUS_OK
ReadX 12951 2112 4096 4096 NT_STATUS_OK
ReadX 12951 2368 4096 4096 NT_STATUS_OK
ReadX 12951 964 4096 4096 NT_STATUS_OK
ReadX 12951 980 4096 4096 NT_STATUS_OK
ReadX 12951 1012 4096 4096 NT_STATUS_OK
ReadX 12951 532 4096 4096 NT_STATUS_OK
ReadX 12951 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12951 1620 4096 4096 NT_STATUS_OK
ReadX 12951 1604 4096 4096 NT_STATUS_OK
ReadX 12951 2116 4096 4096 NT_STATUS_OK
ReadX 12951 2132 4096 4096 NT_STATUS_OK
ReadX 12951 2148 4096 4096 NT_STATUS_OK
ReadX 12951 2276 4096 4096 NT_STATUS_OK
ReadX 12951 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12976 NT_STATUS_OK
QUERY_FILE_INFORMATION 12931 1004 NT_STATUS_OK
Close 12931 NT_STATUS_OK
WriteX 12976 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 1004 NT_STATUS_OK
Close 12933 NT_STATUS_OK
WriteX 12976 0 65536 65536 NT_STATUS_OK
WriteX 12976 65536 64850 64850 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12978 NT_STATUS_OK
WriteX 12978 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12978 258 NT_STATUS_OK
ReadX 12951 2068 4096 4096 NT_STATUS_OK
ReadX 12951 1588 4096 4096 NT_STATUS_OK
ReadX 12951 1572 4096 4096 NT_STATUS_OK
WriteX 12978 0 18630 18630 NT_STATUS_OK
Flush 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12980 NT_STATUS_OK
Close 12980 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12951 612 4096 4096 NT_STATUS_OK
ReadX 12951 564 4096 4096 NT_STATUS_OK
ReadX 12951 1876 4096 4096 NT_STATUS_OK
ReadX 12951 628 4096 4096 NT_STATUS_OK
ReadX 12951 740 4096 4096 NT_STATUS_OK
ReadX 12951 724 4096 4096 NT_STATUS_OK
ReadX 12951 644 4096 4096 NT_STATUS_OK
ReadX 12951 2324 4096 4096 NT_STATUS_OK
ReadX 12951 660 4096 4096 NT_STATUS_OK
ReadX 12951 852 4096 4096 NT_STATUS_OK
ReadX 12951 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12951 2368 4096 4096 NT_STATUS_OK
ReadX 12951 1024 4096 4096 NT_STATUS_OK
ReadX 12951 320 4096 4096 NT_STATUS_OK
ReadX 12951 580 4096 4096 NT_STATUS_OK
ReadX 12951 3136 512 512 NT_STATUS_OK
ReadX 12951 2880 4096 4096 NT_STATUS_OK
Close 12951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12983 NT_STATUS_OK
ReadX 12983 61440 4096 4096 NT_STATUS_OK
ReadX 12983 126976 4096 4096 NT_STATUS_OK
WriteX 12983 0 65536 65536 NT_STATUS_OK
WriteX 12983 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12984 NT_STATUS_OK
ReadX 12984 61440 4096 4096 NT_STATUS_OK
ReadX 12984 126976 4096 4096 NT_STATUS_OK
ReadX 12984 192512 4096 4096 NT_STATUS_OK
ReadX 12984 258048 4096 4096 NT_STATUS_OK
WriteX 12984 0 65536 65536 NT_STATUS_OK
WriteX 12984 65536 65536 65536 NT_STATUS_OK
WriteX 12984 131072 65536 65536 NT_STATUS_OK
WriteX 12984 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12985 NT_STATUS_OK
ReadX 12985 61440 4096 4096 NT_STATUS_OK
ReadX 12985 126976 4096 4096 NT_STATUS_OK
ReadX 12985 192512 4096 4096 NT_STATUS_OK
ReadX 12985 258048 4096 4096 NT_STATUS_OK
ReadX 12985 323584 4096 4096 NT_STATUS_OK
ReadX 12985 389120 4096 4096 NT_STATUS_OK
ReadX 12985 454656 4096 4096 NT_STATUS_OK
ReadX 12985 520192 4096 4096 NT_STATUS_OK
WriteX 12985 0 65536 65536 NT_STATUS_OK
WriteX 12985 65536 65536 65536 NT_STATUS_OK
WriteX 12985 131072 65536 65536 NT_STATUS_OK
WriteX 12985 196608 65536 65536 NT_STATUS_OK
WriteX 12985 262144 65536 65536 NT_STATUS_OK
WriteX 12985 327680 65536 65536 NT_STATUS_OK
WriteX 12985 393216 65536 65536 NT_STATUS_OK
WriteX 12985 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12986 NT_STATUS_OK
ReadX 12986 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12987 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12988 NT_STATUS_OK
WriteX 12988 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12988 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12986 0 8192 8192 NT_STATUS_OK
Flush 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12986 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12986 0 8192 8192 NT_STATUS_OK
Flush 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12986 0 8192 8192 NT_STATUS_OK
Flush 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12986 0 8192 8192 NT_STATUS_OK
Flush 12986 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12990 NT_STATUS_OK
Close 12990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Close 12983 NT_STATUS_OK
Close 12984 NT_STATUS_OK
Close 12985 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12993 NT_STATUS_OK
WriteX 12993 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12993 258 NT_STATUS_OK
WriteX 12993 0 62591 62591 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 10845 10845 NT_STATUS_OK
Close 12998 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13003 NT_STATUS_OK
WriteX 13003 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13003 258 NT_STATUS_OK
WriteX 13003 0 30118 30118 NT_STATUS_OK
Close 13003 NT_STATUS_OK
WriteX 12986 0 4096 4096 NT_STATUS_OK
WriteX 12988 0 64 64 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12986 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13005 NT_STATUS_OK
ReadX 13005 0 61440 61440 NT_STATUS_OK
ReadX 13005 61440 4096 4096 NT_STATUS_OK
ReadX 13005 65536 61440 61440 NT_STATUS_OK
ReadX 13005 126976 4096 4096 NT_STATUS_OK
ReadX 13005 131072 61440 61440 NT_STATUS_OK
ReadX 13005 192512 4096 4096 NT_STATUS_OK
ReadX 13005 196608 61440 61440 NT_STATUS_OK
ReadX 13005 258048 4096 4096 NT_STATUS_OK
ReadX 13005 262144 61440 61440 NT_STATUS_OK
ReadX 13005 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 61440 61440 NT_STATUS_OK
ReadX 13006 61440 4096 4096 NT_STATUS_OK
ReadX 13006 65536 61440 61440 NT_STATUS_OK
ReadX 13006 126976 4096 4096 NT_STATUS_OK
ReadX 13006 131072 61440 61440 NT_STATUS_OK
ReadX 13006 192512 4096 4096 NT_STATUS_OK
ReadX 13006 196608 61440 61440 NT_STATUS_OK
ReadX 13006 258048 4096 4096 NT_STATUS_OK
ReadX 13006 262144 61440 61440 NT_STATUS_OK
ReadX 13006 323584 4096 4096 NT_STATUS_OK
ReadX 13006 327680 61440 61440 NT_STATUS_OK
ReadX 13006 389120 4096 4096 NT_STATUS_OK
ReadX 13006 393216 61440 61440 NT_STATUS_OK
ReadX 13006 454656 4096 4096 NT_STATUS_OK
ReadX 13006 458752 61440 61440 NT_STATUS_OK
ReadX 13006 520192 4096 4096 NT_STATUS_OK
ReadX 13006 524288 61440 61440 NT_STATUS_OK
ReadX 13006 585728 4096 4096 NT_STATUS_OK
ReadX 13006 589824 61440 61440 NT_STATUS_OK
ReadX 13006 651264 4096 4096 NT_STATUS_OK
ReadX 13006 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 61440 61440 NT_STATUS_OK
ReadX 13007 61440 4096 4096 NT_STATUS_OK
ReadX 13007 65536 61440 61440 NT_STATUS_OK
ReadX 13007 126976 4096 4096 NT_STATUS_OK
ReadX 13007 131072 61440 61440 NT_STATUS_OK
ReadX 13007 192512 4096 4096 NT_STATUS_OK
ReadX 13007 196608 61440 61440 NT_STATUS_OK
ReadX 13007 258048 4096 4096 NT_STATUS_OK
ReadX 13007 262144 61440 61440 NT_STATUS_OK
ReadX 13007 323584 4096 4096 NT_STATUS_OK
ReadX 13007 327680 61440 61440 NT_STATUS_OK
ReadX 13007 389120 4096 4096 NT_STATUS_OK
ReadX 13007 393216 61440 61440 NT_STATUS_OK
ReadX 13007 454656 4096 4096 NT_STATUS_OK
ReadX 13007 458752 61440 61440 NT_STATUS_OK
ReadX 13007 520192 4096 4096 NT_STATUS_OK
ReadX 13007 524288 61440 61440 NT_STATUS_OK
ReadX 13007 585728 4096 4096 NT_STATUS_OK
ReadX 13007 589824 61440 61440 NT_STATUS_OK
ReadX 13007 651264 4096 4096 NT_STATUS_OK
ReadX 13007 655360 61440 61440 NT_STATUS_OK
ReadX 13007 716800 4096 4096 NT_STATUS_OK
ReadX 13007 720896 61440 61440 NT_STATUS_OK
ReadX 13007 782336 4096 4096 NT_STATUS_OK
ReadX 13007 786432 61440 61440 NT_STATUS_OK
ReadX 13007 847872 4096 4096 NT_STATUS_OK
ReadX 13007 851968 61440 61440 NT_STATUS_OK
ReadX 13007 913408 4096 4096 NT_STATUS_OK
ReadX 13007 917504 61440 61440 NT_STATUS_OK
ReadX 13007 978944 4096 4096 NT_STATUS_OK
ReadX 13007 983040 61440 61440 NT_STATUS_OK
ReadX 13007 1044480 4096 4096 NT_STATUS_OK
ReadX 13007 1048576 61440 61440 NT_STATUS_OK
ReadX 13007 1110016 4096 4096 NT_STATUS_OK
ReadX 13007 1114112 61440 61440 NT_STATUS_OK
ReadX 13007 1175552 4096 4096 NT_STATUS_OK
ReadX 13007 1179648 61440 61440 NT_STATUS_OK
ReadX 13007 1241088 4096 4096 NT_STATUS_OK
ReadX 13007 1245184 61440 61440 NT_STATUS_OK
ReadX 13007 1306624 4096 4096 NT_STATUS_OK
ReadX 13007 1310720 61440 61440 NT_STATUS_OK
ReadX 13007 1372160 4096 4096 NT_STATUS_OK
ReadX 13007 1376256 61440 61440 NT_STATUS_OK
ReadX 13007 1437696 4096 4096 NT_STATUS_OK
ReadX 13007 1441792 61440 61440 NT_STATUS_OK
ReadX 13007 1503232 4096 4096 NT_STATUS_OK
ReadX 13007 1507328 61440 61440 NT_STATUS_OK
ReadX 13007 1568768 4096 4096 NT_STATUS_OK
ReadX 13007 1572864 61440 61440 NT_STATUS_OK
ReadX 13007 1634304 4096 4096 NT_STATUS_OK
ReadX 13007 1638400 61440 61440 NT_STATUS_OK
ReadX 13007 1699840 4096 4096 NT_STATUS_OK
ReadX 13007 1703936 61440 61440 NT_STATUS_OK
ReadX 13007 1765376 4096 4096 NT_STATUS_OK
ReadX 13007 1769472 61440 61440 NT_STATUS_OK
ReadX 13007 1830912 4096 4096 NT_STATUS_OK
ReadX 13007 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13005 NT_STATUS_OK
Close 13006 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
ReadX 13012 4096 4096 4096 NT_STATUS_OK
ReadX 13012 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13016 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13015 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13020 NT_STATUS_OK
ReadX 13020 0 8192 8192 NT_STATUS_OK
ReadX 13020 8192 8192 8192 NT_STATUS_OK
ReadX 13020 16384 8192 8192 NT_STATUS_OK
ReadX 13020 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13022 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13020 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13025 NT_STATUS_OK
WriteX 13025 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13025 258 NT_STATUS_OK
WriteX 13025 0 10438 10438 NT_STATUS_OK
Close 13025 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13029 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13030 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13031 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13034 NT_STATUS_OK
ReadX 13034 0 4096 4096 NT_STATUS_OK
ReadX 13034 4096 4096 4096 NT_STATUS_OK
ReadX 13034 8192 4096 4096 NT_STATUS_OK
ReadX 13034 12288 8192 8192 NT_STATUS_OK
ReadX 13034 20480 8192 8192 NT_STATUS_OK
ReadX 13034 28672 8192 8192 NT_STATUS_OK
ReadX 13034 36864 8192 8192 NT_STATUS_OK
ReadX 13034 45056 8192 8192 NT_STATUS_OK
ReadX 13034 53248 8192 8192 NT_STATUS_OK
ReadX 13034 61440 8192 8192 NT_STATUS_OK
ReadX 13034 69632 8192 8192 NT_STATUS_OK
ReadX 13034 77824 8192 8192 NT_STATUS_OK
ReadX 13034 86016 8192 8192 NT_STATUS_OK
ReadX 13034 94208 8192 8192 NT_STATUS_OK
ReadX 13034 102400 8192 8192 NT_STATUS_OK
ReadX 13034 110592 8192 8192 NT_STATUS_OK
ReadX 13034 118784 8192 8192 NT_STATUS_OK
ReadX 13034 126976 8192 8192 NT_STATUS_OK
ReadX 13034 135168 8192 8192 NT_STATUS_OK
ReadX 13034 143360 8192 8192 NT_STATUS_OK
ReadX 13034 151552 8192 8192 NT_STATUS_OK
ReadX 13034 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13034 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13036 NT_STATUS_OK
Close 13036 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13039 NT_STATUS_OK
WriteX 13039 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13039 258 NT_STATUS_OK
WriteX 13039 0 28489 28489 NT_STATUS_OK
Close 13039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13040 NT_STATUS_OK
Close 13040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13042 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13045 NT_STATUS_OK
ReadX 13045 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 8192 8192 NT_STATUS_OK
ReadX 13046 8192 8192 8192 NT_STATUS_OK
ReadX 13046 16384 8192 8192 NT_STATUS_OK
ReadX 13046 24576 8192 8192 NT_STATUS_OK
ReadX 13046 32768 16384 16384 NT_STATUS_OK
ReadX 13046 49152 8192 8192 NT_STATUS_OK
ReadX 13046 57344 8192 8192 NT_STATUS_OK
ReadX 13046 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13048 NT_STATUS_OK
Close 13048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13051 NT_STATUS_OK
WriteX 13051 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 258 NT_STATUS_OK
WriteX 13051 0 29253 29253 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13052 NT_STATUS_OK
Close 13052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13058 NT_STATUS_OK
WriteX 13058 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13058 258 NT_STATUS_OK
WriteX 13058 0 30183 30183 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13061 NT_STATUS_OK
WriteX 13061 0 510 510 NT_STATUS_OK
WriteX 13061 510 512 512 NT_STATUS_OK
WriteX 13061 1022 510 510 NT_STATUS_OK
WriteX 13061 1532 510 510 NT_STATUS_OK
WriteX 13061 2042 168 168 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13062 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 61440 4096 4096 NT_STATUS_OK
ReadX 13065 126976 4096 4096 NT_STATUS_OK
WriteX 13065 0 65536 65536 NT_STATUS_OK
WriteX 13065 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 61440 4096 4096 NT_STATUS_OK
ReadX 13066 126976 4096 4096 NT_STATUS_OK
ReadX 13066 192512 4096 4096 NT_STATUS_OK
ReadX 13066 258048 4096 4096 NT_STATUS_OK
WriteX 13066 0 65536 65536 NT_STATUS_OK
WriteX 13066 65536 65536 65536 NT_STATUS_OK
WriteX 13066 131072 65536 65536 NT_STATUS_OK
WriteX 13066 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 61440 4096 4096 NT_STATUS_OK
ReadX 13067 126976 4096 4096 NT_STATUS_OK
ReadX 13067 192512 4096 4096 NT_STATUS_OK
ReadX 13067 258048 4096 4096 NT_STATUS_OK
ReadX 13067 323584 4096 4096 NT_STATUS_OK
ReadX 13067 389120 4096 4096 NT_STATUS_OK
ReadX 13067 454656 4096 4096 NT_STATUS_OK
ReadX 13067 520192 4096 4096 NT_STATUS_OK
WriteX 13067 0 65536 65536 NT_STATUS_OK
WriteX 13067 65536 65536 65536 NT_STATUS_OK
WriteX 13067 131072 65536 65536 NT_STATUS_OK
WriteX 13067 196608 65536 65536 NT_STATUS_OK
WriteX 13067 262144 65536 65536 NT_STATUS_OK
WriteX 13067 327680 65536 65536 NT_STATUS_OK
WriteX 13067 393216 65536 65536 NT_STATUS_OK
WriteX 13067 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13068 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13064 NT_STATUS_OK
Close 13065 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13074 NT_STATUS_OK
Close 13074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13122 NT_STATUS_OK
Close 13122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13133 NT_STATUS_OK
Close 13133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13136 NT_STATUS_OK
WriteX 13136 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13136 0 65536 65536 NT_STATUS_OK
WriteX 13136 65536 65536 65536 NT_STATUS_OK
WriteX 13136 131072 65536 65536 NT_STATUS_OK
WriteX 13136 196608 65536 65536 NT_STATUS_OK
WriteX 13136 262144 26634 26634 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
Close 13143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
ReadX 13144 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13158 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13163 NT_STATUS_OK
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13172 NT_STATUS_OK
Close 13172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13182 NT_STATUS_OK
Close 13182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13201 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13206 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13209 NT_STATUS_OK
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13222 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
Close 13223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
Close 13224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13235 NT_STATUS_OK
Close 13235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13268 0 4096 4096 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13270 NT_STATUS_OK
ReadX 13270 0 4096 4096 NT_STATUS_OK
ReadX 13270 4096 4096 4096 NT_STATUS_OK
ReadX 13270 8192 4096 4096 NT_STATUS_OK
ReadX 13270 12288 4096 4096 NT_STATUS_OK
ReadX 13270 16384 4096 4096 NT_STATUS_OK
ReadX 13270 20480 4096 4096 NT_STATUS_OK
ReadX 13270 24576 4096 4096 NT_STATUS_OK
ReadX 13270 28672 4096 4096 NT_STATUS_OK
ReadX 13270 32768 4096 4096 NT_STATUS_OK
ReadX 13270 36864 4096 4096 NT_STATUS_OK
ReadX 13270 40960 4096 4096 NT_STATUS_OK
ReadX 13270 45056 4096 4096 NT_STATUS_OK
ReadX 13270 49152 4096 4096 NT_STATUS_OK
ReadX 13270 53248 4096 4096 NT_STATUS_OK
ReadX 13270 57344 4096 4096 NT_STATUS_OK
ReadX 13270 61440 4096 4096 NT_STATUS_OK
ReadX 13270 65536 4096 4096 NT_STATUS_OK
ReadX 13270 69632 4096 4096 NT_STATUS_OK
ReadX 13270 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13270 1004 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13271 NT_STATUS_OK
SET_FILE_INFORMATION 13271 1004 NT_STATUS_OK
Close 13271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13273 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13276 NT_STATUS_OK
WriteX 13276 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13276 258 NT_STATUS_OK
WriteX 13276 0 65536 65536 NT_STATUS_OK
WriteX 13276 65536 19979 19979 NT_STATUS_OK
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
QUERY_FILE_INFORMATION 13277 1004 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
SET_FILE_INFORMATION 13277 1004 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
Close 13280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
Close 13281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13282 1004 NT_STATUS_OK
WriteX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13285 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13288 NT_STATUS_OK
WriteX 13288 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13288 258 NT_STATUS_OK
WriteX 13288 0 65536 65536 NT_STATUS_OK
WriteX 13288 65536 17654 17654 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
Flush 13289 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
Flush 13289 NT_STATUS_OK
QUERY_FILE_INFORMATION 13289 1004 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
Flush 13289 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
Flush 13289 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
Flush 13289 NT_STATUS_OK
SET_FILE_INFORMATION 13289 1004 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
Flush 13289 NT_STATUS_OK
Close 13289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13290 NT_STATUS_OK
SET_FILE_INFORMATION 13290 1004 NT_STATUS_OK
Close 13290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13292 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
ReadX 13294 4096 4096 4096 NT_STATUS_OK
ReadX 13294 8192 4096 4096 NT_STATUS_OK
ReadX 13294 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13294 16384 4096 4096 NT_STATUS_OK
ReadX 13294 20480 4096 4096 NT_STATUS_OK
ReadX 13294 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 4096 4096 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13297 1004 NT_STATUS_OK
WriteX 13297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13298 NT_STATUS_OK
Close 13298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13300 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13303 NT_STATUS_OK
WriteX 13303 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
WriteX 13303 0 65536 65536 NT_STATUS_OK
WriteX 13303 65536 19490 19490 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
QUERY_FILE_INFORMATION 13304 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
SET_FILE_INFORMATION 13304 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13305 NT_STATUS_OK
SET_FILE_INFORMATION 13305 1004 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13309 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13309 0 4096 4096 NT_STATUS_OK
Close 13309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
ReadX 13311 4096 4096 4096 NT_STATUS_OK
ReadX 13311 8192 4096 4096 NT_STATUS_OK
ReadX 13311 12288 4096 4096 NT_STATUS_OK
ReadX 13311 16384 4096 4096 NT_STATUS_OK
ReadX 13311 20480 4096 4096 NT_STATUS_OK
ReadX 13311 24576 4096 4096 NT_STATUS_OK
ReadX 13311 28672 4096 4096 NT_STATUS_OK
ReadX 13311 32768 4096 4096 NT_STATUS_OK
ReadX 13311 36864 4096 4096 NT_STATUS_OK
ReadX 13311 40960 4096 4096 NT_STATUS_OK
ReadX 13311 45056 4096 4096 NT_STATUS_OK
ReadX 13311 49152 4096 4096 NT_STATUS_OK
ReadX 13311 53248 4096 4096 NT_STATUS_OK
ReadX 13311 57344 4096 4096 NT_STATUS_OK
ReadX 13311 61440 4096 4096 NT_STATUS_OK
ReadX 13311 65536 4096 4096 NT_STATUS_OK
ReadX 13311 69632 4096 4096 NT_STATUS_OK
ReadX 13311 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13311 1004 NT_STATUS_OK
WriteX 13311 0 4096 4096 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13312 NT_STATUS_OK
SET_FILE_INFORMATION 13312 1004 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13317 NT_STATUS_OK
WriteX 13317 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13317 258 NT_STATUS_OK
WriteX 13317 0 65536 65536 NT_STATUS_OK
WriteX 13317 65536 8866 8866 NT_STATUS_OK
Close 13317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
WriteX 13318 0 4096 4096 NT_STATUS_OK
Flush 13318 NT_STATUS_OK
SET_FILE_INFORMATION 13318 1004 NT_STATUS_OK
WriteX 13318 0 4096 4096 NT_STATUS_OK
Flush 13318 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13322 1004 NT_STATUS_OK
WriteX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13323 NT_STATUS_OK
Close 13323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13328 NT_STATUS_OK
WriteX 13328 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 258 NT_STATUS_OK
WriteX 13328 0 65536 65536 NT_STATUS_OK
WriteX 13328 65536 9298 9298 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
SET_FILE_INFORMATION 13329 1004 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13330 NT_STATUS_OK
SET_FILE_INFORMATION 13330 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 0 4096 4096 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13336 4096 4096 4096 NT_STATUS_OK
ReadX 13336 8192 4096 4096 NT_STATUS_OK
ReadX 13336 12288 4096 4096 NT_STATUS_OK
ReadX 13336 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 4096 4096 NT_STATUS_OK
Close 13338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
WriteX 13339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Close 13339 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13342 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13345 NT_STATUS_OK
WriteX 13345 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13345 258 NT_STATUS_OK
WriteX 13345 0 65536 65536 NT_STATUS_OK
WriteX 13345 65536 11540 11540 NT_STATUS_OK
Close 13345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Flush 13346 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Flush 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13347 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
Close 13347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 61440 4096 4096 NT_STATUS_OK
ReadX 13351 126976 4096 4096 NT_STATUS_OK
WriteX 13351 0 65536 65536 NT_STATUS_OK
WriteX 13351 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 61440 4096 4096 NT_STATUS_OK
ReadX 13352 126976 4096 4096 NT_STATUS_OK
ReadX 13352 192512 4096 4096 NT_STATUS_OK
ReadX 13352 258048 4096 4096 NT_STATUS_OK
WriteX 13352 0 65536 65536 NT_STATUS_OK
WriteX 13352 65536 65536 65536 NT_STATUS_OK
WriteX 13352 131072 65536 65536 NT_STATUS_OK
WriteX 13352 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 61440 4096 4096 NT_STATUS_OK
ReadX 13353 126976 4096 4096 NT_STATUS_OK
ReadX 13353 192512 4096 4096 NT_STATUS_OK
ReadX 13353 258048 4096 4096 NT_STATUS_OK
ReadX 13353 323584 4096 4096 NT_STATUS_OK
ReadX 13353 389120 4096 4096 NT_STATUS_OK
ReadX 13353 454656 4096 4096 NT_STATUS_OK
ReadX 13353 520192 4096 4096 NT_STATUS_OK
WriteX 13353 0 65536 65536 NT_STATUS_OK
WriteX 13353 65536 65536 65536 NT_STATUS_OK
WriteX 13353 131072 65536 65536 NT_STATUS_OK
WriteX 13353 196608 65536 65536 NT_STATUS_OK
WriteX 13353 262144 65536 65536 NT_STATUS_OK
WriteX 13353 327680 65536 65536 NT_STATUS_OK
WriteX 13353 393216 65536 65536 NT_STATUS_OK
WriteX 13353 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
ReadX 13354 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13355 NT_STATUS_OK
WriteX 13355 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13355 258 NT_STATUS_OK
WriteX 13355 0 53 53 NT_STATUS_OK
Close 13355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13354 8192 4096 4096 NT_STATUS_OK
ReadX 13354 12288 4096 4096 NT_STATUS_OK
WriteX 13358 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13358 258 NT_STATUS_OK
ReadX 13354 16384 4096 4096 NT_STATUS_OK
ReadX 13354 20480 4096 4096 NT_STATUS_OK
WriteX 13358 0 15360 15360 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13359 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13359 1004 NT_STATUS_OK
WriteX 13359 0 4096 4096 NT_STATUS_OK
Close 13359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13360 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13362 4096 4096 4096 NT_STATUS_OK
ReadX 13362 8192 4096 4096 NT_STATUS_OK
ReadX 13362 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
ReadX 13365 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
ReadX 13366 4096 4096 4096 NT_STATUS_OK
ReadX 13366 8192 4096 4096 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13367 NT_STATUS_OK
WriteX 13367 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 258 NT_STATUS_OK
WriteX 13367 0 15360 15360 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13368 NT_STATUS_OK
ReadX 13368 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13369 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13372 NT_STATUS_OK
SET_FILE_INFORMATION 13372 1004 NT_STATUS_OK
Close 13372 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13373 NT_STATUS_OK
Close 13373 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 4096 4096 NT_STATUS_OK
ReadX 13375 4096 4096 4096 NT_STATUS_OK
ReadX 13375 8192 4096 4096 NT_STATUS_OK
ReadX 13375 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13375 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13375 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13376 NT_STATUS_OK
ReadX 13376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13377 NT_STATUS_OK
WriteX 13377 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13377 258 NT_STATUS_OK
WriteX 13377 0 53 53 NT_STATUS_OK
Close 13377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13376 4096 4096 4096 NT_STATUS_OK
ReadX 13376 8192 4096 4096 NT_STATUS_OK
ReadX 13376 12288 4096 4096 NT_STATUS_OK
WriteX 13380 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13380 258 NT_STATUS_OK
WriteX 13380 0 12006 12006 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
Close 13381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13382 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13385 NT_STATUS_OK
Close 13385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13384 4096 4096 4096 NT_STATUS_OK
ReadX 13384 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13387 NT_STATUS_OK
WriteX 13387 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13387 258 NT_STATUS_OK
WriteX 13387 0 11991 11991 NT_STATUS_OK
Close 13387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13388 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13388 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13389 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13392 NT_STATUS_OK
SET_FILE_INFORMATION 13392 1004 NT_STATUS_OK
Close 13392 NT_STATUS_OK
WriteX 13388 0 4096 4096 NT_STATUS_OK
Close 13388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13393 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13395 NT_STATUS_OK
ReadX 13395 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13395 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13395 1004 NT_STATUS_OK
ReadX 13395 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13395 1004 NT_STATUS_OK
WriteX 13395 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13395 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13395 1004 NT_STATUS_OK
Close 13371 NT_STATUS_OK
WriteX 13375 0 19054 19054 NT_STATUS_OK
WriteX 13395 0 12288 12288 NT_STATUS_OK
Close 13391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13398 NT_STATUS_OK
Close 13398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13375 NT_STATUS_OK
Close 13395 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 61440 61440 NT_STATUS_OK
ReadX 13402 61440 4096 4096 NT_STATUS_OK
ReadX 13402 65536 61440 61440 NT_STATUS_OK
ReadX 13402 126976 4096 4096 NT_STATUS_OK
ReadX 13402 131072 61440 61440 NT_STATUS_OK
ReadX 13402 192512 4096 4096 NT_STATUS_OK
ReadX 13402 196608 61440 61440 NT_STATUS_OK
ReadX 13402 258048 4096 4096 NT_STATUS_OK
ReadX 13402 262144 61440 61440 NT_STATUS_OK
ReadX 13402 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13403 NT_STATUS_OK
ReadX 13403 0 61440 61440 NT_STATUS_OK
ReadX 13403 61440 4096 4096 NT_STATUS_OK
ReadX 13403 65536 61440 61440 NT_STATUS_OK
ReadX 13403 126976 4096 4096 NT_STATUS_OK
ReadX 13403 131072 61440 61440 NT_STATUS_OK
ReadX 13403 192512 4096 4096 NT_STATUS_OK
ReadX 13403 196608 61440 61440 NT_STATUS_OK
ReadX 13403 258048 4096 4096 NT_STATUS_OK
ReadX 13403 262144 61440 61440 NT_STATUS_OK
ReadX 13403 323584 4096 4096 NT_STATUS_OK
ReadX 13403 327680 61440 61440 NT_STATUS_OK
ReadX 13403 389120 4096 4096 NT_STATUS_OK
ReadX 13403 393216 61440 61440 NT_STATUS_OK
ReadX 13403 454656 4096 4096 NT_STATUS_OK
ReadX 13403 458752 61440 61440 NT_STATUS_OK
ReadX 13403 520192 4096 4096 NT_STATUS_OK
ReadX 13403 524288 61440 61440 NT_STATUS_OK
ReadX 13403 585728 4096 4096 NT_STATUS_OK
ReadX 13403 589824 61440 61440 NT_STATUS_OK
ReadX 13403 651264 4096 4096 NT_STATUS_OK
ReadX 13403 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13404 NT_STATUS_OK
ReadX 13404 0 61440 61440 NT_STATUS_OK
ReadX 13404 61440 4096 4096 NT_STATUS_OK
ReadX 13404 65536 61440 61440 NT_STATUS_OK
ReadX 13404 126976 4096 4096 NT_STATUS_OK
ReadX 13404 131072 61440 61440 NT_STATUS_OK
ReadX 13404 192512 4096 4096 NT_STATUS_OK
ReadX 13404 196608 61440 61440 NT_STATUS_OK
ReadX 13404 258048 4096 4096 NT_STATUS_OK
ReadX 13404 262144 61440 61440 NT_STATUS_OK
ReadX 13404 323584 4096 4096 NT_STATUS_OK
ReadX 13404 327680 61440 61440 NT_STATUS_OK
ReadX 13404 389120 4096 4096 NT_STATUS_OK
ReadX 13404 393216 61440 61440 NT_STATUS_OK
ReadX 13404 454656 4096 4096 NT_STATUS_OK
ReadX 13404 458752 61440 61440 NT_STATUS_OK
ReadX 13404 520192 4096 4096 NT_STATUS_OK
ReadX 13404 524288 61440 61440 NT_STATUS_OK
ReadX 13404 585728 4096 4096 NT_STATUS_OK
ReadX 13404 589824 61440 61440 NT_STATUS_OK
ReadX 13404 651264 4096 4096 NT_STATUS_OK
ReadX 13404 655360 61440 61440 NT_STATUS_OK
ReadX 13404 716800 4096 4096 NT_STATUS_OK
ReadX 13404 720896 61440 61440 NT_STATUS_OK
ReadX 13404 782336 4096 4096 NT_STATUS_OK
ReadX 13404 786432 61440 61440 NT_STATUS_OK
ReadX 13404 847872 4096 4096 NT_STATUS_OK
ReadX 13404 851968 61440 61440 NT_STATUS_OK
ReadX 13404 913408 4096 4096 NT_STATUS_OK
ReadX 13404 917504 61440 61440 NT_STATUS_OK
ReadX 13404 978944 4096 4096 NT_STATUS_OK
ReadX 13404 983040 61440 61440 NT_STATUS_OK
ReadX 13404 1044480 4096 4096 NT_STATUS_OK
ReadX 13404 1048576 61440 61440 NT_STATUS_OK
ReadX 13404 1110016 4096 4096 NT_STATUS_OK
ReadX 13404 1114112 61440 61440 NT_STATUS_OK
ReadX 13404 1175552 4096 4096 NT_STATUS_OK
ReadX 13404 1179648 61440 61440 NT_STATUS_OK
ReadX 13404 1241088 4096 4096 NT_STATUS_OK
ReadX 13404 1245184 61440 61440 NT_STATUS_OK
ReadX 13404 1306624 4096 4096 NT_STATUS_OK
ReadX 13404 1310720 61440 61440 NT_STATUS_OK
ReadX 13404 1372160 4096 4096 NT_STATUS_OK
ReadX 13404 1376256 61440 61440 NT_STATUS_OK
ReadX 13404 1437696 4096 4096 NT_STATUS_OK
ReadX 13404 1441792 61440 61440 NT_STATUS_OK
ReadX 13404 1503232 4096 4096 NT_STATUS_OK
ReadX 13404 1507328 61440 61440 NT_STATUS_OK
ReadX 13404 1568768 4096 4096 NT_STATUS_OK
ReadX 13404 1572864 61440 61440 NT_STATUS_OK
ReadX 13404 1634304 4096 4096 NT_STATUS_OK
ReadX 13404 1638400 61440 61440 NT_STATUS_OK
ReadX 13404 1699840 4096 4096 NT_STATUS_OK
ReadX 13404 1703936 61440 61440 NT_STATUS_OK
ReadX 13404 1765376 4096 4096 NT_STATUS_OK
ReadX 13404 1769472 61440 61440 NT_STATUS_OK
ReadX 13404 1830912 4096 4096 NT_STATUS_OK
ReadX 13404 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13407 NT_STATUS_OK
ReadX 13407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13410 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13411 NT_STATUS_OK
QUERY_FILE_INFORMATION 13411 1004 NT_STATUS_OK
WriteX 13411 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13411 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13413 NT_STATUS_OK
WriteX 13413 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 258 NT_STATUS_OK
WriteX 13413 0 491 491 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13411 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13416 NT_STATUS_OK
Close 13416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13417 NT_STATUS_OK
WriteX 13417 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13417 258 NT_STATUS_OK
WriteX 13417 0 543 543 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Close 13403 NT_STATUS_OK
Close 13404 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13406 NT_STATUS_OK
Close 13407 NT_STATUS_OK
Close 13408 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13421 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13431 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 258 NT_STATUS_OK
WriteX 13431 0 2048 2048 NT_STATUS_OK
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13432 0 4096 4096 NT_STATUS_OK
Flush 13432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13436 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13437 NT_STATUS_OK
WriteX 13437 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13437 258 NT_STATUS_OK
WriteX 13437 0 2048 2048 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13443 NT_STATUS_OK
WriteX 13443 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13443 258 NT_STATUS_OK
WriteX 13443 0 2048 2048 NT_STATUS_OK
Close 13443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 2048 2048 NT_STATUS_OK
ReadX 13422 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13426 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13438 0 4096 4096 NT_STATUS_OK
WriteX 13422 0 8192 8192 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
WriteX 13424 0 4096 4096 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13448 NT_STATUS_OK
QUERY_FILE_INFORMATION 13448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13460 NT_STATUS_OK
ReadX 13460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13461 NT_STATUS_OK
ReadX 13461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13468 NT_STATUS_OK
QUERY_FILE_INFORMATION 13468 1004 NT_STATUS_OK
WriteX 13468 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13468 258 NT_STATUS_OK
WriteX 13468 0 2048 2048 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13470 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13476 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 1004 NT_STATUS_OK
WriteX 13476 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 258 NT_STATUS_OK
WriteX 13476 0 2048 2048 NT_STATUS_OK
Close 13476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13469 0 4096 4096 NT_STATUS_OK
Flush 13469 NT_STATUS_OK
WriteX 13477 0 4096 4096 NT_STATUS_OK
Flush 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13477 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13471 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13478 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13479 NT_STATUS_OK
WriteX 13479 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Close 13479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13482 NT_STATUS_OK
WriteX 13482 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 258 NT_STATUS_OK
WriteX 13482 0 4096 4096 NT_STATUS_OK
Close 13482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13483 0 4096 4096 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13460 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13489 NT_STATUS_OK
Close 13489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13490 NT_STATUS_OK
WriteX 13490 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 258 NT_STATUS_OK
WriteX 13490 0 2048 2048 NT_STATUS_OK
Close 13490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13492 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13505 NT_STATUS_OK
QUERY_FILE_INFORMATION 13505 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13495 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13507 NT_STATUS_OK
QUERY_FILE_INFORMATION 13507 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13512 NT_STATUS_OK
ReadX 13512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13513 NT_STATUS_OK
ReadX 13513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13520 NT_STATUS_OK
ReadX 13520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13527 NT_STATUS_OK
QUERY_FILE_INFORMATION 13527 1004 NT_STATUS_OK
WriteX 13527 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13527 258 NT_STATUS_OK
WriteX 13527 0 2048 2048 NT_STATUS_OK
Close 13527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13539 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 1004 NT_STATUS_OK
WriteX 13539 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
WriteX 13539 0 2048 2048 NT_STATUS_OK
Close 13539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13542 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13547 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1004 NT_STATUS_OK
WriteX 13547 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 258 NT_STATUS_OK
WriteX 13547 0 2048 2048 NT_STATUS_OK
Close 13547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13528 0 4096 4096 NT_STATUS_OK
Flush 13528 NT_STATUS_OK
WriteX 13540 0 4096 4096 NT_STATUS_OK
Flush 13540 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
Flush 13548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13540 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13530 4096 16384 16384 NT_STATUS_OK
ReadX 13510 4096 16384 16384 NT_STATUS_OK
ReadX 13542 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 2048 2048 NT_STATUS_OK
WriteX 13550 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13551 NT_STATUS_OK
QUERY_FILE_INFORMATION 13551 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13520 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Close 13511 NT_STATUS_OK
Close 13512 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13553 NT_STATUS_OK
QUERY_FILE_INFORMATION 13553 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13555 NT_STATUS_OK
QUERY_FILE_INFORMATION 13555 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13557 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13558 4096 16384 16384 NT_STATUS_OK
WriteX 13558 0 4096 4096 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
WriteX 13560 0 4096 4096 NT_STATUS_OK
WriteX 13561 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13564 NT_STATUS_OK
ReadX 13564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13565 NT_STATUS_OK
ReadX 13565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13567 NT_STATUS_OK
ReadX 13567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13569 NT_STATUS_OK
ReadX 13569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 8192 8192 NT_STATUS_OK
ReadX 13564 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13578 0 4096 4096 NT_STATUS_OK
ReadX 13578 4096 4096 4096 NT_STATUS_OK
ReadX 13578 8192 4096 4096 NT_STATUS_OK
WriteX 13564 0 4096 4096 NT_STATUS_OK
WriteX 13565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
ReadX 13579 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13558 0 4096 4096 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
WriteX 13560 0 4096 4096 NT_STATUS_OK
WriteX 13561 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13584 NT_STATUS_OK
QUERY_FILE_INFORMATION 13584 1004 NT_STATUS_OK
WriteX 13584 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13584 258 NT_STATUS_OK
WriteX 13584 0 2048 2048 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13585 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13585 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 0 4096 4096 NT_STATUS_OK
ReadX 13587 4096 4096 4096 NT_STATUS_OK
WriteX 13587 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13585 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13589 NT_STATUS_OK
ReadX 13589 0 4096 4096 NT_STATUS_OK
ReadX 13589 4096 4096 4096 NT_STATUS_OK
WriteX 13589 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13590 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Close 13565 NT_STATUS_OK
Close 13568 NT_STATUS_OK
Close 13569 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Close 13589 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13592 0 4096 4096 NT_STATUS_OK
ReadX 13592 4096 4096 4096 NT_STATUS_OK
ReadX 13592 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13603 NT_STATUS_OK
ReadX 13603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13604 NT_STATUS_OK
ReadX 13604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 0 4096 4096 NT_STATUS_OK
ReadX 13593 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13610 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 1004 NT_STATUS_OK
WriteX 13610 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 258 NT_STATUS_OK
WriteX 13610 0 2048 2048 NT_STATUS_OK
Close 13610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13611 NT_STATUS_OK
ReadX 13611 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13616 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 258 NT_STATUS_OK
WriteX 13616 0 2048 2048 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13617 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13600 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13618 NT_STATUS_OK
QUERY_FILE_INFORMATION 13618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13598 NT_STATUS_OK
Close 13595 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13602 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Close 13592 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13620 NT_STATUS_OK
QUERY_FILE_INFORMATION 13620 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 61440 4096 4096 NT_STATUS_OK
ReadX 13622 126976 4096 4096 NT_STATUS_OK
WriteX 13622 0 65536 65536 NT_STATUS_OK
WriteX 13622 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 61440 4096 4096 NT_STATUS_OK
ReadX 13623 126976 4096 4096 NT_STATUS_OK
ReadX 13623 192512 4096 4096 NT_STATUS_OK
ReadX 13623 258048 4096 4096 NT_STATUS_OK
WriteX 13623 0 65536 65536 NT_STATUS_OK
WriteX 13623 65536 65536 65536 NT_STATUS_OK
WriteX 13623 131072 65536 65536 NT_STATUS_OK
WriteX 13623 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 61440 4096 4096 NT_STATUS_OK
ReadX 13624 126976 4096 4096 NT_STATUS_OK
ReadX 13624 192512 4096 4096 NT_STATUS_OK
ReadX 13624 258048 4096 4096 NT_STATUS_OK
ReadX 13624 323584 4096 4096 NT_STATUS_OK
ReadX 13624 389120 4096 4096 NT_STATUS_OK
ReadX 13624 454656 4096 4096 NT_STATUS_OK
ReadX 13624 520192 4096 4096 NT_STATUS_OK
WriteX 13624 0 65536 65536 NT_STATUS_OK
WriteX 13624 65536 65536 65536 NT_STATUS_OK
WriteX 13624 131072 65536 65536 NT_STATUS_OK
WriteX 13624 196608 65536 65536 NT_STATUS_OK
WriteX 13624 262144 65536 65536 NT_STATUS_OK
WriteX 13624 327680 65536 65536 NT_STATUS_OK
WriteX 13624 393216 65536 65536 NT_STATUS_OK
WriteX 13624 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13625 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13625 8192 4096 4096 NT_STATUS_OK
ReadX 13625 12288 4096 4096 NT_STATUS_OK
ReadX 13625 16384 4096 4096 NT_STATUS_OK
ReadX 13625 20480 4096 4096 NT_STATUS_OK
ReadX 13625 24576 4096 4096 NT_STATUS_OK
ReadX 13625 28672 4096 4096 NT_STATUS_OK
ReadX 13625 32768 4096 4096 NT_STATUS_OK
ReadX 13625 36864 4096 4096 NT_STATUS_OK
ReadX 13625 40960 4096 4096 NT_STATUS_OK
ReadX 13625 45056 4096 4096 NT_STATUS_OK
ReadX 13625 49152 4096 4096 NT_STATUS_OK
ReadX 13625 53248 4096 4096 NT_STATUS_OK
ReadX 13625 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13625 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13626 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13628 NT_STATUS_OK
WriteX 13628 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13628 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13628 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13628 1004 NT_STATUS_OK
WriteX 13628 0 57088 57088 NT_STATUS_OK
WriteX 13628 0 4096 4096 NT_STATUS_OK
Flush 13628 NT_STATUS_OK
Close 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13629 NT_STATUS_OK
SET_FILE_INFORMATION 13629 1004 NT_STATUS_OK
Close 13629 NT_STATUS_OK
SET_FILE_INFORMATION 13628 1004 NT_STATUS_OK
WriteX 13628 0 4096 4096 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13632 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13633 NT_STATUS_OK
WriteX 13633 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13633 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13633 1004 NT_STATUS_OK
WriteX 13633 0 51456 51456 NT_STATUS_OK
WriteX 13633 0 4096 4096 NT_STATUS_OK
Flush 13633 NT_STATUS_OK
SET_FILE_INFORMATION 13633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13633 1004 NT_STATUS_OK
WriteX 13633 0 4096 4096 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13637 NT_STATUS_OK
ReadX 13637 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13637 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13642 NT_STATUS_OK
WriteX 13642 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13642 258 NT_STATUS_OK
WriteX 13642 0 53077 53077 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13643 NT_STATUS_OK
WriteX 13643 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13643 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13643 1004 NT_STATUS_OK
WriteX 13643 0 65536 65536 NT_STATUS_OK
WriteX 13643 65536 1856 1856 NT_STATUS_OK
WriteX 13643 0 4096 4096 NT_STATUS_OK
Flush 13643 NT_STATUS_OK
SET_FILE_INFORMATION 13643 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13643 1004 NT_STATUS_OK
WriteX 13643 0 4096 4096 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13649 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13652 NT_STATUS_OK
WriteX 13652 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13652 258 NT_STATUS_OK
WriteX 13652 0 7983 7983 NT_STATUS_OK
Close 13652 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13654 NT_STATUS_OK
Close 13654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13657 NT_STATUS_OK
WriteX 13657 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13657 258 NT_STATUS_OK
WriteX 13657 0 65536 65536 NT_STATUS_OK
WriteX 13657 65536 65536 65536 NT_STATUS_OK
WriteX 13657 131072 65536 65536 NT_STATUS_OK
WriteX 13657 196608 65536 65536 NT_STATUS_OK
WriteX 13657 262144 65536 65536 NT_STATUS_OK
WriteX 13657 327680 65536 65536 NT_STATUS_OK
WriteX 13657 393216 65536 65536 NT_STATUS_OK
WriteX 13657 458752 46731 46731 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13658 NT_STATUS_OK
WriteX 13658 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13647 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13658 1004 NT_STATUS_OK
WriteX 13658 0 65536 65536 NT_STATUS_OK
WriteX 13658 65536 22848 22848 NT_STATUS_OK
WriteX 13658 0 4096 4096 NT_STATUS_OK
Flush 13658 NT_STATUS_OK
SET_FILE_INFORMATION 13658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13658 1004 NT_STATUS_OK
WriteX 13658 0 4096 4096 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13662 NT_STATUS_OK
ReadX 13662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13662 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13663 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13663 1004 NT_STATUS_OK
ReadX 13663 8192 4096 4096 NT_STATUS_OK
ReadX 13663 12288 4096 4096 NT_STATUS_OK
ReadX 13663 16384 4096 4096 NT_STATUS_OK
ReadX 13663 20480 4096 4096 NT_STATUS_OK
ReadX 13663 24576 4096 4096 NT_STATUS_OK
ReadX 13663 28672 4096 4096 NT_STATUS_OK
ReadX 13663 32768 4096 4096 NT_STATUS_OK
ReadX 13663 36864 4096 4096 NT_STATUS_OK
ReadX 13663 40960 4096 4096 NT_STATUS_OK
ReadX 13663 45056 4096 4096 NT_STATUS_OK
ReadX 13663 49152 4096 4096 NT_STATUS_OK
ReadX 13663 53248 4096 4096 NT_STATUS_OK
ReadX 13663 57344 4096 4096 NT_STATUS_OK
ReadX 13663 61440 4096 4096 NT_STATUS_OK
ReadX 13663 65536 4096 4096 NT_STATUS_OK
ReadX 13663 69632 4096 4096 NT_STATUS_OK
ReadX 13663 73728 4096 4096 NT_STATUS_OK
ReadX 13663 77824 4096 4096 NT_STATUS_OK
ReadX 13663 81920 4096 4096 NT_STATUS_OK
ReadX 13663 86016 4096 4096 NT_STATUS_OK
ReadX 13663 90112 4096 4096 NT_STATUS_OK
ReadX 13663 94208 4096 4096 NT_STATUS_OK
ReadX 13663 98304 4096 4096 NT_STATUS_OK
ReadX 13663 102400 4096 4096 NT_STATUS_OK
ReadX 13663 106496 4096 4096 NT_STATUS_OK
ReadX 13663 110592 4096 4096 NT_STATUS_OK
ReadX 13663 114688 4096 4096 NT_STATUS_OK
ReadX 13663 118784 4096 4096 NT_STATUS_OK
ReadX 13663 122880 4096 4096 NT_STATUS_OK
ReadX 13663 126976 4096 4096 NT_STATUS_OK
ReadX 13663 131072 4096 4096 NT_STATUS_OK
ReadX 13663 135168 4096 4096 NT_STATUS_OK
ReadX 13663 139264 4096 4096 NT_STATUS_OK
ReadX 13663 143360 4096 4096 NT_STATUS_OK
ReadX 13663 147456 4096 4096 NT_STATUS_OK
ReadX 13663 151552 4096 4096 NT_STATUS_OK
ReadX 13663 155648 4096 4096 NT_STATUS_OK
ReadX 13663 159744 4096 4096 NT_STATUS_OK
ReadX 13663 163840 4096 4096 NT_STATUS_OK
ReadX 13663 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13663 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13664 NT_STATUS_OK
Close 13664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13662 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13666 NT_STATUS_OK
WriteX 13666 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
Close 13663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13667 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
Close 13667 NT_STATUS_OK
WriteX 13666 0 42388 42388 NT_STATUS_OK
Close 13666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13670 NT_STATUS_OK
ReadX 13670 0 4096 4096 NT_STATUS_OK
ReadX 13670 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13671 NT_STATUS_OK
WriteX 13671 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13671 258 NT_STATUS_OK
SET_FILE_INFORMATION 13671 1004 NT_STATUS_OK
WriteX 13671 0 42652 42652 NT_STATUS_OK
Close 13671 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13675 NT_STATUS_OK
ReadX 13675 0 4096 4096 NT_STATUS_OK
ReadX 13675 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13677 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13680 NT_STATUS_OK
WriteX 13680 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13680 258 NT_STATUS_OK
WriteX 13680 0 65536 65536 NT_STATUS_OK
WriteX 13680 65536 49 49 NT_STATUS_OK
Close 13680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 61440 61440 NT_STATUS_OK
ReadX 13681 61440 4096 4096 NT_STATUS_OK
ReadX 13681 65536 61440 61440 NT_STATUS_OK
ReadX 13681 126976 4096 4096 NT_STATUS_OK
ReadX 13681 131072 61440 61440 NT_STATUS_OK
ReadX 13681 192512 4096 4096 NT_STATUS_OK
ReadX 13681 196608 61440 61440 NT_STATUS_OK
ReadX 13681 258048 4096 4096 NT_STATUS_OK
ReadX 13681 262144 61440 61440 NT_STATUS_OK
ReadX 13681 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 61440 61440 NT_STATUS_OK
ReadX 13682 61440 4096 4096 NT_STATUS_OK
ReadX 13682 65536 61440 61440 NT_STATUS_OK
ReadX 13682 126976 4096 4096 NT_STATUS_OK
ReadX 13682 131072 61440 61440 NT_STATUS_OK
ReadX 13682 192512 4096 4096 NT_STATUS_OK
ReadX 13682 196608 61440 61440 NT_STATUS_OK
ReadX 13682 258048 4096 4096 NT_STATUS_OK
ReadX 13682 262144 61440 61440 NT_STATUS_OK
ReadX 13682 323584 4096 4096 NT_STATUS_OK
ReadX 13682 327680 61440 61440 NT_STATUS_OK
ReadX 13682 389120 4096 4096 NT_STATUS_OK
ReadX 13682 393216 61440 61440 NT_STATUS_OK
ReadX 13682 454656 4096 4096 NT_STATUS_OK
ReadX 13682 458752 61440 61440 NT_STATUS_OK
ReadX 13682 520192 4096 4096 NT_STATUS_OK
ReadX 13682 524288 61440 61440 NT_STATUS_OK
ReadX 13682 585728 4096 4096 NT_STATUS_OK
ReadX 13682 589824 61440 61440 NT_STATUS_OK
ReadX 13682 651264 4096 4096 NT_STATUS_OK
ReadX 13682 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 61440 61440 NT_STATUS_OK
ReadX 13683 61440 4096 4096 NT_STATUS_OK
ReadX 13683 65536 61440 61440 NT_STATUS_OK
ReadX 13683 126976 4096 4096 NT_STATUS_OK
ReadX 13683 131072 61440 61440 NT_STATUS_OK
ReadX 13683 192512 4096 4096 NT_STATUS_OK
ReadX 13683 196608 61440 61440 NT_STATUS_OK
ReadX 13683 258048 4096 4096 NT_STATUS_OK
ReadX 13683 262144 61440 61440 NT_STATUS_OK
ReadX 13683 323584 4096 4096 NT_STATUS_OK
ReadX 13683 327680 61440 61440 NT_STATUS_OK
ReadX 13683 389120 4096 4096 NT_STATUS_OK
ReadX 13683 393216 61440 61440 NT_STATUS_OK
ReadX 13683 454656 4096 4096 NT_STATUS_OK
ReadX 13683 458752 61440 61440 NT_STATUS_OK
ReadX 13683 520192 4096 4096 NT_STATUS_OK
ReadX 13683 524288 61440 61440 NT_STATUS_OK
ReadX 13683 585728 4096 4096 NT_STATUS_OK
ReadX 13683 589824 61440 61440 NT_STATUS_OK
ReadX 13683 651264 4096 4096 NT_STATUS_OK
ReadX 13683 655360 61440 61440 NT_STATUS_OK
ReadX 13683 716800 4096 4096 NT_STATUS_OK
ReadX 13683 720896 61440 61440 NT_STATUS_OK
ReadX 13683 782336 4096 4096 NT_STATUS_OK
ReadX 13683 786432 61440 61440 NT_STATUS_OK
ReadX 13683 847872 4096 4096 NT_STATUS_OK
ReadX 13683 851968 61440 61440 NT_STATUS_OK
ReadX 13683 913408 4096 4096 NT_STATUS_OK
ReadX 13683 917504 61440 61440 NT_STATUS_OK
ReadX 13683 978944 4096 4096 NT_STATUS_OK
ReadX 13683 983040 61440 61440 NT_STATUS_OK
ReadX 13683 1044480 4096 4096 NT_STATUS_OK
ReadX 13683 1048576 61440 61440 NT_STATUS_OK
ReadX 13683 1110016 4096 4096 NT_STATUS_OK
ReadX 13683 1114112 61440 61440 NT_STATUS_OK
ReadX 13683 1175552 4096 4096 NT_STATUS_OK
ReadX 13683 1179648 61440 61440 NT_STATUS_OK
ReadX 13683 1241088 4096 4096 NT_STATUS_OK
ReadX 13683 1245184 61440 61440 NT_STATUS_OK
ReadX 13683 1306624 4096 4096 NT_STATUS_OK
ReadX 13683 1310720 61440 61440 NT_STATUS_OK
ReadX 13683 1372160 4096 4096 NT_STATUS_OK
ReadX 13683 1376256 61440 61440 NT_STATUS_OK
ReadX 13683 1437696 4096 4096 NT_STATUS_OK
ReadX 13683 1441792 61440 61440 NT_STATUS_OK
ReadX 13683 1503232 4096 4096 NT_STATUS_OK
ReadX 13683 1507328 61440 61440 NT_STATUS_OK
ReadX 13683 1568768 4096 4096 NT_STATUS_OK
ReadX 13683 1572864 61440 61440 NT_STATUS_OK
ReadX 13683 1634304 4096 4096 NT_STATUS_OK
ReadX 13683 1638400 61440 61440 NT_STATUS_OK
ReadX 13683 1699840 4096 4096 NT_STATUS_OK
ReadX 13683 1703936 61440 61440 NT_STATUS_OK
ReadX 13683 1765376 4096 4096 NT_STATUS_OK
ReadX 13683 1769472 61440 61440 NT_STATUS_OK
ReadX 13683 1830912 4096 4096 NT_STATUS_OK
ReadX 13683 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13685 NT_STATUS_OK
QUERY_FILE_INFORMATION 13685 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13685 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13685 1005 NT_STATUS_OK
ReadX 13685 2156 24 24 NT_STATUS_OK
ReadX 13685 2139 276 276 NT_STATUS_OK
ReadX 13685 2136 14 14 NT_STATUS_OK
ReadX 13685 2136 7 7 NT_STATUS_OK
ReadX 13685 2138 12 12 NT_STATUS_OK
ReadX 13685 2137 8 8 NT_STATUS_OK
ReadX 13685 2135 15 15 NT_STATUS_OK
ReadX 13685 0 16 16 NT_STATUS_OK
ReadX 13685 16 2048 2048 NT_STATUS_OK
ReadX 13685 2064 2048 2048 NT_STATUS_OK
ReadX 13685 257 2048 2048 NT_STATUS_OK
ReadX 13685 385 2048 2048 NT_STATUS_OK
ReadX 13685 513 2048 2048 NT_STATUS_OK
ReadX 13685 641 2048 2048 NT_STATUS_OK
ReadX 13685 769 2048 2048 NT_STATUS_OK
ReadX 13685 897 2048 2048 NT_STATUS_OK
ReadX 13685 1025 2048 2048 NT_STATUS_OK
ReadX 13685 1153 2048 2048 NT_STATUS_OK
ReadX 13685 1281 2048 2048 NT_STATUS_OK
ReadX 13685 1409 2048 2048 NT_STATUS_OK
ReadX 13685 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13690 NT_STATUS_OK
WriteX 13690 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
WriteX 13690 0 10575 10575 NT_STATUS_OK
Flush 13690 NT_STATUS_OK
Close 13690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
Close 13685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13695 NT_STATUS_OK
LockX 13695 2147483538 1 NT_STATUS_OK
UnlockX 13695 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13695 1005 NT_STATUS_OK
ReadX 13695 0 512 512 NT_STATUS_OK
ReadX 13695 512 512 512 NT_STATUS_OK
ReadX 13695 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13695 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13695 1004 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13696 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 1005 NT_STATUS_OK
ReadX 13696 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13697 NT_STATUS_OK
LockX 13697 2147483538 1 NT_STATUS_OK
UnlockX 13697 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13697 1005 NT_STATUS_OK
ReadX 13697 0 512 512 NT_STATUS_OK
ReadX 13697 512 512 512 NT_STATUS_OK
ReadX 13697 1024 512 512 NT_STATUS_OK
ReadX 13697 288 20 20 NT_STATUS_OK
ReadX 13697 308 2084 2084 NT_STATUS_OK
ReadX 13697 388 2084 2084 NT_STATUS_OK
ReadX 13697 388 2084 2084 NT_STATUS_OK
ReadX 13684 2157 1386 1386 NT_STATUS_OK
ReadX 13697 2472 399 399 NT_STATUS_OK
ReadX 13697 3072 1536 1536 NT_STATUS_OK
ReadX 13697 544 149 149 NT_STATUS_OK
ReadX 13697 693 485 485 NT_STATUS_OK
Close 13697 NT_STATUS_OK
ReadX 13684 2157 4096 4096 NT_STATUS_OK
ReadX 13684 6253 4096 4096 NT_STATUS_OK
ReadX 13684 10349 4096 4096 NT_STATUS_OK
ReadX 13684 14445 4096 4096 NT_STATUS_OK
ReadX 13684 18541 4096 4096 NT_STATUS_OK
ReadX 13684 22637 256 256 NT_STATUS_OK
ReadX 13684 22893 4096 4096 NT_STATUS_OK
ReadX 13684 26989 4096 4096 NT_STATUS_OK
ReadX 13684 31085 4096 4096 NT_STATUS_OK
ReadX 13684 35181 4096 4096 NT_STATUS_OK
ReadX 13684 39277 4096 4096 NT_STATUS_OK
ReadX 13684 43373 4096 4096 NT_STATUS_OK
ReadX 13684 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13684 2157 1024 1024 NT_STATUS_OK
ReadX 13684 1667 4688 4688 NT_STATUS_OK
ReadX 13684 6355 3516 3516 NT_STATUS_OK
ReadX 13684 9871 16384 16384 NT_STATUS_OK
ReadX 13684 26255 3771 3771 NT_STATUS_OK
ReadX 13684 30026 2048 2048 NT_STATUS_OK
ReadX 13684 32074 1024 1024 NT_STATUS_OK
ReadX 13684 33098 6652 6652 NT_STATUS_OK
ReadX 13684 39750 16384 16384 NT_STATUS_OK
ReadX 13684 56134 10496 10496 NT_STATUS_OK
ReadX 13684 66630 1784 1784 NT_STATUS_OK
ReadX 13684 68414 90 90 NT_STATUS_OK
ReadX 13684 68504 273 273 NT_STATUS_OK
ReadX 13684 68777 1600 1600 NT_STATUS_OK
ReadX 13684 70377 640 640 NT_STATUS_OK
ReadX 13684 71017 1280 1280 NT_STATUS_OK
ReadX 13684 72297 8464 8464 NT_STATUS_OK
ReadX 13684 80761 158 158 NT_STATUS_OK
ReadX 13684 80919 912 912 NT_STATUS_OK
ReadX 13684 81831 1980 1980 NT_STATUS_OK
ReadX 13684 83811 2256 2256 NT_STATUS_OK
ReadX 13684 86067 400 400 NT_STATUS_OK
ReadX 13684 86467 252 252 NT_STATUS_OK
ReadX 13684 86719 42 42 NT_STATUS_OK
ReadX 13684 86761 725 725 NT_STATUS_OK
ReadX 13684 2009 512 512 NT_STATUS_OK
ReadX 13684 3895 9 9 NT_STATUS_OK
ReadX 13684 3781 46 46 NT_STATUS_OK
ReadX 13684 4059 92 92 NT_STATUS_OK
ReadX 13684 3781 92 92 NT_STATUS_OK
ReadX 13684 3986 184 184 NT_STATUS_OK
ReadX 13684 3987 16384 16384 NT_STATUS_OK
ReadX 13684 3902 16384 16384 NT_STATUS_OK
ReadX 13684 3781 10240 10240 NT_STATUS_OK
ReadX 13684 3821 16384 16384 NT_STATUS_OK
ReadX 13684 3891 935 935 NT_STATUS_OK
ReadX 13684 4060 10240 10240 NT_STATUS_OK
ReadX 13684 4059 184 184 NT_STATUS_OK
ReadX 13684 256 184 184 NT_STATUS_OK
ReadX 13684 256 1026 1026 NT_STATUS_OK
ReadX 13684 3901 326 326 NT_STATUS_OK
ReadX 13684 3899 652 652 NT_STATUS_OK
ReadX 13684 256 2 2 NT_STATUS_OK
ReadX 13684 258 4948 4948 NT_STATUS_OK
Close 13684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13699 NT_STATUS_OK
Close 13699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13702 NT_STATUS_OK
WriteX 13702 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13702 258 NT_STATUS_OK
WriteX 13702 0 65536 65536 NT_STATUS_OK
WriteX 13702 65536 65536 65536 NT_STATUS_OK
WriteX 13702 131072 65536 65536 NT_STATUS_OK
WriteX 13702 196608 65536 65536 NT_STATUS_OK
WriteX 13702 262144 65536 65536 NT_STATUS_OK
WriteX 13702 327680 65536 65536 NT_STATUS_OK
WriteX 13702 393216 65536 65536 NT_STATUS_OK
WriteX 13702 458752 65536 65536 NT_STATUS_OK
WriteX 13702 524288 65536 65536 NT_STATUS_OK
WriteX 13702 589824 35257 35257 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13704 NT_STATUS_OK
Close 13704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13707 NT_STATUS_OK
WriteX 13707 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13707 258 NT_STATUS_OK
WriteX 13707 0 65536 65536 NT_STATUS_OK
WriteX 13707 65536 65536 65536 NT_STATUS_OK
WriteX 13707 131072 65536 65536 NT_STATUS_OK
WriteX 13707 196608 65536 65536 NT_STATUS_OK
WriteX 13707 262144 65536 65536 NT_STATUS_OK
WriteX 13707 327680 65536 65536 NT_STATUS_OK
WriteX 13707 393216 65536 65536 NT_STATUS_OK
WriteX 13707 458752 65536 65536 NT_STATUS_OK
WriteX 13707 524288 65536 65536 NT_STATUS_OK
WriteX 13707 589824 57598 57598 NT_STATUS_OK
Close 13707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13709 NT_STATUS_OK
WriteX 13709 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 258 NT_STATUS_OK
WriteX 13709 0 12543 12543 NT_STATUS_OK
Flush 13709 NT_STATUS_OK
Close 13709 NT_STATUS_OK
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13715 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 1005 NT_STATUS_OK
ReadX 13715 1938 24 24 NT_STATUS_OK
ReadX 13715 1920 276 276 NT_STATUS_OK
ReadX 13715 1918 14 14 NT_STATUS_OK
ReadX 13715 1918 7 7 NT_STATUS_OK
ReadX 13715 1919 12 12 NT_STATUS_OK
ReadX 13715 1919 8 8 NT_STATUS_OK
ReadX 13715 1917 15 15 NT_STATUS_OK
ReadX 13715 0 16 16 NT_STATUS_OK
ReadX 13715 16 2048 2048 NT_STATUS_OK
ReadX 13715 2064 2048 2048 NT_STATUS_OK
ReadX 13715 257 2048 2048 NT_STATUS_OK
ReadX 13715 385 2048 2048 NT_STATUS_OK
ReadX 13715 513 2048 2048 NT_STATUS_OK
ReadX 13715 641 2048 2048 NT_STATUS_OK
ReadX 13715 769 2048 2048 NT_STATUS_OK
ReadX 13715 897 2048 2048 NT_STATUS_OK
ReadX 13715 1025 2048 2048 NT_STATUS_OK
ReadX 13715 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13717 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13720 NT_STATUS_OK
WriteX 13720 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13720 258 NT_STATUS_OK
WriteX 13720 0 11588 11588 NT_STATUS_OK
Flush 13720 NT_STATUS_OK
Close 13720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
Close 13715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13725 NT_STATUS_OK
WriteX 13725 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13725 258 NT_STATUS_OK
WriteX 13725 0 11615 11615 NT_STATUS_OK
Flush 13725 NT_STATUS_OK
Close 13725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13727 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13731 NT_STATUS_OK
Close 13731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13734 NT_STATUS_OK
WriteX 13734 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13734 258 NT_STATUS_OK
WriteX 13734 0 65536 65536 NT_STATUS_OK
WriteX 13734 65536 16050 16050 NT_STATUS_OK
Close 13734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13714 1939 64 64 NT_STATUS_OK
ReadX 13714 128 248 248 NT_STATUS_OK
ReadX 13714 128 568 568 NT_STATUS_OK
ReadX 13714 3872 1536 1536 NT_STATUS_OK
ReadX 13714 3456 2560 2560 NT_STATUS_OK
ReadX 13714 3136 512 512 NT_STATUS_OK
ReadX 13714 2880 4096 4096 NT_STATUS_OK
ReadX 13714 3264 3072 3072 NT_STATUS_OK
ReadX 13714 320 4096 4096 NT_STATUS_OK
ReadX 13714 1024 4096 4096 NT_STATUS_OK
ReadX 13714 3616 4096 4096 NT_STATUS_OK
ReadX 13714 1939 64 64 NT_STATUS_OK
ReadX 13714 128 248 248 NT_STATUS_OK
ReadX 13714 128 608 608 NT_STATUS_OK
ReadX 13714 2858 1024 1024 NT_STATUS_OK
ReadX 13714 2810 4096 4096 NT_STATUS_OK
ReadX 13714 2826 4096 4096 NT_STATUS_OK
ReadX 13714 2580 2048 2048 NT_STATUS_OK
ReadX 13714 2800 2560 2560 NT_STATUS_OK
ReadX 13714 2100 4096 4096 NT_STATUS_OK
ReadX 13714 2084 4096 4096 NT_STATUS_OK
ReadX 13714 868 4096 4096 NT_STATUS_OK
ReadX 13714 2324 4096 4096 NT_STATUS_OK
ReadX 13714 884 4096 4096 NT_STATUS_OK
ReadX 13714 2604 1024 1024 NT_STATUS_OK
ReadX 13714 580 4096 4096 NT_STATUS_OK
ReadX 13714 596 4096 4096 NT_STATUS_OK
ReadX 13714 2752 4096 4096 NT_STATUS_OK
ReadX 13714 2842 1024 1024 NT_STATUS_OK
ReadX 13714 660 4096 4096 NT_STATUS_OK
ReadX 13714 2720 4096 4096 NT_STATUS_OK
ReadX 13714 2736 4096 4096 NT_STATUS_OK
ReadX 13714 628 4096 4096 NT_STATUS_OK
ReadX 13714 2704 4096 4096 NT_STATUS_OK
ReadX 13714 1556 4096 4096 NT_STATUS_OK
ReadX 13714 576 4096 4096 NT_STATUS_OK
ReadX 13714 3168 1536 1536 NT_STATUS_OK
ReadX 13714 832 4096 4096 NT_STATUS_OK
ReadX 13714 1088 4096 4096 NT_STATUS_OK
ReadX 13714 1344 4096 4096 NT_STATUS_OK
ReadX 13714 1600 4096 4096 NT_STATUS_OK
ReadX 13714 1856 4096 4096 NT_STATUS_OK
ReadX 13714 2112 4096 4096 NT_STATUS_OK
ReadX 13714 1892 4096 4096 NT_STATUS_OK
ReadX 13714 820 4096 4096 NT_STATUS_OK
ReadX 13714 788 4096 4096 NT_STATUS_OK
ReadX 13714 1604 4096 4096 NT_STATUS_OK
ReadX 13714 3648 4096 4096 NT_STATUS_OK
ReadX 13714 2608 4096 4096 NT_STATUS_OK
ReadX 13714 548 4096 4096 NT_STATUS_OK
ReadX 13714 740 4096 4096 NT_STATUS_OK
ReadX 13714 1344 4096 4096 NT_STATUS_OK
ReadX 13714 3392 4096 4096 NT_STATUS_OK
ReadX 13714 3904 4096 4096 NT_STATUS_OK
ReadX 13714 644 4096 4096 NT_STATUS_OK
ReadX 13714 676 4096 4096 NT_STATUS_OK
ReadX 13714 2688 4096 4096 NT_STATUS_OK
ReadX 13714 320 4096 4096 NT_STATUS_OK
ReadX 13714 900 4096 4096 NT_STATUS_OK
ReadX 13714 1908 4096 4096 NT_STATUS_OK
ReadX 13714 852 4096 4096 NT_STATUS_OK
ReadX 13714 724 4096 4096 NT_STATUS_OK
ReadX 13714 2292 4096 4096 NT_STATUS_OK
ReadX 13714 612 4096 4096 NT_STATUS_OK
ReadX 13714 388 4096 4096 NT_STATUS_OK
ReadX 13714 2368 4096 4096 NT_STATUS_OK
ReadX 13714 2624 4096 4096 NT_STATUS_OK
ReadX 13714 500 4096 4096 NT_STATUS_OK
ReadX 13714 356 4096 4096 NT_STATUS_OK
ReadX 13714 1024 4096 4096 NT_STATUS_OK
ReadX 13714 576 4096 4096 NT_STATUS_OK
ReadX 13714 340 4096 4096 NT_STATUS_OK
ReadX 13714 420 4096 4096 NT_STATUS_OK
ReadX 13714 1600 4096 4096 NT_STATUS_OK
ReadX 13714 404 4096 4096 NT_STATUS_OK
ReadX 13714 1428 4096 4096 NT_STATUS_OK
ReadX 13714 2656 4096 4096 NT_STATUS_OK
ReadX 13714 2624 4096 4096 NT_STATUS_OK
ReadX 13714 452 4096 4096 NT_STATUS_OK
ReadX 13714 692 4096 4096 NT_STATUS_OK
ReadX 13714 564 4096 4096 NT_STATUS_OK
ReadX 13714 372 4096 4096 NT_STATUS_OK
ReadX 13714 468 4096 4096 NT_STATUS_OK
ReadX 13714 484 4096 4096 NT_STATUS_OK
ReadX 13714 1088 4096 4096 NT_STATUS_OK
ReadX 13714 1924 4096 4096 NT_STATUS_OK
ReadX 13714 2768 4096 4096 NT_STATUS_OK
ReadX 13714 832 4096 4096 NT_STATUS_OK
ReadX 13714 836 4096 4096 NT_STATUS_OK
ReadX 13714 1856 4096 4096 NT_STATUS_OK
ReadX 13714 2640 4096 4096 NT_STATUS_OK
ReadX 13714 436 4096 4096 NT_STATUS_OK
ReadX 13714 1828 4096 4096 NT_STATUS_OK
ReadX 13714 804 4096 4096 NT_STATUS_OK
ReadX 13714 1860 4096 4096 NT_STATUS_OK
ReadX 13714 1812 4096 4096 NT_STATUS_OK
ReadX 13714 756 4096 4096 NT_STATUS_OK
ReadX 13714 1636 4096 4096 NT_STATUS_OK
ReadX 13714 772 4096 4096 NT_STATUS_OK
ReadX 13714 2036 4096 4096 NT_STATUS_OK
ReadX 13714 1220 4096 4096 NT_STATUS_OK
ReadX 13714 1652 4096 4096 NT_STATUS_OK
ReadX 13714 2588 4096 4096 NT_STATUS_OK
ReadX 13714 916 4096 4096 NT_STATUS_OK
ReadX 13714 260 4096 4096 NT_STATUS_OK
ReadX 13714 932 4096 4096 NT_STATUS_OK
ReadX 13714 2624 4096 4096 NT_STATUS_OK
ReadX 13714 308 4096 4096 NT_STATUS_OK
ReadX 13714 292 4096 4096 NT_STATUS_OK
ReadX 13714 1140 4096 4096 NT_STATUS_OK
ReadX 13714 276 4096 4096 NT_STATUS_OK
ReadX 13714 2020 4096 4096 NT_STATUS_OK
ReadX 13714 2880 4096 4096 NT_STATUS_OK
ReadX 13714 516 4096 4096 NT_STATUS_OK
ReadX 13714 1844 4096 4096 NT_STATUS_OK
ReadX 13714 1124 4096 4096 NT_STATUS_OK
ReadX 13714 3136 4096 4096 NT_STATUS_OK
ReadX 13714 324 4096 4096 NT_STATUS_OK
ReadX 13714 1156 4096 4096 NT_STATUS_OK
ReadX 13714 1172 4096 4096 NT_STATUS_OK
ReadX 13714 2112 4096 4096 NT_STATUS_OK
ReadX 13714 2368 4096 4096 NT_STATUS_OK
ReadX 13714 964 4096 4096 NT_STATUS_OK
ReadX 13714 980 4096 4096 NT_STATUS_OK
ReadX 13714 1012 4096 4096 NT_STATUS_OK
ReadX 13714 532 4096 4096 NT_STATUS_OK
ReadX 13714 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13714 1620 4096 4096 NT_STATUS_OK
ReadX 13714 1604 4096 4096 NT_STATUS_OK
ReadX 13714 2116 4096 4096 NT_STATUS_OK
ReadX 13714 2132 4096 4096 NT_STATUS_OK
ReadX 13714 2148 4096 4096 NT_STATUS_OK
ReadX 13714 2276 4096 4096 NT_STATUS_OK
ReadX 13714 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13739 NT_STATUS_OK
QUERY_FILE_INFORMATION 13694 1004 NT_STATUS_OK
Close 13694 NT_STATUS_OK
WriteX 13739 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 258 NT_STATUS_OK
WriteX 13739 0 4089 4089 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 1004 NT_STATUS_OK
Close 13696 NT_STATUS_OK
WriteX 13739 0 65536 65536 NT_STATUS_OK
WriteX 13739 65536 64850 64850 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13741 NT_STATUS_OK
WriteX 13741 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13741 258 NT_STATUS_OK
ReadX 13714 2068 4096 4096 NT_STATUS_OK
ReadX 13714 1588 4096 4096 NT_STATUS_OK
ReadX 13714 1572 4096 4096 NT_STATUS_OK
WriteX 13741 0 18630 18630 NT_STATUS_OK
Flush 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13743 NT_STATUS_OK
Close 13743 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13714 612 4096 4096 NT_STATUS_OK
ReadX 13714 564 4096 4096 NT_STATUS_OK
ReadX 13714 1876 4096 4096 NT_STATUS_OK
ReadX 13714 628 4096 4096 NT_STATUS_OK
ReadX 13714 740 4096 4096 NT_STATUS_OK
ReadX 13714 724 4096 4096 NT_STATUS_OK
ReadX 13714 644 4096 4096 NT_STATUS_OK
ReadX 13714 2324 4096 4096 NT_STATUS_OK
ReadX 13714 660 4096 4096 NT_STATUS_OK
ReadX 13714 852 4096 4096 NT_STATUS_OK
ReadX 13714 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13714 2368 4096 4096 NT_STATUS_OK
ReadX 13714 1024 4096 4096 NT_STATUS_OK
ReadX 13714 320 4096 4096 NT_STATUS_OK
ReadX 13714 580 4096 4096 NT_STATUS_OK
ReadX 13714 3136 512 512 NT_STATUS_OK
ReadX 13714 2880 4096 4096 NT_STATUS_OK
Close 13714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13746 NT_STATUS_OK
ReadX 13746 61440 4096 4096 NT_STATUS_OK
ReadX 13746 126976 4096 4096 NT_STATUS_OK
WriteX 13746 0 65536 65536 NT_STATUS_OK
WriteX 13746 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13747 NT_STATUS_OK
ReadX 13747 61440 4096 4096 NT_STATUS_OK
ReadX 13747 126976 4096 4096 NT_STATUS_OK
ReadX 13747 192512 4096 4096 NT_STATUS_OK
ReadX 13747 258048 4096 4096 NT_STATUS_OK
WriteX 13747 0 65536 65536 NT_STATUS_OK
WriteX 13747 65536 65536 65536 NT_STATUS_OK
WriteX 13747 131072 65536 65536 NT_STATUS_OK
WriteX 13747 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13748 NT_STATUS_OK
ReadX 13748 61440 4096 4096 NT_STATUS_OK
ReadX 13748 126976 4096 4096 NT_STATUS_OK
ReadX 13748 192512 4096 4096 NT_STATUS_OK
ReadX 13748 258048 4096 4096 NT_STATUS_OK
ReadX 13748 323584 4096 4096 NT_STATUS_OK
ReadX 13748 389120 4096 4096 NT_STATUS_OK
ReadX 13748 454656 4096 4096 NT_STATUS_OK
ReadX 13748 520192 4096 4096 NT_STATUS_OK
WriteX 13748 0 65536 65536 NT_STATUS_OK
WriteX 13748 65536 65536 65536 NT_STATUS_OK
WriteX 13748 131072 65536 65536 NT_STATUS_OK
WriteX 13748 196608 65536 65536 NT_STATUS_OK
WriteX 13748 262144 65536 65536 NT_STATUS_OK
WriteX 13748 327680 65536 65536 NT_STATUS_OK
WriteX 13748 393216 65536 65536 NT_STATUS_OK
WriteX 13748 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13749 NT_STATUS_OK
ReadX 13749 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13750 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13751 NT_STATUS_OK
WriteX 13751 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13751 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13749 0 8192 8192 NT_STATUS_OK
Flush 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13749 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13749 0 8192 8192 NT_STATUS_OK
Flush 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13749 0 8192 8192 NT_STATUS_OK
Flush 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13749 0 8192 8192 NT_STATUS_OK
Flush 13749 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13753 NT_STATUS_OK
Close 13753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Close 13746 NT_STATUS_OK
Close 13747 NT_STATUS_OK
Close 13748 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13756 NT_STATUS_OK
WriteX 13756 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13756 258 NT_STATUS_OK
WriteX 13756 0 62591 62591 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 10845 10845 NT_STATUS_OK
Close 13761 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13766 NT_STATUS_OK
WriteX 13766 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13766 258 NT_STATUS_OK
WriteX 13766 0 30118 30118 NT_STATUS_OK
Close 13766 NT_STATUS_OK
WriteX 13749 0 4096 4096 NT_STATUS_OK
WriteX 13751 0 64 64 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13749 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13768 NT_STATUS_OK
ReadX 13768 0 61440 61440 NT_STATUS_OK
ReadX 13768 61440 4096 4096 NT_STATUS_OK
ReadX 13768 65536 61440 61440 NT_STATUS_OK
ReadX 13768 126976 4096 4096 NT_STATUS_OK
ReadX 13768 131072 61440 61440 NT_STATUS_OK
ReadX 13768 192512 4096 4096 NT_STATUS_OK
ReadX 13768 196608 61440 61440 NT_STATUS_OK
ReadX 13768 258048 4096 4096 NT_STATUS_OK
ReadX 13768 262144 61440 61440 NT_STATUS_OK
ReadX 13768 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 61440 61440 NT_STATUS_OK
ReadX 13769 61440 4096 4096 NT_STATUS_OK
ReadX 13769 65536 61440 61440 NT_STATUS_OK
ReadX 13769 126976 4096 4096 NT_STATUS_OK
ReadX 13769 131072 61440 61440 NT_STATUS_OK
ReadX 13769 192512 4096 4096 NT_STATUS_OK
ReadX 13769 196608 61440 61440 NT_STATUS_OK
ReadX 13769 258048 4096 4096 NT_STATUS_OK
ReadX 13769 262144 61440 61440 NT_STATUS_OK
ReadX 13769 323584 4096 4096 NT_STATUS_OK
ReadX 13769 327680 61440 61440 NT_STATUS_OK
ReadX 13769 389120 4096 4096 NT_STATUS_OK
ReadX 13769 393216 61440 61440 NT_STATUS_OK
ReadX 13769 454656 4096 4096 NT_STATUS_OK
ReadX 13769 458752 61440 61440 NT_STATUS_OK
ReadX 13769 520192 4096 4096 NT_STATUS_OK
ReadX 13769 524288 61440 61440 NT_STATUS_OK
ReadX 13769 585728 4096 4096 NT_STATUS_OK
ReadX 13769 589824 61440 61440 NT_STATUS_OK
ReadX 13769 651264 4096 4096 NT_STATUS_OK
ReadX 13769 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 61440 61440 NT_STATUS_OK
ReadX 13770 61440 4096 4096 NT_STATUS_OK
ReadX 13770 65536 61440 61440 NT_STATUS_OK
ReadX 13770 126976 4096 4096 NT_STATUS_OK
ReadX 13770 131072 61440 61440 NT_STATUS_OK
ReadX 13770 192512 4096 4096 NT_STATUS_OK
ReadX 13770 196608 61440 61440 NT_STATUS_OK
ReadX 13770 258048 4096 4096 NT_STATUS_OK
ReadX 13770 262144 61440 61440 NT_STATUS_OK
ReadX 13770 323584 4096 4096 NT_STATUS_OK
ReadX 13770 327680 61440 61440 NT_STATUS_OK
ReadX 13770 389120 4096 4096 NT_STATUS_OK
ReadX 13770 393216 61440 61440 NT_STATUS_OK
ReadX 13770 454656 4096 4096 NT_STATUS_OK
ReadX 13770 458752 61440 61440 NT_STATUS_OK
ReadX 13770 520192 4096 4096 NT_STATUS_OK
ReadX 13770 524288 61440 61440 NT_STATUS_OK
ReadX 13770 585728 4096 4096 NT_STATUS_OK
ReadX 13770 589824 61440 61440 NT_STATUS_OK
ReadX 13770 651264 4096 4096 NT_STATUS_OK
ReadX 13770 655360 61440 61440 NT_STATUS_OK
ReadX 13770 716800 4096 4096 NT_STATUS_OK
ReadX 13770 720896 61440 61440 NT_STATUS_OK
ReadX 13770 782336 4096 4096 NT_STATUS_OK
ReadX 13770 786432 61440 61440 NT_STATUS_OK
ReadX 13770 847872 4096 4096 NT_STATUS_OK
ReadX 13770 851968 61440 61440 NT_STATUS_OK
ReadX 13770 913408 4096 4096 NT_STATUS_OK
ReadX 13770 917504 61440 61440 NT_STATUS_OK
ReadX 13770 978944 4096 4096 NT_STATUS_OK
ReadX 13770 983040 61440 61440 NT_STATUS_OK
ReadX 13770 1044480 4096 4096 NT_STATUS_OK
ReadX 13770 1048576 61440 61440 NT_STATUS_OK
ReadX 13770 1110016 4096 4096 NT_STATUS_OK
ReadX 13770 1114112 61440 61440 NT_STATUS_OK
ReadX 13770 1175552 4096 4096 NT_STATUS_OK
ReadX 13770 1179648 61440 61440 NT_STATUS_OK
ReadX 13770 1241088 4096 4096 NT_STATUS_OK
ReadX 13770 1245184 61440 61440 NT_STATUS_OK
ReadX 13770 1306624 4096 4096 NT_STATUS_OK
ReadX 13770 1310720 61440 61440 NT_STATUS_OK
ReadX 13770 1372160 4096 4096 NT_STATUS_OK
ReadX 13770 1376256 61440 61440 NT_STATUS_OK
ReadX 13770 1437696 4096 4096 NT_STATUS_OK
ReadX 13770 1441792 61440 61440 NT_STATUS_OK
ReadX 13770 1503232 4096 4096 NT_STATUS_OK
ReadX 13770 1507328 61440 61440 NT_STATUS_OK
ReadX 13770 1568768 4096 4096 NT_STATUS_OK
ReadX 13770 1572864 61440 61440 NT_STATUS_OK
ReadX 13770 1634304 4096 4096 NT_STATUS_OK
ReadX 13770 1638400 61440 61440 NT_STATUS_OK
ReadX 13770 1699840 4096 4096 NT_STATUS_OK
ReadX 13770 1703936 61440 61440 NT_STATUS_OK
ReadX 13770 1765376 4096 4096 NT_STATUS_OK
ReadX 13770 1769472 61440 61440 NT_STATUS_OK
ReadX 13770 1830912 4096 4096 NT_STATUS_OK
ReadX 13770 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13768 NT_STATUS_OK
Close 13769 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
ReadX 13775 4096 4096 4096 NT_STATUS_OK
ReadX 13775 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13779 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13779 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13778 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13783 NT_STATUS_OK
ReadX 13783 0 8192 8192 NT_STATUS_OK
ReadX 13783 8192 8192 8192 NT_STATUS_OK
ReadX 13783 16384 8192 8192 NT_STATUS_OK
ReadX 13783 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13785 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13783 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13788 NT_STATUS_OK
WriteX 13788 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13788 258 NT_STATUS_OK
WriteX 13788 0 10438 10438 NT_STATUS_OK
Close 13788 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13792 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13793 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13794 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13797 NT_STATUS_OK
ReadX 13797 0 4096 4096 NT_STATUS_OK
ReadX 13797 4096 4096 4096 NT_STATUS_OK
ReadX 13797 8192 4096 4096 NT_STATUS_OK
ReadX 13797 12288 8192 8192 NT_STATUS_OK
ReadX 13797 20480 8192 8192 NT_STATUS_OK
ReadX 13797 28672 8192 8192 NT_STATUS_OK
ReadX 13797 36864 8192 8192 NT_STATUS_OK
ReadX 13797 45056 8192 8192 NT_STATUS_OK
ReadX 13797 53248 8192 8192 NT_STATUS_OK
ReadX 13797 61440 8192 8192 NT_STATUS_OK
ReadX 13797 69632 8192 8192 NT_STATUS_OK
ReadX 13797 77824 8192 8192 NT_STATUS_OK
ReadX 13797 86016 8192 8192 NT_STATUS_OK
ReadX 13797 94208 8192 8192 NT_STATUS_OK
ReadX 13797 102400 8192 8192 NT_STATUS_OK
ReadX 13797 110592 8192 8192 NT_STATUS_OK
ReadX 13797 118784 8192 8192 NT_STATUS_OK
ReadX 13797 126976 8192 8192 NT_STATUS_OK
ReadX 13797 135168 8192 8192 NT_STATUS_OK
ReadX 13797 143360 8192 8192 NT_STATUS_OK
ReadX 13797 151552 8192 8192 NT_STATUS_OK
ReadX 13797 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13797 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13799 NT_STATUS_OK
Close 13799 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13802 NT_STATUS_OK
WriteX 13802 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13802 258 NT_STATUS_OK
WriteX 13802 0 28489 28489 NT_STATUS_OK
Close 13802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13803 NT_STATUS_OK
Close 13803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13805 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13808 NT_STATUS_OK
ReadX 13808 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 8192 8192 NT_STATUS_OK
ReadX 13809 8192 8192 8192 NT_STATUS_OK
ReadX 13809 16384 8192 8192 NT_STATUS_OK
ReadX 13809 24576 8192 8192 NT_STATUS_OK
ReadX 13809 32768 16384 16384 NT_STATUS_OK
ReadX 13809 49152 8192 8192 NT_STATUS_OK
ReadX 13809 57344 8192 8192 NT_STATUS_OK
ReadX 13809 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13811 NT_STATUS_OK
Close 13811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13814 NT_STATUS_OK
WriteX 13814 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 258 NT_STATUS_OK
WriteX 13814 0 29253 29253 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13815 NT_STATUS_OK
Close 13815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13821 NT_STATUS_OK
WriteX 13821 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13821 258 NT_STATUS_OK
WriteX 13821 0 30183 30183 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13824 NT_STATUS_OK
WriteX 13824 0 510 510 NT_STATUS_OK
WriteX 13824 510 512 512 NT_STATUS_OK
WriteX 13824 1022 510 510 NT_STATUS_OK
WriteX 13824 1532 510 510 NT_STATUS_OK
WriteX 13824 2042 168 168 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13825 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 61440 4096 4096 NT_STATUS_OK
ReadX 13828 126976 4096 4096 NT_STATUS_OK
WriteX 13828 0 65536 65536 NT_STATUS_OK
WriteX 13828 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 61440 4096 4096 NT_STATUS_OK
ReadX 13829 126976 4096 4096 NT_STATUS_OK
ReadX 13829 192512 4096 4096 NT_STATUS_OK
ReadX 13829 258048 4096 4096 NT_STATUS_OK
WriteX 13829 0 65536 65536 NT_STATUS_OK
WriteX 13829 65536 65536 65536 NT_STATUS_OK
WriteX 13829 131072 65536 65536 NT_STATUS_OK
WriteX 13829 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 61440 4096 4096 NT_STATUS_OK
ReadX 13830 126976 4096 4096 NT_STATUS_OK
ReadX 13830 192512 4096 4096 NT_STATUS_OK
ReadX 13830 258048 4096 4096 NT_STATUS_OK
ReadX 13830 323584 4096 4096 NT_STATUS_OK
ReadX 13830 389120 4096 4096 NT_STATUS_OK
ReadX 13830 454656 4096 4096 NT_STATUS_OK
ReadX 13830 520192 4096 4096 NT_STATUS_OK
WriteX 13830 0 65536 65536 NT_STATUS_OK
WriteX 13830 65536 65536 65536 NT_STATUS_OK
WriteX 13830 131072 65536 65536 NT_STATUS_OK
WriteX 13830 196608 65536 65536 NT_STATUS_OK
WriteX 13830 262144 65536 65536 NT_STATUS_OK
WriteX 13830 327680 65536 65536 NT_STATUS_OK
WriteX 13830 393216 65536 65536 NT_STATUS_OK
WriteX 13830 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13831 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13827 NT_STATUS_OK
Close 13828 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13837 NT_STATUS_OK
Close 13837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13870 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13885 NT_STATUS_OK
Close 13885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13896 NT_STATUS_OK
Close 13896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13899 NT_STATUS_OK
WriteX 13899 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13899 0 65536 65536 NT_STATUS_OK
WriteX 13899 65536 65536 65536 NT_STATUS_OK
WriteX 13899 131072 65536 65536 NT_STATUS_OK
WriteX 13899 196608 65536 65536 NT_STATUS_OK
WriteX 13899 262144 26634 26634 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
Close 13906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
ReadX 13907 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13921 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13926 NT_STATUS_OK
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13935 NT_STATUS_OK
Close 13935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13945 NT_STATUS_OK
Close 13945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13964 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13969 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13972 NT_STATUS_OK
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13985 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
Close 13986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
Close 13987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13998 NT_STATUS_OK
Close 13998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 4096 4096 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13988 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14031 0 4096 4096 NT_STATUS_OK
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14033 NT_STATUS_OK
ReadX 14033 0 4096 4096 NT_STATUS_OK
ReadX 14033 4096 4096 4096 NT_STATUS_OK
ReadX 14033 8192 4096 4096 NT_STATUS_OK
ReadX 14033 12288 4096 4096 NT_STATUS_OK
ReadX 14033 16384 4096 4096 NT_STATUS_OK
ReadX 14033 20480 4096 4096 NT_STATUS_OK
ReadX 14033 24576 4096 4096 NT_STATUS_OK
ReadX 14033 28672 4096 4096 NT_STATUS_OK
ReadX 14033 32768 4096 4096 NT_STATUS_OK
ReadX 14033 36864 4096 4096 NT_STATUS_OK
ReadX 14033 40960 4096 4096 NT_STATUS_OK
ReadX 14033 45056 4096 4096 NT_STATUS_OK
ReadX 14033 49152 4096 4096 NT_STATUS_OK
ReadX 14033 53248 4096 4096 NT_STATUS_OK
ReadX 14033 57344 4096 4096 NT_STATUS_OK
ReadX 14033 61440 4096 4096 NT_STATUS_OK
ReadX 14033 65536 4096 4096 NT_STATUS_OK
ReadX 14033 69632 4096 4096 NT_STATUS_OK
ReadX 14033 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14033 1004 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14034 NT_STATUS_OK
SET_FILE_INFORMATION 14034 1004 NT_STATUS_OK
Close 14034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14036 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14039 NT_STATUS_OK
WriteX 14039 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14039 258 NT_STATUS_OK
WriteX 14039 0 65536 65536 NT_STATUS_OK
WriteX 14039 65536 19979 19979 NT_STATUS_OK
Close 14039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
Flush 14040 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
Flush 14040 NT_STATUS_OK
QUERY_FILE_INFORMATION 14040 1004 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
Flush 14040 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
Flush 14040 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
Flush 14040 NT_STATUS_OK
SET_FILE_INFORMATION 14040 1004 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
Flush 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
Close 14043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
Close 14044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14045 1004 NT_STATUS_OK
WriteX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14048 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14051 NT_STATUS_OK
WriteX 14051 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14051 258 NT_STATUS_OK
WriteX 14051 0 65536 65536 NT_STATUS_OK
WriteX 14051 65536 17654 17654 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
Flush 14052 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
Flush 14052 NT_STATUS_OK
QUERY_FILE_INFORMATION 14052 1004 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
Flush 14052 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
Flush 14052 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
Flush 14052 NT_STATUS_OK
SET_FILE_INFORMATION 14052 1004 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
Flush 14052 NT_STATUS_OK
Close 14052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14053 NT_STATUS_OK
SET_FILE_INFORMATION 14053 1004 NT_STATUS_OK
Close 14053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 14055 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
ReadX 14057 4096 4096 4096 NT_STATUS_OK
ReadX 14057 8192 4096 4096 NT_STATUS_OK
ReadX 14057 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14057 16384 4096 4096 NT_STATUS_OK
ReadX 14057 20480 4096 4096 NT_STATUS_OK
ReadX 14057 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 4096 4096 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14060 1004 NT_STATUS_OK
WriteX 14060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 14061 NT_STATUS_OK
Close 14061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14063 NT_STATUS_OK
Close 14063 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14066 NT_STATUS_OK
WriteX 14066 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
WriteX 14066 0 65536 65536 NT_STATUS_OK
WriteX 14066 65536 19490 19490 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
QUERY_FILE_INFORMATION 14067 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
SET_FILE_INFORMATION 14067 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14068 NT_STATUS_OK
SET_FILE_INFORMATION 14068 1004 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14072 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14072 0 4096 4096 NT_STATUS_OK
Close 14072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
ReadX 14074 4096 4096 4096 NT_STATUS_OK
ReadX 14074 8192 4096 4096 NT_STATUS_OK
ReadX 14074 12288 4096 4096 NT_STATUS_OK
ReadX 14074 16384 4096 4096 NT_STATUS_OK
ReadX 14074 20480 4096 4096 NT_STATUS_OK
ReadX 14074 24576 4096 4096 NT_STATUS_OK
ReadX 14074 28672 4096 4096 NT_STATUS_OK
ReadX 14074 32768 4096 4096 NT_STATUS_OK
ReadX 14074 36864 4096 4096 NT_STATUS_OK
ReadX 14074 40960 4096 4096 NT_STATUS_OK
ReadX 14074 45056 4096 4096 NT_STATUS_OK
ReadX 14074 49152 4096 4096 NT_STATUS_OK
ReadX 14074 53248 4096 4096 NT_STATUS_OK
ReadX 14074 57344 4096 4096 NT_STATUS_OK
ReadX 14074 61440 4096 4096 NT_STATUS_OK
ReadX 14074 65536 4096 4096 NT_STATUS_OK
ReadX 14074 69632 4096 4096 NT_STATUS_OK
ReadX 14074 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14074 1004 NT_STATUS_OK
WriteX 14074 0 4096 4096 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14075 NT_STATUS_OK
SET_FILE_INFORMATION 14075 1004 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14080 NT_STATUS_OK
WriteX 14080 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14080 258 NT_STATUS_OK
WriteX 14080 0 65536 65536 NT_STATUS_OK
WriteX 14080 65536 8866 8866 NT_STATUS_OK
Close 14080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
WriteX 14081 0 4096 4096 NT_STATUS_OK
Flush 14081 NT_STATUS_OK
SET_FILE_INFORMATION 14081 1004 NT_STATUS_OK
WriteX 14081 0 4096 4096 NT_STATUS_OK
Flush 14081 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14085 1004 NT_STATUS_OK
WriteX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 14086 NT_STATUS_OK
Close 14086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14091 NT_STATUS_OK
WriteX 14091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 258 NT_STATUS_OK
WriteX 14091 0 65536 65536 NT_STATUS_OK
WriteX 14091 65536 9298 9298 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
SET_FILE_INFORMATION 14092 1004 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14093 NT_STATUS_OK
SET_FILE_INFORMATION 14093 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9325 0 4096 4096 NT_STATUS_OK
Close 9325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9326 NT_STATUS_OK
ReadX 9326 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9326 4096 4096 4096 NT_STATUS_OK
ReadX 9326 8192 4096 4096 NT_STATUS_OK
ReadX 9326 12288 4096 4096 NT_STATUS_OK
ReadX 9326 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9327 NT_STATUS_OK
ReadX 9327 0 4096 4096 NT_STATUS_OK
Close 9327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9328 NT_STATUS_OK
ReadX 9328 0 4096 4096 NT_STATUS_OK
Close 9328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9329 NT_STATUS_OK
ReadX 9329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9329 1004 NT_STATUS_OK
WriteX 9329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9330 NT_STATUS_OK
Close 9330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9326 NT_STATUS_OK
Close 9329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9332 NT_STATUS_OK
Close 9332 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9335 NT_STATUS_OK
WriteX 9335 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9335 258 NT_STATUS_OK
WriteX 9335 0 65536 65536 NT_STATUS_OK
WriteX 9335 65536 11540 11540 NT_STATUS_OK
Close 9335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9336 NT_STATUS_OK
ReadX 9336 0 4096 4096 NT_STATUS_OK
WriteX 9336 0 4096 4096 NT_STATUS_OK
Flush 9336 NT_STATUS_OK
SET_FILE_INFORMATION 9336 1004 NT_STATUS_OK
WriteX 9336 0 4096 4096 NT_STATUS_OK
Flush 9336 NT_STATUS_OK
Close 9336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9337 NT_STATUS_OK
SET_FILE_INFORMATION 9337 1004 NT_STATUS_OK
Close 9337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9338 NT_STATUS_OK
ReadX 9338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 9339 NT_STATUS_OK
Close 9339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9341 NT_STATUS_OK
ReadX 9341 61440 4096 4096 NT_STATUS_OK
ReadX 9341 126976 4096 4096 NT_STATUS_OK
WriteX 9341 0 65536 65536 NT_STATUS_OK
WriteX 9341 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9342 NT_STATUS_OK
ReadX 9342 61440 4096 4096 NT_STATUS_OK
ReadX 9342 126976 4096 4096 NT_STATUS_OK
ReadX 9342 192512 4096 4096 NT_STATUS_OK
ReadX 9342 258048 4096 4096 NT_STATUS_OK
WriteX 9342 0 65536 65536 NT_STATUS_OK
WriteX 9342 65536 65536 65536 NT_STATUS_OK
WriteX 9342 131072 65536 65536 NT_STATUS_OK
WriteX 9342 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9343 NT_STATUS_OK
ReadX 9343 61440 4096 4096 NT_STATUS_OK
ReadX 9343 126976 4096 4096 NT_STATUS_OK
ReadX 9343 192512 4096 4096 NT_STATUS_OK
ReadX 9343 258048 4096 4096 NT_STATUS_OK
ReadX 9343 323584 4096 4096 NT_STATUS_OK
ReadX 9343 389120 4096 4096 NT_STATUS_OK
ReadX 9343 454656 4096 4096 NT_STATUS_OK
ReadX 9343 520192 4096 4096 NT_STATUS_OK
WriteX 9343 0 65536 65536 NT_STATUS_OK
WriteX 9343 65536 65536 65536 NT_STATUS_OK
WriteX 9343 131072 65536 65536 NT_STATUS_OK
WriteX 9343 196608 65536 65536 NT_STATUS_OK
WriteX 9343 262144 65536 65536 NT_STATUS_OK
WriteX 9343 327680 65536 65536 NT_STATUS_OK
WriteX 9343 393216 65536 65536 NT_STATUS_OK
WriteX 9343 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9344 NT_STATUS_OK
ReadX 9344 0 4096 4096 NT_STATUS_OK
ReadX 9344 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9345 NT_STATUS_OK
WriteX 9345 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9345 258 NT_STATUS_OK
WriteX 9345 0 53 53 NT_STATUS_OK
Close 9345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9346 NT_STATUS_OK
Close 9346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9338 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 9341 NT_STATUS_OK
Close 9342 NT_STATUS_OK
Close 9343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9344 8192 4096 4096 NT_STATUS_OK
ReadX 9344 12288 4096 4096 NT_STATUS_OK
WriteX 9348 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9348 258 NT_STATUS_OK
ReadX 9344 16384 4096 4096 NT_STATUS_OK
ReadX 9344 20480 4096 4096 NT_STATUS_OK
WriteX 9348 0 15360 15360 NT_STATUS_OK
Close 9348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9349 NT_STATUS_OK
ReadX 9349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9349 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9349 1004 NT_STATUS_OK
WriteX 9349 0 4096 4096 NT_STATUS_OK
Close 9349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9350 NT_STATUS_OK
Close 9350 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9352 NT_STATUS_OK
ReadX 9352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9353 NT_STATUS_OK
Close 9353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9352 4096 4096 4096 NT_STATUS_OK
ReadX 9352 8192 4096 4096 NT_STATUS_OK
ReadX 9352 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9355 NT_STATUS_OK
ReadX 9355 0 4096 4096 NT_STATUS_OK
ReadX 9355 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9356 NT_STATUS_OK
ReadX 9356 0 4096 4096 NT_STATUS_OK
ReadX 9356 4096 4096 4096 NT_STATUS_OK
ReadX 9356 8192 4096 4096 NT_STATUS_OK
Close 9355 NT_STATUS_OK
Close 9356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9357 NT_STATUS_OK
WriteX 9357 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9357 258 NT_STATUS_OK
WriteX 9357 0 15360 15360 NT_STATUS_OK
Close 9357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9358 NT_STATUS_OK
ReadX 9358 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9359 NT_STATUS_OK
Close 9359 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9361 NT_STATUS_OK
ReadX 9361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9362 NT_STATUS_OK
SET_FILE_INFORMATION 9362 1004 NT_STATUS_OK
Close 9362 NT_STATUS_OK
WriteX 9358 0 4096 4096 NT_STATUS_OK
Close 9358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9363 NT_STATUS_OK
Close 9363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9365 NT_STATUS_OK
ReadX 9365 0 4096 4096 NT_STATUS_OK
ReadX 9365 4096 4096 4096 NT_STATUS_OK
ReadX 9365 8192 4096 4096 NT_STATUS_OK
ReadX 9365 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9365 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9365 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9366 NT_STATUS_OK
ReadX 9366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9367 NT_STATUS_OK
WriteX 9367 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9367 258 NT_STATUS_OK
WriteX 9367 0 53 53 NT_STATUS_OK
Close 9367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9368 NT_STATUS_OK
Close 9368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9366 4096 4096 4096 NT_STATUS_OK
ReadX 9366 8192 4096 4096 NT_STATUS_OK
ReadX 9366 12288 4096 4096 NT_STATUS_OK
WriteX 9370 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9370 258 NT_STATUS_OK
WriteX 9370 0 12006 12006 NT_STATUS_OK
Close 9370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9371 NT_STATUS_OK
ReadX 9371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9371 1004 NT_STATUS_OK
WriteX 9371 0 4096 4096 NT_STATUS_OK
Close 9371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9372 NT_STATUS_OK
Close 9372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9374 NT_STATUS_OK
ReadX 9374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9375 NT_STATUS_OK
Close 9375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9374 4096 4096 4096 NT_STATUS_OK
ReadX 9374 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9377 NT_STATUS_OK
WriteX 9377 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9377 258 NT_STATUS_OK
WriteX 9377 0 11991 11991 NT_STATUS_OK
Close 9377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9378 NT_STATUS_OK
ReadX 9378 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9379 NT_STATUS_OK
Close 9379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9381 NT_STATUS_OK
ReadX 9381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9382 NT_STATUS_OK
SET_FILE_INFORMATION 9382 1004 NT_STATUS_OK
Close 9382 NT_STATUS_OK
WriteX 9378 0 4096 4096 NT_STATUS_OK
Close 9378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9383 NT_STATUS_OK
Close 9383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9385 NT_STATUS_OK
ReadX 9385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9386 NT_STATUS_OK
Close 9386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9385 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9385 1004 NT_STATUS_OK
ReadX 9385 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9385 1004 NT_STATUS_OK
WriteX 9385 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9385 1004 NT_STATUS_OK
Close 9361 NT_STATUS_OK
WriteX 9365 0 19054 19054 NT_STATUS_OK
WriteX 9385 0 12288 12288 NT_STATUS_OK
Close 9381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9388 NT_STATUS_OK
Close 9388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9365 NT_STATUS_OK
Close 9385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9390 NT_STATUS_OK
Close 9390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9392 NT_STATUS_OK
ReadX 9392 0 61440 61440 NT_STATUS_OK
ReadX 9392 61440 4096 4096 NT_STATUS_OK
ReadX 9392 65536 61440 61440 NT_STATUS_OK
ReadX 9392 126976 4096 4096 NT_STATUS_OK
ReadX 9392 131072 61440 61440 NT_STATUS_OK
ReadX 9392 192512 4096 4096 NT_STATUS_OK
ReadX 9392 196608 61440 61440 NT_STATUS_OK
ReadX 9392 258048 4096 4096 NT_STATUS_OK
ReadX 9392 262144 61440 61440 NT_STATUS_OK
ReadX 9392 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9393 NT_STATUS_OK
ReadX 9393 0 61440 61440 NT_STATUS_OK
ReadX 9393 61440 4096 4096 NT_STATUS_OK
ReadX 9393 65536 61440 61440 NT_STATUS_OK
ReadX 9393 126976 4096 4096 NT_STATUS_OK
ReadX 9393 131072 61440 61440 NT_STATUS_OK
ReadX 9393 192512 4096 4096 NT_STATUS_OK
ReadX 9393 196608 61440 61440 NT_STATUS_OK
ReadX 9393 258048 4096 4096 NT_STATUS_OK
ReadX 9393 262144 61440 61440 NT_STATUS_OK
ReadX 9393 323584 4096 4096 NT_STATUS_OK
ReadX 9393 327680 61440 61440 NT_STATUS_OK
ReadX 9393 389120 4096 4096 NT_STATUS_OK
ReadX 9393 393216 61440 61440 NT_STATUS_OK
ReadX 9393 454656 4096 4096 NT_STATUS_OK
ReadX 9393 458752 61440 61440 NT_STATUS_OK
ReadX 9393 520192 4096 4096 NT_STATUS_OK
ReadX 9393 524288 61440 61440 NT_STATUS_OK
ReadX 9393 585728 4096 4096 NT_STATUS_OK
ReadX 9393 589824 61440 61440 NT_STATUS_OK
ReadX 9393 651264 4096 4096 NT_STATUS_OK
ReadX 9393 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9394 NT_STATUS_OK
ReadX 9394 0 61440 61440 NT_STATUS_OK
ReadX 9394 61440 4096 4096 NT_STATUS_OK
ReadX 9394 65536 61440 61440 NT_STATUS_OK
ReadX 9394 126976 4096 4096 NT_STATUS_OK
ReadX 9394 131072 61440 61440 NT_STATUS_OK
ReadX 9394 192512 4096 4096 NT_STATUS_OK
ReadX 9394 196608 61440 61440 NT_STATUS_OK
ReadX 9394 258048 4096 4096 NT_STATUS_OK
ReadX 9394 262144 61440 61440 NT_STATUS_OK
ReadX 9394 323584 4096 4096 NT_STATUS_OK
ReadX 9394 327680 61440 61440 NT_STATUS_OK
ReadX 9394 389120 4096 4096 NT_STATUS_OK
ReadX 9394 393216 61440 61440 NT_STATUS_OK
ReadX 9394 454656 4096 4096 NT_STATUS_OK
ReadX 9394 458752 61440 61440 NT_STATUS_OK
ReadX 9394 520192 4096 4096 NT_STATUS_OK
ReadX 9394 524288 61440 61440 NT_STATUS_OK
ReadX 9394 585728 4096 4096 NT_STATUS_OK
ReadX 9394 589824 61440 61440 NT_STATUS_OK
ReadX 9394 651264 4096 4096 NT_STATUS_OK
ReadX 9394 655360 61440 61440 NT_STATUS_OK
ReadX 9394 716800 4096 4096 NT_STATUS_OK
ReadX 9394 720896 61440 61440 NT_STATUS_OK
ReadX 9394 782336 4096 4096 NT_STATUS_OK
ReadX 9394 786432 61440 61440 NT_STATUS_OK
ReadX 9394 847872 4096 4096 NT_STATUS_OK
ReadX 9394 851968 61440 61440 NT_STATUS_OK
ReadX 9394 913408 4096 4096 NT_STATUS_OK
ReadX 9394 917504 61440 61440 NT_STATUS_OK
ReadX 9394 978944 4096 4096 NT_STATUS_OK
ReadX 9394 983040 61440 61440 NT_STATUS_OK
ReadX 9394 1044480 4096 4096 NT_STATUS_OK
ReadX 9394 1048576 61440 61440 NT_STATUS_OK
ReadX 9394 1110016 4096 4096 NT_STATUS_OK
ReadX 9394 1114112 61440 61440 NT_STATUS_OK
ReadX 9394 1175552 4096 4096 NT_STATUS_OK
ReadX 9394 1179648 61440 61440 NT_STATUS_OK
ReadX 9394 1241088 4096 4096 NT_STATUS_OK
ReadX 9394 1245184 61440 61440 NT_STATUS_OK
ReadX 9394 1306624 4096 4096 NT_STATUS_OK
ReadX 9394 1310720 61440 61440 NT_STATUS_OK
ReadX 9394 1372160 4096 4096 NT_STATUS_OK
ReadX 9394 1376256 61440 61440 NT_STATUS_OK
ReadX 9394 1437696 4096 4096 NT_STATUS_OK
ReadX 9394 1441792 61440 61440 NT_STATUS_OK
ReadX 9394 1503232 4096 4096 NT_STATUS_OK
ReadX 9394 1507328 61440 61440 NT_STATUS_OK
ReadX 9394 1568768 4096 4096 NT_STATUS_OK
ReadX 9394 1572864 61440 61440 NT_STATUS_OK
ReadX 9394 1634304 4096 4096 NT_STATUS_OK
ReadX 9394 1638400 61440 61440 NT_STATUS_OK
ReadX 9394 1699840 4096 4096 NT_STATUS_OK
ReadX 9394 1703936 61440 61440 NT_STATUS_OK
ReadX 9394 1765376 4096 4096 NT_STATUS_OK
ReadX 9394 1769472 61440 61440 NT_STATUS_OK
ReadX 9394 1830912 4096 4096 NT_STATUS_OK
ReadX 9394 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9396 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9397 NT_STATUS_OK
ReadX 9397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9398 NT_STATUS_OK
ReadX 9398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9399 NT_STATUS_OK
ReadX 9399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9401 NT_STATUS_OK
QUERY_FILE_INFORMATION 9401 1004 NT_STATUS_OK
WriteX 9401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9401 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9402 NT_STATUS_OK
Close 9402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9403 NT_STATUS_OK
WriteX 9403 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9403 258 NT_STATUS_OK
WriteX 9403 0 491 491 NT_STATUS_OK
Close 9403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9404 NT_STATUS_OK
ReadX 9404 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9401 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9406 NT_STATUS_OK
Close 9406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9407 NT_STATUS_OK
WriteX 9407 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9407 258 NT_STATUS_OK
WriteX 9407 0 543 543 NT_STATUS_OK
Close 9407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9408 NT_STATUS_OK
ReadX 9408 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9392 NT_STATUS_OK
Close 9393 NT_STATUS_OK
Close 9394 NT_STATUS_OK
Close 9408 NT_STATUS_OK
Close 9396 NT_STATUS_OK
Close 9397 NT_STATUS_OK
Close 9398 NT_STATUS_OK
Close 9399 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9412 NT_STATUS_OK
ReadX 9412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9413 NT_STATUS_OK
ReadX 9413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9414 NT_STATUS_OK
ReadX 9414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9415 NT_STATUS_OK
ReadX 9415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9416 NT_STATUS_OK
ReadX 9416 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9421 NT_STATUS_OK
QUERY_FILE_INFORMATION 9421 1004 NT_STATUS_OK
WriteX 9421 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9421 258 NT_STATUS_OK
WriteX 9421 0 2048 2048 NT_STATUS_OK
Close 9421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9422 NT_STATUS_OK
ReadX 9422 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9422 0 4096 4096 NT_STATUS_OK
Flush 9422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9422 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9427 NT_STATUS_OK
WriteX 9427 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9427 258 NT_STATUS_OK
WriteX 9427 0 2048 2048 NT_STATUS_OK
Close 9427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9428 NT_STATUS_OK
Close 9416 NT_STATUS_OK
ReadX 9428 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9432 NT_STATUS_OK
Close 9432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9433 NT_STATUS_OK
WriteX 9433 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9433 258 NT_STATUS_OK
WriteX 9433 0 2048 2048 NT_STATUS_OK
Close 9433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9434 NT_STATUS_OK
ReadX 9434 0 2048 2048 NT_STATUS_OK
ReadX 9412 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9428 0 4096 4096 NT_STATUS_OK
WriteX 9412 0 8192 8192 NT_STATUS_OK
WriteX 9413 0 4096 4096 NT_STATUS_OK
WriteX 9414 0 4096 4096 NT_STATUS_OK
ReadX 9428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9437 NT_STATUS_OK
ReadX 9437 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9438 NT_STATUS_OK
QUERY_FILE_INFORMATION 9438 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9437 NT_STATUS_OK
Close 9413 NT_STATUS_OK
Close 9414 NT_STATUS_OK
Close 9415 NT_STATUS_OK
Close 9428 NT_STATUS_OK
Close 9412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9441 NT_STATUS_OK
ReadX 9441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9442 NT_STATUS_OK
ReadX 9442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9443 NT_STATUS_OK
ReadX 9443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9444 NT_STATUS_OK
ReadX 9444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9445 NT_STATUS_OK
ReadX 9445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9446 NT_STATUS_OK
ReadX 9446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9447 NT_STATUS_OK
ReadX 9447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9448 NT_STATUS_OK
ReadX 9448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9449 NT_STATUS_OK
ReadX 9449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9450 NT_STATUS_OK
ReadX 9450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9451 NT_STATUS_OK
ReadX 9451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9452 NT_STATUS_OK
ReadX 9452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9453 NT_STATUS_OK
ReadX 9453 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9458 NT_STATUS_OK
QUERY_FILE_INFORMATION 9458 1004 NT_STATUS_OK
WriteX 9458 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9458 258 NT_STATUS_OK
WriteX 9458 0 2048 2048 NT_STATUS_OK
Close 9458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9459 NT_STATUS_OK
ReadX 9459 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9461 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9466 NT_STATUS_OK
QUERY_FILE_INFORMATION 9466 1004 NT_STATUS_OK
WriteX 9466 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9466 258 NT_STATUS_OK
WriteX 9466 0 2048 2048 NT_STATUS_OK
Close 9466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9467 NT_STATUS_OK
ReadX 9467 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9459 0 4096 4096 NT_STATUS_OK
Flush 9459 NT_STATUS_OK
WriteX 9467 0 4096 4096 NT_STATUS_OK
Flush 9467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9461 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9469 NT_STATUS_OK
WriteX 9469 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9469 258 NT_STATUS_OK
WriteX 9469 0 4096 4096 NT_STATUS_OK
Close 9469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9470 NT_STATUS_OK
ReadX 9470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9471 NT_STATUS_OK
Close 9471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9472 NT_STATUS_OK
WriteX 9472 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9472 258 NT_STATUS_OK
WriteX 9472 0 4096 4096 NT_STATUS_OK
Close 9472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9473 NT_STATUS_OK
ReadX 9473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9473 0 4096 4096 NT_STATUS_OK
Close 9470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9453 NT_STATUS_OK
Close 9447 NT_STATUS_OK
Close 9461 NT_STATUS_OK
Close 9450 NT_STATUS_OK
Close 9451 NT_STATUS_OK
Close 9452 NT_STATUS_OK
Close 9448 NT_STATUS_OK
Close 9441 NT_STATUS_OK
Close 9442 NT_STATUS_OK
Close 9445 NT_STATUS_OK
Close 9446 NT_STATUS_OK
Close 9443 NT_STATUS_OK
Close 9444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9476 NT_STATUS_OK
Close 9476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9478 NT_STATUS_OK
ReadX 9478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9479 NT_STATUS_OK
Close 9479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9480 NT_STATUS_OK
WriteX 9480 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9480 258 NT_STATUS_OK
WriteX 9480 0 2048 2048 NT_STATUS_OK
Close 9480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9481 NT_STATUS_OK
ReadX 9481 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9483 NT_STATUS_OK
ReadX 9483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9484 NT_STATUS_OK
ReadX 9484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9485 NT_STATUS_OK
ReadX 9485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9486 NT_STATUS_OK
ReadX 9486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9487 NT_STATUS_OK
ReadX 9487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9488 NT_STATUS_OK
ReadX 9488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9489 NT_STATUS_OK
ReadX 9489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9490 NT_STATUS_OK
ReadX 9490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9491 NT_STATUS_OK
ReadX 9491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9492 NT_STATUS_OK
ReadX 9492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9493 NT_STATUS_OK
ReadX 9493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9494 NT_STATUS_OK
ReadX 9494 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9495 NT_STATUS_OK
QUERY_FILE_INFORMATION 9495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9478 NT_STATUS_OK
Close 9481 NT_STATUS_OK
Close 9493 NT_STATUS_OK
Close 9488 NT_STATUS_OK
Close 9489 NT_STATUS_OK
Close 9490 NT_STATUS_OK
Close 9491 NT_STATUS_OK
Close 9492 NT_STATUS_OK
Close 9494 NT_STATUS_OK
Close 9482 NT_STATUS_OK
Close 9483 NT_STATUS_OK
Close 9486 NT_STATUS_OK
Close 9487 NT_STATUS_OK
Close 9484 NT_STATUS_OK
Close 9485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9497 NT_STATUS_OK
QUERY_FILE_INFORMATION 9497 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 9499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9500 NT_STATUS_OK
ReadX 9500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9501 NT_STATUS_OK
ReadX 9501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9502 NT_STATUS_OK
ReadX 9502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9503 NT_STATUS_OK
ReadX 9503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9504 NT_STATUS_OK
ReadX 9504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9505 NT_STATUS_OK
ReadX 9505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9506 NT_STATUS_OK
ReadX 9506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9507 NT_STATUS_OK
ReadX 9507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9508 NT_STATUS_OK
ReadX 9508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9509 NT_STATUS_OK
ReadX 9509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9510 NT_STATUS_OK
ReadX 9510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9511 NT_STATUS_OK
ReadX 9511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9512 NT_STATUS_OK
ReadX 9512 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9517 NT_STATUS_OK
QUERY_FILE_INFORMATION 9517 1004 NT_STATUS_OK
WriteX 9517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9517 258 NT_STATUS_OK
WriteX 9517 0 2048 2048 NT_STATUS_OK
Close 9517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9518 NT_STATUS_OK
ReadX 9518 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9521 NT_STATUS_OK
ReadX 9521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9522 NT_STATUS_OK
ReadX 9522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9523 NT_STATUS_OK
ReadX 9523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9524 NT_STATUS_OK
ReadX 9524 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 9528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9529 NT_STATUS_OK
QUERY_FILE_INFORMATION 9529 1004 NT_STATUS_OK
WriteX 9529 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9529 258 NT_STATUS_OK
WriteX 9529 0 2048 2048 NT_STATUS_OK
Close 9529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9530 NT_STATUS_OK
ReadX 9530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9537 NT_STATUS_OK
QUERY_FILE_INFORMATION 9537 1004 NT_STATUS_OK
WriteX 9537 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9537 258 NT_STATUS_OK
WriteX 9537 0 2048 2048 NT_STATUS_OK
Close 9537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9538 NT_STATUS_OK
ReadX 9538 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9518 0 4096 4096 NT_STATUS_OK
Flush 9518 NT_STATUS_OK
WriteX 9530 0 4096 4096 NT_STATUS_OK
Flush 9530 NT_STATUS_OK
WriteX 9538 0 4096 4096 NT_STATUS_OK
Flush 9538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 9530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9538 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9520 4096 16384 16384 NT_STATUS_OK
ReadX 9500 4096 16384 16384 NT_STATUS_OK
ReadX 9532 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9540 NT_STATUS_OK
ReadX 9540 0 2048 2048 NT_STATUS_OK
WriteX 9540 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9541 NT_STATUS_OK
QUERY_FILE_INFORMATION 9541 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9540 NT_STATUS_OK
Close 9524 NT_STATUS_OK
Close 9512 NT_STATUS_OK
Close 9504 NT_STATUS_OK
Close 9520 NT_STATUS_OK
Close 9521 NT_STATUS_OK
Close 9522 NT_STATUS_OK
Close 9523 NT_STATUS_OK
Close 9511 NT_STATUS_OK
Close 9532 NT_STATUS_OK
Close 9506 NT_STATUS_OK
Close 9509 NT_STATUS_OK
Close 9510 NT_STATUS_OK
Close 9507 NT_STATUS_OK
Close 9508 NT_STATUS_OK
Close 9500 NT_STATUS_OK
Close 9501 NT_STATUS_OK
Close 9502 NT_STATUS_OK
Close 9503 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9543 NT_STATUS_OK
QUERY_FILE_INFORMATION 9543 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9545 NT_STATUS_OK
QUERY_FILE_INFORMATION 9545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9548 NT_STATUS_OK
ReadX 9548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9549 NT_STATUS_OK
ReadX 9549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9550 NT_STATUS_OK
ReadX 9550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9551 NT_STATUS_OK
ReadX 9551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9552 NT_STATUS_OK
ReadX 9552 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9548 4096 16384 16384 NT_STATUS_OK
WriteX 9548 0 4096 4096 NT_STATUS_OK
WriteX 9549 0 4096 4096 NT_STATUS_OK
WriteX 9550 0 4096 4096 NT_STATUS_OK
WriteX 9551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9554 NT_STATUS_OK
ReadX 9554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9555 NT_STATUS_OK
ReadX 9555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9556 NT_STATUS_OK
ReadX 9556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9557 NT_STATUS_OK
ReadX 9557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9558 NT_STATUS_OK
ReadX 9558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9559 NT_STATUS_OK
ReadX 9559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9560 NT_STATUS_OK
ReadX 9560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9561 NT_STATUS_OK
ReadX 9561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9562 NT_STATUS_OK
ReadX 9562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9563 NT_STATUS_OK
ReadX 9563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9564 NT_STATUS_OK
ReadX 9564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9565 NT_STATUS_OK
ReadX 9565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9566 NT_STATUS_OK
ReadX 9566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9567 NT_STATUS_OK
ReadX 9567 0 8192 8192 NT_STATUS_OK
ReadX 9554 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9568 0 4096 4096 NT_STATUS_OK
ReadX 9568 4096 4096 4096 NT_STATUS_OK
ReadX 9568 8192 4096 4096 NT_STATUS_OK
WriteX 9554 0 4096 4096 NT_STATUS_OK
WriteX 9555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9569 0 4096 4096 NT_STATUS_OK
ReadX 9569 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9548 0 4096 4096 NT_STATUS_OK
WriteX 9549 0 4096 4096 NT_STATUS_OK
WriteX 9550 0 4096 4096 NT_STATUS_OK
WriteX 9551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9574 NT_STATUS_OK
QUERY_FILE_INFORMATION 9574 1004 NT_STATUS_OK
WriteX 9574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9574 258 NT_STATUS_OK
WriteX 9574 0 2048 2048 NT_STATUS_OK
Close 9574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9575 NT_STATUS_OK
ReadX 9575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9577 NT_STATUS_OK
ReadX 9577 0 4096 4096 NT_STATUS_OK
ReadX 9577 4096 4096 4096 NT_STATUS_OK
WriteX 9577 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9579 NT_STATUS_OK
ReadX 9579 0 4096 4096 NT_STATUS_OK
ReadX 9579 4096 4096 4096 NT_STATUS_OK
WriteX 9579 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9580 NT_STATUS_OK
QUERY_FILE_INFORMATION 9580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9567 NT_STATUS_OK
Close 9552 NT_STATUS_OK
Close 9548 NT_STATUS_OK
Close 9549 NT_STATUS_OK
Close 9550 NT_STATUS_OK
Close 9551 NT_STATUS_OK
Close 9560 NT_STATUS_OK
Close 9565 NT_STATUS_OK
Close 9561 NT_STATUS_OK
Close 9562 NT_STATUS_OK
Close 9563 NT_STATUS_OK
Close 9564 NT_STATUS_OK
Close 9566 NT_STATUS_OK
Close 9554 NT_STATUS_OK
Close 9555 NT_STATUS_OK
Close 9558 NT_STATUS_OK
Close 9559 NT_STATUS_OK
Close 9556 NT_STATUS_OK
Close 9557 NT_STATUS_OK
Close 9579 NT_STATUS_OK
Close 9568 NT_STATUS_OK
Close 9569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9582 0 4096 4096 NT_STATUS_OK
ReadX 9582 4096 4096 4096 NT_STATUS_OK
ReadX 9582 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9584 NT_STATUS_OK
ReadX 9584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9585 NT_STATUS_OK
ReadX 9585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9586 NT_STATUS_OK
ReadX 9586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9587 NT_STATUS_OK
ReadX 9587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9588 NT_STATUS_OK
ReadX 9588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9589 NT_STATUS_OK
ReadX 9589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9590 NT_STATUS_OK
ReadX 9590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9591 NT_STATUS_OK
ReadX 9591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9592 NT_STATUS_OK
ReadX 9592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9593 NT_STATUS_OK
ReadX 9593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9594 NT_STATUS_OK
ReadX 9594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9595 NT_STATUS_OK
ReadX 9595 0 4096 4096 NT_STATUS_OK
ReadX 9583 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9600 NT_STATUS_OK
QUERY_FILE_INFORMATION 9600 1004 NT_STATUS_OK
WriteX 9600 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9600 258 NT_STATUS_OK
WriteX 9600 0 2048 2048 NT_STATUS_OK
Close 9600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9601 NT_STATUS_OK
ReadX 9601 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9601 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9605 NT_STATUS_OK
Close 9605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9606 NT_STATUS_OK
QUERY_FILE_INFORMATION 9606 1004 NT_STATUS_OK
WriteX 9606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9606 258 NT_STATUS_OK
WriteX 9606 0 2048 2048 NT_STATUS_OK
Close 9606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9607 NT_STATUS_OK
ReadX 9607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9590 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9608 NT_STATUS_OK
QUERY_FILE_INFORMATION 9608 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9594 NT_STATUS_OK
Close 9589 NT_STATUS_OK
Close 9595 NT_STATUS_OK
Close 9583 NT_STATUS_OK
Close 9584 NT_STATUS_OK
Close 9587 NT_STATUS_OK
Close 9588 NT_STATUS_OK
Close 9585 NT_STATUS_OK
Close 9586 NT_STATUS_OK
Close 9590 NT_STATUS_OK
Close 9591 NT_STATUS_OK
Close 9592 NT_STATUS_OK
Close 9593 NT_STATUS_OK
Close 9582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9610 NT_STATUS_OK
QUERY_FILE_INFORMATION 9610 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9612 NT_STATUS_OK
ReadX 9612 61440 4096 4096 NT_STATUS_OK
ReadX 9612 126976 4096 4096 NT_STATUS_OK
WriteX 9612 0 65536 65536 NT_STATUS_OK
WriteX 9612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9613 NT_STATUS_OK
ReadX 9613 61440 4096 4096 NT_STATUS_OK
ReadX 9613 126976 4096 4096 NT_STATUS_OK
ReadX 9613 192512 4096 4096 NT_STATUS_OK
ReadX 9613 258048 4096 4096 NT_STATUS_OK
WriteX 9613 0 65536 65536 NT_STATUS_OK
WriteX 9613 65536 65536 65536 NT_STATUS_OK
WriteX 9613 131072 65536 65536 NT_STATUS_OK
WriteX 9613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9614 NT_STATUS_OK
ReadX 9614 61440 4096 4096 NT_STATUS_OK
ReadX 9614 126976 4096 4096 NT_STATUS_OK
ReadX 9614 192512 4096 4096 NT_STATUS_OK
ReadX 9614 258048 4096 4096 NT_STATUS_OK
ReadX 9614 323584 4096 4096 NT_STATUS_OK
ReadX 9614 389120 4096 4096 NT_STATUS_OK
ReadX 9614 454656 4096 4096 NT_STATUS_OK
ReadX 9614 520192 4096 4096 NT_STATUS_OK
WriteX 9614 0 65536 65536 NT_STATUS_OK
WriteX 9614 65536 65536 65536 NT_STATUS_OK
WriteX 9614 131072 65536 65536 NT_STATUS_OK
WriteX 9614 196608 65536 65536 NT_STATUS_OK
WriteX 9614 262144 65536 65536 NT_STATUS_OK
WriteX 9614 327680 65536 65536 NT_STATUS_OK
WriteX 9614 393216 65536 65536 NT_STATUS_OK
WriteX 9614 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9615 NT_STATUS_OK
ReadX 9615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9615 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9615 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9615 8192 4096 4096 NT_STATUS_OK
ReadX 9615 12288 4096 4096 NT_STATUS_OK
ReadX 9615 16384 4096 4096 NT_STATUS_OK
ReadX 9615 20480 4096 4096 NT_STATUS_OK
ReadX 9615 24576 4096 4096 NT_STATUS_OK
ReadX 9615 28672 4096 4096 NT_STATUS_OK
ReadX 9615 32768 4096 4096 NT_STATUS_OK
ReadX 9615 36864 4096 4096 NT_STATUS_OK
ReadX 9615 40960 4096 4096 NT_STATUS_OK
ReadX 9615 45056 4096 4096 NT_STATUS_OK
ReadX 9615 49152 4096 4096 NT_STATUS_OK
ReadX 9615 53248 4096 4096 NT_STATUS_OK
ReadX 9615 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9615 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9616 NT_STATUS_OK
Close 9616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9612 NT_STATUS_OK
Close 9613 NT_STATUS_OK
Close 9614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9618 NT_STATUS_OK
WriteX 9618 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9618 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9618 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9618 1004 NT_STATUS_OK
WriteX 9618 0 57088 57088 NT_STATUS_OK
WriteX 9618 0 4096 4096 NT_STATUS_OK
Flush 9618 NT_STATUS_OK
Close 9615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9619 NT_STATUS_OK
SET_FILE_INFORMATION 9619 1004 NT_STATUS_OK
Close 9619 NT_STATUS_OK
SET_FILE_INFORMATION 9618 1004 NT_STATUS_OK
WriteX 9618 0 4096 4096 NT_STATUS_OK
Close 9618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9620 NT_STATUS_OK
Close 9620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9622 NT_STATUS_OK
ReadX 9622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9623 NT_STATUS_OK
WriteX 9623 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9623 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9623 1004 NT_STATUS_OK
WriteX 9623 0 51456 51456 NT_STATUS_OK
WriteX 9623 0 4096 4096 NT_STATUS_OK
Flush 9623 NT_STATUS_OK
SET_FILE_INFORMATION 9623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9623 1004 NT_STATUS_OK
WriteX 9623 0 4096 4096 NT_STATUS_OK
Close 9623 NT_STATUS_OK
Close 9622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9625 NT_STATUS_OK
Close 9625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9627 NT_STATUS_OK
ReadX 9627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9627 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9629 NT_STATUS_OK
Close 9629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9632 NT_STATUS_OK
WriteX 9632 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9632 258 NT_STATUS_OK
WriteX 9632 0 53077 53077 NT_STATUS_OK
Close 9632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9633 NT_STATUS_OK
WriteX 9633 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9633 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9633 1004 NT_STATUS_OK
WriteX 9633 0 65536 65536 NT_STATUS_OK
WriteX 9633 65536 1856 1856 NT_STATUS_OK
WriteX 9633 0 4096 4096 NT_STATUS_OK
Flush 9633 NT_STATUS_OK
SET_FILE_INFORMATION 9633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9633 1004 NT_STATUS_OK
WriteX 9633 0 4096 4096 NT_STATUS_OK
Close 9633 NT_STATUS_OK
Close 9627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9635 NT_STATUS_OK
Close 9635 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9637 NT_STATUS_OK
ReadX 9637 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9639 NT_STATUS_OK
Close 9639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9642 NT_STATUS_OK
WriteX 9642 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9642 258 NT_STATUS_OK
WriteX 9642 0 7983 7983 NT_STATUS_OK
Close 9642 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9644 NT_STATUS_OK
Close 9644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9647 NT_STATUS_OK
WriteX 9647 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9647 258 NT_STATUS_OK
WriteX 9647 0 65536 65536 NT_STATUS_OK
WriteX 9647 65536 65536 65536 NT_STATUS_OK
WriteX 9647 131072 65536 65536 NT_STATUS_OK
WriteX 9647 196608 65536 65536 NT_STATUS_OK
WriteX 9647 262144 65536 65536 NT_STATUS_OK
WriteX 9647 327680 65536 65536 NT_STATUS_OK
WriteX 9647 393216 65536 65536 NT_STATUS_OK
WriteX 9647 458752 46731 46731 NT_STATUS_OK
Close 9647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9648 NT_STATUS_OK
WriteX 9648 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9648 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9637 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9648 1004 NT_STATUS_OK
WriteX 9648 0 65536 65536 NT_STATUS_OK
WriteX 9648 65536 22848 22848 NT_STATUS_OK
WriteX 9648 0 4096 4096 NT_STATUS_OK
Flush 9648 NT_STATUS_OK
SET_FILE_INFORMATION 9648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9648 1004 NT_STATUS_OK
WriteX 9648 0 4096 4096 NT_STATUS_OK
Close 9648 NT_STATUS_OK
Close 9637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9650 NT_STATUS_OK
Close 9650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9652 NT_STATUS_OK
ReadX 9652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9652 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9653 NT_STATUS_OK
ReadX 9653 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9653 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9653 1004 NT_STATUS_OK
ReadX 9653 8192 4096 4096 NT_STATUS_OK
ReadX 9653 12288 4096 4096 NT_STATUS_OK
ReadX 9653 16384 4096 4096 NT_STATUS_OK
ReadX 9653 20480 4096 4096 NT_STATUS_OK
ReadX 9653 24576 4096 4096 NT_STATUS_OK
ReadX 9653 28672 4096 4096 NT_STATUS_OK
ReadX 9653 32768 4096 4096 NT_STATUS_OK
ReadX 9653 36864 4096 4096 NT_STATUS_OK
ReadX 9653 40960 4096 4096 NT_STATUS_OK
ReadX 9653 45056 4096 4096 NT_STATUS_OK
ReadX 9653 49152 4096 4096 NT_STATUS_OK
ReadX 9653 53248 4096 4096 NT_STATUS_OK
ReadX 9653 57344 4096 4096 NT_STATUS_OK
ReadX 9653 61440 4096 4096 NT_STATUS_OK
ReadX 9653 65536 4096 4096 NT_STATUS_OK
ReadX 9653 69632 4096 4096 NT_STATUS_OK
ReadX 9653 73728 4096 4096 NT_STATUS_OK
ReadX 9653 77824 4096 4096 NT_STATUS_OK
ReadX 9653 81920 4096 4096 NT_STATUS_OK
ReadX 9653 86016 4096 4096 NT_STATUS_OK
ReadX 9653 90112 4096 4096 NT_STATUS_OK
ReadX 9653 94208 4096 4096 NT_STATUS_OK
ReadX 9653 98304 4096 4096 NT_STATUS_OK
ReadX 9653 102400 4096 4096 NT_STATUS_OK
ReadX 9653 106496 4096 4096 NT_STATUS_OK
ReadX 9653 110592 4096 4096 NT_STATUS_OK
ReadX 9653 114688 4096 4096 NT_STATUS_OK
ReadX 9653 118784 4096 4096 NT_STATUS_OK
ReadX 9653 122880 4096 4096 NT_STATUS_OK
ReadX 9653 126976 4096 4096 NT_STATUS_OK
ReadX 9653 131072 4096 4096 NT_STATUS_OK
ReadX 9653 135168 4096 4096 NT_STATUS_OK
ReadX 9653 139264 4096 4096 NT_STATUS_OK
ReadX 9653 143360 4096 4096 NT_STATUS_OK
ReadX 9653 147456 4096 4096 NT_STATUS_OK
ReadX 9653 151552 4096 4096 NT_STATUS_OK
ReadX 9653 155648 4096 4096 NT_STATUS_OK
ReadX 9653 159744 4096 4096 NT_STATUS_OK
ReadX 9653 163840 4096 4096 NT_STATUS_OK
ReadX 9653 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9653 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9654 NT_STATUS_OK
Close 9654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9656 NT_STATUS_OK
WriteX 9656 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9656 258 NT_STATUS_OK
Close 9653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9657 NT_STATUS_OK
SET_FILE_INFORMATION 9657 1004 NT_STATUS_OK
Close 9657 NT_STATUS_OK
WriteX 9656 0 42388 42388 NT_STATUS_OK
Close 9656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9658 NT_STATUS_OK
Close 9658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9660 NT_STATUS_OK
ReadX 9660 0 4096 4096 NT_STATUS_OK
ReadX 9660 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9661 NT_STATUS_OK
WriteX 9661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9661 258 NT_STATUS_OK
SET_FILE_INFORMATION 9661 1004 NT_STATUS_OK
WriteX 9661 0 42652 42652 NT_STATUS_OK
Close 9661 NT_STATUS_OK
Close 9660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9663 NT_STATUS_OK
Close 9663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9665 NT_STATUS_OK
ReadX 9665 0 4096 4096 NT_STATUS_OK
ReadX 9665 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9667 NT_STATUS_OK
Close 9667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9670 NT_STATUS_OK
WriteX 9670 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9670 258 NT_STATUS_OK
WriteX 9670 0 65536 65536 NT_STATUS_OK
WriteX 9670 65536 49 49 NT_STATUS_OK
Close 9670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9671 NT_STATUS_OK
ReadX 9671 0 61440 61440 NT_STATUS_OK
ReadX 9671 61440 4096 4096 NT_STATUS_OK
ReadX 9671 65536 61440 61440 NT_STATUS_OK
ReadX 9671 126976 4096 4096 NT_STATUS_OK
ReadX 9671 131072 61440 61440 NT_STATUS_OK
ReadX 9671 192512 4096 4096 NT_STATUS_OK
ReadX 9671 196608 61440 61440 NT_STATUS_OK
ReadX 9671 258048 4096 4096 NT_STATUS_OK
ReadX 9671 262144 61440 61440 NT_STATUS_OK
ReadX 9671 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9672 NT_STATUS_OK
ReadX 9672 0 61440 61440 NT_STATUS_OK
ReadX 9672 61440 4096 4096 NT_STATUS_OK
ReadX 9672 65536 61440 61440 NT_STATUS_OK
ReadX 9672 126976 4096 4096 NT_STATUS_OK
ReadX 9672 131072 61440 61440 NT_STATUS_OK
ReadX 9672 192512 4096 4096 NT_STATUS_OK
ReadX 9672 196608 61440 61440 NT_STATUS_OK
ReadX 9672 258048 4096 4096 NT_STATUS_OK
ReadX 9672 262144 61440 61440 NT_STATUS_OK
ReadX 9672 323584 4096 4096 NT_STATUS_OK
ReadX 9672 327680 61440 61440 NT_STATUS_OK
ReadX 9672 389120 4096 4096 NT_STATUS_OK
ReadX 9672 393216 61440 61440 NT_STATUS_OK
ReadX 9672 454656 4096 4096 NT_STATUS_OK
ReadX 9672 458752 61440 61440 NT_STATUS_OK
ReadX 9672 520192 4096 4096 NT_STATUS_OK
ReadX 9672 524288 61440 61440 NT_STATUS_OK
ReadX 9672 585728 4096 4096 NT_STATUS_OK
ReadX 9672 589824 61440 61440 NT_STATUS_OK
ReadX 9672 651264 4096 4096 NT_STATUS_OK
ReadX 9672 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9673 NT_STATUS_OK
ReadX 9673 0 61440 61440 NT_STATUS_OK
ReadX 9673 61440 4096 4096 NT_STATUS_OK
ReadX 9673 65536 61440 61440 NT_STATUS_OK
ReadX 9673 126976 4096 4096 NT_STATUS_OK
ReadX 9673 131072 61440 61440 NT_STATUS_OK
ReadX 9673 192512 4096 4096 NT_STATUS_OK
ReadX 9673 196608 61440 61440 NT_STATUS_OK
ReadX 9673 258048 4096 4096 NT_STATUS_OK
ReadX 9673 262144 61440 61440 NT_STATUS_OK
ReadX 9673 323584 4096 4096 NT_STATUS_OK
ReadX 9673 327680 61440 61440 NT_STATUS_OK
ReadX 9673 389120 4096 4096 NT_STATUS_OK
ReadX 9673 393216 61440 61440 NT_STATUS_OK
ReadX 9673 454656 4096 4096 NT_STATUS_OK
ReadX 9673 458752 61440 61440 NT_STATUS_OK
ReadX 9673 520192 4096 4096 NT_STATUS_OK
ReadX 9673 524288 61440 61440 NT_STATUS_OK
ReadX 9673 585728 4096 4096 NT_STATUS_OK
ReadX 9673 589824 61440 61440 NT_STATUS_OK
ReadX 9673 651264 4096 4096 NT_STATUS_OK
ReadX 9673 655360 61440 61440 NT_STATUS_OK
ReadX 9673 716800 4096 4096 NT_STATUS_OK
ReadX 9673 720896 61440 61440 NT_STATUS_OK
ReadX 9673 782336 4096 4096 NT_STATUS_OK
ReadX 9673 786432 61440 61440 NT_STATUS_OK
ReadX 9673 847872 4096 4096 NT_STATUS_OK
ReadX 9673 851968 61440 61440 NT_STATUS_OK
ReadX 9673 913408 4096 4096 NT_STATUS_OK
ReadX 9673 917504 61440 61440 NT_STATUS_OK
ReadX 9673 978944 4096 4096 NT_STATUS_OK
ReadX 9673 983040 61440 61440 NT_STATUS_OK
ReadX 9673 1044480 4096 4096 NT_STATUS_OK
ReadX 9673 1048576 61440 61440 NT_STATUS_OK
ReadX 9673 1110016 4096 4096 NT_STATUS_OK
ReadX 9673 1114112 61440 61440 NT_STATUS_OK
ReadX 9673 1175552 4096 4096 NT_STATUS_OK
ReadX 9673 1179648 61440 61440 NT_STATUS_OK
ReadX 9673 1241088 4096 4096 NT_STATUS_OK
ReadX 9673 1245184 61440 61440 NT_STATUS_OK
ReadX 9673 1306624 4096 4096 NT_STATUS_OK
ReadX 9673 1310720 61440 61440 NT_STATUS_OK
ReadX 9673 1372160 4096 4096 NT_STATUS_OK
ReadX 9673 1376256 61440 61440 NT_STATUS_OK
ReadX 9673 1437696 4096 4096 NT_STATUS_OK
ReadX 9673 1441792 61440 61440 NT_STATUS_OK
ReadX 9673 1503232 4096 4096 NT_STATUS_OK
ReadX 9673 1507328 61440 61440 NT_STATUS_OK
ReadX 9673 1568768 4096 4096 NT_STATUS_OK
ReadX 9673 1572864 61440 61440 NT_STATUS_OK
ReadX 9673 1634304 4096 4096 NT_STATUS_OK
ReadX 9673 1638400 61440 61440 NT_STATUS_OK
ReadX 9673 1699840 4096 4096 NT_STATUS_OK
ReadX 9673 1703936 61440 61440 NT_STATUS_OK
ReadX 9673 1765376 4096 4096 NT_STATUS_OK
ReadX 9673 1769472 61440 61440 NT_STATUS_OK
ReadX 9673 1830912 4096 4096 NT_STATUS_OK
ReadX 9673 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9675 NT_STATUS_OK
QUERY_FILE_INFORMATION 9675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9675 1005 NT_STATUS_OK
ReadX 9675 2156 24 24 NT_STATUS_OK
ReadX 9675 2139 276 276 NT_STATUS_OK
ReadX 9675 2136 14 14 NT_STATUS_OK
ReadX 9675 2136 7 7 NT_STATUS_OK
ReadX 9675 2138 12 12 NT_STATUS_OK
ReadX 9675 2137 8 8 NT_STATUS_OK
ReadX 9675 2135 15 15 NT_STATUS_OK
ReadX 9675 0 16 16 NT_STATUS_OK
ReadX 9675 16 2048 2048 NT_STATUS_OK
ReadX 9675 2064 2048 2048 NT_STATUS_OK
ReadX 9675 257 2048 2048 NT_STATUS_OK
ReadX 9675 385 2048 2048 NT_STATUS_OK
ReadX 9675 513 2048 2048 NT_STATUS_OK
ReadX 9675 641 2048 2048 NT_STATUS_OK
ReadX 9675 769 2048 2048 NT_STATUS_OK
ReadX 9675 897 2048 2048 NT_STATUS_OK
ReadX 9675 1025 2048 2048 NT_STATUS_OK
ReadX 9675 1153 2048 2048 NT_STATUS_OK
ReadX 9675 1281 2048 2048 NT_STATUS_OK
ReadX 9675 1409 2048 2048 NT_STATUS_OK
ReadX 9675 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9677 NT_STATUS_OK
Close 9677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9671 NT_STATUS_OK
Close 9672 NT_STATUS_OK
Close 9673 NT_STATUS_OK
Close 9665 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9680 NT_STATUS_OK
WriteX 9680 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9680 258 NT_STATUS_OK
WriteX 9680 0 10575 10575 NT_STATUS_OK
Flush 9680 NT_STATUS_OK
Close 9680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9681 NT_STATUS_OK
Close 9681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9683 NT_STATUS_OK
ReadX 9683 0 4096 4096 NT_STATUS_OK
Close 9675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9685 NT_STATUS_OK
LockX 9685 2147483538 1 NT_STATUS_OK
UnlockX 9685 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9685 1005 NT_STATUS_OK
ReadX 9685 0 512 512 NT_STATUS_OK
ReadX 9685 512 512 512 NT_STATUS_OK
ReadX 9685 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9685 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9685 1004 NT_STATUS_OK
Close 9685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9686 NT_STATUS_OK
QUERY_FILE_INFORMATION 9686 1005 NT_STATUS_OK
ReadX 9686 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9687 NT_STATUS_OK
LockX 9687 2147483538 1 NT_STATUS_OK
UnlockX 9687 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9687 1005 NT_STATUS_OK
ReadX 9687 0 512 512 NT_STATUS_OK
ReadX 9687 512 512 512 NT_STATUS_OK
ReadX 9687 1024 512 512 NT_STATUS_OK
ReadX 9687 288 20 20 NT_STATUS_OK
ReadX 9687 308 2084 2084 NT_STATUS_OK
ReadX 9687 388 2084 2084 NT_STATUS_OK
ReadX 9687 388 2084 2084 NT_STATUS_OK
ReadX 9674 2157 1386 1386 NT_STATUS_OK
ReadX 9687 2472 399 399 NT_STATUS_OK
ReadX 9687 3072 1536 1536 NT_STATUS_OK
ReadX 9687 544 149 149 NT_STATUS_OK
ReadX 9687 693 485 485 NT_STATUS_OK
Close 9687 NT_STATUS_OK
ReadX 9674 2157 4096 4096 NT_STATUS_OK
ReadX 9674 6253 4096 4096 NT_STATUS_OK
ReadX 9674 10349 4096 4096 NT_STATUS_OK
ReadX 9674 14445 4096 4096 NT_STATUS_OK
ReadX 9674 18541 4096 4096 NT_STATUS_OK
ReadX 9674 22637 256 256 NT_STATUS_OK
ReadX 9674 22893 4096 4096 NT_STATUS_OK
ReadX 9674 26989 4096 4096 NT_STATUS_OK
ReadX 9674 31085 4096 4096 NT_STATUS_OK
ReadX 9674 35181 4096 4096 NT_STATUS_OK
ReadX 9674 39277 4096 4096 NT_STATUS_OK
ReadX 9674 43373 4096 4096 NT_STATUS_OK
ReadX 9674 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9674 2157 1024 1024 NT_STATUS_OK
ReadX 9674 1667 4688 4688 NT_STATUS_OK
ReadX 9674 6355 3516 3516 NT_STATUS_OK
ReadX 9674 9871 16384 16384 NT_STATUS_OK
ReadX 9674 26255 3771 3771 NT_STATUS_OK
ReadX 9674 30026 2048 2048 NT_STATUS_OK
ReadX 9674 32074 1024 1024 NT_STATUS_OK
ReadX 9674 33098 6652 6652 NT_STATUS_OK
ReadX 9674 39750 16384 16384 NT_STATUS_OK
ReadX 9674 56134 10496 10496 NT_STATUS_OK
ReadX 9674 66630 1784 1784 NT_STATUS_OK
ReadX 9674 68414 90 90 NT_STATUS_OK
ReadX 9674 68504 273 273 NT_STATUS_OK
ReadX 9674 68777 1600 1600 NT_STATUS_OK
ReadX 9674 70377 640 640 NT_STATUS_OK
ReadX 9674 71017 1280 1280 NT_STATUS_OK
ReadX 9674 72297 8464 8464 NT_STATUS_OK
ReadX 9674 80761 158 158 NT_STATUS_OK
ReadX 9674 80919 912 912 NT_STATUS_OK
ReadX 9674 81831 1980 1980 NT_STATUS_OK
ReadX 9674 83811 2256 2256 NT_STATUS_OK
ReadX 9674 86067 400 400 NT_STATUS_OK
ReadX 9674 86467 252 252 NT_STATUS_OK
ReadX 9674 86719 42 42 NT_STATUS_OK
ReadX 9674 86761 725 725 NT_STATUS_OK
ReadX 9674 2009 512 512 NT_STATUS_OK
ReadX 9674 3895 9 9 NT_STATUS_OK
ReadX 9674 3781 46 46 NT_STATUS_OK
ReadX 9674 4059 92 92 NT_STATUS_OK
ReadX 9674 3781 92 92 NT_STATUS_OK
ReadX 9674 3986 184 184 NT_STATUS_OK
ReadX 9674 3987 16384 16384 NT_STATUS_OK
ReadX 9674 3902 16384 16384 NT_STATUS_OK
ReadX 9674 3781 10240 10240 NT_STATUS_OK
ReadX 9674 3821 16384 16384 NT_STATUS_OK
ReadX 9674 3891 935 935 NT_STATUS_OK
ReadX 9674 4060 10240 10240 NT_STATUS_OK
ReadX 9674 4059 184 184 NT_STATUS_OK
ReadX 9674 256 184 184 NT_STATUS_OK
ReadX 9674 256 1026 1026 NT_STATUS_OK
ReadX 9674 3901 326 326 NT_STATUS_OK
ReadX 9674 3899 652 652 NT_STATUS_OK
ReadX 9674 256 2 2 NT_STATUS_OK
ReadX 9674 258 4948 4948 NT_STATUS_OK
Close 9674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9689 NT_STATUS_OK
Close 9689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9692 NT_STATUS_OK
WriteX 9692 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9692 258 NT_STATUS_OK
WriteX 9692 0 65536 65536 NT_STATUS_OK
WriteX 9692 65536 65536 65536 NT_STATUS_OK
WriteX 9692 131072 65536 65536 NT_STATUS_OK
WriteX 9692 196608 65536 65536 NT_STATUS_OK
WriteX 9692 262144 65536 65536 NT_STATUS_OK
WriteX 9692 327680 65536 65536 NT_STATUS_OK
WriteX 9692 393216 65536 65536 NT_STATUS_OK
WriteX 9692 458752 65536 65536 NT_STATUS_OK
WriteX 9692 524288 65536 65536 NT_STATUS_OK
WriteX 9692 589824 35257 35257 NT_STATUS_OK
Close 9692 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9694 NT_STATUS_OK
Close 9694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9697 NT_STATUS_OK
WriteX 9697 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9697 258 NT_STATUS_OK
WriteX 9697 0 65536 65536 NT_STATUS_OK
WriteX 9697 65536 65536 65536 NT_STATUS_OK
WriteX 9697 131072 65536 65536 NT_STATUS_OK
WriteX 9697 196608 65536 65536 NT_STATUS_OK
WriteX 9697 262144 65536 65536 NT_STATUS_OK
WriteX 9697 327680 65536 65536 NT_STATUS_OK
WriteX 9697 393216 65536 65536 NT_STATUS_OK
WriteX 9697 458752 65536 65536 NT_STATUS_OK
WriteX 9697 524288 65536 65536 NT_STATUS_OK
WriteX 9697 589824 57598 57598 NT_STATUS_OK
Close 9697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9699 NT_STATUS_OK
WriteX 9699 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9699 258 NT_STATUS_OK
WriteX 9699 0 12543 12543 NT_STATUS_OK
Flush 9699 NT_STATUS_OK
Close 9699 NT_STATUS_OK
Close 9683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9701 NT_STATUS_OK
Close 9701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9703 NT_STATUS_OK
ReadX 9703 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9705 NT_STATUS_OK
QUERY_FILE_INFORMATION 9705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9705 1005 NT_STATUS_OK
ReadX 9705 1938 24 24 NT_STATUS_OK
ReadX 9705 1920 276 276 NT_STATUS_OK
ReadX 9705 1918 14 14 NT_STATUS_OK
ReadX 9705 1918 7 7 NT_STATUS_OK
ReadX 9705 1919 12 12 NT_STATUS_OK
ReadX 9705 1919 8 8 NT_STATUS_OK
ReadX 9705 1917 15 15 NT_STATUS_OK
ReadX 9705 0 16 16 NT_STATUS_OK
ReadX 9705 16 2048 2048 NT_STATUS_OK
ReadX 9705 2064 2048 2048 NT_STATUS_OK
ReadX 9705 257 2048 2048 NT_STATUS_OK
ReadX 9705 385 2048 2048 NT_STATUS_OK
ReadX 9705 513 2048 2048 NT_STATUS_OK
ReadX 9705 641 2048 2048 NT_STATUS_OK
ReadX 9705 769 2048 2048 NT_STATUS_OK
ReadX 9705 897 2048 2048 NT_STATUS_OK
ReadX 9705 1025 2048 2048 NT_STATUS_OK
ReadX 9705 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9707 NT_STATUS_OK
Close 9707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9710 NT_STATUS_OK
WriteX 9710 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9710 258 NT_STATUS_OK
WriteX 9710 0 11588 11588 NT_STATUS_OK
Flush 9710 NT_STATUS_OK
Close 9710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9711 NT_STATUS_OK
Close 9711 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9713 NT_STATUS_OK
ReadX 9713 0 4096 4096 NT_STATUS_OK
Close 9705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9715 NT_STATUS_OK
WriteX 9715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9715 258 NT_STATUS_OK
WriteX 9715 0 11615 11615 NT_STATUS_OK
Flush 9715 NT_STATUS_OK
Close 9715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9717 NT_STATUS_OK
Close 9717 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9719 NT_STATUS_OK
ReadX 9719 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9721 NT_STATUS_OK
Close 9721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9724 NT_STATUS_OK
WriteX 9724 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9724 258 NT_STATUS_OK
WriteX 9724 0 65536 65536 NT_STATUS_OK
WriteX 9724 65536 16050 16050 NT_STATUS_OK
Close 9724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9704 1939 64 64 NT_STATUS_OK
ReadX 9704 128 248 248 NT_STATUS_OK
ReadX 9704 128 568 568 NT_STATUS_OK
ReadX 9704 3872 1536 1536 NT_STATUS_OK
ReadX 9704 3456 2560 2560 NT_STATUS_OK
ReadX 9704 3136 512 512 NT_STATUS_OK
ReadX 9704 2880 4096 4096 NT_STATUS_OK
ReadX 9704 3264 3072 3072 NT_STATUS_OK
ReadX 9704 320 4096 4096 NT_STATUS_OK
ReadX 9704 1024 4096 4096 NT_STATUS_OK
ReadX 9704 3616 4096 4096 NT_STATUS_OK
ReadX 9704 1939 64 64 NT_STATUS_OK
ReadX 9704 128 248 248 NT_STATUS_OK
ReadX 9704 128 608 608 NT_STATUS_OK
ReadX 9704 2858 1024 1024 NT_STATUS_OK
ReadX 9704 2810 4096 4096 NT_STATUS_OK
ReadX 9704 2826 4096 4096 NT_STATUS_OK
ReadX 9704 2580 2048 2048 NT_STATUS_OK
ReadX 9704 2800 2560 2560 NT_STATUS_OK
ReadX 9704 2100 4096 4096 NT_STATUS_OK
ReadX 9704 2084 4096 4096 NT_STATUS_OK
ReadX 9704 868 4096 4096 NT_STATUS_OK
ReadX 9704 2324 4096 4096 NT_STATUS_OK
ReadX 9704 884 4096 4096 NT_STATUS_OK
ReadX 9704 2604 1024 1024 NT_STATUS_OK
ReadX 9704 580 4096 4096 NT_STATUS_OK
ReadX 9704 596 4096 4096 NT_STATUS_OK
ReadX 9704 2752 4096 4096 NT_STATUS_OK
ReadX 9704 2842 1024 1024 NT_STATUS_OK
ReadX 9704 660 4096 4096 NT_STATUS_OK
ReadX 9704 2720 4096 4096 NT_STATUS_OK
ReadX 9704 2736 4096 4096 NT_STATUS_OK
ReadX 9704 628 4096 4096 NT_STATUS_OK
ReadX 9704 2704 4096 4096 NT_STATUS_OK
ReadX 9704 1556 4096 4096 NT_STATUS_OK
ReadX 9704 576 4096 4096 NT_STATUS_OK
ReadX 9704 3168 1536 1536 NT_STATUS_OK
ReadX 9704 832 4096 4096 NT_STATUS_OK
ReadX 9704 1088 4096 4096 NT_STATUS_OK
ReadX 9704 1344 4096 4096 NT_STATUS_OK
ReadX 9704 1600 4096 4096 NT_STATUS_OK
ReadX 9704 1856 4096 4096 NT_STATUS_OK
ReadX 9704 2112 4096 4096 NT_STATUS_OK
ReadX 9704 1892 4096 4096 NT_STATUS_OK
ReadX 9704 820 4096 4096 NT_STATUS_OK
ReadX 9704 788 4096 4096 NT_STATUS_OK
ReadX 9704 1604 4096 4096 NT_STATUS_OK
ReadX 9704 3648 4096 4096 NT_STATUS_OK
ReadX 9704 2608 4096 4096 NT_STATUS_OK
ReadX 9704 548 4096 4096 NT_STATUS_OK
ReadX 9704 740 4096 4096 NT_STATUS_OK
ReadX 9704 1344 4096 4096 NT_STATUS_OK
ReadX 9704 3392 4096 4096 NT_STATUS_OK
ReadX 9704 3904 4096 4096 NT_STATUS_OK
ReadX 9704 644 4096 4096 NT_STATUS_OK
ReadX 9704 676 4096 4096 NT_STATUS_OK
ReadX 9704 2688 4096 4096 NT_STATUS_OK
ReadX 9704 320 4096 4096 NT_STATUS_OK
ReadX 9704 900 4096 4096 NT_STATUS_OK
ReadX 9704 1908 4096 4096 NT_STATUS_OK
ReadX 9704 852 4096 4096 NT_STATUS_OK
ReadX 9704 724 4096 4096 NT_STATUS_OK
ReadX 9704 2292 4096 4096 NT_STATUS_OK
ReadX 9704 612 4096 4096 NT_STATUS_OK
ReadX 9704 388 4096 4096 NT_STATUS_OK
ReadX 9704 2368 4096 4096 NT_STATUS_OK
ReadX 9704 2624 4096 4096 NT_STATUS_OK
ReadX 9704 500 4096 4096 NT_STATUS_OK
ReadX 9704 356 4096 4096 NT_STATUS_OK
ReadX 9704 1024 4096 4096 NT_STATUS_OK
ReadX 9704 576 4096 4096 NT_STATUS_OK
ReadX 9704 340 4096 4096 NT_STATUS_OK
ReadX 9704 420 4096 4096 NT_STATUS_OK
ReadX 9704 1600 4096 4096 NT_STATUS_OK
ReadX 9704 404 4096 4096 NT_STATUS_OK
ReadX 9704 1428 4096 4096 NT_STATUS_OK
ReadX 9704 2656 4096 4096 NT_STATUS_OK
ReadX 9704 2624 4096 4096 NT_STATUS_OK
ReadX 9704 452 4096 4096 NT_STATUS_OK
ReadX 9704 692 4096 4096 NT_STATUS_OK
ReadX 9704 564 4096 4096 NT_STATUS_OK
ReadX 9704 372 4096 4096 NT_STATUS_OK
ReadX 9704 468 4096 4096 NT_STATUS_OK
ReadX 9704 484 4096 4096 NT_STATUS_OK
ReadX 9704 1088 4096 4096 NT_STATUS_OK
ReadX 9704 1924 4096 4096 NT_STATUS_OK
ReadX 9704 2768 4096 4096 NT_STATUS_OK
ReadX 9704 832 4096 4096 NT_STATUS_OK
ReadX 9704 836 4096 4096 NT_STATUS_OK
ReadX 9704 1856 4096 4096 NT_STATUS_OK
ReadX 9704 2640 4096 4096 NT_STATUS_OK
ReadX 9704 436 4096 4096 NT_STATUS_OK
ReadX 9704 1828 4096 4096 NT_STATUS_OK
ReadX 9704 804 4096 4096 NT_STATUS_OK
ReadX 9704 1860 4096 4096 NT_STATUS_OK
ReadX 9704 1812 4096 4096 NT_STATUS_OK
ReadX 9704 756 4096 4096 NT_STATUS_OK
ReadX 9704 1636 4096 4096 NT_STATUS_OK
ReadX 9704 772 4096 4096 NT_STATUS_OK
ReadX 9704 2036 4096 4096 NT_STATUS_OK
ReadX 9704 1220 4096 4096 NT_STATUS_OK
ReadX 9704 1652 4096 4096 NT_STATUS_OK
ReadX 9704 2588 4096 4096 NT_STATUS_OK
ReadX 9704 916 4096 4096 NT_STATUS_OK
ReadX 9704 260 4096 4096 NT_STATUS_OK
ReadX 9704 932 4096 4096 NT_STATUS_OK
ReadX 9704 2624 4096 4096 NT_STATUS_OK
ReadX 9704 308 4096 4096 NT_STATUS_OK
ReadX 9704 292 4096 4096 NT_STATUS_OK
ReadX 9704 1140 4096 4096 NT_STATUS_OK
ReadX 9704 276 4096 4096 NT_STATUS_OK
ReadX 9704 2020 4096 4096 NT_STATUS_OK
ReadX 9704 2880 4096 4096 NT_STATUS_OK
ReadX 9704 516 4096 4096 NT_STATUS_OK
ReadX 9704 1844 4096 4096 NT_STATUS_OK
ReadX 9704 1124 4096 4096 NT_STATUS_OK
ReadX 9704 3136 4096 4096 NT_STATUS_OK
ReadX 9704 324 4096 4096 NT_STATUS_OK
ReadX 9704 1156 4096 4096 NT_STATUS_OK
ReadX 9704 1172 4096 4096 NT_STATUS_OK
ReadX 9704 2112 4096 4096 NT_STATUS_OK
ReadX 9704 2368 4096 4096 NT_STATUS_OK
ReadX 9704 964 4096 4096 NT_STATUS_OK
ReadX 9704 980 4096 4096 NT_STATUS_OK
ReadX 9704 1012 4096 4096 NT_STATUS_OK
ReadX 9704 532 4096 4096 NT_STATUS_OK
ReadX 9704 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9704 1620 4096 4096 NT_STATUS_OK
ReadX 9704 1604 4096 4096 NT_STATUS_OK
ReadX 9704 2116 4096 4096 NT_STATUS_OK
ReadX 9704 2132 4096 4096 NT_STATUS_OK
ReadX 9704 2148 4096 4096 NT_STATUS_OK
ReadX 9704 2276 4096 4096 NT_STATUS_OK
ReadX 9704 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9726 NT_STATUS_OK
Close 9726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9729 NT_STATUS_OK
QUERY_FILE_INFORMATION 9684 1004 NT_STATUS_OK
Close 9684 NT_STATUS_OK
WriteX 9729 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9729 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9686 1004 NT_STATUS_OK
Close 9686 NT_STATUS_OK
WriteX 9729 0 65536 65536 NT_STATUS_OK
WriteX 9729 65536 64850 64850 NT_STATUS_OK
Close 9729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9731 NT_STATUS_OK
WriteX 9731 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9731 258 NT_STATUS_OK
ReadX 9704 2068 4096 4096 NT_STATUS_OK
ReadX 9704 1588 4096 4096 NT_STATUS_OK
ReadX 9704 1572 4096 4096 NT_STATUS_OK
WriteX 9731 0 18630 18630 NT_STATUS_OK
Flush 9731 NT_STATUS_OK
Close 9731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9733 NT_STATUS_OK
Close 9733 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9735 NT_STATUS_OK
ReadX 9735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9704 612 4096 4096 NT_STATUS_OK
ReadX 9704 564 4096 4096 NT_STATUS_OK
ReadX 9704 1876 4096 4096 NT_STATUS_OK
ReadX 9704 628 4096 4096 NT_STATUS_OK
ReadX 9704 740 4096 4096 NT_STATUS_OK
ReadX 9704 724 4096 4096 NT_STATUS_OK
ReadX 9704 644 4096 4096 NT_STATUS_OK
ReadX 9704 2324 4096 4096 NT_STATUS_OK
ReadX 9704 660 4096 4096 NT_STATUS_OK
ReadX 9704 852 4096 4096 NT_STATUS_OK
ReadX 9704 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9704 2368 4096 4096 NT_STATUS_OK
ReadX 9704 1024 4096 4096 NT_STATUS_OK
ReadX 9704 320 4096 4096 NT_STATUS_OK
ReadX 9704 580 4096 4096 NT_STATUS_OK
ReadX 9704 3136 512 512 NT_STATUS_OK
ReadX 9704 2880 4096 4096 NT_STATUS_OK
Close 9704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9736 NT_STATUS_OK
ReadX 9736 61440 4096 4096 NT_STATUS_OK
ReadX 9736 126976 4096 4096 NT_STATUS_OK
WriteX 9736 0 65536 65536 NT_STATUS_OK
WriteX 9736 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9737 NT_STATUS_OK
ReadX 9737 61440 4096 4096 NT_STATUS_OK
ReadX 9737 126976 4096 4096 NT_STATUS_OK
ReadX 9737 192512 4096 4096 NT_STATUS_OK
ReadX 9737 258048 4096 4096 NT_STATUS_OK
WriteX 9737 0 65536 65536 NT_STATUS_OK
WriteX 9737 65536 65536 65536 NT_STATUS_OK
WriteX 9737 131072 65536 65536 NT_STATUS_OK
WriteX 9737 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9738 NT_STATUS_OK
ReadX 9738 61440 4096 4096 NT_STATUS_OK
ReadX 9738 126976 4096 4096 NT_STATUS_OK
ReadX 9738 192512 4096 4096 NT_STATUS_OK
ReadX 9738 258048 4096 4096 NT_STATUS_OK
ReadX 9738 323584 4096 4096 NT_STATUS_OK
ReadX 9738 389120 4096 4096 NT_STATUS_OK
ReadX 9738 454656 4096 4096 NT_STATUS_OK
ReadX 9738 520192 4096 4096 NT_STATUS_OK
WriteX 9738 0 65536 65536 NT_STATUS_OK
WriteX 9738 65536 65536 65536 NT_STATUS_OK
WriteX 9738 131072 65536 65536 NT_STATUS_OK
WriteX 9738 196608 65536 65536 NT_STATUS_OK
WriteX 9738 262144 65536 65536 NT_STATUS_OK
WriteX 9738 327680 65536 65536 NT_STATUS_OK
WriteX 9738 393216 65536 65536 NT_STATUS_OK
WriteX 9738 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9739 NT_STATUS_OK
ReadX 9739 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9740 NT_STATUS_OK
Close 9740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9741 NT_STATUS_OK
WriteX 9741 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9741 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9739 0 8192 8192 NT_STATUS_OK
Flush 9739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9739 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9739 0 8192 8192 NT_STATUS_OK
Flush 9739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9739 0 8192 8192 NT_STATUS_OK
Flush 9739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9739 0 8192 8192 NT_STATUS_OK
Flush 9739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9743 NT_STATUS_OK
Close 9743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9735 NT_STATUS_OK
Close 9703 NT_STATUS_OK
Close 9736 NT_STATUS_OK
Close 9737 NT_STATUS_OK
Close 9738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9746 NT_STATUS_OK
WriteX 9746 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9746 258 NT_STATUS_OK
WriteX 9746 0 62591 62591 NT_STATUS_OK
Close 9746 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9748 NT_STATUS_OK
Close 9748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9751 NT_STATUS_OK
WriteX 9751 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9751 258 NT_STATUS_OK
WriteX 9751 0 10845 10845 NT_STATUS_OK
Close 9751 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9753 NT_STATUS_OK
Close 9753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9756 NT_STATUS_OK
WriteX 9756 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9756 258 NT_STATUS_OK
WriteX 9756 0 30118 30118 NT_STATUS_OK
Close 9756 NT_STATUS_OK
WriteX 9739 0 4096 4096 NT_STATUS_OK
WriteX 9741 0 64 64 NT_STATUS_OK
Close 9741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9758 NT_STATUS_OK
ReadX 9758 0 61440 61440 NT_STATUS_OK
ReadX 9758 61440 4096 4096 NT_STATUS_OK
ReadX 9758 65536 61440 61440 NT_STATUS_OK
ReadX 9758 126976 4096 4096 NT_STATUS_OK
ReadX 9758 131072 61440 61440 NT_STATUS_OK
ReadX 9758 192512 4096 4096 NT_STATUS_OK
ReadX 9758 196608 61440 61440 NT_STATUS_OK
ReadX 9758 258048 4096 4096 NT_STATUS_OK
ReadX 9758 262144 61440 61440 NT_STATUS_OK
ReadX 9758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9759 NT_STATUS_OK
ReadX 9759 0 61440 61440 NT_STATUS_OK
ReadX 9759 61440 4096 4096 NT_STATUS_OK
ReadX 9759 65536 61440 61440 NT_STATUS_OK
ReadX 9759 126976 4096 4096 NT_STATUS_OK
ReadX 9759 131072 61440 61440 NT_STATUS_OK
ReadX 9759 192512 4096 4096 NT_STATUS_OK
ReadX 9759 196608 61440 61440 NT_STATUS_OK
ReadX 9759 258048 4096 4096 NT_STATUS_OK
ReadX 9759 262144 61440 61440 NT_STATUS_OK
ReadX 9759 323584 4096 4096 NT_STATUS_OK
ReadX 9759 327680 61440 61440 NT_STATUS_OK
ReadX 9759 389120 4096 4096 NT_STATUS_OK
ReadX 9759 393216 61440 61440 NT_STATUS_OK
ReadX 9759 454656 4096 4096 NT_STATUS_OK
ReadX 9759 458752 61440 61440 NT_STATUS_OK
ReadX 9759 520192 4096 4096 NT_STATUS_OK
ReadX 9759 524288 61440 61440 NT_STATUS_OK
ReadX 9759 585728 4096 4096 NT_STATUS_OK
ReadX 9759 589824 61440 61440 NT_STATUS_OK
ReadX 9759 651264 4096 4096 NT_STATUS_OK
ReadX 9759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9760 NT_STATUS_OK
ReadX 9760 0 61440 61440 NT_STATUS_OK
ReadX 9760 61440 4096 4096 NT_STATUS_OK
ReadX 9760 65536 61440 61440 NT_STATUS_OK
ReadX 9760 126976 4096 4096 NT_STATUS_OK
ReadX 9760 131072 61440 61440 NT_STATUS_OK
ReadX 9760 192512 4096 4096 NT_STATUS_OK
ReadX 9760 196608 61440 61440 NT_STATUS_OK
ReadX 9760 258048 4096 4096 NT_STATUS_OK
ReadX 9760 262144 61440 61440 NT_STATUS_OK
ReadX 9760 323584 4096 4096 NT_STATUS_OK
ReadX 9760 327680 61440 61440 NT_STATUS_OK
ReadX 9760 389120 4096 4096 NT_STATUS_OK
ReadX 9760 393216 61440 61440 NT_STATUS_OK
ReadX 9760 454656 4096 4096 NT_STATUS_OK
ReadX 9760 458752 61440 61440 NT_STATUS_OK
ReadX 9760 520192 4096 4096 NT_STATUS_OK
ReadX 9760 524288 61440 61440 NT_STATUS_OK
ReadX 9760 585728 4096 4096 NT_STATUS_OK
ReadX 9760 589824 61440 61440 NT_STATUS_OK
ReadX 9760 651264 4096 4096 NT_STATUS_OK
ReadX 9760 655360 61440 61440 NT_STATUS_OK
ReadX 9760 716800 4096 4096 NT_STATUS_OK
ReadX 9760 720896 61440 61440 NT_STATUS_OK
ReadX 9760 782336 4096 4096 NT_STATUS_OK
ReadX 9760 786432 61440 61440 NT_STATUS_OK
ReadX 9760 847872 4096 4096 NT_STATUS_OK
ReadX 9760 851968 61440 61440 NT_STATUS_OK
ReadX 9760 913408 4096 4096 NT_STATUS_OK
ReadX 9760 917504 61440 61440 NT_STATUS_OK
ReadX 9760 978944 4096 4096 NT_STATUS_OK
ReadX 9760 983040 61440 61440 NT_STATUS_OK
ReadX 9760 1044480 4096 4096 NT_STATUS_OK
ReadX 9760 1048576 61440 61440 NT_STATUS_OK
ReadX 9760 1110016 4096 4096 NT_STATUS_OK
ReadX 9760 1114112 61440 61440 NT_STATUS_OK
ReadX 9760 1175552 4096 4096 NT_STATUS_OK
ReadX 9760 1179648 61440 61440 NT_STATUS_OK
ReadX 9760 1241088 4096 4096 NT_STATUS_OK
ReadX 9760 1245184 61440 61440 NT_STATUS_OK
ReadX 9760 1306624 4096 4096 NT_STATUS_OK
ReadX 9760 1310720 61440 61440 NT_STATUS_OK
ReadX 9760 1372160 4096 4096 NT_STATUS_OK
ReadX 9760 1376256 61440 61440 NT_STATUS_OK
ReadX 9760 1437696 4096 4096 NT_STATUS_OK
ReadX 9760 1441792 61440 61440 NT_STATUS_OK
ReadX 9760 1503232 4096 4096 NT_STATUS_OK
ReadX 9760 1507328 61440 61440 NT_STATUS_OK
ReadX 9760 1568768 4096 4096 NT_STATUS_OK
ReadX 9760 1572864 61440 61440 NT_STATUS_OK
ReadX 9760 1634304 4096 4096 NT_STATUS_OK
ReadX 9760 1638400 61440 61440 NT_STATUS_OK
ReadX 9760 1699840 4096 4096 NT_STATUS_OK
ReadX 9760 1703936 61440 61440 NT_STATUS_OK
ReadX 9760 1765376 4096 4096 NT_STATUS_OK
ReadX 9760 1769472 61440 61440 NT_STATUS_OK
ReadX 9760 1830912 4096 4096 NT_STATUS_OK
ReadX 9760 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9761 NT_STATUS_OK
Close 9761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9758 NT_STATUS_OK
Close 9759 NT_STATUS_OK
Close 9760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9763 NT_STATUS_OK
ReadX 9763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9764 NT_STATUS_OK
ReadX 9764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9765 NT_STATUS_OK
ReadX 9765 0 4096 4096 NT_STATUS_OK
ReadX 9765 4096 4096 4096 NT_STATUS_OK
ReadX 9765 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9766 NT_STATUS_OK
Close 9766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9763 NT_STATUS_OK
Close 9764 NT_STATUS_OK
Close 9765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9768 NT_STATUS_OK
ReadX 9768 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9769 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9770 NT_STATUS_OK
Close 9770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9768 NT_STATUS_OK
Close 9769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9772 NT_STATUS_OK
ReadX 9772 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9773 NT_STATUS_OK
ReadX 9773 0 8192 8192 NT_STATUS_OK
ReadX 9773 8192 8192 8192 NT_STATUS_OK
ReadX 9773 16384 8192 8192 NT_STATUS_OK
ReadX 9773 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9775 NT_STATUS_OK
Close 9775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9773 NT_STATUS_OK
Close 9772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9778 NT_STATUS_OK
WriteX 9778 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9778 258 NT_STATUS_OK
WriteX 9778 0 10438 10438 NT_STATUS_OK
Close 9778 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9779 NT_STATUS_OK
Close 9779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9781 NT_STATUS_OK
Close 9781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9782 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9783 NT_STATUS_OK
Close 9783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9784 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9786 NT_STATUS_OK
Close 9786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9787 NT_STATUS_OK
ReadX 9787 0 4096 4096 NT_STATUS_OK
ReadX 9787 4096 4096 4096 NT_STATUS_OK
ReadX 9787 8192 4096 4096 NT_STATUS_OK
ReadX 9787 12288 8192 8192 NT_STATUS_OK
ReadX 9787 20480 8192 8192 NT_STATUS_OK
ReadX 9787 28672 8192 8192 NT_STATUS_OK
ReadX 9787 36864 8192 8192 NT_STATUS_OK
ReadX 9787 45056 8192 8192 NT_STATUS_OK
ReadX 9787 53248 8192 8192 NT_STATUS_OK
ReadX 9787 61440 8192 8192 NT_STATUS_OK
ReadX 9787 69632 8192 8192 NT_STATUS_OK
ReadX 9787 77824 8192 8192 NT_STATUS_OK
ReadX 9787 86016 8192 8192 NT_STATUS_OK
ReadX 9787 94208 8192 8192 NT_STATUS_OK
ReadX 9787 102400 8192 8192 NT_STATUS_OK
ReadX 9787 110592 8192 8192 NT_STATUS_OK
ReadX 9787 118784 8192 8192 NT_STATUS_OK
ReadX 9787 126976 8192 8192 NT_STATUS_OK
ReadX 9787 135168 8192 8192 NT_STATUS_OK
ReadX 9787 143360 8192 8192 NT_STATUS_OK
ReadX 9787 151552 8192 8192 NT_STATUS_OK
ReadX 9787 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Close 9780 NT_STATUS_OK
Close 9782 NT_STATUS_OK
Close 9784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9789 NT_STATUS_OK
Close 9789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9792 NT_STATUS_OK
WriteX 9792 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9792 258 NT_STATUS_OK
WriteX 9792 0 28489 28489 NT_STATUS_OK
Close 9792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9793 NT_STATUS_OK
Close 9793 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9795 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9796 NT_STATUS_OK
Close 9796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9798 NT_STATUS_OK
ReadX 9798 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9799 NT_STATUS_OK
ReadX 9799 0 8192 8192 NT_STATUS_OK
ReadX 9799 8192 8192 8192 NT_STATUS_OK
ReadX 9799 16384 8192 8192 NT_STATUS_OK
ReadX 9799 24576 8192 8192 NT_STATUS_OK
ReadX 9799 32768 16384 16384 NT_STATUS_OK
ReadX 9799 49152 8192 8192 NT_STATUS_OK
ReadX 9799 57344 8192 8192 NT_STATUS_OK
ReadX 9799 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9801 NT_STATUS_OK
Close 9801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9799 NT_STATUS_OK
Close 9798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9804 NT_STATUS_OK
WriteX 9804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9804 258 NT_STATUS_OK
WriteX 9804 0 29253 29253 NT_STATUS_OK
Close 9804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9805 NT_STATUS_OK
Close 9805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9808 NT_STATUS_OK
Close 9808 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9811 NT_STATUS_OK
WriteX 9811 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9811 258 NT_STATUS_OK
WriteX 9811 0 30183 30183 NT_STATUS_OK
Close 9811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9812 NT_STATUS_OK
Close 9812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9814 NT_STATUS_OK
WriteX 9814 0 510 510 NT_STATUS_OK
WriteX 9814 510 512 512 NT_STATUS_OK
WriteX 9814 1022 510 510 NT_STATUS_OK
WriteX 9814 1532 510 510 NT_STATUS_OK
WriteX 9814 2042 168 168 NT_STATUS_OK
Close 9814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9815 NT_STATUS_OK
Close 9815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 0 4096 4096 NT_STATUS_OK
WriteX 9817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9818 NT_STATUS_OK
ReadX 9818 61440 4096 4096 NT_STATUS_OK
ReadX 9818 126976 4096 4096 NT_STATUS_OK
WriteX 9818 0 65536 65536 NT_STATUS_OK
WriteX 9818 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9819 NT_STATUS_OK
ReadX 9819 61440 4096 4096 NT_STATUS_OK
ReadX 9819 126976 4096 4096 NT_STATUS_OK
ReadX 9819 192512 4096 4096 NT_STATUS_OK
ReadX 9819 258048 4096 4096 NT_STATUS_OK
WriteX 9819 0 65536 65536 NT_STATUS_OK
WriteX 9819 65536 65536 65536 NT_STATUS_OK
WriteX 9819 131072 65536 65536 NT_STATUS_OK
WriteX 9819 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9820 NT_STATUS_OK
ReadX 9820 61440 4096 4096 NT_STATUS_OK
ReadX 9820 126976 4096 4096 NT_STATUS_OK
ReadX 9820 192512 4096 4096 NT_STATUS_OK
ReadX 9820 258048 4096 4096 NT_STATUS_OK
ReadX 9820 323584 4096 4096 NT_STATUS_OK
ReadX 9820 389120 4096 4096 NT_STATUS_OK
ReadX 9820 454656 4096 4096 NT_STATUS_OK
ReadX 9820 520192 4096 4096 NT_STATUS_OK
WriteX 9820 0 65536 65536 NT_STATUS_OK
WriteX 9820 65536 65536 65536 NT_STATUS_OK
WriteX 9820 131072 65536 65536 NT_STATUS_OK
WriteX 9820 196608 65536 65536 NT_STATUS_OK
WriteX 9820 262144 65536 65536 NT_STATUS_OK
WriteX 9820 327680 65536 65536 NT_STATUS_OK
WriteX 9820 393216 65536 65536 NT_STATUS_OK
WriteX 9820 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9821 NT_STATUS_OK
Close 9821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Close 9818 NT_STATUS_OK
Close 9819 NT_STATUS_OK
Close 9820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9823 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9827 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9832 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9836 NT_STATUS_OK
Close 9836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9839 NT_STATUS_OK
Close 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9841 NT_STATUS_OK
Close 9841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9845 NT_STATUS_OK
Close 9845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9850 NT_STATUS_OK
Close 9850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9855 NT_STATUS_OK
Close 9855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9860 NT_STATUS_OK
Close 9860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9865 NT_STATUS_OK
Close 9865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9870 NT_STATUS_OK
Close 9870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9875 NT_STATUS_OK
Close 9875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 9880 NT_STATUS_OK
Close 9880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 9883 NT_STATUS_OK
Close 9883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9886 NT_STATUS_OK
Close 9886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9889 NT_STATUS_OK
WriteX 9889 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9889 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 9889 0 65536 65536 NT_STATUS_OK
WriteX 9889 65536 65536 65536 NT_STATUS_OK
WriteX 9889 131072 65536 65536 NT_STATUS_OK
WriteX 9889 196608 65536 65536 NT_STATUS_OK
WriteX 9889 262144 26634 26634 NT_STATUS_OK
Close 9889 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9894 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9895 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9897 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
ReadX 9897 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9898 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9902 NT_STATUS_OK
Close 9902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9905 NT_STATUS_OK
Close 9905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9907 NT_STATUS_OK
Close 9907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9911 NT_STATUS_OK
Close 9911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9914 NT_STATUS_OK
Close 9914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9916 NT_STATUS_OK
Close 9916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9920 NT_STATUS_OK
Close 9920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9925 NT_STATUS_OK
Close 9925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9930 NT_STATUS_OK
Close 9930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9940 NT_STATUS_OK
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9945 NT_STATUS_OK
Close 9945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9949 NT_STATUS_OK
Close 9949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9954 NT_STATUS_OK
Close 9954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9959 NT_STATUS_OK
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9962 NT_STATUS_OK
Close 9962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9974 NT_STATUS_OK
Close 9974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9990 NT_STATUS_OK
ReadX 9990 0 4096 4096 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9991 NT_STATUS_OK
ReadX 9991 0 4096 4096 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9978 NT_STATUS_OK
Close 9992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10021 0 4096 4096 NT_STATUS_OK
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
ReadX 10023 4096 4096 4096 NT_STATUS_OK
ReadX 10023 8192 4096 4096 NT_STATUS_OK
ReadX 10023 12288 4096 4096 NT_STATUS_OK
ReadX 10023 16384 4096 4096 NT_STATUS_OK
ReadX 10023 20480 4096 4096 NT_STATUS_OK
ReadX 10023 24576 4096 4096 NT_STATUS_OK
ReadX 10023 28672 4096 4096 NT_STATUS_OK
ReadX 10023 32768 4096 4096 NT_STATUS_OK
ReadX 10023 36864 4096 4096 NT_STATUS_OK
ReadX 10023 40960 4096 4096 NT_STATUS_OK
ReadX 10023 45056 4096 4096 NT_STATUS_OK
ReadX 10023 49152 4096 4096 NT_STATUS_OK
ReadX 10023 53248 4096 4096 NT_STATUS_OK
ReadX 10023 57344 4096 4096 NT_STATUS_OK
ReadX 10023 61440 4096 4096 NT_STATUS_OK
ReadX 10023 65536 4096 4096 NT_STATUS_OK
ReadX 10023 69632 4096 4096 NT_STATUS_OK
ReadX 10023 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10023 1004 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
Close 10023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10024 NT_STATUS_OK
SET_FILE_INFORMATION 10024 1004 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10025 NT_STATUS_OK
ReadX 10025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10026 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10029 NT_STATUS_OK
WriteX 10029 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10029 258 NT_STATUS_OK
WriteX 10029 0 65536 65536 NT_STATUS_OK
WriteX 10029 65536 19979 19979 NT_STATUS_OK
Close 10029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
WriteX 10030 0 4096 4096 NT_STATUS_OK
Flush 10030 NT_STATUS_OK
WriteX 10030 0 4096 4096 NT_STATUS_OK
Flush 10030 NT_STATUS_OK
QUERY_FILE_INFORMATION 10030 1004 NT_STATUS_OK
WriteX 10030 0 4096 4096 NT_STATUS_OK
Flush 10030 NT_STATUS_OK
WriteX 10030 0 4096 4096 NT_STATUS_OK
Flush 10030 NT_STATUS_OK
WriteX 10030 0 4096 4096 NT_STATUS_OK
Flush 10030 NT_STATUS_OK
SET_FILE_INFORMATION 10030 1004 NT_STATUS_OK
WriteX 10030 0 4096 4096 NT_STATUS_OK
Flush 10030 NT_STATUS_OK
Close 10030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
Close 10031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
Close 10033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
Close 10034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10035 1004 NT_STATUS_OK
WriteX 10035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10038 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10041 NT_STATUS_OK
WriteX 10041 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10041 258 NT_STATUS_OK
WriteX 10041 0 65536 65536 NT_STATUS_OK
WriteX 10041 65536 17654 17654 NT_STATUS_OK
Close 10041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
Flush 10042 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
Flush 10042 NT_STATUS_OK
QUERY_FILE_INFORMATION 10042 1004 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
Flush 10042 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
Flush 10042 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
Flush 10042 NT_STATUS_OK
SET_FILE_INFORMATION 10042 1004 NT_STATUS_OK
WriteX 10042 0 4096 4096 NT_STATUS_OK
Flush 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10043 NT_STATUS_OK
SET_FILE_INFORMATION 10043 1004 NT_STATUS_OK
Close 10043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10044 NT_STATUS_OK
ReadX 10044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10047 NT_STATUS_OK
ReadX 10047 0 4096 4096 NT_STATUS_OK
ReadX 10047 4096 4096 4096 NT_STATUS_OK
ReadX 10047 8192 4096 4096 NT_STATUS_OK
ReadX 10047 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10047 16384 4096 4096 NT_STATUS_OK
ReadX 10047 20480 4096 4096 NT_STATUS_OK
ReadX 10047 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10050 NT_STATUS_OK
ReadX 10050 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10050 1004 NT_STATUS_OK
WriteX 10050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10051 NT_STATUS_OK
Close 10051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10056 NT_STATUS_OK
WriteX 10056 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10056 258 NT_STATUS_OK
WriteX 10056 0 65536 65536 NT_STATUS_OK
WriteX 10056 65536 19490 19490 NT_STATUS_OK
Close 10056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10057 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
Flush 10057 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
Flush 10057 NT_STATUS_OK
QUERY_FILE_INFORMATION 10057 1004 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
Flush 10057 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
Flush 10057 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
Flush 10057 NT_STATUS_OK
SET_FILE_INFORMATION 10057 1004 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
Flush 10057 NT_STATUS_OK
Close 10057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10058 NT_STATUS_OK
SET_FILE_INFORMATION 10058 1004 NT_STATUS_OK
Close 10058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10059 NT_STATUS_OK
ReadX 10059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10062 0 4096 4096 NT_STATUS_OK
Close 10062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
ReadX 10064 4096 4096 4096 NT_STATUS_OK
ReadX 10064 8192 4096 4096 NT_STATUS_OK
ReadX 10064 12288 4096 4096 NT_STATUS_OK
ReadX 10064 16384 4096 4096 NT_STATUS_OK
ReadX 10064 20480 4096 4096 NT_STATUS_OK
ReadX 10064 24576 4096 4096 NT_STATUS_OK
ReadX 10064 28672 4096 4096 NT_STATUS_OK
ReadX 10064 32768 4096 4096 NT_STATUS_OK
ReadX 10064 36864 4096 4096 NT_STATUS_OK
ReadX 10064 40960 4096 4096 NT_STATUS_OK
ReadX 10064 45056 4096 4096 NT_STATUS_OK
ReadX 10064 49152 4096 4096 NT_STATUS_OK
ReadX 10064 53248 4096 4096 NT_STATUS_OK
ReadX 10064 57344 4096 4096 NT_STATUS_OK
ReadX 10064 61440 4096 4096 NT_STATUS_OK
ReadX 10064 65536 4096 4096 NT_STATUS_OK
ReadX 10064 69632 4096 4096 NT_STATUS_OK
ReadX 10064 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10064 1004 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Close 10064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10065 NT_STATUS_OK
SET_FILE_INFORMATION 10065 1004 NT_STATUS_OK
Close 10065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10070 NT_STATUS_OK
WriteX 10070 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10070 258 NT_STATUS_OK
WriteX 10070 0 65536 65536 NT_STATUS_OK
WriteX 10070 65536 8866 8866 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 4096 4096 NT_STATUS_OK
WriteX 10071 0 4096 4096 NT_STATUS_OK
Flush 10071 NT_STATUS_OK
SET_FILE_INFORMATION 10071 1004 NT_STATUS_OK
WriteX 10071 0 4096 4096 NT_STATUS_OK
Flush 10071 NT_STATUS_OK
Close 10071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10075 1004 NT_STATUS_OK
WriteX 10075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10076 NT_STATUS_OK
Close 10076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10075 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10078 NT_STATUS_OK
Close 10078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10081 NT_STATUS_OK
WriteX 10081 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10081 258 NT_STATUS_OK
WriteX 10081 0 65536 65536 NT_STATUS_OK
WriteX 10081 65536 9298 9298 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 4096 4096 NT_STATUS_OK
WriteX 10082 0 4096 4096 NT_STATUS_OK
Flush 10082 NT_STATUS_OK
SET_FILE_INFORMATION 10082 1004 NT_STATUS_OK
WriteX 10082 0 4096 4096 NT_STATUS_OK
Flush 10082 NT_STATUS_OK
Close 10082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10083 NT_STATUS_OK
SET_FILE_INFORMATION 10083 1004 NT_STATUS_OK
Close 10083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10084 NT_STATUS_OK
ReadX 10084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10085 NT_STATUS_OK
Close 10085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10088 0 4096 4096 NT_STATUS_OK
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 4096 4096 4096 NT_STATUS_OK
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 4096 4096 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
Close 10091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10093 NT_STATUS_OK
Close 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10089 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10098 NT_STATUS_OK
WriteX 10098 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 258 NT_STATUS_OK
WriteX 10098 0 65536 65536 NT_STATUS_OK
WriteX 10098 65536 11540 11540 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10099 NT_STATUS_OK
ReadX 10099 0 4096 4096 NT_STATUS_OK
WriteX 10099 0 4096 4096 NT_STATUS_OK
Flush 10099 NT_STATUS_OK
SET_FILE_INFORMATION 10099 1004 NT_STATUS_OK
WriteX 10099 0 4096 4096 NT_STATUS_OK
Flush 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10100 NT_STATUS_OK
SET_FILE_INFORMATION 10100 1004 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10104 NT_STATUS_OK
ReadX 10104 61440 4096 4096 NT_STATUS_OK
ReadX 10104 126976 4096 4096 NT_STATUS_OK
WriteX 10104 0 65536 65536 NT_STATUS_OK
WriteX 10104 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 61440 4096 4096 NT_STATUS_OK
ReadX 10105 126976 4096 4096 NT_STATUS_OK
ReadX 10105 192512 4096 4096 NT_STATUS_OK
ReadX 10105 258048 4096 4096 NT_STATUS_OK
WriteX 10105 0 65536 65536 NT_STATUS_OK
WriteX 10105 65536 65536 65536 NT_STATUS_OK
WriteX 10105 131072 65536 65536 NT_STATUS_OK
WriteX 10105 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 61440 4096 4096 NT_STATUS_OK
ReadX 10106 126976 4096 4096 NT_STATUS_OK
ReadX 10106 192512 4096 4096 NT_STATUS_OK
ReadX 10106 258048 4096 4096 NT_STATUS_OK
ReadX 10106 323584 4096 4096 NT_STATUS_OK
ReadX 10106 389120 4096 4096 NT_STATUS_OK
ReadX 10106 454656 4096 4096 NT_STATUS_OK
ReadX 10106 520192 4096 4096 NT_STATUS_OK
WriteX 10106 0 65536 65536 NT_STATUS_OK
WriteX 10106 65536 65536 65536 NT_STATUS_OK
WriteX 10106 131072 65536 65536 NT_STATUS_OK
WriteX 10106 196608 65536 65536 NT_STATUS_OK
WriteX 10106 262144 65536 65536 NT_STATUS_OK
WriteX 10106 327680 65536 65536 NT_STATUS_OK
WriteX 10106 393216 65536 65536 NT_STATUS_OK
WriteX 10106 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10107 NT_STATUS_OK
ReadX 10107 0 4096 4096 NT_STATUS_OK
ReadX 10107 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10108 NT_STATUS_OK
WriteX 10108 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10108 258 NT_STATUS_OK
WriteX 10108 0 53 53 NT_STATUS_OK
Close 10108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10101 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Close 10104 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10107 8192 4096 4096 NT_STATUS_OK
ReadX 10107 12288 4096 4096 NT_STATUS_OK
WriteX 10111 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10111 258 NT_STATUS_OK
ReadX 10107 16384 4096 4096 NT_STATUS_OK
ReadX 10107 20480 4096 4096 NT_STATUS_OK
WriteX 10111 0 15360 15360 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10112 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10112 1004 NT_STATUS_OK
WriteX 10112 0 4096 4096 NT_STATUS_OK
Close 10112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10115 NT_STATUS_OK
ReadX 10115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10115 4096 4096 4096 NT_STATUS_OK
ReadX 10115 8192 4096 4096 NT_STATUS_OK
ReadX 10115 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
ReadX 10118 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
ReadX 10119 4096 4096 4096 NT_STATUS_OK
ReadX 10119 8192 4096 4096 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10120 NT_STATUS_OK
WriteX 10120 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10120 258 NT_STATUS_OK
WriteX 10120 0 15360 15360 NT_STATUS_OK
Close 10120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10121 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10121 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10122 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10124 NT_STATUS_OK
ReadX 10124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10125 NT_STATUS_OK
SET_FILE_INFORMATION 10125 1004 NT_STATUS_OK
Close 10125 NT_STATUS_OK
WriteX 10121 0 4096 4096 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
ReadX 10128 4096 4096 4096 NT_STATUS_OK
ReadX 10128 8192 4096 4096 NT_STATUS_OK
ReadX 10128 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10128 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10128 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10130 NT_STATUS_OK
WriteX 10130 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 258 NT_STATUS_OK
WriteX 10130 0 53 53 NT_STATUS_OK
Close 10130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10129 4096 4096 4096 NT_STATUS_OK
ReadX 10129 8192 4096 4096 NT_STATUS_OK
ReadX 10129 12288 4096 4096 NT_STATUS_OK
WriteX 10133 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10133 258 NT_STATUS_OK
WriteX 10133 0 12006 12006 NT_STATUS_OK
Close 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10134 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10134 1004 NT_STATUS_OK
WriteX 10134 0 4096 4096 NT_STATUS_OK
Close 10134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10138 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10137 4096 4096 4096 NT_STATUS_OK
ReadX 10137 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10140 NT_STATUS_OK
WriteX 10140 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10140 258 NT_STATUS_OK
WriteX 10140 0 11991 11991 NT_STATUS_OK
Close 10140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10141 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10141 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10142 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10145 NT_STATUS_OK
SET_FILE_INFORMATION 10145 1004 NT_STATUS_OK
Close 10145 NT_STATUS_OK
WriteX 10141 0 4096 4096 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10146 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10148 NT_STATUS_OK
ReadX 10148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10149 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10148 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10148 1004 NT_STATUS_OK
ReadX 10148 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10148 1004 NT_STATUS_OK
WriteX 10148 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10148 1004 NT_STATUS_OK
Close 10124 NT_STATUS_OK
WriteX 10128 0 19054 19054 NT_STATUS_OK
WriteX 10148 0 12288 12288 NT_STATUS_OK
Close 10144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 61440 61440 NT_STATUS_OK
ReadX 10155 61440 4096 4096 NT_STATUS_OK
ReadX 10155 65536 61440 61440 NT_STATUS_OK
ReadX 10155 126976 4096 4096 NT_STATUS_OK
ReadX 10155 131072 61440 61440 NT_STATUS_OK
ReadX 10155 192512 4096 4096 NT_STATUS_OK
ReadX 10155 196608 61440 61440 NT_STATUS_OK
ReadX 10155 258048 4096 4096 NT_STATUS_OK
ReadX 10155 262144 61440 61440 NT_STATUS_OK
ReadX 10155 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 61440 61440 NT_STATUS_OK
ReadX 10156 61440 4096 4096 NT_STATUS_OK
ReadX 10156 65536 61440 61440 NT_STATUS_OK
ReadX 10156 126976 4096 4096 NT_STATUS_OK
ReadX 10156 131072 61440 61440 NT_STATUS_OK
ReadX 10156 192512 4096 4096 NT_STATUS_OK
ReadX 10156 196608 61440 61440 NT_STATUS_OK
ReadX 10156 258048 4096 4096 NT_STATUS_OK
ReadX 10156 262144 61440 61440 NT_STATUS_OK
ReadX 10156 323584 4096 4096 NT_STATUS_OK
ReadX 10156 327680 61440 61440 NT_STATUS_OK
ReadX 10156 389120 4096 4096 NT_STATUS_OK
ReadX 10156 393216 61440 61440 NT_STATUS_OK
ReadX 10156 454656 4096 4096 NT_STATUS_OK
ReadX 10156 458752 61440 61440 NT_STATUS_OK
ReadX 10156 520192 4096 4096 NT_STATUS_OK
ReadX 10156 524288 61440 61440 NT_STATUS_OK
ReadX 10156 585728 4096 4096 NT_STATUS_OK
ReadX 10156 589824 61440 61440 NT_STATUS_OK
ReadX 10156 651264 4096 4096 NT_STATUS_OK
ReadX 10156 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 61440 61440 NT_STATUS_OK
ReadX 10157 61440 4096 4096 NT_STATUS_OK
ReadX 10157 65536 61440 61440 NT_STATUS_OK
ReadX 10157 126976 4096 4096 NT_STATUS_OK
ReadX 10157 131072 61440 61440 NT_STATUS_OK
ReadX 10157 192512 4096 4096 NT_STATUS_OK
ReadX 10157 196608 61440 61440 NT_STATUS_OK
ReadX 10157 258048 4096 4096 NT_STATUS_OK
ReadX 10157 262144 61440 61440 NT_STATUS_OK
ReadX 10157 323584 4096 4096 NT_STATUS_OK
ReadX 10157 327680 61440 61440 NT_STATUS_OK
ReadX 10157 389120 4096 4096 NT_STATUS_OK
ReadX 10157 393216 61440 61440 NT_STATUS_OK
ReadX 10157 454656 4096 4096 NT_STATUS_OK
ReadX 10157 458752 61440 61440 NT_STATUS_OK
ReadX 10157 520192 4096 4096 NT_STATUS_OK
ReadX 10157 524288 61440 61440 NT_STATUS_OK
ReadX 10157 585728 4096 4096 NT_STATUS_OK
ReadX 10157 589824 61440 61440 NT_STATUS_OK
ReadX 10157 651264 4096 4096 NT_STATUS_OK
ReadX 10157 655360 61440 61440 NT_STATUS_OK
ReadX 10157 716800 4096 4096 NT_STATUS_OK
ReadX 10157 720896 61440 61440 NT_STATUS_OK
ReadX 10157 782336 4096 4096 NT_STATUS_OK
ReadX 10157 786432 61440 61440 NT_STATUS_OK
ReadX 10157 847872 4096 4096 NT_STATUS_OK
ReadX 10157 851968 61440 61440 NT_STATUS_OK
ReadX 10157 913408 4096 4096 NT_STATUS_OK
ReadX 10157 917504 61440 61440 NT_STATUS_OK
ReadX 10157 978944 4096 4096 NT_STATUS_OK
ReadX 10157 983040 61440 61440 NT_STATUS_OK
ReadX 10157 1044480 4096 4096 NT_STATUS_OK
ReadX 10157 1048576 61440 61440 NT_STATUS_OK
ReadX 10157 1110016 4096 4096 NT_STATUS_OK
ReadX 10157 1114112 61440 61440 NT_STATUS_OK
ReadX 10157 1175552 4096 4096 NT_STATUS_OK
ReadX 10157 1179648 61440 61440 NT_STATUS_OK
ReadX 10157 1241088 4096 4096 NT_STATUS_OK
ReadX 10157 1245184 61440 61440 NT_STATUS_OK
ReadX 10157 1306624 4096 4096 NT_STATUS_OK
ReadX 10157 1310720 61440 61440 NT_STATUS_OK
ReadX 10157 1372160 4096 4096 NT_STATUS_OK
ReadX 10157 1376256 61440 61440 NT_STATUS_OK
ReadX 10157 1437696 4096 4096 NT_STATUS_OK
ReadX 10157 1441792 61440 61440 NT_STATUS_OK
ReadX 10157 1503232 4096 4096 NT_STATUS_OK
ReadX 10157 1507328 61440 61440 NT_STATUS_OK
ReadX 10157 1568768 4096 4096 NT_STATUS_OK
ReadX 10157 1572864 61440 61440 NT_STATUS_OK
ReadX 10157 1634304 4096 4096 NT_STATUS_OK
ReadX 10157 1638400 61440 61440 NT_STATUS_OK
ReadX 10157 1699840 4096 4096 NT_STATUS_OK
ReadX 10157 1703936 61440 61440 NT_STATUS_OK
ReadX 10157 1765376 4096 4096 NT_STATUS_OK
ReadX 10157 1769472 61440 61440 NT_STATUS_OK
ReadX 10157 1830912 4096 4096 NT_STATUS_OK
ReadX 10157 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10164 NT_STATUS_OK
QUERY_FILE_INFORMATION 10164 1004 NT_STATUS_OK
WriteX 10164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10164 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10165 NT_STATUS_OK
Close 10165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10166 NT_STATUS_OK
WriteX 10166 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 491 491 NT_STATUS_OK
Close 10166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10164 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10170 NT_STATUS_OK
WriteX 10170 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10170 258 NT_STATUS_OK
WriteX 10170 0 543 543 NT_STATUS_OK
Close 10170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10184 NT_STATUS_OK
QUERY_FILE_INFORMATION 10184 1004 NT_STATUS_OK
WriteX 10184 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10184 258 NT_STATUS_OK
WriteX 10184 0 2048 2048 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10185 0 4096 4096 NT_STATUS_OK
Flush 10185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10185 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10190 NT_STATUS_OK
WriteX 10190 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10190 258 NT_STATUS_OK
WriteX 10190 0 2048 2048 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10196 NT_STATUS_OK
WriteX 10196 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
WriteX 10196 0 2048 2048 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 2048 2048 NT_STATUS_OK
ReadX 10175 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10191 0 4096 4096 NT_STATUS_OK
WriteX 10175 0 8192 8192 NT_STATUS_OK
WriteX 10176 0 4096 4096 NT_STATUS_OK
WriteX 10177 0 4096 4096 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10201 NT_STATUS_OK
QUERY_FILE_INFORMATION 10201 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10203 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10204 NT_STATUS_OK
ReadX 10204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10205 NT_STATUS_OK
ReadX 10205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10221 NT_STATUS_OK
QUERY_FILE_INFORMATION 10221 1004 NT_STATUS_OK
WriteX 10221 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10221 258 NT_STATUS_OK
WriteX 10221 0 2048 2048 NT_STATUS_OK
Close 10221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10229 NT_STATUS_OK
QUERY_FILE_INFORMATION 10229 1004 NT_STATUS_OK
WriteX 10229 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10229 258 NT_STATUS_OK
WriteX 10229 0 2048 2048 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
Flush 10222 NT_STATUS_OK
WriteX 10230 0 4096 4096 NT_STATUS_OK
Flush 10230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10224 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10232 NT_STATUS_OK
WriteX 10232 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10232 258 NT_STATUS_OK
WriteX 10232 0 4096 4096 NT_STATUS_OK
Close 10232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10235 NT_STATUS_OK
WriteX 10235 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10235 258 NT_STATUS_OK
WriteX 10235 0 4096 4096 NT_STATUS_OK
Close 10235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10236 0 4096 4096 NT_STATUS_OK
Close 10233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10210 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Close 10214 NT_STATUS_OK
Close 10215 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Close 10204 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10242 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10243 NT_STATUS_OK
WriteX 10243 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10243 258 NT_STATUS_OK
WriteX 10243 0 2048 2048 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10248 NT_STATUS_OK
ReadX 10248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10258 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10249 NT_STATUS_OK
Close 10250 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10260 NT_STATUS_OK
QUERY_FILE_INFORMATION 10260 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10279 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10280 NT_STATUS_OK
QUERY_FILE_INFORMATION 10280 1004 NT_STATUS_OK
WriteX 10280 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10280 258 NT_STATUS_OK
WriteX 10280 0 2048 2048 NT_STATUS_OK
Close 10280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10292 NT_STATUS_OK
QUERY_FILE_INFORMATION 10292 1004 NT_STATUS_OK
WriteX 10292 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10292 258 NT_STATUS_OK
WriteX 10292 0 2048 2048 NT_STATUS_OK
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10300 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 2048 2048 NT_STATUS_OK
Close 10300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10281 0 4096 4096 NT_STATUS_OK
Flush 10281 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
Flush 10293 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Flush 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10281 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10283 4096 16384 16384 NT_STATUS_OK
ReadX 10263 4096 16384 16384 NT_STATUS_OK
ReadX 10295 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 2048 2048 NT_STATUS_OK
WriteX 10303 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10304 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Close 10275 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10283 NT_STATUS_OK
Close 10284 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Close 10274 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10306 NT_STATUS_OK
QUERY_FILE_INFORMATION 10306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10308 NT_STATUS_OK
QUERY_FILE_INFORMATION 10308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10311 4096 16384 16384 NT_STATUS_OK
WriteX 10311 0 4096 4096 NT_STATUS_OK
WriteX 10312 0 4096 4096 NT_STATUS_OK
WriteX 10313 0 4096 4096 NT_STATUS_OK
WriteX 10314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10318 NT_STATUS_OK
ReadX 10318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10325 NT_STATUS_OK
ReadX 10325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10326 NT_STATUS_OK
ReadX 10326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 8192 8192 NT_STATUS_OK
ReadX 10317 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10331 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10331 0 4096 4096 NT_STATUS_OK
ReadX 10331 4096 4096 4096 NT_STATUS_OK
ReadX 10331 8192 4096 4096 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
WriteX 10318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
ReadX 10332 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10311 0 4096 4096 NT_STATUS_OK
WriteX 10312 0 4096 4096 NT_STATUS_OK
WriteX 10313 0 4096 4096 NT_STATUS_OK
WriteX 10314 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10337 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 1004 NT_STATUS_OK
WriteX 10337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 258 NT_STATUS_OK
WriteX 10337 0 2048 2048 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
ReadX 10340 4096 4096 4096 NT_STATUS_OK
WriteX 10340 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
ReadX 10342 4096 4096 4096 NT_STATUS_OK
WriteX 10342 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10343 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10325 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Close 10321 NT_STATUS_OK
Close 10322 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Close 10320 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10345 0 4096 4096 NT_STATUS_OK
ReadX 10345 4096 4096 4096 NT_STATUS_OK
ReadX 10345 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10350 NT_STATUS_OK
ReadX 10350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10351 NT_STATUS_OK
ReadX 10351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10353 NT_STATUS_OK
ReadX 10353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10354 NT_STATUS_OK
ReadX 10354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10355 NT_STATUS_OK
ReadX 10355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
ReadX 10346 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10363 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
WriteX 10363 0 2048 2048 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10364 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10368 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10369 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 1004 NT_STATUS_OK
WriteX 10369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 258 NT_STATUS_OK
WriteX 10369 0 2048 2048 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10353 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10371 NT_STATUS_OK
QUERY_FILE_INFORMATION 10371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10347 NT_STATUS_OK
Close 10350 NT_STATUS_OK
Close 10351 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Close 10354 NT_STATUS_OK
Close 10355 NT_STATUS_OK
Close 10356 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10373 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 61440 4096 4096 NT_STATUS_OK
ReadX 10375 126976 4096 4096 NT_STATUS_OK
WriteX 10375 0 65536 65536 NT_STATUS_OK
WriteX 10375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 61440 4096 4096 NT_STATUS_OK
ReadX 10376 126976 4096 4096 NT_STATUS_OK
ReadX 10376 192512 4096 4096 NT_STATUS_OK
ReadX 10376 258048 4096 4096 NT_STATUS_OK
WriteX 10376 0 65536 65536 NT_STATUS_OK
WriteX 10376 65536 65536 65536 NT_STATUS_OK
WriteX 10376 131072 65536 65536 NT_STATUS_OK
WriteX 10376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 61440 4096 4096 NT_STATUS_OK
ReadX 10377 126976 4096 4096 NT_STATUS_OK
ReadX 10377 192512 4096 4096 NT_STATUS_OK
ReadX 10377 258048 4096 4096 NT_STATUS_OK
ReadX 10377 323584 4096 4096 NT_STATUS_OK
ReadX 10377 389120 4096 4096 NT_STATUS_OK
ReadX 10377 454656 4096 4096 NT_STATUS_OK
ReadX 10377 520192 4096 4096 NT_STATUS_OK
WriteX 10377 0 65536 65536 NT_STATUS_OK
WriteX 10377 65536 65536 65536 NT_STATUS_OK
WriteX 10377 131072 65536 65536 NT_STATUS_OK
WriteX 10377 196608 65536 65536 NT_STATUS_OK
WriteX 10377 262144 65536 65536 NT_STATUS_OK
WriteX 10377 327680 65536 65536 NT_STATUS_OK
WriteX 10377 393216 65536 65536 NT_STATUS_OK
WriteX 10377 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10378 8192 4096 4096 NT_STATUS_OK
ReadX 10378 12288 4096 4096 NT_STATUS_OK
ReadX 10378 16384 4096 4096 NT_STATUS_OK
ReadX 10378 20480 4096 4096 NT_STATUS_OK
ReadX 10378 24576 4096 4096 NT_STATUS_OK
ReadX 10378 28672 4096 4096 NT_STATUS_OK
ReadX 10378 32768 4096 4096 NT_STATUS_OK
ReadX 10378 36864 4096 4096 NT_STATUS_OK
ReadX 10378 40960 4096 4096 NT_STATUS_OK
ReadX 10378 45056 4096 4096 NT_STATUS_OK
ReadX 10378 49152 4096 4096 NT_STATUS_OK
ReadX 10378 53248 4096 4096 NT_STATUS_OK
ReadX 10378 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10378 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10381 NT_STATUS_OK
WriteX 10381 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10381 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10381 1004 NT_STATUS_OK
WriteX 10381 0 57088 57088 NT_STATUS_OK
WriteX 10381 0 4096 4096 NT_STATUS_OK
Flush 10381 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10382 NT_STATUS_OK
SET_FILE_INFORMATION 10382 1004 NT_STATUS_OK
Close 10382 NT_STATUS_OK
SET_FILE_INFORMATION 10381 1004 NT_STATUS_OK
WriteX 10381 0 4096 4096 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10386 NT_STATUS_OK
WriteX 10386 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10386 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10386 1004 NT_STATUS_OK
WriteX 10386 0 51456 51456 NT_STATUS_OK
WriteX 10386 0 4096 4096 NT_STATUS_OK
Flush 10386 NT_STATUS_OK
SET_FILE_INFORMATION 10386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10386 1004 NT_STATUS_OK
WriteX 10386 0 4096 4096 NT_STATUS_OK
Close 10386 NT_STATUS_OK
Close 10385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10390 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10395 NT_STATUS_OK
WriteX 10395 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 53077 53077 NT_STATUS_OK
Close 10395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10396 NT_STATUS_OK
WriteX 10396 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 0 65536 65536 NT_STATUS_OK
WriteX 10396 65536 1856 1856 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10398 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10402 NT_STATUS_OK
Close 10402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10405 NT_STATUS_OK
WriteX 10405 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10405 258 NT_STATUS_OK
WriteX 10405 0 7983 7983 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10410 NT_STATUS_OK
WriteX 10410 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 65536 65536 NT_STATUS_OK
WriteX 10410 65536 65536 65536 NT_STATUS_OK
WriteX 10410 131072 65536 65536 NT_STATUS_OK
WriteX 10410 196608 65536 65536 NT_STATUS_OK
WriteX 10410 262144 65536 65536 NT_STATUS_OK
WriteX 10410 327680 65536 65536 NT_STATUS_OK
WriteX 10410 393216 65536 65536 NT_STATUS_OK
WriteX 10410 458752 46731 46731 NT_STATUS_OK
Close 10410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10411 NT_STATUS_OK
WriteX 10411 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10411 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10400 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10411 1004 NT_STATUS_OK
WriteX 10411 0 65536 65536 NT_STATUS_OK
WriteX 10411 65536 22848 22848 NT_STATUS_OK
WriteX 10411 0 4096 4096 NT_STATUS_OK
Flush 10411 NT_STATUS_OK
SET_FILE_INFORMATION 10411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10411 1004 NT_STATUS_OK
WriteX 10411 0 4096 4096 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10413 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10415 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10416 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10416 1004 NT_STATUS_OK
ReadX 10416 8192 4096 4096 NT_STATUS_OK
ReadX 10416 12288 4096 4096 NT_STATUS_OK
ReadX 10416 16384 4096 4096 NT_STATUS_OK
ReadX 10416 20480 4096 4096 NT_STATUS_OK
ReadX 10416 24576 4096 4096 NT_STATUS_OK
ReadX 10416 28672 4096 4096 NT_STATUS_OK
ReadX 10416 32768 4096 4096 NT_STATUS_OK
ReadX 10416 36864 4096 4096 NT_STATUS_OK
ReadX 10416 40960 4096 4096 NT_STATUS_OK
ReadX 10416 45056 4096 4096 NT_STATUS_OK
ReadX 10416 49152 4096 4096 NT_STATUS_OK
ReadX 10416 53248 4096 4096 NT_STATUS_OK
ReadX 10416 57344 4096 4096 NT_STATUS_OK
ReadX 10416 61440 4096 4096 NT_STATUS_OK
ReadX 10416 65536 4096 4096 NT_STATUS_OK
ReadX 10416 69632 4096 4096 NT_STATUS_OK
ReadX 10416 73728 4096 4096 NT_STATUS_OK
ReadX 10416 77824 4096 4096 NT_STATUS_OK
ReadX 10416 81920 4096 4096 NT_STATUS_OK
ReadX 10416 86016 4096 4096 NT_STATUS_OK
ReadX 10416 90112 4096 4096 NT_STATUS_OK
ReadX 10416 94208 4096 4096 NT_STATUS_OK
ReadX 10416 98304 4096 4096 NT_STATUS_OK
ReadX 10416 102400 4096 4096 NT_STATUS_OK
ReadX 10416 106496 4096 4096 NT_STATUS_OK
ReadX 10416 110592 4096 4096 NT_STATUS_OK
ReadX 10416 114688 4096 4096 NT_STATUS_OK
ReadX 10416 118784 4096 4096 NT_STATUS_OK
ReadX 10416 122880 4096 4096 NT_STATUS_OK
ReadX 10416 126976 4096 4096 NT_STATUS_OK
ReadX 10416 131072 4096 4096 NT_STATUS_OK
ReadX 10416 135168 4096 4096 NT_STATUS_OK
ReadX 10416 139264 4096 4096 NT_STATUS_OK
ReadX 10416 143360 4096 4096 NT_STATUS_OK
ReadX 10416 147456 4096 4096 NT_STATUS_OK
ReadX 10416 151552 4096 4096 NT_STATUS_OK
ReadX 10416 155648 4096 4096 NT_STATUS_OK
ReadX 10416 159744 4096 4096 NT_STATUS_OK
ReadX 10416 163840 4096 4096 NT_STATUS_OK
ReadX 10416 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10417 NT_STATUS_OK
Close 10417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10419 NT_STATUS_OK
WriteX 10419 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10419 258 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10420 NT_STATUS_OK
SET_FILE_INFORMATION 10420 1004 NT_STATUS_OK
Close 10420 NT_STATUS_OK
WriteX 10419 0 42388 42388 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10421 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
ReadX 10423 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10424 NT_STATUS_OK
WriteX 10424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
SET_FILE_INFORMATION 10424 1004 NT_STATUS_OK
WriteX 10424 0 42652 42652 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10426 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
ReadX 10428 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10433 NT_STATUS_OK
WriteX 10433 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10433 258 NT_STATUS_OK
WriteX 10433 0 65536 65536 NT_STATUS_OK
WriteX 10433 65536 49 49 NT_STATUS_OK
Close 10433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 61440 61440 NT_STATUS_OK
ReadX 10434 61440 4096 4096 NT_STATUS_OK
ReadX 10434 65536 61440 61440 NT_STATUS_OK
ReadX 10434 126976 4096 4096 NT_STATUS_OK
ReadX 10434 131072 61440 61440 NT_STATUS_OK
ReadX 10434 192512 4096 4096 NT_STATUS_OK
ReadX 10434 196608 61440 61440 NT_STATUS_OK
ReadX 10434 258048 4096 4096 NT_STATUS_OK
ReadX 10434 262144 61440 61440 NT_STATUS_OK
ReadX 10434 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 61440 61440 NT_STATUS_OK
ReadX 10435 61440 4096 4096 NT_STATUS_OK
ReadX 10435 65536 61440 61440 NT_STATUS_OK
ReadX 10435 126976 4096 4096 NT_STATUS_OK
ReadX 10435 131072 61440 61440 NT_STATUS_OK
ReadX 10435 192512 4096 4096 NT_STATUS_OK
ReadX 10435 196608 61440 61440 NT_STATUS_OK
ReadX 10435 258048 4096 4096 NT_STATUS_OK
ReadX 10435 262144 61440 61440 NT_STATUS_OK
ReadX 10435 323584 4096 4096 NT_STATUS_OK
ReadX 10435 327680 61440 61440 NT_STATUS_OK
ReadX 10435 389120 4096 4096 NT_STATUS_OK
ReadX 10435 393216 61440 61440 NT_STATUS_OK
ReadX 10435 454656 4096 4096 NT_STATUS_OK
ReadX 10435 458752 61440 61440 NT_STATUS_OK
ReadX 10435 520192 4096 4096 NT_STATUS_OK
ReadX 10435 524288 61440 61440 NT_STATUS_OK
ReadX 10435 585728 4096 4096 NT_STATUS_OK
ReadX 10435 589824 61440 61440 NT_STATUS_OK
ReadX 10435 651264 4096 4096 NT_STATUS_OK
ReadX 10435 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 61440 61440 NT_STATUS_OK
ReadX 10436 61440 4096 4096 NT_STATUS_OK
ReadX 10436 65536 61440 61440 NT_STATUS_OK
ReadX 10436 126976 4096 4096 NT_STATUS_OK
ReadX 10436 131072 61440 61440 NT_STATUS_OK
ReadX 10436 192512 4096 4096 NT_STATUS_OK
ReadX 10436 196608 61440 61440 NT_STATUS_OK
ReadX 10436 258048 4096 4096 NT_STATUS_OK
ReadX 10436 262144 61440 61440 NT_STATUS_OK
ReadX 10436 323584 4096 4096 NT_STATUS_OK
ReadX 10436 327680 61440 61440 NT_STATUS_OK
ReadX 10436 389120 4096 4096 NT_STATUS_OK
ReadX 10436 393216 61440 61440 NT_STATUS_OK
ReadX 10436 454656 4096 4096 NT_STATUS_OK
ReadX 10436 458752 61440 61440 NT_STATUS_OK
ReadX 10436 520192 4096 4096 NT_STATUS_OK
ReadX 10436 524288 61440 61440 NT_STATUS_OK
ReadX 10436 585728 4096 4096 NT_STATUS_OK
ReadX 10436 589824 61440 61440 NT_STATUS_OK
ReadX 10436 651264 4096 4096 NT_STATUS_OK
ReadX 10436 655360 61440 61440 NT_STATUS_OK
ReadX 10436 716800 4096 4096 NT_STATUS_OK
ReadX 10436 720896 61440 61440 NT_STATUS_OK
ReadX 10436 782336 4096 4096 NT_STATUS_OK
ReadX 10436 786432 61440 61440 NT_STATUS_OK
ReadX 10436 847872 4096 4096 NT_STATUS_OK
ReadX 10436 851968 61440 61440 NT_STATUS_OK
ReadX 10436 913408 4096 4096 NT_STATUS_OK
ReadX 10436 917504 61440 61440 NT_STATUS_OK
ReadX 10436 978944 4096 4096 NT_STATUS_OK
ReadX 10436 983040 61440 61440 NT_STATUS_OK
ReadX 10436 1044480 4096 4096 NT_STATUS_OK
ReadX 10436 1048576 61440 61440 NT_STATUS_OK
ReadX 10436 1110016 4096 4096 NT_STATUS_OK
ReadX 10436 1114112 61440 61440 NT_STATUS_OK
ReadX 10436 1175552 4096 4096 NT_STATUS_OK
ReadX 10436 1179648 61440 61440 NT_STATUS_OK
ReadX 10436 1241088 4096 4096 NT_STATUS_OK
ReadX 10436 1245184 61440 61440 NT_STATUS_OK
ReadX 10436 1306624 4096 4096 NT_STATUS_OK
ReadX 10436 1310720 61440 61440 NT_STATUS_OK
ReadX 10436 1372160 4096 4096 NT_STATUS_OK
ReadX 10436 1376256 61440 61440 NT_STATUS_OK
ReadX 10436 1437696 4096 4096 NT_STATUS_OK
ReadX 10436 1441792 61440 61440 NT_STATUS_OK
ReadX 10436 1503232 4096 4096 NT_STATUS_OK
ReadX 10436 1507328 61440 61440 NT_STATUS_OK
ReadX 10436 1568768 4096 4096 NT_STATUS_OK
ReadX 10436 1572864 61440 61440 NT_STATUS_OK
ReadX 10436 1634304 4096 4096 NT_STATUS_OK
ReadX 10436 1638400 61440 61440 NT_STATUS_OK
ReadX 10436 1699840 4096 4096 NT_STATUS_OK
ReadX 10436 1703936 61440 61440 NT_STATUS_OK
ReadX 10436 1765376 4096 4096 NT_STATUS_OK
ReadX 10436 1769472 61440 61440 NT_STATUS_OK
ReadX 10436 1830912 4096 4096 NT_STATUS_OK
ReadX 10436 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10438 NT_STATUS_OK
QUERY_FILE_INFORMATION 10438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10438 1005 NT_STATUS_OK
ReadX 10438 2156 24 24 NT_STATUS_OK
ReadX 10438 2139 276 276 NT_STATUS_OK
ReadX 10438 2136 14 14 NT_STATUS_OK
ReadX 10438 2136 7 7 NT_STATUS_OK
ReadX 10438 2138 12 12 NT_STATUS_OK
ReadX 10438 2137 8 8 NT_STATUS_OK
ReadX 10438 2135 15 15 NT_STATUS_OK
ReadX 10438 0 16 16 NT_STATUS_OK
ReadX 10438 16 2048 2048 NT_STATUS_OK
ReadX 10438 2064 2048 2048 NT_STATUS_OK
ReadX 10438 257 2048 2048 NT_STATUS_OK
ReadX 10438 385 2048 2048 NT_STATUS_OK
ReadX 10438 513 2048 2048 NT_STATUS_OK
ReadX 10438 641 2048 2048 NT_STATUS_OK
ReadX 10438 769 2048 2048 NT_STATUS_OK
ReadX 10438 897 2048 2048 NT_STATUS_OK
ReadX 10438 1025 2048 2048 NT_STATUS_OK
ReadX 10438 1153 2048 2048 NT_STATUS_OK
ReadX 10438 1281 2048 2048 NT_STATUS_OK
ReadX 10438 1409 2048 2048 NT_STATUS_OK
ReadX 10438 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10443 NT_STATUS_OK
WriteX 10443 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10443 258 NT_STATUS_OK
WriteX 10443 0 10575 10575 NT_STATUS_OK
Flush 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10448 NT_STATUS_OK
LockX 10448 2147483538 1 NT_STATUS_OK
UnlockX 10448 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10448 1005 NT_STATUS_OK
ReadX 10448 0 512 512 NT_STATUS_OK
ReadX 10448 512 512 512 NT_STATUS_OK
ReadX 10448 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10448 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10448 1004 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10449 NT_STATUS_OK
QUERY_FILE_INFORMATION 10449 1005 NT_STATUS_OK
ReadX 10449 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10450 NT_STATUS_OK
LockX 10450 2147483538 1 NT_STATUS_OK
UnlockX 10450 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
ReadX 10450 0 512 512 NT_STATUS_OK
ReadX 10450 512 512 512 NT_STATUS_OK
ReadX 10450 1024 512 512 NT_STATUS_OK
ReadX 10450 288 20 20 NT_STATUS_OK
ReadX 10450 308 2084 2084 NT_STATUS_OK
ReadX 10450 388 2084 2084 NT_STATUS_OK
ReadX 10450 388 2084 2084 NT_STATUS_OK
ReadX 10437 2157 1386 1386 NT_STATUS_OK
ReadX 10450 2472 399 399 NT_STATUS_OK
ReadX 10450 3072 1536 1536 NT_STATUS_OK
ReadX 10450 544 149 149 NT_STATUS_OK
ReadX 10450 693 485 485 NT_STATUS_OK
Close 10450 NT_STATUS_OK
ReadX 10437 2157 4096 4096 NT_STATUS_OK
ReadX 10437 6253 4096 4096 NT_STATUS_OK
ReadX 10437 10349 4096 4096 NT_STATUS_OK
ReadX 10437 14445 4096 4096 NT_STATUS_OK
ReadX 10437 18541 4096 4096 NT_STATUS_OK
ReadX 10437 22637 256 256 NT_STATUS_OK
ReadX 10437 22893 4096 4096 NT_STATUS_OK
ReadX 10437 26989 4096 4096 NT_STATUS_OK
ReadX 10437 31085 4096 4096 NT_STATUS_OK
ReadX 10437 35181 4096 4096 NT_STATUS_OK
ReadX 10437 39277 4096 4096 NT_STATUS_OK
ReadX 10437 43373 4096 4096 NT_STATUS_OK
ReadX 10437 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10437 2157 1024 1024 NT_STATUS_OK
ReadX 10437 1667 4688 4688 NT_STATUS_OK
ReadX 10437 6355 3516 3516 NT_STATUS_OK
ReadX 10437 9871 16384 16384 NT_STATUS_OK
ReadX 10437 26255 3771 3771 NT_STATUS_OK
ReadX 10437 30026 2048 2048 NT_STATUS_OK
ReadX 10437 32074 1024 1024 NT_STATUS_OK
ReadX 10437 33098 6652 6652 NT_STATUS_OK
ReadX 10437 39750 16384 16384 NT_STATUS_OK
ReadX 10437 56134 10496 10496 NT_STATUS_OK
ReadX 10437 66630 1784 1784 NT_STATUS_OK
ReadX 10437 68414 90 90 NT_STATUS_OK
ReadX 10437 68504 273 273 NT_STATUS_OK
ReadX 10437 68777 1600 1600 NT_STATUS_OK
ReadX 10437 70377 640 640 NT_STATUS_OK
ReadX 10437 71017 1280 1280 NT_STATUS_OK
ReadX 10437 72297 8464 8464 NT_STATUS_OK
ReadX 10437 80761 158 158 NT_STATUS_OK
ReadX 10437 80919 912 912 NT_STATUS_OK
ReadX 10437 81831 1980 1980 NT_STATUS_OK
ReadX 10437 83811 2256 2256 NT_STATUS_OK
ReadX 10437 86067 400 400 NT_STATUS_OK
ReadX 10437 86467 252 252 NT_STATUS_OK
ReadX 10437 86719 42 42 NT_STATUS_OK
ReadX 10437 86761 725 725 NT_STATUS_OK
ReadX 10437 2009 512 512 NT_STATUS_OK
ReadX 10437 3895 9 9 NT_STATUS_OK
ReadX 10437 3781 46 46 NT_STATUS_OK
ReadX 10437 4059 92 92 NT_STATUS_OK
ReadX 10437 3781 92 92 NT_STATUS_OK
ReadX 10437 3986 184 184 NT_STATUS_OK
ReadX 10437 3987 16384 16384 NT_STATUS_OK
ReadX 10437 3902 16384 16384 NT_STATUS_OK
ReadX 10437 3781 10240 10240 NT_STATUS_OK
ReadX 10437 3821 16384 16384 NT_STATUS_OK
ReadX 10437 3891 935 935 NT_STATUS_OK
ReadX 10437 4060 10240 10240 NT_STATUS_OK
ReadX 10437 4059 184 184 NT_STATUS_OK
ReadX 10437 256 184 184 NT_STATUS_OK
ReadX 10437 256 1026 1026 NT_STATUS_OK
ReadX 10437 3901 326 326 NT_STATUS_OK
ReadX 10437 3899 652 652 NT_STATUS_OK
ReadX 10437 256 2 2 NT_STATUS_OK
ReadX 10437 258 4948 4948 NT_STATUS_OK
Close 10437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 65536 65536 NT_STATUS_OK
WriteX 10455 65536 65536 65536 NT_STATUS_OK
WriteX 10455 131072 65536 65536 NT_STATUS_OK
WriteX 10455 196608 65536 65536 NT_STATUS_OK
WriteX 10455 262144 65536 65536 NT_STATUS_OK
WriteX 10455 327680 65536 65536 NT_STATUS_OK
WriteX 10455 393216 65536 65536 NT_STATUS_OK
WriteX 10455 458752 65536 65536 NT_STATUS_OK
WriteX 10455 524288 65536 65536 NT_STATUS_OK
WriteX 10455 589824 35257 35257 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 65536 65536 NT_STATUS_OK
WriteX 10460 65536 65536 65536 NT_STATUS_OK
WriteX 10460 131072 65536 65536 NT_STATUS_OK
WriteX 10460 196608 65536 65536 NT_STATUS_OK
WriteX 10460 262144 65536 65536 NT_STATUS_OK
WriteX 10460 327680 65536 65536 NT_STATUS_OK
WriteX 10460 393216 65536 65536 NT_STATUS_OK
WriteX 10460 458752 65536 65536 NT_STATUS_OK
WriteX 10460 524288 65536 65536 NT_STATUS_OK
WriteX 10460 589824 57598 57598 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10462 NT_STATUS_OK
WriteX 10462 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10462 258 NT_STATUS_OK
WriteX 10462 0 12543 12543 NT_STATUS_OK
Flush 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10464 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10468 NT_STATUS_OK
QUERY_FILE_INFORMATION 10468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10468 1005 NT_STATUS_OK
ReadX 10468 1938 24 24 NT_STATUS_OK
ReadX 10468 1920 276 276 NT_STATUS_OK
ReadX 10468 1918 14 14 NT_STATUS_OK
ReadX 10468 1918 7 7 NT_STATUS_OK
ReadX 10468 1919 12 12 NT_STATUS_OK
ReadX 10468 1919 8 8 NT_STATUS_OK
ReadX 10468 1917 15 15 NT_STATUS_OK
ReadX 10468 0 16 16 NT_STATUS_OK
ReadX 10468 16 2048 2048 NT_STATUS_OK
ReadX 10468 2064 2048 2048 NT_STATUS_OK
ReadX 10468 257 2048 2048 NT_STATUS_OK
ReadX 10468 385 2048 2048 NT_STATUS_OK
ReadX 10468 513 2048 2048 NT_STATUS_OK
ReadX 10468 641 2048 2048 NT_STATUS_OK
ReadX 10468 769 2048 2048 NT_STATUS_OK
ReadX 10468 897 2048 2048 NT_STATUS_OK
ReadX 10468 1025 2048 2048 NT_STATUS_OK
ReadX 10468 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10473 NT_STATUS_OK
WriteX 10473 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10473 258 NT_STATUS_OK
WriteX 10473 0 11588 11588 NT_STATUS_OK
Flush 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10474 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10478 NT_STATUS_OK
WriteX 10478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 258 NT_STATUS_OK
WriteX 10478 0 11615 11615 NT_STATUS_OK
Flush 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10480 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10484 NT_STATUS_OK
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10487 NT_STATUS_OK
WriteX 10487 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10487 258 NT_STATUS_OK
WriteX 10487 0 65536 65536 NT_STATUS_OK
WriteX 10487 65536 16050 16050 NT_STATUS_OK
Close 10487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10467 1939 64 64 NT_STATUS_OK
ReadX 10467 128 248 248 NT_STATUS_OK
ReadX 10467 128 568 568 NT_STATUS_OK
ReadX 10467 3872 1536 1536 NT_STATUS_OK
ReadX 10467 3456 2560 2560 NT_STATUS_OK
ReadX 10467 3136 512 512 NT_STATUS_OK
ReadX 10467 2880 4096 4096 NT_STATUS_OK
ReadX 10467 3264 3072 3072 NT_STATUS_OK
ReadX 10467 320 4096 4096 NT_STATUS_OK
ReadX 10467 1024 4096 4096 NT_STATUS_OK
ReadX 10467 3616 4096 4096 NT_STATUS_OK
ReadX 10467 1939 64 64 NT_STATUS_OK
ReadX 10467 128 248 248 NT_STATUS_OK
ReadX 10467 128 608 608 NT_STATUS_OK
ReadX 10467 2858 1024 1024 NT_STATUS_OK
ReadX 10467 2810 4096 4096 NT_STATUS_OK
ReadX 10467 2826 4096 4096 NT_STATUS_OK
ReadX 10467 2580 2048 2048 NT_STATUS_OK
ReadX 10467 2800 2560 2560 NT_STATUS_OK
ReadX 10467 2100 4096 4096 NT_STATUS_OK
ReadX 10467 2084 4096 4096 NT_STATUS_OK
ReadX 10467 868 4096 4096 NT_STATUS_OK
ReadX 10467 2324 4096 4096 NT_STATUS_OK
ReadX 10467 884 4096 4096 NT_STATUS_OK
ReadX 10467 2604 1024 1024 NT_STATUS_OK
ReadX 10467 580 4096 4096 NT_STATUS_OK
ReadX 10467 596 4096 4096 NT_STATUS_OK
ReadX 10467 2752 4096 4096 NT_STATUS_OK
ReadX 10467 2842 1024 1024 NT_STATUS_OK
ReadX 10467 660 4096 4096 NT_STATUS_OK
ReadX 10467 2720 4096 4096 NT_STATUS_OK
ReadX 10467 2736 4096 4096 NT_STATUS_OK
ReadX 10467 628 4096 4096 NT_STATUS_OK
ReadX 10467 2704 4096 4096 NT_STATUS_OK
ReadX 10467 1556 4096 4096 NT_STATUS_OK
ReadX 10467 576 4096 4096 NT_STATUS_OK
ReadX 10467 3168 1536 1536 NT_STATUS_OK
ReadX 10467 832 4096 4096 NT_STATUS_OK
ReadX 10467 1088 4096 4096 NT_STATUS_OK
ReadX 10467 1344 4096 4096 NT_STATUS_OK
ReadX 10467 1600 4096 4096 NT_STATUS_OK
ReadX 10467 1856 4096 4096 NT_STATUS_OK
ReadX 10467 2112 4096 4096 NT_STATUS_OK
ReadX 10467 1892 4096 4096 NT_STATUS_OK
ReadX 10467 820 4096 4096 NT_STATUS_OK
ReadX 10467 788 4096 4096 NT_STATUS_OK
ReadX 10467 1604 4096 4096 NT_STATUS_OK
ReadX 10467 3648 4096 4096 NT_STATUS_OK
ReadX 10467 2608 4096 4096 NT_STATUS_OK
ReadX 10467 548 4096 4096 NT_STATUS_OK
ReadX 10467 740 4096 4096 NT_STATUS_OK
ReadX 10467 1344 4096 4096 NT_STATUS_OK
ReadX 10467 3392 4096 4096 NT_STATUS_OK
ReadX 10467 3904 4096 4096 NT_STATUS_OK
ReadX 10467 644 4096 4096 NT_STATUS_OK
ReadX 10467 676 4096 4096 NT_STATUS_OK
ReadX 10467 2688 4096 4096 NT_STATUS_OK
ReadX 10467 320 4096 4096 NT_STATUS_OK
ReadX 10467 900 4096 4096 NT_STATUS_OK
ReadX 10467 1908 4096 4096 NT_STATUS_OK
ReadX 10467 852 4096 4096 NT_STATUS_OK
ReadX 10467 724 4096 4096 NT_STATUS_OK
ReadX 10467 2292 4096 4096 NT_STATUS_OK
ReadX 10467 612 4096 4096 NT_STATUS_OK
ReadX 10467 388 4096 4096 NT_STATUS_OK
ReadX 10467 2368 4096 4096 NT_STATUS_OK
ReadX 10467 2624 4096 4096 NT_STATUS_OK
ReadX 10467 500 4096 4096 NT_STATUS_OK
ReadX 10467 356 4096 4096 NT_STATUS_OK
ReadX 10467 1024 4096 4096 NT_STATUS_OK
ReadX 10467 576 4096 4096 NT_STATUS_OK
ReadX 10467 340 4096 4096 NT_STATUS_OK
ReadX 10467 420 4096 4096 NT_STATUS_OK
ReadX 10467 1600 4096 4096 NT_STATUS_OK
ReadX 10467 404 4096 4096 NT_STATUS_OK
ReadX 10467 1428 4096 4096 NT_STATUS_OK
ReadX 10467 2656 4096 4096 NT_STATUS_OK
ReadX 10467 2624 4096 4096 NT_STATUS_OK
ReadX 10467 452 4096 4096 NT_STATUS_OK
ReadX 10467 692 4096 4096 NT_STATUS_OK
ReadX 10467 564 4096 4096 NT_STATUS_OK
ReadX 10467 372 4096 4096 NT_STATUS_OK
ReadX 10467 468 4096 4096 NT_STATUS_OK
ReadX 10467 484 4096 4096 NT_STATUS_OK
ReadX 10467 1088 4096 4096 NT_STATUS_OK
ReadX 10467 1924 4096 4096 NT_STATUS_OK
ReadX 10467 2768 4096 4096 NT_STATUS_OK
ReadX 10467 832 4096 4096 NT_STATUS_OK
ReadX 10467 836 4096 4096 NT_STATUS_OK
ReadX 10467 1856 4096 4096 NT_STATUS_OK
ReadX 10467 2640 4096 4096 NT_STATUS_OK
ReadX 10467 436 4096 4096 NT_STATUS_OK
ReadX 10467 1828 4096 4096 NT_STATUS_OK
ReadX 10467 804 4096 4096 NT_STATUS_OK
ReadX 10467 1860 4096 4096 NT_STATUS_OK
ReadX 10467 1812 4096 4096 NT_STATUS_OK
ReadX 10467 756 4096 4096 NT_STATUS_OK
ReadX 10467 1636 4096 4096 NT_STATUS_OK
ReadX 10467 772 4096 4096 NT_STATUS_OK
ReadX 10467 2036 4096 4096 NT_STATUS_OK
ReadX 10467 1220 4096 4096 NT_STATUS_OK
ReadX 10467 1652 4096 4096 NT_STATUS_OK
ReadX 10467 2588 4096 4096 NT_STATUS_OK
ReadX 10467 916 4096 4096 NT_STATUS_OK
ReadX 10467 260 4096 4096 NT_STATUS_OK
ReadX 10467 932 4096 4096 NT_STATUS_OK
ReadX 10467 2624 4096 4096 NT_STATUS_OK
ReadX 10467 308 4096 4096 NT_STATUS_OK
ReadX 10467 292 4096 4096 NT_STATUS_OK
ReadX 10467 1140 4096 4096 NT_STATUS_OK
ReadX 10467 276 4096 4096 NT_STATUS_OK
ReadX 10467 2020 4096 4096 NT_STATUS_OK
ReadX 10467 2880 4096 4096 NT_STATUS_OK
ReadX 10467 516 4096 4096 NT_STATUS_OK
ReadX 10467 1844 4096 4096 NT_STATUS_OK
ReadX 10467 1124 4096 4096 NT_STATUS_OK
ReadX 10467 3136 4096 4096 NT_STATUS_OK
ReadX 10467 324 4096 4096 NT_STATUS_OK
ReadX 10467 1156 4096 4096 NT_STATUS_OK
ReadX 10467 1172 4096 4096 NT_STATUS_OK
ReadX 10467 2112 4096 4096 NT_STATUS_OK
ReadX 10467 2368 4096 4096 NT_STATUS_OK
ReadX 10467 964 4096 4096 NT_STATUS_OK
ReadX 10467 980 4096 4096 NT_STATUS_OK
ReadX 10467 1012 4096 4096 NT_STATUS_OK
ReadX 10467 532 4096 4096 NT_STATUS_OK
ReadX 10467 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10467 1620 4096 4096 NT_STATUS_OK
ReadX 10467 1604 4096 4096 NT_STATUS_OK
ReadX 10467 2116 4096 4096 NT_STATUS_OK
ReadX 10467 2132 4096 4096 NT_STATUS_OK
ReadX 10467 2148 4096 4096 NT_STATUS_OK
ReadX 10467 2276 4096 4096 NT_STATUS_OK
ReadX 10467 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10492 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 1004 NT_STATUS_OK
Close 10447 NT_STATUS_OK
WriteX 10492 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10492 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10449 1004 NT_STATUS_OK
Close 10449 NT_STATUS_OK
WriteX 10492 0 65536 65536 NT_STATUS_OK
WriteX 10492 65536 64850 64850 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10494 NT_STATUS_OK
WriteX 10494 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 258 NT_STATUS_OK
ReadX 10467 2068 4096 4096 NT_STATUS_OK
ReadX 10467 1588 4096 4096 NT_STATUS_OK
ReadX 10467 1572 4096 4096 NT_STATUS_OK
WriteX 10494 0 18630 18630 NT_STATUS_OK
Flush 10494 NT_STATUS_OK
Close 10494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10496 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10467 612 4096 4096 NT_STATUS_OK
ReadX 10467 564 4096 4096 NT_STATUS_OK
ReadX 10467 1876 4096 4096 NT_STATUS_OK
ReadX 10467 628 4096 4096 NT_STATUS_OK
ReadX 10467 740 4096 4096 NT_STATUS_OK
ReadX 10467 724 4096 4096 NT_STATUS_OK
ReadX 10467 644 4096 4096 NT_STATUS_OK
ReadX 10467 2324 4096 4096 NT_STATUS_OK
ReadX 10467 660 4096 4096 NT_STATUS_OK
ReadX 10467 852 4096 4096 NT_STATUS_OK
ReadX 10467 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10467 2368 4096 4096 NT_STATUS_OK
ReadX 10467 1024 4096 4096 NT_STATUS_OK
ReadX 10467 320 4096 4096 NT_STATUS_OK
ReadX 10467 580 4096 4096 NT_STATUS_OK
ReadX 10467 3136 512 512 NT_STATUS_OK
ReadX 10467 2880 4096 4096 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 61440 4096 4096 NT_STATUS_OK
ReadX 10499 126976 4096 4096 NT_STATUS_OK
WriteX 10499 0 65536 65536 NT_STATUS_OK
WriteX 10499 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10500 NT_STATUS_OK
ReadX 10500 61440 4096 4096 NT_STATUS_OK
ReadX 10500 126976 4096 4096 NT_STATUS_OK
ReadX 10500 192512 4096 4096 NT_STATUS_OK
ReadX 10500 258048 4096 4096 NT_STATUS_OK
WriteX 10500 0 65536 65536 NT_STATUS_OK
WriteX 10500 65536 65536 65536 NT_STATUS_OK
WriteX 10500 131072 65536 65536 NT_STATUS_OK
WriteX 10500 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10501 NT_STATUS_OK
ReadX 10501 61440 4096 4096 NT_STATUS_OK
ReadX 10501 126976 4096 4096 NT_STATUS_OK
ReadX 10501 192512 4096 4096 NT_STATUS_OK
ReadX 10501 258048 4096 4096 NT_STATUS_OK
ReadX 10501 323584 4096 4096 NT_STATUS_OK
ReadX 10501 389120 4096 4096 NT_STATUS_OK
ReadX 10501 454656 4096 4096 NT_STATUS_OK
ReadX 10501 520192 4096 4096 NT_STATUS_OK
WriteX 10501 0 65536 65536 NT_STATUS_OK
WriteX 10501 65536 65536 65536 NT_STATUS_OK
WriteX 10501 131072 65536 65536 NT_STATUS_OK
WriteX 10501 196608 65536 65536 NT_STATUS_OK
WriteX 10501 262144 65536 65536 NT_STATUS_OK
WriteX 10501 327680 65536 65536 NT_STATUS_OK
WriteX 10501 393216 65536 65536 NT_STATUS_OK
WriteX 10501 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10502 NT_STATUS_OK
ReadX 10502 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10504 NT_STATUS_OK
WriteX 10504 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10502 0 8192 8192 NT_STATUS_OK
Flush 10502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10502 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10502 0 8192 8192 NT_STATUS_OK
Flush 10502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10502 0 8192 8192 NT_STATUS_OK
Flush 10502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10502 0 8192 8192 NT_STATUS_OK
Flush 10502 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Close 10500 NT_STATUS_OK
Close 10501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10509 NT_STATUS_OK
WriteX 10509 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10509 258 NT_STATUS_OK
WriteX 10509 0 62591 62591 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10511 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10514 NT_STATUS_OK
WriteX 10514 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 258 NT_STATUS_OK
WriteX 10514 0 10845 10845 NT_STATUS_OK
Close 10514 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10519 NT_STATUS_OK
WriteX 10519 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10519 258 NT_STATUS_OK
WriteX 10519 0 30118 30118 NT_STATUS_OK
Close 10519 NT_STATUS_OK
WriteX 10502 0 4096 4096 NT_STATUS_OK
WriteX 10504 0 64 64 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10502 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 61440 61440 NT_STATUS_OK
ReadX 10521 61440 4096 4096 NT_STATUS_OK
ReadX 10521 65536 61440 61440 NT_STATUS_OK
ReadX 10521 126976 4096 4096 NT_STATUS_OK
ReadX 10521 131072 61440 61440 NT_STATUS_OK
ReadX 10521 192512 4096 4096 NT_STATUS_OK
ReadX 10521 196608 61440 61440 NT_STATUS_OK
ReadX 10521 258048 4096 4096 NT_STATUS_OK
ReadX 10521 262144 61440 61440 NT_STATUS_OK
ReadX 10521 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 61440 61440 NT_STATUS_OK
ReadX 10522 61440 4096 4096 NT_STATUS_OK
ReadX 10522 65536 61440 61440 NT_STATUS_OK
ReadX 10522 126976 4096 4096 NT_STATUS_OK
ReadX 10522 131072 61440 61440 NT_STATUS_OK
ReadX 10522 192512 4096 4096 NT_STATUS_OK
ReadX 10522 196608 61440 61440 NT_STATUS_OK
ReadX 10522 258048 4096 4096 NT_STATUS_OK
ReadX 10522 262144 61440 61440 NT_STATUS_OK
ReadX 10522 323584 4096 4096 NT_STATUS_OK
ReadX 10522 327680 61440 61440 NT_STATUS_OK
ReadX 10522 389120 4096 4096 NT_STATUS_OK
ReadX 10522 393216 61440 61440 NT_STATUS_OK
ReadX 10522 454656 4096 4096 NT_STATUS_OK
ReadX 10522 458752 61440 61440 NT_STATUS_OK
ReadX 10522 520192 4096 4096 NT_STATUS_OK
ReadX 10522 524288 61440 61440 NT_STATUS_OK
ReadX 10522 585728 4096 4096 NT_STATUS_OK
ReadX 10522 589824 61440 61440 NT_STATUS_OK
ReadX 10522 651264 4096 4096 NT_STATUS_OK
ReadX 10522 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 61440 61440 NT_STATUS_OK
ReadX 10523 61440 4096 4096 NT_STATUS_OK
ReadX 10523 65536 61440 61440 NT_STATUS_OK
ReadX 10523 126976 4096 4096 NT_STATUS_OK
ReadX 10523 131072 61440 61440 NT_STATUS_OK
ReadX 10523 192512 4096 4096 NT_STATUS_OK
ReadX 10523 196608 61440 61440 NT_STATUS_OK
ReadX 10523 258048 4096 4096 NT_STATUS_OK
ReadX 10523 262144 61440 61440 NT_STATUS_OK
ReadX 10523 323584 4096 4096 NT_STATUS_OK
ReadX 10523 327680 61440 61440 NT_STATUS_OK
ReadX 10523 389120 4096 4096 NT_STATUS_OK
ReadX 10523 393216 61440 61440 NT_STATUS_OK
ReadX 10523 454656 4096 4096 NT_STATUS_OK
ReadX 10523 458752 61440 61440 NT_STATUS_OK
ReadX 10523 520192 4096 4096 NT_STATUS_OK
ReadX 10523 524288 61440 61440 NT_STATUS_OK
ReadX 10523 585728 4096 4096 NT_STATUS_OK
ReadX 10523 589824 61440 61440 NT_STATUS_OK
ReadX 10523 651264 4096 4096 NT_STATUS_OK
ReadX 10523 655360 61440 61440 NT_STATUS_OK
ReadX 10523 716800 4096 4096 NT_STATUS_OK
ReadX 10523 720896 61440 61440 NT_STATUS_OK
ReadX 10523 782336 4096 4096 NT_STATUS_OK
ReadX 10523 786432 61440 61440 NT_STATUS_OK
ReadX 10523 847872 4096 4096 NT_STATUS_OK
ReadX 10523 851968 61440 61440 NT_STATUS_OK
ReadX 10523 913408 4096 4096 NT_STATUS_OK
ReadX 10523 917504 61440 61440 NT_STATUS_OK
ReadX 10523 978944 4096 4096 NT_STATUS_OK
ReadX 10523 983040 61440 61440 NT_STATUS_OK
ReadX 10523 1044480 4096 4096 NT_STATUS_OK
ReadX 10523 1048576 61440 61440 NT_STATUS_OK
ReadX 10523 1110016 4096 4096 NT_STATUS_OK
ReadX 10523 1114112 61440 61440 NT_STATUS_OK
ReadX 10523 1175552 4096 4096 NT_STATUS_OK
ReadX 10523 1179648 61440 61440 NT_STATUS_OK
ReadX 10523 1241088 4096 4096 NT_STATUS_OK
ReadX 10523 1245184 61440 61440 NT_STATUS_OK
ReadX 10523 1306624 4096 4096 NT_STATUS_OK
ReadX 10523 1310720 61440 61440 NT_STATUS_OK
ReadX 10523 1372160 4096 4096 NT_STATUS_OK
ReadX 10523 1376256 61440 61440 NT_STATUS_OK
ReadX 10523 1437696 4096 4096 NT_STATUS_OK
ReadX 10523 1441792 61440 61440 NT_STATUS_OK
ReadX 10523 1503232 4096 4096 NT_STATUS_OK
ReadX 10523 1507328 61440 61440 NT_STATUS_OK
ReadX 10523 1568768 4096 4096 NT_STATUS_OK
ReadX 10523 1572864 61440 61440 NT_STATUS_OK
ReadX 10523 1634304 4096 4096 NT_STATUS_OK
ReadX 10523 1638400 61440 61440 NT_STATUS_OK
ReadX 10523 1699840 4096 4096 NT_STATUS_OK
ReadX 10523 1703936 61440 61440 NT_STATUS_OK
ReadX 10523 1765376 4096 4096 NT_STATUS_OK
ReadX 10523 1769472 61440 61440 NT_STATUS_OK
ReadX 10523 1830912 4096 4096 NT_STATUS_OK
ReadX 10523 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
ReadX 10528 4096 4096 4096 NT_STATUS_OK
ReadX 10528 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10529 NT_STATUS_OK
Close 10529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10532 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10533 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10531 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10535 NT_STATUS_OK
ReadX 10535 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10536 NT_STATUS_OK
ReadX 10536 0 8192 8192 NT_STATUS_OK
ReadX 10536 8192 8192 8192 NT_STATUS_OK
ReadX 10536 16384 8192 8192 NT_STATUS_OK
ReadX 10536 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10536 NT_STATUS_OK
Close 10535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10541 NT_STATUS_OK
WriteX 10541 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10541 258 NT_STATUS_OK
WriteX 10541 0 10438 10438 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10542 NT_STATUS_OK
Close 10542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10544 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10545 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10547 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10549 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
ReadX 10550 4096 4096 4096 NT_STATUS_OK
ReadX 10550 8192 4096 4096 NT_STATUS_OK
ReadX 10550 12288 8192 8192 NT_STATUS_OK
ReadX 10550 20480 8192 8192 NT_STATUS_OK
ReadX 10550 28672 8192 8192 NT_STATUS_OK
ReadX 10550 36864 8192 8192 NT_STATUS_OK
ReadX 10550 45056 8192 8192 NT_STATUS_OK
ReadX 10550 53248 8192 8192 NT_STATUS_OK
ReadX 10550 61440 8192 8192 NT_STATUS_OK
ReadX 10550 69632 8192 8192 NT_STATUS_OK
ReadX 10550 77824 8192 8192 NT_STATUS_OK
ReadX 10550 86016 8192 8192 NT_STATUS_OK
ReadX 10550 94208 8192 8192 NT_STATUS_OK
ReadX 10550 102400 8192 8192 NT_STATUS_OK
ReadX 10550 110592 8192 8192 NT_STATUS_OK
ReadX 10550 118784 8192 8192 NT_STATUS_OK
ReadX 10550 126976 8192 8192 NT_STATUS_OK
ReadX 10550 135168 8192 8192 NT_STATUS_OK
ReadX 10550 143360 8192 8192 NT_STATUS_OK
ReadX 10550 151552 8192 8192 NT_STATUS_OK
ReadX 10550 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Close 10547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 28489 28489 NT_STATUS_OK
Close 10555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10558 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 8192 8192 NT_STATUS_OK
ReadX 10562 8192 8192 8192 NT_STATUS_OK
ReadX 10562 16384 8192 8192 NT_STATUS_OK
ReadX 10562 24576 8192 8192 NT_STATUS_OK
ReadX 10562 32768 16384 16384 NT_STATUS_OK
ReadX 10562 49152 8192 8192 NT_STATUS_OK
ReadX 10562 57344 8192 8192 NT_STATUS_OK
ReadX 10562 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10564 NT_STATUS_OK
Close 10564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10567 NT_STATUS_OK
WriteX 10567 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10567 258 NT_STATUS_OK
WriteX 10567 0 29253 29253 NT_STATUS_OK
Close 10567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10571 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10574 NT_STATUS_OK
WriteX 10574 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 258 NT_STATUS_OK
WriteX 10574 0 30183 30183 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10577 NT_STATUS_OK
WriteX 10577 0 510 510 NT_STATUS_OK
WriteX 10577 510 512 512 NT_STATUS_OK
WriteX 10577 1022 510 510 NT_STATUS_OK
WriteX 10577 1532 510 510 NT_STATUS_OK
WriteX 10577 2042 168 168 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
WriteX 10580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 61440 4096 4096 NT_STATUS_OK
ReadX 10581 126976 4096 4096 NT_STATUS_OK
WriteX 10581 0 65536 65536 NT_STATUS_OK
WriteX 10581 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 61440 4096 4096 NT_STATUS_OK
ReadX 10582 126976 4096 4096 NT_STATUS_OK
ReadX 10582 192512 4096 4096 NT_STATUS_OK
ReadX 10582 258048 4096 4096 NT_STATUS_OK
WriteX 10582 0 65536 65536 NT_STATUS_OK
WriteX 10582 65536 65536 65536 NT_STATUS_OK
WriteX 10582 131072 65536 65536 NT_STATUS_OK
WriteX 10582 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 61440 4096 4096 NT_STATUS_OK
ReadX 10583 126976 4096 4096 NT_STATUS_OK
ReadX 10583 192512 4096 4096 NT_STATUS_OK
ReadX 10583 258048 4096 4096 NT_STATUS_OK
ReadX 10583 323584 4096 4096 NT_STATUS_OK
ReadX 10583 389120 4096 4096 NT_STATUS_OK
ReadX 10583 454656 4096 4096 NT_STATUS_OK
ReadX 10583 520192 4096 4096 NT_STATUS_OK
WriteX 10583 0 65536 65536 NT_STATUS_OK
WriteX 10583 65536 65536 65536 NT_STATUS_OK
WriteX 10583 131072 65536 65536 NT_STATUS_OK
WriteX 10583 196608 65536 65536 NT_STATUS_OK
WriteX 10583 262144 65536 65536 NT_STATUS_OK
WriteX 10583 327680 65536 65536 NT_STATUS_OK
WriteX 10583 393216 65536 65536 NT_STATUS_OK
WriteX 10583 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10586 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10599 NT_STATUS_OK
Close 10599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10604 NT_STATUS_OK
Close 10604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10608 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10613 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10618 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10623 NT_STATUS_OK
Close 10623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10628 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10633 NT_STATUS_OK
Close 10633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10638 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10646 NT_STATUS_OK
Close 10646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10649 NT_STATUS_OK
Close 10649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10652 NT_STATUS_OK
WriteX 10652 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10652 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10652 0 65536 65536 NT_STATUS_OK
WriteX 10652 65536 65536 65536 NT_STATUS_OK
WriteX 10652 131072 65536 65536 NT_STATUS_OK
WriteX 10652 196608 65536 65536 NT_STATUS_OK
WriteX 10652 262144 26634 26634 NT_STATUS_OK
Close 10652 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10657 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 4096 4096 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
ReadX 10660 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10668 NT_STATUS_OK
Close 10668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10674 NT_STATUS_OK
Close 10674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10677 NT_STATUS_OK
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10679 NT_STATUS_OK
Close 10679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10683 NT_STATUS_OK
Close 10683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10688 NT_STATUS_OK
Close 10688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10693 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10703 NT_STATUS_OK
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10717 NT_STATUS_OK
Close 10717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10722 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10737 NT_STATUS_OK
Close 10737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10753 NT_STATUS_OK
ReadX 10753 0 4096 4096 NT_STATUS_OK
Close 10753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10754 NT_STATUS_OK
ReadX 10754 0 4096 4096 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10784 0 4096 4096 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
ReadX 10786 4096 4096 4096 NT_STATUS_OK
ReadX 10786 8192 4096 4096 NT_STATUS_OK
ReadX 10786 12288 4096 4096 NT_STATUS_OK
ReadX 10786 16384 4096 4096 NT_STATUS_OK
ReadX 10786 20480 4096 4096 NT_STATUS_OK
ReadX 10786 24576 4096 4096 NT_STATUS_OK
ReadX 10786 28672 4096 4096 NT_STATUS_OK
ReadX 10786 32768 4096 4096 NT_STATUS_OK
ReadX 10786 36864 4096 4096 NT_STATUS_OK
ReadX 10786 40960 4096 4096 NT_STATUS_OK
ReadX 10786 45056 4096 4096 NT_STATUS_OK
ReadX 10786 49152 4096 4096 NT_STATUS_OK
ReadX 10786 53248 4096 4096 NT_STATUS_OK
ReadX 10786 57344 4096 4096 NT_STATUS_OK
ReadX 10786 61440 4096 4096 NT_STATUS_OK
ReadX 10786 65536 4096 4096 NT_STATUS_OK
ReadX 10786 69632 4096 4096 NT_STATUS_OK
ReadX 10786 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10786 1004 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10787 NT_STATUS_OK
SET_FILE_INFORMATION 10787 1004 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10789 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10792 NT_STATUS_OK
WriteX 10792 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10792 258 NT_STATUS_OK
WriteX 10792 0 65536 65536 NT_STATUS_OK
WriteX 10792 65536 19979 19979 NT_STATUS_OK
Close 10792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
WriteX 10793 0 4096 4096 NT_STATUS_OK
Flush 10793 NT_STATUS_OK
WriteX 10793 0 4096 4096 NT_STATUS_OK
Flush 10793 NT_STATUS_OK
QUERY_FILE_INFORMATION 10793 1004 NT_STATUS_OK
WriteX 10793 0 4096 4096 NT_STATUS_OK
Flush 10793 NT_STATUS_OK
WriteX 10793 0 4096 4096 NT_STATUS_OK
Flush 10793 NT_STATUS_OK
WriteX 10793 0 4096 4096 NT_STATUS_OK
Flush 10793 NT_STATUS_OK
SET_FILE_INFORMATION 10793 1004 NT_STATUS_OK
WriteX 10793 0 4096 4096 NT_STATUS_OK
Flush 10793 NT_STATUS_OK
Close 10793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
Close 10796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10798 1004 NT_STATUS_OK
WriteX 10798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10801 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10804 NT_STATUS_OK
WriteX 10804 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10804 258 NT_STATUS_OK
WriteX 10804 0 65536 65536 NT_STATUS_OK
WriteX 10804 65536 17654 17654 NT_STATUS_OK
Close 10804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Flush 10805 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Flush 10805 NT_STATUS_OK
QUERY_FILE_INFORMATION 10805 1004 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Flush 10805 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Flush 10805 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Flush 10805 NT_STATUS_OK
SET_FILE_INFORMATION 10805 1004 NT_STATUS_OK
WriteX 10805 0 4096 4096 NT_STATUS_OK
Flush 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10806 NT_STATUS_OK
SET_FILE_INFORMATION 10806 1004 NT_STATUS_OK
Close 10806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10807 NT_STATUS_OK
ReadX 10807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 4096 4096 NT_STATUS_OK
ReadX 10810 4096 4096 4096 NT_STATUS_OK
ReadX 10810 8192 4096 4096 NT_STATUS_OK
ReadX 10810 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10810 16384 4096 4096 NT_STATUS_OK
ReadX 10810 20480 4096 4096 NT_STATUS_OK
ReadX 10810 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10813 1004 NT_STATUS_OK
WriteX 10813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10819 NT_STATUS_OK
WriteX 10819 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10819 258 NT_STATUS_OK
WriteX 10819 0 65536 65536 NT_STATUS_OK
WriteX 10819 65536 19490 19490 NT_STATUS_OK
Close 10819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
Flush 10820 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
Flush 10820 NT_STATUS_OK
QUERY_FILE_INFORMATION 10820 1004 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
Flush 10820 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
Flush 10820 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
Flush 10820 NT_STATUS_OK
SET_FILE_INFORMATION 10820 1004 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
Flush 10820 NT_STATUS_OK
Close 10820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10821 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
Close 10821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10825 0 4096 4096 NT_STATUS_OK
Close 10825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
ReadX 10827 4096 4096 4096 NT_STATUS_OK
ReadX 10827 8192 4096 4096 NT_STATUS_OK
ReadX 10827 12288 4096 4096 NT_STATUS_OK
ReadX 10827 16384 4096 4096 NT_STATUS_OK
ReadX 10827 20480 4096 4096 NT_STATUS_OK
ReadX 10827 24576 4096 4096 NT_STATUS_OK
ReadX 10827 28672 4096 4096 NT_STATUS_OK
ReadX 10827 32768 4096 4096 NT_STATUS_OK
ReadX 10827 36864 4096 4096 NT_STATUS_OK
ReadX 10827 40960 4096 4096 NT_STATUS_OK
ReadX 10827 45056 4096 4096 NT_STATUS_OK
ReadX 10827 49152 4096 4096 NT_STATUS_OK
ReadX 10827 53248 4096 4096 NT_STATUS_OK
ReadX 10827 57344 4096 4096 NT_STATUS_OK
ReadX 10827 61440 4096 4096 NT_STATUS_OK
ReadX 10827 65536 4096 4096 NT_STATUS_OK
ReadX 10827 69632 4096 4096 NT_STATUS_OK
ReadX 10827 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10827 1004 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Close 10827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10828 NT_STATUS_OK
SET_FILE_INFORMATION 10828 1004 NT_STATUS_OK
Close 10828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10833 NT_STATUS_OK
WriteX 10833 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10833 258 NT_STATUS_OK
WriteX 10833 0 65536 65536 NT_STATUS_OK
WriteX 10833 65536 8866 8866 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
WriteX 10834 0 4096 4096 NT_STATUS_OK
Flush 10834 NT_STATUS_OK
SET_FILE_INFORMATION 10834 1004 NT_STATUS_OK
WriteX 10834 0 4096 4096 NT_STATUS_OK
Flush 10834 NT_STATUS_OK
Close 10834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10838 1004 NT_STATUS_OK
WriteX 10838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10839 NT_STATUS_OK
Close 10839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10844 NT_STATUS_OK
WriteX 10844 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10844 258 NT_STATUS_OK
WriteX 10844 0 65536 65536 NT_STATUS_OK
WriteX 10844 65536 9298 9298 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
WriteX 10845 0 4096 4096 NT_STATUS_OK
Flush 10845 NT_STATUS_OK
SET_FILE_INFORMATION 10845 1004 NT_STATUS_OK
WriteX 10845 0 4096 4096 NT_STATUS_OK
Flush 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10846 NT_STATUS_OK
SET_FILE_INFORMATION 10846 1004 NT_STATUS_OK
Close 10846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10848 NT_STATUS_OK
Close 10848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10851 0 4096 4096 NT_STATUS_OK
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 4096 4096 4096 NT_STATUS_OK
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
Close 10854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10856 NT_STATUS_OK
Close 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10861 NT_STATUS_OK
WriteX 10861 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 258 NT_STATUS_OK
WriteX 10861 0 65536 65536 NT_STATUS_OK
WriteX 10861 65536 11540 11540 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10862 NT_STATUS_OK
ReadX 10862 0 4096 4096 NT_STATUS_OK
WriteX 10862 0 4096 4096 NT_STATUS_OK
Flush 10862 NT_STATUS_OK
SET_FILE_INFORMATION 10862 1004 NT_STATUS_OK
WriteX 10862 0 4096 4096 NT_STATUS_OK
Flush 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10863 NT_STATUS_OK
SET_FILE_INFORMATION 10863 1004 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10867 NT_STATUS_OK
ReadX 10867 61440 4096 4096 NT_STATUS_OK
ReadX 10867 126976 4096 4096 NT_STATUS_OK
WriteX 10867 0 65536 65536 NT_STATUS_OK
WriteX 10867 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 61440 4096 4096 NT_STATUS_OK
ReadX 10868 126976 4096 4096 NT_STATUS_OK
ReadX 10868 192512 4096 4096 NT_STATUS_OK
ReadX 10868 258048 4096 4096 NT_STATUS_OK
WriteX 10868 0 65536 65536 NT_STATUS_OK
WriteX 10868 65536 65536 65536 NT_STATUS_OK
WriteX 10868 131072 65536 65536 NT_STATUS_OK
WriteX 10868 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 61440 4096 4096 NT_STATUS_OK
ReadX 10869 126976 4096 4096 NT_STATUS_OK
ReadX 10869 192512 4096 4096 NT_STATUS_OK
ReadX 10869 258048 4096 4096 NT_STATUS_OK
ReadX 10869 323584 4096 4096 NT_STATUS_OK
ReadX 10869 389120 4096 4096 NT_STATUS_OK
ReadX 10869 454656 4096 4096 NT_STATUS_OK
ReadX 10869 520192 4096 4096 NT_STATUS_OK
WriteX 10869 0 65536 65536 NT_STATUS_OK
WriteX 10869 65536 65536 65536 NT_STATUS_OK
WriteX 10869 131072 65536 65536 NT_STATUS_OK
WriteX 10869 196608 65536 65536 NT_STATUS_OK
WriteX 10869 262144 65536 65536 NT_STATUS_OK
WriteX 10869 327680 65536 65536 NT_STATUS_OK
WriteX 10869 393216 65536 65536 NT_STATUS_OK
WriteX 10869 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10870 NT_STATUS_OK
ReadX 10870 0 4096 4096 NT_STATUS_OK
ReadX 10870 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10871 NT_STATUS_OK
WriteX 10871 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10871 258 NT_STATUS_OK
WriteX 10871 0 53 53 NT_STATUS_OK
Close 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10864 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10870 8192 4096 4096 NT_STATUS_OK
ReadX 10870 12288 4096 4096 NT_STATUS_OK
WriteX 10874 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10874 258 NT_STATUS_OK
ReadX 10870 16384 4096 4096 NT_STATUS_OK
ReadX 10870 20480 4096 4096 NT_STATUS_OK
WriteX 10874 0 15360 15360 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10875 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10875 1004 NT_STATUS_OK
WriteX 10875 0 4096 4096 NT_STATUS_OK
Close 10875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10878 NT_STATUS_OK
ReadX 10878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10878 4096 4096 4096 NT_STATUS_OK
ReadX 10878 8192 4096 4096 NT_STATUS_OK
ReadX 10878 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
ReadX 10881 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
ReadX 10882 4096 4096 4096 NT_STATUS_OK
ReadX 10882 8192 4096 4096 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10883 NT_STATUS_OK
WriteX 10883 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10883 258 NT_STATUS_OK
WriteX 10883 0 15360 15360 NT_STATUS_OK
Close 10883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10884 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10884 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10885 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10888 NT_STATUS_OK
SET_FILE_INFORMATION 10888 1004 NT_STATUS_OK
Close 10888 NT_STATUS_OK
WriteX 10884 0 4096 4096 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
ReadX 10891 4096 4096 4096 NT_STATUS_OK
ReadX 10891 8192 4096 4096 NT_STATUS_OK
ReadX 10891 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10891 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10891 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10893 NT_STATUS_OK
WriteX 10893 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 258 NT_STATUS_OK
WriteX 10893 0 53 53 NT_STATUS_OK
Close 10893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10892 4096 4096 4096 NT_STATUS_OK
ReadX 10892 8192 4096 4096 NT_STATUS_OK
ReadX 10892 12288 4096 4096 NT_STATUS_OK
WriteX 10896 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10896 258 NT_STATUS_OK
WriteX 10896 0 12006 12006 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10897 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 0 4096 4096 NT_STATUS_OK
Close 10897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10901 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10900 4096 4096 4096 NT_STATUS_OK
ReadX 10900 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10903 NT_STATUS_OK
WriteX 10903 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10903 258 NT_STATUS_OK
WriteX 10903 0 11991 11991 NT_STATUS_OK
Close 10903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10904 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10905 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10908 NT_STATUS_OK
SET_FILE_INFORMATION 10908 1004 NT_STATUS_OK
Close 10908 NT_STATUS_OK
WriteX 10904 0 4096 4096 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10909 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10911 NT_STATUS_OK
ReadX 10911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10912 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
WriteX 10891 0 19054 19054 NT_STATUS_OK
ReadX 10911 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10911 1004 NT_STATUS_OK
ReadX 10911 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10911 1004 NT_STATUS_OK
WriteX 10911 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10911 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10911 1004 NT_STATUS_OK
Close 10887 NT_STATUS_OK
WriteX 10911 0 12288 12288 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10911 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 61440 61440 NT_STATUS_OK
ReadX 10918 61440 4096 4096 NT_STATUS_OK
ReadX 10918 65536 61440 61440 NT_STATUS_OK
ReadX 10918 126976 4096 4096 NT_STATUS_OK
ReadX 10918 131072 61440 61440 NT_STATUS_OK
ReadX 10918 192512 4096 4096 NT_STATUS_OK
ReadX 10918 196608 61440 61440 NT_STATUS_OK
ReadX 10918 258048 4096 4096 NT_STATUS_OK
ReadX 10918 262144 61440 61440 NT_STATUS_OK
ReadX 10918 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 61440 61440 NT_STATUS_OK
ReadX 10919 61440 4096 4096 NT_STATUS_OK
ReadX 10919 65536 61440 61440 NT_STATUS_OK
ReadX 10919 126976 4096 4096 NT_STATUS_OK
ReadX 10919 131072 61440 61440 NT_STATUS_OK
ReadX 10919 192512 4096 4096 NT_STATUS_OK
ReadX 10919 196608 61440 61440 NT_STATUS_OK
ReadX 10919 258048 4096 4096 NT_STATUS_OK
ReadX 10919 262144 61440 61440 NT_STATUS_OK
ReadX 10919 323584 4096 4096 NT_STATUS_OK
ReadX 10919 327680 61440 61440 NT_STATUS_OK
ReadX 10919 389120 4096 4096 NT_STATUS_OK
ReadX 10919 393216 61440 61440 NT_STATUS_OK
ReadX 10919 454656 4096 4096 NT_STATUS_OK
ReadX 10919 458752 61440 61440 NT_STATUS_OK
ReadX 10919 520192 4096 4096 NT_STATUS_OK
ReadX 10919 524288 61440 61440 NT_STATUS_OK
ReadX 10919 585728 4096 4096 NT_STATUS_OK
ReadX 10919 589824 61440 61440 NT_STATUS_OK
ReadX 10919 651264 4096 4096 NT_STATUS_OK
ReadX 10919 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 61440 61440 NT_STATUS_OK
ReadX 10920 61440 4096 4096 NT_STATUS_OK
ReadX 10920 65536 61440 61440 NT_STATUS_OK
ReadX 10920 126976 4096 4096 NT_STATUS_OK
ReadX 10920 131072 61440 61440 NT_STATUS_OK
ReadX 10920 192512 4096 4096 NT_STATUS_OK
ReadX 10920 196608 61440 61440 NT_STATUS_OK
ReadX 10920 258048 4096 4096 NT_STATUS_OK
ReadX 10920 262144 61440 61440 NT_STATUS_OK
ReadX 10920 323584 4096 4096 NT_STATUS_OK
ReadX 10920 327680 61440 61440 NT_STATUS_OK
ReadX 10920 389120 4096 4096 NT_STATUS_OK
ReadX 10920 393216 61440 61440 NT_STATUS_OK
ReadX 10920 454656 4096 4096 NT_STATUS_OK
ReadX 10920 458752 61440 61440 NT_STATUS_OK
ReadX 10920 520192 4096 4096 NT_STATUS_OK
ReadX 10920 524288 61440 61440 NT_STATUS_OK
ReadX 10920 585728 4096 4096 NT_STATUS_OK
ReadX 10920 589824 61440 61440 NT_STATUS_OK
ReadX 10920 651264 4096 4096 NT_STATUS_OK
ReadX 10920 655360 61440 61440 NT_STATUS_OK
ReadX 10920 716800 4096 4096 NT_STATUS_OK
ReadX 10920 720896 61440 61440 NT_STATUS_OK
ReadX 10920 782336 4096 4096 NT_STATUS_OK
ReadX 10920 786432 61440 61440 NT_STATUS_OK
ReadX 10920 847872 4096 4096 NT_STATUS_OK
ReadX 10920 851968 61440 61440 NT_STATUS_OK
ReadX 10920 913408 4096 4096 NT_STATUS_OK
ReadX 10920 917504 61440 61440 NT_STATUS_OK
ReadX 10920 978944 4096 4096 NT_STATUS_OK
ReadX 10920 983040 61440 61440 NT_STATUS_OK
ReadX 10920 1044480 4096 4096 NT_STATUS_OK
ReadX 10920 1048576 61440 61440 NT_STATUS_OK
ReadX 10920 1110016 4096 4096 NT_STATUS_OK
ReadX 10920 1114112 61440 61440 NT_STATUS_OK
ReadX 10920 1175552 4096 4096 NT_STATUS_OK
ReadX 10920 1179648 61440 61440 NT_STATUS_OK
ReadX 10920 1241088 4096 4096 NT_STATUS_OK
ReadX 10920 1245184 61440 61440 NT_STATUS_OK
ReadX 10920 1306624 4096 4096 NT_STATUS_OK
ReadX 10920 1310720 61440 61440 NT_STATUS_OK
ReadX 10920 1372160 4096 4096 NT_STATUS_OK
ReadX 10920 1376256 61440 61440 NT_STATUS_OK
ReadX 10920 1437696 4096 4096 NT_STATUS_OK
ReadX 10920 1441792 61440 61440 NT_STATUS_OK
ReadX 10920 1503232 4096 4096 NT_STATUS_OK
ReadX 10920 1507328 61440 61440 NT_STATUS_OK
ReadX 10920 1568768 4096 4096 NT_STATUS_OK
ReadX 10920 1572864 61440 61440 NT_STATUS_OK
ReadX 10920 1634304 4096 4096 NT_STATUS_OK
ReadX 10920 1638400 61440 61440 NT_STATUS_OK
ReadX 10920 1699840 4096 4096 NT_STATUS_OK
ReadX 10920 1703936 61440 61440 NT_STATUS_OK
ReadX 10920 1765376 4096 4096 NT_STATUS_OK
ReadX 10920 1769472 61440 61440 NT_STATUS_OK
ReadX 10920 1830912 4096 4096 NT_STATUS_OK
ReadX 10920 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10922 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10927 NT_STATUS_OK
QUERY_FILE_INFORMATION 10927 1004 NT_STATUS_OK
WriteX 10927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10927 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10928 NT_STATUS_OK
Close 10928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10929 NT_STATUS_OK
WriteX 10929 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 491 491 NT_STATUS_OK
Close 10929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10927 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10933 NT_STATUS_OK
WriteX 10933 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10933 258 NT_STATUS_OK
WriteX 10933 0 543 543 NT_STATUS_OK
Close 10933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10947 NT_STATUS_OK
QUERY_FILE_INFORMATION 10947 1004 NT_STATUS_OK
WriteX 10947 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10947 258 NT_STATUS_OK
WriteX 10947 0 2048 2048 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10948 0 4096 4096 NT_STATUS_OK
Flush 10948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10948 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10953 NT_STATUS_OK
WriteX 10953 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10953 258 NT_STATUS_OK
WriteX 10953 0 2048 2048 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10959 NT_STATUS_OK
WriteX 10959 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
WriteX 10959 0 2048 2048 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 2048 2048 NT_STATUS_OK
ReadX 10938 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10954 0 4096 4096 NT_STATUS_OK
WriteX 10938 0 8192 8192 NT_STATUS_OK
WriteX 10939 0 4096 4096 NT_STATUS_OK
WriteX 10940 0 4096 4096 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10964 NT_STATUS_OK
QUERY_FILE_INFORMATION 10964 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10966 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10967 NT_STATUS_OK
ReadX 10967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10968 NT_STATUS_OK
ReadX 10968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10984 1004 NT_STATUS_OK
WriteX 10984 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10984 258 NT_STATUS_OK
WriteX 10984 0 2048 2048 NT_STATUS_OK
Close 10984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10992 NT_STATUS_OK
QUERY_FILE_INFORMATION 10992 1004 NT_STATUS_OK
WriteX 10992 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10992 258 NT_STATUS_OK
WriteX 10992 0 2048 2048 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
Flush 10985 NT_STATUS_OK
WriteX 10993 0 4096 4096 NT_STATUS_OK
Flush 10993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10987 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10995 NT_STATUS_OK
WriteX 10995 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10995 258 NT_STATUS_OK
WriteX 10995 0 4096 4096 NT_STATUS_OK
Close 10995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10998 NT_STATUS_OK
WriteX 10998 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10998 258 NT_STATUS_OK
WriteX 10998 0 4096 4096 NT_STATUS_OK
Close 10998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10999 0 4096 4096 NT_STATUS_OK
Close 10996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10973 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Close 10977 NT_STATUS_OK
Close 10978 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Close 10967 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11005 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11006 NT_STATUS_OK
WriteX 11006 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11006 258 NT_STATUS_OK
WriteX 11006 0 2048 2048 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11011 NT_STATUS_OK
ReadX 11011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11021 NT_STATUS_OK
QUERY_FILE_INFORMATION 11021 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 11012 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11023 NT_STATUS_OK
QUERY_FILE_INFORMATION 11023 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11037 NT_STATUS_OK
ReadX 11037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11043 NT_STATUS_OK
QUERY_FILE_INFORMATION 11043 1004 NT_STATUS_OK
WriteX 11043 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11043 258 NT_STATUS_OK
WriteX 11043 0 2048 2048 NT_STATUS_OK
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11047 NT_STATUS_OK
Close 11030 NT_STATUS_OK
ReadX 11047 0 4096 4096 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
Close 11026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11049 NT_STATUS_OK
Close 11031 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11050 NT_STATUS_OK
Close 11035 NT_STATUS_OK
ReadX 11050 0 543 543 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Close 11028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11055 NT_STATUS_OK
QUERY_FILE_INFORMATION 11055 1004 NT_STATUS_OK
WriteX 11055 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11055 258 NT_STATUS_OK
WriteX 11055 0 2048 2048 NT_STATUS_OK
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11075 NT_STATUS_OK
QUERY_FILE_INFORMATION 11075 1004 NT_STATUS_OK
WriteX 11075 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11075 258 NT_STATUS_OK
WriteX 11075 0 2048 2048 NT_STATUS_OK
Close 11075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11044 0 4096 4096 NT_STATUS_OK
Flush 11044 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
Flush 11056 NT_STATUS_OK
WriteX 11076 0 4096 4096 NT_STATUS_OK
Flush 11076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11044 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11076 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 543 543 NT_STATUS_OK
ReadX 11046 4096 16384 16384 NT_STATUS_OK
ReadX 11066 4096 16384 16384 NT_STATUS_OK
ReadX 11058 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11079 NT_STATUS_OK
ReadX 11079 0 2048 2048 NT_STATUS_OK
WriteX 11079 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11080 NT_STATUS_OK
QUERY_FILE_INFORMATION 11080 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11077 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11047 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11061 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11067 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Close 11046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11082 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11084 NT_STATUS_OK
QUERY_FILE_INFORMATION 11084 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11088 NT_STATUS_OK
ReadX 11088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11089 NT_STATUS_OK
ReadX 11089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11087 4096 16384 16384 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
WriteX 11089 0 4096 4096 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 8192 8192 NT_STATUS_OK
ReadX 11093 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11107 0 4096 4096 NT_STATUS_OK
ReadX 11107 4096 4096 4096 NT_STATUS_OK
ReadX 11107 8192 4096 4096 NT_STATUS_OK
WriteX 11093 0 4096 4096 NT_STATUS_OK
WriteX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
ReadX 11108 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
WriteX 11089 0 4096 4096 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11113 NT_STATUS_OK
QUERY_FILE_INFORMATION 11113 1004 NT_STATUS_OK
WriteX 11113 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11113 258 NT_STATUS_OK
WriteX 11113 0 2048 2048 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11114 NT_STATUS_OK
ReadX 11114 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11116 NT_STATUS_OK
ReadX 11116 0 4096 4096 NT_STATUS_OK
ReadX 11116 4096 4096 4096 NT_STATUS_OK
WriteX 11116 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11114 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11118 NT_STATUS_OK
ReadX 11118 0 4096 4096 NT_STATUS_OK
ReadX 11118 4096 4096 4096 NT_STATUS_OK
WriteX 11118 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11119 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11088 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11118 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11121 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11121 0 4096 4096 NT_STATUS_OK
ReadX 11121 4096 4096 4096 NT_STATUS_OK
ReadX 11121 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11122 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
ReadX 11122 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11139 NT_STATUS_OK
QUERY_FILE_INFORMATION 11139 1004 NT_STATUS_OK
WriteX 11139 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11139 258 NT_STATUS_OK
WriteX 11139 0 2048 2048 NT_STATUS_OK
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11140 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11145 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1004 NT_STATUS_OK
WriteX 11145 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 258 NT_STATUS_OK
WriteX 11145 0 2048 2048 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11146 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11129 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11147 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11149 NT_STATUS_OK
QUERY_FILE_INFORMATION 11149 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 61440 4096 4096 NT_STATUS_OK
ReadX 11151 126976 4096 4096 NT_STATUS_OK
WriteX 11151 0 65536 65536 NT_STATUS_OK
WriteX 11151 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 61440 4096 4096 NT_STATUS_OK
ReadX 11152 126976 4096 4096 NT_STATUS_OK
ReadX 11152 192512 4096 4096 NT_STATUS_OK
ReadX 11152 258048 4096 4096 NT_STATUS_OK
WriteX 11152 0 65536 65536 NT_STATUS_OK
WriteX 11152 65536 65536 65536 NT_STATUS_OK
WriteX 11152 131072 65536 65536 NT_STATUS_OK
WriteX 11152 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 61440 4096 4096 NT_STATUS_OK
ReadX 11153 126976 4096 4096 NT_STATUS_OK
ReadX 11153 192512 4096 4096 NT_STATUS_OK
ReadX 11153 258048 4096 4096 NT_STATUS_OK
ReadX 11153 323584 4096 4096 NT_STATUS_OK
ReadX 11153 389120 4096 4096 NT_STATUS_OK
ReadX 11153 454656 4096 4096 NT_STATUS_OK
ReadX 11153 520192 4096 4096 NT_STATUS_OK
WriteX 11153 0 65536 65536 NT_STATUS_OK
WriteX 11153 65536 65536 65536 NT_STATUS_OK
WriteX 11153 131072 65536 65536 NT_STATUS_OK
WriteX 11153 196608 65536 65536 NT_STATUS_OK
WriteX 11153 262144 65536 65536 NT_STATUS_OK
WriteX 11153 327680 65536 65536 NT_STATUS_OK
WriteX 11153 393216 65536 65536 NT_STATUS_OK
WriteX 11153 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11154 NT_STATUS_OK
ReadX 11154 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11154 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11154 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11154 8192 4096 4096 NT_STATUS_OK
ReadX 11154 12288 4096 4096 NT_STATUS_OK
ReadX 11154 16384 4096 4096 NT_STATUS_OK
ReadX 11154 20480 4096 4096 NT_STATUS_OK
ReadX 11154 24576 4096 4096 NT_STATUS_OK
ReadX 11154 28672 4096 4096 NT_STATUS_OK
ReadX 11154 32768 4096 4096 NT_STATUS_OK
ReadX 11154 36864 4096 4096 NT_STATUS_OK
ReadX 11154 40960 4096 4096 NT_STATUS_OK
ReadX 11154 45056 4096 4096 NT_STATUS_OK
ReadX 11154 49152 4096 4096 NT_STATUS_OK
ReadX 11154 53248 4096 4096 NT_STATUS_OK
ReadX 11154 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11154 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Close 11153 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11157 NT_STATUS_OK
WriteX 11157 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11157 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11157 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11157 1004 NT_STATUS_OK
WriteX 11157 0 57088 57088 NT_STATUS_OK
WriteX 11157 0 4096 4096 NT_STATUS_OK
Flush 11157 NT_STATUS_OK
Close 11154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11158 NT_STATUS_OK
SET_FILE_INFORMATION 11158 1004 NT_STATUS_OK
Close 11158 NT_STATUS_OK
SET_FILE_INFORMATION 11157 1004 NT_STATUS_OK
WriteX 11157 0 4096 4096 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11161 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11162 NT_STATUS_OK
WriteX 11162 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11162 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11162 1004 NT_STATUS_OK
WriteX 11162 0 51456 51456 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
SET_FILE_INFORMATION 11162 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11162 1004 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11166 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11168 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11171 NT_STATUS_OK
WriteX 11171 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11171 258 NT_STATUS_OK
WriteX 11171 0 53077 53077 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11172 NT_STATUS_OK
WriteX 11172 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11172 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11172 1004 NT_STATUS_OK
WriteX 11172 0 65536 65536 NT_STATUS_OK
WriteX 11172 65536 1856 1856 NT_STATUS_OK
WriteX 11172 0 4096 4096 NT_STATUS_OK
Flush 11172 NT_STATUS_OK
SET_FILE_INFORMATION 11172 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11172 1004 NT_STATUS_OK
WriteX 11172 0 4096 4096 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11174 NT_STATUS_OK
Close 11174 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11178 NT_STATUS_OK
Close 11178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11181 NT_STATUS_OK
WriteX 11181 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 258 NT_STATUS_OK
WriteX 11181 0 7983 7983 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11183 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11186 NT_STATUS_OK
WriteX 11186 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11186 258 NT_STATUS_OK
WriteX 11186 0 65536 65536 NT_STATUS_OK
WriteX 11186 65536 65536 65536 NT_STATUS_OK
WriteX 11186 131072 65536 65536 NT_STATUS_OK
WriteX 11186 196608 65536 65536 NT_STATUS_OK
WriteX 11186 262144 65536 65536 NT_STATUS_OK
WriteX 11186 327680 65536 65536 NT_STATUS_OK
WriteX 11186 393216 65536 65536 NT_STATUS_OK
WriteX 11186 458752 46731 46731 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11187 NT_STATUS_OK
WriteX 11187 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11176 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11187 1004 NT_STATUS_OK
WriteX 11187 0 65536 65536 NT_STATUS_OK
WriteX 11187 65536 22848 22848 NT_STATUS_OK
WriteX 11187 0 4096 4096 NT_STATUS_OK
Flush 11187 NT_STATUS_OK
SET_FILE_INFORMATION 11187 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11187 1004 NT_STATUS_OK
WriteX 11187 0 4096 4096 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11189 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11191 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11192 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11192 1004 NT_STATUS_OK
ReadX 11192 8192 4096 4096 NT_STATUS_OK
ReadX 11192 12288 4096 4096 NT_STATUS_OK
ReadX 11192 16384 4096 4096 NT_STATUS_OK
ReadX 11192 20480 4096 4096 NT_STATUS_OK
ReadX 11192 24576 4096 4096 NT_STATUS_OK
ReadX 11192 28672 4096 4096 NT_STATUS_OK
ReadX 11192 32768 4096 4096 NT_STATUS_OK
ReadX 11192 36864 4096 4096 NT_STATUS_OK
ReadX 11192 40960 4096 4096 NT_STATUS_OK
ReadX 11192 45056 4096 4096 NT_STATUS_OK
ReadX 11192 49152 4096 4096 NT_STATUS_OK
ReadX 11192 53248 4096 4096 NT_STATUS_OK
ReadX 11192 57344 4096 4096 NT_STATUS_OK
ReadX 11192 61440 4096 4096 NT_STATUS_OK
ReadX 11192 65536 4096 4096 NT_STATUS_OK
ReadX 11192 69632 4096 4096 NT_STATUS_OK
ReadX 11192 73728 4096 4096 NT_STATUS_OK
ReadX 11192 77824 4096 4096 NT_STATUS_OK
ReadX 11192 81920 4096 4096 NT_STATUS_OK
ReadX 11192 86016 4096 4096 NT_STATUS_OK
ReadX 11192 90112 4096 4096 NT_STATUS_OK
ReadX 11192 94208 4096 4096 NT_STATUS_OK
ReadX 11192 98304 4096 4096 NT_STATUS_OK
ReadX 11192 102400 4096 4096 NT_STATUS_OK
ReadX 11192 106496 4096 4096 NT_STATUS_OK
ReadX 11192 110592 4096 4096 NT_STATUS_OK
ReadX 11192 114688 4096 4096 NT_STATUS_OK
ReadX 11192 118784 4096 4096 NT_STATUS_OK
ReadX 11192 122880 4096 4096 NT_STATUS_OK
ReadX 11192 126976 4096 4096 NT_STATUS_OK
ReadX 11192 131072 4096 4096 NT_STATUS_OK
ReadX 11192 135168 4096 4096 NT_STATUS_OK
ReadX 11192 139264 4096 4096 NT_STATUS_OK
ReadX 11192 143360 4096 4096 NT_STATUS_OK
ReadX 11192 147456 4096 4096 NT_STATUS_OK
ReadX 11192 151552 4096 4096 NT_STATUS_OK
ReadX 11192 155648 4096 4096 NT_STATUS_OK
ReadX 11192 159744 4096 4096 NT_STATUS_OK
ReadX 11192 163840 4096 4096 NT_STATUS_OK
ReadX 11192 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11192 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11195 NT_STATUS_OK
WriteX 11195 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 258 NT_STATUS_OK
Close 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11196 NT_STATUS_OK
SET_FILE_INFORMATION 11196 1004 NT_STATUS_OK
Close 11196 NT_STATUS_OK
WriteX 11195 0 42388 42388 NT_STATUS_OK
Close 11195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
ReadX 11199 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11200 NT_STATUS_OK
WriteX 11200 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11200 258 NT_STATUS_OK
SET_FILE_INFORMATION 11200 1004 NT_STATUS_OK
WriteX 11200 0 42652 42652 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
ReadX 11204 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11209 NT_STATUS_OK
WriteX 11209 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11209 258 NT_STATUS_OK
WriteX 11209 0 65536 65536 NT_STATUS_OK
WriteX 11209 65536 49 49 NT_STATUS_OK
Close 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11210 NT_STATUS_OK
ReadX 11210 0 61440 61440 NT_STATUS_OK
ReadX 11210 61440 4096 4096 NT_STATUS_OK
ReadX 11210 65536 61440 61440 NT_STATUS_OK
ReadX 11210 126976 4096 4096 NT_STATUS_OK
ReadX 11210 131072 61440 61440 NT_STATUS_OK
ReadX 11210 192512 4096 4096 NT_STATUS_OK
ReadX 11210 196608 61440 61440 NT_STATUS_OK
ReadX 11210 258048 4096 4096 NT_STATUS_OK
ReadX 11210 262144 61440 61440 NT_STATUS_OK
ReadX 11210 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 61440 61440 NT_STATUS_OK
ReadX 11211 61440 4096 4096 NT_STATUS_OK
ReadX 11211 65536 61440 61440 NT_STATUS_OK
ReadX 11211 126976 4096 4096 NT_STATUS_OK
ReadX 11211 131072 61440 61440 NT_STATUS_OK
ReadX 11211 192512 4096 4096 NT_STATUS_OK
ReadX 11211 196608 61440 61440 NT_STATUS_OK
ReadX 11211 258048 4096 4096 NT_STATUS_OK
ReadX 11211 262144 61440 61440 NT_STATUS_OK
ReadX 11211 323584 4096 4096 NT_STATUS_OK
ReadX 11211 327680 61440 61440 NT_STATUS_OK
ReadX 11211 389120 4096 4096 NT_STATUS_OK
ReadX 11211 393216 61440 61440 NT_STATUS_OK
ReadX 11211 454656 4096 4096 NT_STATUS_OK
ReadX 11211 458752 61440 61440 NT_STATUS_OK
ReadX 11211 520192 4096 4096 NT_STATUS_OK
ReadX 11211 524288 61440 61440 NT_STATUS_OK
ReadX 11211 585728 4096 4096 NT_STATUS_OK
ReadX 11211 589824 61440 61440 NT_STATUS_OK
ReadX 11211 651264 4096 4096 NT_STATUS_OK
ReadX 11211 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 61440 61440 NT_STATUS_OK
ReadX 11212 61440 4096 4096 NT_STATUS_OK
ReadX 11212 65536 61440 61440 NT_STATUS_OK
ReadX 11212 126976 4096 4096 NT_STATUS_OK
ReadX 11212 131072 61440 61440 NT_STATUS_OK
ReadX 11212 192512 4096 4096 NT_STATUS_OK
ReadX 11212 196608 61440 61440 NT_STATUS_OK
ReadX 11212 258048 4096 4096 NT_STATUS_OK
ReadX 11212 262144 61440 61440 NT_STATUS_OK
ReadX 11212 323584 4096 4096 NT_STATUS_OK
ReadX 11212 327680 61440 61440 NT_STATUS_OK
ReadX 11212 389120 4096 4096 NT_STATUS_OK
ReadX 11212 393216 61440 61440 NT_STATUS_OK
ReadX 11212 454656 4096 4096 NT_STATUS_OK
ReadX 11212 458752 61440 61440 NT_STATUS_OK
ReadX 11212 520192 4096 4096 NT_STATUS_OK
ReadX 11212 524288 61440 61440 NT_STATUS_OK
ReadX 11212 585728 4096 4096 NT_STATUS_OK
ReadX 11212 589824 61440 61440 NT_STATUS_OK
ReadX 11212 651264 4096 4096 NT_STATUS_OK
ReadX 11212 655360 61440 61440 NT_STATUS_OK
ReadX 11212 716800 4096 4096 NT_STATUS_OK
ReadX 11212 720896 61440 61440 NT_STATUS_OK
ReadX 11212 782336 4096 4096 NT_STATUS_OK
ReadX 11212 786432 61440 61440 NT_STATUS_OK
ReadX 11212 847872 4096 4096 NT_STATUS_OK
ReadX 11212 851968 61440 61440 NT_STATUS_OK
ReadX 11212 913408 4096 4096 NT_STATUS_OK
ReadX 11212 917504 61440 61440 NT_STATUS_OK
ReadX 11212 978944 4096 4096 NT_STATUS_OK
ReadX 11212 983040 61440 61440 NT_STATUS_OK
ReadX 11212 1044480 4096 4096 NT_STATUS_OK
ReadX 11212 1048576 61440 61440 NT_STATUS_OK
ReadX 11212 1110016 4096 4096 NT_STATUS_OK
ReadX 11212 1114112 61440 61440 NT_STATUS_OK
ReadX 11212 1175552 4096 4096 NT_STATUS_OK
ReadX 11212 1179648 61440 61440 NT_STATUS_OK
ReadX 11212 1241088 4096 4096 NT_STATUS_OK
ReadX 11212 1245184 61440 61440 NT_STATUS_OK
ReadX 11212 1306624 4096 4096 NT_STATUS_OK
ReadX 11212 1310720 61440 61440 NT_STATUS_OK
ReadX 11212 1372160 4096 4096 NT_STATUS_OK
ReadX 11212 1376256 61440 61440 NT_STATUS_OK
ReadX 11212 1437696 4096 4096 NT_STATUS_OK
ReadX 11212 1441792 61440 61440 NT_STATUS_OK
ReadX 11212 1503232 4096 4096 NT_STATUS_OK
ReadX 11212 1507328 61440 61440 NT_STATUS_OK
ReadX 11212 1568768 4096 4096 NT_STATUS_OK
ReadX 11212 1572864 61440 61440 NT_STATUS_OK
ReadX 11212 1634304 4096 4096 NT_STATUS_OK
ReadX 11212 1638400 61440 61440 NT_STATUS_OK
ReadX 11212 1699840 4096 4096 NT_STATUS_OK
ReadX 11212 1703936 61440 61440 NT_STATUS_OK
ReadX 11212 1765376 4096 4096 NT_STATUS_OK
ReadX 11212 1769472 61440 61440 NT_STATUS_OK
ReadX 11212 1830912 4096 4096 NT_STATUS_OK
ReadX 11212 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11214 NT_STATUS_OK
QUERY_FILE_INFORMATION 11214 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11214 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11214 1005 NT_STATUS_OK
ReadX 11214 2156 24 24 NT_STATUS_OK
ReadX 11214 2139 276 276 NT_STATUS_OK
ReadX 11214 2136 14 14 NT_STATUS_OK
ReadX 11214 2136 7 7 NT_STATUS_OK
ReadX 11214 2138 12 12 NT_STATUS_OK
ReadX 11214 2137 8 8 NT_STATUS_OK
ReadX 11214 2135 15 15 NT_STATUS_OK
ReadX 11214 0 16 16 NT_STATUS_OK
ReadX 11214 16 2048 2048 NT_STATUS_OK
ReadX 11214 2064 2048 2048 NT_STATUS_OK
ReadX 11214 257 2048 2048 NT_STATUS_OK
ReadX 11214 385 2048 2048 NT_STATUS_OK
ReadX 11214 513 2048 2048 NT_STATUS_OK
ReadX 11214 641 2048 2048 NT_STATUS_OK
ReadX 11214 769 2048 2048 NT_STATUS_OK
ReadX 11214 897 2048 2048 NT_STATUS_OK
ReadX 11214 1025 2048 2048 NT_STATUS_OK
ReadX 11214 1153 2048 2048 NT_STATUS_OK
ReadX 11214 1281 2048 2048 NT_STATUS_OK
ReadX 11214 1409 2048 2048 NT_STATUS_OK
ReadX 11214 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11216 NT_STATUS_OK
Close 11216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11210 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11219 NT_STATUS_OK
WriteX 11219 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11219 258 NT_STATUS_OK
WriteX 11219 0 10575 10575 NT_STATUS_OK
Flush 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11222 NT_STATUS_OK
ReadX 11222 0 4096 4096 NT_STATUS_OK
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11224 NT_STATUS_OK
LockX 11224 2147483538 1 NT_STATUS_OK
UnlockX 11224 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11224 1005 NT_STATUS_OK
ReadX 11224 0 512 512 NT_STATUS_OK
ReadX 11224 512 512 512 NT_STATUS_OK
ReadX 11224 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11224 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11224 1004 NT_STATUS_OK
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11225 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 1005 NT_STATUS_OK
ReadX 11225 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11226 NT_STATUS_OK
LockX 11226 2147483538 1 NT_STATUS_OK
UnlockX 11226 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11226 1005 NT_STATUS_OK
ReadX 11226 0 512 512 NT_STATUS_OK
ReadX 11226 512 512 512 NT_STATUS_OK
ReadX 11226 1024 512 512 NT_STATUS_OK
ReadX 11226 288 20 20 NT_STATUS_OK
ReadX 11226 308 2084 2084 NT_STATUS_OK
ReadX 11226 388 2084 2084 NT_STATUS_OK
ReadX 11226 388 2084 2084 NT_STATUS_OK
ReadX 11213 2157 1386 1386 NT_STATUS_OK
ReadX 11226 2472 399 399 NT_STATUS_OK
ReadX 11226 3072 1536 1536 NT_STATUS_OK
ReadX 11226 544 149 149 NT_STATUS_OK
ReadX 11226 693 485 485 NT_STATUS_OK
Close 11226 NT_STATUS_OK
ReadX 11213 2157 4096 4096 NT_STATUS_OK
ReadX 11213 6253 4096 4096 NT_STATUS_OK
ReadX 11213 10349 4096 4096 NT_STATUS_OK
ReadX 11213 14445 4096 4096 NT_STATUS_OK
ReadX 11213 18541 4096 4096 NT_STATUS_OK
ReadX 11213 22637 256 256 NT_STATUS_OK
ReadX 11213 22893 4096 4096 NT_STATUS_OK
ReadX 11213 26989 4096 4096 NT_STATUS_OK
ReadX 11213 31085 4096 4096 NT_STATUS_OK
ReadX 11213 35181 4096 4096 NT_STATUS_OK
ReadX 11213 39277 4096 4096 NT_STATUS_OK
ReadX 11213 43373 4096 4096 NT_STATUS_OK
ReadX 11213 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11213 2157 1024 1024 NT_STATUS_OK
ReadX 11213 1667 4688 4688 NT_STATUS_OK
ReadX 11213 6355 3516 3516 NT_STATUS_OK
ReadX 11213 9871 16384 16384 NT_STATUS_OK
ReadX 11213 26255 3771 3771 NT_STATUS_OK
ReadX 11213 30026 2048 2048 NT_STATUS_OK
ReadX 11213 32074 1024 1024 NT_STATUS_OK
ReadX 11213 33098 6652 6652 NT_STATUS_OK
ReadX 11213 39750 16384 16384 NT_STATUS_OK
ReadX 11213 56134 10496 10496 NT_STATUS_OK
ReadX 11213 66630 1784 1784 NT_STATUS_OK
ReadX 11213 68414 90 90 NT_STATUS_OK
ReadX 11213 68504 273 273 NT_STATUS_OK
ReadX 11213 68777 1600 1600 NT_STATUS_OK
ReadX 11213 70377 640 640 NT_STATUS_OK
ReadX 11213 71017 1280 1280 NT_STATUS_OK
ReadX 11213 72297 8464 8464 NT_STATUS_OK
ReadX 11213 80761 158 158 NT_STATUS_OK
ReadX 11213 80919 912 912 NT_STATUS_OK
ReadX 11213 81831 1980 1980 NT_STATUS_OK
ReadX 11213 83811 2256 2256 NT_STATUS_OK
ReadX 11213 86067 400 400 NT_STATUS_OK
ReadX 11213 86467 252 252 NT_STATUS_OK
ReadX 11213 86719 42 42 NT_STATUS_OK
ReadX 11213 86761 725 725 NT_STATUS_OK
ReadX 11213 2009 512 512 NT_STATUS_OK
ReadX 11213 3895 9 9 NT_STATUS_OK
ReadX 11213 3781 46 46 NT_STATUS_OK
ReadX 11213 4059 92 92 NT_STATUS_OK
ReadX 11213 3781 92 92 NT_STATUS_OK
ReadX 11213 3986 184 184 NT_STATUS_OK
ReadX 11213 3987 16384 16384 NT_STATUS_OK
ReadX 11213 3902 16384 16384 NT_STATUS_OK
ReadX 11213 3781 10240 10240 NT_STATUS_OK
ReadX 11213 3821 16384 16384 NT_STATUS_OK
ReadX 11213 3891 935 935 NT_STATUS_OK
ReadX 11213 4060 10240 10240 NT_STATUS_OK
ReadX 11213 4059 184 184 NT_STATUS_OK
ReadX 11213 256 184 184 NT_STATUS_OK
ReadX 11213 256 1026 1026 NT_STATUS_OK
ReadX 11213 3901 326 326 NT_STATUS_OK
ReadX 11213 3899 652 652 NT_STATUS_OK
ReadX 11213 256 2 2 NT_STATUS_OK
ReadX 11213 258 4948 4948 NT_STATUS_OK
Close 11213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11228 NT_STATUS_OK
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11231 NT_STATUS_OK
WriteX 11231 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11231 258 NT_STATUS_OK
WriteX 11231 0 65536 65536 NT_STATUS_OK
WriteX 11231 65536 65536 65536 NT_STATUS_OK
WriteX 11231 131072 65536 65536 NT_STATUS_OK
WriteX 11231 196608 65536 65536 NT_STATUS_OK
WriteX 11231 262144 65536 65536 NT_STATUS_OK
WriteX 11231 327680 65536 65536 NT_STATUS_OK
WriteX 11231 393216 65536 65536 NT_STATUS_OK
WriteX 11231 458752 65536 65536 NT_STATUS_OK
WriteX 11231 524288 65536 65536 NT_STATUS_OK
WriteX 11231 589824 35257 35257 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11236 NT_STATUS_OK
WriteX 11236 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11236 258 NT_STATUS_OK
WriteX 11236 0 65536 65536 NT_STATUS_OK
WriteX 11236 65536 65536 65536 NT_STATUS_OK
WriteX 11236 131072 65536 65536 NT_STATUS_OK
WriteX 11236 196608 65536 65536 NT_STATUS_OK
WriteX 11236 262144 65536 65536 NT_STATUS_OK
WriteX 11236 327680 65536 65536 NT_STATUS_OK
WriteX 11236 393216 65536 65536 NT_STATUS_OK
WriteX 11236 458752 65536 65536 NT_STATUS_OK
WriteX 11236 524288 65536 65536 NT_STATUS_OK
WriteX 11236 589824 57598 57598 NT_STATUS_OK
Close 11236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11238 NT_STATUS_OK
WriteX 11238 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11238 258 NT_STATUS_OK
WriteX 11238 0 12543 12543 NT_STATUS_OK
Flush 11238 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11240 NT_STATUS_OK
Close 11240 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11244 NT_STATUS_OK
QUERY_FILE_INFORMATION 11244 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11244 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11244 1005 NT_STATUS_OK
ReadX 11244 1938 24 24 NT_STATUS_OK
ReadX 11244 1920 276 276 NT_STATUS_OK
ReadX 11244 1918 14 14 NT_STATUS_OK
ReadX 11244 1918 7 7 NT_STATUS_OK
ReadX 11244 1919 12 12 NT_STATUS_OK
ReadX 11244 1919 8 8 NT_STATUS_OK
ReadX 11244 1917 15 15 NT_STATUS_OK
ReadX 11244 0 16 16 NT_STATUS_OK
ReadX 11244 16 2048 2048 NT_STATUS_OK
ReadX 11244 2064 2048 2048 NT_STATUS_OK
ReadX 11244 257 2048 2048 NT_STATUS_OK
ReadX 11244 385 2048 2048 NT_STATUS_OK
ReadX 11244 513 2048 2048 NT_STATUS_OK
ReadX 11244 641 2048 2048 NT_STATUS_OK
ReadX 11244 769 2048 2048 NT_STATUS_OK
ReadX 11244 897 2048 2048 NT_STATUS_OK
ReadX 11244 1025 2048 2048 NT_STATUS_OK
ReadX 11244 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11249 NT_STATUS_OK
WriteX 11249 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11249 258 NT_STATUS_OK
WriteX 11249 0 11588 11588 NT_STATUS_OK
Flush 11249 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11250 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
Close 11244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11254 NT_STATUS_OK
WriteX 11254 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11254 258 NT_STATUS_OK
WriteX 11254 0 11615 11615 NT_STATUS_OK
Flush 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11256 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11260 NT_STATUS_OK
Close 11260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11263 NT_STATUS_OK
WriteX 11263 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11263 258 NT_STATUS_OK
WriteX 11263 0 65536 65536 NT_STATUS_OK
WriteX 11263 65536 16050 16050 NT_STATUS_OK
Close 11263 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11243 1939 64 64 NT_STATUS_OK
ReadX 11243 128 248 248 NT_STATUS_OK
ReadX 11243 128 568 568 NT_STATUS_OK
ReadX 11243 3872 1536 1536 NT_STATUS_OK
ReadX 11243 3456 2560 2560 NT_STATUS_OK
ReadX 11243 3136 512 512 NT_STATUS_OK
ReadX 11243 2880 4096 4096 NT_STATUS_OK
ReadX 11243 3264 3072 3072 NT_STATUS_OK
ReadX 11243 320 4096 4096 NT_STATUS_OK
ReadX 11243 1024 4096 4096 NT_STATUS_OK
ReadX 11243 3616 4096 4096 NT_STATUS_OK
ReadX 11243 1939 64 64 NT_STATUS_OK
ReadX 11243 128 248 248 NT_STATUS_OK
ReadX 11243 128 608 608 NT_STATUS_OK
ReadX 11243 2858 1024 1024 NT_STATUS_OK
ReadX 11243 2810 4096 4096 NT_STATUS_OK
ReadX 11243 2826 4096 4096 NT_STATUS_OK
ReadX 11243 2580 2048 2048 NT_STATUS_OK
ReadX 11243 2800 2560 2560 NT_STATUS_OK
ReadX 11243 2100 4096 4096 NT_STATUS_OK
ReadX 11243 2084 4096 4096 NT_STATUS_OK
ReadX 11243 868 4096 4096 NT_STATUS_OK
ReadX 11243 2324 4096 4096 NT_STATUS_OK
ReadX 11243 884 4096 4096 NT_STATUS_OK
ReadX 11243 2604 1024 1024 NT_STATUS_OK
ReadX 11243 580 4096 4096 NT_STATUS_OK
ReadX 11243 596 4096 4096 NT_STATUS_OK
ReadX 11243 2752 4096 4096 NT_STATUS_OK
ReadX 11243 2842 1024 1024 NT_STATUS_OK
ReadX 11243 660 4096 4096 NT_STATUS_OK
ReadX 11243 2720 4096 4096 NT_STATUS_OK
ReadX 11243 2736 4096 4096 NT_STATUS_OK
ReadX 11243 628 4096 4096 NT_STATUS_OK
ReadX 11243 2704 4096 4096 NT_STATUS_OK
ReadX 11243 1556 4096 4096 NT_STATUS_OK
ReadX 11243 576 4096 4096 NT_STATUS_OK
ReadX 11243 3168 1536 1536 NT_STATUS_OK
ReadX 11243 832 4096 4096 NT_STATUS_OK
ReadX 11243 1088 4096 4096 NT_STATUS_OK
ReadX 11243 1344 4096 4096 NT_STATUS_OK
ReadX 11243 1600 4096 4096 NT_STATUS_OK
ReadX 11243 1856 4096 4096 NT_STATUS_OK
ReadX 11243 2112 4096 4096 NT_STATUS_OK
ReadX 11243 1892 4096 4096 NT_STATUS_OK
ReadX 11243 820 4096 4096 NT_STATUS_OK
ReadX 11243 788 4096 4096 NT_STATUS_OK
ReadX 11243 1604 4096 4096 NT_STATUS_OK
ReadX 11243 3648 4096 4096 NT_STATUS_OK
ReadX 11243 2608 4096 4096 NT_STATUS_OK
ReadX 11243 548 4096 4096 NT_STATUS_OK
ReadX 11243 740 4096 4096 NT_STATUS_OK
ReadX 11243 1344 4096 4096 NT_STATUS_OK
ReadX 11243 3392 4096 4096 NT_STATUS_OK
ReadX 11243 3904 4096 4096 NT_STATUS_OK
ReadX 11243 644 4096 4096 NT_STATUS_OK
ReadX 11243 676 4096 4096 NT_STATUS_OK
ReadX 11243 2688 4096 4096 NT_STATUS_OK
ReadX 11243 320 4096 4096 NT_STATUS_OK
ReadX 11243 900 4096 4096 NT_STATUS_OK
ReadX 11243 1908 4096 4096 NT_STATUS_OK
ReadX 11243 852 4096 4096 NT_STATUS_OK
ReadX 11243 724 4096 4096 NT_STATUS_OK
ReadX 11243 2292 4096 4096 NT_STATUS_OK
ReadX 11243 612 4096 4096 NT_STATUS_OK
ReadX 11243 388 4096 4096 NT_STATUS_OK
ReadX 11243 2368 4096 4096 NT_STATUS_OK
ReadX 11243 2624 4096 4096 NT_STATUS_OK
ReadX 11243 500 4096 4096 NT_STATUS_OK
ReadX 11243 356 4096 4096 NT_STATUS_OK
ReadX 11243 1024 4096 4096 NT_STATUS_OK
ReadX 11243 576 4096 4096 NT_STATUS_OK
ReadX 11243 340 4096 4096 NT_STATUS_OK
ReadX 11243 420 4096 4096 NT_STATUS_OK
ReadX 11243 1600 4096 4096 NT_STATUS_OK
ReadX 11243 404 4096 4096 NT_STATUS_OK
ReadX 11243 1428 4096 4096 NT_STATUS_OK
ReadX 11243 2656 4096 4096 NT_STATUS_OK
ReadX 11243 2624 4096 4096 NT_STATUS_OK
ReadX 11243 452 4096 4096 NT_STATUS_OK
ReadX 11243 692 4096 4096 NT_STATUS_OK
ReadX 11243 564 4096 4096 NT_STATUS_OK
ReadX 11243 372 4096 4096 NT_STATUS_OK
ReadX 11243 468 4096 4096 NT_STATUS_OK
ReadX 11243 484 4096 4096 NT_STATUS_OK
ReadX 11243 1088 4096 4096 NT_STATUS_OK
ReadX 11243 1924 4096 4096 NT_STATUS_OK
ReadX 11243 2768 4096 4096 NT_STATUS_OK
ReadX 11243 832 4096 4096 NT_STATUS_OK
ReadX 11243 836 4096 4096 NT_STATUS_OK
ReadX 11243 1856 4096 4096 NT_STATUS_OK
ReadX 11243 2640 4096 4096 NT_STATUS_OK
ReadX 11243 436 4096 4096 NT_STATUS_OK
ReadX 11243 1828 4096 4096 NT_STATUS_OK
ReadX 11243 804 4096 4096 NT_STATUS_OK
ReadX 11243 1860 4096 4096 NT_STATUS_OK
ReadX 11243 1812 4096 4096 NT_STATUS_OK
ReadX 11243 756 4096 4096 NT_STATUS_OK
ReadX 11243 1636 4096 4096 NT_STATUS_OK
ReadX 11243 772 4096 4096 NT_STATUS_OK
ReadX 11243 2036 4096 4096 NT_STATUS_OK
ReadX 11243 1220 4096 4096 NT_STATUS_OK
ReadX 11243 1652 4096 4096 NT_STATUS_OK
ReadX 11243 2588 4096 4096 NT_STATUS_OK
ReadX 11243 916 4096 4096 NT_STATUS_OK
ReadX 11243 260 4096 4096 NT_STATUS_OK
ReadX 11243 932 4096 4096 NT_STATUS_OK
ReadX 11243 2624 4096 4096 NT_STATUS_OK
ReadX 11243 308 4096 4096 NT_STATUS_OK
ReadX 11243 292 4096 4096 NT_STATUS_OK
ReadX 11243 1140 4096 4096 NT_STATUS_OK
ReadX 11243 276 4096 4096 NT_STATUS_OK
ReadX 11243 2020 4096 4096 NT_STATUS_OK
ReadX 11243 2880 4096 4096 NT_STATUS_OK
ReadX 11243 516 4096 4096 NT_STATUS_OK
ReadX 11243 1844 4096 4096 NT_STATUS_OK
ReadX 11243 1124 4096 4096 NT_STATUS_OK
ReadX 11243 3136 4096 4096 NT_STATUS_OK
ReadX 11243 324 4096 4096 NT_STATUS_OK
ReadX 11243 1156 4096 4096 NT_STATUS_OK
ReadX 11243 1172 4096 4096 NT_STATUS_OK
ReadX 11243 2112 4096 4096 NT_STATUS_OK
ReadX 11243 2368 4096 4096 NT_STATUS_OK
ReadX 11243 964 4096 4096 NT_STATUS_OK
ReadX 11243 980 4096 4096 NT_STATUS_OK
ReadX 11243 1012 4096 4096 NT_STATUS_OK
ReadX 11243 532 4096 4096 NT_STATUS_OK
ReadX 11243 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11243 1620 4096 4096 NT_STATUS_OK
ReadX 11243 1604 4096 4096 NT_STATUS_OK
ReadX 11243 2116 4096 4096 NT_STATUS_OK
ReadX 11243 2132 4096 4096 NT_STATUS_OK
ReadX 11243 2148 4096 4096 NT_STATUS_OK
ReadX 11243 2276 4096 4096 NT_STATUS_OK
ReadX 11243 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11265 NT_STATUS_OK
Close 11265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11268 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 1004 NT_STATUS_OK
Close 11223 NT_STATUS_OK
WriteX 11268 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11268 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 1004 NT_STATUS_OK
Close 11225 NT_STATUS_OK
WriteX 11268 0 65536 65536 NT_STATUS_OK
WriteX 11268 65536 64850 64850 NT_STATUS_OK
Close 11268 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11270 NT_STATUS_OK
WriteX 11270 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11270 258 NT_STATUS_OK
ReadX 11243 2068 4096 4096 NT_STATUS_OK
ReadX 11243 1588 4096 4096 NT_STATUS_OK
ReadX 11243 1572 4096 4096 NT_STATUS_OK
WriteX 11270 0 18630 18630 NT_STATUS_OK
Flush 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11243 612 4096 4096 NT_STATUS_OK
ReadX 11243 564 4096 4096 NT_STATUS_OK
ReadX 11243 1876 4096 4096 NT_STATUS_OK
ReadX 11243 628 4096 4096 NT_STATUS_OK
ReadX 11243 740 4096 4096 NT_STATUS_OK
ReadX 11243 724 4096 4096 NT_STATUS_OK
ReadX 11243 644 4096 4096 NT_STATUS_OK
ReadX 11243 2324 4096 4096 NT_STATUS_OK
ReadX 11243 660 4096 4096 NT_STATUS_OK
ReadX 11243 852 4096 4096 NT_STATUS_OK
ReadX 11243 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11243 2368 4096 4096 NT_STATUS_OK
ReadX 11243 1024 4096 4096 NT_STATUS_OK
ReadX 11243 320 4096 4096 NT_STATUS_OK
ReadX 11243 580 4096 4096 NT_STATUS_OK
ReadX 11243 3136 512 512 NT_STATUS_OK
ReadX 11243 2880 4096 4096 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 61440 4096 4096 NT_STATUS_OK
ReadX 11275 126976 4096 4096 NT_STATUS_OK
WriteX 11275 0 65536 65536 NT_STATUS_OK
WriteX 11275 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 61440 4096 4096 NT_STATUS_OK
ReadX 11276 126976 4096 4096 NT_STATUS_OK
ReadX 11276 192512 4096 4096 NT_STATUS_OK
ReadX 11276 258048 4096 4096 NT_STATUS_OK
WriteX 11276 0 65536 65536 NT_STATUS_OK
WriteX 11276 65536 65536 65536 NT_STATUS_OK
WriteX 11276 131072 65536 65536 NT_STATUS_OK
WriteX 11276 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 61440 4096 4096 NT_STATUS_OK
ReadX 11277 126976 4096 4096 NT_STATUS_OK
ReadX 11277 192512 4096 4096 NT_STATUS_OK
ReadX 11277 258048 4096 4096 NT_STATUS_OK
ReadX 11277 323584 4096 4096 NT_STATUS_OK
ReadX 11277 389120 4096 4096 NT_STATUS_OK
ReadX 11277 454656 4096 4096 NT_STATUS_OK
ReadX 11277 520192 4096 4096 NT_STATUS_OK
WriteX 11277 0 65536 65536 NT_STATUS_OK
WriteX 11277 65536 65536 65536 NT_STATUS_OK
WriteX 11277 131072 65536 65536 NT_STATUS_OK
WriteX 11277 196608 65536 65536 NT_STATUS_OK
WriteX 11277 262144 65536 65536 NT_STATUS_OK
WriteX 11277 327680 65536 65536 NT_STATUS_OK
WriteX 11277 393216 65536 65536 NT_STATUS_OK
WriteX 11277 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11280 NT_STATUS_OK
WriteX 11280 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11280 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11278 0 8192 8192 NT_STATUS_OK
Flush 11278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11278 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11278 0 8192 8192 NT_STATUS_OK
Flush 11278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11278 0 8192 8192 NT_STATUS_OK
Flush 11278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11278 0 8192 8192 NT_STATUS_OK
Flush 11278 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11274 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11285 NT_STATUS_OK
WriteX 11285 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 258 NT_STATUS_OK
WriteX 11285 0 62591 62591 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11290 NT_STATUS_OK
WriteX 11290 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11290 258 NT_STATUS_OK
WriteX 11290 0 10845 10845 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11292 NT_STATUS_OK
Close 11292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11295 NT_STATUS_OK
WriteX 11295 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11295 258 NT_STATUS_OK
WriteX 11295 0 30118 30118 NT_STATUS_OK
Close 11295 NT_STATUS_OK
WriteX 11278 0 4096 4096 NT_STATUS_OK
WriteX 11280 0 64 64 NT_STATUS_OK
Close 11280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11297 NT_STATUS_OK
ReadX 11297 0 61440 61440 NT_STATUS_OK
ReadX 11297 61440 4096 4096 NT_STATUS_OK
ReadX 11297 65536 61440 61440 NT_STATUS_OK
ReadX 11297 126976 4096 4096 NT_STATUS_OK
ReadX 11297 131072 61440 61440 NT_STATUS_OK
ReadX 11297 192512 4096 4096 NT_STATUS_OK
ReadX 11297 196608 61440 61440 NT_STATUS_OK
ReadX 11297 258048 4096 4096 NT_STATUS_OK
ReadX 11297 262144 61440 61440 NT_STATUS_OK
ReadX 11297 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11298 NT_STATUS_OK
ReadX 11298 0 61440 61440 NT_STATUS_OK
ReadX 11298 61440 4096 4096 NT_STATUS_OK
ReadX 11298 65536 61440 61440 NT_STATUS_OK
ReadX 11298 126976 4096 4096 NT_STATUS_OK
ReadX 11298 131072 61440 61440 NT_STATUS_OK
ReadX 11298 192512 4096 4096 NT_STATUS_OK
ReadX 11298 196608 61440 61440 NT_STATUS_OK
ReadX 11298 258048 4096 4096 NT_STATUS_OK
ReadX 11298 262144 61440 61440 NT_STATUS_OK
ReadX 11298 323584 4096 4096 NT_STATUS_OK
ReadX 11298 327680 61440 61440 NT_STATUS_OK
ReadX 11298 389120 4096 4096 NT_STATUS_OK
ReadX 11298 393216 61440 61440 NT_STATUS_OK
ReadX 11298 454656 4096 4096 NT_STATUS_OK
ReadX 11298 458752 61440 61440 NT_STATUS_OK
ReadX 11298 520192 4096 4096 NT_STATUS_OK
ReadX 11298 524288 61440 61440 NT_STATUS_OK
ReadX 11298 585728 4096 4096 NT_STATUS_OK
ReadX 11298 589824 61440 61440 NT_STATUS_OK
ReadX 11298 651264 4096 4096 NT_STATUS_OK
ReadX 11298 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11299 NT_STATUS_OK
ReadX 11299 0 61440 61440 NT_STATUS_OK
ReadX 11299 61440 4096 4096 NT_STATUS_OK
ReadX 11299 65536 61440 61440 NT_STATUS_OK
ReadX 11299 126976 4096 4096 NT_STATUS_OK
ReadX 11299 131072 61440 61440 NT_STATUS_OK
ReadX 11299 192512 4096 4096 NT_STATUS_OK
ReadX 11299 196608 61440 61440 NT_STATUS_OK
ReadX 11299 258048 4096 4096 NT_STATUS_OK
ReadX 11299 262144 61440 61440 NT_STATUS_OK
ReadX 11299 323584 4096 4096 NT_STATUS_OK
ReadX 11299 327680 61440 61440 NT_STATUS_OK
ReadX 11299 389120 4096 4096 NT_STATUS_OK
ReadX 11299 393216 61440 61440 NT_STATUS_OK
ReadX 11299 454656 4096 4096 NT_STATUS_OK
ReadX 11299 458752 61440 61440 NT_STATUS_OK
ReadX 11299 520192 4096 4096 NT_STATUS_OK
ReadX 11299 524288 61440 61440 NT_STATUS_OK
ReadX 11299 585728 4096 4096 NT_STATUS_OK
ReadX 11299 589824 61440 61440 NT_STATUS_OK
ReadX 11299 651264 4096 4096 NT_STATUS_OK
ReadX 11299 655360 61440 61440 NT_STATUS_OK
ReadX 11299 716800 4096 4096 NT_STATUS_OK
ReadX 11299 720896 61440 61440 NT_STATUS_OK
ReadX 11299 782336 4096 4096 NT_STATUS_OK
ReadX 11299 786432 61440 61440 NT_STATUS_OK
ReadX 11299 847872 4096 4096 NT_STATUS_OK
ReadX 11299 851968 61440 61440 NT_STATUS_OK
ReadX 11299 913408 4096 4096 NT_STATUS_OK
ReadX 11299 917504 61440 61440 NT_STATUS_OK
ReadX 11299 978944 4096 4096 NT_STATUS_OK
ReadX 11299 983040 61440 61440 NT_STATUS_OK
ReadX 11299 1044480 4096 4096 NT_STATUS_OK
ReadX 11299 1048576 61440 61440 NT_STATUS_OK
ReadX 11299 1110016 4096 4096 NT_STATUS_OK
ReadX 11299 1114112 61440 61440 NT_STATUS_OK
ReadX 11299 1175552 4096 4096 NT_STATUS_OK
ReadX 11299 1179648 61440 61440 NT_STATUS_OK
ReadX 11299 1241088 4096 4096 NT_STATUS_OK
ReadX 11299 1245184 61440 61440 NT_STATUS_OK
ReadX 11299 1306624 4096 4096 NT_STATUS_OK
ReadX 11299 1310720 61440 61440 NT_STATUS_OK
ReadX 11299 1372160 4096 4096 NT_STATUS_OK
ReadX 11299 1376256 61440 61440 NT_STATUS_OK
ReadX 11299 1437696 4096 4096 NT_STATUS_OK
ReadX 11299 1441792 61440 61440 NT_STATUS_OK
ReadX 11299 1503232 4096 4096 NT_STATUS_OK
ReadX 11299 1507328 61440 61440 NT_STATUS_OK
ReadX 11299 1568768 4096 4096 NT_STATUS_OK
ReadX 11299 1572864 61440 61440 NT_STATUS_OK
ReadX 11299 1634304 4096 4096 NT_STATUS_OK
ReadX 11299 1638400 61440 61440 NT_STATUS_OK
ReadX 11299 1699840 4096 4096 NT_STATUS_OK
ReadX 11299 1703936 61440 61440 NT_STATUS_OK
ReadX 11299 1765376 4096 4096 NT_STATUS_OK
ReadX 11299 1769472 61440 61440 NT_STATUS_OK
ReadX 11299 1830912 4096 4096 NT_STATUS_OK
ReadX 11299 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11300 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11297 NT_STATUS_OK
Close 11298 NT_STATUS_OK
Close 11299 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11302 NT_STATUS_OK
ReadX 11302 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11304 NT_STATUS_OK
ReadX 11304 0 4096 4096 NT_STATUS_OK
ReadX 11304 4096 4096 4096 NT_STATUS_OK
ReadX 11304 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11305 NT_STATUS_OK
Close 11305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11308 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 8192 8192 NT_STATUS_OK
ReadX 11312 8192 8192 8192 NT_STATUS_OK
ReadX 11312 16384 8192 8192 NT_STATUS_OK
ReadX 11312 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11317 NT_STATUS_OK
WriteX 11317 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11317 258 NT_STATUS_OK
WriteX 11317 0 10438 10438 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11318 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11321 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11323 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11324 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
ReadX 11326 4096 4096 4096 NT_STATUS_OK
ReadX 11326 8192 4096 4096 NT_STATUS_OK
ReadX 11326 12288 8192 8192 NT_STATUS_OK
ReadX 11326 20480 8192 8192 NT_STATUS_OK
ReadX 11326 28672 8192 8192 NT_STATUS_OK
ReadX 11326 36864 8192 8192 NT_STATUS_OK
ReadX 11326 45056 8192 8192 NT_STATUS_OK
ReadX 11326 53248 8192 8192 NT_STATUS_OK
ReadX 11326 61440 8192 8192 NT_STATUS_OK
ReadX 11326 69632 8192 8192 NT_STATUS_OK
ReadX 11326 77824 8192 8192 NT_STATUS_OK
ReadX 11326 86016 8192 8192 NT_STATUS_OK
ReadX 11326 94208 8192 8192 NT_STATUS_OK
ReadX 11326 102400 8192 8192 NT_STATUS_OK
ReadX 11326 110592 8192 8192 NT_STATUS_OK
ReadX 11326 118784 8192 8192 NT_STATUS_OK
ReadX 11326 126976 8192 8192 NT_STATUS_OK
ReadX 11326 135168 8192 8192 NT_STATUS_OK
ReadX 11326 143360 8192 8192 NT_STATUS_OK
ReadX 11326 151552 8192 8192 NT_STATUS_OK
ReadX 11326 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11319 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11328 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11331 NT_STATUS_OK
WriteX 11331 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11331 258 NT_STATUS_OK
WriteX 11331 0 28489 28489 NT_STATUS_OK
Close 11331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11334 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11334 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11337 NT_STATUS_OK
ReadX 11337 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11338 NT_STATUS_OK
ReadX 11338 0 8192 8192 NT_STATUS_OK
ReadX 11338 8192 8192 8192 NT_STATUS_OK
ReadX 11338 16384 8192 8192 NT_STATUS_OK
ReadX 11338 24576 8192 8192 NT_STATUS_OK
ReadX 11338 32768 16384 16384 NT_STATUS_OK
ReadX 11338 49152 8192 8192 NT_STATUS_OK
ReadX 11338 57344 8192 8192 NT_STATUS_OK
ReadX 11338 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11340 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11338 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11343 NT_STATUS_OK
WriteX 11343 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11343 258 NT_STATUS_OK
WriteX 11343 0 29253 29253 NT_STATUS_OK
Close 11343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11344 NT_STATUS_OK
Close 11344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11350 NT_STATUS_OK
WriteX 11350 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11350 258 NT_STATUS_OK
WriteX 11350 0 30183 30183 NT_STATUS_OK
Close 11350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11353 NT_STATUS_OK
WriteX 11353 0 510 510 NT_STATUS_OK
WriteX 11353 510 512 512 NT_STATUS_OK
WriteX 11353 1022 510 510 NT_STATUS_OK
WriteX 11353 1532 510 510 NT_STATUS_OK
WriteX 11353 2042 168 168 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11354 NT_STATUS_OK
Close 11354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11356 NT_STATUS_OK
ReadX 11356 0 4096 4096 NT_STATUS_OK
WriteX 11356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11357 NT_STATUS_OK
ReadX 11357 61440 4096 4096 NT_STATUS_OK
ReadX 11357 126976 4096 4096 NT_STATUS_OK
WriteX 11357 0 65536 65536 NT_STATUS_OK
WriteX 11357 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 61440 4096 4096 NT_STATUS_OK
ReadX 11358 126976 4096 4096 NT_STATUS_OK
ReadX 11358 192512 4096 4096 NT_STATUS_OK
ReadX 11358 258048 4096 4096 NT_STATUS_OK
WriteX 11358 0 65536 65536 NT_STATUS_OK
WriteX 11358 65536 65536 65536 NT_STATUS_OK
WriteX 11358 131072 65536 65536 NT_STATUS_OK
WriteX 11358 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 61440 4096 4096 NT_STATUS_OK
ReadX 11359 126976 4096 4096 NT_STATUS_OK
ReadX 11359 192512 4096 4096 NT_STATUS_OK
ReadX 11359 258048 4096 4096 NT_STATUS_OK
ReadX 11359 323584 4096 4096 NT_STATUS_OK
ReadX 11359 389120 4096 4096 NT_STATUS_OK
ReadX 11359 454656 4096 4096 NT_STATUS_OK
ReadX 11359 520192 4096 4096 NT_STATUS_OK
WriteX 11359 0 65536 65536 NT_STATUS_OK
WriteX 11359 65536 65536 65536 NT_STATUS_OK
WriteX 11359 131072 65536 65536 NT_STATUS_OK
WriteX 11359 196608 65536 65536 NT_STATUS_OK
WriteX 11359 262144 65536 65536 NT_STATUS_OK
WriteX 11359 327680 65536 65536 NT_STATUS_OK
WriteX 11359 393216 65536 65536 NT_STATUS_OK
WriteX 11359 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11356 NT_STATUS_OK
Close 11357 NT_STATUS_OK
Close 11358 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11362 NT_STATUS_OK
Close 11362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11366 NT_STATUS_OK
Close 11366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11371 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11384 NT_STATUS_OK
Close 11384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11399 NT_STATUS_OK
Close 11399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11409 NT_STATUS_OK
Close 11409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11425 NT_STATUS_OK
Close 11425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11428 NT_STATUS_OK
WriteX 11428 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11428 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11428 0 65536 65536 NT_STATUS_OK
WriteX 11428 65536 65536 65536 NT_STATUS_OK
WriteX 11428 131072 65536 65536 NT_STATUS_OK
WriteX 11428 196608 65536 65536 NT_STATUS_OK
WriteX 11428 262144 26634 26634 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11434 NT_STATUS_OK
Close 11434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
Close 11435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11436 NT_STATUS_OK
ReadX 11436 0 4096 4096 NT_STATUS_OK
ReadX 11436 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11437 NT_STATUS_OK
Close 11437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11436 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11441 NT_STATUS_OK
Close 11441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11444 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11446 NT_STATUS_OK
Close 11446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11450 NT_STATUS_OK
Close 11450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11453 NT_STATUS_OK
Close 11453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11455 NT_STATUS_OK
Close 11455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11493 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11503 NT_STATUS_OK
Close 11503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11513 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
Close 11515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11516 NT_STATUS_OK
ReadX 11516 0 4096 4096 NT_STATUS_OK
Close 11516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11517 NT_STATUS_OK
ReadX 11517 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11529 NT_STATUS_OK
ReadX 11529 0 4096 4096 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11517 NT_STATUS_OK
Close 11531 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11560 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11560 0 4096 4096 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11562 NT_STATUS_OK
ReadX 11562 0 4096 4096 NT_STATUS_OK
ReadX 11562 4096 4096 4096 NT_STATUS_OK
ReadX 11562 8192 4096 4096 NT_STATUS_OK
ReadX 11562 12288 4096 4096 NT_STATUS_OK
ReadX 11562 16384 4096 4096 NT_STATUS_OK
ReadX 11562 20480 4096 4096 NT_STATUS_OK
ReadX 11562 24576 4096 4096 NT_STATUS_OK
ReadX 11562 28672 4096 4096 NT_STATUS_OK
ReadX 11562 32768 4096 4096 NT_STATUS_OK
ReadX 11562 36864 4096 4096 NT_STATUS_OK
ReadX 11562 40960 4096 4096 NT_STATUS_OK
ReadX 11562 45056 4096 4096 NT_STATUS_OK
ReadX 11562 49152 4096 4096 NT_STATUS_OK
ReadX 11562 53248 4096 4096 NT_STATUS_OK
ReadX 11562 57344 4096 4096 NT_STATUS_OK
ReadX 11562 61440 4096 4096 NT_STATUS_OK
ReadX 11562 65536 4096 4096 NT_STATUS_OK
ReadX 11562 69632 4096 4096 NT_STATUS_OK
ReadX 11562 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11562 1004 NT_STATUS_OK
WriteX 11562 0 4096 4096 NT_STATUS_OK
Close 11562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11563 NT_STATUS_OK
SET_FILE_INFORMATION 11563 1004 NT_STATUS_OK
Close 11563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11568 NT_STATUS_OK
WriteX 11568 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 258 NT_STATUS_OK
WriteX 11568 0 65536 65536 NT_STATUS_OK
WriteX 11568 65536 19979 19979 NT_STATUS_OK
Close 11568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11569 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 1004 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
SET_FILE_INFORMATION 11569 1004 NT_STATUS_OK
WriteX 11569 0 4096 4096 NT_STATUS_OK
Flush 11569 NT_STATUS_OK
Close 11569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11570 NT_STATUS_OK
ReadX 11570 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11571 NT_STATUS_OK
ReadX 11571 0 4096 4096 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 4096 4096 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11571 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11580 NT_STATUS_OK
WriteX 11580 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 258 NT_STATUS_OK
WriteX 11580 0 65536 65536 NT_STATUS_OK
WriteX 11580 65536 17654 17654 NT_STATUS_OK
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Flush 11581 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Flush 11581 NT_STATUS_OK
QUERY_FILE_INFORMATION 11581 1004 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Flush 11581 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Flush 11581 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Flush 11581 NT_STATUS_OK
SET_FILE_INFORMATION 11581 1004 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Flush 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11582 NT_STATUS_OK
SET_FILE_INFORMATION 11582 1004 NT_STATUS_OK
Close 11582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
ReadX 11586 4096 4096 4096 NT_STATUS_OK
ReadX 11586 8192 4096 4096 NT_STATUS_OK
ReadX 11586 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11586 16384 4096 4096 NT_STATUS_OK
ReadX 11586 20480 4096 4096 NT_STATUS_OK
ReadX 11586 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
Close 11587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
Close 11588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11589 1004 NT_STATUS_OK
WriteX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11592 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11595 NT_STATUS_OK
WriteX 11595 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 258 NT_STATUS_OK
WriteX 11595 0 65536 65536 NT_STATUS_OK
WriteX 11595 65536 19490 19490 NT_STATUS_OK
Close 11595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 4096 4096 NT_STATUS_OK
WriteX 11596 0 4096 4096 NT_STATUS_OK
Flush 11596 NT_STATUS_OK
WriteX 11596 0 4096 4096 NT_STATUS_OK
Flush 11596 NT_STATUS_OK
QUERY_FILE_INFORMATION 11596 1004 NT_STATUS_OK
WriteX 11596 0 4096 4096 NT_STATUS_OK
Flush 11596 NT_STATUS_OK
WriteX 11596 0 4096 4096 NT_STATUS_OK
Flush 11596 NT_STATUS_OK
WriteX 11596 0 4096 4096 NT_STATUS_OK
Flush 11596 NT_STATUS_OK
SET_FILE_INFORMATION 11596 1004 NT_STATUS_OK
WriteX 11596 0 4096 4096 NT_STATUS_OK
Flush 11596 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11597 NT_STATUS_OK
SET_FILE_INFORMATION 11597 1004 NT_STATUS_OK
Close 11597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11601 0 4096 4096 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
ReadX 11603 4096 4096 4096 NT_STATUS_OK
ReadX 11603 8192 4096 4096 NT_STATUS_OK
ReadX 11603 12288 4096 4096 NT_STATUS_OK
ReadX 11603 16384 4096 4096 NT_STATUS_OK
ReadX 11603 20480 4096 4096 NT_STATUS_OK
ReadX 11603 24576 4096 4096 NT_STATUS_OK
ReadX 11603 28672 4096 4096 NT_STATUS_OK
ReadX 11603 32768 4096 4096 NT_STATUS_OK
ReadX 11603 36864 4096 4096 NT_STATUS_OK
ReadX 11603 40960 4096 4096 NT_STATUS_OK
ReadX 11603 45056 4096 4096 NT_STATUS_OK
ReadX 11603 49152 4096 4096 NT_STATUS_OK
ReadX 11603 53248 4096 4096 NT_STATUS_OK
ReadX 11603 57344 4096 4096 NT_STATUS_OK
ReadX 11603 61440 4096 4096 NT_STATUS_OK
ReadX 11603 65536 4096 4096 NT_STATUS_OK
ReadX 11603 69632 4096 4096 NT_STATUS_OK
ReadX 11603 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11603 1004 NT_STATUS_OK
WriteX 11603 0 4096 4096 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11604 NT_STATUS_OK
SET_FILE_INFORMATION 11604 1004 NT_STATUS_OK
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11609 NT_STATUS_OK
WriteX 11609 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11609 258 NT_STATUS_OK
WriteX 11609 0 65536 65536 NT_STATUS_OK
WriteX 11609 65536 8866 8866 NT_STATUS_OK
Close 11609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 4096 4096 NT_STATUS_OK
WriteX 11610 0 4096 4096 NT_STATUS_OK
Flush 11610 NT_STATUS_OK
SET_FILE_INFORMATION 11610 1004 NT_STATUS_OK
WriteX 11610 0 4096 4096 NT_STATUS_OK
Flush 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 0 4096 4096 NT_STATUS_OK
Close 11612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 4096 4096 NT_STATUS_OK
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11614 1004 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11615 NT_STATUS_OK
Close 11615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Close 11605 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11620 NT_STATUS_OK
WriteX 11620 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11620 258 NT_STATUS_OK
WriteX 11620 0 65536 65536 NT_STATUS_OK
WriteX 11620 65536 9298 9298 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 0 4096 4096 NT_STATUS_OK
WriteX 11621 0 4096 4096 NT_STATUS_OK
Flush 11621 NT_STATUS_OK
SET_FILE_INFORMATION 11621 1004 NT_STATUS_OK
WriteX 11621 0 4096 4096 NT_STATUS_OK
Flush 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11622 NT_STATUS_OK
SET_FILE_INFORMATION 11622 1004 NT_STATUS_OK
Close 11622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11623 NT_STATUS_OK
ReadX 11623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11627 0 4096 4096 NT_STATUS_OK
Close 11627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11628 4096 4096 4096 NT_STATUS_OK
ReadX 11628 8192 4096 4096 NT_STATUS_OK
ReadX 11628 12288 4096 4096 NT_STATUS_OK
ReadX 11628 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11630 NT_STATUS_OK
ReadX 11630 0 4096 4096 NT_STATUS_OK
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11631 1004 NT_STATUS_OK
WriteX 11631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11632 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11628 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11637 NT_STATUS_OK
WriteX 11637 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11637 258 NT_STATUS_OK
WriteX 11637 0 65536 65536 NT_STATUS_OK
WriteX 11637 65536 11540 11540 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
WriteX 11638 0 4096 4096 NT_STATUS_OK
Flush 11638 NT_STATUS_OK
SET_FILE_INFORMATION 11638 1004 NT_STATUS_OK
WriteX 11638 0 4096 4096 NT_STATUS_OK
Flush 11638 NT_STATUS_OK
Close 11638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11639 NT_STATUS_OK
SET_FILE_INFORMATION 11639 1004 NT_STATUS_OK
Close 11639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 61440 4096 4096 NT_STATUS_OK
ReadX 11643 126976 4096 4096 NT_STATUS_OK
WriteX 11643 0 65536 65536 NT_STATUS_OK
WriteX 11643 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 61440 4096 4096 NT_STATUS_OK
ReadX 11644 126976 4096 4096 NT_STATUS_OK
ReadX 11644 192512 4096 4096 NT_STATUS_OK
ReadX 11644 258048 4096 4096 NT_STATUS_OK
WriteX 11644 0 65536 65536 NT_STATUS_OK
WriteX 11644 65536 65536 65536 NT_STATUS_OK
WriteX 11644 131072 65536 65536 NT_STATUS_OK
WriteX 11644 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 61440 4096 4096 NT_STATUS_OK
ReadX 11645 126976 4096 4096 NT_STATUS_OK
ReadX 11645 192512 4096 4096 NT_STATUS_OK
ReadX 11645 258048 4096 4096 NT_STATUS_OK
ReadX 11645 323584 4096 4096 NT_STATUS_OK
ReadX 11645 389120 4096 4096 NT_STATUS_OK
ReadX 11645 454656 4096 4096 NT_STATUS_OK
ReadX 11645 520192 4096 4096 NT_STATUS_OK
WriteX 11645 0 65536 65536 NT_STATUS_OK
WriteX 11645 65536 65536 65536 NT_STATUS_OK
WriteX 11645 131072 65536 65536 NT_STATUS_OK
WriteX 11645 196608 65536 65536 NT_STATUS_OK
WriteX 11645 262144 65536 65536 NT_STATUS_OK
WriteX 11645 327680 65536 65536 NT_STATUS_OK
WriteX 11645 393216 65536 65536 NT_STATUS_OK
WriteX 11645 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
ReadX 11646 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11647 NT_STATUS_OK
WriteX 11647 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11647 258 NT_STATUS_OK
WriteX 11647 0 53 53 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11648 NT_STATUS_OK
Close 11648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11646 8192 4096 4096 NT_STATUS_OK
ReadX 11646 12288 4096 4096 NT_STATUS_OK
WriteX 11650 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11650 258 NT_STATUS_OK
ReadX 11646 16384 4096 4096 NT_STATUS_OK
ReadX 11646 20480 4096 4096 NT_STATUS_OK
WriteX 11650 0 15360 15360 NT_STATUS_OK
Close 11650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11651 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11651 1004 NT_STATUS_OK
WriteX 11651 0 4096 4096 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11654 4096 4096 4096 NT_STATUS_OK
ReadX 11654 8192 4096 4096 NT_STATUS_OK
ReadX 11654 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
ReadX 11657 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11658 NT_STATUS_OK
ReadX 11658 0 4096 4096 NT_STATUS_OK
ReadX 11658 4096 4096 4096 NT_STATUS_OK
ReadX 11658 8192 4096 4096 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11659 NT_STATUS_OK
WriteX 11659 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11659 258 NT_STATUS_OK
WriteX 11659 0 15360 15360 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11660 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11660 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11664 NT_STATUS_OK
SET_FILE_INFORMATION 11664 1004 NT_STATUS_OK
Close 11664 NT_STATUS_OK
WriteX 11660 0 4096 4096 NT_STATUS_OK
Close 11660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
ReadX 11667 4096 4096 4096 NT_STATUS_OK
ReadX 11667 8192 4096 4096 NT_STATUS_OK
ReadX 11667 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11667 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11667 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11668 NT_STATUS_OK
ReadX 11668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11669 NT_STATUS_OK
WriteX 11669 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11669 258 NT_STATUS_OK
WriteX 11669 0 53 53 NT_STATUS_OK
Close 11669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11668 4096 4096 4096 NT_STATUS_OK
ReadX 11668 8192 4096 4096 NT_STATUS_OK
ReadX 11668 12288 4096 4096 NT_STATUS_OK
WriteX 11672 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
WriteX 11672 0 12006 12006 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11673 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11673 1004 NT_STATUS_OK
WriteX 11673 0 4096 4096 NT_STATUS_OK
Close 11673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11674 NT_STATUS_OK
Close 11674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11676 4096 4096 4096 NT_STATUS_OK
ReadX 11676 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11679 NT_STATUS_OK
WriteX 11679 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11679 258 NT_STATUS_OK
WriteX 11679 0 11991 11991 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11680 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11680 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11684 NT_STATUS_OK
SET_FILE_INFORMATION 11684 1004 NT_STATUS_OK
Close 11684 NT_STATUS_OK
WriteX 11680 0 4096 4096 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11687 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11687 1004 NT_STATUS_OK
ReadX 11687 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11687 1004 NT_STATUS_OK
WriteX 11687 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11687 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11687 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11687 1004 NT_STATUS_OK
Close 11663 NT_STATUS_OK
WriteX 11667 0 19054 19054 NT_STATUS_OK
WriteX 11687 0 12288 12288 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11690 NT_STATUS_OK
Close 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11692 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 61440 61440 NT_STATUS_OK
ReadX 11694 61440 4096 4096 NT_STATUS_OK
ReadX 11694 65536 61440 61440 NT_STATUS_OK
ReadX 11694 126976 4096 4096 NT_STATUS_OK
ReadX 11694 131072 61440 61440 NT_STATUS_OK
ReadX 11694 192512 4096 4096 NT_STATUS_OK
ReadX 11694 196608 61440 61440 NT_STATUS_OK
ReadX 11694 258048 4096 4096 NT_STATUS_OK
ReadX 11694 262144 61440 61440 NT_STATUS_OK
ReadX 11694 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 61440 61440 NT_STATUS_OK
ReadX 11695 61440 4096 4096 NT_STATUS_OK
ReadX 11695 65536 61440 61440 NT_STATUS_OK
ReadX 11695 126976 4096 4096 NT_STATUS_OK
ReadX 11695 131072 61440 61440 NT_STATUS_OK
ReadX 11695 192512 4096 4096 NT_STATUS_OK
ReadX 11695 196608 61440 61440 NT_STATUS_OK
ReadX 11695 258048 4096 4096 NT_STATUS_OK
ReadX 11695 262144 61440 61440 NT_STATUS_OK
ReadX 11695 323584 4096 4096 NT_STATUS_OK
ReadX 11695 327680 61440 61440 NT_STATUS_OK
ReadX 11695 389120 4096 4096 NT_STATUS_OK
ReadX 11695 393216 61440 61440 NT_STATUS_OK
ReadX 11695 454656 4096 4096 NT_STATUS_OK
ReadX 11695 458752 61440 61440 NT_STATUS_OK
ReadX 11695 520192 4096 4096 NT_STATUS_OK
ReadX 11695 524288 61440 61440 NT_STATUS_OK
ReadX 11695 585728 4096 4096 NT_STATUS_OK
ReadX 11695 589824 61440 61440 NT_STATUS_OK
ReadX 11695 651264 4096 4096 NT_STATUS_OK
ReadX 11695 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 61440 61440 NT_STATUS_OK
ReadX 11696 61440 4096 4096 NT_STATUS_OK
ReadX 11696 65536 61440 61440 NT_STATUS_OK
ReadX 11696 126976 4096 4096 NT_STATUS_OK
ReadX 11696 131072 61440 61440 NT_STATUS_OK
ReadX 11696 192512 4096 4096 NT_STATUS_OK
ReadX 11696 196608 61440 61440 NT_STATUS_OK
ReadX 11696 258048 4096 4096 NT_STATUS_OK
ReadX 11696 262144 61440 61440 NT_STATUS_OK
ReadX 11696 323584 4096 4096 NT_STATUS_OK
ReadX 11696 327680 61440 61440 NT_STATUS_OK
ReadX 11696 389120 4096 4096 NT_STATUS_OK
ReadX 11696 393216 61440 61440 NT_STATUS_OK
ReadX 11696 454656 4096 4096 NT_STATUS_OK
ReadX 11696 458752 61440 61440 NT_STATUS_OK
ReadX 11696 520192 4096 4096 NT_STATUS_OK
ReadX 11696 524288 61440 61440 NT_STATUS_OK
ReadX 11696 585728 4096 4096 NT_STATUS_OK
ReadX 11696 589824 61440 61440 NT_STATUS_OK
ReadX 11696 651264 4096 4096 NT_STATUS_OK
ReadX 11696 655360 61440 61440 NT_STATUS_OK
ReadX 11696 716800 4096 4096 NT_STATUS_OK
ReadX 11696 720896 61440 61440 NT_STATUS_OK
ReadX 11696 782336 4096 4096 NT_STATUS_OK
ReadX 11696 786432 61440 61440 NT_STATUS_OK
ReadX 11696 847872 4096 4096 NT_STATUS_OK
ReadX 11696 851968 61440 61440 NT_STATUS_OK
ReadX 11696 913408 4096 4096 NT_STATUS_OK
ReadX 11696 917504 61440 61440 NT_STATUS_OK
ReadX 11696 978944 4096 4096 NT_STATUS_OK
ReadX 11696 983040 61440 61440 NT_STATUS_OK
ReadX 11696 1044480 4096 4096 NT_STATUS_OK
ReadX 11696 1048576 61440 61440 NT_STATUS_OK
ReadX 11696 1110016 4096 4096 NT_STATUS_OK
ReadX 11696 1114112 61440 61440 NT_STATUS_OK
ReadX 11696 1175552 4096 4096 NT_STATUS_OK
ReadX 11696 1179648 61440 61440 NT_STATUS_OK
ReadX 11696 1241088 4096 4096 NT_STATUS_OK
ReadX 11696 1245184 61440 61440 NT_STATUS_OK
ReadX 11696 1306624 4096 4096 NT_STATUS_OK
ReadX 11696 1310720 61440 61440 NT_STATUS_OK
ReadX 11696 1372160 4096 4096 NT_STATUS_OK
ReadX 11696 1376256 61440 61440 NT_STATUS_OK
ReadX 11696 1437696 4096 4096 NT_STATUS_OK
ReadX 11696 1441792 61440 61440 NT_STATUS_OK
ReadX 11696 1503232 4096 4096 NT_STATUS_OK
ReadX 11696 1507328 61440 61440 NT_STATUS_OK
ReadX 11696 1568768 4096 4096 NT_STATUS_OK
ReadX 11696 1572864 61440 61440 NT_STATUS_OK
ReadX 11696 1634304 4096 4096 NT_STATUS_OK
ReadX 11696 1638400 61440 61440 NT_STATUS_OK
ReadX 11696 1699840 4096 4096 NT_STATUS_OK
ReadX 11696 1703936 61440 61440 NT_STATUS_OK
ReadX 11696 1765376 4096 4096 NT_STATUS_OK
ReadX 11696 1769472 61440 61440 NT_STATUS_OK
ReadX 11696 1830912 4096 4096 NT_STATUS_OK
ReadX 11696 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11703 NT_STATUS_OK
QUERY_FILE_INFORMATION 11703 1004 NT_STATUS_OK
WriteX 11703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11703 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11704 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11705 NT_STATUS_OK
WriteX 11705 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 258 NT_STATUS_OK
WriteX 11705 0 491 491 NT_STATUS_OK
Close 11705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11703 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11708 NT_STATUS_OK
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11709 NT_STATUS_OK
WriteX 11709 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 258 NT_STATUS_OK
WriteX 11709 0 543 543 NT_STATUS_OK
Close 11709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 258 NT_STATUS_OK
WriteX 11723 0 2048 2048 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
Flush 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11729 NT_STATUS_OK
WriteX 11729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
WriteX 11729 0 2048 2048 NT_STATUS_OK
Close 11729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11730 NT_STATUS_OK
ReadX 11730 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11735 NT_STATUS_OK
WriteX 11735 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 258 NT_STATUS_OK
WriteX 11735 0 2048 2048 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 2048 2048 NT_STATUS_OK
ReadX 11714 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
WriteX 11714 0 8192 8192 NT_STATUS_OK
WriteX 11715 0 4096 4096 NT_STATUS_OK
WriteX 11716 0 4096 4096 NT_STATUS_OK
ReadX 11730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11740 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11730 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11747 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11760 NT_STATUS_OK
QUERY_FILE_INFORMATION 11760 1004 NT_STATUS_OK
WriteX 11760 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11760 258 NT_STATUS_OK
WriteX 11760 0 2048 2048 NT_STATUS_OK
Close 11760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11761 0 4096 4096 NT_STATUS_OK
Flush 11761 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
Flush 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11761 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11763 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11771 NT_STATUS_OK
WriteX 11771 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11771 258 NT_STATUS_OK
WriteX 11771 0 4096 4096 NT_STATUS_OK
Close 11771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11773 NT_STATUS_OK
Close 11773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11774 NT_STATUS_OK
WriteX 11774 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 258 NT_STATUS_OK
WriteX 11774 0 4096 4096 NT_STATUS_OK
Close 11774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11775 0 4096 4096 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11744 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11782 NT_STATUS_OK
WriteX 11782 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11782 258 NT_STATUS_OK
WriteX 11782 0 2048 2048 NT_STATUS_OK
Close 11782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11797 NT_STATUS_OK
QUERY_FILE_INFORMATION 11797 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11799 NT_STATUS_OK
QUERY_FILE_INFORMATION 11799 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11802 NT_STATUS_OK
ReadX 11802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11804 NT_STATUS_OK
ReadX 11804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11810 NT_STATUS_OK
ReadX 11810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11819 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 1004 NT_STATUS_OK
WriteX 11819 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 258 NT_STATUS_OK
WriteX 11819 0 2048 2048 NT_STATUS_OK
Close 11819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11831 NT_STATUS_OK
QUERY_FILE_INFORMATION 11831 1004 NT_STATUS_OK
WriteX 11831 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11831 258 NT_STATUS_OK
WriteX 11831 0 2048 2048 NT_STATUS_OK
Close 11831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11839 NT_STATUS_OK
QUERY_FILE_INFORMATION 11839 1004 NT_STATUS_OK
WriteX 11839 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11839 258 NT_STATUS_OK
WriteX 11839 0 2048 2048 NT_STATUS_OK
Close 11839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Flush 11820 NT_STATUS_OK
WriteX 11832 0 4096 4096 NT_STATUS_OK
Flush 11832 NT_STATUS_OK
WriteX 11840 0 4096 4096 NT_STATUS_OK
Flush 11840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11832 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11822 4096 16384 16384 NT_STATUS_OK
ReadX 11802 4096 16384 16384 NT_STATUS_OK
ReadX 11834 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11842 NT_STATUS_OK
ReadX 11842 0 2048 2048 NT_STATUS_OK
WriteX 11842 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11843 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11824 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11813 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Close 11809 NT_STATUS_OK
Close 11810 NT_STATUS_OK
Close 11802 NT_STATUS_OK
Close 11803 NT_STATUS_OK
Close 11804 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11845 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11847 NT_STATUS_OK
QUERY_FILE_INFORMATION 11847 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11851 NT_STATUS_OK
ReadX 11851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11852 NT_STATUS_OK
ReadX 11852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11850 4096 16384 16384 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
WriteX 11852 0 4096 4096 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 8192 8192 NT_STATUS_OK
ReadX 11856 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11870 0 4096 4096 NT_STATUS_OK
ReadX 11870 4096 4096 4096 NT_STATUS_OK
ReadX 11870 8192 4096 4096 NT_STATUS_OK
WriteX 11856 0 4096 4096 NT_STATUS_OK
WriteX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
ReadX 11871 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
WriteX 11852 0 4096 4096 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11876 NT_STATUS_OK
QUERY_FILE_INFORMATION 11876 1004 NT_STATUS_OK
WriteX 11876 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11876 258 NT_STATUS_OK
WriteX 11876 0 2048 2048 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11877 NT_STATUS_OK
ReadX 11877 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11879 NT_STATUS_OK
ReadX 11879 0 4096 4096 NT_STATUS_OK
ReadX 11879 4096 4096 4096 NT_STATUS_OK
WriteX 11879 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11877 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11881 NT_STATUS_OK
ReadX 11881 0 4096 4096 NT_STATUS_OK
ReadX 11881 4096 4096 4096 NT_STATUS_OK
WriteX 11881 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11882 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11851 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11881 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11884 0 4096 4096 NT_STATUS_OK
ReadX 11884 4096 4096 4096 NT_STATUS_OK
ReadX 11884 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
ReadX 11885 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11902 NT_STATUS_OK
QUERY_FILE_INFORMATION 11902 1004 NT_STATUS_OK
WriteX 11902 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11902 258 NT_STATUS_OK
WriteX 11902 0 2048 2048 NT_STATUS_OK
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11903 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11908 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1004 NT_STATUS_OK
WriteX 11908 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 258 NT_STATUS_OK
WriteX 11908 0 2048 2048 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11892 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11910 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11912 NT_STATUS_OK
QUERY_FILE_INFORMATION 11912 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 61440 4096 4096 NT_STATUS_OK
ReadX 11914 126976 4096 4096 NT_STATUS_OK
WriteX 11914 0 65536 65536 NT_STATUS_OK
WriteX 11914 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 61440 4096 4096 NT_STATUS_OK
ReadX 11915 126976 4096 4096 NT_STATUS_OK
ReadX 11915 192512 4096 4096 NT_STATUS_OK
ReadX 11915 258048 4096 4096 NT_STATUS_OK
WriteX 11915 0 65536 65536 NT_STATUS_OK
WriteX 11915 65536 65536 65536 NT_STATUS_OK
WriteX 11915 131072 65536 65536 NT_STATUS_OK
WriteX 11915 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 61440 4096 4096 NT_STATUS_OK
ReadX 11916 126976 4096 4096 NT_STATUS_OK
ReadX 11916 192512 4096 4096 NT_STATUS_OK
ReadX 11916 258048 4096 4096 NT_STATUS_OK
ReadX 11916 323584 4096 4096 NT_STATUS_OK
ReadX 11916 389120 4096 4096 NT_STATUS_OK
ReadX 11916 454656 4096 4096 NT_STATUS_OK
ReadX 11916 520192 4096 4096 NT_STATUS_OK
WriteX 11916 0 65536 65536 NT_STATUS_OK
WriteX 11916 65536 65536 65536 NT_STATUS_OK
WriteX 11916 131072 65536 65536 NT_STATUS_OK
WriteX 11916 196608 65536 65536 NT_STATUS_OK
WriteX 11916 262144 65536 65536 NT_STATUS_OK
WriteX 11916 327680 65536 65536 NT_STATUS_OK
WriteX 11916 393216 65536 65536 NT_STATUS_OK
WriteX 11916 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11917 NT_STATUS_OK
ReadX 11917 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11917 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11917 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11917 8192 4096 4096 NT_STATUS_OK
ReadX 11917 12288 4096 4096 NT_STATUS_OK
ReadX 11917 16384 4096 4096 NT_STATUS_OK
ReadX 11917 20480 4096 4096 NT_STATUS_OK
ReadX 11917 24576 4096 4096 NT_STATUS_OK
ReadX 11917 28672 4096 4096 NT_STATUS_OK
ReadX 11917 32768 4096 4096 NT_STATUS_OK
ReadX 11917 36864 4096 4096 NT_STATUS_OK
ReadX 11917 40960 4096 4096 NT_STATUS_OK
ReadX 11917 45056 4096 4096 NT_STATUS_OK
ReadX 11917 49152 4096 4096 NT_STATUS_OK
ReadX 11917 53248 4096 4096 NT_STATUS_OK
ReadX 11917 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11917 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Close 11916 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11920 NT_STATUS_OK
WriteX 11920 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11920 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11920 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11920 1004 NT_STATUS_OK
WriteX 11920 0 57088 57088 NT_STATUS_OK
WriteX 11920 0 4096 4096 NT_STATUS_OK
Flush 11920 NT_STATUS_OK
Close 11917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11921 NT_STATUS_OK
SET_FILE_INFORMATION 11921 1004 NT_STATUS_OK
Close 11921 NT_STATUS_OK
SET_FILE_INFORMATION 11920 1004 NT_STATUS_OK
WriteX 11920 0 4096 4096 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11924 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11925 NT_STATUS_OK
WriteX 11925 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11925 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11925 1004 NT_STATUS_OK
WriteX 11925 0 51456 51456 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
SET_FILE_INFORMATION 11925 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11925 1004 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11929 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11931 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11934 NT_STATUS_OK
WriteX 11934 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11934 258 NT_STATUS_OK
WriteX 11934 0 53077 53077 NT_STATUS_OK
Close 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11935 NT_STATUS_OK
WriteX 11935 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11935 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11935 1004 NT_STATUS_OK
WriteX 11935 0 65536 65536 NT_STATUS_OK
WriteX 11935 65536 1856 1856 NT_STATUS_OK
WriteX 11935 0 4096 4096 NT_STATUS_OK
Flush 11935 NT_STATUS_OK
SET_FILE_INFORMATION 11935 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11935 1004 NT_STATUS_OK
WriteX 11935 0 4096 4096 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11937 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11941 NT_STATUS_OK
Close 11941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11944 NT_STATUS_OK
WriteX 11944 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11944 258 NT_STATUS_OK
WriteX 11944 0 7983 7983 NT_STATUS_OK
Close 11944 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11946 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11949 NT_STATUS_OK
WriteX 11949 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11949 258 NT_STATUS_OK
WriteX 11949 0 65536 65536 NT_STATUS_OK
WriteX 11949 65536 65536 65536 NT_STATUS_OK
WriteX 11949 131072 65536 65536 NT_STATUS_OK
WriteX 11949 196608 65536 65536 NT_STATUS_OK
WriteX 11949 262144 65536 65536 NT_STATUS_OK
WriteX 11949 327680 65536 65536 NT_STATUS_OK
WriteX 11949 393216 65536 65536 NT_STATUS_OK
WriteX 11949 458752 46731 46731 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11950 NT_STATUS_OK
WriteX 11950 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11939 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11950 1004 NT_STATUS_OK
WriteX 11950 0 65536 65536 NT_STATUS_OK
WriteX 11950 65536 22848 22848 NT_STATUS_OK
WriteX 11950 0 4096 4096 NT_STATUS_OK
Flush 11950 NT_STATUS_OK
SET_FILE_INFORMATION 11950 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11950 1004 NT_STATUS_OK
WriteX 11950 0 4096 4096 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11954 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11955 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11955 1004 NT_STATUS_OK
ReadX 11955 8192 4096 4096 NT_STATUS_OK
ReadX 11955 12288 4096 4096 NT_STATUS_OK
ReadX 11955 16384 4096 4096 NT_STATUS_OK
ReadX 11955 20480 4096 4096 NT_STATUS_OK
ReadX 11955 24576 4096 4096 NT_STATUS_OK
ReadX 11955 28672 4096 4096 NT_STATUS_OK
ReadX 11955 32768 4096 4096 NT_STATUS_OK
ReadX 11955 36864 4096 4096 NT_STATUS_OK
ReadX 11955 40960 4096 4096 NT_STATUS_OK
ReadX 11955 45056 4096 4096 NT_STATUS_OK
ReadX 11955 49152 4096 4096 NT_STATUS_OK
ReadX 11955 53248 4096 4096 NT_STATUS_OK
ReadX 11955 57344 4096 4096 NT_STATUS_OK
ReadX 11955 61440 4096 4096 NT_STATUS_OK
ReadX 11955 65536 4096 4096 NT_STATUS_OK
ReadX 11955 69632 4096 4096 NT_STATUS_OK
ReadX 11955 73728 4096 4096 NT_STATUS_OK
ReadX 11955 77824 4096 4096 NT_STATUS_OK
ReadX 11955 81920 4096 4096 NT_STATUS_OK
ReadX 11955 86016 4096 4096 NT_STATUS_OK
ReadX 11955 90112 4096 4096 NT_STATUS_OK
ReadX 11955 94208 4096 4096 NT_STATUS_OK
ReadX 11955 98304 4096 4096 NT_STATUS_OK
ReadX 11955 102400 4096 4096 NT_STATUS_OK
ReadX 11955 106496 4096 4096 NT_STATUS_OK
ReadX 11955 110592 4096 4096 NT_STATUS_OK
ReadX 11955 114688 4096 4096 NT_STATUS_OK
ReadX 11955 118784 4096 4096 NT_STATUS_OK
ReadX 11955 122880 4096 4096 NT_STATUS_OK
ReadX 11955 126976 4096 4096 NT_STATUS_OK
ReadX 11955 131072 4096 4096 NT_STATUS_OK
ReadX 11955 135168 4096 4096 NT_STATUS_OK
ReadX 11955 139264 4096 4096 NT_STATUS_OK
ReadX 11955 143360 4096 4096 NT_STATUS_OK
ReadX 11955 147456 4096 4096 NT_STATUS_OK
ReadX 11955 151552 4096 4096 NT_STATUS_OK
ReadX 11955 155648 4096 4096 NT_STATUS_OK
ReadX 11955 159744 4096 4096 NT_STATUS_OK
ReadX 11955 163840 4096 4096 NT_STATUS_OK
ReadX 11955 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11955 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11958 NT_STATUS_OK
WriteX 11958 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 258 NT_STATUS_OK
Close 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11959 NT_STATUS_OK
SET_FILE_INFORMATION 11959 1004 NT_STATUS_OK
Close 11959 NT_STATUS_OK
WriteX 11958 0 42388 42388 NT_STATUS_OK
Close 11958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
ReadX 11962 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11963 NT_STATUS_OK
WriteX 11963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11963 258 NT_STATUS_OK
SET_FILE_INFORMATION 11963 1004 NT_STATUS_OK
WriteX 11963 0 42652 42652 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11965 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
ReadX 11967 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11972 NT_STATUS_OK
WriteX 11972 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11972 258 NT_STATUS_OK
WriteX 11972 0 65536 65536 NT_STATUS_OK
WriteX 11972 65536 49 49 NT_STATUS_OK
Close 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11973 NT_STATUS_OK
ReadX 11973 0 61440 61440 NT_STATUS_OK
ReadX 11973 61440 4096 4096 NT_STATUS_OK
ReadX 11973 65536 61440 61440 NT_STATUS_OK
ReadX 11973 126976 4096 4096 NT_STATUS_OK
ReadX 11973 131072 61440 61440 NT_STATUS_OK
ReadX 11973 192512 4096 4096 NT_STATUS_OK
ReadX 11973 196608 61440 61440 NT_STATUS_OK
ReadX 11973 258048 4096 4096 NT_STATUS_OK
ReadX 11973 262144 61440 61440 NT_STATUS_OK
ReadX 11973 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 61440 61440 NT_STATUS_OK
ReadX 11974 61440 4096 4096 NT_STATUS_OK
ReadX 11974 65536 61440 61440 NT_STATUS_OK
ReadX 11974 126976 4096 4096 NT_STATUS_OK
ReadX 11974 131072 61440 61440 NT_STATUS_OK
ReadX 11974 192512 4096 4096 NT_STATUS_OK
ReadX 11974 196608 61440 61440 NT_STATUS_OK
ReadX 11974 258048 4096 4096 NT_STATUS_OK
ReadX 11974 262144 61440 61440 NT_STATUS_OK
ReadX 11974 323584 4096 4096 NT_STATUS_OK
ReadX 11974 327680 61440 61440 NT_STATUS_OK
ReadX 11974 389120 4096 4096 NT_STATUS_OK
ReadX 11974 393216 61440 61440 NT_STATUS_OK
ReadX 11974 454656 4096 4096 NT_STATUS_OK
ReadX 11974 458752 61440 61440 NT_STATUS_OK
ReadX 11974 520192 4096 4096 NT_STATUS_OK
ReadX 11974 524288 61440 61440 NT_STATUS_OK
ReadX 11974 585728 4096 4096 NT_STATUS_OK
ReadX 11974 589824 61440 61440 NT_STATUS_OK
ReadX 11974 651264 4096 4096 NT_STATUS_OK
ReadX 11974 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 61440 61440 NT_STATUS_OK
ReadX 11975 61440 4096 4096 NT_STATUS_OK
ReadX 11975 65536 61440 61440 NT_STATUS_OK
ReadX 11975 126976 4096 4096 NT_STATUS_OK
ReadX 11975 131072 61440 61440 NT_STATUS_OK
ReadX 11975 192512 4096 4096 NT_STATUS_OK
ReadX 11975 196608 61440 61440 NT_STATUS_OK
ReadX 11975 258048 4096 4096 NT_STATUS_OK
ReadX 11975 262144 61440 61440 NT_STATUS_OK
ReadX 11975 323584 4096 4096 NT_STATUS_OK
ReadX 11975 327680 61440 61440 NT_STATUS_OK
ReadX 11975 389120 4096 4096 NT_STATUS_OK
ReadX 11975 393216 61440 61440 NT_STATUS_OK
ReadX 11975 454656 4096 4096 NT_STATUS_OK
ReadX 11975 458752 61440 61440 NT_STATUS_OK
ReadX 11975 520192 4096 4096 NT_STATUS_OK
ReadX 11975 524288 61440 61440 NT_STATUS_OK
ReadX 11975 585728 4096 4096 NT_STATUS_OK
ReadX 11975 589824 61440 61440 NT_STATUS_OK
ReadX 11975 651264 4096 4096 NT_STATUS_OK
ReadX 11975 655360 61440 61440 NT_STATUS_OK
ReadX 11975 716800 4096 4096 NT_STATUS_OK
ReadX 11975 720896 61440 61440 NT_STATUS_OK
ReadX 11975 782336 4096 4096 NT_STATUS_OK
ReadX 11975 786432 61440 61440 NT_STATUS_OK
ReadX 11975 847872 4096 4096 NT_STATUS_OK
ReadX 11975 851968 61440 61440 NT_STATUS_OK
ReadX 11975 913408 4096 4096 NT_STATUS_OK
ReadX 11975 917504 61440 61440 NT_STATUS_OK
ReadX 11975 978944 4096 4096 NT_STATUS_OK
ReadX 11975 983040 61440 61440 NT_STATUS_OK
ReadX 11975 1044480 4096 4096 NT_STATUS_OK
ReadX 11975 1048576 61440 61440 NT_STATUS_OK
ReadX 11975 1110016 4096 4096 NT_STATUS_OK
ReadX 11975 1114112 61440 61440 NT_STATUS_OK
ReadX 11975 1175552 4096 4096 NT_STATUS_OK
ReadX 11975 1179648 61440 61440 NT_STATUS_OK
ReadX 11975 1241088 4096 4096 NT_STATUS_OK
ReadX 11975 1245184 61440 61440 NT_STATUS_OK
ReadX 11975 1306624 4096 4096 NT_STATUS_OK
ReadX 11975 1310720 61440 61440 NT_STATUS_OK
ReadX 11975 1372160 4096 4096 NT_STATUS_OK
ReadX 11975 1376256 61440 61440 NT_STATUS_OK
ReadX 11975 1437696 4096 4096 NT_STATUS_OK
ReadX 11975 1441792 61440 61440 NT_STATUS_OK
ReadX 11975 1503232 4096 4096 NT_STATUS_OK
ReadX 11975 1507328 61440 61440 NT_STATUS_OK
ReadX 11975 1568768 4096 4096 NT_STATUS_OK
ReadX 11975 1572864 61440 61440 NT_STATUS_OK
ReadX 11975 1634304 4096 4096 NT_STATUS_OK
ReadX 11975 1638400 61440 61440 NT_STATUS_OK
ReadX 11975 1699840 4096 4096 NT_STATUS_OK
ReadX 11975 1703936 61440 61440 NT_STATUS_OK
ReadX 11975 1765376 4096 4096 NT_STATUS_OK
ReadX 11975 1769472 61440 61440 NT_STATUS_OK
ReadX 11975 1830912 4096 4096 NT_STATUS_OK
ReadX 11975 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11977 NT_STATUS_OK
QUERY_FILE_INFORMATION 11977 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11977 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11977 1005 NT_STATUS_OK
ReadX 11977 2156 24 24 NT_STATUS_OK
ReadX 11977 2139 276 276 NT_STATUS_OK
ReadX 11977 2136 14 14 NT_STATUS_OK
ReadX 11977 2136 7 7 NT_STATUS_OK
ReadX 11977 2138 12 12 NT_STATUS_OK
ReadX 11977 2137 8 8 NT_STATUS_OK
ReadX 11977 2135 15 15 NT_STATUS_OK
ReadX 11977 0 16 16 NT_STATUS_OK
ReadX 11977 16 2048 2048 NT_STATUS_OK
ReadX 11977 2064 2048 2048 NT_STATUS_OK
ReadX 11977 257 2048 2048 NT_STATUS_OK
ReadX 11977 385 2048 2048 NT_STATUS_OK
ReadX 11977 513 2048 2048 NT_STATUS_OK
ReadX 11977 641 2048 2048 NT_STATUS_OK
ReadX 11977 769 2048 2048 NT_STATUS_OK
ReadX 11977 897 2048 2048 NT_STATUS_OK
ReadX 11977 1025 2048 2048 NT_STATUS_OK
ReadX 11977 1153 2048 2048 NT_STATUS_OK
ReadX 11977 1281 2048 2048 NT_STATUS_OK
ReadX 11977 1409 2048 2048 NT_STATUS_OK
ReadX 11977 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11979 NT_STATUS_OK
Close 11979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11973 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11982 NT_STATUS_OK
WriteX 11982 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11982 258 NT_STATUS_OK
WriteX 11982 0 10575 10575 NT_STATUS_OK
Flush 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11985 NT_STATUS_OK
ReadX 11985 0 4096 4096 NT_STATUS_OK
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11987 NT_STATUS_OK
LockX 11987 2147483538 1 NT_STATUS_OK
UnlockX 11987 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11987 1005 NT_STATUS_OK
ReadX 11987 0 512 512 NT_STATUS_OK
ReadX 11987 512 512 512 NT_STATUS_OK
ReadX 11987 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11987 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11987 1004 NT_STATUS_OK
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11988 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 1005 NT_STATUS_OK
ReadX 11988 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11989 NT_STATUS_OK
LockX 11989 2147483538 1 NT_STATUS_OK
UnlockX 11989 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11989 1005 NT_STATUS_OK
ReadX 11989 0 512 512 NT_STATUS_OK
ReadX 11989 512 512 512 NT_STATUS_OK
ReadX 11989 1024 512 512 NT_STATUS_OK
ReadX 11989 288 20 20 NT_STATUS_OK
ReadX 11989 308 2084 2084 NT_STATUS_OK
ReadX 11989 388 2084 2084 NT_STATUS_OK
ReadX 11989 388 2084 2084 NT_STATUS_OK
ReadX 11976 2157 1386 1386 NT_STATUS_OK
ReadX 11989 2472 399 399 NT_STATUS_OK
ReadX 11989 3072 1536 1536 NT_STATUS_OK
ReadX 11989 544 149 149 NT_STATUS_OK
ReadX 11989 693 485 485 NT_STATUS_OK
Close 11989 NT_STATUS_OK
ReadX 11976 2157 4096 4096 NT_STATUS_OK
ReadX 11976 6253 4096 4096 NT_STATUS_OK
ReadX 11976 10349 4096 4096 NT_STATUS_OK
ReadX 11976 14445 4096 4096 NT_STATUS_OK
ReadX 11976 18541 4096 4096 NT_STATUS_OK
ReadX 11976 22637 256 256 NT_STATUS_OK
ReadX 11976 22893 4096 4096 NT_STATUS_OK
ReadX 11976 26989 4096 4096 NT_STATUS_OK
ReadX 11976 31085 4096 4096 NT_STATUS_OK
ReadX 11976 35181 4096 4096 NT_STATUS_OK
ReadX 11976 39277 4096 4096 NT_STATUS_OK
ReadX 11976 43373 4096 4096 NT_STATUS_OK
ReadX 11976 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11976 2157 1024 1024 NT_STATUS_OK
ReadX 11976 1667 4688 4688 NT_STATUS_OK
ReadX 11976 6355 3516 3516 NT_STATUS_OK
ReadX 11976 9871 16384 16384 NT_STATUS_OK
ReadX 11976 26255 3771 3771 NT_STATUS_OK
ReadX 11976 30026 2048 2048 NT_STATUS_OK
ReadX 11976 32074 1024 1024 NT_STATUS_OK
ReadX 11976 33098 6652 6652 NT_STATUS_OK
ReadX 11976 39750 16384 16384 NT_STATUS_OK
ReadX 11976 56134 10496 10496 NT_STATUS_OK
ReadX 11976 66630 1784 1784 NT_STATUS_OK
ReadX 11976 68414 90 90 NT_STATUS_OK
ReadX 11976 68504 273 273 NT_STATUS_OK
ReadX 11976 68777 1600 1600 NT_STATUS_OK
ReadX 11976 70377 640 640 NT_STATUS_OK
ReadX 11976 71017 1280 1280 NT_STATUS_OK
ReadX 11976 72297 8464 8464 NT_STATUS_OK
ReadX 11976 80761 158 158 NT_STATUS_OK
ReadX 11976 80919 912 912 NT_STATUS_OK
ReadX 11976 81831 1980 1980 NT_STATUS_OK
ReadX 11976 83811 2256 2256 NT_STATUS_OK
ReadX 11976 86067 400 400 NT_STATUS_OK
ReadX 11976 86467 252 252 NT_STATUS_OK
ReadX 11976 86719 42 42 NT_STATUS_OK
ReadX 11976 86761 725 725 NT_STATUS_OK
ReadX 11976 2009 512 512 NT_STATUS_OK
ReadX 11976 3895 9 9 NT_STATUS_OK
ReadX 11976 3781 46 46 NT_STATUS_OK
ReadX 11976 4059 92 92 NT_STATUS_OK
ReadX 11976 3781 92 92 NT_STATUS_OK
ReadX 11976 3986 184 184 NT_STATUS_OK
ReadX 11976 3987 16384 16384 NT_STATUS_OK
ReadX 11976 3902 16384 16384 NT_STATUS_OK
ReadX 11976 3781 10240 10240 NT_STATUS_OK
ReadX 11976 3821 16384 16384 NT_STATUS_OK
ReadX 11976 3891 935 935 NT_STATUS_OK
ReadX 11976 4060 10240 10240 NT_STATUS_OK
ReadX 11976 4059 184 184 NT_STATUS_OK
ReadX 11976 256 184 184 NT_STATUS_OK
ReadX 11976 256 1026 1026 NT_STATUS_OK
ReadX 11976 3901 326 326 NT_STATUS_OK
ReadX 11976 3899 652 652 NT_STATUS_OK
ReadX 11976 256 2 2 NT_STATUS_OK
ReadX 11976 258 4948 4948 NT_STATUS_OK
Close 11976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11991 NT_STATUS_OK
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11994 NT_STATUS_OK
WriteX 11994 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11994 258 NT_STATUS_OK
WriteX 11994 0 65536 65536 NT_STATUS_OK
WriteX 11994 65536 65536 65536 NT_STATUS_OK
WriteX 11994 131072 65536 65536 NT_STATUS_OK
WriteX 11994 196608 65536 65536 NT_STATUS_OK
WriteX 11994 262144 65536 65536 NT_STATUS_OK
WriteX 11994 327680 65536 65536 NT_STATUS_OK
WriteX 11994 393216 65536 65536 NT_STATUS_OK
WriteX 11994 458752 65536 65536 NT_STATUS_OK
WriteX 11994 524288 65536 65536 NT_STATUS_OK
WriteX 11994 589824 35257 35257 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11999 NT_STATUS_OK
WriteX 11999 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11999 258 NT_STATUS_OK
WriteX 11999 0 65536 65536 NT_STATUS_OK
WriteX 11999 65536 65536 65536 NT_STATUS_OK
WriteX 11999 131072 65536 65536 NT_STATUS_OK
WriteX 11999 196608 65536 65536 NT_STATUS_OK
WriteX 11999 262144 65536 65536 NT_STATUS_OK
WriteX 11999 327680 65536 65536 NT_STATUS_OK
WriteX 11999 393216 65536 65536 NT_STATUS_OK
WriteX 11999 458752 65536 65536 NT_STATUS_OK
WriteX 11999 524288 65536 65536 NT_STATUS_OK
WriteX 11999 589824 57598 57598 NT_STATUS_OK
Close 11999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12001 NT_STATUS_OK
WriteX 12001 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12001 258 NT_STATUS_OK
WriteX 12001 0 12543 12543 NT_STATUS_OK
Flush 12001 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12003 NT_STATUS_OK
Close 12003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12007 NT_STATUS_OK
QUERY_FILE_INFORMATION 12007 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12007 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12007 1005 NT_STATUS_OK
ReadX 12007 1938 24 24 NT_STATUS_OK
ReadX 12007 1920 276 276 NT_STATUS_OK
ReadX 12007 1918 14 14 NT_STATUS_OK
ReadX 12007 1918 7 7 NT_STATUS_OK
ReadX 12007 1919 12 12 NT_STATUS_OK
ReadX 12007 1919 8 8 NT_STATUS_OK
ReadX 12007 1917 15 15 NT_STATUS_OK
ReadX 12007 0 16 16 NT_STATUS_OK
ReadX 12007 16 2048 2048 NT_STATUS_OK
ReadX 12007 2064 2048 2048 NT_STATUS_OK
ReadX 12007 257 2048 2048 NT_STATUS_OK
ReadX 12007 385 2048 2048 NT_STATUS_OK
ReadX 12007 513 2048 2048 NT_STATUS_OK
ReadX 12007 641 2048 2048 NT_STATUS_OK
ReadX 12007 769 2048 2048 NT_STATUS_OK
ReadX 12007 897 2048 2048 NT_STATUS_OK
ReadX 12007 1025 2048 2048 NT_STATUS_OK
ReadX 12007 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12012 NT_STATUS_OK
WriteX 12012 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12012 258 NT_STATUS_OK
WriteX 12012 0 11588 11588 NT_STATUS_OK
Flush 12012 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12013 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
Close 12007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12017 NT_STATUS_OK
WriteX 12017 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12017 258 NT_STATUS_OK
WriteX 12017 0 11615 11615 NT_STATUS_OK
Flush 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12019 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12023 NT_STATUS_OK
Close 12023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12026 NT_STATUS_OK
WriteX 12026 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12026 258 NT_STATUS_OK
WriteX 12026 0 65536 65536 NT_STATUS_OK
WriteX 12026 65536 16050 16050 NT_STATUS_OK
Close 12026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12006 1939 64 64 NT_STATUS_OK
ReadX 12006 128 248 248 NT_STATUS_OK
ReadX 12006 128 568 568 NT_STATUS_OK
ReadX 12006 3872 1536 1536 NT_STATUS_OK
ReadX 12006 3456 2560 2560 NT_STATUS_OK
ReadX 12006 3136 512 512 NT_STATUS_OK
ReadX 12006 2880 4096 4096 NT_STATUS_OK
ReadX 12006 3264 3072 3072 NT_STATUS_OK
ReadX 12006 320 4096 4096 NT_STATUS_OK
ReadX 12006 1024 4096 4096 NT_STATUS_OK
ReadX 12006 3616 4096 4096 NT_STATUS_OK
ReadX 12006 1939 64 64 NT_STATUS_OK
ReadX 12006 128 248 248 NT_STATUS_OK
ReadX 12006 128 608 608 NT_STATUS_OK
ReadX 12006 2858 1024 1024 NT_STATUS_OK
ReadX 12006 2810 4096 4096 NT_STATUS_OK
ReadX 12006 2826 4096 4096 NT_STATUS_OK
ReadX 12006 2580 2048 2048 NT_STATUS_OK
ReadX 12006 2800 2560 2560 NT_STATUS_OK
ReadX 12006 2100 4096 4096 NT_STATUS_OK
ReadX 12006 2084 4096 4096 NT_STATUS_OK
ReadX 12006 868 4096 4096 NT_STATUS_OK
ReadX 12006 2324 4096 4096 NT_STATUS_OK
ReadX 12006 884 4096 4096 NT_STATUS_OK
ReadX 12006 2604 1024 1024 NT_STATUS_OK
ReadX 12006 580 4096 4096 NT_STATUS_OK
ReadX 12006 596 4096 4096 NT_STATUS_OK
ReadX 12006 2752 4096 4096 NT_STATUS_OK
ReadX 12006 2842 1024 1024 NT_STATUS_OK
ReadX 12006 660 4096 4096 NT_STATUS_OK
ReadX 12006 2720 4096 4096 NT_STATUS_OK
ReadX 12006 2736 4096 4096 NT_STATUS_OK
ReadX 12006 628 4096 4096 NT_STATUS_OK
ReadX 12006 2704 4096 4096 NT_STATUS_OK
ReadX 12006 1556 4096 4096 NT_STATUS_OK
ReadX 12006 576 4096 4096 NT_STATUS_OK
ReadX 12006 3168 1536 1536 NT_STATUS_OK
ReadX 12006 832 4096 4096 NT_STATUS_OK
ReadX 12006 1088 4096 4096 NT_STATUS_OK
ReadX 12006 1344 4096 4096 NT_STATUS_OK
ReadX 12006 1600 4096 4096 NT_STATUS_OK
ReadX 12006 1856 4096 4096 NT_STATUS_OK
ReadX 12006 2112 4096 4096 NT_STATUS_OK
ReadX 12006 1892 4096 4096 NT_STATUS_OK
ReadX 12006 820 4096 4096 NT_STATUS_OK
ReadX 12006 788 4096 4096 NT_STATUS_OK
ReadX 12006 1604 4096 4096 NT_STATUS_OK
ReadX 12006 3648 4096 4096 NT_STATUS_OK
ReadX 12006 2608 4096 4096 NT_STATUS_OK
ReadX 12006 548 4096 4096 NT_STATUS_OK
ReadX 12006 740 4096 4096 NT_STATUS_OK
ReadX 12006 1344 4096 4096 NT_STATUS_OK
ReadX 12006 3392 4096 4096 NT_STATUS_OK
ReadX 12006 3904 4096 4096 NT_STATUS_OK
ReadX 12006 644 4096 4096 NT_STATUS_OK
ReadX 12006 676 4096 4096 NT_STATUS_OK
ReadX 12006 2688 4096 4096 NT_STATUS_OK
ReadX 12006 320 4096 4096 NT_STATUS_OK
ReadX 12006 900 4096 4096 NT_STATUS_OK
ReadX 12006 1908 4096 4096 NT_STATUS_OK
ReadX 12006 852 4096 4096 NT_STATUS_OK
ReadX 12006 724 4096 4096 NT_STATUS_OK
ReadX 12006 2292 4096 4096 NT_STATUS_OK
ReadX 12006 612 4096 4096 NT_STATUS_OK
ReadX 12006 388 4096 4096 NT_STATUS_OK
ReadX 12006 2368 4096 4096 NT_STATUS_OK
ReadX 12006 2624 4096 4096 NT_STATUS_OK
ReadX 12006 500 4096 4096 NT_STATUS_OK
ReadX 12006 356 4096 4096 NT_STATUS_OK
ReadX 12006 1024 4096 4096 NT_STATUS_OK
ReadX 12006 576 4096 4096 NT_STATUS_OK
ReadX 12006 340 4096 4096 NT_STATUS_OK
ReadX 12006 420 4096 4096 NT_STATUS_OK
ReadX 12006 1600 4096 4096 NT_STATUS_OK
ReadX 12006 404 4096 4096 NT_STATUS_OK
ReadX 12006 1428 4096 4096 NT_STATUS_OK
ReadX 12006 2656 4096 4096 NT_STATUS_OK
ReadX 12006 2624 4096 4096 NT_STATUS_OK
ReadX 12006 452 4096 4096 NT_STATUS_OK
ReadX 12006 692 4096 4096 NT_STATUS_OK
ReadX 12006 564 4096 4096 NT_STATUS_OK
ReadX 12006 372 4096 4096 NT_STATUS_OK
ReadX 12006 468 4096 4096 NT_STATUS_OK
ReadX 12006 484 4096 4096 NT_STATUS_OK
ReadX 12006 1088 4096 4096 NT_STATUS_OK
ReadX 12006 1924 4096 4096 NT_STATUS_OK
ReadX 12006 2768 4096 4096 NT_STATUS_OK
ReadX 12006 832 4096 4096 NT_STATUS_OK
ReadX 12006 836 4096 4096 NT_STATUS_OK
ReadX 12006 1856 4096 4096 NT_STATUS_OK
ReadX 12006 2640 4096 4096 NT_STATUS_OK
ReadX 12006 436 4096 4096 NT_STATUS_OK
ReadX 12006 1828 4096 4096 NT_STATUS_OK
ReadX 12006 804 4096 4096 NT_STATUS_OK
ReadX 12006 1860 4096 4096 NT_STATUS_OK
ReadX 12006 1812 4096 4096 NT_STATUS_OK
ReadX 12006 756 4096 4096 NT_STATUS_OK
ReadX 12006 1636 4096 4096 NT_STATUS_OK
ReadX 12006 772 4096 4096 NT_STATUS_OK
ReadX 12006 2036 4096 4096 NT_STATUS_OK
ReadX 12006 1220 4096 4096 NT_STATUS_OK
ReadX 12006 1652 4096 4096 NT_STATUS_OK
ReadX 12006 2588 4096 4096 NT_STATUS_OK
ReadX 12006 916 4096 4096 NT_STATUS_OK
ReadX 12006 260 4096 4096 NT_STATUS_OK
ReadX 12006 932 4096 4096 NT_STATUS_OK
ReadX 12006 2624 4096 4096 NT_STATUS_OK
ReadX 12006 308 4096 4096 NT_STATUS_OK
ReadX 12006 292 4096 4096 NT_STATUS_OK
ReadX 12006 1140 4096 4096 NT_STATUS_OK
ReadX 12006 276 4096 4096 NT_STATUS_OK
ReadX 12006 2020 4096 4096 NT_STATUS_OK
ReadX 12006 2880 4096 4096 NT_STATUS_OK
ReadX 12006 516 4096 4096 NT_STATUS_OK
ReadX 12006 1844 4096 4096 NT_STATUS_OK
ReadX 12006 1124 4096 4096 NT_STATUS_OK
ReadX 12006 3136 4096 4096 NT_STATUS_OK
ReadX 12006 324 4096 4096 NT_STATUS_OK
ReadX 12006 1156 4096 4096 NT_STATUS_OK
ReadX 12006 1172 4096 4096 NT_STATUS_OK
ReadX 12006 2112 4096 4096 NT_STATUS_OK
ReadX 12006 2368 4096 4096 NT_STATUS_OK
ReadX 12006 964 4096 4096 NT_STATUS_OK
ReadX 12006 980 4096 4096 NT_STATUS_OK
ReadX 12006 1012 4096 4096 NT_STATUS_OK
ReadX 12006 532 4096 4096 NT_STATUS_OK
ReadX 12006 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12006 1620 4096 4096 NT_STATUS_OK
ReadX 12006 1604 4096 4096 NT_STATUS_OK
ReadX 12006 2116 4096 4096 NT_STATUS_OK
ReadX 12006 2132 4096 4096 NT_STATUS_OK
ReadX 12006 2148 4096 4096 NT_STATUS_OK
ReadX 12006 2276 4096 4096 NT_STATUS_OK
ReadX 12006 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12028 NT_STATUS_OK
Close 12028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12031 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 1004 NT_STATUS_OK
Close 11986 NT_STATUS_OK
WriteX 12031 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12031 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 1004 NT_STATUS_OK
Close 11988 NT_STATUS_OK
WriteX 12031 0 65536 65536 NT_STATUS_OK
WriteX 12031 65536 64850 64850 NT_STATUS_OK
Close 12031 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12033 NT_STATUS_OK
WriteX 12033 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12033 258 NT_STATUS_OK
ReadX 12006 2068 4096 4096 NT_STATUS_OK
ReadX 12006 1588 4096 4096 NT_STATUS_OK
ReadX 12006 1572 4096 4096 NT_STATUS_OK
WriteX 12033 0 18630 18630 NT_STATUS_OK
Flush 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12006 612 4096 4096 NT_STATUS_OK
ReadX 12006 564 4096 4096 NT_STATUS_OK
ReadX 12006 1876 4096 4096 NT_STATUS_OK
ReadX 12006 628 4096 4096 NT_STATUS_OK
ReadX 12006 740 4096 4096 NT_STATUS_OK
ReadX 12006 724 4096 4096 NT_STATUS_OK
ReadX 12006 644 4096 4096 NT_STATUS_OK
ReadX 12006 2324 4096 4096 NT_STATUS_OK
ReadX 12006 660 4096 4096 NT_STATUS_OK
ReadX 12006 852 4096 4096 NT_STATUS_OK
ReadX 12006 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12006 2368 4096 4096 NT_STATUS_OK
ReadX 12006 1024 4096 4096 NT_STATUS_OK
ReadX 12006 320 4096 4096 NT_STATUS_OK
ReadX 12006 580 4096 4096 NT_STATUS_OK
ReadX 12006 3136 512 512 NT_STATUS_OK
ReadX 12006 2880 4096 4096 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12038 NT_STATUS_OK
ReadX 12038 61440 4096 4096 NT_STATUS_OK
ReadX 12038 126976 4096 4096 NT_STATUS_OK
WriteX 12038 0 65536 65536 NT_STATUS_OK
WriteX 12038 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 61440 4096 4096 NT_STATUS_OK
ReadX 12039 126976 4096 4096 NT_STATUS_OK
ReadX 12039 192512 4096 4096 NT_STATUS_OK
ReadX 12039 258048 4096 4096 NT_STATUS_OK
WriteX 12039 0 65536 65536 NT_STATUS_OK
WriteX 12039 65536 65536 65536 NT_STATUS_OK
WriteX 12039 131072 65536 65536 NT_STATUS_OK
WriteX 12039 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 61440 4096 4096 NT_STATUS_OK
ReadX 12040 126976 4096 4096 NT_STATUS_OK
ReadX 12040 192512 4096 4096 NT_STATUS_OK
ReadX 12040 258048 4096 4096 NT_STATUS_OK
ReadX 12040 323584 4096 4096 NT_STATUS_OK
ReadX 12040 389120 4096 4096 NT_STATUS_OK
ReadX 12040 454656 4096 4096 NT_STATUS_OK
ReadX 12040 520192 4096 4096 NT_STATUS_OK
WriteX 12040 0 65536 65536 NT_STATUS_OK
WriteX 12040 65536 65536 65536 NT_STATUS_OK
WriteX 12040 131072 65536 65536 NT_STATUS_OK
WriteX 12040 196608 65536 65536 NT_STATUS_OK
WriteX 12040 262144 65536 65536 NT_STATUS_OK
WriteX 12040 327680 65536 65536 NT_STATUS_OK
WriteX 12040 393216 65536 65536 NT_STATUS_OK
WriteX 12040 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12043 NT_STATUS_OK
WriteX 12043 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12043 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12041 0 8192 8192 NT_STATUS_OK
Flush 12041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12041 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12041 0 8192 8192 NT_STATUS_OK
Flush 12041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12041 0 8192 8192 NT_STATUS_OK
Flush 12041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12041 0 8192 8192 NT_STATUS_OK
Flush 12041 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12037 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12048 NT_STATUS_OK
WriteX 12048 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 258 NT_STATUS_OK
WriteX 12048 0 62591 62591 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12053 NT_STATUS_OK
WriteX 12053 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12053 258 NT_STATUS_OK
WriteX 12053 0 10845 10845 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12055 NT_STATUS_OK
Close 12055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12058 NT_STATUS_OK
WriteX 12058 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12058 258 NT_STATUS_OK
WriteX 12058 0 30118 30118 NT_STATUS_OK
Close 12058 NT_STATUS_OK
WriteX 12041 0 4096 4096 NT_STATUS_OK
WriteX 12043 0 64 64 NT_STATUS_OK
Close 12043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12060 NT_STATUS_OK
ReadX 12060 0 61440 61440 NT_STATUS_OK
ReadX 12060 61440 4096 4096 NT_STATUS_OK
ReadX 12060 65536 61440 61440 NT_STATUS_OK
ReadX 12060 126976 4096 4096 NT_STATUS_OK
ReadX 12060 131072 61440 61440 NT_STATUS_OK
ReadX 12060 192512 4096 4096 NT_STATUS_OK
ReadX 12060 196608 61440 61440 NT_STATUS_OK
ReadX 12060 258048 4096 4096 NT_STATUS_OK
ReadX 12060 262144 61440 61440 NT_STATUS_OK
ReadX 12060 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12061 NT_STATUS_OK
ReadX 12061 0 61440 61440 NT_STATUS_OK
ReadX 12061 61440 4096 4096 NT_STATUS_OK
ReadX 12061 65536 61440 61440 NT_STATUS_OK
ReadX 12061 126976 4096 4096 NT_STATUS_OK
ReadX 12061 131072 61440 61440 NT_STATUS_OK
ReadX 12061 192512 4096 4096 NT_STATUS_OK
ReadX 12061 196608 61440 61440 NT_STATUS_OK
ReadX 12061 258048 4096 4096 NT_STATUS_OK
ReadX 12061 262144 61440 61440 NT_STATUS_OK
ReadX 12061 323584 4096 4096 NT_STATUS_OK
ReadX 12061 327680 61440 61440 NT_STATUS_OK
ReadX 12061 389120 4096 4096 NT_STATUS_OK
ReadX 12061 393216 61440 61440 NT_STATUS_OK
ReadX 12061 454656 4096 4096 NT_STATUS_OK
ReadX 12061 458752 61440 61440 NT_STATUS_OK
ReadX 12061 520192 4096 4096 NT_STATUS_OK
ReadX 12061 524288 61440 61440 NT_STATUS_OK
ReadX 12061 585728 4096 4096 NT_STATUS_OK
ReadX 12061 589824 61440 61440 NT_STATUS_OK
ReadX 12061 651264 4096 4096 NT_STATUS_OK
ReadX 12061 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12062 NT_STATUS_OK
ReadX 12062 0 61440 61440 NT_STATUS_OK
ReadX 12062 61440 4096 4096 NT_STATUS_OK
ReadX 12062 65536 61440 61440 NT_STATUS_OK
ReadX 12062 126976 4096 4096 NT_STATUS_OK
ReadX 12062 131072 61440 61440 NT_STATUS_OK
ReadX 12062 192512 4096 4096 NT_STATUS_OK
ReadX 12062 196608 61440 61440 NT_STATUS_OK
ReadX 12062 258048 4096 4096 NT_STATUS_OK
ReadX 12062 262144 61440 61440 NT_STATUS_OK
ReadX 12062 323584 4096 4096 NT_STATUS_OK
ReadX 12062 327680 61440 61440 NT_STATUS_OK
ReadX 12062 389120 4096 4096 NT_STATUS_OK
ReadX 12062 393216 61440 61440 NT_STATUS_OK
ReadX 12062 454656 4096 4096 NT_STATUS_OK
ReadX 12062 458752 61440 61440 NT_STATUS_OK
ReadX 12062 520192 4096 4096 NT_STATUS_OK
ReadX 12062 524288 61440 61440 NT_STATUS_OK
ReadX 12062 585728 4096 4096 NT_STATUS_OK
ReadX 12062 589824 61440 61440 NT_STATUS_OK
ReadX 12062 651264 4096 4096 NT_STATUS_OK
ReadX 12062 655360 61440 61440 NT_STATUS_OK
ReadX 12062 716800 4096 4096 NT_STATUS_OK
ReadX 12062 720896 61440 61440 NT_STATUS_OK
ReadX 12062 782336 4096 4096 NT_STATUS_OK
ReadX 12062 786432 61440 61440 NT_STATUS_OK
ReadX 12062 847872 4096 4096 NT_STATUS_OK
ReadX 12062 851968 61440 61440 NT_STATUS_OK
ReadX 12062 913408 4096 4096 NT_STATUS_OK
ReadX 12062 917504 61440 61440 NT_STATUS_OK
ReadX 12062 978944 4096 4096 NT_STATUS_OK
ReadX 12062 983040 61440 61440 NT_STATUS_OK
ReadX 12062 1044480 4096 4096 NT_STATUS_OK
ReadX 12062 1048576 61440 61440 NT_STATUS_OK
ReadX 12062 1110016 4096 4096 NT_STATUS_OK
ReadX 12062 1114112 61440 61440 NT_STATUS_OK
ReadX 12062 1175552 4096 4096 NT_STATUS_OK
ReadX 12062 1179648 61440 61440 NT_STATUS_OK
ReadX 12062 1241088 4096 4096 NT_STATUS_OK
ReadX 12062 1245184 61440 61440 NT_STATUS_OK
ReadX 12062 1306624 4096 4096 NT_STATUS_OK
ReadX 12062 1310720 61440 61440 NT_STATUS_OK
ReadX 12062 1372160 4096 4096 NT_STATUS_OK
ReadX 12062 1376256 61440 61440 NT_STATUS_OK
ReadX 12062 1437696 4096 4096 NT_STATUS_OK
ReadX 12062 1441792 61440 61440 NT_STATUS_OK
ReadX 12062 1503232 4096 4096 NT_STATUS_OK
ReadX 12062 1507328 61440 61440 NT_STATUS_OK
ReadX 12062 1568768 4096 4096 NT_STATUS_OK
ReadX 12062 1572864 61440 61440 NT_STATUS_OK
ReadX 12062 1634304 4096 4096 NT_STATUS_OK
ReadX 12062 1638400 61440 61440 NT_STATUS_OK
ReadX 12062 1699840 4096 4096 NT_STATUS_OK
ReadX 12062 1703936 61440 61440 NT_STATUS_OK
ReadX 12062 1765376 4096 4096 NT_STATUS_OK
ReadX 12062 1769472 61440 61440 NT_STATUS_OK
ReadX 12062 1830912 4096 4096 NT_STATUS_OK
ReadX 12062 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12063 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Close 12061 NT_STATUS_OK
Close 12062 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12065 NT_STATUS_OK
ReadX 12065 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12067 NT_STATUS_OK
ReadX 12067 0 4096 4096 NT_STATUS_OK
ReadX 12067 4096 4096 4096 NT_STATUS_OK
ReadX 12067 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12071 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12071 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 8192 8192 NT_STATUS_OK
ReadX 12075 8192 8192 8192 NT_STATUS_OK
ReadX 12075 16384 8192 8192 NT_STATUS_OK
ReadX 12075 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12080 NT_STATUS_OK
WriteX 12080 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12080 258 NT_STATUS_OK
WriteX 12080 0 10438 10438 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12081 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12084 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12086 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12087 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
ReadX 12089 4096 4096 4096 NT_STATUS_OK
ReadX 12089 8192 4096 4096 NT_STATUS_OK
ReadX 12089 12288 8192 8192 NT_STATUS_OK
ReadX 12089 20480 8192 8192 NT_STATUS_OK
ReadX 12089 28672 8192 8192 NT_STATUS_OK
ReadX 12089 36864 8192 8192 NT_STATUS_OK
ReadX 12089 45056 8192 8192 NT_STATUS_OK
ReadX 12089 53248 8192 8192 NT_STATUS_OK
ReadX 12089 61440 8192 8192 NT_STATUS_OK
ReadX 12089 69632 8192 8192 NT_STATUS_OK
ReadX 12089 77824 8192 8192 NT_STATUS_OK
ReadX 12089 86016 8192 8192 NT_STATUS_OK
ReadX 12089 94208 8192 8192 NT_STATUS_OK
ReadX 12089 102400 8192 8192 NT_STATUS_OK
ReadX 12089 110592 8192 8192 NT_STATUS_OK
ReadX 12089 118784 8192 8192 NT_STATUS_OK
ReadX 12089 126976 8192 8192 NT_STATUS_OK
ReadX 12089 135168 8192 8192 NT_STATUS_OK
ReadX 12089 143360 8192 8192 NT_STATUS_OK
ReadX 12089 151552 8192 8192 NT_STATUS_OK
ReadX 12089 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12082 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12091 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12094 NT_STATUS_OK
WriteX 12094 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12094 258 NT_STATUS_OK
WriteX 12094 0 28489 28489 NT_STATUS_OK
Close 12094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12097 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12100 NT_STATUS_OK
ReadX 12100 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12101 NT_STATUS_OK
ReadX 12101 0 8192 8192 NT_STATUS_OK
ReadX 12101 8192 8192 8192 NT_STATUS_OK
ReadX 12101 16384 8192 8192 NT_STATUS_OK
ReadX 12101 24576 8192 8192 NT_STATUS_OK
ReadX 12101 32768 16384 16384 NT_STATUS_OK
ReadX 12101 49152 8192 8192 NT_STATUS_OK
ReadX 12101 57344 8192 8192 NT_STATUS_OK
ReadX 12101 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12103 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12101 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12106 NT_STATUS_OK
WriteX 12106 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12106 258 NT_STATUS_OK
WriteX 12106 0 29253 29253 NT_STATUS_OK
Close 12106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12107 NT_STATUS_OK
Close 12107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12113 NT_STATUS_OK
WriteX 12113 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12113 258 NT_STATUS_OK
WriteX 12113 0 30183 30183 NT_STATUS_OK
Close 12113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12116 NT_STATUS_OK
WriteX 12116 0 510 510 NT_STATUS_OK
WriteX 12116 510 512 512 NT_STATUS_OK
WriteX 12116 1022 510 510 NT_STATUS_OK
WriteX 12116 1532 510 510 NT_STATUS_OK
WriteX 12116 2042 168 168 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12117 NT_STATUS_OK
Close 12117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12119 NT_STATUS_OK
ReadX 12119 0 4096 4096 NT_STATUS_OK
WriteX 12119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12120 NT_STATUS_OK
ReadX 12120 61440 4096 4096 NT_STATUS_OK
ReadX 12120 126976 4096 4096 NT_STATUS_OK
WriteX 12120 0 65536 65536 NT_STATUS_OK
WriteX 12120 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 61440 4096 4096 NT_STATUS_OK
ReadX 12121 126976 4096 4096 NT_STATUS_OK
ReadX 12121 192512 4096 4096 NT_STATUS_OK
ReadX 12121 258048 4096 4096 NT_STATUS_OK
WriteX 12121 0 65536 65536 NT_STATUS_OK
WriteX 12121 65536 65536 65536 NT_STATUS_OK
WriteX 12121 131072 65536 65536 NT_STATUS_OK
WriteX 12121 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 61440 4096 4096 NT_STATUS_OK
ReadX 12122 126976 4096 4096 NT_STATUS_OK
ReadX 12122 192512 4096 4096 NT_STATUS_OK
ReadX 12122 258048 4096 4096 NT_STATUS_OK
ReadX 12122 323584 4096 4096 NT_STATUS_OK
ReadX 12122 389120 4096 4096 NT_STATUS_OK
ReadX 12122 454656 4096 4096 NT_STATUS_OK
ReadX 12122 520192 4096 4096 NT_STATUS_OK
WriteX 12122 0 65536 65536 NT_STATUS_OK
WriteX 12122 65536 65536 65536 NT_STATUS_OK
WriteX 12122 131072 65536 65536 NT_STATUS_OK
WriteX 12122 196608 65536 65536 NT_STATUS_OK
WriteX 12122 262144 65536 65536 NT_STATUS_OK
WriteX 12122 327680 65536 65536 NT_STATUS_OK
WriteX 12122 393216 65536 65536 NT_STATUS_OK
WriteX 12122 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12119 NT_STATUS_OK
Close 12120 NT_STATUS_OK
Close 12121 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12125 NT_STATUS_OK
Close 12125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12129 NT_STATUS_OK
Close 12129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12134 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12147 NT_STATUS_OK
Close 12147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12162 NT_STATUS_OK
Close 12162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12172 NT_STATUS_OK
Close 12172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12188 NT_STATUS_OK
Close 12188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12191 NT_STATUS_OK
WriteX 12191 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12191 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12191 0 65536 65536 NT_STATUS_OK
WriteX 12191 65536 65536 65536 NT_STATUS_OK
WriteX 12191 131072 65536 65536 NT_STATUS_OK
WriteX 12191 196608 65536 65536 NT_STATUS_OK
WriteX 12191 262144 26634 26634 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12197 NT_STATUS_OK
Close 12197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
Close 12198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12199 NT_STATUS_OK
ReadX 12199 0 4096 4096 NT_STATUS_OK
ReadX 12199 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12200 NT_STATUS_OK
Close 12200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12199 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12204 NT_STATUS_OK
Close 12204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12207 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12209 NT_STATUS_OK
Close 12209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12213 NT_STATUS_OK
Close 12213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12216 NT_STATUS_OK
Close 12216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12218 NT_STATUS_OK
Close 12218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12227 NT_STATUS_OK
Close 12227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12256 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12266 NT_STATUS_OK
Close 12266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12276 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
Close 12278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12279 NT_STATUS_OK
ReadX 12279 0 4096 4096 NT_STATUS_OK
Close 12279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12280 NT_STATUS_OK
ReadX 12280 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12292 NT_STATUS_OK
ReadX 12292 0 4096 4096 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12280 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12323 0 4096 4096 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
ReadX 12325 4096 4096 4096 NT_STATUS_OK
ReadX 12325 8192 4096 4096 NT_STATUS_OK
ReadX 12325 12288 4096 4096 NT_STATUS_OK
ReadX 12325 16384 4096 4096 NT_STATUS_OK
ReadX 12325 20480 4096 4096 NT_STATUS_OK
ReadX 12325 24576 4096 4096 NT_STATUS_OK
ReadX 12325 28672 4096 4096 NT_STATUS_OK
ReadX 12325 32768 4096 4096 NT_STATUS_OK
ReadX 12325 36864 4096 4096 NT_STATUS_OK
ReadX 12325 40960 4096 4096 NT_STATUS_OK
ReadX 12325 45056 4096 4096 NT_STATUS_OK
ReadX 12325 49152 4096 4096 NT_STATUS_OK
ReadX 12325 53248 4096 4096 NT_STATUS_OK
ReadX 12325 57344 4096 4096 NT_STATUS_OK
ReadX 12325 61440 4096 4096 NT_STATUS_OK
ReadX 12325 65536 4096 4096 NT_STATUS_OK
ReadX 12325 69632 4096 4096 NT_STATUS_OK
ReadX 12325 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12325 1004 NT_STATUS_OK
WriteX 12325 0 4096 4096 NT_STATUS_OK
Close 12325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12326 NT_STATUS_OK
SET_FILE_INFORMATION 12326 1004 NT_STATUS_OK
Close 12326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12331 NT_STATUS_OK
WriteX 12331 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 258 NT_STATUS_OK
WriteX 12331 0 65536 65536 NT_STATUS_OK
WriteX 12331 65536 19979 19979 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12332 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 1004 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
SET_FILE_INFORMATION 12332 1004 NT_STATUS_OK
WriteX 12332 0 4096 4096 NT_STATUS_OK
Flush 12332 NT_STATUS_OK
Close 12332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12333 NT_STATUS_OK
ReadX 12333 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12334 NT_STATUS_OK
ReadX 12334 0 4096 4096 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 4096 4096 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12334 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12343 NT_STATUS_OK
WriteX 12343 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 258 NT_STATUS_OK
WriteX 12343 0 65536 65536 NT_STATUS_OK
WriteX 12343 65536 17654 17654 NT_STATUS_OK
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Flush 12344 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Flush 12344 NT_STATUS_OK
QUERY_FILE_INFORMATION 12344 1004 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Flush 12344 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Flush 12344 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Flush 12344 NT_STATUS_OK
SET_FILE_INFORMATION 12344 1004 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Flush 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12345 NT_STATUS_OK
SET_FILE_INFORMATION 12345 1004 NT_STATUS_OK
Close 12345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
ReadX 12349 4096 4096 4096 NT_STATUS_OK
ReadX 12349 8192 4096 4096 NT_STATUS_OK
ReadX 12349 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12349 16384 4096 4096 NT_STATUS_OK
ReadX 12349 20480 4096 4096 NT_STATUS_OK
ReadX 12349 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
Close 12350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
Close 12351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12352 1004 NT_STATUS_OK
WriteX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12355 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12358 NT_STATUS_OK
WriteX 12358 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 258 NT_STATUS_OK
WriteX 12358 0 65536 65536 NT_STATUS_OK
WriteX 12358 65536 19490 19490 NT_STATUS_OK
Close 12358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 4096 4096 NT_STATUS_OK
WriteX 12359 0 4096 4096 NT_STATUS_OK
Flush 12359 NT_STATUS_OK
WriteX 12359 0 4096 4096 NT_STATUS_OK
Flush 12359 NT_STATUS_OK
QUERY_FILE_INFORMATION 12359 1004 NT_STATUS_OK
WriteX 12359 0 4096 4096 NT_STATUS_OK
Flush 12359 NT_STATUS_OK
WriteX 12359 0 4096 4096 NT_STATUS_OK
Flush 12359 NT_STATUS_OK
WriteX 12359 0 4096 4096 NT_STATUS_OK
Flush 12359 NT_STATUS_OK
SET_FILE_INFORMATION 12359 1004 NT_STATUS_OK
WriteX 12359 0 4096 4096 NT_STATUS_OK
Flush 12359 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12360 NT_STATUS_OK
SET_FILE_INFORMATION 12360 1004 NT_STATUS_OK
Close 12360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12364 0 4096 4096 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
ReadX 12366 4096 4096 4096 NT_STATUS_OK
ReadX 12366 8192 4096 4096 NT_STATUS_OK
ReadX 12366 12288 4096 4096 NT_STATUS_OK
ReadX 12366 16384 4096 4096 NT_STATUS_OK
ReadX 12366 20480 4096 4096 NT_STATUS_OK
ReadX 12366 24576 4096 4096 NT_STATUS_OK
ReadX 12366 28672 4096 4096 NT_STATUS_OK
ReadX 12366 32768 4096 4096 NT_STATUS_OK
ReadX 12366 36864 4096 4096 NT_STATUS_OK
ReadX 12366 40960 4096 4096 NT_STATUS_OK
ReadX 12366 45056 4096 4096 NT_STATUS_OK
ReadX 12366 49152 4096 4096 NT_STATUS_OK
ReadX 12366 53248 4096 4096 NT_STATUS_OK
ReadX 12366 57344 4096 4096 NT_STATUS_OK
ReadX 12366 61440 4096 4096 NT_STATUS_OK
ReadX 12366 65536 4096 4096 NT_STATUS_OK
ReadX 12366 69632 4096 4096 NT_STATUS_OK
ReadX 12366 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12366 1004 NT_STATUS_OK
WriteX 12366 0 4096 4096 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12367 NT_STATUS_OK
SET_FILE_INFORMATION 12367 1004 NT_STATUS_OK
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12372 NT_STATUS_OK
WriteX 12372 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12372 258 NT_STATUS_OK
WriteX 12372 0 65536 65536 NT_STATUS_OK
WriteX 12372 65536 8866 8866 NT_STATUS_OK
Close 12372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 4096 4096 NT_STATUS_OK
WriteX 12373 0 4096 4096 NT_STATUS_OK
Flush 12373 NT_STATUS_OK
SET_FILE_INFORMATION 12373 1004 NT_STATUS_OK
WriteX 12373 0 4096 4096 NT_STATUS_OK
Flush 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 0 4096 4096 NT_STATUS_OK
Close 12375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 0 4096 4096 NT_STATUS_OK
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12377 1004 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12378 NT_STATUS_OK
Close 12378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Close 12368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12383 NT_STATUS_OK
WriteX 12383 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12383 258 NT_STATUS_OK
WriteX 12383 0 65536 65536 NT_STATUS_OK
WriteX 12383 65536 9298 9298 NT_STATUS_OK
Close 12383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 0 4096 4096 NT_STATUS_OK
WriteX 12384 0 4096 4096 NT_STATUS_OK
Flush 12384 NT_STATUS_OK
SET_FILE_INFORMATION 12384 1004 NT_STATUS_OK
WriteX 12384 0 4096 4096 NT_STATUS_OK
Flush 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12385 NT_STATUS_OK
SET_FILE_INFORMATION 12385 1004 NT_STATUS_OK
Close 12385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12386 NT_STATUS_OK
ReadX 12386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12390 0 4096 4096 NT_STATUS_OK
Close 12390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12391 4096 4096 4096 NT_STATUS_OK
ReadX 12391 8192 4096 4096 NT_STATUS_OK
ReadX 12391 12288 4096 4096 NT_STATUS_OK
ReadX 12391 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12393 NT_STATUS_OK
ReadX 12393 0 4096 4096 NT_STATUS_OK
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12394 1004 NT_STATUS_OK
WriteX 12394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12395 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12391 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12400 NT_STATUS_OK
WriteX 12400 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12400 258 NT_STATUS_OK
WriteX 12400 0 65536 65536 NT_STATUS_OK
WriteX 12400 65536 11540 11540 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
WriteX 12401 0 4096 4096 NT_STATUS_OK
Flush 12401 NT_STATUS_OK
SET_FILE_INFORMATION 12401 1004 NT_STATUS_OK
WriteX 12401 0 4096 4096 NT_STATUS_OK
Flush 12401 NT_STATUS_OK
Close 12401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12402 NT_STATUS_OK
SET_FILE_INFORMATION 12402 1004 NT_STATUS_OK
Close 12402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 61440 4096 4096 NT_STATUS_OK
ReadX 12406 126976 4096 4096 NT_STATUS_OK
WriteX 12406 0 65536 65536 NT_STATUS_OK
WriteX 12406 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 61440 4096 4096 NT_STATUS_OK
ReadX 12407 126976 4096 4096 NT_STATUS_OK
ReadX 12407 192512 4096 4096 NT_STATUS_OK
ReadX 12407 258048 4096 4096 NT_STATUS_OK
WriteX 12407 0 65536 65536 NT_STATUS_OK
WriteX 12407 65536 65536 65536 NT_STATUS_OK
WriteX 12407 131072 65536 65536 NT_STATUS_OK
WriteX 12407 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 61440 4096 4096 NT_STATUS_OK
ReadX 12408 126976 4096 4096 NT_STATUS_OK
ReadX 12408 192512 4096 4096 NT_STATUS_OK
ReadX 12408 258048 4096 4096 NT_STATUS_OK
ReadX 12408 323584 4096 4096 NT_STATUS_OK
ReadX 12408 389120 4096 4096 NT_STATUS_OK
ReadX 12408 454656 4096 4096 NT_STATUS_OK
ReadX 12408 520192 4096 4096 NT_STATUS_OK
WriteX 12408 0 65536 65536 NT_STATUS_OK
WriteX 12408 65536 65536 65536 NT_STATUS_OK
WriteX 12408 131072 65536 65536 NT_STATUS_OK
WriteX 12408 196608 65536 65536 NT_STATUS_OK
WriteX 12408 262144 65536 65536 NT_STATUS_OK
WriteX 12408 327680 65536 65536 NT_STATUS_OK
WriteX 12408 393216 65536 65536 NT_STATUS_OK
WriteX 12408 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
ReadX 12409 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12410 NT_STATUS_OK
WriteX 12410 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12410 258 NT_STATUS_OK
WriteX 12410 0 53 53 NT_STATUS_OK
Close 12410 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12411 NT_STATUS_OK
Close 12411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12409 8192 4096 4096 NT_STATUS_OK
ReadX 12409 12288 4096 4096 NT_STATUS_OK
WriteX 12413 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12413 258 NT_STATUS_OK
ReadX 12409 16384 4096 4096 NT_STATUS_OK
ReadX 12409 20480 4096 4096 NT_STATUS_OK
WriteX 12413 0 15360 15360 NT_STATUS_OK
Close 12413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12414 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12414 1004 NT_STATUS_OK
WriteX 12414 0 4096 4096 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12417 4096 4096 4096 NT_STATUS_OK
ReadX 12417 8192 4096 4096 NT_STATUS_OK
ReadX 12417 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
ReadX 12420 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12421 NT_STATUS_OK
ReadX 12421 0 4096 4096 NT_STATUS_OK
ReadX 12421 4096 4096 4096 NT_STATUS_OK
ReadX 12421 8192 4096 4096 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12422 NT_STATUS_OK
WriteX 12422 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12422 258 NT_STATUS_OK
WriteX 12422 0 15360 15360 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12423 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12423 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12427 NT_STATUS_OK
SET_FILE_INFORMATION 12427 1004 NT_STATUS_OK
Close 12427 NT_STATUS_OK
WriteX 12423 0 4096 4096 NT_STATUS_OK
Close 12423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12430 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
ReadX 12430 4096 4096 4096 NT_STATUS_OK
ReadX 12430 8192 4096 4096 NT_STATUS_OK
ReadX 12430 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12430 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12430 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12431 NT_STATUS_OK
ReadX 12431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12432 NT_STATUS_OK
WriteX 12432 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12432 258 NT_STATUS_OK
WriteX 12432 0 53 53 NT_STATUS_OK
Close 12432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12431 4096 4096 4096 NT_STATUS_OK
ReadX 12431 8192 4096 4096 NT_STATUS_OK
ReadX 12431 12288 4096 4096 NT_STATUS_OK
WriteX 12435 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
WriteX 12435 0 12006 12006 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12436 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12436 1004 NT_STATUS_OK
WriteX 12436 0 4096 4096 NT_STATUS_OK
Close 12436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12437 NT_STATUS_OK
Close 12437 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12439 4096 4096 4096 NT_STATUS_OK
ReadX 12439 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12442 NT_STATUS_OK
WriteX 12442 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12442 258 NT_STATUS_OK
WriteX 12442 0 11991 11991 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12443 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12443 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12447 NT_STATUS_OK
SET_FILE_INFORMATION 12447 1004 NT_STATUS_OK
Close 12447 NT_STATUS_OK
WriteX 12443 0 4096 4096 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12450 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12450 1004 NT_STATUS_OK
ReadX 12450 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12450 1004 NT_STATUS_OK
WriteX 12450 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12450 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12450 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12450 1004 NT_STATUS_OK
Close 12426 NT_STATUS_OK
WriteX 12430 0 19054 19054 NT_STATUS_OK
WriteX 12450 0 12288 12288 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12453 NT_STATUS_OK
Close 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12455 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 61440 61440 NT_STATUS_OK
ReadX 12457 61440 4096 4096 NT_STATUS_OK
ReadX 12457 65536 61440 61440 NT_STATUS_OK
ReadX 12457 126976 4096 4096 NT_STATUS_OK
ReadX 12457 131072 61440 61440 NT_STATUS_OK
ReadX 12457 192512 4096 4096 NT_STATUS_OK
ReadX 12457 196608 61440 61440 NT_STATUS_OK
ReadX 12457 258048 4096 4096 NT_STATUS_OK
ReadX 12457 262144 61440 61440 NT_STATUS_OK
ReadX 12457 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 61440 61440 NT_STATUS_OK
ReadX 12458 61440 4096 4096 NT_STATUS_OK
ReadX 12458 65536 61440 61440 NT_STATUS_OK
ReadX 12458 126976 4096 4096 NT_STATUS_OK
ReadX 12458 131072 61440 61440 NT_STATUS_OK
ReadX 12458 192512 4096 4096 NT_STATUS_OK
ReadX 12458 196608 61440 61440 NT_STATUS_OK
ReadX 12458 258048 4096 4096 NT_STATUS_OK
ReadX 12458 262144 61440 61440 NT_STATUS_OK
ReadX 12458 323584 4096 4096 NT_STATUS_OK
ReadX 12458 327680 61440 61440 NT_STATUS_OK
ReadX 12458 389120 4096 4096 NT_STATUS_OK
ReadX 12458 393216 61440 61440 NT_STATUS_OK
ReadX 12458 454656 4096 4096 NT_STATUS_OK
ReadX 12458 458752 61440 61440 NT_STATUS_OK
ReadX 12458 520192 4096 4096 NT_STATUS_OK
ReadX 12458 524288 61440 61440 NT_STATUS_OK
ReadX 12458 585728 4096 4096 NT_STATUS_OK
ReadX 12458 589824 61440 61440 NT_STATUS_OK
ReadX 12458 651264 4096 4096 NT_STATUS_OK
ReadX 12458 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 61440 61440 NT_STATUS_OK
ReadX 12459 61440 4096 4096 NT_STATUS_OK
ReadX 12459 65536 61440 61440 NT_STATUS_OK
ReadX 12459 126976 4096 4096 NT_STATUS_OK
ReadX 12459 131072 61440 61440 NT_STATUS_OK
ReadX 12459 192512 4096 4096 NT_STATUS_OK
ReadX 12459 196608 61440 61440 NT_STATUS_OK
ReadX 12459 258048 4096 4096 NT_STATUS_OK
ReadX 12459 262144 61440 61440 NT_STATUS_OK
ReadX 12459 323584 4096 4096 NT_STATUS_OK
ReadX 12459 327680 61440 61440 NT_STATUS_OK
ReadX 12459 389120 4096 4096 NT_STATUS_OK
ReadX 12459 393216 61440 61440 NT_STATUS_OK
ReadX 12459 454656 4096 4096 NT_STATUS_OK
ReadX 12459 458752 61440 61440 NT_STATUS_OK
ReadX 12459 520192 4096 4096 NT_STATUS_OK
ReadX 12459 524288 61440 61440 NT_STATUS_OK
ReadX 12459 585728 4096 4096 NT_STATUS_OK
ReadX 12459 589824 61440 61440 NT_STATUS_OK
ReadX 12459 651264 4096 4096 NT_STATUS_OK
ReadX 12459 655360 61440 61440 NT_STATUS_OK
ReadX 12459 716800 4096 4096 NT_STATUS_OK
ReadX 12459 720896 61440 61440 NT_STATUS_OK
ReadX 12459 782336 4096 4096 NT_STATUS_OK
ReadX 12459 786432 61440 61440 NT_STATUS_OK
ReadX 12459 847872 4096 4096 NT_STATUS_OK
ReadX 12459 851968 61440 61440 NT_STATUS_OK
ReadX 12459 913408 4096 4096 NT_STATUS_OK
ReadX 12459 917504 61440 61440 NT_STATUS_OK
ReadX 12459 978944 4096 4096 NT_STATUS_OK
ReadX 12459 983040 61440 61440 NT_STATUS_OK
ReadX 12459 1044480 4096 4096 NT_STATUS_OK
ReadX 12459 1048576 61440 61440 NT_STATUS_OK
ReadX 12459 1110016 4096 4096 NT_STATUS_OK
ReadX 12459 1114112 61440 61440 NT_STATUS_OK
ReadX 12459 1175552 4096 4096 NT_STATUS_OK
ReadX 12459 1179648 61440 61440 NT_STATUS_OK
ReadX 12459 1241088 4096 4096 NT_STATUS_OK
ReadX 12459 1245184 61440 61440 NT_STATUS_OK
ReadX 12459 1306624 4096 4096 NT_STATUS_OK
ReadX 12459 1310720 61440 61440 NT_STATUS_OK
ReadX 12459 1372160 4096 4096 NT_STATUS_OK
ReadX 12459 1376256 61440 61440 NT_STATUS_OK
ReadX 12459 1437696 4096 4096 NT_STATUS_OK
ReadX 12459 1441792 61440 61440 NT_STATUS_OK
ReadX 12459 1503232 4096 4096 NT_STATUS_OK
ReadX 12459 1507328 61440 61440 NT_STATUS_OK
ReadX 12459 1568768 4096 4096 NT_STATUS_OK
ReadX 12459 1572864 61440 61440 NT_STATUS_OK
ReadX 12459 1634304 4096 4096 NT_STATUS_OK
ReadX 12459 1638400 61440 61440 NT_STATUS_OK
ReadX 12459 1699840 4096 4096 NT_STATUS_OK
ReadX 12459 1703936 61440 61440 NT_STATUS_OK
ReadX 12459 1765376 4096 4096 NT_STATUS_OK
ReadX 12459 1769472 61440 61440 NT_STATUS_OK
ReadX 12459 1830912 4096 4096 NT_STATUS_OK
ReadX 12459 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12466 NT_STATUS_OK
QUERY_FILE_INFORMATION 12466 1004 NT_STATUS_OK
WriteX 12466 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12466 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12467 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12468 NT_STATUS_OK
WriteX 12468 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 258 NT_STATUS_OK
WriteX 12468 0 491 491 NT_STATUS_OK
Close 12468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12466 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12471 NT_STATUS_OK
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12472 NT_STATUS_OK
WriteX 12472 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 258 NT_STATUS_OK
WriteX 12472 0 543 543 NT_STATUS_OK
Close 12472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 258 NT_STATUS_OK
WriteX 12486 0 2048 2048 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
Flush 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12492 NT_STATUS_OK
WriteX 12492 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
WriteX 12492 0 2048 2048 NT_STATUS_OK
Close 12492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12493 NT_STATUS_OK
ReadX 12493 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12498 NT_STATUS_OK
WriteX 12498 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 258 NT_STATUS_OK
WriteX 12498 0 2048 2048 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 2048 2048 NT_STATUS_OK
ReadX 12477 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
WriteX 12477 0 8192 8192 NT_STATUS_OK
WriteX 12478 0 4096 4096 NT_STATUS_OK
WriteX 12479 0 4096 4096 NT_STATUS_OK
ReadX 12493 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12503 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12502 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12493 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12510 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12523 NT_STATUS_OK
QUERY_FILE_INFORMATION 12523 1004 NT_STATUS_OK
WriteX 12523 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12523 258 NT_STATUS_OK
WriteX 12523 0 2048 2048 NT_STATUS_OK
Close 12523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 258 NT_STATUS_OK
WriteX 12531 0 2048 2048 NT_STATUS_OK
Close 12531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12524 0 4096 4096 NT_STATUS_OK
Flush 12524 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
Flush 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12524 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12526 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12534 NT_STATUS_OK
WriteX 12534 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12534 258 NT_STATUS_OK
WriteX 12534 0 4096 4096 NT_STATUS_OK
Close 12534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12536 NT_STATUS_OK
Close 12536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12537 NT_STATUS_OK
WriteX 12537 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 258 NT_STATUS_OK
WriteX 12537 0 4096 4096 NT_STATUS_OK
Close 12537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12538 0 4096 4096 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12545 NT_STATUS_OK
WriteX 12545 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12545 258 NT_STATUS_OK
WriteX 12545 0 2048 2048 NT_STATUS_OK
Close 12545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12560 NT_STATUS_OK
QUERY_FILE_INFORMATION 12560 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12562 NT_STATUS_OK
QUERY_FILE_INFORMATION 12562 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12565 NT_STATUS_OK
ReadX 12565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12582 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 1004 NT_STATUS_OK
WriteX 12582 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 258 NT_STATUS_OK
WriteX 12582 0 2048 2048 NT_STATUS_OK
Close 12582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12584 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12594 NT_STATUS_OK
QUERY_FILE_INFORMATION 12594 1004 NT_STATUS_OK
WriteX 12594 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12594 258 NT_STATUS_OK
WriteX 12594 0 2048 2048 NT_STATUS_OK
Close 12594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12602 NT_STATUS_OK
QUERY_FILE_INFORMATION 12602 1004 NT_STATUS_OK
WriteX 12602 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12602 258 NT_STATUS_OK
WriteX 12602 0 2048 2048 NT_STATUS_OK
Close 12602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Flush 12583 NT_STATUS_OK
WriteX 12595 0 4096 4096 NT_STATUS_OK
Flush 12595 NT_STATUS_OK
WriteX 12603 0 4096 4096 NT_STATUS_OK
Flush 12603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12595 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12585 4096 16384 16384 NT_STATUS_OK
ReadX 12565 4096 16384 16384 NT_STATUS_OK
ReadX 12597 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 0 2048 2048 NT_STATUS_OK
WriteX 12605 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12606 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12576 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Close 12573 NT_STATUS_OK
Close 12565 NT_STATUS_OK
Close 12566 NT_STATUS_OK
Close 12567 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12608 NT_STATUS_OK
QUERY_FILE_INFORMATION 12608 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12610 NT_STATUS_OK
QUERY_FILE_INFORMATION 12610 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12612 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12614 NT_STATUS_OK
ReadX 12614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12615 NT_STATUS_OK
ReadX 12615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12613 4096 16384 16384 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
WriteX 12615 0 4096 4096 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 8192 8192 NT_STATUS_OK
ReadX 12619 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12633 0 4096 4096 NT_STATUS_OK
ReadX 12633 4096 4096 4096 NT_STATUS_OK
ReadX 12633 8192 4096 4096 NT_STATUS_OK
WriteX 12619 0 4096 4096 NT_STATUS_OK
WriteX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
ReadX 12634 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
WriteX 12615 0 4096 4096 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12639 NT_STATUS_OK
QUERY_FILE_INFORMATION 12639 1004 NT_STATUS_OK
WriteX 12639 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12639 258 NT_STATUS_OK
WriteX 12639 0 2048 2048 NT_STATUS_OK
Close 12639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12640 NT_STATUS_OK
ReadX 12640 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 4096 4096 NT_STATUS_OK
ReadX 12642 4096 4096 4096 NT_STATUS_OK
WriteX 12642 0 8192 8192 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12614 NT_STATUS_OK
Close 12634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12640 0 4096 4096 NT_STATUS_OK
Close 12616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12613 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12643 NT_STATUS_OK
ReadX 12643 0 4096 4096 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12644 NT_STATUS_OK
Close 12628 NT_STATUS_OK
ReadX 12644 0 4096 4096 NT_STATUS_OK
Close 12629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12645 NT_STATUS_OK
Close 12642 NT_STATUS_OK
ReadX 12645 0 4096 4096 NT_STATUS_OK
Close 12631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12646 NT_STATUS_OK
Close 12643 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
ReadX 12619 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
ReadX 12651 4096 4096 4096 NT_STATUS_OK
WriteX 12651 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12652 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12644 NT_STATUS_OK
Close 12645 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12654 0 4096 4096 NT_STATUS_OK
ReadX 12654 4096 4096 4096 NT_STATUS_OK
ReadX 12654 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
ReadX 12655 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12672 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 1004 NT_STATUS_OK
WriteX 12672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 2048 2048 NT_STATUS_OK
Close 12672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12673 NT_STATUS_OK
ReadX 12673 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12678 NT_STATUS_OK
QUERY_FILE_INFORMATION 12678 1004 NT_STATUS_OK
WriteX 12678 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12678 258 NT_STATUS_OK
WriteX 12678 0 2048 2048 NT_STATUS_OK
Close 12678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12679 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12662 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12680 NT_STATUS_OK
QUERY_FILE_INFORMATION 12680 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12654 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12682 NT_STATUS_OK
QUERY_FILE_INFORMATION 12682 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 61440 4096 4096 NT_STATUS_OK
ReadX 12684 126976 4096 4096 NT_STATUS_OK
WriteX 12684 0 65536 65536 NT_STATUS_OK
WriteX 12684 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 61440 4096 4096 NT_STATUS_OK
ReadX 12685 126976 4096 4096 NT_STATUS_OK
ReadX 12685 192512 4096 4096 NT_STATUS_OK
ReadX 12685 258048 4096 4096 NT_STATUS_OK
WriteX 12685 0 65536 65536 NT_STATUS_OK
WriteX 12685 65536 65536 65536 NT_STATUS_OK
WriteX 12685 131072 65536 65536 NT_STATUS_OK
WriteX 12685 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 61440 4096 4096 NT_STATUS_OK
ReadX 12686 126976 4096 4096 NT_STATUS_OK
ReadX 12686 192512 4096 4096 NT_STATUS_OK
ReadX 12686 258048 4096 4096 NT_STATUS_OK
ReadX 12686 323584 4096 4096 NT_STATUS_OK
ReadX 12686 389120 4096 4096 NT_STATUS_OK
ReadX 12686 454656 4096 4096 NT_STATUS_OK
ReadX 12686 520192 4096 4096 NT_STATUS_OK
WriteX 12686 0 65536 65536 NT_STATUS_OK
WriteX 12686 65536 65536 65536 NT_STATUS_OK
WriteX 12686 131072 65536 65536 NT_STATUS_OK
WriteX 12686 196608 65536 65536 NT_STATUS_OK
WriteX 12686 262144 65536 65536 NT_STATUS_OK
WriteX 12686 327680 65536 65536 NT_STATUS_OK
WriteX 12686 393216 65536 65536 NT_STATUS_OK
WriteX 12686 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12687 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12687 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12687 8192 4096 4096 NT_STATUS_OK
ReadX 12687 12288 4096 4096 NT_STATUS_OK
ReadX 12687 16384 4096 4096 NT_STATUS_OK
ReadX 12687 20480 4096 4096 NT_STATUS_OK
ReadX 12687 24576 4096 4096 NT_STATUS_OK
ReadX 12687 28672 4096 4096 NT_STATUS_OK
ReadX 12687 32768 4096 4096 NT_STATUS_OK
ReadX 12687 36864 4096 4096 NT_STATUS_OK
ReadX 12687 40960 4096 4096 NT_STATUS_OK
ReadX 12687 45056 4096 4096 NT_STATUS_OK
ReadX 12687 49152 4096 4096 NT_STATUS_OK
ReadX 12687 53248 4096 4096 NT_STATUS_OK
ReadX 12687 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12687 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12690 NT_STATUS_OK
WriteX 12690 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12690 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12690 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12690 1004 NT_STATUS_OK
WriteX 12690 0 57088 57088 NT_STATUS_OK
WriteX 12690 0 4096 4096 NT_STATUS_OK
Flush 12690 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12691 NT_STATUS_OK
SET_FILE_INFORMATION 12691 1004 NT_STATUS_OK
Close 12691 NT_STATUS_OK
SET_FILE_INFORMATION 12690 1004 NT_STATUS_OK
WriteX 12690 0 4096 4096 NT_STATUS_OK
Close 12690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12692 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12694 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12695 NT_STATUS_OK
WriteX 12695 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12695 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 51456 51456 NT_STATUS_OK
WriteX 12695 0 4096 4096 NT_STATUS_OK
Flush 12695 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 4096 4096 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Close 12694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12699 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12701 NT_STATUS_OK
Close 12701 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12704 NT_STATUS_OK
WriteX 12704 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12704 258 NT_STATUS_OK
WriteX 12704 0 53077 53077 NT_STATUS_OK
Close 12704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12705 NT_STATUS_OK
WriteX 12705 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12705 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12705 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12705 1004 NT_STATUS_OK
WriteX 12705 0 65536 65536 NT_STATUS_OK
WriteX 12705 65536 1856 1856 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
SET_FILE_INFORMATION 12705 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12705 1004 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Close 12699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12707 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12711 NT_STATUS_OK
Close 12711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12714 NT_STATUS_OK
WriteX 12714 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 258 NT_STATUS_OK
WriteX 12714 0 7983 7983 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12719 NT_STATUS_OK
WriteX 12719 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 258 NT_STATUS_OK
WriteX 12719 0 65536 65536 NT_STATUS_OK
WriteX 12719 65536 65536 65536 NT_STATUS_OK
WriteX 12719 131072 65536 65536 NT_STATUS_OK
WriteX 12719 196608 65536 65536 NT_STATUS_OK
WriteX 12719 262144 65536 65536 NT_STATUS_OK
WriteX 12719 327680 65536 65536 NT_STATUS_OK
WriteX 12719 393216 65536 65536 NT_STATUS_OK
WriteX 12719 458752 46731 46731 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12720 NT_STATUS_OK
WriteX 12720 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12709 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12720 1004 NT_STATUS_OK
WriteX 12720 0 65536 65536 NT_STATUS_OK
WriteX 12720 65536 22848 22848 NT_STATUS_OK
WriteX 12720 0 4096 4096 NT_STATUS_OK
Flush 12720 NT_STATUS_OK
SET_FILE_INFORMATION 12720 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12720 1004 NT_STATUS_OK
WriteX 12720 0 4096 4096 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12724 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12725 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12725 1004 NT_STATUS_OK
ReadX 12725 8192 4096 4096 NT_STATUS_OK
ReadX 12725 12288 4096 4096 NT_STATUS_OK
ReadX 12725 16384 4096 4096 NT_STATUS_OK
ReadX 12725 20480 4096 4096 NT_STATUS_OK
ReadX 12725 24576 4096 4096 NT_STATUS_OK
ReadX 12725 28672 4096 4096 NT_STATUS_OK
ReadX 12725 32768 4096 4096 NT_STATUS_OK
ReadX 12725 36864 4096 4096 NT_STATUS_OK
ReadX 12725 40960 4096 4096 NT_STATUS_OK
ReadX 12725 45056 4096 4096 NT_STATUS_OK
ReadX 12725 49152 4096 4096 NT_STATUS_OK
ReadX 12725 53248 4096 4096 NT_STATUS_OK
ReadX 12725 57344 4096 4096 NT_STATUS_OK
ReadX 12725 61440 4096 4096 NT_STATUS_OK
ReadX 12725 65536 4096 4096 NT_STATUS_OK
ReadX 12725 69632 4096 4096 NT_STATUS_OK
ReadX 12725 73728 4096 4096 NT_STATUS_OK
ReadX 12725 77824 4096 4096 NT_STATUS_OK
ReadX 12725 81920 4096 4096 NT_STATUS_OK
ReadX 12725 86016 4096 4096 NT_STATUS_OK
ReadX 12725 90112 4096 4096 NT_STATUS_OK
ReadX 12725 94208 4096 4096 NT_STATUS_OK
ReadX 12725 98304 4096 4096 NT_STATUS_OK
ReadX 12725 102400 4096 4096 NT_STATUS_OK
ReadX 12725 106496 4096 4096 NT_STATUS_OK
ReadX 12725 110592 4096 4096 NT_STATUS_OK
ReadX 12725 114688 4096 4096 NT_STATUS_OK
ReadX 12725 118784 4096 4096 NT_STATUS_OK
ReadX 12725 122880 4096 4096 NT_STATUS_OK
ReadX 12725 126976 4096 4096 NT_STATUS_OK
ReadX 12725 131072 4096 4096 NT_STATUS_OK
ReadX 12725 135168 4096 4096 NT_STATUS_OK
ReadX 12725 139264 4096 4096 NT_STATUS_OK
ReadX 12725 143360 4096 4096 NT_STATUS_OK
ReadX 12725 147456 4096 4096 NT_STATUS_OK
ReadX 12725 151552 4096 4096 NT_STATUS_OK
ReadX 12725 155648 4096 4096 NT_STATUS_OK
ReadX 12725 159744 4096 4096 NT_STATUS_OK
ReadX 12725 163840 4096 4096 NT_STATUS_OK
ReadX 12725 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12725 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12726 NT_STATUS_OK
Close 12726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12728 NT_STATUS_OK
WriteX 12728 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12728 258 NT_STATUS_OK
Close 12725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12729 NT_STATUS_OK
SET_FILE_INFORMATION 12729 1004 NT_STATUS_OK
Close 12729 NT_STATUS_OK
WriteX 12728 0 42388 42388 NT_STATUS_OK
Close 12728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12730 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 4096 4096 NT_STATUS_OK
ReadX 12732 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12733 NT_STATUS_OK
WriteX 12733 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12733 258 NT_STATUS_OK
SET_FILE_INFORMATION 12733 1004 NT_STATUS_OK
WriteX 12733 0 42652 42652 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12735 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
ReadX 12737 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12739 NT_STATUS_OK
Close 12739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12742 NT_STATUS_OK
WriteX 12742 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12742 258 NT_STATUS_OK
WriteX 12742 0 65536 65536 NT_STATUS_OK
WriteX 12742 65536 49 49 NT_STATUS_OK
Close 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 61440 61440 NT_STATUS_OK
ReadX 12743 61440 4096 4096 NT_STATUS_OK
ReadX 12743 65536 61440 61440 NT_STATUS_OK
ReadX 12743 126976 4096 4096 NT_STATUS_OK
ReadX 12743 131072 61440 61440 NT_STATUS_OK
ReadX 12743 192512 4096 4096 NT_STATUS_OK
ReadX 12743 196608 61440 61440 NT_STATUS_OK
ReadX 12743 258048 4096 4096 NT_STATUS_OK
ReadX 12743 262144 61440 61440 NT_STATUS_OK
ReadX 12743 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 61440 61440 NT_STATUS_OK
ReadX 12744 61440 4096 4096 NT_STATUS_OK
ReadX 12744 65536 61440 61440 NT_STATUS_OK
ReadX 12744 126976 4096 4096 NT_STATUS_OK
ReadX 12744 131072 61440 61440 NT_STATUS_OK
ReadX 12744 192512 4096 4096 NT_STATUS_OK
ReadX 12744 196608 61440 61440 NT_STATUS_OK
ReadX 12744 258048 4096 4096 NT_STATUS_OK
ReadX 12744 262144 61440 61440 NT_STATUS_OK
ReadX 12744 323584 4096 4096 NT_STATUS_OK
ReadX 12744 327680 61440 61440 NT_STATUS_OK
ReadX 12744 389120 4096 4096 NT_STATUS_OK
ReadX 12744 393216 61440 61440 NT_STATUS_OK
ReadX 12744 454656 4096 4096 NT_STATUS_OK
ReadX 12744 458752 61440 61440 NT_STATUS_OK
ReadX 12744 520192 4096 4096 NT_STATUS_OK
ReadX 12744 524288 61440 61440 NT_STATUS_OK
ReadX 12744 585728 4096 4096 NT_STATUS_OK
ReadX 12744 589824 61440 61440 NT_STATUS_OK
ReadX 12744 651264 4096 4096 NT_STATUS_OK
ReadX 12744 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 61440 61440 NT_STATUS_OK
ReadX 12745 61440 4096 4096 NT_STATUS_OK
ReadX 12745 65536 61440 61440 NT_STATUS_OK
ReadX 12745 126976 4096 4096 NT_STATUS_OK
ReadX 12745 131072 61440 61440 NT_STATUS_OK
ReadX 12745 192512 4096 4096 NT_STATUS_OK
ReadX 12745 196608 61440 61440 NT_STATUS_OK
ReadX 12745 258048 4096 4096 NT_STATUS_OK
ReadX 12745 262144 61440 61440 NT_STATUS_OK
ReadX 12745 323584 4096 4096 NT_STATUS_OK
ReadX 12745 327680 61440 61440 NT_STATUS_OK
ReadX 12745 389120 4096 4096 NT_STATUS_OK
ReadX 12745 393216 61440 61440 NT_STATUS_OK
ReadX 12745 454656 4096 4096 NT_STATUS_OK
ReadX 12745 458752 61440 61440 NT_STATUS_OK
ReadX 12745 520192 4096 4096 NT_STATUS_OK
ReadX 12745 524288 61440 61440 NT_STATUS_OK
ReadX 12745 585728 4096 4096 NT_STATUS_OK
ReadX 12745 589824 61440 61440 NT_STATUS_OK
ReadX 12745 651264 4096 4096 NT_STATUS_OK
ReadX 12745 655360 61440 61440 NT_STATUS_OK
ReadX 12745 716800 4096 4096 NT_STATUS_OK
ReadX 12745 720896 61440 61440 NT_STATUS_OK
ReadX 12745 782336 4096 4096 NT_STATUS_OK
ReadX 12745 786432 61440 61440 NT_STATUS_OK
ReadX 12745 847872 4096 4096 NT_STATUS_OK
ReadX 12745 851968 61440 61440 NT_STATUS_OK
ReadX 12745 913408 4096 4096 NT_STATUS_OK
ReadX 12745 917504 61440 61440 NT_STATUS_OK
ReadX 12745 978944 4096 4096 NT_STATUS_OK
ReadX 12745 983040 61440 61440 NT_STATUS_OK
ReadX 12745 1044480 4096 4096 NT_STATUS_OK
ReadX 12745 1048576 61440 61440 NT_STATUS_OK
ReadX 12745 1110016 4096 4096 NT_STATUS_OK
ReadX 12745 1114112 61440 61440 NT_STATUS_OK
ReadX 12745 1175552 4096 4096 NT_STATUS_OK
ReadX 12745 1179648 61440 61440 NT_STATUS_OK
ReadX 12745 1241088 4096 4096 NT_STATUS_OK
ReadX 12745 1245184 61440 61440 NT_STATUS_OK
ReadX 12745 1306624 4096 4096 NT_STATUS_OK
ReadX 12745 1310720 61440 61440 NT_STATUS_OK
ReadX 12745 1372160 4096 4096 NT_STATUS_OK
ReadX 12745 1376256 61440 61440 NT_STATUS_OK
ReadX 12745 1437696 4096 4096 NT_STATUS_OK
ReadX 12745 1441792 61440 61440 NT_STATUS_OK
ReadX 12745 1503232 4096 4096 NT_STATUS_OK
ReadX 12745 1507328 61440 61440 NT_STATUS_OK
ReadX 12745 1568768 4096 4096 NT_STATUS_OK
ReadX 12745 1572864 61440 61440 NT_STATUS_OK
ReadX 12745 1634304 4096 4096 NT_STATUS_OK
ReadX 12745 1638400 61440 61440 NT_STATUS_OK
ReadX 12745 1699840 4096 4096 NT_STATUS_OK
ReadX 12745 1703936 61440 61440 NT_STATUS_OK
ReadX 12745 1765376 4096 4096 NT_STATUS_OK
ReadX 12745 1769472 61440 61440 NT_STATUS_OK
ReadX 12745 1830912 4096 4096 NT_STATUS_OK
ReadX 12745 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12747 NT_STATUS_OK
QUERY_FILE_INFORMATION 12747 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12747 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12747 1005 NT_STATUS_OK
ReadX 12747 2156 24 24 NT_STATUS_OK
ReadX 12747 2139 276 276 NT_STATUS_OK
ReadX 12747 2136 14 14 NT_STATUS_OK
ReadX 12747 2136 7 7 NT_STATUS_OK
ReadX 12747 2138 12 12 NT_STATUS_OK
ReadX 12747 2137 8 8 NT_STATUS_OK
ReadX 12747 2135 15 15 NT_STATUS_OK
ReadX 12747 0 16 16 NT_STATUS_OK
ReadX 12747 16 2048 2048 NT_STATUS_OK
ReadX 12747 2064 2048 2048 NT_STATUS_OK
ReadX 12747 257 2048 2048 NT_STATUS_OK
ReadX 12747 385 2048 2048 NT_STATUS_OK
ReadX 12747 513 2048 2048 NT_STATUS_OK
ReadX 12747 641 2048 2048 NT_STATUS_OK
ReadX 12747 769 2048 2048 NT_STATUS_OK
ReadX 12747 897 2048 2048 NT_STATUS_OK
ReadX 12747 1025 2048 2048 NT_STATUS_OK
ReadX 12747 1153 2048 2048 NT_STATUS_OK
ReadX 12747 1281 2048 2048 NT_STATUS_OK
ReadX 12747 1409 2048 2048 NT_STATUS_OK
ReadX 12747 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Close 12744 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12752 NT_STATUS_OK
WriteX 12752 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12752 258 NT_STATUS_OK
WriteX 12752 0 10575 10575 NT_STATUS_OK
Flush 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12753 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
Close 12747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12757 NT_STATUS_OK
LockX 12757 2147483538 1 NT_STATUS_OK
UnlockX 12757 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12757 1005 NT_STATUS_OK
ReadX 12757 0 512 512 NT_STATUS_OK
ReadX 12757 512 512 512 NT_STATUS_OK
ReadX 12757 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12757 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12757 1004 NT_STATUS_OK
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12758 NT_STATUS_OK
QUERY_FILE_INFORMATION 12758 1005 NT_STATUS_OK
ReadX 12758 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12759 NT_STATUS_OK
LockX 12759 2147483538 1 NT_STATUS_OK
UnlockX 12759 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12759 1005 NT_STATUS_OK
ReadX 12759 0 512 512 NT_STATUS_OK
ReadX 12759 512 512 512 NT_STATUS_OK
ReadX 12759 1024 512 512 NT_STATUS_OK
ReadX 12759 288 20 20 NT_STATUS_OK
ReadX 12759 308 2084 2084 NT_STATUS_OK
ReadX 12759 388 2084 2084 NT_STATUS_OK
ReadX 12759 388 2084 2084 NT_STATUS_OK
ReadX 12746 2157 1386 1386 NT_STATUS_OK
ReadX 12759 2472 399 399 NT_STATUS_OK
ReadX 12759 3072 1536 1536 NT_STATUS_OK
ReadX 12759 544 149 149 NT_STATUS_OK
ReadX 12759 693 485 485 NT_STATUS_OK
Close 12759 NT_STATUS_OK
ReadX 12746 2157 4096 4096 NT_STATUS_OK
ReadX 12746 6253 4096 4096 NT_STATUS_OK
ReadX 12746 10349 4096 4096 NT_STATUS_OK
ReadX 12746 14445 4096 4096 NT_STATUS_OK
ReadX 12746 18541 4096 4096 NT_STATUS_OK
ReadX 12746 22637 256 256 NT_STATUS_OK
ReadX 12746 22893 4096 4096 NT_STATUS_OK
ReadX 12746 26989 4096 4096 NT_STATUS_OK
ReadX 12746 31085 4096 4096 NT_STATUS_OK
ReadX 12746 35181 4096 4096 NT_STATUS_OK
ReadX 12746 39277 4096 4096 NT_STATUS_OK
ReadX 12746 43373 4096 4096 NT_STATUS_OK
ReadX 12746 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12746 2157 1024 1024 NT_STATUS_OK
ReadX 12746 1667 4688 4688 NT_STATUS_OK
ReadX 12746 6355 3516 3516 NT_STATUS_OK
ReadX 12746 9871 16384 16384 NT_STATUS_OK
ReadX 12746 26255 3771 3771 NT_STATUS_OK
ReadX 12746 30026 2048 2048 NT_STATUS_OK
ReadX 12746 32074 1024 1024 NT_STATUS_OK
ReadX 12746 33098 6652 6652 NT_STATUS_OK
ReadX 12746 39750 16384 16384 NT_STATUS_OK
ReadX 12746 56134 10496 10496 NT_STATUS_OK
ReadX 12746 66630 1784 1784 NT_STATUS_OK
ReadX 12746 68414 90 90 NT_STATUS_OK
ReadX 12746 68504 273 273 NT_STATUS_OK
ReadX 12746 68777 1600 1600 NT_STATUS_OK
ReadX 12746 70377 640 640 NT_STATUS_OK
ReadX 12746 71017 1280 1280 NT_STATUS_OK
ReadX 12746 72297 8464 8464 NT_STATUS_OK
ReadX 12746 80761 158 158 NT_STATUS_OK
ReadX 12746 80919 912 912 NT_STATUS_OK
ReadX 12746 81831 1980 1980 NT_STATUS_OK
ReadX 12746 83811 2256 2256 NT_STATUS_OK
ReadX 12746 86067 400 400 NT_STATUS_OK
ReadX 12746 86467 252 252 NT_STATUS_OK
ReadX 12746 86719 42 42 NT_STATUS_OK
ReadX 12746 86761 725 725 NT_STATUS_OK
ReadX 12746 2009 512 512 NT_STATUS_OK
ReadX 12746 3895 9 9 NT_STATUS_OK
ReadX 12746 3781 46 46 NT_STATUS_OK
ReadX 12746 4059 92 92 NT_STATUS_OK
ReadX 12746 3781 92 92 NT_STATUS_OK
ReadX 12746 3986 184 184 NT_STATUS_OK
ReadX 12746 3987 16384 16384 NT_STATUS_OK
ReadX 12746 3902 16384 16384 NT_STATUS_OK
ReadX 12746 3781 10240 10240 NT_STATUS_OK
ReadX 12746 3821 16384 16384 NT_STATUS_OK
ReadX 12746 3891 935 935 NT_STATUS_OK
ReadX 12746 4060 10240 10240 NT_STATUS_OK
ReadX 12746 4059 184 184 NT_STATUS_OK
ReadX 12746 256 184 184 NT_STATUS_OK
ReadX 12746 256 1026 1026 NT_STATUS_OK
ReadX 12746 3901 326 326 NT_STATUS_OK
ReadX 12746 3899 652 652 NT_STATUS_OK
ReadX 12746 256 2 2 NT_STATUS_OK
ReadX 12746 258 4948 4948 NT_STATUS_OK
Close 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12764 NT_STATUS_OK
WriteX 12764 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 258 NT_STATUS_OK
WriteX 12764 0 65536 65536 NT_STATUS_OK
WriteX 12764 65536 65536 65536 NT_STATUS_OK
WriteX 12764 131072 65536 65536 NT_STATUS_OK
WriteX 12764 196608 65536 65536 NT_STATUS_OK
WriteX 12764 262144 65536 65536 NT_STATUS_OK
WriteX 12764 327680 65536 65536 NT_STATUS_OK
WriteX 12764 393216 65536 65536 NT_STATUS_OK
WriteX 12764 458752 65536 65536 NT_STATUS_OK
WriteX 12764 524288 65536 65536 NT_STATUS_OK
WriteX 12764 589824 35257 35257 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12769 NT_STATUS_OK
WriteX 12769 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12769 258 NT_STATUS_OK
WriteX 12769 0 65536 65536 NT_STATUS_OK
WriteX 12769 65536 65536 65536 NT_STATUS_OK
WriteX 12769 131072 65536 65536 NT_STATUS_OK
WriteX 12769 196608 65536 65536 NT_STATUS_OK
WriteX 12769 262144 65536 65536 NT_STATUS_OK
WriteX 12769 327680 65536 65536 NT_STATUS_OK
WriteX 12769 393216 65536 65536 NT_STATUS_OK
WriteX 12769 458752 65536 65536 NT_STATUS_OK
WriteX 12769 524288 65536 65536 NT_STATUS_OK
WriteX 12769 589824 57598 57598 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12771 NT_STATUS_OK
WriteX 12771 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12771 258 NT_STATUS_OK
WriteX 12771 0 12543 12543 NT_STATUS_OK
Flush 12771 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12773 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12777 NT_STATUS_OK
QUERY_FILE_INFORMATION 12777 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12777 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12777 1005 NT_STATUS_OK
ReadX 12777 1938 24 24 NT_STATUS_OK
ReadX 12777 1920 276 276 NT_STATUS_OK
ReadX 12777 1918 14 14 NT_STATUS_OK
ReadX 12777 1918 7 7 NT_STATUS_OK
ReadX 12777 1919 12 12 NT_STATUS_OK
ReadX 12777 1919 8 8 NT_STATUS_OK
ReadX 12777 1917 15 15 NT_STATUS_OK
ReadX 12777 0 16 16 NT_STATUS_OK
ReadX 12777 16 2048 2048 NT_STATUS_OK
ReadX 12777 2064 2048 2048 NT_STATUS_OK
ReadX 12777 257 2048 2048 NT_STATUS_OK
ReadX 12777 385 2048 2048 NT_STATUS_OK
ReadX 12777 513 2048 2048 NT_STATUS_OK
ReadX 12777 641 2048 2048 NT_STATUS_OK
ReadX 12777 769 2048 2048 NT_STATUS_OK
ReadX 12777 897 2048 2048 NT_STATUS_OK
ReadX 12777 1025 2048 2048 NT_STATUS_OK
ReadX 12777 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12779 NT_STATUS_OK
Close 12779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12782 NT_STATUS_OK
WriteX 12782 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12782 258 NT_STATUS_OK
WriteX 12782 0 11588 11588 NT_STATUS_OK
Flush 12782 NT_STATUS_OK
Close 12782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
Close 12777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12787 NT_STATUS_OK
WriteX 12787 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 258 NT_STATUS_OK
WriteX 12787 0 11615 11615 NT_STATUS_OK
Flush 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12796 NT_STATUS_OK
WriteX 12796 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12796 258 NT_STATUS_OK
WriteX 12796 0 65536 65536 NT_STATUS_OK
WriteX 12796 65536 16050 16050 NT_STATUS_OK
Close 12796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12776 1939 64 64 NT_STATUS_OK
ReadX 12776 128 248 248 NT_STATUS_OK
ReadX 12776 128 568 568 NT_STATUS_OK
ReadX 12776 3872 1536 1536 NT_STATUS_OK
ReadX 12776 3456 2560 2560 NT_STATUS_OK
ReadX 12776 3136 512 512 NT_STATUS_OK
ReadX 12776 2880 4096 4096 NT_STATUS_OK
ReadX 12776 3264 3072 3072 NT_STATUS_OK
ReadX 12776 320 4096 4096 NT_STATUS_OK
ReadX 12776 1024 4096 4096 NT_STATUS_OK
ReadX 12776 3616 4096 4096 NT_STATUS_OK
ReadX 12776 1939 64 64 NT_STATUS_OK
ReadX 12776 128 248 248 NT_STATUS_OK
ReadX 12776 128 608 608 NT_STATUS_OK
ReadX 12776 2858 1024 1024 NT_STATUS_OK
ReadX 12776 2810 4096 4096 NT_STATUS_OK
ReadX 12776 2826 4096 4096 NT_STATUS_OK
ReadX 12776 2580 2048 2048 NT_STATUS_OK
ReadX 12776 2800 2560 2560 NT_STATUS_OK
ReadX 12776 2100 4096 4096 NT_STATUS_OK
ReadX 12776 2084 4096 4096 NT_STATUS_OK
ReadX 12776 868 4096 4096 NT_STATUS_OK
ReadX 12776 2324 4096 4096 NT_STATUS_OK
ReadX 12776 884 4096 4096 NT_STATUS_OK
ReadX 12776 2604 1024 1024 NT_STATUS_OK
ReadX 12776 580 4096 4096 NT_STATUS_OK
ReadX 12776 596 4096 4096 NT_STATUS_OK
ReadX 12776 2752 4096 4096 NT_STATUS_OK
ReadX 12776 2842 1024 1024 NT_STATUS_OK
ReadX 12776 660 4096 4096 NT_STATUS_OK
ReadX 12776 2720 4096 4096 NT_STATUS_OK
ReadX 12776 2736 4096 4096 NT_STATUS_OK
ReadX 12776 628 4096 4096 NT_STATUS_OK
ReadX 12776 2704 4096 4096 NT_STATUS_OK
ReadX 12776 1556 4096 4096 NT_STATUS_OK
ReadX 12776 576 4096 4096 NT_STATUS_OK
ReadX 12776 3168 1536 1536 NT_STATUS_OK
ReadX 12776 832 4096 4096 NT_STATUS_OK
ReadX 12776 1088 4096 4096 NT_STATUS_OK
ReadX 12776 1344 4096 4096 NT_STATUS_OK
ReadX 12776 1600 4096 4096 NT_STATUS_OK
ReadX 12776 1856 4096 4096 NT_STATUS_OK
ReadX 12776 2112 4096 4096 NT_STATUS_OK
ReadX 12776 1892 4096 4096 NT_STATUS_OK
ReadX 12776 820 4096 4096 NT_STATUS_OK
ReadX 12776 788 4096 4096 NT_STATUS_OK
ReadX 12776 1604 4096 4096 NT_STATUS_OK
ReadX 12776 3648 4096 4096 NT_STATUS_OK
ReadX 12776 2608 4096 4096 NT_STATUS_OK
ReadX 12776 548 4096 4096 NT_STATUS_OK
ReadX 12776 740 4096 4096 NT_STATUS_OK
ReadX 12776 1344 4096 4096 NT_STATUS_OK
ReadX 12776 3392 4096 4096 NT_STATUS_OK
ReadX 12776 3904 4096 4096 NT_STATUS_OK
ReadX 12776 644 4096 4096 NT_STATUS_OK
ReadX 12776 676 4096 4096 NT_STATUS_OK
ReadX 12776 2688 4096 4096 NT_STATUS_OK
ReadX 12776 320 4096 4096 NT_STATUS_OK
ReadX 12776 900 4096 4096 NT_STATUS_OK
ReadX 12776 1908 4096 4096 NT_STATUS_OK
ReadX 12776 852 4096 4096 NT_STATUS_OK
ReadX 12776 724 4096 4096 NT_STATUS_OK
ReadX 12776 2292 4096 4096 NT_STATUS_OK
ReadX 12776 612 4096 4096 NT_STATUS_OK
ReadX 12776 388 4096 4096 NT_STATUS_OK
ReadX 12776 2368 4096 4096 NT_STATUS_OK
ReadX 12776 2624 4096 4096 NT_STATUS_OK
ReadX 12776 500 4096 4096 NT_STATUS_OK
ReadX 12776 356 4096 4096 NT_STATUS_OK
ReadX 12776 1024 4096 4096 NT_STATUS_OK
ReadX 12776 576 4096 4096 NT_STATUS_OK
ReadX 12776 340 4096 4096 NT_STATUS_OK
ReadX 12776 420 4096 4096 NT_STATUS_OK
ReadX 12776 1600 4096 4096 NT_STATUS_OK
ReadX 12776 404 4096 4096 NT_STATUS_OK
ReadX 12776 1428 4096 4096 NT_STATUS_OK
ReadX 12776 2656 4096 4096 NT_STATUS_OK
ReadX 12776 2624 4096 4096 NT_STATUS_OK
ReadX 12776 452 4096 4096 NT_STATUS_OK
ReadX 12776 692 4096 4096 NT_STATUS_OK
ReadX 12776 564 4096 4096 NT_STATUS_OK
ReadX 12776 372 4096 4096 NT_STATUS_OK
ReadX 12776 468 4096 4096 NT_STATUS_OK
ReadX 12776 484 4096 4096 NT_STATUS_OK
ReadX 12776 1088 4096 4096 NT_STATUS_OK
ReadX 12776 1924 4096 4096 NT_STATUS_OK
ReadX 12776 2768 4096 4096 NT_STATUS_OK
ReadX 12776 832 4096 4096 NT_STATUS_OK
ReadX 12776 836 4096 4096 NT_STATUS_OK
ReadX 12776 1856 4096 4096 NT_STATUS_OK
ReadX 12776 2640 4096 4096 NT_STATUS_OK
ReadX 12776 436 4096 4096 NT_STATUS_OK
ReadX 12776 1828 4096 4096 NT_STATUS_OK
ReadX 12776 804 4096 4096 NT_STATUS_OK
ReadX 12776 1860 4096 4096 NT_STATUS_OK
ReadX 12776 1812 4096 4096 NT_STATUS_OK
ReadX 12776 756 4096 4096 NT_STATUS_OK
ReadX 12776 1636 4096 4096 NT_STATUS_OK
ReadX 12776 772 4096 4096 NT_STATUS_OK
ReadX 12776 2036 4096 4096 NT_STATUS_OK
ReadX 12776 1220 4096 4096 NT_STATUS_OK
ReadX 12776 1652 4096 4096 NT_STATUS_OK
ReadX 12776 2588 4096 4096 NT_STATUS_OK
ReadX 12776 916 4096 4096 NT_STATUS_OK
ReadX 12776 260 4096 4096 NT_STATUS_OK
ReadX 12776 932 4096 4096 NT_STATUS_OK
ReadX 12776 2624 4096 4096 NT_STATUS_OK
ReadX 12776 308 4096 4096 NT_STATUS_OK
ReadX 12776 292 4096 4096 NT_STATUS_OK
ReadX 12776 1140 4096 4096 NT_STATUS_OK
ReadX 12776 276 4096 4096 NT_STATUS_OK
ReadX 12776 2020 4096 4096 NT_STATUS_OK
ReadX 12776 2880 4096 4096 NT_STATUS_OK
ReadX 12776 516 4096 4096 NT_STATUS_OK
ReadX 12776 1844 4096 4096 NT_STATUS_OK
ReadX 12776 1124 4096 4096 NT_STATUS_OK
ReadX 12776 3136 4096 4096 NT_STATUS_OK
ReadX 12776 324 4096 4096 NT_STATUS_OK
ReadX 12776 1156 4096 4096 NT_STATUS_OK
ReadX 12776 1172 4096 4096 NT_STATUS_OK
ReadX 12776 2112 4096 4096 NT_STATUS_OK
ReadX 12776 2368 4096 4096 NT_STATUS_OK
ReadX 12776 964 4096 4096 NT_STATUS_OK
ReadX 12776 980 4096 4096 NT_STATUS_OK
ReadX 12776 1012 4096 4096 NT_STATUS_OK
ReadX 12776 532 4096 4096 NT_STATUS_OK
ReadX 12776 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12776 1620 4096 4096 NT_STATUS_OK
ReadX 12776 1604 4096 4096 NT_STATUS_OK
ReadX 12776 2116 4096 4096 NT_STATUS_OK
ReadX 12776 2132 4096 4096 NT_STATUS_OK
ReadX 12776 2148 4096 4096 NT_STATUS_OK
ReadX 12776 2276 4096 4096 NT_STATUS_OK
ReadX 12776 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12801 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 1004 NT_STATUS_OK
Close 12756 NT_STATUS_OK
WriteX 12801 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12801 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12758 1004 NT_STATUS_OK
Close 12758 NT_STATUS_OK
WriteX 12801 0 65536 65536 NT_STATUS_OK
WriteX 12801 65536 64850 64850 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12803 NT_STATUS_OK
WriteX 12803 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 258 NT_STATUS_OK
ReadX 12776 2068 4096 4096 NT_STATUS_OK
ReadX 12776 1588 4096 4096 NT_STATUS_OK
ReadX 12776 1572 4096 4096 NT_STATUS_OK
WriteX 12803 0 18630 18630 NT_STATUS_OK
Flush 12803 NT_STATUS_OK
Close 12803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12776 612 4096 4096 NT_STATUS_OK
ReadX 12776 564 4096 4096 NT_STATUS_OK
ReadX 12776 1876 4096 4096 NT_STATUS_OK
ReadX 12776 628 4096 4096 NT_STATUS_OK
ReadX 12776 740 4096 4096 NT_STATUS_OK
ReadX 12776 724 4096 4096 NT_STATUS_OK
ReadX 12776 644 4096 4096 NT_STATUS_OK
ReadX 12776 2324 4096 4096 NT_STATUS_OK
ReadX 12776 660 4096 4096 NT_STATUS_OK
ReadX 12776 852 4096 4096 NT_STATUS_OK
ReadX 12776 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12776 2368 4096 4096 NT_STATUS_OK
ReadX 12776 1024 4096 4096 NT_STATUS_OK
ReadX 12776 320 4096 4096 NT_STATUS_OK
ReadX 12776 580 4096 4096 NT_STATUS_OK
ReadX 12776 3136 512 512 NT_STATUS_OK
ReadX 12776 2880 4096 4096 NT_STATUS_OK
Close 12776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 61440 4096 4096 NT_STATUS_OK
ReadX 12808 126976 4096 4096 NT_STATUS_OK
WriteX 12808 0 65536 65536 NT_STATUS_OK
WriteX 12808 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 61440 4096 4096 NT_STATUS_OK
ReadX 12809 126976 4096 4096 NT_STATUS_OK
ReadX 12809 192512 4096 4096 NT_STATUS_OK
ReadX 12809 258048 4096 4096 NT_STATUS_OK
WriteX 12809 0 65536 65536 NT_STATUS_OK
WriteX 12809 65536 65536 65536 NT_STATUS_OK
WriteX 12809 131072 65536 65536 NT_STATUS_OK
WriteX 12809 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 61440 4096 4096 NT_STATUS_OK
ReadX 12810 126976 4096 4096 NT_STATUS_OK
ReadX 12810 192512 4096 4096 NT_STATUS_OK
ReadX 12810 258048 4096 4096 NT_STATUS_OK
ReadX 12810 323584 4096 4096 NT_STATUS_OK
ReadX 12810 389120 4096 4096 NT_STATUS_OK
ReadX 12810 454656 4096 4096 NT_STATUS_OK
ReadX 12810 520192 4096 4096 NT_STATUS_OK
WriteX 12810 0 65536 65536 NT_STATUS_OK
WriteX 12810 65536 65536 65536 NT_STATUS_OK
WriteX 12810 131072 65536 65536 NT_STATUS_OK
WriteX 12810 196608 65536 65536 NT_STATUS_OK
WriteX 12810 262144 65536 65536 NT_STATUS_OK
WriteX 12810 327680 65536 65536 NT_STATUS_OK
WriteX 12810 393216 65536 65536 NT_STATUS_OK
WriteX 12810 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12813 NT_STATUS_OK
WriteX 12813 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12811 0 8192 8192 NT_STATUS_OK
Flush 12811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12811 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12811 0 8192 8192 NT_STATUS_OK
Flush 12811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12811 0 8192 8192 NT_STATUS_OK
Flush 12811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12811 0 8192 8192 NT_STATUS_OK
Flush 12811 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12815 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12818 NT_STATUS_OK
WriteX 12818 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12818 258 NT_STATUS_OK
WriteX 12818 0 62591 62591 NT_STATUS_OK
Close 12818 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12820 NT_STATUS_OK
Close 12820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12823 NT_STATUS_OK
WriteX 12823 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12823 258 NT_STATUS_OK
WriteX 12823 0 10845 10845 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12828 NT_STATUS_OK
WriteX 12828 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12828 258 NT_STATUS_OK
WriteX 12828 0 30118 30118 NT_STATUS_OK
Close 12828 NT_STATUS_OK
WriteX 12811 0 4096 4096 NT_STATUS_OK
WriteX 12813 0 64 64 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12830 NT_STATUS_OK
ReadX 12830 0 61440 61440 NT_STATUS_OK
ReadX 12830 61440 4096 4096 NT_STATUS_OK
ReadX 12830 65536 61440 61440 NT_STATUS_OK
ReadX 12830 126976 4096 4096 NT_STATUS_OK
ReadX 12830 131072 61440 61440 NT_STATUS_OK
ReadX 12830 192512 4096 4096 NT_STATUS_OK
ReadX 12830 196608 61440 61440 NT_STATUS_OK
ReadX 12830 258048 4096 4096 NT_STATUS_OK
ReadX 12830 262144 61440 61440 NT_STATUS_OK
ReadX 12830 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 61440 61440 NT_STATUS_OK
ReadX 12831 61440 4096 4096 NT_STATUS_OK
ReadX 12831 65536 61440 61440 NT_STATUS_OK
ReadX 12831 126976 4096 4096 NT_STATUS_OK
ReadX 12831 131072 61440 61440 NT_STATUS_OK
ReadX 12831 192512 4096 4096 NT_STATUS_OK
ReadX 12831 196608 61440 61440 NT_STATUS_OK
ReadX 12831 258048 4096 4096 NT_STATUS_OK
ReadX 12831 262144 61440 61440 NT_STATUS_OK
ReadX 12831 323584 4096 4096 NT_STATUS_OK
ReadX 12831 327680 61440 61440 NT_STATUS_OK
ReadX 12831 389120 4096 4096 NT_STATUS_OK
ReadX 12831 393216 61440 61440 NT_STATUS_OK
ReadX 12831 454656 4096 4096 NT_STATUS_OK
ReadX 12831 458752 61440 61440 NT_STATUS_OK
ReadX 12831 520192 4096 4096 NT_STATUS_OK
ReadX 12831 524288 61440 61440 NT_STATUS_OK
ReadX 12831 585728 4096 4096 NT_STATUS_OK
ReadX 12831 589824 61440 61440 NT_STATUS_OK
ReadX 12831 651264 4096 4096 NT_STATUS_OK
ReadX 12831 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 61440 61440 NT_STATUS_OK
ReadX 12832 61440 4096 4096 NT_STATUS_OK
ReadX 12832 65536 61440 61440 NT_STATUS_OK
ReadX 12832 126976 4096 4096 NT_STATUS_OK
ReadX 12832 131072 61440 61440 NT_STATUS_OK
ReadX 12832 192512 4096 4096 NT_STATUS_OK
ReadX 12832 196608 61440 61440 NT_STATUS_OK
ReadX 12832 258048 4096 4096 NT_STATUS_OK
ReadX 12832 262144 61440 61440 NT_STATUS_OK
ReadX 12832 323584 4096 4096 NT_STATUS_OK
ReadX 12832 327680 61440 61440 NT_STATUS_OK
ReadX 12832 389120 4096 4096 NT_STATUS_OK
ReadX 12832 393216 61440 61440 NT_STATUS_OK
ReadX 12832 454656 4096 4096 NT_STATUS_OK
ReadX 12832 458752 61440 61440 NT_STATUS_OK
ReadX 12832 520192 4096 4096 NT_STATUS_OK
ReadX 12832 524288 61440 61440 NT_STATUS_OK
ReadX 12832 585728 4096 4096 NT_STATUS_OK
ReadX 12832 589824 61440 61440 NT_STATUS_OK
ReadX 12832 651264 4096 4096 NT_STATUS_OK
ReadX 12832 655360 61440 61440 NT_STATUS_OK
ReadX 12832 716800 4096 4096 NT_STATUS_OK
ReadX 12832 720896 61440 61440 NT_STATUS_OK
ReadX 12832 782336 4096 4096 NT_STATUS_OK
ReadX 12832 786432 61440 61440 NT_STATUS_OK
ReadX 12832 847872 4096 4096 NT_STATUS_OK
ReadX 12832 851968 61440 61440 NT_STATUS_OK
ReadX 12832 913408 4096 4096 NT_STATUS_OK
ReadX 12832 917504 61440 61440 NT_STATUS_OK
ReadX 12832 978944 4096 4096 NT_STATUS_OK
ReadX 12832 983040 61440 61440 NT_STATUS_OK
ReadX 12832 1044480 4096 4096 NT_STATUS_OK
ReadX 12832 1048576 61440 61440 NT_STATUS_OK
ReadX 12832 1110016 4096 4096 NT_STATUS_OK
ReadX 12832 1114112 61440 61440 NT_STATUS_OK
ReadX 12832 1175552 4096 4096 NT_STATUS_OK
ReadX 12832 1179648 61440 61440 NT_STATUS_OK
ReadX 12832 1241088 4096 4096 NT_STATUS_OK
ReadX 12832 1245184 61440 61440 NT_STATUS_OK
ReadX 12832 1306624 4096 4096 NT_STATUS_OK
ReadX 12832 1310720 61440 61440 NT_STATUS_OK
ReadX 12832 1372160 4096 4096 NT_STATUS_OK
ReadX 12832 1376256 61440 61440 NT_STATUS_OK
ReadX 12832 1437696 4096 4096 NT_STATUS_OK
ReadX 12832 1441792 61440 61440 NT_STATUS_OK
ReadX 12832 1503232 4096 4096 NT_STATUS_OK
ReadX 12832 1507328 61440 61440 NT_STATUS_OK
ReadX 12832 1568768 4096 4096 NT_STATUS_OK
ReadX 12832 1572864 61440 61440 NT_STATUS_OK
ReadX 12832 1634304 4096 4096 NT_STATUS_OK
ReadX 12832 1638400 61440 61440 NT_STATUS_OK
ReadX 12832 1699840 4096 4096 NT_STATUS_OK
ReadX 12832 1703936 61440 61440 NT_STATUS_OK
ReadX 12832 1765376 4096 4096 NT_STATUS_OK
ReadX 12832 1769472 61440 61440 NT_STATUS_OK
ReadX 12832 1830912 4096 4096 NT_STATUS_OK
ReadX 12832 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12833 NT_STATUS_OK
Close 12833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Close 12832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
ReadX 12837 4096 4096 4096 NT_STATUS_OK
ReadX 12837 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12838 NT_STATUS_OK
Close 12838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12835 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12840 NT_STATUS_OK
ReadX 12840 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12841 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12842 NT_STATUS_OK
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 8192 8192 NT_STATUS_OK
ReadX 12845 8192 8192 8192 NT_STATUS_OK
ReadX 12845 16384 8192 8192 NT_STATUS_OK
ReadX 12845 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12847 NT_STATUS_OK
Close 12847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12845 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12850 NT_STATUS_OK
WriteX 12850 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12850 258 NT_STATUS_OK
WriteX 12850 0 10438 10438 NT_STATUS_OK
Close 12850 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12853 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12854 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12856 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
ReadX 12859 4096 4096 4096 NT_STATUS_OK
ReadX 12859 8192 4096 4096 NT_STATUS_OK
ReadX 12859 12288 8192 8192 NT_STATUS_OK
ReadX 12859 20480 8192 8192 NT_STATUS_OK
ReadX 12859 28672 8192 8192 NT_STATUS_OK
ReadX 12859 36864 8192 8192 NT_STATUS_OK
ReadX 12859 45056 8192 8192 NT_STATUS_OK
ReadX 12859 53248 8192 8192 NT_STATUS_OK
ReadX 12859 61440 8192 8192 NT_STATUS_OK
ReadX 12859 69632 8192 8192 NT_STATUS_OK
ReadX 12859 77824 8192 8192 NT_STATUS_OK
ReadX 12859 86016 8192 8192 NT_STATUS_OK
ReadX 12859 94208 8192 8192 NT_STATUS_OK
ReadX 12859 102400 8192 8192 NT_STATUS_OK
ReadX 12859 110592 8192 8192 NT_STATUS_OK
ReadX 12859 118784 8192 8192 NT_STATUS_OK
ReadX 12859 126976 8192 8192 NT_STATUS_OK
ReadX 12859 135168 8192 8192 NT_STATUS_OK
ReadX 12859 143360 8192 8192 NT_STATUS_OK
ReadX 12859 151552 8192 8192 NT_STATUS_OK
ReadX 12859 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12861 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12864 NT_STATUS_OK
WriteX 12864 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12864 258 NT_STATUS_OK
WriteX 12864 0 28489 28489 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12867 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 8192 8192 NT_STATUS_OK
ReadX 12871 8192 8192 8192 NT_STATUS_OK
ReadX 12871 16384 8192 8192 NT_STATUS_OK
ReadX 12871 24576 8192 8192 NT_STATUS_OK
ReadX 12871 32768 16384 16384 NT_STATUS_OK
ReadX 12871 49152 8192 8192 NT_STATUS_OK
ReadX 12871 57344 8192 8192 NT_STATUS_OK
ReadX 12871 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12871 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12876 NT_STATUS_OK
WriteX 12876 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12876 258 NT_STATUS_OK
WriteX 12876 0 29253 29253 NT_STATUS_OK
Close 12876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12883 NT_STATUS_OK
WriteX 12883 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 30183 30183 NT_STATUS_OK
Close 12883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12886 NT_STATUS_OK
WriteX 12886 0 510 510 NT_STATUS_OK
WriteX 12886 510 512 512 NT_STATUS_OK
WriteX 12886 1022 510 510 NT_STATUS_OK
WriteX 12886 1532 510 510 NT_STATUS_OK
WriteX 12886 2042 168 168 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
WriteX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 61440 4096 4096 NT_STATUS_OK
ReadX 12890 126976 4096 4096 NT_STATUS_OK
WriteX 12890 0 65536 65536 NT_STATUS_OK
WriteX 12890 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 61440 4096 4096 NT_STATUS_OK
ReadX 12891 126976 4096 4096 NT_STATUS_OK
ReadX 12891 192512 4096 4096 NT_STATUS_OK
ReadX 12891 258048 4096 4096 NT_STATUS_OK
WriteX 12891 0 65536 65536 NT_STATUS_OK
WriteX 12891 65536 65536 65536 NT_STATUS_OK
WriteX 12891 131072 65536 65536 NT_STATUS_OK
WriteX 12891 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 61440 4096 4096 NT_STATUS_OK
ReadX 12892 126976 4096 4096 NT_STATUS_OK
ReadX 12892 192512 4096 4096 NT_STATUS_OK
ReadX 12892 258048 4096 4096 NT_STATUS_OK
ReadX 12892 323584 4096 4096 NT_STATUS_OK
ReadX 12892 389120 4096 4096 NT_STATUS_OK
ReadX 12892 454656 4096 4096 NT_STATUS_OK
ReadX 12892 520192 4096 4096 NT_STATUS_OK
WriteX 12892 0 65536 65536 NT_STATUS_OK
WriteX 12892 65536 65536 65536 NT_STATUS_OK
WriteX 12892 131072 65536 65536 NT_STATUS_OK
WriteX 12892 196608 65536 65536 NT_STATUS_OK
WriteX 12892 262144 65536 65536 NT_STATUS_OK
WriteX 12892 327680 65536 65536 NT_STATUS_OK
WriteX 12892 393216 65536 65536 NT_STATUS_OK
WriteX 12892 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12893 NT_STATUS_OK
Close 12893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12892 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12902 NT_STATUS_OK
Close 12902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12904 NT_STATUS_OK
Close 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12908 NT_STATUS_OK
Close 12908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12913 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12917 NT_STATUS_OK
Close 12917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12922 NT_STATUS_OK
Close 12922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12927 NT_STATUS_OK
Close 12927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12932 NT_STATUS_OK
Close 12932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12942 NT_STATUS_OK
Close 12942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12952 NT_STATUS_OK
Close 12952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12955 NT_STATUS_OK
Close 12955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12961 NT_STATUS_OK
WriteX 12961 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12961 0 65536 65536 NT_STATUS_OK
WriteX 12961 65536 65536 65536 NT_STATUS_OK
WriteX 12961 131072 65536 65536 NT_STATUS_OK
WriteX 12961 196608 65536 65536 NT_STATUS_OK
WriteX 12961 262144 26634 26634 NT_STATUS_OK
Close 12961 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12967 NT_STATUS_OK
Close 12967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
Close 12968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
ReadX 12969 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12974 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12977 NT_STATUS_OK
Close 12977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12979 NT_STATUS_OK
Close 12979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12988 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13007 NT_STATUS_OK
Close 13007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13012 NT_STATUS_OK
Close 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13021 NT_STATUS_OK
Close 13021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13031 NT_STATUS_OK
Close 13031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13034 NT_STATUS_OK
Close 13034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13036 NT_STATUS_OK
Close 13036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
Close 13049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 0 4096 4096 NT_STATUS_OK
Close 13062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 0 4096 4096 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13050 NT_STATUS_OK
Close 13064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13093 0 4096 4096 NT_STATUS_OK
Close 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13095 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
ReadX 13095 4096 4096 4096 NT_STATUS_OK
ReadX 13095 8192 4096 4096 NT_STATUS_OK
ReadX 13095 12288 4096 4096 NT_STATUS_OK
ReadX 13095 16384 4096 4096 NT_STATUS_OK
ReadX 13095 20480 4096 4096 NT_STATUS_OK
ReadX 13095 24576 4096 4096 NT_STATUS_OK
ReadX 13095 28672 4096 4096 NT_STATUS_OK
ReadX 13095 32768 4096 4096 NT_STATUS_OK
ReadX 13095 36864 4096 4096 NT_STATUS_OK
ReadX 13095 40960 4096 4096 NT_STATUS_OK
ReadX 13095 45056 4096 4096 NT_STATUS_OK
ReadX 13095 49152 4096 4096 NT_STATUS_OK
ReadX 13095 53248 4096 4096 NT_STATUS_OK
ReadX 13095 57344 4096 4096 NT_STATUS_OK
ReadX 13095 61440 4096 4096 NT_STATUS_OK
ReadX 13095 65536 4096 4096 NT_STATUS_OK
ReadX 13095 69632 4096 4096 NT_STATUS_OK
ReadX 13095 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13095 1004 NT_STATUS_OK
WriteX 13095 0 4096 4096 NT_STATUS_OK
Close 13095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13096 NT_STATUS_OK
SET_FILE_INFORMATION 13096 1004 NT_STATUS_OK
Close 13096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13097 NT_STATUS_OK
ReadX 13097 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13098 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13101 NT_STATUS_OK
WriteX 13101 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13101 258 NT_STATUS_OK
WriteX 13101 0 65536 65536 NT_STATUS_OK
WriteX 13101 65536 19979 19979 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
WriteX 13102 0 4096 4096 NT_STATUS_OK
Flush 13102 NT_STATUS_OK
WriteX 13102 0 4096 4096 NT_STATUS_OK
Flush 13102 NT_STATUS_OK
QUERY_FILE_INFORMATION 13102 1004 NT_STATUS_OK
WriteX 13102 0 4096 4096 NT_STATUS_OK
Flush 13102 NT_STATUS_OK
WriteX 13102 0 4096 4096 NT_STATUS_OK
Flush 13102 NT_STATUS_OK
WriteX 13102 0 4096 4096 NT_STATUS_OK
Flush 13102 NT_STATUS_OK
SET_FILE_INFORMATION 13102 1004 NT_STATUS_OK
WriteX 13102 0 4096 4096 NT_STATUS_OK
Flush 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 0 4096 4096 NT_STATUS_OK
Close 13103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
Close 13105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 4096 4096 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13107 1004 NT_STATUS_OK
WriteX 13107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13104 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Close 13097 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13113 NT_STATUS_OK
WriteX 13113 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13113 258 NT_STATUS_OK
WriteX 13113 0 65536 65536 NT_STATUS_OK
WriteX 13113 65536 17654 17654 NT_STATUS_OK
Close 13113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
WriteX 13114 0 4096 4096 NT_STATUS_OK
Flush 13114 NT_STATUS_OK
WriteX 13114 0 4096 4096 NT_STATUS_OK
Flush 13114 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 1004 NT_STATUS_OK
WriteX 13114 0 4096 4096 NT_STATUS_OK
Flush 13114 NT_STATUS_OK
WriteX 13114 0 4096 4096 NT_STATUS_OK
Flush 13114 NT_STATUS_OK
WriteX 13114 0 4096 4096 NT_STATUS_OK
Flush 13114 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
WriteX 13114 0 4096 4096 NT_STATUS_OK
Flush 13114 NT_STATUS_OK
Close 13114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13115 NT_STATUS_OK
SET_FILE_INFORMATION 13115 1004 NT_STATUS_OK
Close 13115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
ReadX 13119 4096 4096 4096 NT_STATUS_OK
ReadX 13119 8192 4096 4096 NT_STATUS_OK
ReadX 13119 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13119 16384 4096 4096 NT_STATUS_OK
ReadX 13119 20480 4096 4096 NT_STATUS_OK
ReadX 13119 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
Close 13120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
Close 13121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13122 1004 NT_STATUS_OK
WriteX 13122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13123 NT_STATUS_OK
Close 13123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13128 NT_STATUS_OK
WriteX 13128 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13128 258 NT_STATUS_OK
WriteX 13128 0 65536 65536 NT_STATUS_OK
WriteX 13128 65536 19490 19490 NT_STATUS_OK
Close 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1004 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
SET_FILE_INFORMATION 13129 1004 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13130 NT_STATUS_OK
SET_FILE_INFORMATION 13130 1004 NT_STATUS_OK
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13134 0 4096 4096 NT_STATUS_OK
Close 13134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13135 NT_STATUS_OK
ReadX 13135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 4096 4096 NT_STATUS_OK
ReadX 13136 4096 4096 4096 NT_STATUS_OK
ReadX 13136 8192 4096 4096 NT_STATUS_OK
ReadX 13136 12288 4096 4096 NT_STATUS_OK
ReadX 13136 16384 4096 4096 NT_STATUS_OK
ReadX 13136 20480 4096 4096 NT_STATUS_OK
ReadX 13136 24576 4096 4096 NT_STATUS_OK
ReadX 13136 28672 4096 4096 NT_STATUS_OK
ReadX 13136 32768 4096 4096 NT_STATUS_OK
ReadX 13136 36864 4096 4096 NT_STATUS_OK
ReadX 13136 40960 4096 4096 NT_STATUS_OK
ReadX 13136 45056 4096 4096 NT_STATUS_OK
ReadX 13136 49152 4096 4096 NT_STATUS_OK
ReadX 13136 53248 4096 4096 NT_STATUS_OK
ReadX 13136 57344 4096 4096 NT_STATUS_OK
ReadX 13136 61440 4096 4096 NT_STATUS_OK
ReadX 13136 65536 4096 4096 NT_STATUS_OK
ReadX 13136 69632 4096 4096 NT_STATUS_OK
ReadX 13136 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13136 1004 NT_STATUS_OK
WriteX 13136 0 4096 4096 NT_STATUS_OK
Close 13136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13137 NT_STATUS_OK
SET_FILE_INFORMATION 13137 1004 NT_STATUS_OK
Close 13137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13139 NT_STATUS_OK
Close 13139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13142 NT_STATUS_OK
WriteX 13142 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13142 258 NT_STATUS_OK
WriteX 13142 0 65536 65536 NT_STATUS_OK
WriteX 13142 65536 8866 8866 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
Flush 13143 NT_STATUS_OK
SET_FILE_INFORMATION 13143 1004 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
Flush 13143 NT_STATUS_OK
Close 13143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 4096 4096 NT_STATUS_OK
Close 13145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13146 NT_STATUS_OK
ReadX 13146 0 4096 4096 NT_STATUS_OK
Close 13146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
WriteX 13147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13148 NT_STATUS_OK
Close 13148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13147 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13153 NT_STATUS_OK
WriteX 13153 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13153 258 NT_STATUS_OK
WriteX 13153 0 65536 65536 NT_STATUS_OK
WriteX 13153 65536 9298 9298 NT_STATUS_OK
Close 13153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
WriteX 13154 0 4096 4096 NT_STATUS_OK
Flush 13154 NT_STATUS_OK
SET_FILE_INFORMATION 13154 1004 NT_STATUS_OK
WriteX 13154 0 4096 4096 NT_STATUS_OK
Flush 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13155 NT_STATUS_OK
SET_FILE_INFORMATION 13155 1004 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13160 0 4096 4096 NT_STATUS_OK
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13161 4096 4096 4096 NT_STATUS_OK
ReadX 13161 8192 4096 4096 NT_STATUS_OK
ReadX 13161 12288 4096 4096 NT_STATUS_OK
ReadX 13161 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
Close 13163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13164 1004 NT_STATUS_OK
WriteX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13170 NT_STATUS_OK
WriteX 13170 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13170 258 NT_STATUS_OK
WriteX 13170 0 65536 65536 NT_STATUS_OK
WriteX 13170 65536 11540 11540 NT_STATUS_OK
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
WriteX 13171 0 4096 4096 NT_STATUS_OK
Flush 13171 NT_STATUS_OK
SET_FILE_INFORMATION 13171 1004 NT_STATUS_OK
WriteX 13171 0 4096 4096 NT_STATUS_OK
Flush 13171 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13172 NT_STATUS_OK
SET_FILE_INFORMATION 13172 1004 NT_STATUS_OK
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13174 NT_STATUS_OK
Close 13174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 61440 4096 4096 NT_STATUS_OK
ReadX 13176 126976 4096 4096 NT_STATUS_OK
WriteX 13176 0 65536 65536 NT_STATUS_OK
WriteX 13176 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 61440 4096 4096 NT_STATUS_OK
ReadX 13177 126976 4096 4096 NT_STATUS_OK
ReadX 13177 192512 4096 4096 NT_STATUS_OK
ReadX 13177 258048 4096 4096 NT_STATUS_OK
WriteX 13177 0 65536 65536 NT_STATUS_OK
WriteX 13177 65536 65536 65536 NT_STATUS_OK
WriteX 13177 131072 65536 65536 NT_STATUS_OK
WriteX 13177 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 61440 4096 4096 NT_STATUS_OK
ReadX 13178 126976 4096 4096 NT_STATUS_OK
ReadX 13178 192512 4096 4096 NT_STATUS_OK
ReadX 13178 258048 4096 4096 NT_STATUS_OK
ReadX 13178 323584 4096 4096 NT_STATUS_OK
ReadX 13178 389120 4096 4096 NT_STATUS_OK
ReadX 13178 454656 4096 4096 NT_STATUS_OK
ReadX 13178 520192 4096 4096 NT_STATUS_OK
WriteX 13178 0 65536 65536 NT_STATUS_OK
WriteX 13178 65536 65536 65536 NT_STATUS_OK
WriteX 13178 131072 65536 65536 NT_STATUS_OK
WriteX 13178 196608 65536 65536 NT_STATUS_OK
WriteX 13178 262144 65536 65536 NT_STATUS_OK
WriteX 13178 327680 65536 65536 NT_STATUS_OK
WriteX 13178 393216 65536 65536 NT_STATUS_OK
WriteX 13178 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
ReadX 13179 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13180 NT_STATUS_OK
WriteX 13180 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13180 258 NT_STATUS_OK
WriteX 13180 0 53 53 NT_STATUS_OK
Close 13180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13179 8192 4096 4096 NT_STATUS_OK
ReadX 13179 12288 4096 4096 NT_STATUS_OK
WriteX 13183 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13183 258 NT_STATUS_OK
ReadX 13179 16384 4096 4096 NT_STATUS_OK
ReadX 13179 20480 4096 4096 NT_STATUS_OK
WriteX 13183 0 15360 15360 NT_STATUS_OK
Close 13183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13184 NT_STATUS_OK
ReadX 13184 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13184 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13184 1004 NT_STATUS_OK
WriteX 13184 0 4096 4096 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13185 NT_STATUS_OK
Close 13185 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13188 NT_STATUS_OK
Close 13188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13187 4096 4096 4096 NT_STATUS_OK
ReadX 13187 8192 4096 4096 NT_STATUS_OK
ReadX 13187 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
ReadX 13190 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 4096 4096 NT_STATUS_OK
ReadX 13191 4096 4096 4096 NT_STATUS_OK
ReadX 13191 8192 4096 4096 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13192 NT_STATUS_OK
WriteX 13192 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13192 258 NT_STATUS_OK
WriteX 13192 0 15360 15360 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13193 NT_STATUS_OK
ReadX 13193 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13193 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13193 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13194 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13197 NT_STATUS_OK
SET_FILE_INFORMATION 13197 1004 NT_STATUS_OK
Close 13197 NT_STATUS_OK
WriteX 13193 0 4096 4096 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13198 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13200 NT_STATUS_OK
ReadX 13200 0 4096 4096 NT_STATUS_OK
ReadX 13200 4096 4096 4096 NT_STATUS_OK
ReadX 13200 8192 4096 4096 NT_STATUS_OK
ReadX 13200 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13200 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13200 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13202 NT_STATUS_OK
WriteX 13202 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13202 258 NT_STATUS_OK
WriteX 13202 0 53 53 NT_STATUS_OK
Close 13202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13203 NT_STATUS_OK
Close 13203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13201 4096 4096 4096 NT_STATUS_OK
ReadX 13201 8192 4096 4096 NT_STATUS_OK
ReadX 13201 12288 4096 4096 NT_STATUS_OK
WriteX 13205 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13205 258 NT_STATUS_OK
WriteX 13205 0 12006 12006 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13206 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13206 1004 NT_STATUS_OK
WriteX 13206 0 4096 4096 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13210 NT_STATUS_OK
Close 13210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13209 4096 4096 4096 NT_STATUS_OK
ReadX 13209 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13212 NT_STATUS_OK
WriteX 13212 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13212 258 NT_STATUS_OK
WriteX 13212 0 11991 11991 NT_STATUS_OK
Close 13212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13213 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13217 NT_STATUS_OK
SET_FILE_INFORMATION 13217 1004 NT_STATUS_OK
Close 13217 NT_STATUS_OK
WriteX 13213 0 4096 4096 NT_STATUS_OK
Close 13213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13218 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13221 NT_STATUS_OK
WriteX 13200 0 19054 19054 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13220 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13220 1004 NT_STATUS_OK
ReadX 13220 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13220 1004 NT_STATUS_OK
WriteX 13220 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13220 1004 NT_STATUS_OK
Close 13196 NT_STATUS_OK
WriteX 13220 0 12288 12288 NT_STATUS_OK
Close 13216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13223 NT_STATUS_OK
Close 13223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13200 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13225 NT_STATUS_OK
Close 13225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 61440 61440 NT_STATUS_OK
ReadX 13227 61440 4096 4096 NT_STATUS_OK
ReadX 13227 65536 61440 61440 NT_STATUS_OK
ReadX 13227 126976 4096 4096 NT_STATUS_OK
ReadX 13227 131072 61440 61440 NT_STATUS_OK
ReadX 13227 192512 4096 4096 NT_STATUS_OK
ReadX 13227 196608 61440 61440 NT_STATUS_OK
ReadX 13227 258048 4096 4096 NT_STATUS_OK
ReadX 13227 262144 61440 61440 NT_STATUS_OK
ReadX 13227 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 61440 61440 NT_STATUS_OK
ReadX 13228 61440 4096 4096 NT_STATUS_OK
ReadX 13228 65536 61440 61440 NT_STATUS_OK
ReadX 13228 126976 4096 4096 NT_STATUS_OK
ReadX 13228 131072 61440 61440 NT_STATUS_OK
ReadX 13228 192512 4096 4096 NT_STATUS_OK
ReadX 13228 196608 61440 61440 NT_STATUS_OK
ReadX 13228 258048 4096 4096 NT_STATUS_OK
ReadX 13228 262144 61440 61440 NT_STATUS_OK
ReadX 13228 323584 4096 4096 NT_STATUS_OK
ReadX 13228 327680 61440 61440 NT_STATUS_OK
ReadX 13228 389120 4096 4096 NT_STATUS_OK
ReadX 13228 393216 61440 61440 NT_STATUS_OK
ReadX 13228 454656 4096 4096 NT_STATUS_OK
ReadX 13228 458752 61440 61440 NT_STATUS_OK
ReadX 13228 520192 4096 4096 NT_STATUS_OK
ReadX 13228 524288 61440 61440 NT_STATUS_OK
ReadX 13228 585728 4096 4096 NT_STATUS_OK
ReadX 13228 589824 61440 61440 NT_STATUS_OK
ReadX 13228 651264 4096 4096 NT_STATUS_OK
ReadX 13228 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 61440 61440 NT_STATUS_OK
ReadX 13229 61440 4096 4096 NT_STATUS_OK
ReadX 13229 65536 61440 61440 NT_STATUS_OK
ReadX 13229 126976 4096 4096 NT_STATUS_OK
ReadX 13229 131072 61440 61440 NT_STATUS_OK
ReadX 13229 192512 4096 4096 NT_STATUS_OK
ReadX 13229 196608 61440 61440 NT_STATUS_OK
ReadX 13229 258048 4096 4096 NT_STATUS_OK
ReadX 13229 262144 61440 61440 NT_STATUS_OK
ReadX 13229 323584 4096 4096 NT_STATUS_OK
ReadX 13229 327680 61440 61440 NT_STATUS_OK
ReadX 13229 389120 4096 4096 NT_STATUS_OK
ReadX 13229 393216 61440 61440 NT_STATUS_OK
ReadX 13229 454656 4096 4096 NT_STATUS_OK
ReadX 13229 458752 61440 61440 NT_STATUS_OK
ReadX 13229 520192 4096 4096 NT_STATUS_OK
ReadX 13229 524288 61440 61440 NT_STATUS_OK
ReadX 13229 585728 4096 4096 NT_STATUS_OK
ReadX 13229 589824 61440 61440 NT_STATUS_OK
ReadX 13229 651264 4096 4096 NT_STATUS_OK
ReadX 13229 655360 61440 61440 NT_STATUS_OK
ReadX 13229 716800 4096 4096 NT_STATUS_OK
ReadX 13229 720896 61440 61440 NT_STATUS_OK
ReadX 13229 782336 4096 4096 NT_STATUS_OK
ReadX 13229 786432 61440 61440 NT_STATUS_OK
ReadX 13229 847872 4096 4096 NT_STATUS_OK
ReadX 13229 851968 61440 61440 NT_STATUS_OK
ReadX 13229 913408 4096 4096 NT_STATUS_OK
ReadX 13229 917504 61440 61440 NT_STATUS_OK
ReadX 13229 978944 4096 4096 NT_STATUS_OK
ReadX 13229 983040 61440 61440 NT_STATUS_OK
ReadX 13229 1044480 4096 4096 NT_STATUS_OK
ReadX 13229 1048576 61440 61440 NT_STATUS_OK
ReadX 13229 1110016 4096 4096 NT_STATUS_OK
ReadX 13229 1114112 61440 61440 NT_STATUS_OK
ReadX 13229 1175552 4096 4096 NT_STATUS_OK
ReadX 13229 1179648 61440 61440 NT_STATUS_OK
ReadX 13229 1241088 4096 4096 NT_STATUS_OK
ReadX 13229 1245184 61440 61440 NT_STATUS_OK
ReadX 13229 1306624 4096 4096 NT_STATUS_OK
ReadX 13229 1310720 61440 61440 NT_STATUS_OK
ReadX 13229 1372160 4096 4096 NT_STATUS_OK
ReadX 13229 1376256 61440 61440 NT_STATUS_OK
ReadX 13229 1437696 4096 4096 NT_STATUS_OK
ReadX 13229 1441792 61440 61440 NT_STATUS_OK
ReadX 13229 1503232 4096 4096 NT_STATUS_OK
ReadX 13229 1507328 61440 61440 NT_STATUS_OK
ReadX 13229 1568768 4096 4096 NT_STATUS_OK
ReadX 13229 1572864 61440 61440 NT_STATUS_OK
ReadX 13229 1634304 4096 4096 NT_STATUS_OK
ReadX 13229 1638400 61440 61440 NT_STATUS_OK
ReadX 13229 1699840 4096 4096 NT_STATUS_OK
ReadX 13229 1703936 61440 61440 NT_STATUS_OK
ReadX 13229 1765376 4096 4096 NT_STATUS_OK
ReadX 13229 1769472 61440 61440 NT_STATUS_OK
ReadX 13229 1830912 4096 4096 NT_STATUS_OK
ReadX 13229 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13236 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 1004 NT_STATUS_OK
WriteX 13236 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13237 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13238 NT_STATUS_OK
WriteX 13238 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13238 258 NT_STATUS_OK
WriteX 13238 0 491 491 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13236 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13242 NT_STATUS_OK
WriteX 13242 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13242 258 NT_STATUS_OK
WriteX 13242 0 543 543 NT_STATUS_OK
Close 13242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Close 13234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13248 NT_STATUS_OK
ReadX 13248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13256 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 1004 NT_STATUS_OK
WriteX 13256 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 258 NT_STATUS_OK
WriteX 13256 0 2048 2048 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13257 NT_STATUS_OK
ReadX 13257 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
Flush 13257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13262 NT_STATUS_OK
WriteX 13262 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 258 NT_STATUS_OK
WriteX 13262 0 2048 2048 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13267 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13268 NT_STATUS_OK
WriteX 13268 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13268 258 NT_STATUS_OK
WriteX 13268 0 2048 2048 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 2048 2048 NT_STATUS_OK
ReadX 13247 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13263 0 4096 4096 NT_STATUS_OK
WriteX 13247 0 8192 8192 NT_STATUS_OK
WriteX 13248 0 4096 4096 NT_STATUS_OK
WriteX 13249 0 4096 4096 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13273 NT_STATUS_OK
QUERY_FILE_INFORMATION 13273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Close 13247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13293 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 1004 NT_STATUS_OK
WriteX 13293 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 258 NT_STATUS_OK
WriteX 13293 0 2048 2048 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13301 NT_STATUS_OK
QUERY_FILE_INFORMATION 13301 1004 NT_STATUS_OK
WriteX 13301 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13301 258 NT_STATUS_OK
WriteX 13301 0 2048 2048 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13294 0 4096 4096 NT_STATUS_OK
Flush 13294 NT_STATUS_OK
WriteX 13302 0 4096 4096 NT_STATUS_OK
Flush 13302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13294 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13296 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13304 NT_STATUS_OK
WriteX 13304 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13304 258 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13307 NT_STATUS_OK
WriteX 13307 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13307 258 NT_STATUS_OK
WriteX 13307 0 4096 4096 NT_STATUS_OK
Close 13307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13308 0 4096 4096 NT_STATUS_OK
Close 13305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13311 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13315 NT_STATUS_OK
WriteX 13315 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 258 NT_STATUS_OK
WriteX 13315 0 2048 2048 NT_STATUS_OK
Close 13315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13317 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13325 NT_STATUS_OK
ReadX 13325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13326 NT_STATUS_OK
ReadX 13326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13327 NT_STATUS_OK
ReadX 13327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13330 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Close 13328 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Close 13326 NT_STATUS_OK
Close 13327 NT_STATUS_OK
Close 13329 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13332 NT_STATUS_OK
QUERY_FILE_INFORMATION 13332 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13334 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13352 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 258 NT_STATUS_OK
WriteX 13352 0 2048 2048 NT_STATUS_OK
Close 13352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13354 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13364 NT_STATUS_OK
QUERY_FILE_INFORMATION 13364 1004 NT_STATUS_OK
WriteX 13364 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13364 258 NT_STATUS_OK
WriteX 13364 0 2048 2048 NT_STATUS_OK
Close 13364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13372 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 1004 NT_STATUS_OK
WriteX 13372 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 258 NT_STATUS_OK
WriteX 13372 0 2048 2048 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Flush 13353 NT_STATUS_OK
WriteX 13365 0 4096 4096 NT_STATUS_OK
Flush 13365 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
Flush 13373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13365 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13355 4096 16384 16384 NT_STATUS_OK
ReadX 13335 4096 16384 16384 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 2048 2048 NT_STATUS_OK
WriteX 13375 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13376 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13375 NT_STATUS_OK
Close 13359 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Close 13339 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Close 13337 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13378 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13380 NT_STATUS_OK
QUERY_FILE_INFORMATION 13380 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13382 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13383 4096 16384 16384 NT_STATUS_OK
WriteX 13383 0 4096 4096 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
WriteX 13385 0 4096 4096 NT_STATUS_OK
WriteX 13386 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13395 NT_STATUS_OK
ReadX 13395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 8192 8192 NT_STATUS_OK
ReadX 13389 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13403 0 4096 4096 NT_STATUS_OK
ReadX 13403 4096 4096 4096 NT_STATUS_OK
ReadX 13403 8192 4096 4096 NT_STATUS_OK
WriteX 13389 0 4096 4096 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13404 0 4096 4096 NT_STATUS_OK
ReadX 13404 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13383 0 4096 4096 NT_STATUS_OK
WriteX 13384 0 4096 4096 NT_STATUS_OK
WriteX 13385 0 4096 4096 NT_STATUS_OK
WriteX 13386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13409 NT_STATUS_OK
QUERY_FILE_INFORMATION 13409 1004 NT_STATUS_OK
WriteX 13409 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13409 258 NT_STATUS_OK
WriteX 13409 0 2048 2048 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
ReadX 13412 4096 4096 4096 NT_STATUS_OK
WriteX 13412 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
ReadX 13414 4096 4096 4096 NT_STATUS_OK
WriteX 13414 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13415 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13395 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13396 NT_STATUS_OK
Close 13397 NT_STATUS_OK
Close 13398 NT_STATUS_OK
Close 13399 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13394 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Close 13403 NT_STATUS_OK
Close 13404 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13417 0 4096 4096 NT_STATUS_OK
ReadX 13417 4096 4096 4096 NT_STATUS_OK
ReadX 13417 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
ReadX 13418 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13435 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 1004 NT_STATUS_OK
WriteX 13435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 2048 2048 NT_STATUS_OK
Close 13435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13441 NT_STATUS_OK
QUERY_FILE_INFORMATION 13441 1004 NT_STATUS_OK
WriteX 13441 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13441 258 NT_STATUS_OK
WriteX 13441 0 2048 2048 NT_STATUS_OK
Close 13441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13442 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13425 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13443 NT_STATUS_OK
QUERY_FILE_INFORMATION 13443 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Close 13426 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13417 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13445 NT_STATUS_OK
QUERY_FILE_INFORMATION 13445 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 61440 4096 4096 NT_STATUS_OK
ReadX 13447 126976 4096 4096 NT_STATUS_OK
WriteX 13447 0 65536 65536 NT_STATUS_OK
WriteX 13447 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 61440 4096 4096 NT_STATUS_OK
ReadX 13448 126976 4096 4096 NT_STATUS_OK
ReadX 13448 192512 4096 4096 NT_STATUS_OK
ReadX 13448 258048 4096 4096 NT_STATUS_OK
WriteX 13448 0 65536 65536 NT_STATUS_OK
WriteX 13448 65536 65536 65536 NT_STATUS_OK
WriteX 13448 131072 65536 65536 NT_STATUS_OK
WriteX 13448 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 61440 4096 4096 NT_STATUS_OK
ReadX 13449 126976 4096 4096 NT_STATUS_OK
ReadX 13449 192512 4096 4096 NT_STATUS_OK
ReadX 13449 258048 4096 4096 NT_STATUS_OK
ReadX 13449 323584 4096 4096 NT_STATUS_OK
ReadX 13449 389120 4096 4096 NT_STATUS_OK
ReadX 13449 454656 4096 4096 NT_STATUS_OK
ReadX 13449 520192 4096 4096 NT_STATUS_OK
WriteX 13449 0 65536 65536 NT_STATUS_OK
WriteX 13449 65536 65536 65536 NT_STATUS_OK
WriteX 13449 131072 65536 65536 NT_STATUS_OK
WriteX 13449 196608 65536 65536 NT_STATUS_OK
WriteX 13449 262144 65536 65536 NT_STATUS_OK
WriteX 13449 327680 65536 65536 NT_STATUS_OK
WriteX 13449 393216 65536 65536 NT_STATUS_OK
WriteX 13449 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13450 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13450 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13450 8192 4096 4096 NT_STATUS_OK
ReadX 13450 12288 4096 4096 NT_STATUS_OK
ReadX 13450 16384 4096 4096 NT_STATUS_OK
ReadX 13450 20480 4096 4096 NT_STATUS_OK
ReadX 13450 24576 4096 4096 NT_STATUS_OK
ReadX 13450 28672 4096 4096 NT_STATUS_OK
ReadX 13450 32768 4096 4096 NT_STATUS_OK
ReadX 13450 36864 4096 4096 NT_STATUS_OK
ReadX 13450 40960 4096 4096 NT_STATUS_OK
ReadX 13450 45056 4096 4096 NT_STATUS_OK
ReadX 13450 49152 4096 4096 NT_STATUS_OK
ReadX 13450 53248 4096 4096 NT_STATUS_OK
ReadX 13450 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13450 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13453 NT_STATUS_OK
WriteX 13453 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13453 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13453 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13453 1004 NT_STATUS_OK
WriteX 13453 0 57088 57088 NT_STATUS_OK
WriteX 13453 0 4096 4096 NT_STATUS_OK
Flush 13453 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13454 NT_STATUS_OK
SET_FILE_INFORMATION 13454 1004 NT_STATUS_OK
Close 13454 NT_STATUS_OK
SET_FILE_INFORMATION 13453 1004 NT_STATUS_OK
WriteX 13453 0 4096 4096 NT_STATUS_OK
Close 13453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13455 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13457 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13458 NT_STATUS_OK
WriteX 13458 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13458 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 51456 51456 NT_STATUS_OK
WriteX 13458 0 4096 4096 NT_STATUS_OK
Flush 13458 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 4096 4096 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Close 13457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13462 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13464 NT_STATUS_OK
Close 13464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13467 NT_STATUS_OK
WriteX 13467 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13467 258 NT_STATUS_OK
WriteX 13467 0 53077 53077 NT_STATUS_OK
Close 13467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13468 NT_STATUS_OK
WriteX 13468 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13468 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13468 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13468 1004 NT_STATUS_OK
WriteX 13468 0 65536 65536 NT_STATUS_OK
WriteX 13468 65536 1856 1856 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
SET_FILE_INFORMATION 13468 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13468 1004 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Close 13462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13470 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13474 NT_STATUS_OK
Close 13474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13477 NT_STATUS_OK
WriteX 13477 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13477 258 NT_STATUS_OK
WriteX 13477 0 7983 7983 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13482 NT_STATUS_OK
WriteX 13482 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 258 NT_STATUS_OK
WriteX 13482 0 65536 65536 NT_STATUS_OK
WriteX 13482 65536 65536 65536 NT_STATUS_OK
WriteX 13482 131072 65536 65536 NT_STATUS_OK
WriteX 13482 196608 65536 65536 NT_STATUS_OK
WriteX 13482 262144 65536 65536 NT_STATUS_OK
WriteX 13482 327680 65536 65536 NT_STATUS_OK
WriteX 13482 393216 65536 65536 NT_STATUS_OK
WriteX 13482 458752 46731 46731 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13483 NT_STATUS_OK
WriteX 13483 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13472 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13483 1004 NT_STATUS_OK
WriteX 13483 0 65536 65536 NT_STATUS_OK
WriteX 13483 65536 22848 22848 NT_STATUS_OK
WriteX 13483 0 4096 4096 NT_STATUS_OK
Flush 13483 NT_STATUS_OK
SET_FILE_INFORMATION 13483 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13483 1004 NT_STATUS_OK
WriteX 13483 0 4096 4096 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13487 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13488 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13488 1004 NT_STATUS_OK
ReadX 13488 8192 4096 4096 NT_STATUS_OK
ReadX 13488 12288 4096 4096 NT_STATUS_OK
ReadX 13488 16384 4096 4096 NT_STATUS_OK
ReadX 13488 20480 4096 4096 NT_STATUS_OK
ReadX 13488 24576 4096 4096 NT_STATUS_OK
ReadX 13488 28672 4096 4096 NT_STATUS_OK
ReadX 13488 32768 4096 4096 NT_STATUS_OK
ReadX 13488 36864 4096 4096 NT_STATUS_OK
ReadX 13488 40960 4096 4096 NT_STATUS_OK
ReadX 13488 45056 4096 4096 NT_STATUS_OK
ReadX 13488 49152 4096 4096 NT_STATUS_OK
ReadX 13488 53248 4096 4096 NT_STATUS_OK
ReadX 13488 57344 4096 4096 NT_STATUS_OK
ReadX 13488 61440 4096 4096 NT_STATUS_OK
ReadX 13488 65536 4096 4096 NT_STATUS_OK
ReadX 13488 69632 4096 4096 NT_STATUS_OK
ReadX 13488 73728 4096 4096 NT_STATUS_OK
ReadX 13488 77824 4096 4096 NT_STATUS_OK
ReadX 13488 81920 4096 4096 NT_STATUS_OK
ReadX 13488 86016 4096 4096 NT_STATUS_OK
ReadX 13488 90112 4096 4096 NT_STATUS_OK
ReadX 13488 94208 4096 4096 NT_STATUS_OK
ReadX 13488 98304 4096 4096 NT_STATUS_OK
ReadX 13488 102400 4096 4096 NT_STATUS_OK
ReadX 13488 106496 4096 4096 NT_STATUS_OK
ReadX 13488 110592 4096 4096 NT_STATUS_OK
ReadX 13488 114688 4096 4096 NT_STATUS_OK
ReadX 13488 118784 4096 4096 NT_STATUS_OK
ReadX 13488 122880 4096 4096 NT_STATUS_OK
ReadX 13488 126976 4096 4096 NT_STATUS_OK
ReadX 13488 131072 4096 4096 NT_STATUS_OK
ReadX 13488 135168 4096 4096 NT_STATUS_OK
ReadX 13488 139264 4096 4096 NT_STATUS_OK
ReadX 13488 143360 4096 4096 NT_STATUS_OK
ReadX 13488 147456 4096 4096 NT_STATUS_OK
ReadX 13488 151552 4096 4096 NT_STATUS_OK
ReadX 13488 155648 4096 4096 NT_STATUS_OK
ReadX 13488 159744 4096 4096 NT_STATUS_OK
ReadX 13488 163840 4096 4096 NT_STATUS_OK
ReadX 13488 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13488 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13489 NT_STATUS_OK
Close 13489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13491 NT_STATUS_OK
WriteX 13491 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13491 258 NT_STATUS_OK
Close 13488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13492 NT_STATUS_OK
SET_FILE_INFORMATION 13492 1004 NT_STATUS_OK
Close 13492 NT_STATUS_OK
WriteX 13491 0 42388 42388 NT_STATUS_OK
Close 13491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13493 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
ReadX 13495 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13496 NT_STATUS_OK
WriteX 13496 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13496 258 NT_STATUS_OK
SET_FILE_INFORMATION 13496 1004 NT_STATUS_OK
WriteX 13496 0 42652 42652 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13498 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
ReadX 13500 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13502 NT_STATUS_OK
Close 13502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13505 NT_STATUS_OK
WriteX 13505 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13505 258 NT_STATUS_OK
WriteX 13505 0 65536 65536 NT_STATUS_OK
WriteX 13505 65536 49 49 NT_STATUS_OK
Close 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 61440 61440 NT_STATUS_OK
ReadX 13506 61440 4096 4096 NT_STATUS_OK
ReadX 13506 65536 61440 61440 NT_STATUS_OK
ReadX 13506 126976 4096 4096 NT_STATUS_OK
ReadX 13506 131072 61440 61440 NT_STATUS_OK
ReadX 13506 192512 4096 4096 NT_STATUS_OK
ReadX 13506 196608 61440 61440 NT_STATUS_OK
ReadX 13506 258048 4096 4096 NT_STATUS_OK
ReadX 13506 262144 61440 61440 NT_STATUS_OK
ReadX 13506 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 61440 61440 NT_STATUS_OK
ReadX 13507 61440 4096 4096 NT_STATUS_OK
ReadX 13507 65536 61440 61440 NT_STATUS_OK
ReadX 13507 126976 4096 4096 NT_STATUS_OK
ReadX 13507 131072 61440 61440 NT_STATUS_OK
ReadX 13507 192512 4096 4096 NT_STATUS_OK
ReadX 13507 196608 61440 61440 NT_STATUS_OK
ReadX 13507 258048 4096 4096 NT_STATUS_OK
ReadX 13507 262144 61440 61440 NT_STATUS_OK
ReadX 13507 323584 4096 4096 NT_STATUS_OK
ReadX 13507 327680 61440 61440 NT_STATUS_OK
ReadX 13507 389120 4096 4096 NT_STATUS_OK
ReadX 13507 393216 61440 61440 NT_STATUS_OK
ReadX 13507 454656 4096 4096 NT_STATUS_OK
ReadX 13507 458752 61440 61440 NT_STATUS_OK
ReadX 13507 520192 4096 4096 NT_STATUS_OK
ReadX 13507 524288 61440 61440 NT_STATUS_OK
ReadX 13507 585728 4096 4096 NT_STATUS_OK
ReadX 13507 589824 61440 61440 NT_STATUS_OK
ReadX 13507 651264 4096 4096 NT_STATUS_OK
ReadX 13507 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 61440 61440 NT_STATUS_OK
ReadX 13508 61440 4096 4096 NT_STATUS_OK
ReadX 13508 65536 61440 61440 NT_STATUS_OK
ReadX 13508 126976 4096 4096 NT_STATUS_OK
ReadX 13508 131072 61440 61440 NT_STATUS_OK
ReadX 13508 192512 4096 4096 NT_STATUS_OK
ReadX 13508 196608 61440 61440 NT_STATUS_OK
ReadX 13508 258048 4096 4096 NT_STATUS_OK
ReadX 13508 262144 61440 61440 NT_STATUS_OK
ReadX 13508 323584 4096 4096 NT_STATUS_OK
ReadX 13508 327680 61440 61440 NT_STATUS_OK
ReadX 13508 389120 4096 4096 NT_STATUS_OK
ReadX 13508 393216 61440 61440 NT_STATUS_OK
ReadX 13508 454656 4096 4096 NT_STATUS_OK
ReadX 13508 458752 61440 61440 NT_STATUS_OK
ReadX 13508 520192 4096 4096 NT_STATUS_OK
ReadX 13508 524288 61440 61440 NT_STATUS_OK
ReadX 13508 585728 4096 4096 NT_STATUS_OK
ReadX 13508 589824 61440 61440 NT_STATUS_OK
ReadX 13508 651264 4096 4096 NT_STATUS_OK
ReadX 13508 655360 61440 61440 NT_STATUS_OK
ReadX 13508 716800 4096 4096 NT_STATUS_OK
ReadX 13508 720896 61440 61440 NT_STATUS_OK
ReadX 13508 782336 4096 4096 NT_STATUS_OK
ReadX 13508 786432 61440 61440 NT_STATUS_OK
ReadX 13508 847872 4096 4096 NT_STATUS_OK
ReadX 13508 851968 61440 61440 NT_STATUS_OK
ReadX 13508 913408 4096 4096 NT_STATUS_OK
ReadX 13508 917504 61440 61440 NT_STATUS_OK
ReadX 13508 978944 4096 4096 NT_STATUS_OK
ReadX 13508 983040 61440 61440 NT_STATUS_OK
ReadX 13508 1044480 4096 4096 NT_STATUS_OK
ReadX 13508 1048576 61440 61440 NT_STATUS_OK
ReadX 13508 1110016 4096 4096 NT_STATUS_OK
ReadX 13508 1114112 61440 61440 NT_STATUS_OK
ReadX 13508 1175552 4096 4096 NT_STATUS_OK
ReadX 13508 1179648 61440 61440 NT_STATUS_OK
ReadX 13508 1241088 4096 4096 NT_STATUS_OK
ReadX 13508 1245184 61440 61440 NT_STATUS_OK
ReadX 13508 1306624 4096 4096 NT_STATUS_OK
ReadX 13508 1310720 61440 61440 NT_STATUS_OK
ReadX 13508 1372160 4096 4096 NT_STATUS_OK
ReadX 13508 1376256 61440 61440 NT_STATUS_OK
ReadX 13508 1437696 4096 4096 NT_STATUS_OK
ReadX 13508 1441792 61440 61440 NT_STATUS_OK
ReadX 13508 1503232 4096 4096 NT_STATUS_OK
ReadX 13508 1507328 61440 61440 NT_STATUS_OK
ReadX 13508 1568768 4096 4096 NT_STATUS_OK
ReadX 13508 1572864 61440 61440 NT_STATUS_OK
ReadX 13508 1634304 4096 4096 NT_STATUS_OK
ReadX 13508 1638400 61440 61440 NT_STATUS_OK
ReadX 13508 1699840 4096 4096 NT_STATUS_OK
ReadX 13508 1703936 61440 61440 NT_STATUS_OK
ReadX 13508 1765376 4096 4096 NT_STATUS_OK
ReadX 13508 1769472 61440 61440 NT_STATUS_OK
ReadX 13508 1830912 4096 4096 NT_STATUS_OK
ReadX 13508 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1005 NT_STATUS_OK
ReadX 13510 2156 24 24 NT_STATUS_OK
ReadX 13510 2139 276 276 NT_STATUS_OK
ReadX 13510 2136 14 14 NT_STATUS_OK
ReadX 13510 2136 7 7 NT_STATUS_OK
ReadX 13510 2138 12 12 NT_STATUS_OK
ReadX 13510 2137 8 8 NT_STATUS_OK
ReadX 13510 2135 15 15 NT_STATUS_OK
ReadX 13510 0 16 16 NT_STATUS_OK
ReadX 13510 16 2048 2048 NT_STATUS_OK
ReadX 13510 2064 2048 2048 NT_STATUS_OK
ReadX 13510 257 2048 2048 NT_STATUS_OK
ReadX 13510 385 2048 2048 NT_STATUS_OK
ReadX 13510 513 2048 2048 NT_STATUS_OK
ReadX 13510 641 2048 2048 NT_STATUS_OK
ReadX 13510 769 2048 2048 NT_STATUS_OK
ReadX 13510 897 2048 2048 NT_STATUS_OK
ReadX 13510 1025 2048 2048 NT_STATUS_OK
ReadX 13510 1153 2048 2048 NT_STATUS_OK
ReadX 13510 1281 2048 2048 NT_STATUS_OK
ReadX 13510 1409 2048 2048 NT_STATUS_OK
ReadX 13510 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13506 NT_STATUS_OK
Close 13507 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13515 NT_STATUS_OK
WriteX 13515 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13515 258 NT_STATUS_OK
WriteX 13515 0 10575 10575 NT_STATUS_OK
Flush 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13516 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
Close 13510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13520 NT_STATUS_OK
LockX 13520 2147483538 1 NT_STATUS_OK
UnlockX 13520 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13520 1005 NT_STATUS_OK
ReadX 13520 0 512 512 NT_STATUS_OK
ReadX 13520 512 512 512 NT_STATUS_OK
ReadX 13520 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13520 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13520 1004 NT_STATUS_OK
Close 13520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13521 NT_STATUS_OK
QUERY_FILE_INFORMATION 13521 1005 NT_STATUS_OK
ReadX 13521 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13522 NT_STATUS_OK
LockX 13522 2147483538 1 NT_STATUS_OK
UnlockX 13522 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 1005 NT_STATUS_OK
ReadX 13522 0 512 512 NT_STATUS_OK
ReadX 13522 512 512 512 NT_STATUS_OK
ReadX 13522 1024 512 512 NT_STATUS_OK
ReadX 13522 288 20 20 NT_STATUS_OK
ReadX 13522 308 2084 2084 NT_STATUS_OK
ReadX 13522 388 2084 2084 NT_STATUS_OK
ReadX 13522 388 2084 2084 NT_STATUS_OK
ReadX 13509 2157 1386 1386 NT_STATUS_OK
ReadX 13522 2472 399 399 NT_STATUS_OK
ReadX 13522 3072 1536 1536 NT_STATUS_OK
ReadX 13522 544 149 149 NT_STATUS_OK
ReadX 13522 693 485 485 NT_STATUS_OK
Close 13522 NT_STATUS_OK
ReadX 13509 2157 4096 4096 NT_STATUS_OK
ReadX 13509 6253 4096 4096 NT_STATUS_OK
ReadX 13509 10349 4096 4096 NT_STATUS_OK
ReadX 13509 14445 4096 4096 NT_STATUS_OK
ReadX 13509 18541 4096 4096 NT_STATUS_OK
ReadX 13509 22637 256 256 NT_STATUS_OK
ReadX 13509 22893 4096 4096 NT_STATUS_OK
ReadX 13509 26989 4096 4096 NT_STATUS_OK
ReadX 13509 31085 4096 4096 NT_STATUS_OK
ReadX 13509 35181 4096 4096 NT_STATUS_OK
ReadX 13509 39277 4096 4096 NT_STATUS_OK
ReadX 13509 43373 4096 4096 NT_STATUS_OK
ReadX 13509 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13509 2157 1024 1024 NT_STATUS_OK
ReadX 13509 1667 4688 4688 NT_STATUS_OK
ReadX 13509 6355 3516 3516 NT_STATUS_OK
ReadX 13509 9871 16384 16384 NT_STATUS_OK
ReadX 13509 26255 3771 3771 NT_STATUS_OK
ReadX 13509 30026 2048 2048 NT_STATUS_OK
ReadX 13509 32074 1024 1024 NT_STATUS_OK
ReadX 13509 33098 6652 6652 NT_STATUS_OK
ReadX 13509 39750 16384 16384 NT_STATUS_OK
ReadX 13509 56134 10496 10496 NT_STATUS_OK
ReadX 13509 66630 1784 1784 NT_STATUS_OK
ReadX 13509 68414 90 90 NT_STATUS_OK
ReadX 13509 68504 273 273 NT_STATUS_OK
ReadX 13509 68777 1600 1600 NT_STATUS_OK
ReadX 13509 70377 640 640 NT_STATUS_OK
ReadX 13509 71017 1280 1280 NT_STATUS_OK
ReadX 13509 72297 8464 8464 NT_STATUS_OK
ReadX 13509 80761 158 158 NT_STATUS_OK
ReadX 13509 80919 912 912 NT_STATUS_OK
ReadX 13509 81831 1980 1980 NT_STATUS_OK
ReadX 13509 83811 2256 2256 NT_STATUS_OK
ReadX 13509 86067 400 400 NT_STATUS_OK
ReadX 13509 86467 252 252 NT_STATUS_OK
ReadX 13509 86719 42 42 NT_STATUS_OK
ReadX 13509 86761 725 725 NT_STATUS_OK
ReadX 13509 2009 512 512 NT_STATUS_OK
ReadX 13509 3895 9 9 NT_STATUS_OK
ReadX 13509 3781 46 46 NT_STATUS_OK
ReadX 13509 4059 92 92 NT_STATUS_OK
ReadX 13509 3781 92 92 NT_STATUS_OK
ReadX 13509 3986 184 184 NT_STATUS_OK
ReadX 13509 3987 16384 16384 NT_STATUS_OK
ReadX 13509 3902 16384 16384 NT_STATUS_OK
ReadX 13509 3781 10240 10240 NT_STATUS_OK
ReadX 13509 3821 16384 16384 NT_STATUS_OK
ReadX 13509 3891 935 935 NT_STATUS_OK
ReadX 13509 4060 10240 10240 NT_STATUS_OK
ReadX 13509 4059 184 184 NT_STATUS_OK
ReadX 13509 256 184 184 NT_STATUS_OK
ReadX 13509 256 1026 1026 NT_STATUS_OK
ReadX 13509 3901 326 326 NT_STATUS_OK
ReadX 13509 3899 652 652 NT_STATUS_OK
ReadX 13509 256 2 2 NT_STATUS_OK
ReadX 13509 258 4948 4948 NT_STATUS_OK
Close 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13527 NT_STATUS_OK
WriteX 13527 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13527 258 NT_STATUS_OK
WriteX 13527 0 65536 65536 NT_STATUS_OK
WriteX 13527 65536 65536 65536 NT_STATUS_OK
WriteX 13527 131072 65536 65536 NT_STATUS_OK
WriteX 13527 196608 65536 65536 NT_STATUS_OK
WriteX 13527 262144 65536 65536 NT_STATUS_OK
WriteX 13527 327680 65536 65536 NT_STATUS_OK
WriteX 13527 393216 65536 65536 NT_STATUS_OK
WriteX 13527 458752 65536 65536 NT_STATUS_OK
WriteX 13527 524288 65536 65536 NT_STATUS_OK
WriteX 13527 589824 35257 35257 NT_STATUS_OK
Close 13527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13532 NT_STATUS_OK
WriteX 13532 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13532 258 NT_STATUS_OK
WriteX 13532 0 65536 65536 NT_STATUS_OK
WriteX 13532 65536 65536 65536 NT_STATUS_OK
WriteX 13532 131072 65536 65536 NT_STATUS_OK
WriteX 13532 196608 65536 65536 NT_STATUS_OK
WriteX 13532 262144 65536 65536 NT_STATUS_OK
WriteX 13532 327680 65536 65536 NT_STATUS_OK
WriteX 13532 393216 65536 65536 NT_STATUS_OK
WriteX 13532 458752 65536 65536 NT_STATUS_OK
WriteX 13532 524288 65536 65536 NT_STATUS_OK
WriteX 13532 589824 57598 57598 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13534 NT_STATUS_OK
WriteX 13534 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13534 258 NT_STATUS_OK
WriteX 13534 0 12543 12543 NT_STATUS_OK
Flush 13534 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13536 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13538 NT_STATUS_OK
ReadX 13538 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13540 NT_STATUS_OK
QUERY_FILE_INFORMATION 13540 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13540 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13540 1005 NT_STATUS_OK
ReadX 13540 1938 24 24 NT_STATUS_OK
ReadX 13540 1920 276 276 NT_STATUS_OK
ReadX 13540 1918 14 14 NT_STATUS_OK
ReadX 13540 1918 7 7 NT_STATUS_OK
ReadX 13540 1919 12 12 NT_STATUS_OK
ReadX 13540 1919 8 8 NT_STATUS_OK
ReadX 13540 1917 15 15 NT_STATUS_OK
ReadX 13540 0 16 16 NT_STATUS_OK
ReadX 13540 16 2048 2048 NT_STATUS_OK
ReadX 13540 2064 2048 2048 NT_STATUS_OK
ReadX 13540 257 2048 2048 NT_STATUS_OK
ReadX 13540 385 2048 2048 NT_STATUS_OK
ReadX 13540 513 2048 2048 NT_STATUS_OK
ReadX 13540 641 2048 2048 NT_STATUS_OK
ReadX 13540 769 2048 2048 NT_STATUS_OK
ReadX 13540 897 2048 2048 NT_STATUS_OK
ReadX 13540 1025 2048 2048 NT_STATUS_OK
ReadX 13540 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13542 NT_STATUS_OK
Close 13542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13545 NT_STATUS_OK
WriteX 13545 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13545 258 NT_STATUS_OK
WriteX 13545 0 11588 11588 NT_STATUS_OK
Flush 13545 NT_STATUS_OK
Close 13545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
Close 13540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13550 NT_STATUS_OK
WriteX 13550 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 258 NT_STATUS_OK
WriteX 13550 0 11615 11615 NT_STATUS_OK
Flush 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13559 NT_STATUS_OK
WriteX 13559 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13559 258 NT_STATUS_OK
WriteX 13559 0 65536 65536 NT_STATUS_OK
WriteX 13559 65536 16050 16050 NT_STATUS_OK
Close 13559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13539 1939 64 64 NT_STATUS_OK
ReadX 13539 128 248 248 NT_STATUS_OK
ReadX 13539 128 568 568 NT_STATUS_OK
ReadX 13539 3872 1536 1536 NT_STATUS_OK
ReadX 13539 3456 2560 2560 NT_STATUS_OK
ReadX 13539 3136 512 512 NT_STATUS_OK
ReadX 13539 2880 4096 4096 NT_STATUS_OK
ReadX 13539 3264 3072 3072 NT_STATUS_OK
ReadX 13539 320 4096 4096 NT_STATUS_OK
ReadX 13539 1024 4096 4096 NT_STATUS_OK
ReadX 13539 3616 4096 4096 NT_STATUS_OK
ReadX 13539 1939 64 64 NT_STATUS_OK
ReadX 13539 128 248 248 NT_STATUS_OK
ReadX 13539 128 608 608 NT_STATUS_OK
ReadX 13539 2858 1024 1024 NT_STATUS_OK
ReadX 13539 2810 4096 4096 NT_STATUS_OK
ReadX 13539 2826 4096 4096 NT_STATUS_OK
ReadX 13539 2580 2048 2048 NT_STATUS_OK
ReadX 13539 2800 2560 2560 NT_STATUS_OK
ReadX 13539 2100 4096 4096 NT_STATUS_OK
ReadX 13539 2084 4096 4096 NT_STATUS_OK
ReadX 13539 868 4096 4096 NT_STATUS_OK
ReadX 13539 2324 4096 4096 NT_STATUS_OK
ReadX 13539 884 4096 4096 NT_STATUS_OK
ReadX 13539 2604 1024 1024 NT_STATUS_OK
ReadX 13539 580 4096 4096 NT_STATUS_OK
ReadX 13539 596 4096 4096 NT_STATUS_OK
ReadX 13539 2752 4096 4096 NT_STATUS_OK
ReadX 13539 2842 1024 1024 NT_STATUS_OK
ReadX 13539 660 4096 4096 NT_STATUS_OK
ReadX 13539 2720 4096 4096 NT_STATUS_OK
ReadX 13539 2736 4096 4096 NT_STATUS_OK
ReadX 13539 628 4096 4096 NT_STATUS_OK
ReadX 13539 2704 4096 4096 NT_STATUS_OK
ReadX 13539 1556 4096 4096 NT_STATUS_OK
ReadX 13539 576 4096 4096 NT_STATUS_OK
ReadX 13539 3168 1536 1536 NT_STATUS_OK
ReadX 13539 832 4096 4096 NT_STATUS_OK
ReadX 13539 1088 4096 4096 NT_STATUS_OK
ReadX 13539 1344 4096 4096 NT_STATUS_OK
ReadX 13539 1600 4096 4096 NT_STATUS_OK
ReadX 13539 1856 4096 4096 NT_STATUS_OK
ReadX 13539 2112 4096 4096 NT_STATUS_OK
ReadX 13539 1892 4096 4096 NT_STATUS_OK
ReadX 13539 820 4096 4096 NT_STATUS_OK
ReadX 13539 788 4096 4096 NT_STATUS_OK
ReadX 13539 1604 4096 4096 NT_STATUS_OK
ReadX 13539 3648 4096 4096 NT_STATUS_OK
ReadX 13539 2608 4096 4096 NT_STATUS_OK
ReadX 13539 548 4096 4096 NT_STATUS_OK
ReadX 13539 740 4096 4096 NT_STATUS_OK
ReadX 13539 1344 4096 4096 NT_STATUS_OK
ReadX 13539 3392 4096 4096 NT_STATUS_OK
ReadX 13539 3904 4096 4096 NT_STATUS_OK
ReadX 13539 644 4096 4096 NT_STATUS_OK
ReadX 13539 676 4096 4096 NT_STATUS_OK
ReadX 13539 2688 4096 4096 NT_STATUS_OK
ReadX 13539 320 4096 4096 NT_STATUS_OK
ReadX 13539 900 4096 4096 NT_STATUS_OK
ReadX 13539 1908 4096 4096 NT_STATUS_OK
ReadX 13539 852 4096 4096 NT_STATUS_OK
ReadX 13539 724 4096 4096 NT_STATUS_OK
ReadX 13539 2292 4096 4096 NT_STATUS_OK
ReadX 13539 612 4096 4096 NT_STATUS_OK
ReadX 13539 388 4096 4096 NT_STATUS_OK
ReadX 13539 2368 4096 4096 NT_STATUS_OK
ReadX 13539 2624 4096 4096 NT_STATUS_OK
ReadX 13539 500 4096 4096 NT_STATUS_OK
ReadX 13539 356 4096 4096 NT_STATUS_OK
ReadX 13539 1024 4096 4096 NT_STATUS_OK
ReadX 13539 576 4096 4096 NT_STATUS_OK
ReadX 13539 340 4096 4096 NT_STATUS_OK
ReadX 13539 420 4096 4096 NT_STATUS_OK
ReadX 13539 1600 4096 4096 NT_STATUS_OK
ReadX 13539 404 4096 4096 NT_STATUS_OK
ReadX 13539 1428 4096 4096 NT_STATUS_OK
ReadX 13539 2656 4096 4096 NT_STATUS_OK
ReadX 13539 2624 4096 4096 NT_STATUS_OK
ReadX 13539 452 4096 4096 NT_STATUS_OK
ReadX 13539 692 4096 4096 NT_STATUS_OK
ReadX 13539 564 4096 4096 NT_STATUS_OK
ReadX 13539 372 4096 4096 NT_STATUS_OK
ReadX 13539 468 4096 4096 NT_STATUS_OK
ReadX 13539 484 4096 4096 NT_STATUS_OK
ReadX 13539 1088 4096 4096 NT_STATUS_OK
ReadX 13539 1924 4096 4096 NT_STATUS_OK
ReadX 13539 2768 4096 4096 NT_STATUS_OK
ReadX 13539 832 4096 4096 NT_STATUS_OK
ReadX 13539 836 4096 4096 NT_STATUS_OK
ReadX 13539 1856 4096 4096 NT_STATUS_OK
ReadX 13539 2640 4096 4096 NT_STATUS_OK
ReadX 13539 436 4096 4096 NT_STATUS_OK
ReadX 13539 1828 4096 4096 NT_STATUS_OK
ReadX 13539 804 4096 4096 NT_STATUS_OK
ReadX 13539 1860 4096 4096 NT_STATUS_OK
ReadX 13539 1812 4096 4096 NT_STATUS_OK
ReadX 13539 756 4096 4096 NT_STATUS_OK
ReadX 13539 1636 4096 4096 NT_STATUS_OK
ReadX 13539 772 4096 4096 NT_STATUS_OK
ReadX 13539 2036 4096 4096 NT_STATUS_OK
ReadX 13539 1220 4096 4096 NT_STATUS_OK
ReadX 13539 1652 4096 4096 NT_STATUS_OK
ReadX 13539 2588 4096 4096 NT_STATUS_OK
ReadX 13539 916 4096 4096 NT_STATUS_OK
ReadX 13539 260 4096 4096 NT_STATUS_OK
ReadX 13539 932 4096 4096 NT_STATUS_OK
ReadX 13539 2624 4096 4096 NT_STATUS_OK
ReadX 13539 308 4096 4096 NT_STATUS_OK
ReadX 13539 292 4096 4096 NT_STATUS_OK
ReadX 13539 1140 4096 4096 NT_STATUS_OK
ReadX 13539 276 4096 4096 NT_STATUS_OK
ReadX 13539 2020 4096 4096 NT_STATUS_OK
ReadX 13539 2880 4096 4096 NT_STATUS_OK
ReadX 13539 516 4096 4096 NT_STATUS_OK
ReadX 13539 1844 4096 4096 NT_STATUS_OK
ReadX 13539 1124 4096 4096 NT_STATUS_OK
ReadX 13539 3136 4096 4096 NT_STATUS_OK
ReadX 13539 324 4096 4096 NT_STATUS_OK
ReadX 13539 1156 4096 4096 NT_STATUS_OK
ReadX 13539 1172 4096 4096 NT_STATUS_OK
ReadX 13539 2112 4096 4096 NT_STATUS_OK
ReadX 13539 2368 4096 4096 NT_STATUS_OK
ReadX 13539 964 4096 4096 NT_STATUS_OK
ReadX 13539 980 4096 4096 NT_STATUS_OK
ReadX 13539 1012 4096 4096 NT_STATUS_OK
ReadX 13539 532 4096 4096 NT_STATUS_OK
ReadX 13539 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13539 1620 4096 4096 NT_STATUS_OK
ReadX 13539 1604 4096 4096 NT_STATUS_OK
ReadX 13539 2116 4096 4096 NT_STATUS_OK
ReadX 13539 2132 4096 4096 NT_STATUS_OK
ReadX 13539 2148 4096 4096 NT_STATUS_OK
ReadX 13539 2276 4096 4096 NT_STATUS_OK
ReadX 13539 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13564 NT_STATUS_OK
QUERY_FILE_INFORMATION 13519 1004 NT_STATUS_OK
Close 13519 NT_STATUS_OK
WriteX 13564 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13564 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13521 1004 NT_STATUS_OK
Close 13521 NT_STATUS_OK
WriteX 13564 0 65536 65536 NT_STATUS_OK
WriteX 13564 65536 64850 64850 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13566 NT_STATUS_OK
WriteX 13566 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 258 NT_STATUS_OK
ReadX 13539 2068 4096 4096 NT_STATUS_OK
ReadX 13539 1588 4096 4096 NT_STATUS_OK
ReadX 13539 1572 4096 4096 NT_STATUS_OK
WriteX 13566 0 18630 18630 NT_STATUS_OK
Flush 13566 NT_STATUS_OK
Close 13566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13539 612 4096 4096 NT_STATUS_OK
ReadX 13539 564 4096 4096 NT_STATUS_OK
ReadX 13539 1876 4096 4096 NT_STATUS_OK
ReadX 13539 628 4096 4096 NT_STATUS_OK
ReadX 13539 740 4096 4096 NT_STATUS_OK
ReadX 13539 724 4096 4096 NT_STATUS_OK
ReadX 13539 644 4096 4096 NT_STATUS_OK
ReadX 13539 2324 4096 4096 NT_STATUS_OK
ReadX 13539 660 4096 4096 NT_STATUS_OK
ReadX 13539 852 4096 4096 NT_STATUS_OK
ReadX 13539 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13539 2368 4096 4096 NT_STATUS_OK
ReadX 13539 1024 4096 4096 NT_STATUS_OK
ReadX 13539 320 4096 4096 NT_STATUS_OK
ReadX 13539 580 4096 4096 NT_STATUS_OK
ReadX 13539 3136 512 512 NT_STATUS_OK
ReadX 13539 2880 4096 4096 NT_STATUS_OK
Close 13539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 61440 4096 4096 NT_STATUS_OK
ReadX 13571 126976 4096 4096 NT_STATUS_OK
WriteX 13571 0 65536 65536 NT_STATUS_OK
WriteX 13571 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 61440 4096 4096 NT_STATUS_OK
ReadX 13572 126976 4096 4096 NT_STATUS_OK
ReadX 13572 192512 4096 4096 NT_STATUS_OK
ReadX 13572 258048 4096 4096 NT_STATUS_OK
WriteX 13572 0 65536 65536 NT_STATUS_OK
WriteX 13572 65536 65536 65536 NT_STATUS_OK
WriteX 13572 131072 65536 65536 NT_STATUS_OK
WriteX 13572 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 61440 4096 4096 NT_STATUS_OK
ReadX 13573 126976 4096 4096 NT_STATUS_OK
ReadX 13573 192512 4096 4096 NT_STATUS_OK
ReadX 13573 258048 4096 4096 NT_STATUS_OK
ReadX 13573 323584 4096 4096 NT_STATUS_OK
ReadX 13573 389120 4096 4096 NT_STATUS_OK
ReadX 13573 454656 4096 4096 NT_STATUS_OK
ReadX 13573 520192 4096 4096 NT_STATUS_OK
WriteX 13573 0 65536 65536 NT_STATUS_OK
WriteX 13573 65536 65536 65536 NT_STATUS_OK
WriteX 13573 131072 65536 65536 NT_STATUS_OK
WriteX 13573 196608 65536 65536 NT_STATUS_OK
WriteX 13573 262144 65536 65536 NT_STATUS_OK
WriteX 13573 327680 65536 65536 NT_STATUS_OK
WriteX 13573 393216 65536 65536 NT_STATUS_OK
WriteX 13573 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13576 NT_STATUS_OK
WriteX 13576 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13574 0 8192 8192 NT_STATUS_OK
Flush 13574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13574 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13574 0 8192 8192 NT_STATUS_OK
Flush 13574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13574 0 8192 8192 NT_STATUS_OK
Flush 13574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13574 0 8192 8192 NT_STATUS_OK
Flush 13574 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13578 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13538 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13581 NT_STATUS_OK
WriteX 13581 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13581 258 NT_STATUS_OK
WriteX 13581 0 62591 62591 NT_STATUS_OK
Close 13581 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13583 NT_STATUS_OK
Close 13583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13586 NT_STATUS_OK
WriteX 13586 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13586 258 NT_STATUS_OK
WriteX 13586 0 10845 10845 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13591 NT_STATUS_OK
WriteX 13591 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13591 258 NT_STATUS_OK
WriteX 13591 0 30118 30118 NT_STATUS_OK
Close 13591 NT_STATUS_OK
WriteX 13574 0 4096 4096 NT_STATUS_OK
WriteX 13576 0 64 64 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13593 NT_STATUS_OK
ReadX 13593 0 61440 61440 NT_STATUS_OK
ReadX 13593 61440 4096 4096 NT_STATUS_OK
ReadX 13593 65536 61440 61440 NT_STATUS_OK
ReadX 13593 126976 4096 4096 NT_STATUS_OK
ReadX 13593 131072 61440 61440 NT_STATUS_OK
ReadX 13593 192512 4096 4096 NT_STATUS_OK
ReadX 13593 196608 61440 61440 NT_STATUS_OK
ReadX 13593 258048 4096 4096 NT_STATUS_OK
ReadX 13593 262144 61440 61440 NT_STATUS_OK
ReadX 13593 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 61440 61440 NT_STATUS_OK
ReadX 13594 61440 4096 4096 NT_STATUS_OK
ReadX 13594 65536 61440 61440 NT_STATUS_OK
ReadX 13594 126976 4096 4096 NT_STATUS_OK
ReadX 13594 131072 61440 61440 NT_STATUS_OK
ReadX 13594 192512 4096 4096 NT_STATUS_OK
ReadX 13594 196608 61440 61440 NT_STATUS_OK
ReadX 13594 258048 4096 4096 NT_STATUS_OK
ReadX 13594 262144 61440 61440 NT_STATUS_OK
ReadX 13594 323584 4096 4096 NT_STATUS_OK
ReadX 13594 327680 61440 61440 NT_STATUS_OK
ReadX 13594 389120 4096 4096 NT_STATUS_OK
ReadX 13594 393216 61440 61440 NT_STATUS_OK
ReadX 13594 454656 4096 4096 NT_STATUS_OK
ReadX 13594 458752 61440 61440 NT_STATUS_OK
ReadX 13594 520192 4096 4096 NT_STATUS_OK
ReadX 13594 524288 61440 61440 NT_STATUS_OK
ReadX 13594 585728 4096 4096 NT_STATUS_OK
ReadX 13594 589824 61440 61440 NT_STATUS_OK
ReadX 13594 651264 4096 4096 NT_STATUS_OK
ReadX 13594 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 61440 61440 NT_STATUS_OK
ReadX 13595 61440 4096 4096 NT_STATUS_OK
ReadX 13595 65536 61440 61440 NT_STATUS_OK
ReadX 13595 126976 4096 4096 NT_STATUS_OK
ReadX 13595 131072 61440 61440 NT_STATUS_OK
ReadX 13595 192512 4096 4096 NT_STATUS_OK
ReadX 13595 196608 61440 61440 NT_STATUS_OK
ReadX 13595 258048 4096 4096 NT_STATUS_OK
ReadX 13595 262144 61440 61440 NT_STATUS_OK
ReadX 13595 323584 4096 4096 NT_STATUS_OK
ReadX 13595 327680 61440 61440 NT_STATUS_OK
ReadX 13595 389120 4096 4096 NT_STATUS_OK
ReadX 13595 393216 61440 61440 NT_STATUS_OK
ReadX 13595 454656 4096 4096 NT_STATUS_OK
ReadX 13595 458752 61440 61440 NT_STATUS_OK
ReadX 13595 520192 4096 4096 NT_STATUS_OK
ReadX 13595 524288 61440 61440 NT_STATUS_OK
ReadX 13595 585728 4096 4096 NT_STATUS_OK
ReadX 13595 589824 61440 61440 NT_STATUS_OK
ReadX 13595 651264 4096 4096 NT_STATUS_OK
ReadX 13595 655360 61440 61440 NT_STATUS_OK
ReadX 13595 716800 4096 4096 NT_STATUS_OK
ReadX 13595 720896 61440 61440 NT_STATUS_OK
ReadX 13595 782336 4096 4096 NT_STATUS_OK
ReadX 13595 786432 61440 61440 NT_STATUS_OK
ReadX 13595 847872 4096 4096 NT_STATUS_OK
ReadX 13595 851968 61440 61440 NT_STATUS_OK
ReadX 13595 913408 4096 4096 NT_STATUS_OK
ReadX 13595 917504 61440 61440 NT_STATUS_OK
ReadX 13595 978944 4096 4096 NT_STATUS_OK
ReadX 13595 983040 61440 61440 NT_STATUS_OK
ReadX 13595 1044480 4096 4096 NT_STATUS_OK
ReadX 13595 1048576 61440 61440 NT_STATUS_OK
ReadX 13595 1110016 4096 4096 NT_STATUS_OK
ReadX 13595 1114112 61440 61440 NT_STATUS_OK
ReadX 13595 1175552 4096 4096 NT_STATUS_OK
ReadX 13595 1179648 61440 61440 NT_STATUS_OK
ReadX 13595 1241088 4096 4096 NT_STATUS_OK
ReadX 13595 1245184 61440 61440 NT_STATUS_OK
ReadX 13595 1306624 4096 4096 NT_STATUS_OK
ReadX 13595 1310720 61440 61440 NT_STATUS_OK
ReadX 13595 1372160 4096 4096 NT_STATUS_OK
ReadX 13595 1376256 61440 61440 NT_STATUS_OK
ReadX 13595 1437696 4096 4096 NT_STATUS_OK
ReadX 13595 1441792 61440 61440 NT_STATUS_OK
ReadX 13595 1503232 4096 4096 NT_STATUS_OK
ReadX 13595 1507328 61440 61440 NT_STATUS_OK
ReadX 13595 1568768 4096 4096 NT_STATUS_OK
ReadX 13595 1572864 61440 61440 NT_STATUS_OK
ReadX 13595 1634304 4096 4096 NT_STATUS_OK
ReadX 13595 1638400 61440 61440 NT_STATUS_OK
ReadX 13595 1699840 4096 4096 NT_STATUS_OK
ReadX 13595 1703936 61440 61440 NT_STATUS_OK
ReadX 13595 1765376 4096 4096 NT_STATUS_OK
ReadX 13595 1769472 61440 61440 NT_STATUS_OK
ReadX 13595 1830912 4096 4096 NT_STATUS_OK
ReadX 13595 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13596 NT_STATUS_OK
Close 13596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Close 13595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
ReadX 13600 4096 4096 4096 NT_STATUS_OK
ReadX 13600 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13601 NT_STATUS_OK
Close 13601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13598 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13603 NT_STATUS_OK
ReadX 13603 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13604 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13605 NT_STATUS_OK
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 8192 8192 NT_STATUS_OK
ReadX 13608 8192 8192 8192 NT_STATUS_OK
ReadX 13608 16384 8192 8192 NT_STATUS_OK
ReadX 13608 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13610 NT_STATUS_OK
Close 13610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13608 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13613 NT_STATUS_OK
WriteX 13613 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13613 258 NT_STATUS_OK
WriteX 13613 0 10438 10438 NT_STATUS_OK
Close 13613 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13616 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13617 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13619 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
ReadX 13622 4096 4096 4096 NT_STATUS_OK
ReadX 13622 8192 4096 4096 NT_STATUS_OK
ReadX 13622 12288 8192 8192 NT_STATUS_OK
ReadX 13622 20480 8192 8192 NT_STATUS_OK
ReadX 13622 28672 8192 8192 NT_STATUS_OK
ReadX 13622 36864 8192 8192 NT_STATUS_OK
ReadX 13622 45056 8192 8192 NT_STATUS_OK
ReadX 13622 53248 8192 8192 NT_STATUS_OK
ReadX 13622 61440 8192 8192 NT_STATUS_OK
ReadX 13622 69632 8192 8192 NT_STATUS_OK
ReadX 13622 77824 8192 8192 NT_STATUS_OK
ReadX 13622 86016 8192 8192 NT_STATUS_OK
ReadX 13622 94208 8192 8192 NT_STATUS_OK
ReadX 13622 102400 8192 8192 NT_STATUS_OK
ReadX 13622 110592 8192 8192 NT_STATUS_OK
ReadX 13622 118784 8192 8192 NT_STATUS_OK
ReadX 13622 126976 8192 8192 NT_STATUS_OK
ReadX 13622 135168 8192 8192 NT_STATUS_OK
ReadX 13622 143360 8192 8192 NT_STATUS_OK
ReadX 13622 151552 8192 8192 NT_STATUS_OK
ReadX 13622 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13624 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13627 NT_STATUS_OK
WriteX 13627 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13627 258 NT_STATUS_OK
WriteX 13627 0 28489 28489 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13630 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 8192 8192 NT_STATUS_OK
ReadX 13634 8192 8192 8192 NT_STATUS_OK
ReadX 13634 16384 8192 8192 NT_STATUS_OK
ReadX 13634 24576 8192 8192 NT_STATUS_OK
ReadX 13634 32768 16384 16384 NT_STATUS_OK
ReadX 13634 49152 8192 8192 NT_STATUS_OK
ReadX 13634 57344 8192 8192 NT_STATUS_OK
ReadX 13634 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13634 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13639 NT_STATUS_OK
WriteX 13639 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13639 258 NT_STATUS_OK
WriteX 13639 0 29253 29253 NT_STATUS_OK
Close 13639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13646 NT_STATUS_OK
WriteX 13646 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 30183 30183 NT_STATUS_OK
Close 13646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13649 NT_STATUS_OK
WriteX 13649 0 510 510 NT_STATUS_OK
WriteX 13649 510 512 512 NT_STATUS_OK
WriteX 13649 1022 510 510 NT_STATUS_OK
WriteX 13649 1532 510 510 NT_STATUS_OK
WriteX 13649 2042 168 168 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
WriteX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 61440 4096 4096 NT_STATUS_OK
ReadX 13653 126976 4096 4096 NT_STATUS_OK
WriteX 13653 0 65536 65536 NT_STATUS_OK
WriteX 13653 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 61440 4096 4096 NT_STATUS_OK
ReadX 13654 126976 4096 4096 NT_STATUS_OK
ReadX 13654 192512 4096 4096 NT_STATUS_OK
ReadX 13654 258048 4096 4096 NT_STATUS_OK
WriteX 13654 0 65536 65536 NT_STATUS_OK
WriteX 13654 65536 65536 65536 NT_STATUS_OK
WriteX 13654 131072 65536 65536 NT_STATUS_OK
WriteX 13654 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 61440 4096 4096 NT_STATUS_OK
ReadX 13655 126976 4096 4096 NT_STATUS_OK
ReadX 13655 192512 4096 4096 NT_STATUS_OK
ReadX 13655 258048 4096 4096 NT_STATUS_OK
ReadX 13655 323584 4096 4096 NT_STATUS_OK
ReadX 13655 389120 4096 4096 NT_STATUS_OK
ReadX 13655 454656 4096 4096 NT_STATUS_OK
ReadX 13655 520192 4096 4096 NT_STATUS_OK
WriteX 13655 0 65536 65536 NT_STATUS_OK
WriteX 13655 65536 65536 65536 NT_STATUS_OK
WriteX 13655 131072 65536 65536 NT_STATUS_OK
WriteX 13655 196608 65536 65536 NT_STATUS_OK
WriteX 13655 262144 65536 65536 NT_STATUS_OK
WriteX 13655 327680 65536 65536 NT_STATUS_OK
WriteX 13655 393216 65536 65536 NT_STATUS_OK
WriteX 13655 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13656 NT_STATUS_OK
Close 13656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13655 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13665 NT_STATUS_OK
Close 13665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13667 NT_STATUS_OK
Close 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13671 NT_STATUS_OK
Close 13671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13676 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13680 NT_STATUS_OK
Close 13680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13685 NT_STATUS_OK
Close 13685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13690 NT_STATUS_OK
Close 13690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13695 NT_STATUS_OK
Close 13695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13705 NT_STATUS_OK
Close 13705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13715 NT_STATUS_OK
Close 13715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13718 NT_STATUS_OK
Close 13718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13724 NT_STATUS_OK
WriteX 13724 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13724 0 65536 65536 NT_STATUS_OK
WriteX 13724 65536 65536 65536 NT_STATUS_OK
WriteX 13724 131072 65536 65536 NT_STATUS_OK
WriteX 13724 196608 65536 65536 NT_STATUS_OK
WriteX 13724 262144 26634 26634 NT_STATUS_OK
Close 13724 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13730 NT_STATUS_OK
Close 13730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
Close 13731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
ReadX 13732 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13737 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13740 NT_STATUS_OK
Close 13740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13742 NT_STATUS_OK
Close 13742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13751 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13770 NT_STATUS_OK
Close 13770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13775 NT_STATUS_OK
Close 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13784 NT_STATUS_OK
Close 13784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13794 NT_STATUS_OK
Close 13794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13797 NT_STATUS_OK
Close 13797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13799 NT_STATUS_OK
Close 13799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
Close 13812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13824 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 0 4096 4096 NT_STATUS_OK
Close 13825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 0 4096 4096 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13813 NT_STATUS_OK
Close 13827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13856 0 4096 4096 NT_STATUS_OK
Close 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13858 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
ReadX 13858 4096 4096 4096 NT_STATUS_OK
ReadX 13858 8192 4096 4096 NT_STATUS_OK
ReadX 13858 12288 4096 4096 NT_STATUS_OK
ReadX 13858 16384 4096 4096 NT_STATUS_OK
ReadX 13858 20480 4096 4096 NT_STATUS_OK
ReadX 13858 24576 4096 4096 NT_STATUS_OK
ReadX 13858 28672 4096 4096 NT_STATUS_OK
ReadX 13858 32768 4096 4096 NT_STATUS_OK
ReadX 13858 36864 4096 4096 NT_STATUS_OK
ReadX 13858 40960 4096 4096 NT_STATUS_OK
ReadX 13858 45056 4096 4096 NT_STATUS_OK
ReadX 13858 49152 4096 4096 NT_STATUS_OK
ReadX 13858 53248 4096 4096 NT_STATUS_OK
ReadX 13858 57344 4096 4096 NT_STATUS_OK
ReadX 13858 61440 4096 4096 NT_STATUS_OK
ReadX 13858 65536 4096 4096 NT_STATUS_OK
ReadX 13858 69632 4096 4096 NT_STATUS_OK
ReadX 13858 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13858 1004 NT_STATUS_OK
WriteX 13858 0 4096 4096 NT_STATUS_OK
Close 13858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13859 NT_STATUS_OK
SET_FILE_INFORMATION 13859 1004 NT_STATUS_OK
Close 13859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13860 NT_STATUS_OK
ReadX 13860 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13861 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13864 NT_STATUS_OK
WriteX 13864 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13864 258 NT_STATUS_OK
WriteX 13864 0 65536 65536 NT_STATUS_OK
WriteX 13864 65536 19979 19979 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 0 4096 4096 NT_STATUS_OK
WriteX 13865 0 4096 4096 NT_STATUS_OK
Flush 13865 NT_STATUS_OK
WriteX 13865 0 4096 4096 NT_STATUS_OK
Flush 13865 NT_STATUS_OK
QUERY_FILE_INFORMATION 13865 1004 NT_STATUS_OK
WriteX 13865 0 4096 4096 NT_STATUS_OK
Flush 13865 NT_STATUS_OK
WriteX 13865 0 4096 4096 NT_STATUS_OK
Flush 13865 NT_STATUS_OK
WriteX 13865 0 4096 4096 NT_STATUS_OK
Flush 13865 NT_STATUS_OK
SET_FILE_INFORMATION 13865 1004 NT_STATUS_OK
WriteX 13865 0 4096 4096 NT_STATUS_OK
Flush 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 0 4096 4096 NT_STATUS_OK
Close 13866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
Close 13868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 4096 4096 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13870 1004 NT_STATUS_OK
WriteX 13870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13867 NT_STATUS_OK
Close 13870 NT_STATUS_OK
Close 13860 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13876 NT_STATUS_OK
WriteX 13876 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13876 258 NT_STATUS_OK
WriteX 13876 0 65536 65536 NT_STATUS_OK
WriteX 13876 65536 17654 17654 NT_STATUS_OK
Close 13876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
WriteX 13877 0 4096 4096 NT_STATUS_OK
Flush 13877 NT_STATUS_OK
WriteX 13877 0 4096 4096 NT_STATUS_OK
Flush 13877 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 1004 NT_STATUS_OK
WriteX 13877 0 4096 4096 NT_STATUS_OK
Flush 13877 NT_STATUS_OK
WriteX 13877 0 4096 4096 NT_STATUS_OK
Flush 13877 NT_STATUS_OK
WriteX 13877 0 4096 4096 NT_STATUS_OK
Flush 13877 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
WriteX 13877 0 4096 4096 NT_STATUS_OK
Flush 13877 NT_STATUS_OK
Close 13877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13878 NT_STATUS_OK
SET_FILE_INFORMATION 13878 1004 NT_STATUS_OK
Close 13878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
ReadX 13882 4096 4096 4096 NT_STATUS_OK
ReadX 13882 8192 4096 4096 NT_STATUS_OK
ReadX 13882 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13882 16384 4096 4096 NT_STATUS_OK
ReadX 13882 20480 4096 4096 NT_STATUS_OK
ReadX 13882 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
Close 13883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
Close 13884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13885 1004 NT_STATUS_OK
WriteX 13885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13886 NT_STATUS_OK
Close 13886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13891 NT_STATUS_OK
WriteX 13891 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13891 258 NT_STATUS_OK
WriteX 13891 0 65536 65536 NT_STATUS_OK
WriteX 13891 65536 19490 19490 NT_STATUS_OK
Close 13891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
QUERY_FILE_INFORMATION 13892 1004 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
SET_FILE_INFORMATION 13892 1004 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13893 NT_STATUS_OK
SET_FILE_INFORMATION 13893 1004 NT_STATUS_OK
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13897 0 4096 4096 NT_STATUS_OK
Close 13897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13898 NT_STATUS_OK
ReadX 13898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 4096 4096 NT_STATUS_OK
ReadX 13899 4096 4096 4096 NT_STATUS_OK
ReadX 13899 8192 4096 4096 NT_STATUS_OK
ReadX 13899 12288 4096 4096 NT_STATUS_OK
ReadX 13899 16384 4096 4096 NT_STATUS_OK
ReadX 13899 20480 4096 4096 NT_STATUS_OK
ReadX 13899 24576 4096 4096 NT_STATUS_OK
ReadX 13899 28672 4096 4096 NT_STATUS_OK
ReadX 13899 32768 4096 4096 NT_STATUS_OK
ReadX 13899 36864 4096 4096 NT_STATUS_OK
ReadX 13899 40960 4096 4096 NT_STATUS_OK
ReadX 13899 45056 4096 4096 NT_STATUS_OK
ReadX 13899 49152 4096 4096 NT_STATUS_OK
ReadX 13899 53248 4096 4096 NT_STATUS_OK
ReadX 13899 57344 4096 4096 NT_STATUS_OK
ReadX 13899 61440 4096 4096 NT_STATUS_OK
ReadX 13899 65536 4096 4096 NT_STATUS_OK
ReadX 13899 69632 4096 4096 NT_STATUS_OK
ReadX 13899 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13899 1004 NT_STATUS_OK
WriteX 13899 0 4096 4096 NT_STATUS_OK
Close 13899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13900 NT_STATUS_OK
SET_FILE_INFORMATION 13900 1004 NT_STATUS_OK
Close 13900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13902 NT_STATUS_OK
Close 13902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13905 NT_STATUS_OK
WriteX 13905 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13905 258 NT_STATUS_OK
WriteX 13905 0 65536 65536 NT_STATUS_OK
WriteX 13905 65536 8866 8866 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
Flush 13906 NT_STATUS_OK
SET_FILE_INFORMATION 13906 1004 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
Flush 13906 NT_STATUS_OK
Close 13906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 4096 4096 NT_STATUS_OK
Close 13908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13909 NT_STATUS_OK
ReadX 13909 0 4096 4096 NT_STATUS_OK
Close 13909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
WriteX 13910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13911 NT_STATUS_OK
Close 13911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13910 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13916 NT_STATUS_OK
WriteX 13916 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13916 258 NT_STATUS_OK
WriteX 13916 0 65536 65536 NT_STATUS_OK
WriteX 13916 65536 9298 9298 NT_STATUS_OK
Close 13916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
WriteX 13917 0 4096 4096 NT_STATUS_OK
Flush 13917 NT_STATUS_OK
SET_FILE_INFORMATION 13917 1004 NT_STATUS_OK
WriteX 13917 0 4096 4096 NT_STATUS_OK
Flush 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13918 NT_STATUS_OK
SET_FILE_INFORMATION 13918 1004 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13923 0 4096 4096 NT_STATUS_OK
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13924 4096 4096 4096 NT_STATUS_OK
ReadX 13924 8192 4096 4096 NT_STATUS_OK
ReadX 13924 12288 4096 4096 NT_STATUS_OK
ReadX 13924 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
Close 13926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13927 1004 NT_STATUS_OK
WriteX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13933 NT_STATUS_OK
WriteX 13933 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13933 258 NT_STATUS_OK
WriteX 13933 0 65536 65536 NT_STATUS_OK
WriteX 13933 65536 11540 11540 NT_STATUS_OK
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
WriteX 13934 0 4096 4096 NT_STATUS_OK
Flush 13934 NT_STATUS_OK
SET_FILE_INFORMATION 13934 1004 NT_STATUS_OK
WriteX 13934 0 4096 4096 NT_STATUS_OK
Flush 13934 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13935 NT_STATUS_OK
SET_FILE_INFORMATION 13935 1004 NT_STATUS_OK
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13937 NT_STATUS_OK
Close 13937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 61440 4096 4096 NT_STATUS_OK
ReadX 13939 126976 4096 4096 NT_STATUS_OK
WriteX 13939 0 65536 65536 NT_STATUS_OK
WriteX 13939 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 61440 4096 4096 NT_STATUS_OK
ReadX 13940 126976 4096 4096 NT_STATUS_OK
ReadX 13940 192512 4096 4096 NT_STATUS_OK
ReadX 13940 258048 4096 4096 NT_STATUS_OK
WriteX 13940 0 65536 65536 NT_STATUS_OK
WriteX 13940 65536 65536 65536 NT_STATUS_OK
WriteX 13940 131072 65536 65536 NT_STATUS_OK
WriteX 13940 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 61440 4096 4096 NT_STATUS_OK
ReadX 13941 126976 4096 4096 NT_STATUS_OK
ReadX 13941 192512 4096 4096 NT_STATUS_OK
ReadX 13941 258048 4096 4096 NT_STATUS_OK
ReadX 13941 323584 4096 4096 NT_STATUS_OK
ReadX 13941 389120 4096 4096 NT_STATUS_OK
ReadX 13941 454656 4096 4096 NT_STATUS_OK
ReadX 13941 520192 4096 4096 NT_STATUS_OK
WriteX 13941 0 65536 65536 NT_STATUS_OK
WriteX 13941 65536 65536 65536 NT_STATUS_OK
WriteX 13941 131072 65536 65536 NT_STATUS_OK
WriteX 13941 196608 65536 65536 NT_STATUS_OK
WriteX 13941 262144 65536 65536 NT_STATUS_OK
WriteX 13941 327680 65536 65536 NT_STATUS_OK
WriteX 13941 393216 65536 65536 NT_STATUS_OK
WriteX 13941 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
ReadX 13942 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13943 NT_STATUS_OK
WriteX 13943 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13943 258 NT_STATUS_OK
WriteX 13943 0 53 53 NT_STATUS_OK
Close 13943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13942 8192 4096 4096 NT_STATUS_OK
ReadX 13942 12288 4096 4096 NT_STATUS_OK
WriteX 13946 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13946 258 NT_STATUS_OK
ReadX 13942 16384 4096 4096 NT_STATUS_OK
ReadX 13942 20480 4096 4096 NT_STATUS_OK
WriteX 13946 0 15360 15360 NT_STATUS_OK
Close 13946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13947 NT_STATUS_OK
ReadX 13947 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13947 1004 NT_STATUS_OK
WriteX 13947 0 4096 4096 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13948 NT_STATUS_OK
Close 13948 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13951 NT_STATUS_OK
Close 13951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13950 4096 4096 4096 NT_STATUS_OK
ReadX 13950 8192 4096 4096 NT_STATUS_OK
ReadX 13950 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
ReadX 13953 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 4096 4096 NT_STATUS_OK
ReadX 13954 4096 4096 4096 NT_STATUS_OK
ReadX 13954 8192 4096 4096 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13955 NT_STATUS_OK
WriteX 13955 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13955 258 NT_STATUS_OK
WriteX 13955 0 15360 15360 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13956 NT_STATUS_OK
ReadX 13956 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13956 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13956 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13957 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13960 NT_STATUS_OK
SET_FILE_INFORMATION 13960 1004 NT_STATUS_OK
Close 13960 NT_STATUS_OK
WriteX 13956 0 4096 4096 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13961 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13963 NT_STATUS_OK
ReadX 13963 0 4096 4096 NT_STATUS_OK
ReadX 13963 4096 4096 4096 NT_STATUS_OK
ReadX 13963 8192 4096 4096 NT_STATUS_OK
ReadX 13963 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13963 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13963 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13965 NT_STATUS_OK
WriteX 13965 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13965 258 NT_STATUS_OK
WriteX 13965 0 53 53 NT_STATUS_OK
Close 13965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13966 NT_STATUS_OK
Close 13966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13964 4096 4096 4096 NT_STATUS_OK
ReadX 13964 8192 4096 4096 NT_STATUS_OK
ReadX 13964 12288 4096 4096 NT_STATUS_OK
WriteX 13968 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13968 258 NT_STATUS_OK
WriteX 13968 0 12006 12006 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13969 NT_STATUS_OK
WriteX 13963 0 19054 19054 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13969 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13969 1004 NT_STATUS_OK
WriteX 13969 0 4096 4096 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13973 NT_STATUS_OK
Close 13973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13972 4096 4096 4096 NT_STATUS_OK
ReadX 13972 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13975 NT_STATUS_OK
WriteX 13975 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13975 258 NT_STATUS_OK
WriteX 13975 0 11991 11991 NT_STATUS_OK
Close 13975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13976 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13980 NT_STATUS_OK
SET_FILE_INFORMATION 13980 1004 NT_STATUS_OK
Close 13980 NT_STATUS_OK
WriteX 13976 0 4096 4096 NT_STATUS_OK
Close 13976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13981 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13983 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13983 1004 NT_STATUS_OK
ReadX 13983 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13983 1004 NT_STATUS_OK
WriteX 13983 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13983 1004 NT_STATUS_OK
Close 13959 NT_STATUS_OK
WriteX 13983 0 12288 12288 NT_STATUS_OK
Close 13979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13986 NT_STATUS_OK
Close 13986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13963 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13988 NT_STATUS_OK
Close 13988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 61440 61440 NT_STATUS_OK
ReadX 13990 61440 4096 4096 NT_STATUS_OK
ReadX 13990 65536 61440 61440 NT_STATUS_OK
ReadX 13990 126976 4096 4096 NT_STATUS_OK
ReadX 13990 131072 61440 61440 NT_STATUS_OK
ReadX 13990 192512 4096 4096 NT_STATUS_OK
ReadX 13990 196608 61440 61440 NT_STATUS_OK
ReadX 13990 258048 4096 4096 NT_STATUS_OK
ReadX 13990 262144 61440 61440 NT_STATUS_OK
ReadX 13990 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 61440 61440 NT_STATUS_OK
ReadX 13991 61440 4096 4096 NT_STATUS_OK
ReadX 13991 65536 61440 61440 NT_STATUS_OK
ReadX 13991 126976 4096 4096 NT_STATUS_OK
ReadX 13991 131072 61440 61440 NT_STATUS_OK
ReadX 13991 192512 4096 4096 NT_STATUS_OK
ReadX 13991 196608 61440 61440 NT_STATUS_OK
ReadX 13991 258048 4096 4096 NT_STATUS_OK
ReadX 13991 262144 61440 61440 NT_STATUS_OK
ReadX 13991 323584 4096 4096 NT_STATUS_OK
ReadX 13991 327680 61440 61440 NT_STATUS_OK
ReadX 13991 389120 4096 4096 NT_STATUS_OK
ReadX 13991 393216 61440 61440 NT_STATUS_OK
ReadX 13991 454656 4096 4096 NT_STATUS_OK
ReadX 13991 458752 61440 61440 NT_STATUS_OK
ReadX 13991 520192 4096 4096 NT_STATUS_OK
ReadX 13991 524288 61440 61440 NT_STATUS_OK
ReadX 13991 585728 4096 4096 NT_STATUS_OK
ReadX 13991 589824 61440 61440 NT_STATUS_OK
ReadX 13991 651264 4096 4096 NT_STATUS_OK
ReadX 13991 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 61440 61440 NT_STATUS_OK
ReadX 13992 61440 4096 4096 NT_STATUS_OK
ReadX 13992 65536 61440 61440 NT_STATUS_OK
ReadX 13992 126976 4096 4096 NT_STATUS_OK
ReadX 13992 131072 61440 61440 NT_STATUS_OK
ReadX 13992 192512 4096 4096 NT_STATUS_OK
ReadX 13992 196608 61440 61440 NT_STATUS_OK
ReadX 13992 258048 4096 4096 NT_STATUS_OK
ReadX 13992 262144 61440 61440 NT_STATUS_OK
ReadX 13992 323584 4096 4096 NT_STATUS_OK
ReadX 13992 327680 61440 61440 NT_STATUS_OK
ReadX 13992 389120 4096 4096 NT_STATUS_OK
ReadX 13992 393216 61440 61440 NT_STATUS_OK
ReadX 13992 454656 4096 4096 NT_STATUS_OK
ReadX 13992 458752 61440 61440 NT_STATUS_OK
ReadX 13992 520192 4096 4096 NT_STATUS_OK
ReadX 13992 524288 61440 61440 NT_STATUS_OK
ReadX 13992 585728 4096 4096 NT_STATUS_OK
ReadX 13992 589824 61440 61440 NT_STATUS_OK
ReadX 13992 651264 4096 4096 NT_STATUS_OK
ReadX 13992 655360 61440 61440 NT_STATUS_OK
ReadX 13992 716800 4096 4096 NT_STATUS_OK
ReadX 13992 720896 61440 61440 NT_STATUS_OK
ReadX 13992 782336 4096 4096 NT_STATUS_OK
ReadX 13992 786432 61440 61440 NT_STATUS_OK
ReadX 13992 847872 4096 4096 NT_STATUS_OK
ReadX 13992 851968 61440 61440 NT_STATUS_OK
ReadX 13992 913408 4096 4096 NT_STATUS_OK
ReadX 13992 917504 61440 61440 NT_STATUS_OK
ReadX 13992 978944 4096 4096 NT_STATUS_OK
ReadX 13992 983040 61440 61440 NT_STATUS_OK
ReadX 13992 1044480 4096 4096 NT_STATUS_OK
ReadX 13992 1048576 61440 61440 NT_STATUS_OK
ReadX 13992 1110016 4096 4096 NT_STATUS_OK
ReadX 13992 1114112 61440 61440 NT_STATUS_OK
ReadX 13992 1175552 4096 4096 NT_STATUS_OK
ReadX 13992 1179648 61440 61440 NT_STATUS_OK
ReadX 13992 1241088 4096 4096 NT_STATUS_OK
ReadX 13992 1245184 61440 61440 NT_STATUS_OK
ReadX 13992 1306624 4096 4096 NT_STATUS_OK
ReadX 13992 1310720 61440 61440 NT_STATUS_OK
ReadX 13992 1372160 4096 4096 NT_STATUS_OK
ReadX 13992 1376256 61440 61440 NT_STATUS_OK
ReadX 13992 1437696 4096 4096 NT_STATUS_OK
ReadX 13992 1441792 61440 61440 NT_STATUS_OK
ReadX 13992 1503232 4096 4096 NT_STATUS_OK
ReadX 13992 1507328 61440 61440 NT_STATUS_OK
ReadX 13992 1568768 4096 4096 NT_STATUS_OK
ReadX 13992 1572864 61440 61440 NT_STATUS_OK
ReadX 13992 1634304 4096 4096 NT_STATUS_OK
ReadX 13992 1638400 61440 61440 NT_STATUS_OK
ReadX 13992 1699840 4096 4096 NT_STATUS_OK
ReadX 13992 1703936 61440 61440 NT_STATUS_OK
ReadX 13992 1765376 4096 4096 NT_STATUS_OK
ReadX 13992 1769472 61440 61440 NT_STATUS_OK
ReadX 13992 1830912 4096 4096 NT_STATUS_OK
ReadX 13992 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13996 NT_STATUS_OK
ReadX 13996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13997 NT_STATUS_OK
ReadX 13997 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13999 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 1004 NT_STATUS_OK
WriteX 13999 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 14000 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 14001 NT_STATUS_OK
WriteX 14001 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14001 258 NT_STATUS_OK
WriteX 14001 0 491 491 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13999 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14005 NT_STATUS_OK
WriteX 14005 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14005 258 NT_STATUS_OK
WriteX 14005 0 543 543 NT_STATUS_OK
Close 14005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Close 13997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14011 NT_STATUS_OK
ReadX 14011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 14018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14019 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 1004 NT_STATUS_OK
WriteX 14019 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 258 NT_STATUS_OK
WriteX 14019 0 2048 2048 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14020 NT_STATUS_OK
ReadX 14020 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
Flush 14020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 14024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14025 NT_STATUS_OK
WriteX 14025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 258 NT_STATUS_OK
WriteX 14025 0 2048 2048 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 14030 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14031 NT_STATUS_OK
WriteX 14031 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14031 258 NT_STATUS_OK
WriteX 14031 0 2048 2048 NT_STATUS_OK
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 2048 2048 NT_STATUS_OK
ReadX 14010 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 14026 0 4096 4096 NT_STATUS_OK
WriteX 14010 0 8192 8192 NT_STATUS_OK
WriteX 14011 0 4096 4096 NT_STATUS_OK
WriteX 14012 0 4096 4096 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14036 NT_STATUS_OK
QUERY_FILE_INFORMATION 14036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Close 14010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14056 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 1004 NT_STATUS_OK
WriteX 14056 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 258 NT_STATUS_OK
WriteX 14056 0 2048 2048 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14064 NT_STATUS_OK
QUERY_FILE_INFORMATION 14064 1004 NT_STATUS_OK
WriteX 14064 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14064 258 NT_STATUS_OK
WriteX 14064 0 2048 2048 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14057 0 4096 4096 NT_STATUS_OK
Flush 14057 NT_STATUS_OK
WriteX 14065 0 4096 4096 NT_STATUS_OK
Flush 14065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14057 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14065 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14059 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14067 NT_STATUS_OK
WriteX 14067 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14067 258 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14070 NT_STATUS_OK
WriteX 14070 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14070 258 NT_STATUS_OK
WriteX 14070 0 4096 4096 NT_STATUS_OK
Close 14070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 14071 0 4096 4096 NT_STATUS_OK
Close 14068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 14071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 14074 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14078 NT_STATUS_OK
WriteX 14078 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 258 NT_STATUS_OK
WriteX 14078 0 2048 2048 NT_STATUS_OK
Close 14078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14080 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14088 NT_STATUS_OK
ReadX 14088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14089 NT_STATUS_OK
ReadX 14089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14090 NT_STATUS_OK
ReadX 14090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14093 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14079 NT_STATUS_OK
Close 14091 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Close 14089 NT_STATUS_OK
Close 14090 NT_STATUS_OK
Close 14092 NT_STATUS_OK
Close 14080 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14095 NT_STATUS_OK
QUERY_FILE_INFORMATION 14095 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9354 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9355 NT_STATUS_OK
ReadX 9355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9356 NT_STATUS_OK
ReadX 9356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9357 NT_STATUS_OK
ReadX 9357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9358 NT_STATUS_OK
ReadX 9358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9359 NT_STATUS_OK
ReadX 9359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9360 NT_STATUS_OK
ReadX 9360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9361 NT_STATUS_OK
ReadX 9361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9362 NT_STATUS_OK
ReadX 9362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9363 NT_STATUS_OK
ReadX 9363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9364 NT_STATUS_OK
ReadX 9364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9365 NT_STATUS_OK
ReadX 9365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9366 NT_STATUS_OK
ReadX 9366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9367 NT_STATUS_OK
ReadX 9367 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9372 NT_STATUS_OK
QUERY_FILE_INFORMATION 9372 1004 NT_STATUS_OK
WriteX 9372 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9372 258 NT_STATUS_OK
WriteX 9372 0 2048 2048 NT_STATUS_OK
Close 9372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9373 NT_STATUS_OK
ReadX 9373 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9375 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9376 NT_STATUS_OK
ReadX 9376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9377 NT_STATUS_OK
ReadX 9377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9378 NT_STATUS_OK
ReadX 9378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9379 NT_STATUS_OK
ReadX 9379 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 9383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9384 NT_STATUS_OK
QUERY_FILE_INFORMATION 9384 1004 NT_STATUS_OK
WriteX 9384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9384 258 NT_STATUS_OK
WriteX 9384 0 2048 2048 NT_STATUS_OK
Close 9384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9385 NT_STATUS_OK
ReadX 9385 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9386 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9387 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9392 NT_STATUS_OK
QUERY_FILE_INFORMATION 9392 1004 NT_STATUS_OK
WriteX 9392 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9392 258 NT_STATUS_OK
WriteX 9392 0 2048 2048 NT_STATUS_OK
Close 9392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9393 NT_STATUS_OK
ReadX 9393 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9373 0 4096 4096 NT_STATUS_OK
Flush 9373 NT_STATUS_OK
WriteX 9385 0 4096 4096 NT_STATUS_OK
Flush 9385 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 9385 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9375 4096 16384 16384 NT_STATUS_OK
ReadX 9355 4096 16384 16384 NT_STATUS_OK
ReadX 9387 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9395 NT_STATUS_OK
ReadX 9395 0 2048 2048 NT_STATUS_OK
WriteX 9395 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9396 NT_STATUS_OK
QUERY_FILE_INFORMATION 9396 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9395 NT_STATUS_OK
Close 9379 NT_STATUS_OK
Close 9367 NT_STATUS_OK
Close 9359 NT_STATUS_OK
Close 9375 NT_STATUS_OK
Close 9376 NT_STATUS_OK
Close 9377 NT_STATUS_OK
Close 9378 NT_STATUS_OK
Close 9366 NT_STATUS_OK
Close 9387 NT_STATUS_OK
Close 9361 NT_STATUS_OK
Close 9364 NT_STATUS_OK
Close 9365 NT_STATUS_OK
Close 9362 NT_STATUS_OK
Close 9363 NT_STATUS_OK
Close 9355 NT_STATUS_OK
Close 9356 NT_STATUS_OK
Close 9357 NT_STATUS_OK
Close 9358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9398 NT_STATUS_OK
QUERY_FILE_INFORMATION 9398 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9400 NT_STATUS_OK
QUERY_FILE_INFORMATION 9400 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9403 NT_STATUS_OK
ReadX 9403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9404 NT_STATUS_OK
ReadX 9404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9405 NT_STATUS_OK
ReadX 9405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9406 NT_STATUS_OK
ReadX 9406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9407 NT_STATUS_OK
ReadX 9407 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9403 4096 16384 16384 NT_STATUS_OK
WriteX 9403 0 4096 4096 NT_STATUS_OK
WriteX 9404 0 4096 4096 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
WriteX 9406 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9409 NT_STATUS_OK
ReadX 9409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9410 NT_STATUS_OK
ReadX 9410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9411 NT_STATUS_OK
ReadX 9411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9412 NT_STATUS_OK
ReadX 9412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9413 NT_STATUS_OK
ReadX 9413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9414 NT_STATUS_OK
ReadX 9414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9415 NT_STATUS_OK
ReadX 9415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9416 NT_STATUS_OK
ReadX 9416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9417 NT_STATUS_OK
ReadX 9417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9418 NT_STATUS_OK
ReadX 9418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9419 NT_STATUS_OK
ReadX 9419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9420 NT_STATUS_OK
ReadX 9420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9421 NT_STATUS_OK
ReadX 9421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9422 NT_STATUS_OK
ReadX 9422 0 8192 8192 NT_STATUS_OK
ReadX 9409 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9423 0 4096 4096 NT_STATUS_OK
ReadX 9423 4096 4096 4096 NT_STATUS_OK
ReadX 9423 8192 4096 4096 NT_STATUS_OK
WriteX 9409 0 4096 4096 NT_STATUS_OK
WriteX 9410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9424 0 4096 4096 NT_STATUS_OK
ReadX 9424 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9403 0 4096 4096 NT_STATUS_OK
WriteX 9404 0 4096 4096 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
WriteX 9406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9429 NT_STATUS_OK
QUERY_FILE_INFORMATION 9429 1004 NT_STATUS_OK
WriteX 9429 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9429 258 NT_STATUS_OK
WriteX 9429 0 2048 2048 NT_STATUS_OK
Close 9429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9430 NT_STATUS_OK
ReadX 9430 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9430 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9430 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9432 NT_STATUS_OK
ReadX 9432 0 4096 4096 NT_STATUS_OK
ReadX 9432 4096 4096 4096 NT_STATUS_OK
WriteX 9432 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9430 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9434 NT_STATUS_OK
ReadX 9434 0 4096 4096 NT_STATUS_OK
ReadX 9434 4096 4096 4096 NT_STATUS_OK
WriteX 9434 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9435 NT_STATUS_OK
QUERY_FILE_INFORMATION 9435 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9422 NT_STATUS_OK
Close 9407 NT_STATUS_OK
Close 9403 NT_STATUS_OK
Close 9404 NT_STATUS_OK
Close 9405 NT_STATUS_OK
Close 9406 NT_STATUS_OK
Close 9415 NT_STATUS_OK
Close 9420 NT_STATUS_OK
Close 9416 NT_STATUS_OK
Close 9417 NT_STATUS_OK
Close 9418 NT_STATUS_OK
Close 9419 NT_STATUS_OK
Close 9421 NT_STATUS_OK
Close 9409 NT_STATUS_OK
Close 9410 NT_STATUS_OK
Close 9413 NT_STATUS_OK
Close 9414 NT_STATUS_OK
Close 9411 NT_STATUS_OK
Close 9412 NT_STATUS_OK
Close 9434 NT_STATUS_OK
Close 9423 NT_STATUS_OK
Close 9424 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9437 0 4096 4096 NT_STATUS_OK
ReadX 9437 4096 4096 4096 NT_STATUS_OK
ReadX 9437 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9439 NT_STATUS_OK
ReadX 9439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9440 NT_STATUS_OK
ReadX 9440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9441 NT_STATUS_OK
ReadX 9441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9442 NT_STATUS_OK
ReadX 9442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9443 NT_STATUS_OK
ReadX 9443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9444 NT_STATUS_OK
ReadX 9444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9445 NT_STATUS_OK
ReadX 9445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9446 NT_STATUS_OK
ReadX 9446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9447 NT_STATUS_OK
ReadX 9447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9448 NT_STATUS_OK
ReadX 9448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9449 NT_STATUS_OK
ReadX 9449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9450 NT_STATUS_OK
ReadX 9450 0 4096 4096 NT_STATUS_OK
ReadX 9438 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9455 NT_STATUS_OK
QUERY_FILE_INFORMATION 9455 1004 NT_STATUS_OK
WriteX 9455 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9455 258 NT_STATUS_OK
WriteX 9455 0 2048 2048 NT_STATUS_OK
Close 9455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9456 NT_STATUS_OK
ReadX 9456 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9460 NT_STATUS_OK
Close 9460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9461 NT_STATUS_OK
QUERY_FILE_INFORMATION 9461 1004 NT_STATUS_OK
WriteX 9461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9461 258 NT_STATUS_OK
WriteX 9461 0 2048 2048 NT_STATUS_OK
Close 9461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9462 NT_STATUS_OK
ReadX 9462 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9445 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9463 NT_STATUS_OK
QUERY_FILE_INFORMATION 9463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9449 NT_STATUS_OK
Close 9444 NT_STATUS_OK
Close 9450 NT_STATUS_OK
Close 9438 NT_STATUS_OK
Close 9439 NT_STATUS_OK
Close 9442 NT_STATUS_OK
Close 9443 NT_STATUS_OK
Close 9440 NT_STATUS_OK
Close 9441 NT_STATUS_OK
Close 9445 NT_STATUS_OK
Close 9446 NT_STATUS_OK
Close 9447 NT_STATUS_OK
Close 9448 NT_STATUS_OK
Close 9437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9465 NT_STATUS_OK
QUERY_FILE_INFORMATION 9465 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9467 NT_STATUS_OK
ReadX 9467 61440 4096 4096 NT_STATUS_OK
ReadX 9467 126976 4096 4096 NT_STATUS_OK
WriteX 9467 0 65536 65536 NT_STATUS_OK
WriteX 9467 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9468 NT_STATUS_OK
ReadX 9468 61440 4096 4096 NT_STATUS_OK
ReadX 9468 126976 4096 4096 NT_STATUS_OK
ReadX 9468 192512 4096 4096 NT_STATUS_OK
ReadX 9468 258048 4096 4096 NT_STATUS_OK
WriteX 9468 0 65536 65536 NT_STATUS_OK
WriteX 9468 65536 65536 65536 NT_STATUS_OK
WriteX 9468 131072 65536 65536 NT_STATUS_OK
WriteX 9468 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9469 NT_STATUS_OK
ReadX 9469 61440 4096 4096 NT_STATUS_OK
ReadX 9469 126976 4096 4096 NT_STATUS_OK
ReadX 9469 192512 4096 4096 NT_STATUS_OK
ReadX 9469 258048 4096 4096 NT_STATUS_OK
ReadX 9469 323584 4096 4096 NT_STATUS_OK
ReadX 9469 389120 4096 4096 NT_STATUS_OK
ReadX 9469 454656 4096 4096 NT_STATUS_OK
ReadX 9469 520192 4096 4096 NT_STATUS_OK
WriteX 9469 0 65536 65536 NT_STATUS_OK
WriteX 9469 65536 65536 65536 NT_STATUS_OK
WriteX 9469 131072 65536 65536 NT_STATUS_OK
Close 9467 NT_STATUS_OK
WriteX 9469 196608 65536 65536 NT_STATUS_OK
Close 9468 NT_STATUS_OK
WriteX 9469 262144 65536 65536 NT_STATUS_OK
WriteX 9469 327680 65536 65536 NT_STATUS_OK
WriteX 9469 393216 65536 65536 NT_STATUS_OK
WriteX 9469 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9470 NT_STATUS_OK
ReadX 9470 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9470 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9470 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9470 8192 4096 4096 NT_STATUS_OK
ReadX 9470 12288 4096 4096 NT_STATUS_OK
ReadX 9470 16384 4096 4096 NT_STATUS_OK
ReadX 9470 20480 4096 4096 NT_STATUS_OK
ReadX 9470 24576 4096 4096 NT_STATUS_OK
ReadX 9470 28672 4096 4096 NT_STATUS_OK
ReadX 9470 32768 4096 4096 NT_STATUS_OK
ReadX 9470 36864 4096 4096 NT_STATUS_OK
ReadX 9470 40960 4096 4096 NT_STATUS_OK
ReadX 9470 45056 4096 4096 NT_STATUS_OK
ReadX 9470 49152 4096 4096 NT_STATUS_OK
ReadX 9470 53248 4096 4096 NT_STATUS_OK
ReadX 9470 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9470 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9471 NT_STATUS_OK
Close 9471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9473 NT_STATUS_OK
WriteX 9473 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9473 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9473 1004 NT_STATUS_OK
WriteX 9473 0 57088 57088 NT_STATUS_OK
WriteX 9473 0 4096 4096 NT_STATUS_OK
Flush 9473 NT_STATUS_OK
Close 9470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9474 NT_STATUS_OK
SET_FILE_INFORMATION 9474 1004 NT_STATUS_OK
Close 9474 NT_STATUS_OK
SET_FILE_INFORMATION 9473 1004 NT_STATUS_OK
WriteX 9473 0 4096 4096 NT_STATUS_OK
Close 9473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9475 NT_STATUS_OK
Close 9475 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9477 NT_STATUS_OK
ReadX 9477 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9477 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9478 NT_STATUS_OK
WriteX 9478 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9478 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9478 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9478 1004 NT_STATUS_OK
WriteX 9478 0 51456 51456 NT_STATUS_OK
WriteX 9478 0 4096 4096 NT_STATUS_OK
Flush 9478 NT_STATUS_OK
SET_FILE_INFORMATION 9478 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9478 1004 NT_STATUS_OK
WriteX 9478 0 4096 4096 NT_STATUS_OK
Close 9478 NT_STATUS_OK
Close 9477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9480 NT_STATUS_OK
Close 9480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9482 NT_STATUS_OK
ReadX 9482 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9482 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9484 NT_STATUS_OK
Close 9484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9487 NT_STATUS_OK
WriteX 9487 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9487 258 NT_STATUS_OK
WriteX 9487 0 53077 53077 NT_STATUS_OK
Close 9487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9488 NT_STATUS_OK
WriteX 9488 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9488 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9488 1004 NT_STATUS_OK
WriteX 9488 0 65536 65536 NT_STATUS_OK
WriteX 9488 65536 1856 1856 NT_STATUS_OK
WriteX 9488 0 4096 4096 NT_STATUS_OK
Flush 9488 NT_STATUS_OK
SET_FILE_INFORMATION 9488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9488 1004 NT_STATUS_OK
WriteX 9488 0 4096 4096 NT_STATUS_OK
Close 9488 NT_STATUS_OK
Close 9482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9490 NT_STATUS_OK
Close 9490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9492 NT_STATUS_OK
ReadX 9492 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9494 NT_STATUS_OK
Close 9494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9497 NT_STATUS_OK
WriteX 9497 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9497 258 NT_STATUS_OK
WriteX 9497 0 7983 7983 NT_STATUS_OK
Close 9497 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9499 NT_STATUS_OK
Close 9499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9502 NT_STATUS_OK
WriteX 9502 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9502 258 NT_STATUS_OK
WriteX 9502 0 65536 65536 NT_STATUS_OK
WriteX 9502 65536 65536 65536 NT_STATUS_OK
WriteX 9502 131072 65536 65536 NT_STATUS_OK
WriteX 9502 196608 65536 65536 NT_STATUS_OK
WriteX 9502 262144 65536 65536 NT_STATUS_OK
WriteX 9502 327680 65536 65536 NT_STATUS_OK
WriteX 9502 393216 65536 65536 NT_STATUS_OK
WriteX 9502 458752 46731 46731 NT_STATUS_OK
Close 9502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9503 NT_STATUS_OK
WriteX 9503 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9503 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9492 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9503 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9503 1004 NT_STATUS_OK
WriteX 9503 0 65536 65536 NT_STATUS_OK
WriteX 9503 65536 22848 22848 NT_STATUS_OK
WriteX 9503 0 4096 4096 NT_STATUS_OK
Flush 9503 NT_STATUS_OK
SET_FILE_INFORMATION 9503 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9503 1004 NT_STATUS_OK
WriteX 9503 0 4096 4096 NT_STATUS_OK
Close 9503 NT_STATUS_OK
Close 9492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9505 NT_STATUS_OK
Close 9505 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9507 NT_STATUS_OK
ReadX 9507 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9507 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9508 NT_STATUS_OK
ReadX 9508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9508 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9508 1004 NT_STATUS_OK
ReadX 9508 8192 4096 4096 NT_STATUS_OK
ReadX 9508 12288 4096 4096 NT_STATUS_OK
ReadX 9508 16384 4096 4096 NT_STATUS_OK
ReadX 9508 20480 4096 4096 NT_STATUS_OK
ReadX 9508 24576 4096 4096 NT_STATUS_OK
ReadX 9508 28672 4096 4096 NT_STATUS_OK
ReadX 9508 32768 4096 4096 NT_STATUS_OK
ReadX 9508 36864 4096 4096 NT_STATUS_OK
ReadX 9508 40960 4096 4096 NT_STATUS_OK
ReadX 9508 45056 4096 4096 NT_STATUS_OK
ReadX 9508 49152 4096 4096 NT_STATUS_OK
ReadX 9508 53248 4096 4096 NT_STATUS_OK
ReadX 9508 57344 4096 4096 NT_STATUS_OK
ReadX 9508 61440 4096 4096 NT_STATUS_OK
ReadX 9508 65536 4096 4096 NT_STATUS_OK
ReadX 9508 69632 4096 4096 NT_STATUS_OK
ReadX 9508 73728 4096 4096 NT_STATUS_OK
ReadX 9508 77824 4096 4096 NT_STATUS_OK
ReadX 9508 81920 4096 4096 NT_STATUS_OK
ReadX 9508 86016 4096 4096 NT_STATUS_OK
ReadX 9508 90112 4096 4096 NT_STATUS_OK
ReadX 9508 94208 4096 4096 NT_STATUS_OK
ReadX 9508 98304 4096 4096 NT_STATUS_OK
ReadX 9508 102400 4096 4096 NT_STATUS_OK
ReadX 9508 106496 4096 4096 NT_STATUS_OK
ReadX 9508 110592 4096 4096 NT_STATUS_OK
ReadX 9508 114688 4096 4096 NT_STATUS_OK
ReadX 9508 118784 4096 4096 NT_STATUS_OK
ReadX 9508 122880 4096 4096 NT_STATUS_OK
ReadX 9508 126976 4096 4096 NT_STATUS_OK
ReadX 9508 131072 4096 4096 NT_STATUS_OK
ReadX 9508 135168 4096 4096 NT_STATUS_OK
ReadX 9508 139264 4096 4096 NT_STATUS_OK
ReadX 9508 143360 4096 4096 NT_STATUS_OK
ReadX 9508 147456 4096 4096 NT_STATUS_OK
ReadX 9508 151552 4096 4096 NT_STATUS_OK
ReadX 9508 155648 4096 4096 NT_STATUS_OK
ReadX 9508 159744 4096 4096 NT_STATUS_OK
ReadX 9508 163840 4096 4096 NT_STATUS_OK
ReadX 9508 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9508 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9509 NT_STATUS_OK
Close 9509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9507 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9511 NT_STATUS_OK
WriteX 9511 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9511 258 NT_STATUS_OK
Close 9508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9512 NT_STATUS_OK
SET_FILE_INFORMATION 9512 1004 NT_STATUS_OK
Close 9512 NT_STATUS_OK
WriteX 9511 0 42388 42388 NT_STATUS_OK
Close 9511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9513 NT_STATUS_OK
Close 9513 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9515 NT_STATUS_OK
ReadX 9515 0 4096 4096 NT_STATUS_OK
ReadX 9515 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9516 NT_STATUS_OK
WriteX 9516 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9516 258 NT_STATUS_OK
SET_FILE_INFORMATION 9516 1004 NT_STATUS_OK
WriteX 9516 0 42652 42652 NT_STATUS_OK
Close 9516 NT_STATUS_OK
Close 9515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9518 NT_STATUS_OK
Close 9518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9520 NT_STATUS_OK
ReadX 9520 0 4096 4096 NT_STATUS_OK
ReadX 9520 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9522 NT_STATUS_OK
Close 9522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9525 NT_STATUS_OK
WriteX 9525 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9525 258 NT_STATUS_OK
WriteX 9525 0 65536 65536 NT_STATUS_OK
WriteX 9525 65536 49 49 NT_STATUS_OK
Close 9525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9526 NT_STATUS_OK
ReadX 9526 0 61440 61440 NT_STATUS_OK
ReadX 9526 61440 4096 4096 NT_STATUS_OK
ReadX 9526 65536 61440 61440 NT_STATUS_OK
ReadX 9526 126976 4096 4096 NT_STATUS_OK
ReadX 9526 131072 61440 61440 NT_STATUS_OK
ReadX 9526 192512 4096 4096 NT_STATUS_OK
ReadX 9526 196608 61440 61440 NT_STATUS_OK
ReadX 9526 258048 4096 4096 NT_STATUS_OK
ReadX 9526 262144 61440 61440 NT_STATUS_OK
ReadX 9526 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9527 NT_STATUS_OK
ReadX 9527 0 61440 61440 NT_STATUS_OK
ReadX 9527 61440 4096 4096 NT_STATUS_OK
ReadX 9527 65536 61440 61440 NT_STATUS_OK
ReadX 9527 126976 4096 4096 NT_STATUS_OK
ReadX 9527 131072 61440 61440 NT_STATUS_OK
ReadX 9527 192512 4096 4096 NT_STATUS_OK
ReadX 9527 196608 61440 61440 NT_STATUS_OK
ReadX 9527 258048 4096 4096 NT_STATUS_OK
ReadX 9527 262144 61440 61440 NT_STATUS_OK
ReadX 9527 323584 4096 4096 NT_STATUS_OK
ReadX 9527 327680 61440 61440 NT_STATUS_OK
ReadX 9527 389120 4096 4096 NT_STATUS_OK
ReadX 9527 393216 61440 61440 NT_STATUS_OK
ReadX 9527 454656 4096 4096 NT_STATUS_OK
ReadX 9527 458752 61440 61440 NT_STATUS_OK
ReadX 9527 520192 4096 4096 NT_STATUS_OK
ReadX 9527 524288 61440 61440 NT_STATUS_OK
ReadX 9527 585728 4096 4096 NT_STATUS_OK
ReadX 9527 589824 61440 61440 NT_STATUS_OK
ReadX 9527 651264 4096 4096 NT_STATUS_OK
ReadX 9527 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9528 NT_STATUS_OK
ReadX 9528 0 61440 61440 NT_STATUS_OK
ReadX 9528 61440 4096 4096 NT_STATUS_OK
ReadX 9528 65536 61440 61440 NT_STATUS_OK
ReadX 9528 126976 4096 4096 NT_STATUS_OK
ReadX 9528 131072 61440 61440 NT_STATUS_OK
ReadX 9528 192512 4096 4096 NT_STATUS_OK
ReadX 9528 196608 61440 61440 NT_STATUS_OK
ReadX 9528 258048 4096 4096 NT_STATUS_OK
ReadX 9528 262144 61440 61440 NT_STATUS_OK
ReadX 9528 323584 4096 4096 NT_STATUS_OK
ReadX 9528 327680 61440 61440 NT_STATUS_OK
ReadX 9528 389120 4096 4096 NT_STATUS_OK
ReadX 9528 393216 61440 61440 NT_STATUS_OK
ReadX 9528 454656 4096 4096 NT_STATUS_OK
ReadX 9528 458752 61440 61440 NT_STATUS_OK
ReadX 9528 520192 4096 4096 NT_STATUS_OK
ReadX 9528 524288 61440 61440 NT_STATUS_OK
ReadX 9528 585728 4096 4096 NT_STATUS_OK
ReadX 9528 589824 61440 61440 NT_STATUS_OK
ReadX 9528 651264 4096 4096 NT_STATUS_OK
ReadX 9528 655360 61440 61440 NT_STATUS_OK
ReadX 9528 716800 4096 4096 NT_STATUS_OK
ReadX 9528 720896 61440 61440 NT_STATUS_OK
ReadX 9528 782336 4096 4096 NT_STATUS_OK
ReadX 9528 786432 61440 61440 NT_STATUS_OK
ReadX 9528 847872 4096 4096 NT_STATUS_OK
ReadX 9528 851968 61440 61440 NT_STATUS_OK
ReadX 9528 913408 4096 4096 NT_STATUS_OK
ReadX 9528 917504 61440 61440 NT_STATUS_OK
ReadX 9528 978944 4096 4096 NT_STATUS_OK
ReadX 9528 983040 61440 61440 NT_STATUS_OK
ReadX 9528 1044480 4096 4096 NT_STATUS_OK
ReadX 9528 1048576 61440 61440 NT_STATUS_OK
ReadX 9528 1110016 4096 4096 NT_STATUS_OK
ReadX 9528 1114112 61440 61440 NT_STATUS_OK
ReadX 9528 1175552 4096 4096 NT_STATUS_OK
ReadX 9528 1179648 61440 61440 NT_STATUS_OK
ReadX 9528 1241088 4096 4096 NT_STATUS_OK
ReadX 9528 1245184 61440 61440 NT_STATUS_OK
ReadX 9528 1306624 4096 4096 NT_STATUS_OK
ReadX 9528 1310720 61440 61440 NT_STATUS_OK
ReadX 9528 1372160 4096 4096 NT_STATUS_OK
ReadX 9528 1376256 61440 61440 NT_STATUS_OK
ReadX 9528 1437696 4096 4096 NT_STATUS_OK
ReadX 9528 1441792 61440 61440 NT_STATUS_OK
ReadX 9528 1503232 4096 4096 NT_STATUS_OK
ReadX 9528 1507328 61440 61440 NT_STATUS_OK
ReadX 9528 1568768 4096 4096 NT_STATUS_OK
ReadX 9528 1572864 61440 61440 NT_STATUS_OK
ReadX 9528 1634304 4096 4096 NT_STATUS_OK
ReadX 9528 1638400 61440 61440 NT_STATUS_OK
ReadX 9528 1699840 4096 4096 NT_STATUS_OK
ReadX 9528 1703936 61440 61440 NT_STATUS_OK
ReadX 9528 1765376 4096 4096 NT_STATUS_OK
ReadX 9528 1769472 61440 61440 NT_STATUS_OK
ReadX 9528 1830912 4096 4096 NT_STATUS_OK
ReadX 9528 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9530 NT_STATUS_OK
QUERY_FILE_INFORMATION 9530 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9530 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9530 1005 NT_STATUS_OK
ReadX 9530 2156 24 24 NT_STATUS_OK
ReadX 9530 2139 276 276 NT_STATUS_OK
ReadX 9530 2136 14 14 NT_STATUS_OK
ReadX 9530 2136 7 7 NT_STATUS_OK
ReadX 9530 2138 12 12 NT_STATUS_OK
ReadX 9530 2137 8 8 NT_STATUS_OK
ReadX 9530 2135 15 15 NT_STATUS_OK
ReadX 9530 0 16 16 NT_STATUS_OK
ReadX 9530 16 2048 2048 NT_STATUS_OK
ReadX 9530 2064 2048 2048 NT_STATUS_OK
ReadX 9530 257 2048 2048 NT_STATUS_OK
ReadX 9530 385 2048 2048 NT_STATUS_OK
ReadX 9530 513 2048 2048 NT_STATUS_OK
ReadX 9530 641 2048 2048 NT_STATUS_OK
ReadX 9530 769 2048 2048 NT_STATUS_OK
ReadX 9530 897 2048 2048 NT_STATUS_OK
ReadX 9530 1025 2048 2048 NT_STATUS_OK
ReadX 9530 1153 2048 2048 NT_STATUS_OK
ReadX 9530 1281 2048 2048 NT_STATUS_OK
ReadX 9530 1409 2048 2048 NT_STATUS_OK
ReadX 9530 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9532 NT_STATUS_OK
Close 9532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9526 NT_STATUS_OK
Close 9527 NT_STATUS_OK
Close 9528 NT_STATUS_OK
Close 9520 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9535 NT_STATUS_OK
WriteX 9535 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9535 258 NT_STATUS_OK
WriteX 9535 0 10575 10575 NT_STATUS_OK
Flush 9535 NT_STATUS_OK
Close 9535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9536 NT_STATUS_OK
Close 9536 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9538 NT_STATUS_OK
ReadX 9538 0 4096 4096 NT_STATUS_OK
Close 9530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9540 NT_STATUS_OK
LockX 9540 2147483538 1 NT_STATUS_OK
UnlockX 9540 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9540 1005 NT_STATUS_OK
ReadX 9540 0 512 512 NT_STATUS_OK
ReadX 9540 512 512 512 NT_STATUS_OK
ReadX 9540 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9540 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9540 1004 NT_STATUS_OK
Close 9540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9541 NT_STATUS_OK
QUERY_FILE_INFORMATION 9541 1005 NT_STATUS_OK
ReadX 9541 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9542 NT_STATUS_OK
LockX 9542 2147483538 1 NT_STATUS_OK
UnlockX 9542 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9542 1005 NT_STATUS_OK
ReadX 9542 0 512 512 NT_STATUS_OK
ReadX 9542 512 512 512 NT_STATUS_OK
ReadX 9542 1024 512 512 NT_STATUS_OK
ReadX 9542 288 20 20 NT_STATUS_OK
ReadX 9542 308 2084 2084 NT_STATUS_OK
ReadX 9542 388 2084 2084 NT_STATUS_OK
ReadX 9542 388 2084 2084 NT_STATUS_OK
ReadX 9529 2157 1386 1386 NT_STATUS_OK
ReadX 9542 2472 399 399 NT_STATUS_OK
ReadX 9542 3072 1536 1536 NT_STATUS_OK
ReadX 9542 544 149 149 NT_STATUS_OK
ReadX 9542 693 485 485 NT_STATUS_OK
Close 9542 NT_STATUS_OK
ReadX 9529 2157 4096 4096 NT_STATUS_OK
ReadX 9529 6253 4096 4096 NT_STATUS_OK
ReadX 9529 10349 4096 4096 NT_STATUS_OK
ReadX 9529 14445 4096 4096 NT_STATUS_OK
ReadX 9529 18541 4096 4096 NT_STATUS_OK
ReadX 9529 22637 256 256 NT_STATUS_OK
ReadX 9529 22893 4096 4096 NT_STATUS_OK
ReadX 9529 26989 4096 4096 NT_STATUS_OK
ReadX 9529 31085 4096 4096 NT_STATUS_OK
ReadX 9529 35181 4096 4096 NT_STATUS_OK
ReadX 9529 39277 4096 4096 NT_STATUS_OK
ReadX 9529 43373 4096 4096 NT_STATUS_OK
ReadX 9529 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9529 2157 1024 1024 NT_STATUS_OK
ReadX 9529 1667 4688 4688 NT_STATUS_OK
ReadX 9529 6355 3516 3516 NT_STATUS_OK
ReadX 9529 9871 16384 16384 NT_STATUS_OK
ReadX 9529 26255 3771 3771 NT_STATUS_OK
ReadX 9529 30026 2048 2048 NT_STATUS_OK
ReadX 9529 32074 1024 1024 NT_STATUS_OK
ReadX 9529 33098 6652 6652 NT_STATUS_OK
ReadX 9529 39750 16384 16384 NT_STATUS_OK
ReadX 9529 56134 10496 10496 NT_STATUS_OK
ReadX 9529 66630 1784 1784 NT_STATUS_OK
ReadX 9529 68414 90 90 NT_STATUS_OK
ReadX 9529 68504 273 273 NT_STATUS_OK
ReadX 9529 68777 1600 1600 NT_STATUS_OK
ReadX 9529 70377 640 640 NT_STATUS_OK
ReadX 9529 71017 1280 1280 NT_STATUS_OK
ReadX 9529 72297 8464 8464 NT_STATUS_OK
ReadX 9529 80761 158 158 NT_STATUS_OK
ReadX 9529 80919 912 912 NT_STATUS_OK
ReadX 9529 81831 1980 1980 NT_STATUS_OK
ReadX 9529 83811 2256 2256 NT_STATUS_OK
ReadX 9529 86067 400 400 NT_STATUS_OK
ReadX 9529 86467 252 252 NT_STATUS_OK
ReadX 9529 86719 42 42 NT_STATUS_OK
ReadX 9529 86761 725 725 NT_STATUS_OK
ReadX 9529 2009 512 512 NT_STATUS_OK
ReadX 9529 3895 9 9 NT_STATUS_OK
ReadX 9529 3781 46 46 NT_STATUS_OK
ReadX 9529 4059 92 92 NT_STATUS_OK
ReadX 9529 3781 92 92 NT_STATUS_OK
ReadX 9529 3986 184 184 NT_STATUS_OK
ReadX 9529 3987 16384 16384 NT_STATUS_OK
ReadX 9529 3902 16384 16384 NT_STATUS_OK
ReadX 9529 3781 10240 10240 NT_STATUS_OK
ReadX 9529 3821 16384 16384 NT_STATUS_OK
ReadX 9529 3891 935 935 NT_STATUS_OK
ReadX 9529 4060 10240 10240 NT_STATUS_OK
ReadX 9529 4059 184 184 NT_STATUS_OK
ReadX 9529 256 184 184 NT_STATUS_OK
ReadX 9529 256 1026 1026 NT_STATUS_OK
ReadX 9529 3901 326 326 NT_STATUS_OK
ReadX 9529 3899 652 652 NT_STATUS_OK
ReadX 9529 256 2 2 NT_STATUS_OK
ReadX 9529 258 4948 4948 NT_STATUS_OK
Close 9529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9544 NT_STATUS_OK
Close 9544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9547 NT_STATUS_OK
WriteX 9547 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9547 258 NT_STATUS_OK
WriteX 9547 0 65536 65536 NT_STATUS_OK
WriteX 9547 65536 65536 65536 NT_STATUS_OK
WriteX 9547 131072 65536 65536 NT_STATUS_OK
WriteX 9547 196608 65536 65536 NT_STATUS_OK
WriteX 9547 262144 65536 65536 NT_STATUS_OK
WriteX 9547 327680 65536 65536 NT_STATUS_OK
WriteX 9547 393216 65536 65536 NT_STATUS_OK
WriteX 9547 458752 65536 65536 NT_STATUS_OK
WriteX 9547 524288 65536 65536 NT_STATUS_OK
WriteX 9547 589824 35257 35257 NT_STATUS_OK
Close 9547 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9549 NT_STATUS_OK
Close 9549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9552 NT_STATUS_OK
WriteX 9552 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9552 258 NT_STATUS_OK
WriteX 9552 0 65536 65536 NT_STATUS_OK
WriteX 9552 65536 65536 65536 NT_STATUS_OK
WriteX 9552 131072 65536 65536 NT_STATUS_OK
WriteX 9552 196608 65536 65536 NT_STATUS_OK
WriteX 9552 262144 65536 65536 NT_STATUS_OK
WriteX 9552 327680 65536 65536 NT_STATUS_OK
WriteX 9552 393216 65536 65536 NT_STATUS_OK
WriteX 9552 458752 65536 65536 NT_STATUS_OK
WriteX 9552 524288 65536 65536 NT_STATUS_OK
WriteX 9552 589824 57598 57598 NT_STATUS_OK
Close 9552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9554 NT_STATUS_OK
WriteX 9554 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9554 258 NT_STATUS_OK
WriteX 9554 0 12543 12543 NT_STATUS_OK
Flush 9554 NT_STATUS_OK
Close 9554 NT_STATUS_OK
Close 9538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9556 NT_STATUS_OK
Close 9556 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9558 NT_STATUS_OK
ReadX 9558 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9560 NT_STATUS_OK
QUERY_FILE_INFORMATION 9560 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9560 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9560 1005 NT_STATUS_OK
ReadX 9560 1938 24 24 NT_STATUS_OK
ReadX 9560 1920 276 276 NT_STATUS_OK
ReadX 9560 1918 14 14 NT_STATUS_OK
ReadX 9560 1918 7 7 NT_STATUS_OK
ReadX 9560 1919 12 12 NT_STATUS_OK
ReadX 9560 1919 8 8 NT_STATUS_OK
ReadX 9560 1917 15 15 NT_STATUS_OK
ReadX 9560 0 16 16 NT_STATUS_OK
ReadX 9560 16 2048 2048 NT_STATUS_OK
ReadX 9560 2064 2048 2048 NT_STATUS_OK
ReadX 9560 257 2048 2048 NT_STATUS_OK
ReadX 9560 385 2048 2048 NT_STATUS_OK
ReadX 9560 513 2048 2048 NT_STATUS_OK
ReadX 9560 641 2048 2048 NT_STATUS_OK
ReadX 9560 769 2048 2048 NT_STATUS_OK
ReadX 9560 897 2048 2048 NT_STATUS_OK
ReadX 9560 1025 2048 2048 NT_STATUS_OK
ReadX 9560 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9562 NT_STATUS_OK
Close 9562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9565 NT_STATUS_OK
WriteX 9565 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9565 258 NT_STATUS_OK
WriteX 9565 0 11588 11588 NT_STATUS_OK
Flush 9565 NT_STATUS_OK
Close 9565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9566 NT_STATUS_OK
Close 9566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9568 NT_STATUS_OK
ReadX 9568 0 4096 4096 NT_STATUS_OK
Close 9560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9570 NT_STATUS_OK
WriteX 9570 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9570 258 NT_STATUS_OK
WriteX 9570 0 11615 11615 NT_STATUS_OK
Flush 9570 NT_STATUS_OK
Close 9570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9572 NT_STATUS_OK
Close 9572 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9574 NT_STATUS_OK
ReadX 9574 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9576 NT_STATUS_OK
Close 9576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9579 NT_STATUS_OK
WriteX 9579 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9579 258 NT_STATUS_OK
WriteX 9579 0 65536 65536 NT_STATUS_OK
WriteX 9579 65536 16050 16050 NT_STATUS_OK
Close 9579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9559 1939 64 64 NT_STATUS_OK
ReadX 9559 128 248 248 NT_STATUS_OK
ReadX 9559 128 568 568 NT_STATUS_OK
ReadX 9559 3872 1536 1536 NT_STATUS_OK
ReadX 9559 3456 2560 2560 NT_STATUS_OK
ReadX 9559 3136 512 512 NT_STATUS_OK
ReadX 9559 2880 4096 4096 NT_STATUS_OK
ReadX 9559 3264 3072 3072 NT_STATUS_OK
ReadX 9559 320 4096 4096 NT_STATUS_OK
ReadX 9559 1024 4096 4096 NT_STATUS_OK
ReadX 9559 3616 4096 4096 NT_STATUS_OK
ReadX 9559 1939 64 64 NT_STATUS_OK
ReadX 9559 128 248 248 NT_STATUS_OK
ReadX 9559 128 608 608 NT_STATUS_OK
ReadX 9559 2858 1024 1024 NT_STATUS_OK
ReadX 9559 2810 4096 4096 NT_STATUS_OK
ReadX 9559 2826 4096 4096 NT_STATUS_OK
ReadX 9559 2580 2048 2048 NT_STATUS_OK
ReadX 9559 2800 2560 2560 NT_STATUS_OK
ReadX 9559 2100 4096 4096 NT_STATUS_OK
ReadX 9559 2084 4096 4096 NT_STATUS_OK
ReadX 9559 868 4096 4096 NT_STATUS_OK
ReadX 9559 2324 4096 4096 NT_STATUS_OK
ReadX 9559 884 4096 4096 NT_STATUS_OK
ReadX 9559 2604 1024 1024 NT_STATUS_OK
ReadX 9559 580 4096 4096 NT_STATUS_OK
ReadX 9559 596 4096 4096 NT_STATUS_OK
ReadX 9559 2752 4096 4096 NT_STATUS_OK
ReadX 9559 2842 1024 1024 NT_STATUS_OK
ReadX 9559 660 4096 4096 NT_STATUS_OK
ReadX 9559 2720 4096 4096 NT_STATUS_OK
ReadX 9559 2736 4096 4096 NT_STATUS_OK
ReadX 9559 628 4096 4096 NT_STATUS_OK
ReadX 9559 2704 4096 4096 NT_STATUS_OK
ReadX 9559 1556 4096 4096 NT_STATUS_OK
ReadX 9559 576 4096 4096 NT_STATUS_OK
ReadX 9559 3168 1536 1536 NT_STATUS_OK
ReadX 9559 832 4096 4096 NT_STATUS_OK
ReadX 9559 1088 4096 4096 NT_STATUS_OK
ReadX 9559 1344 4096 4096 NT_STATUS_OK
ReadX 9559 1600 4096 4096 NT_STATUS_OK
ReadX 9559 1856 4096 4096 NT_STATUS_OK
ReadX 9559 2112 4096 4096 NT_STATUS_OK
ReadX 9559 1892 4096 4096 NT_STATUS_OK
ReadX 9559 820 4096 4096 NT_STATUS_OK
ReadX 9559 788 4096 4096 NT_STATUS_OK
ReadX 9559 1604 4096 4096 NT_STATUS_OK
ReadX 9559 3648 4096 4096 NT_STATUS_OK
ReadX 9559 2608 4096 4096 NT_STATUS_OK
ReadX 9559 548 4096 4096 NT_STATUS_OK
ReadX 9559 740 4096 4096 NT_STATUS_OK
ReadX 9559 1344 4096 4096 NT_STATUS_OK
ReadX 9559 3392 4096 4096 NT_STATUS_OK
ReadX 9559 3904 4096 4096 NT_STATUS_OK
ReadX 9559 644 4096 4096 NT_STATUS_OK
ReadX 9559 676 4096 4096 NT_STATUS_OK
ReadX 9559 2688 4096 4096 NT_STATUS_OK
ReadX 9559 320 4096 4096 NT_STATUS_OK
ReadX 9559 900 4096 4096 NT_STATUS_OK
ReadX 9559 1908 4096 4096 NT_STATUS_OK
ReadX 9559 852 4096 4096 NT_STATUS_OK
ReadX 9559 724 4096 4096 NT_STATUS_OK
ReadX 9559 2292 4096 4096 NT_STATUS_OK
ReadX 9559 612 4096 4096 NT_STATUS_OK
ReadX 9559 388 4096 4096 NT_STATUS_OK
ReadX 9559 2368 4096 4096 NT_STATUS_OK
ReadX 9559 2624 4096 4096 NT_STATUS_OK
ReadX 9559 500 4096 4096 NT_STATUS_OK
ReadX 9559 356 4096 4096 NT_STATUS_OK
ReadX 9559 1024 4096 4096 NT_STATUS_OK
ReadX 9559 576 4096 4096 NT_STATUS_OK
ReadX 9559 340 4096 4096 NT_STATUS_OK
ReadX 9559 420 4096 4096 NT_STATUS_OK
ReadX 9559 1600 4096 4096 NT_STATUS_OK
ReadX 9559 404 4096 4096 NT_STATUS_OK
ReadX 9559 1428 4096 4096 NT_STATUS_OK
ReadX 9559 2656 4096 4096 NT_STATUS_OK
ReadX 9559 2624 4096 4096 NT_STATUS_OK
ReadX 9559 452 4096 4096 NT_STATUS_OK
ReadX 9559 692 4096 4096 NT_STATUS_OK
ReadX 9559 564 4096 4096 NT_STATUS_OK
ReadX 9559 372 4096 4096 NT_STATUS_OK
ReadX 9559 468 4096 4096 NT_STATUS_OK
ReadX 9559 484 4096 4096 NT_STATUS_OK
ReadX 9559 1088 4096 4096 NT_STATUS_OK
ReadX 9559 1924 4096 4096 NT_STATUS_OK
ReadX 9559 2768 4096 4096 NT_STATUS_OK
ReadX 9559 832 4096 4096 NT_STATUS_OK
ReadX 9559 836 4096 4096 NT_STATUS_OK
ReadX 9559 1856 4096 4096 NT_STATUS_OK
ReadX 9559 2640 4096 4096 NT_STATUS_OK
ReadX 9559 436 4096 4096 NT_STATUS_OK
ReadX 9559 1828 4096 4096 NT_STATUS_OK
ReadX 9559 804 4096 4096 NT_STATUS_OK
ReadX 9559 1860 4096 4096 NT_STATUS_OK
ReadX 9559 1812 4096 4096 NT_STATUS_OK
ReadX 9559 756 4096 4096 NT_STATUS_OK
ReadX 9559 1636 4096 4096 NT_STATUS_OK
ReadX 9559 772 4096 4096 NT_STATUS_OK
ReadX 9559 2036 4096 4096 NT_STATUS_OK
ReadX 9559 1220 4096 4096 NT_STATUS_OK
ReadX 9559 1652 4096 4096 NT_STATUS_OK
ReadX 9559 2588 4096 4096 NT_STATUS_OK
ReadX 9559 916 4096 4096 NT_STATUS_OK
ReadX 9559 260 4096 4096 NT_STATUS_OK
ReadX 9559 932 4096 4096 NT_STATUS_OK
ReadX 9559 2624 4096 4096 NT_STATUS_OK
ReadX 9559 308 4096 4096 NT_STATUS_OK
ReadX 9559 292 4096 4096 NT_STATUS_OK
ReadX 9559 1140 4096 4096 NT_STATUS_OK
ReadX 9559 276 4096 4096 NT_STATUS_OK
ReadX 9559 2020 4096 4096 NT_STATUS_OK
ReadX 9559 2880 4096 4096 NT_STATUS_OK
ReadX 9559 516 4096 4096 NT_STATUS_OK
ReadX 9559 1844 4096 4096 NT_STATUS_OK
ReadX 9559 1124 4096 4096 NT_STATUS_OK
ReadX 9559 3136 4096 4096 NT_STATUS_OK
ReadX 9559 324 4096 4096 NT_STATUS_OK
ReadX 9559 1156 4096 4096 NT_STATUS_OK
ReadX 9559 1172 4096 4096 NT_STATUS_OK
ReadX 9559 2112 4096 4096 NT_STATUS_OK
ReadX 9559 2368 4096 4096 NT_STATUS_OK
ReadX 9559 964 4096 4096 NT_STATUS_OK
ReadX 9559 980 4096 4096 NT_STATUS_OK
ReadX 9559 1012 4096 4096 NT_STATUS_OK
ReadX 9559 532 4096 4096 NT_STATUS_OK
ReadX 9559 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9559 1620 4096 4096 NT_STATUS_OK
ReadX 9559 1604 4096 4096 NT_STATUS_OK
ReadX 9559 2116 4096 4096 NT_STATUS_OK
ReadX 9559 2132 4096 4096 NT_STATUS_OK
ReadX 9559 2148 4096 4096 NT_STATUS_OK
ReadX 9559 2276 4096 4096 NT_STATUS_OK
ReadX 9559 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9581 NT_STATUS_OK
Close 9581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9584 NT_STATUS_OK
QUERY_FILE_INFORMATION 9539 1004 NT_STATUS_OK
Close 9539 NT_STATUS_OK
WriteX 9584 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9584 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9541 1004 NT_STATUS_OK
Close 9541 NT_STATUS_OK
WriteX 9584 0 65536 65536 NT_STATUS_OK
WriteX 9584 65536 64850 64850 NT_STATUS_OK
Close 9584 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9586 NT_STATUS_OK
WriteX 9586 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9586 258 NT_STATUS_OK
ReadX 9559 2068 4096 4096 NT_STATUS_OK
ReadX 9559 1588 4096 4096 NT_STATUS_OK
ReadX 9559 1572 4096 4096 NT_STATUS_OK
WriteX 9586 0 18630 18630 NT_STATUS_OK
Flush 9586 NT_STATUS_OK
Close 9586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9588 NT_STATUS_OK
Close 9588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9590 NT_STATUS_OK
ReadX 9590 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9559 612 4096 4096 NT_STATUS_OK
ReadX 9559 564 4096 4096 NT_STATUS_OK
ReadX 9559 1876 4096 4096 NT_STATUS_OK
ReadX 9559 628 4096 4096 NT_STATUS_OK
ReadX 9559 740 4096 4096 NT_STATUS_OK
ReadX 9559 724 4096 4096 NT_STATUS_OK
ReadX 9559 644 4096 4096 NT_STATUS_OK
ReadX 9559 2324 4096 4096 NT_STATUS_OK
ReadX 9559 660 4096 4096 NT_STATUS_OK
ReadX 9559 852 4096 4096 NT_STATUS_OK
ReadX 9559 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9559 2368 4096 4096 NT_STATUS_OK
ReadX 9559 1024 4096 4096 NT_STATUS_OK
ReadX 9559 320 4096 4096 NT_STATUS_OK
ReadX 9559 580 4096 4096 NT_STATUS_OK
ReadX 9559 3136 512 512 NT_STATUS_OK
ReadX 9559 2880 4096 4096 NT_STATUS_OK
Close 9559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9591 NT_STATUS_OK
ReadX 9591 61440 4096 4096 NT_STATUS_OK
ReadX 9591 126976 4096 4096 NT_STATUS_OK
WriteX 9591 0 65536 65536 NT_STATUS_OK
WriteX 9591 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9592 NT_STATUS_OK
ReadX 9592 61440 4096 4096 NT_STATUS_OK
ReadX 9592 126976 4096 4096 NT_STATUS_OK
ReadX 9592 192512 4096 4096 NT_STATUS_OK
ReadX 9592 258048 4096 4096 NT_STATUS_OK
WriteX 9592 0 65536 65536 NT_STATUS_OK
WriteX 9592 65536 65536 65536 NT_STATUS_OK
WriteX 9592 131072 65536 65536 NT_STATUS_OK
WriteX 9592 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9593 NT_STATUS_OK
ReadX 9593 61440 4096 4096 NT_STATUS_OK
ReadX 9593 126976 4096 4096 NT_STATUS_OK
ReadX 9593 192512 4096 4096 NT_STATUS_OK
ReadX 9593 258048 4096 4096 NT_STATUS_OK
ReadX 9593 323584 4096 4096 NT_STATUS_OK
ReadX 9593 389120 4096 4096 NT_STATUS_OK
ReadX 9593 454656 4096 4096 NT_STATUS_OK
ReadX 9593 520192 4096 4096 NT_STATUS_OK
WriteX 9593 0 65536 65536 NT_STATUS_OK
WriteX 9593 65536 65536 65536 NT_STATUS_OK
WriteX 9593 131072 65536 65536 NT_STATUS_OK
WriteX 9593 196608 65536 65536 NT_STATUS_OK
WriteX 9593 262144 65536 65536 NT_STATUS_OK
WriteX 9593 327680 65536 65536 NT_STATUS_OK
WriteX 9593 393216 65536 65536 NT_STATUS_OK
WriteX 9593 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9594 NT_STATUS_OK
ReadX 9594 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9595 NT_STATUS_OK
Close 9595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9596 NT_STATUS_OK
WriteX 9596 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9596 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9594 0 8192 8192 NT_STATUS_OK
Flush 9594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9594 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9594 0 8192 8192 NT_STATUS_OK
Flush 9594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9594 0 8192 8192 NT_STATUS_OK
Flush 9594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9594 0 8192 8192 NT_STATUS_OK
Flush 9594 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9598 NT_STATUS_OK
Close 9598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9590 NT_STATUS_OK
Close 9558 NT_STATUS_OK
Close 9591 NT_STATUS_OK
Close 9592 NT_STATUS_OK
Close 9593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9601 NT_STATUS_OK
WriteX 9601 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9601 258 NT_STATUS_OK
WriteX 9601 0 62591 62591 NT_STATUS_OK
Close 9601 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9603 NT_STATUS_OK
Close 9603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9606 NT_STATUS_OK
WriteX 9606 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9606 258 NT_STATUS_OK
WriteX 9606 0 10845 10845 NT_STATUS_OK
Close 9606 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9608 NT_STATUS_OK
Close 9608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9611 NT_STATUS_OK
WriteX 9611 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9611 258 NT_STATUS_OK
WriteX 9611 0 30118 30118 NT_STATUS_OK
Close 9611 NT_STATUS_OK
WriteX 9594 0 4096 4096 NT_STATUS_OK
WriteX 9596 0 64 64 NT_STATUS_OK
Close 9596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9594 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9613 NT_STATUS_OK
ReadX 9613 0 61440 61440 NT_STATUS_OK
ReadX 9613 61440 4096 4096 NT_STATUS_OK
ReadX 9613 65536 61440 61440 NT_STATUS_OK
ReadX 9613 126976 4096 4096 NT_STATUS_OK
ReadX 9613 131072 61440 61440 NT_STATUS_OK
ReadX 9613 192512 4096 4096 NT_STATUS_OK
ReadX 9613 196608 61440 61440 NT_STATUS_OK
ReadX 9613 258048 4096 4096 NT_STATUS_OK
ReadX 9613 262144 61440 61440 NT_STATUS_OK
ReadX 9613 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9614 NT_STATUS_OK
ReadX 9614 0 61440 61440 NT_STATUS_OK
ReadX 9614 61440 4096 4096 NT_STATUS_OK
ReadX 9614 65536 61440 61440 NT_STATUS_OK
ReadX 9614 126976 4096 4096 NT_STATUS_OK
ReadX 9614 131072 61440 61440 NT_STATUS_OK
ReadX 9614 192512 4096 4096 NT_STATUS_OK
ReadX 9614 196608 61440 61440 NT_STATUS_OK
ReadX 9614 258048 4096 4096 NT_STATUS_OK
ReadX 9614 262144 61440 61440 NT_STATUS_OK
ReadX 9614 323584 4096 4096 NT_STATUS_OK
ReadX 9614 327680 61440 61440 NT_STATUS_OK
ReadX 9614 389120 4096 4096 NT_STATUS_OK
ReadX 9614 393216 61440 61440 NT_STATUS_OK
ReadX 9614 454656 4096 4096 NT_STATUS_OK
ReadX 9614 458752 61440 61440 NT_STATUS_OK
ReadX 9614 520192 4096 4096 NT_STATUS_OK
ReadX 9614 524288 61440 61440 NT_STATUS_OK
ReadX 9614 585728 4096 4096 NT_STATUS_OK
ReadX 9614 589824 61440 61440 NT_STATUS_OK
ReadX 9614 651264 4096 4096 NT_STATUS_OK
ReadX 9614 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9615 NT_STATUS_OK
ReadX 9615 0 61440 61440 NT_STATUS_OK
ReadX 9615 61440 4096 4096 NT_STATUS_OK
ReadX 9615 65536 61440 61440 NT_STATUS_OK
ReadX 9615 126976 4096 4096 NT_STATUS_OK
ReadX 9615 131072 61440 61440 NT_STATUS_OK
ReadX 9615 192512 4096 4096 NT_STATUS_OK
ReadX 9615 196608 61440 61440 NT_STATUS_OK
ReadX 9615 258048 4096 4096 NT_STATUS_OK
ReadX 9615 262144 61440 61440 NT_STATUS_OK
ReadX 9615 323584 4096 4096 NT_STATUS_OK
ReadX 9615 327680 61440 61440 NT_STATUS_OK
ReadX 9615 389120 4096 4096 NT_STATUS_OK
ReadX 9615 393216 61440 61440 NT_STATUS_OK
ReadX 9615 454656 4096 4096 NT_STATUS_OK
ReadX 9615 458752 61440 61440 NT_STATUS_OK
ReadX 9615 520192 4096 4096 NT_STATUS_OK
ReadX 9615 524288 61440 61440 NT_STATUS_OK
ReadX 9615 585728 4096 4096 NT_STATUS_OK
ReadX 9615 589824 61440 61440 NT_STATUS_OK
ReadX 9615 651264 4096 4096 NT_STATUS_OK
ReadX 9615 655360 61440 61440 NT_STATUS_OK
ReadX 9615 716800 4096 4096 NT_STATUS_OK
ReadX 9615 720896 61440 61440 NT_STATUS_OK
ReadX 9615 782336 4096 4096 NT_STATUS_OK
ReadX 9615 786432 61440 61440 NT_STATUS_OK
ReadX 9615 847872 4096 4096 NT_STATUS_OK
ReadX 9615 851968 61440 61440 NT_STATUS_OK
ReadX 9615 913408 4096 4096 NT_STATUS_OK
ReadX 9615 917504 61440 61440 NT_STATUS_OK
ReadX 9615 978944 4096 4096 NT_STATUS_OK
ReadX 9615 983040 61440 61440 NT_STATUS_OK
ReadX 9615 1044480 4096 4096 NT_STATUS_OK
ReadX 9615 1048576 61440 61440 NT_STATUS_OK
ReadX 9615 1110016 4096 4096 NT_STATUS_OK
ReadX 9615 1114112 61440 61440 NT_STATUS_OK
ReadX 9615 1175552 4096 4096 NT_STATUS_OK
ReadX 9615 1179648 61440 61440 NT_STATUS_OK
ReadX 9615 1241088 4096 4096 NT_STATUS_OK
ReadX 9615 1245184 61440 61440 NT_STATUS_OK
ReadX 9615 1306624 4096 4096 NT_STATUS_OK
ReadX 9615 1310720 61440 61440 NT_STATUS_OK
ReadX 9615 1372160 4096 4096 NT_STATUS_OK
ReadX 9615 1376256 61440 61440 NT_STATUS_OK
ReadX 9615 1437696 4096 4096 NT_STATUS_OK
ReadX 9615 1441792 61440 61440 NT_STATUS_OK
ReadX 9615 1503232 4096 4096 NT_STATUS_OK
ReadX 9615 1507328 61440 61440 NT_STATUS_OK
ReadX 9615 1568768 4096 4096 NT_STATUS_OK
ReadX 9615 1572864 61440 61440 NT_STATUS_OK
ReadX 9615 1634304 4096 4096 NT_STATUS_OK
ReadX 9615 1638400 61440 61440 NT_STATUS_OK
ReadX 9615 1699840 4096 4096 NT_STATUS_OK
ReadX 9615 1703936 61440 61440 NT_STATUS_OK
ReadX 9615 1765376 4096 4096 NT_STATUS_OK
ReadX 9615 1769472 61440 61440 NT_STATUS_OK
ReadX 9615 1830912 4096 4096 NT_STATUS_OK
ReadX 9615 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9616 NT_STATUS_OK
Close 9616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9613 NT_STATUS_OK
Close 9614 NT_STATUS_OK
Close 9615 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9618 NT_STATUS_OK
ReadX 9618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9619 NT_STATUS_OK
ReadX 9619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9620 NT_STATUS_OK
ReadX 9620 0 4096 4096 NT_STATUS_OK
ReadX 9620 4096 4096 4096 NT_STATUS_OK
ReadX 9620 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9621 NT_STATUS_OK
Close 9621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9618 NT_STATUS_OK
Close 9619 NT_STATUS_OK
Close 9620 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9623 NT_STATUS_OK
ReadX 9623 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9624 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9625 NT_STATUS_OK
Close 9625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9623 NT_STATUS_OK
Close 9624 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9627 NT_STATUS_OK
ReadX 9627 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9628 NT_STATUS_OK
ReadX 9628 0 8192 8192 NT_STATUS_OK
ReadX 9628 8192 8192 8192 NT_STATUS_OK
ReadX 9628 16384 8192 8192 NT_STATUS_OK
ReadX 9628 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9630 NT_STATUS_OK
Close 9630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9628 NT_STATUS_OK
Close 9627 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9633 NT_STATUS_OK
WriteX 9633 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9633 258 NT_STATUS_OK
WriteX 9633 0 10438 10438 NT_STATUS_OK
Close 9633 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9634 NT_STATUS_OK
Close 9634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9636 NT_STATUS_OK
Close 9636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9637 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9638 NT_STATUS_OK
Close 9638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9639 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9641 NT_STATUS_OK
Close 9641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9642 NT_STATUS_OK
ReadX 9642 0 4096 4096 NT_STATUS_OK
ReadX 9642 4096 4096 4096 NT_STATUS_OK
ReadX 9642 8192 4096 4096 NT_STATUS_OK
ReadX 9642 12288 8192 8192 NT_STATUS_OK
ReadX 9642 20480 8192 8192 NT_STATUS_OK
ReadX 9642 28672 8192 8192 NT_STATUS_OK
ReadX 9642 36864 8192 8192 NT_STATUS_OK
ReadX 9642 45056 8192 8192 NT_STATUS_OK
ReadX 9642 53248 8192 8192 NT_STATUS_OK
ReadX 9642 61440 8192 8192 NT_STATUS_OK
ReadX 9642 69632 8192 8192 NT_STATUS_OK
ReadX 9642 77824 8192 8192 NT_STATUS_OK
ReadX 9642 86016 8192 8192 NT_STATUS_OK
ReadX 9642 94208 8192 8192 NT_STATUS_OK
ReadX 9642 102400 8192 8192 NT_STATUS_OK
ReadX 9642 110592 8192 8192 NT_STATUS_OK
ReadX 9642 118784 8192 8192 NT_STATUS_OK
ReadX 9642 126976 8192 8192 NT_STATUS_OK
ReadX 9642 135168 8192 8192 NT_STATUS_OK
ReadX 9642 143360 8192 8192 NT_STATUS_OK
ReadX 9642 151552 8192 8192 NT_STATUS_OK
ReadX 9642 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9642 NT_STATUS_OK
Close 9635 NT_STATUS_OK
Close 9637 NT_STATUS_OK
Close 9639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9644 NT_STATUS_OK
Close 9644 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9647 NT_STATUS_OK
WriteX 9647 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9647 258 NT_STATUS_OK
WriteX 9647 0 28489 28489 NT_STATUS_OK
Close 9647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9648 NT_STATUS_OK
Close 9648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9650 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9651 NT_STATUS_OK
Close 9651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9650 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9653 NT_STATUS_OK
ReadX 9653 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9654 NT_STATUS_OK
ReadX 9654 0 8192 8192 NT_STATUS_OK
ReadX 9654 8192 8192 8192 NT_STATUS_OK
ReadX 9654 16384 8192 8192 NT_STATUS_OK
ReadX 9654 24576 8192 8192 NT_STATUS_OK
ReadX 9654 32768 16384 16384 NT_STATUS_OK
ReadX 9654 49152 8192 8192 NT_STATUS_OK
ReadX 9654 57344 8192 8192 NT_STATUS_OK
ReadX 9654 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9656 NT_STATUS_OK
Close 9656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9654 NT_STATUS_OK
Close 9653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9659 NT_STATUS_OK
WriteX 9659 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9659 258 NT_STATUS_OK
WriteX 9659 0 29253 29253 NT_STATUS_OK
Close 9659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9660 NT_STATUS_OK
Close 9660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9663 NT_STATUS_OK
Close 9663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9666 NT_STATUS_OK
WriteX 9666 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9666 258 NT_STATUS_OK
WriteX 9666 0 30183 30183 NT_STATUS_OK
Close 9666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9667 NT_STATUS_OK
Close 9667 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9669 NT_STATUS_OK
WriteX 9669 0 510 510 NT_STATUS_OK
WriteX 9669 510 512 512 NT_STATUS_OK
WriteX 9669 1022 510 510 NT_STATUS_OK
WriteX 9669 1532 510 510 NT_STATUS_OK
WriteX 9669 2042 168 168 NT_STATUS_OK
Close 9669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9670 NT_STATUS_OK
Close 9670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9672 NT_STATUS_OK
ReadX 9672 0 4096 4096 NT_STATUS_OK
WriteX 9672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9673 NT_STATUS_OK
ReadX 9673 61440 4096 4096 NT_STATUS_OK
ReadX 9673 126976 4096 4096 NT_STATUS_OK
WriteX 9673 0 65536 65536 NT_STATUS_OK
WriteX 9673 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9674 NT_STATUS_OK
ReadX 9674 61440 4096 4096 NT_STATUS_OK
ReadX 9674 126976 4096 4096 NT_STATUS_OK
ReadX 9674 192512 4096 4096 NT_STATUS_OK
ReadX 9674 258048 4096 4096 NT_STATUS_OK
WriteX 9674 0 65536 65536 NT_STATUS_OK
WriteX 9674 65536 65536 65536 NT_STATUS_OK
WriteX 9674 131072 65536 65536 NT_STATUS_OK
WriteX 9674 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9675 NT_STATUS_OK
ReadX 9675 61440 4096 4096 NT_STATUS_OK
ReadX 9675 126976 4096 4096 NT_STATUS_OK
ReadX 9675 192512 4096 4096 NT_STATUS_OK
ReadX 9675 258048 4096 4096 NT_STATUS_OK
ReadX 9675 323584 4096 4096 NT_STATUS_OK
ReadX 9675 389120 4096 4096 NT_STATUS_OK
ReadX 9675 454656 4096 4096 NT_STATUS_OK
ReadX 9675 520192 4096 4096 NT_STATUS_OK
WriteX 9675 0 65536 65536 NT_STATUS_OK
WriteX 9675 65536 65536 65536 NT_STATUS_OK
WriteX 9675 131072 65536 65536 NT_STATUS_OK
WriteX 9675 196608 65536 65536 NT_STATUS_OK
WriteX 9675 262144 65536 65536 NT_STATUS_OK
WriteX 9675 327680 65536 65536 NT_STATUS_OK
WriteX 9675 393216 65536 65536 NT_STATUS_OK
WriteX 9675 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9676 NT_STATUS_OK
Close 9676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9672 NT_STATUS_OK
Close 9673 NT_STATUS_OK
Close 9674 NT_STATUS_OK
Close 9675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9678 NT_STATUS_OK
Close 9678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9682 NT_STATUS_OK
Close 9682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9685 NT_STATUS_OK
Close 9685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9687 NT_STATUS_OK
Close 9687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9691 NT_STATUS_OK
Close 9691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9694 NT_STATUS_OK
Close 9694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9696 NT_STATUS_OK
Close 9696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9700 NT_STATUS_OK
Close 9700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9705 NT_STATUS_OK
Close 9705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9710 NT_STATUS_OK
Close 9710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9715 NT_STATUS_OK
Close 9715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9720 NT_STATUS_OK
Close 9720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9725 NT_STATUS_OK
Close 9725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9730 NT_STATUS_OK
Close 9730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 9735 NT_STATUS_OK
Close 9735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 9738 NT_STATUS_OK
Close 9738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9741 NT_STATUS_OK
Close 9741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9744 NT_STATUS_OK
WriteX 9744 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9744 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 9744 0 65536 65536 NT_STATUS_OK
WriteX 9744 65536 65536 65536 NT_STATUS_OK
WriteX 9744 131072 65536 65536 NT_STATUS_OK
WriteX 9744 196608 65536 65536 NT_STATUS_OK
WriteX 9744 262144 26634 26634 NT_STATUS_OK
Close 9744 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9749 NT_STATUS_OK
Close 9749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9750 NT_STATUS_OK
Close 9750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9751 NT_STATUS_OK
ReadX 9751 0 4096 4096 NT_STATUS_OK
Close 9751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9752 NT_STATUS_OK
ReadX 9752 0 4096 4096 NT_STATUS_OK
ReadX 9752 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9753 NT_STATUS_OK
Close 9753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 9752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9757 NT_STATUS_OK
Close 9757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9760 NT_STATUS_OK
Close 9760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9762 NT_STATUS_OK
Close 9762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9766 NT_STATUS_OK
Close 9766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9769 NT_STATUS_OK
Close 9769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9771 NT_STATUS_OK
Close 9771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9775 NT_STATUS_OK
Close 9775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9780 NT_STATUS_OK
Close 9780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9785 NT_STATUS_OK
Close 9785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9790 NT_STATUS_OK
Close 9790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9795 NT_STATUS_OK
Close 9795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9800 NT_STATUS_OK
Close 9800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9804 NT_STATUS_OK
Close 9804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9809 NT_STATUS_OK
Close 9809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9814 NT_STATUS_OK
Close 9814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9817 NT_STATUS_OK
Close 9817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9819 NT_STATUS_OK
Close 9819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9829 NT_STATUS_OK
Close 9829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9831 NT_STATUS_OK
ReadX 9831 0 4096 4096 NT_STATUS_OK
Close 9831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
Close 9832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9833 NT_STATUS_OK
ReadX 9833 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9843 NT_STATUS_OK
Close 9843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
Close 9845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9846 NT_STATUS_OK
ReadX 9846 0 4096 4096 NT_STATUS_OK
Close 9846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9847 NT_STATUS_OK
ReadX 9847 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Close 9847 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9876 0 4096 4096 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9877 NT_STATUS_OK
ReadX 9877 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
ReadX 9878 4096 4096 4096 NT_STATUS_OK
ReadX 9878 8192 4096 4096 NT_STATUS_OK
ReadX 9878 12288 4096 4096 NT_STATUS_OK
ReadX 9878 16384 4096 4096 NT_STATUS_OK
ReadX 9878 20480 4096 4096 NT_STATUS_OK
ReadX 9878 24576 4096 4096 NT_STATUS_OK
ReadX 9878 28672 4096 4096 NT_STATUS_OK
ReadX 9878 32768 4096 4096 NT_STATUS_OK
ReadX 9878 36864 4096 4096 NT_STATUS_OK
ReadX 9878 40960 4096 4096 NT_STATUS_OK
ReadX 9878 45056 4096 4096 NT_STATUS_OK
ReadX 9878 49152 4096 4096 NT_STATUS_OK
ReadX 9878 53248 4096 4096 NT_STATUS_OK
ReadX 9878 57344 4096 4096 NT_STATUS_OK
ReadX 9878 61440 4096 4096 NT_STATUS_OK
ReadX 9878 65536 4096 4096 NT_STATUS_OK
ReadX 9878 69632 4096 4096 NT_STATUS_OK
ReadX 9878 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9878 1004 NT_STATUS_OK
WriteX 9878 0 4096 4096 NT_STATUS_OK
Close 9878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9879 NT_STATUS_OK
SET_FILE_INFORMATION 9879 1004 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9881 NT_STATUS_OK
Close 9881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9884 NT_STATUS_OK
WriteX 9884 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9884 258 NT_STATUS_OK
WriteX 9884 0 65536 65536 NT_STATUS_OK
WriteX 9884 65536 19979 19979 NT_STATUS_OK
Close 9884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9885 NT_STATUS_OK
ReadX 9885 0 4096 4096 NT_STATUS_OK
WriteX 9885 0 4096 4096 NT_STATUS_OK
Flush 9885 NT_STATUS_OK
WriteX 9885 0 4096 4096 NT_STATUS_OK
Flush 9885 NT_STATUS_OK
QUERY_FILE_INFORMATION 9885 1004 NT_STATUS_OK
WriteX 9885 0 4096 4096 NT_STATUS_OK
Flush 9885 NT_STATUS_OK
WriteX 9885 0 4096 4096 NT_STATUS_OK
Flush 9885 NT_STATUS_OK
WriteX 9885 0 4096 4096 NT_STATUS_OK
Flush 9885 NT_STATUS_OK
SET_FILE_INFORMATION 9885 1004 NT_STATUS_OK
WriteX 9885 0 4096 4096 NT_STATUS_OK
Flush 9885 NT_STATUS_OK
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
Close 9886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
Close 9888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
Close 9889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9890 1004 NT_STATUS_OK
WriteX 9890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9891 NT_STATUS_OK
Close 9891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Close 9880 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9896 NT_STATUS_OK
WriteX 9896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9896 258 NT_STATUS_OK
WriteX 9896 0 65536 65536 NT_STATUS_OK
WriteX 9896 65536 17654 17654 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9897 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
WriteX 9897 0 4096 4096 NT_STATUS_OK
Flush 9897 NT_STATUS_OK
WriteX 9897 0 4096 4096 NT_STATUS_OK
Flush 9897 NT_STATUS_OK
QUERY_FILE_INFORMATION 9897 1004 NT_STATUS_OK
WriteX 9897 0 4096 4096 NT_STATUS_OK
Flush 9897 NT_STATUS_OK
WriteX 9897 0 4096 4096 NT_STATUS_OK
Flush 9897 NT_STATUS_OK
WriteX 9897 0 4096 4096 NT_STATUS_OK
Flush 9897 NT_STATUS_OK
SET_FILE_INFORMATION 9897 1004 NT_STATUS_OK
WriteX 9897 0 4096 4096 NT_STATUS_OK
Flush 9897 NT_STATUS_OK
Close 9897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9898 NT_STATUS_OK
SET_FILE_INFORMATION 9898 1004 NT_STATUS_OK
Close 9898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9899 NT_STATUS_OK
ReadX 9899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9900 NT_STATUS_OK
Close 9900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
ReadX 9902 4096 4096 4096 NT_STATUS_OK
ReadX 9902 8192 4096 4096 NT_STATUS_OK
ReadX 9902 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9902 16384 4096 4096 NT_STATUS_OK
ReadX 9902 20480 4096 4096 NT_STATUS_OK
ReadX 9902 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 0 4096 4096 NT_STATUS_OK
Close 9903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 0 4096 4096 NT_STATUS_OK
Close 9904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9905 1004 NT_STATUS_OK
WriteX 9905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9906 NT_STATUS_OK
Close 9906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9908 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9911 NT_STATUS_OK
WriteX 9911 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9911 258 NT_STATUS_OK
WriteX 9911 0 65536 65536 NT_STATUS_OK
WriteX 9911 65536 19490 19490 NT_STATUS_OK
Close 9911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9912 NT_STATUS_OK
ReadX 9912 0 4096 4096 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
QUERY_FILE_INFORMATION 9912 1004 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
SET_FILE_INFORMATION 9912 1004 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
Flush 9912 NT_STATUS_OK
Close 9912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9913 NT_STATUS_OK
SET_FILE_INFORMATION 9913 1004 NT_STATUS_OK
Close 9913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9914 NT_STATUS_OK
ReadX 9914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9915 NT_STATUS_OK
Close 9915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9917 0 4096 4096 NT_STATUS_OK
Close 9917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9918 NT_STATUS_OK
ReadX 9918 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9919 NT_STATUS_OK
ReadX 9919 0 4096 4096 NT_STATUS_OK
ReadX 9919 4096 4096 4096 NT_STATUS_OK
ReadX 9919 8192 4096 4096 NT_STATUS_OK
ReadX 9919 12288 4096 4096 NT_STATUS_OK
ReadX 9919 16384 4096 4096 NT_STATUS_OK
ReadX 9919 20480 4096 4096 NT_STATUS_OK
ReadX 9919 24576 4096 4096 NT_STATUS_OK
ReadX 9919 28672 4096 4096 NT_STATUS_OK
ReadX 9919 32768 4096 4096 NT_STATUS_OK
ReadX 9919 36864 4096 4096 NT_STATUS_OK
ReadX 9919 40960 4096 4096 NT_STATUS_OK
ReadX 9919 45056 4096 4096 NT_STATUS_OK
ReadX 9919 49152 4096 4096 NT_STATUS_OK
ReadX 9919 53248 4096 4096 NT_STATUS_OK
ReadX 9919 57344 4096 4096 NT_STATUS_OK
ReadX 9919 61440 4096 4096 NT_STATUS_OK
ReadX 9919 65536 4096 4096 NT_STATUS_OK
ReadX 9919 69632 4096 4096 NT_STATUS_OK
ReadX 9919 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9919 1004 NT_STATUS_OK
WriteX 9919 0 4096 4096 NT_STATUS_OK
Close 9919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9920 NT_STATUS_OK
SET_FILE_INFORMATION 9920 1004 NT_STATUS_OK
Close 9920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9922 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9914 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9925 NT_STATUS_OK
WriteX 9925 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9925 258 NT_STATUS_OK
WriteX 9925 0 65536 65536 NT_STATUS_OK
WriteX 9925 65536 8866 8866 NT_STATUS_OK
Close 9925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 4096 4096 NT_STATUS_OK
WriteX 9926 0 4096 4096 NT_STATUS_OK
Flush 9926 NT_STATUS_OK
SET_FILE_INFORMATION 9926 1004 NT_STATUS_OK
WriteX 9926 0 4096 4096 NT_STATUS_OK
Flush 9926 NT_STATUS_OK
Close 9926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 0 4096 4096 NT_STATUS_OK
Close 9928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9929 NT_STATUS_OK
ReadX 9929 0 4096 4096 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9930 1004 NT_STATUS_OK
WriteX 9930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9936 NT_STATUS_OK
WriteX 9936 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9936 258 NT_STATUS_OK
WriteX 9936 0 65536 65536 NT_STATUS_OK
WriteX 9936 65536 9298 9298 NT_STATUS_OK
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9937 NT_STATUS_OK
ReadX 9937 0 4096 4096 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Flush 9937 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Flush 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9938 NT_STATUS_OK
SET_FILE_INFORMATION 9938 1004 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9940 NT_STATUS_OK
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9943 0 4096 4096 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9944 4096 4096 4096 NT_STATUS_OK
ReadX 9944 8192 4096 4096 NT_STATUS_OK
ReadX 9944 12288 4096 4096 NT_STATUS_OK
ReadX 9944 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9945 NT_STATUS_OK
ReadX 9945 0 4096 4096 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9946 NT_STATUS_OK
ReadX 9946 0 4096 4096 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9944 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9953 NT_STATUS_OK
WriteX 9953 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9953 258 NT_STATUS_OK
WriteX 9953 0 65536 65536 NT_STATUS_OK
WriteX 9953 65536 11540 11540 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
WriteX 9954 0 4096 4096 NT_STATUS_OK
Flush 9954 NT_STATUS_OK
SET_FILE_INFORMATION 9954 1004 NT_STATUS_OK
WriteX 9954 0 4096 4096 NT_STATUS_OK
Flush 9954 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9955 NT_STATUS_OK
SET_FILE_INFORMATION 9955 1004 NT_STATUS_OK
Close 9955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9956 NT_STATUS_OK
ReadX 9956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 9957 NT_STATUS_OK
Close 9957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9959 NT_STATUS_OK
ReadX 9959 61440 4096 4096 NT_STATUS_OK
ReadX 9959 126976 4096 4096 NT_STATUS_OK
WriteX 9959 0 65536 65536 NT_STATUS_OK
WriteX 9959 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9960 NT_STATUS_OK
ReadX 9960 61440 4096 4096 NT_STATUS_OK
ReadX 9960 126976 4096 4096 NT_STATUS_OK
ReadX 9960 192512 4096 4096 NT_STATUS_OK
ReadX 9960 258048 4096 4096 NT_STATUS_OK
WriteX 9960 0 65536 65536 NT_STATUS_OK
WriteX 9960 65536 65536 65536 NT_STATUS_OK
WriteX 9960 131072 65536 65536 NT_STATUS_OK
WriteX 9960 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9961 NT_STATUS_OK
ReadX 9961 61440 4096 4096 NT_STATUS_OK
ReadX 9961 126976 4096 4096 NT_STATUS_OK
ReadX 9961 192512 4096 4096 NT_STATUS_OK
ReadX 9961 258048 4096 4096 NT_STATUS_OK
ReadX 9961 323584 4096 4096 NT_STATUS_OK
ReadX 9961 389120 4096 4096 NT_STATUS_OK
ReadX 9961 454656 4096 4096 NT_STATUS_OK
ReadX 9961 520192 4096 4096 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 65536 65536 NT_STATUS_OK
WriteX 9961 262144 65536 65536 NT_STATUS_OK
WriteX 9961 327680 65536 65536 NT_STATUS_OK
WriteX 9961 393216 65536 65536 NT_STATUS_OK
WriteX 9961 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
ReadX 9962 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9963 NT_STATUS_OK
WriteX 9963 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 53 53 NT_STATUS_OK
Close 9963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9959 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Close 9961 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9962 8192 4096 4096 NT_STATUS_OK
ReadX 9962 12288 4096 4096 NT_STATUS_OK
WriteX 9966 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9966 258 NT_STATUS_OK
ReadX 9962 16384 4096 4096 NT_STATUS_OK
ReadX 9962 20480 4096 4096 NT_STATUS_OK
WriteX 9966 0 15360 15360 NT_STATUS_OK
Close 9966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9967 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9967 1004 NT_STATUS_OK
WriteX 9967 0 4096 4096 NT_STATUS_OK
Close 9967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9970 NT_STATUS_OK
ReadX 9970 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9971 NT_STATUS_OK
Close 9971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9970 4096 4096 4096 NT_STATUS_OK
ReadX 9970 8192 4096 4096 NT_STATUS_OK
ReadX 9970 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9973 NT_STATUS_OK
ReadX 9973 0 4096 4096 NT_STATUS_OK
ReadX 9973 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
ReadX 9974 4096 4096 4096 NT_STATUS_OK
ReadX 9974 8192 4096 4096 NT_STATUS_OK
Close 9973 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 15360 15360 NT_STATUS_OK
Close 9975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9976 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9977 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9980 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
Close 9980 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Close 9976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9983 NT_STATUS_OK
ReadX 9983 0 4096 4096 NT_STATUS_OK
ReadX 9983 4096 4096 4096 NT_STATUS_OK
ReadX 9983 8192 4096 4096 NT_STATUS_OK
ReadX 9983 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9983 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9985 NT_STATUS_OK
WriteX 9985 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9985 258 NT_STATUS_OK
WriteX 9985 0 53 53 NT_STATUS_OK
Close 9985 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9986 NT_STATUS_OK
Close 9986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9984 4096 4096 4096 NT_STATUS_OK
ReadX 9984 8192 4096 4096 NT_STATUS_OK
ReadX 9984 12288 4096 4096 NT_STATUS_OK
WriteX 9988 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9988 258 NT_STATUS_OK
WriteX 9988 0 12006 12006 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9989 NT_STATUS_OK
ReadX 9989 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9989 1004 NT_STATUS_OK
WriteX 9989 0 4096 4096 NT_STATUS_OK
Close 9989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9993 NT_STATUS_OK
Close 9993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9992 4096 4096 4096 NT_STATUS_OK
ReadX 9992 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9995 NT_STATUS_OK
WriteX 9995 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9995 258 NT_STATUS_OK
WriteX 9995 0 11991 11991 NT_STATUS_OK
Close 9995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9996 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9996 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9999 NT_STATUS_OK
ReadX 9999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10000 NT_STATUS_OK
SET_FILE_INFORMATION 10000 1004 NT_STATUS_OK
Close 10000 NT_STATUS_OK
WriteX 9996 0 4096 4096 NT_STATUS_OK
Close 9996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10001 NT_STATUS_OK
Close 10001 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10003 NT_STATUS_OK
ReadX 10003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10003 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10003 1004 NT_STATUS_OK
ReadX 10003 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10003 1004 NT_STATUS_OK
WriteX 10003 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10003 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10003 1004 NT_STATUS_OK
Close 9979 NT_STATUS_OK
WriteX 9983 0 19054 19054 NT_STATUS_OK
WriteX 10003 0 12288 12288 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10006 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Close 10003 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 0 61440 61440 NT_STATUS_OK
ReadX 10010 61440 4096 4096 NT_STATUS_OK
ReadX 10010 65536 61440 61440 NT_STATUS_OK
ReadX 10010 126976 4096 4096 NT_STATUS_OK
ReadX 10010 131072 61440 61440 NT_STATUS_OK
ReadX 10010 192512 4096 4096 NT_STATUS_OK
ReadX 10010 196608 61440 61440 NT_STATUS_OK
ReadX 10010 258048 4096 4096 NT_STATUS_OK
ReadX 10010 262144 61440 61440 NT_STATUS_OK
ReadX 10010 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10011 NT_STATUS_OK
ReadX 10011 0 61440 61440 NT_STATUS_OK
ReadX 10011 61440 4096 4096 NT_STATUS_OK
ReadX 10011 65536 61440 61440 NT_STATUS_OK
ReadX 10011 126976 4096 4096 NT_STATUS_OK
ReadX 10011 131072 61440 61440 NT_STATUS_OK
ReadX 10011 192512 4096 4096 NT_STATUS_OK
ReadX 10011 196608 61440 61440 NT_STATUS_OK
ReadX 10011 258048 4096 4096 NT_STATUS_OK
ReadX 10011 262144 61440 61440 NT_STATUS_OK
ReadX 10011 323584 4096 4096 NT_STATUS_OK
ReadX 10011 327680 61440 61440 NT_STATUS_OK
ReadX 10011 389120 4096 4096 NT_STATUS_OK
ReadX 10011 393216 61440 61440 NT_STATUS_OK
ReadX 10011 454656 4096 4096 NT_STATUS_OK
ReadX 10011 458752 61440 61440 NT_STATUS_OK
ReadX 10011 520192 4096 4096 NT_STATUS_OK
ReadX 10011 524288 61440 61440 NT_STATUS_OK
ReadX 10011 585728 4096 4096 NT_STATUS_OK
ReadX 10011 589824 61440 61440 NT_STATUS_OK
ReadX 10011 651264 4096 4096 NT_STATUS_OK
ReadX 10011 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 61440 61440 NT_STATUS_OK
ReadX 10012 61440 4096 4096 NT_STATUS_OK
ReadX 10012 65536 61440 61440 NT_STATUS_OK
ReadX 10012 126976 4096 4096 NT_STATUS_OK
ReadX 10012 131072 61440 61440 NT_STATUS_OK
ReadX 10012 192512 4096 4096 NT_STATUS_OK
ReadX 10012 196608 61440 61440 NT_STATUS_OK
ReadX 10012 258048 4096 4096 NT_STATUS_OK
ReadX 10012 262144 61440 61440 NT_STATUS_OK
ReadX 10012 323584 4096 4096 NT_STATUS_OK
ReadX 10012 327680 61440 61440 NT_STATUS_OK
ReadX 10012 389120 4096 4096 NT_STATUS_OK
ReadX 10012 393216 61440 61440 NT_STATUS_OK
ReadX 10012 454656 4096 4096 NT_STATUS_OK
ReadX 10012 458752 61440 61440 NT_STATUS_OK
ReadX 10012 520192 4096 4096 NT_STATUS_OK
ReadX 10012 524288 61440 61440 NT_STATUS_OK
ReadX 10012 585728 4096 4096 NT_STATUS_OK
ReadX 10012 589824 61440 61440 NT_STATUS_OK
ReadX 10012 651264 4096 4096 NT_STATUS_OK
ReadX 10012 655360 61440 61440 NT_STATUS_OK
ReadX 10012 716800 4096 4096 NT_STATUS_OK
ReadX 10012 720896 61440 61440 NT_STATUS_OK
ReadX 10012 782336 4096 4096 NT_STATUS_OK
ReadX 10012 786432 61440 61440 NT_STATUS_OK
ReadX 10012 847872 4096 4096 NT_STATUS_OK
ReadX 10012 851968 61440 61440 NT_STATUS_OK
ReadX 10012 913408 4096 4096 NT_STATUS_OK
ReadX 10012 917504 61440 61440 NT_STATUS_OK
ReadX 10012 978944 4096 4096 NT_STATUS_OK
ReadX 10012 983040 61440 61440 NT_STATUS_OK
ReadX 10012 1044480 4096 4096 NT_STATUS_OK
ReadX 10012 1048576 61440 61440 NT_STATUS_OK
ReadX 10012 1110016 4096 4096 NT_STATUS_OK
ReadX 10012 1114112 61440 61440 NT_STATUS_OK
ReadX 10012 1175552 4096 4096 NT_STATUS_OK
ReadX 10012 1179648 61440 61440 NT_STATUS_OK
ReadX 10012 1241088 4096 4096 NT_STATUS_OK
ReadX 10012 1245184 61440 61440 NT_STATUS_OK
ReadX 10012 1306624 4096 4096 NT_STATUS_OK
ReadX 10012 1310720 61440 61440 NT_STATUS_OK
ReadX 10012 1372160 4096 4096 NT_STATUS_OK
ReadX 10012 1376256 61440 61440 NT_STATUS_OK
ReadX 10012 1437696 4096 4096 NT_STATUS_OK
ReadX 10012 1441792 61440 61440 NT_STATUS_OK
ReadX 10012 1503232 4096 4096 NT_STATUS_OK
ReadX 10012 1507328 61440 61440 NT_STATUS_OK
ReadX 10012 1568768 4096 4096 NT_STATUS_OK
ReadX 10012 1572864 61440 61440 NT_STATUS_OK
ReadX 10012 1634304 4096 4096 NT_STATUS_OK
ReadX 10012 1638400 61440 61440 NT_STATUS_OK
ReadX 10012 1699840 4096 4096 NT_STATUS_OK
ReadX 10012 1703936 61440 61440 NT_STATUS_OK
ReadX 10012 1765376 4096 4096 NT_STATUS_OK
ReadX 10012 1769472 61440 61440 NT_STATUS_OK
ReadX 10012 1830912 4096 4096 NT_STATUS_OK
ReadX 10012 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10016 NT_STATUS_OK
ReadX 10016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1004 NT_STATUS_OK
WriteX 10019 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10021 NT_STATUS_OK
WriteX 10021 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10021 258 NT_STATUS_OK
WriteX 10021 0 491 491 NT_STATUS_OK
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10019 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10025 NT_STATUS_OK
WriteX 10025 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
WriteX 10025 0 543 543 NT_STATUS_OK
Close 10025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10010 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Close 10012 NT_STATUS_OK
Close 10026 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Close 10016 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10039 NT_STATUS_OK
QUERY_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10039 258 NT_STATUS_OK
WriteX 10039 0 2048 2048 NT_STATUS_OK
Close 10039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10040 0 4096 4096 NT_STATUS_OK
Flush 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10040 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10045 NT_STATUS_OK
WriteX 10045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
WriteX 10045 0 2048 2048 NT_STATUS_OK
Close 10045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10051 NT_STATUS_OK
WriteX 10051 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10051 258 NT_STATUS_OK
WriteX 10051 0 2048 2048 NT_STATUS_OK
Close 10051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10052 NT_STATUS_OK
ReadX 10052 0 2048 2048 NT_STATUS_OK
ReadX 10030 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10034 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
WriteX 10030 0 8192 8192 NT_STATUS_OK
WriteX 10031 0 4096 4096 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10056 NT_STATUS_OK
QUERY_FILE_INFORMATION 10056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10055 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10046 NT_STATUS_OK
Close 10030 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10059 NT_STATUS_OK
ReadX 10059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10068 NT_STATUS_OK
ReadX 10068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10070 NT_STATUS_OK
ReadX 10070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10076 NT_STATUS_OK
QUERY_FILE_INFORMATION 10076 1004 NT_STATUS_OK
WriteX 10076 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10076 258 NT_STATUS_OK
WriteX 10076 0 2048 2048 NT_STATUS_OK
Close 10076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10077 NT_STATUS_OK
ReadX 10077 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10084 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 1004 NT_STATUS_OK
WriteX 10084 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 258 NT_STATUS_OK
WriteX 10084 0 2048 2048 NT_STATUS_OK
Close 10084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10085 NT_STATUS_OK
ReadX 10085 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10077 0 4096 4096 NT_STATUS_OK
Flush 10077 NT_STATUS_OK
WriteX 10085 0 4096 4096 NT_STATUS_OK
Flush 10085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10085 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10079 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10087 NT_STATUS_OK
WriteX 10087 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10087 258 NT_STATUS_OK
WriteX 10087 0 4096 4096 NT_STATUS_OK
Close 10087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10089 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10090 NT_STATUS_OK
WriteX 10090 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 258 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10091 0 4096 4096 NT_STATUS_OK
Close 10088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10071 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10079 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Close 10070 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10059 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10094 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10098 NT_STATUS_OK
WriteX 10098 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 258 NT_STATUS_OK
WriteX 10098 0 2048 2048 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10099 NT_STATUS_OK
ReadX 10099 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10102 NT_STATUS_OK
ReadX 10102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10103 NT_STATUS_OK
ReadX 10103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10104 NT_STATUS_OK
ReadX 10104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10107 NT_STATUS_OK
ReadX 10107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10108 NT_STATUS_OK
ReadX 10108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10109 NT_STATUS_OK
ReadX 10109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10113 NT_STATUS_OK
QUERY_FILE_INFORMATION 10113 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10099 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Close 10106 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Close 10108 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Close 10100 NT_STATUS_OK
Close 10101 NT_STATUS_OK
Close 10104 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10102 NT_STATUS_OK
Close 10103 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10115 NT_STATUS_OK
QUERY_FILE_INFORMATION 10115 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10122 NT_STATUS_OK
ReadX 10122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10124 NT_STATUS_OK
ReadX 10124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10125 NT_STATUS_OK
ReadX 10125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10135 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 1004 NT_STATUS_OK
WriteX 10135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
WriteX 10135 0 2048 2048 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10136 NT_STATUS_OK
ReadX 10136 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10137 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10140 NT_STATUS_OK
ReadX 10140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10141 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10142 NT_STATUS_OK
ReadX 10142 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10147 NT_STATUS_OK
QUERY_FILE_INFORMATION 10147 1004 NT_STATUS_OK
WriteX 10147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10147 258 NT_STATUS_OK
WriteX 10147 0 2048 2048 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10148 NT_STATUS_OK
ReadX 10148 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10155 NT_STATUS_OK
QUERY_FILE_INFORMATION 10155 1004 NT_STATUS_OK
WriteX 10155 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10155 258 NT_STATUS_OK
WriteX 10155 0 2048 2048 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10136 0 4096 4096 NT_STATUS_OK
Flush 10136 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
Flush 10148 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10136 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10138 4096 16384 16384 NT_STATUS_OK
ReadX 10118 4096 16384 16384 NT_STATUS_OK
ReadX 10150 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10157 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 2048 2048 NT_STATUS_OK
WriteX 10158 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10159 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Close 10140 NT_STATUS_OK
Close 10141 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Close 10127 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10161 NT_STATUS_OK
QUERY_FILE_INFORMATION 10161 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10163 NT_STATUS_OK
QUERY_FILE_INFORMATION 10163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10166 4096 16384 16384 NT_STATUS_OK
WriteX 10166 0 4096 4096 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
WriteX 10169 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10181 NT_STATUS_OK
ReadX 10181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 8192 8192 NT_STATUS_OK
ReadX 10172 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10186 0 4096 4096 NT_STATUS_OK
ReadX 10186 4096 4096 4096 NT_STATUS_OK
ReadX 10186 8192 4096 4096 NT_STATUS_OK
WriteX 10172 0 4096 4096 NT_STATUS_OK
WriteX 10173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
ReadX 10187 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10166 0 4096 4096 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
WriteX 10169 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10191 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10192 NT_STATUS_OK
QUERY_FILE_INFORMATION 10192 1004 NT_STATUS_OK
WriteX 10192 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10192 258 NT_STATUS_OK
WriteX 10192 0 2048 2048 NT_STATUS_OK
Close 10192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10193 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10193 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
ReadX 10195 4096 4096 4096 NT_STATUS_OK
WriteX 10195 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10193 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
ReadX 10197 4096 4096 4096 NT_STATUS_OK
WriteX 10197 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10198 NT_STATUS_OK
QUERY_FILE_INFORMATION 10198 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10167 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10183 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Close 10181 NT_STATUS_OK
Close 10182 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10200 0 4096 4096 NT_STATUS_OK
ReadX 10200 4096 4096 4096 NT_STATUS_OK
ReadX 10200 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10203 NT_STATUS_OK
ReadX 10203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10204 NT_STATUS_OK
ReadX 10204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10205 NT_STATUS_OK
ReadX 10205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 4096 4096 NT_STATUS_OK
ReadX 10201 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10217 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10218 NT_STATUS_OK
QUERY_FILE_INFORMATION 10218 1004 NT_STATUS_OK
WriteX 10218 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10218 258 NT_STATUS_OK
WriteX 10218 0 2048 2048 NT_STATUS_OK
Close 10218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10219 NT_STATUS_OK
ReadX 10219 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10223 NT_STATUS_OK
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10224 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 258 NT_STATUS_OK
WriteX 10224 0 2048 2048 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10208 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10226 NT_STATUS_OK
QUERY_FILE_INFORMATION 10226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10212 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10203 NT_STATUS_OK
Close 10204 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10210 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10228 NT_STATUS_OK
QUERY_FILE_INFORMATION 10228 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 61440 4096 4096 NT_STATUS_OK
ReadX 10230 126976 4096 4096 NT_STATUS_OK
WriteX 10230 0 65536 65536 NT_STATUS_OK
WriteX 10230 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 61440 4096 4096 NT_STATUS_OK
ReadX 10231 126976 4096 4096 NT_STATUS_OK
ReadX 10231 192512 4096 4096 NT_STATUS_OK
ReadX 10231 258048 4096 4096 NT_STATUS_OK
WriteX 10231 0 65536 65536 NT_STATUS_OK
WriteX 10231 65536 65536 65536 NT_STATUS_OK
WriteX 10231 131072 65536 65536 NT_STATUS_OK
WriteX 10231 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 61440 4096 4096 NT_STATUS_OK
ReadX 10232 126976 4096 4096 NT_STATUS_OK
ReadX 10232 192512 4096 4096 NT_STATUS_OK
ReadX 10232 258048 4096 4096 NT_STATUS_OK
ReadX 10232 323584 4096 4096 NT_STATUS_OK
ReadX 10232 389120 4096 4096 NT_STATUS_OK
ReadX 10232 454656 4096 4096 NT_STATUS_OK
ReadX 10232 520192 4096 4096 NT_STATUS_OK
WriteX 10232 0 65536 65536 NT_STATUS_OK
WriteX 10232 65536 65536 65536 NT_STATUS_OK
WriteX 10232 131072 65536 65536 NT_STATUS_OK
WriteX 10232 196608 65536 65536 NT_STATUS_OK
WriteX 10232 262144 65536 65536 NT_STATUS_OK
WriteX 10232 327680 65536 65536 NT_STATUS_OK
WriteX 10232 393216 65536 65536 NT_STATUS_OK
WriteX 10232 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10233 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10233 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10233 8192 4096 4096 NT_STATUS_OK
ReadX 10233 12288 4096 4096 NT_STATUS_OK
ReadX 10233 16384 4096 4096 NT_STATUS_OK
ReadX 10233 20480 4096 4096 NT_STATUS_OK
ReadX 10233 24576 4096 4096 NT_STATUS_OK
ReadX 10233 28672 4096 4096 NT_STATUS_OK
ReadX 10233 32768 4096 4096 NT_STATUS_OK
ReadX 10233 36864 4096 4096 NT_STATUS_OK
ReadX 10233 40960 4096 4096 NT_STATUS_OK
ReadX 10233 45056 4096 4096 NT_STATUS_OK
ReadX 10233 49152 4096 4096 NT_STATUS_OK
ReadX 10233 53248 4096 4096 NT_STATUS_OK
ReadX 10233 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10233 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10236 NT_STATUS_OK
WriteX 10236 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10236 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10236 1004 NT_STATUS_OK
WriteX 10236 0 57088 57088 NT_STATUS_OK
WriteX 10236 0 4096 4096 NT_STATUS_OK
Flush 10236 NT_STATUS_OK
Close 10233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10237 NT_STATUS_OK
SET_FILE_INFORMATION 10237 1004 NT_STATUS_OK
Close 10237 NT_STATUS_OK
SET_FILE_INFORMATION 10236 1004 NT_STATUS_OK
WriteX 10236 0 4096 4096 NT_STATUS_OK
Close 10236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10238 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10240 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10241 NT_STATUS_OK
WriteX 10241 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10241 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10241 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10241 1004 NT_STATUS_OK
WriteX 10241 0 51456 51456 NT_STATUS_OK
WriteX 10241 0 4096 4096 NT_STATUS_OK
Flush 10241 NT_STATUS_OK
SET_FILE_INFORMATION 10241 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10241 1004 NT_STATUS_OK
WriteX 10241 0 4096 4096 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10245 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10247 NT_STATUS_OK
Close 10247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10250 NT_STATUS_OK
WriteX 10250 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 53077 53077 NT_STATUS_OK
Close 10250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10251 NT_STATUS_OK
WriteX 10251 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10251 1004 NT_STATUS_OK
WriteX 10251 0 65536 65536 NT_STATUS_OK
WriteX 10251 65536 1856 1856 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Flush 10251 NT_STATUS_OK
SET_FILE_INFORMATION 10251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10251 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10253 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10260 NT_STATUS_OK
WriteX 10260 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10260 258 NT_STATUS_OK
WriteX 10260 0 7983 7983 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10265 NT_STATUS_OK
WriteX 10265 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 258 NT_STATUS_OK
WriteX 10265 0 65536 65536 NT_STATUS_OK
WriteX 10265 65536 65536 65536 NT_STATUS_OK
WriteX 10265 131072 65536 65536 NT_STATUS_OK
WriteX 10265 196608 65536 65536 NT_STATUS_OK
WriteX 10265 262144 65536 65536 NT_STATUS_OK
WriteX 10265 327680 65536 65536 NT_STATUS_OK
WriteX 10265 393216 65536 65536 NT_STATUS_OK
WriteX 10265 458752 46731 46731 NT_STATUS_OK
Close 10265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10266 NT_STATUS_OK
WriteX 10266 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10255 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
WriteX 10266 0 65536 65536 NT_STATUS_OK
WriteX 10266 65536 22848 22848 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10270 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10271 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10271 1004 NT_STATUS_OK
ReadX 10271 8192 4096 4096 NT_STATUS_OK
ReadX 10271 12288 4096 4096 NT_STATUS_OK
ReadX 10271 16384 4096 4096 NT_STATUS_OK
ReadX 10271 20480 4096 4096 NT_STATUS_OK
ReadX 10271 24576 4096 4096 NT_STATUS_OK
ReadX 10271 28672 4096 4096 NT_STATUS_OK
ReadX 10271 32768 4096 4096 NT_STATUS_OK
ReadX 10271 36864 4096 4096 NT_STATUS_OK
ReadX 10271 40960 4096 4096 NT_STATUS_OK
ReadX 10271 45056 4096 4096 NT_STATUS_OK
ReadX 10271 49152 4096 4096 NT_STATUS_OK
ReadX 10271 53248 4096 4096 NT_STATUS_OK
ReadX 10271 57344 4096 4096 NT_STATUS_OK
ReadX 10271 61440 4096 4096 NT_STATUS_OK
ReadX 10271 65536 4096 4096 NT_STATUS_OK
ReadX 10271 69632 4096 4096 NT_STATUS_OK
ReadX 10271 73728 4096 4096 NT_STATUS_OK
ReadX 10271 77824 4096 4096 NT_STATUS_OK
ReadX 10271 81920 4096 4096 NT_STATUS_OK
ReadX 10271 86016 4096 4096 NT_STATUS_OK
ReadX 10271 90112 4096 4096 NT_STATUS_OK
ReadX 10271 94208 4096 4096 NT_STATUS_OK
ReadX 10271 98304 4096 4096 NT_STATUS_OK
ReadX 10271 102400 4096 4096 NT_STATUS_OK
ReadX 10271 106496 4096 4096 NT_STATUS_OK
ReadX 10271 110592 4096 4096 NT_STATUS_OK
ReadX 10271 114688 4096 4096 NT_STATUS_OK
ReadX 10271 118784 4096 4096 NT_STATUS_OK
ReadX 10271 122880 4096 4096 NT_STATUS_OK
ReadX 10271 126976 4096 4096 NT_STATUS_OK
ReadX 10271 131072 4096 4096 NT_STATUS_OK
ReadX 10271 135168 4096 4096 NT_STATUS_OK
ReadX 10271 139264 4096 4096 NT_STATUS_OK
ReadX 10271 143360 4096 4096 NT_STATUS_OK
ReadX 10271 147456 4096 4096 NT_STATUS_OK
ReadX 10271 151552 4096 4096 NT_STATUS_OK
ReadX 10271 155648 4096 4096 NT_STATUS_OK
ReadX 10271 159744 4096 4096 NT_STATUS_OK
ReadX 10271 163840 4096 4096 NT_STATUS_OK
ReadX 10271 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10271 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10272 NT_STATUS_OK
Close 10272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10274 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
Close 10271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10275 NT_STATUS_OK
SET_FILE_INFORMATION 10275 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
WriteX 10274 0 42388 42388 NT_STATUS_OK
Close 10274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10278 NT_STATUS_OK
ReadX 10278 0 4096 4096 NT_STATUS_OK
ReadX 10278 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10279 NT_STATUS_OK
WriteX 10279 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10279 258 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
WriteX 10279 0 42652 42652 NT_STATUS_OK
Close 10279 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10281 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
ReadX 10283 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10285 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10288 NT_STATUS_OK
WriteX 10288 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10288 258 NT_STATUS_OK
WriteX 10288 0 65536 65536 NT_STATUS_OK
WriteX 10288 65536 49 49 NT_STATUS_OK
Close 10288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 0 61440 61440 NT_STATUS_OK
ReadX 10289 61440 4096 4096 NT_STATUS_OK
ReadX 10289 65536 61440 61440 NT_STATUS_OK
ReadX 10289 126976 4096 4096 NT_STATUS_OK
ReadX 10289 131072 61440 61440 NT_STATUS_OK
ReadX 10289 192512 4096 4096 NT_STATUS_OK
ReadX 10289 196608 61440 61440 NT_STATUS_OK
ReadX 10289 258048 4096 4096 NT_STATUS_OK
ReadX 10289 262144 61440 61440 NT_STATUS_OK
ReadX 10289 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 61440 61440 NT_STATUS_OK
ReadX 10290 61440 4096 4096 NT_STATUS_OK
ReadX 10290 65536 61440 61440 NT_STATUS_OK
ReadX 10290 126976 4096 4096 NT_STATUS_OK
ReadX 10290 131072 61440 61440 NT_STATUS_OK
ReadX 10290 192512 4096 4096 NT_STATUS_OK
ReadX 10290 196608 61440 61440 NT_STATUS_OK
ReadX 10290 258048 4096 4096 NT_STATUS_OK
ReadX 10290 262144 61440 61440 NT_STATUS_OK
ReadX 10290 323584 4096 4096 NT_STATUS_OK
ReadX 10290 327680 61440 61440 NT_STATUS_OK
ReadX 10290 389120 4096 4096 NT_STATUS_OK
ReadX 10290 393216 61440 61440 NT_STATUS_OK
ReadX 10290 454656 4096 4096 NT_STATUS_OK
ReadX 10290 458752 61440 61440 NT_STATUS_OK
ReadX 10290 520192 4096 4096 NT_STATUS_OK
ReadX 10290 524288 61440 61440 NT_STATUS_OK
ReadX 10290 585728 4096 4096 NT_STATUS_OK
ReadX 10290 589824 61440 61440 NT_STATUS_OK
ReadX 10290 651264 4096 4096 NT_STATUS_OK
ReadX 10290 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 61440 61440 NT_STATUS_OK
ReadX 10291 61440 4096 4096 NT_STATUS_OK
ReadX 10291 65536 61440 61440 NT_STATUS_OK
ReadX 10291 126976 4096 4096 NT_STATUS_OK
ReadX 10291 131072 61440 61440 NT_STATUS_OK
ReadX 10291 192512 4096 4096 NT_STATUS_OK
ReadX 10291 196608 61440 61440 NT_STATUS_OK
ReadX 10291 258048 4096 4096 NT_STATUS_OK
ReadX 10291 262144 61440 61440 NT_STATUS_OK
ReadX 10291 323584 4096 4096 NT_STATUS_OK
ReadX 10291 327680 61440 61440 NT_STATUS_OK
ReadX 10291 389120 4096 4096 NT_STATUS_OK
ReadX 10291 393216 61440 61440 NT_STATUS_OK
ReadX 10291 454656 4096 4096 NT_STATUS_OK
ReadX 10291 458752 61440 61440 NT_STATUS_OK
ReadX 10291 520192 4096 4096 NT_STATUS_OK
ReadX 10291 524288 61440 61440 NT_STATUS_OK
ReadX 10291 585728 4096 4096 NT_STATUS_OK
ReadX 10291 589824 61440 61440 NT_STATUS_OK
ReadX 10291 651264 4096 4096 NT_STATUS_OK
ReadX 10291 655360 61440 61440 NT_STATUS_OK
ReadX 10291 716800 4096 4096 NT_STATUS_OK
ReadX 10291 720896 61440 61440 NT_STATUS_OK
ReadX 10291 782336 4096 4096 NT_STATUS_OK
ReadX 10291 786432 61440 61440 NT_STATUS_OK
ReadX 10291 847872 4096 4096 NT_STATUS_OK
ReadX 10291 851968 61440 61440 NT_STATUS_OK
ReadX 10291 913408 4096 4096 NT_STATUS_OK
ReadX 10291 917504 61440 61440 NT_STATUS_OK
ReadX 10291 978944 4096 4096 NT_STATUS_OK
ReadX 10291 983040 61440 61440 NT_STATUS_OK
ReadX 10291 1044480 4096 4096 NT_STATUS_OK
ReadX 10291 1048576 61440 61440 NT_STATUS_OK
ReadX 10291 1110016 4096 4096 NT_STATUS_OK
ReadX 10291 1114112 61440 61440 NT_STATUS_OK
ReadX 10291 1175552 4096 4096 NT_STATUS_OK
ReadX 10291 1179648 61440 61440 NT_STATUS_OK
ReadX 10291 1241088 4096 4096 NT_STATUS_OK
ReadX 10291 1245184 61440 61440 NT_STATUS_OK
ReadX 10291 1306624 4096 4096 NT_STATUS_OK
ReadX 10291 1310720 61440 61440 NT_STATUS_OK
ReadX 10291 1372160 4096 4096 NT_STATUS_OK
ReadX 10291 1376256 61440 61440 NT_STATUS_OK
ReadX 10291 1437696 4096 4096 NT_STATUS_OK
ReadX 10291 1441792 61440 61440 NT_STATUS_OK
ReadX 10291 1503232 4096 4096 NT_STATUS_OK
ReadX 10291 1507328 61440 61440 NT_STATUS_OK
ReadX 10291 1568768 4096 4096 NT_STATUS_OK
ReadX 10291 1572864 61440 61440 NT_STATUS_OK
ReadX 10291 1634304 4096 4096 NT_STATUS_OK
ReadX 10291 1638400 61440 61440 NT_STATUS_OK
ReadX 10291 1699840 4096 4096 NT_STATUS_OK
ReadX 10291 1703936 61440 61440 NT_STATUS_OK
ReadX 10291 1765376 4096 4096 NT_STATUS_OK
ReadX 10291 1769472 61440 61440 NT_STATUS_OK
ReadX 10291 1830912 4096 4096 NT_STATUS_OK
ReadX 10291 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10293 NT_STATUS_OK
QUERY_FILE_INFORMATION 10293 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10293 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10293 1005 NT_STATUS_OK
ReadX 10293 2156 24 24 NT_STATUS_OK
ReadX 10293 2139 276 276 NT_STATUS_OK
ReadX 10293 2136 14 14 NT_STATUS_OK
ReadX 10293 2136 7 7 NT_STATUS_OK
ReadX 10293 2138 12 12 NT_STATUS_OK
ReadX 10293 2137 8 8 NT_STATUS_OK
ReadX 10293 2135 15 15 NT_STATUS_OK
ReadX 10293 0 16 16 NT_STATUS_OK
ReadX 10293 16 2048 2048 NT_STATUS_OK
ReadX 10293 2064 2048 2048 NT_STATUS_OK
ReadX 10293 257 2048 2048 NT_STATUS_OK
ReadX 10293 385 2048 2048 NT_STATUS_OK
ReadX 10293 513 2048 2048 NT_STATUS_OK
ReadX 10293 641 2048 2048 NT_STATUS_OK
ReadX 10293 769 2048 2048 NT_STATUS_OK
ReadX 10293 897 2048 2048 NT_STATUS_OK
ReadX 10293 1025 2048 2048 NT_STATUS_OK
ReadX 10293 1153 2048 2048 NT_STATUS_OK
ReadX 10293 1281 2048 2048 NT_STATUS_OK
ReadX 10293 1409 2048 2048 NT_STATUS_OK
ReadX 10293 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10283 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10298 NT_STATUS_OK
WriteX 10298 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10298 258 NT_STATUS_OK
WriteX 10298 0 10575 10575 NT_STATUS_OK
Flush 10298 NT_STATUS_OK
Close 10298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10299 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10303 NT_STATUS_OK
LockX 10303 2147483538 1 NT_STATUS_OK
UnlockX 10303 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10303 1005 NT_STATUS_OK
ReadX 10303 0 512 512 NT_STATUS_OK
ReadX 10303 512 512 512 NT_STATUS_OK
ReadX 10303 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10303 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10303 1004 NT_STATUS_OK
Close 10303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10304 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 1005 NT_STATUS_OK
ReadX 10304 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10305 NT_STATUS_OK
LockX 10305 2147483538 1 NT_STATUS_OK
UnlockX 10305 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10305 1005 NT_STATUS_OK
ReadX 10305 0 512 512 NT_STATUS_OK
ReadX 10305 512 512 512 NT_STATUS_OK
ReadX 10305 1024 512 512 NT_STATUS_OK
ReadX 10305 288 20 20 NT_STATUS_OK
ReadX 10305 308 2084 2084 NT_STATUS_OK
ReadX 10305 388 2084 2084 NT_STATUS_OK
ReadX 10305 388 2084 2084 NT_STATUS_OK
ReadX 10292 2157 1386 1386 NT_STATUS_OK
ReadX 10305 2472 399 399 NT_STATUS_OK
ReadX 10305 3072 1536 1536 NT_STATUS_OK
ReadX 10305 544 149 149 NT_STATUS_OK
ReadX 10305 693 485 485 NT_STATUS_OK
Close 10305 NT_STATUS_OK
ReadX 10292 2157 4096 4096 NT_STATUS_OK
ReadX 10292 6253 4096 4096 NT_STATUS_OK
ReadX 10292 10349 4096 4096 NT_STATUS_OK
ReadX 10292 14445 4096 4096 NT_STATUS_OK
ReadX 10292 18541 4096 4096 NT_STATUS_OK
ReadX 10292 22637 256 256 NT_STATUS_OK
ReadX 10292 22893 4096 4096 NT_STATUS_OK
ReadX 10292 26989 4096 4096 NT_STATUS_OK
ReadX 10292 31085 4096 4096 NT_STATUS_OK
ReadX 10292 35181 4096 4096 NT_STATUS_OK
ReadX 10292 39277 4096 4096 NT_STATUS_OK
ReadX 10292 43373 4096 4096 NT_STATUS_OK
ReadX 10292 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10292 2157 1024 1024 NT_STATUS_OK
ReadX 10292 1667 4688 4688 NT_STATUS_OK
ReadX 10292 6355 3516 3516 NT_STATUS_OK
ReadX 10292 9871 16384 16384 NT_STATUS_OK
ReadX 10292 26255 3771 3771 NT_STATUS_OK
ReadX 10292 30026 2048 2048 NT_STATUS_OK
ReadX 10292 32074 1024 1024 NT_STATUS_OK
ReadX 10292 33098 6652 6652 NT_STATUS_OK
ReadX 10292 39750 16384 16384 NT_STATUS_OK
ReadX 10292 56134 10496 10496 NT_STATUS_OK
ReadX 10292 66630 1784 1784 NT_STATUS_OK
ReadX 10292 68414 90 90 NT_STATUS_OK
ReadX 10292 68504 273 273 NT_STATUS_OK
ReadX 10292 68777 1600 1600 NT_STATUS_OK
ReadX 10292 70377 640 640 NT_STATUS_OK
ReadX 10292 71017 1280 1280 NT_STATUS_OK
ReadX 10292 72297 8464 8464 NT_STATUS_OK
ReadX 10292 80761 158 158 NT_STATUS_OK
ReadX 10292 80919 912 912 NT_STATUS_OK
ReadX 10292 81831 1980 1980 NT_STATUS_OK
ReadX 10292 83811 2256 2256 NT_STATUS_OK
ReadX 10292 86067 400 400 NT_STATUS_OK
ReadX 10292 86467 252 252 NT_STATUS_OK
ReadX 10292 86719 42 42 NT_STATUS_OK
ReadX 10292 86761 725 725 NT_STATUS_OK
ReadX 10292 2009 512 512 NT_STATUS_OK
ReadX 10292 3895 9 9 NT_STATUS_OK
ReadX 10292 3781 46 46 NT_STATUS_OK
ReadX 10292 4059 92 92 NT_STATUS_OK
ReadX 10292 3781 92 92 NT_STATUS_OK
ReadX 10292 3986 184 184 NT_STATUS_OK
ReadX 10292 3987 16384 16384 NT_STATUS_OK
ReadX 10292 3902 16384 16384 NT_STATUS_OK
ReadX 10292 3781 10240 10240 NT_STATUS_OK
ReadX 10292 3821 16384 16384 NT_STATUS_OK
ReadX 10292 3891 935 935 NT_STATUS_OK
ReadX 10292 4060 10240 10240 NT_STATUS_OK
ReadX 10292 4059 184 184 NT_STATUS_OK
ReadX 10292 256 184 184 NT_STATUS_OK
ReadX 10292 256 1026 1026 NT_STATUS_OK
ReadX 10292 3901 326 326 NT_STATUS_OK
ReadX 10292 3899 652 652 NT_STATUS_OK
ReadX 10292 256 2 2 NT_STATUS_OK
ReadX 10292 258 4948 4948 NT_STATUS_OK
Close 10292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10307 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
WriteX 10310 0 65536 65536 NT_STATUS_OK
WriteX 10310 65536 65536 65536 NT_STATUS_OK
WriteX 10310 131072 65536 65536 NT_STATUS_OK
WriteX 10310 196608 65536 65536 NT_STATUS_OK
WriteX 10310 262144 65536 65536 NT_STATUS_OK
WriteX 10310 327680 65536 65536 NT_STATUS_OK
WriteX 10310 393216 65536 65536 NT_STATUS_OK
WriteX 10310 458752 65536 65536 NT_STATUS_OK
WriteX 10310 524288 65536 65536 NT_STATUS_OK
WriteX 10310 589824 35257 35257 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10315 NT_STATUS_OK
WriteX 10315 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 258 NT_STATUS_OK
WriteX 10315 0 65536 65536 NT_STATUS_OK
WriteX 10315 65536 65536 65536 NT_STATUS_OK
WriteX 10315 131072 65536 65536 NT_STATUS_OK
WriteX 10315 196608 65536 65536 NT_STATUS_OK
WriteX 10315 262144 65536 65536 NT_STATUS_OK
WriteX 10315 327680 65536 65536 NT_STATUS_OK
WriteX 10315 393216 65536 65536 NT_STATUS_OK
WriteX 10315 458752 65536 65536 NT_STATUS_OK
WriteX 10315 524288 65536 65536 NT_STATUS_OK
WriteX 10315 589824 57598 57598 NT_STATUS_OK
Close 10315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10317 NT_STATUS_OK
WriteX 10317 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10317 258 NT_STATUS_OK
WriteX 10317 0 12543 12543 NT_STATUS_OK
Flush 10317 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10319 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10323 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 1005 NT_STATUS_OK
ReadX 10323 1938 24 24 NT_STATUS_OK
ReadX 10323 1920 276 276 NT_STATUS_OK
ReadX 10323 1918 14 14 NT_STATUS_OK
ReadX 10323 1918 7 7 NT_STATUS_OK
ReadX 10323 1919 12 12 NT_STATUS_OK
ReadX 10323 1919 8 8 NT_STATUS_OK
ReadX 10323 1917 15 15 NT_STATUS_OK
ReadX 10323 0 16 16 NT_STATUS_OK
ReadX 10323 16 2048 2048 NT_STATUS_OK
ReadX 10323 2064 2048 2048 NT_STATUS_OK
ReadX 10323 257 2048 2048 NT_STATUS_OK
ReadX 10323 385 2048 2048 NT_STATUS_OK
ReadX 10323 513 2048 2048 NT_STATUS_OK
ReadX 10323 641 2048 2048 NT_STATUS_OK
ReadX 10323 769 2048 2048 NT_STATUS_OK
ReadX 10323 897 2048 2048 NT_STATUS_OK
ReadX 10323 1025 2048 2048 NT_STATUS_OK
ReadX 10323 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10325 NT_STATUS_OK
Close 10325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10328 NT_STATUS_OK
WriteX 10328 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10328 258 NT_STATUS_OK
WriteX 10328 0 11588 11588 NT_STATUS_OK
Flush 10328 NT_STATUS_OK
Close 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10329 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10333 NT_STATUS_OK
WriteX 10333 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10333 258 NT_STATUS_OK
WriteX 10333 0 11615 11615 NT_STATUS_OK
Flush 10333 NT_STATUS_OK
Close 10333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10342 NT_STATUS_OK
WriteX 10342 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10342 258 NT_STATUS_OK
WriteX 10342 0 65536 65536 NT_STATUS_OK
WriteX 10342 65536 16050 16050 NT_STATUS_OK
Close 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10322 1939 64 64 NT_STATUS_OK
ReadX 10322 128 248 248 NT_STATUS_OK
ReadX 10322 128 568 568 NT_STATUS_OK
ReadX 10322 3872 1536 1536 NT_STATUS_OK
ReadX 10322 3456 2560 2560 NT_STATUS_OK
ReadX 10322 3136 512 512 NT_STATUS_OK
ReadX 10322 2880 4096 4096 NT_STATUS_OK
ReadX 10322 3264 3072 3072 NT_STATUS_OK
ReadX 10322 320 4096 4096 NT_STATUS_OK
ReadX 10322 1024 4096 4096 NT_STATUS_OK
ReadX 10322 3616 4096 4096 NT_STATUS_OK
ReadX 10322 1939 64 64 NT_STATUS_OK
ReadX 10322 128 248 248 NT_STATUS_OK
ReadX 10322 128 608 608 NT_STATUS_OK
ReadX 10322 2858 1024 1024 NT_STATUS_OK
ReadX 10322 2810 4096 4096 NT_STATUS_OK
ReadX 10322 2826 4096 4096 NT_STATUS_OK
ReadX 10322 2580 2048 2048 NT_STATUS_OK
ReadX 10322 2800 2560 2560 NT_STATUS_OK
ReadX 10322 2100 4096 4096 NT_STATUS_OK
ReadX 10322 2084 4096 4096 NT_STATUS_OK
ReadX 10322 868 4096 4096 NT_STATUS_OK
ReadX 10322 2324 4096 4096 NT_STATUS_OK
ReadX 10322 884 4096 4096 NT_STATUS_OK
ReadX 10322 2604 1024 1024 NT_STATUS_OK
ReadX 10322 580 4096 4096 NT_STATUS_OK
ReadX 10322 596 4096 4096 NT_STATUS_OK
ReadX 10322 2752 4096 4096 NT_STATUS_OK
ReadX 10322 2842 1024 1024 NT_STATUS_OK
ReadX 10322 660 4096 4096 NT_STATUS_OK
ReadX 10322 2720 4096 4096 NT_STATUS_OK
ReadX 10322 2736 4096 4096 NT_STATUS_OK
ReadX 10322 628 4096 4096 NT_STATUS_OK
ReadX 10322 2704 4096 4096 NT_STATUS_OK
ReadX 10322 1556 4096 4096 NT_STATUS_OK
ReadX 10322 576 4096 4096 NT_STATUS_OK
ReadX 10322 3168 1536 1536 NT_STATUS_OK
ReadX 10322 832 4096 4096 NT_STATUS_OK
ReadX 10322 1088 4096 4096 NT_STATUS_OK
ReadX 10322 1344 4096 4096 NT_STATUS_OK
ReadX 10322 1600 4096 4096 NT_STATUS_OK
ReadX 10322 1856 4096 4096 NT_STATUS_OK
ReadX 10322 2112 4096 4096 NT_STATUS_OK
ReadX 10322 1892 4096 4096 NT_STATUS_OK
ReadX 10322 820 4096 4096 NT_STATUS_OK
ReadX 10322 788 4096 4096 NT_STATUS_OK
ReadX 10322 1604 4096 4096 NT_STATUS_OK
ReadX 10322 3648 4096 4096 NT_STATUS_OK
ReadX 10322 2608 4096 4096 NT_STATUS_OK
ReadX 10322 548 4096 4096 NT_STATUS_OK
ReadX 10322 740 4096 4096 NT_STATUS_OK
ReadX 10322 1344 4096 4096 NT_STATUS_OK
ReadX 10322 3392 4096 4096 NT_STATUS_OK
ReadX 10322 3904 4096 4096 NT_STATUS_OK
ReadX 10322 644 4096 4096 NT_STATUS_OK
ReadX 10322 676 4096 4096 NT_STATUS_OK
ReadX 10322 2688 4096 4096 NT_STATUS_OK
ReadX 10322 320 4096 4096 NT_STATUS_OK
ReadX 10322 900 4096 4096 NT_STATUS_OK
ReadX 10322 1908 4096 4096 NT_STATUS_OK
ReadX 10322 852 4096 4096 NT_STATUS_OK
ReadX 10322 724 4096 4096 NT_STATUS_OK
ReadX 10322 2292 4096 4096 NT_STATUS_OK
ReadX 10322 612 4096 4096 NT_STATUS_OK
ReadX 10322 388 4096 4096 NT_STATUS_OK
ReadX 10322 2368 4096 4096 NT_STATUS_OK
ReadX 10322 2624 4096 4096 NT_STATUS_OK
ReadX 10322 500 4096 4096 NT_STATUS_OK
ReadX 10322 356 4096 4096 NT_STATUS_OK
ReadX 10322 1024 4096 4096 NT_STATUS_OK
ReadX 10322 576 4096 4096 NT_STATUS_OK
ReadX 10322 340 4096 4096 NT_STATUS_OK
ReadX 10322 420 4096 4096 NT_STATUS_OK
ReadX 10322 1600 4096 4096 NT_STATUS_OK
ReadX 10322 404 4096 4096 NT_STATUS_OK
ReadX 10322 1428 4096 4096 NT_STATUS_OK
ReadX 10322 2656 4096 4096 NT_STATUS_OK
ReadX 10322 2624 4096 4096 NT_STATUS_OK
ReadX 10322 452 4096 4096 NT_STATUS_OK
ReadX 10322 692 4096 4096 NT_STATUS_OK
ReadX 10322 564 4096 4096 NT_STATUS_OK
ReadX 10322 372 4096 4096 NT_STATUS_OK
ReadX 10322 468 4096 4096 NT_STATUS_OK
ReadX 10322 484 4096 4096 NT_STATUS_OK
ReadX 10322 1088 4096 4096 NT_STATUS_OK
ReadX 10322 1924 4096 4096 NT_STATUS_OK
ReadX 10322 2768 4096 4096 NT_STATUS_OK
ReadX 10322 832 4096 4096 NT_STATUS_OK
ReadX 10322 836 4096 4096 NT_STATUS_OK
ReadX 10322 1856 4096 4096 NT_STATUS_OK
ReadX 10322 2640 4096 4096 NT_STATUS_OK
ReadX 10322 436 4096 4096 NT_STATUS_OK
ReadX 10322 1828 4096 4096 NT_STATUS_OK
ReadX 10322 804 4096 4096 NT_STATUS_OK
ReadX 10322 1860 4096 4096 NT_STATUS_OK
ReadX 10322 1812 4096 4096 NT_STATUS_OK
ReadX 10322 756 4096 4096 NT_STATUS_OK
ReadX 10322 1636 4096 4096 NT_STATUS_OK
ReadX 10322 772 4096 4096 NT_STATUS_OK
ReadX 10322 2036 4096 4096 NT_STATUS_OK
ReadX 10322 1220 4096 4096 NT_STATUS_OK
ReadX 10322 1652 4096 4096 NT_STATUS_OK
ReadX 10322 2588 4096 4096 NT_STATUS_OK
ReadX 10322 916 4096 4096 NT_STATUS_OK
ReadX 10322 260 4096 4096 NT_STATUS_OK
ReadX 10322 932 4096 4096 NT_STATUS_OK
ReadX 10322 2624 4096 4096 NT_STATUS_OK
ReadX 10322 308 4096 4096 NT_STATUS_OK
ReadX 10322 292 4096 4096 NT_STATUS_OK
ReadX 10322 1140 4096 4096 NT_STATUS_OK
ReadX 10322 276 4096 4096 NT_STATUS_OK
ReadX 10322 2020 4096 4096 NT_STATUS_OK
ReadX 10322 2880 4096 4096 NT_STATUS_OK
ReadX 10322 516 4096 4096 NT_STATUS_OK
ReadX 10322 1844 4096 4096 NT_STATUS_OK
ReadX 10322 1124 4096 4096 NT_STATUS_OK
ReadX 10322 3136 4096 4096 NT_STATUS_OK
ReadX 10322 324 4096 4096 NT_STATUS_OK
ReadX 10322 1156 4096 4096 NT_STATUS_OK
ReadX 10322 1172 4096 4096 NT_STATUS_OK
ReadX 10322 2112 4096 4096 NT_STATUS_OK
ReadX 10322 2368 4096 4096 NT_STATUS_OK
ReadX 10322 964 4096 4096 NT_STATUS_OK
ReadX 10322 980 4096 4096 NT_STATUS_OK
ReadX 10322 1012 4096 4096 NT_STATUS_OK
ReadX 10322 532 4096 4096 NT_STATUS_OK
ReadX 10322 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10322 1620 4096 4096 NT_STATUS_OK
ReadX 10322 1604 4096 4096 NT_STATUS_OK
ReadX 10322 2116 4096 4096 NT_STATUS_OK
ReadX 10322 2132 4096 4096 NT_STATUS_OK
ReadX 10322 2148 4096 4096 NT_STATUS_OK
ReadX 10322 2276 4096 4096 NT_STATUS_OK
ReadX 10322 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10347 NT_STATUS_OK
QUERY_FILE_INFORMATION 10302 1004 NT_STATUS_OK
Close 10302 NT_STATUS_OK
WriteX 10347 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10347 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 1004 NT_STATUS_OK
Close 10304 NT_STATUS_OK
WriteX 10347 0 65536 65536 NT_STATUS_OK
WriteX 10347 65536 64850 64850 NT_STATUS_OK
Close 10347 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10349 NT_STATUS_OK
WriteX 10349 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10349 258 NT_STATUS_OK
ReadX 10322 2068 4096 4096 NT_STATUS_OK
ReadX 10322 1588 4096 4096 NT_STATUS_OK
ReadX 10322 1572 4096 4096 NT_STATUS_OK
WriteX 10349 0 18630 18630 NT_STATUS_OK
Flush 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10351 NT_STATUS_OK
Close 10351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10353 NT_STATUS_OK
ReadX 10353 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10322 612 4096 4096 NT_STATUS_OK
ReadX 10322 564 4096 4096 NT_STATUS_OK
ReadX 10322 1876 4096 4096 NT_STATUS_OK
ReadX 10322 628 4096 4096 NT_STATUS_OK
ReadX 10322 740 4096 4096 NT_STATUS_OK
ReadX 10322 724 4096 4096 NT_STATUS_OK
ReadX 10322 644 4096 4096 NT_STATUS_OK
ReadX 10322 2324 4096 4096 NT_STATUS_OK
ReadX 10322 660 4096 4096 NT_STATUS_OK
ReadX 10322 852 4096 4096 NT_STATUS_OK
ReadX 10322 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10322 2368 4096 4096 NT_STATUS_OK
ReadX 10322 1024 4096 4096 NT_STATUS_OK
ReadX 10322 320 4096 4096 NT_STATUS_OK
ReadX 10322 580 4096 4096 NT_STATUS_OK
ReadX 10322 3136 512 512 NT_STATUS_OK
ReadX 10322 2880 4096 4096 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10354 NT_STATUS_OK
ReadX 10354 61440 4096 4096 NT_STATUS_OK
ReadX 10354 126976 4096 4096 NT_STATUS_OK
WriteX 10354 0 65536 65536 NT_STATUS_OK
WriteX 10354 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10355 NT_STATUS_OK
ReadX 10355 61440 4096 4096 NT_STATUS_OK
ReadX 10355 126976 4096 4096 NT_STATUS_OK
ReadX 10355 192512 4096 4096 NT_STATUS_OK
ReadX 10355 258048 4096 4096 NT_STATUS_OK
WriteX 10355 0 65536 65536 NT_STATUS_OK
WriteX 10355 65536 65536 65536 NT_STATUS_OK
WriteX 10355 131072 65536 65536 NT_STATUS_OK
WriteX 10355 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 61440 4096 4096 NT_STATUS_OK
ReadX 10356 126976 4096 4096 NT_STATUS_OK
ReadX 10356 192512 4096 4096 NT_STATUS_OK
ReadX 10356 258048 4096 4096 NT_STATUS_OK
ReadX 10356 323584 4096 4096 NT_STATUS_OK
ReadX 10356 389120 4096 4096 NT_STATUS_OK
ReadX 10356 454656 4096 4096 NT_STATUS_OK
ReadX 10356 520192 4096 4096 NT_STATUS_OK
WriteX 10356 0 65536 65536 NT_STATUS_OK
WriteX 10356 65536 65536 65536 NT_STATUS_OK
WriteX 10356 131072 65536 65536 NT_STATUS_OK
WriteX 10356 196608 65536 65536 NT_STATUS_OK
WriteX 10356 262144 65536 65536 NT_STATUS_OK
WriteX 10356 327680 65536 65536 NT_STATUS_OK
WriteX 10356 393216 65536 65536 NT_STATUS_OK
WriteX 10356 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10358 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10359 NT_STATUS_OK
WriteX 10359 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10359 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10357 0 8192 8192 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10357 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10357 0 8192 8192 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10357 0 8192 8192 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10357 0 8192 8192 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10361 NT_STATUS_OK
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10353 NT_STATUS_OK
Close 10321 NT_STATUS_OK
Close 10354 NT_STATUS_OK
Close 10355 NT_STATUS_OK
Close 10356 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10364 NT_STATUS_OK
WriteX 10364 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10364 258 NT_STATUS_OK
WriteX 10364 0 62591 62591 NT_STATUS_OK
Close 10364 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10369 NT_STATUS_OK
WriteX 10369 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 258 NT_STATUS_OK
WriteX 10369 0 10845 10845 NT_STATUS_OK
Close 10369 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10374 NT_STATUS_OK
WriteX 10374 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10374 258 NT_STATUS_OK
WriteX 10374 0 30118 30118 NT_STATUS_OK
Close 10374 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
WriteX 10359 0 64 64 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 61440 61440 NT_STATUS_OK
ReadX 10376 61440 4096 4096 NT_STATUS_OK
ReadX 10376 65536 61440 61440 NT_STATUS_OK
ReadX 10376 126976 4096 4096 NT_STATUS_OK
ReadX 10376 131072 61440 61440 NT_STATUS_OK
ReadX 10376 192512 4096 4096 NT_STATUS_OK
ReadX 10376 196608 61440 61440 NT_STATUS_OK
ReadX 10376 258048 4096 4096 NT_STATUS_OK
ReadX 10376 262144 61440 61440 NT_STATUS_OK
ReadX 10376 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 61440 61440 NT_STATUS_OK
ReadX 10377 61440 4096 4096 NT_STATUS_OK
ReadX 10377 65536 61440 61440 NT_STATUS_OK
ReadX 10377 126976 4096 4096 NT_STATUS_OK
ReadX 10377 131072 61440 61440 NT_STATUS_OK
ReadX 10377 192512 4096 4096 NT_STATUS_OK
ReadX 10377 196608 61440 61440 NT_STATUS_OK
ReadX 10377 258048 4096 4096 NT_STATUS_OK
ReadX 10377 262144 61440 61440 NT_STATUS_OK
ReadX 10377 323584 4096 4096 NT_STATUS_OK
ReadX 10377 327680 61440 61440 NT_STATUS_OK
ReadX 10377 389120 4096 4096 NT_STATUS_OK
ReadX 10377 393216 61440 61440 NT_STATUS_OK
ReadX 10377 454656 4096 4096 NT_STATUS_OK
ReadX 10377 458752 61440 61440 NT_STATUS_OK
ReadX 10377 520192 4096 4096 NT_STATUS_OK
ReadX 10377 524288 61440 61440 NT_STATUS_OK
ReadX 10377 585728 4096 4096 NT_STATUS_OK
ReadX 10377 589824 61440 61440 NT_STATUS_OK
ReadX 10377 651264 4096 4096 NT_STATUS_OK
ReadX 10377 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 61440 61440 NT_STATUS_OK
ReadX 10378 61440 4096 4096 NT_STATUS_OK
ReadX 10378 65536 61440 61440 NT_STATUS_OK
ReadX 10378 126976 4096 4096 NT_STATUS_OK
ReadX 10378 131072 61440 61440 NT_STATUS_OK
ReadX 10378 192512 4096 4096 NT_STATUS_OK
ReadX 10378 196608 61440 61440 NT_STATUS_OK
ReadX 10378 258048 4096 4096 NT_STATUS_OK
ReadX 10378 262144 61440 61440 NT_STATUS_OK
ReadX 10378 323584 4096 4096 NT_STATUS_OK
ReadX 10378 327680 61440 61440 NT_STATUS_OK
ReadX 10378 389120 4096 4096 NT_STATUS_OK
ReadX 10378 393216 61440 61440 NT_STATUS_OK
ReadX 10378 454656 4096 4096 NT_STATUS_OK
ReadX 10378 458752 61440 61440 NT_STATUS_OK
ReadX 10378 520192 4096 4096 NT_STATUS_OK
ReadX 10378 524288 61440 61440 NT_STATUS_OK
ReadX 10378 585728 4096 4096 NT_STATUS_OK
ReadX 10378 589824 61440 61440 NT_STATUS_OK
ReadX 10378 651264 4096 4096 NT_STATUS_OK
ReadX 10378 655360 61440 61440 NT_STATUS_OK
ReadX 10378 716800 4096 4096 NT_STATUS_OK
ReadX 10378 720896 61440 61440 NT_STATUS_OK
ReadX 10378 782336 4096 4096 NT_STATUS_OK
ReadX 10378 786432 61440 61440 NT_STATUS_OK
ReadX 10378 847872 4096 4096 NT_STATUS_OK
ReadX 10378 851968 61440 61440 NT_STATUS_OK
ReadX 10378 913408 4096 4096 NT_STATUS_OK
ReadX 10378 917504 61440 61440 NT_STATUS_OK
ReadX 10378 978944 4096 4096 NT_STATUS_OK
ReadX 10378 983040 61440 61440 NT_STATUS_OK
ReadX 10378 1044480 4096 4096 NT_STATUS_OK
ReadX 10378 1048576 61440 61440 NT_STATUS_OK
ReadX 10378 1110016 4096 4096 NT_STATUS_OK
ReadX 10378 1114112 61440 61440 NT_STATUS_OK
ReadX 10378 1175552 4096 4096 NT_STATUS_OK
ReadX 10378 1179648 61440 61440 NT_STATUS_OK
ReadX 10378 1241088 4096 4096 NT_STATUS_OK
ReadX 10378 1245184 61440 61440 NT_STATUS_OK
ReadX 10378 1306624 4096 4096 NT_STATUS_OK
ReadX 10378 1310720 61440 61440 NT_STATUS_OK
ReadX 10378 1372160 4096 4096 NT_STATUS_OK
ReadX 10378 1376256 61440 61440 NT_STATUS_OK
ReadX 10378 1437696 4096 4096 NT_STATUS_OK
ReadX 10378 1441792 61440 61440 NT_STATUS_OK
ReadX 10378 1503232 4096 4096 NT_STATUS_OK
ReadX 10378 1507328 61440 61440 NT_STATUS_OK
ReadX 10378 1568768 4096 4096 NT_STATUS_OK
ReadX 10378 1572864 61440 61440 NT_STATUS_OK
ReadX 10378 1634304 4096 4096 NT_STATUS_OK
ReadX 10378 1638400 61440 61440 NT_STATUS_OK
ReadX 10378 1699840 4096 4096 NT_STATUS_OK
ReadX 10378 1703936 61440 61440 NT_STATUS_OK
ReadX 10378 1765376 4096 4096 NT_STATUS_OK
ReadX 10378 1769472 61440 61440 NT_STATUS_OK
ReadX 10378 1830912 4096 4096 NT_STATUS_OK
ReadX 10378 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
ReadX 10383 4096 4096 4096 NT_STATUS_OK
ReadX 10383 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10387 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10386 NT_STATUS_OK
Close 10387 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10391 NT_STATUS_OK
ReadX 10391 0 8192 8192 NT_STATUS_OK
ReadX 10391 8192 8192 8192 NT_STATUS_OK
ReadX 10391 16384 8192 8192 NT_STATUS_OK
ReadX 10391 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10390 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10396 NT_STATUS_OK
WriteX 10396 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 258 NT_STATUS_OK
WriteX 10396 0 10438 10438 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10397 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10400 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10402 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10404 NT_STATUS_OK
Close 10404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
ReadX 10405 4096 4096 4096 NT_STATUS_OK
ReadX 10405 8192 4096 4096 NT_STATUS_OK
ReadX 10405 12288 8192 8192 NT_STATUS_OK
ReadX 10405 20480 8192 8192 NT_STATUS_OK
ReadX 10405 28672 8192 8192 NT_STATUS_OK
ReadX 10405 36864 8192 8192 NT_STATUS_OK
ReadX 10405 45056 8192 8192 NT_STATUS_OK
ReadX 10405 53248 8192 8192 NT_STATUS_OK
ReadX 10405 61440 8192 8192 NT_STATUS_OK
ReadX 10405 69632 8192 8192 NT_STATUS_OK
ReadX 10405 77824 8192 8192 NT_STATUS_OK
ReadX 10405 86016 8192 8192 NT_STATUS_OK
ReadX 10405 94208 8192 8192 NT_STATUS_OK
ReadX 10405 102400 8192 8192 NT_STATUS_OK
ReadX 10405 110592 8192 8192 NT_STATUS_OK
ReadX 10405 118784 8192 8192 NT_STATUS_OK
ReadX 10405 126976 8192 8192 NT_STATUS_OK
ReadX 10405 135168 8192 8192 NT_STATUS_OK
ReadX 10405 143360 8192 8192 NT_STATUS_OK
ReadX 10405 151552 8192 8192 NT_STATUS_OK
ReadX 10405 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10410 NT_STATUS_OK
WriteX 10410 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 28489 28489 NT_STATUS_OK
Close 10410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10411 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10413 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 8192 8192 NT_STATUS_OK
ReadX 10417 8192 8192 8192 NT_STATUS_OK
ReadX 10417 16384 8192 8192 NT_STATUS_OK
ReadX 10417 24576 8192 8192 NT_STATUS_OK
ReadX 10417 32768 16384 16384 NT_STATUS_OK
ReadX 10417 49152 8192 8192 NT_STATUS_OK
ReadX 10417 57344 8192 8192 NT_STATUS_OK
ReadX 10417 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10422 NT_STATUS_OK
WriteX 10422 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 258 NT_STATUS_OK
WriteX 10422 0 29253 29253 NT_STATUS_OK
Close 10422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10426 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10429 NT_STATUS_OK
WriteX 10429 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10429 258 NT_STATUS_OK
WriteX 10429 0 30183 30183 NT_STATUS_OK
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10432 NT_STATUS_OK
WriteX 10432 0 510 510 NT_STATUS_OK
WriteX 10432 510 512 512 NT_STATUS_OK
WriteX 10432 1022 510 510 NT_STATUS_OK
WriteX 10432 1532 510 510 NT_STATUS_OK
WriteX 10432 2042 168 168 NT_STATUS_OK
Close 10432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
WriteX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 61440 4096 4096 NT_STATUS_OK
ReadX 10436 126976 4096 4096 NT_STATUS_OK
WriteX 10436 0 65536 65536 NT_STATUS_OK
WriteX 10436 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 61440 4096 4096 NT_STATUS_OK
ReadX 10437 126976 4096 4096 NT_STATUS_OK
ReadX 10437 192512 4096 4096 NT_STATUS_OK
ReadX 10437 258048 4096 4096 NT_STATUS_OK
WriteX 10437 0 65536 65536 NT_STATUS_OK
WriteX 10437 65536 65536 65536 NT_STATUS_OK
WriteX 10437 131072 65536 65536 NT_STATUS_OK
WriteX 10437 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 61440 4096 4096 NT_STATUS_OK
ReadX 10438 126976 4096 4096 NT_STATUS_OK
ReadX 10438 192512 4096 4096 NT_STATUS_OK
ReadX 10438 258048 4096 4096 NT_STATUS_OK
ReadX 10438 323584 4096 4096 NT_STATUS_OK
ReadX 10438 389120 4096 4096 NT_STATUS_OK
ReadX 10438 454656 4096 4096 NT_STATUS_OK
ReadX 10438 520192 4096 4096 NT_STATUS_OK
WriteX 10438 0 65536 65536 NT_STATUS_OK
WriteX 10438 65536 65536 65536 NT_STATUS_OK
WriteX 10438 131072 65536 65536 NT_STATUS_OK
WriteX 10438 196608 65536 65536 NT_STATUS_OK
WriteX 10438 262144 65536 65536 NT_STATUS_OK
WriteX 10438 327680 65536 65536 NT_STATUS_OK
WriteX 10438 393216 65536 65536 NT_STATUS_OK
WriteX 10438 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10439 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10441 NT_STATUS_OK
Close 10441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10450 NT_STATUS_OK
Close 10450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10454 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10468 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10493 NT_STATUS_OK
Close 10493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10501 NT_STATUS_OK
Close 10501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10507 NT_STATUS_OK
WriteX 10507 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10507 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10507 0 65536 65536 NT_STATUS_OK
WriteX 10507 65536 65536 65536 NT_STATUS_OK
WriteX 10507 131072 65536 65536 NT_STATUS_OK
WriteX 10507 196608 65536 65536 NT_STATUS_OK
WriteX 10507 262144 26634 26634 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
Close 10514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
ReadX 10515 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10523 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10525 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10529 NT_STATUS_OK
Close 10529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10532 NT_STATUS_OK
Close 10532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10558 NT_STATUS_OK
Close 10558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10567 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10577 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10580 NT_STATUS_OK
Close 10580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10594 NT_STATUS_OK
ReadX 10594 0 4096 4096 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10606 NT_STATUS_OK
Close 10606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
Close 10608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10609 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
Close 10609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10610 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10639 0 4096 4096 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10640 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
ReadX 10641 4096 4096 4096 NT_STATUS_OK
ReadX 10641 8192 4096 4096 NT_STATUS_OK
ReadX 10641 12288 4096 4096 NT_STATUS_OK
ReadX 10641 16384 4096 4096 NT_STATUS_OK
ReadX 10641 20480 4096 4096 NT_STATUS_OK
ReadX 10641 24576 4096 4096 NT_STATUS_OK
ReadX 10641 28672 4096 4096 NT_STATUS_OK
ReadX 10641 32768 4096 4096 NT_STATUS_OK
ReadX 10641 36864 4096 4096 NT_STATUS_OK
ReadX 10641 40960 4096 4096 NT_STATUS_OK
ReadX 10641 45056 4096 4096 NT_STATUS_OK
ReadX 10641 49152 4096 4096 NT_STATUS_OK
ReadX 10641 53248 4096 4096 NT_STATUS_OK
ReadX 10641 57344 4096 4096 NT_STATUS_OK
ReadX 10641 61440 4096 4096 NT_STATUS_OK
ReadX 10641 65536 4096 4096 NT_STATUS_OK
ReadX 10641 69632 4096 4096 NT_STATUS_OK
ReadX 10641 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10641 1004 NT_STATUS_OK
WriteX 10641 0 4096 4096 NT_STATUS_OK
Close 10641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10642 NT_STATUS_OK
SET_FILE_INFORMATION 10642 1004 NT_STATUS_OK
Close 10642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10644 NT_STATUS_OK
Close 10644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10647 NT_STATUS_OK
WriteX 10647 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10647 258 NT_STATUS_OK
WriteX 10647 0 65536 65536 NT_STATUS_OK
WriteX 10647 65536 19979 19979 NT_STATUS_OK
Close 10647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10648 NT_STATUS_OK
ReadX 10648 0 4096 4096 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
Flush 10648 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
Flush 10648 NT_STATUS_OK
QUERY_FILE_INFORMATION 10648 1004 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
Flush 10648 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
Flush 10648 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
Flush 10648 NT_STATUS_OK
SET_FILE_INFORMATION 10648 1004 NT_STATUS_OK
WriteX 10648 0 4096 4096 NT_STATUS_OK
Flush 10648 NT_STATUS_OK
Close 10648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
Close 10649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 0 4096 4096 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10653 1004 NT_STATUS_OK
WriteX 10653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10654 NT_STATUS_OK
Close 10654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10659 NT_STATUS_OK
WriteX 10659 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10659 258 NT_STATUS_OK
WriteX 10659 0 65536 65536 NT_STATUS_OK
WriteX 10659 65536 17654 17654 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Flush 10660 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Flush 10660 NT_STATUS_OK
QUERY_FILE_INFORMATION 10660 1004 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Flush 10660 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Flush 10660 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Flush 10660 NT_STATUS_OK
SET_FILE_INFORMATION 10660 1004 NT_STATUS_OK
WriteX 10660 0 4096 4096 NT_STATUS_OK
Flush 10660 NT_STATUS_OK
Close 10660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10661 NT_STATUS_OK
SET_FILE_INFORMATION 10661 1004 NT_STATUS_OK
Close 10661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
ReadX 10665 4096 4096 4096 NT_STATUS_OK
ReadX 10665 8192 4096 4096 NT_STATUS_OK
ReadX 10665 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10665 16384 4096 4096 NT_STATUS_OK
ReadX 10665 20480 4096 4096 NT_STATUS_OK
ReadX 10665 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
Close 10666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10668 1004 NT_STATUS_OK
WriteX 10668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10671 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10674 NT_STATUS_OK
WriteX 10674 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10674 258 NT_STATUS_OK
WriteX 10674 0 65536 65536 NT_STATUS_OK
WriteX 10674 65536 19490 19490 NT_STATUS_OK
Close 10674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 4096 4096 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
QUERY_FILE_INFORMATION 10675 1004 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
SET_FILE_INFORMATION 10675 1004 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
Flush 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10676 NT_STATUS_OK
SET_FILE_INFORMATION 10676 1004 NT_STATUS_OK
Close 10676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10677 NT_STATUS_OK
ReadX 10677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10678 NT_STATUS_OK
Close 10678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10680 0 4096 4096 NT_STATUS_OK
Close 10680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10682 NT_STATUS_OK
ReadX 10682 0 4096 4096 NT_STATUS_OK
ReadX 10682 4096 4096 4096 NT_STATUS_OK
ReadX 10682 8192 4096 4096 NT_STATUS_OK
ReadX 10682 12288 4096 4096 NT_STATUS_OK
ReadX 10682 16384 4096 4096 NT_STATUS_OK
ReadX 10682 20480 4096 4096 NT_STATUS_OK
ReadX 10682 24576 4096 4096 NT_STATUS_OK
ReadX 10682 28672 4096 4096 NT_STATUS_OK
ReadX 10682 32768 4096 4096 NT_STATUS_OK
ReadX 10682 36864 4096 4096 NT_STATUS_OK
ReadX 10682 40960 4096 4096 NT_STATUS_OK
ReadX 10682 45056 4096 4096 NT_STATUS_OK
ReadX 10682 49152 4096 4096 NT_STATUS_OK
ReadX 10682 53248 4096 4096 NT_STATUS_OK
ReadX 10682 57344 4096 4096 NT_STATUS_OK
ReadX 10682 61440 4096 4096 NT_STATUS_OK
ReadX 10682 65536 4096 4096 NT_STATUS_OK
ReadX 10682 69632 4096 4096 NT_STATUS_OK
ReadX 10682 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10682 1004 NT_STATUS_OK
WriteX 10682 0 4096 4096 NT_STATUS_OK
Close 10682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10683 NT_STATUS_OK
SET_FILE_INFORMATION 10683 1004 NT_STATUS_OK
Close 10683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10677 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10688 NT_STATUS_OK
WriteX 10688 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10688 258 NT_STATUS_OK
WriteX 10688 0 65536 65536 NT_STATUS_OK
WriteX 10688 65536 8866 8866 NT_STATUS_OK
Close 10688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
WriteX 10689 0 4096 4096 NT_STATUS_OK
Flush 10689 NT_STATUS_OK
SET_FILE_INFORMATION 10689 1004 NT_STATUS_OK
WriteX 10689 0 4096 4096 NT_STATUS_OK
Flush 10689 NT_STATUS_OK
Close 10689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
Close 10691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10693 1004 NT_STATUS_OK
WriteX 10693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10699 NT_STATUS_OK
WriteX 10699 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10699 258 NT_STATUS_OK
WriteX 10699 0 65536 65536 NT_STATUS_OK
WriteX 10699 65536 9298 9298 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Flush 10700 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Flush 10700 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10701 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10703 NT_STATUS_OK
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10706 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10706 0 4096 4096 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10707 4096 4096 4096 NT_STATUS_OK
ReadX 10707 8192 4096 4096 NT_STATUS_OK
ReadX 10707 12288 4096 4096 NT_STATUS_OK
ReadX 10707 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10707 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10716 NT_STATUS_OK
WriteX 10716 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10716 258 NT_STATUS_OK
WriteX 10716 0 65536 65536 NT_STATUS_OK
WriteX 10716 65536 11540 11540 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
WriteX 10717 0 4096 4096 NT_STATUS_OK
Flush 10717 NT_STATUS_OK
SET_FILE_INFORMATION 10717 1004 NT_STATUS_OK
WriteX 10717 0 4096 4096 NT_STATUS_OK
Flush 10717 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10718 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10719 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 61440 4096 4096 NT_STATUS_OK
ReadX 10722 126976 4096 4096 NT_STATUS_OK
WriteX 10722 0 65536 65536 NT_STATUS_OK
WriteX 10722 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 61440 4096 4096 NT_STATUS_OK
ReadX 10723 126976 4096 4096 NT_STATUS_OK
ReadX 10723 192512 4096 4096 NT_STATUS_OK
ReadX 10723 258048 4096 4096 NT_STATUS_OK
WriteX 10723 0 65536 65536 NT_STATUS_OK
WriteX 10723 65536 65536 65536 NT_STATUS_OK
WriteX 10723 131072 65536 65536 NT_STATUS_OK
WriteX 10723 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 61440 4096 4096 NT_STATUS_OK
ReadX 10724 126976 4096 4096 NT_STATUS_OK
ReadX 10724 192512 4096 4096 NT_STATUS_OK
ReadX 10724 258048 4096 4096 NT_STATUS_OK
ReadX 10724 323584 4096 4096 NT_STATUS_OK
ReadX 10724 389120 4096 4096 NT_STATUS_OK
ReadX 10724 454656 4096 4096 NT_STATUS_OK
ReadX 10724 520192 4096 4096 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 65536 65536 NT_STATUS_OK
WriteX 10724 131072 65536 65536 NT_STATUS_OK
WriteX 10724 196608 65536 65536 NT_STATUS_OK
WriteX 10724 262144 65536 65536 NT_STATUS_OK
WriteX 10724 327680 65536 65536 NT_STATUS_OK
WriteX 10724 393216 65536 65536 NT_STATUS_OK
WriteX 10724 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
ReadX 10725 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10726 NT_STATUS_OK
WriteX 10726 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 258 NT_STATUS_OK
WriteX 10726 0 53 53 NT_STATUS_OK
Close 10726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10725 8192 4096 4096 NT_STATUS_OK
ReadX 10725 12288 4096 4096 NT_STATUS_OK
WriteX 10729 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10729 258 NT_STATUS_OK
ReadX 10725 16384 4096 4096 NT_STATUS_OK
ReadX 10725 20480 4096 4096 NT_STATUS_OK
WriteX 10729 0 15360 15360 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10730 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10730 1004 NT_STATUS_OK
WriteX 10730 0 4096 4096 NT_STATUS_OK
Close 10730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10733 4096 4096 4096 NT_STATUS_OK
ReadX 10733 8192 4096 4096 NT_STATUS_OK
ReadX 10733 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
ReadX 10736 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
ReadX 10737 4096 4096 4096 NT_STATUS_OK
ReadX 10737 8192 4096 4096 NT_STATUS_OK
Close 10736 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 15360 15360 NT_STATUS_OK
Close 10738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10739 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10740 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10743 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
Close 10743 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Close 10739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
ReadX 10746 4096 4096 4096 NT_STATUS_OK
ReadX 10746 8192 4096 4096 NT_STATUS_OK
ReadX 10746 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10746 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10746 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10748 NT_STATUS_OK
WriteX 10748 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10748 258 NT_STATUS_OK
WriteX 10748 0 53 53 NT_STATUS_OK
Close 10748 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10747 4096 4096 4096 NT_STATUS_OK
ReadX 10747 8192 4096 4096 NT_STATUS_OK
ReadX 10747 12288 4096 4096 NT_STATUS_OK
WriteX 10751 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10751 258 NT_STATUS_OK
WriteX 10751 0 12006 12006 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10752 1004 NT_STATUS_OK
WriteX 10752 0 4096 4096 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10756 NT_STATUS_OK
Close 10756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10755 4096 4096 4096 NT_STATUS_OK
ReadX 10755 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10758 NT_STATUS_OK
WriteX 10758 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10758 258 NT_STATUS_OK
WriteX 10758 0 11991 11991 NT_STATUS_OK
Close 10758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10759 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10759 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10762 NT_STATUS_OK
ReadX 10762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10763 NT_STATUS_OK
SET_FILE_INFORMATION 10763 1004 NT_STATUS_OK
Close 10763 NT_STATUS_OK
WriteX 10759 0 4096 4096 NT_STATUS_OK
Close 10759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10766 NT_STATUS_OK
ReadX 10766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10767 NT_STATUS_OK
Close 10767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10766 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10766 1004 NT_STATUS_OK
ReadX 10766 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10766 1004 NT_STATUS_OK
WriteX 10766 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10766 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10766 1004 NT_STATUS_OK
Close 10742 NT_STATUS_OK
WriteX 10746 0 19054 19054 NT_STATUS_OK
WriteX 10766 0 12288 12288 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Close 10766 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 0 61440 61440 NT_STATUS_OK
ReadX 10773 61440 4096 4096 NT_STATUS_OK
ReadX 10773 65536 61440 61440 NT_STATUS_OK
ReadX 10773 126976 4096 4096 NT_STATUS_OK
ReadX 10773 131072 61440 61440 NT_STATUS_OK
ReadX 10773 192512 4096 4096 NT_STATUS_OK
ReadX 10773 196608 61440 61440 NT_STATUS_OK
ReadX 10773 258048 4096 4096 NT_STATUS_OK
ReadX 10773 262144 61440 61440 NT_STATUS_OK
ReadX 10773 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10774 NT_STATUS_OK
ReadX 10774 0 61440 61440 NT_STATUS_OK
ReadX 10774 61440 4096 4096 NT_STATUS_OK
ReadX 10774 65536 61440 61440 NT_STATUS_OK
ReadX 10774 126976 4096 4096 NT_STATUS_OK
ReadX 10774 131072 61440 61440 NT_STATUS_OK
ReadX 10774 192512 4096 4096 NT_STATUS_OK
ReadX 10774 196608 61440 61440 NT_STATUS_OK
ReadX 10774 258048 4096 4096 NT_STATUS_OK
ReadX 10774 262144 61440 61440 NT_STATUS_OK
ReadX 10774 323584 4096 4096 NT_STATUS_OK
ReadX 10774 327680 61440 61440 NT_STATUS_OK
ReadX 10774 389120 4096 4096 NT_STATUS_OK
ReadX 10774 393216 61440 61440 NT_STATUS_OK
ReadX 10774 454656 4096 4096 NT_STATUS_OK
ReadX 10774 458752 61440 61440 NT_STATUS_OK
ReadX 10774 520192 4096 4096 NT_STATUS_OK
ReadX 10774 524288 61440 61440 NT_STATUS_OK
ReadX 10774 585728 4096 4096 NT_STATUS_OK
ReadX 10774 589824 61440 61440 NT_STATUS_OK
ReadX 10774 651264 4096 4096 NT_STATUS_OK
ReadX 10774 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 61440 61440 NT_STATUS_OK
ReadX 10775 61440 4096 4096 NT_STATUS_OK
ReadX 10775 65536 61440 61440 NT_STATUS_OK
ReadX 10775 126976 4096 4096 NT_STATUS_OK
ReadX 10775 131072 61440 61440 NT_STATUS_OK
ReadX 10775 192512 4096 4096 NT_STATUS_OK
ReadX 10775 196608 61440 61440 NT_STATUS_OK
ReadX 10775 258048 4096 4096 NT_STATUS_OK
ReadX 10775 262144 61440 61440 NT_STATUS_OK
ReadX 10775 323584 4096 4096 NT_STATUS_OK
ReadX 10775 327680 61440 61440 NT_STATUS_OK
ReadX 10775 389120 4096 4096 NT_STATUS_OK
ReadX 10775 393216 61440 61440 NT_STATUS_OK
ReadX 10775 454656 4096 4096 NT_STATUS_OK
ReadX 10775 458752 61440 61440 NT_STATUS_OK
ReadX 10775 520192 4096 4096 NT_STATUS_OK
ReadX 10775 524288 61440 61440 NT_STATUS_OK
ReadX 10775 585728 4096 4096 NT_STATUS_OK
ReadX 10775 589824 61440 61440 NT_STATUS_OK
ReadX 10775 651264 4096 4096 NT_STATUS_OK
ReadX 10775 655360 61440 61440 NT_STATUS_OK
ReadX 10775 716800 4096 4096 NT_STATUS_OK
ReadX 10775 720896 61440 61440 NT_STATUS_OK
ReadX 10775 782336 4096 4096 NT_STATUS_OK
ReadX 10775 786432 61440 61440 NT_STATUS_OK
ReadX 10775 847872 4096 4096 NT_STATUS_OK
ReadX 10775 851968 61440 61440 NT_STATUS_OK
ReadX 10775 913408 4096 4096 NT_STATUS_OK
ReadX 10775 917504 61440 61440 NT_STATUS_OK
ReadX 10775 978944 4096 4096 NT_STATUS_OK
ReadX 10775 983040 61440 61440 NT_STATUS_OK
ReadX 10775 1044480 4096 4096 NT_STATUS_OK
ReadX 10775 1048576 61440 61440 NT_STATUS_OK
ReadX 10775 1110016 4096 4096 NT_STATUS_OK
ReadX 10775 1114112 61440 61440 NT_STATUS_OK
ReadX 10775 1175552 4096 4096 NT_STATUS_OK
ReadX 10775 1179648 61440 61440 NT_STATUS_OK
ReadX 10775 1241088 4096 4096 NT_STATUS_OK
ReadX 10775 1245184 61440 61440 NT_STATUS_OK
ReadX 10775 1306624 4096 4096 NT_STATUS_OK
ReadX 10775 1310720 61440 61440 NT_STATUS_OK
ReadX 10775 1372160 4096 4096 NT_STATUS_OK
ReadX 10775 1376256 61440 61440 NT_STATUS_OK
ReadX 10775 1437696 4096 4096 NT_STATUS_OK
ReadX 10775 1441792 61440 61440 NT_STATUS_OK
ReadX 10775 1503232 4096 4096 NT_STATUS_OK
ReadX 10775 1507328 61440 61440 NT_STATUS_OK
ReadX 10775 1568768 4096 4096 NT_STATUS_OK
ReadX 10775 1572864 61440 61440 NT_STATUS_OK
ReadX 10775 1634304 4096 4096 NT_STATUS_OK
ReadX 10775 1638400 61440 61440 NT_STATUS_OK
ReadX 10775 1699840 4096 4096 NT_STATUS_OK
ReadX 10775 1703936 61440 61440 NT_STATUS_OK
ReadX 10775 1765376 4096 4096 NT_STATUS_OK
ReadX 10775 1769472 61440 61440 NT_STATUS_OK
ReadX 10775 1830912 4096 4096 NT_STATUS_OK
ReadX 10775 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1004 NT_STATUS_OK
WriteX 10782 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10784 NT_STATUS_OK
WriteX 10784 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10784 258 NT_STATUS_OK
WriteX 10784 0 491 491 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10782 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10788 NT_STATUS_OK
WriteX 10788 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
WriteX 10788 0 543 543 NT_STATUS_OK
Close 10788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Close 10775 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Close 10779 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10802 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 258 NT_STATUS_OK
WriteX 10802 0 2048 2048 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10803 0 4096 4096 NT_STATUS_OK
Flush 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10803 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10808 NT_STATUS_OK
WriteX 10808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 2048 2048 NT_STATUS_OK
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10814 NT_STATUS_OK
WriteX 10814 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10814 258 NT_STATUS_OK
WriteX 10814 0 2048 2048 NT_STATUS_OK
Close 10814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 0 2048 2048 NT_STATUS_OK
ReadX 10793 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10797 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
WriteX 10793 0 8192 8192 NT_STATUS_OK
WriteX 10794 0 4096 4096 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10819 NT_STATUS_OK
QUERY_FILE_INFORMATION 10819 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10809 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10839 NT_STATUS_OK
QUERY_FILE_INFORMATION 10839 1004 NT_STATUS_OK
WriteX 10839 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10839 258 NT_STATUS_OK
WriteX 10839 0 2048 2048 NT_STATUS_OK
Close 10839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10847 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 1004 NT_STATUS_OK
WriteX 10847 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 258 NT_STATUS_OK
WriteX 10847 0 2048 2048 NT_STATUS_OK
Close 10847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10848 NT_STATUS_OK
ReadX 10848 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10840 0 4096 4096 NT_STATUS_OK
Flush 10840 NT_STATUS_OK
WriteX 10848 0 4096 4096 NT_STATUS_OK
Flush 10848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10848 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10842 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10850 NT_STATUS_OK
WriteX 10850 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10850 258 NT_STATUS_OK
WriteX 10850 0 4096 4096 NT_STATUS_OK
Close 10850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10852 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10853 NT_STATUS_OK
WriteX 10853 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 258 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10854 0 4096 4096 NT_STATUS_OK
Close 10851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10842 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10857 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10861 NT_STATUS_OK
WriteX 10861 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 258 NT_STATUS_OK
WriteX 10861 0 2048 2048 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10862 NT_STATUS_OK
ReadX 10862 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10865 NT_STATUS_OK
ReadX 10865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10867 NT_STATUS_OK
ReadX 10867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10870 NT_STATUS_OK
ReadX 10870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10871 NT_STATUS_OK
ReadX 10871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10872 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10876 NT_STATUS_OK
QUERY_FILE_INFORMATION 10876 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10862 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Close 10869 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Close 10871 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Close 10863 NT_STATUS_OK
Close 10864 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10865 NT_STATUS_OK
Close 10866 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10878 NT_STATUS_OK
QUERY_FILE_INFORMATION 10878 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10898 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 1004 NT_STATUS_OK
WriteX 10898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
WriteX 10898 0 2048 2048 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10903 NT_STATUS_OK
ReadX 10903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10910 NT_STATUS_OK
QUERY_FILE_INFORMATION 10910 1004 NT_STATUS_OK
WriteX 10910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10910 258 NT_STATUS_OK
WriteX 10910 0 2048 2048 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10911 NT_STATUS_OK
ReadX 10911 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10918 NT_STATUS_OK
QUERY_FILE_INFORMATION 10918 1004 NT_STATUS_OK
WriteX 10918 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10918 258 NT_STATUS_OK
WriteX 10918 0 2048 2048 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10899 0 4096 4096 NT_STATUS_OK
Flush 10899 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
Flush 10911 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10899 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10901 4096 16384 16384 NT_STATUS_OK
ReadX 10881 4096 16384 16384 NT_STATUS_OK
ReadX 10913 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10920 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 2048 2048 NT_STATUS_OK
WriteX 10921 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10922 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10903 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10924 NT_STATUS_OK
QUERY_FILE_INFORMATION 10924 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10926 NT_STATUS_OK
QUERY_FILE_INFORMATION 10926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10929 4096 16384 16384 NT_STATUS_OK
WriteX 10929 0 4096 4096 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
WriteX 10932 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10944 NT_STATUS_OK
ReadX 10944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 8192 8192 NT_STATUS_OK
ReadX 10935 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10949 0 4096 4096 NT_STATUS_OK
ReadX 10949 4096 4096 4096 NT_STATUS_OK
ReadX 10949 8192 4096 4096 NT_STATUS_OK
WriteX 10935 0 4096 4096 NT_STATUS_OK
WriteX 10936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
ReadX 10950 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10929 0 4096 4096 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
WriteX 10932 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10955 NT_STATUS_OK
QUERY_FILE_INFORMATION 10955 1004 NT_STATUS_OK
WriteX 10955 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10955 258 NT_STATUS_OK
WriteX 10955 0 2048 2048 NT_STATUS_OK
Close 10955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10956 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10956 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
ReadX 10958 4096 4096 4096 NT_STATUS_OK
WriteX 10958 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10956 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
ReadX 10960 4096 4096 4096 NT_STATUS_OK
WriteX 10960 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10961 NT_STATUS_OK
QUERY_FILE_INFORMATION 10961 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10946 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Close 10944 NT_STATUS_OK
Close 10945 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10963 0 4096 4096 NT_STATUS_OK
ReadX 10963 4096 4096 4096 NT_STATUS_OK
ReadX 10963 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10966 NT_STATUS_OK
ReadX 10966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10967 NT_STATUS_OK
ReadX 10967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10968 NT_STATUS_OK
ReadX 10968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 4096 4096 NT_STATUS_OK
ReadX 10964 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10981 NT_STATUS_OK
QUERY_FILE_INFORMATION 10981 1004 NT_STATUS_OK
WriteX 10981 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10981 258 NT_STATUS_OK
WriteX 10981 0 2048 2048 NT_STATUS_OK
Close 10981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10982 NT_STATUS_OK
ReadX 10982 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10986 NT_STATUS_OK
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10987 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 258 NT_STATUS_OK
WriteX 10987 0 2048 2048 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10971 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10989 NT_STATUS_OK
QUERY_FILE_INFORMATION 10989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10975 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10966 NT_STATUS_OK
Close 10967 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10973 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10991 NT_STATUS_OK
QUERY_FILE_INFORMATION 10991 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 61440 4096 4096 NT_STATUS_OK
ReadX 10993 126976 4096 4096 NT_STATUS_OK
WriteX 10993 0 65536 65536 NT_STATUS_OK
WriteX 10993 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 61440 4096 4096 NT_STATUS_OK
ReadX 10994 126976 4096 4096 NT_STATUS_OK
ReadX 10994 192512 4096 4096 NT_STATUS_OK
ReadX 10994 258048 4096 4096 NT_STATUS_OK
WriteX 10994 0 65536 65536 NT_STATUS_OK
WriteX 10994 65536 65536 65536 NT_STATUS_OK
WriteX 10994 131072 65536 65536 NT_STATUS_OK
WriteX 10994 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 61440 4096 4096 NT_STATUS_OK
ReadX 10995 126976 4096 4096 NT_STATUS_OK
ReadX 10995 192512 4096 4096 NT_STATUS_OK
ReadX 10995 258048 4096 4096 NT_STATUS_OK
ReadX 10995 323584 4096 4096 NT_STATUS_OK
ReadX 10995 389120 4096 4096 NT_STATUS_OK
ReadX 10995 454656 4096 4096 NT_STATUS_OK
ReadX 10995 520192 4096 4096 NT_STATUS_OK
WriteX 10995 0 65536 65536 NT_STATUS_OK
WriteX 10995 65536 65536 65536 NT_STATUS_OK
WriteX 10995 131072 65536 65536 NT_STATUS_OK
WriteX 10995 196608 65536 65536 NT_STATUS_OK
WriteX 10995 262144 65536 65536 NT_STATUS_OK
WriteX 10995 327680 65536 65536 NT_STATUS_OK
WriteX 10995 393216 65536 65536 NT_STATUS_OK
WriteX 10995 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10996 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10996 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10996 8192 4096 4096 NT_STATUS_OK
ReadX 10996 12288 4096 4096 NT_STATUS_OK
ReadX 10996 16384 4096 4096 NT_STATUS_OK
ReadX 10996 20480 4096 4096 NT_STATUS_OK
ReadX 10996 24576 4096 4096 NT_STATUS_OK
ReadX 10996 28672 4096 4096 NT_STATUS_OK
ReadX 10996 32768 4096 4096 NT_STATUS_OK
ReadX 10996 36864 4096 4096 NT_STATUS_OK
ReadX 10996 40960 4096 4096 NT_STATUS_OK
ReadX 10996 45056 4096 4096 NT_STATUS_OK
ReadX 10996 49152 4096 4096 NT_STATUS_OK
ReadX 10996 53248 4096 4096 NT_STATUS_OK
ReadX 10996 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10996 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10999 NT_STATUS_OK
WriteX 10999 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10999 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10999 1004 NT_STATUS_OK
WriteX 10999 0 57088 57088 NT_STATUS_OK
WriteX 10999 0 4096 4096 NT_STATUS_OK
Flush 10999 NT_STATUS_OK
Close 10996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11000 NT_STATUS_OK
SET_FILE_INFORMATION 11000 1004 NT_STATUS_OK
Close 11000 NT_STATUS_OK
SET_FILE_INFORMATION 10999 1004 NT_STATUS_OK
WriteX 10999 0 4096 4096 NT_STATUS_OK
Close 10999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11001 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11003 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11004 NT_STATUS_OK
WriteX 11004 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11004 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11004 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11004 1004 NT_STATUS_OK
WriteX 11004 0 51456 51456 NT_STATUS_OK
WriteX 11004 0 4096 4096 NT_STATUS_OK
Flush 11004 NT_STATUS_OK
SET_FILE_INFORMATION 11004 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11004 1004 NT_STATUS_OK
WriteX 11004 0 4096 4096 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11008 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11010 NT_STATUS_OK
Close 11010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11013 NT_STATUS_OK
WriteX 11013 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 53077 53077 NT_STATUS_OK
Close 11013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11014 NT_STATUS_OK
WriteX 11014 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11014 1004 NT_STATUS_OK
WriteX 11014 0 65536 65536 NT_STATUS_OK
WriteX 11014 65536 1856 1856 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Flush 11014 NT_STATUS_OK
SET_FILE_INFORMATION 11014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11014 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11016 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11023 NT_STATUS_OK
WriteX 11023 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11023 258 NT_STATUS_OK
WriteX 11023 0 7983 7983 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11028 NT_STATUS_OK
WriteX 11028 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 258 NT_STATUS_OK
WriteX 11028 0 65536 65536 NT_STATUS_OK
WriteX 11028 65536 65536 65536 NT_STATUS_OK
WriteX 11028 131072 65536 65536 NT_STATUS_OK
WriteX 11028 196608 65536 65536 NT_STATUS_OK
WriteX 11028 262144 65536 65536 NT_STATUS_OK
WriteX 11028 327680 65536 65536 NT_STATUS_OK
WriteX 11028 393216 65536 65536 NT_STATUS_OK
WriteX 11028 458752 46731 46731 NT_STATUS_OK
Close 11028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11029 NT_STATUS_OK
WriteX 11029 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11018 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
WriteX 11029 0 65536 65536 NT_STATUS_OK
WriteX 11029 65536 22848 22848 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11033 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
Close 11033 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11034 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11034 1004 NT_STATUS_OK
ReadX 11034 8192 4096 4096 NT_STATUS_OK
ReadX 11034 12288 4096 4096 NT_STATUS_OK
ReadX 11034 16384 4096 4096 NT_STATUS_OK
ReadX 11034 20480 4096 4096 NT_STATUS_OK
ReadX 11034 24576 4096 4096 NT_STATUS_OK
ReadX 11034 28672 4096 4096 NT_STATUS_OK
ReadX 11034 32768 4096 4096 NT_STATUS_OK
ReadX 11034 36864 4096 4096 NT_STATUS_OK
ReadX 11034 40960 4096 4096 NT_STATUS_OK
ReadX 11034 45056 4096 4096 NT_STATUS_OK
ReadX 11034 49152 4096 4096 NT_STATUS_OK
ReadX 11034 53248 4096 4096 NT_STATUS_OK
ReadX 11034 57344 4096 4096 NT_STATUS_OK
ReadX 11034 61440 4096 4096 NT_STATUS_OK
ReadX 11034 65536 4096 4096 NT_STATUS_OK
ReadX 11034 69632 4096 4096 NT_STATUS_OK
ReadX 11034 73728 4096 4096 NT_STATUS_OK
ReadX 11034 77824 4096 4096 NT_STATUS_OK
ReadX 11034 81920 4096 4096 NT_STATUS_OK
ReadX 11034 86016 4096 4096 NT_STATUS_OK
ReadX 11034 90112 4096 4096 NT_STATUS_OK
ReadX 11034 94208 4096 4096 NT_STATUS_OK
ReadX 11034 98304 4096 4096 NT_STATUS_OK
ReadX 11034 102400 4096 4096 NT_STATUS_OK
ReadX 11034 106496 4096 4096 NT_STATUS_OK
ReadX 11034 110592 4096 4096 NT_STATUS_OK
ReadX 11034 114688 4096 4096 NT_STATUS_OK
ReadX 11034 118784 4096 4096 NT_STATUS_OK
ReadX 11034 122880 4096 4096 NT_STATUS_OK
ReadX 11034 126976 4096 4096 NT_STATUS_OK
ReadX 11034 131072 4096 4096 NT_STATUS_OK
ReadX 11034 135168 4096 4096 NT_STATUS_OK
ReadX 11034 139264 4096 4096 NT_STATUS_OK
ReadX 11034 143360 4096 4096 NT_STATUS_OK
ReadX 11034 147456 4096 4096 NT_STATUS_OK
ReadX 11034 151552 4096 4096 NT_STATUS_OK
ReadX 11034 155648 4096 4096 NT_STATUS_OK
ReadX 11034 159744 4096 4096 NT_STATUS_OK
ReadX 11034 163840 4096 4096 NT_STATUS_OK
ReadX 11034 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11034 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11035 NT_STATUS_OK
Close 11035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11037 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
Close 11034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11038 NT_STATUS_OK
SET_FILE_INFORMATION 11038 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
WriteX 11037 0 42388 42388 NT_STATUS_OK
Close 11037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11041 NT_STATUS_OK
ReadX 11041 0 4096 4096 NT_STATUS_OK
ReadX 11041 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11042 NT_STATUS_OK
WriteX 11042 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11042 258 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
WriteX 11042 0 42652 42652 NT_STATUS_OK
Close 11042 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11044 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
ReadX 11046 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11048 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11051 NT_STATUS_OK
WriteX 11051 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11051 258 NT_STATUS_OK
WriteX 11051 0 65536 65536 NT_STATUS_OK
WriteX 11051 65536 49 49 NT_STATUS_OK
Close 11051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 0 61440 61440 NT_STATUS_OK
ReadX 11052 61440 4096 4096 NT_STATUS_OK
ReadX 11052 65536 61440 61440 NT_STATUS_OK
ReadX 11052 126976 4096 4096 NT_STATUS_OK
ReadX 11052 131072 61440 61440 NT_STATUS_OK
ReadX 11052 192512 4096 4096 NT_STATUS_OK
ReadX 11052 196608 61440 61440 NT_STATUS_OK
ReadX 11052 258048 4096 4096 NT_STATUS_OK
ReadX 11052 262144 61440 61440 NT_STATUS_OK
ReadX 11052 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 61440 61440 NT_STATUS_OK
ReadX 11053 61440 4096 4096 NT_STATUS_OK
ReadX 11053 65536 61440 61440 NT_STATUS_OK
ReadX 11053 126976 4096 4096 NT_STATUS_OK
ReadX 11053 131072 61440 61440 NT_STATUS_OK
ReadX 11053 192512 4096 4096 NT_STATUS_OK
ReadX 11053 196608 61440 61440 NT_STATUS_OK
ReadX 11053 258048 4096 4096 NT_STATUS_OK
ReadX 11053 262144 61440 61440 NT_STATUS_OK
ReadX 11053 323584 4096 4096 NT_STATUS_OK
ReadX 11053 327680 61440 61440 NT_STATUS_OK
ReadX 11053 389120 4096 4096 NT_STATUS_OK
ReadX 11053 393216 61440 61440 NT_STATUS_OK
ReadX 11053 454656 4096 4096 NT_STATUS_OK
ReadX 11053 458752 61440 61440 NT_STATUS_OK
ReadX 11053 520192 4096 4096 NT_STATUS_OK
ReadX 11053 524288 61440 61440 NT_STATUS_OK
ReadX 11053 585728 4096 4096 NT_STATUS_OK
ReadX 11053 589824 61440 61440 NT_STATUS_OK
ReadX 11053 651264 4096 4096 NT_STATUS_OK
ReadX 11053 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 61440 61440 NT_STATUS_OK
ReadX 11054 61440 4096 4096 NT_STATUS_OK
ReadX 11054 65536 61440 61440 NT_STATUS_OK
ReadX 11054 126976 4096 4096 NT_STATUS_OK
ReadX 11054 131072 61440 61440 NT_STATUS_OK
ReadX 11054 192512 4096 4096 NT_STATUS_OK
ReadX 11054 196608 61440 61440 NT_STATUS_OK
ReadX 11054 258048 4096 4096 NT_STATUS_OK
ReadX 11054 262144 61440 61440 NT_STATUS_OK
ReadX 11054 323584 4096 4096 NT_STATUS_OK
ReadX 11054 327680 61440 61440 NT_STATUS_OK
ReadX 11054 389120 4096 4096 NT_STATUS_OK
ReadX 11054 393216 61440 61440 NT_STATUS_OK
ReadX 11054 454656 4096 4096 NT_STATUS_OK
ReadX 11054 458752 61440 61440 NT_STATUS_OK
ReadX 11054 520192 4096 4096 NT_STATUS_OK
ReadX 11054 524288 61440 61440 NT_STATUS_OK
ReadX 11054 585728 4096 4096 NT_STATUS_OK
ReadX 11054 589824 61440 61440 NT_STATUS_OK
ReadX 11054 651264 4096 4096 NT_STATUS_OK
ReadX 11054 655360 61440 61440 NT_STATUS_OK
ReadX 11054 716800 4096 4096 NT_STATUS_OK
ReadX 11054 720896 61440 61440 NT_STATUS_OK
ReadX 11054 782336 4096 4096 NT_STATUS_OK
ReadX 11054 786432 61440 61440 NT_STATUS_OK
ReadX 11054 847872 4096 4096 NT_STATUS_OK
ReadX 11054 851968 61440 61440 NT_STATUS_OK
ReadX 11054 913408 4096 4096 NT_STATUS_OK
ReadX 11054 917504 61440 61440 NT_STATUS_OK
ReadX 11054 978944 4096 4096 NT_STATUS_OK
ReadX 11054 983040 61440 61440 NT_STATUS_OK
ReadX 11054 1044480 4096 4096 NT_STATUS_OK
ReadX 11054 1048576 61440 61440 NT_STATUS_OK
ReadX 11054 1110016 4096 4096 NT_STATUS_OK
ReadX 11054 1114112 61440 61440 NT_STATUS_OK
ReadX 11054 1175552 4096 4096 NT_STATUS_OK
ReadX 11054 1179648 61440 61440 NT_STATUS_OK
ReadX 11054 1241088 4096 4096 NT_STATUS_OK
ReadX 11054 1245184 61440 61440 NT_STATUS_OK
ReadX 11054 1306624 4096 4096 NT_STATUS_OK
ReadX 11054 1310720 61440 61440 NT_STATUS_OK
ReadX 11054 1372160 4096 4096 NT_STATUS_OK
ReadX 11054 1376256 61440 61440 NT_STATUS_OK
ReadX 11054 1437696 4096 4096 NT_STATUS_OK
ReadX 11054 1441792 61440 61440 NT_STATUS_OK
ReadX 11054 1503232 4096 4096 NT_STATUS_OK
ReadX 11054 1507328 61440 61440 NT_STATUS_OK
ReadX 11054 1568768 4096 4096 NT_STATUS_OK
ReadX 11054 1572864 61440 61440 NT_STATUS_OK
ReadX 11054 1634304 4096 4096 NT_STATUS_OK
ReadX 11054 1638400 61440 61440 NT_STATUS_OK
ReadX 11054 1699840 4096 4096 NT_STATUS_OK
ReadX 11054 1703936 61440 61440 NT_STATUS_OK
ReadX 11054 1765376 4096 4096 NT_STATUS_OK
ReadX 11054 1769472 61440 61440 NT_STATUS_OK
ReadX 11054 1830912 4096 4096 NT_STATUS_OK
ReadX 11054 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11056 NT_STATUS_OK
QUERY_FILE_INFORMATION 11056 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11056 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11056 1005 NT_STATUS_OK
ReadX 11056 2156 24 24 NT_STATUS_OK
ReadX 11056 2139 276 276 NT_STATUS_OK
ReadX 11056 2136 14 14 NT_STATUS_OK
ReadX 11056 2136 7 7 NT_STATUS_OK
ReadX 11056 2138 12 12 NT_STATUS_OK
ReadX 11056 2137 8 8 NT_STATUS_OK
ReadX 11056 2135 15 15 NT_STATUS_OK
ReadX 11056 0 16 16 NT_STATUS_OK
ReadX 11056 16 2048 2048 NT_STATUS_OK
ReadX 11056 2064 2048 2048 NT_STATUS_OK
ReadX 11056 257 2048 2048 NT_STATUS_OK
ReadX 11056 385 2048 2048 NT_STATUS_OK
ReadX 11056 513 2048 2048 NT_STATUS_OK
ReadX 11056 641 2048 2048 NT_STATUS_OK
ReadX 11056 769 2048 2048 NT_STATUS_OK
ReadX 11056 897 2048 2048 NT_STATUS_OK
ReadX 11056 1025 2048 2048 NT_STATUS_OK
ReadX 11056 1153 2048 2048 NT_STATUS_OK
ReadX 11056 1281 2048 2048 NT_STATUS_OK
ReadX 11056 1409 2048 2048 NT_STATUS_OK
ReadX 11056 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11061 NT_STATUS_OK
WriteX 11061 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11061 258 NT_STATUS_OK
WriteX 11061 0 10575 10575 NT_STATUS_OK
Flush 11061 NT_STATUS_OK
Close 11061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11062 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11066 NT_STATUS_OK
LockX 11066 2147483538 1 NT_STATUS_OK
UnlockX 11066 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11066 1005 NT_STATUS_OK
ReadX 11066 0 512 512 NT_STATUS_OK
ReadX 11066 512 512 512 NT_STATUS_OK
ReadX 11066 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11066 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11066 1004 NT_STATUS_OK
Close 11066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11067 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 1005 NT_STATUS_OK
ReadX 11067 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11068 NT_STATUS_OK
LockX 11068 2147483538 1 NT_STATUS_OK
UnlockX 11068 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11068 1005 NT_STATUS_OK
ReadX 11068 0 512 512 NT_STATUS_OK
ReadX 11068 512 512 512 NT_STATUS_OK
ReadX 11068 1024 512 512 NT_STATUS_OK
ReadX 11068 288 20 20 NT_STATUS_OK
ReadX 11068 308 2084 2084 NT_STATUS_OK
ReadX 11068 388 2084 2084 NT_STATUS_OK
ReadX 11068 388 2084 2084 NT_STATUS_OK
ReadX 11055 2157 1386 1386 NT_STATUS_OK
ReadX 11068 2472 399 399 NT_STATUS_OK
ReadX 11068 3072 1536 1536 NT_STATUS_OK
ReadX 11068 544 149 149 NT_STATUS_OK
ReadX 11068 693 485 485 NT_STATUS_OK
Close 11068 NT_STATUS_OK
ReadX 11055 2157 4096 4096 NT_STATUS_OK
ReadX 11055 6253 4096 4096 NT_STATUS_OK
ReadX 11055 10349 4096 4096 NT_STATUS_OK
ReadX 11055 14445 4096 4096 NT_STATUS_OK
ReadX 11055 18541 4096 4096 NT_STATUS_OK
ReadX 11055 22637 256 256 NT_STATUS_OK
ReadX 11055 22893 4096 4096 NT_STATUS_OK
ReadX 11055 26989 4096 4096 NT_STATUS_OK
ReadX 11055 31085 4096 4096 NT_STATUS_OK
ReadX 11055 35181 4096 4096 NT_STATUS_OK
ReadX 11055 39277 4096 4096 NT_STATUS_OK
ReadX 11055 43373 4096 4096 NT_STATUS_OK
ReadX 11055 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11055 2157 1024 1024 NT_STATUS_OK
ReadX 11055 1667 4688 4688 NT_STATUS_OK
ReadX 11055 6355 3516 3516 NT_STATUS_OK
ReadX 11055 9871 16384 16384 NT_STATUS_OK
ReadX 11055 26255 3771 3771 NT_STATUS_OK
ReadX 11055 30026 2048 2048 NT_STATUS_OK
ReadX 11055 32074 1024 1024 NT_STATUS_OK
ReadX 11055 33098 6652 6652 NT_STATUS_OK
ReadX 11055 39750 16384 16384 NT_STATUS_OK
ReadX 11055 56134 10496 10496 NT_STATUS_OK
ReadX 11055 66630 1784 1784 NT_STATUS_OK
ReadX 11055 68414 90 90 NT_STATUS_OK
ReadX 11055 68504 273 273 NT_STATUS_OK
ReadX 11055 68777 1600 1600 NT_STATUS_OK
ReadX 11055 70377 640 640 NT_STATUS_OK
ReadX 11055 71017 1280 1280 NT_STATUS_OK
ReadX 11055 72297 8464 8464 NT_STATUS_OK
ReadX 11055 80761 158 158 NT_STATUS_OK
ReadX 11055 80919 912 912 NT_STATUS_OK
ReadX 11055 81831 1980 1980 NT_STATUS_OK
ReadX 11055 83811 2256 2256 NT_STATUS_OK
ReadX 11055 86067 400 400 NT_STATUS_OK
ReadX 11055 86467 252 252 NT_STATUS_OK
ReadX 11055 86719 42 42 NT_STATUS_OK
ReadX 11055 86761 725 725 NT_STATUS_OK
ReadX 11055 2009 512 512 NT_STATUS_OK
ReadX 11055 3895 9 9 NT_STATUS_OK
ReadX 11055 3781 46 46 NT_STATUS_OK
ReadX 11055 4059 92 92 NT_STATUS_OK
ReadX 11055 3781 92 92 NT_STATUS_OK
ReadX 11055 3986 184 184 NT_STATUS_OK
ReadX 11055 3987 16384 16384 NT_STATUS_OK
ReadX 11055 3902 16384 16384 NT_STATUS_OK
ReadX 11055 3781 10240 10240 NT_STATUS_OK
ReadX 11055 3821 16384 16384 NT_STATUS_OK
ReadX 11055 3891 935 935 NT_STATUS_OK
ReadX 11055 4060 10240 10240 NT_STATUS_OK
ReadX 11055 4059 184 184 NT_STATUS_OK
ReadX 11055 256 184 184 NT_STATUS_OK
ReadX 11055 256 1026 1026 NT_STATUS_OK
ReadX 11055 3901 326 326 NT_STATUS_OK
ReadX 11055 3899 652 652 NT_STATUS_OK
ReadX 11055 256 2 2 NT_STATUS_OK
ReadX 11055 258 4948 4948 NT_STATUS_OK
Close 11055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11070 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11073 NT_STATUS_OK
WriteX 11073 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
WriteX 11073 0 65536 65536 NT_STATUS_OK
WriteX 11073 65536 65536 65536 NT_STATUS_OK
WriteX 11073 131072 65536 65536 NT_STATUS_OK
WriteX 11073 196608 65536 65536 NT_STATUS_OK
WriteX 11073 262144 65536 65536 NT_STATUS_OK
WriteX 11073 327680 65536 65536 NT_STATUS_OK
WriteX 11073 393216 65536 65536 NT_STATUS_OK
WriteX 11073 458752 65536 65536 NT_STATUS_OK
WriteX 11073 524288 65536 65536 NT_STATUS_OK
WriteX 11073 589824 35257 35257 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11078 NT_STATUS_OK
WriteX 11078 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 258 NT_STATUS_OK
WriteX 11078 0 65536 65536 NT_STATUS_OK
WriteX 11078 65536 65536 65536 NT_STATUS_OK
WriteX 11078 131072 65536 65536 NT_STATUS_OK
WriteX 11078 196608 65536 65536 NT_STATUS_OK
WriteX 11078 262144 65536 65536 NT_STATUS_OK
WriteX 11078 327680 65536 65536 NT_STATUS_OK
WriteX 11078 393216 65536 65536 NT_STATUS_OK
WriteX 11078 458752 65536 65536 NT_STATUS_OK
WriteX 11078 524288 65536 65536 NT_STATUS_OK
WriteX 11078 589824 57598 57598 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11080 NT_STATUS_OK
WriteX 11080 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11080 258 NT_STATUS_OK
WriteX 11080 0 12543 12543 NT_STATUS_OK
Flush 11080 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11082 NT_STATUS_OK
Close 11082 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11086 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 1005 NT_STATUS_OK
ReadX 11086 1938 24 24 NT_STATUS_OK
ReadX 11086 1920 276 276 NT_STATUS_OK
ReadX 11086 1918 14 14 NT_STATUS_OK
ReadX 11086 1918 7 7 NT_STATUS_OK
ReadX 11086 1919 12 12 NT_STATUS_OK
ReadX 11086 1919 8 8 NT_STATUS_OK
ReadX 11086 1917 15 15 NT_STATUS_OK
ReadX 11086 0 16 16 NT_STATUS_OK
ReadX 11086 16 2048 2048 NT_STATUS_OK
ReadX 11086 2064 2048 2048 NT_STATUS_OK
ReadX 11086 257 2048 2048 NT_STATUS_OK
ReadX 11086 385 2048 2048 NT_STATUS_OK
ReadX 11086 513 2048 2048 NT_STATUS_OK
ReadX 11086 641 2048 2048 NT_STATUS_OK
ReadX 11086 769 2048 2048 NT_STATUS_OK
ReadX 11086 897 2048 2048 NT_STATUS_OK
ReadX 11086 1025 2048 2048 NT_STATUS_OK
ReadX 11086 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11088 NT_STATUS_OK
Close 11088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11091 NT_STATUS_OK
WriteX 11091 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11091 258 NT_STATUS_OK
WriteX 11091 0 11588 11588 NT_STATUS_OK
Flush 11091 NT_STATUS_OK
Close 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11092 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11096 NT_STATUS_OK
WriteX 11096 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11096 258 NT_STATUS_OK
WriteX 11096 0 11615 11615 NT_STATUS_OK
Flush 11096 NT_STATUS_OK
Close 11096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11105 NT_STATUS_OK
WriteX 11105 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11105 258 NT_STATUS_OK
WriteX 11105 0 65536 65536 NT_STATUS_OK
WriteX 11105 65536 16050 16050 NT_STATUS_OK
Close 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11085 1939 64 64 NT_STATUS_OK
ReadX 11085 128 248 248 NT_STATUS_OK
ReadX 11085 128 568 568 NT_STATUS_OK
ReadX 11085 3872 1536 1536 NT_STATUS_OK
ReadX 11085 3456 2560 2560 NT_STATUS_OK
ReadX 11085 3136 512 512 NT_STATUS_OK
ReadX 11085 2880 4096 4096 NT_STATUS_OK
ReadX 11085 3264 3072 3072 NT_STATUS_OK
ReadX 11085 320 4096 4096 NT_STATUS_OK
ReadX 11085 1024 4096 4096 NT_STATUS_OK
ReadX 11085 3616 4096 4096 NT_STATUS_OK
ReadX 11085 1939 64 64 NT_STATUS_OK
ReadX 11085 128 248 248 NT_STATUS_OK
ReadX 11085 128 608 608 NT_STATUS_OK
ReadX 11085 2858 1024 1024 NT_STATUS_OK
ReadX 11085 2810 4096 4096 NT_STATUS_OK
ReadX 11085 2826 4096 4096 NT_STATUS_OK
ReadX 11085 2580 2048 2048 NT_STATUS_OK
ReadX 11085 2800 2560 2560 NT_STATUS_OK
ReadX 11085 2100 4096 4096 NT_STATUS_OK
ReadX 11085 2084 4096 4096 NT_STATUS_OK
ReadX 11085 868 4096 4096 NT_STATUS_OK
ReadX 11085 2324 4096 4096 NT_STATUS_OK
ReadX 11085 884 4096 4096 NT_STATUS_OK
ReadX 11085 2604 1024 1024 NT_STATUS_OK
ReadX 11085 580 4096 4096 NT_STATUS_OK
ReadX 11085 596 4096 4096 NT_STATUS_OK
ReadX 11085 2752 4096 4096 NT_STATUS_OK
ReadX 11085 2842 1024 1024 NT_STATUS_OK
ReadX 11085 660 4096 4096 NT_STATUS_OK
ReadX 11085 2720 4096 4096 NT_STATUS_OK
ReadX 11085 2736 4096 4096 NT_STATUS_OK
ReadX 11085 628 4096 4096 NT_STATUS_OK
ReadX 11085 2704 4096 4096 NT_STATUS_OK
ReadX 11085 1556 4096 4096 NT_STATUS_OK
ReadX 11085 576 4096 4096 NT_STATUS_OK
ReadX 11085 3168 1536 1536 NT_STATUS_OK
ReadX 11085 832 4096 4096 NT_STATUS_OK
ReadX 11085 1088 4096 4096 NT_STATUS_OK
ReadX 11085 1344 4096 4096 NT_STATUS_OK
ReadX 11085 1600 4096 4096 NT_STATUS_OK
ReadX 11085 1856 4096 4096 NT_STATUS_OK
ReadX 11085 2112 4096 4096 NT_STATUS_OK
ReadX 11085 1892 4096 4096 NT_STATUS_OK
ReadX 11085 820 4096 4096 NT_STATUS_OK
ReadX 11085 788 4096 4096 NT_STATUS_OK
ReadX 11085 1604 4096 4096 NT_STATUS_OK
ReadX 11085 3648 4096 4096 NT_STATUS_OK
ReadX 11085 2608 4096 4096 NT_STATUS_OK
ReadX 11085 548 4096 4096 NT_STATUS_OK
ReadX 11085 740 4096 4096 NT_STATUS_OK
ReadX 11085 1344 4096 4096 NT_STATUS_OK
ReadX 11085 3392 4096 4096 NT_STATUS_OK
ReadX 11085 3904 4096 4096 NT_STATUS_OK
ReadX 11085 644 4096 4096 NT_STATUS_OK
ReadX 11085 676 4096 4096 NT_STATUS_OK
ReadX 11085 2688 4096 4096 NT_STATUS_OK
ReadX 11085 320 4096 4096 NT_STATUS_OK
ReadX 11085 900 4096 4096 NT_STATUS_OK
ReadX 11085 1908 4096 4096 NT_STATUS_OK
ReadX 11085 852 4096 4096 NT_STATUS_OK
ReadX 11085 724 4096 4096 NT_STATUS_OK
ReadX 11085 2292 4096 4096 NT_STATUS_OK
ReadX 11085 612 4096 4096 NT_STATUS_OK
ReadX 11085 388 4096 4096 NT_STATUS_OK
ReadX 11085 2368 4096 4096 NT_STATUS_OK
ReadX 11085 2624 4096 4096 NT_STATUS_OK
ReadX 11085 500 4096 4096 NT_STATUS_OK
ReadX 11085 356 4096 4096 NT_STATUS_OK
ReadX 11085 1024 4096 4096 NT_STATUS_OK
ReadX 11085 576 4096 4096 NT_STATUS_OK
ReadX 11085 340 4096 4096 NT_STATUS_OK
ReadX 11085 420 4096 4096 NT_STATUS_OK
ReadX 11085 1600 4096 4096 NT_STATUS_OK
ReadX 11085 404 4096 4096 NT_STATUS_OK
ReadX 11085 1428 4096 4096 NT_STATUS_OK
ReadX 11085 2656 4096 4096 NT_STATUS_OK
ReadX 11085 2624 4096 4096 NT_STATUS_OK
ReadX 11085 452 4096 4096 NT_STATUS_OK
ReadX 11085 692 4096 4096 NT_STATUS_OK
ReadX 11085 564 4096 4096 NT_STATUS_OK
ReadX 11085 372 4096 4096 NT_STATUS_OK
ReadX 11085 468 4096 4096 NT_STATUS_OK
ReadX 11085 484 4096 4096 NT_STATUS_OK
ReadX 11085 1088 4096 4096 NT_STATUS_OK
ReadX 11085 1924 4096 4096 NT_STATUS_OK
ReadX 11085 2768 4096 4096 NT_STATUS_OK
ReadX 11085 832 4096 4096 NT_STATUS_OK
ReadX 11085 836 4096 4096 NT_STATUS_OK
ReadX 11085 1856 4096 4096 NT_STATUS_OK
ReadX 11085 2640 4096 4096 NT_STATUS_OK
ReadX 11085 436 4096 4096 NT_STATUS_OK
ReadX 11085 1828 4096 4096 NT_STATUS_OK
ReadX 11085 804 4096 4096 NT_STATUS_OK
ReadX 11085 1860 4096 4096 NT_STATUS_OK
ReadX 11085 1812 4096 4096 NT_STATUS_OK
ReadX 11085 756 4096 4096 NT_STATUS_OK
ReadX 11085 1636 4096 4096 NT_STATUS_OK
ReadX 11085 772 4096 4096 NT_STATUS_OK
ReadX 11085 2036 4096 4096 NT_STATUS_OK
ReadX 11085 1220 4096 4096 NT_STATUS_OK
ReadX 11085 1652 4096 4096 NT_STATUS_OK
ReadX 11085 2588 4096 4096 NT_STATUS_OK
ReadX 11085 916 4096 4096 NT_STATUS_OK
ReadX 11085 260 4096 4096 NT_STATUS_OK
ReadX 11085 932 4096 4096 NT_STATUS_OK
ReadX 11085 2624 4096 4096 NT_STATUS_OK
ReadX 11085 308 4096 4096 NT_STATUS_OK
ReadX 11085 292 4096 4096 NT_STATUS_OK
ReadX 11085 1140 4096 4096 NT_STATUS_OK
ReadX 11085 276 4096 4096 NT_STATUS_OK
ReadX 11085 2020 4096 4096 NT_STATUS_OK
ReadX 11085 2880 4096 4096 NT_STATUS_OK
ReadX 11085 516 4096 4096 NT_STATUS_OK
ReadX 11085 1844 4096 4096 NT_STATUS_OK
ReadX 11085 1124 4096 4096 NT_STATUS_OK
ReadX 11085 3136 4096 4096 NT_STATUS_OK
ReadX 11085 324 4096 4096 NT_STATUS_OK
ReadX 11085 1156 4096 4096 NT_STATUS_OK
ReadX 11085 1172 4096 4096 NT_STATUS_OK
ReadX 11085 2112 4096 4096 NT_STATUS_OK
ReadX 11085 2368 4096 4096 NT_STATUS_OK
ReadX 11085 964 4096 4096 NT_STATUS_OK
ReadX 11085 980 4096 4096 NT_STATUS_OK
ReadX 11085 1012 4096 4096 NT_STATUS_OK
ReadX 11085 532 4096 4096 NT_STATUS_OK
ReadX 11085 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11085 1620 4096 4096 NT_STATUS_OK
ReadX 11085 1604 4096 4096 NT_STATUS_OK
ReadX 11085 2116 4096 4096 NT_STATUS_OK
ReadX 11085 2132 4096 4096 NT_STATUS_OK
ReadX 11085 2148 4096 4096 NT_STATUS_OK
ReadX 11085 2276 4096 4096 NT_STATUS_OK
ReadX 11085 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11110 NT_STATUS_OK
QUERY_FILE_INFORMATION 11065 1004 NT_STATUS_OK
Close 11065 NT_STATUS_OK
WriteX 11110 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11110 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 1004 NT_STATUS_OK
Close 11067 NT_STATUS_OK
WriteX 11110 0 65536 65536 NT_STATUS_OK
WriteX 11110 65536 64850 64850 NT_STATUS_OK
Close 11110 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11112 NT_STATUS_OK
WriteX 11112 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11112 258 NT_STATUS_OK
ReadX 11085 2068 4096 4096 NT_STATUS_OK
ReadX 11085 1588 4096 4096 NT_STATUS_OK
ReadX 11085 1572 4096 4096 NT_STATUS_OK
WriteX 11112 0 18630 18630 NT_STATUS_OK
Flush 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11114 NT_STATUS_OK
Close 11114 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11116 NT_STATUS_OK
ReadX 11116 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11085 612 4096 4096 NT_STATUS_OK
ReadX 11085 564 4096 4096 NT_STATUS_OK
ReadX 11085 1876 4096 4096 NT_STATUS_OK
ReadX 11085 628 4096 4096 NT_STATUS_OK
ReadX 11085 740 4096 4096 NT_STATUS_OK
ReadX 11085 724 4096 4096 NT_STATUS_OK
ReadX 11085 644 4096 4096 NT_STATUS_OK
ReadX 11085 2324 4096 4096 NT_STATUS_OK
ReadX 11085 660 4096 4096 NT_STATUS_OK
ReadX 11085 852 4096 4096 NT_STATUS_OK
ReadX 11085 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11085 2368 4096 4096 NT_STATUS_OK
ReadX 11085 1024 4096 4096 NT_STATUS_OK
ReadX 11085 320 4096 4096 NT_STATUS_OK
ReadX 11085 580 4096 4096 NT_STATUS_OK
ReadX 11085 3136 512 512 NT_STATUS_OK
ReadX 11085 2880 4096 4096 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11117 NT_STATUS_OK
ReadX 11117 61440 4096 4096 NT_STATUS_OK
ReadX 11117 126976 4096 4096 NT_STATUS_OK
WriteX 11117 0 65536 65536 NT_STATUS_OK
WriteX 11117 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11118 NT_STATUS_OK
ReadX 11118 61440 4096 4096 NT_STATUS_OK
ReadX 11118 126976 4096 4096 NT_STATUS_OK
ReadX 11118 192512 4096 4096 NT_STATUS_OK
ReadX 11118 258048 4096 4096 NT_STATUS_OK
WriteX 11118 0 65536 65536 NT_STATUS_OK
WriteX 11118 65536 65536 65536 NT_STATUS_OK
WriteX 11118 131072 65536 65536 NT_STATUS_OK
WriteX 11118 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 61440 4096 4096 NT_STATUS_OK
ReadX 11119 126976 4096 4096 NT_STATUS_OK
ReadX 11119 192512 4096 4096 NT_STATUS_OK
ReadX 11119 258048 4096 4096 NT_STATUS_OK
ReadX 11119 323584 4096 4096 NT_STATUS_OK
ReadX 11119 389120 4096 4096 NT_STATUS_OK
ReadX 11119 454656 4096 4096 NT_STATUS_OK
ReadX 11119 520192 4096 4096 NT_STATUS_OK
WriteX 11119 0 65536 65536 NT_STATUS_OK
WriteX 11119 65536 65536 65536 NT_STATUS_OK
WriteX 11119 131072 65536 65536 NT_STATUS_OK
WriteX 11119 196608 65536 65536 NT_STATUS_OK
WriteX 11119 262144 65536 65536 NT_STATUS_OK
WriteX 11119 327680 65536 65536 NT_STATUS_OK
WriteX 11119 393216 65536 65536 NT_STATUS_OK
WriteX 11119 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11121 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11122 NT_STATUS_OK
WriteX 11122 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11122 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11120 0 8192 8192 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11120 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11120 0 8192 8192 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11120 0 8192 8192 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11120 0 8192 8192 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11124 NT_STATUS_OK
Close 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Close 11084 NT_STATUS_OK
Close 11117 NT_STATUS_OK
Close 11118 NT_STATUS_OK
Close 11119 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11127 NT_STATUS_OK
WriteX 11127 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11127 258 NT_STATUS_OK
WriteX 11127 0 62591 62591 NT_STATUS_OK
Close 11127 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11129 NT_STATUS_OK
Close 11129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11132 NT_STATUS_OK
WriteX 11132 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11132 258 NT_STATUS_OK
WriteX 11132 0 10845 10845 NT_STATUS_OK
Close 11132 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11137 NT_STATUS_OK
WriteX 11137 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 258 NT_STATUS_OK
WriteX 11137 0 30118 30118 NT_STATUS_OK
Close 11137 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11122 0 64 64 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 61440 61440 NT_STATUS_OK
ReadX 11139 61440 4096 4096 NT_STATUS_OK
ReadX 11139 65536 61440 61440 NT_STATUS_OK
ReadX 11139 126976 4096 4096 NT_STATUS_OK
ReadX 11139 131072 61440 61440 NT_STATUS_OK
ReadX 11139 192512 4096 4096 NT_STATUS_OK
ReadX 11139 196608 61440 61440 NT_STATUS_OK
ReadX 11139 258048 4096 4096 NT_STATUS_OK
ReadX 11139 262144 61440 61440 NT_STATUS_OK
ReadX 11139 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 61440 61440 NT_STATUS_OK
ReadX 11140 61440 4096 4096 NT_STATUS_OK
ReadX 11140 65536 61440 61440 NT_STATUS_OK
ReadX 11140 126976 4096 4096 NT_STATUS_OK
ReadX 11140 131072 61440 61440 NT_STATUS_OK
ReadX 11140 192512 4096 4096 NT_STATUS_OK
ReadX 11140 196608 61440 61440 NT_STATUS_OK
ReadX 11140 258048 4096 4096 NT_STATUS_OK
ReadX 11140 262144 61440 61440 NT_STATUS_OK
ReadX 11140 323584 4096 4096 NT_STATUS_OK
ReadX 11140 327680 61440 61440 NT_STATUS_OK
ReadX 11140 389120 4096 4096 NT_STATUS_OK
ReadX 11140 393216 61440 61440 NT_STATUS_OK
ReadX 11140 454656 4096 4096 NT_STATUS_OK
ReadX 11140 458752 61440 61440 NT_STATUS_OK
ReadX 11140 520192 4096 4096 NT_STATUS_OK
ReadX 11140 524288 61440 61440 NT_STATUS_OK
ReadX 11140 585728 4096 4096 NT_STATUS_OK
ReadX 11140 589824 61440 61440 NT_STATUS_OK
ReadX 11140 651264 4096 4096 NT_STATUS_OK
ReadX 11140 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 61440 61440 NT_STATUS_OK
ReadX 11141 61440 4096 4096 NT_STATUS_OK
ReadX 11141 65536 61440 61440 NT_STATUS_OK
ReadX 11141 126976 4096 4096 NT_STATUS_OK
ReadX 11141 131072 61440 61440 NT_STATUS_OK
ReadX 11141 192512 4096 4096 NT_STATUS_OK
ReadX 11141 196608 61440 61440 NT_STATUS_OK
ReadX 11141 258048 4096 4096 NT_STATUS_OK
ReadX 11141 262144 61440 61440 NT_STATUS_OK
ReadX 11141 323584 4096 4096 NT_STATUS_OK
ReadX 11141 327680 61440 61440 NT_STATUS_OK
ReadX 11141 389120 4096 4096 NT_STATUS_OK
ReadX 11141 393216 61440 61440 NT_STATUS_OK
ReadX 11141 454656 4096 4096 NT_STATUS_OK
ReadX 11141 458752 61440 61440 NT_STATUS_OK
ReadX 11141 520192 4096 4096 NT_STATUS_OK
ReadX 11141 524288 61440 61440 NT_STATUS_OK
ReadX 11141 585728 4096 4096 NT_STATUS_OK
ReadX 11141 589824 61440 61440 NT_STATUS_OK
ReadX 11141 651264 4096 4096 NT_STATUS_OK
ReadX 11141 655360 61440 61440 NT_STATUS_OK
ReadX 11141 716800 4096 4096 NT_STATUS_OK
ReadX 11141 720896 61440 61440 NT_STATUS_OK
ReadX 11141 782336 4096 4096 NT_STATUS_OK
ReadX 11141 786432 61440 61440 NT_STATUS_OK
ReadX 11141 847872 4096 4096 NT_STATUS_OK
ReadX 11141 851968 61440 61440 NT_STATUS_OK
ReadX 11141 913408 4096 4096 NT_STATUS_OK
ReadX 11141 917504 61440 61440 NT_STATUS_OK
ReadX 11141 978944 4096 4096 NT_STATUS_OK
ReadX 11141 983040 61440 61440 NT_STATUS_OK
ReadX 11141 1044480 4096 4096 NT_STATUS_OK
ReadX 11141 1048576 61440 61440 NT_STATUS_OK
ReadX 11141 1110016 4096 4096 NT_STATUS_OK
ReadX 11141 1114112 61440 61440 NT_STATUS_OK
ReadX 11141 1175552 4096 4096 NT_STATUS_OK
ReadX 11141 1179648 61440 61440 NT_STATUS_OK
ReadX 11141 1241088 4096 4096 NT_STATUS_OK
ReadX 11141 1245184 61440 61440 NT_STATUS_OK
ReadX 11141 1306624 4096 4096 NT_STATUS_OK
ReadX 11141 1310720 61440 61440 NT_STATUS_OK
ReadX 11141 1372160 4096 4096 NT_STATUS_OK
ReadX 11141 1376256 61440 61440 NT_STATUS_OK
ReadX 11141 1437696 4096 4096 NT_STATUS_OK
ReadX 11141 1441792 61440 61440 NT_STATUS_OK
ReadX 11141 1503232 4096 4096 NT_STATUS_OK
ReadX 11141 1507328 61440 61440 NT_STATUS_OK
ReadX 11141 1568768 4096 4096 NT_STATUS_OK
ReadX 11141 1572864 61440 61440 NT_STATUS_OK
ReadX 11141 1634304 4096 4096 NT_STATUS_OK
ReadX 11141 1638400 61440 61440 NT_STATUS_OK
ReadX 11141 1699840 4096 4096 NT_STATUS_OK
ReadX 11141 1703936 61440 61440 NT_STATUS_OK
ReadX 11141 1765376 4096 4096 NT_STATUS_OK
ReadX 11141 1769472 61440 61440 NT_STATUS_OK
ReadX 11141 1830912 4096 4096 NT_STATUS_OK
ReadX 11141 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
ReadX 11146 4096 4096 4096 NT_STATUS_OK
ReadX 11146 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Close 11145 NT_STATUS_OK
Close 11146 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11150 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11149 NT_STATUS_OK
Close 11150 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11154 NT_STATUS_OK
ReadX 11154 0 8192 8192 NT_STATUS_OK
ReadX 11154 8192 8192 8192 NT_STATUS_OK
ReadX 11154 16384 8192 8192 NT_STATUS_OK
ReadX 11154 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11153 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11159 NT_STATUS_OK
WriteX 11159 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 258 NT_STATUS_OK
WriteX 11159 0 10438 10438 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11160 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11163 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11165 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11166 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11167 NT_STATUS_OK
Close 11167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
ReadX 11168 4096 4096 4096 NT_STATUS_OK
ReadX 11168 8192 4096 4096 NT_STATUS_OK
ReadX 11168 12288 8192 8192 NT_STATUS_OK
ReadX 11168 20480 8192 8192 NT_STATUS_OK
ReadX 11168 28672 8192 8192 NT_STATUS_OK
ReadX 11168 36864 8192 8192 NT_STATUS_OK
ReadX 11168 45056 8192 8192 NT_STATUS_OK
ReadX 11168 53248 8192 8192 NT_STATUS_OK
ReadX 11168 61440 8192 8192 NT_STATUS_OK
ReadX 11168 69632 8192 8192 NT_STATUS_OK
ReadX 11168 77824 8192 8192 NT_STATUS_OK
ReadX 11168 86016 8192 8192 NT_STATUS_OK
ReadX 11168 94208 8192 8192 NT_STATUS_OK
ReadX 11168 102400 8192 8192 NT_STATUS_OK
ReadX 11168 110592 8192 8192 NT_STATUS_OK
ReadX 11168 118784 8192 8192 NT_STATUS_OK
ReadX 11168 126976 8192 8192 NT_STATUS_OK
ReadX 11168 135168 8192 8192 NT_STATUS_OK
ReadX 11168 143360 8192 8192 NT_STATUS_OK
ReadX 11168 151552 8192 8192 NT_STATUS_OK
ReadX 11168 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11173 NT_STATUS_OK
WriteX 11173 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11173 258 NT_STATUS_OK
WriteX 11173 0 28489 28489 NT_STATUS_OK
Close 11173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11174 NT_STATUS_OK
Close 11174 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11176 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 8192 8192 NT_STATUS_OK
ReadX 11180 8192 8192 8192 NT_STATUS_OK
ReadX 11180 16384 8192 8192 NT_STATUS_OK
ReadX 11180 24576 8192 8192 NT_STATUS_OK
ReadX 11180 32768 16384 16384 NT_STATUS_OK
ReadX 11180 49152 8192 8192 NT_STATUS_OK
ReadX 11180 57344 8192 8192 NT_STATUS_OK
ReadX 11180 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11185 NT_STATUS_OK
WriteX 11185 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
WriteX 11185 0 29253 29253 NT_STATUS_OK
Close 11185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11189 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11192 NT_STATUS_OK
WriteX 11192 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11192 258 NT_STATUS_OK
WriteX 11192 0 30183 30183 NT_STATUS_OK
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11195 NT_STATUS_OK
WriteX 11195 0 510 510 NT_STATUS_OK
WriteX 11195 510 512 512 NT_STATUS_OK
WriteX 11195 1022 510 510 NT_STATUS_OK
WriteX 11195 1532 510 510 NT_STATUS_OK
WriteX 11195 2042 168 168 NT_STATUS_OK
Close 11195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
WriteX 11198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 61440 4096 4096 NT_STATUS_OK
ReadX 11199 126976 4096 4096 NT_STATUS_OK
WriteX 11199 0 65536 65536 NT_STATUS_OK
WriteX 11199 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 61440 4096 4096 NT_STATUS_OK
ReadX 11200 126976 4096 4096 NT_STATUS_OK
ReadX 11200 192512 4096 4096 NT_STATUS_OK
ReadX 11200 258048 4096 4096 NT_STATUS_OK
WriteX 11200 0 65536 65536 NT_STATUS_OK
WriteX 11200 65536 65536 65536 NT_STATUS_OK
WriteX 11200 131072 65536 65536 NT_STATUS_OK
WriteX 11200 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 61440 4096 4096 NT_STATUS_OK
ReadX 11201 126976 4096 4096 NT_STATUS_OK
ReadX 11201 192512 4096 4096 NT_STATUS_OK
ReadX 11201 258048 4096 4096 NT_STATUS_OK
ReadX 11201 323584 4096 4096 NT_STATUS_OK
ReadX 11201 389120 4096 4096 NT_STATUS_OK
ReadX 11201 454656 4096 4096 NT_STATUS_OK
ReadX 11201 520192 4096 4096 NT_STATUS_OK
WriteX 11201 0 65536 65536 NT_STATUS_OK
WriteX 11201 65536 65536 65536 NT_STATUS_OK
WriteX 11201 131072 65536 65536 NT_STATUS_OK
WriteX 11201 196608 65536 65536 NT_STATUS_OK
WriteX 11201 262144 65536 65536 NT_STATUS_OK
WriteX 11201 327680 65536 65536 NT_STATUS_OK
WriteX 11201 393216 65536 65536 NT_STATUS_OK
WriteX 11201 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11198 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11204 NT_STATUS_OK
Close 11204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11213 NT_STATUS_OK
Close 11213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11217 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11231 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11256 NT_STATUS_OK
Close 11256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11264 NT_STATUS_OK
Close 11264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11270 NT_STATUS_OK
WriteX 11270 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11270 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11270 0 65536 65536 NT_STATUS_OK
WriteX 11270 65536 65536 65536 NT_STATUS_OK
WriteX 11270 131072 65536 65536 NT_STATUS_OK
WriteX 11270 196608 65536 65536 NT_STATUS_OK
WriteX 11270 262144 26634 26634 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
Close 11277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
ReadX 11278 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11286 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11288 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11292 NT_STATUS_OK
Close 11292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11321 NT_STATUS_OK
Close 11321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11330 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11340 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11343 NT_STATUS_OK
Close 11343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11345 NT_STATUS_OK
Close 11345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11355 NT_STATUS_OK
Close 11355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11357 NT_STATUS_OK
ReadX 11357 0 4096 4096 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
Close 11371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11372 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
Close 11372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11402 0 4096 4096 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11403 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
ReadX 11404 4096 4096 4096 NT_STATUS_OK
ReadX 11404 8192 4096 4096 NT_STATUS_OK
ReadX 11404 12288 4096 4096 NT_STATUS_OK
ReadX 11404 16384 4096 4096 NT_STATUS_OK
ReadX 11404 20480 4096 4096 NT_STATUS_OK
ReadX 11404 24576 4096 4096 NT_STATUS_OK
ReadX 11404 28672 4096 4096 NT_STATUS_OK
ReadX 11404 32768 4096 4096 NT_STATUS_OK
ReadX 11404 36864 4096 4096 NT_STATUS_OK
ReadX 11404 40960 4096 4096 NT_STATUS_OK
ReadX 11404 45056 4096 4096 NT_STATUS_OK
ReadX 11404 49152 4096 4096 NT_STATUS_OK
ReadX 11404 53248 4096 4096 NT_STATUS_OK
ReadX 11404 57344 4096 4096 NT_STATUS_OK
ReadX 11404 61440 4096 4096 NT_STATUS_OK
ReadX 11404 65536 4096 4096 NT_STATUS_OK
ReadX 11404 69632 4096 4096 NT_STATUS_OK
ReadX 11404 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11404 1004 NT_STATUS_OK
WriteX 11404 0 4096 4096 NT_STATUS_OK
Close 11404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11405 NT_STATUS_OK
SET_FILE_INFORMATION 11405 1004 NT_STATUS_OK
Close 11405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11407 NT_STATUS_OK
Close 11407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11410 NT_STATUS_OK
WriteX 11410 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11410 258 NT_STATUS_OK
WriteX 11410 0 65536 65536 NT_STATUS_OK
WriteX 11410 65536 19979 19979 NT_STATUS_OK
Close 11410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11411 NT_STATUS_OK
ReadX 11411 0 4096 4096 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
Flush 11411 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
Flush 11411 NT_STATUS_OK
QUERY_FILE_INFORMATION 11411 1004 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
Flush 11411 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
Flush 11411 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
Flush 11411 NT_STATUS_OK
SET_FILE_INFORMATION 11411 1004 NT_STATUS_OK
WriteX 11411 0 4096 4096 NT_STATUS_OK
Flush 11411 NT_STATUS_OK
Close 11411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 0 4096 4096 NT_STATUS_OK
Close 11412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11416 1004 NT_STATUS_OK
WriteX 11416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11417 NT_STATUS_OK
Close 11417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11413 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11422 NT_STATUS_OK
WriteX 11422 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11422 258 NT_STATUS_OK
WriteX 11422 0 65536 65536 NT_STATUS_OK
WriteX 11422 65536 17654 17654 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Flush 11423 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Flush 11423 NT_STATUS_OK
QUERY_FILE_INFORMATION 11423 1004 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Flush 11423 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Flush 11423 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Flush 11423 NT_STATUS_OK
SET_FILE_INFORMATION 11423 1004 NT_STATUS_OK
WriteX 11423 0 4096 4096 NT_STATUS_OK
Flush 11423 NT_STATUS_OK
Close 11423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11424 NT_STATUS_OK
SET_FILE_INFORMATION 11424 1004 NT_STATUS_OK
Close 11424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11426 NT_STATUS_OK
Close 11426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
ReadX 11428 4096 4096 4096 NT_STATUS_OK
ReadX 11428 8192 4096 4096 NT_STATUS_OK
ReadX 11428 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11428 16384 4096 4096 NT_STATUS_OK
ReadX 11428 20480 4096 4096 NT_STATUS_OK
ReadX 11428 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
Close 11429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11431 1004 NT_STATUS_OK
WriteX 11431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11434 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11437 NT_STATUS_OK
WriteX 11437 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11437 258 NT_STATUS_OK
WriteX 11437 0 65536 65536 NT_STATUS_OK
WriteX 11437 65536 19490 19490 NT_STATUS_OK
Close 11437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 4096 4096 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
QUERY_FILE_INFORMATION 11438 1004 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
SET_FILE_INFORMATION 11438 1004 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
Flush 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11439 NT_STATUS_OK
SET_FILE_INFORMATION 11439 1004 NT_STATUS_OK
Close 11439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11440 NT_STATUS_OK
ReadX 11440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11441 NT_STATUS_OK
Close 11441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11443 0 4096 4096 NT_STATUS_OK
Close 11443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11445 NT_STATUS_OK
ReadX 11445 0 4096 4096 NT_STATUS_OK
ReadX 11445 4096 4096 4096 NT_STATUS_OK
ReadX 11445 8192 4096 4096 NT_STATUS_OK
ReadX 11445 12288 4096 4096 NT_STATUS_OK
ReadX 11445 16384 4096 4096 NT_STATUS_OK
ReadX 11445 20480 4096 4096 NT_STATUS_OK
ReadX 11445 24576 4096 4096 NT_STATUS_OK
ReadX 11445 28672 4096 4096 NT_STATUS_OK
ReadX 11445 32768 4096 4096 NT_STATUS_OK
ReadX 11445 36864 4096 4096 NT_STATUS_OK
ReadX 11445 40960 4096 4096 NT_STATUS_OK
ReadX 11445 45056 4096 4096 NT_STATUS_OK
ReadX 11445 49152 4096 4096 NT_STATUS_OK
ReadX 11445 53248 4096 4096 NT_STATUS_OK
ReadX 11445 57344 4096 4096 NT_STATUS_OK
ReadX 11445 61440 4096 4096 NT_STATUS_OK
ReadX 11445 65536 4096 4096 NT_STATUS_OK
ReadX 11445 69632 4096 4096 NT_STATUS_OK
ReadX 11445 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11445 1004 NT_STATUS_OK
WriteX 11445 0 4096 4096 NT_STATUS_OK
Close 11445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11446 NT_STATUS_OK
SET_FILE_INFORMATION 11446 1004 NT_STATUS_OK
Close 11446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11448 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11440 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11451 NT_STATUS_OK
WriteX 11451 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11451 258 NT_STATUS_OK
WriteX 11451 0 65536 65536 NT_STATUS_OK
WriteX 11451 65536 8866 8866 NT_STATUS_OK
Close 11451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
WriteX 11452 0 4096 4096 NT_STATUS_OK
Flush 11452 NT_STATUS_OK
SET_FILE_INFORMATION 11452 1004 NT_STATUS_OK
WriteX 11452 0 4096 4096 NT_STATUS_OK
Flush 11452 NT_STATUS_OK
Close 11452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
Close 11454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11456 1004 NT_STATUS_OK
WriteX 11456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11462 NT_STATUS_OK
WriteX 11462 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11462 258 NT_STATUS_OK
WriteX 11462 0 65536 65536 NT_STATUS_OK
WriteX 11462 65536 9298 9298 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Flush 11463 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Flush 11463 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11464 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11466 NT_STATUS_OK
Close 11466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11469 0 4096 4096 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11470 4096 4096 4096 NT_STATUS_OK
ReadX 11470 8192 4096 4096 NT_STATUS_OK
ReadX 11470 12288 4096 4096 NT_STATUS_OK
ReadX 11470 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11470 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11479 NT_STATUS_OK
WriteX 11479 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11479 258 NT_STATUS_OK
WriteX 11479 0 65536 65536 NT_STATUS_OK
WriteX 11479 65536 11540 11540 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
WriteX 11480 0 4096 4096 NT_STATUS_OK
Flush 11480 NT_STATUS_OK
SET_FILE_INFORMATION 11480 1004 NT_STATUS_OK
WriteX 11480 0 4096 4096 NT_STATUS_OK
Flush 11480 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11481 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11482 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11483 NT_STATUS_OK
Close 11483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 61440 4096 4096 NT_STATUS_OK
ReadX 11485 126976 4096 4096 NT_STATUS_OK
WriteX 11485 0 65536 65536 NT_STATUS_OK
WriteX 11485 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 61440 4096 4096 NT_STATUS_OK
ReadX 11486 126976 4096 4096 NT_STATUS_OK
ReadX 11486 192512 4096 4096 NT_STATUS_OK
ReadX 11486 258048 4096 4096 NT_STATUS_OK
WriteX 11486 0 65536 65536 NT_STATUS_OK
WriteX 11486 65536 65536 65536 NT_STATUS_OK
WriteX 11486 131072 65536 65536 NT_STATUS_OK
WriteX 11486 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 61440 4096 4096 NT_STATUS_OK
ReadX 11487 126976 4096 4096 NT_STATUS_OK
ReadX 11487 192512 4096 4096 NT_STATUS_OK
ReadX 11487 258048 4096 4096 NT_STATUS_OK
ReadX 11487 323584 4096 4096 NT_STATUS_OK
ReadX 11487 389120 4096 4096 NT_STATUS_OK
ReadX 11487 454656 4096 4096 NT_STATUS_OK
ReadX 11487 520192 4096 4096 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 65536 65536 NT_STATUS_OK
WriteX 11487 131072 65536 65536 NT_STATUS_OK
WriteX 11487 196608 65536 65536 NT_STATUS_OK
WriteX 11487 262144 65536 65536 NT_STATUS_OK
WriteX 11487 327680 65536 65536 NT_STATUS_OK
WriteX 11487 393216 65536 65536 NT_STATUS_OK
WriteX 11487 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
ReadX 11488 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11489 NT_STATUS_OK
WriteX 11489 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11489 258 NT_STATUS_OK
WriteX 11489 0 53 53 NT_STATUS_OK
Close 11489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11488 8192 4096 4096 NT_STATUS_OK
ReadX 11488 12288 4096 4096 NT_STATUS_OK
WriteX 11492 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11492 258 NT_STATUS_OK
ReadX 11488 16384 4096 4096 NT_STATUS_OK
ReadX 11488 20480 4096 4096 NT_STATUS_OK
WriteX 11492 0 15360 15360 NT_STATUS_OK
Close 11492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11493 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11493 1004 NT_STATUS_OK
WriteX 11493 0 4096 4096 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11496 4096 4096 4096 NT_STATUS_OK
ReadX 11496 8192 4096 4096 NT_STATUS_OK
ReadX 11496 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
ReadX 11499 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
ReadX 11500 4096 4096 4096 NT_STATUS_OK
ReadX 11500 8192 4096 4096 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
WriteX 11501 0 15360 15360 NT_STATUS_OK
Close 11501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11502 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11502 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11503 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11506 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
Close 11506 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
ReadX 11509 4096 4096 4096 NT_STATUS_OK
ReadX 11509 8192 4096 4096 NT_STATUS_OK
ReadX 11509 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11509 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11509 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11511 NT_STATUS_OK
WriteX 11511 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11511 258 NT_STATUS_OK
WriteX 11511 0 53 53 NT_STATUS_OK
Close 11511 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11510 4096 4096 4096 NT_STATUS_OK
ReadX 11510 8192 4096 4096 NT_STATUS_OK
ReadX 11510 12288 4096 4096 NT_STATUS_OK
WriteX 11514 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11514 258 NT_STATUS_OK
WriteX 11514 0 12006 12006 NT_STATUS_OK
Close 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11515 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11515 1004 NT_STATUS_OK
WriteX 11515 0 4096 4096 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11519 NT_STATUS_OK
Close 11519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11518 4096 4096 4096 NT_STATUS_OK
ReadX 11518 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11521 NT_STATUS_OK
WriteX 11521 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11521 258 NT_STATUS_OK
WriteX 11521 0 11991 11991 NT_STATUS_OK
Close 11521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11522 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11522 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11523 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11525 NT_STATUS_OK
ReadX 11525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11526 NT_STATUS_OK
WriteX 11509 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11526 1004 NT_STATUS_OK
Close 11526 NT_STATUS_OK
WriteX 11522 0 4096 4096 NT_STATUS_OK
Close 11522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11529 NT_STATUS_OK
ReadX 11529 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11530 NT_STATUS_OK
Close 11530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11529 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11529 1004 NT_STATUS_OK
ReadX 11529 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11529 1004 NT_STATUS_OK
WriteX 11529 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11529 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11529 1004 NT_STATUS_OK
Close 11505 NT_STATUS_OK
WriteX 11529 0 12288 12288 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Close 11529 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 0 61440 61440 NT_STATUS_OK
ReadX 11536 61440 4096 4096 NT_STATUS_OK
ReadX 11536 65536 61440 61440 NT_STATUS_OK
ReadX 11536 126976 4096 4096 NT_STATUS_OK
ReadX 11536 131072 61440 61440 NT_STATUS_OK
ReadX 11536 192512 4096 4096 NT_STATUS_OK
ReadX 11536 196608 61440 61440 NT_STATUS_OK
ReadX 11536 258048 4096 4096 NT_STATUS_OK
ReadX 11536 262144 61440 61440 NT_STATUS_OK
ReadX 11536 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11537 NT_STATUS_OK
ReadX 11537 0 61440 61440 NT_STATUS_OK
ReadX 11537 61440 4096 4096 NT_STATUS_OK
ReadX 11537 65536 61440 61440 NT_STATUS_OK
ReadX 11537 126976 4096 4096 NT_STATUS_OK
ReadX 11537 131072 61440 61440 NT_STATUS_OK
ReadX 11537 192512 4096 4096 NT_STATUS_OK
ReadX 11537 196608 61440 61440 NT_STATUS_OK
ReadX 11537 258048 4096 4096 NT_STATUS_OK
ReadX 11537 262144 61440 61440 NT_STATUS_OK
ReadX 11537 323584 4096 4096 NT_STATUS_OK
ReadX 11537 327680 61440 61440 NT_STATUS_OK
ReadX 11537 389120 4096 4096 NT_STATUS_OK
ReadX 11537 393216 61440 61440 NT_STATUS_OK
ReadX 11537 454656 4096 4096 NT_STATUS_OK
ReadX 11537 458752 61440 61440 NT_STATUS_OK
ReadX 11537 520192 4096 4096 NT_STATUS_OK
ReadX 11537 524288 61440 61440 NT_STATUS_OK
ReadX 11537 585728 4096 4096 NT_STATUS_OK
ReadX 11537 589824 61440 61440 NT_STATUS_OK
ReadX 11537 651264 4096 4096 NT_STATUS_OK
ReadX 11537 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 61440 61440 NT_STATUS_OK
ReadX 11538 61440 4096 4096 NT_STATUS_OK
ReadX 11538 65536 61440 61440 NT_STATUS_OK
ReadX 11538 126976 4096 4096 NT_STATUS_OK
ReadX 11538 131072 61440 61440 NT_STATUS_OK
ReadX 11538 192512 4096 4096 NT_STATUS_OK
ReadX 11538 196608 61440 61440 NT_STATUS_OK
ReadX 11538 258048 4096 4096 NT_STATUS_OK
ReadX 11538 262144 61440 61440 NT_STATUS_OK
ReadX 11538 323584 4096 4096 NT_STATUS_OK
ReadX 11538 327680 61440 61440 NT_STATUS_OK
ReadX 11538 389120 4096 4096 NT_STATUS_OK
ReadX 11538 393216 61440 61440 NT_STATUS_OK
ReadX 11538 454656 4096 4096 NT_STATUS_OK
ReadX 11538 458752 61440 61440 NT_STATUS_OK
ReadX 11538 520192 4096 4096 NT_STATUS_OK
ReadX 11538 524288 61440 61440 NT_STATUS_OK
ReadX 11538 585728 4096 4096 NT_STATUS_OK
ReadX 11538 589824 61440 61440 NT_STATUS_OK
ReadX 11538 651264 4096 4096 NT_STATUS_OK
ReadX 11538 655360 61440 61440 NT_STATUS_OK
ReadX 11538 716800 4096 4096 NT_STATUS_OK
ReadX 11538 720896 61440 61440 NT_STATUS_OK
ReadX 11538 782336 4096 4096 NT_STATUS_OK
ReadX 11538 786432 61440 61440 NT_STATUS_OK
ReadX 11538 847872 4096 4096 NT_STATUS_OK
ReadX 11538 851968 61440 61440 NT_STATUS_OK
ReadX 11538 913408 4096 4096 NT_STATUS_OK
ReadX 11538 917504 61440 61440 NT_STATUS_OK
ReadX 11538 978944 4096 4096 NT_STATUS_OK
ReadX 11538 983040 61440 61440 NT_STATUS_OK
ReadX 11538 1044480 4096 4096 NT_STATUS_OK
ReadX 11538 1048576 61440 61440 NT_STATUS_OK
ReadX 11538 1110016 4096 4096 NT_STATUS_OK
ReadX 11538 1114112 61440 61440 NT_STATUS_OK
ReadX 11538 1175552 4096 4096 NT_STATUS_OK
ReadX 11538 1179648 61440 61440 NT_STATUS_OK
ReadX 11538 1241088 4096 4096 NT_STATUS_OK
ReadX 11538 1245184 61440 61440 NT_STATUS_OK
ReadX 11538 1306624 4096 4096 NT_STATUS_OK
ReadX 11538 1310720 61440 61440 NT_STATUS_OK
ReadX 11538 1372160 4096 4096 NT_STATUS_OK
ReadX 11538 1376256 61440 61440 NT_STATUS_OK
ReadX 11538 1437696 4096 4096 NT_STATUS_OK
ReadX 11538 1441792 61440 61440 NT_STATUS_OK
ReadX 11538 1503232 4096 4096 NT_STATUS_OK
ReadX 11538 1507328 61440 61440 NT_STATUS_OK
ReadX 11538 1568768 4096 4096 NT_STATUS_OK
ReadX 11538 1572864 61440 61440 NT_STATUS_OK
ReadX 11538 1634304 4096 4096 NT_STATUS_OK
ReadX 11538 1638400 61440 61440 NT_STATUS_OK
ReadX 11538 1699840 4096 4096 NT_STATUS_OK
ReadX 11538 1703936 61440 61440 NT_STATUS_OK
ReadX 11538 1765376 4096 4096 NT_STATUS_OK
ReadX 11538 1769472 61440 61440 NT_STATUS_OK
ReadX 11538 1830912 4096 4096 NT_STATUS_OK
ReadX 11538 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1004 NT_STATUS_OK
WriteX 11545 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11547 NT_STATUS_OK
WriteX 11547 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11547 258 NT_STATUS_OK
WriteX 11547 0 491 491 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11545 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11551 NT_STATUS_OK
WriteX 11551 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
WriteX 11551 0 543 543 NT_STATUS_OK
Close 11551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Close 11538 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Close 11542 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11565 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 258 NT_STATUS_OK
WriteX 11565 0 2048 2048 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11566 0 4096 4096 NT_STATUS_OK
Flush 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11566 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11571 NT_STATUS_OK
WriteX 11571 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 2048 2048 NT_STATUS_OK
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11577 NT_STATUS_OK
WriteX 11577 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11577 258 NT_STATUS_OK
WriteX 11577 0 2048 2048 NT_STATUS_OK
Close 11577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 0 2048 2048 NT_STATUS_OK
ReadX 11556 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11560 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
WriteX 11556 0 8192 8192 NT_STATUS_OK
WriteX 11557 0 4096 4096 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11582 NT_STATUS_OK
QUERY_FILE_INFORMATION 11582 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11572 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11584 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11585 NT_STATUS_OK
ReadX 11585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11602 NT_STATUS_OK
QUERY_FILE_INFORMATION 11602 1004 NT_STATUS_OK
WriteX 11602 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11602 258 NT_STATUS_OK
WriteX 11602 0 2048 2048 NT_STATUS_OK
Close 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11610 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 1004 NT_STATUS_OK
WriteX 11610 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 258 NT_STATUS_OK
WriteX 11610 0 2048 2048 NT_STATUS_OK
Close 11610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11603 0 4096 4096 NT_STATUS_OK
Flush 11603 NT_STATUS_OK
WriteX 11611 0 4096 4096 NT_STATUS_OK
Flush 11611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11603 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11605 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11612 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11613 NT_STATUS_OK
WriteX 11613 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11613 258 NT_STATUS_OK
WriteX 11613 0 4096 4096 NT_STATUS_OK
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11615 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11616 NT_STATUS_OK
WriteX 11616 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 258 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11617 0 4096 4096 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11605 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11620 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11624 NT_STATUS_OK
WriteX 11624 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 258 NT_STATUS_OK
WriteX 11624 0 2048 2048 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11625 NT_STATUS_OK
ReadX 11625 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11630 NT_STATUS_OK
ReadX 11630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11632 NT_STATUS_OK
ReadX 11632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11633 NT_STATUS_OK
ReadX 11633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11634 NT_STATUS_OK
ReadX 11634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11635 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11639 NT_STATUS_OK
QUERY_FILE_INFORMATION 11639 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11625 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Close 11632 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Close 11634 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Close 11626 NT_STATUS_OK
Close 11627 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11628 NT_STATUS_OK
Close 11629 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11641 NT_STATUS_OK
QUERY_FILE_INFORMATION 11641 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11650 NT_STATUS_OK
ReadX 11650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11661 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 1004 NT_STATUS_OK
WriteX 11661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
WriteX 11661 0 2048 2048 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11664 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11666 NT_STATUS_OK
ReadX 11666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11668 NT_STATUS_OK
ReadX 11668 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11673 NT_STATUS_OK
QUERY_FILE_INFORMATION 11673 1004 NT_STATUS_OK
WriteX 11673 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11673 258 NT_STATUS_OK
WriteX 11673 0 2048 2048 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11674 NT_STATUS_OK
ReadX 11674 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11675 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11681 NT_STATUS_OK
QUERY_FILE_INFORMATION 11681 1004 NT_STATUS_OK
WriteX 11681 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11681 258 NT_STATUS_OK
WriteX 11681 0 2048 2048 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11662 0 4096 4096 NT_STATUS_OK
Flush 11662 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
Flush 11674 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11662 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11664 4096 16384 16384 NT_STATUS_OK
ReadX 11644 4096 16384 16384 NT_STATUS_OK
ReadX 11676 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11683 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 2048 2048 NT_STATUS_OK
WriteX 11684 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11685 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11666 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11687 NT_STATUS_OK
QUERY_FILE_INFORMATION 11687 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11689 NT_STATUS_OK
QUERY_FILE_INFORMATION 11689 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11692 4096 16384 16384 NT_STATUS_OK
WriteX 11692 0 4096 4096 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
WriteX 11695 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11707 NT_STATUS_OK
ReadX 11707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 8192 8192 NT_STATUS_OK
ReadX 11698 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11712 0 4096 4096 NT_STATUS_OK
ReadX 11712 4096 4096 4096 NT_STATUS_OK
ReadX 11712 8192 4096 4096 NT_STATUS_OK
WriteX 11698 0 4096 4096 NT_STATUS_OK
WriteX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
ReadX 11713 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11692 0 4096 4096 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
WriteX 11695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11718 NT_STATUS_OK
QUERY_FILE_INFORMATION 11718 1004 NT_STATUS_OK
WriteX 11718 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11718 258 NT_STATUS_OK
WriteX 11718 0 2048 2048 NT_STATUS_OK
Close 11718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11719 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11719 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
ReadX 11721 4096 4096 4096 NT_STATUS_OK
WriteX 11721 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11719 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
ReadX 11723 4096 4096 4096 NT_STATUS_OK
WriteX 11723 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11724 NT_STATUS_OK
QUERY_FILE_INFORMATION 11724 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11709 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Close 11707 NT_STATUS_OK
Close 11708 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11726 0 4096 4096 NT_STATUS_OK
ReadX 11726 4096 4096 4096 NT_STATUS_OK
ReadX 11726 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11727 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11729 NT_STATUS_OK
ReadX 11729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11730 NT_STATUS_OK
ReadX 11730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11731 NT_STATUS_OK
ReadX 11731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 4096 4096 NT_STATUS_OK
ReadX 11727 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11743 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11744 NT_STATUS_OK
QUERY_FILE_INFORMATION 11744 1004 NT_STATUS_OK
WriteX 11744 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11744 258 NT_STATUS_OK
WriteX 11744 0 2048 2048 NT_STATUS_OK
Close 11744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11749 NT_STATUS_OK
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11750 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 258 NT_STATUS_OK
WriteX 11750 0 2048 2048 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11734 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11752 NT_STATUS_OK
QUERY_FILE_INFORMATION 11752 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Close 11730 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11736 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11754 NT_STATUS_OK
QUERY_FILE_INFORMATION 11754 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 61440 4096 4096 NT_STATUS_OK
ReadX 11756 126976 4096 4096 NT_STATUS_OK
WriteX 11756 0 65536 65536 NT_STATUS_OK
WriteX 11756 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 61440 4096 4096 NT_STATUS_OK
ReadX 11757 126976 4096 4096 NT_STATUS_OK
ReadX 11757 192512 4096 4096 NT_STATUS_OK
ReadX 11757 258048 4096 4096 NT_STATUS_OK
WriteX 11757 0 65536 65536 NT_STATUS_OK
WriteX 11757 65536 65536 65536 NT_STATUS_OK
WriteX 11757 131072 65536 65536 NT_STATUS_OK
WriteX 11757 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 61440 4096 4096 NT_STATUS_OK
ReadX 11758 126976 4096 4096 NT_STATUS_OK
ReadX 11758 192512 4096 4096 NT_STATUS_OK
ReadX 11758 258048 4096 4096 NT_STATUS_OK
ReadX 11758 323584 4096 4096 NT_STATUS_OK
ReadX 11758 389120 4096 4096 NT_STATUS_OK
ReadX 11758 454656 4096 4096 NT_STATUS_OK
ReadX 11758 520192 4096 4096 NT_STATUS_OK
WriteX 11758 0 65536 65536 NT_STATUS_OK
WriteX 11758 65536 65536 65536 NT_STATUS_OK
WriteX 11758 131072 65536 65536 NT_STATUS_OK
WriteX 11758 196608 65536 65536 NT_STATUS_OK
WriteX 11758 262144 65536 65536 NT_STATUS_OK
WriteX 11758 327680 65536 65536 NT_STATUS_OK
WriteX 11758 393216 65536 65536 NT_STATUS_OK
WriteX 11758 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11759 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11759 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11759 8192 4096 4096 NT_STATUS_OK
ReadX 11759 12288 4096 4096 NT_STATUS_OK
ReadX 11759 16384 4096 4096 NT_STATUS_OK
ReadX 11759 20480 4096 4096 NT_STATUS_OK
ReadX 11759 24576 4096 4096 NT_STATUS_OK
ReadX 11759 28672 4096 4096 NT_STATUS_OK
ReadX 11759 32768 4096 4096 NT_STATUS_OK
ReadX 11759 36864 4096 4096 NT_STATUS_OK
ReadX 11759 40960 4096 4096 NT_STATUS_OK
ReadX 11759 45056 4096 4096 NT_STATUS_OK
ReadX 11759 49152 4096 4096 NT_STATUS_OK
ReadX 11759 53248 4096 4096 NT_STATUS_OK
ReadX 11759 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11759 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11762 NT_STATUS_OK
WriteX 11762 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11762 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11762 1004 NT_STATUS_OK
WriteX 11762 0 57088 57088 NT_STATUS_OK
WriteX 11762 0 4096 4096 NT_STATUS_OK
Flush 11762 NT_STATUS_OK
Close 11759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11763 NT_STATUS_OK
SET_FILE_INFORMATION 11763 1004 NT_STATUS_OK
Close 11763 NT_STATUS_OK
SET_FILE_INFORMATION 11762 1004 NT_STATUS_OK
WriteX 11762 0 4096 4096 NT_STATUS_OK
Close 11762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11766 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11767 NT_STATUS_OK
WriteX 11767 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11767 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11767 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11767 1004 NT_STATUS_OK
WriteX 11767 0 51456 51456 NT_STATUS_OK
WriteX 11767 0 4096 4096 NT_STATUS_OK
Flush 11767 NT_STATUS_OK
SET_FILE_INFORMATION 11767 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11767 1004 NT_STATUS_OK
WriteX 11767 0 4096 4096 NT_STATUS_OK
Close 11767 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11771 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11773 NT_STATUS_OK
Close 11773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11776 NT_STATUS_OK
WriteX 11776 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 258 NT_STATUS_OK
WriteX 11776 0 53077 53077 NT_STATUS_OK
Close 11776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11777 NT_STATUS_OK
WriteX 11777 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11777 1004 NT_STATUS_OK
WriteX 11777 0 65536 65536 NT_STATUS_OK
WriteX 11777 65536 1856 1856 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
Flush 11777 NT_STATUS_OK
SET_FILE_INFORMATION 11777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11777 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11779 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11786 NT_STATUS_OK
WriteX 11786 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11786 258 NT_STATUS_OK
WriteX 11786 0 7983 7983 NT_STATUS_OK
Close 11786 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11791 NT_STATUS_OK
WriteX 11791 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 258 NT_STATUS_OK
WriteX 11791 0 65536 65536 NT_STATUS_OK
WriteX 11791 65536 65536 65536 NT_STATUS_OK
WriteX 11791 131072 65536 65536 NT_STATUS_OK
WriteX 11791 196608 65536 65536 NT_STATUS_OK
WriteX 11791 262144 65536 65536 NT_STATUS_OK
WriteX 11791 327680 65536 65536 NT_STATUS_OK
WriteX 11791 393216 65536 65536 NT_STATUS_OK
WriteX 11791 458752 46731 46731 NT_STATUS_OK
Close 11791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11792 NT_STATUS_OK
WriteX 11792 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11781 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
WriteX 11792 0 65536 65536 NT_STATUS_OK
WriteX 11792 65536 22848 22848 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11796 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11797 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11797 1004 NT_STATUS_OK
ReadX 11797 8192 4096 4096 NT_STATUS_OK
ReadX 11797 12288 4096 4096 NT_STATUS_OK
ReadX 11797 16384 4096 4096 NT_STATUS_OK
ReadX 11797 20480 4096 4096 NT_STATUS_OK
ReadX 11797 24576 4096 4096 NT_STATUS_OK
ReadX 11797 28672 4096 4096 NT_STATUS_OK
ReadX 11797 32768 4096 4096 NT_STATUS_OK
ReadX 11797 36864 4096 4096 NT_STATUS_OK
ReadX 11797 40960 4096 4096 NT_STATUS_OK
ReadX 11797 45056 4096 4096 NT_STATUS_OK
ReadX 11797 49152 4096 4096 NT_STATUS_OK
ReadX 11797 53248 4096 4096 NT_STATUS_OK
ReadX 11797 57344 4096 4096 NT_STATUS_OK
ReadX 11797 61440 4096 4096 NT_STATUS_OK
ReadX 11797 65536 4096 4096 NT_STATUS_OK
ReadX 11797 69632 4096 4096 NT_STATUS_OK
ReadX 11797 73728 4096 4096 NT_STATUS_OK
ReadX 11797 77824 4096 4096 NT_STATUS_OK
ReadX 11797 81920 4096 4096 NT_STATUS_OK
ReadX 11797 86016 4096 4096 NT_STATUS_OK
ReadX 11797 90112 4096 4096 NT_STATUS_OK
ReadX 11797 94208 4096 4096 NT_STATUS_OK
ReadX 11797 98304 4096 4096 NT_STATUS_OK
ReadX 11797 102400 4096 4096 NT_STATUS_OK
ReadX 11797 106496 4096 4096 NT_STATUS_OK
ReadX 11797 110592 4096 4096 NT_STATUS_OK
ReadX 11797 114688 4096 4096 NT_STATUS_OK
ReadX 11797 118784 4096 4096 NT_STATUS_OK
ReadX 11797 122880 4096 4096 NT_STATUS_OK
ReadX 11797 126976 4096 4096 NT_STATUS_OK
ReadX 11797 131072 4096 4096 NT_STATUS_OK
ReadX 11797 135168 4096 4096 NT_STATUS_OK
ReadX 11797 139264 4096 4096 NT_STATUS_OK
ReadX 11797 143360 4096 4096 NT_STATUS_OK
ReadX 11797 147456 4096 4096 NT_STATUS_OK
ReadX 11797 151552 4096 4096 NT_STATUS_OK
ReadX 11797 155648 4096 4096 NT_STATUS_OK
ReadX 11797 159744 4096 4096 NT_STATUS_OK
ReadX 11797 163840 4096 4096 NT_STATUS_OK
ReadX 11797 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11797 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11798 NT_STATUS_OK
Close 11798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11800 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
Close 11797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11801 NT_STATUS_OK
SET_FILE_INFORMATION 11801 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
WriteX 11800 0 42388 42388 NT_STATUS_OK
Close 11800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11804 NT_STATUS_OK
ReadX 11804 0 4096 4096 NT_STATUS_OK
ReadX 11804 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11805 NT_STATUS_OK
WriteX 11805 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11805 258 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
WriteX 11805 0 42652 42652 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11807 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
ReadX 11809 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11811 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11814 NT_STATUS_OK
WriteX 11814 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11814 258 NT_STATUS_OK
WriteX 11814 0 65536 65536 NT_STATUS_OK
WriteX 11814 65536 49 49 NT_STATUS_OK
Close 11814 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 0 61440 61440 NT_STATUS_OK
ReadX 11815 61440 4096 4096 NT_STATUS_OK
ReadX 11815 65536 61440 61440 NT_STATUS_OK
ReadX 11815 126976 4096 4096 NT_STATUS_OK
ReadX 11815 131072 61440 61440 NT_STATUS_OK
ReadX 11815 192512 4096 4096 NT_STATUS_OK
ReadX 11815 196608 61440 61440 NT_STATUS_OK
ReadX 11815 258048 4096 4096 NT_STATUS_OK
ReadX 11815 262144 61440 61440 NT_STATUS_OK
ReadX 11815 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 61440 61440 NT_STATUS_OK
ReadX 11816 61440 4096 4096 NT_STATUS_OK
ReadX 11816 65536 61440 61440 NT_STATUS_OK
ReadX 11816 126976 4096 4096 NT_STATUS_OK
ReadX 11816 131072 61440 61440 NT_STATUS_OK
ReadX 11816 192512 4096 4096 NT_STATUS_OK
ReadX 11816 196608 61440 61440 NT_STATUS_OK
ReadX 11816 258048 4096 4096 NT_STATUS_OK
ReadX 11816 262144 61440 61440 NT_STATUS_OK
ReadX 11816 323584 4096 4096 NT_STATUS_OK
ReadX 11816 327680 61440 61440 NT_STATUS_OK
ReadX 11816 389120 4096 4096 NT_STATUS_OK
ReadX 11816 393216 61440 61440 NT_STATUS_OK
ReadX 11816 454656 4096 4096 NT_STATUS_OK
ReadX 11816 458752 61440 61440 NT_STATUS_OK
ReadX 11816 520192 4096 4096 NT_STATUS_OK
ReadX 11816 524288 61440 61440 NT_STATUS_OK
ReadX 11816 585728 4096 4096 NT_STATUS_OK
ReadX 11816 589824 61440 61440 NT_STATUS_OK
ReadX 11816 651264 4096 4096 NT_STATUS_OK
ReadX 11816 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 61440 61440 NT_STATUS_OK
ReadX 11817 61440 4096 4096 NT_STATUS_OK
ReadX 11817 65536 61440 61440 NT_STATUS_OK
ReadX 11817 126976 4096 4096 NT_STATUS_OK
ReadX 11817 131072 61440 61440 NT_STATUS_OK
ReadX 11817 192512 4096 4096 NT_STATUS_OK
ReadX 11817 196608 61440 61440 NT_STATUS_OK
ReadX 11817 258048 4096 4096 NT_STATUS_OK
ReadX 11817 262144 61440 61440 NT_STATUS_OK
ReadX 11817 323584 4096 4096 NT_STATUS_OK
ReadX 11817 327680 61440 61440 NT_STATUS_OK
ReadX 11817 389120 4096 4096 NT_STATUS_OK
ReadX 11817 393216 61440 61440 NT_STATUS_OK
ReadX 11817 454656 4096 4096 NT_STATUS_OK
ReadX 11817 458752 61440 61440 NT_STATUS_OK
ReadX 11817 520192 4096 4096 NT_STATUS_OK
ReadX 11817 524288 61440 61440 NT_STATUS_OK
ReadX 11817 585728 4096 4096 NT_STATUS_OK
ReadX 11817 589824 61440 61440 NT_STATUS_OK
ReadX 11817 651264 4096 4096 NT_STATUS_OK
ReadX 11817 655360 61440 61440 NT_STATUS_OK
ReadX 11817 716800 4096 4096 NT_STATUS_OK
ReadX 11817 720896 61440 61440 NT_STATUS_OK
ReadX 11817 782336 4096 4096 NT_STATUS_OK
ReadX 11817 786432 61440 61440 NT_STATUS_OK
ReadX 11817 847872 4096 4096 NT_STATUS_OK
ReadX 11817 851968 61440 61440 NT_STATUS_OK
ReadX 11817 913408 4096 4096 NT_STATUS_OK
ReadX 11817 917504 61440 61440 NT_STATUS_OK
ReadX 11817 978944 4096 4096 NT_STATUS_OK
ReadX 11817 983040 61440 61440 NT_STATUS_OK
ReadX 11817 1044480 4096 4096 NT_STATUS_OK
ReadX 11817 1048576 61440 61440 NT_STATUS_OK
ReadX 11817 1110016 4096 4096 NT_STATUS_OK
ReadX 11817 1114112 61440 61440 NT_STATUS_OK
ReadX 11817 1175552 4096 4096 NT_STATUS_OK
ReadX 11817 1179648 61440 61440 NT_STATUS_OK
ReadX 11817 1241088 4096 4096 NT_STATUS_OK
ReadX 11817 1245184 61440 61440 NT_STATUS_OK
ReadX 11817 1306624 4096 4096 NT_STATUS_OK
ReadX 11817 1310720 61440 61440 NT_STATUS_OK
ReadX 11817 1372160 4096 4096 NT_STATUS_OK
ReadX 11817 1376256 61440 61440 NT_STATUS_OK
ReadX 11817 1437696 4096 4096 NT_STATUS_OK
ReadX 11817 1441792 61440 61440 NT_STATUS_OK
ReadX 11817 1503232 4096 4096 NT_STATUS_OK
ReadX 11817 1507328 61440 61440 NT_STATUS_OK
ReadX 11817 1568768 4096 4096 NT_STATUS_OK
ReadX 11817 1572864 61440 61440 NT_STATUS_OK
ReadX 11817 1634304 4096 4096 NT_STATUS_OK
ReadX 11817 1638400 61440 61440 NT_STATUS_OK
ReadX 11817 1699840 4096 4096 NT_STATUS_OK
ReadX 11817 1703936 61440 61440 NT_STATUS_OK
ReadX 11817 1765376 4096 4096 NT_STATUS_OK
ReadX 11817 1769472 61440 61440 NT_STATUS_OK
ReadX 11817 1830912 4096 4096 NT_STATUS_OK
ReadX 11817 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11819 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 1005 NT_STATUS_OK
ReadX 11819 2156 24 24 NT_STATUS_OK
ReadX 11819 2139 276 276 NT_STATUS_OK
ReadX 11819 2136 14 14 NT_STATUS_OK
ReadX 11819 2136 7 7 NT_STATUS_OK
ReadX 11819 2138 12 12 NT_STATUS_OK
ReadX 11819 2137 8 8 NT_STATUS_OK
ReadX 11819 2135 15 15 NT_STATUS_OK
ReadX 11819 0 16 16 NT_STATUS_OK
ReadX 11819 16 2048 2048 NT_STATUS_OK
ReadX 11819 2064 2048 2048 NT_STATUS_OK
ReadX 11819 257 2048 2048 NT_STATUS_OK
ReadX 11819 385 2048 2048 NT_STATUS_OK
ReadX 11819 513 2048 2048 NT_STATUS_OK
ReadX 11819 641 2048 2048 NT_STATUS_OK
ReadX 11819 769 2048 2048 NT_STATUS_OK
ReadX 11819 897 2048 2048 NT_STATUS_OK
ReadX 11819 1025 2048 2048 NT_STATUS_OK
ReadX 11819 1153 2048 2048 NT_STATUS_OK
ReadX 11819 1281 2048 2048 NT_STATUS_OK
ReadX 11819 1409 2048 2048 NT_STATUS_OK
ReadX 11819 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11824 NT_STATUS_OK
WriteX 11824 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11824 258 NT_STATUS_OK
WriteX 11824 0 10575 10575 NT_STATUS_OK
Flush 11824 NT_STATUS_OK
Close 11824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11825 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11829 NT_STATUS_OK
LockX 11829 2147483538 1 NT_STATUS_OK
UnlockX 11829 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11829 1005 NT_STATUS_OK
ReadX 11829 0 512 512 NT_STATUS_OK
ReadX 11829 512 512 512 NT_STATUS_OK
ReadX 11829 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11829 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11829 1004 NT_STATUS_OK
Close 11829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11830 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 1005 NT_STATUS_OK
ReadX 11830 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11831 NT_STATUS_OK
LockX 11831 2147483538 1 NT_STATUS_OK
UnlockX 11831 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11831 1005 NT_STATUS_OK
ReadX 11831 0 512 512 NT_STATUS_OK
ReadX 11831 512 512 512 NT_STATUS_OK
ReadX 11831 1024 512 512 NT_STATUS_OK
ReadX 11831 288 20 20 NT_STATUS_OK
ReadX 11831 308 2084 2084 NT_STATUS_OK
ReadX 11831 388 2084 2084 NT_STATUS_OK
ReadX 11831 388 2084 2084 NT_STATUS_OK
ReadX 11818 2157 1386 1386 NT_STATUS_OK
ReadX 11831 2472 399 399 NT_STATUS_OK
ReadX 11831 3072 1536 1536 NT_STATUS_OK
ReadX 11831 544 149 149 NT_STATUS_OK
ReadX 11831 693 485 485 NT_STATUS_OK
Close 11831 NT_STATUS_OK
ReadX 11818 2157 4096 4096 NT_STATUS_OK
ReadX 11818 6253 4096 4096 NT_STATUS_OK
ReadX 11818 10349 4096 4096 NT_STATUS_OK
ReadX 11818 14445 4096 4096 NT_STATUS_OK
ReadX 11818 18541 4096 4096 NT_STATUS_OK
ReadX 11818 22637 256 256 NT_STATUS_OK
ReadX 11818 22893 4096 4096 NT_STATUS_OK
ReadX 11818 26989 4096 4096 NT_STATUS_OK
ReadX 11818 31085 4096 4096 NT_STATUS_OK
ReadX 11818 35181 4096 4096 NT_STATUS_OK
ReadX 11818 39277 4096 4096 NT_STATUS_OK
ReadX 11818 43373 4096 4096 NT_STATUS_OK
ReadX 11818 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11818 2157 1024 1024 NT_STATUS_OK
ReadX 11818 1667 4688 4688 NT_STATUS_OK
ReadX 11818 6355 3516 3516 NT_STATUS_OK
ReadX 11818 9871 16384 16384 NT_STATUS_OK
ReadX 11818 26255 3771 3771 NT_STATUS_OK
ReadX 11818 30026 2048 2048 NT_STATUS_OK
ReadX 11818 32074 1024 1024 NT_STATUS_OK
ReadX 11818 33098 6652 6652 NT_STATUS_OK
ReadX 11818 39750 16384 16384 NT_STATUS_OK
ReadX 11818 56134 10496 10496 NT_STATUS_OK
ReadX 11818 66630 1784 1784 NT_STATUS_OK
ReadX 11818 68414 90 90 NT_STATUS_OK
ReadX 11818 68504 273 273 NT_STATUS_OK
ReadX 11818 68777 1600 1600 NT_STATUS_OK
ReadX 11818 70377 640 640 NT_STATUS_OK
ReadX 11818 71017 1280 1280 NT_STATUS_OK
ReadX 11818 72297 8464 8464 NT_STATUS_OK
ReadX 11818 80761 158 158 NT_STATUS_OK
ReadX 11818 80919 912 912 NT_STATUS_OK
ReadX 11818 81831 1980 1980 NT_STATUS_OK
ReadX 11818 83811 2256 2256 NT_STATUS_OK
ReadX 11818 86067 400 400 NT_STATUS_OK
ReadX 11818 86467 252 252 NT_STATUS_OK
ReadX 11818 86719 42 42 NT_STATUS_OK
ReadX 11818 86761 725 725 NT_STATUS_OK
ReadX 11818 2009 512 512 NT_STATUS_OK
ReadX 11818 3895 9 9 NT_STATUS_OK
ReadX 11818 3781 46 46 NT_STATUS_OK
ReadX 11818 4059 92 92 NT_STATUS_OK
ReadX 11818 3781 92 92 NT_STATUS_OK
ReadX 11818 3986 184 184 NT_STATUS_OK
ReadX 11818 3987 16384 16384 NT_STATUS_OK
ReadX 11818 3902 16384 16384 NT_STATUS_OK
ReadX 11818 3781 10240 10240 NT_STATUS_OK
ReadX 11818 3821 16384 16384 NT_STATUS_OK
ReadX 11818 3891 935 935 NT_STATUS_OK
ReadX 11818 4060 10240 10240 NT_STATUS_OK
ReadX 11818 4059 184 184 NT_STATUS_OK
ReadX 11818 256 184 184 NT_STATUS_OK
ReadX 11818 256 1026 1026 NT_STATUS_OK
ReadX 11818 3901 326 326 NT_STATUS_OK
ReadX 11818 3899 652 652 NT_STATUS_OK
ReadX 11818 256 2 2 NT_STATUS_OK
ReadX 11818 258 4948 4948 NT_STATUS_OK
Close 11818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11833 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11836 NT_STATUS_OK
WriteX 11836 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
WriteX 11836 0 65536 65536 NT_STATUS_OK
WriteX 11836 65536 65536 65536 NT_STATUS_OK
WriteX 11836 131072 65536 65536 NT_STATUS_OK
WriteX 11836 196608 65536 65536 NT_STATUS_OK
WriteX 11836 262144 65536 65536 NT_STATUS_OK
WriteX 11836 327680 65536 65536 NT_STATUS_OK
WriteX 11836 393216 65536 65536 NT_STATUS_OK
WriteX 11836 458752 65536 65536 NT_STATUS_OK
WriteX 11836 524288 65536 65536 NT_STATUS_OK
WriteX 11836 589824 35257 35257 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11841 NT_STATUS_OK
WriteX 11841 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 258 NT_STATUS_OK
WriteX 11841 0 65536 65536 NT_STATUS_OK
WriteX 11841 65536 65536 65536 NT_STATUS_OK
WriteX 11841 131072 65536 65536 NT_STATUS_OK
WriteX 11841 196608 65536 65536 NT_STATUS_OK
WriteX 11841 262144 65536 65536 NT_STATUS_OK
WriteX 11841 327680 65536 65536 NT_STATUS_OK
WriteX 11841 393216 65536 65536 NT_STATUS_OK
WriteX 11841 458752 65536 65536 NT_STATUS_OK
WriteX 11841 524288 65536 65536 NT_STATUS_OK
WriteX 11841 589824 57598 57598 NT_STATUS_OK
Close 11841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11843 NT_STATUS_OK
WriteX 11843 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 258 NT_STATUS_OK
WriteX 11843 0 12543 12543 NT_STATUS_OK
Flush 11843 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11845 NT_STATUS_OK
Close 11845 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11849 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 1005 NT_STATUS_OK
ReadX 11849 1938 24 24 NT_STATUS_OK
ReadX 11849 1920 276 276 NT_STATUS_OK
ReadX 11849 1918 14 14 NT_STATUS_OK
ReadX 11849 1918 7 7 NT_STATUS_OK
ReadX 11849 1919 12 12 NT_STATUS_OK
ReadX 11849 1919 8 8 NT_STATUS_OK
ReadX 11849 1917 15 15 NT_STATUS_OK
ReadX 11849 0 16 16 NT_STATUS_OK
ReadX 11849 16 2048 2048 NT_STATUS_OK
ReadX 11849 2064 2048 2048 NT_STATUS_OK
ReadX 11849 257 2048 2048 NT_STATUS_OK
ReadX 11849 385 2048 2048 NT_STATUS_OK
ReadX 11849 513 2048 2048 NT_STATUS_OK
ReadX 11849 641 2048 2048 NT_STATUS_OK
ReadX 11849 769 2048 2048 NT_STATUS_OK
ReadX 11849 897 2048 2048 NT_STATUS_OK
ReadX 11849 1025 2048 2048 NT_STATUS_OK
ReadX 11849 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11851 NT_STATUS_OK
Close 11851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11854 NT_STATUS_OK
WriteX 11854 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11854 258 NT_STATUS_OK
WriteX 11854 0 11588 11588 NT_STATUS_OK
Flush 11854 NT_STATUS_OK
Close 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11855 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11859 NT_STATUS_OK
WriteX 11859 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
WriteX 11859 0 11615 11615 NT_STATUS_OK
Flush 11859 NT_STATUS_OK
Close 11859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11868 NT_STATUS_OK
WriteX 11868 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11868 258 NT_STATUS_OK
WriteX 11868 0 65536 65536 NT_STATUS_OK
WriteX 11868 65536 16050 16050 NT_STATUS_OK
Close 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11848 1939 64 64 NT_STATUS_OK
ReadX 11848 128 248 248 NT_STATUS_OK
ReadX 11848 128 568 568 NT_STATUS_OK
ReadX 11848 3872 1536 1536 NT_STATUS_OK
ReadX 11848 3456 2560 2560 NT_STATUS_OK
ReadX 11848 3136 512 512 NT_STATUS_OK
ReadX 11848 2880 4096 4096 NT_STATUS_OK
ReadX 11848 3264 3072 3072 NT_STATUS_OK
ReadX 11848 320 4096 4096 NT_STATUS_OK
ReadX 11848 1024 4096 4096 NT_STATUS_OK
ReadX 11848 3616 4096 4096 NT_STATUS_OK
ReadX 11848 1939 64 64 NT_STATUS_OK
ReadX 11848 128 248 248 NT_STATUS_OK
ReadX 11848 128 608 608 NT_STATUS_OK
ReadX 11848 2858 1024 1024 NT_STATUS_OK
ReadX 11848 2810 4096 4096 NT_STATUS_OK
ReadX 11848 2826 4096 4096 NT_STATUS_OK
ReadX 11848 2580 2048 2048 NT_STATUS_OK
ReadX 11848 2800 2560 2560 NT_STATUS_OK
ReadX 11848 2100 4096 4096 NT_STATUS_OK
ReadX 11848 2084 4096 4096 NT_STATUS_OK
ReadX 11848 868 4096 4096 NT_STATUS_OK
ReadX 11848 2324 4096 4096 NT_STATUS_OK
ReadX 11848 884 4096 4096 NT_STATUS_OK
ReadX 11848 2604 1024 1024 NT_STATUS_OK
ReadX 11848 580 4096 4096 NT_STATUS_OK
ReadX 11848 596 4096 4096 NT_STATUS_OK
ReadX 11848 2752 4096 4096 NT_STATUS_OK
ReadX 11848 2842 1024 1024 NT_STATUS_OK
ReadX 11848 660 4096 4096 NT_STATUS_OK
ReadX 11848 2720 4096 4096 NT_STATUS_OK
ReadX 11848 2736 4096 4096 NT_STATUS_OK
ReadX 11848 628 4096 4096 NT_STATUS_OK
ReadX 11848 2704 4096 4096 NT_STATUS_OK
ReadX 11848 1556 4096 4096 NT_STATUS_OK
ReadX 11848 576 4096 4096 NT_STATUS_OK
ReadX 11848 3168 1536 1536 NT_STATUS_OK
ReadX 11848 832 4096 4096 NT_STATUS_OK
ReadX 11848 1088 4096 4096 NT_STATUS_OK
ReadX 11848 1344 4096 4096 NT_STATUS_OK
ReadX 11848 1600 4096 4096 NT_STATUS_OK
ReadX 11848 1856 4096 4096 NT_STATUS_OK
ReadX 11848 2112 4096 4096 NT_STATUS_OK
ReadX 11848 1892 4096 4096 NT_STATUS_OK
ReadX 11848 820 4096 4096 NT_STATUS_OK
ReadX 11848 788 4096 4096 NT_STATUS_OK
ReadX 11848 1604 4096 4096 NT_STATUS_OK
ReadX 11848 3648 4096 4096 NT_STATUS_OK
ReadX 11848 2608 4096 4096 NT_STATUS_OK
ReadX 11848 548 4096 4096 NT_STATUS_OK
ReadX 11848 740 4096 4096 NT_STATUS_OK
ReadX 11848 1344 4096 4096 NT_STATUS_OK
ReadX 11848 3392 4096 4096 NT_STATUS_OK
ReadX 11848 3904 4096 4096 NT_STATUS_OK
ReadX 11848 644 4096 4096 NT_STATUS_OK
ReadX 11848 676 4096 4096 NT_STATUS_OK
ReadX 11848 2688 4096 4096 NT_STATUS_OK
ReadX 11848 320 4096 4096 NT_STATUS_OK
ReadX 11848 900 4096 4096 NT_STATUS_OK
ReadX 11848 1908 4096 4096 NT_STATUS_OK
ReadX 11848 852 4096 4096 NT_STATUS_OK
ReadX 11848 724 4096 4096 NT_STATUS_OK
ReadX 11848 2292 4096 4096 NT_STATUS_OK
ReadX 11848 612 4096 4096 NT_STATUS_OK
ReadX 11848 388 4096 4096 NT_STATUS_OK
ReadX 11848 2368 4096 4096 NT_STATUS_OK
ReadX 11848 2624 4096 4096 NT_STATUS_OK
ReadX 11848 500 4096 4096 NT_STATUS_OK
ReadX 11848 356 4096 4096 NT_STATUS_OK
ReadX 11848 1024 4096 4096 NT_STATUS_OK
ReadX 11848 576 4096 4096 NT_STATUS_OK
ReadX 11848 340 4096 4096 NT_STATUS_OK
ReadX 11848 420 4096 4096 NT_STATUS_OK
ReadX 11848 1600 4096 4096 NT_STATUS_OK
ReadX 11848 404 4096 4096 NT_STATUS_OK
ReadX 11848 1428 4096 4096 NT_STATUS_OK
ReadX 11848 2656 4096 4096 NT_STATUS_OK
ReadX 11848 2624 4096 4096 NT_STATUS_OK
ReadX 11848 452 4096 4096 NT_STATUS_OK
ReadX 11848 692 4096 4096 NT_STATUS_OK
ReadX 11848 564 4096 4096 NT_STATUS_OK
ReadX 11848 372 4096 4096 NT_STATUS_OK
ReadX 11848 468 4096 4096 NT_STATUS_OK
ReadX 11848 484 4096 4096 NT_STATUS_OK
ReadX 11848 1088 4096 4096 NT_STATUS_OK
ReadX 11848 1924 4096 4096 NT_STATUS_OK
ReadX 11848 2768 4096 4096 NT_STATUS_OK
ReadX 11848 832 4096 4096 NT_STATUS_OK
ReadX 11848 836 4096 4096 NT_STATUS_OK
ReadX 11848 1856 4096 4096 NT_STATUS_OK
ReadX 11848 2640 4096 4096 NT_STATUS_OK
ReadX 11848 436 4096 4096 NT_STATUS_OK
ReadX 11848 1828 4096 4096 NT_STATUS_OK
ReadX 11848 804 4096 4096 NT_STATUS_OK
ReadX 11848 1860 4096 4096 NT_STATUS_OK
ReadX 11848 1812 4096 4096 NT_STATUS_OK
ReadX 11848 756 4096 4096 NT_STATUS_OK
ReadX 11848 1636 4096 4096 NT_STATUS_OK
ReadX 11848 772 4096 4096 NT_STATUS_OK
ReadX 11848 2036 4096 4096 NT_STATUS_OK
ReadX 11848 1220 4096 4096 NT_STATUS_OK
ReadX 11848 1652 4096 4096 NT_STATUS_OK
ReadX 11848 2588 4096 4096 NT_STATUS_OK
ReadX 11848 916 4096 4096 NT_STATUS_OK
ReadX 11848 260 4096 4096 NT_STATUS_OK
ReadX 11848 932 4096 4096 NT_STATUS_OK
ReadX 11848 2624 4096 4096 NT_STATUS_OK
ReadX 11848 308 4096 4096 NT_STATUS_OK
ReadX 11848 292 4096 4096 NT_STATUS_OK
ReadX 11848 1140 4096 4096 NT_STATUS_OK
ReadX 11848 276 4096 4096 NT_STATUS_OK
ReadX 11848 2020 4096 4096 NT_STATUS_OK
ReadX 11848 2880 4096 4096 NT_STATUS_OK
ReadX 11848 516 4096 4096 NT_STATUS_OK
ReadX 11848 1844 4096 4096 NT_STATUS_OK
ReadX 11848 1124 4096 4096 NT_STATUS_OK
ReadX 11848 3136 4096 4096 NT_STATUS_OK
ReadX 11848 324 4096 4096 NT_STATUS_OK
ReadX 11848 1156 4096 4096 NT_STATUS_OK
ReadX 11848 1172 4096 4096 NT_STATUS_OK
ReadX 11848 2112 4096 4096 NT_STATUS_OK
ReadX 11848 2368 4096 4096 NT_STATUS_OK
ReadX 11848 964 4096 4096 NT_STATUS_OK
ReadX 11848 980 4096 4096 NT_STATUS_OK
ReadX 11848 1012 4096 4096 NT_STATUS_OK
ReadX 11848 532 4096 4096 NT_STATUS_OK
ReadX 11848 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11848 1620 4096 4096 NT_STATUS_OK
ReadX 11848 1604 4096 4096 NT_STATUS_OK
ReadX 11848 2116 4096 4096 NT_STATUS_OK
ReadX 11848 2132 4096 4096 NT_STATUS_OK
ReadX 11848 2148 4096 4096 NT_STATUS_OK
ReadX 11848 2276 4096 4096 NT_STATUS_OK
ReadX 11848 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11873 NT_STATUS_OK
QUERY_FILE_INFORMATION 11828 1004 NT_STATUS_OK
Close 11828 NT_STATUS_OK
WriteX 11873 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11873 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 1004 NT_STATUS_OK
Close 11830 NT_STATUS_OK
WriteX 11873 0 65536 65536 NT_STATUS_OK
WriteX 11873 65536 64850 64850 NT_STATUS_OK
Close 11873 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11875 NT_STATUS_OK
WriteX 11875 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11875 258 NT_STATUS_OK
ReadX 11848 2068 4096 4096 NT_STATUS_OK
ReadX 11848 1588 4096 4096 NT_STATUS_OK
ReadX 11848 1572 4096 4096 NT_STATUS_OK
WriteX 11875 0 18630 18630 NT_STATUS_OK
Flush 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11877 NT_STATUS_OK
Close 11877 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11879 NT_STATUS_OK
ReadX 11879 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11848 612 4096 4096 NT_STATUS_OK
ReadX 11848 564 4096 4096 NT_STATUS_OK
ReadX 11848 1876 4096 4096 NT_STATUS_OK
ReadX 11848 628 4096 4096 NT_STATUS_OK
ReadX 11848 740 4096 4096 NT_STATUS_OK
ReadX 11848 724 4096 4096 NT_STATUS_OK
ReadX 11848 644 4096 4096 NT_STATUS_OK
ReadX 11848 2324 4096 4096 NT_STATUS_OK
ReadX 11848 660 4096 4096 NT_STATUS_OK
ReadX 11848 852 4096 4096 NT_STATUS_OK
ReadX 11848 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11848 2368 4096 4096 NT_STATUS_OK
ReadX 11848 1024 4096 4096 NT_STATUS_OK
ReadX 11848 320 4096 4096 NT_STATUS_OK
ReadX 11848 580 4096 4096 NT_STATUS_OK
ReadX 11848 3136 512 512 NT_STATUS_OK
ReadX 11848 2880 4096 4096 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11880 NT_STATUS_OK
ReadX 11880 61440 4096 4096 NT_STATUS_OK
ReadX 11880 126976 4096 4096 NT_STATUS_OK
WriteX 11880 0 65536 65536 NT_STATUS_OK
WriteX 11880 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11881 NT_STATUS_OK
ReadX 11881 61440 4096 4096 NT_STATUS_OK
ReadX 11881 126976 4096 4096 NT_STATUS_OK
ReadX 11881 192512 4096 4096 NT_STATUS_OK
ReadX 11881 258048 4096 4096 NT_STATUS_OK
WriteX 11881 0 65536 65536 NT_STATUS_OK
WriteX 11881 65536 65536 65536 NT_STATUS_OK
WriteX 11881 131072 65536 65536 NT_STATUS_OK
WriteX 11881 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 61440 4096 4096 NT_STATUS_OK
ReadX 11882 126976 4096 4096 NT_STATUS_OK
ReadX 11882 192512 4096 4096 NT_STATUS_OK
ReadX 11882 258048 4096 4096 NT_STATUS_OK
ReadX 11882 323584 4096 4096 NT_STATUS_OK
ReadX 11882 389120 4096 4096 NT_STATUS_OK
ReadX 11882 454656 4096 4096 NT_STATUS_OK
ReadX 11882 520192 4096 4096 NT_STATUS_OK
WriteX 11882 0 65536 65536 NT_STATUS_OK
WriteX 11882 65536 65536 65536 NT_STATUS_OK
WriteX 11882 131072 65536 65536 NT_STATUS_OK
WriteX 11882 196608 65536 65536 NT_STATUS_OK
WriteX 11882 262144 65536 65536 NT_STATUS_OK
WriteX 11882 327680 65536 65536 NT_STATUS_OK
WriteX 11882 393216 65536 65536 NT_STATUS_OK
WriteX 11882 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11884 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11885 NT_STATUS_OK
WriteX 11885 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11885 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11883 0 8192 8192 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11883 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11883 0 8192 8192 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11883 0 8192 8192 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11883 0 8192 8192 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11887 NT_STATUS_OK
Close 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Close 11847 NT_STATUS_OK
Close 11880 NT_STATUS_OK
Close 11881 NT_STATUS_OK
Close 11882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11890 NT_STATUS_OK
WriteX 11890 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11890 258 NT_STATUS_OK
WriteX 11890 0 62591 62591 NT_STATUS_OK
Close 11890 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11892 NT_STATUS_OK
Close 11892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11895 NT_STATUS_OK
WriteX 11895 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11895 258 NT_STATUS_OK
WriteX 11895 0 10845 10845 NT_STATUS_OK
Close 11895 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11900 NT_STATUS_OK
WriteX 11900 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 258 NT_STATUS_OK
WriteX 11900 0 30118 30118 NT_STATUS_OK
Close 11900 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11885 0 64 64 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 61440 61440 NT_STATUS_OK
ReadX 11902 61440 4096 4096 NT_STATUS_OK
ReadX 11902 65536 61440 61440 NT_STATUS_OK
ReadX 11902 126976 4096 4096 NT_STATUS_OK
ReadX 11902 131072 61440 61440 NT_STATUS_OK
ReadX 11902 192512 4096 4096 NT_STATUS_OK
ReadX 11902 196608 61440 61440 NT_STATUS_OK
ReadX 11902 258048 4096 4096 NT_STATUS_OK
ReadX 11902 262144 61440 61440 NT_STATUS_OK
ReadX 11902 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 61440 61440 NT_STATUS_OK
ReadX 11903 61440 4096 4096 NT_STATUS_OK
ReadX 11903 65536 61440 61440 NT_STATUS_OK
ReadX 11903 126976 4096 4096 NT_STATUS_OK
ReadX 11903 131072 61440 61440 NT_STATUS_OK
ReadX 11903 192512 4096 4096 NT_STATUS_OK
ReadX 11903 196608 61440 61440 NT_STATUS_OK
ReadX 11903 258048 4096 4096 NT_STATUS_OK
ReadX 11903 262144 61440 61440 NT_STATUS_OK
ReadX 11903 323584 4096 4096 NT_STATUS_OK
ReadX 11903 327680 61440 61440 NT_STATUS_OK
ReadX 11903 389120 4096 4096 NT_STATUS_OK
ReadX 11903 393216 61440 61440 NT_STATUS_OK
ReadX 11903 454656 4096 4096 NT_STATUS_OK
ReadX 11903 458752 61440 61440 NT_STATUS_OK
ReadX 11903 520192 4096 4096 NT_STATUS_OK
ReadX 11903 524288 61440 61440 NT_STATUS_OK
ReadX 11903 585728 4096 4096 NT_STATUS_OK
ReadX 11903 589824 61440 61440 NT_STATUS_OK
ReadX 11903 651264 4096 4096 NT_STATUS_OK
ReadX 11903 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 61440 61440 NT_STATUS_OK
ReadX 11904 61440 4096 4096 NT_STATUS_OK
ReadX 11904 65536 61440 61440 NT_STATUS_OK
ReadX 11904 126976 4096 4096 NT_STATUS_OK
ReadX 11904 131072 61440 61440 NT_STATUS_OK
ReadX 11904 192512 4096 4096 NT_STATUS_OK
ReadX 11904 196608 61440 61440 NT_STATUS_OK
ReadX 11904 258048 4096 4096 NT_STATUS_OK
ReadX 11904 262144 61440 61440 NT_STATUS_OK
ReadX 11904 323584 4096 4096 NT_STATUS_OK
ReadX 11904 327680 61440 61440 NT_STATUS_OK
ReadX 11904 389120 4096 4096 NT_STATUS_OK
ReadX 11904 393216 61440 61440 NT_STATUS_OK
ReadX 11904 454656 4096 4096 NT_STATUS_OK
ReadX 11904 458752 61440 61440 NT_STATUS_OK
ReadX 11904 520192 4096 4096 NT_STATUS_OK
ReadX 11904 524288 61440 61440 NT_STATUS_OK
ReadX 11904 585728 4096 4096 NT_STATUS_OK
ReadX 11904 589824 61440 61440 NT_STATUS_OK
ReadX 11904 651264 4096 4096 NT_STATUS_OK
ReadX 11904 655360 61440 61440 NT_STATUS_OK
ReadX 11904 716800 4096 4096 NT_STATUS_OK
ReadX 11904 720896 61440 61440 NT_STATUS_OK
ReadX 11904 782336 4096 4096 NT_STATUS_OK
ReadX 11904 786432 61440 61440 NT_STATUS_OK
ReadX 11904 847872 4096 4096 NT_STATUS_OK
ReadX 11904 851968 61440 61440 NT_STATUS_OK
ReadX 11904 913408 4096 4096 NT_STATUS_OK
ReadX 11904 917504 61440 61440 NT_STATUS_OK
ReadX 11904 978944 4096 4096 NT_STATUS_OK
ReadX 11904 983040 61440 61440 NT_STATUS_OK
ReadX 11904 1044480 4096 4096 NT_STATUS_OK
ReadX 11904 1048576 61440 61440 NT_STATUS_OK
ReadX 11904 1110016 4096 4096 NT_STATUS_OK
ReadX 11904 1114112 61440 61440 NT_STATUS_OK
ReadX 11904 1175552 4096 4096 NT_STATUS_OK
ReadX 11904 1179648 61440 61440 NT_STATUS_OK
ReadX 11904 1241088 4096 4096 NT_STATUS_OK
ReadX 11904 1245184 61440 61440 NT_STATUS_OK
ReadX 11904 1306624 4096 4096 NT_STATUS_OK
ReadX 11904 1310720 61440 61440 NT_STATUS_OK
ReadX 11904 1372160 4096 4096 NT_STATUS_OK
ReadX 11904 1376256 61440 61440 NT_STATUS_OK
ReadX 11904 1437696 4096 4096 NT_STATUS_OK
ReadX 11904 1441792 61440 61440 NT_STATUS_OK
ReadX 11904 1503232 4096 4096 NT_STATUS_OK
ReadX 11904 1507328 61440 61440 NT_STATUS_OK
ReadX 11904 1568768 4096 4096 NT_STATUS_OK
ReadX 11904 1572864 61440 61440 NT_STATUS_OK
ReadX 11904 1634304 4096 4096 NT_STATUS_OK
ReadX 11904 1638400 61440 61440 NT_STATUS_OK
ReadX 11904 1699840 4096 4096 NT_STATUS_OK
ReadX 11904 1703936 61440 61440 NT_STATUS_OK
ReadX 11904 1765376 4096 4096 NT_STATUS_OK
ReadX 11904 1769472 61440 61440 NT_STATUS_OK
ReadX 11904 1830912 4096 4096 NT_STATUS_OK
ReadX 11904 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
ReadX 11909 4096 4096 4096 NT_STATUS_OK
ReadX 11909 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Close 11908 NT_STATUS_OK
Close 11909 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11913 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11912 NT_STATUS_OK
Close 11913 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11917 NT_STATUS_OK
ReadX 11917 0 8192 8192 NT_STATUS_OK
ReadX 11917 8192 8192 8192 NT_STATUS_OK
ReadX 11917 16384 8192 8192 NT_STATUS_OK
ReadX 11917 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11919 NT_STATUS_OK
Close 11919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11916 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11922 NT_STATUS_OK
WriteX 11922 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 258 NT_STATUS_OK
WriteX 11922 0 10438 10438 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11923 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11926 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11928 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11929 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
ReadX 11931 4096 4096 4096 NT_STATUS_OK
ReadX 11931 8192 4096 4096 NT_STATUS_OK
ReadX 11931 12288 8192 8192 NT_STATUS_OK
ReadX 11931 20480 8192 8192 NT_STATUS_OK
ReadX 11931 28672 8192 8192 NT_STATUS_OK
ReadX 11931 36864 8192 8192 NT_STATUS_OK
ReadX 11931 45056 8192 8192 NT_STATUS_OK
ReadX 11931 53248 8192 8192 NT_STATUS_OK
ReadX 11931 61440 8192 8192 NT_STATUS_OK
ReadX 11931 69632 8192 8192 NT_STATUS_OK
ReadX 11931 77824 8192 8192 NT_STATUS_OK
ReadX 11931 86016 8192 8192 NT_STATUS_OK
ReadX 11931 94208 8192 8192 NT_STATUS_OK
ReadX 11931 102400 8192 8192 NT_STATUS_OK
ReadX 11931 110592 8192 8192 NT_STATUS_OK
ReadX 11931 118784 8192 8192 NT_STATUS_OK
ReadX 11931 126976 8192 8192 NT_STATUS_OK
ReadX 11931 135168 8192 8192 NT_STATUS_OK
ReadX 11931 143360 8192 8192 NT_STATUS_OK
ReadX 11931 151552 8192 8192 NT_STATUS_OK
ReadX 11931 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11936 NT_STATUS_OK
WriteX 11936 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11936 258 NT_STATUS_OK
WriteX 11936 0 28489 28489 NT_STATUS_OK
Close 11936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11937 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11939 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 8192 8192 NT_STATUS_OK
ReadX 11943 8192 8192 8192 NT_STATUS_OK
ReadX 11943 16384 8192 8192 NT_STATUS_OK
ReadX 11943 24576 8192 8192 NT_STATUS_OK
ReadX 11943 32768 16384 16384 NT_STATUS_OK
ReadX 11943 49152 8192 8192 NT_STATUS_OK
ReadX 11943 57344 8192 8192 NT_STATUS_OK
ReadX 11943 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11948 NT_STATUS_OK
WriteX 11948 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
WriteX 11948 0 29253 29253 NT_STATUS_OK
Close 11948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11955 NT_STATUS_OK
WriteX 11955 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11955 258 NT_STATUS_OK
WriteX 11955 0 30183 30183 NT_STATUS_OK
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11958 NT_STATUS_OK
WriteX 11958 0 510 510 NT_STATUS_OK
WriteX 11958 510 512 512 NT_STATUS_OK
WriteX 11958 1022 510 510 NT_STATUS_OK
WriteX 11958 1532 510 510 NT_STATUS_OK
WriteX 11958 2042 168 168 NT_STATUS_OK
Close 11958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
WriteX 11961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 61440 4096 4096 NT_STATUS_OK
ReadX 11962 126976 4096 4096 NT_STATUS_OK
WriteX 11962 0 65536 65536 NT_STATUS_OK
WriteX 11962 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 61440 4096 4096 NT_STATUS_OK
ReadX 11963 126976 4096 4096 NT_STATUS_OK
ReadX 11963 192512 4096 4096 NT_STATUS_OK
ReadX 11963 258048 4096 4096 NT_STATUS_OK
WriteX 11963 0 65536 65536 NT_STATUS_OK
WriteX 11963 65536 65536 65536 NT_STATUS_OK
WriteX 11963 131072 65536 65536 NT_STATUS_OK
WriteX 11963 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 61440 4096 4096 NT_STATUS_OK
ReadX 11964 126976 4096 4096 NT_STATUS_OK
ReadX 11964 192512 4096 4096 NT_STATUS_OK
ReadX 11964 258048 4096 4096 NT_STATUS_OK
ReadX 11964 323584 4096 4096 NT_STATUS_OK
ReadX 11964 389120 4096 4096 NT_STATUS_OK
ReadX 11964 454656 4096 4096 NT_STATUS_OK
ReadX 11964 520192 4096 4096 NT_STATUS_OK
WriteX 11964 0 65536 65536 NT_STATUS_OK
WriteX 11964 65536 65536 65536 NT_STATUS_OK
WriteX 11964 131072 65536 65536 NT_STATUS_OK
WriteX 11964 196608 65536 65536 NT_STATUS_OK
WriteX 11964 262144 65536 65536 NT_STATUS_OK
WriteX 11964 327680 65536 65536 NT_STATUS_OK
WriteX 11964 393216 65536 65536 NT_STATUS_OK
WriteX 11964 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11965 NT_STATUS_OK
Close 11965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11967 NT_STATUS_OK
Close 11967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11976 NT_STATUS_OK
Close 11976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11980 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11994 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12019 NT_STATUS_OK
Close 12019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12027 NT_STATUS_OK
Close 12027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12033 NT_STATUS_OK
WriteX 12033 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12033 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12033 0 65536 65536 NT_STATUS_OK
WriteX 12033 65536 65536 65536 NT_STATUS_OK
WriteX 12033 131072 65536 65536 NT_STATUS_OK
WriteX 12033 196608 65536 65536 NT_STATUS_OK
WriteX 12033 262144 26634 26634 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
Close 12040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
ReadX 12041 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12049 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12051 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12055 NT_STATUS_OK
Close 12055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12069 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12084 NT_STATUS_OK
Close 12084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12093 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12103 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12106 NT_STATUS_OK
Close 12106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12108 NT_STATUS_OK
Close 12108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12118 NT_STATUS_OK
Close 12118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12120 NT_STATUS_OK
ReadX 12120 0 4096 4096 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
Close 12134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12135 NT_STATUS_OK
ReadX 12135 0 4096 4096 NT_STATUS_OK
Close 12135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12136 NT_STATUS_OK
ReadX 12136 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12165 0 4096 4096 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12166 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
ReadX 12167 4096 4096 4096 NT_STATUS_OK
ReadX 12167 8192 4096 4096 NT_STATUS_OK
ReadX 12167 12288 4096 4096 NT_STATUS_OK
ReadX 12167 16384 4096 4096 NT_STATUS_OK
ReadX 12167 20480 4096 4096 NT_STATUS_OK
ReadX 12167 24576 4096 4096 NT_STATUS_OK
ReadX 12167 28672 4096 4096 NT_STATUS_OK
ReadX 12167 32768 4096 4096 NT_STATUS_OK
ReadX 12167 36864 4096 4096 NT_STATUS_OK
ReadX 12167 40960 4096 4096 NT_STATUS_OK
ReadX 12167 45056 4096 4096 NT_STATUS_OK
ReadX 12167 49152 4096 4096 NT_STATUS_OK
ReadX 12167 53248 4096 4096 NT_STATUS_OK
ReadX 12167 57344 4096 4096 NT_STATUS_OK
ReadX 12167 61440 4096 4096 NT_STATUS_OK
ReadX 12167 65536 4096 4096 NT_STATUS_OK
ReadX 12167 69632 4096 4096 NT_STATUS_OK
ReadX 12167 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12167 1004 NT_STATUS_OK
WriteX 12167 0 4096 4096 NT_STATUS_OK
Close 12167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12168 NT_STATUS_OK
SET_FILE_INFORMATION 12168 1004 NT_STATUS_OK
Close 12168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12170 NT_STATUS_OK
Close 12170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12173 NT_STATUS_OK
WriteX 12173 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12173 258 NT_STATUS_OK
WriteX 12173 0 65536 65536 NT_STATUS_OK
WriteX 12173 65536 19979 19979 NT_STATUS_OK
Close 12173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12174 NT_STATUS_OK
ReadX 12174 0 4096 4096 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
Flush 12174 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
Flush 12174 NT_STATUS_OK
QUERY_FILE_INFORMATION 12174 1004 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
Flush 12174 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
Flush 12174 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
Flush 12174 NT_STATUS_OK
SET_FILE_INFORMATION 12174 1004 NT_STATUS_OK
WriteX 12174 0 4096 4096 NT_STATUS_OK
Flush 12174 NT_STATUS_OK
Close 12174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 0 4096 4096 NT_STATUS_OK
Close 12175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12179 1004 NT_STATUS_OK
WriteX 12179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12180 NT_STATUS_OK
Close 12180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12176 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12185 NT_STATUS_OK
WriteX 12185 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12185 258 NT_STATUS_OK
WriteX 12185 0 65536 65536 NT_STATUS_OK
WriteX 12185 65536 17654 17654 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Flush 12186 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Flush 12186 NT_STATUS_OK
QUERY_FILE_INFORMATION 12186 1004 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Flush 12186 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Flush 12186 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Flush 12186 NT_STATUS_OK
SET_FILE_INFORMATION 12186 1004 NT_STATUS_OK
WriteX 12186 0 4096 4096 NT_STATUS_OK
Flush 12186 NT_STATUS_OK
Close 12186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12187 NT_STATUS_OK
SET_FILE_INFORMATION 12187 1004 NT_STATUS_OK
Close 12187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12189 NT_STATUS_OK
Close 12189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
ReadX 12191 4096 4096 4096 NT_STATUS_OK
ReadX 12191 8192 4096 4096 NT_STATUS_OK
ReadX 12191 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12191 16384 4096 4096 NT_STATUS_OK
ReadX 12191 20480 4096 4096 NT_STATUS_OK
ReadX 12191 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
Close 12192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12194 1004 NT_STATUS_OK
WriteX 12194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12197 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12200 NT_STATUS_OK
WriteX 12200 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12200 258 NT_STATUS_OK
WriteX 12200 0 65536 65536 NT_STATUS_OK
WriteX 12200 65536 19490 19490 NT_STATUS_OK
Close 12200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 4096 4096 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
QUERY_FILE_INFORMATION 12201 1004 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
SET_FILE_INFORMATION 12201 1004 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
Flush 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12202 NT_STATUS_OK
SET_FILE_INFORMATION 12202 1004 NT_STATUS_OK
Close 12202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12203 NT_STATUS_OK
ReadX 12203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12204 NT_STATUS_OK
Close 12204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12206 0 4096 4096 NT_STATUS_OK
Close 12206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12208 NT_STATUS_OK
ReadX 12208 0 4096 4096 NT_STATUS_OK
ReadX 12208 4096 4096 4096 NT_STATUS_OK
ReadX 12208 8192 4096 4096 NT_STATUS_OK
ReadX 12208 12288 4096 4096 NT_STATUS_OK
ReadX 12208 16384 4096 4096 NT_STATUS_OK
ReadX 12208 20480 4096 4096 NT_STATUS_OK
ReadX 12208 24576 4096 4096 NT_STATUS_OK
ReadX 12208 28672 4096 4096 NT_STATUS_OK
ReadX 12208 32768 4096 4096 NT_STATUS_OK
ReadX 12208 36864 4096 4096 NT_STATUS_OK
ReadX 12208 40960 4096 4096 NT_STATUS_OK
ReadX 12208 45056 4096 4096 NT_STATUS_OK
ReadX 12208 49152 4096 4096 NT_STATUS_OK
ReadX 12208 53248 4096 4096 NT_STATUS_OK
ReadX 12208 57344 4096 4096 NT_STATUS_OK
ReadX 12208 61440 4096 4096 NT_STATUS_OK
ReadX 12208 65536 4096 4096 NT_STATUS_OK
ReadX 12208 69632 4096 4096 NT_STATUS_OK
ReadX 12208 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12208 1004 NT_STATUS_OK
WriteX 12208 0 4096 4096 NT_STATUS_OK
Close 12208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12209 NT_STATUS_OK
SET_FILE_INFORMATION 12209 1004 NT_STATUS_OK
Close 12209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12211 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12203 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12214 NT_STATUS_OK
WriteX 12214 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12214 258 NT_STATUS_OK
WriteX 12214 0 65536 65536 NT_STATUS_OK
WriteX 12214 65536 8866 8866 NT_STATUS_OK
Close 12214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 4096 4096 NT_STATUS_OK
WriteX 12215 0 4096 4096 NT_STATUS_OK
Flush 12215 NT_STATUS_OK
SET_FILE_INFORMATION 12215 1004 NT_STATUS_OK
WriteX 12215 0 4096 4096 NT_STATUS_OK
Flush 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12219 1004 NT_STATUS_OK
WriteX 12219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12225 NT_STATUS_OK
WriteX 12225 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12225 258 NT_STATUS_OK
WriteX 12225 0 65536 65536 NT_STATUS_OK
WriteX 12225 65536 9298 9298 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Flush 12226 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Flush 12226 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12227 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12229 NT_STATUS_OK
Close 12229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12232 0 4096 4096 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12233 4096 4096 4096 NT_STATUS_OK
ReadX 12233 8192 4096 4096 NT_STATUS_OK
ReadX 12233 12288 4096 4096 NT_STATUS_OK
ReadX 12233 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12233 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12242 NT_STATUS_OK
WriteX 12242 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12242 258 NT_STATUS_OK
WriteX 12242 0 65536 65536 NT_STATUS_OK
WriteX 12242 65536 11540 11540 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
WriteX 12243 0 4096 4096 NT_STATUS_OK
Flush 12243 NT_STATUS_OK
SET_FILE_INFORMATION 12243 1004 NT_STATUS_OK
WriteX 12243 0 4096 4096 NT_STATUS_OK
Flush 12243 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12244 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12245 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12246 NT_STATUS_OK
Close 12246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 61440 4096 4096 NT_STATUS_OK
ReadX 12248 126976 4096 4096 NT_STATUS_OK
WriteX 12248 0 65536 65536 NT_STATUS_OK
WriteX 12248 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 61440 4096 4096 NT_STATUS_OK
ReadX 12249 126976 4096 4096 NT_STATUS_OK
ReadX 12249 192512 4096 4096 NT_STATUS_OK
ReadX 12249 258048 4096 4096 NT_STATUS_OK
WriteX 12249 0 65536 65536 NT_STATUS_OK
WriteX 12249 65536 65536 65536 NT_STATUS_OK
WriteX 12249 131072 65536 65536 NT_STATUS_OK
WriteX 12249 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 61440 4096 4096 NT_STATUS_OK
ReadX 12250 126976 4096 4096 NT_STATUS_OK
ReadX 12250 192512 4096 4096 NT_STATUS_OK
ReadX 12250 258048 4096 4096 NT_STATUS_OK
ReadX 12250 323584 4096 4096 NT_STATUS_OK
ReadX 12250 389120 4096 4096 NT_STATUS_OK
ReadX 12250 454656 4096 4096 NT_STATUS_OK
ReadX 12250 520192 4096 4096 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 65536 65536 NT_STATUS_OK
WriteX 12250 131072 65536 65536 NT_STATUS_OK
WriteX 12250 196608 65536 65536 NT_STATUS_OK
WriteX 12250 262144 65536 65536 NT_STATUS_OK
WriteX 12250 327680 65536 65536 NT_STATUS_OK
WriteX 12250 393216 65536 65536 NT_STATUS_OK
WriteX 12250 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
ReadX 12251 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12252 NT_STATUS_OK
WriteX 12252 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12252 258 NT_STATUS_OK
WriteX 12252 0 53 53 NT_STATUS_OK
Close 12252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12251 8192 4096 4096 NT_STATUS_OK
ReadX 12251 12288 4096 4096 NT_STATUS_OK
WriteX 12255 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12255 258 NT_STATUS_OK
ReadX 12251 16384 4096 4096 NT_STATUS_OK
ReadX 12251 20480 4096 4096 NT_STATUS_OK
WriteX 12255 0 15360 15360 NT_STATUS_OK
Close 12255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12256 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12256 1004 NT_STATUS_OK
WriteX 12256 0 4096 4096 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12259 4096 4096 4096 NT_STATUS_OK
ReadX 12259 8192 4096 4096 NT_STATUS_OK
ReadX 12259 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
ReadX 12262 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
ReadX 12263 4096 4096 4096 NT_STATUS_OK
ReadX 12263 8192 4096 4096 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
WriteX 12264 0 15360 15360 NT_STATUS_OK
Close 12264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12266 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12269 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
Close 12269 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Close 12265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
ReadX 12272 4096 4096 4096 NT_STATUS_OK
ReadX 12272 8192 4096 4096 NT_STATUS_OK
ReadX 12272 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12272 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12272 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12274 NT_STATUS_OK
WriteX 12274 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12274 258 NT_STATUS_OK
WriteX 12274 0 53 53 NT_STATUS_OK
Close 12274 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12273 4096 4096 4096 NT_STATUS_OK
ReadX 12273 8192 4096 4096 NT_STATUS_OK
ReadX 12273 12288 4096 4096 NT_STATUS_OK
WriteX 12277 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12277 258 NT_STATUS_OK
WriteX 12277 0 12006 12006 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12278 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12278 1004 NT_STATUS_OK
WriteX 12278 0 4096 4096 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12282 NT_STATUS_OK
Close 12282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12281 4096 4096 4096 NT_STATUS_OK
ReadX 12281 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12284 NT_STATUS_OK
WriteX 12284 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12284 258 NT_STATUS_OK
WriteX 12284 0 11991 11991 NT_STATUS_OK
Close 12284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12285 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12285 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12286 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12288 NT_STATUS_OK
ReadX 12288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12289 NT_STATUS_OK
SET_FILE_INFORMATION 12289 1004 NT_STATUS_OK
Close 12289 NT_STATUS_OK
WriteX 12285 0 4096 4096 NT_STATUS_OK
Close 12285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12292 NT_STATUS_OK
ReadX 12292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12293 NT_STATUS_OK
Close 12293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12292 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12292 1004 NT_STATUS_OK
ReadX 12292 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12292 1004 NT_STATUS_OK
WriteX 12292 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12292 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12292 1004 NT_STATUS_OK
Close 12268 NT_STATUS_OK
WriteX 12272 0 19054 19054 NT_STATUS_OK
WriteX 12292 0 12288 12288 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Close 12292 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 0 61440 61440 NT_STATUS_OK
ReadX 12299 61440 4096 4096 NT_STATUS_OK
ReadX 12299 65536 61440 61440 NT_STATUS_OK
ReadX 12299 126976 4096 4096 NT_STATUS_OK
ReadX 12299 131072 61440 61440 NT_STATUS_OK
ReadX 12299 192512 4096 4096 NT_STATUS_OK
ReadX 12299 196608 61440 61440 NT_STATUS_OK
ReadX 12299 258048 4096 4096 NT_STATUS_OK
ReadX 12299 262144 61440 61440 NT_STATUS_OK
ReadX 12299 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 0 61440 61440 NT_STATUS_OK
ReadX 12300 61440 4096 4096 NT_STATUS_OK
ReadX 12300 65536 61440 61440 NT_STATUS_OK
ReadX 12300 126976 4096 4096 NT_STATUS_OK
ReadX 12300 131072 61440 61440 NT_STATUS_OK
ReadX 12300 192512 4096 4096 NT_STATUS_OK
ReadX 12300 196608 61440 61440 NT_STATUS_OK
ReadX 12300 258048 4096 4096 NT_STATUS_OK
ReadX 12300 262144 61440 61440 NT_STATUS_OK
ReadX 12300 323584 4096 4096 NT_STATUS_OK
ReadX 12300 327680 61440 61440 NT_STATUS_OK
ReadX 12300 389120 4096 4096 NT_STATUS_OK
ReadX 12300 393216 61440 61440 NT_STATUS_OK
ReadX 12300 454656 4096 4096 NT_STATUS_OK
ReadX 12300 458752 61440 61440 NT_STATUS_OK
ReadX 12300 520192 4096 4096 NT_STATUS_OK
ReadX 12300 524288 61440 61440 NT_STATUS_OK
ReadX 12300 585728 4096 4096 NT_STATUS_OK
ReadX 12300 589824 61440 61440 NT_STATUS_OK
ReadX 12300 651264 4096 4096 NT_STATUS_OK
ReadX 12300 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 61440 61440 NT_STATUS_OK
ReadX 12301 61440 4096 4096 NT_STATUS_OK
ReadX 12301 65536 61440 61440 NT_STATUS_OK
ReadX 12301 126976 4096 4096 NT_STATUS_OK
ReadX 12301 131072 61440 61440 NT_STATUS_OK
ReadX 12301 192512 4096 4096 NT_STATUS_OK
ReadX 12301 196608 61440 61440 NT_STATUS_OK
ReadX 12301 258048 4096 4096 NT_STATUS_OK
ReadX 12301 262144 61440 61440 NT_STATUS_OK
ReadX 12301 323584 4096 4096 NT_STATUS_OK
ReadX 12301 327680 61440 61440 NT_STATUS_OK
ReadX 12301 389120 4096 4096 NT_STATUS_OK
ReadX 12301 393216 61440 61440 NT_STATUS_OK
ReadX 12301 454656 4096 4096 NT_STATUS_OK
ReadX 12301 458752 61440 61440 NT_STATUS_OK
ReadX 12301 520192 4096 4096 NT_STATUS_OK
ReadX 12301 524288 61440 61440 NT_STATUS_OK
ReadX 12301 585728 4096 4096 NT_STATUS_OK
ReadX 12301 589824 61440 61440 NT_STATUS_OK
ReadX 12301 651264 4096 4096 NT_STATUS_OK
ReadX 12301 655360 61440 61440 NT_STATUS_OK
ReadX 12301 716800 4096 4096 NT_STATUS_OK
ReadX 12301 720896 61440 61440 NT_STATUS_OK
ReadX 12301 782336 4096 4096 NT_STATUS_OK
ReadX 12301 786432 61440 61440 NT_STATUS_OK
ReadX 12301 847872 4096 4096 NT_STATUS_OK
ReadX 12301 851968 61440 61440 NT_STATUS_OK
ReadX 12301 913408 4096 4096 NT_STATUS_OK
ReadX 12301 917504 61440 61440 NT_STATUS_OK
ReadX 12301 978944 4096 4096 NT_STATUS_OK
ReadX 12301 983040 61440 61440 NT_STATUS_OK
ReadX 12301 1044480 4096 4096 NT_STATUS_OK
ReadX 12301 1048576 61440 61440 NT_STATUS_OK
ReadX 12301 1110016 4096 4096 NT_STATUS_OK
ReadX 12301 1114112 61440 61440 NT_STATUS_OK
ReadX 12301 1175552 4096 4096 NT_STATUS_OK
ReadX 12301 1179648 61440 61440 NT_STATUS_OK
ReadX 12301 1241088 4096 4096 NT_STATUS_OK
ReadX 12301 1245184 61440 61440 NT_STATUS_OK
ReadX 12301 1306624 4096 4096 NT_STATUS_OK
ReadX 12301 1310720 61440 61440 NT_STATUS_OK
ReadX 12301 1372160 4096 4096 NT_STATUS_OK
ReadX 12301 1376256 61440 61440 NT_STATUS_OK
ReadX 12301 1437696 4096 4096 NT_STATUS_OK
ReadX 12301 1441792 61440 61440 NT_STATUS_OK
ReadX 12301 1503232 4096 4096 NT_STATUS_OK
ReadX 12301 1507328 61440 61440 NT_STATUS_OK
ReadX 12301 1568768 4096 4096 NT_STATUS_OK
ReadX 12301 1572864 61440 61440 NT_STATUS_OK
ReadX 12301 1634304 4096 4096 NT_STATUS_OK
ReadX 12301 1638400 61440 61440 NT_STATUS_OK
ReadX 12301 1699840 4096 4096 NT_STATUS_OK
ReadX 12301 1703936 61440 61440 NT_STATUS_OK
ReadX 12301 1765376 4096 4096 NT_STATUS_OK
ReadX 12301 1769472 61440 61440 NT_STATUS_OK
ReadX 12301 1830912 4096 4096 NT_STATUS_OK
ReadX 12301 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12307 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1004 NT_STATUS_OK
WriteX 12308 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12310 NT_STATUS_OK
WriteX 12310 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12310 258 NT_STATUS_OK
WriteX 12310 0 491 491 NT_STATUS_OK
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12308 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12314 NT_STATUS_OK
WriteX 12314 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
WriteX 12314 0 543 543 NT_STATUS_OK
Close 12314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Close 12301 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Close 12305 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12328 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 258 NT_STATUS_OK
WriteX 12328 0 2048 2048 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12329 0 4096 4096 NT_STATUS_OK
Flush 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12334 NT_STATUS_OK
WriteX 12334 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 2048 2048 NT_STATUS_OK
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12340 NT_STATUS_OK
WriteX 12340 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12340 258 NT_STATUS_OK
WriteX 12340 0 2048 2048 NT_STATUS_OK
Close 12340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 0 2048 2048 NT_STATUS_OK
ReadX 12319 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12323 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
WriteX 12319 0 8192 8192 NT_STATUS_OK
WriteX 12320 0 4096 4096 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12345 NT_STATUS_OK
QUERY_FILE_INFORMATION 12345 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12344 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12335 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12347 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12365 NT_STATUS_OK
QUERY_FILE_INFORMATION 12365 1004 NT_STATUS_OK
WriteX 12365 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12365 258 NT_STATUS_OK
WriteX 12365 0 2048 2048 NT_STATUS_OK
Close 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12373 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 1004 NT_STATUS_OK
WriteX 12373 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 258 NT_STATUS_OK
WriteX 12373 0 2048 2048 NT_STATUS_OK
Close 12373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12366 0 4096 4096 NT_STATUS_OK
Flush 12366 NT_STATUS_OK
WriteX 12374 0 4096 4096 NT_STATUS_OK
Flush 12374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12366 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12368 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12375 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12376 NT_STATUS_OK
WriteX 12376 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12376 258 NT_STATUS_OK
WriteX 12376 0 4096 4096 NT_STATUS_OK
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12378 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12379 NT_STATUS_OK
WriteX 12379 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12379 258 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12380 0 4096 4096 NT_STATUS_OK
Close 12377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12368 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12387 NT_STATUS_OK
WriteX 12387 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 258 NT_STATUS_OK
WriteX 12387 0 2048 2048 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12388 NT_STATUS_OK
ReadX 12388 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12393 NT_STATUS_OK
ReadX 12393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12395 NT_STATUS_OK
ReadX 12395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12396 NT_STATUS_OK
ReadX 12396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12397 NT_STATUS_OK
ReadX 12397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12402 NT_STATUS_OK
QUERY_FILE_INFORMATION 12402 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12388 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Close 12395 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Close 12389 NT_STATUS_OK
Close 12390 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12391 NT_STATUS_OK
Close 12392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12404 NT_STATUS_OK
QUERY_FILE_INFORMATION 12404 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12413 NT_STATUS_OK
ReadX 12413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12424 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 1004 NT_STATUS_OK
WriteX 12424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
WriteX 12424 0 2048 2048 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12427 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12429 NT_STATUS_OK
ReadX 12429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12430 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12431 NT_STATUS_OK
ReadX 12431 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12435 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12436 NT_STATUS_OK
QUERY_FILE_INFORMATION 12436 1004 NT_STATUS_OK
WriteX 12436 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12436 258 NT_STATUS_OK
WriteX 12436 0 2048 2048 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12437 NT_STATUS_OK
ReadX 12437 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12438 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12444 NT_STATUS_OK
QUERY_FILE_INFORMATION 12444 1004 NT_STATUS_OK
WriteX 12444 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12444 258 NT_STATUS_OK
WriteX 12444 0 2048 2048 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12425 0 4096 4096 NT_STATUS_OK
Flush 12425 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
Flush 12437 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12425 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12427 4096 16384 16384 NT_STATUS_OK
ReadX 12407 4096 16384 16384 NT_STATUS_OK
ReadX 12439 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 2048 2048 NT_STATUS_OK
WriteX 12447 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12448 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12429 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12414 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12450 NT_STATUS_OK
QUERY_FILE_INFORMATION 12450 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12452 NT_STATUS_OK
QUERY_FILE_INFORMATION 12452 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12455 4096 16384 16384 NT_STATUS_OK
WriteX 12455 0 4096 4096 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
WriteX 12458 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12470 NT_STATUS_OK
ReadX 12470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 8192 8192 NT_STATUS_OK
ReadX 12461 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12475 0 4096 4096 NT_STATUS_OK
ReadX 12475 4096 4096 4096 NT_STATUS_OK
ReadX 12475 8192 4096 4096 NT_STATUS_OK
WriteX 12461 0 4096 4096 NT_STATUS_OK
WriteX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
ReadX 12476 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12455 0 4096 4096 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
WriteX 12458 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12480 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12481 NT_STATUS_OK
QUERY_FILE_INFORMATION 12481 1004 NT_STATUS_OK
WriteX 12481 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12481 258 NT_STATUS_OK
WriteX 12481 0 2048 2048 NT_STATUS_OK
Close 12481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12482 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12482 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
ReadX 12484 4096 4096 4096 NT_STATUS_OK
WriteX 12484 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12482 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
ReadX 12486 4096 4096 4096 NT_STATUS_OK
WriteX 12486 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12487 NT_STATUS_OK
QUERY_FILE_INFORMATION 12487 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12472 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Close 12470 NT_STATUS_OK
Close 12471 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12489 0 4096 4096 NT_STATUS_OK
ReadX 12489 4096 4096 4096 NT_STATUS_OK
ReadX 12489 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12490 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12492 NT_STATUS_OK
ReadX 12492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12493 NT_STATUS_OK
ReadX 12493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12494 NT_STATUS_OK
ReadX 12494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 4096 4096 NT_STATUS_OK
ReadX 12490 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12507 NT_STATUS_OK
QUERY_FILE_INFORMATION 12507 1004 NT_STATUS_OK
WriteX 12507 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12507 258 NT_STATUS_OK
WriteX 12507 0 2048 2048 NT_STATUS_OK
Close 12507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12512 NT_STATUS_OK
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12513 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 258 NT_STATUS_OK
WriteX 12513 0 2048 2048 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12497 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12515 NT_STATUS_OK
QUERY_FILE_INFORMATION 12515 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Close 12502 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Close 12493 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12499 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12517 NT_STATUS_OK
QUERY_FILE_INFORMATION 12517 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 61440 4096 4096 NT_STATUS_OK
ReadX 12519 126976 4096 4096 NT_STATUS_OK
WriteX 12519 0 65536 65536 NT_STATUS_OK
WriteX 12519 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 61440 4096 4096 NT_STATUS_OK
ReadX 12520 126976 4096 4096 NT_STATUS_OK
ReadX 12520 192512 4096 4096 NT_STATUS_OK
ReadX 12520 258048 4096 4096 NT_STATUS_OK
WriteX 12520 0 65536 65536 NT_STATUS_OK
WriteX 12520 65536 65536 65536 NT_STATUS_OK
WriteX 12520 131072 65536 65536 NT_STATUS_OK
WriteX 12520 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 61440 4096 4096 NT_STATUS_OK
ReadX 12521 126976 4096 4096 NT_STATUS_OK
ReadX 12521 192512 4096 4096 NT_STATUS_OK
ReadX 12521 258048 4096 4096 NT_STATUS_OK
ReadX 12521 323584 4096 4096 NT_STATUS_OK
ReadX 12521 389120 4096 4096 NT_STATUS_OK
ReadX 12521 454656 4096 4096 NT_STATUS_OK
ReadX 12521 520192 4096 4096 NT_STATUS_OK
WriteX 12521 0 65536 65536 NT_STATUS_OK
WriteX 12521 65536 65536 65536 NT_STATUS_OK
WriteX 12521 131072 65536 65536 NT_STATUS_OK
WriteX 12521 196608 65536 65536 NT_STATUS_OK
WriteX 12521 262144 65536 65536 NT_STATUS_OK
WriteX 12521 327680 65536 65536 NT_STATUS_OK
WriteX 12521 393216 65536 65536 NT_STATUS_OK
WriteX 12521 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12522 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12522 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12522 8192 4096 4096 NT_STATUS_OK
ReadX 12522 12288 4096 4096 NT_STATUS_OK
ReadX 12522 16384 4096 4096 NT_STATUS_OK
ReadX 12522 20480 4096 4096 NT_STATUS_OK
ReadX 12522 24576 4096 4096 NT_STATUS_OK
ReadX 12522 28672 4096 4096 NT_STATUS_OK
ReadX 12522 32768 4096 4096 NT_STATUS_OK
ReadX 12522 36864 4096 4096 NT_STATUS_OK
ReadX 12522 40960 4096 4096 NT_STATUS_OK
ReadX 12522 45056 4096 4096 NT_STATUS_OK
ReadX 12522 49152 4096 4096 NT_STATUS_OK
ReadX 12522 53248 4096 4096 NT_STATUS_OK
ReadX 12522 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12522 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12525 NT_STATUS_OK
WriteX 12525 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12525 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12525 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12525 1004 NT_STATUS_OK
WriteX 12525 0 57088 57088 NT_STATUS_OK
WriteX 12525 0 4096 4096 NT_STATUS_OK
Flush 12525 NT_STATUS_OK
Close 12522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12526 NT_STATUS_OK
SET_FILE_INFORMATION 12526 1004 NT_STATUS_OK
Close 12526 NT_STATUS_OK
SET_FILE_INFORMATION 12525 1004 NT_STATUS_OK
WriteX 12525 0 4096 4096 NT_STATUS_OK
Close 12525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12529 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12530 NT_STATUS_OK
WriteX 12530 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12530 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12530 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12530 1004 NT_STATUS_OK
WriteX 12530 0 51456 51456 NT_STATUS_OK
WriteX 12530 0 4096 4096 NT_STATUS_OK
Flush 12530 NT_STATUS_OK
SET_FILE_INFORMATION 12530 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12530 1004 NT_STATUS_OK
WriteX 12530 0 4096 4096 NT_STATUS_OK
Close 12530 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12534 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12536 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12539 NT_STATUS_OK
WriteX 12539 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12539 258 NT_STATUS_OK
WriteX 12539 0 53077 53077 NT_STATUS_OK
Close 12539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12540 NT_STATUS_OK
WriteX 12540 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12540 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12540 1004 NT_STATUS_OK
WriteX 12540 0 65536 65536 NT_STATUS_OK
WriteX 12540 65536 1856 1856 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
Flush 12540 NT_STATUS_OK
SET_FILE_INFORMATION 12540 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12540 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12542 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12549 NT_STATUS_OK
WriteX 12549 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12549 258 NT_STATUS_OK
WriteX 12549 0 7983 7983 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12554 NT_STATUS_OK
WriteX 12554 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 258 NT_STATUS_OK
WriteX 12554 0 65536 65536 NT_STATUS_OK
WriteX 12554 65536 65536 65536 NT_STATUS_OK
WriteX 12554 131072 65536 65536 NT_STATUS_OK
WriteX 12554 196608 65536 65536 NT_STATUS_OK
WriteX 12554 262144 65536 65536 NT_STATUS_OK
WriteX 12554 327680 65536 65536 NT_STATUS_OK
WriteX 12554 393216 65536 65536 NT_STATUS_OK
WriteX 12554 458752 46731 46731 NT_STATUS_OK
Close 12554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12555 NT_STATUS_OK
WriteX 12555 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12544 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
WriteX 12555 0 65536 65536 NT_STATUS_OK
WriteX 12555 65536 22848 22848 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12559 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12560 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12560 1004 NT_STATUS_OK
ReadX 12560 8192 4096 4096 NT_STATUS_OK
ReadX 12560 12288 4096 4096 NT_STATUS_OK
ReadX 12560 16384 4096 4096 NT_STATUS_OK
ReadX 12560 20480 4096 4096 NT_STATUS_OK
ReadX 12560 24576 4096 4096 NT_STATUS_OK
ReadX 12560 28672 4096 4096 NT_STATUS_OK
ReadX 12560 32768 4096 4096 NT_STATUS_OK
ReadX 12560 36864 4096 4096 NT_STATUS_OK
ReadX 12560 40960 4096 4096 NT_STATUS_OK
ReadX 12560 45056 4096 4096 NT_STATUS_OK
ReadX 12560 49152 4096 4096 NT_STATUS_OK
ReadX 12560 53248 4096 4096 NT_STATUS_OK
ReadX 12560 57344 4096 4096 NT_STATUS_OK
ReadX 12560 61440 4096 4096 NT_STATUS_OK
ReadX 12560 65536 4096 4096 NT_STATUS_OK
ReadX 12560 69632 4096 4096 NT_STATUS_OK
ReadX 12560 73728 4096 4096 NT_STATUS_OK
ReadX 12560 77824 4096 4096 NT_STATUS_OK
ReadX 12560 81920 4096 4096 NT_STATUS_OK
ReadX 12560 86016 4096 4096 NT_STATUS_OK
ReadX 12560 90112 4096 4096 NT_STATUS_OK
ReadX 12560 94208 4096 4096 NT_STATUS_OK
ReadX 12560 98304 4096 4096 NT_STATUS_OK
ReadX 12560 102400 4096 4096 NT_STATUS_OK
ReadX 12560 106496 4096 4096 NT_STATUS_OK
ReadX 12560 110592 4096 4096 NT_STATUS_OK
ReadX 12560 114688 4096 4096 NT_STATUS_OK
ReadX 12560 118784 4096 4096 NT_STATUS_OK
ReadX 12560 122880 4096 4096 NT_STATUS_OK
ReadX 12560 126976 4096 4096 NT_STATUS_OK
ReadX 12560 131072 4096 4096 NT_STATUS_OK
ReadX 12560 135168 4096 4096 NT_STATUS_OK
ReadX 12560 139264 4096 4096 NT_STATUS_OK
ReadX 12560 143360 4096 4096 NT_STATUS_OK
ReadX 12560 147456 4096 4096 NT_STATUS_OK
ReadX 12560 151552 4096 4096 NT_STATUS_OK
ReadX 12560 155648 4096 4096 NT_STATUS_OK
ReadX 12560 159744 4096 4096 NT_STATUS_OK
ReadX 12560 163840 4096 4096 NT_STATUS_OK
ReadX 12560 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12560 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12561 NT_STATUS_OK
Close 12561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12563 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
Close 12560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12564 NT_STATUS_OK
SET_FILE_INFORMATION 12564 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
WriteX 12563 0 42388 42388 NT_STATUS_OK
Close 12563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 4096 4096 NT_STATUS_OK
ReadX 12567 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12568 NT_STATUS_OK
WriteX 12568 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12568 258 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
WriteX 12568 0 42652 42652 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12570 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
ReadX 12572 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12574 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12577 NT_STATUS_OK
WriteX 12577 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12577 258 NT_STATUS_OK
WriteX 12577 0 65536 65536 NT_STATUS_OK
WriteX 12577 65536 49 49 NT_STATUS_OK
Close 12577 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 0 61440 61440 NT_STATUS_OK
ReadX 12578 61440 4096 4096 NT_STATUS_OK
ReadX 12578 65536 61440 61440 NT_STATUS_OK
ReadX 12578 126976 4096 4096 NT_STATUS_OK
ReadX 12578 131072 61440 61440 NT_STATUS_OK
ReadX 12578 192512 4096 4096 NT_STATUS_OK
ReadX 12578 196608 61440 61440 NT_STATUS_OK
ReadX 12578 258048 4096 4096 NT_STATUS_OK
ReadX 12578 262144 61440 61440 NT_STATUS_OK
ReadX 12578 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 61440 61440 NT_STATUS_OK
ReadX 12579 61440 4096 4096 NT_STATUS_OK
ReadX 12579 65536 61440 61440 NT_STATUS_OK
ReadX 12579 126976 4096 4096 NT_STATUS_OK
ReadX 12579 131072 61440 61440 NT_STATUS_OK
ReadX 12579 192512 4096 4096 NT_STATUS_OK
ReadX 12579 196608 61440 61440 NT_STATUS_OK
ReadX 12579 258048 4096 4096 NT_STATUS_OK
ReadX 12579 262144 61440 61440 NT_STATUS_OK
ReadX 12579 323584 4096 4096 NT_STATUS_OK
ReadX 12579 327680 61440 61440 NT_STATUS_OK
ReadX 12579 389120 4096 4096 NT_STATUS_OK
ReadX 12579 393216 61440 61440 NT_STATUS_OK
ReadX 12579 454656 4096 4096 NT_STATUS_OK
ReadX 12579 458752 61440 61440 NT_STATUS_OK
ReadX 12579 520192 4096 4096 NT_STATUS_OK
ReadX 12579 524288 61440 61440 NT_STATUS_OK
ReadX 12579 585728 4096 4096 NT_STATUS_OK
ReadX 12579 589824 61440 61440 NT_STATUS_OK
ReadX 12579 651264 4096 4096 NT_STATUS_OK
ReadX 12579 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 61440 61440 NT_STATUS_OK
ReadX 12580 61440 4096 4096 NT_STATUS_OK
ReadX 12580 65536 61440 61440 NT_STATUS_OK
ReadX 12580 126976 4096 4096 NT_STATUS_OK
ReadX 12580 131072 61440 61440 NT_STATUS_OK
ReadX 12580 192512 4096 4096 NT_STATUS_OK
ReadX 12580 196608 61440 61440 NT_STATUS_OK
ReadX 12580 258048 4096 4096 NT_STATUS_OK
ReadX 12580 262144 61440 61440 NT_STATUS_OK
ReadX 12580 323584 4096 4096 NT_STATUS_OK
ReadX 12580 327680 61440 61440 NT_STATUS_OK
ReadX 12580 389120 4096 4096 NT_STATUS_OK
ReadX 12580 393216 61440 61440 NT_STATUS_OK
ReadX 12580 454656 4096 4096 NT_STATUS_OK
ReadX 12580 458752 61440 61440 NT_STATUS_OK
ReadX 12580 520192 4096 4096 NT_STATUS_OK
ReadX 12580 524288 61440 61440 NT_STATUS_OK
ReadX 12580 585728 4096 4096 NT_STATUS_OK
ReadX 12580 589824 61440 61440 NT_STATUS_OK
ReadX 12580 651264 4096 4096 NT_STATUS_OK
ReadX 12580 655360 61440 61440 NT_STATUS_OK
ReadX 12580 716800 4096 4096 NT_STATUS_OK
ReadX 12580 720896 61440 61440 NT_STATUS_OK
ReadX 12580 782336 4096 4096 NT_STATUS_OK
ReadX 12580 786432 61440 61440 NT_STATUS_OK
ReadX 12580 847872 4096 4096 NT_STATUS_OK
ReadX 12580 851968 61440 61440 NT_STATUS_OK
ReadX 12580 913408 4096 4096 NT_STATUS_OK
ReadX 12580 917504 61440 61440 NT_STATUS_OK
ReadX 12580 978944 4096 4096 NT_STATUS_OK
ReadX 12580 983040 61440 61440 NT_STATUS_OK
ReadX 12580 1044480 4096 4096 NT_STATUS_OK
ReadX 12580 1048576 61440 61440 NT_STATUS_OK
ReadX 12580 1110016 4096 4096 NT_STATUS_OK
ReadX 12580 1114112 61440 61440 NT_STATUS_OK
ReadX 12580 1175552 4096 4096 NT_STATUS_OK
ReadX 12580 1179648 61440 61440 NT_STATUS_OK
ReadX 12580 1241088 4096 4096 NT_STATUS_OK
ReadX 12580 1245184 61440 61440 NT_STATUS_OK
ReadX 12580 1306624 4096 4096 NT_STATUS_OK
ReadX 12580 1310720 61440 61440 NT_STATUS_OK
ReadX 12580 1372160 4096 4096 NT_STATUS_OK
ReadX 12580 1376256 61440 61440 NT_STATUS_OK
ReadX 12580 1437696 4096 4096 NT_STATUS_OK
ReadX 12580 1441792 61440 61440 NT_STATUS_OK
ReadX 12580 1503232 4096 4096 NT_STATUS_OK
ReadX 12580 1507328 61440 61440 NT_STATUS_OK
ReadX 12580 1568768 4096 4096 NT_STATUS_OK
ReadX 12580 1572864 61440 61440 NT_STATUS_OK
ReadX 12580 1634304 4096 4096 NT_STATUS_OK
ReadX 12580 1638400 61440 61440 NT_STATUS_OK
ReadX 12580 1699840 4096 4096 NT_STATUS_OK
ReadX 12580 1703936 61440 61440 NT_STATUS_OK
ReadX 12580 1765376 4096 4096 NT_STATUS_OK
ReadX 12580 1769472 61440 61440 NT_STATUS_OK
ReadX 12580 1830912 4096 4096 NT_STATUS_OK
ReadX 12580 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12582 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 1005 NT_STATUS_OK
ReadX 12582 2156 24 24 NT_STATUS_OK
ReadX 12582 2139 276 276 NT_STATUS_OK
ReadX 12582 2136 14 14 NT_STATUS_OK
ReadX 12582 2136 7 7 NT_STATUS_OK
ReadX 12582 2138 12 12 NT_STATUS_OK
ReadX 12582 2137 8 8 NT_STATUS_OK
ReadX 12582 2135 15 15 NT_STATUS_OK
ReadX 12582 0 16 16 NT_STATUS_OK
ReadX 12582 16 2048 2048 NT_STATUS_OK
ReadX 12582 2064 2048 2048 NT_STATUS_OK
ReadX 12582 257 2048 2048 NT_STATUS_OK
ReadX 12582 385 2048 2048 NT_STATUS_OK
ReadX 12582 513 2048 2048 NT_STATUS_OK
ReadX 12582 641 2048 2048 NT_STATUS_OK
ReadX 12582 769 2048 2048 NT_STATUS_OK
ReadX 12582 897 2048 2048 NT_STATUS_OK
ReadX 12582 1025 2048 2048 NT_STATUS_OK
ReadX 12582 1153 2048 2048 NT_STATUS_OK
ReadX 12582 1281 2048 2048 NT_STATUS_OK
ReadX 12582 1409 2048 2048 NT_STATUS_OK
ReadX 12582 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12587 NT_STATUS_OK
WriteX 12587 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12587 258 NT_STATUS_OK
WriteX 12587 0 10575 10575 NT_STATUS_OK
Flush 12587 NT_STATUS_OK
Close 12587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12588 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12592 NT_STATUS_OK
LockX 12592 2147483538 1 NT_STATUS_OK
UnlockX 12592 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12592 1005 NT_STATUS_OK
ReadX 12592 0 512 512 NT_STATUS_OK
ReadX 12592 512 512 512 NT_STATUS_OK
ReadX 12592 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12592 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12592 1004 NT_STATUS_OK
Close 12592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12593 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 1005 NT_STATUS_OK
ReadX 12593 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12594 NT_STATUS_OK
LockX 12594 2147483538 1 NT_STATUS_OK
UnlockX 12594 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12594 1005 NT_STATUS_OK
ReadX 12594 0 512 512 NT_STATUS_OK
ReadX 12594 512 512 512 NT_STATUS_OK
ReadX 12594 1024 512 512 NT_STATUS_OK
ReadX 12594 288 20 20 NT_STATUS_OK
ReadX 12594 308 2084 2084 NT_STATUS_OK
ReadX 12594 388 2084 2084 NT_STATUS_OK
ReadX 12594 388 2084 2084 NT_STATUS_OK
ReadX 12581 2157 1386 1386 NT_STATUS_OK
ReadX 12594 2472 399 399 NT_STATUS_OK
ReadX 12594 3072 1536 1536 NT_STATUS_OK
ReadX 12594 544 149 149 NT_STATUS_OK
ReadX 12594 693 485 485 NT_STATUS_OK
Close 12594 NT_STATUS_OK
ReadX 12581 2157 4096 4096 NT_STATUS_OK
ReadX 12581 6253 4096 4096 NT_STATUS_OK
ReadX 12581 10349 4096 4096 NT_STATUS_OK
ReadX 12581 14445 4096 4096 NT_STATUS_OK
ReadX 12581 18541 4096 4096 NT_STATUS_OK
ReadX 12581 22637 256 256 NT_STATUS_OK
ReadX 12581 22893 4096 4096 NT_STATUS_OK
ReadX 12581 26989 4096 4096 NT_STATUS_OK
ReadX 12581 31085 4096 4096 NT_STATUS_OK
ReadX 12581 35181 4096 4096 NT_STATUS_OK
ReadX 12581 39277 4096 4096 NT_STATUS_OK
ReadX 12581 43373 4096 4096 NT_STATUS_OK
ReadX 12581 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12581 2157 1024 1024 NT_STATUS_OK
ReadX 12581 1667 4688 4688 NT_STATUS_OK
ReadX 12581 6355 3516 3516 NT_STATUS_OK
ReadX 12581 9871 16384 16384 NT_STATUS_OK
ReadX 12581 26255 3771 3771 NT_STATUS_OK
ReadX 12581 30026 2048 2048 NT_STATUS_OK
ReadX 12581 32074 1024 1024 NT_STATUS_OK
ReadX 12581 33098 6652 6652 NT_STATUS_OK
ReadX 12581 39750 16384 16384 NT_STATUS_OK
ReadX 12581 56134 10496 10496 NT_STATUS_OK
ReadX 12581 66630 1784 1784 NT_STATUS_OK
ReadX 12581 68414 90 90 NT_STATUS_OK
ReadX 12581 68504 273 273 NT_STATUS_OK
ReadX 12581 68777 1600 1600 NT_STATUS_OK
ReadX 12581 70377 640 640 NT_STATUS_OK
ReadX 12581 71017 1280 1280 NT_STATUS_OK
ReadX 12581 72297 8464 8464 NT_STATUS_OK
ReadX 12581 80761 158 158 NT_STATUS_OK
ReadX 12581 80919 912 912 NT_STATUS_OK
ReadX 12581 81831 1980 1980 NT_STATUS_OK
ReadX 12581 83811 2256 2256 NT_STATUS_OK
ReadX 12581 86067 400 400 NT_STATUS_OK
ReadX 12581 86467 252 252 NT_STATUS_OK
ReadX 12581 86719 42 42 NT_STATUS_OK
ReadX 12581 86761 725 725 NT_STATUS_OK
ReadX 12581 2009 512 512 NT_STATUS_OK
ReadX 12581 3895 9 9 NT_STATUS_OK
ReadX 12581 3781 46 46 NT_STATUS_OK
ReadX 12581 4059 92 92 NT_STATUS_OK
ReadX 12581 3781 92 92 NT_STATUS_OK
ReadX 12581 3986 184 184 NT_STATUS_OK
ReadX 12581 3987 16384 16384 NT_STATUS_OK
ReadX 12581 3902 16384 16384 NT_STATUS_OK
ReadX 12581 3781 10240 10240 NT_STATUS_OK
ReadX 12581 3821 16384 16384 NT_STATUS_OK
ReadX 12581 3891 935 935 NT_STATUS_OK
ReadX 12581 4060 10240 10240 NT_STATUS_OK
ReadX 12581 4059 184 184 NT_STATUS_OK
ReadX 12581 256 184 184 NT_STATUS_OK
ReadX 12581 256 1026 1026 NT_STATUS_OK
ReadX 12581 3901 326 326 NT_STATUS_OK
ReadX 12581 3899 652 652 NT_STATUS_OK
ReadX 12581 256 2 2 NT_STATUS_OK
ReadX 12581 258 4948 4948 NT_STATUS_OK
Close 12581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12596 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12599 NT_STATUS_OK
WriteX 12599 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
WriteX 12599 0 65536 65536 NT_STATUS_OK
WriteX 12599 65536 65536 65536 NT_STATUS_OK
WriteX 12599 131072 65536 65536 NT_STATUS_OK
WriteX 12599 196608 65536 65536 NT_STATUS_OK
WriteX 12599 262144 65536 65536 NT_STATUS_OK
WriteX 12599 327680 65536 65536 NT_STATUS_OK
WriteX 12599 393216 65536 65536 NT_STATUS_OK
WriteX 12599 458752 65536 65536 NT_STATUS_OK
WriteX 12599 524288 65536 65536 NT_STATUS_OK
WriteX 12599 589824 35257 35257 NT_STATUS_OK
Close 12599 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12604 NT_STATUS_OK
WriteX 12604 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 258 NT_STATUS_OK
WriteX 12604 0 65536 65536 NT_STATUS_OK
WriteX 12604 65536 65536 65536 NT_STATUS_OK
WriteX 12604 131072 65536 65536 NT_STATUS_OK
WriteX 12604 196608 65536 65536 NT_STATUS_OK
WriteX 12604 262144 65536 65536 NT_STATUS_OK
WriteX 12604 327680 65536 65536 NT_STATUS_OK
WriteX 12604 393216 65536 65536 NT_STATUS_OK
WriteX 12604 458752 65536 65536 NT_STATUS_OK
WriteX 12604 524288 65536 65536 NT_STATUS_OK
WriteX 12604 589824 57598 57598 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12606 NT_STATUS_OK
WriteX 12606 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 258 NT_STATUS_OK
WriteX 12606 0 12543 12543 NT_STATUS_OK
Flush 12606 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12608 NT_STATUS_OK
Close 12608 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12612 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 1005 NT_STATUS_OK
ReadX 12612 1938 24 24 NT_STATUS_OK
ReadX 12612 1920 276 276 NT_STATUS_OK
ReadX 12612 1918 14 14 NT_STATUS_OK
ReadX 12612 1918 7 7 NT_STATUS_OK
ReadX 12612 1919 12 12 NT_STATUS_OK
ReadX 12612 1919 8 8 NT_STATUS_OK
ReadX 12612 1917 15 15 NT_STATUS_OK
ReadX 12612 0 16 16 NT_STATUS_OK
ReadX 12612 16 2048 2048 NT_STATUS_OK
ReadX 12612 2064 2048 2048 NT_STATUS_OK
ReadX 12612 257 2048 2048 NT_STATUS_OK
ReadX 12612 385 2048 2048 NT_STATUS_OK
ReadX 12612 513 2048 2048 NT_STATUS_OK
ReadX 12612 641 2048 2048 NT_STATUS_OK
ReadX 12612 769 2048 2048 NT_STATUS_OK
ReadX 12612 897 2048 2048 NT_STATUS_OK
ReadX 12612 1025 2048 2048 NT_STATUS_OK
ReadX 12612 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12614 NT_STATUS_OK
Close 12614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12617 NT_STATUS_OK
WriteX 12617 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12617 258 NT_STATUS_OK
WriteX 12617 0 11588 11588 NT_STATUS_OK
Flush 12617 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12618 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12622 NT_STATUS_OK
WriteX 12622 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
WriteX 12622 0 11615 11615 NT_STATUS_OK
Flush 12622 NT_STATUS_OK
Close 12622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12631 NT_STATUS_OK
WriteX 12631 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12631 258 NT_STATUS_OK
WriteX 12631 0 65536 65536 NT_STATUS_OK
WriteX 12631 65536 16050 16050 NT_STATUS_OK
Close 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12611 1939 64 64 NT_STATUS_OK
ReadX 12611 128 248 248 NT_STATUS_OK
ReadX 12611 128 568 568 NT_STATUS_OK
ReadX 12611 3872 1536 1536 NT_STATUS_OK
ReadX 12611 3456 2560 2560 NT_STATUS_OK
ReadX 12611 3136 512 512 NT_STATUS_OK
ReadX 12611 2880 4096 4096 NT_STATUS_OK
ReadX 12611 3264 3072 3072 NT_STATUS_OK
ReadX 12611 320 4096 4096 NT_STATUS_OK
ReadX 12611 1024 4096 4096 NT_STATUS_OK
ReadX 12611 3616 4096 4096 NT_STATUS_OK
ReadX 12611 1939 64 64 NT_STATUS_OK
ReadX 12611 128 248 248 NT_STATUS_OK
ReadX 12611 128 608 608 NT_STATUS_OK
ReadX 12611 2858 1024 1024 NT_STATUS_OK
ReadX 12611 2810 4096 4096 NT_STATUS_OK
ReadX 12611 2826 4096 4096 NT_STATUS_OK
ReadX 12611 2580 2048 2048 NT_STATUS_OK
ReadX 12611 2800 2560 2560 NT_STATUS_OK
ReadX 12611 2100 4096 4096 NT_STATUS_OK
ReadX 12611 2084 4096 4096 NT_STATUS_OK
ReadX 12611 868 4096 4096 NT_STATUS_OK
ReadX 12611 2324 4096 4096 NT_STATUS_OK
ReadX 12611 884 4096 4096 NT_STATUS_OK
ReadX 12611 2604 1024 1024 NT_STATUS_OK
ReadX 12611 580 4096 4096 NT_STATUS_OK
ReadX 12611 596 4096 4096 NT_STATUS_OK
ReadX 12611 2752 4096 4096 NT_STATUS_OK
ReadX 12611 2842 1024 1024 NT_STATUS_OK
ReadX 12611 660 4096 4096 NT_STATUS_OK
ReadX 12611 2720 4096 4096 NT_STATUS_OK
ReadX 12611 2736 4096 4096 NT_STATUS_OK
ReadX 12611 628 4096 4096 NT_STATUS_OK
ReadX 12611 2704 4096 4096 NT_STATUS_OK
ReadX 12611 1556 4096 4096 NT_STATUS_OK
ReadX 12611 576 4096 4096 NT_STATUS_OK
ReadX 12611 3168 1536 1536 NT_STATUS_OK
ReadX 12611 832 4096 4096 NT_STATUS_OK
ReadX 12611 1088 4096 4096 NT_STATUS_OK
ReadX 12611 1344 4096 4096 NT_STATUS_OK
ReadX 12611 1600 4096 4096 NT_STATUS_OK
ReadX 12611 1856 4096 4096 NT_STATUS_OK
ReadX 12611 2112 4096 4096 NT_STATUS_OK
ReadX 12611 1892 4096 4096 NT_STATUS_OK
ReadX 12611 820 4096 4096 NT_STATUS_OK
ReadX 12611 788 4096 4096 NT_STATUS_OK
ReadX 12611 1604 4096 4096 NT_STATUS_OK
ReadX 12611 3648 4096 4096 NT_STATUS_OK
ReadX 12611 2608 4096 4096 NT_STATUS_OK
ReadX 12611 548 4096 4096 NT_STATUS_OK
ReadX 12611 740 4096 4096 NT_STATUS_OK
ReadX 12611 1344 4096 4096 NT_STATUS_OK
ReadX 12611 3392 4096 4096 NT_STATUS_OK
ReadX 12611 3904 4096 4096 NT_STATUS_OK
ReadX 12611 644 4096 4096 NT_STATUS_OK
ReadX 12611 676 4096 4096 NT_STATUS_OK
ReadX 12611 2688 4096 4096 NT_STATUS_OK
ReadX 12611 320 4096 4096 NT_STATUS_OK
ReadX 12611 900 4096 4096 NT_STATUS_OK
ReadX 12611 1908 4096 4096 NT_STATUS_OK
ReadX 12611 852 4096 4096 NT_STATUS_OK
ReadX 12611 724 4096 4096 NT_STATUS_OK
ReadX 12611 2292 4096 4096 NT_STATUS_OK
ReadX 12611 612 4096 4096 NT_STATUS_OK
ReadX 12611 388 4096 4096 NT_STATUS_OK
ReadX 12611 2368 4096 4096 NT_STATUS_OK
ReadX 12611 2624 4096 4096 NT_STATUS_OK
ReadX 12611 500 4096 4096 NT_STATUS_OK
ReadX 12611 356 4096 4096 NT_STATUS_OK
ReadX 12611 1024 4096 4096 NT_STATUS_OK
ReadX 12611 576 4096 4096 NT_STATUS_OK
ReadX 12611 340 4096 4096 NT_STATUS_OK
ReadX 12611 420 4096 4096 NT_STATUS_OK
ReadX 12611 1600 4096 4096 NT_STATUS_OK
ReadX 12611 404 4096 4096 NT_STATUS_OK
ReadX 12611 1428 4096 4096 NT_STATUS_OK
ReadX 12611 2656 4096 4096 NT_STATUS_OK
ReadX 12611 2624 4096 4096 NT_STATUS_OK
ReadX 12611 452 4096 4096 NT_STATUS_OK
ReadX 12611 692 4096 4096 NT_STATUS_OK
ReadX 12611 564 4096 4096 NT_STATUS_OK
ReadX 12611 372 4096 4096 NT_STATUS_OK
ReadX 12611 468 4096 4096 NT_STATUS_OK
ReadX 12611 484 4096 4096 NT_STATUS_OK
ReadX 12611 1088 4096 4096 NT_STATUS_OK
ReadX 12611 1924 4096 4096 NT_STATUS_OK
ReadX 12611 2768 4096 4096 NT_STATUS_OK
ReadX 12611 832 4096 4096 NT_STATUS_OK
ReadX 12611 836 4096 4096 NT_STATUS_OK
ReadX 12611 1856 4096 4096 NT_STATUS_OK
ReadX 12611 2640 4096 4096 NT_STATUS_OK
ReadX 12611 436 4096 4096 NT_STATUS_OK
ReadX 12611 1828 4096 4096 NT_STATUS_OK
ReadX 12611 804 4096 4096 NT_STATUS_OK
ReadX 12611 1860 4096 4096 NT_STATUS_OK
ReadX 12611 1812 4096 4096 NT_STATUS_OK
ReadX 12611 756 4096 4096 NT_STATUS_OK
ReadX 12611 1636 4096 4096 NT_STATUS_OK
ReadX 12611 772 4096 4096 NT_STATUS_OK
ReadX 12611 2036 4096 4096 NT_STATUS_OK
ReadX 12611 1220 4096 4096 NT_STATUS_OK
ReadX 12611 1652 4096 4096 NT_STATUS_OK
ReadX 12611 2588 4096 4096 NT_STATUS_OK
ReadX 12611 916 4096 4096 NT_STATUS_OK
ReadX 12611 260 4096 4096 NT_STATUS_OK
ReadX 12611 932 4096 4096 NT_STATUS_OK
ReadX 12611 2624 4096 4096 NT_STATUS_OK
ReadX 12611 308 4096 4096 NT_STATUS_OK
ReadX 12611 292 4096 4096 NT_STATUS_OK
ReadX 12611 1140 4096 4096 NT_STATUS_OK
ReadX 12611 276 4096 4096 NT_STATUS_OK
ReadX 12611 2020 4096 4096 NT_STATUS_OK
ReadX 12611 2880 4096 4096 NT_STATUS_OK
ReadX 12611 516 4096 4096 NT_STATUS_OK
ReadX 12611 1844 4096 4096 NT_STATUS_OK
ReadX 12611 1124 4096 4096 NT_STATUS_OK
ReadX 12611 3136 4096 4096 NT_STATUS_OK
ReadX 12611 324 4096 4096 NT_STATUS_OK
ReadX 12611 1156 4096 4096 NT_STATUS_OK
ReadX 12611 1172 4096 4096 NT_STATUS_OK
ReadX 12611 2112 4096 4096 NT_STATUS_OK
ReadX 12611 2368 4096 4096 NT_STATUS_OK
ReadX 12611 964 4096 4096 NT_STATUS_OK
ReadX 12611 980 4096 4096 NT_STATUS_OK
ReadX 12611 1012 4096 4096 NT_STATUS_OK
ReadX 12611 532 4096 4096 NT_STATUS_OK
ReadX 12611 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12611 1620 4096 4096 NT_STATUS_OK
ReadX 12611 1604 4096 4096 NT_STATUS_OK
ReadX 12611 2116 4096 4096 NT_STATUS_OK
ReadX 12611 2132 4096 4096 NT_STATUS_OK
ReadX 12611 2148 4096 4096 NT_STATUS_OK
ReadX 12611 2276 4096 4096 NT_STATUS_OK
ReadX 12611 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12636 NT_STATUS_OK
QUERY_FILE_INFORMATION 12591 1004 NT_STATUS_OK
Close 12591 NT_STATUS_OK
WriteX 12636 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12636 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 1004 NT_STATUS_OK
Close 12593 NT_STATUS_OK
WriteX 12636 0 65536 65536 NT_STATUS_OK
WriteX 12636 65536 64850 64850 NT_STATUS_OK
Close 12636 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12638 NT_STATUS_OK
WriteX 12638 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12638 258 NT_STATUS_OK
ReadX 12611 2068 4096 4096 NT_STATUS_OK
ReadX 12611 1588 4096 4096 NT_STATUS_OK
ReadX 12611 1572 4096 4096 NT_STATUS_OK
WriteX 12638 0 18630 18630 NT_STATUS_OK
Flush 12638 NT_STATUS_OK
Close 12638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12611 612 4096 4096 NT_STATUS_OK
ReadX 12611 564 4096 4096 NT_STATUS_OK
ReadX 12611 1876 4096 4096 NT_STATUS_OK
ReadX 12611 628 4096 4096 NT_STATUS_OK
ReadX 12611 740 4096 4096 NT_STATUS_OK
ReadX 12611 724 4096 4096 NT_STATUS_OK
ReadX 12611 644 4096 4096 NT_STATUS_OK
ReadX 12611 2324 4096 4096 NT_STATUS_OK
ReadX 12611 660 4096 4096 NT_STATUS_OK
ReadX 12611 852 4096 4096 NT_STATUS_OK
ReadX 12611 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12611 2368 4096 4096 NT_STATUS_OK
ReadX 12611 1024 4096 4096 NT_STATUS_OK
ReadX 12611 320 4096 4096 NT_STATUS_OK
ReadX 12611 580 4096 4096 NT_STATUS_OK
ReadX 12611 3136 512 512 NT_STATUS_OK
ReadX 12611 2880 4096 4096 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12643 NT_STATUS_OK
ReadX 12643 61440 4096 4096 NT_STATUS_OK
ReadX 12643 126976 4096 4096 NT_STATUS_OK
WriteX 12643 0 65536 65536 NT_STATUS_OK
WriteX 12643 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12644 NT_STATUS_OK
ReadX 12644 61440 4096 4096 NT_STATUS_OK
ReadX 12644 126976 4096 4096 NT_STATUS_OK
ReadX 12644 192512 4096 4096 NT_STATUS_OK
ReadX 12644 258048 4096 4096 NT_STATUS_OK
WriteX 12644 0 65536 65536 NT_STATUS_OK
WriteX 12644 65536 65536 65536 NT_STATUS_OK
WriteX 12644 131072 65536 65536 NT_STATUS_OK
WriteX 12644 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 61440 4096 4096 NT_STATUS_OK
ReadX 12645 126976 4096 4096 NT_STATUS_OK
ReadX 12645 192512 4096 4096 NT_STATUS_OK
ReadX 12645 258048 4096 4096 NT_STATUS_OK
ReadX 12645 323584 4096 4096 NT_STATUS_OK
ReadX 12645 389120 4096 4096 NT_STATUS_OK
ReadX 12645 454656 4096 4096 NT_STATUS_OK
ReadX 12645 520192 4096 4096 NT_STATUS_OK
WriteX 12645 0 65536 65536 NT_STATUS_OK
WriteX 12645 65536 65536 65536 NT_STATUS_OK
WriteX 12645 131072 65536 65536 NT_STATUS_OK
WriteX 12645 196608 65536 65536 NT_STATUS_OK
WriteX 12645 262144 65536 65536 NT_STATUS_OK
WriteX 12645 327680 65536 65536 NT_STATUS_OK
WriteX 12645 393216 65536 65536 NT_STATUS_OK
WriteX 12645 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12647 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12648 NT_STATUS_OK
WriteX 12648 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12648 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12646 0 8192 8192 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12646 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12646 0 8192 8192 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12646 0 8192 8192 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12646 0 8192 8192 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12650 NT_STATUS_OK
Close 12650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Close 12610 NT_STATUS_OK
Close 12643 NT_STATUS_OK
Close 12644 NT_STATUS_OK
Close 12645 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12653 NT_STATUS_OK
WriteX 12653 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 258 NT_STATUS_OK
WriteX 12653 0 62591 62591 NT_STATUS_OK
Close 12653 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12658 NT_STATUS_OK
WriteX 12658 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
WriteX 12658 0 10845 10845 NT_STATUS_OK
Close 12658 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12663 NT_STATUS_OK
WriteX 12663 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 258 NT_STATUS_OK
WriteX 12663 0 30118 30118 NT_STATUS_OK
Close 12663 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12648 0 64 64 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 61440 61440 NT_STATUS_OK
ReadX 12665 61440 4096 4096 NT_STATUS_OK
ReadX 12665 65536 61440 61440 NT_STATUS_OK
ReadX 12665 126976 4096 4096 NT_STATUS_OK
ReadX 12665 131072 61440 61440 NT_STATUS_OK
ReadX 12665 192512 4096 4096 NT_STATUS_OK
ReadX 12665 196608 61440 61440 NT_STATUS_OK
ReadX 12665 258048 4096 4096 NT_STATUS_OK
ReadX 12665 262144 61440 61440 NT_STATUS_OK
ReadX 12665 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 61440 61440 NT_STATUS_OK
ReadX 12666 61440 4096 4096 NT_STATUS_OK
ReadX 12666 65536 61440 61440 NT_STATUS_OK
ReadX 12666 126976 4096 4096 NT_STATUS_OK
ReadX 12666 131072 61440 61440 NT_STATUS_OK
ReadX 12666 192512 4096 4096 NT_STATUS_OK
ReadX 12666 196608 61440 61440 NT_STATUS_OK
ReadX 12666 258048 4096 4096 NT_STATUS_OK
ReadX 12666 262144 61440 61440 NT_STATUS_OK
ReadX 12666 323584 4096 4096 NT_STATUS_OK
ReadX 12666 327680 61440 61440 NT_STATUS_OK
ReadX 12666 389120 4096 4096 NT_STATUS_OK
ReadX 12666 393216 61440 61440 NT_STATUS_OK
ReadX 12666 454656 4096 4096 NT_STATUS_OK
ReadX 12666 458752 61440 61440 NT_STATUS_OK
ReadX 12666 520192 4096 4096 NT_STATUS_OK
ReadX 12666 524288 61440 61440 NT_STATUS_OK
ReadX 12666 585728 4096 4096 NT_STATUS_OK
ReadX 12666 589824 61440 61440 NT_STATUS_OK
ReadX 12666 651264 4096 4096 NT_STATUS_OK
ReadX 12666 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 61440 61440 NT_STATUS_OK
ReadX 12667 61440 4096 4096 NT_STATUS_OK
ReadX 12667 65536 61440 61440 NT_STATUS_OK
ReadX 12667 126976 4096 4096 NT_STATUS_OK
ReadX 12667 131072 61440 61440 NT_STATUS_OK
ReadX 12667 192512 4096 4096 NT_STATUS_OK
ReadX 12667 196608 61440 61440 NT_STATUS_OK
ReadX 12667 258048 4096 4096 NT_STATUS_OK
ReadX 12667 262144 61440 61440 NT_STATUS_OK
ReadX 12667 323584 4096 4096 NT_STATUS_OK
ReadX 12667 327680 61440 61440 NT_STATUS_OK
ReadX 12667 389120 4096 4096 NT_STATUS_OK
ReadX 12667 393216 61440 61440 NT_STATUS_OK
ReadX 12667 454656 4096 4096 NT_STATUS_OK
ReadX 12667 458752 61440 61440 NT_STATUS_OK
ReadX 12667 520192 4096 4096 NT_STATUS_OK
ReadX 12667 524288 61440 61440 NT_STATUS_OK
ReadX 12667 585728 4096 4096 NT_STATUS_OK
ReadX 12667 589824 61440 61440 NT_STATUS_OK
ReadX 12667 651264 4096 4096 NT_STATUS_OK
ReadX 12667 655360 61440 61440 NT_STATUS_OK
ReadX 12667 716800 4096 4096 NT_STATUS_OK
ReadX 12667 720896 61440 61440 NT_STATUS_OK
ReadX 12667 782336 4096 4096 NT_STATUS_OK
ReadX 12667 786432 61440 61440 NT_STATUS_OK
ReadX 12667 847872 4096 4096 NT_STATUS_OK
ReadX 12667 851968 61440 61440 NT_STATUS_OK
ReadX 12667 913408 4096 4096 NT_STATUS_OK
ReadX 12667 917504 61440 61440 NT_STATUS_OK
ReadX 12667 978944 4096 4096 NT_STATUS_OK
ReadX 12667 983040 61440 61440 NT_STATUS_OK
ReadX 12667 1044480 4096 4096 NT_STATUS_OK
ReadX 12667 1048576 61440 61440 NT_STATUS_OK
ReadX 12667 1110016 4096 4096 NT_STATUS_OK
ReadX 12667 1114112 61440 61440 NT_STATUS_OK
ReadX 12667 1175552 4096 4096 NT_STATUS_OK
ReadX 12667 1179648 61440 61440 NT_STATUS_OK
ReadX 12667 1241088 4096 4096 NT_STATUS_OK
ReadX 12667 1245184 61440 61440 NT_STATUS_OK
ReadX 12667 1306624 4096 4096 NT_STATUS_OK
ReadX 12667 1310720 61440 61440 NT_STATUS_OK
ReadX 12667 1372160 4096 4096 NT_STATUS_OK
ReadX 12667 1376256 61440 61440 NT_STATUS_OK
ReadX 12667 1437696 4096 4096 NT_STATUS_OK
ReadX 12667 1441792 61440 61440 NT_STATUS_OK
ReadX 12667 1503232 4096 4096 NT_STATUS_OK
ReadX 12667 1507328 61440 61440 NT_STATUS_OK
ReadX 12667 1568768 4096 4096 NT_STATUS_OK
ReadX 12667 1572864 61440 61440 NT_STATUS_OK
ReadX 12667 1634304 4096 4096 NT_STATUS_OK
ReadX 12667 1638400 61440 61440 NT_STATUS_OK
ReadX 12667 1699840 4096 4096 NT_STATUS_OK
ReadX 12667 1703936 61440 61440 NT_STATUS_OK
ReadX 12667 1765376 4096 4096 NT_STATUS_OK
ReadX 12667 1769472 61440 61440 NT_STATUS_OK
ReadX 12667 1830912 4096 4096 NT_STATUS_OK
ReadX 12667 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
ReadX 12672 4096 4096 4096 NT_STATUS_OK
ReadX 12672 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Close 12671 NT_STATUS_OK
Close 12672 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12676 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12675 NT_STATUS_OK
Close 12676 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12680 NT_STATUS_OK
ReadX 12680 0 8192 8192 NT_STATUS_OK
ReadX 12680 8192 8192 8192 NT_STATUS_OK
ReadX 12680 16384 8192 8192 NT_STATUS_OK
ReadX 12680 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12682 NT_STATUS_OK
Close 12682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12685 NT_STATUS_OK
WriteX 12685 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 258 NT_STATUS_OK
WriteX 12685 0 10438 10438 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12686 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12689 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12691 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12692 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
ReadX 12694 4096 4096 4096 NT_STATUS_OK
ReadX 12694 8192 4096 4096 NT_STATUS_OK
ReadX 12694 12288 8192 8192 NT_STATUS_OK
ReadX 12694 20480 8192 8192 NT_STATUS_OK
ReadX 12694 28672 8192 8192 NT_STATUS_OK
ReadX 12694 36864 8192 8192 NT_STATUS_OK
ReadX 12694 45056 8192 8192 NT_STATUS_OK
ReadX 12694 53248 8192 8192 NT_STATUS_OK
ReadX 12694 61440 8192 8192 NT_STATUS_OK
ReadX 12694 69632 8192 8192 NT_STATUS_OK
ReadX 12694 77824 8192 8192 NT_STATUS_OK
ReadX 12694 86016 8192 8192 NT_STATUS_OK
ReadX 12694 94208 8192 8192 NT_STATUS_OK
ReadX 12694 102400 8192 8192 NT_STATUS_OK
ReadX 12694 110592 8192 8192 NT_STATUS_OK
ReadX 12694 118784 8192 8192 NT_STATUS_OK
ReadX 12694 126976 8192 8192 NT_STATUS_OK
ReadX 12694 135168 8192 8192 NT_STATUS_OK
ReadX 12694 143360 8192 8192 NT_STATUS_OK
ReadX 12694 151552 8192 8192 NT_STATUS_OK
ReadX 12694 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12699 NT_STATUS_OK
WriteX 12699 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12699 258 NT_STATUS_OK
WriteX 12699 0 28489 28489 NT_STATUS_OK
Close 12699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12700 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12702 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 8192 8192 NT_STATUS_OK
ReadX 12706 8192 8192 8192 NT_STATUS_OK
ReadX 12706 16384 8192 8192 NT_STATUS_OK
ReadX 12706 24576 8192 8192 NT_STATUS_OK
ReadX 12706 32768 16384 16384 NT_STATUS_OK
ReadX 12706 49152 8192 8192 NT_STATUS_OK
ReadX 12706 57344 8192 8192 NT_STATUS_OK
ReadX 12706 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12708 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12711 NT_STATUS_OK
WriteX 12711 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
WriteX 12711 0 29253 29253 NT_STATUS_OK
Close 12711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12715 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12718 NT_STATUS_OK
WriteX 12718 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12718 258 NT_STATUS_OK
WriteX 12718 0 30183 30183 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12721 NT_STATUS_OK
WriteX 12721 0 510 510 NT_STATUS_OK
WriteX 12721 510 512 512 NT_STATUS_OK
WriteX 12721 1022 510 510 NT_STATUS_OK
WriteX 12721 1532 510 510 NT_STATUS_OK
WriteX 12721 2042 168 168 NT_STATUS_OK
Close 12721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
WriteX 12724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 61440 4096 4096 NT_STATUS_OK
ReadX 12725 126976 4096 4096 NT_STATUS_OK
WriteX 12725 0 65536 65536 NT_STATUS_OK
WriteX 12725 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 61440 4096 4096 NT_STATUS_OK
ReadX 12726 126976 4096 4096 NT_STATUS_OK
ReadX 12726 192512 4096 4096 NT_STATUS_OK
ReadX 12726 258048 4096 4096 NT_STATUS_OK
WriteX 12726 0 65536 65536 NT_STATUS_OK
WriteX 12726 65536 65536 65536 NT_STATUS_OK
WriteX 12726 131072 65536 65536 NT_STATUS_OK
WriteX 12726 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 61440 4096 4096 NT_STATUS_OK
ReadX 12727 126976 4096 4096 NT_STATUS_OK
ReadX 12727 192512 4096 4096 NT_STATUS_OK
ReadX 12727 258048 4096 4096 NT_STATUS_OK
ReadX 12727 323584 4096 4096 NT_STATUS_OK
ReadX 12727 389120 4096 4096 NT_STATUS_OK
ReadX 12727 454656 4096 4096 NT_STATUS_OK
ReadX 12727 520192 4096 4096 NT_STATUS_OK
WriteX 12727 0 65536 65536 NT_STATUS_OK
WriteX 12727 65536 65536 65536 NT_STATUS_OK
WriteX 12727 131072 65536 65536 NT_STATUS_OK
WriteX 12727 196608 65536 65536 NT_STATUS_OK
WriteX 12727 262144 65536 65536 NT_STATUS_OK
WriteX 12727 327680 65536 65536 NT_STATUS_OK
WriteX 12727 393216 65536 65536 NT_STATUS_OK
WriteX 12727 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12728 NT_STATUS_OK
Close 12728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12730 NT_STATUS_OK
Close 12730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12739 NT_STATUS_OK
Close 12739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12743 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12757 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12777 NT_STATUS_OK
Close 12777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12782 NT_STATUS_OK
Close 12782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12790 NT_STATUS_OK
Close 12790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12796 NT_STATUS_OK
WriteX 12796 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12796 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12796 0 65536 65536 NT_STATUS_OK
WriteX 12796 65536 65536 65536 NT_STATUS_OK
WriteX 12796 131072 65536 65536 NT_STATUS_OK
WriteX 12796 196608 65536 65536 NT_STATUS_OK
WriteX 12796 262144 26634 26634 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 4096 4096 NT_STATUS_OK
Close 12803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12804 NT_STATUS_OK
ReadX 12804 0 4096 4096 NT_STATUS_OK
ReadX 12804 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12809 NT_STATUS_OK
Close 12809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12818 NT_STATUS_OK
Close 12818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12823 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12832 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12842 NT_STATUS_OK
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12847 NT_STATUS_OK
Close 12847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12861 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12866 NT_STATUS_OK
Close 12866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12869 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12881 NT_STATUS_OK
Close 12881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12883 NT_STATUS_OK
ReadX 12883 0 4096 4096 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 4096 4096 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
Close 12897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12898 NT_STATUS_OK
ReadX 12898 0 4096 4096 NT_STATUS_OK
Close 12898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12899 NT_STATUS_OK
ReadX 12899 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Close 12899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12928 0 4096 4096 NT_STATUS_OK
Close 12928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12929 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
ReadX 12930 4096 4096 4096 NT_STATUS_OK
ReadX 12930 8192 4096 4096 NT_STATUS_OK
ReadX 12930 12288 4096 4096 NT_STATUS_OK
ReadX 12930 16384 4096 4096 NT_STATUS_OK
ReadX 12930 20480 4096 4096 NT_STATUS_OK
ReadX 12930 24576 4096 4096 NT_STATUS_OK
ReadX 12930 28672 4096 4096 NT_STATUS_OK
ReadX 12930 32768 4096 4096 NT_STATUS_OK
ReadX 12930 36864 4096 4096 NT_STATUS_OK
ReadX 12930 40960 4096 4096 NT_STATUS_OK
ReadX 12930 45056 4096 4096 NT_STATUS_OK
ReadX 12930 49152 4096 4096 NT_STATUS_OK
ReadX 12930 53248 4096 4096 NT_STATUS_OK
ReadX 12930 57344 4096 4096 NT_STATUS_OK
ReadX 12930 61440 4096 4096 NT_STATUS_OK
ReadX 12930 65536 4096 4096 NT_STATUS_OK
ReadX 12930 69632 4096 4096 NT_STATUS_OK
ReadX 12930 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12930 1004 NT_STATUS_OK
WriteX 12930 0 4096 4096 NT_STATUS_OK
Close 12930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12931 NT_STATUS_OK
SET_FILE_INFORMATION 12931 1004 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12933 NT_STATUS_OK
Close 12933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12936 NT_STATUS_OK
WriteX 12936 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12936 258 NT_STATUS_OK
WriteX 12936 0 65536 65536 NT_STATUS_OK
WriteX 12936 65536 19979 19979 NT_STATUS_OK
Close 12936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12937 NT_STATUS_OK
ReadX 12937 0 4096 4096 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
Flush 12937 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
Flush 12937 NT_STATUS_OK
QUERY_FILE_INFORMATION 12937 1004 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
Flush 12937 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
Flush 12937 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
Flush 12937 NT_STATUS_OK
SET_FILE_INFORMATION 12937 1004 NT_STATUS_OK
WriteX 12937 0 4096 4096 NT_STATUS_OK
Flush 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12938 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12939 NT_STATUS_OK
ReadX 12939 0 4096 4096 NT_STATUS_OK
Close 12938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12942 1004 NT_STATUS_OK
WriteX 12942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12943 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12939 NT_STATUS_OK
Close 12942 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12948 NT_STATUS_OK
WriteX 12948 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12948 258 NT_STATUS_OK
WriteX 12948 0 65536 65536 NT_STATUS_OK
WriteX 12948 65536 17654 17654 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Flush 12949 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Flush 12949 NT_STATUS_OK
QUERY_FILE_INFORMATION 12949 1004 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Flush 12949 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Flush 12949 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Flush 12949 NT_STATUS_OK
SET_FILE_INFORMATION 12949 1004 NT_STATUS_OK
WriteX 12949 0 4096 4096 NT_STATUS_OK
Flush 12949 NT_STATUS_OK
Close 12949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12950 NT_STATUS_OK
SET_FILE_INFORMATION 12950 1004 NT_STATUS_OK
Close 12950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12952 NT_STATUS_OK
Close 12952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
ReadX 12954 4096 4096 4096 NT_STATUS_OK
ReadX 12954 8192 4096 4096 NT_STATUS_OK
ReadX 12954 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12954 16384 4096 4096 NT_STATUS_OK
ReadX 12954 20480 4096 4096 NT_STATUS_OK
ReadX 12954 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
Close 12955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12957 1004 NT_STATUS_OK
WriteX 12957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12960 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12963 NT_STATUS_OK
WriteX 12963 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12963 258 NT_STATUS_OK
WriteX 12963 0 65536 65536 NT_STATUS_OK
WriteX 12963 65536 19490 19490 NT_STATUS_OK
Close 12963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 4096 4096 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
QUERY_FILE_INFORMATION 12964 1004 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
SET_FILE_INFORMATION 12964 1004 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
Flush 12964 NT_STATUS_OK
Close 12964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12965 NT_STATUS_OK
SET_FILE_INFORMATION 12965 1004 NT_STATUS_OK
Close 12965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12967 NT_STATUS_OK
Close 12967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12969 0 4096 4096 NT_STATUS_OK
Close 12969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12971 NT_STATUS_OK
ReadX 12971 0 4096 4096 NT_STATUS_OK
ReadX 12971 4096 4096 4096 NT_STATUS_OK
ReadX 12971 8192 4096 4096 NT_STATUS_OK
ReadX 12971 12288 4096 4096 NT_STATUS_OK
ReadX 12971 16384 4096 4096 NT_STATUS_OK
ReadX 12971 20480 4096 4096 NT_STATUS_OK
ReadX 12971 24576 4096 4096 NT_STATUS_OK
ReadX 12971 28672 4096 4096 NT_STATUS_OK
ReadX 12971 32768 4096 4096 NT_STATUS_OK
ReadX 12971 36864 4096 4096 NT_STATUS_OK
ReadX 12971 40960 4096 4096 NT_STATUS_OK
ReadX 12971 45056 4096 4096 NT_STATUS_OK
ReadX 12971 49152 4096 4096 NT_STATUS_OK
ReadX 12971 53248 4096 4096 NT_STATUS_OK
ReadX 12971 57344 4096 4096 NT_STATUS_OK
ReadX 12971 61440 4096 4096 NT_STATUS_OK
ReadX 12971 65536 4096 4096 NT_STATUS_OK
ReadX 12971 69632 4096 4096 NT_STATUS_OK
ReadX 12971 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12971 1004 NT_STATUS_OK
WriteX 12971 0 4096 4096 NT_STATUS_OK
Close 12971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12972 NT_STATUS_OK
SET_FILE_INFORMATION 12972 1004 NT_STATUS_OK
Close 12972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12974 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12977 NT_STATUS_OK
WriteX 12977 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12977 258 NT_STATUS_OK
WriteX 12977 0 65536 65536 NT_STATUS_OK
WriteX 12977 65536 8866 8866 NT_STATUS_OK
Close 12977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 0 4096 4096 NT_STATUS_OK
WriteX 12978 0 4096 4096 NT_STATUS_OK
Flush 12978 NT_STATUS_OK
SET_FILE_INFORMATION 12978 1004 NT_STATUS_OK
WriteX 12978 0 4096 4096 NT_STATUS_OK
Flush 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12982 1004 NT_STATUS_OK
WriteX 12982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12985 NT_STATUS_OK
Close 12985 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12988 NT_STATUS_OK
WriteX 12988 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12988 258 NT_STATUS_OK
WriteX 12988 0 65536 65536 NT_STATUS_OK
WriteX 12988 65536 9298 9298 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Flush 12989 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Flush 12989 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12990 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12995 0 4096 4096 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12996 4096 4096 4096 NT_STATUS_OK
ReadX 12996 8192 4096 4096 NT_STATUS_OK
ReadX 12996 12288 4096 4096 NT_STATUS_OK
ReadX 12996 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
Close 12997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12996 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13005 NT_STATUS_OK
WriteX 13005 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13005 258 NT_STATUS_OK
WriteX 13005 0 65536 65536 NT_STATUS_OK
WriteX 13005 65536 11540 11540 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
WriteX 13006 0 4096 4096 NT_STATUS_OK
Flush 13006 NT_STATUS_OK
SET_FILE_INFORMATION 13006 1004 NT_STATUS_OK
WriteX 13006 0 4096 4096 NT_STATUS_OK
Flush 13006 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13007 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13008 NT_STATUS_OK
ReadX 13008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 61440 4096 4096 NT_STATUS_OK
ReadX 13011 126976 4096 4096 NT_STATUS_OK
WriteX 13011 0 65536 65536 NT_STATUS_OK
WriteX 13011 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 61440 4096 4096 NT_STATUS_OK
ReadX 13012 126976 4096 4096 NT_STATUS_OK
ReadX 13012 192512 4096 4096 NT_STATUS_OK
ReadX 13012 258048 4096 4096 NT_STATUS_OK
WriteX 13012 0 65536 65536 NT_STATUS_OK
WriteX 13012 65536 65536 65536 NT_STATUS_OK
WriteX 13012 131072 65536 65536 NT_STATUS_OK
WriteX 13012 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 61440 4096 4096 NT_STATUS_OK
ReadX 13013 126976 4096 4096 NT_STATUS_OK
ReadX 13013 192512 4096 4096 NT_STATUS_OK
ReadX 13013 258048 4096 4096 NT_STATUS_OK
ReadX 13013 323584 4096 4096 NT_STATUS_OK
ReadX 13013 389120 4096 4096 NT_STATUS_OK
ReadX 13013 454656 4096 4096 NT_STATUS_OK
ReadX 13013 520192 4096 4096 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 65536 65536 NT_STATUS_OK
WriteX 13013 131072 65536 65536 NT_STATUS_OK
WriteX 13013 196608 65536 65536 NT_STATUS_OK
WriteX 13013 262144 65536 65536 NT_STATUS_OK
WriteX 13013 327680 65536 65536 NT_STATUS_OK
WriteX 13013 393216 65536 65536 NT_STATUS_OK
WriteX 13013 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
ReadX 13014 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13015 NT_STATUS_OK
WriteX 13015 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13015 258 NT_STATUS_OK
WriteX 13015 0 53 53 NT_STATUS_OK
Close 13015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13008 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13014 8192 4096 4096 NT_STATUS_OK
ReadX 13014 12288 4096 4096 NT_STATUS_OK
WriteX 13018 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13018 258 NT_STATUS_OK
ReadX 13014 16384 4096 4096 NT_STATUS_OK
ReadX 13014 20480 4096 4096 NT_STATUS_OK
WriteX 13018 0 15360 15360 NT_STATUS_OK
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13019 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13019 1004 NT_STATUS_OK
WriteX 13019 0 4096 4096 NT_STATUS_OK
Close 13019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13022 4096 4096 4096 NT_STATUS_OK
ReadX 13022 8192 4096 4096 NT_STATUS_OK
ReadX 13022 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
ReadX 13025 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
ReadX 13026 4096 4096 4096 NT_STATUS_OK
ReadX 13026 8192 4096 4096 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
WriteX 13027 0 15360 15360 NT_STATUS_OK
Close 13027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13029 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13032 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
Close 13032 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Close 13028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13035 NT_STATUS_OK
ReadX 13035 0 4096 4096 NT_STATUS_OK
ReadX 13035 4096 4096 4096 NT_STATUS_OK
ReadX 13035 8192 4096 4096 NT_STATUS_OK
ReadX 13035 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13035 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13035 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13037 NT_STATUS_OK
WriteX 13037 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13037 258 NT_STATUS_OK
WriteX 13037 0 53 53 NT_STATUS_OK
Close 13037 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13036 4096 4096 4096 NT_STATUS_OK
ReadX 13036 8192 4096 4096 NT_STATUS_OK
ReadX 13036 12288 4096 4096 NT_STATUS_OK
WriteX 13040 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13040 258 NT_STATUS_OK
WriteX 13040 0 12006 12006 NT_STATUS_OK
Close 13040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13041 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13041 1004 NT_STATUS_OK
WriteX 13041 0 4096 4096 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13044 NT_STATUS_OK
ReadX 13044 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13045 NT_STATUS_OK
Close 13045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13044 4096 4096 4096 NT_STATUS_OK
ReadX 13044 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13047 NT_STATUS_OK
WriteX 13047 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13047 258 NT_STATUS_OK
WriteX 13047 0 11991 11991 NT_STATUS_OK
Close 13047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13048 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13049 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13051 NT_STATUS_OK
ReadX 13051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13052 NT_STATUS_OK
SET_FILE_INFORMATION 13052 1004 NT_STATUS_OK
Close 13052 NT_STATUS_OK
WriteX 13048 0 4096 4096 NT_STATUS_OK
Close 13048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13055 NT_STATUS_OK
ReadX 13055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13056 NT_STATUS_OK
Close 13056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13055 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13055 1004 NT_STATUS_OK
ReadX 13055 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13055 1004 NT_STATUS_OK
WriteX 13055 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13055 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13055 1004 NT_STATUS_OK
Close 13031 NT_STATUS_OK
WriteX 13035 0 19054 19054 NT_STATUS_OK
WriteX 13055 0 12288 12288 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13058 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Close 13055 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 0 61440 61440 NT_STATUS_OK
ReadX 13062 61440 4096 4096 NT_STATUS_OK
ReadX 13062 65536 61440 61440 NT_STATUS_OK
ReadX 13062 126976 4096 4096 NT_STATUS_OK
ReadX 13062 131072 61440 61440 NT_STATUS_OK
ReadX 13062 192512 4096 4096 NT_STATUS_OK
ReadX 13062 196608 61440 61440 NT_STATUS_OK
ReadX 13062 258048 4096 4096 NT_STATUS_OK
ReadX 13062 262144 61440 61440 NT_STATUS_OK
ReadX 13062 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 0 61440 61440 NT_STATUS_OK
ReadX 13063 61440 4096 4096 NT_STATUS_OK
ReadX 13063 65536 61440 61440 NT_STATUS_OK
ReadX 13063 126976 4096 4096 NT_STATUS_OK
ReadX 13063 131072 61440 61440 NT_STATUS_OK
ReadX 13063 192512 4096 4096 NT_STATUS_OK
ReadX 13063 196608 61440 61440 NT_STATUS_OK
ReadX 13063 258048 4096 4096 NT_STATUS_OK
ReadX 13063 262144 61440 61440 NT_STATUS_OK
ReadX 13063 323584 4096 4096 NT_STATUS_OK
ReadX 13063 327680 61440 61440 NT_STATUS_OK
ReadX 13063 389120 4096 4096 NT_STATUS_OK
ReadX 13063 393216 61440 61440 NT_STATUS_OK
ReadX 13063 454656 4096 4096 NT_STATUS_OK
ReadX 13063 458752 61440 61440 NT_STATUS_OK
ReadX 13063 520192 4096 4096 NT_STATUS_OK
ReadX 13063 524288 61440 61440 NT_STATUS_OK
ReadX 13063 585728 4096 4096 NT_STATUS_OK
ReadX 13063 589824 61440 61440 NT_STATUS_OK
ReadX 13063 651264 4096 4096 NT_STATUS_OK
ReadX 13063 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 61440 61440 NT_STATUS_OK
ReadX 13064 61440 4096 4096 NT_STATUS_OK
ReadX 13064 65536 61440 61440 NT_STATUS_OK
ReadX 13064 126976 4096 4096 NT_STATUS_OK
ReadX 13064 131072 61440 61440 NT_STATUS_OK
ReadX 13064 192512 4096 4096 NT_STATUS_OK
ReadX 13064 196608 61440 61440 NT_STATUS_OK
ReadX 13064 258048 4096 4096 NT_STATUS_OK
ReadX 13064 262144 61440 61440 NT_STATUS_OK
ReadX 13064 323584 4096 4096 NT_STATUS_OK
ReadX 13064 327680 61440 61440 NT_STATUS_OK
ReadX 13064 389120 4096 4096 NT_STATUS_OK
ReadX 13064 393216 61440 61440 NT_STATUS_OK
ReadX 13064 454656 4096 4096 NT_STATUS_OK
ReadX 13064 458752 61440 61440 NT_STATUS_OK
ReadX 13064 520192 4096 4096 NT_STATUS_OK
ReadX 13064 524288 61440 61440 NT_STATUS_OK
ReadX 13064 585728 4096 4096 NT_STATUS_OK
ReadX 13064 589824 61440 61440 NT_STATUS_OK
ReadX 13064 651264 4096 4096 NT_STATUS_OK
ReadX 13064 655360 61440 61440 NT_STATUS_OK
ReadX 13064 716800 4096 4096 NT_STATUS_OK
ReadX 13064 720896 61440 61440 NT_STATUS_OK
ReadX 13064 782336 4096 4096 NT_STATUS_OK
ReadX 13064 786432 61440 61440 NT_STATUS_OK
ReadX 13064 847872 4096 4096 NT_STATUS_OK
ReadX 13064 851968 61440 61440 NT_STATUS_OK
ReadX 13064 913408 4096 4096 NT_STATUS_OK
ReadX 13064 917504 61440 61440 NT_STATUS_OK
ReadX 13064 978944 4096 4096 NT_STATUS_OK
ReadX 13064 983040 61440 61440 NT_STATUS_OK
ReadX 13064 1044480 4096 4096 NT_STATUS_OK
ReadX 13064 1048576 61440 61440 NT_STATUS_OK
ReadX 13064 1110016 4096 4096 NT_STATUS_OK
ReadX 13064 1114112 61440 61440 NT_STATUS_OK
ReadX 13064 1175552 4096 4096 NT_STATUS_OK
ReadX 13064 1179648 61440 61440 NT_STATUS_OK
ReadX 13064 1241088 4096 4096 NT_STATUS_OK
ReadX 13064 1245184 61440 61440 NT_STATUS_OK
ReadX 13064 1306624 4096 4096 NT_STATUS_OK
ReadX 13064 1310720 61440 61440 NT_STATUS_OK
ReadX 13064 1372160 4096 4096 NT_STATUS_OK
ReadX 13064 1376256 61440 61440 NT_STATUS_OK
ReadX 13064 1437696 4096 4096 NT_STATUS_OK
ReadX 13064 1441792 61440 61440 NT_STATUS_OK
ReadX 13064 1503232 4096 4096 NT_STATUS_OK
ReadX 13064 1507328 61440 61440 NT_STATUS_OK
ReadX 13064 1568768 4096 4096 NT_STATUS_OK
ReadX 13064 1572864 61440 61440 NT_STATUS_OK
ReadX 13064 1634304 4096 4096 NT_STATUS_OK
ReadX 13064 1638400 61440 61440 NT_STATUS_OK
ReadX 13064 1699840 4096 4096 NT_STATUS_OK
ReadX 13064 1703936 61440 61440 NT_STATUS_OK
ReadX 13064 1765376 4096 4096 NT_STATUS_OK
ReadX 13064 1769472 61440 61440 NT_STATUS_OK
ReadX 13064 1830912 4096 4096 NT_STATUS_OK
ReadX 13064 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13071 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1004 NT_STATUS_OK
WriteX 13071 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13072 NT_STATUS_OK
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13073 NT_STATUS_OK
WriteX 13073 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13073 258 NT_STATUS_OK
WriteX 13073 0 491 491 NT_STATUS_OK
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13071 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13077 NT_STATUS_OK
WriteX 13077 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
WriteX 13077 0 543 543 NT_STATUS_OK
Close 13077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Close 13064 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13068 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13091 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 1004 NT_STATUS_OK
WriteX 13091 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 258 NT_STATUS_OK
WriteX 13091 0 2048 2048 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13097 NT_STATUS_OK
WriteX 13097 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 2048 2048 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13103 NT_STATUS_OK
WriteX 13103 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13103 258 NT_STATUS_OK
WriteX 13103 0 2048 2048 NT_STATUS_OK
Close 13103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 0 2048 2048 NT_STATUS_OK
ReadX 13082 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13086 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
WriteX 13082 0 8192 8192 NT_STATUS_OK
WriteX 13083 0 4096 4096 NT_STATUS_OK
WriteX 13084 0 4096 4096 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13108 NT_STATUS_OK
QUERY_FILE_INFORMATION 13108 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13098 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13110 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13111 NT_STATUS_OK
ReadX 13111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13127 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13128 NT_STATUS_OK
QUERY_FILE_INFORMATION 13128 1004 NT_STATUS_OK
WriteX 13128 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13128 258 NT_STATUS_OK
WriteX 13128 0 2048 2048 NT_STATUS_OK
Close 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13136 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 1004 NT_STATUS_OK
WriteX 13136 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 258 NT_STATUS_OK
WriteX 13136 0 2048 2048 NT_STATUS_OK
Close 13136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13137 NT_STATUS_OK
ReadX 13137 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
Flush 13129 NT_STATUS_OK
WriteX 13137 0 4096 4096 NT_STATUS_OK
Flush 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13131 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13139 NT_STATUS_OK
WriteX 13139 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13139 258 NT_STATUS_OK
WriteX 13139 0 4096 4096 NT_STATUS_OK
Close 13139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13142 NT_STATUS_OK
WriteX 13142 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13142 258 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13143 0 4096 4096 NT_STATUS_OK
Close 13140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13123 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13131 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13150 NT_STATUS_OK
WriteX 13150 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 258 NT_STATUS_OK
WriteX 13150 0 2048 2048 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13151 NT_STATUS_OK
ReadX 13151 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13152 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13155 NT_STATUS_OK
ReadX 13155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13158 NT_STATUS_OK
ReadX 13158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13159 NT_STATUS_OK
ReadX 13159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13160 NT_STATUS_OK
ReadX 13160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13165 NT_STATUS_OK
QUERY_FILE_INFORMATION 13165 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13151 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13158 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Close 13160 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Close 13162 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Close 13152 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13156 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13154 NT_STATUS_OK
Close 13155 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13167 NT_STATUS_OK
QUERY_FILE_INFORMATION 13167 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13169 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13187 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 1004 NT_STATUS_OK
WriteX 13187 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
WriteX 13187 0 2048 2048 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13190 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13193 NT_STATUS_OK
ReadX 13193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13194 NT_STATUS_OK
ReadX 13194 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13199 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 1004 NT_STATUS_OK
WriteX 13199 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 258 NT_STATUS_OK
WriteX 13199 0 2048 2048 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13200 NT_STATUS_OK
ReadX 13200 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13201 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13207 NT_STATUS_OK
QUERY_FILE_INFORMATION 13207 1004 NT_STATUS_OK
WriteX 13207 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13207 258 NT_STATUS_OK
WriteX 13207 0 2048 2048 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13188 0 4096 4096 NT_STATUS_OK
Flush 13188 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
Flush 13200 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13188 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13190 4096 16384 16384 NT_STATUS_OK
ReadX 13170 4096 16384 16384 NT_STATUS_OK
ReadX 13202 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 2048 2048 NT_STATUS_OK
WriteX 13210 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13211 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13192 NT_STATUS_OK
Close 13193 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13213 NT_STATUS_OK
QUERY_FILE_INFORMATION 13213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13215 NT_STATUS_OK
QUERY_FILE_INFORMATION 13215 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13217 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13218 4096 16384 16384 NT_STATUS_OK
WriteX 13218 0 4096 4096 NT_STATUS_OK
WriteX 13219 0 4096 4096 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
WriteX 13221 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 8192 8192 NT_STATUS_OK
ReadX 13224 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13238 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13238 0 4096 4096 NT_STATUS_OK
ReadX 13238 4096 4096 4096 NT_STATUS_OK
ReadX 13238 8192 4096 4096 NT_STATUS_OK
WriteX 13224 0 4096 4096 NT_STATUS_OK
WriteX 13225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13239 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
ReadX 13239 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13218 0 4096 4096 NT_STATUS_OK
WriteX 13219 0 4096 4096 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
WriteX 13221 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13244 NT_STATUS_OK
QUERY_FILE_INFORMATION 13244 1004 NT_STATUS_OK
WriteX 13244 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13244 258 NT_STATUS_OK
WriteX 13244 0 2048 2048 NT_STATUS_OK
Close 13244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13245 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13245 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
ReadX 13247 4096 4096 4096 NT_STATUS_OK
WriteX 13247 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13245 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
ReadX 13249 4096 4096 4096 NT_STATUS_OK
WriteX 13249 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13250 NT_STATUS_OK
QUERY_FILE_INFORMATION 13250 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Close 13234 NT_STATUS_OK
Close 13236 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13238 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13252 0 4096 4096 NT_STATUS_OK
ReadX 13252 4096 4096 4096 NT_STATUS_OK
ReadX 13252 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13256 NT_STATUS_OK
ReadX 13256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13257 NT_STATUS_OK
ReadX 13257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 4096 4096 NT_STATUS_OK
ReadX 13253 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13270 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 1004 NT_STATUS_OK
WriteX 13270 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 258 NT_STATUS_OK
WriteX 13270 0 2048 2048 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13275 NT_STATUS_OK
Close 13275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13276 NT_STATUS_OK
QUERY_FILE_INFORMATION 13276 1004 NT_STATUS_OK
WriteX 13276 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13276 258 NT_STATUS_OK
WriteX 13276 0 2048 2048 NT_STATUS_OK
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13260 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13278 NT_STATUS_OK
QUERY_FILE_INFORMATION 13278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13254 NT_STATUS_OK
Close 13257 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Close 13256 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13280 NT_STATUS_OK
QUERY_FILE_INFORMATION 13280 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 61440 4096 4096 NT_STATUS_OK
ReadX 13282 126976 4096 4096 NT_STATUS_OK
WriteX 13282 0 65536 65536 NT_STATUS_OK
WriteX 13282 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 61440 4096 4096 NT_STATUS_OK
ReadX 13283 126976 4096 4096 NT_STATUS_OK
ReadX 13283 192512 4096 4096 NT_STATUS_OK
ReadX 13283 258048 4096 4096 NT_STATUS_OK
WriteX 13283 0 65536 65536 NT_STATUS_OK
WriteX 13283 65536 65536 65536 NT_STATUS_OK
WriteX 13283 131072 65536 65536 NT_STATUS_OK
WriteX 13283 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 61440 4096 4096 NT_STATUS_OK
ReadX 13284 126976 4096 4096 NT_STATUS_OK
ReadX 13284 192512 4096 4096 NT_STATUS_OK
ReadX 13284 258048 4096 4096 NT_STATUS_OK
ReadX 13284 323584 4096 4096 NT_STATUS_OK
ReadX 13284 389120 4096 4096 NT_STATUS_OK
ReadX 13284 454656 4096 4096 NT_STATUS_OK
ReadX 13284 520192 4096 4096 NT_STATUS_OK
WriteX 13284 0 65536 65536 NT_STATUS_OK
WriteX 13284 65536 65536 65536 NT_STATUS_OK
WriteX 13284 131072 65536 65536 NT_STATUS_OK
WriteX 13284 196608 65536 65536 NT_STATUS_OK
WriteX 13284 262144 65536 65536 NT_STATUS_OK
WriteX 13284 327680 65536 65536 NT_STATUS_OK
WriteX 13284 393216 65536 65536 NT_STATUS_OK
WriteX 13284 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13285 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13285 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13285 8192 4096 4096 NT_STATUS_OK
ReadX 13285 12288 4096 4096 NT_STATUS_OK
ReadX 13285 16384 4096 4096 NT_STATUS_OK
ReadX 13285 20480 4096 4096 NT_STATUS_OK
ReadX 13285 24576 4096 4096 NT_STATUS_OK
ReadX 13285 28672 4096 4096 NT_STATUS_OK
ReadX 13285 32768 4096 4096 NT_STATUS_OK
ReadX 13285 36864 4096 4096 NT_STATUS_OK
ReadX 13285 40960 4096 4096 NT_STATUS_OK
ReadX 13285 45056 4096 4096 NT_STATUS_OK
ReadX 13285 49152 4096 4096 NT_STATUS_OK
ReadX 13285 53248 4096 4096 NT_STATUS_OK
ReadX 13285 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13285 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13288 NT_STATUS_OK
WriteX 13288 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13288 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13288 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
WriteX 13288 0 57088 57088 NT_STATUS_OK
WriteX 13288 0 4096 4096 NT_STATUS_OK
Flush 13288 NT_STATUS_OK
Close 13285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13289 NT_STATUS_OK
SET_FILE_INFORMATION 13289 1004 NT_STATUS_OK
Close 13289 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
WriteX 13288 0 4096 4096 NT_STATUS_OK
Close 13288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13292 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13293 NT_STATUS_OK
WriteX 13293 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13293 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13293 1004 NT_STATUS_OK
WriteX 13293 0 51456 51456 NT_STATUS_OK
WriteX 13293 0 4096 4096 NT_STATUS_OK
Flush 13293 NT_STATUS_OK
SET_FILE_INFORMATION 13293 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13293 1004 NT_STATUS_OK
WriteX 13293 0 4096 4096 NT_STATUS_OK
Close 13293 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13295 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13297 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13299 NT_STATUS_OK
Close 13299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13302 NT_STATUS_OK
WriteX 13302 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13302 258 NT_STATUS_OK
WriteX 13302 0 53077 53077 NT_STATUS_OK
Close 13302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13303 NT_STATUS_OK
WriteX 13303 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13303 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13303 1004 NT_STATUS_OK
WriteX 13303 0 65536 65536 NT_STATUS_OK
WriteX 13303 65536 1856 1856 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
Flush 13303 NT_STATUS_OK
SET_FILE_INFORMATION 13303 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13303 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13305 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13312 NT_STATUS_OK
WriteX 13312 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13312 258 NT_STATUS_OK
WriteX 13312 0 7983 7983 NT_STATUS_OK
Close 13312 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13317 NT_STATUS_OK
WriteX 13317 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13317 258 NT_STATUS_OK
WriteX 13317 0 65536 65536 NT_STATUS_OK
WriteX 13317 65536 65536 65536 NT_STATUS_OK
WriteX 13317 131072 65536 65536 NT_STATUS_OK
WriteX 13317 196608 65536 65536 NT_STATUS_OK
WriteX 13317 262144 65536 65536 NT_STATUS_OK
WriteX 13317 327680 65536 65536 NT_STATUS_OK
WriteX 13317 393216 65536 65536 NT_STATUS_OK
WriteX 13317 458752 46731 46731 NT_STATUS_OK
Close 13317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13318 NT_STATUS_OK
WriteX 13318 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13307 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13318 1004 NT_STATUS_OK
WriteX 13318 0 65536 65536 NT_STATUS_OK
WriteX 13318 65536 22848 22848 NT_STATUS_OK
WriteX 13318 0 4096 4096 NT_STATUS_OK
Flush 13318 NT_STATUS_OK
SET_FILE_INFORMATION 13318 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13318 1004 NT_STATUS_OK
WriteX 13318 0 4096 4096 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13322 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13323 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13323 1004 NT_STATUS_OK
ReadX 13323 8192 4096 4096 NT_STATUS_OK
ReadX 13323 12288 4096 4096 NT_STATUS_OK
ReadX 13323 16384 4096 4096 NT_STATUS_OK
ReadX 13323 20480 4096 4096 NT_STATUS_OK
ReadX 13323 24576 4096 4096 NT_STATUS_OK
ReadX 13323 28672 4096 4096 NT_STATUS_OK
ReadX 13323 32768 4096 4096 NT_STATUS_OK
ReadX 13323 36864 4096 4096 NT_STATUS_OK
ReadX 13323 40960 4096 4096 NT_STATUS_OK
ReadX 13323 45056 4096 4096 NT_STATUS_OK
ReadX 13323 49152 4096 4096 NT_STATUS_OK
ReadX 13323 53248 4096 4096 NT_STATUS_OK
ReadX 13323 57344 4096 4096 NT_STATUS_OK
ReadX 13323 61440 4096 4096 NT_STATUS_OK
ReadX 13323 65536 4096 4096 NT_STATUS_OK
ReadX 13323 69632 4096 4096 NT_STATUS_OK
ReadX 13323 73728 4096 4096 NT_STATUS_OK
ReadX 13323 77824 4096 4096 NT_STATUS_OK
ReadX 13323 81920 4096 4096 NT_STATUS_OK
ReadX 13323 86016 4096 4096 NT_STATUS_OK
ReadX 13323 90112 4096 4096 NT_STATUS_OK
ReadX 13323 94208 4096 4096 NT_STATUS_OK
ReadX 13323 98304 4096 4096 NT_STATUS_OK
ReadX 13323 102400 4096 4096 NT_STATUS_OK
ReadX 13323 106496 4096 4096 NT_STATUS_OK
ReadX 13323 110592 4096 4096 NT_STATUS_OK
ReadX 13323 114688 4096 4096 NT_STATUS_OK
ReadX 13323 118784 4096 4096 NT_STATUS_OK
ReadX 13323 122880 4096 4096 NT_STATUS_OK
ReadX 13323 126976 4096 4096 NT_STATUS_OK
ReadX 13323 131072 4096 4096 NT_STATUS_OK
ReadX 13323 135168 4096 4096 NT_STATUS_OK
ReadX 13323 139264 4096 4096 NT_STATUS_OK
ReadX 13323 143360 4096 4096 NT_STATUS_OK
ReadX 13323 147456 4096 4096 NT_STATUS_OK
ReadX 13323 151552 4096 4096 NT_STATUS_OK
ReadX 13323 155648 4096 4096 NT_STATUS_OK
ReadX 13323 159744 4096 4096 NT_STATUS_OK
ReadX 13323 163840 4096 4096 NT_STATUS_OK
ReadX 13323 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13323 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13324 NT_STATUS_OK
Close 13324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13326 NT_STATUS_OK
WriteX 13326 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 258 NT_STATUS_OK
Close 13323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13327 NT_STATUS_OK
SET_FILE_INFORMATION 13327 1004 NT_STATUS_OK
Close 13327 NT_STATUS_OK
WriteX 13326 0 42388 42388 NT_STATUS_OK
Close 13326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13328 NT_STATUS_OK
Close 13328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13330 NT_STATUS_OK
ReadX 13330 0 4096 4096 NT_STATUS_OK
ReadX 13330 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13331 NT_STATUS_OK
WriteX 13331 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13331 258 NT_STATUS_OK
SET_FILE_INFORMATION 13331 1004 NT_STATUS_OK
WriteX 13331 0 42652 42652 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13333 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
ReadX 13335 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13337 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13340 NT_STATUS_OK
WriteX 13340 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13340 258 NT_STATUS_OK
WriteX 13340 0 65536 65536 NT_STATUS_OK
WriteX 13340 65536 49 49 NT_STATUS_OK
Close 13340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 0 61440 61440 NT_STATUS_OK
ReadX 13341 61440 4096 4096 NT_STATUS_OK
ReadX 13341 65536 61440 61440 NT_STATUS_OK
ReadX 13341 126976 4096 4096 NT_STATUS_OK
ReadX 13341 131072 61440 61440 NT_STATUS_OK
ReadX 13341 192512 4096 4096 NT_STATUS_OK
ReadX 13341 196608 61440 61440 NT_STATUS_OK
ReadX 13341 258048 4096 4096 NT_STATUS_OK
ReadX 13341 262144 61440 61440 NT_STATUS_OK
ReadX 13341 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 61440 61440 NT_STATUS_OK
ReadX 13342 61440 4096 4096 NT_STATUS_OK
ReadX 13342 65536 61440 61440 NT_STATUS_OK
ReadX 13342 126976 4096 4096 NT_STATUS_OK
ReadX 13342 131072 61440 61440 NT_STATUS_OK
ReadX 13342 192512 4096 4096 NT_STATUS_OK
ReadX 13342 196608 61440 61440 NT_STATUS_OK
ReadX 13342 258048 4096 4096 NT_STATUS_OK
ReadX 13342 262144 61440 61440 NT_STATUS_OK
ReadX 13342 323584 4096 4096 NT_STATUS_OK
ReadX 13342 327680 61440 61440 NT_STATUS_OK
ReadX 13342 389120 4096 4096 NT_STATUS_OK
ReadX 13342 393216 61440 61440 NT_STATUS_OK
ReadX 13342 454656 4096 4096 NT_STATUS_OK
ReadX 13342 458752 61440 61440 NT_STATUS_OK
ReadX 13342 520192 4096 4096 NT_STATUS_OK
ReadX 13342 524288 61440 61440 NT_STATUS_OK
ReadX 13342 585728 4096 4096 NT_STATUS_OK
ReadX 13342 589824 61440 61440 NT_STATUS_OK
ReadX 13342 651264 4096 4096 NT_STATUS_OK
ReadX 13342 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 61440 61440 NT_STATUS_OK
ReadX 13343 61440 4096 4096 NT_STATUS_OK
ReadX 13343 65536 61440 61440 NT_STATUS_OK
ReadX 13343 126976 4096 4096 NT_STATUS_OK
ReadX 13343 131072 61440 61440 NT_STATUS_OK
ReadX 13343 192512 4096 4096 NT_STATUS_OK
ReadX 13343 196608 61440 61440 NT_STATUS_OK
ReadX 13343 258048 4096 4096 NT_STATUS_OK
ReadX 13343 262144 61440 61440 NT_STATUS_OK
ReadX 13343 323584 4096 4096 NT_STATUS_OK
ReadX 13343 327680 61440 61440 NT_STATUS_OK
ReadX 13343 389120 4096 4096 NT_STATUS_OK
ReadX 13343 393216 61440 61440 NT_STATUS_OK
ReadX 13343 454656 4096 4096 NT_STATUS_OK
ReadX 13343 458752 61440 61440 NT_STATUS_OK
ReadX 13343 520192 4096 4096 NT_STATUS_OK
ReadX 13343 524288 61440 61440 NT_STATUS_OK
ReadX 13343 585728 4096 4096 NT_STATUS_OK
ReadX 13343 589824 61440 61440 NT_STATUS_OK
ReadX 13343 651264 4096 4096 NT_STATUS_OK
ReadX 13343 655360 61440 61440 NT_STATUS_OK
ReadX 13343 716800 4096 4096 NT_STATUS_OK
ReadX 13343 720896 61440 61440 NT_STATUS_OK
ReadX 13343 782336 4096 4096 NT_STATUS_OK
ReadX 13343 786432 61440 61440 NT_STATUS_OK
ReadX 13343 847872 4096 4096 NT_STATUS_OK
ReadX 13343 851968 61440 61440 NT_STATUS_OK
ReadX 13343 913408 4096 4096 NT_STATUS_OK
ReadX 13343 917504 61440 61440 NT_STATUS_OK
ReadX 13343 978944 4096 4096 NT_STATUS_OK
ReadX 13343 983040 61440 61440 NT_STATUS_OK
ReadX 13343 1044480 4096 4096 NT_STATUS_OK
ReadX 13343 1048576 61440 61440 NT_STATUS_OK
ReadX 13343 1110016 4096 4096 NT_STATUS_OK
ReadX 13343 1114112 61440 61440 NT_STATUS_OK
ReadX 13343 1175552 4096 4096 NT_STATUS_OK
ReadX 13343 1179648 61440 61440 NT_STATUS_OK
ReadX 13343 1241088 4096 4096 NT_STATUS_OK
ReadX 13343 1245184 61440 61440 NT_STATUS_OK
ReadX 13343 1306624 4096 4096 NT_STATUS_OK
ReadX 13343 1310720 61440 61440 NT_STATUS_OK
ReadX 13343 1372160 4096 4096 NT_STATUS_OK
ReadX 13343 1376256 61440 61440 NT_STATUS_OK
ReadX 13343 1437696 4096 4096 NT_STATUS_OK
ReadX 13343 1441792 61440 61440 NT_STATUS_OK
ReadX 13343 1503232 4096 4096 NT_STATUS_OK
ReadX 13343 1507328 61440 61440 NT_STATUS_OK
ReadX 13343 1568768 4096 4096 NT_STATUS_OK
ReadX 13343 1572864 61440 61440 NT_STATUS_OK
ReadX 13343 1634304 4096 4096 NT_STATUS_OK
ReadX 13343 1638400 61440 61440 NT_STATUS_OK
ReadX 13343 1699840 4096 4096 NT_STATUS_OK
ReadX 13343 1703936 61440 61440 NT_STATUS_OK
ReadX 13343 1765376 4096 4096 NT_STATUS_OK
ReadX 13343 1769472 61440 61440 NT_STATUS_OK
ReadX 13343 1830912 4096 4096 NT_STATUS_OK
ReadX 13343 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13344 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13345 NT_STATUS_OK
QUERY_FILE_INFORMATION 13345 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13345 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13345 1005 NT_STATUS_OK
ReadX 13345 2156 24 24 NT_STATUS_OK
ReadX 13345 2139 276 276 NT_STATUS_OK
ReadX 13345 2136 14 14 NT_STATUS_OK
ReadX 13345 2136 7 7 NT_STATUS_OK
ReadX 13345 2138 12 12 NT_STATUS_OK
ReadX 13345 2137 8 8 NT_STATUS_OK
ReadX 13345 2135 15 15 NT_STATUS_OK
ReadX 13345 0 16 16 NT_STATUS_OK
ReadX 13345 16 2048 2048 NT_STATUS_OK
ReadX 13345 2064 2048 2048 NT_STATUS_OK
ReadX 13345 257 2048 2048 NT_STATUS_OK
ReadX 13345 385 2048 2048 NT_STATUS_OK
ReadX 13345 513 2048 2048 NT_STATUS_OK
ReadX 13345 641 2048 2048 NT_STATUS_OK
ReadX 13345 769 2048 2048 NT_STATUS_OK
ReadX 13345 897 2048 2048 NT_STATUS_OK
ReadX 13345 1025 2048 2048 NT_STATUS_OK
ReadX 13345 1153 2048 2048 NT_STATUS_OK
ReadX 13345 1281 2048 2048 NT_STATUS_OK
ReadX 13345 1409 2048 2048 NT_STATUS_OK
ReadX 13345 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13350 NT_STATUS_OK
WriteX 13350 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13350 258 NT_STATUS_OK
WriteX 13350 0 10575 10575 NT_STATUS_OK
Flush 13350 NT_STATUS_OK
Close 13350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13351 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13355 NT_STATUS_OK
LockX 13355 2147483538 1 NT_STATUS_OK
UnlockX 13355 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13355 1005 NT_STATUS_OK
ReadX 13355 0 512 512 NT_STATUS_OK
ReadX 13355 512 512 512 NT_STATUS_OK
ReadX 13355 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13355 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13355 1004 NT_STATUS_OK
Close 13355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13356 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 1005 NT_STATUS_OK
ReadX 13356 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13357 NT_STATUS_OK
LockX 13357 2147483538 1 NT_STATUS_OK
UnlockX 13357 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13357 1005 NT_STATUS_OK
ReadX 13357 0 512 512 NT_STATUS_OK
ReadX 13357 512 512 512 NT_STATUS_OK
ReadX 13357 1024 512 512 NT_STATUS_OK
ReadX 13357 288 20 20 NT_STATUS_OK
ReadX 13357 308 2084 2084 NT_STATUS_OK
ReadX 13357 388 2084 2084 NT_STATUS_OK
ReadX 13357 388 2084 2084 NT_STATUS_OK
ReadX 13344 2157 1386 1386 NT_STATUS_OK
ReadX 13357 2472 399 399 NT_STATUS_OK
ReadX 13357 3072 1536 1536 NT_STATUS_OK
ReadX 13357 544 149 149 NT_STATUS_OK
ReadX 13357 693 485 485 NT_STATUS_OK
Close 13357 NT_STATUS_OK
ReadX 13344 2157 4096 4096 NT_STATUS_OK
ReadX 13344 6253 4096 4096 NT_STATUS_OK
ReadX 13344 10349 4096 4096 NT_STATUS_OK
ReadX 13344 14445 4096 4096 NT_STATUS_OK
ReadX 13344 18541 4096 4096 NT_STATUS_OK
ReadX 13344 22637 256 256 NT_STATUS_OK
ReadX 13344 22893 4096 4096 NT_STATUS_OK
ReadX 13344 26989 4096 4096 NT_STATUS_OK
ReadX 13344 31085 4096 4096 NT_STATUS_OK
ReadX 13344 35181 4096 4096 NT_STATUS_OK
ReadX 13344 39277 4096 4096 NT_STATUS_OK
ReadX 13344 43373 4096 4096 NT_STATUS_OK
ReadX 13344 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13344 2157 1024 1024 NT_STATUS_OK
ReadX 13344 1667 4688 4688 NT_STATUS_OK
ReadX 13344 6355 3516 3516 NT_STATUS_OK
ReadX 13344 9871 16384 16384 NT_STATUS_OK
ReadX 13344 26255 3771 3771 NT_STATUS_OK
ReadX 13344 30026 2048 2048 NT_STATUS_OK
ReadX 13344 32074 1024 1024 NT_STATUS_OK
ReadX 13344 33098 6652 6652 NT_STATUS_OK
ReadX 13344 39750 16384 16384 NT_STATUS_OK
ReadX 13344 56134 10496 10496 NT_STATUS_OK
ReadX 13344 66630 1784 1784 NT_STATUS_OK
ReadX 13344 68414 90 90 NT_STATUS_OK
ReadX 13344 68504 273 273 NT_STATUS_OK
ReadX 13344 68777 1600 1600 NT_STATUS_OK
ReadX 13344 70377 640 640 NT_STATUS_OK
ReadX 13344 71017 1280 1280 NT_STATUS_OK
ReadX 13344 72297 8464 8464 NT_STATUS_OK
ReadX 13344 80761 158 158 NT_STATUS_OK
ReadX 13344 80919 912 912 NT_STATUS_OK
ReadX 13344 81831 1980 1980 NT_STATUS_OK
ReadX 13344 83811 2256 2256 NT_STATUS_OK
ReadX 13344 86067 400 400 NT_STATUS_OK
ReadX 13344 86467 252 252 NT_STATUS_OK
ReadX 13344 86719 42 42 NT_STATUS_OK
ReadX 13344 86761 725 725 NT_STATUS_OK
ReadX 13344 2009 512 512 NT_STATUS_OK
ReadX 13344 3895 9 9 NT_STATUS_OK
ReadX 13344 3781 46 46 NT_STATUS_OK
ReadX 13344 4059 92 92 NT_STATUS_OK
ReadX 13344 3781 92 92 NT_STATUS_OK
ReadX 13344 3986 184 184 NT_STATUS_OK
ReadX 13344 3987 16384 16384 NT_STATUS_OK
ReadX 13344 3902 16384 16384 NT_STATUS_OK
ReadX 13344 3781 10240 10240 NT_STATUS_OK
ReadX 13344 3821 16384 16384 NT_STATUS_OK
ReadX 13344 3891 935 935 NT_STATUS_OK
ReadX 13344 4060 10240 10240 NT_STATUS_OK
ReadX 13344 4059 184 184 NT_STATUS_OK
ReadX 13344 256 184 184 NT_STATUS_OK
ReadX 13344 256 1026 1026 NT_STATUS_OK
ReadX 13344 3901 326 326 NT_STATUS_OK
ReadX 13344 3899 652 652 NT_STATUS_OK
ReadX 13344 256 2 2 NT_STATUS_OK
ReadX 13344 258 4948 4948 NT_STATUS_OK
Close 13344 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13359 NT_STATUS_OK
Close 13359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13362 NT_STATUS_OK
WriteX 13362 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
WriteX 13362 0 65536 65536 NT_STATUS_OK
WriteX 13362 65536 65536 65536 NT_STATUS_OK
WriteX 13362 131072 65536 65536 NT_STATUS_OK
WriteX 13362 196608 65536 65536 NT_STATUS_OK
WriteX 13362 262144 65536 65536 NT_STATUS_OK
WriteX 13362 327680 65536 65536 NT_STATUS_OK
WriteX 13362 393216 65536 65536 NT_STATUS_OK
WriteX 13362 458752 65536 65536 NT_STATUS_OK
WriteX 13362 524288 65536 65536 NT_STATUS_OK
WriteX 13362 589824 35257 35257 NT_STATUS_OK
Close 13362 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13367 NT_STATUS_OK
WriteX 13367 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 258 NT_STATUS_OK
WriteX 13367 0 65536 65536 NT_STATUS_OK
WriteX 13367 65536 65536 65536 NT_STATUS_OK
WriteX 13367 131072 65536 65536 NT_STATUS_OK
WriteX 13367 196608 65536 65536 NT_STATUS_OK
WriteX 13367 262144 65536 65536 NT_STATUS_OK
WriteX 13367 327680 65536 65536 NT_STATUS_OK
WriteX 13367 393216 65536 65536 NT_STATUS_OK
WriteX 13367 458752 65536 65536 NT_STATUS_OK
WriteX 13367 524288 65536 65536 NT_STATUS_OK
WriteX 13367 589824 57598 57598 NT_STATUS_OK
Close 13367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13369 NT_STATUS_OK
WriteX 13369 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13369 258 NT_STATUS_OK
WriteX 13369 0 12543 12543 NT_STATUS_OK
Flush 13369 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Close 13353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13371 NT_STATUS_OK
Close 13371 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13375 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 1005 NT_STATUS_OK
ReadX 13375 1938 24 24 NT_STATUS_OK
ReadX 13375 1920 276 276 NT_STATUS_OK
ReadX 13375 1918 14 14 NT_STATUS_OK
ReadX 13375 1918 7 7 NT_STATUS_OK
ReadX 13375 1919 12 12 NT_STATUS_OK
ReadX 13375 1919 8 8 NT_STATUS_OK
ReadX 13375 1917 15 15 NT_STATUS_OK
ReadX 13375 0 16 16 NT_STATUS_OK
ReadX 13375 16 2048 2048 NT_STATUS_OK
ReadX 13375 2064 2048 2048 NT_STATUS_OK
ReadX 13375 257 2048 2048 NT_STATUS_OK
ReadX 13375 385 2048 2048 NT_STATUS_OK
ReadX 13375 513 2048 2048 NT_STATUS_OK
ReadX 13375 641 2048 2048 NT_STATUS_OK
ReadX 13375 769 2048 2048 NT_STATUS_OK
ReadX 13375 897 2048 2048 NT_STATUS_OK
ReadX 13375 1025 2048 2048 NT_STATUS_OK
ReadX 13375 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13377 NT_STATUS_OK
Close 13377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13380 NT_STATUS_OK
WriteX 13380 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13380 258 NT_STATUS_OK
WriteX 13380 0 11588 11588 NT_STATUS_OK
Flush 13380 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13385 NT_STATUS_OK
WriteX 13385 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13385 258 NT_STATUS_OK
WriteX 13385 0 11615 11615 NT_STATUS_OK
Flush 13385 NT_STATUS_OK
Close 13385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13394 NT_STATUS_OK
WriteX 13394 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 258 NT_STATUS_OK
WriteX 13394 0 65536 65536 NT_STATUS_OK
WriteX 13394 65536 16050 16050 NT_STATUS_OK
Close 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13374 1939 64 64 NT_STATUS_OK
ReadX 13374 128 248 248 NT_STATUS_OK
ReadX 13374 128 568 568 NT_STATUS_OK
ReadX 13374 3872 1536 1536 NT_STATUS_OK
ReadX 13374 3456 2560 2560 NT_STATUS_OK
ReadX 13374 3136 512 512 NT_STATUS_OK
ReadX 13374 2880 4096 4096 NT_STATUS_OK
ReadX 13374 3264 3072 3072 NT_STATUS_OK
ReadX 13374 320 4096 4096 NT_STATUS_OK
ReadX 13374 1024 4096 4096 NT_STATUS_OK
ReadX 13374 3616 4096 4096 NT_STATUS_OK
ReadX 13374 1939 64 64 NT_STATUS_OK
ReadX 13374 128 248 248 NT_STATUS_OK
ReadX 13374 128 608 608 NT_STATUS_OK
ReadX 13374 2858 1024 1024 NT_STATUS_OK
ReadX 13374 2810 4096 4096 NT_STATUS_OK
ReadX 13374 2826 4096 4096 NT_STATUS_OK
ReadX 13374 2580 2048 2048 NT_STATUS_OK
ReadX 13374 2800 2560 2560 NT_STATUS_OK
ReadX 13374 2100 4096 4096 NT_STATUS_OK
ReadX 13374 2084 4096 4096 NT_STATUS_OK
ReadX 13374 868 4096 4096 NT_STATUS_OK
ReadX 13374 2324 4096 4096 NT_STATUS_OK
ReadX 13374 884 4096 4096 NT_STATUS_OK
ReadX 13374 2604 1024 1024 NT_STATUS_OK
ReadX 13374 580 4096 4096 NT_STATUS_OK
ReadX 13374 596 4096 4096 NT_STATUS_OK
ReadX 13374 2752 4096 4096 NT_STATUS_OK
ReadX 13374 2842 1024 1024 NT_STATUS_OK
ReadX 13374 660 4096 4096 NT_STATUS_OK
ReadX 13374 2720 4096 4096 NT_STATUS_OK
ReadX 13374 2736 4096 4096 NT_STATUS_OK
ReadX 13374 628 4096 4096 NT_STATUS_OK
ReadX 13374 2704 4096 4096 NT_STATUS_OK
ReadX 13374 1556 4096 4096 NT_STATUS_OK
ReadX 13374 576 4096 4096 NT_STATUS_OK
ReadX 13374 3168 1536 1536 NT_STATUS_OK
ReadX 13374 832 4096 4096 NT_STATUS_OK
ReadX 13374 1088 4096 4096 NT_STATUS_OK
ReadX 13374 1344 4096 4096 NT_STATUS_OK
ReadX 13374 1600 4096 4096 NT_STATUS_OK
ReadX 13374 1856 4096 4096 NT_STATUS_OK
ReadX 13374 2112 4096 4096 NT_STATUS_OK
ReadX 13374 1892 4096 4096 NT_STATUS_OK
ReadX 13374 820 4096 4096 NT_STATUS_OK
ReadX 13374 788 4096 4096 NT_STATUS_OK
ReadX 13374 1604 4096 4096 NT_STATUS_OK
ReadX 13374 3648 4096 4096 NT_STATUS_OK
ReadX 13374 2608 4096 4096 NT_STATUS_OK
ReadX 13374 548 4096 4096 NT_STATUS_OK
ReadX 13374 740 4096 4096 NT_STATUS_OK
ReadX 13374 1344 4096 4096 NT_STATUS_OK
ReadX 13374 3392 4096 4096 NT_STATUS_OK
ReadX 13374 3904 4096 4096 NT_STATUS_OK
ReadX 13374 644 4096 4096 NT_STATUS_OK
ReadX 13374 676 4096 4096 NT_STATUS_OK
ReadX 13374 2688 4096 4096 NT_STATUS_OK
ReadX 13374 320 4096 4096 NT_STATUS_OK
ReadX 13374 900 4096 4096 NT_STATUS_OK
ReadX 13374 1908 4096 4096 NT_STATUS_OK
ReadX 13374 852 4096 4096 NT_STATUS_OK
ReadX 13374 724 4096 4096 NT_STATUS_OK
ReadX 13374 2292 4096 4096 NT_STATUS_OK
ReadX 13374 612 4096 4096 NT_STATUS_OK
ReadX 13374 388 4096 4096 NT_STATUS_OK
ReadX 13374 2368 4096 4096 NT_STATUS_OK
ReadX 13374 2624 4096 4096 NT_STATUS_OK
ReadX 13374 500 4096 4096 NT_STATUS_OK
ReadX 13374 356 4096 4096 NT_STATUS_OK
ReadX 13374 1024 4096 4096 NT_STATUS_OK
ReadX 13374 576 4096 4096 NT_STATUS_OK
ReadX 13374 340 4096 4096 NT_STATUS_OK
ReadX 13374 420 4096 4096 NT_STATUS_OK
ReadX 13374 1600 4096 4096 NT_STATUS_OK
ReadX 13374 404 4096 4096 NT_STATUS_OK
ReadX 13374 1428 4096 4096 NT_STATUS_OK
ReadX 13374 2656 4096 4096 NT_STATUS_OK
ReadX 13374 2624 4096 4096 NT_STATUS_OK
ReadX 13374 452 4096 4096 NT_STATUS_OK
ReadX 13374 692 4096 4096 NT_STATUS_OK
ReadX 13374 564 4096 4096 NT_STATUS_OK
ReadX 13374 372 4096 4096 NT_STATUS_OK
ReadX 13374 468 4096 4096 NT_STATUS_OK
ReadX 13374 484 4096 4096 NT_STATUS_OK
ReadX 13374 1088 4096 4096 NT_STATUS_OK
ReadX 13374 1924 4096 4096 NT_STATUS_OK
ReadX 13374 2768 4096 4096 NT_STATUS_OK
ReadX 13374 832 4096 4096 NT_STATUS_OK
ReadX 13374 836 4096 4096 NT_STATUS_OK
ReadX 13374 1856 4096 4096 NT_STATUS_OK
ReadX 13374 2640 4096 4096 NT_STATUS_OK
ReadX 13374 436 4096 4096 NT_STATUS_OK
ReadX 13374 1828 4096 4096 NT_STATUS_OK
ReadX 13374 804 4096 4096 NT_STATUS_OK
ReadX 13374 1860 4096 4096 NT_STATUS_OK
ReadX 13374 1812 4096 4096 NT_STATUS_OK
ReadX 13374 756 4096 4096 NT_STATUS_OK
ReadX 13374 1636 4096 4096 NT_STATUS_OK
ReadX 13374 772 4096 4096 NT_STATUS_OK
ReadX 13374 2036 4096 4096 NT_STATUS_OK
ReadX 13374 1220 4096 4096 NT_STATUS_OK
ReadX 13374 1652 4096 4096 NT_STATUS_OK
ReadX 13374 2588 4096 4096 NT_STATUS_OK
ReadX 13374 916 4096 4096 NT_STATUS_OK
ReadX 13374 260 4096 4096 NT_STATUS_OK
ReadX 13374 932 4096 4096 NT_STATUS_OK
ReadX 13374 2624 4096 4096 NT_STATUS_OK
ReadX 13374 308 4096 4096 NT_STATUS_OK
ReadX 13374 292 4096 4096 NT_STATUS_OK
ReadX 13374 1140 4096 4096 NT_STATUS_OK
ReadX 13374 276 4096 4096 NT_STATUS_OK
ReadX 13374 2020 4096 4096 NT_STATUS_OK
ReadX 13374 2880 4096 4096 NT_STATUS_OK
ReadX 13374 516 4096 4096 NT_STATUS_OK
ReadX 13374 1844 4096 4096 NT_STATUS_OK
ReadX 13374 1124 4096 4096 NT_STATUS_OK
ReadX 13374 3136 4096 4096 NT_STATUS_OK
ReadX 13374 324 4096 4096 NT_STATUS_OK
ReadX 13374 1156 4096 4096 NT_STATUS_OK
ReadX 13374 1172 4096 4096 NT_STATUS_OK
ReadX 13374 2112 4096 4096 NT_STATUS_OK
ReadX 13374 2368 4096 4096 NT_STATUS_OK
ReadX 13374 964 4096 4096 NT_STATUS_OK
ReadX 13374 980 4096 4096 NT_STATUS_OK
ReadX 13374 1012 4096 4096 NT_STATUS_OK
ReadX 13374 532 4096 4096 NT_STATUS_OK
ReadX 13374 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13374 1620 4096 4096 NT_STATUS_OK
ReadX 13374 1604 4096 4096 NT_STATUS_OK
ReadX 13374 2116 4096 4096 NT_STATUS_OK
ReadX 13374 2132 4096 4096 NT_STATUS_OK
ReadX 13374 2148 4096 4096 NT_STATUS_OK
ReadX 13374 2276 4096 4096 NT_STATUS_OK
ReadX 13374 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13399 NT_STATUS_OK
QUERY_FILE_INFORMATION 13354 1004 NT_STATUS_OK
Close 13354 NT_STATUS_OK
WriteX 13399 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13399 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 1004 NT_STATUS_OK
Close 13356 NT_STATUS_OK
WriteX 13399 0 65536 65536 NT_STATUS_OK
WriteX 13399 65536 64850 64850 NT_STATUS_OK
Close 13399 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13401 NT_STATUS_OK
WriteX 13401 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13401 258 NT_STATUS_OK
ReadX 13374 2068 4096 4096 NT_STATUS_OK
ReadX 13374 1588 4096 4096 NT_STATUS_OK
ReadX 13374 1572 4096 4096 NT_STATUS_OK
WriteX 13401 0 18630 18630 NT_STATUS_OK
Flush 13401 NT_STATUS_OK
Close 13401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13374 612 4096 4096 NT_STATUS_OK
ReadX 13374 564 4096 4096 NT_STATUS_OK
ReadX 13374 1876 4096 4096 NT_STATUS_OK
ReadX 13374 628 4096 4096 NT_STATUS_OK
ReadX 13374 740 4096 4096 NT_STATUS_OK
ReadX 13374 724 4096 4096 NT_STATUS_OK
ReadX 13374 644 4096 4096 NT_STATUS_OK
ReadX 13374 2324 4096 4096 NT_STATUS_OK
ReadX 13374 660 4096 4096 NT_STATUS_OK
ReadX 13374 852 4096 4096 NT_STATUS_OK
ReadX 13374 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13374 2368 4096 4096 NT_STATUS_OK
ReadX 13374 1024 4096 4096 NT_STATUS_OK
ReadX 13374 320 4096 4096 NT_STATUS_OK
ReadX 13374 580 4096 4096 NT_STATUS_OK
ReadX 13374 3136 512 512 NT_STATUS_OK
ReadX 13374 2880 4096 4096 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13406 NT_STATUS_OK
ReadX 13406 61440 4096 4096 NT_STATUS_OK
ReadX 13406 126976 4096 4096 NT_STATUS_OK
WriteX 13406 0 65536 65536 NT_STATUS_OK
WriteX 13406 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13407 NT_STATUS_OK
ReadX 13407 61440 4096 4096 NT_STATUS_OK
ReadX 13407 126976 4096 4096 NT_STATUS_OK
ReadX 13407 192512 4096 4096 NT_STATUS_OK
ReadX 13407 258048 4096 4096 NT_STATUS_OK
WriteX 13407 0 65536 65536 NT_STATUS_OK
WriteX 13407 65536 65536 65536 NT_STATUS_OK
WriteX 13407 131072 65536 65536 NT_STATUS_OK
WriteX 13407 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 61440 4096 4096 NT_STATUS_OK
ReadX 13408 126976 4096 4096 NT_STATUS_OK
ReadX 13408 192512 4096 4096 NT_STATUS_OK
ReadX 13408 258048 4096 4096 NT_STATUS_OK
ReadX 13408 323584 4096 4096 NT_STATUS_OK
ReadX 13408 389120 4096 4096 NT_STATUS_OK
ReadX 13408 454656 4096 4096 NT_STATUS_OK
ReadX 13408 520192 4096 4096 NT_STATUS_OK
WriteX 13408 0 65536 65536 NT_STATUS_OK
WriteX 13408 65536 65536 65536 NT_STATUS_OK
WriteX 13408 131072 65536 65536 NT_STATUS_OK
WriteX 13408 196608 65536 65536 NT_STATUS_OK
WriteX 13408 262144 65536 65536 NT_STATUS_OK
WriteX 13408 327680 65536 65536 NT_STATUS_OK
WriteX 13408 393216 65536 65536 NT_STATUS_OK
WriteX 13408 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13410 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13411 NT_STATUS_OK
WriteX 13411 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13411 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13409 0 8192 8192 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13409 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13409 0 8192 8192 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13409 0 8192 8192 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13409 0 8192 8192 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13413 NT_STATUS_OK
Close 13413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Close 13373 NT_STATUS_OK
Close 13406 NT_STATUS_OK
Close 13407 NT_STATUS_OK
Close 13408 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13416 NT_STATUS_OK
WriteX 13416 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 258 NT_STATUS_OK
WriteX 13416 0 62591 62591 NT_STATUS_OK
Close 13416 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13421 NT_STATUS_OK
WriteX 13421 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
WriteX 13421 0 10845 10845 NT_STATUS_OK
Close 13421 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13426 NT_STATUS_OK
WriteX 13426 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 30118 30118 NT_STATUS_OK
Close 13426 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13411 0 64 64 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 61440 61440 NT_STATUS_OK
ReadX 13428 61440 4096 4096 NT_STATUS_OK
ReadX 13428 65536 61440 61440 NT_STATUS_OK
ReadX 13428 126976 4096 4096 NT_STATUS_OK
ReadX 13428 131072 61440 61440 NT_STATUS_OK
ReadX 13428 192512 4096 4096 NT_STATUS_OK
ReadX 13428 196608 61440 61440 NT_STATUS_OK
ReadX 13428 258048 4096 4096 NT_STATUS_OK
ReadX 13428 262144 61440 61440 NT_STATUS_OK
ReadX 13428 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 61440 61440 NT_STATUS_OK
ReadX 13429 61440 4096 4096 NT_STATUS_OK
ReadX 13429 65536 61440 61440 NT_STATUS_OK
ReadX 13429 126976 4096 4096 NT_STATUS_OK
ReadX 13429 131072 61440 61440 NT_STATUS_OK
ReadX 13429 192512 4096 4096 NT_STATUS_OK
ReadX 13429 196608 61440 61440 NT_STATUS_OK
ReadX 13429 258048 4096 4096 NT_STATUS_OK
ReadX 13429 262144 61440 61440 NT_STATUS_OK
ReadX 13429 323584 4096 4096 NT_STATUS_OK
ReadX 13429 327680 61440 61440 NT_STATUS_OK
ReadX 13429 389120 4096 4096 NT_STATUS_OK
ReadX 13429 393216 61440 61440 NT_STATUS_OK
ReadX 13429 454656 4096 4096 NT_STATUS_OK
ReadX 13429 458752 61440 61440 NT_STATUS_OK
ReadX 13429 520192 4096 4096 NT_STATUS_OK
ReadX 13429 524288 61440 61440 NT_STATUS_OK
ReadX 13429 585728 4096 4096 NT_STATUS_OK
ReadX 13429 589824 61440 61440 NT_STATUS_OK
ReadX 13429 651264 4096 4096 NT_STATUS_OK
ReadX 13429 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 61440 61440 NT_STATUS_OK
ReadX 13430 61440 4096 4096 NT_STATUS_OK
ReadX 13430 65536 61440 61440 NT_STATUS_OK
ReadX 13430 126976 4096 4096 NT_STATUS_OK
ReadX 13430 131072 61440 61440 NT_STATUS_OK
ReadX 13430 192512 4096 4096 NT_STATUS_OK
ReadX 13430 196608 61440 61440 NT_STATUS_OK
ReadX 13430 258048 4096 4096 NT_STATUS_OK
ReadX 13430 262144 61440 61440 NT_STATUS_OK
ReadX 13430 323584 4096 4096 NT_STATUS_OK
ReadX 13430 327680 61440 61440 NT_STATUS_OK
ReadX 13430 389120 4096 4096 NT_STATUS_OK
ReadX 13430 393216 61440 61440 NT_STATUS_OK
ReadX 13430 454656 4096 4096 NT_STATUS_OK
ReadX 13430 458752 61440 61440 NT_STATUS_OK
ReadX 13430 520192 4096 4096 NT_STATUS_OK
ReadX 13430 524288 61440 61440 NT_STATUS_OK
ReadX 13430 585728 4096 4096 NT_STATUS_OK
ReadX 13430 589824 61440 61440 NT_STATUS_OK
ReadX 13430 651264 4096 4096 NT_STATUS_OK
ReadX 13430 655360 61440 61440 NT_STATUS_OK
ReadX 13430 716800 4096 4096 NT_STATUS_OK
ReadX 13430 720896 61440 61440 NT_STATUS_OK
ReadX 13430 782336 4096 4096 NT_STATUS_OK
ReadX 13430 786432 61440 61440 NT_STATUS_OK
ReadX 13430 847872 4096 4096 NT_STATUS_OK
ReadX 13430 851968 61440 61440 NT_STATUS_OK
ReadX 13430 913408 4096 4096 NT_STATUS_OK
ReadX 13430 917504 61440 61440 NT_STATUS_OK
ReadX 13430 978944 4096 4096 NT_STATUS_OK
ReadX 13430 983040 61440 61440 NT_STATUS_OK
ReadX 13430 1044480 4096 4096 NT_STATUS_OK
ReadX 13430 1048576 61440 61440 NT_STATUS_OK
ReadX 13430 1110016 4096 4096 NT_STATUS_OK
ReadX 13430 1114112 61440 61440 NT_STATUS_OK
ReadX 13430 1175552 4096 4096 NT_STATUS_OK
ReadX 13430 1179648 61440 61440 NT_STATUS_OK
ReadX 13430 1241088 4096 4096 NT_STATUS_OK
ReadX 13430 1245184 61440 61440 NT_STATUS_OK
ReadX 13430 1306624 4096 4096 NT_STATUS_OK
ReadX 13430 1310720 61440 61440 NT_STATUS_OK
ReadX 13430 1372160 4096 4096 NT_STATUS_OK
ReadX 13430 1376256 61440 61440 NT_STATUS_OK
ReadX 13430 1437696 4096 4096 NT_STATUS_OK
ReadX 13430 1441792 61440 61440 NT_STATUS_OK
ReadX 13430 1503232 4096 4096 NT_STATUS_OK
ReadX 13430 1507328 61440 61440 NT_STATUS_OK
ReadX 13430 1568768 4096 4096 NT_STATUS_OK
ReadX 13430 1572864 61440 61440 NT_STATUS_OK
ReadX 13430 1634304 4096 4096 NT_STATUS_OK
ReadX 13430 1638400 61440 61440 NT_STATUS_OK
ReadX 13430 1699840 4096 4096 NT_STATUS_OK
ReadX 13430 1703936 61440 61440 NT_STATUS_OK
ReadX 13430 1765376 4096 4096 NT_STATUS_OK
ReadX 13430 1769472 61440 61440 NT_STATUS_OK
ReadX 13430 1830912 4096 4096 NT_STATUS_OK
ReadX 13430 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13433 NT_STATUS_OK
ReadX 13433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
ReadX 13435 4096 4096 4096 NT_STATUS_OK
ReadX 13435 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Close 13434 NT_STATUS_OK
Close 13435 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13439 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 0 8192 8192 NT_STATUS_OK
ReadX 13443 8192 8192 8192 NT_STATUS_OK
ReadX 13443 16384 8192 8192 NT_STATUS_OK
ReadX 13443 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13445 NT_STATUS_OK
Close 13445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13448 NT_STATUS_OK
WriteX 13448 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13448 258 NT_STATUS_OK
WriteX 13448 0 10438 10438 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13449 NT_STATUS_OK
Close 13449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13452 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13453 NT_STATUS_OK
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13454 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13455 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
ReadX 13457 4096 4096 4096 NT_STATUS_OK
ReadX 13457 8192 4096 4096 NT_STATUS_OK
ReadX 13457 12288 8192 8192 NT_STATUS_OK
ReadX 13457 20480 8192 8192 NT_STATUS_OK
ReadX 13457 28672 8192 8192 NT_STATUS_OK
ReadX 13457 36864 8192 8192 NT_STATUS_OK
ReadX 13457 45056 8192 8192 NT_STATUS_OK
ReadX 13457 53248 8192 8192 NT_STATUS_OK
ReadX 13457 61440 8192 8192 NT_STATUS_OK
ReadX 13457 69632 8192 8192 NT_STATUS_OK
ReadX 13457 77824 8192 8192 NT_STATUS_OK
ReadX 13457 86016 8192 8192 NT_STATUS_OK
ReadX 13457 94208 8192 8192 NT_STATUS_OK
ReadX 13457 102400 8192 8192 NT_STATUS_OK
ReadX 13457 110592 8192 8192 NT_STATUS_OK
ReadX 13457 118784 8192 8192 NT_STATUS_OK
ReadX 13457 126976 8192 8192 NT_STATUS_OK
ReadX 13457 135168 8192 8192 NT_STATUS_OK
ReadX 13457 143360 8192 8192 NT_STATUS_OK
ReadX 13457 151552 8192 8192 NT_STATUS_OK
ReadX 13457 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13462 NT_STATUS_OK
WriteX 13462 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13462 258 NT_STATUS_OK
WriteX 13462 0 28489 28489 NT_STATUS_OK
Close 13462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13463 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13465 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 8192 8192 NT_STATUS_OK
ReadX 13469 8192 8192 8192 NT_STATUS_OK
ReadX 13469 16384 8192 8192 NT_STATUS_OK
ReadX 13469 24576 8192 8192 NT_STATUS_OK
ReadX 13469 32768 16384 16384 NT_STATUS_OK
ReadX 13469 49152 8192 8192 NT_STATUS_OK
ReadX 13469 57344 8192 8192 NT_STATUS_OK
ReadX 13469 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13471 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13474 NT_STATUS_OK
WriteX 13474 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
WriteX 13474 0 29253 29253 NT_STATUS_OK
Close 13474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13478 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13481 NT_STATUS_OK
WriteX 13481 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13481 258 NT_STATUS_OK
WriteX 13481 0 30183 30183 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13484 NT_STATUS_OK
WriteX 13484 0 510 510 NT_STATUS_OK
WriteX 13484 510 512 512 NT_STATUS_OK
WriteX 13484 1022 510 510 NT_STATUS_OK
WriteX 13484 1532 510 510 NT_STATUS_OK
WriteX 13484 2042 168 168 NT_STATUS_OK
Close 13484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
WriteX 13487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 61440 4096 4096 NT_STATUS_OK
ReadX 13488 126976 4096 4096 NT_STATUS_OK
WriteX 13488 0 65536 65536 NT_STATUS_OK
WriteX 13488 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 61440 4096 4096 NT_STATUS_OK
ReadX 13489 126976 4096 4096 NT_STATUS_OK
ReadX 13489 192512 4096 4096 NT_STATUS_OK
ReadX 13489 258048 4096 4096 NT_STATUS_OK
WriteX 13489 0 65536 65536 NT_STATUS_OK
WriteX 13489 65536 65536 65536 NT_STATUS_OK
WriteX 13489 131072 65536 65536 NT_STATUS_OK
WriteX 13489 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 61440 4096 4096 NT_STATUS_OK
ReadX 13490 126976 4096 4096 NT_STATUS_OK
ReadX 13490 192512 4096 4096 NT_STATUS_OK
ReadX 13490 258048 4096 4096 NT_STATUS_OK
ReadX 13490 323584 4096 4096 NT_STATUS_OK
ReadX 13490 389120 4096 4096 NT_STATUS_OK
ReadX 13490 454656 4096 4096 NT_STATUS_OK
ReadX 13490 520192 4096 4096 NT_STATUS_OK
WriteX 13490 0 65536 65536 NT_STATUS_OK
WriteX 13490 65536 65536 65536 NT_STATUS_OK
WriteX 13490 131072 65536 65536 NT_STATUS_OK
WriteX 13490 196608 65536 65536 NT_STATUS_OK
WriteX 13490 262144 65536 65536 NT_STATUS_OK
WriteX 13490 327680 65536 65536 NT_STATUS_OK
WriteX 13490 393216 65536 65536 NT_STATUS_OK
WriteX 13490 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13491 NT_STATUS_OK
Close 13491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Close 13490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13493 NT_STATUS_OK
Close 13493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13502 NT_STATUS_OK
Close 13502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13506 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13520 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13540 NT_STATUS_OK
Close 13540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13545 NT_STATUS_OK
Close 13545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13553 NT_STATUS_OK
Close 13553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13559 NT_STATUS_OK
WriteX 13559 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13559 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13559 0 65536 65536 NT_STATUS_OK
WriteX 13559 65536 65536 65536 NT_STATUS_OK
WriteX 13559 131072 65536 65536 NT_STATUS_OK
WriteX 13559 196608 65536 65536 NT_STATUS_OK
WriteX 13559 262144 26634 26634 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 4096 4096 NT_STATUS_OK
Close 13566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13567 NT_STATUS_OK
ReadX 13567 0 4096 4096 NT_STATUS_OK
ReadX 13567 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13572 NT_STATUS_OK
Close 13572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13581 NT_STATUS_OK
Close 13581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13586 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13595 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13605 NT_STATUS_OK
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13610 NT_STATUS_OK
Close 13610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13624 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13629 NT_STATUS_OK
Close 13629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13632 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13644 NT_STATUS_OK
Close 13644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13646 NT_STATUS_OK
ReadX 13646 0 4096 4096 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 4096 4096 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
Close 13660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13661 NT_STATUS_OK
ReadX 13661 0 4096 4096 NT_STATUS_OK
Close 13661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13662 NT_STATUS_OK
ReadX 13662 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13662 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13691 0 4096 4096 NT_STATUS_OK
Close 13691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13692 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
ReadX 13693 4096 4096 4096 NT_STATUS_OK
ReadX 13693 8192 4096 4096 NT_STATUS_OK
ReadX 13693 12288 4096 4096 NT_STATUS_OK
ReadX 13693 16384 4096 4096 NT_STATUS_OK
ReadX 13693 20480 4096 4096 NT_STATUS_OK
ReadX 13693 24576 4096 4096 NT_STATUS_OK
ReadX 13693 28672 4096 4096 NT_STATUS_OK
ReadX 13693 32768 4096 4096 NT_STATUS_OK
ReadX 13693 36864 4096 4096 NT_STATUS_OK
ReadX 13693 40960 4096 4096 NT_STATUS_OK
ReadX 13693 45056 4096 4096 NT_STATUS_OK
ReadX 13693 49152 4096 4096 NT_STATUS_OK
ReadX 13693 53248 4096 4096 NT_STATUS_OK
ReadX 13693 57344 4096 4096 NT_STATUS_OK
ReadX 13693 61440 4096 4096 NT_STATUS_OK
ReadX 13693 65536 4096 4096 NT_STATUS_OK
ReadX 13693 69632 4096 4096 NT_STATUS_OK
ReadX 13693 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13693 1004 NT_STATUS_OK
WriteX 13693 0 4096 4096 NT_STATUS_OK
Close 13693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13694 NT_STATUS_OK
SET_FILE_INFORMATION 13694 1004 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13696 NT_STATUS_OK
Close 13696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13699 NT_STATUS_OK
WriteX 13699 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13699 258 NT_STATUS_OK
WriteX 13699 0 65536 65536 NT_STATUS_OK
WriteX 13699 65536 19979 19979 NT_STATUS_OK
Close 13699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13700 NT_STATUS_OK
ReadX 13700 0 4096 4096 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
Flush 13700 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
Flush 13700 NT_STATUS_OK
QUERY_FILE_INFORMATION 13700 1004 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
Flush 13700 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
Flush 13700 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
Flush 13700 NT_STATUS_OK
SET_FILE_INFORMATION 13700 1004 NT_STATUS_OK
WriteX 13700 0 4096 4096 NT_STATUS_OK
Flush 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13701 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13702 NT_STATUS_OK
ReadX 13702 0 4096 4096 NT_STATUS_OK
Close 13701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13705 1004 NT_STATUS_OK
WriteX 13705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13706 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13702 NT_STATUS_OK
Close 13705 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13711 NT_STATUS_OK
WriteX 13711 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13711 258 NT_STATUS_OK
WriteX 13711 0 65536 65536 NT_STATUS_OK
WriteX 13711 65536 17654 17654 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Flush 13712 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Flush 13712 NT_STATUS_OK
QUERY_FILE_INFORMATION 13712 1004 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Flush 13712 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Flush 13712 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Flush 13712 NT_STATUS_OK
SET_FILE_INFORMATION 13712 1004 NT_STATUS_OK
WriteX 13712 0 4096 4096 NT_STATUS_OK
Flush 13712 NT_STATUS_OK
Close 13712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13713 NT_STATUS_OK
SET_FILE_INFORMATION 13713 1004 NT_STATUS_OK
Close 13713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13715 NT_STATUS_OK
Close 13715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
ReadX 13717 4096 4096 4096 NT_STATUS_OK
ReadX 13717 8192 4096 4096 NT_STATUS_OK
ReadX 13717 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13717 16384 4096 4096 NT_STATUS_OK
ReadX 13717 20480 4096 4096 NT_STATUS_OK
ReadX 13717 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
Close 13718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13720 1004 NT_STATUS_OK
WriteX 13720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13723 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13726 NT_STATUS_OK
WriteX 13726 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13726 258 NT_STATUS_OK
WriteX 13726 0 65536 65536 NT_STATUS_OK
WriteX 13726 65536 19490 19490 NT_STATUS_OK
Close 13726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 4096 4096 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
QUERY_FILE_INFORMATION 13727 1004 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
SET_FILE_INFORMATION 13727 1004 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
Flush 13727 NT_STATUS_OK
Close 13727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13728 NT_STATUS_OK
SET_FILE_INFORMATION 13728 1004 NT_STATUS_OK
Close 13728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13730 NT_STATUS_OK
Close 13730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13732 0 4096 4096 NT_STATUS_OK
Close 13732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13734 NT_STATUS_OK
ReadX 13734 0 4096 4096 NT_STATUS_OK
ReadX 13734 4096 4096 4096 NT_STATUS_OK
ReadX 13734 8192 4096 4096 NT_STATUS_OK
ReadX 13734 12288 4096 4096 NT_STATUS_OK
ReadX 13734 16384 4096 4096 NT_STATUS_OK
ReadX 13734 20480 4096 4096 NT_STATUS_OK
ReadX 13734 24576 4096 4096 NT_STATUS_OK
ReadX 13734 28672 4096 4096 NT_STATUS_OK
ReadX 13734 32768 4096 4096 NT_STATUS_OK
ReadX 13734 36864 4096 4096 NT_STATUS_OK
ReadX 13734 40960 4096 4096 NT_STATUS_OK
ReadX 13734 45056 4096 4096 NT_STATUS_OK
ReadX 13734 49152 4096 4096 NT_STATUS_OK
ReadX 13734 53248 4096 4096 NT_STATUS_OK
ReadX 13734 57344 4096 4096 NT_STATUS_OK
ReadX 13734 61440 4096 4096 NT_STATUS_OK
ReadX 13734 65536 4096 4096 NT_STATUS_OK
ReadX 13734 69632 4096 4096 NT_STATUS_OK
ReadX 13734 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13734 1004 NT_STATUS_OK
WriteX 13734 0 4096 4096 NT_STATUS_OK
Close 13734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13735 NT_STATUS_OK
SET_FILE_INFORMATION 13735 1004 NT_STATUS_OK
Close 13735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13737 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13740 NT_STATUS_OK
WriteX 13740 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13740 258 NT_STATUS_OK
WriteX 13740 0 65536 65536 NT_STATUS_OK
WriteX 13740 65536 8866 8866 NT_STATUS_OK
Close 13740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 0 4096 4096 NT_STATUS_OK
WriteX 13741 0 4096 4096 NT_STATUS_OK
Flush 13741 NT_STATUS_OK
SET_FILE_INFORMATION 13741 1004 NT_STATUS_OK
WriteX 13741 0 4096 4096 NT_STATUS_OK
Flush 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13745 1004 NT_STATUS_OK
WriteX 13745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13748 NT_STATUS_OK
Close 13748 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13751 NT_STATUS_OK
WriteX 13751 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13751 258 NT_STATUS_OK
WriteX 13751 0 65536 65536 NT_STATUS_OK
WriteX 13751 65536 9298 9298 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Flush 13752 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Flush 13752 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13753 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13758 0 4096 4096 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13759 4096 4096 4096 NT_STATUS_OK
ReadX 13759 8192 4096 4096 NT_STATUS_OK
ReadX 13759 12288 4096 4096 NT_STATUS_OK
ReadX 13759 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
Close 13760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13759 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13768 NT_STATUS_OK
WriteX 13768 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13768 258 NT_STATUS_OK
WriteX 13768 0 65536 65536 NT_STATUS_OK
WriteX 13768 65536 11540 11540 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
WriteX 13769 0 4096 4096 NT_STATUS_OK
Flush 13769 NT_STATUS_OK
SET_FILE_INFORMATION 13769 1004 NT_STATUS_OK
WriteX 13769 0 4096 4096 NT_STATUS_OK
Flush 13769 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13770 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13771 NT_STATUS_OK
ReadX 13771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 61440 4096 4096 NT_STATUS_OK
ReadX 13774 126976 4096 4096 NT_STATUS_OK
WriteX 13774 0 65536 65536 NT_STATUS_OK
WriteX 13774 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 61440 4096 4096 NT_STATUS_OK
ReadX 13775 126976 4096 4096 NT_STATUS_OK
ReadX 13775 192512 4096 4096 NT_STATUS_OK
ReadX 13775 258048 4096 4096 NT_STATUS_OK
WriteX 13775 0 65536 65536 NT_STATUS_OK
WriteX 13775 65536 65536 65536 NT_STATUS_OK
WriteX 13775 131072 65536 65536 NT_STATUS_OK
WriteX 13775 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 61440 4096 4096 NT_STATUS_OK
ReadX 13776 126976 4096 4096 NT_STATUS_OK
ReadX 13776 192512 4096 4096 NT_STATUS_OK
ReadX 13776 258048 4096 4096 NT_STATUS_OK
ReadX 13776 323584 4096 4096 NT_STATUS_OK
ReadX 13776 389120 4096 4096 NT_STATUS_OK
ReadX 13776 454656 4096 4096 NT_STATUS_OK
ReadX 13776 520192 4096 4096 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 65536 65536 NT_STATUS_OK
WriteX 13776 131072 65536 65536 NT_STATUS_OK
WriteX 13776 196608 65536 65536 NT_STATUS_OK
WriteX 13776 262144 65536 65536 NT_STATUS_OK
WriteX 13776 327680 65536 65536 NT_STATUS_OK
WriteX 13776 393216 65536 65536 NT_STATUS_OK
WriteX 13776 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
ReadX 13777 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13778 NT_STATUS_OK
WriteX 13778 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13778 258 NT_STATUS_OK
WriteX 13778 0 53 53 NT_STATUS_OK
Close 13778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13771 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13777 8192 4096 4096 NT_STATUS_OK
ReadX 13777 12288 4096 4096 NT_STATUS_OK
WriteX 13781 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13781 258 NT_STATUS_OK
ReadX 13777 16384 4096 4096 NT_STATUS_OK
ReadX 13777 20480 4096 4096 NT_STATUS_OK
WriteX 13781 0 15360 15360 NT_STATUS_OK
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13782 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13782 1004 NT_STATUS_OK
WriteX 13782 0 4096 4096 NT_STATUS_OK
Close 13782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13785 4096 4096 4096 NT_STATUS_OK
ReadX 13785 8192 4096 4096 NT_STATUS_OK
ReadX 13785 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
ReadX 13788 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
ReadX 13789 4096 4096 4096 NT_STATUS_OK
ReadX 13789 8192 4096 4096 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
WriteX 13790 0 15360 15360 NT_STATUS_OK
Close 13790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13792 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13795 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
Close 13795 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Close 13791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13798 NT_STATUS_OK
ReadX 13798 0 4096 4096 NT_STATUS_OK
ReadX 13798 4096 4096 4096 NT_STATUS_OK
ReadX 13798 8192 4096 4096 NT_STATUS_OK
ReadX 13798 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13798 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13798 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13800 NT_STATUS_OK
WriteX 13800 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13800 258 NT_STATUS_OK
WriteX 13800 0 53 53 NT_STATUS_OK
Close 13800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13799 4096 4096 4096 NT_STATUS_OK
ReadX 13799 8192 4096 4096 NT_STATUS_OK
ReadX 13799 12288 4096 4096 NT_STATUS_OK
WriteX 13803 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13803 258 NT_STATUS_OK
WriteX 13803 0 12006 12006 NT_STATUS_OK
Close 13803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13804 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13804 1004 NT_STATUS_OK
WriteX 13804 0 4096 4096 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13807 NT_STATUS_OK
ReadX 13807 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13808 NT_STATUS_OK
Close 13808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13807 4096 4096 4096 NT_STATUS_OK
ReadX 13807 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13810 NT_STATUS_OK
WriteX 13810 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13810 258 NT_STATUS_OK
WriteX 13810 0 11991 11991 NT_STATUS_OK
Close 13810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13811 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13812 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13814 NT_STATUS_OK
ReadX 13814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13815 NT_STATUS_OK
SET_FILE_INFORMATION 13815 1004 NT_STATUS_OK
Close 13815 NT_STATUS_OK
WriteX 13811 0 4096 4096 NT_STATUS_OK
Close 13811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13818 NT_STATUS_OK
ReadX 13818 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13819 NT_STATUS_OK
Close 13819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13818 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13818 1004 NT_STATUS_OK
ReadX 13818 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13818 1004 NT_STATUS_OK
WriteX 13818 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13818 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13818 1004 NT_STATUS_OK
Close 13794 NT_STATUS_OK
WriteX 13798 0 19054 19054 NT_STATUS_OK
WriteX 13818 0 12288 12288 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13821 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Close 13818 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 0 61440 61440 NT_STATUS_OK
ReadX 13825 61440 4096 4096 NT_STATUS_OK
ReadX 13825 65536 61440 61440 NT_STATUS_OK
ReadX 13825 126976 4096 4096 NT_STATUS_OK
ReadX 13825 131072 61440 61440 NT_STATUS_OK
ReadX 13825 192512 4096 4096 NT_STATUS_OK
ReadX 13825 196608 61440 61440 NT_STATUS_OK
ReadX 13825 258048 4096 4096 NT_STATUS_OK
ReadX 13825 262144 61440 61440 NT_STATUS_OK
ReadX 13825 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 0 61440 61440 NT_STATUS_OK
ReadX 13826 61440 4096 4096 NT_STATUS_OK
ReadX 13826 65536 61440 61440 NT_STATUS_OK
ReadX 13826 126976 4096 4096 NT_STATUS_OK
ReadX 13826 131072 61440 61440 NT_STATUS_OK
ReadX 13826 192512 4096 4096 NT_STATUS_OK
ReadX 13826 196608 61440 61440 NT_STATUS_OK
ReadX 13826 258048 4096 4096 NT_STATUS_OK
ReadX 13826 262144 61440 61440 NT_STATUS_OK
ReadX 13826 323584 4096 4096 NT_STATUS_OK
ReadX 13826 327680 61440 61440 NT_STATUS_OK
ReadX 13826 389120 4096 4096 NT_STATUS_OK
ReadX 13826 393216 61440 61440 NT_STATUS_OK
ReadX 13826 454656 4096 4096 NT_STATUS_OK
ReadX 13826 458752 61440 61440 NT_STATUS_OK
ReadX 13826 520192 4096 4096 NT_STATUS_OK
ReadX 13826 524288 61440 61440 NT_STATUS_OK
ReadX 13826 585728 4096 4096 NT_STATUS_OK
ReadX 13826 589824 61440 61440 NT_STATUS_OK
ReadX 13826 651264 4096 4096 NT_STATUS_OK
ReadX 13826 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 61440 61440 NT_STATUS_OK
ReadX 13827 61440 4096 4096 NT_STATUS_OK
ReadX 13827 65536 61440 61440 NT_STATUS_OK
ReadX 13827 126976 4096 4096 NT_STATUS_OK
ReadX 13827 131072 61440 61440 NT_STATUS_OK
ReadX 13827 192512 4096 4096 NT_STATUS_OK
ReadX 13827 196608 61440 61440 NT_STATUS_OK
ReadX 13827 258048 4096 4096 NT_STATUS_OK
ReadX 13827 262144 61440 61440 NT_STATUS_OK
ReadX 13827 323584 4096 4096 NT_STATUS_OK
ReadX 13827 327680 61440 61440 NT_STATUS_OK
ReadX 13827 389120 4096 4096 NT_STATUS_OK
ReadX 13827 393216 61440 61440 NT_STATUS_OK
ReadX 13827 454656 4096 4096 NT_STATUS_OK
ReadX 13827 458752 61440 61440 NT_STATUS_OK
ReadX 13827 520192 4096 4096 NT_STATUS_OK
ReadX 13827 524288 61440 61440 NT_STATUS_OK
ReadX 13827 585728 4096 4096 NT_STATUS_OK
ReadX 13827 589824 61440 61440 NT_STATUS_OK
ReadX 13827 651264 4096 4096 NT_STATUS_OK
ReadX 13827 655360 61440 61440 NT_STATUS_OK
ReadX 13827 716800 4096 4096 NT_STATUS_OK
ReadX 13827 720896 61440 61440 NT_STATUS_OK
ReadX 13827 782336 4096 4096 NT_STATUS_OK
ReadX 13827 786432 61440 61440 NT_STATUS_OK
ReadX 13827 847872 4096 4096 NT_STATUS_OK
ReadX 13827 851968 61440 61440 NT_STATUS_OK
ReadX 13827 913408 4096 4096 NT_STATUS_OK
ReadX 13827 917504 61440 61440 NT_STATUS_OK
ReadX 13827 978944 4096 4096 NT_STATUS_OK
ReadX 13827 983040 61440 61440 NT_STATUS_OK
ReadX 13827 1044480 4096 4096 NT_STATUS_OK
ReadX 13827 1048576 61440 61440 NT_STATUS_OK
ReadX 13827 1110016 4096 4096 NT_STATUS_OK
ReadX 13827 1114112 61440 61440 NT_STATUS_OK
ReadX 13827 1175552 4096 4096 NT_STATUS_OK
ReadX 13827 1179648 61440 61440 NT_STATUS_OK
ReadX 13827 1241088 4096 4096 NT_STATUS_OK
ReadX 13827 1245184 61440 61440 NT_STATUS_OK
ReadX 13827 1306624 4096 4096 NT_STATUS_OK
ReadX 13827 1310720 61440 61440 NT_STATUS_OK
ReadX 13827 1372160 4096 4096 NT_STATUS_OK
ReadX 13827 1376256 61440 61440 NT_STATUS_OK
ReadX 13827 1437696 4096 4096 NT_STATUS_OK
ReadX 13827 1441792 61440 61440 NT_STATUS_OK
ReadX 13827 1503232 4096 4096 NT_STATUS_OK
ReadX 13827 1507328 61440 61440 NT_STATUS_OK
ReadX 13827 1568768 4096 4096 NT_STATUS_OK
ReadX 13827 1572864 61440 61440 NT_STATUS_OK
ReadX 13827 1634304 4096 4096 NT_STATUS_OK
ReadX 13827 1638400 61440 61440 NT_STATUS_OK
ReadX 13827 1699840 4096 4096 NT_STATUS_OK
ReadX 13827 1703936 61440 61440 NT_STATUS_OK
ReadX 13827 1765376 4096 4096 NT_STATUS_OK
ReadX 13827 1769472 61440 61440 NT_STATUS_OK
ReadX 13827 1830912 4096 4096 NT_STATUS_OK
ReadX 13827 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13834 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1004 NT_STATUS_OK
WriteX 13834 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13835 NT_STATUS_OK
Close 13835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13836 NT_STATUS_OK
WriteX 13836 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13836 258 NT_STATUS_OK
WriteX 13836 0 491 491 NT_STATUS_OK
Close 13836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13834 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13840 NT_STATUS_OK
WriteX 13840 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
WriteX 13840 0 543 543 NT_STATUS_OK
Close 13840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Close 13827 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13831 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13854 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 1004 NT_STATUS_OK
WriteX 13854 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 258 NT_STATUS_OK
WriteX 13854 0 2048 2048 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13860 NT_STATUS_OK
WriteX 13860 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 2048 2048 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13866 NT_STATUS_OK
WriteX 13866 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13866 258 NT_STATUS_OK
WriteX 13866 0 2048 2048 NT_STATUS_OK
Close 13866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 0 2048 2048 NT_STATUS_OK
ReadX 13845 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13849 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
WriteX 13845 0 8192 8192 NT_STATUS_OK
WriteX 13846 0 4096 4096 NT_STATUS_OK
WriteX 13847 0 4096 4096 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13871 NT_STATUS_OK
QUERY_FILE_INFORMATION 13871 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13870 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13861 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13873 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13874 NT_STATUS_OK
ReadX 13874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13891 NT_STATUS_OK
QUERY_FILE_INFORMATION 13891 1004 NT_STATUS_OK
WriteX 13891 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13891 258 NT_STATUS_OK
WriteX 13891 0 2048 2048 NT_STATUS_OK
Close 13891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13899 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 1004 NT_STATUS_OK
WriteX 13899 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 258 NT_STATUS_OK
WriteX 13899 0 2048 2048 NT_STATUS_OK
Close 13899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13900 NT_STATUS_OK
ReadX 13900 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
Flush 13892 NT_STATUS_OK
WriteX 13900 0 4096 4096 NT_STATUS_OK
Flush 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13900 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13894 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13902 NT_STATUS_OK
WriteX 13902 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13902 258 NT_STATUS_OK
WriteX 13902 0 4096 4096 NT_STATUS_OK
Close 13902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13905 NT_STATUS_OK
WriteX 13905 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13905 258 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13906 0 4096 4096 NT_STATUS_OK
Close 13903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13886 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13894 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13874 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13913 NT_STATUS_OK
WriteX 13913 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 258 NT_STATUS_OK
WriteX 13913 0 2048 2048 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13914 NT_STATUS_OK
ReadX 13914 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13918 NT_STATUS_OK
ReadX 13918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13921 NT_STATUS_OK
ReadX 13921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13922 NT_STATUS_OK
ReadX 13922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13923 NT_STATUS_OK
ReadX 13923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13928 NT_STATUS_OK
QUERY_FILE_INFORMATION 13928 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13914 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13921 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Close 13923 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Close 13925 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Close 13915 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13919 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13917 NT_STATUS_OK
Close 13918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13930 NT_STATUS_OK
QUERY_FILE_INFORMATION 13930 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13950 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 1004 NT_STATUS_OK
WriteX 13950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
WriteX 13950 0 2048 2048 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13953 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13956 NT_STATUS_OK
ReadX 13956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13957 NT_STATUS_OK
ReadX 13957 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13962 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 1004 NT_STATUS_OK
WriteX 13962 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 258 NT_STATUS_OK
WriteX 13962 0 2048 2048 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13963 NT_STATUS_OK
ReadX 13963 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13964 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13970 NT_STATUS_OK
QUERY_FILE_INFORMATION 13970 1004 NT_STATUS_OK
WriteX 13970 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13970 258 NT_STATUS_OK
WriteX 13970 0 2048 2048 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13951 0 4096 4096 NT_STATUS_OK
Flush 13951 NT_STATUS_OK
WriteX 13963 0 4096 4096 NT_STATUS_OK
Flush 13963 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13951 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13963 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13953 4096 16384 16384 NT_STATUS_OK
ReadX 13933 4096 16384 16384 NT_STATUS_OK
ReadX 13965 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 2048 2048 NT_STATUS_OK
WriteX 13973 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13974 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13955 NT_STATUS_OK
Close 13956 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13976 NT_STATUS_OK
QUERY_FILE_INFORMATION 13976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13978 NT_STATUS_OK
QUERY_FILE_INFORMATION 13978 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13980 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13981 4096 16384 16384 NT_STATUS_OK
WriteX 13981 0 4096 4096 NT_STATUS_OK
WriteX 13982 0 4096 4096 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
WriteX 13984 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13996 NT_STATUS_OK
ReadX 13996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13997 NT_STATUS_OK
ReadX 13997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 8192 8192 NT_STATUS_OK
ReadX 13987 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14001 0 4096 4096 NT_STATUS_OK
ReadX 14001 4096 4096 4096 NT_STATUS_OK
ReadX 14001 8192 4096 4096 NT_STATUS_OK
WriteX 13987 0 4096 4096 NT_STATUS_OK
WriteX 13988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
ReadX 14002 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13981 0 4096 4096 NT_STATUS_OK
WriteX 13982 0 4096 4096 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
WriteX 13984 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14007 NT_STATUS_OK
QUERY_FILE_INFORMATION 14007 1004 NT_STATUS_OK
WriteX 14007 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14007 258 NT_STATUS_OK
WriteX 14007 0 2048 2048 NT_STATUS_OK
Close 14007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14008 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14008 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
ReadX 14010 4096 4096 4096 NT_STATUS_OK
WriteX 14010 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14008 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
ReadX 14012 4096 4096 4096 NT_STATUS_OK
WriteX 14012 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14013 NT_STATUS_OK
QUERY_FILE_INFORMATION 14013 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Close 13997 NT_STATUS_OK
Close 13999 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 13988 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14001 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14015 0 4096 4096 NT_STATUS_OK
ReadX 14015 4096 4096 4096 NT_STATUS_OK
ReadX 14015 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14019 NT_STATUS_OK
ReadX 14019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14020 NT_STATUS_OK
ReadX 14020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 4096 4096 NT_STATUS_OK
ReadX 14016 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14033 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 1004 NT_STATUS_OK
WriteX 14033 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 258 NT_STATUS_OK
WriteX 14033 0 2048 2048 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 14038 NT_STATUS_OK
Close 14038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14039 NT_STATUS_OK
QUERY_FILE_INFORMATION 14039 1004 NT_STATUS_OK
WriteX 14039 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14039 258 NT_STATUS_OK
WriteX 14039 0 2048 2048 NT_STATUS_OK
Close 14039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14023 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14041 NT_STATUS_OK
QUERY_FILE_INFORMATION 14041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Close 14016 NT_STATUS_OK
Close 14017 NT_STATUS_OK
Close 14020 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Close 14019 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14043 NT_STATUS_OK
QUERY_FILE_INFORMATION 14043 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 61440 4096 4096 NT_STATUS_OK
ReadX 14045 126976 4096 4096 NT_STATUS_OK
WriteX 14045 0 65536 65536 NT_STATUS_OK
WriteX 14045 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 61440 4096 4096 NT_STATUS_OK
ReadX 14046 126976 4096 4096 NT_STATUS_OK
ReadX 14046 192512 4096 4096 NT_STATUS_OK
ReadX 14046 258048 4096 4096 NT_STATUS_OK
WriteX 14046 0 65536 65536 NT_STATUS_OK
WriteX 14046 65536 65536 65536 NT_STATUS_OK
WriteX 14046 131072 65536 65536 NT_STATUS_OK
WriteX 14046 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 61440 4096 4096 NT_STATUS_OK
ReadX 14047 126976 4096 4096 NT_STATUS_OK
ReadX 14047 192512 4096 4096 NT_STATUS_OK
ReadX 14047 258048 4096 4096 NT_STATUS_OK
ReadX 14047 323584 4096 4096 NT_STATUS_OK
ReadX 14047 389120 4096 4096 NT_STATUS_OK
ReadX 14047 454656 4096 4096 NT_STATUS_OK
ReadX 14047 520192 4096 4096 NT_STATUS_OK
WriteX 14047 0 65536 65536 NT_STATUS_OK
WriteX 14047 65536 65536 65536 NT_STATUS_OK
WriteX 14047 131072 65536 65536 NT_STATUS_OK
WriteX 14047 196608 65536 65536 NT_STATUS_OK
WriteX 14047 262144 65536 65536 NT_STATUS_OK
WriteX 14047 327680 65536 65536 NT_STATUS_OK
WriteX 14047 393216 65536 65536 NT_STATUS_OK
WriteX 14047 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14048 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14048 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14048 8192 4096 4096 NT_STATUS_OK
ReadX 14048 12288 4096 4096 NT_STATUS_OK
ReadX 14048 16384 4096 4096 NT_STATUS_OK
ReadX 14048 20480 4096 4096 NT_STATUS_OK
ReadX 14048 24576 4096 4096 NT_STATUS_OK
ReadX 14048 28672 4096 4096 NT_STATUS_OK
ReadX 14048 32768 4096 4096 NT_STATUS_OK
ReadX 14048 36864 4096 4096 NT_STATUS_OK
ReadX 14048 40960 4096 4096 NT_STATUS_OK
ReadX 14048 45056 4096 4096 NT_STATUS_OK
ReadX 14048 49152 4096 4096 NT_STATUS_OK
ReadX 14048 53248 4096 4096 NT_STATUS_OK
ReadX 14048 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14048 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 14051 NT_STATUS_OK
WriteX 14051 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14051 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14051 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
WriteX 14051 0 57088 57088 NT_STATUS_OK
WriteX 14051 0 4096 4096 NT_STATUS_OK
WriteX 14051 4096 4096 4096 NT_STATUS_OK
Flush 14051 NT_STATUS_OK
Close 14048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 14052 NT_STATUS_OK
SET_FILE_INFORMATION 14052 1004 NT_STATUS_OK
Close 14052 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
WriteX 14051 0 4096 4096 NT_STATUS_OK
Close 14051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14055 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 14056 NT_STATUS_OK
WriteX 14056 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14056 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14056 1004 NT_STATUS_OK
WriteX 14056 0 51456 51456 NT_STATUS_OK
WriteX 14056 0 4096 4096 NT_STATUS_OK
Flush 14056 NT_STATUS_OK
SET_FILE_INFORMATION 14056 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14056 1004 NT_STATUS_OK
WriteX 14056 0 4096 4096 NT_STATUS_OK
Close 14056 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 14058 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14060 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 14062 NT_STATUS_OK
Close 14062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 14065 NT_STATUS_OK
WriteX 14065 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14065 258 NT_STATUS_OK
WriteX 14065 0 53077 53077 NT_STATUS_OK
Close 14065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 14066 NT_STATUS_OK
WriteX 14066 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 14066 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14066 1004 NT_STATUS_OK
WriteX 14066 0 65536 65536 NT_STATUS_OK
WriteX 14066 65536 1856 1856 NT_STATUS_OK
WriteX 14066 0 4096 4096 NT_STATUS_OK
Flush 14066 NT_STATUS_OK
SET_FILE_INFORMATION 14066 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14066 1004 NT_STATUS_OK
WriteX 14066 0 4096 4096 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 14068 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 14072 NT_STATUS_OK
Close 14072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 14075 NT_STATUS_OK
WriteX 14075 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14075 258 NT_STATUS_OK
WriteX 14075 0 7983 7983 NT_STATUS_OK
Close 14075 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 14080 NT_STATUS_OK
WriteX 14080 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14080 258 NT_STATUS_OK
WriteX 14080 0 65536 65536 NT_STATUS_OK
WriteX 14080 65536 65536 65536 NT_STATUS_OK
WriteX 14080 131072 65536 65536 NT_STATUS_OK
WriteX 14080 196608 65536 65536 NT_STATUS_OK
WriteX 14080 262144 65536 65536 NT_STATUS_OK
WriteX 14080 327680 65536 65536 NT_STATUS_OK
WriteX 14080 393216 65536 65536 NT_STATUS_OK
WriteX 14080 458752 46731 46731 NT_STATUS_OK
Close 14080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 14081 NT_STATUS_OK
WriteX 14081 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14081 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14070 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 14081 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14081 1004 NT_STATUS_OK
WriteX 14081 0 65536 65536 NT_STATUS_OK
WriteX 14081 65536 22848 22848 NT_STATUS_OK
WriteX 14081 0 4096 4096 NT_STATUS_OK
Flush 14081 NT_STATUS_OK
SET_FILE_INFORMATION 14081 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14081 1004 NT_STATUS_OK
WriteX 14081 0 4096 4096 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 14083 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14085 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14086 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14086 1004 NT_STATUS_OK
ReadX 14086 8192 4096 4096 NT_STATUS_OK
ReadX 14086 12288 4096 4096 NT_STATUS_OK
ReadX 14086 16384 4096 4096 NT_STATUS_OK
ReadX 14086 20480 4096 4096 NT_STATUS_OK
ReadX 14086 24576 4096 4096 NT_STATUS_OK
ReadX 14086 28672 4096 4096 NT_STATUS_OK
ReadX 14086 32768 4096 4096 NT_STATUS_OK
ReadX 14086 36864 4096 4096 NT_STATUS_OK
ReadX 14086 40960 4096 4096 NT_STATUS_OK
ReadX 14086 45056 4096 4096 NT_STATUS_OK
ReadX 14086 49152 4096 4096 NT_STATUS_OK
ReadX 14086 53248 4096 4096 NT_STATUS_OK
ReadX 14086 57344 4096 4096 NT_STATUS_OK
ReadX 14086 61440 4096 4096 NT_STATUS_OK
ReadX 14086 65536 4096 4096 NT_STATUS_OK
ReadX 14086 69632 4096 4096 NT_STATUS_OK
ReadX 14086 73728 4096 4096 NT_STATUS_OK
ReadX 14086 77824 4096 4096 NT_STATUS_OK
ReadX 14086 81920 4096 4096 NT_STATUS_OK
ReadX 14086 86016 4096 4096 NT_STATUS_OK
ReadX 14086 90112 4096 4096 NT_STATUS_OK
ReadX 14086 94208 4096 4096 NT_STATUS_OK
ReadX 14086 98304 4096 4096 NT_STATUS_OK
ReadX 14086 102400 4096 4096 NT_STATUS_OK
ReadX 14086 106496 4096 4096 NT_STATUS_OK
ReadX 14086 110592 4096 4096 NT_STATUS_OK
ReadX 14086 114688 4096 4096 NT_STATUS_OK
ReadX 14086 118784 4096 4096 NT_STATUS_OK
ReadX 14086 122880 4096 4096 NT_STATUS_OK
ReadX 14086 126976 4096 4096 NT_STATUS_OK
ReadX 14086 131072 4096 4096 NT_STATUS_OK
ReadX 14086 135168 4096 4096 NT_STATUS_OK
ReadX 14086 139264 4096 4096 NT_STATUS_OK
ReadX 14086 143360 4096 4096 NT_STATUS_OK
ReadX 14086 147456 4096 4096 NT_STATUS_OK
ReadX 14086 151552 4096 4096 NT_STATUS_OK
ReadX 14086 155648 4096 4096 NT_STATUS_OK
ReadX 14086 159744 4096 4096 NT_STATUS_OK
ReadX 14086 163840 4096 4096 NT_STATUS_OK
ReadX 14086 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14086 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 14087 NT_STATUS_OK
Close 14087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 14089 NT_STATUS_OK
WriteX 14089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 258 NT_STATUS_OK
Close 14086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 14090 NT_STATUS_OK
SET_FILE_INFORMATION 14090 1004 NT_STATUS_OK
Close 14090 NT_STATUS_OK
WriteX 14089 0 42388 42388 NT_STATUS_OK
Close 14089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 14091 NT_STATUS_OK
Close 14091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 14093 NT_STATUS_OK
ReadX 14093 0 4096 4096 NT_STATUS_OK
ReadX 14093 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 14094 NT_STATUS_OK
WriteX 14094 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14094 258 NT_STATUS_OK
SET_FILE_INFORMATION 14094 1004 NT_STATUS_OK
WriteX 14094 0 42652 42652 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9257 NT_STATUS_OK
Close 9257 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9259 NT_STATUS_OK
ReadX 9259 0 4096 4096 NT_STATUS_OK
ReadX 9259 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9261 NT_STATUS_OK
Close 9261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9264 NT_STATUS_OK
WriteX 9264 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9264 258 NT_STATUS_OK
WriteX 9264 0 65536 65536 NT_STATUS_OK
WriteX 9264 65536 49 49 NT_STATUS_OK
Close 9264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9265 NT_STATUS_OK
ReadX 9265 0 61440 61440 NT_STATUS_OK
ReadX 9265 61440 4096 4096 NT_STATUS_OK
ReadX 9265 65536 61440 61440 NT_STATUS_OK
ReadX 9265 126976 4096 4096 NT_STATUS_OK
ReadX 9265 131072 61440 61440 NT_STATUS_OK
ReadX 9265 192512 4096 4096 NT_STATUS_OK
ReadX 9265 196608 61440 61440 NT_STATUS_OK
ReadX 9265 258048 4096 4096 NT_STATUS_OK
ReadX 9265 262144 61440 61440 NT_STATUS_OK
ReadX 9265 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9266 NT_STATUS_OK
ReadX 9266 0 61440 61440 NT_STATUS_OK
ReadX 9266 61440 4096 4096 NT_STATUS_OK
ReadX 9266 65536 61440 61440 NT_STATUS_OK
ReadX 9266 126976 4096 4096 NT_STATUS_OK
ReadX 9266 131072 61440 61440 NT_STATUS_OK
ReadX 9266 192512 4096 4096 NT_STATUS_OK
ReadX 9266 196608 61440 61440 NT_STATUS_OK
ReadX 9266 258048 4096 4096 NT_STATUS_OK
ReadX 9266 262144 61440 61440 NT_STATUS_OK
ReadX 9266 323584 4096 4096 NT_STATUS_OK
ReadX 9266 327680 61440 61440 NT_STATUS_OK
ReadX 9266 389120 4096 4096 NT_STATUS_OK
ReadX 9266 393216 61440 61440 NT_STATUS_OK
ReadX 9266 454656 4096 4096 NT_STATUS_OK
ReadX 9266 458752 61440 61440 NT_STATUS_OK
ReadX 9266 520192 4096 4096 NT_STATUS_OK
ReadX 9266 524288 61440 61440 NT_STATUS_OK
ReadX 9266 585728 4096 4096 NT_STATUS_OK
ReadX 9266 589824 61440 61440 NT_STATUS_OK
ReadX 9266 651264 4096 4096 NT_STATUS_OK
ReadX 9266 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9267 NT_STATUS_OK
ReadX 9267 0 61440 61440 NT_STATUS_OK
ReadX 9267 61440 4096 4096 NT_STATUS_OK
ReadX 9267 65536 61440 61440 NT_STATUS_OK
ReadX 9267 126976 4096 4096 NT_STATUS_OK
ReadX 9267 131072 61440 61440 NT_STATUS_OK
ReadX 9267 192512 4096 4096 NT_STATUS_OK
ReadX 9267 196608 61440 61440 NT_STATUS_OK
ReadX 9267 258048 4096 4096 NT_STATUS_OK
ReadX 9267 262144 61440 61440 NT_STATUS_OK
ReadX 9267 323584 4096 4096 NT_STATUS_OK
ReadX 9267 327680 61440 61440 NT_STATUS_OK
ReadX 9267 389120 4096 4096 NT_STATUS_OK
ReadX 9267 393216 61440 61440 NT_STATUS_OK
ReadX 9267 454656 4096 4096 NT_STATUS_OK
ReadX 9267 458752 61440 61440 NT_STATUS_OK
ReadX 9267 520192 4096 4096 NT_STATUS_OK
ReadX 9267 524288 61440 61440 NT_STATUS_OK
ReadX 9267 585728 4096 4096 NT_STATUS_OK
ReadX 9267 589824 61440 61440 NT_STATUS_OK
ReadX 9267 651264 4096 4096 NT_STATUS_OK
ReadX 9267 655360 61440 61440 NT_STATUS_OK
ReadX 9267 716800 4096 4096 NT_STATUS_OK
ReadX 9267 720896 61440 61440 NT_STATUS_OK
ReadX 9267 782336 4096 4096 NT_STATUS_OK
ReadX 9267 786432 61440 61440 NT_STATUS_OK
ReadX 9267 847872 4096 4096 NT_STATUS_OK
ReadX 9267 851968 61440 61440 NT_STATUS_OK
ReadX 9267 913408 4096 4096 NT_STATUS_OK
ReadX 9267 917504 61440 61440 NT_STATUS_OK
ReadX 9267 978944 4096 4096 NT_STATUS_OK
ReadX 9267 983040 61440 61440 NT_STATUS_OK
ReadX 9267 1044480 4096 4096 NT_STATUS_OK
ReadX 9267 1048576 61440 61440 NT_STATUS_OK
ReadX 9267 1110016 4096 4096 NT_STATUS_OK
ReadX 9267 1114112 61440 61440 NT_STATUS_OK
ReadX 9267 1175552 4096 4096 NT_STATUS_OK
ReadX 9267 1179648 61440 61440 NT_STATUS_OK
ReadX 9267 1241088 4096 4096 NT_STATUS_OK
ReadX 9267 1245184 61440 61440 NT_STATUS_OK
ReadX 9267 1306624 4096 4096 NT_STATUS_OK
ReadX 9267 1310720 61440 61440 NT_STATUS_OK
ReadX 9267 1372160 4096 4096 NT_STATUS_OK
ReadX 9267 1376256 61440 61440 NT_STATUS_OK
ReadX 9267 1437696 4096 4096 NT_STATUS_OK
ReadX 9267 1441792 61440 61440 NT_STATUS_OK
ReadX 9267 1503232 4096 4096 NT_STATUS_OK
ReadX 9267 1507328 61440 61440 NT_STATUS_OK
ReadX 9267 1568768 4096 4096 NT_STATUS_OK
ReadX 9267 1572864 61440 61440 NT_STATUS_OK
ReadX 9267 1634304 4096 4096 NT_STATUS_OK
ReadX 9267 1638400 61440 61440 NT_STATUS_OK
ReadX 9267 1699840 4096 4096 NT_STATUS_OK
ReadX 9267 1703936 61440 61440 NT_STATUS_OK
ReadX 9267 1765376 4096 4096 NT_STATUS_OK
ReadX 9267 1769472 61440 61440 NT_STATUS_OK
ReadX 9267 1830912 4096 4096 NT_STATUS_OK
ReadX 9267 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9269 NT_STATUS_OK
QUERY_FILE_INFORMATION 9269 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9269 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9269 1005 NT_STATUS_OK
ReadX 9269 2156 24 24 NT_STATUS_OK
ReadX 9269 2139 276 276 NT_STATUS_OK
ReadX 9269 2136 14 14 NT_STATUS_OK
ReadX 9269 2136 7 7 NT_STATUS_OK
ReadX 9269 2138 12 12 NT_STATUS_OK
ReadX 9269 2137 8 8 NT_STATUS_OK
ReadX 9269 2135 15 15 NT_STATUS_OK
ReadX 9269 0 16 16 NT_STATUS_OK
ReadX 9269 16 2048 2048 NT_STATUS_OK
ReadX 9269 2064 2048 2048 NT_STATUS_OK
ReadX 9269 257 2048 2048 NT_STATUS_OK
ReadX 9269 385 2048 2048 NT_STATUS_OK
ReadX 9269 513 2048 2048 NT_STATUS_OK
ReadX 9269 641 2048 2048 NT_STATUS_OK
ReadX 9269 769 2048 2048 NT_STATUS_OK
ReadX 9269 897 2048 2048 NT_STATUS_OK
ReadX 9269 1025 2048 2048 NT_STATUS_OK
ReadX 9269 1153 2048 2048 NT_STATUS_OK
ReadX 9269 1281 2048 2048 NT_STATUS_OK
ReadX 9269 1409 2048 2048 NT_STATUS_OK
ReadX 9269 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9271 NT_STATUS_OK
Close 9271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9265 NT_STATUS_OK
Close 9266 NT_STATUS_OK
Close 9267 NT_STATUS_OK
Close 9259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9274 NT_STATUS_OK
WriteX 9274 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9274 258 NT_STATUS_OK
WriteX 9274 0 10575 10575 NT_STATUS_OK
Flush 9274 NT_STATUS_OK
Close 9274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9275 NT_STATUS_OK
Close 9275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9277 NT_STATUS_OK
ReadX 9277 0 4096 4096 NT_STATUS_OK
Close 9269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9279 NT_STATUS_OK
LockX 9279 2147483538 1 NT_STATUS_OK
UnlockX 9279 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9279 1005 NT_STATUS_OK
ReadX 9279 0 512 512 NT_STATUS_OK
ReadX 9279 512 512 512 NT_STATUS_OK
ReadX 9279 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9279 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9279 1004 NT_STATUS_OK
Close 9279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9280 NT_STATUS_OK
QUERY_FILE_INFORMATION 9280 1005 NT_STATUS_OK
ReadX 9280 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9281 NT_STATUS_OK
LockX 9281 2147483538 1 NT_STATUS_OK
UnlockX 9281 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9281 1005 NT_STATUS_OK
ReadX 9281 0 512 512 NT_STATUS_OK
ReadX 9281 512 512 512 NT_STATUS_OK
ReadX 9281 1024 512 512 NT_STATUS_OK
ReadX 9281 288 20 20 NT_STATUS_OK
ReadX 9281 308 2084 2084 NT_STATUS_OK
ReadX 9281 388 2084 2084 NT_STATUS_OK
ReadX 9281 388 2084 2084 NT_STATUS_OK
ReadX 9268 2157 1386 1386 NT_STATUS_OK
ReadX 9281 2472 399 399 NT_STATUS_OK
ReadX 9281 3072 1536 1536 NT_STATUS_OK
ReadX 9281 544 149 149 NT_STATUS_OK
ReadX 9281 693 485 485 NT_STATUS_OK
Close 9281 NT_STATUS_OK
ReadX 9268 2157 4096 4096 NT_STATUS_OK
ReadX 9268 6253 4096 4096 NT_STATUS_OK
ReadX 9268 10349 4096 4096 NT_STATUS_OK
ReadX 9268 14445 4096 4096 NT_STATUS_OK
ReadX 9268 18541 4096 4096 NT_STATUS_OK
ReadX 9268 22637 256 256 NT_STATUS_OK
ReadX 9268 22893 4096 4096 NT_STATUS_OK
ReadX 9268 26989 4096 4096 NT_STATUS_OK
ReadX 9268 31085 4096 4096 NT_STATUS_OK
ReadX 9268 35181 4096 4096 NT_STATUS_OK
ReadX 9268 39277 4096 4096 NT_STATUS_OK
ReadX 9268 43373 4096 4096 NT_STATUS_OK
ReadX 9268 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9268 2157 1024 1024 NT_STATUS_OK
ReadX 9268 1667 4688 4688 NT_STATUS_OK
ReadX 9268 6355 3516 3516 NT_STATUS_OK
ReadX 9268 9871 16384 16384 NT_STATUS_OK
ReadX 9268 26255 3771 3771 NT_STATUS_OK
ReadX 9268 30026 2048 2048 NT_STATUS_OK
ReadX 9268 32074 1024 1024 NT_STATUS_OK
ReadX 9268 33098 6652 6652 NT_STATUS_OK
ReadX 9268 39750 16384 16384 NT_STATUS_OK
ReadX 9268 56134 10496 10496 NT_STATUS_OK
ReadX 9268 66630 1784 1784 NT_STATUS_OK
ReadX 9268 68414 90 90 NT_STATUS_OK
ReadX 9268 68504 273 273 NT_STATUS_OK
ReadX 9268 68777 1600 1600 NT_STATUS_OK
ReadX 9268 70377 640 640 NT_STATUS_OK
ReadX 9268 71017 1280 1280 NT_STATUS_OK
ReadX 9268 72297 8464 8464 NT_STATUS_OK
ReadX 9268 80761 158 158 NT_STATUS_OK
ReadX 9268 80919 912 912 NT_STATUS_OK
ReadX 9268 81831 1980 1980 NT_STATUS_OK
ReadX 9268 83811 2256 2256 NT_STATUS_OK
ReadX 9268 86067 400 400 NT_STATUS_OK
ReadX 9268 86467 252 252 NT_STATUS_OK
ReadX 9268 86719 42 42 NT_STATUS_OK
ReadX 9268 86761 725 725 NT_STATUS_OK
ReadX 9268 2009 512 512 NT_STATUS_OK
ReadX 9268 3895 9 9 NT_STATUS_OK
ReadX 9268 3781 46 46 NT_STATUS_OK
ReadX 9268 4059 92 92 NT_STATUS_OK
ReadX 9268 3781 92 92 NT_STATUS_OK
ReadX 9268 3986 184 184 NT_STATUS_OK
ReadX 9268 3987 16384 16384 NT_STATUS_OK
ReadX 9268 3902 16384 16384 NT_STATUS_OK
ReadX 9268 3781 10240 10240 NT_STATUS_OK
ReadX 9268 3821 16384 16384 NT_STATUS_OK
ReadX 9268 3891 935 935 NT_STATUS_OK
ReadX 9268 4060 10240 10240 NT_STATUS_OK
ReadX 9268 4059 184 184 NT_STATUS_OK
ReadX 9268 256 184 184 NT_STATUS_OK
ReadX 9268 256 1026 1026 NT_STATUS_OK
ReadX 9268 3901 326 326 NT_STATUS_OK
ReadX 9268 3899 652 652 NT_STATUS_OK
ReadX 9268 256 2 2 NT_STATUS_OK
ReadX 9268 258 4948 4948 NT_STATUS_OK
Close 9268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9283 NT_STATUS_OK
Close 9283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9286 NT_STATUS_OK
WriteX 9286 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9286 258 NT_STATUS_OK
WriteX 9286 0 65536 65536 NT_STATUS_OK
WriteX 9286 65536 65536 65536 NT_STATUS_OK
WriteX 9286 131072 65536 65536 NT_STATUS_OK
WriteX 9286 196608 65536 65536 NT_STATUS_OK
WriteX 9286 262144 65536 65536 NT_STATUS_OK
WriteX 9286 327680 65536 65536 NT_STATUS_OK
WriteX 9286 393216 65536 65536 NT_STATUS_OK
WriteX 9286 458752 65536 65536 NT_STATUS_OK
WriteX 9286 524288 65536 65536 NT_STATUS_OK
WriteX 9286 589824 35257 35257 NT_STATUS_OK
Close 9286 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9288 NT_STATUS_OK
Close 9288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9291 NT_STATUS_OK
WriteX 9291 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9291 258 NT_STATUS_OK
WriteX 9291 0 65536 65536 NT_STATUS_OK
WriteX 9291 65536 65536 65536 NT_STATUS_OK
WriteX 9291 131072 65536 65536 NT_STATUS_OK
WriteX 9291 196608 65536 65536 NT_STATUS_OK
WriteX 9291 262144 65536 65536 NT_STATUS_OK
WriteX 9291 327680 65536 65536 NT_STATUS_OK
WriteX 9291 393216 65536 65536 NT_STATUS_OK
WriteX 9291 458752 65536 65536 NT_STATUS_OK
WriteX 9291 524288 65536 65536 NT_STATUS_OK
WriteX 9291 589824 57598 57598 NT_STATUS_OK
Close 9291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9293 NT_STATUS_OK
WriteX 9293 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9293 258 NT_STATUS_OK
WriteX 9293 0 12543 12543 NT_STATUS_OK
Flush 9293 NT_STATUS_OK
Close 9293 NT_STATUS_OK
Close 9277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9295 NT_STATUS_OK
Close 9295 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9297 NT_STATUS_OK
ReadX 9297 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9299 NT_STATUS_OK
QUERY_FILE_INFORMATION 9299 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9299 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9299 1005 NT_STATUS_OK
ReadX 9299 1938 24 24 NT_STATUS_OK
ReadX 9299 1920 276 276 NT_STATUS_OK
ReadX 9299 1918 14 14 NT_STATUS_OK
ReadX 9299 1918 7 7 NT_STATUS_OK
ReadX 9299 1919 12 12 NT_STATUS_OK
ReadX 9299 1919 8 8 NT_STATUS_OK
ReadX 9299 1917 15 15 NT_STATUS_OK
ReadX 9299 0 16 16 NT_STATUS_OK
ReadX 9299 16 2048 2048 NT_STATUS_OK
ReadX 9299 2064 2048 2048 NT_STATUS_OK
ReadX 9299 257 2048 2048 NT_STATUS_OK
ReadX 9299 385 2048 2048 NT_STATUS_OK
ReadX 9299 513 2048 2048 NT_STATUS_OK
ReadX 9299 641 2048 2048 NT_STATUS_OK
ReadX 9299 769 2048 2048 NT_STATUS_OK
ReadX 9299 897 2048 2048 NT_STATUS_OK
ReadX 9299 1025 2048 2048 NT_STATUS_OK
ReadX 9299 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9301 NT_STATUS_OK
Close 9301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9304 NT_STATUS_OK
WriteX 9304 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9304 258 NT_STATUS_OK
WriteX 9304 0 11588 11588 NT_STATUS_OK
Flush 9304 NT_STATUS_OK
Close 9304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9305 NT_STATUS_OK
Close 9305 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9307 NT_STATUS_OK
ReadX 9307 0 4096 4096 NT_STATUS_OK
Close 9299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9309 NT_STATUS_OK
WriteX 9309 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9309 258 NT_STATUS_OK
WriteX 9309 0 11615 11615 NT_STATUS_OK
Flush 9309 NT_STATUS_OK
Close 9309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9311 NT_STATUS_OK
Close 9311 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9313 NT_STATUS_OK
ReadX 9313 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9315 NT_STATUS_OK
Close 9315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9318 NT_STATUS_OK
WriteX 9318 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9318 258 NT_STATUS_OK
WriteX 9318 0 65536 65536 NT_STATUS_OK
WriteX 9318 65536 16050 16050 NT_STATUS_OK
Close 9318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9298 1939 64 64 NT_STATUS_OK
ReadX 9298 128 248 248 NT_STATUS_OK
ReadX 9298 128 568 568 NT_STATUS_OK
ReadX 9298 3872 1536 1536 NT_STATUS_OK
ReadX 9298 3456 2560 2560 NT_STATUS_OK
ReadX 9298 3136 512 512 NT_STATUS_OK
ReadX 9298 2880 4096 4096 NT_STATUS_OK
ReadX 9298 3264 3072 3072 NT_STATUS_OK
ReadX 9298 320 4096 4096 NT_STATUS_OK
ReadX 9298 1024 4096 4096 NT_STATUS_OK
ReadX 9298 3616 4096 4096 NT_STATUS_OK
ReadX 9298 1939 64 64 NT_STATUS_OK
ReadX 9298 128 248 248 NT_STATUS_OK
ReadX 9298 128 608 608 NT_STATUS_OK
ReadX 9298 2858 1024 1024 NT_STATUS_OK
ReadX 9298 2810 4096 4096 NT_STATUS_OK
ReadX 9298 2826 4096 4096 NT_STATUS_OK
ReadX 9298 2580 2048 2048 NT_STATUS_OK
ReadX 9298 2800 2560 2560 NT_STATUS_OK
ReadX 9298 2100 4096 4096 NT_STATUS_OK
ReadX 9298 2084 4096 4096 NT_STATUS_OK
ReadX 9298 868 4096 4096 NT_STATUS_OK
ReadX 9298 2324 4096 4096 NT_STATUS_OK
ReadX 9298 884 4096 4096 NT_STATUS_OK
ReadX 9298 2604 1024 1024 NT_STATUS_OK
ReadX 9298 580 4096 4096 NT_STATUS_OK
ReadX 9298 596 4096 4096 NT_STATUS_OK
ReadX 9298 2752 4096 4096 NT_STATUS_OK
ReadX 9298 2842 1024 1024 NT_STATUS_OK
ReadX 9298 660 4096 4096 NT_STATUS_OK
ReadX 9298 2720 4096 4096 NT_STATUS_OK
ReadX 9298 2736 4096 4096 NT_STATUS_OK
ReadX 9298 628 4096 4096 NT_STATUS_OK
ReadX 9298 2704 4096 4096 NT_STATUS_OK
ReadX 9298 1556 4096 4096 NT_STATUS_OK
ReadX 9298 576 4096 4096 NT_STATUS_OK
ReadX 9298 3168 1536 1536 NT_STATUS_OK
ReadX 9298 832 4096 4096 NT_STATUS_OK
ReadX 9298 1088 4096 4096 NT_STATUS_OK
ReadX 9298 1344 4096 4096 NT_STATUS_OK
ReadX 9298 1600 4096 4096 NT_STATUS_OK
ReadX 9298 1856 4096 4096 NT_STATUS_OK
ReadX 9298 2112 4096 4096 NT_STATUS_OK
ReadX 9298 1892 4096 4096 NT_STATUS_OK
ReadX 9298 820 4096 4096 NT_STATUS_OK
ReadX 9298 788 4096 4096 NT_STATUS_OK
ReadX 9298 1604 4096 4096 NT_STATUS_OK
ReadX 9298 3648 4096 4096 NT_STATUS_OK
ReadX 9298 2608 4096 4096 NT_STATUS_OK
ReadX 9298 548 4096 4096 NT_STATUS_OK
ReadX 9298 740 4096 4096 NT_STATUS_OK
ReadX 9298 1344 4096 4096 NT_STATUS_OK
ReadX 9298 3392 4096 4096 NT_STATUS_OK
ReadX 9298 3904 4096 4096 NT_STATUS_OK
ReadX 9298 644 4096 4096 NT_STATUS_OK
ReadX 9298 676 4096 4096 NT_STATUS_OK
ReadX 9298 2688 4096 4096 NT_STATUS_OK
ReadX 9298 320 4096 4096 NT_STATUS_OK
ReadX 9298 900 4096 4096 NT_STATUS_OK
ReadX 9298 1908 4096 4096 NT_STATUS_OK
ReadX 9298 852 4096 4096 NT_STATUS_OK
ReadX 9298 724 4096 4096 NT_STATUS_OK
ReadX 9298 2292 4096 4096 NT_STATUS_OK
ReadX 9298 612 4096 4096 NT_STATUS_OK
ReadX 9298 388 4096 4096 NT_STATUS_OK
ReadX 9298 2368 4096 4096 NT_STATUS_OK
ReadX 9298 2624 4096 4096 NT_STATUS_OK
ReadX 9298 500 4096 4096 NT_STATUS_OK
ReadX 9298 356 4096 4096 NT_STATUS_OK
ReadX 9298 1024 4096 4096 NT_STATUS_OK
ReadX 9298 576 4096 4096 NT_STATUS_OK
ReadX 9298 340 4096 4096 NT_STATUS_OK
ReadX 9298 420 4096 4096 NT_STATUS_OK
ReadX 9298 1600 4096 4096 NT_STATUS_OK
ReadX 9298 404 4096 4096 NT_STATUS_OK
ReadX 9298 1428 4096 4096 NT_STATUS_OK
ReadX 9298 2656 4096 4096 NT_STATUS_OK
ReadX 9298 2624 4096 4096 NT_STATUS_OK
ReadX 9298 452 4096 4096 NT_STATUS_OK
ReadX 9298 692 4096 4096 NT_STATUS_OK
ReadX 9298 564 4096 4096 NT_STATUS_OK
ReadX 9298 372 4096 4096 NT_STATUS_OK
ReadX 9298 468 4096 4096 NT_STATUS_OK
ReadX 9298 484 4096 4096 NT_STATUS_OK
ReadX 9298 1088 4096 4096 NT_STATUS_OK
ReadX 9298 1924 4096 4096 NT_STATUS_OK
ReadX 9298 2768 4096 4096 NT_STATUS_OK
ReadX 9298 832 4096 4096 NT_STATUS_OK
ReadX 9298 836 4096 4096 NT_STATUS_OK
ReadX 9298 1856 4096 4096 NT_STATUS_OK
ReadX 9298 2640 4096 4096 NT_STATUS_OK
ReadX 9298 436 4096 4096 NT_STATUS_OK
ReadX 9298 1828 4096 4096 NT_STATUS_OK
ReadX 9298 804 4096 4096 NT_STATUS_OK
ReadX 9298 1860 4096 4096 NT_STATUS_OK
ReadX 9298 1812 4096 4096 NT_STATUS_OK
ReadX 9298 756 4096 4096 NT_STATUS_OK
ReadX 9298 1636 4096 4096 NT_STATUS_OK
ReadX 9298 772 4096 4096 NT_STATUS_OK
ReadX 9298 2036 4096 4096 NT_STATUS_OK
ReadX 9298 1220 4096 4096 NT_STATUS_OK
ReadX 9298 1652 4096 4096 NT_STATUS_OK
ReadX 9298 2588 4096 4096 NT_STATUS_OK
ReadX 9298 916 4096 4096 NT_STATUS_OK
ReadX 9298 260 4096 4096 NT_STATUS_OK
ReadX 9298 932 4096 4096 NT_STATUS_OK
ReadX 9298 2624 4096 4096 NT_STATUS_OK
ReadX 9298 308 4096 4096 NT_STATUS_OK
ReadX 9298 292 4096 4096 NT_STATUS_OK
ReadX 9298 1140 4096 4096 NT_STATUS_OK
ReadX 9298 276 4096 4096 NT_STATUS_OK
ReadX 9298 2020 4096 4096 NT_STATUS_OK
ReadX 9298 2880 4096 4096 NT_STATUS_OK
ReadX 9298 516 4096 4096 NT_STATUS_OK
ReadX 9298 1844 4096 4096 NT_STATUS_OK
ReadX 9298 1124 4096 4096 NT_STATUS_OK
ReadX 9298 3136 4096 4096 NT_STATUS_OK
ReadX 9298 324 4096 4096 NT_STATUS_OK
ReadX 9298 1156 4096 4096 NT_STATUS_OK
ReadX 9298 1172 4096 4096 NT_STATUS_OK
ReadX 9298 2112 4096 4096 NT_STATUS_OK
ReadX 9298 2368 4096 4096 NT_STATUS_OK
ReadX 9298 964 4096 4096 NT_STATUS_OK
ReadX 9298 980 4096 4096 NT_STATUS_OK
ReadX 9298 1012 4096 4096 NT_STATUS_OK
ReadX 9298 532 4096 4096 NT_STATUS_OK
ReadX 9298 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9298 1620 4096 4096 NT_STATUS_OK
ReadX 9298 1604 4096 4096 NT_STATUS_OK
ReadX 9298 2116 4096 4096 NT_STATUS_OK
ReadX 9298 2132 4096 4096 NT_STATUS_OK
ReadX 9298 2148 4096 4096 NT_STATUS_OK
ReadX 9298 2276 4096 4096 NT_STATUS_OK
ReadX 9298 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9320 NT_STATUS_OK
Close 9320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9323 NT_STATUS_OK
QUERY_FILE_INFORMATION 9278 1004 NT_STATUS_OK
Close 9278 NT_STATUS_OK
WriteX 9323 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9323 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9280 1004 NT_STATUS_OK
Close 9280 NT_STATUS_OK
WriteX 9323 0 65536 65536 NT_STATUS_OK
WriteX 9323 65536 64850 64850 NT_STATUS_OK
Close 9323 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9325 NT_STATUS_OK
WriteX 9325 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9325 258 NT_STATUS_OK
ReadX 9298 2068 4096 4096 NT_STATUS_OK
ReadX 9298 1588 4096 4096 NT_STATUS_OK
ReadX 9298 1572 4096 4096 NT_STATUS_OK
WriteX 9325 0 18630 18630 NT_STATUS_OK
Flush 9325 NT_STATUS_OK
Close 9325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9327 NT_STATUS_OK
Close 9327 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9329 NT_STATUS_OK
ReadX 9329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9298 612 4096 4096 NT_STATUS_OK
ReadX 9298 564 4096 4096 NT_STATUS_OK
ReadX 9298 1876 4096 4096 NT_STATUS_OK
ReadX 9298 628 4096 4096 NT_STATUS_OK
ReadX 9298 740 4096 4096 NT_STATUS_OK
ReadX 9298 724 4096 4096 NT_STATUS_OK
ReadX 9298 644 4096 4096 NT_STATUS_OK
ReadX 9298 2324 4096 4096 NT_STATUS_OK
ReadX 9298 660 4096 4096 NT_STATUS_OK
ReadX 9298 852 4096 4096 NT_STATUS_OK
ReadX 9298 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9298 2368 4096 4096 NT_STATUS_OK
ReadX 9298 1024 4096 4096 NT_STATUS_OK
ReadX 9298 320 4096 4096 NT_STATUS_OK
ReadX 9298 580 4096 4096 NT_STATUS_OK
ReadX 9298 3136 512 512 NT_STATUS_OK
ReadX 9298 2880 4096 4096 NT_STATUS_OK
Close 9298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9330 NT_STATUS_OK
ReadX 9330 61440 4096 4096 NT_STATUS_OK
ReadX 9330 126976 4096 4096 NT_STATUS_OK
WriteX 9330 0 65536 65536 NT_STATUS_OK
WriteX 9330 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9331 NT_STATUS_OK
ReadX 9331 61440 4096 4096 NT_STATUS_OK
ReadX 9331 126976 4096 4096 NT_STATUS_OK
ReadX 9331 192512 4096 4096 NT_STATUS_OK
ReadX 9331 258048 4096 4096 NT_STATUS_OK
WriteX 9331 0 65536 65536 NT_STATUS_OK
WriteX 9331 65536 65536 65536 NT_STATUS_OK
WriteX 9331 131072 65536 65536 NT_STATUS_OK
WriteX 9331 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9332 NT_STATUS_OK
ReadX 9332 61440 4096 4096 NT_STATUS_OK
ReadX 9332 126976 4096 4096 NT_STATUS_OK
ReadX 9332 192512 4096 4096 NT_STATUS_OK
ReadX 9332 258048 4096 4096 NT_STATUS_OK
ReadX 9332 323584 4096 4096 NT_STATUS_OK
ReadX 9332 389120 4096 4096 NT_STATUS_OK
ReadX 9332 454656 4096 4096 NT_STATUS_OK
ReadX 9332 520192 4096 4096 NT_STATUS_OK
WriteX 9332 0 65536 65536 NT_STATUS_OK
WriteX 9332 65536 65536 65536 NT_STATUS_OK
WriteX 9332 131072 65536 65536 NT_STATUS_OK
WriteX 9332 196608 65536 65536 NT_STATUS_OK
WriteX 9332 262144 65536 65536 NT_STATUS_OK
WriteX 9332 327680 65536 65536 NT_STATUS_OK
WriteX 9332 393216 65536 65536 NT_STATUS_OK
WriteX 9332 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9333 NT_STATUS_OK
ReadX 9333 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9334 NT_STATUS_OK
Close 9334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9335 NT_STATUS_OK
WriteX 9335 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9335 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9333 0 8192 8192 NT_STATUS_OK
Flush 9333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9333 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9333 0 8192 8192 NT_STATUS_OK
Flush 9333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9333 0 8192 8192 NT_STATUS_OK
Flush 9333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9333 0 8192 8192 NT_STATUS_OK
Flush 9333 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9337 NT_STATUS_OK
Close 9337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9329 NT_STATUS_OK
Close 9297 NT_STATUS_OK
Close 9330 NT_STATUS_OK
Close 9331 NT_STATUS_OK
Close 9332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9340 NT_STATUS_OK
WriteX 9340 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9340 258 NT_STATUS_OK
WriteX 9340 0 62591 62591 NT_STATUS_OK
Close 9340 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9342 NT_STATUS_OK
Close 9342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9345 NT_STATUS_OK
WriteX 9345 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9345 258 NT_STATUS_OK
WriteX 9345 0 10845 10845 NT_STATUS_OK
Close 9345 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9347 NT_STATUS_OK
Close 9347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9350 NT_STATUS_OK
WriteX 9350 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9350 258 NT_STATUS_OK
WriteX 9350 0 30118 30118 NT_STATUS_OK
Close 9350 NT_STATUS_OK
WriteX 9333 0 4096 4096 NT_STATUS_OK
WriteX 9335 0 64 64 NT_STATUS_OK
Close 9335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9352 NT_STATUS_OK
ReadX 9352 0 61440 61440 NT_STATUS_OK
ReadX 9352 61440 4096 4096 NT_STATUS_OK
ReadX 9352 65536 61440 61440 NT_STATUS_OK
ReadX 9352 126976 4096 4096 NT_STATUS_OK
ReadX 9352 131072 61440 61440 NT_STATUS_OK
ReadX 9352 192512 4096 4096 NT_STATUS_OK
ReadX 9352 196608 61440 61440 NT_STATUS_OK
ReadX 9352 258048 4096 4096 NT_STATUS_OK
ReadX 9352 262144 61440 61440 NT_STATUS_OK
ReadX 9352 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9353 NT_STATUS_OK
ReadX 9353 0 61440 61440 NT_STATUS_OK
ReadX 9353 61440 4096 4096 NT_STATUS_OK
ReadX 9353 65536 61440 61440 NT_STATUS_OK
ReadX 9353 126976 4096 4096 NT_STATUS_OK
ReadX 9353 131072 61440 61440 NT_STATUS_OK
ReadX 9353 192512 4096 4096 NT_STATUS_OK
ReadX 9353 196608 61440 61440 NT_STATUS_OK
ReadX 9353 258048 4096 4096 NT_STATUS_OK
ReadX 9353 262144 61440 61440 NT_STATUS_OK
ReadX 9353 323584 4096 4096 NT_STATUS_OK
ReadX 9353 327680 61440 61440 NT_STATUS_OK
ReadX 9353 389120 4096 4096 NT_STATUS_OK
ReadX 9353 393216 61440 61440 NT_STATUS_OK
ReadX 9353 454656 4096 4096 NT_STATUS_OK
ReadX 9353 458752 61440 61440 NT_STATUS_OK
ReadX 9353 520192 4096 4096 NT_STATUS_OK
ReadX 9353 524288 61440 61440 NT_STATUS_OK
ReadX 9353 585728 4096 4096 NT_STATUS_OK
ReadX 9353 589824 61440 61440 NT_STATUS_OK
ReadX 9353 651264 4096 4096 NT_STATUS_OK
ReadX 9353 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9354 NT_STATUS_OK
ReadX 9354 0 61440 61440 NT_STATUS_OK
ReadX 9354 61440 4096 4096 NT_STATUS_OK
ReadX 9354 65536 61440 61440 NT_STATUS_OK
ReadX 9354 126976 4096 4096 NT_STATUS_OK
ReadX 9354 131072 61440 61440 NT_STATUS_OK
ReadX 9354 192512 4096 4096 NT_STATUS_OK
ReadX 9354 196608 61440 61440 NT_STATUS_OK
ReadX 9354 258048 4096 4096 NT_STATUS_OK
ReadX 9354 262144 61440 61440 NT_STATUS_OK
ReadX 9354 323584 4096 4096 NT_STATUS_OK
ReadX 9354 327680 61440 61440 NT_STATUS_OK
ReadX 9354 389120 4096 4096 NT_STATUS_OK
ReadX 9354 393216 61440 61440 NT_STATUS_OK
ReadX 9354 454656 4096 4096 NT_STATUS_OK
ReadX 9354 458752 61440 61440 NT_STATUS_OK
ReadX 9354 520192 4096 4096 NT_STATUS_OK
ReadX 9354 524288 61440 61440 NT_STATUS_OK
ReadX 9354 585728 4096 4096 NT_STATUS_OK
ReadX 9354 589824 61440 61440 NT_STATUS_OK
ReadX 9354 651264 4096 4096 NT_STATUS_OK
ReadX 9354 655360 61440 61440 NT_STATUS_OK
ReadX 9354 716800 4096 4096 NT_STATUS_OK
ReadX 9354 720896 61440 61440 NT_STATUS_OK
ReadX 9354 782336 4096 4096 NT_STATUS_OK
ReadX 9354 786432 61440 61440 NT_STATUS_OK
ReadX 9354 847872 4096 4096 NT_STATUS_OK
ReadX 9354 851968 61440 61440 NT_STATUS_OK
ReadX 9354 913408 4096 4096 NT_STATUS_OK
ReadX 9354 917504 61440 61440 NT_STATUS_OK
ReadX 9354 978944 4096 4096 NT_STATUS_OK
ReadX 9354 983040 61440 61440 NT_STATUS_OK
ReadX 9354 1044480 4096 4096 NT_STATUS_OK
ReadX 9354 1048576 61440 61440 NT_STATUS_OK
ReadX 9354 1110016 4096 4096 NT_STATUS_OK
ReadX 9354 1114112 61440 61440 NT_STATUS_OK
ReadX 9354 1175552 4096 4096 NT_STATUS_OK
ReadX 9354 1179648 61440 61440 NT_STATUS_OK
ReadX 9354 1241088 4096 4096 NT_STATUS_OK
ReadX 9354 1245184 61440 61440 NT_STATUS_OK
ReadX 9354 1306624 4096 4096 NT_STATUS_OK
ReadX 9354 1310720 61440 61440 NT_STATUS_OK
ReadX 9354 1372160 4096 4096 NT_STATUS_OK
ReadX 9354 1376256 61440 61440 NT_STATUS_OK
ReadX 9354 1437696 4096 4096 NT_STATUS_OK
ReadX 9354 1441792 61440 61440 NT_STATUS_OK
ReadX 9354 1503232 4096 4096 NT_STATUS_OK
ReadX 9354 1507328 61440 61440 NT_STATUS_OK
ReadX 9354 1568768 4096 4096 NT_STATUS_OK
ReadX 9354 1572864 61440 61440 NT_STATUS_OK
ReadX 9354 1634304 4096 4096 NT_STATUS_OK
ReadX 9354 1638400 61440 61440 NT_STATUS_OK
ReadX 9354 1699840 4096 4096 NT_STATUS_OK
ReadX 9354 1703936 61440 61440 NT_STATUS_OK
ReadX 9354 1765376 4096 4096 NT_STATUS_OK
ReadX 9354 1769472 61440 61440 NT_STATUS_OK
ReadX 9354 1830912 4096 4096 NT_STATUS_OK
ReadX 9354 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9355 NT_STATUS_OK
Close 9355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9352 NT_STATUS_OK
Close 9353 NT_STATUS_OK
Close 9354 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9357 NT_STATUS_OK
ReadX 9357 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9358 NT_STATUS_OK
ReadX 9358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9359 NT_STATUS_OK
ReadX 9359 0 4096 4096 NT_STATUS_OK
ReadX 9359 4096 4096 4096 NT_STATUS_OK
ReadX 9359 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9360 NT_STATUS_OK
Close 9360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9357 NT_STATUS_OK
Close 9358 NT_STATUS_OK
Close 9359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9362 NT_STATUS_OK
ReadX 9362 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9363 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9364 NT_STATUS_OK
Close 9364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9362 NT_STATUS_OK
Close 9363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9366 NT_STATUS_OK
ReadX 9366 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9367 NT_STATUS_OK
ReadX 9367 0 8192 8192 NT_STATUS_OK
ReadX 9367 8192 8192 8192 NT_STATUS_OK
ReadX 9367 16384 8192 8192 NT_STATUS_OK
ReadX 9367 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9369 NT_STATUS_OK
Close 9369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9367 NT_STATUS_OK
Close 9366 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9372 NT_STATUS_OK
WriteX 9372 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9372 258 NT_STATUS_OK
WriteX 9372 0 10438 10438 NT_STATUS_OK
Close 9372 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9373 NT_STATUS_OK
Close 9373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9375 NT_STATUS_OK
Close 9375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9376 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9377 NT_STATUS_OK
Close 9377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9378 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9380 NT_STATUS_OK
Close 9380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9381 NT_STATUS_OK
ReadX 9381 0 4096 4096 NT_STATUS_OK
ReadX 9381 4096 4096 4096 NT_STATUS_OK
ReadX 9381 8192 4096 4096 NT_STATUS_OK
ReadX 9381 12288 8192 8192 NT_STATUS_OK
ReadX 9381 20480 8192 8192 NT_STATUS_OK
ReadX 9381 28672 8192 8192 NT_STATUS_OK
ReadX 9381 36864 8192 8192 NT_STATUS_OK
ReadX 9381 45056 8192 8192 NT_STATUS_OK
ReadX 9381 53248 8192 8192 NT_STATUS_OK
ReadX 9381 61440 8192 8192 NT_STATUS_OK
ReadX 9381 69632 8192 8192 NT_STATUS_OK
ReadX 9381 77824 8192 8192 NT_STATUS_OK
ReadX 9381 86016 8192 8192 NT_STATUS_OK
ReadX 9381 94208 8192 8192 NT_STATUS_OK
ReadX 9381 102400 8192 8192 NT_STATUS_OK
ReadX 9381 110592 8192 8192 NT_STATUS_OK
ReadX 9381 118784 8192 8192 NT_STATUS_OK
ReadX 9381 126976 8192 8192 NT_STATUS_OK
ReadX 9381 135168 8192 8192 NT_STATUS_OK
ReadX 9381 143360 8192 8192 NT_STATUS_OK
ReadX 9381 151552 8192 8192 NT_STATUS_OK
ReadX 9381 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9381 NT_STATUS_OK
Close 9374 NT_STATUS_OK
Close 9376 NT_STATUS_OK
Close 9378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9383 NT_STATUS_OK
Close 9383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9386 NT_STATUS_OK
WriteX 9386 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9386 258 NT_STATUS_OK
WriteX 9386 0 28489 28489 NT_STATUS_OK
Close 9386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9387 NT_STATUS_OK
Close 9387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9389 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9390 NT_STATUS_OK
Close 9390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9389 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9392 NT_STATUS_OK
ReadX 9392 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9393 NT_STATUS_OK
ReadX 9393 0 8192 8192 NT_STATUS_OK
ReadX 9393 8192 8192 8192 NT_STATUS_OK
ReadX 9393 16384 8192 8192 NT_STATUS_OK
ReadX 9393 24576 8192 8192 NT_STATUS_OK
ReadX 9393 32768 16384 16384 NT_STATUS_OK
ReadX 9393 49152 8192 8192 NT_STATUS_OK
ReadX 9393 57344 8192 8192 NT_STATUS_OK
ReadX 9393 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9395 NT_STATUS_OK
Close 9395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9393 NT_STATUS_OK
Close 9392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9398 NT_STATUS_OK
WriteX 9398 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9398 258 NT_STATUS_OK
WriteX 9398 0 29253 29253 NT_STATUS_OK
Close 9398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9399 NT_STATUS_OK
Close 9399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9402 NT_STATUS_OK
Close 9402 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9405 NT_STATUS_OK
WriteX 9405 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9405 258 NT_STATUS_OK
WriteX 9405 0 30183 30183 NT_STATUS_OK
Close 9405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9406 NT_STATUS_OK
Close 9406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9408 NT_STATUS_OK
WriteX 9408 0 510 510 NT_STATUS_OK
WriteX 9408 510 512 512 NT_STATUS_OK
WriteX 9408 1022 510 510 NT_STATUS_OK
WriteX 9408 1532 510 510 NT_STATUS_OK
WriteX 9408 2042 168 168 NT_STATUS_OK
Close 9408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9409 NT_STATUS_OK
Close 9409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9411 NT_STATUS_OK
ReadX 9411 0 4096 4096 NT_STATUS_OK
WriteX 9411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9412 NT_STATUS_OK
ReadX 9412 61440 4096 4096 NT_STATUS_OK
ReadX 9412 126976 4096 4096 NT_STATUS_OK
WriteX 9412 0 65536 65536 NT_STATUS_OK
WriteX 9412 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9413 NT_STATUS_OK
ReadX 9413 61440 4096 4096 NT_STATUS_OK
ReadX 9413 126976 4096 4096 NT_STATUS_OK
ReadX 9413 192512 4096 4096 NT_STATUS_OK
ReadX 9413 258048 4096 4096 NT_STATUS_OK
WriteX 9413 0 65536 65536 NT_STATUS_OK
WriteX 9413 65536 65536 65536 NT_STATUS_OK
WriteX 9413 131072 65536 65536 NT_STATUS_OK
WriteX 9413 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9414 NT_STATUS_OK
ReadX 9414 61440 4096 4096 NT_STATUS_OK
ReadX 9414 126976 4096 4096 NT_STATUS_OK
ReadX 9414 192512 4096 4096 NT_STATUS_OK
ReadX 9414 258048 4096 4096 NT_STATUS_OK
ReadX 9414 323584 4096 4096 NT_STATUS_OK
ReadX 9414 389120 4096 4096 NT_STATUS_OK
ReadX 9414 454656 4096 4096 NT_STATUS_OK
ReadX 9414 520192 4096 4096 NT_STATUS_OK
WriteX 9414 0 65536 65536 NT_STATUS_OK
WriteX 9414 65536 65536 65536 NT_STATUS_OK
WriteX 9414 131072 65536 65536 NT_STATUS_OK
WriteX 9414 196608 65536 65536 NT_STATUS_OK
WriteX 9414 262144 65536 65536 NT_STATUS_OK
WriteX 9414 327680 65536 65536 NT_STATUS_OK
WriteX 9414 393216 65536 65536 NT_STATUS_OK
WriteX 9414 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9415 NT_STATUS_OK
Close 9415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9411 NT_STATUS_OK
Close 9412 NT_STATUS_OK
Close 9413 NT_STATUS_OK
Close 9414 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9417 NT_STATUS_OK
Close 9417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9421 NT_STATUS_OK
Close 9421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9424 NT_STATUS_OK
Close 9424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9426 NT_STATUS_OK
Close 9426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9430 NT_STATUS_OK
Close 9430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9433 NT_STATUS_OK
Close 9433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9435 NT_STATUS_OK
Close 9435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9439 NT_STATUS_OK
Close 9439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9444 NT_STATUS_OK
Close 9444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9449 NT_STATUS_OK
Close 9449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9454 NT_STATUS_OK
Close 9454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9459 NT_STATUS_OK
Close 9459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9464 NT_STATUS_OK
Close 9464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9469 NT_STATUS_OK
Close 9469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 9474 NT_STATUS_OK
Close 9474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 9477 NT_STATUS_OK
Close 9477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9480 NT_STATUS_OK
Close 9480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9483 NT_STATUS_OK
WriteX 9483 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9483 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 9483 0 65536 65536 NT_STATUS_OK
WriteX 9483 65536 65536 65536 NT_STATUS_OK
WriteX 9483 131072 65536 65536 NT_STATUS_OK
WriteX 9483 196608 65536 65536 NT_STATUS_OK
WriteX 9483 262144 26634 26634 NT_STATUS_OK
Close 9483 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9488 NT_STATUS_OK
Close 9488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9489 NT_STATUS_OK
Close 9489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9490 NT_STATUS_OK
ReadX 9490 0 4096 4096 NT_STATUS_OK
Close 9490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9491 NT_STATUS_OK
ReadX 9491 0 4096 4096 NT_STATUS_OK
ReadX 9491 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9492 NT_STATUS_OK
Close 9492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 9491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9496 NT_STATUS_OK
Close 9496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9499 NT_STATUS_OK
Close 9499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9501 NT_STATUS_OK
Close 9501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9505 NT_STATUS_OK
Close 9505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9508 NT_STATUS_OK
Close 9508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9510 NT_STATUS_OK
Close 9510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9514 NT_STATUS_OK
Close 9514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9519 NT_STATUS_OK
Close 9519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9524 NT_STATUS_OK
Close 9524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9529 NT_STATUS_OK
Close 9529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9534 NT_STATUS_OK
Close 9534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9539 NT_STATUS_OK
Close 9539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9543 NT_STATUS_OK
Close 9543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9548 NT_STATUS_OK
Close 9548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9553 NT_STATUS_OK
Close 9553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9556 NT_STATUS_OK
Close 9556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9558 NT_STATUS_OK
Close 9558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9568 NT_STATUS_OK
Close 9568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9570 NT_STATUS_OK
ReadX 9570 0 4096 4096 NT_STATUS_OK
Close 9570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9571 NT_STATUS_OK
ReadX 9571 0 4096 4096 NT_STATUS_OK
Close 9571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9572 NT_STATUS_OK
ReadX 9572 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9582 NT_STATUS_OK
Close 9582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9584 NT_STATUS_OK
ReadX 9584 0 4096 4096 NT_STATUS_OK
Close 9584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9585 NT_STATUS_OK
ReadX 9585 0 4096 4096 NT_STATUS_OK
Close 9585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9586 NT_STATUS_OK
ReadX 9586 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9572 NT_STATUS_OK
Close 9586 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9615 0 4096 4096 NT_STATUS_OK
Close 9615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9616 NT_STATUS_OK
ReadX 9616 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9617 NT_STATUS_OK
ReadX 9617 0 4096 4096 NT_STATUS_OK
ReadX 9617 4096 4096 4096 NT_STATUS_OK
ReadX 9617 8192 4096 4096 NT_STATUS_OK
ReadX 9617 12288 4096 4096 NT_STATUS_OK
ReadX 9617 16384 4096 4096 NT_STATUS_OK
ReadX 9617 20480 4096 4096 NT_STATUS_OK
ReadX 9617 24576 4096 4096 NT_STATUS_OK
ReadX 9617 28672 4096 4096 NT_STATUS_OK
ReadX 9617 32768 4096 4096 NT_STATUS_OK
ReadX 9617 36864 4096 4096 NT_STATUS_OK
ReadX 9617 40960 4096 4096 NT_STATUS_OK
ReadX 9617 45056 4096 4096 NT_STATUS_OK
ReadX 9617 49152 4096 4096 NT_STATUS_OK
ReadX 9617 53248 4096 4096 NT_STATUS_OK
ReadX 9617 57344 4096 4096 NT_STATUS_OK
ReadX 9617 61440 4096 4096 NT_STATUS_OK
ReadX 9617 65536 4096 4096 NT_STATUS_OK
ReadX 9617 69632 4096 4096 NT_STATUS_OK
ReadX 9617 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9617 1004 NT_STATUS_OK
WriteX 9617 0 4096 4096 NT_STATUS_OK
Close 9617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9618 NT_STATUS_OK
SET_FILE_INFORMATION 9618 1004 NT_STATUS_OK
Close 9618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9619 NT_STATUS_OK
ReadX 9619 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9620 NT_STATUS_OK
Close 9620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9623 NT_STATUS_OK
WriteX 9623 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9623 258 NT_STATUS_OK
WriteX 9623 0 65536 65536 NT_STATUS_OK
WriteX 9623 65536 19979 19979 NT_STATUS_OK
Close 9623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9624 NT_STATUS_OK
ReadX 9624 0 4096 4096 NT_STATUS_OK
WriteX 9624 0 4096 4096 NT_STATUS_OK
Flush 9624 NT_STATUS_OK
WriteX 9624 0 4096 4096 NT_STATUS_OK
Flush 9624 NT_STATUS_OK
QUERY_FILE_INFORMATION 9624 1004 NT_STATUS_OK
WriteX 9624 0 4096 4096 NT_STATUS_OK
Flush 9624 NT_STATUS_OK
WriteX 9624 0 4096 4096 NT_STATUS_OK
Flush 9624 NT_STATUS_OK
WriteX 9624 0 4096 4096 NT_STATUS_OK
Flush 9624 NT_STATUS_OK
SET_FILE_INFORMATION 9624 1004 NT_STATUS_OK
WriteX 9624 0 4096 4096 NT_STATUS_OK
Flush 9624 NT_STATUS_OK
Close 9624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9625 NT_STATUS_OK
ReadX 9625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9626 NT_STATUS_OK
ReadX 9626 0 4096 4096 NT_STATUS_OK
Close 9625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9627 NT_STATUS_OK
ReadX 9627 0 4096 4096 NT_STATUS_OK
Close 9627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9628 NT_STATUS_OK
ReadX 9628 0 4096 4096 NT_STATUS_OK
Close 9628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9629 NT_STATUS_OK
ReadX 9629 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9629 1004 NT_STATUS_OK
WriteX 9629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9630 NT_STATUS_OK
Close 9630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9626 NT_STATUS_OK
Close 9629 NT_STATUS_OK
Close 9619 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9632 NT_STATUS_OK
Close 9632 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9635 NT_STATUS_OK
WriteX 9635 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9635 258 NT_STATUS_OK
WriteX 9635 0 65536 65536 NT_STATUS_OK
WriteX 9635 65536 17654 17654 NT_STATUS_OK
Close 9635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9636 NT_STATUS_OK
ReadX 9636 0 4096 4096 NT_STATUS_OK
WriteX 9636 0 4096 4096 NT_STATUS_OK
Flush 9636 NT_STATUS_OK
WriteX 9636 0 4096 4096 NT_STATUS_OK
Flush 9636 NT_STATUS_OK
QUERY_FILE_INFORMATION 9636 1004 NT_STATUS_OK
WriteX 9636 0 4096 4096 NT_STATUS_OK
Flush 9636 NT_STATUS_OK
WriteX 9636 0 4096 4096 NT_STATUS_OK
Flush 9636 NT_STATUS_OK
WriteX 9636 0 4096 4096 NT_STATUS_OK
Flush 9636 NT_STATUS_OK
SET_FILE_INFORMATION 9636 1004 NT_STATUS_OK
WriteX 9636 0 4096 4096 NT_STATUS_OK
Flush 9636 NT_STATUS_OK
Close 9636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9637 NT_STATUS_OK
SET_FILE_INFORMATION 9637 1004 NT_STATUS_OK
Close 9637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9638 NT_STATUS_OK
ReadX 9638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9639 NT_STATUS_OK
Close 9639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9641 NT_STATUS_OK
ReadX 9641 0 4096 4096 NT_STATUS_OK
ReadX 9641 4096 4096 4096 NT_STATUS_OK
ReadX 9641 8192 4096 4096 NT_STATUS_OK
ReadX 9641 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9641 16384 4096 4096 NT_STATUS_OK
ReadX 9641 20480 4096 4096 NT_STATUS_OK
ReadX 9641 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9642 NT_STATUS_OK
ReadX 9642 0 4096 4096 NT_STATUS_OK
Close 9642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9643 NT_STATUS_OK
ReadX 9643 0 4096 4096 NT_STATUS_OK
Close 9643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9644 NT_STATUS_OK
ReadX 9644 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9644 1004 NT_STATUS_OK
WriteX 9644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9645 NT_STATUS_OK
Close 9645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9644 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9647 NT_STATUS_OK
Close 9647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9650 NT_STATUS_OK
WriteX 9650 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9650 258 NT_STATUS_OK
WriteX 9650 0 65536 65536 NT_STATUS_OK
WriteX 9650 65536 19490 19490 NT_STATUS_OK
Close 9650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9651 NT_STATUS_OK
ReadX 9651 0 4096 4096 NT_STATUS_OK
WriteX 9651 0 4096 4096 NT_STATUS_OK
Flush 9651 NT_STATUS_OK
WriteX 9651 0 4096 4096 NT_STATUS_OK
Flush 9651 NT_STATUS_OK
QUERY_FILE_INFORMATION 9651 1004 NT_STATUS_OK
WriteX 9651 0 4096 4096 NT_STATUS_OK
Flush 9651 NT_STATUS_OK
WriteX 9651 0 4096 4096 NT_STATUS_OK
Flush 9651 NT_STATUS_OK
WriteX 9651 0 4096 4096 NT_STATUS_OK
Flush 9651 NT_STATUS_OK
SET_FILE_INFORMATION 9651 1004 NT_STATUS_OK
WriteX 9651 0 4096 4096 NT_STATUS_OK
Flush 9651 NT_STATUS_OK
Close 9651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9652 NT_STATUS_OK
SET_FILE_INFORMATION 9652 1004 NT_STATUS_OK
Close 9652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9653 NT_STATUS_OK
ReadX 9653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9654 NT_STATUS_OK
Close 9654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9656 0 4096 4096 NT_STATUS_OK
Close 9656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9657 NT_STATUS_OK
ReadX 9657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9658 NT_STATUS_OK
ReadX 9658 0 4096 4096 NT_STATUS_OK
ReadX 9658 4096 4096 4096 NT_STATUS_OK
ReadX 9658 8192 4096 4096 NT_STATUS_OK
ReadX 9658 12288 4096 4096 NT_STATUS_OK
ReadX 9658 16384 4096 4096 NT_STATUS_OK
ReadX 9658 20480 4096 4096 NT_STATUS_OK
ReadX 9658 24576 4096 4096 NT_STATUS_OK
ReadX 9658 28672 4096 4096 NT_STATUS_OK
ReadX 9658 32768 4096 4096 NT_STATUS_OK
ReadX 9658 36864 4096 4096 NT_STATUS_OK
ReadX 9658 40960 4096 4096 NT_STATUS_OK
ReadX 9658 45056 4096 4096 NT_STATUS_OK
ReadX 9658 49152 4096 4096 NT_STATUS_OK
ReadX 9658 53248 4096 4096 NT_STATUS_OK
ReadX 9658 57344 4096 4096 NT_STATUS_OK
ReadX 9658 61440 4096 4096 NT_STATUS_OK
ReadX 9658 65536 4096 4096 NT_STATUS_OK
ReadX 9658 69632 4096 4096 NT_STATUS_OK
ReadX 9658 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9658 1004 NT_STATUS_OK
WriteX 9658 0 4096 4096 NT_STATUS_OK
Close 9658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9659 NT_STATUS_OK
SET_FILE_INFORMATION 9659 1004 NT_STATUS_OK
Close 9659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9660 NT_STATUS_OK
ReadX 9660 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9661 NT_STATUS_OK
Close 9661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9664 NT_STATUS_OK
WriteX 9664 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9664 258 NT_STATUS_OK
WriteX 9664 0 65536 65536 NT_STATUS_OK
WriteX 9664 65536 8866 8866 NT_STATUS_OK
Close 9664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9665 NT_STATUS_OK
ReadX 9665 0 4096 4096 NT_STATUS_OK
WriteX 9665 0 4096 4096 NT_STATUS_OK
Flush 9665 NT_STATUS_OK
SET_FILE_INFORMATION 9665 1004 NT_STATUS_OK
WriteX 9665 0 4096 4096 NT_STATUS_OK
Flush 9665 NT_STATUS_OK
Close 9665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9666 NT_STATUS_OK
ReadX 9666 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9667 NT_STATUS_OK
ReadX 9667 0 4096 4096 NT_STATUS_OK
Close 9667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9668 NT_STATUS_OK
ReadX 9668 0 4096 4096 NT_STATUS_OK
Close 9668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9669 NT_STATUS_OK
ReadX 9669 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9669 1004 NT_STATUS_OK
WriteX 9669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9670 NT_STATUS_OK
Close 9670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9669 NT_STATUS_OK
Close 9660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9672 NT_STATUS_OK
Close 9672 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9675 NT_STATUS_OK
WriteX 9675 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9675 258 NT_STATUS_OK
WriteX 9675 0 65536 65536 NT_STATUS_OK
WriteX 9675 65536 9298 9298 NT_STATUS_OK
Close 9675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9676 NT_STATUS_OK
ReadX 9676 0 4096 4096 NT_STATUS_OK
WriteX 9676 0 4096 4096 NT_STATUS_OK
Flush 9676 NT_STATUS_OK
SET_FILE_INFORMATION 9676 1004 NT_STATUS_OK
WriteX 9676 0 4096 4096 NT_STATUS_OK
Flush 9676 NT_STATUS_OK
Close 9676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9677 NT_STATUS_OK
SET_FILE_INFORMATION 9677 1004 NT_STATUS_OK
Close 9677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9678 NT_STATUS_OK
ReadX 9678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9679 NT_STATUS_OK
Close 9679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9682 0 4096 4096 NT_STATUS_OK
Close 9682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9683 NT_STATUS_OK
ReadX 9683 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9683 4096 4096 4096 NT_STATUS_OK
ReadX 9683 8192 4096 4096 NT_STATUS_OK
ReadX 9683 12288 4096 4096 NT_STATUS_OK
ReadX 9683 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9684 NT_STATUS_OK
ReadX 9684 0 4096 4096 NT_STATUS_OK
Close 9684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9685 NT_STATUS_OK
ReadX 9685 0 4096 4096 NT_STATUS_OK
Close 9685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9686 NT_STATUS_OK
ReadX 9686 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9686 1004 NT_STATUS_OK
WriteX 9686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9687 NT_STATUS_OK
Close 9687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9683 NT_STATUS_OK
Close 9686 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9689 NT_STATUS_OK
Close 9689 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9692 NT_STATUS_OK
WriteX 9692 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9692 258 NT_STATUS_OK
WriteX 9692 0 65536 65536 NT_STATUS_OK
WriteX 9692 65536 11540 11540 NT_STATUS_OK
Close 9692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9693 NT_STATUS_OK
ReadX 9693 0 4096 4096 NT_STATUS_OK
WriteX 9693 0 4096 4096 NT_STATUS_OK
Flush 9693 NT_STATUS_OK
SET_FILE_INFORMATION 9693 1004 NT_STATUS_OK
WriteX 9693 0 4096 4096 NT_STATUS_OK
Flush 9693 NT_STATUS_OK
Close 9693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9694 NT_STATUS_OK
SET_FILE_INFORMATION 9694 1004 NT_STATUS_OK
Close 9694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9695 NT_STATUS_OK
ReadX 9695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 9696 NT_STATUS_OK
Close 9696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9698 NT_STATUS_OK
ReadX 9698 61440 4096 4096 NT_STATUS_OK
ReadX 9698 126976 4096 4096 NT_STATUS_OK
WriteX 9698 0 65536 65536 NT_STATUS_OK
WriteX 9698 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9699 NT_STATUS_OK
ReadX 9699 61440 4096 4096 NT_STATUS_OK
ReadX 9699 126976 4096 4096 NT_STATUS_OK
ReadX 9699 192512 4096 4096 NT_STATUS_OK
ReadX 9699 258048 4096 4096 NT_STATUS_OK
WriteX 9699 0 65536 65536 NT_STATUS_OK
WriteX 9699 65536 65536 65536 NT_STATUS_OK
WriteX 9699 131072 65536 65536 NT_STATUS_OK
WriteX 9699 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9700 NT_STATUS_OK
ReadX 9700 61440 4096 4096 NT_STATUS_OK
ReadX 9700 126976 4096 4096 NT_STATUS_OK
ReadX 9700 192512 4096 4096 NT_STATUS_OK
ReadX 9700 258048 4096 4096 NT_STATUS_OK
ReadX 9700 323584 4096 4096 NT_STATUS_OK
ReadX 9700 389120 4096 4096 NT_STATUS_OK
ReadX 9700 454656 4096 4096 NT_STATUS_OK
ReadX 9700 520192 4096 4096 NT_STATUS_OK
WriteX 9700 0 65536 65536 NT_STATUS_OK
WriteX 9700 65536 65536 65536 NT_STATUS_OK
WriteX 9700 131072 65536 65536 NT_STATUS_OK
WriteX 9700 196608 65536 65536 NT_STATUS_OK
WriteX 9700 262144 65536 65536 NT_STATUS_OK
WriteX 9700 327680 65536 65536 NT_STATUS_OK
WriteX 9700 393216 65536 65536 NT_STATUS_OK
WriteX 9700 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9701 NT_STATUS_OK
ReadX 9701 0 4096 4096 NT_STATUS_OK
ReadX 9701 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9702 NT_STATUS_OK
WriteX 9702 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9702 258 NT_STATUS_OK
WriteX 9702 0 53 53 NT_STATUS_OK
Close 9702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9703 NT_STATUS_OK
Close 9703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9695 NT_STATUS_OK
Close 9641 NT_STATUS_OK
Close 9698 NT_STATUS_OK
Close 9699 NT_STATUS_OK
Close 9700 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9701 8192 4096 4096 NT_STATUS_OK
ReadX 9701 12288 4096 4096 NT_STATUS_OK
WriteX 9705 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9705 258 NT_STATUS_OK
ReadX 9701 16384 4096 4096 NT_STATUS_OK
ReadX 9701 20480 4096 4096 NT_STATUS_OK
WriteX 9705 0 15360 15360 NT_STATUS_OK
Close 9705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9706 NT_STATUS_OK
ReadX 9706 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9706 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9706 1004 NT_STATUS_OK
WriteX 9706 0 4096 4096 NT_STATUS_OK
Close 9706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9707 NT_STATUS_OK
Close 9707 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9709 NT_STATUS_OK
ReadX 9709 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9710 NT_STATUS_OK
Close 9710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9709 4096 4096 4096 NT_STATUS_OK
ReadX 9709 8192 4096 4096 NT_STATUS_OK
ReadX 9709 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9712 NT_STATUS_OK
ReadX 9712 0 4096 4096 NT_STATUS_OK
ReadX 9712 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9713 NT_STATUS_OK
ReadX 9713 0 4096 4096 NT_STATUS_OK
ReadX 9713 4096 4096 4096 NT_STATUS_OK
ReadX 9713 8192 4096 4096 NT_STATUS_OK
Close 9712 NT_STATUS_OK
Close 9713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9714 NT_STATUS_OK
WriteX 9714 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9714 258 NT_STATUS_OK
WriteX 9714 0 15360 15360 NT_STATUS_OK
Close 9714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9715 NT_STATUS_OK
ReadX 9715 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9715 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9715 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9716 NT_STATUS_OK
Close 9716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9718 NT_STATUS_OK
ReadX 9718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9719 NT_STATUS_OK
SET_FILE_INFORMATION 9719 1004 NT_STATUS_OK
Close 9719 NT_STATUS_OK
WriteX 9715 0 4096 4096 NT_STATUS_OK
Close 9715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9720 NT_STATUS_OK
Close 9720 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9722 NT_STATUS_OK
ReadX 9722 0 4096 4096 NT_STATUS_OK
ReadX 9722 4096 4096 4096 NT_STATUS_OK
ReadX 9722 8192 4096 4096 NT_STATUS_OK
ReadX 9722 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9722 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9722 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9723 NT_STATUS_OK
ReadX 9723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9724 NT_STATUS_OK
WriteX 9724 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9724 258 NT_STATUS_OK
WriteX 9724 0 53 53 NT_STATUS_OK
Close 9724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9725 NT_STATUS_OK
Close 9725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9723 4096 4096 4096 NT_STATUS_OK
ReadX 9723 8192 4096 4096 NT_STATUS_OK
ReadX 9723 12288 4096 4096 NT_STATUS_OK
WriteX 9727 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9727 258 NT_STATUS_OK
WriteX 9727 0 12006 12006 NT_STATUS_OK
Close 9727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9728 NT_STATUS_OK
ReadX 9728 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9728 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9728 1004 NT_STATUS_OK
WriteX 9728 0 4096 4096 NT_STATUS_OK
Close 9728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9729 NT_STATUS_OK
Close 9729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9731 NT_STATUS_OK
ReadX 9731 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9732 NT_STATUS_OK
Close 9732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9731 4096 4096 4096 NT_STATUS_OK
ReadX 9731 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9734 NT_STATUS_OK
WriteX 9734 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9734 258 NT_STATUS_OK
WriteX 9734 0 11991 11991 NT_STATUS_OK
Close 9734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9735 NT_STATUS_OK
ReadX 9735 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9735 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9735 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9736 NT_STATUS_OK
Close 9736 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9738 NT_STATUS_OK
ReadX 9738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9739 NT_STATUS_OK
SET_FILE_INFORMATION 9739 1004 NT_STATUS_OK
Close 9739 NT_STATUS_OK
WriteX 9735 0 4096 4096 NT_STATUS_OK
Close 9735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
WriteX 9722 0 19054 19054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9740 NT_STATUS_OK
Close 9740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9742 NT_STATUS_OK
ReadX 9742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9743 NT_STATUS_OK
Close 9743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9742 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9742 1004 NT_STATUS_OK
ReadX 9742 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9742 1004 NT_STATUS_OK
WriteX 9742 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9742 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9742 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9742 1004 NT_STATUS_OK
Close 9718 NT_STATUS_OK
WriteX 9742 0 12288 12288 NT_STATUS_OK
Close 9738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9745 NT_STATUS_OK
Close 9745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9722 NT_STATUS_OK
Close 9742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9747 NT_STATUS_OK
Close 9747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9749 NT_STATUS_OK
ReadX 9749 0 61440 61440 NT_STATUS_OK
ReadX 9749 61440 4096 4096 NT_STATUS_OK
ReadX 9749 65536 61440 61440 NT_STATUS_OK
ReadX 9749 126976 4096 4096 NT_STATUS_OK
ReadX 9749 131072 61440 61440 NT_STATUS_OK
ReadX 9749 192512 4096 4096 NT_STATUS_OK
ReadX 9749 196608 61440 61440 NT_STATUS_OK
ReadX 9749 258048 4096 4096 NT_STATUS_OK
ReadX 9749 262144 61440 61440 NT_STATUS_OK
ReadX 9749 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9750 NT_STATUS_OK
ReadX 9750 0 61440 61440 NT_STATUS_OK
ReadX 9750 61440 4096 4096 NT_STATUS_OK
ReadX 9750 65536 61440 61440 NT_STATUS_OK
ReadX 9750 126976 4096 4096 NT_STATUS_OK
ReadX 9750 131072 61440 61440 NT_STATUS_OK
ReadX 9750 192512 4096 4096 NT_STATUS_OK
ReadX 9750 196608 61440 61440 NT_STATUS_OK
ReadX 9750 258048 4096 4096 NT_STATUS_OK
ReadX 9750 262144 61440 61440 NT_STATUS_OK
ReadX 9750 323584 4096 4096 NT_STATUS_OK
ReadX 9750 327680 61440 61440 NT_STATUS_OK
ReadX 9750 389120 4096 4096 NT_STATUS_OK
ReadX 9750 393216 61440 61440 NT_STATUS_OK
ReadX 9750 454656 4096 4096 NT_STATUS_OK
ReadX 9750 458752 61440 61440 NT_STATUS_OK
ReadX 9750 520192 4096 4096 NT_STATUS_OK
ReadX 9750 524288 61440 61440 NT_STATUS_OK
ReadX 9750 585728 4096 4096 NT_STATUS_OK
ReadX 9750 589824 61440 61440 NT_STATUS_OK
ReadX 9750 651264 4096 4096 NT_STATUS_OK
ReadX 9750 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9751 NT_STATUS_OK
ReadX 9751 0 61440 61440 NT_STATUS_OK
ReadX 9751 61440 4096 4096 NT_STATUS_OK
ReadX 9751 65536 61440 61440 NT_STATUS_OK
ReadX 9751 126976 4096 4096 NT_STATUS_OK
ReadX 9751 131072 61440 61440 NT_STATUS_OK
ReadX 9751 192512 4096 4096 NT_STATUS_OK
ReadX 9751 196608 61440 61440 NT_STATUS_OK
ReadX 9751 258048 4096 4096 NT_STATUS_OK
ReadX 9751 262144 61440 61440 NT_STATUS_OK
ReadX 9751 323584 4096 4096 NT_STATUS_OK
ReadX 9751 327680 61440 61440 NT_STATUS_OK
ReadX 9751 389120 4096 4096 NT_STATUS_OK
ReadX 9751 393216 61440 61440 NT_STATUS_OK
ReadX 9751 454656 4096 4096 NT_STATUS_OK
ReadX 9751 458752 61440 61440 NT_STATUS_OK
ReadX 9751 520192 4096 4096 NT_STATUS_OK
ReadX 9751 524288 61440 61440 NT_STATUS_OK
ReadX 9751 585728 4096 4096 NT_STATUS_OK
ReadX 9751 589824 61440 61440 NT_STATUS_OK
ReadX 9751 651264 4096 4096 NT_STATUS_OK
ReadX 9751 655360 61440 61440 NT_STATUS_OK
ReadX 9751 716800 4096 4096 NT_STATUS_OK
ReadX 9751 720896 61440 61440 NT_STATUS_OK
ReadX 9751 782336 4096 4096 NT_STATUS_OK
ReadX 9751 786432 61440 61440 NT_STATUS_OK
ReadX 9751 847872 4096 4096 NT_STATUS_OK
ReadX 9751 851968 61440 61440 NT_STATUS_OK
ReadX 9751 913408 4096 4096 NT_STATUS_OK
ReadX 9751 917504 61440 61440 NT_STATUS_OK
ReadX 9751 978944 4096 4096 NT_STATUS_OK
ReadX 9751 983040 61440 61440 NT_STATUS_OK
ReadX 9751 1044480 4096 4096 NT_STATUS_OK
ReadX 9751 1048576 61440 61440 NT_STATUS_OK
ReadX 9751 1110016 4096 4096 NT_STATUS_OK
ReadX 9751 1114112 61440 61440 NT_STATUS_OK
ReadX 9751 1175552 4096 4096 NT_STATUS_OK
ReadX 9751 1179648 61440 61440 NT_STATUS_OK
ReadX 9751 1241088 4096 4096 NT_STATUS_OK
ReadX 9751 1245184 61440 61440 NT_STATUS_OK
ReadX 9751 1306624 4096 4096 NT_STATUS_OK
ReadX 9751 1310720 61440 61440 NT_STATUS_OK
ReadX 9751 1372160 4096 4096 NT_STATUS_OK
ReadX 9751 1376256 61440 61440 NT_STATUS_OK
ReadX 9751 1437696 4096 4096 NT_STATUS_OK
ReadX 9751 1441792 61440 61440 NT_STATUS_OK
ReadX 9751 1503232 4096 4096 NT_STATUS_OK
ReadX 9751 1507328 61440 61440 NT_STATUS_OK
ReadX 9751 1568768 4096 4096 NT_STATUS_OK
ReadX 9751 1572864 61440 61440 NT_STATUS_OK
ReadX 9751 1634304 4096 4096 NT_STATUS_OK
ReadX 9751 1638400 61440 61440 NT_STATUS_OK
ReadX 9751 1699840 4096 4096 NT_STATUS_OK
ReadX 9751 1703936 61440 61440 NT_STATUS_OK
ReadX 9751 1765376 4096 4096 NT_STATUS_OK
ReadX 9751 1769472 61440 61440 NT_STATUS_OK
ReadX 9751 1830912 4096 4096 NT_STATUS_OK
ReadX 9751 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9754 NT_STATUS_OK
ReadX 9754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9755 NT_STATUS_OK
ReadX 9755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9756 NT_STATUS_OK
ReadX 9756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9758 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 1004 NT_STATUS_OK
WriteX 9758 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9759 NT_STATUS_OK
Close 9759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9760 NT_STATUS_OK
WriteX 9760 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9760 258 NT_STATUS_OK
WriteX 9760 0 491 491 NT_STATUS_OK
Close 9760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9761 NT_STATUS_OK
ReadX 9761 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9758 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9763 NT_STATUS_OK
Close 9763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9764 NT_STATUS_OK
WriteX 9764 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9764 258 NT_STATUS_OK
WriteX 9764 0 543 543 NT_STATUS_OK
Close 9764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9765 NT_STATUS_OK
ReadX 9765 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9749 NT_STATUS_OK
Close 9750 NT_STATUS_OK
Close 9751 NT_STATUS_OK
Close 9765 NT_STATUS_OK
Close 9753 NT_STATUS_OK
Close 9754 NT_STATUS_OK
Close 9755 NT_STATUS_OK
Close 9756 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9769 NT_STATUS_OK
ReadX 9769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9770 NT_STATUS_OK
ReadX 9770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9771 NT_STATUS_OK
ReadX 9771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9772 NT_STATUS_OK
ReadX 9772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9773 NT_STATUS_OK
ReadX 9773 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9778 NT_STATUS_OK
QUERY_FILE_INFORMATION 9778 1004 NT_STATUS_OK
WriteX 9778 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9778 258 NT_STATUS_OK
WriteX 9778 0 2048 2048 NT_STATUS_OK
Close 9778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9779 NT_STATUS_OK
ReadX 9779 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9779 0 4096 4096 NT_STATUS_OK
Flush 9779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9779 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9784 NT_STATUS_OK
WriteX 9784 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9784 258 NT_STATUS_OK
WriteX 9784 0 2048 2048 NT_STATUS_OK
Close 9784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9785 NT_STATUS_OK
ReadX 9785 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9789 NT_STATUS_OK
Close 9789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9790 NT_STATUS_OK
WriteX 9790 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9790 258 NT_STATUS_OK
WriteX 9790 0 2048 2048 NT_STATUS_OK
Close 9790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9791 NT_STATUS_OK
ReadX 9791 0 2048 2048 NT_STATUS_OK
ReadX 9769 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
WriteX 9769 0 8192 8192 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
WriteX 9771 0 4096 4096 NT_STATUS_OK
ReadX 9785 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9794 NT_STATUS_OK
ReadX 9794 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9795 NT_STATUS_OK
QUERY_FILE_INFORMATION 9795 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9794 NT_STATUS_OK
Close 9770 NT_STATUS_OK
Close 9771 NT_STATUS_OK
Close 9772 NT_STATUS_OK
Close 9785 NT_STATUS_OK
Close 9769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9797 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9798 NT_STATUS_OK
ReadX 9798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9799 NT_STATUS_OK
ReadX 9799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9800 NT_STATUS_OK
ReadX 9800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9801 NT_STATUS_OK
ReadX 9801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9802 NT_STATUS_OK
ReadX 9802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9803 NT_STATUS_OK
ReadX 9803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9805 NT_STATUS_OK
ReadX 9805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9806 NT_STATUS_OK
ReadX 9806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9807 NT_STATUS_OK
ReadX 9807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9808 NT_STATUS_OK
ReadX 9808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9809 NT_STATUS_OK
ReadX 9809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9810 NT_STATUS_OK
ReadX 9810 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9814 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9815 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 258 NT_STATUS_OK
WriteX 9815 0 2048 2048 NT_STATUS_OK
Close 9815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9816 NT_STATUS_OK
ReadX 9816 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9818 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9823 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 1004 NT_STATUS_OK
WriteX 9823 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 258 NT_STATUS_OK
WriteX 9823 0 2048 2048 NT_STATUS_OK
Close 9823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9824 NT_STATUS_OK
ReadX 9824 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9816 0 4096 4096 NT_STATUS_OK
Flush 9816 NT_STATUS_OK
WriteX 9824 0 4096 4096 NT_STATUS_OK
Flush 9824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9816 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9824 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9818 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9826 NT_STATUS_OK
WriteX 9826 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9826 258 NT_STATUS_OK
WriteX 9826 0 4096 4096 NT_STATUS_OK
Close 9826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9827 NT_STATUS_OK
ReadX 9827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9828 NT_STATUS_OK
Close 9828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9829 NT_STATUS_OK
WriteX 9829 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9829 258 NT_STATUS_OK
WriteX 9829 0 4096 4096 NT_STATUS_OK
Close 9829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9830 NT_STATUS_OK
ReadX 9830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9830 0 4096 4096 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9810 NT_STATUS_OK
Close 9804 NT_STATUS_OK
Close 9818 NT_STATUS_OK
Close 9807 NT_STATUS_OK
Close 9808 NT_STATUS_OK
Close 9809 NT_STATUS_OK
Close 9805 NT_STATUS_OK
Close 9798 NT_STATUS_OK
Close 9799 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Close 9803 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9801 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9835 NT_STATUS_OK
ReadX 9835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9836 NT_STATUS_OK
Close 9836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9837 NT_STATUS_OK
WriteX 9837 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 258 NT_STATUS_OK
WriteX 9837 0 2048 2048 NT_STATUS_OK
Close 9837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9838 NT_STATUS_OK
ReadX 9838 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9841 NT_STATUS_OK
ReadX 9841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9842 NT_STATUS_OK
ReadX 9842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9843 NT_STATUS_OK
ReadX 9843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9844 NT_STATUS_OK
ReadX 9844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9846 NT_STATUS_OK
ReadX 9846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9847 NT_STATUS_OK
ReadX 9847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9848 NT_STATUS_OK
ReadX 9848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9849 NT_STATUS_OK
ReadX 9849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9851 NT_STATUS_OK
ReadX 9851 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9852 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9835 NT_STATUS_OK
Close 9838 NT_STATUS_OK
Close 9850 NT_STATUS_OK
Close 9845 NT_STATUS_OK
Close 9846 NT_STATUS_OK
Close 9847 NT_STATUS_OK
Close 9848 NT_STATUS_OK
Close 9849 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9840 NT_STATUS_OK
Close 9843 NT_STATUS_OK
Close 9844 NT_STATUS_OK
Close 9841 NT_STATUS_OK
Close 9842 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9854 NT_STATUS_OK
QUERY_FILE_INFORMATION 9854 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9857 NT_STATUS_OK
ReadX 9857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9858 NT_STATUS_OK
ReadX 9858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9860 NT_STATUS_OK
ReadX 9860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9861 NT_STATUS_OK
ReadX 9861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9862 NT_STATUS_OK
ReadX 9862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9863 NT_STATUS_OK
ReadX 9863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9864 NT_STATUS_OK
ReadX 9864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9869 NT_STATUS_OK
ReadX 9869 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9873 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9874 NT_STATUS_OK
QUERY_FILE_INFORMATION 9874 1004 NT_STATUS_OK
WriteX 9874 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9874 258 NT_STATUS_OK
WriteX 9874 0 2048 2048 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9875 NT_STATUS_OK
ReadX 9875 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9879 NT_STATUS_OK
ReadX 9879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9881 NT_STATUS_OK
ReadX 9881 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 9885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9886 NT_STATUS_OK
QUERY_FILE_INFORMATION 9886 1004 NT_STATUS_OK
WriteX 9886 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9886 258 NT_STATUS_OK
WriteX 9886 0 2048 2048 NT_STATUS_OK
Close 9886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9894 NT_STATUS_OK
QUERY_FILE_INFORMATION 9894 1004 NT_STATUS_OK
WriteX 9894 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9894 258 NT_STATUS_OK
WriteX 9894 0 2048 2048 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9875 0 4096 4096 NT_STATUS_OK
Flush 9875 NT_STATUS_OK
WriteX 9887 0 4096 4096 NT_STATUS_OK
Flush 9887 NT_STATUS_OK
WriteX 9895 0 4096 4096 NT_STATUS_OK
Flush 9895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9875 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 9887 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9895 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9877 4096 16384 16384 NT_STATUS_OK
ReadX 9857 4096 16384 16384 NT_STATUS_OK
ReadX 9889 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9897 NT_STATUS_OK
ReadX 9897 0 2048 2048 NT_STATUS_OK
WriteX 9897 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9898 NT_STATUS_OK
QUERY_FILE_INFORMATION 9898 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Close 9881 NT_STATUS_OK
Close 9869 NT_STATUS_OK
Close 9861 NT_STATUS_OK
Close 9877 NT_STATUS_OK
Close 9878 NT_STATUS_OK
Close 9879 NT_STATUS_OK
Close 9880 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9864 NT_STATUS_OK
Close 9865 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Close 9858 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Close 9860 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9900 NT_STATUS_OK
QUERY_FILE_INFORMATION 9900 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9902 NT_STATUS_OK
QUERY_FILE_INFORMATION 9902 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9907 NT_STATUS_OK
ReadX 9907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9909 NT_STATUS_OK
ReadX 9909 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9905 4096 16384 16384 NT_STATUS_OK
WriteX 9905 0 4096 4096 NT_STATUS_OK
WriteX 9906 0 4096 4096 NT_STATUS_OK
WriteX 9907 0 4096 4096 NT_STATUS_OK
WriteX 9908 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9911 NT_STATUS_OK
ReadX 9911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9912 NT_STATUS_OK
ReadX 9912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9913 NT_STATUS_OK
ReadX 9913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9914 NT_STATUS_OK
ReadX 9914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9917 NT_STATUS_OK
ReadX 9917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9918 NT_STATUS_OK
ReadX 9918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9919 NT_STATUS_OK
ReadX 9919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9920 NT_STATUS_OK
ReadX 9920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9922 NT_STATUS_OK
ReadX 9922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9923 NT_STATUS_OK
ReadX 9923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 8192 8192 NT_STATUS_OK
ReadX 9911 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9925 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9925 0 4096 4096 NT_STATUS_OK
ReadX 9925 4096 4096 4096 NT_STATUS_OK
ReadX 9925 8192 4096 4096 NT_STATUS_OK
WriteX 9911 0 4096 4096 NT_STATUS_OK
WriteX 9912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9926 0 4096 4096 NT_STATUS_OK
ReadX 9926 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9905 0 4096 4096 NT_STATUS_OK
WriteX 9906 0 4096 4096 NT_STATUS_OK
WriteX 9907 0 4096 4096 NT_STATUS_OK
WriteX 9908 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9930 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9931 NT_STATUS_OK
QUERY_FILE_INFORMATION 9931 1004 NT_STATUS_OK
WriteX 9931 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9931 258 NT_STATUS_OK
WriteX 9931 0 2048 2048 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9932 NT_STATUS_OK
ReadX 9932 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9934 NT_STATUS_OK
ReadX 9934 0 4096 4096 NT_STATUS_OK
ReadX 9934 4096 4096 4096 NT_STATUS_OK
WriteX 9934 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
ReadX 9936 4096 4096 4096 NT_STATUS_OK
WriteX 9936 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9937 NT_STATUS_OK
QUERY_FILE_INFORMATION 9937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Close 9909 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Close 9907 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Close 9922 NT_STATUS_OK
Close 9918 NT_STATUS_OK
Close 9919 NT_STATUS_OK
Close 9920 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Close 9923 NT_STATUS_OK
Close 9911 NT_STATUS_OK
Close 9912 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Close 9916 NT_STATUS_OK
Close 9913 NT_STATUS_OK
Close 9914 NT_STATUS_OK
Close 9936 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9939 0 4096 4096 NT_STATUS_OK
ReadX 9939 4096 4096 4096 NT_STATUS_OK
ReadX 9939 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9942 NT_STATUS_OK
ReadX 9942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9943 NT_STATUS_OK
ReadX 9943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9945 NT_STATUS_OK
ReadX 9945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9946 NT_STATUS_OK
ReadX 9946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9948 NT_STATUS_OK
ReadX 9948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9949 NT_STATUS_OK
ReadX 9949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9950 NT_STATUS_OK
ReadX 9950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9951 NT_STATUS_OK
ReadX 9951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
ReadX 9940 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9957 NT_STATUS_OK
QUERY_FILE_INFORMATION 9957 1004 NT_STATUS_OK
WriteX 9957 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9957 258 NT_STATUS_OK
WriteX 9957 0 2048 2048 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9958 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9962 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9963 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 1004 NT_STATUS_OK
WriteX 9963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 2048 2048 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9964 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9947 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9965 NT_STATUS_OK
QUERY_FILE_INFORMATION 9965 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9951 NT_STATUS_OK
Close 9946 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9941 NT_STATUS_OK
Close 9944 NT_STATUS_OK
Close 9945 NT_STATUS_OK
Close 9942 NT_STATUS_OK
Close 9943 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9948 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9967 NT_STATUS_OK
QUERY_FILE_INFORMATION 9967 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9969 NT_STATUS_OK
ReadX 9969 61440 4096 4096 NT_STATUS_OK
ReadX 9969 126976 4096 4096 NT_STATUS_OK
WriteX 9969 0 65536 65536 NT_STATUS_OK
WriteX 9969 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9970 NT_STATUS_OK
ReadX 9970 61440 4096 4096 NT_STATUS_OK
ReadX 9970 126976 4096 4096 NT_STATUS_OK
ReadX 9970 192512 4096 4096 NT_STATUS_OK
ReadX 9970 258048 4096 4096 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 65536 65536 NT_STATUS_OK
WriteX 9970 131072 65536 65536 NT_STATUS_OK
WriteX 9970 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 61440 4096 4096 NT_STATUS_OK
ReadX 9971 126976 4096 4096 NT_STATUS_OK
ReadX 9971 192512 4096 4096 NT_STATUS_OK
ReadX 9971 258048 4096 4096 NT_STATUS_OK
ReadX 9971 323584 4096 4096 NT_STATUS_OK
ReadX 9971 389120 4096 4096 NT_STATUS_OK
ReadX 9971 454656 4096 4096 NT_STATUS_OK
ReadX 9971 520192 4096 4096 NT_STATUS_OK
WriteX 9971 0 65536 65536 NT_STATUS_OK
WriteX 9971 65536 65536 65536 NT_STATUS_OK
WriteX 9971 131072 65536 65536 NT_STATUS_OK
WriteX 9971 196608 65536 65536 NT_STATUS_OK
WriteX 9971 262144 65536 65536 NT_STATUS_OK
WriteX 9971 327680 65536 65536 NT_STATUS_OK
WriteX 9971 393216 65536 65536 NT_STATUS_OK
WriteX 9971 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9972 NT_STATUS_OK
ReadX 9972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9972 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9972 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9972 8192 4096 4096 NT_STATUS_OK
ReadX 9972 12288 4096 4096 NT_STATUS_OK
ReadX 9972 16384 4096 4096 NT_STATUS_OK
ReadX 9972 20480 4096 4096 NT_STATUS_OK
ReadX 9972 24576 4096 4096 NT_STATUS_OK
ReadX 9972 28672 4096 4096 NT_STATUS_OK
ReadX 9972 32768 4096 4096 NT_STATUS_OK
ReadX 9972 36864 4096 4096 NT_STATUS_OK
ReadX 9972 40960 4096 4096 NT_STATUS_OK
ReadX 9972 45056 4096 4096 NT_STATUS_OK
ReadX 9972 49152 4096 4096 NT_STATUS_OK
ReadX 9972 53248 4096 4096 NT_STATUS_OK
ReadX 9972 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9972 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9973 NT_STATUS_OK
Close 9973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9969 NT_STATUS_OK
Close 9970 NT_STATUS_OK
Close 9971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9975 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9975 1004 NT_STATUS_OK
WriteX 9975 0 57088 57088 NT_STATUS_OK
WriteX 9975 0 4096 4096 NT_STATUS_OK
Flush 9975 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9976 NT_STATUS_OK
SET_FILE_INFORMATION 9976 1004 NT_STATUS_OK
Close 9976 NT_STATUS_OK
SET_FILE_INFORMATION 9975 1004 NT_STATUS_OK
WriteX 9975 0 4096 4096 NT_STATUS_OK
Close 9975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9977 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9979 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9980 NT_STATUS_OK
WriteX 9980 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9980 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 51456 51456 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Flush 9980 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9982 NT_STATUS_OK
Close 9982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9984 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9986 NT_STATUS_OK
Close 9986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9989 NT_STATUS_OK
WriteX 9989 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 258 NT_STATUS_OK
WriteX 9989 0 53077 53077 NT_STATUS_OK
Close 9989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9990 NT_STATUS_OK
WriteX 9990 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9990 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9990 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9990 1004 NT_STATUS_OK
WriteX 9990 0 65536 65536 NT_STATUS_OK
WriteX 9990 65536 1856 1856 NT_STATUS_OK
WriteX 9990 0 4096 4096 NT_STATUS_OK
Flush 9990 NT_STATUS_OK
SET_FILE_INFORMATION 9990 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9990 1004 NT_STATUS_OK
WriteX 9990 0 4096 4096 NT_STATUS_OK
Close 9990 NT_STATUS_OK
Close 9984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9992 NT_STATUS_OK
Close 9992 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9996 NT_STATUS_OK
Close 9996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9999 NT_STATUS_OK
WriteX 9999 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 258 NT_STATUS_OK
WriteX 9999 0 7983 7983 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10001 NT_STATUS_OK
Close 10001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10004 NT_STATUS_OK
WriteX 10004 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10004 258 NT_STATUS_OK
WriteX 10004 0 65536 65536 NT_STATUS_OK
WriteX 10004 65536 65536 65536 NT_STATUS_OK
WriteX 10004 131072 65536 65536 NT_STATUS_OK
WriteX 10004 196608 65536 65536 NT_STATUS_OK
WriteX 10004 262144 65536 65536 NT_STATUS_OK
WriteX 10004 327680 65536 65536 NT_STATUS_OK
WriteX 10004 393216 65536 65536 NT_STATUS_OK
WriteX 10004 458752 46731 46731 NT_STATUS_OK
Close 10004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10005 NT_STATUS_OK
WriteX 10005 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10005 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9994 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10005 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
WriteX 10005 0 65536 65536 NT_STATUS_OK
WriteX 10005 65536 22848 22848 NT_STATUS_OK
WriteX 10005 0 4096 4096 NT_STATUS_OK
Flush 10005 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
WriteX 10005 0 4096 4096 NT_STATUS_OK
Close 10005 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10009 NT_STATUS_OK
ReadX 10009 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10009 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10010 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10010 1004 NT_STATUS_OK
ReadX 10010 8192 4096 4096 NT_STATUS_OK
ReadX 10010 12288 4096 4096 NT_STATUS_OK
ReadX 10010 16384 4096 4096 NT_STATUS_OK
ReadX 10010 20480 4096 4096 NT_STATUS_OK
ReadX 10010 24576 4096 4096 NT_STATUS_OK
ReadX 10010 28672 4096 4096 NT_STATUS_OK
ReadX 10010 32768 4096 4096 NT_STATUS_OK
ReadX 10010 36864 4096 4096 NT_STATUS_OK
ReadX 10010 40960 4096 4096 NT_STATUS_OK
ReadX 10010 45056 4096 4096 NT_STATUS_OK
ReadX 10010 49152 4096 4096 NT_STATUS_OK
ReadX 10010 53248 4096 4096 NT_STATUS_OK
ReadX 10010 57344 4096 4096 NT_STATUS_OK
ReadX 10010 61440 4096 4096 NT_STATUS_OK
ReadX 10010 65536 4096 4096 NT_STATUS_OK
ReadX 10010 69632 4096 4096 NT_STATUS_OK
ReadX 10010 73728 4096 4096 NT_STATUS_OK
ReadX 10010 77824 4096 4096 NT_STATUS_OK
ReadX 10010 81920 4096 4096 NT_STATUS_OK
ReadX 10010 86016 4096 4096 NT_STATUS_OK
ReadX 10010 90112 4096 4096 NT_STATUS_OK
ReadX 10010 94208 4096 4096 NT_STATUS_OK
ReadX 10010 98304 4096 4096 NT_STATUS_OK
ReadX 10010 102400 4096 4096 NT_STATUS_OK
ReadX 10010 106496 4096 4096 NT_STATUS_OK
ReadX 10010 110592 4096 4096 NT_STATUS_OK
ReadX 10010 114688 4096 4096 NT_STATUS_OK
ReadX 10010 118784 4096 4096 NT_STATUS_OK
ReadX 10010 122880 4096 4096 NT_STATUS_OK
ReadX 10010 126976 4096 4096 NT_STATUS_OK
ReadX 10010 131072 4096 4096 NT_STATUS_OK
ReadX 10010 135168 4096 4096 NT_STATUS_OK
ReadX 10010 139264 4096 4096 NT_STATUS_OK
ReadX 10010 143360 4096 4096 NT_STATUS_OK
ReadX 10010 147456 4096 4096 NT_STATUS_OK
ReadX 10010 151552 4096 4096 NT_STATUS_OK
ReadX 10010 155648 4096 4096 NT_STATUS_OK
ReadX 10010 159744 4096 4096 NT_STATUS_OK
ReadX 10010 163840 4096 4096 NT_STATUS_OK
ReadX 10010 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10010 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10011 NT_STATUS_OK
Close 10011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
Close 10010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10014 NT_STATUS_OK
SET_FILE_INFORMATION 10014 1004 NT_STATUS_OK
Close 10014 NT_STATUS_OK
WriteX 10013 0 42388 42388 NT_STATUS_OK
Close 10013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10015 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
ReadX 10017 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10018 NT_STATUS_OK
WriteX 10018 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10018 258 NT_STATUS_OK
SET_FILE_INFORMATION 10018 1004 NT_STATUS_OK
WriteX 10018 0 42652 42652 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
ReadX 10022 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10027 NT_STATUS_OK
WriteX 10027 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10027 258 NT_STATUS_OK
WriteX 10027 0 65536 65536 NT_STATUS_OK
WriteX 10027 65536 49 49 NT_STATUS_OK
Close 10027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10028 NT_STATUS_OK
ReadX 10028 0 61440 61440 NT_STATUS_OK
ReadX 10028 61440 4096 4096 NT_STATUS_OK
ReadX 10028 65536 61440 61440 NT_STATUS_OK
ReadX 10028 126976 4096 4096 NT_STATUS_OK
ReadX 10028 131072 61440 61440 NT_STATUS_OK
ReadX 10028 192512 4096 4096 NT_STATUS_OK
ReadX 10028 196608 61440 61440 NT_STATUS_OK
ReadX 10028 258048 4096 4096 NT_STATUS_OK
ReadX 10028 262144 61440 61440 NT_STATUS_OK
ReadX 10028 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 61440 61440 NT_STATUS_OK
ReadX 10029 61440 4096 4096 NT_STATUS_OK
ReadX 10029 65536 61440 61440 NT_STATUS_OK
ReadX 10029 126976 4096 4096 NT_STATUS_OK
ReadX 10029 131072 61440 61440 NT_STATUS_OK
ReadX 10029 192512 4096 4096 NT_STATUS_OK
ReadX 10029 196608 61440 61440 NT_STATUS_OK
ReadX 10029 258048 4096 4096 NT_STATUS_OK
ReadX 10029 262144 61440 61440 NT_STATUS_OK
ReadX 10029 323584 4096 4096 NT_STATUS_OK
ReadX 10029 327680 61440 61440 NT_STATUS_OK
ReadX 10029 389120 4096 4096 NT_STATUS_OK
ReadX 10029 393216 61440 61440 NT_STATUS_OK
ReadX 10029 454656 4096 4096 NT_STATUS_OK
ReadX 10029 458752 61440 61440 NT_STATUS_OK
ReadX 10029 520192 4096 4096 NT_STATUS_OK
ReadX 10029 524288 61440 61440 NT_STATUS_OK
ReadX 10029 585728 4096 4096 NT_STATUS_OK
ReadX 10029 589824 61440 61440 NT_STATUS_OK
ReadX 10029 651264 4096 4096 NT_STATUS_OK
ReadX 10029 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 61440 61440 NT_STATUS_OK
ReadX 10030 61440 4096 4096 NT_STATUS_OK
ReadX 10030 65536 61440 61440 NT_STATUS_OK
ReadX 10030 126976 4096 4096 NT_STATUS_OK
ReadX 10030 131072 61440 61440 NT_STATUS_OK
ReadX 10030 192512 4096 4096 NT_STATUS_OK
ReadX 10030 196608 61440 61440 NT_STATUS_OK
ReadX 10030 258048 4096 4096 NT_STATUS_OK
ReadX 10030 262144 61440 61440 NT_STATUS_OK
ReadX 10030 323584 4096 4096 NT_STATUS_OK
ReadX 10030 327680 61440 61440 NT_STATUS_OK
ReadX 10030 389120 4096 4096 NT_STATUS_OK
ReadX 10030 393216 61440 61440 NT_STATUS_OK
ReadX 10030 454656 4096 4096 NT_STATUS_OK
ReadX 10030 458752 61440 61440 NT_STATUS_OK
ReadX 10030 520192 4096 4096 NT_STATUS_OK
ReadX 10030 524288 61440 61440 NT_STATUS_OK
ReadX 10030 585728 4096 4096 NT_STATUS_OK
ReadX 10030 589824 61440 61440 NT_STATUS_OK
ReadX 10030 651264 4096 4096 NT_STATUS_OK
ReadX 10030 655360 61440 61440 NT_STATUS_OK
ReadX 10030 716800 4096 4096 NT_STATUS_OK
ReadX 10030 720896 61440 61440 NT_STATUS_OK
ReadX 10030 782336 4096 4096 NT_STATUS_OK
ReadX 10030 786432 61440 61440 NT_STATUS_OK
ReadX 10030 847872 4096 4096 NT_STATUS_OK
ReadX 10030 851968 61440 61440 NT_STATUS_OK
ReadX 10030 913408 4096 4096 NT_STATUS_OK
ReadX 10030 917504 61440 61440 NT_STATUS_OK
ReadX 10030 978944 4096 4096 NT_STATUS_OK
ReadX 10030 983040 61440 61440 NT_STATUS_OK
ReadX 10030 1044480 4096 4096 NT_STATUS_OK
ReadX 10030 1048576 61440 61440 NT_STATUS_OK
ReadX 10030 1110016 4096 4096 NT_STATUS_OK
ReadX 10030 1114112 61440 61440 NT_STATUS_OK
ReadX 10030 1175552 4096 4096 NT_STATUS_OK
ReadX 10030 1179648 61440 61440 NT_STATUS_OK
ReadX 10030 1241088 4096 4096 NT_STATUS_OK
ReadX 10030 1245184 61440 61440 NT_STATUS_OK
ReadX 10030 1306624 4096 4096 NT_STATUS_OK
ReadX 10030 1310720 61440 61440 NT_STATUS_OK
ReadX 10030 1372160 4096 4096 NT_STATUS_OK
ReadX 10030 1376256 61440 61440 NT_STATUS_OK
ReadX 10030 1437696 4096 4096 NT_STATUS_OK
ReadX 10030 1441792 61440 61440 NT_STATUS_OK
ReadX 10030 1503232 4096 4096 NT_STATUS_OK
ReadX 10030 1507328 61440 61440 NT_STATUS_OK
ReadX 10030 1568768 4096 4096 NT_STATUS_OK
ReadX 10030 1572864 61440 61440 NT_STATUS_OK
ReadX 10030 1634304 4096 4096 NT_STATUS_OK
ReadX 10030 1638400 61440 61440 NT_STATUS_OK
ReadX 10030 1699840 4096 4096 NT_STATUS_OK
ReadX 10030 1703936 61440 61440 NT_STATUS_OK
ReadX 10030 1765376 4096 4096 NT_STATUS_OK
ReadX 10030 1769472 61440 61440 NT_STATUS_OK
ReadX 10030 1830912 4096 4096 NT_STATUS_OK
ReadX 10030 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10032 NT_STATUS_OK
QUERY_FILE_INFORMATION 10032 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10032 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10032 1005 NT_STATUS_OK
ReadX 10032 2156 24 24 NT_STATUS_OK
ReadX 10032 2139 276 276 NT_STATUS_OK
ReadX 10032 2136 14 14 NT_STATUS_OK
ReadX 10032 2136 7 7 NT_STATUS_OK
ReadX 10032 2138 12 12 NT_STATUS_OK
ReadX 10032 2137 8 8 NT_STATUS_OK
ReadX 10032 2135 15 15 NT_STATUS_OK
ReadX 10032 0 16 16 NT_STATUS_OK
ReadX 10032 16 2048 2048 NT_STATUS_OK
ReadX 10032 2064 2048 2048 NT_STATUS_OK
ReadX 10032 257 2048 2048 NT_STATUS_OK
ReadX 10032 385 2048 2048 NT_STATUS_OK
ReadX 10032 513 2048 2048 NT_STATUS_OK
ReadX 10032 641 2048 2048 NT_STATUS_OK
ReadX 10032 769 2048 2048 NT_STATUS_OK
ReadX 10032 897 2048 2048 NT_STATUS_OK
ReadX 10032 1025 2048 2048 NT_STATUS_OK
ReadX 10032 1153 2048 2048 NT_STATUS_OK
ReadX 10032 1281 2048 2048 NT_STATUS_OK
ReadX 10032 1409 2048 2048 NT_STATUS_OK
ReadX 10032 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10034 NT_STATUS_OK
Close 10034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10028 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10030 NT_STATUS_OK
Close 10022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10037 NT_STATUS_OK
WriteX 10037 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10037 258 NT_STATUS_OK
WriteX 10037 0 10575 10575 NT_STATUS_OK
Flush 10037 NT_STATUS_OK
Close 10037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10038 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
Close 10032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10042 NT_STATUS_OK
LockX 10042 2147483538 1 NT_STATUS_OK
UnlockX 10042 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10042 1005 NT_STATUS_OK
ReadX 10042 0 512 512 NT_STATUS_OK
ReadX 10042 512 512 512 NT_STATUS_OK
ReadX 10042 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10042 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10042 1004 NT_STATUS_OK
Close 10042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10043 NT_STATUS_OK
QUERY_FILE_INFORMATION 10043 1005 NT_STATUS_OK
ReadX 10043 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10044 NT_STATUS_OK
LockX 10044 2147483538 1 NT_STATUS_OK
UnlockX 10044 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10044 1005 NT_STATUS_OK
ReadX 10044 0 512 512 NT_STATUS_OK
ReadX 10044 512 512 512 NT_STATUS_OK
ReadX 10044 1024 512 512 NT_STATUS_OK
ReadX 10044 288 20 20 NT_STATUS_OK
ReadX 10044 308 2084 2084 NT_STATUS_OK
ReadX 10044 388 2084 2084 NT_STATUS_OK
ReadX 10044 388 2084 2084 NT_STATUS_OK
ReadX 10031 2157 1386 1386 NT_STATUS_OK
ReadX 10044 2472 399 399 NT_STATUS_OK
ReadX 10044 3072 1536 1536 NT_STATUS_OK
ReadX 10044 544 149 149 NT_STATUS_OK
ReadX 10044 693 485 485 NT_STATUS_OK
Close 10044 NT_STATUS_OK
ReadX 10031 2157 4096 4096 NT_STATUS_OK
ReadX 10031 6253 4096 4096 NT_STATUS_OK
ReadX 10031 10349 4096 4096 NT_STATUS_OK
ReadX 10031 14445 4096 4096 NT_STATUS_OK
ReadX 10031 18541 4096 4096 NT_STATUS_OK
ReadX 10031 22637 256 256 NT_STATUS_OK
ReadX 10031 22893 4096 4096 NT_STATUS_OK
ReadX 10031 26989 4096 4096 NT_STATUS_OK
ReadX 10031 31085 4096 4096 NT_STATUS_OK
ReadX 10031 35181 4096 4096 NT_STATUS_OK
ReadX 10031 39277 4096 4096 NT_STATUS_OK
ReadX 10031 43373 4096 4096 NT_STATUS_OK
ReadX 10031 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10031 2157 1024 1024 NT_STATUS_OK
ReadX 10031 1667 4688 4688 NT_STATUS_OK
ReadX 10031 6355 3516 3516 NT_STATUS_OK
ReadX 10031 9871 16384 16384 NT_STATUS_OK
ReadX 10031 26255 3771 3771 NT_STATUS_OK
ReadX 10031 30026 2048 2048 NT_STATUS_OK
ReadX 10031 32074 1024 1024 NT_STATUS_OK
ReadX 10031 33098 6652 6652 NT_STATUS_OK
ReadX 10031 39750 16384 16384 NT_STATUS_OK
ReadX 10031 56134 10496 10496 NT_STATUS_OK
ReadX 10031 66630 1784 1784 NT_STATUS_OK
ReadX 10031 68414 90 90 NT_STATUS_OK
ReadX 10031 68504 273 273 NT_STATUS_OK
ReadX 10031 68777 1600 1600 NT_STATUS_OK
ReadX 10031 70377 640 640 NT_STATUS_OK
ReadX 10031 71017 1280 1280 NT_STATUS_OK
ReadX 10031 72297 8464 8464 NT_STATUS_OK
ReadX 10031 80761 158 158 NT_STATUS_OK
ReadX 10031 80919 912 912 NT_STATUS_OK
ReadX 10031 81831 1980 1980 NT_STATUS_OK
ReadX 10031 83811 2256 2256 NT_STATUS_OK
ReadX 10031 86067 400 400 NT_STATUS_OK
ReadX 10031 86467 252 252 NT_STATUS_OK
ReadX 10031 86719 42 42 NT_STATUS_OK
ReadX 10031 86761 725 725 NT_STATUS_OK
ReadX 10031 2009 512 512 NT_STATUS_OK
ReadX 10031 3895 9 9 NT_STATUS_OK
ReadX 10031 3781 46 46 NT_STATUS_OK
ReadX 10031 4059 92 92 NT_STATUS_OK
ReadX 10031 3781 92 92 NT_STATUS_OK
ReadX 10031 3986 184 184 NT_STATUS_OK
ReadX 10031 3987 16384 16384 NT_STATUS_OK
ReadX 10031 3902 16384 16384 NT_STATUS_OK
ReadX 10031 3781 10240 10240 NT_STATUS_OK
ReadX 10031 3821 16384 16384 NT_STATUS_OK
ReadX 10031 3891 935 935 NT_STATUS_OK
ReadX 10031 4060 10240 10240 NT_STATUS_OK
ReadX 10031 4059 184 184 NT_STATUS_OK
ReadX 10031 256 184 184 NT_STATUS_OK
ReadX 10031 256 1026 1026 NT_STATUS_OK
ReadX 10031 3901 326 326 NT_STATUS_OK
ReadX 10031 3899 652 652 NT_STATUS_OK
ReadX 10031 256 2 2 NT_STATUS_OK
ReadX 10031 258 4948 4948 NT_STATUS_OK
Close 10031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10046 NT_STATUS_OK
Close 10046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10049 NT_STATUS_OK
WriteX 10049 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10049 258 NT_STATUS_OK
WriteX 10049 0 65536 65536 NT_STATUS_OK
WriteX 10049 65536 65536 65536 NT_STATUS_OK
WriteX 10049 131072 65536 65536 NT_STATUS_OK
WriteX 10049 196608 65536 65536 NT_STATUS_OK
WriteX 10049 262144 65536 65536 NT_STATUS_OK
WriteX 10049 327680 65536 65536 NT_STATUS_OK
WriteX 10049 393216 65536 65536 NT_STATUS_OK
WriteX 10049 458752 65536 65536 NT_STATUS_OK
WriteX 10049 524288 65536 65536 NT_STATUS_OK
WriteX 10049 589824 35257 35257 NT_STATUS_OK
Close 10049 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10051 NT_STATUS_OK
Close 10051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10054 NT_STATUS_OK
WriteX 10054 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10054 258 NT_STATUS_OK
WriteX 10054 0 65536 65536 NT_STATUS_OK
WriteX 10054 65536 65536 65536 NT_STATUS_OK
WriteX 10054 131072 65536 65536 NT_STATUS_OK
WriteX 10054 196608 65536 65536 NT_STATUS_OK
WriteX 10054 262144 65536 65536 NT_STATUS_OK
WriteX 10054 327680 65536 65536 NT_STATUS_OK
WriteX 10054 393216 65536 65536 NT_STATUS_OK
WriteX 10054 458752 65536 65536 NT_STATUS_OK
WriteX 10054 524288 65536 65536 NT_STATUS_OK
WriteX 10054 589824 57598 57598 NT_STATUS_OK
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10056 NT_STATUS_OK
WriteX 10056 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10056 258 NT_STATUS_OK
WriteX 10056 0 12543 12543 NT_STATUS_OK
Flush 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10062 NT_STATUS_OK
QUERY_FILE_INFORMATION 10062 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10062 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10062 1005 NT_STATUS_OK
ReadX 10062 1938 24 24 NT_STATUS_OK
ReadX 10062 1920 276 276 NT_STATUS_OK
ReadX 10062 1918 14 14 NT_STATUS_OK
ReadX 10062 1918 7 7 NT_STATUS_OK
ReadX 10062 1919 12 12 NT_STATUS_OK
ReadX 10062 1919 8 8 NT_STATUS_OK
ReadX 10062 1917 15 15 NT_STATUS_OK
ReadX 10062 0 16 16 NT_STATUS_OK
ReadX 10062 16 2048 2048 NT_STATUS_OK
ReadX 10062 2064 2048 2048 NT_STATUS_OK
ReadX 10062 257 2048 2048 NT_STATUS_OK
ReadX 10062 385 2048 2048 NT_STATUS_OK
ReadX 10062 513 2048 2048 NT_STATUS_OK
ReadX 10062 641 2048 2048 NT_STATUS_OK
ReadX 10062 769 2048 2048 NT_STATUS_OK
ReadX 10062 897 2048 2048 NT_STATUS_OK
ReadX 10062 1025 2048 2048 NT_STATUS_OK
ReadX 10062 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10067 NT_STATUS_OK
WriteX 10067 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10067 258 NT_STATUS_OK
WriteX 10067 0 11588 11588 NT_STATUS_OK
Flush 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10068 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10070 NT_STATUS_OK
ReadX 10070 0 4096 4096 NT_STATUS_OK
Close 10062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10072 NT_STATUS_OK
WriteX 10072 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10072 258 NT_STATUS_OK
WriteX 10072 0 11615 11615 NT_STATUS_OK
Flush 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10078 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10081 NT_STATUS_OK
WriteX 10081 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10081 258 NT_STATUS_OK
WriteX 10081 0 65536 65536 NT_STATUS_OK
WriteX 10081 65536 16050 16050 NT_STATUS_OK
Close 10081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10061 1939 64 64 NT_STATUS_OK
ReadX 10061 128 248 248 NT_STATUS_OK
ReadX 10061 128 568 568 NT_STATUS_OK
ReadX 10061 3872 1536 1536 NT_STATUS_OK
ReadX 10061 3456 2560 2560 NT_STATUS_OK
ReadX 10061 3136 512 512 NT_STATUS_OK
ReadX 10061 2880 4096 4096 NT_STATUS_OK
ReadX 10061 3264 3072 3072 NT_STATUS_OK
ReadX 10061 320 4096 4096 NT_STATUS_OK
ReadX 10061 1024 4096 4096 NT_STATUS_OK
ReadX 10061 3616 4096 4096 NT_STATUS_OK
ReadX 10061 1939 64 64 NT_STATUS_OK
ReadX 10061 128 248 248 NT_STATUS_OK
ReadX 10061 128 608 608 NT_STATUS_OK
ReadX 10061 2858 1024 1024 NT_STATUS_OK
ReadX 10061 2810 4096 4096 NT_STATUS_OK
ReadX 10061 2826 4096 4096 NT_STATUS_OK
ReadX 10061 2580 2048 2048 NT_STATUS_OK
ReadX 10061 2800 2560 2560 NT_STATUS_OK
ReadX 10061 2100 4096 4096 NT_STATUS_OK
ReadX 10061 2084 4096 4096 NT_STATUS_OK
ReadX 10061 868 4096 4096 NT_STATUS_OK
ReadX 10061 2324 4096 4096 NT_STATUS_OK
ReadX 10061 884 4096 4096 NT_STATUS_OK
ReadX 10061 2604 1024 1024 NT_STATUS_OK
ReadX 10061 580 4096 4096 NT_STATUS_OK
ReadX 10061 596 4096 4096 NT_STATUS_OK
ReadX 10061 2752 4096 4096 NT_STATUS_OK
ReadX 10061 2842 1024 1024 NT_STATUS_OK
ReadX 10061 660 4096 4096 NT_STATUS_OK
ReadX 10061 2720 4096 4096 NT_STATUS_OK
ReadX 10061 2736 4096 4096 NT_STATUS_OK
ReadX 10061 628 4096 4096 NT_STATUS_OK
ReadX 10061 2704 4096 4096 NT_STATUS_OK
ReadX 10061 1556 4096 4096 NT_STATUS_OK
ReadX 10061 576 4096 4096 NT_STATUS_OK
ReadX 10061 3168 1536 1536 NT_STATUS_OK
ReadX 10061 832 4096 4096 NT_STATUS_OK
ReadX 10061 1088 4096 4096 NT_STATUS_OK
ReadX 10061 1344 4096 4096 NT_STATUS_OK
ReadX 10061 1600 4096 4096 NT_STATUS_OK
ReadX 10061 1856 4096 4096 NT_STATUS_OK
ReadX 10061 2112 4096 4096 NT_STATUS_OK
ReadX 10061 1892 4096 4096 NT_STATUS_OK
ReadX 10061 820 4096 4096 NT_STATUS_OK
ReadX 10061 788 4096 4096 NT_STATUS_OK
ReadX 10061 1604 4096 4096 NT_STATUS_OK
ReadX 10061 3648 4096 4096 NT_STATUS_OK
ReadX 10061 2608 4096 4096 NT_STATUS_OK
ReadX 10061 548 4096 4096 NT_STATUS_OK
ReadX 10061 740 4096 4096 NT_STATUS_OK
ReadX 10061 1344 4096 4096 NT_STATUS_OK
ReadX 10061 3392 4096 4096 NT_STATUS_OK
ReadX 10061 3904 4096 4096 NT_STATUS_OK
ReadX 10061 644 4096 4096 NT_STATUS_OK
ReadX 10061 676 4096 4096 NT_STATUS_OK
ReadX 10061 2688 4096 4096 NT_STATUS_OK
ReadX 10061 320 4096 4096 NT_STATUS_OK
ReadX 10061 900 4096 4096 NT_STATUS_OK
ReadX 10061 1908 4096 4096 NT_STATUS_OK
ReadX 10061 852 4096 4096 NT_STATUS_OK
ReadX 10061 724 4096 4096 NT_STATUS_OK
ReadX 10061 2292 4096 4096 NT_STATUS_OK
ReadX 10061 612 4096 4096 NT_STATUS_OK
ReadX 10061 388 4096 4096 NT_STATUS_OK
ReadX 10061 2368 4096 4096 NT_STATUS_OK
ReadX 10061 2624 4096 4096 NT_STATUS_OK
ReadX 10061 500 4096 4096 NT_STATUS_OK
ReadX 10061 356 4096 4096 NT_STATUS_OK
ReadX 10061 1024 4096 4096 NT_STATUS_OK
ReadX 10061 576 4096 4096 NT_STATUS_OK
ReadX 10061 340 4096 4096 NT_STATUS_OK
ReadX 10061 420 4096 4096 NT_STATUS_OK
ReadX 10061 1600 4096 4096 NT_STATUS_OK
ReadX 10061 404 4096 4096 NT_STATUS_OK
ReadX 10061 1428 4096 4096 NT_STATUS_OK
ReadX 10061 2656 4096 4096 NT_STATUS_OK
ReadX 10061 2624 4096 4096 NT_STATUS_OK
ReadX 10061 452 4096 4096 NT_STATUS_OK
ReadX 10061 692 4096 4096 NT_STATUS_OK
ReadX 10061 564 4096 4096 NT_STATUS_OK
ReadX 10061 372 4096 4096 NT_STATUS_OK
ReadX 10061 468 4096 4096 NT_STATUS_OK
ReadX 10061 484 4096 4096 NT_STATUS_OK
ReadX 10061 1088 4096 4096 NT_STATUS_OK
ReadX 10061 1924 4096 4096 NT_STATUS_OK
ReadX 10061 2768 4096 4096 NT_STATUS_OK
ReadX 10061 832 4096 4096 NT_STATUS_OK
ReadX 10061 836 4096 4096 NT_STATUS_OK
ReadX 10061 1856 4096 4096 NT_STATUS_OK
ReadX 10061 2640 4096 4096 NT_STATUS_OK
ReadX 10061 436 4096 4096 NT_STATUS_OK
ReadX 10061 1828 4096 4096 NT_STATUS_OK
ReadX 10061 804 4096 4096 NT_STATUS_OK
ReadX 10061 1860 4096 4096 NT_STATUS_OK
ReadX 10061 1812 4096 4096 NT_STATUS_OK
ReadX 10061 756 4096 4096 NT_STATUS_OK
ReadX 10061 1636 4096 4096 NT_STATUS_OK
ReadX 10061 772 4096 4096 NT_STATUS_OK
ReadX 10061 2036 4096 4096 NT_STATUS_OK
ReadX 10061 1220 4096 4096 NT_STATUS_OK
ReadX 10061 1652 4096 4096 NT_STATUS_OK
ReadX 10061 2588 4096 4096 NT_STATUS_OK
ReadX 10061 916 4096 4096 NT_STATUS_OK
ReadX 10061 260 4096 4096 NT_STATUS_OK
ReadX 10061 932 4096 4096 NT_STATUS_OK
ReadX 10061 2624 4096 4096 NT_STATUS_OK
ReadX 10061 308 4096 4096 NT_STATUS_OK
ReadX 10061 292 4096 4096 NT_STATUS_OK
ReadX 10061 1140 4096 4096 NT_STATUS_OK
ReadX 10061 276 4096 4096 NT_STATUS_OK
ReadX 10061 2020 4096 4096 NT_STATUS_OK
ReadX 10061 2880 4096 4096 NT_STATUS_OK
ReadX 10061 516 4096 4096 NT_STATUS_OK
ReadX 10061 1844 4096 4096 NT_STATUS_OK
ReadX 10061 1124 4096 4096 NT_STATUS_OK
ReadX 10061 3136 4096 4096 NT_STATUS_OK
ReadX 10061 324 4096 4096 NT_STATUS_OK
ReadX 10061 1156 4096 4096 NT_STATUS_OK
ReadX 10061 1172 4096 4096 NT_STATUS_OK
ReadX 10061 2112 4096 4096 NT_STATUS_OK
ReadX 10061 2368 4096 4096 NT_STATUS_OK
ReadX 10061 964 4096 4096 NT_STATUS_OK
ReadX 10061 980 4096 4096 NT_STATUS_OK
ReadX 10061 1012 4096 4096 NT_STATUS_OK
ReadX 10061 532 4096 4096 NT_STATUS_OK
ReadX 10061 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10061 1620 4096 4096 NT_STATUS_OK
ReadX 10061 1604 4096 4096 NT_STATUS_OK
ReadX 10061 2116 4096 4096 NT_STATUS_OK
ReadX 10061 2132 4096 4096 NT_STATUS_OK
ReadX 10061 2148 4096 4096 NT_STATUS_OK
ReadX 10061 2276 4096 4096 NT_STATUS_OK
ReadX 10061 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10086 NT_STATUS_OK
QUERY_FILE_INFORMATION 10041 1004 NT_STATUS_OK
Close 10041 NT_STATUS_OK
WriteX 10086 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10086 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10043 1004 NT_STATUS_OK
Close 10043 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 64850 64850 NT_STATUS_OK
Close 10086 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10088 NT_STATUS_OK
WriteX 10088 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10088 258 NT_STATUS_OK
ReadX 10061 2068 4096 4096 NT_STATUS_OK
ReadX 10061 1588 4096 4096 NT_STATUS_OK
ReadX 10061 1572 4096 4096 NT_STATUS_OK
WriteX 10088 0 18630 18630 NT_STATUS_OK
Flush 10088 NT_STATUS_OK
Close 10088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10061 612 4096 4096 NT_STATUS_OK
ReadX 10061 564 4096 4096 NT_STATUS_OK
ReadX 10061 1876 4096 4096 NT_STATUS_OK
ReadX 10061 628 4096 4096 NT_STATUS_OK
ReadX 10061 740 4096 4096 NT_STATUS_OK
ReadX 10061 724 4096 4096 NT_STATUS_OK
ReadX 10061 644 4096 4096 NT_STATUS_OK
ReadX 10061 2324 4096 4096 NT_STATUS_OK
ReadX 10061 660 4096 4096 NT_STATUS_OK
ReadX 10061 852 4096 4096 NT_STATUS_OK
ReadX 10061 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10061 2368 4096 4096 NT_STATUS_OK
ReadX 10061 1024 4096 4096 NT_STATUS_OK
ReadX 10061 320 4096 4096 NT_STATUS_OK
ReadX 10061 580 4096 4096 NT_STATUS_OK
ReadX 10061 3136 512 512 NT_STATUS_OK
ReadX 10061 2880 4096 4096 NT_STATUS_OK
Close 10061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10093 NT_STATUS_OK
ReadX 10093 61440 4096 4096 NT_STATUS_OK
ReadX 10093 126976 4096 4096 NT_STATUS_OK
WriteX 10093 0 65536 65536 NT_STATUS_OK
WriteX 10093 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 61440 4096 4096 NT_STATUS_OK
ReadX 10094 126976 4096 4096 NT_STATUS_OK
ReadX 10094 192512 4096 4096 NT_STATUS_OK
ReadX 10094 258048 4096 4096 NT_STATUS_OK
WriteX 10094 0 65536 65536 NT_STATUS_OK
WriteX 10094 65536 65536 65536 NT_STATUS_OK
WriteX 10094 131072 65536 65536 NT_STATUS_OK
WriteX 10094 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10095 NT_STATUS_OK
ReadX 10095 61440 4096 4096 NT_STATUS_OK
ReadX 10095 126976 4096 4096 NT_STATUS_OK
ReadX 10095 192512 4096 4096 NT_STATUS_OK
ReadX 10095 258048 4096 4096 NT_STATUS_OK
ReadX 10095 323584 4096 4096 NT_STATUS_OK
ReadX 10095 389120 4096 4096 NT_STATUS_OK
ReadX 10095 454656 4096 4096 NT_STATUS_OK
ReadX 10095 520192 4096 4096 NT_STATUS_OK
WriteX 10095 0 65536 65536 NT_STATUS_OK
WriteX 10095 65536 65536 65536 NT_STATUS_OK
WriteX 10095 131072 65536 65536 NT_STATUS_OK
WriteX 10095 196608 65536 65536 NT_STATUS_OK
WriteX 10095 262144 65536 65536 NT_STATUS_OK
WriteX 10095 327680 65536 65536 NT_STATUS_OK
WriteX 10095 393216 65536 65536 NT_STATUS_OK
WriteX 10095 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10098 NT_STATUS_OK
WriteX 10098 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10096 0 8192 8192 NT_STATUS_OK
Flush 10096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10096 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10096 0 8192 8192 NT_STATUS_OK
Flush 10096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10096 0 8192 8192 NT_STATUS_OK
Flush 10096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10096 0 8192 8192 NT_STATUS_OK
Flush 10096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10103 NT_STATUS_OK
WriteX 10103 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10103 258 NT_STATUS_OK
WriteX 10103 0 62591 62591 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10105 NT_STATUS_OK
Close 10105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10108 NT_STATUS_OK
WriteX 10108 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10108 258 NT_STATUS_OK
WriteX 10108 0 10845 10845 NT_STATUS_OK
Close 10108 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10110 NT_STATUS_OK
Close 10110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10113 NT_STATUS_OK
WriteX 10113 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10113 258 NT_STATUS_OK
WriteX 10113 0 30118 30118 NT_STATUS_OK
Close 10113 NT_STATUS_OK
WriteX 10096 0 4096 4096 NT_STATUS_OK
WriteX 10098 0 64 64 NT_STATUS_OK
Close 10098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10115 NT_STATUS_OK
ReadX 10115 0 61440 61440 NT_STATUS_OK
ReadX 10115 61440 4096 4096 NT_STATUS_OK
ReadX 10115 65536 61440 61440 NT_STATUS_OK
ReadX 10115 126976 4096 4096 NT_STATUS_OK
ReadX 10115 131072 61440 61440 NT_STATUS_OK
ReadX 10115 192512 4096 4096 NT_STATUS_OK
ReadX 10115 196608 61440 61440 NT_STATUS_OK
ReadX 10115 258048 4096 4096 NT_STATUS_OK
ReadX 10115 262144 61440 61440 NT_STATUS_OK
ReadX 10115 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 61440 61440 NT_STATUS_OK
ReadX 10116 61440 4096 4096 NT_STATUS_OK
ReadX 10116 65536 61440 61440 NT_STATUS_OK
ReadX 10116 126976 4096 4096 NT_STATUS_OK
ReadX 10116 131072 61440 61440 NT_STATUS_OK
ReadX 10116 192512 4096 4096 NT_STATUS_OK
ReadX 10116 196608 61440 61440 NT_STATUS_OK
ReadX 10116 258048 4096 4096 NT_STATUS_OK
ReadX 10116 262144 61440 61440 NT_STATUS_OK
ReadX 10116 323584 4096 4096 NT_STATUS_OK
ReadX 10116 327680 61440 61440 NT_STATUS_OK
ReadX 10116 389120 4096 4096 NT_STATUS_OK
ReadX 10116 393216 61440 61440 NT_STATUS_OK
ReadX 10116 454656 4096 4096 NT_STATUS_OK
ReadX 10116 458752 61440 61440 NT_STATUS_OK
ReadX 10116 520192 4096 4096 NT_STATUS_OK
ReadX 10116 524288 61440 61440 NT_STATUS_OK
ReadX 10116 585728 4096 4096 NT_STATUS_OK
ReadX 10116 589824 61440 61440 NT_STATUS_OK
ReadX 10116 651264 4096 4096 NT_STATUS_OK
ReadX 10116 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 61440 61440 NT_STATUS_OK
ReadX 10117 61440 4096 4096 NT_STATUS_OK
ReadX 10117 65536 61440 61440 NT_STATUS_OK
ReadX 10117 126976 4096 4096 NT_STATUS_OK
ReadX 10117 131072 61440 61440 NT_STATUS_OK
ReadX 10117 192512 4096 4096 NT_STATUS_OK
ReadX 10117 196608 61440 61440 NT_STATUS_OK
ReadX 10117 258048 4096 4096 NT_STATUS_OK
ReadX 10117 262144 61440 61440 NT_STATUS_OK
ReadX 10117 323584 4096 4096 NT_STATUS_OK
ReadX 10117 327680 61440 61440 NT_STATUS_OK
ReadX 10117 389120 4096 4096 NT_STATUS_OK
ReadX 10117 393216 61440 61440 NT_STATUS_OK
ReadX 10117 454656 4096 4096 NT_STATUS_OK
ReadX 10117 458752 61440 61440 NT_STATUS_OK
ReadX 10117 520192 4096 4096 NT_STATUS_OK
ReadX 10117 524288 61440 61440 NT_STATUS_OK
ReadX 10117 585728 4096 4096 NT_STATUS_OK
ReadX 10117 589824 61440 61440 NT_STATUS_OK
ReadX 10117 651264 4096 4096 NT_STATUS_OK
ReadX 10117 655360 61440 61440 NT_STATUS_OK
ReadX 10117 716800 4096 4096 NT_STATUS_OK
ReadX 10117 720896 61440 61440 NT_STATUS_OK
ReadX 10117 782336 4096 4096 NT_STATUS_OK
ReadX 10117 786432 61440 61440 NT_STATUS_OK
ReadX 10117 847872 4096 4096 NT_STATUS_OK
ReadX 10117 851968 61440 61440 NT_STATUS_OK
ReadX 10117 913408 4096 4096 NT_STATUS_OK
ReadX 10117 917504 61440 61440 NT_STATUS_OK
ReadX 10117 978944 4096 4096 NT_STATUS_OK
ReadX 10117 983040 61440 61440 NT_STATUS_OK
ReadX 10117 1044480 4096 4096 NT_STATUS_OK
ReadX 10117 1048576 61440 61440 NT_STATUS_OK
ReadX 10117 1110016 4096 4096 NT_STATUS_OK
ReadX 10117 1114112 61440 61440 NT_STATUS_OK
ReadX 10117 1175552 4096 4096 NT_STATUS_OK
ReadX 10117 1179648 61440 61440 NT_STATUS_OK
ReadX 10117 1241088 4096 4096 NT_STATUS_OK
ReadX 10117 1245184 61440 61440 NT_STATUS_OK
ReadX 10117 1306624 4096 4096 NT_STATUS_OK
ReadX 10117 1310720 61440 61440 NT_STATUS_OK
ReadX 10117 1372160 4096 4096 NT_STATUS_OK
ReadX 10117 1376256 61440 61440 NT_STATUS_OK
ReadX 10117 1437696 4096 4096 NT_STATUS_OK
ReadX 10117 1441792 61440 61440 NT_STATUS_OK
ReadX 10117 1503232 4096 4096 NT_STATUS_OK
ReadX 10117 1507328 61440 61440 NT_STATUS_OK
ReadX 10117 1568768 4096 4096 NT_STATUS_OK
ReadX 10117 1572864 61440 61440 NT_STATUS_OK
ReadX 10117 1634304 4096 4096 NT_STATUS_OK
ReadX 10117 1638400 61440 61440 NT_STATUS_OK
ReadX 10117 1699840 4096 4096 NT_STATUS_OK
ReadX 10117 1703936 61440 61440 NT_STATUS_OK
ReadX 10117 1765376 4096 4096 NT_STATUS_OK
ReadX 10117 1769472 61440 61440 NT_STATUS_OK
ReadX 10117 1830912 4096 4096 NT_STATUS_OK
ReadX 10117 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10118 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10115 NT_STATUS_OK
Close 10116 NT_STATUS_OK
Close 10117 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10122 NT_STATUS_OK
ReadX 10122 0 4096 4096 NT_STATUS_OK
ReadX 10122 4096 4096 4096 NT_STATUS_OK
ReadX 10122 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10123 NT_STATUS_OK
Close 10123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10125 NT_STATUS_OK
ReadX 10125 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10126 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10127 NT_STATUS_OK
Close 10127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 8192 8192 NT_STATUS_OK
ReadX 10130 8192 8192 8192 NT_STATUS_OK
ReadX 10130 16384 8192 8192 NT_STATUS_OK
ReadX 10130 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10135 NT_STATUS_OK
WriteX 10135 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
WriteX 10135 0 10438 10438 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10136 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10137 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10138 NT_STATUS_OK
Close 10138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10139 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10141 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10143 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
ReadX 10144 4096 4096 4096 NT_STATUS_OK
ReadX 10144 8192 4096 4096 NT_STATUS_OK
ReadX 10144 12288 8192 8192 NT_STATUS_OK
ReadX 10144 20480 8192 8192 NT_STATUS_OK
ReadX 10144 28672 8192 8192 NT_STATUS_OK
ReadX 10144 36864 8192 8192 NT_STATUS_OK
ReadX 10144 45056 8192 8192 NT_STATUS_OK
ReadX 10144 53248 8192 8192 NT_STATUS_OK
ReadX 10144 61440 8192 8192 NT_STATUS_OK
ReadX 10144 69632 8192 8192 NT_STATUS_OK
ReadX 10144 77824 8192 8192 NT_STATUS_OK
ReadX 10144 86016 8192 8192 NT_STATUS_OK
ReadX 10144 94208 8192 8192 NT_STATUS_OK
ReadX 10144 102400 8192 8192 NT_STATUS_OK
ReadX 10144 110592 8192 8192 NT_STATUS_OK
ReadX 10144 118784 8192 8192 NT_STATUS_OK
ReadX 10144 126976 8192 8192 NT_STATUS_OK
ReadX 10144 135168 8192 8192 NT_STATUS_OK
ReadX 10144 143360 8192 8192 NT_STATUS_OK
ReadX 10144 151552 8192 8192 NT_STATUS_OK
ReadX 10144 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Close 10141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10146 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10149 NT_STATUS_OK
WriteX 10149 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 258 NT_STATUS_OK
WriteX 10149 0 28489 28489 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10150 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10152 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10152 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 8192 8192 NT_STATUS_OK
ReadX 10156 8192 8192 8192 NT_STATUS_OK
ReadX 10156 16384 8192 8192 NT_STATUS_OK
ReadX 10156 24576 8192 8192 NT_STATUS_OK
ReadX 10156 32768 16384 16384 NT_STATUS_OK
ReadX 10156 49152 8192 8192 NT_STATUS_OK
ReadX 10156 57344 8192 8192 NT_STATUS_OK
ReadX 10156 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10158 NT_STATUS_OK
Close 10158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10161 NT_STATUS_OK
WriteX 10161 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10161 258 NT_STATUS_OK
WriteX 10161 0 29253 29253 NT_STATUS_OK
Close 10161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10162 NT_STATUS_OK
Close 10162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10165 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10168 NT_STATUS_OK
WriteX 10168 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10168 258 NT_STATUS_OK
WriteX 10168 0 30183 30183 NT_STATUS_OK
Close 10168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10171 NT_STATUS_OK
WriteX 10171 0 510 510 NT_STATUS_OK
WriteX 10171 510 512 512 NT_STATUS_OK
WriteX 10171 1022 510 510 NT_STATUS_OK
WriteX 10171 1532 510 510 NT_STATUS_OK
WriteX 10171 2042 168 168 NT_STATUS_OK
Close 10171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10172 NT_STATUS_OK
Close 10172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
WriteX 10174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 61440 4096 4096 NT_STATUS_OK
ReadX 10175 126976 4096 4096 NT_STATUS_OK
WriteX 10175 0 65536 65536 NT_STATUS_OK
WriteX 10175 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 61440 4096 4096 NT_STATUS_OK
ReadX 10176 126976 4096 4096 NT_STATUS_OK
ReadX 10176 192512 4096 4096 NT_STATUS_OK
ReadX 10176 258048 4096 4096 NT_STATUS_OK
WriteX 10176 0 65536 65536 NT_STATUS_OK
WriteX 10176 65536 65536 65536 NT_STATUS_OK
WriteX 10176 131072 65536 65536 NT_STATUS_OK
WriteX 10176 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 61440 4096 4096 NT_STATUS_OK
ReadX 10177 126976 4096 4096 NT_STATUS_OK
ReadX 10177 192512 4096 4096 NT_STATUS_OK
ReadX 10177 258048 4096 4096 NT_STATUS_OK
ReadX 10177 323584 4096 4096 NT_STATUS_OK
ReadX 10177 389120 4096 4096 NT_STATUS_OK
ReadX 10177 454656 4096 4096 NT_STATUS_OK
ReadX 10177 520192 4096 4096 NT_STATUS_OK
WriteX 10177 0 65536 65536 NT_STATUS_OK
WriteX 10177 65536 65536 65536 NT_STATUS_OK
WriteX 10177 131072 65536 65536 NT_STATUS_OK
WriteX 10177 196608 65536 65536 NT_STATUS_OK
WriteX 10177 262144 65536 65536 NT_STATUS_OK
WriteX 10177 327680 65536 65536 NT_STATUS_OK
WriteX 10177 393216 65536 65536 NT_STATUS_OK
WriteX 10177 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10178 NT_STATUS_OK
Close 10178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10180 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10187 NT_STATUS_OK
Close 10187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10196 NT_STATUS_OK
Close 10196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10198 NT_STATUS_OK
Close 10198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10202 NT_STATUS_OK
Close 10202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10207 NT_STATUS_OK
Close 10207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10217 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10222 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10232 NT_STATUS_OK
Close 10232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10246 NT_STATUS_OK
WriteX 10246 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10246 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10246 0 65536 65536 NT_STATUS_OK
WriteX 10246 65536 65536 65536 NT_STATUS_OK
WriteX 10246 131072 65536 65536 NT_STATUS_OK
WriteX 10246 196608 65536 65536 NT_STATUS_OK
WriteX 10246 262144 26634 26634 NT_STATUS_OK
Close 10246 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10251 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
ReadX 10254 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10259 NT_STATUS_OK
Close 10259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10264 NT_STATUS_OK
Close 10264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10271 NT_STATUS_OK
Close 10271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10277 NT_STATUS_OK
Close 10277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10287 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10292 NT_STATUS_OK
Close 10292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10319 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10331 NT_STATUS_OK
Close 10331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
Close 10333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
Close 10334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10345 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
ReadX 10380 4096 4096 4096 NT_STATUS_OK
ReadX 10380 8192 4096 4096 NT_STATUS_OK
ReadX 10380 12288 4096 4096 NT_STATUS_OK
ReadX 10380 16384 4096 4096 NT_STATUS_OK
ReadX 10380 20480 4096 4096 NT_STATUS_OK
ReadX 10380 24576 4096 4096 NT_STATUS_OK
ReadX 10380 28672 4096 4096 NT_STATUS_OK
ReadX 10380 32768 4096 4096 NT_STATUS_OK
ReadX 10380 36864 4096 4096 NT_STATUS_OK
ReadX 10380 40960 4096 4096 NT_STATUS_OK
ReadX 10380 45056 4096 4096 NT_STATUS_OK
ReadX 10380 49152 4096 4096 NT_STATUS_OK
ReadX 10380 53248 4096 4096 NT_STATUS_OK
ReadX 10380 57344 4096 4096 NT_STATUS_OK
ReadX 10380 61440 4096 4096 NT_STATUS_OK
ReadX 10380 65536 4096 4096 NT_STATUS_OK
ReadX 10380 69632 4096 4096 NT_STATUS_OK
ReadX 10380 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10380 1004 NT_STATUS_OK
WriteX 10380 0 4096 4096 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10381 NT_STATUS_OK
SET_FILE_INFORMATION 10381 1004 NT_STATUS_OK
Close 10381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10386 NT_STATUS_OK
WriteX 10386 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10386 258 NT_STATUS_OK
WriteX 10386 0 65536 65536 NT_STATUS_OK
WriteX 10386 65536 19979 19979 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 1004 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
SET_FILE_INFORMATION 10387 1004 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
Close 10390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10391 NT_STATUS_OK
ReadX 10391 0 4096 4096 NT_STATUS_OK
Close 10391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10392 NT_STATUS_OK
ReadX 10392 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10392 1004 NT_STATUS_OK
WriteX 10392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10389 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10395 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10398 NT_STATUS_OK
WriteX 10398 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10398 258 NT_STATUS_OK
WriteX 10398 0 65536 65536 NT_STATUS_OK
WriteX 10398 65536 17654 17654 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 1004 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
SET_FILE_INFORMATION 10399 1004 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10400 NT_STATUS_OK
SET_FILE_INFORMATION 10400 1004 NT_STATUS_OK
Close 10400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10402 NT_STATUS_OK
Close 10402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
ReadX 10404 4096 4096 4096 NT_STATUS_OK
ReadX 10404 8192 4096 4096 NT_STATUS_OK
ReadX 10404 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10404 16384 4096 4096 NT_STATUS_OK
ReadX 10404 20480 4096 4096 NT_STATUS_OK
ReadX 10404 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
Close 10405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
Close 10406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10407 1004 NT_STATUS_OK
WriteX 10407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10410 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10413 NT_STATUS_OK
WriteX 10413 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10413 258 NT_STATUS_OK
WriteX 10413 0 65536 65536 NT_STATUS_OK
WriteX 10413 65536 19490 19490 NT_STATUS_OK
Close 10413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 0 4096 4096 NT_STATUS_OK
WriteX 10414 0 4096 4096 NT_STATUS_OK
Flush 10414 NT_STATUS_OK
WriteX 10414 0 4096 4096 NT_STATUS_OK
Flush 10414 NT_STATUS_OK
QUERY_FILE_INFORMATION 10414 1004 NT_STATUS_OK
WriteX 10414 0 4096 4096 NT_STATUS_OK
Flush 10414 NT_STATUS_OK
WriteX 10414 0 4096 4096 NT_STATUS_OK
Flush 10414 NT_STATUS_OK
WriteX 10414 0 4096 4096 NT_STATUS_OK
Flush 10414 NT_STATUS_OK
SET_FILE_INFORMATION 10414 1004 NT_STATUS_OK
WriteX 10414 0 4096 4096 NT_STATUS_OK
Flush 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10415 NT_STATUS_OK
SET_FILE_INFORMATION 10415 1004 NT_STATUS_OK
Close 10415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10417 NT_STATUS_OK
Close 10417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10419 0 4096 4096 NT_STATUS_OK
Close 10419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
ReadX 10421 4096 4096 4096 NT_STATUS_OK
ReadX 10421 8192 4096 4096 NT_STATUS_OK
ReadX 10421 12288 4096 4096 NT_STATUS_OK
ReadX 10421 16384 4096 4096 NT_STATUS_OK
ReadX 10421 20480 4096 4096 NT_STATUS_OK
ReadX 10421 24576 4096 4096 NT_STATUS_OK
ReadX 10421 28672 4096 4096 NT_STATUS_OK
ReadX 10421 32768 4096 4096 NT_STATUS_OK
ReadX 10421 36864 4096 4096 NT_STATUS_OK
ReadX 10421 40960 4096 4096 NT_STATUS_OK
ReadX 10421 45056 4096 4096 NT_STATUS_OK
ReadX 10421 49152 4096 4096 NT_STATUS_OK
ReadX 10421 53248 4096 4096 NT_STATUS_OK
ReadX 10421 57344 4096 4096 NT_STATUS_OK
ReadX 10421 61440 4096 4096 NT_STATUS_OK
ReadX 10421 65536 4096 4096 NT_STATUS_OK
ReadX 10421 69632 4096 4096 NT_STATUS_OK
ReadX 10421 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10421 1004 NT_STATUS_OK
WriteX 10421 0 4096 4096 NT_STATUS_OK
Close 10421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10422 NT_STATUS_OK
SET_FILE_INFORMATION 10422 1004 NT_STATUS_OK
Close 10422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10424 NT_STATUS_OK
Close 10424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10427 NT_STATUS_OK
WriteX 10427 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
WriteX 10427 0 65536 65536 NT_STATUS_OK
WriteX 10427 65536 8866 8866 NT_STATUS_OK
Close 10427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
WriteX 10428 0 4096 4096 NT_STATUS_OK
Flush 10428 NT_STATUS_OK
SET_FILE_INFORMATION 10428 1004 NT_STATUS_OK
WriteX 10428 0 4096 4096 NT_STATUS_OK
Flush 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10429 NT_STATUS_OK
ReadX 10429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10430 NT_STATUS_OK
ReadX 10430 0 4096 4096 NT_STATUS_OK
Close 10430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
Close 10431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10435 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10438 NT_STATUS_OK
WriteX 10438 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10438 258 NT_STATUS_OK
WriteX 10438 0 65536 65536 NT_STATUS_OK
WriteX 10438 65536 9298 9298 NT_STATUS_OK
Close 10438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
WriteX 10439 0 4096 4096 NT_STATUS_OK
Flush 10439 NT_STATUS_OK
SET_FILE_INFORMATION 10439 1004 NT_STATUS_OK
WriteX 10439 0 4096 4096 NT_STATUS_OK
Flush 10439 NT_STATUS_OK
Close 10439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10440 NT_STATUS_OK
SET_FILE_INFORMATION 10440 1004 NT_STATUS_OK
Close 10440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10442 NT_STATUS_OK
Close 10442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10445 0 4096 4096 NT_STATUS_OK
Close 10445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10446 4096 4096 4096 NT_STATUS_OK
ReadX 10446 8192 4096 4096 NT_STATUS_OK
ReadX 10446 12288 4096 4096 NT_STATUS_OK
ReadX 10446 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10447 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10449 1004 NT_STATUS_OK
WriteX 10449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10450 NT_STATUS_OK
Close 10450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 65536 65536 NT_STATUS_OK
WriteX 10455 65536 11540 11540 NT_STATUS_OK
Close 10455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10456 NT_STATUS_OK
ReadX 10456 0 4096 4096 NT_STATUS_OK
WriteX 10456 0 4096 4096 NT_STATUS_OK
Flush 10456 NT_STATUS_OK
SET_FILE_INFORMATION 10456 1004 NT_STATUS_OK
WriteX 10456 0 4096 4096 NT_STATUS_OK
Flush 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10457 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
Close 10457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10461 NT_STATUS_OK
ReadX 10461 61440 4096 4096 NT_STATUS_OK
ReadX 10461 126976 4096 4096 NT_STATUS_OK
WriteX 10461 0 65536 65536 NT_STATUS_OK
WriteX 10461 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 61440 4096 4096 NT_STATUS_OK
ReadX 10462 126976 4096 4096 NT_STATUS_OK
ReadX 10462 192512 4096 4096 NT_STATUS_OK
ReadX 10462 258048 4096 4096 NT_STATUS_OK
WriteX 10462 0 65536 65536 NT_STATUS_OK
WriteX 10462 65536 65536 65536 NT_STATUS_OK
WriteX 10462 131072 65536 65536 NT_STATUS_OK
WriteX 10462 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 61440 4096 4096 NT_STATUS_OK
ReadX 10463 126976 4096 4096 NT_STATUS_OK
ReadX 10463 192512 4096 4096 NT_STATUS_OK
ReadX 10463 258048 4096 4096 NT_STATUS_OK
ReadX 10463 323584 4096 4096 NT_STATUS_OK
ReadX 10463 389120 4096 4096 NT_STATUS_OK
ReadX 10463 454656 4096 4096 NT_STATUS_OK
ReadX 10463 520192 4096 4096 NT_STATUS_OK
WriteX 10463 0 65536 65536 NT_STATUS_OK
WriteX 10463 65536 65536 65536 NT_STATUS_OK
WriteX 10463 131072 65536 65536 NT_STATUS_OK
WriteX 10463 196608 65536 65536 NT_STATUS_OK
WriteX 10463 262144 65536 65536 NT_STATUS_OK
WriteX 10463 327680 65536 65536 NT_STATUS_OK
WriteX 10463 393216 65536 65536 NT_STATUS_OK
WriteX 10463 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
ReadX 10464 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10465 NT_STATUS_OK
WriteX 10465 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10465 258 NT_STATUS_OK
WriteX 10465 0 53 53 NT_STATUS_OK
Close 10465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10458 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10464 8192 4096 4096 NT_STATUS_OK
ReadX 10464 12288 4096 4096 NT_STATUS_OK
WriteX 10468 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10468 258 NT_STATUS_OK
ReadX 10464 16384 4096 4096 NT_STATUS_OK
ReadX 10464 20480 4096 4096 NT_STATUS_OK
WriteX 10468 0 15360 15360 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10469 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10469 1004 NT_STATUS_OK
WriteX 10469 0 4096 4096 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10472 4096 4096 4096 NT_STATUS_OK
ReadX 10472 8192 4096 4096 NT_STATUS_OK
ReadX 10472 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
ReadX 10475 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
ReadX 10476 4096 4096 4096 NT_STATUS_OK
ReadX 10476 8192 4096 4096 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10477 NT_STATUS_OK
WriteX 10477 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10477 258 NT_STATUS_OK
WriteX 10477 0 15360 15360 NT_STATUS_OK
Close 10477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10478 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10478 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10479 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10482 NT_STATUS_OK
SET_FILE_INFORMATION 10482 1004 NT_STATUS_OK
Close 10482 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
ReadX 10485 4096 4096 4096 NT_STATUS_OK
ReadX 10485 8192 4096 4096 NT_STATUS_OK
ReadX 10485 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10485 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10485 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10485 0 19054 19054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10487 NT_STATUS_OK
WriteX 10487 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10487 258 NT_STATUS_OK
WriteX 10487 0 53 53 NT_STATUS_OK
Close 10487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10486 4096 4096 4096 NT_STATUS_OK
ReadX 10486 8192 4096 4096 NT_STATUS_OK
ReadX 10486 12288 4096 4096 NT_STATUS_OK
WriteX 10490 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10490 258 NT_STATUS_OK
WriteX 10490 0 12006 12006 NT_STATUS_OK
Close 10490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10491 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10491 1004 NT_STATUS_OK
WriteX 10491 0 4096 4096 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10492 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10495 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10494 4096 4096 4096 NT_STATUS_OK
ReadX 10494 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10497 NT_STATUS_OK
WriteX 10497 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10497 258 NT_STATUS_OK
WriteX 10497 0 11991 11991 NT_STATUS_OK
Close 10497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10498 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10498 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10498 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10499 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10501 NT_STATUS_OK
ReadX 10501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10502 NT_STATUS_OK
SET_FILE_INFORMATION 10502 1004 NT_STATUS_OK
Close 10502 NT_STATUS_OK
WriteX 10498 0 4096 4096 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10505 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10505 1004 NT_STATUS_OK
ReadX 10505 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10505 1004 NT_STATUS_OK
WriteX 10505 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10505 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10505 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10505 1004 NT_STATUS_OK
Close 10481 NT_STATUS_OK
WriteX 10505 0 12288 12288 NT_STATUS_OK
Close 10501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10512 NT_STATUS_OK
ReadX 10512 0 61440 61440 NT_STATUS_OK
ReadX 10512 61440 4096 4096 NT_STATUS_OK
ReadX 10512 65536 61440 61440 NT_STATUS_OK
ReadX 10512 126976 4096 4096 NT_STATUS_OK
ReadX 10512 131072 61440 61440 NT_STATUS_OK
ReadX 10512 192512 4096 4096 NT_STATUS_OK
ReadX 10512 196608 61440 61440 NT_STATUS_OK
ReadX 10512 258048 4096 4096 NT_STATUS_OK
ReadX 10512 262144 61440 61440 NT_STATUS_OK
ReadX 10512 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 61440 61440 NT_STATUS_OK
ReadX 10513 61440 4096 4096 NT_STATUS_OK
ReadX 10513 65536 61440 61440 NT_STATUS_OK
ReadX 10513 126976 4096 4096 NT_STATUS_OK
ReadX 10513 131072 61440 61440 NT_STATUS_OK
ReadX 10513 192512 4096 4096 NT_STATUS_OK
ReadX 10513 196608 61440 61440 NT_STATUS_OK
ReadX 10513 258048 4096 4096 NT_STATUS_OK
ReadX 10513 262144 61440 61440 NT_STATUS_OK
ReadX 10513 323584 4096 4096 NT_STATUS_OK
ReadX 10513 327680 61440 61440 NT_STATUS_OK
ReadX 10513 389120 4096 4096 NT_STATUS_OK
ReadX 10513 393216 61440 61440 NT_STATUS_OK
ReadX 10513 454656 4096 4096 NT_STATUS_OK
ReadX 10513 458752 61440 61440 NT_STATUS_OK
ReadX 10513 520192 4096 4096 NT_STATUS_OK
ReadX 10513 524288 61440 61440 NT_STATUS_OK
ReadX 10513 585728 4096 4096 NT_STATUS_OK
ReadX 10513 589824 61440 61440 NT_STATUS_OK
ReadX 10513 651264 4096 4096 NT_STATUS_OK
ReadX 10513 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 61440 61440 NT_STATUS_OK
ReadX 10514 61440 4096 4096 NT_STATUS_OK
ReadX 10514 65536 61440 61440 NT_STATUS_OK
ReadX 10514 126976 4096 4096 NT_STATUS_OK
ReadX 10514 131072 61440 61440 NT_STATUS_OK
ReadX 10514 192512 4096 4096 NT_STATUS_OK
ReadX 10514 196608 61440 61440 NT_STATUS_OK
ReadX 10514 258048 4096 4096 NT_STATUS_OK
ReadX 10514 262144 61440 61440 NT_STATUS_OK
ReadX 10514 323584 4096 4096 NT_STATUS_OK
ReadX 10514 327680 61440 61440 NT_STATUS_OK
ReadX 10514 389120 4096 4096 NT_STATUS_OK
ReadX 10514 393216 61440 61440 NT_STATUS_OK
ReadX 10514 454656 4096 4096 NT_STATUS_OK
ReadX 10514 458752 61440 61440 NT_STATUS_OK
ReadX 10514 520192 4096 4096 NT_STATUS_OK
ReadX 10514 524288 61440 61440 NT_STATUS_OK
ReadX 10514 585728 4096 4096 NT_STATUS_OK
ReadX 10514 589824 61440 61440 NT_STATUS_OK
ReadX 10514 651264 4096 4096 NT_STATUS_OK
ReadX 10514 655360 61440 61440 NT_STATUS_OK
ReadX 10514 716800 4096 4096 NT_STATUS_OK
ReadX 10514 720896 61440 61440 NT_STATUS_OK
ReadX 10514 782336 4096 4096 NT_STATUS_OK
ReadX 10514 786432 61440 61440 NT_STATUS_OK
ReadX 10514 847872 4096 4096 NT_STATUS_OK
ReadX 10514 851968 61440 61440 NT_STATUS_OK
ReadX 10514 913408 4096 4096 NT_STATUS_OK
ReadX 10514 917504 61440 61440 NT_STATUS_OK
ReadX 10514 978944 4096 4096 NT_STATUS_OK
ReadX 10514 983040 61440 61440 NT_STATUS_OK
ReadX 10514 1044480 4096 4096 NT_STATUS_OK
ReadX 10514 1048576 61440 61440 NT_STATUS_OK
ReadX 10514 1110016 4096 4096 NT_STATUS_OK
ReadX 10514 1114112 61440 61440 NT_STATUS_OK
ReadX 10514 1175552 4096 4096 NT_STATUS_OK
ReadX 10514 1179648 61440 61440 NT_STATUS_OK
ReadX 10514 1241088 4096 4096 NT_STATUS_OK
ReadX 10514 1245184 61440 61440 NT_STATUS_OK
ReadX 10514 1306624 4096 4096 NT_STATUS_OK
ReadX 10514 1310720 61440 61440 NT_STATUS_OK
ReadX 10514 1372160 4096 4096 NT_STATUS_OK
ReadX 10514 1376256 61440 61440 NT_STATUS_OK
ReadX 10514 1437696 4096 4096 NT_STATUS_OK
ReadX 10514 1441792 61440 61440 NT_STATUS_OK
ReadX 10514 1503232 4096 4096 NT_STATUS_OK
ReadX 10514 1507328 61440 61440 NT_STATUS_OK
ReadX 10514 1568768 4096 4096 NT_STATUS_OK
ReadX 10514 1572864 61440 61440 NT_STATUS_OK
ReadX 10514 1634304 4096 4096 NT_STATUS_OK
ReadX 10514 1638400 61440 61440 NT_STATUS_OK
ReadX 10514 1699840 4096 4096 NT_STATUS_OK
ReadX 10514 1703936 61440 61440 NT_STATUS_OK
ReadX 10514 1765376 4096 4096 NT_STATUS_OK
ReadX 10514 1769472 61440 61440 NT_STATUS_OK
ReadX 10514 1830912 4096 4096 NT_STATUS_OK
ReadX 10514 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10521 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 1004 NT_STATUS_OK
WriteX 10521 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10522 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10523 NT_STATUS_OK
WriteX 10523 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 258 NT_STATUS_OK
WriteX 10523 0 491 491 NT_STATUS_OK
Close 10523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10521 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10527 NT_STATUS_OK
WriteX 10527 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10527 258 NT_STATUS_OK
WriteX 10527 0 543 543 NT_STATUS_OK
Close 10527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10534 NT_STATUS_OK
ReadX 10534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10535 NT_STATUS_OK
ReadX 10535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10536 NT_STATUS_OK
ReadX 10536 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10541 NT_STATUS_OK
QUERY_FILE_INFORMATION 10541 1004 NT_STATUS_OK
WriteX 10541 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10541 258 NT_STATUS_OK
WriteX 10541 0 2048 2048 NT_STATUS_OK
Close 10541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10542 0 4096 4096 NT_STATUS_OK
Flush 10542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10542 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10547 NT_STATUS_OK
WriteX 10547 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10547 258 NT_STATUS_OK
WriteX 10547 0 2048 2048 NT_STATUS_OK
Close 10547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10553 NT_STATUS_OK
WriteX 10553 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10553 258 NT_STATUS_OK
WriteX 10553 0 2048 2048 NT_STATUS_OK
Close 10553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10554 NT_STATUS_OK
ReadX 10554 0 2048 2048 NT_STATUS_OK
ReadX 10532 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
WriteX 10532 0 8192 8192 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
WriteX 10534 0 4096 4096 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10558 NT_STATUS_OK
QUERY_FILE_INFORMATION 10558 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10557 NT_STATUS_OK
Close 10533 NT_STATUS_OK
Close 10534 NT_STATUS_OK
Close 10535 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10560 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10577 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10578 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 258 NT_STATUS_OK
WriteX 10578 0 2048 2048 NT_STATUS_OK
Close 10578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10580 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10581 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10586 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 1004 NT_STATUS_OK
WriteX 10586 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 258 NT_STATUS_OK
WriteX 10586 0 2048 2048 NT_STATUS_OK
Close 10586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10579 0 4096 4096 NT_STATUS_OK
Flush 10579 NT_STATUS_OK
WriteX 10587 0 4096 4096 NT_STATUS_OK
Flush 10587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10579 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10587 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10581 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10589 NT_STATUS_OK
WriteX 10589 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10589 258 NT_STATUS_OK
WriteX 10589 0 4096 4096 NT_STATUS_OK
Close 10589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10590 NT_STATUS_OK
ReadX 10590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10591 NT_STATUS_OK
Close 10591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10592 NT_STATUS_OK
WriteX 10592 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10592 258 NT_STATUS_OK
WriteX 10592 0 4096 4096 NT_STATUS_OK
Close 10592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10593 NT_STATUS_OK
ReadX 10593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10593 0 4096 4096 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10599 NT_STATUS_OK
Close 10599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10600 NT_STATUS_OK
WriteX 10600 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 258 NT_STATUS_OK
WriteX 10600 0 2048 2048 NT_STATUS_OK
Close 10600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10602 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10604 NT_STATUS_OK
ReadX 10604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10605 NT_STATUS_OK
ReadX 10605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10606 NT_STATUS_OK
ReadX 10606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10609 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10610 NT_STATUS_OK
ReadX 10610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10612 NT_STATUS_OK
ReadX 10612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10614 NT_STATUS_OK
ReadX 10614 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10615 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10613 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Close 10610 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Close 10612 NT_STATUS_OK
Close 10614 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Close 10604 NT_STATUS_OK
Close 10605 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10617 NT_STATUS_OK
QUERY_FILE_INFORMATION 10617 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10620 NT_STATUS_OK
ReadX 10620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10621 NT_STATUS_OK
ReadX 10621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10623 NT_STATUS_OK
ReadX 10623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10624 NT_STATUS_OK
ReadX 10624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10636 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10637 NT_STATUS_OK
QUERY_FILE_INFORMATION 10637 1004 NT_STATUS_OK
WriteX 10637 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10637 258 NT_STATUS_OK
WriteX 10637 0 2048 2048 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10638 NT_STATUS_OK
ReadX 10638 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10649 NT_STATUS_OK
QUERY_FILE_INFORMATION 10649 1004 NT_STATUS_OK
WriteX 10649 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10649 258 NT_STATUS_OK
WriteX 10649 0 2048 2048 NT_STATUS_OK
Close 10649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10657 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 1004 NT_STATUS_OK
WriteX 10657 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 258 NT_STATUS_OK
WriteX 10657 0 2048 2048 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10638 0 4096 4096 NT_STATUS_OK
Flush 10638 NT_STATUS_OK
WriteX 10650 0 4096 4096 NT_STATUS_OK
Flush 10650 NT_STATUS_OK
WriteX 10658 0 4096 4096 NT_STATUS_OK
Flush 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10638 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10650 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10658 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10640 4096 16384 16384 NT_STATUS_OK
ReadX 10620 4096 16384 16384 NT_STATUS_OK
ReadX 10652 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 2048 2048 NT_STATUS_OK
WriteX 10660 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10661 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Close 10624 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Close 10621 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Close 10623 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10663 NT_STATUS_OK
QUERY_FILE_INFORMATION 10663 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10665 NT_STATUS_OK
QUERY_FILE_INFORMATION 10665 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10670 NT_STATUS_OK
ReadX 10670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10668 4096 16384 16384 NT_STATUS_OK
WriteX 10668 0 4096 4096 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
WriteX 10670 0 4096 4096 NT_STATUS_OK
WriteX 10671 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10676 NT_STATUS_OK
ReadX 10676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10677 NT_STATUS_OK
ReadX 10677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10682 NT_STATUS_OK
ReadX 10682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10683 NT_STATUS_OK
ReadX 10683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10686 NT_STATUS_OK
ReadX 10686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 8192 8192 NT_STATUS_OK
ReadX 10674 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10688 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10688 0 4096 4096 NT_STATUS_OK
ReadX 10688 4096 4096 4096 NT_STATUS_OK
ReadX 10688 8192 4096 4096 NT_STATUS_OK
WriteX 10674 0 4096 4096 NT_STATUS_OK
WriteX 10675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
ReadX 10689 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10668 0 4096 4096 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
WriteX 10670 0 4096 4096 NT_STATUS_OK
WriteX 10671 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10693 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10694 NT_STATUS_OK
QUERY_FILE_INFORMATION 10694 1004 NT_STATUS_OK
WriteX 10694 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10694 258 NT_STATUS_OK
WriteX 10694 0 2048 2048 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10697 NT_STATUS_OK
ReadX 10697 0 4096 4096 NT_STATUS_OK
ReadX 10697 4096 4096 4096 NT_STATUS_OK
WriteX 10697 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
ReadX 10699 4096 4096 4096 NT_STATUS_OK
WriteX 10699 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10700 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Close 10672 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10670 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Close 10685 NT_STATUS_OK
Close 10681 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Close 10683 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Close 10686 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10676 NT_STATUS_OK
Close 10677 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10702 0 4096 4096 NT_STATUS_OK
ReadX 10702 4096 4096 4096 NT_STATUS_OK
ReadX 10702 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10705 NT_STATUS_OK
ReadX 10705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10713 NT_STATUS_OK
ReadX 10713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
ReadX 10703 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10720 NT_STATUS_OK
QUERY_FILE_INFORMATION 10720 1004 NT_STATUS_OK
WriteX 10720 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10720 258 NT_STATUS_OK
WriteX 10720 0 2048 2048 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10721 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10726 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 1004 NT_STATUS_OK
WriteX 10726 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 258 NT_STATUS_OK
WriteX 10726 0 2048 2048 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10727 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10710 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10728 NT_STATUS_OK
QUERY_FILE_INFORMATION 10728 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10714 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10704 NT_STATUS_OK
Close 10707 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Close 10705 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10711 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10730 NT_STATUS_OK
QUERY_FILE_INFORMATION 10730 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 61440 4096 4096 NT_STATUS_OK
ReadX 10732 126976 4096 4096 NT_STATUS_OK
WriteX 10732 0 65536 65536 NT_STATUS_OK
WriteX 10732 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 61440 4096 4096 NT_STATUS_OK
ReadX 10733 126976 4096 4096 NT_STATUS_OK
ReadX 10733 192512 4096 4096 NT_STATUS_OK
ReadX 10733 258048 4096 4096 NT_STATUS_OK
WriteX 10733 0 65536 65536 NT_STATUS_OK
WriteX 10733 65536 65536 65536 NT_STATUS_OK
WriteX 10733 131072 65536 65536 NT_STATUS_OK
WriteX 10733 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 61440 4096 4096 NT_STATUS_OK
ReadX 10734 126976 4096 4096 NT_STATUS_OK
ReadX 10734 192512 4096 4096 NT_STATUS_OK
ReadX 10734 258048 4096 4096 NT_STATUS_OK
ReadX 10734 323584 4096 4096 NT_STATUS_OK
ReadX 10734 389120 4096 4096 NT_STATUS_OK
ReadX 10734 454656 4096 4096 NT_STATUS_OK
ReadX 10734 520192 4096 4096 NT_STATUS_OK
WriteX 10734 0 65536 65536 NT_STATUS_OK
WriteX 10734 65536 65536 65536 NT_STATUS_OK
WriteX 10734 131072 65536 65536 NT_STATUS_OK
WriteX 10734 196608 65536 65536 NT_STATUS_OK
WriteX 10734 262144 65536 65536 NT_STATUS_OK
WriteX 10734 327680 65536 65536 NT_STATUS_OK
WriteX 10734 393216 65536 65536 NT_STATUS_OK
WriteX 10734 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10735 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10735 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10735 8192 4096 4096 NT_STATUS_OK
ReadX 10735 12288 4096 4096 NT_STATUS_OK
ReadX 10735 16384 4096 4096 NT_STATUS_OK
ReadX 10735 20480 4096 4096 NT_STATUS_OK
ReadX 10735 24576 4096 4096 NT_STATUS_OK
ReadX 10735 28672 4096 4096 NT_STATUS_OK
ReadX 10735 32768 4096 4096 NT_STATUS_OK
ReadX 10735 36864 4096 4096 NT_STATUS_OK
ReadX 10735 40960 4096 4096 NT_STATUS_OK
ReadX 10735 45056 4096 4096 NT_STATUS_OK
ReadX 10735 49152 4096 4096 NT_STATUS_OK
ReadX 10735 53248 4096 4096 NT_STATUS_OK
ReadX 10735 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10735 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10736 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10732 NT_STATUS_OK
Close 10733 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10738 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10738 1004 NT_STATUS_OK
WriteX 10738 0 57088 57088 NT_STATUS_OK
WriteX 10738 0 4096 4096 NT_STATUS_OK
Flush 10738 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10739 NT_STATUS_OK
SET_FILE_INFORMATION 10739 1004 NT_STATUS_OK
Close 10739 NT_STATUS_OK
SET_FILE_INFORMATION 10738 1004 NT_STATUS_OK
WriteX 10738 0 4096 4096 NT_STATUS_OK
Close 10738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10740 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10742 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10743 NT_STATUS_OK
WriteX 10743 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10743 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10743 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 51456 51456 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Flush 10743 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10747 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10752 NT_STATUS_OK
WriteX 10752 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 258 NT_STATUS_OK
WriteX 10752 0 53077 53077 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10753 NT_STATUS_OK
WriteX 10753 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10753 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10753 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10753 1004 NT_STATUS_OK
WriteX 10753 0 65536 65536 NT_STATUS_OK
WriteX 10753 65536 1856 1856 NT_STATUS_OK
WriteX 10753 0 4096 4096 NT_STATUS_OK
Flush 10753 NT_STATUS_OK
SET_FILE_INFORMATION 10753 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10753 1004 NT_STATUS_OK
WriteX 10753 0 4096 4096 NT_STATUS_OK
Close 10753 NT_STATUS_OK
Close 10747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10755 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10759 NT_STATUS_OK
Close 10759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10762 NT_STATUS_OK
WriteX 10762 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 258 NT_STATUS_OK
WriteX 10762 0 7983 7983 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10767 NT_STATUS_OK
WriteX 10767 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10767 258 NT_STATUS_OK
WriteX 10767 0 65536 65536 NT_STATUS_OK
WriteX 10767 65536 65536 65536 NT_STATUS_OK
WriteX 10767 131072 65536 65536 NT_STATUS_OK
WriteX 10767 196608 65536 65536 NT_STATUS_OK
WriteX 10767 262144 65536 65536 NT_STATUS_OK
WriteX 10767 327680 65536 65536 NT_STATUS_OK
WriteX 10767 393216 65536 65536 NT_STATUS_OK
WriteX 10767 458752 46731 46731 NT_STATUS_OK
Close 10767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10768 NT_STATUS_OK
WriteX 10768 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10768 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10757 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10768 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 65536 65536 NT_STATUS_OK
WriteX 10768 65536 22848 22848 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
Flush 10768 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
Close 10768 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10772 NT_STATUS_OK
ReadX 10772 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10772 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10773 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10773 1004 NT_STATUS_OK
ReadX 10773 8192 4096 4096 NT_STATUS_OK
ReadX 10773 12288 4096 4096 NT_STATUS_OK
ReadX 10773 16384 4096 4096 NT_STATUS_OK
ReadX 10773 20480 4096 4096 NT_STATUS_OK
ReadX 10773 24576 4096 4096 NT_STATUS_OK
ReadX 10773 28672 4096 4096 NT_STATUS_OK
ReadX 10773 32768 4096 4096 NT_STATUS_OK
ReadX 10773 36864 4096 4096 NT_STATUS_OK
ReadX 10773 40960 4096 4096 NT_STATUS_OK
ReadX 10773 45056 4096 4096 NT_STATUS_OK
ReadX 10773 49152 4096 4096 NT_STATUS_OK
ReadX 10773 53248 4096 4096 NT_STATUS_OK
ReadX 10773 57344 4096 4096 NT_STATUS_OK
ReadX 10773 61440 4096 4096 NT_STATUS_OK
ReadX 10773 65536 4096 4096 NT_STATUS_OK
ReadX 10773 69632 4096 4096 NT_STATUS_OK
ReadX 10773 73728 4096 4096 NT_STATUS_OK
ReadX 10773 77824 4096 4096 NT_STATUS_OK
ReadX 10773 81920 4096 4096 NT_STATUS_OK
ReadX 10773 86016 4096 4096 NT_STATUS_OK
ReadX 10773 90112 4096 4096 NT_STATUS_OK
ReadX 10773 94208 4096 4096 NT_STATUS_OK
ReadX 10773 98304 4096 4096 NT_STATUS_OK
ReadX 10773 102400 4096 4096 NT_STATUS_OK
ReadX 10773 106496 4096 4096 NT_STATUS_OK
ReadX 10773 110592 4096 4096 NT_STATUS_OK
ReadX 10773 114688 4096 4096 NT_STATUS_OK
ReadX 10773 118784 4096 4096 NT_STATUS_OK
ReadX 10773 122880 4096 4096 NT_STATUS_OK
ReadX 10773 126976 4096 4096 NT_STATUS_OK
ReadX 10773 131072 4096 4096 NT_STATUS_OK
ReadX 10773 135168 4096 4096 NT_STATUS_OK
ReadX 10773 139264 4096 4096 NT_STATUS_OK
ReadX 10773 143360 4096 4096 NT_STATUS_OK
ReadX 10773 147456 4096 4096 NT_STATUS_OK
ReadX 10773 151552 4096 4096 NT_STATUS_OK
ReadX 10773 155648 4096 4096 NT_STATUS_OK
ReadX 10773 159744 4096 4096 NT_STATUS_OK
ReadX 10773 163840 4096 4096 NT_STATUS_OK
ReadX 10773 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10773 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10774 NT_STATUS_OK
Close 10774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
Close 10773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10777 NT_STATUS_OK
SET_FILE_INFORMATION 10777 1004 NT_STATUS_OK
Close 10777 NT_STATUS_OK
WriteX 10776 0 42388 42388 NT_STATUS_OK
Close 10776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
ReadX 10780 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10781 NT_STATUS_OK
WriteX 10781 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10781 258 NT_STATUS_OK
SET_FILE_INFORMATION 10781 1004 NT_STATUS_OK
WriteX 10781 0 42652 42652 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
ReadX 10785 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10790 NT_STATUS_OK
WriteX 10790 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10790 258 NT_STATUS_OK
WriteX 10790 0 65536 65536 NT_STATUS_OK
WriteX 10790 65536 49 49 NT_STATUS_OK
Close 10790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 61440 61440 NT_STATUS_OK
ReadX 10791 61440 4096 4096 NT_STATUS_OK
ReadX 10791 65536 61440 61440 NT_STATUS_OK
ReadX 10791 126976 4096 4096 NT_STATUS_OK
ReadX 10791 131072 61440 61440 NT_STATUS_OK
ReadX 10791 192512 4096 4096 NT_STATUS_OK
ReadX 10791 196608 61440 61440 NT_STATUS_OK
ReadX 10791 258048 4096 4096 NT_STATUS_OK
ReadX 10791 262144 61440 61440 NT_STATUS_OK
ReadX 10791 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 61440 61440 NT_STATUS_OK
ReadX 10792 61440 4096 4096 NT_STATUS_OK
ReadX 10792 65536 61440 61440 NT_STATUS_OK
ReadX 10792 126976 4096 4096 NT_STATUS_OK
ReadX 10792 131072 61440 61440 NT_STATUS_OK
ReadX 10792 192512 4096 4096 NT_STATUS_OK
ReadX 10792 196608 61440 61440 NT_STATUS_OK
ReadX 10792 258048 4096 4096 NT_STATUS_OK
ReadX 10792 262144 61440 61440 NT_STATUS_OK
ReadX 10792 323584 4096 4096 NT_STATUS_OK
ReadX 10792 327680 61440 61440 NT_STATUS_OK
ReadX 10792 389120 4096 4096 NT_STATUS_OK
ReadX 10792 393216 61440 61440 NT_STATUS_OK
ReadX 10792 454656 4096 4096 NT_STATUS_OK
ReadX 10792 458752 61440 61440 NT_STATUS_OK
ReadX 10792 520192 4096 4096 NT_STATUS_OK
ReadX 10792 524288 61440 61440 NT_STATUS_OK
ReadX 10792 585728 4096 4096 NT_STATUS_OK
ReadX 10792 589824 61440 61440 NT_STATUS_OK
ReadX 10792 651264 4096 4096 NT_STATUS_OK
ReadX 10792 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 61440 61440 NT_STATUS_OK
ReadX 10793 61440 4096 4096 NT_STATUS_OK
ReadX 10793 65536 61440 61440 NT_STATUS_OK
ReadX 10793 126976 4096 4096 NT_STATUS_OK
ReadX 10793 131072 61440 61440 NT_STATUS_OK
ReadX 10793 192512 4096 4096 NT_STATUS_OK
ReadX 10793 196608 61440 61440 NT_STATUS_OK
ReadX 10793 258048 4096 4096 NT_STATUS_OK
ReadX 10793 262144 61440 61440 NT_STATUS_OK
ReadX 10793 323584 4096 4096 NT_STATUS_OK
ReadX 10793 327680 61440 61440 NT_STATUS_OK
ReadX 10793 389120 4096 4096 NT_STATUS_OK
ReadX 10793 393216 61440 61440 NT_STATUS_OK
ReadX 10793 454656 4096 4096 NT_STATUS_OK
ReadX 10793 458752 61440 61440 NT_STATUS_OK
ReadX 10793 520192 4096 4096 NT_STATUS_OK
ReadX 10793 524288 61440 61440 NT_STATUS_OK
ReadX 10793 585728 4096 4096 NT_STATUS_OK
ReadX 10793 589824 61440 61440 NT_STATUS_OK
ReadX 10793 651264 4096 4096 NT_STATUS_OK
ReadX 10793 655360 61440 61440 NT_STATUS_OK
ReadX 10793 716800 4096 4096 NT_STATUS_OK
ReadX 10793 720896 61440 61440 NT_STATUS_OK
ReadX 10793 782336 4096 4096 NT_STATUS_OK
ReadX 10793 786432 61440 61440 NT_STATUS_OK
ReadX 10793 847872 4096 4096 NT_STATUS_OK
ReadX 10793 851968 61440 61440 NT_STATUS_OK
ReadX 10793 913408 4096 4096 NT_STATUS_OK
ReadX 10793 917504 61440 61440 NT_STATUS_OK
ReadX 10793 978944 4096 4096 NT_STATUS_OK
ReadX 10793 983040 61440 61440 NT_STATUS_OK
ReadX 10793 1044480 4096 4096 NT_STATUS_OK
ReadX 10793 1048576 61440 61440 NT_STATUS_OK
ReadX 10793 1110016 4096 4096 NT_STATUS_OK
ReadX 10793 1114112 61440 61440 NT_STATUS_OK
ReadX 10793 1175552 4096 4096 NT_STATUS_OK
ReadX 10793 1179648 61440 61440 NT_STATUS_OK
ReadX 10793 1241088 4096 4096 NT_STATUS_OK
ReadX 10793 1245184 61440 61440 NT_STATUS_OK
ReadX 10793 1306624 4096 4096 NT_STATUS_OK
ReadX 10793 1310720 61440 61440 NT_STATUS_OK
ReadX 10793 1372160 4096 4096 NT_STATUS_OK
ReadX 10793 1376256 61440 61440 NT_STATUS_OK
ReadX 10793 1437696 4096 4096 NT_STATUS_OK
ReadX 10793 1441792 61440 61440 NT_STATUS_OK
ReadX 10793 1503232 4096 4096 NT_STATUS_OK
ReadX 10793 1507328 61440 61440 NT_STATUS_OK
ReadX 10793 1568768 4096 4096 NT_STATUS_OK
ReadX 10793 1572864 61440 61440 NT_STATUS_OK
ReadX 10793 1634304 4096 4096 NT_STATUS_OK
ReadX 10793 1638400 61440 61440 NT_STATUS_OK
ReadX 10793 1699840 4096 4096 NT_STATUS_OK
ReadX 10793 1703936 61440 61440 NT_STATUS_OK
ReadX 10793 1765376 4096 4096 NT_STATUS_OK
ReadX 10793 1769472 61440 61440 NT_STATUS_OK
ReadX 10793 1830912 4096 4096 NT_STATUS_OK
ReadX 10793 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10794 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10795 NT_STATUS_OK
QUERY_FILE_INFORMATION 10795 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10795 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10795 1005 NT_STATUS_OK
ReadX 10795 2156 24 24 NT_STATUS_OK
ReadX 10795 2139 276 276 NT_STATUS_OK
ReadX 10795 2136 14 14 NT_STATUS_OK
ReadX 10795 2136 7 7 NT_STATUS_OK
ReadX 10795 2138 12 12 NT_STATUS_OK
ReadX 10795 2137 8 8 NT_STATUS_OK
ReadX 10795 2135 15 15 NT_STATUS_OK
ReadX 10795 0 16 16 NT_STATUS_OK
ReadX 10795 16 2048 2048 NT_STATUS_OK
ReadX 10795 2064 2048 2048 NT_STATUS_OK
ReadX 10795 257 2048 2048 NT_STATUS_OK
ReadX 10795 385 2048 2048 NT_STATUS_OK
ReadX 10795 513 2048 2048 NT_STATUS_OK
ReadX 10795 641 2048 2048 NT_STATUS_OK
ReadX 10795 769 2048 2048 NT_STATUS_OK
ReadX 10795 897 2048 2048 NT_STATUS_OK
ReadX 10795 1025 2048 2048 NT_STATUS_OK
ReadX 10795 1153 2048 2048 NT_STATUS_OK
ReadX 10795 1281 2048 2048 NT_STATUS_OK
ReadX 10795 1409 2048 2048 NT_STATUS_OK
ReadX 10795 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10797 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10791 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Close 10785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10800 NT_STATUS_OK
WriteX 10800 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10800 258 NT_STATUS_OK
WriteX 10800 0 10575 10575 NT_STATUS_OK
Flush 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10801 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10805 NT_STATUS_OK
LockX 10805 2147483538 1 NT_STATUS_OK
UnlockX 10805 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10805 1005 NT_STATUS_OK
ReadX 10805 0 512 512 NT_STATUS_OK
ReadX 10805 512 512 512 NT_STATUS_OK
ReadX 10805 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10805 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10805 1004 NT_STATUS_OK
Close 10805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10806 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 1005 NT_STATUS_OK
ReadX 10806 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10807 NT_STATUS_OK
LockX 10807 2147483538 1 NT_STATUS_OK
UnlockX 10807 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10807 1005 NT_STATUS_OK
ReadX 10807 0 512 512 NT_STATUS_OK
ReadX 10807 512 512 512 NT_STATUS_OK
ReadX 10807 1024 512 512 NT_STATUS_OK
ReadX 10807 288 20 20 NT_STATUS_OK
ReadX 10807 308 2084 2084 NT_STATUS_OK
ReadX 10807 388 2084 2084 NT_STATUS_OK
ReadX 10807 388 2084 2084 NT_STATUS_OK
ReadX 10794 2157 1386 1386 NT_STATUS_OK
ReadX 10807 2472 399 399 NT_STATUS_OK
ReadX 10807 3072 1536 1536 NT_STATUS_OK
ReadX 10807 544 149 149 NT_STATUS_OK
ReadX 10807 693 485 485 NT_STATUS_OK
Close 10807 NT_STATUS_OK
ReadX 10794 2157 4096 4096 NT_STATUS_OK
ReadX 10794 6253 4096 4096 NT_STATUS_OK
ReadX 10794 10349 4096 4096 NT_STATUS_OK
ReadX 10794 14445 4096 4096 NT_STATUS_OK
ReadX 10794 18541 4096 4096 NT_STATUS_OK
ReadX 10794 22637 256 256 NT_STATUS_OK
ReadX 10794 22893 4096 4096 NT_STATUS_OK
ReadX 10794 26989 4096 4096 NT_STATUS_OK
ReadX 10794 31085 4096 4096 NT_STATUS_OK
ReadX 10794 35181 4096 4096 NT_STATUS_OK
ReadX 10794 39277 4096 4096 NT_STATUS_OK
ReadX 10794 43373 4096 4096 NT_STATUS_OK
ReadX 10794 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10794 2157 1024 1024 NT_STATUS_OK
ReadX 10794 1667 4688 4688 NT_STATUS_OK
ReadX 10794 6355 3516 3516 NT_STATUS_OK
ReadX 10794 9871 16384 16384 NT_STATUS_OK
ReadX 10794 26255 3771 3771 NT_STATUS_OK
ReadX 10794 30026 2048 2048 NT_STATUS_OK
ReadX 10794 32074 1024 1024 NT_STATUS_OK
ReadX 10794 33098 6652 6652 NT_STATUS_OK
ReadX 10794 39750 16384 16384 NT_STATUS_OK
ReadX 10794 56134 10496 10496 NT_STATUS_OK
ReadX 10794 66630 1784 1784 NT_STATUS_OK
ReadX 10794 68414 90 90 NT_STATUS_OK
ReadX 10794 68504 273 273 NT_STATUS_OK
ReadX 10794 68777 1600 1600 NT_STATUS_OK
ReadX 10794 70377 640 640 NT_STATUS_OK
ReadX 10794 71017 1280 1280 NT_STATUS_OK
ReadX 10794 72297 8464 8464 NT_STATUS_OK
ReadX 10794 80761 158 158 NT_STATUS_OK
ReadX 10794 80919 912 912 NT_STATUS_OK
ReadX 10794 81831 1980 1980 NT_STATUS_OK
ReadX 10794 83811 2256 2256 NT_STATUS_OK
ReadX 10794 86067 400 400 NT_STATUS_OK
ReadX 10794 86467 252 252 NT_STATUS_OK
ReadX 10794 86719 42 42 NT_STATUS_OK
ReadX 10794 86761 725 725 NT_STATUS_OK
ReadX 10794 2009 512 512 NT_STATUS_OK
ReadX 10794 3895 9 9 NT_STATUS_OK
ReadX 10794 3781 46 46 NT_STATUS_OK
ReadX 10794 4059 92 92 NT_STATUS_OK
ReadX 10794 3781 92 92 NT_STATUS_OK
ReadX 10794 3986 184 184 NT_STATUS_OK
ReadX 10794 3987 16384 16384 NT_STATUS_OK
ReadX 10794 3902 16384 16384 NT_STATUS_OK
ReadX 10794 3781 10240 10240 NT_STATUS_OK
ReadX 10794 3821 16384 16384 NT_STATUS_OK
ReadX 10794 3891 935 935 NT_STATUS_OK
ReadX 10794 4060 10240 10240 NT_STATUS_OK
ReadX 10794 4059 184 184 NT_STATUS_OK
ReadX 10794 256 184 184 NT_STATUS_OK
ReadX 10794 256 1026 1026 NT_STATUS_OK
ReadX 10794 3901 326 326 NT_STATUS_OK
ReadX 10794 3899 652 652 NT_STATUS_OK
ReadX 10794 256 2 2 NT_STATUS_OK
ReadX 10794 258 4948 4948 NT_STATUS_OK
Close 10794 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10809 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10812 NT_STATUS_OK
WriteX 10812 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10812 258 NT_STATUS_OK
WriteX 10812 0 65536 65536 NT_STATUS_OK
WriteX 10812 65536 65536 65536 NT_STATUS_OK
WriteX 10812 131072 65536 65536 NT_STATUS_OK
WriteX 10812 196608 65536 65536 NT_STATUS_OK
WriteX 10812 262144 65536 65536 NT_STATUS_OK
WriteX 10812 327680 65536 65536 NT_STATUS_OK
WriteX 10812 393216 65536 65536 NT_STATUS_OK
WriteX 10812 458752 65536 65536 NT_STATUS_OK
WriteX 10812 524288 65536 65536 NT_STATUS_OK
WriteX 10812 589824 35257 35257 NT_STATUS_OK
Close 10812 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10817 NT_STATUS_OK
WriteX 10817 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10817 258 NT_STATUS_OK
WriteX 10817 0 65536 65536 NT_STATUS_OK
WriteX 10817 65536 65536 65536 NT_STATUS_OK
WriteX 10817 131072 65536 65536 NT_STATUS_OK
WriteX 10817 196608 65536 65536 NT_STATUS_OK
WriteX 10817 262144 65536 65536 NT_STATUS_OK
WriteX 10817 327680 65536 65536 NT_STATUS_OK
WriteX 10817 393216 65536 65536 NT_STATUS_OK
WriteX 10817 458752 65536 65536 NT_STATUS_OK
WriteX 10817 524288 65536 65536 NT_STATUS_OK
WriteX 10817 589824 57598 57598 NT_STATUS_OK
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10819 NT_STATUS_OK
WriteX 10819 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10819 258 NT_STATUS_OK
WriteX 10819 0 12543 12543 NT_STATUS_OK
Flush 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10824 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10825 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 1005 NT_STATUS_OK
ReadX 10825 1938 24 24 NT_STATUS_OK
ReadX 10825 1920 276 276 NT_STATUS_OK
ReadX 10825 1918 14 14 NT_STATUS_OK
ReadX 10825 1918 7 7 NT_STATUS_OK
ReadX 10825 1919 12 12 NT_STATUS_OK
ReadX 10825 1919 8 8 NT_STATUS_OK
ReadX 10825 1917 15 15 NT_STATUS_OK
ReadX 10825 0 16 16 NT_STATUS_OK
ReadX 10825 16 2048 2048 NT_STATUS_OK
ReadX 10825 2064 2048 2048 NT_STATUS_OK
ReadX 10825 257 2048 2048 NT_STATUS_OK
ReadX 10825 385 2048 2048 NT_STATUS_OK
ReadX 10825 513 2048 2048 NT_STATUS_OK
ReadX 10825 641 2048 2048 NT_STATUS_OK
ReadX 10825 769 2048 2048 NT_STATUS_OK
ReadX 10825 897 2048 2048 NT_STATUS_OK
ReadX 10825 1025 2048 2048 NT_STATUS_OK
ReadX 10825 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10830 NT_STATUS_OK
WriteX 10830 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10830 258 NT_STATUS_OK
WriteX 10830 0 11588 11588 NT_STATUS_OK
Flush 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10831 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 4096 4096 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10835 NT_STATUS_OK
WriteX 10835 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10835 258 NT_STATUS_OK
WriteX 10835 0 11615 11615 NT_STATUS_OK
Flush 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10844 NT_STATUS_OK
WriteX 10844 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10844 258 NT_STATUS_OK
WriteX 10844 0 65536 65536 NT_STATUS_OK
WriteX 10844 65536 16050 16050 NT_STATUS_OK
Close 10844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10824 1939 64 64 NT_STATUS_OK
ReadX 10824 128 248 248 NT_STATUS_OK
ReadX 10824 128 568 568 NT_STATUS_OK
ReadX 10824 3872 1536 1536 NT_STATUS_OK
ReadX 10824 3456 2560 2560 NT_STATUS_OK
ReadX 10824 3136 512 512 NT_STATUS_OK
ReadX 10824 2880 4096 4096 NT_STATUS_OK
ReadX 10824 3264 3072 3072 NT_STATUS_OK
ReadX 10824 320 4096 4096 NT_STATUS_OK
ReadX 10824 1024 4096 4096 NT_STATUS_OK
ReadX 10824 3616 4096 4096 NT_STATUS_OK
ReadX 10824 1939 64 64 NT_STATUS_OK
ReadX 10824 128 248 248 NT_STATUS_OK
ReadX 10824 128 608 608 NT_STATUS_OK
ReadX 10824 2858 1024 1024 NT_STATUS_OK
ReadX 10824 2810 4096 4096 NT_STATUS_OK
ReadX 10824 2826 4096 4096 NT_STATUS_OK
ReadX 10824 2580 2048 2048 NT_STATUS_OK
ReadX 10824 2800 2560 2560 NT_STATUS_OK
ReadX 10824 2100 4096 4096 NT_STATUS_OK
ReadX 10824 2084 4096 4096 NT_STATUS_OK
ReadX 10824 868 4096 4096 NT_STATUS_OK
ReadX 10824 2324 4096 4096 NT_STATUS_OK
ReadX 10824 884 4096 4096 NT_STATUS_OK
ReadX 10824 2604 1024 1024 NT_STATUS_OK
ReadX 10824 580 4096 4096 NT_STATUS_OK
ReadX 10824 596 4096 4096 NT_STATUS_OK
ReadX 10824 2752 4096 4096 NT_STATUS_OK
ReadX 10824 2842 1024 1024 NT_STATUS_OK
ReadX 10824 660 4096 4096 NT_STATUS_OK
ReadX 10824 2720 4096 4096 NT_STATUS_OK
ReadX 10824 2736 4096 4096 NT_STATUS_OK
ReadX 10824 628 4096 4096 NT_STATUS_OK
ReadX 10824 2704 4096 4096 NT_STATUS_OK
ReadX 10824 1556 4096 4096 NT_STATUS_OK
ReadX 10824 576 4096 4096 NT_STATUS_OK
ReadX 10824 3168 1536 1536 NT_STATUS_OK
ReadX 10824 832 4096 4096 NT_STATUS_OK
ReadX 10824 1088 4096 4096 NT_STATUS_OK
ReadX 10824 1344 4096 4096 NT_STATUS_OK
ReadX 10824 1600 4096 4096 NT_STATUS_OK
ReadX 10824 1856 4096 4096 NT_STATUS_OK
ReadX 10824 2112 4096 4096 NT_STATUS_OK
ReadX 10824 1892 4096 4096 NT_STATUS_OK
ReadX 10824 820 4096 4096 NT_STATUS_OK
ReadX 10824 788 4096 4096 NT_STATUS_OK
ReadX 10824 1604 4096 4096 NT_STATUS_OK
ReadX 10824 3648 4096 4096 NT_STATUS_OK
ReadX 10824 2608 4096 4096 NT_STATUS_OK
ReadX 10824 548 4096 4096 NT_STATUS_OK
ReadX 10824 740 4096 4096 NT_STATUS_OK
ReadX 10824 1344 4096 4096 NT_STATUS_OK
ReadX 10824 3392 4096 4096 NT_STATUS_OK
ReadX 10824 3904 4096 4096 NT_STATUS_OK
ReadX 10824 644 4096 4096 NT_STATUS_OK
ReadX 10824 676 4096 4096 NT_STATUS_OK
ReadX 10824 2688 4096 4096 NT_STATUS_OK
ReadX 10824 320 4096 4096 NT_STATUS_OK
ReadX 10824 900 4096 4096 NT_STATUS_OK
ReadX 10824 1908 4096 4096 NT_STATUS_OK
ReadX 10824 852 4096 4096 NT_STATUS_OK
ReadX 10824 724 4096 4096 NT_STATUS_OK
ReadX 10824 2292 4096 4096 NT_STATUS_OK
ReadX 10824 612 4096 4096 NT_STATUS_OK
ReadX 10824 388 4096 4096 NT_STATUS_OK
ReadX 10824 2368 4096 4096 NT_STATUS_OK
ReadX 10824 2624 4096 4096 NT_STATUS_OK
ReadX 10824 500 4096 4096 NT_STATUS_OK
ReadX 10824 356 4096 4096 NT_STATUS_OK
ReadX 10824 1024 4096 4096 NT_STATUS_OK
ReadX 10824 576 4096 4096 NT_STATUS_OK
ReadX 10824 340 4096 4096 NT_STATUS_OK
ReadX 10824 420 4096 4096 NT_STATUS_OK
ReadX 10824 1600 4096 4096 NT_STATUS_OK
ReadX 10824 404 4096 4096 NT_STATUS_OK
ReadX 10824 1428 4096 4096 NT_STATUS_OK
ReadX 10824 2656 4096 4096 NT_STATUS_OK
ReadX 10824 2624 4096 4096 NT_STATUS_OK
ReadX 10824 452 4096 4096 NT_STATUS_OK
ReadX 10824 692 4096 4096 NT_STATUS_OK
ReadX 10824 564 4096 4096 NT_STATUS_OK
ReadX 10824 372 4096 4096 NT_STATUS_OK
ReadX 10824 468 4096 4096 NT_STATUS_OK
ReadX 10824 484 4096 4096 NT_STATUS_OK
ReadX 10824 1088 4096 4096 NT_STATUS_OK
ReadX 10824 1924 4096 4096 NT_STATUS_OK
ReadX 10824 2768 4096 4096 NT_STATUS_OK
ReadX 10824 832 4096 4096 NT_STATUS_OK
ReadX 10824 836 4096 4096 NT_STATUS_OK
ReadX 10824 1856 4096 4096 NT_STATUS_OK
ReadX 10824 2640 4096 4096 NT_STATUS_OK
ReadX 10824 436 4096 4096 NT_STATUS_OK
ReadX 10824 1828 4096 4096 NT_STATUS_OK
ReadX 10824 804 4096 4096 NT_STATUS_OK
ReadX 10824 1860 4096 4096 NT_STATUS_OK
ReadX 10824 1812 4096 4096 NT_STATUS_OK
ReadX 10824 756 4096 4096 NT_STATUS_OK
ReadX 10824 1636 4096 4096 NT_STATUS_OK
ReadX 10824 772 4096 4096 NT_STATUS_OK
ReadX 10824 2036 4096 4096 NT_STATUS_OK
ReadX 10824 1220 4096 4096 NT_STATUS_OK
ReadX 10824 1652 4096 4096 NT_STATUS_OK
ReadX 10824 2588 4096 4096 NT_STATUS_OK
ReadX 10824 916 4096 4096 NT_STATUS_OK
ReadX 10824 260 4096 4096 NT_STATUS_OK
ReadX 10824 932 4096 4096 NT_STATUS_OK
ReadX 10824 2624 4096 4096 NT_STATUS_OK
ReadX 10824 308 4096 4096 NT_STATUS_OK
ReadX 10824 292 4096 4096 NT_STATUS_OK
ReadX 10824 1140 4096 4096 NT_STATUS_OK
ReadX 10824 276 4096 4096 NT_STATUS_OK
ReadX 10824 2020 4096 4096 NT_STATUS_OK
ReadX 10824 2880 4096 4096 NT_STATUS_OK
ReadX 10824 516 4096 4096 NT_STATUS_OK
ReadX 10824 1844 4096 4096 NT_STATUS_OK
ReadX 10824 1124 4096 4096 NT_STATUS_OK
ReadX 10824 3136 4096 4096 NT_STATUS_OK
ReadX 10824 324 4096 4096 NT_STATUS_OK
ReadX 10824 1156 4096 4096 NT_STATUS_OK
ReadX 10824 1172 4096 4096 NT_STATUS_OK
ReadX 10824 2112 4096 4096 NT_STATUS_OK
ReadX 10824 2368 4096 4096 NT_STATUS_OK
ReadX 10824 964 4096 4096 NT_STATUS_OK
ReadX 10824 980 4096 4096 NT_STATUS_OK
ReadX 10824 1012 4096 4096 NT_STATUS_OK
ReadX 10824 532 4096 4096 NT_STATUS_OK
ReadX 10824 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10824 1620 4096 4096 NT_STATUS_OK
ReadX 10824 1604 4096 4096 NT_STATUS_OK
ReadX 10824 2116 4096 4096 NT_STATUS_OK
ReadX 10824 2132 4096 4096 NT_STATUS_OK
ReadX 10824 2148 4096 4096 NT_STATUS_OK
ReadX 10824 2276 4096 4096 NT_STATUS_OK
ReadX 10824 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10849 NT_STATUS_OK
QUERY_FILE_INFORMATION 10804 1004 NT_STATUS_OK
Close 10804 NT_STATUS_OK
WriteX 10849 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10849 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 1004 NT_STATUS_OK
Close 10806 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 64850 64850 NT_STATUS_OK
Close 10849 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10851 NT_STATUS_OK
WriteX 10851 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10851 258 NT_STATUS_OK
ReadX 10824 2068 4096 4096 NT_STATUS_OK
ReadX 10824 1588 4096 4096 NT_STATUS_OK
ReadX 10824 1572 4096 4096 NT_STATUS_OK
WriteX 10851 0 18630 18630 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10824 612 4096 4096 NT_STATUS_OK
ReadX 10824 564 4096 4096 NT_STATUS_OK
ReadX 10824 1876 4096 4096 NT_STATUS_OK
ReadX 10824 628 4096 4096 NT_STATUS_OK
ReadX 10824 740 4096 4096 NT_STATUS_OK
ReadX 10824 724 4096 4096 NT_STATUS_OK
ReadX 10824 644 4096 4096 NT_STATUS_OK
ReadX 10824 2324 4096 4096 NT_STATUS_OK
ReadX 10824 660 4096 4096 NT_STATUS_OK
ReadX 10824 852 4096 4096 NT_STATUS_OK
ReadX 10824 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10824 2368 4096 4096 NT_STATUS_OK
ReadX 10824 1024 4096 4096 NT_STATUS_OK
ReadX 10824 320 4096 4096 NT_STATUS_OK
ReadX 10824 580 4096 4096 NT_STATUS_OK
ReadX 10824 3136 512 512 NT_STATUS_OK
ReadX 10824 2880 4096 4096 NT_STATUS_OK
Close 10824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 61440 4096 4096 NT_STATUS_OK
ReadX 10856 126976 4096 4096 NT_STATUS_OK
WriteX 10856 0 65536 65536 NT_STATUS_OK
WriteX 10856 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 61440 4096 4096 NT_STATUS_OK
ReadX 10857 126976 4096 4096 NT_STATUS_OK
ReadX 10857 192512 4096 4096 NT_STATUS_OK
ReadX 10857 258048 4096 4096 NT_STATUS_OK
WriteX 10857 0 65536 65536 NT_STATUS_OK
WriteX 10857 65536 65536 65536 NT_STATUS_OK
WriteX 10857 131072 65536 65536 NT_STATUS_OK
WriteX 10857 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10858 NT_STATUS_OK
ReadX 10858 61440 4096 4096 NT_STATUS_OK
ReadX 10858 126976 4096 4096 NT_STATUS_OK
ReadX 10858 192512 4096 4096 NT_STATUS_OK
ReadX 10858 258048 4096 4096 NT_STATUS_OK
ReadX 10858 323584 4096 4096 NT_STATUS_OK
ReadX 10858 389120 4096 4096 NT_STATUS_OK
ReadX 10858 454656 4096 4096 NT_STATUS_OK
ReadX 10858 520192 4096 4096 NT_STATUS_OK
WriteX 10858 0 65536 65536 NT_STATUS_OK
WriteX 10858 65536 65536 65536 NT_STATUS_OK
WriteX 10858 131072 65536 65536 NT_STATUS_OK
WriteX 10858 196608 65536 65536 NT_STATUS_OK
WriteX 10858 262144 65536 65536 NT_STATUS_OK
WriteX 10858 327680 65536 65536 NT_STATUS_OK
WriteX 10858 393216 65536 65536 NT_STATUS_OK
WriteX 10858 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10861 NT_STATUS_OK
WriteX 10861 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10859 0 8192 8192 NT_STATUS_OK
Flush 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10859 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10859 0 8192 8192 NT_STATUS_OK
Flush 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10855 NT_STATUS_OK
Close 10823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10857 NT_STATUS_OK
Close 10858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10859 0 8192 8192 NT_STATUS_OK
Flush 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10859 0 8192 8192 NT_STATUS_OK
Flush 10859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10866 NT_STATUS_OK
WriteX 10866 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10866 258 NT_STATUS_OK
WriteX 10866 0 62591 62591 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10868 NT_STATUS_OK
Close 10868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10871 NT_STATUS_OK
WriteX 10871 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10871 258 NT_STATUS_OK
WriteX 10871 0 10845 10845 NT_STATUS_OK
Close 10871 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10873 NT_STATUS_OK
Close 10873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10876 NT_STATUS_OK
WriteX 10876 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10876 258 NT_STATUS_OK
WriteX 10876 0 30118 30118 NT_STATUS_OK
Close 10876 NT_STATUS_OK
WriteX 10859 0 4096 4096 NT_STATUS_OK
WriteX 10861 0 64 64 NT_STATUS_OK
Close 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10878 NT_STATUS_OK
ReadX 10878 0 61440 61440 NT_STATUS_OK
ReadX 10878 61440 4096 4096 NT_STATUS_OK
ReadX 10878 65536 61440 61440 NT_STATUS_OK
ReadX 10878 126976 4096 4096 NT_STATUS_OK
ReadX 10878 131072 61440 61440 NT_STATUS_OK
ReadX 10878 192512 4096 4096 NT_STATUS_OK
ReadX 10878 196608 61440 61440 NT_STATUS_OK
ReadX 10878 258048 4096 4096 NT_STATUS_OK
ReadX 10878 262144 61440 61440 NT_STATUS_OK
ReadX 10878 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 61440 61440 NT_STATUS_OK
ReadX 10879 61440 4096 4096 NT_STATUS_OK
ReadX 10879 65536 61440 61440 NT_STATUS_OK
ReadX 10879 126976 4096 4096 NT_STATUS_OK
ReadX 10879 131072 61440 61440 NT_STATUS_OK
ReadX 10879 192512 4096 4096 NT_STATUS_OK
ReadX 10879 196608 61440 61440 NT_STATUS_OK
ReadX 10879 258048 4096 4096 NT_STATUS_OK
ReadX 10879 262144 61440 61440 NT_STATUS_OK
ReadX 10879 323584 4096 4096 NT_STATUS_OK
ReadX 10879 327680 61440 61440 NT_STATUS_OK
ReadX 10879 389120 4096 4096 NT_STATUS_OK
ReadX 10879 393216 61440 61440 NT_STATUS_OK
ReadX 10879 454656 4096 4096 NT_STATUS_OK
ReadX 10879 458752 61440 61440 NT_STATUS_OK
ReadX 10879 520192 4096 4096 NT_STATUS_OK
ReadX 10879 524288 61440 61440 NT_STATUS_OK
ReadX 10879 585728 4096 4096 NT_STATUS_OK
ReadX 10879 589824 61440 61440 NT_STATUS_OK
ReadX 10879 651264 4096 4096 NT_STATUS_OK
ReadX 10879 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 61440 61440 NT_STATUS_OK
ReadX 10880 61440 4096 4096 NT_STATUS_OK
ReadX 10880 65536 61440 61440 NT_STATUS_OK
ReadX 10880 126976 4096 4096 NT_STATUS_OK
ReadX 10880 131072 61440 61440 NT_STATUS_OK
ReadX 10880 192512 4096 4096 NT_STATUS_OK
ReadX 10880 196608 61440 61440 NT_STATUS_OK
ReadX 10880 258048 4096 4096 NT_STATUS_OK
ReadX 10880 262144 61440 61440 NT_STATUS_OK
ReadX 10880 323584 4096 4096 NT_STATUS_OK
ReadX 10880 327680 61440 61440 NT_STATUS_OK
ReadX 10880 389120 4096 4096 NT_STATUS_OK
ReadX 10880 393216 61440 61440 NT_STATUS_OK
ReadX 10880 454656 4096 4096 NT_STATUS_OK
ReadX 10880 458752 61440 61440 NT_STATUS_OK
ReadX 10880 520192 4096 4096 NT_STATUS_OK
ReadX 10880 524288 61440 61440 NT_STATUS_OK
ReadX 10880 585728 4096 4096 NT_STATUS_OK
ReadX 10880 589824 61440 61440 NT_STATUS_OK
ReadX 10880 651264 4096 4096 NT_STATUS_OK
ReadX 10880 655360 61440 61440 NT_STATUS_OK
ReadX 10880 716800 4096 4096 NT_STATUS_OK
ReadX 10880 720896 61440 61440 NT_STATUS_OK
ReadX 10880 782336 4096 4096 NT_STATUS_OK
ReadX 10880 786432 61440 61440 NT_STATUS_OK
ReadX 10880 847872 4096 4096 NT_STATUS_OK
ReadX 10880 851968 61440 61440 NT_STATUS_OK
ReadX 10880 913408 4096 4096 NT_STATUS_OK
ReadX 10880 917504 61440 61440 NT_STATUS_OK
ReadX 10880 978944 4096 4096 NT_STATUS_OK
ReadX 10880 983040 61440 61440 NT_STATUS_OK
ReadX 10880 1044480 4096 4096 NT_STATUS_OK
ReadX 10880 1048576 61440 61440 NT_STATUS_OK
ReadX 10880 1110016 4096 4096 NT_STATUS_OK
ReadX 10880 1114112 61440 61440 NT_STATUS_OK
ReadX 10880 1175552 4096 4096 NT_STATUS_OK
ReadX 10880 1179648 61440 61440 NT_STATUS_OK
ReadX 10880 1241088 4096 4096 NT_STATUS_OK
ReadX 10880 1245184 61440 61440 NT_STATUS_OK
ReadX 10880 1306624 4096 4096 NT_STATUS_OK
ReadX 10880 1310720 61440 61440 NT_STATUS_OK
ReadX 10880 1372160 4096 4096 NT_STATUS_OK
ReadX 10880 1376256 61440 61440 NT_STATUS_OK
ReadX 10880 1437696 4096 4096 NT_STATUS_OK
ReadX 10880 1441792 61440 61440 NT_STATUS_OK
ReadX 10880 1503232 4096 4096 NT_STATUS_OK
ReadX 10880 1507328 61440 61440 NT_STATUS_OK
ReadX 10880 1568768 4096 4096 NT_STATUS_OK
ReadX 10880 1572864 61440 61440 NT_STATUS_OK
ReadX 10880 1634304 4096 4096 NT_STATUS_OK
ReadX 10880 1638400 61440 61440 NT_STATUS_OK
ReadX 10880 1699840 4096 4096 NT_STATUS_OK
ReadX 10880 1703936 61440 61440 NT_STATUS_OK
ReadX 10880 1765376 4096 4096 NT_STATUS_OK
ReadX 10880 1769472 61440 61440 NT_STATUS_OK
ReadX 10880 1830912 4096 4096 NT_STATUS_OK
ReadX 10880 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10878 NT_STATUS_OK
Close 10879 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
ReadX 10885 4096 4096 4096 NT_STATUS_OK
ReadX 10885 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10886 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10889 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10890 NT_STATUS_OK
Close 10890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 8192 8192 NT_STATUS_OK
ReadX 10893 8192 8192 8192 NT_STATUS_OK
ReadX 10893 16384 8192 8192 NT_STATUS_OK
ReadX 10893 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10898 NT_STATUS_OK
WriteX 10898 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
WriteX 10898 0 10438 10438 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10899 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10901 NT_STATUS_OK
Close 10901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10902 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10904 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10906 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
ReadX 10907 4096 4096 4096 NT_STATUS_OK
ReadX 10907 8192 4096 4096 NT_STATUS_OK
ReadX 10907 12288 8192 8192 NT_STATUS_OK
ReadX 10907 20480 8192 8192 NT_STATUS_OK
ReadX 10907 28672 8192 8192 NT_STATUS_OK
ReadX 10907 36864 8192 8192 NT_STATUS_OK
ReadX 10907 45056 8192 8192 NT_STATUS_OK
ReadX 10907 53248 8192 8192 NT_STATUS_OK
ReadX 10907 61440 8192 8192 NT_STATUS_OK
ReadX 10907 69632 8192 8192 NT_STATUS_OK
ReadX 10907 77824 8192 8192 NT_STATUS_OK
ReadX 10907 86016 8192 8192 NT_STATUS_OK
ReadX 10907 94208 8192 8192 NT_STATUS_OK
ReadX 10907 102400 8192 8192 NT_STATUS_OK
ReadX 10907 110592 8192 8192 NT_STATUS_OK
ReadX 10907 118784 8192 8192 NT_STATUS_OK
ReadX 10907 126976 8192 8192 NT_STATUS_OK
ReadX 10907 135168 8192 8192 NT_STATUS_OK
ReadX 10907 143360 8192 8192 NT_STATUS_OK
ReadX 10907 151552 8192 8192 NT_STATUS_OK
ReadX 10907 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10909 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10912 NT_STATUS_OK
WriteX 10912 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 258 NT_STATUS_OK
WriteX 10912 0 28489 28489 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10913 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10915 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10915 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 8192 8192 NT_STATUS_OK
ReadX 10919 8192 8192 8192 NT_STATUS_OK
ReadX 10919 16384 8192 8192 NT_STATUS_OK
ReadX 10919 24576 8192 8192 NT_STATUS_OK
ReadX 10919 32768 16384 16384 NT_STATUS_OK
ReadX 10919 49152 8192 8192 NT_STATUS_OK
ReadX 10919 57344 8192 8192 NT_STATUS_OK
ReadX 10919 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10921 NT_STATUS_OK
Close 10921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10924 NT_STATUS_OK
WriteX 10924 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10924 258 NT_STATUS_OK
WriteX 10924 0 29253 29253 NT_STATUS_OK
Close 10924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10925 NT_STATUS_OK
Close 10925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10928 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10931 NT_STATUS_OK
WriteX 10931 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10931 258 NT_STATUS_OK
WriteX 10931 0 30183 30183 NT_STATUS_OK
Close 10931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10934 NT_STATUS_OK
WriteX 10934 0 510 510 NT_STATUS_OK
WriteX 10934 510 512 512 NT_STATUS_OK
WriteX 10934 1022 510 510 NT_STATUS_OK
WriteX 10934 1532 510 510 NT_STATUS_OK
WriteX 10934 2042 168 168 NT_STATUS_OK
Close 10934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10935 NT_STATUS_OK
Close 10935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
WriteX 10937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 61440 4096 4096 NT_STATUS_OK
ReadX 10938 126976 4096 4096 NT_STATUS_OK
WriteX 10938 0 65536 65536 NT_STATUS_OK
WriteX 10938 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 61440 4096 4096 NT_STATUS_OK
ReadX 10939 126976 4096 4096 NT_STATUS_OK
ReadX 10939 192512 4096 4096 NT_STATUS_OK
ReadX 10939 258048 4096 4096 NT_STATUS_OK
WriteX 10939 0 65536 65536 NT_STATUS_OK
WriteX 10939 65536 65536 65536 NT_STATUS_OK
WriteX 10939 131072 65536 65536 NT_STATUS_OK
WriteX 10939 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 61440 4096 4096 NT_STATUS_OK
ReadX 10940 126976 4096 4096 NT_STATUS_OK
ReadX 10940 192512 4096 4096 NT_STATUS_OK
ReadX 10940 258048 4096 4096 NT_STATUS_OK
ReadX 10940 323584 4096 4096 NT_STATUS_OK
ReadX 10940 389120 4096 4096 NT_STATUS_OK
ReadX 10940 454656 4096 4096 NT_STATUS_OK
ReadX 10940 520192 4096 4096 NT_STATUS_OK
WriteX 10940 0 65536 65536 NT_STATUS_OK
WriteX 10940 65536 65536 65536 NT_STATUS_OK
WriteX 10940 131072 65536 65536 NT_STATUS_OK
WriteX 10940 196608 65536 65536 NT_STATUS_OK
WriteX 10940 262144 65536 65536 NT_STATUS_OK
WriteX 10940 327680 65536 65536 NT_STATUS_OK
WriteX 10940 393216 65536 65536 NT_STATUS_OK
WriteX 10940 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10943 NT_STATUS_OK
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10950 NT_STATUS_OK
Close 10950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10959 NT_STATUS_OK
Close 10959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10961 NT_STATUS_OK
Close 10961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10965 NT_STATUS_OK
Close 10965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10970 NT_STATUS_OK
Close 10970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10980 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10985 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10995 NT_STATUS_OK
Close 10995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11009 NT_STATUS_OK
WriteX 11009 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11009 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11009 0 65536 65536 NT_STATUS_OK
WriteX 11009 65536 65536 65536 NT_STATUS_OK
WriteX 11009 131072 65536 65536 NT_STATUS_OK
WriteX 11009 196608 65536 65536 NT_STATUS_OK
WriteX 11009 262144 26634 26634 NT_STATUS_OK
Close 11009 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11014 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
ReadX 11017 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11022 NT_STATUS_OK
Close 11022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11027 NT_STATUS_OK
Close 11027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11034 NT_STATUS_OK
Close 11034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11040 NT_STATUS_OK
Close 11040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11050 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11055 NT_STATUS_OK
Close 11055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11082 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11094 NT_STATUS_OK
Close 11094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
Close 11096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
Close 11097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11108 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 4096 4096 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
ReadX 11143 4096 4096 4096 NT_STATUS_OK
ReadX 11143 8192 4096 4096 NT_STATUS_OK
ReadX 11143 12288 4096 4096 NT_STATUS_OK
ReadX 11143 16384 4096 4096 NT_STATUS_OK
ReadX 11143 20480 4096 4096 NT_STATUS_OK
ReadX 11143 24576 4096 4096 NT_STATUS_OK
ReadX 11143 28672 4096 4096 NT_STATUS_OK
ReadX 11143 32768 4096 4096 NT_STATUS_OK
ReadX 11143 36864 4096 4096 NT_STATUS_OK
ReadX 11143 40960 4096 4096 NT_STATUS_OK
ReadX 11143 45056 4096 4096 NT_STATUS_OK
ReadX 11143 49152 4096 4096 NT_STATUS_OK
ReadX 11143 53248 4096 4096 NT_STATUS_OK
ReadX 11143 57344 4096 4096 NT_STATUS_OK
ReadX 11143 61440 4096 4096 NT_STATUS_OK
ReadX 11143 65536 4096 4096 NT_STATUS_OK
ReadX 11143 69632 4096 4096 NT_STATUS_OK
ReadX 11143 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11143 1004 NT_STATUS_OK
WriteX 11143 0 4096 4096 NT_STATUS_OK
Close 11143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11144 NT_STATUS_OK
SET_FILE_INFORMATION 11144 1004 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11146 NT_STATUS_OK
Close 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11149 NT_STATUS_OK
WriteX 11149 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11149 258 NT_STATUS_OK
WriteX 11149 0 65536 65536 NT_STATUS_OK
WriteX 11149 65536 19979 19979 NT_STATUS_OK
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 1004 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
SET_FILE_INFORMATION 11150 1004 NT_STATUS_OK
WriteX 11150 0 4096 4096 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 4096 4096 NT_STATUS_OK
Close 11153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11154 NT_STATUS_OK
ReadX 11154 0 4096 4096 NT_STATUS_OK
Close 11154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11155 NT_STATUS_OK
ReadX 11155 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11155 1004 NT_STATUS_OK
WriteX 11155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Close 11145 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11161 NT_STATUS_OK
WriteX 11161 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11161 258 NT_STATUS_OK
WriteX 11161 0 65536 65536 NT_STATUS_OK
WriteX 11161 65536 17654 17654 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 1004 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
SET_FILE_INFORMATION 11162 1004 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11163 NT_STATUS_OK
SET_FILE_INFORMATION 11163 1004 NT_STATUS_OK
Close 11163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11165 NT_STATUS_OK
Close 11165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
ReadX 11167 4096 4096 4096 NT_STATUS_OK
ReadX 11167 8192 4096 4096 NT_STATUS_OK
ReadX 11167 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11167 16384 4096 4096 NT_STATUS_OK
ReadX 11167 20480 4096 4096 NT_STATUS_OK
ReadX 11167 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
Close 11168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
Close 11169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11170 1004 NT_STATUS_OK
WriteX 11170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11173 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11176 NT_STATUS_OK
WriteX 11176 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11176 258 NT_STATUS_OK
WriteX 11176 0 65536 65536 NT_STATUS_OK
WriteX 11176 65536 19490 19490 NT_STATUS_OK
Close 11176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 0 4096 4096 NT_STATUS_OK
WriteX 11177 0 4096 4096 NT_STATUS_OK
Flush 11177 NT_STATUS_OK
WriteX 11177 0 4096 4096 NT_STATUS_OK
Flush 11177 NT_STATUS_OK
QUERY_FILE_INFORMATION 11177 1004 NT_STATUS_OK
WriteX 11177 0 4096 4096 NT_STATUS_OK
Flush 11177 NT_STATUS_OK
WriteX 11177 0 4096 4096 NT_STATUS_OK
Flush 11177 NT_STATUS_OK
WriteX 11177 0 4096 4096 NT_STATUS_OK
Flush 11177 NT_STATUS_OK
SET_FILE_INFORMATION 11177 1004 NT_STATUS_OK
WriteX 11177 0 4096 4096 NT_STATUS_OK
Flush 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11178 NT_STATUS_OK
SET_FILE_INFORMATION 11178 1004 NT_STATUS_OK
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11180 NT_STATUS_OK
Close 11180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11182 0 4096 4096 NT_STATUS_OK
Close 11182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
ReadX 11184 4096 4096 4096 NT_STATUS_OK
ReadX 11184 8192 4096 4096 NT_STATUS_OK
ReadX 11184 12288 4096 4096 NT_STATUS_OK
ReadX 11184 16384 4096 4096 NT_STATUS_OK
ReadX 11184 20480 4096 4096 NT_STATUS_OK
ReadX 11184 24576 4096 4096 NT_STATUS_OK
ReadX 11184 28672 4096 4096 NT_STATUS_OK
ReadX 11184 32768 4096 4096 NT_STATUS_OK
ReadX 11184 36864 4096 4096 NT_STATUS_OK
ReadX 11184 40960 4096 4096 NT_STATUS_OK
ReadX 11184 45056 4096 4096 NT_STATUS_OK
ReadX 11184 49152 4096 4096 NT_STATUS_OK
ReadX 11184 53248 4096 4096 NT_STATUS_OK
ReadX 11184 57344 4096 4096 NT_STATUS_OK
ReadX 11184 61440 4096 4096 NT_STATUS_OK
ReadX 11184 65536 4096 4096 NT_STATUS_OK
ReadX 11184 69632 4096 4096 NT_STATUS_OK
ReadX 11184 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11184 1004 NT_STATUS_OK
WriteX 11184 0 4096 4096 NT_STATUS_OK
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11185 NT_STATUS_OK
SET_FILE_INFORMATION 11185 1004 NT_STATUS_OK
Close 11185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11187 NT_STATUS_OK
Close 11187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11190 NT_STATUS_OK
WriteX 11190 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
WriteX 11190 0 65536 65536 NT_STATUS_OK
WriteX 11190 65536 8866 8866 NT_STATUS_OK
Close 11190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
WriteX 11191 0 4096 4096 NT_STATUS_OK
Flush 11191 NT_STATUS_OK
SET_FILE_INFORMATION 11191 1004 NT_STATUS_OK
WriteX 11191 0 4096 4096 NT_STATUS_OK
Flush 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11193 NT_STATUS_OK
ReadX 11193 0 4096 4096 NT_STATUS_OK
Close 11193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
Close 11194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
WriteX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11198 NT_STATUS_OK
Close 11198 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11201 NT_STATUS_OK
WriteX 11201 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11201 258 NT_STATUS_OK
WriteX 11201 0 65536 65536 NT_STATUS_OK
WriteX 11201 65536 9298 9298 NT_STATUS_OK
Close 11201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
WriteX 11202 0 4096 4096 NT_STATUS_OK
Flush 11202 NT_STATUS_OK
SET_FILE_INFORMATION 11202 1004 NT_STATUS_OK
WriteX 11202 0 4096 4096 NT_STATUS_OK
Flush 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11203 NT_STATUS_OK
SET_FILE_INFORMATION 11203 1004 NT_STATUS_OK
Close 11203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11205 NT_STATUS_OK
Close 11205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11208 0 4096 4096 NT_STATUS_OK
Close 11208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11209 4096 4096 4096 NT_STATUS_OK
ReadX 11209 8192 4096 4096 NT_STATUS_OK
ReadX 11209 12288 4096 4096 NT_STATUS_OK
ReadX 11209 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11210 NT_STATUS_OK
ReadX 11210 0 4096 4096 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11212 1004 NT_STATUS_OK
WriteX 11212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11213 NT_STATUS_OK
Close 11213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11218 NT_STATUS_OK
WriteX 11218 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 258 NT_STATUS_OK
WriteX 11218 0 65536 65536 NT_STATUS_OK
WriteX 11218 65536 11540 11540 NT_STATUS_OK
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 4096 4096 NT_STATUS_OK
WriteX 11219 0 4096 4096 NT_STATUS_OK
Flush 11219 NT_STATUS_OK
SET_FILE_INFORMATION 11219 1004 NT_STATUS_OK
WriteX 11219 0 4096 4096 NT_STATUS_OK
Flush 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11220 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
Close 11220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11224 NT_STATUS_OK
ReadX 11224 61440 4096 4096 NT_STATUS_OK
ReadX 11224 126976 4096 4096 NT_STATUS_OK
WriteX 11224 0 65536 65536 NT_STATUS_OK
WriteX 11224 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 61440 4096 4096 NT_STATUS_OK
ReadX 11225 126976 4096 4096 NT_STATUS_OK
ReadX 11225 192512 4096 4096 NT_STATUS_OK
ReadX 11225 258048 4096 4096 NT_STATUS_OK
WriteX 11225 0 65536 65536 NT_STATUS_OK
WriteX 11225 65536 65536 65536 NT_STATUS_OK
WriteX 11225 131072 65536 65536 NT_STATUS_OK
WriteX 11225 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11226 NT_STATUS_OK
ReadX 11226 61440 4096 4096 NT_STATUS_OK
ReadX 11226 126976 4096 4096 NT_STATUS_OK
ReadX 11226 192512 4096 4096 NT_STATUS_OK
ReadX 11226 258048 4096 4096 NT_STATUS_OK
ReadX 11226 323584 4096 4096 NT_STATUS_OK
ReadX 11226 389120 4096 4096 NT_STATUS_OK
ReadX 11226 454656 4096 4096 NT_STATUS_OK
ReadX 11226 520192 4096 4096 NT_STATUS_OK
WriteX 11226 0 65536 65536 NT_STATUS_OK
WriteX 11226 65536 65536 65536 NT_STATUS_OK
WriteX 11226 131072 65536 65536 NT_STATUS_OK
WriteX 11226 196608 65536 65536 NT_STATUS_OK
WriteX 11226 262144 65536 65536 NT_STATUS_OK
WriteX 11226 327680 65536 65536 NT_STATUS_OK
WriteX 11226 393216 65536 65536 NT_STATUS_OK
WriteX 11226 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
ReadX 11227 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11228 NT_STATUS_OK
WriteX 11228 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11228 258 NT_STATUS_OK
WriteX 11228 0 53 53 NT_STATUS_OK
Close 11228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11227 8192 4096 4096 NT_STATUS_OK
ReadX 11227 12288 4096 4096 NT_STATUS_OK
WriteX 11231 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11231 258 NT_STATUS_OK
ReadX 11227 16384 4096 4096 NT_STATUS_OK
ReadX 11227 20480 4096 4096 NT_STATUS_OK
WriteX 11231 0 15360 15360 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11232 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11232 1004 NT_STATUS_OK
WriteX 11232 0 4096 4096 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11235 4096 4096 4096 NT_STATUS_OK
ReadX 11235 8192 4096 4096 NT_STATUS_OK
ReadX 11235 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
ReadX 11238 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
ReadX 11239 4096 4096 4096 NT_STATUS_OK
ReadX 11239 8192 4096 4096 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11240 NT_STATUS_OK
WriteX 11240 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11240 258 NT_STATUS_OK
WriteX 11240 0 15360 15360 NT_STATUS_OK
Close 11240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11241 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11241 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11242 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11245 NT_STATUS_OK
SET_FILE_INFORMATION 11245 1004 NT_STATUS_OK
Close 11245 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
ReadX 11248 4096 4096 4096 NT_STATUS_OK
ReadX 11248 8192 4096 4096 NT_STATUS_OK
ReadX 11248 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11248 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11248 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11250 NT_STATUS_OK
WriteX 11250 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 258 NT_STATUS_OK
WriteX 11250 0 53 53 NT_STATUS_OK
Close 11250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11249 4096 4096 4096 NT_STATUS_OK
ReadX 11249 8192 4096 4096 NT_STATUS_OK
ReadX 11249 12288 4096 4096 NT_STATUS_OK
WriteX 11253 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 258 NT_STATUS_OK
WriteX 11253 0 12006 12006 NT_STATUS_OK
Close 11253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11254 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11254 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11255 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11258 NT_STATUS_OK
Close 11258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11257 4096 4096 4096 NT_STATUS_OK
ReadX 11257 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11260 NT_STATUS_OK
WriteX 11260 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11260 258 NT_STATUS_OK
WriteX 11260 0 11991 11991 NT_STATUS_OK
Close 11260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11261 NT_STATUS_OK
ReadX 11261 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11261 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11261 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11262 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11264 NT_STATUS_OK
ReadX 11264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11265 NT_STATUS_OK
SET_FILE_INFORMATION 11265 1004 NT_STATUS_OK
Close 11265 NT_STATUS_OK
WriteX 11261 0 4096 4096 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11268 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11268 1004 NT_STATUS_OK
ReadX 11268 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11268 1004 NT_STATUS_OK
WriteX 11268 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11268 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11268 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11268 1004 NT_STATUS_OK
Close 11244 NT_STATUS_OK
WriteX 11248 0 19054 19054 NT_STATUS_OK
WriteX 11268 0 12288 12288 NT_STATUS_OK
Close 11264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 0 61440 61440 NT_STATUS_OK
ReadX 11275 61440 4096 4096 NT_STATUS_OK
ReadX 11275 65536 61440 61440 NT_STATUS_OK
ReadX 11275 126976 4096 4096 NT_STATUS_OK
ReadX 11275 131072 61440 61440 NT_STATUS_OK
ReadX 11275 192512 4096 4096 NT_STATUS_OK
ReadX 11275 196608 61440 61440 NT_STATUS_OK
ReadX 11275 258048 4096 4096 NT_STATUS_OK
ReadX 11275 262144 61440 61440 NT_STATUS_OK
ReadX 11275 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 61440 61440 NT_STATUS_OK
ReadX 11276 61440 4096 4096 NT_STATUS_OK
ReadX 11276 65536 61440 61440 NT_STATUS_OK
ReadX 11276 126976 4096 4096 NT_STATUS_OK
ReadX 11276 131072 61440 61440 NT_STATUS_OK
ReadX 11276 192512 4096 4096 NT_STATUS_OK
ReadX 11276 196608 61440 61440 NT_STATUS_OK
ReadX 11276 258048 4096 4096 NT_STATUS_OK
ReadX 11276 262144 61440 61440 NT_STATUS_OK
ReadX 11276 323584 4096 4096 NT_STATUS_OK
ReadX 11276 327680 61440 61440 NT_STATUS_OK
ReadX 11276 389120 4096 4096 NT_STATUS_OK
ReadX 11276 393216 61440 61440 NT_STATUS_OK
ReadX 11276 454656 4096 4096 NT_STATUS_OK
ReadX 11276 458752 61440 61440 NT_STATUS_OK
ReadX 11276 520192 4096 4096 NT_STATUS_OK
ReadX 11276 524288 61440 61440 NT_STATUS_OK
ReadX 11276 585728 4096 4096 NT_STATUS_OK
ReadX 11276 589824 61440 61440 NT_STATUS_OK
ReadX 11276 651264 4096 4096 NT_STATUS_OK
ReadX 11276 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 61440 61440 NT_STATUS_OK
ReadX 11277 61440 4096 4096 NT_STATUS_OK
ReadX 11277 65536 61440 61440 NT_STATUS_OK
ReadX 11277 126976 4096 4096 NT_STATUS_OK
ReadX 11277 131072 61440 61440 NT_STATUS_OK
ReadX 11277 192512 4096 4096 NT_STATUS_OK
ReadX 11277 196608 61440 61440 NT_STATUS_OK
ReadX 11277 258048 4096 4096 NT_STATUS_OK
ReadX 11277 262144 61440 61440 NT_STATUS_OK
ReadX 11277 323584 4096 4096 NT_STATUS_OK
ReadX 11277 327680 61440 61440 NT_STATUS_OK
ReadX 11277 389120 4096 4096 NT_STATUS_OK
ReadX 11277 393216 61440 61440 NT_STATUS_OK
ReadX 11277 454656 4096 4096 NT_STATUS_OK
ReadX 11277 458752 61440 61440 NT_STATUS_OK
ReadX 11277 520192 4096 4096 NT_STATUS_OK
ReadX 11277 524288 61440 61440 NT_STATUS_OK
ReadX 11277 585728 4096 4096 NT_STATUS_OK
ReadX 11277 589824 61440 61440 NT_STATUS_OK
ReadX 11277 651264 4096 4096 NT_STATUS_OK
ReadX 11277 655360 61440 61440 NT_STATUS_OK
ReadX 11277 716800 4096 4096 NT_STATUS_OK
ReadX 11277 720896 61440 61440 NT_STATUS_OK
ReadX 11277 782336 4096 4096 NT_STATUS_OK
ReadX 11277 786432 61440 61440 NT_STATUS_OK
ReadX 11277 847872 4096 4096 NT_STATUS_OK
ReadX 11277 851968 61440 61440 NT_STATUS_OK
ReadX 11277 913408 4096 4096 NT_STATUS_OK
ReadX 11277 917504 61440 61440 NT_STATUS_OK
ReadX 11277 978944 4096 4096 NT_STATUS_OK
ReadX 11277 983040 61440 61440 NT_STATUS_OK
ReadX 11277 1044480 4096 4096 NT_STATUS_OK
ReadX 11277 1048576 61440 61440 NT_STATUS_OK
ReadX 11277 1110016 4096 4096 NT_STATUS_OK
ReadX 11277 1114112 61440 61440 NT_STATUS_OK
ReadX 11277 1175552 4096 4096 NT_STATUS_OK
ReadX 11277 1179648 61440 61440 NT_STATUS_OK
ReadX 11277 1241088 4096 4096 NT_STATUS_OK
ReadX 11277 1245184 61440 61440 NT_STATUS_OK
ReadX 11277 1306624 4096 4096 NT_STATUS_OK
ReadX 11277 1310720 61440 61440 NT_STATUS_OK
ReadX 11277 1372160 4096 4096 NT_STATUS_OK
ReadX 11277 1376256 61440 61440 NT_STATUS_OK
ReadX 11277 1437696 4096 4096 NT_STATUS_OK
ReadX 11277 1441792 61440 61440 NT_STATUS_OK
ReadX 11277 1503232 4096 4096 NT_STATUS_OK
ReadX 11277 1507328 61440 61440 NT_STATUS_OK
ReadX 11277 1568768 4096 4096 NT_STATUS_OK
ReadX 11277 1572864 61440 61440 NT_STATUS_OK
ReadX 11277 1634304 4096 4096 NT_STATUS_OK
ReadX 11277 1638400 61440 61440 NT_STATUS_OK
ReadX 11277 1699840 4096 4096 NT_STATUS_OK
ReadX 11277 1703936 61440 61440 NT_STATUS_OK
ReadX 11277 1765376 4096 4096 NT_STATUS_OK
ReadX 11277 1769472 61440 61440 NT_STATUS_OK
ReadX 11277 1830912 4096 4096 NT_STATUS_OK
ReadX 11277 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11279 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11284 NT_STATUS_OK
QUERY_FILE_INFORMATION 11284 1004 NT_STATUS_OK
WriteX 11284 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11284 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11285 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11286 NT_STATUS_OK
WriteX 11286 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 258 NT_STATUS_OK
WriteX 11286 0 491 491 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11284 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11290 NT_STATUS_OK
WriteX 11290 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11290 258 NT_STATUS_OK
WriteX 11290 0 543 543 NT_STATUS_OK
Close 11290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11297 NT_STATUS_OK
ReadX 11297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11298 NT_STATUS_OK
ReadX 11298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11299 NT_STATUS_OK
ReadX 11299 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11304 NT_STATUS_OK
QUERY_FILE_INFORMATION 11304 1004 NT_STATUS_OK
WriteX 11304 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11304 258 NT_STATUS_OK
WriteX 11304 0 2048 2048 NT_STATUS_OK
Close 11304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11305 0 4096 4096 NT_STATUS_OK
Flush 11305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11305 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11309 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11310 NT_STATUS_OK
WriteX 11310 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11310 258 NT_STATUS_OK
WriteX 11310 0 2048 2048 NT_STATUS_OK
Close 11310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11316 NT_STATUS_OK
WriteX 11316 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11316 258 NT_STATUS_OK
WriteX 11316 0 2048 2048 NT_STATUS_OK
Close 11316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11317 NT_STATUS_OK
ReadX 11317 0 2048 2048 NT_STATUS_OK
ReadX 11295 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11299 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
WriteX 11295 0 8192 8192 NT_STATUS_OK
WriteX 11296 0 4096 4096 NT_STATUS_OK
WriteX 11297 0 4096 4096 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11320 NT_STATUS_OK
ReadX 11320 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11321 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11320 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Close 11297 NT_STATUS_OK
Close 11298 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11341 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 258 NT_STATUS_OK
WriteX 11341 0 2048 2048 NT_STATUS_OK
Close 11341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11343 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11344 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11349 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 1004 NT_STATUS_OK
WriteX 11349 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
WriteX 11349 0 2048 2048 NT_STATUS_OK
Close 11349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11342 0 4096 4096 NT_STATUS_OK
Flush 11342 NT_STATUS_OK
WriteX 11350 0 4096 4096 NT_STATUS_OK
Flush 11350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11342 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11350 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11344 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11352 NT_STATUS_OK
WriteX 11352 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11352 258 NT_STATUS_OK
WriteX 11352 0 4096 4096 NT_STATUS_OK
Close 11352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11353 NT_STATUS_OK
ReadX 11353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11354 NT_STATUS_OK
Close 11354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11355 NT_STATUS_OK
WriteX 11355 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11355 258 NT_STATUS_OK
WriteX 11355 0 4096 4096 NT_STATUS_OK
Close 11355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11356 NT_STATUS_OK
ReadX 11356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11356 0 4096 4096 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11362 NT_STATUS_OK
Close 11362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11363 NT_STATUS_OK
WriteX 11363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 258 NT_STATUS_OK
WriteX 11363 0 2048 2048 NT_STATUS_OK
Close 11363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11365 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11367 NT_STATUS_OK
ReadX 11367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11368 NT_STATUS_OK
ReadX 11368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11369 NT_STATUS_OK
ReadX 11369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11372 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11373 NT_STATUS_OK
ReadX 11373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11375 NT_STATUS_OK
ReadX 11375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11377 NT_STATUS_OK
ReadX 11377 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11378 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11376 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Close 11373 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Close 11375 NT_STATUS_OK
Close 11377 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Close 11367 NT_STATUS_OK
Close 11368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11380 NT_STATUS_OK
QUERY_FILE_INFORMATION 11380 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11382 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11383 NT_STATUS_OK
ReadX 11383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11384 NT_STATUS_OK
ReadX 11384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11386 NT_STATUS_OK
ReadX 11386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11387 NT_STATUS_OK
ReadX 11387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11399 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11400 NT_STATUS_OK
QUERY_FILE_INFORMATION 11400 1004 NT_STATUS_OK
WriteX 11400 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11400 258 NT_STATUS_OK
WriteX 11400 0 2048 2048 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11401 NT_STATUS_OK
ReadX 11401 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11412 NT_STATUS_OK
QUERY_FILE_INFORMATION 11412 1004 NT_STATUS_OK
WriteX 11412 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11412 258 NT_STATUS_OK
WriteX 11412 0 2048 2048 NT_STATUS_OK
Close 11412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11420 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 1004 NT_STATUS_OK
WriteX 11420 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 258 NT_STATUS_OK
WriteX 11420 0 2048 2048 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11401 0 4096 4096 NT_STATUS_OK
Flush 11401 NT_STATUS_OK
WriteX 11413 0 4096 4096 NT_STATUS_OK
Flush 11413 NT_STATUS_OK
WriteX 11421 0 4096 4096 NT_STATUS_OK
Flush 11421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11401 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11413 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11421 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11403 4096 16384 16384 NT_STATUS_OK
ReadX 11383 4096 16384 16384 NT_STATUS_OK
ReadX 11415 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 2048 2048 NT_STATUS_OK
WriteX 11423 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11424 NT_STATUS_OK
QUERY_FILE_INFORMATION 11424 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Close 11387 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Close 11384 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Close 11386 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11426 NT_STATUS_OK
QUERY_FILE_INFORMATION 11426 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11428 NT_STATUS_OK
QUERY_FILE_INFORMATION 11428 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11433 NT_STATUS_OK
ReadX 11433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11431 4096 16384 16384 NT_STATUS_OK
WriteX 11431 0 4096 4096 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
WriteX 11433 0 4096 4096 NT_STATUS_OK
WriteX 11434 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11436 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11440 NT_STATUS_OK
ReadX 11440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11445 NT_STATUS_OK
ReadX 11445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11446 NT_STATUS_OK
ReadX 11446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11449 NT_STATUS_OK
ReadX 11449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11450 NT_STATUS_OK
ReadX 11450 0 8192 8192 NT_STATUS_OK
ReadX 11437 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11451 0 4096 4096 NT_STATUS_OK
ReadX 11451 4096 4096 4096 NT_STATUS_OK
ReadX 11451 8192 4096 4096 NT_STATUS_OK
WriteX 11437 0 4096 4096 NT_STATUS_OK
WriteX 11438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
ReadX 11452 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11431 0 4096 4096 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
WriteX 11433 0 4096 4096 NT_STATUS_OK
WriteX 11434 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11456 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11457 NT_STATUS_OK
QUERY_FILE_INFORMATION 11457 1004 NT_STATUS_OK
WriteX 11457 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11457 258 NT_STATUS_OK
WriteX 11457 0 2048 2048 NT_STATUS_OK
Close 11457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11460 NT_STATUS_OK
ReadX 11460 0 4096 4096 NT_STATUS_OK
ReadX 11460 4096 4096 4096 NT_STATUS_OK
WriteX 11460 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
ReadX 11462 4096 4096 4096 NT_STATUS_OK
WriteX 11462 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11463 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11450 NT_STATUS_OK
Close 11435 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11433 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Close 11446 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11449 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Close 11440 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11465 0 4096 4096 NT_STATUS_OK
ReadX 11465 4096 4096 4096 NT_STATUS_OK
ReadX 11465 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11468 NT_STATUS_OK
ReadX 11468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11476 NT_STATUS_OK
ReadX 11476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
ReadX 11466 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11483 NT_STATUS_OK
QUERY_FILE_INFORMATION 11483 1004 NT_STATUS_OK
WriteX 11483 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11483 258 NT_STATUS_OK
WriteX 11483 0 2048 2048 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11484 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11489 NT_STATUS_OK
QUERY_FILE_INFORMATION 11489 1004 NT_STATUS_OK
WriteX 11489 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11489 258 NT_STATUS_OK
WriteX 11489 0 2048 2048 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11490 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11473 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11491 NT_STATUS_OK
QUERY_FILE_INFORMATION 11491 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11477 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11467 NT_STATUS_OK
Close 11470 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Close 11468 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11476 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11493 NT_STATUS_OK
QUERY_FILE_INFORMATION 11493 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11495 NT_STATUS_OK
ReadX 11495 61440 4096 4096 NT_STATUS_OK
ReadX 11495 126976 4096 4096 NT_STATUS_OK
WriteX 11495 0 65536 65536 NT_STATUS_OK
WriteX 11495 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 61440 4096 4096 NT_STATUS_OK
ReadX 11496 126976 4096 4096 NT_STATUS_OK
ReadX 11496 192512 4096 4096 NT_STATUS_OK
ReadX 11496 258048 4096 4096 NT_STATUS_OK
WriteX 11496 0 65536 65536 NT_STATUS_OK
WriteX 11496 65536 65536 65536 NT_STATUS_OK
WriteX 11496 131072 65536 65536 NT_STATUS_OK
WriteX 11496 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 61440 4096 4096 NT_STATUS_OK
ReadX 11497 126976 4096 4096 NT_STATUS_OK
ReadX 11497 192512 4096 4096 NT_STATUS_OK
ReadX 11497 258048 4096 4096 NT_STATUS_OK
ReadX 11497 323584 4096 4096 NT_STATUS_OK
ReadX 11497 389120 4096 4096 NT_STATUS_OK
ReadX 11497 454656 4096 4096 NT_STATUS_OK
ReadX 11497 520192 4096 4096 NT_STATUS_OK
WriteX 11497 0 65536 65536 NT_STATUS_OK
WriteX 11497 65536 65536 65536 NT_STATUS_OK
WriteX 11497 131072 65536 65536 NT_STATUS_OK
WriteX 11497 196608 65536 65536 NT_STATUS_OK
WriteX 11497 262144 65536 65536 NT_STATUS_OK
WriteX 11497 327680 65536 65536 NT_STATUS_OK
WriteX 11497 393216 65536 65536 NT_STATUS_OK
WriteX 11497 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11498 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11498 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11498 8192 4096 4096 NT_STATUS_OK
ReadX 11498 12288 4096 4096 NT_STATUS_OK
ReadX 11498 16384 4096 4096 NT_STATUS_OK
ReadX 11498 20480 4096 4096 NT_STATUS_OK
ReadX 11498 24576 4096 4096 NT_STATUS_OK
ReadX 11498 28672 4096 4096 NT_STATUS_OK
ReadX 11498 32768 4096 4096 NT_STATUS_OK
ReadX 11498 36864 4096 4096 NT_STATUS_OK
ReadX 11498 40960 4096 4096 NT_STATUS_OK
ReadX 11498 45056 4096 4096 NT_STATUS_OK
ReadX 11498 49152 4096 4096 NT_STATUS_OK
ReadX 11498 53248 4096 4096 NT_STATUS_OK
ReadX 11498 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11498 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11499 NT_STATUS_OK
Close 11499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11495 NT_STATUS_OK
Close 11496 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11501 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11501 1004 NT_STATUS_OK
WriteX 11501 0 57088 57088 NT_STATUS_OK
WriteX 11501 0 4096 4096 NT_STATUS_OK
Flush 11501 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11502 NT_STATUS_OK
SET_FILE_INFORMATION 11502 1004 NT_STATUS_OK
Close 11502 NT_STATUS_OK
SET_FILE_INFORMATION 11501 1004 NT_STATUS_OK
WriteX 11501 0 4096 4096 NT_STATUS_OK
Close 11501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11503 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11505 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11506 NT_STATUS_OK
WriteX 11506 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11506 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11506 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 51456 51456 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Flush 11506 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11508 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11510 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11515 NT_STATUS_OK
WriteX 11515 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 258 NT_STATUS_OK
WriteX 11515 0 53077 53077 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11516 NT_STATUS_OK
WriteX 11516 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11516 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11516 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11516 1004 NT_STATUS_OK
WriteX 11516 0 65536 65536 NT_STATUS_OK
WriteX 11516 65536 1856 1856 NT_STATUS_OK
WriteX 11516 0 4096 4096 NT_STATUS_OK
Flush 11516 NT_STATUS_OK
SET_FILE_INFORMATION 11516 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11516 1004 NT_STATUS_OK
WriteX 11516 0 4096 4096 NT_STATUS_OK
Close 11516 NT_STATUS_OK
Close 11510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11522 NT_STATUS_OK
Close 11522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11525 NT_STATUS_OK
WriteX 11525 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 258 NT_STATUS_OK
WriteX 11525 0 7983 7983 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11530 NT_STATUS_OK
WriteX 11530 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11530 258 NT_STATUS_OK
WriteX 11530 0 65536 65536 NT_STATUS_OK
WriteX 11530 65536 65536 65536 NT_STATUS_OK
WriteX 11530 131072 65536 65536 NT_STATUS_OK
WriteX 11530 196608 65536 65536 NT_STATUS_OK
WriteX 11530 262144 65536 65536 NT_STATUS_OK
WriteX 11530 327680 65536 65536 NT_STATUS_OK
WriteX 11530 393216 65536 65536 NT_STATUS_OK
WriteX 11530 458752 46731 46731 NT_STATUS_OK
Close 11530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11531 NT_STATUS_OK
WriteX 11531 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11531 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11520 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11531 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 65536 65536 NT_STATUS_OK
WriteX 11531 65536 22848 22848 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
Flush 11531 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
Close 11531 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11535 NT_STATUS_OK
ReadX 11535 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11535 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11536 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11536 1004 NT_STATUS_OK
ReadX 11536 8192 4096 4096 NT_STATUS_OK
ReadX 11536 12288 4096 4096 NT_STATUS_OK
ReadX 11536 16384 4096 4096 NT_STATUS_OK
ReadX 11536 20480 4096 4096 NT_STATUS_OK
ReadX 11536 24576 4096 4096 NT_STATUS_OK
ReadX 11536 28672 4096 4096 NT_STATUS_OK
ReadX 11536 32768 4096 4096 NT_STATUS_OK
ReadX 11536 36864 4096 4096 NT_STATUS_OK
ReadX 11536 40960 4096 4096 NT_STATUS_OK
ReadX 11536 45056 4096 4096 NT_STATUS_OK
ReadX 11536 49152 4096 4096 NT_STATUS_OK
ReadX 11536 53248 4096 4096 NT_STATUS_OK
ReadX 11536 57344 4096 4096 NT_STATUS_OK
ReadX 11536 61440 4096 4096 NT_STATUS_OK
ReadX 11536 65536 4096 4096 NT_STATUS_OK
ReadX 11536 69632 4096 4096 NT_STATUS_OK
ReadX 11536 73728 4096 4096 NT_STATUS_OK
ReadX 11536 77824 4096 4096 NT_STATUS_OK
ReadX 11536 81920 4096 4096 NT_STATUS_OK
ReadX 11536 86016 4096 4096 NT_STATUS_OK
ReadX 11536 90112 4096 4096 NT_STATUS_OK
ReadX 11536 94208 4096 4096 NT_STATUS_OK
ReadX 11536 98304 4096 4096 NT_STATUS_OK
ReadX 11536 102400 4096 4096 NT_STATUS_OK
ReadX 11536 106496 4096 4096 NT_STATUS_OK
ReadX 11536 110592 4096 4096 NT_STATUS_OK
ReadX 11536 114688 4096 4096 NT_STATUS_OK
ReadX 11536 118784 4096 4096 NT_STATUS_OK
ReadX 11536 122880 4096 4096 NT_STATUS_OK
ReadX 11536 126976 4096 4096 NT_STATUS_OK
ReadX 11536 131072 4096 4096 NT_STATUS_OK
ReadX 11536 135168 4096 4096 NT_STATUS_OK
ReadX 11536 139264 4096 4096 NT_STATUS_OK
ReadX 11536 143360 4096 4096 NT_STATUS_OK
ReadX 11536 147456 4096 4096 NT_STATUS_OK
ReadX 11536 151552 4096 4096 NT_STATUS_OK
ReadX 11536 155648 4096 4096 NT_STATUS_OK
ReadX 11536 159744 4096 4096 NT_STATUS_OK
ReadX 11536 163840 4096 4096 NT_STATUS_OK
ReadX 11536 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11536 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11537 NT_STATUS_OK
Close 11537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
Close 11536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11540 NT_STATUS_OK
SET_FILE_INFORMATION 11540 1004 NT_STATUS_OK
Close 11540 NT_STATUS_OK
WriteX 11539 0 42388 42388 NT_STATUS_OK
Close 11539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
ReadX 11543 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11544 NT_STATUS_OK
WriteX 11544 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11544 258 NT_STATUS_OK
SET_FILE_INFORMATION 11544 1004 NT_STATUS_OK
WriteX 11544 0 42652 42652 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
ReadX 11548 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11553 NT_STATUS_OK
WriteX 11553 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11553 258 NT_STATUS_OK
WriteX 11553 0 65536 65536 NT_STATUS_OK
WriteX 11553 65536 49 49 NT_STATUS_OK
Close 11553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 61440 61440 NT_STATUS_OK
ReadX 11554 61440 4096 4096 NT_STATUS_OK
ReadX 11554 65536 61440 61440 NT_STATUS_OK
ReadX 11554 126976 4096 4096 NT_STATUS_OK
ReadX 11554 131072 61440 61440 NT_STATUS_OK
ReadX 11554 192512 4096 4096 NT_STATUS_OK
ReadX 11554 196608 61440 61440 NT_STATUS_OK
ReadX 11554 258048 4096 4096 NT_STATUS_OK
ReadX 11554 262144 61440 61440 NT_STATUS_OK
ReadX 11554 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 61440 61440 NT_STATUS_OK
ReadX 11555 61440 4096 4096 NT_STATUS_OK
ReadX 11555 65536 61440 61440 NT_STATUS_OK
ReadX 11555 126976 4096 4096 NT_STATUS_OK
ReadX 11555 131072 61440 61440 NT_STATUS_OK
ReadX 11555 192512 4096 4096 NT_STATUS_OK
ReadX 11555 196608 61440 61440 NT_STATUS_OK
ReadX 11555 258048 4096 4096 NT_STATUS_OK
ReadX 11555 262144 61440 61440 NT_STATUS_OK
ReadX 11555 323584 4096 4096 NT_STATUS_OK
ReadX 11555 327680 61440 61440 NT_STATUS_OK
ReadX 11555 389120 4096 4096 NT_STATUS_OK
ReadX 11555 393216 61440 61440 NT_STATUS_OK
ReadX 11555 454656 4096 4096 NT_STATUS_OK
ReadX 11555 458752 61440 61440 NT_STATUS_OK
ReadX 11555 520192 4096 4096 NT_STATUS_OK
ReadX 11555 524288 61440 61440 NT_STATUS_OK
ReadX 11555 585728 4096 4096 NT_STATUS_OK
ReadX 11555 589824 61440 61440 NT_STATUS_OK
ReadX 11555 651264 4096 4096 NT_STATUS_OK
ReadX 11555 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 61440 61440 NT_STATUS_OK
ReadX 11556 61440 4096 4096 NT_STATUS_OK
ReadX 11556 65536 61440 61440 NT_STATUS_OK
ReadX 11556 126976 4096 4096 NT_STATUS_OK
ReadX 11556 131072 61440 61440 NT_STATUS_OK
ReadX 11556 192512 4096 4096 NT_STATUS_OK
ReadX 11556 196608 61440 61440 NT_STATUS_OK
ReadX 11556 258048 4096 4096 NT_STATUS_OK
ReadX 11556 262144 61440 61440 NT_STATUS_OK
ReadX 11556 323584 4096 4096 NT_STATUS_OK
ReadX 11556 327680 61440 61440 NT_STATUS_OK
ReadX 11556 389120 4096 4096 NT_STATUS_OK
ReadX 11556 393216 61440 61440 NT_STATUS_OK
ReadX 11556 454656 4096 4096 NT_STATUS_OK
ReadX 11556 458752 61440 61440 NT_STATUS_OK
ReadX 11556 520192 4096 4096 NT_STATUS_OK
ReadX 11556 524288 61440 61440 NT_STATUS_OK
ReadX 11556 585728 4096 4096 NT_STATUS_OK
ReadX 11556 589824 61440 61440 NT_STATUS_OK
ReadX 11556 651264 4096 4096 NT_STATUS_OK
ReadX 11556 655360 61440 61440 NT_STATUS_OK
ReadX 11556 716800 4096 4096 NT_STATUS_OK
ReadX 11556 720896 61440 61440 NT_STATUS_OK
ReadX 11556 782336 4096 4096 NT_STATUS_OK
ReadX 11556 786432 61440 61440 NT_STATUS_OK
ReadX 11556 847872 4096 4096 NT_STATUS_OK
ReadX 11556 851968 61440 61440 NT_STATUS_OK
ReadX 11556 913408 4096 4096 NT_STATUS_OK
ReadX 11556 917504 61440 61440 NT_STATUS_OK
ReadX 11556 978944 4096 4096 NT_STATUS_OK
ReadX 11556 983040 61440 61440 NT_STATUS_OK
ReadX 11556 1044480 4096 4096 NT_STATUS_OK
ReadX 11556 1048576 61440 61440 NT_STATUS_OK
ReadX 11556 1110016 4096 4096 NT_STATUS_OK
ReadX 11556 1114112 61440 61440 NT_STATUS_OK
ReadX 11556 1175552 4096 4096 NT_STATUS_OK
ReadX 11556 1179648 61440 61440 NT_STATUS_OK
ReadX 11556 1241088 4096 4096 NT_STATUS_OK
ReadX 11556 1245184 61440 61440 NT_STATUS_OK
ReadX 11556 1306624 4096 4096 NT_STATUS_OK
ReadX 11556 1310720 61440 61440 NT_STATUS_OK
ReadX 11556 1372160 4096 4096 NT_STATUS_OK
ReadX 11556 1376256 61440 61440 NT_STATUS_OK
ReadX 11556 1437696 4096 4096 NT_STATUS_OK
ReadX 11556 1441792 61440 61440 NT_STATUS_OK
ReadX 11556 1503232 4096 4096 NT_STATUS_OK
ReadX 11556 1507328 61440 61440 NT_STATUS_OK
ReadX 11556 1568768 4096 4096 NT_STATUS_OK
ReadX 11556 1572864 61440 61440 NT_STATUS_OK
ReadX 11556 1634304 4096 4096 NT_STATUS_OK
ReadX 11556 1638400 61440 61440 NT_STATUS_OK
ReadX 11556 1699840 4096 4096 NT_STATUS_OK
ReadX 11556 1703936 61440 61440 NT_STATUS_OK
ReadX 11556 1765376 4096 4096 NT_STATUS_OK
ReadX 11556 1769472 61440 61440 NT_STATUS_OK
ReadX 11556 1830912 4096 4096 NT_STATUS_OK
ReadX 11556 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11557 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11558 NT_STATUS_OK
QUERY_FILE_INFORMATION 11558 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11558 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11558 1005 NT_STATUS_OK
ReadX 11558 2156 24 24 NT_STATUS_OK
ReadX 11558 2139 276 276 NT_STATUS_OK
ReadX 11558 2136 14 14 NT_STATUS_OK
ReadX 11558 2136 7 7 NT_STATUS_OK
ReadX 11558 2138 12 12 NT_STATUS_OK
ReadX 11558 2137 8 8 NT_STATUS_OK
ReadX 11558 2135 15 15 NT_STATUS_OK
ReadX 11558 0 16 16 NT_STATUS_OK
ReadX 11558 16 2048 2048 NT_STATUS_OK
ReadX 11558 2064 2048 2048 NT_STATUS_OK
ReadX 11558 257 2048 2048 NT_STATUS_OK
ReadX 11558 385 2048 2048 NT_STATUS_OK
ReadX 11558 513 2048 2048 NT_STATUS_OK
ReadX 11558 641 2048 2048 NT_STATUS_OK
ReadX 11558 769 2048 2048 NT_STATUS_OK
ReadX 11558 897 2048 2048 NT_STATUS_OK
ReadX 11558 1025 2048 2048 NT_STATUS_OK
ReadX 11558 1153 2048 2048 NT_STATUS_OK
ReadX 11558 1281 2048 2048 NT_STATUS_OK
ReadX 11558 1409 2048 2048 NT_STATUS_OK
ReadX 11558 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11560 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11554 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Close 11548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11563 NT_STATUS_OK
WriteX 11563 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11563 258 NT_STATUS_OK
WriteX 11563 0 10575 10575 NT_STATUS_OK
Flush 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11564 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
Close 11558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11568 NT_STATUS_OK
LockX 11568 2147483538 1 NT_STATUS_OK
UnlockX 11568 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 1005 NT_STATUS_OK
ReadX 11568 0 512 512 NT_STATUS_OK
ReadX 11568 512 512 512 NT_STATUS_OK
ReadX 11568 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 1004 NT_STATUS_OK
Close 11568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11569 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 1005 NT_STATUS_OK
ReadX 11569 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11570 NT_STATUS_OK
LockX 11570 2147483538 1 NT_STATUS_OK
UnlockX 11570 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11570 1005 NT_STATUS_OK
ReadX 11570 0 512 512 NT_STATUS_OK
ReadX 11570 512 512 512 NT_STATUS_OK
ReadX 11570 1024 512 512 NT_STATUS_OK
ReadX 11570 288 20 20 NT_STATUS_OK
ReadX 11570 308 2084 2084 NT_STATUS_OK
ReadX 11570 388 2084 2084 NT_STATUS_OK
ReadX 11570 388 2084 2084 NT_STATUS_OK
ReadX 11557 2157 1386 1386 NT_STATUS_OK
ReadX 11570 2472 399 399 NT_STATUS_OK
ReadX 11570 3072 1536 1536 NT_STATUS_OK
ReadX 11570 544 149 149 NT_STATUS_OK
ReadX 11570 693 485 485 NT_STATUS_OK
Close 11570 NT_STATUS_OK
ReadX 11557 2157 4096 4096 NT_STATUS_OK
ReadX 11557 6253 4096 4096 NT_STATUS_OK
ReadX 11557 10349 4096 4096 NT_STATUS_OK
ReadX 11557 14445 4096 4096 NT_STATUS_OK
ReadX 11557 18541 4096 4096 NT_STATUS_OK
ReadX 11557 22637 256 256 NT_STATUS_OK
ReadX 11557 22893 4096 4096 NT_STATUS_OK
ReadX 11557 26989 4096 4096 NT_STATUS_OK
ReadX 11557 31085 4096 4096 NT_STATUS_OK
ReadX 11557 35181 4096 4096 NT_STATUS_OK
ReadX 11557 39277 4096 4096 NT_STATUS_OK
ReadX 11557 43373 4096 4096 NT_STATUS_OK
ReadX 11557 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11557 2157 1024 1024 NT_STATUS_OK
ReadX 11557 1667 4688 4688 NT_STATUS_OK
ReadX 11557 6355 3516 3516 NT_STATUS_OK
ReadX 11557 9871 16384 16384 NT_STATUS_OK
ReadX 11557 26255 3771 3771 NT_STATUS_OK
ReadX 11557 30026 2048 2048 NT_STATUS_OK
ReadX 11557 32074 1024 1024 NT_STATUS_OK
ReadX 11557 33098 6652 6652 NT_STATUS_OK
ReadX 11557 39750 16384 16384 NT_STATUS_OK
ReadX 11557 56134 10496 10496 NT_STATUS_OK
ReadX 11557 66630 1784 1784 NT_STATUS_OK
ReadX 11557 68414 90 90 NT_STATUS_OK
ReadX 11557 68504 273 273 NT_STATUS_OK
ReadX 11557 68777 1600 1600 NT_STATUS_OK
ReadX 11557 70377 640 640 NT_STATUS_OK
ReadX 11557 71017 1280 1280 NT_STATUS_OK
ReadX 11557 72297 8464 8464 NT_STATUS_OK
ReadX 11557 80761 158 158 NT_STATUS_OK
ReadX 11557 80919 912 912 NT_STATUS_OK
ReadX 11557 81831 1980 1980 NT_STATUS_OK
ReadX 11557 83811 2256 2256 NT_STATUS_OK
ReadX 11557 86067 400 400 NT_STATUS_OK
ReadX 11557 86467 252 252 NT_STATUS_OK
ReadX 11557 86719 42 42 NT_STATUS_OK
ReadX 11557 86761 725 725 NT_STATUS_OK
ReadX 11557 2009 512 512 NT_STATUS_OK
ReadX 11557 3895 9 9 NT_STATUS_OK
ReadX 11557 3781 46 46 NT_STATUS_OK
ReadX 11557 4059 92 92 NT_STATUS_OK
ReadX 11557 3781 92 92 NT_STATUS_OK
ReadX 11557 3986 184 184 NT_STATUS_OK
ReadX 11557 3987 16384 16384 NT_STATUS_OK
ReadX 11557 3902 16384 16384 NT_STATUS_OK
ReadX 11557 3781 10240 10240 NT_STATUS_OK
ReadX 11557 3821 16384 16384 NT_STATUS_OK
ReadX 11557 3891 935 935 NT_STATUS_OK
ReadX 11557 4060 10240 10240 NT_STATUS_OK
ReadX 11557 4059 184 184 NT_STATUS_OK
ReadX 11557 256 184 184 NT_STATUS_OK
ReadX 11557 256 1026 1026 NT_STATUS_OK
ReadX 11557 3901 326 326 NT_STATUS_OK
ReadX 11557 3899 652 652 NT_STATUS_OK
ReadX 11557 256 2 2 NT_STATUS_OK
ReadX 11557 258 4948 4948 NT_STATUS_OK
Close 11557 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11572 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11575 NT_STATUS_OK
WriteX 11575 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11575 258 NT_STATUS_OK
WriteX 11575 0 65536 65536 NT_STATUS_OK
WriteX 11575 65536 65536 65536 NT_STATUS_OK
WriteX 11575 131072 65536 65536 NT_STATUS_OK
WriteX 11575 196608 65536 65536 NT_STATUS_OK
WriteX 11575 262144 65536 65536 NT_STATUS_OK
WriteX 11575 327680 65536 65536 NT_STATUS_OK
WriteX 11575 393216 65536 65536 NT_STATUS_OK
WriteX 11575 458752 65536 65536 NT_STATUS_OK
WriteX 11575 524288 65536 65536 NT_STATUS_OK
WriteX 11575 589824 35257 35257 NT_STATUS_OK
Close 11575 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11580 NT_STATUS_OK
WriteX 11580 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 258 NT_STATUS_OK
WriteX 11580 0 65536 65536 NT_STATUS_OK
WriteX 11580 65536 65536 65536 NT_STATUS_OK
WriteX 11580 131072 65536 65536 NT_STATUS_OK
WriteX 11580 196608 65536 65536 NT_STATUS_OK
WriteX 11580 262144 65536 65536 NT_STATUS_OK
WriteX 11580 327680 65536 65536 NT_STATUS_OK
WriteX 11580 393216 65536 65536 NT_STATUS_OK
WriteX 11580 458752 65536 65536 NT_STATUS_OK
WriteX 11580 524288 65536 65536 NT_STATUS_OK
WriteX 11580 589824 57598 57598 NT_STATUS_OK
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11582 NT_STATUS_OK
WriteX 11582 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11582 258 NT_STATUS_OK
WriteX 11582 0 12543 12543 NT_STATUS_OK
Flush 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11587 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11588 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 1005 NT_STATUS_OK
ReadX 11588 1938 24 24 NT_STATUS_OK
ReadX 11588 1920 276 276 NT_STATUS_OK
ReadX 11588 1918 14 14 NT_STATUS_OK
ReadX 11588 1918 7 7 NT_STATUS_OK
ReadX 11588 1919 12 12 NT_STATUS_OK
ReadX 11588 1919 8 8 NT_STATUS_OK
ReadX 11588 1917 15 15 NT_STATUS_OK
ReadX 11588 0 16 16 NT_STATUS_OK
ReadX 11588 16 2048 2048 NT_STATUS_OK
ReadX 11588 2064 2048 2048 NT_STATUS_OK
ReadX 11588 257 2048 2048 NT_STATUS_OK
ReadX 11588 385 2048 2048 NT_STATUS_OK
ReadX 11588 513 2048 2048 NT_STATUS_OK
ReadX 11588 641 2048 2048 NT_STATUS_OK
ReadX 11588 769 2048 2048 NT_STATUS_OK
ReadX 11588 897 2048 2048 NT_STATUS_OK
ReadX 11588 1025 2048 2048 NT_STATUS_OK
ReadX 11588 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11593 NT_STATUS_OK
WriteX 11593 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11593 258 NT_STATUS_OK
WriteX 11593 0 11588 11588 NT_STATUS_OK
Flush 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11594 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 4096 4096 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11598 NT_STATUS_OK
WriteX 11598 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11598 258 NT_STATUS_OK
WriteX 11598 0 11615 11615 NT_STATUS_OK
Flush 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11607 NT_STATUS_OK
WriteX 11607 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11607 258 NT_STATUS_OK
WriteX 11607 0 65536 65536 NT_STATUS_OK
WriteX 11607 65536 16050 16050 NT_STATUS_OK
Close 11607 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11587 1939 64 64 NT_STATUS_OK
ReadX 11587 128 248 248 NT_STATUS_OK
ReadX 11587 128 568 568 NT_STATUS_OK
ReadX 11587 3872 1536 1536 NT_STATUS_OK
ReadX 11587 3456 2560 2560 NT_STATUS_OK
ReadX 11587 3136 512 512 NT_STATUS_OK
ReadX 11587 2880 4096 4096 NT_STATUS_OK
ReadX 11587 3264 3072 3072 NT_STATUS_OK
ReadX 11587 320 4096 4096 NT_STATUS_OK
ReadX 11587 1024 4096 4096 NT_STATUS_OK
ReadX 11587 3616 4096 4096 NT_STATUS_OK
ReadX 11587 1939 64 64 NT_STATUS_OK
ReadX 11587 128 248 248 NT_STATUS_OK
ReadX 11587 128 608 608 NT_STATUS_OK
ReadX 11587 2858 1024 1024 NT_STATUS_OK
ReadX 11587 2810 4096 4096 NT_STATUS_OK
ReadX 11587 2826 4096 4096 NT_STATUS_OK
ReadX 11587 2580 2048 2048 NT_STATUS_OK
ReadX 11587 2800 2560 2560 NT_STATUS_OK
ReadX 11587 2100 4096 4096 NT_STATUS_OK
ReadX 11587 2084 4096 4096 NT_STATUS_OK
ReadX 11587 868 4096 4096 NT_STATUS_OK
ReadX 11587 2324 4096 4096 NT_STATUS_OK
ReadX 11587 884 4096 4096 NT_STATUS_OK
ReadX 11587 2604 1024 1024 NT_STATUS_OK
ReadX 11587 580 4096 4096 NT_STATUS_OK
ReadX 11587 596 4096 4096 NT_STATUS_OK
ReadX 11587 2752 4096 4096 NT_STATUS_OK
ReadX 11587 2842 1024 1024 NT_STATUS_OK
ReadX 11587 660 4096 4096 NT_STATUS_OK
ReadX 11587 2720 4096 4096 NT_STATUS_OK
ReadX 11587 2736 4096 4096 NT_STATUS_OK
ReadX 11587 628 4096 4096 NT_STATUS_OK
ReadX 11587 2704 4096 4096 NT_STATUS_OK
ReadX 11587 1556 4096 4096 NT_STATUS_OK
ReadX 11587 576 4096 4096 NT_STATUS_OK
ReadX 11587 3168 1536 1536 NT_STATUS_OK
ReadX 11587 832 4096 4096 NT_STATUS_OK
ReadX 11587 1088 4096 4096 NT_STATUS_OK
ReadX 11587 1344 4096 4096 NT_STATUS_OK
ReadX 11587 1600 4096 4096 NT_STATUS_OK
ReadX 11587 1856 4096 4096 NT_STATUS_OK
ReadX 11587 2112 4096 4096 NT_STATUS_OK
ReadX 11587 1892 4096 4096 NT_STATUS_OK
ReadX 11587 820 4096 4096 NT_STATUS_OK
ReadX 11587 788 4096 4096 NT_STATUS_OK
ReadX 11587 1604 4096 4096 NT_STATUS_OK
ReadX 11587 3648 4096 4096 NT_STATUS_OK
ReadX 11587 2608 4096 4096 NT_STATUS_OK
ReadX 11587 548 4096 4096 NT_STATUS_OK
ReadX 11587 740 4096 4096 NT_STATUS_OK
ReadX 11587 1344 4096 4096 NT_STATUS_OK
ReadX 11587 3392 4096 4096 NT_STATUS_OK
ReadX 11587 3904 4096 4096 NT_STATUS_OK
ReadX 11587 644 4096 4096 NT_STATUS_OK
ReadX 11587 676 4096 4096 NT_STATUS_OK
ReadX 11587 2688 4096 4096 NT_STATUS_OK
ReadX 11587 320 4096 4096 NT_STATUS_OK
ReadX 11587 900 4096 4096 NT_STATUS_OK
ReadX 11587 1908 4096 4096 NT_STATUS_OK
ReadX 11587 852 4096 4096 NT_STATUS_OK
ReadX 11587 724 4096 4096 NT_STATUS_OK
ReadX 11587 2292 4096 4096 NT_STATUS_OK
ReadX 11587 612 4096 4096 NT_STATUS_OK
ReadX 11587 388 4096 4096 NT_STATUS_OK
ReadX 11587 2368 4096 4096 NT_STATUS_OK
ReadX 11587 2624 4096 4096 NT_STATUS_OK
ReadX 11587 500 4096 4096 NT_STATUS_OK
ReadX 11587 356 4096 4096 NT_STATUS_OK
ReadX 11587 1024 4096 4096 NT_STATUS_OK
ReadX 11587 576 4096 4096 NT_STATUS_OK
ReadX 11587 340 4096 4096 NT_STATUS_OK
ReadX 11587 420 4096 4096 NT_STATUS_OK
ReadX 11587 1600 4096 4096 NT_STATUS_OK
ReadX 11587 404 4096 4096 NT_STATUS_OK
ReadX 11587 1428 4096 4096 NT_STATUS_OK
ReadX 11587 2656 4096 4096 NT_STATUS_OK
ReadX 11587 2624 4096 4096 NT_STATUS_OK
ReadX 11587 452 4096 4096 NT_STATUS_OK
ReadX 11587 692 4096 4096 NT_STATUS_OK
ReadX 11587 564 4096 4096 NT_STATUS_OK
ReadX 11587 372 4096 4096 NT_STATUS_OK
ReadX 11587 468 4096 4096 NT_STATUS_OK
ReadX 11587 484 4096 4096 NT_STATUS_OK
ReadX 11587 1088 4096 4096 NT_STATUS_OK
ReadX 11587 1924 4096 4096 NT_STATUS_OK
ReadX 11587 2768 4096 4096 NT_STATUS_OK
ReadX 11587 832 4096 4096 NT_STATUS_OK
ReadX 11587 836 4096 4096 NT_STATUS_OK
ReadX 11587 1856 4096 4096 NT_STATUS_OK
ReadX 11587 2640 4096 4096 NT_STATUS_OK
ReadX 11587 436 4096 4096 NT_STATUS_OK
ReadX 11587 1828 4096 4096 NT_STATUS_OK
ReadX 11587 804 4096 4096 NT_STATUS_OK
ReadX 11587 1860 4096 4096 NT_STATUS_OK
ReadX 11587 1812 4096 4096 NT_STATUS_OK
ReadX 11587 756 4096 4096 NT_STATUS_OK
ReadX 11587 1636 4096 4096 NT_STATUS_OK
ReadX 11587 772 4096 4096 NT_STATUS_OK
ReadX 11587 2036 4096 4096 NT_STATUS_OK
ReadX 11587 1220 4096 4096 NT_STATUS_OK
ReadX 11587 1652 4096 4096 NT_STATUS_OK
ReadX 11587 2588 4096 4096 NT_STATUS_OK
ReadX 11587 916 4096 4096 NT_STATUS_OK
ReadX 11587 260 4096 4096 NT_STATUS_OK
ReadX 11587 932 4096 4096 NT_STATUS_OK
ReadX 11587 2624 4096 4096 NT_STATUS_OK
ReadX 11587 308 4096 4096 NT_STATUS_OK
ReadX 11587 292 4096 4096 NT_STATUS_OK
ReadX 11587 1140 4096 4096 NT_STATUS_OK
ReadX 11587 276 4096 4096 NT_STATUS_OK
ReadX 11587 2020 4096 4096 NT_STATUS_OK
ReadX 11587 2880 4096 4096 NT_STATUS_OK
ReadX 11587 516 4096 4096 NT_STATUS_OK
ReadX 11587 1844 4096 4096 NT_STATUS_OK
ReadX 11587 1124 4096 4096 NT_STATUS_OK
ReadX 11587 3136 4096 4096 NT_STATUS_OK
ReadX 11587 324 4096 4096 NT_STATUS_OK
ReadX 11587 1156 4096 4096 NT_STATUS_OK
ReadX 11587 1172 4096 4096 NT_STATUS_OK
ReadX 11587 2112 4096 4096 NT_STATUS_OK
ReadX 11587 2368 4096 4096 NT_STATUS_OK
ReadX 11587 964 4096 4096 NT_STATUS_OK
ReadX 11587 980 4096 4096 NT_STATUS_OK
ReadX 11587 1012 4096 4096 NT_STATUS_OK
ReadX 11587 532 4096 4096 NT_STATUS_OK
ReadX 11587 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11587 1620 4096 4096 NT_STATUS_OK
ReadX 11587 1604 4096 4096 NT_STATUS_OK
ReadX 11587 2116 4096 4096 NT_STATUS_OK
ReadX 11587 2132 4096 4096 NT_STATUS_OK
ReadX 11587 2148 4096 4096 NT_STATUS_OK
ReadX 11587 2276 4096 4096 NT_STATUS_OK
ReadX 11587 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11612 NT_STATUS_OK
QUERY_FILE_INFORMATION 11567 1004 NT_STATUS_OK
Close 11567 NT_STATUS_OK
WriteX 11612 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11612 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 1004 NT_STATUS_OK
Close 11569 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 64850 64850 NT_STATUS_OK
Close 11612 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11614 NT_STATUS_OK
WriteX 11614 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11614 258 NT_STATUS_OK
ReadX 11587 2068 4096 4096 NT_STATUS_OK
ReadX 11587 1588 4096 4096 NT_STATUS_OK
ReadX 11587 1572 4096 4096 NT_STATUS_OK
WriteX 11614 0 18630 18630 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11587 612 4096 4096 NT_STATUS_OK
ReadX 11587 564 4096 4096 NT_STATUS_OK
ReadX 11587 1876 4096 4096 NT_STATUS_OK
ReadX 11587 628 4096 4096 NT_STATUS_OK
ReadX 11587 740 4096 4096 NT_STATUS_OK
ReadX 11587 724 4096 4096 NT_STATUS_OK
ReadX 11587 644 4096 4096 NT_STATUS_OK
ReadX 11587 2324 4096 4096 NT_STATUS_OK
ReadX 11587 660 4096 4096 NT_STATUS_OK
ReadX 11587 852 4096 4096 NT_STATUS_OK
ReadX 11587 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11587 2368 4096 4096 NT_STATUS_OK
ReadX 11587 1024 4096 4096 NT_STATUS_OK
ReadX 11587 320 4096 4096 NT_STATUS_OK
ReadX 11587 580 4096 4096 NT_STATUS_OK
ReadX 11587 3136 512 512 NT_STATUS_OK
ReadX 11587 2880 4096 4096 NT_STATUS_OK
Close 11587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 61440 4096 4096 NT_STATUS_OK
ReadX 11619 126976 4096 4096 NT_STATUS_OK
WriteX 11619 0 65536 65536 NT_STATUS_OK
WriteX 11619 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 61440 4096 4096 NT_STATUS_OK
ReadX 11620 126976 4096 4096 NT_STATUS_OK
ReadX 11620 192512 4096 4096 NT_STATUS_OK
ReadX 11620 258048 4096 4096 NT_STATUS_OK
WriteX 11620 0 65536 65536 NT_STATUS_OK
WriteX 11620 65536 65536 65536 NT_STATUS_OK
WriteX 11620 131072 65536 65536 NT_STATUS_OK
WriteX 11620 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 61440 4096 4096 NT_STATUS_OK
ReadX 11621 126976 4096 4096 NT_STATUS_OK
ReadX 11621 192512 4096 4096 NT_STATUS_OK
ReadX 11621 258048 4096 4096 NT_STATUS_OK
ReadX 11621 323584 4096 4096 NT_STATUS_OK
ReadX 11621 389120 4096 4096 NT_STATUS_OK
ReadX 11621 454656 4096 4096 NT_STATUS_OK
ReadX 11621 520192 4096 4096 NT_STATUS_OK
WriteX 11621 0 65536 65536 NT_STATUS_OK
WriteX 11621 65536 65536 65536 NT_STATUS_OK
WriteX 11621 131072 65536 65536 NT_STATUS_OK
WriteX 11621 196608 65536 65536 NT_STATUS_OK
WriteX 11621 262144 65536 65536 NT_STATUS_OK
WriteX 11621 327680 65536 65536 NT_STATUS_OK
WriteX 11621 393216 65536 65536 NT_STATUS_OK
WriteX 11621 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11624 NT_STATUS_OK
WriteX 11624 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11622 0 8192 8192 NT_STATUS_OK
Flush 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11622 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11622 0 8192 8192 NT_STATUS_OK
Flush 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11622 0 8192 8192 NT_STATUS_OK
Flush 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11622 0 8192 8192 NT_STATUS_OK
Flush 11622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11629 NT_STATUS_OK
WriteX 11629 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11629 258 NT_STATUS_OK
WriteX 11629 0 62591 62591 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11631 NT_STATUS_OK
Close 11631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11634 NT_STATUS_OK
WriteX 11634 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11634 258 NT_STATUS_OK
WriteX 11634 0 10845 10845 NT_STATUS_OK
Close 11634 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11636 NT_STATUS_OK
Close 11636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11639 NT_STATUS_OK
WriteX 11639 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11639 258 NT_STATUS_OK
WriteX 11639 0 30118 30118 NT_STATUS_OK
Close 11639 NT_STATUS_OK
WriteX 11622 0 4096 4096 NT_STATUS_OK
WriteX 11624 0 64 64 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11641 NT_STATUS_OK
ReadX 11641 0 61440 61440 NT_STATUS_OK
ReadX 11641 61440 4096 4096 NT_STATUS_OK
ReadX 11641 65536 61440 61440 NT_STATUS_OK
ReadX 11641 126976 4096 4096 NT_STATUS_OK
ReadX 11641 131072 61440 61440 NT_STATUS_OK
ReadX 11641 192512 4096 4096 NT_STATUS_OK
ReadX 11641 196608 61440 61440 NT_STATUS_OK
ReadX 11641 258048 4096 4096 NT_STATUS_OK
ReadX 11641 262144 61440 61440 NT_STATUS_OK
ReadX 11641 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 61440 61440 NT_STATUS_OK
ReadX 11642 61440 4096 4096 NT_STATUS_OK
ReadX 11642 65536 61440 61440 NT_STATUS_OK
ReadX 11642 126976 4096 4096 NT_STATUS_OK
ReadX 11642 131072 61440 61440 NT_STATUS_OK
ReadX 11642 192512 4096 4096 NT_STATUS_OK
ReadX 11642 196608 61440 61440 NT_STATUS_OK
ReadX 11642 258048 4096 4096 NT_STATUS_OK
ReadX 11642 262144 61440 61440 NT_STATUS_OK
ReadX 11642 323584 4096 4096 NT_STATUS_OK
ReadX 11642 327680 61440 61440 NT_STATUS_OK
ReadX 11642 389120 4096 4096 NT_STATUS_OK
ReadX 11642 393216 61440 61440 NT_STATUS_OK
ReadX 11642 454656 4096 4096 NT_STATUS_OK
ReadX 11642 458752 61440 61440 NT_STATUS_OK
ReadX 11642 520192 4096 4096 NT_STATUS_OK
ReadX 11642 524288 61440 61440 NT_STATUS_OK
ReadX 11642 585728 4096 4096 NT_STATUS_OK
ReadX 11642 589824 61440 61440 NT_STATUS_OK
ReadX 11642 651264 4096 4096 NT_STATUS_OK
ReadX 11642 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 61440 61440 NT_STATUS_OK
ReadX 11643 61440 4096 4096 NT_STATUS_OK
ReadX 11643 65536 61440 61440 NT_STATUS_OK
ReadX 11643 126976 4096 4096 NT_STATUS_OK
ReadX 11643 131072 61440 61440 NT_STATUS_OK
ReadX 11643 192512 4096 4096 NT_STATUS_OK
ReadX 11643 196608 61440 61440 NT_STATUS_OK
ReadX 11643 258048 4096 4096 NT_STATUS_OK
ReadX 11643 262144 61440 61440 NT_STATUS_OK
ReadX 11643 323584 4096 4096 NT_STATUS_OK
ReadX 11643 327680 61440 61440 NT_STATUS_OK
ReadX 11643 389120 4096 4096 NT_STATUS_OK
ReadX 11643 393216 61440 61440 NT_STATUS_OK
ReadX 11643 454656 4096 4096 NT_STATUS_OK
ReadX 11643 458752 61440 61440 NT_STATUS_OK
ReadX 11643 520192 4096 4096 NT_STATUS_OK
ReadX 11643 524288 61440 61440 NT_STATUS_OK
ReadX 11643 585728 4096 4096 NT_STATUS_OK
ReadX 11643 589824 61440 61440 NT_STATUS_OK
ReadX 11643 651264 4096 4096 NT_STATUS_OK
ReadX 11643 655360 61440 61440 NT_STATUS_OK
ReadX 11643 716800 4096 4096 NT_STATUS_OK
ReadX 11643 720896 61440 61440 NT_STATUS_OK
ReadX 11643 782336 4096 4096 NT_STATUS_OK
ReadX 11643 786432 61440 61440 NT_STATUS_OK
ReadX 11643 847872 4096 4096 NT_STATUS_OK
ReadX 11643 851968 61440 61440 NT_STATUS_OK
ReadX 11643 913408 4096 4096 NT_STATUS_OK
ReadX 11643 917504 61440 61440 NT_STATUS_OK
ReadX 11643 978944 4096 4096 NT_STATUS_OK
ReadX 11643 983040 61440 61440 NT_STATUS_OK
ReadX 11643 1044480 4096 4096 NT_STATUS_OK
ReadX 11643 1048576 61440 61440 NT_STATUS_OK
ReadX 11643 1110016 4096 4096 NT_STATUS_OK
ReadX 11643 1114112 61440 61440 NT_STATUS_OK
ReadX 11643 1175552 4096 4096 NT_STATUS_OK
ReadX 11643 1179648 61440 61440 NT_STATUS_OK
ReadX 11643 1241088 4096 4096 NT_STATUS_OK
ReadX 11643 1245184 61440 61440 NT_STATUS_OK
ReadX 11643 1306624 4096 4096 NT_STATUS_OK
ReadX 11643 1310720 61440 61440 NT_STATUS_OK
ReadX 11643 1372160 4096 4096 NT_STATUS_OK
ReadX 11643 1376256 61440 61440 NT_STATUS_OK
ReadX 11643 1437696 4096 4096 NT_STATUS_OK
ReadX 11643 1441792 61440 61440 NT_STATUS_OK
ReadX 11643 1503232 4096 4096 NT_STATUS_OK
ReadX 11643 1507328 61440 61440 NT_STATUS_OK
ReadX 11643 1568768 4096 4096 NT_STATUS_OK
ReadX 11643 1572864 61440 61440 NT_STATUS_OK
ReadX 11643 1634304 4096 4096 NT_STATUS_OK
ReadX 11643 1638400 61440 61440 NT_STATUS_OK
ReadX 11643 1699840 4096 4096 NT_STATUS_OK
ReadX 11643 1703936 61440 61440 NT_STATUS_OK
ReadX 11643 1765376 4096 4096 NT_STATUS_OK
ReadX 11643 1769472 61440 61440 NT_STATUS_OK
ReadX 11643 1830912 4096 4096 NT_STATUS_OK
ReadX 11643 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11641 NT_STATUS_OK
Close 11642 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
ReadX 11648 4096 4096 4096 NT_STATUS_OK
ReadX 11648 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11649 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11652 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11653 NT_STATUS_OK
Close 11653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 8192 8192 NT_STATUS_OK
ReadX 11656 8192 8192 8192 NT_STATUS_OK
ReadX 11656 16384 8192 8192 NT_STATUS_OK
ReadX 11656 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11661 NT_STATUS_OK
WriteX 11661 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
WriteX 11661 0 10438 10438 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11662 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11664 NT_STATUS_OK
Close 11664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11665 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11666 NT_STATUS_OK
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11667 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11669 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
ReadX 11670 4096 4096 4096 NT_STATUS_OK
ReadX 11670 8192 4096 4096 NT_STATUS_OK
ReadX 11670 12288 8192 8192 NT_STATUS_OK
ReadX 11670 20480 8192 8192 NT_STATUS_OK
ReadX 11670 28672 8192 8192 NT_STATUS_OK
ReadX 11670 36864 8192 8192 NT_STATUS_OK
ReadX 11670 45056 8192 8192 NT_STATUS_OK
ReadX 11670 53248 8192 8192 NT_STATUS_OK
ReadX 11670 61440 8192 8192 NT_STATUS_OK
ReadX 11670 69632 8192 8192 NT_STATUS_OK
ReadX 11670 77824 8192 8192 NT_STATUS_OK
ReadX 11670 86016 8192 8192 NT_STATUS_OK
ReadX 11670 94208 8192 8192 NT_STATUS_OK
ReadX 11670 102400 8192 8192 NT_STATUS_OK
ReadX 11670 110592 8192 8192 NT_STATUS_OK
ReadX 11670 118784 8192 8192 NT_STATUS_OK
ReadX 11670 126976 8192 8192 NT_STATUS_OK
ReadX 11670 135168 8192 8192 NT_STATUS_OK
ReadX 11670 143360 8192 8192 NT_STATUS_OK
ReadX 11670 151552 8192 8192 NT_STATUS_OK
ReadX 11670 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11672 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11675 NT_STATUS_OK
WriteX 11675 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 258 NT_STATUS_OK
WriteX 11675 0 28489 28489 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11676 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11678 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11678 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 8192 8192 NT_STATUS_OK
ReadX 11682 8192 8192 8192 NT_STATUS_OK
ReadX 11682 16384 8192 8192 NT_STATUS_OK
ReadX 11682 24576 8192 8192 NT_STATUS_OK
ReadX 11682 32768 16384 16384 NT_STATUS_OK
ReadX 11682 49152 8192 8192 NT_STATUS_OK
ReadX 11682 57344 8192 8192 NT_STATUS_OK
ReadX 11682 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11684 NT_STATUS_OK
Close 11684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11687 NT_STATUS_OK
WriteX 11687 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11687 258 NT_STATUS_OK
WriteX 11687 0 29253 29253 NT_STATUS_OK
Close 11687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11691 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11694 NT_STATUS_OK
WriteX 11694 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11694 258 NT_STATUS_OK
WriteX 11694 0 30183 30183 NT_STATUS_OK
Close 11694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11697 NT_STATUS_OK
WriteX 11697 0 510 510 NT_STATUS_OK
WriteX 11697 510 512 512 NT_STATUS_OK
WriteX 11697 1022 510 510 NT_STATUS_OK
WriteX 11697 1532 510 510 NT_STATUS_OK
WriteX 11697 2042 168 168 NT_STATUS_OK
Close 11697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11698 NT_STATUS_OK
Close 11698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
WriteX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 61440 4096 4096 NT_STATUS_OK
ReadX 11701 126976 4096 4096 NT_STATUS_OK
WriteX 11701 0 65536 65536 NT_STATUS_OK
WriteX 11701 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 61440 4096 4096 NT_STATUS_OK
ReadX 11702 126976 4096 4096 NT_STATUS_OK
ReadX 11702 192512 4096 4096 NT_STATUS_OK
ReadX 11702 258048 4096 4096 NT_STATUS_OK
WriteX 11702 0 65536 65536 NT_STATUS_OK
WriteX 11702 65536 65536 65536 NT_STATUS_OK
WriteX 11702 131072 65536 65536 NT_STATUS_OK
WriteX 11702 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 61440 4096 4096 NT_STATUS_OK
ReadX 11703 126976 4096 4096 NT_STATUS_OK
ReadX 11703 192512 4096 4096 NT_STATUS_OK
ReadX 11703 258048 4096 4096 NT_STATUS_OK
ReadX 11703 323584 4096 4096 NT_STATUS_OK
ReadX 11703 389120 4096 4096 NT_STATUS_OK
ReadX 11703 454656 4096 4096 NT_STATUS_OK
ReadX 11703 520192 4096 4096 NT_STATUS_OK
WriteX 11703 0 65536 65536 NT_STATUS_OK
WriteX 11703 65536 65536 65536 NT_STATUS_OK
WriteX 11703 131072 65536 65536 NT_STATUS_OK
WriteX 11703 196608 65536 65536 NT_STATUS_OK
WriteX 11703 262144 65536 65536 NT_STATUS_OK
WriteX 11703 327680 65536 65536 NT_STATUS_OK
WriteX 11703 393216 65536 65536 NT_STATUS_OK
WriteX 11703 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11704 NT_STATUS_OK
Close 11704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11706 NT_STATUS_OK
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11713 NT_STATUS_OK
Close 11713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11722 NT_STATUS_OK
Close 11722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11724 NT_STATUS_OK
Close 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11728 NT_STATUS_OK
Close 11728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11733 NT_STATUS_OK
Close 11733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11743 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11748 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11758 NT_STATUS_OK
Close 11758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11763 NT_STATUS_OK
Close 11763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11772 NT_STATUS_OK
WriteX 11772 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11772 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11772 0 65536 65536 NT_STATUS_OK
WriteX 11772 65536 65536 65536 NT_STATUS_OK
WriteX 11772 131072 65536 65536 NT_STATUS_OK
WriteX 11772 196608 65536 65536 NT_STATUS_OK
WriteX 11772 262144 26634 26634 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11777 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
ReadX 11780 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11785 NT_STATUS_OK
Close 11785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11790 NT_STATUS_OK
Close 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11797 NT_STATUS_OK
Close 11797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11803 NT_STATUS_OK
Close 11803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11813 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11818 NT_STATUS_OK
Close 11818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11845 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11847 NT_STATUS_OK
Close 11847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
Close 11859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
Close 11860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11871 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 4096 4096 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
ReadX 11906 4096 4096 4096 NT_STATUS_OK
ReadX 11906 8192 4096 4096 NT_STATUS_OK
ReadX 11906 12288 4096 4096 NT_STATUS_OK
ReadX 11906 16384 4096 4096 NT_STATUS_OK
ReadX 11906 20480 4096 4096 NT_STATUS_OK
ReadX 11906 24576 4096 4096 NT_STATUS_OK
ReadX 11906 28672 4096 4096 NT_STATUS_OK
ReadX 11906 32768 4096 4096 NT_STATUS_OK
ReadX 11906 36864 4096 4096 NT_STATUS_OK
ReadX 11906 40960 4096 4096 NT_STATUS_OK
ReadX 11906 45056 4096 4096 NT_STATUS_OK
ReadX 11906 49152 4096 4096 NT_STATUS_OK
ReadX 11906 53248 4096 4096 NT_STATUS_OK
ReadX 11906 57344 4096 4096 NT_STATUS_OK
ReadX 11906 61440 4096 4096 NT_STATUS_OK
ReadX 11906 65536 4096 4096 NT_STATUS_OK
ReadX 11906 69632 4096 4096 NT_STATUS_OK
ReadX 11906 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11906 1004 NT_STATUS_OK
WriteX 11906 0 4096 4096 NT_STATUS_OK
Close 11906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11907 NT_STATUS_OK
SET_FILE_INFORMATION 11907 1004 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11909 NT_STATUS_OK
Close 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11912 NT_STATUS_OK
WriteX 11912 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11912 258 NT_STATUS_OK
WriteX 11912 0 65536 65536 NT_STATUS_OK
WriteX 11912 65536 19979 19979 NT_STATUS_OK
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 1004 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
SET_FILE_INFORMATION 11913 1004 NT_STATUS_OK
WriteX 11913 0 4096 4096 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 4096 4096 NT_STATUS_OK
Close 11916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11917 NT_STATUS_OK
ReadX 11917 0 4096 4096 NT_STATUS_OK
Close 11917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11918 NT_STATUS_OK
ReadX 11918 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11918 1004 NT_STATUS_OK
WriteX 11918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11919 NT_STATUS_OK
Close 11919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Close 11908 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11924 NT_STATUS_OK
WriteX 11924 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11924 258 NT_STATUS_OK
WriteX 11924 0 65536 65536 NT_STATUS_OK
WriteX 11924 65536 17654 17654 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 1004 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
SET_FILE_INFORMATION 11925 1004 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11926 NT_STATUS_OK
SET_FILE_INFORMATION 11926 1004 NT_STATUS_OK
Close 11926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11928 NT_STATUS_OK
Close 11928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
ReadX 11930 4096 4096 4096 NT_STATUS_OK
ReadX 11930 8192 4096 4096 NT_STATUS_OK
ReadX 11930 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11930 16384 4096 4096 NT_STATUS_OK
ReadX 11930 20480 4096 4096 NT_STATUS_OK
ReadX 11930 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
Close 11931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
Close 11932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11933 1004 NT_STATUS_OK
WriteX 11933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11936 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11939 NT_STATUS_OK
WriteX 11939 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11939 258 NT_STATUS_OK
WriteX 11939 0 65536 65536 NT_STATUS_OK
WriteX 11939 65536 19490 19490 NT_STATUS_OK
Close 11939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 0 4096 4096 NT_STATUS_OK
WriteX 11940 0 4096 4096 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
WriteX 11940 0 4096 4096 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
QUERY_FILE_INFORMATION 11940 1004 NT_STATUS_OK
WriteX 11940 0 4096 4096 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
WriteX 11940 0 4096 4096 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
WriteX 11940 0 4096 4096 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
SET_FILE_INFORMATION 11940 1004 NT_STATUS_OK
WriteX 11940 0 4096 4096 NT_STATUS_OK
Flush 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11941 NT_STATUS_OK
SET_FILE_INFORMATION 11941 1004 NT_STATUS_OK
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11943 NT_STATUS_OK
Close 11943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11945 0 4096 4096 NT_STATUS_OK
Close 11945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
ReadX 11947 4096 4096 4096 NT_STATUS_OK
ReadX 11947 8192 4096 4096 NT_STATUS_OK
ReadX 11947 12288 4096 4096 NT_STATUS_OK
ReadX 11947 16384 4096 4096 NT_STATUS_OK
ReadX 11947 20480 4096 4096 NT_STATUS_OK
ReadX 11947 24576 4096 4096 NT_STATUS_OK
ReadX 11947 28672 4096 4096 NT_STATUS_OK
ReadX 11947 32768 4096 4096 NT_STATUS_OK
ReadX 11947 36864 4096 4096 NT_STATUS_OK
ReadX 11947 40960 4096 4096 NT_STATUS_OK
ReadX 11947 45056 4096 4096 NT_STATUS_OK
ReadX 11947 49152 4096 4096 NT_STATUS_OK
ReadX 11947 53248 4096 4096 NT_STATUS_OK
ReadX 11947 57344 4096 4096 NT_STATUS_OK
ReadX 11947 61440 4096 4096 NT_STATUS_OK
ReadX 11947 65536 4096 4096 NT_STATUS_OK
ReadX 11947 69632 4096 4096 NT_STATUS_OK
ReadX 11947 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11947 1004 NT_STATUS_OK
WriteX 11947 0 4096 4096 NT_STATUS_OK
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11948 NT_STATUS_OK
SET_FILE_INFORMATION 11948 1004 NT_STATUS_OK
Close 11948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11950 NT_STATUS_OK
Close 11950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11953 NT_STATUS_OK
WriteX 11953 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
WriteX 11953 0 65536 65536 NT_STATUS_OK
WriteX 11953 65536 8866 8866 NT_STATUS_OK
Close 11953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
WriteX 11954 0 4096 4096 NT_STATUS_OK
Flush 11954 NT_STATUS_OK
SET_FILE_INFORMATION 11954 1004 NT_STATUS_OK
WriteX 11954 0 4096 4096 NT_STATUS_OK
Flush 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11956 NT_STATUS_OK
ReadX 11956 0 4096 4096 NT_STATUS_OK
Close 11956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
Close 11957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
WriteX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11961 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11964 NT_STATUS_OK
WriteX 11964 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11964 258 NT_STATUS_OK
WriteX 11964 0 65536 65536 NT_STATUS_OK
WriteX 11964 65536 9298 9298 NT_STATUS_OK
Close 11964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
WriteX 11965 0 4096 4096 NT_STATUS_OK
Flush 11965 NT_STATUS_OK
SET_FILE_INFORMATION 11965 1004 NT_STATUS_OK
WriteX 11965 0 4096 4096 NT_STATUS_OK
Flush 11965 NT_STATUS_OK
Close 11965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11966 NT_STATUS_OK
SET_FILE_INFORMATION 11966 1004 NT_STATUS_OK
Close 11966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11968 NT_STATUS_OK
Close 11968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11971 0 4096 4096 NT_STATUS_OK
Close 11971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11972 4096 4096 4096 NT_STATUS_OK
ReadX 11972 8192 4096 4096 NT_STATUS_OK
ReadX 11972 12288 4096 4096 NT_STATUS_OK
ReadX 11972 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11973 NT_STATUS_OK
ReadX 11973 0 4096 4096 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11975 1004 NT_STATUS_OK
WriteX 11975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11976 NT_STATUS_OK
Close 11976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11981 NT_STATUS_OK
WriteX 11981 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 258 NT_STATUS_OK
WriteX 11981 0 65536 65536 NT_STATUS_OK
WriteX 11981 65536 11540 11540 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 4096 4096 NT_STATUS_OK
WriteX 11982 0 4096 4096 NT_STATUS_OK
Flush 11982 NT_STATUS_OK
SET_FILE_INFORMATION 11982 1004 NT_STATUS_OK
WriteX 11982 0 4096 4096 NT_STATUS_OK
Flush 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11983 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
Close 11983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11987 NT_STATUS_OK
ReadX 11987 61440 4096 4096 NT_STATUS_OK
ReadX 11987 126976 4096 4096 NT_STATUS_OK
WriteX 11987 0 65536 65536 NT_STATUS_OK
WriteX 11987 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 61440 4096 4096 NT_STATUS_OK
ReadX 11988 126976 4096 4096 NT_STATUS_OK
ReadX 11988 192512 4096 4096 NT_STATUS_OK
ReadX 11988 258048 4096 4096 NT_STATUS_OK
WriteX 11988 0 65536 65536 NT_STATUS_OK
WriteX 11988 65536 65536 65536 NT_STATUS_OK
WriteX 11988 131072 65536 65536 NT_STATUS_OK
WriteX 11988 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11989 NT_STATUS_OK
ReadX 11989 61440 4096 4096 NT_STATUS_OK
ReadX 11989 126976 4096 4096 NT_STATUS_OK
ReadX 11989 192512 4096 4096 NT_STATUS_OK
ReadX 11989 258048 4096 4096 NT_STATUS_OK
ReadX 11989 323584 4096 4096 NT_STATUS_OK
ReadX 11989 389120 4096 4096 NT_STATUS_OK
ReadX 11989 454656 4096 4096 NT_STATUS_OK
ReadX 11989 520192 4096 4096 NT_STATUS_OK
WriteX 11989 0 65536 65536 NT_STATUS_OK
WriteX 11989 65536 65536 65536 NT_STATUS_OK
WriteX 11989 131072 65536 65536 NT_STATUS_OK
WriteX 11989 196608 65536 65536 NT_STATUS_OK
WriteX 11989 262144 65536 65536 NT_STATUS_OK
WriteX 11989 327680 65536 65536 NT_STATUS_OK
WriteX 11989 393216 65536 65536 NT_STATUS_OK
WriteX 11989 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
ReadX 11990 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11991 NT_STATUS_OK
WriteX 11991 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11991 258 NT_STATUS_OK
WriteX 11991 0 53 53 NT_STATUS_OK
Close 11991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11990 8192 4096 4096 NT_STATUS_OK
ReadX 11990 12288 4096 4096 NT_STATUS_OK
WriteX 11994 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11994 258 NT_STATUS_OK
ReadX 11990 16384 4096 4096 NT_STATUS_OK
ReadX 11990 20480 4096 4096 NT_STATUS_OK
WriteX 11994 0 15360 15360 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11995 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11995 1004 NT_STATUS_OK
WriteX 11995 0 4096 4096 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11998 4096 4096 4096 NT_STATUS_OK
ReadX 11998 8192 4096 4096 NT_STATUS_OK
ReadX 11998 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
ReadX 12001 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
ReadX 12002 4096 4096 4096 NT_STATUS_OK
ReadX 12002 8192 4096 4096 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12003 NT_STATUS_OK
WriteX 12003 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12003 258 NT_STATUS_OK
WriteX 12003 0 15360 15360 NT_STATUS_OK
Close 12003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12004 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12004 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12005 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12008 NT_STATUS_OK
SET_FILE_INFORMATION 12008 1004 NT_STATUS_OK
Close 12008 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
ReadX 12011 4096 4096 4096 NT_STATUS_OK
ReadX 12011 8192 4096 4096 NT_STATUS_OK
ReadX 12011 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12011 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12011 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12013 NT_STATUS_OK
WriteX 12013 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 258 NT_STATUS_OK
WriteX 12013 0 53 53 NT_STATUS_OK
Close 12013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12012 4096 4096 4096 NT_STATUS_OK
ReadX 12012 8192 4096 4096 NT_STATUS_OK
ReadX 12012 12288 4096 4096 NT_STATUS_OK
WriteX 12016 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 258 NT_STATUS_OK
WriteX 12016 0 12006 12006 NT_STATUS_OK
Close 12016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12017 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12018 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12021 NT_STATUS_OK
Close 12021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12020 4096 4096 4096 NT_STATUS_OK
ReadX 12020 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12023 NT_STATUS_OK
WriteX 12023 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12023 258 NT_STATUS_OK
WriteX 12023 0 11991 11991 NT_STATUS_OK
Close 12023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12024 NT_STATUS_OK
ReadX 12024 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12024 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12024 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12025 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12027 NT_STATUS_OK
ReadX 12027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12028 NT_STATUS_OK
SET_FILE_INFORMATION 12028 1004 NT_STATUS_OK
Close 12028 NT_STATUS_OK
WriteX 12024 0 4096 4096 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12032 NT_STATUS_OK
Close 12032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12031 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12031 1004 NT_STATUS_OK
ReadX 12031 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12031 1004 NT_STATUS_OK
WriteX 12031 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12031 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12031 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12031 1004 NT_STATUS_OK
Close 12007 NT_STATUS_OK
WriteX 12011 0 19054 19054 NT_STATUS_OK
WriteX 12031 0 12288 12288 NT_STATUS_OK
Close 12027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12038 NT_STATUS_OK
ReadX 12038 0 61440 61440 NT_STATUS_OK
ReadX 12038 61440 4096 4096 NT_STATUS_OK
ReadX 12038 65536 61440 61440 NT_STATUS_OK
ReadX 12038 126976 4096 4096 NT_STATUS_OK
ReadX 12038 131072 61440 61440 NT_STATUS_OK
ReadX 12038 192512 4096 4096 NT_STATUS_OK
ReadX 12038 196608 61440 61440 NT_STATUS_OK
ReadX 12038 258048 4096 4096 NT_STATUS_OK
ReadX 12038 262144 61440 61440 NT_STATUS_OK
ReadX 12038 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 61440 61440 NT_STATUS_OK
ReadX 12039 61440 4096 4096 NT_STATUS_OK
ReadX 12039 65536 61440 61440 NT_STATUS_OK
ReadX 12039 126976 4096 4096 NT_STATUS_OK
ReadX 12039 131072 61440 61440 NT_STATUS_OK
ReadX 12039 192512 4096 4096 NT_STATUS_OK
ReadX 12039 196608 61440 61440 NT_STATUS_OK
ReadX 12039 258048 4096 4096 NT_STATUS_OK
ReadX 12039 262144 61440 61440 NT_STATUS_OK
ReadX 12039 323584 4096 4096 NT_STATUS_OK
ReadX 12039 327680 61440 61440 NT_STATUS_OK
ReadX 12039 389120 4096 4096 NT_STATUS_OK
ReadX 12039 393216 61440 61440 NT_STATUS_OK
ReadX 12039 454656 4096 4096 NT_STATUS_OK
ReadX 12039 458752 61440 61440 NT_STATUS_OK
ReadX 12039 520192 4096 4096 NT_STATUS_OK
ReadX 12039 524288 61440 61440 NT_STATUS_OK
ReadX 12039 585728 4096 4096 NT_STATUS_OK
ReadX 12039 589824 61440 61440 NT_STATUS_OK
ReadX 12039 651264 4096 4096 NT_STATUS_OK
ReadX 12039 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 61440 61440 NT_STATUS_OK
ReadX 12040 61440 4096 4096 NT_STATUS_OK
ReadX 12040 65536 61440 61440 NT_STATUS_OK
ReadX 12040 126976 4096 4096 NT_STATUS_OK
ReadX 12040 131072 61440 61440 NT_STATUS_OK
ReadX 12040 192512 4096 4096 NT_STATUS_OK
ReadX 12040 196608 61440 61440 NT_STATUS_OK
ReadX 12040 258048 4096 4096 NT_STATUS_OK
ReadX 12040 262144 61440 61440 NT_STATUS_OK
ReadX 12040 323584 4096 4096 NT_STATUS_OK
ReadX 12040 327680 61440 61440 NT_STATUS_OK
ReadX 12040 389120 4096 4096 NT_STATUS_OK
ReadX 12040 393216 61440 61440 NT_STATUS_OK
ReadX 12040 454656 4096 4096 NT_STATUS_OK
ReadX 12040 458752 61440 61440 NT_STATUS_OK
ReadX 12040 520192 4096 4096 NT_STATUS_OK
ReadX 12040 524288 61440 61440 NT_STATUS_OK
ReadX 12040 585728 4096 4096 NT_STATUS_OK
ReadX 12040 589824 61440 61440 NT_STATUS_OK
ReadX 12040 651264 4096 4096 NT_STATUS_OK
ReadX 12040 655360 61440 61440 NT_STATUS_OK
ReadX 12040 716800 4096 4096 NT_STATUS_OK
ReadX 12040 720896 61440 61440 NT_STATUS_OK
ReadX 12040 782336 4096 4096 NT_STATUS_OK
ReadX 12040 786432 61440 61440 NT_STATUS_OK
ReadX 12040 847872 4096 4096 NT_STATUS_OK
ReadX 12040 851968 61440 61440 NT_STATUS_OK
ReadX 12040 913408 4096 4096 NT_STATUS_OK
ReadX 12040 917504 61440 61440 NT_STATUS_OK
ReadX 12040 978944 4096 4096 NT_STATUS_OK
ReadX 12040 983040 61440 61440 NT_STATUS_OK
ReadX 12040 1044480 4096 4096 NT_STATUS_OK
ReadX 12040 1048576 61440 61440 NT_STATUS_OK
ReadX 12040 1110016 4096 4096 NT_STATUS_OK
ReadX 12040 1114112 61440 61440 NT_STATUS_OK
ReadX 12040 1175552 4096 4096 NT_STATUS_OK
ReadX 12040 1179648 61440 61440 NT_STATUS_OK
ReadX 12040 1241088 4096 4096 NT_STATUS_OK
ReadX 12040 1245184 61440 61440 NT_STATUS_OK
ReadX 12040 1306624 4096 4096 NT_STATUS_OK
ReadX 12040 1310720 61440 61440 NT_STATUS_OK
ReadX 12040 1372160 4096 4096 NT_STATUS_OK
ReadX 12040 1376256 61440 61440 NT_STATUS_OK
ReadX 12040 1437696 4096 4096 NT_STATUS_OK
ReadX 12040 1441792 61440 61440 NT_STATUS_OK
ReadX 12040 1503232 4096 4096 NT_STATUS_OK
ReadX 12040 1507328 61440 61440 NT_STATUS_OK
ReadX 12040 1568768 4096 4096 NT_STATUS_OK
ReadX 12040 1572864 61440 61440 NT_STATUS_OK
ReadX 12040 1634304 4096 4096 NT_STATUS_OK
ReadX 12040 1638400 61440 61440 NT_STATUS_OK
ReadX 12040 1699840 4096 4096 NT_STATUS_OK
ReadX 12040 1703936 61440 61440 NT_STATUS_OK
ReadX 12040 1765376 4096 4096 NT_STATUS_OK
ReadX 12040 1769472 61440 61440 NT_STATUS_OK
ReadX 12040 1830912 4096 4096 NT_STATUS_OK
ReadX 12040 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12047 NT_STATUS_OK
QUERY_FILE_INFORMATION 12047 1004 NT_STATUS_OK
WriteX 12047 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12047 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12049 NT_STATUS_OK
WriteX 12049 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 258 NT_STATUS_OK
WriteX 12049 0 491 491 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12047 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12053 NT_STATUS_OK
WriteX 12053 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12053 258 NT_STATUS_OK
WriteX 12053 0 543 543 NT_STATUS_OK
Close 12053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12060 NT_STATUS_OK
ReadX 12060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12061 NT_STATUS_OK
ReadX 12061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12062 NT_STATUS_OK
ReadX 12062 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12067 NT_STATUS_OK
QUERY_FILE_INFORMATION 12067 1004 NT_STATUS_OK
WriteX 12067 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12067 258 NT_STATUS_OK
WriteX 12067 0 2048 2048 NT_STATUS_OK
Close 12067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12068 0 4096 4096 NT_STATUS_OK
Flush 12068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12068 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12072 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12073 NT_STATUS_OK
WriteX 12073 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12073 258 NT_STATUS_OK
WriteX 12073 0 2048 2048 NT_STATUS_OK
Close 12073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12079 NT_STATUS_OK
WriteX 12079 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12079 258 NT_STATUS_OK
WriteX 12079 0 2048 2048 NT_STATUS_OK
Close 12079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12080 NT_STATUS_OK
ReadX 12080 0 2048 2048 NT_STATUS_OK
ReadX 12058 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12062 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
WriteX 12058 0 8192 8192 NT_STATUS_OK
WriteX 12059 0 4096 4096 NT_STATUS_OK
WriteX 12060 0 4096 4096 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12083 NT_STATUS_OK
ReadX 12083 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12084 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12083 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Close 12061 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12104 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 258 NT_STATUS_OK
WriteX 12104 0 2048 2048 NT_STATUS_OK
Close 12104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12106 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12112 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 1004 NT_STATUS_OK
WriteX 12112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
WriteX 12112 0 2048 2048 NT_STATUS_OK
Close 12112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12105 0 4096 4096 NT_STATUS_OK
Flush 12105 NT_STATUS_OK
WriteX 12113 0 4096 4096 NT_STATUS_OK
Flush 12113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12105 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12113 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12107 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12115 NT_STATUS_OK
WriteX 12115 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12115 258 NT_STATUS_OK
WriteX 12115 0 4096 4096 NT_STATUS_OK
Close 12115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12116 NT_STATUS_OK
ReadX 12116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12117 NT_STATUS_OK
Close 12117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12118 NT_STATUS_OK
WriteX 12118 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12118 258 NT_STATUS_OK
WriteX 12118 0 4096 4096 NT_STATUS_OK
Close 12118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12119 NT_STATUS_OK
ReadX 12119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12119 0 4096 4096 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12125 NT_STATUS_OK
Close 12125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12126 NT_STATUS_OK
WriteX 12126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 258 NT_STATUS_OK
WriteX 12126 0 2048 2048 NT_STATUS_OK
Close 12126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12130 NT_STATUS_OK
ReadX 12130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12131 NT_STATUS_OK
ReadX 12131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12132 NT_STATUS_OK
ReadX 12132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12135 NT_STATUS_OK
ReadX 12135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12136 NT_STATUS_OK
ReadX 12136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12138 NT_STATUS_OK
ReadX 12138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12140 NT_STATUS_OK
ReadX 12140 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12141 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12139 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Close 12136 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Close 12138 NT_STATUS_OK
Close 12140 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Close 12130 NT_STATUS_OK
Close 12131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12143 NT_STATUS_OK
QUERY_FILE_INFORMATION 12143 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12146 NT_STATUS_OK
ReadX 12146 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12147 NT_STATUS_OK
ReadX 12147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12149 NT_STATUS_OK
ReadX 12149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12150 NT_STATUS_OK
ReadX 12150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12162 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12163 NT_STATUS_OK
QUERY_FILE_INFORMATION 12163 1004 NT_STATUS_OK
WriteX 12163 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12163 258 NT_STATUS_OK
WriteX 12163 0 2048 2048 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12164 NT_STATUS_OK
ReadX 12164 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12166 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12175 NT_STATUS_OK
QUERY_FILE_INFORMATION 12175 1004 NT_STATUS_OK
WriteX 12175 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12175 258 NT_STATUS_OK
WriteX 12175 0 2048 2048 NT_STATUS_OK
Close 12175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12183 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 1004 NT_STATUS_OK
WriteX 12183 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 258 NT_STATUS_OK
WriteX 12183 0 2048 2048 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12164 0 4096 4096 NT_STATUS_OK
Flush 12164 NT_STATUS_OK
WriteX 12176 0 4096 4096 NT_STATUS_OK
Flush 12176 NT_STATUS_OK
WriteX 12184 0 4096 4096 NT_STATUS_OK
Flush 12184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12164 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12176 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12184 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12166 4096 16384 16384 NT_STATUS_OK
ReadX 12146 4096 16384 16384 NT_STATUS_OK
ReadX 12178 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 2048 2048 NT_STATUS_OK
WriteX 12186 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12187 NT_STATUS_OK
QUERY_FILE_INFORMATION 12187 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Close 12150 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Close 12147 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Close 12149 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12189 NT_STATUS_OK
QUERY_FILE_INFORMATION 12189 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12191 NT_STATUS_OK
QUERY_FILE_INFORMATION 12191 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12196 NT_STATUS_OK
ReadX 12196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12194 4096 16384 16384 NT_STATUS_OK
WriteX 12194 0 4096 4096 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
WriteX 12196 0 4096 4096 NT_STATUS_OK
WriteX 12197 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12203 NT_STATUS_OK
ReadX 12203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12208 NT_STATUS_OK
ReadX 12208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12209 NT_STATUS_OK
ReadX 12209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12212 NT_STATUS_OK
ReadX 12212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12213 NT_STATUS_OK
ReadX 12213 0 8192 8192 NT_STATUS_OK
ReadX 12200 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12214 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12214 0 4096 4096 NT_STATUS_OK
ReadX 12214 4096 4096 4096 NT_STATUS_OK
ReadX 12214 8192 4096 4096 NT_STATUS_OK
WriteX 12200 0 4096 4096 NT_STATUS_OK
WriteX 12201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12215 0 4096 4096 NT_STATUS_OK
ReadX 12215 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12194 0 4096 4096 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
WriteX 12196 0 4096 4096 NT_STATUS_OK
WriteX 12197 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12220 NT_STATUS_OK
QUERY_FILE_INFORMATION 12220 1004 NT_STATUS_OK
WriteX 12220 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12220 258 NT_STATUS_OK
WriteX 12220 0 2048 2048 NT_STATUS_OK
Close 12220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12222 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12223 NT_STATUS_OK
ReadX 12223 0 4096 4096 NT_STATUS_OK
ReadX 12223 4096 4096 4096 NT_STATUS_OK
WriteX 12223 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
ReadX 12225 4096 4096 4096 NT_STATUS_OK
WriteX 12225 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12226 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12213 NT_STATUS_OK
Close 12198 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12196 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Close 12209 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12212 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Close 12203 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12228 0 4096 4096 NT_STATUS_OK
ReadX 12228 4096 4096 4096 NT_STATUS_OK
ReadX 12228 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12231 NT_STATUS_OK
ReadX 12231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12239 NT_STATUS_OK
ReadX 12239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
ReadX 12229 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12246 NT_STATUS_OK
QUERY_FILE_INFORMATION 12246 1004 NT_STATUS_OK
WriteX 12246 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12246 258 NT_STATUS_OK
WriteX 12246 0 2048 2048 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12247 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12252 NT_STATUS_OK
QUERY_FILE_INFORMATION 12252 1004 NT_STATUS_OK
WriteX 12252 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12252 258 NT_STATUS_OK
WriteX 12252 0 2048 2048 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12253 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12236 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12254 NT_STATUS_OK
QUERY_FILE_INFORMATION 12254 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12240 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12230 NT_STATUS_OK
Close 12233 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Close 12231 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12239 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12256 NT_STATUS_OK
QUERY_FILE_INFORMATION 12256 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12258 NT_STATUS_OK
ReadX 12258 61440 4096 4096 NT_STATUS_OK
ReadX 12258 126976 4096 4096 NT_STATUS_OK
WriteX 12258 0 65536 65536 NT_STATUS_OK
WriteX 12258 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 61440 4096 4096 NT_STATUS_OK
ReadX 12259 126976 4096 4096 NT_STATUS_OK
ReadX 12259 192512 4096 4096 NT_STATUS_OK
ReadX 12259 258048 4096 4096 NT_STATUS_OK
WriteX 12259 0 65536 65536 NT_STATUS_OK
WriteX 12259 65536 65536 65536 NT_STATUS_OK
WriteX 12259 131072 65536 65536 NT_STATUS_OK
WriteX 12259 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 61440 4096 4096 NT_STATUS_OK
ReadX 12260 126976 4096 4096 NT_STATUS_OK
ReadX 12260 192512 4096 4096 NT_STATUS_OK
ReadX 12260 258048 4096 4096 NT_STATUS_OK
ReadX 12260 323584 4096 4096 NT_STATUS_OK
ReadX 12260 389120 4096 4096 NT_STATUS_OK
ReadX 12260 454656 4096 4096 NT_STATUS_OK
ReadX 12260 520192 4096 4096 NT_STATUS_OK
WriteX 12260 0 65536 65536 NT_STATUS_OK
WriteX 12260 65536 65536 65536 NT_STATUS_OK
WriteX 12260 131072 65536 65536 NT_STATUS_OK
WriteX 12260 196608 65536 65536 NT_STATUS_OK
WriteX 12260 262144 65536 65536 NT_STATUS_OK
WriteX 12260 327680 65536 65536 NT_STATUS_OK
WriteX 12260 393216 65536 65536 NT_STATUS_OK
WriteX 12260 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12261 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12261 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12261 8192 4096 4096 NT_STATUS_OK
ReadX 12261 12288 4096 4096 NT_STATUS_OK
ReadX 12261 16384 4096 4096 NT_STATUS_OK
ReadX 12261 20480 4096 4096 NT_STATUS_OK
ReadX 12261 24576 4096 4096 NT_STATUS_OK
ReadX 12261 28672 4096 4096 NT_STATUS_OK
ReadX 12261 32768 4096 4096 NT_STATUS_OK
ReadX 12261 36864 4096 4096 NT_STATUS_OK
ReadX 12261 40960 4096 4096 NT_STATUS_OK
ReadX 12261 45056 4096 4096 NT_STATUS_OK
ReadX 12261 49152 4096 4096 NT_STATUS_OK
ReadX 12261 53248 4096 4096 NT_STATUS_OK
ReadX 12261 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12261 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12262 NT_STATUS_OK
Close 12262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12258 NT_STATUS_OK
Close 12259 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12264 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12264 1004 NT_STATUS_OK
WriteX 12264 0 57088 57088 NT_STATUS_OK
WriteX 12264 0 4096 4096 NT_STATUS_OK
Flush 12264 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12265 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
Close 12265 NT_STATUS_OK
SET_FILE_INFORMATION 12264 1004 NT_STATUS_OK
WriteX 12264 0 4096 4096 NT_STATUS_OK
Close 12264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12266 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12268 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12269 NT_STATUS_OK
WriteX 12269 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12269 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12269 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
WriteX 12269 0 51456 51456 NT_STATUS_OK
WriteX 12269 0 4096 4096 NT_STATUS_OK
Flush 12269 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
WriteX 12269 0 4096 4096 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12273 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12278 NT_STATUS_OK
WriteX 12278 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 258 NT_STATUS_OK
WriteX 12278 0 53077 53077 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12279 NT_STATUS_OK
WriteX 12279 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12279 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12279 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12279 1004 NT_STATUS_OK
WriteX 12279 0 65536 65536 NT_STATUS_OK
WriteX 12279 65536 1856 1856 NT_STATUS_OK
WriteX 12279 0 4096 4096 NT_STATUS_OK
Flush 12279 NT_STATUS_OK
SET_FILE_INFORMATION 12279 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12279 1004 NT_STATUS_OK
WriteX 12279 0 4096 4096 NT_STATUS_OK
Close 12279 NT_STATUS_OK
Close 12273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12281 NT_STATUS_OK
Close 12281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12285 NT_STATUS_OK
Close 12285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12288 NT_STATUS_OK
WriteX 12288 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 258 NT_STATUS_OK
WriteX 12288 0 7983 7983 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12293 NT_STATUS_OK
WriteX 12293 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12293 258 NT_STATUS_OK
WriteX 12293 0 65536 65536 NT_STATUS_OK
WriteX 12293 65536 65536 65536 NT_STATUS_OK
WriteX 12293 131072 65536 65536 NT_STATUS_OK
WriteX 12293 196608 65536 65536 NT_STATUS_OK
WriteX 12293 262144 65536 65536 NT_STATUS_OK
WriteX 12293 327680 65536 65536 NT_STATUS_OK
WriteX 12293 393216 65536 65536 NT_STATUS_OK
WriteX 12293 458752 46731 46731 NT_STATUS_OK
Close 12293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12294 NT_STATUS_OK
WriteX 12294 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12294 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12283 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12294 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 65536 65536 NT_STATUS_OK
WriteX 12294 65536 22848 22848 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
Flush 12294 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12298 NT_STATUS_OK
ReadX 12298 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12298 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12299 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12299 1004 NT_STATUS_OK
ReadX 12299 8192 4096 4096 NT_STATUS_OK
ReadX 12299 12288 4096 4096 NT_STATUS_OK
ReadX 12299 16384 4096 4096 NT_STATUS_OK
ReadX 12299 20480 4096 4096 NT_STATUS_OK
ReadX 12299 24576 4096 4096 NT_STATUS_OK
ReadX 12299 28672 4096 4096 NT_STATUS_OK
ReadX 12299 32768 4096 4096 NT_STATUS_OK
ReadX 12299 36864 4096 4096 NT_STATUS_OK
ReadX 12299 40960 4096 4096 NT_STATUS_OK
ReadX 12299 45056 4096 4096 NT_STATUS_OK
ReadX 12299 49152 4096 4096 NT_STATUS_OK
ReadX 12299 53248 4096 4096 NT_STATUS_OK
ReadX 12299 57344 4096 4096 NT_STATUS_OK
ReadX 12299 61440 4096 4096 NT_STATUS_OK
ReadX 12299 65536 4096 4096 NT_STATUS_OK
ReadX 12299 69632 4096 4096 NT_STATUS_OK
ReadX 12299 73728 4096 4096 NT_STATUS_OK
ReadX 12299 77824 4096 4096 NT_STATUS_OK
ReadX 12299 81920 4096 4096 NT_STATUS_OK
ReadX 12299 86016 4096 4096 NT_STATUS_OK
ReadX 12299 90112 4096 4096 NT_STATUS_OK
ReadX 12299 94208 4096 4096 NT_STATUS_OK
ReadX 12299 98304 4096 4096 NT_STATUS_OK
ReadX 12299 102400 4096 4096 NT_STATUS_OK
ReadX 12299 106496 4096 4096 NT_STATUS_OK
ReadX 12299 110592 4096 4096 NT_STATUS_OK
ReadX 12299 114688 4096 4096 NT_STATUS_OK
ReadX 12299 118784 4096 4096 NT_STATUS_OK
ReadX 12299 122880 4096 4096 NT_STATUS_OK
ReadX 12299 126976 4096 4096 NT_STATUS_OK
ReadX 12299 131072 4096 4096 NT_STATUS_OK
ReadX 12299 135168 4096 4096 NT_STATUS_OK
ReadX 12299 139264 4096 4096 NT_STATUS_OK
ReadX 12299 143360 4096 4096 NT_STATUS_OK
ReadX 12299 147456 4096 4096 NT_STATUS_OK
ReadX 12299 151552 4096 4096 NT_STATUS_OK
ReadX 12299 155648 4096 4096 NT_STATUS_OK
ReadX 12299 159744 4096 4096 NT_STATUS_OK
ReadX 12299 163840 4096 4096 NT_STATUS_OK
ReadX 12299 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12299 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12300 NT_STATUS_OK
Close 12300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
Close 12299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12303 NT_STATUS_OK
SET_FILE_INFORMATION 12303 1004 NT_STATUS_OK
Close 12303 NT_STATUS_OK
WriteX 12302 0 42388 42388 NT_STATUS_OK
Close 12302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
ReadX 12306 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12307 NT_STATUS_OK
WriteX 12307 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12307 258 NT_STATUS_OK
SET_FILE_INFORMATION 12307 1004 NT_STATUS_OK
WriteX 12307 0 42652 42652 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
ReadX 12311 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12316 NT_STATUS_OK
WriteX 12316 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12316 258 NT_STATUS_OK
WriteX 12316 0 65536 65536 NT_STATUS_OK
WriteX 12316 65536 49 49 NT_STATUS_OK
Close 12316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 61440 61440 NT_STATUS_OK
ReadX 12317 61440 4096 4096 NT_STATUS_OK
ReadX 12317 65536 61440 61440 NT_STATUS_OK
ReadX 12317 126976 4096 4096 NT_STATUS_OK
ReadX 12317 131072 61440 61440 NT_STATUS_OK
ReadX 12317 192512 4096 4096 NT_STATUS_OK
ReadX 12317 196608 61440 61440 NT_STATUS_OK
ReadX 12317 258048 4096 4096 NT_STATUS_OK
ReadX 12317 262144 61440 61440 NT_STATUS_OK
ReadX 12317 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 61440 61440 NT_STATUS_OK
ReadX 12318 61440 4096 4096 NT_STATUS_OK
ReadX 12318 65536 61440 61440 NT_STATUS_OK
ReadX 12318 126976 4096 4096 NT_STATUS_OK
ReadX 12318 131072 61440 61440 NT_STATUS_OK
ReadX 12318 192512 4096 4096 NT_STATUS_OK
ReadX 12318 196608 61440 61440 NT_STATUS_OK
ReadX 12318 258048 4096 4096 NT_STATUS_OK
ReadX 12318 262144 61440 61440 NT_STATUS_OK
ReadX 12318 323584 4096 4096 NT_STATUS_OK
ReadX 12318 327680 61440 61440 NT_STATUS_OK
ReadX 12318 389120 4096 4096 NT_STATUS_OK
ReadX 12318 393216 61440 61440 NT_STATUS_OK
ReadX 12318 454656 4096 4096 NT_STATUS_OK
ReadX 12318 458752 61440 61440 NT_STATUS_OK
ReadX 12318 520192 4096 4096 NT_STATUS_OK
ReadX 12318 524288 61440 61440 NT_STATUS_OK
ReadX 12318 585728 4096 4096 NT_STATUS_OK
ReadX 12318 589824 61440 61440 NT_STATUS_OK
ReadX 12318 651264 4096 4096 NT_STATUS_OK
ReadX 12318 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 61440 61440 NT_STATUS_OK
ReadX 12319 61440 4096 4096 NT_STATUS_OK
ReadX 12319 65536 61440 61440 NT_STATUS_OK
ReadX 12319 126976 4096 4096 NT_STATUS_OK
ReadX 12319 131072 61440 61440 NT_STATUS_OK
ReadX 12319 192512 4096 4096 NT_STATUS_OK
ReadX 12319 196608 61440 61440 NT_STATUS_OK
ReadX 12319 258048 4096 4096 NT_STATUS_OK
ReadX 12319 262144 61440 61440 NT_STATUS_OK
ReadX 12319 323584 4096 4096 NT_STATUS_OK
ReadX 12319 327680 61440 61440 NT_STATUS_OK
ReadX 12319 389120 4096 4096 NT_STATUS_OK
ReadX 12319 393216 61440 61440 NT_STATUS_OK
ReadX 12319 454656 4096 4096 NT_STATUS_OK
ReadX 12319 458752 61440 61440 NT_STATUS_OK
ReadX 12319 520192 4096 4096 NT_STATUS_OK
ReadX 12319 524288 61440 61440 NT_STATUS_OK
ReadX 12319 585728 4096 4096 NT_STATUS_OK
ReadX 12319 589824 61440 61440 NT_STATUS_OK
ReadX 12319 651264 4096 4096 NT_STATUS_OK
ReadX 12319 655360 61440 61440 NT_STATUS_OK
ReadX 12319 716800 4096 4096 NT_STATUS_OK
ReadX 12319 720896 61440 61440 NT_STATUS_OK
ReadX 12319 782336 4096 4096 NT_STATUS_OK
ReadX 12319 786432 61440 61440 NT_STATUS_OK
ReadX 12319 847872 4096 4096 NT_STATUS_OK
ReadX 12319 851968 61440 61440 NT_STATUS_OK
ReadX 12319 913408 4096 4096 NT_STATUS_OK
ReadX 12319 917504 61440 61440 NT_STATUS_OK
ReadX 12319 978944 4096 4096 NT_STATUS_OK
ReadX 12319 983040 61440 61440 NT_STATUS_OK
ReadX 12319 1044480 4096 4096 NT_STATUS_OK
ReadX 12319 1048576 61440 61440 NT_STATUS_OK
ReadX 12319 1110016 4096 4096 NT_STATUS_OK
ReadX 12319 1114112 61440 61440 NT_STATUS_OK
ReadX 12319 1175552 4096 4096 NT_STATUS_OK
ReadX 12319 1179648 61440 61440 NT_STATUS_OK
ReadX 12319 1241088 4096 4096 NT_STATUS_OK
ReadX 12319 1245184 61440 61440 NT_STATUS_OK
ReadX 12319 1306624 4096 4096 NT_STATUS_OK
ReadX 12319 1310720 61440 61440 NT_STATUS_OK
ReadX 12319 1372160 4096 4096 NT_STATUS_OK
ReadX 12319 1376256 61440 61440 NT_STATUS_OK
ReadX 12319 1437696 4096 4096 NT_STATUS_OK
ReadX 12319 1441792 61440 61440 NT_STATUS_OK
ReadX 12319 1503232 4096 4096 NT_STATUS_OK
ReadX 12319 1507328 61440 61440 NT_STATUS_OK
ReadX 12319 1568768 4096 4096 NT_STATUS_OK
ReadX 12319 1572864 61440 61440 NT_STATUS_OK
ReadX 12319 1634304 4096 4096 NT_STATUS_OK
ReadX 12319 1638400 61440 61440 NT_STATUS_OK
ReadX 12319 1699840 4096 4096 NT_STATUS_OK
ReadX 12319 1703936 61440 61440 NT_STATUS_OK
ReadX 12319 1765376 4096 4096 NT_STATUS_OK
ReadX 12319 1769472 61440 61440 NT_STATUS_OK
ReadX 12319 1830912 4096 4096 NT_STATUS_OK
ReadX 12319 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12320 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12321 NT_STATUS_OK
QUERY_FILE_INFORMATION 12321 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12321 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12321 1005 NT_STATUS_OK
ReadX 12321 2156 24 24 NT_STATUS_OK
ReadX 12321 2139 276 276 NT_STATUS_OK
ReadX 12321 2136 14 14 NT_STATUS_OK
ReadX 12321 2136 7 7 NT_STATUS_OK
ReadX 12321 2138 12 12 NT_STATUS_OK
ReadX 12321 2137 8 8 NT_STATUS_OK
ReadX 12321 2135 15 15 NT_STATUS_OK
ReadX 12321 0 16 16 NT_STATUS_OK
ReadX 12321 16 2048 2048 NT_STATUS_OK
ReadX 12321 2064 2048 2048 NT_STATUS_OK
ReadX 12321 257 2048 2048 NT_STATUS_OK
ReadX 12321 385 2048 2048 NT_STATUS_OK
ReadX 12321 513 2048 2048 NT_STATUS_OK
ReadX 12321 641 2048 2048 NT_STATUS_OK
ReadX 12321 769 2048 2048 NT_STATUS_OK
ReadX 12321 897 2048 2048 NT_STATUS_OK
ReadX 12321 1025 2048 2048 NT_STATUS_OK
ReadX 12321 1153 2048 2048 NT_STATUS_OK
ReadX 12321 1281 2048 2048 NT_STATUS_OK
ReadX 12321 1409 2048 2048 NT_STATUS_OK
ReadX 12321 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12323 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12317 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Close 12311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12326 NT_STATUS_OK
WriteX 12326 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12326 258 NT_STATUS_OK
WriteX 12326 0 10575 10575 NT_STATUS_OK
Flush 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12327 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 4096 4096 NT_STATUS_OK
Close 12321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12331 NT_STATUS_OK
LockX 12331 2147483538 1 NT_STATUS_OK
UnlockX 12331 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 1005 NT_STATUS_OK
ReadX 12331 0 512 512 NT_STATUS_OK
ReadX 12331 512 512 512 NT_STATUS_OK
ReadX 12331 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 1004 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12332 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 1005 NT_STATUS_OK
ReadX 12332 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12333 NT_STATUS_OK
LockX 12333 2147483538 1 NT_STATUS_OK
UnlockX 12333 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12333 1005 NT_STATUS_OK
ReadX 12333 0 512 512 NT_STATUS_OK
ReadX 12333 512 512 512 NT_STATUS_OK
ReadX 12333 1024 512 512 NT_STATUS_OK
ReadX 12333 288 20 20 NT_STATUS_OK
ReadX 12333 308 2084 2084 NT_STATUS_OK
ReadX 12333 388 2084 2084 NT_STATUS_OK
ReadX 12333 388 2084 2084 NT_STATUS_OK
ReadX 12320 2157 1386 1386 NT_STATUS_OK
ReadX 12333 2472 399 399 NT_STATUS_OK
ReadX 12333 3072 1536 1536 NT_STATUS_OK
ReadX 12333 544 149 149 NT_STATUS_OK
ReadX 12333 693 485 485 NT_STATUS_OK
Close 12333 NT_STATUS_OK
ReadX 12320 2157 4096 4096 NT_STATUS_OK
ReadX 12320 6253 4096 4096 NT_STATUS_OK
ReadX 12320 10349 4096 4096 NT_STATUS_OK
ReadX 12320 14445 4096 4096 NT_STATUS_OK
ReadX 12320 18541 4096 4096 NT_STATUS_OK
ReadX 12320 22637 256 256 NT_STATUS_OK
ReadX 12320 22893 4096 4096 NT_STATUS_OK
ReadX 12320 26989 4096 4096 NT_STATUS_OK
ReadX 12320 31085 4096 4096 NT_STATUS_OK
ReadX 12320 35181 4096 4096 NT_STATUS_OK
ReadX 12320 39277 4096 4096 NT_STATUS_OK
ReadX 12320 43373 4096 4096 NT_STATUS_OK
ReadX 12320 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12320 2157 1024 1024 NT_STATUS_OK
ReadX 12320 1667 4688 4688 NT_STATUS_OK
ReadX 12320 6355 3516 3516 NT_STATUS_OK
ReadX 12320 9871 16384 16384 NT_STATUS_OK
ReadX 12320 26255 3771 3771 NT_STATUS_OK
ReadX 12320 30026 2048 2048 NT_STATUS_OK
ReadX 12320 32074 1024 1024 NT_STATUS_OK
ReadX 12320 33098 6652 6652 NT_STATUS_OK
ReadX 12320 39750 16384 16384 NT_STATUS_OK
ReadX 12320 56134 10496 10496 NT_STATUS_OK
ReadX 12320 66630 1784 1784 NT_STATUS_OK
ReadX 12320 68414 90 90 NT_STATUS_OK
ReadX 12320 68504 273 273 NT_STATUS_OK
ReadX 12320 68777 1600 1600 NT_STATUS_OK
ReadX 12320 70377 640 640 NT_STATUS_OK
ReadX 12320 71017 1280 1280 NT_STATUS_OK
ReadX 12320 72297 8464 8464 NT_STATUS_OK
ReadX 12320 80761 158 158 NT_STATUS_OK
ReadX 12320 80919 912 912 NT_STATUS_OK
ReadX 12320 81831 1980 1980 NT_STATUS_OK
ReadX 12320 83811 2256 2256 NT_STATUS_OK
ReadX 12320 86067 400 400 NT_STATUS_OK
ReadX 12320 86467 252 252 NT_STATUS_OK
ReadX 12320 86719 42 42 NT_STATUS_OK
ReadX 12320 86761 725 725 NT_STATUS_OK
ReadX 12320 2009 512 512 NT_STATUS_OK
ReadX 12320 3895 9 9 NT_STATUS_OK
ReadX 12320 3781 46 46 NT_STATUS_OK
ReadX 12320 4059 92 92 NT_STATUS_OK
ReadX 12320 3781 92 92 NT_STATUS_OK
ReadX 12320 3986 184 184 NT_STATUS_OK
ReadX 12320 3987 16384 16384 NT_STATUS_OK
ReadX 12320 3902 16384 16384 NT_STATUS_OK
ReadX 12320 3781 10240 10240 NT_STATUS_OK
ReadX 12320 3821 16384 16384 NT_STATUS_OK
ReadX 12320 3891 935 935 NT_STATUS_OK
ReadX 12320 4060 10240 10240 NT_STATUS_OK
ReadX 12320 4059 184 184 NT_STATUS_OK
ReadX 12320 256 184 184 NT_STATUS_OK
ReadX 12320 256 1026 1026 NT_STATUS_OK
ReadX 12320 3901 326 326 NT_STATUS_OK
ReadX 12320 3899 652 652 NT_STATUS_OK
ReadX 12320 256 2 2 NT_STATUS_OK
ReadX 12320 258 4948 4948 NT_STATUS_OK
Close 12320 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12335 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12338 NT_STATUS_OK
WriteX 12338 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12338 258 NT_STATUS_OK
WriteX 12338 0 65536 65536 NT_STATUS_OK
WriteX 12338 65536 65536 65536 NT_STATUS_OK
WriteX 12338 131072 65536 65536 NT_STATUS_OK
WriteX 12338 196608 65536 65536 NT_STATUS_OK
WriteX 12338 262144 65536 65536 NT_STATUS_OK
WriteX 12338 327680 65536 65536 NT_STATUS_OK
WriteX 12338 393216 65536 65536 NT_STATUS_OK
WriteX 12338 458752 65536 65536 NT_STATUS_OK
WriteX 12338 524288 65536 65536 NT_STATUS_OK
WriteX 12338 589824 35257 35257 NT_STATUS_OK
Close 12338 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12343 NT_STATUS_OK
WriteX 12343 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 258 NT_STATUS_OK
WriteX 12343 0 65536 65536 NT_STATUS_OK
WriteX 12343 65536 65536 65536 NT_STATUS_OK
WriteX 12343 131072 65536 65536 NT_STATUS_OK
WriteX 12343 196608 65536 65536 NT_STATUS_OK
WriteX 12343 262144 65536 65536 NT_STATUS_OK
WriteX 12343 327680 65536 65536 NT_STATUS_OK
WriteX 12343 393216 65536 65536 NT_STATUS_OK
WriteX 12343 458752 65536 65536 NT_STATUS_OK
WriteX 12343 524288 65536 65536 NT_STATUS_OK
WriteX 12343 589824 57598 57598 NT_STATUS_OK
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12345 NT_STATUS_OK
WriteX 12345 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12345 258 NT_STATUS_OK
WriteX 12345 0 12543 12543 NT_STATUS_OK
Flush 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12351 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 1005 NT_STATUS_OK
ReadX 12351 1938 24 24 NT_STATUS_OK
ReadX 12351 1920 276 276 NT_STATUS_OK
ReadX 12351 1918 14 14 NT_STATUS_OK
ReadX 12351 1918 7 7 NT_STATUS_OK
ReadX 12351 1919 12 12 NT_STATUS_OK
ReadX 12351 1919 8 8 NT_STATUS_OK
ReadX 12351 1917 15 15 NT_STATUS_OK
ReadX 12351 0 16 16 NT_STATUS_OK
ReadX 12351 16 2048 2048 NT_STATUS_OK
ReadX 12351 2064 2048 2048 NT_STATUS_OK
ReadX 12351 257 2048 2048 NT_STATUS_OK
ReadX 12351 385 2048 2048 NT_STATUS_OK
ReadX 12351 513 2048 2048 NT_STATUS_OK
ReadX 12351 641 2048 2048 NT_STATUS_OK
ReadX 12351 769 2048 2048 NT_STATUS_OK
ReadX 12351 897 2048 2048 NT_STATUS_OK
ReadX 12351 1025 2048 2048 NT_STATUS_OK
ReadX 12351 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12356 NT_STATUS_OK
WriteX 12356 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12356 258 NT_STATUS_OK
WriteX 12356 0 11588 11588 NT_STATUS_OK
Flush 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12357 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 4096 4096 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12361 NT_STATUS_OK
WriteX 12361 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12361 258 NT_STATUS_OK
WriteX 12361 0 11615 11615 NT_STATUS_OK
Flush 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12370 NT_STATUS_OK
WriteX 12370 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12370 258 NT_STATUS_OK
WriteX 12370 0 65536 65536 NT_STATUS_OK
WriteX 12370 65536 16050 16050 NT_STATUS_OK
Close 12370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12350 1939 64 64 NT_STATUS_OK
ReadX 12350 128 248 248 NT_STATUS_OK
ReadX 12350 128 568 568 NT_STATUS_OK
ReadX 12350 3872 1536 1536 NT_STATUS_OK
ReadX 12350 3456 2560 2560 NT_STATUS_OK
ReadX 12350 3136 512 512 NT_STATUS_OK
ReadX 12350 2880 4096 4096 NT_STATUS_OK
ReadX 12350 3264 3072 3072 NT_STATUS_OK
ReadX 12350 320 4096 4096 NT_STATUS_OK
ReadX 12350 1024 4096 4096 NT_STATUS_OK
ReadX 12350 3616 4096 4096 NT_STATUS_OK
ReadX 12350 1939 64 64 NT_STATUS_OK
ReadX 12350 128 248 248 NT_STATUS_OK
ReadX 12350 128 608 608 NT_STATUS_OK
ReadX 12350 2858 1024 1024 NT_STATUS_OK
ReadX 12350 2810 4096 4096 NT_STATUS_OK
ReadX 12350 2826 4096 4096 NT_STATUS_OK
ReadX 12350 2580 2048 2048 NT_STATUS_OK
ReadX 12350 2800 2560 2560 NT_STATUS_OK
ReadX 12350 2100 4096 4096 NT_STATUS_OK
ReadX 12350 2084 4096 4096 NT_STATUS_OK
ReadX 12350 868 4096 4096 NT_STATUS_OK
ReadX 12350 2324 4096 4096 NT_STATUS_OK
ReadX 12350 884 4096 4096 NT_STATUS_OK
ReadX 12350 2604 1024 1024 NT_STATUS_OK
ReadX 12350 580 4096 4096 NT_STATUS_OK
ReadX 12350 596 4096 4096 NT_STATUS_OK
ReadX 12350 2752 4096 4096 NT_STATUS_OK
ReadX 12350 2842 1024 1024 NT_STATUS_OK
ReadX 12350 660 4096 4096 NT_STATUS_OK
ReadX 12350 2720 4096 4096 NT_STATUS_OK
ReadX 12350 2736 4096 4096 NT_STATUS_OK
ReadX 12350 628 4096 4096 NT_STATUS_OK
ReadX 12350 2704 4096 4096 NT_STATUS_OK
ReadX 12350 1556 4096 4096 NT_STATUS_OK
ReadX 12350 576 4096 4096 NT_STATUS_OK
ReadX 12350 3168 1536 1536 NT_STATUS_OK
ReadX 12350 832 4096 4096 NT_STATUS_OK
ReadX 12350 1088 4096 4096 NT_STATUS_OK
ReadX 12350 1344 4096 4096 NT_STATUS_OK
ReadX 12350 1600 4096 4096 NT_STATUS_OK
ReadX 12350 1856 4096 4096 NT_STATUS_OK
ReadX 12350 2112 4096 4096 NT_STATUS_OK
ReadX 12350 1892 4096 4096 NT_STATUS_OK
ReadX 12350 820 4096 4096 NT_STATUS_OK
ReadX 12350 788 4096 4096 NT_STATUS_OK
ReadX 12350 1604 4096 4096 NT_STATUS_OK
ReadX 12350 3648 4096 4096 NT_STATUS_OK
ReadX 12350 2608 4096 4096 NT_STATUS_OK
ReadX 12350 548 4096 4096 NT_STATUS_OK
ReadX 12350 740 4096 4096 NT_STATUS_OK
ReadX 12350 1344 4096 4096 NT_STATUS_OK
ReadX 12350 3392 4096 4096 NT_STATUS_OK
ReadX 12350 3904 4096 4096 NT_STATUS_OK
ReadX 12350 644 4096 4096 NT_STATUS_OK
ReadX 12350 676 4096 4096 NT_STATUS_OK
ReadX 12350 2688 4096 4096 NT_STATUS_OK
ReadX 12350 320 4096 4096 NT_STATUS_OK
ReadX 12350 900 4096 4096 NT_STATUS_OK
ReadX 12350 1908 4096 4096 NT_STATUS_OK
ReadX 12350 852 4096 4096 NT_STATUS_OK
ReadX 12350 724 4096 4096 NT_STATUS_OK
ReadX 12350 2292 4096 4096 NT_STATUS_OK
ReadX 12350 612 4096 4096 NT_STATUS_OK
ReadX 12350 388 4096 4096 NT_STATUS_OK
ReadX 12350 2368 4096 4096 NT_STATUS_OK
ReadX 12350 2624 4096 4096 NT_STATUS_OK
ReadX 12350 500 4096 4096 NT_STATUS_OK
ReadX 12350 356 4096 4096 NT_STATUS_OK
ReadX 12350 1024 4096 4096 NT_STATUS_OK
ReadX 12350 576 4096 4096 NT_STATUS_OK
ReadX 12350 340 4096 4096 NT_STATUS_OK
ReadX 12350 420 4096 4096 NT_STATUS_OK
ReadX 12350 1600 4096 4096 NT_STATUS_OK
ReadX 12350 404 4096 4096 NT_STATUS_OK
ReadX 12350 1428 4096 4096 NT_STATUS_OK
ReadX 12350 2656 4096 4096 NT_STATUS_OK
ReadX 12350 2624 4096 4096 NT_STATUS_OK
ReadX 12350 452 4096 4096 NT_STATUS_OK
ReadX 12350 692 4096 4096 NT_STATUS_OK
ReadX 12350 564 4096 4096 NT_STATUS_OK
ReadX 12350 372 4096 4096 NT_STATUS_OK
ReadX 12350 468 4096 4096 NT_STATUS_OK
ReadX 12350 484 4096 4096 NT_STATUS_OK
ReadX 12350 1088 4096 4096 NT_STATUS_OK
ReadX 12350 1924 4096 4096 NT_STATUS_OK
ReadX 12350 2768 4096 4096 NT_STATUS_OK
ReadX 12350 832 4096 4096 NT_STATUS_OK
ReadX 12350 836 4096 4096 NT_STATUS_OK
ReadX 12350 1856 4096 4096 NT_STATUS_OK
ReadX 12350 2640 4096 4096 NT_STATUS_OK
ReadX 12350 436 4096 4096 NT_STATUS_OK
ReadX 12350 1828 4096 4096 NT_STATUS_OK
ReadX 12350 804 4096 4096 NT_STATUS_OK
ReadX 12350 1860 4096 4096 NT_STATUS_OK
ReadX 12350 1812 4096 4096 NT_STATUS_OK
ReadX 12350 756 4096 4096 NT_STATUS_OK
ReadX 12350 1636 4096 4096 NT_STATUS_OK
ReadX 12350 772 4096 4096 NT_STATUS_OK
ReadX 12350 2036 4096 4096 NT_STATUS_OK
ReadX 12350 1220 4096 4096 NT_STATUS_OK
ReadX 12350 1652 4096 4096 NT_STATUS_OK
ReadX 12350 2588 4096 4096 NT_STATUS_OK
ReadX 12350 916 4096 4096 NT_STATUS_OK
ReadX 12350 260 4096 4096 NT_STATUS_OK
ReadX 12350 932 4096 4096 NT_STATUS_OK
ReadX 12350 2624 4096 4096 NT_STATUS_OK
ReadX 12350 308 4096 4096 NT_STATUS_OK
ReadX 12350 292 4096 4096 NT_STATUS_OK
ReadX 12350 1140 4096 4096 NT_STATUS_OK
ReadX 12350 276 4096 4096 NT_STATUS_OK
ReadX 12350 2020 4096 4096 NT_STATUS_OK
ReadX 12350 2880 4096 4096 NT_STATUS_OK
ReadX 12350 516 4096 4096 NT_STATUS_OK
ReadX 12350 1844 4096 4096 NT_STATUS_OK
ReadX 12350 1124 4096 4096 NT_STATUS_OK
ReadX 12350 3136 4096 4096 NT_STATUS_OK
ReadX 12350 324 4096 4096 NT_STATUS_OK
ReadX 12350 1156 4096 4096 NT_STATUS_OK
ReadX 12350 1172 4096 4096 NT_STATUS_OK
ReadX 12350 2112 4096 4096 NT_STATUS_OK
ReadX 12350 2368 4096 4096 NT_STATUS_OK
ReadX 12350 964 4096 4096 NT_STATUS_OK
ReadX 12350 980 4096 4096 NT_STATUS_OK
ReadX 12350 1012 4096 4096 NT_STATUS_OK
ReadX 12350 532 4096 4096 NT_STATUS_OK
ReadX 12350 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12350 1620 4096 4096 NT_STATUS_OK
ReadX 12350 1604 4096 4096 NT_STATUS_OK
ReadX 12350 2116 4096 4096 NT_STATUS_OK
ReadX 12350 2132 4096 4096 NT_STATUS_OK
ReadX 12350 2148 4096 4096 NT_STATUS_OK
ReadX 12350 2276 4096 4096 NT_STATUS_OK
ReadX 12350 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12375 NT_STATUS_OK
QUERY_FILE_INFORMATION 12330 1004 NT_STATUS_OK
Close 12330 NT_STATUS_OK
WriteX 12375 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12375 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 1004 NT_STATUS_OK
Close 12332 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 64850 64850 NT_STATUS_OK
Close 12375 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12377 NT_STATUS_OK
WriteX 12377 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12377 258 NT_STATUS_OK
ReadX 12350 2068 4096 4096 NT_STATUS_OK
ReadX 12350 1588 4096 4096 NT_STATUS_OK
ReadX 12350 1572 4096 4096 NT_STATUS_OK
WriteX 12377 0 18630 18630 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12350 612 4096 4096 NT_STATUS_OK
ReadX 12350 564 4096 4096 NT_STATUS_OK
ReadX 12350 1876 4096 4096 NT_STATUS_OK
ReadX 12350 628 4096 4096 NT_STATUS_OK
ReadX 12350 740 4096 4096 NT_STATUS_OK
ReadX 12350 724 4096 4096 NT_STATUS_OK
ReadX 12350 644 4096 4096 NT_STATUS_OK
ReadX 12350 2324 4096 4096 NT_STATUS_OK
ReadX 12350 660 4096 4096 NT_STATUS_OK
ReadX 12350 852 4096 4096 NT_STATUS_OK
ReadX 12350 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12350 2368 4096 4096 NT_STATUS_OK
ReadX 12350 1024 4096 4096 NT_STATUS_OK
ReadX 12350 320 4096 4096 NT_STATUS_OK
ReadX 12350 580 4096 4096 NT_STATUS_OK
ReadX 12350 3136 512 512 NT_STATUS_OK
ReadX 12350 2880 4096 4096 NT_STATUS_OK
Close 12350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 61440 4096 4096 NT_STATUS_OK
ReadX 12382 126976 4096 4096 NT_STATUS_OK
WriteX 12382 0 65536 65536 NT_STATUS_OK
WriteX 12382 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 61440 4096 4096 NT_STATUS_OK
ReadX 12383 126976 4096 4096 NT_STATUS_OK
ReadX 12383 192512 4096 4096 NT_STATUS_OK
ReadX 12383 258048 4096 4096 NT_STATUS_OK
WriteX 12383 0 65536 65536 NT_STATUS_OK
WriteX 12383 65536 65536 65536 NT_STATUS_OK
WriteX 12383 131072 65536 65536 NT_STATUS_OK
WriteX 12383 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 61440 4096 4096 NT_STATUS_OK
ReadX 12384 126976 4096 4096 NT_STATUS_OK
ReadX 12384 192512 4096 4096 NT_STATUS_OK
ReadX 12384 258048 4096 4096 NT_STATUS_OK
ReadX 12384 323584 4096 4096 NT_STATUS_OK
ReadX 12384 389120 4096 4096 NT_STATUS_OK
ReadX 12384 454656 4096 4096 NT_STATUS_OK
ReadX 12384 520192 4096 4096 NT_STATUS_OK
WriteX 12384 0 65536 65536 NT_STATUS_OK
WriteX 12384 65536 65536 65536 NT_STATUS_OK
WriteX 12384 131072 65536 65536 NT_STATUS_OK
WriteX 12384 196608 65536 65536 NT_STATUS_OK
WriteX 12384 262144 65536 65536 NT_STATUS_OK
WriteX 12384 327680 65536 65536 NT_STATUS_OK
WriteX 12384 393216 65536 65536 NT_STATUS_OK
WriteX 12384 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12387 NT_STATUS_OK
WriteX 12387 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12385 0 8192 8192 NT_STATUS_OK
Flush 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12385 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12385 0 8192 8192 NT_STATUS_OK
Flush 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12385 0 8192 8192 NT_STATUS_OK
Flush 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12385 0 8192 8192 NT_STATUS_OK
Flush 12385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12392 NT_STATUS_OK
WriteX 12392 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12392 258 NT_STATUS_OK
WriteX 12392 0 62591 62591 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12394 NT_STATUS_OK
Close 12394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12397 NT_STATUS_OK
WriteX 12397 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12397 258 NT_STATUS_OK
WriteX 12397 0 10845 10845 NT_STATUS_OK
Close 12397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12399 NT_STATUS_OK
Close 12399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12402 NT_STATUS_OK
WriteX 12402 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12402 258 NT_STATUS_OK
WriteX 12402 0 30118 30118 NT_STATUS_OK
Close 12402 NT_STATUS_OK
WriteX 12385 0 4096 4096 NT_STATUS_OK
WriteX 12387 0 64 64 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12404 NT_STATUS_OK
ReadX 12404 0 61440 61440 NT_STATUS_OK
ReadX 12404 61440 4096 4096 NT_STATUS_OK
ReadX 12404 65536 61440 61440 NT_STATUS_OK
ReadX 12404 126976 4096 4096 NT_STATUS_OK
ReadX 12404 131072 61440 61440 NT_STATUS_OK
ReadX 12404 192512 4096 4096 NT_STATUS_OK
ReadX 12404 196608 61440 61440 NT_STATUS_OK
ReadX 12404 258048 4096 4096 NT_STATUS_OK
ReadX 12404 262144 61440 61440 NT_STATUS_OK
ReadX 12404 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 61440 61440 NT_STATUS_OK
ReadX 12405 61440 4096 4096 NT_STATUS_OK
ReadX 12405 65536 61440 61440 NT_STATUS_OK
ReadX 12405 126976 4096 4096 NT_STATUS_OK
ReadX 12405 131072 61440 61440 NT_STATUS_OK
ReadX 12405 192512 4096 4096 NT_STATUS_OK
ReadX 12405 196608 61440 61440 NT_STATUS_OK
ReadX 12405 258048 4096 4096 NT_STATUS_OK
ReadX 12405 262144 61440 61440 NT_STATUS_OK
ReadX 12405 323584 4096 4096 NT_STATUS_OK
ReadX 12405 327680 61440 61440 NT_STATUS_OK
ReadX 12405 389120 4096 4096 NT_STATUS_OK
ReadX 12405 393216 61440 61440 NT_STATUS_OK
ReadX 12405 454656 4096 4096 NT_STATUS_OK
ReadX 12405 458752 61440 61440 NT_STATUS_OK
ReadX 12405 520192 4096 4096 NT_STATUS_OK
ReadX 12405 524288 61440 61440 NT_STATUS_OK
ReadX 12405 585728 4096 4096 NT_STATUS_OK
ReadX 12405 589824 61440 61440 NT_STATUS_OK
ReadX 12405 651264 4096 4096 NT_STATUS_OK
ReadX 12405 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 61440 61440 NT_STATUS_OK
ReadX 12406 61440 4096 4096 NT_STATUS_OK
ReadX 12406 65536 61440 61440 NT_STATUS_OK
ReadX 12406 126976 4096 4096 NT_STATUS_OK
ReadX 12406 131072 61440 61440 NT_STATUS_OK
ReadX 12406 192512 4096 4096 NT_STATUS_OK
ReadX 12406 196608 61440 61440 NT_STATUS_OK
ReadX 12406 258048 4096 4096 NT_STATUS_OK
ReadX 12406 262144 61440 61440 NT_STATUS_OK
ReadX 12406 323584 4096 4096 NT_STATUS_OK
ReadX 12406 327680 61440 61440 NT_STATUS_OK
ReadX 12406 389120 4096 4096 NT_STATUS_OK
ReadX 12406 393216 61440 61440 NT_STATUS_OK
ReadX 12406 454656 4096 4096 NT_STATUS_OK
ReadX 12406 458752 61440 61440 NT_STATUS_OK
ReadX 12406 520192 4096 4096 NT_STATUS_OK
ReadX 12406 524288 61440 61440 NT_STATUS_OK
ReadX 12406 585728 4096 4096 NT_STATUS_OK
ReadX 12406 589824 61440 61440 NT_STATUS_OK
ReadX 12406 651264 4096 4096 NT_STATUS_OK
ReadX 12406 655360 61440 61440 NT_STATUS_OK
ReadX 12406 716800 4096 4096 NT_STATUS_OK
ReadX 12406 720896 61440 61440 NT_STATUS_OK
ReadX 12406 782336 4096 4096 NT_STATUS_OK
ReadX 12406 786432 61440 61440 NT_STATUS_OK
ReadX 12406 847872 4096 4096 NT_STATUS_OK
ReadX 12406 851968 61440 61440 NT_STATUS_OK
ReadX 12406 913408 4096 4096 NT_STATUS_OK
ReadX 12406 917504 61440 61440 NT_STATUS_OK
ReadX 12406 978944 4096 4096 NT_STATUS_OK
ReadX 12406 983040 61440 61440 NT_STATUS_OK
ReadX 12406 1044480 4096 4096 NT_STATUS_OK
ReadX 12406 1048576 61440 61440 NT_STATUS_OK
ReadX 12406 1110016 4096 4096 NT_STATUS_OK
ReadX 12406 1114112 61440 61440 NT_STATUS_OK
ReadX 12406 1175552 4096 4096 NT_STATUS_OK
ReadX 12406 1179648 61440 61440 NT_STATUS_OK
ReadX 12406 1241088 4096 4096 NT_STATUS_OK
ReadX 12406 1245184 61440 61440 NT_STATUS_OK
ReadX 12406 1306624 4096 4096 NT_STATUS_OK
ReadX 12406 1310720 61440 61440 NT_STATUS_OK
ReadX 12406 1372160 4096 4096 NT_STATUS_OK
ReadX 12406 1376256 61440 61440 NT_STATUS_OK
ReadX 12406 1437696 4096 4096 NT_STATUS_OK
ReadX 12406 1441792 61440 61440 NT_STATUS_OK
ReadX 12406 1503232 4096 4096 NT_STATUS_OK
ReadX 12406 1507328 61440 61440 NT_STATUS_OK
ReadX 12406 1568768 4096 4096 NT_STATUS_OK
ReadX 12406 1572864 61440 61440 NT_STATUS_OK
ReadX 12406 1634304 4096 4096 NT_STATUS_OK
ReadX 12406 1638400 61440 61440 NT_STATUS_OK
ReadX 12406 1699840 4096 4096 NT_STATUS_OK
ReadX 12406 1703936 61440 61440 NT_STATUS_OK
ReadX 12406 1765376 4096 4096 NT_STATUS_OK
ReadX 12406 1769472 61440 61440 NT_STATUS_OK
ReadX 12406 1830912 4096 4096 NT_STATUS_OK
ReadX 12406 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12404 NT_STATUS_OK
Close 12405 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
ReadX 12411 4096 4096 4096 NT_STATUS_OK
ReadX 12411 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12412 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12415 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12416 NT_STATUS_OK
Close 12416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12414 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 8192 8192 NT_STATUS_OK
ReadX 12419 8192 8192 8192 NT_STATUS_OK
ReadX 12419 16384 8192 8192 NT_STATUS_OK
ReadX 12419 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12424 NT_STATUS_OK
WriteX 12424 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
WriteX 12424 0 10438 10438 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12425 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12427 NT_STATUS_OK
Close 12427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12428 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12429 NT_STATUS_OK
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12430 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12432 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
ReadX 12433 4096 4096 4096 NT_STATUS_OK
ReadX 12433 8192 4096 4096 NT_STATUS_OK
ReadX 12433 12288 8192 8192 NT_STATUS_OK
ReadX 12433 20480 8192 8192 NT_STATUS_OK
ReadX 12433 28672 8192 8192 NT_STATUS_OK
ReadX 12433 36864 8192 8192 NT_STATUS_OK
ReadX 12433 45056 8192 8192 NT_STATUS_OK
ReadX 12433 53248 8192 8192 NT_STATUS_OK
ReadX 12433 61440 8192 8192 NT_STATUS_OK
ReadX 12433 69632 8192 8192 NT_STATUS_OK
ReadX 12433 77824 8192 8192 NT_STATUS_OK
ReadX 12433 86016 8192 8192 NT_STATUS_OK
ReadX 12433 94208 8192 8192 NT_STATUS_OK
ReadX 12433 102400 8192 8192 NT_STATUS_OK
ReadX 12433 110592 8192 8192 NT_STATUS_OK
ReadX 12433 118784 8192 8192 NT_STATUS_OK
ReadX 12433 126976 8192 8192 NT_STATUS_OK
ReadX 12433 135168 8192 8192 NT_STATUS_OK
ReadX 12433 143360 8192 8192 NT_STATUS_OK
ReadX 12433 151552 8192 8192 NT_STATUS_OK
ReadX 12433 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12435 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12438 NT_STATUS_OK
WriteX 12438 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 258 NT_STATUS_OK
WriteX 12438 0 28489 28489 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12439 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12441 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12441 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 8192 8192 NT_STATUS_OK
ReadX 12445 8192 8192 8192 NT_STATUS_OK
ReadX 12445 16384 8192 8192 NT_STATUS_OK
ReadX 12445 24576 8192 8192 NT_STATUS_OK
ReadX 12445 32768 16384 16384 NT_STATUS_OK
ReadX 12445 49152 8192 8192 NT_STATUS_OK
ReadX 12445 57344 8192 8192 NT_STATUS_OK
ReadX 12445 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12447 NT_STATUS_OK
Close 12447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12450 NT_STATUS_OK
WriteX 12450 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12450 258 NT_STATUS_OK
WriteX 12450 0 29253 29253 NT_STATUS_OK
Close 12450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12454 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12457 NT_STATUS_OK
WriteX 12457 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12457 258 NT_STATUS_OK
WriteX 12457 0 30183 30183 NT_STATUS_OK
Close 12457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12460 NT_STATUS_OK
WriteX 12460 0 510 510 NT_STATUS_OK
WriteX 12460 510 512 512 NT_STATUS_OK
WriteX 12460 1022 510 510 NT_STATUS_OK
WriteX 12460 1532 510 510 NT_STATUS_OK
WriteX 12460 2042 168 168 NT_STATUS_OK
Close 12460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12461 NT_STATUS_OK
Close 12461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
WriteX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 61440 4096 4096 NT_STATUS_OK
ReadX 12464 126976 4096 4096 NT_STATUS_OK
WriteX 12464 0 65536 65536 NT_STATUS_OK
WriteX 12464 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 61440 4096 4096 NT_STATUS_OK
ReadX 12465 126976 4096 4096 NT_STATUS_OK
ReadX 12465 192512 4096 4096 NT_STATUS_OK
ReadX 12465 258048 4096 4096 NT_STATUS_OK
WriteX 12465 0 65536 65536 NT_STATUS_OK
WriteX 12465 65536 65536 65536 NT_STATUS_OK
WriteX 12465 131072 65536 65536 NT_STATUS_OK
WriteX 12465 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 61440 4096 4096 NT_STATUS_OK
ReadX 12466 126976 4096 4096 NT_STATUS_OK
ReadX 12466 192512 4096 4096 NT_STATUS_OK
ReadX 12466 258048 4096 4096 NT_STATUS_OK
ReadX 12466 323584 4096 4096 NT_STATUS_OK
ReadX 12466 389120 4096 4096 NT_STATUS_OK
ReadX 12466 454656 4096 4096 NT_STATUS_OK
ReadX 12466 520192 4096 4096 NT_STATUS_OK
WriteX 12466 0 65536 65536 NT_STATUS_OK
WriteX 12466 65536 65536 65536 NT_STATUS_OK
WriteX 12466 131072 65536 65536 NT_STATUS_OK
WriteX 12466 196608 65536 65536 NT_STATUS_OK
WriteX 12466 262144 65536 65536 NT_STATUS_OK
WriteX 12466 327680 65536 65536 NT_STATUS_OK
WriteX 12466 393216 65536 65536 NT_STATUS_OK
WriteX 12466 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12467 NT_STATUS_OK
Close 12467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12469 NT_STATUS_OK
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12476 NT_STATUS_OK
Close 12476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12485 NT_STATUS_OK
Close 12485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12487 NT_STATUS_OK
Close 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12491 NT_STATUS_OK
Close 12491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12496 NT_STATUS_OK
Close 12496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12506 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12511 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12521 NT_STATUS_OK
Close 12521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12526 NT_STATUS_OK
Close 12526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12529 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12535 NT_STATUS_OK
WriteX 12535 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12535 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12535 0 65536 65536 NT_STATUS_OK
WriteX 12535 65536 65536 65536 NT_STATUS_OK
WriteX 12535 131072 65536 65536 NT_STATUS_OK
WriteX 12535 196608 65536 65536 NT_STATUS_OK
WriteX 12535 262144 26634 26634 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12540 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
ReadX 12543 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12548 NT_STATUS_OK
Close 12548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12553 NT_STATUS_OK
Close 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12560 NT_STATUS_OK
Close 12560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12566 NT_STATUS_OK
Close 12566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12571 NT_STATUS_OK
Close 12571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12576 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12581 NT_STATUS_OK
Close 12581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12608 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12610 NT_STATUS_OK
Close 12610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12621 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
Close 12622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
Close 12623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12634 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 4096 4096 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12667 0 4096 4096 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
ReadX 12669 4096 4096 4096 NT_STATUS_OK
ReadX 12669 8192 4096 4096 NT_STATUS_OK
ReadX 12669 12288 4096 4096 NT_STATUS_OK
ReadX 12669 16384 4096 4096 NT_STATUS_OK
ReadX 12669 20480 4096 4096 NT_STATUS_OK
ReadX 12669 24576 4096 4096 NT_STATUS_OK
ReadX 12669 28672 4096 4096 NT_STATUS_OK
ReadX 12669 32768 4096 4096 NT_STATUS_OK
ReadX 12669 36864 4096 4096 NT_STATUS_OK
ReadX 12669 40960 4096 4096 NT_STATUS_OK
ReadX 12669 45056 4096 4096 NT_STATUS_OK
ReadX 12669 49152 4096 4096 NT_STATUS_OK
ReadX 12669 53248 4096 4096 NT_STATUS_OK
ReadX 12669 57344 4096 4096 NT_STATUS_OK
ReadX 12669 61440 4096 4096 NT_STATUS_OK
ReadX 12669 65536 4096 4096 NT_STATUS_OK
ReadX 12669 69632 4096 4096 NT_STATUS_OK
ReadX 12669 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12669 1004 NT_STATUS_OK
WriteX 12669 0 4096 4096 NT_STATUS_OK
Close 12669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12670 NT_STATUS_OK
SET_FILE_INFORMATION 12670 1004 NT_STATUS_OK
Close 12670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12672 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12675 NT_STATUS_OK
WriteX 12675 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12675 258 NT_STATUS_OK
WriteX 12675 0 65536 65536 NT_STATUS_OK
WriteX 12675 65536 19979 19979 NT_STATUS_OK
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
QUERY_FILE_INFORMATION 12676 1004 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
SET_FILE_INFORMATION 12676 1004 NT_STATUS_OK
WriteX 12676 0 4096 4096 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 4096 4096 NT_STATUS_OK
Close 12679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12680 NT_STATUS_OK
ReadX 12680 0 4096 4096 NT_STATUS_OK
Close 12680 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12681 NT_STATUS_OK
ReadX 12681 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12681 1004 NT_STATUS_OK
WriteX 12681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12682 NT_STATUS_OK
Close 12682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12678 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Close 12671 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12684 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12687 NT_STATUS_OK
WriteX 12687 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12687 258 NT_STATUS_OK
WriteX 12687 0 65536 65536 NT_STATUS_OK
WriteX 12687 65536 17654 17654 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 1004 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
SET_FILE_INFORMATION 12688 1004 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12689 NT_STATUS_OK
SET_FILE_INFORMATION 12689 1004 NT_STATUS_OK
Close 12689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12691 NT_STATUS_OK
Close 12691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
ReadX 12693 4096 4096 4096 NT_STATUS_OK
ReadX 12693 8192 4096 4096 NT_STATUS_OK
ReadX 12693 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12693 16384 4096 4096 NT_STATUS_OK
ReadX 12693 20480 4096 4096 NT_STATUS_OK
ReadX 12693 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
Close 12694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
Close 12695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12696 1004 NT_STATUS_OK
WriteX 12696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12699 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12702 NT_STATUS_OK
WriteX 12702 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12702 258 NT_STATUS_OK
WriteX 12702 0 65536 65536 NT_STATUS_OK
WriteX 12702 65536 19490 19490 NT_STATUS_OK
Close 12702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 0 4096 4096 NT_STATUS_OK
WriteX 12703 0 4096 4096 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
WriteX 12703 0 4096 4096 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
QUERY_FILE_INFORMATION 12703 1004 NT_STATUS_OK
WriteX 12703 0 4096 4096 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
WriteX 12703 0 4096 4096 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
WriteX 12703 0 4096 4096 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
SET_FILE_INFORMATION 12703 1004 NT_STATUS_OK
WriteX 12703 0 4096 4096 NT_STATUS_OK
Flush 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12704 NT_STATUS_OK
SET_FILE_INFORMATION 12704 1004 NT_STATUS_OK
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12706 NT_STATUS_OK
Close 12706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12708 0 4096 4096 NT_STATUS_OK
Close 12708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
ReadX 12710 4096 4096 4096 NT_STATUS_OK
ReadX 12710 8192 4096 4096 NT_STATUS_OK
ReadX 12710 12288 4096 4096 NT_STATUS_OK
ReadX 12710 16384 4096 4096 NT_STATUS_OK
ReadX 12710 20480 4096 4096 NT_STATUS_OK
ReadX 12710 24576 4096 4096 NT_STATUS_OK
ReadX 12710 28672 4096 4096 NT_STATUS_OK
ReadX 12710 32768 4096 4096 NT_STATUS_OK
ReadX 12710 36864 4096 4096 NT_STATUS_OK
ReadX 12710 40960 4096 4096 NT_STATUS_OK
ReadX 12710 45056 4096 4096 NT_STATUS_OK
ReadX 12710 49152 4096 4096 NT_STATUS_OK
ReadX 12710 53248 4096 4096 NT_STATUS_OK
ReadX 12710 57344 4096 4096 NT_STATUS_OK
ReadX 12710 61440 4096 4096 NT_STATUS_OK
ReadX 12710 65536 4096 4096 NT_STATUS_OK
ReadX 12710 69632 4096 4096 NT_STATUS_OK
ReadX 12710 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12710 1004 NT_STATUS_OK
WriteX 12710 0 4096 4096 NT_STATUS_OK
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12711 NT_STATUS_OK
SET_FILE_INFORMATION 12711 1004 NT_STATUS_OK
Close 12711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12713 NT_STATUS_OK
Close 12713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12716 NT_STATUS_OK
WriteX 12716 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
WriteX 12716 0 65536 65536 NT_STATUS_OK
WriteX 12716 65536 8866 8866 NT_STATUS_OK
Close 12716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 4096 4096 NT_STATUS_OK
WriteX 12717 0 4096 4096 NT_STATUS_OK
Flush 12717 NT_STATUS_OK
SET_FILE_INFORMATION 12717 1004 NT_STATUS_OK
WriteX 12717 0 4096 4096 NT_STATUS_OK
Flush 12717 NT_STATUS_OK
Close 12717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12719 NT_STATUS_OK
ReadX 12719 0 4096 4096 NT_STATUS_OK
Close 12719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
Close 12720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
WriteX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12724 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12727 NT_STATUS_OK
WriteX 12727 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12727 258 NT_STATUS_OK
WriteX 12727 0 65536 65536 NT_STATUS_OK
WriteX 12727 65536 9298 9298 NT_STATUS_OK
Close 12727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
WriteX 12728 0 4096 4096 NT_STATUS_OK
Flush 12728 NT_STATUS_OK
SET_FILE_INFORMATION 12728 1004 NT_STATUS_OK
WriteX 12728 0 4096 4096 NT_STATUS_OK
Flush 12728 NT_STATUS_OK
Close 12728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12729 NT_STATUS_OK
SET_FILE_INFORMATION 12729 1004 NT_STATUS_OK
Close 12729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12731 NT_STATUS_OK
Close 12731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12734 0 4096 4096 NT_STATUS_OK
Close 12734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12735 4096 4096 4096 NT_STATUS_OK
ReadX 12735 8192 4096 4096 NT_STATUS_OK
ReadX 12735 12288 4096 4096 NT_STATUS_OK
ReadX 12735 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12736 NT_STATUS_OK
ReadX 12736 0 4096 4096 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12738 1004 NT_STATUS_OK
WriteX 12738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12739 NT_STATUS_OK
Close 12739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12744 NT_STATUS_OK
WriteX 12744 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12744 258 NT_STATUS_OK
WriteX 12744 0 65536 65536 NT_STATUS_OK
WriteX 12744 65536 11540 11540 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 4096 4096 NT_STATUS_OK
WriteX 12745 0 4096 4096 NT_STATUS_OK
Flush 12745 NT_STATUS_OK
SET_FILE_INFORMATION 12745 1004 NT_STATUS_OK
WriteX 12745 0 4096 4096 NT_STATUS_OK
Flush 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12746 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
Close 12746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12750 NT_STATUS_OK
ReadX 12750 61440 4096 4096 NT_STATUS_OK
ReadX 12750 126976 4096 4096 NT_STATUS_OK
WriteX 12750 0 65536 65536 NT_STATUS_OK
WriteX 12750 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 61440 4096 4096 NT_STATUS_OK
ReadX 12751 126976 4096 4096 NT_STATUS_OK
ReadX 12751 192512 4096 4096 NT_STATUS_OK
ReadX 12751 258048 4096 4096 NT_STATUS_OK
WriteX 12751 0 65536 65536 NT_STATUS_OK
WriteX 12751 65536 65536 65536 NT_STATUS_OK
WriteX 12751 131072 65536 65536 NT_STATUS_OK
WriteX 12751 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12752 NT_STATUS_OK
ReadX 12752 61440 4096 4096 NT_STATUS_OK
ReadX 12752 126976 4096 4096 NT_STATUS_OK
ReadX 12752 192512 4096 4096 NT_STATUS_OK
ReadX 12752 258048 4096 4096 NT_STATUS_OK
ReadX 12752 323584 4096 4096 NT_STATUS_OK
ReadX 12752 389120 4096 4096 NT_STATUS_OK
ReadX 12752 454656 4096 4096 NT_STATUS_OK
ReadX 12752 520192 4096 4096 NT_STATUS_OK
WriteX 12752 0 65536 65536 NT_STATUS_OK
WriteX 12752 65536 65536 65536 NT_STATUS_OK
WriteX 12752 131072 65536 65536 NT_STATUS_OK
WriteX 12752 196608 65536 65536 NT_STATUS_OK
WriteX 12752 262144 65536 65536 NT_STATUS_OK
WriteX 12752 327680 65536 65536 NT_STATUS_OK
WriteX 12752 393216 65536 65536 NT_STATUS_OK
WriteX 12752 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
ReadX 12753 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12754 NT_STATUS_OK
WriteX 12754 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12754 258 NT_STATUS_OK
WriteX 12754 0 53 53 NT_STATUS_OK
Close 12754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12755 NT_STATUS_OK
Close 12755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12753 8192 4096 4096 NT_STATUS_OK
ReadX 12753 12288 4096 4096 NT_STATUS_OK
WriteX 12757 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12757 258 NT_STATUS_OK
ReadX 12753 16384 4096 4096 NT_STATUS_OK
ReadX 12753 20480 4096 4096 NT_STATUS_OK
WriteX 12757 0 15360 15360 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12758 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12758 1004 NT_STATUS_OK
WriteX 12758 0 4096 4096 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12759 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12761 4096 4096 4096 NT_STATUS_OK
ReadX 12761 8192 4096 4096 NT_STATUS_OK
ReadX 12761 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
ReadX 12764 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
ReadX 12765 4096 4096 4096 NT_STATUS_OK
ReadX 12765 8192 4096 4096 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12766 NT_STATUS_OK
WriteX 12766 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12766 258 NT_STATUS_OK
WriteX 12766 0 15360 15360 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12767 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12767 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12771 NT_STATUS_OK
SET_FILE_INFORMATION 12771 1004 NT_STATUS_OK
Close 12771 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
ReadX 12774 4096 4096 4096 NT_STATUS_OK
ReadX 12774 8192 4096 4096 NT_STATUS_OK
ReadX 12774 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12774 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12774 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12776 NT_STATUS_OK
WriteX 12776 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
WriteX 12776 0 53 53 NT_STATUS_OK
Close 12776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12777 NT_STATUS_OK
Close 12777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12775 4096 4096 4096 NT_STATUS_OK
ReadX 12775 8192 4096 4096 NT_STATUS_OK
ReadX 12775 12288 4096 4096 NT_STATUS_OK
WriteX 12779 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 258 NT_STATUS_OK
WriteX 12779 0 12006 12006 NT_STATUS_OK
Close 12779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12780 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12781 NT_STATUS_OK
Close 12781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12784 NT_STATUS_OK
Close 12784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12783 4096 4096 4096 NT_STATUS_OK
ReadX 12783 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12786 NT_STATUS_OK
WriteX 12786 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12786 258 NT_STATUS_OK
WriteX 12786 0 11991 11991 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12787 NT_STATUS_OK
ReadX 12787 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12787 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12787 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12788 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12790 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12791 NT_STATUS_OK
SET_FILE_INFORMATION 12791 1004 NT_STATUS_OK
Close 12791 NT_STATUS_OK
WriteX 12787 0 4096 4096 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12795 NT_STATUS_OK
Close 12795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12794 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12794 1004 NT_STATUS_OK
ReadX 12794 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12794 1004 NT_STATUS_OK
WriteX 12794 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12794 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12794 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12794 1004 NT_STATUS_OK
Close 12770 NT_STATUS_OK
WriteX 12774 0 19054 19054 NT_STATUS_OK
WriteX 12794 0 12288 12288 NT_STATUS_OK
Close 12790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12801 NT_STATUS_OK
ReadX 12801 0 61440 61440 NT_STATUS_OK
ReadX 12801 61440 4096 4096 NT_STATUS_OK
ReadX 12801 65536 61440 61440 NT_STATUS_OK
ReadX 12801 126976 4096 4096 NT_STATUS_OK
ReadX 12801 131072 61440 61440 NT_STATUS_OK
ReadX 12801 192512 4096 4096 NT_STATUS_OK
ReadX 12801 196608 61440 61440 NT_STATUS_OK
ReadX 12801 258048 4096 4096 NT_STATUS_OK
ReadX 12801 262144 61440 61440 NT_STATUS_OK
ReadX 12801 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12802 NT_STATUS_OK
ReadX 12802 0 61440 61440 NT_STATUS_OK
ReadX 12802 61440 4096 4096 NT_STATUS_OK
ReadX 12802 65536 61440 61440 NT_STATUS_OK
ReadX 12802 126976 4096 4096 NT_STATUS_OK
ReadX 12802 131072 61440 61440 NT_STATUS_OK
ReadX 12802 192512 4096 4096 NT_STATUS_OK
ReadX 12802 196608 61440 61440 NT_STATUS_OK
ReadX 12802 258048 4096 4096 NT_STATUS_OK
ReadX 12802 262144 61440 61440 NT_STATUS_OK
ReadX 12802 323584 4096 4096 NT_STATUS_OK
ReadX 12802 327680 61440 61440 NT_STATUS_OK
ReadX 12802 389120 4096 4096 NT_STATUS_OK
ReadX 12802 393216 61440 61440 NT_STATUS_OK
ReadX 12802 454656 4096 4096 NT_STATUS_OK
ReadX 12802 458752 61440 61440 NT_STATUS_OK
ReadX 12802 520192 4096 4096 NT_STATUS_OK
ReadX 12802 524288 61440 61440 NT_STATUS_OK
ReadX 12802 585728 4096 4096 NT_STATUS_OK
ReadX 12802 589824 61440 61440 NT_STATUS_OK
ReadX 12802 651264 4096 4096 NT_STATUS_OK
ReadX 12802 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 61440 61440 NT_STATUS_OK
ReadX 12803 61440 4096 4096 NT_STATUS_OK
ReadX 12803 65536 61440 61440 NT_STATUS_OK
ReadX 12803 126976 4096 4096 NT_STATUS_OK
ReadX 12803 131072 61440 61440 NT_STATUS_OK
ReadX 12803 192512 4096 4096 NT_STATUS_OK
ReadX 12803 196608 61440 61440 NT_STATUS_OK
ReadX 12803 258048 4096 4096 NT_STATUS_OK
ReadX 12803 262144 61440 61440 NT_STATUS_OK
ReadX 12803 323584 4096 4096 NT_STATUS_OK
ReadX 12803 327680 61440 61440 NT_STATUS_OK
ReadX 12803 389120 4096 4096 NT_STATUS_OK
ReadX 12803 393216 61440 61440 NT_STATUS_OK
ReadX 12803 454656 4096 4096 NT_STATUS_OK
ReadX 12803 458752 61440 61440 NT_STATUS_OK
ReadX 12803 520192 4096 4096 NT_STATUS_OK
ReadX 12803 524288 61440 61440 NT_STATUS_OK
ReadX 12803 585728 4096 4096 NT_STATUS_OK
ReadX 12803 589824 61440 61440 NT_STATUS_OK
ReadX 12803 651264 4096 4096 NT_STATUS_OK
ReadX 12803 655360 61440 61440 NT_STATUS_OK
ReadX 12803 716800 4096 4096 NT_STATUS_OK
ReadX 12803 720896 61440 61440 NT_STATUS_OK
ReadX 12803 782336 4096 4096 NT_STATUS_OK
ReadX 12803 786432 61440 61440 NT_STATUS_OK
ReadX 12803 847872 4096 4096 NT_STATUS_OK
ReadX 12803 851968 61440 61440 NT_STATUS_OK
ReadX 12803 913408 4096 4096 NT_STATUS_OK
ReadX 12803 917504 61440 61440 NT_STATUS_OK
ReadX 12803 978944 4096 4096 NT_STATUS_OK
ReadX 12803 983040 61440 61440 NT_STATUS_OK
ReadX 12803 1044480 4096 4096 NT_STATUS_OK
ReadX 12803 1048576 61440 61440 NT_STATUS_OK
ReadX 12803 1110016 4096 4096 NT_STATUS_OK
ReadX 12803 1114112 61440 61440 NT_STATUS_OK
ReadX 12803 1175552 4096 4096 NT_STATUS_OK
ReadX 12803 1179648 61440 61440 NT_STATUS_OK
ReadX 12803 1241088 4096 4096 NT_STATUS_OK
ReadX 12803 1245184 61440 61440 NT_STATUS_OK
ReadX 12803 1306624 4096 4096 NT_STATUS_OK
ReadX 12803 1310720 61440 61440 NT_STATUS_OK
ReadX 12803 1372160 4096 4096 NT_STATUS_OK
ReadX 12803 1376256 61440 61440 NT_STATUS_OK
ReadX 12803 1437696 4096 4096 NT_STATUS_OK
ReadX 12803 1441792 61440 61440 NT_STATUS_OK
ReadX 12803 1503232 4096 4096 NT_STATUS_OK
ReadX 12803 1507328 61440 61440 NT_STATUS_OK
ReadX 12803 1568768 4096 4096 NT_STATUS_OK
ReadX 12803 1572864 61440 61440 NT_STATUS_OK
ReadX 12803 1634304 4096 4096 NT_STATUS_OK
ReadX 12803 1638400 61440 61440 NT_STATUS_OK
ReadX 12803 1699840 4096 4096 NT_STATUS_OK
ReadX 12803 1703936 61440 61440 NT_STATUS_OK
ReadX 12803 1765376 4096 4096 NT_STATUS_OK
ReadX 12803 1769472 61440 61440 NT_STATUS_OK
ReadX 12803 1830912 4096 4096 NT_STATUS_OK
ReadX 12803 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12806 NT_STATUS_OK
ReadX 12806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12810 NT_STATUS_OK
QUERY_FILE_INFORMATION 12810 1004 NT_STATUS_OK
WriteX 12810 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12810 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12811 NT_STATUS_OK
Close 12811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12812 NT_STATUS_OK
WriteX 12812 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12812 258 NT_STATUS_OK
WriteX 12812 0 491 491 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12810 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12815 NT_STATUS_OK
Close 12815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12816 NT_STATUS_OK
WriteX 12816 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12816 258 NT_STATUS_OK
WriteX 12816 0 543 543 NT_STATUS_OK
Close 12816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Close 12802 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12805 NT_STATUS_OK
Close 12806 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12823 NT_STATUS_OK
ReadX 12823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12830 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 1004 NT_STATUS_OK
WriteX 12830 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 258 NT_STATUS_OK
WriteX 12830 0 2048 2048 NT_STATUS_OK
Close 12830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12831 0 4096 4096 NT_STATUS_OK
Flush 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12836 NT_STATUS_OK
WriteX 12836 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 258 NT_STATUS_OK
WriteX 12836 0 2048 2048 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12842 NT_STATUS_OK
WriteX 12842 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12842 258 NT_STATUS_OK
WriteX 12842 0 2048 2048 NT_STATUS_OK
Close 12842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 0 2048 2048 NT_STATUS_OK
ReadX 12821 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12825 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12837 0 4096 4096 NT_STATUS_OK
WriteX 12821 0 8192 8192 NT_STATUS_OK
WriteX 12822 0 4096 4096 NT_STATUS_OK
WriteX 12823 0 4096 4096 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12846 NT_STATUS_OK
ReadX 12846 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12847 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12846 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12823 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12867 NT_STATUS_OK
QUERY_FILE_INFORMATION 12867 1004 NT_STATUS_OK
WriteX 12867 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12867 258 NT_STATUS_OK
WriteX 12867 0 2048 2048 NT_STATUS_OK
Close 12867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12875 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 1004 NT_STATUS_OK
WriteX 12875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 258 NT_STATUS_OK
WriteX 12875 0 2048 2048 NT_STATUS_OK
Close 12875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12868 0 4096 4096 NT_STATUS_OK
Flush 12868 NT_STATUS_OK
WriteX 12876 0 4096 4096 NT_STATUS_OK
Flush 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12868 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12870 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12878 NT_STATUS_OK
WriteX 12878 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 258 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Close 12878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12879 NT_STATUS_OK
ReadX 12879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12881 NT_STATUS_OK
WriteX 12881 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12881 258 NT_STATUS_OK
WriteX 12881 0 4096 4096 NT_STATUS_OK
Close 12881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12882 0 4096 4096 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12851 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12888 NT_STATUS_OK
Close 12888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12889 NT_STATUS_OK
WriteX 12889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12889 258 NT_STATUS_OK
WriteX 12889 0 2048 2048 NT_STATUS_OK
Close 12889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12893 NT_STATUS_OK
ReadX 12893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12894 NT_STATUS_OK
ReadX 12894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12898 NT_STATUS_OK
ReadX 12898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12899 NT_STATUS_OK
ReadX 12899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12904 NT_STATUS_OK
QUERY_FILE_INFORMATION 12904 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12902 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Close 12899 NT_STATUS_OK
Close 12900 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12903 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12892 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Close 12896 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Close 12894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12906 NT_STATUS_OK
QUERY_FILE_INFORMATION 12906 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12909 NT_STATUS_OK
ReadX 12909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12910 NT_STATUS_OK
ReadX 12910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12912 NT_STATUS_OK
ReadX 12912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12925 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12926 NT_STATUS_OK
QUERY_FILE_INFORMATION 12926 1004 NT_STATUS_OK
WriteX 12926 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12926 258 NT_STATUS_OK
WriteX 12926 0 2048 2048 NT_STATUS_OK
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12927 NT_STATUS_OK
ReadX 12927 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12929 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12938 NT_STATUS_OK
QUERY_FILE_INFORMATION 12938 1004 NT_STATUS_OK
WriteX 12938 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12938 258 NT_STATUS_OK
WriteX 12938 0 2048 2048 NT_STATUS_OK
Close 12938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12939 NT_STATUS_OK
ReadX 12939 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12946 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 1004 NT_STATUS_OK
WriteX 12946 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 258 NT_STATUS_OK
WriteX 12946 0 2048 2048 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12927 0 4096 4096 NT_STATUS_OK
Flush 12927 NT_STATUS_OK
WriteX 12939 0 4096 4096 NT_STATUS_OK
Flush 12939 NT_STATUS_OK
WriteX 12947 0 4096 4096 NT_STATUS_OK
Flush 12947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12939 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12947 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12929 4096 16384 16384 NT_STATUS_OK
ReadX 12909 4096 16384 16384 NT_STATUS_OK
ReadX 12941 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 2048 2048 NT_STATUS_OK
WriteX 12949 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12950 NT_STATUS_OK
QUERY_FILE_INFORMATION 12950 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Close 12913 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12909 NT_STATUS_OK
Close 12910 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Close 12912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12952 NT_STATUS_OK
QUERY_FILE_INFORMATION 12952 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12954 NT_STATUS_OK
QUERY_FILE_INFORMATION 12954 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12959 NT_STATUS_OK
ReadX 12959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12957 4096 16384 16384 NT_STATUS_OK
WriteX 12957 0 4096 4096 NT_STATUS_OK
WriteX 12958 0 4096 4096 NT_STATUS_OK
WriteX 12959 0 4096 4096 NT_STATUS_OK
WriteX 12960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12971 NT_STATUS_OK
ReadX 12971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12972 NT_STATUS_OK
ReadX 12972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12974 NT_STATUS_OK
ReadX 12974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12975 NT_STATUS_OK
ReadX 12975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12976 NT_STATUS_OK
ReadX 12976 0 8192 8192 NT_STATUS_OK
ReadX 12963 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12977 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12977 0 4096 4096 NT_STATUS_OK
ReadX 12977 4096 4096 4096 NT_STATUS_OK
ReadX 12977 8192 4096 4096 NT_STATUS_OK
WriteX 12963 0 4096 4096 NT_STATUS_OK
WriteX 12964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12978 0 4096 4096 NT_STATUS_OK
ReadX 12978 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12957 0 4096 4096 NT_STATUS_OK
WriteX 12958 0 4096 4096 NT_STATUS_OK
WriteX 12959 0 4096 4096 NT_STATUS_OK
WriteX 12960 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12983 NT_STATUS_OK
QUERY_FILE_INFORMATION 12983 1004 NT_STATUS_OK
WriteX 12983 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12983 258 NT_STATUS_OK
WriteX 12983 0 2048 2048 NT_STATUS_OK
Close 12983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12984 NT_STATUS_OK
ReadX 12984 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12985 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12986 NT_STATUS_OK
ReadX 12986 0 4096 4096 NT_STATUS_OK
ReadX 12986 4096 4096 4096 NT_STATUS_OK
WriteX 12986 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
ReadX 12988 4096 4096 4096 NT_STATUS_OK
WriteX 12988 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12989 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12976 NT_STATUS_OK
Close 12961 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12959 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12974 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Close 12972 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Close 12975 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12991 0 4096 4096 NT_STATUS_OK
ReadX 12991 4096 4096 4096 NT_STATUS_OK
ReadX 12991 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13002 NT_STATUS_OK
ReadX 13002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
ReadX 12992 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13009 NT_STATUS_OK
QUERY_FILE_INFORMATION 13009 1004 NT_STATUS_OK
WriteX 13009 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13009 258 NT_STATUS_OK
WriteX 13009 0 2048 2048 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13010 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13015 NT_STATUS_OK
QUERY_FILE_INFORMATION 13015 1004 NT_STATUS_OK
WriteX 13015 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13015 258 NT_STATUS_OK
WriteX 13015 0 2048 2048 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13016 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12999 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13017 NT_STATUS_OK
QUERY_FILE_INFORMATION 13017 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12993 NT_STATUS_OK
Close 12996 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13019 NT_STATUS_OK
QUERY_FILE_INFORMATION 13019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13021 NT_STATUS_OK
ReadX 13021 61440 4096 4096 NT_STATUS_OK
ReadX 13021 126976 4096 4096 NT_STATUS_OK
WriteX 13021 0 65536 65536 NT_STATUS_OK
WriteX 13021 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 61440 4096 4096 NT_STATUS_OK
ReadX 13022 126976 4096 4096 NT_STATUS_OK
ReadX 13022 192512 4096 4096 NT_STATUS_OK
ReadX 13022 258048 4096 4096 NT_STATUS_OK
WriteX 13022 0 65536 65536 NT_STATUS_OK
WriteX 13022 65536 65536 65536 NT_STATUS_OK
WriteX 13022 131072 65536 65536 NT_STATUS_OK
WriteX 13022 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 61440 4096 4096 NT_STATUS_OK
ReadX 13023 126976 4096 4096 NT_STATUS_OK
ReadX 13023 192512 4096 4096 NT_STATUS_OK
ReadX 13023 258048 4096 4096 NT_STATUS_OK
ReadX 13023 323584 4096 4096 NT_STATUS_OK
ReadX 13023 389120 4096 4096 NT_STATUS_OK
ReadX 13023 454656 4096 4096 NT_STATUS_OK
ReadX 13023 520192 4096 4096 NT_STATUS_OK
WriteX 13023 0 65536 65536 NT_STATUS_OK
WriteX 13023 65536 65536 65536 NT_STATUS_OK
WriteX 13023 131072 65536 65536 NT_STATUS_OK
WriteX 13023 196608 65536 65536 NT_STATUS_OK
WriteX 13023 262144 65536 65536 NT_STATUS_OK
WriteX 13023 327680 65536 65536 NT_STATUS_OK
WriteX 13023 393216 65536 65536 NT_STATUS_OK
WriteX 13023 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13024 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13024 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13024 8192 4096 4096 NT_STATUS_OK
ReadX 13024 12288 4096 4096 NT_STATUS_OK
ReadX 13024 16384 4096 4096 NT_STATUS_OK
ReadX 13024 20480 4096 4096 NT_STATUS_OK
ReadX 13024 24576 4096 4096 NT_STATUS_OK
ReadX 13024 28672 4096 4096 NT_STATUS_OK
ReadX 13024 32768 4096 4096 NT_STATUS_OK
ReadX 13024 36864 4096 4096 NT_STATUS_OK
ReadX 13024 40960 4096 4096 NT_STATUS_OK
ReadX 13024 45056 4096 4096 NT_STATUS_OK
ReadX 13024 49152 4096 4096 NT_STATUS_OK
ReadX 13024 53248 4096 4096 NT_STATUS_OK
ReadX 13024 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13024 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13025 NT_STATUS_OK
Close 13025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13021 NT_STATUS_OK
Close 13022 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13027 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13027 1004 NT_STATUS_OK
WriteX 13027 0 57088 57088 NT_STATUS_OK
WriteX 13027 0 4096 4096 NT_STATUS_OK
Flush 13027 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13028 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
Close 13028 NT_STATUS_OK
SET_FILE_INFORMATION 13027 1004 NT_STATUS_OK
WriteX 13027 0 4096 4096 NT_STATUS_OK
Close 13027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13029 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13031 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13032 NT_STATUS_OK
WriteX 13032 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13032 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13032 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
WriteX 13032 0 51456 51456 NT_STATUS_OK
WriteX 13032 0 4096 4096 NT_STATUS_OK
Flush 13032 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
WriteX 13032 0 4096 4096 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13034 NT_STATUS_OK
Close 13034 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13036 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13041 NT_STATUS_OK
WriteX 13041 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 258 NT_STATUS_OK
WriteX 13041 0 53077 53077 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13042 NT_STATUS_OK
WriteX 13042 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13042 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13042 1004 NT_STATUS_OK
WriteX 13042 0 65536 65536 NT_STATUS_OK
WriteX 13042 65536 1856 1856 NT_STATUS_OK
WriteX 13042 0 4096 4096 NT_STATUS_OK
Flush 13042 NT_STATUS_OK
SET_FILE_INFORMATION 13042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13042 1004 NT_STATUS_OK
WriteX 13042 0 4096 4096 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Close 13036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13044 NT_STATUS_OK
Close 13044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13048 NT_STATUS_OK
Close 13048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13051 NT_STATUS_OK
WriteX 13051 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 258 NT_STATUS_OK
WriteX 13051 0 7983 7983 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13056 NT_STATUS_OK
WriteX 13056 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13056 258 NT_STATUS_OK
WriteX 13056 0 65536 65536 NT_STATUS_OK
WriteX 13056 65536 65536 65536 NT_STATUS_OK
WriteX 13056 131072 65536 65536 NT_STATUS_OK
WriteX 13056 196608 65536 65536 NT_STATUS_OK
WriteX 13056 262144 65536 65536 NT_STATUS_OK
WriteX 13056 327680 65536 65536 NT_STATUS_OK
WriteX 13056 393216 65536 65536 NT_STATUS_OK
WriteX 13056 458752 46731 46731 NT_STATUS_OK
Close 13056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13057 NT_STATUS_OK
WriteX 13057 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13057 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13046 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13057 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
WriteX 13057 0 65536 65536 NT_STATUS_OK
WriteX 13057 65536 22848 22848 NT_STATUS_OK
WriteX 13057 0 4096 4096 NT_STATUS_OK
Flush 13057 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
WriteX 13057 0 4096 4096 NT_STATUS_OK
Close 13057 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13061 NT_STATUS_OK
ReadX 13061 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13061 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13062 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13062 1004 NT_STATUS_OK
ReadX 13062 8192 4096 4096 NT_STATUS_OK
ReadX 13062 12288 4096 4096 NT_STATUS_OK
ReadX 13062 16384 4096 4096 NT_STATUS_OK
ReadX 13062 20480 4096 4096 NT_STATUS_OK
ReadX 13062 24576 4096 4096 NT_STATUS_OK
ReadX 13062 28672 4096 4096 NT_STATUS_OK
ReadX 13062 32768 4096 4096 NT_STATUS_OK
ReadX 13062 36864 4096 4096 NT_STATUS_OK
ReadX 13062 40960 4096 4096 NT_STATUS_OK
ReadX 13062 45056 4096 4096 NT_STATUS_OK
ReadX 13062 49152 4096 4096 NT_STATUS_OK
ReadX 13062 53248 4096 4096 NT_STATUS_OK
ReadX 13062 57344 4096 4096 NT_STATUS_OK
ReadX 13062 61440 4096 4096 NT_STATUS_OK
ReadX 13062 65536 4096 4096 NT_STATUS_OK
ReadX 13062 69632 4096 4096 NT_STATUS_OK
ReadX 13062 73728 4096 4096 NT_STATUS_OK
ReadX 13062 77824 4096 4096 NT_STATUS_OK
ReadX 13062 81920 4096 4096 NT_STATUS_OK
ReadX 13062 86016 4096 4096 NT_STATUS_OK
ReadX 13062 90112 4096 4096 NT_STATUS_OK
ReadX 13062 94208 4096 4096 NT_STATUS_OK
ReadX 13062 98304 4096 4096 NT_STATUS_OK
ReadX 13062 102400 4096 4096 NT_STATUS_OK
ReadX 13062 106496 4096 4096 NT_STATUS_OK
ReadX 13062 110592 4096 4096 NT_STATUS_OK
ReadX 13062 114688 4096 4096 NT_STATUS_OK
ReadX 13062 118784 4096 4096 NT_STATUS_OK
ReadX 13062 122880 4096 4096 NT_STATUS_OK
ReadX 13062 126976 4096 4096 NT_STATUS_OK
ReadX 13062 131072 4096 4096 NT_STATUS_OK
ReadX 13062 135168 4096 4096 NT_STATUS_OK
ReadX 13062 139264 4096 4096 NT_STATUS_OK
ReadX 13062 143360 4096 4096 NT_STATUS_OK
ReadX 13062 147456 4096 4096 NT_STATUS_OK
ReadX 13062 151552 4096 4096 NT_STATUS_OK
ReadX 13062 155648 4096 4096 NT_STATUS_OK
ReadX 13062 159744 4096 4096 NT_STATUS_OK
ReadX 13062 163840 4096 4096 NT_STATUS_OK
ReadX 13062 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13062 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13063 NT_STATUS_OK
Close 13063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
Close 13062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13066 NT_STATUS_OK
SET_FILE_INFORMATION 13066 1004 NT_STATUS_OK
Close 13066 NT_STATUS_OK
WriteX 13065 0 42388 42388 NT_STATUS_OK
Close 13065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
ReadX 13069 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13070 NT_STATUS_OK
WriteX 13070 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13070 258 NT_STATUS_OK
SET_FILE_INFORMATION 13070 1004 NT_STATUS_OK
WriteX 13070 0 42652 42652 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13072 NT_STATUS_OK
Close 13072 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
ReadX 13074 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13079 NT_STATUS_OK
WriteX 13079 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13079 258 NT_STATUS_OK
WriteX 13079 0 65536 65536 NT_STATUS_OK
WriteX 13079 65536 49 49 NT_STATUS_OK
Close 13079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13080 NT_STATUS_OK
ReadX 13080 0 61440 61440 NT_STATUS_OK
ReadX 13080 61440 4096 4096 NT_STATUS_OK
ReadX 13080 65536 61440 61440 NT_STATUS_OK
ReadX 13080 126976 4096 4096 NT_STATUS_OK
ReadX 13080 131072 61440 61440 NT_STATUS_OK
ReadX 13080 192512 4096 4096 NT_STATUS_OK
ReadX 13080 196608 61440 61440 NT_STATUS_OK
ReadX 13080 258048 4096 4096 NT_STATUS_OK
ReadX 13080 262144 61440 61440 NT_STATUS_OK
ReadX 13080 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 61440 61440 NT_STATUS_OK
ReadX 13081 61440 4096 4096 NT_STATUS_OK
ReadX 13081 65536 61440 61440 NT_STATUS_OK
ReadX 13081 126976 4096 4096 NT_STATUS_OK
ReadX 13081 131072 61440 61440 NT_STATUS_OK
ReadX 13081 192512 4096 4096 NT_STATUS_OK
ReadX 13081 196608 61440 61440 NT_STATUS_OK
ReadX 13081 258048 4096 4096 NT_STATUS_OK
ReadX 13081 262144 61440 61440 NT_STATUS_OK
ReadX 13081 323584 4096 4096 NT_STATUS_OK
ReadX 13081 327680 61440 61440 NT_STATUS_OK
ReadX 13081 389120 4096 4096 NT_STATUS_OK
ReadX 13081 393216 61440 61440 NT_STATUS_OK
ReadX 13081 454656 4096 4096 NT_STATUS_OK
ReadX 13081 458752 61440 61440 NT_STATUS_OK
ReadX 13081 520192 4096 4096 NT_STATUS_OK
ReadX 13081 524288 61440 61440 NT_STATUS_OK
ReadX 13081 585728 4096 4096 NT_STATUS_OK
ReadX 13081 589824 61440 61440 NT_STATUS_OK
ReadX 13081 651264 4096 4096 NT_STATUS_OK
ReadX 13081 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 61440 61440 NT_STATUS_OK
ReadX 13082 61440 4096 4096 NT_STATUS_OK
ReadX 13082 65536 61440 61440 NT_STATUS_OK
ReadX 13082 126976 4096 4096 NT_STATUS_OK
ReadX 13082 131072 61440 61440 NT_STATUS_OK
ReadX 13082 192512 4096 4096 NT_STATUS_OK
ReadX 13082 196608 61440 61440 NT_STATUS_OK
ReadX 13082 258048 4096 4096 NT_STATUS_OK
ReadX 13082 262144 61440 61440 NT_STATUS_OK
ReadX 13082 323584 4096 4096 NT_STATUS_OK
ReadX 13082 327680 61440 61440 NT_STATUS_OK
ReadX 13082 389120 4096 4096 NT_STATUS_OK
ReadX 13082 393216 61440 61440 NT_STATUS_OK
ReadX 13082 454656 4096 4096 NT_STATUS_OK
ReadX 13082 458752 61440 61440 NT_STATUS_OK
ReadX 13082 520192 4096 4096 NT_STATUS_OK
ReadX 13082 524288 61440 61440 NT_STATUS_OK
ReadX 13082 585728 4096 4096 NT_STATUS_OK
ReadX 13082 589824 61440 61440 NT_STATUS_OK
ReadX 13082 651264 4096 4096 NT_STATUS_OK
ReadX 13082 655360 61440 61440 NT_STATUS_OK
ReadX 13082 716800 4096 4096 NT_STATUS_OK
ReadX 13082 720896 61440 61440 NT_STATUS_OK
ReadX 13082 782336 4096 4096 NT_STATUS_OK
ReadX 13082 786432 61440 61440 NT_STATUS_OK
ReadX 13082 847872 4096 4096 NT_STATUS_OK
ReadX 13082 851968 61440 61440 NT_STATUS_OK
ReadX 13082 913408 4096 4096 NT_STATUS_OK
ReadX 13082 917504 61440 61440 NT_STATUS_OK
ReadX 13082 978944 4096 4096 NT_STATUS_OK
ReadX 13082 983040 61440 61440 NT_STATUS_OK
ReadX 13082 1044480 4096 4096 NT_STATUS_OK
ReadX 13082 1048576 61440 61440 NT_STATUS_OK
ReadX 13082 1110016 4096 4096 NT_STATUS_OK
ReadX 13082 1114112 61440 61440 NT_STATUS_OK
ReadX 13082 1175552 4096 4096 NT_STATUS_OK
ReadX 13082 1179648 61440 61440 NT_STATUS_OK
ReadX 13082 1241088 4096 4096 NT_STATUS_OK
ReadX 13082 1245184 61440 61440 NT_STATUS_OK
ReadX 13082 1306624 4096 4096 NT_STATUS_OK
ReadX 13082 1310720 61440 61440 NT_STATUS_OK
ReadX 13082 1372160 4096 4096 NT_STATUS_OK
ReadX 13082 1376256 61440 61440 NT_STATUS_OK
ReadX 13082 1437696 4096 4096 NT_STATUS_OK
ReadX 13082 1441792 61440 61440 NT_STATUS_OK
ReadX 13082 1503232 4096 4096 NT_STATUS_OK
ReadX 13082 1507328 61440 61440 NT_STATUS_OK
ReadX 13082 1568768 4096 4096 NT_STATUS_OK
ReadX 13082 1572864 61440 61440 NT_STATUS_OK
ReadX 13082 1634304 4096 4096 NT_STATUS_OK
ReadX 13082 1638400 61440 61440 NT_STATUS_OK
ReadX 13082 1699840 4096 4096 NT_STATUS_OK
ReadX 13082 1703936 61440 61440 NT_STATUS_OK
ReadX 13082 1765376 4096 4096 NT_STATUS_OK
ReadX 13082 1769472 61440 61440 NT_STATUS_OK
ReadX 13082 1830912 4096 4096 NT_STATUS_OK
ReadX 13082 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13084 NT_STATUS_OK
QUERY_FILE_INFORMATION 13084 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13084 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13084 1005 NT_STATUS_OK
ReadX 13084 2156 24 24 NT_STATUS_OK
ReadX 13084 2139 276 276 NT_STATUS_OK
ReadX 13084 2136 14 14 NT_STATUS_OK
ReadX 13084 2136 7 7 NT_STATUS_OK
ReadX 13084 2138 12 12 NT_STATUS_OK
ReadX 13084 2137 8 8 NT_STATUS_OK
ReadX 13084 2135 15 15 NT_STATUS_OK
ReadX 13084 0 16 16 NT_STATUS_OK
ReadX 13084 16 2048 2048 NT_STATUS_OK
ReadX 13084 2064 2048 2048 NT_STATUS_OK
ReadX 13084 257 2048 2048 NT_STATUS_OK
ReadX 13084 385 2048 2048 NT_STATUS_OK
ReadX 13084 513 2048 2048 NT_STATUS_OK
ReadX 13084 641 2048 2048 NT_STATUS_OK
ReadX 13084 769 2048 2048 NT_STATUS_OK
ReadX 13084 897 2048 2048 NT_STATUS_OK
ReadX 13084 1025 2048 2048 NT_STATUS_OK
ReadX 13084 1153 2048 2048 NT_STATUS_OK
ReadX 13084 1281 2048 2048 NT_STATUS_OK
ReadX 13084 1409 2048 2048 NT_STATUS_OK
ReadX 13084 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13080 NT_STATUS_OK
Close 13081 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13089 NT_STATUS_OK
WriteX 13089 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13089 258 NT_STATUS_OK
WriteX 13089 0 10575 10575 NT_STATUS_OK
Flush 13089 NT_STATUS_OK
Close 13089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13090 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
Close 13084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13094 NT_STATUS_OK
LockX 13094 2147483538 1 NT_STATUS_OK
UnlockX 13094 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13094 1005 NT_STATUS_OK
ReadX 13094 0 512 512 NT_STATUS_OK
ReadX 13094 512 512 512 NT_STATUS_OK
ReadX 13094 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13094 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13094 1004 NT_STATUS_OK
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13095 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 1005 NT_STATUS_OK
ReadX 13095 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13096 NT_STATUS_OK
LockX 13096 2147483538 1 NT_STATUS_OK
UnlockX 13096 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13096 1005 NT_STATUS_OK
ReadX 13096 0 512 512 NT_STATUS_OK
ReadX 13096 512 512 512 NT_STATUS_OK
ReadX 13096 1024 512 512 NT_STATUS_OK
ReadX 13096 288 20 20 NT_STATUS_OK
ReadX 13096 308 2084 2084 NT_STATUS_OK
ReadX 13096 388 2084 2084 NT_STATUS_OK
ReadX 13096 388 2084 2084 NT_STATUS_OK
ReadX 13083 2157 1386 1386 NT_STATUS_OK
ReadX 13096 2472 399 399 NT_STATUS_OK
ReadX 13096 3072 1536 1536 NT_STATUS_OK
ReadX 13096 544 149 149 NT_STATUS_OK
ReadX 13096 693 485 485 NT_STATUS_OK
Close 13096 NT_STATUS_OK
ReadX 13083 2157 4096 4096 NT_STATUS_OK
ReadX 13083 6253 4096 4096 NT_STATUS_OK
ReadX 13083 10349 4096 4096 NT_STATUS_OK
ReadX 13083 14445 4096 4096 NT_STATUS_OK
ReadX 13083 18541 4096 4096 NT_STATUS_OK
ReadX 13083 22637 256 256 NT_STATUS_OK
ReadX 13083 22893 4096 4096 NT_STATUS_OK
ReadX 13083 26989 4096 4096 NT_STATUS_OK
ReadX 13083 31085 4096 4096 NT_STATUS_OK
ReadX 13083 35181 4096 4096 NT_STATUS_OK
ReadX 13083 39277 4096 4096 NT_STATUS_OK
ReadX 13083 43373 4096 4096 NT_STATUS_OK
ReadX 13083 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13083 2157 1024 1024 NT_STATUS_OK
ReadX 13083 1667 4688 4688 NT_STATUS_OK
ReadX 13083 6355 3516 3516 NT_STATUS_OK
ReadX 13083 9871 16384 16384 NT_STATUS_OK
ReadX 13083 26255 3771 3771 NT_STATUS_OK
ReadX 13083 30026 2048 2048 NT_STATUS_OK
ReadX 13083 32074 1024 1024 NT_STATUS_OK
ReadX 13083 33098 6652 6652 NT_STATUS_OK
ReadX 13083 39750 16384 16384 NT_STATUS_OK
ReadX 13083 56134 10496 10496 NT_STATUS_OK
ReadX 13083 66630 1784 1784 NT_STATUS_OK
ReadX 13083 68414 90 90 NT_STATUS_OK
ReadX 13083 68504 273 273 NT_STATUS_OK
ReadX 13083 68777 1600 1600 NT_STATUS_OK
ReadX 13083 70377 640 640 NT_STATUS_OK
ReadX 13083 71017 1280 1280 NT_STATUS_OK
ReadX 13083 72297 8464 8464 NT_STATUS_OK
ReadX 13083 80761 158 158 NT_STATUS_OK
ReadX 13083 80919 912 912 NT_STATUS_OK
ReadX 13083 81831 1980 1980 NT_STATUS_OK
ReadX 13083 83811 2256 2256 NT_STATUS_OK
ReadX 13083 86067 400 400 NT_STATUS_OK
ReadX 13083 86467 252 252 NT_STATUS_OK
ReadX 13083 86719 42 42 NT_STATUS_OK
ReadX 13083 86761 725 725 NT_STATUS_OK
ReadX 13083 2009 512 512 NT_STATUS_OK
ReadX 13083 3895 9 9 NT_STATUS_OK
ReadX 13083 3781 46 46 NT_STATUS_OK
ReadX 13083 4059 92 92 NT_STATUS_OK
ReadX 13083 3781 92 92 NT_STATUS_OK
ReadX 13083 3986 184 184 NT_STATUS_OK
ReadX 13083 3987 16384 16384 NT_STATUS_OK
ReadX 13083 3902 16384 16384 NT_STATUS_OK
ReadX 13083 3781 10240 10240 NT_STATUS_OK
ReadX 13083 3821 16384 16384 NT_STATUS_OK
ReadX 13083 3891 935 935 NT_STATUS_OK
ReadX 13083 4060 10240 10240 NT_STATUS_OK
ReadX 13083 4059 184 184 NT_STATUS_OK
ReadX 13083 256 184 184 NT_STATUS_OK
ReadX 13083 256 1026 1026 NT_STATUS_OK
ReadX 13083 3901 326 326 NT_STATUS_OK
ReadX 13083 3899 652 652 NT_STATUS_OK
ReadX 13083 256 2 2 NT_STATUS_OK
ReadX 13083 258 4948 4948 NT_STATUS_OK
Close 13083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13098 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13101 NT_STATUS_OK
WriteX 13101 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13101 258 NT_STATUS_OK
WriteX 13101 0 65536 65536 NT_STATUS_OK
WriteX 13101 65536 65536 65536 NT_STATUS_OK
WriteX 13101 131072 65536 65536 NT_STATUS_OK
WriteX 13101 196608 65536 65536 NT_STATUS_OK
WriteX 13101 262144 65536 65536 NT_STATUS_OK
WriteX 13101 327680 65536 65536 NT_STATUS_OK
WriteX 13101 393216 65536 65536 NT_STATUS_OK
WriteX 13101 458752 65536 65536 NT_STATUS_OK
WriteX 13101 524288 65536 65536 NT_STATUS_OK
WriteX 13101 589824 35257 35257 NT_STATUS_OK
Close 13101 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13106 NT_STATUS_OK
WriteX 13106 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13106 258 NT_STATUS_OK
WriteX 13106 0 65536 65536 NT_STATUS_OK
WriteX 13106 65536 65536 65536 NT_STATUS_OK
WriteX 13106 131072 65536 65536 NT_STATUS_OK
WriteX 13106 196608 65536 65536 NT_STATUS_OK
WriteX 13106 262144 65536 65536 NT_STATUS_OK
WriteX 13106 327680 65536 65536 NT_STATUS_OK
WriteX 13106 393216 65536 65536 NT_STATUS_OK
WriteX 13106 458752 65536 65536 NT_STATUS_OK
WriteX 13106 524288 65536 65536 NT_STATUS_OK
WriteX 13106 589824 57598 57598 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13108 NT_STATUS_OK
WriteX 13108 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13108 258 NT_STATUS_OK
WriteX 13108 0 12543 12543 NT_STATUS_OK
Flush 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13114 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 1005 NT_STATUS_OK
ReadX 13114 1938 24 24 NT_STATUS_OK
ReadX 13114 1920 276 276 NT_STATUS_OK
ReadX 13114 1918 14 14 NT_STATUS_OK
ReadX 13114 1918 7 7 NT_STATUS_OK
ReadX 13114 1919 12 12 NT_STATUS_OK
ReadX 13114 1919 8 8 NT_STATUS_OK
ReadX 13114 1917 15 15 NT_STATUS_OK
ReadX 13114 0 16 16 NT_STATUS_OK
ReadX 13114 16 2048 2048 NT_STATUS_OK
ReadX 13114 2064 2048 2048 NT_STATUS_OK
ReadX 13114 257 2048 2048 NT_STATUS_OK
ReadX 13114 385 2048 2048 NT_STATUS_OK
ReadX 13114 513 2048 2048 NT_STATUS_OK
ReadX 13114 641 2048 2048 NT_STATUS_OK
ReadX 13114 769 2048 2048 NT_STATUS_OK
ReadX 13114 897 2048 2048 NT_STATUS_OK
ReadX 13114 1025 2048 2048 NT_STATUS_OK
ReadX 13114 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13119 NT_STATUS_OK
WriteX 13119 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 258 NT_STATUS_OK
WriteX 13119 0 11588 11588 NT_STATUS_OK
Flush 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13120 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 4096 4096 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13124 NT_STATUS_OK
WriteX 13124 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13124 258 NT_STATUS_OK
WriteX 13124 0 11615 11615 NT_STATUS_OK
Flush 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13126 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13133 NT_STATUS_OK
WriteX 13133 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13133 258 NT_STATUS_OK
WriteX 13133 0 65536 65536 NT_STATUS_OK
WriteX 13133 65536 16050 16050 NT_STATUS_OK
Close 13133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13113 1939 64 64 NT_STATUS_OK
ReadX 13113 128 248 248 NT_STATUS_OK
ReadX 13113 128 568 568 NT_STATUS_OK
ReadX 13113 3872 1536 1536 NT_STATUS_OK
ReadX 13113 3456 2560 2560 NT_STATUS_OK
ReadX 13113 3136 512 512 NT_STATUS_OK
ReadX 13113 2880 4096 4096 NT_STATUS_OK
ReadX 13113 3264 3072 3072 NT_STATUS_OK
ReadX 13113 320 4096 4096 NT_STATUS_OK
ReadX 13113 1024 4096 4096 NT_STATUS_OK
ReadX 13113 3616 4096 4096 NT_STATUS_OK
ReadX 13113 1939 64 64 NT_STATUS_OK
ReadX 13113 128 248 248 NT_STATUS_OK
ReadX 13113 128 608 608 NT_STATUS_OK
ReadX 13113 2858 1024 1024 NT_STATUS_OK
ReadX 13113 2810 4096 4096 NT_STATUS_OK
ReadX 13113 2826 4096 4096 NT_STATUS_OK
ReadX 13113 2580 2048 2048 NT_STATUS_OK
ReadX 13113 2800 2560 2560 NT_STATUS_OK
ReadX 13113 2100 4096 4096 NT_STATUS_OK
ReadX 13113 2084 4096 4096 NT_STATUS_OK
ReadX 13113 868 4096 4096 NT_STATUS_OK
ReadX 13113 2324 4096 4096 NT_STATUS_OK
ReadX 13113 884 4096 4096 NT_STATUS_OK
ReadX 13113 2604 1024 1024 NT_STATUS_OK
ReadX 13113 580 4096 4096 NT_STATUS_OK
ReadX 13113 596 4096 4096 NT_STATUS_OK
ReadX 13113 2752 4096 4096 NT_STATUS_OK
ReadX 13113 2842 1024 1024 NT_STATUS_OK
ReadX 13113 660 4096 4096 NT_STATUS_OK
ReadX 13113 2720 4096 4096 NT_STATUS_OK
ReadX 13113 2736 4096 4096 NT_STATUS_OK
ReadX 13113 628 4096 4096 NT_STATUS_OK
ReadX 13113 2704 4096 4096 NT_STATUS_OK
ReadX 13113 1556 4096 4096 NT_STATUS_OK
ReadX 13113 576 4096 4096 NT_STATUS_OK
ReadX 13113 3168 1536 1536 NT_STATUS_OK
ReadX 13113 832 4096 4096 NT_STATUS_OK
ReadX 13113 1088 4096 4096 NT_STATUS_OK
ReadX 13113 1344 4096 4096 NT_STATUS_OK
ReadX 13113 1600 4096 4096 NT_STATUS_OK
ReadX 13113 1856 4096 4096 NT_STATUS_OK
ReadX 13113 2112 4096 4096 NT_STATUS_OK
ReadX 13113 1892 4096 4096 NT_STATUS_OK
ReadX 13113 820 4096 4096 NT_STATUS_OK
ReadX 13113 788 4096 4096 NT_STATUS_OK
ReadX 13113 1604 4096 4096 NT_STATUS_OK
ReadX 13113 3648 4096 4096 NT_STATUS_OK
ReadX 13113 2608 4096 4096 NT_STATUS_OK
ReadX 13113 548 4096 4096 NT_STATUS_OK
ReadX 13113 740 4096 4096 NT_STATUS_OK
ReadX 13113 1344 4096 4096 NT_STATUS_OK
ReadX 13113 3392 4096 4096 NT_STATUS_OK
ReadX 13113 3904 4096 4096 NT_STATUS_OK
ReadX 13113 644 4096 4096 NT_STATUS_OK
ReadX 13113 676 4096 4096 NT_STATUS_OK
ReadX 13113 2688 4096 4096 NT_STATUS_OK
ReadX 13113 320 4096 4096 NT_STATUS_OK
ReadX 13113 900 4096 4096 NT_STATUS_OK
ReadX 13113 1908 4096 4096 NT_STATUS_OK
ReadX 13113 852 4096 4096 NT_STATUS_OK
ReadX 13113 724 4096 4096 NT_STATUS_OK
ReadX 13113 2292 4096 4096 NT_STATUS_OK
ReadX 13113 612 4096 4096 NT_STATUS_OK
ReadX 13113 388 4096 4096 NT_STATUS_OK
ReadX 13113 2368 4096 4096 NT_STATUS_OK
ReadX 13113 2624 4096 4096 NT_STATUS_OK
ReadX 13113 500 4096 4096 NT_STATUS_OK
ReadX 13113 356 4096 4096 NT_STATUS_OK
ReadX 13113 1024 4096 4096 NT_STATUS_OK
ReadX 13113 576 4096 4096 NT_STATUS_OK
ReadX 13113 340 4096 4096 NT_STATUS_OK
ReadX 13113 420 4096 4096 NT_STATUS_OK
ReadX 13113 1600 4096 4096 NT_STATUS_OK
ReadX 13113 404 4096 4096 NT_STATUS_OK
ReadX 13113 1428 4096 4096 NT_STATUS_OK
ReadX 13113 2656 4096 4096 NT_STATUS_OK
ReadX 13113 2624 4096 4096 NT_STATUS_OK
ReadX 13113 452 4096 4096 NT_STATUS_OK
ReadX 13113 692 4096 4096 NT_STATUS_OK
ReadX 13113 564 4096 4096 NT_STATUS_OK
ReadX 13113 372 4096 4096 NT_STATUS_OK
ReadX 13113 468 4096 4096 NT_STATUS_OK
ReadX 13113 484 4096 4096 NT_STATUS_OK
ReadX 13113 1088 4096 4096 NT_STATUS_OK
ReadX 13113 1924 4096 4096 NT_STATUS_OK
ReadX 13113 2768 4096 4096 NT_STATUS_OK
ReadX 13113 832 4096 4096 NT_STATUS_OK
ReadX 13113 836 4096 4096 NT_STATUS_OK
ReadX 13113 1856 4096 4096 NT_STATUS_OK
ReadX 13113 2640 4096 4096 NT_STATUS_OK
ReadX 13113 436 4096 4096 NT_STATUS_OK
ReadX 13113 1828 4096 4096 NT_STATUS_OK
ReadX 13113 804 4096 4096 NT_STATUS_OK
ReadX 13113 1860 4096 4096 NT_STATUS_OK
ReadX 13113 1812 4096 4096 NT_STATUS_OK
ReadX 13113 756 4096 4096 NT_STATUS_OK
ReadX 13113 1636 4096 4096 NT_STATUS_OK
ReadX 13113 772 4096 4096 NT_STATUS_OK
ReadX 13113 2036 4096 4096 NT_STATUS_OK
ReadX 13113 1220 4096 4096 NT_STATUS_OK
ReadX 13113 1652 4096 4096 NT_STATUS_OK
ReadX 13113 2588 4096 4096 NT_STATUS_OK
ReadX 13113 916 4096 4096 NT_STATUS_OK
ReadX 13113 260 4096 4096 NT_STATUS_OK
ReadX 13113 932 4096 4096 NT_STATUS_OK
ReadX 13113 2624 4096 4096 NT_STATUS_OK
ReadX 13113 308 4096 4096 NT_STATUS_OK
ReadX 13113 292 4096 4096 NT_STATUS_OK
ReadX 13113 1140 4096 4096 NT_STATUS_OK
ReadX 13113 276 4096 4096 NT_STATUS_OK
ReadX 13113 2020 4096 4096 NT_STATUS_OK
ReadX 13113 2880 4096 4096 NT_STATUS_OK
ReadX 13113 516 4096 4096 NT_STATUS_OK
ReadX 13113 1844 4096 4096 NT_STATUS_OK
ReadX 13113 1124 4096 4096 NT_STATUS_OK
ReadX 13113 3136 4096 4096 NT_STATUS_OK
ReadX 13113 324 4096 4096 NT_STATUS_OK
ReadX 13113 1156 4096 4096 NT_STATUS_OK
ReadX 13113 1172 4096 4096 NT_STATUS_OK
ReadX 13113 2112 4096 4096 NT_STATUS_OK
ReadX 13113 2368 4096 4096 NT_STATUS_OK
ReadX 13113 964 4096 4096 NT_STATUS_OK
ReadX 13113 980 4096 4096 NT_STATUS_OK
ReadX 13113 1012 4096 4096 NT_STATUS_OK
ReadX 13113 532 4096 4096 NT_STATUS_OK
ReadX 13113 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13113 1620 4096 4096 NT_STATUS_OK
ReadX 13113 1604 4096 4096 NT_STATUS_OK
ReadX 13113 2116 4096 4096 NT_STATUS_OK
ReadX 13113 2132 4096 4096 NT_STATUS_OK
ReadX 13113 2148 4096 4096 NT_STATUS_OK
ReadX 13113 2276 4096 4096 NT_STATUS_OK
ReadX 13113 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13138 NT_STATUS_OK
QUERY_FILE_INFORMATION 13093 1004 NT_STATUS_OK
Close 13093 NT_STATUS_OK
WriteX 13138 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13138 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 1004 NT_STATUS_OK
Close 13095 NT_STATUS_OK
WriteX 13138 0 65536 65536 NT_STATUS_OK
WriteX 13138 65536 64850 64850 NT_STATUS_OK
Close 13138 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13140 NT_STATUS_OK
WriteX 13140 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13140 258 NT_STATUS_OK
ReadX 13113 2068 4096 4096 NT_STATUS_OK
ReadX 13113 1588 4096 4096 NT_STATUS_OK
ReadX 13113 1572 4096 4096 NT_STATUS_OK
WriteX 13140 0 18630 18630 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13113 612 4096 4096 NT_STATUS_OK
ReadX 13113 564 4096 4096 NT_STATUS_OK
ReadX 13113 1876 4096 4096 NT_STATUS_OK
ReadX 13113 628 4096 4096 NT_STATUS_OK
ReadX 13113 740 4096 4096 NT_STATUS_OK
ReadX 13113 724 4096 4096 NT_STATUS_OK
ReadX 13113 644 4096 4096 NT_STATUS_OK
ReadX 13113 2324 4096 4096 NT_STATUS_OK
ReadX 13113 660 4096 4096 NT_STATUS_OK
ReadX 13113 852 4096 4096 NT_STATUS_OK
ReadX 13113 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13113 2368 4096 4096 NT_STATUS_OK
ReadX 13113 1024 4096 4096 NT_STATUS_OK
ReadX 13113 320 4096 4096 NT_STATUS_OK
ReadX 13113 580 4096 4096 NT_STATUS_OK
ReadX 13113 3136 512 512 NT_STATUS_OK
ReadX 13113 2880 4096 4096 NT_STATUS_OK
Close 13113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 61440 4096 4096 NT_STATUS_OK
ReadX 13145 126976 4096 4096 NT_STATUS_OK
WriteX 13145 0 65536 65536 NT_STATUS_OK
WriteX 13145 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13146 NT_STATUS_OK
ReadX 13146 61440 4096 4096 NT_STATUS_OK
ReadX 13146 126976 4096 4096 NT_STATUS_OK
ReadX 13146 192512 4096 4096 NT_STATUS_OK
ReadX 13146 258048 4096 4096 NT_STATUS_OK
WriteX 13146 0 65536 65536 NT_STATUS_OK
WriteX 13146 65536 65536 65536 NT_STATUS_OK
WriteX 13146 131072 65536 65536 NT_STATUS_OK
WriteX 13146 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 61440 4096 4096 NT_STATUS_OK
ReadX 13147 126976 4096 4096 NT_STATUS_OK
ReadX 13147 192512 4096 4096 NT_STATUS_OK
ReadX 13147 258048 4096 4096 NT_STATUS_OK
ReadX 13147 323584 4096 4096 NT_STATUS_OK
ReadX 13147 389120 4096 4096 NT_STATUS_OK
ReadX 13147 454656 4096 4096 NT_STATUS_OK
ReadX 13147 520192 4096 4096 NT_STATUS_OK
WriteX 13147 0 65536 65536 NT_STATUS_OK
WriteX 13147 65536 65536 65536 NT_STATUS_OK
WriteX 13147 131072 65536 65536 NT_STATUS_OK
WriteX 13147 196608 65536 65536 NT_STATUS_OK
WriteX 13147 262144 65536 65536 NT_STATUS_OK
WriteX 13147 327680 65536 65536 NT_STATUS_OK
WriteX 13147 393216 65536 65536 NT_STATUS_OK
WriteX 13147 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13150 NT_STATUS_OK
WriteX 13150 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13148 0 8192 8192 NT_STATUS_OK
Flush 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13148 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13148 0 8192 8192 NT_STATUS_OK
Flush 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13148 0 8192 8192 NT_STATUS_OK
Flush 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13148 0 8192 8192 NT_STATUS_OK
Flush 13148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Close 13147 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13155 NT_STATUS_OK
WriteX 13155 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 258 NT_STATUS_OK
WriteX 13155 0 62591 62591 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13160 NT_STATUS_OK
WriteX 13160 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13160 258 NT_STATUS_OK
WriteX 13160 0 10845 10845 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13162 NT_STATUS_OK
Close 13162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13165 NT_STATUS_OK
WriteX 13165 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13165 258 NT_STATUS_OK
WriteX 13165 0 30118 30118 NT_STATUS_OK
Close 13165 NT_STATUS_OK
WriteX 13148 0 4096 4096 NT_STATUS_OK
WriteX 13150 0 64 64 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13167 NT_STATUS_OK
ReadX 13167 0 61440 61440 NT_STATUS_OK
ReadX 13167 61440 4096 4096 NT_STATUS_OK
ReadX 13167 65536 61440 61440 NT_STATUS_OK
ReadX 13167 126976 4096 4096 NT_STATUS_OK
ReadX 13167 131072 61440 61440 NT_STATUS_OK
ReadX 13167 192512 4096 4096 NT_STATUS_OK
ReadX 13167 196608 61440 61440 NT_STATUS_OK
ReadX 13167 258048 4096 4096 NT_STATUS_OK
ReadX 13167 262144 61440 61440 NT_STATUS_OK
ReadX 13167 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13168 NT_STATUS_OK
ReadX 13168 0 61440 61440 NT_STATUS_OK
ReadX 13168 61440 4096 4096 NT_STATUS_OK
ReadX 13168 65536 61440 61440 NT_STATUS_OK
ReadX 13168 126976 4096 4096 NT_STATUS_OK
ReadX 13168 131072 61440 61440 NT_STATUS_OK
ReadX 13168 192512 4096 4096 NT_STATUS_OK
ReadX 13168 196608 61440 61440 NT_STATUS_OK
ReadX 13168 258048 4096 4096 NT_STATUS_OK
ReadX 13168 262144 61440 61440 NT_STATUS_OK
ReadX 13168 323584 4096 4096 NT_STATUS_OK
ReadX 13168 327680 61440 61440 NT_STATUS_OK
ReadX 13168 389120 4096 4096 NT_STATUS_OK
ReadX 13168 393216 61440 61440 NT_STATUS_OK
ReadX 13168 454656 4096 4096 NT_STATUS_OK
ReadX 13168 458752 61440 61440 NT_STATUS_OK
ReadX 13168 520192 4096 4096 NT_STATUS_OK
ReadX 13168 524288 61440 61440 NT_STATUS_OK
ReadX 13168 585728 4096 4096 NT_STATUS_OK
ReadX 13168 589824 61440 61440 NT_STATUS_OK
ReadX 13168 651264 4096 4096 NT_STATUS_OK
ReadX 13168 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 61440 61440 NT_STATUS_OK
ReadX 13169 61440 4096 4096 NT_STATUS_OK
ReadX 13169 65536 61440 61440 NT_STATUS_OK
ReadX 13169 126976 4096 4096 NT_STATUS_OK
ReadX 13169 131072 61440 61440 NT_STATUS_OK
ReadX 13169 192512 4096 4096 NT_STATUS_OK
ReadX 13169 196608 61440 61440 NT_STATUS_OK
ReadX 13169 258048 4096 4096 NT_STATUS_OK
ReadX 13169 262144 61440 61440 NT_STATUS_OK
ReadX 13169 323584 4096 4096 NT_STATUS_OK
ReadX 13169 327680 61440 61440 NT_STATUS_OK
ReadX 13169 389120 4096 4096 NT_STATUS_OK
ReadX 13169 393216 61440 61440 NT_STATUS_OK
ReadX 13169 454656 4096 4096 NT_STATUS_OK
ReadX 13169 458752 61440 61440 NT_STATUS_OK
ReadX 13169 520192 4096 4096 NT_STATUS_OK
ReadX 13169 524288 61440 61440 NT_STATUS_OK
ReadX 13169 585728 4096 4096 NT_STATUS_OK
ReadX 13169 589824 61440 61440 NT_STATUS_OK
ReadX 13169 651264 4096 4096 NT_STATUS_OK
ReadX 13169 655360 61440 61440 NT_STATUS_OK
ReadX 13169 716800 4096 4096 NT_STATUS_OK
ReadX 13169 720896 61440 61440 NT_STATUS_OK
ReadX 13169 782336 4096 4096 NT_STATUS_OK
ReadX 13169 786432 61440 61440 NT_STATUS_OK
ReadX 13169 847872 4096 4096 NT_STATUS_OK
ReadX 13169 851968 61440 61440 NT_STATUS_OK
ReadX 13169 913408 4096 4096 NT_STATUS_OK
ReadX 13169 917504 61440 61440 NT_STATUS_OK
ReadX 13169 978944 4096 4096 NT_STATUS_OK
ReadX 13169 983040 61440 61440 NT_STATUS_OK
ReadX 13169 1044480 4096 4096 NT_STATUS_OK
ReadX 13169 1048576 61440 61440 NT_STATUS_OK
ReadX 13169 1110016 4096 4096 NT_STATUS_OK
ReadX 13169 1114112 61440 61440 NT_STATUS_OK
ReadX 13169 1175552 4096 4096 NT_STATUS_OK
ReadX 13169 1179648 61440 61440 NT_STATUS_OK
ReadX 13169 1241088 4096 4096 NT_STATUS_OK
ReadX 13169 1245184 61440 61440 NT_STATUS_OK
ReadX 13169 1306624 4096 4096 NT_STATUS_OK
ReadX 13169 1310720 61440 61440 NT_STATUS_OK
ReadX 13169 1372160 4096 4096 NT_STATUS_OK
ReadX 13169 1376256 61440 61440 NT_STATUS_OK
ReadX 13169 1437696 4096 4096 NT_STATUS_OK
ReadX 13169 1441792 61440 61440 NT_STATUS_OK
ReadX 13169 1503232 4096 4096 NT_STATUS_OK
ReadX 13169 1507328 61440 61440 NT_STATUS_OK
ReadX 13169 1568768 4096 4096 NT_STATUS_OK
ReadX 13169 1572864 61440 61440 NT_STATUS_OK
ReadX 13169 1634304 4096 4096 NT_STATUS_OK
ReadX 13169 1638400 61440 61440 NT_STATUS_OK
ReadX 13169 1699840 4096 4096 NT_STATUS_OK
ReadX 13169 1703936 61440 61440 NT_STATUS_OK
ReadX 13169 1765376 4096 4096 NT_STATUS_OK
ReadX 13169 1769472 61440 61440 NT_STATUS_OK
ReadX 13169 1830912 4096 4096 NT_STATUS_OK
ReadX 13169 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13167 NT_STATUS_OK
Close 13168 NT_STATUS_OK
Close 13169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
ReadX 13174 4096 4096 4096 NT_STATUS_OK
ReadX 13174 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13175 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13178 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13179 NT_STATUS_OK
Close 13179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 8192 8192 NT_STATUS_OK
ReadX 13182 8192 8192 8192 NT_STATUS_OK
ReadX 13182 16384 8192 8192 NT_STATUS_OK
ReadX 13182 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13187 NT_STATUS_OK
WriteX 13187 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
WriteX 13187 0 10438 10438 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13188 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13190 NT_STATUS_OK
Close 13190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13191 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13193 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13195 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
ReadX 13196 4096 4096 4096 NT_STATUS_OK
ReadX 13196 8192 4096 4096 NT_STATUS_OK
ReadX 13196 12288 8192 8192 NT_STATUS_OK
ReadX 13196 20480 8192 8192 NT_STATUS_OK
ReadX 13196 28672 8192 8192 NT_STATUS_OK
ReadX 13196 36864 8192 8192 NT_STATUS_OK
ReadX 13196 45056 8192 8192 NT_STATUS_OK
ReadX 13196 53248 8192 8192 NT_STATUS_OK
ReadX 13196 61440 8192 8192 NT_STATUS_OK
ReadX 13196 69632 8192 8192 NT_STATUS_OK
ReadX 13196 77824 8192 8192 NT_STATUS_OK
ReadX 13196 86016 8192 8192 NT_STATUS_OK
ReadX 13196 94208 8192 8192 NT_STATUS_OK
ReadX 13196 102400 8192 8192 NT_STATUS_OK
ReadX 13196 110592 8192 8192 NT_STATUS_OK
ReadX 13196 118784 8192 8192 NT_STATUS_OK
ReadX 13196 126976 8192 8192 NT_STATUS_OK
ReadX 13196 135168 8192 8192 NT_STATUS_OK
ReadX 13196 143360 8192 8192 NT_STATUS_OK
ReadX 13196 151552 8192 8192 NT_STATUS_OK
ReadX 13196 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13198 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13201 NT_STATUS_OK
WriteX 13201 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 28489 28489 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13202 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13204 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 8192 8192 NT_STATUS_OK
ReadX 13208 8192 8192 8192 NT_STATUS_OK
ReadX 13208 16384 8192 8192 NT_STATUS_OK
ReadX 13208 24576 8192 8192 NT_STATUS_OK
ReadX 13208 32768 16384 16384 NT_STATUS_OK
ReadX 13208 49152 8192 8192 NT_STATUS_OK
ReadX 13208 57344 8192 8192 NT_STATUS_OK
ReadX 13208 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13210 NT_STATUS_OK
Close 13210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13213 NT_STATUS_OK
WriteX 13213 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13213 258 NT_STATUS_OK
WriteX 13213 0 29253 29253 NT_STATUS_OK
Close 13213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13217 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13220 NT_STATUS_OK
WriteX 13220 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13220 258 NT_STATUS_OK
WriteX 13220 0 30183 30183 NT_STATUS_OK
Close 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13223 NT_STATUS_OK
WriteX 13223 0 510 510 NT_STATUS_OK
WriteX 13223 510 512 512 NT_STATUS_OK
WriteX 13223 1022 510 510 NT_STATUS_OK
WriteX 13223 1532 510 510 NT_STATUS_OK
WriteX 13223 2042 168 168 NT_STATUS_OK
Close 13223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13224 NT_STATUS_OK
Close 13224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 61440 4096 4096 NT_STATUS_OK
ReadX 13227 126976 4096 4096 NT_STATUS_OK
WriteX 13227 0 65536 65536 NT_STATUS_OK
WriteX 13227 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 61440 4096 4096 NT_STATUS_OK
ReadX 13228 126976 4096 4096 NT_STATUS_OK
ReadX 13228 192512 4096 4096 NT_STATUS_OK
ReadX 13228 258048 4096 4096 NT_STATUS_OK
WriteX 13228 0 65536 65536 NT_STATUS_OK
WriteX 13228 65536 65536 65536 NT_STATUS_OK
WriteX 13228 131072 65536 65536 NT_STATUS_OK
WriteX 13228 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 61440 4096 4096 NT_STATUS_OK
ReadX 13229 126976 4096 4096 NT_STATUS_OK
ReadX 13229 192512 4096 4096 NT_STATUS_OK
ReadX 13229 258048 4096 4096 NT_STATUS_OK
ReadX 13229 323584 4096 4096 NT_STATUS_OK
ReadX 13229 389120 4096 4096 NT_STATUS_OK
ReadX 13229 454656 4096 4096 NT_STATUS_OK
ReadX 13229 520192 4096 4096 NT_STATUS_OK
WriteX 13229 0 65536 65536 NT_STATUS_OK
WriteX 13229 65536 65536 65536 NT_STATUS_OK
WriteX 13229 131072 65536 65536 NT_STATUS_OK
WriteX 13229 196608 65536 65536 NT_STATUS_OK
WriteX 13229 262144 65536 65536 NT_STATUS_OK
WriteX 13229 327680 65536 65536 NT_STATUS_OK
WriteX 13229 393216 65536 65536 NT_STATUS_OK
WriteX 13229 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13232 NT_STATUS_OK
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13239 NT_STATUS_OK
Close 13239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13245 NT_STATUS_OK
Close 13245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13248 NT_STATUS_OK
Close 13248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13250 NT_STATUS_OK
Close 13250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13254 NT_STATUS_OK
Close 13254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13259 NT_STATUS_OK
Close 13259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13264 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13279 NT_STATUS_OK
Close 13279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13284 NT_STATUS_OK
Close 13284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13289 NT_STATUS_OK
Close 13289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13292 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13295 NT_STATUS_OK
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13298 NT_STATUS_OK
WriteX 13298 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13298 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13298 0 65536 65536 NT_STATUS_OK
WriteX 13298 65536 65536 65536 NT_STATUS_OK
WriteX 13298 131072 65536 65536 NT_STATUS_OK
WriteX 13298 196608 65536 65536 NT_STATUS_OK
WriteX 13298 262144 26634 26634 NT_STATUS_OK
Close 13298 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13303 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
ReadX 13306 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13311 NT_STATUS_OK
Close 13311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13316 NT_STATUS_OK
Close 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13323 NT_STATUS_OK
Close 13323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13329 NT_STATUS_OK
Close 13329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13334 NT_STATUS_OK
Close 13334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13339 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13344 NT_STATUS_OK
Close 13344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13371 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13373 NT_STATUS_OK
Close 13373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
Close 13385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
Close 13386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13397 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13430 0 4096 4096 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
ReadX 13432 4096 4096 4096 NT_STATUS_OK
ReadX 13432 8192 4096 4096 NT_STATUS_OK
ReadX 13432 12288 4096 4096 NT_STATUS_OK
ReadX 13432 16384 4096 4096 NT_STATUS_OK
ReadX 13432 20480 4096 4096 NT_STATUS_OK
ReadX 13432 24576 4096 4096 NT_STATUS_OK
ReadX 13432 28672 4096 4096 NT_STATUS_OK
ReadX 13432 32768 4096 4096 NT_STATUS_OK
ReadX 13432 36864 4096 4096 NT_STATUS_OK
ReadX 13432 40960 4096 4096 NT_STATUS_OK
ReadX 13432 45056 4096 4096 NT_STATUS_OK
ReadX 13432 49152 4096 4096 NT_STATUS_OK
ReadX 13432 53248 4096 4096 NT_STATUS_OK
ReadX 13432 57344 4096 4096 NT_STATUS_OK
ReadX 13432 61440 4096 4096 NT_STATUS_OK
ReadX 13432 65536 4096 4096 NT_STATUS_OK
ReadX 13432 69632 4096 4096 NT_STATUS_OK
ReadX 13432 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13432 1004 NT_STATUS_OK
WriteX 13432 0 4096 4096 NT_STATUS_OK
Close 13432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13433 NT_STATUS_OK
SET_FILE_INFORMATION 13433 1004 NT_STATUS_OK
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13435 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13438 NT_STATUS_OK
WriteX 13438 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13438 258 NT_STATUS_OK
WriteX 13438 0 65536 65536 NT_STATUS_OK
WriteX 13438 65536 19979 19979 NT_STATUS_OK
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
QUERY_FILE_INFORMATION 13439 1004 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
SET_FILE_INFORMATION 13439 1004 NT_STATUS_OK
WriteX 13439 0 4096 4096 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
Close 13442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 0 4096 4096 NT_STATUS_OK
Close 13443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13444 1004 NT_STATUS_OK
WriteX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13445 NT_STATUS_OK
Close 13445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13434 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13447 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13450 NT_STATUS_OK
WriteX 13450 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13450 258 NT_STATUS_OK
WriteX 13450 0 65536 65536 NT_STATUS_OK
WriteX 13450 65536 17654 17654 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 1004 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
SET_FILE_INFORMATION 13451 1004 NT_STATUS_OK
WriteX 13451 0 4096 4096 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13452 NT_STATUS_OK
SET_FILE_INFORMATION 13452 1004 NT_STATUS_OK
Close 13452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13454 NT_STATUS_OK
Close 13454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
ReadX 13456 4096 4096 4096 NT_STATUS_OK
ReadX 13456 8192 4096 4096 NT_STATUS_OK
ReadX 13456 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13456 16384 4096 4096 NT_STATUS_OK
ReadX 13456 20480 4096 4096 NT_STATUS_OK
ReadX 13456 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
Close 13457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
Close 13458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13462 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13465 NT_STATUS_OK
WriteX 13465 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13465 258 NT_STATUS_OK
WriteX 13465 0 65536 65536 NT_STATUS_OK
WriteX 13465 65536 19490 19490 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 0 4096 4096 NT_STATUS_OK
WriteX 13466 0 4096 4096 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
WriteX 13466 0 4096 4096 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
QUERY_FILE_INFORMATION 13466 1004 NT_STATUS_OK
WriteX 13466 0 4096 4096 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
WriteX 13466 0 4096 4096 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
WriteX 13466 0 4096 4096 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
SET_FILE_INFORMATION 13466 1004 NT_STATUS_OK
WriteX 13466 0 4096 4096 NT_STATUS_OK
Flush 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13467 NT_STATUS_OK
SET_FILE_INFORMATION 13467 1004 NT_STATUS_OK
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13471 0 4096 4096 NT_STATUS_OK
Close 13471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
ReadX 13473 4096 4096 4096 NT_STATUS_OK
ReadX 13473 8192 4096 4096 NT_STATUS_OK
ReadX 13473 12288 4096 4096 NT_STATUS_OK
ReadX 13473 16384 4096 4096 NT_STATUS_OK
ReadX 13473 20480 4096 4096 NT_STATUS_OK
ReadX 13473 24576 4096 4096 NT_STATUS_OK
ReadX 13473 28672 4096 4096 NT_STATUS_OK
ReadX 13473 32768 4096 4096 NT_STATUS_OK
ReadX 13473 36864 4096 4096 NT_STATUS_OK
ReadX 13473 40960 4096 4096 NT_STATUS_OK
ReadX 13473 45056 4096 4096 NT_STATUS_OK
ReadX 13473 49152 4096 4096 NT_STATUS_OK
ReadX 13473 53248 4096 4096 NT_STATUS_OK
ReadX 13473 57344 4096 4096 NT_STATUS_OK
ReadX 13473 61440 4096 4096 NT_STATUS_OK
ReadX 13473 65536 4096 4096 NT_STATUS_OK
ReadX 13473 69632 4096 4096 NT_STATUS_OK
ReadX 13473 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13473 1004 NT_STATUS_OK
WriteX 13473 0 4096 4096 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13474 NT_STATUS_OK
SET_FILE_INFORMATION 13474 1004 NT_STATUS_OK
Close 13474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13476 NT_STATUS_OK
Close 13476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13479 NT_STATUS_OK
WriteX 13479 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
WriteX 13479 0 65536 65536 NT_STATUS_OK
WriteX 13479 65536 8866 8866 NT_STATUS_OK
Close 13479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
WriteX 13480 0 4096 4096 NT_STATUS_OK
Flush 13480 NT_STATUS_OK
SET_FILE_INFORMATION 13480 1004 NT_STATUS_OK
WriteX 13480 0 4096 4096 NT_STATUS_OK
Flush 13480 NT_STATUS_OK
Close 13480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13482 NT_STATUS_OK
ReadX 13482 0 4096 4096 NT_STATUS_OK
Close 13482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
Close 13483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
WriteX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13487 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13490 NT_STATUS_OK
WriteX 13490 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 258 NT_STATUS_OK
WriteX 13490 0 65536 65536 NT_STATUS_OK
WriteX 13490 65536 9298 9298 NT_STATUS_OK
Close 13490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
WriteX 13491 0 4096 4096 NT_STATUS_OK
Flush 13491 NT_STATUS_OK
SET_FILE_INFORMATION 13491 1004 NT_STATUS_OK
WriteX 13491 0 4096 4096 NT_STATUS_OK
Flush 13491 NT_STATUS_OK
Close 13491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13492 NT_STATUS_OK
SET_FILE_INFORMATION 13492 1004 NT_STATUS_OK
Close 13492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13494 NT_STATUS_OK
Close 13494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13497 0 4096 4096 NT_STATUS_OK
Close 13497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13498 4096 4096 4096 NT_STATUS_OK
ReadX 13498 8192 4096 4096 NT_STATUS_OK
ReadX 13498 12288 4096 4096 NT_STATUS_OK
ReadX 13498 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
Close 13500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13501 1004 NT_STATUS_OK
WriteX 13501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13502 NT_STATUS_OK
Close 13502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13507 NT_STATUS_OK
WriteX 13507 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13507 258 NT_STATUS_OK
WriteX 13507 0 65536 65536 NT_STATUS_OK
WriteX 13507 65536 11540 11540 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 4096 4096 NT_STATUS_OK
WriteX 13508 0 4096 4096 NT_STATUS_OK
Flush 13508 NT_STATUS_OK
SET_FILE_INFORMATION 13508 1004 NT_STATUS_OK
WriteX 13508 0 4096 4096 NT_STATUS_OK
Flush 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13509 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13513 NT_STATUS_OK
ReadX 13513 61440 4096 4096 NT_STATUS_OK
ReadX 13513 126976 4096 4096 NT_STATUS_OK
WriteX 13513 0 65536 65536 NT_STATUS_OK
WriteX 13513 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 61440 4096 4096 NT_STATUS_OK
ReadX 13514 126976 4096 4096 NT_STATUS_OK
ReadX 13514 192512 4096 4096 NT_STATUS_OK
ReadX 13514 258048 4096 4096 NT_STATUS_OK
WriteX 13514 0 65536 65536 NT_STATUS_OK
WriteX 13514 65536 65536 65536 NT_STATUS_OK
WriteX 13514 131072 65536 65536 NT_STATUS_OK
WriteX 13514 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 61440 4096 4096 NT_STATUS_OK
ReadX 13515 126976 4096 4096 NT_STATUS_OK
ReadX 13515 192512 4096 4096 NT_STATUS_OK
ReadX 13515 258048 4096 4096 NT_STATUS_OK
ReadX 13515 323584 4096 4096 NT_STATUS_OK
ReadX 13515 389120 4096 4096 NT_STATUS_OK
ReadX 13515 454656 4096 4096 NT_STATUS_OK
ReadX 13515 520192 4096 4096 NT_STATUS_OK
WriteX 13515 0 65536 65536 NT_STATUS_OK
WriteX 13515 65536 65536 65536 NT_STATUS_OK
WriteX 13515 131072 65536 65536 NT_STATUS_OK
WriteX 13515 196608 65536 65536 NT_STATUS_OK
WriteX 13515 262144 65536 65536 NT_STATUS_OK
WriteX 13515 327680 65536 65536 NT_STATUS_OK
WriteX 13515 393216 65536 65536 NT_STATUS_OK
WriteX 13515 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
ReadX 13516 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13517 NT_STATUS_OK
WriteX 13517 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13517 258 NT_STATUS_OK
WriteX 13517 0 53 53 NT_STATUS_OK
Close 13517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13518 NT_STATUS_OK
Close 13518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13516 8192 4096 4096 NT_STATUS_OK
ReadX 13516 12288 4096 4096 NT_STATUS_OK
WriteX 13520 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13520 258 NT_STATUS_OK
ReadX 13516 16384 4096 4096 NT_STATUS_OK
ReadX 13516 20480 4096 4096 NT_STATUS_OK
WriteX 13520 0 15360 15360 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13521 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13521 1004 NT_STATUS_OK
WriteX 13521 0 4096 4096 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13522 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13524 4096 4096 4096 NT_STATUS_OK
ReadX 13524 8192 4096 4096 NT_STATUS_OK
ReadX 13524 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
ReadX 13527 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
ReadX 13528 4096 4096 4096 NT_STATUS_OK
ReadX 13528 8192 4096 4096 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13529 NT_STATUS_OK
WriteX 13529 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13529 258 NT_STATUS_OK
WriteX 13529 0 15360 15360 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13530 NT_STATUS_OK
ReadX 13530 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13530 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13530 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13534 NT_STATUS_OK
SET_FILE_INFORMATION 13534 1004 NT_STATUS_OK
Close 13534 NT_STATUS_OK
WriteX 13530 0 4096 4096 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
ReadX 13537 4096 4096 4096 NT_STATUS_OK
ReadX 13537 8192 4096 4096 NT_STATUS_OK
ReadX 13537 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13537 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13537 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13538 NT_STATUS_OK
ReadX 13538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13539 NT_STATUS_OK
WriteX 13539 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
WriteX 13539 0 53 53 NT_STATUS_OK
Close 13539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13540 NT_STATUS_OK
Close 13540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13538 4096 4096 4096 NT_STATUS_OK
ReadX 13538 8192 4096 4096 NT_STATUS_OK
ReadX 13538 12288 4096 4096 NT_STATUS_OK
WriteX 13542 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 258 NT_STATUS_OK
WriteX 13542 0 12006 12006 NT_STATUS_OK
Close 13542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13543 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13543 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13544 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13547 NT_STATUS_OK
Close 13547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13546 4096 4096 4096 NT_STATUS_OK
ReadX 13546 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13549 NT_STATUS_OK
WriteX 13549 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13549 258 NT_STATUS_OK
WriteX 13549 0 11991 11991 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13550 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13550 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13551 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13554 NT_STATUS_OK
SET_FILE_INFORMATION 13554 1004 NT_STATUS_OK
Close 13554 NT_STATUS_OK
WriteX 13550 0 4096 4096 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13558 NT_STATUS_OK
Close 13558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13557 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13557 1004 NT_STATUS_OK
ReadX 13557 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13557 1004 NT_STATUS_OK
WriteX 13557 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13557 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13557 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13557 1004 NT_STATUS_OK
Close 13533 NT_STATUS_OK
WriteX 13537 0 19054 19054 NT_STATUS_OK
WriteX 13557 0 12288 12288 NT_STATUS_OK
Close 13553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13564 NT_STATUS_OK
ReadX 13564 0 61440 61440 NT_STATUS_OK
ReadX 13564 61440 4096 4096 NT_STATUS_OK
ReadX 13564 65536 61440 61440 NT_STATUS_OK
ReadX 13564 126976 4096 4096 NT_STATUS_OK
ReadX 13564 131072 61440 61440 NT_STATUS_OK
ReadX 13564 192512 4096 4096 NT_STATUS_OK
ReadX 13564 196608 61440 61440 NT_STATUS_OK
ReadX 13564 258048 4096 4096 NT_STATUS_OK
ReadX 13564 262144 61440 61440 NT_STATUS_OK
ReadX 13564 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13565 NT_STATUS_OK
ReadX 13565 0 61440 61440 NT_STATUS_OK
ReadX 13565 61440 4096 4096 NT_STATUS_OK
ReadX 13565 65536 61440 61440 NT_STATUS_OK
ReadX 13565 126976 4096 4096 NT_STATUS_OK
ReadX 13565 131072 61440 61440 NT_STATUS_OK
ReadX 13565 192512 4096 4096 NT_STATUS_OK
ReadX 13565 196608 61440 61440 NT_STATUS_OK
ReadX 13565 258048 4096 4096 NT_STATUS_OK
ReadX 13565 262144 61440 61440 NT_STATUS_OK
ReadX 13565 323584 4096 4096 NT_STATUS_OK
ReadX 13565 327680 61440 61440 NT_STATUS_OK
ReadX 13565 389120 4096 4096 NT_STATUS_OK
ReadX 13565 393216 61440 61440 NT_STATUS_OK
ReadX 13565 454656 4096 4096 NT_STATUS_OK
ReadX 13565 458752 61440 61440 NT_STATUS_OK
ReadX 13565 520192 4096 4096 NT_STATUS_OK
ReadX 13565 524288 61440 61440 NT_STATUS_OK
ReadX 13565 585728 4096 4096 NT_STATUS_OK
ReadX 13565 589824 61440 61440 NT_STATUS_OK
ReadX 13565 651264 4096 4096 NT_STATUS_OK
ReadX 13565 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 61440 61440 NT_STATUS_OK
ReadX 13566 61440 4096 4096 NT_STATUS_OK
ReadX 13566 65536 61440 61440 NT_STATUS_OK
ReadX 13566 126976 4096 4096 NT_STATUS_OK
ReadX 13566 131072 61440 61440 NT_STATUS_OK
ReadX 13566 192512 4096 4096 NT_STATUS_OK
ReadX 13566 196608 61440 61440 NT_STATUS_OK
ReadX 13566 258048 4096 4096 NT_STATUS_OK
ReadX 13566 262144 61440 61440 NT_STATUS_OK
ReadX 13566 323584 4096 4096 NT_STATUS_OK
ReadX 13566 327680 61440 61440 NT_STATUS_OK
ReadX 13566 389120 4096 4096 NT_STATUS_OK
ReadX 13566 393216 61440 61440 NT_STATUS_OK
ReadX 13566 454656 4096 4096 NT_STATUS_OK
ReadX 13566 458752 61440 61440 NT_STATUS_OK
ReadX 13566 520192 4096 4096 NT_STATUS_OK
ReadX 13566 524288 61440 61440 NT_STATUS_OK
ReadX 13566 585728 4096 4096 NT_STATUS_OK
ReadX 13566 589824 61440 61440 NT_STATUS_OK
ReadX 13566 651264 4096 4096 NT_STATUS_OK
ReadX 13566 655360 61440 61440 NT_STATUS_OK
ReadX 13566 716800 4096 4096 NT_STATUS_OK
ReadX 13566 720896 61440 61440 NT_STATUS_OK
ReadX 13566 782336 4096 4096 NT_STATUS_OK
ReadX 13566 786432 61440 61440 NT_STATUS_OK
ReadX 13566 847872 4096 4096 NT_STATUS_OK
ReadX 13566 851968 61440 61440 NT_STATUS_OK
ReadX 13566 913408 4096 4096 NT_STATUS_OK
ReadX 13566 917504 61440 61440 NT_STATUS_OK
ReadX 13566 978944 4096 4096 NT_STATUS_OK
ReadX 13566 983040 61440 61440 NT_STATUS_OK
ReadX 13566 1044480 4096 4096 NT_STATUS_OK
ReadX 13566 1048576 61440 61440 NT_STATUS_OK
ReadX 13566 1110016 4096 4096 NT_STATUS_OK
ReadX 13566 1114112 61440 61440 NT_STATUS_OK
ReadX 13566 1175552 4096 4096 NT_STATUS_OK
ReadX 13566 1179648 61440 61440 NT_STATUS_OK
ReadX 13566 1241088 4096 4096 NT_STATUS_OK
ReadX 13566 1245184 61440 61440 NT_STATUS_OK
ReadX 13566 1306624 4096 4096 NT_STATUS_OK
ReadX 13566 1310720 61440 61440 NT_STATUS_OK
ReadX 13566 1372160 4096 4096 NT_STATUS_OK
ReadX 13566 1376256 61440 61440 NT_STATUS_OK
ReadX 13566 1437696 4096 4096 NT_STATUS_OK
ReadX 13566 1441792 61440 61440 NT_STATUS_OK
ReadX 13566 1503232 4096 4096 NT_STATUS_OK
ReadX 13566 1507328 61440 61440 NT_STATUS_OK
ReadX 13566 1568768 4096 4096 NT_STATUS_OK
ReadX 13566 1572864 61440 61440 NT_STATUS_OK
ReadX 13566 1634304 4096 4096 NT_STATUS_OK
ReadX 13566 1638400 61440 61440 NT_STATUS_OK
ReadX 13566 1699840 4096 4096 NT_STATUS_OK
ReadX 13566 1703936 61440 61440 NT_STATUS_OK
ReadX 13566 1765376 4096 4096 NT_STATUS_OK
ReadX 13566 1769472 61440 61440 NT_STATUS_OK
ReadX 13566 1830912 4096 4096 NT_STATUS_OK
ReadX 13566 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13569 NT_STATUS_OK
ReadX 13569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13573 NT_STATUS_OK
QUERY_FILE_INFORMATION 13573 1004 NT_STATUS_OK
WriteX 13573 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13573 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13574 NT_STATUS_OK
Close 13574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13575 NT_STATUS_OK
WriteX 13575 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13575 258 NT_STATUS_OK
WriteX 13575 0 491 491 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13578 NT_STATUS_OK
Close 13578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13579 NT_STATUS_OK
WriteX 13579 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13579 258 NT_STATUS_OK
WriteX 13579 0 543 543 NT_STATUS_OK
Close 13579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Close 13565 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13568 NT_STATUS_OK
Close 13569 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13586 NT_STATUS_OK
ReadX 13586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13593 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 1004 NT_STATUS_OK
WriteX 13593 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 258 NT_STATUS_OK
WriteX 13593 0 2048 2048 NT_STATUS_OK
Close 13593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13594 0 4096 4096 NT_STATUS_OK
Flush 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13599 NT_STATUS_OK
WriteX 13599 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 258 NT_STATUS_OK
WriteX 13599 0 2048 2048 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13605 NT_STATUS_OK
WriteX 13605 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13605 258 NT_STATUS_OK
WriteX 13605 0 2048 2048 NT_STATUS_OK
Close 13605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 0 2048 2048 NT_STATUS_OK
ReadX 13584 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13588 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13600 0 4096 4096 NT_STATUS_OK
WriteX 13584 0 8192 8192 NT_STATUS_OK
WriteX 13585 0 4096 4096 NT_STATUS_OK
WriteX 13586 0 4096 4096 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13609 NT_STATUS_OK
ReadX 13609 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13610 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13609 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13586 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13612 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13630 NT_STATUS_OK
QUERY_FILE_INFORMATION 13630 1004 NT_STATUS_OK
WriteX 13630 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13630 258 NT_STATUS_OK
WriteX 13630 0 2048 2048 NT_STATUS_OK
Close 13630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13632 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13638 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 1004 NT_STATUS_OK
WriteX 13638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 258 NT_STATUS_OK
WriteX 13638 0 2048 2048 NT_STATUS_OK
Close 13638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13631 0 4096 4096 NT_STATUS_OK
Flush 13631 NT_STATUS_OK
WriteX 13639 0 4096 4096 NT_STATUS_OK
Flush 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13631 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13639 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13633 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13641 NT_STATUS_OK
WriteX 13641 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 258 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Close 13641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13642 NT_STATUS_OK
ReadX 13642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13644 NT_STATUS_OK
WriteX 13644 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13644 258 NT_STATUS_OK
WriteX 13644 0 4096 4096 NT_STATUS_OK
Close 13644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13645 0 4096 4096 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13614 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13651 NT_STATUS_OK
Close 13651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13652 NT_STATUS_OK
WriteX 13652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13652 258 NT_STATUS_OK
WriteX 13652 0 2048 2048 NT_STATUS_OK
Close 13652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13656 NT_STATUS_OK
ReadX 13656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13657 NT_STATUS_OK
ReadX 13657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13661 NT_STATUS_OK
ReadX 13661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13662 NT_STATUS_OK
ReadX 13662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13667 NT_STATUS_OK
QUERY_FILE_INFORMATION 13667 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13665 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Close 13662 NT_STATUS_OK
Close 13663 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13666 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13655 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Close 13657 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13669 NT_STATUS_OK
QUERY_FILE_INFORMATION 13669 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13672 NT_STATUS_OK
ReadX 13672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13673 NT_STATUS_OK
ReadX 13673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13675 NT_STATUS_OK
ReadX 13675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13688 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13689 NT_STATUS_OK
QUERY_FILE_INFORMATION 13689 1004 NT_STATUS_OK
WriteX 13689 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13689 258 NT_STATUS_OK
WriteX 13689 0 2048 2048 NT_STATUS_OK
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13690 NT_STATUS_OK
ReadX 13690 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13692 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13701 NT_STATUS_OK
QUERY_FILE_INFORMATION 13701 1004 NT_STATUS_OK
WriteX 13701 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13701 258 NT_STATUS_OK
WriteX 13701 0 2048 2048 NT_STATUS_OK
Close 13701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13702 NT_STATUS_OK
ReadX 13702 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13709 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 1004 NT_STATUS_OK
WriteX 13709 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 258 NT_STATUS_OK
WriteX 13709 0 2048 2048 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13690 0 4096 4096 NT_STATUS_OK
Flush 13690 NT_STATUS_OK
WriteX 13702 0 4096 4096 NT_STATUS_OK
Flush 13702 NT_STATUS_OK
WriteX 13710 0 4096 4096 NT_STATUS_OK
Flush 13710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13690 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13702 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13710 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13692 4096 16384 16384 NT_STATUS_OK
ReadX 13672 4096 16384 16384 NT_STATUS_OK
ReadX 13704 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 2048 2048 NT_STATUS_OK
WriteX 13712 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13713 NT_STATUS_OK
QUERY_FILE_INFORMATION 13713 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Close 13676 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13672 NT_STATUS_OK
Close 13673 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Close 13675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13715 NT_STATUS_OK
QUERY_FILE_INFORMATION 13715 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13717 NT_STATUS_OK
QUERY_FILE_INFORMATION 13717 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13722 NT_STATUS_OK
ReadX 13722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13720 4096 16384 16384 NT_STATUS_OK
WriteX 13720 0 4096 4096 NT_STATUS_OK
WriteX 13721 0 4096 4096 NT_STATUS_OK
WriteX 13722 0 4096 4096 NT_STATUS_OK
WriteX 13723 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13734 NT_STATUS_OK
ReadX 13734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13735 NT_STATUS_OK
ReadX 13735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13737 NT_STATUS_OK
ReadX 13737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13738 NT_STATUS_OK
ReadX 13738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13739 NT_STATUS_OK
ReadX 13739 0 8192 8192 NT_STATUS_OK
ReadX 13726 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13740 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13740 0 4096 4096 NT_STATUS_OK
ReadX 13740 4096 4096 4096 NT_STATUS_OK
ReadX 13740 8192 4096 4096 NT_STATUS_OK
WriteX 13726 0 4096 4096 NT_STATUS_OK
WriteX 13727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13741 0 4096 4096 NT_STATUS_OK
ReadX 13741 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13720 0 4096 4096 NT_STATUS_OK
WriteX 13721 0 4096 4096 NT_STATUS_OK
WriteX 13722 0 4096 4096 NT_STATUS_OK
WriteX 13723 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13745 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13746 NT_STATUS_OK
QUERY_FILE_INFORMATION 13746 1004 NT_STATUS_OK
WriteX 13746 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13746 258 NT_STATUS_OK
WriteX 13746 0 2048 2048 NT_STATUS_OK
Close 13746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13747 NT_STATUS_OK
ReadX 13747 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13748 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13749 NT_STATUS_OK
ReadX 13749 0 4096 4096 NT_STATUS_OK
ReadX 13749 4096 4096 4096 NT_STATUS_OK
WriteX 13749 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
ReadX 13751 4096 4096 4096 NT_STATUS_OK
WriteX 13751 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13752 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13739 NT_STATUS_OK
Close 13724 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13722 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13737 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Close 13735 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Close 13738 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13754 0 4096 4096 NT_STATUS_OK
ReadX 13754 4096 4096 4096 NT_STATUS_OK
ReadX 13754 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13765 NT_STATUS_OK
ReadX 13765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
ReadX 13755 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13772 NT_STATUS_OK
QUERY_FILE_INFORMATION 13772 1004 NT_STATUS_OK
WriteX 13772 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13772 258 NT_STATUS_OK
WriteX 13772 0 2048 2048 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13773 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13778 NT_STATUS_OK
QUERY_FILE_INFORMATION 13778 1004 NT_STATUS_OK
WriteX 13778 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13778 258 NT_STATUS_OK
WriteX 13778 0 2048 2048 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13779 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13762 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13780 NT_STATUS_OK
QUERY_FILE_INFORMATION 13780 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13756 NT_STATUS_OK
Close 13759 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13782 NT_STATUS_OK
QUERY_FILE_INFORMATION 13782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13784 NT_STATUS_OK
ReadX 13784 61440 4096 4096 NT_STATUS_OK
ReadX 13784 126976 4096 4096 NT_STATUS_OK
WriteX 13784 0 65536 65536 NT_STATUS_OK
WriteX 13784 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 61440 4096 4096 NT_STATUS_OK
ReadX 13785 126976 4096 4096 NT_STATUS_OK
ReadX 13785 192512 4096 4096 NT_STATUS_OK
ReadX 13785 258048 4096 4096 NT_STATUS_OK
WriteX 13785 0 65536 65536 NT_STATUS_OK
WriteX 13785 65536 65536 65536 NT_STATUS_OK
WriteX 13785 131072 65536 65536 NT_STATUS_OK
WriteX 13785 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 61440 4096 4096 NT_STATUS_OK
ReadX 13786 126976 4096 4096 NT_STATUS_OK
ReadX 13786 192512 4096 4096 NT_STATUS_OK
ReadX 13786 258048 4096 4096 NT_STATUS_OK
ReadX 13786 323584 4096 4096 NT_STATUS_OK
ReadX 13786 389120 4096 4096 NT_STATUS_OK
ReadX 13786 454656 4096 4096 NT_STATUS_OK
ReadX 13786 520192 4096 4096 NT_STATUS_OK
WriteX 13786 0 65536 65536 NT_STATUS_OK
WriteX 13786 65536 65536 65536 NT_STATUS_OK
WriteX 13786 131072 65536 65536 NT_STATUS_OK
WriteX 13786 196608 65536 65536 NT_STATUS_OK
WriteX 13786 262144 65536 65536 NT_STATUS_OK
WriteX 13786 327680 65536 65536 NT_STATUS_OK
WriteX 13786 393216 65536 65536 NT_STATUS_OK
WriteX 13786 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13787 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13787 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13787 8192 4096 4096 NT_STATUS_OK
ReadX 13787 12288 4096 4096 NT_STATUS_OK
ReadX 13787 16384 4096 4096 NT_STATUS_OK
ReadX 13787 20480 4096 4096 NT_STATUS_OK
ReadX 13787 24576 4096 4096 NT_STATUS_OK
ReadX 13787 28672 4096 4096 NT_STATUS_OK
ReadX 13787 32768 4096 4096 NT_STATUS_OK
ReadX 13787 36864 4096 4096 NT_STATUS_OK
ReadX 13787 40960 4096 4096 NT_STATUS_OK
ReadX 13787 45056 4096 4096 NT_STATUS_OK
ReadX 13787 49152 4096 4096 NT_STATUS_OK
ReadX 13787 53248 4096 4096 NT_STATUS_OK
ReadX 13787 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13787 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13788 NT_STATUS_OK
Close 13788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13784 NT_STATUS_OK
Close 13785 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13790 1004 NT_STATUS_OK
WriteX 13790 0 57088 57088 NT_STATUS_OK
WriteX 13790 0 4096 4096 NT_STATUS_OK
Flush 13790 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13791 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
Close 13791 NT_STATUS_OK
SET_FILE_INFORMATION 13790 1004 NT_STATUS_OK
WriteX 13790 0 4096 4096 NT_STATUS_OK
Close 13790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13792 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13794 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13795 NT_STATUS_OK
WriteX 13795 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13795 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13795 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
WriteX 13795 0 51456 51456 NT_STATUS_OK
WriteX 13795 0 4096 4096 NT_STATUS_OK
Flush 13795 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
WriteX 13795 0 4096 4096 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13797 NT_STATUS_OK
Close 13797 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13799 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13804 NT_STATUS_OK
WriteX 13804 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 258 NT_STATUS_OK
WriteX 13804 0 53077 53077 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13805 NT_STATUS_OK
WriteX 13805 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13805 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13805 1004 NT_STATUS_OK
WriteX 13805 0 65536 65536 NT_STATUS_OK
WriteX 13805 65536 1856 1856 NT_STATUS_OK
WriteX 13805 0 4096 4096 NT_STATUS_OK
Flush 13805 NT_STATUS_OK
SET_FILE_INFORMATION 13805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13805 1004 NT_STATUS_OK
WriteX 13805 0 4096 4096 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Close 13799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13807 NT_STATUS_OK
Close 13807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13811 NT_STATUS_OK
Close 13811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13814 NT_STATUS_OK
WriteX 13814 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 258 NT_STATUS_OK
WriteX 13814 0 7983 7983 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13819 NT_STATUS_OK
WriteX 13819 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13819 258 NT_STATUS_OK
WriteX 13819 0 65536 65536 NT_STATUS_OK
WriteX 13819 65536 65536 65536 NT_STATUS_OK
WriteX 13819 131072 65536 65536 NT_STATUS_OK
WriteX 13819 196608 65536 65536 NT_STATUS_OK
WriteX 13819 262144 65536 65536 NT_STATUS_OK
WriteX 13819 327680 65536 65536 NT_STATUS_OK
WriteX 13819 393216 65536 65536 NT_STATUS_OK
WriteX 13819 458752 46731 46731 NT_STATUS_OK
Close 13819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13820 NT_STATUS_OK
WriteX 13820 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13820 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13809 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13820 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
WriteX 13820 0 65536 65536 NT_STATUS_OK
WriteX 13820 65536 22848 22848 NT_STATUS_OK
WriteX 13820 0 4096 4096 NT_STATUS_OK
Flush 13820 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
WriteX 13820 0 4096 4096 NT_STATUS_OK
Close 13820 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13824 NT_STATUS_OK
ReadX 13824 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13824 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13825 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13825 1004 NT_STATUS_OK
ReadX 13825 8192 4096 4096 NT_STATUS_OK
ReadX 13825 12288 4096 4096 NT_STATUS_OK
ReadX 13825 16384 4096 4096 NT_STATUS_OK
ReadX 13825 20480 4096 4096 NT_STATUS_OK
ReadX 13825 24576 4096 4096 NT_STATUS_OK
ReadX 13825 28672 4096 4096 NT_STATUS_OK
ReadX 13825 32768 4096 4096 NT_STATUS_OK
ReadX 13825 36864 4096 4096 NT_STATUS_OK
ReadX 13825 40960 4096 4096 NT_STATUS_OK
ReadX 13825 45056 4096 4096 NT_STATUS_OK
ReadX 13825 49152 4096 4096 NT_STATUS_OK
ReadX 13825 53248 4096 4096 NT_STATUS_OK
ReadX 13825 57344 4096 4096 NT_STATUS_OK
ReadX 13825 61440 4096 4096 NT_STATUS_OK
ReadX 13825 65536 4096 4096 NT_STATUS_OK
ReadX 13825 69632 4096 4096 NT_STATUS_OK
ReadX 13825 73728 4096 4096 NT_STATUS_OK
ReadX 13825 77824 4096 4096 NT_STATUS_OK
ReadX 13825 81920 4096 4096 NT_STATUS_OK
ReadX 13825 86016 4096 4096 NT_STATUS_OK
ReadX 13825 90112 4096 4096 NT_STATUS_OK
ReadX 13825 94208 4096 4096 NT_STATUS_OK
ReadX 13825 98304 4096 4096 NT_STATUS_OK
ReadX 13825 102400 4096 4096 NT_STATUS_OK
ReadX 13825 106496 4096 4096 NT_STATUS_OK
ReadX 13825 110592 4096 4096 NT_STATUS_OK
ReadX 13825 114688 4096 4096 NT_STATUS_OK
ReadX 13825 118784 4096 4096 NT_STATUS_OK
ReadX 13825 122880 4096 4096 NT_STATUS_OK
ReadX 13825 126976 4096 4096 NT_STATUS_OK
ReadX 13825 131072 4096 4096 NT_STATUS_OK
ReadX 13825 135168 4096 4096 NT_STATUS_OK
ReadX 13825 139264 4096 4096 NT_STATUS_OK
ReadX 13825 143360 4096 4096 NT_STATUS_OK
ReadX 13825 147456 4096 4096 NT_STATUS_OK
ReadX 13825 151552 4096 4096 NT_STATUS_OK
ReadX 13825 155648 4096 4096 NT_STATUS_OK
ReadX 13825 159744 4096 4096 NT_STATUS_OK
ReadX 13825 163840 4096 4096 NT_STATUS_OK
ReadX 13825 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13825 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13826 NT_STATUS_OK
Close 13826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
Close 13825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13829 NT_STATUS_OK
SET_FILE_INFORMATION 13829 1004 NT_STATUS_OK
Close 13829 NT_STATUS_OK
WriteX 13828 0 42388 42388 NT_STATUS_OK
Close 13828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
ReadX 13832 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13833 NT_STATUS_OK
WriteX 13833 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13833 258 NT_STATUS_OK
SET_FILE_INFORMATION 13833 1004 NT_STATUS_OK
WriteX 13833 0 42652 42652 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13835 NT_STATUS_OK
Close 13835 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
ReadX 13837 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13842 NT_STATUS_OK
WriteX 13842 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13842 258 NT_STATUS_OK
WriteX 13842 0 65536 65536 NT_STATUS_OK
WriteX 13842 65536 49 49 NT_STATUS_OK
Close 13842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13843 NT_STATUS_OK
ReadX 13843 0 61440 61440 NT_STATUS_OK
ReadX 13843 61440 4096 4096 NT_STATUS_OK
ReadX 13843 65536 61440 61440 NT_STATUS_OK
ReadX 13843 126976 4096 4096 NT_STATUS_OK
ReadX 13843 131072 61440 61440 NT_STATUS_OK
ReadX 13843 192512 4096 4096 NT_STATUS_OK
ReadX 13843 196608 61440 61440 NT_STATUS_OK
ReadX 13843 258048 4096 4096 NT_STATUS_OK
ReadX 13843 262144 61440 61440 NT_STATUS_OK
ReadX 13843 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 61440 61440 NT_STATUS_OK
ReadX 13844 61440 4096 4096 NT_STATUS_OK
ReadX 13844 65536 61440 61440 NT_STATUS_OK
ReadX 13844 126976 4096 4096 NT_STATUS_OK
ReadX 13844 131072 61440 61440 NT_STATUS_OK
ReadX 13844 192512 4096 4096 NT_STATUS_OK
ReadX 13844 196608 61440 61440 NT_STATUS_OK
ReadX 13844 258048 4096 4096 NT_STATUS_OK
ReadX 13844 262144 61440 61440 NT_STATUS_OK
ReadX 13844 323584 4096 4096 NT_STATUS_OK
ReadX 13844 327680 61440 61440 NT_STATUS_OK
ReadX 13844 389120 4096 4096 NT_STATUS_OK
ReadX 13844 393216 61440 61440 NT_STATUS_OK
ReadX 13844 454656 4096 4096 NT_STATUS_OK
ReadX 13844 458752 61440 61440 NT_STATUS_OK
ReadX 13844 520192 4096 4096 NT_STATUS_OK
ReadX 13844 524288 61440 61440 NT_STATUS_OK
ReadX 13844 585728 4096 4096 NT_STATUS_OK
ReadX 13844 589824 61440 61440 NT_STATUS_OK
ReadX 13844 651264 4096 4096 NT_STATUS_OK
ReadX 13844 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 61440 61440 NT_STATUS_OK
ReadX 13845 61440 4096 4096 NT_STATUS_OK
ReadX 13845 65536 61440 61440 NT_STATUS_OK
ReadX 13845 126976 4096 4096 NT_STATUS_OK
ReadX 13845 131072 61440 61440 NT_STATUS_OK
ReadX 13845 192512 4096 4096 NT_STATUS_OK
ReadX 13845 196608 61440 61440 NT_STATUS_OK
ReadX 13845 258048 4096 4096 NT_STATUS_OK
ReadX 13845 262144 61440 61440 NT_STATUS_OK
ReadX 13845 323584 4096 4096 NT_STATUS_OK
ReadX 13845 327680 61440 61440 NT_STATUS_OK
ReadX 13845 389120 4096 4096 NT_STATUS_OK
ReadX 13845 393216 61440 61440 NT_STATUS_OK
ReadX 13845 454656 4096 4096 NT_STATUS_OK
ReadX 13845 458752 61440 61440 NT_STATUS_OK
ReadX 13845 520192 4096 4096 NT_STATUS_OK
ReadX 13845 524288 61440 61440 NT_STATUS_OK
ReadX 13845 585728 4096 4096 NT_STATUS_OK
ReadX 13845 589824 61440 61440 NT_STATUS_OK
ReadX 13845 651264 4096 4096 NT_STATUS_OK
ReadX 13845 655360 61440 61440 NT_STATUS_OK
ReadX 13845 716800 4096 4096 NT_STATUS_OK
ReadX 13845 720896 61440 61440 NT_STATUS_OK
ReadX 13845 782336 4096 4096 NT_STATUS_OK
ReadX 13845 786432 61440 61440 NT_STATUS_OK
ReadX 13845 847872 4096 4096 NT_STATUS_OK
ReadX 13845 851968 61440 61440 NT_STATUS_OK
ReadX 13845 913408 4096 4096 NT_STATUS_OK
ReadX 13845 917504 61440 61440 NT_STATUS_OK
ReadX 13845 978944 4096 4096 NT_STATUS_OK
ReadX 13845 983040 61440 61440 NT_STATUS_OK
ReadX 13845 1044480 4096 4096 NT_STATUS_OK
ReadX 13845 1048576 61440 61440 NT_STATUS_OK
ReadX 13845 1110016 4096 4096 NT_STATUS_OK
ReadX 13845 1114112 61440 61440 NT_STATUS_OK
ReadX 13845 1175552 4096 4096 NT_STATUS_OK
ReadX 13845 1179648 61440 61440 NT_STATUS_OK
ReadX 13845 1241088 4096 4096 NT_STATUS_OK
ReadX 13845 1245184 61440 61440 NT_STATUS_OK
ReadX 13845 1306624 4096 4096 NT_STATUS_OK
ReadX 13845 1310720 61440 61440 NT_STATUS_OK
ReadX 13845 1372160 4096 4096 NT_STATUS_OK
ReadX 13845 1376256 61440 61440 NT_STATUS_OK
ReadX 13845 1437696 4096 4096 NT_STATUS_OK
ReadX 13845 1441792 61440 61440 NT_STATUS_OK
ReadX 13845 1503232 4096 4096 NT_STATUS_OK
ReadX 13845 1507328 61440 61440 NT_STATUS_OK
ReadX 13845 1568768 4096 4096 NT_STATUS_OK
ReadX 13845 1572864 61440 61440 NT_STATUS_OK
ReadX 13845 1634304 4096 4096 NT_STATUS_OK
ReadX 13845 1638400 61440 61440 NT_STATUS_OK
ReadX 13845 1699840 4096 4096 NT_STATUS_OK
ReadX 13845 1703936 61440 61440 NT_STATUS_OK
ReadX 13845 1765376 4096 4096 NT_STATUS_OK
ReadX 13845 1769472 61440 61440 NT_STATUS_OK
ReadX 13845 1830912 4096 4096 NT_STATUS_OK
ReadX 13845 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13847 NT_STATUS_OK
QUERY_FILE_INFORMATION 13847 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13847 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13847 1005 NT_STATUS_OK
ReadX 13847 2156 24 24 NT_STATUS_OK
ReadX 13847 2139 276 276 NT_STATUS_OK
ReadX 13847 2136 14 14 NT_STATUS_OK
ReadX 13847 2136 7 7 NT_STATUS_OK
ReadX 13847 2138 12 12 NT_STATUS_OK
ReadX 13847 2137 8 8 NT_STATUS_OK
ReadX 13847 2135 15 15 NT_STATUS_OK
ReadX 13847 0 16 16 NT_STATUS_OK
ReadX 13847 16 2048 2048 NT_STATUS_OK
ReadX 13847 2064 2048 2048 NT_STATUS_OK
ReadX 13847 257 2048 2048 NT_STATUS_OK
ReadX 13847 385 2048 2048 NT_STATUS_OK
ReadX 13847 513 2048 2048 NT_STATUS_OK
ReadX 13847 641 2048 2048 NT_STATUS_OK
ReadX 13847 769 2048 2048 NT_STATUS_OK
ReadX 13847 897 2048 2048 NT_STATUS_OK
ReadX 13847 1025 2048 2048 NT_STATUS_OK
ReadX 13847 1153 2048 2048 NT_STATUS_OK
ReadX 13847 1281 2048 2048 NT_STATUS_OK
ReadX 13847 1409 2048 2048 NT_STATUS_OK
ReadX 13847 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13843 NT_STATUS_OK
Close 13844 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13852 NT_STATUS_OK
WriteX 13852 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13852 258 NT_STATUS_OK
WriteX 13852 0 10575 10575 NT_STATUS_OK
Flush 13852 NT_STATUS_OK
Close 13852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13853 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
Close 13847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13857 NT_STATUS_OK
LockX 13857 2147483538 1 NT_STATUS_OK
UnlockX 13857 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13857 1005 NT_STATUS_OK
ReadX 13857 0 512 512 NT_STATUS_OK
ReadX 13857 512 512 512 NT_STATUS_OK
ReadX 13857 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13857 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13857 1004 NT_STATUS_OK
Close 13857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13858 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 1005 NT_STATUS_OK
ReadX 13858 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13859 NT_STATUS_OK
LockX 13859 2147483538 1 NT_STATUS_OK
UnlockX 13859 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13859 1005 NT_STATUS_OK
ReadX 13859 0 512 512 NT_STATUS_OK
ReadX 13859 512 512 512 NT_STATUS_OK
ReadX 13859 1024 512 512 NT_STATUS_OK
ReadX 13859 288 20 20 NT_STATUS_OK
ReadX 13859 308 2084 2084 NT_STATUS_OK
ReadX 13859 388 2084 2084 NT_STATUS_OK
ReadX 13859 388 2084 2084 NT_STATUS_OK
ReadX 13846 2157 1386 1386 NT_STATUS_OK
ReadX 13859 2472 399 399 NT_STATUS_OK
ReadX 13859 3072 1536 1536 NT_STATUS_OK
ReadX 13859 544 149 149 NT_STATUS_OK
ReadX 13859 693 485 485 NT_STATUS_OK
Close 13859 NT_STATUS_OK
ReadX 13846 2157 4096 4096 NT_STATUS_OK
ReadX 13846 6253 4096 4096 NT_STATUS_OK
ReadX 13846 10349 4096 4096 NT_STATUS_OK
ReadX 13846 14445 4096 4096 NT_STATUS_OK
ReadX 13846 18541 4096 4096 NT_STATUS_OK
ReadX 13846 22637 256 256 NT_STATUS_OK
ReadX 13846 22893 4096 4096 NT_STATUS_OK
ReadX 13846 26989 4096 4096 NT_STATUS_OK
ReadX 13846 31085 4096 4096 NT_STATUS_OK
ReadX 13846 35181 4096 4096 NT_STATUS_OK
ReadX 13846 39277 4096 4096 NT_STATUS_OK
ReadX 13846 43373 4096 4096 NT_STATUS_OK
ReadX 13846 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13846 2157 1024 1024 NT_STATUS_OK
ReadX 13846 1667 4688 4688 NT_STATUS_OK
ReadX 13846 6355 3516 3516 NT_STATUS_OK
ReadX 13846 9871 16384 16384 NT_STATUS_OK
ReadX 13846 26255 3771 3771 NT_STATUS_OK
ReadX 13846 30026 2048 2048 NT_STATUS_OK
ReadX 13846 32074 1024 1024 NT_STATUS_OK
ReadX 13846 33098 6652 6652 NT_STATUS_OK
ReadX 13846 39750 16384 16384 NT_STATUS_OK
ReadX 13846 56134 10496 10496 NT_STATUS_OK
ReadX 13846 66630 1784 1784 NT_STATUS_OK
ReadX 13846 68414 90 90 NT_STATUS_OK
ReadX 13846 68504 273 273 NT_STATUS_OK
ReadX 13846 68777 1600 1600 NT_STATUS_OK
ReadX 13846 70377 640 640 NT_STATUS_OK
ReadX 13846 71017 1280 1280 NT_STATUS_OK
ReadX 13846 72297 8464 8464 NT_STATUS_OK
ReadX 13846 80761 158 158 NT_STATUS_OK
ReadX 13846 80919 912 912 NT_STATUS_OK
ReadX 13846 81831 1980 1980 NT_STATUS_OK
ReadX 13846 83811 2256 2256 NT_STATUS_OK
ReadX 13846 86067 400 400 NT_STATUS_OK
ReadX 13846 86467 252 252 NT_STATUS_OK
ReadX 13846 86719 42 42 NT_STATUS_OK
ReadX 13846 86761 725 725 NT_STATUS_OK
ReadX 13846 2009 512 512 NT_STATUS_OK
ReadX 13846 3895 9 9 NT_STATUS_OK
ReadX 13846 3781 46 46 NT_STATUS_OK
ReadX 13846 4059 92 92 NT_STATUS_OK
ReadX 13846 3781 92 92 NT_STATUS_OK
ReadX 13846 3986 184 184 NT_STATUS_OK
ReadX 13846 3987 16384 16384 NT_STATUS_OK
ReadX 13846 3902 16384 16384 NT_STATUS_OK
ReadX 13846 3781 10240 10240 NT_STATUS_OK
ReadX 13846 3821 16384 16384 NT_STATUS_OK
ReadX 13846 3891 935 935 NT_STATUS_OK
ReadX 13846 4060 10240 10240 NT_STATUS_OK
ReadX 13846 4059 184 184 NT_STATUS_OK
ReadX 13846 256 184 184 NT_STATUS_OK
ReadX 13846 256 1026 1026 NT_STATUS_OK
ReadX 13846 3901 326 326 NT_STATUS_OK
ReadX 13846 3899 652 652 NT_STATUS_OK
ReadX 13846 256 2 2 NT_STATUS_OK
ReadX 13846 258 4948 4948 NT_STATUS_OK
Close 13846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13861 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13864 NT_STATUS_OK
WriteX 13864 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13864 258 NT_STATUS_OK
WriteX 13864 0 65536 65536 NT_STATUS_OK
WriteX 13864 65536 65536 65536 NT_STATUS_OK
WriteX 13864 131072 65536 65536 NT_STATUS_OK
WriteX 13864 196608 65536 65536 NT_STATUS_OK
WriteX 13864 262144 65536 65536 NT_STATUS_OK
WriteX 13864 327680 65536 65536 NT_STATUS_OK
WriteX 13864 393216 65536 65536 NT_STATUS_OK
WriteX 13864 458752 65536 65536 NT_STATUS_OK
WriteX 13864 524288 65536 65536 NT_STATUS_OK
WriteX 13864 589824 35257 35257 NT_STATUS_OK
Close 13864 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13869 NT_STATUS_OK
WriteX 13869 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13869 258 NT_STATUS_OK
WriteX 13869 0 65536 65536 NT_STATUS_OK
WriteX 13869 65536 65536 65536 NT_STATUS_OK
WriteX 13869 131072 65536 65536 NT_STATUS_OK
WriteX 13869 196608 65536 65536 NT_STATUS_OK
WriteX 13869 262144 65536 65536 NT_STATUS_OK
WriteX 13869 327680 65536 65536 NT_STATUS_OK
WriteX 13869 393216 65536 65536 NT_STATUS_OK
WriteX 13869 458752 65536 65536 NT_STATUS_OK
WriteX 13869 524288 65536 65536 NT_STATUS_OK
WriteX 13869 589824 57598 57598 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13871 NT_STATUS_OK
WriteX 13871 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13871 258 NT_STATUS_OK
WriteX 13871 0 12543 12543 NT_STATUS_OK
Flush 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13877 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 1005 NT_STATUS_OK
ReadX 13877 1938 24 24 NT_STATUS_OK
ReadX 13877 1920 276 276 NT_STATUS_OK
ReadX 13877 1918 14 14 NT_STATUS_OK
ReadX 13877 1918 7 7 NT_STATUS_OK
ReadX 13877 1919 12 12 NT_STATUS_OK
ReadX 13877 1919 8 8 NT_STATUS_OK
ReadX 13877 1917 15 15 NT_STATUS_OK
ReadX 13877 0 16 16 NT_STATUS_OK
ReadX 13877 16 2048 2048 NT_STATUS_OK
ReadX 13877 2064 2048 2048 NT_STATUS_OK
ReadX 13877 257 2048 2048 NT_STATUS_OK
ReadX 13877 385 2048 2048 NT_STATUS_OK
ReadX 13877 513 2048 2048 NT_STATUS_OK
ReadX 13877 641 2048 2048 NT_STATUS_OK
ReadX 13877 769 2048 2048 NT_STATUS_OK
ReadX 13877 897 2048 2048 NT_STATUS_OK
ReadX 13877 1025 2048 2048 NT_STATUS_OK
ReadX 13877 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13882 NT_STATUS_OK
WriteX 13882 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 258 NT_STATUS_OK
WriteX 13882 0 11588 11588 NT_STATUS_OK
Flush 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13883 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 4096 4096 NT_STATUS_OK
Close 13877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13887 NT_STATUS_OK
WriteX 13887 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13887 258 NT_STATUS_OK
WriteX 13887 0 11615 11615 NT_STATUS_OK
Flush 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13889 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13896 NT_STATUS_OK
WriteX 13896 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13896 258 NT_STATUS_OK
WriteX 13896 0 65536 65536 NT_STATUS_OK
WriteX 13896 65536 16050 16050 NT_STATUS_OK
Close 13896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13876 1939 64 64 NT_STATUS_OK
ReadX 13876 128 248 248 NT_STATUS_OK
ReadX 13876 128 568 568 NT_STATUS_OK
ReadX 13876 3872 1536 1536 NT_STATUS_OK
ReadX 13876 3456 2560 2560 NT_STATUS_OK
ReadX 13876 3136 512 512 NT_STATUS_OK
ReadX 13876 2880 4096 4096 NT_STATUS_OK
ReadX 13876 3264 3072 3072 NT_STATUS_OK
ReadX 13876 320 4096 4096 NT_STATUS_OK
ReadX 13876 1024 4096 4096 NT_STATUS_OK
ReadX 13876 3616 4096 4096 NT_STATUS_OK
ReadX 13876 1939 64 64 NT_STATUS_OK
ReadX 13876 128 248 248 NT_STATUS_OK
ReadX 13876 128 608 608 NT_STATUS_OK
ReadX 13876 2858 1024 1024 NT_STATUS_OK
ReadX 13876 2810 4096 4096 NT_STATUS_OK
ReadX 13876 2826 4096 4096 NT_STATUS_OK
ReadX 13876 2580 2048 2048 NT_STATUS_OK
ReadX 13876 2800 2560 2560 NT_STATUS_OK
ReadX 13876 2100 4096 4096 NT_STATUS_OK
ReadX 13876 2084 4096 4096 NT_STATUS_OK
ReadX 13876 868 4096 4096 NT_STATUS_OK
ReadX 13876 2324 4096 4096 NT_STATUS_OK
ReadX 13876 884 4096 4096 NT_STATUS_OK
ReadX 13876 2604 1024 1024 NT_STATUS_OK
ReadX 13876 580 4096 4096 NT_STATUS_OK
ReadX 13876 596 4096 4096 NT_STATUS_OK
ReadX 13876 2752 4096 4096 NT_STATUS_OK
ReadX 13876 2842 1024 1024 NT_STATUS_OK
ReadX 13876 660 4096 4096 NT_STATUS_OK
ReadX 13876 2720 4096 4096 NT_STATUS_OK
ReadX 13876 2736 4096 4096 NT_STATUS_OK
ReadX 13876 628 4096 4096 NT_STATUS_OK
ReadX 13876 2704 4096 4096 NT_STATUS_OK
ReadX 13876 1556 4096 4096 NT_STATUS_OK
ReadX 13876 576 4096 4096 NT_STATUS_OK
ReadX 13876 3168 1536 1536 NT_STATUS_OK
ReadX 13876 832 4096 4096 NT_STATUS_OK
ReadX 13876 1088 4096 4096 NT_STATUS_OK
ReadX 13876 1344 4096 4096 NT_STATUS_OK
ReadX 13876 1600 4096 4096 NT_STATUS_OK
ReadX 13876 1856 4096 4096 NT_STATUS_OK
ReadX 13876 2112 4096 4096 NT_STATUS_OK
ReadX 13876 1892 4096 4096 NT_STATUS_OK
ReadX 13876 820 4096 4096 NT_STATUS_OK
ReadX 13876 788 4096 4096 NT_STATUS_OK
ReadX 13876 1604 4096 4096 NT_STATUS_OK
ReadX 13876 3648 4096 4096 NT_STATUS_OK
ReadX 13876 2608 4096 4096 NT_STATUS_OK
ReadX 13876 548 4096 4096 NT_STATUS_OK
ReadX 13876 740 4096 4096 NT_STATUS_OK
ReadX 13876 1344 4096 4096 NT_STATUS_OK
ReadX 13876 3392 4096 4096 NT_STATUS_OK
ReadX 13876 3904 4096 4096 NT_STATUS_OK
ReadX 13876 644 4096 4096 NT_STATUS_OK
ReadX 13876 676 4096 4096 NT_STATUS_OK
ReadX 13876 2688 4096 4096 NT_STATUS_OK
ReadX 13876 320 4096 4096 NT_STATUS_OK
ReadX 13876 900 4096 4096 NT_STATUS_OK
ReadX 13876 1908 4096 4096 NT_STATUS_OK
ReadX 13876 852 4096 4096 NT_STATUS_OK
ReadX 13876 724 4096 4096 NT_STATUS_OK
ReadX 13876 2292 4096 4096 NT_STATUS_OK
ReadX 13876 612 4096 4096 NT_STATUS_OK
ReadX 13876 388 4096 4096 NT_STATUS_OK
ReadX 13876 2368 4096 4096 NT_STATUS_OK
ReadX 13876 2624 4096 4096 NT_STATUS_OK
ReadX 13876 500 4096 4096 NT_STATUS_OK
ReadX 13876 356 4096 4096 NT_STATUS_OK
ReadX 13876 1024 4096 4096 NT_STATUS_OK
ReadX 13876 576 4096 4096 NT_STATUS_OK
ReadX 13876 340 4096 4096 NT_STATUS_OK
ReadX 13876 420 4096 4096 NT_STATUS_OK
ReadX 13876 1600 4096 4096 NT_STATUS_OK
ReadX 13876 404 4096 4096 NT_STATUS_OK
ReadX 13876 1428 4096 4096 NT_STATUS_OK
ReadX 13876 2656 4096 4096 NT_STATUS_OK
ReadX 13876 2624 4096 4096 NT_STATUS_OK
ReadX 13876 452 4096 4096 NT_STATUS_OK
ReadX 13876 692 4096 4096 NT_STATUS_OK
ReadX 13876 564 4096 4096 NT_STATUS_OK
ReadX 13876 372 4096 4096 NT_STATUS_OK
ReadX 13876 468 4096 4096 NT_STATUS_OK
ReadX 13876 484 4096 4096 NT_STATUS_OK
ReadX 13876 1088 4096 4096 NT_STATUS_OK
ReadX 13876 1924 4096 4096 NT_STATUS_OK
ReadX 13876 2768 4096 4096 NT_STATUS_OK
ReadX 13876 832 4096 4096 NT_STATUS_OK
ReadX 13876 836 4096 4096 NT_STATUS_OK
ReadX 13876 1856 4096 4096 NT_STATUS_OK
ReadX 13876 2640 4096 4096 NT_STATUS_OK
ReadX 13876 436 4096 4096 NT_STATUS_OK
ReadX 13876 1828 4096 4096 NT_STATUS_OK
ReadX 13876 804 4096 4096 NT_STATUS_OK
ReadX 13876 1860 4096 4096 NT_STATUS_OK
ReadX 13876 1812 4096 4096 NT_STATUS_OK
ReadX 13876 756 4096 4096 NT_STATUS_OK
ReadX 13876 1636 4096 4096 NT_STATUS_OK
ReadX 13876 772 4096 4096 NT_STATUS_OK
ReadX 13876 2036 4096 4096 NT_STATUS_OK
ReadX 13876 1220 4096 4096 NT_STATUS_OK
ReadX 13876 1652 4096 4096 NT_STATUS_OK
ReadX 13876 2588 4096 4096 NT_STATUS_OK
ReadX 13876 916 4096 4096 NT_STATUS_OK
ReadX 13876 260 4096 4096 NT_STATUS_OK
ReadX 13876 932 4096 4096 NT_STATUS_OK
ReadX 13876 2624 4096 4096 NT_STATUS_OK
ReadX 13876 308 4096 4096 NT_STATUS_OK
ReadX 13876 292 4096 4096 NT_STATUS_OK
ReadX 13876 1140 4096 4096 NT_STATUS_OK
ReadX 13876 276 4096 4096 NT_STATUS_OK
ReadX 13876 2020 4096 4096 NT_STATUS_OK
ReadX 13876 2880 4096 4096 NT_STATUS_OK
ReadX 13876 516 4096 4096 NT_STATUS_OK
ReadX 13876 1844 4096 4096 NT_STATUS_OK
ReadX 13876 1124 4096 4096 NT_STATUS_OK
ReadX 13876 3136 4096 4096 NT_STATUS_OK
ReadX 13876 324 4096 4096 NT_STATUS_OK
ReadX 13876 1156 4096 4096 NT_STATUS_OK
ReadX 13876 1172 4096 4096 NT_STATUS_OK
ReadX 13876 2112 4096 4096 NT_STATUS_OK
ReadX 13876 2368 4096 4096 NT_STATUS_OK
ReadX 13876 964 4096 4096 NT_STATUS_OK
ReadX 13876 980 4096 4096 NT_STATUS_OK
ReadX 13876 1012 4096 4096 NT_STATUS_OK
ReadX 13876 532 4096 4096 NT_STATUS_OK
ReadX 13876 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13876 1620 4096 4096 NT_STATUS_OK
ReadX 13876 1604 4096 4096 NT_STATUS_OK
ReadX 13876 2116 4096 4096 NT_STATUS_OK
ReadX 13876 2132 4096 4096 NT_STATUS_OK
ReadX 13876 2148 4096 4096 NT_STATUS_OK
ReadX 13876 2276 4096 4096 NT_STATUS_OK
ReadX 13876 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13901 NT_STATUS_OK
QUERY_FILE_INFORMATION 13856 1004 NT_STATUS_OK
Close 13856 NT_STATUS_OK
WriteX 13901 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13901 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 1004 NT_STATUS_OK
Close 13858 NT_STATUS_OK
WriteX 13901 0 65536 65536 NT_STATUS_OK
WriteX 13901 65536 64850 64850 NT_STATUS_OK
Close 13901 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13903 NT_STATUS_OK
WriteX 13903 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13903 258 NT_STATUS_OK
ReadX 13876 2068 4096 4096 NT_STATUS_OK
ReadX 13876 1588 4096 4096 NT_STATUS_OK
ReadX 13876 1572 4096 4096 NT_STATUS_OK
WriteX 13903 0 18630 18630 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13876 612 4096 4096 NT_STATUS_OK
ReadX 13876 564 4096 4096 NT_STATUS_OK
ReadX 13876 1876 4096 4096 NT_STATUS_OK
ReadX 13876 628 4096 4096 NT_STATUS_OK
ReadX 13876 740 4096 4096 NT_STATUS_OK
ReadX 13876 724 4096 4096 NT_STATUS_OK
ReadX 13876 644 4096 4096 NT_STATUS_OK
ReadX 13876 2324 4096 4096 NT_STATUS_OK
ReadX 13876 660 4096 4096 NT_STATUS_OK
ReadX 13876 852 4096 4096 NT_STATUS_OK
ReadX 13876 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13876 2368 4096 4096 NT_STATUS_OK
ReadX 13876 1024 4096 4096 NT_STATUS_OK
ReadX 13876 320 4096 4096 NT_STATUS_OK
ReadX 13876 580 4096 4096 NT_STATUS_OK
ReadX 13876 3136 512 512 NT_STATUS_OK
ReadX 13876 2880 4096 4096 NT_STATUS_OK
Close 13876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 61440 4096 4096 NT_STATUS_OK
ReadX 13908 126976 4096 4096 NT_STATUS_OK
WriteX 13908 0 65536 65536 NT_STATUS_OK
WriteX 13908 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13909 NT_STATUS_OK
ReadX 13909 61440 4096 4096 NT_STATUS_OK
ReadX 13909 126976 4096 4096 NT_STATUS_OK
ReadX 13909 192512 4096 4096 NT_STATUS_OK
ReadX 13909 258048 4096 4096 NT_STATUS_OK
WriteX 13909 0 65536 65536 NT_STATUS_OK
WriteX 13909 65536 65536 65536 NT_STATUS_OK
WriteX 13909 131072 65536 65536 NT_STATUS_OK
WriteX 13909 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 61440 4096 4096 NT_STATUS_OK
ReadX 13910 126976 4096 4096 NT_STATUS_OK
ReadX 13910 192512 4096 4096 NT_STATUS_OK
ReadX 13910 258048 4096 4096 NT_STATUS_OK
ReadX 13910 323584 4096 4096 NT_STATUS_OK
ReadX 13910 389120 4096 4096 NT_STATUS_OK
ReadX 13910 454656 4096 4096 NT_STATUS_OK
ReadX 13910 520192 4096 4096 NT_STATUS_OK
WriteX 13910 0 65536 65536 NT_STATUS_OK
WriteX 13910 65536 65536 65536 NT_STATUS_OK
WriteX 13910 131072 65536 65536 NT_STATUS_OK
WriteX 13910 196608 65536 65536 NT_STATUS_OK
WriteX 13910 262144 65536 65536 NT_STATUS_OK
WriteX 13910 327680 65536 65536 NT_STATUS_OK
WriteX 13910 393216 65536 65536 NT_STATUS_OK
WriteX 13910 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13913 NT_STATUS_OK
WriteX 13913 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13911 0 8192 8192 NT_STATUS_OK
Flush 13911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13911 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13911 0 8192 8192 NT_STATUS_OK
Flush 13911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13911 0 8192 8192 NT_STATUS_OK
Flush 13911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13911 0 8192 8192 NT_STATUS_OK
Flush 13911 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Close 13910 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13918 NT_STATUS_OK
WriteX 13918 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 258 NT_STATUS_OK
WriteX 13918 0 62591 62591 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13923 NT_STATUS_OK
WriteX 13923 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13923 258 NT_STATUS_OK
WriteX 13923 0 10845 10845 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13925 NT_STATUS_OK
Close 13925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13928 NT_STATUS_OK
WriteX 13928 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13928 258 NT_STATUS_OK
WriteX 13928 0 30118 30118 NT_STATUS_OK
Close 13928 NT_STATUS_OK
WriteX 13911 0 4096 4096 NT_STATUS_OK
WriteX 13913 0 64 64 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13930 NT_STATUS_OK
ReadX 13930 0 61440 61440 NT_STATUS_OK
ReadX 13930 61440 4096 4096 NT_STATUS_OK
ReadX 13930 65536 61440 61440 NT_STATUS_OK
ReadX 13930 126976 4096 4096 NT_STATUS_OK
ReadX 13930 131072 61440 61440 NT_STATUS_OK
ReadX 13930 192512 4096 4096 NT_STATUS_OK
ReadX 13930 196608 61440 61440 NT_STATUS_OK
ReadX 13930 258048 4096 4096 NT_STATUS_OK
ReadX 13930 262144 61440 61440 NT_STATUS_OK
ReadX 13930 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13931 NT_STATUS_OK
ReadX 13931 0 61440 61440 NT_STATUS_OK
ReadX 13931 61440 4096 4096 NT_STATUS_OK
ReadX 13931 65536 61440 61440 NT_STATUS_OK
ReadX 13931 126976 4096 4096 NT_STATUS_OK
ReadX 13931 131072 61440 61440 NT_STATUS_OK
ReadX 13931 192512 4096 4096 NT_STATUS_OK
ReadX 13931 196608 61440 61440 NT_STATUS_OK
ReadX 13931 258048 4096 4096 NT_STATUS_OK
ReadX 13931 262144 61440 61440 NT_STATUS_OK
ReadX 13931 323584 4096 4096 NT_STATUS_OK
ReadX 13931 327680 61440 61440 NT_STATUS_OK
ReadX 13931 389120 4096 4096 NT_STATUS_OK
ReadX 13931 393216 61440 61440 NT_STATUS_OK
ReadX 13931 454656 4096 4096 NT_STATUS_OK
ReadX 13931 458752 61440 61440 NT_STATUS_OK
ReadX 13931 520192 4096 4096 NT_STATUS_OK
ReadX 13931 524288 61440 61440 NT_STATUS_OK
ReadX 13931 585728 4096 4096 NT_STATUS_OK
ReadX 13931 589824 61440 61440 NT_STATUS_OK
ReadX 13931 651264 4096 4096 NT_STATUS_OK
ReadX 13931 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 61440 61440 NT_STATUS_OK
ReadX 13932 61440 4096 4096 NT_STATUS_OK
ReadX 13932 65536 61440 61440 NT_STATUS_OK
ReadX 13932 126976 4096 4096 NT_STATUS_OK
ReadX 13932 131072 61440 61440 NT_STATUS_OK
ReadX 13932 192512 4096 4096 NT_STATUS_OK
ReadX 13932 196608 61440 61440 NT_STATUS_OK
ReadX 13932 258048 4096 4096 NT_STATUS_OK
ReadX 13932 262144 61440 61440 NT_STATUS_OK
ReadX 13932 323584 4096 4096 NT_STATUS_OK
ReadX 13932 327680 61440 61440 NT_STATUS_OK
ReadX 13932 389120 4096 4096 NT_STATUS_OK
ReadX 13932 393216 61440 61440 NT_STATUS_OK
ReadX 13932 454656 4096 4096 NT_STATUS_OK
ReadX 13932 458752 61440 61440 NT_STATUS_OK
ReadX 13932 520192 4096 4096 NT_STATUS_OK
ReadX 13932 524288 61440 61440 NT_STATUS_OK
ReadX 13932 585728 4096 4096 NT_STATUS_OK
ReadX 13932 589824 61440 61440 NT_STATUS_OK
ReadX 13932 651264 4096 4096 NT_STATUS_OK
ReadX 13932 655360 61440 61440 NT_STATUS_OK
ReadX 13932 716800 4096 4096 NT_STATUS_OK
ReadX 13932 720896 61440 61440 NT_STATUS_OK
ReadX 13932 782336 4096 4096 NT_STATUS_OK
ReadX 13932 786432 61440 61440 NT_STATUS_OK
ReadX 13932 847872 4096 4096 NT_STATUS_OK
ReadX 13932 851968 61440 61440 NT_STATUS_OK
ReadX 13932 913408 4096 4096 NT_STATUS_OK
ReadX 13932 917504 61440 61440 NT_STATUS_OK
ReadX 13932 978944 4096 4096 NT_STATUS_OK
ReadX 13932 983040 61440 61440 NT_STATUS_OK
ReadX 13932 1044480 4096 4096 NT_STATUS_OK
ReadX 13932 1048576 61440 61440 NT_STATUS_OK
ReadX 13932 1110016 4096 4096 NT_STATUS_OK
ReadX 13932 1114112 61440 61440 NT_STATUS_OK
ReadX 13932 1175552 4096 4096 NT_STATUS_OK
ReadX 13932 1179648 61440 61440 NT_STATUS_OK
ReadX 13932 1241088 4096 4096 NT_STATUS_OK
ReadX 13932 1245184 61440 61440 NT_STATUS_OK
ReadX 13932 1306624 4096 4096 NT_STATUS_OK
ReadX 13932 1310720 61440 61440 NT_STATUS_OK
ReadX 13932 1372160 4096 4096 NT_STATUS_OK
ReadX 13932 1376256 61440 61440 NT_STATUS_OK
ReadX 13932 1437696 4096 4096 NT_STATUS_OK
ReadX 13932 1441792 61440 61440 NT_STATUS_OK
ReadX 13932 1503232 4096 4096 NT_STATUS_OK
ReadX 13932 1507328 61440 61440 NT_STATUS_OK
ReadX 13932 1568768 4096 4096 NT_STATUS_OK
ReadX 13932 1572864 61440 61440 NT_STATUS_OK
ReadX 13932 1634304 4096 4096 NT_STATUS_OK
ReadX 13932 1638400 61440 61440 NT_STATUS_OK
ReadX 13932 1699840 4096 4096 NT_STATUS_OK
ReadX 13932 1703936 61440 61440 NT_STATUS_OK
ReadX 13932 1765376 4096 4096 NT_STATUS_OK
ReadX 13932 1769472 61440 61440 NT_STATUS_OK
ReadX 13932 1830912 4096 4096 NT_STATUS_OK
ReadX 13932 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13930 NT_STATUS_OK
Close 13931 NT_STATUS_OK
Close 13932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 0 4096 4096 NT_STATUS_OK
ReadX 13937 4096 4096 4096 NT_STATUS_OK
ReadX 13937 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13938 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13941 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13942 NT_STATUS_OK
Close 13942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 8192 8192 NT_STATUS_OK
ReadX 13945 8192 8192 8192 NT_STATUS_OK
ReadX 13945 16384 8192 8192 NT_STATUS_OK
ReadX 13945 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13950 NT_STATUS_OK
WriteX 13950 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
WriteX 13950 0 10438 10438 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13951 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13953 NT_STATUS_OK
Close 13953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13954 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13958 NT_STATUS_OK
Close 13958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
ReadX 13959 4096 4096 4096 NT_STATUS_OK
ReadX 13959 8192 4096 4096 NT_STATUS_OK
ReadX 13959 12288 8192 8192 NT_STATUS_OK
ReadX 13959 20480 8192 8192 NT_STATUS_OK
ReadX 13959 28672 8192 8192 NT_STATUS_OK
ReadX 13959 36864 8192 8192 NT_STATUS_OK
ReadX 13959 45056 8192 8192 NT_STATUS_OK
ReadX 13959 53248 8192 8192 NT_STATUS_OK
ReadX 13959 61440 8192 8192 NT_STATUS_OK
ReadX 13959 69632 8192 8192 NT_STATUS_OK
ReadX 13959 77824 8192 8192 NT_STATUS_OK
ReadX 13959 86016 8192 8192 NT_STATUS_OK
ReadX 13959 94208 8192 8192 NT_STATUS_OK
ReadX 13959 102400 8192 8192 NT_STATUS_OK
ReadX 13959 110592 8192 8192 NT_STATUS_OK
ReadX 13959 118784 8192 8192 NT_STATUS_OK
ReadX 13959 126976 8192 8192 NT_STATUS_OK
ReadX 13959 135168 8192 8192 NT_STATUS_OK
ReadX 13959 143360 8192 8192 NT_STATUS_OK
ReadX 13959 151552 8192 8192 NT_STATUS_OK
ReadX 13959 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Close 13952 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13961 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13964 NT_STATUS_OK
WriteX 13964 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 28489 28489 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13965 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13967 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 8192 8192 NT_STATUS_OK
ReadX 13971 8192 8192 8192 NT_STATUS_OK
ReadX 13971 16384 8192 8192 NT_STATUS_OK
ReadX 13971 24576 8192 8192 NT_STATUS_OK
ReadX 13971 32768 16384 16384 NT_STATUS_OK
ReadX 13971 49152 8192 8192 NT_STATUS_OK
ReadX 13971 57344 8192 8192 NT_STATUS_OK
ReadX 13971 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13973 NT_STATUS_OK
Close 13973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13976 NT_STATUS_OK
WriteX 13976 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13976 258 NT_STATUS_OK
WriteX 13976 0 29253 29253 NT_STATUS_OK
Close 13976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13980 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13983 NT_STATUS_OK
WriteX 13983 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13983 258 NT_STATUS_OK
WriteX 13983 0 30183 30183 NT_STATUS_OK
Close 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13986 NT_STATUS_OK
WriteX 13986 0 510 510 NT_STATUS_OK
WriteX 13986 510 512 512 NT_STATUS_OK
WriteX 13986 1022 510 510 NT_STATUS_OK
WriteX 13986 1532 510 510 NT_STATUS_OK
WriteX 13986 2042 168 168 NT_STATUS_OK
Close 13986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13987 NT_STATUS_OK
Close 13987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 61440 4096 4096 NT_STATUS_OK
ReadX 13990 126976 4096 4096 NT_STATUS_OK
WriteX 13990 0 65536 65536 NT_STATUS_OK
WriteX 13990 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 61440 4096 4096 NT_STATUS_OK
ReadX 13991 126976 4096 4096 NT_STATUS_OK
ReadX 13991 192512 4096 4096 NT_STATUS_OK
ReadX 13991 258048 4096 4096 NT_STATUS_OK
WriteX 13991 0 65536 65536 NT_STATUS_OK
WriteX 13991 65536 65536 65536 NT_STATUS_OK
WriteX 13991 131072 65536 65536 NT_STATUS_OK
WriteX 13991 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 61440 4096 4096 NT_STATUS_OK
ReadX 13992 126976 4096 4096 NT_STATUS_OK
ReadX 13992 192512 4096 4096 NT_STATUS_OK
ReadX 13992 258048 4096 4096 NT_STATUS_OK
ReadX 13992 323584 4096 4096 NT_STATUS_OK
ReadX 13992 389120 4096 4096 NT_STATUS_OK
ReadX 13992 454656 4096 4096 NT_STATUS_OK
ReadX 13992 520192 4096 4096 NT_STATUS_OK
WriteX 13992 0 65536 65536 NT_STATUS_OK
WriteX 13992 65536 65536 65536 NT_STATUS_OK
WriteX 13992 131072 65536 65536 NT_STATUS_OK
WriteX 13992 196608 65536 65536 NT_STATUS_OK
WriteX 13992 262144 65536 65536 NT_STATUS_OK
WriteX 13992 327680 65536 65536 NT_STATUS_OK
WriteX 13992 393216 65536 65536 NT_STATUS_OK
WriteX 13992 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13995 NT_STATUS_OK
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 14002 NT_STATUS_OK
Close 14002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14008 NT_STATUS_OK
Close 14008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14011 NT_STATUS_OK
Close 14011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 14013 NT_STATUS_OK
Close 14013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14017 NT_STATUS_OK
Close 14017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14022 NT_STATUS_OK
Close 14022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14027 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14042 NT_STATUS_OK
Close 14042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14047 NT_STATUS_OK
Close 14047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 14052 NT_STATUS_OK
Close 14052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 14055 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14058 NT_STATUS_OK
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14061 NT_STATUS_OK
WriteX 14061 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14061 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 14061 0 65536 65536 NT_STATUS_OK
WriteX 14061 65536 65536 65536 NT_STATUS_OK
WriteX 14061 131072 65536 65536 NT_STATUS_OK
WriteX 14061 196608 65536 65536 NT_STATUS_OK
WriteX 14061 262144 26634 26634 NT_STATUS_OK
Close 14061 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14066 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14067 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
ReadX 14069 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14074 NT_STATUS_OK
Close 14074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14079 NT_STATUS_OK
Close 14079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14083 NT_STATUS_OK
Close 14083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14086 NT_STATUS_OK
Close 14086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14092 NT_STATUS_OK
Close 14092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9288 NT_STATUS_OK
Close 9288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9293 NT_STATUS_OK
Close 9293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9298 NT_STATUS_OK
Close 9298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9303 NT_STATUS_OK
Close 9303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9308 NT_STATUS_OK
Close 9308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9312 NT_STATUS_OK
Close 9312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9317 NT_STATUS_OK
Close 9317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9322 NT_STATUS_OK
Close 9322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9325 NT_STATUS_OK
Close 9325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9327 NT_STATUS_OK
Close 9327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9337 NT_STATUS_OK
Close 9337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9339 NT_STATUS_OK
ReadX 9339 0 4096 4096 NT_STATUS_OK
Close 9339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9340 NT_STATUS_OK
ReadX 9340 0 4096 4096 NT_STATUS_OK
Close 9340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9341 NT_STATUS_OK
ReadX 9341 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9351 NT_STATUS_OK
Close 9351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9353 NT_STATUS_OK
ReadX 9353 0 4096 4096 NT_STATUS_OK
Close 9353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9354 NT_STATUS_OK
ReadX 9354 0 4096 4096 NT_STATUS_OK
Close 9354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9355 NT_STATUS_OK
ReadX 9355 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9341 NT_STATUS_OK
Close 9355 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9384 0 4096 4096 NT_STATUS_OK
Close 9384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9385 NT_STATUS_OK
ReadX 9385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9386 NT_STATUS_OK
ReadX 9386 0 4096 4096 NT_STATUS_OK
ReadX 9386 4096 4096 4096 NT_STATUS_OK
ReadX 9386 8192 4096 4096 NT_STATUS_OK
ReadX 9386 12288 4096 4096 NT_STATUS_OK
ReadX 9386 16384 4096 4096 NT_STATUS_OK
ReadX 9386 20480 4096 4096 NT_STATUS_OK
ReadX 9386 24576 4096 4096 NT_STATUS_OK
ReadX 9386 28672 4096 4096 NT_STATUS_OK
ReadX 9386 32768 4096 4096 NT_STATUS_OK
ReadX 9386 36864 4096 4096 NT_STATUS_OK
ReadX 9386 40960 4096 4096 NT_STATUS_OK
ReadX 9386 45056 4096 4096 NT_STATUS_OK
ReadX 9386 49152 4096 4096 NT_STATUS_OK
ReadX 9386 53248 4096 4096 NT_STATUS_OK
ReadX 9386 57344 4096 4096 NT_STATUS_OK
ReadX 9386 61440 4096 4096 NT_STATUS_OK
ReadX 9386 65536 4096 4096 NT_STATUS_OK
ReadX 9386 69632 4096 4096 NT_STATUS_OK
ReadX 9386 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9386 1004 NT_STATUS_OK
WriteX 9386 0 4096 4096 NT_STATUS_OK
Close 9386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9387 NT_STATUS_OK
SET_FILE_INFORMATION 9387 1004 NT_STATUS_OK
Close 9387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9388 NT_STATUS_OK
ReadX 9388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9389 NT_STATUS_OK
Close 9389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9392 NT_STATUS_OK
WriteX 9392 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9392 258 NT_STATUS_OK
WriteX 9392 0 65536 65536 NT_STATUS_OK
WriteX 9392 65536 19979 19979 NT_STATUS_OK
Close 9392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9393 NT_STATUS_OK
ReadX 9393 0 4096 4096 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
QUERY_FILE_INFORMATION 9393 1004 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
SET_FILE_INFORMATION 9393 1004 NT_STATUS_OK
WriteX 9393 0 4096 4096 NT_STATUS_OK
Flush 9393 NT_STATUS_OK
Close 9393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9394 NT_STATUS_OK
ReadX 9394 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9395 NT_STATUS_OK
ReadX 9395 0 4096 4096 NT_STATUS_OK
Close 9394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9396 NT_STATUS_OK
ReadX 9396 0 4096 4096 NT_STATUS_OK
Close 9396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9397 NT_STATUS_OK
ReadX 9397 0 4096 4096 NT_STATUS_OK
Close 9397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9398 NT_STATUS_OK
ReadX 9398 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9398 1004 NT_STATUS_OK
WriteX 9398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9399 NT_STATUS_OK
Close 9399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9395 NT_STATUS_OK
Close 9398 NT_STATUS_OK
Close 9388 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9401 NT_STATUS_OK
Close 9401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9404 NT_STATUS_OK
WriteX 9404 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9404 258 NT_STATUS_OK
WriteX 9404 0 65536 65536 NT_STATUS_OK
WriteX 9404 65536 17654 17654 NT_STATUS_OK
Close 9404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9405 NT_STATUS_OK
ReadX 9405 0 4096 4096 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
Flush 9405 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
Flush 9405 NT_STATUS_OK
QUERY_FILE_INFORMATION 9405 1004 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
Flush 9405 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
Flush 9405 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
Flush 9405 NT_STATUS_OK
SET_FILE_INFORMATION 9405 1004 NT_STATUS_OK
WriteX 9405 0 4096 4096 NT_STATUS_OK
Flush 9405 NT_STATUS_OK
Close 9405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9406 NT_STATUS_OK
SET_FILE_INFORMATION 9406 1004 NT_STATUS_OK
Close 9406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9407 NT_STATUS_OK
ReadX 9407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9408 NT_STATUS_OK
Close 9408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9410 NT_STATUS_OK
ReadX 9410 0 4096 4096 NT_STATUS_OK
ReadX 9410 4096 4096 4096 NT_STATUS_OK
ReadX 9410 8192 4096 4096 NT_STATUS_OK
ReadX 9410 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9410 16384 4096 4096 NT_STATUS_OK
ReadX 9410 20480 4096 4096 NT_STATUS_OK
ReadX 9410 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9411 NT_STATUS_OK
ReadX 9411 0 4096 4096 NT_STATUS_OK
Close 9411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9412 NT_STATUS_OK
ReadX 9412 0 4096 4096 NT_STATUS_OK
Close 9412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9413 NT_STATUS_OK
ReadX 9413 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9413 1004 NT_STATUS_OK
WriteX 9413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9414 NT_STATUS_OK
Close 9414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9413 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9416 NT_STATUS_OK
Close 9416 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9419 NT_STATUS_OK
WriteX 9419 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9419 258 NT_STATUS_OK
WriteX 9419 0 65536 65536 NT_STATUS_OK
WriteX 9419 65536 19490 19490 NT_STATUS_OK
Close 9419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9420 NT_STATUS_OK
ReadX 9420 0 4096 4096 NT_STATUS_OK
WriteX 9420 0 4096 4096 NT_STATUS_OK
Flush 9420 NT_STATUS_OK
WriteX 9420 0 4096 4096 NT_STATUS_OK
Flush 9420 NT_STATUS_OK
QUERY_FILE_INFORMATION 9420 1004 NT_STATUS_OK
WriteX 9420 0 4096 4096 NT_STATUS_OK
Flush 9420 NT_STATUS_OK
WriteX 9420 0 4096 4096 NT_STATUS_OK
Flush 9420 NT_STATUS_OK
WriteX 9420 0 4096 4096 NT_STATUS_OK
Flush 9420 NT_STATUS_OK
SET_FILE_INFORMATION 9420 1004 NT_STATUS_OK
WriteX 9420 0 4096 4096 NT_STATUS_OK
Flush 9420 NT_STATUS_OK
Close 9420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9421 NT_STATUS_OK
SET_FILE_INFORMATION 9421 1004 NT_STATUS_OK
Close 9421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9422 NT_STATUS_OK
ReadX 9422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9423 NT_STATUS_OK
Close 9423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9425 0 4096 4096 NT_STATUS_OK
Close 9425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9426 NT_STATUS_OK
ReadX 9426 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9427 NT_STATUS_OK
ReadX 9427 0 4096 4096 NT_STATUS_OK
ReadX 9427 4096 4096 4096 NT_STATUS_OK
ReadX 9427 8192 4096 4096 NT_STATUS_OK
ReadX 9427 12288 4096 4096 NT_STATUS_OK
ReadX 9427 16384 4096 4096 NT_STATUS_OK
ReadX 9427 20480 4096 4096 NT_STATUS_OK
ReadX 9427 24576 4096 4096 NT_STATUS_OK
ReadX 9427 28672 4096 4096 NT_STATUS_OK
ReadX 9427 32768 4096 4096 NT_STATUS_OK
ReadX 9427 36864 4096 4096 NT_STATUS_OK
ReadX 9427 40960 4096 4096 NT_STATUS_OK
ReadX 9427 45056 4096 4096 NT_STATUS_OK
ReadX 9427 49152 4096 4096 NT_STATUS_OK
ReadX 9427 53248 4096 4096 NT_STATUS_OK
ReadX 9427 57344 4096 4096 NT_STATUS_OK
ReadX 9427 61440 4096 4096 NT_STATUS_OK
ReadX 9427 65536 4096 4096 NT_STATUS_OK
ReadX 9427 69632 4096 4096 NT_STATUS_OK
ReadX 9427 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9427 1004 NT_STATUS_OK
WriteX 9427 0 4096 4096 NT_STATUS_OK
Close 9427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9428 NT_STATUS_OK
SET_FILE_INFORMATION 9428 1004 NT_STATUS_OK
Close 9428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9429 NT_STATUS_OK
ReadX 9429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9430 NT_STATUS_OK
Close 9430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9422 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9433 NT_STATUS_OK
WriteX 9433 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9433 258 NT_STATUS_OK
WriteX 9433 0 65536 65536 NT_STATUS_OK
WriteX 9433 65536 8866 8866 NT_STATUS_OK
Close 9433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9434 NT_STATUS_OK
ReadX 9434 0 4096 4096 NT_STATUS_OK
WriteX 9434 0 4096 4096 NT_STATUS_OK
Flush 9434 NT_STATUS_OK
SET_FILE_INFORMATION 9434 1004 NT_STATUS_OK
WriteX 9434 0 4096 4096 NT_STATUS_OK
Flush 9434 NT_STATUS_OK
Close 9434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9435 NT_STATUS_OK
ReadX 9435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9436 NT_STATUS_OK
ReadX 9436 0 4096 4096 NT_STATUS_OK
Close 9436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9437 NT_STATUS_OK
ReadX 9437 0 4096 4096 NT_STATUS_OK
Close 9437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9438 NT_STATUS_OK
ReadX 9438 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9438 1004 NT_STATUS_OK
WriteX 9438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9439 NT_STATUS_OK
Close 9439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9438 NT_STATUS_OK
Close 9429 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9441 NT_STATUS_OK
Close 9441 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9444 NT_STATUS_OK
WriteX 9444 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9444 258 NT_STATUS_OK
WriteX 9444 0 65536 65536 NT_STATUS_OK
WriteX 9444 65536 9298 9298 NT_STATUS_OK
Close 9444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9445 NT_STATUS_OK
ReadX 9445 0 4096 4096 NT_STATUS_OK
WriteX 9445 0 4096 4096 NT_STATUS_OK
Flush 9445 NT_STATUS_OK
SET_FILE_INFORMATION 9445 1004 NT_STATUS_OK
WriteX 9445 0 4096 4096 NT_STATUS_OK
Flush 9445 NT_STATUS_OK
Close 9445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9446 NT_STATUS_OK
SET_FILE_INFORMATION 9446 1004 NT_STATUS_OK
Close 9446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9447 NT_STATUS_OK
ReadX 9447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9448 NT_STATUS_OK
Close 9448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9451 0 4096 4096 NT_STATUS_OK
Close 9451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9452 NT_STATUS_OK
ReadX 9452 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9452 4096 4096 4096 NT_STATUS_OK
ReadX 9452 8192 4096 4096 NT_STATUS_OK
ReadX 9452 12288 4096 4096 NT_STATUS_OK
ReadX 9452 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9453 NT_STATUS_OK
ReadX 9453 0 4096 4096 NT_STATUS_OK
Close 9453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9454 NT_STATUS_OK
ReadX 9454 0 4096 4096 NT_STATUS_OK
Close 9454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9455 NT_STATUS_OK
ReadX 9455 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9455 1004 NT_STATUS_OK
WriteX 9455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9456 NT_STATUS_OK
Close 9456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9452 NT_STATUS_OK
Close 9455 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9458 NT_STATUS_OK
Close 9458 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9461 NT_STATUS_OK
WriteX 9461 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9461 258 NT_STATUS_OK
WriteX 9461 0 65536 65536 NT_STATUS_OK
WriteX 9461 65536 11540 11540 NT_STATUS_OK
Close 9461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9462 NT_STATUS_OK
ReadX 9462 0 4096 4096 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
SET_FILE_INFORMATION 9462 1004 NT_STATUS_OK
WriteX 9462 0 4096 4096 NT_STATUS_OK
Flush 9462 NT_STATUS_OK
Close 9462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9463 NT_STATUS_OK
SET_FILE_INFORMATION 9463 1004 NT_STATUS_OK
Close 9463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9464 NT_STATUS_OK
ReadX 9464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 9465 NT_STATUS_OK
Close 9465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9467 NT_STATUS_OK
ReadX 9467 61440 4096 4096 NT_STATUS_OK
ReadX 9467 126976 4096 4096 NT_STATUS_OK
WriteX 9467 0 65536 65536 NT_STATUS_OK
WriteX 9467 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9468 NT_STATUS_OK
ReadX 9468 61440 4096 4096 NT_STATUS_OK
ReadX 9468 126976 4096 4096 NT_STATUS_OK
ReadX 9468 192512 4096 4096 NT_STATUS_OK
ReadX 9468 258048 4096 4096 NT_STATUS_OK
WriteX 9468 0 65536 65536 NT_STATUS_OK
WriteX 9468 65536 65536 65536 NT_STATUS_OK
WriteX 9468 131072 65536 65536 NT_STATUS_OK
WriteX 9468 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9469 NT_STATUS_OK
ReadX 9469 61440 4096 4096 NT_STATUS_OK
ReadX 9469 126976 4096 4096 NT_STATUS_OK
ReadX 9469 192512 4096 4096 NT_STATUS_OK
ReadX 9469 258048 4096 4096 NT_STATUS_OK
ReadX 9469 323584 4096 4096 NT_STATUS_OK
ReadX 9469 389120 4096 4096 NT_STATUS_OK
ReadX 9469 454656 4096 4096 NT_STATUS_OK
ReadX 9469 520192 4096 4096 NT_STATUS_OK
WriteX 9469 0 65536 65536 NT_STATUS_OK
WriteX 9469 65536 65536 65536 NT_STATUS_OK
WriteX 9469 131072 65536 65536 NT_STATUS_OK
WriteX 9469 196608 65536 65536 NT_STATUS_OK
WriteX 9469 262144 65536 65536 NT_STATUS_OK
WriteX 9469 327680 65536 65536 NT_STATUS_OK
WriteX 9469 393216 65536 65536 NT_STATUS_OK
WriteX 9469 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9470 NT_STATUS_OK
ReadX 9470 0 4096 4096 NT_STATUS_OK
ReadX 9470 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9471 NT_STATUS_OK
WriteX 9471 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9471 258 NT_STATUS_OK
WriteX 9471 0 53 53 NT_STATUS_OK
Close 9471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9472 NT_STATUS_OK
Close 9472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9464 NT_STATUS_OK
Close 9410 NT_STATUS_OK
Close 9467 NT_STATUS_OK
Close 9468 NT_STATUS_OK
Close 9469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9470 8192 4096 4096 NT_STATUS_OK
ReadX 9470 12288 4096 4096 NT_STATUS_OK
WriteX 9474 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9474 258 NT_STATUS_OK
ReadX 9470 16384 4096 4096 NT_STATUS_OK
ReadX 9470 20480 4096 4096 NT_STATUS_OK
WriteX 9474 0 15360 15360 NT_STATUS_OK
Close 9474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9475 NT_STATUS_OK
ReadX 9475 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9475 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9475 1004 NT_STATUS_OK
WriteX 9475 0 4096 4096 NT_STATUS_OK
Close 9475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9476 NT_STATUS_OK
Close 9476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9478 NT_STATUS_OK
ReadX 9478 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9479 NT_STATUS_OK
Close 9479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9478 4096 4096 4096 NT_STATUS_OK
ReadX 9478 8192 4096 4096 NT_STATUS_OK
ReadX 9478 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9481 NT_STATUS_OK
ReadX 9481 0 4096 4096 NT_STATUS_OK
ReadX 9481 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9482 NT_STATUS_OK
ReadX 9482 0 4096 4096 NT_STATUS_OK
ReadX 9482 4096 4096 4096 NT_STATUS_OK
ReadX 9482 8192 4096 4096 NT_STATUS_OK
Close 9481 NT_STATUS_OK
Close 9482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9483 NT_STATUS_OK
WriteX 9483 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9483 258 NT_STATUS_OK
WriteX 9483 0 15360 15360 NT_STATUS_OK
Close 9483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9484 NT_STATUS_OK
ReadX 9484 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9484 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9485 NT_STATUS_OK
Close 9485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9487 NT_STATUS_OK
ReadX 9487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9488 NT_STATUS_OK
SET_FILE_INFORMATION 9488 1004 NT_STATUS_OK
Close 9488 NT_STATUS_OK
WriteX 9484 0 4096 4096 NT_STATUS_OK
Close 9484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9489 NT_STATUS_OK
Close 9489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9491 NT_STATUS_OK
ReadX 9491 0 4096 4096 NT_STATUS_OK
ReadX 9491 4096 4096 4096 NT_STATUS_OK
ReadX 9491 8192 4096 4096 NT_STATUS_OK
ReadX 9491 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9491 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9491 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9492 NT_STATUS_OK
ReadX 9492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9493 NT_STATUS_OK
WriteX 9493 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9493 258 NT_STATUS_OK
WriteX 9493 0 53 53 NT_STATUS_OK
Close 9493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9494 NT_STATUS_OK
Close 9494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9492 4096 4096 4096 NT_STATUS_OK
ReadX 9492 8192 4096 4096 NT_STATUS_OK
ReadX 9492 12288 4096 4096 NT_STATUS_OK
WriteX 9496 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9496 258 NT_STATUS_OK
WriteX 9496 0 12006 12006 NT_STATUS_OK
Close 9496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9497 NT_STATUS_OK
ReadX 9497 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9497 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9497 1004 NT_STATUS_OK
WriteX 9497 0 4096 4096 NT_STATUS_OK
Close 9497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9498 NT_STATUS_OK
Close 9498 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9500 NT_STATUS_OK
ReadX 9500 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9501 NT_STATUS_OK
Close 9501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9500 4096 4096 4096 NT_STATUS_OK
ReadX 9500 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9503 NT_STATUS_OK
WriteX 9503 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9503 258 NT_STATUS_OK
WriteX 9503 0 11991 11991 NT_STATUS_OK
Close 9503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9504 NT_STATUS_OK
ReadX 9504 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9504 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9504 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9505 NT_STATUS_OK
Close 9505 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9507 NT_STATUS_OK
ReadX 9507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9508 NT_STATUS_OK
SET_FILE_INFORMATION 9508 1004 NT_STATUS_OK
Close 9508 NT_STATUS_OK
WriteX 9504 0 4096 4096 NT_STATUS_OK
Close 9504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9509 NT_STATUS_OK
Close 9509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9511 NT_STATUS_OK
ReadX 9511 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9512 NT_STATUS_OK
Close 9512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9511 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9511 1004 NT_STATUS_OK
ReadX 9511 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9511 1004 NT_STATUS_OK
WriteX 9511 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9511 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9511 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9511 1004 NT_STATUS_OK
Close 9487 NT_STATUS_OK
WriteX 9491 0 19054 19054 NT_STATUS_OK
WriteX 9511 0 12288 12288 NT_STATUS_OK
Close 9507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9514 NT_STATUS_OK
Close 9514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9491 NT_STATUS_OK
Close 9511 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9516 NT_STATUS_OK
Close 9516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9518 NT_STATUS_OK
ReadX 9518 0 61440 61440 NT_STATUS_OK
ReadX 9518 61440 4096 4096 NT_STATUS_OK
ReadX 9518 65536 61440 61440 NT_STATUS_OK
ReadX 9518 126976 4096 4096 NT_STATUS_OK
ReadX 9518 131072 61440 61440 NT_STATUS_OK
ReadX 9518 192512 4096 4096 NT_STATUS_OK
ReadX 9518 196608 61440 61440 NT_STATUS_OK
ReadX 9518 258048 4096 4096 NT_STATUS_OK
ReadX 9518 262144 61440 61440 NT_STATUS_OK
ReadX 9518 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9519 NT_STATUS_OK
ReadX 9519 0 61440 61440 NT_STATUS_OK
ReadX 9519 61440 4096 4096 NT_STATUS_OK
ReadX 9519 65536 61440 61440 NT_STATUS_OK
ReadX 9519 126976 4096 4096 NT_STATUS_OK
ReadX 9519 131072 61440 61440 NT_STATUS_OK
ReadX 9519 192512 4096 4096 NT_STATUS_OK
ReadX 9519 196608 61440 61440 NT_STATUS_OK
ReadX 9519 258048 4096 4096 NT_STATUS_OK
ReadX 9519 262144 61440 61440 NT_STATUS_OK
ReadX 9519 323584 4096 4096 NT_STATUS_OK
ReadX 9519 327680 61440 61440 NT_STATUS_OK
ReadX 9519 389120 4096 4096 NT_STATUS_OK
ReadX 9519 393216 61440 61440 NT_STATUS_OK
ReadX 9519 454656 4096 4096 NT_STATUS_OK
ReadX 9519 458752 61440 61440 NT_STATUS_OK
ReadX 9519 520192 4096 4096 NT_STATUS_OK
ReadX 9519 524288 61440 61440 NT_STATUS_OK
ReadX 9519 585728 4096 4096 NT_STATUS_OK
ReadX 9519 589824 61440 61440 NT_STATUS_OK
ReadX 9519 651264 4096 4096 NT_STATUS_OK
ReadX 9519 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9520 NT_STATUS_OK
ReadX 9520 0 61440 61440 NT_STATUS_OK
ReadX 9520 61440 4096 4096 NT_STATUS_OK
ReadX 9520 65536 61440 61440 NT_STATUS_OK
ReadX 9520 126976 4096 4096 NT_STATUS_OK
ReadX 9520 131072 61440 61440 NT_STATUS_OK
ReadX 9520 192512 4096 4096 NT_STATUS_OK
ReadX 9520 196608 61440 61440 NT_STATUS_OK
ReadX 9520 258048 4096 4096 NT_STATUS_OK
ReadX 9520 262144 61440 61440 NT_STATUS_OK
ReadX 9520 323584 4096 4096 NT_STATUS_OK
ReadX 9520 327680 61440 61440 NT_STATUS_OK
ReadX 9520 389120 4096 4096 NT_STATUS_OK
ReadX 9520 393216 61440 61440 NT_STATUS_OK
ReadX 9520 454656 4096 4096 NT_STATUS_OK
ReadX 9520 458752 61440 61440 NT_STATUS_OK
ReadX 9520 520192 4096 4096 NT_STATUS_OK
ReadX 9520 524288 61440 61440 NT_STATUS_OK
ReadX 9520 585728 4096 4096 NT_STATUS_OK
ReadX 9520 589824 61440 61440 NT_STATUS_OK
ReadX 9520 651264 4096 4096 NT_STATUS_OK
ReadX 9520 655360 61440 61440 NT_STATUS_OK
ReadX 9520 716800 4096 4096 NT_STATUS_OK
ReadX 9520 720896 61440 61440 NT_STATUS_OK
ReadX 9520 782336 4096 4096 NT_STATUS_OK
ReadX 9520 786432 61440 61440 NT_STATUS_OK
ReadX 9520 847872 4096 4096 NT_STATUS_OK
ReadX 9520 851968 61440 61440 NT_STATUS_OK
ReadX 9520 913408 4096 4096 NT_STATUS_OK
ReadX 9520 917504 61440 61440 NT_STATUS_OK
ReadX 9520 978944 4096 4096 NT_STATUS_OK
ReadX 9520 983040 61440 61440 NT_STATUS_OK
ReadX 9520 1044480 4096 4096 NT_STATUS_OK
ReadX 9520 1048576 61440 61440 NT_STATUS_OK
ReadX 9520 1110016 4096 4096 NT_STATUS_OK
ReadX 9520 1114112 61440 61440 NT_STATUS_OK
ReadX 9520 1175552 4096 4096 NT_STATUS_OK
ReadX 9520 1179648 61440 61440 NT_STATUS_OK
ReadX 9520 1241088 4096 4096 NT_STATUS_OK
ReadX 9520 1245184 61440 61440 NT_STATUS_OK
ReadX 9520 1306624 4096 4096 NT_STATUS_OK
ReadX 9520 1310720 61440 61440 NT_STATUS_OK
ReadX 9520 1372160 4096 4096 NT_STATUS_OK
ReadX 9520 1376256 61440 61440 NT_STATUS_OK
ReadX 9520 1437696 4096 4096 NT_STATUS_OK
ReadX 9520 1441792 61440 61440 NT_STATUS_OK
ReadX 9520 1503232 4096 4096 NT_STATUS_OK
ReadX 9520 1507328 61440 61440 NT_STATUS_OK
ReadX 9520 1568768 4096 4096 NT_STATUS_OK
ReadX 9520 1572864 61440 61440 NT_STATUS_OK
ReadX 9520 1634304 4096 4096 NT_STATUS_OK
ReadX 9520 1638400 61440 61440 NT_STATUS_OK
ReadX 9520 1699840 4096 4096 NT_STATUS_OK
ReadX 9520 1703936 61440 61440 NT_STATUS_OK
ReadX 9520 1765376 4096 4096 NT_STATUS_OK
ReadX 9520 1769472 61440 61440 NT_STATUS_OK
ReadX 9520 1830912 4096 4096 NT_STATUS_OK
ReadX 9520 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9521 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9523 NT_STATUS_OK
ReadX 9523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9524 NT_STATUS_OK
ReadX 9524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9525 NT_STATUS_OK
ReadX 9525 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9527 NT_STATUS_OK
QUERY_FILE_INFORMATION 9527 1004 NT_STATUS_OK
WriteX 9527 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9527 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9528 NT_STATUS_OK
Close 9528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9529 NT_STATUS_OK
WriteX 9529 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9529 258 NT_STATUS_OK
WriteX 9529 0 491 491 NT_STATUS_OK
Close 9529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9530 NT_STATUS_OK
ReadX 9530 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9527 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9532 NT_STATUS_OK
Close 9532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9533 NT_STATUS_OK
WriteX 9533 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9533 258 NT_STATUS_OK
WriteX 9533 0 543 543 NT_STATUS_OK
Close 9533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9534 NT_STATUS_OK
ReadX 9534 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9518 NT_STATUS_OK
Close 9519 NT_STATUS_OK
Close 9520 NT_STATUS_OK
Close 9534 NT_STATUS_OK
Close 9522 NT_STATUS_OK
Close 9523 NT_STATUS_OK
Close 9524 NT_STATUS_OK
Close 9525 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9538 NT_STATUS_OK
ReadX 9538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9539 NT_STATUS_OK
ReadX 9539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9540 NT_STATUS_OK
ReadX 9540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9541 NT_STATUS_OK
ReadX 9541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9542 NT_STATUS_OK
ReadX 9542 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9547 NT_STATUS_OK
QUERY_FILE_INFORMATION 9547 1004 NT_STATUS_OK
WriteX 9547 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9547 258 NT_STATUS_OK
WriteX 9547 0 2048 2048 NT_STATUS_OK
Close 9547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9548 NT_STATUS_OK
ReadX 9548 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9548 0 4096 4096 NT_STATUS_OK
Flush 9548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9548 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9552 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9553 NT_STATUS_OK
WriteX 9553 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9553 258 NT_STATUS_OK
WriteX 9553 0 2048 2048 NT_STATUS_OK
Close 9553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9554 NT_STATUS_OK
ReadX 9554 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9558 NT_STATUS_OK
Close 9558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9559 NT_STATUS_OK
WriteX 9559 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9559 258 NT_STATUS_OK
WriteX 9559 0 2048 2048 NT_STATUS_OK
Close 9559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9560 NT_STATUS_OK
ReadX 9560 0 2048 2048 NT_STATUS_OK
ReadX 9538 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9542 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9554 0 4096 4096 NT_STATUS_OK
WriteX 9538 0 8192 8192 NT_STATUS_OK
WriteX 9539 0 4096 4096 NT_STATUS_OK
WriteX 9540 0 4096 4096 NT_STATUS_OK
ReadX 9554 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9563 NT_STATUS_OK
ReadX 9563 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9564 NT_STATUS_OK
QUERY_FILE_INFORMATION 9564 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9563 NT_STATUS_OK
Close 9539 NT_STATUS_OK
Close 9540 NT_STATUS_OK
Close 9541 NT_STATUS_OK
Close 9554 NT_STATUS_OK
Close 9538 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9567 NT_STATUS_OK
ReadX 9567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9568 NT_STATUS_OK
ReadX 9568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9569 NT_STATUS_OK
ReadX 9569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9570 NT_STATUS_OK
ReadX 9570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9571 NT_STATUS_OK
ReadX 9571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9572 NT_STATUS_OK
ReadX 9572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9573 NT_STATUS_OK
ReadX 9573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9574 NT_STATUS_OK
ReadX 9574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9575 NT_STATUS_OK
ReadX 9575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9576 NT_STATUS_OK
ReadX 9576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9577 NT_STATUS_OK
ReadX 9577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9578 NT_STATUS_OK
ReadX 9578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9579 NT_STATUS_OK
ReadX 9579 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9584 NT_STATUS_OK
QUERY_FILE_INFORMATION 9584 1004 NT_STATUS_OK
WriteX 9584 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9584 258 NT_STATUS_OK
WriteX 9584 0 2048 2048 NT_STATUS_OK
Close 9584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9585 NT_STATUS_OK
ReadX 9585 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9587 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9587 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9591 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9592 NT_STATUS_OK
QUERY_FILE_INFORMATION 9592 1004 NT_STATUS_OK
WriteX 9592 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9592 258 NT_STATUS_OK
WriteX 9592 0 2048 2048 NT_STATUS_OK
Close 9592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9593 NT_STATUS_OK
ReadX 9593 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9585 0 4096 4096 NT_STATUS_OK
Flush 9585 NT_STATUS_OK
WriteX 9593 0 4096 4096 NT_STATUS_OK
Flush 9593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9585 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9587 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9595 NT_STATUS_OK
WriteX 9595 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9595 258 NT_STATUS_OK
WriteX 9595 0 4096 4096 NT_STATUS_OK
Close 9595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9596 NT_STATUS_OK
ReadX 9596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9597 NT_STATUS_OK
Close 9597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9598 NT_STATUS_OK
WriteX 9598 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9598 258 NT_STATUS_OK
WriteX 9598 0 4096 4096 NT_STATUS_OK
Close 9598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9599 NT_STATUS_OK
ReadX 9599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9599 0 4096 4096 NT_STATUS_OK
Close 9596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9579 NT_STATUS_OK
Close 9573 NT_STATUS_OK
Close 9587 NT_STATUS_OK
Close 9576 NT_STATUS_OK
Close 9577 NT_STATUS_OK
Close 9578 NT_STATUS_OK
Close 9574 NT_STATUS_OK
Close 9567 NT_STATUS_OK
Close 9568 NT_STATUS_OK
Close 9571 NT_STATUS_OK
Close 9572 NT_STATUS_OK
Close 9569 NT_STATUS_OK
Close 9570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9602 NT_STATUS_OK
Close 9602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9604 NT_STATUS_OK
ReadX 9604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9605 NT_STATUS_OK
Close 9605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9606 NT_STATUS_OK
WriteX 9606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9606 258 NT_STATUS_OK
WriteX 9606 0 2048 2048 NT_STATUS_OK
Close 9606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9607 NT_STATUS_OK
ReadX 9607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9609 NT_STATUS_OK
ReadX 9609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9610 NT_STATUS_OK
ReadX 9610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9611 NT_STATUS_OK
ReadX 9611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9612 NT_STATUS_OK
ReadX 9612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9613 NT_STATUS_OK
ReadX 9613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9614 NT_STATUS_OK
ReadX 9614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9615 NT_STATUS_OK
ReadX 9615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9616 NT_STATUS_OK
ReadX 9616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9617 NT_STATUS_OK
ReadX 9617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9618 NT_STATUS_OK
ReadX 9618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9619 NT_STATUS_OK
ReadX 9619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9620 NT_STATUS_OK
ReadX 9620 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9621 NT_STATUS_OK
QUERY_FILE_INFORMATION 9621 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9604 NT_STATUS_OK
Close 9607 NT_STATUS_OK
Close 9619 NT_STATUS_OK
Close 9614 NT_STATUS_OK
Close 9615 NT_STATUS_OK
Close 9616 NT_STATUS_OK
Close 9617 NT_STATUS_OK
Close 9618 NT_STATUS_OK
Close 9620 NT_STATUS_OK
Close 9608 NT_STATUS_OK
Close 9609 NT_STATUS_OK
Close 9612 NT_STATUS_OK
Close 9613 NT_STATUS_OK
Close 9610 NT_STATUS_OK
Close 9611 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9623 NT_STATUS_OK
QUERY_FILE_INFORMATION 9623 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9626 NT_STATUS_OK
ReadX 9626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9627 NT_STATUS_OK
ReadX 9627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9628 NT_STATUS_OK
ReadX 9628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9629 NT_STATUS_OK
ReadX 9629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9630 NT_STATUS_OK
ReadX 9630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9631 NT_STATUS_OK
ReadX 9631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9632 NT_STATUS_OK
ReadX 9632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9633 NT_STATUS_OK
ReadX 9633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9634 NT_STATUS_OK
ReadX 9634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9635 NT_STATUS_OK
ReadX 9635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9636 NT_STATUS_OK
ReadX 9636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9637 NT_STATUS_OK
ReadX 9637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9638 NT_STATUS_OK
ReadX 9638 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9643 NT_STATUS_OK
QUERY_FILE_INFORMATION 9643 1004 NT_STATUS_OK
WriteX 9643 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9643 258 NT_STATUS_OK
WriteX 9643 0 2048 2048 NT_STATUS_OK
Close 9643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9644 NT_STATUS_OK
ReadX 9644 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9647 NT_STATUS_OK
ReadX 9647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9648 NT_STATUS_OK
ReadX 9648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9649 NT_STATUS_OK
ReadX 9649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9650 NT_STATUS_OK
ReadX 9650 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 9654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9655 NT_STATUS_OK
QUERY_FILE_INFORMATION 9655 1004 NT_STATUS_OK
WriteX 9655 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9655 258 NT_STATUS_OK
WriteX 9655 0 2048 2048 NT_STATUS_OK
Close 9655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9656 NT_STATUS_OK
ReadX 9656 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9658 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9658 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9663 NT_STATUS_OK
QUERY_FILE_INFORMATION 9663 1004 NT_STATUS_OK
WriteX 9663 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9663 258 NT_STATUS_OK
WriteX 9663 0 2048 2048 NT_STATUS_OK
Close 9663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9664 NT_STATUS_OK
ReadX 9664 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9644 0 4096 4096 NT_STATUS_OK
Flush 9644 NT_STATUS_OK
WriteX 9656 0 4096 4096 NT_STATUS_OK
Flush 9656 NT_STATUS_OK
WriteX 9664 0 4096 4096 NT_STATUS_OK
Flush 9664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9644 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 9656 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9664 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9646 4096 16384 16384 NT_STATUS_OK
ReadX 9626 4096 16384 16384 NT_STATUS_OK
ReadX 9658 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9666 NT_STATUS_OK
ReadX 9666 0 2048 2048 NT_STATUS_OK
WriteX 9666 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9667 NT_STATUS_OK
QUERY_FILE_INFORMATION 9667 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9666 NT_STATUS_OK
Close 9650 NT_STATUS_OK
Close 9638 NT_STATUS_OK
Close 9630 NT_STATUS_OK
Close 9646 NT_STATUS_OK
Close 9647 NT_STATUS_OK
Close 9648 NT_STATUS_OK
Close 9649 NT_STATUS_OK
Close 9637 NT_STATUS_OK
Close 9658 NT_STATUS_OK
Close 9632 NT_STATUS_OK
Close 9635 NT_STATUS_OK
Close 9636 NT_STATUS_OK
Close 9633 NT_STATUS_OK
Close 9634 NT_STATUS_OK
Close 9626 NT_STATUS_OK
Close 9627 NT_STATUS_OK
Close 9628 NT_STATUS_OK
Close 9629 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9669 NT_STATUS_OK
QUERY_FILE_INFORMATION 9669 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9671 NT_STATUS_OK
QUERY_FILE_INFORMATION 9671 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9674 NT_STATUS_OK
ReadX 9674 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9675 NT_STATUS_OK
ReadX 9675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9676 NT_STATUS_OK
ReadX 9676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9677 NT_STATUS_OK
ReadX 9677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9678 NT_STATUS_OK
ReadX 9678 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9674 4096 16384 16384 NT_STATUS_OK
WriteX 9674 0 4096 4096 NT_STATUS_OK
WriteX 9675 0 4096 4096 NT_STATUS_OK
WriteX 9676 0 4096 4096 NT_STATUS_OK
WriteX 9677 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9679 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9680 NT_STATUS_OK
ReadX 9680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9681 NT_STATUS_OK
ReadX 9681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9682 NT_STATUS_OK
ReadX 9682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9683 NT_STATUS_OK
ReadX 9683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9684 NT_STATUS_OK
ReadX 9684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9685 NT_STATUS_OK
ReadX 9685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9686 NT_STATUS_OK
ReadX 9686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9687 NT_STATUS_OK
ReadX 9687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9688 NT_STATUS_OK
ReadX 9688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9689 NT_STATUS_OK
ReadX 9689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9690 NT_STATUS_OK
ReadX 9690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9691 NT_STATUS_OK
ReadX 9691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9692 NT_STATUS_OK
ReadX 9692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9693 NT_STATUS_OK
ReadX 9693 0 8192 8192 NT_STATUS_OK
ReadX 9680 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9694 0 4096 4096 NT_STATUS_OK
ReadX 9694 4096 4096 4096 NT_STATUS_OK
ReadX 9694 8192 4096 4096 NT_STATUS_OK
WriteX 9680 0 4096 4096 NT_STATUS_OK
WriteX 9681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9695 0 4096 4096 NT_STATUS_OK
ReadX 9695 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9674 0 4096 4096 NT_STATUS_OK
WriteX 9675 0 4096 4096 NT_STATUS_OK
WriteX 9676 0 4096 4096 NT_STATUS_OK
WriteX 9677 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9699 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9700 NT_STATUS_OK
QUERY_FILE_INFORMATION 9700 1004 NT_STATUS_OK
WriteX 9700 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9700 258 NT_STATUS_OK
WriteX 9700 0 2048 2048 NT_STATUS_OK
Close 9700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9701 NT_STATUS_OK
ReadX 9701 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9701 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9703 NT_STATUS_OK
ReadX 9703 0 4096 4096 NT_STATUS_OK
ReadX 9703 4096 4096 4096 NT_STATUS_OK
WriteX 9703 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9705 NT_STATUS_OK
ReadX 9705 0 4096 4096 NT_STATUS_OK
ReadX 9705 4096 4096 4096 NT_STATUS_OK
WriteX 9705 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9706 NT_STATUS_OK
QUERY_FILE_INFORMATION 9706 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9693 NT_STATUS_OK
Close 9678 NT_STATUS_OK
Close 9674 NT_STATUS_OK
Close 9675 NT_STATUS_OK
Close 9676 NT_STATUS_OK
Close 9677 NT_STATUS_OK
Close 9686 NT_STATUS_OK
Close 9691 NT_STATUS_OK
Close 9687 NT_STATUS_OK
Close 9688 NT_STATUS_OK
Close 9689 NT_STATUS_OK
Close 9690 NT_STATUS_OK
Close 9692 NT_STATUS_OK
Close 9680 NT_STATUS_OK
Close 9681 NT_STATUS_OK
Close 9684 NT_STATUS_OK
Close 9685 NT_STATUS_OK
Close 9682 NT_STATUS_OK
Close 9683 NT_STATUS_OK
Close 9705 NT_STATUS_OK
Close 9694 NT_STATUS_OK
Close 9695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9708 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9708 0 4096 4096 NT_STATUS_OK
ReadX 9708 4096 4096 4096 NT_STATUS_OK
ReadX 9708 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9710 NT_STATUS_OK
ReadX 9710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9711 NT_STATUS_OK
ReadX 9711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9712 NT_STATUS_OK
ReadX 9712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9713 NT_STATUS_OK
ReadX 9713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9714 NT_STATUS_OK
ReadX 9714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9715 NT_STATUS_OK
ReadX 9715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9716 NT_STATUS_OK
ReadX 9716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9717 NT_STATUS_OK
ReadX 9717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9718 NT_STATUS_OK
ReadX 9718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9719 NT_STATUS_OK
ReadX 9719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9720 NT_STATUS_OK
ReadX 9720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9721 NT_STATUS_OK
ReadX 9721 0 4096 4096 NT_STATUS_OK
ReadX 9709 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9726 NT_STATUS_OK
QUERY_FILE_INFORMATION 9726 1004 NT_STATUS_OK
WriteX 9726 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9726 258 NT_STATUS_OK
WriteX 9726 0 2048 2048 NT_STATUS_OK
Close 9726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9727 NT_STATUS_OK
ReadX 9727 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9727 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9731 NT_STATUS_OK
Close 9731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9732 NT_STATUS_OK
QUERY_FILE_INFORMATION 9732 1004 NT_STATUS_OK
WriteX 9732 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9732 258 NT_STATUS_OK
WriteX 9732 0 2048 2048 NT_STATUS_OK
Close 9732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9733 NT_STATUS_OK
ReadX 9733 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9733 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9716 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9734 NT_STATUS_OK
QUERY_FILE_INFORMATION 9734 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9720 NT_STATUS_OK
Close 9715 NT_STATUS_OK
Close 9721 NT_STATUS_OK
Close 9709 NT_STATUS_OK
Close 9710 NT_STATUS_OK
Close 9713 NT_STATUS_OK
Close 9714 NT_STATUS_OK
Close 9711 NT_STATUS_OK
Close 9712 NT_STATUS_OK
Close 9716 NT_STATUS_OK
Close 9717 NT_STATUS_OK
Close 9718 NT_STATUS_OK
Close 9719 NT_STATUS_OK
Close 9708 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9736 NT_STATUS_OK
QUERY_FILE_INFORMATION 9736 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9738 NT_STATUS_OK
ReadX 9738 61440 4096 4096 NT_STATUS_OK
ReadX 9738 126976 4096 4096 NT_STATUS_OK
WriteX 9738 0 65536 65536 NT_STATUS_OK
WriteX 9738 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9739 NT_STATUS_OK
ReadX 9739 61440 4096 4096 NT_STATUS_OK
ReadX 9739 126976 4096 4096 NT_STATUS_OK
ReadX 9739 192512 4096 4096 NT_STATUS_OK
ReadX 9739 258048 4096 4096 NT_STATUS_OK
WriteX 9739 0 65536 65536 NT_STATUS_OK
WriteX 9739 65536 65536 65536 NT_STATUS_OK
WriteX 9739 131072 65536 65536 NT_STATUS_OK
WriteX 9739 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9740 NT_STATUS_OK
ReadX 9740 61440 4096 4096 NT_STATUS_OK
ReadX 9740 126976 4096 4096 NT_STATUS_OK
ReadX 9740 192512 4096 4096 NT_STATUS_OK
ReadX 9740 258048 4096 4096 NT_STATUS_OK
ReadX 9740 323584 4096 4096 NT_STATUS_OK
ReadX 9740 389120 4096 4096 NT_STATUS_OK
ReadX 9740 454656 4096 4096 NT_STATUS_OK
ReadX 9740 520192 4096 4096 NT_STATUS_OK
WriteX 9740 0 65536 65536 NT_STATUS_OK
WriteX 9740 65536 65536 65536 NT_STATUS_OK
WriteX 9740 131072 65536 65536 NT_STATUS_OK
WriteX 9740 196608 65536 65536 NT_STATUS_OK
WriteX 9740 262144 65536 65536 NT_STATUS_OK
WriteX 9740 327680 65536 65536 NT_STATUS_OK
WriteX 9740 393216 65536 65536 NT_STATUS_OK
WriteX 9740 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9741 NT_STATUS_OK
ReadX 9741 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9741 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9741 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9741 8192 4096 4096 NT_STATUS_OK
ReadX 9741 12288 4096 4096 NT_STATUS_OK
ReadX 9741 16384 4096 4096 NT_STATUS_OK
ReadX 9741 20480 4096 4096 NT_STATUS_OK
ReadX 9741 24576 4096 4096 NT_STATUS_OK
ReadX 9741 28672 4096 4096 NT_STATUS_OK
ReadX 9741 32768 4096 4096 NT_STATUS_OK
ReadX 9741 36864 4096 4096 NT_STATUS_OK
ReadX 9741 40960 4096 4096 NT_STATUS_OK
ReadX 9741 45056 4096 4096 NT_STATUS_OK
ReadX 9741 49152 4096 4096 NT_STATUS_OK
ReadX 9741 53248 4096 4096 NT_STATUS_OK
ReadX 9741 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9741 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9742 NT_STATUS_OK
Close 9742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9738 NT_STATUS_OK
Close 9739 NT_STATUS_OK
Close 9740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9744 NT_STATUS_OK
WriteX 9744 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9744 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9744 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9744 1004 NT_STATUS_OK
WriteX 9744 0 57088 57088 NT_STATUS_OK
WriteX 9744 0 4096 4096 NT_STATUS_OK
Flush 9744 NT_STATUS_OK
Close 9741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9745 NT_STATUS_OK
SET_FILE_INFORMATION 9745 1004 NT_STATUS_OK
Close 9745 NT_STATUS_OK
SET_FILE_INFORMATION 9744 1004 NT_STATUS_OK
WriteX 9744 0 4096 4096 NT_STATUS_OK
Close 9744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9746 NT_STATUS_OK
Close 9746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9748 NT_STATUS_OK
ReadX 9748 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9748 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9749 NT_STATUS_OK
WriteX 9749 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9749 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9749 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9749 1004 NT_STATUS_OK
WriteX 9749 0 51456 51456 NT_STATUS_OK
WriteX 9749 0 4096 4096 NT_STATUS_OK
Flush 9749 NT_STATUS_OK
SET_FILE_INFORMATION 9749 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9749 1004 NT_STATUS_OK
WriteX 9749 0 4096 4096 NT_STATUS_OK
Close 9749 NT_STATUS_OK
Close 9748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9751 NT_STATUS_OK
Close 9751 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9753 NT_STATUS_OK
ReadX 9753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9753 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9755 NT_STATUS_OK
Close 9755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9758 NT_STATUS_OK
WriteX 9758 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 258 NT_STATUS_OK
WriteX 9758 0 53077 53077 NT_STATUS_OK
Close 9758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9759 NT_STATUS_OK
WriteX 9759 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9759 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9759 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9759 1004 NT_STATUS_OK
WriteX 9759 0 65536 65536 NT_STATUS_OK
WriteX 9759 65536 1856 1856 NT_STATUS_OK
WriteX 9759 0 4096 4096 NT_STATUS_OK
Flush 9759 NT_STATUS_OK
SET_FILE_INFORMATION 9759 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9759 1004 NT_STATUS_OK
WriteX 9759 0 4096 4096 NT_STATUS_OK
Close 9759 NT_STATUS_OK
Close 9753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9761 NT_STATUS_OK
Close 9761 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9763 NT_STATUS_OK
ReadX 9763 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9765 NT_STATUS_OK
Close 9765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9768 NT_STATUS_OK
WriteX 9768 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9768 258 NT_STATUS_OK
WriteX 9768 0 7983 7983 NT_STATUS_OK
Close 9768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9770 NT_STATUS_OK
Close 9770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9773 NT_STATUS_OK
WriteX 9773 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9773 258 NT_STATUS_OK
WriteX 9773 0 65536 65536 NT_STATUS_OK
WriteX 9773 65536 65536 65536 NT_STATUS_OK
WriteX 9773 131072 65536 65536 NT_STATUS_OK
WriteX 9773 196608 65536 65536 NT_STATUS_OK
WriteX 9773 262144 65536 65536 NT_STATUS_OK
WriteX 9773 327680 65536 65536 NT_STATUS_OK
WriteX 9773 393216 65536 65536 NT_STATUS_OK
WriteX 9773 458752 46731 46731 NT_STATUS_OK
Close 9773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9774 NT_STATUS_OK
WriteX 9774 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9774 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9763 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9774 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9774 1004 NT_STATUS_OK
WriteX 9774 0 65536 65536 NT_STATUS_OK
WriteX 9774 65536 22848 22848 NT_STATUS_OK
WriteX 9774 0 4096 4096 NT_STATUS_OK
Flush 9774 NT_STATUS_OK
SET_FILE_INFORMATION 9774 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9774 1004 NT_STATUS_OK
WriteX 9774 0 4096 4096 NT_STATUS_OK
Close 9774 NT_STATUS_OK
Close 9763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9776 NT_STATUS_OK
Close 9776 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9778 NT_STATUS_OK
ReadX 9778 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9778 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9779 NT_STATUS_OK
ReadX 9779 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9779 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9779 1004 NT_STATUS_OK
ReadX 9779 8192 4096 4096 NT_STATUS_OK
ReadX 9779 12288 4096 4096 NT_STATUS_OK
ReadX 9779 16384 4096 4096 NT_STATUS_OK
ReadX 9779 20480 4096 4096 NT_STATUS_OK
ReadX 9779 24576 4096 4096 NT_STATUS_OK
ReadX 9779 28672 4096 4096 NT_STATUS_OK
ReadX 9779 32768 4096 4096 NT_STATUS_OK
ReadX 9779 36864 4096 4096 NT_STATUS_OK
ReadX 9779 40960 4096 4096 NT_STATUS_OK
ReadX 9779 45056 4096 4096 NT_STATUS_OK
ReadX 9779 49152 4096 4096 NT_STATUS_OK
ReadX 9779 53248 4096 4096 NT_STATUS_OK
ReadX 9779 57344 4096 4096 NT_STATUS_OK
ReadX 9779 61440 4096 4096 NT_STATUS_OK
ReadX 9779 65536 4096 4096 NT_STATUS_OK
ReadX 9779 69632 4096 4096 NT_STATUS_OK
ReadX 9779 73728 4096 4096 NT_STATUS_OK
ReadX 9779 77824 4096 4096 NT_STATUS_OK
ReadX 9779 81920 4096 4096 NT_STATUS_OK
ReadX 9779 86016 4096 4096 NT_STATUS_OK
ReadX 9779 90112 4096 4096 NT_STATUS_OK
ReadX 9779 94208 4096 4096 NT_STATUS_OK
ReadX 9779 98304 4096 4096 NT_STATUS_OK
ReadX 9779 102400 4096 4096 NT_STATUS_OK
ReadX 9779 106496 4096 4096 NT_STATUS_OK
ReadX 9779 110592 4096 4096 NT_STATUS_OK
ReadX 9779 114688 4096 4096 NT_STATUS_OK
ReadX 9779 118784 4096 4096 NT_STATUS_OK
ReadX 9779 122880 4096 4096 NT_STATUS_OK
ReadX 9779 126976 4096 4096 NT_STATUS_OK
ReadX 9779 131072 4096 4096 NT_STATUS_OK
ReadX 9779 135168 4096 4096 NT_STATUS_OK
ReadX 9779 139264 4096 4096 NT_STATUS_OK
ReadX 9779 143360 4096 4096 NT_STATUS_OK
ReadX 9779 147456 4096 4096 NT_STATUS_OK
ReadX 9779 151552 4096 4096 NT_STATUS_OK
ReadX 9779 155648 4096 4096 NT_STATUS_OK
ReadX 9779 159744 4096 4096 NT_STATUS_OK
ReadX 9779 163840 4096 4096 NT_STATUS_OK
ReadX 9779 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9779 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9780 NT_STATUS_OK
Close 9780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9782 NT_STATUS_OK
WriteX 9782 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9782 258 NT_STATUS_OK
Close 9779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9783 NT_STATUS_OK
SET_FILE_INFORMATION 9783 1004 NT_STATUS_OK
Close 9783 NT_STATUS_OK
WriteX 9782 0 42388 42388 NT_STATUS_OK
Close 9782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9784 NT_STATUS_OK
Close 9784 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9786 NT_STATUS_OK
ReadX 9786 0 4096 4096 NT_STATUS_OK
ReadX 9786 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9787 NT_STATUS_OK
WriteX 9787 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9787 258 NT_STATUS_OK
SET_FILE_INFORMATION 9787 1004 NT_STATUS_OK
WriteX 9787 0 42652 42652 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Close 9786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9789 NT_STATUS_OK
Close 9789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9791 NT_STATUS_OK
ReadX 9791 0 4096 4096 NT_STATUS_OK
ReadX 9791 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9793 NT_STATUS_OK
Close 9793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9796 NT_STATUS_OK
WriteX 9796 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9796 258 NT_STATUS_OK
WriteX 9796 0 65536 65536 NT_STATUS_OK
WriteX 9796 65536 49 49 NT_STATUS_OK
Close 9796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9797 NT_STATUS_OK
ReadX 9797 0 61440 61440 NT_STATUS_OK
ReadX 9797 61440 4096 4096 NT_STATUS_OK
ReadX 9797 65536 61440 61440 NT_STATUS_OK
ReadX 9797 126976 4096 4096 NT_STATUS_OK
ReadX 9797 131072 61440 61440 NT_STATUS_OK
ReadX 9797 192512 4096 4096 NT_STATUS_OK
ReadX 9797 196608 61440 61440 NT_STATUS_OK
ReadX 9797 258048 4096 4096 NT_STATUS_OK
ReadX 9797 262144 61440 61440 NT_STATUS_OK
ReadX 9797 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9798 NT_STATUS_OK
ReadX 9798 0 61440 61440 NT_STATUS_OK
ReadX 9798 61440 4096 4096 NT_STATUS_OK
ReadX 9798 65536 61440 61440 NT_STATUS_OK
ReadX 9798 126976 4096 4096 NT_STATUS_OK
ReadX 9798 131072 61440 61440 NT_STATUS_OK
ReadX 9798 192512 4096 4096 NT_STATUS_OK
ReadX 9798 196608 61440 61440 NT_STATUS_OK
ReadX 9798 258048 4096 4096 NT_STATUS_OK
ReadX 9798 262144 61440 61440 NT_STATUS_OK
ReadX 9798 323584 4096 4096 NT_STATUS_OK
ReadX 9798 327680 61440 61440 NT_STATUS_OK
ReadX 9798 389120 4096 4096 NT_STATUS_OK
ReadX 9798 393216 61440 61440 NT_STATUS_OK
ReadX 9798 454656 4096 4096 NT_STATUS_OK
ReadX 9798 458752 61440 61440 NT_STATUS_OK
ReadX 9798 520192 4096 4096 NT_STATUS_OK
ReadX 9798 524288 61440 61440 NT_STATUS_OK
ReadX 9798 585728 4096 4096 NT_STATUS_OK
ReadX 9798 589824 61440 61440 NT_STATUS_OK
ReadX 9798 651264 4096 4096 NT_STATUS_OK
ReadX 9798 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9799 NT_STATUS_OK
ReadX 9799 0 61440 61440 NT_STATUS_OK
ReadX 9799 61440 4096 4096 NT_STATUS_OK
ReadX 9799 65536 61440 61440 NT_STATUS_OK
ReadX 9799 126976 4096 4096 NT_STATUS_OK
ReadX 9799 131072 61440 61440 NT_STATUS_OK
ReadX 9799 192512 4096 4096 NT_STATUS_OK
ReadX 9799 196608 61440 61440 NT_STATUS_OK
ReadX 9799 258048 4096 4096 NT_STATUS_OK
ReadX 9799 262144 61440 61440 NT_STATUS_OK
ReadX 9799 323584 4096 4096 NT_STATUS_OK
ReadX 9799 327680 61440 61440 NT_STATUS_OK
ReadX 9799 389120 4096 4096 NT_STATUS_OK
ReadX 9799 393216 61440 61440 NT_STATUS_OK
ReadX 9799 454656 4096 4096 NT_STATUS_OK
ReadX 9799 458752 61440 61440 NT_STATUS_OK
ReadX 9799 520192 4096 4096 NT_STATUS_OK
ReadX 9799 524288 61440 61440 NT_STATUS_OK
ReadX 9799 585728 4096 4096 NT_STATUS_OK
ReadX 9799 589824 61440 61440 NT_STATUS_OK
ReadX 9799 651264 4096 4096 NT_STATUS_OK
ReadX 9799 655360 61440 61440 NT_STATUS_OK
ReadX 9799 716800 4096 4096 NT_STATUS_OK
ReadX 9799 720896 61440 61440 NT_STATUS_OK
ReadX 9799 782336 4096 4096 NT_STATUS_OK
ReadX 9799 786432 61440 61440 NT_STATUS_OK
ReadX 9799 847872 4096 4096 NT_STATUS_OK
ReadX 9799 851968 61440 61440 NT_STATUS_OK
ReadX 9799 913408 4096 4096 NT_STATUS_OK
ReadX 9799 917504 61440 61440 NT_STATUS_OK
ReadX 9799 978944 4096 4096 NT_STATUS_OK
ReadX 9799 983040 61440 61440 NT_STATUS_OK
ReadX 9799 1044480 4096 4096 NT_STATUS_OK
ReadX 9799 1048576 61440 61440 NT_STATUS_OK
ReadX 9799 1110016 4096 4096 NT_STATUS_OK
ReadX 9799 1114112 61440 61440 NT_STATUS_OK
ReadX 9799 1175552 4096 4096 NT_STATUS_OK
ReadX 9799 1179648 61440 61440 NT_STATUS_OK
ReadX 9799 1241088 4096 4096 NT_STATUS_OK
ReadX 9799 1245184 61440 61440 NT_STATUS_OK
ReadX 9799 1306624 4096 4096 NT_STATUS_OK
ReadX 9799 1310720 61440 61440 NT_STATUS_OK
ReadX 9799 1372160 4096 4096 NT_STATUS_OK
ReadX 9799 1376256 61440 61440 NT_STATUS_OK
ReadX 9799 1437696 4096 4096 NT_STATUS_OK
ReadX 9799 1441792 61440 61440 NT_STATUS_OK
ReadX 9799 1503232 4096 4096 NT_STATUS_OK
ReadX 9799 1507328 61440 61440 NT_STATUS_OK
ReadX 9799 1568768 4096 4096 NT_STATUS_OK
ReadX 9799 1572864 61440 61440 NT_STATUS_OK
ReadX 9799 1634304 4096 4096 NT_STATUS_OK
ReadX 9799 1638400 61440 61440 NT_STATUS_OK
ReadX 9799 1699840 4096 4096 NT_STATUS_OK
ReadX 9799 1703936 61440 61440 NT_STATUS_OK
ReadX 9799 1765376 4096 4096 NT_STATUS_OK
ReadX 9799 1769472 61440 61440 NT_STATUS_OK
ReadX 9799 1830912 4096 4096 NT_STATUS_OK
ReadX 9799 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9801 NT_STATUS_OK
QUERY_FILE_INFORMATION 9801 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9801 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9801 1005 NT_STATUS_OK
ReadX 9801 2156 24 24 NT_STATUS_OK
ReadX 9801 2139 276 276 NT_STATUS_OK
ReadX 9801 2136 14 14 NT_STATUS_OK
ReadX 9801 2136 7 7 NT_STATUS_OK
ReadX 9801 2138 12 12 NT_STATUS_OK
ReadX 9801 2137 8 8 NT_STATUS_OK
ReadX 9801 2135 15 15 NT_STATUS_OK
ReadX 9801 0 16 16 NT_STATUS_OK
ReadX 9801 16 2048 2048 NT_STATUS_OK
ReadX 9801 2064 2048 2048 NT_STATUS_OK
ReadX 9801 257 2048 2048 NT_STATUS_OK
ReadX 9801 385 2048 2048 NT_STATUS_OK
ReadX 9801 513 2048 2048 NT_STATUS_OK
ReadX 9801 641 2048 2048 NT_STATUS_OK
ReadX 9801 769 2048 2048 NT_STATUS_OK
ReadX 9801 897 2048 2048 NT_STATUS_OK
ReadX 9801 1025 2048 2048 NT_STATUS_OK
ReadX 9801 1153 2048 2048 NT_STATUS_OK
ReadX 9801 1281 2048 2048 NT_STATUS_OK
ReadX 9801 1409 2048 2048 NT_STATUS_OK
ReadX 9801 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9803 NT_STATUS_OK
Close 9803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9797 NT_STATUS_OK
Close 9798 NT_STATUS_OK
Close 9799 NT_STATUS_OK
Close 9791 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9806 NT_STATUS_OK
WriteX 9806 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9806 258 NT_STATUS_OK
WriteX 9806 0 10575 10575 NT_STATUS_OK
Flush 9806 NT_STATUS_OK
Close 9806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9807 NT_STATUS_OK
Close 9807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9809 NT_STATUS_OK
ReadX 9809 0 4096 4096 NT_STATUS_OK
Close 9801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9811 NT_STATUS_OK
LockX 9811 2147483538 1 NT_STATUS_OK
UnlockX 9811 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9811 1005 NT_STATUS_OK
ReadX 9811 0 512 512 NT_STATUS_OK
ReadX 9811 512 512 512 NT_STATUS_OK
ReadX 9811 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9811 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9811 1004 NT_STATUS_OK
Close 9811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9812 NT_STATUS_OK
QUERY_FILE_INFORMATION 9812 1005 NT_STATUS_OK
ReadX 9812 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9813 NT_STATUS_OK
LockX 9813 2147483538 1 NT_STATUS_OK
UnlockX 9813 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9813 1005 NT_STATUS_OK
ReadX 9813 0 512 512 NT_STATUS_OK
ReadX 9813 512 512 512 NT_STATUS_OK
ReadX 9813 1024 512 512 NT_STATUS_OK
ReadX 9813 288 20 20 NT_STATUS_OK
ReadX 9813 308 2084 2084 NT_STATUS_OK
ReadX 9813 388 2084 2084 NT_STATUS_OK
ReadX 9813 388 2084 2084 NT_STATUS_OK
ReadX 9800 2157 1386 1386 NT_STATUS_OK
ReadX 9813 2472 399 399 NT_STATUS_OK
ReadX 9813 3072 1536 1536 NT_STATUS_OK
ReadX 9813 544 149 149 NT_STATUS_OK
ReadX 9813 693 485 485 NT_STATUS_OK
Close 9813 NT_STATUS_OK
ReadX 9800 2157 4096 4096 NT_STATUS_OK
ReadX 9800 6253 4096 4096 NT_STATUS_OK
ReadX 9800 10349 4096 4096 NT_STATUS_OK
ReadX 9800 14445 4096 4096 NT_STATUS_OK
ReadX 9800 18541 4096 4096 NT_STATUS_OK
ReadX 9800 22637 256 256 NT_STATUS_OK
ReadX 9800 22893 4096 4096 NT_STATUS_OK
ReadX 9800 26989 4096 4096 NT_STATUS_OK
ReadX 9800 31085 4096 4096 NT_STATUS_OK
ReadX 9800 35181 4096 4096 NT_STATUS_OK
ReadX 9800 39277 4096 4096 NT_STATUS_OK
ReadX 9800 43373 4096 4096 NT_STATUS_OK
ReadX 9800 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9800 2157 1024 1024 NT_STATUS_OK
ReadX 9800 1667 4688 4688 NT_STATUS_OK
ReadX 9800 6355 3516 3516 NT_STATUS_OK
ReadX 9800 9871 16384 16384 NT_STATUS_OK
ReadX 9800 26255 3771 3771 NT_STATUS_OK
ReadX 9800 30026 2048 2048 NT_STATUS_OK
ReadX 9800 32074 1024 1024 NT_STATUS_OK
ReadX 9800 33098 6652 6652 NT_STATUS_OK
ReadX 9800 39750 16384 16384 NT_STATUS_OK
ReadX 9800 56134 10496 10496 NT_STATUS_OK
ReadX 9800 66630 1784 1784 NT_STATUS_OK
ReadX 9800 68414 90 90 NT_STATUS_OK
ReadX 9800 68504 273 273 NT_STATUS_OK
ReadX 9800 68777 1600 1600 NT_STATUS_OK
ReadX 9800 70377 640 640 NT_STATUS_OK
ReadX 9800 71017 1280 1280 NT_STATUS_OK
ReadX 9800 72297 8464 8464 NT_STATUS_OK
ReadX 9800 80761 158 158 NT_STATUS_OK
ReadX 9800 80919 912 912 NT_STATUS_OK
ReadX 9800 81831 1980 1980 NT_STATUS_OK
ReadX 9800 83811 2256 2256 NT_STATUS_OK
ReadX 9800 86067 400 400 NT_STATUS_OK
ReadX 9800 86467 252 252 NT_STATUS_OK
ReadX 9800 86719 42 42 NT_STATUS_OK
ReadX 9800 86761 725 725 NT_STATUS_OK
ReadX 9800 2009 512 512 NT_STATUS_OK
ReadX 9800 3895 9 9 NT_STATUS_OK
ReadX 9800 3781 46 46 NT_STATUS_OK
ReadX 9800 4059 92 92 NT_STATUS_OK
ReadX 9800 3781 92 92 NT_STATUS_OK
ReadX 9800 3986 184 184 NT_STATUS_OK
ReadX 9800 3987 16384 16384 NT_STATUS_OK
ReadX 9800 3902 16384 16384 NT_STATUS_OK
ReadX 9800 3781 10240 10240 NT_STATUS_OK
ReadX 9800 3821 16384 16384 NT_STATUS_OK
ReadX 9800 3891 935 935 NT_STATUS_OK
ReadX 9800 4060 10240 10240 NT_STATUS_OK
ReadX 9800 4059 184 184 NT_STATUS_OK
ReadX 9800 256 184 184 NT_STATUS_OK
ReadX 9800 256 1026 1026 NT_STATUS_OK
ReadX 9800 3901 326 326 NT_STATUS_OK
ReadX 9800 3899 652 652 NT_STATUS_OK
ReadX 9800 256 2 2 NT_STATUS_OK
ReadX 9800 258 4948 4948 NT_STATUS_OK
Close 9800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9815 NT_STATUS_OK
Close 9815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9818 NT_STATUS_OK
WriteX 9818 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9818 258 NT_STATUS_OK
WriteX 9818 0 65536 65536 NT_STATUS_OK
WriteX 9818 65536 65536 65536 NT_STATUS_OK
WriteX 9818 131072 65536 65536 NT_STATUS_OK
WriteX 9818 196608 65536 65536 NT_STATUS_OK
WriteX 9818 262144 65536 65536 NT_STATUS_OK
WriteX 9818 327680 65536 65536 NT_STATUS_OK
WriteX 9818 393216 65536 65536 NT_STATUS_OK
WriteX 9818 458752 65536 65536 NT_STATUS_OK
WriteX 9818 524288 65536 65536 NT_STATUS_OK
WriteX 9818 589824 35257 35257 NT_STATUS_OK
Close 9818 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9820 NT_STATUS_OK
Close 9820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9823 NT_STATUS_OK
WriteX 9823 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 258 NT_STATUS_OK
WriteX 9823 0 65536 65536 NT_STATUS_OK
WriteX 9823 65536 65536 65536 NT_STATUS_OK
WriteX 9823 131072 65536 65536 NT_STATUS_OK
WriteX 9823 196608 65536 65536 NT_STATUS_OK
WriteX 9823 262144 65536 65536 NT_STATUS_OK
WriteX 9823 327680 65536 65536 NT_STATUS_OK
WriteX 9823 393216 65536 65536 NT_STATUS_OK
WriteX 9823 458752 65536 65536 NT_STATUS_OK
WriteX 9823 524288 65536 65536 NT_STATUS_OK
WriteX 9823 589824 57598 57598 NT_STATUS_OK
Close 9823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9825 NT_STATUS_OK
WriteX 9825 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9825 258 NT_STATUS_OK
WriteX 9825 0 12543 12543 NT_STATUS_OK
Flush 9825 NT_STATUS_OK
Close 9825 NT_STATUS_OK
Close 9809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9827 NT_STATUS_OK
Close 9827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9829 NT_STATUS_OK
ReadX 9829 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9831 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 1005 NT_STATUS_OK
ReadX 9831 1938 24 24 NT_STATUS_OK
ReadX 9831 1920 276 276 NT_STATUS_OK
ReadX 9831 1918 14 14 NT_STATUS_OK
ReadX 9831 1918 7 7 NT_STATUS_OK
ReadX 9831 1919 12 12 NT_STATUS_OK
ReadX 9831 1919 8 8 NT_STATUS_OK
ReadX 9831 1917 15 15 NT_STATUS_OK
ReadX 9831 0 16 16 NT_STATUS_OK
ReadX 9831 16 2048 2048 NT_STATUS_OK
ReadX 9831 2064 2048 2048 NT_STATUS_OK
ReadX 9831 257 2048 2048 NT_STATUS_OK
ReadX 9831 385 2048 2048 NT_STATUS_OK
ReadX 9831 513 2048 2048 NT_STATUS_OK
ReadX 9831 641 2048 2048 NT_STATUS_OK
ReadX 9831 769 2048 2048 NT_STATUS_OK
ReadX 9831 897 2048 2048 NT_STATUS_OK
ReadX 9831 1025 2048 2048 NT_STATUS_OK
ReadX 9831 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9836 NT_STATUS_OK
WriteX 9836 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9836 258 NT_STATUS_OK
WriteX 9836 0 11588 11588 NT_STATUS_OK
Flush 9836 NT_STATUS_OK
Close 9836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9837 NT_STATUS_OK
Close 9837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 4096 4096 NT_STATUS_OK
Close 9831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9841 NT_STATUS_OK
WriteX 9841 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9841 258 NT_STATUS_OK
WriteX 9841 0 11615 11615 NT_STATUS_OK
Flush 9841 NT_STATUS_OK
Close 9841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9843 NT_STATUS_OK
Close 9843 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9847 NT_STATUS_OK
Close 9847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9850 NT_STATUS_OK
WriteX 9850 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9850 258 NT_STATUS_OK
WriteX 9850 0 65536 65536 NT_STATUS_OK
WriteX 9850 65536 16050 16050 NT_STATUS_OK
Close 9850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9830 1939 64 64 NT_STATUS_OK
ReadX 9830 128 248 248 NT_STATUS_OK
ReadX 9830 128 568 568 NT_STATUS_OK
ReadX 9830 3872 1536 1536 NT_STATUS_OK
ReadX 9830 3456 2560 2560 NT_STATUS_OK
ReadX 9830 3136 512 512 NT_STATUS_OK
ReadX 9830 2880 4096 4096 NT_STATUS_OK
ReadX 9830 3264 3072 3072 NT_STATUS_OK
ReadX 9830 320 4096 4096 NT_STATUS_OK
ReadX 9830 1024 4096 4096 NT_STATUS_OK
ReadX 9830 3616 4096 4096 NT_STATUS_OK
ReadX 9830 1939 64 64 NT_STATUS_OK
ReadX 9830 128 248 248 NT_STATUS_OK
ReadX 9830 128 608 608 NT_STATUS_OK
ReadX 9830 2858 1024 1024 NT_STATUS_OK
ReadX 9830 2810 4096 4096 NT_STATUS_OK
ReadX 9830 2826 4096 4096 NT_STATUS_OK
ReadX 9830 2580 2048 2048 NT_STATUS_OK
ReadX 9830 2800 2560 2560 NT_STATUS_OK
ReadX 9830 2100 4096 4096 NT_STATUS_OK
ReadX 9830 2084 4096 4096 NT_STATUS_OK
ReadX 9830 868 4096 4096 NT_STATUS_OK
ReadX 9830 2324 4096 4096 NT_STATUS_OK
ReadX 9830 884 4096 4096 NT_STATUS_OK
ReadX 9830 2604 1024 1024 NT_STATUS_OK
ReadX 9830 580 4096 4096 NT_STATUS_OK
ReadX 9830 596 4096 4096 NT_STATUS_OK
ReadX 9830 2752 4096 4096 NT_STATUS_OK
ReadX 9830 2842 1024 1024 NT_STATUS_OK
ReadX 9830 660 4096 4096 NT_STATUS_OK
ReadX 9830 2720 4096 4096 NT_STATUS_OK
ReadX 9830 2736 4096 4096 NT_STATUS_OK
ReadX 9830 628 4096 4096 NT_STATUS_OK
ReadX 9830 2704 4096 4096 NT_STATUS_OK
ReadX 9830 1556 4096 4096 NT_STATUS_OK
ReadX 9830 576 4096 4096 NT_STATUS_OK
ReadX 9830 3168 1536 1536 NT_STATUS_OK
ReadX 9830 832 4096 4096 NT_STATUS_OK
ReadX 9830 1088 4096 4096 NT_STATUS_OK
ReadX 9830 1344 4096 4096 NT_STATUS_OK
ReadX 9830 1600 4096 4096 NT_STATUS_OK
ReadX 9830 1856 4096 4096 NT_STATUS_OK
ReadX 9830 2112 4096 4096 NT_STATUS_OK
ReadX 9830 1892 4096 4096 NT_STATUS_OK
ReadX 9830 820 4096 4096 NT_STATUS_OK
ReadX 9830 788 4096 4096 NT_STATUS_OK
ReadX 9830 1604 4096 4096 NT_STATUS_OK
ReadX 9830 3648 4096 4096 NT_STATUS_OK
ReadX 9830 2608 4096 4096 NT_STATUS_OK
ReadX 9830 548 4096 4096 NT_STATUS_OK
ReadX 9830 740 4096 4096 NT_STATUS_OK
ReadX 9830 1344 4096 4096 NT_STATUS_OK
ReadX 9830 3392 4096 4096 NT_STATUS_OK
ReadX 9830 3904 4096 4096 NT_STATUS_OK
ReadX 9830 644 4096 4096 NT_STATUS_OK
ReadX 9830 676 4096 4096 NT_STATUS_OK
ReadX 9830 2688 4096 4096 NT_STATUS_OK
ReadX 9830 320 4096 4096 NT_STATUS_OK
ReadX 9830 900 4096 4096 NT_STATUS_OK
ReadX 9830 1908 4096 4096 NT_STATUS_OK
ReadX 9830 852 4096 4096 NT_STATUS_OK
ReadX 9830 724 4096 4096 NT_STATUS_OK
ReadX 9830 2292 4096 4096 NT_STATUS_OK
ReadX 9830 612 4096 4096 NT_STATUS_OK
ReadX 9830 388 4096 4096 NT_STATUS_OK
ReadX 9830 2368 4096 4096 NT_STATUS_OK
ReadX 9830 2624 4096 4096 NT_STATUS_OK
ReadX 9830 500 4096 4096 NT_STATUS_OK
ReadX 9830 356 4096 4096 NT_STATUS_OK
ReadX 9830 1024 4096 4096 NT_STATUS_OK
ReadX 9830 576 4096 4096 NT_STATUS_OK
ReadX 9830 340 4096 4096 NT_STATUS_OK
ReadX 9830 420 4096 4096 NT_STATUS_OK
ReadX 9830 1600 4096 4096 NT_STATUS_OK
ReadX 9830 404 4096 4096 NT_STATUS_OK
ReadX 9830 1428 4096 4096 NT_STATUS_OK
ReadX 9830 2656 4096 4096 NT_STATUS_OK
ReadX 9830 2624 4096 4096 NT_STATUS_OK
ReadX 9830 452 4096 4096 NT_STATUS_OK
ReadX 9830 692 4096 4096 NT_STATUS_OK
ReadX 9830 564 4096 4096 NT_STATUS_OK
ReadX 9830 372 4096 4096 NT_STATUS_OK
ReadX 9830 468 4096 4096 NT_STATUS_OK
ReadX 9830 484 4096 4096 NT_STATUS_OK
ReadX 9830 1088 4096 4096 NT_STATUS_OK
ReadX 9830 1924 4096 4096 NT_STATUS_OK
ReadX 9830 2768 4096 4096 NT_STATUS_OK
ReadX 9830 832 4096 4096 NT_STATUS_OK
ReadX 9830 836 4096 4096 NT_STATUS_OK
ReadX 9830 1856 4096 4096 NT_STATUS_OK
ReadX 9830 2640 4096 4096 NT_STATUS_OK
ReadX 9830 436 4096 4096 NT_STATUS_OK
ReadX 9830 1828 4096 4096 NT_STATUS_OK
ReadX 9830 804 4096 4096 NT_STATUS_OK
ReadX 9830 1860 4096 4096 NT_STATUS_OK
ReadX 9830 1812 4096 4096 NT_STATUS_OK
ReadX 9830 756 4096 4096 NT_STATUS_OK
ReadX 9830 1636 4096 4096 NT_STATUS_OK
ReadX 9830 772 4096 4096 NT_STATUS_OK
ReadX 9830 2036 4096 4096 NT_STATUS_OK
ReadX 9830 1220 4096 4096 NT_STATUS_OK
ReadX 9830 1652 4096 4096 NT_STATUS_OK
ReadX 9830 2588 4096 4096 NT_STATUS_OK
ReadX 9830 916 4096 4096 NT_STATUS_OK
ReadX 9830 260 4096 4096 NT_STATUS_OK
ReadX 9830 932 4096 4096 NT_STATUS_OK
ReadX 9830 2624 4096 4096 NT_STATUS_OK
ReadX 9830 308 4096 4096 NT_STATUS_OK
ReadX 9830 292 4096 4096 NT_STATUS_OK
ReadX 9830 1140 4096 4096 NT_STATUS_OK
ReadX 9830 276 4096 4096 NT_STATUS_OK
ReadX 9830 2020 4096 4096 NT_STATUS_OK
ReadX 9830 2880 4096 4096 NT_STATUS_OK
ReadX 9830 516 4096 4096 NT_STATUS_OK
ReadX 9830 1844 4096 4096 NT_STATUS_OK
ReadX 9830 1124 4096 4096 NT_STATUS_OK
ReadX 9830 3136 4096 4096 NT_STATUS_OK
ReadX 9830 324 4096 4096 NT_STATUS_OK
ReadX 9830 1156 4096 4096 NT_STATUS_OK
ReadX 9830 1172 4096 4096 NT_STATUS_OK
ReadX 9830 2112 4096 4096 NT_STATUS_OK
ReadX 9830 2368 4096 4096 NT_STATUS_OK
ReadX 9830 964 4096 4096 NT_STATUS_OK
ReadX 9830 980 4096 4096 NT_STATUS_OK
ReadX 9830 1012 4096 4096 NT_STATUS_OK
ReadX 9830 532 4096 4096 NT_STATUS_OK
ReadX 9830 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9830 1620 4096 4096 NT_STATUS_OK
ReadX 9830 1604 4096 4096 NT_STATUS_OK
ReadX 9830 2116 4096 4096 NT_STATUS_OK
ReadX 9830 2132 4096 4096 NT_STATUS_OK
ReadX 9830 2148 4096 4096 NT_STATUS_OK
ReadX 9830 2276 4096 4096 NT_STATUS_OK
ReadX 9830 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9852 NT_STATUS_OK
Close 9852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9855 NT_STATUS_OK
QUERY_FILE_INFORMATION 9810 1004 NT_STATUS_OK
Close 9810 NT_STATUS_OK
WriteX 9855 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9855 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9812 1004 NT_STATUS_OK
Close 9812 NT_STATUS_OK
WriteX 9855 0 65536 65536 NT_STATUS_OK
WriteX 9855 65536 64850 64850 NT_STATUS_OK
Close 9855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9857 NT_STATUS_OK
WriteX 9857 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 258 NT_STATUS_OK
ReadX 9830 2068 4096 4096 NT_STATUS_OK
ReadX 9830 1588 4096 4096 NT_STATUS_OK
ReadX 9830 1572 4096 4096 NT_STATUS_OK
WriteX 9857 0 18630 18630 NT_STATUS_OK
Flush 9857 NT_STATUS_OK
Close 9857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9859 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9861 NT_STATUS_OK
ReadX 9861 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9830 612 4096 4096 NT_STATUS_OK
ReadX 9830 564 4096 4096 NT_STATUS_OK
ReadX 9830 1876 4096 4096 NT_STATUS_OK
ReadX 9830 628 4096 4096 NT_STATUS_OK
ReadX 9830 740 4096 4096 NT_STATUS_OK
ReadX 9830 724 4096 4096 NT_STATUS_OK
ReadX 9830 644 4096 4096 NT_STATUS_OK
ReadX 9830 2324 4096 4096 NT_STATUS_OK
ReadX 9830 660 4096 4096 NT_STATUS_OK
ReadX 9830 852 4096 4096 NT_STATUS_OK
ReadX 9830 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9830 2368 4096 4096 NT_STATUS_OK
ReadX 9830 1024 4096 4096 NT_STATUS_OK
ReadX 9830 320 4096 4096 NT_STATUS_OK
ReadX 9830 580 4096 4096 NT_STATUS_OK
ReadX 9830 3136 512 512 NT_STATUS_OK
ReadX 9830 2880 4096 4096 NT_STATUS_OK
Close 9830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9862 NT_STATUS_OK
ReadX 9862 61440 4096 4096 NT_STATUS_OK
ReadX 9862 126976 4096 4096 NT_STATUS_OK
WriteX 9862 0 65536 65536 NT_STATUS_OK
WriteX 9862 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9863 NT_STATUS_OK
ReadX 9863 61440 4096 4096 NT_STATUS_OK
ReadX 9863 126976 4096 4096 NT_STATUS_OK
ReadX 9863 192512 4096 4096 NT_STATUS_OK
ReadX 9863 258048 4096 4096 NT_STATUS_OK
WriteX 9863 0 65536 65536 NT_STATUS_OK
WriteX 9863 65536 65536 65536 NT_STATUS_OK
WriteX 9863 131072 65536 65536 NT_STATUS_OK
WriteX 9863 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9864 NT_STATUS_OK
ReadX 9864 61440 4096 4096 NT_STATUS_OK
ReadX 9864 126976 4096 4096 NT_STATUS_OK
ReadX 9864 192512 4096 4096 NT_STATUS_OK
ReadX 9864 258048 4096 4096 NT_STATUS_OK
ReadX 9864 323584 4096 4096 NT_STATUS_OK
ReadX 9864 389120 4096 4096 NT_STATUS_OK
ReadX 9864 454656 4096 4096 NT_STATUS_OK
ReadX 9864 520192 4096 4096 NT_STATUS_OK
WriteX 9864 0 65536 65536 NT_STATUS_OK
WriteX 9864 65536 65536 65536 NT_STATUS_OK
WriteX 9864 131072 65536 65536 NT_STATUS_OK
WriteX 9864 196608 65536 65536 NT_STATUS_OK
WriteX 9864 262144 65536 65536 NT_STATUS_OK
WriteX 9864 327680 65536 65536 NT_STATUS_OK
WriteX 9864 393216 65536 65536 NT_STATUS_OK
WriteX 9864 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9866 NT_STATUS_OK
Close 9866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9867 NT_STATUS_OK
WriteX 9867 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9867 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9865 0 8192 8192 NT_STATUS_OK
Flush 9865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9865 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9865 0 8192 8192 NT_STATUS_OK
Flush 9865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9865 0 8192 8192 NT_STATUS_OK
Flush 9865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9865 0 8192 8192 NT_STATUS_OK
Flush 9865 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9869 NT_STATUS_OK
Close 9869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9861 NT_STATUS_OK
Close 9829 NT_STATUS_OK
Close 9862 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Close 9864 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9872 NT_STATUS_OK
WriteX 9872 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 258 NT_STATUS_OK
WriteX 9872 0 62591 62591 NT_STATUS_OK
Close 9872 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9874 NT_STATUS_OK
Close 9874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9877 NT_STATUS_OK
WriteX 9877 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 10845 10845 NT_STATUS_OK
Close 9877 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9879 NT_STATUS_OK
Close 9879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9882 NT_STATUS_OK
WriteX 9882 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9882 258 NT_STATUS_OK
WriteX 9882 0 30118 30118 NT_STATUS_OK
Close 9882 NT_STATUS_OK
WriteX 9865 0 4096 4096 NT_STATUS_OK
WriteX 9867 0 64 64 NT_STATUS_OK
Close 9867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9865 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9884 NT_STATUS_OK
ReadX 9884 0 61440 61440 NT_STATUS_OK
ReadX 9884 61440 4096 4096 NT_STATUS_OK
ReadX 9884 65536 61440 61440 NT_STATUS_OK
ReadX 9884 126976 4096 4096 NT_STATUS_OK
ReadX 9884 131072 61440 61440 NT_STATUS_OK
ReadX 9884 192512 4096 4096 NT_STATUS_OK
ReadX 9884 196608 61440 61440 NT_STATUS_OK
ReadX 9884 258048 4096 4096 NT_STATUS_OK
ReadX 9884 262144 61440 61440 NT_STATUS_OK
ReadX 9884 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9885 NT_STATUS_OK
ReadX 9885 0 61440 61440 NT_STATUS_OK
ReadX 9885 61440 4096 4096 NT_STATUS_OK
ReadX 9885 65536 61440 61440 NT_STATUS_OK
ReadX 9885 126976 4096 4096 NT_STATUS_OK
ReadX 9885 131072 61440 61440 NT_STATUS_OK
ReadX 9885 192512 4096 4096 NT_STATUS_OK
ReadX 9885 196608 61440 61440 NT_STATUS_OK
ReadX 9885 258048 4096 4096 NT_STATUS_OK
ReadX 9885 262144 61440 61440 NT_STATUS_OK
ReadX 9885 323584 4096 4096 NT_STATUS_OK
ReadX 9885 327680 61440 61440 NT_STATUS_OK
ReadX 9885 389120 4096 4096 NT_STATUS_OK
ReadX 9885 393216 61440 61440 NT_STATUS_OK
ReadX 9885 454656 4096 4096 NT_STATUS_OK
ReadX 9885 458752 61440 61440 NT_STATUS_OK
ReadX 9885 520192 4096 4096 NT_STATUS_OK
ReadX 9885 524288 61440 61440 NT_STATUS_OK
ReadX 9885 585728 4096 4096 NT_STATUS_OK
ReadX 9885 589824 61440 61440 NT_STATUS_OK
ReadX 9885 651264 4096 4096 NT_STATUS_OK
ReadX 9885 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 61440 61440 NT_STATUS_OK
ReadX 9886 61440 4096 4096 NT_STATUS_OK
ReadX 9886 65536 61440 61440 NT_STATUS_OK
ReadX 9886 126976 4096 4096 NT_STATUS_OK
ReadX 9886 131072 61440 61440 NT_STATUS_OK
ReadX 9886 192512 4096 4096 NT_STATUS_OK
ReadX 9886 196608 61440 61440 NT_STATUS_OK
ReadX 9886 258048 4096 4096 NT_STATUS_OK
ReadX 9886 262144 61440 61440 NT_STATUS_OK
ReadX 9886 323584 4096 4096 NT_STATUS_OK
ReadX 9886 327680 61440 61440 NT_STATUS_OK
ReadX 9886 389120 4096 4096 NT_STATUS_OK
ReadX 9886 393216 61440 61440 NT_STATUS_OK
ReadX 9886 454656 4096 4096 NT_STATUS_OK
ReadX 9886 458752 61440 61440 NT_STATUS_OK
ReadX 9886 520192 4096 4096 NT_STATUS_OK
ReadX 9886 524288 61440 61440 NT_STATUS_OK
ReadX 9886 585728 4096 4096 NT_STATUS_OK
ReadX 9886 589824 61440 61440 NT_STATUS_OK
ReadX 9886 651264 4096 4096 NT_STATUS_OK
ReadX 9886 655360 61440 61440 NT_STATUS_OK
ReadX 9886 716800 4096 4096 NT_STATUS_OK
ReadX 9886 720896 61440 61440 NT_STATUS_OK
ReadX 9886 782336 4096 4096 NT_STATUS_OK
ReadX 9886 786432 61440 61440 NT_STATUS_OK
ReadX 9886 847872 4096 4096 NT_STATUS_OK
ReadX 9886 851968 61440 61440 NT_STATUS_OK
ReadX 9886 913408 4096 4096 NT_STATUS_OK
ReadX 9886 917504 61440 61440 NT_STATUS_OK
ReadX 9886 978944 4096 4096 NT_STATUS_OK
ReadX 9886 983040 61440 61440 NT_STATUS_OK
ReadX 9886 1044480 4096 4096 NT_STATUS_OK
ReadX 9886 1048576 61440 61440 NT_STATUS_OK
ReadX 9886 1110016 4096 4096 NT_STATUS_OK
ReadX 9886 1114112 61440 61440 NT_STATUS_OK
ReadX 9886 1175552 4096 4096 NT_STATUS_OK
ReadX 9886 1179648 61440 61440 NT_STATUS_OK
ReadX 9886 1241088 4096 4096 NT_STATUS_OK
ReadX 9886 1245184 61440 61440 NT_STATUS_OK
ReadX 9886 1306624 4096 4096 NT_STATUS_OK
ReadX 9886 1310720 61440 61440 NT_STATUS_OK
ReadX 9886 1372160 4096 4096 NT_STATUS_OK
ReadX 9886 1376256 61440 61440 NT_STATUS_OK
ReadX 9886 1437696 4096 4096 NT_STATUS_OK
ReadX 9886 1441792 61440 61440 NT_STATUS_OK
ReadX 9886 1503232 4096 4096 NT_STATUS_OK
ReadX 9886 1507328 61440 61440 NT_STATUS_OK
ReadX 9886 1568768 4096 4096 NT_STATUS_OK
ReadX 9886 1572864 61440 61440 NT_STATUS_OK
ReadX 9886 1634304 4096 4096 NT_STATUS_OK
ReadX 9886 1638400 61440 61440 NT_STATUS_OK
ReadX 9886 1699840 4096 4096 NT_STATUS_OK
ReadX 9886 1703936 61440 61440 NT_STATUS_OK
ReadX 9886 1765376 4096 4096 NT_STATUS_OK
ReadX 9886 1769472 61440 61440 NT_STATUS_OK
ReadX 9886 1830912 4096 4096 NT_STATUS_OK
ReadX 9886 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9887 NT_STATUS_OK
Close 9887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9884 NT_STATUS_OK
Close 9885 NT_STATUS_OK
Close 9886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 4096 4096 NT_STATUS_OK
ReadX 9891 4096 4096 4096 NT_STATUS_OK
ReadX 9891 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9892 NT_STATUS_OK
Close 9892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Close 9891 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9894 NT_STATUS_OK
ReadX 9894 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9895 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9895 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9896 NT_STATUS_OK
Close 9896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9894 NT_STATUS_OK
Close 9895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9898 NT_STATUS_OK
ReadX 9898 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9899 NT_STATUS_OK
ReadX 9899 0 8192 8192 NT_STATUS_OK
ReadX 9899 8192 8192 8192 NT_STATUS_OK
ReadX 9899 16384 8192 8192 NT_STATUS_OK
ReadX 9899 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9901 NT_STATUS_OK
Close 9901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9899 NT_STATUS_OK
Close 9898 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9904 NT_STATUS_OK
WriteX 9904 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9904 258 NT_STATUS_OK
WriteX 9904 0 10438 10438 NT_STATUS_OK
Close 9904 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9905 NT_STATUS_OK
Close 9905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9907 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9908 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9909 NT_STATUS_OK
Close 9909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9910 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9912 NT_STATUS_OK
Close 9912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9913 NT_STATUS_OK
ReadX 9913 0 4096 4096 NT_STATUS_OK
ReadX 9913 4096 4096 4096 NT_STATUS_OK
ReadX 9913 8192 4096 4096 NT_STATUS_OK
ReadX 9913 12288 8192 8192 NT_STATUS_OK
ReadX 9913 20480 8192 8192 NT_STATUS_OK
ReadX 9913 28672 8192 8192 NT_STATUS_OK
ReadX 9913 36864 8192 8192 NT_STATUS_OK
ReadX 9913 45056 8192 8192 NT_STATUS_OK
ReadX 9913 53248 8192 8192 NT_STATUS_OK
ReadX 9913 61440 8192 8192 NT_STATUS_OK
ReadX 9913 69632 8192 8192 NT_STATUS_OK
ReadX 9913 77824 8192 8192 NT_STATUS_OK
ReadX 9913 86016 8192 8192 NT_STATUS_OK
ReadX 9913 94208 8192 8192 NT_STATUS_OK
ReadX 9913 102400 8192 8192 NT_STATUS_OK
ReadX 9913 110592 8192 8192 NT_STATUS_OK
ReadX 9913 118784 8192 8192 NT_STATUS_OK
ReadX 9913 126976 8192 8192 NT_STATUS_OK
ReadX 9913 135168 8192 8192 NT_STATUS_OK
ReadX 9913 143360 8192 8192 NT_STATUS_OK
ReadX 9913 151552 8192 8192 NT_STATUS_OK
ReadX 9913 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9913 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Close 9910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9915 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9918 NT_STATUS_OK
WriteX 9918 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9918 258 NT_STATUS_OK
WriteX 9918 0 28489 28489 NT_STATUS_OK
Close 9918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9919 NT_STATUS_OK
Close 9919 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9921 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9922 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 8192 8192 NT_STATUS_OK
ReadX 9925 8192 8192 8192 NT_STATUS_OK
ReadX 9925 16384 8192 8192 NT_STATUS_OK
ReadX 9925 24576 8192 8192 NT_STATUS_OK
ReadX 9925 32768 16384 16384 NT_STATUS_OK
ReadX 9925 49152 8192 8192 NT_STATUS_OK
ReadX 9925 57344 8192 8192 NT_STATUS_OK
ReadX 9925 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9927 NT_STATUS_OK
Close 9927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9930 NT_STATUS_OK
WriteX 9930 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9930 258 NT_STATUS_OK
WriteX 9930 0 29253 29253 NT_STATUS_OK
Close 9930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9934 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9937 NT_STATUS_OK
WriteX 9937 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9937 258 NT_STATUS_OK
WriteX 9937 0 30183 30183 NT_STATUS_OK
Close 9937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9938 NT_STATUS_OK
Close 9938 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9940 NT_STATUS_OK
WriteX 9940 0 510 510 NT_STATUS_OK
WriteX 9940 510 512 512 NT_STATUS_OK
WriteX 9940 1022 510 510 NT_STATUS_OK
WriteX 9940 1532 510 510 NT_STATUS_OK
WriteX 9940 2042 168 168 NT_STATUS_OK
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9941 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9943 NT_STATUS_OK
ReadX 9943 0 4096 4096 NT_STATUS_OK
WriteX 9943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 61440 4096 4096 NT_STATUS_OK
ReadX 9944 126976 4096 4096 NT_STATUS_OK
WriteX 9944 0 65536 65536 NT_STATUS_OK
WriteX 9944 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9945 NT_STATUS_OK
ReadX 9945 61440 4096 4096 NT_STATUS_OK
ReadX 9945 126976 4096 4096 NT_STATUS_OK
ReadX 9945 192512 4096 4096 NT_STATUS_OK
ReadX 9945 258048 4096 4096 NT_STATUS_OK
WriteX 9945 0 65536 65536 NT_STATUS_OK
WriteX 9945 65536 65536 65536 NT_STATUS_OK
WriteX 9945 131072 65536 65536 NT_STATUS_OK
WriteX 9945 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9946 NT_STATUS_OK
ReadX 9946 61440 4096 4096 NT_STATUS_OK
ReadX 9946 126976 4096 4096 NT_STATUS_OK
ReadX 9946 192512 4096 4096 NT_STATUS_OK
ReadX 9946 258048 4096 4096 NT_STATUS_OK
ReadX 9946 323584 4096 4096 NT_STATUS_OK
ReadX 9946 389120 4096 4096 NT_STATUS_OK
ReadX 9946 454656 4096 4096 NT_STATUS_OK
ReadX 9946 520192 4096 4096 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 65536 65536 NT_STATUS_OK
WriteX 9946 131072 65536 65536 NT_STATUS_OK
WriteX 9946 196608 65536 65536 NT_STATUS_OK
WriteX 9946 262144 65536 65536 NT_STATUS_OK
WriteX 9946 327680 65536 65536 NT_STATUS_OK
WriteX 9946 393216 65536 65536 NT_STATUS_OK
WriteX 9946 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9943 NT_STATUS_OK
Close 9944 NT_STATUS_OK
Close 9945 NT_STATUS_OK
Close 9946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9949 NT_STATUS_OK
Close 9949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9962 NT_STATUS_OK
Close 9962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9967 NT_STATUS_OK
Close 9967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9971 NT_STATUS_OK
Close 9971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9986 NT_STATUS_OK
Close 9986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9996 NT_STATUS_OK
Close 9996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10001 NT_STATUS_OK
Close 10001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10006 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10009 NT_STATUS_OK
Close 10009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10015 NT_STATUS_OK
WriteX 10015 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10015 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10015 0 65536 65536 NT_STATUS_OK
WriteX 10015 65536 65536 65536 NT_STATUS_OK
WriteX 10015 131072 65536 65536 NT_STATUS_OK
WriteX 10015 196608 65536 65536 NT_STATUS_OK
WriteX 10015 262144 26634 26634 NT_STATUS_OK
Close 10015 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
Close 10022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
ReadX 10023 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10028 NT_STATUS_OK
Close 10028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10033 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10037 NT_STATUS_OK
Close 10037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10046 NT_STATUS_OK
Close 10046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10051 NT_STATUS_OK
Close 10051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10061 NT_STATUS_OK
Close 10061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10066 NT_STATUS_OK
Close 10066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10071 NT_STATUS_OK
Close 10071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10080 NT_STATUS_OK
Close 10080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10085 NT_STATUS_OK
Close 10085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10088 NT_STATUS_OK
Close 10088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10101 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10102 NT_STATUS_OK
ReadX 10102 0 4096 4096 NT_STATUS_OK
Close 10102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10103 NT_STATUS_OK
ReadX 10103 0 4096 4096 NT_STATUS_OK
Close 10103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10104 NT_STATUS_OK
ReadX 10104 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10114 NT_STATUS_OK
Close 10114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
Close 10116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 4096 4096 NT_STATUS_OK
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10104 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10147 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10147 0 4096 4096 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10148 NT_STATUS_OK
ReadX 10148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 4096 4096 NT_STATUS_OK
ReadX 10149 4096 4096 4096 NT_STATUS_OK
ReadX 10149 8192 4096 4096 NT_STATUS_OK
ReadX 10149 12288 4096 4096 NT_STATUS_OK
ReadX 10149 16384 4096 4096 NT_STATUS_OK
ReadX 10149 20480 4096 4096 NT_STATUS_OK
ReadX 10149 24576 4096 4096 NT_STATUS_OK
ReadX 10149 28672 4096 4096 NT_STATUS_OK
ReadX 10149 32768 4096 4096 NT_STATUS_OK
ReadX 10149 36864 4096 4096 NT_STATUS_OK
ReadX 10149 40960 4096 4096 NT_STATUS_OK
ReadX 10149 45056 4096 4096 NT_STATUS_OK
ReadX 10149 49152 4096 4096 NT_STATUS_OK
ReadX 10149 53248 4096 4096 NT_STATUS_OK
ReadX 10149 57344 4096 4096 NT_STATUS_OK
ReadX 10149 61440 4096 4096 NT_STATUS_OK
ReadX 10149 65536 4096 4096 NT_STATUS_OK
ReadX 10149 69632 4096 4096 NT_STATUS_OK
ReadX 10149 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10149 1004 NT_STATUS_OK
WriteX 10149 0 4096 4096 NT_STATUS_OK
Close 10149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10150 NT_STATUS_OK
SET_FILE_INFORMATION 10150 1004 NT_STATUS_OK
Close 10150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10151 NT_STATUS_OK
ReadX 10151 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10152 NT_STATUS_OK
Close 10152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10155 NT_STATUS_OK
WriteX 10155 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10155 258 NT_STATUS_OK
WriteX 10155 0 65536 65536 NT_STATUS_OK
WriteX 10155 65536 19979 19979 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
QUERY_FILE_INFORMATION 10156 1004 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
SET_FILE_INFORMATION 10156 1004 NT_STATUS_OK
WriteX 10156 0 4096 4096 NT_STATUS_OK
Flush 10156 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
Close 10159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
Close 10160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10161 1004 NT_STATUS_OK
WriteX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10162 NT_STATUS_OK
Close 10162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10151 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10164 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10167 NT_STATUS_OK
WriteX 10167 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10167 258 NT_STATUS_OK
WriteX 10167 0 65536 65536 NT_STATUS_OK
WriteX 10167 65536 17654 17654 NT_STATUS_OK
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
Flush 10168 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
Flush 10168 NT_STATUS_OK
QUERY_FILE_INFORMATION 10168 1004 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
Flush 10168 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
Flush 10168 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
Flush 10168 NT_STATUS_OK
SET_FILE_INFORMATION 10168 1004 NT_STATUS_OK
WriteX 10168 0 4096 4096 NT_STATUS_OK
Flush 10168 NT_STATUS_OK
Close 10168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10169 NT_STATUS_OK
SET_FILE_INFORMATION 10169 1004 NT_STATUS_OK
Close 10169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10171 NT_STATUS_OK
Close 10171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
ReadX 10173 4096 4096 4096 NT_STATUS_OK
ReadX 10173 8192 4096 4096 NT_STATUS_OK
ReadX 10173 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10173 16384 4096 4096 NT_STATUS_OK
ReadX 10173 20480 4096 4096 NT_STATUS_OK
ReadX 10173 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
Close 10174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10176 1004 NT_STATUS_OK
WriteX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10179 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10182 NT_STATUS_OK
WriteX 10182 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10182 258 NT_STATUS_OK
WriteX 10182 0 65536 65536 NT_STATUS_OK
WriteX 10182 65536 19490 19490 NT_STATUS_OK
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
WriteX 10183 0 4096 4096 NT_STATUS_OK
Flush 10183 NT_STATUS_OK
WriteX 10183 0 4096 4096 NT_STATUS_OK
Flush 10183 NT_STATUS_OK
QUERY_FILE_INFORMATION 10183 1004 NT_STATUS_OK
WriteX 10183 0 4096 4096 NT_STATUS_OK
Flush 10183 NT_STATUS_OK
WriteX 10183 0 4096 4096 NT_STATUS_OK
Flush 10183 NT_STATUS_OK
WriteX 10183 0 4096 4096 NT_STATUS_OK
Flush 10183 NT_STATUS_OK
SET_FILE_INFORMATION 10183 1004 NT_STATUS_OK
WriteX 10183 0 4096 4096 NT_STATUS_OK
Flush 10183 NT_STATUS_OK
Close 10183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10184 NT_STATUS_OK
SET_FILE_INFORMATION 10184 1004 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10186 NT_STATUS_OK
Close 10186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10188 0 4096 4096 NT_STATUS_OK
Close 10188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
ReadX 10190 4096 4096 4096 NT_STATUS_OK
ReadX 10190 8192 4096 4096 NT_STATUS_OK
ReadX 10190 12288 4096 4096 NT_STATUS_OK
ReadX 10190 16384 4096 4096 NT_STATUS_OK
ReadX 10190 20480 4096 4096 NT_STATUS_OK
ReadX 10190 24576 4096 4096 NT_STATUS_OK
ReadX 10190 28672 4096 4096 NT_STATUS_OK
ReadX 10190 32768 4096 4096 NT_STATUS_OK
ReadX 10190 36864 4096 4096 NT_STATUS_OK
ReadX 10190 40960 4096 4096 NT_STATUS_OK
ReadX 10190 45056 4096 4096 NT_STATUS_OK
ReadX 10190 49152 4096 4096 NT_STATUS_OK
ReadX 10190 53248 4096 4096 NT_STATUS_OK
ReadX 10190 57344 4096 4096 NT_STATUS_OK
ReadX 10190 61440 4096 4096 NT_STATUS_OK
ReadX 10190 65536 4096 4096 NT_STATUS_OK
ReadX 10190 69632 4096 4096 NT_STATUS_OK
ReadX 10190 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10190 1004 NT_STATUS_OK
WriteX 10190 0 4096 4096 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10191 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
Close 10191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10196 NT_STATUS_OK
WriteX 10196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
WriteX 10196 0 65536 65536 NT_STATUS_OK
WriteX 10196 65536 8866 8866 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
SET_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
Close 10199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10201 1004 NT_STATUS_OK
WriteX 10201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10202 NT_STATUS_OK
Close 10202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10204 NT_STATUS_OK
Close 10204 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10207 NT_STATUS_OK
WriteX 10207 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10207 258 NT_STATUS_OK
WriteX 10207 0 65536 65536 NT_STATUS_OK
WriteX 10207 65536 9298 9298 NT_STATUS_OK
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
WriteX 10208 0 4096 4096 NT_STATUS_OK
Flush 10208 NT_STATUS_OK
SET_FILE_INFORMATION 10208 1004 NT_STATUS_OK
WriteX 10208 0 4096 4096 NT_STATUS_OK
Flush 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10209 NT_STATUS_OK
SET_FILE_INFORMATION 10209 1004 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10211 NT_STATUS_OK
Close 10211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10214 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10214 0 4096 4096 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10215 4096 4096 4096 NT_STATUS_OK
ReadX 10215 8192 4096 4096 NT_STATUS_OK
ReadX 10215 12288 4096 4096 NT_STATUS_OK
ReadX 10215 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10218 1004 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10215 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10224 NT_STATUS_OK
WriteX 10224 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 258 NT_STATUS_OK
WriteX 10224 0 65536 65536 NT_STATUS_OK
WriteX 10224 65536 11540 11540 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
SET_FILE_INFORMATION 10225 1004 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
Flush 10225 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10226 NT_STATUS_OK
SET_FILE_INFORMATION 10226 1004 NT_STATUS_OK
Close 10226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 61440 4096 4096 NT_STATUS_OK
ReadX 10230 126976 4096 4096 NT_STATUS_OK
WriteX 10230 0 65536 65536 NT_STATUS_OK
WriteX 10230 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 61440 4096 4096 NT_STATUS_OK
ReadX 10231 126976 4096 4096 NT_STATUS_OK
ReadX 10231 192512 4096 4096 NT_STATUS_OK
ReadX 10231 258048 4096 4096 NT_STATUS_OK
WriteX 10231 0 65536 65536 NT_STATUS_OK
WriteX 10231 65536 65536 65536 NT_STATUS_OK
WriteX 10231 131072 65536 65536 NT_STATUS_OK
WriteX 10231 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 61440 4096 4096 NT_STATUS_OK
ReadX 10232 126976 4096 4096 NT_STATUS_OK
ReadX 10232 192512 4096 4096 NT_STATUS_OK
ReadX 10232 258048 4096 4096 NT_STATUS_OK
ReadX 10232 323584 4096 4096 NT_STATUS_OK
ReadX 10232 389120 4096 4096 NT_STATUS_OK
ReadX 10232 454656 4096 4096 NT_STATUS_OK
ReadX 10232 520192 4096 4096 NT_STATUS_OK
WriteX 10232 0 65536 65536 NT_STATUS_OK
WriteX 10232 65536 65536 65536 NT_STATUS_OK
WriteX 10232 131072 65536 65536 NT_STATUS_OK
WriteX 10232 196608 65536 65536 NT_STATUS_OK
WriteX 10232 262144 65536 65536 NT_STATUS_OK
WriteX 10232 327680 65536 65536 NT_STATUS_OK
WriteX 10232 393216 65536 65536 NT_STATUS_OK
WriteX 10232 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
ReadX 10233 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10234 NT_STATUS_OK
WriteX 10234 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10234 258 NT_STATUS_OK
WriteX 10234 0 53 53 NT_STATUS_OK
Close 10234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10235 NT_STATUS_OK
Close 10235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10233 8192 4096 4096 NT_STATUS_OK
ReadX 10233 12288 4096 4096 NT_STATUS_OK
WriteX 10237 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 258 NT_STATUS_OK
ReadX 10233 16384 4096 4096 NT_STATUS_OK
ReadX 10233 20480 4096 4096 NT_STATUS_OK
WriteX 10237 0 15360 15360 NT_STATUS_OK
Close 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10238 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10238 1004 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Close 10238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10242 NT_STATUS_OK
Close 10242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10241 4096 4096 4096 NT_STATUS_OK
ReadX 10241 8192 4096 4096 NT_STATUS_OK
ReadX 10241 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 4096 4096 NT_STATUS_OK
ReadX 10244 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
ReadX 10245 8192 4096 4096 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10246 NT_STATUS_OK
WriteX 10246 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10246 258 NT_STATUS_OK
WriteX 10246 0 15360 15360 NT_STATUS_OK
Close 10246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10247 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10247 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10248 NT_STATUS_OK
Close 10248 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10251 NT_STATUS_OK
SET_FILE_INFORMATION 10251 1004 NT_STATUS_OK
Close 10251 NT_STATUS_OK
WriteX 10247 0 4096 4096 NT_STATUS_OK
Close 10247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
ReadX 10254 4096 4096 4096 NT_STATUS_OK
ReadX 10254 8192 4096 4096 NT_STATUS_OK
ReadX 10254 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10254 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10254 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10256 NT_STATUS_OK
WriteX 10256 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10256 258 NT_STATUS_OK
WriteX 10256 0 53 53 NT_STATUS_OK
Close 10256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10255 4096 4096 4096 NT_STATUS_OK
ReadX 10255 8192 4096 4096 NT_STATUS_OK
ReadX 10255 12288 4096 4096 NT_STATUS_OK
WriteX 10259 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10259 258 NT_STATUS_OK
WriteX 10259 0 12006 12006 NT_STATUS_OK
Close 10259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10260 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10260 1004 NT_STATUS_OK
WriteX 10260 0 4096 4096 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10261 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10264 NT_STATUS_OK
Close 10264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10263 4096 4096 4096 NT_STATUS_OK
ReadX 10263 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10266 NT_STATUS_OK
WriteX 10266 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 258 NT_STATUS_OK
WriteX 10266 0 11991 11991 NT_STATUS_OK
Close 10266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10267 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10267 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10271 NT_STATUS_OK
SET_FILE_INFORMATION 10271 1004 NT_STATUS_OK
Close 10271 NT_STATUS_OK
WriteX 10267 0 4096 4096 NT_STATUS_OK
Close 10267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10272 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10275 NT_STATUS_OK
Close 10275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10274 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10274 1004 NT_STATUS_OK
ReadX 10274 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10274 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10274 1004 NT_STATUS_OK
Close 10250 NT_STATUS_OK
WriteX 10254 0 19054 19054 NT_STATUS_OK
WriteX 10274 0 12288 12288 NT_STATUS_OK
Close 10270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10277 NT_STATUS_OK
Close 10277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10274 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10279 NT_STATUS_OK
Close 10279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 0 61440 61440 NT_STATUS_OK
ReadX 10281 61440 4096 4096 NT_STATUS_OK
ReadX 10281 65536 61440 61440 NT_STATUS_OK
ReadX 10281 126976 4096 4096 NT_STATUS_OK
ReadX 10281 131072 61440 61440 NT_STATUS_OK
ReadX 10281 192512 4096 4096 NT_STATUS_OK
ReadX 10281 196608 61440 61440 NT_STATUS_OK
ReadX 10281 258048 4096 4096 NT_STATUS_OK
ReadX 10281 262144 61440 61440 NT_STATUS_OK
ReadX 10281 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 61440 61440 NT_STATUS_OK
ReadX 10282 61440 4096 4096 NT_STATUS_OK
ReadX 10282 65536 61440 61440 NT_STATUS_OK
ReadX 10282 126976 4096 4096 NT_STATUS_OK
ReadX 10282 131072 61440 61440 NT_STATUS_OK
ReadX 10282 192512 4096 4096 NT_STATUS_OK
ReadX 10282 196608 61440 61440 NT_STATUS_OK
ReadX 10282 258048 4096 4096 NT_STATUS_OK
ReadX 10282 262144 61440 61440 NT_STATUS_OK
ReadX 10282 323584 4096 4096 NT_STATUS_OK
ReadX 10282 327680 61440 61440 NT_STATUS_OK
ReadX 10282 389120 4096 4096 NT_STATUS_OK
ReadX 10282 393216 61440 61440 NT_STATUS_OK
ReadX 10282 454656 4096 4096 NT_STATUS_OK
ReadX 10282 458752 61440 61440 NT_STATUS_OK
ReadX 10282 520192 4096 4096 NT_STATUS_OK
ReadX 10282 524288 61440 61440 NT_STATUS_OK
ReadX 10282 585728 4096 4096 NT_STATUS_OK
ReadX 10282 589824 61440 61440 NT_STATUS_OK
ReadX 10282 651264 4096 4096 NT_STATUS_OK
ReadX 10282 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 61440 61440 NT_STATUS_OK
ReadX 10283 61440 4096 4096 NT_STATUS_OK
ReadX 10283 65536 61440 61440 NT_STATUS_OK
ReadX 10283 126976 4096 4096 NT_STATUS_OK
ReadX 10283 131072 61440 61440 NT_STATUS_OK
ReadX 10283 192512 4096 4096 NT_STATUS_OK
ReadX 10283 196608 61440 61440 NT_STATUS_OK
ReadX 10283 258048 4096 4096 NT_STATUS_OK
ReadX 10283 262144 61440 61440 NT_STATUS_OK
ReadX 10283 323584 4096 4096 NT_STATUS_OK
ReadX 10283 327680 61440 61440 NT_STATUS_OK
ReadX 10283 389120 4096 4096 NT_STATUS_OK
ReadX 10283 393216 61440 61440 NT_STATUS_OK
ReadX 10283 454656 4096 4096 NT_STATUS_OK
ReadX 10283 458752 61440 61440 NT_STATUS_OK
ReadX 10283 520192 4096 4096 NT_STATUS_OK
ReadX 10283 524288 61440 61440 NT_STATUS_OK
ReadX 10283 585728 4096 4096 NT_STATUS_OK
ReadX 10283 589824 61440 61440 NT_STATUS_OK
ReadX 10283 651264 4096 4096 NT_STATUS_OK
ReadX 10283 655360 61440 61440 NT_STATUS_OK
ReadX 10283 716800 4096 4096 NT_STATUS_OK
ReadX 10283 720896 61440 61440 NT_STATUS_OK
ReadX 10283 782336 4096 4096 NT_STATUS_OK
ReadX 10283 786432 61440 61440 NT_STATUS_OK
ReadX 10283 847872 4096 4096 NT_STATUS_OK
ReadX 10283 851968 61440 61440 NT_STATUS_OK
ReadX 10283 913408 4096 4096 NT_STATUS_OK
ReadX 10283 917504 61440 61440 NT_STATUS_OK
ReadX 10283 978944 4096 4096 NT_STATUS_OK
ReadX 10283 983040 61440 61440 NT_STATUS_OK
ReadX 10283 1044480 4096 4096 NT_STATUS_OK
ReadX 10283 1048576 61440 61440 NT_STATUS_OK
ReadX 10283 1110016 4096 4096 NT_STATUS_OK
ReadX 10283 1114112 61440 61440 NT_STATUS_OK
ReadX 10283 1175552 4096 4096 NT_STATUS_OK
ReadX 10283 1179648 61440 61440 NT_STATUS_OK
ReadX 10283 1241088 4096 4096 NT_STATUS_OK
ReadX 10283 1245184 61440 61440 NT_STATUS_OK
ReadX 10283 1306624 4096 4096 NT_STATUS_OK
ReadX 10283 1310720 61440 61440 NT_STATUS_OK
ReadX 10283 1372160 4096 4096 NT_STATUS_OK
ReadX 10283 1376256 61440 61440 NT_STATUS_OK
ReadX 10283 1437696 4096 4096 NT_STATUS_OK
ReadX 10283 1441792 61440 61440 NT_STATUS_OK
ReadX 10283 1503232 4096 4096 NT_STATUS_OK
ReadX 10283 1507328 61440 61440 NT_STATUS_OK
ReadX 10283 1568768 4096 4096 NT_STATUS_OK
ReadX 10283 1572864 61440 61440 NT_STATUS_OK
ReadX 10283 1634304 4096 4096 NT_STATUS_OK
ReadX 10283 1638400 61440 61440 NT_STATUS_OK
ReadX 10283 1699840 4096 4096 NT_STATUS_OK
ReadX 10283 1703936 61440 61440 NT_STATUS_OK
ReadX 10283 1765376 4096 4096 NT_STATUS_OK
ReadX 10283 1769472 61440 61440 NT_STATUS_OK
ReadX 10283 1830912 4096 4096 NT_STATUS_OK
ReadX 10283 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10284 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10285 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10290 NT_STATUS_OK
QUERY_FILE_INFORMATION 10290 1004 NT_STATUS_OK
WriteX 10290 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10290 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10291 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10292 NT_STATUS_OK
WriteX 10292 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10292 258 NT_STATUS_OK
WriteX 10292 0 491 491 NT_STATUS_OK
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10290 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10296 NT_STATUS_OK
WriteX 10296 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10296 258 NT_STATUS_OK
WriteX 10296 0 543 543 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Close 10283 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10309 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10310 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 1004 NT_STATUS_OK
WriteX 10310 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
WriteX 10310 0 2048 2048 NT_STATUS_OK
Close 10310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10311 0 4096 4096 NT_STATUS_OK
Flush 10311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10311 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10315 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10316 NT_STATUS_OK
WriteX 10316 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
WriteX 10316 0 2048 2048 NT_STATUS_OK
Close 10316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10322 NT_STATUS_OK
WriteX 10322 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10322 258 NT_STATUS_OK
WriteX 10322 0 2048 2048 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 2048 2048 NT_STATUS_OK
ReadX 10301 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10305 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10317 0 4096 4096 NT_STATUS_OK
WriteX 10301 0 8192 8192 NT_STATUS_OK
WriteX 10302 0 4096 4096 NT_STATUS_OK
WriteX 10303 0 4096 4096 NT_STATUS_OK
ReadX 10317 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10326 NT_STATUS_OK
ReadX 10326 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10327 NT_STATUS_OK
QUERY_FILE_INFORMATION 10327 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10304 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10347 NT_STATUS_OK
QUERY_FILE_INFORMATION 10347 1004 NT_STATUS_OK
WriteX 10347 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10347 258 NT_STATUS_OK
WriteX 10347 0 2048 2048 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10350 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10354 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10355 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1004 NT_STATUS_OK
WriteX 10355 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 258 NT_STATUS_OK
WriteX 10355 0 2048 2048 NT_STATUS_OK
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10348 0 4096 4096 NT_STATUS_OK
Flush 10348 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10348 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10350 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10358 NT_STATUS_OK
WriteX 10358 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10358 258 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10361 NT_STATUS_OK
WriteX 10361 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 258 NT_STATUS_OK
WriteX 10361 0 4096 4096 NT_STATUS_OK
Close 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10362 0 4096 4096 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10350 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10368 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10369 NT_STATUS_OK
WriteX 10369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 258 NT_STATUS_OK
WriteX 10369 0 2048 2048 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10384 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10386 NT_STATUS_OK
QUERY_FILE_INFORMATION 10386 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10391 NT_STATUS_OK
ReadX 10391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10392 NT_STATUS_OK
ReadX 10392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10394 NT_STATUS_OK
ReadX 10394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10406 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
WriteX 10406 0 2048 2048 NT_STATUS_OK
Close 10406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10418 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 1004 NT_STATUS_OK
WriteX 10418 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 258 NT_STATUS_OK
WriteX 10418 0 2048 2048 NT_STATUS_OK
Close 10418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10421 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10426 NT_STATUS_OK
QUERY_FILE_INFORMATION 10426 1004 NT_STATUS_OK
WriteX 10426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10426 258 NT_STATUS_OK
WriteX 10426 0 2048 2048 NT_STATUS_OK
Close 10426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10407 0 4096 4096 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
WriteX 10419 0 4096 4096 NT_STATUS_OK
Flush 10419 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Flush 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10407 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10419 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10409 4096 16384 16384 NT_STATUS_OK
ReadX 10389 4096 16384 16384 NT_STATUS_OK
ReadX 10421 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10429 NT_STATUS_OK
ReadX 10429 0 2048 2048 NT_STATUS_OK
WriteX 10429 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10430 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10429 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10389 NT_STATUS_OK
Close 10390 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10432 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10434 NT_STATUS_OK
QUERY_FILE_INFORMATION 10434 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10436 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10437 4096 16384 16384 NT_STATUS_OK
WriteX 10437 0 4096 4096 NT_STATUS_OK
WriteX 10438 0 4096 4096 NT_STATUS_OK
WriteX 10439 0 4096 4096 NT_STATUS_OK
WriteX 10440 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10442 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10443 NT_STATUS_OK
ReadX 10443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10444 NT_STATUS_OK
ReadX 10444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10447 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10456 NT_STATUS_OK
ReadX 10456 0 8192 8192 NT_STATUS_OK
ReadX 10443 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10457 0 4096 4096 NT_STATUS_OK
ReadX 10457 4096 4096 4096 NT_STATUS_OK
ReadX 10457 8192 4096 4096 NT_STATUS_OK
WriteX 10443 0 4096 4096 NT_STATUS_OK
WriteX 10444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
ReadX 10458 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10437 0 4096 4096 NT_STATUS_OK
WriteX 10438 0 4096 4096 NT_STATUS_OK
WriteX 10439 0 4096 4096 NT_STATUS_OK
WriteX 10440 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10463 NT_STATUS_OK
QUERY_FILE_INFORMATION 10463 1004 NT_STATUS_OK
WriteX 10463 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10463 258 NT_STATUS_OK
WriteX 10463 0 2048 2048 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
ReadX 10466 4096 4096 4096 NT_STATUS_OK
WriteX 10466 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10468 NT_STATUS_OK
ReadX 10468 0 4096 4096 NT_STATUS_OK
ReadX 10468 4096 4096 4096 NT_STATUS_OK
WriteX 10468 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10469 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10443 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10447 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Close 10468 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Close 10458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10471 0 4096 4096 NT_STATUS_OK
ReadX 10471 4096 4096 4096 NT_STATUS_OK
ReadX 10471 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10477 NT_STATUS_OK
ReadX 10477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10483 NT_STATUS_OK
ReadX 10483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
ReadX 10472 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10489 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 1004 NT_STATUS_OK
WriteX 10489 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 258 NT_STATUS_OK
WriteX 10489 0 2048 2048 NT_STATUS_OK
Close 10489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10494 NT_STATUS_OK
Close 10494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
WriteX 10495 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 258 NT_STATUS_OK
WriteX 10495 0 2048 2048 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10496 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10479 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10497 NT_STATUS_OK
QUERY_FILE_INFORMATION 10497 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Close 10477 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10499 NT_STATUS_OK
QUERY_FILE_INFORMATION 10499 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10501 NT_STATUS_OK
ReadX 10501 61440 4096 4096 NT_STATUS_OK
ReadX 10501 126976 4096 4096 NT_STATUS_OK
WriteX 10501 0 65536 65536 NT_STATUS_OK
WriteX 10501 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10502 NT_STATUS_OK
ReadX 10502 61440 4096 4096 NT_STATUS_OK
ReadX 10502 126976 4096 4096 NT_STATUS_OK
ReadX 10502 192512 4096 4096 NT_STATUS_OK
ReadX 10502 258048 4096 4096 NT_STATUS_OK
WriteX 10502 0 65536 65536 NT_STATUS_OK
WriteX 10502 65536 65536 65536 NT_STATUS_OK
WriteX 10502 131072 65536 65536 NT_STATUS_OK
WriteX 10502 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 61440 4096 4096 NT_STATUS_OK
ReadX 10503 126976 4096 4096 NT_STATUS_OK
ReadX 10503 192512 4096 4096 NT_STATUS_OK
ReadX 10503 258048 4096 4096 NT_STATUS_OK
ReadX 10503 323584 4096 4096 NT_STATUS_OK
ReadX 10503 389120 4096 4096 NT_STATUS_OK
ReadX 10503 454656 4096 4096 NT_STATUS_OK
ReadX 10503 520192 4096 4096 NT_STATUS_OK
WriteX 10503 0 65536 65536 NT_STATUS_OK
WriteX 10503 65536 65536 65536 NT_STATUS_OK
WriteX 10503 131072 65536 65536 NT_STATUS_OK
WriteX 10503 196608 65536 65536 NT_STATUS_OK
WriteX 10503 262144 65536 65536 NT_STATUS_OK
WriteX 10503 327680 65536 65536 NT_STATUS_OK
WriteX 10503 393216 65536 65536 NT_STATUS_OK
WriteX 10503 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10504 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10504 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10504 8192 4096 4096 NT_STATUS_OK
ReadX 10504 12288 4096 4096 NT_STATUS_OK
ReadX 10504 16384 4096 4096 NT_STATUS_OK
ReadX 10504 20480 4096 4096 NT_STATUS_OK
ReadX 10504 24576 4096 4096 NT_STATUS_OK
ReadX 10504 28672 4096 4096 NT_STATUS_OK
ReadX 10504 32768 4096 4096 NT_STATUS_OK
ReadX 10504 36864 4096 4096 NT_STATUS_OK
ReadX 10504 40960 4096 4096 NT_STATUS_OK
ReadX 10504 45056 4096 4096 NT_STATUS_OK
ReadX 10504 49152 4096 4096 NT_STATUS_OK
ReadX 10504 53248 4096 4096 NT_STATUS_OK
ReadX 10504 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10504 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10505 NT_STATUS_OK
Close 10505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10501 NT_STATUS_OK
Close 10502 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10507 NT_STATUS_OK
WriteX 10507 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10507 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10507 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10507 1004 NT_STATUS_OK
WriteX 10507 0 57088 57088 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
Flush 10507 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10508 NT_STATUS_OK
SET_FILE_INFORMATION 10508 1004 NT_STATUS_OK
Close 10508 NT_STATUS_OK
SET_FILE_INFORMATION 10507 1004 NT_STATUS_OK
WriteX 10507 0 4096 4096 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10511 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10512 NT_STATUS_OK
WriteX 10512 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10512 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10512 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10512 1004 NT_STATUS_OK
WriteX 10512 0 51456 51456 NT_STATUS_OK
WriteX 10512 0 4096 4096 NT_STATUS_OK
Flush 10512 NT_STATUS_OK
SET_FILE_INFORMATION 10512 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10512 1004 NT_STATUS_OK
WriteX 10512 0 4096 4096 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10514 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10516 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10521 NT_STATUS_OK
WriteX 10521 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 258 NT_STATUS_OK
WriteX 10521 0 53077 53077 NT_STATUS_OK
Close 10521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10522 NT_STATUS_OK
WriteX 10522 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10522 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10522 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10522 1004 NT_STATUS_OK
WriteX 10522 0 65536 65536 NT_STATUS_OK
WriteX 10522 65536 1856 1856 NT_STATUS_OK
WriteX 10522 0 4096 4096 NT_STATUS_OK
Flush 10522 NT_STATUS_OK
SET_FILE_INFORMATION 10522 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10522 1004 NT_STATUS_OK
WriteX 10522 0 4096 4096 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10531 NT_STATUS_OK
WriteX 10531 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10531 258 NT_STATUS_OK
WriteX 10531 0 7983 7983 NT_STATUS_OK
Close 10531 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10533 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10536 NT_STATUS_OK
WriteX 10536 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 258 NT_STATUS_OK
WriteX 10536 0 65536 65536 NT_STATUS_OK
WriteX 10536 65536 65536 65536 NT_STATUS_OK
WriteX 10536 131072 65536 65536 NT_STATUS_OK
WriteX 10536 196608 65536 65536 NT_STATUS_OK
WriteX 10536 262144 65536 65536 NT_STATUS_OK
WriteX 10536 327680 65536 65536 NT_STATUS_OK
WriteX 10536 393216 65536 65536 NT_STATUS_OK
WriteX 10536 458752 46731 46731 NT_STATUS_OK
Close 10536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10537 NT_STATUS_OK
WriteX 10537 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10537 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10526 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10537 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10537 1004 NT_STATUS_OK
WriteX 10537 0 65536 65536 NT_STATUS_OK
WriteX 10537 65536 22848 22848 NT_STATUS_OK
WriteX 10537 0 4096 4096 NT_STATUS_OK
Flush 10537 NT_STATUS_OK
SET_FILE_INFORMATION 10537 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10537 1004 NT_STATUS_OK
WriteX 10537 0 4096 4096 NT_STATUS_OK
Close 10537 NT_STATUS_OK
Close 10526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10539 NT_STATUS_OK
Close 10539 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10541 NT_STATUS_OK
ReadX 10541 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10541 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10542 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10542 1004 NT_STATUS_OK
ReadX 10542 8192 4096 4096 NT_STATUS_OK
ReadX 10542 12288 4096 4096 NT_STATUS_OK
ReadX 10542 16384 4096 4096 NT_STATUS_OK
ReadX 10542 20480 4096 4096 NT_STATUS_OK
ReadX 10542 24576 4096 4096 NT_STATUS_OK
ReadX 10542 28672 4096 4096 NT_STATUS_OK
ReadX 10542 32768 4096 4096 NT_STATUS_OK
ReadX 10542 36864 4096 4096 NT_STATUS_OK
ReadX 10542 40960 4096 4096 NT_STATUS_OK
ReadX 10542 45056 4096 4096 NT_STATUS_OK
ReadX 10542 49152 4096 4096 NT_STATUS_OK
ReadX 10542 53248 4096 4096 NT_STATUS_OK
ReadX 10542 57344 4096 4096 NT_STATUS_OK
ReadX 10542 61440 4096 4096 NT_STATUS_OK
ReadX 10542 65536 4096 4096 NT_STATUS_OK
ReadX 10542 69632 4096 4096 NT_STATUS_OK
ReadX 10542 73728 4096 4096 NT_STATUS_OK
ReadX 10542 77824 4096 4096 NT_STATUS_OK
ReadX 10542 81920 4096 4096 NT_STATUS_OK
ReadX 10542 86016 4096 4096 NT_STATUS_OK
ReadX 10542 90112 4096 4096 NT_STATUS_OK
ReadX 10542 94208 4096 4096 NT_STATUS_OK
ReadX 10542 98304 4096 4096 NT_STATUS_OK
ReadX 10542 102400 4096 4096 NT_STATUS_OK
ReadX 10542 106496 4096 4096 NT_STATUS_OK
ReadX 10542 110592 4096 4096 NT_STATUS_OK
ReadX 10542 114688 4096 4096 NT_STATUS_OK
ReadX 10542 118784 4096 4096 NT_STATUS_OK
ReadX 10542 122880 4096 4096 NT_STATUS_OK
ReadX 10542 126976 4096 4096 NT_STATUS_OK
ReadX 10542 131072 4096 4096 NT_STATUS_OK
ReadX 10542 135168 4096 4096 NT_STATUS_OK
ReadX 10542 139264 4096 4096 NT_STATUS_OK
ReadX 10542 143360 4096 4096 NT_STATUS_OK
ReadX 10542 147456 4096 4096 NT_STATUS_OK
ReadX 10542 151552 4096 4096 NT_STATUS_OK
ReadX 10542 155648 4096 4096 NT_STATUS_OK
ReadX 10542 159744 4096 4096 NT_STATUS_OK
ReadX 10542 163840 4096 4096 NT_STATUS_OK
ReadX 10542 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10542 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10541 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10545 NT_STATUS_OK
WriteX 10545 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10545 258 NT_STATUS_OK
Close 10542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10546 NT_STATUS_OK
SET_FILE_INFORMATION 10546 1004 NT_STATUS_OK
Close 10546 NT_STATUS_OK
WriteX 10545 0 42388 42388 NT_STATUS_OK
Close 10545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10547 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
ReadX 10549 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10550 NT_STATUS_OK
WriteX 10550 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10550 258 NT_STATUS_OK
SET_FILE_INFORMATION 10550 1004 NT_STATUS_OK
WriteX 10550 0 42652 42652 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Close 10549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10554 NT_STATUS_OK
ReadX 10554 0 4096 4096 NT_STATUS_OK
ReadX 10554 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10559 NT_STATUS_OK
WriteX 10559 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10559 258 NT_STATUS_OK
WriteX 10559 0 65536 65536 NT_STATUS_OK
WriteX 10559 65536 49 49 NT_STATUS_OK
Close 10559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10560 NT_STATUS_OK
ReadX 10560 0 61440 61440 NT_STATUS_OK
ReadX 10560 61440 4096 4096 NT_STATUS_OK
ReadX 10560 65536 61440 61440 NT_STATUS_OK
ReadX 10560 126976 4096 4096 NT_STATUS_OK
ReadX 10560 131072 61440 61440 NT_STATUS_OK
ReadX 10560 192512 4096 4096 NT_STATUS_OK
ReadX 10560 196608 61440 61440 NT_STATUS_OK
ReadX 10560 258048 4096 4096 NT_STATUS_OK
ReadX 10560 262144 61440 61440 NT_STATUS_OK
ReadX 10560 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 61440 61440 NT_STATUS_OK
ReadX 10561 61440 4096 4096 NT_STATUS_OK
ReadX 10561 65536 61440 61440 NT_STATUS_OK
ReadX 10561 126976 4096 4096 NT_STATUS_OK
ReadX 10561 131072 61440 61440 NT_STATUS_OK
ReadX 10561 192512 4096 4096 NT_STATUS_OK
ReadX 10561 196608 61440 61440 NT_STATUS_OK
ReadX 10561 258048 4096 4096 NT_STATUS_OK
ReadX 10561 262144 61440 61440 NT_STATUS_OK
ReadX 10561 323584 4096 4096 NT_STATUS_OK
ReadX 10561 327680 61440 61440 NT_STATUS_OK
ReadX 10561 389120 4096 4096 NT_STATUS_OK
ReadX 10561 393216 61440 61440 NT_STATUS_OK
ReadX 10561 454656 4096 4096 NT_STATUS_OK
ReadX 10561 458752 61440 61440 NT_STATUS_OK
ReadX 10561 520192 4096 4096 NT_STATUS_OK
ReadX 10561 524288 61440 61440 NT_STATUS_OK
ReadX 10561 585728 4096 4096 NT_STATUS_OK
ReadX 10561 589824 61440 61440 NT_STATUS_OK
ReadX 10561 651264 4096 4096 NT_STATUS_OK
ReadX 10561 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 61440 61440 NT_STATUS_OK
ReadX 10562 61440 4096 4096 NT_STATUS_OK
ReadX 10562 65536 61440 61440 NT_STATUS_OK
ReadX 10562 126976 4096 4096 NT_STATUS_OK
ReadX 10562 131072 61440 61440 NT_STATUS_OK
ReadX 10562 192512 4096 4096 NT_STATUS_OK
ReadX 10562 196608 61440 61440 NT_STATUS_OK
ReadX 10562 258048 4096 4096 NT_STATUS_OK
ReadX 10562 262144 61440 61440 NT_STATUS_OK
ReadX 10562 323584 4096 4096 NT_STATUS_OK
ReadX 10562 327680 61440 61440 NT_STATUS_OK
ReadX 10562 389120 4096 4096 NT_STATUS_OK
ReadX 10562 393216 61440 61440 NT_STATUS_OK
ReadX 10562 454656 4096 4096 NT_STATUS_OK
ReadX 10562 458752 61440 61440 NT_STATUS_OK
ReadX 10562 520192 4096 4096 NT_STATUS_OK
ReadX 10562 524288 61440 61440 NT_STATUS_OK
ReadX 10562 585728 4096 4096 NT_STATUS_OK
ReadX 10562 589824 61440 61440 NT_STATUS_OK
ReadX 10562 651264 4096 4096 NT_STATUS_OK
ReadX 10562 655360 61440 61440 NT_STATUS_OK
ReadX 10562 716800 4096 4096 NT_STATUS_OK
ReadX 10562 720896 61440 61440 NT_STATUS_OK
ReadX 10562 782336 4096 4096 NT_STATUS_OK
ReadX 10562 786432 61440 61440 NT_STATUS_OK
ReadX 10562 847872 4096 4096 NT_STATUS_OK
ReadX 10562 851968 61440 61440 NT_STATUS_OK
ReadX 10562 913408 4096 4096 NT_STATUS_OK
ReadX 10562 917504 61440 61440 NT_STATUS_OK
ReadX 10562 978944 4096 4096 NT_STATUS_OK
ReadX 10562 983040 61440 61440 NT_STATUS_OK
ReadX 10562 1044480 4096 4096 NT_STATUS_OK
ReadX 10562 1048576 61440 61440 NT_STATUS_OK
ReadX 10562 1110016 4096 4096 NT_STATUS_OK
ReadX 10562 1114112 61440 61440 NT_STATUS_OK
ReadX 10562 1175552 4096 4096 NT_STATUS_OK
ReadX 10562 1179648 61440 61440 NT_STATUS_OK
ReadX 10562 1241088 4096 4096 NT_STATUS_OK
ReadX 10562 1245184 61440 61440 NT_STATUS_OK
ReadX 10562 1306624 4096 4096 NT_STATUS_OK
ReadX 10562 1310720 61440 61440 NT_STATUS_OK
ReadX 10562 1372160 4096 4096 NT_STATUS_OK
ReadX 10562 1376256 61440 61440 NT_STATUS_OK
ReadX 10562 1437696 4096 4096 NT_STATUS_OK
ReadX 10562 1441792 61440 61440 NT_STATUS_OK
ReadX 10562 1503232 4096 4096 NT_STATUS_OK
ReadX 10562 1507328 61440 61440 NT_STATUS_OK
ReadX 10562 1568768 4096 4096 NT_STATUS_OK
ReadX 10562 1572864 61440 61440 NT_STATUS_OK
ReadX 10562 1634304 4096 4096 NT_STATUS_OK
ReadX 10562 1638400 61440 61440 NT_STATUS_OK
ReadX 10562 1699840 4096 4096 NT_STATUS_OK
ReadX 10562 1703936 61440 61440 NT_STATUS_OK
ReadX 10562 1765376 4096 4096 NT_STATUS_OK
ReadX 10562 1769472 61440 61440 NT_STATUS_OK
ReadX 10562 1830912 4096 4096 NT_STATUS_OK
ReadX 10562 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10564 NT_STATUS_OK
QUERY_FILE_INFORMATION 10564 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10564 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10564 1005 NT_STATUS_OK
ReadX 10564 2156 24 24 NT_STATUS_OK
ReadX 10564 2139 276 276 NT_STATUS_OK
ReadX 10564 2136 14 14 NT_STATUS_OK
ReadX 10564 2136 7 7 NT_STATUS_OK
ReadX 10564 2138 12 12 NT_STATUS_OK
ReadX 10564 2137 8 8 NT_STATUS_OK
ReadX 10564 2135 15 15 NT_STATUS_OK
ReadX 10564 0 16 16 NT_STATUS_OK
ReadX 10564 16 2048 2048 NT_STATUS_OK
ReadX 10564 2064 2048 2048 NT_STATUS_OK
ReadX 10564 257 2048 2048 NT_STATUS_OK
ReadX 10564 385 2048 2048 NT_STATUS_OK
ReadX 10564 513 2048 2048 NT_STATUS_OK
ReadX 10564 641 2048 2048 NT_STATUS_OK
ReadX 10564 769 2048 2048 NT_STATUS_OK
ReadX 10564 897 2048 2048 NT_STATUS_OK
ReadX 10564 1025 2048 2048 NT_STATUS_OK
ReadX 10564 1153 2048 2048 NT_STATUS_OK
ReadX 10564 1281 2048 2048 NT_STATUS_OK
ReadX 10564 1409 2048 2048 NT_STATUS_OK
ReadX 10564 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10554 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10569 NT_STATUS_OK
WriteX 10569 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10569 258 NT_STATUS_OK
WriteX 10569 0 10575 10575 NT_STATUS_OK
Flush 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10574 NT_STATUS_OK
LockX 10574 2147483538 1 NT_STATUS_OK
UnlockX 10574 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1005 NT_STATUS_OK
ReadX 10574 0 512 512 NT_STATUS_OK
ReadX 10574 512 512 512 NT_STATUS_OK
ReadX 10574 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10575 NT_STATUS_OK
QUERY_FILE_INFORMATION 10575 1005 NT_STATUS_OK
ReadX 10575 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10576 NT_STATUS_OK
LockX 10576 2147483538 1 NT_STATUS_OK
UnlockX 10576 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10576 1005 NT_STATUS_OK
ReadX 10576 0 512 512 NT_STATUS_OK
ReadX 10576 512 512 512 NT_STATUS_OK
ReadX 10576 1024 512 512 NT_STATUS_OK
ReadX 10576 288 20 20 NT_STATUS_OK
ReadX 10576 308 2084 2084 NT_STATUS_OK
ReadX 10576 388 2084 2084 NT_STATUS_OK
ReadX 10576 388 2084 2084 NT_STATUS_OK
ReadX 10563 2157 1386 1386 NT_STATUS_OK
ReadX 10576 2472 399 399 NT_STATUS_OK
ReadX 10576 3072 1536 1536 NT_STATUS_OK
ReadX 10576 544 149 149 NT_STATUS_OK
ReadX 10576 693 485 485 NT_STATUS_OK
Close 10576 NT_STATUS_OK
ReadX 10563 2157 4096 4096 NT_STATUS_OK
ReadX 10563 6253 4096 4096 NT_STATUS_OK
ReadX 10563 10349 4096 4096 NT_STATUS_OK
ReadX 10563 14445 4096 4096 NT_STATUS_OK
ReadX 10563 18541 4096 4096 NT_STATUS_OK
ReadX 10563 22637 256 256 NT_STATUS_OK
ReadX 10563 22893 4096 4096 NT_STATUS_OK
ReadX 10563 26989 4096 4096 NT_STATUS_OK
ReadX 10563 31085 4096 4096 NT_STATUS_OK
ReadX 10563 35181 4096 4096 NT_STATUS_OK
ReadX 10563 39277 4096 4096 NT_STATUS_OK
ReadX 10563 43373 4096 4096 NT_STATUS_OK
ReadX 10563 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10563 2157 1024 1024 NT_STATUS_OK
ReadX 10563 1667 4688 4688 NT_STATUS_OK
ReadX 10563 6355 3516 3516 NT_STATUS_OK
ReadX 10563 9871 16384 16384 NT_STATUS_OK
ReadX 10563 26255 3771 3771 NT_STATUS_OK
ReadX 10563 30026 2048 2048 NT_STATUS_OK
ReadX 10563 32074 1024 1024 NT_STATUS_OK
ReadX 10563 33098 6652 6652 NT_STATUS_OK
ReadX 10563 39750 16384 16384 NT_STATUS_OK
ReadX 10563 56134 10496 10496 NT_STATUS_OK
ReadX 10563 66630 1784 1784 NT_STATUS_OK
ReadX 10563 68414 90 90 NT_STATUS_OK
ReadX 10563 68504 273 273 NT_STATUS_OK
ReadX 10563 68777 1600 1600 NT_STATUS_OK
ReadX 10563 70377 640 640 NT_STATUS_OK
ReadX 10563 71017 1280 1280 NT_STATUS_OK
ReadX 10563 72297 8464 8464 NT_STATUS_OK
ReadX 10563 80761 158 158 NT_STATUS_OK
ReadX 10563 80919 912 912 NT_STATUS_OK
ReadX 10563 81831 1980 1980 NT_STATUS_OK
ReadX 10563 83811 2256 2256 NT_STATUS_OK
ReadX 10563 86067 400 400 NT_STATUS_OK
ReadX 10563 86467 252 252 NT_STATUS_OK
ReadX 10563 86719 42 42 NT_STATUS_OK
ReadX 10563 86761 725 725 NT_STATUS_OK
ReadX 10563 2009 512 512 NT_STATUS_OK
ReadX 10563 3895 9 9 NT_STATUS_OK
ReadX 10563 3781 46 46 NT_STATUS_OK
ReadX 10563 4059 92 92 NT_STATUS_OK
ReadX 10563 3781 92 92 NT_STATUS_OK
ReadX 10563 3986 184 184 NT_STATUS_OK
ReadX 10563 3987 16384 16384 NT_STATUS_OK
ReadX 10563 3902 16384 16384 NT_STATUS_OK
ReadX 10563 3781 10240 10240 NT_STATUS_OK
ReadX 10563 3821 16384 16384 NT_STATUS_OK
ReadX 10563 3891 935 935 NT_STATUS_OK
ReadX 10563 4060 10240 10240 NT_STATUS_OK
ReadX 10563 4059 184 184 NT_STATUS_OK
ReadX 10563 256 184 184 NT_STATUS_OK
ReadX 10563 256 1026 1026 NT_STATUS_OK
ReadX 10563 3901 326 326 NT_STATUS_OK
ReadX 10563 3899 652 652 NT_STATUS_OK
ReadX 10563 256 2 2 NT_STATUS_OK
ReadX 10563 258 4948 4948 NT_STATUS_OK
Close 10563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10581 NT_STATUS_OK
WriteX 10581 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10581 258 NT_STATUS_OK
WriteX 10581 0 65536 65536 NT_STATUS_OK
WriteX 10581 65536 65536 65536 NT_STATUS_OK
WriteX 10581 131072 65536 65536 NT_STATUS_OK
WriteX 10581 196608 65536 65536 NT_STATUS_OK
WriteX 10581 262144 65536 65536 NT_STATUS_OK
WriteX 10581 327680 65536 65536 NT_STATUS_OK
WriteX 10581 393216 65536 65536 NT_STATUS_OK
WriteX 10581 458752 65536 65536 NT_STATUS_OK
WriteX 10581 524288 65536 65536 NT_STATUS_OK
WriteX 10581 589824 35257 35257 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10586 NT_STATUS_OK
WriteX 10586 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 258 NT_STATUS_OK
WriteX 10586 0 65536 65536 NT_STATUS_OK
WriteX 10586 65536 65536 65536 NT_STATUS_OK
WriteX 10586 131072 65536 65536 NT_STATUS_OK
WriteX 10586 196608 65536 65536 NT_STATUS_OK
WriteX 10586 262144 65536 65536 NT_STATUS_OK
WriteX 10586 327680 65536 65536 NT_STATUS_OK
WriteX 10586 393216 65536 65536 NT_STATUS_OK
WriteX 10586 458752 65536 65536 NT_STATUS_OK
WriteX 10586 524288 65536 65536 NT_STATUS_OK
WriteX 10586 589824 57598 57598 NT_STATUS_OK
Close 10586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10588 NT_STATUS_OK
WriteX 10588 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10588 258 NT_STATUS_OK
WriteX 10588 0 12543 12543 NT_STATUS_OK
Flush 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10594 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1005 NT_STATUS_OK
ReadX 10594 1938 24 24 NT_STATUS_OK
ReadX 10594 1920 276 276 NT_STATUS_OK
ReadX 10594 1918 14 14 NT_STATUS_OK
ReadX 10594 1918 7 7 NT_STATUS_OK
ReadX 10594 1919 12 12 NT_STATUS_OK
ReadX 10594 1919 8 8 NT_STATUS_OK
ReadX 10594 1917 15 15 NT_STATUS_OK
ReadX 10594 0 16 16 NT_STATUS_OK
ReadX 10594 16 2048 2048 NT_STATUS_OK
ReadX 10594 2064 2048 2048 NT_STATUS_OK
ReadX 10594 257 2048 2048 NT_STATUS_OK
ReadX 10594 385 2048 2048 NT_STATUS_OK
ReadX 10594 513 2048 2048 NT_STATUS_OK
ReadX 10594 641 2048 2048 NT_STATUS_OK
ReadX 10594 769 2048 2048 NT_STATUS_OK
ReadX 10594 897 2048 2048 NT_STATUS_OK
ReadX 10594 1025 2048 2048 NT_STATUS_OK
ReadX 10594 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10599 NT_STATUS_OK
WriteX 10599 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10599 258 NT_STATUS_OK
WriteX 10599 0 11588 11588 NT_STATUS_OK
Flush 10599 NT_STATUS_OK
Close 10599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
Close 10594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10604 NT_STATUS_OK
WriteX 10604 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10604 258 NT_STATUS_OK
WriteX 10604 0 11615 11615 NT_STATUS_OK
Flush 10604 NT_STATUS_OK
Close 10604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10606 NT_STATUS_OK
Close 10606 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10613 NT_STATUS_OK
WriteX 10613 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10613 258 NT_STATUS_OK
WriteX 10613 0 65536 65536 NT_STATUS_OK
WriteX 10613 65536 16050 16050 NT_STATUS_OK
Close 10613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10593 1939 64 64 NT_STATUS_OK
ReadX 10593 128 248 248 NT_STATUS_OK
ReadX 10593 128 568 568 NT_STATUS_OK
ReadX 10593 3872 1536 1536 NT_STATUS_OK
ReadX 10593 3456 2560 2560 NT_STATUS_OK
ReadX 10593 3136 512 512 NT_STATUS_OK
ReadX 10593 2880 4096 4096 NT_STATUS_OK
ReadX 10593 3264 3072 3072 NT_STATUS_OK
ReadX 10593 320 4096 4096 NT_STATUS_OK
ReadX 10593 1024 4096 4096 NT_STATUS_OK
ReadX 10593 3616 4096 4096 NT_STATUS_OK
ReadX 10593 1939 64 64 NT_STATUS_OK
ReadX 10593 128 248 248 NT_STATUS_OK
ReadX 10593 128 608 608 NT_STATUS_OK
ReadX 10593 2858 1024 1024 NT_STATUS_OK
ReadX 10593 2810 4096 4096 NT_STATUS_OK
ReadX 10593 2826 4096 4096 NT_STATUS_OK
ReadX 10593 2580 2048 2048 NT_STATUS_OK
ReadX 10593 2800 2560 2560 NT_STATUS_OK
ReadX 10593 2100 4096 4096 NT_STATUS_OK
ReadX 10593 2084 4096 4096 NT_STATUS_OK
ReadX 10593 868 4096 4096 NT_STATUS_OK
ReadX 10593 2324 4096 4096 NT_STATUS_OK
ReadX 10593 884 4096 4096 NT_STATUS_OK
ReadX 10593 2604 1024 1024 NT_STATUS_OK
ReadX 10593 580 4096 4096 NT_STATUS_OK
ReadX 10593 596 4096 4096 NT_STATUS_OK
ReadX 10593 2752 4096 4096 NT_STATUS_OK
ReadX 10593 2842 1024 1024 NT_STATUS_OK
ReadX 10593 660 4096 4096 NT_STATUS_OK
ReadX 10593 2720 4096 4096 NT_STATUS_OK
ReadX 10593 2736 4096 4096 NT_STATUS_OK
ReadX 10593 628 4096 4096 NT_STATUS_OK
ReadX 10593 2704 4096 4096 NT_STATUS_OK
ReadX 10593 1556 4096 4096 NT_STATUS_OK
ReadX 10593 576 4096 4096 NT_STATUS_OK
ReadX 10593 3168 1536 1536 NT_STATUS_OK
ReadX 10593 832 4096 4096 NT_STATUS_OK
ReadX 10593 1088 4096 4096 NT_STATUS_OK
ReadX 10593 1344 4096 4096 NT_STATUS_OK
ReadX 10593 1600 4096 4096 NT_STATUS_OK
ReadX 10593 1856 4096 4096 NT_STATUS_OK
ReadX 10593 2112 4096 4096 NT_STATUS_OK
ReadX 10593 1892 4096 4096 NT_STATUS_OK
ReadX 10593 820 4096 4096 NT_STATUS_OK
ReadX 10593 788 4096 4096 NT_STATUS_OK
ReadX 10593 1604 4096 4096 NT_STATUS_OK
ReadX 10593 3648 4096 4096 NT_STATUS_OK
ReadX 10593 2608 4096 4096 NT_STATUS_OK
ReadX 10593 548 4096 4096 NT_STATUS_OK
ReadX 10593 740 4096 4096 NT_STATUS_OK
ReadX 10593 1344 4096 4096 NT_STATUS_OK
ReadX 10593 3392 4096 4096 NT_STATUS_OK
ReadX 10593 3904 4096 4096 NT_STATUS_OK
ReadX 10593 644 4096 4096 NT_STATUS_OK
ReadX 10593 676 4096 4096 NT_STATUS_OK
ReadX 10593 2688 4096 4096 NT_STATUS_OK
ReadX 10593 320 4096 4096 NT_STATUS_OK
ReadX 10593 900 4096 4096 NT_STATUS_OK
ReadX 10593 1908 4096 4096 NT_STATUS_OK
ReadX 10593 852 4096 4096 NT_STATUS_OK
ReadX 10593 724 4096 4096 NT_STATUS_OK
ReadX 10593 2292 4096 4096 NT_STATUS_OK
ReadX 10593 612 4096 4096 NT_STATUS_OK
ReadX 10593 388 4096 4096 NT_STATUS_OK
ReadX 10593 2368 4096 4096 NT_STATUS_OK
ReadX 10593 2624 4096 4096 NT_STATUS_OK
ReadX 10593 500 4096 4096 NT_STATUS_OK
ReadX 10593 356 4096 4096 NT_STATUS_OK
ReadX 10593 1024 4096 4096 NT_STATUS_OK
ReadX 10593 576 4096 4096 NT_STATUS_OK
ReadX 10593 340 4096 4096 NT_STATUS_OK
ReadX 10593 420 4096 4096 NT_STATUS_OK
ReadX 10593 1600 4096 4096 NT_STATUS_OK
ReadX 10593 404 4096 4096 NT_STATUS_OK
ReadX 10593 1428 4096 4096 NT_STATUS_OK
ReadX 10593 2656 4096 4096 NT_STATUS_OK
ReadX 10593 2624 4096 4096 NT_STATUS_OK
ReadX 10593 452 4096 4096 NT_STATUS_OK
ReadX 10593 692 4096 4096 NT_STATUS_OK
ReadX 10593 564 4096 4096 NT_STATUS_OK
ReadX 10593 372 4096 4096 NT_STATUS_OK
ReadX 10593 468 4096 4096 NT_STATUS_OK
ReadX 10593 484 4096 4096 NT_STATUS_OK
ReadX 10593 1088 4096 4096 NT_STATUS_OK
ReadX 10593 1924 4096 4096 NT_STATUS_OK
ReadX 10593 2768 4096 4096 NT_STATUS_OK
ReadX 10593 832 4096 4096 NT_STATUS_OK
ReadX 10593 836 4096 4096 NT_STATUS_OK
ReadX 10593 1856 4096 4096 NT_STATUS_OK
ReadX 10593 2640 4096 4096 NT_STATUS_OK
ReadX 10593 436 4096 4096 NT_STATUS_OK
ReadX 10593 1828 4096 4096 NT_STATUS_OK
ReadX 10593 804 4096 4096 NT_STATUS_OK
ReadX 10593 1860 4096 4096 NT_STATUS_OK
ReadX 10593 1812 4096 4096 NT_STATUS_OK
ReadX 10593 756 4096 4096 NT_STATUS_OK
ReadX 10593 1636 4096 4096 NT_STATUS_OK
ReadX 10593 772 4096 4096 NT_STATUS_OK
ReadX 10593 2036 4096 4096 NT_STATUS_OK
ReadX 10593 1220 4096 4096 NT_STATUS_OK
ReadX 10593 1652 4096 4096 NT_STATUS_OK
ReadX 10593 2588 4096 4096 NT_STATUS_OK
ReadX 10593 916 4096 4096 NT_STATUS_OK
ReadX 10593 260 4096 4096 NT_STATUS_OK
ReadX 10593 932 4096 4096 NT_STATUS_OK
ReadX 10593 2624 4096 4096 NT_STATUS_OK
ReadX 10593 308 4096 4096 NT_STATUS_OK
ReadX 10593 292 4096 4096 NT_STATUS_OK
ReadX 10593 1140 4096 4096 NT_STATUS_OK
ReadX 10593 276 4096 4096 NT_STATUS_OK
ReadX 10593 2020 4096 4096 NT_STATUS_OK
ReadX 10593 2880 4096 4096 NT_STATUS_OK
ReadX 10593 516 4096 4096 NT_STATUS_OK
ReadX 10593 1844 4096 4096 NT_STATUS_OK
ReadX 10593 1124 4096 4096 NT_STATUS_OK
ReadX 10593 3136 4096 4096 NT_STATUS_OK
ReadX 10593 324 4096 4096 NT_STATUS_OK
ReadX 10593 1156 4096 4096 NT_STATUS_OK
ReadX 10593 1172 4096 4096 NT_STATUS_OK
ReadX 10593 2112 4096 4096 NT_STATUS_OK
ReadX 10593 2368 4096 4096 NT_STATUS_OK
ReadX 10593 964 4096 4096 NT_STATUS_OK
ReadX 10593 980 4096 4096 NT_STATUS_OK
ReadX 10593 1012 4096 4096 NT_STATUS_OK
ReadX 10593 532 4096 4096 NT_STATUS_OK
ReadX 10593 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10593 1620 4096 4096 NT_STATUS_OK
ReadX 10593 1604 4096 4096 NT_STATUS_OK
ReadX 10593 2116 4096 4096 NT_STATUS_OK
ReadX 10593 2132 4096 4096 NT_STATUS_OK
ReadX 10593 2148 4096 4096 NT_STATUS_OK
ReadX 10593 2276 4096 4096 NT_STATUS_OK
ReadX 10593 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10618 NT_STATUS_OK
QUERY_FILE_INFORMATION 10573 1004 NT_STATUS_OK
Close 10573 NT_STATUS_OK
WriteX 10618 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10618 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10575 1004 NT_STATUS_OK
Close 10575 NT_STATUS_OK
WriteX 10618 0 65536 65536 NT_STATUS_OK
WriteX 10618 65536 64850 64850 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10620 NT_STATUS_OK
WriteX 10620 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 258 NT_STATUS_OK
ReadX 10593 2068 4096 4096 NT_STATUS_OK
ReadX 10593 1588 4096 4096 NT_STATUS_OK
ReadX 10593 1572 4096 4096 NT_STATUS_OK
WriteX 10620 0 18630 18630 NT_STATUS_OK
Flush 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10624 NT_STATUS_OK
ReadX 10624 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10593 612 4096 4096 NT_STATUS_OK
ReadX 10593 564 4096 4096 NT_STATUS_OK
ReadX 10593 1876 4096 4096 NT_STATUS_OK
ReadX 10593 628 4096 4096 NT_STATUS_OK
ReadX 10593 740 4096 4096 NT_STATUS_OK
ReadX 10593 724 4096 4096 NT_STATUS_OK
ReadX 10593 644 4096 4096 NT_STATUS_OK
ReadX 10593 2324 4096 4096 NT_STATUS_OK
ReadX 10593 660 4096 4096 NT_STATUS_OK
ReadX 10593 852 4096 4096 NT_STATUS_OK
ReadX 10593 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10593 2368 4096 4096 NT_STATUS_OK
ReadX 10593 1024 4096 4096 NT_STATUS_OK
ReadX 10593 320 4096 4096 NT_STATUS_OK
ReadX 10593 580 4096 4096 NT_STATUS_OK
ReadX 10593 3136 512 512 NT_STATUS_OK
ReadX 10593 2880 4096 4096 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 61440 4096 4096 NT_STATUS_OK
ReadX 10625 126976 4096 4096 NT_STATUS_OK
WriteX 10625 0 65536 65536 NT_STATUS_OK
WriteX 10625 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 61440 4096 4096 NT_STATUS_OK
ReadX 10626 126976 4096 4096 NT_STATUS_OK
ReadX 10626 192512 4096 4096 NT_STATUS_OK
ReadX 10626 258048 4096 4096 NT_STATUS_OK
WriteX 10626 0 65536 65536 NT_STATUS_OK
WriteX 10626 65536 65536 65536 NT_STATUS_OK
WriteX 10626 131072 65536 65536 NT_STATUS_OK
WriteX 10626 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 61440 4096 4096 NT_STATUS_OK
ReadX 10627 126976 4096 4096 NT_STATUS_OK
ReadX 10627 192512 4096 4096 NT_STATUS_OK
ReadX 10627 258048 4096 4096 NT_STATUS_OK
ReadX 10627 323584 4096 4096 NT_STATUS_OK
ReadX 10627 389120 4096 4096 NT_STATUS_OK
ReadX 10627 454656 4096 4096 NT_STATUS_OK
ReadX 10627 520192 4096 4096 NT_STATUS_OK
WriteX 10627 0 65536 65536 NT_STATUS_OK
WriteX 10627 65536 65536 65536 NT_STATUS_OK
WriteX 10627 131072 65536 65536 NT_STATUS_OK
WriteX 10627 196608 65536 65536 NT_STATUS_OK
WriteX 10627 262144 65536 65536 NT_STATUS_OK
WriteX 10627 327680 65536 65536 NT_STATUS_OK
WriteX 10627 393216 65536 65536 NT_STATUS_OK
WriteX 10627 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10629 NT_STATUS_OK
Close 10629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10630 NT_STATUS_OK
WriteX 10630 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10630 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10628 0 8192 8192 NT_STATUS_OK
Flush 10628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10628 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10628 0 8192 8192 NT_STATUS_OK
Flush 10628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10628 0 8192 8192 NT_STATUS_OK
Flush 10628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10628 0 8192 8192 NT_STATUS_OK
Flush 10628 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10624 NT_STATUS_OK
Close 10592 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10635 NT_STATUS_OK
WriteX 10635 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 258 NT_STATUS_OK
WriteX 10635 0 62591 62591 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10637 NT_STATUS_OK
Close 10637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10640 NT_STATUS_OK
WriteX 10640 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 10845 10845 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10642 NT_STATUS_OK
Close 10642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10645 NT_STATUS_OK
WriteX 10645 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10645 258 NT_STATUS_OK
WriteX 10645 0 30118 30118 NT_STATUS_OK
Close 10645 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
WriteX 10630 0 64 64 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10647 NT_STATUS_OK
ReadX 10647 0 61440 61440 NT_STATUS_OK
ReadX 10647 61440 4096 4096 NT_STATUS_OK
ReadX 10647 65536 61440 61440 NT_STATUS_OK
ReadX 10647 126976 4096 4096 NT_STATUS_OK
ReadX 10647 131072 61440 61440 NT_STATUS_OK
ReadX 10647 192512 4096 4096 NT_STATUS_OK
ReadX 10647 196608 61440 61440 NT_STATUS_OK
ReadX 10647 258048 4096 4096 NT_STATUS_OK
ReadX 10647 262144 61440 61440 NT_STATUS_OK
ReadX 10647 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10648 NT_STATUS_OK
ReadX 10648 0 61440 61440 NT_STATUS_OK
ReadX 10648 61440 4096 4096 NT_STATUS_OK
ReadX 10648 65536 61440 61440 NT_STATUS_OK
ReadX 10648 126976 4096 4096 NT_STATUS_OK
ReadX 10648 131072 61440 61440 NT_STATUS_OK
ReadX 10648 192512 4096 4096 NT_STATUS_OK
ReadX 10648 196608 61440 61440 NT_STATUS_OK
ReadX 10648 258048 4096 4096 NT_STATUS_OK
ReadX 10648 262144 61440 61440 NT_STATUS_OK
ReadX 10648 323584 4096 4096 NT_STATUS_OK
ReadX 10648 327680 61440 61440 NT_STATUS_OK
ReadX 10648 389120 4096 4096 NT_STATUS_OK
ReadX 10648 393216 61440 61440 NT_STATUS_OK
ReadX 10648 454656 4096 4096 NT_STATUS_OK
ReadX 10648 458752 61440 61440 NT_STATUS_OK
ReadX 10648 520192 4096 4096 NT_STATUS_OK
ReadX 10648 524288 61440 61440 NT_STATUS_OK
ReadX 10648 585728 4096 4096 NT_STATUS_OK
ReadX 10648 589824 61440 61440 NT_STATUS_OK
ReadX 10648 651264 4096 4096 NT_STATUS_OK
ReadX 10648 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 61440 61440 NT_STATUS_OK
ReadX 10649 61440 4096 4096 NT_STATUS_OK
ReadX 10649 65536 61440 61440 NT_STATUS_OK
ReadX 10649 126976 4096 4096 NT_STATUS_OK
ReadX 10649 131072 61440 61440 NT_STATUS_OK
ReadX 10649 192512 4096 4096 NT_STATUS_OK
ReadX 10649 196608 61440 61440 NT_STATUS_OK
ReadX 10649 258048 4096 4096 NT_STATUS_OK
ReadX 10649 262144 61440 61440 NT_STATUS_OK
ReadX 10649 323584 4096 4096 NT_STATUS_OK
ReadX 10649 327680 61440 61440 NT_STATUS_OK
ReadX 10649 389120 4096 4096 NT_STATUS_OK
ReadX 10649 393216 61440 61440 NT_STATUS_OK
ReadX 10649 454656 4096 4096 NT_STATUS_OK
ReadX 10649 458752 61440 61440 NT_STATUS_OK
ReadX 10649 520192 4096 4096 NT_STATUS_OK
ReadX 10649 524288 61440 61440 NT_STATUS_OK
ReadX 10649 585728 4096 4096 NT_STATUS_OK
ReadX 10649 589824 61440 61440 NT_STATUS_OK
ReadX 10649 651264 4096 4096 NT_STATUS_OK
ReadX 10649 655360 61440 61440 NT_STATUS_OK
ReadX 10649 716800 4096 4096 NT_STATUS_OK
ReadX 10649 720896 61440 61440 NT_STATUS_OK
ReadX 10649 782336 4096 4096 NT_STATUS_OK
ReadX 10649 786432 61440 61440 NT_STATUS_OK
ReadX 10649 847872 4096 4096 NT_STATUS_OK
ReadX 10649 851968 61440 61440 NT_STATUS_OK
ReadX 10649 913408 4096 4096 NT_STATUS_OK
ReadX 10649 917504 61440 61440 NT_STATUS_OK
ReadX 10649 978944 4096 4096 NT_STATUS_OK
ReadX 10649 983040 61440 61440 NT_STATUS_OK
ReadX 10649 1044480 4096 4096 NT_STATUS_OK
ReadX 10649 1048576 61440 61440 NT_STATUS_OK
ReadX 10649 1110016 4096 4096 NT_STATUS_OK
ReadX 10649 1114112 61440 61440 NT_STATUS_OK
ReadX 10649 1175552 4096 4096 NT_STATUS_OK
ReadX 10649 1179648 61440 61440 NT_STATUS_OK
ReadX 10649 1241088 4096 4096 NT_STATUS_OK
ReadX 10649 1245184 61440 61440 NT_STATUS_OK
ReadX 10649 1306624 4096 4096 NT_STATUS_OK
ReadX 10649 1310720 61440 61440 NT_STATUS_OK
ReadX 10649 1372160 4096 4096 NT_STATUS_OK
ReadX 10649 1376256 61440 61440 NT_STATUS_OK
ReadX 10649 1437696 4096 4096 NT_STATUS_OK
ReadX 10649 1441792 61440 61440 NT_STATUS_OK
ReadX 10649 1503232 4096 4096 NT_STATUS_OK
ReadX 10649 1507328 61440 61440 NT_STATUS_OK
ReadX 10649 1568768 4096 4096 NT_STATUS_OK
ReadX 10649 1572864 61440 61440 NT_STATUS_OK
ReadX 10649 1634304 4096 4096 NT_STATUS_OK
ReadX 10649 1638400 61440 61440 NT_STATUS_OK
ReadX 10649 1699840 4096 4096 NT_STATUS_OK
ReadX 10649 1703936 61440 61440 NT_STATUS_OK
ReadX 10649 1765376 4096 4096 NT_STATUS_OK
ReadX 10649 1769472 61440 61440 NT_STATUS_OK
ReadX 10649 1830912 4096 4096 NT_STATUS_OK
ReadX 10649 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10647 NT_STATUS_OK
Close 10648 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
ReadX 10654 4096 4096 4096 NT_STATUS_OK
ReadX 10654 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10655 NT_STATUS_OK
Close 10655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Close 10654 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10657 NT_STATUS_OK
ReadX 10657 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10658 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10658 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10657 NT_STATUS_OK
Close 10658 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 8192 8192 NT_STATUS_OK
ReadX 10662 8192 8192 8192 NT_STATUS_OK
ReadX 10662 16384 8192 8192 NT_STATUS_OK
ReadX 10662 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10664 NT_STATUS_OK
Close 10664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10662 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10667 NT_STATUS_OK
WriteX 10667 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10667 258 NT_STATUS_OK
WriteX 10667 0 10438 10438 NT_STATUS_OK
Close 10667 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10668 NT_STATUS_OK
Close 10668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10671 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10672 NT_STATUS_OK
Close 10672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10673 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10676 NT_STATUS_OK
ReadX 10676 0 4096 4096 NT_STATUS_OK
ReadX 10676 4096 4096 4096 NT_STATUS_OK
ReadX 10676 8192 4096 4096 NT_STATUS_OK
ReadX 10676 12288 8192 8192 NT_STATUS_OK
ReadX 10676 20480 8192 8192 NT_STATUS_OK
ReadX 10676 28672 8192 8192 NT_STATUS_OK
ReadX 10676 36864 8192 8192 NT_STATUS_OK
ReadX 10676 45056 8192 8192 NT_STATUS_OK
ReadX 10676 53248 8192 8192 NT_STATUS_OK
ReadX 10676 61440 8192 8192 NT_STATUS_OK
ReadX 10676 69632 8192 8192 NT_STATUS_OK
ReadX 10676 77824 8192 8192 NT_STATUS_OK
ReadX 10676 86016 8192 8192 NT_STATUS_OK
ReadX 10676 94208 8192 8192 NT_STATUS_OK
ReadX 10676 102400 8192 8192 NT_STATUS_OK
ReadX 10676 110592 8192 8192 NT_STATUS_OK
ReadX 10676 118784 8192 8192 NT_STATUS_OK
ReadX 10676 126976 8192 8192 NT_STATUS_OK
ReadX 10676 135168 8192 8192 NT_STATUS_OK
ReadX 10676 143360 8192 8192 NT_STATUS_OK
ReadX 10676 151552 8192 8192 NT_STATUS_OK
ReadX 10676 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10676 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10678 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10681 NT_STATUS_OK
WriteX 10681 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10681 258 NT_STATUS_OK
WriteX 10681 0 28489 28489 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10684 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 8192 8192 NT_STATUS_OK
ReadX 10688 8192 8192 8192 NT_STATUS_OK
ReadX 10688 16384 8192 8192 NT_STATUS_OK
ReadX 10688 24576 8192 8192 NT_STATUS_OK
ReadX 10688 32768 16384 16384 NT_STATUS_OK
ReadX 10688 49152 8192 8192 NT_STATUS_OK
ReadX 10688 57344 8192 8192 NT_STATUS_OK
ReadX 10688 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10693 NT_STATUS_OK
WriteX 10693 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10693 258 NT_STATUS_OK
WriteX 10693 0 29253 29253 NT_STATUS_OK
Close 10693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10697 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10700 NT_STATUS_OK
WriteX 10700 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 258 NT_STATUS_OK
WriteX 10700 0 30183 30183 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10703 NT_STATUS_OK
WriteX 10703 0 510 510 NT_STATUS_OK
WriteX 10703 510 512 512 NT_STATUS_OK
WriteX 10703 1022 510 510 NT_STATUS_OK
WriteX 10703 1532 510 510 NT_STATUS_OK
WriteX 10703 2042 168 168 NT_STATUS_OK
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 61440 4096 4096 NT_STATUS_OK
ReadX 10707 126976 4096 4096 NT_STATUS_OK
WriteX 10707 0 65536 65536 NT_STATUS_OK
WriteX 10707 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 61440 4096 4096 NT_STATUS_OK
ReadX 10708 126976 4096 4096 NT_STATUS_OK
ReadX 10708 192512 4096 4096 NT_STATUS_OK
ReadX 10708 258048 4096 4096 NT_STATUS_OK
WriteX 10708 0 65536 65536 NT_STATUS_OK
WriteX 10708 65536 65536 65536 NT_STATUS_OK
WriteX 10708 131072 65536 65536 NT_STATUS_OK
WriteX 10708 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 61440 4096 4096 NT_STATUS_OK
ReadX 10709 126976 4096 4096 NT_STATUS_OK
ReadX 10709 192512 4096 4096 NT_STATUS_OK
ReadX 10709 258048 4096 4096 NT_STATUS_OK
ReadX 10709 323584 4096 4096 NT_STATUS_OK
ReadX 10709 389120 4096 4096 NT_STATUS_OK
ReadX 10709 454656 4096 4096 NT_STATUS_OK
ReadX 10709 520192 4096 4096 NT_STATUS_OK
WriteX 10709 0 65536 65536 NT_STATUS_OK
WriteX 10709 65536 65536 65536 NT_STATUS_OK
WriteX 10709 131072 65536 65536 NT_STATUS_OK
WriteX 10709 196608 65536 65536 NT_STATUS_OK
WriteX 10709 262144 65536 65536 NT_STATUS_OK
WriteX 10709 327680 65536 65536 NT_STATUS_OK
WriteX 10709 393216 65536 65536 NT_STATUS_OK
WriteX 10709 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10710 NT_STATUS_OK
Close 10710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Close 10707 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10730 NT_STATUS_OK
Close 10730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10759 NT_STATUS_OK
Close 10759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10764 NT_STATUS_OK
Close 10764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10772 NT_STATUS_OK
Close 10772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10778 NT_STATUS_OK
WriteX 10778 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10778 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10778 0 65536 65536 NT_STATUS_OK
WriteX 10778 65536 65536 65536 NT_STATUS_OK
WriteX 10778 131072 65536 65536 NT_STATUS_OK
WriteX 10778 196608 65536 65536 NT_STATUS_OK
WriteX 10778 262144 26634 26634 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
Close 10785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
ReadX 10786 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10791 NT_STATUS_OK
Close 10791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10796 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10809 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10824 NT_STATUS_OK
Close 10824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10834 NT_STATUS_OK
Close 10834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10843 NT_STATUS_OK
Close 10843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10848 NT_STATUS_OK
Close 10848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10864 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10865 NT_STATUS_OK
ReadX 10865 0 4096 4096 NT_STATUS_OK
Close 10865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10867 NT_STATUS_OK
ReadX 10867 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10877 NT_STATUS_OK
Close 10877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10910 0 4096 4096 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10911 NT_STATUS_OK
ReadX 10911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 4096 4096 NT_STATUS_OK
ReadX 10912 4096 4096 4096 NT_STATUS_OK
ReadX 10912 8192 4096 4096 NT_STATUS_OK
ReadX 10912 12288 4096 4096 NT_STATUS_OK
ReadX 10912 16384 4096 4096 NT_STATUS_OK
ReadX 10912 20480 4096 4096 NT_STATUS_OK
ReadX 10912 24576 4096 4096 NT_STATUS_OK
ReadX 10912 28672 4096 4096 NT_STATUS_OK
ReadX 10912 32768 4096 4096 NT_STATUS_OK
ReadX 10912 36864 4096 4096 NT_STATUS_OK
ReadX 10912 40960 4096 4096 NT_STATUS_OK
ReadX 10912 45056 4096 4096 NT_STATUS_OK
ReadX 10912 49152 4096 4096 NT_STATUS_OK
ReadX 10912 53248 4096 4096 NT_STATUS_OK
ReadX 10912 57344 4096 4096 NT_STATUS_OK
ReadX 10912 61440 4096 4096 NT_STATUS_OK
ReadX 10912 65536 4096 4096 NT_STATUS_OK
ReadX 10912 69632 4096 4096 NT_STATUS_OK
ReadX 10912 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10912 1004 NT_STATUS_OK
WriteX 10912 0 4096 4096 NT_STATUS_OK
Close 10912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10913 NT_STATUS_OK
SET_FILE_INFORMATION 10913 1004 NT_STATUS_OK
Close 10913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10915 NT_STATUS_OK
Close 10915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10918 NT_STATUS_OK
WriteX 10918 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10918 258 NT_STATUS_OK
WriteX 10918 0 65536 65536 NT_STATUS_OK
WriteX 10918 65536 19979 19979 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
QUERY_FILE_INFORMATION 10919 1004 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
SET_FILE_INFORMATION 10919 1004 NT_STATUS_OK
WriteX 10919 0 4096 4096 NT_STATUS_OK
Flush 10919 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
Close 10922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
Close 10923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10924 1004 NT_STATUS_OK
WriteX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10925 NT_STATUS_OK
Close 10925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10927 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10930 NT_STATUS_OK
WriteX 10930 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10930 258 NT_STATUS_OK
WriteX 10930 0 65536 65536 NT_STATUS_OK
WriteX 10930 65536 17654 17654 NT_STATUS_OK
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
Flush 10931 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
Flush 10931 NT_STATUS_OK
QUERY_FILE_INFORMATION 10931 1004 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
Flush 10931 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
Flush 10931 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
Flush 10931 NT_STATUS_OK
SET_FILE_INFORMATION 10931 1004 NT_STATUS_OK
WriteX 10931 0 4096 4096 NT_STATUS_OK
Flush 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10932 NT_STATUS_OK
SET_FILE_INFORMATION 10932 1004 NT_STATUS_OK
Close 10932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10934 NT_STATUS_OK
Close 10934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
ReadX 10936 4096 4096 4096 NT_STATUS_OK
ReadX 10936 8192 4096 4096 NT_STATUS_OK
ReadX 10936 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10936 16384 4096 4096 NT_STATUS_OK
ReadX 10936 20480 4096 4096 NT_STATUS_OK
ReadX 10936 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
Close 10937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10939 1004 NT_STATUS_OK
WriteX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10942 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10945 NT_STATUS_OK
WriteX 10945 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10945 258 NT_STATUS_OK
WriteX 10945 0 65536 65536 NT_STATUS_OK
WriteX 10945 65536 19490 19490 NT_STATUS_OK
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
WriteX 10946 0 4096 4096 NT_STATUS_OK
Flush 10946 NT_STATUS_OK
WriteX 10946 0 4096 4096 NT_STATUS_OK
Flush 10946 NT_STATUS_OK
QUERY_FILE_INFORMATION 10946 1004 NT_STATUS_OK
WriteX 10946 0 4096 4096 NT_STATUS_OK
Flush 10946 NT_STATUS_OK
WriteX 10946 0 4096 4096 NT_STATUS_OK
Flush 10946 NT_STATUS_OK
WriteX 10946 0 4096 4096 NT_STATUS_OK
Flush 10946 NT_STATUS_OK
SET_FILE_INFORMATION 10946 1004 NT_STATUS_OK
WriteX 10946 0 4096 4096 NT_STATUS_OK
Flush 10946 NT_STATUS_OK
Close 10946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10947 NT_STATUS_OK
SET_FILE_INFORMATION 10947 1004 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10949 NT_STATUS_OK
Close 10949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10951 0 4096 4096 NT_STATUS_OK
Close 10951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
ReadX 10953 4096 4096 4096 NT_STATUS_OK
ReadX 10953 8192 4096 4096 NT_STATUS_OK
ReadX 10953 12288 4096 4096 NT_STATUS_OK
ReadX 10953 16384 4096 4096 NT_STATUS_OK
ReadX 10953 20480 4096 4096 NT_STATUS_OK
ReadX 10953 24576 4096 4096 NT_STATUS_OK
ReadX 10953 28672 4096 4096 NT_STATUS_OK
ReadX 10953 32768 4096 4096 NT_STATUS_OK
ReadX 10953 36864 4096 4096 NT_STATUS_OK
ReadX 10953 40960 4096 4096 NT_STATUS_OK
ReadX 10953 45056 4096 4096 NT_STATUS_OK
ReadX 10953 49152 4096 4096 NT_STATUS_OK
ReadX 10953 53248 4096 4096 NT_STATUS_OK
ReadX 10953 57344 4096 4096 NT_STATUS_OK
ReadX 10953 61440 4096 4096 NT_STATUS_OK
ReadX 10953 65536 4096 4096 NT_STATUS_OK
ReadX 10953 69632 4096 4096 NT_STATUS_OK
ReadX 10953 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10953 1004 NT_STATUS_OK
WriteX 10953 0 4096 4096 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10954 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
Close 10954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10959 NT_STATUS_OK
WriteX 10959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
WriteX 10959 0 65536 65536 NT_STATUS_OK
WriteX 10959 65536 8866 8866 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
SET_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
Close 10962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10964 1004 NT_STATUS_OK
WriteX 10964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10965 NT_STATUS_OK
Close 10965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10967 NT_STATUS_OK
Close 10967 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10970 NT_STATUS_OK
WriteX 10970 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10970 258 NT_STATUS_OK
WriteX 10970 0 65536 65536 NT_STATUS_OK
WriteX 10970 65536 9298 9298 NT_STATUS_OK
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
WriteX 10971 0 4096 4096 NT_STATUS_OK
Flush 10971 NT_STATUS_OK
SET_FILE_INFORMATION 10971 1004 NT_STATUS_OK
WriteX 10971 0 4096 4096 NT_STATUS_OK
Flush 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10972 NT_STATUS_OK
SET_FILE_INFORMATION 10972 1004 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10974 NT_STATUS_OK
Close 10974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10977 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10977 0 4096 4096 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10978 4096 4096 4096 NT_STATUS_OK
ReadX 10978 8192 4096 4096 NT_STATUS_OK
ReadX 10978 12288 4096 4096 NT_STATUS_OK
ReadX 10978 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10981 1004 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10978 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10987 NT_STATUS_OK
WriteX 10987 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 258 NT_STATUS_OK
WriteX 10987 0 65536 65536 NT_STATUS_OK
WriteX 10987 65536 11540 11540 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
SET_FILE_INFORMATION 10988 1004 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
Flush 10988 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10989 NT_STATUS_OK
SET_FILE_INFORMATION 10989 1004 NT_STATUS_OK
Close 10989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 61440 4096 4096 NT_STATUS_OK
ReadX 10993 126976 4096 4096 NT_STATUS_OK
WriteX 10993 0 65536 65536 NT_STATUS_OK
WriteX 10993 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 61440 4096 4096 NT_STATUS_OK
ReadX 10994 126976 4096 4096 NT_STATUS_OK
ReadX 10994 192512 4096 4096 NT_STATUS_OK
ReadX 10994 258048 4096 4096 NT_STATUS_OK
WriteX 10994 0 65536 65536 NT_STATUS_OK
WriteX 10994 65536 65536 65536 NT_STATUS_OK
WriteX 10994 131072 65536 65536 NT_STATUS_OK
WriteX 10994 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 61440 4096 4096 NT_STATUS_OK
ReadX 10995 126976 4096 4096 NT_STATUS_OK
ReadX 10995 192512 4096 4096 NT_STATUS_OK
ReadX 10995 258048 4096 4096 NT_STATUS_OK
ReadX 10995 323584 4096 4096 NT_STATUS_OK
ReadX 10995 389120 4096 4096 NT_STATUS_OK
ReadX 10995 454656 4096 4096 NT_STATUS_OK
ReadX 10995 520192 4096 4096 NT_STATUS_OK
WriteX 10995 0 65536 65536 NT_STATUS_OK
WriteX 10995 65536 65536 65536 NT_STATUS_OK
WriteX 10995 131072 65536 65536 NT_STATUS_OK
WriteX 10995 196608 65536 65536 NT_STATUS_OK
WriteX 10995 262144 65536 65536 NT_STATUS_OK
WriteX 10995 327680 65536 65536 NT_STATUS_OK
WriteX 10995 393216 65536 65536 NT_STATUS_OK
WriteX 10995 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
ReadX 10996 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10997 NT_STATUS_OK
WriteX 10997 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10997 258 NT_STATUS_OK
WriteX 10997 0 53 53 NT_STATUS_OK
Close 10997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10998 NT_STATUS_OK
Close 10998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10996 8192 4096 4096 NT_STATUS_OK
ReadX 10996 12288 4096 4096 NT_STATUS_OK
WriteX 11000 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 258 NT_STATUS_OK
ReadX 10996 16384 4096 4096 NT_STATUS_OK
ReadX 10996 20480 4096 4096 NT_STATUS_OK
WriteX 11000 0 15360 15360 NT_STATUS_OK
Close 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11001 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11001 1004 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Close 11001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11005 NT_STATUS_OK
Close 11005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11004 4096 4096 4096 NT_STATUS_OK
ReadX 11004 8192 4096 4096 NT_STATUS_OK
ReadX 11004 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 4096 4096 NT_STATUS_OK
ReadX 11007 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
ReadX 11008 8192 4096 4096 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 11008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11009 NT_STATUS_OK
WriteX 11009 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11009 258 NT_STATUS_OK
WriteX 11009 0 15360 15360 NT_STATUS_OK
Close 11009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11010 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11010 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11011 NT_STATUS_OK
Close 11011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11014 NT_STATUS_OK
SET_FILE_INFORMATION 11014 1004 NT_STATUS_OK
Close 11014 NT_STATUS_OK
WriteX 11010 0 4096 4096 NT_STATUS_OK
Close 11010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
ReadX 11017 4096 4096 4096 NT_STATUS_OK
ReadX 11017 8192 4096 4096 NT_STATUS_OK
ReadX 11017 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11017 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11019 NT_STATUS_OK
WriteX 11019 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11019 258 NT_STATUS_OK
WriteX 11019 0 53 53 NT_STATUS_OK
Close 11019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11018 4096 4096 4096 NT_STATUS_OK
ReadX 11018 8192 4096 4096 NT_STATUS_OK
ReadX 11018 12288 4096 4096 NT_STATUS_OK
WriteX 11022 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11022 258 NT_STATUS_OK
WriteX 11022 0 12006 12006 NT_STATUS_OK
Close 11022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11023 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11023 1004 NT_STATUS_OK
WriteX 11023 0 4096 4096 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11024 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11027 NT_STATUS_OK
Close 11027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11026 4096 4096 4096 NT_STATUS_OK
ReadX 11026 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11029 NT_STATUS_OK
WriteX 11029 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 258 NT_STATUS_OK
WriteX 11029 0 11991 11991 NT_STATUS_OK
Close 11029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11030 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11030 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11034 NT_STATUS_OK
SET_FILE_INFORMATION 11034 1004 NT_STATUS_OK
Close 11034 NT_STATUS_OK
WriteX 11030 0 4096 4096 NT_STATUS_OK
Close 11030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
WriteX 11017 0 19054 19054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11035 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11037 NT_STATUS_OK
ReadX 11037 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11038 NT_STATUS_OK
Close 11038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11037 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11037 1004 NT_STATUS_OK
ReadX 11037 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11037 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11037 1004 NT_STATUS_OK
Close 11013 NT_STATUS_OK
WriteX 11037 0 12288 12288 NT_STATUS_OK
Close 11033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11040 NT_STATUS_OK
Close 11040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11037 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11042 NT_STATUS_OK
Close 11042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 0 61440 61440 NT_STATUS_OK
ReadX 11044 61440 4096 4096 NT_STATUS_OK
ReadX 11044 65536 61440 61440 NT_STATUS_OK
ReadX 11044 126976 4096 4096 NT_STATUS_OK
ReadX 11044 131072 61440 61440 NT_STATUS_OK
ReadX 11044 192512 4096 4096 NT_STATUS_OK
ReadX 11044 196608 61440 61440 NT_STATUS_OK
ReadX 11044 258048 4096 4096 NT_STATUS_OK
ReadX 11044 262144 61440 61440 NT_STATUS_OK
ReadX 11044 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 61440 61440 NT_STATUS_OK
ReadX 11045 61440 4096 4096 NT_STATUS_OK
ReadX 11045 65536 61440 61440 NT_STATUS_OK
ReadX 11045 126976 4096 4096 NT_STATUS_OK
ReadX 11045 131072 61440 61440 NT_STATUS_OK
ReadX 11045 192512 4096 4096 NT_STATUS_OK
ReadX 11045 196608 61440 61440 NT_STATUS_OK
ReadX 11045 258048 4096 4096 NT_STATUS_OK
ReadX 11045 262144 61440 61440 NT_STATUS_OK
ReadX 11045 323584 4096 4096 NT_STATUS_OK
ReadX 11045 327680 61440 61440 NT_STATUS_OK
ReadX 11045 389120 4096 4096 NT_STATUS_OK
ReadX 11045 393216 61440 61440 NT_STATUS_OK
ReadX 11045 454656 4096 4096 NT_STATUS_OK
ReadX 11045 458752 61440 61440 NT_STATUS_OK
ReadX 11045 520192 4096 4096 NT_STATUS_OK
ReadX 11045 524288 61440 61440 NT_STATUS_OK
ReadX 11045 585728 4096 4096 NT_STATUS_OK
ReadX 11045 589824 61440 61440 NT_STATUS_OK
ReadX 11045 651264 4096 4096 NT_STATUS_OK
ReadX 11045 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 61440 61440 NT_STATUS_OK
ReadX 11046 61440 4096 4096 NT_STATUS_OK
ReadX 11046 65536 61440 61440 NT_STATUS_OK
ReadX 11046 126976 4096 4096 NT_STATUS_OK
ReadX 11046 131072 61440 61440 NT_STATUS_OK
ReadX 11046 192512 4096 4096 NT_STATUS_OK
ReadX 11046 196608 61440 61440 NT_STATUS_OK
ReadX 11046 258048 4096 4096 NT_STATUS_OK
ReadX 11046 262144 61440 61440 NT_STATUS_OK
ReadX 11046 323584 4096 4096 NT_STATUS_OK
ReadX 11046 327680 61440 61440 NT_STATUS_OK
ReadX 11046 389120 4096 4096 NT_STATUS_OK
ReadX 11046 393216 61440 61440 NT_STATUS_OK
ReadX 11046 454656 4096 4096 NT_STATUS_OK
ReadX 11046 458752 61440 61440 NT_STATUS_OK
ReadX 11046 520192 4096 4096 NT_STATUS_OK
ReadX 11046 524288 61440 61440 NT_STATUS_OK
ReadX 11046 585728 4096 4096 NT_STATUS_OK
ReadX 11046 589824 61440 61440 NT_STATUS_OK
ReadX 11046 651264 4096 4096 NT_STATUS_OK
ReadX 11046 655360 61440 61440 NT_STATUS_OK
ReadX 11046 716800 4096 4096 NT_STATUS_OK
ReadX 11046 720896 61440 61440 NT_STATUS_OK
ReadX 11046 782336 4096 4096 NT_STATUS_OK
ReadX 11046 786432 61440 61440 NT_STATUS_OK
ReadX 11046 847872 4096 4096 NT_STATUS_OK
ReadX 11046 851968 61440 61440 NT_STATUS_OK
ReadX 11046 913408 4096 4096 NT_STATUS_OK
ReadX 11046 917504 61440 61440 NT_STATUS_OK
ReadX 11046 978944 4096 4096 NT_STATUS_OK
ReadX 11046 983040 61440 61440 NT_STATUS_OK
ReadX 11046 1044480 4096 4096 NT_STATUS_OK
ReadX 11046 1048576 61440 61440 NT_STATUS_OK
ReadX 11046 1110016 4096 4096 NT_STATUS_OK
ReadX 11046 1114112 61440 61440 NT_STATUS_OK
ReadX 11046 1175552 4096 4096 NT_STATUS_OK
ReadX 11046 1179648 61440 61440 NT_STATUS_OK
ReadX 11046 1241088 4096 4096 NT_STATUS_OK
ReadX 11046 1245184 61440 61440 NT_STATUS_OK
ReadX 11046 1306624 4096 4096 NT_STATUS_OK
ReadX 11046 1310720 61440 61440 NT_STATUS_OK
ReadX 11046 1372160 4096 4096 NT_STATUS_OK
ReadX 11046 1376256 61440 61440 NT_STATUS_OK
ReadX 11046 1437696 4096 4096 NT_STATUS_OK
ReadX 11046 1441792 61440 61440 NT_STATUS_OK
ReadX 11046 1503232 4096 4096 NT_STATUS_OK
ReadX 11046 1507328 61440 61440 NT_STATUS_OK
ReadX 11046 1568768 4096 4096 NT_STATUS_OK
ReadX 11046 1572864 61440 61440 NT_STATUS_OK
ReadX 11046 1634304 4096 4096 NT_STATUS_OK
ReadX 11046 1638400 61440 61440 NT_STATUS_OK
ReadX 11046 1699840 4096 4096 NT_STATUS_OK
ReadX 11046 1703936 61440 61440 NT_STATUS_OK
ReadX 11046 1765376 4096 4096 NT_STATUS_OK
ReadX 11046 1769472 61440 61440 NT_STATUS_OK
ReadX 11046 1830912 4096 4096 NT_STATUS_OK
ReadX 11046 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11048 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11050 NT_STATUS_OK
ReadX 11050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11053 NT_STATUS_OK
QUERY_FILE_INFORMATION 11053 1004 NT_STATUS_OK
WriteX 11053 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11053 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11054 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11055 NT_STATUS_OK
WriteX 11055 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11055 258 NT_STATUS_OK
WriteX 11055 0 491 491 NT_STATUS_OK
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11053 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11059 NT_STATUS_OK
WriteX 11059 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11059 258 NT_STATUS_OK
WriteX 11059 0 543 543 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Close 11046 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11072 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11073 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 1004 NT_STATUS_OK
WriteX 11073 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
WriteX 11073 0 2048 2048 NT_STATUS_OK
Close 11073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11074 0 4096 4096 NT_STATUS_OK
Flush 11074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11074 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11079 NT_STATUS_OK
WriteX 11079 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
WriteX 11079 0 2048 2048 NT_STATUS_OK
Close 11079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11085 NT_STATUS_OK
WriteX 11085 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11085 258 NT_STATUS_OK
WriteX 11085 0 2048 2048 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 2048 2048 NT_STATUS_OK
ReadX 11064 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11080 0 4096 4096 NT_STATUS_OK
WriteX 11064 0 8192 8192 NT_STATUS_OK
WriteX 11065 0 4096 4096 NT_STATUS_OK
WriteX 11066 0 4096 4096 NT_STATUS_OK
ReadX 11080 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11089 NT_STATUS_OK
ReadX 11089 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11090 NT_STATUS_OK
QUERY_FILE_INFORMATION 11090 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11067 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11110 NT_STATUS_OK
QUERY_FILE_INFORMATION 11110 1004 NT_STATUS_OK
WriteX 11110 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11110 258 NT_STATUS_OK
WriteX 11110 0 2048 2048 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11113 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11118 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1004 NT_STATUS_OK
WriteX 11118 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 258 NT_STATUS_OK
WriteX 11118 0 2048 2048 NT_STATUS_OK
Close 11118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11111 0 4096 4096 NT_STATUS_OK
Flush 11111 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11111 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11113 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11121 NT_STATUS_OK
WriteX 11121 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11121 258 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11124 NT_STATUS_OK
WriteX 11124 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 258 NT_STATUS_OK
WriteX 11124 0 4096 4096 NT_STATUS_OK
Close 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11125 0 4096 4096 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11113 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11131 NT_STATUS_OK
Close 11131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11132 NT_STATUS_OK
WriteX 11132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11132 258 NT_STATUS_OK
WriteX 11132 0 2048 2048 NT_STATUS_OK
Close 11132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11147 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Close 11145 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Close 11146 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11149 NT_STATUS_OK
QUERY_FILE_INFORMATION 11149 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11154 NT_STATUS_OK
ReadX 11154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11155 NT_STATUS_OK
ReadX 11155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11169 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 258 NT_STATUS_OK
WriteX 11169 0 2048 2048 NT_STATUS_OK
Close 11169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11181 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 1004 NT_STATUS_OK
WriteX 11181 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 258 NT_STATUS_OK
WriteX 11181 0 2048 2048 NT_STATUS_OK
Close 11181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11189 NT_STATUS_OK
QUERY_FILE_INFORMATION 11189 1004 NT_STATUS_OK
WriteX 11189 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11189 258 NT_STATUS_OK
WriteX 11189 0 2048 2048 NT_STATUS_OK
Close 11189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11170 0 4096 4096 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
WriteX 11182 0 4096 4096 NT_STATUS_OK
Flush 11182 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Flush 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11170 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11182 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11172 4096 16384 16384 NT_STATUS_OK
ReadX 11152 4096 16384 16384 NT_STATUS_OK
ReadX 11184 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11191 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 2048 2048 NT_STATUS_OK
WriteX 11192 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11193 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11192 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Close 11174 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11159 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Close 11153 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11195 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11197 NT_STATUS_OK
QUERY_FILE_INFORMATION 11197 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11200 4096 16384 16384 NT_STATUS_OK
WriteX 11200 0 4096 4096 NT_STATUS_OK
WriteX 11201 0 4096 4096 NT_STATUS_OK
WriteX 11202 0 4096 4096 NT_STATUS_OK
WriteX 11203 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11206 NT_STATUS_OK
ReadX 11206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11207 NT_STATUS_OK
ReadX 11207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11208 NT_STATUS_OK
ReadX 11208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11210 NT_STATUS_OK
ReadX 11210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11216 NT_STATUS_OK
ReadX 11216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 8192 8192 NT_STATUS_OK
ReadX 11206 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11220 0 4096 4096 NT_STATUS_OK
ReadX 11220 4096 4096 4096 NT_STATUS_OK
ReadX 11220 8192 4096 4096 NT_STATUS_OK
WriteX 11206 0 4096 4096 NT_STATUS_OK
WriteX 11207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
ReadX 11221 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11200 0 4096 4096 NT_STATUS_OK
WriteX 11201 0 4096 4096 NT_STATUS_OK
WriteX 11202 0 4096 4096 NT_STATUS_OK
WriteX 11203 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11226 NT_STATUS_OK
QUERY_FILE_INFORMATION 11226 1004 NT_STATUS_OK
WriteX 11226 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11226 258 NT_STATUS_OK
WriteX 11226 0 2048 2048 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
ReadX 11229 4096 4096 4096 NT_STATUS_OK
WriteX 11229 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 4096 4096 NT_STATUS_OK
ReadX 11231 4096 4096 4096 NT_STATUS_OK
WriteX 11231 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11232 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11217 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11216 NT_STATUS_OK
Close 11218 NT_STATUS_OK
Close 11206 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11210 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Close 11231 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11234 0 4096 4096 NT_STATUS_OK
ReadX 11234 4096 4096 4096 NT_STATUS_OK
ReadX 11234 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11240 NT_STATUS_OK
ReadX 11240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
ReadX 11235 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11252 NT_STATUS_OK
QUERY_FILE_INFORMATION 11252 1004 NT_STATUS_OK
WriteX 11252 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11252 258 NT_STATUS_OK
WriteX 11252 0 2048 2048 NT_STATUS_OK
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11253 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11257 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1004 NT_STATUS_OK
WriteX 11258 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 258 NT_STATUS_OK
WriteX 11258 0 2048 2048 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11242 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11260 NT_STATUS_OK
QUERY_FILE_INFORMATION 11260 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Close 11240 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11262 NT_STATUS_OK
QUERY_FILE_INFORMATION 11262 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11264 NT_STATUS_OK
ReadX 11264 61440 4096 4096 NT_STATUS_OK
ReadX 11264 126976 4096 4096 NT_STATUS_OK
WriteX 11264 0 65536 65536 NT_STATUS_OK
WriteX 11264 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11265 NT_STATUS_OK
ReadX 11265 61440 4096 4096 NT_STATUS_OK
ReadX 11265 126976 4096 4096 NT_STATUS_OK
ReadX 11265 192512 4096 4096 NT_STATUS_OK
ReadX 11265 258048 4096 4096 NT_STATUS_OK
WriteX 11265 0 65536 65536 NT_STATUS_OK
WriteX 11265 65536 65536 65536 NT_STATUS_OK
WriteX 11265 131072 65536 65536 NT_STATUS_OK
WriteX 11265 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 61440 4096 4096 NT_STATUS_OK
ReadX 11266 126976 4096 4096 NT_STATUS_OK
ReadX 11266 192512 4096 4096 NT_STATUS_OK
ReadX 11266 258048 4096 4096 NT_STATUS_OK
ReadX 11266 323584 4096 4096 NT_STATUS_OK
ReadX 11266 389120 4096 4096 NT_STATUS_OK
ReadX 11266 454656 4096 4096 NT_STATUS_OK
ReadX 11266 520192 4096 4096 NT_STATUS_OK
WriteX 11266 0 65536 65536 NT_STATUS_OK
WriteX 11266 65536 65536 65536 NT_STATUS_OK
WriteX 11266 131072 65536 65536 NT_STATUS_OK
WriteX 11266 196608 65536 65536 NT_STATUS_OK
WriteX 11266 262144 65536 65536 NT_STATUS_OK
WriteX 11266 327680 65536 65536 NT_STATUS_OK
WriteX 11266 393216 65536 65536 NT_STATUS_OK
WriteX 11266 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11267 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11267 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11267 8192 4096 4096 NT_STATUS_OK
ReadX 11267 12288 4096 4096 NT_STATUS_OK
ReadX 11267 16384 4096 4096 NT_STATUS_OK
ReadX 11267 20480 4096 4096 NT_STATUS_OK
ReadX 11267 24576 4096 4096 NT_STATUS_OK
ReadX 11267 28672 4096 4096 NT_STATUS_OK
ReadX 11267 32768 4096 4096 NT_STATUS_OK
ReadX 11267 36864 4096 4096 NT_STATUS_OK
ReadX 11267 40960 4096 4096 NT_STATUS_OK
ReadX 11267 45056 4096 4096 NT_STATUS_OK
ReadX 11267 49152 4096 4096 NT_STATUS_OK
ReadX 11267 53248 4096 4096 NT_STATUS_OK
ReadX 11267 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11267 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11268 NT_STATUS_OK
Close 11268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11264 NT_STATUS_OK
Close 11265 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11270 NT_STATUS_OK
WriteX 11270 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11270 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11270 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11270 1004 NT_STATUS_OK
WriteX 11270 0 57088 57088 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
Flush 11270 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11271 NT_STATUS_OK
SET_FILE_INFORMATION 11271 1004 NT_STATUS_OK
Close 11271 NT_STATUS_OK
SET_FILE_INFORMATION 11270 1004 NT_STATUS_OK
WriteX 11270 0 4096 4096 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11274 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11275 NT_STATUS_OK
WriteX 11275 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11275 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11275 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11275 1004 NT_STATUS_OK
WriteX 11275 0 51456 51456 NT_STATUS_OK
WriteX 11275 0 4096 4096 NT_STATUS_OK
Flush 11275 NT_STATUS_OK
SET_FILE_INFORMATION 11275 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11275 1004 NT_STATUS_OK
WriteX 11275 0 4096 4096 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11277 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11279 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11284 NT_STATUS_OK
WriteX 11284 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11284 258 NT_STATUS_OK
WriteX 11284 0 53077 53077 NT_STATUS_OK
Close 11284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11285 NT_STATUS_OK
WriteX 11285 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11285 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11285 1004 NT_STATUS_OK
WriteX 11285 0 65536 65536 NT_STATUS_OK
WriteX 11285 65536 1856 1856 NT_STATUS_OK
WriteX 11285 0 4096 4096 NT_STATUS_OK
Flush 11285 NT_STATUS_OK
SET_FILE_INFORMATION 11285 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11285 1004 NT_STATUS_OK
WriteX 11285 0 4096 4096 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11294 NT_STATUS_OK
WriteX 11294 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11294 258 NT_STATUS_OK
WriteX 11294 0 7983 7983 NT_STATUS_OK
Close 11294 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11296 NT_STATUS_OK
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11299 NT_STATUS_OK
WriteX 11299 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 258 NT_STATUS_OK
WriteX 11299 0 65536 65536 NT_STATUS_OK
WriteX 11299 65536 65536 65536 NT_STATUS_OK
WriteX 11299 131072 65536 65536 NT_STATUS_OK
WriteX 11299 196608 65536 65536 NT_STATUS_OK
WriteX 11299 262144 65536 65536 NT_STATUS_OK
WriteX 11299 327680 65536 65536 NT_STATUS_OK
WriteX 11299 393216 65536 65536 NT_STATUS_OK
WriteX 11299 458752 46731 46731 NT_STATUS_OK
Close 11299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11300 NT_STATUS_OK
WriteX 11300 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11300 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11289 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11300 1004 NT_STATUS_OK
WriteX 11300 0 65536 65536 NT_STATUS_OK
WriteX 11300 65536 22848 22848 NT_STATUS_OK
WriteX 11300 0 4096 4096 NT_STATUS_OK
Flush 11300 NT_STATUS_OK
SET_FILE_INFORMATION 11300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11300 1004 NT_STATUS_OK
WriteX 11300 0 4096 4096 NT_STATUS_OK
Close 11300 NT_STATUS_OK
Close 11289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11302 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11304 NT_STATUS_OK
ReadX 11304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11304 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11305 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11305 1004 NT_STATUS_OK
ReadX 11305 8192 4096 4096 NT_STATUS_OK
ReadX 11305 12288 4096 4096 NT_STATUS_OK
ReadX 11305 16384 4096 4096 NT_STATUS_OK
ReadX 11305 20480 4096 4096 NT_STATUS_OK
ReadX 11305 24576 4096 4096 NT_STATUS_OK
ReadX 11305 28672 4096 4096 NT_STATUS_OK
ReadX 11305 32768 4096 4096 NT_STATUS_OK
ReadX 11305 36864 4096 4096 NT_STATUS_OK
ReadX 11305 40960 4096 4096 NT_STATUS_OK
ReadX 11305 45056 4096 4096 NT_STATUS_OK
ReadX 11305 49152 4096 4096 NT_STATUS_OK
ReadX 11305 53248 4096 4096 NT_STATUS_OK
ReadX 11305 57344 4096 4096 NT_STATUS_OK
ReadX 11305 61440 4096 4096 NT_STATUS_OK
ReadX 11305 65536 4096 4096 NT_STATUS_OK
ReadX 11305 69632 4096 4096 NT_STATUS_OK
ReadX 11305 73728 4096 4096 NT_STATUS_OK
ReadX 11305 77824 4096 4096 NT_STATUS_OK
ReadX 11305 81920 4096 4096 NT_STATUS_OK
ReadX 11305 86016 4096 4096 NT_STATUS_OK
ReadX 11305 90112 4096 4096 NT_STATUS_OK
ReadX 11305 94208 4096 4096 NT_STATUS_OK
ReadX 11305 98304 4096 4096 NT_STATUS_OK
ReadX 11305 102400 4096 4096 NT_STATUS_OK
ReadX 11305 106496 4096 4096 NT_STATUS_OK
ReadX 11305 110592 4096 4096 NT_STATUS_OK
ReadX 11305 114688 4096 4096 NT_STATUS_OK
ReadX 11305 118784 4096 4096 NT_STATUS_OK
ReadX 11305 122880 4096 4096 NT_STATUS_OK
ReadX 11305 126976 4096 4096 NT_STATUS_OK
ReadX 11305 131072 4096 4096 NT_STATUS_OK
ReadX 11305 135168 4096 4096 NT_STATUS_OK
ReadX 11305 139264 4096 4096 NT_STATUS_OK
ReadX 11305 143360 4096 4096 NT_STATUS_OK
ReadX 11305 147456 4096 4096 NT_STATUS_OK
ReadX 11305 151552 4096 4096 NT_STATUS_OK
ReadX 11305 155648 4096 4096 NT_STATUS_OK
ReadX 11305 159744 4096 4096 NT_STATUS_OK
ReadX 11305 163840 4096 4096 NT_STATUS_OK
ReadX 11305 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11305 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11308 NT_STATUS_OK
WriteX 11308 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11308 258 NT_STATUS_OK
Close 11305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11309 NT_STATUS_OK
SET_FILE_INFORMATION 11309 1004 NT_STATUS_OK
Close 11309 NT_STATUS_OK
WriteX 11308 0 42388 42388 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11310 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
ReadX 11312 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11313 NT_STATUS_OK
WriteX 11313 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11313 258 NT_STATUS_OK
SET_FILE_INFORMATION 11313 1004 NT_STATUS_OK
WriteX 11313 0 42652 42652 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Close 11312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11317 NT_STATUS_OK
ReadX 11317 0 4096 4096 NT_STATUS_OK
ReadX 11317 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11322 NT_STATUS_OK
WriteX 11322 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11322 258 NT_STATUS_OK
WriteX 11322 0 65536 65536 NT_STATUS_OK
WriteX 11322 65536 49 49 NT_STATUS_OK
Close 11322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11323 NT_STATUS_OK
ReadX 11323 0 61440 61440 NT_STATUS_OK
ReadX 11323 61440 4096 4096 NT_STATUS_OK
ReadX 11323 65536 61440 61440 NT_STATUS_OK
ReadX 11323 126976 4096 4096 NT_STATUS_OK
ReadX 11323 131072 61440 61440 NT_STATUS_OK
ReadX 11323 192512 4096 4096 NT_STATUS_OK
ReadX 11323 196608 61440 61440 NT_STATUS_OK
ReadX 11323 258048 4096 4096 NT_STATUS_OK
ReadX 11323 262144 61440 61440 NT_STATUS_OK
ReadX 11323 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 61440 61440 NT_STATUS_OK
ReadX 11324 61440 4096 4096 NT_STATUS_OK
ReadX 11324 65536 61440 61440 NT_STATUS_OK
ReadX 11324 126976 4096 4096 NT_STATUS_OK
ReadX 11324 131072 61440 61440 NT_STATUS_OK
ReadX 11324 192512 4096 4096 NT_STATUS_OK
ReadX 11324 196608 61440 61440 NT_STATUS_OK
ReadX 11324 258048 4096 4096 NT_STATUS_OK
ReadX 11324 262144 61440 61440 NT_STATUS_OK
ReadX 11324 323584 4096 4096 NT_STATUS_OK
ReadX 11324 327680 61440 61440 NT_STATUS_OK
ReadX 11324 389120 4096 4096 NT_STATUS_OK
ReadX 11324 393216 61440 61440 NT_STATUS_OK
ReadX 11324 454656 4096 4096 NT_STATUS_OK
ReadX 11324 458752 61440 61440 NT_STATUS_OK
ReadX 11324 520192 4096 4096 NT_STATUS_OK
ReadX 11324 524288 61440 61440 NT_STATUS_OK
ReadX 11324 585728 4096 4096 NT_STATUS_OK
ReadX 11324 589824 61440 61440 NT_STATUS_OK
ReadX 11324 651264 4096 4096 NT_STATUS_OK
ReadX 11324 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 61440 61440 NT_STATUS_OK
ReadX 11325 61440 4096 4096 NT_STATUS_OK
ReadX 11325 65536 61440 61440 NT_STATUS_OK
ReadX 11325 126976 4096 4096 NT_STATUS_OK
ReadX 11325 131072 61440 61440 NT_STATUS_OK
ReadX 11325 192512 4096 4096 NT_STATUS_OK
ReadX 11325 196608 61440 61440 NT_STATUS_OK
ReadX 11325 258048 4096 4096 NT_STATUS_OK
ReadX 11325 262144 61440 61440 NT_STATUS_OK
ReadX 11325 323584 4096 4096 NT_STATUS_OK
ReadX 11325 327680 61440 61440 NT_STATUS_OK
ReadX 11325 389120 4096 4096 NT_STATUS_OK
ReadX 11325 393216 61440 61440 NT_STATUS_OK
ReadX 11325 454656 4096 4096 NT_STATUS_OK
ReadX 11325 458752 61440 61440 NT_STATUS_OK
ReadX 11325 520192 4096 4096 NT_STATUS_OK
ReadX 11325 524288 61440 61440 NT_STATUS_OK
ReadX 11325 585728 4096 4096 NT_STATUS_OK
ReadX 11325 589824 61440 61440 NT_STATUS_OK
ReadX 11325 651264 4096 4096 NT_STATUS_OK
ReadX 11325 655360 61440 61440 NT_STATUS_OK
ReadX 11325 716800 4096 4096 NT_STATUS_OK
ReadX 11325 720896 61440 61440 NT_STATUS_OK
ReadX 11325 782336 4096 4096 NT_STATUS_OK
ReadX 11325 786432 61440 61440 NT_STATUS_OK
ReadX 11325 847872 4096 4096 NT_STATUS_OK
ReadX 11325 851968 61440 61440 NT_STATUS_OK
ReadX 11325 913408 4096 4096 NT_STATUS_OK
ReadX 11325 917504 61440 61440 NT_STATUS_OK
ReadX 11325 978944 4096 4096 NT_STATUS_OK
ReadX 11325 983040 61440 61440 NT_STATUS_OK
ReadX 11325 1044480 4096 4096 NT_STATUS_OK
ReadX 11325 1048576 61440 61440 NT_STATUS_OK
ReadX 11325 1110016 4096 4096 NT_STATUS_OK
ReadX 11325 1114112 61440 61440 NT_STATUS_OK
ReadX 11325 1175552 4096 4096 NT_STATUS_OK
ReadX 11325 1179648 61440 61440 NT_STATUS_OK
ReadX 11325 1241088 4096 4096 NT_STATUS_OK
ReadX 11325 1245184 61440 61440 NT_STATUS_OK
ReadX 11325 1306624 4096 4096 NT_STATUS_OK
ReadX 11325 1310720 61440 61440 NT_STATUS_OK
ReadX 11325 1372160 4096 4096 NT_STATUS_OK
ReadX 11325 1376256 61440 61440 NT_STATUS_OK
ReadX 11325 1437696 4096 4096 NT_STATUS_OK
ReadX 11325 1441792 61440 61440 NT_STATUS_OK
ReadX 11325 1503232 4096 4096 NT_STATUS_OK
ReadX 11325 1507328 61440 61440 NT_STATUS_OK
ReadX 11325 1568768 4096 4096 NT_STATUS_OK
ReadX 11325 1572864 61440 61440 NT_STATUS_OK
ReadX 11325 1634304 4096 4096 NT_STATUS_OK
ReadX 11325 1638400 61440 61440 NT_STATUS_OK
ReadX 11325 1699840 4096 4096 NT_STATUS_OK
ReadX 11325 1703936 61440 61440 NT_STATUS_OK
ReadX 11325 1765376 4096 4096 NT_STATUS_OK
ReadX 11325 1769472 61440 61440 NT_STATUS_OK
ReadX 11325 1830912 4096 4096 NT_STATUS_OK
ReadX 11325 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11327 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1005 NT_STATUS_OK
ReadX 11327 2156 24 24 NT_STATUS_OK
ReadX 11327 2139 276 276 NT_STATUS_OK
ReadX 11327 2136 14 14 NT_STATUS_OK
ReadX 11327 2136 7 7 NT_STATUS_OK
ReadX 11327 2138 12 12 NT_STATUS_OK
ReadX 11327 2137 8 8 NT_STATUS_OK
ReadX 11327 2135 15 15 NT_STATUS_OK
ReadX 11327 0 16 16 NT_STATUS_OK
ReadX 11327 16 2048 2048 NT_STATUS_OK
ReadX 11327 2064 2048 2048 NT_STATUS_OK
ReadX 11327 257 2048 2048 NT_STATUS_OK
ReadX 11327 385 2048 2048 NT_STATUS_OK
ReadX 11327 513 2048 2048 NT_STATUS_OK
ReadX 11327 641 2048 2048 NT_STATUS_OK
ReadX 11327 769 2048 2048 NT_STATUS_OK
ReadX 11327 897 2048 2048 NT_STATUS_OK
ReadX 11327 1025 2048 2048 NT_STATUS_OK
ReadX 11327 1153 2048 2048 NT_STATUS_OK
ReadX 11327 1281 2048 2048 NT_STATUS_OK
ReadX 11327 1409 2048 2048 NT_STATUS_OK
ReadX 11327 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Close 11317 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11332 NT_STATUS_OK
WriteX 11332 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11332 258 NT_STATUS_OK
WriteX 11332 0 10575 10575 NT_STATUS_OK
Flush 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11337 NT_STATUS_OK
LockX 11337 2147483538 1 NT_STATUS_OK
UnlockX 11337 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1005 NT_STATUS_OK
ReadX 11337 0 512 512 NT_STATUS_OK
ReadX 11337 512 512 512 NT_STATUS_OK
ReadX 11337 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11338 NT_STATUS_OK
QUERY_FILE_INFORMATION 11338 1005 NT_STATUS_OK
ReadX 11338 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11339 NT_STATUS_OK
LockX 11339 2147483538 1 NT_STATUS_OK
UnlockX 11339 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11339 1005 NT_STATUS_OK
ReadX 11339 0 512 512 NT_STATUS_OK
ReadX 11339 512 512 512 NT_STATUS_OK
ReadX 11339 1024 512 512 NT_STATUS_OK
ReadX 11339 288 20 20 NT_STATUS_OK
ReadX 11339 308 2084 2084 NT_STATUS_OK
ReadX 11339 388 2084 2084 NT_STATUS_OK
ReadX 11339 388 2084 2084 NT_STATUS_OK
ReadX 11326 2157 1386 1386 NT_STATUS_OK
ReadX 11339 2472 399 399 NT_STATUS_OK
ReadX 11339 3072 1536 1536 NT_STATUS_OK
ReadX 11339 544 149 149 NT_STATUS_OK
ReadX 11339 693 485 485 NT_STATUS_OK
Close 11339 NT_STATUS_OK
ReadX 11326 2157 4096 4096 NT_STATUS_OK
ReadX 11326 6253 4096 4096 NT_STATUS_OK
ReadX 11326 10349 4096 4096 NT_STATUS_OK
ReadX 11326 14445 4096 4096 NT_STATUS_OK
ReadX 11326 18541 4096 4096 NT_STATUS_OK
ReadX 11326 22637 256 256 NT_STATUS_OK
ReadX 11326 22893 4096 4096 NT_STATUS_OK
ReadX 11326 26989 4096 4096 NT_STATUS_OK
ReadX 11326 31085 4096 4096 NT_STATUS_OK
ReadX 11326 35181 4096 4096 NT_STATUS_OK
ReadX 11326 39277 4096 4096 NT_STATUS_OK
ReadX 11326 43373 4096 4096 NT_STATUS_OK
ReadX 11326 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11326 2157 1024 1024 NT_STATUS_OK
ReadX 11326 1667 4688 4688 NT_STATUS_OK
ReadX 11326 6355 3516 3516 NT_STATUS_OK
ReadX 11326 9871 16384 16384 NT_STATUS_OK
ReadX 11326 26255 3771 3771 NT_STATUS_OK
ReadX 11326 30026 2048 2048 NT_STATUS_OK
ReadX 11326 32074 1024 1024 NT_STATUS_OK
ReadX 11326 33098 6652 6652 NT_STATUS_OK
ReadX 11326 39750 16384 16384 NT_STATUS_OK
ReadX 11326 56134 10496 10496 NT_STATUS_OK
ReadX 11326 66630 1784 1784 NT_STATUS_OK
ReadX 11326 68414 90 90 NT_STATUS_OK
ReadX 11326 68504 273 273 NT_STATUS_OK
ReadX 11326 68777 1600 1600 NT_STATUS_OK
ReadX 11326 70377 640 640 NT_STATUS_OK
ReadX 11326 71017 1280 1280 NT_STATUS_OK
ReadX 11326 72297 8464 8464 NT_STATUS_OK
ReadX 11326 80761 158 158 NT_STATUS_OK
ReadX 11326 80919 912 912 NT_STATUS_OK
ReadX 11326 81831 1980 1980 NT_STATUS_OK
ReadX 11326 83811 2256 2256 NT_STATUS_OK
ReadX 11326 86067 400 400 NT_STATUS_OK
ReadX 11326 86467 252 252 NT_STATUS_OK
ReadX 11326 86719 42 42 NT_STATUS_OK
ReadX 11326 86761 725 725 NT_STATUS_OK
ReadX 11326 2009 512 512 NT_STATUS_OK
ReadX 11326 3895 9 9 NT_STATUS_OK
ReadX 11326 3781 46 46 NT_STATUS_OK
ReadX 11326 4059 92 92 NT_STATUS_OK
ReadX 11326 3781 92 92 NT_STATUS_OK
ReadX 11326 3986 184 184 NT_STATUS_OK
ReadX 11326 3987 16384 16384 NT_STATUS_OK
ReadX 11326 3902 16384 16384 NT_STATUS_OK
ReadX 11326 3781 10240 10240 NT_STATUS_OK
ReadX 11326 3821 16384 16384 NT_STATUS_OK
ReadX 11326 3891 935 935 NT_STATUS_OK
ReadX 11326 4060 10240 10240 NT_STATUS_OK
ReadX 11326 4059 184 184 NT_STATUS_OK
ReadX 11326 256 184 184 NT_STATUS_OK
ReadX 11326 256 1026 1026 NT_STATUS_OK
ReadX 11326 3901 326 326 NT_STATUS_OK
ReadX 11326 3899 652 652 NT_STATUS_OK
ReadX 11326 256 2 2 NT_STATUS_OK
ReadX 11326 258 4948 4948 NT_STATUS_OK
Close 11326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11341 NT_STATUS_OK
Close 11341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11344 NT_STATUS_OK
WriteX 11344 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11344 258 NT_STATUS_OK
WriteX 11344 0 65536 65536 NT_STATUS_OK
WriteX 11344 65536 65536 65536 NT_STATUS_OK
WriteX 11344 131072 65536 65536 NT_STATUS_OK
WriteX 11344 196608 65536 65536 NT_STATUS_OK
WriteX 11344 262144 65536 65536 NT_STATUS_OK
WriteX 11344 327680 65536 65536 NT_STATUS_OK
WriteX 11344 393216 65536 65536 NT_STATUS_OK
WriteX 11344 458752 65536 65536 NT_STATUS_OK
WriteX 11344 524288 65536 65536 NT_STATUS_OK
WriteX 11344 589824 35257 35257 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11349 NT_STATUS_OK
WriteX 11349 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
WriteX 11349 0 65536 65536 NT_STATUS_OK
WriteX 11349 65536 65536 65536 NT_STATUS_OK
WriteX 11349 131072 65536 65536 NT_STATUS_OK
WriteX 11349 196608 65536 65536 NT_STATUS_OK
WriteX 11349 262144 65536 65536 NT_STATUS_OK
WriteX 11349 327680 65536 65536 NT_STATUS_OK
WriteX 11349 393216 65536 65536 NT_STATUS_OK
WriteX 11349 458752 65536 65536 NT_STATUS_OK
WriteX 11349 524288 65536 65536 NT_STATUS_OK
WriteX 11349 589824 57598 57598 NT_STATUS_OK
Close 11349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11351 NT_STATUS_OK
WriteX 11351 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11351 258 NT_STATUS_OK
WriteX 11351 0 12543 12543 NT_STATUS_OK
Flush 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11357 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1005 NT_STATUS_OK
ReadX 11357 1938 24 24 NT_STATUS_OK
ReadX 11357 1920 276 276 NT_STATUS_OK
ReadX 11357 1918 14 14 NT_STATUS_OK
ReadX 11357 1918 7 7 NT_STATUS_OK
ReadX 11357 1919 12 12 NT_STATUS_OK
ReadX 11357 1919 8 8 NT_STATUS_OK
ReadX 11357 1917 15 15 NT_STATUS_OK
ReadX 11357 0 16 16 NT_STATUS_OK
ReadX 11357 16 2048 2048 NT_STATUS_OK
ReadX 11357 2064 2048 2048 NT_STATUS_OK
ReadX 11357 257 2048 2048 NT_STATUS_OK
ReadX 11357 385 2048 2048 NT_STATUS_OK
ReadX 11357 513 2048 2048 NT_STATUS_OK
ReadX 11357 641 2048 2048 NT_STATUS_OK
ReadX 11357 769 2048 2048 NT_STATUS_OK
ReadX 11357 897 2048 2048 NT_STATUS_OK
ReadX 11357 1025 2048 2048 NT_STATUS_OK
ReadX 11357 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11362 NT_STATUS_OK
WriteX 11362 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11362 258 NT_STATUS_OK
WriteX 11362 0 11588 11588 NT_STATUS_OK
Flush 11362 NT_STATUS_OK
Close 11362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
Close 11357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11367 NT_STATUS_OK
WriteX 11367 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11367 258 NT_STATUS_OK
WriteX 11367 0 11615 11615 NT_STATUS_OK
Flush 11367 NT_STATUS_OK
Close 11367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11376 NT_STATUS_OK
WriteX 11376 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 258 NT_STATUS_OK
WriteX 11376 0 65536 65536 NT_STATUS_OK
WriteX 11376 65536 16050 16050 NT_STATUS_OK
Close 11376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11356 1939 64 64 NT_STATUS_OK
ReadX 11356 128 248 248 NT_STATUS_OK
ReadX 11356 128 568 568 NT_STATUS_OK
ReadX 11356 3872 1536 1536 NT_STATUS_OK
ReadX 11356 3456 2560 2560 NT_STATUS_OK
ReadX 11356 3136 512 512 NT_STATUS_OK
ReadX 11356 2880 4096 4096 NT_STATUS_OK
ReadX 11356 3264 3072 3072 NT_STATUS_OK
ReadX 11356 320 4096 4096 NT_STATUS_OK
ReadX 11356 1024 4096 4096 NT_STATUS_OK
ReadX 11356 3616 4096 4096 NT_STATUS_OK
ReadX 11356 1939 64 64 NT_STATUS_OK
ReadX 11356 128 248 248 NT_STATUS_OK
ReadX 11356 128 608 608 NT_STATUS_OK
ReadX 11356 2858 1024 1024 NT_STATUS_OK
ReadX 11356 2810 4096 4096 NT_STATUS_OK
ReadX 11356 2826 4096 4096 NT_STATUS_OK
ReadX 11356 2580 2048 2048 NT_STATUS_OK
ReadX 11356 2800 2560 2560 NT_STATUS_OK
ReadX 11356 2100 4096 4096 NT_STATUS_OK
ReadX 11356 2084 4096 4096 NT_STATUS_OK
ReadX 11356 868 4096 4096 NT_STATUS_OK
ReadX 11356 2324 4096 4096 NT_STATUS_OK
ReadX 11356 884 4096 4096 NT_STATUS_OK
ReadX 11356 2604 1024 1024 NT_STATUS_OK
ReadX 11356 580 4096 4096 NT_STATUS_OK
ReadX 11356 596 4096 4096 NT_STATUS_OK
ReadX 11356 2752 4096 4096 NT_STATUS_OK
ReadX 11356 2842 1024 1024 NT_STATUS_OK
ReadX 11356 660 4096 4096 NT_STATUS_OK
ReadX 11356 2720 4096 4096 NT_STATUS_OK
ReadX 11356 2736 4096 4096 NT_STATUS_OK
ReadX 11356 628 4096 4096 NT_STATUS_OK
ReadX 11356 2704 4096 4096 NT_STATUS_OK
ReadX 11356 1556 4096 4096 NT_STATUS_OK
ReadX 11356 576 4096 4096 NT_STATUS_OK
ReadX 11356 3168 1536 1536 NT_STATUS_OK
ReadX 11356 832 4096 4096 NT_STATUS_OK
ReadX 11356 1088 4096 4096 NT_STATUS_OK
ReadX 11356 1344 4096 4096 NT_STATUS_OK
ReadX 11356 1600 4096 4096 NT_STATUS_OK
ReadX 11356 1856 4096 4096 NT_STATUS_OK
ReadX 11356 2112 4096 4096 NT_STATUS_OK
ReadX 11356 1892 4096 4096 NT_STATUS_OK
ReadX 11356 820 4096 4096 NT_STATUS_OK
ReadX 11356 788 4096 4096 NT_STATUS_OK
ReadX 11356 1604 4096 4096 NT_STATUS_OK
ReadX 11356 3648 4096 4096 NT_STATUS_OK
ReadX 11356 2608 4096 4096 NT_STATUS_OK
ReadX 11356 548 4096 4096 NT_STATUS_OK
ReadX 11356 740 4096 4096 NT_STATUS_OK
ReadX 11356 1344 4096 4096 NT_STATUS_OK
ReadX 11356 3392 4096 4096 NT_STATUS_OK
ReadX 11356 3904 4096 4096 NT_STATUS_OK
ReadX 11356 644 4096 4096 NT_STATUS_OK
ReadX 11356 676 4096 4096 NT_STATUS_OK
ReadX 11356 2688 4096 4096 NT_STATUS_OK
ReadX 11356 320 4096 4096 NT_STATUS_OK
ReadX 11356 900 4096 4096 NT_STATUS_OK
ReadX 11356 1908 4096 4096 NT_STATUS_OK
ReadX 11356 852 4096 4096 NT_STATUS_OK
ReadX 11356 724 4096 4096 NT_STATUS_OK
ReadX 11356 2292 4096 4096 NT_STATUS_OK
ReadX 11356 612 4096 4096 NT_STATUS_OK
ReadX 11356 388 4096 4096 NT_STATUS_OK
ReadX 11356 2368 4096 4096 NT_STATUS_OK
ReadX 11356 2624 4096 4096 NT_STATUS_OK
ReadX 11356 500 4096 4096 NT_STATUS_OK
ReadX 11356 356 4096 4096 NT_STATUS_OK
ReadX 11356 1024 4096 4096 NT_STATUS_OK
ReadX 11356 576 4096 4096 NT_STATUS_OK
ReadX 11356 340 4096 4096 NT_STATUS_OK
ReadX 11356 420 4096 4096 NT_STATUS_OK
ReadX 11356 1600 4096 4096 NT_STATUS_OK
ReadX 11356 404 4096 4096 NT_STATUS_OK
ReadX 11356 1428 4096 4096 NT_STATUS_OK
ReadX 11356 2656 4096 4096 NT_STATUS_OK
ReadX 11356 2624 4096 4096 NT_STATUS_OK
ReadX 11356 452 4096 4096 NT_STATUS_OK
ReadX 11356 692 4096 4096 NT_STATUS_OK
ReadX 11356 564 4096 4096 NT_STATUS_OK
ReadX 11356 372 4096 4096 NT_STATUS_OK
ReadX 11356 468 4096 4096 NT_STATUS_OK
ReadX 11356 484 4096 4096 NT_STATUS_OK
ReadX 11356 1088 4096 4096 NT_STATUS_OK
ReadX 11356 1924 4096 4096 NT_STATUS_OK
ReadX 11356 2768 4096 4096 NT_STATUS_OK
ReadX 11356 832 4096 4096 NT_STATUS_OK
ReadX 11356 836 4096 4096 NT_STATUS_OK
ReadX 11356 1856 4096 4096 NT_STATUS_OK
ReadX 11356 2640 4096 4096 NT_STATUS_OK
ReadX 11356 436 4096 4096 NT_STATUS_OK
ReadX 11356 1828 4096 4096 NT_STATUS_OK
ReadX 11356 804 4096 4096 NT_STATUS_OK
ReadX 11356 1860 4096 4096 NT_STATUS_OK
ReadX 11356 1812 4096 4096 NT_STATUS_OK
ReadX 11356 756 4096 4096 NT_STATUS_OK
ReadX 11356 1636 4096 4096 NT_STATUS_OK
ReadX 11356 772 4096 4096 NT_STATUS_OK
ReadX 11356 2036 4096 4096 NT_STATUS_OK
ReadX 11356 1220 4096 4096 NT_STATUS_OK
ReadX 11356 1652 4096 4096 NT_STATUS_OK
ReadX 11356 2588 4096 4096 NT_STATUS_OK
ReadX 11356 916 4096 4096 NT_STATUS_OK
ReadX 11356 260 4096 4096 NT_STATUS_OK
ReadX 11356 932 4096 4096 NT_STATUS_OK
ReadX 11356 2624 4096 4096 NT_STATUS_OK
ReadX 11356 308 4096 4096 NT_STATUS_OK
ReadX 11356 292 4096 4096 NT_STATUS_OK
ReadX 11356 1140 4096 4096 NT_STATUS_OK
ReadX 11356 276 4096 4096 NT_STATUS_OK
ReadX 11356 2020 4096 4096 NT_STATUS_OK
ReadX 11356 2880 4096 4096 NT_STATUS_OK
ReadX 11356 516 4096 4096 NT_STATUS_OK
ReadX 11356 1844 4096 4096 NT_STATUS_OK
ReadX 11356 1124 4096 4096 NT_STATUS_OK
ReadX 11356 3136 4096 4096 NT_STATUS_OK
ReadX 11356 324 4096 4096 NT_STATUS_OK
ReadX 11356 1156 4096 4096 NT_STATUS_OK
ReadX 11356 1172 4096 4096 NT_STATUS_OK
ReadX 11356 2112 4096 4096 NT_STATUS_OK
ReadX 11356 2368 4096 4096 NT_STATUS_OK
ReadX 11356 964 4096 4096 NT_STATUS_OK
ReadX 11356 980 4096 4096 NT_STATUS_OK
ReadX 11356 1012 4096 4096 NT_STATUS_OK
ReadX 11356 532 4096 4096 NT_STATUS_OK
ReadX 11356 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11356 1620 4096 4096 NT_STATUS_OK
ReadX 11356 1604 4096 4096 NT_STATUS_OK
ReadX 11356 2116 4096 4096 NT_STATUS_OK
ReadX 11356 2132 4096 4096 NT_STATUS_OK
ReadX 11356 2148 4096 4096 NT_STATUS_OK
ReadX 11356 2276 4096 4096 NT_STATUS_OK
ReadX 11356 1540 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11381 NT_STATUS_OK
QUERY_FILE_INFORMATION 11336 1004 NT_STATUS_OK
Close 11336 NT_STATUS_OK
WriteX 11381 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11381 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11338 1004 NT_STATUS_OK
Close 11338 NT_STATUS_OK
WriteX 11381 0 65536 65536 NT_STATUS_OK
WriteX 11381 65536 64850 64850 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11383 NT_STATUS_OK
WriteX 11383 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11383 258 NT_STATUS_OK
ReadX 11356 2068 4096 4096 NT_STATUS_OK
ReadX 11356 1588 4096 4096 NT_STATUS_OK
ReadX 11356 1572 4096 4096 NT_STATUS_OK
WriteX 11383 0 18630 18630 NT_STATUS_OK
Flush 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11387 NT_STATUS_OK
ReadX 11387 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11356 612 4096 4096 NT_STATUS_OK
ReadX 11356 564 4096 4096 NT_STATUS_OK
ReadX 11356 1876 4096 4096 NT_STATUS_OK
ReadX 11356 628 4096 4096 NT_STATUS_OK
ReadX 11356 740 4096 4096 NT_STATUS_OK
ReadX 11356 724 4096 4096 NT_STATUS_OK
ReadX 11356 644 4096 4096 NT_STATUS_OK
ReadX 11356 2324 4096 4096 NT_STATUS_OK
ReadX 11356 660 4096 4096 NT_STATUS_OK
ReadX 11356 852 4096 4096 NT_STATUS_OK
ReadX 11356 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11356 2368 4096 4096 NT_STATUS_OK
ReadX 11356 1024 4096 4096 NT_STATUS_OK
ReadX 11356 320 4096 4096 NT_STATUS_OK
ReadX 11356 580 4096 4096 NT_STATUS_OK
ReadX 11356 3136 512 512 NT_STATUS_OK
ReadX 11356 2880 4096 4096 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 61440 4096 4096 NT_STATUS_OK
ReadX 11388 126976 4096 4096 NT_STATUS_OK
WriteX 11388 0 65536 65536 NT_STATUS_OK
WriteX 11388 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 61440 4096 4096 NT_STATUS_OK
ReadX 11389 126976 4096 4096 NT_STATUS_OK
ReadX 11389 192512 4096 4096 NT_STATUS_OK
ReadX 11389 258048 4096 4096 NT_STATUS_OK
WriteX 11389 0 65536 65536 NT_STATUS_OK
WriteX 11389 65536 65536 65536 NT_STATUS_OK
WriteX 11389 131072 65536 65536 NT_STATUS_OK
WriteX 11389 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 61440 4096 4096 NT_STATUS_OK
ReadX 11390 126976 4096 4096 NT_STATUS_OK
ReadX 11390 192512 4096 4096 NT_STATUS_OK
ReadX 11390 258048 4096 4096 NT_STATUS_OK
ReadX 11390 323584 4096 4096 NT_STATUS_OK
ReadX 11390 389120 4096 4096 NT_STATUS_OK
ReadX 11390 454656 4096 4096 NT_STATUS_OK
ReadX 11390 520192 4096 4096 NT_STATUS_OK
WriteX 11390 0 65536 65536 NT_STATUS_OK
WriteX 11390 65536 65536 65536 NT_STATUS_OK
WriteX 11390 131072 65536 65536 NT_STATUS_OK
WriteX 11390 196608 65536 65536 NT_STATUS_OK
WriteX 11390 262144 65536 65536 NT_STATUS_OK
WriteX 11390 327680 65536 65536 NT_STATUS_OK
WriteX 11390 393216 65536 65536 NT_STATUS_OK
WriteX 11390 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11392 NT_STATUS_OK
Close 11392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11393 NT_STATUS_OK
WriteX 11393 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11393 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11391 0 8192 8192 NT_STATUS_OK
Flush 11391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11391 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11391 0 8192 8192 NT_STATUS_OK
Flush 11391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11391 0 8192 8192 NT_STATUS_OK
Flush 11391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11391 0 8192 8192 NT_STATUS_OK
Flush 11391 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11395 NT_STATUS_OK
Close 11395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11387 NT_STATUS_OK
Close 11355 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11398 NT_STATUS_OK
WriteX 11398 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 258 NT_STATUS_OK
WriteX 11398 0 62591 62591 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11403 NT_STATUS_OK
WriteX 11403 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 10845 10845 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11405 NT_STATUS_OK
Close 11405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11408 NT_STATUS_OK
WriteX 11408 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 258 NT_STATUS_OK
WriteX 11408 0 30118 30118 NT_STATUS_OK
Close 11408 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
WriteX 11393 0 64 64 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11410 NT_STATUS_OK
ReadX 11410 0 61440 61440 NT_STATUS_OK
ReadX 11410 61440 4096 4096 NT_STATUS_OK
ReadX 11410 65536 61440 61440 NT_STATUS_OK
ReadX 11410 126976 4096 4096 NT_STATUS_OK
ReadX 11410 131072 61440 61440 NT_STATUS_OK
ReadX 11410 192512 4096 4096 NT_STATUS_OK
ReadX 11410 196608 61440 61440 NT_STATUS_OK
ReadX 11410 258048 4096 4096 NT_STATUS_OK
ReadX 11410 262144 61440 61440 NT_STATUS_OK
ReadX 11410 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11411 NT_STATUS_OK
ReadX 11411 0 61440 61440 NT_STATUS_OK
ReadX 11411 61440 4096 4096 NT_STATUS_OK
ReadX 11411 65536 61440 61440 NT_STATUS_OK
ReadX 11411 126976 4096 4096 NT_STATUS_OK
ReadX 11411 131072 61440 61440 NT_STATUS_OK
ReadX 11411 192512 4096 4096 NT_STATUS_OK
ReadX 11411 196608 61440 61440 NT_STATUS_OK
ReadX 11411 258048 4096 4096 NT_STATUS_OK
ReadX 11411 262144 61440 61440 NT_STATUS_OK
ReadX 11411 323584 4096 4096 NT_STATUS_OK
ReadX 11411 327680 61440 61440 NT_STATUS_OK
ReadX 11411 389120 4096 4096 NT_STATUS_OK
ReadX 11411 393216 61440 61440 NT_STATUS_OK
ReadX 11411 454656 4096 4096 NT_STATUS_OK
ReadX 11411 458752 61440 61440 NT_STATUS_OK
ReadX 11411 520192 4096 4096 NT_STATUS_OK
ReadX 11411 524288 61440 61440 NT_STATUS_OK
ReadX 11411 585728 4096 4096 NT_STATUS_OK
ReadX 11411 589824 61440 61440 NT_STATUS_OK
ReadX 11411 651264 4096 4096 NT_STATUS_OK
ReadX 11411 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 61440 61440 NT_STATUS_OK
ReadX 11412 61440 4096 4096 NT_STATUS_OK
ReadX 11412 65536 61440 61440 NT_STATUS_OK
ReadX 11412 126976 4096 4096 NT_STATUS_OK
ReadX 11412 131072 61440 61440 NT_STATUS_OK
ReadX 11412 192512 4096 4096 NT_STATUS_OK
ReadX 11412 196608 61440 61440 NT_STATUS_OK
ReadX 11412 258048 4096 4096 NT_STATUS_OK
ReadX 11412 262144 61440 61440 NT_STATUS_OK
ReadX 11412 323584 4096 4096 NT_STATUS_OK
ReadX 11412 327680 61440 61440 NT_STATUS_OK
ReadX 11412 389120 4096 4096 NT_STATUS_OK
ReadX 11412 393216 61440 61440 NT_STATUS_OK
ReadX 11412 454656 4096 4096 NT_STATUS_OK
ReadX 11412 458752 61440 61440 NT_STATUS_OK
ReadX 11412 520192 4096 4096 NT_STATUS_OK
ReadX 11412 524288 61440 61440 NT_STATUS_OK
ReadX 11412 585728 4096 4096 NT_STATUS_OK
ReadX 11412 589824 61440 61440 NT_STATUS_OK
ReadX 11412 651264 4096 4096 NT_STATUS_OK
ReadX 11412 655360 61440 61440 NT_STATUS_OK
ReadX 11412 716800 4096 4096 NT_STATUS_OK
ReadX 11412 720896 61440 61440 NT_STATUS_OK
ReadX 11412 782336 4096 4096 NT_STATUS_OK
ReadX 11412 786432 61440 61440 NT_STATUS_OK
ReadX 11412 847872 4096 4096 NT_STATUS_OK
ReadX 11412 851968 61440 61440 NT_STATUS_OK
ReadX 11412 913408 4096 4096 NT_STATUS_OK
ReadX 11412 917504 61440 61440 NT_STATUS_OK
ReadX 11412 978944 4096 4096 NT_STATUS_OK
ReadX 11412 983040 61440 61440 NT_STATUS_OK
ReadX 11412 1044480 4096 4096 NT_STATUS_OK
ReadX 11412 1048576 61440 61440 NT_STATUS_OK
ReadX 11412 1110016 4096 4096 NT_STATUS_OK
ReadX 11412 1114112 61440 61440 NT_STATUS_OK
ReadX 11412 1175552 4096 4096 NT_STATUS_OK
ReadX 11412 1179648 61440 61440 NT_STATUS_OK
ReadX 11412 1241088 4096 4096 NT_STATUS_OK
ReadX 11412 1245184 61440 61440 NT_STATUS_OK
ReadX 11412 1306624 4096 4096 NT_STATUS_OK
ReadX 11412 1310720 61440 61440 NT_STATUS_OK
ReadX 11412 1372160 4096 4096 NT_STATUS_OK
ReadX 11412 1376256 61440 61440 NT_STATUS_OK
ReadX 11412 1437696 4096 4096 NT_STATUS_OK
ReadX 11412 1441792 61440 61440 NT_STATUS_OK
ReadX 11412 1503232 4096 4096 NT_STATUS_OK
ReadX 11412 1507328 61440 61440 NT_STATUS_OK
ReadX 11412 1568768 4096 4096 NT_STATUS_OK
ReadX 11412 1572864 61440 61440 NT_STATUS_OK
ReadX 11412 1634304 4096 4096 NT_STATUS_OK
ReadX 11412 1638400 61440 61440 NT_STATUS_OK
ReadX 11412 1699840 4096 4096 NT_STATUS_OK
ReadX 11412 1703936 61440 61440 NT_STATUS_OK
ReadX 11412 1765376 4096 4096 NT_STATUS_OK
ReadX 11412 1769472 61440 61440 NT_STATUS_OK
ReadX 11412 1830912 4096 4096 NT_STATUS_OK
ReadX 11412 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11410 NT_STATUS_OK
Close 11411 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
ReadX 11417 4096 4096 4096 NT_STATUS_OK
ReadX 11417 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11418 NT_STATUS_OK
Close 11418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Close 11417 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11420 NT_STATUS_OK
ReadX 11420 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11421 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11421 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11420 NT_STATUS_OK
Close 11421 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 8192 8192 NT_STATUS_OK
ReadX 11425 8192 8192 8192 NT_STATUS_OK
ReadX 11425 16384 8192 8192 NT_STATUS_OK
ReadX 11425 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11425 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11430 NT_STATUS_OK
WriteX 11430 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11430 258 NT_STATUS_OK
WriteX 11430 0 10438 10438 NT_STATUS_OK
Close 11430 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11431 NT_STATUS_OK
Close 11431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11434 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11435 NT_STATUS_OK
Close 11435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11436 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 4096 4096 NT_STATUS_OK
ReadX 11439 4096 4096 4096 NT_STATUS_OK
ReadX 11439 8192 4096 4096 NT_STATUS_OK
ReadX 11439 12288 8192 8192 NT_STATUS_OK
ReadX 11439 20480 8192 8192 NT_STATUS_OK
ReadX 11439 28672 8192 8192 NT_STATUS_OK
ReadX 11439 36864 8192 8192 NT_STATUS_OK
ReadX 11439 45056 8192 8192 NT_STATUS_OK
ReadX 11439 53248 8192 8192 NT_STATUS_OK
ReadX 11439 61440 8192 8192 NT_STATUS_OK
ReadX 11439 69632 8192 8192 NT_STATUS_OK
ReadX 11439 77824 8192 8192 NT_STATUS_OK
ReadX 11439 86016 8192 8192 NT_STATUS_OK
ReadX 11439 94208 8192 8192 NT_STATUS_OK
ReadX 11439 102400 8192 8192 NT_STATUS_OK
ReadX 11439 110592 8192 8192 NT_STATUS_OK
ReadX 11439 118784 8192 8192 NT_STATUS_OK
ReadX 11439 126976 8192 8192 NT_STATUS_OK
ReadX 11439 135168 8192 8192 NT_STATUS_OK
ReadX 11439 143360 8192 8192 NT_STATUS_OK
ReadX 11439 151552 8192 8192 NT_STATUS_OK
ReadX 11439 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11441 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11444 NT_STATUS_OK
WriteX 11444 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11444 258 NT_STATUS_OK
WriteX 11444 0 28489 28489 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11447 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11447 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11448 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11450 NT_STATUS_OK
ReadX 11450 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 8192 8192 NT_STATUS_OK
ReadX 11451 8192 8192 8192 NT_STATUS_OK
ReadX 11451 16384 8192 8192 NT_STATUS_OK
ReadX 11451 24576 8192 8192 NT_STATUS_OK
ReadX 11451 32768 16384 16384 NT_STATUS_OK
ReadX 11451 49152 8192 8192 NT_STATUS_OK
ReadX 11451 57344 8192 8192 NT_STATUS_OK
ReadX 11451 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11453 NT_STATUS_OK
Close 11453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11456 NT_STATUS_OK
WriteX 11456 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11456 258 NT_STATUS_OK
WriteX 11456 0 29253 29253 NT_STATUS_OK
Close 11456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11460 NT_STATUS_OK
Close 11460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11463 NT_STATUS_OK
WriteX 11463 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 258 NT_STATUS_OK
WriteX 11463 0 30183 30183 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11464 NT_STATUS_OK
Close 11464 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11466 NT_STATUS_OK
WriteX 11466 0 510 510 NT_STATUS_OK
WriteX 11466 510 512 512 NT_STATUS_OK
WriteX 11466 1022 510 510 NT_STATUS_OK
WriteX 11466 1532 510 510 NT_STATUS_OK
WriteX 11466 2042 168 168 NT_STATUS_OK
Close 11466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 61440 4096 4096 NT_STATUS_OK
ReadX 11470 126976 4096 4096 NT_STATUS_OK
WriteX 11470 0 65536 65536 NT_STATUS_OK
WriteX 11470 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 61440 4096 4096 NT_STATUS_OK
ReadX 11471 126976 4096 4096 NT_STATUS_OK
ReadX 11471 192512 4096 4096 NT_STATUS_OK
ReadX 11471 258048 4096 4096 NT_STATUS_OK
WriteX 11471 0 65536 65536 NT_STATUS_OK
WriteX 11471 65536 65536 65536 NT_STATUS_OK
WriteX 11471 131072 65536 65536 NT_STATUS_OK
WriteX 11471 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 61440 4096 4096 NT_STATUS_OK
ReadX 11472 126976 4096 4096 NT_STATUS_OK
ReadX 11472 192512 4096 4096 NT_STATUS_OK
ReadX 11472 258048 4096 4096 NT_STATUS_OK
ReadX 11472 323584 4096 4096 NT_STATUS_OK
ReadX 11472 389120 4096 4096 NT_STATUS_OK
ReadX 11472 454656 4096 4096 NT_STATUS_OK
ReadX 11472 520192 4096 4096 NT_STATUS_OK
WriteX 11472 0 65536 65536 NT_STATUS_OK
WriteX 11472 65536 65536 65536 NT_STATUS_OK
WriteX 11472 131072 65536 65536 NT_STATUS_OK
WriteX 11472 196608 65536 65536 NT_STATUS_OK
WriteX 11472 262144 65536 65536 NT_STATUS_OK
WriteX 11472 327680 65536 65536 NT_STATUS_OK
WriteX 11472 393216 65536 65536 NT_STATUS_OK
WriteX 11472 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11473 NT_STATUS_OK
Close 11473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Close 11470 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11493 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11522 NT_STATUS_OK
Close 11522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11527 NT_STATUS_OK
Close 11527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11535 NT_STATUS_OK
Close 11535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11541 NT_STATUS_OK
WriteX 11541 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11541 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11541 0 65536 65536 NT_STATUS_OK
WriteX 11541 65536 65536 65536 NT_STATUS_OK
WriteX 11541 131072 65536 65536 NT_STATUS_OK
WriteX 11541 196608 65536 65536 NT_STATUS_OK
WriteX 11541 262144 26634 26634 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
Close 11548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
ReadX 11549 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11554 NT_STATUS_OK
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11572 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11587 NT_STATUS_OK
Close 11587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11592 NT_STATUS_OK
Close 11592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11597 NT_STATUS_OK
Close 11597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11611 NT_STATUS_OK
Close 11611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 4096 4096 NT_STATUS_OK
Close 11628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11630 NT_STATUS_OK
ReadX 11630 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11640 NT_STATUS_OK
Close 11640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11673 0 4096 4096 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11674 NT_STATUS_OK
ReadX 11674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 4096 4096 NT_STATUS_OK
ReadX 11675 4096 4096 4096 NT_STATUS_OK
ReadX 11675 8192 4096 4096 NT_STATUS_OK
ReadX 11675 12288 4096 4096 NT_STATUS_OK
ReadX 11675 16384 4096 4096 NT_STATUS_OK
ReadX 11675 20480 4096 4096 NT_STATUS_OK
ReadX 11675 24576 4096 4096 NT_STATUS_OK
ReadX 11675 28672 4096 4096 NT_STATUS_OK
ReadX 11675 32768 4096 4096 NT_STATUS_OK
ReadX 11675 36864 4096 4096 NT_STATUS_OK
ReadX 11675 40960 4096 4096 NT_STATUS_OK
ReadX 11675 45056 4096 4096 NT_STATUS_OK
ReadX 11675 49152 4096 4096 NT_STATUS_OK
ReadX 11675 53248 4096 4096 NT_STATUS_OK
ReadX 11675 57344 4096 4096 NT_STATUS_OK
ReadX 11675 61440 4096 4096 NT_STATUS_OK
ReadX 11675 65536 4096 4096 NT_STATUS_OK
ReadX 11675 69632 4096 4096 NT_STATUS_OK
ReadX 11675 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11675 1004 NT_STATUS_OK
WriteX 11675 0 4096 4096 NT_STATUS_OK
Close 11675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11676 NT_STATUS_OK
SET_FILE_INFORMATION 11676 1004 NT_STATUS_OK
Close 11676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11678 NT_STATUS_OK
Close 11678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11681 NT_STATUS_OK
WriteX 11681 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11681 258 NT_STATUS_OK
WriteX 11681 0 65536 65536 NT_STATUS_OK
WriteX 11681 65536 19979 19979 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
QUERY_FILE_INFORMATION 11682 1004 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
SET_FILE_INFORMATION 11682 1004 NT_STATUS_OK
WriteX 11682 0 4096 4096 NT_STATUS_OK
Flush 11682 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
Close 11685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
Close 11686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11687 1004 NT_STATUS_OK
WriteX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11690 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11693 NT_STATUS_OK
WriteX 11693 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11693 258 NT_STATUS_OK
WriteX 11693 0 65536 65536 NT_STATUS_OK
WriteX 11693 65536 17654 17654 NT_STATUS_OK
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
Flush 11694 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
Flush 11694 NT_STATUS_OK
QUERY_FILE_INFORMATION 11694 1004 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
Flush 11694 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
Flush 11694 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
Flush 11694 NT_STATUS_OK
SET_FILE_INFORMATION 11694 1004 NT_STATUS_OK
WriteX 11694 0 4096 4096 NT_STATUS_OK
Flush 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11695 NT_STATUS_OK
SET_FILE_INFORMATION 11695 1004 NT_STATUS_OK
Close 11695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11697 NT_STATUS_OK
Close 11697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
ReadX 11699 4096 4096 4096 NT_STATUS_OK
ReadX 11699 8192 4096 4096 NT_STATUS_OK
ReadX 11699 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11699 16384 4096 4096 NT_STATUS_OK
ReadX 11699 20480 4096 4096 NT_STATUS_OK
ReadX 11699 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
Close 11700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11702 1004 NT_STATUS_OK
WriteX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11705 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11708 NT_STATUS_OK
WriteX 11708 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11708 258 NT_STATUS_OK
WriteX 11708 0 65536 65536 NT_STATUS_OK
WriteX 11708 65536 19490 19490 NT_STATUS_OK
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
SET_FILE_INFORMATION 11709 1004 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
Close 11709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11710 NT_STATUS_OK
SET_FILE_INFORMATION 11710 1004 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11712 NT_STATUS_OK
Close 11712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11714 0 4096 4096 NT_STATUS_OK
Close 11714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
ReadX 11716 4096 4096 4096 NT_STATUS_OK
ReadX 11716 8192 4096 4096 NT_STATUS_OK
ReadX 11716 12288 4096 4096 NT_STATUS_OK
ReadX 11716 16384 4096 4096 NT_STATUS_OK
ReadX 11716 20480 4096 4096 NT_STATUS_OK
ReadX 11716 24576 4096 4096 NT_STATUS_OK
ReadX 11716 28672 4096 4096 NT_STATUS_OK
ReadX 11716 32768 4096 4096 NT_STATUS_OK
ReadX 11716 36864 4096 4096 NT_STATUS_OK
ReadX 11716 40960 4096 4096 NT_STATUS_OK
ReadX 11716 45056 4096 4096 NT_STATUS_OK
ReadX 11716 49152 4096 4096 NT_STATUS_OK
ReadX 11716 53248 4096 4096 NT_STATUS_OK
ReadX 11716 57344 4096 4096 NT_STATUS_OK
ReadX 11716 61440 4096 4096 NT_STATUS_OK
ReadX 11716 65536 4096 4096 NT_STATUS_OK
ReadX 11716 69632 4096 4096 NT_STATUS_OK
ReadX 11716 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11716 1004 NT_STATUS_OK
WriteX 11716 0 4096 4096 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11717 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
Close 11717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11722 NT_STATUS_OK
WriteX 11722 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11722 258 NT_STATUS_OK
WriteX 11722 0 65536 65536 NT_STATUS_OK
WriteX 11722 65536 8866 8866 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
SET_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
Close 11725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
Close 11726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11727 1004 NT_STATUS_OK
WriteX 11727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11728 NT_STATUS_OK
Close 11728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11730 NT_STATUS_OK
Close 11730 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11733 NT_STATUS_OK
WriteX 11733 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11733 258 NT_STATUS_OK
WriteX 11733 0 65536 65536 NT_STATUS_OK
WriteX 11733 65536 9298 9298 NT_STATUS_OK
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 4096 4096 NT_STATUS_OK
WriteX 11734 0 4096 4096 NT_STATUS_OK
Flush 11734 NT_STATUS_OK
SET_FILE_INFORMATION 11734 1004 NT_STATUS_OK
WriteX 11734 0 4096 4096 NT_STATUS_OK
Flush 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11735 NT_STATUS_OK
SET_FILE_INFORMATION 11735 1004 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11737 NT_STATUS_OK
Close 11737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11740 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11740 0 4096 4096 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11741 4096 4096 4096 NT_STATUS_OK
ReadX 11741 8192 4096 4096 NT_STATUS_OK
ReadX 11741 12288 4096 4096 NT_STATUS_OK
ReadX 11741 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11744 1004 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11741 NT_STATUS_OK
Close 11744 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11750 NT_STATUS_OK
WriteX 11750 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 258 NT_STATUS_OK
WriteX 11750 0 65536 65536 NT_STATUS_OK
WriteX 11750 65536 11540 11540 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
SET_FILE_INFORMATION 11751 1004 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
Flush 11751 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11752 NT_STATUS_OK
SET_FILE_INFORMATION 11752 1004 NT_STATUS_OK
Close 11752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11754 NT_STATUS_OK
Close 11754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 61440 4096 4096 NT_STATUS_OK
ReadX 11756 126976 4096 4096 NT_STATUS_OK
WriteX 11756 0 65536 65536 NT_STATUS_OK
WriteX 11756 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 61440 4096 4096 NT_STATUS_OK
ReadX 11757 126976 4096 4096 NT_STATUS_OK
ReadX 11757 192512 4096 4096 NT_STATUS_OK
ReadX 11757 258048 4096 4096 NT_STATUS_OK
WriteX 11757 0 65536 65536 NT_STATUS_OK
WriteX 11757 65536 65536 65536 NT_STATUS_OK
WriteX 11757 131072 65536 65536 NT_STATUS_OK
WriteX 11757 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 61440 4096 4096 NT_STATUS_OK
ReadX 11758 126976 4096 4096 NT_STATUS_OK
ReadX 11758 192512 4096 4096 NT_STATUS_OK
ReadX 11758 258048 4096 4096 NT_STATUS_OK
ReadX 11758 323584 4096 4096 NT_STATUS_OK
ReadX 11758 389120 4096 4096 NT_STATUS_OK
ReadX 11758 454656 4096 4096 NT_STATUS_OK
ReadX 11758 520192 4096 4096 NT_STATUS_OK
WriteX 11758 0 65536 65536 NT_STATUS_OK
WriteX 11758 65536 65536 65536 NT_STATUS_OK
WriteX 11758 131072 65536 65536 NT_STATUS_OK
WriteX 11758 196608 65536 65536 NT_STATUS_OK
WriteX 11758 262144 65536 65536 NT_STATUS_OK
WriteX 11758 327680 65536 65536 NT_STATUS_OK
WriteX 11758 393216 65536 65536 NT_STATUS_OK
WriteX 11758 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
ReadX 11759 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11760 NT_STATUS_OK
WriteX 11760 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11760 258 NT_STATUS_OK
WriteX 11760 0 53 53 NT_STATUS_OK
Close 11760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11761 NT_STATUS_OK
Close 11761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11759 8192 4096 4096 NT_STATUS_OK
ReadX 11759 12288 4096 4096 NT_STATUS_OK
WriteX 11763 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 258 NT_STATUS_OK
ReadX 11759 16384 4096 4096 NT_STATUS_OK
ReadX 11759 20480 4096 4096 NT_STATUS_OK
WriteX 11763 0 15360 15360 NT_STATUS_OK
Close 11763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11764 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11764 1004 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Close 11764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11765 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11768 NT_STATUS_OK
Close 11768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11767 4096 4096 4096 NT_STATUS_OK
ReadX 11767 8192 4096 4096 NT_STATUS_OK
ReadX 11767 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 4096 4096 NT_STATUS_OK
ReadX 11770 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
ReadX 11771 8192 4096 4096 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11772 NT_STATUS_OK
WriteX 11772 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11772 258 NT_STATUS_OK
WriteX 11772 0 15360 15360 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11773 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11773 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11774 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11777 NT_STATUS_OK
SET_FILE_INFORMATION 11777 1004 NT_STATUS_OK
Close 11777 NT_STATUS_OK
WriteX 11773 0 4096 4096 NT_STATUS_OK
Close 11773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
ReadX 11780 4096 4096 4096 NT_STATUS_OK
ReadX 11780 8192 4096 4096 NT_STATUS_OK
ReadX 11780 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11780 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11782 NT_STATUS_OK
WriteX 11782 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11782 258 NT_STATUS_OK
WriteX 11782 0 53 53 NT_STATUS_OK
Close 11782 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11781 4096 4096 4096 NT_STATUS_OK
ReadX 11781 8192 4096 4096 NT_STATUS_OK
ReadX 11781 12288 4096 4096 NT_STATUS_OK
WriteX 11785 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11785 258 NT_STATUS_OK
WriteX 11785 0 12006 12006 NT_STATUS_OK
Close 11785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11786 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11786 1004 NT_STATUS_OK
WriteX 11786 0 4096 4096 NT_STATUS_OK
Close 11786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11787 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11790 NT_STATUS_OK
Close 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11789 4096 4096 4096 NT_STATUS_OK
ReadX 11789 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11792 NT_STATUS_OK
WriteX 11792 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 258 NT_STATUS_OK
WriteX 11792 0 11991 11991 NT_STATUS_OK
Close 11792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11793 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11793 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11797 NT_STATUS_OK
SET_FILE_INFORMATION 11797 1004 NT_STATUS_OK
Close 11797 NT_STATUS_OK
WriteX 11793 0 4096 4096 NT_STATUS_OK
Close 11793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11798 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11800 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
ReadX 11800 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
WriteX 11780 0 19054 19054 NT_STATUS_OK
WriteX 11800 0 12288 12288 NT_STATUS_OK
Close 11796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11803 NT_STATUS_OK
Close 11803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11800 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 0 61440 61440 NT_STATUS_OK
ReadX 11807 61440 4096 4096 NT_STATUS_OK
ReadX 11807 65536 61440 61440 NT_STATUS_OK
ReadX 11807 126976 4096 4096 NT_STATUS_OK
ReadX 11807 131072 61440 61440 NT_STATUS_OK
ReadX 11807 192512 4096 4096 NT_STATUS_OK
ReadX 11807 196608 61440 61440 NT_STATUS_OK
ReadX 11807 258048 4096 4096 NT_STATUS_OK
ReadX 11807 262144 61440 61440 NT_STATUS_OK
ReadX 11807 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 61440 61440 NT_STATUS_OK
ReadX 11808 61440 4096 4096 NT_STATUS_OK
ReadX 11808 65536 61440 61440 NT_STATUS_OK
ReadX 11808 126976 4096 4096 NT_STATUS_OK
ReadX 11808 131072 61440 61440 NT_STATUS_OK
ReadX 11808 192512 4096 4096 NT_STATUS_OK
ReadX 11808 196608 61440 61440 NT_STATUS_OK
ReadX 11808 258048 4096 4096 NT_STATUS_OK
ReadX 11808 262144 61440 61440 NT_STATUS_OK
ReadX 11808 323584 4096 4096 NT_STATUS_OK
ReadX 11808 327680 61440 61440 NT_STATUS_OK
ReadX 11808 389120 4096 4096 NT_STATUS_OK
ReadX 11808 393216 61440 61440 NT_STATUS_OK
ReadX 11808 454656 4096 4096 NT_STATUS_OK
ReadX 11808 458752 61440 61440 NT_STATUS_OK
ReadX 11808 520192 4096 4096 NT_STATUS_OK
ReadX 11808 524288 61440 61440 NT_STATUS_OK
ReadX 11808 585728 4096 4096 NT_STATUS_OK
ReadX 11808 589824 61440 61440 NT_STATUS_OK
ReadX 11808 651264 4096 4096 NT_STATUS_OK
ReadX 11808 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 61440 61440 NT_STATUS_OK
ReadX 11809 61440 4096 4096 NT_STATUS_OK
ReadX 11809 65536 61440 61440 NT_STATUS_OK
ReadX 11809 126976 4096 4096 NT_STATUS_OK
ReadX 11809 131072 61440 61440 NT_STATUS_OK
ReadX 11809 192512 4096 4096 NT_STATUS_OK
ReadX 11809 196608 61440 61440 NT_STATUS_OK
ReadX 11809 258048 4096 4096 NT_STATUS_OK
ReadX 11809 262144 61440 61440 NT_STATUS_OK
ReadX 11809 323584 4096 4096 NT_STATUS_OK
ReadX 11809 327680 61440 61440 NT_STATUS_OK
ReadX 11809 389120 4096 4096 NT_STATUS_OK
ReadX 11809 393216 61440 61440 NT_STATUS_OK
ReadX 11809 454656 4096 4096 NT_STATUS_OK
ReadX 11809 458752 61440 61440 NT_STATUS_OK
ReadX 11809 520192 4096 4096 NT_STATUS_OK
ReadX 11809 524288 61440 61440 NT_STATUS_OK
ReadX 11809 585728 4096 4096 NT_STATUS_OK
ReadX 11809 589824 61440 61440 NT_STATUS_OK
ReadX 11809 651264 4096 4096 NT_STATUS_OK
ReadX 11809 655360 61440 61440 NT_STATUS_OK
ReadX 11809 716800 4096 4096 NT_STATUS_OK
ReadX 11809 720896 61440 61440 NT_STATUS_OK
ReadX 11809 782336 4096 4096 NT_STATUS_OK
ReadX 11809 786432 61440 61440 NT_STATUS_OK
ReadX 11809 847872 4096 4096 NT_STATUS_OK
ReadX 11809 851968 61440 61440 NT_STATUS_OK
ReadX 11809 913408 4096 4096 NT_STATUS_OK
ReadX 11809 917504 61440 61440 NT_STATUS_OK
ReadX 11809 978944 4096 4096 NT_STATUS_OK
ReadX 11809 983040 61440 61440 NT_STATUS_OK
ReadX 11809 1044480 4096 4096 NT_STATUS_OK
ReadX 11809 1048576 61440 61440 NT_STATUS_OK
ReadX 11809 1110016 4096 4096 NT_STATUS_OK
ReadX 11809 1114112 61440 61440 NT_STATUS_OK
ReadX 11809 1175552 4096 4096 NT_STATUS_OK
ReadX 11809 1179648 61440 61440 NT_STATUS_OK
ReadX 11809 1241088 4096 4096 NT_STATUS_OK
ReadX 11809 1245184 61440 61440 NT_STATUS_OK
ReadX 11809 1306624 4096 4096 NT_STATUS_OK
ReadX 11809 1310720 61440 61440 NT_STATUS_OK
ReadX 11809 1372160 4096 4096 NT_STATUS_OK
ReadX 11809 1376256 61440 61440 NT_STATUS_OK
ReadX 11809 1437696 4096 4096 NT_STATUS_OK
ReadX 11809 1441792 61440 61440 NT_STATUS_OK
ReadX 11809 1503232 4096 4096 NT_STATUS_OK
ReadX 11809 1507328 61440 61440 NT_STATUS_OK
ReadX 11809 1568768 4096 4096 NT_STATUS_OK
ReadX 11809 1572864 61440 61440 NT_STATUS_OK
ReadX 11809 1634304 4096 4096 NT_STATUS_OK
ReadX 11809 1638400 61440 61440 NT_STATUS_OK
ReadX 11809 1699840 4096 4096 NT_STATUS_OK
ReadX 11809 1703936 61440 61440 NT_STATUS_OK
ReadX 11809 1765376 4096 4096 NT_STATUS_OK
ReadX 11809 1769472 61440 61440 NT_STATUS_OK
ReadX 11809 1830912 4096 4096 NT_STATUS_OK
ReadX 11809 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11811 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11816 NT_STATUS_OK
QUERY_FILE_INFORMATION 11816 1004 NT_STATUS_OK
WriteX 11816 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11816 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11817 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11818 NT_STATUS_OK
WriteX 11818 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11818 258 NT_STATUS_OK
WriteX 11818 0 491 491 NT_STATUS_OK
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11816 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11822 NT_STATUS_OK
WriteX 11822 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11822 258 NT_STATUS_OK
WriteX 11822 0 543 543 NT_STATUS_OK
Close 11822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Close 11809 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Close 11813 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11836 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 1004 NT_STATUS_OK
WriteX 11836 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
WriteX 11836 0 2048 2048 NT_STATUS_OK
Close 11836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11837 0 4096 4096 NT_STATUS_OK
Flush 11837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11837 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11842 NT_STATUS_OK
WriteX 11842 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 258 NT_STATUS_OK
WriteX 11842 0 2048 2048 NT_STATUS_OK
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11847 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11848 NT_STATUS_OK
WriteX 11848 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11848 258 NT_STATUS_OK
WriteX 11848 0 2048 2048 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11849 NT_STATUS_OK
ReadX 11849 0 2048 2048 NT_STATUS_OK
ReadX 11827 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11831 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11843 0 4096 4096 NT_STATUS_OK
WriteX 11827 0 8192 8192 NT_STATUS_OK
WriteX 11828 0 4096 4096 NT_STATUS_OK
WriteX 11829 0 4096 4096 NT_STATUS_OK
ReadX 11843 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11852 NT_STATUS_OK
ReadX 11852 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11853 NT_STATUS_OK
QUERY_FILE_INFORMATION 11853 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11830 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11873 NT_STATUS_OK
QUERY_FILE_INFORMATION 11873 1004 NT_STATUS_OK
WriteX 11873 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11873 258 NT_STATUS_OK
WriteX 11873 0 2048 2048 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11876 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11881 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1004 NT_STATUS_OK
WriteX 11881 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 258 NT_STATUS_OK
WriteX 11881 0 2048 2048 NT_STATUS_OK
Close 11881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11874 0 4096 4096 NT_STATUS_OK
Flush 11874 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11874 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11876 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11884 NT_STATUS_OK
WriteX 11884 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11884 258 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11887 NT_STATUS_OK
WriteX 11887 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 258 NT_STATUS_OK
WriteX 11887 0 4096 4096 NT_STATUS_OK
Close 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11888 0 4096 4096 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11894 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11895 NT_STATUS_OK
WriteX 11895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11895 258 NT_STATUS_OK
WriteX 11895 0 2048 2048 NT_STATUS_OK
Close 11895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11910 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Close 11908 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Close 11909 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11912 NT_STATUS_OK
QUERY_FILE_INFORMATION 11912 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11917 NT_STATUS_OK
ReadX 11917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11918 NT_STATUS_OK
ReadX 11918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11932 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 258 NT_STATUS_OK
WriteX 11932 0 2048 2048 NT_STATUS_OK
Close 11932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11944 NT_STATUS_OK
QUERY_FILE_INFORMATION 11944 1004 NT_STATUS_OK
WriteX 11944 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11944 258 NT_STATUS_OK
WriteX 11944 0 2048 2048 NT_STATUS_OK
Close 11944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11952 NT_STATUS_OK
QUERY_FILE_INFORMATION 11952 1004 NT_STATUS_OK
WriteX 11952 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11952 258 NT_STATUS_OK
WriteX 11952 0 2048 2048 NT_STATUS_OK
Close 11952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11933 0 4096 4096 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
WriteX 11945 0 4096 4096 NT_STATUS_OK
Flush 11945 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Flush 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11945 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11935 4096 16384 16384 NT_STATUS_OK
ReadX 11915 4096 16384 16384 NT_STATUS_OK
ReadX 11947 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 2048 2048 NT_STATUS_OK
WriteX 11955 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11956 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11955 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11922 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Close 11916 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11958 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11960 NT_STATUS_OK
QUERY_FILE_INFORMATION 11960 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11963 4096 16384 16384 NT_STATUS_OK
WriteX 11963 0 4096 4096 NT_STATUS_OK
WriteX 11964 0 4096 4096 NT_STATUS_OK
WriteX 11965 0 4096 4096 NT_STATUS_OK
WriteX 11966 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11969 NT_STATUS_OK
ReadX 11969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11970 NT_STATUS_OK
ReadX 11970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11971 NT_STATUS_OK
ReadX 11971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11973 NT_STATUS_OK
ReadX 11973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11979 NT_STATUS_OK
ReadX 11979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 8192 8192 NT_STATUS_OK
ReadX 11969 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11983 0 4096 4096 NT_STATUS_OK
ReadX 11983 4096 4096 4096 NT_STATUS_OK
ReadX 11983 8192 4096 4096 NT_STATUS_OK
WriteX 11969 0 4096 4096 NT_STATUS_OK
WriteX 11970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
ReadX 11984 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11963 0 4096 4096 NT_STATUS_OK
WriteX 11964 0 4096 4096 NT_STATUS_OK
WriteX 11965 0 4096 4096 NT_STATUS_OK
WriteX 11966 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11989 NT_STATUS_OK
QUERY_FILE_INFORMATION 11989 1004 NT_STATUS_OK
WriteX 11989 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11989 258 NT_STATUS_OK
WriteX 11989 0 2048 2048 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
ReadX 11992 4096 4096 4096 NT_STATUS_OK
WriteX 11992 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 4096 4096 NT_STATUS_OK
ReadX 11994 4096 4096 4096 NT_STATUS_OK
WriteX 11994 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11995 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Close 11981 NT_STATUS_OK
Close 11969 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11973 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Close 11994 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11997 0 4096 4096 NT_STATUS_OK
ReadX 11997 4096 4096 4096 NT_STATUS_OK
ReadX 11997 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12003 NT_STATUS_OK
ReadX 12003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
ReadX 11998 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12015 NT_STATUS_OK
QUERY_FILE_INFORMATION 12015 1004 NT_STATUS_OK
WriteX 12015 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12015 258 NT_STATUS_OK
WriteX 12015 0 2048 2048 NT_STATUS_OK
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12016 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12020 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12021 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1004 NT_STATUS_OK
WriteX 12021 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 258 NT_STATUS_OK
WriteX 12021 0 2048 2048 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12005 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12023 NT_STATUS_OK
QUERY_FILE_INFORMATION 12023 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Close 12003 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12025 NT_STATUS_OK
QUERY_FILE_INFORMATION 12025 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12027 NT_STATUS_OK
ReadX 12027 61440 4096 4096 NT_STATUS_OK
ReadX 12027 126976 4096 4096 NT_STATUS_OK
WriteX 12027 0 65536 65536 NT_STATUS_OK
WriteX 12027 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12028 NT_STATUS_OK
ReadX 12028 61440 4096 4096 NT_STATUS_OK
ReadX 12028 126976 4096 4096 NT_STATUS_OK
ReadX 12028 192512 4096 4096 NT_STATUS_OK
ReadX 12028 258048 4096 4096 NT_STATUS_OK
WriteX 12028 0 65536 65536 NT_STATUS_OK
WriteX 12028 65536 65536 65536 NT_STATUS_OK
WriteX 12028 131072 65536 65536 NT_STATUS_OK
WriteX 12028 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 61440 4096 4096 NT_STATUS_OK
ReadX 12029 126976 4096 4096 NT_STATUS_OK
ReadX 12029 192512 4096 4096 NT_STATUS_OK
ReadX 12029 258048 4096 4096 NT_STATUS_OK
ReadX 12029 323584 4096 4096 NT_STATUS_OK
ReadX 12029 389120 4096 4096 NT_STATUS_OK
ReadX 12029 454656 4096 4096 NT_STATUS_OK
ReadX 12029 520192 4096 4096 NT_STATUS_OK
WriteX 12029 0 65536 65536 NT_STATUS_OK
WriteX 12029 65536 65536 65536 NT_STATUS_OK
WriteX 12029 131072 65536 65536 NT_STATUS_OK
WriteX 12029 196608 65536 65536 NT_STATUS_OK
WriteX 12029 262144 65536 65536 NT_STATUS_OK
WriteX 12029 327680 65536 65536 NT_STATUS_OK
WriteX 12029 393216 65536 65536 NT_STATUS_OK
WriteX 12029 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12030 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12030 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12030 8192 4096 4096 NT_STATUS_OK
ReadX 12030 12288 4096 4096 NT_STATUS_OK
ReadX 12030 16384 4096 4096 NT_STATUS_OK
ReadX 12030 20480 4096 4096 NT_STATUS_OK
ReadX 12030 24576 4096 4096 NT_STATUS_OK
ReadX 12030 28672 4096 4096 NT_STATUS_OK
ReadX 12030 32768 4096 4096 NT_STATUS_OK
ReadX 12030 36864 4096 4096 NT_STATUS_OK
ReadX 12030 40960 4096 4096 NT_STATUS_OK
ReadX 12030 45056 4096 4096 NT_STATUS_OK
ReadX 12030 49152 4096 4096 NT_STATUS_OK
ReadX 12030 53248 4096 4096 NT_STATUS_OK
ReadX 12030 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12030 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12031 NT_STATUS_OK
Close 12031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12027 NT_STATUS_OK
Close 12028 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12033 NT_STATUS_OK
WriteX 12033 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12033 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12033 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12033 1004 NT_STATUS_OK
WriteX 12033 0 57088 57088 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
Flush 12033 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12034 NT_STATUS_OK
SET_FILE_INFORMATION 12034 1004 NT_STATUS_OK
Close 12034 NT_STATUS_OK
SET_FILE_INFORMATION 12033 1004 NT_STATUS_OK
WriteX 12033 0 4096 4096 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12037 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12038 NT_STATUS_OK
WriteX 12038 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12038 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12038 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12038 1004 NT_STATUS_OK
WriteX 12038 0 51456 51456 NT_STATUS_OK
WriteX 12038 0 4096 4096 NT_STATUS_OK
Flush 12038 NT_STATUS_OK
SET_FILE_INFORMATION 12038 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12038 1004 NT_STATUS_OK
WriteX 12038 0 4096 4096 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12040 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12042 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12047 NT_STATUS_OK
WriteX 12047 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12047 258 NT_STATUS_OK
WriteX 12047 0 53077 53077 NT_STATUS_OK
Close 12047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12048 NT_STATUS_OK
WriteX 12048 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12048 1004 NT_STATUS_OK
WriteX 12048 0 65536 65536 NT_STATUS_OK
WriteX 12048 65536 1856 1856 NT_STATUS_OK
WriteX 12048 0 4096 4096 NT_STATUS_OK
Flush 12048 NT_STATUS_OK
SET_FILE_INFORMATION 12048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12048 1004 NT_STATUS_OK
WriteX 12048 0 4096 4096 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12057 NT_STATUS_OK
WriteX 12057 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12057 258 NT_STATUS_OK
WriteX 12057 0 7983 7983 NT_STATUS_OK
Close 12057 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12059 NT_STATUS_OK
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12062 NT_STATUS_OK
WriteX 12062 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 258 NT_STATUS_OK
WriteX 12062 0 65536 65536 NT_STATUS_OK
WriteX 12062 65536 65536 65536 NT_STATUS_OK
WriteX 12062 131072 65536 65536 NT_STATUS_OK
WriteX 12062 196608 65536 65536 NT_STATUS_OK
WriteX 12062 262144 65536 65536 NT_STATUS_OK
WriteX 12062 327680 65536 65536 NT_STATUS_OK
WriteX 12062 393216 65536 65536 NT_STATUS_OK
WriteX 12062 458752 46731 46731 NT_STATUS_OK
Close 12062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12063 NT_STATUS_OK
WriteX 12063 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12063 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12052 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12063 1004 NT_STATUS_OK
WriteX 12063 0 65536 65536 NT_STATUS_OK
WriteX 12063 65536 22848 22848 NT_STATUS_OK
WriteX 12063 0 4096 4096 NT_STATUS_OK
Flush 12063 NT_STATUS_OK
SET_FILE_INFORMATION 12063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12063 1004 NT_STATUS_OK
WriteX 12063 0 4096 4096 NT_STATUS_OK
Close 12063 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12065 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12067 NT_STATUS_OK
ReadX 12067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12067 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12068 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12068 1004 NT_STATUS_OK
ReadX 12068 8192 4096 4096 NT_STATUS_OK
ReadX 12068 12288 4096 4096 NT_STATUS_OK
ReadX 12068 16384 4096 4096 NT_STATUS_OK
ReadX 12068 20480 4096 4096 NT_STATUS_OK
ReadX 12068 24576 4096 4096 NT_STATUS_OK
ReadX 12068 28672 4096 4096 NT_STATUS_OK
ReadX 12068 32768 4096 4096 NT_STATUS_OK
ReadX 12068 36864 4096 4096 NT_STATUS_OK
ReadX 12068 40960 4096 4096 NT_STATUS_OK
ReadX 12068 45056 4096 4096 NT_STATUS_OK
ReadX 12068 49152 4096 4096 NT_STATUS_OK
ReadX 12068 53248 4096 4096 NT_STATUS_OK
ReadX 12068 57344 4096 4096 NT_STATUS_OK
ReadX 12068 61440 4096 4096 NT_STATUS_OK
ReadX 12068 65536 4096 4096 NT_STATUS_OK
ReadX 12068 69632 4096 4096 NT_STATUS_OK
ReadX 12068 73728 4096 4096 NT_STATUS_OK
ReadX 12068 77824 4096 4096 NT_STATUS_OK
ReadX 12068 81920 4096 4096 NT_STATUS_OK
ReadX 12068 86016 4096 4096 NT_STATUS_OK
ReadX 12068 90112 4096 4096 NT_STATUS_OK
ReadX 12068 94208 4096 4096 NT_STATUS_OK
ReadX 12068 98304 4096 4096 NT_STATUS_OK
ReadX 12068 102400 4096 4096 NT_STATUS_OK
ReadX 12068 106496 4096 4096 NT_STATUS_OK
ReadX 12068 110592 4096 4096 NT_STATUS_OK
ReadX 12068 114688 4096 4096 NT_STATUS_OK
ReadX 12068 118784 4096 4096 NT_STATUS_OK
ReadX 12068 122880 4096 4096 NT_STATUS_OK
ReadX 12068 126976 4096 4096 NT_STATUS_OK
ReadX 12068 131072 4096 4096 NT_STATUS_OK
ReadX 12068 135168 4096 4096 NT_STATUS_OK
ReadX 12068 139264 4096 4096 NT_STATUS_OK
ReadX 12068 143360 4096 4096 NT_STATUS_OK
ReadX 12068 147456 4096 4096 NT_STATUS_OK
ReadX 12068 151552 4096 4096 NT_STATUS_OK
ReadX 12068 155648 4096 4096 NT_STATUS_OK
ReadX 12068 159744 4096 4096 NT_STATUS_OK
ReadX 12068 163840 4096 4096 NT_STATUS_OK
ReadX 12068 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12068 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12069 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12071 NT_STATUS_OK
WriteX 12071 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12071 258 NT_STATUS_OK
Close 12068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12072 NT_STATUS_OK
SET_FILE_INFORMATION 12072 1004 NT_STATUS_OK
Close 12072 NT_STATUS_OK
WriteX 12071 0 42388 42388 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12073 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
ReadX 12075 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12076 NT_STATUS_OK
WriteX 12076 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12076 258 NT_STATUS_OK
SET_FILE_INFORMATION 12076 1004 NT_STATUS_OK
WriteX 12076 0 42652 42652 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Close 12075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12080 NT_STATUS_OK
ReadX 12080 0 4096 4096 NT_STATUS_OK
ReadX 12080 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12085 NT_STATUS_OK
WriteX 12085 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12085 258 NT_STATUS_OK
WriteX 12085 0 65536 65536 NT_STATUS_OK
WriteX 12085 65536 49 49 NT_STATUS_OK
Close 12085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12086 NT_STATUS_OK
ReadX 12086 0 61440 61440 NT_STATUS_OK
ReadX 12086 61440 4096 4096 NT_STATUS_OK
ReadX 12086 65536 61440 61440 NT_STATUS_OK
ReadX 12086 126976 4096 4096 NT_STATUS_OK
ReadX 12086 131072 61440 61440 NT_STATUS_OK
ReadX 12086 192512 4096 4096 NT_STATUS_OK
ReadX 12086 196608 61440 61440 NT_STATUS_OK
ReadX 12086 258048 4096 4096 NT_STATUS_OK
ReadX 12086 262144 61440 61440 NT_STATUS_OK
ReadX 12086 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 61440 61440 NT_STATUS_OK
ReadX 12087 61440 4096 4096 NT_STATUS_OK
ReadX 12087 65536 61440 61440 NT_STATUS_OK
ReadX 12087 126976 4096 4096 NT_STATUS_OK
ReadX 12087 131072 61440 61440 NT_STATUS_OK
ReadX 12087 192512 4096 4096 NT_STATUS_OK
ReadX 12087 196608 61440 61440 NT_STATUS_OK
ReadX 12087 258048 4096 4096 NT_STATUS_OK
ReadX 12087 262144 61440 61440 NT_STATUS_OK
ReadX 12087 323584 4096 4096 NT_STATUS_OK
ReadX 12087 327680 61440 61440 NT_STATUS_OK
ReadX 12087 389120 4096 4096 NT_STATUS_OK
ReadX 12087 393216 61440 61440 NT_STATUS_OK
ReadX 12087 454656 4096 4096 NT_STATUS_OK
ReadX 12087 458752 61440 61440 NT_STATUS_OK
ReadX 12087 520192 4096 4096 NT_STATUS_OK
ReadX 12087 524288 61440 61440 NT_STATUS_OK
ReadX 12087 585728 4096 4096 NT_STATUS_OK
ReadX 12087 589824 61440 61440 NT_STATUS_OK
ReadX 12087 651264 4096 4096 NT_STATUS_OK
ReadX 12087 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 61440 61440 NT_STATUS_OK
ReadX 12088 61440 4096 4096 NT_STATUS_OK
ReadX 12088 65536 61440 61440 NT_STATUS_OK
ReadX 12088 126976 4096 4096 NT_STATUS_OK
ReadX 12088 131072 61440 61440 NT_STATUS_OK
ReadX 12088 192512 4096 4096 NT_STATUS_OK
ReadX 12088 196608 61440 61440 NT_STATUS_OK
ReadX 12088 258048 4096 4096 NT_STATUS_OK
ReadX 12088 262144 61440 61440 NT_STATUS_OK
ReadX 12088 323584 4096 4096 NT_STATUS_OK
ReadX 12088 327680 61440 61440 NT_STATUS_OK
ReadX 12088 389120 4096 4096 NT_STATUS_OK
ReadX 12088 393216 61440 61440 NT_STATUS_OK
ReadX 12088 454656 4096 4096 NT_STATUS_OK
ReadX 12088 458752 61440 61440 NT_STATUS_OK
ReadX 12088 520192 4096 4096 NT_STATUS_OK
ReadX 12088 524288 61440 61440 NT_STATUS_OK
ReadX 12088 585728 4096 4096 NT_STATUS_OK
ReadX 12088 589824 61440 61440 NT_STATUS_OK
ReadX 12088 651264 4096 4096 NT_STATUS_OK
ReadX 12088 655360 61440 61440 NT_STATUS_OK
ReadX 12088 716800 4096 4096 NT_STATUS_OK
ReadX 12088 720896 61440 61440 NT_STATUS_OK
ReadX 12088 782336 4096 4096 NT_STATUS_OK
ReadX 12088 786432 61440 61440 NT_STATUS_OK
ReadX 12088 847872 4096 4096 NT_STATUS_OK
ReadX 12088 851968 61440 61440 NT_STATUS_OK
ReadX 12088 913408 4096 4096 NT_STATUS_OK
ReadX 12088 917504 61440 61440 NT_STATUS_OK
ReadX 12088 978944 4096 4096 NT_STATUS_OK
ReadX 12088 983040 61440 61440 NT_STATUS_OK
ReadX 12088 1044480 4096 4096 NT_STATUS_OK
ReadX 12088 1048576 61440 61440 NT_STATUS_OK
ReadX 12088 1110016 4096 4096 NT_STATUS_OK
ReadX 12088 1114112 61440 61440 NT_STATUS_OK
ReadX 12088 1175552 4096 4096 NT_STATUS_OK
ReadX 12088 1179648 61440 61440 NT_STATUS_OK
ReadX 12088 1241088 4096 4096 NT_STATUS_OK
ReadX 12088 1245184 61440 61440 NT_STATUS_OK
ReadX 12088 1306624 4096 4096 NT_STATUS_OK
ReadX 12088 1310720 61440 61440 NT_STATUS_OK
ReadX 12088 1372160 4096 4096 NT_STATUS_OK
ReadX 12088 1376256 61440 61440 NT_STATUS_OK
ReadX 12088 1437696 4096 4096 NT_STATUS_OK
ReadX 12088 1441792 61440 61440 NT_STATUS_OK
ReadX 12088 1503232 4096 4096 NT_STATUS_OK
ReadX 12088 1507328 61440 61440 NT_STATUS_OK
ReadX 12088 1568768 4096 4096 NT_STATUS_OK
ReadX 12088 1572864 61440 61440 NT_STATUS_OK
ReadX 12088 1634304 4096 4096 NT_STATUS_OK
ReadX 12088 1638400 61440 61440 NT_STATUS_OK
ReadX 12088 1699840 4096 4096 NT_STATUS_OK
ReadX 12088 1703936 61440 61440 NT_STATUS_OK
ReadX 12088 1765376 4096 4096 NT_STATUS_OK
ReadX 12088 1769472 61440 61440 NT_STATUS_OK
ReadX 12088 1830912 4096 4096 NT_STATUS_OK
ReadX 12088 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12090 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1005 NT_STATUS_OK
ReadX 12090 2156 24 24 NT_STATUS_OK
ReadX 12090 2139 276 276 NT_STATUS_OK
ReadX 12090 2136 14 14 NT_STATUS_OK
ReadX 12090 2136 7 7 NT_STATUS_OK
ReadX 12090 2138 12 12 NT_STATUS_OK
ReadX 12090 2137 8 8 NT_STATUS_OK
ReadX 12090 2135 15 15 NT_STATUS_OK
ReadX 12090 0 16 16 NT_STATUS_OK
ReadX 12090 16 2048 2048 NT_STATUS_OK
ReadX 12090 2064 2048 2048 NT_STATUS_OK
ReadX 12090 257 2048 2048 NT_STATUS_OK
ReadX 12090 385 2048 2048 NT_STATUS_OK
ReadX 12090 513 2048 2048 NT_STATUS_OK
ReadX 12090 641 2048 2048 NT_STATUS_OK
ReadX 12090 769 2048 2048 NT_STATUS_OK
ReadX 12090 897 2048 2048 NT_STATUS_OK
ReadX 12090 1025 2048 2048 NT_STATUS_OK
ReadX 12090 1153 2048 2048 NT_STATUS_OK
ReadX 12090 1281 2048 2048 NT_STATUS_OK
ReadX 12090 1409 2048 2048 NT_STATUS_OK
ReadX 12090 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Close 12080 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12095 NT_STATUS_OK
WriteX 12095 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12095 258 NT_STATUS_OK
WriteX 12095 0 10575 10575 NT_STATUS_OK
Flush 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12100 NT_STATUS_OK
LockX 12100 2147483538 1 NT_STATUS_OK
UnlockX 12100 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1005 NT_STATUS_OK
ReadX 12100 0 512 512 NT_STATUS_OK
ReadX 12100 512 512 512 NT_STATUS_OK
ReadX 12100 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12101 NT_STATUS_OK
QUERY_FILE_INFORMATION 12101 1005 NT_STATUS_OK
ReadX 12101 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12102 NT_STATUS_OK
LockX 12102 2147483538 1 NT_STATUS_OK
UnlockX 12102 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12102 1005 NT_STATUS_OK
ReadX 12102 0 512 512 NT_STATUS_OK
ReadX 12102 512 512 512 NT_STATUS_OK
ReadX 12102 1024 512 512 NT_STATUS_OK
ReadX 12102 288 20 20 NT_STATUS_OK
ReadX 12102 308 2084 2084 NT_STATUS_OK
ReadX 12102 388 2084 2084 NT_STATUS_OK
ReadX 12102 388 2084 2084 NT_STATUS_OK
ReadX 12089 2157 1386 1386 NT_STATUS_OK
ReadX 12102 2472 399 399 NT_STATUS_OK
ReadX 12102 3072 1536 1536 NT_STATUS_OK
ReadX 12102 544 149 149 NT_STATUS_OK
ReadX 12102 693 485 485 NT_STATUS_OK
Close 12102 NT_STATUS_OK
ReadX 12089 2157 4096 4096 NT_STATUS_OK
ReadX 12089 6253 4096 4096 NT_STATUS_OK
ReadX 12089 10349 4096 4096 NT_STATUS_OK
ReadX 12089 14445 4096 4096 NT_STATUS_OK
ReadX 12089 18541 4096 4096 NT_STATUS_OK
ReadX 12089 22637 256 256 NT_STATUS_OK
ReadX 12089 22893 4096 4096 NT_STATUS_OK
ReadX 12089 26989 4096 4096 NT_STATUS_OK
ReadX 12089 31085 4096 4096 NT_STATUS_OK
ReadX 12089 35181 4096 4096 NT_STATUS_OK
ReadX 12089 39277 4096 4096 NT_STATUS_OK
ReadX 12089 43373 4096 4096 NT_STATUS_OK
ReadX 12089 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12089 2157 1024 1024 NT_STATUS_OK
ReadX 12089 1667 4688 4688 NT_STATUS_OK
ReadX 12089 6355 3516 3516 NT_STATUS_OK
ReadX 12089 9871 16384 16384 NT_STATUS_OK
ReadX 12089 26255 3771 3771 NT_STATUS_OK
ReadX 12089 30026 2048 2048 NT_STATUS_OK
ReadX 12089 32074 1024 1024 NT_STATUS_OK
ReadX 12089 33098 6652 6652 NT_STATUS_OK
ReadX 12089 39750 16384 16384 NT_STATUS_OK
ReadX 12089 56134 10496 10496 NT_STATUS_OK
ReadX 12089 66630 1784 1784 NT_STATUS_OK
ReadX 12089 68414 90 90 NT_STATUS_OK
ReadX 12089 68504 273 273 NT_STATUS_OK
ReadX 12089 68777 1600 1600 NT_STATUS_OK
ReadX 12089 70377 640 640 NT_STATUS_OK
ReadX 12089 71017 1280 1280 NT_STATUS_OK
ReadX 12089 72297 8464 8464 NT_STATUS_OK
ReadX 12089 80761 158 158 NT_STATUS_OK
ReadX 12089 80919 912 912 NT_STATUS_OK
ReadX 12089 81831 1980 1980 NT_STATUS_OK
ReadX 12089 83811 2256 2256 NT_STATUS_OK
ReadX 12089 86067 400 400 NT_STATUS_OK
ReadX 12089 86467 252 252 NT_STATUS_OK
ReadX 12089 86719 42 42 NT_STATUS_OK
ReadX 12089 86761 725 725 NT_STATUS_OK
ReadX 12089 2009 512 512 NT_STATUS_OK
ReadX 12089 3895 9 9 NT_STATUS_OK
ReadX 12089 3781 46 46 NT_STATUS_OK
ReadX 12089 4059 92 92 NT_STATUS_OK
ReadX 12089 3781 92 92 NT_STATUS_OK
ReadX 12089 3986 184 184 NT_STATUS_OK
ReadX 12089 3987 16384 16384 NT_STATUS_OK
ReadX 12089 3902 16384 16384 NT_STATUS_OK
ReadX 12089 3781 10240 10240 NT_STATUS_OK
ReadX 12089 3821 16384 16384 NT_STATUS_OK
ReadX 12089 3891 935 935 NT_STATUS_OK
ReadX 12089 4060 10240 10240 NT_STATUS_OK
ReadX 12089 4059 184 184 NT_STATUS_OK
ReadX 12089 256 184 184 NT_STATUS_OK
ReadX 12089 256 1026 1026 NT_STATUS_OK
ReadX 12089 3901 326 326 NT_STATUS_OK
ReadX 12089 3899 652 652 NT_STATUS_OK
ReadX 12089 256 2 2 NT_STATUS_OK
ReadX 12089 258 4948 4948 NT_STATUS_OK
Close 12089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12104 NT_STATUS_OK
Close 12104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12107 NT_STATUS_OK
WriteX 12107 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12107 258 NT_STATUS_OK
WriteX 12107 0 65536 65536 NT_STATUS_OK
WriteX 12107 65536 65536 65536 NT_STATUS_OK
WriteX 12107 131072 65536 65536 NT_STATUS_OK
WriteX 12107 196608 65536 65536 NT_STATUS_OK
WriteX 12107 262144 65536 65536 NT_STATUS_OK
WriteX 12107 327680 65536 65536 NT_STATUS_OK
WriteX 12107 393216 65536 65536 NT_STATUS_OK
WriteX 12107 458752 65536 65536 NT_STATUS_OK
WriteX 12107 524288 65536 65536 NT_STATUS_OK
WriteX 12107 589824 35257 35257 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12112 NT_STATUS_OK
WriteX 12112 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
WriteX 12112 0 65536 65536 NT_STATUS_OK
WriteX 12112 65536 65536 65536 NT_STATUS_OK
WriteX 12112 131072 65536 65536 NT_STATUS_OK
WriteX 12112 196608 65536 65536 NT_STATUS_OK
WriteX 12112 262144 65536 65536 NT_STATUS_OK
WriteX 12112 327680 65536 65536 NT_STATUS_OK
WriteX 12112 393216 65536 65536 NT_STATUS_OK
WriteX 12112 458752 65536 65536 NT_STATUS_OK
WriteX 12112 524288 65536 65536 NT_STATUS_OK
WriteX 12112 589824 57598 57598 NT_STATUS_OK
Close 12112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12114 NT_STATUS_OK
WriteX 12114 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12114 258 NT_STATUS_OK
WriteX 12114 0 12543 12543 NT_STATUS_OK
Flush 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12120 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1005 NT_STATUS_OK
ReadX 12120 1938 24 24 NT_STATUS_OK
ReadX 12120 1920 276 276 NT_STATUS_OK
ReadX 12120 1918 14 14 NT_STATUS_OK
ReadX 12120 1918 7 7 NT_STATUS_OK
ReadX 12120 1919 12 12 NT_STATUS_OK
ReadX 12120 1919 8 8 NT_STATUS_OK
ReadX 12120 1917 15 15 NT_STATUS_OK
ReadX 12120 0 16 16 NT_STATUS_OK
ReadX 12120 16 2048 2048 NT_STATUS_OK
ReadX 12120 2064 2048 2048 NT_STATUS_OK
ReadX 12120 257 2048 2048 NT_STATUS_OK
ReadX 12120 385 2048 2048 NT_STATUS_OK
ReadX 12120 513 2048 2048 NT_STATUS_OK
ReadX 12120 641 2048 2048 NT_STATUS_OK
ReadX 12120 769 2048 2048 NT_STATUS_OK
ReadX 12120 897 2048 2048 NT_STATUS_OK
ReadX 12120 1025 2048 2048 NT_STATUS_OK
ReadX 12120 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12125 NT_STATUS_OK
WriteX 12125 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12125 258 NT_STATUS_OK
WriteX 12125 0 11588 11588 NT_STATUS_OK
Flush 12125 NT_STATUS_OK
Close 12125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
Close 12120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12130 NT_STATUS_OK
WriteX 12130 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12130 258 NT_STATUS_OK
WriteX 12130 0 11615 11615 NT_STATUS_OK
Flush 12130 NT_STATUS_OK
Close 12130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12139 NT_STATUS_OK
WriteX 12139 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 258 NT_STATUS_OK
WriteX 12139 0 65536 65536 NT_STATUS_OK
WriteX 12139 65536 16050 16050 NT_STATUS_OK
Close 12139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12119 1939 64 64 NT_STATUS_OK
ReadX 12119 128 248 248 NT_STATUS_OK
ReadX 12119 128 568 568 NT_STATUS_OK
ReadX 12119 3872 1536 1536 NT_STATUS_OK
ReadX 12119 3456 2560 2560 NT_STATUS_OK
ReadX 12119 3136 512 512 NT_STATUS_OK
ReadX 12119 2880 4096 4096 NT_STATUS_OK
ReadX 12119 3264 3072 3072 NT_STATUS_OK
ReadX 12119 320 4096 4096 NT_STATUS_OK
ReadX 12119 1024 4096 4096 NT_STATUS_OK
ReadX 12119 3616 4096 4096 NT_STATUS_OK
ReadX 12119 1939 64 64 NT_STATUS_OK
ReadX 12119 128 248 248 NT_STATUS_OK
ReadX 12119 128 608 608 NT_STATUS_OK
ReadX 12119 2858 1024 1024 NT_STATUS_OK
ReadX 12119 2810 4096 4096 NT_STATUS_OK
ReadX 12119 2826 4096 4096 NT_STATUS_OK
ReadX 12119 2580 2048 2048 NT_STATUS_OK
ReadX 12119 2800 2560 2560 NT_STATUS_OK
ReadX 12119 2100 4096 4096 NT_STATUS_OK
ReadX 12119 2084 4096 4096 NT_STATUS_OK
ReadX 12119 868 4096 4096 NT_STATUS_OK
ReadX 12119 2324 4096 4096 NT_STATUS_OK
ReadX 12119 884 4096 4096 NT_STATUS_OK
ReadX 12119 2604 1024 1024 NT_STATUS_OK
ReadX 12119 580 4096 4096 NT_STATUS_OK
ReadX 12119 596 4096 4096 NT_STATUS_OK
ReadX 12119 2752 4096 4096 NT_STATUS_OK
ReadX 12119 2842 1024 1024 NT_STATUS_OK
ReadX 12119 660 4096 4096 NT_STATUS_OK
ReadX 12119 2720 4096 4096 NT_STATUS_OK
ReadX 12119 2736 4096 4096 NT_STATUS_OK
ReadX 12119 628 4096 4096 NT_STATUS_OK
ReadX 12119 2704 4096 4096 NT_STATUS_OK
ReadX 12119 1556 4096 4096 NT_STATUS_OK
ReadX 12119 576 4096 4096 NT_STATUS_OK
ReadX 12119 3168 1536 1536 NT_STATUS_OK
ReadX 12119 832 4096 4096 NT_STATUS_OK
ReadX 12119 1088 4096 4096 NT_STATUS_OK
ReadX 12119 1344 4096 4096 NT_STATUS_OK
ReadX 12119 1600 4096 4096 NT_STATUS_OK
ReadX 12119 1856 4096 4096 NT_STATUS_OK
ReadX 12119 2112 4096 4096 NT_STATUS_OK
ReadX 12119 1892 4096 4096 NT_STATUS_OK
ReadX 12119 820 4096 4096 NT_STATUS_OK
ReadX 12119 788 4096 4096 NT_STATUS_OK
ReadX 12119 1604 4096 4096 NT_STATUS_OK
ReadX 12119 3648 4096 4096 NT_STATUS_OK
ReadX 12119 2608 4096 4096 NT_STATUS_OK
ReadX 12119 548 4096 4096 NT_STATUS_OK
ReadX 12119 740 4096 4096 NT_STATUS_OK
ReadX 12119 1344 4096 4096 NT_STATUS_OK
ReadX 12119 3392 4096 4096 NT_STATUS_OK
ReadX 12119 3904 4096 4096 NT_STATUS_OK
ReadX 12119 644 4096 4096 NT_STATUS_OK
ReadX 12119 676 4096 4096 NT_STATUS_OK
ReadX 12119 2688 4096 4096 NT_STATUS_OK
ReadX 12119 320 4096 4096 NT_STATUS_OK
ReadX 12119 900 4096 4096 NT_STATUS_OK
ReadX 12119 1908 4096 4096 NT_STATUS_OK
ReadX 12119 852 4096 4096 NT_STATUS_OK
ReadX 12119 724 4096 4096 NT_STATUS_OK
ReadX 12119 2292 4096 4096 NT_STATUS_OK
ReadX 12119 612 4096 4096 NT_STATUS_OK
ReadX 12119 388 4096 4096 NT_STATUS_OK
ReadX 12119 2368 4096 4096 NT_STATUS_OK
ReadX 12119 2624 4096 4096 NT_STATUS_OK
ReadX 12119 500 4096 4096 NT_STATUS_OK
ReadX 12119 356 4096 4096 NT_STATUS_OK
ReadX 12119 1024 4096 4096 NT_STATUS_OK
ReadX 12119 576 4096 4096 NT_STATUS_OK
ReadX 12119 340 4096 4096 NT_STATUS_OK
ReadX 12119 420 4096 4096 NT_STATUS_OK
ReadX 12119 1600 4096 4096 NT_STATUS_OK
ReadX 12119 404 4096 4096 NT_STATUS_OK
ReadX 12119 1428 4096 4096 NT_STATUS_OK
ReadX 12119 2656 4096 4096 NT_STATUS_OK
ReadX 12119 2624 4096 4096 NT_STATUS_OK
ReadX 12119 452 4096 4096 NT_STATUS_OK
ReadX 12119 692 4096 4096 NT_STATUS_OK
ReadX 12119 564 4096 4096 NT_STATUS_OK
ReadX 12119 372 4096 4096 NT_STATUS_OK
ReadX 12119 468 4096 4096 NT_STATUS_OK
ReadX 12119 484 4096 4096 NT_STATUS_OK
ReadX 12119 1088 4096 4096 NT_STATUS_OK
ReadX 12119 1924 4096 4096 NT_STATUS_OK
ReadX 12119 2768 4096 4096 NT_STATUS_OK
ReadX 12119 832 4096 4096 NT_STATUS_OK
ReadX 12119 836 4096 4096 NT_STATUS_OK
ReadX 12119 1856 4096 4096 NT_STATUS_OK
ReadX 12119 2640 4096 4096 NT_STATUS_OK
ReadX 12119 436 4096 4096 NT_STATUS_OK
ReadX 12119 1828 4096 4096 NT_STATUS_OK
ReadX 12119 804 4096 4096 NT_STATUS_OK
ReadX 12119 1860 4096 4096 NT_STATUS_OK
ReadX 12119 1812 4096 4096 NT_STATUS_OK
ReadX 12119 756 4096 4096 NT_STATUS_OK
ReadX 12119 1636 4096 4096 NT_STATUS_OK
ReadX 12119 772 4096 4096 NT_STATUS_OK
ReadX 12119 2036 4096 4096 NT_STATUS_OK
ReadX 12119 1220 4096 4096 NT_STATUS_OK
ReadX 12119 1652 4096 4096 NT_STATUS_OK
ReadX 12119 2588 4096 4096 NT_STATUS_OK
ReadX 12119 916 4096 4096 NT_STATUS_OK
ReadX 12119 260 4096 4096 NT_STATUS_OK
ReadX 12119 932 4096 4096 NT_STATUS_OK
ReadX 12119 2624 4096 4096 NT_STATUS_OK
ReadX 12119 308 4096 4096 NT_STATUS_OK
ReadX 12119 292 4096 4096 NT_STATUS_OK
ReadX 12119 1140 4096 4096 NT_STATUS_OK
ReadX 12119 276 4096 4096 NT_STATUS_OK
ReadX 12119 2020 4096 4096 NT_STATUS_OK
ReadX 12119 2880 4096 4096 NT_STATUS_OK
ReadX 12119 516 4096 4096 NT_STATUS_OK
ReadX 12119 1844 4096 4096 NT_STATUS_OK
ReadX 12119 1124 4096 4096 NT_STATUS_OK
ReadX 12119 3136 4096 4096 NT_STATUS_OK
ReadX 12119 324 4096 4096 NT_STATUS_OK
ReadX 12119 1156 4096 4096 NT_STATUS_OK
ReadX 12119 1172 4096 4096 NT_STATUS_OK
ReadX 12119 2112 4096 4096 NT_STATUS_OK
ReadX 12119 2368 4096 4096 NT_STATUS_OK
ReadX 12119 964 4096 4096 NT_STATUS_OK
ReadX 12119 980 4096 4096 NT_STATUS_OK
ReadX 12119 1012 4096 4096 NT_STATUS_OK
ReadX 12119 532 4096 4096 NT_STATUS_OK
ReadX 12119 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12119 1620 4096 4096 NT_STATUS_OK
ReadX 12119 1604 4096 4096 NT_STATUS_OK
ReadX 12119 2116 4096 4096 NT_STATUS_OK
ReadX 12119 2132 4096 4096 NT_STATUS_OK
ReadX 12119 2148 4096 4096 NT_STATUS_OK
ReadX 12119 2276 4096 4096 NT_STATUS_OK
ReadX 12119 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12144 NT_STATUS_OK
QUERY_FILE_INFORMATION 12099 1004 NT_STATUS_OK
Close 12099 NT_STATUS_OK
WriteX 12144 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12144 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12101 1004 NT_STATUS_OK
Close 12101 NT_STATUS_OK
WriteX 12144 0 65536 65536 NT_STATUS_OK
WriteX 12144 65536 64850 64850 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12146 NT_STATUS_OK
WriteX 12146 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12146 258 NT_STATUS_OK
ReadX 12119 2068 4096 4096 NT_STATUS_OK
ReadX 12119 1588 4096 4096 NT_STATUS_OK
ReadX 12119 1572 4096 4096 NT_STATUS_OK
WriteX 12146 0 18630 18630 NT_STATUS_OK
Flush 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12150 NT_STATUS_OK
ReadX 12150 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12119 612 4096 4096 NT_STATUS_OK
ReadX 12119 564 4096 4096 NT_STATUS_OK
ReadX 12119 1876 4096 4096 NT_STATUS_OK
ReadX 12119 628 4096 4096 NT_STATUS_OK
ReadX 12119 740 4096 4096 NT_STATUS_OK
ReadX 12119 724 4096 4096 NT_STATUS_OK
ReadX 12119 644 4096 4096 NT_STATUS_OK
ReadX 12119 2324 4096 4096 NT_STATUS_OK
ReadX 12119 660 4096 4096 NT_STATUS_OK
ReadX 12119 852 4096 4096 NT_STATUS_OK
ReadX 12119 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12119 2368 4096 4096 NT_STATUS_OK
ReadX 12119 1024 4096 4096 NT_STATUS_OK
ReadX 12119 320 4096 4096 NT_STATUS_OK
ReadX 12119 580 4096 4096 NT_STATUS_OK
ReadX 12119 3136 512 512 NT_STATUS_OK
ReadX 12119 2880 4096 4096 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 61440 4096 4096 NT_STATUS_OK
ReadX 12151 126976 4096 4096 NT_STATUS_OK
WriteX 12151 0 65536 65536 NT_STATUS_OK
WriteX 12151 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 61440 4096 4096 NT_STATUS_OK
ReadX 12152 126976 4096 4096 NT_STATUS_OK
ReadX 12152 192512 4096 4096 NT_STATUS_OK
ReadX 12152 258048 4096 4096 NT_STATUS_OK
WriteX 12152 0 65536 65536 NT_STATUS_OK
WriteX 12152 65536 65536 65536 NT_STATUS_OK
WriteX 12152 131072 65536 65536 NT_STATUS_OK
WriteX 12152 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 61440 4096 4096 NT_STATUS_OK
ReadX 12153 126976 4096 4096 NT_STATUS_OK
ReadX 12153 192512 4096 4096 NT_STATUS_OK
ReadX 12153 258048 4096 4096 NT_STATUS_OK
ReadX 12153 323584 4096 4096 NT_STATUS_OK
ReadX 12153 389120 4096 4096 NT_STATUS_OK
ReadX 12153 454656 4096 4096 NT_STATUS_OK
ReadX 12153 520192 4096 4096 NT_STATUS_OK
WriteX 12153 0 65536 65536 NT_STATUS_OK
WriteX 12153 65536 65536 65536 NT_STATUS_OK
WriteX 12153 131072 65536 65536 NT_STATUS_OK
WriteX 12153 196608 65536 65536 NT_STATUS_OK
WriteX 12153 262144 65536 65536 NT_STATUS_OK
WriteX 12153 327680 65536 65536 NT_STATUS_OK
WriteX 12153 393216 65536 65536 NT_STATUS_OK
WriteX 12153 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12155 NT_STATUS_OK
Close 12155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12156 NT_STATUS_OK
WriteX 12156 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12156 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12154 0 8192 8192 NT_STATUS_OK
Flush 12154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12154 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12154 0 8192 8192 NT_STATUS_OK
Flush 12154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12154 0 8192 8192 NT_STATUS_OK
Flush 12154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12154 0 8192 8192 NT_STATUS_OK
Flush 12154 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12158 NT_STATUS_OK
Close 12158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12150 NT_STATUS_OK
Close 12118 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12161 NT_STATUS_OK
WriteX 12161 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 258 NT_STATUS_OK
WriteX 12161 0 62591 62591 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12166 NT_STATUS_OK
WriteX 12166 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 10845 10845 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12168 NT_STATUS_OK
Close 12168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12171 NT_STATUS_OK
WriteX 12171 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 258 NT_STATUS_OK
WriteX 12171 0 30118 30118 NT_STATUS_OK
Close 12171 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
WriteX 12156 0 64 64 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12173 NT_STATUS_OK
ReadX 12173 0 61440 61440 NT_STATUS_OK
ReadX 12173 61440 4096 4096 NT_STATUS_OK
ReadX 12173 65536 61440 61440 NT_STATUS_OK
ReadX 12173 126976 4096 4096 NT_STATUS_OK
ReadX 12173 131072 61440 61440 NT_STATUS_OK
ReadX 12173 192512 4096 4096 NT_STATUS_OK
ReadX 12173 196608 61440 61440 NT_STATUS_OK
ReadX 12173 258048 4096 4096 NT_STATUS_OK
ReadX 12173 262144 61440 61440 NT_STATUS_OK
ReadX 12173 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12174 NT_STATUS_OK
ReadX 12174 0 61440 61440 NT_STATUS_OK
ReadX 12174 61440 4096 4096 NT_STATUS_OK
ReadX 12174 65536 61440 61440 NT_STATUS_OK
ReadX 12174 126976 4096 4096 NT_STATUS_OK
ReadX 12174 131072 61440 61440 NT_STATUS_OK
ReadX 12174 192512 4096 4096 NT_STATUS_OK
ReadX 12174 196608 61440 61440 NT_STATUS_OK
ReadX 12174 258048 4096 4096 NT_STATUS_OK
ReadX 12174 262144 61440 61440 NT_STATUS_OK
ReadX 12174 323584 4096 4096 NT_STATUS_OK
ReadX 12174 327680 61440 61440 NT_STATUS_OK
ReadX 12174 389120 4096 4096 NT_STATUS_OK
ReadX 12174 393216 61440 61440 NT_STATUS_OK
ReadX 12174 454656 4096 4096 NT_STATUS_OK
ReadX 12174 458752 61440 61440 NT_STATUS_OK
ReadX 12174 520192 4096 4096 NT_STATUS_OK
ReadX 12174 524288 61440 61440 NT_STATUS_OK
ReadX 12174 585728 4096 4096 NT_STATUS_OK
ReadX 12174 589824 61440 61440 NT_STATUS_OK
ReadX 12174 651264 4096 4096 NT_STATUS_OK
ReadX 12174 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 61440 61440 NT_STATUS_OK
ReadX 12175 61440 4096 4096 NT_STATUS_OK
ReadX 12175 65536 61440 61440 NT_STATUS_OK
ReadX 12175 126976 4096 4096 NT_STATUS_OK
ReadX 12175 131072 61440 61440 NT_STATUS_OK
ReadX 12175 192512 4096 4096 NT_STATUS_OK
ReadX 12175 196608 61440 61440 NT_STATUS_OK
ReadX 12175 258048 4096 4096 NT_STATUS_OK
ReadX 12175 262144 61440 61440 NT_STATUS_OK
ReadX 12175 323584 4096 4096 NT_STATUS_OK
ReadX 12175 327680 61440 61440 NT_STATUS_OK
ReadX 12175 389120 4096 4096 NT_STATUS_OK
ReadX 12175 393216 61440 61440 NT_STATUS_OK
ReadX 12175 454656 4096 4096 NT_STATUS_OK
ReadX 12175 458752 61440 61440 NT_STATUS_OK
ReadX 12175 520192 4096 4096 NT_STATUS_OK
ReadX 12175 524288 61440 61440 NT_STATUS_OK
ReadX 12175 585728 4096 4096 NT_STATUS_OK
ReadX 12175 589824 61440 61440 NT_STATUS_OK
ReadX 12175 651264 4096 4096 NT_STATUS_OK
ReadX 12175 655360 61440 61440 NT_STATUS_OK
ReadX 12175 716800 4096 4096 NT_STATUS_OK
ReadX 12175 720896 61440 61440 NT_STATUS_OK
ReadX 12175 782336 4096 4096 NT_STATUS_OK
ReadX 12175 786432 61440 61440 NT_STATUS_OK
ReadX 12175 847872 4096 4096 NT_STATUS_OK
ReadX 12175 851968 61440 61440 NT_STATUS_OK
ReadX 12175 913408 4096 4096 NT_STATUS_OK
ReadX 12175 917504 61440 61440 NT_STATUS_OK
ReadX 12175 978944 4096 4096 NT_STATUS_OK
ReadX 12175 983040 61440 61440 NT_STATUS_OK
ReadX 12175 1044480 4096 4096 NT_STATUS_OK
ReadX 12175 1048576 61440 61440 NT_STATUS_OK
ReadX 12175 1110016 4096 4096 NT_STATUS_OK
ReadX 12175 1114112 61440 61440 NT_STATUS_OK
ReadX 12175 1175552 4096 4096 NT_STATUS_OK
ReadX 12175 1179648 61440 61440 NT_STATUS_OK
ReadX 12175 1241088 4096 4096 NT_STATUS_OK
ReadX 12175 1245184 61440 61440 NT_STATUS_OK
ReadX 12175 1306624 4096 4096 NT_STATUS_OK
ReadX 12175 1310720 61440 61440 NT_STATUS_OK
ReadX 12175 1372160 4096 4096 NT_STATUS_OK
ReadX 12175 1376256 61440 61440 NT_STATUS_OK
ReadX 12175 1437696 4096 4096 NT_STATUS_OK
ReadX 12175 1441792 61440 61440 NT_STATUS_OK
ReadX 12175 1503232 4096 4096 NT_STATUS_OK
ReadX 12175 1507328 61440 61440 NT_STATUS_OK
ReadX 12175 1568768 4096 4096 NT_STATUS_OK
ReadX 12175 1572864 61440 61440 NT_STATUS_OK
ReadX 12175 1634304 4096 4096 NT_STATUS_OK
ReadX 12175 1638400 61440 61440 NT_STATUS_OK
ReadX 12175 1699840 4096 4096 NT_STATUS_OK
ReadX 12175 1703936 61440 61440 NT_STATUS_OK
ReadX 12175 1765376 4096 4096 NT_STATUS_OK
ReadX 12175 1769472 61440 61440 NT_STATUS_OK
ReadX 12175 1830912 4096 4096 NT_STATUS_OK
ReadX 12175 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12173 NT_STATUS_OK
Close 12174 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
ReadX 12180 4096 4096 4096 NT_STATUS_OK
ReadX 12180 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12181 NT_STATUS_OK
Close 12181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Close 12180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12183 NT_STATUS_OK
ReadX 12183 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12184 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12183 NT_STATUS_OK
Close 12184 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 8192 8192 NT_STATUS_OK
ReadX 12188 8192 8192 8192 NT_STATUS_OK
ReadX 12188 16384 8192 8192 NT_STATUS_OK
ReadX 12188 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12188 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12193 NT_STATUS_OK
WriteX 12193 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12193 258 NT_STATUS_OK
WriteX 12193 0 10438 10438 NT_STATUS_OK
Close 12193 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12194 NT_STATUS_OK
Close 12194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12197 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12198 NT_STATUS_OK
Close 12198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12199 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 4096 4096 NT_STATUS_OK
ReadX 12202 4096 4096 4096 NT_STATUS_OK
ReadX 12202 8192 4096 4096 NT_STATUS_OK
ReadX 12202 12288 8192 8192 NT_STATUS_OK
ReadX 12202 20480 8192 8192 NT_STATUS_OK
ReadX 12202 28672 8192 8192 NT_STATUS_OK
ReadX 12202 36864 8192 8192 NT_STATUS_OK
ReadX 12202 45056 8192 8192 NT_STATUS_OK
ReadX 12202 53248 8192 8192 NT_STATUS_OK
ReadX 12202 61440 8192 8192 NT_STATUS_OK
ReadX 12202 69632 8192 8192 NT_STATUS_OK
ReadX 12202 77824 8192 8192 NT_STATUS_OK
ReadX 12202 86016 8192 8192 NT_STATUS_OK
ReadX 12202 94208 8192 8192 NT_STATUS_OK
ReadX 12202 102400 8192 8192 NT_STATUS_OK
ReadX 12202 110592 8192 8192 NT_STATUS_OK
ReadX 12202 118784 8192 8192 NT_STATUS_OK
ReadX 12202 126976 8192 8192 NT_STATUS_OK
ReadX 12202 135168 8192 8192 NT_STATUS_OK
ReadX 12202 143360 8192 8192 NT_STATUS_OK
ReadX 12202 151552 8192 8192 NT_STATUS_OK
ReadX 12202 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12204 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12207 NT_STATUS_OK
WriteX 12207 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12207 258 NT_STATUS_OK
WriteX 12207 0 28489 28489 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12210 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12211 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12213 NT_STATUS_OK
ReadX 12213 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 8192 8192 NT_STATUS_OK
ReadX 12214 8192 8192 8192 NT_STATUS_OK
ReadX 12214 16384 8192 8192 NT_STATUS_OK
ReadX 12214 24576 8192 8192 NT_STATUS_OK
ReadX 12214 32768 16384 16384 NT_STATUS_OK
ReadX 12214 49152 8192 8192 NT_STATUS_OK
ReadX 12214 57344 8192 8192 NT_STATUS_OK
ReadX 12214 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12216 NT_STATUS_OK
Close 12216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12219 NT_STATUS_OK
WriteX 12219 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12219 258 NT_STATUS_OK
WriteX 12219 0 29253 29253 NT_STATUS_OK
Close 12219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12223 NT_STATUS_OK
Close 12223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12226 NT_STATUS_OK
WriteX 12226 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 258 NT_STATUS_OK
WriteX 12226 0 30183 30183 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12227 NT_STATUS_OK
Close 12227 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12229 NT_STATUS_OK
WriteX 12229 0 510 510 NT_STATUS_OK
WriteX 12229 510 512 512 NT_STATUS_OK
WriteX 12229 1022 510 510 NT_STATUS_OK
WriteX 12229 1532 510 510 NT_STATUS_OK
WriteX 12229 2042 168 168 NT_STATUS_OK
Close 12229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 61440 4096 4096 NT_STATUS_OK
ReadX 12233 126976 4096 4096 NT_STATUS_OK
WriteX 12233 0 65536 65536 NT_STATUS_OK
WriteX 12233 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 61440 4096 4096 NT_STATUS_OK
ReadX 12234 126976 4096 4096 NT_STATUS_OK
ReadX 12234 192512 4096 4096 NT_STATUS_OK
ReadX 12234 258048 4096 4096 NT_STATUS_OK
WriteX 12234 0 65536 65536 NT_STATUS_OK
WriteX 12234 65536 65536 65536 NT_STATUS_OK
WriteX 12234 131072 65536 65536 NT_STATUS_OK
WriteX 12234 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 61440 4096 4096 NT_STATUS_OK
ReadX 12235 126976 4096 4096 NT_STATUS_OK
ReadX 12235 192512 4096 4096 NT_STATUS_OK
ReadX 12235 258048 4096 4096 NT_STATUS_OK
ReadX 12235 323584 4096 4096 NT_STATUS_OK
ReadX 12235 389120 4096 4096 NT_STATUS_OK
ReadX 12235 454656 4096 4096 NT_STATUS_OK
ReadX 12235 520192 4096 4096 NT_STATUS_OK
WriteX 12235 0 65536 65536 NT_STATUS_OK
WriteX 12235 65536 65536 65536 NT_STATUS_OK
WriteX 12235 131072 65536 65536 NT_STATUS_OK
WriteX 12235 196608 65536 65536 NT_STATUS_OK
WriteX 12235 262144 65536 65536 NT_STATUS_OK
WriteX 12235 327680 65536 65536 NT_STATUS_OK
WriteX 12235 393216 65536 65536 NT_STATUS_OK
WriteX 12235 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12236 NT_STATUS_OK
Close 12236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Close 12233 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12256 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12285 NT_STATUS_OK
Close 12285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12290 NT_STATUS_OK
Close 12290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12298 NT_STATUS_OK
Close 12298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12304 NT_STATUS_OK
WriteX 12304 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12304 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12304 0 65536 65536 NT_STATUS_OK
WriteX 12304 65536 65536 65536 NT_STATUS_OK
WriteX 12304 131072 65536 65536 NT_STATUS_OK
WriteX 12304 196608 65536 65536 NT_STATUS_OK
WriteX 12304 262144 26634 26634 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
Close 12311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
ReadX 12312 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12317 NT_STATUS_OK
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12335 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12355 NT_STATUS_OK
Close 12355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12360 NT_STATUS_OK
Close 12360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12374 NT_STATUS_OK
Close 12374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 4096 4096 NT_STATUS_OK
Close 12391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12393 NT_STATUS_OK
ReadX 12393 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12403 NT_STATUS_OK
Close 12403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12436 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12436 0 4096 4096 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12437 NT_STATUS_OK
ReadX 12437 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 4096 4096 NT_STATUS_OK
ReadX 12438 4096 4096 4096 NT_STATUS_OK
ReadX 12438 8192 4096 4096 NT_STATUS_OK
ReadX 12438 12288 4096 4096 NT_STATUS_OK
ReadX 12438 16384 4096 4096 NT_STATUS_OK
ReadX 12438 20480 4096 4096 NT_STATUS_OK
ReadX 12438 24576 4096 4096 NT_STATUS_OK
ReadX 12438 28672 4096 4096 NT_STATUS_OK
ReadX 12438 32768 4096 4096 NT_STATUS_OK
ReadX 12438 36864 4096 4096 NT_STATUS_OK
ReadX 12438 40960 4096 4096 NT_STATUS_OK
ReadX 12438 45056 4096 4096 NT_STATUS_OK
ReadX 12438 49152 4096 4096 NT_STATUS_OK
ReadX 12438 53248 4096 4096 NT_STATUS_OK
ReadX 12438 57344 4096 4096 NT_STATUS_OK
ReadX 12438 61440 4096 4096 NT_STATUS_OK
ReadX 12438 65536 4096 4096 NT_STATUS_OK
ReadX 12438 69632 4096 4096 NT_STATUS_OK
ReadX 12438 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12438 1004 NT_STATUS_OK
WriteX 12438 0 4096 4096 NT_STATUS_OK
Close 12438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12439 NT_STATUS_OK
SET_FILE_INFORMATION 12439 1004 NT_STATUS_OK
Close 12439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12441 NT_STATUS_OK
Close 12441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12444 NT_STATUS_OK
WriteX 12444 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12444 258 NT_STATUS_OK
WriteX 12444 0 65536 65536 NT_STATUS_OK
WriteX 12444 65536 19979 19979 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
QUERY_FILE_INFORMATION 12445 1004 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
SET_FILE_INFORMATION 12445 1004 NT_STATUS_OK
WriteX 12445 0 4096 4096 NT_STATUS_OK
Flush 12445 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
Close 12448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
Close 12449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12450 1004 NT_STATUS_OK
WriteX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12453 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12456 NT_STATUS_OK
WriteX 12456 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12456 258 NT_STATUS_OK
WriteX 12456 0 65536 65536 NT_STATUS_OK
WriteX 12456 65536 17654 17654 NT_STATUS_OK
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
Flush 12457 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
Flush 12457 NT_STATUS_OK
QUERY_FILE_INFORMATION 12457 1004 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
Flush 12457 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
Flush 12457 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
Flush 12457 NT_STATUS_OK
SET_FILE_INFORMATION 12457 1004 NT_STATUS_OK
WriteX 12457 0 4096 4096 NT_STATUS_OK
Flush 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12458 NT_STATUS_OK
SET_FILE_INFORMATION 12458 1004 NT_STATUS_OK
Close 12458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12460 NT_STATUS_OK
Close 12460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
ReadX 12462 4096 4096 4096 NT_STATUS_OK
ReadX 12462 8192 4096 4096 NT_STATUS_OK
ReadX 12462 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12462 16384 4096 4096 NT_STATUS_OK
ReadX 12462 20480 4096 4096 NT_STATUS_OK
ReadX 12462 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
Close 12463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12465 1004 NT_STATUS_OK
WriteX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12468 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12471 NT_STATUS_OK
WriteX 12471 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12471 258 NT_STATUS_OK
WriteX 12471 0 65536 65536 NT_STATUS_OK
WriteX 12471 65536 19490 19490 NT_STATUS_OK
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
SET_FILE_INFORMATION 12472 1004 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
Close 12472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12473 NT_STATUS_OK
SET_FILE_INFORMATION 12473 1004 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12475 NT_STATUS_OK
Close 12475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12477 0 4096 4096 NT_STATUS_OK
Close 12477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
ReadX 12479 4096 4096 4096 NT_STATUS_OK
ReadX 12479 8192 4096 4096 NT_STATUS_OK
ReadX 12479 12288 4096 4096 NT_STATUS_OK
ReadX 12479 16384 4096 4096 NT_STATUS_OK
ReadX 12479 20480 4096 4096 NT_STATUS_OK
ReadX 12479 24576 4096 4096 NT_STATUS_OK
ReadX 12479 28672 4096 4096 NT_STATUS_OK
ReadX 12479 32768 4096 4096 NT_STATUS_OK
ReadX 12479 36864 4096 4096 NT_STATUS_OK
ReadX 12479 40960 4096 4096 NT_STATUS_OK
ReadX 12479 45056 4096 4096 NT_STATUS_OK
ReadX 12479 49152 4096 4096 NT_STATUS_OK
ReadX 12479 53248 4096 4096 NT_STATUS_OK
ReadX 12479 57344 4096 4096 NT_STATUS_OK
ReadX 12479 61440 4096 4096 NT_STATUS_OK
ReadX 12479 65536 4096 4096 NT_STATUS_OK
ReadX 12479 69632 4096 4096 NT_STATUS_OK
ReadX 12479 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12479 1004 NT_STATUS_OK
WriteX 12479 0 4096 4096 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12480 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
Close 12480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12485 NT_STATUS_OK
WriteX 12485 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12485 258 NT_STATUS_OK
WriteX 12485 0 65536 65536 NT_STATUS_OK
WriteX 12485 65536 8866 8866 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
SET_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
Close 12488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
Close 12489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12490 1004 NT_STATUS_OK
WriteX 12490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12491 NT_STATUS_OK
Close 12491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12493 NT_STATUS_OK
Close 12493 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12496 NT_STATUS_OK
WriteX 12496 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12496 258 NT_STATUS_OK
WriteX 12496 0 65536 65536 NT_STATUS_OK
WriteX 12496 65536 9298 9298 NT_STATUS_OK
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
WriteX 12497 0 4096 4096 NT_STATUS_OK
Flush 12497 NT_STATUS_OK
SET_FILE_INFORMATION 12497 1004 NT_STATUS_OK
WriteX 12497 0 4096 4096 NT_STATUS_OK
Flush 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12498 NT_STATUS_OK
SET_FILE_INFORMATION 12498 1004 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12500 NT_STATUS_OK
Close 12500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12503 0 4096 4096 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12504 4096 4096 4096 NT_STATUS_OK
ReadX 12504 8192 4096 4096 NT_STATUS_OK
ReadX 12504 12288 4096 4096 NT_STATUS_OK
ReadX 12504 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12504 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12507 1004 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12513 NT_STATUS_OK
WriteX 12513 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 258 NT_STATUS_OK
WriteX 12513 0 65536 65536 NT_STATUS_OK
WriteX 12513 65536 11540 11540 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
SET_FILE_INFORMATION 12514 1004 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
Flush 12514 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12515 NT_STATUS_OK
SET_FILE_INFORMATION 12515 1004 NT_STATUS_OK
Close 12515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12517 NT_STATUS_OK
Close 12517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 61440 4096 4096 NT_STATUS_OK
ReadX 12519 126976 4096 4096 NT_STATUS_OK
WriteX 12519 0 65536 65536 NT_STATUS_OK
WriteX 12519 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 61440 4096 4096 NT_STATUS_OK
ReadX 12520 126976 4096 4096 NT_STATUS_OK
ReadX 12520 192512 4096 4096 NT_STATUS_OK
ReadX 12520 258048 4096 4096 NT_STATUS_OK
WriteX 12520 0 65536 65536 NT_STATUS_OK
WriteX 12520 65536 65536 65536 NT_STATUS_OK
WriteX 12520 131072 65536 65536 NT_STATUS_OK
WriteX 12520 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 61440 4096 4096 NT_STATUS_OK
ReadX 12521 126976 4096 4096 NT_STATUS_OK
ReadX 12521 192512 4096 4096 NT_STATUS_OK
ReadX 12521 258048 4096 4096 NT_STATUS_OK
ReadX 12521 323584 4096 4096 NT_STATUS_OK
ReadX 12521 389120 4096 4096 NT_STATUS_OK
ReadX 12521 454656 4096 4096 NT_STATUS_OK
ReadX 12521 520192 4096 4096 NT_STATUS_OK
WriteX 12521 0 65536 65536 NT_STATUS_OK
WriteX 12521 65536 65536 65536 NT_STATUS_OK
WriteX 12521 131072 65536 65536 NT_STATUS_OK
WriteX 12521 196608 65536 65536 NT_STATUS_OK
WriteX 12521 262144 65536 65536 NT_STATUS_OK
WriteX 12521 327680 65536 65536 NT_STATUS_OK
WriteX 12521 393216 65536 65536 NT_STATUS_OK
WriteX 12521 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
ReadX 12522 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12523 NT_STATUS_OK
WriteX 12523 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12523 258 NT_STATUS_OK
WriteX 12523 0 53 53 NT_STATUS_OK
Close 12523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12524 NT_STATUS_OK
Close 12524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12522 8192 4096 4096 NT_STATUS_OK
ReadX 12522 12288 4096 4096 NT_STATUS_OK
WriteX 12526 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 258 NT_STATUS_OK
ReadX 12522 16384 4096 4096 NT_STATUS_OK
ReadX 12522 20480 4096 4096 NT_STATUS_OK
WriteX 12526 0 15360 15360 NT_STATUS_OK
Close 12526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12527 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12527 1004 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Close 12527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12528 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12531 NT_STATUS_OK
Close 12531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12530 4096 4096 4096 NT_STATUS_OK
ReadX 12530 8192 4096 4096 NT_STATUS_OK
ReadX 12530 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 4096 4096 NT_STATUS_OK
ReadX 12533 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
ReadX 12534 8192 4096 4096 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12535 NT_STATUS_OK
WriteX 12535 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12535 258 NT_STATUS_OK
WriteX 12535 0 15360 15360 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12536 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12536 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12537 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12540 NT_STATUS_OK
SET_FILE_INFORMATION 12540 1004 NT_STATUS_OK
Close 12540 NT_STATUS_OK
WriteX 12536 0 4096 4096 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
ReadX 12543 4096 4096 4096 NT_STATUS_OK
ReadX 12543 8192 4096 4096 NT_STATUS_OK
ReadX 12543 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12543 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12543 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12545 NT_STATUS_OK
WriteX 12545 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12545 258 NT_STATUS_OK
WriteX 12545 0 53 53 NT_STATUS_OK
Close 12545 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12544 4096 4096 4096 NT_STATUS_OK
ReadX 12544 8192 4096 4096 NT_STATUS_OK
ReadX 12544 12288 4096 4096 NT_STATUS_OK
WriteX 12548 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12548 258 NT_STATUS_OK
WriteX 12548 0 12006 12006 NT_STATUS_OK
Close 12548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12549 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12549 1004 NT_STATUS_OK
WriteX 12549 0 4096 4096 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12550 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12553 NT_STATUS_OK
Close 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12552 4096 4096 4096 NT_STATUS_OK
ReadX 12552 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12555 NT_STATUS_OK
WriteX 12555 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 258 NT_STATUS_OK
WriteX 12555 0 11991 11991 NT_STATUS_OK
Close 12555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12556 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12556 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12560 NT_STATUS_OK
SET_FILE_INFORMATION 12560 1004 NT_STATUS_OK
Close 12560 NT_STATUS_OK
WriteX 12556 0 4096 4096 NT_STATUS_OK
Close 12556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12561 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12563 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
ReadX 12563 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
Close 12539 NT_STATUS_OK
WriteX 12543 0 19054 19054 NT_STATUS_OK
WriteX 12563 0 12288 12288 NT_STATUS_OK
Close 12559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12566 NT_STATUS_OK
Close 12566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12563 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12568 NT_STATUS_OK
Close 12568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 61440 61440 NT_STATUS_OK
ReadX 12570 61440 4096 4096 NT_STATUS_OK
ReadX 12570 65536 61440 61440 NT_STATUS_OK
ReadX 12570 126976 4096 4096 NT_STATUS_OK
ReadX 12570 131072 61440 61440 NT_STATUS_OK
ReadX 12570 192512 4096 4096 NT_STATUS_OK
ReadX 12570 196608 61440 61440 NT_STATUS_OK
ReadX 12570 258048 4096 4096 NT_STATUS_OK
ReadX 12570 262144 61440 61440 NT_STATUS_OK
ReadX 12570 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 61440 61440 NT_STATUS_OK
ReadX 12571 61440 4096 4096 NT_STATUS_OK
ReadX 12571 65536 61440 61440 NT_STATUS_OK
ReadX 12571 126976 4096 4096 NT_STATUS_OK
ReadX 12571 131072 61440 61440 NT_STATUS_OK
ReadX 12571 192512 4096 4096 NT_STATUS_OK
ReadX 12571 196608 61440 61440 NT_STATUS_OK
ReadX 12571 258048 4096 4096 NT_STATUS_OK
ReadX 12571 262144 61440 61440 NT_STATUS_OK
ReadX 12571 323584 4096 4096 NT_STATUS_OK
ReadX 12571 327680 61440 61440 NT_STATUS_OK
ReadX 12571 389120 4096 4096 NT_STATUS_OK
ReadX 12571 393216 61440 61440 NT_STATUS_OK
ReadX 12571 454656 4096 4096 NT_STATUS_OK
ReadX 12571 458752 61440 61440 NT_STATUS_OK
ReadX 12571 520192 4096 4096 NT_STATUS_OK
ReadX 12571 524288 61440 61440 NT_STATUS_OK
ReadX 12571 585728 4096 4096 NT_STATUS_OK
ReadX 12571 589824 61440 61440 NT_STATUS_OK
ReadX 12571 651264 4096 4096 NT_STATUS_OK
ReadX 12571 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 61440 61440 NT_STATUS_OK
ReadX 12572 61440 4096 4096 NT_STATUS_OK
ReadX 12572 65536 61440 61440 NT_STATUS_OK
ReadX 12572 126976 4096 4096 NT_STATUS_OK
ReadX 12572 131072 61440 61440 NT_STATUS_OK
ReadX 12572 192512 4096 4096 NT_STATUS_OK
ReadX 12572 196608 61440 61440 NT_STATUS_OK
ReadX 12572 258048 4096 4096 NT_STATUS_OK
ReadX 12572 262144 61440 61440 NT_STATUS_OK
ReadX 12572 323584 4096 4096 NT_STATUS_OK
ReadX 12572 327680 61440 61440 NT_STATUS_OK
ReadX 12572 389120 4096 4096 NT_STATUS_OK
ReadX 12572 393216 61440 61440 NT_STATUS_OK
ReadX 12572 454656 4096 4096 NT_STATUS_OK
ReadX 12572 458752 61440 61440 NT_STATUS_OK
ReadX 12572 520192 4096 4096 NT_STATUS_OK
ReadX 12572 524288 61440 61440 NT_STATUS_OK
ReadX 12572 585728 4096 4096 NT_STATUS_OK
ReadX 12572 589824 61440 61440 NT_STATUS_OK
ReadX 12572 651264 4096 4096 NT_STATUS_OK
ReadX 12572 655360 61440 61440 NT_STATUS_OK
ReadX 12572 716800 4096 4096 NT_STATUS_OK
ReadX 12572 720896 61440 61440 NT_STATUS_OK
ReadX 12572 782336 4096 4096 NT_STATUS_OK
ReadX 12572 786432 61440 61440 NT_STATUS_OK
ReadX 12572 847872 4096 4096 NT_STATUS_OK
ReadX 12572 851968 61440 61440 NT_STATUS_OK
ReadX 12572 913408 4096 4096 NT_STATUS_OK
ReadX 12572 917504 61440 61440 NT_STATUS_OK
ReadX 12572 978944 4096 4096 NT_STATUS_OK
ReadX 12572 983040 61440 61440 NT_STATUS_OK
ReadX 12572 1044480 4096 4096 NT_STATUS_OK
ReadX 12572 1048576 61440 61440 NT_STATUS_OK
ReadX 12572 1110016 4096 4096 NT_STATUS_OK
ReadX 12572 1114112 61440 61440 NT_STATUS_OK
ReadX 12572 1175552 4096 4096 NT_STATUS_OK
ReadX 12572 1179648 61440 61440 NT_STATUS_OK
ReadX 12572 1241088 4096 4096 NT_STATUS_OK
ReadX 12572 1245184 61440 61440 NT_STATUS_OK
ReadX 12572 1306624 4096 4096 NT_STATUS_OK
ReadX 12572 1310720 61440 61440 NT_STATUS_OK
ReadX 12572 1372160 4096 4096 NT_STATUS_OK
ReadX 12572 1376256 61440 61440 NT_STATUS_OK
ReadX 12572 1437696 4096 4096 NT_STATUS_OK
ReadX 12572 1441792 61440 61440 NT_STATUS_OK
ReadX 12572 1503232 4096 4096 NT_STATUS_OK
ReadX 12572 1507328 61440 61440 NT_STATUS_OK
ReadX 12572 1568768 4096 4096 NT_STATUS_OK
ReadX 12572 1572864 61440 61440 NT_STATUS_OK
ReadX 12572 1634304 4096 4096 NT_STATUS_OK
ReadX 12572 1638400 61440 61440 NT_STATUS_OK
ReadX 12572 1699840 4096 4096 NT_STATUS_OK
ReadX 12572 1703936 61440 61440 NT_STATUS_OK
ReadX 12572 1765376 4096 4096 NT_STATUS_OK
ReadX 12572 1769472 61440 61440 NT_STATUS_OK
ReadX 12572 1830912 4096 4096 NT_STATUS_OK
ReadX 12572 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12579 NT_STATUS_OK
QUERY_FILE_INFORMATION 12579 1004 NT_STATUS_OK
WriteX 12579 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12579 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12580 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12581 NT_STATUS_OK
WriteX 12581 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12581 258 NT_STATUS_OK
WriteX 12581 0 491 491 NT_STATUS_OK
Close 12581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12579 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12585 NT_STATUS_OK
WriteX 12585 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12585 258 NT_STATUS_OK
WriteX 12585 0 543 543 NT_STATUS_OK
Close 12585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Close 12572 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Close 12576 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12599 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 1004 NT_STATUS_OK
WriteX 12599 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
WriteX 12599 0 2048 2048 NT_STATUS_OK
Close 12599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12600 0 4096 4096 NT_STATUS_OK
Flush 12600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12600 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12605 NT_STATUS_OK
WriteX 12605 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 258 NT_STATUS_OK
WriteX 12605 0 2048 2048 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12610 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12611 NT_STATUS_OK
WriteX 12611 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12611 258 NT_STATUS_OK
WriteX 12611 0 2048 2048 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 2048 2048 NT_STATUS_OK
ReadX 12590 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12594 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12606 0 4096 4096 NT_STATUS_OK
WriteX 12590 0 8192 8192 NT_STATUS_OK
WriteX 12591 0 4096 4096 NT_STATUS_OK
WriteX 12592 0 4096 4096 NT_STATUS_OK
ReadX 12606 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12615 NT_STATUS_OK
ReadX 12615 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12616 NT_STATUS_OK
QUERY_FILE_INFORMATION 12616 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12593 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12636 NT_STATUS_OK
QUERY_FILE_INFORMATION 12636 1004 NT_STATUS_OK
WriteX 12636 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12636 258 NT_STATUS_OK
WriteX 12636 0 2048 2048 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12639 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12644 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 1004 NT_STATUS_OK
WriteX 12644 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 258 NT_STATUS_OK
WriteX 12644 0 2048 2048 NT_STATUS_OK
Close 12644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12637 0 4096 4096 NT_STATUS_OK
Flush 12637 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12637 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12639 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12647 NT_STATUS_OK
WriteX 12647 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12647 258 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12650 NT_STATUS_OK
WriteX 12650 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 258 NT_STATUS_OK
WriteX 12650 0 4096 4096 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12651 0 4096 4096 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12657 NT_STATUS_OK
Close 12657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12658 NT_STATUS_OK
WriteX 12658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
WriteX 12658 0 2048 2048 NT_STATUS_OK
Close 12658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12673 NT_STATUS_OK
QUERY_FILE_INFORMATION 12673 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Close 12671 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Close 12672 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12675 NT_STATUS_OK
QUERY_FILE_INFORMATION 12675 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12680 NT_STATUS_OK
ReadX 12680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12681 NT_STATUS_OK
ReadX 12681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12695 NT_STATUS_OK
QUERY_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12695 258 NT_STATUS_OK
WriteX 12695 0 2048 2048 NT_STATUS_OK
Close 12695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12706 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12707 NT_STATUS_OK
QUERY_FILE_INFORMATION 12707 1004 NT_STATUS_OK
WriteX 12707 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12707 258 NT_STATUS_OK
WriteX 12707 0 2048 2048 NT_STATUS_OK
Close 12707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12715 NT_STATUS_OK
QUERY_FILE_INFORMATION 12715 1004 NT_STATUS_OK
WriteX 12715 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12715 258 NT_STATUS_OK
WriteX 12715 0 2048 2048 NT_STATUS_OK
Close 12715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12696 0 4096 4096 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
WriteX 12708 0 4096 4096 NT_STATUS_OK
Flush 12708 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Flush 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12708 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12698 4096 16384 16384 NT_STATUS_OK
ReadX 12678 4096 16384 16384 NT_STATUS_OK
ReadX 12710 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 2048 2048 NT_STATUS_OK
WriteX 12718 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12719 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12718 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Close 12678 NT_STATUS_OK
Close 12679 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12721 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12723 NT_STATUS_OK
QUERY_FILE_INFORMATION 12723 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12726 4096 16384 16384 NT_STATUS_OK
WriteX 12726 0 4096 4096 NT_STATUS_OK
WriteX 12727 0 4096 4096 NT_STATUS_OK
WriteX 12728 0 4096 4096 NT_STATUS_OK
WriteX 12729 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12733 NT_STATUS_OK
ReadX 12733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12734 NT_STATUS_OK
ReadX 12734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12736 NT_STATUS_OK
ReadX 12736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12742 NT_STATUS_OK
ReadX 12742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 8192 8192 NT_STATUS_OK
ReadX 12732 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12746 0 4096 4096 NT_STATUS_OK
ReadX 12746 4096 4096 4096 NT_STATUS_OK
ReadX 12746 8192 4096 4096 NT_STATUS_OK
WriteX 12732 0 4096 4096 NT_STATUS_OK
WriteX 12733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
ReadX 12747 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12726 0 4096 4096 NT_STATUS_OK
WriteX 12727 0 4096 4096 NT_STATUS_OK
WriteX 12728 0 4096 4096 NT_STATUS_OK
WriteX 12729 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12752 NT_STATUS_OK
QUERY_FILE_INFORMATION 12752 1004 NT_STATUS_OK
WriteX 12752 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12752 258 NT_STATUS_OK
WriteX 12752 0 2048 2048 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
ReadX 12755 4096 4096 4096 NT_STATUS_OK
WriteX 12755 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 4096 4096 NT_STATUS_OK
ReadX 12757 4096 4096 4096 NT_STATUS_OK
WriteX 12757 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12758 NT_STATUS_OK
QUERY_FILE_INFORMATION 12758 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Close 12744 NT_STATUS_OK
Close 12732 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Close 12736 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Close 12757 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12760 0 4096 4096 NT_STATUS_OK
ReadX 12760 4096 4096 4096 NT_STATUS_OK
ReadX 12760 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12766 NT_STATUS_OK
ReadX 12766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
ReadX 12761 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12778 NT_STATUS_OK
QUERY_FILE_INFORMATION 12778 1004 NT_STATUS_OK
WriteX 12778 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12778 258 NT_STATUS_OK
WriteX 12778 0 2048 2048 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12779 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12784 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1004 NT_STATUS_OK
WriteX 12784 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 258 NT_STATUS_OK
WriteX 12784 0 2048 2048 NT_STATUS_OK
Close 12784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12785 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12768 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12786 NT_STATUS_OK
QUERY_FILE_INFORMATION 12786 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Close 12766 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12788 NT_STATUS_OK
QUERY_FILE_INFORMATION 12788 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12790 NT_STATUS_OK
ReadX 12790 61440 4096 4096 NT_STATUS_OK
ReadX 12790 126976 4096 4096 NT_STATUS_OK
WriteX 12790 0 65536 65536 NT_STATUS_OK
WriteX 12790 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 61440 4096 4096 NT_STATUS_OK
ReadX 12791 126976 4096 4096 NT_STATUS_OK
ReadX 12791 192512 4096 4096 NT_STATUS_OK
ReadX 12791 258048 4096 4096 NT_STATUS_OK
WriteX 12791 0 65536 65536 NT_STATUS_OK
WriteX 12791 65536 65536 65536 NT_STATUS_OK
WriteX 12791 131072 65536 65536 NT_STATUS_OK
WriteX 12791 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12792 NT_STATUS_OK
ReadX 12792 61440 4096 4096 NT_STATUS_OK
ReadX 12792 126976 4096 4096 NT_STATUS_OK
ReadX 12792 192512 4096 4096 NT_STATUS_OK
ReadX 12792 258048 4096 4096 NT_STATUS_OK
ReadX 12792 323584 4096 4096 NT_STATUS_OK
ReadX 12792 389120 4096 4096 NT_STATUS_OK
ReadX 12792 454656 4096 4096 NT_STATUS_OK
ReadX 12792 520192 4096 4096 NT_STATUS_OK
WriteX 12792 0 65536 65536 NT_STATUS_OK
WriteX 12792 65536 65536 65536 NT_STATUS_OK
WriteX 12792 131072 65536 65536 NT_STATUS_OK
WriteX 12792 196608 65536 65536 NT_STATUS_OK
WriteX 12792 262144 65536 65536 NT_STATUS_OK
WriteX 12792 327680 65536 65536 NT_STATUS_OK
WriteX 12792 393216 65536 65536 NT_STATUS_OK
WriteX 12792 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12793 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12793 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12793 8192 4096 4096 NT_STATUS_OK
ReadX 12793 12288 4096 4096 NT_STATUS_OK
ReadX 12793 16384 4096 4096 NT_STATUS_OK
ReadX 12793 20480 4096 4096 NT_STATUS_OK
ReadX 12793 24576 4096 4096 NT_STATUS_OK
ReadX 12793 28672 4096 4096 NT_STATUS_OK
ReadX 12793 32768 4096 4096 NT_STATUS_OK
ReadX 12793 36864 4096 4096 NT_STATUS_OK
ReadX 12793 40960 4096 4096 NT_STATUS_OK
ReadX 12793 45056 4096 4096 NT_STATUS_OK
ReadX 12793 49152 4096 4096 NT_STATUS_OK
ReadX 12793 53248 4096 4096 NT_STATUS_OK
ReadX 12793 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12793 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12794 NT_STATUS_OK
Close 12794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12796 NT_STATUS_OK
WriteX 12796 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12796 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12796 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12796 1004 NT_STATUS_OK
WriteX 12796 0 57088 57088 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
Flush 12796 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12797 NT_STATUS_OK
SET_FILE_INFORMATION 12797 1004 NT_STATUS_OK
Close 12797 NT_STATUS_OK
SET_FILE_INFORMATION 12796 1004 NT_STATUS_OK
WriteX 12796 0 4096 4096 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12800 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12801 NT_STATUS_OK
WriteX 12801 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12801 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12801 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12801 1004 NT_STATUS_OK
WriteX 12801 0 51456 51456 NT_STATUS_OK
WriteX 12801 0 4096 4096 NT_STATUS_OK
Flush 12801 NT_STATUS_OK
SET_FILE_INFORMATION 12801 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12801 1004 NT_STATUS_OK
WriteX 12801 0 4096 4096 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12803 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12805 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12810 NT_STATUS_OK
WriteX 12810 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12810 258 NT_STATUS_OK
WriteX 12810 0 53077 53077 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12811 NT_STATUS_OK
WriteX 12811 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12811 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12811 1004 NT_STATUS_OK
WriteX 12811 0 65536 65536 NT_STATUS_OK
WriteX 12811 65536 1856 1856 NT_STATUS_OK
WriteX 12811 0 4096 4096 NT_STATUS_OK
Flush 12811 NT_STATUS_OK
SET_FILE_INFORMATION 12811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12811 1004 NT_STATUS_OK
WriteX 12811 0 4096 4096 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12813 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12817 NT_STATUS_OK
Close 12817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12820 NT_STATUS_OK
WriteX 12820 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12820 258 NT_STATUS_OK
WriteX 12820 0 7983 7983 NT_STATUS_OK
Close 12820 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12822 NT_STATUS_OK
Close 12822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12825 NT_STATUS_OK
WriteX 12825 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12825 258 NT_STATUS_OK
WriteX 12825 0 65536 65536 NT_STATUS_OK
WriteX 12825 65536 65536 65536 NT_STATUS_OK
WriteX 12825 131072 65536 65536 NT_STATUS_OK
WriteX 12825 196608 65536 65536 NT_STATUS_OK
WriteX 12825 262144 65536 65536 NT_STATUS_OK
WriteX 12825 327680 65536 65536 NT_STATUS_OK
WriteX 12825 393216 65536 65536 NT_STATUS_OK
WriteX 12825 458752 46731 46731 NT_STATUS_OK
Close 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12826 NT_STATUS_OK
WriteX 12826 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12826 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12815 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12826 1004 NT_STATUS_OK
WriteX 12826 0 65536 65536 NT_STATUS_OK
WriteX 12826 65536 22848 22848 NT_STATUS_OK
WriteX 12826 0 4096 4096 NT_STATUS_OK
Flush 12826 NT_STATUS_OK
SET_FILE_INFORMATION 12826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12826 1004 NT_STATUS_OK
WriteX 12826 0 4096 4096 NT_STATUS_OK
Close 12826 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12828 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12830 NT_STATUS_OK
ReadX 12830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12830 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12831 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12831 1004 NT_STATUS_OK
ReadX 12831 8192 4096 4096 NT_STATUS_OK
ReadX 12831 12288 4096 4096 NT_STATUS_OK
ReadX 12831 16384 4096 4096 NT_STATUS_OK
ReadX 12831 20480 4096 4096 NT_STATUS_OK
ReadX 12831 24576 4096 4096 NT_STATUS_OK
ReadX 12831 28672 4096 4096 NT_STATUS_OK
ReadX 12831 32768 4096 4096 NT_STATUS_OK
ReadX 12831 36864 4096 4096 NT_STATUS_OK
ReadX 12831 40960 4096 4096 NT_STATUS_OK
ReadX 12831 45056 4096 4096 NT_STATUS_OK
ReadX 12831 49152 4096 4096 NT_STATUS_OK
ReadX 12831 53248 4096 4096 NT_STATUS_OK
ReadX 12831 57344 4096 4096 NT_STATUS_OK
ReadX 12831 61440 4096 4096 NT_STATUS_OK
ReadX 12831 65536 4096 4096 NT_STATUS_OK
ReadX 12831 69632 4096 4096 NT_STATUS_OK
ReadX 12831 73728 4096 4096 NT_STATUS_OK
ReadX 12831 77824 4096 4096 NT_STATUS_OK
ReadX 12831 81920 4096 4096 NT_STATUS_OK
ReadX 12831 86016 4096 4096 NT_STATUS_OK
ReadX 12831 90112 4096 4096 NT_STATUS_OK
ReadX 12831 94208 4096 4096 NT_STATUS_OK
ReadX 12831 98304 4096 4096 NT_STATUS_OK
ReadX 12831 102400 4096 4096 NT_STATUS_OK
ReadX 12831 106496 4096 4096 NT_STATUS_OK
ReadX 12831 110592 4096 4096 NT_STATUS_OK
ReadX 12831 114688 4096 4096 NT_STATUS_OK
ReadX 12831 118784 4096 4096 NT_STATUS_OK
ReadX 12831 122880 4096 4096 NT_STATUS_OK
ReadX 12831 126976 4096 4096 NT_STATUS_OK
ReadX 12831 131072 4096 4096 NT_STATUS_OK
ReadX 12831 135168 4096 4096 NT_STATUS_OK
ReadX 12831 139264 4096 4096 NT_STATUS_OK
ReadX 12831 143360 4096 4096 NT_STATUS_OK
ReadX 12831 147456 4096 4096 NT_STATUS_OK
ReadX 12831 151552 4096 4096 NT_STATUS_OK
ReadX 12831 155648 4096 4096 NT_STATUS_OK
ReadX 12831 159744 4096 4096 NT_STATUS_OK
ReadX 12831 163840 4096 4096 NT_STATUS_OK
ReadX 12831 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12831 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12832 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12834 NT_STATUS_OK
WriteX 12834 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12834 258 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12835 NT_STATUS_OK
SET_FILE_INFORMATION 12835 1004 NT_STATUS_OK
Close 12835 NT_STATUS_OK
WriteX 12834 0 42388 42388 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
ReadX 12838 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12839 NT_STATUS_OK
WriteX 12839 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
SET_FILE_INFORMATION 12839 1004 NT_STATUS_OK
WriteX 12839 0 42652 42652 NT_STATUS_OK
Close 12839 NT_STATUS_OK
Close 12838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 0 4096 4096 NT_STATUS_OK
ReadX 12843 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12848 NT_STATUS_OK
WriteX 12848 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12848 258 NT_STATUS_OK
WriteX 12848 0 65536 65536 NT_STATUS_OK
WriteX 12848 65536 49 49 NT_STATUS_OK
Close 12848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12849 NT_STATUS_OK
ReadX 12849 0 61440 61440 NT_STATUS_OK
ReadX 12849 61440 4096 4096 NT_STATUS_OK
ReadX 12849 65536 61440 61440 NT_STATUS_OK
ReadX 12849 126976 4096 4096 NT_STATUS_OK
ReadX 12849 131072 61440 61440 NT_STATUS_OK
ReadX 12849 192512 4096 4096 NT_STATUS_OK
ReadX 12849 196608 61440 61440 NT_STATUS_OK
ReadX 12849 258048 4096 4096 NT_STATUS_OK
ReadX 12849 262144 61440 61440 NT_STATUS_OK
ReadX 12849 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 61440 61440 NT_STATUS_OK
ReadX 12850 61440 4096 4096 NT_STATUS_OK
ReadX 12850 65536 61440 61440 NT_STATUS_OK
ReadX 12850 126976 4096 4096 NT_STATUS_OK
ReadX 12850 131072 61440 61440 NT_STATUS_OK
ReadX 12850 192512 4096 4096 NT_STATUS_OK
ReadX 12850 196608 61440 61440 NT_STATUS_OK
ReadX 12850 258048 4096 4096 NT_STATUS_OK
ReadX 12850 262144 61440 61440 NT_STATUS_OK
ReadX 12850 323584 4096 4096 NT_STATUS_OK
ReadX 12850 327680 61440 61440 NT_STATUS_OK
ReadX 12850 389120 4096 4096 NT_STATUS_OK
ReadX 12850 393216 61440 61440 NT_STATUS_OK
ReadX 12850 454656 4096 4096 NT_STATUS_OK
ReadX 12850 458752 61440 61440 NT_STATUS_OK
ReadX 12850 520192 4096 4096 NT_STATUS_OK
ReadX 12850 524288 61440 61440 NT_STATUS_OK
ReadX 12850 585728 4096 4096 NT_STATUS_OK
ReadX 12850 589824 61440 61440 NT_STATUS_OK
ReadX 12850 651264 4096 4096 NT_STATUS_OK
ReadX 12850 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 61440 61440 NT_STATUS_OK
ReadX 12851 61440 4096 4096 NT_STATUS_OK
ReadX 12851 65536 61440 61440 NT_STATUS_OK
ReadX 12851 126976 4096 4096 NT_STATUS_OK
ReadX 12851 131072 61440 61440 NT_STATUS_OK
ReadX 12851 192512 4096 4096 NT_STATUS_OK
ReadX 12851 196608 61440 61440 NT_STATUS_OK
ReadX 12851 258048 4096 4096 NT_STATUS_OK
ReadX 12851 262144 61440 61440 NT_STATUS_OK
ReadX 12851 323584 4096 4096 NT_STATUS_OK
ReadX 12851 327680 61440 61440 NT_STATUS_OK
ReadX 12851 389120 4096 4096 NT_STATUS_OK
ReadX 12851 393216 61440 61440 NT_STATUS_OK
ReadX 12851 454656 4096 4096 NT_STATUS_OK
ReadX 12851 458752 61440 61440 NT_STATUS_OK
ReadX 12851 520192 4096 4096 NT_STATUS_OK
ReadX 12851 524288 61440 61440 NT_STATUS_OK
ReadX 12851 585728 4096 4096 NT_STATUS_OK
ReadX 12851 589824 61440 61440 NT_STATUS_OK
ReadX 12851 651264 4096 4096 NT_STATUS_OK
ReadX 12851 655360 61440 61440 NT_STATUS_OK
ReadX 12851 716800 4096 4096 NT_STATUS_OK
ReadX 12851 720896 61440 61440 NT_STATUS_OK
ReadX 12851 782336 4096 4096 NT_STATUS_OK
ReadX 12851 786432 61440 61440 NT_STATUS_OK
ReadX 12851 847872 4096 4096 NT_STATUS_OK
ReadX 12851 851968 61440 61440 NT_STATUS_OK
ReadX 12851 913408 4096 4096 NT_STATUS_OK
ReadX 12851 917504 61440 61440 NT_STATUS_OK
ReadX 12851 978944 4096 4096 NT_STATUS_OK
ReadX 12851 983040 61440 61440 NT_STATUS_OK
ReadX 12851 1044480 4096 4096 NT_STATUS_OK
ReadX 12851 1048576 61440 61440 NT_STATUS_OK
ReadX 12851 1110016 4096 4096 NT_STATUS_OK
ReadX 12851 1114112 61440 61440 NT_STATUS_OK
ReadX 12851 1175552 4096 4096 NT_STATUS_OK
ReadX 12851 1179648 61440 61440 NT_STATUS_OK
ReadX 12851 1241088 4096 4096 NT_STATUS_OK
ReadX 12851 1245184 61440 61440 NT_STATUS_OK
ReadX 12851 1306624 4096 4096 NT_STATUS_OK
ReadX 12851 1310720 61440 61440 NT_STATUS_OK
ReadX 12851 1372160 4096 4096 NT_STATUS_OK
ReadX 12851 1376256 61440 61440 NT_STATUS_OK
ReadX 12851 1437696 4096 4096 NT_STATUS_OK
ReadX 12851 1441792 61440 61440 NT_STATUS_OK
ReadX 12851 1503232 4096 4096 NT_STATUS_OK
ReadX 12851 1507328 61440 61440 NT_STATUS_OK
ReadX 12851 1568768 4096 4096 NT_STATUS_OK
ReadX 12851 1572864 61440 61440 NT_STATUS_OK
ReadX 12851 1634304 4096 4096 NT_STATUS_OK
ReadX 12851 1638400 61440 61440 NT_STATUS_OK
ReadX 12851 1699840 4096 4096 NT_STATUS_OK
ReadX 12851 1703936 61440 61440 NT_STATUS_OK
ReadX 12851 1765376 4096 4096 NT_STATUS_OK
ReadX 12851 1769472 61440 61440 NT_STATUS_OK
ReadX 12851 1830912 4096 4096 NT_STATUS_OK
ReadX 12851 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12853 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1005 NT_STATUS_OK
ReadX 12853 2156 24 24 NT_STATUS_OK
ReadX 12853 2139 276 276 NT_STATUS_OK
ReadX 12853 2136 14 14 NT_STATUS_OK
ReadX 12853 2136 7 7 NT_STATUS_OK
ReadX 12853 2138 12 12 NT_STATUS_OK
ReadX 12853 2137 8 8 NT_STATUS_OK
ReadX 12853 2135 15 15 NT_STATUS_OK
ReadX 12853 0 16 16 NT_STATUS_OK
ReadX 12853 16 2048 2048 NT_STATUS_OK
ReadX 12853 2064 2048 2048 NT_STATUS_OK
ReadX 12853 257 2048 2048 NT_STATUS_OK
ReadX 12853 385 2048 2048 NT_STATUS_OK
ReadX 12853 513 2048 2048 NT_STATUS_OK
ReadX 12853 641 2048 2048 NT_STATUS_OK
ReadX 12853 769 2048 2048 NT_STATUS_OK
ReadX 12853 897 2048 2048 NT_STATUS_OK
ReadX 12853 1025 2048 2048 NT_STATUS_OK
ReadX 12853 1153 2048 2048 NT_STATUS_OK
ReadX 12853 1281 2048 2048 NT_STATUS_OK
ReadX 12853 1409 2048 2048 NT_STATUS_OK
ReadX 12853 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12851 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12858 NT_STATUS_OK
WriteX 12858 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12858 258 NT_STATUS_OK
WriteX 12858 0 10575 10575 NT_STATUS_OK
Flush 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12863 NT_STATUS_OK
LockX 12863 2147483538 1 NT_STATUS_OK
UnlockX 12863 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1005 NT_STATUS_OK
ReadX 12863 0 512 512 NT_STATUS_OK
ReadX 12863 512 512 512 NT_STATUS_OK
ReadX 12863 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
Close 12863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12864 NT_STATUS_OK
QUERY_FILE_INFORMATION 12864 1005 NT_STATUS_OK
ReadX 12864 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12865 NT_STATUS_OK
LockX 12865 2147483538 1 NT_STATUS_OK
UnlockX 12865 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12865 1005 NT_STATUS_OK
ReadX 12865 0 512 512 NT_STATUS_OK
ReadX 12865 512 512 512 NT_STATUS_OK
ReadX 12865 1024 512 512 NT_STATUS_OK
ReadX 12865 288 20 20 NT_STATUS_OK
ReadX 12865 308 2084 2084 NT_STATUS_OK
ReadX 12865 388 2084 2084 NT_STATUS_OK
ReadX 12865 388 2084 2084 NT_STATUS_OK
ReadX 12852 2157 1386 1386 NT_STATUS_OK
ReadX 12865 2472 399 399 NT_STATUS_OK
ReadX 12865 3072 1536 1536 NT_STATUS_OK
ReadX 12865 544 149 149 NT_STATUS_OK
ReadX 12865 693 485 485 NT_STATUS_OK
Close 12865 NT_STATUS_OK
ReadX 12852 2157 4096 4096 NT_STATUS_OK
ReadX 12852 6253 4096 4096 NT_STATUS_OK
ReadX 12852 10349 4096 4096 NT_STATUS_OK
ReadX 12852 14445 4096 4096 NT_STATUS_OK
ReadX 12852 18541 4096 4096 NT_STATUS_OK
ReadX 12852 22637 256 256 NT_STATUS_OK
ReadX 12852 22893 4096 4096 NT_STATUS_OK
ReadX 12852 26989 4096 4096 NT_STATUS_OK
ReadX 12852 31085 4096 4096 NT_STATUS_OK
ReadX 12852 35181 4096 4096 NT_STATUS_OK
ReadX 12852 39277 4096 4096 NT_STATUS_OK
ReadX 12852 43373 4096 4096 NT_STATUS_OK
ReadX 12852 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12852 2157 1024 1024 NT_STATUS_OK
ReadX 12852 1667 4688 4688 NT_STATUS_OK
ReadX 12852 6355 3516 3516 NT_STATUS_OK
ReadX 12852 9871 16384 16384 NT_STATUS_OK
ReadX 12852 26255 3771 3771 NT_STATUS_OK
ReadX 12852 30026 2048 2048 NT_STATUS_OK
ReadX 12852 32074 1024 1024 NT_STATUS_OK
ReadX 12852 33098 6652 6652 NT_STATUS_OK
ReadX 12852 39750 16384 16384 NT_STATUS_OK
ReadX 12852 56134 10496 10496 NT_STATUS_OK
ReadX 12852 66630 1784 1784 NT_STATUS_OK
ReadX 12852 68414 90 90 NT_STATUS_OK
ReadX 12852 68504 273 273 NT_STATUS_OK
ReadX 12852 68777 1600 1600 NT_STATUS_OK
ReadX 12852 70377 640 640 NT_STATUS_OK
ReadX 12852 71017 1280 1280 NT_STATUS_OK
ReadX 12852 72297 8464 8464 NT_STATUS_OK
ReadX 12852 80761 158 158 NT_STATUS_OK
ReadX 12852 80919 912 912 NT_STATUS_OK
ReadX 12852 81831 1980 1980 NT_STATUS_OK
ReadX 12852 83811 2256 2256 NT_STATUS_OK
ReadX 12852 86067 400 400 NT_STATUS_OK
ReadX 12852 86467 252 252 NT_STATUS_OK
ReadX 12852 86719 42 42 NT_STATUS_OK
ReadX 12852 86761 725 725 NT_STATUS_OK
ReadX 12852 2009 512 512 NT_STATUS_OK
ReadX 12852 3895 9 9 NT_STATUS_OK
ReadX 12852 3781 46 46 NT_STATUS_OK
ReadX 12852 4059 92 92 NT_STATUS_OK
ReadX 12852 3781 92 92 NT_STATUS_OK
ReadX 12852 3986 184 184 NT_STATUS_OK
ReadX 12852 3987 16384 16384 NT_STATUS_OK
ReadX 12852 3902 16384 16384 NT_STATUS_OK
ReadX 12852 3781 10240 10240 NT_STATUS_OK
ReadX 12852 3821 16384 16384 NT_STATUS_OK
ReadX 12852 3891 935 935 NT_STATUS_OK
ReadX 12852 4060 10240 10240 NT_STATUS_OK
ReadX 12852 4059 184 184 NT_STATUS_OK
ReadX 12852 256 184 184 NT_STATUS_OK
ReadX 12852 256 1026 1026 NT_STATUS_OK
ReadX 12852 3901 326 326 NT_STATUS_OK
ReadX 12852 3899 652 652 NT_STATUS_OK
ReadX 12852 256 2 2 NT_STATUS_OK
ReadX 12852 258 4948 4948 NT_STATUS_OK
Close 12852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12870 NT_STATUS_OK
WriteX 12870 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12870 258 NT_STATUS_OK
WriteX 12870 0 65536 65536 NT_STATUS_OK
WriteX 12870 65536 65536 65536 NT_STATUS_OK
WriteX 12870 131072 65536 65536 NT_STATUS_OK
WriteX 12870 196608 65536 65536 NT_STATUS_OK
WriteX 12870 262144 65536 65536 NT_STATUS_OK
WriteX 12870 327680 65536 65536 NT_STATUS_OK
WriteX 12870 393216 65536 65536 NT_STATUS_OK
WriteX 12870 458752 65536 65536 NT_STATUS_OK
WriteX 12870 524288 65536 65536 NT_STATUS_OK
WriteX 12870 589824 35257 35257 NT_STATUS_OK
Close 12870 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12875 NT_STATUS_OK
WriteX 12875 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 258 NT_STATUS_OK
WriteX 12875 0 65536 65536 NT_STATUS_OK
WriteX 12875 65536 65536 65536 NT_STATUS_OK
WriteX 12875 131072 65536 65536 NT_STATUS_OK
WriteX 12875 196608 65536 65536 NT_STATUS_OK
WriteX 12875 262144 65536 65536 NT_STATUS_OK
WriteX 12875 327680 65536 65536 NT_STATUS_OK
WriteX 12875 393216 65536 65536 NT_STATUS_OK
WriteX 12875 458752 65536 65536 NT_STATUS_OK
WriteX 12875 524288 65536 65536 NT_STATUS_OK
WriteX 12875 589824 57598 57598 NT_STATUS_OK
Close 12875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12877 NT_STATUS_OK
WriteX 12877 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12877 258 NT_STATUS_OK
WriteX 12877 0 12543 12543 NT_STATUS_OK
Flush 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12881 NT_STATUS_OK
ReadX 12881 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12883 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1005 NT_STATUS_OK
ReadX 12883 1938 24 24 NT_STATUS_OK
ReadX 12883 1920 276 276 NT_STATUS_OK
ReadX 12883 1918 14 14 NT_STATUS_OK
ReadX 12883 1918 7 7 NT_STATUS_OK
ReadX 12883 1919 12 12 NT_STATUS_OK
ReadX 12883 1919 8 8 NT_STATUS_OK
ReadX 12883 1917 15 15 NT_STATUS_OK
ReadX 12883 0 16 16 NT_STATUS_OK
ReadX 12883 16 2048 2048 NT_STATUS_OK
ReadX 12883 2064 2048 2048 NT_STATUS_OK
ReadX 12883 257 2048 2048 NT_STATUS_OK
ReadX 12883 385 2048 2048 NT_STATUS_OK
ReadX 12883 513 2048 2048 NT_STATUS_OK
ReadX 12883 641 2048 2048 NT_STATUS_OK
ReadX 12883 769 2048 2048 NT_STATUS_OK
ReadX 12883 897 2048 2048 NT_STATUS_OK
ReadX 12883 1025 2048 2048 NT_STATUS_OK
ReadX 12883 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12888 NT_STATUS_OK
WriteX 12888 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12888 258 NT_STATUS_OK
WriteX 12888 0 11588 11588 NT_STATUS_OK
Flush 12888 NT_STATUS_OK
Close 12888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12889 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
Close 12883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12893 NT_STATUS_OK
WriteX 12893 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12893 258 NT_STATUS_OK
WriteX 12893 0 11615 11615 NT_STATUS_OK
Flush 12893 NT_STATUS_OK
Close 12893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12902 NT_STATUS_OK
WriteX 12902 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 258 NT_STATUS_OK
WriteX 12902 0 65536 65536 NT_STATUS_OK
WriteX 12902 65536 16050 16050 NT_STATUS_OK
Close 12902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12882 1939 64 64 NT_STATUS_OK
ReadX 12882 128 248 248 NT_STATUS_OK
ReadX 12882 128 568 568 NT_STATUS_OK
ReadX 12882 3872 1536 1536 NT_STATUS_OK
ReadX 12882 3456 2560 2560 NT_STATUS_OK
ReadX 12882 3136 512 512 NT_STATUS_OK
ReadX 12882 2880 4096 4096 NT_STATUS_OK
ReadX 12882 3264 3072 3072 NT_STATUS_OK
ReadX 12882 320 4096 4096 NT_STATUS_OK
ReadX 12882 1024 4096 4096 NT_STATUS_OK
ReadX 12882 3616 4096 4096 NT_STATUS_OK
ReadX 12882 1939 64 64 NT_STATUS_OK
ReadX 12882 128 248 248 NT_STATUS_OK
ReadX 12882 128 608 608 NT_STATUS_OK
ReadX 12882 2858 1024 1024 NT_STATUS_OK
ReadX 12882 2810 4096 4096 NT_STATUS_OK
ReadX 12882 2826 4096 4096 NT_STATUS_OK
ReadX 12882 2580 2048 2048 NT_STATUS_OK
ReadX 12882 2800 2560 2560 NT_STATUS_OK
ReadX 12882 2100 4096 4096 NT_STATUS_OK
ReadX 12882 2084 4096 4096 NT_STATUS_OK
ReadX 12882 868 4096 4096 NT_STATUS_OK
ReadX 12882 2324 4096 4096 NT_STATUS_OK
ReadX 12882 884 4096 4096 NT_STATUS_OK
ReadX 12882 2604 1024 1024 NT_STATUS_OK
ReadX 12882 580 4096 4096 NT_STATUS_OK
ReadX 12882 596 4096 4096 NT_STATUS_OK
ReadX 12882 2752 4096 4096 NT_STATUS_OK
ReadX 12882 2842 1024 1024 NT_STATUS_OK
ReadX 12882 660 4096 4096 NT_STATUS_OK
ReadX 12882 2720 4096 4096 NT_STATUS_OK
ReadX 12882 2736 4096 4096 NT_STATUS_OK
ReadX 12882 628 4096 4096 NT_STATUS_OK
ReadX 12882 2704 4096 4096 NT_STATUS_OK
ReadX 12882 1556 4096 4096 NT_STATUS_OK
ReadX 12882 576 4096 4096 NT_STATUS_OK
ReadX 12882 3168 1536 1536 NT_STATUS_OK
ReadX 12882 832 4096 4096 NT_STATUS_OK
ReadX 12882 1088 4096 4096 NT_STATUS_OK
ReadX 12882 1344 4096 4096 NT_STATUS_OK
ReadX 12882 1600 4096 4096 NT_STATUS_OK
ReadX 12882 1856 4096 4096 NT_STATUS_OK
ReadX 12882 2112 4096 4096 NT_STATUS_OK
ReadX 12882 1892 4096 4096 NT_STATUS_OK
ReadX 12882 820 4096 4096 NT_STATUS_OK
ReadX 12882 788 4096 4096 NT_STATUS_OK
ReadX 12882 1604 4096 4096 NT_STATUS_OK
ReadX 12882 3648 4096 4096 NT_STATUS_OK
ReadX 12882 2608 4096 4096 NT_STATUS_OK
ReadX 12882 548 4096 4096 NT_STATUS_OK
ReadX 12882 740 4096 4096 NT_STATUS_OK
ReadX 12882 1344 4096 4096 NT_STATUS_OK
ReadX 12882 3392 4096 4096 NT_STATUS_OK
ReadX 12882 3904 4096 4096 NT_STATUS_OK
ReadX 12882 644 4096 4096 NT_STATUS_OK
ReadX 12882 676 4096 4096 NT_STATUS_OK
ReadX 12882 2688 4096 4096 NT_STATUS_OK
ReadX 12882 320 4096 4096 NT_STATUS_OK
ReadX 12882 900 4096 4096 NT_STATUS_OK
ReadX 12882 1908 4096 4096 NT_STATUS_OK
ReadX 12882 852 4096 4096 NT_STATUS_OK
ReadX 12882 724 4096 4096 NT_STATUS_OK
ReadX 12882 2292 4096 4096 NT_STATUS_OK
ReadX 12882 612 4096 4096 NT_STATUS_OK
ReadX 12882 388 4096 4096 NT_STATUS_OK
ReadX 12882 2368 4096 4096 NT_STATUS_OK
ReadX 12882 2624 4096 4096 NT_STATUS_OK
ReadX 12882 500 4096 4096 NT_STATUS_OK
ReadX 12882 356 4096 4096 NT_STATUS_OK
ReadX 12882 1024 4096 4096 NT_STATUS_OK
ReadX 12882 576 4096 4096 NT_STATUS_OK
ReadX 12882 340 4096 4096 NT_STATUS_OK
ReadX 12882 420 4096 4096 NT_STATUS_OK
ReadX 12882 1600 4096 4096 NT_STATUS_OK
ReadX 12882 404 4096 4096 NT_STATUS_OK
ReadX 12882 1428 4096 4096 NT_STATUS_OK
ReadX 12882 2656 4096 4096 NT_STATUS_OK
ReadX 12882 2624 4096 4096 NT_STATUS_OK
ReadX 12882 452 4096 4096 NT_STATUS_OK
ReadX 12882 692 4096 4096 NT_STATUS_OK
ReadX 12882 564 4096 4096 NT_STATUS_OK
ReadX 12882 372 4096 4096 NT_STATUS_OK
ReadX 12882 468 4096 4096 NT_STATUS_OK
ReadX 12882 484 4096 4096 NT_STATUS_OK
ReadX 12882 1088 4096 4096 NT_STATUS_OK
ReadX 12882 1924 4096 4096 NT_STATUS_OK
ReadX 12882 2768 4096 4096 NT_STATUS_OK
ReadX 12882 832 4096 4096 NT_STATUS_OK
ReadX 12882 836 4096 4096 NT_STATUS_OK
ReadX 12882 1856 4096 4096 NT_STATUS_OK
ReadX 12882 2640 4096 4096 NT_STATUS_OK
ReadX 12882 436 4096 4096 NT_STATUS_OK
ReadX 12882 1828 4096 4096 NT_STATUS_OK
ReadX 12882 804 4096 4096 NT_STATUS_OK
ReadX 12882 1860 4096 4096 NT_STATUS_OK
ReadX 12882 1812 4096 4096 NT_STATUS_OK
ReadX 12882 756 4096 4096 NT_STATUS_OK
ReadX 12882 1636 4096 4096 NT_STATUS_OK
ReadX 12882 772 4096 4096 NT_STATUS_OK
ReadX 12882 2036 4096 4096 NT_STATUS_OK
ReadX 12882 1220 4096 4096 NT_STATUS_OK
ReadX 12882 1652 4096 4096 NT_STATUS_OK
ReadX 12882 2588 4096 4096 NT_STATUS_OK
ReadX 12882 916 4096 4096 NT_STATUS_OK
ReadX 12882 260 4096 4096 NT_STATUS_OK
ReadX 12882 932 4096 4096 NT_STATUS_OK
ReadX 12882 2624 4096 4096 NT_STATUS_OK
ReadX 12882 308 4096 4096 NT_STATUS_OK
ReadX 12882 292 4096 4096 NT_STATUS_OK
ReadX 12882 1140 4096 4096 NT_STATUS_OK
ReadX 12882 276 4096 4096 NT_STATUS_OK
ReadX 12882 2020 4096 4096 NT_STATUS_OK
ReadX 12882 2880 4096 4096 NT_STATUS_OK
ReadX 12882 516 4096 4096 NT_STATUS_OK
ReadX 12882 1844 4096 4096 NT_STATUS_OK
ReadX 12882 1124 4096 4096 NT_STATUS_OK
ReadX 12882 3136 4096 4096 NT_STATUS_OK
ReadX 12882 324 4096 4096 NT_STATUS_OK
ReadX 12882 1156 4096 4096 NT_STATUS_OK
ReadX 12882 1172 4096 4096 NT_STATUS_OK
ReadX 12882 2112 4096 4096 NT_STATUS_OK
ReadX 12882 2368 4096 4096 NT_STATUS_OK
ReadX 12882 964 4096 4096 NT_STATUS_OK
ReadX 12882 980 4096 4096 NT_STATUS_OK
ReadX 12882 1012 4096 4096 NT_STATUS_OK
ReadX 12882 532 4096 4096 NT_STATUS_OK
ReadX 12882 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12882 1620 4096 4096 NT_STATUS_OK
ReadX 12882 1604 4096 4096 NT_STATUS_OK
ReadX 12882 2116 4096 4096 NT_STATUS_OK
ReadX 12882 2132 4096 4096 NT_STATUS_OK
ReadX 12882 2148 4096 4096 NT_STATUS_OK
ReadX 12882 2276 4096 4096 NT_STATUS_OK
ReadX 12882 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12904 NT_STATUS_OK
Close 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12907 NT_STATUS_OK
QUERY_FILE_INFORMATION 12862 1004 NT_STATUS_OK
Close 12862 NT_STATUS_OK
WriteX 12907 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12907 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12864 1004 NT_STATUS_OK
Close 12864 NT_STATUS_OK
WriteX 12907 0 65536 65536 NT_STATUS_OK
WriteX 12907 65536 64850 64850 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12909 NT_STATUS_OK
WriteX 12909 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12909 258 NT_STATUS_OK
ReadX 12882 2068 4096 4096 NT_STATUS_OK
ReadX 12882 1588 4096 4096 NT_STATUS_OK
ReadX 12882 1572 4096 4096 NT_STATUS_OK
WriteX 12909 0 18630 18630 NT_STATUS_OK
Flush 12909 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12882 612 4096 4096 NT_STATUS_OK
ReadX 12882 564 4096 4096 NT_STATUS_OK
ReadX 12882 1876 4096 4096 NT_STATUS_OK
ReadX 12882 628 4096 4096 NT_STATUS_OK
ReadX 12882 740 4096 4096 NT_STATUS_OK
ReadX 12882 724 4096 4096 NT_STATUS_OK
ReadX 12882 644 4096 4096 NT_STATUS_OK
ReadX 12882 2324 4096 4096 NT_STATUS_OK
ReadX 12882 660 4096 4096 NT_STATUS_OK
ReadX 12882 852 4096 4096 NT_STATUS_OK
ReadX 12882 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12882 2368 4096 4096 NT_STATUS_OK
ReadX 12882 1024 4096 4096 NT_STATUS_OK
ReadX 12882 320 4096 4096 NT_STATUS_OK
ReadX 12882 580 4096 4096 NT_STATUS_OK
ReadX 12882 3136 512 512 NT_STATUS_OK
ReadX 12882 2880 4096 4096 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 61440 4096 4096 NT_STATUS_OK
ReadX 12914 126976 4096 4096 NT_STATUS_OK
WriteX 12914 0 65536 65536 NT_STATUS_OK
WriteX 12914 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 61440 4096 4096 NT_STATUS_OK
ReadX 12915 126976 4096 4096 NT_STATUS_OK
ReadX 12915 192512 4096 4096 NT_STATUS_OK
ReadX 12915 258048 4096 4096 NT_STATUS_OK
WriteX 12915 0 65536 65536 NT_STATUS_OK
WriteX 12915 65536 65536 65536 NT_STATUS_OK
WriteX 12915 131072 65536 65536 NT_STATUS_OK
WriteX 12915 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 61440 4096 4096 NT_STATUS_OK
ReadX 12916 126976 4096 4096 NT_STATUS_OK
ReadX 12916 192512 4096 4096 NT_STATUS_OK
ReadX 12916 258048 4096 4096 NT_STATUS_OK
ReadX 12916 323584 4096 4096 NT_STATUS_OK
ReadX 12916 389120 4096 4096 NT_STATUS_OK
ReadX 12916 454656 4096 4096 NT_STATUS_OK
ReadX 12916 520192 4096 4096 NT_STATUS_OK
WriteX 12916 0 65536 65536 NT_STATUS_OK
WriteX 12916 65536 65536 65536 NT_STATUS_OK
WriteX 12916 131072 65536 65536 NT_STATUS_OK
WriteX 12916 196608 65536 65536 NT_STATUS_OK
WriteX 12916 262144 65536 65536 NT_STATUS_OK
WriteX 12916 327680 65536 65536 NT_STATUS_OK
WriteX 12916 393216 65536 65536 NT_STATUS_OK
WriteX 12916 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12918 NT_STATUS_OK
Close 12918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12919 NT_STATUS_OK
WriteX 12919 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12919 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12917 0 8192 8192 NT_STATUS_OK
Flush 12917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12917 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12917 0 8192 8192 NT_STATUS_OK
Flush 12917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12917 0 8192 8192 NT_STATUS_OK
Flush 12917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12917 0 8192 8192 NT_STATUS_OK
Flush 12917 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12913 NT_STATUS_OK
Close 12881 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12924 NT_STATUS_OK
WriteX 12924 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12924 258 NT_STATUS_OK
WriteX 12924 0 62591 62591 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12926 NT_STATUS_OK
Close 12926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12929 NT_STATUS_OK
WriteX 12929 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 10845 10845 NT_STATUS_OK
Close 12929 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12934 NT_STATUS_OK
WriteX 12934 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12934 258 NT_STATUS_OK
WriteX 12934 0 30118 30118 NT_STATUS_OK
Close 12934 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
WriteX 12919 0 64 64 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12936 NT_STATUS_OK
ReadX 12936 0 61440 61440 NT_STATUS_OK
ReadX 12936 61440 4096 4096 NT_STATUS_OK
ReadX 12936 65536 61440 61440 NT_STATUS_OK
ReadX 12936 126976 4096 4096 NT_STATUS_OK
ReadX 12936 131072 61440 61440 NT_STATUS_OK
ReadX 12936 192512 4096 4096 NT_STATUS_OK
ReadX 12936 196608 61440 61440 NT_STATUS_OK
ReadX 12936 258048 4096 4096 NT_STATUS_OK
ReadX 12936 262144 61440 61440 NT_STATUS_OK
ReadX 12936 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12937 NT_STATUS_OK
ReadX 12937 0 61440 61440 NT_STATUS_OK
ReadX 12937 61440 4096 4096 NT_STATUS_OK
ReadX 12937 65536 61440 61440 NT_STATUS_OK
ReadX 12937 126976 4096 4096 NT_STATUS_OK
ReadX 12937 131072 61440 61440 NT_STATUS_OK
ReadX 12937 192512 4096 4096 NT_STATUS_OK
ReadX 12937 196608 61440 61440 NT_STATUS_OK
ReadX 12937 258048 4096 4096 NT_STATUS_OK
ReadX 12937 262144 61440 61440 NT_STATUS_OK
ReadX 12937 323584 4096 4096 NT_STATUS_OK
ReadX 12937 327680 61440 61440 NT_STATUS_OK
ReadX 12937 389120 4096 4096 NT_STATUS_OK
ReadX 12937 393216 61440 61440 NT_STATUS_OK
ReadX 12937 454656 4096 4096 NT_STATUS_OK
ReadX 12937 458752 61440 61440 NT_STATUS_OK
ReadX 12937 520192 4096 4096 NT_STATUS_OK
ReadX 12937 524288 61440 61440 NT_STATUS_OK
ReadX 12937 585728 4096 4096 NT_STATUS_OK
ReadX 12937 589824 61440 61440 NT_STATUS_OK
ReadX 12937 651264 4096 4096 NT_STATUS_OK
ReadX 12937 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12938 NT_STATUS_OK
ReadX 12938 0 61440 61440 NT_STATUS_OK
ReadX 12938 61440 4096 4096 NT_STATUS_OK
ReadX 12938 65536 61440 61440 NT_STATUS_OK
ReadX 12938 126976 4096 4096 NT_STATUS_OK
ReadX 12938 131072 61440 61440 NT_STATUS_OK
ReadX 12938 192512 4096 4096 NT_STATUS_OK
ReadX 12938 196608 61440 61440 NT_STATUS_OK
ReadX 12938 258048 4096 4096 NT_STATUS_OK
ReadX 12938 262144 61440 61440 NT_STATUS_OK
ReadX 12938 323584 4096 4096 NT_STATUS_OK
ReadX 12938 327680 61440 61440 NT_STATUS_OK
ReadX 12938 389120 4096 4096 NT_STATUS_OK
ReadX 12938 393216 61440 61440 NT_STATUS_OK
ReadX 12938 454656 4096 4096 NT_STATUS_OK
ReadX 12938 458752 61440 61440 NT_STATUS_OK
ReadX 12938 520192 4096 4096 NT_STATUS_OK
ReadX 12938 524288 61440 61440 NT_STATUS_OK
ReadX 12938 585728 4096 4096 NT_STATUS_OK
ReadX 12938 589824 61440 61440 NT_STATUS_OK
ReadX 12938 651264 4096 4096 NT_STATUS_OK
ReadX 12938 655360 61440 61440 NT_STATUS_OK
ReadX 12938 716800 4096 4096 NT_STATUS_OK
ReadX 12938 720896 61440 61440 NT_STATUS_OK
ReadX 12938 782336 4096 4096 NT_STATUS_OK
ReadX 12938 786432 61440 61440 NT_STATUS_OK
ReadX 12938 847872 4096 4096 NT_STATUS_OK
ReadX 12938 851968 61440 61440 NT_STATUS_OK
ReadX 12938 913408 4096 4096 NT_STATUS_OK
ReadX 12938 917504 61440 61440 NT_STATUS_OK
ReadX 12938 978944 4096 4096 NT_STATUS_OK
ReadX 12938 983040 61440 61440 NT_STATUS_OK
ReadX 12938 1044480 4096 4096 NT_STATUS_OK
ReadX 12938 1048576 61440 61440 NT_STATUS_OK
ReadX 12938 1110016 4096 4096 NT_STATUS_OK
ReadX 12938 1114112 61440 61440 NT_STATUS_OK
ReadX 12938 1175552 4096 4096 NT_STATUS_OK
ReadX 12938 1179648 61440 61440 NT_STATUS_OK
ReadX 12938 1241088 4096 4096 NT_STATUS_OK
ReadX 12938 1245184 61440 61440 NT_STATUS_OK
ReadX 12938 1306624 4096 4096 NT_STATUS_OK
ReadX 12938 1310720 61440 61440 NT_STATUS_OK
ReadX 12938 1372160 4096 4096 NT_STATUS_OK
ReadX 12938 1376256 61440 61440 NT_STATUS_OK
ReadX 12938 1437696 4096 4096 NT_STATUS_OK
ReadX 12938 1441792 61440 61440 NT_STATUS_OK
ReadX 12938 1503232 4096 4096 NT_STATUS_OK
ReadX 12938 1507328 61440 61440 NT_STATUS_OK
ReadX 12938 1568768 4096 4096 NT_STATUS_OK
ReadX 12938 1572864 61440 61440 NT_STATUS_OK
ReadX 12938 1634304 4096 4096 NT_STATUS_OK
ReadX 12938 1638400 61440 61440 NT_STATUS_OK
ReadX 12938 1699840 4096 4096 NT_STATUS_OK
ReadX 12938 1703936 61440 61440 NT_STATUS_OK
ReadX 12938 1765376 4096 4096 NT_STATUS_OK
ReadX 12938 1769472 61440 61440 NT_STATUS_OK
ReadX 12938 1830912 4096 4096 NT_STATUS_OK
ReadX 12938 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12936 NT_STATUS_OK
Close 12937 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
ReadX 12943 4096 4096 4096 NT_STATUS_OK
ReadX 12943 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12944 NT_STATUS_OK
Close 12944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12942 NT_STATUS_OK
Close 12943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12946 NT_STATUS_OK
ReadX 12946 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12947 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12946 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 8192 8192 NT_STATUS_OK
ReadX 12951 8192 8192 8192 NT_STATUS_OK
ReadX 12951 16384 8192 8192 NT_STATUS_OK
ReadX 12951 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12951 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12956 NT_STATUS_OK
WriteX 12956 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12956 258 NT_STATUS_OK
WriteX 12956 0 10438 10438 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12957 NT_STATUS_OK
Close 12957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12959 NT_STATUS_OK
Close 12959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12960 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12961 NT_STATUS_OK
Close 12961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12962 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12964 NT_STATUS_OK
Close 12964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
ReadX 12965 4096 4096 4096 NT_STATUS_OK
ReadX 12965 8192 4096 4096 NT_STATUS_OK
ReadX 12965 12288 8192 8192 NT_STATUS_OK
ReadX 12965 20480 8192 8192 NT_STATUS_OK
ReadX 12965 28672 8192 8192 NT_STATUS_OK
ReadX 12965 36864 8192 8192 NT_STATUS_OK
ReadX 12965 45056 8192 8192 NT_STATUS_OK
ReadX 12965 53248 8192 8192 NT_STATUS_OK
ReadX 12965 61440 8192 8192 NT_STATUS_OK
ReadX 12965 69632 8192 8192 NT_STATUS_OK
ReadX 12965 77824 8192 8192 NT_STATUS_OK
ReadX 12965 86016 8192 8192 NT_STATUS_OK
ReadX 12965 94208 8192 8192 NT_STATUS_OK
ReadX 12965 102400 8192 8192 NT_STATUS_OK
ReadX 12965 110592 8192 8192 NT_STATUS_OK
ReadX 12965 118784 8192 8192 NT_STATUS_OK
ReadX 12965 126976 8192 8192 NT_STATUS_OK
ReadX 12965 135168 8192 8192 NT_STATUS_OK
ReadX 12965 143360 8192 8192 NT_STATUS_OK
ReadX 12965 151552 8192 8192 NT_STATUS_OK
ReadX 12965 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12967 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12970 NT_STATUS_OK
WriteX 12970 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12970 258 NT_STATUS_OK
WriteX 12970 0 28489 28489 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12973 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12974 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12976 NT_STATUS_OK
ReadX 12976 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 8192 8192 NT_STATUS_OK
ReadX 12977 8192 8192 8192 NT_STATUS_OK
ReadX 12977 16384 8192 8192 NT_STATUS_OK
ReadX 12977 24576 8192 8192 NT_STATUS_OK
ReadX 12977 32768 16384 16384 NT_STATUS_OK
ReadX 12977 49152 8192 8192 NT_STATUS_OK
ReadX 12977 57344 8192 8192 NT_STATUS_OK
ReadX 12977 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12979 NT_STATUS_OK
Close 12979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Close 12976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12982 NT_STATUS_OK
WriteX 12982 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12982 258 NT_STATUS_OK
WriteX 12982 0 29253 29253 NT_STATUS_OK
Close 12982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12989 NT_STATUS_OK
WriteX 12989 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 258 NT_STATUS_OK
WriteX 12989 0 30183 30183 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12990 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12992 NT_STATUS_OK
WriteX 12992 0 510 510 NT_STATUS_OK
WriteX 12992 510 512 512 NT_STATUS_OK
WriteX 12992 1022 510 510 NT_STATUS_OK
WriteX 12992 1532 510 510 NT_STATUS_OK
WriteX 12992 2042 168 168 NT_STATUS_OK
Close 12992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 61440 4096 4096 NT_STATUS_OK
ReadX 12996 126976 4096 4096 NT_STATUS_OK
WriteX 12996 0 65536 65536 NT_STATUS_OK
WriteX 12996 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 61440 4096 4096 NT_STATUS_OK
ReadX 12997 126976 4096 4096 NT_STATUS_OK
ReadX 12997 192512 4096 4096 NT_STATUS_OK
ReadX 12997 258048 4096 4096 NT_STATUS_OK
WriteX 12997 0 65536 65536 NT_STATUS_OK
WriteX 12997 65536 65536 65536 NT_STATUS_OK
WriteX 12997 131072 65536 65536 NT_STATUS_OK
WriteX 12997 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 61440 4096 4096 NT_STATUS_OK
ReadX 12998 126976 4096 4096 NT_STATUS_OK
ReadX 12998 192512 4096 4096 NT_STATUS_OK
ReadX 12998 258048 4096 4096 NT_STATUS_OK
ReadX 12998 323584 4096 4096 NT_STATUS_OK
ReadX 12998 389120 4096 4096 NT_STATUS_OK
ReadX 12998 454656 4096 4096 NT_STATUS_OK
ReadX 12998 520192 4096 4096 NT_STATUS_OK
WriteX 12998 0 65536 65536 NT_STATUS_OK
WriteX 12998 65536 65536 65536 NT_STATUS_OK
WriteX 12998 131072 65536 65536 NT_STATUS_OK
WriteX 12998 196608 65536 65536 NT_STATUS_OK
WriteX 12998 262144 65536 65536 NT_STATUS_OK
WriteX 12998 327680 65536 65536 NT_STATUS_OK
WriteX 12998 393216 65536 65536 NT_STATUS_OK
WriteX 12998 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Close 12996 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13019 NT_STATUS_OK
Close 13019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13048 NT_STATUS_OK
Close 13048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13058 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13064 NT_STATUS_OK
Close 13064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13067 NT_STATUS_OK
WriteX 13067 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13067 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13067 0 65536 65536 NT_STATUS_OK
WriteX 13067 65536 65536 65536 NT_STATUS_OK
WriteX 13067 131072 65536 65536 NT_STATUS_OK
WriteX 13067 196608 65536 65536 NT_STATUS_OK
WriteX 13067 262144 26634 26634 NT_STATUS_OK
Close 13067 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13072 NT_STATUS_OK
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
Close 13074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
ReadX 13075 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13089 NT_STATUS_OK
Close 13089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13094 NT_STATUS_OK
Close 13094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13098 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13118 NT_STATUS_OK
Close 13118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13123 NT_STATUS_OK
Close 13123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13153 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13155 NT_STATUS_OK
ReadX 13155 0 4096 4096 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13166 NT_STATUS_OK
Close 13166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13167 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13168 NT_STATUS_OK
ReadX 13168 0 4096 4096 NT_STATUS_OK
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13156 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13199 0 4096 4096 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13200 NT_STATUS_OK
ReadX 13200 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 4096 4096 NT_STATUS_OK
ReadX 13201 4096 4096 4096 NT_STATUS_OK
ReadX 13201 8192 4096 4096 NT_STATUS_OK
ReadX 13201 12288 4096 4096 NT_STATUS_OK
ReadX 13201 16384 4096 4096 NT_STATUS_OK
ReadX 13201 20480 4096 4096 NT_STATUS_OK
ReadX 13201 24576 4096 4096 NT_STATUS_OK
ReadX 13201 28672 4096 4096 NT_STATUS_OK
ReadX 13201 32768 4096 4096 NT_STATUS_OK
ReadX 13201 36864 4096 4096 NT_STATUS_OK
ReadX 13201 40960 4096 4096 NT_STATUS_OK
ReadX 13201 45056 4096 4096 NT_STATUS_OK
ReadX 13201 49152 4096 4096 NT_STATUS_OK
ReadX 13201 53248 4096 4096 NT_STATUS_OK
ReadX 13201 57344 4096 4096 NT_STATUS_OK
ReadX 13201 61440 4096 4096 NT_STATUS_OK
ReadX 13201 65536 4096 4096 NT_STATUS_OK
ReadX 13201 69632 4096 4096 NT_STATUS_OK
ReadX 13201 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13201 1004 NT_STATUS_OK
WriteX 13201 0 4096 4096 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13202 NT_STATUS_OK
SET_FILE_INFORMATION 13202 1004 NT_STATUS_OK
Close 13202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13207 NT_STATUS_OK
WriteX 13207 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13207 258 NT_STATUS_OK
WriteX 13207 0 65536 65536 NT_STATUS_OK
WriteX 13207 65536 19979 19979 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
QUERY_FILE_INFORMATION 13208 1004 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
SET_FILE_INFORMATION 13208 1004 NT_STATUS_OK
WriteX 13208 0 4096 4096 NT_STATUS_OK
Flush 13208 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
Close 13211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
Close 13212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13213 1004 NT_STATUS_OK
WriteX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13216 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13219 NT_STATUS_OK
WriteX 13219 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 258 NT_STATUS_OK
WriteX 13219 0 65536 65536 NT_STATUS_OK
WriteX 13219 65536 17654 17654 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
QUERY_FILE_INFORMATION 13220 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
SET_FILE_INFORMATION 13220 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13221 NT_STATUS_OK
SET_FILE_INFORMATION 13221 1004 NT_STATUS_OK
Close 13221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13223 NT_STATUS_OK
Close 13223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
ReadX 13225 4096 4096 4096 NT_STATUS_OK
ReadX 13225 8192 4096 4096 NT_STATUS_OK
ReadX 13225 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13225 16384 4096 4096 NT_STATUS_OK
ReadX 13225 20480 4096 4096 NT_STATUS_OK
ReadX 13225 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
Close 13226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13228 1004 NT_STATUS_OK
WriteX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13229 NT_STATUS_OK
Close 13229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13231 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13234 NT_STATUS_OK
WriteX 13234 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13234 258 NT_STATUS_OK
WriteX 13234 0 65536 65536 NT_STATUS_OK
WriteX 13234 65536 19490 19490 NT_STATUS_OK
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
QUERY_FILE_INFORMATION 13235 1004 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
SET_FILE_INFORMATION 13235 1004 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
Close 13235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13236 NT_STATUS_OK
SET_FILE_INFORMATION 13236 1004 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13238 NT_STATUS_OK
Close 13238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13240 0 4096 4096 NT_STATUS_OK
Close 13240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
ReadX 13242 4096 4096 4096 NT_STATUS_OK
ReadX 13242 8192 4096 4096 NT_STATUS_OK
ReadX 13242 12288 4096 4096 NT_STATUS_OK
ReadX 13242 16384 4096 4096 NT_STATUS_OK
ReadX 13242 20480 4096 4096 NT_STATUS_OK
ReadX 13242 24576 4096 4096 NT_STATUS_OK
ReadX 13242 28672 4096 4096 NT_STATUS_OK
ReadX 13242 32768 4096 4096 NT_STATUS_OK
ReadX 13242 36864 4096 4096 NT_STATUS_OK
ReadX 13242 40960 4096 4096 NT_STATUS_OK
ReadX 13242 45056 4096 4096 NT_STATUS_OK
ReadX 13242 49152 4096 4096 NT_STATUS_OK
ReadX 13242 53248 4096 4096 NT_STATUS_OK
ReadX 13242 57344 4096 4096 NT_STATUS_OK
ReadX 13242 61440 4096 4096 NT_STATUS_OK
ReadX 13242 65536 4096 4096 NT_STATUS_OK
ReadX 13242 69632 4096 4096 NT_STATUS_OK
ReadX 13242 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13242 1004 NT_STATUS_OK
WriteX 13242 0 4096 4096 NT_STATUS_OK
Close 13242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13243 NT_STATUS_OK
SET_FILE_INFORMATION 13243 1004 NT_STATUS_OK
Close 13243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13245 NT_STATUS_OK
Close 13245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13248 NT_STATUS_OK
WriteX 13248 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13248 258 NT_STATUS_OK
WriteX 13248 0 65536 65536 NT_STATUS_OK
WriteX 13248 65536 8866 8866 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
WriteX 13249 0 4096 4096 NT_STATUS_OK
Flush 13249 NT_STATUS_OK
SET_FILE_INFORMATION 13249 1004 NT_STATUS_OK
WriteX 13249 0 4096 4096 NT_STATUS_OK
Flush 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
Close 13252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13253 1004 NT_STATUS_OK
WriteX 13253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13254 NT_STATUS_OK
Close 13254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13259 NT_STATUS_OK
WriteX 13259 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13259 258 NT_STATUS_OK
WriteX 13259 0 65536 65536 NT_STATUS_OK
WriteX 13259 65536 9298 9298 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
SET_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13261 NT_STATUS_OK
SET_FILE_INFORMATION 13261 1004 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13263 NT_STATUS_OK
Close 13263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13266 0 4096 4096 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13267 NT_STATUS_OK
ReadX 13267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13267 4096 4096 4096 NT_STATUS_OK
ReadX 13267 8192 4096 4096 NT_STATUS_OK
ReadX 13267 12288 4096 4096 NT_STATUS_OK
ReadX 13267 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13270 NT_STATUS_OK
ReadX 13270 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13270 1004 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13267 NT_STATUS_OK
Close 13270 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13273 NT_STATUS_OK
Close 13273 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13276 NT_STATUS_OK
WriteX 13276 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13276 258 NT_STATUS_OK
WriteX 13276 0 65536 65536 NT_STATUS_OK
WriteX 13276 65536 11540 11540 NT_STATUS_OK
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
SET_FILE_INFORMATION 13277 1004 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
Flush 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13278 NT_STATUS_OK
SET_FILE_INFORMATION 13278 1004 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13280 NT_STATUS_OK
Close 13280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 61440 4096 4096 NT_STATUS_OK
ReadX 13282 126976 4096 4096 NT_STATUS_OK
WriteX 13282 0 65536 65536 NT_STATUS_OK
WriteX 13282 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 61440 4096 4096 NT_STATUS_OK
ReadX 13283 126976 4096 4096 NT_STATUS_OK
ReadX 13283 192512 4096 4096 NT_STATUS_OK
ReadX 13283 258048 4096 4096 NT_STATUS_OK
WriteX 13283 0 65536 65536 NT_STATUS_OK
WriteX 13283 65536 65536 65536 NT_STATUS_OK
WriteX 13283 131072 65536 65536 NT_STATUS_OK
WriteX 13283 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 61440 4096 4096 NT_STATUS_OK
ReadX 13284 126976 4096 4096 NT_STATUS_OK
ReadX 13284 192512 4096 4096 NT_STATUS_OK
ReadX 13284 258048 4096 4096 NT_STATUS_OK
ReadX 13284 323584 4096 4096 NT_STATUS_OK
ReadX 13284 389120 4096 4096 NT_STATUS_OK
ReadX 13284 454656 4096 4096 NT_STATUS_OK
ReadX 13284 520192 4096 4096 NT_STATUS_OK
WriteX 13284 0 65536 65536 NT_STATUS_OK
WriteX 13284 65536 65536 65536 NT_STATUS_OK
WriteX 13284 131072 65536 65536 NT_STATUS_OK
WriteX 13284 196608 65536 65536 NT_STATUS_OK
WriteX 13284 262144 65536 65536 NT_STATUS_OK
WriteX 13284 327680 65536 65536 NT_STATUS_OK
WriteX 13284 393216 65536 65536 NT_STATUS_OK
WriteX 13284 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
ReadX 13285 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
WriteX 13286 0 53 53 NT_STATUS_OK
Close 13286 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13285 8192 4096 4096 NT_STATUS_OK
ReadX 13285 12288 4096 4096 NT_STATUS_OK
WriteX 13289 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13289 258 NT_STATUS_OK
ReadX 13285 16384 4096 4096 NT_STATUS_OK
ReadX 13285 20480 4096 4096 NT_STATUS_OK
WriteX 13289 0 15360 15360 NT_STATUS_OK
Close 13289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13290 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13290 1004 NT_STATUS_OK
WriteX 13290 0 4096 4096 NT_STATUS_OK
Close 13290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13291 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13294 NT_STATUS_OK
Close 13294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13293 4096 4096 4096 NT_STATUS_OK
ReadX 13293 8192 4096 4096 NT_STATUS_OK
ReadX 13293 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
ReadX 13296 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
ReadX 13297 8192 4096 4096 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13298 NT_STATUS_OK
WriteX 13298 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13298 258 NT_STATUS_OK
WriteX 13298 0 15360 15360 NT_STATUS_OK
Close 13298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13299 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13299 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13300 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13303 NT_STATUS_OK
SET_FILE_INFORMATION 13303 1004 NT_STATUS_OK
Close 13303 NT_STATUS_OK
WriteX 13299 0 4096 4096 NT_STATUS_OK
Close 13299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
ReadX 13306 4096 4096 4096 NT_STATUS_OK
ReadX 13306 8192 4096 4096 NT_STATUS_OK
ReadX 13306 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13306 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13308 NT_STATUS_OK
WriteX 13308 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13308 258 NT_STATUS_OK
WriteX 13308 0 53 53 NT_STATUS_OK
Close 13308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13307 4096 4096 4096 NT_STATUS_OK
ReadX 13307 8192 4096 4096 NT_STATUS_OK
ReadX 13307 12288 4096 4096 NT_STATUS_OK
WriteX 13311 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 258 NT_STATUS_OK
WriteX 13311 0 12006 12006 NT_STATUS_OK
Close 13311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13312 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13312 1004 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Close 13312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13313 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13316 NT_STATUS_OK
Close 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13315 4096 4096 4096 NT_STATUS_OK
ReadX 13315 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13318 NT_STATUS_OK
WriteX 13318 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 258 NT_STATUS_OK
WriteX 13318 0 11991 11991 NT_STATUS_OK
Close 13318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13319 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13319 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13323 NT_STATUS_OK
WriteX 13306 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 13323 1004 NT_STATUS_OK
Close 13323 NT_STATUS_OK
WriteX 13319 0 4096 4096 NT_STATUS_OK
Close 13319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13324 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13326 NT_STATUS_OK
ReadX 13326 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13326 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
ReadX 13326 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
WriteX 13326 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
Close 13302 NT_STATUS_OK
WriteX 13326 0 12288 12288 NT_STATUS_OK
Close 13322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13329 NT_STATUS_OK
Close 13329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13326 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13331 NT_STATUS_OK
Close 13331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 0 61440 61440 NT_STATUS_OK
ReadX 13333 61440 4096 4096 NT_STATUS_OK
ReadX 13333 65536 61440 61440 NT_STATUS_OK
ReadX 13333 126976 4096 4096 NT_STATUS_OK
ReadX 13333 131072 61440 61440 NT_STATUS_OK
ReadX 13333 192512 4096 4096 NT_STATUS_OK
ReadX 13333 196608 61440 61440 NT_STATUS_OK
ReadX 13333 258048 4096 4096 NT_STATUS_OK
ReadX 13333 262144 61440 61440 NT_STATUS_OK
ReadX 13333 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 61440 61440 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 65536 61440 61440 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
ReadX 13334 131072 61440 61440 NT_STATUS_OK
ReadX 13334 192512 4096 4096 NT_STATUS_OK
ReadX 13334 196608 61440 61440 NT_STATUS_OK
ReadX 13334 258048 4096 4096 NT_STATUS_OK
ReadX 13334 262144 61440 61440 NT_STATUS_OK
ReadX 13334 323584 4096 4096 NT_STATUS_OK
ReadX 13334 327680 61440 61440 NT_STATUS_OK
ReadX 13334 389120 4096 4096 NT_STATUS_OK
ReadX 13334 393216 61440 61440 NT_STATUS_OK
ReadX 13334 454656 4096 4096 NT_STATUS_OK
ReadX 13334 458752 61440 61440 NT_STATUS_OK
ReadX 13334 520192 4096 4096 NT_STATUS_OK
ReadX 13334 524288 61440 61440 NT_STATUS_OK
ReadX 13334 585728 4096 4096 NT_STATUS_OK
ReadX 13334 589824 61440 61440 NT_STATUS_OK
ReadX 13334 651264 4096 4096 NT_STATUS_OK
ReadX 13334 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 61440 61440 NT_STATUS_OK
ReadX 13335 61440 4096 4096 NT_STATUS_OK
ReadX 13335 65536 61440 61440 NT_STATUS_OK
ReadX 13335 126976 4096 4096 NT_STATUS_OK
ReadX 13335 131072 61440 61440 NT_STATUS_OK
ReadX 13335 192512 4096 4096 NT_STATUS_OK
ReadX 13335 196608 61440 61440 NT_STATUS_OK
ReadX 13335 258048 4096 4096 NT_STATUS_OK
ReadX 13335 262144 61440 61440 NT_STATUS_OK
ReadX 13335 323584 4096 4096 NT_STATUS_OK
ReadX 13335 327680 61440 61440 NT_STATUS_OK
ReadX 13335 389120 4096 4096 NT_STATUS_OK
ReadX 13335 393216 61440 61440 NT_STATUS_OK
ReadX 13335 454656 4096 4096 NT_STATUS_OK
ReadX 13335 458752 61440 61440 NT_STATUS_OK
ReadX 13335 520192 4096 4096 NT_STATUS_OK
ReadX 13335 524288 61440 61440 NT_STATUS_OK
ReadX 13335 585728 4096 4096 NT_STATUS_OK
ReadX 13335 589824 61440 61440 NT_STATUS_OK
ReadX 13335 651264 4096 4096 NT_STATUS_OK
ReadX 13335 655360 61440 61440 NT_STATUS_OK
ReadX 13335 716800 4096 4096 NT_STATUS_OK
ReadX 13335 720896 61440 61440 NT_STATUS_OK
ReadX 13335 782336 4096 4096 NT_STATUS_OK
ReadX 13335 786432 61440 61440 NT_STATUS_OK
ReadX 13335 847872 4096 4096 NT_STATUS_OK
ReadX 13335 851968 61440 61440 NT_STATUS_OK
ReadX 13335 913408 4096 4096 NT_STATUS_OK
ReadX 13335 917504 61440 61440 NT_STATUS_OK
ReadX 13335 978944 4096 4096 NT_STATUS_OK
ReadX 13335 983040 61440 61440 NT_STATUS_OK
ReadX 13335 1044480 4096 4096 NT_STATUS_OK
ReadX 13335 1048576 61440 61440 NT_STATUS_OK
ReadX 13335 1110016 4096 4096 NT_STATUS_OK
ReadX 13335 1114112 61440 61440 NT_STATUS_OK
ReadX 13335 1175552 4096 4096 NT_STATUS_OK
ReadX 13335 1179648 61440 61440 NT_STATUS_OK
ReadX 13335 1241088 4096 4096 NT_STATUS_OK
ReadX 13335 1245184 61440 61440 NT_STATUS_OK
ReadX 13335 1306624 4096 4096 NT_STATUS_OK
ReadX 13335 1310720 61440 61440 NT_STATUS_OK
ReadX 13335 1372160 4096 4096 NT_STATUS_OK
ReadX 13335 1376256 61440 61440 NT_STATUS_OK
ReadX 13335 1437696 4096 4096 NT_STATUS_OK
ReadX 13335 1441792 61440 61440 NT_STATUS_OK
ReadX 13335 1503232 4096 4096 NT_STATUS_OK
ReadX 13335 1507328 61440 61440 NT_STATUS_OK
ReadX 13335 1568768 4096 4096 NT_STATUS_OK
ReadX 13335 1572864 61440 61440 NT_STATUS_OK
ReadX 13335 1634304 4096 4096 NT_STATUS_OK
ReadX 13335 1638400 61440 61440 NT_STATUS_OK
ReadX 13335 1699840 4096 4096 NT_STATUS_OK
ReadX 13335 1703936 61440 61440 NT_STATUS_OK
ReadX 13335 1765376 4096 4096 NT_STATUS_OK
ReadX 13335 1769472 61440 61440 NT_STATUS_OK
ReadX 13335 1830912 4096 4096 NT_STATUS_OK
ReadX 13335 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13342 NT_STATUS_OK
QUERY_FILE_INFORMATION 13342 1004 NT_STATUS_OK
WriteX 13342 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13342 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13344 NT_STATUS_OK
WriteX 13344 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13344 258 NT_STATUS_OK
WriteX 13344 0 491 491 NT_STATUS_OK
Close 13344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13342 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13348 NT_STATUS_OK
WriteX 13348 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13348 258 NT_STATUS_OK
WriteX 13348 0 543 543 NT_STATUS_OK
Close 13348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Close 13337 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Close 13339 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13362 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 1004 NT_STATUS_OK
WriteX 13362 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
WriteX 13362 0 2048 2048 NT_STATUS_OK
Close 13362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13363 0 4096 4096 NT_STATUS_OK
Flush 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13363 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13368 NT_STATUS_OK
WriteX 13368 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 258 NT_STATUS_OK
WriteX 13368 0 2048 2048 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13373 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13374 NT_STATUS_OK
WriteX 13374 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13374 258 NT_STATUS_OK
WriteX 13374 0 2048 2048 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 2048 2048 NT_STATUS_OK
ReadX 13353 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13369 0 4096 4096 NT_STATUS_OK
WriteX 13353 0 8192 8192 NT_STATUS_OK
WriteX 13354 0 4096 4096 NT_STATUS_OK
WriteX 13355 0 4096 4096 NT_STATUS_OK
ReadX 13369 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13378 NT_STATUS_OK
ReadX 13378 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13379 NT_STATUS_OK
QUERY_FILE_INFORMATION 13379 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13399 NT_STATUS_OK
QUERY_FILE_INFORMATION 13399 1004 NT_STATUS_OK
WriteX 13399 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13399 258 NT_STATUS_OK
WriteX 13399 0 2048 2048 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13402 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13407 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 1004 NT_STATUS_OK
WriteX 13407 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 258 NT_STATUS_OK
WriteX 13407 0 2048 2048 NT_STATUS_OK
Close 13407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13400 0 4096 4096 NT_STATUS_OK
Flush 13400 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13400 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13402 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13410 NT_STATUS_OK
WriteX 13410 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13410 258 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13413 NT_STATUS_OK
WriteX 13413 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 258 NT_STATUS_OK
WriteX 13413 0 4096 4096 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13414 0 4096 4096 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13394 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13420 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13421 NT_STATUS_OK
WriteX 13421 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
WriteX 13421 0 2048 2048 NT_STATUS_OK
Close 13421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13433 NT_STATUS_OK
ReadX 13433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13436 NT_STATUS_OK
QUERY_FILE_INFORMATION 13436 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Close 13434 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Close 13435 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Close 13426 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13438 NT_STATUS_OK
QUERY_FILE_INFORMATION 13438 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13458 NT_STATUS_OK
QUERY_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13458 258 NT_STATUS_OK
WriteX 13458 0 2048 2048 NT_STATUS_OK
Close 13458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13470 NT_STATUS_OK
QUERY_FILE_INFORMATION 13470 1004 NT_STATUS_OK
WriteX 13470 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13470 258 NT_STATUS_OK
WriteX 13470 0 2048 2048 NT_STATUS_OK
Close 13470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13478 NT_STATUS_OK
QUERY_FILE_INFORMATION 13478 1004 NT_STATUS_OK
WriteX 13478 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13478 258 NT_STATUS_OK
WriteX 13478 0 2048 2048 NT_STATUS_OK
Close 13478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13459 0 4096 4096 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
WriteX 13471 0 4096 4096 NT_STATUS_OK
Flush 13471 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Flush 13479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13471 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13461 4096 16384 16384 NT_STATUS_OK
ReadX 13441 4096 16384 16384 NT_STATUS_OK
ReadX 13473 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13480 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 2048 2048 NT_STATUS_OK
WriteX 13481 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13482 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13473 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13442 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13484 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13486 NT_STATUS_OK
QUERY_FILE_INFORMATION 13486 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13489 4096 16384 16384 NT_STATUS_OK
WriteX 13489 0 4096 4096 NT_STATUS_OK
WriteX 13490 0 4096 4096 NT_STATUS_OK
WriteX 13491 0 4096 4096 NT_STATUS_OK
WriteX 13492 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13505 NT_STATUS_OK
ReadX 13505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 8192 8192 NT_STATUS_OK
ReadX 13495 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13509 0 4096 4096 NT_STATUS_OK
ReadX 13509 4096 4096 4096 NT_STATUS_OK
ReadX 13509 8192 4096 4096 NT_STATUS_OK
WriteX 13495 0 4096 4096 NT_STATUS_OK
WriteX 13496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
ReadX 13510 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13489 0 4096 4096 NT_STATUS_OK
WriteX 13490 0 4096 4096 NT_STATUS_OK
WriteX 13491 0 4096 4096 NT_STATUS_OK
WriteX 13492 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13515 NT_STATUS_OK
QUERY_FILE_INFORMATION 13515 1004 NT_STATUS_OK
WriteX 13515 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13515 258 NT_STATUS_OK
WriteX 13515 0 2048 2048 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
ReadX 13518 4096 4096 4096 NT_STATUS_OK
WriteX 13518 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13520 NT_STATUS_OK
ReadX 13520 0 4096 4096 NT_STATUS_OK
ReadX 13520 4096 4096 4096 NT_STATUS_OK
WriteX 13520 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13521 NT_STATUS_OK
QUERY_FILE_INFORMATION 13521 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Close 13490 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13506 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Close 13507 NT_STATUS_OK
Close 13495 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Close 13520 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13523 0 4096 4096 NT_STATUS_OK
ReadX 13523 4096 4096 4096 NT_STATUS_OK
ReadX 13523 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13529 NT_STATUS_OK
ReadX 13529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13530 NT_STATUS_OK
ReadX 13530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 0 4096 4096 NT_STATUS_OK
ReadX 13524 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13541 NT_STATUS_OK
QUERY_FILE_INFORMATION 13541 1004 NT_STATUS_OK
WriteX 13541 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13541 258 NT_STATUS_OK
WriteX 13541 0 2048 2048 NT_STATUS_OK
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13547 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1004 NT_STATUS_OK
WriteX 13547 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 258 NT_STATUS_OK
WriteX 13547 0 2048 2048 NT_STATUS_OK
Close 13547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13531 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13549 NT_STATUS_OK
QUERY_FILE_INFORMATION 13549 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Close 13529 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13551 NT_STATUS_OK
QUERY_FILE_INFORMATION 13551 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 61440 4096 4096 NT_STATUS_OK
ReadX 13553 126976 4096 4096 NT_STATUS_OK
WriteX 13553 0 65536 65536 NT_STATUS_OK
WriteX 13553 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 61440 4096 4096 NT_STATUS_OK
ReadX 13554 126976 4096 4096 NT_STATUS_OK
ReadX 13554 192512 4096 4096 NT_STATUS_OK
ReadX 13554 258048 4096 4096 NT_STATUS_OK
WriteX 13554 0 65536 65536 NT_STATUS_OK
WriteX 13554 65536 65536 65536 NT_STATUS_OK
WriteX 13554 131072 65536 65536 NT_STATUS_OK
WriteX 13554 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 61440 4096 4096 NT_STATUS_OK
ReadX 13555 126976 4096 4096 NT_STATUS_OK
ReadX 13555 192512 4096 4096 NT_STATUS_OK
ReadX 13555 258048 4096 4096 NT_STATUS_OK
ReadX 13555 323584 4096 4096 NT_STATUS_OK
ReadX 13555 389120 4096 4096 NT_STATUS_OK
ReadX 13555 454656 4096 4096 NT_STATUS_OK
ReadX 13555 520192 4096 4096 NT_STATUS_OK
WriteX 13555 0 65536 65536 NT_STATUS_OK
WriteX 13555 65536 65536 65536 NT_STATUS_OK
WriteX 13555 131072 65536 65536 NT_STATUS_OK
WriteX 13555 196608 65536 65536 NT_STATUS_OK
WriteX 13555 262144 65536 65536 NT_STATUS_OK
WriteX 13555 327680 65536 65536 NT_STATUS_OK
WriteX 13555 393216 65536 65536 NT_STATUS_OK
WriteX 13555 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13556 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13556 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13556 8192 4096 4096 NT_STATUS_OK
ReadX 13556 12288 4096 4096 NT_STATUS_OK
ReadX 13556 16384 4096 4096 NT_STATUS_OK
ReadX 13556 20480 4096 4096 NT_STATUS_OK
ReadX 13556 24576 4096 4096 NT_STATUS_OK
ReadX 13556 28672 4096 4096 NT_STATUS_OK
ReadX 13556 32768 4096 4096 NT_STATUS_OK
ReadX 13556 36864 4096 4096 NT_STATUS_OK
ReadX 13556 40960 4096 4096 NT_STATUS_OK
ReadX 13556 45056 4096 4096 NT_STATUS_OK
ReadX 13556 49152 4096 4096 NT_STATUS_OK
ReadX 13556 53248 4096 4096 NT_STATUS_OK
ReadX 13556 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13556 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13557 NT_STATUS_OK
Close 13557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13559 NT_STATUS_OK
WriteX 13559 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13559 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13559 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13559 1004 NT_STATUS_OK
WriteX 13559 0 57088 57088 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
Flush 13559 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13560 NT_STATUS_OK
SET_FILE_INFORMATION 13560 1004 NT_STATUS_OK
Close 13560 NT_STATUS_OK
SET_FILE_INFORMATION 13559 1004 NT_STATUS_OK
WriteX 13559 0 4096 4096 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13563 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13564 NT_STATUS_OK
WriteX 13564 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13564 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13564 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13564 1004 NT_STATUS_OK
WriteX 13564 0 51456 51456 NT_STATUS_OK
WriteX 13564 0 4096 4096 NT_STATUS_OK
Flush 13564 NT_STATUS_OK
SET_FILE_INFORMATION 13564 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13564 1004 NT_STATUS_OK
WriteX 13564 0 4096 4096 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13566 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13568 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13573 NT_STATUS_OK
WriteX 13573 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13573 258 NT_STATUS_OK
WriteX 13573 0 53077 53077 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13574 NT_STATUS_OK
WriteX 13574 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13574 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13574 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13574 1004 NT_STATUS_OK
WriteX 13574 0 65536 65536 NT_STATUS_OK
WriteX 13574 65536 1856 1856 NT_STATUS_OK
WriteX 13574 0 4096 4096 NT_STATUS_OK
Flush 13574 NT_STATUS_OK
SET_FILE_INFORMATION 13574 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13574 1004 NT_STATUS_OK
WriteX 13574 0 4096 4096 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13576 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13580 NT_STATUS_OK
Close 13580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13583 NT_STATUS_OK
WriteX 13583 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13583 258 NT_STATUS_OK
WriteX 13583 0 7983 7983 NT_STATUS_OK
Close 13583 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13585 NT_STATUS_OK
Close 13585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13588 NT_STATUS_OK
WriteX 13588 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13588 258 NT_STATUS_OK
WriteX 13588 0 65536 65536 NT_STATUS_OK
WriteX 13588 65536 65536 65536 NT_STATUS_OK
WriteX 13588 131072 65536 65536 NT_STATUS_OK
WriteX 13588 196608 65536 65536 NT_STATUS_OK
WriteX 13588 262144 65536 65536 NT_STATUS_OK
WriteX 13588 327680 65536 65536 NT_STATUS_OK
WriteX 13588 393216 65536 65536 NT_STATUS_OK
WriteX 13588 458752 46731 46731 NT_STATUS_OK
Close 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13589 NT_STATUS_OK
WriteX 13589 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13589 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13578 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13589 1004 NT_STATUS_OK
WriteX 13589 0 65536 65536 NT_STATUS_OK
WriteX 13589 65536 22848 22848 NT_STATUS_OK
WriteX 13589 0 4096 4096 NT_STATUS_OK
Flush 13589 NT_STATUS_OK
SET_FILE_INFORMATION 13589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13589 1004 NT_STATUS_OK
WriteX 13589 0 4096 4096 NT_STATUS_OK
Close 13589 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13591 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13593 NT_STATUS_OK
ReadX 13593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13593 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13594 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13594 1004 NT_STATUS_OK
ReadX 13594 8192 4096 4096 NT_STATUS_OK
ReadX 13594 12288 4096 4096 NT_STATUS_OK
ReadX 13594 16384 4096 4096 NT_STATUS_OK
ReadX 13594 20480 4096 4096 NT_STATUS_OK
ReadX 13594 24576 4096 4096 NT_STATUS_OK
ReadX 13594 28672 4096 4096 NT_STATUS_OK
ReadX 13594 32768 4096 4096 NT_STATUS_OK
ReadX 13594 36864 4096 4096 NT_STATUS_OK
ReadX 13594 40960 4096 4096 NT_STATUS_OK
ReadX 13594 45056 4096 4096 NT_STATUS_OK
ReadX 13594 49152 4096 4096 NT_STATUS_OK
ReadX 13594 53248 4096 4096 NT_STATUS_OK
ReadX 13594 57344 4096 4096 NT_STATUS_OK
ReadX 13594 61440 4096 4096 NT_STATUS_OK
ReadX 13594 65536 4096 4096 NT_STATUS_OK
ReadX 13594 69632 4096 4096 NT_STATUS_OK
ReadX 13594 73728 4096 4096 NT_STATUS_OK
ReadX 13594 77824 4096 4096 NT_STATUS_OK
ReadX 13594 81920 4096 4096 NT_STATUS_OK
ReadX 13594 86016 4096 4096 NT_STATUS_OK
ReadX 13594 90112 4096 4096 NT_STATUS_OK
ReadX 13594 94208 4096 4096 NT_STATUS_OK
ReadX 13594 98304 4096 4096 NT_STATUS_OK
ReadX 13594 102400 4096 4096 NT_STATUS_OK
ReadX 13594 106496 4096 4096 NT_STATUS_OK
ReadX 13594 110592 4096 4096 NT_STATUS_OK
ReadX 13594 114688 4096 4096 NT_STATUS_OK
ReadX 13594 118784 4096 4096 NT_STATUS_OK
ReadX 13594 122880 4096 4096 NT_STATUS_OK
ReadX 13594 126976 4096 4096 NT_STATUS_OK
ReadX 13594 131072 4096 4096 NT_STATUS_OK
ReadX 13594 135168 4096 4096 NT_STATUS_OK
ReadX 13594 139264 4096 4096 NT_STATUS_OK
ReadX 13594 143360 4096 4096 NT_STATUS_OK
ReadX 13594 147456 4096 4096 NT_STATUS_OK
ReadX 13594 151552 4096 4096 NT_STATUS_OK
ReadX 13594 155648 4096 4096 NT_STATUS_OK
ReadX 13594 159744 4096 4096 NT_STATUS_OK
ReadX 13594 163840 4096 4096 NT_STATUS_OK
ReadX 13594 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13594 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13595 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13597 NT_STATUS_OK
WriteX 13597 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13597 258 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13598 NT_STATUS_OK
SET_FILE_INFORMATION 13598 1004 NT_STATUS_OK
Close 13598 NT_STATUS_OK
WriteX 13597 0 42388 42388 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
ReadX 13601 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13602 NT_STATUS_OK
WriteX 13602 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
SET_FILE_INFORMATION 13602 1004 NT_STATUS_OK
WriteX 13602 0 42652 42652 NT_STATUS_OK
Close 13602 NT_STATUS_OK
Close 13601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 0 4096 4096 NT_STATUS_OK
ReadX 13606 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13611 NT_STATUS_OK
WriteX 13611 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13611 258 NT_STATUS_OK
WriteX 13611 0 65536 65536 NT_STATUS_OK
WriteX 13611 65536 49 49 NT_STATUS_OK
Close 13611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13612 NT_STATUS_OK
ReadX 13612 0 61440 61440 NT_STATUS_OK
ReadX 13612 61440 4096 4096 NT_STATUS_OK
ReadX 13612 65536 61440 61440 NT_STATUS_OK
ReadX 13612 126976 4096 4096 NT_STATUS_OK
ReadX 13612 131072 61440 61440 NT_STATUS_OK
ReadX 13612 192512 4096 4096 NT_STATUS_OK
ReadX 13612 196608 61440 61440 NT_STATUS_OK
ReadX 13612 258048 4096 4096 NT_STATUS_OK
ReadX 13612 262144 61440 61440 NT_STATUS_OK
ReadX 13612 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 61440 61440 NT_STATUS_OK
ReadX 13613 61440 4096 4096 NT_STATUS_OK
ReadX 13613 65536 61440 61440 NT_STATUS_OK
ReadX 13613 126976 4096 4096 NT_STATUS_OK
ReadX 13613 131072 61440 61440 NT_STATUS_OK
ReadX 13613 192512 4096 4096 NT_STATUS_OK
ReadX 13613 196608 61440 61440 NT_STATUS_OK
ReadX 13613 258048 4096 4096 NT_STATUS_OK
ReadX 13613 262144 61440 61440 NT_STATUS_OK
ReadX 13613 323584 4096 4096 NT_STATUS_OK
ReadX 13613 327680 61440 61440 NT_STATUS_OK
ReadX 13613 389120 4096 4096 NT_STATUS_OK
ReadX 13613 393216 61440 61440 NT_STATUS_OK
ReadX 13613 454656 4096 4096 NT_STATUS_OK
ReadX 13613 458752 61440 61440 NT_STATUS_OK
ReadX 13613 520192 4096 4096 NT_STATUS_OK
ReadX 13613 524288 61440 61440 NT_STATUS_OK
ReadX 13613 585728 4096 4096 NT_STATUS_OK
ReadX 13613 589824 61440 61440 NT_STATUS_OK
ReadX 13613 651264 4096 4096 NT_STATUS_OK
ReadX 13613 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 61440 61440 NT_STATUS_OK
ReadX 13614 61440 4096 4096 NT_STATUS_OK
ReadX 13614 65536 61440 61440 NT_STATUS_OK
ReadX 13614 126976 4096 4096 NT_STATUS_OK
ReadX 13614 131072 61440 61440 NT_STATUS_OK
ReadX 13614 192512 4096 4096 NT_STATUS_OK
ReadX 13614 196608 61440 61440 NT_STATUS_OK
ReadX 13614 258048 4096 4096 NT_STATUS_OK
ReadX 13614 262144 61440 61440 NT_STATUS_OK
ReadX 13614 323584 4096 4096 NT_STATUS_OK
ReadX 13614 327680 61440 61440 NT_STATUS_OK
ReadX 13614 389120 4096 4096 NT_STATUS_OK
ReadX 13614 393216 61440 61440 NT_STATUS_OK
ReadX 13614 454656 4096 4096 NT_STATUS_OK
ReadX 13614 458752 61440 61440 NT_STATUS_OK
ReadX 13614 520192 4096 4096 NT_STATUS_OK
ReadX 13614 524288 61440 61440 NT_STATUS_OK
ReadX 13614 585728 4096 4096 NT_STATUS_OK
ReadX 13614 589824 61440 61440 NT_STATUS_OK
ReadX 13614 651264 4096 4096 NT_STATUS_OK
ReadX 13614 655360 61440 61440 NT_STATUS_OK
ReadX 13614 716800 4096 4096 NT_STATUS_OK
ReadX 13614 720896 61440 61440 NT_STATUS_OK
ReadX 13614 782336 4096 4096 NT_STATUS_OK
ReadX 13614 786432 61440 61440 NT_STATUS_OK
ReadX 13614 847872 4096 4096 NT_STATUS_OK
ReadX 13614 851968 61440 61440 NT_STATUS_OK
ReadX 13614 913408 4096 4096 NT_STATUS_OK
ReadX 13614 917504 61440 61440 NT_STATUS_OK
ReadX 13614 978944 4096 4096 NT_STATUS_OK
ReadX 13614 983040 61440 61440 NT_STATUS_OK
ReadX 13614 1044480 4096 4096 NT_STATUS_OK
ReadX 13614 1048576 61440 61440 NT_STATUS_OK
ReadX 13614 1110016 4096 4096 NT_STATUS_OK
ReadX 13614 1114112 61440 61440 NT_STATUS_OK
ReadX 13614 1175552 4096 4096 NT_STATUS_OK
ReadX 13614 1179648 61440 61440 NT_STATUS_OK
ReadX 13614 1241088 4096 4096 NT_STATUS_OK
ReadX 13614 1245184 61440 61440 NT_STATUS_OK
ReadX 13614 1306624 4096 4096 NT_STATUS_OK
ReadX 13614 1310720 61440 61440 NT_STATUS_OK
ReadX 13614 1372160 4096 4096 NT_STATUS_OK
ReadX 13614 1376256 61440 61440 NT_STATUS_OK
ReadX 13614 1437696 4096 4096 NT_STATUS_OK
ReadX 13614 1441792 61440 61440 NT_STATUS_OK
ReadX 13614 1503232 4096 4096 NT_STATUS_OK
ReadX 13614 1507328 61440 61440 NT_STATUS_OK
ReadX 13614 1568768 4096 4096 NT_STATUS_OK
ReadX 13614 1572864 61440 61440 NT_STATUS_OK
ReadX 13614 1634304 4096 4096 NT_STATUS_OK
ReadX 13614 1638400 61440 61440 NT_STATUS_OK
ReadX 13614 1699840 4096 4096 NT_STATUS_OK
ReadX 13614 1703936 61440 61440 NT_STATUS_OK
ReadX 13614 1765376 4096 4096 NT_STATUS_OK
ReadX 13614 1769472 61440 61440 NT_STATUS_OK
ReadX 13614 1830912 4096 4096 NT_STATUS_OK
ReadX 13614 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13616 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1005 NT_STATUS_OK
ReadX 13616 2156 24 24 NT_STATUS_OK
ReadX 13616 2139 276 276 NT_STATUS_OK
ReadX 13616 2136 14 14 NT_STATUS_OK
ReadX 13616 2136 7 7 NT_STATUS_OK
ReadX 13616 2138 12 12 NT_STATUS_OK
ReadX 13616 2137 8 8 NT_STATUS_OK
ReadX 13616 2135 15 15 NT_STATUS_OK
ReadX 13616 0 16 16 NT_STATUS_OK
ReadX 13616 16 2048 2048 NT_STATUS_OK
ReadX 13616 2064 2048 2048 NT_STATUS_OK
ReadX 13616 257 2048 2048 NT_STATUS_OK
ReadX 13616 385 2048 2048 NT_STATUS_OK
ReadX 13616 513 2048 2048 NT_STATUS_OK
ReadX 13616 641 2048 2048 NT_STATUS_OK
ReadX 13616 769 2048 2048 NT_STATUS_OK
ReadX 13616 897 2048 2048 NT_STATUS_OK
ReadX 13616 1025 2048 2048 NT_STATUS_OK
ReadX 13616 1153 2048 2048 NT_STATUS_OK
ReadX 13616 1281 2048 2048 NT_STATUS_OK
ReadX 13616 1409 2048 2048 NT_STATUS_OK
ReadX 13616 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13614 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13621 NT_STATUS_OK
WriteX 13621 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13621 258 NT_STATUS_OK
WriteX 13621 0 10575 10575 NT_STATUS_OK
Flush 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13626 NT_STATUS_OK
LockX 13626 2147483538 1 NT_STATUS_OK
UnlockX 13626 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1005 NT_STATUS_OK
ReadX 13626 0 512 512 NT_STATUS_OK
ReadX 13626 512 512 512 NT_STATUS_OK
ReadX 13626 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
Close 13626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13627 NT_STATUS_OK
QUERY_FILE_INFORMATION 13627 1005 NT_STATUS_OK
ReadX 13627 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13628 NT_STATUS_OK
LockX 13628 2147483538 1 NT_STATUS_OK
UnlockX 13628 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13628 1005 NT_STATUS_OK
ReadX 13628 0 512 512 NT_STATUS_OK
ReadX 13628 512 512 512 NT_STATUS_OK
ReadX 13628 1024 512 512 NT_STATUS_OK
ReadX 13628 288 20 20 NT_STATUS_OK
ReadX 13628 308 2084 2084 NT_STATUS_OK
ReadX 13628 388 2084 2084 NT_STATUS_OK
ReadX 13628 388 2084 2084 NT_STATUS_OK
ReadX 13615 2157 1386 1386 NT_STATUS_OK
ReadX 13628 2472 399 399 NT_STATUS_OK
ReadX 13628 3072 1536 1536 NT_STATUS_OK
ReadX 13628 544 149 149 NT_STATUS_OK
ReadX 13628 693 485 485 NT_STATUS_OK
Close 13628 NT_STATUS_OK
ReadX 13615 2157 4096 4096 NT_STATUS_OK
ReadX 13615 6253 4096 4096 NT_STATUS_OK
ReadX 13615 10349 4096 4096 NT_STATUS_OK
ReadX 13615 14445 4096 4096 NT_STATUS_OK
ReadX 13615 18541 4096 4096 NT_STATUS_OK
ReadX 13615 22637 256 256 NT_STATUS_OK
ReadX 13615 22893 4096 4096 NT_STATUS_OK
ReadX 13615 26989 4096 4096 NT_STATUS_OK
ReadX 13615 31085 4096 4096 NT_STATUS_OK
ReadX 13615 35181 4096 4096 NT_STATUS_OK
ReadX 13615 39277 4096 4096 NT_STATUS_OK
ReadX 13615 43373 4096 4096 NT_STATUS_OK
ReadX 13615 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13615 2157 1024 1024 NT_STATUS_OK
ReadX 13615 1667 4688 4688 NT_STATUS_OK
ReadX 13615 6355 3516 3516 NT_STATUS_OK
ReadX 13615 9871 16384 16384 NT_STATUS_OK
ReadX 13615 26255 3771 3771 NT_STATUS_OK
ReadX 13615 30026 2048 2048 NT_STATUS_OK
ReadX 13615 32074 1024 1024 NT_STATUS_OK
ReadX 13615 33098 6652 6652 NT_STATUS_OK
ReadX 13615 39750 16384 16384 NT_STATUS_OK
ReadX 13615 56134 10496 10496 NT_STATUS_OK
ReadX 13615 66630 1784 1784 NT_STATUS_OK
ReadX 13615 68414 90 90 NT_STATUS_OK
ReadX 13615 68504 273 273 NT_STATUS_OK
ReadX 13615 68777 1600 1600 NT_STATUS_OK
ReadX 13615 70377 640 640 NT_STATUS_OK
ReadX 13615 71017 1280 1280 NT_STATUS_OK
ReadX 13615 72297 8464 8464 NT_STATUS_OK
ReadX 13615 80761 158 158 NT_STATUS_OK
ReadX 13615 80919 912 912 NT_STATUS_OK
ReadX 13615 81831 1980 1980 NT_STATUS_OK
ReadX 13615 83811 2256 2256 NT_STATUS_OK
ReadX 13615 86067 400 400 NT_STATUS_OK
ReadX 13615 86467 252 252 NT_STATUS_OK
ReadX 13615 86719 42 42 NT_STATUS_OK
ReadX 13615 86761 725 725 NT_STATUS_OK
ReadX 13615 2009 512 512 NT_STATUS_OK
ReadX 13615 3895 9 9 NT_STATUS_OK
ReadX 13615 3781 46 46 NT_STATUS_OK
ReadX 13615 4059 92 92 NT_STATUS_OK
ReadX 13615 3781 92 92 NT_STATUS_OK
ReadX 13615 3986 184 184 NT_STATUS_OK
ReadX 13615 3987 16384 16384 NT_STATUS_OK
ReadX 13615 3902 16384 16384 NT_STATUS_OK
ReadX 13615 3781 10240 10240 NT_STATUS_OK
ReadX 13615 3821 16384 16384 NT_STATUS_OK
ReadX 13615 3891 935 935 NT_STATUS_OK
ReadX 13615 4060 10240 10240 NT_STATUS_OK
ReadX 13615 4059 184 184 NT_STATUS_OK
ReadX 13615 256 184 184 NT_STATUS_OK
ReadX 13615 256 1026 1026 NT_STATUS_OK
ReadX 13615 3901 326 326 NT_STATUS_OK
ReadX 13615 3899 652 652 NT_STATUS_OK
ReadX 13615 256 2 2 NT_STATUS_OK
ReadX 13615 258 4948 4948 NT_STATUS_OK
Close 13615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13633 NT_STATUS_OK
WriteX 13633 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13633 258 NT_STATUS_OK
WriteX 13633 0 65536 65536 NT_STATUS_OK
WriteX 13633 65536 65536 65536 NT_STATUS_OK
WriteX 13633 131072 65536 65536 NT_STATUS_OK
WriteX 13633 196608 65536 65536 NT_STATUS_OK
WriteX 13633 262144 65536 65536 NT_STATUS_OK
WriteX 13633 327680 65536 65536 NT_STATUS_OK
WriteX 13633 393216 65536 65536 NT_STATUS_OK
WriteX 13633 458752 65536 65536 NT_STATUS_OK
WriteX 13633 524288 65536 65536 NT_STATUS_OK
WriteX 13633 589824 35257 35257 NT_STATUS_OK
Close 13633 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13638 NT_STATUS_OK
WriteX 13638 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 258 NT_STATUS_OK
WriteX 13638 0 65536 65536 NT_STATUS_OK
WriteX 13638 65536 65536 65536 NT_STATUS_OK
WriteX 13638 131072 65536 65536 NT_STATUS_OK
WriteX 13638 196608 65536 65536 NT_STATUS_OK
WriteX 13638 262144 65536 65536 NT_STATUS_OK
WriteX 13638 327680 65536 65536 NT_STATUS_OK
WriteX 13638 393216 65536 65536 NT_STATUS_OK
WriteX 13638 458752 65536 65536 NT_STATUS_OK
WriteX 13638 524288 65536 65536 NT_STATUS_OK
WriteX 13638 589824 57598 57598 NT_STATUS_OK
Close 13638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13640 NT_STATUS_OK
WriteX 13640 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13640 258 NT_STATUS_OK
WriteX 13640 0 12543 12543 NT_STATUS_OK
Flush 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13644 NT_STATUS_OK
ReadX 13644 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13646 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1005 NT_STATUS_OK
ReadX 13646 1938 24 24 NT_STATUS_OK
ReadX 13646 1920 276 276 NT_STATUS_OK
ReadX 13646 1918 14 14 NT_STATUS_OK
ReadX 13646 1918 7 7 NT_STATUS_OK
ReadX 13646 1919 12 12 NT_STATUS_OK
ReadX 13646 1919 8 8 NT_STATUS_OK
ReadX 13646 1917 15 15 NT_STATUS_OK
ReadX 13646 0 16 16 NT_STATUS_OK
ReadX 13646 16 2048 2048 NT_STATUS_OK
ReadX 13646 2064 2048 2048 NT_STATUS_OK
ReadX 13646 257 2048 2048 NT_STATUS_OK
ReadX 13646 385 2048 2048 NT_STATUS_OK
ReadX 13646 513 2048 2048 NT_STATUS_OK
ReadX 13646 641 2048 2048 NT_STATUS_OK
ReadX 13646 769 2048 2048 NT_STATUS_OK
ReadX 13646 897 2048 2048 NT_STATUS_OK
ReadX 13646 1025 2048 2048 NT_STATUS_OK
ReadX 13646 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13651 NT_STATUS_OK
WriteX 13651 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13651 258 NT_STATUS_OK
WriteX 13651 0 11588 11588 NT_STATUS_OK
Flush 13651 NT_STATUS_OK
Close 13651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13652 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
Close 13646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13656 NT_STATUS_OK
WriteX 13656 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13656 258 NT_STATUS_OK
WriteX 13656 0 11615 11615 NT_STATUS_OK
Flush 13656 NT_STATUS_OK
Close 13656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13665 NT_STATUS_OK
WriteX 13665 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 258 NT_STATUS_OK
WriteX 13665 0 65536 65536 NT_STATUS_OK
WriteX 13665 65536 16050 16050 NT_STATUS_OK
Close 13665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13645 1939 64 64 NT_STATUS_OK
ReadX 13645 128 248 248 NT_STATUS_OK
ReadX 13645 128 568 568 NT_STATUS_OK
ReadX 13645 3872 1536 1536 NT_STATUS_OK
ReadX 13645 3456 2560 2560 NT_STATUS_OK
ReadX 13645 3136 512 512 NT_STATUS_OK
ReadX 13645 2880 4096 4096 NT_STATUS_OK
ReadX 13645 3264 3072 3072 NT_STATUS_OK
ReadX 13645 320 4096 4096 NT_STATUS_OK
ReadX 13645 1024 4096 4096 NT_STATUS_OK
ReadX 13645 3616 4096 4096 NT_STATUS_OK
ReadX 13645 1939 64 64 NT_STATUS_OK
ReadX 13645 128 248 248 NT_STATUS_OK
ReadX 13645 128 608 608 NT_STATUS_OK
ReadX 13645 2858 1024 1024 NT_STATUS_OK
ReadX 13645 2810 4096 4096 NT_STATUS_OK
ReadX 13645 2826 4096 4096 NT_STATUS_OK
ReadX 13645 2580 2048 2048 NT_STATUS_OK
ReadX 13645 2800 2560 2560 NT_STATUS_OK
ReadX 13645 2100 4096 4096 NT_STATUS_OK
ReadX 13645 2084 4096 4096 NT_STATUS_OK
ReadX 13645 868 4096 4096 NT_STATUS_OK
ReadX 13645 2324 4096 4096 NT_STATUS_OK
ReadX 13645 884 4096 4096 NT_STATUS_OK
ReadX 13645 2604 1024 1024 NT_STATUS_OK
ReadX 13645 580 4096 4096 NT_STATUS_OK
ReadX 13645 596 4096 4096 NT_STATUS_OK
ReadX 13645 2752 4096 4096 NT_STATUS_OK
ReadX 13645 2842 1024 1024 NT_STATUS_OK
ReadX 13645 660 4096 4096 NT_STATUS_OK
ReadX 13645 2720 4096 4096 NT_STATUS_OK
ReadX 13645 2736 4096 4096 NT_STATUS_OK
ReadX 13645 628 4096 4096 NT_STATUS_OK
ReadX 13645 2704 4096 4096 NT_STATUS_OK
ReadX 13645 1556 4096 4096 NT_STATUS_OK
ReadX 13645 576 4096 4096 NT_STATUS_OK
ReadX 13645 3168 1536 1536 NT_STATUS_OK
ReadX 13645 832 4096 4096 NT_STATUS_OK
ReadX 13645 1088 4096 4096 NT_STATUS_OK
ReadX 13645 1344 4096 4096 NT_STATUS_OK
ReadX 13645 1600 4096 4096 NT_STATUS_OK
ReadX 13645 1856 4096 4096 NT_STATUS_OK
ReadX 13645 2112 4096 4096 NT_STATUS_OK
ReadX 13645 1892 4096 4096 NT_STATUS_OK
ReadX 13645 820 4096 4096 NT_STATUS_OK
ReadX 13645 788 4096 4096 NT_STATUS_OK
ReadX 13645 1604 4096 4096 NT_STATUS_OK
ReadX 13645 3648 4096 4096 NT_STATUS_OK
ReadX 13645 2608 4096 4096 NT_STATUS_OK
ReadX 13645 548 4096 4096 NT_STATUS_OK
ReadX 13645 740 4096 4096 NT_STATUS_OK
ReadX 13645 1344 4096 4096 NT_STATUS_OK
ReadX 13645 3392 4096 4096 NT_STATUS_OK
ReadX 13645 3904 4096 4096 NT_STATUS_OK
ReadX 13645 644 4096 4096 NT_STATUS_OK
ReadX 13645 676 4096 4096 NT_STATUS_OK
ReadX 13645 2688 4096 4096 NT_STATUS_OK
ReadX 13645 320 4096 4096 NT_STATUS_OK
ReadX 13645 900 4096 4096 NT_STATUS_OK
ReadX 13645 1908 4096 4096 NT_STATUS_OK
ReadX 13645 852 4096 4096 NT_STATUS_OK
ReadX 13645 724 4096 4096 NT_STATUS_OK
ReadX 13645 2292 4096 4096 NT_STATUS_OK
ReadX 13645 612 4096 4096 NT_STATUS_OK
ReadX 13645 388 4096 4096 NT_STATUS_OK
ReadX 13645 2368 4096 4096 NT_STATUS_OK
ReadX 13645 2624 4096 4096 NT_STATUS_OK
ReadX 13645 500 4096 4096 NT_STATUS_OK
ReadX 13645 356 4096 4096 NT_STATUS_OK
ReadX 13645 1024 4096 4096 NT_STATUS_OK
ReadX 13645 576 4096 4096 NT_STATUS_OK
ReadX 13645 340 4096 4096 NT_STATUS_OK
ReadX 13645 420 4096 4096 NT_STATUS_OK
ReadX 13645 1600 4096 4096 NT_STATUS_OK
ReadX 13645 404 4096 4096 NT_STATUS_OK
ReadX 13645 1428 4096 4096 NT_STATUS_OK
ReadX 13645 2656 4096 4096 NT_STATUS_OK
ReadX 13645 2624 4096 4096 NT_STATUS_OK
ReadX 13645 452 4096 4096 NT_STATUS_OK
ReadX 13645 692 4096 4096 NT_STATUS_OK
ReadX 13645 564 4096 4096 NT_STATUS_OK
ReadX 13645 372 4096 4096 NT_STATUS_OK
ReadX 13645 468 4096 4096 NT_STATUS_OK
ReadX 13645 484 4096 4096 NT_STATUS_OK
ReadX 13645 1088 4096 4096 NT_STATUS_OK
ReadX 13645 1924 4096 4096 NT_STATUS_OK
ReadX 13645 2768 4096 4096 NT_STATUS_OK
ReadX 13645 832 4096 4096 NT_STATUS_OK
ReadX 13645 836 4096 4096 NT_STATUS_OK
ReadX 13645 1856 4096 4096 NT_STATUS_OK
ReadX 13645 2640 4096 4096 NT_STATUS_OK
ReadX 13645 436 4096 4096 NT_STATUS_OK
ReadX 13645 1828 4096 4096 NT_STATUS_OK
ReadX 13645 804 4096 4096 NT_STATUS_OK
ReadX 13645 1860 4096 4096 NT_STATUS_OK
ReadX 13645 1812 4096 4096 NT_STATUS_OK
ReadX 13645 756 4096 4096 NT_STATUS_OK
ReadX 13645 1636 4096 4096 NT_STATUS_OK
ReadX 13645 772 4096 4096 NT_STATUS_OK
ReadX 13645 2036 4096 4096 NT_STATUS_OK
ReadX 13645 1220 4096 4096 NT_STATUS_OK
ReadX 13645 1652 4096 4096 NT_STATUS_OK
ReadX 13645 2588 4096 4096 NT_STATUS_OK
ReadX 13645 916 4096 4096 NT_STATUS_OK
ReadX 13645 260 4096 4096 NT_STATUS_OK
ReadX 13645 932 4096 4096 NT_STATUS_OK
ReadX 13645 2624 4096 4096 NT_STATUS_OK
ReadX 13645 308 4096 4096 NT_STATUS_OK
ReadX 13645 292 4096 4096 NT_STATUS_OK
ReadX 13645 1140 4096 4096 NT_STATUS_OK
ReadX 13645 276 4096 4096 NT_STATUS_OK
ReadX 13645 2020 4096 4096 NT_STATUS_OK
ReadX 13645 2880 4096 4096 NT_STATUS_OK
ReadX 13645 516 4096 4096 NT_STATUS_OK
ReadX 13645 1844 4096 4096 NT_STATUS_OK
ReadX 13645 1124 4096 4096 NT_STATUS_OK
ReadX 13645 3136 4096 4096 NT_STATUS_OK
ReadX 13645 324 4096 4096 NT_STATUS_OK
ReadX 13645 1156 4096 4096 NT_STATUS_OK
ReadX 13645 1172 4096 4096 NT_STATUS_OK
ReadX 13645 2112 4096 4096 NT_STATUS_OK
ReadX 13645 2368 4096 4096 NT_STATUS_OK
ReadX 13645 964 4096 4096 NT_STATUS_OK
ReadX 13645 980 4096 4096 NT_STATUS_OK
ReadX 13645 1012 4096 4096 NT_STATUS_OK
ReadX 13645 532 4096 4096 NT_STATUS_OK
ReadX 13645 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13645 1620 4096 4096 NT_STATUS_OK
ReadX 13645 1604 4096 4096 NT_STATUS_OK
ReadX 13645 2116 4096 4096 NT_STATUS_OK
ReadX 13645 2132 4096 4096 NT_STATUS_OK
ReadX 13645 2148 4096 4096 NT_STATUS_OK
ReadX 13645 2276 4096 4096 NT_STATUS_OK
ReadX 13645 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13667 NT_STATUS_OK
Close 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13670 NT_STATUS_OK
QUERY_FILE_INFORMATION 13625 1004 NT_STATUS_OK
Close 13625 NT_STATUS_OK
WriteX 13670 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13670 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13627 1004 NT_STATUS_OK
Close 13627 NT_STATUS_OK
WriteX 13670 0 65536 65536 NT_STATUS_OK
WriteX 13670 65536 64850 64850 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13672 NT_STATUS_OK
WriteX 13672 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13672 258 NT_STATUS_OK
ReadX 13645 2068 4096 4096 NT_STATUS_OK
ReadX 13645 1588 4096 4096 NT_STATUS_OK
ReadX 13645 1572 4096 4096 NT_STATUS_OK
WriteX 13672 0 18630 18630 NT_STATUS_OK
Flush 13672 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13645 612 4096 4096 NT_STATUS_OK
ReadX 13645 564 4096 4096 NT_STATUS_OK
ReadX 13645 1876 4096 4096 NT_STATUS_OK
ReadX 13645 628 4096 4096 NT_STATUS_OK
ReadX 13645 740 4096 4096 NT_STATUS_OK
ReadX 13645 724 4096 4096 NT_STATUS_OK
ReadX 13645 644 4096 4096 NT_STATUS_OK
ReadX 13645 2324 4096 4096 NT_STATUS_OK
ReadX 13645 660 4096 4096 NT_STATUS_OK
ReadX 13645 852 4096 4096 NT_STATUS_OK
ReadX 13645 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13645 2368 4096 4096 NT_STATUS_OK
ReadX 13645 1024 4096 4096 NT_STATUS_OK
ReadX 13645 320 4096 4096 NT_STATUS_OK
ReadX 13645 580 4096 4096 NT_STATUS_OK
ReadX 13645 3136 512 512 NT_STATUS_OK
ReadX 13645 2880 4096 4096 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 61440 4096 4096 NT_STATUS_OK
ReadX 13677 126976 4096 4096 NT_STATUS_OK
WriteX 13677 0 65536 65536 NT_STATUS_OK
WriteX 13677 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 61440 4096 4096 NT_STATUS_OK
ReadX 13678 126976 4096 4096 NT_STATUS_OK
ReadX 13678 192512 4096 4096 NT_STATUS_OK
ReadX 13678 258048 4096 4096 NT_STATUS_OK
WriteX 13678 0 65536 65536 NT_STATUS_OK
WriteX 13678 65536 65536 65536 NT_STATUS_OK
WriteX 13678 131072 65536 65536 NT_STATUS_OK
WriteX 13678 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 61440 4096 4096 NT_STATUS_OK
ReadX 13679 126976 4096 4096 NT_STATUS_OK
ReadX 13679 192512 4096 4096 NT_STATUS_OK
ReadX 13679 258048 4096 4096 NT_STATUS_OK
ReadX 13679 323584 4096 4096 NT_STATUS_OK
ReadX 13679 389120 4096 4096 NT_STATUS_OK
ReadX 13679 454656 4096 4096 NT_STATUS_OK
ReadX 13679 520192 4096 4096 NT_STATUS_OK
WriteX 13679 0 65536 65536 NT_STATUS_OK
WriteX 13679 65536 65536 65536 NT_STATUS_OK
WriteX 13679 131072 65536 65536 NT_STATUS_OK
WriteX 13679 196608 65536 65536 NT_STATUS_OK
WriteX 13679 262144 65536 65536 NT_STATUS_OK
WriteX 13679 327680 65536 65536 NT_STATUS_OK
WriteX 13679 393216 65536 65536 NT_STATUS_OK
WriteX 13679 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13681 NT_STATUS_OK
Close 13681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13682 NT_STATUS_OK
WriteX 13682 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13682 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13680 0 8192 8192 NT_STATUS_OK
Flush 13680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13680 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13680 0 8192 8192 NT_STATUS_OK
Flush 13680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13680 0 8192 8192 NT_STATUS_OK
Flush 13680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13680 0 8192 8192 NT_STATUS_OK
Flush 13680 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13676 NT_STATUS_OK
Close 13644 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13687 NT_STATUS_OK
WriteX 13687 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13687 258 NT_STATUS_OK
WriteX 13687 0 62591 62591 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13689 NT_STATUS_OK
Close 13689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13692 NT_STATUS_OK
WriteX 13692 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 10845 10845 NT_STATUS_OK
Close 13692 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13697 NT_STATUS_OK
WriteX 13697 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13697 258 NT_STATUS_OK
WriteX 13697 0 30118 30118 NT_STATUS_OK
Close 13697 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
WriteX 13682 0 64 64 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13699 NT_STATUS_OK
ReadX 13699 0 61440 61440 NT_STATUS_OK
ReadX 13699 61440 4096 4096 NT_STATUS_OK
ReadX 13699 65536 61440 61440 NT_STATUS_OK
ReadX 13699 126976 4096 4096 NT_STATUS_OK
ReadX 13699 131072 61440 61440 NT_STATUS_OK
ReadX 13699 192512 4096 4096 NT_STATUS_OK
ReadX 13699 196608 61440 61440 NT_STATUS_OK
ReadX 13699 258048 4096 4096 NT_STATUS_OK
ReadX 13699 262144 61440 61440 NT_STATUS_OK
ReadX 13699 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13700 NT_STATUS_OK
ReadX 13700 0 61440 61440 NT_STATUS_OK
ReadX 13700 61440 4096 4096 NT_STATUS_OK
ReadX 13700 65536 61440 61440 NT_STATUS_OK
ReadX 13700 126976 4096 4096 NT_STATUS_OK
ReadX 13700 131072 61440 61440 NT_STATUS_OK
ReadX 13700 192512 4096 4096 NT_STATUS_OK
ReadX 13700 196608 61440 61440 NT_STATUS_OK
ReadX 13700 258048 4096 4096 NT_STATUS_OK
ReadX 13700 262144 61440 61440 NT_STATUS_OK
ReadX 13700 323584 4096 4096 NT_STATUS_OK
ReadX 13700 327680 61440 61440 NT_STATUS_OK
ReadX 13700 389120 4096 4096 NT_STATUS_OK
ReadX 13700 393216 61440 61440 NT_STATUS_OK
ReadX 13700 454656 4096 4096 NT_STATUS_OK
ReadX 13700 458752 61440 61440 NT_STATUS_OK
ReadX 13700 520192 4096 4096 NT_STATUS_OK
ReadX 13700 524288 61440 61440 NT_STATUS_OK
ReadX 13700 585728 4096 4096 NT_STATUS_OK
ReadX 13700 589824 61440 61440 NT_STATUS_OK
ReadX 13700 651264 4096 4096 NT_STATUS_OK
ReadX 13700 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13701 NT_STATUS_OK
ReadX 13701 0 61440 61440 NT_STATUS_OK
ReadX 13701 61440 4096 4096 NT_STATUS_OK
ReadX 13701 65536 61440 61440 NT_STATUS_OK
ReadX 13701 126976 4096 4096 NT_STATUS_OK
ReadX 13701 131072 61440 61440 NT_STATUS_OK
ReadX 13701 192512 4096 4096 NT_STATUS_OK
ReadX 13701 196608 61440 61440 NT_STATUS_OK
ReadX 13701 258048 4096 4096 NT_STATUS_OK
ReadX 13701 262144 61440 61440 NT_STATUS_OK
ReadX 13701 323584 4096 4096 NT_STATUS_OK
ReadX 13701 327680 61440 61440 NT_STATUS_OK
ReadX 13701 389120 4096 4096 NT_STATUS_OK
ReadX 13701 393216 61440 61440 NT_STATUS_OK
ReadX 13701 454656 4096 4096 NT_STATUS_OK
ReadX 13701 458752 61440 61440 NT_STATUS_OK
ReadX 13701 520192 4096 4096 NT_STATUS_OK
ReadX 13701 524288 61440 61440 NT_STATUS_OK
ReadX 13701 585728 4096 4096 NT_STATUS_OK
ReadX 13701 589824 61440 61440 NT_STATUS_OK
ReadX 13701 651264 4096 4096 NT_STATUS_OK
ReadX 13701 655360 61440 61440 NT_STATUS_OK
ReadX 13701 716800 4096 4096 NT_STATUS_OK
ReadX 13701 720896 61440 61440 NT_STATUS_OK
ReadX 13701 782336 4096 4096 NT_STATUS_OK
ReadX 13701 786432 61440 61440 NT_STATUS_OK
ReadX 13701 847872 4096 4096 NT_STATUS_OK
ReadX 13701 851968 61440 61440 NT_STATUS_OK
ReadX 13701 913408 4096 4096 NT_STATUS_OK
ReadX 13701 917504 61440 61440 NT_STATUS_OK
ReadX 13701 978944 4096 4096 NT_STATUS_OK
ReadX 13701 983040 61440 61440 NT_STATUS_OK
ReadX 13701 1044480 4096 4096 NT_STATUS_OK
ReadX 13701 1048576 61440 61440 NT_STATUS_OK
ReadX 13701 1110016 4096 4096 NT_STATUS_OK
ReadX 13701 1114112 61440 61440 NT_STATUS_OK
ReadX 13701 1175552 4096 4096 NT_STATUS_OK
ReadX 13701 1179648 61440 61440 NT_STATUS_OK
ReadX 13701 1241088 4096 4096 NT_STATUS_OK
ReadX 13701 1245184 61440 61440 NT_STATUS_OK
ReadX 13701 1306624 4096 4096 NT_STATUS_OK
ReadX 13701 1310720 61440 61440 NT_STATUS_OK
ReadX 13701 1372160 4096 4096 NT_STATUS_OK
ReadX 13701 1376256 61440 61440 NT_STATUS_OK
ReadX 13701 1437696 4096 4096 NT_STATUS_OK
ReadX 13701 1441792 61440 61440 NT_STATUS_OK
ReadX 13701 1503232 4096 4096 NT_STATUS_OK
ReadX 13701 1507328 61440 61440 NT_STATUS_OK
ReadX 13701 1568768 4096 4096 NT_STATUS_OK
ReadX 13701 1572864 61440 61440 NT_STATUS_OK
ReadX 13701 1634304 4096 4096 NT_STATUS_OK
ReadX 13701 1638400 61440 61440 NT_STATUS_OK
ReadX 13701 1699840 4096 4096 NT_STATUS_OK
ReadX 13701 1703936 61440 61440 NT_STATUS_OK
ReadX 13701 1765376 4096 4096 NT_STATUS_OK
ReadX 13701 1769472 61440 61440 NT_STATUS_OK
ReadX 13701 1830912 4096 4096 NT_STATUS_OK
ReadX 13701 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13699 NT_STATUS_OK
Close 13700 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
ReadX 13706 4096 4096 4096 NT_STATUS_OK
ReadX 13706 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13707 NT_STATUS_OK
Close 13707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13705 NT_STATUS_OK
Close 13706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13709 NT_STATUS_OK
ReadX 13709 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13710 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13709 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 8192 8192 NT_STATUS_OK
ReadX 13714 8192 8192 8192 NT_STATUS_OK
ReadX 13714 16384 8192 8192 NT_STATUS_OK
ReadX 13714 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13714 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13719 NT_STATUS_OK
WriteX 13719 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13719 258 NT_STATUS_OK
WriteX 13719 0 10438 10438 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13720 NT_STATUS_OK
Close 13720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13722 NT_STATUS_OK
Close 13722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13723 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13724 NT_STATUS_OK
Close 13724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13725 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13727 NT_STATUS_OK
Close 13727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
ReadX 13728 4096 4096 4096 NT_STATUS_OK
ReadX 13728 8192 4096 4096 NT_STATUS_OK
ReadX 13728 12288 8192 8192 NT_STATUS_OK
ReadX 13728 20480 8192 8192 NT_STATUS_OK
ReadX 13728 28672 8192 8192 NT_STATUS_OK
ReadX 13728 36864 8192 8192 NT_STATUS_OK
ReadX 13728 45056 8192 8192 NT_STATUS_OK
ReadX 13728 53248 8192 8192 NT_STATUS_OK
ReadX 13728 61440 8192 8192 NT_STATUS_OK
ReadX 13728 69632 8192 8192 NT_STATUS_OK
ReadX 13728 77824 8192 8192 NT_STATUS_OK
ReadX 13728 86016 8192 8192 NT_STATUS_OK
ReadX 13728 94208 8192 8192 NT_STATUS_OK
ReadX 13728 102400 8192 8192 NT_STATUS_OK
ReadX 13728 110592 8192 8192 NT_STATUS_OK
ReadX 13728 118784 8192 8192 NT_STATUS_OK
ReadX 13728 126976 8192 8192 NT_STATUS_OK
ReadX 13728 135168 8192 8192 NT_STATUS_OK
ReadX 13728 143360 8192 8192 NT_STATUS_OK
ReadX 13728 151552 8192 8192 NT_STATUS_OK
ReadX 13728 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13730 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13733 NT_STATUS_OK
WriteX 13733 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13733 258 NT_STATUS_OK
WriteX 13733 0 28489 28489 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13736 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13737 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13739 NT_STATUS_OK
ReadX 13739 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 8192 8192 NT_STATUS_OK
ReadX 13740 8192 8192 8192 NT_STATUS_OK
ReadX 13740 16384 8192 8192 NT_STATUS_OK
ReadX 13740 24576 8192 8192 NT_STATUS_OK
ReadX 13740 32768 16384 16384 NT_STATUS_OK
ReadX 13740 49152 8192 8192 NT_STATUS_OK
ReadX 13740 57344 8192 8192 NT_STATUS_OK
ReadX 13740 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13742 NT_STATUS_OK
Close 13742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Close 13739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13745 NT_STATUS_OK
WriteX 13745 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13745 258 NT_STATUS_OK
WriteX 13745 0 29253 29253 NT_STATUS_OK
Close 13745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13752 NT_STATUS_OK
WriteX 13752 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 258 NT_STATUS_OK
WriteX 13752 0 30183 30183 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13753 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13755 NT_STATUS_OK
WriteX 13755 0 510 510 NT_STATUS_OK
WriteX 13755 510 512 512 NT_STATUS_OK
WriteX 13755 1022 510 510 NT_STATUS_OK
WriteX 13755 1532 510 510 NT_STATUS_OK
WriteX 13755 2042 168 168 NT_STATUS_OK
Close 13755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 61440 4096 4096 NT_STATUS_OK
ReadX 13759 126976 4096 4096 NT_STATUS_OK
WriteX 13759 0 65536 65536 NT_STATUS_OK
WriteX 13759 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 61440 4096 4096 NT_STATUS_OK
ReadX 13760 126976 4096 4096 NT_STATUS_OK
ReadX 13760 192512 4096 4096 NT_STATUS_OK
ReadX 13760 258048 4096 4096 NT_STATUS_OK
WriteX 13760 0 65536 65536 NT_STATUS_OK
WriteX 13760 65536 65536 65536 NT_STATUS_OK
WriteX 13760 131072 65536 65536 NT_STATUS_OK
WriteX 13760 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 61440 4096 4096 NT_STATUS_OK
ReadX 13761 126976 4096 4096 NT_STATUS_OK
ReadX 13761 192512 4096 4096 NT_STATUS_OK
ReadX 13761 258048 4096 4096 NT_STATUS_OK
ReadX 13761 323584 4096 4096 NT_STATUS_OK
ReadX 13761 389120 4096 4096 NT_STATUS_OK
ReadX 13761 454656 4096 4096 NT_STATUS_OK
ReadX 13761 520192 4096 4096 NT_STATUS_OK
WriteX 13761 0 65536 65536 NT_STATUS_OK
WriteX 13761 65536 65536 65536 NT_STATUS_OK
WriteX 13761 131072 65536 65536 NT_STATUS_OK
WriteX 13761 196608 65536 65536 NT_STATUS_OK
WriteX 13761 262144 65536 65536 NT_STATUS_OK
WriteX 13761 327680 65536 65536 NT_STATUS_OK
WriteX 13761 393216 65536 65536 NT_STATUS_OK
WriteX 13761 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Close 13759 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13782 NT_STATUS_OK
Close 13782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13811 NT_STATUS_OK
Close 13811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13821 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13827 NT_STATUS_OK
Close 13827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13830 NT_STATUS_OK
WriteX 13830 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13830 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13830 0 65536 65536 NT_STATUS_OK
WriteX 13830 65536 65536 65536 NT_STATUS_OK
WriteX 13830 131072 65536 65536 NT_STATUS_OK
WriteX 13830 196608 65536 65536 NT_STATUS_OK
WriteX 13830 262144 26634 26634 NT_STATUS_OK
Close 13830 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13835 NT_STATUS_OK
Close 13835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
Close 13837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
ReadX 13838 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13852 NT_STATUS_OK
Close 13852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13857 NT_STATUS_OK
Close 13857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13861 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13881 NT_STATUS_OK
Close 13881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13886 NT_STATUS_OK
Close 13886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
Close 13917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13918 NT_STATUS_OK
ReadX 13918 0 4096 4096 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13929 NT_STATUS_OK
Close 13929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13930 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13931 NT_STATUS_OK
ReadX 13931 0 4096 4096 NT_STATUS_OK
Close 13931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13919 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13962 0 4096 4096 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13963 NT_STATUS_OK
ReadX 13963 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 4096 4096 NT_STATUS_OK
ReadX 13964 4096 4096 4096 NT_STATUS_OK
ReadX 13964 8192 4096 4096 NT_STATUS_OK
ReadX 13964 12288 4096 4096 NT_STATUS_OK
ReadX 13964 16384 4096 4096 NT_STATUS_OK
ReadX 13964 20480 4096 4096 NT_STATUS_OK
ReadX 13964 24576 4096 4096 NT_STATUS_OK
ReadX 13964 28672 4096 4096 NT_STATUS_OK
ReadX 13964 32768 4096 4096 NT_STATUS_OK
ReadX 13964 36864 4096 4096 NT_STATUS_OK
ReadX 13964 40960 4096 4096 NT_STATUS_OK
ReadX 13964 45056 4096 4096 NT_STATUS_OK
ReadX 13964 49152 4096 4096 NT_STATUS_OK
ReadX 13964 53248 4096 4096 NT_STATUS_OK
ReadX 13964 57344 4096 4096 NT_STATUS_OK
ReadX 13964 61440 4096 4096 NT_STATUS_OK
ReadX 13964 65536 4096 4096 NT_STATUS_OK
ReadX 13964 69632 4096 4096 NT_STATUS_OK
ReadX 13964 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13964 1004 NT_STATUS_OK
WriteX 13964 0 4096 4096 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13965 NT_STATUS_OK
SET_FILE_INFORMATION 13965 1004 NT_STATUS_OK
Close 13965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13970 NT_STATUS_OK
WriteX 13970 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13970 258 NT_STATUS_OK
WriteX 13970 0 65536 65536 NT_STATUS_OK
WriteX 13970 65536 19979 19979 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
QUERY_FILE_INFORMATION 13971 1004 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
SET_FILE_INFORMATION 13971 1004 NT_STATUS_OK
WriteX 13971 0 4096 4096 NT_STATUS_OK
Flush 13971 NT_STATUS_OK
Close 13971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
Close 13974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
Close 13975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13976 1004 NT_STATUS_OK
WriteX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13979 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\mixfile" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 4 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
Close 13982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 13 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 22 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 3 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\mixfile" 0x40 0x5 13985 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 4 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 7 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 13 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 22 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 3 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\FILLER.*" 260 1366 5 NT_STATUS_OK
WriteX 13985 3 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13985 258 NT_STATUS_OK
WriteX 13985 0 4 4 NT_STATUS_OK
WriteX 13985 4 8 8 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Deltree "\clients\client1" NT_STATUS_OK